4.1.17

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:747e0d41ee2f1af8b234e8c96c3291225a120fab3af53ae691afb4f51ce02b85

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.1.8

Created: 2019-09-19 18:04:49 +0000 UTC

Image Digest: sha256:747e0d41ee2f1af8b234e8c96c3291225a120fab3af53ae691afb4f51ce02b85

Release 4.1.17 was created from registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2019-09-19-133205

Components

Kubernetes 1.13.4

Rebuilt images without code change

azure-machine-controllers git 4986149e sha256:294e9d189ef8444ef23a0268277be151a1c607aaa73bca3c5e74ca0c5cf4bca4
baremetal-machine-controllers git dc5a6b2f sha256:b46086423dd5387c5880e84e483bd7759bcf2e26d2d76556b4ec7ec15f4e04e0
cluster-autoscaler git 9b2cf49e sha256:1f0d694b226a09b18ba1dbf3a30728e3fbc0f7de32b9e4090251b9d098d59c76
cluster-autoscaler-operator git dfdc9d81 sha256:e1b333ae772f70b27cdd1de07965141b79a359489af6cd56ab39d0c40f523f6e
cluster-bootstrap git c040eb0a sha256:e4c47c366dcde6f1a7d2fd8cd62ccd5e42a2784c651bd9cbf110c6fa1be1760b
cluster-dns-operator git ec4247dd sha256:b1452b374730a609e9e129506e0cf904b264e5dd8252cf2fb5554ada0cdb1692
cluster-kube-controller-manager-operator git 1a61c74f sha256:0869e9840483609a376b5c9283fcea60e076c8e4ff0e9aab186b2cb3debdddeb
cluster-machine-approver git 8394330d sha256:dd4bde3163a99740ccf2d041cd709b1211a73e0ada625499892f38939f2d9609
cluster-openshift-apiserver-operator git 2728ac11 sha256:5ee952e47afb11f0b18b76e74d663ef88fc78d15a3df18074ee75ec8c58d7019
cluster-storage-operator git bc12489f sha256:1b2b7f5b9a2c8b2a89554d5567abf7b192b7dac903e590f4e11090e209f39369
cluster-svcat-apiserver-operator git a898d5da sha256:0947f39235ebf77de5896f2edc17ce54ffbac6bd5f30096b6b27db520f1731a3
cluster-svcat-controller-manager-operator git 9ac2a145 sha256:fff08dfaa7e84a75713e95b6e5736bde3732c29b8fc433c5580ffdfb094da4a7
cluster-update-keys git 704114b5 sha256:f976a4b86f013e3895bb36347653dcabb2d5b96a21727b68e8e1d72b6829d59e
configmap-reloader git 3c2f8572 sha256:1c2bb24a497725ff2b7ebcda28b687b35492ed2abca6a32805544d41e3e20a57
container-networking-plugins-supported git a59efc83 sha256:cc39957698befd704b208b8b7d0f7ae4cba6059439cba0ffd9dc53b669142675
container-networking-plugins-unsupported git a59efc83 sha256:66203ab9143bf16097c85111aded8dd9e48f14d0417f1215d7b2ace0cdedd0d7
coredns git fbcb8252 sha256:be7735e3c53560fc9514c9f830e7659b18b11346a9e076799ec168c93202463e
