Synopsis

OpenShift Container Platform 3.5, 3.4, and 3.3 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.5.5.31, 3.4.1.44, and 3.3.1.36 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.5.5.31, 3.4.1.44, and 3.3.1.46. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:1829

This update fixes the following bugs:

• A bug in a regulator of concurrent file system access could cause a routine to hang. When the registry configured with the file system storage driver had been under heavy load, some could hang indefinitely. With this bug fix, the issue with the regulator is addressed and the concurrent pushes no longer hang. (BZ#1465325)
  
• Sometimes during index recovery, the SG ACL initialization would fail because the cluster did not get into the proper state before timing out. The ES cluster is rendered unusable because there is no initial authorization and no requests are allowed. Continually try to seed the SG ACLs until they succeed and the ES is functional. (BZ#1470368)
  
• Use underscores instead of dashes for the memory switch. Memory settings are now respected by the nodejs runtime. (BZ#1468734, BZ#1468987)
  
• The storage path needed to be evaluated correctly for ops clusters. Use the information from the logging facts to determine if a volume should be reused. (BZ#1466695)
  
• The installer handles both installation and configuration of logging during the initial deployment, as well as post-deployment by calling one of the ad-hoc playbooks. In the case where a default project nodeselector was used for the initial installation, the ad-hoc logging deployment would fail due to selector conflicts. Now, the logging project is force created with a null nodeselector to avoid conflicts regardless of when the logging deployment is performed. (BZ#1470394)
  
• The JSON fields validation for the List element on the "From File" page was wrong. List could not be created due to its missing metadata field. Validation will now check if the element that is being created is a List and, if so, will skip metadata validation. The List element can now be created on the "From File" page. (BZ#1407186)
  

All OpenShift Container Platform 3.5, 3.4, and 3.3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.5, see the following documentation, which will be updated shortly for release 3.5.5.31, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.5/release_notes/ocp_3_5_release_notes.html

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.44, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.46, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.5 x86_64
• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64

Fixes

• BZ - 1407186 - Some resources defined in List couldn't be created through Import YAML/JSON
• BZ - 1408676 - [3.3+][Registry][Pruning] Orphaned blobs cannot be pruned
• BZ - 1460271 - [3.5] High CPU Utilization Openshift process
• BZ - 1461635 - [3.3] Hawkular Metrics cannot handle connecting to the Kubernetes Master when the ca.crt contains multiple certificates.
• BZ - 1465325 - [3.5][Backport] Concurrent build registry push hangs - baremetal cluster with CNS Gluster registry storage
• BZ - 1466695 - Running the logging playbooks resets elasticsearch-storage volume for es-ops
• BZ - 1467708 - [3.4] Don't rely on device name provided by Cinder
• BZ - 1467970 - Timeouts with Azure Disk attaching volumes to pods
• BZ - 1468308 - [3.5] Hawkular Metrics cannot handle connecting to the Kubernetes Master when the ca.crt contains multiple certificates.
• BZ - 1468734 - Kibana-proxy gets OOMKilled
• BZ - 1468987 - [3.4] Kibana-proxy gets OOMKilled
• BZ - 1470368 - SearchGuard times out seeding ES pod's .seachguard.$HOSTNAME index
• BZ - 1470394 - Logging playbook run in isolation ignores/conflicts with default node selector
• BZ - 1471844 - [3.4][Registry][Pruning] Orphaned blobs cannot be pruned
• BZ - 1472438 - [3.5][Registry][Pruning] Orphaned blobs cannot be pruned
• BZ - 1473599 - KIBANA_MEMORY_LIMIT: unbound variable
• BZ - 1474431 - controller-manager panic/crash on volume verification

