RHBA-2017:1666 - Bug Fix Advisory

Topic

Updated atomic-openshift-utils and openshift-ansible packages that fix several bugs and add enhancements are now available for OpenShift Container Platform 3.5, 3.4, 3.3, and 3.2.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

The atomic-openshift-utils and openshift-ansible packages contain the installation utility and Ansible requirements for installing and upgrading OpenShift Container Platform 3.

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.5/release_notes/ocp_3_5_release_notes.html

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To apply this update, run the following on all hosts where you intend to initiate Ansible-based installation or upgrade procedures:

# yum update atomic-openshift-utils

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 3.5 x86_64
• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64

Fixes

• BZ - 1436343 - [3.4] protect package versions upon upgrade
• BZ - 1436348 - [3.3] protect package versions upon upgrade
• BZ - 1440167 - Control Plane Upgrade Fails if Nodes Do Not Have Access To Latest Excluder
• BZ - 1440296 - [3.4] The etcd db file should be backed during upgrade
• BZ - 1440299 - [3.3] The etcd db file should be backed during upgrade
• BZ - 1440303 - [3.2] The etcd db file should be backed during upgrade
• BZ - 1457914 - [3.4] upgrade get applied to all nodes if openshift_upgrade_nodes_label fits no label
• BZ - 1460233 - [3.4] Docker MTU is wrong when SDN is adjusted to smaller MTU
• BZ - 1460235 - [3.5] Docker MTU is wrong when SDN is adjusted to smaller MTU
• BZ - 1460969 - [3.5] Redeploy CA will try to restart services when certs are expired, causing failure.
• BZ - 1460970 - [3.4] Redeploy CA will try to restart services when certs are expired, causing failure.
• BZ - 1460971 - [3.3] Redeploy CA will try to restart services when certs are expired, causing failure.
• BZ - 1460972 - [3.2] Redeploy CA will try to restart services when certs are expired, causing failure.
• BZ - 1462276 - [3.5] Ansible playbook fails due the incorrect openshift-master.kubeconfig
• BZ - 1462280 - [3.4] Ansible playbook fails due the incorrect openshift-master.kubeconfig
• BZ - 1462282 - [3.3] Ansible playbook fails due the incorrect openshift-master.kubeconfig
• BZ - 1462283 - [3.2] Ansible playbook fails due the incorrect openshift-master.kubeconfig
• BZ - 1462721 - [3.5] Liveness Probe Port for custom routers wrong after openshift upgrades
• BZ - 1462995 - [3.5] upgrade get applied to all nodes if openshift_upgrade_nodes_label fits no label
• BZ - 1463139 - [3.4]Failed to detect new openshift version due to miss cleaning yum repo during upgrade
• BZ - 1463772 - [3.5] The installer should allow for redeploy of etcd CA only.
• BZ - 1463773 - [3.4] The installer should allow for redeploy of etcd CA only.
• BZ - 1463774 - [3.3] The installer should allow for redeploy of etcd CA only.
• BZ - 1463775 - [3.2] The installer should allow for redeploy of etcd CA only.
• BZ - 1464543 - [3.5] openshift_cert_expiry Can not parse certs with DER encoded Serial Numbers
• BZ - 1464544 - [3.4] openshift_cert_expiry Can not parse certs with DER encoded Serial Numbers
• BZ - 1464545 - [3.3] openshift_cert_expiry Can not parse certs with DER encoded Serial Numbers
• BZ - 1464546 - [3.2] openshift_cert_expiry Can not parse certs with DER encoded Serial Numbers
• BZ - 1465263 - [3.5] openshift_master_cert_expire_days is undefined in 3.5 installer

CVEs

(none)

References

(none)