4.1.13

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:212296a41e04176c308bfe169e7c6e05d77b76f403361664c3ce55cd30682a94

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.1.0, 4.1.3

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.1.2

Created: 2019-08-23 16:00:58 +0000 UTC

Image Digest: sha256:212296a41e04176c308bfe169e7c6e05d77b76f403361664c3ce55cd30682a94

Release 4.1.13 was created from registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2019-08-22-165647

Components

Kubernetes 1.13.4

Rebuilt images without code change

azure-machine-controllers git 4986149e sha256:ff0b5875b7ed00ddd67ffe7d19eab775e00d5571b2972c6bf8b5f4344a63bc47
baremetal-machine-controllers git dc5a6b2f sha256:82c38cf14da0b5b5a1d2b57d307fa085f7f4f3d201ca40c95deaebfa9ca4e82f
cluster-autoscaler git 9b2cf49e sha256:f1c62a6be2360caec84fbc21132947b26950b01d19a19427b41318fc0108014e
cluster-autoscaler-operator git dfdc9d81 sha256:00d98fbaa54347d155dedee75a8d33fe53d8ee46278bffb73015530f316725bf
cluster-bootstrap git c040eb0a sha256:831b7b28bac5321f6c17d25bfd308f35d590f5f9560133e1d2a1396ce3a7d0ed
cluster-ingress-operator git 6a306dbf sha256:9f62850e18a26c303220e57f624d87c3ca099c786342f13eaead480d6826a80d
cluster-kube-controller-manager-operator git 1a61c74f sha256:b043fd82149e148118df6a7a1f3f58d54b8577729ba973c68b797d21d9601f62
cluster-machine-approver git 8394330d sha256:9dbe3f514e35d873b2a3471f5e66a9c16e3536af485d4be0941c4cc244391765
cluster-svcat-apiserver-operator git a898d5da sha256:4dacf70f2fe4e163e6fe12b56a2c3463dfd89fcf807ad1f65df2b9edabd598c1
cluster-svcat-controller-manager-operator git 9ac2a145 sha256:62b7907d3940ed16225e57eb686786a1fa5c918f6a9b36d0388094421c6c9171
cluster-update-keys git 704114b5 sha256:a866bebb425f16ee0bf30c78833a4c40476f033b1fb5f24efb617e2af331457b
configmap-reloader git 3c2f8572 sha256:073e30ebd40be48b34384201b6e8934870c62b062f5c15bf00cef11fca9f4191
console-operator git 324d5e1d sha256:1698bf3088087175ac9335afeec6285b85ac1ce75faa898fa9be52b2adfb84b5
container-networking-plugins-supported git a59efc83 sha256:ce096ed7f152abf332c88c97c85ed9938edc0b3eb25daff47bf3110673e466a0
container-networking-plugins-unsupported git a59efc83 sha256:c816788d595add2238cdd482dac423f36c6cfe58402ee9d8d8aa9db7214912de
coredns git fbcb8252 sha256:d50c70c044694f2175320d677887ff2ff0d4e0d7951e348562ca877f95a1dcfb
etcd git 1a054c60 sha256:5ce5708488a0709cd3ede1a034f395a6b0a403c4447fc0287d993596f8409555
grafana git 2ea5517e sha256:c092be80c37046bc5eece0953bc71ef5fda6d915a581789a6f89b33aba3a5505
haproxy-router git d6cbfcc6 sha256:b4c3d15a62188aacb3710555f83d29b5ba1f011693be1111062d6fda4616dea5
k8s-prometheus-adapter git 17d5e940 sha256:c626ddca585ef05a642f299bcebcadd40a5f85e9a43d9756ee0b5d2c96977bab
kube-client-agent git 004fb206 sha256:14cc8ed5406f50eb7ce2167a3bd643d9966c27d6e88eed1457e656408595f2e7
kube-etcd-signer-server git 004fb206 sha256:4295d316841509fb3a68589cad33860f1dcbc9621aaa06806ec3cb08a377b12a
kube-rbac-proxy git 3f271e09 sha256:65207b9cfe48aaefce1c68c73575f9e87ed2d8a4cbc659c10fdd324001ffd0f4
kube-state-metrics git 2ab51c9f sha256:d8fc789cf0559133a8c2034b2a73ffc3903e6a25bca9e3d3292e7dc816ced360
libvirt-machine-controllers git 2705e526 sha256:572250ec4df3574e55c6cab97c8d2e7b24291043a23e02d16b1501794cdd4e2a
machine-api-operator git d958bf50 sha256:8fba164d7b302408b88913262c37082ed7bc38194af685053da9600033af5195
machine-os-content sha256:84cbe5d85c88b58dd9a11935c2084cc3a9a3921c80252b1756e319be294d2a36
multus-cni git e13c5350 sha256:9b15fefdfe633834a19c672a3f1da951bab1f182c57e5a58c37d27f2f4703da7
oauth-proxy git 2653eabc sha256:434359f9a7e6aad4a049ffb862fbad5df2bda41c9ffe2fd1e82a49ad28df02f5
openstack-machine-controllers git baf1b1fa sha256:5052f222f28d95c30747d0b3b6059cf5bfcce680e94038b061ed68d19eba156f
operator-registry git ea142d65 sha256:a2a42776fc859fb0e20330ea8201a11f024e5de1388c07195b395f2ef5a9c21d
ovn-kubernetes git 674977b1 sha256:b0e1392b644d9584b062189045a052bd8ba0659e0ed41a74659029e868c57738
pod git 2f60da39 sha256:27d5c0f1fd4c3b2852ffc3ac67be5c01e8b7531f3d56e67a3098d280d11a88f6
prom-label-proxy git a43debdf sha256:e044822be1aaae01408ba7b415676656866a98e3c15a99ddda9cee167749ec38
prometheus git 625dc242 sha256:7733523fa7879ac73d9c8f699fc6b8953592e0f5a0277d6443dafe4adee3c5d1
prometheus-alertmanager git 39c2c111 sha256:bb0a35093afe163f92c94cc743b22aea00627c131861017a0c9b31d549c37384
prometheus-config-reloader git 73ed419e sha256:bd8c1b67709ebf5bdaf60c95ae53cc2b617d0937067d87353b7fa43b8f61e643
prometheus-node-exporter git 3ab97646 sha256:f6d0b5743286672fabd2f856e704c18490cc8fe676c5f580c0e1e71ceaa6ad01
prometheus-operator git 73ed419e sha256:6d8ab7d04713b76444315ae95b90c9608dc4cae8c20db237ac627482e0857390
service-ca-operator git 3c8ba454 sha256:56ed3b82beb403759dbaea4fa9ddbbd330e287f9e3fd71c83b3ec92c70234822
service-catalog git 1dd02c42 sha256:179b227111da6ccd0094b1abc93835b7a69f6666d691c5bb91f73779b8319d02
sriov-cni git fbafcc81 sha256:c83682d916cbdeb1649a8dba32bbe87efea66d03c14b59879388dae4fa21dec1
sriov-network-device-plugin git f01055e8 sha256:9da2b8100f2495880baf939dae167dd588ab517c04d079edc0974ed274e1c64c

