RHBA-2021:5067 - Bug Fix Advisory

Topic

Red Hat OpenStack Platform 16.2.1 (Train) - RPMs

Description

Release of Red Hat OpenStack Platform 16.2.1 (Train) provides these changes:

Changes to the openstack-ironic component:

• Before this update, a lock handling issue would prevent IPMI-based nodes from recording the hardware vendor as part of power state synchronization. This issue caused the power state synchronization to fail, and nodes using the `ipmi` hardware type would enter the `Maintenance` state. With this update, the lock is now properly handled, and the power state synchronization for bare metal nodes utilizing the `ipmi` hardware type works as expected, and results in no locking errors. (BZ#2007268)

Changes to the openstack-neutron component:

• When configuring bandwidth-aware scheduling of SR-IOV workloads, use the heat parameter, `resource_provider_hypervisors`. This parameter defines a paired list `<network_device>:<hypervisor>``. Ensure that you use a fully qualified domain name (FQDN) to define each hypervisor. (BZ#1989820)

Changes to the openstack-tripleo-heat-templates component:

• Before this update, the ML2/OVN container started, but the service did not work as expected. The cause for this problem was that the ML2/OVN controller container did not include a configuration to support TLS. With this update, the ML2/OVN container configuration has been updated to include all of the correct configuration, and it works as expected. (BZ#1977442)
• With this update, the memory limit for the `collectd` container has been increased to 512 MB. When this limit is exceeded, the container is restarted. (BZ#2007255)
• Before this update, removal of the `python2` packages for the Red Hat Enterprise Linux (RHEL) in-place upgrade tool, LEAPP, was unsuccessful. This failure was caused by a DNF `exclude` option that retained the LEAPP packages. With this update, automation has now been included to ensure that the necessary LEAPP packages are successfully removed. (BZ#2008981)
• Before this update, an upgradable `mariadb-server` package in the RHEL repository caused the package manager to upgrade the `mariadb-server` package on the host, interfering with the containerized `mariadb-server` that pre-exists on the same host. With this update, the Red Hat OpenStack Platform (RHOSP) director removes the `mariadb-server` package from any hosts which also have the containerized MariaDB, and the RHOSP FFU process continues. (BZ#2019178)

Changes to the python-networking-ovn component:

• RHOSP does not yet support ML2/OVN with VXLAN networks. The migration process includes steps to convert VXLAN networks to Geneve. When the migration target version is RHOSP 16.2.0, a bug prevents the expected VXLAN to Geneve conversion, and the networks remain configured as VXLAN.

This bug affects only migrations to ML2/OVN on RHOSP 16.2. It does not affect migrations to ML2/OVN on RHOSP 16.1. (BZ#2003708)

Solution

OSP 16.2.1 Release - RPMs

Affected Products

• Red Hat OpenStack for IBM Power 16.2 ppc64le
• Red Hat OpenStack 16.2 x86_64
• Red Hat OpenStack Director Deployment Tools 16.2 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.2 ppc64le
• Cinderlib 16.2 x86_64
• Cinderlib for IBM Power LE 16.2 ppc64le

Fixes

• BZ - 1977442 - OSP13->OSP16.2 ovn_controller hybrid mode will not work with ssl
• BZ - 1978560 - [16.2] Do not block the overcloud during a backup
• BZ - 1982764 - Potential SSL issues after qdrouterd image update
• BZ - 1983613 - [16.2] Online backup of the galera database must desynchronize the node before backup
• BZ - 1984459 - [16.2] Stop the ceph-* services before ReaR backup
• BZ - 1989820 - Hostname in neutron agent's config don't match what is stored in placement by nova
• BZ - 1996864 - STF | NFV | dpdk-telemetry config file created when there is no dpdk collectd plugin therefore collectd container fails to start on compute nodes.
• BZ - 2001748 - High memory usage by neutron-server
• BZ - 2002099 - ovn-controllers are listed as agents but cannot be removed
• BZ - 2002772 - RBD: use correct stripe unit in clone operation
• BZ - 2003548 - 8.2 -> 8.4 update has the first updated node stuck on "current num_updates is greater than the replacement" messages
• BZ - 2003708 - [OSP16.2] Geneve allocation is not update during migration from ml2/ovs to ovn
• BZ - 2003732 - pacemaker resources are missing the "z" flag for most of the rw bind-mounts in containers
• BZ - 2004149 - [ovn migration] fails during Sync neutron db with OVN db task
• BZ - 2007255 - Collectd memory consumption is growing gradually causing 'out of memory' issue on nodes.
• BZ - 2007268 - power_sync failed ironic conductor when using ipmi driver
• BZ - 2007724 - Error 500 during creation of resource due to problem with db session
• BZ - 2008981 - [FFWD 13->16.2] Python 2 packages cleaning up after leapp upgrade failing in leapp dependencies
• BZ - 2011044 - 16.2 ReaR restore during the stage authenticate with Ceph with controller is failing
• BZ - 2014558 - RHOSP16.1: "openstack server create image" does not fill os_hash_algo or os_hash_value [RHOSP16.2.1]
• BZ - 2019178 - FFU: upgrade failed during "Upgrade Mysql database from a temporary container" step
• BZ - 2019446 - OSP13->OSP16.2 stopped working for ovn deployments
• BZ - 2020210 - [FFWD 13 ->16.2] Controller upgrade fails due to inactive rabbitmq (PermissionError: [Errno 13] Permission denied: '/var/log/rabbitmq/log')
• BZ - 2021199 - [OSP16.2] nova-novncproxy container installs unsupported nodejs 10
• BZ - 2023640 - networking_ovn.tests.functional.test_ovn_db_sync.TestOvnNbSync are failing

CVEs

(none)

References

• null