Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions release_notes/ocp-4-18-release-notes.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -3328,6 +3328,16 @@ $ oc adm release info 4.18.23 --pullspecs
[id="ocp-4-18-23-enhancements_{context}"]
==== Enhancements

:olm-np-z-stream: 23
* {empty}
+
--
include::snippets/olmv0-and-v1-rn-np-support.adoc[]
--
(link:https://issues.redhat.com/browse/OCPBUGS-60525[OCPBUGS-60525] and link:https://issues.redhat.com/browse/OCPBUGS-60521[OCPBUGS-60521])

:!olm-np-z-stream:

* Before this update, deleting an `istag` resource with the `--dry-run=server` option unintentionally caused actual deletion of the image from the server. This unexpected deletion occurred due to the dry-run option being implemented incorrectly in the `oc delete istag` command. With this release, the `dry-run` option is wired to the 'oc delete istag' command. As a result, the accidental deletion of image objects is prevented and the `istag` object remains intact when using the `--dry-run=server` option. (link:https://issues.redhat.com/browse/OCPBUGS-58461[OCPBUGS-58461])

* Before this update, the `cluster-policy-controller` container was exposing the `10357` port for all networks (the bind address was set to `0.0.0.0`). The port was exposed outside the host network for the node because the KCM pod manifest set `hostNetwork` to `true`. This port is used solely for the probe of the container. With this enhancement, the bind address was updated to listen on the `localhost` only. As result, the node security is improved because the port is not exposed outside the node network. (link:https://issues.redhat.com/browse/OCPBUGS-60131[OCPBUGS-60131])
Expand Down
2 changes: 1 addition & 1 deletion snippets/olmv0-and-v1-rn-np-support.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@

:_mod-docs-content-type: SNIPPET

In {product-title} {product-version}.{olm-np-z}, {olmv0-first} and {olmv1} support the inclusion of network policy manifests in the resource bundles of Operators. These tailored network policies protect against data leaks and harden against many attack vectors on {product-title} clusters.
In {product-title} {product-version}.{olm-np-z-stream}, {olmv0-first} and {olmv1} allow Operators to include network policy manifests in their resource bundles. These tailored network policies protect against data leaks and harden against many attack vectors on {product-title} clusters.

[TIP]
====
Expand Down
28 changes: 0 additions & 28 deletions snippets/olmv0-rn-np-support.adoc

This file was deleted.