docker-builder git e091a6df sha256:8a8135bba68e7d98b6f6af0a7b951ab27b5d8deb4a7e68bc2ed8bad007626ee0
etcd git 1a054c60 sha256:3c90948900ec3804e3bf3f99a8136b7d9b9c7545cbedf7391936e02bf157dcd1
grafana git 2ea5517e sha256:089ced95d2b0b07af68a70b824cee2ae304520d1ccdcd4b9e75e7d43bcf79ac9
k8s-prometheus-adapter git 17d5e940 sha256:35353273e9a8ca63b9c5d7289c6f4bd721dba1a4e9bbd72f697bcc39ba67bf2f
kube-client-agent git 004fb206 sha256:d8dbe476e799dcbcb940b7c9cde5017228ff51487bfda9ebbf4968dd85c49548
kube-etcd-signer-server git 004fb206 sha256:083f4cb282c36b89f99d2e34455a33b95c810cffc5aa6833356a0e63ef3dc78d
kube-rbac-proxy git 3f271e09 sha256:6466fecffda2044a00d7179a9c90c5094e740e1d990d516e4ec8c3c3c75f7463
kube-state-metrics git 2ab51c9f sha256:96721328c3fd6df5f8e43757d1db38895afbe759203a23596ac5f88babb996f1
libvirt-machine-controllers git 2705e526 sha256:a2b27f3287ab19af239cb26402ca6a10897ab5017b8683ab4197fdf5d9893584
machine-os-content sha256:442734cb8d2aa2203968f6b1dd9d76cfc107f295437fd7d69aae0f09752bddea
oauth-proxy git 2653eabc sha256:aa960138ef4a1ad091bdfff6897e933a3146f1337383fc7917093ecf7384b0c1
openstack-machine-controllers git baf1b1fa sha256:a2559714a336cd069873ea76c71699981a182eebbe4689faa3d0ca12f807de0d
ovn-kubernetes git 674977b1 sha256:29555ed1a4b290533c57456a39e54e1bc3a07b403cec5f8d7f47f0f099ffad79
pod git 2f60da39 sha256:c3c12867900ab9451c1aa42d9202f8c2ef33f39bc407eeed4c356469779f6107
prom-label-proxy git a43debdf sha256:76b5e07caf15337e685edaf75dfbc5d88674e39e894c93f15326167e930178b0
prometheus git 625dc242 sha256:52657f7fe52c3497a3e273a10342ecdc95f40dfe58ee3dcd0c1322239ce8fdca
prometheus-alertmanager git 39c2c111 sha256:e9215b128ed62fa573b7e42656816f0a6ca63f7560f5b48bb1eaa588fef5cb0b
prometheus-config-reloader git 73ed419e sha256:9e5ae528472452708460d3671b4e6360cc9ae15d85ae725294f0064c0868142e
prometheus-node-exporter git 3ab97646 sha256:7cf3ac589af6cfc041272083fd345ac01ea61543d504ec60e6abb98da34c01e8
prometheus-operator git 73ed419e sha256:1d9d22fb391f4c3e1848882e53746a7d6ced71e1df4db50eb7201d5d942c0cee
service-ca-operator git 3c8ba454 sha256:059ebeca65168d0f55f1a42e2e952bedefc2da31a18e50f5c32af482b09beb69
service-catalog git 1dd02c42 sha256:10d08281f3e4110622ce88a2d5d838b5d62cccb3950f5537baa49b43d439c001
sriov-cni git fbafcc81 sha256:4dd57192982ba2ae53b5d8087fb5929ec0725a05b6f04d681149a842a56341e6
sriov-network-device-plugin git f01055e8 sha256:8b82f361b8e6d3465e9179d63cbcff18ae9f8952bd7376a2efd983c9dc766038

