RHBA-2017:1172 - Bug Fix Advisory

Topic

Updated cns-deploy-tool packages that fix several bugs are now available for Container Native Storage 3.5

Description

The 'cns-deploy' utility provides a tool to deploy Container-Native Storage
on the Openshift environment.

The following list provides the major bug fixes:

• This advisory is issued to include the nss CVE fixes::

https://errata.devel.redhat.com/advisory/27952 .

The rhgs3/rhgs-server-rhel7 and rhgs3/rhgs-volmanager-rhel7 container images are based on Red Hat Enterprise Linux Container image, and hence have to be updated to include the fix in the image. Also, we point to the rhgs3/rhgs-server-rhel7 and rhgs3/rhgs-volmanager-rhel7 container images from the cns-deply tool, so these references have to be updated to the new build tag of these container images that has the CVE fix. (BZ#1444459).

• Red Hat Gluster Storage pods are deployed as a DaemonSet. As cns-deploy tool labeled nodes with same label, it wasn't possible to create multiple trusted storage pool using cns-deploy. With this fix, node label is an argument to cns-deploy, thereby enabling deploying multiple trusted storage pool by using a different label in different namespace. (BZ#1444460)

Users of Container-Native Storage are advised to upgrade to this updated
package.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64

Fixes

• BZ - 1444459 - rebuild cns-deploy to point to new rhgs-volmanager-docker and rhgs-server-docker image
• BZ - 1444460 - cns-deploy should take label as input

CVEs

(none)

References

(none)