RHBA-2018:0636 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.7.42-2 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.7.42-2. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:0637

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.7, see the following documentation, which will be updated shortly for release 3.7.42-2, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.7 x86_64

Fixes

• BZ - 1373413 - [atomic registry] Border shape following 'Tags' is shown split on Edge25 and IE11
• BZ - 1435328 - Timeout while oc get images for 40K builds
• BZ - 1464384 - Should not display default ebs storageclass name when oc get pvc of provisioners-efs
• BZ - 1468479 - [atomic registry] Typos on registry console about docker instructions
• BZ - 1470612 - Hostsubnet could not be deleted after delete node
• BZ - 1476330 - oc secret new-dockercfg generated secret is not compatible with registry.connect.redhat.com
• BZ - 1479114 - The top ones in drop down list are hidden by the logo banner after re-sized window
• BZ - 1485312 - Pods fail to start during containerized install
• BZ - 1493022 - A lot of error messages in fluentd pod logs for deleted namespaces
• BZ - 1493889 - [xEC43mn2] Metrics for authentication not count the oc client login
• BZ - 1495486 - etcd-3.1 did not upgrade to etcd-3.2 during etcd upgrade
• BZ - 1497421 - Cannot allocate memory when deploy logging on one Env
• BZ - 1498185 - [RFE] Move versioning label onto APB spec
• BZ - 1498613 - [RFE] Allow APB tooling to specify Dockerfile name when building
• BZ - 1498933 - Auto bootstrap is clearing apb-push sourced specs
• BZ - 1498989 - Change to remove automatic deployment triggers in deploymentconfigs
• BZ - 1499358 - Installer does not support docker HTTP_PROXY
• BZ - 1500931 - Image streams may fail to import during an upgrade blocking the install
• BZ - 1500934 - When broker is deployed to a namespace other than ansible-service-broker, secret lookup fails
• BZ - 1501164 - [online-int][online-stg][free-int][free-stg][rh-us-east-1] User should not see the Edit Resources Limit page's input boxes that can be set but not applied in pod due to ClusterResourceOverride
• BZ - 1501512 - Broker does not return credentials on subsequent bind endpoint calls
• BZ - 1503637 - Setting 'timeout server' twice per backend
• BZ - 1506813 - No event when pod fails because pause/ose-pod image doesn't exist
• BZ - 1507870 - The events message delayed about 1min to show in events of oc describe clusterservicebroker ansible-service-broker
• BZ - 1509157 - Unable to list known health checks
• BZ - 1510320 - ES prometheus metrics interface returns nothing, can not show the ES prometheus metrics
• BZ - 1511357 - Task "Reload generated facts" failed while scaling up masters
• BZ - 1511432 - [3.7.0]some indices name miss in kibana
• BZ - 1511616 - The docker image check should not happen if osm_use_cockpit=false
• BZ - 1511869 - Docker login failed in proxy environment against an authenticated registry
• BZ - 1512461 - Should capitalize the first letter for MySQL on the home page
• BZ - 1512717 - Corrupt Sandbox Checkpoint Files
• BZ - 1512810 - Installation should fail immediately when necessary package not successfully installed
• BZ - 1512858 - The 'Next' button takes very long time to become enabled blue when ordering image
• BZ - 1513139 - Client side rate limiting makes migrations excessively long for large clusters
• BZ - 1513851 - Image image-inspector have no 3.7 tag
• BZ - 1514324 - [3.7] installer need provide a way to add docker auth to kubelet for auto pulling infra image from an authenticated registry in system container env without cri-o enabled
• BZ - 1515448 - [3.7] Aggregated Logging replacing all log levels with '3' and '6' after upgrade to 3.5 from 3.4
• BZ - 1516228 - Normal user can delete networkpolicy in cli but cannot in web console
• BZ - 1516300 - How to keep OCP Jenkins and plugins updated
• BZ - 1517700 - It will delete all the RCs in the project when deleting non-existing dc with name started or ended with special chars
• BZ - 1518497 - Alias of ImageStreamTag displays separately on webconsole
• BZ - 1519096 - "Context Dir" and "Git Reference" are empty when clicking "advanced options" after clicking "Try Sample Repository"
• BZ - 1520174 - Enabling logging in install inventory causes install to fail
• BZ - 1520377 - Logging upgrade fails from 3.6 to 3.7
• BZ - 1520866 - [3.7] "Setup ro mount of /root/.docker for containerized hosts" task is skipped in containerized install
• BZ - 1521218 - [RFE] Allow deploy logging with no-default storageclass
• BZ - 1523298 - Service catalog can not be installed after upgrading from v3.6 to v3.7
• BZ - 1523470 - Lack container identification code in the save docker event logs
• BZ - 1523625 - service catalog deployment fails
• BZ - 1524644 - Curator configuration produces wrong regular expressions
• BZ - 1525269 - View archive link broken
• BZ - 1525659 - Jenkins imagestream should use version-specific tags instead of latest
• BZ - 1525699 - garbagecollection deleting children of TemplateInstance/ServiceInstance on restart after crash
