Synopsis

OpenShift Container Platform 3.4.1.7, 3.3.1.14, and 3.2.1.26 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.4.1.7, 3.3.1.14, and 3.2.1.26 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.4.1.7, 3.3.1.14, and 3.2.1.26. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:0290

Space precludes documenting all of the bug fixes in this advisory.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.7, for details about the 3.4 changes:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.14, for details about the 3.3 changes:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

For OpenShift Container Platform 3.2, see the following documentation, which will be updated shortly for release 3.2.1.26, for details about the 3.2 changes:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.7, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.14, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

For OpenShift Container Platform 3.2, see the following documentation, which will be updated shortly for release 3.2.1.26, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64
• Red Hat OpenShift Container Platform 3.2 x86_64

Fixes

• BZ - 1300710 - RFE: define a default service and endpoint for gluster storage
• BZ - 1397693 - EBS volume could not detached from node if node service is stopped
• BZ - 1406799 - oc new-app logging-deployer-template ignores configmap
• BZ - 1408129 - [Backport] Change haproxy router to use a certificate list/map file.
• BZ - 1412367 - the s3 storage registry driver does not include the AWS ca-central-1 region
• BZ - 1412829 - [Backport] Extended Route Validation Breaks Included Templates
• BZ - 1414438 - the s3 storage registry driver does not include the AWS ca-central-1 region
• BZ - 1414439 - the s3 storage registry driver does not include the AWS ca-central-1 region
• BZ - 1415276 - [3.3] Router doesn't immediately load existing routes on pod redeployement
• BZ - 1415624 - Persistent Volumes on NFS arent all getting recycled
• BZ - 1416456 - BuildConfig with Docker strategy using Dockerfile with 'FROM scratch' results in a failed build
• BZ - 1416506 - [3.3] Race condition is seen when updating a batch of nodes in cluster using "oadm manage-node"
• BZ - 1416614 - Migrate data associated with etcd prefix errors in v3.4.0.39
• BZ - 1417276 - ipfailover keepalived split brain
• BZ - 1417282 - [3.3] ipfailover keepalived split brain
• BZ - 1417723 - atomic-openshift-docker-excluder in 3.3 doesn't exclude docker-1.12
• BZ - 1418498 - Recycling PV stuck at Released state causes master controllers process 100% CPU
• BZ - 1420898 - The Java command line for Hawkular carries passwords when displaying process (ps)

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.4

SRPM
atomic-openshift-3.4.1.7-1.git.0.81b9a4a.el7.src.rpm	SHA-256: 715ff8f79e9b465b690a13b25e70ac3f87851419f06e4ac71ac878b207bac10d
rubygem-fluent-plugin-secure-forward-0.4.3-2.el7.src.rpm	SHA-256: ebeb7a7eced1e32b7924eb8ca7cd2d6ebfbc6bedf8239e3ae9016ace21e91696
rubygem-proxifier-1.0.3-2.el7.src.rpm	SHA-256: 84d08f4152cccfc77f6904b6cf086b01c9d82f0b7e52ccfa70fd76d73cfbf7ab
rubygem-resolve-hostname-0.0.4-1.el7.src.rpm	SHA-256: 39d489f2869a1a0fa321bcd9279cad4e4d4dd23971f0a83add4ae282ed1e5a45
x86_64
atomic-openshift-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: 78080b4c5a3a1ee26c6f16bd08d6574bfe9f6dd238ffca6ff3aae9757adf41bc
atomic-openshift-clients-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: e2a6c98fe6e6cc72dc312e75ea4e513d2cd98e776be395a4624430997c102361
atomic-openshift-clients-redistributable-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: fe6784ba3528651d5ce9e70daeb001f96b8b057d67db2b1b721ac199d01c3d94
atomic-openshift-docker-excluder-3.4.1.7-1.git.0.81b9a4a.el7.noarch.rpm	SHA-256: fca64304d04385a613394c75aa38fefae535f90e894c048834ffaeaf7681635a
atomic-openshift-dockerregistry-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: 259f97590f52966c927a6fde76f26779db3de43692358b66570bcae35afaa10e
atomic-openshift-excluder-3.4.1.7-1.git.0.81b9a4a.el7.noarch.rpm	SHA-256: 80c20f453b7f456767b9b4c6e2a52372717ba8262e070fc4e382ec4564e2a1a5
atomic-openshift-master-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: 55e39273542164695d53f848021a83a9bd93f494874ccf8ab2de64bd7218a12c
atomic-openshift-node-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: f17f9c39620abd0ff5fea9856bfb15679c35a26990b4a2519ec5ee7ce8cdd0ed
atomic-openshift-pod-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: e4a50d978c9f5a5824c010a8db4b5ac6179249dcb1ab7fb88d66a01dea417542
atomic-openshift-sdn-ovs-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: 5089ec96433e9b984c17990908fb06ab6a7e00ae01c7321f590eea7e239c6365
atomic-openshift-tests-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: 18488b68c47c6e7dd62fb10c16c39859a047cde481f1b5eba59b397a238e2d05
rubygem-fluent-plugin-secure-forward-0.4.3-2.el7.noarch.rpm	SHA-256: d97bcf67d7b6f9f407caaedb9d93849af57fbf106be6f9595f59518b77d44ea8
rubygem-fluent-plugin-secure-forward-doc-0.4.3-2.el7.noarch.rpm	SHA-256: c430ef9943c4bbc85835eb1c55c060c7f12ab73f0048168783b80a1038d438c3
rubygem-proxifier-1.0.3-2.el7.noarch.rpm	SHA-256: a4f580b5bcc9a04b07fd7e5118ccf5b642cd91268430a911089b0fb178830d44
rubygem-proxifier-doc-1.0.3-2.el7.noarch.rpm	SHA-256: feafadbd4ff01726e650c9aeff9d10a99712507aaf2729538ff68b9f632a411d
rubygem-resolve-hostname-0.0.4-1.el7.noarch.rpm	SHA-256: c49cb165a343edddf6455f4aed67e3e7edda0724cf72467044b1944749069761
rubygem-resolve-hostname-doc-0.0.4-1.el7.noarch.rpm	SHA-256: 56f317b221132428d450fb16ebbc81b16ed8dd67c744a2291f069f622029fe07
tuned-profiles-atomic-openshift-node-3.4.1.7-1.git.0.81b9a4a.el7.x86_64.rpm	SHA-256: 40a37bb37157861fa56bef93efde3aeaa2e2d67af184fed59e48a4d24d05d90f

Red Hat OpenShift Container Platform 3.3

SRPM
atomic-openshift-3.3.1.14-1.git.0.13deca9.el7.src.rpm	SHA-256: a24c4249be44ed9e59898ea19587f76cb51a31344b4b88bdf68cdeee36ee21ca
rubygem-fluent-plugin-secure-forward-0.4.3-2.el7.src.rpm	SHA-256: ebeb7a7eced1e32b7924eb8ca7cd2d6ebfbc6bedf8239e3ae9016ace21e91696
rubygem-proxifier-1.0.3-2.el7.src.rpm	SHA-256: 84d08f4152cccfc77f6904b6cf086b01c9d82f0b7e52ccfa70fd76d73cfbf7ab
rubygem-resolve-hostname-0.0.4-1.el7.src.rpm	SHA-256: 39d489f2869a1a0fa321bcd9279cad4e4d4dd23971f0a83add4ae282ed1e5a45
x86_64
atomic-openshift-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 115bbcb4db2c31b74287ed996ae28d73c158d28870ab9d7a513b319901f4516e
atomic-openshift-clients-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 8815fcb9dfa787062a4300d458a95ac277282f2b20cadf3d17909dbb2a135a94
atomic-openshift-clients-redistributable-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 96efd0cdede971d4bcbeb0f3cd61b62d561b1aa8e4198a09dada84e785daf6e6
atomic-openshift-docker-excluder-3.3.1.14-1.git.0.13deca9.el7.noarch.rpm	SHA-256: 6e985bcfd1e115a5297edebd4745b61ecccbfd9fec00b2d625e5b385bf4c2e6c
atomic-openshift-dockerregistry-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 5c71938077559c361d673e00b3743cb20b6a2749f3c69f6e1a7a8d0f8e9061b8
atomic-openshift-excluder-3.3.1.14-1.git.0.13deca9.el7.noarch.rpm	SHA-256: d66f1b89c2df659dbf8b2a6d9eb8069665a0046b8264a6e5de537369629b8397
atomic-openshift-master-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 49a26051ab403c6f5ed00d4cf3103789edf5cb662764eed0c712c271ef89e143
atomic-openshift-node-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 3cd27f8a66caaadaf51c24da54e1a50abeac55faf64b9e0477cb6ae34f9f8b05
atomic-openshift-pod-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 7b282a1076d0bc51d3b8f995752aeee402604032fe3185fba03cbcce2c685bab
atomic-openshift-sdn-ovs-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: 2be2e5be442d582f9768f7fd5f435680ec013425a0190bf7c244846edca35d2e
atomic-openshift-tests-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: fd20fa8f3f4518b443e58dbdf94ac11c308ca314ef08dad3e9bf603aa3fe2db1
rubygem-fluent-plugin-secure-forward-0.4.3-2.el7.noarch.rpm	SHA-256: d97bcf67d7b6f9f407caaedb9d93849af57fbf106be6f9595f59518b77d44ea8
rubygem-fluent-plugin-secure-forward-doc-0.4.3-2.el7.noarch.rpm	SHA-256: c430ef9943c4bbc85835eb1c55c060c7f12ab73f0048168783b80a1038d438c3
rubygem-proxifier-1.0.3-2.el7.noarch.rpm	SHA-256: a4f580b5bcc9a04b07fd7e5118ccf5b642cd91268430a911089b0fb178830d44
rubygem-proxifier-doc-1.0.3-2.el7.noarch.rpm	SHA-256: feafadbd4ff01726e650c9aeff9d10a99712507aaf2729538ff68b9f632a411d
rubygem-resolve-hostname-0.0.4-1.el7.noarch.rpm	SHA-256: c49cb165a343edddf6455f4aed67e3e7edda0724cf72467044b1944749069761
rubygem-resolve-hostname-doc-0.0.4-1.el7.noarch.rpm	SHA-256: 56f317b221132428d450fb16ebbc81b16ed8dd67c744a2291f069f622029fe07
tuned-profiles-atomic-openshift-node-3.3.1.14-1.git.0.13deca9.el7.x86_64.rpm	SHA-256: de6d2eb5a618ea39b069cc6b514c76af3b86fb161bbfa8ed15be5c7a97d522ee

