RHBA-2026:3881 - Bug Fix Advisory

标题

Red Hat OpenShift Container Platform release 4.21.5 is now available with updates to packages and images that fix several bugs.

描述

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.21.5. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2026:3858

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

解决方案

For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/

You can download the oc tool and use it to inspect release image metadata
for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests
can be found at
https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is sha256:ae0711cb2b35d8661d086945e0578f9cd2d417093e910e47169447db5dd9f8bd

(For s390x architecture)
The image digest is sha256:42dd488998bf2a911643053a19ed53ad64e8f98522187445bf3b987f419b38c2

(For ppc64le architecture)
The image digest is sha256:3e23761bf09ceee4d610651b4687e428e46f11a4d6690fd51701219a8f45f075

(For aarch64 architecture)
The image digest is sha256:a1113544323afe45b5f9238a27f40111b102ea8889391e16292ad0b15cfa2255

All OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.

修复

• OCPBUGS-61986 - E2E: Modify test checking kernel sysctl to verify kernel.time_migration is not enabled when rt_kernel is false in Performance profile
• OCPBUGS-62496 - NodePool gets stuck in updating state and complains about more than a single configmap status
• OCPBUGS-75884 - [Backport 4.21] Enable CVO access to OBO Prometheus for ROSA HCP with RHOBS monitoring
• OCPBUGS-75930 - HCP cluster upgrade to 4.19 from 4.18.26 creates a service of type loadbalencer with name router, thereby blocking the upgrade
• OCPBUGS-76529 - [CI testing] flakiness in MutableCSINodeAllocatableCount test
• OCPBUGS-76563 - [openshift-4.21] ptp-operator can't be built hermetically
• OCPBUGS-76823 - Massive MCO container causing memory problems during bootstrapping
• OCPBUGS-76960 - [release-4.21] Extend the timeout of crictl cmd
• OCPBUGS-77046 - ovnkube failed to start node network controller
• OCPBUGS-77093 - e830 plugin must ignore Carter Flats DPLL if present in kernel
• OCPBUGS-77097 - [4.21] Cluster degrades when deleting all three control plane machines simultaneously (regression from 4.17)
• OCPBUGS-77168 - Need to install dbus, systemd, and subscription-manager as necessary
• OCPBUGS-77203 - [openshift-4.21] hermetic build failure - ose-ibm-vpc-block-csi-driver
• OCPBUGS-77222 - oc-mirror v2 fails with "unknown userid" error in containerized environments
• OCPBUGS-77271 - Duplicate `prometheusrules.monitoring.coreos.com`
• OCPBUGS-77302 - ABI OVE: Unable to download kubeconfig file
• OCPBUGS-77354 - machine config operator has vsphere password in conditional messages
• OCPBUGS-77365 - ignition-server pods are frequently restarting
• OCPBUGS-77432 - [release-4.21] Configuring mTLS on default Ingress breaks ingress canary check & console health checks
• OCPBUGS-77489 - multus-networkpolicy image contains huge dnf cache
• OCPBUGS-77490 - i-c-c container image contains huge dnf cache
• OCPBUGS-77491 - [release-4.21] insights-runtime-extractor image contains huge dnf cache
• OCPBUGS-77716 - [release-4.21] [GCP-PD] csi driver is using the wrong node name when configuring attachment limit

CVE

(none)

参考

(none)