- Issued:
- 2017-06-12
- Updated:
- 2017-06-12
RHBA-2017:1429 - Bug Fix Advisory
Synopsis
OpenShift Container Platform atomic-openshift-utils bug fix and enhancement
Type/Severity
Bug Fix Advisory
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated atomic-openshift-utils and openshift-ansible packages that fix several bugs and add an enhancement are now available for OpenShift Container Platform 3.5, 3.4, and 3.3.
Description
Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.
Ansible is a SSH-based configuration management, deployment, and task execution system. The openshift-ansible packages contain Ansible code and playbooks for installing and upgrading OpenShift Container Platform 3.
This update fixes the following bugs:
- Audit configuration can now be set up during cluster installation for non-high availability (HA) environments. (BZ#1454370, BZ#1454377)
- Previously, if the `openshift_hosted_metrics_public_url` Ansible variable was specified but the playbooks were not used to deploy metrics, the configuration value was ignored. This bug fix ensures this configuration value is set whether or not the playbooks are used to deploy metrics, which makes it possible to configure the web console for metrics use while performing a manual installation of the metrics components. (BZ#1449483, BZ#1452690)
- This bug fix removes the OpenShift Container Platform (OCP) 3.5 templates for hosted logging and metrics because the deployer is no longer being used for OCP 3.5. (BZ#1456348)
- Previously, existing registry console deployments would not get updated automatically during a cluster upgrade. This bug fix ensures that the registry console is now upgraded as well during a cluster upgrade. (BZ#1454786, BZ#1454787)
In addition, this update adds the following enhancement:
- This enhancement adds the 3scale AMP 2.0 On-Premises image stream and template.
All OpenShift Container Platform users are advised to upgrade to these updated packages.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
To apply this update, run the following on all hosts where you intend to initiate Ansible-based installation or upgrade procedures:
# yum update atomic-openshift-utils
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at:
Affected Products
- Red Hat OpenShift Container Platform 3.5 x86_64
- Red Hat OpenShift Container Platform 3.4 x86_64
- Red Hat OpenShift Container Platform 3.3 x86_64
Fixes
- BZ - 1397346 - [3.3] Deploy of custom router fails on "list of unattached/unmounted volumes=[server-certificate]"
- BZ - 1449483 - [3.4] ignore openshift_hosted_metrics_public_url when openshift_hosted_metrics_deploy=true is not set
- BZ - 1452012 - [3.5] instructions about openshift_hosted_routers in ose.example should be updated according to the latest code change.
- BZ - 1452690 - [3.3] ignore openshift_hosted_metrics_public_url when openshift_hosted_metrics_deploy=true is not set
- BZ - 1454370 - [3.4] Include Audit configuration in the installation process (Ansible OCP inventory)
- BZ - 1454377 - [3.3] Include Audit configuration in the installation process (Ansible OCP inventory)
- BZ - 1454786 - [3.5] The registry-console should be updated by upgrade playbook
- BZ - 1454787 - [3.4] The registry-console should be updated by upgrade playbook
- BZ - 1456348 - [3.5] Logging deployer templates created under two namespaces
CVEs
(none)
References
(none)
Red Hat OpenShift Container Platform 3.5
| SRPM | |
|---|---|
| openshift-ansible-3.5.78-1.git.0.f7be576.el7.src.rpm | SHA-256: de3274490aaa4ef5dd6efb880da2f30b34017c4bee20a1789b74b15b2c262587 |
| x86_64 | |
| atomic-openshift-utils-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: 3964f26b3b1d6fec4c405beae7c28998b61d0f5945562a1647663c3869200e82 |
| openshift-ansible-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: ec0e3d3fc7939aaffa234fcac717e4f7e365d5c0df5193d42573b127d90a44db |
