RHEA-2023:4577 - Product Enhancement Advisory

Topic

Red Hat OpenStack Platform 17.1 (Wallaby) RPMs are now available.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Release of Red Hat OpenStack Platform 17.1 (Wallaby) provides these changes:

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 17.1 for RHEL 9 x86_64
• Red Hat OpenStack Director Deployment Tools 17.1 for RHEL 9 x86_64
• Red Hat Enterprise Linux for x86_64 9 x86_64

Fixes

• BZ - 1326390 - [RFE] Implement Secure RBAC Project Scoped Personas within nova, placement
• BZ - 1326392 - [RFE] Implement Secure RBAC Project Scoped Personas within glance
• BZ - 1326393 - [RFE] Implement Secure RBAC System Scoped Personas within swift
• BZ - 1326396 - [RFE] Implement Secure RBAC Project Scoped Personas within cinder
• BZ - 1369007 - [RFE] UEFI Secure Boot support for Nova instances (using SMM & OVMF)
• BZ - 1581414 - [RFE][OSP 17] Record instance machine types at service startup and instance spawn allowing [libvirt]hw_machine_type to be changed for q35
• BZ - 1619266 - [RFE] [OVN] Security Groups Logging
• BZ - 1666804 - [RFE] Support for cinder-backup Active / Active
• BZ - 1672972 - [RFE] After a Nova compute shutdown, the instances' state held by the hypervisor is not updated
• BZ - 1692608 - [RFE][OSP17] Restart nova_virtlogd makes console logs cannot be updated
• BZ - 1693377 - [RFE] Add ability to use pinned and non-pinned CPUs in the same instance
• BZ - 1698957 - [RFE] Manage certmonger certificate via ansible instead of puppet
• BZ - 1701281 - [RFE] Cold migrate and resize instances having vGPUs
• BZ - 1720404 - [RFE] Count quota usage from placement
• BZ - 1760256 - [OSP17][RFE] Cellv2 multi-cell in tls-everywhere environment
• BZ - 1761861 - [RFE] RHOSP Compute node supporting multiple NVIDIA vGPU types
• BZ - 1761903 - [RFE] Scheduler support for routed networks
• BZ - 1762351 - [OSP17][RFE] Remove EC2 api from director
• BZ - 1772124 - [RFE][OSP17] Add configuration parameter for [compute]\max_disk_devices_to_attach
• BZ - 1782128 - [RFE] vTPM encryption support
• BZ - 1782806 - [RFE][OSP17][Deployment] vTPM encryption support
• BZ - 1793957 - [RFE][OSP17][Deployment] RHOSP Compute node supporting multiple NVIDIA vGPU types
• BZ - 1806811 - Creating image for volume does not honour protected and private flag
• BZ - 1813565 - Octavia Load balancer with Availability Zones for Edge site scheduling
• BZ - 1821532 - [TestOnly] Add ability to use pinned and non-pinned CPUs in the same instance
• BZ - 1821559 - [TestOnly] Default to the Q35 machine type
• BZ - 1823250 - Redis should be disabled by default because telemetry is no longer enabled by default
• BZ - 1827598 - [RFE] OVN Stateless security groups
• BZ - 1857652 - [QE-Tracker][RFE] Support migrating trunk from ml2/ovs to ovn
• BZ - 1859453 - The memcached servers is set 127.0.0.1:11211 not memcached server in docker swift_object_expirer.
• BZ - 1859768 - [OSP 17.0][RFE] RBD direct download into Nova cache avoiding Glance
• BZ - 1873707 - [RFE] Backup and Restore: Integrate the validation framework within the workflow of the backup and restore procedures
• BZ - 1878259 - [RHOSP 17.1] Include New dependencies for collectd-sensubility update
• BZ - 1883554 - [RFE] `socket` PCI NUMA affinity policy
• BZ - 1888788 - [RFE] Implement Secure RBAC Project Scoped Personas within manila
• BZ - 1890531 - [RFE] [FFWD] OSP with Ceph upgrade 16.2 -> 17.x
• BZ - 1899483 - [RFE][OSP17][deployment] Scheduler support for routed networks
• BZ - 1913180 - Add back the mysql driver to the RHOSP 17.1 horizon container
• BZ - 1917460 - [OSP17] expose parameter to manage '[libvirt] max_queues'
• BZ - 1936302 - [RFE] Deploy secure RBAC for Glance via TripleO
• BZ - 1949644 - [RFE] TripleO support for configuring cinder's S3 backup driver
• BZ - 1956282 - [RFE] Deploy secure RBAC for Swift via TripleO
• BZ - 1956283 - [RFE] Deploy secure RBAC for Manila via TripleO
• BZ - 1957443 - [OSP 17] sysfsutils is being removed in RHEL 9 so it should be removed from the nova containers.