aws-machine-controllers

Run machine-api directly from cluster-api-actuator-pkg@release-4.1 #259
Full changelog

cli, cli-artifacts, deployer, hyperkube, hypershift, node, tests

Bug 1734003: Unidling: minimize iptables lock contention #23502
Bug 1737656: UPSTREAM: 80436: refactors to kubernetes CP command #23705
Bug 1744995: Request headers fix x509 [4.1] #23660
Bug 1741681: Bump cadvisor [4.1.z] #23619
Bug 1741135: Fix dc adoption #23731
Bug 1740731: Initializing runningPods on SDN bootup for 4.x #23537
Bug 1727917: FlattenListVisitor now continues traversal on errors and returns an aggregate #23671
Bug 1737386: pkg/network: skip OPENSHIFT-MASQ for traffic already marked for masquerade #23548
Bug 1739603: UPSTREAM: 80491: Changed IsCriticalPod to return true in case of static pods [4.1] #23584
Bug 1741499: [4.1] Pass egress IP packets to conntrack #23609
Bug 1740748: apiextensions: 404 if request scope does not match crd scope #23597
Bug 1741039: Add ability to read pods to storage-admin users. #23618
Bug 1740264: Dockerfiles: verify package installation #23591
Bug 1739085: Fix multi-version CRD and admission webhook #23580
Bug 1734663: UPSTREAM: 78882: Fix incorrect procMount defaulting #23517
Bug 1733921: ClusterResourceQuota usage is above project usage quota impacting all projects in ClusterResourceQuota #23493
Bug 1732192: CVE-2019-11247: OpenShift 4.1: apiextensions: 404 if request scope does not match crd scope #1529
Bug 1731827: UPSTREAM: 80657: add UID to kubelet_container_log_filesystem_used_bytes [4.1] #23524
Bug 1731913: Add arping to openshift-sdn image #23450
Full changelog

cloud-credential-operator

Bug 1707827: Enable leader election. #98
Full changelog

cluster-authentication-operator

Bug 1740337: Prevent global sync error degraded status flapping #174
Bug 1744599: Make SNI output stable when multiple ingress domains are configured #191
Bug 1743418: Use specific reasons for all route degraded errors #180
Bug 1736001: Fix bug where favicon is incorrect (was Shadowman, now OpenShift) #167
Bug 1733978: Correct race between config sync loop and resource syncer [4.1] #162
Bug 1725936: Split handling of degraded across multiple conditions #163
Full changelog

cluster-config-operator

Bug 1732934: remove defaultservingcert description in apiserver config #75
Full changelog

cluster-image-registry-operator

Bug 1748995: Add namespace to related objects #384
Bug 1739219: Remove Service CA ConfigMap from CVO management #359
Bug 1714168: Properly setting “maxWaitTime” environment… #357
Bug 1737526: Empty s3 bucket before deleting #351
Full changelog

cluster-ingress-operator

Bug 1740258: fix prometheus integration for multiple ingresscontrollers #290
Full changelog

cluster-kube-apiserver-operator

Bug 1714158: Prevent cert-syncer to act on stale data #557
Bug 1733232: Fix kube-apiserver-to-kubelet-signer validity #534
Bug 1732945: Fallback to platform type on 4.1 infra metrics #545
Bug 1732945: Report infra provider and feature set metrics #531
Full changelog

cluster-kube-scheduler-operator

Bug 1729918: Switch to configobserver pattern #158
Full changelog

cluster-monitoring-operator

Bug 1741055: pkg/client: Set Reason in ClusterOperatorStatusCondition #440
Bug 1745379: Fix many-to-many matching not allowed #457
Bug 1732945: Update telemeter-client deployment #436
Bug 1740373: Add more accurate infrastructure CPU calculations #433
Bug 1732945: jsonnet: update telemeter client deployment #426
Bug 1730413: etcd should still alert when a member disappears from the endpoints #420
Full changelog

cluster-network-operator

Bug 1743587: Adding cni-version to multus daemonset yaml #293
Full changelog

cluster-node-tuned

Bug 1739322: Fix plugin_sysctl for tuned 2.11 #22
Full changelog

cluster-node-tuning-operator

Bug 1741067: Report the “Reason” condition for the ClusterOperator status. #78
Full changelog

cluster-openshift-controller-manager-operator

Bug 1735709: Respecting resource limits and requests during build. #110
Full changelog

cluster-samples-operator

Bug 1743376: Missing openapi CRD definitions for oc explain to work for sample operator CRD #176
Bug 1742907: Degraded missing reason detail 41 #175
Full changelog

cluster-version-operator

Bug 1708697: pkg/cvo: Drop ClusterVersion defaulting during bootstrap #242
Bug 1741661: pkg/cvo/metrics: Report cluster-version conditions with reasons #237
metrics: add cluster_installer series #229
Full changelog

