First published: Wed Feb 19 2020(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>This advisory contains the RPM packages for Red Hat OpenShift Container<br>Platform 3.11.170. See the following advisory for the container images for<br>this release:<br><a href="https://access.redhat.com/errata/RHBA-2020:0403" target="_blank">https://access.redhat.com/errata/RHBA-2020:0403</a> This release fixes the following bugs:<br><li> The Cluster Monitoring Operator playbook would reset the CMO ConfigMap every time it was executed, and manual changes to the ConfigMap were lost. Now, etcd monitoring can be configured with Ansible and changes made to the ConfigMap are now persistent when the playbook is executed. (BZ#1703032)</li> <li> Prometheeus metrics for ElasticSearch were unavailable to users because the authentication class was instantiated multiple times and without the correct configuration. Now, SAR configuration has been added to the authentication_backend and the multi-tenant plugin executes SARs and allows access to metrics. (BZ#1728856)</li> <li> The installer was picking the incorrect version of etcd, reverting to an older package version. Now, the install has been updated to use etcd v3.2.26. (BZ#1744900)</li> <li> Redirection for ConfigMap was incorrect, leading to the console page instead of the ConfigMap details page. Now, the navigateResourceURL filter has been supplied with the namespace in the ConfigMap list page. Redirects will apply to the details page of the selected ConfigMap. (BZ#1782695)</li> <li> Unexpected iptables rules were saved on the first master host. This was due to the cockpit role operations performed after openshift_sdn roles. Now, the cockpit role runs before the openshift_sdn role and unnecessary sdn rules are not saved during installation. (BZ#1783764)</li> <li> Due to an incorrect statement in the heketi-template.yml.j2 template,the HEKETI_LVMWRAPPER environment variable was only included in deployments where Gluster runs on an external cluster, and not in the case where Gluster wass deployed on OpenShift in containers. The environment variable wass needed to specify a wrapper for LVM commands so that the commands can be run on the container node, outside the container. The missing variable results in less stability of the LVM configuration. Now, the statement in the heketi-template.yml.j2 template has been corrected and the HEKETI_LVMWRAPPER environment variable is now configured in the DeploymentConfig for the Heketi container. (BZ#1791667)</li> All OpenShift Container Platform 3.11 users are advised to upgrade to these<br>updated packages and images.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/atomic-enterprise-service-catalog | <3.11.170-1.git.1.91db82e.el7 | 3.11.170-1.git.1.91db82e.el7 |
redhat/atomic-openshift | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-cluster-autoscaler | <3.11.170-1.git.1.0a0df6a.el7 | 3.11.170-1.git.1.0a0df6a.el7 |
redhat/atomic-openshift-descheduler | <3.11.170-1.git.1.9ad83f2.el7 | 3.11.170-1.git.1.9ad83f2.el7 |
redhat/atomic-openshift-dockerregistry | <3.11.170-1.git.1.55fab05.el7 | 3.11.170-1.git.1.55fab05.el7 |
redhat/atomic-openshift-metrics-server | <3.11.170-1.git.1.357f177.el7 | 3.11.170-1.git.1.357f177.el7 |
redhat/atomic-openshift-node-problem-detector | <3.11.170-1.git.1.b1f90a6.el7 | 3.11.170-1.git.1.b1f90a6.el7 |
redhat/atomic-openshift-service-idler | <3.11.170-1.git.1.8328979.el7 | 3.11.170-1.git.1.8328979.el7 |
redhat/atomic-openshift-web-console | <3.11.170-1.git.1.3d64e8b.el7 | 3.11.170-1.git.1.3d64e8b.el7 |
redhat/cri-o | <1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 | 1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
redhat/golang-github-openshift-oauth-proxy | <3.11.170-1.git.1.b49be83.el7 | 3.11.170-1.git.1.b49be83.el7 |
