RHBA-2023:7460 - Bug Fix Advisory

Topic

An update is now available for Red Hat Ansible Automation Platform 2.4

Description

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.

Updates and fixes for automation controller:

• Fixed a bug that prevented the dispatcher to exit when the database failed (AAP-17660)
• Added the 'LOG_AGGREGATOR_ACTION_MAX_DISK_USAGE_GB' setting to enable queuing for Rsyslog to handle higher work volumes (AAP-12726)
• Updated API endpoints to only show the product version header when the requester is authenticated (AAP-8778)
• automation-controller has been updated to 4.4.8

Note: The 2.4-3 installer setup bundle is needed to use EDA 1.0.3 on VM deployments.

Updates and fixes for Event-Driven Ansible:

• ansible-rulebook has been updated to 1.0.3
• automation-eda-controller has been updated to 1.0.3
• python3-drools-jpy/python39-drools-jpy has been updated to 0.3.7
• python3-drools-jpy-jar/python39-drools-jpy-jar has been updated to 1.0.5
• python3-croniter/python39-croniter, python3-rq-scheduler/python39-rq-scheduler and python3-watchdog/python39-watchdog have been added
• Fixed a bug where sometimes an activation were set as Failed when it should be Stopped (AAP-15705)
• A separate worker queue has been created specifically for EDA activations to not interfere with application tasks such as project updates (AAP-14743 AAP-12134 AAP-12383)
• Fixes a wrong 401 response from Controller when 443 port is present in CONTROLLER_URL (AAP-14215 AAP-18169)
• Fixed a bug with editing a project to add a credential (AAP-13809)
• Fixed a bug when restarting a running activation in OCP failed in unexpected behavior (AAP-13782)
• Fixed incorrect status on activations in OCP when the activation workers are exhausted (AAP-13109)
• Fix a bug when an audit rule with multiple actions was marked as successful but one of the actions actually failed (AAP-13065)
• Fix a bug where rules fired counter take 5 min to get updated (AAP-12987)
• Fixed a bug when a disabled activation was marked as Failed when it should be Stopped (AAP-12986)
• EDA activations pods getting OOM’ed on RHEL 9 (AAP-12978)
• Activations no longer stuck in running after disabling the activation when there are more activations than workers (AAP-12935)
• Fixed a bug to solve the intermittent race conditions when deactivating activations (AAP-12877)
• Activations no longer restart automatically

Updates and fixes for installer and setup:

• ansible-automation-platform-installer and ansible-automation-platform-setup have been updated to 2.4-3
• Fixed automation controller URL check when installing EDA without controller (AAP-18169)
• Fixed target database for event driven automation restore from backup (AAP-18151)
• Ensure postgres tasks which create users in FIPS environments use scram-sha-256 (AAP-17516)
• Ensure all backup/restore staged files and directories are cleaned up before running backup/restore and marked for deletion after backup/restore (AAP-16101)
• Updated nginx to 1.22 (AAP-15962)
• Added a task to VMs that will run the 'awx-manage' command to pre-create events table partition(s) before executing 'pg_dump' and added a variable for the default number of hours to pre-create (AAP-15920)
• A separate worker queue has been created specifically for EDA activations to not interfere with application tasks such as project updates (AAP-14743)
• All EDA services are enabled, not just the EDA target service (AAP-17426)
• EDA will always be instructed to start after setup finishes (AAP-17426)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Ansible Automation Platform 2.4 for RHEL 9 x86_64
• Red Hat Ansible Automation Platform 2.4 for RHEL 9 s390x
• Red Hat Ansible Automation Platform 2.4 for RHEL 9 ppc64le
• Red Hat Ansible Automation Platform 2.4 for RHEL 9 aarch64
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 x86_64
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 s390x
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 ppc64le
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 aarch64

Fixes

CVEs

(none)

References

(none)