| openshift-ansible-callback-plugins-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: 519baee306d57ed518fa30c2d39dca6c29e463bf232fc575530e7a2c642dbf07 |
| openshift-ansible-docs-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: 746ad3f5487669a623995cc131179d3336fe1d49efcfb6dfa5823892bfc2fb8e |
| openshift-ansible-filter-plugins-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: 22b8b58e8b4110354a5d215e1d8e536ea4fb23f5d3c888f36b0d129c1057e697 |
| openshift-ansible-lookup-plugins-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: c4ee2f8417bc7e95b6b75c0f09be0069359c237b26d241bb2b255f1f4f55afca |
| openshift-ansible-playbooks-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: 4edd3e46423b4dacc32f5064bf02663d0cadafcfb3dcc9602a97d99ab5f847a1 |
| openshift-ansible-roles-3.5.78-1.git.0.f7be576.el7.noarch.rpm | SHA-256: 0b2b92ecf04385ed8fb284d1d6e79349575f1e9f2376132442e1330e8dcc05ed |
Red Hat OpenShift Container Platform 3.4
| SRPM | |
|---|---|
| openshift-ansible-3.4.95-1.git.0.3c99da3.el7.src.rpm | SHA-256: 0f06af97079a6f259ed1effa7b1c8f6f5a76b20ebe13876069ac9998a016e12d |
| x86_64 | |
| atomic-openshift-utils-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: 19697b095b4477cf71b888e77c1d026efcfed824eb8609a20c9720ecc82999a5 |
| openshift-ansible-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: 81fa1f048b3550bfe9a8d6470a38e552c9cc042f79cb270d5af6c7fe19d9789d |
| openshift-ansible-callback-plugins-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: f3d71c30c2e7f53c0cf88c15b7b45728d50ea22bea22b632f1bdafe7d7f7fb44 |
| openshift-ansible-docs-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: 12dc0de2698b84af53a1c9afdf9c81629f42445edee4b0e0d43762f44859961d |
| openshift-ansible-filter-plugins-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: 9a0ab561322fd3dabb10f06cfa157138fa83d2c0c59d8737b3285e53983cb8ff |
| openshift-ansible-lookup-plugins-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: f70a7e7eaf238b6d6bd1da980bee1e9181371a4a2132a6656ffb2fc26c9b4780 |
| openshift-ansible-playbooks-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: 82a46fae1875c4b8e2421a30d49e8e51dbbe2a23c7e654c1f99013ef00def8df |
| openshift-ansible-roles-3.4.95-1.git.0.3c99da3.el7.noarch.rpm | SHA-256: cf774a0343a2a1f5149c41f25f6f53f6103e000bd2a7f1bf5b447b5e07106a47 |
Red Hat OpenShift Container Platform 3.3
| SRPM | |
|---|---|
| openshift-ansible-3.3.84-1.git.0.4104d2d.el7.src.rpm | SHA-256: 2e7535a8988a55515beef9663a04d5e40b562b4f685f399653f89b26661eee0f |
| x86_64 | |
| atomic-openshift-utils-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: c4d27c09500372c4039be6b61a871395071f42e9d76df07ca0e0491af2180984 |
| openshift-ansible-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: 796d5254d309af10119d7ee5f7e4c42a523309ea94988b926c1ceba39b38238e |
| openshift-ansible-callback-plugins-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: 2ad5f10fa4f87511760540bf6a2804ddc3c992be182d8da8949f8f2da1aa7fcb |
| openshift-ansible-docs-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: 32e2ca9d38d9ceb3be8dd315bee47469a88e224f0af82ea77ccb61338c5d5fc2 |
| openshift-ansible-filter-plugins-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: a36e70087dcbf59cc7f190a8d7a8e90c9cdd281300f5e2b13b3b95c3c14bffb1 |
| openshift-ansible-lookup-plugins-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: ab4879db5f388b95bd381a598eb36406485798d8384d66dee428dd7fb6658537 |
| openshift-ansible-playbooks-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: 7be54fb47f467624628af16281d2c0b24c281f1a3018c179c817b8a520e860fd |
| openshift-ansible-roles-3.3.84-1.git.0.4104d2d.el7.noarch.rpm | SHA-256: aeccc8f0ae23e7076334b70dfefa341e32d76016711fed3e19385ddc2fc20516 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.