Skip to content

Commit

Permalink
CMP-1097 FIO 1.3.0 bug fix and enhancement
Browse files Browse the repository at this point in the history
  • Loading branch information
GroceryBoyJr committed Jun 15, 2023
1 parent 87db604 commit 7ec8011
Showing 1 changed file with 21 additions and 0 deletions.
Expand Up @@ -15,6 +15,27 @@ For an overview of the File Integrity Operator, see xref:../../security/file_int

To access the latest release, see xref:../../security/file_integrity_operator/file-integrity-operator-updating.adoc#olm-preparing-upgrade_file-integrity-operator-updating[Updating the File Integrity Operator].

[id="file-integrity-operator-release-notes-1-3-0"]
== OpenShift File Integrity Operator 1.3.0

The following advisory is available for the OpenShift File Integrity Operator 1.3.0:

* link:https://access.redhat.com/errata/RHBA-2023:3600[RHBA-2023:3600 OpenShift File Integrity Operator Bug Fix Update]

[id="file-integrity-operator-1-3-0-new-features-and-enhancements"]
=== New features and enhancements

* FIO now includes kubelet certificates as default files, excluding them from issuing warnings when they're managed by {product-title}. (link:https://issues.redhat.com/browse/OCPBUGS-14348[*OCPBUGS-14348*])

* FIO now correctly directs email to the address for Red Hat Technical Support. (link:https://issues.redhat.com/browse/OCPBUGS-5023[*OCPBUGS-5023*])

[id="file-integrity-operator-1-3-0-bug-fixes"]
=== Bug fixes

* Previously, FIO would not clean up node status CRDs when nodes are removed from the cluster. FIO would also erroneously indicate that new nodes failed integrity checks. FIO has been updated to correctly clean up node status CRDs on node removal or when adding new nodes to the cluster. This provides correct node status notifications. (link:https://issues.redhat.com/browse/OCPBUGS-8502[*OCPBUGS-8502*])

* Previously, when FIO was reconciling File Integrity CRDs, it would pause scanning until the reconciliation was done. This caused an overly aggressive re-initiatization process on nodes not impacted by the reconciliation. This problem also resulted in unnecessary daemonsets for machine config pools which are unrelated to the file integrity being changed. FIO correctly handles these cases and only pauses AIDE scanning for nodes that are affected by file integrity changes. (link:https://issues.redhat.com/browse/CMP-1097[*CMP-1097*])

[id="file-integrity-operator-release-notes-1-2-1"]
== OpenShift File Integrity Operator 1.2.1

Expand Down

0 comments on commit 7ec8011

Please sign in to comment.