vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Release notes for the landing zone deployable architecture 

Use these release notes to learn about the latest updates to the landing zone deployable architectures: VPC landing zone, VSI on VPC landing zone, and Red Hat OpenShift Container Platform on VPC landing zone. The entries grouped by date.



 July 2023 



 06 July 2023 

Version 4.4.1 of the landing zone deployable architectures available
: Version 4.4.1 of the landing zone deployable architectures is available in the IBM Cloud [catalog](https://cloud.ibm.com/catalogreference_architecture).



* IBM Cloud Hyper Protect Crypto Services is now supported by the deployable architectures. Hyper Protect Crypto Services supports keep your own key (KYOK) features. The default encryption remains Key Protect. For more information, see the [planning information](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-planvpc-crypto-prereqs).
* The IBM provider version is updated to 1.54.0, which fixes a known issue with failures when creating an authorization policy.
* For the VSI on VPC landing zone, the default virtual server image is updated to ibm-ubuntu-22-04-2-minimal-amd64-1 from ibm-ubuntu-22-04-1-minimal-amd64-4, which is deprecated. To avoid downtime and losing data, the image is not changed when you update to version 4.4.1.



A known issue exists with validation when you deploy by using projects. For more information, see [Validation fails in projects with version 4.1.1 and later](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-known-issueski-project-val-fail).







 June 2023 



 01 June 2023 

Version 4.0.0 of the landing zone deployable architectures available
Change log for master fix pack 4.4.33_1539_openshift, released 27 April 2021 

The following table shows the changes that are in the master fix pack patch update 4.4.33_1539_openshift. Master patch updates are applied automatically.



Changes since version 4.4.33_1536_openshift

 Component Previous Current Description 

 Cluster health image v1.1.19 v1.1.21 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 IBM Cloud Block Storage driver and plug-in v2.0.1 v2.0.3 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851). 
 IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851) and [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121).
1.6.4_3898_iks, released 24 March 2023 



* Updates golang version to 1.20.2.
* [CVE-2023-27533](https://nvd.nist.gov/vuln/detail/CVE-2023-27533)
* [CVE-2023-27534](https://nvd.nist.gov/vuln/detail/CVE-2023-27534)
* [CVE-2023-27535](https://nvd.nist.gov/vuln/detail/CVE-2023-27535)
* [CVE-2023-27536](https://nvd.nist.gov/vuln/detail/CVE-2023-27536)
* [CVE-2023-27537](https://nvd.nist.gov/vuln/detail/CVE-2023-27537)
* [CVE-2023-27538](https://nvd.nist.gov/vuln/detail/CVE-2023-27538)







 1.6.4_3864_iks, released 13 March 2023 



* Initial release of 1.6.4. For more information, see the [community release documentation](https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.6.4).
* Updates the default OpenSSL version from 1.1.1t to 3.0.8.



TLS 1.0 and TLS 1.1 are no longer supported. Upgrade to the newer TLS version, or as a workaround you can change the security level to 0 for OpenSSL, by appending @SECLEVEL=0 to your cipher list in the kube-system/ibm-k8s-controller-config ConfigMap. For example: ssl-ciphers: HIGH:!aNULL:!MD5:!CAMELLIA:!AESCCM:!ECDH+CHACHA20@SECLEVEL=0







 Version 1.5.1
GPU device plug-in and installer eb3a259 e32d51c Updated images for [CVE-2019-6454](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6454). 
 IBM Cloud Provider v1.13.2-62 v1.13.4-86 Updated to support the Kubernetes 1.13.4 release. Fixed periodic connectivity problems for version 1.0 load balancers that set externalTrafficPolicy to local. Updated load balancer version 1.0 and 2.0 events to use the latest IBM Cloud documentation links. 
 IBM Cloud File Storage for Classic plug-in 342 344 Changed the base operating system for the image from Fedora to Alpine. Updated image for [CVE-2019-6486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6486). 
 Key Management Service provider 122 136 Increased client timeout to IBM Key Protect for IBM Cloud. Updated image for [CVE-2019-6486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6486). 
 Kubernetes v1.13.2 v1.13.4 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.13.4). Update resolves [CVE-2019-6486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6486) and [CVE-2019-1002100](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1002100). For more information, see the [IBM security bulletin](https://www.ibm.com/support/pages/node/873324).
Changes since version 4.4.31_1529_openshift

