- Issued:
- 2018-07-24
- Updated:
- 2018-07-24
RHBA-2018:2234 - Bug Fix Advisory
Synopsis
OpenShift Container Platform 3.7 bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Red Hat OpenShift Container Platform releases 3.7.57 are now available with updates to packages and images that fix several bugs.
Description
Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.7.57. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2018:2235
This update fixes the following bugs:
- A fix backported from the OpenShift Container Platform 3.9 installer incorrectly made use of lib_utils_oo_dict_to_list_of_dict, which does not exist in the 3.7 code base. This bug fix updates the task to use the correct oo_dict_to_list_of_dict filter instead. (BZ#1596455)
- Aliasing only occurs when a user logs into Kibana. If the openshift-elasticsearch-plugin is not functioning correctly, aliasing may not occur. This caused the .all alias to not be associated with all indices. This bug fix uses Elasticsearch index templates to alias all newly created indices. As a result, all newly created indices will be aliased to .all. (BZ#1548038)
- Bugs in the NetworkPolicy implementation could cause certain NetworkPolicy objects (most likely malformed ones) to cause OpenShift Container Platform nodes to crash. This bug fix updates the code to now handle malformed objects. (BZ#1596683)
- During cluster upgrades, the yum command would install the latest version available of any dependent package, which resulted in the latest version of node packages to be installed. This bug fix updates the Ansible task to include all related node packages with the version specified. As a result, the expected version is now installed instead of the latest. (BZ#1544694)
All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For OpenShift Container Platform 3.7 see the following documentation, which will be updated shortly for release 3.7.57, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
Affected Products
- Red Hat OpenShift Container Platform 3.7 x86_64
Fixes
- BZ - 1544694 - [3.7]Upgrading from 3.6 to 3.7 using upgrade_nodes playbook does not honour openshift_pkg_version
- BZ - 1548038 - .all alias not being updated with new indices after a certain date
- BZ - 1596455 - no filter named lib_utils_oo_dict_to_list_of_dict when uninstall glusterfs
CVEs
(none)
References
(none)
Red Hat OpenShift Container Platform 3.7
SRPM | |
---|---|
atomic-openshift-3.7.57-1.git.0.c61c7cf.el7.src.rpm | SHA-256: 489355eb5c3e849dd6582576e56eecbacf6450151fe6b58e95d00c92cd9179fb |
openshift-ansible-3.7.57-1.git.33.cf01e48.el7.src.rpm | SHA-256: 7b0a2f467fd562b02545e45ab721165cce437459f2687638f096d26ae511f274 |
x86_64 | |
atomic-openshift-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 991520d09959bbe9b6ea9102ebb9808a433f2bf4d8ce7cc7d8ccccf8c5409987 |
atomic-openshift-clients-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 76617c234a0e7aaece7355243e0dbaf292906e10201484853f43b1a04fb1e820 |
atomic-openshift-clients-redistributable-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: eed8aa96cafe45d556bb83c60a4be4a04191b9ed69d0fab884849d22e1b20648 |
atomic-openshift-cluster-capacity-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: c3b3b608bb0d1d3e2894bab927e7308c16db36cdc89591077039d2a099fe09c0 |
atomic-openshift-docker-excluder-3.7.57-1.git.0.c61c7cf.el7.noarch.rpm | SHA-256: d62c89802910d7cfb2e409216dc423d8c82f875a7f4fd5465be7ae8923d76aa1 |
atomic-openshift-dockerregistry-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: e7538bd1dec56db1a185eb7a79eb3e0696655a87dafcc8460262ada01555b917 |
atomic-openshift-excluder-3.7.57-1.git.0.c61c7cf.el7.noarch.rpm | SHA-256: 07268fd3a951a6af418b5d8acf5ca25deb54566797fc6577688ca328b927c8c0 |
atomic-openshift-federation-services-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: fce5d27c5b4d0585487946b7788a2b25ebee7500349df82b9c62517a67faa81d |
atomic-openshift-master-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: e78a279c762a764dd3c4ead6c895d77e7bf9e81052e4dbd364a39e69fc4e72a8 |
atomic-openshift-node-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 56eb9a83f3f39aa7bca18a8d2a1d56a8558f2448c98ffbcbce8dc0180e0a57fb |
atomic-openshift-pod-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 13ee41787988b6b17f584abd557bfbb3f66b21d709693ce422f3d932ba67a92d |
atomic-openshift-sdn-ovs-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 123458682c10fb373b70075b30e7c299cb08b40ba6a7cb2b218855eb48adbf11 |
atomic-openshift-service-catalog-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: e5f3eb046fea6a97f929dd1c90f99d39c11ad34e3ddd9df5e6aa36b7580b1738 |
atomic-openshift-template-service-broker-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 51340cde40d016e9e4c3cf031ebfaa4245955b16cc66e7e93d5ae3ac31773513 |
atomic-openshift-tests-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: fd03fbb312c945c81fdcee8716f9d85a312fafd750e2ca270dd81fee485ff6f8 |
atomic-openshift-utils-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: 945abb6af7cb1285f2143adb51ef27f30b25946491273d23e67bb5b599899715 |
openshift-ansible-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: b84c3dc3e864d21ece2a0d7ddff6e24e1017c9527335c1da0523cd5505116689 |
openshift-ansible-callback-plugins-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: 1b952820182a4704186025b461f28eac150f3e95a46218a422368db0663900d2 |
openshift-ansible-docs-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: 17b15e40e26c469f3fec8a2e695c9d51e281841a505a44a3303321ff28f66c8d |
openshift-ansible-filter-plugins-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: 3d5a721c0a585f37c047decc86618871f5e295a092a83f29814ad9ba15e3a0d5 |
openshift-ansible-lookup-plugins-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: 0b7c8fbc2cd44dd8571af7c757bac677a552f6b80cd1f06ceb977e5d8623c0a1 |
openshift-ansible-playbooks-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: 31489a8c5fc39a6ab103bb638cfdcd5e3bb41172cc55025723470f08246fc224 |
openshift-ansible-roles-3.7.57-1.git.33.cf01e48.el7.noarch.rpm | SHA-256: c24de8e6a3835bf5efcc5a0dcfeb228f29d47c51afc4ba68fec72d70cf314807 |
tuned-profiles-atomic-openshift-node-3.7.57-1.git.0.c61c7cf.el7.x86_64.rpm | SHA-256: 0a4c3c813959bbdef8157d5ac2309b55e0ba7bb668bea2eaaebc91029a1abd23 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.