RHEA-2019:2811 - Product Enhancement Advisory

Topic

Red Hat OpenStack Platform 15.0 (Stein) is now available for Red Hat Enterprise Linux 8.0.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For more information about the bug fixes and enhancements included with this update, see the "Technical Notes" section of the Release Notes linked in the References section.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 15 runs on Red Hat Enterprise Linux 8.0.

The Red Hat OpenStack Platform 15 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 15, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 15 x86_64
• Red Hat OpenStack for IBM Power 15 ppc64le
• Red Hat OpenStack Director Deployment Tools 15 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 15 ppc64le
• Red Hat Enterprise Linux for x86_64 8 x86_64

Fixes

• BZ - 1240852 - [RFE] NIC Config Templates Should Include MTU Settings
• BZ - 1241596 - [RFE] Need to be able to deploy and manage multiple Overclouds from a single Undercloud
• BZ - 1321681 - RFE: [OSP15] Enable rabbitmq management plugin
• BZ - 1379010 - Cisco UCS 200-M3 blades will not properly boot over the network from IPMI without skipping setting boot device with the IPMI driver
• BZ - 1393480 - [RFE][Deployment] Explicitly configure machine type for KVM to guarantee migration compatibility
• BZ - 1398290 - [RFE] Validation of nova-event-callback configuration after OSPd installation is needed
• BZ - 1431737 - [RFE] Tooling for Overcloud Control Plane Backup and Restore
• BZ - 1445662 - [RFE] Validation that root device hints are set for multi-disk nodes
• BZ - 1462840 - [RFE] Validate required OpenStack repositories before upgrade
• BZ - 1484601 - TLS for Manila Internal services
• BZ - 1504090 - [RFE] Kuryr-kubernetes NetworkPolicy support
• BZ - 1512686 - [RFE][ironic] Redfish driver to manage system boot mode
• BZ - 1513565 - post-deployment validations return false positive SUCCESS output
• BZ - 1517811 - The TLS environment yaml file appear in 2 places in the templates
• BZ - 1524393 - [RFE] extract volume_image_metadata from volume events
• BZ - 1524402 - [RFE] extend default volume resource type definition to include instance_id and image_id
• BZ - 1526109 - [Lenovo RFE] Add Lenovo Ironic XClarity Driver
• BZ - 1527927 - [RFE] Location awareness for Ironic conductors and nodes
• BZ - 1534587 - [RFE] Ability to Partition NICs at OpenStack installation time, by using SR-IOV on the host
• BZ - 1535066 - [RFE] Support for chrony NTP service
• BZ - 1542115 - [Horizon] "Delete Volume on instance delete" is appearing twice if we boot instance from volume tab under horizon dashboard.
• BZ - 1546844 - [RFE] Add per-network route support for routed spine-and-leaf
• BZ - 1547728 - [RFE] Decouple Sahara plugins from core project
• BZ - 1550981 - [OSP15] Creating snapshot fails when image metadata has version field
• BZ - 1553195 - [RFE][Manila] Ensure Manila is fully Python 3 compatible
• BZ - 1553198 - [RFE][Manila]Python 3 compliant CephFS driver
• BZ - 1554014 - [RFE][Cinder] Ensure Cinder is fully Python 3 compatible
• BZ - 1566619 - Enable discard support for Ceph RBD
• BZ - 1578828 - The validator "Compare switch port VLANs to VLANs in nic config" generates multiple warning
• BZ - 1578884 - [OSP15] Upgrade rabbitmq to 3.7.x
• BZ - 1579371 - [RFE] Kuryr-Kubernetes HA
• BZ - 1581469 - [RFE] collect-procevent plugin
• BZ - 1585835 - [RFE][Manila] Implement manila-api with httpd
• BZ - 1593758 - [RFE][ironic] Redfish driver to manage BIOS configuration
• BZ - 1594272 - [RFE][Deployment] Add nova configuration item to enable memoryBacking Source type file, with shared access
• BZ - 1595543 - osp13/12 cinder netapp template uses deprecated parameters
• BZ - 1601054 - Securing metadata service with isolated metadata enabled
• BZ - 1601576 - [RFE] Allow all overcloud networks to be Neutron routed networks
• BZ - 1607779 - [RFE] Direct deploy without Swift
• BZ - 1608563 - dhcp_start and dhcp_end should be optional for leaf definitions added to undercloud.conf