• BZ - 1961850 - Tripleo is not configuring the lb-health-mgr-sec-grp security group to allow IPv6 lb-mgmt-net
• BZ - 1962500 - [RFE] Rsyslog should get collectd logs.
• BZ - 1965308 - haproxy port on wrong subnet when network has multiple subnets
• BZ - 1986025 - Support for Cinder NVMe over TCP
• BZ - 2005495 - [RFE][manila][tripleo] Add TripleO support for configuring manila backend availability zones
• BZ - 2007314 - [OSP-17][CentOS-9]Spawning instance with vTPM driver results in error with selinux denials
• BZ - 2008969 - [TestOnly] Support for manage/unmanage for manila shares (DHSS=True/False)
• BZ - 2011933 - [OVN migration] SR-IOV nodes are not fully migrated
• BZ - 2016660 - RFE [16.2->17.1] Implement a working FFU upgrade
• BZ - 2031863 - [UPG 16.2 -> 17.1] Undercloud upgrade won't start due to missing tripleo-undercloud-passwords.yaml file
• BZ - 2033811 - [Backport] [RHOSP 17.1] Backport Pure Storage FlashBlade Manila driver to Wallaby
• BZ - 2040260 - [OSP16.2 -> OSP17.1] Undercloud upgrade fails during "Run undercloud-upgrade-ephemeral-heat.py": Missing value auth-url required for auth plugin password
• BZ - 2043603 - Glance FIPS compatibility mode support
• BZ - 2051376 - [OSP16.2 -> OSP17.1] Undercloud upgrade failing due to remaining deprecated services
• BZ - 2065541 - remove collectd-gnocchi configuration from tht
• BZ - 2066349 - [RFE] Leave free space at the end of the overcloud-hardened-uefi-full image
• BZ - 2066866 - [RHOSP 17.1][upgrade] Remove panko service and users during upgrade to 17.1
• BZ - 2069624 - [RFE] Snapshot and Revert
• BZ - 2077335 - [RHOSP16.1][REAR] Back up of the overcloud ctlplane keeps going even if one controller is unreachable
• BZ - 2079264 - Upgrade [OSP16.2 -> OSP17.1] openstack overcloud network provision fails
• BZ - 2079935 - Upgrade [OSP16.2 -> OSP17.1] - Adopting deployed nodes fail when ironic node names and hostname use the same format.
• BZ - 2080199 - Upgrade [OSP16.2 -> OSP17.1] service endpoints from keystone catalog are not removed after dropping services
• BZ - 2081254 - [RFE] [OSP 17.1] Backport Implement "Boot a VM with an unaddressed port" blueprint
• BZ - 2088292 - [OVN] QoS bandwidth limiting for Floating IPs
• BZ - 2088515 - Run_after of certificate_requests in modular libvirt does not reload virtproxyd service
• BZ - 2089512 - Multi-stack v2 with TLS-E - reimplement to fix all regressions as of upstream Wallaby
• BZ - 2090461 - Skip ceph-infra role during ceph-ansible rolling_update execution
• BZ - 2091890 - Upgrade [OSP16.2 -> OSP17.1] External upgrade command is broken
• BZ - 2092444 - OSP17 metalsmith list displays no port found after compute node delete
• BZ - 2093312 - [RHOS-17] swtpm logs not bind-mounted to host
• BZ - 2093414 - Upgrade [OSP16.2 -> OSP17.1] ceph upgrade failing due to "No file was found when using first_found"
• BZ - 2096803 - Upgrade [OSP16.2 -> OSP17.1] disable nova compute services checks on FFU
• BZ - 2097844 - OSP17 overcloud config download command fails due to missing playbook
• BZ - 2099655 - OSP17 openstack overcloud external-upgrade run command returns a traceback
• BZ - 2102557 - Upgrade [OSP16.2 -> OSP17.1] Ceph adoption failed due to lack of permissions on target directory
• BZ - 2104133 - Need to Backport security group tests "removing security group from ACTIVE instance"
• BZ - 2104522 - Support "requested-chassis" for OVN live-migration
• BZ - 2106406 - Duplicated port binding registers per port, due to live-migration failures
• BZ - 2107580 - [osp17] Tripleo_nova_libvirt_guests fails after reboot
• BZ - 2109541 - novaclient.tests.unit.test_shell.ShellTest.test_osprofiler KeyError: 'profile'
• BZ - 2109616 - Nova fails to parse new libvirt mediated device name format
• BZ - 2109816 - tempest.api.volume.admin.test_backends_capabilities.BackendsCapabilitiesAdminTestsJSON.test_compare_volume_stats_values failure on a NFS-derived backend
• BZ - 2109985 - [OVS HWOFFLOAD] [ML2-OVS] Traffic not offloaded
• BZ - 2111505 - [RHOSP17.1][nova_libvirt tag: 16.2.0-55.1638436404] libvirt version incompatibility leaves instances in unmanageable state after minor update from RHOSP 16.2.0 to RHOSP 16.2.x
• BZ - 2111528 - Set default Ceph containers and cephadm to RHCS6 with OSP17.1
• BZ - 2112880 - Designate bind backend is configured with an incorrect allow-notify list of IPs
• BZ - 2112892 - clustercheck healthcheck reports unhealthy on external-lb ipv6 env
• BZ - 2113846 - ERROR: Can't run container ceilometer_gnocchi_upgrade
• BZ - 2114062 - Need to Backport security group tests "removing security group from ACTIVE instance"
• BZ - 2114782 - [DB] Neutron quota request implementation can end in a lock status
• BZ - 2114810 - Incorrect port count in horizon overview page
• BZ - 2116311 - Services can be stucked after trying to reconnect to rabbitmq
• BZ - 2116340 - [RHOSP 17.1][puppet] Collectd ceph plugin can not connect to the socket since its path has been changed in ceph 5.x. As a result ceph metrics can't be collected.
