Synopsis

OpenShift Container Platform 3.7 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.7.52 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.7.52. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1799

This update fixes the following bugs:

• Jenkins no_proxy processing could not handle suffixes like ".svc". As a result, communication between a Jenkins k8s agent pod and the Jenkins master would attempt to go through a configured http_proxy and fail.

With this bug fix, the OpenShift Container Platform jenkins agent images are updated to automatically include the jenkins master and jnlp hosts in the no_proxy list. The Jenkins limitation for no_proxy processing is now circumvented. (BZ#1578987)

• This bug fix addresses an issue where HPA will scale above maxReplicas in some situations. (BZ#1578422)
• This bug fix addresses an issue where cfs_quota might still be set on a pod even when cpu-cfs-quota is set to false on the node. (BZ#1581862)
• In some cases, the shared informer cache was not initialized properly or failed to initialize. This caused controllers, such as garbage collection, to become stuck waiting for caches to be initialized. With this bug fix, when the cache becomes stuck, requests no longer wait for cache to initialize and are now forwarded immediately to storage (etcd) directly to unblock controllers. As a result, controllers can now reach the resources without being stuck on cache to initialize. (BZ#1559987)

All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.7 see the following documentation, which will be updated shortly for release 3.7.52, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.7 x86_64

Fixes

• BZ - 1559448 - Hawkular Metrics crashes with OutOfMemoryError under moderate load
• BZ - 1559987 - Unable to delete deploymentconfig
• BZ - 1567222 - Metrics Casandra PV running out of space due to snapshots
• BZ - 1570140 - Hawkular is not clearing out old data even though hawkular.metrics.default-ttl is specified
• BZ - 1570779 - Eviction manager not calculating available disk space properly with overlayfs
• BZ - 1570845 - [3.7] cluster registries have unnecessary environment values
• BZ - 1571045 - Large number of data_temp tables cause request timeouts and other performance problems
• BZ - 1573827 - config-map is not getting updated with certs
• BZ - 1577356 - [3.7] oadm prune images fails on invalid image reference
• BZ - 1578422 - [backport] HPA replica count calculation fixes
• BZ - 1578987 - jenkins slave does not respect no_proxy 3.7
• BZ - 1581862 - [3.7] Limit ranges are being applied with cpu-cfs-quota set to false
• BZ - 1582610 - Subpath volume mount does not receive setgid by fsGroup

CVEs

(none)

References

(none)