4.1.41

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:a8f706d139c8e77d884ccedbf67d69eefd67b66dcf69ee1032b507fe3acbf8c8

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Upgrades to:

4.2.36 (changes) - F F F S F
4.2.34 (changes) - Success Failed
4.2.33 (changes) - Success
4.2.32 (changes) - Success Failed
4.2.30 (changes) - S S F
4.2.0-0.nightly-2021-02-22-141219 (changes) - Success
4.2.0-0.nightly-2021-02-22-022151 (changes) - Success
4.2.0-0.nightly-2021-02-21-162759 (changes) - Success
4.2.0-0.nightly-2021-02-20-201532 (changes) - Success
4.2.0-0.nightly-2021-02-20-161619 (changes) - Success
4.2.0-0.ci-2021-12-20-113037 (changes) - Success
4.2.0-0.ci-2021-12-16-151824 (changes) - Failed
4.2.0-0.ci-2021-12-16-144824 (changes) - Success
4.2.0-0.ci-2021-11-22-182445 (changes) - Success
4.2.0-0.ci-2021-11-17-003117 (changes) - Success
4.2.0-0.ci-2021-02-01-235015 (changes) - S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S F S S S S S F S S S F F S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S F S S S F S S S F S S S S S F S S S S S S S S S S S S S S S S S S S S S S S S S S P S S S S S S S S S S S S S S F S S F S S S F S S S S S S S S S S F S S S S S S S F S F S S S S S S S S F S F S S S S S S F F F F S S F S S S S S S S S F S S S S S S S S S S S S S S S F S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S F F F F S S S S S S S S S F S S S S S F S S S S S S S S S S S S S S S S S S S S S S S S F S S S S S S F S S S S S S S S S F F S S S S S S S S F S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S S F F S F F S S S S S S S S F F S S S S F F S S S S S S S S S S S F F S S F S S S S S S S F S S S S S F S S S S F F S F S S S S S S S S F S S S S F S S S S S S S S S S S S S S S S S S F S S S F S S S S S S S S F S F S S S S S S S S S S S S S S S S S S S S S S S S S S F S S S S F F S S S S F F S S S S F F S S S S S S S S S S S S S S S S S S S S S S S F F F S S F F S F F S S F S F S F S S S S S S S S S S S F S S S S F S S F S S S S S F S S S S F S F S S S S F F S F S S S S S S S S S S S S S S S F S S S S S F S S S S F S S S S S S F S S S S S S S S S S S S S S F S S S S S S S S S S S S S S S F S S S F F S S F S S S S S S S S S S S S S S S S S S S F S S S S S F S S S F S S F S S S S F S S S S F S S F S S S S S S S S S S S S S S S S S S S S S S F F S S F S F S F S F F F F S F S F S F S S F F S S S S S S S F S S S F S S S S F F S S F S S S S S S S S S S F S S S S S S S S S S S S S S S S S S F S S S S S S S F S S S S S S S S S S F F S F S S S F S S S S S S S S S S S S F S S S S F S S S S S F F S S S S S S F S S S S S S S S S F S S S S F S S S S S S S S S S F S S S S S S S F S F S F F S F S S F F S S S S S S S F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F S F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F S
4.2.0-0.ci-2021-01-25-181608 (changes) - S S S S S S S S S S S S S S S S S S S S S S S F F S S S S S S F S F S S S S S S S S S S S S S F S S S F S S S S S S S
4.2.0-0.ci-2021-01-25-174608 (changes) - Failed
4.2.0-0.ci-2021-01-16-051918 (changes) - S S S F S S S S S F S S F F S F S S S S S S S S F S S S S S S S S F S S S S S S S S S S S S S S S S S S S S S S S S F S F S F S S S S S F S S S S S S S S
4.2.0-0.ci-2021-01-09-120434 (changes) - S S S S S S S S S S S S S S S S S S F F S S S S S F F F S S F F F S S S F S S S F S S F F S F S S S S F F S F S S S
4.1.0-0.nightly-2020-07-29-210856 (changes) - F S S F S P F S F F F F S F S F S F F F F S S F F F F F S F F F F F S S S F S F F S S S F S S S S F F S S F S F S F S F S F S F F F S S F S F F F S F F F F F F F F F F F S S S F S F F S S F S S S F S F F S F F F S S F F F S S F F S F F F S S F F F F S F F F S F F F S S S F S F F S S S F S F F F F F F F S S S S S F S S S F F S F S F F F F F S F S S F S F F F F F F S S F S S S F S F S S F S F F S F F S F F F F S S S S S S S F F F S S F F F S F F S F S S F F F F S F F F S F F S F S S F F F S S F S F S F F S S S F S F S F S S F S S F F F F S F F F F S F S F F F S S F S F F F F F F F F S S S F S S F F S S F S S F S S S S S S F S F F F S S F F S F S S F F F F S F S F F F S S S F F S S F S F S F F F F F F S S S
4.1.0-0.nightly-2020-05-28-040321 (changes) - F F S F F S F F S F F F F S F F F S F S F S F S S S S S F F F F F F F S F F S F F F F F S S F S F S S S F F S S F F F F S
4.1.0-0.nightly-2020-05-27-042422 (changes) - Success
4.1.0-0.nightly-2020-05-26-035728 (changes) - Success
4.1.0-0.nightly-2020-05-25-040303 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.1.0