• BZ - 2116451 - ImportError 'h2' package is not installed for octavia_tempest_plugin/tests/barbican_scenario
• BZ - 2116600 - [OSP17.1] while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set
• BZ - 2118968 - Failed to create VM with flavor with cpu quota settings when kernel support cpu controller
• BZ - 2120330 - deploying Designate with ipv6 leads to MiniDNS service not starting
• BZ - 2120767 - [TestOnly] AMD SEV
• BZ - 2121077 - [OSP -17.1 ]Need to Backport security group tests - [Delete tcp rule from a security group],[Make the StatefulConnection class to work with priviliged ports],[Use StatefulConnection class to verify connectivity in SG tests]
• BZ - 2121117 - [RHOSP17.1] Live Migration Fails With Live Migration failure: operation failed: domain is no longer running: libvirt.libvirtError: operation
• BZ - 2121371 - Upgrade [OSP16.2 -> OSP17.1] Delete unused DB users once
• BZ - 2121372 - Upgrade [OSP16.2 -> OSP17.1] Enable packaging management
• BZ - 2121376 - Upgrade [OSP16.2 -> OSP17.1] container-tools which version it should be used
• BZ - 2121379 - Upgrade [OSP16.2 -> OSP17.1] Check if deployed file exists for CADeployment | controller-0 | error={"changed": false, "msg": "Permission denied"}
• BZ - 2121693 - [RFE] Support for FIPS compatibility mode in Manila
• BZ - 2122172 - [RHOS 17.1] For postcopy-based live migration work, it's required to enable the sysfs parameter`vm.unprivileged_userfaultfd`
• BZ - 2122464 - crypto-policies RSAMinSize enforcement breaks ssh to overcloud nodes
• BZ - 2122566 - Support for FIPS compatibility mode with OSP + Ceph as storage backend
• BZ - 2122574 - Support for FIPS compatibility mode in Swift
• BZ - 2122601 - [RHOS-17.1] NoVNC Tempest test failing due to PermissionError: [Errno 13] Permission denied for context.load_cert_chain(certfile, keyfile)
• BZ - 2122619 - Support for FIPS compatibility mode in Cinder
• BZ - 2122642 - [RHOS 17.1] UEFI guest deployment fails due to UEFINotSupported exception
• BZ - 2122936 - UnboundLocalError: local variable 'instance_uuid' referenced before assignment
• BZ - 2123322 - os-net-config failing on controllers randomly: /sys/class/net/bonding_masters
• BZ - 2124309 - RHOSP could check if allocated VIPs are already used by external hosts
• BZ - 2125342 - [RFE] Implement Secure RBAC Project Scoped Personas within Barbican
• BZ - 2125402 - [RHOSP 17.1] Install of openstack-ceilometer-ipmi results in an error message
• BZ - 2125531 - Nova notifications with error response are not retried
• BZ - 2125610 - icmp health monitors are broken
• BZ - 2125612 - [Octavia] Spam of "nf_conntrack: table full, dropping packet" messages during performance tests
• BZ - 2126084 - Designate DNS ? heat variables ?DesignateBindQueryLogging? is not set on Controllers
• BZ - 2126375 - [OSP 17.1] Deprecate Backup & Restore functionality & Docs
• BZ - 2126810 - Octavia and designate should use pacemaker enabled redis
• BZ - 2126890 - Remove derived parameters
• BZ - 2128251 - ?OSP16.2 -> OSP17.1? OVN db migration from pacemaker to non pacemaker deployment.
