- Issued:
- 2024-04-03
- Updated:
- 2024-04-03
RHEA-2024:1666 - Product Enhancement Advisory
Synopsis
Red Hat OpenShift Service on AWS 1.0 enhancements
Type/Severity
Product Enhancement Advisory
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
A new Red Hat OpenShift Service on AWS package is available for Red Hat Enterprise Linux 8.
Description
Red Hat OpenShift Service on AWS is a fully-managed OpenShift service, jointly managed and supported by both Red Hat and Amazon Web Services (AWS). Having your clusters maintained by this service gives you the freedom to focus on deploying applications.
For more information about Red Hat OpenShift Service on AWS, see the official documentation: https://access.redhat.com/documentation/en-us/red_hat_openshift_service_on_aws/4/
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift Service on AWS (ROSA) 1.0 x86_64
Fixes
- OCM-1032 - Entering interactive mode for billing model rather than use default
- OCM-1469 - ROSA CLI - Should fail if there is an extra parameter
- OCM-1473 - [ROSA-CLI]The subnet on localzone/wave length zone should be not listed when creating cluster via rosa
- OCM-3594 - Add xcm Regions to Rosa installer CLI
- OCM-3963 - Update rosa cli to use aws sdk v2
- OCM-4459 - ROSA CLI supports day-2 CRUD of external auth providers
- OCM-6029 - [ROSA CLI] Separate the component route options when updating ingress
- OCM-6054 - [ROSA CLI] Create node pool with SG IDs
- OCM-6055 - [ROSA CLI] Describe machine pool for HCP - display SG IDs
- OCM-6106 - ROSA CLI Day 2 support of node drain grace period option in machinepools that belong to Hypershift-enabled clusters
- OCM-6119 - ROSA CLI: Remove region flag from "rosa create oidc-provider"
- OCM-6141 - Update the rosa-cli cluster creation command to allow name <= 54 chars and domain_prefix to be <= 15
- OCM-6345 - `make clean` does not remove all binaries
- OCM-6376 - [rosa-cli]The oidc provider list filter flag oidc-config-id abridge is duplicated with interactive mode flag
- OCM-6435 - ROSA helpers cause overflow on non-64bit architectures
- OCM-6467 - [ROSA-CLI]It can?t create cluster via non-interactive mode with enough required flags
- OCM-6468 - [ROSA CLI] "Security Group IDs" is kind of confusion to customers with flag name is "--additional-security-group-ids"
- OCM-6484 - ROSA-CLI: An "E: Expected a prefix with no more than 32 characters" error is thrown when creating a cluster with longer cluster name
- OCM-6496 - Remove error from reporter.Builder.Build() method signature
- OCM-6514 - [ROSACLI][UX] `rosa config get` needs more info to guide customer what to do next when there is no config file existed
- OCM-6515 - [ROSACLI] The '--output' flag doesn't work for `rosa token` command
- OCM-6516 - [ROSACLI][UX] The help message of `rosa config get/set -h` should show supported variables directly rather than "See 'rosa config --help' for supported config variables"
- OCM-6570 - the code logic fails on the part of handling ?--managed-policies? flag on PROD env for creating hosted-cp account roles
- OCM-6619 - [ROSA-CLI] ROSA HCP cluster is not being upgraded
- OCM-6644 - [ROSA-CLI]It can't create HCP cluster with version 4.14.0-0.nightly-xxxx
- OCM-6647 - Creating HCP Cluster fails in Interactive Mode
- OCM-6648 - [ROSACLI] 4.14 version node pool creation shouldn't show the options of security groups
- OCM-6655 - Creating an HCP cluster should have a more clear message about not being supported - FedRAMP
- OCM-6687 - [ROSACLI][ROSAHCP] Bug: 4.14 nightly version not compatible with ROSA HCP
- OCM-6747 - [ROSA CLI] Creation of < 4.14 cluster is broken
- OCM-6753 - [ROSACLI] Can't create private HCP clusters due to subnet validation failures
- OCM-6767 - [ROSACLI] Alignment not work well when schedule nodepool upgrade with SG created - output aligenment
- OCM-6768 - [ROSACLI] "default" and redhat-managed security groups shouldn't be listed in interactive mode for machinepool creation
- OCM-6840 - ROSA CLI - json output of the external auth is currently not supported
- OCM-6926 - [ROSA] Fix GetEnv for localhost URLs
- OCM-7116 - [FedRAMP] OIDC Provider cannot be created
CVEs
(none)
References
(none)
Red Hat OpenShift Service on AWS (ROSA) 1.0
| SRPM | |
|---|---|
| rosa-1.2.37-1f0dde9.el8.src.rpm | SHA-256: f9bc363ede933a5c0e3cf378d30c0ba097a24478d50cb60189c6e046ae2cb839 |
| x86_64 | |
| rosa-1.2.37-1f0dde9.el8.x86_64.rpm | SHA-256: 37ac73df2fcee3f8cd7b04e3ed96c8547128f879579ae02ce112b11464e510f2 |
| rosa-redistributable-1.2.37-1f0dde9.el8.x86_64.rpm | SHA-256: cf1e617c87d6347c8b48beb74da3b42852d5bdef1c48daeb09372334e10609a6 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.