Topic

Red Hat OpenShift Container Platform 3.9, which fixes several bugs and includes various enhancements, is now available.

Description

Red Hat OpenShift Container Platform is the company's cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

The OpenShift Container Platform 3.9 Release Notes provide information about new features, bug fixes, and known issues:

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

This advisory contains the RPM packages for this release. See the following
advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:0490

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

For instructions on new installations, see the following documentation:

https://docs.openshift.com/container-platform/3.9/install_config/install/planning.html

For instructions on how to properly upgrade existing clusters to OpenShift
Container Platform 3.9, see the following documentation:

https://docs.openshift.com/container-platform/3.9/upgrading/index.html

Affected Products

• Red Hat OpenShift Container Platform 3.9 x86_64

Fixes

• BZ - 1333030 - build fails to push if secret is created after the build starts
• BZ - 1378883 - oc adm diagnostics checks not existing systemd units
• BZ - 1383707 - SCC admission tries to mutate pods on update
• BZ - 1396404 - Sometimes "activeDeadlineSeconds" in ScheduledJob doesn't take affect
• BZ - 1419801 - 'new-app' and 'new-build' should tolerate adding a tag to the existing imagestream
• BZ - 1430322 - overlapped mount points
• BZ - 1440892 - Cannot attach Azure Disk If a bad disk is requested in the Pod
• BZ - 1463617 - right-click menu copy & paste is gray and disabled in import YAML/JSON ace editor in the chrome 59 browser.
• BZ - 1463844 - EBS Volume Cant Be Reused After Node Shutdown
• BZ - 1464657 - Random connection issues during router deployment after upgrade
• BZ - 1466216 - Redeploy etcd ca playbook didn't update correct ca.crt when etcd running as system container
• BZ - 1467557 - oc cluster up fails with --host-volumes-dir flag on Windows
• BZ - 1469411 - Can`t copy local directory & files to correct directory & files in a remote pod through "oc cp".
• BZ - 1480835 - [RFE] Support dynamic provisioning on Gluster for metrics and logging in openshift-ansible
• BZ - 1483579 - Create an haproxy-1.8 package
• BZ - 1488380 - No visible difference for DC and k8s deployment of same name on overview by default
• BZ - 1489603 - Volume unmounted but not being detached from node
• BZ - 1491100 - Install failed due to "openshift_hosted_registry_storage_azure_blob_realm" undefined
• BZ - 1491717 - Suppress the rejected routes in haproxy if router shards are used
• BZ - 1493955 - iptables -I FORWARD -d 172.30.0.0/16 -i eth1 -j ACCEPT' is needed while using flannel for openshift deployment on openstack for pod to pod communication present on different nodes.
• BZ - 1496256 - Deleted in use PVCs can break the scheduler
• BZ - 1496261 - log throttling reuses log position file
• BZ - 1496758 - Preserve storage configure values in logging-es deploymentconfig
• BZ - 1497038 - [RFE] Add a separate uninstall playbook for gluster which will remove all heketi and deploy-heketi related resources
• BZ - 1497408 - Failed to undeploy HOSA
• BZ - 1500207 - [R39yiZs4] Failed to parse max ARP entries errors appear in the node log
• BZ - 1500225 - [online-stg] `oc describe imagestreams -n openshift` and `oc new-app` with IS from `-n openshift` fail when using oc 3.7/3.8 VS 3.6 online-stg
• BZ - 1500897 - openshift-master/restart_services.yml fails with new 3.6 master installs
• BZ - 1501254 - Service secret was not deleted after deprovision
• BZ - 1502838 - [3.9] Invalid entries in namedCertificates when using openshift_master_named_certificates
• BZ - 1502850 - [DOCKER] Remove oci-umount spam
• BZ - 1502945 - End user can not create/list/describe/delete volumesnapshot.
• BZ - 1503260 - Jenkins Template Missing App Label to Display Properly in UI
• BZ - 1503601 - `oc apply view-last-applied` shows confusing "MISSING" in yaml/json output
