RHBA-2022:8794 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 16.2.4 (Train) for Red Hat Enterprise Linux (RHEL) 8.4.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For additional information about the items in this advisory, refer to the
Technical Notes chapter of the Release Notes,
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16 .2/html/release_notes/chap-technical_notes

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 16.2 runs on RHEL 8.4.

The Red Hat OpenStack Platform 16.2 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 16.2, including

which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.2/html/release_notes/

This update is available through 'dnf update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 16.2 ppc64le
• Red Hat OpenStack 16.2 x86_64
• Red Hat OpenStack Director Deployment Tools 16.2 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.2 ppc64le
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Cinderlib 16.2 x86_64
• Cinderlib for IBM Power LE 16.2 ppc64le

Fixes

• BZ - 1912688 - Duplicated entries for VIP hosts are added to /etc/hosts in edge nodes
• BZ - 1926716 - when adding a cell into a tls-everywhere environment also the cellcontroller internal api vip is required to be
• BZ - 1933751 - Customize overcloud_containers.yaml.j2 for new openstack tripleo container image prepare workflow
• BZ - 1948564 - [UX] Improve configuring OVN's availability zones user-experience
• BZ - 1977711 - oslo.cache's pymemcache backend doesn't recover from socket disconnection
• BZ - 1980736 - Tests results showing as blocked in internal tooling due to the signature randomness in the Tempest suite
• BZ - 1984834 - Logout reason not displayed on login screen
• BZ - 1987090 - rabbitmq-limits validation is broken because max_fds is no longer defined from rabbit's point of view
• BZ - 1988996 - Upgrade python-pymemcache to version 3.5.0
• BZ - 1990357 - No tripleo parameter available to customize rate_limit and burst_size for neutron logging
• BZ - 2011206 - [ovn migration] QoS info not saved into OVN NBDB
• BZ - 2013244 - Enable user to control dynamic_neigh_routers ovn option
• BZ - 2026006 - When user open a link with 'Open link in new tab', the new tab doesn't show the proper content of the link
• BZ - 2027851 - [RFE] Add 'Offline' upgrade option
• BZ - 2031142 - [16.2] Several packages show as downgrades when upgrading from 16.1
• BZ - 2031682 - No module named 'etcd3gw': ModuleNotFoundError: No module named 'etcd3gw'
• BZ - 2033935 - IDM server parameter limited to single IPA server
• BZ - 2034380 - [OVN Migration] Missing ComputeOvsDpdk role nodes under ovn-controllers group in hosts_for_migration file
• BZ - 2035406 - Too frequent async task polling causes delay in timeout detection
• BZ - 2037761 - [NIC Partitioning] PCI Passthrough derivation is not translated to corresponding nova.conf
• BZ - 2037996 - [16.2] ReaR is not working well if controller role is not Controller
• BZ - 2041493 - Task [Output for async deployment <role name>] fails with an undefined variable when async deployment times out
• BZ - 2051479 - [16.2] tripleo_backup_and_restore_historical variable must be evaluated as bool
• BZ - 2058283 - Logout reason not displayed on login screen
• BZ - 2063177 - Deleting a non-existing security group rule returns an incorrect error
• BZ - 2069412 - [OSP16.2] Listing events for a deleted server does not work with RHOSP16.1 and the available command line client.
• BZ - 2070565 - [RHOSP 16.2] Gnocchi throwing errors when haproxy closes TCP connections to Redis
• BZ - 2071765 - osc.bash_completion ends with garbage
• BZ - 2071911 - [OSP16.1] derive_pci_passthrough_whitelist.py is failing when PCI addresses are supplied in NovaPCIPassthrough
• BZ - 2071918 - extend_volume iscsi failed to be finalized by nova
• BZ - 2071945 - Upgrade python-dogpile-cache to version 1.1.5
• BZ - 2073324 - [16.2] Mysql db_backup must be complete in both overcloud and undercloud
• BZ - 2074195 - VM resize fails with 'CPU set to unpin [8, 9, 44, 45] must be a subset of pinned CPU set [10, 12, 13, 46, 14, 15, 49, 50, 51, 48] '
• BZ - 2074400 - Quotas usage not visible on cli for users with "member" role
• BZ - 2075118 - Octavia fails when enabling TLS-e in existing setup
• BZ - 2075472 - FFU can get stuck when the mariadb upgrade fails to execute
• BZ - 2075731 - [OSP16.2] nova.pci.utils logs "WARNING No net device was found for VF" whenever a vf is bound to vfio-pci driver
• BZ - 2076121 - [DDF] After restoring the database we have to set the mysql root passwort once again
