vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Change log for master fix pack 1.20.7_1540, released 24 May 2021 

The following table shows the changes that are in the master fix pack patch update 1.20.7_1540. Master patch updates are applied automatically.



Changes since version 1.20.6_1538

 Component Previous Current Description 

 Cluster health image v1.2.11 v1.2.12 Improved the add-on status information that is displayed when errors occur. Updated image to implement additional IBM security controls and for [CVE-2020-26160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26160), [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483) and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 CoreDNS 1.8.3 1.8.0 See the [CoreDNS release notes](https://coredns.io/2020/10/22/coredns-1.8.0-release/). 
 IBM Calico extension 661 689 Updated to use Go version 1.15.12. 
 IBM Cloud Controller Manager v1.20.6-2 v1.20.7-3 Updated to support the Kubernetes 1.20.7 release and to use Go version 1.15.12. 
 IBM Cloud File Storage for Classic plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305).
Create or update restricted-psp-user [cluster role binding](https://cloud.ibm.com/docs/containers?topic=containers-ts-app-pod-securitycreate-restricted-psp-user).







 ClusterRoleBinding restricted-psp-user does not have expected subjects 

If this change was intentional, you must first determine if applications can run properly with the [cluster role binding](https://cloud.ibm.com/docs/containers?topic=containers-ts-app-pod-securitycreate-restricted-psp-user).

Then, create or update restricted-psp-user [cluster role binding](https://cloud.ibm.com/docs/containers?topic=containers-ts-app-pod-securitycreate-restricted-psp-user).





 Creating or updating the privileged-psp-user ClusterRoleBinding 

Create or update privileged-psp-user cluster role binding by running the following command.

kubectl apply -f - <<EOF
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: privileged-psp-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: ibm-privileged-psp-user
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:masters
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:nodes
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:serviceaccounts
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:authenticated
EOF
Show more





 Creating the restricted-psp-user cluster role binding 

Create or update the restricted-psp-user ClusterRoleBinding by running the following command.

kubectl apply -f - <<EOF
* Adds the --policy option to the ibmcloud oc master audit-webhook set command. You can now configure the amount of information included in your cluster audits by specifying the default or verbose audit policy type.







 Version 1.0.312 

Version 1.0.312 of the CLI was released on 9 August 2021.



* Removes the ibmcloud oc nlb-dns monitor status command. Checking the health of individual IP addresses, which was previously supported by the Cloudflare DNS provider, is not supported by the Akamai DNS provider. Instead, you can check the overall health of a subdomain by using the ibmcloud oc nlb-dns monitor ls command. For more information on the migration to Akamai for all containers.appdomain.cloud, containers.mybluemix.net, and containers.cloud.ibm.com domains, see the [migration announcement](https://cloud.ibm.com/notifications?selected=1621697674798).
* Removes the ibmcloud oc cluster addon enable kube-terminal command. The Kubernetes web terminal add-on became unsupported on 1 July 2021. Instead, use the [IBM Cloud Shell](https://cloud.ibm.com/docs/cloud-shell?topic=cloud-shell-shell-ui).
* Adds CLI support for the [OpenShift Data Foundation storage add-on](https://cloud.ibm.com/docs/openshift?topic=openshift-ocs-manage-deployment).
* Makes the ibmcloud oc cluster addon update feature available to all users.
* Updates the help text in various languages.







 Version 1.0.300 

Version 1.0.300 of the CLI was released on 12 July 2021.



* Updates the help text in various languages.







 Version 1.0.295 

Version 1.0.295 of the CLI was released on 24 June 2021.



* Removes the unsupported Red Hat OpenShift on IBM Cloud Ingress image version from the output of ibmcloud oc alb version ls.
ibmcloud login [-g <resource_group>] [--sso]
2. Download and add the kubeconfig configuration file for your cluster to your existing kubeconfig in /.kube/config or the last file in the KUBECONFIG environment variable.

ibmcloud oc cluster config --cluster <cluster_name_or_ID>
3. In your browser, navigate to the address of your Master URL and append /console. For example, https://c0.containers.cloud.ibm.com:23652/console.
4. From the Red Hat OpenShift web console menu bar, click your profile IAM#user.name@email.com > Copy Login Command. Display and copy the oc login token command into your command line to authenticate via the CLI.
5. Verify that the oc commands run properly with your cluster by checking the version.

oc version

Example output

Client Version: v4.11.0
Kubernetes Version: v1.25.8.2

If you can't perform operations that require Administrator permissions, such as listing all the worker nodes or pods in a cluster, download the TLS certificates and permission files for the cluster administrator by running the ibmcloud oc cluster config --cluster <cluster_name_or_ID> --admin command.







