RHBA-2019:0206 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.10.101 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.10.101. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:0099

This update fixes the following bugs:

• The location of the master proxy API changed. Since the MetricsApiProxy diagnostic uses this endpoint, it broke. The diagnostic was updated to look at the correct endpoint and now works as expected. (BZ#1571176)
• Both kuryr-controller and kuryr-cni are running with host-networking. They cannot listen on the same port for the health check probes. A different port for kuryr-controller and cni probes is now added to avoid this collision. (BZ#1579441)
• The rsync package was removed from the registry image. Therefore, rsync cannot be used to backup content from the registry container. With this bug fix, the rsync package is added back to the image and rsync can be used. (BZ#1614841)
• The 3.10.72 and 3.11.43 updates added health and liveness probes for the Service Catalog pods. Install was not waiting for the update rollout to finish before proceeding to update Ansible Service Broker. Because of timing, the Service Catalog pods were unavailable when the Broker attempted to register. The Ansible Service Broker update failed with an error indicating "the server is currently unable to handle the request (post clusterservicebrokers.servicecatalog.k8s.io)". Installation is now updated to wait for the Service Catalog update rollout to finish before proceeding with installing Ansible Service Broker. (BZ#1656925, BZ#1661569)
• subscription-manager was removed from this release of images in order to work around a container grading problem. Images could not be extended by installing other packages from a subscription. This is necessary for a few images. subscription-manager is no longer removed. Instead, the python-setuptools that it depends on has been updated to work around the grading issue. The ability to install and the grading issue are now resolved. (BZ#1667453)

All OpenShift Container Platform 3.10 users are advised to upgrade to these
updated packages.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.10.101, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.10 x86_64
• Red Hat OpenShift Container Platform for Power 3.10 ppc64le

Fixes

• BZ - 1571176 - [3.10] metrics API Proxy endpoint is deprecated in metrics.go
• BZ - 1579441 - Healthcheck port collision between kuryr controller and cni
• BZ - 1596300 - Increase lbaas_activation_timeout to avoid kuryr-controller pod crash
• BZ - 1614841 - [3.10] Add rsync back to the docker-registry image
• BZ - 1656925 - Upgrade Fails at TASK [ansible_service_broker : Create the Broker resource in the catalog]
• BZ - 1661569 - Upgrade Fails at TASK [ansible_service_broker : Create the Broker resource in the catalog]
• BZ - 1663145 - [3.10] Recycler refuses to recycle PVs when a pod has a different PV using the same PVC
• BZ - 1667453 - subscription-manager removed from "v3.10.89-2" based images

CVEs

(none)

References

(none)