- Issued:
- 2021-03-09
- Updated:
- 2021-03-09
RHBA-2021:0674 - OpenShift Container Platform 4.6.20 bug fix update
Synopsis
OpenShift Container Platform 4.6.20 bug fix update
Type/Severity
Bug Fix Advisory None
Topic
Red Hat OpenShift Container Platform release 4.6.20 is now available with updates to packages and images that fix several bugs.
Description
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.6.20. See the following advisory for the RPM packages for this release:
This content is not included.https://access.redhat.com/errata/RHBA-2020:0673
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html
This update fixes the following bugs among others:
-
Previously, when importing a private image container with secrets, the image download would fail and return
ErrImagePullandImagePullBackOfferrors. Consequently, the pod could not start andDeploymentConfigwas stuck untilServiceAccountorDeploymentConfigwas updated manually. With this update, new deployments use the internal container registry to start. As a result, importing a container image from an external private container registry now works as intended. (BZ#1926340) -
This update supports backporting the
SAPConfiggathering enhancement, since many SAP clusters are running OpenShift Container Platform 4.6. (BZ#1922855) -
Previously, the pruner was trying detect the registry name using image streams. When there were no image streams, the pruner failed to detect the registry name. With this update, the Image Registry Operator provides the pruner with the registry name, which results in the pruner no longer depending on the existence of image streams. (BZ#1923993)
-
Previously, if the hostname from the vSphere metadata was not set before the
NetworkManagerstarted, the vSphere metadata would be ignored. This update now sets the hostname asvsphere-hostname.servicebefore theNetworkManagerstarts, so long as this information is available within the vSphere metadata. (BZ#1904825) -
Previously, the
httpClient()chart repository did not consider any proxy environment variable, and thus no helm charts were displayed in the Developer Catalog. This update ensures that proxy environment variables are considered by providing ahttp.ProxyFromEnvironmentfunction to theTransportstruct's initialization. (BZ#1919138) -
Previously, if the
lib-bucket-provisionerservice account was missing, then the creation oflib-bucket-provisionerInstallPlan overloaded the etcd and impacted the performance of the OCP Cluster. This update implements theService Account Gathererto the Insights Operator to collectfield managementStateof OpenShift Operators, which is anonymized and stored at the Insights Operator archive report. (BZ#1885941)
You may download the oc tool and use it to inspect release image metadata as follows:
(For x86_64 architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.6.20-x86_64
The image digest is sha256:ac5bbe391f9f5db07b8a710cfda1aee80f6eb3bf37a3c44a5b89763957d8d5ad
(For s390x architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.6.20-s390x
The image digest is sha256:d6477b7ff61bfe948cf0806611437ebbca07e8466ae89053ae9bca39b1cccd99
(For ppc64le architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.6.20-ppc64le
The image digest is sha256:6e66ce5710f01e65427beb811059fa7920000f4a04fa1d7fd506eaef83794b16
All OpenShift Container Platform 4.6 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor.
Solution
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html
Details on how to access this content are available at This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat OpenShift Container Platform | 4.6 | x86_64 |
| Red Hat OpenShift Container Platform for Power | 4.6 | ppc64le |
| Red Hat OpenShift Container Platform for IBM Z and LinuxONE | 4.6 | s390x |
Fixes
- This content is not included.BZ - 1885941
- This content is not included.BZ - 1906298
- This content is not included.BZ - 1910199
- This content is not included.BZ - 1913543
- This content is not included.BZ - 1917481
- This content is not included.BZ - 1919138
- This content is not included.BZ - 1920552
- This content is not included.BZ - 1922207
- This content is not included.BZ - 1922855
- This content is not included.BZ - 1923993
- This content is not included.BZ - 1924194
- This content is not included.BZ - 1924437
- This content is not included.BZ - 1925199
- This content is not included.BZ - 1926121
- This content is not included.BZ - 1926340
- This content is not included.BZ - 1926371
- This content is not included.BZ - 1927800
- This content is not included.BZ - 1928108
- This content is not included.BZ - 1929335
- This content is not included.BZ - 1929872
CVEs
(none)
References
(none)
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.