• BZ - 1504075 - [3.9] Installer terminates after single node reports error despite error tolerance
• BZ - 1504464 - docker-registry pod does not uniformly use hostnames - docker push fails with proxy config
• BZ - 1505558 - Exposing UDP ports in a Dockerfile does not work in OCP 3.6
• BZ - 1505681 - openshift_logging_elasticsearch_proxy_image_prefix should inherit from openshift_logging_image_prefix
• BZ - 1505796 - `oc get -o=custom-columns` should display <no value> or empty for objects lacking the field
• BZ - 1506177 - Upgrade will fail if the number of etcd hosts is more than 3
• BZ - 1506651 - [CRI-O] CRI-O increasing memory usage over time
• BZ - 1506750 - [3.9] Check at install time if alleged openshift_ip value is actually openshift_public_ip
• BZ - 1506866 - [3.9] haproxy lb install failed when haproxy-1.7.9-1.el7.x86_64 is installed.
• BZ - 1507424 - Build always failed in cri-o env
• BZ - 1507469 - Tasks for nodes already in the cluster running unnecessarily during scaleup
• BZ - 1507816 - [CRI-O] CNI netns leaking in cri-o env
• BZ - 1508310 - There is ansible error "Error from server (NotFound): serviceaccounts \"prometheus\" not found" when uninstall prometheus
• BZ - 1508346 - [CRI-O] Restart cri-o service encounter failure
• BZ - 1508352 - [CRI-O] default log-level should avoid use debug in product
• BZ - 1508391 - [CRI-O] ASB etcd container cannot start in cri-o environment, but can work well in docker env
• BZ - 1508496 - Connection refused error when accessing hawkular-cassandra and hawkular-metrics prometheus metrics interface
• BZ - 1508561 - After running the config playbook invalid certificate for docker-registry.default.svc
• BZ - 1508563 - Image tag keeps disappearing
• BZ - 1508761 - [CRI-O] pod has no "HOSTNAME" environment variable
• BZ - 1508781 - [CRI-O] should support sysctls feature
• BZ - 1509028 - GCE dynamic provisioning going to wrong zone
• BZ - 1509082 - Installer should not put registry credentials in plain text in configmap for ASB deployment
• BZ - 1509129 - uninstall playbook didn't remove tuned-profiles-atomic-openshift-node
• BZ - 1509661 - show namespace in oc adm manage-node --list-pods
• BZ - 1509799 - [OnlineStarter][free-stg][free-int]"Failed create pod sandbox"---deploy failed
• BZ - 1509853 - openshift_hosted_router_registryurl and openshift_hosted_registry_registryurl setting are not honored
• BZ - 1510174 - occasional restart of atomic-openshift-master-controllers.service due to scheduler cache corruption
• BZ - 1510178 - Restarting the controller-manager while pod migration is in process can leave volumes permanently attached
• BZ - 1510294 - the configuration page of MariaDB(APB) shows mysql_xxx
• BZ - 1510486 - Incorrect Status Code For User With Invalid Permissions
• BZ - 1510573 - [DOCKER] Can't rsh into pod
• BZ - 1510786 - Error info should be more precise when create app in project with view role
• BZ - 1510804 - [APB]Keep spelling style consistent
• BZ - 1511097 - Better error description for multliple attach
• BZ - 1511400 - openshift ex dockergc can't clean image database if docker use devicemapper
• BZ - 1511576 - fs.go:359] Stat fs failed. Error: no such file or directory
• BZ - 1511852 - openshift ex dockergc encounter panic
• BZ - 1512473 - The Init:Error pod should not be "Pod Initializing" sandglass on pod page
• BZ - 1512825 - add mux pod failed for Serial number 02 has already been issued
• BZ - 1513706 - Heapster's Hawkular concurrency value should be configurable in ansible
• BZ - 1513859 - Failed to mount Azure File as a Persistent Volume in Azure regional cloud (Germany and so on)
• BZ - 1515058 - Scheduled image import performed every 15 sec with scheduledImageImportMinimumIntervalSeconds: 30
• BZ - 1515060 - Scheduled image import performed on non scheduled tags
• BZ - 1515527 - Need refresh manually after clear changes when add env from configmap/secret
• BZ - 1515972 - Review Jenkins JNLP slave setup script
• BZ - 1516569 - Unable to mount a secret inside another secrets mount point with kernel 3.10.0-693.5.2
• BZ - 1517605 - [RFE] logging Support crio
• BZ - 1517875 - RFE: Allow regular expressions in curator settings
