Issued:: 2019-10-14
Updated:: 2019-10-14

RHBA-2019:2987 - OpenShift Container Platform 3.10 bug fix update

Synopsis

OpenShift Container Platform 3.10 bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Red Hat OpenShift Container Platform release 3.10.175 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.10.z. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2019:2988

This update includes the following bugs:

Retrieval of image names for stage registry would result in certificate errors. A configuration option has been added that allows users to skip SSL verification. If skip_verify_tls is true, the TLS certificate of the remost registry will not be verified and no error will be present. The default setting is false. (BZ#1696113)
The service-signer would be deleted when performing the redeploy-certificates playbook. As a result, internal applications that depended on a service signer certificate would need to be regenerated or would be rendered invalid. Now, the service-signer has been removed from the list of certificates to be removed during a normal non-CA certificate redeployment. Service-signer is only updated when the OpenShift CA has been renewed. (BZ#1721336)
When using oc replace --force, dependent objects were not being properly removed/updated. Deployment rollouts would not complete and would be canceled. The options --cascade and --grace-period are added to the module using oc replace. Deployments are now properly rolled out when using oc replace. (BZ#1745027)
A kernel version check has been added to ensure the installed kernel meets the required minimum to avoid network issues. This check is run during prerequisites, scaleup, and upgrade. (BZ#1749028)

All OpenShift Container Platform 3.10 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.10 see the following documentation, which will be updated shortly for release 3.10.175, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/articles/11258.

Affected Products

Product	Version	Arch
Red Hat OpenShift Container Platform	3.10	x86_64
Red Hat OpenShift Container Platform for Power	3.10	ppc64le

