Issued:
2019-01-10
Updated:
2019-01-10

RHBA-2019:0026 - Bug Fix Advisory

Synopsis

OpenShift Container Platform 3.10 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Red Hat OpenShift Container Platform release 3.10.89 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.10.89. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:0025

Space precludes documenting all of the bug fixes and enhancements in this
advisory. See the following Release Notes documentation, which will be
updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

All OpenShift Container Platform 3.10 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.10.89, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

  • Red Hat OpenShift Container Platform 3.10 x86_64
  • Red Hat OpenShift Container Platform for Power 3.10 ppc64le

Fixes

  • BZ - 1585815 - [starter-ca-central-1] during 3.9->3.10 upgrade, unquoted options in /etc/sysconfig/atomic-openshift-master-api cause atomic-openshift-node crash loop
  • BZ - 1588611 - swap is not disabled when running 3.9 -> 3.10 upgrade
  • BZ - 1594171 - Registry not working when deploying OCP with Kuryr
  • BZ - 1609805 - Add way for OpenStack installer to specify custom cloudprovider.conf
  • BZ - 1614092 - [3.10 ] Advanced Installer Always failed once when installing OpenShift on Azure with Azure default name resolution
  • BZ - 1623455 - [starter] Prometheus instance on starter-us-west-1 is down
  • BZ - 1625817 - [3.10] Installation stuck at TASK [Approve node certificates when bootstrapping]
  • BZ - 1629726 - [3.10] ose-plane pods names are taken from openstack's metadata although cloud provider is not configured
  • BZ - 1630265 - Image jenkins-2-rhel7:v3.10.45-3 is broken
  • BZ - 1631792 - OpenShift ansible installer doesn't work with Calico network plugin - OpenShift 3.10
  • BZ - 1632154 - Cannot see basic audit log
  • BZ - 1632397 - ASB gets installed during upgrade even though ansible_service_broker_install is set to true.
  • BZ - 1632870 - Add support for only installing and running the schema installer job
  • BZ - 1639589 - OpenShift 3.10 Missing CA for LDAP Config during upgrade
  • BZ - 1640014 - etcdctl2&etcdctl3 is deprecated commands
  • BZ - 1640790 - Vsphere volumes should not support multiattach
  • BZ - 1641085 - Openshift-on-Openstack install playbook fails after PR #10409
  • BZ - 1642148 - [3.10] Modification in master-config.yaml is causing a failure during Master-API restart (runtime-config)
  • BZ - 1645987 - OpenStack playbook configures docker-storage-setup file after starting docker
  • BZ - 1649795 - Upgrade to v3.10 fails with Check for GlusterFS cluster health
  • BZ - 1653381 - [3.10] firewalld reload causes namespace wide egress IP to stop working
  • BZ - 1655674 - Node label `type=upgrade` is ignored when upgrading OCP
  • BZ - 1657255 - OSEv3 vars overwritten at dynamic inventory when kuryr is enabled
  • BZ - 1657735 - Failed to prepare subPath error with system container OCP