 Step 2. Setup the Sysdig Helm repository 

Add the Workload Protection Helm repository to your Helm instance.



1. Add the Helm repository.

helm repo add sysdig https://charts.sysdig.com

If you get the following error:

helm repo add sysdig https://charts.sysdig.com --debug
Error: context deadline exceeded
helm.go:84: [debug] context deadline exceeded

Run the following command and retry adding the Helm repository.

rm $HOME/Library/Preferences/helm/repositories.lock
2. Update the repos to retrieve the latest versions of all Helm charts.

helm repo update
RHEL 7 packages N/A N/A Updated base packages in the worker node Red Hat Enterprise Linux image. 







 Change log for 3.11.129_1517_openshift, released 2 August 2019 

The following table shows the changes that are in the patch 3.11.129_1517_openshift.



Changes since version 3.11.129_1515

 Component Previous Current Description 

 Cluster DNS configuration N/A N/A For security reasons, enhanced local dnsmasq cache to listen on only localhost. Changed the DNS targetPort for the kubernetes cluster service from 8053 to 53. 
 Cluster master HA proxy 1.9.7-alpine 2.0.1-alpine See the [HA proxy release notes](https://www.haproxy.org/download/2.0/src/CHANGELOG). 
 Cluster router configuration N/A N/A Fixed bugs that might cause cluster master operations, such as refresh or update, to fail when the router configuration is updated. These fixes also improve master availability during such operations.
Ubuntu 16.04 packages 4.4.0-193-generic 4.4.0-194-generic Updated worker node image with kernel and package updates for [CVE-2020-25692](https://nvd.nist.gov/vuln/detail/CVE-2020-25692), [CVE-2020-25709](https://nvd.nist.gov/vuln/detail/CVE-2020-25709), [CVE-2020-25710](https://nvd.nist.gov/vuln/detail/CVE-2020-25710), [CVE-2020-28196](https://nvd.nist.gov/vuln/detail/CVE-2020-28196), and [CVE-2020-8694](https://nvd.nist.gov/vuln/detail/CVE-2020-8694). 







 Change log for master fix pack 1.16.15_1552, released 16 November 2020 

The following table shows the changes that are in the master fix pack patch update 1.16.15_1552. Master patch updates are applied automatically.



Changes since version 1.16.15_1550

 Component Previous Current Description 

 Cluster health image v1.1.12 v1.1.13 Updated image for [DLA-2424-1](https://www.debian.org/lts/security/2020/dla-2424).
Change log for master fix pack 4.5.40_1543_openshift, released 28 June 2021 

The following table shows the changes that are in the master fix pack patch update 4.5.40_1543_openshift. Master patch updates are applied automatically.



Changes since version 4.5.39_1539_openshift

 Component Previous Current Description 

 Cluster health image v1.2.12 v1.2.13 Updated to use Go version 1.15.12. Updated image for [CVE-2021-33194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33194). 
 Gateway-enabled cluster controller 1352 1348 Updated to run as a non-root user by default, with privileged escalation as needed. 
 IBM Calico extension 689 730 Updated to use Go version 1.16.15. Updated minimal universal base image (UBI) to version 8.4 to resolve CVEs. 
 IBM Cloud Block Storage for Classic plug-in and driver v2.0.4 v2.0.7 Updated to use Go version 1.15.12. Updated image for [CVE-2021-33194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33194). Updated minimal UBI to version 8.4 to resolve CVEs. 
 IBM Cloud Controller Manager v1.18.19-2 v1.18.20-1 Updated to support the Kubernetes 1.18.20 release. Updated image to implement additional IBM security controls. 
 IBM Cloud File Storage for Classic plug-in and monitor 392 394 Updated to use Go version 1.15.12. Updated UBI to version 8.4 to resolve CVEs. 
 IBM Cloud RBAC Operator 63cd064 b68ea92 Update to use Go version 1.16.4. Updated UBI to version 8.4 to resolve CVEs. 
 Key Management Service provider v2.3.4 v2.3.5 Updated to use Go version 1.15.12.
The update resolves CVE-2020-8557 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6343881)). 







