Bug 1436348

Summary: [3.3] protect package versions upon upgrade
Product: OpenShift Container Platform Reporter: Scott Dodson <sdodson>
Component: Cluster Version OperatorAssignee: Jan Chaloupka <jchaloup>
Status: CLOSED ERRATA QA Contact: liujia <jiajliu>
Severity: high Docs Contact:
Priority: medium    
Version: 3.3.1CC: aos-bugs, bleanhar, ederevea, erich, jiajliu, jialiu, jkaur, jmorales, jokerman, mbarrett, mmccomas, pep, pprakash, pruan, tkimura
Target Milestone: ---   
Target Release: 3.3.1   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Feature: The installation and upgrade playbooks got extended to install excluders that protects rpm againts upgrading to undesired versions. Reason: Each OCP version works properly with specific range of versions of packages. Thus, the package versions must be limited and the ranges enforced. Result: Range of versions of packages for each OCP version (since 3.3) is now protected.
Story Points: ---
Clone Of: 1311207 Environment:
Last Closed: 2017-06-29 13:33:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1311207, 1436350, 1440167    
Bug Blocks: 1267746, 1436343    

Comment 3 Jan Chaloupka 2017-06-06 10:31:28 UTC
Upstream PR: https://github.com/openshift/openshift-ansible/pull/4373

Comment 5 liujia 2017-06-14 07:07:15 UTC
Add excluders to prevent related packages from upgrading by "yum update".

Version:
atomic-openshift-utils-3.3.91-1.git.0.b0e1696.el7.noarch

Steps:
1, install ocp v3.3.1.35 on rhel.
2, install atomic-openshift-excluder and atomic-openshift-docker-excluder on the host.
# cat /etc/yum.conf |grep exclude
exclude= docker*1.20*  docker*1.19*  docker*1.18*  docker*1.17*  docker*1.16*  docker*1.15*  docker*1.14*  docker*1.13*  docker*1.12*  tuned-profiles-atomic-openshift-node  atomic-openshift-tests  atomic-openshift-sdn-ovs  atomic-openshift-recycle  atomic-openshift-pod  atomic-openshift-node  atomic-openshift-master  atomic-openshift-dockerregistry  atomic-openshift-clients-redistributable  atomic-openshift-clients  atomic-openshift 

3, prepare new version repo and yum update

result:
Openshift packages are not updated. 


Disable and reset excluders through upgrade playbook.

Version:
atomic-openshift-utils-3.3.91-1.git.0.b0e1696.el7.noarch

Steps:
1, install ocp v3.3.1.35 on rhel.
2, install atomic-openshift-excluder and atomic-openshift-docker-excluder on the host.
3, update atomic-openshift-utils
4, run upgrade playbook to upgrade OCP v3.3.1.36

Result:
Upgrade successfully.

Comment 7 errata-xmlrpc 2017-06-29 13:33:14 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1666