4.1.12

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:c28afba66cc09233f7dfa49177423e124d939cf5b0cd60d71bbb918edb0ed739

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.1.2, 4.1.6, 4.1.7, 4.1.8, 4.1.9

Upgrades to:

4.1.18 (changes) - Failed Failed
4.1.13 (changes) - Success Success

Loading changelog, this may take a while ...

Changes from 4.1.1

Created: 2019-08-16 14:50:54 +0000 UTC

Image Digest: sha256:c28afba66cc09233f7dfa49177423e124d939cf5b0cd60d71bbb918edb0ed739

Release 4.1.12 was created from registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2019-08-15-151132

Components

Kubernetes 1.13.4

Rebuilt images without code change

azure-machine-controllers git 4986149e sha256:e53a1b5b75fd1fb427d2ba1d1d254b8401a466b8f2e548a8533e9b1ba0d95b49
baremetal-machine-controllers git dc5a6b2f sha256:7a45ffa47ce647d6a959565277a883e3bdc5534c17e391b5a063ebcbec751330
cluster-autoscaler git 9b2cf49e sha256:76c7c8eb500e1beb7d365f95da97b28857446232140d3da608337dc358fcb9d2
cluster-autoscaler-operator git dfdc9d81 sha256:ebc30a25e32bcc06f41860d6955e2228294d7d96ef4c18a021cddb9a9c3fbf52
cluster-bootstrap git c040eb0a sha256:93599a37c8ad9a2ea996745b7706f2d64c7815ceac76a06da6876166dda0c484
cluster-ingress-operator git 6a306dbf sha256:096b31bd55c0bf790072f2fe620284edebaf87738ede0d231e692de414d36dda
cluster-kube-controller-manager-operator git 1a61c74f sha256:6b3448944d7e3fdfd25cadc4eff03a6a1f4990c3c31feff8aac3311ee2c05fa0
cluster-machine-approver git 8394330d sha256:8b656406f897af3479e0836bc5f3e51c1a1982d370b5ca373f98f73ba1c2e9ae
cluster-svcat-apiserver-operator git a898d5da sha256:c21c8e3afddd528fc24d2a0e301fea49979dd9415ef795fc7f7bd4b8437b1dec
cluster-svcat-controller-manager-operator git 9ac2a145 sha256:ec5f9ee0a24a991eebf135d0b228fc15d0c76bf99385c45db6a878fd1a5fc084
cluster-update-keys git 704114b5 sha256:723c808b6126bed24e34c6c56c6716cb35c2e751981f27e50469fcefa7bbc0ee
configmap-reloader git 3c2f8572 sha256:e97cb8f6ab9f6fd930600241ad3d290027bdfbcadacd608843b6a942c4707ddc
console-operator git 324d5e1d sha256:ef836df759aa1e4701dd0125dd46f4a2d9e1bc4763ee86cc4e94328b46e21289
container-networking-plugins-supported git a59efc83 sha256:ee430fe6ba26bc7730b5927063bf35c9fca49c1f18bc87f46dcff5cbc37f10b0
container-networking-plugins-unsupported git a59efc83 sha256:0e35bf355ff499a6790e8bf14095aa7588b227d12ab87bb865248a6b1776f0b9
coredns git fbcb8252 sha256:30a4e2fd8889f4d81d07d9ef7fd41675df106c7999f67d15eed684828c09d45d
etcd git 1a054c60 sha256:a8833a5e40b1cba70a4a23fa5c472d5ae6362cdce5ff194131b5d241028e767b
grafana git 2ea5517e sha256:0c6730db52ae24ef4823ff2a19c09bc8040e04ea11883191ad28a3fb2f905c00
haproxy-router git d6cbfcc6 sha256:7d8f566a87e9d9cd6e1997eca32dd31f053ef8d70d442a03b6ce449ec3daeff0
k8s-prometheus-adapter git 17d5e940 sha256:6c5479500a076d6e4b9b9f268926b492cbd3b4336523dab1d6782dc8d14e8e6d
kube-client-agent git 004fb206 sha256:ee0ee91965eafecd0995d50cbd96a63080d1116c386283a4763d90cf81f90f62
kube-etcd-signer-server git 004fb206 sha256:b477d0e83ea2d67edd57ced5e531371ef736a156df15906982361cecba164c33
kube-rbac-proxy git 3f271e09 sha256:3db28db3495a0a660f5e0f386113dcefffaa55dffcd770d33e62a07486dbc23e
kube-state-metrics git 2ab51c9f sha256:c6cf3bd94e4ce934c398880fea18d365de86d7c863832856a143b2b0eb19d732
libvirt-machine-controllers git 2705e526 sha256:8d83b61d3fa4651f939418fc15183ca05b2b7552302a175d0e1578c6e6a5eb67
machine-api-operator git d958bf50 sha256:543392c3ab8c2adb223ecf6d541aae438a778d26ab934b08b11e9b083cad48db
machine-os-content sha256:9c22e111964df255affd8ded766e420f012ea9b965b696e0011f4b5fddfbfa41
multus-cni git e13c5350 sha256:3d18a30c8f430ea15b06bd4f637c89441175c7825ae5aabfea02b23722899ac3
oauth-proxy git 2653eabc sha256:b357960c3605b9501cc2fc27237e9557761fa0972eb825e9611286473763fd45
openstack-machine-controllers git baf1b1fa sha256:d188abae4a7e18dfc750eac75e11fc6de723d71209228c372d9a2e582c96d59e
operator-registry git ea142d65 sha256:482066cd63469161ca598b5258f935f1f1acc17a58796cf180fd72dcf5be5f69
ovn-kubernetes git 674977b1 sha256:6bd6ff18736ff2661e728269e953a1f7bd7e589c927cb061f1b0a0da87114907
pod git 2f60da39 sha256:368091a1826c880e5328c759db5caa5b7b1d760ac462f04961218826e7a0a4c1
prom-label-proxy git a43debdf sha256:a0bc92dd5367234407f5651bf024e167170c057496f4577d11df3e2e9f15d715
prometheus git 625dc242 sha256:2aadc6cb0a79ba558f2784cdcd3d6bb579d30fcaadeaf3d9f53b0cca4c150a80
prometheus-alertmanager git 39c2c111 sha256:bcf9ce356d8b287300b4a8107f463d83765ad94164730d47d1d993d6f7aab7e6
prometheus-config-reloader git 73ed419e sha256:26933e71472e9687c8228ce37ea04fa599afc456554b64033e9302f99fdd54b2
prometheus-node-exporter git 3ab97646 sha256:1fa800194803aa0f94dc3c40ad8a70d8695b241e8e4b6d26cb2e5f320765a4d5
prometheus-operator git 73ed419e sha256:9a2c767d17a98a971c2cf196c8a559d257103d6093894be60bc492710e2d1620
service-ca-operator git 3c8ba454 sha256:92d4b64bf99da8be78da919140a35550dc201a208df8c87dd8c6ee8f1a52d757
service-catalog git 1dd02c42 sha256:be8f6f9c710121656218125b00680d9ef7d27a9e19efc1476e8155f33d3e4192
sriov-cni git fbafcc81 sha256:4a6501ee34fa4256291a5c98576e98577a1f1aa8f0df8c7bc734fb065a61d189
sriov-network-device-plugin git f01055e8 sha256:49e4b045211999e97054c7e10c4a18332eff188224ea23cd758fc56204d78217