• BZ - 2078008 - [RHOS16.2] encrypted volumes can only be uploaded as raw, but the api lets you try to convert on upload and fail
• BZ - 2078814 - Disable GSSAPIAuthentication by default
• BZ - 2078991 - Backport to add sysinfo_serial parameter to control a Serial number entry generation method.
• BZ - 2079467 - [OSP 16.2] Live-migration fails in an homogeneous environment
• BZ - 2080434 - LB creation failed due to address already in use
• BZ - 2080585 - Restarting nova_libvirt container does not clean up pid files, not able to start the nova_libvirt service
• BZ - 2081912 - typo (generEate) in tripleo-ansible ceph playbooks
• BZ - 2082030 - [OSP16.2] Error during notification for neutron_dynamic_routing.services.bgp.bgp_plugin.BgpPlugin.floatingip_update_callback--9223372036847560727 floatingip, after_update: KeyError: 'last_known_router_id
• BZ - 2083120 - [OSP 16.2] [OVN-DVR] [Overcloud BM] Baremetal worker getting 503 from ovs-metadata agent
• BZ - 2083720 - Overcloud container images not updated during minor update
• BZ - 2085275 - [OSP16.2] Ignore plug_vifs on the ironic driver
• BZ - 2085581 - Stopped VM failed to resize due to Unable to create allocation for 'VCPU' on resource provider
• BZ - 2087231 - ping_test_gateway_ips contain empty string in multi-cells environment, this cause node validation failure during deployment when gateway ping tests execute
• BZ - 2087255 - Load-balancer remains in PENDING_CREATE state forever
• BZ - 2087721 - [OSP16.2]OVN migration failed due to unhandled error in neutron_ovn_db_sync_util
• BZ - 2088690 - [OSP16.2] Original image_ref is lost after a failed unshelve
• BZ - 2089348 - Timeout while performing creating/deleting actions on shared provider network with a large amount of subnets
• BZ - 2090757 - neutron db errors during rally tests
• BZ - 2091207 - unable to pass ceph_ansible_verbosity to openstack overcloud external-upgrade run
• BZ - 2092088 - [RHOSP 16.2] Ceilometer-agent-compute could be started on compute nodes before libvirt which will cause ceilometer to fail to collect virt mertrics
• BZ - 2092335 - [OSP16.2] Could not load 'oslo_cache.etcd3gw': No module named 'etcd3gw': ModuleNotFoundError: No module named 'etcd3gw'
• BZ - 2092463 - migration: stale ip6tables rules after migration
• BZ - 2092726 - paunch doesn't handle containers left in an incomplete status because of timeout
• BZ - 2093228 - Upgrade [OSP16.2 -> OSP17.1] after undercloud upgrade command "openstack overcloud status" does not work properly
• BZ - 2093901 - After a minor update, connectiviy issues between a new instance and metadata.
• BZ - 2094265 - Data plane impacted during the update from 16.2.1 to 16.2.2
• BZ - 2094377 - Leapp role-specific command properites are not working
• BZ - 2094669 - Heat stack update failure due to comparison between resource's 'updated_at' fields
• BZ - 2096334 - Containers are immediately SIGKILLed instead of first being gracefully shutdown with a SIGTERM
• BZ - 2096391 - If tripleo-update fails in OVN migration then ansible continues executing following tasks
• BZ - 2096418 - [RHOSP 16.2] Live migration is failing when[workarounds]/rbd_volume_local_attach=True is configured
• BZ - 2096783 - [OVN] DB sync tool: local variable 'members_to_verify' referenced before assignment"
• BZ - 2097350 - Swift/rgw gives error 401 after openstack deploy/update for about 60 minutes
• BZ - 2100135 - With OVN provider bulk member update returns 500
• BZ - 2101864 - From time to time memcached stops processing requests and brings down OpenStack control plane
• BZ - 2101944 - [RHOSP 16.2] Remove processes plugin from list of default plugins for collectd deployments
• BZ - 2102850 - Set br-int as default integration bridge for OVN
• BZ - 2103970 - [RHOSP 16.2] Ceilometer can't read /run/libvirt resulting in no 'cpu' metrics
• BZ - 2104127 - Need to Backport security group tests "removing security group from ACTIVE instance"
• BZ - 2104667 - ping test for Gateways in tripleo_node_validation are not retried
• BZ - 2105157 - heat-stack update failed while attaching new interfaces to VMs
• BZ - 2105603 - [Backport]OVN revision_number infinite update loop
• BZ - 2106615 - tripleo_free may prevent subscription manager to properly work against satellite
• BZ - 2106647 - Fix Cinder's pacemaker services restart due to config changes
• BZ - 2109350 - [RHOSP16.2][nova_libvirt tag: 16.2.0-55.1638436404] libvirt version incompatibility leaves instances in unmanageable state after minor update from RHOSP 16.2.0 to RHOSP 16.2.x
• BZ - 2111237 - Intermittent chrony configuration failures with larger scale deployments
