RHEA-2020:5413 - Product Enhancement Advisory

Topic

Updated packages that resolve various issues are now
available for Red Hat OpenStack Platform 16.1 (Train) for Red Hat
Enterprise Linux (RHEL) 8.2.

Description

Changes to the openstack-cinder component:

• This update supports the creation of volumes with tiering policy. There are four supported values:
• * `StartHighThenAuto`(default)
• * `Auto`
• * `HighestAvailable`
• * `LowestAvailable` (BZ#1808577)
• With this release, the VxFlex OS driver is renamed to PowerFlex. Names of configuration options have been changed and removed. The `ScaleIO` name and related `sio_` configuration options have been deprecated. (BZ#1867222)

Changes to the openstack-tripleo-heat-templates component:

• There is a known issue with the Object Storage service (swift). If you use pre-deployed nodes, you might encounter the following error message in `/var/log/containers/stdouts/swift_rsync.log`:

+
"failed to create pid file /var/run/rsyncd.pid: File exists"
+
Workaround: Enter the following command on all pre-deployed Controller nodes:
+
```
for d in $(podman inspect swift_rsync | jq '.[].GraphDriver.Data.UpperDir') /var/lib/config-data/puppet-generated/swift; do sed -i -e '/pid file/d' $d/etc/rsyncd.conf; done
``` (BZ#1852541)

• Currently, a change in OSP13 puppet module kmod has resulted in the wrong module setting for `systemd-modules-load.service`. This is not an issue in OSP13 but results in failure during deployment in fast forward upgrade on OSP16.1.

+
Workaround:
+
Enter the following command:
+

• ---

rm -f /etc/modules-load.d/nf_conntrack_proto_sctp.conf

• --- (BZ#1880979)
• Currently, LVM filter is not set unless at least one device is listed in the `LVMFilterAllowlist` parameter.

+
Workaround: Set the `LVMFilterAllowdisk` parameter to contain at least one device, for example, the root disk. The LVM filter is set in `/etc/lvm/lvm.conf`. (BZ#1261083)

• Replacement of an overcloud Controller might cause swift rings to become inconsistent across nodes. This results in decreased availability of Object Storage service.

+
Workaround: Log in to the previously existing Controller node using SSH, deploy the updated rings, and restart the Object Storage containers:
```
(undercloud) [stack@undercloud-0 ~]$ source stackrc
(undercloud) [stack@undercloud-0 ~]$ nova list
...
| 3fab687e-99c2-4e66-805f-3106fb41d868 | controller-1 | ACTIVE | - | Running | ctlplane=192.168.24.17 |
| a87276ea-8682-4f27-9426-6b272955b486 | controller-2 | ACTIVE | - | Running | ctlplane=192.168.24.38 |
| a000b156-9adc-4d37-8169-c1af7800788b | controller-3 | ACTIVE | - | Running | ctlplane=192.168.24.35
+
(undercloud) [stack@undercloud-0 ~]$ for ip in 192.168.24.17 192.168.24.38 192.168.24.35; do ssh $ip 'sudo podman restart swift_copy_rings ; sudo podman restart $(sudo podman ps -a --format="{{.Names}}" --filter="name=swift_*")'; done
``` (BZ#1789822)

• In this release, the `collectd-libpod-stats` plugin collects CPU and memory metrics for containers running in the overcloud. (BZ#1856404)
• Before this update, director maintained Identity service (keystone) catalog entries for Block Storage service's (cinder) deprecated v1 API volume service, and the legacy Identity service endpoints were not compatible with recent enhancements to director's endpoint validations. As a result, stack updates failed if a legacy volume service was present in the Identity service catalog. With this update, director automatically removes the legacy volume service and its associated endpoints. Stack updates no longer fail Identity service endpoint validation. (BZ#1878492)
• In this release, VxFlex OS driver is rebranded to PowerFlex. (BZ#1867225)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 16.1 runs on RHEL 8.2.

