RHBA-2021:3670 - Bug Fix Advisory

Topic

An update is now available for Red Hat Ceph Storage 4.2.

Description

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

For detailed information on changes in this release, see the Red Hat Ceph Storage 4.2 Release Notes available at:

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4.2/html /release_notes/

All users of Red Hat Ceph Storage are advised to upgrade to these updated
packages.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

For supported configurations, refer to:

https://access.redhat.com/articles/1548993

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Ceph Storage MON 4 for RHEL 8 x86_64
• Red Hat Ceph Storage MON 4 for RHEL 7 x86_64
• Red Hat Ceph Storage OSD 4 for RHEL 8 x86_64
• Red Hat Ceph Storage OSD 4 for RHEL 7 x86_64
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Ceph Storage for Power 4 for RHEL 8 ppc64le
• Red Hat Ceph Storage for Power 4 for RHEL 7 ppc64le
• Red Hat Ceph Storage MON for Power 4 for RHEL 8 ppc64le
• Red Hat Ceph Storage MON for Power 4 for RHEL 7 ppc64le
• Red Hat Ceph Storage OSD for Power 4 for RHEL 8 ppc64le
• Red Hat Ceph Storage OSD for Power 4 for RHEL 7 ppc64le
• Red Hat Ceph Storage for IBM z Systems 4 s390x
• Red Hat Ceph Storage MON for IBM z Systems 4 s390x
• Red Hat Ceph Storage OSD for IBM z Systems 4 s390x

Fixes

• BZ - 1879581 - [RFE] mgr/volumes: get the list of auth IDs that have been granted access to a subvolume using mgr/volumes CLI
• BZ - 1933560 - [PROMETHEUS] "/targets" url shows Prometheus is down
• BZ - 1951664 - Update Alert definitions - update to the prometheus rule for v14 (Nautilus)
• BZ - 1955040 - [GSS] Disable lvmetad service on RHEL 7.x nodes for containerized ceph
• BZ - 1956562 - horizon (swift) 404 not found bucket error with 1 RGW enabled
• BZ - 1962282 - Url used to fetch oidc certs is specific to keycloak, make it generic using .well-known/openid-configuration
• BZ - 1964889 - [ceph-ansible] don't hide errors thrown by `ceph auth` in ceph_key module if any
• BZ - 1966849 - rgw/sts: OIDC JWT validation does not use modulus and exponent for token validation. Add support for the same.
• BZ - 1967897 - Unable to remove mgr using shrink-mgr.yml
• BZ - 1967926 - [ceph-ansible][upgrade]: switch-from-non-containerized-to-containerized-ceph-daemons.yml playbook fails with error fails with error 'has no attribute 'rgw_instances_host''
• BZ - 1967964 - Upgrade to RHCS4 can leave the cluster in HEALTH_WARN when firefly tunables are in use
• BZ - 1968177 - switch-to-containerized fails and leaves cluster in degraded state
• BZ - 1970913 - [RHCS Containers] Setting environment variable TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES for all the ceph daemons
• BZ - 1973834 - mds: avoid journaling overhead for setxattr("ceph.dir.subvolume") for no-op case
• BZ - 1974536 - [RHCS4.2] delete the unused files on grafana-server node after purging cluster
• BZ - 1974674 - Session policies restrict permissions granted by Identity based policies and/ or Resource policies. RGW incorrectly evaluates it currently.
• BZ - 1974678 - rgw/sts: assumed-role: s3api head-object returns 403 Forbidden, even if role has ListBucket, for non-existent object
• BZ - 1976883 - Cannot perform server-side copy using STS credentials
• BZ - 1978869 - [GSS]Prometheus alertmanager reports msg="Error on notify" err="Post https://XXXX:8443/api/prometheus_receiver: x509: certificate is valid for ceph-dashboard, not XXXX"
• BZ - 1980744 - [ceph-ansible] Sensitive data like ceph admin key leaked in ansible.log even with no_log=true
• BZ - 1982054 - Disable PG_Autoscaler and Balancer modules during upgrades
• BZ - 1984880 - rolling upgrade to rhcs 4.2 z2 failing due to wrong mon host name
• BZ - 1990733 - [ceph-ansible] : switch rpm to containerized - MON out of quorum and playbook failed due to an authentication issue
• BZ - 1992145 - rgw/sts: support for ABAC in AssumeRoleWithWebIdentity
• BZ - 1992473 - ceph-nfs-pacemaker container crashes as NFS Ganesha exported shares number grow
• BZ - 1993365 - During upgrade from 3.x to 4. x - LC intermittently errors with 400 on setlifecycle from s3cmd client
• BZ - 1994620 - rgw sts memory leak
• BZ - 1994827 - QE Verification & Documentation of --skip-tags wait_all_osds_up parameter
• BZ - 1995365 - [RGW] Malformed ETag found in the XML data (list of objects in a bucket)
• BZ - 1997838 - MONs lost quorum
• BZ - 2002314 - Allow recreating file system with specific fscid
• BZ - 2007335 - rgw: With policy specifying invalid arn, users can list content of any bucket

CVEs

(none)

References

(none)