aws-machine-controllers

Bug 1729243: Update vendor kubernetes-drain #238
Bug 1718265: [release-4.1] Stopped instances existing #222
Full changelog

cli, cli-artifacts, deployer, hyperkube, hypershift, node, tests

Bug 1741039: Add ability to read pods to storage-admin users. #23618
Bug 1740264: Dockerfiles: verify package installation #23591
Bug 1739085: Fix multi-version CRD and admission webhook #23580
Bug 1734663: UPSTREAM: 78882: Fix incorrect procMount defaulting #23517
Bug 1733921: ClusterResourceQuota usage is above project usage quota impacting all projects in ClusterResourceQuota #23493
Bug 1732192: CVE-2019-11247: OpenShift 4.1: apiextensions: 404 if request scope does not match crd scope #1529
Bug 1731827: UPSTREAM: 80657: add UID to kubelet_container_log_filesystem_used_bytes [4.1] #23524
Bug 1731913: Add arping to openshift-sdn image #23450
Bug 1722569: Increase limit for signature import #23243
Bug 1729276: Using AWS when a secondary IP address is added the order of the list of InternalIPs is not preserved. #23367
Bug 1720332: images/kube-proxy: update to 4.1, add iptables wrappers #23235
Bug 1728877: restrict SNI config to avoid overriding internal ELB #23357
Bug 1723553: oc delete of a static pod results in multiple attempts to re-create the mirror pod before succeeding #23264
Bug 1726745: Improve Samples Operator test reporting #22905
Bug 1723869: Terminate custom resource watches when storage is destroyed #23267
Bug 1722919: Pin openshift to release-4.1 branches #22848
Bug 1720677: Fix panic in kube-proxy when iptables-save prints to stderr #23190
Bug 1723939: Sort the release changelog by newest pull request first #22837
Bug 1705492: oc adm must-gather command stuck indefinitely #23036
Bug 1723941: [release-4.1] Allow oc adm release info to output digest, name, or pull spec #22977
Bug 1713262: pkg/oc/cli/admin/upgrade: Fix and test sortSemanticVersions #22897
Bug 1712637: use fallback when must-gather imagestream not available #23001
Bug 1718541: Fix egress monitoring for some rare corner cases [4.1] #23096
Bug 1719044: client switch between 3.7 and 3.9 broke creation of clus… #23108
Bug 1718054: must-gather: make sure audit logs do not contain OAuth tokens #23167
Bug 1690087: Increase the wait for the service upgrade e2e test for LB #23203
Full changelog

