RHBA-2019:0403 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.9.71 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.9.71. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:0402

This update fixes the following bugs:

• A `nil pointer dereference` was causing several `oc` commands to fail. A zero value check was added, and `oc observe` is now working correctly. (BZ#1377940)
• An exit code was not populated correctly from `oc plugin` commands. As a result, the terminal would not return a bash prompt. Now, error codes are properly propagated from plug-ins and the error code matches the result. (BZ#1501756)
• Incorrect codec values were used when patching resources. Users were not able to set volumes on `DaemonSets`. Now, the proper codec is applied when patching resources. `oc set volumes` works as expected with `DaemonSets`. (BZ#1518325)
• Empty templates were causing panics in `oc status`. Now, templates

react appropriately when a template has a zero value. `oc status` works as expected. (BZ#1532289)

• Connections were not closing properly and `oc exec` was hanging as a result. Now, the proper closing method is implemented and `oc exec -i` does not hang. (BZ#1552670)
• The `openshift_management_project` variable was not observed correctly with the CFME application. Now, the CFME namespace is using the `openshift_management_project` variable. (BZ#1591966)

This update includes the following enhancements:

• A new flag is added to the `oc adm cordon` command to allow selecting nodes by label. There was a need to be able to mark multiple nodes as `unschedulable` without having to perform the operation on each individual node. `oc adm cordon` now supports a `--selector` flag, which results in all nodes matching a given label being marked as `unschedulable`. (BZ#1466382)
• Disabling of `MERG_JSON_LOG` via the `ansible inventory` variable is now available. This variable exists in deployment configurations. Adding an inventory variable keeps users from needing to re-apply the setting when they perform an upgrade or re-installation. The `logging-fluentd` daemon set has the `MERG_JSON_LOG` variable value set to reflect what is specified in the ansible inventory. (BZ#1668338)

All OpenShift Container Platform 3.9 users are advised to upgrade to these
updated packages.

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.9.71, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.9 x86_64

Fixes

• BZ - 1377940 - oc observe with --resync-period should prompt --names required rather than cause panic
• BZ - 1466382 - [RFE] add selector option to oadm cordon
• BZ - 1501756 - [Trello o6UiTkxv] Exit code from oc plugin does not return to bash terminal
• BZ - 1518325 - oc set volumes not working for DaemonSets
• BZ - 1532289 - oc client crashing on status
• BZ - 1552670 - oc exec -i process hangs waiting for stdin
• BZ - 1591966 - Can't add container provider from add_container_provider.yml
• BZ - 1613130 - [3.9]hawkular metrics pod failed at liveness check, pod can not be started up
• BZ - 1668338 - fluentd ElasticsearchError error="400 - Rejected by Elasticsearch
• BZ - 1672244 - require variable to configure ignore-volume-az in inventory file.
• BZ - 1676617 - openshift-ansible fails on openstack without floating IPs
• BZ - 1676672 - Placeholder for OCP 3.9 image refresh
• BZ - 1676906 - [3.9] More consistent modification of journald.conf.

CVEs

(none)

References

(none)