4.1.16

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:61ed953962d43cae388cb3c544b4cac358d4675076c2fc0befb236209d5116f7

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Pending jobs

Upgrades from:

4.1.17 (changes) - Success
4.1.15 (changes) - Success Success
4.1.14 (changes) - Success
4.1.13 (changes) - Success
4.1.11 (changes) - Success
4.1.9 (changes) - Success
4.1.8 (changes) - Success
4.1.7 - Success
4.1.6 (changes) - Success
4.1.4 (changes) - Success
4.1.3 (changes) - S F S S F S S S S S S S S

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.1.7

Created: 2019-09-12 21:07:47 +0000 UTC

Image Digest: sha256:61ed953962d43cae388cb3c544b4cac358d4675076c2fc0befb236209d5116f7

Release 4.1.16 was created from registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2019-09-11-214406

Components

Kubernetes 1.13.4

Rebuilt images without code change

azure-machine-controllers git 4986149e sha256:f72959f1d10e8a993e2a95754ecfe8f96f3a6571f05f52d0f418a3724d037a00
baremetal-machine-controllers git dc5a6b2f sha256:71df1a942770bd6a2abb5f89bdc21a6c2c2da5a1e4c38081f96f7ddd41181567
cluster-autoscaler git 9b2cf49e sha256:4ca8090feaaaf1cbace46bc7ded8f0b3a01d989f0f2d5408c2273648ab94c35a
cluster-autoscaler-operator git dfdc9d81 sha256:b6dcdd8027671c9da044127c0aebe17c9e1f9444257404ce1d97c8e06caebfb4
cluster-bootstrap git c040eb0a sha256:d6a90fda7c441da1a1117c55bbd9ae2ba480ea4867850b1a66c8d906fb377fa3
cluster-dns-operator git ec4247dd sha256:9d1d3e4eca10dec2b11d81d5c6fce9cff3ff3e0019b40e0f978084d30f557ee0
cluster-ingress-operator git 6a306dbf sha256:7d2d8592ed5bbf28b609f9297d2c0fb957059bea98ca68cd64ada610e74132b4
cluster-kube-controller-manager-operator git 1a61c74f sha256:de76e70bcbdf36663d1408600d65b02a9fcf7ec64ab7aec629990257c5454c0a
cluster-kube-scheduler-operator git a08eaefe sha256:77862b88d3868000378f7a18a10ed7d9c0babeeb13c0343e0426c07d55b24514
cluster-machine-approver git 8394330d sha256:a9b80cfe887b995ea02fd65a0363b0a9c95657de7120036db46a83143fe98f50
cluster-openshift-apiserver-operator git 2728ac11 sha256:685c8927e5c38234e505674db945a9015c3e152cc030e608e11badcab4e56416
cluster-storage-operator git bc12489f sha256:2f59e894ca59551480edca18805b070ad0d573decce179ad0a103759ad92dba8
cluster-svcat-apiserver-operator git a898d5da sha256:2c26c5ebfb4d4314d0204b140ee4db65c90c125450f7dfbd2e4f11da7d9354b9
cluster-svcat-controller-manager-operator git 9ac2a145 sha256:d365f9dbeb7879e45824fba008b7d57ea9dd5d954e46becd87be8efdf396adba
cluster-update-keys git 704114b5 sha256:63909dfe972991cad06c2633ca4d02a4f13aacca7a9b641c94e5bfcc41abba5f
configmap-reloader git 3c2f8572 sha256:486d6b8888bcb693dcee0b5b70f02582dc1efde0eb25bf023b3db5fb3b4c959f
container-networking-plugins-supported git a59efc83 sha256:f4352879b1ff3a418397c2f68e21b17578956e283ee3e5de549f103e54e374eb
