- Issued:
- 2017-11-15
- Updated:
- 2017-11-15
RHBA-2017:3231 - Bug Fix Advisory
Synopsis
Red Hat OpenStack Platform 10 director Bug Fix Advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
Changes to the openstack-tripleo-heat-templates component:
- The default value of `pg_num` and `pgp_num` has been set to 128 instead of 32.
Consequently, the existing Ceph pools will be updated so that their `pg_num` and `pgp_num` changes to 128 and the data will be rebalanced on the OSDs. Customized values previously set in custom Heat environment files will be preserved. To keep `pg_num` and `pgp_num` set to their previous default values, add an extra environment file to the update or upgrade command. The command should have the following contents:
parameter_defaults:
ExtraConfig:
ceph::profile::params::osd_pool_default_pg_num: 32
ceph::profile::params::osd_pool_default_pgp_num: 32
Changes to the puppet-ironic component:
- Originally, the DHCP server configuration file for Ironic Inspector was not set up properly to handle hosts that were using UEFI and iPXE. Consequently, any such host might fail to boot during Ironic Introspection. The problem has been fixed and the `/etc/ironic-inspector/dnsmasq.conf` has been updated to handle this situation. As a result, hosts using UEFI and iPXE can properly boot during Ironic Introspection.
Changes to the python-os-brick component:
- The Python's `os.path.realpath` method is not robust enough and a race condition within the method itself raises an unexpected exception. Consequently, the iSCSI `disconnect` method can unexpectedly fail.
This race condition exception can safely be ignored, since the disconnect operation succeeds, although the race condition occurs.
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.
The Red Hat OpenStack Platform 10 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 10, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 10 x86_64
Fixes
- BZ - 1440782 - [Director] pxe_ucs Ironic drivers not working OSP10
- BZ - 1465776 - OSP8 -> OSP9 -> OSP10 upgrade: major-upgrade-pacemaker-converge.yaml fails restarting openstack-cinder-scheduler: ServiceTooOld: One of the services is in Liberty version. We do not provide backward compatibility with Liberty now, you need to upgrade
- BZ - 1466468 - If setting ControllerCount: 3 , then dhcp_agents_per_network=1 in neutron.conf
- BZ - 1479386 - Ironic introspection loops over ipxe.efi for UEFI boot_mode
- BZ - 1481821 - Ceph pg_num and pgp_num default is too low for any user
- BZ - 1483160 - On Giveback after A Share Service is Brought Back after Being Shut Down Manila's Access to Shares is Lost
- BZ - 1483656 - MariaDB adjustment parameter missing
- BZ - 1487585 - Incorrectly logging as error message on HBA channel search
- BZ - 1501583 - [RFE] Add support for Nuage as mechanism driver to puppet-nova in OSPD 10
- BZ - 1503782 - Rebase puppet-glance to f302d21
- BZ - 1503790 - Rebase puppet-nova to c39bd9c
- BZ - 1503791 - Rebase puppet-swift to 6640132
- BZ - 1503846 - Rebase instack-undercloud to 5.3.2
- BZ - 1503847 - Rebase openstack-tripleo-puppet-elements to 5.3.2
- BZ - 1503848 - Rebase openstack-tripleo-common to fb9fa98
- BZ - 1505555 - Rebase puppet-ironic to ec33c9a
- BZ - 1505572 - Rebase puppet-manila to 1640bbc
- BZ - 1505978 - Rebase openstack-tripleo-image-elements to 5.3.1
- BZ - 1505983 - Rebase puppet-cinder to 7cd69f4
- BZ - 1505984 - Rebase puppet-aodh to 9.6.0
- BZ - 1505990 - Rebase puppet-tripleo to 40f00a10
- BZ - 1506317 - Rebase puppet-horizon to 6bb18e3
- BZ - 1507118 - Rebase openstack-tripleo-heat-templates to f2f3bce
- BZ - 1507863 - OSP9 -> OSP10: undercloud upgrade fails: mError: /Stage[main]/Ironic::Db::Sync/Exec[ironic-dbsync]/returns: change from notrun to 0 failed: ironic-dbsync --config-file /etc/ironic/ironic.conf returned 1 instead of one of [0]
- BZ - 1510056 - [UPDATES] OC update failed: Error EINVAL: specified pgp_num 128 > pg_num 32
CVEs
(none)
References
