RHBA-2018:1106 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.6.173.0.112 and 3.5.5.31.66 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.173.0.112 and 3.5.5.31.66. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1107

Space precludes documenting all of the bug fixes in this advisory. See the following Release Notes documentation, which will be updated shortly for these releases, for details about these changes:

https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html

https://docs.openshift.com/container-platform/3.5/release_notes/ocp_3_5_release_notes.html

All OpenShift Container Platform 3.6, and 3.5 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.6, see the following documentation, which will be updated shortly for release 3.6.173.0.112, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html

For OpenShift Container Platform 3.5, see the following documentation, which will be updated shortly for release 3.5.5.31.66, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_5_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.6 x86_64
• Red Hat OpenShift Container Platform 3.5 x86_64

Fixes

• BZ - 1461374 - Failed to attach the cinder volume after upgrade
• BZ - 1468199 - The PVC AccessModes of mediawiki apb is invalid
• BZ - 1471730 - Mediawiki123 can't access after binding to postgresql
• BZ - 1499762 - .all index is missing on kibana UI
• BZ - 1505959 - Fluentd not connected to Elasticsearch
• BZ - 1506286 - [3.6] missing messages + [error]: record cannot use elasticsearch index name type project_full: record is missing kubernetes.namespace_id field:
• BZ - 1507123 - etcd migrate v2 -> v3 playbook fails - Cannot link, file exists at destination
• BZ - 1509289 - [3.5] eviction manager sometimes evicts all pods
• BZ - 1511294 - Containerized uninstallation playbook does not clean up LB configuration
• BZ - 1513284 - [3.5.1]project indices can not be found on kibna UI
• BZ - 1514110 - [3.5] Aggregated Logging replacing all log levels with '3' and '6' after upgrade to 3.5 from 3.4
• BZ - 1517994 - Installing CNS with osm_default_node_selector fails
• BZ - 1518020 - etcd v2 to v3 migration updates named_certificates when it shouldn't be
• BZ - 1525415 - A lot of error messages in fluentd pod logs for deleted namespaces
• BZ - 1526485 - [3.5] Upgrade failed for AnsibleUndefinedVariable: 'l_bind_docker_reg_auth' is undefined
• BZ - 1527389 - [3.6] Nodes becomes NotReady, when status update connection is dropped/severed to master, causing node to wait on 15min default net/http timeout before trying again.
• BZ - 1527973 - Backport to 3.6 fix for failed to provision volume for claim test/pv0001-claim with StorageClass cinder (re-authentication fails)
• BZ - 1528370 - Need SWEET32 fix backported to 3.6
• BZ - 1528383 - update openshift_to_ovs_version for 3.6 branch
• BZ - 1530367 - atomic-openshift-master-controllers crashing due to apparent StatefulSet isRunningAndReady issue
• BZ - 1533181 - [3.6] Failed docker builds leave temporary containers on node
• BZ - 1533938 - Jenkins API authentication (with a serviceaccount) fails until the first web access (then it works)
• BZ - 1534775 - oadm diagnostics NetworkCheck fails to schedule pods if there is a default node selector in the master-config
• BZ - 1536189 - deploymentconfig controller creates event with large oldReplicas
• BZ - 1537120 - Invalid request Client state could not be verified
• BZ - 1537344 - docker_image_availability should honor custom registry-console locations
• BZ - 1538431 - Links will be broken and redirect request to homepage while pod's replicas more than 11 in any application
• BZ - 1538778 - [3.6] Installer failed to configure AWS cloudprovider for EC2 C5 instance
• BZ - 1538895 - [3.6] Invalid entries in namedCertificates when using openshift_master_named_certificates
• BZ - 1539091 - [3.6] Setting multiple values for OPTIONS with containerized installation fails to start node
• BZ - 1539150 - [3.6] docker_image_availability check does not respect override variables for containerized components
• BZ - 1539855 - Client side rate limiting makes migrations excessively long for large clusters
• BZ - 1539889 - [starter-ca-central-1] errors during migration of storage on 3.8
• BZ - 1542166 - eviction-soft never triggered because grace-period counter is reset
• BZ - 1543360 - [3.6] Updating trigger with oc set trigger --from-image points to unextected namespace when using "-n"
• BZ - 1543402 - A-MQ Components not visible in Java Console when using IE11 browser
• BZ - 1543435 - A-MQ Components not visible in Java Console when using IE11 browser
• BZ - 1543748 - [3.5] Install fails when Host name has capital letter assigned to it
• BZ - 1543749 - [3.6] Install fails when Host name has capital letter assigned to it
• BZ - 1544200 - Quick installation failed by "Requested profile 'atomic-guest' doesn't exist."
• BZ - 1544395 - [GSS] Migrating etcd Data: v2 to v3 playbook issues (if missing certificates)
• BZ - 1544399 - [GSS] Migrating etcd Data: v2 to v3 playbook issues (openshift.master.cluster_method missing)
• BZ - 1544737 - first containerized etcd not upgraded to latest image when migrating etcd v2-> v3
• BZ - 1545089 - Cannot add Roles for the user after adding few roles for the user in dashboard
• BZ - 1545907 - SDN traffic being forced through the proxy
• BZ - 1547347 - Kibana page displays "OPENSHIFT ORIGIN" in OCP
• BZ - 1547688 - [3.6] exception output while using view archive link in pod log for default project
• BZ - 1550470 - [3.6] Master api hang when 1 of master/etcd down
• BZ - 1554707 - Fail to migrate etcd v2 to v3 due to undefined variable openshift_ca_host
• BZ - 1556838 - [3.5] Mounting file in a subpath fails if file was created in initContainer
• BZ - 1556897 - Duplicate elasticsearch entries increase as namespaces increase (constant message rate)
• BZ - 1556936 - After etcd v2 to v3 migration, masters are restarted before persisting config changes to use storage-backend etcd3
• BZ - 1564182 - [3.6] Upgrade playbook fails with TemplateRuntimeError: no test named 'equalto'
• BZ - 1565077 - Unknown filter plugin elasticsearch_genid in fluentd pod

CVEs

(none)

References

(none)