4.1.18

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:420633acf3fc7572372fe2df758152f6ab1f53a21c79a6c4b741fa0394c7df3a

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Pending jobs

Upgrades from:

Untested upgrades: 4.1.3

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.1.8

Created: 2019-09-24 13:46:14 +0000 UTC

Image Digest: sha256:420633acf3fc7572372fe2df758152f6ab1f53a21c79a6c4b741fa0394c7df3a

Release 4.1.18 was created from registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2019-09-21-195243

Components

Kubernetes 1.13.4

Rebuilt images without code change

azure-machine-controllers git 4986149e sha256:cabf04224ed589634b055b254c1ed64ff7a4398cedbd2e1d2ca52f731c8347d3
baremetal-machine-controllers git dc5a6b2f sha256:2c0e0fe2763ca30ea369cbecc0381ed454441271cb6ad6f20ec94275105d35f4
cluster-autoscaler git 9b2cf49e sha256:7478adafc60cba415336a9f20694de6080ab9465242f2072cb338466c2a72973
cluster-autoscaler-operator git dfdc9d81 sha256:e1670c2b28abc5d5cb4fe5ccd304a724651442840f154bc97fdf9cc3b6e1d4f6
cluster-bootstrap git c040eb0a sha256:13578f194ed06cc655d93d1868ad2645f0d13bbbf72561dc7dca665e3d33181e
cluster-dns-operator git ec4247dd sha256:6a57cf4d52f44b3087fc91157186037975160e8e1aae8247b728eb8e744ef834
cluster-kube-controller-manager-operator git 1a61c74f sha256:a4cf16bd7ee899ca0906bf070eb90af9b894ec9ded6cd5fb2ab159a1a7ce8d9a
cluster-machine-approver git 8394330d sha256:608ffc384091399b9ef4aff25c217b3a505553b16be440c1fdd124bff0467d7b
cluster-openshift-apiserver-operator git 2728ac11 sha256:1b6b87c08068aa738eb64804973238cee3d64b098ec1b6edb179dfb1865133ff
cluster-storage-operator git bc12489f sha256:89ec165a1590fae30c06989216e42c0f5d45e75dd019b51374addb2a41793335
cluster-svcat-apiserver-operator git a898d5da sha256:90e15fd9d89af7dd5bfd822081268dd54c66f96066f58b7084083ec5da0ff302
cluster-svcat-controller-manager-operator git 9ac2a145 sha256:4564e0350817bb5f64dfa248d73cb1d3e1341a98ba3b660970411c887ecec506
cluster-update-keys git 704114b5 sha256:af7df0ec4796bfebe8a17242aee10f682151a2f200ff1d973fd31f4b6e93e035
configmap-reloader git 3c2f8572 sha256:a8b56d286684a07d45e33294bc402c446df599b35aa806376e6a5b598d0731f6
container-networking-plugins-supported git a59efc83 sha256:caf943952c2fac2718cd705ca6b682d6716add0355c07cb629b6cde0c0fa0aed
container-networking-plugins-unsupported git a59efc83 sha256:6da503d2c0cd4c57699b6539f7bc5a1ec111a76ce966c04fac88a1026367d673
coredns git fbcb8252 sha256:c9e82ff7f5744062c4d251ff89ef04f45d7b9dfa17ea01a1c4092c4e1fd2b541
docker-builder git e091a6df sha256:decbd4a5d1a1660f5cc541bfb2664a73689d6ba8215e2729111ce3d94315ccf2
etcd git 1a054c60 sha256:a5485105750a927b44c88b802a1fd5866c38e73e0442d7ea3a23eed33fa46643
grafana git 2ea5517e sha256:2ee6355d3919c77e3ff69a22ce1462fe4050de429a1b812e878e1034fb16ba81
k8s-prometheus-adapter git 17d5e940 sha256:b757a5e82de21d18f98070d4e2ab63e319308d888ec365d52259a4cbb622bd47
kube-client-agent git 004fb206 sha256:913a536e4c464168312c7d05644a3d846ad5afa338ccb4aff5afbb5fd9b0fda8
kube-etcd-signer-server git 004fb206 sha256:860298169af82f555306262798378f609a9573c8007803d8a1fd929ee215d8e8
kube-rbac-proxy git 3f271e09 sha256:8c2b0c25403471c140d5cda806f514014804018491f8770e91883f665370893f
kube-state-metrics git 2ab51c9f sha256:9c432aa0cedb95eb9d1b4dea1db9062870bbb8f0117672c662761dd10f268826
libvirt-machine-controllers git 2705e526 sha256:617be53b8c2f6979783352fef2533f9b4cf7ed223b517d37c87e8a3be6e3139a
machine-os-content sha256:09d692ec1fdf35f8f1f780f4040ba60cbc61dcb7b1560dec22de3c53f3839f70
openstack-machine-controllers git baf1b1fa sha256:327382d8ee5a154f01eb6babb7829f74187cf21a17bda84873b84f06b5d79773
ovn-kubernetes git 674977b1 sha256:4dd49bb4921b802dfaf0ebee96682872e21c72895d57db8c3e94b03b63053942
pod git 2f60da39 sha256:eecfb226f846530f7ffbc52701bb4d6875bfc67f41e7ded69e99a0111a5bfd91
prom-label-proxy git a43debdf sha256:b9efa6a8e0f09d1f0e564fce677ed475f4a11a19af06e8c099706ebbe29578fa
prometheus git 625dc242 sha256:e058082e07b26d3f6ed078072ff56a5056dd3c8337150f3046985ef8009accfc
prometheus-alertmanager git 39c2c111 sha256:764b0a66f04929a3677f9649f16f4c392dae2b82d124df8c6acc49dc568a0516
prometheus-config-reloader git 73ed419e sha256:1a3ea6446a4d125fb9db8c3b09ca5f25047500421510108b974baf04fc57944e
prometheus-node-exporter git 3ab97646 sha256:586e937e5010daba5f00f4067207a398920a87c33b5bf897206828c33a9a4314
prometheus-operator git 73ed419e sha256:0d890f0b1499275ea0b9c96e898e1cec3dea1118ae6c39cfb1d2c5744f8bf10f
service-ca-operator git 3c8ba454 sha256:1810e40a9780ce093f63daf58a645036d0c879ef1f26f23e07fea0a84df52003
service-catalog git 1dd02c42 sha256:eabe9a2ea692fe340903fcfaf6f7c2757a4ce326aae740ee8aec77afe37e5784
sriov-cni git fbafcc81 sha256:1b151df2ab3f9058ea3c006101a2a28468c6d8d39e3e4b78453ae96c51c404cf

