RHEA-2022:6543 - Product Enhancement Advisory

Topic

Red Hat OpenStack Platform 17.0 (Wallaby) - RPMs

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Release of Red Hat OpenStack Platform 17.0 (Wallaby) provides these changes:

Solution

Red Hat OpenStack Platform 17.0 (Wallaby) Release - RPMs

For additional information about the items in this advisory see the Technical Notes chapter of the Release Notes:
https://https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17.0/html/release_notes/chap-release_notes.

This update is available through 'dnf update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 17 x86_64
• Red Hat OpenStack Director Deployment Tools 17 x86_64
• Red Hat Enterprise Linux for x86_64 9 x86_64
• Cinderlib 17 x86_64

Fixes

• BZ - 1374002 - [RFE] [OSP 17] Support for DNSaaS
• BZ - 1465964 - [RFE] Option to set different default volume type for new cinder volumes in various tenants
• BZ - 1503518 - [RFE]?[OVN] ovsdb Active/Active RAFT support
• BZ - 1535637 - Free disk space check (for raw image) ignores sparseness
• BZ - 1561031 - [Nova] Nova Evacuation has deleted root disk of many of instances from shared storage
• BZ - 1566065 - [OSP17] Drop python-crypto
• BZ - 1566243 - [RFE] Implement Secure RBAC Project Scoped Personas within Barbican
• BZ - 1584225 - Adding Support for Multipath Deployments
• BZ - 1625367 - Do we support caching of fernet tokens?
• BZ - 1655490 - Cinder retype does not use driver assisted volume migration
• BZ - 1689706 - openstack client does not allow to resize a volume attached to a instance, while cinder client allows it
• BZ - 1695122 - [OVN] mac-table-size of provider bridges (br-ex, br-isolated) was cleared after node reboot
• BZ - 1696739 - Deprecate '/os-hypervisors/statistics' API
• BZ - 1699454 - [RFE] create share from snapshot support for cephfs back ends
• BZ - 1700412 - [RFE] Allow in-place rebuild for numa instances
• BZ - 1727345 - [RFE] Enable memcached for fernet by default in OSP
• BZ - 1730023 - [RFE] To simplify director Mistral should be removed from the undercloud and all workflows replaced
• BZ - 1736014 - [OSP17] remove dependency on libvirtd package on the overcloud system and remove it from the overcloud image
• BZ - 1740516 - [OSP17] NO VNC proxy allows weak encryption protocols and ciphers (SSL V3, TLS<1.2, CBC, RC4, 3DES)
• BZ - 1751761 - Nova introduced a bottleneck by unnecessarily serializing attach/detach operations
• BZ - 1758161 - Director should enable RGW by default to replace Swift when deploying Ceph
• BZ - 1765178 - [OSP 17.0.0] Instances with encrypted boot volumes are unable to be started after a hypervisor crash
• BZ - 1767084 - Implement ceph-mgr interface in the CephFS driver
• BZ - 1767797 - When unshelving an SR-IOV instance, the binding profile isn't reclaimed or rescheduled, and this might cause PCI-PT conflicts
• BZ - 1768834 - [QoS] ports do not inherit it's associated network's policy
• BZ - 1769603 - HypervisorUnavailable error leaks compute host fqdn to non-admin users
• BZ - 1772032 - [RFE] Allow ability to disable individual CPU flags via `cpu_model_extra_flags`
• BZ - 1772344 - [OSP17] Unable to boot an instance from an encrypted volume snapshot
• BZ - 1780721 - [RFE] Optional NUMA affinity for neutron ports
• BZ - 1782043 - [OSP 17] LibguestfsCannotReadKernel raised as installed kernel within nova-compute container does not match the running host kernel.
• BZ - 1793039 - [RFE][OSP 17][FIPS] Replace calls to hashlib.md5 with oslo_utils.secretutils.md5 to allow fips=1
• BZ - 1793079 - [RFE] Removal of Paunch
• BZ - 1795507 - Unable to extend an attached encypted volume while in use
• BZ - 1801931 - max_disk_devices_to_attach set to 0 don't allow to create any instance
• BZ - 1805070 - [OSP17][deployment] NO VNC proxy allows weak encryption protocols and ciphers (SSL V3, TLS<1.2, CBC, RC4, 3DES)
• BZ - 1805666 - [Workaround] Allow native LUKSv1 decryption to be disabled
• BZ - 1805677 - Support attaching RBD volumes to the compute host as block devices
• BZ - 1805885 - Add designate to OSP 17
• BZ - 1809447 - Remove resource_registry section from 'ips-from-pool-all.yaml' file
• BZ - 1810319 - [OSP17] NovaResumeGuestsStateOnHostBoot requires virt-guest-shutdown.target, but libvirt-daemon is not installed
• BZ - 1812652 - Disable USB when not required
• BZ - 1813560 - HAProxy 2.y support
• BZ - 1813573 - Tags
• BZ - 1814059 - Different Cinder volume states result after scheduling failures depending on which AZ information is provided during instance creation
• BZ - 1814148 - Please do not ship puppet-ceph in osp17
• BZ - 1819696 - package update: python-subunit 1.4.0
• BZ - 1819830 - Packstack removal
• BZ - 1819852 - New package request: python-validations-libs
• BZ - 1819853 - New package request: validations-common
• BZ - 1820698 - After a failed introspection, and inspector goes on a second try, it might fail to set_boot_device if it's stuck in POST
• BZ - 1821571 - [RHOSP17][Nova] Nova endpoint for v2.1 not parsed correctly, redirect to https instead of http
• BZ - 1824583 - Removing python-networking-ovn package / component
• BZ - 1826501 - Please create python-ovn-octavia-provider package/component
• BZ - 1826534 - Support 'openstack keypair list --project'
• BZ - 1827772 - rebase python-XStatic-jQuery to include fixes
• BZ - 1829460 - [OSP17] Ability to manage irqbalance and have it disabled in a Compute RT Deployment
• BZ - 1834158 - Remove openstack-tripleo-heat-templates-compat.
