RHBA-2019:3139 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.11.153 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.11.153. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2019:3138

This release fixes the following bugs:

• NSX role templates referenced module output based on previous data structure. Templates were not properly populated. With this bug fix, the templates were updated to use the updated data structure and the templates are now generated with clusterIP as expected. (BZ#1753890)

All OpenShift Container Platform 3.11 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata relevant to your system is applied.

See the following documentation, which will be updated shortly for release 3.11.153, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64
• Red Hat OpenShift Container Platform for Power 3.11 ppc64le

Fixes

• BZ - 1645725 - docker_creds.py module has a short timeout
• BZ - 1651583 - Alert KubePersistentVolumeFullInFourDays should not be triggered on namespaces other than openshift.*, kube.*, default or logging
• BZ - 1678100 - Readiness probe failed for hawkular metrics
• BZ - 1720174 - No pod failover when multiple nodes are NotReady
• BZ - 1723924 - Unexpected loss of pod hostports
• BZ - 1734385 - Node INTERNAL-IP is set to IPv6 address
• BZ - 1741679 - [3.11.z] Empty network diagram on console UI in CRI-O env
• BZ - 1747305 - Couldn't regenerate the cert if the /etc/origin/logging is deleted
• BZ - 1751125 - [Kuryr] Kuryr controller should have the label name=kuryr-controller
• BZ - 1751975 - Nodes cannot pull images after running playbooks/openshift-node/imageconfig.yml
• BZ - 1752532 - upgrade from 3.11 failed to upgrade es settings from configmap
• BZ - 1753890 - NSX ansible role templates refer to wrong variable to refer clusterip
• BZ - 1754788 - Master-controllers log spammed with "The resourceVersion for the provided watch is too old." warning messages"
• BZ - 1754968 - java path is missing in jenkins image version v3.11.146
• BZ - 1758156 - Master API health check ran during the upgrade of Standalone Registry cluster
• BZ - 1758235 - [3.11] Networkpolicy resources not getting applied on update
• BZ - 1758267 - Node panics when attempting to install
• BZ - 1759344 - Placeholder bug for OCP 3.11.z rpm release
• BZ - 1759837 - Block PVC is stuck in pending state with openshift-ansible-3.11.147-1
• BZ - 1760166 - openshift-ansible openshift_aws security_group.yml destroys Service LoadBalancers (aws elb)

CVEs

• CVE-2019-9512
• CVE-2019-9514

References

(none)