RHEA-2015:1549 - Product Enhancement Advisory

Topic

Red Hat Enterprise Linux OpenStack Platform director packages that introduce the director tool for Red Hat Enterprise Linux OpenStack Platform 7.0.

Description

Red Hat Enterprise Linux OpenStack Platform director provides the
facilities for deploying and monitoring a private or public
infrastructure-as-a-service (IaaS) cloud based on Red Hat Enterprise Linux
OpenStack Platform.

This update also addresses multiple bugs, which are documented in the Red Hat Enterprise Linux OpenStack Platform Release Notes linked to in the References section.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise Linux 7.1.

The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes (see the References section) contain the following:

• An explanation of the way in which the provided components interact to form a working cloud computing environment.
• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 7, including which channels need to be enabled and disabled.

This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 7 x86_64

Fixes

• BZ - 1172671 - Error messages appear in .instack/install-undercloud.log
• BZ - 1173975 - We get a "No flavor" error in .instack/install-undercloud.log after instack-install-undercloud
• BZ - 1174293 - When starting the undercloud VMs they fail with "no bootable device"
• BZ - 1174763 - Services fail to restart and reload during instack-install-undercloud
• BZ - 1175260 - After rebooting the controller and compute VMs they're stuck for a long time on "no route to host"
• BZ - 1181671 - Missing CONTROLSCALE variable in deploy-overcloudrc
• BZ - 1183027 - Pie chart colors are wrong
• BZ - 1185823 - When registering bare metals they stay in "discovering" status forever
• BZ - 1190481 - Don't log everything to /var/log/messages
• BZ - 1191530 - Undercloud parameters pxe_deploy_ramdisk and pxe_deploy_kernel are not passed to ironic
• BZ - 1191536 - Network traffic from overcloud to internet/outside is blocked by undercloud’s iptables filter
• BZ - 1192145 - When a role is not used in a deployment you get a warning: "Role has no flavor"
• BZ - 1193476 - Nova is unstable, can't launch instances in the overcloud: "no valid host was found"
• BZ - 1193513 - Wrong memory detection in the discovery ramdisk
• BZ - 1193922 - CLI is not saving deployment parameters to Tuskar plan
• BZ - 1196203 - 'tuskar role-list' outputs several blank lines
• BZ - 1196725 - CLI - removing a role just prints the plan-show output
• BZ - 1197857 - openstack-tuskar-ui : Something went wrong ! when attempting to perform node-action without selecting node.
• BZ - 1198821 - instack-undercloud: "Polling discoverd for discovery results" stage gets stuck.
• BZ - 1199923 - Make sure both keystone and the tuskar GUI show the correct horizon URL
• BZ - 1200194 - nova fails to start during instack-install-undercloud because psutil module not found
• BZ - 1200596 - Bare metal overcloud hosts fail cloud-init metadata retrieval
• BZ - 1201481 - instack-undercloud: Upon completing overcloud deployment, sourcing /etc/tripleo/overcloudrc returns errors.
• BZ - 1201505 - Floating IPs can not be assigned in instack installed overcloud
• BZ - 1205281 - Tuskar installation incomplete - DB not set up properly
• BZ - 1205825 - instack-undercloud: instack-install-undercloud exits with error Cannot reassign variable ssl_interface at /etc/puppet/modules/rabbitmq/manifests/config.pp:35
• BZ - 1206360 - instack-undercloud: after enabling the pxe_drac driver for a host, running instack-ironic-deployment --discover-nodes gets stuck.
• BZ - 1207370 - [RFE] Introduce support for Cinder HA via Ceph
• BZ - 1210479 - Sample deploy-baremetal-overcloudrc should be commented
• BZ - 1212740 - Incorrect get_file paths when passing tuskar templates to heat
• BZ - 1214960 - instack-install-undercloud fails on RHEL 7.1 if python-six not installed