container-networking-plugins-unsupported git a59efc83 sha256:eb5e4dce869861191a4a866f047df965a939fccda3edf541fffa08aa01fc5862
coredns git fbcb8252 sha256:4497b5544c2c1476549560a6fbc43cabe217dc1b654f029eb7ef7e993708523b
docker-builder git e091a6df sha256:3a0e29f09941a6e63a15b9da980861b4dc6bb9bfbde86d102b8a69949d956919
etcd git 1a054c60 sha256:4b881f4a418159295d87aca20e19894f7394bd8fc3c5f413a0adab80bc5a6a92
grafana git 2ea5517e sha256:d91b53aec66513c0bcf1f19bd9928b912ec33f8e7d6d8b8905e6722ee056f9e6
haproxy-router git d6cbfcc6 sha256:a46607cd2b07b093c155a3c193b579d38c2e7652c49a255d1c45057b0090d7af
k8s-prometheus-adapter git 17d5e940 sha256:16b460be1f69a54891ad624daaf35c3fba3105e18890b4396a41fc0d024e4c23
kube-client-agent git 004fb206 sha256:7a1906bdbe21472ae73bd4649049a3db3f52fe28d9a72ad0ba0cf8d067b1ffb1
kube-etcd-signer-server git 004fb206 sha256:fe744e8e051816ade345dacdbcf5574b927d5ac57982d3ebbef801d29d0e88b1
kube-rbac-proxy git 3f271e09 sha256:04771b65d7a720b66018d42864a37635827511bd53ca4d93b700fac5deaae981
kube-state-metrics git 2ab51c9f sha256:6eda0a604f2771e218c89f6ab29f0fa6bd11ff9d36cb6e300c4e9caf9bc95376
libvirt-machine-controllers git 2705e526 sha256:712da1389466489754bd2f8a6ba56880e94631c14486e259c77f2f6052c9557a
machine-os-content sha256:e75fc4b077161894bba2bc081fbd3cf8c8d9278273f1fef4f25c26cdf412301c
oauth-proxy git 2653eabc sha256:8255e643ec19bd11a6a0a90a3aeb9ee6cdcf1a0ac4f3f521ac0a9e51a9a19ef2
openstack-machine-controllers git baf1b1fa sha256:1d74cc969b72ad1ae855703b1cdce5518d7a54cede904603e4f3e33d4ea567a0
ovn-kubernetes git 674977b1 sha256:5379dd4ded1008ebbf3eacb2ca189f5a8b7066efe13834079b0e376b2352958a
pod git 2f60da39 sha256:80010e0dab2b39ef11291b1eaff0eb1d6daedbfc3319e483b66f5cd0cb6659af
prom-label-proxy git a43debdf sha256:62f6cc552b6e8833adae40f1ec569b0e5bab7fd9eb2f1b329a72fc7dee2386e3
prometheus git 625dc242 sha256:62da93a4874849ff97ac429bf8f71cac4c9e149ecc9e1f1af2060787d543eac1
prometheus-alertmanager git 39c2c111 sha256:9c3aa3d574f34b68cad15ccf2b9179e65e7224c2368382160f3802f1e26bc246
prometheus-config-reloader git 73ed419e sha256:2efd57d69eab39a59f53cbec3d50a1e7c112def7e2dfcc276cae39d38bd525ee
prometheus-node-exporter git 3ab97646 sha256:153118fe19de2c9a205bb18c05f31e7830e9a8f257f3d21a08f3f677cb2e80bf
prometheus-operator git 73ed419e sha256:6274380dec1ae46d0fa667ea842d79ca7a13092233ae4ffbad9337ba34ea4669
service-ca-operator git 3c8ba454 sha256:35313d505f39f3d67d8ea03b46e501e5e9cca52fc5b7ede74a2db46d38342ec3
service-catalog git 1dd02c42 sha256:fa85c0b9bd25a482cc3aba68864be10cdbccf79482b32cd222fdba6017f33388
sriov-cni git fbafcc81 sha256:a4afc779e1bca153ea4758d495fd5f9769e0b9f963d5d3dd964f9b14794e8602
sriov-network-device-plugin git f01055e8 sha256:8932e39e513bb9bbbad86f0923491cd5d057d891e92cb54e8f4dbc06192d9649

