RHBA-2021:3721 - Bug Fix Advisory

Topic

Release of components for the Service Telemetry Framework

Description

Service Telemetry Framework (STF) provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat OpenShift Container Platform deployment for storage, retrieval, and monitoring.

Changes to the service-telemetry-operator-container component:

• Before this update, a version change of Elastic Cloud on Kubernetes (ECK) Operator from the previously tested version 1.6.0 to the latest release version 1.7.1 resulted in the Service Telemetry Operator no longer being able to request an ElasticSearch instance from the ECK Operator.

As a result, deployment of ElasticSearch was no longer possible with Service Telemetry Framework.

With this update, the updated ElasticSearch manifest template created by the Service Telemetry Operator uses elasticsearch.k8s.elastic.co/v1 instead of elasticsearch.k8s.elastic.co/v1beta1 and the parameters have been adjusted to be compatible with ECK v1.7.1. (BZ#2002445)

• With this release, the base image for Grafana can now be specified as part of the ServiceTelemetry manifest. You can use the `graphing.grafana.baseImage` parameter to override the default Grafana image used when deploying an instance of Grafana via the Service Telemetry Operator. (BZ#1999153)

Changes to the sg-core-container component:

• Before this update, code delivered 28231 events and stopped working because it consumed all available outbound TCP ports. As a result, delivery of events stopped when all outbound TCP ports were consumed.

To reuse persistent TCP connections in the default HTTP transport, close and consume the response body.

As a result, persistent TCP connections can be reused without exhausting all available outbound TCP connections, resulting in event delivery without a limit. (BZ#1969979)

Solution

The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog.
Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

• Red Hat Service Telemetry Framework 1.3 x86_64

Fixes

• BZ - 1969979 - TCP Port exhaustion in events handling
• BZ - 1999153 - [backport][STF 1.3] Add ability to specify Grafana baseImage in Service Telemetry Operator
• BZ - 2002445 - Elastic Cloud on Kubernetes (ECK) Operator fails to provision ElasticSearch with ECK 1.7.1

CVEs

• CVE-2020-26116

References

(none)