Back to bug 2067079

Who When What Removed Added
RHEL Program Management 2022-03-23 09:04:56 UTC Keywords FutureFeature
Jiffin 2022-03-23 13:50:20 UTC Link ID Github red-hat-storage/ocs-operator/pull/1600
Assignee tnielsen jthottan
CC jthottan
Status NEW POST
Travis Nielsen 2022-03-30 16:56:26 UTC Component rook ocs-operator
CC sostapov, tnielsen
QA Contact nberry mbukatov
Ashish Singh 2022-03-31 07:15:51 UTC CC assingh
Jiffin 2022-04-06 12:00:52 UTC Link ID Github red-hat-storage/ocs-operator/pull/1618
Matthias Muench 2022-04-13 10:14:32 UTC CC mmuench
Mudit Agarwal 2022-04-28 12:32:39 UTC Status POST MODIFIED
CC muagarwa
Mudit Agarwal 2022-05-09 07:15:42 UTC Status MODIFIED ON_QA
Fixed In Version 4.11.0-66
RHEL Program Management 2022-05-16 04:54:30 UTC Target Release --- ODF 4.11.0
Jiffin 2022-05-19 11:08:43 UTC Doc Text Cause:
In a closed environment, publicly accessible openshift routes were raising security concerns. When existing the route for RGW with SSL policy or delete, OCS-Operator was reconciling and resetting to default.

Consequence:
Security checks were failing for RGW openshift routes

Fix:
Provide an option to disable the route creation for RGW in the storage-cluster.yaml

Result:
The creation of an openshift route for RGW can be disabled
Doc Type If docs needed, set a value Bug Fix
Priya Pandey 2022-06-01 11:26:31 UTC CC prpandey
Martin Bukatovic 2022-06-14 14:50:26 UTC QA Contact mbukatov kramdoss
krishnaram Karthick 2022-07-20 12:49:52 UTC QA Contact kramdoss pbyregow
Parikshith 2022-08-08 14:24:55 UTC Status ON_QA VERIFIED
Red Hat Bugzilla 2022-08-10 19:16:18 UTC CC prpandey
Olive Lakra 2022-08-22 10:05:39 UTC Doc Text Cause:
In a closed environment, publicly accessible openshift routes were raising security concerns. When existing the route for RGW with SSL policy or delete, OCS-Operator was reconciling and resetting to default.

Consequence:
Security checks were failing for RGW openshift routes

Fix:
Provide an option to disable the route creation for RGW in the storage-cluster.yaml

Result:
The creation of an openshift route for RGW can be disabled
.Add termination policy to `ocs-storagecluster-cephobjectstore` route

Previously, in a closed environment, publicly accessible OpenShift routes were raising security concerns. When the existing route for RGW with SSL policy or deleted, the OCS-Operator was reconciled and reset to default. Resulting in security checks failing for RGW OpenShift routes.

This release update provides an option to disable the route creation for RGW in the `storage-cluster.yaml` which allows the creation of an OpenShift route for RGW that can be disabled.
CC olakra
errata-xmlrpc 2022-08-24 11:48:21 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2022-08-24 13:49:54 UTC Resolution --- ERRATA
Status RELEASE_PENDING CLOSED
Last Closed 2022-08-24 13:49:54 UTC
errata-xmlrpc 2022-08-24 13:50:41 UTC Link ID Red Hat Product Errata RHSA-2022:6156
Prasad Desala 2022-09-27 11:05:24 UTC Link ID Github red-hat-storage/ocs-ci/pull/6447
CC tdesala
Elad 2023-08-09 17:00:43 UTC CC odf-bz-bot

Back to bug 2067079