Synopsis

Red Hat OpenShift Enterprise 3.2.1.1 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Enterprise release 3.2.1.1 is now available with updates to packages and images that fix several bugs and introduce feature enhancements.

Description

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the OpenShift Enterprise 3.2 Release Notes, which will be updated shortly for release 3.2.1.1, for details about these changes:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

This update includes the following images:

openshift3/openvswitch:v3.2.1.1
openshift3/ose-pod:v3.2.1.1
openshift3/ose:v3.2.1.1
openshift3/ose-docker-registry:v3.2.1.1
openshift3/ose-keepalived-ipfailover:v3.2.1.1
openshift3/ose-recycler:v3.2.1.1
openshift3/ose-f5-router:v3.2.1.1
openshift3/ose-deployer:v3.2.1.1
openshift3/node:v3.2.1.1
openshift3/ose-sti-builder:v3.2.1.1
openshift3/ose-docker-builder:v3.2.1.1
openshift3/ose-haproxy-router:v3.2.1.1

openshift3/nodejs-010-rhel7:0.10-39
openshift3/perl-516-rhel7:5.16-41
openshift3/php-55-rhel7:5.5-38
openshift3/python-33-rhel7:3.3-38
openshift3/ruby-20-rhel7:2.0-38
openshift3/mongodb-24-rhel7:2.4-30
openshift3/mysql-55-rhel7:5.5-28
openshift3/postgresql-92-rhel7:9.2-27

openshift3/logging-auth-proxy:3.2.1
openshift3/logging-curator:3.2.1
openshift3/logging-deployment:3.2.1
openshift3/logging-elasticsearch:3.2.1
openshift3/logging-fluentd:3.2.1
openshift3/logging-kibana:3.2.1
openshift3/metrics-cassandra:3.2.1
openshift3/metrics-deployer:3.2.1
openshift3/metrics-hawkular-metrics:3.2.1
openshift3/metrics-heapster:3.2.1

All OpenShift Enterprise 3 users are advised to upgrade to these updated packages and images, unless otherwise directed by Known Issues in the release notes.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

See the OpenShift Enterprise 3.2 documentation, which will be updated shortly for release 3.2.1.1, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

The Red Hat Enterprise Linux container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com using the "docker pull" command. Dockerfiles and scripts should be amended either to refer to these new images specifically, or to the latest images generally.

Affected Products

• Red Hat OpenShift Container Platform 3.2 x86_64

Fixes

• BZ - 1305131 - Metrics do not behave as expected if nodeIP is not set in node.yaml
• BZ - 1316275 - Cassandra filling up diskspace
• BZ - 1320233 - haproxy is reloaded every 10 minutes N-times for N endpoints
• BZ - 1322271 - Failed to show network metrics
• BZ - 1324179 - Some serviceaccounts are delayed to create after project created
• BZ - 1326523 - [RFE] Add max_allowed_packet as an Environment Variable to the MySQL Images
• BZ - 1327500 - Build pod may fail on creation due to a long label
• BZ - 1331816 - [dev-preview-int] Pods won't deploy when memory settings are too low
• BZ - 1333003 - CLI tools download in the about page isn't obvious enough
• BZ - 1333118 - Adding labels and envs is tricky
• BZ - 1333122 - quota events for compute resource failures are duplicated due to unstable map ordering
• BZ - 1333158 - Scaling widget is a little flaky
• BZ - 1333163 - YAML editor throws error when trying to search
• BZ - 1333172 - not obvious when links go to a route hostname vs navigation within the console
• BZ - 1333590 - Web console doesn't show line breaks in template descriptions
• BZ - 1333898 - Builds graph get shown in a truncated manner
• BZ - 1333932 - Enable etcd watch cache for origin types
• BZ - 1334249 - postgresql-slave pod is CrashLoopBackOff if using postgresql_replica.json to create psql
• BZ - 1334485 - Empty Overview page
• BZ - 1334501 - Watch cache regression: changes behavior of "resource version too old" error
• BZ - 1334866 - metadata.deletionTimestamp settable during update
• BZ - 1335290 - [RFE] OpenShift 3.2 support with Docker 1.10
• BZ - 1336526 - Link to Documentation from the Help dropdowns is hard coded
• BZ - 1339174 - Image built out from nodejs-010-rhel7 cannot startup
• BZ - 1340324 - [docker1.10]Need more robust method to utilize docker client in node container

CVEs

• CVE-2015-8851

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat OpenShift Container Platform 3.2

SRPM
atomic-openshift-3.2.1.1-1.git.0.96f9555.el7.src.rpm	SHA-256: 640059879baf511bbafa06204434fbe6f59a0e3b999b685c2db1ffa021d69f7a
heapster-1.1.0-1.beta2.el7.src.rpm	SHA-256: 2ede4e1cf99428bb5a37ac03469d187d617be5e6e9daeff0bb3a4c786b58b8d2
x86_64
atomic-openshift-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 3afc109be2860af803141fda897f2a843422b8c79aec9cb3cd4979dd54061017
atomic-openshift-clients-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: a1c047f2b200a27c0426e5515a20c84029e8a19128138c7cd9880d573f4c2f7e
atomic-openshift-clients-redistributable-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 04610fbeb999acd8d2685968c18c96117b779d072028262c6c7dc380177992d5
atomic-openshift-dockerregistry-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 304bfaa13ced3f120fb241cc398fb52eda54dd4b5045a6d7333713c26bdbef2a
atomic-openshift-master-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 14b985384ab6a56d8e4167c937b4595334dd6f80c03198b97127cd383fecc551
atomic-openshift-node-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 92ba44f13f5ef1ceab5ed17eeb5b90e94e4771df55613c7e71363d268def3efc
atomic-openshift-pod-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 8e5db9bede65b0b9591720454bc8a631f8b318203ee70aa9d42c31c17535b95f
atomic-openshift-recycle-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 55f2f5cc014e51dffb74bc2f6f54a7cfa0c86bd37dc11f6ef2820c7d69e81f22
atomic-openshift-sdn-ovs-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 4c157652f35503b30dfef3d51dd4348b099a5ada285262d26232bda36e5dd77c
atomic-openshift-tests-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: b026fc303f83b61797cdbb251ca6d38fcce340c983fcff5dd92bf5dc650ac3a0
heapster-1.1.0-1.beta2.el7.x86_64.rpm	SHA-256: 825fabbdcb38739e076af7af8bc44ac6abe34f7558e73950b3cb48614a894eff
tuned-profiles-atomic-openshift-node-3.2.1.1-1.git.0.96f9555.el7.x86_64.rpm	SHA-256: 6ca8c21d896cdc7af681293794a1d3e2bd16621d351a2960486307871b7b6b21