RHBA-2023:1763 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 16.2.5 (Train) for Red Hat Enterprise Linux (RHEL) 8.4.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For additional information about the items in this advisory, refer to the
Technical Notes chapter of the Release Notes,
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16 .2/html/release_notes/chap-technical_notes.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Red Hat OpenStack Platform 16.2 runs on RHEL 8.4.

The Red Hat OpenStack Platform 16.2 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 16.2, including

which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.2/html/release_notes/

This update is available through 'dnf update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 16.2 ppc64le
• Red Hat OpenStack 16.2 x86_64
• Red Hat OpenStack Director Deployment Tools 16.2 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.2 ppc64le
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Cinderlib 16.2 x86_64
• Cinderlib for IBM Power LE 16.2 ppc64le

Fixes

• BZ - 1876045 - Keystone users and endpoints for legacy telemetry services are not deleted during upgrades
• BZ - 1897736 - Reflected XSS vulnerability during CSRF failure
• BZ - 1990279 - Only client to server packets are logged
• BZ - 2016340 - port creation failed: Transaction causes multiple rows in "Port_Group" table to have identical values (neutron_pg_drop) for index on column "name"
• BZ - 2016837 - [OSP16.2.1][Horizon] - When deleting only one instance, the instance page shows like several instances were deleted as well
• BZ - 2061666 - FFU from RHOSP 13 to RHOSP16.2 failing in undercloud upgrade at Openvswitch task
• BZ - 2065691 - memcache connectivity issues causing 500 errors
• BZ - 2089352 - flavor specification on instance overview page is not showing
• BZ - 2096437 - Patch port between tunneling and integration bridge remains after migration from OVS to OVN
• BZ - 2098630 - [OSP 16.2 Z2] Glance cache is not pruned periodically
• BZ - 2102261 - binding_host_id and and status not set on virtual IPs
• BZ - 2113819 - A policy.json is required for heat-engine
• BZ - 2116323 - [RHOSP 16.2] OSP can't connect to the remote QDR due to certificate permissions set incorrectly
• BZ - 2119113 - Prevent minor update from 16.2.0 if nova_libvirt 16.2.0-55.1638436404 is present
• BZ - 2120981 - During FFU 13->16.1 Amphora image is not updated
• BZ - 2125250 - REAR: Controlplane nodes backup fails with one galera node in FAILED state.
• BZ - 2126611 - Director doesn't apply OctaviaAdminLogTargets and OctaviaTenantLogTargets correctly
• BZ - 2129136 - Fix iRMC https certification [OSP 16.2]
• BZ - 2129812 - [OVS][16.2][DVR] Tobiko test DvrRouterNamespaceTest
• BZ - 2131248 - os-net-config triggers reconfiguration of mellanox nics while no change should be applied
• BZ - 2133030 - [RHOSP 16.2] aodh uses deprecated gnocchi api to aggregate metrics and doesn't work properly
• BZ - 2134075 - Overcloud deployment fails with "Unauthorized url" when using Satellite and tag_from_label
• BZ - 2135261 - router gateway unset + set breaks ovn lb connectivity
• BZ - 2135269 - LS has LB leftover after being removed from the router
• BZ - 2135271 - Detach OVN-LB LS from the LR breaks OVN-LB connectivity
• BZ - 2135675 - NovaLibvirtMaxQueues parameter is not properly propagated to nova::compute::libvirt::max_queues:
• BZ - 2136860 - [OVN] If there are multiple network log objects associated to the same event and security group, only the first created is considered
• BZ - 2139790 - RHOSP16.2.3: Snapshot image Metadata cannot be updated in horizon due to empty os_hash_algo or os_hash_value
• BZ - 2141470 - neutron fails to check tenant_id when using custom policy.
• BZ - 2142684 - Unable to delete heat stack if the auth_encryption_key changed
• BZ - 2143592 - Port not updated to be UP by OVN causes failure on spawning instance
• BZ - 2149002 - Metrics are missing in collectd healthchecks
• BZ - 2151893 - customer see "TCP: out of memory -- consider tuning tcp_mem" in the amphora
• BZ - 2151958 - Data plane disruption during update from 16.2.1, 16.2.0, or any 16.1 release to 16.2.2 or later in ML2/OVN deployments
• BZ - 2154361 - Unable to configure OVN metadata agent workers with OOO
• BZ - 2155866 - Neutron router internal port not coming up during OpenShift on OpenStack installation.
• BZ - 2156010 - Wrong alerts are coming on Prometheus dashboard. Services are up and running however wrong alerts are seen and giving wrong details.
• BZ - 2158755 - Ping loss when updating the ovn controller when updating from 16.2.0.
• BZ - 2159257 - Some Octavia tempest tests fail on CI due to missing NotImplemented skippers
• BZ - 2159555 - multipath.conf is modified incorrectly when MultipathdCustomConfigFile is present
• BZ - 2159566 - [RHOSP16.2.4]Even though the image cache feature of glance is not enabled, the glance_api_cron container is created and tripleo_glance_api_cron_healthcheck.service fails
• BZ - 2164053 - [RHOSP16.2.2] Resize pop up window does not show the correct Project limits information
• BZ - 2164718 - Packages are updated during dnf streams enabling
• BZ - 2165032 - Error while updating the load balancer status: 'NoneType' object has no attribute 'project_id'
• BZ - 2166025 - [16.2] Unable to filter instances in Horizon Dashboard by Project Name
• BZ - 2166197 - max_l3_agents_per_router=1 is ignored when an FIP is added to the instance.
• BZ - 2167074 - After configuring the Instance HA on the existing environment stonith resources are not coming up and related packages are not getting installed
• BZ - 2170139 - Rebase to python-wsgi_intercept 1.8.1
• BZ - 2176916 - test_container_sync.ContainerSyncTest.test_container_synchronization takes too long time
• BZ - 2177710 - Instance creation fails with ` nova.exception.VirtualInterfaceCreateException: Virtual Interface creation failed`
• BZ - 2178226 - Slowness and timeouts due to OVSDB event processing
• BZ - 2178599 - neutron_api recreates ovnmeta ports with ip address even when there's no dhcp on the subnet
• BZ - 2181305 - 16.2.5 RPM is not updating correct versinon in /etc/rhosp-release
• BZ - 2187380 - [16.2.5 deprecated] vPMEM deprecated

CVEs

(none)

References

(none)