RHBA-2024:9974 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat OpenStack Platform (RHOSP) 17.1 (Wallaby) for Red Hat Enterprise Linux (RHEL) 9.2.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 17.1 for RHEL 9 x86_64
• Red Hat OpenStack Director Deployment Tools 17.1 for RHEL 9 x86_64
• Red Hat Enterprise Linux for x86_64 9 x86_64

Fixes

• BZ - 1645689 - [RFE] NetworkManager implementation for os-net-config
• BZ - 1911270 - Create manila share with name = 'None' and without name argument is ambiguous
• BZ - 1954673 - [RFE] Support metadata service with IPv6-only tenant network
• BZ - 1960710 - manila's OSC shell does not perform version auto negotiation
• BZ - 1982051 - resource provider record is not deleted by service delete if any allocation is left on the node after evacuation
• BZ - 2004286 - [RFE] DPDK memory pool tracking and configuration using MTU sizes and entries
• BZ - 2034801 - Deployment fails at task [Reload NetworkManager] when we have large VF per pF
• BZ - 2089940 - [RHOS-17] After a failed live-migration with sr-iov port detach timeout, nova attempts to reattach the port during rollback
• BZ - 2107306 - [OSP17.1] _numa_cells_support_network_metadata does not log any output even at debug
• BZ - 2107599 - Changing vnic type should be blocked at the neutron api for port that are attached to vms.
• BZ - 2126726 - Octavia client suggests TERMINATED_HTTPS protocol for pools and it is not supported
• BZ - 2158396 - [OVN migration] recovery-backup playbook fails with 'no hosts matched' if role name is ControllerSriov
• BZ - 2178501 - 17.1 - #5- Disconnecting from the wrong host - Fix issues with nova-manage volume_attachment subcommand
• BZ - 2178506 - 17.1 - #3 - VMs in locked state - Fix issues with nova-manage volume_attachment subcommand
• BZ - 2214036 - [RBAC][Manila] test "TestProjectAdminTestsNFS.test_grant_access_rule" fails with a timeout exception
• BZ - 2219830 - irqbalance: silently failing to enforce IRQBALANCE_BANNED_CPULIST
• BZ - 2220887 - [RHOSP 17.1] Power metric units are reported as current metrics (Watts instead of Ampere)
• BZ - 2222998 - [OSP17.1] "sqlalchemy.exc.TimeoutError: QueuePool limit of size 5 overflow 50 reached, connection timed out, timeout 30.00" error raised after repeated calls of Flavor.get_* methods
• BZ - 2232232 - [OSP17.1] TypeError: catching classes that do not inherit from BaseException is not allowed
• BZ - 2234492 - [DDF] [hackfest] ssh_key_rotation.yaml does not work, or at least not well
• BZ - 2234902 - 17.1 validation check-kernel-version, after 17.1 Update, el8 does not match configured kernel_version 5.14
• BZ - 2236159 - VM fails to contact metadata during live-migration
• BZ - 2238390 - OVN validation fails for subports with switchdev capabilities
• BZ - 2239356 - Introspection using Redfish virtual media failed with "Failed to resolve the hostname ([2001:DB8::1]) for node <nodeID>"
• BZ - 2242069 - tripleo_firewall not removing legacy/old firewall rules
• BZ - 2244365 - Stale ipamallocation entry remains when bulk port creation fails
• BZ - 2246444 - Trunk bridge are not set as netdev on dpdk nodes on revert
• BZ - 2247061 - Ceph deployment couldn't set 'target_size_ratio' for pools
• BZ - 2249079 - Overloaded OVN DB can break port binding process, leave port in inconsistent state and break other operations
• BZ - 2250052 - `default-node-count` validation fails if a user do `validation run` following the document.
• BZ - 2251176 - [RHOSP 17.1] Ceph dashboard looks for endpoints that are not available in haproxy config.
• BZ - 2251789 - FIP not withdrawn due to a race condition
• BZ - 2251794 - FIP unnecessarily withdrawn from all the overcloud nodes
• BZ - 2252228 - [OSP 17.1] Octavia re-deployment Fails on "Update CA private key "
• BZ - 2252379 - proxy arp not configure on provider bridge breaking connectivity
• BZ - 2253918 - [OSP17.1] Nova_virtlogd container is not running on the Compute node after it was rebooted.
• BZ - 2255181 - [OSP17.1] nova-manage image_property show throws unexpected keyword
• BZ - 2255588 - tripleo_kernel_args is not applied when the new KernelArgs is subset of preceding one.
• BZ - 2257967 - [ovn-migration] Remove ReaR automated CI parameters
• BZ - 2257969 - [ovn-migration] Unify revert procedure
