RHBA-2020:0770 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

Changes to the openstack-neutron component:

• This update fixes a condition that sometimes generated error messages during rapid updates to certain resource types.

The OpenStack database field that ensures ordered application of changes sometimes got out of sync, causing the generation of error messages such as "StaleDataError: UPDATE statement on table 'standardattributes' expected to update 1 row(s); 0 were matched."
Updates are now made in bulk, so the error should not be generated even in extremely rapid update scenarios. (BZ#1776950)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.7.

The Red Hat OpenStack Platform 13 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 13, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack 13 x86_64

Fixes

• BZ - 1565563 - OVN L3HA - Not rescheduling gateways upon chassis addition can lead to routers not being in HA
• BZ - 1688323 - Namespace isolation fails due to race on neutron
• BZ - 1736854 - Trunk subports sometimes not becoming ACTIVE and trunk:subport
• BZ - 1737432 - OSP13 OVN- Rally NeutronNetworks.create_and_list_ports test failed
• BZ - 1752110 - Enhance Octavia error message when PKCS12 is encrypted with key
• BZ - 1760122 - brownfield upgrades fail on public VIP allocation
• BZ - 1761389 - external gateway connectivity lost when adding external subnets
• BZ - 1762849 - Neutron DHCP agent timeout when spawning neutron networks and subnets
• BZ - 1765640 - Creating a trunk with many subports is really slow
• BZ - 1766410 - [OVN] A stale ports in ovn-northd
• BZ - 1766575 - [OVN] After minor update from OSP13z8 to a puddle with Port Groups & OVS 2.11, Port Groups migration didn't happen
• BZ - 1769249 - OSP 13 functional tests fail when using Port Groups table
• BZ - 1770931 - Ansible Networking - "Clean" BM guests fails + "MechanismDriverError" in server.log on Controllers
• BZ - 1774941 - Ansible Networking - create BM guest using "trunk" type network fails
• BZ - 1776950 - [rhos-prio] StaleDataError: UPDATE statement on table 'standardattributes' expected to update 1 row(s); 0 were matched when creating a lot of security group rules through heat
• BZ - 1779654 - [IPI] [OSP] [Kuryr] On some HW, the installation fails due to the startup order of operators that caused by a delay in OSP components
• BZ - 1780381 - Loadbalancer missing logical switch association
• BZ - 1783076 - [OSP13 Backport] Subnets without networks at the database breaking the neutron_api
• BZ - 1794430 - Rebase python-networking-bigswitch to 12.0.13
• BZ - 1794673 - Rebase python-networking-bgpvpn to 987d2fb
• BZ - 1795320 - L3 connectivity loss
• BZ - 1795568 - Rebase openstack-neutron-fwaas to 4c05f1f
• BZ - 1795606 - Rebase openstack-octavia to ea4ae88
• BZ - 1795733 - Rebase openstack-neutron to 2084585
• BZ - 1795878 - Rebase python-networking-ansible to f235ef6
• BZ - 1795947 - Rebase python-networking-odl to queens-em
• BZ - 1796372 - Rebase python-networking-ovn to 63ff1f4
• BZ - 1796399 - Update of floatingip creates new row in NBDB NAT table
• BZ - 1803253 - Security Group filtering hides rules from user
• BZ - 1803525 - [OSP13] Regression, Neutron error on attempt to list security group rules as a tenant user

CVEs

(none)

References

(none)