• BZ - 1518386 - Jinja extrapolation for `openshift_hosted_...` vars doesn't work
• BZ - 1518502 - Creating oc tag alias shows importing latest image forever
• BZ - 1518684 - "ovs-vsctl show" on OCP nodes returns multiple "No such device" messages
• BZ - 1518912 - [us-west-2] failed to run CNI IPAM ADD: no IP addresses available in network: openshift-sdn
• BZ - 1519060 - OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc:5000 was removed within upgrade playbook run
• BZ - 1519193 - [APB]The `apb push -o` command works failed when to execute it outside of the cluster
• BZ - 1519619 - Elasticsearch configmap is rebuilt removing any customizations made by an admin
• BZ - 1519991 - The unidler fails when there is no network plugin
• BZ - 1521151 - Iptables not getting updated with correct endpoints
• BZ - 1523142 - timeout expired waiting for volumes to attach/mount for pod
• BZ - 1523354 - [starter-us-west-1] AWS API invocations from storage contributing to API call limit
• BZ - 1523534 - Provisioner pod fails to deploy becasue of incorrect image prefix
• BZ - 1523638 - default IMAGE_PREFIX for registry-console template should use fully qualified image name
• BZ - 1523681 - CNS installation fails when openshift_storage_glusterfs_wipe=true
• BZ - 1524379 - The output of `oc describe pv` contains uninterpreted golang code
• BZ - 1524707 - Once a route is given TLS, the TLS section becomes immutable
• BZ - 1524805 - Disconnected install fails at service catalog imagePullPolicy: Always
• BZ - 1524883 - [pod_public_799] Wrong message when request hugepage greater than limit hugepage
• BZ - 1525426 - link in "atomic-openshift-installer -h" is broken
• BZ - 1525817 - Print twice "Application Options" and "Help Options" in "asbd --help" output
• BZ - 1525819 - Warning dialogue box disappears automatically when click out of the box
• BZ - 1526887 - [ASB] The "white_list" doesn't work for the RHCC registry
• BZ - 1526949 - [ASB] The openshift registry of the ASB works fail
• BZ - 1527210 - Installer does not configure Kubernetes service IP for no_proxy for the docker-registry.
• BZ - 1527346 - Should keep tab headers when loading details for Pipeline BC
• BZ - 1527602 - egress-router pod does not reply to ARP requests if coming from members of a VIP
• BZ - 1527685 - New volume section is created for each volume add command that refer to same PVC
• BZ - 1527689 - Pods with multiple subpaths referring to same PVC multiple times fail to start
• BZ - 1528135 - [RFE] A glusterblock StorageClass could be create during CNS/CRS deployment
• BZ - 1528548 - Prevent jenkins to leak zombie processes
• BZ - 1528570 - Installer didn't set docker registry params on lb host
• BZ - 1528613 - Error pushing images with 3 levels of path, but filesystem directories are created
• BZ - 1529070 - Fail to upgrade master due to fact openshift_upgrade_target not set on nodes hosts
• BZ - 1529083 - Installer got wrong default crio image
• BZ - 1529467 - Should prevent user from adding configmap/secret data as env when configmap/secret has invalid format key
• BZ - 1529473 - `oc idle` fails to work for endpoints to rc/rs/deploy
• BZ - 1529478 - pods were in ContainerCreating status while enabling cri-o behind proxy
• BZ - 1530162 - Viewer should be able to view and process template for external creation flow
• BZ - 1530203 - Pods table should show Receiving Traffic column
• BZ - 1530366 - Placeholder for 3.9 Bugfix Advisory
• BZ - 1530403 - Installer fails noting no etcd group despite etcd hosts group that IS defined
• BZ - 1530924 - [trello mEpUJ2kQ] Create from image wizard should be closed after hitting "advanced options"
• BZ - 1531157 - logging-fluentd v3.9.0-0.16.0.2 immediately starts flooding "missing namespace" errors on startup
• BZ - 1531511 - User could not pull a private image from a docker registry when a pull secret is defined
• BZ - 1531513 - The new field AllowVolumeExpansion of StorageClass seems does not work.
• BZ - 1531558 - [BACKPORT 3.5] REST request log spam is back in OCP 3.7
