RHBA-2024:2636 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.15.2 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API.

Bug fixes:

• Previously, the security scanners/checkers reported that the `csi-addons-controller-manager` pod does not have "readOnlyRootFilesystem" enabled as the pod does not have "readOnlyRootFilesystem" enabled explicitly.

With this fix, in the deployment of the `csi-addons-controller-manager` pod, "readOnlyRootFilesystem is set to `true`. As a result, the security scanners/checkers no longer report the missing "readOnlyRootFilesystem" option for csi-addons-controller-manager.
(BZ#2268065)

• Previously, the OpenShift Data Foundation management console user interface for “Create StorageSyetem” displayed "Multus" with a "Tech Preview” label in the “Security and network” section. This caused confusion because the OpenShift Data Foundation 4.14 documentation states that Multus is generally available.

With this fix, the “Tech Preview” label is removed for “Multus” in the "Security and network" section of the management console.
(BZ#2270472)

• Previously, during the bucket creation with Google Cloud Platform (GCP) backingstore, GCP write object did not wait for finish before resolving. This resulted in the return of “Success” before the write was completely done.

With this fix, the promise chain was fixed to return the “success” state only after the write was done.
(BZ#2268980)

• Previously, the NooBaa Database (DB) showed increased DB size when it was not necessary as the activity logs were being saved to the DB.

With this fix, the object activity logs are converted to regular debug logs. As a result, NooBaa DB no longer shows increased DB size. (BZ#2271762)

All users of Red Hat OpenShift Data Foundation are advised to upgrade to these updated images, which provide these bug fixes.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 9 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 9 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 9 s390x
• Red Hat OpenShift Data Foundation for RHEL 9 ARM 4 aarch64

Fixes

• BZ - 2264553 - Max unavailable value is 1 in mon PDB even for five mon setup
• BZ - 2268065 - Not all csi-addons containers run with read-only filesystem
• BZ - 2270404 - [Backport into 4.15] noobaa-core: move node-gyp to devDependencies to avoid shipping it
• BZ - 2270472 - [4.15 backport] [ODF Console] Remove "Tech preview" tag for multus feature on ODF4.15
• BZ - 2272046 - [QA only] Qualify RHCS-7.0z1 with ODF-4.15.2 in the external mode
• BZ - 2273363 - Upgrade ceph version to 6.1.5 in ODF-4.15.2
• BZ - 2274098 - change odf CSV pods to read only root file system
• BZ - 2274100 - change ocs CSV pods to read only root file system

CVEs

• CVE-2022-48624
• CVE-2023-4408
• CVE-2023-5517
• CVE-2023-5679
• CVE-2023-6516
• CVE-2023-50387
• CVE-2023-50868
• CVE-2023-52425
• CVE-2024-1394
• CVE-2024-28180
• CVE-2024-28757

References

(none)