From 7fc111c0061a2fb74ad408b8b3e7abaace7b231e Mon Sep 17 00:00:00 2001 From: Vitaly Sedelnik Date: Wed, 22 Jul 2015 21:41:41 +0300 Subject: [PATCH] [RN6.1-MU1] Docs update for MOS 6.1 MU1 Release notes and patching scenarios for issues addressed in MOS 6.1 MU1 Change-Id: If939a1a9eecefc563daf508021e731066818b30a --- contents.rst | 1 + contents/contents-maintenance-updates.rst | 1 + maintenance-updates.rst | 11 + pages/maintenance-updates/v61.rst | 67 ++++++ .../v61/1462991-libvirt-hard.rst | 42 ++++ .../v61/1463802-rpc-clients.rst | 72 +++++++ .../v61/1466490-neutron-l2.rst | 198 ++++++++++++++++++ .../v61/1466552-centos-radosgw.rst | 30 +++ .../v61/1469149-backend-argument.rst | 46 ++++ pages/release-notes/v6-1-juno-full.rst | 1 + .../v6-1/0061-maintenance-updates.rst | 54 +++++ pdf/conf.py | 1 + pdf/pdf_mu.rst | 31 +++ 13 files changed, 555 insertions(+) create mode 100644 contents/contents-maintenance-updates.rst create mode 100644 maintenance-updates.rst create mode 100644 pages/maintenance-updates/v61.rst create mode 100644 pages/maintenance-updates/v61/1462991-libvirt-hard.rst create mode 100644 pages/maintenance-updates/v61/1463802-rpc-clients.rst create mode 100644 pages/maintenance-updates/v61/1466490-neutron-l2.rst create mode 100644 pages/maintenance-updates/v61/1466552-centos-radosgw.rst create mode 100644 pages/maintenance-updates/v61/1469149-backend-argument.rst create mode 100644 pages/release-notes/v6-1/0061-maintenance-updates.rst create mode 100644 pdf/pdf_mu.rst diff --git a/contents.rst b/contents.rst index db32e4865..43e639192 100644 --- a/contents.rst +++ b/contents.rst @@ -18,6 +18,7 @@ Documentation plugin-dev file-ref release-notes + maintenance-updates style-guide eula third-party-licenses diff --git a/contents/contents-maintenance-updates.rst b/contents/contents-maintenance-updates.rst new file mode 100644 index 000000000..d6f6a2a70 --- /dev/null +++ b/contents/contents-maintenance-updates.rst @@ -0,0 +1 @@ +.. include:: /pages/maintenance-updates/v61.rst diff --git a/maintenance-updates.rst b/maintenance-updates.rst new file mode 100644 index 000000000..75340ae88 --- /dev/null +++ b/maintenance-updates.rst @@ -0,0 +1,11 @@ +.. index:: Maintenance Updates + +.. _maintenance-updates: + +=================== +Maintenance Updates +=================== +.. contents:: :local: + :depth: 3 + +.. include:: /contents/contents-maintenance-updates.rst diff --git a/pages/maintenance-updates/v61.rst b/pages/maintenance-updates/v61.rst new file mode 100644 index 000000000..b0d5b13ff --- /dev/null +++ b/pages/maintenance-updates/v61.rst @@ -0,0 +1,67 @@ + +.. _MaintUpdates-6-1: + +Maintenance Updates for Mirantis OpenStack 6.1 +############################################## + +This section contains a list of available maintenance updates for +Mirantis OpenStack 6.1. +For detailed information on a specific update, please refer to the +information below. For general considerations on applying +updates, see :ref:`patching-ops`. + +.. warning:: The instructions below are part of Mirantis OpenStack + Maintenance Updates. Applying Mirantis OpenStack Maintenance + Updates may cause a downtime of entire OpenStack cluster or + specific OpenStack services. + Please schedule maintenance window and notify cloud users in + advance. + +.. note:: Applying Mirantis OpenStack Maintenance Updates may + override manually applied custom patches. + + It’s recommended to back up your deployment and test updates on + your staging environment before applying updates to production. + Please consult Mirantis Support if you have any questions or + concerns. + + +Security updates +**************** + +There are no urgent security updates available at the moment. + + +Published updates +***************** + +The following updates for Mirantis OpenStack are available. These +updates passed thorough testing and are recommended to be applied to +the Mirantis OpenStack 6.1 deployments. + +----- + +.. include:: /pages/maintenance-updates/v61/1463802-rpc-clients.rst + +----- + +.. include:: /pages/maintenance-updates/v61/1466490-neutron-l2.rst + +----- + +.. include:: /pages/maintenance-updates/v61/1462991-libvirt-hard.rst + +----- + +.. include:: /pages/maintenance-updates/v61/1466552-centos-radosgw.rst + +----- + +.. include:: /pages/maintenance-updates/v61/1469149-backend-argument.rst + +----- + +Proposed updates +**************** + +There are no proposed updates available at the moment. diff --git a/pages/maintenance-updates/v61/1462991-libvirt-hard.rst b/pages/maintenance-updates/v61/1462991-libvirt-hard.rst new file mode 100644 index 000000000..b77913ddd --- /dev/null +++ b/pages/maintenance-updates/v61/1462991-libvirt-hard.rst @@ -0,0 +1,42 @@ +.. _mos61mu-1462991: + +[libvirt] Handle empty context on _hard_reboot +============================================== + +If an instance is created from a multi-part image (separate kernel +and ramdisk files), and ``resume_guests_state_on_host_boot=True``, +the ``resulting _hard_reboot`` fails and puts the instance into the +error state. The fix ensures that the attempts to get access to the +images are possible when the authorization token is not