Synopsis

OpenShift Container Platform 3.6 and 3.5 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.6.173.0.83 and 3.5.5.31.48 are now available with updates to packages and images that fix several bugs and add enhancements.

Description

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.173.0.83 and 3.5.5.31.48. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:3439

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html

https://docs.openshift.com/container-platform/3.5/release_notes/ocp_3_5_release_notes.html

All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.6, see the following documentation, which will be updated shortly for release 3.6.173.0.83, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html

For OpenShift Container Platform 3.5, see the following documentation, which will be updated shortly for release 3.5.5.31.48, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.5/release_notes/ocp_3_5_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.6 x86_64
• Red Hat OpenShift Container Platform 3.5 x86_64

Fixes

• BZ - 1414706 - [RFE] openshift-ansible should configure default loggingPublicURL when openshift_master_logging_public_url not set
• BZ - 1420229 - [IntService_public_295] upgrade from 3.4 metrics failed, no object is refreshed
• BZ - 1420684 - [intservice_public_324] Upgrade logging stack from 3.4.1 to 3.5.0 failed due to take the wrong namespace by ansible
• BZ - 1421580 - [intservice_public_295] ansible task abort if set node selector
• BZ - 1421630 - [Intservice_public_324]logging upgrade failed since node not well labeled
• BZ - 1422355 - [Intservice_public_324]Task "start fluentd" failed by unsupported parameter for module: label
• BZ - 1426615 - Show activity of the JVM console until content is loaded
• BZ - 1428849 - [IntService_public_324] Kibana route is inaccessible after logging was upgraded to 3.5.0
• BZ - 1443741 - openshift-ansible encoutners error when generating cert
• BZ - 1446737 - [3.5] Redeploy certificates fails with custom openshift_hosted_router_certificate
• BZ - 1462143 - Install CNS failed with error variable is undefined
• BZ - 1462517 - Failed to install v3.5 on mix env rpm master plus atomic node
• BZ - 1464393 - CNS installation using advance installer will fail if namespace for cns pods is not "default" namespace
• BZ - 1467558 - need openshift3/ose-service-catalog image with "v" prefix tag.
• BZ - 1469291 - Missing node level memory/usage
• BZ - 1474692 - Remove unsupported parameters from glusterfs example inventory files
• BZ - 1491566 - [3.6] Checks during installation fails, due to /var being split out on different filesystems.
• BZ - 1498595 - Cannot deploy CNS on OCP 3.6 as the heketi-storage-copy-job is trying to pull a wrong image "heketi/heketi:dev" instead of "rhgs3/rhgs-volmanager-rhel7:latest"
• BZ - 1501993 - Encoding UndefinedConversionError from ASCII-8BIT to UTF-8
• BZ - 1508150 - If an existing PVC used by an Elasticsearch DC is not labeled with logging-infra=support a new PVC is created
• BZ - 1508445 - [3.6] failed to start SDN plugin controller when Network CIDRS are invalid.
• BZ - 1511732 - [3.5] extended route validation does not catch newlines in certificate
• BZ - 1511925 - Can not login Kibana, Kibana error:[security_exception] no permissions for indices:data/read/mget
• BZ - 1512132 - metrics indexes should not save the _source
• BZ - 1512826 - [3.6] Registry console pod meets CrashLoopBackOff
• BZ - 1513768 - [3.6] Allow egress router to run on non-default interface
• BZ - 1515459 - [3.5] fact gathering fails during upgrade from 3.4 to 3.5 on delete_empty_keys(facts['master']['admission_plugin_config']['BuildDefaults']['configuration']['env'])\r\nKeyError: 'env'\r\n"
• BZ - 1516469 - Install playbook fails to run if ansible version is 2.4.1
• BZ - 1519296 - Image triggers don't start Custom Builds in 3.6

