RHBA-2018:3748 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.9.57 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.9.57. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:3747

Space precludes documenting all of the bug fixes and enhancements in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

All OpenShift Container Platform 3.9 users are advised to upgrade to these updated packages.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.9.57, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.9 x86_64

Fixes

• BZ - 1499413 - Should remove invalid ServiceClass immediately after update ServiceBroker
• BZ - 1507595 - Plan can't restore to the previous good state or update to another acceptable plan
• BZ - 1509029 - ServiceBinding reconciliation errors prevent binding from being deleted (unbindable class)
• BZ - 1515902 - Couldn't deploy version: ReplicationController is invalid: spec.template.spec.containers[0].image: Required value
• BZ - 1520828 - The "Close" button wrongly changed to "Bind" after creating binding
• BZ - 1523252 - [APB] Should add more directions for the "--broker" argument of the apb tool
• BZ - 1530484 - Don't use the default token in the first master in playbook
• BZ - 1531500 - Redundant deployment appear when trigger 1 time of deployment operation
• BZ - 1534538 - Metrics Apply continues when it should fail
• BZ - 1535652 - async bind returns 201 instead of 200 when binding already exists
• BZ - 1535673 - Need to mark masters schedulable
• BZ - 1536687 - apb tool should work out of the box with minishift
• BZ - 1540054 - Should add retry/delay to stop/start master service during upgrade_control_plane
• BZ - 1540543 - Serviceinstance cannot be deleted after lost broker
• BZ - 1540806 - playbooks/openshift-prometheus/private/uninstall_prometheus.yaml is missing
• BZ - 1543029 - last_operation returns invalid response body for unbind 410
• BZ - 1544648 - ocp deployment using advanced installation fails during health check
• BZ - 1546843 - `apb push` does not overwrite existing image in OpenShift registry
• BZ - 1547210 - 3.9.0-0.46.0 logging deploy fails when openshift_logging_es_nodeselector not specified
• BZ - 1547899 - [egressIP] Add the removed egressIP back to the netnamespace will not make it work again
• BZ - 1549019 - In crio env, update *sql.apb version failed with new db data created
• BZ - 1552744 - [starter-us-west-1] error during logging upgrade patch operation
• BZ - 1554293 - [3.9] logging-eventrouter event not formatted correctly in Elasticsearch when using MUX
• BZ - 1557200 - Need add a check for swap configuration for upgrade
• BZ - 1560584 - [3.9] Semi automatic namespace wide egress IP randomly shows up as node IP
• BZ - 1569165 - [RFE] service broker node selector installer variables
• BZ - 1570517 - [3.9.z] Install failed when firewalld used
• BZ - 1598305 - [3.9]Cluster admin, click "View Archive" shows no result in Kibana due to default index pattern is ".operations.*"
• BZ - 1598642 - Uninstallation of prometheus fails with error: unable to process template\n processedtemplates.template.openshift.io \"prometheus-node-exporter\" is forbidden
• BZ - 1610733 - Hawkular metrics pods failing schema check and unable to start
• BZ - 1612006 - node daemon in SIGSEGV loop
• BZ - 1612783 - atomic-openshift-node complains "no fc disk information found"
• BZ - 1613095 - [3.9]hawkular-metrics pod failed to start up due to unsuccessful version check
• BZ - 1619514 - vSphere Cloud provider: detach volume when node is not present/ powered off
• BZ - 1619672 - After upgrade to OCP 3.9, existing Openshift nodes do not have the SELinux boolean container_manage_cgroup enabled, but new nodes added to the cluster have it enabled
• BZ - 1623642 - Upgrade Fails with "Operation cannot be fulfilled on imagestreams...: the object has been modified"
• BZ - 1624078 - Intermitent error on OpenShift HAProxy Router reload
• BZ - 1628252 - Intermittent 503 errors (application is not available)
• BZ - 1631700 - [regression] Mediawiki provision failed in "36308 OCP_3.9.43_Errata testing" with image "openshift3/mediawiki-123:v3.9.43-2"
• BZ - 1633285 - No secrets dropdown in buildconfig edit page if any of the secrets has no data
• BZ - 1634004 - Upgrade to OCP 3.9 fails at task "Fail when OpenShift is not installed"
• BZ - 1636141 - Core Dump files on Master in "/var/lib/origin"
• BZ - 1636234 - [3.9] Upgrading control plane from 3.7.44 to 3.7.54 occasionally causes ovsdb-server.service start operation to timeout, also affects 3.9
• BZ - 1638658 - [3.9] endpoint for alertmamager and alert-buffer gave HTTP response to HTTPS client
• BZ - 1638663 - [3.9] server returned HTTP status 403 Forbidden for alert-proxy container endpoint
• BZ - 1638726 - controller-manager pod stops responding with max memory usage and lot of open tcp sockets
• BZ - 1638900 - [3.9] Record is missing kubernetes field when use '--log-driver journald' in /etc/sysconfig/docker
• BZ - 1639839 - Built image fails to pushed to the OpenShift registry
• BZ - 1640498 - [3.9]ASB gets installed during upgrade even though ansible_service_broker_install is set to false.
• BZ - 1643340 - [3.9] Fluentd pod should log its logs to /var/log/fluentd/fluentd.log by default
• BZ - 1643732 - Logging installs failed at TASK [openshift_logging : Cleaning up temp dir]
• BZ - 1644343 - [3.9] Failure to restore cache produces corrupted files passed to incremental builds
• BZ - 1644544 - [3.9] Should remove router endpoints targets from kubernetes-service-endpoints
• BZ - 1650134 - Backport unidler proxy fixes to 3.9
• BZ - 1653267 - update of openshift-metrics project from 3.7 to 3.9 fails
• BZ - 1653382 - [3.9] firewalld reload causes namespace wide egress IP to stop working
• BZ - 1654887 - [3.9] Remove unnecessary passlib check

CVEs

(none)

References

(none)