Recommended update for crowbar packages

SUSE Recommended Update: Recommended update for crowbar packages
Announcement ID: SUSE-RU-2019:0406-1
Rating: moderate
References: #1085170 #1101154 #1103882 #1104198 #1108336 #1108398 #1114851 #1116686 #1116853
Affected Products:
  • SUSE OpenStack Cloud Crowbar 8

An update that has 9 recommended fixes can now be installed.

Description:

This update for crowbar packages fixes the following issues:
crowbar:

  • Set admin server's platform to suse-12.4 during upgrade to Cloud8
  • Add support for 40GbE and 56GbE network interface (bsc#1108336)

crowbar-core:
  • upgrade: Only SIGHUP the main nova processes
  • upgrade: Error out when "delete-services" helper scripts fail
  • upgrade: Fix syntax error (missing "done") in script
  • upgrade: Run nova online migrations after the full upgrade
  • upgrade: Signal the change to nova services when the upgrade is done
  • upgrade: Delete nova services that are registered to unknown nodes
  • upgrade: Refactor excluding upgraded nodes
  • upgrade: Fail if no nodes can be upgraded
  • upgrade: Skip already upgraded nodes
  • travis fix for bundler problems
  • upgrade: Mention the name of failed node in the error message
  • upgrade: Reset the current nodes list before new set of nodes
  • upgrade: restrict the special keystone treatment
  • upgrade: Do not mark nodes as upgraded before the last action
  • upgrade: delete "clone_stateless_services_orig" a bit later
  • upgrade: Handle keystone separately during first node upgrade
  • upgrade: Keep keystone vhost running on non-upgrade nodes
  • upgrade: Keep galera and haproxy running during the upgrade
  • apache: keep vhost config when disabling apache site
  • upgrade: Increase delayed_job time limit
  • upgrade: Mark correctly the set of nodes that was selected for upgrade
  • Revert "upgrade: Deleting cinder services from database no longer needed"
  • upgrade: Improve handling of zypper prompts (bsc#1116853)
  • allow skip_unready_nodes for network barclamp
  • conduits: match base_board.serial_number as well
  • provisioner: validate format of additional ssh keys section
  • upgrade: Extend the paralel actions to reboot and crowbar_join
  • upgrade: In case of retry after failure, skip live migrations
  • upgrade: Make sure live-migration script is killed if we hit the timeout
  • upgrade: Introduce parallelism into the upgrade of compute nodes
  • upgrade: Fix condition for setting clone_stateless value
  • upgrade: Allow upgrade with monasca agents on compute nodes
  • crowbar: Do not rewrite the value of 'insecure' if it already exist
  • upgrade: If pacemaker is used to manage the services, don't use systemctl
  • upgrade: Add an initial check if there's anything running on a host
  • ohai: fix path to check for aacraid driver (bsc#1085170 bsc#1103882)
  • crowbar: move disallow chef restarts out of experimental
  • Removed experimental.yml because won't be necessary
  • crowbar: move skip unchanged batches out of experimental
  • upgrade: Do not start chef-client service from recipe
  • crowbar: move skip unready nodes out of experimental
  • Add crowbar.yml file as %config(noreplace)
  • repos: Fix product name to be SUSE OpenStack Cloud Crowbar for SMT

crowbar-ha:
  • Update travis config to solve bundler dependency
  • Fix quorum policy doc link (bsc#1104198)
  • pacemaker: Wait more for cluster to be online

crowbar-openstack:
  • mariadb: Set wsrep_sst_method to mariabackup (bsc#1116686)
  • upgrade: Do not run nova online-db-migrations from chef
  • database: Prevent deploying mysql-server role to monasca node
  • Update travis config to solve bundler dependency
  • nova-compute: stop installing qemu-kvm
  • upgrade: limit resetting db_synced for keystone
  • keystone: Allow to disable keystone vhost
  • upgrade: avoid keystone db_sync during crowbar_join after upgrade
  • nova: limit compute RPC version automatically for mixed environments
  • nova: Use internal glance and neutron endpoints
  • horizon: Fix SSL CA configuration for apache 2.4
  • cinder: Only set up SSL on API nodes
  • nova/neutron: Restart immediately on keystone changes
  • keystone: Fix update endpoint for ha (bsc#1114851)
  • keystone: Refactor keystone_register retry loop
  • keystone: Fix path in endpoint update loop
  • keystone: Fix CA cert Apache config
  • nova: use upstream-recommended start order for services
  • horizon: load monasca from databag
  • galera: Install system tables only on the founder node
  • galera: Use monitoring user for observing wsrep state
  • ssl: Fix ACL setup in ssl_setup provider
  • Set a proper ACL for shared certificates (bsc#1101154)
  • ironic: Use ironic network for provisioning (bsc#1108398)
  • neutron: disable metering agent if no ceilometer
  • neutron: Fix "enable_metadata_proxy" setting for DVR setups
  • rabbitmq: Add list of tags comma separated for extra users
  • neutron: disable metadata proxy when metadata is forced
  • Gemfile: Drop crowbar-validate-databags gem version
  • travis: tests databags
  • Fix migrations
  • rabbitmq: change ha-sync-mode to automatic
  • rabbitmq: disable mirroring for several queues
  • rabbitmq: allow disabling queue mirroring
  • rabbitmq: block client port on startup
  • rabbitmq: Remove address from node attributes
  • rabbitmq: Remove management_address from node attributes
  • rabbitmq: Remove addresses from node attributes
  • rabbitmq: Remove redundant code
  • keystone: Move redundant code to custom resource
  • keystone: Reorganize HA/fernet code
  • nova: Increase HA resources timeout again
  • neutron: Increase agents_ha_resources timeout again
  • rabbitmq: configure notification settings also in clustered mode
  • ceilometer: add validation that notifications are enabled client side
  • nova: Only emit unversioned notfications
  • postgresql: Add timestamp prefix to logs

crowbar-ui:
  • upgrade: Fix "Next" button behavior
  • upgrade: Add admin repochecks error title
  • upgrade: Add wrong_sql_engine error title

Patch Instructions:

To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE OpenStack Cloud Crowbar 8:
    zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2019-406=1

Package List:

  • SUSE OpenStack Cloud Crowbar 8 (noarch):
    • crowbar-5.0+git.1548257663.294324f9-3.6.1
    • crowbar-devel-5.0+git.1548257663.294324f9-3.6.1
    • crowbar-ha-5.0+git.1546543068.c40ae43-3.11.1
    • crowbar-openstack-5.0+git.1546859398.741661c54-4.16.1
    • crowbar-ui-1.2.0+git.1547500033.d0fb2bf2-3.6.1
  • SUSE OpenStack Cloud Crowbar 8 (x86_64):
    • crowbar-core-5.0+git.1548227589.9502869de-3.14.1
    • crowbar-core-branding-upstream-5.0+git.1548227589.9502869de-3.14.1

References: