Synopsis

Red Hat OpenShift Container Platform 3.9 RPM Release Advisory

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform 3.9, which fixes several bugs and includes various enhancements, is now available.

Description

Red Hat OpenShift Container Platform is the company's cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

The OpenShift Container Platform 3.9 Release Notes provide information about new features, bug fixes, and known issues:

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

This advisory contains the RPM packages for this release. See the following
advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:0490

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

For instructions on new installations, see the following documentation:

https://docs.openshift.com/container-platform/3.9/install_config/install/planning.html

For instructions on how to properly upgrade existing clusters to OpenShift
Container Platform 3.9, see the following documentation:

https://docs.openshift.com/container-platform/3.9/upgrading/index.html

Affected Products

• Red Hat OpenShift Container Platform 3.9 x86_64

Fixes

• BZ - 1333030 - build fails to push if secret is created after the build starts
• BZ - 1378883 - oc adm diagnostics checks not existing systemd units
• BZ - 1383707 - SCC admission tries to mutate pods on update
• BZ - 1396404 - Sometimes "activeDeadlineSeconds" in ScheduledJob doesn't take affect
• BZ - 1419801 - 'new-app' and 'new-build' should tolerate adding a tag to the existing imagestream
• BZ - 1430322 - overlapped mount points
• BZ - 1440892 - Cannot attach Azure Disk If a bad disk is requested in the Pod
• BZ - 1463617 - right-click menu copy & paste is gray and disabled in import YAML/JSON ace editor in the chrome 59 browser.
• BZ - 1463844 - EBS Volume Cant Be Reused After Node Shutdown
• BZ - 1464657 - Random connection issues during router deployment after upgrade
• BZ - 1466216 - Redeploy etcd ca playbook didn't update correct ca.crt when etcd running as system container
• BZ - 1467557 - oc cluster up fails with --host-volumes-dir flag on Windows
• BZ - 1469411 - Can`t copy local directory & files to correct directory & files in a remote pod through "oc cp".
• BZ - 1480835 - [RFE] Support dynamic provisioning on Gluster for metrics and logging in openshift-ansible
• BZ - 1483579 - Create an haproxy-1.8 package
• BZ - 1488380 - No visible difference for DC and k8s deployment of same name on overview by default
• BZ - 1489603 - Volume unmounted but not being detached from node
• BZ - 1491100 - Install failed due to "openshift_hosted_registry_storage_azure_blob_realm" undefined
• BZ - 1491717 - Suppress the rejected routes in haproxy if router shards are used
• BZ - 1493955 - iptables -I FORWARD -d 172.30.0.0/16 -i eth1 -j ACCEPT' is needed while using flannel for openshift deployment on openstack for pod to pod communication present on different nodes.
• BZ - 1496256 - Deleted in use PVCs can break the scheduler
• BZ - 1496261 - log throttling reuses log position file
• BZ - 1496758 - Preserve storage configure values in logging-es deploymentconfig
• BZ - 1497038 - [RFE] Add a separate uninstall playbook for gluster which will remove all heketi and deploy-heketi related resources
• BZ - 1497408 - Failed to undeploy HOSA
• BZ - 1500207 - [R39yiZs4] Failed to parse max ARP entries errors appear in the node log
• BZ - 1500225 - [online-stg] `oc describe imagestreams -n openshift` and `oc new-app` with IS from `-n openshift` fail when using oc 3.7/3.8 VS 3.6 online-stg
• BZ - 1500897 - openshift-master/restart_services.yml fails with new 3.6 master installs
• BZ - 1501254 - Service secret was not deleted after deprovision
• BZ - 1502838 - [3.9] Invalid entries in namedCertificates when using openshift_master_named_certificates
• BZ - 1502850 - [DOCKER] Remove oci-umount spam
• BZ - 1502945 - End user can not create/list/describe/delete volumesnapshot.
• BZ - 1503260 - Jenkins Template Missing App Label to Display Properly in UI
• BZ - 1503601 - `oc apply view-last-applied` shows confusing "MISSING" in yaml/json output
• BZ - 1504075 - [3.9] Installer terminates after single node reports error despite error tolerance
• BZ - 1504464 - docker-registry pod does not uniformly use hostnames - docker push fails with proxy config
• BZ - 1505558 - Exposing UDP ports in a Dockerfile does not work in OCP 3.6
• BZ - 1505681 - openshift_logging_elasticsearch_proxy_image_prefix should inherit from openshift_logging_image_prefix
• BZ - 1505796 - `oc get -o=custom-columns` should display <no value> or empty for objects lacking the field
• BZ - 1506177 - Upgrade will fail if the number of etcd hosts is more than 3
• BZ - 1506651 - [CRI-O] CRI-O increasing memory usage over time
• BZ - 1506750 - [3.9] Check at install time if alleged openshift_ip value is actually openshift_public_ip
• BZ - 1506866 - [3.9] haproxy lb install failed when haproxy-1.7.9-1.el7.x86_64 is installed.
• BZ - 1507424 - Build always failed in cri-o env
• BZ - 1507469 - Tasks for nodes already in the cluster running unnecessarily during scaleup
• BZ - 1507816 - [CRI-O] CNI netns leaking in cri-o env
• BZ - 1508310 - There is ansible error "Error from server (NotFound): serviceaccounts \"prometheus\" not found" when uninstall prometheus
• BZ - 1508346 - [CRI-O] Restart cri-o service encounter failure
• BZ - 1508352 - [CRI-O] default log-level should avoid use debug in product
• BZ - 1508391 - [CRI-O] ASB etcd container cannot start in cri-o environment, but can work well in docker env
• BZ - 1508496 - Connection refused error when accessing hawkular-cassandra and hawkular-metrics prometheus metrics interface
• BZ - 1508561 - After running the config playbook invalid certificate for docker-registry.default.svc
• BZ - 1508563 - Image tag keeps disappearing
• BZ - 1508761 - [CRI-O] pod has no "HOSTNAME" environment variable
• BZ - 1508781 - [CRI-O] should support sysctls feature
• BZ - 1509028 - GCE dynamic provisioning going to wrong zone
• BZ - 1509082 - Installer should not put registry credentials in plain text in configmap for ASB deployment
• BZ - 1509129 - uninstall playbook didn't remove tuned-profiles-atomic-openshift-node
• BZ - 1509661 - show namespace in oc adm manage-node --list-pods
• BZ - 1509799 - [OnlineStarter][free-stg][free-int]"Failed create pod sandbox"---deploy failed
• BZ - 1509853 - openshift_hosted_router_registryurl and openshift_hosted_registry_registryurl setting are not honored
• BZ - 1510174 - occasional restart of atomic-openshift-master-controllers.service due to scheduler cache corruption
• BZ - 1510178 - Restarting the controller-manager while pod migration is in process can leave volumes permanently attached
• BZ - 1510294 - the configuration page of MariaDB(APB) shows mysql_xxx
• BZ - 1510486 - Incorrect Status Code For User With Invalid Permissions
• BZ - 1510573 - [DOCKER] Can't rsh into pod
• BZ - 1510786 - Error info should be more precise when create app in project with view role
• BZ - 1510804 - [APB]Keep spelling style consistent
• BZ - 1511097 - Better error description for multliple attach
• BZ - 1511400 - openshift ex dockergc can't clean image database if docker use devicemapper
• BZ - 1511576 - fs.go:359] Stat fs failed. Error: no such file or directory
• BZ - 1511852 - openshift ex dockergc encounter panic
• BZ - 1512473 - The Init:Error pod should not be "Pod Initializing" sandglass on pod page
• BZ - 1512825 - add mux pod failed for Serial number 02 has already been issued
• BZ - 1513706 - Heapster's Hawkular concurrency value should be configurable in ansible
• BZ - 1513859 - Failed to mount Azure File as a Persistent Volume in Azure regional cloud (Germany and so on)
• BZ - 1515058 - Scheduled image import performed every 15 sec with scheduledImageImportMinimumIntervalSeconds: 30
• BZ - 1515060 - Scheduled image import performed on non scheduled tags
• BZ - 1515527 - Need refresh manually after clear changes when add env from configmap/secret
• BZ - 1515972 - Review Jenkins JNLP slave setup script
• BZ - 1516569 - Unable to mount a secret inside another secrets mount point with kernel 3.10.0-693.5.2
