Upgrade to OpenShift 3.11.248 with CRI-O results in localhost packets being dropped

Solution Verified - Updated -

Issue

  • Readiness and Liveness probes failing after upgrade to 3.11.248
  • Fix for CVE-2020-8558 results in packets being dropped for 127.0.0.1
  • Master API Pod failing to start after upgrade to 3.11.248

Environment

  • Red Hat OpenShift Container Platform
    • 3.11.248
  • CRI-O

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content