RHBA-2017:0186 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.4.0.40 is now available with updates to packages and images that fix a bug.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform release 3.4.0.40. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:0187

This update fixes the following bug:

• Previously, upgrading from OpenShift Container Platform 3.3 to 3.4 caused all user identities to disappear, though they were still present in etcd, and OAuth-based users could no longer log in. New 3.4 installations were also affected. This was caused by an unintentional change in the etcd prefix for user identities; egressnetworkpolicies were similarly affected. This bug fix restores the previous etcd prefix for user identities and egressnetworkpolicies, and as a result users can log in again successfully.

Administrators who have already installed or upgraded to v3.4.0.39 must upgrade to v3.4.0.40, then perform a data migration using a data migration tool. See Solution section below. (BZ#1415570)

All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

See the OpenShift Container Platform 3.4 documentation, which will be updated shortly for release 3.4.0.40, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.4 x86_64

Fixes

• BZ - 1415570 - Identity storage location in etcd changed from 3.3 to 3.4, upgrading causes all identities to be seen as missing

CVEs

(none)

References

(none)