RHBA-2020:3148 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 16.1 (Train) for RHEL 8.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For additional information about the items in this advisory, refer to the Technical Notes chapter of the Release Notes, https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/release_notes/chap-technical_notes

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 16.1 runs on Red Hat Enterprise Linux 8.2.

The Red Hat OpenStack Platform 16.1 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 16.1, including

which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 16.1 ppc64le
• Red Hat OpenStack 16.1 x86_64
• Red Hat OpenStack Director Deployment Tools 16.1 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.1 ppc64le
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Cinderlib 16.1 x86_64
• Cinderlib for IBM Power LE 16.1 ppc64le

Fixes

• BZ - 1225775 - [RFE] Glance should be able to manage multiple Ceph clusters as backends
• BZ - 1409872 - [Intel OSP12] SNMP Write Plugin
• BZ - 1440926 - [RFE] Configure object store with external RADOS gateway
• BZ - 1566724 - Define creator role by default when deploying with Barbican
• BZ - 1594033 - cinder does not show bootable flag consistently when when creating a volume w/ --poll
• BZ - 1598716 - [RFE][Deployment] [Glance] Add multi store configuration support in tripleo
• BZ - 1603440 - [RFE] Designate Tech Preview Delivery
• BZ - 1686001 - [RFE] revert-to-snapshot
• BZ - 1697511 - [RFE] FFWD upgrades 13 -> 16 & Ceph 3.x -> 4.x
• BZ - 1700402 - Deploy Cinder A/A with TripleO
• BZ - 1701271 - [OSP16.1][RFE] healthcheck required for nova_virtlogd container
• BZ - 1701416 - [RFE] Enable SSL termination for RadosGW
• BZ - 1714023 - [RFE] Consider re-enabling power sync between Nova and Ironic
• BZ - 1714508 - [RFE] add support for virtio-gpu
• BZ - 1717134 - [RFE] role parameters for cpu/ram/disk allocation ratio
• BZ - 1725146 - [OVN] enable deployments with external loadbalancers
• BZ - 1727230 - add pmu-tools to distribution
• BZ - 1738449 - Rebase collectd to 5.11
• BZ - 1740946 - [RFE] TLS Everywhere cannot be deployed in a pre-deployed nodes because nova isn't configured on the undercloud
• BZ - 1758416 - [RFE] Copying existing image across multiple stores
• BZ - 1758420 - [RFE] Ability to import an image in multiple stores
• BZ - 1758424 - [RFE] Ability to delete image from single store
• BZ - 1760941 - [RFE] Support multiple runs of ceph-ansible for multiple external ceph clusters
• BZ - 1764511 - add support for configuration of glance-api endpoint for edge nodes
• BZ - 1765003 - Changing registry namespace and prefix break update of HA services.
• BZ - 1767581 - [RFE] Expose --limit, --skip-tags, and --tags for config-download deployment
• BZ - 1769368 - openstack undercloud deploy throws exception on typo in subnets parameter in undercloud.conf
• BZ - 1780119 - [OSP 16.1.1][RFE] Allow instances to swap to RBD volumes
• BZ - 1784021 - [TestOnly] Verify OVS 2.13 in OSP 16
• BZ - 1784640 - Ceph FSID generated by TripleO client could be more random
• BZ - 1785723 - Need ability to extend timeout between when the heat stack creation completes and waiting for ssh on port 22 for enable_ssh_admin
• BZ - 1791392 - Redfish PM driver not working with Supermicro
• BZ - 1791784 - OSP 16 beta fails when performing an authenticated pull from registry.redhat.io
• BZ - 1792422 - RabbitMQ is using the Public API DNS short name to bind to instead of the Local IP DNS short name