• BZ - 1517605 - [RFE] logging Support crio
• BZ - 1517875 - RFE: Allow regular expressions in curator settings
• BZ - 1518386 - Jinja extrapolation for `openshift_hosted_...` vars doesn't work
• BZ - 1518502 - Creating oc tag alias shows importing latest image forever
• BZ - 1518684 - "ovs-vsctl show" on OCP nodes returns multiple "No such device" messages
• BZ - 1518912 - [us-west-2] failed to run CNI IPAM ADD: no IP addresses available in network: openshift-sdn
• BZ - 1519060 - OPENSHIFT_DEFAULT_REGISTRY=docker-registry.default.svc:5000 was removed within upgrade playbook run
• BZ - 1519193 - [APB]The `apb push -o` command works failed when to execute it outside of the cluster
• BZ - 1519619 - Elasticsearch configmap is rebuilt removing any customizations made by an admin
• BZ - 1519991 - The unidler fails when there is no network plugin
• BZ - 1521151 - Iptables not getting updated with correct endpoints
• BZ - 1523142 - timeout expired waiting for volumes to attach/mount for pod
• BZ - 1523354 - [starter-us-west-1] AWS API invocations from storage contributing to API call limit
• BZ - 1523534 - Provisioner pod fails to deploy becasue of incorrect image prefix
• BZ - 1523638 - default IMAGE_PREFIX for registry-console template should use fully qualified image name
• BZ - 1523681 - CNS installation fails when openshift_storage_glusterfs_wipe=true
• BZ - 1524379 - The output of `oc describe pv` contains uninterpreted golang code
• BZ - 1524707 - Once a route is given TLS, the TLS section becomes immutable
• BZ - 1524805 - Disconnected install fails at service catalog imagePullPolicy: Always
• BZ - 1524883 - [pod_public_799] Wrong message when request hugepage greater than limit hugepage
• BZ - 1525426 - link in "atomic-openshift-installer -h" is broken
• BZ - 1525817 - Print twice "Application Options" and "Help Options" in "asbd --help" output
• BZ - 1525819 - Warning dialogue box disappears automatically when click out of the box
• BZ - 1526887 - [ASB] The "white_list" doesn't work for the RHCC registry
• BZ - 1526949 - [ASB] The openshift registry of the ASB works fail
• BZ - 1527210 - Installer does not configure Kubernetes service IP for no_proxy for the docker-registry.
• BZ - 1527346 - Should keep tab headers when loading details for Pipeline BC
• BZ - 1527602 - egress-router pod does not reply to ARP requests if coming from members of a VIP
• BZ - 1527685 - New volume section is created for each volume add command that refer to same PVC
• BZ - 1527689 - Pods with multiple subpaths referring to same PVC multiple times fail to start
• BZ - 1528135 - [RFE] A glusterblock StorageClass could be create during CNS/CRS deployment
• BZ - 1528548 - Prevent jenkins to leak zombie processes
• BZ - 1528570 - Installer didn't set docker registry params on lb host
• BZ - 1528613 - Error pushing images with 3 levels of path, but filesystem directories are created
• BZ - 1529070 - Fail to upgrade master due to fact openshift_upgrade_target not set on nodes hosts
• BZ - 1529083 - Installer got wrong default crio image
• BZ - 1529467 - Should prevent user from adding configmap/secret data as env when configmap/secret has invalid format key
• BZ - 1529473 - `oc idle` fails to work for endpoints to rc/rs/deploy
• BZ - 1529478 - pods were in ContainerCreating status while enabling cri-o behind proxy
• BZ - 1530162 - Viewer should be able to view and process template for external creation flow
• BZ - 1530203 - Pods table should show Receiving Traffic column
• BZ - 1530366 - Placeholder for 3.9 Bugfix Advisory
• BZ - 1530403 - Installer fails noting no etcd group despite etcd hosts group that IS defined
• BZ - 1530924 - [trello mEpUJ2kQ] Create from image wizard should be closed after hitting "advanced options"
• BZ - 1531157 - logging-fluentd v3.9.0-0.16.0.2 immediately starts flooding "missing namespace" errors on startup
• BZ - 1531511 - User could not pull a private image from a docker registry when a pull secret is defined
• BZ - 1531513 - The new field AllowVolumeExpansion of StorageClass seems does not work.
• BZ - 1531558 - [BACKPORT 3.5] REST request log spam is back in OCP 3.7