Created: 2020-04-16 12:52:33 +0000 UTC

Image Digest: sha256:a8f706d139c8e77d884ccedbf67d69eefd67b66dcf69ee1032b507fe3acbf8c8

Release 4.1.41 was created from registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2020-04-13-104838

Components

Kubernetes 1.13.4

Rebuilt images without code change

azure-machine-controllers git 4986149e sha256:d62bc5f55ef7460a65ce30a6953c19d10cf59d85368b6f7c0cfed4c57525f412
baremetal-machine-controllers git dc5a6b2f sha256:d36c227134eeb0bd0dd378a80b35dd01d9920c50306865a75a1b6c34c653871d
cluster-autoscaler git 9b2cf49e sha256:b3b6fc7f33b06bd70dcb61dadabb35c4630274a1d1729a88af8140e8d95633b4
cluster-bootstrap git c040eb0a sha256:6f8995d0c2e6194d8b50ac6355be54ef8614986dbbce9faf95a7036bff4b468b
cluster-machine-approver git 8394330d sha256:a32109d0ef75d0d1fe3f2dbe993e4ef32ea5dac2e42d2cb55578819e481874ae
cluster-svcat-apiserver-operator git a898d5da sha256:9e195e60d422b62e22d29df6cfae31479a174b6ab72698881df9f660b373a524
cluster-svcat-controller-manager-operator git 9ac2a145 sha256:6645151ff2ff57262d3cef8e1c52ccb348e6aebe3ef5c0879ebf05f59d115aa4
cluster-update-keys git 704114b5 sha256:e3ebf3ce81a7f1373d68a3cef4b6aff7c957ce834c27e17d5dfc672f9e3bbd5f
configmap-reloader git 3c2f8572 sha256:f9e986061ebde20a77b677daa83a9ca234f178737eb4e7c9f97aa96bdef56468
container-networking-plugins-supported git a59efc83 sha256:3735c202e203cb799a48171f886300f3cf4f3a27babc4652a63fe7cd69f8e19b
container-networking-plugins-unsupported git a59efc83 sha256:46c42a3a1394d3ba63ae1a534a877f6431135917bbd4bb729bdfe8bb112cbea9
coredns git fbcb8252 sha256:9fad37376e4347cf0d1f5c8e817bf32c4ff90e8323fb3c8e24d578b0eba2bad4
etcd git 1a054c60 sha256:7ed8cf12711dab672c2813c231617831dfcf9b87fe52437c6dd8e3a981f2ce97
grafana git 2ea5517e sha256:32040b3520e234da2ba1dcd4b36c3aa4f2bd977290d9c0de6e333f7a772dfa92
k8s-prometheus-adapter git 17d5e940 sha256:ba8cf5b4e057be986bfb460d937435e12a4333be0080f146c927bc22fd01663b
kube-client-agent git 004fb206 sha256:e200ac3651d67d778e95acd881e2279600afbc608639412492a04455b3c46307
kube-etcd-signer-server git 004fb206 sha256:f1d53cb050b1be1f04592ed8c59197d159db2c8515fde6e6cc733c020a501672
kube-rbac-proxy git 3f271e09 sha256:ab22c145422218d7344262bedf8333f253c1409268874c0479d6786ca37e9648
libvirt-machine-controllers git 2705e526 sha256:d126edc5ee66c3f6bbbd2e460e8a178fbc3d3299497388bb9fd802d4b0b6e1c2
machine-os-content sha256:b158132abe72f37b80ef2da8db118215f424f43838dae2f806f84749ca05a974
openstack-machine-controllers git baf1b1fa sha256:392b4a0ec43a19dd75041a02ce1e4685e6d4676a7e206a82ba1d2fe692970c00
ovn-kubernetes git 674977b1 sha256:eb93e0ba45d3546873e52f9bb8821f6f1234c3c9b48231d6759c27deb9398e73
pod git 2f60da39 sha256:5011479920da7bc2a3aee60b2dce74fb95bb04f0f11fd248cbe55858b2ad4093
prom-label-proxy git a43debdf sha256:f0938de6ad14e4ef948bce69b73c94c225bc4d6e1e8eb9ddc4799dd7317b4bed
prometheus git 625dc242 sha256:032bc46dee411f0b98870ce5bc11a4c641f65ce654c06d70fff3a530c7c6bba8
prometheus-alertmanager git 39c2c111 sha256:cae6ed375e005f1cba8f8ed1d9b61d535f6fa6f17e0ac1a37c4be289e2e695b5
prometheus-config-reloader git 73ed419e sha256:b998beb7e279c207250f229fa0172020dcdeda2210430ea26992f024b3030cad
prometheus-node-exporter git 3ab97646 sha256:572476640cb0ef898278fded4bb47a789bc1ba98c5931b76d1c11a6a6da0a057
prometheus-operator git 73ed419e sha256:a2c4b78045130d41d512ac308f47a1d6f2a28ca16e7a350f9815d08a1f7b7db4
service-ca-operator git 3c8ba454 sha256:00986f649b632a91f7dd035439751b365838570fc46df153d6b86d103f8a4218
service-catalog git 1dd02c42 sha256:f0e8f618c2b0fc5a23361f08145d36a1c5a38621be585e0c86375f96a8475f63
sriov-cni git fbafcc81 sha256:f325abd6e4bc7edeb8dea06a4ad60d1b68587705650b3d2acb35b6f7d4b93928