• BZ - 1794525 - Overcloud upgrade from OSP 15 to OSP 16 fails due to Unreachable undercloud
• BZ - 1794596 - 16-Beta gateway_ip undefined in neutron_lib.callbacks.manager
• BZ - 1795198 - [ovn] Too frequent health-checks that causes stress on ovsdb-servers
• BZ - 1797229 - Neutron internal server error (HTTP 500) on port create
• BZ - 1801143 - [RHOS-16.1] Swift capabilities tests fail when being run against Rados GW
• BZ - 1802873 - Failed to create VM from image as format of backing image was not specified
• BZ - 1803362 - [RHOSP16] [IHA] Ovecloud Deployment fails with error ' Validation of File_line[pcsd_bind_addr] failed '
• BZ - 1803949 - [OSP16.1][RFE] Add snapshot functionality to backup and recover role within Tripleo-Ansible
• BZ - 1803989 - Overcloud deploy with OSP16.0 using stateless IPv6 ctlplane in a DCN configuration fails
• BZ - 1804079 - TLS Everywhere fails with DCN: cinder active/active with etcd fails during certificate creation
• BZ - 1804127 - Importing results in "Error: Cannot mix str and non-str arguments"
• BZ - 1805095 - The first filler of security group rule by tenant/project ID is does not work
• BZ - 1805429 - [osp16 hackfest] Enabling ssh admin (tripleo-admin) for hosts - Timed out waiting for port 22 (mix of VM and BM)
• BZ - 1807841 - swift_rsync container runs privileged
• BZ - 1808149 - OSP changes for dnsmasq filtering support of dhcp-host entries
• BZ - 1808570 - [Backport][RHOSP16.1] Backport [VxFlexOS] cinder driver features
• BZ - 1811490 - unablel to 'Push an image from a remote registry to the undercloud registry.'
• BZ - 1811680 - Missing firewall rules for RabbitMQ CLI tools
• BZ - 1812079 - Prevent creation of unnecessary Ceph variables
• BZ - 1813391 - [Backport][RHOSP16.1] Backport Powermax Puppet Cinder
• BZ - 1813393 - [Backport][RHOSP16.1] Backport Powermax Template
• BZ - 1813916 - Move to OVS/OVN 2.13 (FDP 20.B)
• BZ - 1814166 - Bump grafana container to ceph4-rhel8
• BZ - 1814616 - ironic inspector dnsmasq is not receiving DHCP requests
• BZ - 1814833 - LDAP backend default doesn't align to keystone defaults.
• BZ - 1815026 - No error in CLI while trying to remove port/network from router with floating IP
• BZ - 1815181 - Rerunning openstack undercloud install fails when using output_dir --- Error message: The /home/stack/undercloud-passwords.conf file is missing. This will cause all service passwords to change and break the existing undercloud.
• BZ - 1815516 - ironic-inspector processes always record logs into syslog in addition to log files under /var/log/ironic-inspector
• BZ - 1815928 - DCN glance-api endpoint incorrect when internal_api network is IPv6
• BZ - 1816136 - [OSP 16.1] Unable to extend an attached encypted volume while in use
• BZ - 1816255 - OSP16/OSP13: ansible-based rhsm does not implement http proxies correctly.
• BZ - 1817496 - heat-dist.conf file sets deprecated auth_uri for keystone_authtoken
• BZ - 1817507 - [OSP15->16] external_deploy_tasks skipped during Controller upgrade
• BZ - 1817702 - FFWD: puppet-pacemaker seems to not run `pcs host auth` during upgrade
• BZ - 1818740 - [Deployment] Add configuration parameter for [scheduler]/placement_aggregate_required_for_tenants
• BZ - 1819016 - [OSP16] undercloud install fails even though registry credentials are provided
• BZ - 1819698 - package update: python-subunit 1.4.0
• BZ - 1819829 - Packstack removal
• BZ - 1820115 - rhosp16-openstack-nova-compute-ironic container-config Exited (1) nova_statedir_owner
