Back to NEW since there's nothing currently being done to fix this issue from cloud-init side.
(In reply to Eduardo Otubo from comment #13) > Back to NEW since there's nothing currently being done to fix this issue > from cloud-init side. Hi Jesus, Not sure who and how we address this issue, but according to the reproduce steps, seems related with the compatibility of python2-urllib3 and cloud-init, could you take a look the issue from python2-urllib3 side? Thanks!
@huzhao Yes, I'm going to address this this week. Seems related to the change I made to fix a CVE in python2-urllib3 https://bugzilla.redhat.com/show_bug.cgi?id=1924613
I have done the following to address this bug: * reverted back to python2-urllib3 1.24.3 [1] which was the most recent 3.11 release before bumping to 1.26.2. * backported upstream patch to fix CVE-2020-26137 [2] which was why we updated to 1.26.2 in the first place * bumped the Epoch of python2-urllib3 1.24.3 to 1 to force it to downgrade the 1.26.2 on existing servers * created a bug [3] against python2-requests to support upgrading to newer urllib3. [1] brew build for 1.24.3-2 https://brewweb.engineering.redhat.com/brew/taskinfo?taskID=35834480 [2] https://bugzilla.redhat.com/show_bug.cgi?id=1883800 [3] https://bugzilla.redhat.com/show_bug.cgi?id=1944916
(In reply to Jesus M. Rodriguez from comment #17) > I have done the following to address this bug: > > * reverted back to python2-urllib3 1.24.3 [1] which was the most recent 3.11 > release before bumping to 1.26.2. > * backported upstream patch to fix CVE-2020-26137 [2] which was why we > updated to 1.26.2 in the first place > * bumped the Epoch of python2-urllib3 1.24.3 to 1 to force it to downgrade > the 1.26.2 on existing servers > * created a bug [3] against python2-requests to support upgrading to newer > urllib3. > > [1] brew build for 1.24.3-2 > https://brewweb.engineering.redhat.com/brew/taskinfo?taskID=35834480 > [2] https://bugzilla.redhat.com/show_bug.cgi?id=1883800 > [3] https://bugzilla.redhat.com/show_bug.cgi?id=1944916 Thanks Jesus! Sorry reply late. I installed python2-urllib3-1.24.3-2.el7.noarch with cloud-init-19.4-7.el7_9.3.x86_64 in rhel-7.9, it works well, no error found. Change component to python-urllib3 for better track, please feel free to correct me if not suitable. Thanks! Huijuan
Python-maint does not maintain "rhel-7-server-ose-3.11-rpms". Changing the product to OpenStack.
This bug depends on https://bugzilla.redhat.com/show_bug.cgi?id=1924613, and it is not ready yet.
Verified. For the most recent 3.11.465 cluster, python2-urllib3 has been reverted back to python2-urllib3-1.24.3-2.el7.noarch cluster version: v3.11.465 with python2-urllib3-1.24.3-2.el7.noarch # subscription-manager register --username=xxx Registering to: subscription.rhsm.redhat.com:443/subscription Password: The system has been registered with ID: db369aea-1f15-480c-b9b9-9f2b65f7230e The registered system name is: ip-172-18-9-52.ec2.internal # subscription-manager repos --enable="rhel-7-server-ose-3.11-rpms" Repository 'rhel-7-server-ose-3.11-rpms' is enabled for this system. #yum update ... Installing: kernel x86_64 3.10.0-1160.31.1.el7 rhel-7-server-rpms 50 M python2-chardet noarch 3.0.4-7.el7ost aos 186 k replacing python-chardet.noarch 2.2.1-3.el7 python2-requests noarch 2.19.1-4.el7ost aos 123 k replacing python-requests.noarch 2.6.0-9.el7_8 python2-urllib3 noarch 1:1.24.3-2.el7 aos 170 k replacing python-urllib3.noarch 1.10.2-7.el7 # rpm -qa | grep urllib3 python2-urllib3-1.24.3-2.el7.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: OpenShift Container Platform 3.11.569 security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:4827