aws-machine-controllers

Bug 1729243: Update vendor kubernetes-drain #238
Full changelog

cli, cli-artifacts, deployer, hyperkube, hypershift, node, tests

Bug 1737656: UPSTREAM: 80436: refactors to kubernetes CP command #23705
Bug 1744995: Request headers fix x509 [4.1] #23660
Bug 1741681: Bump cadvisor [4.1.z] #23619
Bug 1741135: Fix dc adoption #23731
Bug 1740731: Initializing runningPods on SDN bootup for 4.x #23537
Bug 1727917: FlattenListVisitor now continues traversal on errors and returns an aggregate #23671
Bug 1737386: pkg/network: skip OPENSHIFT-MASQ for traffic already marked for masquerade #23548
Bug 1739603: UPSTREAM: 80491: Changed IsCriticalPod to return true in case of static pods [4.1] #23584
Bug 1741499: [4.1] Pass egress IP packets to conntrack #23609
Bug 1740748: apiextensions: 404 if request scope does not match crd scope #23597
Bug 1741039: Add ability to read pods to storage-admin users. #23618
Bug 1740264: Dockerfiles: verify package installation #23591
Bug 1739085: Fix multi-version CRD and admission webhook #23580
Bug 1734663: UPSTREAM: 78882: Fix incorrect procMount defaulting #23517
Bug 1733921: ClusterResourceQuota usage is above project usage quota impacting all projects in ClusterResourceQuota #23493
Bug 1732192: CVE-2019-11247: OpenShift 4.1: apiextensions: 404 if request scope does not match crd scope #1529
Bug 1731827: UPSTREAM: 80657: add UID to kubelet_container_log_filesystem_used_bytes [4.1] #23524
Bug 1731913: Add arping to openshift-sdn image #23450
Bug 1722569: Increase limit for signature import #23243
Bug 1729276: Using AWS when a secondary IP address is added the order of the list of InternalIPs is not preserved. #23367
Full changelog

cloud-credential-operator

Bug 1707827: Enable leader election. #98
Full changelog

cluster-authentication-operator

Bug 1744599: Make SNI output stable when multiple ingress domains are configured #191
Bug 1743418: Use specific reasons for all route degraded errors #180
Bug 1736001: Fix bug where favicon is incorrect (was Shadowman, now OpenShift) #167
Bug 1733978: Correct race between config sync loop and resource syncer [4.1] #162
Bug 1725936: Split handling of degraded across multiple conditions #163
Bug 1729100: [release-4.1] Fix the operator namespace name in its clusteroperator status #149
Full changelog

cluster-config-operator

Bug 1732934: remove defaultservingcert description in apiserver config #75
Full changelog

cluster-image-registry-operator

Bug 1739219: Remove Service CA ConfigMap from CVO management #359
Bug 1714168: Properly setting “maxWaitTime” environment… #357
Bug 1737526: Empty s3 bucket before deleting #351
Bug 1730407: add test for route secrets #321
Full changelog

cluster-kube-apiserver-operator

Bug 1714158: Prevent cert-syncer to act on stale data #557
Bug 1733232: Fix kube-apiserver-to-kubelet-signer validity #534
Bug 1732945: Fallback to platform type on 4.1 infra metrics #545
Bug 1732945: Report infra provider and feature set metrics #531
Full changelog

cluster-monitoring-operator

Bug 1741055: pkg/client: Set Reason in ClusterOperatorStatusCondition #440
Bug 1745379: Fix many-to-many matching not allowed #457
Bug 1732945: Update telemeter-client deployment #436
Bug 1740373: Add more accurate infrastructure CPU calculations #433
Bug 1732945: jsonnet: update telemeter client deployment #426
Bug 1730413: etcd should still alert when a member disappears from the endpoints #420
Full changelog

cluster-network-operator

Bug 1743587: Adding cni-version to multus daemonset yaml #293
Full changelog

cluster-node-tuned

Bug 1739322: Fix plugin_sysctl for tuned 2.11 #22
Full changelog

cluster-node-tuning-operator

Bug 1741067: Report the “Reason” condition for the ClusterOperator status. #78
Full changelog

cluster-openshift-controller-manager-operator

Bug 1735709: Respecting resource limits and requests during build. #110
Full changelog