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.10

SRPM
atomic-enterprise-service-catalog-3.10.89-1.git.1450.8d00f89.el7.src.rpm SHA-256: 1d18f8b1db19555c5d1036b5f7c90336eee89b4ab6ec5cb8fde0748a058c983e
atomic-openshift-3.10.89-1.git.0.00d2623.el7.src.rpm SHA-256: 6815958daf6524bd66d4da5865c7c3f0dec39b94bc0ec3ec36de2ab4ab5731f7
atomic-openshift-descheduler-3.10.89-1.git.299.b80f989.el7.src.rpm SHA-256: 1af86adbd27ecdb9a121363541304a324a89b84833482e17832908e368d078bc
atomic-openshift-dockerregistry-3.10.89-1.git.390.8a5893f.el7.src.rpm SHA-256: e0d1da07127a58a610b067e8b0bbf26ee52e3b279d7e73fea0a7a3c858742614
atomic-openshift-node-problem-detector-3.10.89-1.git.254.58d0b08.el7.src.rpm SHA-256: ebc7b7412ccb63b3b30e3bda42ca679094fd8b4ba10854ca18ec4085caad3094
atomic-openshift-web-console-3.10.89-1.git.412.f764188.el7.src.rpm SHA-256: eee7df039cf47431b86c589702bd58e7ca70c55573fe82acbdc113fbbce815d8
golang-github-prometheus-node_exporter-3.10.89-1.git.1063.a37c788.el7.src.rpm SHA-256: d0a89522d83bc1996ab6ad2f2d29ca395ce4ff5ff4aacfe7bd5c639dc35dc271
openshift-ansible-3.10.89-1.git.0.14ed1cb.el7.src.rpm SHA-256: 55d5d97a26366964d42f8ea4f9b97089b168fbd18c59c855c5a162c71ae4d48e
openshift-enterprise-cluster-capacity-3.10.89-1.git.375.78f09f1.el7.src.rpm SHA-256: 7176c22afa1fd773908a723f3dc64b235dd6ba039c400a536b4bb621031f32ae
x86_64
atomic-enterprise-service-catalog-3.10.89-1.git.1450.8d00f89.el7.x86_64.rpm SHA-256: 459be87852463e7a6154ea652b9c9ee966d78103b3e80474b4de7a527cb3a4c7
atomic-enterprise-service-catalog-svcat-3.10.89-1.git.1450.8d00f89.el7.x86_64.rpm SHA-256: a0e6f3710c71d8bf87a3621e53c9bb4b9a73e47129e71b5a7ec5be6ccbcccda1
atomic-openshift-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 1e763d2aa3aa65243ad35fd3139fa694a612990c6e3741bd9d0d79e915f7920b
atomic-openshift-clients-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 93faec14541e7006ef52893c25439587283f586cff5d7398924c5d305dca4d92
atomic-openshift-clients-redistributable-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 84fd4ee5e0bd438e28880b609ca1a5be858ae77aa287559aa3642fa5ed5a7ed4
atomic-openshift-descheduler-3.10.89-1.git.299.b80f989.el7.x86_64.rpm SHA-256: abd1a560d3304fee6a7161997e2e7b5df0c4b93b9a9193fa294c00914730dfb6
atomic-openshift-docker-excluder-3.10.89-1.git.0.00d2623.el7.noarch.rpm SHA-256: 3da22f33ee40691824c37a2ab79a319b60429d64ba86f621fa4aa9a155d81893
atomic-openshift-dockerregistry-3.10.89-1.git.390.8a5893f.el7.x86_64.rpm SHA-256: e7235070014125019b397dfaf47fe23432d4f02e483240d32ac37c1df1a46d8c
atomic-openshift-excluder-3.10.89-1.git.0.00d2623.el7.noarch.rpm SHA-256: c221f0941220b09105b5e919011247f6c4f677e6bee7afc2e6c7b678479af04f
atomic-openshift-hyperkube-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 39282ae542e88c0dfe5198d03f472c11e7caa18d51be9e9e52086dcfcfc43ca9
atomic-openshift-hypershift-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: ee46e3e9ee6b2ab2c9c4843998fd7e765e5cf9a7c35310051326d7d8ecb377d6
atomic-openshift-master-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: e7ac53dbfa87d52691d5b537a1c5355f4d65468109ee7e60ed11b030f87bbab4
atomic-openshift-node-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 3f0d66ca5b943547e8a997a39bb7e00841d3af971d253ccb62d4050529641901
atomic-openshift-node-problem-detector-3.10.89-1.git.254.58d0b08.el7.x86_64.rpm SHA-256: 27904b4f6e727701d39894abaffd17159ceaca4d7ed5890f3bf26f24d4c2c2cd
atomic-openshift-pod-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 030d13893d03190908520743af60df49615a6a27c3f405293eb67d4da3b71999
atomic-openshift-sdn-ovs-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: b34d368d2d00dbb1db4fe6a2f4c2991f7365411a2f7f911cf4d450182ea20f5d
atomic-openshift-template-service-broker-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 9473c03b0254acc6ea363894778b1a80a51b6f2952e915c5e2263d2589f39976
atomic-openshift-tests-3.10.89-1.git.0.00d2623.el7.x86_64.rpm SHA-256: 90281d7a00d0431ce12272e0439dd0eb0b4e02e0fd2ccaf7fe43f803483d691b
atomic-openshift-web-console-3.10.89-1.git.412.f764188.el7.x86_64.rpm SHA-256: 01c18884e81cd0d2c8745c981a3fb950d3b59e35f2c9e316269cc4e03a67b9a1
openshift-ansible-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: c9a9e5369ffc3ce56b776dde40a372290db809650ca632d7a9b8eebd320b1995
openshift-ansible-docs-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: 6eb2a793eb445ebe87f00c6ab9a7680bbf60446dc00542271508e8afc12efa56
openshift-ansible-playbooks-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: 7dd953c9c132f62ed013dce7723ee4b0f96b4f106dd29ead98fddaf0331095a3
openshift-ansible-roles-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: f608a6cd84ee1e39a67d484aa2db88673020a4ebc7f55bf4fada7be323886e4d
openshift-enterprise-cluster-capacity-3.10.89-1.git.375.78f09f1.el7.x86_64.rpm SHA-256: 8dfc4fabec70510e3f908bc694ecae5f1c95f2f32f7de76a42ab43955a48679e
prometheus-node-exporter-3.10.89-1.git.1063.a37c788.el7.x86_64.rpm SHA-256: fd42e8e719c8c05bf6ada575306404721a50eb47f79bf1a8242e0b8ba275f0fe

Red Hat OpenShift Container Platform for Power 3.10

SRPM
atomic-enterprise-service-catalog-3.10.89-1.git.1450.8d00f89.el7.src.rpm SHA-256: 1d18f8b1db19555c5d1036b5f7c90336eee89b4ab6ec5cb8fde0748a058c983e
atomic-openshift-3.10.89-1.git.0.00d2623.el7.src.rpm SHA-256: 6815958daf6524bd66d4da5865c7c3f0dec39b94bc0ec3ec36de2ab4ab5731f7
atomic-openshift-descheduler-3.10.89-1.git.299.b80f989.el7.src.rpm SHA-256: 1af86adbd27ecdb9a121363541304a324a89b84833482e17832908e368d078bc
atomic-openshift-dockerregistry-3.10.89-1.git.390.8a5893f.el7.src.rpm SHA-256: e0d1da07127a58a610b067e8b0bbf26ee52e3b279d7e73fea0a7a3c858742614
atomic-openshift-node-problem-detector-3.10.89-1.git.254.58d0b08.el7.src.rpm SHA-256: ebc7b7412ccb63b3b30e3bda42ca679094fd8b4ba10854ca18ec4085caad3094
atomic-openshift-web-console-3.10.89-1.git.412.f764188.el7.src.rpm SHA-256: eee7df039cf47431b86c589702bd58e7ca70c55573fe82acbdc113fbbce815d8
golang-github-prometheus-node_exporter-3.10.89-1.git.1063.a37c788.el7.src.rpm SHA-256: d0a89522d83bc1996ab6ad2f2d29ca395ce4ff5ff4aacfe7bd5c639dc35dc271
openshift-ansible-3.10.89-1.git.0.14ed1cb.el7.src.rpm SHA-256: 55d5d97a26366964d42f8ea4f9b97089b168fbd18c59c855c5a162c71ae4d48e
openshift-enterprise-cluster-capacity-3.10.89-1.git.375.78f09f1.el7.src.rpm SHA-256: 7176c22afa1fd773908a723f3dc64b235dd6ba039c400a536b4bb621031f32ae
ppc64le
atomic-enterprise-service-catalog-3.10.89-1.git.1450.8d00f89.el7.ppc64le.rpm SHA-256: b688334ac0697fbeaae09df3153bbebf5eee5b955ee5a8d4611e795de12bdfaa
atomic-enterprise-service-catalog-svcat-3.10.89-1.git.1450.8d00f89.el7.ppc64le.rpm SHA-256: f126f97112a2612f6a6dd58ee62d7aaa6470c7c1c2d45937ab4941260061fca3
atomic-openshift-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: fd771714d6e63b964f8b297387650d1a94bae92b7b7755be521e8328b91fe607
atomic-openshift-clients-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: 3e2f3e1235874763fd777e1538a6c0f11d6ad57291f5baabcc9a0a6f6aed778c
atomic-openshift-descheduler-3.10.89-1.git.299.b80f989.el7.ppc64le.rpm SHA-256: b3bbc93e157340ad235d0eef7a9a28bfa937e5e44b6be22d1bda2839f458765d
atomic-openshift-docker-excluder-3.10.89-1.git.0.00d2623.el7.noarch.rpm SHA-256: 3da22f33ee40691824c37a2ab79a319b60429d64ba86f621fa4aa9a155d81893
atomic-openshift-dockerregistry-3.10.89-1.git.390.8a5893f.el7.ppc64le.rpm SHA-256: 02de9c74b63e86268962f258b7058542dd4ade645f197593bd8a9ba39f02cc61
atomic-openshift-excluder-3.10.89-1.git.0.00d2623.el7.noarch.rpm SHA-256: c221f0941220b09105b5e919011247f6c4f677e6bee7afc2e6c7b678479af04f
atomic-openshift-hyperkube-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: eccc5d07472641e4e3c263f47624f170d2417be47d464b607489b43fda31a4e7
atomic-openshift-hypershift-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: 01fc402669168716a1da97178bfdde4ff38190ff1a2827a7840120c2628049a2
atomic-openshift-master-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: 684f5168dd655b58efe0d7e513ccd7fbc5e7e3d0213281868bad42562a3f2516
atomic-openshift-node-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: e8b10d1798846769697bad10ce1c6768be8c30820db8d6354cd6814b7efc55a1
atomic-openshift-node-problem-detector-3.10.89-1.git.254.58d0b08.el7.ppc64le.rpm SHA-256: 56f5cf281864774a51cc935cf0f670ab52b46f863b439cf53a6298add8ec6061
atomic-openshift-pod-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: 139185d7d8c453a332afaaf95ac3372e7c592f96daac7afb29c0ea2810757125
atomic-openshift-sdn-ovs-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: 8a21bb399abf65fdfdad8d393398316607484c635d3eadadaee5d2bafea278b8
atomic-openshift-template-service-broker-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: e93d7a2a1ee4fb7a5d4e3660fcec69dfb0fe49097289c8c69e99389d256e6ed5
atomic-openshift-tests-3.10.89-1.git.0.00d2623.el7.ppc64le.rpm SHA-256: 1629d41e0865a521d46a9ef0b2583052e80d199d5efba23867654f22a51a9c11
atomic-openshift-web-console-3.10.89-1.git.412.f764188.el7.ppc64le.rpm SHA-256: 1880d9087e81271c869a41fe65d9435cdbeaef086b5f22bdbae676e8cca2673f
openshift-ansible-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: c9a9e5369ffc3ce56b776dde40a372290db809650ca632d7a9b8eebd320b1995
openshift-ansible-docs-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: 6eb2a793eb445ebe87f00c6ab9a7680bbf60446dc00542271508e8afc12efa56
openshift-ansible-playbooks-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: 7dd953c9c132f62ed013dce7723ee4b0f96b4f106dd29ead98fddaf0331095a3
openshift-ansible-roles-3.10.89-1.git.0.14ed1cb.el7.noarch.rpm SHA-256: f608a6cd84ee1e39a67d484aa2db88673020a4ebc7f55bf4fada7be323886e4d
openshift-enterprise-cluster-capacity-3.10.89-1.git.375.78f09f1.el7.ppc64le.rpm SHA-256: 5f7ff2d631ff5489194cf39a1b6fb6a45d9d87bd5bb700c556a3f8994663e8df
prometheus-node-exporter-3.10.89-1.git.1063.a37c788.el7.ppc64le.rpm SHA-256: 02e3cd01b18107920c4a7358d10a06214341d0e1f8dd7b5fc95fa497e3ded2ba

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.