• BZ - 2128849 - [FeatureBackport] Support cold migration, resize and evacuate operations for instances with vDPA devices
• BZ - 2129045 - [OSP17.1][OVS]Release regression verification
• BZ - 2129047 - [OSP17.1][OVN]Release regression verification
• BZ - 2129165 - [RHOSP 17.1] OSP can't connect to the remote QDR due to certificate permissions set incorrectly
• BZ - 2129207 - [RHOS-17.1] Nova-conductor container service continuously restarts if it cannot reach keystone
• BZ - 2129359 - Flavor create form should not check for uniqueness of uuid field when its value is auto
• BZ - 2133027 - [RHOSP 17.1] aodh uses deprecated gnocchi api to aggregate metrics and doesn't work properly
• BZ - 2133055 - [RFE] Expose rabbitmq observability data via rabbitmq_prometheus plugin
• BZ - 2133297 - [OSP17] Tripleo doesn't set the right permission to path "/home/stack/.tripleo/" during undercloud installation
• BZ - 2133508 - Wrong location for undercloud passwords file
• BZ - 2133866 - overcloud fails to deploy with FIPS and tls-everywhere
• BZ - 2135260 - router gateway unset + set breaks ovn lb connectivity
• BZ - 2135439 - Issues when scheduling certain asymmetric multi-numa guest topologies
• BZ - 2135548 - [BDI] - Overcloud CephStorage scale out failed with GRUB2 error
• BZ - 2136302 - [RHOSP 17.1] Rebase qpid-dispatch to 1.19.0
• BZ - 2136445 - [RHOSP 17.1] Deprecate sensubility
• BZ - 2136611 - NFV support for multi-RHEL (Validate NFV scenarios for multi-RHEL)
• BZ - 2137594 - baremetal-samples directory needs to be packaged
• BZ - 2137904 - Port binding fails for guests scheduled to a multi-cellsv2 aggregate zone
• BZ - 2138238 - Deploy an internal glance-api service to address OSSN-0090
• BZ - 2138354 - [RFE][BDI] - Users are unable to set instance FQDN (nova)
• BZ - 2138665 - [OSP17.0] Growvols playbook fails with heterogeneous images
• BZ - 2139450 - OC deployment with minimal image on Ceph nodes failed
• BZ - 2140626 - Add python-sqlalchemy13 in RHOSP 17.1
• BZ - 2140988 - 17.1 - Update instance host and task state when post live migration fails
• BZ - 2141701 - OSP 17.1/rhel9 jenkins jobs fail before undercloud install - Please check the access rights for: '/var/log/validations'
• BZ - 2142589 - KeyError when creating a router connected to a vlan provider network
• BZ - 2142591 - ValueError when a router is removed without disconnecting its external interface
• BZ - 2142592 - AttributeError when deleting a LB using --cascade option
• BZ - 2143291 - haproxy breaks HTTP/1.1 keep-alive with huge payloads
• BZ - 2143539 - [PerfCI][OVN RAFT][17.0] BrowbeatPlugin.router_subnet_create_delete fails randomly with 504 Gateway Time-out
• BZ - 2143732 - Health monitors stuck in PENDING_CREATE
• BZ - 2144597 - Trait MEM_ENCRYPTION_CONTEXT not reported when using AMD-SEV Computes
• BZ - 2147602 - AttributeError: 'SecurityGroupDbMixinTestCase' object has no attribute 'mock_quota_make_res'
• BZ - 2148123 - Assertion errors in magnumclient.tests.test_shell
• BZ - 2149216 - HM not working for FIPs
• BZ - 2149468 - [OSP17.1] Invalid bdm record is left when cinder api call to delete a volume attachment times out
• BZ - 2149493 - Getting error of ubi8/pause during openstack overcloud deploy on internat.