• BZ - 1834328 - Drop puppet-tempest from RHOS-17 onwards
• BZ - 1835292 - Error creating snapshot from instance when vm is paused and instance is booted from volume
• BZ - 1838653 - When adding a qcow2 image to a cinder backed glance_store, the incremental volume extend is broken
• BZ - 1839169 - [FP] Deployment and Management of RHCSv5 with OSP17 via cephadm and Ceph Orchestrator in place of ceph-ansible
• BZ - 1843798 - [OSP17] An overcloud reboot will sometimes leave nova_api broken
• BZ - 1847958 - [OSP 17] n-api should reject user requests to detach volumes from instances hosted on down computes
• BZ - 1848153 - etcd not using TLS when deployed with TLS-everywhere
• BZ - 1848737 - vm creation interrupted by cluster degradation results in orphaned build requests or required nova cell information being unpopulated.
• BZ - 1848824 - "--config-drive" option of "openstack server create" command doesn't accept non-boolean value
• BZ - 1851987 - [OSP17] Instance keypair is not updated during a rebuild
• BZ - 1852110 - nova host-evacuation returns erroneous pci addresses and an error: Unable to correlate PCI slot
• BZ - 1852299 - Snapshot cannot be deleted when the instance is shutdown after multiple snapshots creation if cinder nfs backend is used
• BZ - 1854431 - [OSP 17] Rebase novnc to 1.2.0
• BZ - 1854466 - Package python-ovn-octavia-provider for RHOS-17
• BZ - 1855403 - stop supporting deprecated TLS/E with novajoin
• BZ - 1857739 - [OSP 17] Unable to detach volume from instance when previously removed from the inactive config
• BZ - 1858939 - `openstack server list` returns empty image when creating a boot from volume instance
• BZ - 1858949 - Placement API only logging requestlog to /var/log/placement/placement.log when no allocation candidates are found
• BZ - 1860423 - AVC when restarting tripleo_redis.service
• BZ - 1860914 - [OSP 17] failures during driver.pre_live_migration remove source attachments during rollback
• BZ - 1861848 - Error: in /etc/cni/net.d/87-podman-bridge.conflist: error parsing configuration list: unexpected end of JSON input
• BZ - 1871946 - Remove puppet-ceph when upgrade to osp17 is performed
• BZ - 1873246 - [RFE] --stack-only should re-generate Ansible content
• BZ - 1877347 - Add '--ephemeral' argument to 'openstack server boot' command
• BZ - 1877631 - [RHOSP16.1] neutron security-group-list --tenant-id command can create Security Groups with non-existent project
• BZ - 1879609 - [OSP17] test_novnc fails with "Token must be invalid because the connection closed"
• BZ - 1880142 - [RFE] Support for creation of SSL certificates using private keys stronger than 2048bits
• BZ - 1883326 - [RHOSP 17][Backport] Fix for PowerFlex/vxflex volume type conversion
• BZ - 1885007 - A failover command for an loadbalancer based on OVN Provider Driver is NOT rejected with an error message
• BZ - 1886013 - Creating multiple volumes often leads to error as 'Volume status must be available to reserve, but the status is attaching'
• BZ - 1888069 - Supermicro nodes failed to boot via disk during installation when using IPMI and UEFI
• BZ - 1889272 - Golang test server ? new functionality
• BZ - 1890037 - lots of "error missed heartbeats from client, timeout: 60s" messages are reported in rabbitmq log
• BZ - 1890785 - [RFE] Implement Secure RBAC Project Scoped Personas within ironic
• BZ - 1893897 - [OSP17.0] Potential DOS over metadata*properties*userdata
• BZ - 1894282 - [OSP17.0] Error in update_available_resources in nova compute resource tracker on sriov compute node
• BZ - 1894547 - [RFE] Provision overcloud with only Ironic and Neutron (without Nova and Glance)
• BZ - 1895109 - green.ssl: redundant set_nonblocking() caused SSLWantReadError
• BZ - 1896763 - [RFE]?OSP Director Ansible jinja2 os-net-config templates
• BZ - 1897127 - [RFE] Composable network managment without Heat
• BZ - 1897605 - [RFE][Deployment] Support glance backend copy during RBD image clone
• BZ - 1899277 - Image name is empty at "Launch Instance" dialog if the image has only ID
• BZ - 1899447 - Cleanup manila manifest from puppet-ceph calls
• BZ - 1899476 - [RFE] Integrate ansible-role-collect-logs role with sosreport
• BZ - 1899982 - [OSP17] nova-compute must not configure api database
• BZ - 1901196 - [RFE] Use ephemeral Heat stack for overcloud deployment
• BZ - 1901201 - [RFE] Remove swift from the undercloud
• BZ - 1901993 - [RFE] Add Validation Framework CLI hooks to tripleo operator ansible
• BZ - 1903143 - TypeError: \'bool\' intospection times out
• BZ - 1904086 - [RFE] Expose encrypted volume key ID relationship via API (CLI commands) to user with a proper role (backup...)