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.5

SRPM
atomic-openshift-3.5.5.31.19-1.git.0.b23f57a.el7.src.rpm	SHA-256: cc674ca4a9d9ac47913d51c282c8dea292de37bb12c9a8e08aef7ae9d4be5820
nodejs-4.7.2-1.el7.src.rpm	SHA-256: 76250077fd8e7c82f4affd3cb3ac2d78d1c0c3955fe723d4fffab5f84090d8cb
nodejs-openshift-auth-proxy-0.1.1-1.el7.src.rpm	SHA-256: 97d59808890c4ab33291ce63cac2d0694826d641d4b5a264afee6f0b640c3b3f
x86_64
atomic-openshift-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: 3c07c9edf5c25cec85947b2046a19e94049005b99cdde0b74b28431ba6c95e43
atomic-openshift-clients-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: 5c59fee04dc64dc50960b97a73846a6ea1866d485148cffa5ced9e7964ea0450
atomic-openshift-clients-redistributable-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: 43dc6e8097c943d7b3769ce3e5d3f3bae9d51103fd44e10794edeacb7c36e1ff
atomic-openshift-docker-excluder-3.5.5.31.19-1.git.0.b23f57a.el7.noarch.rpm	SHA-256: bf25b9b8a06fc5891d9f4a3624badc9fe4c70efce683f994bb05265de4a4cc5a
atomic-openshift-dockerregistry-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: 126f6fd6e6d9288f54f1fea4cf4491262c65b6e586e799d5ea80d56a7efd5347
atomic-openshift-excluder-3.5.5.31.19-1.git.0.b23f57a.el7.noarch.rpm	SHA-256: 4d497ac52986788f2bc872195545ef4257e6b1281d55a379286e7336b4f0ae41
atomic-openshift-master-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: b3892b38e3cac78860c2fd479976085271ed9eb2a1a690bb0da40c1291241d01
atomic-openshift-node-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: db6f514778e85965ef9e5bcc97dd7f93b227498c98a823a832a5d4a33878bc42
atomic-openshift-pod-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: be21018a5c6d32eb6f993af0dcb86db680bc0758266c23f3a4249619e68d6397
atomic-openshift-sdn-ovs-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: e91cb275bedf62bbfb1420747f1298b6b99e9225ce8ef1abc846626c4fd786ec
atomic-openshift-tests-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: 93bc50f578a78ff39b955c4604ec2139635d9bffebf5be9c2171085af1368e45
nodejs-4.7.2-1.el7.x86_64.rpm	SHA-256: 407efff011c133aad5857fae0f2bd4f9ea309d49e67d00bc3a35987955d517b6
nodejs-devel-4.7.2-1.el7.x86_64.rpm	SHA-256: 75f8a8d47e49184e30fac5d5805b4da5bac0e4344d8ffdf57c00933fe9b7caf3
nodejs-docs-4.7.2-1.el7.noarch.rpm	SHA-256: 41125e20151648e8222f195c75f3fca21d4dbb4316c0dfdd39d756c0041d4df2
nodejs-openshift-auth-proxy-0.1.1-1.el7.noarch.rpm	SHA-256: 47cd3585a952f9bbf3339f8018ff3239173fa9d73889eefec2585f47a568d5a2
tuned-profiles-atomic-openshift-node-3.5.5.31.19-1.git.0.b23f57a.el7.x86_64.rpm	SHA-256: 59844104f74df285859ab57b629a2244d382e46795fe7055448866a6128bea17