aws-machine-controllers

Bug 1729243: Update vendor kubernetes-drain #238
Bug 1718265: [release-4.1] Stopped instances existing #222
Full changelog

cli, cli-artifacts, deployer, hyperkube, hypershift, node, tests

Bug 1734663: UPSTREAM: 78882: Fix incorrect procMount defaulting #23517
Bug 1733921: ClusterResourceQuota usage is above project usage quota impacting all projects in ClusterResourceQuota #23493
Bug 1732192: CVE-2019-11247: OpenShift 4.1: apiextensions: 404 if request scope does not match crd scope #1529
Bug 1731827: UPSTREAM: 80657: add UID to kubelet_container_log_filesystem_used_bytes [4.1] #23524
Bug 1731913: Add arping to openshift-sdn image #23450
Bug 1722569: Increase limit for signature import #23243
Bug 1729276: Using AWS when a secondary IP address is added the order of the list of InternalIPs is not preserved. #23367
Bug 1720332: images/kube-proxy: update to 4.1, add iptables wrappers #23235
Bug 1728877: restrict SNI config to avoid overriding internal ELB #23357
Bug 1723553: oc delete of a static pod results in multiple attempts to re-create the mirror pod before succeeding #23264
Bug 1726745: Improve Samples Operator test reporting #22905
Bug 1723869: Terminate custom resource watches when storage is destroyed #23267
Bug 1722919: Pin openshift to release-4.1 branches #22848
Bug 1720677: Fix panic in kube-proxy when iptables-save prints to stderr #23190
Bug 1723939: Sort the release changelog by newest pull request first #22837
Bug 1705492: oc adm must-gather command stuck indefinitely #23036
Bug 1723941: [release-4.1] Allow oc adm release info to output digest, name, or pull spec #22977
Bug 1713262: pkg/oc/cli/admin/upgrade: Fix and test sortSemanticVersions #22897
Bug 1712637: use fallback when must-gather imagestream not available #23001
Bug 1718541: Fix egress monitoring for some rare corner cases [4.1] #23096
Bug 1719044: client switch between 3.7 and 3.9 broke creation of clus… #23108
Bug 1718054: must-gather: make sure audit logs do not contain OAuth tokens #23167
Bug 1690087: Increase the wait for the service upgrade e2e test for LB #23203
Bug 1710561: use pager to get images for pruning #22845
Bug 1718375: hardcode a small list of mappings to allow SDN to rebootstrap #23086
Full changelog