• BZ - 1820142 - ceph validations not working downstream
• BZ - 1820268 - Fernet token rotation by mistral workflow fails
• BZ - 1820306 - Deployment of Ceph nodes with overcloud-minimal image fails as director tries to install openvswitch.
• BZ - 1820310 - [Backport][OSP16.1] Add TLS support in tooz's etcd3gw driver
• BZ - 1821121 - [Deployment] Add configuration parameter for [scheduler]/enable_isolated_aggregate_filtering
• BZ - 1821331 - OSP 16.1 baremetal node delete failed on TypeError: can only concatenate list (not "AnsibleUnicode") to list
• BZ - 1821385 - Failed to start nova_virtlogd healthcheck after deployment
• BZ - 1821816 - [OSP15->16] Converge step fails during ceph-ansible preparation
• BZ - 1821834 - [OSP16.1] Rebase to RDO's python-etcd3gw-0.2.5-1
• BZ - 1822204 - Minor updates in composable HA break due to haproxy rules being applied too late
• BZ - 1822304 - [OSP16.1] Backport Datera v2.2 cinder driver
• BZ - 1822392 - OSP 16.1 wrong /etc/rhosp-release 16.0.1 while should be 16.1
• BZ - 1822721 - [OSP 16.1] nova keeps deleting baremetal nodes from list of hypervisors on the undercloud which leads to mistral workflow failures post introspection
• BZ - 1823817 - Some HA containers logging got lost with the move to podman
• BZ - 1823847 - [osp16] 16.1 should enforce policy during update to ensure we are in rhel8.2
• BZ - 1823848 - ovn_nb_connection for Octavia is hard-coded to use tcp: schema
• BZ - 1823932 - [RFE] DNS entries for the overcloud and undercloud nodes should be added to freeIPA DNS
• BZ - 1823938 - New Component: ansible-tripleo-ipa
• BZ - 1823945 - New Component: python-urllib-gssapi
• BZ - 1824112 - [OSP 16.1] Use showmapped to find the root RBD device during disconnect_volume
• BZ - 1824116 - [OSP 16.1][[Workaround] Allow native LUKSv1 decryption to be disabled
• BZ - 1824154 - [OSP 16.1] Support openstack-nova-compute on RHEL 7.latest during FFU between 13 and 16
• BZ - 1824266 - [OSP13->16.0] ceph-ansible preparation tasks with no permission to read files in /var/lib/mistral
• BZ - 1824684 - [OSP16] minor update fails on ceph-ansible check on undercloud
• BZ - 1824844 - Failed deployment of whole disk images with GPT in UEFI mode with local boot
• BZ - 1824901 - re-enable collectd-rdt plugin
• BZ - 1825186 - Rebase to puppet-collectd v12
• BZ - 1825391 - There is no cross_az_attach parameter in THT
• BZ - 1825509 - [Backport][RHOSP16.1] Add `set_system_boot_options` method
• BZ - 1825526 - [Backport][RHOSP16.1] Fix issue where server fails to reboot
• BZ - 1825534 - [Backport][RHOSP16.1] Fix RAID configuration with idrac-wsman interface
• BZ - 1825599 - [OVN][QOS] NBDB QoS entry not added on port update
• BZ - 1826930 - OVNMetadataEnabled value isn't applied
• BZ - 1827072 - [ML2/OVS] Cannot delete routers with IPv6 subnet, sometimes crashes L3 agent
• BZ - 1827276 - Sync script for sidecar containers can't spawn dnsmasq processes for all networks
• BZ - 1827532 - 'overcloud deploy' overrides the selinux policy/state set on the undercloud
• BZ - 1827697 - pxe template rendering is broken for kernel params using html-escapable characters
• BZ - 1827721 - Downloading an image with the direct deploy interface can stuck forever on a flaky server
• BZ - 1827773 - Update jQuery to 2.2.4.1-1
• BZ - 1827774 - Update jQuery to 2.2.4.1-1
• BZ - 1827805 - Rebase python-XStatic-jQuery to include fixes
• BZ - 1828323 - New Package: google-api-python-client
• BZ - 1828324 - New Package: python-uritemplate
• BZ - 1828325 - New Package: python-gflags
