Synopsis

OpenShift Container Platform 3.10 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.10.101 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.10.101. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:0099

This update fixes the following bugs:

• The location of the master proxy API changed. Since the MetricsApiProxy diagnostic uses this endpoint, it broke. The diagnostic was updated to look at the correct endpoint and now works as expected. (BZ#1571176)
  
• Both kuryr-controller and kuryr-cni are running with host-networking. They cannot listen on the same port for the health check probes. A different port for kuryr-controller and cni probes is now added to avoid this collision. (BZ#1579441)
  
• The rsync package was removed from the registry image. Therefore, rsync cannot be used to backup content from the registry container. With this bug fix, the rsync package is added back to the image and rsync can be used. (BZ#1614841)
  
• The 3.10.72 and 3.11.43 updates added health and liveness probes for the Service Catalog pods. Install was not waiting for the update rollout to finish before proceeding to update Ansible Service Broker. Because of timing, the Service Catalog pods were unavailable when the Broker attempted to register. The Ansible Service Broker update failed with an error indicating "the server is currently unable to handle the request (post clusterservicebrokers.servicecatalog.k8s.io)". Installation is now updated to wait for the Service Catalog update rollout to finish before proceeding with installing Ansible Service Broker. (BZ#1656925, BZ#1661569)
  
• subscription-manager was removed from this release of images in order to work around a container grading problem. Images could not be extended by installing other packages from a subscription. This is necessary for a few images. subscription-manager is no longer removed. Instead, the python-setuptools that it depends on has been updated to work around the grading issue. The ability to install and the grading issue are now resolved. (BZ#1667453)
  

All OpenShift Container Platform 3.10 users are advised to upgrade to these
updated packages.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.10.101, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.10 x86_64
• Red Hat OpenShift Container Platform for Power 3.10 ppc64le

Fixes

• BZ - 1571176 - [3.10] metrics API Proxy endpoint is deprecated in metrics.go
• BZ - 1579441 - Healthcheck port collision between kuryr controller and cni
• BZ - 1596300 - Increase lbaas_activation_timeout to avoid kuryr-controller pod crash
• BZ - 1614841 - [3.10] Add rsync back to the docker-registry image
• BZ - 1656925 - Upgrade Fails at TASK [ansible_service_broker : Create the Broker resource in the catalog]
• BZ - 1661569 - Upgrade Fails at TASK [ansible_service_broker : Create the Broker resource in the catalog]
• BZ - 1663145 - [3.10] Recycler refuses to recycle PVs when a pod has a different PV using the same PVC
• BZ - 1667453 - subscription-manager removed from "v3.10.89-2" based images

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.10

SRPM
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.src.rpm	SHA-256: 0d99f8cdb4b2a60ce6bca4629e55335d06caa36a5cbf60a7035c765fbf6a6813
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.src.rpm	SHA-256: 421dde359508800995a9065971253e8a77bb54640c5a27a02dd74809a3597a9a
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.src.rpm	SHA-256: 296b2cc6f0fedbb1caed00e37b3a263ee2dc6971e0aef5f1c0fbf9740cb267a4
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.src.rpm	SHA-256: e95da24f1c70a1383d3002e9a8264723b859daf1d735a9d3e06da05c9709cb8b
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.src.rpm	SHA-256: 7694a24ebde5cbae1e2a0510380a865ea36ccd6e39f579dbc4e43fac3ad046dc
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.src.rpm	SHA-256: 5b74dcf1b777cbda844d36c90ee49aa22d8686756864a32e794d464876936573
golang-github-prometheus-node_exporter-3.10.101-1.git.1063.7f2f0c9.el7.src.rpm	SHA-256: 4d29ada3f18e41ca4b74942adadc041701044aa3d394f6d06570b46771d77c86
openshift-ansible-3.10.101-1.git.0.5f32198.el7.src.rpm	SHA-256: 0375337b1a3ac6fceb44a0d858e5c61e89cec5c7fa6349d9a1ac7b6a983f76da
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.src.rpm	SHA-256: d0942228a4d330faa3b59cc09e492d7e901bd5103c1848259d22dbb0d932d91c
x86_64
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.x86_64.rpm	SHA-256: 0577c0fd7e0973ee0c4a8f4fa1eb23c156f667551d91adbd1c8f795e54d9b474
atomic-enterprise-service-catalog-svcat-3.10.101-1.git.1452.e901816.el7.x86_64.rpm	SHA-256: e097bd5c90583549552187a1c8923a7f670ca24aeb2da6ce145909c8b8d96388
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 861706f7295562e56c3096e8ed0dd8278a9aff97642144b285267476fd9d6876
atomic-openshift-clients-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 17e54830a2a0468abb538f086b365727dd1d89f3fca1c7ce624e8c40a787804b
atomic-openshift-clients-redistributable-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 4cc9cbec0b7227bbfb9e74d10723bd387b7145a734aea2b1aa31949b9e6ba469
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.x86_64.rpm	SHA-256: 3272c780ca2e5ca4566da21041c3925972d9d73b8563a90bf2f09bfa2bac5ede
atomic-openshift-docker-excluder-3.10.101-1.git.0.94a2fbd.el7.noarch.rpm	SHA-256: 7c71482254a97c2d2d365136f6ca069cc6d0070b93f64e8b0c4ae4e97a8a344a
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.x86_64.rpm	SHA-256: c8e03bf1436e716f1545f778a44d80fcbf8b295aebe6617f869d6f03b0716910
atomic-openshift-excluder-3.10.101-1.git.0.94a2fbd.el7.noarch.rpm	SHA-256: aeed4a7a5c2aecf8e0822cfd4b29edcb577a1b6b57f80b24bcb133e114438058
atomic-openshift-hyperkube-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 4d2713284b6705664dd81e2f4997720f8071a087ffff31c3f205d4df90402243
atomic-openshift-hypershift-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 45eb0c8f1a677c15a96924f88747f95e118dfdec5cc4e52004f83f534962dd80
atomic-openshift-master-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: feb1d1a57f1e34b8954761d55228d496b940787453e6e6557b53bdc12624c8f7
atomic-openshift-node-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: b66214b9f45dd7317700729f8697a6e88b87ad5b5d0fc46fdca06e4ea2670873
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.x86_64.rpm	SHA-256: d0d4a06bd8369019059ac818cc8fec60a01547556cbdb8d9034ce935684a6ec6
atomic-openshift-pod-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: baf7bbb5725c2149a65cde23731879e528253462b11f9313254293df098754de
atomic-openshift-sdn-ovs-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 28e5858ed83d83e19eb894e7b8e7c9ffd8518c4cd4b546e0dc0135d6152a7966
atomic-openshift-template-service-broker-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 95be67d9e40a45a95b7d0f72de5c6f503381368a65fc092ca96577bbb7fb6547
atomic-openshift-tests-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm	SHA-256: 61b3fd951c4e906474001312eb708786f16f0a3c9a0e009473fdbd4c424a9ffd
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.x86_64.rpm	SHA-256: c0f4c417b70b23d5d161eb1ec54357219d47c8837a7c41ab007c64a0ef23d2fb
openshift-ansible-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: 0d7175f8df6c73b4571fa5cc0d0978c62f72ec9b2f848d71a7a9ac0d85136d08
openshift-ansible-docs-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: 74b3d14f8f5c4c2132a71ee839268f35290e8d2b7198a58f0494e21f2141f153
openshift-ansible-playbooks-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: b6459d04c1e7ec28fe282a57e36b8051888b8d03f85a843e841adf948b11f03e
openshift-ansible-roles-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: f3acef8390c9369cd81601a09c2b244e1a08d5814f8d18f08d00c1118e566e8e
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.x86_64.rpm	SHA-256: efd0c777be0369d058fa03ddc4db4118e0d482fb48a68b75e03260bb0c93ed0d
prometheus-node-exporter-3.10.101-1.git.1063.7f2f0c9.el7.x86_64.rpm	SHA-256: e4aa37918548ef6138a78d65529f8f24efdbec9dabc40c1699c5e2ca54da7621

Red Hat OpenShift Container Platform for Power 3.10

SRPM
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.src.rpm	SHA-256: 0d99f8cdb4b2a60ce6bca4629e55335d06caa36a5cbf60a7035c765fbf6a6813
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.src.rpm	SHA-256: 421dde359508800995a9065971253e8a77bb54640c5a27a02dd74809a3597a9a
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.src.rpm	SHA-256: 296b2cc6f0fedbb1caed00e37b3a263ee2dc6971e0aef5f1c0fbf9740cb267a4
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.src.rpm	SHA-256: e95da24f1c70a1383d3002e9a8264723b859daf1d735a9d3e06da05c9709cb8b
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.src.rpm	SHA-256: 7694a24ebde5cbae1e2a0510380a865ea36ccd6e39f579dbc4e43fac3ad046dc
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.src.rpm	SHA-256: 5b74dcf1b777cbda844d36c90ee49aa22d8686756864a32e794d464876936573
golang-github-prometheus-node_exporter-3.10.101-1.git.1063.7f2f0c9.el7.src.rpm	SHA-256: 4d29ada3f18e41ca4b74942adadc041701044aa3d394f6d06570b46771d77c86
openshift-ansible-3.10.101-1.git.0.5f32198.el7.src.rpm	SHA-256: 0375337b1a3ac6fceb44a0d858e5c61e89cec5c7fa6349d9a1ac7b6a983f76da
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.src.rpm	SHA-256: d0942228a4d330faa3b59cc09e492d7e901bd5103c1848259d22dbb0d932d91c
ppc64le
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.ppc64le.rpm	SHA-256: 3072286bdb21bc3998a29ee77a5d7713ad25631e18a9fcf7561e0b4a3dc5666e
atomic-enterprise-service-catalog-svcat-3.10.101-1.git.1452.e901816.el7.ppc64le.rpm	SHA-256: b79c5b95450eac410f6f2e7ed9c3815330b8942fc797a26c48f294c8e54113e1
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 5a167aa8016c624ce7497bd79c5c4881b0081a2830fd9b2161b31e7ab03eb541
atomic-openshift-clients-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 846480e9a38dc0a5e9daa8c13e3247daff2236ff8fe405ea96adcc3d7f661085
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.ppc64le.rpm	SHA-256: dfe6f06b929b36c3ce69809ccbf2fa2f924eacb30fd5b9d4c230f8f187835df0
atomic-openshift-docker-excluder-3.10.101-1.git.0.94a2fbd.el7.noarch.rpm	SHA-256: 7c71482254a97c2d2d365136f6ca069cc6d0070b93f64e8b0c4ae4e97a8a344a
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.ppc64le.rpm	SHA-256: 73310400ff897bf13b09c1b3d88432f8996a4fd70c2209896739b0bb3ead01de
atomic-openshift-excluder-3.10.101-1.git.0.94a2fbd.el7.noarch.rpm	SHA-256: aeed4a7a5c2aecf8e0822cfd4b29edcb577a1b6b57f80b24bcb133e114438058
atomic-openshift-hyperkube-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 8f9a1e4363b63a7c8040ec75514eeb20a0aea81d5db4f2906eefd9a024d250e1
atomic-openshift-hypershift-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: cd1fe13fa119d32d691790e13bd5e70a5d3cf638be95f7d38fddf983443800d7
atomic-openshift-master-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 9f2d8f10f746d35d5e3796f0f70f98737cbdc3d7ea1b5bfe154a54dde0501fd5
atomic-openshift-node-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: a121ae818e20e9e96b514563f2b5c63b75c6de813183079f24a758b70705cd89
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.ppc64le.rpm	SHA-256: 661f5efc2c2fe4cfa222b3fe38b433592423c8b691d63f367c0c82a191c9f362
atomic-openshift-pod-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 34e658f95b346b550503949d7917193a69bd48e76216c6712954103373d6660a
atomic-openshift-sdn-ovs-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: c19443a3ea727569e564f668e979b66b5fafde26a75aab62fef85127f5be5d6f
atomic-openshift-template-service-broker-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 8b71fb4b34348bd137d5128f83e7946b154bdd366344c14c0b70ab59aac9ddca
atomic-openshift-tests-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm	SHA-256: 7f691bad4177d67d5c386e2f414ff8d475d1dd5b263e79817d5040801ca66d42
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.ppc64le.rpm	SHA-256: 458320f2ec6d95d6cc70c8bae7f28b430acdec3ad119e1d8b1cf4872067e9bfe
openshift-ansible-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: 0d7175f8df6c73b4571fa5cc0d0978c62f72ec9b2f848d71a7a9ac0d85136d08
openshift-ansible-docs-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: 74b3d14f8f5c4c2132a71ee839268f35290e8d2b7198a58f0494e21f2141f153
openshift-ansible-playbooks-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: b6459d04c1e7ec28fe282a57e36b8051888b8d03f85a843e841adf948b11f03e
openshift-ansible-roles-3.10.101-1.git.0.5f32198.el7.noarch.rpm	SHA-256: f3acef8390c9369cd81601a09c2b244e1a08d5814f8d18f08d00c1118e566e8e
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.ppc64le.rpm	SHA-256: ae64efef65c23472c7ade6e93d341d281246cc8ba23c7b340902b36745091322
prometheus-node-exporter-3.10.101-1.git.1063.7f2f0c9.el7.ppc64le.rpm	SHA-256: 26e75f5278f1071db63f6e4b39b85646a8f1be47d7e3796766274a6295906d73