Synopsis

Red Hat OpenShift Container Platform 3.7 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

An update is now available for Red Hat OpenShift Container Platform 3.7.14.

Description

OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for this release. An advisory for the container images for this release is available at: https://access.redhat.com/errata/RHBA-2017:3465.

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.7, see the following documentation, which will be updated shortly for release 3.7.14 for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.7 x86_64

Fixes

• BZ - 1247627 - [RFE] pod list in "browse" tab shows spinning icon which is confusing
• BZ - 1430035 - Support HTTP Strict Transport Security (HSTS) policy
• BZ - 1456988 - [RFE] ability to set the cookie name, with an annotation
• BZ - 1479672 - collectd.cpu.percent is transformed to collectd.CPU.percent
• BZ - 1494912 - metrics indexes should not save the _source
• BZ - 1497274 - byo failed against atomic hosts with containerized=True: docker_image_availability
• BZ - 1502033 - Service catalog fails to propagate Service Plan updates to clusterServicePlan object
• BZ - 1505757 - Sample command in oc new-app help page not work
• BZ - 1506073 - when a user has an explicit value for cpu_limit that is lower than the default for the cpu_request, we should be setting the cpu_request to be the same value as the cpu_limit
• BZ - 1506361 - Log Spam: error syncing image
• BZ - 1507246 - Add the ability to have the GlusterFS ansible script run more than once
• BZ - 1507433 - oadm migrate storage failed in upgrade process
• BZ - 1508061 - master-controllers panic running conformance. concurrent map iteration and map write in start_master.go
• BZ - 1508938 - Context needs to be sent with UpdateInstanceRequests from catalog to brokers
• BZ - 1509271 - [ASB] one dependency is missing in PostgreSQL(apb)
• BZ - 1509366 - Error syncing catalog from ServiceBroker
• BZ - 1509793 - Not able set env vars in jenkinsPipelineStrategy
• BZ - 1510496 - openshift_logging_es_pvc_size not honored by openshift-logging playbook
• BZ - 1511110 - Logging deployments are not maintaining the association of DC to PVC claim for Elasticsearch causing deployment failures
• BZ - 1511149 - Downstream MySql APB Deprovision Fails unexpected key 'propagation_policy'
• BZ - 1511719 - operations logs lost if no ops cluster and no @OUTPUT label
• BZ - 1512430 - [ASB]postgresql APB provision fails in multitenant environment
• BZ - 1512679 - Failed docker builds leave temporary containers on node
• BZ - 1512793 - fail to re-install ocp with ansible-service-catalog deployed
• BZ - 1512832 - [3.7] Registry console pod meets CrashLoopBackOff
• BZ - 1512978 - [3.7] Fix support for CNS deployment
• BZ - 1513054 - Delete /var/lib/dockershim/sandbox/* after drain when upgrading from 3.6
• BZ - 1513767 - [3.7] Allow egress router to run on non-default interface
• BZ - 1515457 - [3.7] fact gathering fails during upgrade from 3.4 to 3.5 on delete_empty_keys(facts['master']['admission_plugin_config']['BuildDefaults']['configuration']['env'])\r\nKeyError: 'env'\r\n"
• BZ - 1516530 - [3.7] glusterfs installation failed: Unable to find 'v3.7/glusterblock-template.yml'
• BZ - 1517225 - Install CNS failed when copy initial glusterblock provisioner resource file
• BZ - 1518501 - Builds failing after new Red Hat jenkins images updated
• BZ - 1519034 - Jenkins-2 with persistent storage breaks when rolling out update using image 67a1ed17c726
• BZ - 1520026 - [3.7] GlusterFS: Add configuration for auto creating block-hosting volumes
• BZ - 1520926 - [3.7] Iptables not getting updated with correct endpoints
• BZ - 1523335 - openshift_env facts overwrite top level keys

