Synopsis

OpenShift Container Platform 3.7 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.7.62 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.7.62. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:2546

This update fixes the following bugs:

• Groups associated with a user were not previously checked when performing access checks to look up the readiness of objects created by templates. This resulted in a readiness failure at the template instance level. This bug fix passes the user's groups when performing the readiness check operation, not just when performing the object creation. (BZ#1610991)
  
• Previously, clusters running with OpenStack cloud integration had nodes removed when the corresponding instance was stopped. This bug fix prevents node resources whose instances are stopped from being removed from the cluster. (BZ#1614849)
  

All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.7.62, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.7 x86_64

Fixes

• BZ - 1544358 - [openshift-ansible] setup-openshift-heketi-storage improper image
• BZ - 1596448 - [3.7] link return 404 not found, link in msg of task "Fail if no etcd hosts group is defined"
• BZ - 1598090 - pod error json: cannot unmarshal array into Go value of type types.ContainerJSON
• BZ - 1600859 - redeploy-certificates.yml playbooks fails in containerized envs in 3.7 because openshift_is_containerized variable not being defined
• BZ - 1605148 - [3.7]failed to create fsnotify watcher: too many open files
• BZ - 1610991 - [3.7] Provision call failed: deploymentconfigs is forbidden: User cannot get deploymentconfigs in project
• BZ - 1614849 - [3.7] do not delete node in openstack, if those still exist in cloudprovider

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.7

SRPM
atomic-openshift-3.7.62-1.git.0.ba171ec.el7.src.rpm	SHA-256: 7782d312139eece75312e795a04d25bd9cd3e6874b44627acf7df45d42f78141
openshift-ansible-3.7.62-1.git.0.48dbebc.el7.src.rpm	SHA-256: 915216423cce2be92c269e1ea339474e09f5b6184910f5c2d8468962bbbe8ed3
openshift-elasticsearch-plugin-2.4.4.23__redhat_1-3.el7.src.rpm	SHA-256: 4775973002372e1006fb13e1a3b0ab908a0381cecb80f80cf0136d3f13baa0dd
python-paramiko-2.1.1-4.el7.src.rpm	SHA-256: 43ba21a7cbfc99918164c9dee8e2c2ece5915b421834a00474d2bfbeb3d748b7
rubygem-fluent-plugin-viaq_data_model-0.0.14-1.el7.src.rpm	SHA-256: 5443978f13339535317a345471de511ed09785fa725ad0394740c0fbd54806fb
x86_64
atomic-openshift-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: ebe6752c261a942a782cdc9b8b80d923a1767013a20e8d8639bf5173b38ec0fa
atomic-openshift-clients-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 765d02ef7457d30ca514af68a10b679ab643c6f3950af7e61a9f7bab8b434597
atomic-openshift-clients-redistributable-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 6eb3a1560763ccaa1cbf9150a03a8f98aa5808584dce4b1a3976ebf2f80c5973
atomic-openshift-cluster-capacity-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: cf1b6c55230a2bbc57755a535cda7a7ff9e7c0476a68745386ebfacc65d7e8cb
atomic-openshift-docker-excluder-3.7.62-1.git.0.ba171ec.el7.noarch.rpm	SHA-256: d4877f591c097ff3806fa545831b5af3397f2539fcb6042fd142543d12df5f9f
atomic-openshift-dockerregistry-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 3554b2aebd73a79abf28e5a9342cf45d48ceaf093b2301077bd1105a95719339
atomic-openshift-excluder-3.7.62-1.git.0.ba171ec.el7.noarch.rpm	SHA-256: 301b82a94f506088aa08e3ec8bb1a5598bc54521ebb0458425a187ab2c1ae13e
atomic-openshift-federation-services-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: a8489ee8c71745e9109cf538481ffa3d960cf1a3f5aee11fbf25115792c4022a
atomic-openshift-master-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: ddd206d39b17e4d3e1fb749c7412227daaf7d6e895ac213c1ab77aec885ad2e8
atomic-openshift-node-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 3df0902fe437b3615d707a8864c33a36ced39a6213149c871be98390fc4b1280
atomic-openshift-pod-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 6f169560efc044a08f2b3426e8c71710a175e3deb28ee97bfffedf598edd97a2
atomic-openshift-sdn-ovs-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 30edc55131cd01d8ce4a5bc27d51d2799d0b5ab7e3287e3bb46636ea6bc8c75c
atomic-openshift-service-catalog-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 53dbb45ded2e64c89d746ee8100a545a5be179c708c8ba76e37ebcbd21cba0ec
atomic-openshift-template-service-broker-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: 3ce57d85c0902bf1a5c2c3d40dce1ec41ab6720996719815814c8108c9e2f153
atomic-openshift-tests-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: e4bfbfc7dba7f36f290983e1543815edfa7b3fd713a4432ea18935084bae0266
atomic-openshift-utils-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: f4e8b3e93dbab1398baacd2b61fa4d2d30bfd5de5b7a46f9af4d91e613082117
openshift-ansible-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: 2d6db43de8e2582d45412e13a088c4be4a8dde016d8c995f7fdc1f1f9239e425
openshift-ansible-callback-plugins-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: ca8c071fc1df728870237ebfcb9e09c618750ddb0670f2aea006f93c7fc0ef22
openshift-ansible-docs-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: f577a4797f6aacac370e5718e703f28af4e3a6823968dc0c6833db4e30dbd445
openshift-ansible-filter-plugins-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: 307bcfc5237d813e7495edfdd70072a0029a3862ccbb1d70c2f4b45069228eb0
openshift-ansible-lookup-plugins-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: 2ff633065f09221b456b8fb35d219a4006f409dc7c5f568d17a092b2ba9fd7ad
openshift-ansible-playbooks-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: defb6044466a71a42f5cb1475a0fda1b491c1d776e3cee6b31c7b806810b459c
openshift-ansible-roles-3.7.62-1.git.0.48dbebc.el7.noarch.rpm	SHA-256: 3799733bb2c77b088d4feca61946f3649bdad5d31efdb7617dbe2a602fb20c66
openshift-elasticsearch-plugin-2.4.4.23__redhat_1-3.el7.noarch.rpm	SHA-256: fb23bc2a50e3a9b062a452e1260cf2f6699603c63bfed56d759ff2ca71f47c18
python-paramiko-2.1.1-4.el7.noarch.rpm	SHA-256: 461375b1b458818f5b5893aefac09fbf39cd651c081e63479915b8ffa33a72cc
python-paramiko-doc-2.1.1-4.el7.noarch.rpm	SHA-256: 4abfc94c371f6fb64761ad9616522bfbab10091dc60cc0513f2496b70a883d36
rubygem-fluent-plugin-viaq_data_model-0.0.14-1.el7.noarch.rpm	SHA-256: 12d2ff20a93a3132f5c46471a6626fa4a70d7c5db56a9a3985a7e293d63faa13
rubygem-fluent-plugin-viaq_data_model-doc-0.0.14-1.el7.noarch.rpm	SHA-256: 824a08bbdaa325afa72ee3cb081fe47972a5fc9fab245fa2717d273bd3699583
tuned-profiles-atomic-openshift-node-3.7.62-1.git.0.ba171ec.el7.x86_64.rpm	SHA-256: f3d4c726d00568e6027e4d1f90d8abfc92d05d70c07cf3c74339c0ecf0538958