• BZ - 1526496 - Unable to add VSphere to Openshift
• BZ - 1527315 - Heapster is unable to connect to nodes due to InternalIP missing from node object
• BZ - 1529048 - dynamic storage for logging from glusterfs do not work from the installer
• BZ - 1529233 - "Add iptables allow rules" task failed when running system container install with cri-o enabled.
• BZ - 1531795 - Termination grace period set incorrectly for Cassandra pod
• BZ - 1532182 - Create serviceinstance via YAML will make overview page go wrong
• BZ - 1533313 - Failed to deploy logging
• BZ - 1533386 - openshift_logging_es_ops_allow_cluster_reader doesn't work
• BZ - 1534923 - Regression: Credentials cannot be extracted succeed while provision in ocp3.7
• BZ - 1535206 - Upgrade from OCP 3.7.9 to 3.7.14 breaks service catalog etcd entries
• BZ - 1535434 - More than one deployer pod is created
• BZ - 1535658 - [3.7] New auto egress IPs will fail after restarting node service
• BZ - 1537227 - service catalog controller daemonset update strategy is invalid
• BZ - 1538171 - Kibana timeout if viewing many (100M) records
• BZ - 1538446 - [3.7]Run etcd upgrade failed due to an undefined variable
• BZ - 1538781 - [3.7] Installer failed to configure AWS cloudprovider for EC2 C5 instance
• BZ - 1538789 - [3.7] haproxy lb install failed when haproxy-1.7.9-1.el7.x86_64 is installed.
• BZ - 1538795 - [3.7] Installer fails noting no etcd group despite etcd hosts group that IS defined
• BZ - 1538807 - [3.7] Installer terminates after single node reports error despite error tolerance
• BZ - 1538816 - [3.7] Check at install time if alleged openshift_ip value is actually openshift_public_ip
• BZ - 1538896 - [3.7] Invalid entries in namedCertificates when using openshift_master_named_certificates
• BZ - 1538954 - Meet error 'cannot get path "/swagger-2.0.0.pb-v1"' when run v3.9 `oc explain` resource against old server
• BZ - 1539094 - [3.7] Setting multiple values for OPTIONS with containerized installation fails to start node
• BZ - 1539146 - [3.7] docker_image_availability check does not respect override variables for containerized components
• BZ - 1539191 - Upgrade to Cassandra 3.0.15
• BZ - 1539830 - Suppress unlogged batch warnings in Cassandra logs
• BZ - 1539890 - [starter-ca-central-1] errors during migration of storage on 3.8
• BZ - 1540246 - [3.7] openshift_management_flavor and openshift_management_flavor_short are hard coded
• BZ - 1540437 - Logging couldn't be deployed using ose-ansible:v3.7 image
• BZ - 1540606 - [3.7] [OnlineStarter][free-stg][free-int]"Failed create pod sandbox"---deploy failed
• BZ - 1540783 - Console allows editing route host and reports success but silently drops changes
• BZ - 1540893 - Failed to deploy logging-mux when ops is enabled
• BZ - 1541041 - [3.7] Provisioner pod fails to deploy becasue of incorrect image prefix
• BZ - 1541403 - openshift_logging_elasticsearch fails with No such file or directory
• BZ - 1541948 - RFE: Allow regular expressions in curator settings
• BZ - 1542162 - [3.7] redeploy_node_certificates.yaml restarts docker daemon
• BZ - 1542247 - [3.7] Unclear warning if set --no-cache for source build
• BZ - 1542769 - eviction-soft never triggered because grace-period counter is reset
• BZ - 1542887 - Combine openshift_master/vars with defaults
• BZ - 1543044 - [3.7] Failed to unbind after deleting templateinstance with servicebinding existing
• BZ - 1543467 - A-MQ Components not visible in Java Console when using IE11 browser
• BZ - 1544243 - Elasticsearch fails to scale up during installation when multiple replicas specified
• BZ - 1546087 - Couldn't deploy version: ReplicationController is invalid: spec.template.spec.containers[0].image: Required value
• BZ - 1546156 - [3.7]Fix bug on kubelet failure to umount mount points.
• BZ - 1546170 - [3.7] missing node-to-node OVS flows
• BZ - 1547263 - Kibana page displays "OPENSHIFT ORIGIN" in OCP
• BZ - 1547348 - [3.7] exception output while using view archive link in pod log for default project
• BZ - 1547880 - ansible-playbook failed to install logging due to no filter named 'lib_utils_oo_random_word'
• BZ - 1548567 - Failed to undeploy HOSA
• BZ - 1549097 - Even after removing service catalog, "Provisioned Services" in Applications sub-menu is not removed and gets stuck at "Loading...".
• BZ - 1549296 - openshift_logging_es_pvc_storage_class_name' is undefined, prevents logging from deploying
• BZ - 1549749 - no def lib_utils_oo_random_word filter, was oo_random_word filter, blocks logging deployment
• BZ - 1549873 - no n-1 compatibility for oc scale
• BZ - 1549917 - [3.7][Backport] internal image registry was down due to data race
• BZ - 1553297 - [3.7] various auto-egress IP problems
• BZ - 1555367 - openshift_client_binary is undefined when redeploy logging
• BZ - 1557499 - After etcd v2 to v3 migration, masters are restarted before persisting config changes to use storage-backend etcd3
• BZ - 1557607 - [3.7] oc adm migrate storage produces error as signature annotations forbidden

CVEs

(none)

References

(none)