Synopsis

OpenShift Container Platform 3.6 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.6.173.0.128 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.173.0.128. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:2340

This update fixes the following bugs:

• The task was failing because the conditional could not be evaluated due to the undefined variable. A conditional check was added to ensure the variable was present before evaluating the remaining conditions. The task would be skipped when using embedded etcd because the task does not apply in that scenario. This issue is now addressed. (BZ#1583530)
  
• Recently, `cloudResourceSyncManager` was implemented, which continuously fetched node addresses from cloud providers. The kubelet then received node addresses from the `cloudResourceSyncManager`. At the time of node registration or kubelet start, the kubelet fetches node addresses in a blocking loop from `cloudResourceSyncManager`. The issue was that `cloudResourceSyncManager` was not started before the kubelet had started fetching node addresses from it for the first time. Due to this, the kubelet got stuck in the blocking loop and never returned. It caused node failures at network level, and no node could be registered. Also, as the kubelet was blocked early, the `cloudResourceSyncManager` never got a chance to start. The `cloudResourceSyncManager` is now started early in the kubelet startup process so that the kubelet does not get blocked on it and `cloudResourceSyncManager` is always started. (BZ#1601749)
  

All OpenShift Container Platform 3.6 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.6.173.0.128, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.6 x86_64

Fixes

• BZ - 1583129 - [3.6] Error creating subnet for node - just error message in logs - OCP on Azure
• BZ - 1583530 - [3.6]Fail to upgrade against ocp with embedded etcd
• BZ - 1589656 - [3.6] inotify resources exhausted : possible leak in cAdvisor
• BZ - 1601749 - [3.6] Could not find an allocated subnet for node

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.6

SRPM
atomic-openshift-3.6.173.0.128-1.git.0.8da0828.el7.src.rpm	SHA-256: 5f5b30a530acf2f58adec2bae7816b7394c5d9cb78eda28ade122f0cf496f502
openshift-ansible-3.6.173.0.128-1.git.0.8b3b86b.el7.src.rpm	SHA-256: 8301d6a245b8874ab6f3a9e6956efd581f6e748afb37bf587964f1324f848e3e
x86_64
atomic-openshift-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: d8fe0faf4709ca91301e226a1445796536bcc74aa4913a5c81e8b2ad393fc928
atomic-openshift-clients-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: 734e6bcd3316843e69fed82d22b3bbd2ab2966c6889048810eff5d66fce2c823
atomic-openshift-clients-redistributable-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: a6bfad66d2494354f16b26c01ebaba61ebc8970ee0ede1f5989ee80817fea36e
atomic-openshift-cluster-capacity-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: bb8ed56351bbc3771edf80984c49a740da12e9190e4adfd3d3caf902f425ddec
atomic-openshift-docker-excluder-3.6.173.0.128-1.git.0.8da0828.el7.noarch.rpm	SHA-256: 80ec9117e8bec45b79504e3a9965f3d420cf175fd0459c607a2a1803da87268d
atomic-openshift-dockerregistry-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: f90c881f69efba8ca64667dc3758f65892e3fa1b1db71420661a9559a5df1919
atomic-openshift-excluder-3.6.173.0.128-1.git.0.8da0828.el7.noarch.rpm	SHA-256: 812569a02e8fd93dd0d8e69cb697d70b1bfccd42e9888c37f0d9777957772519
atomic-openshift-federation-services-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: fe2328ee937a819aa62f95b6b03feed2e48d9cd14ed72e482f99e4eb0c9ee8a0
atomic-openshift-master-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: 89323a0be43d59b045794c561007504ed5777f04629bfa1c4bb18791b775125a
atomic-openshift-node-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: 52def90382ffb3ff95486da46b44249eee80955b9feece0ce5bcb1f5d2132e4e
atomic-openshift-pod-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: 5fed1c1a2d3b76bbef89be904171912c59c234396dfa455a8b215fbf9981117a
atomic-openshift-sdn-ovs-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: d4d9739a616b8c6dfde31c04382b0f532420c002825b9c180ddfb07554c81473
atomic-openshift-service-catalog-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: 1a9db07af9d64dd12f16d631ae39046101b76f21f7d01bb3d7ca8a1bb84184b3
atomic-openshift-tests-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: d1cd546ca29ae0a7bc18c05039ea21a297658741cbfb5aa17a740eebc0cf2128
atomic-openshift-utils-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: 4b68e8f8d2b1fec98a9977fa01150ff0f346f16995955c87ae208acd47a74452
openshift-ansible-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: 3432a90c5350393ca6fe371f3324e474fed8c73b17f5a0d89ea3cdb4a94a7ca9
openshift-ansible-callback-plugins-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: 7fde926c4e5c2966fcd3786c018fdbdb0699d4c5dae07294e25a9dfed0b86132
openshift-ansible-docs-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: 6af2c4f2cb2a58951da28c0dc492221e3786ae67ed7e760e220b140134fe4d78
openshift-ansible-filter-plugins-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: 4a8e783a7fdf4a463efe1e874abc626f9fb40184e3ae8f6e91a3aaa367846e1c
openshift-ansible-lookup-plugins-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: aac79addecf7d17383fb0027b540f98baf867f461c71fe16e8b426d670bd5d49
openshift-ansible-playbooks-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: e326ba5fb5ac78a9eb8434f0b3e3586d253b51680329db541c28320ce065efdc
openshift-ansible-roles-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm	SHA-256: 30fa668ec74f4bbbb51d09969b246d07eadc42b152dca719498af2dcf98a3bc2
tuned-profiles-atomic-openshift-node-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm	SHA-256: 017dbe5fa803d8edd70d6b480992812e43f33d9acca697495b48a3f83c533766