RHBA-2017:0903 - Bug Fix Advisory

Topic

Updated atomic-openshift-utils and openshift-ansible packages that fix several bugs and add enhancements are now available for OpenShift Container Platform 3.5.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

The atomic-openshift-utils and openshift-ansible packages contain the installation utility and Ansible requirements for installing and upgrading OpenShift Container Platform 3.

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the OpenShift Container Platform 3.5 Release Notes, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.5/release_notes/ocp_3_5_release_notes.html

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To apply this update, run the following on all hosts where you intend to initiate Ansible-based installation or upgrade procedures:

# yum update atomic-openshift-utils

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 3.5 x86_64

Fixes

• BZ - 1298787 - [RFE]openshift-ansible should support containerized ha-master installation
• BZ - 1306678 - handle Cluster Metrics updates
• BZ - 1311207 - [supportability] protect package versions upon upgrade
• BZ - 1368579 - quick installer fails installing to "localhost"
• BZ - 1383275 - installer should support user specified "IMAGE_VERSION" for registry console deployment.
• BZ - 1384753 - Support openshift_builddefaults_git_no_proxy with ansible installer to enable no_proxy setting for git cloning
• BZ - 1388191 - Default docker log driver should be journald
• BZ - 1388445 - Issues within playbook while upgrade from 3.X to 3.Y version
• BZ - 1388739 - [quick install]the number of completed plays is bigger than the expected number.
• BZ - 1390135 - [quick install]scaleup with quick install in unattended mode should not ask user to input host info
• BZ - 1392742 - OpenShift installer always sets --selinux-enabled in sysconfig/docker. Can break working overlay installs.
• BZ - 1393666 - Image-name for registry-console hardcoded in code.
• BZ - 1395081 - docker-registry did not update to specified version after OCP upgrade
• BZ - 1395168 - installer does not attach private key file to docker-registry when cloudfront is enabled.
• BZ - 1395637 - The masterClientConnectionOverrides are absent on app node node-config.yml in containerized installation/upgrade
• BZ - 1397958 - [RFE] Improve certificate management tooling
• BZ - 1399523 - The value of openshift_hosted_logging_elasticsearch_ops_pvc_prefix is the same with openshift_hosted_logging_elasticsearch_pvc_prefix in installer
• BZ - 1406057 - Node Selector for Metrics Install
• BZ - 1413447 - firewalld should be installed in containerized RHEL installation
• BZ - 1414619 - [IntService_public_295] Ansible var name is not consistant
• BZ - 1414625 - [IntService_public_295] add mandatory check 'httpd-tools' is installed on master
• BZ - 1414756 - master service can't be started when setting "openshift_buildoverrides_force_pull=true"
• BZ - 1414770 - Decouple the configuration of BuildDefaults and BuildOverrides
• BZ - 1415063 - [IntService_public_295] Ansible install failed at openshift_metrics : create JKS container
• BZ - 1415447 - [IntService_public_295] Ansible metrics failed at openshift_metrics : Stop Heapster
• BZ - 1415593 - [IntService_public_295] Using ansible to un-install failed
• BZ - 1415767 - Openshift ansible playbook fails for htpasswd auth
• BZ - 1415800 - Installer fails to add/check iptables rule due to lock on xtables.
• BZ - 1416156 - Modifying iptables causes ungraceful termination of docker.service
• BZ - 1416686 - installation failed on GCE with cloudprovider enabled
• BZ - 1417525 - Using openshift_hosted_logging_deploy=true fails on repeated runs
• BZ - 1418191 - Getting 'Failed to pull image .... x509: certificate signed by unknown authority', after redeployed certificates
• BZ - 1419026 - openshift_master_certificates task failed when installing multiple masters env
• BZ - 1419255 - Fail to redeploy certificates due to restart node's delay
• BZ - 1419811 - [IntService_public_324]Failed in running handler "[openshift_logging : restart master]" after task "[openshift_logging : Delete temp directory]"
• BZ - 1419838 - Logging deployment failed with AnsibleUndefinedVariable error
• BZ - 1419843 - Installation with ansible-2.2.1.0-2 may fail when set_fact for openshift_master
• BZ - 1419844 - The atomic-openshifit-node and openvswitch images weren't upgraded on master hosts
• BZ - 1419874 - Metrics deployment failed during installation
• BZ - 1419893 - [quick installer]quick installer failed due to a non-existent file_name
• BZ - 1419962 - [IntService_public_295] After clean then install, Cassandra show keystore/password error
• BZ - 1420182 - [3.5] conntrack executable not found on $PATH during cluster horizontal run
• BZ - 1420204 - Fluentd should overwrite the default value of openshift_logging_fluentd_use_journal by detecting whether or not Docker is using the journald log driver
• BZ - 1420219 - No log entry can be found in Kibana UI after deploying logging stacks with ansible
• BZ - 1420425 - Failed to create logging-deployer route with external certificate
