- Issued:
- 2021-11-15
- Updated:
- 2021-11-15
RHBA-2021:4631 - File Integrity Operator version 0.1.21 bug fix and enhancement update
Synopsis
File Integrity Operator version 0.1.21 bug fix and enhancement update
Type/Severity
Bug Fix Advisory None
Topic
An updated File Integrity Operator (openshift-file-integrity-operator) image that fixes various bugs and adds enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.
Description
The File Integrity Operator image update is available with the following changes:
Version 0.1.21:
- BZ#2010706: Fix nil deref in daemonSet upgrade path
- Delete old aide-ds- prefixed daemonSets if they exist
- Use ClusterRole/ClusterRoleBinding for monitoring perms
- Add MCO and CVO related config excludes
- Adapt prometheusrule to only alert on currently existing nodes
- Optimize per-node reinit calls
- Handle metrics service during operator start
- BZ#1862022: Per-node reinit during update
- Use latest for CSV documentation link
- Enable TLS for controller metrics
- Add controller-based Prometheus metrics
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat OpenShift Container Platform | 4.8 | x86_64 |
| Red Hat OpenShift Container Platform | 4.7 | x86_64 |
| Red Hat OpenShift Container Platform | 4.6 | x86_64 |
Fixes
- This content is not included.BZ - 1862022
- This content is not included.BZ - 1999054
- This content is not included.BZ - 2002519
- This content is not included.BZ - 2010706
- This content is not included.BZ - 2016046
CVEs
(none)
References
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.