• BZ - 1532060 - Router Panic: panic: runtime error: index out of range in cockroachdb
• BZ - 1532149 - Expand PVC failed message need to be more clear
• BZ - 1532512 - Expand PVC successfully but have a "VolumeResizeFailed" event
• BZ - 1532936 - Cannot add env vars into slave pod template in jenkins webconsole against jenkins-2-rhel7 image
• BZ - 1532942 - [APB] Run the Mediawiki failed via the `apb run` command
• BZ - 1532955 - Container logs was not sent to ES stack
• BZ - 1532960 - No Auto-recovery for atomic-openshift-node
• BZ - 1532966 - oc ex dockergc still remove the image though '--dry-run=true'
• BZ - 1532967 - cpumanager should graceful exit other than panic if not set 'kube-reserved' & 'system-reserved'
• BZ - 1532972 - [APB] Deprovision failed via the `apb run` command
• BZ - 1532975 - [APB] The apb tool should return fail info after the `apb run --tag` with invalid image
• BZ - 1532981 - Resize pv is failed for aws ebs volume
• BZ - 1532986 - PVC condition is still Resizing after Resizing is finished
• BZ - 1533099 - [3.9] Installer failed to configure AWS cloudprovider for EC2 C5 instance
• BZ - 1533153 - New auto egress IPs will fail after restarting node service
• BZ - 1533208 - Regression: Registry credentials are displayed in plain text in configmap for ASB
• BZ - 1533318 - [APB] Failed when running the `apb run` command outside of the cluster
• BZ - 1533348 - Failed to create pod with Bidirectional mount propagation
• BZ - 1533363 - [trello mEpUJ2kQ] Wrongly jump to homepage when click 'Clear Filters'
• BZ - 1533658 - broken symlinks in openshift-ansible-roles-3.7.14
• BZ - 1533753 - [trello R1ninKHf] Should display correctly roles created by user
• BZ - 1533818 - Route creating settings can not get to the weight percentage bar again after switch to integers editing input boxes
• BZ - 1534316 - [TSB] Should not show openshift/templates on Catalog after TSB enabled
• BZ - 1534320 - wrong format with total num of service items on home page in firefox
• BZ - 1534467 - Can not get expected response while using invalid bearer token
• BZ - 1534514 - mysql_password should be must option in configuration of MySQL (APB) in web console
• BZ - 1534715 - multiple DELETEs to the same binding result in multiple APB runs when async is turned on
• BZ - 1534720 - Invalid OVS rules when the node IP is updated
• BZ - 1534858 - [trello sg1xw7gG] Cannot set preferred landing page normally when user have multiple projects
• BZ - 1534879 - check the ES version should use the Running pod
• BZ - 1534883 - [ASB] Provision APBs failed by docker run
• BZ - 1534895 - apb remove --id * return 404 error
• BZ - 1534922 - No recommended version of Open vSwitch for OCP 3.9
• BZ - 1534933 - [3.9] installer need provide a way to add docker auth to kubelet for auto pulling infra image from an authenticated registry in system container env without cri-o enabled
• BZ - 1534955 - [vSphere] Failed to provision volume, Kubernetes node nodeVmDetail details is empty
• BZ - 1534957 - [ASB] ansible-service-broker not suppot pass the parameters by secret
• BZ - 1535182 - Regression: Registry names must be unigue
• BZ - 1535270 - PV and PVC bound failed event message is not clear
• BZ - 1535277 - PV and PVC could be bound with different accessMode
• BZ - 1535314 - Failed to expand PVC of cinder volume
• BZ - 1535323 - Unable to pull etcd system container behind proxy while using package docker
• BZ - 1535402 - [trello lo6HwQgu] BC edit page "Triggers" part has no webhooks display and "Add Webhook" link not working/aligned
• BZ - 1535639 - oc cluster up --service-catalog not updating clusterroles
• BZ - 1535902 - Failed to deprovision an unready serviceinstance
• BZ - 1535917 - Cannot deploy image and create a new project at the same time
• BZ - 1535929 - ASB unable to retrieve the network plugin
• BZ - 1535931 - New created database won't be preserved if update the plan or parameters of database APB
• BZ - 1535940 - Cluster capacity can not run after update for kube rebase 1.9
• BZ - 1535976 - [trello lo6HwQgu] Should validate Webhook Secret Key input when creating in web
