RHEA-2023:3439 - Product Enhancement Advisory

Topic

cert-manager Operator for Red Hat OpenShift 1.11.1

Description

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities
and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide
certificates-as-a-service to developers working within your Kubernetes cluster.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Cert Manager support for Red Hat OpenShift release 1.11 x86_64

Fixes

• OCPBUGS-9994 - logLevel and operatorLogLevel fields do not work for "certmanager.operator"
• CM-61 - As a developer, I would bump the operator to include manifests for cert-manager v1.11
• CM-62 - As a tester, I would like to obtain staging index for cert-manager to install pre-release (v1.11-rc) of the productized operator on a cluster from the console
• OCPBUGS-9960 - If selected "Delete all operand instances ..." checkbox, cert-manager operator is stuck in being uninstalled
• OCPBUGS-9998 - RH cert-manager operator does not work with Google Workload Identity when certmanager/cluster is "managementState: Managed"
• OCPBUGS-10821 - As functional part of redhat supported cert-manager operator, cm-acme-http-solver pod should use redhat published image and the image should be latest
• OCPBUGS-8466 - cert-manager-operator should support changing operand pods' labels
• CM-59 - Upstream rebase to 1.11 and release updates for 1.11
• CM-69 - As a tester, I would like to test and verify hashicorp vault as an issuer for cert-manager-operator
• OCPBUGS-14129 - cert-manager-operator pod panics after setting logLevel and overrideArgs --v args
• OCPBUGS-14343 - cherrypick/cert-manager-1.11: cert-manager-operator pod panics after setting logLevel and overrideArgs --v args
• OCPBUGS-9954 - "Installed operator - ready for use" is shown before all operand pods are shown Running
• CM-87 - As a tester, I would like verify upgrades of cert-manager-operator across all supported versions of OCP

CVEs

• CVE-2020-17049
• CVE-2022-3358
• CVE-2022-28805
• CVE-2022-36227
• CVE-2023-27535

References

(none)