RHBA-2020:0655 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 16.0 (Train) for RHEL 8.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the diskimage-builder component:

• Previously, the nouveau kernel module was included in initramfs and conflicted with the nVidia vGPU drivers. As a result, the boot process could hang on RHOSP RHEL8 compute nodes with nVidia vGPU cards and drivers installed.

With this update, nouveau is explicitly omitted from the RHOSP initramfs. (BZ#1750820)

Changes to the openstack-tripleo-heat-templates component:

• Previously, the mesh network infrastructure was configured incorrectly for the message router, QDR, causing the AMQP-1.0 message bus on the Service Telemetry Framework (STF) client to malfunction.

This fix corrects the configuration for the qdrouterd daemon on all overcloud nodes, and the STF client now functions properly. (BZ#1769868)

• With this update, the pcs service now restricts listening to the InternalApi network by default. (BZ#1784222)
• With this update, the in-flight validations include a new variable `ceph_ansible_repo` that validates the source repository for ceph_ansible. (BZ#1805750)
• To allow the neutron_api service to access Placement services on Controller nodes, for example, when you use the Novacontrol role, add the following hieradata configuration to your Controller environment file:

service_config_settings:
placement:
neutron::server::placement::password: <Nova password>
neutron::server::placement::www_authenticate_uri: <Keystone Internal API URL>
neutron::server::placement::project_domain_name: 'Default'
neutron::server::placement::project_name: 'service'
neutron::server::placement::user_domain_name: 'Default'
neutron::server::placement::username: nova
neutron::server::placement::auth_url: <Keystone Internal API URL>
neutron::server::placement::auth_type: 'password'
neutron::server::placement::region_name: <Keystone Region>

For more information about using Puppet to customize hieradata for roles, see https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.0/html-single/advanced_overcloud_customization/index#sect-Customizing_Puppet_Configuration_Data.

Note: This configuration is required when deploying an overcloud with a custom role where Placement is not running on the same nodes as neutron_api. (BZ#1795688)

Changes to the puppet-tripleo component:

• There is a known issue in Red Hat OpenStack Platform 16.0, when nodes that experience a hard shutdown put containers that were previously running into a `Created` state in podman when the node reboots.

As a workaround, you can run the following Ansible command to clean all haproxy containers in the `Created` state:

`ansible -b <nodes> -i /usr/bin/tripleo-ansible-inventory -m shell -a "podman ps -a --format {{'{{'}}.ID{{'}}'}} -f name=haproxy,status=created | xargs podman rm -f || :"`

Replace `<nodes>` with a single host from the inventory, a group of hosts, or `all`. After you run this command, the metadata-agent spawns a new container for the given network. (BZ#1797892)

Changes to the python-paunch component:

• There is a known issue where Mistral containers do not restart during minor updates and the update prepare times out after 10 hours.

The workaround is to restart the containers manually. (BZ#1802573)

Changes to the tripleo-ansible component:

• Previously, Red Hat OpenStack Platform (RHOSP) 16.0 overcloud deployments failed when the Load-Balancing service (octavia) was configured with a composable role. With this update, overcloud deployments complete successfully when octavia uses a composable role. (BZ#1794328)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 16 runs on Red Hat Enterprise Linux 8.1.

The Red Hat OpenStack Platform 16 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 16, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 16 ppc64le
• Red Hat OpenStack 16 for RHEL 8 x86_64
• Red Hat OpenStack Director Deployment Tools 16 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 16 ppc64le

Fixes

• BZ - 1769868 - OSP 16 | Service Assurance | qdr mesh patch broke qdr connector configuration. Seems like only puppet side of the change went to OSP16
• BZ - 1778814 - [OSP16] deleted instances in multi cellv2 environment won't get archived/purged
• BZ - 1778881 - Sorry, user {cinder,nova,heat} is not allowed to execute '/usr/sbin/ss -ntuap' as ... on controller-0.
• BZ - 1784222 - pcsd is listening on all networks available including external networks
• BZ - 1787592 - [OSP16]Sriov minor update fails in controllers
• BZ - 1791610 - HA deployment making use of PacemakerRemote for any HA role fails with ' /etc/corosync/corosync.conf is not a valid volume source'
• BZ - 1792417 - HA routers not cleaned properly
• BZ - 1792883 - healthcheck in clustercheck container doesn't work with ipv6
• BZ - 1793910 - OSP16 | Service Assurance | Fixing typo in qdr-edge-only.yaml template
• BZ - 1793986 - The Ceph Dashboard is deployed using the wrong grafana image
• BZ - 1794012 - Ansible consumes a large amount of CPU and RAM resources when running the update /etc/hosts task on a scale deployment
• BZ - 1794328 - Octavia Composable role job failing - podman "you must provide at least one name or id"
• BZ - 1795688 - [RHOS 16][Novacontrol] OC deployment fails with "ERROR configuring neutron"
• BZ - 1797892 - neutron-haproxy-ovnmeta containers are not up after compute node restarted
• BZ - 1801763 - Network unreachable after minor update: unable to pull rhosp16-openstack-neutron-metadata-agent-ovn image
• BZ - 1802573 - overcloud update prepare times out as mistral-executor and mistral-event-engine fail to be restarted during undercloud update.
• BZ - 1802827 - predeployed server deployment fails because rsync is missing on nodes
• BZ - 1803718 - Overcloud update converge fails when updating Octavia to OSP 16 z1 candidate
• BZ - 1804572 - Puddle RHOS_TRUNK-16.0-RHEL-8-20200219.n.0 breaks during UC installation (Property RootStackName not assigned)
• BZ - 1805733 - Add the right ceph_ansible_repo variable on tripleo-validations
• BZ - 1805750 - Add a parameter on tht to override the ceph_ansible_repo variable

CVEs

(none)

References

(none)