RHEA-2024:10993 - Product Enhancement Advisory

Topic

Authorino 1.1.0 Tech Preview Release

Description

Authorino is a K8s-native AuthN/AuthZ service to protect your APIs

Important! After upgrading to Authorino v1.1.0, users must migrate all AuthConfig resources to v1beta2 stored in the cluster database by running the following script. This can be done at any time before upgrading to newer versions of Authorino post this one, without downtime or any intrinsic risk of breaking deployments before, during or after the migration.

cat << 'EOF' > /tmp/migrate.sh
#!/bin/bash
authconfigs=$(kubectl get authconfigs -A -o custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name' --no-headers)
while IFS=" " read -r namespace name; do
kubectl get authconfig "$name" -n "$namespace" -o yaml > "/tmp/${name}.${namespace}.authconfig.yaml"
kubectl apply -f "/tmp/${name}.${namespace}.authconfig.yaml"
done <<< "$authconfigs"
EOF
chmod +x /tmp/migrate.sh
/tmp/migrate.sh

Solution

K8s-native AuthN/AuthZ service to protect your APIs

Important! After upgrading to Authorino v1.1.0, users must migrate all AuthConfig resources to v1beta2 stored in the cluster database by running the following script. This can be done at any time before upgrading to newer versions of Authorino post this one, without downtime or any intrinsic risk of breaking deployments before, during or after the migration.

cat << 'EOF' > /tmp/migrate.sh
#!/bin/bash
authconfigs=$(kubectl get authconfigs -A -o custom-columns='NAMESPACE:.metadata.namespace,NAME:.metadata.name' --no-headers)
while IFS=" " read -r namespace name; do
kubectl get authconfig "$name" -n "$namespace" -o yaml > "/tmp/${name}.${namespace}.authconfig.yaml"
kubectl apply -f "/tmp/${name}.${namespace}.authconfig.yaml"
done <<< "$authconfigs"
EOF
chmod +x /tmp/migrate.sh
/tmp/migrate.sh

Affected Products

• Red Hat 3scale API Management Platform 2 for RHEL 8 x86_64
• Red Hat 3scale API Management Platform 2 for RHEL 8 s390x
• Red Hat 3scale API Management Platform 2 for RHEL 8 ppc64le
• Red Hat 3scale API Management Platform 2 for RHEL 7 x86_64
• Red Hat 3scale API Management Platform 2 for RHEL 7 s390x
• Red Hat 3scale API Management Platform 2 for RHEL 7 ppc64le

Fixes

• CONNLINK-293 - Authorino 1.1.0 Tech Preview Release

CVEs

• CVE-2023-37920
• CVE-2024-2236
• CVE-2024-2511
• CVE-2024-3596
• CVE-2024-4603
• CVE-2024-4741
• CVE-2024-5535
• CVE-2024-34397

References

(none)