Synopsis

OpenShift Container Platform 3.10 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.10.153 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.10.153. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:1756

This update fixes the following bugs:

• At times, the sync pod was slow to create the `node-config`. The `atomic-openshift-node` service would not start properly as a result. Now, the node service restarts after the file is created. (BZ#1705642)
  
• Previously, the OpenShift CA was not added to the node's trust store, causing issues with secure access to the registry's service cluster IP address. Now, a script has been added to the `openshift-node` sync pod command to check if the CA file was missing or old, and to copy or replace it with the correct data. The OpenShift CA is added to the node's trust and able to pull images from the registry's service cluster IP address successfully. (BZ#1713333)
  
• The IPv4 dictionary was recently modified and MTU was set incorrectly as a result. This IPv4 conditional has been removed, and now MTU is established correctly. (BZ#1720978)
  

All OpenShift Container Platform 3.10 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

For OpenShift Container Platform 3.10 see the following documentation,
which will be updated shortly for release 3.10.153, for important
instructions on how to upgrade your cluster and fully apply this
asynchronous errata update:

https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.10 x86_64
• Red Hat OpenShift Container Platform for Power 3.10 ppc64le

Fixes

• BZ - 1584708 - s3 deployment fails while deploying OCP + CNS
• BZ - 1599554 - [RFE] Gluster StorageClasses: Use heketi internal service address instead of external route
• BZ - 1636618 - [GSS] uninstall.yml does not clean up after CNS/OCS installations
• BZ - 1701247 - OCP Azure Cloud Provider Failure with IDM due to IDM requiring FQDN hostnames
• BZ - 1705642 - restart.yml role doesn't check/wait for node-config.yaml to land on the nodes - this adds that check
• BZ - 1713333 - Not able to pull images using registry IP
• BZ - 1720978 - [3.10] Upgrade failed at Task: Wait for node to be ready
• BZ - 1722483 - [3.10] upgrade failed at TASK [ansible_service_broker : Create the Broker resource in the catalog]

