RHBA-2017:0989 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.4.1.16, 3.3.1.19, 3.2.1.31, and 3.1.1.11 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.4.1.16, 3.3.1.19, 3.2.1.31 and 3.1.1.11. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:0990

This update fixes the following bugs:

• Previously, there was no option to configure the URL that proxies to $master/oauth/approve. When accessing the Jenkins application created by the default template jenkins-persistent, an error message of "The requested URL /oauth/approve was not found on this server" was returned. This bug fix addresses the issue and the error message no longer appears.(BZ#1434983)
• If NAMESPACE_LABELS was added to the router first, then the label to namespace was added or removed, then the router configuration could not be reloaded. However, if NAMESPACE_LABELS was added to the router last, the configuration could be reloaded. This bug fix addresses the issue. (BZ#1436296)
• Previously, Azure Disk would not attach to OpenShift Container Platform. If there was a pod created with a invalid disk, then creating a pod with a valid disk would always fail. This bug fix resolves this issue. (BZ#1438474)
• Previously, there was a logic error in how weak and strong references are identified when searching images eligible for pruning. Some images having both strong and weak references in pruning graph could be removed during pruning. This bug fix corrects the logic responsible for finding which images have strong references. Now, pruning correctly recognizes and prunes images. (BZ#1439926, BZ#1440197, BZ#1440199, BZ#1440201)
• Previously, 3.1 containerized installs may have incorrectly used the latest image when creating the initial certificates. Because of this and a change to the 3.5 image, this could have led to a scenario where the 3.1 installation would fail because the 3.5 image no longer creates openshift-registry.kubeconfig and openshift-router.kubeconfig as required of a 3.1 installation. The 3.1 installer has been updated to ensure that a 3.1 image is used when creating the initial certificates which ensures that all the necessary files are created. (BZ#1442346)

All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.16, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.19, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

For OpenShift Container Platform 3.2, see the following documentation, which will be updated shortly for release 3.2.1.31, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64
• Red Hat OpenShift Container Platform 3.1 x86_64

Fixes

• BZ - 1434983 - [3.4] Can't login to Jenkins application when ENABLE_OAUTH=true and RequestHeaderIdentityProvider is used
• BZ - 1436296 - [3.3] [networking_public_407] the router configuration not reloaded after the namespace label changed
• BZ - 1438474 - Cannot attach Azure Disk
• BZ - 1439926 - [3.3] Image pruning may incorrectly delete an image if it has both weak and strong references
• BZ - 1440197 - [3.1] Image pruning may incorrectly delete an image if it has both weak and strong references
• BZ - 1440199 - [3.2] Image pruning may incorrectly delete an image if it has both weak and strong references
• BZ - 1440201 - [3.4] Image pruning may incorrectly delete an image if it has both weak and strong references
• BZ - 1442346 - [3.1] registry/router certificates are not generated in containerized install which is leading installer exit

CVEs

(none)

References

(none)