Red Hat OpenShift Container Platform 3.4

SRPM
atomic-openshift-3.4.1.44.11-1.git.0.1cdd0f1.el7.src.rpm	SHA-256: 28632f124bdcbc03e70a7b6418adb6d38aa843ecbd2725ee8f45a7e2c0b5d8aa
nodejs-4.7.2-1.el7.src.rpm	SHA-256: 76250077fd8e7c82f4affd3cb3ac2d78d1c0c3955fe723d4fffab5f84090d8cb
nodejs-openshift-auth-proxy-0.1.1-1.el7.src.rpm	SHA-256: 97d59808890c4ab33291ce63cac2d0694826d641d4b5a264afee6f0b640c3b3f
x86_64
atomic-openshift-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: f2f3bb2f541e1f7820994f4953b2292847d0117a79c7916cb9fe5cffdf774757
atomic-openshift-clients-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: 667eb65ef9ec9315dbb6abf672f8ca7d1ffadc586b4e1cd3cd49cd60577dcf5f
atomic-openshift-clients-redistributable-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: 1a81a5a3d7e65dcda1fb31842dc022f87ec80542cb38f4a15dc990ca0b48840b
atomic-openshift-docker-excluder-3.4.1.44.11-1.git.0.1cdd0f1.el7.noarch.rpm	SHA-256: dd277f627d11794896edf940fea19ce25df528825a1a7c43ca5b7932e3bb0a16
atomic-openshift-dockerregistry-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: eff415d7ffba853fb09f4f621d1eb0d37360e9b30462b68a7d8b5d982dddf7f6
atomic-openshift-excluder-3.4.1.44.11-1.git.0.1cdd0f1.el7.noarch.rpm	SHA-256: d85e65ec28ee8ea94f8059c2bdfdd68fd053a4f443f277f72e2f8294befc69d7
atomic-openshift-master-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: a706f356d4db2744bc376b1a6a3b522c9fb9eed89946ad171082df24bfe2623e
atomic-openshift-node-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: fd6c50e6f913f0999923ad096d5433def6c4a95eabbca307cb3e8de58867bf23
atomic-openshift-pod-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: 09788a9f828f6170b9dab900ca1cf19a9afb0b23cdf731c6082aa05a46a7ac86
atomic-openshift-sdn-ovs-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: 5e76fe77e078262cb419aeaa01798f26c0b4f8ffb7e7fb249f9bafb440b3b2d3
atomic-openshift-tests-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: a132bd369480bb3e786eb78b24b41e891596c399decbb81ae59cc520f6cafb61
nodejs-4.7.2-1.el7.x86_64.rpm	SHA-256: 407efff011c133aad5857fae0f2bd4f9ea309d49e67d00bc3a35987955d517b6
nodejs-debuginfo-4.7.2-1.el7.x86_64.rpm	SHA-256: 2471e63cc210382bec5b27524210e259d1f81f0a5f6b21dc16bdaa932079d755
nodejs-devel-4.7.2-1.el7.x86_64.rpm	SHA-256: 75f8a8d47e49184e30fac5d5805b4da5bac0e4344d8ffdf57c00933fe9b7caf3
nodejs-docs-4.7.2-1.el7.noarch.rpm	SHA-256: 41125e20151648e8222f195c75f3fca21d4dbb4316c0dfdd39d756c0041d4df2
nodejs-openshift-auth-proxy-0.1.1-1.el7.noarch.rpm	SHA-256: 47cd3585a952f9bbf3339f8018ff3239173fa9d73889eefec2585f47a568d5a2
tuned-profiles-atomic-openshift-node-3.4.1.44.11-1.git.0.1cdd0f1.el7.x86_64.rpm	SHA-256: b5f8037807aaadadb2144487099a0c2eac14d0436ac10aab137f200f100d1843

Red Hat OpenShift Container Platform 3.3

SRPM
atomic-openshift-3.3.1.46.11-1.git.0.8c644a2.el7.src.rpm	SHA-256: 69c8b5b26b03d5732dfa696d2840124c7a270d2e6d3fb548fe71be8ea71bf4c8
x86_64
atomic-openshift-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: 480f8f8fcead85996b0a251a795a933be3544dcb4d2a98013bed846b8f4b736f
atomic-openshift-clients-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: ce7523cf1a74a2a00a520b9560d75cc8e52fec397445c04369d283f091c13650
atomic-openshift-clients-redistributable-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: 7244a7e70535acbfbc8686f316e69404cee2db5e49e78d8459a9c69cffd51e12
atomic-openshift-docker-excluder-3.3.1.46.11-1.git.0.8c644a2.el7.noarch.rpm	SHA-256: 23b3d5d7428000923b4baaf4197ad53a5faf3861fa9d2d1d4613d84e5d2846d2
atomic-openshift-dockerregistry-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: 50b683de8fc60d12f9b86b3193879776659eaa7b02b972a219d92f92d3c8bd6c
atomic-openshift-excluder-3.3.1.46.11-1.git.0.8c644a2.el7.noarch.rpm	SHA-256: ed102bb1afdf9187f994f51298ab19b76663433a0d75ecb1893adc469995dd95
atomic-openshift-master-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: b14f7ad6a50aa2f41a1cabfb9284209eeaa1a462ab631d30af4e7c83a59f945d
atomic-openshift-node-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: c92db9f6ae475e05476b517c9bf819b2a36139c562f8f32056a08db266a80328
atomic-openshift-pod-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: db22fa1ce390fde65e27bf16bb107521192985d5d85ac4e462a11bf34226dc12
atomic-openshift-sdn-ovs-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: b66ac95303abacf39fae9d946f698488c6135a01baf635e8e771dddab66b0097
atomic-openshift-tests-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: a0748cdaba79abcf0799e0be5b8a32530ea71e28dff4051650ea2d21a9b9c4aa
tuned-profiles-atomic-openshift-node-3.3.1.46.11-1.git.0.8c644a2.el7.x86_64.rpm	SHA-256: 86f11a759ce5eda1b0aa5cd7071d58db5aec93c1532b7af896752a5930e34bca