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.10

SRPM
atomic-enterprise-service-catalog-3.10.153-1.git.1.802c96e.el7.src.rpm	SHA-256: 7e5c43c5b53a2b591de011dd83af8d504bda4468b566f10fae009fc4233b620a
atomic-openshift-3.10.153-1.git.0.4934cc2.el7.src.rpm	SHA-256: 87965ae466009f30f8c4f48fd572d3d8c3d5bef06adbf97f54d77169c3240b16
atomic-openshift-descheduler-3.10.153-1.git.1.e1f04cf.el7.src.rpm	SHA-256: bf01ad3d03880b3e04e4dcf3d3017601486c11eaa9f6990cd842c432d3019e6a
atomic-openshift-dockerregistry-3.10.153-1.git.1.c30f1cf.el7.src.rpm	SHA-256: 5d7b3f8f767da39340ea141ca33913a928f2b2af11385b27a07585ca32ab9da1
atomic-openshift-node-problem-detector-3.10.153-1.git.1.3da563c.el7.src.rpm	SHA-256: 5c7bda1e4246c7aabf0efde9c240dd5f425d6463824c1727ba39895a87937179
atomic-openshift-web-console-3.10.153-1.git.1.95f00d7.el7.src.rpm	SHA-256: 94d4cb959bf7129645adb74d95bb3aac33c4e89467c7c3711a24e2b569150dde
golang-github-prometheus-node_exporter-3.10.153-1.git.1.3807655.el7.src.rpm	SHA-256: 9e08175069d841b20a25d3f57dc71fc4a0e2bf76f1462bf3bd3dead56919b656
openshift-ansible-3.10.153-1.git.0.2363fa8.el7.src.rpm	SHA-256: 5a3889ee7792ccd28fd20c53d67a25c25a0a5acf79c9e68ac1146305cda4e45b
openshift-enterprise-cluster-capacity-3.10.153-1.git.1.8fd4db5.el7.src.rpm	SHA-256: 6a3c146e721f72091bec8bc40d488d091fefa0ff34bd27388957174efbb1b16a
x86_64
atomic-enterprise-service-catalog-3.10.153-1.git.1.802c96e.el7.x86_64.rpm	SHA-256: 6e222d6509df38b89cd218b63aaee256cd8e3487bf048266900437d0095011ea
atomic-enterprise-service-catalog-svcat-3.10.153-1.git.1.802c96e.el7.x86_64.rpm	SHA-256: c00963c31ef951c72cfb7d9a59f098e4422e9b73e88670afebcfcbaaade98a8a
atomic-openshift-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: eecd4754436711e5c3b41251ab8bc668940dd22489a6c695d752b6d3ba13fc9c
atomic-openshift-clients-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: 05e04266a89200f40c51746f43b217b67a9c05f80d1f9df109da0c24027bdc6f
atomic-openshift-clients-redistributable-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: 3e3fb6c2c16cd265a42f38fa544277d12ea69771a77ed5b60d2dbdb73eed7380
atomic-openshift-descheduler-3.10.153-1.git.1.e1f04cf.el7.x86_64.rpm	SHA-256: c2211eeb05f12871d0c202a89d8d36df311552ae906ed4156f4028ecc9fe6683
atomic-openshift-docker-excluder-3.10.153-1.git.0.4934cc2.el7.noarch.rpm	SHA-256: fdf8f0c7ea7b3c0f35a1ae8f4ee048184bc1ca6adca90977f9bc375aa9943dfe
atomic-openshift-dockerregistry-3.10.153-1.git.1.c30f1cf.el7.x86_64.rpm	SHA-256: 8823c5e562ff5156df8ee1df9a2f396b346d9255a715ba37c1215e8f634528cf
atomic-openshift-excluder-3.10.153-1.git.0.4934cc2.el7.noarch.rpm	SHA-256: b16710866535454fd3620e13e5fb8b6d6998a076e5fb1bf6f45e31d3e9276800
atomic-openshift-hyperkube-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: 2b589d586cf1e12f4e215b0002fd4d2dac8a76840f4d05bbdade64e713053819
atomic-openshift-hypershift-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: 008b68ce77555da3a06e5338ed1b501d901d85b5e5fc84756e2a1a910d44bea9
atomic-openshift-master-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: c2077380587d0c047a4acf9eb88c09024f66ec83e4f17131e26e5c0c45eb3ce4
atomic-openshift-node-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: 5b6dadfd0d947ae1732d06d9c59f03c9a55eb1a78054667e09b73a99c23cc6a0
atomic-openshift-node-problem-detector-3.10.153-1.git.1.3da563c.el7.x86_64.rpm	SHA-256: b97d8d8078eb8d27d20dd2363941e4f1ab1559b091d7b211f69e667535eac182
atomic-openshift-pod-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: f64aa924a003dca8b0138f6991c9757bd76ceffdf71f950afc36f15245b6337d
atomic-openshift-sdn-ovs-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: b031e93d2d0f3ed1b80b2c0557204565ed5e188665fb55d4aa53705b6c283e8c
atomic-openshift-template-service-broker-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: 26673a2071c9b1043073dad1ed216891081a076f139ef254810453b1f6467414
atomic-openshift-tests-3.10.153-1.git.0.4934cc2.el7.x86_64.rpm	SHA-256: f8a1ee1344975aef813a82376a55be9e51ddeb728ec7975fa29934d8a6de8544
atomic-openshift-web-console-3.10.153-1.git.1.95f00d7.el7.x86_64.rpm	SHA-256: fa687d9cc62c638df2269b4060c4c1acd6f06ad90b089ea39049bec6b0167c47
openshift-ansible-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: e71ee95c038c30b6812d9250b50e1f737d2af47cfd4f1c1b3150eeeb69607e0f
openshift-ansible-docs-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: a1163f2a8b693ef4c5ba2281778ca8752e36c82cfb9eb4a91b9aae1c9a2a138c
openshift-ansible-playbooks-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: 8e288e9e575ff1fd331b48ffb6e5224c19ec389ab8170ae8046039d2c4be140d
openshift-ansible-roles-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: a152ce6426024251723c794f3e56b69b62b03ebb9875861ebc7cdff294db535b
openshift-enterprise-cluster-capacity-3.10.153-1.git.1.8fd4db5.el7.x86_64.rpm	SHA-256: 215426cf40390ff83f9e4e3163b89eecf9aa73300e67faf578d108705edb9b62
prometheus-node-exporter-3.10.153-1.git.1.3807655.el7.x86_64.rpm	SHA-256: 056c1546f1b1218aed16f2b08df9715f7d145b1dcb0bc2ba519f82fdb8222d71