redhat/golang-github-prometheus-alertmanager | <3.11.170-1.git.1.61d7960.el7 | 3.11.170-1.git.1.61d7960.el7 |
redhat/golang-github-prometheus-prometheus | <3.11.170-1.git.1.227bc98.el7 | 3.11.170-1.git.1.227bc98.el7 |
redhat/jenkins | <2-plugins-3.11.1579107288-1.el7 | 2-plugins-3.11.1579107288-1.el7 |
redhat/jenkins | <2.204.2.1580891656-1.el7 | 2.204.2.1580891656-1.el7 |
redhat/openshift-ansible | <3.11.170-2.git.5.8802564.el7 | 3.11.170-2.git.5.8802564.el7 |
redhat/openshift-enterprise-autoheal | <3.11.170-1.git.1.dfe6c52.el7 | 3.11.170-1.git.1.dfe6c52.el7 |
redhat/openshift-enterprise-cluster-capacity | <3.11.170-1.git.1.661684b.el7 | 3.11.170-1.git.1.661684b.el7 |
redhat/openshift-kuryr | <3.11.170-1.git.1.7265da1.el7 | 3.11.170-1.git.1.7265da1.el7 |
redhat/atomic-enterprise-service-catalog | <3.11.170-1.git.1.91db82e.el7 | 3.11.170-1.git.1.91db82e.el7 |
redhat/atomic-enterprise-service-catalog-svcat | <3.11.170-1.git.1.91db82e.el7 | 3.11.170-1.git.1.91db82e.el7 |
redhat/atomic-openshift | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-clients | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-clients-redistributable | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-cluster-autoscaler | <3.11.170-1.git.1.0a0df6a.el7 | 3.11.170-1.git.1.0a0df6a.el7 |
redhat/atomic-openshift-descheduler | <3.11.170-1.git.1.9ad83f2.el7 | 3.11.170-1.git.1.9ad83f2.el7 |
redhat/atomic-openshift-docker-excluder | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-dockerregistry | <3.11.170-1.git.1.55fab05.el7 | 3.11.170-1.git.1.55fab05.el7 |
redhat/atomic-openshift-excluder | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-hyperkube | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-hypershift | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-master | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-metrics-server | <3.11.170-1.git.1.357f177.el7 | 3.11.170-1.git.1.357f177.el7 |
redhat/atomic-openshift-node | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-node-problem-detector | <3.11.170-1.git.1.b1f90a6.el7 | 3.11.170-1.git.1.b1f90a6.el7 |
redhat/atomic-openshift-pod | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-sdn-ovs | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-service-idler | <3.11.170-1.git.1.8328979.el7 | 3.11.170-1.git.1.8328979.el7 |
redhat/atomic-openshift-template-service-broker | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-tests | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-web-console | <3.11.170-1.git.1.3d64e8b.el7 | 3.11.170-1.git.1.3d64e8b.el7 |
redhat/cri-o | <1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 | 1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
redhat/cri-o-debuginfo | <1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 | 1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
redhat/golang-github-openshift-oauth-proxy | <3.11.170-1.git.1.b49be83.el7 | 3.11.170-1.git.1.b49be83.el7 |
redhat/jenkins | <2-plugins-3.11.1579107288-1.el7 | 2-plugins-3.11.1579107288-1.el7 |
redhat/jenkins | <2.204.2.1580891656-1.el7 | 2.204.2.1580891656-1.el7 |
redhat/openshift-ansible | <3.11.170-2.git.5.8802564.el7 | 3.11.170-2.git.5.8802564.el7 |
redhat/openshift-ansible-docs | <3.11.170-2.git.5.8802564.el7 | 3.11.170-2.git.5.8802564.el7 |
redhat/openshift-ansible-playbooks | <3.11.170-2.git.5.8802564.el7 | 3.11.170-2.git.5.8802564.el7 |
redhat/openshift-ansible-roles | <3.11.170-2.git.5.8802564.el7 | 3.11.170-2.git.5.8802564.el7 |
redhat/openshift-enterprise-autoheal | <3.11.170-1.git.1.dfe6c52.el7 | 3.11.170-1.git.1.dfe6c52.el7 |
redhat/openshift-enterprise-cluster-capacity | <3.11.170-1.git.1.661684b.el7 | 3.11.170-1.git.1.661684b.el7 |
