When a ServiceInstance is updated, the request sent from the catalog to the broker needs to include the namespace of the ServiceInstance.
https://github.com/kubernetes-incubator/service-catalog/pull/1517
Fixed in origin with: https://github.com/openshift/origin/pull/17166
Please start to test on 3.7.4-1 build or newer.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:3464