Impact statement for the OCPBUGS-30970 series:

Which 4.y.z to 4.y'.z' updates increase vulnerability?

• Customers upgrading from any 4.15 to 4.16.z until OCPBUGS-30970 is merged.

Which types of clusters?

• Azure or GCP clusters with RHEL workers

What is the impact? Is it serious enough to warrant removing update recommendations?

Kubelet fails to start on worker node after cluster upgrade because of a missing binary. The binary is present after the worker OS is upgraded.

How involved is remediation?

Admin must SSH to workers, and upgrade the OS.

Is this a regression?

No, it has always been this way. The ordering of the upgrade process was misunderstood.