Bug 1436343 - [3.4] protect package versions upon upgrade
Summary: [3.4] protect package versions upon upgrade
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Cluster Version Operator
Version: 3.4.1
Hardware: Unspecified
OS: Unspecified
medium
high
Target Milestone: ---
: 3.4.z
Assignee: Jan Chaloupka
QA Contact: liujia
URL:
Whiteboard:
Depends On: 1311207 1436348 1436350
Blocks: 1267746
TreeView+ depends on / blocked
 
Reported: 2017-03-27 17:03 UTC by Scott Dodson
Modified: 2019-10-10 12:16 UTC (History)
14 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Feature: The installation and upgrade playbooks got extended to install excluders that protects rpm againts upgrading to undesired versions. Reason: Each OCP version works properly with specific range of versions of packages. Thus, the package versions must be limited and the ranges enforced. Result: Range of versions of packages for each OCP version (since 3.3) is now protected.
Clone Of: 1311207
Environment:
Last Closed: 2017-06-29 13:33:14 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2017:1666 0 normal SHIPPED_LIVE OpenShift Container Platform atomic-openshift-utils bug fix and enhancement 2017-06-29 17:32:39 UTC

Comment 2 Jan Chaloupka 2017-06-06 10:32:45 UTC 
Upstream PR: https://github.com/openshift/openshift-ansible/pull/4368
Comment 4 liujia 2017-06-14 08:45:23 UTC 
Add excluders to prevent related packages from upgrading by "yum update".

Version:
atomic-openshift-utils-3.4.99-1.git.0.84718ab.el7.noarch

Steps:
1, install ocp v3.4.1.33 on rhel.
2, install atomic-openshift-excluder and atomic-openshift-docker-excluder on the host.
# cat /etc/yum.conf |grep exclude
exclude= docker*1.20*  docker*1.19*  docker*1.18*  docker*1.17*  docker*1.16*  docker*1.15*  docker*1.14*  docker*1.13*  tuned-profiles-atomic-openshift-node  atomic-openshift-tests  atomic-openshift-sdn-ovs  atomic-openshift-recycle  atomic-openshift-pod  atomic-openshift-node  atomic-openshift-master  atomic-openshift-dockerregistry  atomic-openshift-clients-redistributable  atomic-openshift-clients  atomic-openshift 

3, prepare new version repo and yum update

result:
Openshift packages are not updated. 


Disable and reset excluders through upgrade playbook.

Version:
atomic-openshift-utils-3.4.99-1.git.0.84718ab.el7.noarch

Steps:
1, install ocp v3.4.1.33 on rhel.
2, install atomic-openshift-excluder and atomic-openshift-docker-excluder on the host.
3, update atomic-openshift-utils
4, run upgrade playbook to upgrade OCP v3.4.1.35

Result:
Upgrade successfully.
Comment 6 errata-xmlrpc 2017-06-29 13:33:14 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1666
Note You need to log in before you can comment on or make changes to this bug.