RHBA-2018:1134 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.4.1.44.52-3 and 3.3.1.46.39-3 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.4.1.44.52-3 and 3.3.1.46.39-3. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1133

This update fixes the following bugs:

• Image validation used to validate old image objects, and the image signature import controller used to generate such an image. This could cause invalid images to be pushed to etcd. This bug fix changes the validation to validate new image objects and introduces logic to fix some invalid images. As a result, the controller no longer generates invalid images and it is no longer possible to upload an invalid image object. (BZ#1559994, BZ#1559997)
• Images younger than the threshold are not added to the dependency graph. A blob that is used by a young image and by a prunable image is deleted because it has no references in the graph. Add young images to the graph and mark them as non-prunable. With this bug fix, the blob has references and is not deleted. (BZ#1509362)
• Use of JavaScript Array methods not supported by Internet Explorer 11 (`Array.find`, `Array.findIndex`) prevented some A-MQ pages from showing content when the user clicks on a tree node. This bug fix replace the unsupported Array methods with the Lodash library, and as a result the A-MQ pages show their content as expected. (BZ#1543396)
• When using NFS and the `subdir` option, `docker` created a new directory with incorrect access rights. This caused pods to be unable to write into the created directory. This bug fix ensures that OpenShift Container Platform creates the new directory with correct permissions. As a result, pods can write into the created directory. (BZ#1494369)

All OpenShift Container Platform 3.4 and 3.3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.44.52-3, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.46.39-3, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64

Fixes

• BZ - 1494369 - nfs share gets wrong permissions if subdir feature is used.
• BZ - 1509362 - [3.4] Prune Deleted Layer of a Valid Image due to minimum aging
• BZ - 1511629 - Cassandra readiness probe can incorrectly fail in multi node setup
• BZ - 1511631 - Cassandra readiness probe can incorrectly fail in multi node setup
• BZ - 1519139 - .all index doesn't show up in kinaba UI
• BZ - 1538569 - docker-registry fail to be deployed.
• BZ - 1543396 - A-MQ Components not visible in Java Console when using IE11 browser
• BZ - 1552332 - 15 minute delay to take master out of cluster during abrupt shutdown
• BZ - 1554645 - OpenShift verison print not correctly cause the installation failed
• BZ - 1559994 - [3.4][Backport] oc adm migrate storage produces error as signature annotations forbidden
• BZ - 1559997 - [3.3][Backport] oc adm migrate storage produces error as signature annotations forbidden

CVEs

(none)

References

(none)