cloud-credential-operator

Bug 1707827: Enable leader election. #98
Revert “Bug 1726451: Add clusteroperator version level gate.” #90
Bug 1727943: Add clusteroperator version level gate #85
Bug 1723892: Backport removal of memory restrictions for cred operator. #76
Full changelog

cluster-authentication-operator

Bug 1733978: Correct race between config sync loop and resource syncer [4.1] #162
Bug 1725936: Split handling of degraded across multiple conditions #163
Bug 1729100: [release-4.1] Fix the operator namespace name in its clusteroperator status #149
Full changelog

cluster-config-operator

Bug 1732934: remove defaultservingcert description in apiserver config #75
Full changelog

cluster-dns-operator

Bug 1723936: Set terminationMessagePolicy=FallbackToLogsOnError for DNS operator and operands #112
Full changelog

cluster-image-registry-operator

Bug 1714168: Properly setting “maxWaitTime” environment… #357
Bug 1737526: Empty s3 bucket before deleting #351
Bug 1730407: add test for route secrets #321
Bug 1720270: fix handling of TLS secrets for the registry routes #300
Bug 1721685: pkg: add resource requests to node-ca pod #282
Full changelog

cluster-kube-apiserver-operator

Bug 1733232: Fix kube-apiserver-to-kubelet-signer validity #534
Bug 1732945: Fallback to platform type on 4.1 infra metrics #545
Bug 1732945: Report infra provider and feature set metrics #531
Bug 1728754: remove broken default serving cert #519
Bug 1718054: Do not log OAuth tokens in audit logs #500
Full changelog

cluster-kube-scheduler-operator

Bug 1721566: Kube-scheduler-operator entering a permanent degraded state #147
Bug 1721572: Kube-scheduler-operator: backport a test to ensure no regression #146
Bug 1718027: Fix operator status reporting for perm-degraded #141
Full changelog

cluster-monitoring-operator

Bug 1732945: Update telemeter-client deployment #436
Bug 1740373: Add more accurate infrastructure CPU calculations #433
Bug 1732945: jsonnet: update telemeter client deployment #426
Bug 1730413: etcd should still alert when a member disappears from the endpoints #420
Bug 1717634: pkg/client: add support for relatedObjects in status report #375
Bug 1721919: Pin kube-prometheus and telemeter to release branches #354
Full changelog

cluster-network-operator

Bug 1726679: [release-4.1] Put openshift-etcd netnamespace on netid 1 #225
Bug 1712986: [release-4.1] Don’t set a network status at all if we’re not managing networking. #194
Full changelog

cluster-node-tuned

Bug 1739322: Fix plugin_sysctl for tuned 2.11 #22
Full changelog

cluster-node-tuning-operator

Bug 1719967: Implement leader-for-life election. #68
Bug 1718842: Operator-assisted removal of detached tuned secrets. #65
Bug 1717739: Add more RelatedObjects for the must-gather tool #64
Full changelog

cluster-openshift-apiserver-operator

Bug 1718054: Do not log OAuth tokens in audit logs #206
Full changelog

cluster-openshift-controller-manager-operator

Bug 1735709: Respecting resource limits and requests during build. #110
Full changelog

cluster-samples-operator

Bug 1722183: thread safety fix for samples operator condidtion update… #154
Bug 1719037: upgrades while unmanaged/removed broken #152
Full changelog