• BZ - 2149586 - overcloud LVM thin pool has very small metadata volume
• BZ - 2149963 - ceph_spec_bootstrap not handling children groups in tripleo-ansible-inventory
• BZ - 2150082 - [RHOSP17.1][Deployment][RFE] Switch to show/hide host_status field in server detail response to non-admins
• BZ - 2150181 - [OSP17.1] osp-rpm-py39 job unit test broken after upstream cpython vulnerability fix backport
• BZ - 2151002 - Undercloud creating 1024- bit SSH Public/Private Key - Enable upgrades from 16.x to 17.1 (which requires 2048+ bit keys)
• BZ - 2151009 - [RHOS-17.1] Nova NFS fails to deploy due to Error in 5 output role_data: Incorrect arguments: Items to concat must be lists
• BZ - 2151043 - subscription-manager command doesn't work on a Controller node running cinder-volume container
• BZ - 2151049 - cinder::quota module is not run through puppet-tripleo
• BZ - 2152197 - Disk image create failing returning non zero exit status 1 unclosed file
• BZ - 2152555 - Test test_concurrent_router_subnet_attachment_overlapping_cidr_ failing
• BZ - 2152877 - Only client to server packets are logged
• BZ - 2152888 - [RHOSP 17.1] collectd sensubility doesn't work in OSP17 as a result of structural changes
• BZ - 2153267 - [OSP17.1][OVN migration] Set VALIDATE_MIGRATION=False by default
• BZ - 2154343 - [OVN] If there are multiple network log objects associated to the same event and security group, only the first created is considered
• BZ - 2154810 - [OSP17.1] Integrate OVS 3.1 with OSP17.1
• BZ - 2154887 - Designate DNS ? All designate-tempest-plugin tests fail on "TLS everywhere" setup
• BZ - 2155602 - Ironic tries to send power notifications to nova when nova api endpoint is absent
• BZ - 2156083 - Multiple failures in tobiko.tests.scenario.neutron.test_floating_ip.py due to recent change
• BZ - 2156725 - Overcloud deploy fails on "Clean up legacy Cinder keystone catalog entries" step if multiple IPv6s on interface
• BZ - 2158159 - [UPG 16.2 -> 17.1] manage redis-bundle in case of octavia/designate/legacy-telemetry
• BZ - 2158380 - tripleo container image prepare TypeError: 'NoneType' object is not iterable
• BZ - 2158437 - [OVN migration] Can't backup controller nodes if BACKUP_MIGRATION_IP does not belong 192.168.24.0/24
• BZ - 2159611 - backport "Enable start of FRR for non-root user"
• BZ - 2159677 - HM status not conditional on the status of the existing members
• BZ - 2159684 - Fully populated HM is created/deleted, the listener remains in PENDING_UPDATE
• BZ - 2160159 - OSP 17 Undercloud is not able to introspect host with Dell iDRAC 6.10 using Redfish
• BZ - 2160469 - sync removes the route to a FIP when the corresponding subnet network has dhcp disabled
• BZ - 2160471 - New Package: add python3-h2 package in OSP17.1
• BZ - 2160714 - Update OVN to 22.12 for OSP 17.1
• BZ - 2160767 - changing the route to VIP's FIP after a failover takes too long
• BZ - 2161162 - [tobiko] Test failures due to neutron api requests stuck which leads to haproxy timeout
• BZ - 2161900 - [RHOSP 17.1] ceilometer logs report Unsupported scheme "b''" in url "None" errors.
• BZ - 2162024 - [Cinder] Multivalued options created with wrong syntax
• BZ - 2162029 - [Glance] Multivalued options created with wrong syntax
• BZ - 2162050 - SELinux prevents running update_yum.sh script during container modification
• BZ - 2162114 - [Manila] Multivalued options created with wrong syntax
• BZ - 2162115 - [Ironic] Multivalued options created with wrong syntax
• BZ - 2162632 - [RHOSP 17.1][Aodh] Multivalued options created with wrong syntax
• BZ - 2162712 - New Package: add python-hpack package in OSP17.1
• BZ - 2162713 - New Package: add python-hyperframe package in OSP17.1
• BZ - 2162756 - Centralized traffic due to unexpected behavior of reside-on-redirect-chassis and ovn-chassis-mac-mappings
• BZ - 2163685 - barbicanclient throws a warning: "UserWarning: The secrets module is moved to barbicanclient/v1 directory"
• BZ - 2163690 - Upstream secure RBAC tests haven't yet landed downstream
• BZ - 2163815 - [ovn provider] Load balancer's VIP is irresponsive when VIP is on the provider network
• BZ - 2164435 - [OVN] Trunk port not active when created (OVS to OVN migrated environment)
• BZ - 2164677 - There is no ACCESS target for the port 13005 (heat_cfn_ssl_port) in OSP17.0.
• BZ - 2164749 - Octavia rsyslog container is using the Octavia API image
• BZ - 2165000 - bnr - missing db backup files
• BZ - 2165441 - Some tripleo container's healthcheck fails if the undercloud is installed with IPv6 and no_proxy environment variable
• BZ - 2165501 - [OVN] Hardware offloaded QoS implementation (min-bw and max-bw, egress direction)
• BZ - 2165527 - Upgrade [OSP16.2 -> OSP17.1] overcloud prepare containers failed with 401 client error UNAUTHORIZED
• BZ - 2165563 - Tox py39 job failing: "stestr is not allowed, use allowlist_externals to allow it"
• BZ - 2165616 - imageutils: calling str on a QemuImgInfo instance raises AttributeError
• BZ - 2166224 - Update/upgrade run doesn't honour blacklist node
• BZ - 2166679 - Backport nvmeof testing infrastructure
• BZ - 2166754 - [RHOSP 17.1] Verify fix for CVE-2022-47951 is present
• BZ - 2166843 - octavia tempest plugin IPv6 tests fail with: Server ... on port ... did not begin passing traffic within the timeout period.