• BZ - 2111871 - overcloud external-update run --stack overcloud --tags ovn caused a network outage
• BZ - 2112247 - member deletion using member_batch_update fails
• BZ - 2112918 - oslo-config-validator fails on key_manager/backend is not part of sample config
• BZ - 2117221 - horizon : /var/tmp/ permissions incorrect on controllers
• BZ - 2117296 - Certificate DN is not expanding in the Octavia tenant flow logs
• BZ - 2117311 - wrong parameter assignation login-defs-baremetal-ansible.yaml
• BZ - 2117666 - [OSP16.2] Creating a standalone database backup of the undercloud nodes issue
• BZ - 2118579 - nova-svirt validation is failing for custom compute roles
• BZ - 2118620 - Support of project owned keys
• BZ - 2119145 - Stack update/upgrade fails with "Container DELETE failed" message raised from config-download workflow
• BZ - 2119769 - nf_conntrack_max low in Amphora VMs with low memory
• BZ - 2120339 - neutron/ovn db sync failure with No more IP addresses available
• BZ - 2120982 - [OSP16.2] openstack undercloud backup --db-only doesn't work
• BZ - 2122204 - [OSP -16.2]Need to Backport security group tests - [Delete tcp rule from a security group],[Make the StatefulConnection class to work with priviliged ports],[Use StatefulConnection class to verify connectivity in SG tests]
• BZ - 2122656 - Inconsistent selinux type of /var/run/libvirt
• BZ - 2122765 - tripleo validator "nfv-ovsdpdk-zero-packet-loss-check" fails when non DPDK instances present
• BZ - 2122923 - members without subnet wrongly associated to VIP subnet
• BZ - 2123226 - [Octavia] Spam of "nf_conntrack: table full, dropping packet" messages during performance tests
• BZ - 2123244 - update_port_precommit fails because of "AttributeError: 'NoneType' object has no attribute 'chassis_exists'" error
• BZ - 2123318 - icmp health monitors are broken in rhosp16.1
• BZ - 2123646 - OSP13 to OSP16.2 FFU fails on ceph nodes due missing packages
• BZ - 2123752 - Rebase to 0.7.1 [OSP 16.2]
• BZ - 2124473 - openvswitch is not started on a ComputeNeutronOvsDpdk role and fails osp deployment (predeployed-hosts)
• BZ - 2124877 - Instance with one port gets two ip addresses or more
• BZ - 2125228 - [13->16.2] Undercloud upgrade fails on nova_db_sync_stein
• BZ - 2126055 - OVN Octavia port loses its "virtual" type after port update
• BZ - 2126110 - [OSP16.2] subnet with 0.0.0.0 creates an entry in resolv.conf
• BZ - 2126786 - [RHOSP 16.2] swiftclient forbids ceilometer from polling swift objects
• BZ - 2126865 - [Backport] [OSP 16.2] Add test mac learning from 17.0
• BZ - 2127229 - Neutron server doesn't start
• BZ - 2128494 - Unhandled NoOptionError in python-tempestconf
• BZ - 2128663 - Octavia cannot configure an amphora after a FFU from 13 to 16.1
• BZ - 2128870 - Deploying OSP 16.2 templates that use a larger number of Post Config steps stresses the Undercloud's Keystone service
• BZ - 2128911 - Unable to complete OVSDB transaction due to timeout on the TRY_AGAIN retries
• BZ - 2129180 - [OVN] QoS QoS bandwidth limiting for router gateways
• BZ - 2129209 - ovn-metadata-agent could hang indefinitely on startup
• BZ - 2129322 - Neutron server floods logs with hash ring messages on startup
• BZ - 2129416 - TRY_AGAIN messages can flood neutron logs
• BZ - 2131386 - [RHOS 16.2] cinder backup-import is removing entries from DB when the volume backup exists.
• BZ - 2131594 - [BDI] - RHOSP 16.2 haproxy-external-cert certificate renewal got stuck in NEED_CSR and undercloud self-signed Root CA expired
• BZ - 2131710 - Deleting a LoadBalancer remains in ERROR status
• BZ - 2132280 - OVN transaction could not be completed due to a race condition
• BZ - 2133845 - Certificates renewed with each update to the overcloud using novajoin and IPA
• BZ - 2134529 - [BDI] - Overcloud CephStorage scale out failed with GRUB2 error
• BZ - 2136489 - overcloud update failed with error {"msg": "Failed to get information on remote file (/var/lib/mistral/overcloud/octavia-ansible/group_vars/octavia_vars.yaml): Permission denied"}
• BZ - 2137484 - Re-deployment fails if octavia or ceph is enabled
• BZ - 2138203 - OC deployment with minimal image on Ceph nodes failed
• BZ - 2138395 - [RHOSP 16.2] ceilometer-ipmi-agent logs to /var/log/ceilometer inside the container
• BZ - 2139674 - [OVN][16.2] Migration from OVS to OVN hangs on "Sync neutron db with OVN db" task
• BZ - 2141873 - Data plane impacted during the update from 16.2.1 to 16.2.2
• BZ - 2143574 - [OVN][16.2] VM status spawning and ERROR on CI jenkins job

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16
• .2/html/release_notes/chap-technical_notes