IBM Maximo Manage v9.2.0¶
Release Notes¶
New Features¶
- Version update for Manage 9.2 (#2609)
- Introduce automatic PVC management for Kafka Image Processor (#3647)
- Add AICfg and Assistant Agent Integration Support (#3680)
Bug Fixes and Security Updates¶
- Updated the maint91xdev in base branches in order to enable renovate (#2580)
- comment out debug block and improve output message for maxinst/updateDb timeout (#2525)
- update landing page link (#2577)
- Add 9.2 version to operatorCompatibility (#2621)
- Correct debugMode condition (#2524)
- Remove "clears old keys if re-encryption fails" block (#2585)
- update internal Python dependencies (#2628)
- TEMP - set MAS 9.1 compatible with Manage 9.2 (#2649)
- fix vegm default tags (#2658)
- Add 9.2.x component images (#2681)
- MASISMIG-66410 - DT445779 - Installing Manage 8.7.x fails with BuildDataInterpreters (BDI) CRD schema validation (#2638)
- Removing x-ui-deployment-default-initial (#2646)
- added api call for startup and readiness probe in server bundles [MASISMIG-62302] (#2639)
- defaulted BuildCompletedForUpgrade to true [MAXMF-2804] (#2603)
- Fixed dockerfile template for skipImageBuild [MAXMF-2872] (#2632)
- updated readme for feature channel and 9.1.x (#2724)
- MASISMIG-67091 DT448438 Manage foundation service not created when using bundle type of all and name is not all (#2725)
- revert MAS operatorCompatibility min 9.1 to 9.2 (#2726)
- Expose system information as environment variable (#2729)
- 92x Fixed ca cert issue for routes [MASISMIG-67417] (#2750)
- Fix for DT448574 CA Cert [MASISMIG-67417] (#2755)
- adding x-ui-deployment-default-initial back (#2752)
- Fixed versionInformation undefined issue (#2758)
- updated ansible-operator version to fix filebeat issue (#2774)
- added vegm latest image to 9.2.7 (#2779)
- updated licence file MAS (3Q25) (#2782)
- mxe system properties added into non system properties secret fix (#2811)
- Added missing fields into crds for podTemplates (#2818)
- Manage APP CRD is missing spec components - Patch DT448611 [MASISMIG-68104] (#2793)
- add missing resource config and probes (#2856)
- Read-Only Root file system (ibm-require-ro-rootfs) for manageApp cr pods (#2803)
- Re-enabled s390x builds. (#2855)
- Reverted back CRD changes for podTemplates.. (#2877)
- MASCORE-7514 - SPS migration for 9.2.x Operator (#2897)
- Add AWSPCA support for certificate creation (#2841)
- Fix filebeat flags (#2926)
- Monitor agent version revert back (#2978)
- update .whitesource to add scanSettings (#2967)
- Added fix to handle wlp images entry point script for monitor agent (#3000)
- MASR-4166 - MASISMIG-67567 - Generate public/private key combination in Manage Operator for Mobile (#2999)
- MAXMOF-2974 - Adding a default value for mobileEncryptionCertSecretName (#3033)
- Adding support for MXE_MASLICENSINGAPI (#3057)
- Add unsupportedSecondaryLangs property to ManageWorkspace and HealthWorkspace (#3076)
- Fix status not updating correctly in ManageWorkspace (#3067)
- Updating OIDC endpoints (#3088)
- DT458270 - cluster-wide proxy connection timeout issue fix while installing maximo IT (9.2.x) (#3098)
- Fixing BDI issue with global env var (#3128)
- Read-Only Root file system (ibm-require-ro-rootfs) support (#3087)
- Adding MREF API URL (#3130)
- updated licences for 4Q25 (#3140)
- Fixing bad copy/paste in facilities URL (#3148)
- Added timeout to fail fast request in airgap environment (#3170)
- Update env variable in admin build if unsupportedSecondaryLangs is defined (#3174)
- Reverted ansbile-operator version from 9.1.11 to 9.1.4 (#3208)
- Added ephemeral volumes support (#3175)
- MASR-441: add a hook to run scripts during admin and server bundle build (#3215)
- DT459714 - Manage Build failed when S3 Bucket region name of object Url contains hyphens for the customization archive (#3219)
- DT459959 - Manage Operator generates Invalid Dockerfiles in ConfigMap for External Image Builds. (#3218)
- support smtp oauth config through operator (#3207)
- Removed health standalone tiles and healthext-acc operator with it's tiles - MASHP-3688 (#3062)
- Removed Maximo IT validation (9.2.x) (#3254)
- Reverted changes overwritten by conflict (#3243)
- Removing mxe.mail.oauth.clientName property support from operator (#3269)
- Fix healthextaccelerator removal (#3279)
- Updated the ansible operator version from 9.1.4 to 9.1.11 along with script fixes. (#3282)
- Fix double quote issue (#3322)
- Removed AIO from manage operator - MASHP-4389 (#3280)
- DT462849 - BDI pod logs contain verbose garbage collection output (#3345)