• BZ - 1420538 - Unable to set Supplemental Groups or fsGroup for Cassandra, via metrics deployer.
• BZ - 1420636 - The node service can't be started after upgrade openvswitch to v2.6
• BZ - 1420666 - Fail to start master service when running redeploy-openshift-ca on an embedded-etcd env
• BZ - 1420667 - master.etcd-client.crt and master.etcd-client.key wouldn't be redeployed in embedded-etcd env
• BZ - 1420970 - [quick installer]quick installer failed due to a python method failure
• BZ - 1421002 - Fail to upgrade masters when set openshift_rolling_restart_mode=system
• BZ - 1421011 - ruamel.yaml package installation failed when enable metrics or logging deployment
• BZ - 1421033 - Fail to upgrade ocp with quick installer due to wrong variant version
• BZ - 1421037 - Should add '-n default' to the 'oc replace' command in redeploy-registry-certificates playbook
• BZ - 1421563 - [Intservice_public_324]kibana route unaccessible after logging deployment
• BZ - 1422348 - lib_openshift role not working for containerized env installation
• BZ - 1423425 - Fail to start upgrade process due to syntax error of storage_upgrade.yml
• BZ - 1423430 - Redeploy router certificates playbook couldn't work
• BZ - 1423444 - OCP 3.5 installation failed due to a symbolic link error
• BZ - 1423447 - fail to install ocp on the hosts which enable excluders due to no openshift_version available
• BZ - 1424981 - [IntService_public_324] Logging upgrade failed at TASK [openshift_logging : Applying /tmp/openshift-logging-ansible-1PQ3bY/templates/logging-curator-dc.yaml]
• BZ - 1425312 - The redirect URL of Kibana route takes wrong port number when logging in Kibana
• BZ - 1425400 - upgrade stopped and exited at task [grep pluginOrderOverride]
• BZ - 1425688 - Upgrade failed at Task Wait for node to be ready
• BZ - 1426070 - excluders are not upgraded to corresponding version when upgrade ocp
• BZ - 1426155 - docker-excluder should not be installed by mistake after upgrade ocp
• BZ - 1426536 - Logging/Metrics deployment options in example inventory need update
• BZ - 1426677 - scaleup playbook doesn't consider ca certificate specified in openshift_master_overwrite_certificates
• BZ - 1426936 - Unable to get router replicas during installation when setting openshift_hosted_router_replicas
• BZ - 1427003 - Failed to add masters if openshift_master_ca_certificate is defined
• BZ - 1427009 - Installation failed with pvc_volume_mounts undefined error when registry_storage_kind is nfs
• BZ - 1427040 - STI build failed due to cert error
• BZ - 1427067 - Failed to redeploy certificates with Atomic Hosts due to "etcd_is_atomic" is detected incorrectly
• BZ - 1427080 - The router wasn't upgraded to current ose-haproxy-router image version
• BZ - 1427378 - Docker registry was not created during installation
• BZ - 1427789 - [3.5] Pod may get the duplicate IP if it is created after the node service restarted on containerized env
• BZ - 1428229 - fail to upgrade ocp3.4 to 3.5 while petset created in cluster
• BZ - 1428248 - [IntService_public_295] After install using ansible, Hawkular won't start due to hawkular-jgroups.keystore is missing
• BZ - 1428249 - [IntService_public_324] Elasticsearch stayed at 3.3.1 level and reported "java.lang.IllegalArgumentException: Could not resolve placeholder 'NAMESPACE'" after logging was upgraded to 3.5.0
• BZ - 1428532 - 3.5.0.37: Task Ensure etcd datadir exists fails in containerized install due to non-existent etcd user
• BZ - 1430612 - Docker-excluder should be always enabled during installation
• BZ - 1430613 - openshift-excluder should be enabled after install ocp
• BZ - 1430625 - Metrics and logging deployment with dynamic pv failed
• BZ - 1430626 - Metrics deployment with NFS volume failed
• BZ - 1430627 - Logging deployment with NFS volume failed
• BZ - 1430628 - openshift_master_logging_public_url option didn't work
• BZ - 1430700 - docker-excluder should be upgraded during upgrade for containerized installed ocp
• BZ - 1431077 - fatal excluder error when upgrade atomic OCP
• BZ - 1431527 - Ansible faild at TASK [openshift_logging : Generate Elasticsearch DeploymentConfig for Ops] if enabled ops cluster
• BZ - 1431583 - [cluster_lifecycle__11] missing permissions for router service account which lead router with NAMESPACE_LABELS setting does not work
• BZ - 1431935 - Ansible failed at TASK [openshift_logging : Generate Elasticsearch DeploymentConfig], 'es_pvc_pool' is undefined
• BZ - 1431972 - The version of excluder packages should be matched with node/master packages
• BZ - 1432345 - Fail to install ocp3.5 on fresh hosts when set enable_excluders=false
• BZ - 1432402 - Installer didn't get correct router replica
• BZ - 1432868 - Excluders should be installed on new node/master when scaleup cluster
• BZ - 1433272 - The etcd db file should be backed during upgrade
• BZ - 1436106 - Metrics deployment failed when running "Create objects"
• BZ - 1438160 - [quick installer]wrong variant version generated in installer.cfg.yml when selecting "Registry"

CVEs

(none)

References

(none)