• BZ - 2166865 - metalsmith list taking more than ~150s at scale
• BZ - 2166883 - OVN cluster containers are not updated during update.
• BZ - 2166951 - Allow SSH connection callers to not permit agent usage
• BZ - 2167102 - [RHOSP17.1] Unable To Spawn A VM With Huge Pages
• BZ - 2167161 - Increase rgw_max_attr_size to 1024
• BZ - 2167374 - Secure RBAC Octavia tempest tests fail
• BZ - 2167431 - OSP17.1 | Collectd hugepages plugin complains about not being able to open file
• BZ - 2167524 - overcloud keystone container fails with openidc auth type
• BZ - 2168329 - bgp agent doesn't process new events after pyroute2 crashed
• BZ - 2168551 - Ansible inventory from neutron inefficiency in large scale deployments
• BZ - 2168667 - KeyError exception due to a race condition executing withdraw_subnet
• BZ - 2168874 - ValueError executing withdraw/expose operations on controllers
• BZ - 2169303 - [RHOSP17.1] ceilometer sudoers is required by ceilometer-polling to enable polling ipmi namespace
• BZ - 2169349 - [ovn provider] Avoid use of ovn-metadaport for HM healt check packets
• BZ - 2169691 - Cannot create a listener with the fully-populated API in SINGLE topology
• BZ - 2169961 - [OSP 17.1] Unacceptable CPU info: CPU doesn't have compatibility
• BZ - 2171420 - [OSP17.1][BGP] Backport "Make dns_domain value configurable" patch
• BZ - 2171726 - Unsupported parameters for (ansible.legacy.command) module: warn
• BZ - 2171815 - ValueError on attempt to override allowed_network_downtime with a float value
• BZ - 2171896 - ovn agents are dead after ovn-controller update.
• BZ - 2172063 - deployed ceph fails to apply spec
• BZ - 2172114 - Horizon server resize interface Advanced Options -> Server Group option does not do anything
• BZ - 2172534 - RHOSP 17.1 [TLS] config-download taking too long at scale
• BZ - 2172582 - Internal Ceph deployment fails during pool creation with RHCSv6.0
• BZ - 2173101 - ceph stray_host issue: fqdn vs short host names when deploy with freeipa / tls-everywhere
• BZ - 2173575 - Flooding issue at br-int for unknown IPs due to missing FDB entries
• BZ - 2173717 - Unsupported format of Transfer-Encoding header
• BZ - 2173939 - Overcloud deployment fails starting nova due to file permission
• BZ - 2174346 - [OSP 16.2] [OVN-DVR] [Overcloud BM] Setup suffers some MTU mismatch in 16.2 but not in 16.1
• BZ - 2174492 - The task "Wait for provisioned nodes to boot" fails in OSP 17.x FIPS jobs
• BZ - 2174566 - Tempest Test Fails in downstream: setUpClass (tempest.api.compute.servers.test_server_actions.ServerActionsTestJSON)
• BZ - 2174632 - Network throughput in OSP17 seems to be very lower than OSP16.2's and OSP13's
• BZ - 2174885 - TripleO configure same worker_self_reference_url for all controllers
• BZ - 2175821 - Disable use of the SSH agent for the rescue test
• BZ - 2175853 - [Neutron][SRBAC]Custom policies don't include share policy for qos policies
• BZ - 2175887 - ValueError exception running _expose_provider_port
• BZ - 2175892 - KeyError exception running _expose_provider_port
• BZ - 2175894 - KeyError exception running expose_subnet
• BZ - 2176046 - Octavia DCN playbook fails to add subnets to the routers
• BZ - 2176175 - OVN-provider LB VIP not exposed when expose_tenant_networks=False
• BZ - 2176187 - [Neutron][SRBAC]Custom policies don't include network owner rule for delete port policy
• BZ - 2176190 - enable new container image name by default
• BZ - 2176250 - Overcloud deployment fails when deploying with CollectdEnableSensubility set to false
• BZ - 2176836 - OVN migration DB sync fails on controller
• BZ - 2178049 - project_member and project_reader dynamic credentials are in different projects
• BZ - 2178062 - test_least_connections_tcp_traffic failed
• BZ - 2178504 - 17.1 - #2 - Missing error messages - Fix issues with nova-manage volume_attachment subcommand
• BZ - 2178509 - FFU | While FFU from osp16.2 to osp17.1 overcloud update fails on ceilometer_gnocchi_upgrade
