Release Stork v2.8.2
Improvements
- Improvements were done to the KDMP driver in STORK. This driver is currently used only through PX-Backup. All the improvements can be found on PX-Backup release note page here.
Bug Fixes
-
Following vulnerability has been fixed in this stork version: CVE-2021-42574
-
Issue: While parsing Rules provided as a part of Backup / Restores, STORK was error handling a non-existent error.
User Impact: Backups and Restores would succeed even if the provided Rule was incorrect.
Resolution: The incorrect error handling is now removed. (#973) -
Issue: ResourceCollector package in STORK would collect ClusterRole and ClusterRoleBinding of a service account even though the caller of resource collector did not have permissions on that namespaces.
User Impact: Other libraries using this resource collector package would get ClusterRole and ClusterRoleBinding in its response.
Resolution: Check the permission of the caller if it has access to the service account before returning the ClusterRole and ClusterRoleBinding (#1001) -
Issue: RoleBindings which had a Subjects with no namespaces in it were not restored.
User Impact: An application using such a RoleBinding would fail to start after restoring on the destination cluster
Resolution: STORK will not retain the Subject in a RoleBinding if it does not have a namespace in it. (#1017) -
Issue: RoleBindings which had a
systemprefix in OCP environments were not backed up by STORK.
User Impact: An application using a RoleBinding with an associated system SCC in Openshift would not start up after restore since the associated RoleBinding was not backed up on the source side.
Resolution: RoleBindings which have a prefixsystem:openshift:sccwill be collected and backed up by STORK. (#1021) -
Issue: When a user selects partial restore of a few PVCs from a Backup, the internal volume list maintained in the Backup object was passed as is without filtering the unwanted PVCs.
User Impact: The restore operation would hang and not complete even for the selected PVCs
Resolution: Filter out the unwanted PVCs from the "IncludeResources" list to ensure only the selected PVCs get restored. (#998)