From e209aef21527c4ad80a4b9fadc5a67085511308e Mon Sep 17 00:00:00 2001 From: GroceryBoyJr Date: Wed, 9 Aug 2023 13:18:32 -0400 Subject: [PATCH] 1.3.1 release note edits --- .../file-integrity-operator-release-notes.adoc | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/security/file_integrity_operator/file-integrity-operator-release-notes.adoc b/security/file_integrity_operator/file-integrity-operator-release-notes.adoc index f3fb1de49567..2a0b9ab6b207 100644 --- a/security/file_integrity_operator/file-integrity-operator-release-notes.adoc +++ b/security/file_integrity_operator/file-integrity-operator-release-notes.adoc @@ -15,27 +15,31 @@ For an overview of the File Integrity Operator, see xref:../../security/file_int To access the latest release, see xref:../../security/file_integrity_operator/file-integrity-operator-updating.adoc#olm-preparing-upgrade_file-integrity-operator-updating[Updating the File Integrity Operator]. -[id="file-integrity-operator-release-notes-1-3-0"] -== OpenShift File Integrity Operator 1.3.0 +[id="file-integrity-operator-release-notes-1-3-1"] +== OpenShift File Integrity Operator 1.3.1 -The following advisory is available for the OpenShift File Integrity Operator 1.3.0: +The following advisory is available for the OpenShift File Integrity Operator 1.3.1: * link:https://access.redhat.com/errata/RHBA-2023:3600[RHBA-2023:3600 OpenShift File Integrity Operator Bug Fix Update] -[id="file-integrity-operator-1-3-0-new-features-and-enhancements"] +[id="file-integrity-operator-1-3-1-new-features-and-enhancements"] === New features and enhancements * FIO now includes kubelet certificates as default files, excluding them from issuing warnings when they're managed by {product-title}. (link:https://issues.redhat.com/browse/OCPBUGS-14348[*OCPBUGS-14348*]) * FIO now correctly directs email to the address for Red Hat Technical Support. (link:https://issues.redhat.com/browse/OCPBUGS-5023[*OCPBUGS-5023*]) -[id="file-integrity-operator-1-3-0-bug-fixes"] +[id="file-integrity-operator-1-3-1-bug-fixes"] === Bug fixes * Previously, FIO would not clean up node status CRDs when nodes are removed from the cluster. FIO would also erroneously indicate that new nodes failed integrity checks. FIO has been updated to correctly clean up node status CRDs on node removal or when adding new nodes to the cluster. This provides correct node status notifications. (link:https://issues.redhat.com/browse/OCPBUGS-8502[*OCPBUGS-8502*]) * Previously, when FIO was reconciling File Integrity CRDs, it would pause scanning until the reconciliation was done. This caused an overly aggressive re-initiatization process on nodes not impacted by the reconciliation. This problem also resulted in unnecessary daemonsets for machine config pools which are unrelated to the file integrity being changed. FIO correctly handles these cases and only pauses AIDE scanning for nodes that are affected by file integrity changes. (link:https://issues.redhat.com/browse/CMP-1097[*CMP-1097*]) +* Previously, while FIO was reconciling FIle Integrity CRDs, it would pause scanning until the reconciliation was complete. +This caused an overly aggressive re-initiatization process on nodes not impacted by the reconciliation. It also resulted in unnecessary daemonsets for machine config pools that are unrelated to the file integrity being changed. +FIO 1.3.1 gracefully handles these cases and only pauses AIDE scanning for nodes that are affected by file integrity changes. + [id="file-integrity-operator-release-notes-1-2-1"] == OpenShift File Integrity Operator 1.2.1