aws-machine-controllers

Bug 1732929: Pin dependencies to 4.1 #253
Run machine-api directly from cluster-api-actuator-pkg@release-4.1 #259
Bug 1729243: Update vendor kubernetes-drain #238
Bug 1718265: [release-4.1] Stopped instances existing #222
Full changelog

cli, cli-artifacts, deployer, hyperkube, hypershift, node, tests

Bug 1784882: fix up ruby-25-centos7 tag check logic #24326
Bug 1759182: Add a RBAC checker for external IP ranger #23826
Bug 1754681: add build ca bundle to init containers #24130
Bug 1728131: Bump dependencies #24245
Bug 1772904: [4.1] Clean up egress IPs on startup #24160
Bug 1739262: RequestHeaders IdP: fix TLS handshake [4.1] #24124
Bug 1741417: UPSTREAM: 81330: Hide bearer token in logs #24218
Bug 1775757: KubeAPI server doesn’t accept large patch requests #24191
Bug 1758159: aws: sort addresses of multiple interfaces correctly [4.1] #23909
Bug 1764147: don’t install CRD SCC types into global scheme #24061
Bug 1769951: [4.1.z] Fix origin tests #24176
Bug 1718487: fix CVE-2019-11244: kubectl –http-cache=<world-accessible dir> #23942
Bug 1761809: Informers can miss notifications #23966
Bug 1753071: Skip alert test when test environment is known to be skewed #23862
Remove Travis CI definition from this repo #23982
Bug 1758233: NetworkPolicy performance fixes [4.1] #23912
Bug 1756458: Separate upgrade flags for safety instead of abusing force #23875
Bug 1757046: Sanitize user input when erroring on an unknown redirect handler [4.1] #23884
Bug 1753500: UPSTREAM: 82503 #23934
Bug 1757712: CVE-2019-11253 billion laughs #23946
Bug 1750809: [4.1] Fix bootstrap IdP challenges ruining RequestHeaders IdP #23767
Bug 1713671: Move extended build tests from ruby:2.x to ruby:2.5 #23785
Bug 1753071: Allow certain tests to be skipped when performing skew testing #23821
Bug 1752983: Ensure the OLM e2e test loops correctly #23817
Bug 1734003: Unidling: minimize iptables lock contention #23502
Bug 1737656: UPSTREAM: 80436: refactors to kubernetes CP command #23705
Bug 1744995: Request headers fix x509 [4.1] #23660
Bug 1741681: Bump cadvisor [4.1.z] #23619
Bug 1741135: Fix dc adoption #23731
Bug 1740731: Initializing runningPods on SDN bootup for 4.x #23537
Bug 1727917: FlattenListVisitor now continues traversal on errors and returns an aggregate #23671
Bug 1737386: pkg/network: skip OPENSHIFT-MASQ for traffic already marked for masquerade #23548
Bug 1739603: UPSTREAM: 80491: Changed IsCriticalPod to return true in case of static pods [4.1] #23584
Bug 1741499: [4.1] Pass egress IP packets to conntrack #23609
Bug 1740748: apiextensions: 404 if request scope does not match crd scope #23597
Bug 1741039: Add ability to read pods to storage-admin users. #23618
Bug 1740264: Dockerfiles: verify package installation #23591
Bug 1739085: Fix multi-version CRD and admission webhook #23580