• BZ - 1609796 - [RFE] Split ironic ipxe/pxe interfaces to enable multi-arch deployments
• BZ - 1609802 - [RFE] Support ramdisk deployment
• BZ - 1612113 - [RFE][Sahara] Ensure Sahara is fully Python 3 compatible
• BZ - 1612361 - [RFE] Release of APIv2 as Stable
• BZ - 1613038 - [RFE][Cinder] RBD driver support to get manageable snapshots
• BZ - 1613751 - Change downstream Neutron Tempest plugin to be branchless
• BZ - 1613922 - [RFE][Glance] Ensure Glance is fully Python 3 compatible
• BZ - 1613949 - [RFE][Deployment][OSP15] support for templated cell database URLs
• BZ - 1614444 - [RFE][Manila] Ensure Manila is fully OVN compatible
• BZ - 1615670 - [TESTONLY] [RFE] [NFV] Numa aware vswitch
• BZ - 1615809 - [RFE] Replace Docker by Podman for containers management
• BZ - 1619761 - [RFE] Python 3 Support Essential Across Entire Director Code-Base
• BZ - 1619762 - [RFE] Update to Puppet 5
• BZ - 1620052 - [RFE] [Kuryr] Python3 support for Stein/RHEL8
• BZ - 1622659 - [RFE] find a replacement for docker-distribution on the Undercloud
• BZ - 1622748 - [RFE] Use buildah for image modifications during image prepare
• BZ - 1622968 - consistency group test are failing in OSP 13
• BZ - 1623135 - Test and re-package fluentd for RHEL 8 Ruby versions
• BZ - 1623641 - [RFE] Fluentd deprecation documented
• BZ - 1623682 - [RFE] Ansible playbook for backup - Automation of the steps required to backup the control plane, including standard configurations
• BZ - 1623683 - [RFE] [TechPreview] Deploy separate stacks for control plane services and compute/storage services. (split-controlplane)
• BZ - 1623810 - Update OVS to 2.11 for OSP 15
• BZ - 1623850 - OVN RHEL 8 support
• BZ - 1623852 - OVN Python 3.6 support
• BZ - 1623857 - Octavia RHEL 8 support
• BZ - 1623860 - Octavia python 3.6 support
• BZ - 1623864 - Octavia OSP 14 to 15 upgrade
• BZ - 1623890 - Neutron RHEL 8 support
• BZ - 1623892 - Neutron python 3.6 support
• BZ - 1623954 - Support Pre Upgrade Checks
• BZ - 1624486 - RFE: Port novajoin to support versioned notifications
• BZ - 1624488 - RFE: Port novajoin to support Python3
• BZ - 1625520 - Undercloud - allow enabling routed_networks on undercloud upgrade
• BZ - 1626124 - [TESTONLY] [RFE] [NFV] Distributed Compute Node for NFV
• BZ - 1626139 - [RFE] All-in-One in Production (templates and testing of single node deployment)
• BZ - 1629128 - [RFE] `openstack overcloud node clean` should have a flag "--provide" to switch the nodes to available after cleaning
• BZ - 1630964 - Streaming raw images only works for whole disk images
• BZ - 1635261 - Unreliable access to DB information
• BZ - 1635862 - [RFE] Deploy Glance Cache with TripleO
• BZ - 1636179 - [RFE] Add TripleO support for configuring cinder backend availability zones
• BZ - 1636641 - Failed introspection in OC returns 0
• BZ - 1636893 - Neutron/vNES and Neutron/networking-ovn Metadata sidecar containers is broken with haproxy 1.8
• BZ - 1639184 - [RHOSP11]openstack client requires access to keystone's v2.0 adminURL, when it really shouldn't
• BZ - 1640210 - TripleO - Switch the default network backend to ML2/OVN
• BZ - 1640277 - WebSSO initial redirect 404s
• BZ - 1641963 - Can't bind port is already configured
• BZ - 1643031 - Invalid link in validations
• BZ - 1645316 - [OSP15] Nova fails to attach both interfaces to VM after hypervisor reboot
• BZ - 1645600 - [OSP14] ansible-role-tripleo-modify-image provide non-human readable output in tripleo-container-image-prepare.log in case of error
• BZ - 1646986 - Tempest test test_pod_vm_ping is stuck
• BZ - 1647057 - Cannot limit memory usage on containers using paunch
• BZ - 1647119 - New package ansible-role-chrony
• BZ - 1647449 - Pacemaker resource constraints cause API outage during maintenance
• BZ - 1647673 - The validator "Check network requirements for an OpenShift on OpenStack deployment" fails, because an undefined variable in the code
• BZ - 1647991 - [RFE] Support new Pacemaker major release from RHEL8, in Director
• BZ - 1647998 - [RFE] Support new HAProxy 1.8 from RHEL8, in Director
• BZ - 1648337 - Multiattach does not work with LVM+LIO target
