Skip to content

Release Stork v2.8.2

Choose a tag to compare

@adityadani adityadani released this 20 Jan 05:15
· 787 commits to master since this release

Improvements

  • Improvements were done to the KDMP driver in STORK. This driver is currently used only through PX-Backup. All the improvements can be found on PX-Backup release note page here.

Bug Fixes

  • Following vulnerability has been fixed in this stork version: CVE-2021-42574

  • Issue: While parsing Rules provided as a part of Backup / Restores, STORK was error handling a non-existent error.
    User Impact: Backups and Restores would succeed even if the provided Rule was incorrect.
    Resolution: The incorrect error handling is now removed. (#973)

  • Issue: ResourceCollector package in STORK would collect ClusterRole and ClusterRoleBinding of a service account even though the caller of resource collector did not have permissions on that namespaces.
    User Impact: Other libraries using this resource collector package would get ClusterRole and ClusterRoleBinding in its response.
    Resolution: Check the permission of the caller if it has access to the service account before returning the ClusterRole and ClusterRoleBinding (#1001)

  • Issue: RoleBindings which had a Subjects with no namespaces in it were not restored.
    User Impact: An application using such a RoleBinding would fail to start after restoring on the destination cluster
    Resolution: STORK will not retain the Subject in a RoleBinding if it does not have a namespace in it. (#1017)

  • Issue: RoleBindings which had a system prefix in OCP environments were not backed up by STORK.
    User Impact: An application using a RoleBinding with an associated system SCC in Openshift would not start up after restore since the associated RoleBinding was not backed up on the source side.
    Resolution: RoleBindings which have a prefix system:openshift:scc will be collected and backed up by STORK. (#1021)

  • Issue: When a user selects partial restore of a few PVCs from a Backup, the internal volume list maintained in the Backup object was passed as is without filtering the unwanted PVCs.
    User Impact: The restore operation would hang and not complete even for the selected PVCs
    Resolution: Filter out the unwanted PVCs from the "IncludeResources" list to ensure only the selected PVCs get restored. (#998)