• BZ - 1215299 - Instack-undercloud: Error during instack-install-undercloud : ArgumentError: Could not parse rfc1738 URL from string '' .
• BZ - 1218322 - Keystone auth fails after bare-metal deployment via instack-deploy-overcloud --tuskar
• BZ - 1220651 - Tuskar service defaults to no auth required
• BZ - 1221308 - ValueError: too many values to unpack while removing a role from a plan
• BZ - 1222068 - undercloud install failure - File "/tmp/tmpwNKxjS/install.d/02-puppet-stack-config", No such file or directory
• BZ - 1222318 - (os-refresh-config) [ERROR] during configure phase. [Command '['dib-run-parts', '/usr/libexec/os-refresh
• BZ - 1223210 - unbound variable error for 90-tuskar-db-sync
• BZ - 1224651 - Overcloud: Overcloud deployment failed because of /bin/instack-deploy-overcloud: line 457: instackenv.json: Permission denied
• BZ - 1224655 - Overcloud: Overcloud deployment failed on bare metal. Heat stack-list shows that stack creation complete.
• BZ - 1224813 - instack-undercloud: running "instack-virt-setup" doesn't create the instack VM.
• BZ - 1224978 - Can't create cinder volume after removing one of ceph osd nodes
• BZ - 1225016 - Overcloud: Download of glance image fails because of wrong glance_store option.
• BZ - 1225113 - instack-build-images can not build discovery ramdisk
• BZ - 1225138 - rhel-osp-director: Overcloud deployment failed due to missing horizon bits from the overcloud image (when used: rhos-release 7 ) .
• BZ - 1225208 - rhel-osp-director: No package python-rdomanager-oscplugin available.
• BZ - 1225226 - Nodes discovery fails when instackenv.json file contains nodes mac addresses.
• BZ - 1225477 - dns_nameservers for provisioning network set to 192.168.122.1 on baremetal env
• BZ - 1225621 - Provisioning fails for one of the overcloud nodes on baremetal env
• BZ - 1225926 - Overcloud deployment fails when provisioning Ceph node
• BZ - 1226097 - rhel-osp-director: The overcloud deployment times out.
• BZ - 1226693 - instack-undercloud-2.1.0-3.el7ost.noarch missing /usr/share/instack-undercloud/undercloud.conf.sample
• BZ - 1226957 - CREATE_FAILED for overcloud deploy on baremetal, 1 node active, 1 in error state: "BadRequest: Expecting to find username or userId in passwordCredentials"
• BZ - 1227013 - Broken nodes links in undercloud Horizon
• BZ - 1227050 - rhel-osp-director: The overcloud deployment with COMPUTESCALE=2 reported failure.
• BZ - 1227421 - Overcloud deployment failed - "Resource CREATE failed - status code: 1 - Error running /var/lib/heat-config/heat-config-puppet
• BZ - 1227450 - Add plotnetcfg package to the list of default components installed on a node
• BZ - 1227755 - discoverd edeploy plugin puts too much data in Ironic extra column
• BZ - 1227873 - Don't overwrite all Tuskar parameters when deploying
• BZ - 1227936 - instack-virt-setup output is not logged
• BZ - 1227940 - deployment_mode in undercloud.conf does nothing
• BZ - 1228419 - OSP director does not support split network overcloud configurations
• BZ - 1228433 - Tuskarclient does not support --os-cacert
• BZ - 1229296 - ironic services did not start up after reboot
• BZ - 1229302 - /etc/puppet/hieradata/compute.yaml is world readable with plain text passwords
• BZ - 1229699 - /etc/os-collect-config.conf is world readable and contains credentials to openstack
• BZ - 1229795 - Post-install validation doesn't exist in the CLI
• BZ - 1229796 - DRAC ready-state configuration doesn't exist in the CLI
• BZ - 1229895 - Enable NetApp Backends in Cinder
• BZ - 1230196 - BareMetal/node show info is huge and unreadable same for ironic client
• BZ - 1230302 - Ability to deploy overcloud with Pacemaker
• BZ - 1230450 - Instack/Tuskar/OSCPlugin should allow usage of either gre, vxlan or vlan for the tenant networks
• BZ - 1230823 - Missing dependency on PyYAML
• BZ - 1230840 - Tempest needs additional configuration to run successfully
• BZ - 1230890 - The undercloud does not support ssl for OpenStack endpoints
