RHBA-2020:3440 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.4.18 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.4.18. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHBA-2020:3441

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html

This update fixes the following bugs among others:

• Previously, the web console Route creation form was incorrectly setting `route.spec.port.targetPort` to the `service.spec.ports.port` when creating new Routes. This caused Routes created using the web console Route creation form to have incorrect ports. The Route creation form in the web console now correctly sets the Route target port to `route.spec.port.targetPort`, when specified. (BZ#1868035)
• Previously, a Kubelet would fail to start if a soft eviction threshold and grace period were not specified. With this release, the presence of these values is verified during Kubelet configuration. (BZ#1852792)

You may download the oc tool and use it to inspect release image metadata
as follows:

(For x86_64 architecture)

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.4.18-x86_64

The image digest is sha256:3250780b072ed81a561350a5f3e4688076bd7eceb29991caf5d4fd0a5c03b7a5

(For s390x architecture)

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.4.18-s390x

The image digest is sha256:ff7ad97152d00a4778743e98d4da572ee9ec6a5f9295a66b7deb48cda71a1d3a

(For ppc64le architecture)

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.4.18-ppc64le

The image digest is sha256:522cecff1bdbd6c497a6592805fa5cda7424d04e47b13da7d812a918f9867685

All OpenShift Container Platform 4.4 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor.

Solution

For OpenShift Container Platform 4.4 see the following documentation, which
will be updated shortly for release 4.4.18, for important instructions on
how to upgrade your cluster and fully apply this asynchronous errata
update:

https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html

Details on how to access this content are available at
https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.

Affected Products

• Red Hat OpenShift Container Platform 4.4 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.4 for RHEL 7 x86_64
• Red Hat OpenShift Container Platform for Power 4.4 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for Power 4.4 for RHEL 7 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.4 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.4 for RHEL 7 s390x

Fixes

• BZ - 1852792 - Should forbidden to create the KubeletConfig object if lack of the evictionSoftGracePeriod when using the soft eviction
• BZ - 1852938 - [release-4.4] Fix azure tests in unzoned environment
• BZ - 1868035 - [4.4] Routes created via the webconsole set route.spec.port.targetPort to the service.spec.ports.port
• BZ - 1868427 - [Kuryr] Pods not getting annotated due to controller missing events
• BZ - 1868521 - Defunct router doesn't trigger alerts

CVEs

• CVE-2019-11756
• CVE-2019-17006
• CVE-2019-17023
• CVE-2020-12402

References

(none)