cluster-samples-operator

Bug 1742907: Degraded missing reason detail 41 #175
Full changelog

cluster-version-operator

Bug 1741661: pkg/cvo/metrics: Report cluster-version conditions with reasons #237
metrics: add cluster_installer series #229
Full changelog

console

Bug 1723706: CSRF updates #2609
Bug 1748727: only logout once if concurrent requests are unauthorized #2590
Bug 1743259: Handle ClusterResourceQuota as a CRD #2426
Bug 1741959: Use fieldSelector to filter event #2375
Bug 1725936: [release-4.1] Check namespace before deleting it #2209
Full changelog

console-operator

Bug 1746103: Fix secret in pod log in 4.1 #278
Full changelog

docker-registry

Bug 1710506: Implementing graceful shutdown. #193
Bug 1737379: make the registry the pid 1 process #191
Bug 1740391: Update make verify for release-4.1 #189
Full changelog

installer, installer-artifacts

Bug 1749624: data/aws/vpc/master-elb: Bump load-balancer timeouts to 20m #2324
Bug 1725524: types/aws/default: move ap-northeast-2 to m5 instance class #2213
asset/cluster: inject installer info when creating #2125
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1735526: cve-2019-10357: Bump-workflow-cps-global-lib-version-to-2.15 #920
Bug 1731021: Bump jenkins version to 2.176.2 #892
Bug 1731068: Update Jenkins Devtools Owners #890
Full changelog

machine-api-operator

cherry-picking #366: Bug 1732929: Modify machine-api-controller clusterrole for daemonsets #393
Full changelog

machine-config-controller, machine-config-daemon, machine-config-operator, machine-config-server, setup-etcd-environment

[release 4.1] Bug 1741065: Report degraded reason in cluster operator status #1085
Bug 1749271: Backport mcd: Add /run/machine-config-daemon-force stampfile #1086 #1103
Bug 1728873: pkg/daemon: reconcile killed just prior drain+reboot #995
Bug 1745016: [release-4.1] add base templates with default inotify.max_user settings #1080
Bug 1745241: pkg/operator: fix related objects for must-gather #1088
Bug 1743771: pkg/controller/kubelet-config: fix owener reference #1067
Bug 1729510: [release-4.1] backports for drain fixes #1071
Bug 1740147: DR: use observed directories vs assumptions for backup_etcd_client_certs #1055
Bug 1726866: mcc: fix ignition validation to validate entire ign config #989
Bug 1732166: rotate kubelet CA rotation support [4.1] #1000
Full changelog

multus-cni

Bug 1746664: Updates to grpc (and deps) for cve-2019-9511 (z-stream update for 4.1) #26
Bug 1743587: Backporting “cni-version” in entrypoint.sh #20
Full changelog

must-gather

Bug 1735363: must-gather should redact kubectl.kubernetes.io/last-applied-configuration in secrets #116
Bug 1726144: Fix BASE_COLLECTION_PATH on gather_network_logs #109
Full changelog

operator-lifecycle-manager

Bug 1745630: chore(deps): update grpc dependency #1009
Bug 1743748: Report Upgradeable in ClusterOperator status #979
Bug 1737156: feat(metrics): record sync count for Subscriptions, labeled with name and installedCSV #976
Bug 1740174: fix(catalog): re-install resources in existing installplan #977
Bug 1732214: Fix panic when binding already exists #964
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Full changelog

operator-marketplace

Bug 1740824: Fix degraded status on upgrade #241
Bug 1732588: Stop scaling down registry deployment #239
Bug 1722096: fix panic when scale down of registry deployment fails #231
Bug 1717509: [status] Populate RelatedObjects #211
Full changelog

operator-registry

Bug 1745629: chore(deps): update grpc to latest #83
Bug 1732580: Best-effort loading #81
Full changelog

telemeter

Bug 1732945: jsonnet/telemeter/jsonnetfile.json: Adjust syncs #221
Bug 1732945: Cherry pick 205 to 4.1 branch #222
Bug 1732945: Capture cluster infrastructure metrics #211
metrics: gather cluster_installer series #212
Bug 1737164: Add OLM metrics to whitelist #210
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github