• BZ - 1648407 - Switch from brctl (bridge-utils) to pyroute
• BZ - 1649688 - [osp15] nova diagnostics command is not working with all instances
• BZ - 1649837 - neutron.get_floatingip method does not exist
• BZ - 1651542 - test_pod_service_curl fails with multiprocessing.TimeoutError
• BZ - 1655887 - [Kuryr-Tempest-Plugin] No python-openshift package in Fedora/CentOS
• BZ - 1656473 - [TestOnly][OSP15] Sanity-test RHEL-8 Nova instance on RHEL-8 Compute
• BZ - 1656878 - merge-new-params-nic-config-script should gracefully exit if role not defined
• BZ - 1658769 - [OSP 15][RFE] non-admin user should be able to run nova list --host <host> command
• BZ - 1660734 - Add glance cache-manage utility
• BZ - 1660851 - Disable NUMA live migration by default
• BZ - 1660869 - [OSP15][Deployment] Disable NUMA live migration by default
• BZ - 1660951 - race condition with privsep utime results in instance create failure
• BZ - 1661022 - [RFE][cinder]: Attach a single volume to multiple hosts
• BZ - 1661514 - sg_mode create is not enforced without namespace handler or svc of ClusterIP type
• BZ - 1661635 - Enable TLS-Everywhere when IdM is not on the ctlplane network
• BZ - 1661790 - Adding Podman support to the Undercloud Validations
• BZ - 1661913 - [V2V][OSP] VM migrations fails if VM name contains international characters
• BZ - 1663911 - [OSP15] Instance live migration fails to DST host when instance got evacuated previously from DST host
• BZ - 1664669 - Configure switchdev while there is no vfs bounded
• BZ - 1665513 - [osp15] Add python-openshift rpm to OSP15
• BZ - 1665519 - [osp15] Add kuryr-test-tempest rpm to OSP15
• BZ - 1666379 - /etc/pki/ca-trust/source/anchors/cm-local-ca.pem has wrong permissions after undercloud installation
• BZ - 1666387 - br-ctlplane interface doesn't come up at boot time after rebooting the undercloud post install
• BZ - 1666529 - Configure glance-import image_conversion plugin when the glance backend is rbd
• BZ - 1667041 - We need to rebuild sensu for RHEL8
• BZ - 1667554 - Importing nodes before importing images results in error and traceback.
• BZ - 1667977 - HorizonSecureCookies is missing from the new environments/ssl/enable-tls.yaml
• BZ - 1668402 - Network policies are blocking host to pod communication
• BZ - 1668486 - [RFE] make ironic-python-agent RHEL 8 compatible
• BZ - 1668938 - fluentd attempting to install via gem install
• BZ - 1669093 - please add collectd-rabbitmq-monitoring and pyrabbit2 to distribution
• BZ - 1669214 - RGW - Tempest test: AccountQuotasNegativeTest.test_user_modify_quota fails with 403
• BZ - 1670217 - RGW - Tempest test: ObjectTestACLs.test_read_object_with_rights fails with 404
• BZ - 1670227 - RGW - Tempest test: test_object_version.ContainerTest.test_versioned_container fails with 412 PreconditionFailed
• BZ - 1670419 - Add support for pulling container images from registries that require authentication
• BZ - 1670606 - [OSP15] requirements do not exist in RHEL 8 Beta: sdparm
• BZ - 1670996 - nova api (in wsgi) returns RecursionError: maximum recursion depth exceeded while calling a Python object
• BZ - 1671786 - [OSP15] stack update failures caused by permission changes under '/var/lib/nova/mnt' on the compute nodes
• BZ - 1673530 - [OSP15] openstack-nova-base-container includes OVMF which is archful, and we need multi-arch solution
• BZ - 1673614 - RFE: switch to dependancy on qemu-kvm-core + block modules
• BZ - 1674391 - add the ovs_extra parameter to ovs vlan interfaces
• BZ - 1676951 - Sensu deprecation documented
• BZ - 1677364 - Downstream OSP15 should deploy Podman by default on the Overcloud
• BZ - 1677556 - NP: services sg rules not updated when scaling deployments
• BZ - 1677562 - Race when deleting namespaces with network policies
• BZ - 1677658 - Running glance via python3 breaks when using the swift backend
• BZ - 1678681 - REVERT_RESIZE stuck for 300s: "VirtualInterfaceCreateException: Virtual Interface creation failed
• BZ - 1678893 - [OSP 15][tripleo-heat-templates] - make uuid for hiera per-node customization case insensitive.