Bug 1734663: UPSTREAM: 78882: Fix incorrect procMount defaulting #23517
Bug 1733921: ClusterResourceQuota usage is above project usage quota impacting all projects in ClusterResourceQuota #23493
Bug 1732192: CVE-2019-11247: OpenShift 4.1: apiextensions: 404 if request scope does not match crd scope #1529
Bug 1731827: UPSTREAM: 80657: add UID to kubelet_container_log_filesystem_used_bytes [4.1] #23524
Bug 1731913: Add arping to openshift-sdn image #23450
Bug 1722569: Increase limit for signature import #23243
Bug 1729276: Using AWS when a secondary IP address is added the order of the list of InternalIPs is not preserved. #23367
Bug 1720332: images/kube-proxy: update to 4.1, add iptables wrappers #23235
Bug 1728877: restrict SNI config to avoid overriding internal ELB #23357
Bug 1723553: oc delete of a static pod results in multiple attempts to re-create the mirror pod before succeeding #23264
Bug 1726745: Improve Samples Operator test reporting #22905
Bug 1723869: Terminate custom resource watches when storage is destroyed #23267
Bug 1722919: Pin openshift to release-4.1 branches #22848
Bug 1720677: Fix panic in kube-proxy when iptables-save prints to stderr #23190
Bug 1723939: Sort the release changelog by newest pull request first #22837
Bug 1705492: oc adm must-gather command stuck indefinitely #23036
Bug 1723941: [release-4.1] Allow oc adm release info to output digest, name, or pull spec #22977
Bug 1713262: pkg/oc/cli/admin/upgrade: Fix and test sortSemanticVersions #22897
Bug 1712637: use fallback when must-gather imagestream not available #23001
Bug 1718541: Fix egress monitoring for some rare corner cases [4.1] #23096
Bug 1719044: client switch between 3.7 and 3.9 broke creation of clus… #23108
Bug 1718054: must-gather: make sure audit logs do not contain OAuth tokens #23167
Bug 1690087: Increase the wait for the service upgrade e2e test for LB #23203
Bug 1710561: use pager to get images for pruning #22845
Bug 1718375: hardcode a small list of mappings to allow SDN to rebootstrap #23086
Bug 171309: backport prometheus client_go race fix to 4.1 #23035
Fix abort-at=random on upgrade tests #22864
Bug 1715020: oauth validation: don’t allow multiple IdPs in single IdP object #22959
test-extended: test MCS is blocked for pods and CMA does not approve random CSRs #22957
Bug 1715055: Work around a kernel bug in the assign-macvlan code [4.1] #22942
UPSTREAM: 77426: Remove terminated pod from summary api #22890
Full changelog

cloud-credential-operator

Bug 1747165: utilize the permissionBoundary of the current user if available #114
Bug 1707827: Enable leader election. #98
Revert “Bug 1726451: Add clusteroperator version level gate.” #90
Bug 1727943: Add clusteroperator version level gate #85
Bug 1723892: Backport removal of memory restrictions for cred operator. #76
Full changelog

