RHBA-2022:5172 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.10.20 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.10.20. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHBA-2022:5171

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html

You may download the oc tool and use it to inspect release image metadata
as follows:

(For x86_64 architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.10.20-x86_64

The image digest is sha256:b89ada9261a1b257012469e90d7d4839d0d2f99654f5ce76394fa3f06522b600

(For s390x architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.10.20-s390x

The image digest is sha256:7c42e086007d868f89a9aa2a88c8c8d7d70190d49e29c42c64bf83d623295692

(For ppc64le architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.10.20-ppc64le

The image digest is sha256:25f4474563619bd1664615d268c0e27c52ffba84627a5cee6cfb300c0b267124

(For aarch64 architecture)

$ oc adm release info
quay.io/openshift-release-dev/ocp-release:4.10.20-aarch64

The image digest is sha256:0288aed6326485a51f9b64642719c1746b869613bfb5ad47771d4c1d36a79031

All OpenShift Container Platform 4.10 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

Solution

For OpenShift Container Platform 4.10 see the following documentation,
which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata
update:

https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html

Details on how to access this content are available at
https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

Affected Products

• Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64

Fixes

• BZ - 2053752 - [IPI] OCP-4.10 baremetal - boot partition is not mounted on temporary directory
• BZ - 2062980 - [Kamelet Sink] Topology crashes on click of Event sink node if the resource is created source to Uri over ref
• BZ - 2079454 - [4.10] conditionally relabel volumes given annotation not working - SELinux context match is wrong
• BZ - 2084289 - OCP 4.10.4, CNI: SDN; Whereabouts IPAM: Duplicate IP address with bond-cni
• BZ - 2084591 - Must-gather tool gathering data from custom namespaces.
• BZ - 2086432 - A special resource that was created in OCP 4.9 can't be deleted after an upgrade to 4.10
• BZ - 2086891 - [4.10z] Multicast breaks after master node reboot/sync
• BZ - 2088582 - [4.10z] During ovnkube-node restart all host conntrack entries are flushed, leading to traffic disruption
• BZ - 2089312 - [OCP 4.10] Ironic inspector image fails to clean disks that are part of a multipath setup if they are passive paths
• BZ - 2089315 - Project access view replace group ref with user ref when updating their Role
• BZ - 2089589 - Pipeline Builder: Make unnecessary tekton hub API calls when the user types 'too fast'
• BZ - 2090750 - Metal3 plugin does not work properly with updated NodeMaintenance CRD
• BZ - 2091482 - Metrics page show incorrect values due to metrics level config
• BZ - 2091604 - Upgrade-triggered etcd backup will be skip during serial upgrade
• BZ - 2092140 - PipelineRun creation from the GUI for a Pipeline with 2 workspaces hardcode the PVC storageclass
• BZ - 2093275 - Azure machine-api-provider-azure Availability Set Name Length Limit
• BZ - 2093444 - ManagementState reconciliation breaks SR
• BZ - 2093906 - Backport console helm install totals metric to 4.10 cluster
• BZ - 2094078 - CVO gets stuck downloading an upgrade, with the version pod complaining about invalid options
• BZ - 2094211 - Change Ping source spec.jsonData (deprecated) field to spec.data
• BZ - 2094348 - In virtualization overview "running vm per templates" template list can be improved
• BZ - 2094423 - Operator ignores managementState Removed
• BZ - 2094777 - [4.10] Use conmon package from rhaos repo
• BZ - 2095114 - [etcd] cluster-backup.sh script has a conflict to use the '/etc/kubernetes/static-pod-certs' folder if a custom API certificate is defined
• BZ - 2095193 - Duplicated IPs can be assigned to multiple Pods
• BZ - 2095329 - openshift4/ose-operator-registry:4.10.0 having security vulnerabilities
• BZ - 2095405 - CRI-O not killing Calico CNI stalled (zombie) processes.
• BZ - 2095584 - oc adm catalog mirror returns 0 even if there are errors
• BZ - 2095620 - Bump matrix-project plugin to 1.20
• BZ - 2095824 - [vSphere-CSI-Driver] does not report volume count limits correctly caused pod with multi volumes maybe schedule to not satisfied volume count node
• BZ - 2097263 - Operator ignores managementState Removed
• BZ - 2097277 - Kuryr: verify and unit jobs failing due to upstream OpenStack dropping py36 support
• BZ - 2097753 - OCP 4.8 Baremetal IPI installation failure: "Bootstrap failed to complete: timed out waiting for the condition"
• BZ - 2098097 - ovs-configuration.service fails with Error: Failed to modify connection 'ovs-if-br-ex': failed to update connection: error writing to file '/etc/NetworkManager/systemConnectionsMerged/ovs-if-br-ex.nmconnection'
• BZ - 2099673 - Collect whole journal in gather

CVEs

• CVE-2022-1271
• CVE-2022-26691

References

(none)