- Issued:
- 2018-05-17
- Updated:
- 2018-05-17
RHBA-2018:1579 - OpenShift Container Platform 3.6 bug fix and enhancement update
Synopsis
OpenShift Container Platform 3.6 bug fix and enhancement update
Type/Severity
Bug Fix Advisory None
Topic
Red Hat OpenShift Container Platform release 3.6.173.0.117 is now available with updates to packages and images that fix several bugs and add an enhancement.
Description
Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.6.173.0.117. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2018:1578
This update fixes the following bugs:
-
The number of fluentd outputs is computed in the startup script run.sh. When the forward plug-in was configured, it was not correctly counted. This caused a number of output to be missed when the forward plug-in was configured. The number of output is used for calculating the file buffer size and the size grew larger than expected. This bug fix updates the logic of the calculation to include the forward plug-in case. As a result, the correct output number then the correct file buffer size is now derived when the forward plug-in is configured. (BZ#1569554)
-
The fluentd file buffer size is calculated in the startup script run.sh. In the calculation, the script gathers the number of outputs, then the available disk space is divided by the gathered number. When gathering the number of outputs, it missed the case for the non-secure forward. If it happened to be configured, the number of outputs was one less than actual. When the non-secure forward was configured, this caused the calculated file buffer size to be larger than the expected size, which might cause the disk to fill on the file system for the fluentd file buffer. With this bug fix, the non-secure forward case is taken into account. As a result, the file buffer size is correctly calculated when the non-secure forward is configured. (BZ#1557431)
This update also adds the following enhancement:
- Previously, OpenShift Container Platform defaulted the indexing request timeout for fluentd to 600 seconds, or about 10 minutes. In certain situations, this timeout was not long enough. If we make this essentially infinite, we'll avoid fluentd pods re-submitting requests unnecessarily. With this enhancement, the fluentd timeout is now 2147483648 and will wait for a very long time before resubmitting a request to Elasticsearch due to a timeout failure. As a result, this avoids fluentd pods being resubmitted unnecessarily. (BZ#1569550)
All OpenShift Container Platform 3.6 users are advised to upgrade to these updated packages and images.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For OpenShift Container Platform 3.6 see the following documentation, which will be updated shortly for release 3.6.173.0.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat OpenShift Container Platform | 3.6 | x86_64 |
Updated Packages
- atomic-openshift-3.6.173.0.117-1.git.0.b1f7e54.el7.src.rpm
- atomic-openshift-sdn-ovs-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- openshift-ansible-lookup-plugins-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- openshift-ansible-playbooks-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- atomic-openshift-cluster-capacity-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- openshift-ansible-roles-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- openshift-ansible-3.6.173.0.117-1.git.0.8c22c43.el7.src.rpm
- atomic-openshift-clients-redistributable-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- tuned-profiles-atomic-openshift-node-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- atomic-openshift-clients-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- atomic-openshift-federation-services-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- cockpit-debuginfo-160-3.el7.x86_64.rpm
- atomic-openshift-excluder-3.6.173.0.117-1.git.0.b1f7e54.el7.noarch.rpm
- atomic-openshift-tests-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- atomic-openshift-service-catalog-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- atomic-openshift-node-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- atomic-openshift-utils-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- openshift-ansible-callback-plugins-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- atomic-openshift-pod-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- openshift-ansible-docs-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- atomic-openshift-docker-excluder-3.6.173.0.117-1.git.0.b1f7e54.el7.noarch.rpm
- atomic-openshift-dockerregistry-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- cockpit-160-3.el7.src.rpm
- cockpit-kubernetes-160-3.el7.x86_64.rpm
- openshift-ansible-filter-plugins-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
- atomic-openshift-master-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- atomic-openshift-3.6.173.0.117-1.git.0.b1f7e54.el7.x86_64.rpm
- openshift-ansible-3.6.173.0.117-1.git.0.8c22c43.el7.noarch.rpm
Fixes
- This content is not included.BZ - 1547599
- This content is not included.BZ - 1554748
- This content is not included.BZ - 1557431
- This content is not included.BZ - 1559477
- This content is not included.BZ - 1560424
- This content is not included.BZ - 1569550
- This content is not included.BZ - 1569554
- This content is not included.BZ - 1574382
CVEs
(none)
References
(none)
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.