• BZ - 1532060 - Router Panic: panic: runtime error: index out of range in cockroachdb
• BZ - 1532149 - Expand PVC failed message need to be more clear
• BZ - 1532512 - Expand PVC successfully but have a "VolumeResizeFailed" event
• BZ - 1532936 - Cannot add env vars into slave pod template in jenkins webconsole against jenkins-2-rhel7 image
• BZ - 1532942 - [APB] Run the Mediawiki failed via the `apb run` command
• BZ - 1532955 - Container logs was not sent to ES stack
• BZ - 1532960 - No Auto-recovery for atomic-openshift-node
• BZ - 1532966 - oc ex dockergc still remove the image though '--dry-run=true'
• BZ - 1532967 - cpumanager should graceful exit other than panic if not set 'kube-reserved' & 'system-reserved'
• BZ - 1532972 - [APB] Deprovision failed via the `apb run` command
• BZ - 1532975 - [APB] The apb tool should return fail info after the `apb run --tag` with invalid image
• BZ - 1532981 - Resize pv is failed for aws ebs volume
• BZ - 1532986 - PVC condition is still Resizing after Resizing is finished
• BZ - 1533099 - [3.9] Installer failed to configure AWS cloudprovider for EC2 C5 instance
• BZ - 1533153 - New auto egress IPs will fail after restarting node service
• BZ - 1533208 - Regression: Registry credentials are displayed in plain text in configmap for ASB
• BZ - 1533318 - [APB] Failed when running the `apb run` command outside of the cluster
• BZ - 1533348 - Failed to create pod with Bidirectional mount propagation
• BZ - 1533363 - [trello mEpUJ2kQ] Wrongly jump to homepage when click 'Clear Filters'
• BZ - 1533658 - broken symlinks in openshift-ansible-roles-3.7.14
• BZ - 1533753 - [trello R1ninKHf] Should display correctly roles created by user
• BZ - 1533818 - Route creating settings can not get to the weight percentage bar again after switch to integers editing input boxes
• BZ - 1534316 - [TSB] Should not show openshift/templates on Catalog after TSB enabled
• BZ - 1534320 - wrong format with total num of service items on home page in firefox
• BZ - 1534467 - Can not get expected response while using invalid bearer token
• BZ - 1534514 - mysql_password should be must option in configuration of MySQL (APB) in web console
• BZ - 1534715 - multiple DELETEs to the same binding result in multiple APB runs when async is turned on
• BZ - 1534720 - Invalid OVS rules when the node IP is updated
• BZ - 1534858 - [trello sg1xw7gG] Cannot set preferred landing page normally when user have multiple projects
• BZ - 1534879 - check the ES version should use the Running pod
• BZ - 1534883 - [ASB] Provision APBs failed by docker run
• BZ - 1534895 - apb remove --id * return 404 error
• BZ - 1534922 - No recommended version of Open vSwitch for OCP 3.9
• BZ - 1534933 - [3.9] installer need provide a way to add docker auth to kubelet for auto pulling infra image from an authenticated registry in system container env without cri-o enabled
• BZ - 1534955 - [vSphere] Failed to provision volume, Kubernetes node nodeVmDetail details is empty
• BZ - 1534957 - [ASB] ansible-service-broker not suppot pass the parameters by secret
• BZ - 1535182 - Regression: Registry names must be unigue
• BZ - 1535270 - PV and PVC bound failed event message is not clear
• BZ - 1535277 - PV and PVC could be bound with different accessMode
• BZ - 1535314 - Failed to expand PVC of cinder volume
• BZ - 1535323 - Unable to pull etcd system container behind proxy while using package docker
• BZ - 1535402 - [trello lo6HwQgu] BC edit page "Triggers" part has no webhooks display and "Add Webhook" link not working/aligned
• BZ - 1535639 - oc cluster up --service-catalog not updating clusterroles
• BZ - 1535902 - Failed to deprovision an unready serviceinstance
• BZ - 1535917 - Cannot deploy image and create a new project at the same time
• BZ - 1535929 - ASB unable to retrieve the network plugin
• BZ - 1535931 - New created database won't be preserved if update the plan or parameters of database APB
• BZ - 1535940 - Cluster capacity can not run after update for kube rebase 1.9
• BZ - 1535976 - [trello lo6HwQgu] Should validate Webhook Secret Key input when creating in web
