vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Kubernetes v1.20.6 v1.20.7 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.20.7). The update resolves CVE-2020-8562 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6457271)) and CVE-2021-25737 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6457273)). 
 Kubernetes add-on resizer 1.8.11 1.8.12 See the [Kubernetes add-on resizer release notes](https://github.com/kubernetes/autoscaler/releases/tag/addon-resizer-1.8.12). 
 Kubernetes Metrics Server v0.4.2 v0.4.4 See the [Kubernetes Metrics Server release notes](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.4.4). 
 Operator Lifecycle Manager 0.16.1-IKS-9 0.16.1-IKS-10 Fixed a bug that was caused by a missing /bin/cpb binary file. 
 Portieris admission controller v0.10.1 v0.10.2 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.10.2). 







 Change log for worker node fix pack 1.20.6_1539, released 10 May 2021 

The following table shows the changes that are in the worker node fix pack 1.20.6_1539. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.20.6_1537

 Component Previous Current Description
kubernetes.io/metadata.name: kube-system
podSelector:
matchLabels:
app: vpn
Show more

OpenShift clusters version 4.11 and later

apiVersion: v1
kind: List
metadata:
name: ibmcloud-kube-audit
items:
- apiVersion: v1
kind: Namespace
metadata:
name: ibm-kube-audit
labels:
pod-security.kubernetes.io/enforce: restricted
pod-security.kubernetes.io/enforce-version: latest
pod-security.kubernetes.io/audit: restricted
pod-security.kubernetes.io/audit-version: latest
pod-security.kubernetes.io/warn: restricted
pod-security.kubernetes.io/warn-version: latest
security.openshift.io/scc.podSecurityLabelSync: "false"
- apiVersion: apps/v1
kind: Deployment
metadata:
name: ibmcloud-kube-audit
namespace: ibm-kube-audit
labels:
app: ibmcloud-kube-audit
spec:
replicas: 1
selector:
matchLabels:
app: ibmcloud-kube-audit
template:
metadata:
labels:
app: ibmcloud-kube-audit
spec:
containers:
- name: ibmcloud-kube-audit
image: 'icr.io/ibm/ibmcloud-kube-audit-to-logdna:latest'
imagePullPolicy: Always
ports:
- containerPort: 3000
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
- apiVersion: v1
kind: Service
metadata:
name: ibmcloud-kube-audit-service
Kubernetes v1.20.10 v1.20.11 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.20.11). 
 Kubernetes API server auditing configuration N/A N/A Updated to support verbose[Kubernetes API server auditing](https://cloud.ibm.com/docs/containers?topic=containers-health-auditaudit-api-server). 
 Kubernetes NodeLocal DNS cache N/A N/A Increased memory resource requests from 5Mi to 8Mi to better align with normal resource utilization. 
 Load balancer and load balancer monitor for IBM Cloud Provider 1510 1547 Updated image for [CVE-2021-3711](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711) and [CVE-2021-3712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712). 
 Operator Lifecycle Manager 0.16.1-IKS-12 0.16.1-IKS-14 Updated image for [CVE-2021-3711](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711) and [CVE-2021-3712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712). 







 Change log for worker node fix pack 1.20.11_1554, released 27 September 2021 

The following table shows the changes that are in the worker node fix pack patch update 1.20.11_1554. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.20.10_1552

 Component Previous Current Description
Kubernetes v1.19.10 v1.19.11 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.19.11). The update resolves CVE-2020-8562 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6457271)) and CVE-2021-25737 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6457273)). 
 Kubernetes add-on resizer 1.8.11 1.8.12 See the [Kubernetes add-on resizer release notes](https://github.com/kubernetes/autoscaler/releases/tag/addon-resizer-1.8.12). 
 Kubernetes Metrics Server v0.3.7 v0.4.4 See the [Kubernetes Metrics Server release notes](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.4.4). 
 Operator Lifecycle Manager 0.16.1-IKS-9 0.16.1-IKS-10 Fixed a bug that was caused by a missing /bin/cpb binary file. 
 Portieris admission controller v0.10.1 v0.10.2 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.10.2). 