• BZ - 1904283 - [OSP17][FFU OSP13 TO 16.1] Not able to spawn instances "Failed to synchronize the placement service with resource provider information supplied by the compute host"
• BZ - 1904499 - [RFE] Secure RBAC Project Scope Persona policies in Neutron
• BZ - 1905186 - [OSP17] Install 'daxio' for virtual persistent memory (PMEM) support
• BZ - 1906344 - cephadm package should be included in the overcloud images
• BZ - 1907392 - [OSP 17] n-api should reject requests to attach a volume to an instance *if* an active bdm record exists
• BZ - 1907559 - Standalone environment uses localhost for UC registry when first deployed
• BZ - 1908656 - [17.0] Backup and Restore adapt to the new ceph tools cephadm & orchestractor
• BZ - 1909347 - [OSP17] overcloud node delete's -e switches have been deprecated since at least newton
• BZ - 1911214 - libvirt.libvirtError: internal error: unable to execute QEMU command 'device_del': Device net1 is already in the process of unplug
• BZ - 1913475 - openstack-dashboard fails to install and build horizon container
• BZ - 1913513 - [OSP17] NUMA instance spawn fails on get_best_cpu_topology when there is no 'threads' preference
• BZ - 1913862 - [OSP17.0] derive_pci_passthrough_whitelist.py is failing when PCI addresses are supplied in NovaPCIPassthrough
• BZ - 1916158 - [OSP 17.0][RFE][Deployment] RBD direct download into Nova cache avoiding Glance
• BZ - 1916399 - [RFE] Rebase collectd to 5.12
• BZ - 1916956 - openstack usage tool giving error 'nova.exception.OrphanedObjectError'
• BZ - 1918036 - os-net-config maps DPDK NICs twice if they are already active
• BZ - 1918667 - [RFE] Backup and Restore: Validate ReaR for RHEL9 on openstack use cases
• BZ - 1921623 - [OSP 17.0] Unable to extend attached encrypted volume due to error connecting: Permission denied
• BZ - 1923787 - octavia_tempest_plugin/tests/barbican_scenario/v2/test_tls_barbican.py", line 22 No module named 'httpcore'
• BZ - 1925312 - RBD Driver: Ceph Pacific support
• BZ - 1930267 - openstack-tripleo-heat-templates support for cinder XIO driver port filtering support
• BZ - 1930742 - Standalone Scenario001/004 in OSP17.0 Integration line fails during ceph-ansible's OSD check: "error while evaluating conditional ((wait_for_all_osds_up.stdout | from_json)[\\\"num_osds\\\"] | int > 0): 'dict object' has no attribute 'num_osds'"
• BZ - 1931979 - Glance will leak staging data
• BZ - 1934270 - New component: ansible-role-qdr-config
• BZ - 1934272 - New component: ansible-role-collectd-config
• BZ - 1934513 - Attempting to start or hard reboot a users instance as an admin with encrypted rbd volumes leaves the instance unbootable
• BZ - 1936656 - Update collectd-sensubility to 0.1.9
• BZ - 1936804 - nova-migration-wrapper to allow using virt-ssh-helper
• BZ - 1937226 - ansible final message is a bit misleading
• BZ - 1939422 - [OSP 17] virDomainBlockCommit called when deleting a snapshot via os-assisted-volume-snapshots even when instance is shutoff
• BZ - 1941598 - puppet-cinder support for cinder XIO driver port filtering support
• BZ - 1941616 - puppet-tripleo support for cinder XIO driver port filtering support
• BZ - 1941922 - Add missing fcontext in templates using the ":z" flag for bind-mounts
• BZ - 1943559 - nova-compute tries to delete local instance after restart because it think that this instance was evacuated
• BZ - 1944586 - After a fresh new deployment, tripleo-ansible playbooks results are stored in the validations logging system
• BZ - 1944872 - [RFE] tripleO validations - provide a method to show only most recent history
• BZ - 1946956 - [OSP 17] Make q35 the new default machine type for x86_64 in new deployments
• BZ - 1946978 - [OSP 17][Downstream-Only] Pin NovaHWMachineType to RHEL version of q35 machine type to allow LM
• BZ - 1947152 - [RHOSP17.0] Bump collectd-libpod-stats to latest version
• BZ - 1947283 - Fix: support format info for filesystem type drivers
• BZ - 1947650 - No ironic rescue capability with OSP16.1 provided deploy-kernel and deploy-ramdisk images
• BZ - 1952854 - [OSP 17] Ignoring error injecting admin_password into image (a bytes-like object is required, not 'str')
• BZ - 1954103 - [RHOSP17.0][STF] Overcloud deployment fails when adding PluginInstanceFormat in collectd ExtraConfig
• BZ - 1954274 - [RFE] Improve performance for large scale workloads
• BZ - 1954565 - Designate DNS ? ?minimum TLL? is set to "1", according RFC minimum supported value is Zero
• BZ - 1956280 - [RFE] Deploy secure RBAC for Cinder via TripleO
• BZ - 1956286 - python-aodh requires python3-pysnmp
• BZ - 1957448 - [OSP 17] sysfsutils is being removed in RHEL 9 so it should be removed from the openstack-nova RPM spec
• BZ - 1957475 - drop requires on sysfsutils from openstack-cinder
• BZ - 1959345 - Database 'local_id' is limiting the length of the User/Project name
• BZ - 1960179 - [OSP 17] sysfsutils is being removed in RHEL 9 so it should be removed from os-brick
• BZ - 1960422 - New Package: ansible-collection-ansible-netcommon
• BZ - 1960423 - New Package: ansible-collection-ansible-posix
• BZ - 1960424 - New Package: ansible-collection-community-general
• BZ - 1960425 - New Package: ansible-collection-containers-podman
• BZ - 1962522 - [RFE] Use Validations libs Client for main validation entry point in the tripleoclient validator CLI
• BZ - 1964179 - [RFE] Deploy whole disk images by default
• BZ - 1966644 - Wrong ovn-octavia configuration leads to driver-agent not receiving the needed events
• BZ - 1966898 - Remove panko, pankoclient and puppet-panko from distribution
• BZ - 1967274 - RHEL9 will need to use dnsmasq for tftp
• BZ - 1968723 - [OSP17][neutron]http_retries config option value not being used for calls to the port binding API
• BZ - 1968760 - openstack-nova: novnc allows open redirection [openstack-17.0]
• BZ - 1969350 - [DB] Neutron quota request implementation can end in a lock status
• BZ - 1970252 - Migrate the role-addition playbook to a proper Ansible Role for creating new Validation
• BZ - 1971056 - [OSP 17] After host reboot VM goes to error state due to nova-compute EmptyCatalog error
• BZ - 1971607 - [RFE] Implement a Validation config file
• BZ - 1972155 - `openstack tripleo validator group info` command throws an error "TypeError: expected str, bytes or os.PathLike object, not NoneType"
• BZ - 1972259 - OSP 16.2 Some validations don't return pass or fail
• BZ - 1972699 - [OSP 17.0] Volumes and vNICs are being hot plugged into SEV based instances without iommu='on' causing failures to attach and later detach within the guest OS
• BZ - 1972865 - RHOS17.0: Update container tags for 17.0
• BZ - 1973356 - [RFE] Change manila ceph client user capabilities for OSP 17
• BZ - 1973373 - [manila] Catch up to configuration changes in the CephFS drivers
• BZ - 1973700 - [OSP 17.0][ML2/OVS] sr-iov agent failing on get_vfs function while processing port
• BZ - 1974655 - MAC address validation passes on invalid MAC addresses (dropped hex digits) [osp-17.0]
• BZ - 1975599 - tripleo-puppet-elements is still installing python3-pankoclient but should not be
• BZ - 1978155 - Designate DNS ? it?s possible to create blacklist using invalid patterns
• BZ - 1979044 - Designate DNS - ?BadRequest? is not raised for set quota, If some quota value is invalid.