The Red Hat OpenStack Platform 16.1 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 16.1, including

which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/release_notes/chap-release_notes#red_hat_openstack_platform_16_1_3

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 16.1 ppc64le
• Red Hat OpenStack 16.1 x86_64
• Red Hat OpenStack Director Deployment Tools 16.1 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.1 ppc64le
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Cinderlib 16.1 x86_64
• Cinderlib for IBM Power LE 16.1 ppc64le

Fixes

• BZ - 1261083 - [RFE] Using LVM on a cinder volume should not expose the data to the compute host
• BZ - 1752416 - race-condition in tempest.api.compute.servers.test_attach_interfaces.AttachInterfacesUnderV243Test.test_add_remove_fixed_ip
• BZ - 1772106 - Neutron List Ports API regression
• BZ - 1774254 - dnf install python3-hardware is pulling libX11 packages.
• BZ - 1777464 - [RFE] Support deployment of ceph-dashboard with RHCS4 using composable networks
• BZ - 1777523 - [RHOS-16.1] tempest.api.compute.volumes.test_attach_volume.AttachVolumeTestJSON.test_attach_detach_volume failed when the self.device(vdb)value was in use(config_drive vfat in my case)
• BZ - 1777605 - Unable to deploy with TLS Everywhere with management network
• BZ - 1789822 - Controller replacement breaks Swift config
• BZ - 1802307 - Introspection fails to transition from waiting to error
• BZ - 1808576 - [Backport][RHOSP16.1] [Unity] Support consistency group replication:
• BZ - 1808577 - [Backport][RHOSP16.1] [Unity] Support create volume with tiering policy:
• BZ - 1808578 - [Backport][RHOSP16.1] [Unity] Retype volume support:
• BZ - 1812070 - [OSP16][vnes-ci]failure deleting network test_delete_policies_while_tenant_attached_to_net
• BZ - 1813825 - Namespace isolation fails due to race on neutron
• BZ - 1815575 - [OSP16] Tempest run leaves orphaned snapshots
• BZ - 1815576 - [OSP16][tempest] smoke test fails when the external network has multiple IPv4 subnet
• BZ - 1818014 - Test tempest.scenario.test_network_basic_ops.TestNetworkBasicOps.test_hotplug_nic is failing
• BZ - 1828998 - Stack creation fails from horizon dashboard when glance.image custom constraint is used
• BZ - 1830173 - Running enable-ssh-admin.sh for pre-provisoned nodes will loop forever if workflow fails
• BZ - 1833277 - Permit configuration of the Glance allowed disk formats via THT
• BZ - 1843003 - network default gateway can't be updated by t-h-t paramter
• BZ - 1843927 - Please rebase openstack-tempest to version 24
• BZ - 1844144 - [RFE][CLOUDOPS] gather collectd containers stats
• BZ - 1844356 - PortTestCasesResourceRequest tests only support vxlan networks
• BZ - 1846070 - [OPS16.1][RFE] Expected Tripleo Hiera data for tuning parameter “cpu_mode” and “cpu_model_extra_flags”
• BZ - 1852541 - swift_rsync exited in 2/3 controllers after hard reboot
• BZ - 1856404 - Tripleo Heat Template update for configuring libpodstats parameter
• BZ - 1857776 - Provide tools to generate input for CephExternalMultiConfig
• BZ - 1858372 - [osp16.1]remove podman-docker package from the OC image
• BZ - 1862019 - service-status fails on osp-16.1 - missing backport
• BZ - 1862079 - image_serve validation doesn't properly work
• BZ - 1862149 - Missing quotes in tripleo_common/inventories.py prevent host vars to be populated properly
• BZ - 1862364 - Race condition in oslo_privsep daemon
• BZ - 1865997 - Create a validation ensuring libvirt is running with sVirt
• BZ - 1867222 - [RHOSP16.1][Cinder] Backport: Rebranding of VxFlex OS driver to PowerFlex
• BZ - 1867223 - [RHOSP 16.1] [puppet-cinder] Backport: Support for PowerFlex cinder backend
• BZ - 1867224 - [RHOSP 16.1] [puppet-tripleo] Backport: Support for PowerFlex Cinder Backend
• BZ - 1867225 - [RHOSP 16.1] [tripleo-heat-templates] Backport: Support for PowerFlex Cinder Backend
• BZ - 1869001 - Tripleo-ipa: "openstack overcloud delete" command does not trigger IPA entries cleanup for nodes
• BZ - 1871834 - ovn controllers cannot connect ovn dbs during 13-16.1 FFU upgrade
• BZ - 1873470 - Pre-upgrade validations fail because of missing python3 command in overcloud nodes
• BZ - 1873742 - Unhealthy ovn_metadata_agent during 13-16.1 FFU