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.7

SRPM
atomic-openshift-3.7.14-1.git.0.593a50e.el7.src.rpm	SHA-256: aa4ff705de95367c7124b59ae19f173524d6e885838fe0ebd686b3954d551e2d
cri-o-1.0.6-1.gitf19b368.el7.src.rpm	SHA-256: e2b286c33af92213d3e51416868e83f75ab7cf26bbe90c9ed9c957f05873ac79
openshift-ansible-3.7.14-1.git.0.4b35b2d.el7.src.rpm	SHA-256: 0bc146371b73b09f9be834b577ad5cc0d9cfea6a5dcbe3f973117628d502d7a1
openshift-elasticsearch-plugin-2.4.4.17__redhat_1-3.el7.src.rpm	SHA-256: 62b21dd920936eafed060fbaf24fb17c2eea99220605ea0d513b69342fca7020
origin-kibana-4.5.1-8.el7.src.rpm	SHA-256: 5599199f404b492401b90e61de1d48822621d7d5eab3944fe6d141e2a670b1a5
python-clamd-1.0.2-4.el7.src.rpm	SHA-256: 24a727523f2f4cf42c69383231fe704966d31d7d1c9e4f4b1ff7b718c6b18afb
python-keyczar-0.71c-2.el7aos.src.rpm	SHA-256: eeaccfacea1fb6bc13dc9f74a8e9c50e4bbe68171e3642c08e0aca1e85c738a7
python-setuptools-17.1.1-4.el7.src.rpm	SHA-256: 45a4b21b5b1895b4d0c3bd379a4cb19acc9c768a02f6097800fe6d343b9a36ea
rubygem-fluent-plugin-viaq_data_model-0.0.12-1.el7.src.rpm	SHA-256: 418b11cde02cddf74dea3eab996984a196a933114766d81e234bd7a909c6a435
scons-2.5.1-1.el7.src.rpm	SHA-256: 7a515924c804ce6d63a8ffe59d2404f518b68e2be53735d69a67d557c32b979d
search-guard-2-2.4.4.10_redhat_1-3.el7.src.rpm	SHA-256: a255e5d95edb0abeda2b8658888bbdda0780feeb2604f94052e4d334d11d21bf
search-guard-ssl-2.4.4.19_redhat_1-1.el7.src.rpm	SHA-256: 1fcaa06c5e5adb36ac18efbcfa228ce4c2e2a93db399db7089ecb8e1bfa20639
v8-3.14.5.10-25.el7.src.rpm	SHA-256: 3a2b735ccb42483b1fa39d5aeabf881f388694119616925008aff2d519dc74c4
x86_64
atomic-openshift-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 0462614d30d2b4e181bfd533925074f5314732711438d00f45790c216e394657
atomic-openshift-clients-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 0b754e00801047e0ab1a53021a664c671984b66b31578d9072d9c2dcaf120494
atomic-openshift-clients-redistributable-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 05e8ad27bffd649ac49a85b2adbd99f0dffd19ce090d62341e2d4067f926b7eb
atomic-openshift-cluster-capacity-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 7cae43a3f004976575c3d342032815c7b21bb842325d6fec0f389e062e674df9
atomic-openshift-docker-excluder-3.7.14-1.git.0.593a50e.el7.noarch.rpm	SHA-256: 29aa44225b0177ab3bc5bca5ca602020b647764909834946cdf86371551f9ef9
atomic-openshift-dockerregistry-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: b1066fee23348ec694b255ade7132dde37724a2dd1d5172f3e26c23a584c77c4
atomic-openshift-excluder-3.7.14-1.git.0.593a50e.el7.noarch.rpm	SHA-256: 8f824f25fdb1069c04ce3490a25f5117eb0556199ed627ec7a7a470995c5d92e
atomic-openshift-federation-services-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: fcb80a671b6483dbb75bdce435e3e88af0605ab849941c6d0b4f0c8c6a7aed5c
atomic-openshift-master-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: a7b8066a526282a5c4b872e39fd50c6406e29c6079376d98804d150fc8c10faf
atomic-openshift-node-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 3de1f9fdb9362a07ca4bbad9a30932664a5fbfcb77bf1d15a6e902b9fe5b4826
atomic-openshift-pod-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: c9deb028fa6556ff6ece74595b30a4a2a8eaa52427298550f219079ce088e2f6
atomic-openshift-sdn-ovs-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: a7fbdd2721bc45e5c604218acf661c0278c8760c2e3c728dbb8db3548d085eac
atomic-openshift-service-catalog-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 746f8ffbdc880dc5ea16b15b1a1677abf89c53b3b2d014cf51df33789e4c4b31