• BZ - 1983607 - Unable to delete Load Balancer with PENDING_DELETE
• BZ - 1984556 - [RHOSP17] Smart plugin doesn't work for CAP_SYS_RAWIO capability missing.
• BZ - 1984889 - [ReleaseNotes][Cinder] Release Notes removal statement for GCS support in cinder
• BZ - 1985345 - [RFE][Community Validations] Allow customers/operators to create their own validations through the VF CLI
• BZ - 1985377 - [rhel9][nova] libvirt containerized on ubi:9 or ubi:8 with centos9 host (cgroupsv2) is using wrong namespace
• BZ - 1988205 - Deployment should fail if ComputeInstanceHA nodes don't have required fence resources
• BZ - 1988793 - Security group log entry remains in the database after its security group is deleted
• BZ - 1989004 - Upgrade python-pymemcache to version 3.5.0
• BZ - 1991657 - ironic-inspector not retrying when Ironic nodes are locked
• BZ - 1992692 - The undercloud-debug validation is producing confusing output
• BZ - 1992858 - [OSP 17] Avoid duplicate BDMs during reserve_block_device_name
• BZ - 1999562 - ceph ssl radosgw port is closed for tempest (undercloud node)
• BZ - 1999582 - [OSP 17] Provide a workaround option and/or nova-manage command to force the refresh of connection_info during a hard reboot
• BZ - 1999713 - genisoimage not available for python-ironicclient
• BZ - 2000535 - periodic-tripleo-ci-rhel-8-scenario001-standalone-rhos-17 failing with Error EINVAL: ServiceSpec: __init__() got an unexpected keyword argument 'port'
• BZ - 2000618 - Neutron - ?Update bandwidth limit rule? API on SUCCESS responds with 200 instead of Expected 202
• BZ - 2000966 - [RHOSP17] In overcloud deployment using ephermal heat, "openstack overcloud delete" is failing trying to reach heat endpoints "keystoneauth1.exceptions.catalog.EndpointNotFound: public endpoint for orchestration service in regionOne region not found"
• BZ - 2001120 - Octavia fails to delete Load Balancer, and sqlalchemy fails to mark Load Balancer to ERROR
• BZ - 2002659 - osp17 dashboard 500 and many errors
• BZ - 2002737 - [OSP17] Nova is out of sync with ironic as hypervisor list in nova does not agree with ironic list after reboot of the nodes
• BZ - 2002949 - [OSP 17] Replace genisoimage with xorriso and mkisofs
• BZ - 2005340 - qemu logs are not accessible on the host
• BZ - 2007585 - `tempest.api.compute.servers.test_server_actions.ServerActionsTestJSON.test_rebuild_server` failed because of difference of `addresses` between before and after rebuilding the server
• BZ - 2008426 - tripleo-ansible-inventory no longer functional
• BZ - 2010469 - [OSP17] [FFU OSP13 to 16.1.4] After FFU upgrade overcloud node introspection failed "an not transition from state 'uninitialized' on event 'sync''
• BZ - 2013120 - Expose Skip list mechanism to the VF CLI
• BZ - 2013575 - [17.0/wallaby] openstack tripleo validator run sub command logs by default in /home/stack/validations instead of /var/log/validations directory
• BZ - 2013625 - Calling openstack tripleo validator run with --extra-env-vars ANSIBLE_STDOUT_CALLBACK=default doesn't work anymore
• BZ - 2016183 - Package Review: openstack-network-scripts
• BZ - 2017048 - Security group mode (stateless/stateful) not updated in OVN
• BZ - 2017685 - OSP17 - Backup and Recovery - Switch from genisoimage to xorriso
• BZ - 2017849 - FreeIPA isn't cleaned upon overcloud deletion
• BZ - 2018223 - X-Forwarded-For Proxy Fix - does not work with IPv6 Addresses
• BZ - 2020268 - [17.0] Enable encrypted backups
• BZ - 2021033 - Designate DNS ? not clear Error message when the zone import is getting into Error status
• BZ - 2022714 - Remove write_redis
• BZ - 2023245 - MAC address validation passes on invalid MAC addresses (dropped hex digits) [osp-17.0]
• BZ - 2023418 - New Package: ansible-collection-ansible-utils
• BZ - 2023595 - RHOSP17.0 dpdk Command: ethtool -I error Stderr: 'Cannot get driver information: No such device\\n'",
• BZ - 2023893 - collectd-memcachec is missing libmemcached.so.11 from repos
• BZ - 2025654 - default_boot_interface is not set and when adding more ironic drivers, ironic complains that default_boot_interface is not set.