aws-machine-controllers

Bug 1732929: Pin dependencies to 4.1 #253
Run machine-api directly from cluster-api-actuator-pkg@release-4.1 #259
Full changelog

cli, cli-artifacts, deployer, hyperkube, hypershift, node, tests

Bug 1753071: Allow certain tests to be skipped when performing skew testing #23821
Bug 1752983: Ensure the OLM e2e test loops correctly #23817
Bug 1734003: Unidling: minimize iptables lock contention #23502
Bug 1737656: UPSTREAM: 80436: refactors to kubernetes CP command #23705
Bug 1744995: Request headers fix x509 [4.1] #23660
Bug 1741681: Bump cadvisor [4.1.z] #23619
Bug 1741135: Fix dc adoption #23731
Bug 1740731: Initializing runningPods on SDN bootup for 4.x #23537
Bug 1727917: FlattenListVisitor now continues traversal on errors and returns an aggregate #23671
Bug 1737386: pkg/network: skip OPENSHIFT-MASQ for traffic already marked for masquerade #23548
Bug 1739603: UPSTREAM: 80491: Changed IsCriticalPod to return true in case of static pods [4.1] #23584
Bug 1741499: [4.1] Pass egress IP packets to conntrack #23609
Bug 1740748: apiextensions: 404 if request scope does not match crd scope #23597
Bug 1741039: Add ability to read pods to storage-admin users. #23618
Bug 1740264: Dockerfiles: verify package installation #23591
Bug 1739085: Fix multi-version CRD and admission webhook #23580
Bug 1734663: UPSTREAM: 78882: Fix incorrect procMount defaulting #23517
Bug 1733921: ClusterResourceQuota usage is above project usage quota impacting all projects in ClusterResourceQuota #23493
Bug 1732192: CVE-2019-11247: OpenShift 4.1: apiextensions: 404 if request scope does not match crd scope #1529
Bug 1731827: UPSTREAM: 80657: add UID to kubelet_container_log_filesystem_used_bytes [4.1] #23524
Bug 1731913: Add arping to openshift-sdn image #23450
Full changelog

cloud-credential-operator

Bug 1707827: Enable leader election. #98
Full changelog

cluster-authentication-operator

Bug 1740337: Prevent global sync error degraded status flapping #174
Bug 1744599: Make SNI output stable when multiple ingress domains are configured #191
Bug 1743418: Use specific reasons for all route degraded errors #180
Bug 1736001: Fix bug where favicon is incorrect (was Shadowman, now OpenShift) #167
Bug 1733978: Correct race between config sync loop and resource syncer [4.1] #162
Bug 1725936: Split handling of degraded across multiple conditions #163
Full changelog

cluster-config-operator

Bug 1732934: remove defaultservingcert description in apiserver config #75
Full changelog

cluster-image-registry-operator

Bug 1710506: Using trap to deal with signaling on node-ca. #381
Bug 1748995: Add namespace to related objects #384
Bug 1739219: Remove Service CA ConfigMap from CVO management #359
Bug 1714168: Properly setting “maxWaitTime” environment… #357
Bug 1737526: Empty s3 bucket before deleting #351
Full changelog

cluster-ingress-operator

Bug 1740258: fix prometheus integration for multiple ingresscontrollers #290
Full changelog

cluster-kube-apiserver-operator

Bug 1714158: Prevent cert-syncer to act on stale data #557
Bug 1733232: Fix kube-apiserver-to-kubelet-signer validity #534
Bug 1732945: Fallback to platform type on 4.1 infra metrics #545
Bug 1732945: Report infra provider and feature set metrics #531
Full changelog

cluster-kube-scheduler-operator

Bug 1729918: Switch to configobserver pattern #158
Full changelog

cluster-monitoring-operator

Bug 1741055: pkg/client: Set Reason in ClusterOperatorStatusCondition #440
Bug 1745379: Fix many-to-many matching not allowed #457
Bug 1732945: Update telemeter-client deployment #436
Bug 1740373: Add more accurate infrastructure CPU calculations #433
Bug 1732945: jsonnet: update telemeter client deployment #426
Bug 1730413: etcd should still alert when a member disappears from the endpoints #420
Full changelog

cluster-network-operator

Bug 1743587: Adding cni-version to multus daemonset yaml #293
Full changelog

cluster-node-tuned

Bug 1739322: Fix plugin_sysctl for tuned 2.11 #22
Full changelog

cluster-node-tuning-operator

Bug 1741067: Report the “Reason” condition for the ClusterOperator status. #78
Full changelog

cluster-openshift-controller-manager-operator

Bug 1735709: Respecting resource limits and requests during build. #110
Full changelog

cluster-samples-operator

Bug 1743376: Missing openapi CRD definitions for oc explain to work for sample operator CRD #176
Bug 1742907: Degraded missing reason detail 41 #175
Full changelog

cluster-version-operator

Bug 1708697: pkg/cvo: Drop ClusterVersion defaulting during bootstrap #242
Bug 1741661: pkg/cvo/metrics: Report cluster-version conditions with reasons #237
metrics: add cluster_installer series #229
Full changelog

console

Bug 1723706: CSRF updates #2609
Bug 1748727: only logout once if concurrent requests are unauthorized #2590
Bug 1743259: Handle ClusterResourceQuota as a CRD #2426
Bug 1741959: Use fieldSelector to filter event #2375
Bug 1725936: [release-4.1] Check namespace before deleting it #2209
Full changelog

