RHBA-2019:2352 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.11.135 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.11.135. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:2353

This update includes the following bugs:

• `Fluentd` was unable to correctly determine the docker log driver, and was unable to add kubernetes metadata to records. As a result, records would go to the `.orphaned` index and `fluentd` error messages were logged. Now, `fluentd` utilizes the record data to obtain kubernetes metadata. `Fluentd` can now correctly add kubernetes metadata and assign records no matter which log driver docker is using. (BZ#1722380)
• The OpenShift web console container overview tab would not show containers with certain formats in expanded workload rows. This has been resolved and the correct image is presented to users. (BZ#1722815)
• The `atomic-openshift-node` service restarted every three minutes, and all nodes would flap between `Ready` and `NotReady`. Now, the service is only restarted when a change is detected in the volume configuration file. (BZ#1727140)
• `Prometheus` metrics for `ElasticSearch` were not available after a plugin update and users were denied access to metrics. `SAR` configuration has been added to the `authentication_backend`, and now the multi-tenant plugin executes `SARs` and allows access to metrics. (BZ#1728856)

All OpenShift Container Platform 3.11 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

For OpenShift Container Platform 3.11 see the following documentation,
which will be updated shortly for release 3.11.135, for important
instructions on how to upgrade your cluster and fully apply this
asynchronous errata update:

https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64
• Red Hat OpenShift Container Platform for Power 3.11 ppc64le

Fixes

• BZ - 1696901 - Request backport of https://github.com/kubernetes/kubernetes/pull/70002
• BZ - 1719733 - kibana [security_exception] no permissions for [indices:data/read/search]
• BZ - 1722380 - Logging data from all projects are stored to .orphaned indexes with Elasticsearch
• BZ - 1722815 - In the OpenShift web console, no image name is shown, when the image comes from an external registry
• BZ - 1726717 - EFK fails to upgrade because 'unicode' object has no attribute 'iteritems'
• BZ - 1727140 - atomic-openshift-node.service keeps restarting every 3 minutes and all nodes flapping between Ready and NotReady
• BZ - 1728351 - Kube Proxy needed to be deployed for ACI to run as a part of upgrade from 3.10 to 3.11
• BZ - 1730065 - 3.10 to 3.11 upgrade fails on openshift_web_console ansible Task
• BZ - 1730778 - Route with 2 named ports sends traffic to wrong one with the correct one is down
• BZ - 1733806 - Template with resource `spec.template` can cause runtime error when created in console
• BZ - 1734786 - Installation fails customresourcedefinitions.apiextensions.k8s.io \"servicemonitors.monitoring.coreos.com\" not found

CVEs

(none)

References

(none)