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.6

SRPM
atomic-openshift-3.6.173.0.83-1.git.0.1f70b16.el7.src.rpm	SHA-256: bece1a51f193810605da82680bd070192369d8892f88a047586127bda00c06b6
openshift-ansible-3.6.173.0.83-1.git.0.84c5eff.el7.src.rpm	SHA-256: 8b89486fd95d4b70f0345f2194c59de8ceb8d389920a7581c0c3407a012f6a61
rubygem-fluent-plugin-viaq_data_model-0.0.12-1.el7.src.rpm	SHA-256: 418b11cde02cddf74dea3eab996984a196a933114766d81e234bd7a909c6a435
x86_64
atomic-openshift-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 46eaa3a29d8b56476b1868c64267206b6c913ebe8e121fd0ddd92a7c537087d9
atomic-openshift-clients-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 59ba7c144fffb81c1812c3a51988f0079f3dc513a57cec04815a3f8be250b1db
atomic-openshift-clients-redistributable-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: e4b826828ae150578316d551f8100df34d4e9b06efe4cf8c00e9d193d1231f7b
atomic-openshift-cluster-capacity-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 81d475f7337a55c6bbb5d31c15f59c5aaffb4d3d1a4ead8538843c2287ba593f
atomic-openshift-docker-excluder-3.6.173.0.83-1.git.0.1f70b16.el7.noarch.rpm	SHA-256: 1b536758bd431bc82387f84df6f88c53a6b9a81f9b76108b17e069db18c777af
atomic-openshift-dockerregistry-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: f3b502643db56199405583f041a101a98f82f5229bbfb4166c982dae32bc11e8
atomic-openshift-excluder-3.6.173.0.83-1.git.0.1f70b16.el7.noarch.rpm	SHA-256: 8f22328e5cc84f29baff4881e70b46c28a79d5c2797cfd68fdf322e732ce767b
atomic-openshift-federation-services-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: ea284bb6e4c950b2f5b9993d976d4d233981989b5bc121cf1bfb44153f128894
atomic-openshift-master-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: c2024cd761975fb6da038939442e5694bc3cf39c72e177d59d405868d0d7b1d1
atomic-openshift-node-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: fef0cf6d16c664c5f8041f6162ffb4914cc181426aa0d7701c0c2e3ff4e46ce7
atomic-openshift-pod-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 0f924e8e2f45152c2e3715b25c73012d21025fa7c5fdc5d05ac411011c48497b
atomic-openshift-sdn-ovs-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 284172e202ed0f86137a80b9babac40c24c9a76cd92f8f5256e99ba64a6f68a1
atomic-openshift-service-catalog-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 097b152b098abcd650502a558396e3f8876bab8850bc6650440db71fd34dc148
atomic-openshift-tests-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: a0abf5843b2cf8c06474d5820d467e39a35a050b2bbad9ef4f014f171d22102e
atomic-openshift-utils-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: f3f1eacefc6a727b2db362a5c1c35575458ecc6f02003fdc9221c34e04813430
openshift-ansible-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: 9f3ff78d8c1ed156e5cb2615e3ef191be2d28f1cb147a570b3c42ed26ebe2c45
openshift-ansible-callback-plugins-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: fbef73213c9d465879c99719776b262d05650941288e45eb11562e82c322a611
openshift-ansible-docs-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: 92abba197cd09cd0daf8b1a045e3b34a46c99f632cbce7f59b8325f08b60875b
openshift-ansible-filter-plugins-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: d2191ff37c38b4a71dfd7c5afacae3d15e8da558332bc954b060d340afe2e43f
openshift-ansible-lookup-plugins-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: 32abfd93a6a70fd2d51284160b5812bc808723d792512a83533a344e5ae6bd74
openshift-ansible-playbooks-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: f2f39c28cf37136bfd8abb00d726cc80f996ac94cb92180aed740343471d94c5
openshift-ansible-roles-3.6.173.0.83-1.git.0.84c5eff.el7.noarch.rpm	SHA-256: 9abcbbf4f80fb6d003347704e830c76ced9c2ab82f192ad0cd6a4624194a9ea7
rubygem-fluent-plugin-viaq_data_model-0.0.12-1.el7.noarch.rpm	SHA-256: 1b36bc62d5ab67c84bb991eee7daba86faf9e54bb6084229769aa378495969a9
rubygem-fluent-plugin-viaq_data_model-doc-0.0.12-1.el7.noarch.rpm	SHA-256: 5a7fb4aa94b91d1ad6e09519bb8f27da600ce12dcd38f6a72c4ca0f4a6685915
tuned-profiles-atomic-openshift-node-3.6.173.0.83-1.git.0.1f70b16.el7.x86_64.rpm	SHA-256: 2fb4c43028c3f80a209b285852ec48e6f1c69e72380436649bdb1a1764d69416

