Advisory Published

RHBA-2020:0402: OpenShift Container Platform 3.11 bug fix update

First published: Wed Feb 19 2020(Updated: )

Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>This advisory contains the RPM packages for Red Hat OpenShift Container<br>Platform 3.11.170. See the following advisory for the container images for<br>this release:<br><a href="https://access.redhat.com/errata/RHBA-2020:0403" target="_blank">https://access.redhat.com/errata/RHBA-2020:0403</a> This release fixes the following bugs:<br><li> The Cluster Monitoring Operator playbook would reset the CMO ConfigMap every time it was executed, and manual changes to the ConfigMap were lost. Now, etcd monitoring can be configured with Ansible and changes made to the ConfigMap are now persistent when the playbook is executed. (BZ#1703032)</li> <li> Prometheeus metrics for ElasticSearch were unavailable to users because the authentication class was instantiated multiple times and without the correct configuration. Now, SAR configuration has been added to the authentication_backend and the multi-tenant plugin executes SARs and allows access to metrics. (BZ#1728856)</li> <li> The installer was picking the incorrect version of etcd, reverting to an older package version. Now, the install has been updated to use etcd v3.2.26. (BZ#1744900)</li> <li> Redirection for ConfigMap was incorrect, leading to the console page instead of the ConfigMap details page. Now, the navigateResourceURL filter has been supplied with the namespace in the ConfigMap list page. Redirects will apply to the details page of the selected ConfigMap. (BZ#1782695)</li> <li> Unexpected iptables rules were saved on the first master host. This was due to the cockpit role operations performed after openshift_sdn roles. Now, the cockpit role runs before the openshift_sdn role and unnecessary sdn rules are not saved during installation. (BZ#1783764)</li> <li> Due to an incorrect statement in the heketi-template.yml.j2 template,the HEKETI_LVMWRAPPER environment variable was only included in deployments where Gluster runs on an external cluster, and not in the case where Gluster wass deployed on OpenShift in containers. The environment variable wass needed to specify a wrapper for LVM commands so that the commands can be run on the container node, outside the container. The missing variable results in less stability of the LVM configuration. Now, the statement in the heketi-template.yml.j2 template has been corrected and the HEKETI_LVMWRAPPER environment variable is now configured in the DeploymentConfig for the Heketi container. (BZ#1791667)</li> All OpenShift Container Platform 3.11 users are advised to upgrade to these<br>updated packages and images.