Red Hat OpenShift Container Platform 3.2

SRPM
atomic-openshift-3.2.1.26-1.git.0.4f5e7c3.el7.src.rpm	SHA-256: 97df92533cbc222aeea3e00d5c9bc0987dd12e42564bf860a219416dd9dc3d3c
x86_64
atomic-openshift-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: ab3d4a00d8a30c6116cf4e6c03387f0fa392f8b9bc723760e8d7f224b507a427
atomic-openshift-clients-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: a39ee0f5226a58e963bfded513732d1a6544c1b449592fcddbfa9ab38c2d4585
atomic-openshift-clients-redistributable-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: 1321e4cfe22c48c8c0ed4b27e9155a7d2df3215ea47efe5f197a75ae7f8886ae
atomic-openshift-docker-excluder-3.2.1.26-1.git.0.4f5e7c3.el7.noarch.rpm	SHA-256: 9b61f457430c51c126672910b8b133836140c3bb5d87b99778a0e49c92749ae3
atomic-openshift-dockerregistry-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: e676b0c69ccf421986628f3d2e3ea5a103ec5be766be69cef0a96f5cda54e843
atomic-openshift-excluder-3.2.1.26-1.git.0.4f5e7c3.el7.noarch.rpm	SHA-256: f8d3f57ddc6309c6d63fab78f69b636c40068788e11d5684b7e6fd90f5d3ab38
atomic-openshift-master-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: 5d9af01f25f74a95c66a82891ad2c215bf3f970e793bdab440d2221f0926bca5
atomic-openshift-node-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: 235e7b45fa0c9092b73d1bee4187dab4ec60f1f135aeb5dd567c5f134e88e182
atomic-openshift-pod-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: 39847228a21caa1d26f8d720820e632875630effb67282c55ca3142365e84ec0
atomic-openshift-recycle-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: 5cef885ab1665b01bb1d854dcb7d8e377be0c8770452fb062542fea3d2cc81f7
atomic-openshift-sdn-ovs-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: f19e04b1fb0923e3fa120fea92c496704ef5be7916b1747589d17ca218be10c9
atomic-openshift-tests-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: 3a7588cdf382e5095c185d1480ad4dfe320e6d3ac87bf3b0a77b5435d7608843
tuned-profiles-atomic-openshift-node-3.2.1.26-1.git.0.4f5e7c3.el7.x86_64.rpm	SHA-256: cf225e5a3d2daaff18a3831e869ea5574e02c23af71606bd73d589d274a9016c