• BZ - 1679588 - openstack-nova-base-container includes bridge-utils due to os-vif dependency
• BZ - 1683744 - [OSP15] Nova Ephemeral over NFS forces v4 protocol instead of relying on version negotiation
• BZ - 1683746 - Include python-ovirt-engine-sdk4 downstream only package
• BZ - 1683764 - 'openstack tripleo container image prepare default' does not provide downstream red hat registry/namespaces
• BZ - 1684278 - Run tripleo-container-image-prepare logged to /var/log/tripleo-container-image-prepare.log task fails when using insecure registry
• BZ - 1684301 - During undercloud installation podman pull fails with Digest did not match errors when uploading images to the undercloud registry
• BZ - 1684885 - [OSP SELinux][Octavia][RHEL8] Amphora AVC denied errors
• BZ - 1685619 - swift write() error when downloading container
• BZ - 1685621 - Mistral's eventlet monkeypatching breaks git-python
• BZ - 1685658 - openvswitch doesn't start after a reboot
• BZ - 1686397 - [osp15] mistral-executor is stuck with 100% cpu
• BZ - 1686450 - Add a new package - Elixir (required for RabbitMQ 3.7.x and up)
• BZ - 1686621 - openstack tripleo container image prepare default doesn't provide downstream values for OpenShift related parameters
• BZ - 1688048 - Undercloud deploy containers fail to start - stat /etc/localtime: no such file or directory
• BZ - 1688311 - [upgrades] logs usability on undercloud upgrade to osp15
• BZ - 1688747 - [osp15] default deployment is not HA
• BZ - 1688748 - Remove THT validation that prevents configuring OVN with VLAN tenant network type
• BZ - 1689384 - Undercloud deploy - fail if ctlplane-network not defined in undercloud.conf
• BZ - 1689451 - undercloud install failed while add IronicDefaultDeployInterface: direct
• BZ - 1689626 - multi-domain keystone configuration must be reflected in Horizon as well
• BZ - 1689671 - Undercloud: neutron containers healthcheck failed
• BZ - 1689866 - Import os-ken project to OSP as Neutron's dependency
• BZ - 1689907 - Undercloud: zaqar containers healthcheck missing
• BZ - 1689913 - overcloud image prepare fails in Install packages in overcloud image
• BZ - 1690784 - [OSP15] Controller-replacement fails (controller-removal) because : /var/log/containers/nova/nova-manage.log is owned by root:root
• BZ - 1691408 - Re-deployment of Undercloud failed on stopping tripleo-heat-engine container service
• BZ - 1691551 - Deployment of overcloud nodes with more than 2 disks fails
• BZ - 1691565 - Director deployed OCP 3.11 deployment fails with "msg": "SSH Error: data could not be sent to remote host \"localhost\". Make sure this host can be reached over ssh", "unreachable": true}
• BZ - 1691839 - [OSP15][Deployment] Volumes remain in the attached state even when the instance is already deleted
• BZ - 1691870 - openstack overcloud delete shows user input prompt after providing input
• BZ - 1692325 - [osp15] ha containers selinux denials (var_log_cluster_t)
• BZ - 1692462 - [OSP15][SELinux issue] overcloud deploy fails connecting to localhost (undercloud) during inital setup
• BZ - 1692823 - tripleo-common: TripleO should configure server_certs_key_passphrase for Octavia
• BZ - 1692827 - puppet-octavia: TripleO should configure server_certs_key_passphrase for Octavia
• BZ - 1692830 - tripleo-heat-templates: TripleO should configure server_certs_key_passphrase for Octavia
• BZ - 1692834 - [RFE] Pull ansible-role-openstack-operations from RDO [openstack-15]
• BZ - 1693429 - [regression] nova console-log throws an error: ERROR (TypeError): write() argument must be str, not bytes
• BZ - 1693650 - [UPGRADE] Fail - Network - Plugin does not support updating provider attributes.
• BZ - 1693752 - SSH pseudo terminals zombied after Ansible playbook execution exits in Mistral Executor container
• BZ - 1694213 - Compute Nodes Need br-ex for OVN
• BZ - 1694905 - hardware-detect fails on ppc64le due to KeyError
• BZ - 1695438 - Also copy ldlinux.c32
• BZ - 1695541 - [OSP15][Overcloud] Overcloud deployment failed on starting container-puppet-rabbit_init_tasks container - Failed to apply catalog: Cannot parse invalid user line
• BZ - 1696296 - [OSP15][Undercloud] undercloud_debug = false in undercloud.conf doesn't affects to /var/log/containers/stdouts/nova_cellv2_discover_hosts.log
• BZ - 1696393 - Overcloud deploy fails while pulling ceph-container from ceph container repository
• BZ - 1697466 - Provide guidance in order to get proper healthchecks for "cron" containers
• BZ - 1698555 - overcloud node import hangs - mistral_executor is down due /var/lib/undercloud.conf missing
• BZ - 1698630 - [OSP15] deployment fails running nova_cellv2_discover_hosts process with a duplicate key
• BZ - 1699077 - tripleo-heat-templates generate identical vlan id on compute node on subnet networks and on base network
• BZ - 1700044 - [osp15] rabbitmq connections fail due to missed heartbeats
• BZ - 1700253 - Diskimage-builder fails to generate Octavia Amphora image using RHEL8 cloud image
• BZ - 1700403 - Failed obtaining certificate on director / freeipa installation launchpad#1816465
• BZ - 1700730 - [UPDATE] undercloud update fail with nested exceptions
• BZ - 1701159 - [OSP15] failed healthcheck for nova_scheduler and nova_compute containers
• BZ - 1701180 - [OSP15] failed healthcheck for heat_engine container
• BZ - 1701195 - [OSP15] failed healthcheck for cinder_scheduler container
• BZ - 1701255 - Keepalived logs errors on the undercloud when monitoring VIPs
• BZ - 1701340 - OSP15 | overcloud can not be deployed with sensu-client templates.
