RHBA-2021:3682 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.8.14 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.8.14. There are no RPM packages for this release.

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html

You may download the oc tool and use it to inspect release image metadata
as follows:

(For x86_64 architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.8.14-x86_64

The image digest is sha256:bf48faa639523b73131ec7c91637d5c94d33a4afe09ac8bdad672862f5e86ccb

(For s390x architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.8.14-s390x

The image digest is sha256:76a5261502d6a420df99a55843a157c354fd12b816d8ee858594c4e5f44d6816

(For ppc64le architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.8.14-ppc64le

The image digest is sha256:1e18b0b39591d89f33f868fb1179a65699246625110e1415a419a38579c12a18

All OpenShift Container Platform 4.8 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor

Solution

For OpenShift Container Platform 4.8 see the following documentation, which
will be updated shortly for this release, for important instructions on how
to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html

Details on how to access this content are available at
https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

Affected Products

• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x

Fixes

• BZ - 1965376 - Wrong interpolation in environment values in the build pod
• BZ - 1967369 - pkgman-to-bundle will exit with flag "--build-cmd"
• BZ - 1974421 - [Assisted-4.8] [Staging] Disable / Ignore network latency and packet loss validations, in case Automatic role selected
• BZ - 1977473 - Assisted service on IPv6 cluster installed with proxy: the assisted-service container doesn't start " network is unreachable"
• BZ - 1982001 - [4.8] Bootimage bump tracker
• BZ - 1982002 - [4.8.z] On a Azure IPI installation MCO fails to create new nodes
• BZ - 1986708 - Single stack external gateway makes the pod not starting with dual stack clusters
• BZ - 1994624 - [4.8.z backport] On an IPv6 single stack cluster traffic between master nodes is sent via default gw instead of local subnet
• BZ - 1996739 - High ICNI2 application pod creation times
• BZ - 1998103 - The removed ingresscontrollers should not be counted in ingress_controller_conditions metrics
• BZ - 1999092 - [4.8] Should not allow upgrades to 4.9 without admin acknowledgement that apis are being removed
• BZ - 1999531 - Keepalived fails with Liveness probe failed: command timed out
• BZ - 1999717 - Object Service tab should not be part of OCP Console for ODF Managed Services
• BZ - 2000696 - [4.8] RHCOS live ISO can fail to boot in UEFI mode; drops to grub shell
• BZ - 2000958 - The kubeletconfig controller has wrong assumption regarding the number of kubelet configs
• BZ - 2001244 - Enforce OpenShift's defined kubelet version skew policies
• BZ - 2002357 - Missing ZTP ArgoCD Container Image
• BZ - 2003199 - CRI-O leaks some children PIDs
• BZ - 2004122 - OVS logging in must gather is missing previous logging levels
• BZ - 2004336 - [4.8z] OVN CNI should ensure host veths are removed
• BZ - 2004677 - [4.8] Boot option recovery menu prevents image boot
• BZ - 2004716 - [4.8.z] Inexplicably slow kubelet on bootstrap makes installation fail
• BZ - 2005357 - [4.8z] Pod creation failed due to mismatched pod IP address in CNI and OVN
• BZ - 2005464 - [4.8z] ovn-kube may never attempt to retry a pod creation
• BZ - 2005480 - [4.8z] [ICNI2] 'ErrorAddingLogicalPort' failed to handle external GW check: timeout waiting for namespace event
• BZ - 2006963 - [4.8] OS boot failure "x64 Exception Type 06 - Invalid Opcode Exception"
• BZ - 2007090 - [4.8] Intermittent failure mounting /run/media/iso when booting live ISO from USB stick
• BZ - 2007666 - crio's selinux module has performance improvements when compiled with golang 1.16
• BZ - 2008414 - authentication errors with "square/go-jose: error in cryptographic primitive" are observed in the CI
• BZ - 2008589 - Slow OVN Recovery on SNO

CVEs

(none)

References

(none)