• BZ - 1230966 - Overcloud post deployment fails with Pacemaker enabled - nodes active, CREATE_FAILED
• BZ - 1231214 - Include subscription-manager setup in the overcloud by default
• BZ - 1231484 - Openstack overcloud deploy does not create a /home/stack/overcloudrc file on the undercloud
• BZ - 1231945 - Tuskar-UI pie charts don't display states correctly
• BZ - 1231965 - Undercloud heat should use stack domain users
• BZ - 1231970 - Overcloud updates do not apply puppet hieradata changes
• BZ - 1232269 - hostname resolution errors prevent HA deployment with multiple controllers to complete
• BZ - 1232313 - 'openstack baremetal list' doesn't show proper error message when stackrc credentials are not loaded
• BZ - 1232439 - Isolated networks should allow a specific range of IPs
• BZ - 1232480 - Compute nodes should not be connected to external net/bridge
• BZ - 1232482 - Storage nodes should not have br-ex
• BZ - 1232485 - Network interface configuration should be parameterized
• BZ - 1232498 - Overcloud deploy and post deploy steps fail - some showing auth failures
• BZ - 1232747 - Horizon vhosts using different IP address than the one reported after overcloud deployment
• BZ - 1232797 - Ceilometer redis url not showing up on all controllers in HA deployment
• BZ - 1232851 - Unified CLI says the deployment failed but it actually worked
• BZ - 1232938 - rhel-osp-director: HA deployment - openstack-nova-novncproxy fails to start.
• BZ - 1232943 - devtest_testenv.sh doesn't support --baremetal-bridge-names or --vlan-trunk-ids parameters
• BZ - 1232976 - Should include 'environments' directory in openstack-tripleo-heat-templates RPM
• BZ - 1233061 - rhel-osp-director: HA deployment - neutron services fails to start on one controller .
• BZ - 1233063 - rhel-osp-director: overcloud runs with selinux in permissive mode
• BZ - 1233090 - rhel-osp-director: should support openstack log collector /sos
• BZ - 1233199 - Always enable config drive in Nova for the undercloud
• BZ - 1233201 - OSC plugin should have one way to scale a deployment
• BZ - 1233283 - Ceilometer mongo url not set on all controllers in HA setup
• BZ - 1233860 - rhel-osp-director: The values for network, floating ip and scales in the deploy-overcloudrc file are being ignored for the overcloud deployment, although the file was sourced.
• BZ - 1233916 - configure an ntp server on all overcloud nodes
• BZ - 1233956 - [rhel-osp-director][unified-cli] : Error when attempting to attach volume to instance using unified-cli (endpoint for volumev2 service named cinderv2 not found).
• BZ - 1233962 - Add ability to set neutron parameters on CLI
• BZ - 1233965 - Timeout for deploy should be 60 minutes
• BZ - 1234329 - get_nodes_stats() refactoring incomplete
• BZ - 1234338 - AHC-matching overrides already deployed nodes tags
• BZ - 1234343 - 75 % success for introspection (VM)
• BZ - 1234363 - Hacking version needs bump
• BZ - 1234372 - Filter and format parameters for plan role in OSC
• BZ - 1234374 - Handle creation of plan with existing name
• BZ - 1234613 - The overcloud_validate script is using run_tempest.sh where it should call tools/run-tests.sh
• BZ - 1234637 - HAProxy health check for glance_registry fails for all backend nodes
• BZ - 1234673 - "openstack overcloud deploy" does not respect command-line parameters
• BZ - 1234817 - HAProxy binds only on addresses from brctlplane network when using network isolation.
• BZ - 1234856 - Overcloud: Overcloud deployment fails with ERROR: openstack plan_uuid
• BZ - 1234861 - Postconfig of cloud needs to be in same step as deploy
• BZ - 1234875 - Neutron initialization fails
• BZ - 1234926 - [rhel-osp-director][undercloud installation] There's no output on the screen when running the command 'openstack undercloud install'.
• BZ - 1234962 - /etc/puppet/hieradata should not world readable on the undercloud