(none)
Red Hat OpenStack 10
SRPM | |
---|---|
instack-undercloud-5.3.2-2.el7ost.src.rpm | SHA-256: c6bd38140ad692a193738e728f2934f4e62ef5a3828824a565460d5c0f281c30 |
openstack-tripleo-common-5.4.4-1.el7ost.src.rpm | SHA-256: 18ad808e9dc055ccf451ad49141415a8b48fdeda90d0c6d1014fb1dbf3659055 |
openstack-tripleo-heat-templates-5.3.3-1.el7ost.src.rpm | SHA-256: 68af0ecd6511c111a010c8f3c059580bc94eb09719287ac764a20c84258dad32 |
openstack-tripleo-image-elements-5.3.1-1.el7ost.src.rpm | SHA-256: c971d11cd93185e36c8463131bf45abefad980004f4d6b1209934ece89735a45 |
openstack-tripleo-puppet-elements-5.3.2-1.el7ost.src.rpm | SHA-256: 7f9f181795018e35c38992f327486bb15106b35a13f5b84ebecf57adde90322e |
puppet-aodh-9.6.0-1.el7ost.src.rpm | SHA-256: 3db16e34b52970b895abe86ce01eedfeb2e9f046d7ac002f5509ec4e124b30c2 |
puppet-ceph-2.4.1-2.el7ost.src.rpm | SHA-256: a864411d3e8d0221ee2c19921da522296642cf2d06a83f32ea393a019382825b |
puppet-cinder-9.5.0-3.el7ost.src.rpm | SHA-256: 770da533ef012935ce49f1f6b1aa7c795bd105dc93e1f3617415370f85205f22 |
puppet-glance-9.6.0-2.el7ost.src.rpm | SHA-256: 57e9d67ed45f68cd8a82f87542c67f34b15c908dfd7decfac5a3fed84de0a5ab |
puppet-horizon-9.6.0-1.el7ost.src.rpm | SHA-256: c9408ccb524d8a62f0b3324cf861d745d62eb01319706d656ddd83309476f106 |
puppet-ironic-9.5.0-2.el7ost.src.rpm | SHA-256: 374b063c36f31c758ce22689cf03a52e0ae797429a74e21439ec1d61924d7249 |
puppet-manila-9.5.0-2.el7ost.src.rpm | SHA-256: 6ade490e5b96bbab9e5c4f6cc08ef2ad6cc68025e29c94039e57ac22636a173c |
puppet-nova-9.6.0-2.el7ost.src.rpm | SHA-256: 977193a4b487848353b845bc7295eb6650299e36cf8c531f812222fc771d1294 |
puppet-swift-9.6.0-2.el7ost.src.rpm | SHA-256: 5d9e8beda1ac9a8400144c97fde8fc214be3ee5f3a1f1d20d27857bec3ae7ab8 |
puppet-tripleo-5.6.4-2.el7ost.src.rpm | SHA-256: 740addf7bfb3c148ae83380c255daf0991d1332b3d9c6a178c5b197333b26844 |
python-os-brick-1.6.1-8.el7ost.src.rpm | SHA-256: fb9cbf1fb5ff3405d13bb864baff0bd226aac393a58b1762d2aef2cd247929ef |
x86_64 | |
instack-undercloud-5.3.2-2.el7ost.noarch.rpm | SHA-256: 1b45728d4ea82ecd629e3813a4861531ca105e21c72e6debaa71f4ed8ed717a6 |
openstack-tripleo-common-5.4.4-1.el7ost.noarch.rpm | SHA-256: 30be961000fea553434007d9d27b0dec274c10522f5975033d4b403a74efb7be |
openstack-tripleo-heat-templates-5.3.3-1.el7ost.noarch.rpm | SHA-256: c7079deb8c21701f2a2cfb4d4456906d845ff5a49a32a65640befaae7de26c62 |
openstack-tripleo-image-elements-5.3.1-1.el7ost.noarch.rpm | SHA-256: febe4c078a6e30e1d9ede2bf79e88f429f621d1d9049f9aecc5d959bcd1df4b2 |
openstack-tripleo-puppet-elements-5.3.2-1.el7ost.noarch.rpm | SHA-256: 8231c8ac6f109a05346eaa7d19083a8a181e98db0b0730179c3048c4188e8c00 |
puppet-aodh-9.6.0-1.el7ost.noarch.rpm | SHA-256: ba0dcfb868cb7a284412e654752087cf3841b83e31266e7a94af28bd0b4fd1a4 |
puppet-ceph-2.4.1-2.el7ost.noarch.rpm | SHA-256: 7a7516dce03fb4a29ad6ed3f410e2fc17250505b77dbe316212950126e1cffaa |
puppet-cinder-9.5.0-3.el7ost.noarch.rpm | SHA-256: b3116326ccb28b26e95ab8ded4b7a2d8914bb57d87b850cfe69db1896eaba44e |
puppet-glance-9.6.0-2.el7ost.noarch.rpm | SHA-256: 281f28821e9ff209eca28e54767e6137a60945cb7f795653d74e36e4657c6bb1 |
puppet-horizon-9.6.0-1.el7ost.noarch.rpm | SHA-256: 8a7ddf3312670def1407651696a975422dcb135560feae4d2992afdbc490df49 |
puppet-ironic-9.5.0-2.el7ost.noarch.rpm | SHA-256: fd081edb5b21498a8eb8d47813c566518a1d97ac18b523d8d53cb787dc370c29 |
puppet-manila-9.5.0-2.el7ost.noarch.rpm | SHA-256: 7b5213203a2489a4e92288e690271bc4aeec10efac3224d5bdbdfdfc33b9856e |
puppet-nova-9.6.0-2.el7ost.noarch.rpm | SHA-256: 4db90de8c343fa18613f9ff2257596a31c45c02c2d974e1f67bc09a363f867b9 |
puppet-swift-9.6.0-2.el7ost.noarch.rpm | SHA-256: 27578c0302d76e265d3ac8a2ad0e6f6dc4951ea199a178fe573e34cb0a708882 |
puppet-tripleo-5.6.4-2.el7ost.noarch.rpm | SHA-256: 6a7674e7c332d24cbd76ce576cde752ee4492b2cdc6eb3a5133d0c4c84469c88 |
python-os-brick-1.6.1-8.el7ost.noarch.rpm | SHA-256: 8a0d75bc49b80ca65708f39039f9dd1852a12ff144afeeae4856392fbbee1fb0 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.