RHEA-2023:3607 - Product Enhancement Advisory

Topic

OpenShift API for Data Protection (OADP) 1.2.0 is now available.

Description

OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• OpenShift API for Data Protection 1 for RHEL 8 x86_64

Fixes

• OADP-1077 - Restic restore is getting stuck at InProgress status
• OADP-1152 - Backup Using "Restic" Failed on single ns with 5k pods exit on : " Fatal: invalid id \"6f87e619\": no matching ID found for prefix" ( multiple IDs)
• OADP-954 - BackupItemAction new plugin APIs
• OADP-957 - OADP-1.2 New backup phases
• OADP-958 - OADP-1.2 New restore phases
• OADP-982 - VSM Controller timeouts
• OADP-1151 - Provide an option to set volsync replicationsource prune interval
• OADP-1183 - VSB CRs should get cleaned post deletion of Backup
• OADP-1078 - Backup gets stuck InProgress status after restic pod gets restarted
• OADP-1640 - CSI backup/restore to FS backup/restore fails
• OADP-1670 - CloudStorage API BSLs need OwnerReference
• OADP-639 - DataMover: TLS-verification related config doesn't apply on volsync
• OADP-1370 - Handle docker env config changes in the oadp-operator
• OADP-1526 - DPA is missing VSL secret validation
• OADP-1663 - datamover securityContext discovery per container
• OADP-1800 - include the velero and restic client on the oadp must-gather image
• OADP-708 - Validation should not require default secret name if VSL is not specified.
• OADP-1726 - CSI Backup - VSCs are deleted after backup finished
• OADP-1801 - OADP must-gather tech preview improvements
• OADP-1844 - Validation to ensure the vsm plugin is disabled / removed if datamover is set to false
• OADP-1182 - Add support for all the velero deployment server args
• OADP-148 - OADP must-gather performance issues
• OADP-1830 - OADP-1.2: Data Mover can restore from incorrect snapshot when >1 VSR for the restore name and PVC name exists.
• OADP-1833 - Delete vsb from a successful datamover backup before completing the backup.
• OADP-1872 - Delete VSRs after a completed datamover restore before restore completes
• OADP-1931 - [Documentation] Improve Cluster Service Version YAML's Description fields
• OADP-1934 - OADP must-gather scripts should not have openshift-adp hard coded
• OADP-1941 - Remove dataMover moverSecurityContext option
• OADP-1143 - Backup Using "Restic" Failed when sc set to "cephfs" exit on "Fatal: unable to save snapshot: snapshot is empty"
• OADP-1987 - Must gather fails to collect backup/restore logs
• OADP-2047 - Volume-Snapshot-Mover uses hard-coded upstream image for DummyPodImage
• OADP-1821 - Allow users to map volume options per user defined storage class in the DPA

CVEs

• CVE-2022-3627
• CVE-2022-3970
• CVE-2022-4304
• CVE-2022-4450
• CVE-2022-36227
• CVE-2023-0215
• CVE-2023-0286
• CVE-2023-0361
• CVE-2023-2491
• CVE-2023-27535

References

(none)