RHBA-2020:0793 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.11.188 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.11.188. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2020:0794

This release fixes the following bugs:

• The etcd monitoring configuration would reset when performing z-stream updates. As a result, manual changes to the ConfigMap were not retained. Now, etcd monitoring can be configured with Ansible and is persistent when the playbook is executed. (BZ#1703032)
• Image names were not displayed properly in the web console. Now, the special formatting has been removed from the image names and is not part of the deployment configuration. Image names display as expected. (BZ#1760767)
• Service Catalog requests to the OpenShift API would result in a non-responsive API. Now, the Service Catalog has been updated to use a newer service broker client that resolves connections properly. The API remains responsive and connection limits are not observed. (BZ#1766373)
• User-facing ClusterRoles were missing rules for controller revisions. As a result, project administrators could not perform a successful deployment of a StatefulSet. Now, the permissions have been corrected and StatefulSet deployments operate correctly for project users. (BZ#1768878)
• Prometheus retention settings were overwritten by Ansible playbooks. Now, Ansible supports setting the retention configuration and is applied successfully. (BZ#1804655)

This release includes the following enhancements:

• The maximum size of syslog messages sent by Fluentd is now configurable for both syslog (UDP) and syslog_buffered (TCP) plugins. The environment variable REMOTE_SYSLOG_MAX_SIZE is now available. This variable specifies the maximum size of syslog messages in bytes. Before this enhancement, the maximum message size was hard coded to 1024 bytes, which is now the default setting. (BZ#1794085)

All OpenShift Container Platform 3.11 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata relevant
to your system is applied.

See the following documentation, which will be updated shortly for release
3.11.188, for important instructions on how to upgrade your cluster and fully
apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64
• Red Hat OpenShift Container Platform for Power 3.11 ppc64le

Fixes

• BZ - 1703032 - etcd monitoring configuration is completely getting reset when performing an minor upgrade from v3.11.88 to v3.11.98
• BZ - 1753050 - redeploy cert playbook fails on - TASK [openshift_certificate_expiry : Check cert expirys on host]
• BZ - 1754081 - Certificate expiration playbooks no longer include node certificate details
• BZ - 1760767 - Image name is not properly shown in web console
• BZ - 1761930 - Diagnosticsl fails when checking curator status
• BZ - 1762040 - haproxy.template contains additional } in 3.11.129
• BZ - 1765220 - [3.11] After OCP upgrade, a pod vethXXX interface was not re-added to the bridge br0
• BZ - 1768878 - Built-in user-facing clusterroles (admin, edit, etc.) missing rules for controller revisions
• BZ - 1778856 - No way to disable TLS v1.1
• BZ - 1784883 - [e2e-cmd] oc get is ruby-25-centos7 time out
• BZ - 1792166 - Ansible Service Broker seems not working
• BZ - 1794085 - [fluentd] 3.11 remote syslog message is incomplete/truncated
• BZ - 1799399 - Validate Ansible 2.9 with openshift-ansible 3.11
• BZ - 1801445 - [RHOCP4.2] [3.11] The status of Pods on master node keep Running even after the node gets down
• BZ - 1804455 - openshift-monitoring memory stats don't match output of 'free' command on a node
• BZ - 1804655 - Prometheus retention configuration get reset when minor upgrade is performed on OCP311

CVEs

(none)

References

(none)