RHBA-2017:1140 - Bug Fix Advisory

Topic

Updated atomic-openshift-utils and openshift-ansible packages that fix several bugs and add an enhancement are now available for OpenShift Container Platform 3.5, 3.4, 3.3, and 3.2.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

The atomic-openshift-utils and openshift-ansible packages contain the installation utility and Ansible requirements for installing and upgrading OpenShift Container Platform 3.

This update fixes the following bugs:

• When trying to install aggregated logging, the playbook called the `oo_first_master` host group, however the evaluate_groups.yml file was not included prior to the play. Because the `oo_first_master` host group was not created, the entire play was skipped and logging was not installed. This bug fix adds an include for the evaluate_groups.yml file to create the required host groups, and as a result aggregated logging can be installed as expected. (BZ#1441922)
• On older RHEL Atomic Host instances, there could be an out of date version of docker which is not supported. In such cases, an OpenShift Container Platform installation would finish but pods would be unusable. This bug fix checks for unsupported versions of docker when using RHEL Atomic Host. If an old version is found, the install is halted and the user is notified. (BZ#1425583)
• The installer previously incorrectly set the default logging and metrics image versions. Because the installer is unique per OpenShift Container Platform minor release, this bug fix hardcodes the default of `3.5.0` instead. These defaults can still be overridden by setting `openshift_hosted_logging_deployer_version` or `openshift_hosted_metrics_deployer_version` for logging and metrics, respectively. (BZ#1442185)
• When deploying metrics, the entry point to the metrics deployment playbook was invalid, and metrics were not installed as expected. This bug fix adds a proper entry point, and metrics can now be deployed as expected. (BZ#1441915)
• Parameter values were previously used to directly populate environment variables. This meant the value of the environment variable was exposed in the web console, potentially exposing password credentials. This bug fix sets the environment variables indirectly via a secret and sets the secret from a parameter value. As a result, the environment variable value is no longer displayed in the web console by default. (BZ#1233513)
• When the quick installer attempted to gather facts from remote hosts, the installer would fail due to an incorrect path specified in the byo/openshift_facts.yml playbook. This bug fix corrects the path in byo/openshift_facts.yml and as a result the installer completes as expected. (BZ#1439109, BZ#1440588, BZ#1440614)

In addition, this update adds the following enhancement:

• Enhanced certificate redeployment playbooks have been backported to OpenShift Container Platform 3.4, 3.3, and 3.2. See updated documentation for latest usage.

All OpenShift Container Platform users are advised to upgrade to these updated packages.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To apply this update, run the following on all hosts where you intend to initiate Ansible-based installation or upgrade procedures:

# yum update atomic-openshift-utils

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.5 x86_64
• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64

Fixes

• BZ - 1233513 - Passwords are shown in the web console
• BZ - 1364160 - [3.5] facts collection for openshift.common.admin_binary does not seem to work in mixed environments
• BZ - 1367685 - [quick-install] Can't specify LB in arbitrary installer yaml
• BZ - 1388760 - [3.4] quick install - No error message output when the packages can't be found.
• BZ - 1397530 - [3.3] facts collection for openshift.common.admin_binary does not seem to work in mixed environments
• BZ - 1425583 - Install should fail for unsupported docker version on atomic host
• BZ - 1427429 - [3.4] Certificate redeploy playbook shouldn't remove CA certificate by default
• BZ - 1433068 - [3.3] Certificate redeploy playbook shouldn't remove CA certificate by default
• BZ - 1433378 - [3.2] ansible-playbook fails with dict object has no attribute oo_etcd_to_config
• BZ - 1439109 - [quick installer][3.4]quick installer failed due to a non-existent file_name
• BZ - 1440588 - [3.3]quick installer failed due to a non-existent file_name
• BZ - 1440614 - [3.2]quick installer failed due to a non-existent file_name
• BZ - 1441915 - Failed to deploy metrics by steps in OpenShift 3.5 formal documentation
• BZ - 1441922 - logging can't be deployed by openshift-logging.yml playbook
• BZ - 1442185 - [3.5] OpenShift logging pods not deploying using correct image version

CVEs

(none)

References

(none)