• BZ - 2178590 - Sensubility stops working after updating overcloud. error: amqp:internal-error EOF (connection aborted)
• BZ - 2178618 - security group log deletion not a sync op
• BZ - 2179006 - [RHOSP 17.1] sensubility reports incorrect state of containers
• BZ - 2179071 - [RHOSP 17.1] Libpodstats doesn't report cpu and memory usage for ceph services
• BZ - 2179366 - [17.1][DPDK] packet drop caused by vga controller induced latency on memory bus
• BZ - 2180677 - no_proxy environment variable have no effect in the case IPv6 address is set with brackets
• BZ - 2180933 - [RHOSP 17.1] Rsyslog container looking pacemaker log file in the wrong directory
• BZ - 2181381 - Security group logging - logging configuration doesn't change after neutron restart
• BZ - 2181532 - [Multirhel] container-puppet-ovn_controller failed to start on rhel8 compute node
• BZ - 2181897 - [Multi-RHEL] Server failed to reach VERIFY_RESIZE status: group ID permissions issue on 'nova_compute' and 'nova_migration_target' containers
• BZ - 2182371 - [17.1][OVN HWOFFLOAD][CX-5, CX-6 & Bluefield-2] Vms with offload vfs takes a long time to boot up [10 min+]
• BZ - 2182746 - Allow ironic-python-agent to PXE booting with Secure Boot enabled
• BZ - 2184040 - FRR cannot be restarted alone
• BZ - 2184070 - OVS -> OVN migration fails due to ovn db sync util error
• BZ - 2184311 - Misalignment with extra-dhcp-options between neutronclient & openstackclient
• BZ - 2184346 - [OSP 17.1] [Tempest] Upstream test case on 17.1 failling - test_connectivity_between_vms_using_different_sec_groups
• BZ - 2184349 - [OSP 17.1] [Tempest] Upstream test case on 17.1 failling - test_two_sec_groups
• BZ - 2184424 - [RHOS-17.1] Shelving of instance fails with FIPs and Ceph Native deployment
• BZ - 2184681 - Add openstack-ansible-core to OSP 17.1
• BZ - 2184840 - [17.1] Backport tempest patch for upstream-approved Block Storage API backward-incompatible change
• BZ - 2185183 - test_http_l7policies_and_l7rules randomly fails
• BZ - 2185881 - OSP17.1 can't execute validations by group
• BZ - 2185914 - [OVN] Allow to configure ovsdb probe interval in ml2 conf and ovn metadata conf file
• BZ - 2186044 - [RHCS 6.0] NFS-Ganesha fails to start - error: //run/ceph-nfs@pacemaker.service-cid: No such file or directory
• BZ - 2186511 - ip nei entries not cleaned up when a router is deleted
• BZ - 2186535 - withdrawing a LB VIP IP not done immediately
• BZ - 2186553 - Upgrade [OSP16.2 -> OSP17.1] Issue with compute live migration in TLS
• BZ - 2187255 - [RHOSP 17.1] Make ceilometer metrics format human-friendly
• BZ - 2187651 - too long connectivity downtime during VM live-migration with BGP
• BZ - 2188075 - Description of Image in metadata is overwritten by description of Image in Image Details
• BZ - 2188252 - The /usr/share/tripleo-common/container-images/container_image_prepare_defaults.yaml shipped with 17 has wrong ceph container tags
• BZ - 2188326 - Route to FIP exposed/withdrawn by the sync process
• BZ - 2188477 - DCN: GlanceApiEdge fails to deploy on DistributedComputeHCI nodes
• BZ - 2189208 - [BGP] the agent ignores the configured reconcile_interval
• BZ - 2190166 - Auditd.service "queue overflow" messages observed in compute nodes after node-provision (or) openstack-deployment
• BZ - 2192193 - [glance][RBAC] Incorrect code response while preforming certain actions by reader user
• BZ - 2192340 - Introduce OVN batch migration code
• BZ - 2192580 - [17.1][OVN migration]Trunk VM subport connectivity is broken after VM stop/start (or VM migration)
• BZ - 2192726 - OVN migration tool doesn't send network events to nova on wiring changes
• BZ - 2193122 - Set a default region for clients
• BZ - 2193131 - Add enable_certificate_validation config option
• BZ - 2193166 - OSP17.1 ceph Satellite Deploy fails due to expected osds not running
• BZ - 2193213 - Enforce policy during update to ensure rhel version is correct in downstream 17.1 repository.