Red Hat OpenShift Container Platform for Power 3.10

SRPM
atomic-enterprise-service-catalog-3.10.153-1.git.1.802c96e.el7.src.rpm	SHA-256: 7e5c43c5b53a2b591de011dd83af8d504bda4468b566f10fae009fc4233b620a
atomic-openshift-3.10.153-1.git.0.4934cc2.el7.src.rpm	SHA-256: 87965ae466009f30f8c4f48fd572d3d8c3d5bef06adbf97f54d77169c3240b16
atomic-openshift-descheduler-3.10.153-1.git.1.e1f04cf.el7.src.rpm	SHA-256: bf01ad3d03880b3e04e4dcf3d3017601486c11eaa9f6990cd842c432d3019e6a
atomic-openshift-dockerregistry-3.10.153-1.git.1.c30f1cf.el7.src.rpm	SHA-256: 5d7b3f8f767da39340ea141ca33913a928f2b2af11385b27a07585ca32ab9da1
atomic-openshift-node-problem-detector-3.10.153-1.git.1.3da563c.el7.src.rpm	SHA-256: 5c7bda1e4246c7aabf0efde9c240dd5f425d6463824c1727ba39895a87937179
atomic-openshift-web-console-3.10.153-1.git.1.95f00d7.el7.src.rpm	SHA-256: 94d4cb959bf7129645adb74d95bb3aac33c4e89467c7c3711a24e2b569150dde
golang-github-prometheus-node_exporter-3.10.153-1.git.1.3807655.el7.src.rpm	SHA-256: 9e08175069d841b20a25d3f57dc71fc4a0e2bf76f1462bf3bd3dead56919b656
openshift-ansible-3.10.153-1.git.0.2363fa8.el7.src.rpm	SHA-256: 5a3889ee7792ccd28fd20c53d67a25c25a0a5acf79c9e68ac1146305cda4e45b
openshift-enterprise-cluster-capacity-3.10.153-1.git.1.8fd4db5.el7.src.rpm	SHA-256: 6a3c146e721f72091bec8bc40d488d091fefa0ff34bd27388957174efbb1b16a
ppc64le
atomic-enterprise-service-catalog-3.10.153-1.git.1.802c96e.el7.ppc64le.rpm	SHA-256: 3e4e8db7c3a6de9d622594ab38b3ac6270346123c9b2d193afce68088cd068d3
atomic-enterprise-service-catalog-svcat-3.10.153-1.git.1.802c96e.el7.ppc64le.rpm	SHA-256: b7dacbd89cc5a4af0a2d7c9676e7d46c51386d1a3801f9cf203e8cf94608e8d9
atomic-openshift-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 365d824e755f3c766c59df02cc9195d9bd8d7625977e2468241eb07c9ec3a27f
atomic-openshift-clients-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: d3d6274732482139844b7f03e43cdfe7cf8c478ff716dd9731b207b85f852df7
atomic-openshift-descheduler-3.10.153-1.git.1.e1f04cf.el7.ppc64le.rpm	SHA-256: 5e698c8ee1015103ba3becb1b1293d3a877704297fdf8f01dc9446506b4c0e64
atomic-openshift-docker-excluder-3.10.153-1.git.0.4934cc2.el7.noarch.rpm	SHA-256: fdf8f0c7ea7b3c0f35a1ae8f4ee048184bc1ca6adca90977f9bc375aa9943dfe
atomic-openshift-dockerregistry-3.10.153-1.git.1.c30f1cf.el7.ppc64le.rpm	SHA-256: 1eeac848e77d2f6c6fd5f5b2ffda2c7421f9b0ef94b8579e51655f3489252efb
atomic-openshift-excluder-3.10.153-1.git.0.4934cc2.el7.noarch.rpm	SHA-256: b16710866535454fd3620e13e5fb8b6d6998a076e5fb1bf6f45e31d3e9276800
atomic-openshift-hyperkube-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 58f3342a50d71f2becf278cb3244ddb18db699a2083c093a50104e80784af00f
atomic-openshift-hypershift-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 94dd88feec57c9f678f9fb19c3cf4f98a215d5dca98324cf5a416274bd7a2556
atomic-openshift-master-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 24472785f629dfde50b69b27723738b628ac375a83987cc090e361e00baa4f9a
atomic-openshift-node-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 304cb42fda9ace1f601b02f985634b13985389ed1b103a74b1ea3d1c8060d7d0
atomic-openshift-node-problem-detector-3.10.153-1.git.1.3da563c.el7.ppc64le.rpm	SHA-256: 697dcc5f22f472cc8489f7d46b222508627e44ce03af3154c68985905b77138d
atomic-openshift-pod-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 46b2ba04170f92be861f914b2851184309690af0c4a9304b0a3fced7afb84811
atomic-openshift-sdn-ovs-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 82480958214568c57833dbdbce3b0db629ca20921cde3c1d57bd0a9d77351384
atomic-openshift-template-service-broker-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: a63393c028b764d7b6a83d93633f7773be9497efaebcd6b0cb101c0733b275c1
atomic-openshift-tests-3.10.153-1.git.0.4934cc2.el7.ppc64le.rpm	SHA-256: 52b668a8a8d65c7b1b83932916644cbd4481fe4a85e543315485779a866d0457
atomic-openshift-web-console-3.10.153-1.git.1.95f00d7.el7.ppc64le.rpm	SHA-256: 9bc62da2e4f80639994ece27e4ba135f5601dae5065beab8f3b84c38056adc1a
openshift-ansible-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: e71ee95c038c30b6812d9250b50e1f737d2af47cfd4f1c1b3150eeeb69607e0f
openshift-ansible-docs-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: a1163f2a8b693ef4c5ba2281778ca8752e36c82cfb9eb4a91b9aae1c9a2a138c
openshift-ansible-playbooks-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: 8e288e9e575ff1fd331b48ffb6e5224c19ec389ab8170ae8046039d2c4be140d
openshift-ansible-roles-3.10.153-1.git.0.2363fa8.el7.noarch.rpm	SHA-256: a152ce6426024251723c794f3e56b69b62b03ebb9875861ebc7cdff294db535b
openshift-enterprise-cluster-capacity-3.10.153-1.git.1.8fd4db5.el7.ppc64le.rpm	SHA-256: 3f8bbeb0cc5ad4482caa11c677143a74a2c8b268804da2f8126e65074ef019b1
prometheus-node-exporter-3.10.153-1.git.1.3807655.el7.ppc64le.rpm	SHA-256: 3a8deafc68ecbbc25d651e2d81e7831fb5edbc42ac0e66ab18b0ca40e5402c61