- Issued:
- 2018-08-09
- Updated:
- 2018-08-09
RHBA-2018:2339 - Bug Fix Advisory
Synopsis
OpenShift Container Platform 3.6 bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Red Hat OpenShift Container Platform release 3.6.173.0.128 is now available with updates to packages and images that fix several bugs.
Description
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.173.0.128. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2018:2340
This update fixes the following bugs:
- The task was failing because the conditional could not be evaluated due to the undefined variable. A conditional check was added to ensure the variable was present before evaluating the remaining conditions. The task would be skipped when using embedded etcd because the task does not apply in that scenario. This issue is now addressed. (BZ#1583530)
- Recently, `cloudResourceSyncManager` was implemented, which continuously fetched node addresses from cloud providers. The kubelet then received node addresses from the `cloudResourceSyncManager`. At the time of node registration or kubelet start, the kubelet fetches node addresses in a blocking loop from `cloudResourceSyncManager`. The issue was that `cloudResourceSyncManager` was not started before the kubelet had started fetching node addresses from it for the first time. Due to this, the kubelet got stuck in the blocking loop and never returned. It caused node failures at network level, and no node could be registered. Also, as the kubelet was blocked early, the `cloudResourceSyncManager` never got a chance to start. The `cloudResourceSyncManager` is now started early in the kubelet startup process so that the kubelet does not get blocked on it and `cloudResourceSyncManager` is always started. (BZ#1601749)
All OpenShift Container Platform 3.6 users are advised to upgrade to these updated packages and images.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
See the following documentation, which will be updated shortly for release 3.6.173.0.128, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.openshift.com/container-platform/3.6/release_notes/ocp_3_6_release_notes.html
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
Affected Products
- Red Hat OpenShift Container Platform 3.6 x86_64
Fixes
- BZ - 1583129 - [3.6] Error creating subnet for node - just error message in logs - OCP on Azure
- BZ - 1583530 - [3.6]Fail to upgrade against ocp with embedded etcd
- BZ - 1589656 - [3.6] inotify resources exhausted : possible leak in cAdvisor
- BZ - 1601749 - [3.6] Could not find an allocated subnet for node
CVEs
(none)
References
(none)
Red Hat OpenShift Container Platform 3.6
SRPM | |
---|---|
atomic-openshift-3.6.173.0.128-1.git.0.8da0828.el7.src.rpm | SHA-256: 5f5b30a530acf2f58adec2bae7816b7394c5d9cb78eda28ade122f0cf496f502 |
openshift-ansible-3.6.173.0.128-1.git.0.8b3b86b.el7.src.rpm | SHA-256: 8301d6a245b8874ab6f3a9e6956efd581f6e748afb37bf587964f1324f848e3e |
x86_64 | |
atomic-openshift-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: d8fe0faf4709ca91301e226a1445796536bcc74aa4913a5c81e8b2ad393fc928 |
atomic-openshift-clients-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: 734e6bcd3316843e69fed82d22b3bbd2ab2966c6889048810eff5d66fce2c823 |
atomic-openshift-clients-redistributable-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: a6bfad66d2494354f16b26c01ebaba61ebc8970ee0ede1f5989ee80817fea36e |
atomic-openshift-cluster-capacity-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: bb8ed56351bbc3771edf80984c49a740da12e9190e4adfd3d3caf902f425ddec |
atomic-openshift-docker-excluder-3.6.173.0.128-1.git.0.8da0828.el7.noarch.rpm | SHA-256: 80ec9117e8bec45b79504e3a9965f3d420cf175fd0459c607a2a1803da87268d |
atomic-openshift-dockerregistry-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: f90c881f69efba8ca64667dc3758f65892e3fa1b1db71420661a9559a5df1919 |
atomic-openshift-excluder-3.6.173.0.128-1.git.0.8da0828.el7.noarch.rpm | SHA-256: 812569a02e8fd93dd0d8e69cb697d70b1bfccd42e9888c37f0d9777957772519 |
atomic-openshift-federation-services-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: fe2328ee937a819aa62f95b6b03feed2e48d9cd14ed72e482f99e4eb0c9ee8a0 |
atomic-openshift-master-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: 89323a0be43d59b045794c561007504ed5777f04629bfa1c4bb18791b775125a |
atomic-openshift-node-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: 52def90382ffb3ff95486da46b44249eee80955b9feece0ce5bcb1f5d2132e4e |
atomic-openshift-pod-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: 5fed1c1a2d3b76bbef89be904171912c59c234396dfa455a8b215fbf9981117a |
atomic-openshift-sdn-ovs-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: d4d9739a616b8c6dfde31c04382b0f532420c002825b9c180ddfb07554c81473 |
atomic-openshift-service-catalog-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: 1a9db07af9d64dd12f16d631ae39046101b76f21f7d01bb3d7ca8a1bb84184b3 |
atomic-openshift-tests-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: d1cd546ca29ae0a7bc18c05039ea21a297658741cbfb5aa17a740eebc0cf2128 |
atomic-openshift-utils-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: 4b68e8f8d2b1fec98a9977fa01150ff0f346f16995955c87ae208acd47a74452 |
openshift-ansible-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: 3432a90c5350393ca6fe371f3324e474fed8c73b17f5a0d89ea3cdb4a94a7ca9 |
openshift-ansible-callback-plugins-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: 7fde926c4e5c2966fcd3786c018fdbdb0699d4c5dae07294e25a9dfed0b86132 |
openshift-ansible-docs-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: 6af2c4f2cb2a58951da28c0dc492221e3786ae67ed7e760e220b140134fe4d78 |
openshift-ansible-filter-plugins-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: 4a8e783a7fdf4a463efe1e874abc626f9fb40184e3ae8f6e91a3aaa367846e1c |
openshift-ansible-lookup-plugins-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: aac79addecf7d17383fb0027b540f98baf867f461c71fe16e8b426d670bd5d49 |
openshift-ansible-playbooks-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: e326ba5fb5ac78a9eb8434f0b3e3586d253b51680329db541c28320ce065efdc |
openshift-ansible-roles-3.6.173.0.128-1.git.0.8b3b86b.el7.noarch.rpm | SHA-256: 30fa668ec74f4bbbb51d09969b246d07eadc42b152dca719498af2dcf98a3bc2 |
tuned-profiles-atomic-openshift-node-3.6.173.0.128-1.git.0.8da0828.el7.x86_64.rpm | SHA-256: 017dbe5fa803d8edd70d6b480992812e43f33d9acca697495b48a3f83c533766 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.