 Change log for master fix pack 4.3.35_1539_openshift, released 21 September 2020 

The following table shows the changes that are in the master fix pack patch update 4.3.35_1539_openshift. Master patch updates are applied automatically.



Changes since version 4.3.35_1538_openshift

 Component Previous Current Description 

 Cluster health image v1.1.9 v1.1.11 Updated Go version for [CVE-2020-16845](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16845) and [CVE-2020-24553](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24553). 
 etcd v3.4.10 v3.4.13 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.4.13). 
 IBM Cloud Controller Manager v1.17.11-1 v1.17.12-1 Updated to support the Kubernetes 1.17.12 release. 
 IBM Cloud File Storage for Classic plug-in and monitor 377 378 Updated Go version for [CVE-2020-16845](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16845).
: Master fix pack update change log documentation is available for version [4.7.16_1523_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_474716_1523), [4.6.34_1547_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_464634_1547), [4.5.40_1543_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4540_1543), and [3.11.439_1594_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311439_1594).





 24 June 2021 

CLI change log
: Updated the Red Hat OpenShift on IBM Cloud CLI plug-in change log page for the [release of version 1.0.295](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_cli_changelog10).





 23 June 2021 

Cluster autoscaler add-on
: [Version 1.0.3](https://cloud.ibm.com/docs/openshift?topic=openshift-ca_changelog) of the cluster autoscaler add-on is available.





 22 June 2021 

IBM Cloud Object Storage plug-in
: Version 2.1.2 of the IBM Cloud Object Storage plug-in is released. Update your clusters to use the latest version. For more information, see the [IBM Cloud Object Storage plug-in change log](https://cloud.ibm.com/docs/openshift?topic=openshift-cos_plugin_changelog).

Worker node versions
RHEL 7 Packages N/A N/A Updated worker node image with package updates for [CVE-2020-15999](https://nvd.nist.gov/vuln/detail/CVE-2020-15999). 







 Change log for worker node fix pack 4.5.15_1518_openshift, released 26 October 2020 

The following table shows the changes that are in the worker node fix pack update 4.5.15_1518_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.5.13_1515_openshift

 Component Previous Current Description 

 Red Hat OpenShift 4.5.13 4.5.15 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.htmlocp-4-5-15). 
 RHEL 7 Packages 3.10.0-1160.2.1.el7 3.10.0-1160.2.2.el7 Updated worker node images with kernel and package updates for [CVE-2020-12351](https://nvd.nist.gov/vuln/detail/CVE-2020-12351) and [CVE-2020-12352](https://nvd.nist.gov/vuln/detail/CVE-2020-12352). 







 Change log for master fix pack 4.5.15_1518_openshift, released 26 October 2020 

The following table shows the changes that are in the master fix pack patch update 4.5.15_1518_openshift. Master patch updates are applied automatically.



Changes since version 4.5.13_1515_openshift

 Component Previous Current Description 

 Cluster health image v1.2.1 v1.2.2 Fixed the cluster health status for when add-on customizations are used.
: In clusters that run version 1.18 or later, you can (/docs/containers?topic=containers-images#portieris-image-sec)install the container image security enforcement add-onto set up the ([https://github.com/IBM/portieris](https://github.com/IBM/portieris)){: external} Portieris project in your cluster.







 March 2021 



 30 March 2021 

add-on change logs
: Added version change logs for the [ALB OAuth Proxy add-on](https://cloud.ibm.com/docs/containers?topic=containers-alb-oauth-proxy-changelog).

Master versions
: Master fix pack update change log documentation is available for version [1.20.5_1533](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1201205_1533), [1.19.9_1540](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1191199_1540), [1.18.17_1546](https://cloud.ibm.com/docs/containers?topic=containers-118_changelog11817_1546), and [1.17.17_1557](https://cloud.ibm.com/docs/containers?topic=containers-117_changelog11717_1557).