• BZ - 1536088 - bind PUT causes broker panic and 502 when ServiceInstance not found
• BZ - 1536217 - Need to validate etcd serving certs before 3.9 upgrade
• BZ - 1536253 - [free-int] error applying web console template file during upgrade (3.8->3.9)
• BZ - 1536289 - Some templates cannot be process due to wrong api version
• BZ - 1536362 - Fail to mount azure file
• BZ - 1536629 - send job state and credentials from job
• BZ - 1536659 - async bind returns 201 instead of 202
• BZ - 1536839 - Upgrade against containerized ocp failed at Verify masters are already upgraded
• BZ - 1537105 - Failed in "restart node" step when installing openshift with flannel network
• BZ - 1537237 - Get unexpected error when viewing pod logs for deleted pod
• BZ - 1537367 - missing last operation for bindings
• BZ - 1537426 - clusterrole could not be patched/modified successfully
• BZ - 1537726 - redeploy_node_certificates.yaml restarts docker daemon
• BZ - 1537857 - [3.9]ES prometheus metrics interface returns nothing, can not show the ES prometheus metrics
• BZ - 1537873 - [trello lo6HwQgu] Doc link on the top of "Create New Webhook Secret" modal is unrelated
• BZ - 1537946 - Install CNS fail due to configured check not pass
• BZ - 1537955 - Cannot access the route of Mediawiki123 while provision with same username/passwd
• BZ - 1538044 - [trello lo6HwQgu] "Create New Webhook Secret" modal disappears after mouse click outside
• BZ - 1538048 - project admins should be able to create and delete networkpolicies in their own project
• BZ - 1538216 - 1/3 of all e2e test runs in Origin are failing with flake on projected annotation e2e
• BZ - 1538321 - Broker can't bootstrap if one of the APB's contains bad base64 data
• BZ - 1538389 - Node IP update should update Host IP in HostSubnet resource
• BZ - 1538445 - Need to do some pre-check to make sure there are available nodes to deploy TSB and web console pods
• BZ - 1538452 - [trello 9oaUh8xP] Customizing the Web console with js script does not take effect on most browsers
• BZ - 1538581 - Installation on GCE failed at TASK [openshift_cloud_provider : Configure GCE cloud provider]
• BZ - 1538722 - Registry push fails during build in S3 registry
• BZ - 1538732 - Broker does not respect scopes or groups of a user when determining access to run APB
• BZ - 1538806 - [3.9] docker_image_availability check does not respect override variables for containerized components
• BZ - 1538922 - aggregatedlogging should report fluentd pod missing while running oc adm diagnostics aggregatedlogging
• BZ - 1538943 - Image carry out the deployment should be optional for Custom deployment strategy and should have unique ID
• BZ - 1538960 - openshift_management_flavor and openshift_management_flavor_short are hard coded
• BZ - 1538969 - [APB] The apb tool should support display version info
• BZ - 1538974 - "WebConsole" as disabledFeatures does not honored when running a standalone registry cluster.
• BZ - 1538986 - ServiceInstance can't recover from the invalid version update
• BZ - 1538988 - Need restart master service for non-ha ocp to let the aggregate clusterrole take effective
• BZ - 1538995 - Logging Elasticsearch Volume does not get configured in the Elasticsearch Deployment Config
• BZ - 1539102 - X-Broker-API-Originating-Identity Does not have extras
• BZ - 1539187 - Node startup should flush stale ovs rules when hostsubnetlength changes on restart
• BZ - 1539308 - Delete project fail since could not find a service instance in dao
• BZ - 1539382 - The metrics_cassandra_pvc was changed when redeploy metrics
• BZ - 1539542 - Could NOT enable the ASYNC of the service-catalog
• BZ - 1539566 - After upgrade non-ha 3.7 env to 3.9, version info on web console doesn't update automatically.
• BZ - 1539840 - Using Drag and Drop to load a file the drag-and-drop area is not shown properly
• BZ - 1539859 - Client side rate limiting makes migrations excessively long for large clusters
• BZ - 1539892 - [starter-ca-central-1] errors during migration of storage on 3.8