cluster-authentication-operator

Bug 1734621: bump(library-go): hide secrets in logs #216
Bug 1740337: Prevent global sync error degraded status flapping #174
Bug 1744599: Make SNI output stable when multiple ingress domains are configured #191
Bug 1743418: Use specific reasons for all route degraded errors #180
Bug 1736001: Fix bug where favicon is incorrect (was Shadowman, now OpenShift) #167
Bug 1733978: Correct race between config sync loop and resource syncer [4.1] #162
Bug 1725936: Split handling of degraded across multiple conditions #163
Bug 1729100: [release-4.1] Fix the operator namespace name in its clusteroperator status #149
Full changelog

cluster-autoscaler-operator

Bug 1779745: Don’t suppress errors when reporting operator status #127
Full changelog

cluster-config-operator

Bug 1732934: remove defaultservingcert description in apiserver config #75
Full changelog

cluster-dns-operator

Bug 1723936: Set terminationMessagePolicy=FallbackToLogsOnError for DNS operator and operands #112
Full changelog

cluster-image-registry-operator

Bug 1769691: Report Available when registry is explicitly Removed #414
Bug 1769691: Set Version on Operator status even if Removed. #409
Bug 1752918: add config resource to relatedObjects #388
Bug 1710506: Using trap to deal with signaling on node-ca. #381
Bug 1748995: Add namespace to related objects #384
Bug 1739219: Remove Service CA ConfigMap from CVO management #359
Bug 1714168: Properly setting “maxWaitTime” environment… #357
Bug 1737526: Empty s3 bucket before deleting #351
Bug 1730407: add test for route secrets #321
Bug 1720270: fix handling of TLS secrets for the registry routes #300
Bug 1721685: pkg: add resource requests to node-ca pod #282
Full changelog

cluster-ingress-operator

Bug 1740258: fix prometheus integration for multiple ingresscontrollers #290
Full changelog

cluster-kube-apiserver-operator

Bug 1758962: bump(github.com/openshift/library-go): hide secrets in logs #646
Bug 1714158: Prevent cert-syncer to act on stale data #557
Bug 1733232: Fix kube-apiserver-to-kubelet-signer validity #534
Bug 1732945: Fallback to platform type on 4.1 infra metrics #545
Bug 1732945: Report infra provider and feature set metrics #531
Bug 1728754: remove broken default serving cert #519
Bug 1718054: Do not log OAuth tokens in audit logs #500
Bug 1716426: Backport admission controller fixes #496
Bug 1716622: start informers after lister registration #492
Full changelog

cluster-kube-controller-manager-operator

Bug 1810186: Remove wildcard COPY form Dockerfile #373
Bug 1781240: Fix leader election configmap deletion recovery #324
Bug 1758963: hide secrets in logs #315
Bug 1716622: start informers after lister registration #257
Full changelog

cluster-kube-scheduler-operator

Bug 1810186: Remove wildcard COPY form Dockerfile #223
Bug 1758961: hide secrets in logs #187
Bug 1729918: Switch to configobserver pattern #158
Bug 1721566: Kube-scheduler-operator entering a permanent degraded state #147
Bug 1721572: Kube-scheduler-operator: backport a test to ensure no regression #146
Bug 1718027: Fix operator status reporting for perm-degraded #141
Full changelog

cluster-monitoring-operator

Bug 1746716: grafana: Set default admin user to impossible openshift user #632
Bug 1750283: Fix label as backport needs beta but 4.2 does not #528
Bug 1750283: Bump telemeter-client #524
Bug 1746711: fix client reload port #505
Bug 1750283: Backport metric for core capacity by node role and operating system. #497
Bug 1741055: pkg/client: Set Reason in ClusterOperatorStatusCondition #440
Bug 1745379: Fix many-to-many matching not allowed #457
Bug 1732945: Update telemeter-client deployment #436
Bug 1740373: Add more accurate infrastructure CPU calculations #433
Bug 1732945: jsonnet: update telemeter client deployment #426
Bug 1730413: etcd should still alert when a member disappears from the endpoints #420
Bug 1717634: pkg/client: add support for relatedObjects in status report #375
Bug 1721919: Pin kube-prometheus and telemeter to release branches #354
Bug 1713620: jsonnet: use correct etcd namespace #360
Full changelog

cluster-network-operator

Bug 1743587: Adding cni-version to multus daemonset yaml #293
Bug 1726679: [release-4.1] Put openshift-etcd netnamespace on netid 1 #225
Bug 1712986: [release-4.1] Don’t set a network status at all if we’re not managing networking. #194
Full changelog

cluster-node-tuned

Bug 1772802: Improve scalability of openshift-tuned. #33
Bug 1739322: Fix plugin_sysctl for tuned 2.11 #22
Full changelog

cluster-node-tuning-operator

Bug 1769470: Use net.ipv4.conf.all.arp_announce=2 in the openshift profile. #92
Bug 1741067: Report the “Reason” condition for the ClusterOperator status. #78
Bug 1719967: Implement leader-for-life election. #68
Bug 1718842: Operator-assisted removal of detached tuned secrets. #65
Bug 1717739: Add more RelatedObjects for the must-gather tool #64
Vendor-in latest version of maintained go-bindata. #61
Do not update service account when it is already created. #59
Remove pkg/manifests/bindata.go from the repo, generate it. #56
assests: fix duplicate resources key in container spec #55
Full changelog

cluster-openshift-apiserver-operator

Bug 1737322: Stop logging secrets #266
Bug 1718054: Do not log OAuth tokens in audit logs #206
Full changelog

cluster-openshift-controller-manager-operator

Bug 1735709: Respecting resource limits and requests during build. #110
Full changelog

cluster-samples-operator

Bug 1743376: Missing openapi CRD definitions for oc explain to work for sample operator CRD #176
Bug 1742907: Degraded missing reason detail 41 #175
Bug 1722183: thread safety fix for samples operator condidtion update… #154
Bug 1719037: upgrades while unmanaged/removed broken #152
Full changelog

cluster-storage-operator

Bug 1717640: Add related objects to status #40
Revert “[release-4.1] Bug 1717640: Add related objects to Status” #39
Bug 1717640: Add related objects to Status #38
Full changelog

cluster-version-operator

Bug 1792015: lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required #301
Bug 1763823: pkg/payload/task_graph: Canceling the task graph partway though is an error even if no tasks fail #263
Bug 1762920: install: add alerts for cluster-version-operator #261
Bug 1759712: pkg/cvo/status: Don’t clobber last.CompletionTime when adding new entries #251
Bug 1708697: pkg/cvo: Drop ClusterVersion defaulting during bootstrap #242
Bug 1741661: pkg/cvo/metrics: Report cluster-version conditions with reasons #237
metrics: add cluster_installer series #229
Bug 1724784: Add a metric that combines the current age of the cluster with the current version #215
Bug 1720308: Give all cluster_version metrics a from_version label so we can identify upgrades without joining metrics #208
Bug 1719958: ClusterVersion version column should be last completed #193
Bug 1720068: metrics: Omit cluster_version{type="completed"} when no rollout has succeeded #205
Bug 1717619: metrics: Report reason as a label on the conditions metric #202
Full changelog

console

Bug 1790711: Remove nightly-4.1 channel from console #3972
Bug 1784870: Fix display of boolean values #3921
Bug 1780254: webpack: include contenthash in CSS filenames #3687
Bug 1759667: Add the official 4.2 channels to cluster upgrade settings #2935
Bug 1758636: Add prerelease-4.2 to channel options #2916
Bug 1723706: CSRF updates #2609
Bug 1748727: only logout once if concurrent requests are unauthorized #2590
Bug 1743259: Handle ClusterResourceQuota as a CRD #2426
Bug 1741959: Use fieldSelector to filter event #2375
Bug 1725936: [release-4.1] Check namespace before deleting it #2209
Bug 1727308: Correctly set CA file for OpenID IDP #1932
Bug 1721146: Tighten node IP query #1729
Bug 1720161: Avoid overlapping text in machine config list #1713
Bug 1717535: Fix edge case evaluating services for a deployment config in console overview #1679
Bug 1722225: Remove misleading route hostname message #1752
Bug 1717996: Fix api-allow-http-and-https NetworkPolicy sample #1640
Bug 1709964: Add kind not found error to provided API page #1604
Bug 1717997: Fix bad YAML indentation in network policy example #1603
Bug 1707631: Monitoring: Fix graph controls layout on mobile #1544
Full changelog

console-operator

Bug 1769375: manifests: add resource requests to downloads pod #341
Bug 1746103: Fix secret in pod log in 4.1 #278
Full changelog

