Issued:
2020-01-13
Updated:
2020-01-13

RHBA-2020:0017 - OpenShift Container Platform 3.11 bug fix and enhancement update

Synopsis

OpenShift Container Platform 3.11 bug fix and enhancement update

Type/Severity

Bug Fix Advisory None

Topic

Red Hat OpenShift Container Platform release 3.11.161 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.161. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2020:0018

This release fixes the following bugs:

  • In the openshift-logging update using Ansible, if a new value was set in the inventory file to apply the change to the existing cluster, the change was ignored. This occurred because the module logging_patch accidentally created a patch to change a new file into the original file. The patching direction was fixed and the changes made in an inventory file are now correctly applied. (BZ#1753593)

  • When the SDN pod was restarted on a node, it did not clean up any old Egress IP addresses. If the set of Egress IP addresses assigned to a node changed while the SDN pod was not running, then the node might continue to claim that it owned the Egress IP even after the IP had been assigned to another node. This caused traffic to that IP to be delivered to the wrong node and be lost. The SDN pod now cleans up stale Egress IP addresses at startup. (BZ#1762235)

  • SDN code would declare each node as READY before the SDN proxy was completely initialized. Some iptables rules would not be populated and the node is marked as ready. This caused some pods to not be able to communicate with the API while coming up. Now, all iptables rules exist before pods get schedules to the node, preventing issues where pod's cannot communicate with the API server. (BZ#1764150)

This release includes the following enhancements:

  • The latest Kuryr images are now hosted in Red Hat's registry. (BZ#1652571)

All OpenShift Container Platform 3.11 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, ensure all previously released errata relevant to your system is applied.

See the following documentation, which will be updated shortly for release 3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/articles/11258.

Affected Products

ProductVersionArch
Red Hat OpenShift Container Platform3.11x86_64
Red Hat OpenShift Container Platform for Power3.11ppc64le