• BZ - 1536088 - bind PUT causes broker panic and 502 when ServiceInstance not found
• BZ - 1536217 - Need to validate etcd serving certs before 3.9 upgrade
• BZ - 1536253 - [free-int] error applying web console template file during upgrade (3.8->3.9)
• BZ - 1536289 - Some templates cannot be process due to wrong api version
• BZ - 1536362 - Fail to mount azure file
• BZ - 1536629 - send job state and credentials from job
• BZ - 1536659 - async bind returns 201 instead of 202
• BZ - 1536839 - Upgrade against containerized ocp failed at Verify masters are already upgraded
• BZ - 1537105 - Failed in "restart node" step when installing openshift with flannel network
• BZ - 1537237 - Get unexpected error when viewing pod logs for deleted pod
• BZ - 1537367 - missing last operation for bindings
• BZ - 1537426 - clusterrole could not be patched/modified successfully
• BZ - 1537726 - redeploy_node_certificates.yaml restarts docker daemon
• BZ - 1537857 - [3.9]ES prometheus metrics interface returns nothing, can not show the ES prometheus metrics
• BZ - 1537873 - [trello lo6HwQgu] Doc link on the top of "Create New Webhook Secret" modal is unrelated
• BZ - 1537946 - Install CNS fail due to configured check not pass
• BZ - 1537955 - Cannot access the route of Mediawiki123 while provision with same username/passwd
• BZ - 1538044 - [trello lo6HwQgu] "Create New Webhook Secret" modal disappears after mouse click outside
• BZ - 1538048 - project admins should be able to create and delete networkpolicies in their own project
• BZ - 1538216 - 1/3 of all e2e test runs in Origin are failing with flake on projected annotation e2e
• BZ - 1538321 - Broker can't bootstrap if one of the APB's contains bad base64 data
• BZ - 1538389 - Node IP update should update Host IP in HostSubnet resource
• BZ - 1538445 - Need to do some pre-check to make sure there are available nodes to deploy TSB and web console pods
• BZ - 1538452 - [trello 9oaUh8xP] Customizing the Web console with js script does not take effect on most browsers
• BZ - 1538581 - Installation on GCE failed at TASK [openshift_cloud_provider : Configure GCE cloud provider]
• BZ - 1538722 - Registry push fails during build in S3 registry
• BZ - 1538732 - Broker does not respect scopes or groups of a user when determining access to run APB
• BZ - 1538806 - [3.9] docker_image_availability check does not respect override variables for containerized components
• BZ - 1538922 - aggregatedlogging should report fluentd pod missing while running oc adm diagnostics aggregatedlogging
• BZ - 1538943 - Image carry out the deployment should be optional for Custom deployment strategy and should have unique ID
• BZ - 1538960 - openshift_management_flavor and openshift_management_flavor_short are hard coded
• BZ - 1538969 - [APB] The apb tool should support display version info
• BZ - 1538974 - "WebConsole" as disabledFeatures does not honored when running a standalone registry cluster.
• BZ - 1538986 - ServiceInstance can't recover from the invalid version update
• BZ - 1538988 - Need restart master service for non-ha ocp to let the aggregate clusterrole take effective
• BZ - 1538995 - Logging Elasticsearch Volume does not get configured in the Elasticsearch Deployment Config
• BZ - 1539102 - X-Broker-API-Originating-Identity Does not have extras
• BZ - 1539187 - Node startup should flush stale ovs rules when hostsubnetlength changes on restart
• BZ - 1539308 - Delete project fail since could not find a service instance in dao
• BZ - 1539382 - The metrics_cassandra_pvc was changed when redeploy metrics
• BZ - 1539542 - Could NOT enable the ASYNC of the service-catalog
• BZ - 1539566 - After upgrade non-ha 3.7 env to 3.9, version info on web console doesn't update automatically.
• BZ - 1539840 - Using Drag and Drop to load a file the drag-and-drop area is not shown properly
• BZ - 1539859 - Client side rate limiting makes migrations excessively long for large clusters
• BZ - 1539892 - [starter-ca-central-1] errors during migration of storage on 3.8