docker-builder

Bug 1754681: do not force skip tls verify to true on image source injection #112
Bug 1754696: Bump containers/{storage,image,buildah} #94
Bug 1713671: toggle ssh parameters if ssh-auth source secret includes a known_host… #97
Bug 1713681: bump github.com/containers/buildah and github.com/openshift/source-to-image #77
Full changelog

docker-registry

Use Spyglass-compatible name for junit reports #214
Bug 1766110: Checking if image name is valid, prune otherwise #198
Bug 1710506: Implementing graceful shutdown. #193
Bug 1737379: make the registry the pid 1 process #191
Bug 1740391: Update make verify for release-4.1 #189
Full changelog

haproxy-router

Bug 1758374: fix haproxy reload crash when processing ECDSA keys #45
Bug 1752521: Respect route targetPort in dynamic config #37
Bug 1747461: Expose control of the tls settings via router ENV #35
Full changelog

installer, installer-artifacts

Bug 1749624: data/aws/vpc/master-elb: Bump load-balancer timeouts to 20m #2324
Bug 1725524: types/aws/default: move ap-northeast-2 to m5 instance class #2213
asset/cluster: inject installer info when creating #2125
Bug 1722221: [release-4.1] blank api version #1903
Bug 1721619: pkg/types/aws/defaults/platform: Default us-west-2 to m5 #1787
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1810393: 4.1 2.204.2 and plugins updates #1033
Bug 1764466: 4.1 bz 1764466 cve 2019 10431 #982
Bug 1767479: Bump openshift-jenkins-login-plugin to version 1.0.20 #930
Bug 1743279: Bump plugins versions #922
Bug 1747304: Bump Jenkins to 2.176.3 #921
Bug 1735526: cve-2019-10357: Bump-workflow-cps-global-lib-version-to-2.15 #920
Bug 1731021: Bump jenkins version to 2.176.2 #892
Bug 1731068: Update Jenkins Devtools Owners #890
Bug 1719795: bump login/sync plugin versions for pom repository URL fix #869
Bug 1717033: update requisite plugins for May31-2019 jenkins security… #865
Bug 1714057: update requisite plugins for May21-2019 jenkins security… #860
Bug 1720033: Jun112019 jenkins security advisory #871
Bug 1718379: clean up zombie process in openshift/jenkins agent image… #852
Bug 1711334: fix pod template tracking in the sync plugin so pod temp… #857
Bug 1712240: login plugin account for the jenkins SA certificate diff… #856
Full changelog

kube-state-metrics

Bug 1755757: store: add kube_node_role metric #17
Full changelog

machine-api-operator

cherry-picking #366: Bug 1732929: Modify machine-api-controller clusterrole for daemonsets #393
Full changelog

machine-config-controller, machine-config-daemon, machine-config-operator, machine-config-server, setup-etcd-environment

Bug 1766515: pkg/daemon: remove force validation file if it exists #1147
Bug 1782153: templates: Add a “this is generated” note #1382
Bug 1764719: kubelet: add dependency on network-online.target #1240
Bug 1755558: Ensure ETCD_INITIAL_CLUSTER is preserved during restore #1135
Bug 1741608: logs are flooded with “failed to get pod stats: failed to get imageFs info: non-existent label “crio-images”” messages #1119
BUG 1762344: backport 1069: Do not requeue a failed kubeletconfig decode #1179
Bug 1763638: [release-4.1] pkg/operator: fix race between images CM and MCO #1197
Bug 1757209: Do not requeue a failed kubeletconfig decode #1140
Bug 1758345: [release-4.1] pkg/daemon: default drain grace period to -1 #1166
Bug 1753293: kubelet: remove runtimeRequestTimeout #1121
Bug 1754924: Makefile: pin tools to specific versions #1132
Bug 1749070: vendor: use cluster-api’s drain lib #1099
[release 4.1] Bug 1741065: Report degraded reason in cluster operator status #1085
Bug 1749271: Backport mcd: Add /run/machine-config-daemon-force stampfile #1086 #1103
Bug 1728873: pkg/daemon: reconcile killed just prior drain+reboot #995
Bug 1745016: [release-4.1] add base templates with default inotify.max_user settings #1080
Bug 1745241: pkg/operator: fix related objects for must-gather #1088
Bug 1743771: pkg/controller/kubelet-config: fix owener reference #1067
Bug 1729510: [release-4.1] backports for drain fixes #1071
Bug 1740147: DR: use observed directories vs assumptions for backup_etcd_client_certs #1055
Bug 1726866: mcc: fix ignition validation to validate entire ign config #989
Bug 1732166: rotate kubelet CA rotation support [4.1] #1000
Bug 1723928: Add script to generate bootstrap recovery kubeconfig #794
Bug 1723327: sync deployment before controllerconfig, roll out MCDs before MCC and remove pivot’s reboot-needed file #892
Bug 1722887: pkg/operator: Add FailedToSync Reason #879
Bug 1706082: Add Spec.Configuration to MachineConfigPool, render controller writes it #856
Bug 1717738: pkg/operator: expose more resources to must-gather #830
Bug 1713039: etcd quorum guard test does not correctly make nodes unschedulable #822
Bug 1718436: DR: backport fixes #834
Bug 1709907: pkg/daemon: drop spammy logSystem #833
Bug 1702626: pkg/daemon: reconcile if we lost annotations #821
Full changelog

