RHBA-2022:6888 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.11.2 on Red Hat Enterprise Linux 8 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated
with and optimized for the Red Hat OpenShift Data Foundation. Red Hat
OpenShift Data Foundation is a highly scalable, production-grade persistent
storage for stateful applications running in the Red Hat OpenShift
Container Platform. In addition to persistent storage, Red Hat OpenShift
Data Foundation provisions a multicloud data management service with an S3
compatible API.

Bug Fixes:

• Previously, due to certain changes in OpenShift Container Platform 4.11, the custom certificates that were loaded into Multicloud Object Gateway (MCG) were not taking effect. This update changes the way the custom certificates are injected into the MCG pods. (BZ#2124268)
• Previously, in OpenShift Data Foundation 4.10 and 4.11 versions, the `odf-operator` removed the taints (non-ocs) in the subscriptions that were changed or edited. This prevented the scheduling of the pods. With this update, the `odf-operator` does not remove the taints from the subscriptions. (BZ#2125147)
• Previously, the Rook CSI controller looked for the configmap changes for keys starting with ROOK_CSI or CSI_ using regex only for single line values or configuration in the configmap. If the value was multiline, the regex was not able to identify the change as the regex was not valid for multiline formats and hence no configurations were applied to the CSI driver. With this update, removing the regex check identifies any change in the configmap. Now, if there is any update to the configmap, the CSI driver gets reconciled. (BZ#2122215)
• Previously, when OpenShift Data Foundation was deployed with Multus networking, the CephFS and RBD Persistent Volume Claims (PVCs) were not getting mounted. This was due to the CephFS and RBD holder pod daemonset not getting deployed due to the missing ServiceAccount name daemonset. This update adds the missing ServiceAccount name for CephFS and RBD holder pod daemonset. (BZ#2123626)

All Red Hat OpenShift Container Storage users are advised to upgrade to these updated images.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 8 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 8 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 8 s390x

Fixes

• BZ - 2123626 - when running with multus enabled PVs do not mount
• BZ - 2124827 - [KMS][UI] Deployment of cluster wide encryption enabled cluster using kube auth fails when using vault namespaces
• BZ - 2125147 - [Backport to 4.11] [GSS]toleration for "non-ocs" taints OpenShift Data Foundation pods
• BZ - 2129734 - Release-4.11 branch : lvm-operator e2e test failure
• BZ - 2130110 - [4.11 clone] "ceph-external-cluster-details-exporter.py" ( 4.11 ) failed to run on RHCS 4.3 cluster
• BZ - 2130900 - [4.11 clone] ODF web console under Storage is missing for IPv6 single-stack deployments
• BZ - 2130904 - [4.11.z] [UI] Data Foundation dashboard crashes with 404 error due to cache issues when the OCP is upgraded

CVEs

• CVE-2015-20107
• CVE-2022-0391
• CVE-2022-34903

References

(none)