 Change log for worker node fix pack 1.19.10_1546, released 10 May 2021 

The following table shows the changes that are in the worker node fix pack 1.19.10_1546. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.19.10_1544

 Component Previous Current Description
For example, [Kubernetes does not support](https://kubernetes.io/releases/version-skew-policy/)kubectl client versions that are 2 or more versions apart from the server version (n +/- 2).



1. Verify that the kubectl CLI version that you run on your local machine matches the Kubernetes version that is installed in your cluster. Show the kubectl CLI version that is installed in your cluster and your local machine.

kubectl version

Example output:

Client Version: version.Info{Major:"1", Minor:"23", GitVersion:"v1.26", GitCommit:"641856db18352033a0d96dbc99153fa3b27298e5", GitTreeState:"clean", BuildDate:"2019-03-25T15:53:57Z", GoVersion:"go1.12.1", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"23", GitVersion:"v1.26+IKS", GitCommit:"e15454c2216a73b59e9a059fd2def4e6712a7cf0", GitTreeState:"clean", BuildDate:"2019-04-01T10:08:07Z", GoVersion:"go1.11.5", Compiler:"gc", Platform:"linux/amd64"}

The CLI versions match if you can see the same version in GitVersion for the client and the server. You can ignore the +IKS part of the version for the server.
2. If the kubectl CLI versions on your local machine and your cluster don't match, either update your cluster or [install a different CLI version on your local machine](https://cloud.ibm.com/docs/containers?topic=containers-cli-install).
Kubernetes add-on resizer 1.8.13 1.8.14 See the [Kubernetes add-on resizer release notes](https://github.com/kubernetes/autoscaler/releases/tag/addon-resizer-1.8.14). 
 Kubernetes Dashboard v2.3.1 v2.3.1 The default Kubernetes Dashboard settings found in the kubernetes-dashboard-settings config map in the kube-system namespace have been updated to set resourceAutoRefreshTimeInterval to 60. This default change is only applied to new clusters. The previous default value was 5. If your cluster has Kubernetes Dashboard performance problems, see the steps for [changing the auto refresh time interval](https://cloud.ibm.com/docs/containers?topic=containers-ts-kube-dashboord-oom). 
 Load balancer and load balancer monitor for IBM Cloud Provider 1916 1998 Updated Go to version 1.17.10 and updated dependencies. 
 Portieris admission controller v0.10.3 v0.12.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.12.4). 







 Change log for worker node fix pack 1.21.12_1560, released 23 May 2022 

The following table shows the changes that are in the worker node fix pack 1.21.12_1560. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.21.12_1559

 Component Previous Current Description
Kubernetes v1.20.5 v1.20.6 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.20.6). The update resolves CVE-2021-25735 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6447812)). 
 Kubernetes NodeLocal DNS cache 1.17.1 1.17.3 See the [Kubernetes NodeLocal DNS cache release notes](https://github.com/kubernetes/dns/releases/tag/1.17.3). 
 OpenVPN client 2.4.6-r3-IKS-301 2.4.6-r3-IKS-386 Updated image to implement additional IBM security controls. 
 OpenVPN server 2.4.6-r3-IKS-301 2.4.6-r3-IKS-385 Updated image to implement additional IBM security controls. 
 Operator Lifecycle Manager 0.16.1-IKS-5 0.16.1-IKS-9 Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-30139](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30139). 







 Change log for worker node fix pack 1.20.6_1537, released 26 April 2021 

The following table shows the changes that are in the worker node fix pack 1.20.6_1537. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Kubernetes 1.23
: You can create or [update clusters to Kubernetes version 1.23](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions_123). With Kubernetes 1.23, you get the latest stable enhancements from the Kubernetes community as well as enhancements to the IBM Cloud product.