- Updated New MAS Suite license notices and non-ibm-notice txt for 1Q26 (#3351)
- updated ansible operator to 9.1.15 (#3373)
- Fix configmap issue and tag issue when skipImageBuild is true (#3358)
- update mas-utils to 7.29.7 (#3388)
- Rollback commits for March FC (#3399)
- Add Manage 9.1.142 custom image (#3400)
- Reverting writeable directory changes (#3416)
- MASR 170 - Enhance manage build experience for time and efficiency (#3147)
- remove envizi, workday and oracleadapter from IT component conflict list (#3433)
- add featureuse and deploymentProgression Flags as env vars to foundation and all bundles (#3435)
- Fix upgrade issue, foundation condition issue and admin tagging issue in a specific scenario (#3440)
- Fix admin build picking old tags/images after upgrade (#3469)
- set mxe.mail.oauth.clientName sys property from operator (#3486)
- MASR-6467 Manage upgrade to IBM Semeru (Java 25) (#3506)
- Added singleton labels (#3524)
- Add option to disable monitor agent through ManageWorkspace CR (#3525)
- Adding ephemeral volume support for readonly root file system (#3523)
- Server bundles should restart with changes in featureuse and deploymentProgression Flags (#3532)
- Fixed tagging issue when bundle build is failed (#3549)
- MAXMF-5218 java.security.ProviderException: Could not initialize NSS (#3552)
- Remove file missed in PR #3062 (#3548)
- Fix gunicorn folder not creating error in webhook (#3564)
- Ephemeral storage code refactor (#3563)
- MASCORE-13426: Remove usersync and groupsync agents (#3554)
- Hardcoded cryptography v46 for UBI8 compatibility and added script to download prebuilt wheels for ibm-mas-manage-webhook image (#3616)
- Endpoint configuration support (#3542)
- onboard collaborate as an addon for 92x (#3470)
- Code refactor to reduce Ephemeral Storage consumption and fix some issues (#3596)
- Collaborate addon redis environment variables handling (#3630)
- Remove storageEndpoint validations from ManageWorkspace CRD (#3635)
- MAXMIS-3909: Add support for registration of new operator for civil: kafkaimageprocessor (ibm-mas-imagestitching) (#3579)
- MAXMIS-3909: Update README.md (#3639)
- Added storage endpoint validation (#3640)
- Generate CRD schemas configmap (#3648)
- updated Ibm-mas-collaborateext version (#3658)
- Add path-based routing support to Manage for route creation (#3135)
- Adding changes for foundation service to support UI pod and DT468223 fixes (#3650)
- update Manage Base image and restore file permission (#3671)
- updated collaborate version (#3677)
- Make Kafka Image Processor Optional (#3678)
- fix health classes not being added to bundle (#3690)
- Update .secrets.baseline (#3691)
- Remove usersync and groupsync resources from cluster (#3626)
- Apply Black formatting to Python code (#3696)
- vegm rollback from MAS9.2 (#3698)
- Path based routing support for MATA_MAXIMO_APP_URL (#3684)
- Add Support for Issuer and Essential Role Installation (#3683)
- PBR - remove bundle-specific path segments and double slash from OSLC API hrefs (#3704)
- ansible-operator update to 9.3.4 (#3707)
- MAXMIS-6009: use dynamic naming for kafkaimageprocessor resource. (#3695)
- fix public cert owner reference issue in path mode (#3711)
- Add CONTEXT_PATH_TOOLS env var support for PBR for maxinst toolsapi (#3712)
- Update Manage Base Image to 9.2.186 (#3714)
- PBR support slackproxy (#3716)
- Adding integration service which points to mea, all, foundation bundles (#3702)
- removing data dictionary references from operator code (#3723)
- MAXMF-6083 - Fixes race condition issue with service creation (#3728)
- Revert imagestitching and kafkaimageprocessor back to 2.0.13 (#3731)
- Fix Kafka certificate duplicate alias error during upgrades (#3726)
- Update Health Image from 9.2.25 to 9.2.26 (#3743)
- Update License files for 9.2 Release (#3744)
- Updated the latest manage base image 9.2.194 (#3747)
Install Modes¶
| Mode | Supported |
|---|---|
| OwnNamespace | True |
| SingleNamespace | True |
| MultiNamespace | False |
| AllNamespaces | False |
Service Accounts¶
- ibm-mas-manage-acc-operator
- ibm-mas-manage-aipoptimizationext-entitymgr
- ibm-mas-manage-appstatus-mgr
- ibm-mas-manage-bdi-operator
- ibm-mas-manage-collaborateext-entitymgr
- ibm-mas-manage-common
- ibm-mas-manage-config-editor
- ibm-mas-manage-entitymgr-primary-entity
- ibm-mas-manage-healthext-entitymgr-ws-serviceaccount
- ibm-mas-manage-imagestitching-operator
- ibm-mas-manage-kafkaimageprocessor-operator
- ibm-mas-manage-manage-deployment
- ibm-mas-manage-pe-common
- ibm-mas-manage-slackproxy-operator
- ibm-mas-manage-ws-operator
Cluster Permissions¶
