RHBA-2022:5607 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat
OpenShift Data Foundation 4.10.5 on Red Hat Enterprise Linux 8 from Red Hat
Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated
with and optimized for the Red Hat OpenShift Data Foundation. Red Hat
OpenShift Data Foundation is a highly scalable, production-grade persistent
storage for stateful applications running in the Red Hat OpenShift
Container Platform. In addition to persistent storage, Red Hat OpenShift
Data Foundation provisions a multicloud data management service with an S3
compatible API.

Bug fixes:

• Previously, in a FIPS enabled environment, the usage of MD5 digest was not allowed by default, unless explicitly excluded for non-cryptographic purposes. Due to this, a segfault occurred during the S3 complete multipart upload operation.

With this fix, the usage of MD5 for non-cryptographic purposes in a FIPS environment for S3 complete multipart `PUT` operations is explicitly allowed and the S3 multipart operations can be completed. (BZ#2101297)
Changes to the management-console component of Bugzilla:

• Previously, the OpenShift Data Foundation dashboard displayed the 404 error when navigating to “Storage > Data Foundation” as the dashboard used the imports and dependencies that OpenShift Container Platform 4.11 did not support.

This update removes those unsupported imports and dependencies. Now, the dashboard uses only the supported imports and dependencies, and there are no 404 errors displayed when you navigate to “Storage > Data Foundation”. (BZ#2074518)

• Previously, the query results for the listing operation were not in the order that the Multicloud Object Gateway (MCG) expected them to be as the collate algorithm was set incorrectly while starting the MCG DB.

With this update, the collate algorithm is set correctly on new deployments while starting the MCG DB. Now, the query results are in the expected order. (BZ#2087034)

• Previously, the default memory allocator was used for node.js which resulted in memory fragmentation, and also, the node could not release the allocated memory. This caused an increase in memory of the endpoint pod which eventually led to an out of memory state.

With this update, the default memory allocator is changed to `jemalloc`. Now, there is no memory fragmentation and memory increase in the endpoint pod. (BZ#2091959)

• Previously, a problem with the monitoring of the Multicloud Object Gateway (MCG) resources kept one of the resources in a problematic state even after the real error that had occurred was fixed. This resulted in the failure of operations on the buckets using these resources.

With this update, the problem with the monitoring of the MCG resources is fixed. Now, the resources are not kept in a problematic state once the real error is fixed. (BZ#2100027)
Changes to the rook component of Bugzilla:

• Previously, the Object Storage Device (OSD) failed to start as the old Logical Volume Manager (LVM) based OSDs were not correctly recognized. This update fixes the OSD type detection resulting in the OSD starting successfully. (BZ#2097740)

All users of Red Hat OpenShift Data Foundation are advised to upgrade to
these updated images, which provide these bug fixes.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 8 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 8 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 8 s390x

Fixes

• BZ - 2074518 - After creating a new storage system it redirects to 404 error page instead of the "StorageSystems" page for OCP 4.11
• BZ - 2074519 - ODF under Storage missing for OCP 4.11 + ODF 4.10
• BZ - 2082102 - [UI] Dashboard name is incorrect with OCP 4.11 and ODF 4.10.1
• BZ - 2097236 - [4.10 clone] ReclaimSpaceJob fails on OCP 4.11 + ODF 4.10 cluster
• BZ - 2098562 - [KMS] PVC creation using vaulttenantsa method is failing due to token secret missing in serviceaccount
• BZ - 2099456 - [4.10 clone] [KMS] PVC creation using vaulttenantsa method is failing due to token secret missing in serviceaccount
• BZ - 2100851 - Update to RHCS 5.1z2 Ceph container image at ODF-4.10.5 (edit)
• BZ - 2103643 - [4.10.z clone] [DR] When mirroring is enabled rbd mirror daemon restart config should be enabled automatically

CVEs

• CVE-2021-40528
• CVE-2022-1621
• CVE-2022-1629
• CVE-2022-22576
• CVE-2022-25313
• CVE-2022-25314
• CVE-2022-27774
• CVE-2022-27776
• CVE-2022-27782
• CVE-2022-29824

References

(none)