Skip to content

Commit d0b2d7c

Browse files
OCPBUGS#66952 and 66951: Update 4.18.23 RNs for OLM NP support
1 parent ca0f5fe commit d0b2d7c

File tree

3 files changed

+11
-29
lines changed

3 files changed

+11
-29
lines changed

release_notes/ocp-4-18-release-notes.adoc

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3328,6 +3328,16 @@ $ oc adm release info 4.18.23 --pullspecs
33283328
[id="ocp-4-18-23-enhancements_{context}"]
33293329
==== Enhancements
33303330

3331+
:olm-np-z-stream: 23
3332+
* {empty}
3333+
+
3334+
--
3335+
include::snippets/olmv0-and-v1-rn-np-support.adoc[]
3336+
--
3337+
(link:https://issues.redhat.com/browse/OCPBUGS-60525[OCPBUGS-60525] and link:https://issues.redhat.com/browse/OCPBUGS-60521[OCPBUGS-60521])
3338+
3339+
:!olm-np-z-stream:
3340+
33313341
* Before this update, deleting an `istag` resource with the `--dry-run=server` option unintentionally caused actual deletion of the image from the server. This unexpected deletion occurred due to the dry-run option being implemented incorrectly in the `oc delete istag` command. With this release, the `dry-run` option is wired to the 'oc delete istag' command. As a result, the accidental deletion of image objects is prevented and the `istag` object remains intact when using the `--dry-run=server` option. (link:https://issues.redhat.com/browse/OCPBUGS-58461[OCPBUGS-58461])
33323342

33333343
* Before this update, the `cluster-policy-controller` container was exposing the `10357` port for all networks (the bind address was set to `0.0.0.0`). The port was exposed outside the host network for the node because the KCM pod manifest set `hostNetwork` to `true`. This port is used solely for the probe of the container. With this enhancement, the bind address was updated to listen on the `localhost` only. As result, the node security is improved because the port is not exposed outside the node network. (link:https://issues.redhat.com/browse/OCPBUGS-60131[OCPBUGS-60131])

snippets/olmv0-and-v1-rn-np-support.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88

99
:_mod-docs-content-type: SNIPPET
1010

11-
In {product-title} {product-version}.{olm-np-z}, {olmv0-first} and {olmv1} support the inclusion of network policy manifests in the resource bundles of Operators. These tailored network policies protect against data leaks and harden against many attack vectors on {product-title} clusters.
11+
In {product-title} {product-version}.{olm-np-z-stream}, {olmv0-first} and {olmv1} support the inclusion of network policy manifests in the resource bundles of Operators. These tailored network policies protect against data leaks and harden against many attack vectors on {product-title} clusters.
1212

1313
[TIP]
1414
====

snippets/olmv0-rn-np-support.adoc

Lines changed: 0 additions & 28 deletions
This file was deleted.

0 commit comments

Comments
 (0)