Deprecated and unsupported Kubernetes versions
: With the release of Kubernetes 1.23, clusters that run version 1.20 remain deprecated, with a tentative unsupported date of May 2022. Update your cluster to at least [version 1.21](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions_121) as soon as possible.





 3 February 2022 

Istio add-on
: [Version 1.12.2](https://cloud.ibm.com/docs/containers?topic=containers-istio-changelog1122) of the managed Istio add-on is available.







 January 2022 



 31 January 2022 

Version change log
: Fix pack update.
: Kubernetes [1.22.6_1538](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1221226_1538), [1.21.9_1548](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1211219_1548), [1.20.15_1569](https://cloud.ibm.com/docs/containers?topic=containers-changelog_12012015_1569), [1.19.16_1576](https://cloud.ibm.com/docs/containers?topic=containers-changelog_11911916_1576).

New! Worker node flavor reference
: View a list of all available worker node flavors by zone.
KUBERNETES_PORT_443_TCP_ADDR=172.21.0.1
KUBERNETES_PORT_443_TCP_PORT=443
KUBERNETES_PORT_443_TCP_PROTO=tcp
KUBERNETES_SERVICE_HOST=172.21.0.1
KUBERNETES_SERVICE_PORT=443
KUBERNETES_SERVICE_PORT_HTTPS=443
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1

Note that log information for job runs lasts for only one hour. For more information about logging, see [Viewing logs](https://cloud.ibm.com/docs/codeengine?topic=codeengine-view-logs).

Looking for more code examples? Check out the [Samples for IBM Cloud Code Engine GitHub repo](https://github.com/IBM/CodeEngine).





 Environment variables for events delivered to jobs 

All events that are delivered to a job are received as environment variables. These environment variables include a prefix of CE_ and are based on the [CloudEvents spec](https://cloudevents.io).

Each event contains some common environment variables that appear every time that the event is delivered to a job. The actual set of variables in each event can include more options. For more information and more environment variable options, see the [CloudEvent attributes](https://github.com/cloudevents/spec/blob/v1.0.1/spec.mdcontext-attributes).

The following table describes the environment variables that are specific to IBM Cloud Object Storage events.



Table 3. Environment variables for events

 Variable Description 

 CE_DATA The data (body) for the event.
For example, [Kubernetes does not support](https://kubernetes.io/releases/version-skew-policy/)kubectl client versions that are 2 or more versions apart from the server version (n +/- 2).



1. Verify that the kubectl CLI version that you run on your local machine matches the Kubernetes version that is installed in your cluster. Show the kubectl CLI version that is installed in your cluster and your local machine.

kubectl version

Example output:

Client Version: version.Info{Major:"1", Minor:"23", GitVersion:"v1.26", GitCommit:"641856db18352033a0d96dbc99153fa3b27298e5", GitTreeState:"clean", BuildDate:"2019-03-25T15:53:57Z", GoVersion:"go1.12.1", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"23", GitVersion:"v1.26+IKS", GitCommit:"e15454c2216a73b59e9a059fd2def4e6712a7cf0", GitTreeState:"clean", BuildDate:"2019-04-01T10:08:07Z", GoVersion:"go1.11.5", Compiler:"gc", Platform:"linux/amd64"}

The CLI versions match if you can see the same version in GitVersion for the client and the server. You can ignore the +IKS part of the version for the server.
2. If the kubectl CLI versions on your local machine and your cluster don't match, either update your cluster or [install a different CLI version on your local machine](https://cloud.ibm.com/docs/containers?topic=containers-cli-install).







 Updating Helm charts
Kubernetes v1.19.14 v1.19.15 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.19.15). 
 Kubernetes API server auditing configuration N/A N/A Updated to support verbose[Kubernetes API server auditing](https://cloud.ibm.com/docs/containers?topic=containers-health-auditaudit-api-server). 
 Kubernetes NodeLocal DNS cache N/A N/A Increased memory resource requests from 5Mi to 8Mi to better align with normal resource utilization. 
 Load balancer and load balancer monitor for IBM Cloud Provider 1510 1550 Updated image for [CVE-2021-3711](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711) and [CVE-2021-3712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712). 
 Operator Lifecycle Manager 0.16.1-IKS-12 0.16.1-IKS-14 Updated image for [CVE-2021-3711](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711) and [CVE-2021-3712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712). 