cloud-credential-operator

Bug 1707827: Enable leader election. #98
Revert “Bug 1726451: Add clusteroperator version level gate.” #90
Bug 1727943: Add clusteroperator version level gate #85
Bug 1723892: Backport removal of memory restrictions for cred operator. #76
Full changelog

cluster-authentication-operator

Bug 1736001: Fix bug where favicon is incorrect (was Shadowman, now OpenShift) #167
Bug 1733978: Correct race between config sync loop and resource syncer [4.1] #162
Bug 1725936: Split handling of degraded across multiple conditions #163
Bug 1729100: [release-4.1] Fix the operator namespace name in its clusteroperator status #149
Full changelog

cluster-config-operator

Bug 1732934: remove defaultservingcert description in apiserver config #75
Full changelog

cluster-dns-operator

Bug 1723936: Set terminationMessagePolicy=FallbackToLogsOnError for DNS operator and operands #112
Full changelog

cluster-image-registry-operator

Bug 1739219: Remove Service CA ConfigMap from CVO management #359
Bug 1714168: Properly setting “maxWaitTime” environment… #357
Bug 1737526: Empty s3 bucket before deleting #351
Bug 1730407: add test for route secrets #321
Bug 1720270: fix handling of TLS secrets for the registry routes #300
Bug 1721685: pkg: add resource requests to node-ca pod #282
Full changelog

cluster-kube-apiserver-operator

Bug 1733232: Fix kube-apiserver-to-kubelet-signer validity #534
Bug 1732945: Fallback to platform type on 4.1 infra metrics #545
Bug 1732945: Report infra provider and feature set metrics #531
Bug 1728754: remove broken default serving cert #519
Bug 1718054: Do not log OAuth tokens in audit logs #500
Full changelog

cluster-kube-scheduler-operator

Bug 1721566: Kube-scheduler-operator entering a permanent degraded state #147
Bug 1721572: Kube-scheduler-operator: backport a test to ensure no regression #146
Full changelog

cluster-monitoring-operator

Bug 1732945: Update telemeter-client deployment #436
Bug 1740373: Add more accurate infrastructure CPU calculations #433
Bug 1732945: jsonnet: update telemeter client deployment #426
Bug 1730413: etcd should still alert when a member disappears from the endpoints #420
Bug 1717634: pkg/client: add support for relatedObjects in status report #375
Bug 1721919: Pin kube-prometheus and telemeter to release branches #354
Full changelog

cluster-network-operator

Bug 1726679: [release-4.1] Put openshift-etcd netnamespace on netid 1 #225
Bug 1712986: [release-4.1] Don’t set a network status at all if we’re not managing networking. #194
Full changelog

cluster-node-tuned

Bug 1739322: Fix plugin_sysctl for tuned 2.11 #22
Full changelog

cluster-node-tuning-operator

Bug 1719967: Implement leader-for-life election. #68
Bug 1718842: Operator-assisted removal of detached tuned secrets. #65
Bug 1717739: Add more RelatedObjects for the must-gather tool #64
Full changelog

cluster-openshift-apiserver-operator

Bug 1718054: Do not log OAuth tokens in audit logs #206
Full changelog

cluster-openshift-controller-manager-operator

Bug 1735709: Respecting resource limits and requests during build. #110
Full changelog

cluster-samples-operator

Bug 1742907: Degraded missing reason detail 41 #175
Bug 1722183: thread safety fix for samples operator condidtion update… #154
Bug 1719037: upgrades while unmanaged/removed broken #152
Full changelog

cluster-storage-operator

Bug 1717640: Add related objects to status #40
Revert “[release-4.1] Bug 1717640: Add related objects to Status” #39
Bug 1717640: Add related objects to Status #38
Full changelog

cluster-version-operator

Bug 1741661: pkg/cvo/metrics: Report cluster-version conditions with reasons #237
metrics: add cluster_installer series #229
Bug 1724784: Add a metric that combines the current age of the cluster with the current version #215
Bug 1720308: Give all cluster_version metrics a from_version label so we can identify upgrades without joining metrics #208
Bug 1719958: ClusterVersion version column should be last completed #193
Bug 1720068: metrics: Omit cluster_version{type="completed"} when no rollout has succeeded #205
Bug 1717619: metrics: Report reason as a label on the conditions metric #202
Full changelog