• BZ - 1235000 - The method of passing extra heat templates to openstack overcloud deploy is not intuitive
• BZ - 1235285 - Cannot change Deployment Role
• BZ - 1235314 - --floating-id-cidr should be --floating-ip-cidr
• BZ - 1235334 - NeutronControlPlaneID is set to empty string in tuskar overcloud plan
• BZ - 1235408 - HAProxy should use clustercheck for galera nodes health checks
• BZ - 1235421 - RedHat.yaml hieradata is not provisioned on nodes
• BZ - 1235454 - Mariadb service enabled by systemd in HA deployment
• BZ - 1235476 - Public VIP is not being created on external network
• BZ - 1235598 - journald logs on overcloud nodes should be persistent
• BZ - 1235624 - The VIP for keystone and horizon should not be on the control plane
• BZ - 1235631 - After deploying, system load charts shown on the overview page are incorrect
• BZ - 1235652 - Overcloud:HA: Fence agents packages are not installed on controllers after overcloud deployment. Fencing can not be used.
• BZ - 1235667 - Overcloud create failed because of DracOperationFailed
• BZ - 1235703 - keystone started by systemd initially, causing pacemaker resource for keystone to fail to start
• BZ - 1235725 - DIB fails on not finding sos
• BZ - 1235742 - [rhel-osp-director] the overcloud images contain rdo repos .
• BZ - 1235748 - Overcloud heat should use stack domain users
• BZ - 1235749 - ERROR: openstack 'PlanManager' object has no attribute 'find'
• BZ - 1235820 - The default for NeutronNetworkVLANRanges is set to datacentre:1000 which is not valid.
• BZ - 1235836 - Overcloud horizon does not has 'Create Network' button under project tab
• BZ - 1235844 - Overcloud horizon does not has 'Create Router' button under project tab
• BZ - 1235848 - vip.yaml missing interface parameter for ControlPlaneNetwork
• BZ - 1235851 - Overcloud Horizon - 'Create Security Group' button is missing
• BZ - 1235860 - Overcloud Horizon - 'Create Key Pair' button is missing
• BZ - 1235875 - Failed to launch an instance from Overcloud Horizon
• BZ - 1235884 - Overcloud Horizon - 'Create Volume' button is missing
• BZ - 1235908 - Heat error when deploying with network isolation enabled
• BZ - 1235994 - Tuskar deployments default to a Ceph scale of 1
• BZ - 1236054 - Keystone cert params are set to '' in tuskar plan
• BZ - 1236073 - osp-director is using the wrong script to launch tempest
• BZ - 1236138 - [rhel-osp-director][unified-cli]: openstack unified-cli commands display - Warning Module novaclient.v1_1 is deprecated.
• BZ - 1236167 - CephStorageNodesPostDeployment fails with "Deployment exited with non-zero status code: 6"
• BZ - 1236251 - Default route should be on external network when network isolation is used
• BZ - 1236360 - [UX] - The GUI is too slow, it can take about 1 minute just to navigate from page to page
• BZ - 1236374 - Overcloud Heat stops working when turning off one controller in HA setup
• BZ - 1236380 - Overcloud Horizon - unable to edit project
• BZ - 1236399 - missing few neutron parameters on CLI
• BZ - 1236407 - Redis replication breaks after network partitioning Redis master
• BZ - 1236539 - Overcloud:HA: Public VIP is missing when network isolation is not used.
• BZ - 1236578 - HA deploys on virt create stack but error: "ERROR: openstack Not enough l3 agents available to ensure HA."
• BZ - 1236694 - UPDATE_FAILED for ControlVirtualIP and Ceph-Storage
• BZ - 1237064 - Swift objects containing ironic extra data are not accessible by the admin user
• BZ - 1237068 - Ensure all parameters are passed to Tuskar as strings
• BZ - 1237144 - Neutron l3-agent active on all 3 controllers when using network isolation
• BZ - 1237145 - Need support for NFS for cinder
• BZ - 1237150 - Need support for NFS for glance
• BZ - 1237235 - Merge HA for Horizon
• BZ - 1237329 - Overcloud: HA: Pacemaker and ironic fighting for control causing fencing to fail when rebooting/powering off the node.
• BZ - 1238117 - Possible race condition causing neutron to have bad configuration state
