Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 36 additions & 0 deletions modules/fio-rn-1-4-0.adoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
// Module included in the following assemblies:
//
// * security/file_integrity_operator/file-integrity-operator-release-notes.adoc
// Documentation story: https://issues.redhat.com/browse/OSDOCS-19878
//
// Example branch (fio-140-test): release notes formatted per current Red Hat
// supplementary style guide (description list, per-note headings, detached Jira links).

:_mod-docs-content-type: REFERENCE
[id="file-integrity-operator-release-notes-1-4-0_{context}"]
= Release notes for OpenShift File Integrity Operator 1.4.0

[role="_abstract"]
The following Red Hat Security Advisory (RHSA) is available for the OpenShift File Integrity Operator 1.4.0:

* link:https://access.redhat.com/errata/RHSA-2026:xxxxx[RHSA-2026:xxxxx OpenShift File Integrity Operator Update]

[id="file-integrity-operator-1-4-0-new-features-and-enhancements_{context}"]
== New features and enhancements

File Integrity Operator supports optional priorityClassName for daemon pods::
+
With this release, you can optionally set `priorityClassName` in the `FileIntegrity` custom resource (CR) to assign a `PriorityClass` to file integrity daemon pods. On nodes under resource pressure, the scheduler can preempt lower-priority workloads to make room for those pods. As a result, nodes continue to receive integrity checks even when resources are constrained.
+
link:https://issues.redhat.com/browse/RFE-9047[RFE-9047]

[id="file-integrity-operator-1-4-0-fixed-issues_{context}"]
== Fixed issues

AIDE worker pods no longer use increasing CPU and memory during hourly scans::
+
Before this update, `aide-worker-fileintegrity` pods could consume increasing CPU and memory during hourly Advanced Intrusion Detection Environment (AIDE) scan cycles, often approaching DaemonSet resource limits. As a consequence, integrity checks were disrupted on affected nodes. With this release, AIDE worker pods use CPU and memory more consistently during scans. As a result, hourly scans complete without approaching resource limits as often.
+
link:https://issues.redhat.com/browse/CMP-4006[CMP-4006]

This update includes upgraded dependencies in the underlying base images.
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,8 @@ The File Integrity Operator for {product-title} continually runs file integrity
These release notes track the development of the File Integrity Operator in the {product-title}.

// Release note modules (most recent first)
include::modules/fio-rn-1-4-0.adoc[leveloffset=+1]

include::modules/fio-rn-1-3-8.adoc[leveloffset=+1]

include::modules/fio-rn-1-3-7.adoc[leveloffset=+1]
Expand Down