RHEA-2024:5248 - Product Enhancement Advisory

Topic

OpenShift Operators are available for the control plane of Red Hat
OpenStack Services on OpenShift 18.0.0.

Description

Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a
scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.

Red Hat OpenShift Operators automate the creation, configuration, and
management of instances of Kubernetes-native applications. The Operators in
this release automate the creation, configuration, and management of
OpenStack services in a RHOSO deployment.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, see “Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index

Affected Products

• Red Hat OpenStack Services on OpenShift Podifed Operators 1.0 x86_64

Fixes

• OSPRH-8363 - controllers miss the RBAC privilege to be able to patch the serviceaccounts
• OSPRH-8117 - Bad timing of OVNDbCluster termination during db initialization may leave an empty db file on disc and block service startup
• OSPRH-8651 - Secrets are not discovered when deploying dataplane custom services
• OSPRH-8652 - dataplane deployment fails in create tls cert when using fqdn > 64bytes
• OSPRH-8209 - mariadb/galera service logs are lost after pod are restarted twice
• OSPRH-1754 - [RFE] Data Plane Adoption: Horizon
• OSPRH-191 - Adapt Operators to the new requirements for service_users
• OSPRH-194 - As a cloud operator, i want to be able to deploy the nova metadata api at the cell level
• OSPRH-201 - As an cloud operator, i want to be able to deploy nova with podified nova-compute agents (ironic/fake)
• OSPRH-231 - as a user I want to configure memcached for nova services to improve performance
• OSPRH-2413 - Running (tempest) tests on NextGen
• OSPRH-2414 - [RFE] Podified Control Plane : Tempest (testing) operator
• OSPRH-2449 - Nova - Barbican integration
• OSPRH-2503 - Support custom API policy
• OSPRH-3101 - [Horizon] Build horizon-operator correctly for OCP with FIPS enabled
• OSPRH-3106 - [Compute] Build nova-operator correctly for OCP with FIPS enabled
• OSPRH-3110 - [Compute] Build placement-operator correctly for OCP with FIPS enabled
• OSPRH-336 - as a developer working on the nova operator i want to validate user input as early as possible.
• OSPRH-5644 - Enable extraMounts for Horizon
• OSPRH-5882 - TLS everywhere in Horizon operator
• OSPRH-6000 - [RFE] Podified Control Plane: Horizon
• OSPRH-6029 - Red Hat branding in Horizon
• OSPRH-6259 - Cleaning services fails when internal TLS is enabled
• OSPRH-6407 - Support custom config in the standard nova dataplane service
• OSPRH-6678 - Octavia Worker, Housekeeping, Healthmanager and RabbitMqTransportURL ready conditions remain in Init
• OSPRH-691 - BZ#2092485 [RFE] [P1] Podified Control Plane : Neutron
• OSPRH-6912 - Clean up scaled down services based on pod name
• OSPRH-7367 - The HSTS header is not present when accessing Horizon from outside
• OSPRH-7717 - Required alias address file /var/lib/hmports/hm_master-1 does not exist
• OSPRH-84 - As a cloud operator, I want to adopt my existing 17.1 nova deployment from TripleO management to the new installer
• OSPRH-85 - As a cloud operator, i want to be able to expose the guest vnc console securely.
• OSPRH-86 - As a cloud operator, i want the nova-operator to automate background task
• OSPRH-877 - CephFS native support for Manila
• OSPRH-6894 - NetworkAttachmentDefinitions not updated/removed properly
• OSPRH-6899 - ovn dbs scale up broken with TLS Enabled
• OSPRH-8811 - openstack-operator is in a reconcile loop after a successful data plane deployment
• OSPRH-8923 - Every openstackdataplanedeployment re-executes after ansible runner image is updated in openstack-operator csv
• OSPRH-8801 - The ExtraServiceMounts and CertMounts volume names can exceed the 63 characters RFC 1123 limit
• OSPRH-9089 - During deployment cert creation taking > 3 hrs at scale
• OSPRH-9164 - Update heat-operator to use latest lib-common
• OSPRH-341 - Deployment support for nova VM lifecycle operations
• OSPRH-7546 - Non-fatal error when generated key is not encrypted

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index