 Component Previous Current Description 

 Cluster health image v1.1.13 v1.1.16 Updated image to implement additional IBM security controls. 
 Gateway-enabled cluster controller 1184 1195 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971). 
 IBM Calico extension 556 567 Updated image to implement additional IBM security controls and for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971) and [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659). 
 IBM Cloud Block Storage driver and plug-in v2.0.0 v2.0.1 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971) and [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659). 
 IBM Cloud Controller Manager v1.17.16-1 v1.17.17-1 Updated to support the Kubernetes 1.17.17 release. 
 IBM Cloud File Storage for Classic plug-in and monitor 384 385 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971) and [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659). 
 Key Management Service provider v2.2.2 v2.2.3 Fixed bug to ignore conflict errors during KMS secret re-encryption.
IBM Cloud File Storage for Classic plug-in and monitor 392 394 Updated to use Go version 1.15.12. Updated UBI to version 8.4 to resolve CVEs. 
 IBM Cloud RBAC Operator 63cd064 b68ea92 Update to use Go version 1.16.4. Updated UBI to version 8.4 to resolve CVEs. 
 Key Management Service provider v2.3.4 v2.3.5 Updated to use Go version 1.15.12. Updated image for [CVE-2021-33194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33194). 
 Red Hat OpenShift 4.5.39 4.5.40 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.htmlocp-4-5-40). 
 Red Hat OpenShift Control Plane Operator v4.5.0-20210512 v4.5.0-20210608 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20210608). 
 OpenVPN Operator image v1.3.1 v1.3.3 Updated ansible operator base image to version 1.8.0 to resolve CVEs and updated image to implement additional IBM security controls. 
 Portieris admission controller v0.10.2 v0.10.3 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.10.3).
CoreDNS 1.6.6 1.6.7 See the [CoreDNS release notes](https://coredns.io/2020/01/28/coredns-1.6.7-release/). 
 etcd v3.3.18 v3.4.3 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.4.3). 
 GPU device plug-in and installer da19df3 affdfe2 Image updated for [CVE-2016-9840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840), [CVE-2016-9841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841), [CVE-2016-9842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9842), [CVE-2016-9843](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843), and [CVE-2019-5188](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5188). 
 New: IBM Cloud Controller Manager v1.16.5-148 v1.17.2-4 The IBM Cloud Controller Manager component replaces the IBM Cloud Provider component by moving the IBM Cloud controllers from the Kubernetes [kube-controller-manager](https://kubernetes.io/docs/concepts/overview/components/kube-controller-manager) to the [cloud-controller-manager](https://kubernetes.io/docs/concepts/overview/components/cloud-controller-manager) component.
IBM Cloud® Block Storage for Classic driver and plug-in v2.0.3 v2.0.4 Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449) and [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450). 
 IBM Cloud Controller Manager v1.18.18-1 v1.18.19-2 Updated to support the Kubernetes 1.18.19 release. 
 IBM Cloud File Storage for Classic plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 IBM Cloud RBAC Operator b6a694b 63cd064 Updated image to implement additional IBM security controls and for [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483). 
 Key Management Service provider v2.3.3 v2.3.4 Updated image to implement additional IBM security controls and for [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483) and [CVE-2020-26160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26160). 
 Load balancer and load balancer monitor for IBM Cloud Provider 1274 1328 Updated to use Go version 1.15.11.
Version regression, released on 25 May 2021 

Due to a [regression in the community Kubernetes Ingress NGINX code](https://github.com/kubernetes/ingress-nginx/issues/6931), trailing slashes (/) are removed from subdomains during TLS redirects.





