RHBA-2020:5329 - Bug Fix Advisory

Topic

The Red Hat Migration Toolkit for Containers (MTC) tool 1.4.0 is now available.

Description

The Migration Toolkit for Containers (MTC) tool enables you to migrate Kubernetes resources, persistent volume data, and internal container images from an OpenShift Container Platform source cluster to an OpenShift Container Platform target cluster, using the MTC web console or the Kubernetes API.

This advisory contains the images for the Migration Toolkit for Containers tool. See the following advisory for metadata information:

https://access.redhat.com/errata/RHBA-2020:5330

Solution

For more information about how to use this tool, please see the following documentation:

https://docs.openshift.com/container-platform/4.6/migration/migrating_4_2_4/migrating-applications-with-cam-4-2-4.html

Affected Products

• Red Hat Migration Toolkit 1 for RHEL 8 x86_64
• Red Hat Migration Toolkit 1 for RHEL 7 x86_64

Fixes

• BZ - 1845092 - Automatic rollback of migrated workloads is not configurable
• BZ - 1845096 - Migrating more than one namespaces with more than one PVCs results in a migration error
• BZ - 1853534 - CAM Operator tries to spin up all nodes including infra nodes causing critical alerts
• BZ - 1871059 - Migration stuck when restic restore helper pod image cannot be pulled
• BZ - 1877439 - [ MTC-UI ] Cannot update the remote cluster ssl certificate information when secret is not in openshift-config namespace
• BZ - 1882061 - When editing a replication repository, user should be presented with the form and not see the provider selection type (affects Azure type).
• BZ - 1882409 - cancel migration dosen't stop the Job pod that is used to execute hook script
• BZ - 1882440 - When imagestreams and pvcs are excluded, the miganalytic resource and the UI still show them in the main counters
• BZ - 1887791 - Cannot access UI when the UI and the controller pods are deployed in a 3.x cluster
• BZ - 1892239 - Race condition between the stage pod and the secrets in the target cluster's namespace
• BZ - 1894293 - Update migration controller container name to 'mtc' from 'cam'
• BZ - 1897501 - Can NOT preview MTC metrics on local Prometheus server after using must-gather to dump past 24h metrics data
• BZ - 1898522 - local prometheus server can not load the prom_data.tar.gz due to dump file has problem
• BZ - 1904165 - PV discovery screen raises error in mig-ui related to new direct migration setup
• BZ - 1904414 - [MTC-UI] Blank screen when trying to create a migration plan for an empty namespace
• BZ - 1904417 - Directvolumemigration-rsync pod is not ready because it cannot mount the volumes
• BZ - 1904419 - Migplan is on "Ready" status after a registry pod failure is reported in a migration execution
• BZ - 1904461 - Log reader pod crashes with "exec format error"
• BZ - 1906722 - Migrations cannot be executed after rollback
• BZ - 1906724 - A rollback after a "move" migration does not delete the PVs
• BZ - 1906730 - PV policy has changed after running a migration using the "move" action
• BZ - 1906810 - Migration stuck when a wrong registry pod image is configured
• BZ - 1907415 - Role in controller is still 'cam'
• BZ - 1907724 - doesn't create migration-log-reader pod in 3.x when migration_log_reader=true
• BZ - 1907784 - warning message is showing a wrong dvm full name
• BZ - 1907785 - directvolumemigration-rsync-transfer pod's image is using upstream image
• BZ - 1907828 - Stage pods stuck as a PVC they are trying to attach is in 'Terminating'
• BZ - 1908214 - django-psql-persistent-1 pod runs into CrashLoopBackOff after executing Stage
• BZ - 1908270 - The 63 characters limitation of route name results in direct volume migration failed
• BZ - 1909093 - [MTC-UI] Some Backups are reported as failed in the UI even if they were successfully executed
• BZ - 1909191 - rsync-transfer image needs to be added to related images
• BZ - 1909656 - A migration plan can be edited while it is running
• BZ - 1910353 - Snapshot migrations are creating rsync pods
• BZ - 1910518 - OCP3.x operator.yaml misses rsync-transfer image definition
• BZ - 1912246 - migration did not check the data digest when choose "Verify Copy" in direct volume migration
• BZ - 1913977 - rsync_opt_extras should only accept valid rsync arg chars
• BZ - 1914418 - Resources excluded from stage backup if they have prior stage labels
• BZ - 1915702 - [MTC-UI] UI crashes when a rollback is canceled
• BZ - 1916281 - Different PVCs are using the same DVMP resource
• BZ - 1917491 - [MTC-UI] Debug screen oc commands not working in direct migrations
• BZ - 1917810 - DIM is ignoring disable_image_migration value
• BZ - 1918124 - Failed to create migrationcontroller instance because failed to get ansible-runner stdout
• BZ - 1918503 - Controller will crash when MigMigration is deleted mid DVM reconcile
• BZ - 1918789 - Wrapped kube errors are causing false negative error checks that prevent requeues and halt migrations
• BZ - 1919308 - [MTC-UI] Blank screen after executing a Rollback
• BZ - 1919366 - Direct Volume Migration not working
• BZ - 1920548 - When mismatch of operator versions on source and destination Alert to Privileged bool not being set
• BZ - 1920664 - if the status on the route is missing DVM considers it admitted
• BZ - 1920678 - User permissions when rsync from NFS to NFS are not carried over
• BZ - 1920683 - when chroot is turn off, munge symlinks is enabled by default
• BZ - 1920911 - Migration fails when Indirect Image Migration and Direct Volume Migration are configured at the same time
• BZ - 1921898 - Migration completed with warnings yet is marked as 'Ready' and no mention of the Warnings
• BZ - 1923722 - Migrations from OCP 3.11 to 4.3 are skipping restore of resources

CVEs

• CVE-2019-20907
• CVE-2020-1971
• CVE-2020-2574
• CVE-2020-2752
• CVE-2020-2922
• CVE-2020-8177
• CVE-2020-10543
• CVE-2020-10878
• CVE-2020-12723
• CVE-2020-13249
• CVE-2020-24659
• CVE-2020-25211
• CVE-2020-25694
• CVE-2020-25696
• CVE-2021-3156

References

(none)