1.4. Red Hat OpenShift Serverless 1.35.1
OpenShift Serverless 1.35.1 现已正式发布。此 OpenShift Serverless 地址发行版本确定了 CVE 报告的安全漏洞问题,以增强安全性和可靠性。修复了在 OpenShift Container Platform 中与 OpenShift Serverless 相关的已知问题和已知问题:
1.4.1. 修复的问题
-
在以前的版本中,如果未启用
KafkaChannel
功能,在安装KnativeKafka
后kafka-controller-post-install-1.35
作业会失败。这个问题已被解决。post-install 作业现在可以成功完成,即使KafkaChannels
被禁用。 在以前的版本中,KnativeEventing 聚合集群角色中缺少
sinks.knative.dev
API 组。因此,如果您是一个非管理员用户,oc get all
命令会失败,并显示以下错误消息:Copy to Clipboard Copied! Toggle word wrap Toggle overflow jobsinks.sinks.knative.dev is forbidden: User "user" cannot list resource "jobsinks" in API group "sinks.knative.dev" in the namespace "test"
jobsinks.sinks.knative.dev is forbidden: User "user" cannot list resource "jobsinks" in API group "sinks.knative.dev" in the namespace "test"
这个问题已解决。
sinks.knative.dev
API 组现在包括在knative-eventing-namespaced
聚合集群角色中。现在,如果您有一个查看
、编辑
或admin
角色,您可以在自己的命名空间中读取和列出 sink。
1.4.2. 已知问题
目前,您无法删除集群范围的资源,如 Webhook 配置,在卸载、重新安装或升级 KnativeServing 或 OpenShift Serverless Operator 后可能会保留。这些左侧资源可能会阻止协调过程,并阻止 KnativeServing 正确安装。当出现这个问题时,您可能会看到类似如下的错误:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow failed to apply non rbac manifest: Internal error occurred: failed calling webhook \"webhook.serving.knative.dev\": failed to call webhook: Post \"https://webhook.knative-serving.svc:443/?timeout=10s\": no endpoints available for service \"webhook\"
failed to apply non rbac manifest: Internal error occurred: failed calling webhook \"webhook.serving.knative.dev\": failed to call webhook: Post \"https://webhook.knative-serving.svc:443/?timeout=10s\": no endpoints available for service \"webhook\"
作为临时解决方案,您可以手动删除卡住的 Webhook 配置,以便协调可以继续:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow oc delete mutatingwebhookconfiguration webhook.serving.knative.dev
$ oc delete mutatingwebhookconfiguration webhook.serving.knative.dev
Copy to Clipboard Copied! Toggle word wrap Toggle overflow oc delete validatingwebhookconfiguration config.webhook.serving.knative.dev validation.webhook.serving.knative.dev
$ oc delete validatingwebhookconfiguration config.webhook.serving.knative.dev validation.webhook.serving.knative.dev