 Change log for worker node fix pack 1.19.14_1559, released 13 September 2021 

The following table shows the changes that are in the worker node fix pack patch update 1.1914_1559. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.19.14_1558

 Component Previous Current Description
Run the following command to create the Kubernetes secret and add it to your OpenShift project. The TLS certificate and key need to be in PEM format.

kubectl create secret generic console-tls-secret --from-file=tls.crt=./tlscert.pem --from-file=tls.key=./tlskey.pem -n <PROJECT_NAME>

Replace <PROJECT_NAME> with the name of your IBM Blockchain Platform deployment project.

After you create the secret, add the tlsSecretName field to the spec: section with one indent added, at the same level as the resources: and clusterdata: sections of the advanced deployment options. You must provide the name of the TLS secret that you created to the field. The following example deploys a console with the TLS certificate and key that is stored in a secret named "console-tls-secret":

apiVersion: ibp.com/v1beta1
kind: IBPConsole
metadata:
name: ibpconsole
namespace: your-project
labels:
app.kubernetes.io/name: "ibp"
app.kubernetes.io/instance: "ibp"
app.kubernetes.io/managed-by: "ibm-ibp"
spec:
email: <EMAIL>
password: <PASSWORD>
imagePullSecrets:
- regcred
registryURL: cp.icr.io/cp
license:
accept: <ACCEPT>
networkinfo:
domain: <DOMAIN>
storage:
console:
class: default
size: 5Gi
serviceAccountName: ibm-blockchain
usetags: true
version: 2.5.4
tlsSecretName: "console-tls-secret"
clusterdata:
zones:
- dal10
- dal12
- dal13
Show more







 Step four: Verify the console installation
Kubernetes v1.25.8 v1.25.9 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.25.9). 
 Kubernetes Metrics Server configuration N/A N/A Updated to use TLS version 1.3 ciphers. 
 Load balancer and load balancer monitor for IBM Cloud Provider 2420 2486 Updated Go to version 1.19.7 and updated dependencies. 
 Portieris admission controller v0.13.3 v0.13.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.13.4). 







 Change log for worker node fix pack 1.25.9_1543, released 24 April 2023 

The following table shows the changes that are in the worker node fix pack 1.25.9_1543. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.25.8_1541

 Component Previous Current Description
Resolved [CVE-2022-0778](https://nvd.nist.gov/vuln/detail/CVE-2022-0778). 
 Kubernetes v1.21.11 v1.21.12 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.21.12). 
 Kubernetes NodeLocal DNS cache 1.21.3 1.21.4 See the [Kubernetes NodeLocal DNS cache release notes](https://github.com/kubernetes/dns/releases/tag/1.21.4). 
 Load balancer and Load balancer monitor for IBM Cloud Provider 1899 1916 Updated the image to resolve CVEs. 







 Change log for worker node fix pack 1.21.12_1558, released 25 April 2022 



Changes since version 1.21.11_1556

 Component Previous Current Description
Kubernetes v1.24.12 v1.24.13 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.24.13). 
 Kubernetes Metrics Server configuration N/A N/A Updated to use TLS version 1.3 ciphers. 
 Load balancer and load balancer monitor for IBM Cloud Provider 2420 2486 Updated Go to version 1.19.7 and updated dependencies. 
 Portieris admission controller v0.13.3 v0.13.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.13.4). 







