From 58a592aaf3898ca42848ec4120883e83956a7f19 Mon Sep 17 00:00:00 2001 From: William Gabor Date: Tue, 25 Aug 2026 09:27:58 -0400 Subject: [PATCH] OSDOCS-21744 created RNs for 1-1-1 --- ...ero-trust-manager-release-notes-1-1-1.adoc | 33 +++++++++++++++++++ .../zero-trust-manager-release-notes.adoc | 3 ++ 2 files changed, 36 insertions(+) create mode 100644 modules/zero-trust-manager-release-notes-1-1-1.adoc diff --git a/modules/zero-trust-manager-release-notes-1-1-1.adoc b/modules/zero-trust-manager-release-notes-1-1-1.adoc new file mode 100644 index 00000000000..71db78f62bc --- /dev/null +++ b/modules/zero-trust-manager-release-notes-1-1-1.adoc @@ -0,0 +1,33 @@ +// Module included in the following assemblies: +// +// * security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc +:_mod-docs-content-type: REFERENCE +[id="zero-trust-manager-release-notes-1-1-1_{context}"] += {zero-trust-full} 1.1.1 + +Issued: 26 Aug 2026 + +[role="_abstract"] +This release is a bug-fix update for {zero-trust-full}. It improves SPIRE controller manager stability by resolving a performance issue that can cause elevated CPU usage. + +The following advisories are available for {zero-trust-full}: + +* https://access.redhat.com/errata/RHBA-2026:28869[RHBA-2026:28869] +* https://access.redhat.com/errata/RHBA-2026:28784[RHBA-2026:28784] +* https://access.redhat.com/errata/RHBA-2026:28399[RHBA-2026:28399] +* https://access.redhat.com/errata/RHBA-2026:28392[RHBA-2026:28392] +* https://access.redhat.com/errata/RHBA-2026:28391[RHBA-2026:28391] +* https://access.redhat.com/errata/RHBA-2026:28260[RHBA-2026:28260] +* https://access.redhat.com/errata/RHBA-2026:28200[RHBA-2026:28200] +* https://access.redhat.com/errata/RHBA-2026:28140[RHBA-2026:28140] + + +[id="zero-trust-manager-1-1-1-bug-fixes_{context}"] +== Fixed issues + +`spire-controller-manager` container no longer experiences high CPU usage during reconciliation:: ++ +* Before this update, {zero-trust-full} generated the `spire-controller-manager` ConfigMap without setting the `gcInterval` field, so the field value was serialized to `0`. As a consequence, reconciliation loops ran continuously with no delay. The controller manager process caused high CPU usage even in clusters with minimal workloads. With this release, {zero-trust-full} sets the `gcInterval` setting in the `spire-controller-manager` ConfigMap to 10 seconds, preventing CPU spikes and reducing CPU usage. ++ +(link:https://issues.redhat.com/browse/OCPBUGS-90556[OCPBUGS-90556]) + diff --git a/security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc b/security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc index fe17b5d8fdd..45cf174d5bc 100644 --- a/security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc +++ b/security/zero_trust_workload_identity_manager/zero-trust-manager-release-notes.adoc @@ -11,6 +11,9 @@ The {zero-trust-full} leverages Secure Production Identity Framework for Everyon These release notes track the development of {zero-trust-full}. +// RNs 1.1.1 +include::modules/zero-trust-manager-release-notes-1-1-1.adoc[leveloffset=+1] + // RNs 1.1.0 include::modules/zero-trust-manager-release-notes-1-1-0.adoc[leveloffset=+1]