cluster-storage-operator

Bug 1717640: Add related objects to status #40
Revert “[release-4.1] Bug 1717640: Add related objects to Status” #39
Bug 1717640: Add related objects to Status #38
Full changelog

cluster-version-operator

metrics: add cluster_installer series #229
Bug 1724784: Add a metric that combines the current age of the cluster with the current version #215
Bug 1720308: Give all cluster_version metrics a from_version label so we can identify upgrades without joining metrics #208
Bug 1719958: ClusterVersion version column should be last completed #193
Bug 1720068: metrics: Omit cluster_version{type="completed"} when no rollout has succeeded #205
Bug 1717619: metrics: Report reason as a label on the conditions metric #202
Full changelog

console

Bug 1725936: [release-4.1] Check namespace before deleting it #2209
Bug 1727308: Correctly set CA file for OpenID IDP #1932
Bug 1721146: Tighten node IP query #1729
Bug 1720161: Avoid overlapping text in machine config list #1713
Bug 1717535: Fix edge case evaluating services for a deployment config in console overview #1679
Bug 1722225: Remove misleading route hostname message #1752
Bug 1717996: Fix api-allow-http-and-https NetworkPolicy sample #1640
Bug 1709964: Add kind not found error to provided API page #1604
Bug 1717997: Fix bad YAML indentation in network policy example #1603
Bug 1707631: Monitoring: Fix graph controls layout on mobile #1544
Full changelog

docker-builder

Bug 1713681: bump github.com/containers/buildah and github.com/openshift/source-to-image #77
Full changelog

docker-registry

Bug 1740391: Update make verify for release-4.1 #189
Full changelog

installer, installer-artifacts

asset/cluster: inject installer info when creating #2125
Bug 1722221: [release-4.1] blank api version #1903
Bug 1721619: pkg/types/aws/defaults/platform: Default us-west-2 to m5 #1787
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1731021: Bump jenkins version to 2.176.2 #892
Bug 1731068: Update Jenkins Devtools Owners #890
Bug 1719795: bump login/sync plugin versions for pom repository URL fix #869
Bug 1717033: update requisite plugins for May31-2019 jenkins security… #865
Bug 1714057: update requisite plugins for May21-2019 jenkins security… #860
Bug 1720033: Jun112019 jenkins security advisory #871
Bug 1718379: clean up zombie process in openshift/jenkins agent image… #852
Bug 1711334: fix pod template tracking in the sync plugin so pod temp… #857
Bug 1712240: login plugin account for the jenkins SA certificate diff… #856
Full changelog

machine-config-controller, machine-config-daemon, machine-config-operator, machine-config-server, setup-etcd-environment

Bug 1726866: mcc: fix ignition validation to validate entire ign config #989
Bug 1732166: rotate kubelet CA rotation support [4.1] #1000
Bug 1723928: Add script to generate bootstrap recovery kubeconfig #794
Bug 1723327: sync deployment before controllerconfig, roll out MCDs before MCC and remove pivot’s reboot-needed file #892
Bug 1722887: pkg/operator: Add FailedToSync Reason #879
Bug 1706082: Add Spec.Configuration to MachineConfigPool, render controller writes it #856
Bug 1717738: pkg/operator: expose more resources to must-gather #830
Bug 1713039: etcd quorum guard test does not correctly make nodes unschedulable #822
Bug 1718436: DR: backport fixes #834
Bug 1709907: pkg/daemon: drop spammy logSystem #833
Full changelog

must-gather

Bug 1719454: must-gather does not collect all non-core CRs in the given namespace #107
Bug 1720833: Gather extended network data #101
Bug 1722526: fix filenames for collecting versions and metrics #104
Bug 1722548: collection-scripts/gather: add ns/openshift-etcd #106
Bug 1717994: ensure we collect cluster version information #98
Revert “Bug 1715634: ensure we collect cluster version information” #97
Bug 1715634: ensure we collect cluster version information #96
Full changelog

operator-lifecycle-manager

Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Full changelog

operator-marketplace

Bug 1722096: fix panic when scale down of registry deployment fails #231
Bug 1717509: [status] Populate RelatedObjects #211
Bug 1708503: Fix missing openapi CRD descriptions #219
Full changelog

telemeter

Bug 1732945: jsonnet/telemeter/jsonnetfile.json: Adjust syncs #221
Bug 1732945: Cherry pick 205 to 4.1 branch #222
Bug 1732945: Capture cluster infrastructure metrics #211
metrics: gather cluster_installer series #212
Bug 1737164: Add OLM metrics to whitelist #210
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github