 Change log for worker node fix pack 1.24.13_1566, released 24 April 2023 

The following table shows the changes that are in the worker node fix pack 1.24.13_1566. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.24.12_1564

 Component Previous Current Description
Kubernetes v1.21.10 v1.21.11 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.21.11). 
 Load balancer and Load balancer monitor for IBM Cloud Provider 1747 1865 Updated the image to resolve CVEs. Updated to use Go version 1.17.8. Set gratuitous ARP at the correct time on LBv1. 
 Operator Lifecycle Manager 0.16.1-IKS-15 0.16.1-IKS-16 Resolve [CVE-2022-0778](https://nvd.nist.gov/vuln/detail/CVE-2022-0778). 







 Change log for worker node fix pack 1.21.11_1554, released 28 March 2022 



Changes since version 1.21.10_1552

 Component Previous Current Description
Kubernetes v1.17.16 v1.17.17 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.17.17). Updated to implement additional IBM security controls. 
 Kubernetes Dashboard v2.0.4 v2.0.5 See the [Kubernetes Dashboard release notes](https://github.com/kubernetes/dashboard/releases/tag/v2.0.5). 
 Kubernetes Dashboard metrics scraper v1.0.4 v1.0.6 See the [Kubernetes Dashboard metrics scraper release notes](https://github.com/kubernetes-sigs/dashboard-metrics-scraper/releases/tag/v1.0.6). 
 Load balancer and load balancer monitor for IBM Cloud Provider 1004 1078 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971). 







 Change log for worker node fix pack 1.17.17_1551, released 18 January 2021 

The following table shows the changes that are in the worker node fix pack 1.17.17_1551. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.17.15_1549

 Component Previous Current Description 

 Kubernetes v1.17.15 v1.17.17 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.17.17).
Kubernetes v1.22.12 v1.22.13 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.22.13). 
 Kubernetes Dashboard metrics scraper v1.0.7 v1.0.8 See the [Kubernetes Dashboard metrics scraper release notes](https://github.com/kubernetes-sigs/dashboard-metrics-scraper/releases/tag/v1.0.8). 
 Kubernetes NodeLocal DNS cache 1.21.4 1.22.6 See the [Kubernetes NodeLocal DNS cache release notes](https://github.com/kubernetes/dns/releases/tag/1.22.6). 
 Load balancer and load balancer monitor for IBM Cloud Provider 2058 2110 Updated Go dependencies and to Go version 1.17.13. 
 Operator Lifecycle Manager 0.16.1-IKS-18 0.16.1-IKS-19 Update image for [CVE-2022-37434](https://nvd.nist.gov/vuln/detail/CVE-2022-37434). 
 Portieris admission controller v0.12.5 v0.12.6 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.12.6). 







 Change log for worker node fix pack 1.22.13_1568, released 29 August 2022 

The following table shows the changes that are in the worker node fix pack 1.22.13_1568. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.22.12_1566

 Component Previous Current Description
To interact with your project from the Kubernetes command-line interface, kubectl, or with Knative, kn you must set up your environment to interact with the Kubernetes API of Code Engine.

Before you begin



* You must [create your project](https://cloud.ibm.com/docs/codeengine?topic=codeengine-manage-projectcreate-a-project) and the project must be in active status.
* Install the [Kubernetes CLI (kubectl)](https://cloud.ibm.com/docs/codeengine?topic=codeengine-knativeknative-kubectl) and the [Knative CLI (kn)](https://cloud.ibm.com/docs/codeengine?topic=codeengine-knativeknative-kubectl).



You can set up your environment in the following ways.



* You can add the --kubecfg option to your project select command. For example,

ibmcloud ce project select --name PROJECT_NAME --kubecfg
* You can export the kubeconfig file directly. Run the ibmcloud ce project current command to find the project that you are currently targeting. This command also returns the export command for your kubeconfig file. For example,

ibmcloud ce project current

Example output

Getting the current project context...
OK

Name: myproject
ID: 01234567-abcd-abcd-abcd-abcdabcd1111
Subdomain: aabon2dfwa0
Domain: us-south.codeengine.appdomain.cloud
Region: us-south
Kubectl Context: 4svg40kna19

Kubernetes Config:
Context: aabon2dfwa0