• BZ - 1238217 - Overcloud floating IPs not working when deploying overcloud with external network on tagged vlan
• BZ - 1238336 - 2/3 requests for Nova instance VNC console fail in HA overcloud
• BZ - 1238434 - /usr/share/ipxe/undionly.kpxe’: No such file or directory
• BZ - 1238750 - When deploying HA some neutron services are down
• BZ - 1238821 - Add sos package to all image builds
• BZ - 1238844 - heat_stack_user_role not usable after deployment
• BZ - 1238862 - Heat cfn api not working properly
• BZ - 1239110 - The overcloud _validate script can't take a skip list as option
• BZ - 1240101 - Hard Coded paths to openstack-heat-triple-o-heat-templates
• BZ - 1240449 - overcloud heat instance_user is set to heat-admin
• BZ - 1240461 - Running openstack overcloud deploy twice results in UPGRADE_FAILED
• BZ - 1240631 - Template parameters required for ML2_TUNNEL_ID_RANGES and ML2_VNI_RANGES
• BZ - 1240679 - Deploy fails or has non-zero return code - ERROR No valid host was found. There are not enough hosts available. Code: 500"
• BZ - 1240824 - MariaDB max_connections must be based on controller count * core count
• BZ - 1241131 - DNS server is not accessible by different overcloud hosts
• BZ - 1241231 - director HA deployment fails when duplicate service tenant is created
• BZ - 1241255 - scale failed : Unknown status FAILED due to "AttributeError: 'module' object has no attribute 'MessagingTimeout'"
• BZ - 1241271 - Postdeploy steps do not account for new no_proxy contents
• BZ - 1241422 - SElinux is set as Enforcing in the Ceph OSD nodes
• BZ - 1241583 - Remove creation of default-net, default-router and ext-net from postconfig
• BZ - 1241610 - ERROR: The Parameter (NeutronExternalNetworkBridge) was not defined in template.
• BZ - 1241742 - ERROR openstack Connection to neutron failed: ('Connection aborted.', BadStatusLine("''",)
• BZ - 1241848 - During deploy got the the message: Failed to validate: The specified reference "ControllerOvercloudServicesDeployment_Step6" (in ExtraConfig) is incorrect.
• BZ - 1241891 - Basic deployment with Ceph, neutron is non funtional.
• BZ - 1242052 - Deployment hangs because no controller services are running
• BZ - 1242967 - Allow run package update with heat templates directly (w/o tuskar)
• BZ - 1242973 - Allow extra env files when running package update
• BZ - 1242989 - Allow run "overcloud node delete" with heat templates directly (w/o tuskar)
• BZ - 1242990 - Allow extra env files when running "overcloud node delete"
• BZ - 1243016 - Remove duplicate arguments to the deploy command.
• BZ - 1243056 - Remove creation of default-net, default-router and ext-net from postconfig
• BZ - 1243274 - Doing overcloud deploy with ceph scale > 0 and --use-tripleo-heat-templates (or --templates) does not use ceph
• BZ - 1243365 - No way to specify deployment timeout
• BZ - 1243594 - When deploying from UI we miss to add params based on scale logic
• BZ - 1243846 - Neutron L3 agent HA doesn't get configured when using direct heat templates for provisioning
• BZ - 1244013 - compute nodes configured to talk to cinder api over publicurl
• BZ - 1244019 - CinderStorage nodes configured to talk to Nova and Swift api over publicUrl
• BZ - 1244226 - allow_overlapping_ips should be enabled by default
• BZ - 1244810 - Scale out from 1 compute to 3 in a BM setup with Ceph, fails due to a virsh secret that wasn't created
• BZ - 1244913 - rhel-osp-director: "Not enough l3 agents available to ensure HA. Minimum required 2, available 1." upon attempt to create a router on the overcloud.
• BZ - 1244969 - rhel-osp-director: HA deployment with SSL enabled: unable to save glance images.
• BZ - 1245159 - [Director] external vlan network with network isolation doesn't work
• BZ - 1245169 - Cannot login in Undercloud UI
• BZ - 1245192 - Something went wrong - EndpointNotFound

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal