Uploaded image for project: 'Managed Service - API'
  1. Managed Service - API
  2. MGDAPI-3890

Bump 3Scale for 1.21.0 - reduce CVE severity score

XMLWordPrintable

    • MGDAPI - Sprint 24

      WHAT
      <What is being asked for?>
      Bump 3Scale for 1.21.0 - reduce CVE severity score

      Current version of 3Scale in production is 0.8.0
      0.8.3 is available and 0.9.0 is imminent
      Use 0.9.0 if it's available before 1.21.0 goes out
      Alternatively, 0.8.3.

      PR currently opened by Delorean / EWS:
      https://github.com/integr8ly/integreatly-operator/pull/2594

      Issue with this PR is that

      replaces: 3scale-operator.v0.8.2
      

      will not work with the current bundle chain in CPaaS.

      Also note that the CSV in the above PR uses the  olm.substitutesFor annotation

      HOW
      <Suggestions for how this may be solved. [Optional]

      Understand when 0.9.0 is coming out and if it can be used. 

      Test above PR through CPaaS and upgrade from 0.8.0 and ensure the bundle chain is working.

       

      TESTS
      <List of related tests>

      DONE
      <bullet point items for what should be completed>

      Upgrade of 3Scale is working through out standard release process and CPaaS Release process, regardless of if we use 0.8.3 or 0.9.0

            tdimov@redhat.com Tsvetoslav Dimov (Inactive)
            bgallagh@redhat.com Brian Gallagher
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: