diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md index 77888fac2..ad2bd1e10 100644 --- a/.github/pull_request_template.md +++ b/.github/pull_request_template.md @@ -2,7 +2,7 @@ **Changes Proposed in PR**: -**Fixes**: #_Github issue id_ +**Fixes**: resolves #_Github issue id_ ## General Checklist - [ ] Updated Added functionality/ bug fix in release notes diff --git a/azure-pipelines.yaml b/azure-pipelines.yaml index ff36a88c0..90c16bd5a 100644 --- a/azure-pipelines.yaml +++ b/azure-pipelines.yaml @@ -25,7 +25,7 @@ steps: command: login containerRegistry: $(quayConnection) - task: CmdLine@2 - displayName: Compile documentation + displayName: Check documentation inputs: script: 'make docs' - task: Docker@2 @@ -44,4 +44,4 @@ steps: command: push containerRegistry: $(quayConnection) repository: $(imageName) - tags: $(Build.SourceVersion) \ No newline at end of file + tags: $(Build.SourceVersion) diff --git a/docs/RELEASE-NOTES.rst b/docs/RELEASE-NOTES.rst index bfc359ba0..aa3ebd3b5 100644 --- a/docs/RELEASE-NOTES.rst +++ b/docs/RELEASE-NOTES.rst @@ -2,21 +2,38 @@ Release Notes for Container Ingress Services for Kubernetes & OpenShift ======================================================================= -Next Release +2.4.1 ------------- Added Functionality ``````````````````` +* CIS supports `F5 IPAM Controller 0.1.3 `_. +* Helm Chart Enhancements: + - Added support for multiple namespace configuration parameter with CIS operator. Bug Fixes ````````` -* :issues: `1737` Inconsistent ordering of policy rules when adding an Ingress path +* :issues: `1737` Inconsistent ordering of policy rules when adding an Ingress path. * :issues: `1808` K8S BIG-IP Controller upload old certificate to BIG-IP. -* Fix Deleting Stale Specs from IPAM CR when CIS restarts -* Fix Populate allocated ip for virtual-server in the VSAddress colomn while using IPAM. -* Fix Processing endpoint with node names when CIS in Cluster mode +* Stale IPAM CR configuration gets deleted on CIS restart. +* IPAM allocated IP address now populates for VirtualServer under VSAddress column. +* CIS supports endpoints created without nodeNames in Cluster mode for Headless Service. +* Updated helm charts to support IBM platform certification. + +Vulnerability Fixes +``````````````````` ++------------------+------------------------------------------------------------------+ +| CVE | Comments | ++==================+==================================================================+ +| CVE-2020-36242 | Upgraded cryptography package in f5-common-python repository | ++------------------+------------------------------------------------------------------+ +| CVE-2020-25659 | Upgraded cryptography package in f5-cccl repository | ++------------------+------------------------------------------------------------------+ +| CVE-2020-14343 | Upgraded PyYAML package in f5-cccl repository | ++------------------+------------------------------------------------------------------+ Limitations ``````````` +Due to changes in the BIG-IP Python API, CIS EDNS no longer functions correctly. EDNS will be moving to the AS3 API in the upcoming release 2.4.0 @@ -418,8 +435,8 @@ Bug Fixes ````````` * CIS handles the combination of Edge and Re-encrypt OpenShift routes. * CIS does not send encrypted traffic to Edge Route backend. -* :issues:`1041` CIS now does not log dozens of "INFO" log messages frequently. -* :issues:`931` Issue resolved for the Prometheus metric status="parse-error". +* :issues: 1041 CIS now does not log dozens of "INFO" log messages frequently. +* :issues: 931 Issue resolved for the Prometheus metric status="parse-error". Limitations ``````````` @@ -434,8 +451,8 @@ Bug Fixes * Controller handles WAF Policy in the root path of a domain in OpenShift Routes. * Controller handles OpenShift Routes with WAF Policy in multiple namespaces. * Controller now does not push configuration to BigIP using AS3 for every 30 seconds with no changes. -* :issues:`1041` Controller now does not log dozens of "INFO" log messages frequently. -* :issues:`1040` Controller does not crashes if latest AS3 schema is not available. +* :issues: 1041 Controller now does not log dozens of "INFO" log messages frequently. +* :issues: 1040 Controller does not crashes if latest AS3 schema is not available. * Controller updates Route Status in OpenShift Management Console (OCP 4.x) * Controller does not crash when handling Route with WAF Policy that does not have a service. @@ -855,4 +872,4 @@ Limitations .. _Download and install the latest iApps templates: https://support.f5.com/csp/article/K13422 -.. _Set the service to use the newer iApp template: https://support.f5.com/csp/article/K17001 \ No newline at end of file +.. _Set the service to use the newer iApp template: https://support.f5.com/csp/article/K17001