 Version 0.45.0_1228_iks, released on 23 April 2021 







 Version 0.43.0 

For the community changes for this version of the Kubernetes Ingress image, see the [community Kubernetes change log for ingress-nginx](https://github.com/kubernetes/ingress-nginx/blob/main/Changelog.md0430). Refer to the following table for a summary of changes for each build of version 0.43.0 of the Kubernetes Ingress image that IBM Cloud Kubernetes Service releases.



 Version 0.43.0_1697_iks, released on 22 September 2021 

This image is no longer available.



* [CVE-2021-22945](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945)
* [CVE-2021-22946](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946)
* [CVE-2021-22947](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947)







 Version 0.43.0_1612_iks, released on 09 September 2021 



* [CVE-2021-3711](https://nvd.nist.gov/vuln/detail/CVE-2021-3711)
* [CVE-2021-3712](https://nvd.nist.gov/vuln/detail/CVE-2021-3712)







 Version 0.43.0_1580_iks, released on 01 September 2021
IBM Cloud File Storage for Classic plug-in and monitor 429 431 Updated Go to version 1.19.8 and updated dependencies. Update UBI base image. 
 Key Management Service provider v2.6.4 v2.6.5 Updated Go to version 1.19.7 and updated dependencies. 
 Load balancer and load balancer monitor for IBM Cloud Provider 2420 2486 Updated Go to version 1.19.7 and updated dependencies. 
 OpenVPN Operator image v1.4.22 v1.4.23 Updated base image to resolve CVEs: [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0361](https://nvd.nist.gov/vuln/detail/CVE-2023-0361). 
 Portieris admission controller v0.13.3 v0.13.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.13.4). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server 4.8.0-20230314 4.8.0-20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20230417).
Block Storage for VPC add-on.
: [Version version 4.3.2_1441](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog) is available.





 15 June 2022 

IBM Cloud Monitoring metrics and label updates
: Metrics and labels are now stored and displayed in a Prometheus compatible naming convention. Some metrics and labels are deprecated. For more information, see [Discontinued Metrics and Labels](https://docs.sysdig.com/en/docs/release-notes/enhanced-metric-store/discontinued-metrics-and-labels) and [removed features](https://docs.sysdig.com/en/docs/release-notes/enhanced-metric-store/removed-featurees).

Block Storage for VPC add-on.
: [Version version 5.0.1-beta_1411](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog) is available for allowlisted accounts.





 13 June 2022 

Block Storage for VPC add-on.
: [Version 4.4.5_1371](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog) is available.

HPCS Router add-on
: Versions 4.6.0_1986, 4.7.0_1985, 4.8.0_1984, and 4.9.0_1983 of the [HPCS Router add-on](https://cloud.ibm.com/docs/openshift?topic=openshift-hpcs-router-changelog) are released. Cloud Image Key Synchronizer add-on
: Version 1.0.0_1022 of the [Cloud Image Key Synchronizer add-on](https://cloud.ibm.com/docs/openshift?topic=openshift-image-key-synchronizer-changelog) is released.
Change log for version 5.1.5_1857, released 29 March 2023 



* Updates the storage-secret-sidecar image to v1.2.19.
* Resolves [CVE-2023-23916](https://nvd.nist.gov/vuln/detail/CVE-2023-23916)







 Change log for version 5.1.4_1852, released 07 March 2023 



* Upgrades Kubernetes packages to version 1.26.
* Updates the storage-secret-sidecar image to v1.2.18.
* Resolves the following CVEs: [CVE-2020-10735](https://nvd.nist.gov/vuln/detail/CVE-2020-10735), [CVE-2021-28861](https://nvd.nist.gov/vuln/detail/CVE-2021-28861), [CVE-2022-45061](https://nvd.nist.gov/vuln/detail/CVE-2022-45061), [CVE-2022-4415](https://nvd.nist.gov/vuln/detail/CVE-2022-4415), [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897).







 Change log for version 5.1.2_1828, released 21 February 2023 



* Resolves [CVE-2022-47629](https://nvd.nist.gov/vuln/detail/CVE-2022-47629).







