RHBA-2022:0795 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.8.34 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.8.34. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHBA-2022:0793

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html

You may download the oc tool and use it to inspect release image metadata
as follows:

(For x86_64 architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.8.34-x86_64

The image digest is sha256:016a1e055bc839623abb4d4808f4135ee37b97dcf5b5cf4a586519450e6acbc8

(For s390x architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.8.34-s390x

The image digest is sha256:7222625b2fb11e3a8ec29a60e302a6872efc0f07889244e24c3789845e712b75

(For ppc64le architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.8.34-ppc64le

The image digest is sha256:55d79b768b7d819c3e9194b7a6e0625f3c87eb86c66b426b5801be78ae99ef58

All OpenShift Container Platform 4.8 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

Solution

For OpenShift Container Platform 4.8 see the following documentation, which
will be updated shortly for this release, for important instructions on how
to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html

Details on how to access this content are available at
https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

Affected Products

• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x

Fixes

• BZ - 1999288 - Scheduling conformance tests are failing due to incorrect CPU and memory calculations in the test script
• BZ - 2024642 - Bump to latest available 1.21.8 k8s
• BZ - 2025396 - "master" pool should be updated before the CVO reports available at the new version occurred
• BZ - 2028854 - SystemMemoryExceedsReservation Alert
• BZ - 2032996 - The containerruntimeconfig controller has wrong assumption regarding the number of containerruntimeconfigs
• BZ - 2039538 - Send custom profile metrics through telemetry
• BZ - 2050288 - [BM][IPI] Failed during bootstrap - unable to read client-key /var/lib/kubelet/pki/kubelet-client-current.pem
• BZ - 2050312 - ContainerCreateError when trying to launch large (>500) numbers of pods across nodes
• BZ - 2052758 - [4.8] PVs are not being cleaned up after PVC deletion
• BZ - 2052955 - GCE PD: Mounting XFS volume clone or restored snapshot to same node failed
• BZ - 2052966 - [backport-4.8] [OVN] Multicast between pods within the same project but on different nodes fails
• BZ - 2053611 - [OVN] egressIP looses node assignment and never recovers
• BZ - 2053720 - The port 50936 used by haproxy is occupied by kube-apiserver
• BZ - 2054225 - MetalLB integration: All gateway routers in the cluster answer ARP requests for LoadBalancer services IP
• BZ - 2054642 - 1 of 3 ovnkube-master pods stuck in clbo after ipi bm deployment - dualstack (Intermittent)
• BZ - 2055911 - Intermittent incorrect build to run correlation, leading to run status updates applied to wrong build, builds stuck in non-terminal phases
• BZ - 2056975 - ICNI2 pods are stuck in ContainerCreating state
• BZ - 2058270 - CCO mint mode will not work for Azure after sunsetting of Active Directory Graph API
• BZ - 2058789 - On-prem prepender dispatcher script overwrites DNS search settings
• BZ - 2059330 - [ExternalCloudProvider] installation with additional network on workers fails
• BZ - 2059584 - OCP 4.6.44 - Ingress VIP assigned as secondary IP in ovs-if-br-ex and added to resolv.conf as nameserver
• BZ - 2059763 - 4.9.23-s390x-machine-os-content manifest invalid when mirroring content for disconnected install
• BZ - 2060494 - Fix inotify leak and kubelet retaining memory
• BZ - 2060616 - White blank page on Topology List view, Deploy Image, and +Add pages
• BZ - 2061266 - e2e test operator-install-single-namespace.spec.ts is broken

CVEs

• CVE-2022-24407

References

(none)