• BZ - 1701726 - OSP15 | Overcloud deployment fails when deploying with fluentd template
• BZ - 1701823 - ironic_conductor container is missing udevadm
• BZ - 1701866 - After reboot of undercloud node network doesn't come back automatically, need to restart it
• BZ - 1702056 - [OSP15] Allow NovaRbdPoolName to be role specific
• BZ - 1702213 - Cinder backup service fails to initialize - "Could not determine which Swift endpoint to use
• BZ - 1702498 - Re-running overcloud deploy command with Ceph nodes fails on TASK [unpack downloaded ceph-ansible fetch tarball to fetch directory
• BZ - 1702685 - Network doesn't come up at boot time after reboot on overcloud nodes
• BZ - 1703448 - redis-bundle pcs resource doesn't start after controller reboot
• BZ - 1704376 - Downstream Ceph container image url needs to be updated
• BZ - 1704412 - cinder-backup service not configured per THT parameter values
• BZ - 1704440 - [OSP15] Horizon Red Hat theme not loading in UI, standard openstack loads
• BZ - 1704478 - switch-vlan validation fails on OSP15
• BZ - 1704642 - [OSP 15] Allow NovaNfs parameters to be role specific
• BZ - 1704973 - Overcloud deployment on pre-deployed server fails when network-scripts package is not installed
• BZ - 1705059 - OSP15 | Overcloud deployment fails when deploying with collectd template
• BZ - 1705248 - Overcloud deployment with Ceph fails during TASK [Remove ceph-ansible fetch directory]
• BZ - 1705266 - deployed-server-bootstrap-rhel.sh tries to install packages that are missing in rhel8; also it's missing lvm2 package used for ceph deployments
• BZ - 1705659 - Overcloud deployment with composable roles fails with Initializing overcloud plan deployment '>' not supported between instances of 'str' and 'int'
• BZ - 1706128 - [OSP15] openstack tripleo container image prepare command failed with using tripleo-modify-image - "tripleo_common.image.exception.ImageNotFoundException: Not found image: https://registry.access.redhat.com/v2/rhosp15/openstack-nova-compute/manifest/15
• BZ - 1706711 - availability_zone class is not included in scheduler.pp
• BZ - 1706770 - [OSP15] NTP service is still incorrectly referenced in roles
• BZ - 1706782 - [OSP15 ] - Podman service is not used in certain roles
• BZ - 1706862 - [OSP15] nova_wait_for_compute_service.py Failing When Supplying Multiple Options In NovaPCIPassthrough
• BZ - 1707099 - Unable to login to OC BM instance booted with overcloud-full image with cloud-user.
• BZ - 1707148 - Overcloud deployment using composable roles times out because database traffic is not allowed on the controller nodes where haproxy loadbalancer is running
• BZ - 1707268 - Failed to configure interfaces (ovs is not running)
• BZ - 1707306 - Forward logging to haproxy.log file task failing in dry-run mode
• BZ - 1707840 - [OSP15] ML2 OVS Unable to boot guest instances with vhostuser due to selinux policy
• BZ - 1708708 - [OSP15] undercloud redeployment failed with "Command '['systemctl', 'stop', 'tripleo_nova_compute.service']' returned non-zero exit status 1."
• BZ - 1708970 - [OSP15] Fix OVS DPDK step_config input
• BZ - 1709277 - OSPD 15: Undercloud Installation failed while telemetry enabled
• BZ - 1709410 - the dhcp-provisioning validation fails on RHEL8/Python3
• BZ - 1709564 - Overcloud deployment fails with container permissions error (ppc64le)
• BZ - 1709566 - Mistral-db-manager Attribute errors
• BZ - 1709663 - CPU benchmarking fails with error "a bytes-like object is required, not 'str'"
• BZ - 1709930 - [OSP15] Exceptions In Neutron Policy Enforcement
• BZ - 1710034 - [RHOS-15] Tempest tests failing on "Cannot access storage file '/var/lib/nova/instances/<uuid>/disk' (as uid:107, gid:107): Permission denied"}" error
• BZ - 1710052 - [RHOS 15] Tempest test failure: test_list_extensions
• BZ - 1710300 - [OSP15] overcloud deployment with TLS everywhere failed on TASK [install needed packages], "Failed to download packages: Cannot download Packages/openldap-clients-2.4.46-9.el8.x86_64.rpm: All mirrors were tried"
• BZ - 1710324 - All validations are failling when running through Mistral with a sudo command not allowed
• BZ - 1710348 - ceilometer and aodh puppets collide on python3-redis package already defined
• BZ - 1710503 - all-in-one missing network configuration for network-isolation
• BZ - 1710617 - [OSP15] tempest.api.network.test_networks.Networks(IpV6)?Test.test_create_update_network_description fails
• BZ - 1710854 - [OSP15] Fix NovaNfs role parameter precedence in conditions
• BZ - 1710895 - openstack overcloud image build config-file RHEL8 bits are not available for building whole disk image
• BZ - 1710966 - undercloud deploy fails - glance-manage db_sync - cannot import json from wsme
• BZ - 1711083 - openstack diskimage-builder missing rhel8 support needed to build secure hardened whole disk images for node deployments
• BZ - 1711198 - RHOSP 15 version name is showing as 'Rocky' instead of Stein in /etc/rhosp-release
• BZ - 1711366 - [osp15] phase1 jobs failing due to python-ironicclient issue
• BZ - 1711658 - OSP15 PEP8 jobs is failing
• BZ - 1711661 - Octavia CI job "DFG-network-octavia-14-pep8-rhos" Fails
• BZ - 1711863 - [UPDATE] Compute update failed with "RuntimeError('Update failed with: {}'.format(payload['message']))"
• BZ - 1712309 - [Tests] Adjustments required for running neutron tests on RHEL 8
• BZ - 1712510 - Undercloud deployment fails with "Invalid input for host_routes. Reason: \\\\\\'10.10.10.0\\\\\\' is not a recognized CIDR, \\\\\\'10. 10.10.0/32\\\\\\' is recommended."