console

Bug 1723706: CSRF updates #2609
Bug 1748727: only logout once if concurrent requests are unauthorized #2590
Bug 1743259: Handle ClusterResourceQuota as a CRD #2426
Bug 1741959: Use fieldSelector to filter event #2375
Bug 1725936: [release-4.1] Check namespace before deleting it #2209
Full changelog

console-operator

Bug 1746103: Fix secret in pod log in 4.1 #278
Full changelog

docker-registry

Bug 1710506: Implementing graceful shutdown. #193
Bug 1737379: make the registry the pid 1 process #191
Bug 1740391: Update make verify for release-4.1 #189
Full changelog

haproxy-router

Bug 1747461: Expose control of the tls settings via router ENV #35
Full changelog

installer, installer-artifacts

Bug 1749624: data/aws/vpc/master-elb: Bump load-balancer timeouts to 20m #2324
Bug 1725524: types/aws/default: move ap-northeast-2 to m5 instance class #2213
asset/cluster: inject installer info when creating #2125
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1743279: Bump plugins versions #922
Bug 1747304: Bump Jenkins to 2.176.3 #921
Bug 1735526: cve-2019-10357: Bump-workflow-cps-global-lib-version-to-2.15 #920
Bug 1731021: Bump jenkins version to 2.176.2 #892
Full changelog

machine-api-operator

cherry-picking #366: Bug 1732929: Modify machine-api-controller clusterrole for daemonsets #393
Full changelog

machine-config-controller, machine-config-daemon, machine-config-operator, machine-config-server, setup-etcd-environment

Bug 1749070: vendor: use cluster-api’s drain lib #1099
[release 4.1] Bug 1741065: Report degraded reason in cluster operator status #1085
Bug 1749271: Backport mcd: Add /run/machine-config-daemon-force stampfile #1086 #1103
Bug 1728873: pkg/daemon: reconcile killed just prior drain+reboot #995
Bug 1745016: [release-4.1] add base templates with default inotify.max_user settings #1080
Bug 1745241: pkg/operator: fix related objects for must-gather #1088
Bug 1743771: pkg/controller/kubelet-config: fix owener reference #1067
Bug 1729510: [release-4.1] backports for drain fixes #1071
Bug 1740147: DR: use observed directories vs assumptions for backup_etcd_client_certs #1055
Bug 1726866: mcc: fix ignition validation to validate entire ign config #989
Bug 1732166: rotate kubelet CA rotation support [4.1] #1000
Full changelog

multus-cni

Bug 1746664: Updates to grpc (and deps) for cve-2019-9511 (z-stream update for 4.1) #26
Bug 1743587: Backporting “cni-version” in entrypoint.sh #20
Full changelog

must-gather

Bug 1735363: must-gather should redact kubectl.kubernetes.io/last-applied-configuration in secrets #116
Bug 1726144: Fix BASE_COLLECTION_PATH on gather_network_logs #109
Full changelog

operator-lifecycle-manager

Bug 1738203: Add relatedObjects to cluster operator status #1004
Bug 1750867: Make packagemanifest list return all valid packages #1037
Bug 1745630: chore(deps): update grpc dependency #1009
Bug 1743748: Report Upgradeable in ClusterOperator status #979
Bug 1737156: feat(metrics): record sync count for Subscriptions, labeled with name and installedCSV #976
Bug 1740174: fix(catalog): re-install resources in existing installplan #977
Bug 1732214: Fix panic when binding already exists #964
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Full changelog

operator-marketplace

Bug 1740824: Fix degraded status on upgrade #241
Bug 1732588: Stop scaling down registry deployment #239
Bug 1722096: fix panic when scale down of registry deployment fails #231
Full changelog

operator-registry

Bug 1745629: chore(deps): update grpc to latest #83
Bug 1732580: Best-effort loading #81
Full changelog

telemeter

Bug 1732945: jsonnet/telemeter/jsonnetfile.json: Adjust syncs #221
Bug 1732945: Cherry pick 205 to 4.1 branch #222
Bug 1732945: Capture cluster infrastructure metrics #211
metrics: gather cluster_installer series #212
Bug 1737164: Add OLM metrics to whitelist #210
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github