 Change log for version 5.1, released 9 February 2023 



* Updates the snapshot size to reflect actual source volume size.
* Improves the resize method when creating a volume from a snapshot.
* Updates the Kubernetes dependency to 1.25.
* Adds support for configuring the log level for sidecars from the configmap.
* Makes the ibmc-vpcblock-snapshot class the default Volumesnapshotclass.
* [CVE-2022-23308](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23308)







 Version 0.49.3_1994_iks, released on 24 February 2022 



* [CVE-2022-23772](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23772)
* [CVE-2022-23773](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23773)
* [CVE-2022-23806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23806)







 Version 0.49.3_1941_iks, released on 22 January 2022 



* [CVE-2021-44716](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44716)
* [CVE-2021-44717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44717)







 Version 0.49.3_1830_iks, released on 19 November 2021 



* [CVE-2021-41771](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41771)
* [CVE-2021-41772](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41772)







 Version 0.49.3_1745_iks, released on 20 October 2021 

As of 14 Sept 2021, this is the only image supported for Kubernetes version 1.18 clusters.







 Version 0.48.0
This change is not automatically applied to existing PVCs and pods. You must create new PVCs with the new storage classes for the changes to take effect.





 Change log for version 2.2.5, released 9 December 2022 



* Updates the UBI image to 8.7-923.1669829893







 Change log for version 2.2.4, released 5 December 2022 



* Updates Golang to 1.18.8
* Resolves [CVE-2022-41715](https://nvd.nist.gov/vuln/detail/CVE-2022-41715), [CVE-2022-2879](https://nvd.nist.gov/vuln/detail/CVE-2022-2879), [CVE-2022-2880](https://nvd.nist.gov/vuln/detail/CVE-2022-2880)







 Change log for version 2.2.3, released 15 November 2022 



* Updates the UBI image to 8.7-923
* Resolves [CVE-2016-3709](https://nvd.nist.gov/vuln/detail/CVE-2016-3709), [CVE-2022-30698](https://nvd.nist.gov/vuln/detail/CVE-2022-30698), [CVE-2022-30699](https://nvd.nist.gov/vuln/detail/CVE-2022-30699), [CVE-2022-1304](https://nvd.nist.gov/vuln/detail/CVE-2022-1304).







 Change log for version 2.2.2, released 8 November 2022 



* Updates the UBI image to 8.6-994.
Cluster master operations N/A N/A Resolved a Red Hat OpenShift API server target down alert on clusters that are updated from version 4.4 or earlier. Fixed a bug that can cause ibmcloud oc cluster config to fail. 
 IBM Cloud Controller Manager v1.19.9-1 v1.19.10-1 Updated to support the Kubernetes 1.19.10 release and to use Go version 1.15.10. 
 IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851), and [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121). 
 IBM Cloud RBAC Operator 3dd6bbc b6a694b Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449) and [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450). 
 Key Management Service provider v2.3.0 v2.3.3 Updated to use Go version 1.15.11 and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305).
* Image update.







 1.4.0_4062_iks, released 27 April 2023 



* [CVE-2023-27533](https://nvd.nist.gov/vuln/detail/CVE-2023-27533)
* [CVE-2023-27534](https://nvd.nist.gov/vuln/detail/CVE-2023-27534)
* [CVE-2023-27535](https://nvd.nist.gov/vuln/detail/CVE-2023-27535)
* [CVE-2023-27536](https://nvd.nist.gov/vuln/detail/CVE-2023-27536)
* [CVE-2023-27537](https://nvd.nist.gov/vuln/detail/CVE-2023-27537)
* [CVE-2023-27538](https://nvd.nist.gov/vuln/detail/CVE-2023-27538)







 1.4.0_3978_iks, released 12 April 2023 

Updates golang to version 1.20.3.