 29 March 2021 

Worker node versions
Change log for master fix pack 1.19.11_1547, released 24 May 2021 

The following table shows the changes that are in the master fix pack patch update 1.19.11_1547. Master patch updates are applied automatically.



Changes since version 1.19.10_1545

 Component Previous Current Description 

 Cluster health image v1.2.11 v1.2.12 Improved the add-on status information that is displayed when errors occur. Updated image to implement additional IBM security controls and for [CVE-2020-26160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26160), [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483) and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 CoreDNS 1.8.3 1.8.0 See the [CoreDNS release notes](https://coredns.io/2020/10/22/coredns-1.8.0-release/). 
 IBM Calico extension 661 689 Updated to use Go version 1.15.12. 
 IBM Cloud Controller Manager v1.19.10-2 v1.19.11-3 Updated to support the Kubernetes 1.19.11 release and to use Go version 1.15.12. 
 IBM Cloud File Storage for Classic plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305).
containerd 1.6.6 1.6.8 For more information, see the [change log](https://github.com/containerd/containerd/releases/tag/v1.6.8). 







 Change log for worker node fix pack 1.21.14_1575, released 01 August 2022 

The following table shows the changes that are in the worker node fix pack 1.21.14_1575. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.21.14_1572

 Component Previous Current Description 

 Ubuntu 18.04 packages N/A N/A Worker node kernel & package updates for [CVE-2022-27404](https://nvd.nist.gov/vuln/detail/CVE-2022-27404), [CVE-2022-27405](https://nvd.nist.gov/vuln/detail/CVE-2022-27405), [CVE-2022-27406](https://nvd.nist.gov/vuln/detail/CVE-2022-27406), [CVE-2022-29217](https://nvd.nist.gov/vuln/detail/CVE-2022-29217), [CVE-2022-31782](https://nvd.nist.gov/vuln/detail/CVE-2022-31782). 
 Kubernetes N/A N/A N/A 







 Change log for master fix pack 1.21.14_1574, released 26 July 2022 

The following table shows the changes that are in the master fix pack 1.21.14_1574. Master patch updates are applied automatically.



Changes since version 1.21.14_1564

 Component Previous Current Description 

 Cluster health image v1.3.8 v1.3.9 Updated Go dependencies and to use Go version 1.18.4.
: [Patch update 1.0.2_267](https://cloud.ibm.com/docs/openshift?topic=openshift-ca_changelog) of the cluster autoscaler add-on is available.

IBM Cloud Object Storage plug-in
: [Version 2.0.9](https://cloud.ibm.com/docs/openshift?topic=openshift-cos_plugin_changelog) of the IBM Cloud Object Storage plug-in is available.

Worker node versions
: Worker node fix pack update change log documentation is available for version [4.6.27_1542_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_464627_1542), [4.5.38_1538_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4538_1538), [4.4.33_1541_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4433_1541), and [3.11.420_1588_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311420_1588).





 4 May 2021 

Master versions
: Master fix pack update change log documentation is available for version [1.20.5_1538](https://cloud.ibm.com/docs/containers?topic=containers-changelog_1201206_1538) and [1.19.10_1545](https://cloud.ibm.com/docs/containers?topic=containers-changelog_11911910_1545).







 April 2021 



 30 April 2021 

CIS Kubernetes Benchmark
Cluster master HA proxy 1.9.6-alpine 1.9.7-alpine See the [HAProxy release notes](https://www.haproxy.org/download/1.9/src/CHANGELOG). Update resolves [CVE-2019-6706](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6706). 
 GPU device plug-in and installer 9ff3fda 55c1f66 Updated image for [CVE-2019-1543](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1543). 
 IBM Cloud Provider v1.11.9-241 v1.11.10-270 Updated to support the Kubernetes 1.11.10 release. 
 Kubernetes v1.11.9 v1.11.10 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.11.10). 
 Kubernetes configuration N/A N/A The Kubernetes API server audit policy configuration is updated to not log the /openapi/v2* read-only URL. In addition, the Kubernetes controller manager configuration increased the validity duration of signed kubelet certificates from 1 to 3 years. 
 OpenVPN client configuration N/A N/A The OpenVPN client vpn-* pod in the kube-system namespace now sets dnsPolicy to Default to prevent the pod from failing when cluster DNS is down.
For more information about Kubernetes project version 1.22, see the [Kubernetes change log](https://v1-22.docs.kubernetes.io/releases/notes/).



 Release timeline 

The following table includes the expected release timeline for version 1.22 of IBM Cloud® Kubernetes Service. You can use this information for planning purposes, such as to estimate the general time that the version might become unsupported.

Dates that are marked with a dagger (†) are tentative and subject to change.



Release timeline for IBM Cloud Kubernetes Service version 1.22

 Version Supported? IBM Cloud Kubernetes Service <br>release date IBM Cloud Kubernetes Service <br>unsupported date 

 1.22 Yes 29 Sept 2021 14 Dec 2022 † 







 Preparing to update 

This information summarizes updates that are likely to have and impact on deployed apps when you update a cluster to version 1.22. For a complete list of changes, review the [community Kubernetes change log](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md) and [IBM version change log](https://cloud.ibm.com/docs/containers?topic=containers-changelog_122) for version 1.22. You can also review the [Kubernetes helpful warnings](https://kubernetes.io/blog/2020/09/03/warnings/).

Review [Security Bulletin: IBM Cloud Kubernetes Service is affected by an endpoint resource security design flaw in Kubernetes (CVE-2021-25740)](https://www.ibm.com/support/pages/node/6574821)before updating.



 Update before master 

The following table shows the actions that you must take before you update the Kubernetes master.



Changes to make before you update the master to Kubernetes 1.22

 Type Description
Kubernetes 1.21.13 1.21.14 For more information, see the [change log](https://github.com/kubernetes/kubernetes/releases/tag/v1.21.14). 







 Change log for worker node fix pack 1.21.13_1562, released 7 June 2022 

The following table shows the changes that are in the worker node fix pack 1.21.13_1562. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.21.12_1560

 Component Previous Current Description 

 Ubuntu 18.04 packages 4.15.0-177 4.15.0-180 Worker node kernel & package updates for [CVE-2019-13050](https://nvd.nist.gov/vuln/detail/CVE-2019-13050), [CVE-2022-1664](https://nvd.nist.gov/vuln/detail/CVE-2022-1664), [CVE-2022-29581](https://nvd.nist.gov/vuln/detail/CVE-2022-29581). 







 Change log for master fix pack 1.21.13_1561, released 3 June 2022 

The following table shows the changes that are in the master fix pack 1.21.13_1561. Master patch updates are applied automatically.



Changes since version 1.21.12_1557

 Component Previous Current Description 

 Cluster health image v1.3.6 v1.3.7 Updated Go to version 1.17.10 and also updated the dependencies. Update registry base image version to 104 
 GPU device plug-in and installer 9485e14 382ada9 Updated Go to version 1.17.9 
 IBM Calico extension 954 980 Updated to use Go version 1.17.10. Updated minimal UBI to version 8.5.
Kubernetes N/A N/A N/A 







 Change log for worker node fix pack 1.23.8_1535, released 05 July 2022 

The following table shows the changes that are in the worker node fix pack 1.23.8_1535. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.23.8_1534

 Component Previous Current Description 

 Ubuntu 18.04 packages 4.15.0-187 4.15.0-188 Worker node kernel & package updates for [CVE-2022-1292](https://nvd.nist.gov/vuln/detail/CVE-2022-1292), [CVE-2022-2068](https://nvd.nist.gov/vuln/detail/CVE-2022-2068), [CVE-2022-2084](https://nvd.nist.gov/vuln/detail/CVE-2022-2084), [CVE-2022-28388](https://nvd.nist.gov/vuln/detail/CVE-2022-28388), [CVE-2022-32206](https://nvd.nist.gov/vuln/detail/CVE-2022-32206), [CVE-2022-32208](https://nvd.nist.gov/vuln/detail/CVE-2022-32208). 
 Kubernetes N/A N/A N/A 







 Change log for master fix pack 1.23.8_1534, released 22 June 2022 

The following table shows the changes that are in the master fix pack 1.23.8_1534. Master patch updates are applied automatically.



Changes since version 1.23.7_1531

 Component Previous Current Description 

 Cluster health image v1.3.7 v1.3.8 Updated Go to version 1.17.11 and also updated the dependencies.