RHBA-2016:1065 - Bug Fix Advisory

Topic

Updated atomic-openshift-utils and openshift-ansible packages that fix several bugs are now available for Red Hat OpenShift Enterprise.

Description

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

The atomic-openshift-utils and openshift-ansible packages contain the installation utility and Ansible requirements for installing and upgrading OpenShift Enterprise 3. This update fixes several bugs related to the installation utility and related Ansible playbooks, and enables installations of and upgrades to OpenShift Enterprise 3.2.

All OpenShift Enterprise 3 users are advised to upgrade to these updated packages.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To apply this update, run the following on all hosts where you intend to initiate Ansible-based installation or upgrade procedures:

# yum update atomic-openshift-utils

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.1 x86_64
• Red Hat OpenShift Container Platform 3.0.0.0 x86_64

Fixes

• BZ - 1126799 - Can not install php cartridge optional packages on RHEL6.6
• BZ - 1163768 - [Openshift-Heat-DIB]The source version of yum-validator is too old to recognise subscription type.
• BZ - 1178484 - [puppet]The value of roles shouldn't include characters [",]
• BZ - 1259072 - Infinite loop when trying to modify or add a district.
• BZ - 1274153 - Missing "metricsPublicURL:" in master-config.yaml
• BZ - 1277037 - Need to support running api/console on ports other than 8443 ( https://github.com/openshift/openshift-ansible/issues/661 )
• BZ - 1278933 - oo-install - ctrl-c able to create district with no node
• BZ - 1281728 - atomic-openshift-installer should give friendly prompt when some facts missing in installer.cfg.yml
• BZ - 1289645 - OpenShift install script causes system to not be able to boot new kernels.
• BZ - 1293724 - apiServerArguments and controllerArgument needs to be able to be defined in ansible hosts file
• BZ - 1293960 - [RFE] Control policy.json and schedule.json changes from ansible for all masters in HA setup
• BZ - 1299065 - Fix etcd hostname/ip address handling
• BZ - 1299331 - playbook should configure logrotate on containerized env
• BZ - 1299335 - playbook should configure cockpit on containerized env
• BZ - 1302276 - Failed to install rpm packages with specified version
• BZ - 1303859 - installer fails to add nodes if there are files in generated-configs
• BZ - 1305104 - linked kubectl binaries do not support standard operations
• BZ - 1309801 - Containerized node doesn't mount /var/log so log aggregation components fail
• BZ - 1310048 - Container installation with NFS support failed at task Create PersistentVolumes
• BZ - 1311038 - Couldn't deploy pod on HA master env when not the first_master is working
• BZ - 1311410 - Failed to deploy registry pod if the volume name is not 'registry' in inventory
• BZ - 1312065 - Installer should allow for customization of the Scheduler Policy.
• BZ - 1313169 - Ansible installer tries to enable etcd_container service even though containerized=false
• BZ - 1315151 - Fail to install containerized env with specified version
• BZ - 1316396 - The status of node is 'NotReady' after containerized installation
• BZ - 1317734 - Fail to mask ectd service when installing containerized env
• BZ - 1317755 - Should append openshift.node.portal_net to INSECURE_REGISTRY in docker configuration
• BZ - 1317975 - Proxy variables for Containerized Nodes and Masters for using oc commands.
• BZ - 1318200 - Docker didn't get restart after changing docker options
• BZ - 1318948 - Master container not running after docker restart
• BZ - 1319663 - Docker options in ansible inventory file not working as expected
• BZ - 1320017 - No OSE/AEP 3.2 product option in atomic-openshift-installer
• BZ - 1320166 - openshift-ansible should support setting new perFSGroup local storage quota
• BZ - 1320170 - Unable to set perFSGroup local quota before first node startup.
• BZ - 1320231 - Set kubernetesMasterConfig.admissionConfig in the installer
• BZ - 1320346 - Set oauthConfig.templates in installer
• BZ - 1320441 - Need a way to avoid proxy access or a documentation to setup NO_PROXY on OpenShift Master for Autoscaler
• BZ - 1320829 - Fail to install containerized env on minimal rhel due to lack of docker package
• BZ - 1321206 - Ansible configure the wrong dnsIp on node when configuring dnsmasq on node
• BZ - 1322154 - Configure scheduler.json options in installer
• BZ - 1322728 - Failed to start node service during containerized installation
• BZ - 1323057 - Fail to install OSE/AEP-3.1 using atomic-openshift-installer of 3.2 due to docker 1.9 conflict.
• BZ - 1323058 - "containerized=true" doesn't work on RHEL
• BZ - 1323838 - OpenShift installer installs docker on dedicated etcd hosts
• BZ - 1323918 - Should add "openshift_image_tag" option in atomic-openshift-installer
• BZ - 1324371 - needn't install atomic-openshift packages on nfs server
• BZ - 1324727 - Docker failed to get started after downgrade
• BZ - 1324728 - Ansible should not downgrade docker when installing 3.2 containerized env
• BZ - 1324729 - Import xPaas image streams failed during 3.2 installation
• BZ - 1324877 - Set imagePolicyConfig in installer
• BZ - 1325050 - Fail to test dns resolution when configuring dnsmasq on node
• BZ - 1325098 - ansible should open the '8053' port for skydns on master
• BZ - 1327063 - reset-failed docker.service failed if the docker 1.8.2 service is disabled
• BZ - 1327139 - [quick-install] Fail to install on Atomic Host
• BZ - 1328993 - Install is setting --insecure-registry incorrectly for Docker in 3.2.0.17, ignoring networks settings in inventory
• BZ - 1329165 - [quick install] Throw exception when choosing first master as storage host by default
• BZ - 1329521 - Failed to install env when master and etcd are on the individual servers
• BZ - 1330357 - Fail to deploy pod after installing env with openshift_master_portal_net='172.31.0.0/16'
• BZ - 1330620 - HTTP_PROXY, HTTPS_PROXY, and NO_PROXY set to null values
• BZ - 1330918 - [quick install] Failed when gathering information from hosts
• BZ - 1330919 - [quick install] Press Enter doesn't work when asked to specify the proxy host and no_proxy host

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal