RHBA-2019:0331 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.9.68 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.9.68. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2019:0330

This update includes the following bugs:

• The `openshift_management_project` variable was not respected. As a result, the Cloud Forms Management Engine app has always been installed in hardcoded namespace. With this bug fix, CFME namespace is using the `openshift_management_project` variable. The CFME app is installed according to `openshift_management_project` settings. (BZ#159166)
• Certain tasks did not pass the `--config` option to the `oc` client. If the `ansible_user`'s `kubeconfig` was modified, it could cause those tasks to fail. With this bug fix, all tasks now pass the `--config` option pointing at the proper admin `kubeconfig`, which should never be modified. Installation and upgrades in scenarios where the `kubeconfig` has been modified now work as expected. (BZ#1631353)
• The cluster role `system:image-pruner` was required for all DELETE requests to the registry. As a result, the regular client could not cancel its uploads, and the `S3 multipart` uploads were accumulating. Now, the cluster role `system:image-pruner` will accept DELETE requests for uploads from clients who are allowed to write into them. (BZ#1662132)
• The `sysconfig` files located in `/etc/sysconfig` contained a broken link to documentation. Those links are now updated. (BZ#1668210)

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

All OpenShift Container Platform 3.9 users are advised to upgrade to these updated packages.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.9.68, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.9 x86_64

Fixes

• BZ - 1554675 - Add "FileSystemResizePending" event to oc describe pvc cmd for cinder volume expand
• BZ - 1559424 - Subpath clean up may fail on reconstruction
• BZ - 1623426 - [3.9] Recycler refuses to recycle PVs when a pod has a different PV using the same PVC
• BZ - 1631353 - kubeconfig on master node changes context everytime playbook is run or after oc login
• BZ - 1634158 - With --selinux-enabled in docker, Portworx shared volumes are mounting are tmpfs in the container
• BZ - 1640788 - Vsphere volumes should not support multiattach
• BZ - 1662132 - When using the oc new-app to create a new build, the builds are creating incomplete multipart uploads to S3 and incomplete uploads are not cleaned automatically
• BZ - 1667785 - upgrade to ocp 3.9 is not considering openstack cloud provider configuration
• BZ - 1668210 - Link to "Proxy configuration" in file atomic-openshift-master-api/atomic-openshift-master-controllers show 404.
• BZ - 1668893 - 3.9 Clarification on KUBE_MAX_PD_VOLS for OpenShift/OpenStack Integration
• BZ - 1671346 - Web console after upgrade to 3.9.60 shows different view.

CVEs

(none)

References

(none)