• BZ - 2027859 - [OSP17] Flavor value is not displayed when using openstack server list command
• BZ - 2028171 - [OSP17] RetryFilter nova-scheduler template are deprecated
• BZ - 2029509 - Drop python-kuryr-tests-tempest from OSP17
• BZ - 2029510 - Drop python-kuryr-lib from OSP17
• BZ - 2030372 - Designate DNS ? deployment fails (unbound resolver port allocation)
• BZ - 2030573 - Cannot configure network interfaces in the amphora in RHEL 9
• BZ - 2032457 - Attempting to delete an image from Glance that is in use breaks subsequent usage of that image
• BZ - 2033467 - "deployed ceph" defaults set-require-min-compat-client mimic causing glance problems
• BZ - 2033570 - [OSP17] Iptables rules on undercloud are missing after reboot
• BZ - 2034023 - deploy command has python errors
• BZ - 2034555 - Deprecation Warning for all openstack cli command
• BZ - 2034835 - undercloud install is failing on OSP 17 using nightly builds
• BZ - 2034960 - using neutron-ovs-dpdk.yaml causes deployment to fail
• BZ - 2035325 - pre-provision with dpdk fails
• BZ - 2035518 - migrating guest with the value of cpu.weight larger than 10000 failed due to cgroup changes
• BZ - 2035808 - [OSP17.0][OVN migration] generate-inventory fails on check_stack function
• BZ - 2035814 - [OSP17.0][OVN migration] ovn_migration script generates bad inventory file
• BZ - 2036761 - [ovn-vnes-ci]Timeout waiting for vm start up
• BZ - 2037396 - [OSP17] Overcloud deployment with ML2OVS + DVR fails
• BZ - 2038674 - [Backport] Backport of upstream patch: function 'get_hostname' 17.0
• BZ - 2039046 - introspection rule delete - Unexpected exception ('Connection broken: IncompleteRead(0 bytes read)', IncompleteRead(0 bytes read))
• BZ - 2039515 - [osp17]Internal Public endpoints connection are not getting setup properly by tripleo for ironic-inspector
• BZ - 2039802 - ControllerSriov have unused services which are causing it to fail
• BZ - 2040667 - container-status validation incorrectly fails when some containers exited with code 143
• BZ - 2041429 - Support NFV Deployments with "overcloud node provision" command
• BZ - 2041946 - [OSP17] Missing podman openstack-heat* images on undercloud after undercloud update
• BZ - 2042165 - Instance live-migration observes ping lost OVN
• BZ - 2042429 - Multivalued options created with wrong syntax
• BZ - 2042973 - push_destination support lacking in 'openstack overcloud deploy ceph --container-image-prepare'
• BZ - 2043508 - New package request: ovn-bgp-agent
• BZ - 2043613 - [ovn migration] QoS info not saved into OVN NBDB
• BZ - 2043615 - [OSP17] ConfigurationError: specified path does not exist /tmp/tripleoq2_sxhye/args
• BZ - 2043656 - Backport the FIPS patches downstream
• BZ - 2044776 - RHOSP17 Standalone deployment failing with Error: Evaluation Error: Error while evaluating a Function Call, undefined method `escape' for URI:Module (file: /etc/puppet/modules/nova/manifests/migration/libvirt.pp, line: 201, column: 49) on node standalone.
• BZ - 2048134 - tripleo-bootstrap requires connectivity before networking is set up
• BZ - 2048488 - RHOSP17 Standalone deployment failing to start rabbitmq_wait_bundle container, RabbitMQ version cannot run on Erlang 23.0.4: minimum required version is 23.2 (erts 11.1)
• BZ - 2048796 - Unit tests fail with "TypeError: '>' not supported between instances of 'MagicMock' and 'int'"
• BZ - 2049444 - Undercloud upgrade CLi command: --reproduce-command option unrecognized
• BZ - 2049498 - OSP17 - Backup and Recovery:: Set properly the default inventory file
• BZ - 2049615 - Linting issues in python-octavia-lib regarding f-strings and dict items
• BZ - 2049982 - `tempest init <workspace>` shows UserWarning
• BZ - 2050239 - ovn-octavia loadbalancer not working when VIP is on a dual-stack provider network
• BZ - 2050624 - Standalone deployment on scenario07 failing to start rabbitmq_wait_bundle container, rabbitmq crash with error:{badmatch,{error,{{shutdown,{failed_to_start_child,net_kernel,{'EXIT',nodistribution}}}
• BZ - 2050773 - [OSP 17] accept transfer policy breaks volume transfer workflow
• BZ - 2051475 - [17.0] tripleo_backup_and_restore_historical variable must be evaluated as bool
• BZ - 2051585 - deployment fails because of Duplicate declaration
• BZ - 2051653 - VM fails to spawn. VIF creation failed with a database error. Duplicate entry 'fa:16:3e:2b:7c:fe/0a57d046-03a3-413a-b7ba-dc948204824c-0' for key 'uniq_virtual_interfaces0address0deleted'
• BZ - 2052057 - Missing package dependency
• BZ - 2052544 - Missing backports related to node import
• BZ - 2052959 - Designate DNS ? ?recordset_records? no ?413 over_quota? response on quota exceed
• BZ - 2053137 - Load balancer creation often failing due to logical switch not found
• BZ - 2053527 - RHOSP17 Node provisioning failing - Timeout waiting for provisioned nodes to become available.
• BZ - 2054145 - Server on port X did not begin passing traffic within the timeout period
• BZ - 2055280 - overcloud nodes kernel panic on introspection with FIPS enabled
• BZ - 2055424 - external ceph configuration fails; tripleo_ceph_client not in external deploy steps tasks
• BZ - 2056839 - Conflicting dependencies - "Cannot install PrettyTable<0.8 and >=0.7.1"
• BZ - 2058290 - Logout reason not displayed on login screen
• BZ - 2058492 - [OSP17] Tripleo doesn't set the right permission to path "/home/stack/.tripleo/" during undercloud installation
• BZ - 2058540 - mounting the host /run for the containers causes container-only files to leak on the host
• BZ - 2058625 - [OSP17] "ironic_pxe_tftp" container is showing an unhealthy status
• BZ - 2058717 - fstab entry for EFI partition written with partition UUID instead of of uuid - deployed node does not boot
• BZ - 2059099 - create_firewall_rule: error: argument --ip-version: invalid choice: 5 (choose from 4, 6)
• BZ - 2060023 - Missing hostname in tox-py39 for OSP 17
• BZ - 2060331 - test_established_tcp_session_after_re_attachinging_sg fails with advanced images
• BZ - 2062141 - Designate DNS ? not informative error message on zone import
• BZ - 2063193 - When a node doesn't have anything to validate, the config invalidation fails, reporting a false negative
• BZ - 2063867 - [RBAC][vnes]Create network error due to role without permissions isn't clear
• BZ - 2063978 - Deleted members remain in ERROR status
• BZ - 2064019 - Ironic node power status reverts to None after transitory network errors while communicating to servers
• BZ - 2064609 - RHOSP 17.0 requires RHCS 5 containers
• BZ - 2064704 - Wrong addition of VIPs to all logical router pods leading to triggering GARP on different locations
• BZ - 2064830 - idm_realm undefined when scaling up multi cells v2 with TLSe for 17 deployment
• BZ - 2065055 - cephadm fails to bootstrap the ceph cluster with a templating error
• BZ - 2065282 - Secure RBAC, invalid YAML syntax in enable-secure-rbac.yaml file crashes overcloud when redeployed
• BZ - 2065540 - drop collectd-gnocchi from distribution
• BZ - 2066367 - Small /srv partition on hardened whole-disk images makes swift (and any service based on it) unusable
• BZ - 2066658 - Load balancers remain with immutable state
• BZ - 2066854 - Syntax error in orchestration plugin settings crashes horizon
• BZ - 2066888 - Horizon's JavaScript crashes in the browser
• BZ - 2066951 - [OSP 17.0] Openstack Director deployment does not support multiple elasticsearch servers in the RsyslogElasticsearchSetting config
• BZ - 2067261 - Using the baremetal node name results in "provide" failure
• BZ - 2068489 - THT parameter DnsServers is being overwritten by neutron inventory data
• BZ - 2069099 - [CI Bug] Unable to install python36-devel from bindep
• BZ - 2069313 - Overcloud deployment fails randomly due to permission denied issues
• BZ - 2069475 - [OSP17.0] Listing events for a deleted server does not work with RHOSP16.1 and the available command line client.