• BZ - 1539987 - Under load, openshift-sdn reports "link not found" and fails health check and restarts itself on GCP
• BZ - 1540039 - Promethues metrics "storage_operation_errors_total" does not work
• BZ - 1540080 - OCP pods fail to mount gluster block volumes after cluster being rebooted
• BZ - 1540462 - metricsPublicURL is not configured on all masters with ansible metrics installer
• BZ - 1540487 - [APB] apb remove --all fail with 404
• BZ - 1540490 - Project viewer unable to set web console homepage to any project overview page when more than one project
• BZ - 1540521 - Template service broker still use ose:v3.7 image after upgrade 3.7 to 3.9
• BZ - 1540526 - HPA controller was unable to get the target's current scale: no matches for /, Kind=DeploymentConfig
• BZ - 1540729 - [free-int] metrics upgrade exits with error: The PersistentVolumeClaim "metrics-cassandra-3" is invalid: spec: Forbidden: field is immutable after creation
• BZ - 1540785 - From OpenShift 3.9 schedulerConfigFile have to work with use-legacy-policy-config
• BZ - 1540812 - wrong format with total num of service items on wizard panel
• BZ - 1540822 - [Pod_public_801] ResourceLimitsPriority is not registered
• BZ - 1540840 - ansible service broker still using ocp3.7 images after upgrade to ocp3.9
• BZ - 1540842 - Failed to bind for jenkins-persistent(jenkins-ephemeral) serviceinstance
• BZ - 1540846 - [egressip] The egressIP which assigned to project will still take effect after it has been removed
• BZ - 1540848 - Using Red Hat image for Local PV provisioner
• BZ - 1540866 - [APB] Deprovision the Mediawiki APB fail by docker run
• BZ - 1540912 - Kubelet crashes trying to free memory under MemoryPressure
• BZ - 1540916 - should not show dc doesn't exist when its hpa created by web console
• BZ - 1540976 - oc adm migrate authorization on 3.9 complains that it does not work against 3.7 servers
• BZ - 1541247 - service catalog still using ocp3.7 images after upgrade to ocp3.9
• BZ - 1541263 - NodeController should update OutOfDisk status to unknown when node service is stopped
• BZ - 1541265 - Update mediaWiki site name cause asb segment fault
• BZ - 1541339 - [APB] The names of the deploy pods should be more readable
• BZ - 1541461 - ASB should honor scopes outside of UserInfo.Extra
• BZ - 1541589 - Installation on GCE failed at TASK [openshift_cloud_provider : check variables are passed]
• BZ - 1541946 - Task "Wait for master to restart" will break upgrade/install if working through bastion
• BZ - 1542099 - Node labelling fails
• BZ - 1542238 - oc get of imagestream with --export option changes the namespace
• BZ - 1542324 - master api and controller service cannot automatically start after host reboot while enabling system containers
• BZ - 1542397 - Run docker upgrade failed due to openshift_is_atomic is undefined
• BZ - 1542406 - [CNS] Deploy CNS with glusterfs_registry group configure as registry storage failed due to attribute missing
• BZ - 1542612 - A route with host 'localhost' can freeze router reloads under some circumstances
• BZ - 1542669 - Service Catalog UI displays lowest platform version too early
• BZ - 1542781 - Pod with Azure Persistent Volume stuck in "Container creating" after node shutdown
• BZ - 1542855 - upgrade control plane failed at play "Ensure the requested version packages are available" when specify openshift_additional_repos
• BZ - 1542861 - [CNS] Installation failed when enable openshift_storage_glusterfs_registry_block_storageclass with glusterfs_registry group
• BZ - 1542868 - Delete PV failed after a Pod using the PV in different namespace from local-storage-provisioner
• BZ - 1543122 - RBAC DENY (system:anonymous fails to imagestreams/layers.image.openshift.io)
• BZ - 1543229 - Azure file: End user cannot write data to the mounted dir
• BZ - 1543256 - [3.9] Router certificate didn't get updated after running redeploy-router-certificates.yml
• BZ - 1543324 - Should treat 'resourceVersion 'as an opaque field on web console
• BZ - 1543446 - Scheduled images from external registry randomly polled and triggered deployment by overriding default minimum interval setting of 15 minutes.