• BZ - 1712799 - /etc/nova/release lists distro as RDO
• BZ - 1712812 - [OSP15] DiskNotFound error during instance resize-confirm after restarting nova compute
• BZ - 1712896 - [OSP15] ovn-dbs-bundle-podman docker is stuck in startup and cant load the ovn services after stopping the docker
• BZ - 1713183 - The 'undercloud-debug' validation is failling due to a wrong indentation in an ansible task
• BZ - 1713229 - Octavia tempest tests fail with "Provider 'octavia' is not enabled"
• BZ - 1713289 - Octavia amphora certificate files in wrong path and with invalid content
• BZ - 1713306 - Octavia amphora load balancers fail to create -- Flavor 65 could not be found
• BZ - 1713328 - Functional tests from module neutron.tests.functional.agent.linux.test_keepalived.KeepalivedManagerTestCase are failing
• BZ - 1713329 - Functional tests failing with "Test leaked ebtables rules" error
• BZ - 1713337 - [osp15] Instance HA is broken on OSP15
• BZ - 1713466 - need package for python-sqlalchemy-collectd
• BZ - 1713758 - [RFE] (THT) Support --no-ntp and --domain options for ipa-client-install
• BZ - 1713760 - [RFE] [tripleo-heat-templates] Add ability to specify dns search domains
• BZ - 1713771 - [RFE] [os-net-config] Add ability to specify DNS search domains
• BZ - 1714142 - RHEL8 image compatibility
• BZ - 1714145 - Network manager images vs tempest
• BZ - 1714501 - Octavia tempest test test_provider_list fails
• BZ - 1714584 - [OSP15] Use of skip-deploy-identifier flag cause compute scale-out failure
• BZ - 1714889 - [OSP15][Regression] Unable to attach encrypted volume to an instance
• BZ - 1715094 - [OSP15] Add ability to override libvirt NFS mount options for NFS backed Cinder volumes
• BZ - 1715168 - TLS everywhere failing with (RPC failed at server. change collided with another change)
• BZ - 1715492 - RHEL8 based amphora: can't start haproxy with SELinux enforcing
• BZ - 1715529 - Manila API service does not fail over to active controller node
• BZ - 1715759 - Some validations are failing due to wrong dependencies in the roles meta/mail.yml files
• BZ - 1715764 - The 'collect-flavors-and-verify-profiles' validations role has not been backported to Stein and it should be!
• BZ - 1716186 - neutron_sriov_agent_config container fails with Compute sriov since /etc/udev/rules.d/70-tripleo-reset-sriov.rules is inaccessible.
• BZ - 1716341 - [OSP15] Missing bridge mappings for controller nodes for non_dvr CI jobs
• BZ - 1716350 - [osp15] A stock osp15 deployment is full of aodh/gnocchi exceptions
• BZ - 1716358 - RHOS 15's default machine type, "q35", doesn't support IDE buses, but config drives are attached to IDE
• BZ - 1716554 - [OSP15] RBACSharedNetworksTest.test_duplicate_policy_error fails because Neutron keeps retrying
• BZ - 1716672 - UEFI: Installing GRUB2 boot loader to device /dev/vda failed with Unexpected error while running command
• BZ - 1717093 - Overcloud nodes registered to Satellite 6.5 show Warning status: Could not calculate errata status, ensure host is registered and the katello-host-tools package is installed
• BZ - 1717290 - [RHOS 15][deployment] Hot-plugging more than a single network interface with 'q35' machine type fails with "libvirt.libvirtError: internal error: No more available PCI slots"
• BZ - 1717889 - No output from failed Puppet in Ansible tasks
• BZ - 1717992 - symlink for local_settings.d is broken AGAIN
• BZ - 1718327 - The 'ntpstat' validation fails with an error 'Unable to talk to NTP daemon. Is it running'
• BZ - 1718456 - sqlalchemy-collectd 0.0.4 is available
• BZ - 1718658 - Always use FQDN when running ipa-client-install
• BZ - 1718830 - Update python-stestr to 2.3.1
• BZ - 1718920 - OSP15 | conf files for default collectd plugins are missing in collectd container. Therefore those plugins are not loaded.