• BZ - 1828327 - New Package: python-oauth2client
• BZ - 1828694 - [OSP15->16] 'ovn_dbs_short_bootstrap_node_name' is undefined
• BZ - 1828834 - Unable to start SRIOV VM because "Net device not found"
• BZ - 1828941 - Ignored OVNCMSOptions value from env file in OSP16.1
• BZ - 1829086 - Introspection fails after scale up
• BZ - 1829201 - Cannot connect to IPv4/IPv6 dual-stack VM in ML2 OVS environment
• BZ - 1829293 - SRIOV OVN metadata namespaces not cleaned up after ports are unbounded
• BZ - 1829322 - [OSP16.1] Custom stack name not working during deployment/upgrade.
• BZ - 1829609 - [OSP13->16.1] Containers failing with: Cannot find config file: /etc/puppet/hiera.yaml due to missing containers-selinux version
• BZ - 1829696 - Panko user and panko endpoint are missing on OSP 16/OSP16.1 deployments (undercloud and overcloud)
• BZ - 1829707 - Missing connection_timeout in deploy_roles
• BZ - 1831571 - IHA breaks when using ansible 2.9
• BZ - 1831739 - RHos 16.1: Validator undercloud-neutron-sanity-check failed with traceback
• BZ - 1831893 - Baremetal nodes with HP BMCs fail introspection due to ipmitool timeout
• BZ - 1832405 - ceph-ansible admin_secret seems to be different from the one found in client.ceph.admin.keyring
• BZ - 1832667 - All queries to glance API fails with 503 error if rbd store configured incorrectly
• BZ - 1832720 - Stale neutron-haproxy-qdhcp containers after network delete in OVS deployed RHSOP-16
• BZ - 1832804 - Failed to create a container when using Ceph RGW - Unauthorized
• BZ - 1832920 - puppet/extraconfig/pre_deploy/per_node.yaml does not work with py3
• BZ - 1834140 - Remove openstack-tripleo-heat-templates-compat.
• BZ - 1834230 - [OSP16.0][Director] Resource provider for neutron segments left behind in placement after stack delete
• BZ - 1834334 - Drop puppet-tempest from RHOS-16.1
• BZ - 1834536 - [RHOS16.1] Horizon UI is not reachable
• BZ - 1834739 - L3 agent crash - Client is raising a RuntimeError exception during shutdown
• BZ - 1834901 - Re-running overcloud deploy ignores heat templates
• BZ - 1834938 - allocations database is not properly cleaned
• BZ - 1834985 - OSP 16.1 | Overcloud deployment fails when trying to deploy with collectd. AMQP port issue.
• BZ - 1835140 - [OVN][LB] Load Balancer is not using load balancing algorithm source-ip-port
• BZ - 1835874 - openstack tripleo validator run --group pre-introspection fails with Error: no container with name or ID keystone_cron found: no such container
• BZ - 1836797 - validation framework: openstack tripleo validator history command is missing
• BZ - 1836963 - [OVN][DVR] Impossible to ping internet addresses from vm with FIP
• BZ - 1837235 - [updates] 16 to 16.1, 80% packet loss on stop L3 connectivity check test
• BZ - 1838972 - fix ceph socket issue in collectd 5.11
• BZ - 1839063 - Add option to set release when registering nodes
• BZ - 1839071 - [OSP16]keepalived sidecar container isn't deleted when a router is deleted
• BZ - 1839157 - Change in python-tripleoclient changed limit format making pacemaker tasks to fail
• BZ - 1840087 - Add the noop management interface to RedFish Ironic driver.
• BZ - 1840108 - Random failures in test_amphora_list_and_show
• BZ - 1840159 - Limit Option not performed for Splitstack Scaleup
• BZ - 1840580 - side containers not starting during ffwd2
• BZ - 1840640 - os_keystone_domain role failure: Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ipa/ca.crt
• BZ - 1841216 - IPI deployment fails on Dell r640 nodes using redfish
