RHBA-2026:80937 - Bug Fix Advisory

Topic

A new version of zero trust workload identity manager for Red Hat Openshift is now available

Description

The Zero Trust Workload Identity Manager (ZTWIM) is a day-2 operator. The operator manages lifecycle of operand
components from SPIRE project. The goal of ZTWIM is to provide secure, verifiable workload identities for
workloads in multi-cloud environments. The operand components automate identity issuance, rotation, and
verification, enhancing the zero-trust security model while eliminating static credentials. The current release
of zero trust workload identity manager for Red Hat OpenShift is Generally Available.

Solution

Before installing the operator, make sure all previously released errata relevant to your system have been
applied.

The steps to apply the upgraded images will differ depending on the installation plan approval policy that will
be used while installing the zero trust workload identity manager for Red Hat OpenShift.

• If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a

new version of the Operator. No further action is required to upgrade. This is the default setting.

• If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.

Affected Products

• Zero Trust Workload Identity Manager

Fixes

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/zero-trust-workload-identity-manager