atomic-openshift-template-service-broker-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: ac33752732d263daf247dc1ee00186c8e727150189b0841d3454425ca20cf449
atomic-openshift-tests-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: 23ead86abf686de200f4592d5782e119db91c78983f979e551551c2998e356b2
atomic-openshift-utils-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: 685132aa3ebe08bad9fe99616838d18c7850d1d5a5a9ce509a9cb941935a94c3
cri-o-1.0.6-1.gitf19b368.el7.x86_64.rpm	SHA-256: 99867517b31e09e1ed0b49031f42816af734c3c81d3672c1655e77ace107d089
cri-o-debuginfo-1.0.6-1.gitf19b368.el7.x86_64.rpm	SHA-256: a10265c477566fa45280f2e569fe056a1086f07009c79b44e81cc894a099b8a6
openshift-ansible-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: 81d06962c842c730fe488591e4ed7dbe3604b0ad3001a20cf22eea7f4fc71950
openshift-ansible-callback-plugins-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: c1d0c15e03e5c0a6d1630848f608ccc2f4417c0993d2457dd587094579078db0
openshift-ansible-docs-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: ea7fcfe08f956d5a8e4ede217c949041f5c7ac80468cec6742e7a5e0f1bad041
openshift-ansible-filter-plugins-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: 4885c65aa9e42894887564dc350c99ba6d7ef85d4c3c2631e7761c50e7f925d5
openshift-ansible-lookup-plugins-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: 72db1d0d4d5b37bf0c500d5ecfdabf94a6e6a9b7aaf780b01dcff6374fe7a71b
openshift-ansible-playbooks-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: ad2959b1bdcc1df5e03c7400e1e08cbbbec4a8a4e0c6649d40774a2d69909df9
openshift-ansible-roles-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm	SHA-256: 9d3dcf0f1a6896cefec89cd6f34b1bc39ef538991570cd331d891c8913af17a6
openshift-elasticsearch-plugin-2.4.4.17__redhat_1-3.el7.noarch.rpm	SHA-256: a82c27d03afbd85907af7a94503d573ca26fc9934782679025f46da2a12f841f
origin-kibana-4.5.1-8.el7.noarch.rpm	SHA-256: 5608f22c2539022d88a3894eb2ce3f6d527eb548d3ffe2032422521c06d4bc82
python-keyczar-0.71c-2.el7aos.noarch.rpm	SHA-256: 40dc9a3c299a46c6bc41384449d3185d65061e03c18decdef4fa64ae9aa1c61e
python-setuptools-17.1.1-4.el7.noarch.rpm	SHA-256: de4152fa64eb27a3834aaf0ad9899ba43feb183904d9bf5d06177ea07f015d6c
python2-clamd-1.0.2-4.el7.noarch.rpm	SHA-256: aac445e9fd22af877dcc913152207c3f0a5b37c7b687a8961ba214f65fa00bad
rubygem-fluent-plugin-viaq_data_model-0.0.12-1.el7.noarch.rpm	SHA-256: 1b36bc62d5ab67c84bb991eee7daba86faf9e54bb6084229769aa378495969a9
rubygem-fluent-plugin-viaq_data_model-doc-0.0.12-1.el7.noarch.rpm	SHA-256: 5a7fb4aa94b91d1ad6e09519bb8f27da600ce12dcd38f6a72c4ca0f4a6685915
scons-2.5.1-1.el7.noarch.rpm	SHA-256: bd3e3a5ac4dc536af4085d79e9231e46541e6f3e7c048c7c14afecdee0256fe0
search-guard-2-2.4.4.10_redhat_1-3.el7.noarch.rpm	SHA-256: edd659a6acfaaa1702a66d575a8f3f8916eb9c4f8616ca829db561bf2058c2f2
search-guard-ssl-2.4.4.19_redhat_1-1.el7.noarch.rpm	SHA-256: 6bcad99d457ab2cfa6f40c2b0f2c9a06c90eb0b063d0eb7d66cf49426f8e7b6b
tuned-profiles-atomic-openshift-node-3.7.14-1.git.0.593a50e.el7.x86_64.rpm	SHA-256: de2c0ce3ca31e54b6e8de05e72529fa7568e97e0ce05c099ffc292977e7879b8
v8-3.14.5.10-25.el7.x86_64.rpm	SHA-256: 0d342f14d90643e2d232aa9f70b85b35c27a4cc1f3a0dbed53b773da0a771e98
v8-debuginfo-3.14.5.10-25.el7.x86_64.rpm	SHA-256: 8fb2c1c819632e28282cd7535383e794ddc032e8e72b1ce4a703e02841439e2d
v8-devel-3.14.5.10-25.el7.x86_64.rpm	SHA-256: 60a46cd6005e140d82cdee6fb0c561303d3fe9f4c1c56336abf18e6878abeb87
v8-python-3.14.5.10-25.el7.x86_64.rpm	SHA-256: 875d29db202ff403d7eeacdf34a4bf096142b68ac25912d429d1f86e765dbea0