available in +context. See `LP1462991 `_. + +Affected packages +----------------- + +* **Centos\@6.1:** openstack-nova-compute=2014.2.2-fuel6.1.mira27 +* **Ubuntu\@6.1:** nova-compute-libvirt=2014.2.2-1~u14.04+mos30 + +Fixed packages +-------------- + +* **Centos\@6.1:** openstack-nova-compute=2014.2.2-fuel6.1.mira28 +* **Ubuntu\@6.1:** nova-compute-libvirt=2014.2.2-1~u14.04+mos31 + +Patching scenario - CentOS +-------------------------- + +Run the following commands on OpenStack compute nodes:: + + yum clean expire-cache + yum -y update openstack-nova-compute* + service openstack-nova-compute restart + +Patching scenario - Ubuntu +-------------------------- + +Run the following commands on OpenStack compute nodes:: + + apt-get update + apt-get install --only-upgrade -y nova-compute* + initctl restart nova-compute + diff --git a/pages/maintenance-updates/v61/1463802-rpc-clients.rst b/pages/maintenance-updates/v61/1463802-rpc-clients.rst new file mode 100644 index 000000000..fcc5bb1c7 --- /dev/null +++ b/pages/maintenance-updates/v61/1463802-rpc-clients.rst @@ -0,0 +1,72 @@ +.. _mos61mu-1463802: + +RPC clients cannot find a reply queue after the last RabbitMQ server +==================================================================== +restarts in the cluster +======================= + +When RabbitMQ restarts and the queues dissapear, ``oslo.messaging`` +may get stuck during the reconnection process. As a result, some of +the OpenStack services may become unusable when the failover procedure +finishes. See `LP1463802 `_. + +Affected packages +----------------- +* **Centos\@6.1:** python-oslo-messaging=1.4.1-fuel6.1.mira31 +* **Ubuntu\@6.1:** python-oslo.messaging=1.4.1-1~u14.04+mos11 + +Fixed packages +-------------- +* **Centos\@6.1:** python-oslo-messaging=1.4.1-fuel6.1.mira33 +* **Ubuntu\@6.1:** python-oslo.messaging=1.4.1-1~u14.04+mos13 + +Patching scenario - CentOS +-------------------------- + +#. Run the following commands on OpenStack compute nodes, OpenStack + controller nodes, OpenStack Cinder nodes:: + + yum clean expire-cache + yum -y update python-oslo-messaging* + +#. Run the following commands on OpenStack controller nodes:: + + pcs resource disable p_heat-engine + pcs resource disable p_neutron-l3-agent + pcs resource disable p_neutron-metadata-agent + pcs resource disable p_neutron-dhcp-agent + pcs resource disable p_neutron-plugin-openvswitch-agent + pcs resource enable p_neutron-plugin-openvswitch-agent + pcs resource enable p_neutron-dhcp-agent + pcs resource enable p_neutron-metadata-agent + pcs resource enable p_neutron-l3-agent + pcs resource enable p_heat-engine + +#. Restart all non-HA OpenStack services on compute and controller + nodes. + +Patching scenario - Ubuntu +-------------------------- + +#. Run the following commands on OpenStack compute nodes, OpenStack + controller nodes, OpenStack Cinder nodes:: + + apt-get update + apt-get install --only-upgrade -y python-oslo.messaging* + +#. Run the following commands on OpenStack controller nodes:: + + pcs resource disable p_heat-engine + pcs resource disable p_neutron-l3-agent + pcs resource disable p_neutron-metadata-agent + pcs resource disable p_neutron-dhcp-agent + pcs resource disable p_neutron-plugin-openvswitch-agent + pcs resource enable p_neutron-plugin-openvswitch-agent + pcs resource enable p_neutron-dhcp-agent + pcs resource enable p_neutron-metadata-agent + pcs resource enable p_neutron-l3-agent + pcs resource enable p_heat-engine + +#. Restart all non-HA OpenStack services on compute and controller + nodes. + diff --git a/pages/maintenance-updates/v61/1466490-neutron-l2.rst b/pages/maintenance-updates/v61/1466490-neutron-l2.rst new file mode 100644 index 000000000..2bec85468 --- /dev/null +++ b/pages/maintenance-updates/v61/1466490-neutron-l2.rst @@ -0,0 +1,198 @@ +.. _mos61mu-1466490: + +Neutron L2 agent performs a DoS because of incorrectly allowed +============================================================== +address pairs +============= + +By adding an address pair which is rejected as invalid by the ipset +tool, an authenticated user may break the Neutron L2 agent resulting +in a denial of service attack. Neutron setups that use the IPTables +firewall driver are affected. See `LP1466490 `_, `CVE2015-3221 `_. + +Affected packages +----------------- +* **Centos/@6.1:** openstack-neutron=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-bigswitch=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-brocade=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-cisco=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-hyperv=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-ibm=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-linuxbridge=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-mellanox=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-metaplugin=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-metering-agent=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-midonet=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-ml2=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-nec=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-nuage=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-ofagent=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-oneconvergence-nvsd=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-opencontrail=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-openvswitch=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-plumgrid=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-ryu=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-vmware=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** openstack-neutron-vpn-agent=2014.2.2-fuel6.1.mira32 +* **Centos/@6.1:** python-neutron=2014.2.2-fuel6.1.mira32 +* **Ubuntu/@6.1:** neutron-common=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-dhcp-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-l3-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-lbaas-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-metadata-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-metering-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-bigswitch-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-bigswitch=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-brocade=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-cisco=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-hyperv=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-ibm-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-ibm=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-linuxbridge-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-linuxbridge=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-metaplugin=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-metering-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-midonet=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-ml2=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-mlnx-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-mlnx=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-nec-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-nec=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-nicira=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-oneconvergence-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-oneconvergence=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-openflow-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-openvswitch-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-openvswitch=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-plumgrid=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-ryu-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-ryu=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-vmware=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-plugin-vpn-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-server=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** neutron-vpn-agent=2014.2.2-1~u14.04+mos31 +* **Ubuntu/@6.1:** python-neutron=2014.2.2-1~u14.04+mos31 + +Fixed packages +-------------- +* **Centos/@6.1:** openstack-neutron=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-bigswitch=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-brocade=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-cisco=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-hyperv=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-ibm=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-linuxbridge=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-mellanox=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-metaplugin=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-metering-agent=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-midonet=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-ml2=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-nec=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-nuage=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-ofagent=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-oneconvergence-nvsd=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-opencontrail=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-openvswitch=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-plumgrid=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-ryu=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-vmware=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** openstack-neutron-vpn-agent=2014.2.2-fuel6.1.mira34 +* **Centos/@6.1:** python-neutron=2014.2.2-fuel6.1.mira34 +* **Ubuntu/@6.1:** neutron-common=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-dhcp-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-l3-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-lbaas-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-metadata-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-metering-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-bigswitch-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-bigswitch=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-brocade=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-cisco=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-hyperv=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-ibm-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-ibm=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-linuxbridge-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-linuxbridge=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-metaplugin=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-metering-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-midonet=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-ml2=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-mlnx-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-mlnx=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-nec-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-nec=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-nicira=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-oneconvergence-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-oneconvergence=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-openflow-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-openvswitch-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-openvswitch=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-plumgrid=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-ryu-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-ryu=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-vmware=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-plugin-vpn-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-server=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** neutron-vpn-agent=2014.2.2-1~u14.04+mos32 +* **Ubuntu/@6.1:** python-neutron=2014.2.2-1~u14.04+mos32 + +Patching scenario - CentOS +-------------------------- + +#. Run the following commands on OpenStack compute nodes, OpenStack + controller nodes:: + + yum clean expire-cache + yum -y update openstack-neutron* + yum -y update python-neutron* + +#. Run the following commands on OpenStack controller nodes:: + + pcs resource disable p_neutron-l3-agent + pcs resource disable p_neutron-metadata-agent + pcs resource disable p_neutron-dhcp-agent + pcs resource disable p_neutron-plugin-openvswitch-agent + service neutron-server stop + +#. Run the following command on OpenStack compute nodes:: + + service neutron-openvswitch-agent restart + +#. Run the following command on OpenStack controller nodes:: + + service neutron-server start + pcs resource enable p_neutron-plugin-openvswitch-agent + pcs resource enable p_neutron-dhcp-agent + pcs resource enable p_neutron-metadata-agent + pcs resource enable p_neutron-l3-agent + +Patching scenario - Ubuntu +-------------------------- + +#. Run the following commands on OpenStack compute nodes, OpenStack + controller nodes:: + + apt-get update + apt-get install --only-upgrade -y neutron-* + apt-get install --only-upgrade -y python-neutron* + +#. Run the following commands on OpenStack controller nodes:: + + pcs resource disable p_neutron-l3-agent + pcs resource disable p_neutron-metadata-agent + pcs resource disable p_neutron-dhcp-agent + pcs resource disable p_neutron-plugin-openvswitch-agent + initctl stop neutron-server + +#. Run the following command on OpenStack compute nodes:: + + initctl restart neutron-plugin-openvswitch-agent + +#. Run the following command on OpenStack controller nodes:: + + initctl start neutron-server + pcs resource enable p_neutron-plugin-openvswitch-agent + pcs resource enable p_neutron-dhcp-agent + pcs resource enable p_neutron-metadata-agent + pcs resource enable p_neutron-l3-agent + diff --git a/pages/maintenance-updates/v61/1466552-centos-radosgw.rst b/pages/maintenance-updates/v61/1466552-centos-radosgw.rst new file mode 100644 index 000000000..cbe9ca3e8 --- /dev/null +++ b/pages/maintenance-updates/v61/1466552-centos-radosgw.rst @@ -0,0 +1,30 @@ +.. _mos61mu-1466552: + +CentOS radosgw doesn't start after reboot +========================================= + +CentOS ``radosgw`` fails to start after reboot. The patch ensures +that the ``radosgw`` service is enabled on boot. See `LP1466552 `_. + +Affected packages +----------------- +* **Centos/@6.1:** fuel-library6.1=6.1.0-6750.1.git2e7a08a + +Fixed packages +-------------- +* **Centos/@6.1:** fuel-library6.1=6.1.0-6755.1 + +Patching scenario - CentOS +-------------------------- + +#. Run the following commands on Fuel master node:: + + yum clean expire-cache + yum -y update fuel-* + fuel rel --sync-deployment-tasks --dir /etc/puppet + +#. Run the following commands on OpenStack controller nodes:: + + chkconfig ceph-radosgw on + /etc/init.d/ceph-radosgw start + diff --git a/pages/maintenance-updates/v61/1469149-backend-argument.rst b/pages/maintenance-updates/v61/1469149-backend-argument.rst new file mode 100644 index 000000000..483e920d5 --- /dev/null +++ b/pages/maintenance-updates/v61/1469149-backend-argument.rst @@ -0,0 +1,46 @@ +.. _mos61mu-1469149: + +backend_argument containing a password leaked in logs +===================================================== + +The ``keystone.conf`` file has an option ``backend_argument`` to set +various options for the caching backend. +As documented, some of the values in this option can contain a +password. Therefore, the option is marked as confidential to avoid +leakage into the logs. See `LP1469149 `_, +`CVE2015-3646 `_. + +Affected packages +----------------- +* **Centos/@6.1:** openstack-keystone=2014.2.2-fuel6.1.mira17 +* **Centos/@6.1:** python-keystone=2014.2.2-fuel6.1.mira17 +* **Ubuntu/@6.1:** keystone=2014.2.2-1~u14.04+mos17 +* **Ubuntu/@6.1:** python-keystone=2014.2.2-1~u14.04+mos17 + +Fixed packages +-------------- +* **Centos/@6.1:** openstack-keystone=2014.2.2-fuel6.1.mira18 +* **Centos/@6.1:** python-keystone=2014.2.2-fuel6.1.mira18 +* **Ubuntu/@6.1:** keystone=2014.2.2-1~u14.04+mos18 +* **Ubuntu/@6.1:** python-keystone=2014.2.2-1~u14.04+mos18 + +Patching scenario - CentOS +-------------------------- + +Run the following commands on OpenStack controller nodes:: + + yum clean expire-cache + yum -y update python-keystone* + yum -y update openstack-keystone* + service openstack-keystone restart + +Patching scenario - Ubuntu +-------------------------- + +Run the following commands on OpenStack controller nodes:: + + apt-get update + apt-get install --only-upgrade -y python-keystone* + apt-get install --only-upgrade -y keystone* + initctl restart openstack-keystone + diff --git a/pages/release-notes/v6-1-juno-full.rst b/pages/release-notes/v6-1-juno-full.rst index 48e3195ac..b817bafa3 100644 --- a/pages/release-notes/v6-1-juno-full.rst +++ b/pages/release-notes/v6-1-juno-full.rst @@ -35,5 +35,6 @@ The following table lists the released revisions of this documentation: .. include:: /pages/release-notes/v6-1/9010-vmware-tech.rst .. include:: /pages/release-notes/v6-1/6000-other.rst .. include:: /pages/release-notes/v6-1/0060-obtain-the-product.rst +.. include:: /pages/release-notes/v6-1/0061-maintenance-updates.rst .. include:: /pages/release-notes/v6-1/0070-support.rst diff --git a/pages/release-notes/v6-1/0061-maintenance-updates.rst b/pages/release-notes/v6-1/0061-maintenance-updates.rst new file mode 100644 index 000000000..d8dcc5ede --- /dev/null +++ b/pages/release-notes/v6-1/0061-maintenance-updates.rst @@ -0,0 +1,54 @@ +Maintenance Updates +=================== + +This section contains a list of available maintenance updates for +Mirantis OpenStack 6.1. +For detailed information on a specific update, please refer to the +information below. For general considerations on applying +updates, see :ref:`patching-ops`. + +.. warning:: The instructions below are part of Mirantis OpenStack + Maintenance Updates. Applying Mirantis OpenStack Maintenance + Updates may cause a downtime of entire OpenStack cluster or + specific OpenStack services. + Please schedule maintenance window and notify cloud users in + advance. + +.. note:: Applying Mirantis OpenStack Maintenance Updates may + override manually applied custom patches. + + It’s recommended to back up your deployment and test updates on + your staging environment before applying updates to production. + Please consult Mirantis Support if you have any questions or + concerns. + +Security updates +---------------- + +There are no urgent security updates available at the moment. + + +Published updates +----------------- + +* :ref:`#1463802 ` RPC clients cannot find a reply + queue after the last RabbitMQ server restarts in the cluster + +* :ref:`#1466490 ` Neutron L2 agent performs a DoS + because of incorrectly allowed address pairs + +* :ref:`#1462991 ` [libvirt] Handle empty context + on _hard_reboot + +* :ref:`#1466552 ` CentOS radosgw doesn't start + after reboot + +* :ref:`#1469149 ` backend_argument containing a + password leaked in logs + + +Proposed updates +---------------- + +There are no proposed updates available at the moment. + diff --git a/pdf/conf.py b/pdf/conf.py index a079d8259..123c060b0 100644 --- a/pdf/conf.py +++ b/pdf/conf.py @@ -27,5 +27,6 @@ pdf_documents = [ ('pdf/pdf_plugin-dev', u'Mirantis-OpenStack-6.1-FuelPluginGuide', u'Fuel Plugin Guide', u'2015, Mirantis Inc.'), ('pdf/pdf_terminology', u'Mirantis-OpenStack-6.1-Terminology-Reference', u'Terminology Reference', u'2015, Mirantis Inc.'), ('pdf/pdf_file-ref', u'Mirantis-OpenStack-6.1-File-Format-Reference', u'File Format Reference', u'2015, Mirantis Inc.'), + ('pdf/pdf_mu', u'Mirantis-OpenStack-6.1-Maintenance-Updates', u'Maintenance Updates', u'2015, Mirantis Inc.'), ('pdf/pdf_relnotes', u'Mirantis-OpenStack-6.1-RelNotes', u'Release Notes', u'2015, Mirantis Inc.', {'pdf_use_toc': False}), ] diff --git a/pdf/pdf_mu.rst b/pdf/pdf_mu.rst new file mode 100644 index 000000000..a0766b360 --- /dev/null +++ b/pdf/pdf_mu.rst @@ -0,0 +1,31 @@ +.. header:: + + .. cssclass:: header-table + + +-------------------------------------+-----------------------------------+ + | Mirantis OpenStack v6.1 | .. cssclass:: right| + | | | + | Maintenance Updates | ###Section### | + +-------------------------------------+-----------------------------------+ + +.. footer:: + + .. cssclass:: footer-table + + +--------------------------+----------------------+ + | | .. cssclass:: right| + | | | + | ©2015, Mirantis Inc. | Page ###Page### | + +--------------------------+----------------------+ + +.. raw:: pdf + + PageBreak oneColumn + +.. toctree:: + +.. include:: /pages/preface/preface.rst + +.. _file-ref: + +.. include:: /contents/contents-maintenance-updates.rst