RHBA-2019:0636 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.11.98 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.11.98. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:0637

Space precludes documenting all of the bug fixes and enhancements in this
advisory. See the following Release Notes documentation, which will be
updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

All OpenShift Container Platform 3.11 users are advised to upgrade to these
updated packages.

Solution

Before applying this update, ensure all previously released errata
relevant to your system are applied.

See the following documentation, which will be updated shortly for release 3.11.98, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64
• Red Hat OpenShift Container Platform for Power 3.11 ppc64le

Fixes

• BZ - 1268877 - [RFE] oc label doesn't have an option to show labels
• BZ - 1414227 - Error message should be easily detectable for 'oc get'
• BZ - 1486210 - oc get all returns inconsistent spelling of resource type
• BZ - 1529482 - "factory_object_mapping.go ... Unable to get a discovery client to find server resources" when prompting "the server doesn't have a resource type"
• BZ - 1548640 - Cluster-admin users should be able to view _cat endpoints
• BZ - 1569432 - oc status should advise oc status --suggest instead of -v depreciated
• BZ - 1586015 - "oc get groups -L labelname" does not show label values
• BZ - 1598139 - Describe PV of type FibreChannel which was created with source wwids show source as targetWWNs
• BZ - 1623261 - [3.11] Logs contain error 'Failed to get system container stats for "/system.slice/atomic-openshift-node.service"'
• BZ - 1623612 - e2e image change trigger test failed
• BZ - 1639739 - OpenShift Cluster monitoring Operator needs option to specify storageclass
• BZ - 1641221 - dnsPolicy: none not honored
• BZ - 1642589 - Uninstall playbook don't remove or stop any static pods at container runtime
• BZ - 1644084 - RFE: K8S AWS Cloud Provider Missing Support for Custom Endpoints and Air-Gapped Regions
• BZ - 1647348 - image garbage collection fails to remove an image
• BZ - 1655641 - Docker Registry AWS S3: Health Check will fail, if the Bucket is empty
• BZ - 1657003 - Pre-allocated PV not utilized on OSP
• BZ - 1657769 - sync-pod tried to override the hostname
• BZ - 1658387 - Updating from 3.11.16 to 3.11.43 does not pull in 3.11.43 images unless you specify openshift_image_tag=v3.11.43 in inventory
• BZ - 1659442 - 3.11 Clarification on KUBE_MAX_PD_VOLS for OpenShift/OpenStack Integration
• BZ - 1662312 - openshift-ansible-3.11.51 prevents gluster-block from creating devices
• BZ - 1666491 - Playbook incorrectly fails on validating master config paths
• BZ - 1667302 - [DOCS] The variable unit is wrong for maximumRetainedFiles - Japanese
• BZ - 1668317 - Packages in dedicated ETCD nodes are not upgraded
• BZ - 1669560 - [3.11] mounting fails with multipath iscsi when one path is down
• BZ - 1670473 - The variable openshift_master_image_policy_allowed_registries_for_import is not being validated correctly by ansible
• BZ - 1672011 - "redeploy-router-certificates.yml" makes changes to wrong "service serving certificate secrets" annotation
• BZ - 1672904 - Build Config's are not editable on WebConsole
• BZ - 1674170 - Master pods are not matched the timezone with worker nodes and its running host
• BZ - 1675133 - Task set_loopback_context.yml sets context.user to the wrong name for openshift-master.kubeconfig
• BZ - 1677509 - Master-Api pod is going into CreateContainerError state after a hard reboot on the node
• BZ - 1677545 - Some of the Namespaces are missing from page when there are over 1000 namespaces
• BZ - 1679159 - [EFK] Kibana responds with Gateway Timeout
• BZ - 1679453 - Cannot remove clusterserviceclass
• BZ - 1679613 - Handle default index pattern for Kibana when value is null
• BZ - 1683519 - Upgrade of Openshift from 3.11.69-1 to 3.11.82-3 fails
• BZ - 1685072 - Upgrade playbook fails at [openshift_node : stop docker to kill static pods] task in node with CRI-O
• BZ - 1685243 - Allow MERGE_JSON_LOG=true for indexing of JSON payload fields
• BZ - 1685606 - Openshift-on-OpenStack playbooks require ansible 2.5
• BZ - 1685618 - logging-es using cryptographically weak hashing algorithm.
• BZ - 1685655 - Diffie-Hellman keysize < 2048 in logging-es
• BZ - 1685970 - Fluentd daemonset doesn't include a tolerate everything toleration(3.11)
• BZ - 1686449 - Encode the cert when loading it
• BZ - 1686590 - [3.11] Upgrade from Openshift 3.9 to 3.10 fails at Remove Image Stream Tag if no Image Stream Tag is present.
• BZ - 1686941 - Newly introduced log-rotation in fluentd not working
• BZ - 1689366 - kube-service-catalog/service-catalog-controller-manager fails to start with API Logging level 8+

CVEs

• CVE-2019-1002101

References

(none)