• BZ - 2257991 - Duplicate Chassis/Chassis_Private rows not deleted by MaintenanceWorker
• BZ - 2258464 - [Backport][OSP17] Update test_fragmented_traffic_is_accepted
• BZ - 2258766 - The Sensubility log indicates an error in connecting to the AMPQ.
• BZ - 2258803 - deployed ceph failed with undefined tld_option
• BZ - 2262077 - Update OVN to 24.03 and OVS to 3.3 for OSP 17.1
• BZ - 2263516 - openstack security group list --project <project_name> takes very long and is not using RBAC
• BZ - 2264238 - After Upgrading the containers on the Compute nodes to RHEL 9.2 Instance are getting down during FFU from 16.2 to 17.2
• BZ - 2266778 - [Designate] transfers to bind does not work
• BZ - 2267882 - Only 20 records are shown of a designate zone in the horizon dashboard
• BZ - 2268601 - [OSP17.1] Trying to set a default volume-type for a project gets you "ERROR: You are not authorized to perform this operation. (HTTP 403)"
• BZ - 2269001 - port names display blank records port list (in horizon only)
• BZ - 2269219 - tripleo_iptables doesn't apply rules idempotently
• BZ - 2269548 - Tempest test tempest.scenario.test_network_advanced_server_ops.TestNetworkAdvancedServerOps.test_server_connectivity_resize fails randomly
• BZ - 2269653 - Backport request of "Fix to implement 'pack' or 'spread' VM's NUMA cells" into OSP17.1
• BZ - 2269699 - failed to create instance with a time out error "oslo_messaging.exceptions.MessagingTimeout: Timed out waiting for a reply to message ID "
• BZ - 2270555 - Backport https://bugs.launchpad.net/neutron/+bug/2037102 to wallaby
• BZ - 2271009 - [RHOSP 17.1] Autoscaling on Telemetry failing with FIPS enabled
• BZ - 2272546 - 17.1.2 frr-status and oslo-config-validator validation failures
• BZ - 2272946 - tripleo_ceph_client role is not applied when allovercloud,undercloud is used as a limit
• BZ - 2275940 - Respect the OPENSTACK_SSL_NO_VERIFY setting in the placement API
• BZ - 2276865 - Tracking BZ for tripleo_nftables backports
• BZ - 2278022 - metalsmith list returns Request requires an ID but none was found
• BZ - 2278562 - overcloud-hardened-uefi-full only has a 16MiB /boot/efi partition
• BZ - 2278832 - check for an nfs-container fails during ceph upgrade
• BZ - 2278838 - ceph-update-ganesha.yml playbook fails for missing variables
• BZ - 2279159 - OVN revision numbers bumped on Noop port updates
• BZ - 2279782 - If application is not in CephPools, then do not try to set it
• BZ - 2279977 - "Failed to set QoS type linux-noop on port vhuID: Operation not supported" errors are logged in RHOSP 17.1 DPDK environment
• BZ - 2280046 - The ovn-octavia-provider creates on OVSDB connection for every request
• BZ - 2280099 - ovsdbapp checks bad connection on start
• BZ - 2280120 - Dsync issue between the OVN north DB Load_Balancer and Octavia DB
• BZ - 2280335 - [revert] No trunk port connectivity after migration revert
• BZ - 2280656 - Controller disks fill up with logs
• BZ - 2281859 - [17.1] netdev_dpdk logged "Failed to create memory pool for netdev with MTU 1500" even though MTUs of all DPDK NICs were configured as 9000.
• BZ - 2283515 - [RHOSP16][RHOSP17][OVN] extra-dhcp-option classless-static-route is not working
• BZ - 2283600 - set_gateway_mtu fails if one of the lrp is deleted while it's running
• BZ - 2283796 - RHOSP 17.1 - When adding access rule in manila share then access-list goes into error state
• BZ - 2284095 - Remove leftover OVN LB HM port upon deletion of a member
• BZ - 2284275 - Unable to display ssh banner with sshd-baremetal-ansible.yaml
• BZ - 2290323 - After RHOSP upgrade from 16.2.5 to 17.1.3 manila existing share's lost the connectivity
• BZ - 2290340 - Backport VAST Data driver to RHOSP 17.1
• BZ - 2290360 - SSH connectivity not happening while preparing control plane OS upgrade.
• BZ - 2290396 - [17.1][BGP]Outage when frr is restarted in OSP nodes
• BZ - 2290400 - [17.1] Slow server list query for certain instances
• BZ - 2290411 - check_port_has_address_scope maintenance task fails on ports without binding:profile
• BZ - 2290422 - Bumping a revision number sometimes fails
• BZ - 2290473 - Neutron does not gracefully shutdown when receiving SIGTERM
• BZ - 2290660 - /boot/efi/EFI/redhat/grub.cfg needs to be replaced with a RHEL style redirect