console

Bug 1741959: Use fieldSelector to filter event #2375
Bug 1725936: [release-4.1] Check namespace before deleting it #2209
Bug 1727308: Correctly set CA file for OpenID IDP #1932
Bug 1721146: Tighten node IP query #1729
Bug 1720161: Avoid overlapping text in machine config list #1713
Bug 1717535: Fix edge case evaluating services for a deployment config in console overview #1679
Bug 1722225: Remove misleading route hostname message #1752
Bug 1717996: Fix api-allow-http-and-https NetworkPolicy sample #1640
Bug 1709964: Add kind not found error to provided API page #1604
Bug 1717997: Fix bad YAML indentation in network policy example #1603
Bug 1707631: Monitoring: Fix graph controls layout on mobile #1544
Full changelog

docker-builder

Bug 1713681: bump github.com/containers/buildah and github.com/openshift/source-to-image #77
Full changelog

docker-registry

Bug 1737379: make the registry the pid 1 process #191
Bug 1740391: Update make verify for release-4.1 #189
Full changelog

installer, installer-artifacts

Bug 1725524: types/aws/default: move ap-northeast-2 to m5 instance class #2213
asset/cluster: inject installer info when creating #2125
Bug 1722221: [release-4.1] blank api version #1903
Bug 1721619: pkg/types/aws/defaults/platform: Default us-west-2 to m5 #1787
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1731021: Bump jenkins version to 2.176.2 #892
Bug 1731068: Update Jenkins Devtools Owners #890
Bug 1719795: bump login/sync plugin versions for pom repository URL fix #869
Bug 1717033: update requisite plugins for May31-2019 jenkins security… #865
Bug 1714057: update requisite plugins for May21-2019 jenkins security… #860
Bug 1720033: Jun112019 jenkins security advisory #871
Bug 1718379: clean up zombie process in openshift/jenkins agent image… #852
Bug 1711334: fix pod template tracking in the sync plugin so pod temp… #857
Bug 1712240: login plugin account for the jenkins SA certificate diff… #856
Full changelog

machine-config-controller, machine-config-daemon, machine-config-operator, machine-config-server, setup-etcd-environment

Bug 1740147: DR: use observed directories vs assumptions for backup_etcd_client_certs #1055
Bug 1726866: mcc: fix ignition validation to validate entire ign config #989
Bug 1732166: rotate kubelet CA rotation support [4.1] #1000
Bug 1723928: Add script to generate bootstrap recovery kubeconfig #794
Bug 1723327: sync deployment before controllerconfig, roll out MCDs before MCC and remove pivot’s reboot-needed file #892
Bug 1722887: pkg/operator: Add FailedToSync Reason #879
Bug 1706082: Add Spec.Configuration to MachineConfigPool, render controller writes it #856
Bug 1717738: pkg/operator: expose more resources to must-gather #830
Bug 1713039: etcd quorum guard test does not correctly make nodes unschedulable #822
Bug 1718436: DR: backport fixes #834
Bug 1709907: pkg/daemon: drop spammy logSystem #833
Full changelog

must-gather

Bug 1726144: Fix BASE_COLLECTION_PATH on gather_network_logs #109
Bug 1719454: must-gather does not collect all non-core CRs in the given namespace #107
Bug 1720833: Gather extended network data #101
Bug 1722526: fix filenames for collecting versions and metrics #104
Bug 1722548: collection-scripts/gather: add ns/openshift-etcd #106
Bug 1717994: ensure we collect cluster version information #98
Revert “Bug 1715634: ensure we collect cluster version information” #97
Bug 1715634: ensure we collect cluster version information #96
Full changelog

operator-lifecycle-manager

Bug 1740174: fix(catalog): re-install resources in existing installplan #977
Bug 1732214: Fix panic when binding already exists #964
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Full changelog

operator-marketplace

Bug 1740824: Fix degraded status on upgrade #241
Bug 1732588: Stop scaling down registry deployment #239
Bug 1722096: fix panic when scale down of registry deployment fails #231
Bug 1717509: [status] Populate RelatedObjects #211
Bug 1708503: Fix missing openapi CRD descriptions #219
Full changelog

telemeter

Bug 1732945: jsonnet/telemeter/jsonnetfile.json: Adjust syncs #221
Bug 1732945: Cherry pick 205 to 4.1 branch #222
Bug 1732945: Capture cluster infrastructure metrics #211
metrics: gather cluster_installer series #212
Bug 1737164: Add OLM metrics to whitelist #210
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github