• BZ - 1874000 - New Component: golang-github-infrawatch-apputils
• BZ - 1875489 - [OSP13->OSP16.1] Validations can't be run before the undercloud-upgrade
• BZ - 1875810 - [RHOSP 16.1] [RFE] New component: tripleo-powerflex (Powerflex integration with TripleO)
• BZ - 1876040 - validate-selinux fails because of missing /var/log/validations
• BZ - 1878492 - openstack overcloud deploy always fails after OSP13->OSP16.1 upgrade
• BZ - 1879389 - When creating a service of type "LoadBalancer" (Kuryr,OVN) communication through this loadbalancer failes after 2-5 minutes.
• BZ - 1879730 - [OSP16.1.3] Package collectd-libpod-stats
• BZ - 1880979 - FFWD2 13->16 Deployment fails on Failed to find module 'nf_conntrack_proto_sctp'
• BZ - 1881511 - THT RPM should install ansible-role-lunasa-hsm RPM
• BZ - 1882400 - [OSP16.1][FFU]During FFU new vms with SRIOV ports cannot be created
• BZ - 1882480 - [rfe] Allow to set smfs/dmfs modes for mellanox nic in os-net-config
• BZ - 1882738 - minion fails to deploy if ironic-conductor is enabled
• BZ - 1883339 - LDAP paging leaks memory
• BZ - 1883882 - [16.1] UDP fragmentation test fails due to missing forbid_packet_loss option in check_remote_connectivity
• BZ - 1884263 - RBD: Enable cinder exclusive pool by default
• BZ - 1884630 - [RHOSP16][Gnocchi] Gnocchi resource doesn't update project attribute after Cinder Volume is transferred to new project
• BZ - 1884677 - During FFWD 13>16 upgrade site-container.yml is triggered instead of docker-to-podman.yml even with --tags ceph_systemd
• BZ - 1884704 - [OSP16.1.3] Puppet-tripleo changes to configure collectd-libpod-stats
• BZ - 1884737 - [OSP16.1.3] Mount container-containers directory to Collectd container for libpodsats
• BZ - 1885212 - [FFU][ovn] ovn-controllers can't connect to SB DB in hybrid state
• BZ - 1885330 - [OSP16.1.3] Include collectd-libpod-stats in TCIB build
• BZ - 1886084 - DCN - Nova streams images to ceph if image is not already present in its local ceph
• BZ - 1886139 - [Deployment] DCN - Nova streams images to ceph if image is not already present in its local ceph
• BZ - 1886710 - got an unexpected keyword argument 'encoding'
• BZ - 1887467 - Unclosed resource warning when running validator commands
• BZ - 1887710 - Missing parameters field when showing details of a validation
• BZ - 1887722 - The validations statistics (numbers of execution) are erroneous.
• BZ - 1887859 - [RFE] Backup and Restore: Enable SFTP protocol to write the recovery iso image
• BZ - 1888011 - When flattening RBD images, cinder-volume losses connectivity to rabbitmq due to client heartbeat timeout
• BZ - 1888552 - Backport a patch into ansible-runner 1.3.4-2.el8ar.noarch
• BZ - 1889776 - [validation_json.py callback] Exclude gathering facts action logs in the simplified validation output when it is not failing
• BZ - 1891197 - nova-event-callback validation doesn't validate vif_plugging_timeout_check properly
• BZ - 1891202 - mysql-open-files-limit is broken in RHOSP 16.1
• BZ - 1891204 - no-op-firewall-nova-driver requires firewall_driver to be defined, while its default value also OK
• BZ - 1891389 - collect-flavors-and-verify-profiles validation fails when Overcloud{{role.name}}Flavor is not explicitly defined in templates
• BZ - 1891582 - [15 to 16.1] Major upgrade requires the undercloud's hostname in overcloud's /etc/hosts
• BZ - 1892690 - NVR mismatch between tools and base repo
• BZ - 1893189 - cinder volume failing when setting rbd_max_clone_depth=1
• BZ - 1895220 - After updating the controller nodes to RHOSP 16.1.2, there was a problem with VM network communication.
• BZ - 1896157 - openstack-tripleo-validations and validations-common conflict
• BZ - 1896314 - --skip-deploy-identifier not working
• BZ - 1897169 - [RHOSP 13 to 16.1 Upgrades] nova_hybrid_state task failed with latest python-paunch package
• BZ - 1897691 - [RHOSP 13 to 16.1 Upgrades][InstanceHA] nova_compute container stuck in restarting state after executing nova_hybrid_state tasks
• BZ - 1901004 - Wrong default NovaLibvirtCPUMode set in nova.conf for nova-compute nodes

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/release_notes/chap-release_notes#red_hat_openstack_platform_16_1_3