Issued:

2022-10-11

Updated:

2022-10-11

RHBA-2022:6888 - Red Hat OpenShift Data Foundation 4.11.2 Bug Fix Update

Synopsis

Red Hat OpenShift Data Foundation 4.11.2 Bug Fix Update

Type/Severity

Bug Fix Advisory None

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.11.2 on Red Hat Enterprise Linux 8 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multicloud data management service with an S3 compatible API.

Bug Fixes:

• Previously, due to certain changes in OpenShift Container Platform 4.11, the custom certificates that were loaded into Multicloud Object Gateway (MCG) were not taking effect. This update changes the way the custom certificates are injected into the MCG pods. (BZ#2124268)

• Previously, in OpenShift Data Foundation 4.10 and 4.11 versions, the odf-operator removed the taints (non-ocs) in the subscriptions that were changed or edited. This prevented the scheduling of the pods. With this update, the odf-operator does not remove the taints from the subscriptions. (BZ#2125147)

• Previously, the Rook CSI controller looked for the configmap changes for keys starting with ROOK_CSI or CSI_ using regex only for single line values or configuration in the configmap. If the value was multiline, the regex was not able to identify the change as the regex was not valid for multiline formats and hence no configurations were applied to the CSI driver. With this update, removing the regex check identifies any change in the configmap. Now, if there is any update to the configmap, the CSI driver gets reconciled. (BZ#2122215)

• Previously, when OpenShift Data Foundation was deployed with Multus networking, the CephFS and RBD Persistent Volume Claims (PVCs) were not getting mounted. This was due to the CephFS and RBD holder pod daemonset not getting deployed due to the missing ServiceAccount name daemonset. This update adds the missing ServiceAccount name for CephFS and RBD holder pod daemonset. (BZ#2123626)

All Red Hat OpenShift Container Storage users are advised to upgrade to these updated images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Fixes

• This content is not included.BZ - 2123626
• This content is not included.BZ - 2124827
• This content is not included.BZ - 2125147
• This content is not included.BZ - 2129734
• This content is not included.BZ - 2130110
• This content is not included.BZ - 2130900
• This content is not included.BZ - 2130904

CVEs

• CVE-2015-20107
• CVE-2022-0391
• CVE-2022-34903

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.