Issued:: 2017-04-19
Updated:: 2017-04-19

RHBA-2017:0989 - OpenShift Container Platform 3.4, 3.3, 3.2, and 3.1 bug fix update

Synopsis

OpenShift Container Platform 3.4, 3.3, 3.2, and 3.1 bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Red Hat OpenShift Container Platform releases 3.4.1.16, 3.3.1.19, 3.2.1.31, and 3.1.1.11 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.4.1.16, 3.3.1.19, 3.2.1.31 and 3.1.1.11. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:0990

This update fixes the following bugs:

Previously, there was no option to configure the URL that proxies to $master/oauth/approve. When accessing the Jenkins application created by the default template jenkins-persistent, an error message of "The requested URL /oauth/approve was not found on this server" was returned. This bug fix addresses the issue and the error message no longer appears.(BZ#1434983)
If NAMESPACE_LABELS was added to the router first, then the label to namespace was added or removed, then the router configuration could not be reloaded. However, if NAMESPACE_LABELS was added to the router last, the configuration could be reloaded. This bug fix addresses the issue. (BZ#1436296)
Previously, Azure Disk would not attach to OpenShift Container Platform. If there was a pod created with a invalid disk, then creating a pod with a valid disk would always fail. This bug fix resolves this issue. (BZ#1438474)
Previously, there was a logic error in how weak and strong references are identified when searching images eligible for pruning. Some images having both strong and weak references in pruning graph could be removed during pruning. This bug fix corrects the logic responsible for finding which images have strong references. Now, pruning correctly recognizes and prunes images. (BZ#1439926, BZ#1440197, BZ#1440199, BZ#1440201)
Previously, 3.1 containerized installs may have incorrectly used the latest image when creating the initial certificates. Because of this and a change to the 3.5 image, this could have led to a scenario where the 3.1 installation would fail because the 3.5 image no longer creates openshift-registry.kubeconfig and openshift-router.kubeconfig as required of a 3.1 installation. The 3.1 installer has been updated to ensure that a 3.1 image is used when creating the initial certificates which ensures that all the necessary files are created. (BZ#1442346)

All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.16, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.19, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

For OpenShift Container Platform 3.2, see the following documentation, which will be updated shortly for release 3.2.1.31, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

Product	Version	Arch
Red Hat OpenShift Container Platform	3.4	x86_64
Red Hat OpenShift Container Platform	3.3	x86_64
Red Hat OpenShift Container Platform	3.2	x86_64
Red Hat OpenShift Container Platform	3.1	x86_64

Updated Packages

openshift-ansible-lookup-plugins-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-sdn-ovs-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-tests-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
tuned-profiles-atomic-openshift-node-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
tuned-profiles-atomic-openshift-node-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-node-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-clients-redistributable-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
openshift-ansible-docs-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-clients-redistributable-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
tuned-profiles-atomic-openshift-node-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-sdn-ovs-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-master-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-3.1.1.11-1.git.0.599a921.el7aos.src.rpm
openshift-ansible-playbooks-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-3.4.1.16-1.git.0.ea2919c.el7.src.rpm
atomic-openshift-3.3.1.19-1.git.0.d5749a7.el7.src.rpm
openshift-ansible-roles-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-excluder-3.4.1.16-1.git.0.ea2919c.el7.noarch.rpm
atomic-openshift-master-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-node-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-master-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-dockerregistry-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-excluder-3.1.1.11-1.git.0.599a921.el7aos.noarch.rpm
atomic-openshift-node-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-docker-excluder-3.2.1.31-1.git.0.0e3335d.el7.noarch.rpm
atomic-openshift-master-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-pod-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-pod-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-sdn-ovs-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-excluder-3.2.1.31-1.git.0.0e3335d.el7.noarch.rpm
atomic-openshift-clients-redistributable-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-docker-excluder-3.1.1.11-1.git.0.599a921.el7aos.noarch.rpm
atomic-openshift-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-clients-redistributable-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-recycle-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
tuned-profiles-atomic-openshift-node-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-recycle-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
openshift-ansible-filter-plugins-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-pod-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-pod-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-tests-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-utils-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-node-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-clients-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
openshift-ansible-3.0.100-1.git.0.95611a0.el7aos.src.rpm
atomic-openshift-sdn-ovs-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-clients-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-clients-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-dockerregistry-3.1.1.11-1.git.0.599a921.el7aos.x86_64.rpm
atomic-openshift-dockerregistry-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-3.2.1.31-1.git.0.0e3335d.el7.src.rpm
atomic-openshift-docker-excluder-3.3.1.19-1.git.0.d5749a7.el7.noarch.rpm
openshift-ansible-3.0.100-1.git.0.95611a0.el7aos.noarch.rpm
atomic-openshift-tests-3.2.1.31-1.git.0.0e3335d.el7.x86_64.rpm
atomic-openshift-docker-excluder-3.4.1.16-1.git.0.ea2919c.el7.noarch.rpm
atomic-openshift-clients-3.4.1.16-1.git.0.ea2919c.el7.x86_64.rpm
atomic-openshift-dockerregistry-3.3.1.19-1.git.0.d5749a7.el7.x86_64.rpm
atomic-openshift-excluder-3.3.1.19-1.git.0.d5749a7.el7.noarch.rpm

Fixes

CVEs

(none)

References

(none)

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.