• BZ - 1539987 - Under load, openshift-sdn reports "link not found" and fails health check and restarts itself on GCP
• BZ - 1540039 - Promethues metrics "storage_operation_errors_total" does not work
• BZ - 1540080 - OCP pods fail to mount gluster block volumes after cluster being rebooted
• BZ - 1540462 - metricsPublicURL is not configured on all masters with ansible metrics installer
• BZ - 1540487 - [APB] apb remove --all fail with 404
• BZ - 1540490 - Project viewer unable to set web console homepage to any project overview page when more than one project
• BZ - 1540521 - Template service broker still use ose:v3.7 image after upgrade 3.7 to 3.9
• BZ - 1540526 - HPA controller was unable to get the target's current scale: no matches for /, Kind=DeploymentConfig
• BZ - 1540729 - [free-int] metrics upgrade exits with error: The PersistentVolumeClaim "metrics-cassandra-3" is invalid: spec: Forbidden: field is immutable after creation
• BZ - 1540785 - From OpenShift 3.9 schedulerConfigFile have to work with use-legacy-policy-config
• BZ - 1540812 - wrong format with total num of service items on wizard panel
• BZ - 1540822 - [Pod_public_801] ResourceLimitsPriority is not registered
• BZ - 1540840 - ansible service broker still using ocp3.7 images after upgrade to ocp3.9
• BZ - 1540842 - Failed to bind for jenkins-persistent(jenkins-ephemeral) serviceinstance
• BZ - 1540846 - [egressip] The egressIP which assigned to project will still take effect after it has been removed
• BZ - 1540848 - Using Red Hat image for Local PV provisioner
• BZ - 1540866 - [APB] Deprovision the Mediawiki APB fail by docker run
• BZ - 1540912 - Kubelet crashes trying to free memory under MemoryPressure
• BZ - 1540916 - should not show dc doesn't exist when its hpa created by web console
• BZ - 1540976 - oc adm migrate authorization on 3.9 complains that it does not work against 3.7 servers
• BZ - 1541247 - service catalog still using ocp3.7 images after upgrade to ocp3.9
• BZ - 1541263 - NodeController should update OutOfDisk status to unknown when node service is stopped
• BZ - 1541265 - Update mediaWiki site name cause asb segment fault
• BZ - 1541339 - [APB] The names of the deploy pods should be more readable
• BZ - 1541461 - ASB should honor scopes outside of UserInfo.Extra
• BZ - 1541589 - Installation on GCE failed at TASK [openshift_cloud_provider : check variables are passed]
• BZ - 1541946 - Task "Wait for master to restart" will break upgrade/install if working through bastion
• BZ - 1542099 - Node labelling fails
• BZ - 1542238 - oc get of imagestream with --export option changes the namespace
• BZ - 1542324 - master api and controller service cannot automatically start after host reboot while enabling system containers
• BZ - 1542397 - Run docker upgrade failed due to openshift_is_atomic is undefined
• BZ - 1542406 - [CNS] Deploy CNS with glusterfs_registry group configure as registry storage failed due to attribute missing
• BZ - 1542612 - A route with host 'localhost' can freeze router reloads under some circumstances
• BZ - 1542669 - Service Catalog UI displays lowest platform version too early
• BZ - 1542781 - Pod with Azure Persistent Volume stuck in "Container creating" after node shutdown
• BZ - 1542855 - upgrade control plane failed at play "Ensure the requested version packages are available" when specify openshift_additional_repos
• BZ - 1542861 - [CNS] Installation failed when enable openshift_storage_glusterfs_registry_block_storageclass with glusterfs_registry group
• BZ - 1542868 - Delete PV failed after a Pod using the PV in different namespace from local-storage-provisioner
• BZ - 1543122 - RBAC DENY (system:anonymous fails to imagestreams/layers.image.openshift.io)
• BZ - 1543229 - Azure file: End user cannot write data to the mounted dir
• BZ - 1543256 - [3.9] Router certificate didn't get updated after running redeploy-router-certificates.yml
• BZ - 1543324 - Should treat 'resourceVersion 'as an opaque field on web console
• BZ - 1543446 - Scheduled images from external registry randomly polled and triggered deployment by overriding default minimum interval setting of 15 minutes.