Affected SoftwareAffected VersionHow to fix
redhat/atomic-enterprise-service-catalog<3.11.170-1.git.1.91db82e.el7
3.11.170-1.git.1.91db82e.el7
redhat/atomic-openshift<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-cluster-autoscaler<3.11.170-1.git.1.0a0df6a.el7
3.11.170-1.git.1.0a0df6a.el7
redhat/atomic-openshift-descheduler<3.11.170-1.git.1.9ad83f2.el7
3.11.170-1.git.1.9ad83f2.el7
redhat/atomic-openshift-dockerregistry<3.11.170-1.git.1.55fab05.el7
3.11.170-1.git.1.55fab05.el7
redhat/atomic-openshift-metrics-server<3.11.170-1.git.1.357f177.el7
3.11.170-1.git.1.357f177.el7
redhat/atomic-openshift-node-problem-detector<3.11.170-1.git.1.b1f90a6.el7
3.11.170-1.git.1.b1f90a6.el7
redhat/atomic-openshift-service-idler<3.11.170-1.git.1.8328979.el7
3.11.170-1.git.1.8328979.el7
redhat/atomic-openshift-web-console<3.11.170-1.git.1.3d64e8b.el7
3.11.170-1.git.1.3d64e8b.el7
redhat/cri-o<1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
redhat/golang-github-openshift-oauth-proxy<3.11.170-1.git.1.b49be83.el7
3.11.170-1.git.1.b49be83.el7
redhat/golang-github-prometheus-alertmanager<3.11.170-1.git.1.61d7960.el7
3.11.170-1.git.1.61d7960.el7
redhat/golang-github-prometheus-prometheus<3.11.170-1.git.1.227bc98.el7
3.11.170-1.git.1.227bc98.el7
redhat/jenkins<2-plugins-3.11.1579107288-1.el7
2-plugins-3.11.1579107288-1.el7
redhat/jenkins<2.204.2.1580891656-1.el7
2.204.2.1580891656-1.el7
redhat/openshift-ansible<3.11.170-2.git.5.8802564.el7
3.11.170-2.git.5.8802564.el7
redhat/openshift-enterprise-autoheal<3.11.170-1.git.1.dfe6c52.el7
3.11.170-1.git.1.dfe6c52.el7
redhat/openshift-enterprise-cluster-capacity<3.11.170-1.git.1.661684b.el7
3.11.170-1.git.1.661684b.el7
redhat/openshift-kuryr<3.11.170-1.git.1.7265da1.el7
3.11.170-1.git.1.7265da1.el7
redhat/atomic-enterprise-service-catalog<3.11.170-1.git.1.91db82e.el7
3.11.170-1.git.1.91db82e.el7
redhat/atomic-enterprise-service-catalog-svcat<3.11.170-1.git.1.91db82e.el7
3.11.170-1.git.1.91db82e.el7
redhat/atomic-openshift<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-clients<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-clients-redistributable<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-cluster-autoscaler<3.11.170-1.git.1.0a0df6a.el7
3.11.170-1.git.1.0a0df6a.el7
redhat/atomic-openshift-descheduler<3.11.170-1.git.1.9ad83f2.el7
3.11.170-1.git.1.9ad83f2.el7
redhat/atomic-openshift-docker-excluder<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-dockerregistry<3.11.170-1.git.1.55fab05.el7
3.11.170-1.git.1.55fab05.el7
redhat/atomic-openshift-excluder<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-hyperkube<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-hypershift<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-master<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-metrics-server<3.11.170-1.git.1.357f177.el7
3.11.170-1.git.1.357f177.el7
redhat/atomic-openshift-node<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-node-problem-detector<3.11.170-1.git.1.b1f90a6.el7
3.11.170-1.git.1.b1f90a6.el7
redhat/atomic-openshift-pod<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-sdn-ovs<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-service-idler<3.11.170-1.git.1.8328979.el7
3.11.170-1.git.1.8328979.el7
redhat/atomic-openshift-template-service-broker<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-tests<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-web-console<3.11.170-1.git.1.3d64e8b.el7
3.11.170-1.git.1.3d64e8b.el7
redhat/cri-o<1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
redhat/cri-o-debuginfo<1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
redhat/golang-github-openshift-oauth-proxy<3.11.170-1.git.1.b49be83.el7
3.11.170-1.git.1.b49be83.el7
redhat/jenkins<2-plugins-3.11.1579107288-1.el7
2-plugins-3.11.1579107288-1.el7
redhat/jenkins<2.204.2.1580891656-1.el7
2.204.2.1580891656-1.el7
redhat/openshift-ansible<3.11.170-2.git.5.8802564.el7
3.11.170-2.git.5.8802564.el7
redhat/openshift-ansible-docs<3.11.170-2.git.5.8802564.el7
3.11.170-2.git.5.8802564.el7
redhat/openshift-ansible-playbooks<3.11.170-2.git.5.8802564.el7
3.11.170-2.git.5.8802564.el7
redhat/openshift-ansible-roles<3.11.170-2.git.5.8802564.el7
3.11.170-2.git.5.8802564.el7
redhat/openshift-enterprise-autoheal<3.11.170-1.git.1.dfe6c52.el7
3.11.170-1.git.1.dfe6c52.el7
redhat/openshift-enterprise-cluster-capacity<3.11.170-1.git.1.661684b.el7
3.11.170-1.git.1.661684b.el7
redhat/openshift-kuryr-cni<3.11.170-1.git.1.7265da1.el7
3.11.170-1.git.1.7265da1.el7
redhat/openshift-kuryr-common<3.11.170-1.git.1.7265da1.el7
3.11.170-1.git.1.7265da1.el7
redhat/openshift-kuryr-controller<3.11.170-1.git.1.7265da1.el7
3.11.170-1.git.1.7265da1.el7
redhat/prometheus<3.11.170-1.git.1.227bc98.el7
3.11.170-1.git.1.227bc98.el7
redhat/prometheus-alertmanager<3.11.170-1.git.1.61d7960.el7
3.11.170-1.git.1.61d7960.el7
redhat/prometheus-node-exporter<3.11.170-1.git.1.51473b7.el7
3.11.170-1.git.1.51473b7.el7
redhat/python2-kuryr-kubernetes<3.11.170-1.git.1.7265da1.el7
3.11.170-1.git.1.7265da1.el7
redhat/atomic-enterprise-service-catalog<3.11.170-1.git.1.91db82e.el7
3.11.170-1.git.1.91db82e.el7
redhat/atomic-enterprise-service-catalog-svcat<3.11.170-1.git.1.91db82e.el7
3.11.170-1.git.1.91db82e.el7
redhat/atomic-openshift<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-clients<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-cluster-autoscaler<3.11.170-1.git.1.0a0df6a.el7
3.11.170-1.git.1.0a0df6a.el7
redhat/atomic-openshift-descheduler<3.11.170-1.git.1.9ad83f2.el7
3.11.170-1.git.1.9ad83f2.el7
redhat/atomic-openshift-hyperkube<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-hypershift<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-master<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-metrics-server<3.11.170-1.git.1.357f177.el7
3.11.170-1.git.1.357f177.el7
redhat/atomic-openshift-node<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-node-problem-detector<3.11.170-1.git.1.b1f90a6.el7
3.11.170-1.git.1.b1f90a6.el7
redhat/atomic-openshift-pod<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-sdn-ovs<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-service-idler<3.11.170-1.git.1.8328979.el7
3.11.170-1.git.1.8328979.el7
redhat/atomic-openshift-template-service-broker<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-tests<3.11.170-1.git.0.00cac56.el7
3.11.170-1.git.0.00cac56.el7
redhat/atomic-openshift-web-console<3.11.170-1.git.1.3d64e8b.el7
3.11.170-1.git.1.3d64e8b.el7
redhat/cri-o<1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
redhat/cri-o-debuginfo<1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
redhat/golang-github-openshift-oauth-proxy<3.11.170-1.git.1.b49be83.el7
3.11.170-1.git.1.b49be83.el7
redhat/openshift-ansible-test<3.11.170-2.git.5.8802564.el7
3.11.170-2.git.5.8802564.el7
redhat/openshift-enterprise-autoheal<3.11.170-1.git.1.dfe6c52.el7
3.11.170-1.git.1.dfe6c52.el7
redhat/openshift-enterprise-cluster-capacity<3.11.170-1.git.1.661684b.el7
3.11.170-1.git.1.661684b.el7
redhat/prometheus<3.11.170-1.git.1.227bc98.el7
3.11.170-1.git.1.227bc98.el7
redhat/prometheus-alertmanager<3.11.170-1.git.1.61d7960.el7
3.11.170-1.git.1.61d7960.el7
redhat/prometheus-node-exporter<3.11.170-1.git.1.51473b7.el7
3.11.170-1.git.1.51473b7.el7

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203