Synopsis

OpenShift Container Platform 3.7 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.7.52 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.7.52. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1799

This update fixes the following bugs:

• Jenkins no_proxy processing could not handle suffixes like ".svc". As a result, communication between a Jenkins k8s agent pod and the Jenkins master would attempt to go through a configured http_proxy and fail.
  With this bug fix, the OpenShift Container Platform jenkins agent images are updated to automatically include the jenkins master and jnlp hosts in the no_proxy list. The Jenkins limitation for no_proxy processing is now circumvented. (BZ#1578987)
  
• This bug fix addresses an issue where HPA will scale above maxReplicas in some situations. (BZ#1578422)
  
• This bug fix addresses an issue where cfs_quota might still be set on a pod even when cpu-cfs-quota is set to false on the node. (BZ#1581862)
  
• In some cases, the shared informer cache was not initialized properly or failed to initialize. This caused controllers, such as garbage collection, to become stuck waiting for caches to be initialized. With this bug fix, when the cache becomes stuck, requests no longer wait for cache to initialize and are now forwarded immediately to storage (etcd) directly to unblock controllers. As a result, controllers can now reach the resources without being stuck on cache to initialize. (BZ#1559987)
  

All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.7 see the following documentation, which will be updated shortly for release 3.7.52, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.7 x86_64

Fixes

• BZ - 1559448 - Hawkular Metrics crashes with OutOfMemoryError under moderate load
• BZ - 1559987 - Unable to delete deploymentconfig
• BZ - 1567222 - Metrics Casandra PV running out of space due to snapshots
• BZ - 1570140 - Hawkular is not clearing out old data even though hawkular.metrics.default-ttl is specified
• BZ - 1570779 - Eviction manager not calculating available disk space properly with overlayfs
• BZ - 1570845 - [3.7] cluster registries have unnecessary environment values
• BZ - 1571045 - Large number of data_temp tables cause request timeouts and other performance problems
• BZ - 1573827 - config-map is not getting updated with certs
• BZ - 1577356 - [3.7] oadm prune images fails on invalid image reference
• BZ - 1578422 - [backport] HPA replica count calculation fixes
• BZ - 1578987 - jenkins slave does not respect no_proxy 3.7
• BZ - 1581862 - [3.7] Limit ranges are being applied with cpu-cfs-quota set to false
• BZ - 1582610 - Subpath volume mount does not receive setgid by fsGroup

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.7

SRPM
atomic-openshift-3.7.52-1.git.0.f3beb8d.el7.src.rpm	SHA-256: 535e87ab5581e005d4c5275094d01d330388bdb50f9dbae8c04792f3fd1d98fe
cockpit-160-3.el7.src.rpm	SHA-256: 233162ebfd038e8a741b4c869bc18b5faae18c687510d0e75d230c8028d2de39
cri-tools-1.0.0-5.rhaos3.7.gitd0eecfb.el7.src.rpm	SHA-256: fcf692073b04823e550396162d9ae8340908bd01433e748ab17018e624fd3160
jenkins-2-plugins-3.7.1527795978-1.el7.src.rpm	SHA-256: a82ab335d0234452433d2cdfbf54941ed1d033d34c460504e777dfeba35aefa8
openshift-ansible-3.7.52-1.git.0.3fddee4.el7.src.rpm	SHA-256: 25d2147c7080881713ef309f9e5df5c217dea47d96d76eae2f01b2f57b7621db
rubygem-fluent-plugin-elasticsearch-1.15.2-1.el7.src.rpm	SHA-256: 1a62cf79b62d8849741cf18a90bf4896920abde99a8936861504523b13f83bcd
x86_64
atomic-openshift-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 157d29d4897c160ced3bee8707d4797e314e46bf7e898954d47216d2f13f0956
atomic-openshift-clients-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 423f6d809d05aeb5294a229d85c12fa5a46789f5cb4ffda00bfd56a3cc1ed051
atomic-openshift-clients-redistributable-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 584ba8c26f2f0b2cda5dd6d6730f25190acb3e4a6f41d131f382bd9e771a55d0
atomic-openshift-cluster-capacity-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 8e32c62504d3661e3101f5bd6b83bc9b04137a8e7a9f4c43476c9d1b3f26f094
atomic-openshift-docker-excluder-3.7.52-1.git.0.f3beb8d.el7.noarch.rpm	SHA-256: 7659f9d67aebd07a9035c50eb688614ee35892d7d6d37e0c64ac8a81b82a6b5a
atomic-openshift-dockerregistry-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: b7f47d4b43c9257010d50383fdf4b218056ffed32b407ff7a4424dddbd68030c
atomic-openshift-excluder-3.7.52-1.git.0.f3beb8d.el7.noarch.rpm	SHA-256: 7dcec74c7e83fe8b772c625ce29d27e23a1af060cb3a12e51806c3d71ff2c0be
atomic-openshift-federation-services-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 571892e4c78c86ab87354e14671d7043e382af0c45773f265bd4188366c4b5b5
atomic-openshift-master-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 82340b27404a46e2f3d6e9bd00c77c0749d1aed81b9d4168d7b38d61e5d85c19
atomic-openshift-node-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: c3fc6a9cdf89ca5ac948793e14b8c97e3203602ffdc28abccae0a7fb717c842a
atomic-openshift-pod-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 0c0a8f7ca9c412fef325e17f6ce6f8cd4a70dff1e387fe83e2a102928a9d6fad
atomic-openshift-sdn-ovs-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: 7bde10a8ed19ffdc151fab31d2c79fd87dfb04c67000ba3d1134ad06dcf87482
atomic-openshift-service-catalog-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: c7be8198ee5ea756c54219e7e70b2e74e4d25df00168e4bd86639c5d201ab02a
atomic-openshift-template-service-broker-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: aa9e9f60a54df1176dd334331fadea000a64b7ca848aef8925827b43e46b4d88
atomic-openshift-tests-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: c233e61ee790ef80fbf2580dd02aa77da0611fbc60a98ddc2a0a18af2e2f1191
atomic-openshift-utils-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: 5b42df82af53b04c595881b223d024927fcdb124fa52ded2e548d3c0d9c2699a
cockpit-debuginfo-160-3.el7.x86_64.rpm	SHA-256: c41aae9ab3ee457abf48852d2dcd31f1e44290ea91f3dfebdba558f6780b9bea
cockpit-kubernetes-160-3.el7.x86_64.rpm	SHA-256: eebac62069aeceddbf3b2a99d01892053629e1d051761d9ffa17a799f97eecea
cri-tools-1.0.0-5.rhaos3.7.gitd0eecfb.el7.x86_64.rpm	SHA-256: 2fdab857bd0982ac4c6072f6558f507c887f043ca9fe9740d6043dec68363576
cri-tools-debuginfo-1.0.0-5.rhaos3.7.gitd0eecfb.el7.x86_64.rpm	SHA-256: 44189c7ebdb6591bc255597a7d2dec76310e34664bd405a3fac09e1fda695b65
jenkins-2-plugins-3.7.1527795978-1.el7.noarch.rpm	SHA-256: 991f1008ffec8aae25c02dc72fd7039a32e54e06ecfb979341a08b9c64cfe80f
openshift-ansible-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: b1126080ee7b25699192a35fce214a4bacbeed8c3f0da55a31e02d4ad097d268
openshift-ansible-callback-plugins-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: b21975af089c97f6c664723fb6540200df38d675f5dac4818b01c7186f8e1561
openshift-ansible-docs-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: a807803dc0f0f7f3e056857b67bf7c9f903d87f8ab2e105311a328973e5a4ee5
openshift-ansible-filter-plugins-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: f86180100b02897986b599f94428bc7040dfc8634daff7ca6d7ac9ecee8d481f
openshift-ansible-lookup-plugins-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: bdfed13c7648aa1552412098706825f5549e5a67d7bd83d6c198742468bffc83
openshift-ansible-playbooks-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: 4be34151b02f463b4c8f7b49b7aea51a2984c637579f88992a130b6fdfb476ff
openshift-ansible-roles-3.7.52-1.git.0.3fddee4.el7.noarch.rpm	SHA-256: 16d8822b1d2b96fe30526538a48959880b085355b3e3fb376209635a5db78045
rubygem-fluent-plugin-elasticsearch-1.15.2-1.el7.noarch.rpm	SHA-256: 33c00413b53ff1895595bab8889eef06674162f95b3aefce6c4ba8ab3e4f75f7
rubygem-fluent-plugin-elasticsearch-doc-1.15.2-1.el7.noarch.rpm	SHA-256: 1ebd2e2facc38cbd08116fa94a0c81d6aea85b08912891ceef3d76f711fa5669
tuned-profiles-atomic-openshift-node-3.7.52-1.git.0.f3beb8d.el7.x86_64.rpm	SHA-256: aaedc88c5cc5496224bd6f66b969c89d102868be8f29bf7449c9b35393518836