Version 1.1.0

Edit online

Version 1.1.0 of the Kubernetes device plug-in for IBM Crypto Express (CEX) cards includes the exploration of Prometheus metrics around the crypto resources managed by the plug-in. This release adds support for Red Hat OpenShift Container Platform (RHOCP) with enforced Security Context Constraints (SCC). By default the CEX device plug-in now installs into it's own namespace cex-device-plugin and all the deployments have been rearranged for Kustomize support to make it easier to create and update the CEX device plug-in entities.

Features

Prometheus metrics support

  • New namespace 'cex-device-plugin' (See Migrating from kube-system to cex-device-plugin Namespace)
  • Enabled for RHOCP with enforced SCC support
  • Kustomize support

Resolved issues

The code has been rebuilt with updated libraries because of CVE findings in libraries the CEX device plug-in depends on:

  • CVE-2022-3172 (Medium) in k8s.io/apiMachinery-v0.20.4
  • CVE-2022-21698 (High) in github.com/prometheus/client_goLang-v1.11.0
  • CVE-2022-32149 (High) in golang.org/x/text-v0.3.4

Known issues

There are no known issues. See Limitations for the list of current limitations.