Bug 1862213

Summary: VxFlexOS/PowerFlex : Volume-attach failed with KeyError: 'config_group'
Product: Red Hat OpenStack Reporter: Rajini Karthik <rajini.karthik>
Component: openstack-cinderAssignee: Pablo Caruana <pcaruana>
Status: CLOSED ERRATA QA Contact: Tzach Shefi <tshefi>
Severity: high Docs Contact: Chuck Copello <ccopello>
Priority: high    
Version: 16.1 (Train)CC: abishop, amcleod, ariveral, arkady_kanevsky, bcao, dcadzow, dcain, dmaley, gael_rehault, gcharot, geguileo, hrivero, Ivan.Pchelintsev, jamsmith, jeokim, jhardee, jko, jvisser, kholtz, kurt_hey, mburns, michele, mkim, morazi, munna, nchandek, pcaruana, pgrist, ravsingh, sam.wan, Sam.Wan, sputhenp, sroza, tkajinam, tshefi, vladislav.belogrudov
Target Milestone: z2Keywords: OtherQA, Triaged, ZStream
Target Release: 16.1 (Train on RHEL 8.2)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-cinder-15.3.1-1.20200807084512.el8ost Doc Type: Bug Fix
Doc Text:
This update fixes a problem that caused volume attachments to fail on a VxFlexOS cinder backend. + Previously, attempts to attach a volume on a VxFlexOS cinder backend failed because the cinder driver for the VxFlexOS back end did not include all of the information required to connect to the volume. + The VxFlexOS cinder driver has been updated to include all the information required in order to connect to a volume. The attachments now work correctly.
Story Points: ---
Clone Of:
: 1869346 1907478 (view as bug list) Environment:
Last Closed: 2020-10-28 15:45:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1595325, 1715964, 1907478    
Attachments:
Description Flags
Nova logs
none
Fix for volume-attach none

Description Rajini Karthik 2020-07-30 18:20:25 UTC
Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Rajini Karthik 2020-07-30 18:22:26 UTC
VxFlexOS backend: Volume-attach failed with KeyError: 'config_group'

Seems that os-brick already has security fix and tries to get ‘config_group’ key. However cinder driver does not contain this fix. Don’t know if os-brick package was pulled into RHOSP16.1 that matches the cinder.

Its been fixed in this review
https://review.opendev.org/#/c/723825

This is related to BZ https://bugzilla.redhat.com/show_bug.cgi?id=1808570.

Comment 2 Rajini Karthik 2020-07-30 18:23:12 UTC
Created attachment 1702983 [details]
Nova logs

Comment 3 Alan Bishop 2020-07-30 18:50:55 UTC
Because this version of the driver in OSP-16.1 was backported from upstream code from a later release (the driver code is not on stable/train), we'll need Dell EMC to identify the code change required to fix this downstream. Can you indicate the specific code in the (abandoned) upstream patch? Or, perhaps upload a patch file to this BZ.

Comment 4 Ivan Pchelintsev 2020-07-31 09:11:37 UTC
Created attachment 1703074 [details]
Fix for volume-attach

Comment 5 Alan Bishop 2020-08-03 14:25:05 UTC
I see what happened. The driver was updated in the upstream patch [1] to address the CVE, and that patch needs to be applied to the code that was backported to 16.1.

[1] https://review.opendev.org/733105

Comment 13 arkady kanevsky 2020-08-12 15:58:55 UTC
What do we do for certification?
Apply this patch before running 16.1 certification and submit results?
Is this acceptable to cert team?

Comment 20 Rajini Karthik 2020-08-13 16:19:06 UTC
Related patch https://review.opendev.org/#/c/746109/

Comment 40 errata-xmlrpc 2020-10-28 15:45:55 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: openstack-cinder security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:4283