• BZ - 1718976 - Keystone container missing health check
• BZ - 1719011 - Manila UI is disabled in Horizon
• BZ - 1719691 - [OSP15] minor update fails because : /var/log/containers/nova/nova-manage.log is owned by root:root on compute nodes
• BZ - 1719710 - Cannot install python-neutron-tests package
• BZ - 1719756 - Deployment with custom network fails with "resources.VipPort.properties.fixed_ips[0].subnet: Error validating value 'internal_api_subnet': Unable to find subnet with name or id 'internal_api_subnet'"
• BZ - 1719770 - Log files not being rotated
• BZ - 1719802 - Deployment fails with ERROR: The Resource Type (OS::TripleO::Services::PlacementApi) could not be found
• BZ - 1719897 - Deployment with custom network names fails due to mismatch in subnet names.
• BZ - 1719899 - Deploying OSP-15 with TLS and composable networks fails due to hard-coded NovaLibvirtNetwork in nova-vnc-proxy.yaml
• BZ - 1719940 - [RHOS 15] Tempest test failure: test_show_update_rebuild_list_server.ServerShowV263Test.test_show_update_rebuild_list_server
• BZ - 1720078 - Infrared tripleo-ovn-migration plugin does not support OSP15 version
• BZ - 1720134 - [OSP15] FloatingIPQosTest.test_qos test fails in several test fails
• BZ - 1720135 - [OSP15] Traffic between 2 VMs connected to different networks and same router is DNAT'ed
• BZ - 1720158 - The check-latest-minor-version validation fails on RHEL 8 due to a package name issue
• BZ - 1721054 - [OSP15] DuplicateMessageError after rolling restart of RabbitMQ
• BZ - 1721156 - Error while running MapR 5.2.0 on RHEL (mysql compat)
• BZ - 1721273 - Neutron API List Ports Performance regression
• BZ - 1721397 - RHEL8 Amphora image fails tempest tests due to a Python3 issue
• BZ - 1721607 - Unable to import nodes using staging-ovirt driver. Error: "Failed to get power state for node 1b246f12-ba40-446d-a215-834b07d1a41f. Error: name 'sdk' is not defined "
• BZ - 1721647 - mysql process consuming 400% CPU
• BZ - 1721673 - after the undercloud installation finishes, the command line is left in a broken state
• BZ - 1721909 - [OSP-15] Some unit tests are failing in D/S CI
• BZ - 1722033 - OSP15 UC neutron_ovs_agent fails - No module named neutron.cmd.destroy_patch_ports
• BZ - 1722034 - Tempest test cases and scenarios failed with multiple Availability Zones
• BZ - 1722036 - add option to enable or disable rhcs4 beta with osp15
• BZ - 1722041 - [OSP15] [Deployment] Set live_migration_wait_for_vif_plug=False when using OVN
• BZ - 1722154 - DCI-tempest environment creation failing(subnetpool not a supported extension)
• BZ - 1722175 - [OSP 15][Deployment] Make OSP-15's default machine type to be 'i440fx' ('pc')
• BZ - 1722837 - [OSP15] test_internal_dns.InternalDNSTest.test_dns_domain_and_name fails with ML2/OVS
• BZ - 1723051 - Amphora loadbalancers fail to create
• BZ - 1723743 - [OSP15] python-osc-placement (or python3-osc-placement) is missing
• BZ - 1723747 - Swift container fails when the network file doesn't exist in openstack overcloud deploy command
• BZ - 1723881 - [RHOS-15] User configurable time out for instance destroy to prevent error: libvirtError: Failed to terminate process <pid> with SIGKILL: Device or resource busy
• BZ - 1724124 - [OSP15] 'hw_vif_model' image metadata property should be ignored for SR-IOV-based VIFs
• BZ - 1724131 - [OSP15] live migration aborts with Ncat: No such file or directory.: Input/output error
• BZ - 1724220 - Dry-run verification fails on task Stop iscsi.service
• BZ - 1724480 - Memory usage issue in octavia amphora with haproxy 1.8.x and 2 listeners
• BZ - 1724560 - [OSP-15][DCN][Spine & Leaf] ssh timeout into compute overcloud nodes post overcloud.AllNodesDeploySteps
• BZ - 1724719 - OSP15 overcloud nodes registration to Satellite 6.5 fails while running subscription-manager list --available with HTTP error (500 - Internal Server Error): Required lock is already taken by other running tasks
• BZ - 1724825 - [OSP15] Horizon UI does not have any menus for Shares, Network, Compute etc...