• BZ - 2069526 - [CI Bug] Unable to install python36-devel from bindep
• BZ - 2070032 - Mismatch between network qos rule create code and "usage" output
• BZ - 2070683 - Output file /home/stack/templates/overcloud-baremetal-deployed.yaml already exists
• BZ - 2071951 - Upgrade python-dogpile-cache to version 1.1.5
• BZ - 2071974 - [OSP17] Undercloud upgrade forces container-tools:3.0 stream on RHEL9
• BZ - 2072044 - Drop auth_ed25519 support for MySQL
• BZ - 2072119 - [tar-split] Drop requirement on golang/x/crypto [17.0]
• BZ - 2072461 - Since implementation of uplink_status_propgation, default behavior changed for VF link propgation from auto to disabled
• BZ - 2072665 - New command line option to ack that RHCS 5.1 MultiSite Configuration is not supported breaks automated deployemnt
• BZ - 2072687 - Boot fails when using overcloud-full.qcow2 (bios) image
• BZ - 2073011 - connect_volume encryption fixes
• BZ - 2073026 - Designate DNS ? OOO setup, zone is failed to be created (rndc: connect failed)
• BZ - 2073318 - [17.0] Mysql db_backup must be complete in both overcloud and undercloud
• BZ - 2073344 - [17.0] Mysql has been replaced by mariadb
• BZ - 2073374 - [17.0] Support doing backups of empty LVM volumegroups
• BZ - 2073491 - Octavia cannot reload haproxy because of selinux policies
• BZ - 2073855 - /boot/loader/entries file names need to match machine-id on firstboot
• BZ - 2074383 - [CI Bug] pep8 python3.9 job fails while running bandit with Issue: [B324:hashlib] Use of weak MD4, MD5, or SHA1 hash for security
• BZ - 2074541 - [OSP17] composable deployment with separate database node and haproxy on controllers does not create correct IPTables rules
• BZ - 2074821 - [OSP17]OVN migration fails on "stop and disable dhcp services and healthchecks" task
• BZ - 2075038 - [ovn][migration][17.0] Support migration to ML2/OVN from ML2/OVS with hybrid firewall
• BZ - 2075080 - OSP17 yum repo file gets overwritten causing undercloud deploy fail
• BZ - 2075122 - [RHOSP 17.0] OSP can't connect to the remote QDR due to certificate permissions set incorrectly
• BZ - 2075388 - version of facter in rhel 9 does not work under fips
• BZ - 2075445 - New packages: python-glance-tests-tempest
• BZ - 2077165 - OVS 2.17 breaks setting/reading table.condition causing neutron to fail to load (due to RAFT related changes)
• BZ - 2077246 - OVS 2.17 breaks setting/reading table.condition causing neutron to fail to load
• BZ - 2077537 - OSP17- Adding access rule to Manila share is failing
• BZ - 2077586 - Configuring local Nova NFS share is failing to mount due to multiple version options not permitted
• BZ - 2077670 - "openstack overcloud node delete" command throws an exception
• BZ - 2078069 - Fail the overcloud deploy is ceph-ansible.yaml is included
• BZ - 2078570 - Unit tests broken in patch CI osp-tox-py39
• BZ - 2078708 - [osp17] overcloud deletion fail because of incorrect permission on config download files
• BZ - 2079244 - [OSP17] OVN migration fails on "Create containers managed by Podman" , KeyError: 'exitcommand' during overcloud update
• BZ - 2080157 - [osp17] Overcloud Deployment fails at Step1 while spawning containers
• BZ - 2080920 - Expose password for overcloud rc file
• BZ - 2080966 - failed to reload listeners because of selinux error
• BZ - 2081319 - Share stuck in "error_deleting" status after running "test_access_rules_metadata" tests
• BZ - 2081491 - rabbitmq server fails to start in fips_mode
• BZ - 2081697 - container-puppet-haproxy fails to start on DistributedComputeHCIScaleOut node in DCN topology with TLS-E
• BZ - 2081698 - glance_api_tls_proxy container fails to start on DCN's DistributedComputeHCI nodes with TLS-E
• BZ - 2082734 - ceph dashboard proxy is unable to bind on a socket due to conflict with ceph-mgr
• BZ - 2083267 - metalsmith deployment works fine but generates an unbootable overcloud node
• BZ - 2083666 - [RHOSP 17.0] rsyslog uses old puppet-tripleo code resulting overcloud deployment failure
• BZ - 2083754 - Depreciating warning: /usr/lib/python3.9/site-packages/ansible/_vendor/__init__.py:42: UserWarning: One or more Python packages bundled by this ansible-core distribution were already loaded (pyparsing). This may result in undefined behavior.
• BZ - 2083858 - [RHOSP 17.0] Overcloud deployment fails when trying to deploy with rsyslog
• BZ - 2084290 - AttributeError: 'TableSchema' object has no attribute 'condition_state'
• BZ - 2085102 - SSH configuration being overwritten by THT params instead of merging
• BZ - 2085274 - [OSP17.0] Ignore plug_vifs on the ironic driver
• BZ - 2085492 - OSP17.0 openstack overcloud admin authorize traceback
• BZ - 2085494 - fence-agents-compute and sbd missing in default images
• BZ - 2085587 - [RHOS 17] Stopped VM failed to resize due to Unable to create allocation for 'VCPU' on resource provider
• BZ - 2086105 - "openstack overcloud export" command does not export anything
• BZ - 2086727 - Make sure we support both rhel8 and rhel9 for container tasks verification during update.
