RHSA-2024:6274 - Security Advisory

Topic

Red Hat OpenShift distributed tracing 3.3.0

Description

Release of Red Hat OpenShift distributed tracing provides these changes:

Solution

Red Hat OpenShift distributed tracing Release

Affected Products

• Red Hat OpenShift distributed tracing 3 x86_64
• Red Hat OpenShift distributed tracing for Power, little endian 3 ppc64le
• Red Hat OpenShift distributed tracing for IBM Z and LinuxONE 3 s390x
• Red Hat OpenShift distributed tracing for ARM 3 aarch64

Fixes

• TRACING-3768 - Provide OpenTelemetry default dashboards on OpenShift
• TRACING-3954 - Add support for openshift TLS in Tempo
• TRACING-3984 - Add the routing connector to the OTel collector
• TRACING-4176 - Set Up AWS STS Access for Tempo to Connect to AWS S3
• TRACING-4177 - Group by Attribute Processor
• TRACING-4179 - Add metrics transform processor to the OTel collector
• TRACING-4185 - Certificate rotation for Tempo
• TRACING-4186 - Certificate rotation for OpenTelemetry collector and instrumentation
• TRACING-4187 - Certificate rotation for Jaeger
• TRACING-4188 - Support exporting OpenTelemetry logs to OCP logging stack / Loki
• TRACING-4201 - OpenTelemetry operator doesn't cleanup auto created ClusterRole and ClusterRoleBinding
• TRACING-4214 - Make configurable availability of the service names in Tempo monolithic
• TRACING-4288 - Required service monitor resource is not created when OpenTelemetry operator monitoring is enabled.
• TRACING-4303 - Enable OTLP HTTP on the gateway in TempoStack and monolithic
• TRACING-4348 - TempoStack CR does not accept storage CA names with a dot
• TRACING-4486 - Use service instead of service_name for filtering collector instances in OpenTelemetry Collector dashboard.
• TRACING-4497 - TempoStack gateway cannot be scaled.
• TRACING-4527 - Enable the PrometheusRemoteWriteExporter in the OpenTelemetry collector

CVEs

• CVE-2024-2398
• CVE-2024-37370
• CVE-2024-37371

References

• https://access.redhat.com/security/updates/classification/#moderate