• BZ - 1725359 - When trying to deploy second overcloud, roles_data.yaml isn't updated with new subnet names
• BZ - 1725503 - staging-ovirt driver: Nodes don't switch to managed upon import. Error: startswith first arg must be bytes or a tuple of bytes, not str
• BZ - 1725865 - openstack overcloud upgrade prepare fails to update heat templates
• BZ - 1725956 - puppet-tripleo RPM is missing a dependency on puppet-etcd
• BZ - 1726191 - please add python-pyrabbit2 to distribution
• BZ - 1726312 - [OSP 15] novnc RPM is not packaged with all the required files
• BZ - 1726949 - Undercloud ntp service was not upgraded
• BZ - 1727260 - [OSP15] Deployment with NovaNfsEnabled: True to enabled NFS share for nova ephemeral storage fails
• BZ - 1727937 - Got "denied" in audit log on compute and ceph machines
• BZ - 1728447 - [OSP15] set default ulimit to nova_libvirt
• BZ - 1729592 - Failure to deploy overcloud in early testing
• BZ - 1729764 - [OSP15- OVN]Metadata service does not work on TLS deployment
• BZ - 1730073 - Podman related validations fail on permission problem
• BZ - 1730085 - pre-upgrade Repos validations fail on permission error
• BZ - 1730213 - [OSP 15] novnc 1.1.0 no longer sets token inside cookie
• BZ - 1730757 - novajoin_tempest_plugin tests return IndexError: list index out of range
• BZ - 1731120 - [OSP15] Kernel module vfio_iommu_type1 is not loaded on reboot
• BZ - 1731176 - Neutron cleanup fails sometimes due to 404 response
• BZ - 1731208 - [OSP15] large number of interfaces cause slow puppet executions due to fact generation
• BZ - 1731264 - Deployment with mds fails with message: 'dict object' has no attribute 'pg_num'
• BZ - 1731829 - tempest cleanup --init-saved-state still requests to Keystone v2 API
• BZ - 1732578 - (selinux-osp-container) Unable to access host directory from within container : getting permission denied
• BZ - 1732866 - [RHOS 15][TLS everywhere] Error pulling 192.168.24.1:8787/rhosp15/openstack-redis:pcmklatest. [125]
• BZ - 1733608 - RHOSP 15 Beta Standalone Installation Fails Due to Missing /usr/bin/python
• BZ - 1734172 - On pre-deployed servers environments prevent losing SSH access if DeployedServerPortMap is missing network tags
• BZ - 1734525 - overcloud deploy fails with ou must add a [grafana-server] group and add at least one node
• BZ - 1737036 - On shutdown, paunch containers can be stopped before the containers they depend on
• BZ - 1737456 - [OSP15] auto scale-up doesn't add new nodes in the cluster during controller replacement
• BZ - 1737621 - Keystone process is launched with multiple '-DFOREGROUND'.
• BZ - 1737625 - Byte-level incompatibility in py2/py3 for the CFFI code
• BZ - 1738134 - OSP15 | sensu | containers health check reports "Failed to connect to bus" instead of reporting health status of containers.
• BZ - 1738529 - Dry-run fails on TASK [Sync cached facts]
• BZ - 1739224 - Stack update fails while running podman exec --user=root keystone /usr/bin/bootstrap_host_exec keystone keystone-manage bootstrap --bootstrap-password with stderr: cannot exec into container that is not running: container state improper
• BZ - 1740715 - Fail before getting to creation of the Heat stack if EnableRhcs4Beta is not True on deploy and upgrade
• BZ - 1741244 - Warn when attempting to upgrade until upgrades are supported
• BZ - 1741247 - [Upgrades/updates] External update/upgrade run --tags container_image_prepare does not upload the container images in the Undercloud
• BZ - 1741255 - ssh private key appears in the log after ssh-keygen.
• BZ - 1742169 - Scale up fails on all controller nodes with error"Job for tripleo_memcached-dmtfeqpf.service failed because the service did not take the steps required by its unit configuration"
• BZ - 1743231 - Live migration time out when using live_migration_wait_for_vif_plug=true with OVN along the patch from 1563110
• BZ - 1743485 - [OSP15] TLS Everywhere jobs timeout
• BZ - 1744040 - [OSP15] [Deployment] Set live_migration_wait_for_vif_plug=True when using OVN
• BZ - 1744259 - During update rabbitmq container cannot restart.
• BZ - 1745178 - nova notifications need to be enabled when novjoin is enabled
• BZ - 1745189 - add python3 support for hardened uefi images
• BZ - 1745950 - [OSP15] paunch restarts almost all containers at every redeploy (with no changes)
• BZ - 1746815 - External tasks for update are not working anymore.
• BZ - 1747885 - [UPDATE] undercloud update failed with error "ERROR configuring mysql"
• BZ - 1747948 - Updating the overcloud causes rabbitmq to not restart on bootstrap node.
• BZ - 1749311 - Add new Red Hat logo to openstack-dashboard-theme
• BZ - 1749379 - server snapshot fails - 403 forbidden - on glance with ceph and show_multiple_locations=False
• BZ - 1750407 - bad template path preventing brownfield tls everywhere deploy when keeping old public certs
• BZ - 1751245 - [Scale Up] ERROR configuring crond
• BZ - 1751300 - neutron-dhcp fail to spawn DHCP process for ctlplane network on the undercloud - container_linux.go:345: starting container process caused "process_linux.go:430: container init caused \"write /proc/self/attr/keycreate: permission denied\""

CVEs

(none)

References

• https://access.redhat.com/documentation/en/red-hat-openstack-platform/