No cluster permissions
Namespace Permissions¶
| Group | Resource | Verbs |
|---|---|---|
| "" | configmaps | create, delete, get, list, patch, update, watch |
| "" | secrets | create, delete, get, list, patch, update, watch |
| "" | pods | create, delete, get, list, patch, update, watch |
| "" | pods/exec | create, delete, get, list, patch, update, watch |
| "" | pods/log | create, delete, get, list, patch, update, watch |
| "" | services | create, delete, get, list, patch, update, watch |
| "" | persistentvolumeclaims | create, delete, get, list, patch, update, watch |
| "" | persistentvolumes | create, delete, get, list, patch, update, watch |
| "" | events | create, patch |
| apps | deployments | create, delete, get, list, patch, update, watch |
| apps | daemonsets | create, delete, get, list, patch, update, watch |
| apps | replicasets | create, delete, get, list, patch, update, watch |
| apps | statefulsets | create, delete, get, list, patch, update, watch |
| networking.k8s.io | networkpolicies | create, delete, get, list, patch, watch |
| integreatly.org | grafanadashboards | create, delete, get, list, patch, update, watch |
| grafana.integreatly.org | grafanadashboards | create, delete, get, list, patch, update, watch |
| route.openshift.io | routes | create, delete, deletecollection, get, list, patch, update, watch |
| route.openshift.io | routes/custom-host | create, delete, deletecollection, get, list, patch, update, watch |
| cert-manager.io | certificates | create, delete, get, list, patch, update, watch |
| cert-manager.io | issuers | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores/status | create, delete, get, list, patch, update, watch |
| truststore-mgr.ibm.com | truststores/finalizers | create, delete, get, list, patch, update, watch |
| rbac.authorization.k8s.io | roles | create, get, list, patch, update, watch |
| rbac.authorization.k8s.io | rolebindings | create, get, list, patch, update, watch |
| binding.operators.coreos.com | servicebindings | create, delete, get, list, patch, update, watch |
| image.openshift.io | builds | create, delete, get, list, patch, update, watch |
| image.openshift.io | buildconfigs | create, delete, get, list, patch, update, watch |
| image.openshift.io | buildconfigs/instantiatebinary | create, delete, get, list, patch, update, watch |
| image.openshift.io | imagestreams | create, delete, get, list, patch, update, watch |
| image.openshift.io | imagestreamtags | create, delete, get, list, patch, update, watch |
| build.openshift.io | builds | create, delete, get, list, patch, update, watch |
| build.openshift.io | buildconfigs | create, delete, get, list, patch, update, watch |
| build.openshift.io | buildconfigs/instantiatebinary | create, delete, get, list, patch, update, watch |
| build.openshift.io | imagestreams | create, delete, get, list, patch, update, watch |
| build.openshift.io | imagestreamtags | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | manageaccelerators | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managestatuscheckers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managestatuscheckers/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | managestatuscheckers/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthextapps | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthextapps/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthextapps/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthextworkspaces | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthextworkspaces/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | healthextworkspaces/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | aipoptimizations | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | aipoptimizations/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | aipoptimizations/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | imagestitchings | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | imagestitchings/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | imagestitchings/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | kafkaimageprocessors | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | kafkaimageprocessors/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | kafkaimageprocessors/finalizers | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | slackproxies | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | slackproxies/status | create, delete, get, list, patch, update, watch |
| apps.mas.ibm.com | slackproxies/finalizers | create, delete, get, list, patch, update, watch |