RHBA-2025:0437 - Bug Fix Advisory

Topic

OpenShift Operators are available for the control plane of Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.4

Description

Red Hat OpenShift Operators automate the creation, configuration, and management of instances of Kubernetes-native applications. The Operators in this release automate the creation, configuration, and management of OpenStack services in a RHOSO deployment.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update as a new RHOSO 18.0 deployment, see
“Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index

For details on how to apply this update to an existing RHOSO 18.0 deployment,
see "Updating your environment to the latest maintenance release" at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index

Affected Products

• Red Hat OpenStack Services on OpenShift Podifed Operators 1.0 x86_64

Fixes

• OSPRH-10959 - [octavia-operator] Make httpd Timeout Configurable
• OSPRH-10853 - Run DNS pod components at minimum privilege escalation level
• OSPRH-11430 - upgrade kepler to TP-0.3 for 18.0.4
• OSPRH-10386 - wrong tobiko workflow order
• OSPRH-11191 - ansibletest keeps waiting forever
• OSPRH-11235 - No reports under post-update folder after in-place update for UI
• OSPRH-11092 - createDefaultLbMgmtNetwork and manageLbMgmtNetworks set to False when AZs are defined
• OSPRH-11711 - Octavia: Can't specify a mgmt-network CIDR other than /16
• OSPRH-11747 - Octavia: Can't install Octavia when OpenShift nodes are more than 12
• OSPRH-10843 - [neutron-operator] Make httpd Timeout Configurable
• OSPRH-12223 - [neutron-operator][ipv6][notls] Fix default cache config
• OSPRH-11209 - Clarify the reason of the Glance API invalid layout
• OSPRH-10688 - ovn-controller-ovs in CrashLoopBackOff due to empty conf.db
• OSPRH-10734 - Top level nodeSelector needs to be propagated to each service.
• OSPRH-10800 - Autoscaling doesn't get configured to use TLS for reaching Prometheus
• OSPRH-10956 - [telemetry-operator] Make httpd Timeout Configurable
• OSPRH-11059 - Telemetry role in edpm-ansible does not open the 9100 port in the firewall
• OSPRH-11692 - node_exporter scrapeconfig must include full fqdn
• OSPRH-11701 - openstackclient infinite reconcile loop when cluster/namespace default nodeSelector is configured
• OSPRH-12222 - [keystone-operator][ipv6][notls] Fix default cache config
• OSPRH-12375 - [swift-operator] Fix httpd config X-Forwarded-Proto
• OSPRH-12376 - [glance-operator] Fix httpd config X-Forwarded-Proto
• OSPRH-10935 - Unable to override default barbican configuration
• OSPRH-10363 - Add support for customizing the workers for services
• OSPRH-10939 - Ansible jobs should have nodeSelector or affinity
• OSPRH-11488 - failover of the galera service exposes disconnected galera node to the openstack clients

CVEs

• CVE-2019-12900
• CVE-2024-9287
• CVE-2024-10963
• CVE-2024-50602

References

(none)