• BZ - 2086752 - Traceback hit when trying to configure a netapp backend
• BZ - 2087007 - OSP17.0 is failing on overcloud deployment when using FDP repo
• BZ - 2087204 - LB creation failed due to address already in use
• BZ - 2088316 - Load-balancer remains in PENDING_CREATE state forever
• BZ - 2088398 - DDP package playbook support for Intel Ethernet 800 series adapter using director
• BZ - 2088454 - Random tempest test failures due to missing flows for metadata port
• BZ - 2088526 - DistributedComputeScaleOut node fails to deploy on a DCN site with storage
• BZ - 2089304 - fs020 and full-tempest-scenario job failing on tempest test neutron_tempest_plugin.scenario.test_trunk.TrunkTest.test_trunk_subport_lifecycle
• BZ - 2089354 - [RHOSP 17.0] OSP 17 VMs are not including the "name" portion when collectd virt hostname_format parameter is specified
• BZ - 2089420 - Error creating a external network after overcloud installation
• BZ - 2089520 - [RHOS 17] Live migration failing due to permission errors
• BZ - 2089884 - [OSP17] DB sync script gets stuck when attempting to update port
• BZ - 2090733 - Overcloud export does not contain GlobalConfigExtraMapData causing DCN stack fail to deploy
• BZ - 2091532 - Drop golang-github-BurntSushi-toml and golang-gopkg-yaml
• BZ - 2091686 - [RAFT] OVN DB container unable to restart
• BZ - 2091692 - [RAFT] RAFT is not configured as default mode for new OSP17 environment
• BZ - 2091957 - [OSP 17.0] The openstack undercloud/overcloud upgrade commands must clearly state no support
• BZ - 2092063 - OSP17 Delete of unreachable node fails
• BZ - 2092120 - OSP17 Heat stack creation with --setup-only fails with error No overcloud Hosts found
• BZ - 2092358 - ovn_nb_connection seems to be set incorrectly for OVN RAFT
• BZ - 2092472 - migration: stale ip6tables rules after migration
• BZ - 2092524 - many community based modules failing in FIPS mode
• BZ - 2094034 - backport network downtime validations included in test_server_connectivity_live_migration
• BZ - 2094409 - Drop collectd-dbi and collectd-notify_email
• BZ - 2094596 - Remove puppet-midonet from distribution
• BZ - 2094598 - Remove puppet-n1k-vsm from distirbution
• BZ - 2094599 - Remove puppet-veritas_hyperscale from distribution
• BZ - 2094810 - Unable to deploy the ceph dashboard: missing default/container_images keys in the Ceph cluster
• BZ - 2094811 - Collectd base container build failure with Error: Unable to find a match: collectd-dbi
• BZ - 2094873 - backport https://review.opendev.org/c/x/ovn-bgp-agent/+/842139 downstream
• BZ - 2095625 - Remove puppet-ec2api from distribution
• BZ - 2095631 - Remove puppet-contrail from distribution
• BZ - 2095776 - openstack-selinux should have a simple way to verify policy modules are installed correctly
• BZ - 2095780 - [RHOSP 17.0] Live migration is failing when[workarounds]/rbd_volume_local_attach=True is configured
• BZ - 2096223 - HA L3 router/keepalived stability issues (ML2/OVS)
• BZ - 2096230 - etcd.cert is generated without SAN IP address record
• BZ - 2096427 - OSP17 dry run fails due to missing overcloud.json file
• BZ - 2097058 - DCN: cinder-volume is not able to establish connection with etcd cluster
• BZ - 2097372 - In TLS-e setup RadosGW is not configured with SSL certificate
• BZ - 2097408 - 'overcloud export ceph' fails ceph_client.yml not found
• BZ - 2097551 - DCN: A new site with DistributedComputeHCIScaleOut nodes fails to deploy
• BZ - 2097754 - [OSP17] DCN: The /etc/hosts file on the DCN site nodes is not populated with central site DNS records
• BZ - 2097879 - OSP17 ceph deploy fails with satellite due to extra slash
• BZ - 2099329 - mgr/dashboard/GRAFANA_API_URL of ceph config is configured with a wrong IP address
• BZ - 2099855 - [OSP17][TLS-E] haproxy check fails for ceph-grafana service
• BZ - 2100119 - OSP17 splitstack failures ensure backports
• BZ - 2100899 - [OSP17] Rebase python-pyroute2 to 0.6.6
• BZ - 2100906 - Octavia fails when enabling TLS-e in existing setup
• BZ - 2101409 - resource_provider_hypervisors not included in the sriov agent configuration
• BZ - 2101422 - OSP17 second overcloud deploy fails due to pacemaker authentication failing
• BZ - 2101495 - podman 4.1.1 changes default "ipc" value
• BZ - 2101514 - [dib]Built image configured with wrong kernel in the boot loader
• BZ - 2101677 - osds_per_device does not work when passed using --osd-spec option during ceph deploy
• BZ - 2101716 - Including environments/rhsm.yaml leads to an error
• BZ - 2101765 - [OSP17] openstack overcloud backup return error
• BZ - 2101791 - DifferentHostFilter not included in nova.conf
• BZ - 2101796 - Remove puppet-ntp from distribution
• BZ - 2101865 - From time to time memcached stops processing requests and brings down OpenStack control plane
• BZ - 2101937 - Add support in tripleo for distributed vlan traffic in ovn
• BZ - 2101948 - [RHOSP 17.0] Remove processes plugin from list of default plugins for collectd deployments
• BZ - 2102208 - Tempurl fails with FIPS enabled on RHEL9
• BZ - 2102258 - IPA Ramdisk DHCP client looses connectivity [upstream]
• BZ - 2102466 - ExtraConfig parameters should be merged instead of being replaced
• BZ - 2102627 - Kernel args not propagating following reboot
• BZ - 2102640 - neutron_plugin.tests.scenario.test_internal_dns.InternalDNSInterruptionsAdvancedTestOvn failing due to new policies
• BZ - 2102689 - "create_bandwidth_limit_rule" failing with "_create() takes 0 positional arguments but 3 were given"
• BZ - 2102732 - "neutron_tempest_plugin.exceptions" has no attribute 'SSHExecCommandFailed'
• BZ - 2102906 - OSP17 satellite overcloud deploy fail subscription manager disabled in a container
• BZ - 2103019 - Neutron fails to report updates to placement
• BZ - 2103034 - Rename golang-github-golang-sys to golang-x-sys
• BZ - 2103058 - Drop unused golang libraries from RHOSP 17.0
• BZ - 2103545 - [OSP17] Unable to create a VM after migration to OVN, timeout on network-vif-plugged
• BZ - 2103639 - Enforce policy during update to ensure rhel version is correct in downstream 17.0 repository.