console-operator

Bug 1746103: Fix secret in pod log in 4.1 #278
Full changelog

docker-registry

Bug 1710506: Implementing graceful shutdown. #193
Bug 1737379: make the registry the pid 1 process #191
Bug 1740391: Update make verify for release-4.1 #189
Full changelog

haproxy-router

Bug 1747461: Expose control of the tls settings via router ENV #35
Full changelog

installer, installer-artifacts

Bug 1749624: data/aws/vpc/master-elb: Bump load-balancer timeouts to 20m #2324
Bug 1725524: types/aws/default: move ap-northeast-2 to m5 instance class #2213
asset/cluster: inject installer info when creating #2125
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1743279: Bump plugins versions #922
Bug 1747304: Bump Jenkins to 2.176.3 #921
Bug 1735526: cve-2019-10357: Bump-workflow-cps-global-lib-version-to-2.15 #920
Bug 1731021: Bump jenkins version to 2.176.2 #892
Full changelog

machine-api-operator

cherry-picking #366: Bug 1732929: Modify machine-api-controller clusterrole for daemonsets #393
Full changelog

machine-config-controller, machine-config-daemon, machine-config-operator, machine-config-server, setup-etcd-environment

Bug 1749070: vendor: use cluster-api’s drain lib #1099
[release 4.1] Bug 1741065: Report degraded reason in cluster operator status #1085
Bug 1749271: Backport mcd: Add /run/machine-config-daemon-force stampfile #1086 #1103
Bug 1728873: pkg/daemon: reconcile killed just prior drain+reboot #995
Bug 1745016: [release-4.1] add base templates with default inotify.max_user settings #1080
Bug 1745241: pkg/operator: fix related objects for must-gather #1088
Bug 1743771: pkg/controller/kubelet-config: fix owener reference #1067
Bug 1729510: [release-4.1] backports for drain fixes #1071
Bug 1740147: DR: use observed directories vs assumptions for backup_etcd_client_certs #1055
Bug 1726866: mcc: fix ignition validation to validate entire ign config #989
Bug 1732166: rotate kubelet CA rotation support [4.1] #1000
Full changelog

multus-cni

Bug 1746664: Updates to grpc (and deps) for cve-2019-9511 (z-stream update for 4.1) #26
Bug 1743587: Backporting “cni-version” in entrypoint.sh #20
Full changelog

must-gather

Bug 1735363: must-gather should redact kubectl.kubernetes.io/last-applied-configuration in secrets #116
Bug 1726144: Fix BASE_COLLECTION_PATH on gather_network_logs #109
Full changelog

oauth-proxy

Bug 1748212: [4.1]: Tighten cipher usage #130
Full changelog

operator-lifecycle-manager

Bug 1738203: Add relatedObjects to cluster operator status #1004
Bug 1750867: Make packagemanifest list return all valid packages #1037
Bug 1745630: chore(deps): update grpc dependency #1009
Bug 1743748: Report Upgradeable in ClusterOperator status #979
Bug 1737156: feat(metrics): record sync count for Subscriptions, labeled with name and installedCSV #976
Bug 1740174: fix(catalog): re-install resources in existing installplan #977
Bug 1732214: Fix panic when binding already exists #964
Bug 1723851: fix(catalog): do not add owner references to clusterroles or crbs (4.1 cherrypick) #915
Full changelog

operator-marketplace

Bug 1740824: Fix degraded status on upgrade #241
Bug 1732588: Stop scaling down registry deployment #239
Bug 1722096: fix panic when scale down of registry deployment fails #231
Full changelog

operator-registry

Bug 1745629: chore(deps): update grpc to latest #83
Bug 1732580: Best-effort loading #81
Full changelog

sriov-network-device-plugin

Bug 1746661: glide update (#174) #19
Full changelog

telemeter

Bug 1732945: jsonnet/telemeter/jsonnetfile.json: Adjust syncs #221
Bug 1732945: Cherry pick 205 to 4.1 branch #222
Bug 1732945: Capture cluster infrastructure metrics #211
metrics: gather cluster_installer series #212
Bug 1737164: Add OLM metrics to whitelist #210
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github