 1.4.0_3953_iks, released 4 April 2023 



* [CVE-2023-25809](https://nvd.nist.gov/vuln/detail/CVE-2023-25809)
* [CVE-2023-28642](https://nvd.nist.gov/vuln/detail/CVE-2023-28642)
* [CVE-2023-0464](https://nvd.nist.gov/vuln/detail/CVE-2023-0464)
* [CVE-2023-0465](https://nvd.nist.gov/vuln/detail/CVE-2023-0465)







 1.4.0_3896_iks, released 24 March 2023 

Updates golang version to 1.20.2.
* [1.4.0_3703_iks, released 30 January 2023](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.4.0_3703_iks)
* [1.4.0_3684_iks, released 24 January 2023](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.4.0_3684_iks)
* [1.4.0_3537_iks, released 3 January 2023](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.4.0_3537_iks)
* [1.4.0_3297_iks, released 15 December 2022](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.4.0_3297_iks)
* [1.4.0_3212_iks, released 12 December 2022](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.4.0_3212_iks)



* [Version 1.3.1 (unsupported)](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1_3_1)



* [1.3.1_3807_iks, released 23 February 2023](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.3.1_3807_ikss)
* [1.3.1_3777_iks, released 20 February 2023](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelog1.3.1_3777_iks)
GPU device plug-in and installer 65e4401 4aa248d Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851) and [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121). 
 Key Management Service provider v1.0.10 v1.0.12 Updated to use Go version 1.15.11 and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 OpenVPN client 2.4.6-r3-IKS-301 2.4.6-r3-IKS-386 Updated image to implement additional IBM security controls.
* [CVE-2022-1586](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1586)
* [CVE-2022-1587](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1587)
* [usn-5587-1](https://ubuntu.com/security/notices/USN-5587-1)
* [usn-5627-1](https://ubuntu.com/security/notices/USN-5627-1)







 Change log for 1.14.4, released 4 October 2022 

Review the changes that are included in version 1.14.4 of the managed Istio add-on.

Previous version
: 1.14.3

Current version
: 1.14.4

Updates in this version
: See the Istio release notes for [Istio 1.14.4](https://istio.io/latest/news/releases/1.14.x/announcing-1.14.4/).
: Adds a 1G memory limit and a 100M memory request to the add-on-istio-operator deployment. This addition resolves an error in which a reconcile loop increased memory usage over time. Because of this change, your Istio operator pod might restart frequently. However, the frequent operator pod restarts do not affect Istio on the cluster and your Kubernetes deployment still matches what was specified in the IOPs.
: Resolves the following CVEs:



* [usn-5550-1](https://ubuntu.com/security/notices/USN-5550-1)
* [CVE-2021-4209](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4209)
Kubernetes admission controllers configuration N/A N/A Added PodSecurity to the --disable-admission-plugins option for the cluster's [Kubernetes API server](https://cloud.ibm.com/docs/containers?topic=containers-service-settingskube-apiserver). Pod security continues to be [configured via pod security policies](https://cloud.ibm.com/docs/containers?topic=containers-psp). 
 Kubernetes configuration N/A N/A Updated the [feature gate configuration](https://cloud.ibm.com/docs/containers?topic=containers-service-settingsfeature-gates). 
 Kubernetes CSI snapshotter CRDs v3.0.2 v4.0.0 See the [Kubernetes container storage interface (CSI) snapshotter release notes](https://github.com/kubernetes-csi/external-snapshotter/releases/tag/v4.0.0). 
 Kubernetes Metrics Server v0.4.4 v0.5.0 See the [Kubernetes Metrics Server release notes](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.5.0). The metrics-server-nanny container configuration has been updated to use a 30 second poll period (previously 5 minutes) to allow faster scaling of the metrics server. 
 Kubernetes NodeLocal DNS cache 1.17.3 1.20.0 Increased memory resource requests from 5Mi to 10Mi to better align with normal resource utilization. See the [Kubernetes NodeLocal DNS cache release notes](https://github.com/kubernetes/dns/releases/tag/1.20.0). 
 Portieris admission controller v0.10.3 v0.11.0 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.11.0).