Issued:: 2019-01-30
Updated:: 2019-01-30

RHBA-2019:0206 - OpenShift Container Platform 3.10 bug fix update

Synopsis

OpenShift Container Platform 3.10 bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Red Hat OpenShift Container Platform release 3.10.101 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.10.101. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2019:0099

This update fixes the following bugs:

The location of the master proxy API changed. Since the MetricsApiProxy diagnostic uses this endpoint, it broke. The diagnostic was updated to look at the correct endpoint and now works as expected. (BZ#1571176)
Both kuryr-controller and kuryr-cni are running with host-networking. They cannot listen on the same port for the health check probes. A different port for kuryr-controller and cni probes is now added to avoid this collision. (BZ#1579441)
The rsync package was removed from the registry image. Therefore, rsync cannot be used to backup content from the registry container. With this bug fix, the rsync package is added back to the image and rsync can be used. (BZ#1614841)
The 3.10.72 and 3.11.43 updates added health and liveness probes for the Service Catalog pods. Install was not waiting for the update rollout to finish before proceeding to update Ansible Service Broker. Because of timing, the Service Catalog pods were unavailable when the Broker attempted to register. The Ansible Service Broker update failed with an error indicating "the server is currently unable to handle the request (post clusterservicebrokers.servicecatalog.k8s.io)". Installation is now updated to wait for the Service Catalog update rollout to finish before proceeding with installing Ansible Service Broker. (BZ#1656925, BZ#1661569)
subscription-manager was removed from this release of images in order to work around a container grading problem. Images could not be extended by installing other packages from a subscription. This is necessary for a few images. subscription-manager is no longer removed. Instead, the python-setuptools that it depends on has been updated to work around the grading issue. The ability to install and the grading issue are now resolved. (BZ#1667453)

All OpenShift Container Platform 3.10 users are advised to upgrade to these updated packages.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

See the following documentation, which will be updated shortly for release 3.10.101, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/articles/11258.

Affected Products

Product	Version	Arch
Red Hat OpenShift Container Platform	3.10	x86_64
Red Hat OpenShift Container Platform for Power	3.10	ppc64le

Updated Packages

atomic-openshift-hyperkube-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-sdn-ovs-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.ppc64le.rpm
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.src.rpm
atomic-enterprise-service-catalog-svcat-3.10.101-1.git.1452.e901816.el7.ppc64le.rpm
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
prometheus-node-exporter-3.10.101-1.git.1063.7f2f0c9.el7.ppc64le.rpm
atomic-openshift-sdn-ovs-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-master-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-node-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-clients-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-master-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.x86_64.rpm
atomic-openshift-template-service-broker-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.src.rpm
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.ppc64le.rpm
atomic-openshift-tests-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
openshift-ansible-3.10.101-1.git.0.5f32198.el7.src.rpm
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.src.rpm
openshift-ansible-roles-3.10.101-1.git.0.5f32198.el7.noarch.rpm
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.src.rpm
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.src.rpm
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.ppc64le.rpm
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-web-console-3.10.101-1.git.424.314ee1d.el7.x86_64.rpm
openshift-ansible-3.10.101-1.git.0.5f32198.el7.noarch.rpm
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.ppc64le.rpm
atomic-openshift-3.10.101-1.git.0.94a2fbd.el7.src.rpm
atomic-openshift-clients-redistributable-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
openshift-ansible-docs-3.10.101-1.git.0.5f32198.el7.noarch.rpm
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.src.rpm
atomic-openshift-docker-excluder-3.10.101-1.git.0.94a2fbd.el7.noarch.rpm
atomic-openshift-hypershift-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-hypershift-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-template-service-broker-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-tests-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
atomic-openshift-node-problem-detector-3.10.101-1.git.254.168a703.el7.ppc64le.rpm
atomic-openshift-pod-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
prometheus-node-exporter-3.10.101-1.git.1063.7f2f0c9.el7.x86_64.rpm
atomic-openshift-node-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm
golang-github-prometheus-node_exporter-3.10.101-1.git.1063.7f2f0c9.el7.src.rpm
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.ppc64le.rpm
atomic-openshift-clients-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-descheduler-3.10.101-1.git.299.7641032.el7.x86_64.rpm
openshift-enterprise-cluster-capacity-3.10.101-1.git.375.6e6608d.el7.x86_64.rpm
atomic-enterprise-service-catalog-svcat-3.10.101-1.git.1452.e901816.el7.x86_64.rpm
atomic-openshift-dockerregistry-3.10.101-1.git.392.ba59a8b.el7.x86_64.rpm
openshift-ansible-playbooks-3.10.101-1.git.0.5f32198.el7.noarch.rpm
atomic-enterprise-service-catalog-3.10.101-1.git.1452.e901816.el7.x86_64.rpm
atomic-openshift-excluder-3.10.101-1.git.0.94a2fbd.el7.noarch.rpm
atomic-openshift-hyperkube-3.10.101-1.git.0.94a2fbd.el7.x86_64.rpm
atomic-openshift-pod-3.10.101-1.git.0.94a2fbd.el7.ppc64le.rpm

Fixes

CVEs

(none)

References

(none)

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.