Red Hat OpenShift Container Platform 3.5

SRPM
atomic-openshift-3.5.5.31.48-1.git.0.245c039.el7.src.rpm	SHA-256: ba9c827baa3d6da7897b1668a4d58ab64f0fa37867ecce5b123cbdf04d884c99
openshift-ansible-3.5.146-1.git.0.fee1c99.el7.src.rpm	SHA-256: c138f6484be7ae7069210fc4d7273fc510c7ac408849ce80343bc92cf55a1cfc
openshift-elasticsearch-plugin-2.4.4.17__redhat_1-1.el7.src.rpm	SHA-256: 4fe6f85b3c7d275cad86e65432ee8b95b0c566ac68defc86961cab5357dc919e
x86_64
atomic-openshift-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 0bc58904f5d835cd8363f84bac530912b60816c43d708ede27f873e3d597e618
atomic-openshift-clients-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 160ce0499b05dcc36443d72385f7ea0671e7f32f9769d0b52ecd8278d090657b
atomic-openshift-clients-redistributable-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: eadeba2458a82142b54207a3e93c715854ff618d41c063b3840b5dc4a5eec5ea
atomic-openshift-docker-excluder-3.5.5.31.48-1.git.0.245c039.el7.noarch.rpm	SHA-256: 55798f49049b5ac8baa73d93a87e564a23c2b18d5e311f76eafd098fd9d7eb1c
atomic-openshift-dockerregistry-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 90512dd635f1d8e5dc776c9b94fa95c8a035f192924b6b8f79a71a42641078f4
atomic-openshift-excluder-3.5.5.31.48-1.git.0.245c039.el7.noarch.rpm	SHA-256: 37328d33049806d0011a67a179dbfaf6c14cb112a0f01ea14e685d8c3d9b1afe
atomic-openshift-master-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 91c9e0d98a190b16c786c60ac7bce66415d1d11b8a2733f8045eb1d68eefcf35
atomic-openshift-node-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 921e75b9ddc7ae0b238e03411e87333e437b03145ab81bd90126d0f95f829b2d
atomic-openshift-pod-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: c62db83ed4597ef97c26d6e7a22c0e09e9aafc66875a9f24728b66ae43460b94
atomic-openshift-sdn-ovs-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 09ec7b430d70f94a01cdbf4c864fd8a31f56bf0309a9d21b0e80ff0cb0e6774e
atomic-openshift-tests-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: 127673ebddf811b8a5650e66b5fcb5465bacdb2ebfb1d85ebc72a019f433f8f0
atomic-openshift-utils-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: 425d4bac07d9371ea7d01c14f3a002dcfd689067a97d02c60709e0d83d28f680
openshift-ansible-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: db79ee59587ded1620418c6248cdff1b24498e926e05ea3796b3882eb7575a30
openshift-ansible-callback-plugins-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: fcee4e1f31a67530369b65ef58016833527dec9f5d7cdd94d3426df71dc2bdea
openshift-ansible-docs-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: 0898d3b394757244c8e5068ef347777d2c2affbbf9aa4b76715e36a349ccdc12
openshift-ansible-filter-plugins-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: f15d4e9c51489a869422c5952d3203d9a8b956f01cb9a3ddc1de25d88ca7c277
openshift-ansible-lookup-plugins-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: 79b693df89efd19638d6479096db8de52bc458bd6a975969c0a1898ddddeb739
openshift-ansible-playbooks-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: 3573ce3b28bbd7ddf001139ff28a4112df32c0d1bfb8ae4865e93447f17a8523
openshift-ansible-roles-3.5.146-1.git.0.fee1c99.el7.noarch.rpm	SHA-256: 0e082cd3b7dec2840f7679212f372acac10c7eee69f921f4ed69c7bfda2d9b64
openshift-elasticsearch-plugin-2.4.4.17__redhat_1-1.el7.noarch.rpm	SHA-256: ce1d2e52097e6e5c42379ba91bd6f0b6382d2da4fa989dfa718ebe98db937a77
tuned-profiles-atomic-openshift-node-3.5.5.31.48-1.git.0.245c039.el7.x86_64.rpm	SHA-256: efba42da55ef93aa265b7de9a7eea6250a53e9889f8cbe5972598124173d067b