• BZ - 2103846 - Overcloud deploy fails at Could not find class ::tripleo::profile::pacemaker::cinder::volume for controller-0.redhat.local
• BZ - 2103978 - Failing to deploy hardware offload setup
• BZ - 2103995 - Running subscription-manager during update fails with "subscription-manager is disabled when running inside a container"
• BZ - 2104130 - openvswitch failing to load DDP package
• BZ - 2104196 - UEFI IPv6 boot failing: BdsDxe: No bootable option or device was found
• BZ - 2104372 - Scenario001 failing during deploy with 'tripleo_cephadm_alertmanager_container_image' is undefined
• BZ - 2104420 - Fix redfish-virtual-media for newer iDRACs
• BZ - 2104576 - Add support for setting ovsdb-server RAFT election timer
• BZ - 2104647 - OC Reboot failing while waiting for OSDs to come back
• BZ - 2105291 - Pre-update, undercloud-heat-purge-deleted validation should not be executed in OSP17.0
• BZ - 2105359 - [CI] pep8 job failing
• BZ - 2105906 - tripleo_free may prevent subscription manager to properly work against satellite
• BZ - 2106389 - [RHOS-17] AttributeError: 'RBDVolumeIOWrapper' object has no attribute 'startswith'
• BZ - 2106551 - test_remove_associated_ports in class RoutersNegativePolicyTest class is out of date in version 17.0
• BZ - 2106643 - Fix Cinder's pacemaker services restart due to config changes
• BZ - 2106834 - [RHOSP 17] Include upstream DataCore cinder driver
• BZ - 2107048 - Drop python-ironic-prometheus-exporter from RHOSP 17.0
• BZ - 2107098 - [RHOS17] Radosgw access denied when trying to get object with temp_url using SHA256 digest
• BZ - 2107454 - [RHOSP 17.0] Ceilometer-agent-compute could be started on compute nodes before libvirt which will cause ceilometer to fail to collect virt mertrics
• BZ - 2107565 - [TripleO][Glance][SRBAC] Policy.yaml generates via OOO is not as per the glance project persona support in wallaby
• BZ - 2107576 - Potential drop of packages in 17.0+
• BZ - 2107914 - [Designate] ERROR: Can't run container designate_pool_manage - Overcloud error
• BZ - 2107976 - Failure 'test_create_server_ovn_dbs_monitoring' - extra entry in SBDB
• BZ - 2108052 - Improve string representation of DB model objects
• BZ - 2108082 - error in suds-jurko setup command: use_2to3 is invalid.
• BZ - 2108580 - 503 Service Unavailable on os_tempest Ensure private network exists task
• BZ - 2108975 - all tests fail with "Policy does not allow this request to be performed"
• BZ - 2109418 - Timeout while performing creating/deleting actions on shared provider network with a large amount of subnets
• BZ - 2109587 - Octavia TLS tests fail when FIPS is enabled
• BZ - 2109862 - Floating IP assignment after volume snapshot might be slow
• BZ - 2110550 - overcloud redeploy fails on: "Set connection" of ovn_cluster_north/south_db task
• BZ - 2110556 - [RHOS 17] For postcopy-based live migration work, it's required to enable the sysfs parameter`vm.unprivileged_userfaultfd`
• BZ - 2110586 - RHOSP 17.0 requires RHCS 5.2 beta containers
• BZ - 2111015 - [OVS HWOFFLOAD] [ML2-OVS] Traffic not offloaded
• BZ - 2111199 - Designate bind backend is configured with an incorrect allow-notify list of IPs
• BZ - 2111527 - RHOSP 17.0 GA requires Ceph GA containers
• BZ - 2112000 - Can not perform PUT against RGW: Unauthorized
• BZ - 2112444 - [IPv6]invalid literal for int() with base 10: 'dead:beef:4::3'
• BZ - 2112451 - Designate DNS ? OOO setup, zone is failed to be created (rndc: connect failed)
• BZ - 2112988 - Known Issue - Can not perform PUT against RGW: Unauthorized
• BZ - 2114509 - Update rhosp-release for OSP 17.0 GA
• BZ - 2114689 - volume api test detach is not stable
• BZ - 2115035 - After a Controller reboot ovn_metadata_agent goes into unhealhy state
• BZ - 2115383 - Services can be stucked after trying to reconnect to rabbitmq
• BZ - 2116906 - creator role not required for secret creation
• BZ - 2118408 - [RHOS-17] NoVNC Tempest test failing due to PermissionError: [Errno 13] Permission denied for context.load_cert_chain(certfile, keyfile)
• BZ - 2118908 - [RHOSP17.0] Live Migration Fails With Live Migration failure: operation failed: domain is no longer running: libvirt.libvirtError: operation
• BZ - 2119239 - 17.0 Undercloud installation fails on "ensure podman and deps are installed" TASK
• BZ - 2119563 - Deployment with external Ceph with NFS ganesha fails, error: Could not match supplied host pattern, ignoring: ceph_mon
• BZ - 2120156 - Two Ctlplane interfaces are created on overcloud when using some custom NIC template.
• BZ - 2120474 - Handle multiple internal subnets when adding iptable rules for SSL/TLS connection in the OVN multi-active cluster role
• BZ - 2123014 - Unable to complete OVSDB transaction due to timeout on the TRY_AGAIN retries

CVEs

(none)

References

• null