• BZ - 2193344 - [Neutron][SRBAC]New policies change the behavior for check rule type
• BZ - 2193405 - Splitting member API tests in 2 classes
• BZ - 2196180 - backport Stateless security group tempest tests
• BZ - 2196427 - undercloud bgp/frr configuration via enable_frr option doesn't work as expected
• BZ - 2196698 - [FeatureBackport] [OSP 17.1] hypervisor version weigher
• BZ - 2203199 - Backport RBD capacity calculation fix
• BZ - 2203238 - Backport os-brick debug logging fix
• BZ - 2204522 - Backport "Allow finer grained log levels"
• BZ - 2207941 - HAProxy healthchecks sometimes fail on a FIPS-enabled control plane
• BZ - 2207991 - SRBAC env file conflicts with NovaHostStatus parameter to throw a double declaration error resulting in failed overcloud deployment
• BZ - 2208206 - test_secret_stores.* tests contain several minor issues
• BZ - 2208238 - [OSP17.1]Inventory file not found on attempt to create backup for ovn migration/revert
• BZ - 2208529 - RHOSP 17.1 [TLS] config-download taking too long at scale
• BZ - 2208552 - test_log_lifecycle fails with ACL not found
• BZ - 2208948 - [OVN] Enable the hardware offloaded QoS implementation in TripleO
• BZ - 2209010 - Update from 17.0 to 17.1 fails with ping loss.
• BZ - 2209015 - Update from 17.0 to 17.1 fails with control plane cut.
• BZ - 2209101 - [ovn][sriov] Bandwidth limit tests fails with AttributeError: 'str' object has no attribute 'external_ids'
• BZ - 2209606 - Update RBAC tests
• BZ - 2209633 - Tripleo Standalone jobs with ceph 6.0 failing with "msg": "JSONDecodeError: Expecting value: line 1 column 1 (char 0)"} and PermissionError: [Errno 13] Permission denied: '/var/lib/kolla/config_files/src-ceph/ceph.conf'
• BZ - 2210030 - [NEUTRON][SRBAC]Custom policies don't work properly with shared security groups
• BZ - 2210062 - FrrBgpAsn and FrrOvnBgpAgentAsn defaults should be the same
• BZ - 2210225 - 17.1 Mixed rhel job fails with error 'Can't run container container-puppet-neutron'
• BZ - 2210233 - port_forwarding tests fails nc command with exit status: 1
• BZ - 2210534 - 'Revert OVN migration' procedure fails on checking server network availability
• BZ - 2210626 - tripleo_cephadm: Bootstrap play fails on "Ensure cephadm uses image tags instead of digests" task when Ceph cluster name is not default
• BZ - 2210773 - [Revert OVN migration] Can not recover a host since disk layout recreation script fails
• BZ - 2210838 - Octavia's flavor fails to be created
• BZ - 2211033 - HTTP/2 tempest test fails downstream due to a missing backport
• BZ - 2211036 - 'binding-extended' extension must be in ML2/OVN supported extensions
• BZ - 2211380 - The certificate request for etcd is rejected by FreeIPA CA in TLS-E DCN deployment which prevents deploying DCN with storage
• BZ - 2211411 - neutron crashes when ironic tries to unbind instance ports from node
• BZ - 2211677 - Fix test_get_effective_quota test for SRBAC environment
• BZ - 2211691 - [OSP17.1] Ironic fails to unprovision baremetal nodes using boot from volume due to Cinder CVE-2023-2088 fix
• BZ - 2211849 - bgp agent hangs after pyroute2 crashes
• BZ - 2211851 - [Nuetron][17.1] Using Isolated metadata+ipv6 haproxy metadata isn't working becasue haproxy container isn't created in some controlers
• BZ - 2212768 - [OSP17.1] OVN migration fails when running activate-ovn role because of a redundant newline
• BZ - 2214259 - VM with trunk port becomes inaccessible after live vm migration performed after neutron backend ovs-to-ovn migration
• BZ - 2214328 - Designate deployment fails when enabling secure RBAC
• BZ - 2215551 - Unset Ceph cluster flags following node upgrade
• BZ - 2215623 - RHOSP 17.1 [TLS] ansible-freeipa fails to add PTR record with "DNS zone not found" error
• BZ - 2215936 - [OVN migration] VM's with VF's are unable to spawn post migration
• BZ - 2216441 - [17.1] kvm/sriov: high latency after soft reboot
• BZ - 2216476 - OSP17.1 | MultiRhel FFU | Container images are not updated on control plane after MultiRhel FFU.
• BZ - 2217494 - tripleo-heat-templates doesn't install leapp-repository-openstack
• BZ - 2217960 - We have to update collectd in RHEL8 to the latest version that include all recent bug fixes. Same as on RHEL9
• BZ - 2218519 - [FFU] No PCI passthrough configration on computes after upgrade
• BZ - 2219765 - {cinder_api, glance_api, heat_api, nova_api, keystone}_cron container don't work
• BZ - 2222624 - [ovn migration] tripleo_backup_and_restore_server is ignored in the new puddle
• BZ - 2222982 - [OSP17.1][FFU] System update fails on compute node in mixed RHEL configuration.
• BZ - 2223325 - [Upgrade [OSP16.2 -> OSP17.1] ipa environment failed on updating content on compute-0 based on rhel-9
• BZ - 2223890 - Use AF_UNSPEC for name resolution

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17.1/html/release_notes