multus-cni

Bug 1746664: Updates to grpc (and deps) for cve-2019-9511 (z-stream update for 4.1) #26
Bug 1743587: Backporting “cni-version” in entrypoint.sh #20
Full changelog

must-gather

Bug 1735363: must-gather should redact kubectl.kubernetes.io/last-applied-configuration in secrets #116
Bug 1726144: Fix BASE_COLLECTION_PATH on gather_network_logs #109
Bug 1719454: must-gather does not collect all non-core CRs in the given namespace #107
Bug 1720833: Gather extended network data #101
Bug 1722526: fix filenames for collecting versions and metrics #104
Bug 1722548: collection-scripts/gather: add ns/openshift-etcd #106
Bug 1717994: ensure we collect cluster version information #98
Revert “Bug 1715634: ensure we collect cluster version information” #97
Bug 1715634: ensure we collect cluster version information #96
Full changelog

oauth-proxy

Bug 1762750: Fix high memory usage #138
Bug 1748212: [4.1]: Tighten cipher usage #130
Full changelog

operator-lifecycle-manager

Bug 1791850: Removing license year #1242
Bug 1775253: make certificate updates live upon update #1172
Bug 1763750: Prioritize APIs from same CatSrc #1110
[Release 4.1] Bug 1767846: Manual approval strategy ignored for subsequent releases #1107
Bug 1740857: Backport grpc sourcemanager to 4.1 #1043
Bug 1755646: Cleanup leftover cross-namespace OwnerReferences #1049
Bug 1753394: include git sha in ART builds #1044
Bug 1738203: Add relatedObjects to cluster operator status #1004
Bug 1750867: Make packagemanifest list return all valid packages #1037
Bug 1745630: chore(deps): update grpc dependency #1009
Bug 1743748: Report Upgradeable in ClusterOperator status #979
Bug 1737156: feat(metrics): record sync count for Subscriptions, labeled with name and installedCSV #976
Bug 1740174: fix(catalog): re-install resources in existing installplan #977
Bug 1732214: Fix panic when binding already exists #964
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Full changelog

operator-marketplace

Bug 1740824: Fix degraded status on upgrade #241
Bug 1732588: Stop scaling down registry deployment #239
Bug 1722096: fix panic when scale down of registry deployment fails #231
Bug 1717509: [status] Populate RelatedObjects #211
Bug 1708503: Fix missing openapi CRD descriptions #219
Full changelog

operator-registry

Bug 1745273: feat(load): allow multiple csvs in the same directory #66
Bug 1751388: fix(query): return all channels when querying #91
Bug 1745629: chore(deps): update grpc to latest #83
Bug 1732580: Best-effort loading #81
Full changelog

sriov-network-device-plugin

Bug 1746661: glide update (#174) #19
Full changelog

telemeter

Bug 1750283: Backport bug 1749451 for whitelisting of cpu core node role metric. #252
Bug 1746711: fix client reload port #245
Bug 1732945: jsonnet/telemeter/jsonnetfile.json: Adjust syncs #221
Bug 1732945: Cherry pick 205 to 4.1 branch #222
Bug 1732945: Capture cluster infrastructure metrics #211
metrics: gather cluster_installer series #212
Bug 1737164: Add OLM metrics to whitelist #210
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github