Updated Packages

openshift-external-storage-efs-provisioner-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
openshift-monitor-project-lifecycle-3.10.83-2.git.59.821da27.el7.x86_64.rpm
csi-driver-registrar-0.2.0-2.el7.src.rpm
atomic-enterprise-service-catalog-3.10.175-1.git.1.3a22d49.el7.src.rpm
openshift-external-storage-debuginfo-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
openshift-external-storage-snapshot-provisioner-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
openshift-enterprise-cluster-capacity-3.10.175-1.git.1.3a01ca9.el7.x86_64.rpm
ansible-service-broker-1.2.23-2.el7.ppc64le.rpm
atomic-openshift-descheduler-3.10.175-1.git.1.2e054b4.el7.x86_64.rpm
csi-provisioner-debuginfo-0.2.0-3.el7.x86_64.rpm
csi-driver-registrar-0.2.0-2.el7.ppc64le.rpm
golang-github-prometheus-node_exporter-3.10.175-1.git.1.3ed7fcc.el7.src.rpm
atomic-enterprise-service-catalog-3.10.175-1.git.1.3a22d49.el7.x86_64.rpm
atomic-openshift-node-problem-detector-3.10.175-1.git.1.c0125c5.el7.ppc64le.rpm
atomic-openshift-metrics-server-3.10.23-2.git.49.1d13e6d.el7.src.rpm
atomic-openshift-cluster-autoscaler-3.10.23-2.git.0.0a02d98.el7.src.rpm
cri-tools-1.0.0-6.rhaos3.10.git2e22a75.el7.src.rpm
atomic-openshift-metrics-server-3.10.23-2.git.49.1d13e6d.el7.x86_64.rpm
csi-attacher-debuginfo-0.2.0-4.git27299be.el7.ppc64le.rpm
atomic-openshift-cluster-autoscaler-3.10.23-2.git.0.0a02d98.el7.x86_64.rpm
openshift-enterprise-cluster-capacity-3.10.175-1.git.1.3a01ca9.el7.src.rpm
openshift-external-storage-0.0.2-6.gitd3c94f0.el7.src.rpm
atomic-openshift-web-console-3.10.175-1.git.1.3eeb533.el7.ppc64le.rpm
openshift-external-storage-manila-provisioner-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
ansible-service-broker-selinux-1.2.23-2.el7.noarch.rpm
openshift-ansible-playbooks-3.10.175-1.git.0.19fd261.el7.noarch.rpm
openshift-external-storage-debuginfo-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
imagebuilder-0.0.1-2.el7.ppc64le.rpm
openshift-external-storage-manila-provisioner-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
openshift-external-storage-snapshot-controller-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
ansible-service-broker-1.2.23-2.el7.src.rpm
openshift-ansible-3.10.175-1.git.0.19fd261.el7.noarch.rpm
cri-tools-debuginfo-1.0.0-6.rhaos3.10.git2e22a75.el7.x86_64.rpm
image-inspector-2.4.0-4.el7.x86_64.rpm
openshift-external-storage-snapshot-provisioner-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
openshift-monitor-project-lifecycle-3.10.83-2.git.59.821da27.el7.src.rpm
atomic-openshift-dockerregistry-3.10.175-1.git.1.a93fa5a.el7.x86_64.rpm
openshift-external-storage-local-provisioner-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
cri-tools-1.0.0-6.rhaos3.10.git2e22a75.el7.ppc64le.rpm
imagebuilder-0.0.1-2.el7.x86_64.rpm
openshift-enterprise-autoheal-3.10.24-2.git.219.dee8df0.el7.src.rpm
cri-tools-debuginfo-1.0.0-6.rhaos3.10.git2e22a75.el7.ppc64le.rpm
csi-attacher-0.2.0-4.git27299be.el7.src.rpm
atomic-openshift-node-problem-detector-3.10.175-1.git.1.c0125c5.el7.x86_64.rpm
csi-provisioner-0.2.0-3.el7.x86_64.rpm
openshift-enterprise-autoheal-3.10.24-2.git.219.dee8df0.el7.x86_64.rpm
csi-provisioner-0.2.0-3.el7.ppc64le.rpm
csi-provisioner-debuginfo-0.2.0-3.el7.ppc64le.rpm
atomic-openshift-dockerregistry-3.10.175-1.git.1.a93fa5a.el7.src.rpm
openshift-ansible-3.10.175-1.git.0.19fd261.el7.src.rpm
csi-provisioner-0.2.0-3.el7.src.rpm
openshift-enterprise-autoheal-3.10.24-2.git.219.dee8df0.el7.ppc64le.rpm
prometheus-node-exporter-3.10.175-1.git.1.3ed7fcc.el7.x86_64.rpm
image-inspector-2.4.0-4.el7.src.rpm
openshift-external-storage-snapshot-controller-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
ansible-service-broker-1.2.23-2.el7.x86_64.rpm
atomic-openshift-descheduler-3.10.175-1.git.1.2e054b4.el7.ppc64le.rpm
openshift-external-storage-cephfs-provisioner-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
atomic-openshift-descheduler-3.10.175-1.git.1.2e054b4.el7.src.rpm
openshift-external-storage-local-provisioner-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
csi-driver-registrar-debuginfo-0.2.0-2.el7.x86_64.rpm
csi-livenessprobe-debuginfo-0.0.1-2.gitff5b6a0.el7.x86_64.rpm
atomic-openshift-node-problem-detector-3.10.175-1.git.1.c0125c5.el7.src.rpm
openshift-external-storage-efs-provisioner-0.0.2-6.gitd3c94f0.el7.ppc64le.rpm
openshift-monitor-project-lifecycle-3.10.83-2.git.59.821da27.el7.ppc64le.rpm
openshift-ansible-docs-3.10.175-1.git.0.19fd261.el7.noarch.rpm
prometheus-node-exporter-3.10.175-1.git.1.3ed7fcc.el7.ppc64le.rpm
csi-driver-registrar-0.2.0-2.el7.x86_64.rpm
ansible-service-broker-container-scripts-1.2.23-2.el7.noarch.rpm
csi-livenessprobe-0.0.1-2.gitff5b6a0.el7.ppc64le.rpm
openshift-external-storage-cephfs-provisioner-0.0.2-6.gitd3c94f0.el7.x86_64.rpm
csi-attacher-0.2.0-4.git27299be.el7.x86_64.rpm
openshift-enterprise-cluster-capacity-3.10.175-1.git.1.3a01ca9.el7.ppc64le.rpm
openshift-ansible-roles-3.10.175-1.git.0.19fd261.el7.noarch.rpm
atomic-enterprise-service-catalog-svcat-3.10.175-1.git.1.3a22d49.el7.x86_64.rpm
atomic-openshift-web-console-3.10.175-1.git.1.3eeb533.el7.src.rpm
atomic-openshift-web-console-3.10.175-1.git.1.3eeb533.el7.x86_64.rpm
atomic-openshift-metrics-server-3.10.23-2.git.49.1d13e6d.el7.ppc64le.rpm
csi-livenessprobe-0.0.1-2.gitff5b6a0.el7.x86_64.rpm
csi-livenessprobe-debuginfo-0.0.1-2.gitff5b6a0.el7.ppc64le.rpm
image-inspector-2.4.0-4.el7.ppc64le.rpm
atomic-enterprise-service-catalog-svcat-3.10.175-1.git.1.3a22d49.el7.ppc64le.rpm
imagebuilder-0.0.1-2.el7.src.rpm
cri-tools-1.0.0-6.rhaos3.10.git2e22a75.el7.x86_64.rpm
csi-livenessprobe-0.0.1-2.gitff5b6a0.el7.src.rpm
atomic-openshift-dockerregistry-3.10.175-1.git.1.a93fa5a.el7.ppc64le.rpm
csi-attacher-0.2.0-4.git27299be.el7.ppc64le.rpm
atomic-openshift-cluster-autoscaler-3.10.23-2.git.0.0a02d98.el7.ppc64le.rpm
csi-attacher-debuginfo-0.2.0-4.git27299be.el7.x86_64.rpm
atomic-enterprise-service-catalog-3.10.175-1.git.1.3a22d49.el7.ppc64le.rpm
csi-driver-registrar-debuginfo-0.2.0-2.el7.ppc64le.rpm

Fixes

CVEs

(none)

References

(none)

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.