Updated Packages

  • atomic-openshift-template-service-broker-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • atomic-openshift-node-problem-detector-3.11.161-1.git.1.5d93e31.el7.src.rpm
  • atomic-openshift-docker-excluder-3.11.161-1.git.0.4ccbe25.el7.noarch.rpm
  • atomic-openshift-sdn-ovs-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • prometheus-alertmanager-3.11.161-1.git.1.823bae5.el7.x86_64.rpm
  • atomic-openshift-template-service-broker-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-cluster-autoscaler-3.11.161-1.git.1.ee040c2.el7.x86_64.rpm
  • golang-github-prometheus-alertmanager-3.11.161-1.git.1.823bae5.el7.src.rpm
  • atomic-openshift-web-console-3.11.161-1.git.1.809b03f.el7.src.rpm
  • openshift-enterprise-cluster-capacity-3.11.161-1.git.1.032be79.el7.src.rpm
  • prometheus-3.11.161-1.git.1.3f7d286.el7.x86_64.rpm
  • golang-github-openshift-oauth-proxy-3.11.161-1.git.1.934cf10.el7.ppc64le.rpm
  • atomic-openshift-master-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • atomic-enterprise-service-catalog-svcat-3.11.161-1.git.1.63434de.el7.ppc64le.rpm
  • atomic-openshift-excluder-3.11.161-1.git.0.4ccbe25.el7.noarch.rpm
  • atomic-openshift-service-idler-3.11.161-1.git.1.88f46ce.el7.x86_64.rpm
  • atomic-openshift-master-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-tests-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • openshift-kuryr-3.11.161-1.git.1.33697e5.el7.src.rpm
  • jenkins-2.176.4.1578402941-1.el7.noarch.rpm
  • jenkins-2.176.4.1578402941-1.el7.src.rpm
  • openshift-enterprise-autoheal-3.11.161-1.git.1.cf7169d.el7.src.rpm
  • openshift-ansible-3.11.161-2.git.5.029d67f.el7.noarch.rpm
  • atomic-openshift-clients-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • golang-github-openshift-oauth-proxy-3.11.161-1.git.1.934cf10.el7.src.rpm
  • openshift-enterprise-cluster-capacity-3.11.161-1.git.1.032be79.el7.ppc64le.rpm
  • atomic-openshift-cluster-autoscaler-3.11.161-1.git.1.ee040c2.el7.src.rpm
  • atomic-openshift-pod-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-sdn-ovs-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-tests-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-dockerregistry-3.11.161-1.git.1.a000456.el7.x86_64.rpm
  • prometheus-alertmanager-3.11.161-1.git.1.823bae5.el7.ppc64le.rpm
  • openshift-enterprise-autoheal-3.11.161-1.git.1.cf7169d.el7.x86_64.rpm
  • atomic-openshift-hypershift-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • openshift-kuryr-controller-3.11.161-1.git.1.33697e5.el7.noarch.rpm
  • openshift-ansible-3.11.161-2.git.5.029d67f.el7.src.rpm
  • atomic-openshift-metrics-server-3.11.161-1.git.1.5e2b4e0.el7.ppc64le.rpm
  • atomic-openshift-descheduler-3.11.161-1.git.1.61a41f1.el7.ppc64le.rpm
  • openshift-kuryr-cni-3.11.161-1.git.1.33697e5.el7.noarch.rpm
  • atomic-openshift-node-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • atomic-openshift-pod-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • golang-github-prometheus-prometheus-3.11.161-1.git.1.3f7d286.el7.src.rpm
  • openshift-ansible-roles-3.11.161-2.git.5.029d67f.el7.noarch.rpm
  • atomic-openshift-clients-redistributable-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • atomic-openshift-hyperkube-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • openshift-ansible-playbooks-3.11.161-2.git.5.029d67f.el7.noarch.rpm
  • atomic-openshift-descheduler-3.11.161-1.git.1.61a41f1.el7.src.rpm
  • atomic-openshift-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • prometheus-node-exporter-3.11.161-1.git.1.c82b9a8.el7.ppc64le.rpm
  • openshift-enterprise-autoheal-3.11.161-1.git.1.cf7169d.el7.ppc64le.rpm
  • atomic-openshift-metrics-server-3.11.161-1.git.1.5e2b4e0.el7.src.rpm
  • atomic-openshift-clients-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-metrics-server-3.11.161-1.git.1.5e2b4e0.el7.x86_64.rpm
  • openshift-kuryr-common-3.11.161-1.git.1.33697e5.el7.noarch.rpm
  • atomic-openshift-service-idler-3.11.161-1.git.1.88f46ce.el7.src.rpm
  • golang-github-openshift-oauth-proxy-3.11.161-1.git.1.934cf10.el7.x86_64.rpm
  • atomic-openshift-3.11.161-1.git.0.4ccbe25.el7.src.rpm
  • atomic-openshift-hyperkube-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • python2-kuryr-kubernetes-3.11.161-1.git.1.33697e5.el7.noarch.rpm
  • atomic-openshift-descheduler-3.11.161-1.git.1.61a41f1.el7.x86_64.rpm
  • atomic-openshift-node-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-enterprise-service-catalog-3.11.161-1.git.1.63434de.el7.src.rpm
  • atomic-openshift-3.11.161-1.git.0.4ccbe25.el7.x86_64.rpm
  • openshift-enterprise-cluster-capacity-3.11.161-1.git.1.032be79.el7.x86_64.rpm
  • atomic-openshift-cluster-autoscaler-3.11.161-1.git.1.ee040c2.el7.ppc64le.rpm
  • atomic-enterprise-service-catalog-3.11.161-1.git.1.63434de.el7.ppc64le.rpm
  • atomic-openshift-hypershift-3.11.161-1.git.0.4ccbe25.el7.ppc64le.rpm
  • atomic-openshift-web-console-3.11.161-1.git.1.809b03f.el7.x86_64.rpm
  • golang-github-prometheus-node_exporter-3.11.161-1.git.1.c82b9a8.el7.src.rpm
  • atomic-openshift-node-problem-detector-3.11.161-1.git.1.5d93e31.el7.x86_64.rpm
  • atomic-openshift-service-idler-3.11.161-1.git.1.88f46ce.el7.ppc64le.rpm
  • jenkins-2-plugins-3.11.1577428005-1.el7.src.rpm
  • openshift-ansible-test-3.11.161-2.git.5.029d67f.el7.noarch.rpm
  • atomic-openshift-web-console-3.11.161-1.git.1.809b03f.el7.ppc64le.rpm
  • prometheus-node-exporter-3.11.161-1.git.1.c82b9a8.el7.x86_64.rpm
  • atomic-enterprise-service-catalog-svcat-3.11.161-1.git.1.63434de.el7.x86_64.rpm
  • openshift-ansible-docs-3.11.161-2.git.5.029d67f.el7.noarch.rpm
  • atomic-enterprise-service-catalog-3.11.161-1.git.1.63434de.el7.x86_64.rpm
  • atomic-openshift-node-problem-detector-3.11.161-1.git.1.5d93e31.el7.ppc64le.rpm
  • prometheus-3.11.161-1.git.1.3f7d286.el7.ppc64le.rpm
  • jenkins-2-plugins-3.11.1577428005-1.el7.noarch.rpm
  • atomic-openshift-dockerregistry-3.11.161-1.git.1.a000456.el7.src.rpm

Fixes

CVEs

References

(none)

Additional information