• BZ - 1543478 - openshift_logging_elasticsearch fails with No such file or directory
• BZ - 1543511 - CRI-O runtime - image pruning fails
• BZ - 1543521 - second async bind call returns incorrect response
• BZ - 1543532 - A-MQ Components not visible in Java Console when using IE11 browser
• BZ - 1543625 - [free-stg] error during upgrade if non yaml configmap with logging-es prefix exists
• BZ - 1543714 - Docker should not be upgraded when set "docker_upgrade=false" during upgrade ocp
• BZ - 1543771 - Etcd scale-up failed at task "Run variable sanity checks"
• BZ - 1543830 - Installation failed while specifying Vsphere cloudprovider
• BZ - 1543869 - openshift_docker_log_driver doesn't work
• BZ - 1544027 - vsphere cloud provider uses datacenter instead of datastore for standard sc
• BZ - 1544083 - should not have v3_10 folder when atomic-openshift-utils-3.9.0 installed
• BZ - 1544207 - [quick installer][3.9]wrong variant_version in installer.cfg.yml
• BZ - 1544360 - Logging redeploy failed at task logging_patch
• BZ - 1544387 - [CNS] docker registry back end storage keep pending when glusterfs_registry_block_storageclass as default storageclass
• BZ - 1544645 - Service catalog playbook missing --noproxy '*' when checking api server
• BZ - 1544657 - ansible-playbook for eventrouter pod installation failed due to missing jinjia2 template resource.
• BZ - 1544815 - logging-fluentd SEGV_ACCERR crash on init when libjemalloc is used in scalability CI lab cluster
• BZ - 1544903 - Push image still failed, no route to host
• BZ - 1545011 - [trello EuQHe0LT]Clear CPU Request Target value will remove CPU Request Target input on DC edit autoscaler page
• BZ - 1545280 - [starter-ca-central-1] infinite loop in logging upgrade playbook
• BZ - 1545828 - Labels for secrets not displayed in web UI
• BZ - 1546188 - api server get stuck after exhausting all grpc connections
• BZ - 1546293 - openshift-ansible playbook failed to deploy cluster due to templating error
• BZ - 1546311 - Kibana page displays "OPENSHIFT ORIGIN" in OCP
• BZ - 1546365 - [free-int] kube-service-catalog/apiserver pod in crash loop after upgrade
• BZ - 1546374 - Termination grace period set incorrectly for Cassandra pod
• BZ - 1546854 - occasional nil pointer dereference panics in master-controllers while scaling up resources
• BZ - 1547229 - glusterfs installation failed on task "Ensure device mapper modules loaded"
• BZ - 1547284 - Do not allow 'default' project to be isolated using 'oc adm pod-network' cmd
• BZ - 1547727 - Glusterfs installation fails when glusterfs_registry is undefined. Keyword: ansible_managed
• BZ - 1547898 - Minor version upgrade failed when not specify openshift_release
• BZ - 1547923 - Upgrade failed at task [Verify that the web console is running] during minor version upgrade
• BZ - 1547944 - installation playbook for logging sets PUBLIC_MASTER_URL and OAP_LOGOUT_REDIRECT to first master
• BZ - 1548104 - Duplicate elasticsearch entries increase as namespaces increase (constant message rate)
• BZ - 1548485 - Upgrade from 3.7 to 3.9 fails
• BZ - 1548633 - [quick installer][3.9]Unable to uninstall
• BZ - 1548641 - App pods should not be scheduled on master node whatever in a fresh install or after upgrade
• BZ - 1548720 - fluent-plugin-secure-forward couldn't read the Environment ${HOSTNAME}
• BZ - 1549491 - Should store the CNI ipam files into /var/lib/cni/networks/openshift-sdn dir
• BZ - 1549971 - upgrade failed due to unsupported scheduler predicate NoVolumeNodeConflict from kube-1.9
• BZ - 1550140 - [free-int] error during logging upgrade "Getting ES version for logging-es cluster" rc=35
• BZ - 1550148 - Web console install no longer honors openshift_master_console_port
• BZ - 1551775 - Volume not getting unmounted when openshift node process is down and comes back
• BZ - 1552165 - hawkular-metrics goes into CrashLoopBackOff when prometheus endpoint is disabled
• BZ - 1552430 - Lack .default in no_proxy env while openshift-ansible pass proxy settings to ASB

CVEs

• CVE-2017-15137
• CVE-2017-15138

References

(none)