Red Hat Product Errata RHBA-2022:8627 - Bug Fix Advisory
Issued:
2022-11-28
Updated:
2022-11-28

RHBA-2022:8627 - Bug Fix Advisory

Synopsis

OpenShift Container Platform 4.11.17 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.11.17 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.11.17. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHSA-2022:8626

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html

Solution

For OpenShift Container Platform 4.11 see the following documentation,
which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata
update:

https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html

You may download the oc tool and use it to inspect release image metadata
for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests
may be found at
https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags

The sha values for the release are:

(For x86_64 architecture)
The image digest is sha256:a4e3391f3ff6e33211a91ccd446f2dc57075301e3b974023172b8b8f6aac5461

(For s390x architecture)
The image digest is sha256:ed2607316978ba3d97480452b6ef72ad4ced5d00f94b9e6755de279b3443a2dc

(For ppc64le architecture)
The image digest is sha256:2d83d2d0f85f313fbdc802b157fd23d9e4e245a2ed9a5938d8b522660319597d

(For aarch64 architecture)
The image digest is sha256:2231ac8f87efc2fccd8c53a075b6590b2da3918bc1d8f843bc3273b7a73b8102

All OpenShift Container Platform 4.11 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

Affected Products

  • Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.11 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.11 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for ARM 64 4.11 aarch64

Fixes

  • BZ - 2105331 - install-config: Strict unmarshalling conflicts with new fields
  • BZ - 2115812 - MetalLB: matchExpressions used in CR like L2Advertisement allow duplicate entries
  • OCPBUGS-4042 - Placeholder bug for OCP 4.11.0 image release
  • OCPBUGS-2222 - ITP is not supported with DPU mode
  • OCPBUGS-2716 - Devfile Catalog and Import a Devfile on a fully disconnected cluster should fail directly instead of timeout after 30sec
  • OCPBUGS-2730 - systemReserved:ephemeral-storage in KubeletConfig doesn't work as expected
  • OCPBUGS-2771 - Clusters with large numbers of CSVs can cause crashloop, block upgrades
  • OCPBUGS-3077 - [4.11] ovn-k network policy races
  • OCPBUGS-3089 - Update CNCC owners file
  • OCPBUGS-3285 - OCP 4.10.33 uses a weak 3DES cipher in the VMWare CSI Operator for communication and provides no method to disable it
  • OCPBUGS-3300 - Console shouldn't try to install dynamic plugins if permissions aren't available
  • OCPBUGS-3687 - [4.11] provisioning of baremetal nodes fails when using multipath device as rootDeviceHints
  • OCPBUGS-3764 - Openshift/Thanos 4.11: Fix local-test for go 1.18
  • OCPBUGS-3766 - [RFE] Add kernel-rpm-macros to DTK image
  • OCPBUGS-378 - downloading govc is impacted by github rate limiting
  • OCPBUGS-3911 - Egress router POD creation is failing while using openshift-sdn network plugin
  • OCPBUGS-3967 - must-gather namespace should have ?privileged? warn and audit pod security labels besides enforce

References

(none)

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.