• BZ - 1543478 - openshift_logging_elasticsearch fails with No such file or directory
• BZ - 1543511 - CRI-O runtime - image pruning fails
• BZ - 1543521 - second async bind call returns incorrect response
• BZ - 1543532 - A-MQ Components not visible in Java Console when using IE11 browser
• BZ - 1543625 - [free-stg] error during upgrade if non yaml configmap with logging-es prefix exists
• BZ - 1543714 - Docker should not be upgraded when set "docker_upgrade=false" during upgrade ocp
• BZ - 1543771 - Etcd scale-up failed at task "Run variable sanity checks"
• BZ - 1543830 - Installation failed while specifying Vsphere cloudprovider
• BZ - 1543869 - openshift_docker_log_driver doesn't work
• BZ - 1544027 - vsphere cloud provider uses datacenter instead of datastore for standard sc
• BZ - 1544083 - should not have v3_10 folder when atomic-openshift-utils-3.9.0 installed
• BZ - 1544207 - [quick installer][3.9]wrong variant_version in installer.cfg.yml
• BZ - 1544360 - Logging redeploy failed at task logging_patch
• BZ - 1544387 - [CNS] docker registry back end storage keep pending when glusterfs_registry_block_storageclass as default storageclass
• BZ - 1544645 - Service catalog playbook missing --noproxy '*' when checking api server
• BZ - 1544657 - ansible-playbook for eventrouter pod installation failed due to missing jinjia2 template resource.
• BZ - 1544815 - logging-fluentd SEGV_ACCERR crash on init when libjemalloc is used in scalability CI lab cluster
• BZ - 1544903 - Push image still failed, no route to host
• BZ - 1545011 - [trello EuQHe0LT]Clear CPU Request Target value will remove CPU Request Target input on DC edit autoscaler page
• BZ - 1545280 - [starter-ca-central-1] infinite loop in logging upgrade playbook
• BZ - 1545828 - Labels for secrets not displayed in web UI
• BZ - 1546188 - api server get stuck after exhausting all grpc connections
• BZ - 1546293 - openshift-ansible playbook failed to deploy cluster due to templating error
• BZ - 1546311 - Kibana page displays "OPENSHIFT ORIGIN" in OCP
• BZ - 1546365 - [free-int] kube-service-catalog/apiserver pod in crash loop after upgrade
• BZ - 1546374 - Termination grace period set incorrectly for Cassandra pod
• BZ - 1546854 - occasional nil pointer dereference panics in master-controllers while scaling up resources
• BZ - 1547229 - glusterfs installation failed on task "Ensure device mapper modules loaded"
• BZ - 1547284 - Do not allow 'default' project to be isolated using 'oc adm pod-network' cmd
• BZ - 1547727 - Glusterfs installation fails when glusterfs_registry is undefined. Keyword: ansible_managed
• BZ - 1547898 - Minor version upgrade failed when not specify openshift_release
• BZ - 1547923 - Upgrade failed at task [Verify that the web console is running] during minor version upgrade
• BZ - 1547944 - installation playbook for logging sets PUBLIC_MASTER_URL and OAP_LOGOUT_REDIRECT to first master
• BZ - 1548104 - Duplicate elasticsearch entries increase as namespaces increase (constant message rate)
• BZ - 1548485 - Upgrade from 3.7 to 3.9 fails
• BZ - 1548633 - [quick installer][3.9]Unable to uninstall
• BZ - 1548641 - App pods should not be scheduled on master node whatever in a fresh install or after upgrade
• BZ - 1548720 - fluent-plugin-secure-forward couldn't read the Environment ${HOSTNAME}
• BZ - 1549491 - Should store the CNI ipam files into /var/lib/cni/networks/openshift-sdn dir
• BZ - 1549971 - upgrade failed due to unsupported scheduler predicate NoVolumeNodeConflict from kube-1.9
• BZ - 1550140 - [free-int] error during logging upgrade "Getting ES version for logging-es cluster" rc=35
• BZ - 1550148 - Web console install no longer honors openshift_master_console_port
• BZ - 1551775 - Volume not getting unmounted when openshift node process is down and comes back
• BZ - 1552165 - hawkular-metrics goes into CrashLoopBackOff when prometheus endpoint is disabled
• BZ - 1552430 - Lack .default in no_proxy env while openshift-ansible pass proxy settings to ASB

CVEs

• CVE-2017-15137
• CVE-2017-15138

References

(none)