RHBA-2020:3695 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 3.11.286 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 3.11.286. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2020:3694

This release fixes the following bugs:

• Previously, the `openshift_is_atomic` variable was not set on the first control plane during playbook initialization. This missing variable caused subsequent playbook tasks to fail. With this release, the variable is set on all control planes during scale-up instead of only new control planes, allowing the playbook to successfully finish. (BZ#1874530)

All OpenShift Container Platform 3.11 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata relevant
to your system is applied.

See the following documentation, which will be updated shortly for release
3.11.286, for important instructions on how to upgrade your cluster and fully
apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64
• Red Hat OpenShift Container Platform for Power 3.11 ppc64le

Fixes

• BZ - 1611839 - Requirement of Floating IPs for OpenShift Deployment exposes cluster unnecessarily to security vulnerabilities
• BZ - 1613489 - OpenShift Ansible Installer enables and is missing ports in different security groups
• BZ - 1630847 - (Kuryr) OpenShift on OpenStack Node Network Configuration requires additional parameters
• BZ - 1679775 - Unable to deploy with Octavia and Provider network - ERROR: The specified reference "subnet" (in api_lb.Properties.vip_subnet) is incorrect
• BZ - 1683329 - OpenStack doesn't deploy properly with latest OCP 3.11.82 ERRATA
• BZ - 1780302 - openshift-metrics-server try to fetch information from evicted pods
• BZ - 1794768 - [buildcop] imagebuilder does not report an error when failing to copy files from an earlier build stage
• BZ - 1795416 - iptables sync sometimes taking too long
• BZ - 1855852 - haproxy_server_http_responses_total metric disappears when backing pods are not available
• BZ - 1857025 - Creating faulty(bad formatted cert&key) route makes other existing routes inaccessible
• BZ - 1859813 - Deployment for ocs3.x is failing with package dependency error
• BZ - 1863763 - Statefulset creates and deletes pod repeatedly (StatefulSet creates multiple controllerrevisions)
• BZ - 1865441 - cannot compile atomic-openshift with recent golang
• BZ - 1867134 - MountVolume.SetUp failed for volume "log-openvswitch" : hostPath type check failed: /var/log/openvswitch is not a directory
• BZ - 1870064 - NodePort stuck open within SDN after unidling
• BZ - 1870540 - Traffic spikes every 10 minutes to master API
• BZ - 1872037 - Unable to upgrade from OpenShift Container Platform 3.9 to a higher version due to python2-requests dependency
• BZ - 1874530 - Running openshift_node_group.yml to scaleup a node fails with "The error was: 'openshift_is_atomic' is undefined"

CVEs

(none)

References

(none)