• BZ - 1844088 - [OSP16][OVN] Port could be set as a virtual port type when its IP is similar to other IP withing same network
• BZ - 1844133 - [OSP16.1] openstack overcloud node delete failing due to node being unreachable
• BZ - 1844212 - Rebase python-django to 15.0 build to fix upgrade path
• BZ - 1844553 - Make image_checksum optional if other checksum is present
• BZ - 1845079 - TASK [ceph : Get OSD stat percentage]: null and null cannot be divided
• BZ - 1845550 - [OSP16.1][Nova] Nova Evacuation has deleted root disk of many of instances from shared storage
• BZ - 1845886 - [OVN][Migration] Timeout in reduce-dhcp-renewal-time.yml trying to connect to controller nodes using ssh
• BZ - 1846444 - [OSP13 ->OSp16.1 hackfest][Blocker] Need idempotence in playbook to skip pre-leapp tasks if distribution is already 8.x
• BZ - 1846475 - [OSP13 ->OSp16.1 hackfest][Blocker] Need to bump default timeout of UpgradeLeappRebootTimeout
• BZ - 1846591 - openstack overcloud upgrade converge doesn't work after upgrade
• BZ - 1846812 - haproxy.pp in puppet-tripleo generates wrong haproxy.cfg for SSL-protected rgw instances
• BZ - 1846970 - OC Deployment with octavia fails - recursive loop detected in template string {{enable_log_offloading}}
• BZ - 1847039 - IPv6 addresses are not being released from dnsmasq lease file
• BZ - 1847113 - After FFWD we should unset ContainerCeph3DaemonImage
• BZ - 1847188 - tripleo_iscsid doesn't start on power8 compute node
• BZ - 1847623 - [OSP13 ->OSP16.1] Ensure db migrations happen idempotently during interim Stein release
• BZ - 1847770 - [dcn] instance boot fails on DistributedComputeHCIScaleOut node: Error contacting glance server 'http://172.25.2.182:9292' for 'get', done trying.: glanceclient.exc.HTTPServiceUnavailable: HTTP 503 Service Unavailable
• BZ - 1847924 - [SRIOV - Cold Migration] some issues after a server with a VF port is migrated
• BZ - 1849098 - Missing FFU steps for manila
• BZ - 1849190 - Misleading log file path for Mistral in errors in update/upgrade process
• BZ - 1849211 - [OSP13->OSP16.1] Error: invalid arguments /etc/pki/tls/private/overcloud_endpoint.pem, ad9612da1a4c you must use just one container
• BZ - 1850059 - OC deploy fails on ceph-ansible generate ceph.conf - Failed to create temporary directory.
• BZ - 1850204 - default tag for containers is incorrect for OSP16.1
• BZ - 1850341 - Log files are written as binary, preventing proper logging
• BZ - 1850347 - The validator log management is broken due to unwanted "encode()" calls
• BZ - 1851843 - Paunch doesn't allow to pass multiple security_opt (as a list)
• BZ - 1851927 - [osp16.1][update] ansible-ceph update run fail as unix path too long for Unix domain socket
• BZ - 1852082 - [RHOSP 16] Backport tripleo deployment templates for Dell EMC XtremIO Cinder driver.
• BZ - 1852084 - [RHOSP 16] Backport tripleo deployment templates for Dell EMC VXFlexOS Cinder Driver
• BZ - 1852087 - [RHOSP 16] Backport tripleo deployment templates for Dell EMC SC Cinder Driver
• BZ - 1852088 - [RHOSP 16] Backport tripleo deployment templates for Dell EMC PowerMax Cinder Driver
• BZ - 1852801 - [osp16.1][update] Ansible update is not happening during undercloud update.
• BZ - 1858553 - [OSP16.1] Instances with DPDK fail to spawn - Failed to bind socket to /var/lib/vhost_sockets Permission denied
• BZ - 1858620 - New deploy of 16.1 or upgrade from OSP16 to 16.1 fails ceph-ansible validation looking for upstream repository

CVEs

(none)

References

(none)