redhat/openshift-kuryr-cni | <3.11.170-1.git.1.7265da1.el7 | 3.11.170-1.git.1.7265da1.el7 |
redhat/openshift-kuryr-common | <3.11.170-1.git.1.7265da1.el7 | 3.11.170-1.git.1.7265da1.el7 |
redhat/openshift-kuryr-controller | <3.11.170-1.git.1.7265da1.el7 | 3.11.170-1.git.1.7265da1.el7 |
redhat/prometheus | <3.11.170-1.git.1.227bc98.el7 | 3.11.170-1.git.1.227bc98.el7 |
redhat/prometheus-alertmanager | <3.11.170-1.git.1.61d7960.el7 | 3.11.170-1.git.1.61d7960.el7 |
redhat/prometheus-node-exporter | <3.11.170-1.git.1.51473b7.el7 | 3.11.170-1.git.1.51473b7.el7 |
redhat/python2-kuryr-kubernetes | <3.11.170-1.git.1.7265da1.el7 | 3.11.170-1.git.1.7265da1.el7 |
redhat/atomic-enterprise-service-catalog | <3.11.170-1.git.1.91db82e.el7 | 3.11.170-1.git.1.91db82e.el7 |
redhat/atomic-enterprise-service-catalog-svcat | <3.11.170-1.git.1.91db82e.el7 | 3.11.170-1.git.1.91db82e.el7 |
redhat/atomic-openshift | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-clients | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-cluster-autoscaler | <3.11.170-1.git.1.0a0df6a.el7 | 3.11.170-1.git.1.0a0df6a.el7 |
redhat/atomic-openshift-descheduler | <3.11.170-1.git.1.9ad83f2.el7 | 3.11.170-1.git.1.9ad83f2.el7 |
redhat/atomic-openshift-hyperkube | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-hypershift | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-master | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-metrics-server | <3.11.170-1.git.1.357f177.el7 | 3.11.170-1.git.1.357f177.el7 |
redhat/atomic-openshift-node | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-node-problem-detector | <3.11.170-1.git.1.b1f90a6.el7 | 3.11.170-1.git.1.b1f90a6.el7 |
redhat/atomic-openshift-pod | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-sdn-ovs | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-service-idler | <3.11.170-1.git.1.8328979.el7 | 3.11.170-1.git.1.8328979.el7 |
redhat/atomic-openshift-template-service-broker | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-tests | <3.11.170-1.git.0.00cac56.el7 | 3.11.170-1.git.0.00cac56.el7 |
redhat/atomic-openshift-web-console | <3.11.170-1.git.1.3d64e8b.el7 | 3.11.170-1.git.1.3d64e8b.el7 |
redhat/cri-o | <1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 | 1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
redhat/cri-o-debuginfo | <1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 | 1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7 |
redhat/golang-github-openshift-oauth-proxy | <3.11.170-1.git.1.b49be83.el7 | 3.11.170-1.git.1.b49be83.el7 |
redhat/openshift-ansible-test | <3.11.170-2.git.5.8802564.el7 | 3.11.170-2.git.5.8802564.el7 |
redhat/openshift-enterprise-autoheal | <3.11.170-1.git.1.dfe6c52.el7 | 3.11.170-1.git.1.dfe6c52.el7 |
redhat/openshift-enterprise-cluster-capacity | <3.11.170-1.git.1.661684b.el7 | 3.11.170-1.git.1.661684b.el7 |
redhat/prometheus | <3.11.170-1.git.1.227bc98.el7 | 3.11.170-1.git.1.227bc98.el7 |
redhat/prometheus-alertmanager | <3.11.170-1.git.1.61d7960.el7 | 3.11.170-1.git.1.61d7960.el7 |
redhat/prometheus-node-exporter | <3.11.170-1.git.1.51473b7.el7 | 3.11.170-1.git.1.51473b7.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The RHBA-2020:0402 advisory provides RPM packages for Red Hat OpenShift Container Platform 3.11.170.
Affected versions in RHBA-2020:0402 include specific versions of packages like atomic-openshift and atomic-openshift-descheduler.
To resolve vulnerabilities addressed in RHBA-2020:0402, update your OpenShift Container Platform to the latest recommended RPM packages.
Review the advisory for RHBA-2020:0402 for any potential known issues that may arise after the update.
RHBA-2020:0402 supports various architectures including x86_64 and ppc64le as part of the OpenShift Container Platform.