• BZ - 2292039 - It is impossible to set custom action for fence_ipmilan device via FencingConfig
• BZ - 2292409 - OVN revision number misalign with Neutron revision number port
• BZ - 2293048 - 17.1 minor update has control plane API outage
• BZ - 2293102 - Undercloud registry serves tgz files with content-type:application/octet-stream
• BZ - 2293368 - overcloud images have console=ttyS0 in their default boot arguments
• BZ - 2293382 - dropped packets are logged and can cause stalls if console=ttyS0
• BZ - 2293735 - Upgrade [FFU 16.2 to 17.1] fails on 6.2.3 with cephadm command not found.
• BZ - 2294189 - `fdb_removal_limit` and `mac_binding_removal_limit` parameters in ml2_conf.ini don't seem to be reflected to OVN NB DB
• BZ - 2294246 - [RHOSP 17.1.3] Adding access rule for Manila with NetApp backend fails
• BZ - 2294369 - 'openstack loadbalancer healthmonitor set' requires '--delay <value>' in addition to the desired field.
• BZ - 2294876 - "over 4096 resubmit actions" error occurs when there are 250 neutron routers on a provider network
• BZ - 2294898 - Additional cells starting from 2nd cannot be created with create-nova-cell-v2.yaml
• BZ - 2294900 - last_active_at column is not updated in user table after authentication
• BZ - 2295401 - Duplicate role member
• BZ - 2295745 - [OVN] Neutron is not correctly handling the metadata port
• BZ - 2296291 - nftables flushed during overcloud FFU
• BZ - 2297423 - False labeling of hosts in the ceph_spec.yaml file when roles in roles_data.yaml aren't defined in overcloud-baremetal-deploy.yaml
• BZ - 2299016 - ceph-admin users not added to non admin cephadm hosts when they aren't labeled as osd in the ceph_spec.yaml
• BZ - 2299694 - minimal-image not booting up with UEFI.
• BZ - 2300098 - Manila IPAM approach for NetAppDriver is not aligned with OVN internals and OVN breaks network communications between VMs and shares
• BZ - 2301551 - "Insufficient compute resources: Claim pci failed." error blocks VM initiation. PCI devices are actually available
• BZ - 2302859 - [OSP17.1] Any new compute deployments fail on osp17.1 due to an incorrect task order in the ansible code
• BZ - 2302873 - Horizon operation logs are not getting generated when changing the credentials of the new user for the first time
• BZ - 2303489 - [RFE] extend keystone-manage to support replicated fernet tokens
• BZ - 2303675 - Getting "Unable to retrieve provider's statistics" after openstack deployment.
• BZ - 2303725 - [relnote] Deprecate vDPA (and HWOL?) in 17.1.4 to prepare for support stoppage in 18.0
• BZ - 2305055 - When lang setting is Japanese (for example), Horizon fails to show translated message after changing user password
• BZ - 2305061 - No way to build custom block device layouts with 17.1 overcloud images
• BZ - 2306498 - There doesn't seem to be a line where "Include" are defined in /etc/ssh/sshd_config of each node
• BZ - 2306799 - [Openstack 17.1.3] Octavia loadbalancer not allow members to access the VIP by default
• BZ - 2308089 - IPv4 LB with health monitors break after maintenance task execution
• BZ - 2308211 - "Regression VMDK/qcow arbitrary file access" follow up: remove AMI snapshot special case
• BZ - 2308660 - Neutron does not recognize IPv6 addresses with scope from the DNS resolver file
• BZ - 2309152 - New RPMs required for os-net-config should be part of the default overcloud image in 17.1.4
• BZ - 2309724 - race in tripleo_container_manage
• BZ - 2310698 - Drop stateless_sg property check from base method
• BZ - 2310795 - FFU 16.2 --> 17.1 Failing reloading custom nftable ruleset files due to undefined attribute
• BZ - 2310889 - QcowFormatInspector block qcow2v2 images
• BZ - 2312057 - Password rotation fails with 'container' is undefined
• BZ - 2312564 - os-net-config change is incompatible with RHEL8
• BZ - 2313764 - os-net-config should throw an error during node provision, if any network_config failure happens
• BZ - 2315341 - os-net-config needs to be able to update DNS nameservers without restarting interfaces for EDPM adoption
• BZ - 2316090 - Unable to configure br-ex with no members
• BZ - 2317182 - SRIOV VF performance degradation with testpmd in a rhel 9.2 vm
• BZ - 2322091 - [OSP 17.1][neutron] slow api reply for tenant ports listing

CVEs

(none)

References

(none)