vania-janet/multiturn-rag-retrieval-data huggingface dataset:
: Added a [troubleshooting topic](https://cloud.ibm.com/docs/openshift?topic=openshift-ts_cliskubectl_fails) for when you have a kubectl client version that is 2 or more versions apart from the server version or the Red Hat OpenShift version of kubectl, which does not work with community Kubernetes clusters.

Tutorials landing page
: Replaced the related links page with a new tutorials landing page for all tutorials that are specific to Kubernetes Service.

Using existing subnets to create a cluster
: To [reuse subnets from an unneeded cluster when you create a new cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-subnetssubnets_custom), the subnets must be user-managed subnets that you manually added from an on-premises network. All subnets that were automatically ordered during cluster creation are immediately marked for deletion after you delete a cluster, and you can't reuse these subnets to create a new cluster.





 12 June 2019 

Aggregating cluster roles
: Added steps for [extending users' existing permissions by aggregating cluster roles](https://cloud.ibm.com/docs/openshift?topic=openshift-usersrbac_aggregate).





 7 June 2019 

Access to the Kubernetes master through the private cloud service endpoint
: Added [steps](https://cloud.ibm.com/docs/openshift?topic=openshift-access_clusteraccess_private_se) to expose the private cloud service endpoint through a private load balancer. After you complete these steps, your authorized cluster users can access the Kubernetes master from a VPN or IBM Cloud Direct Link connection.

IBM Cloud® Direct Link
: Added IBM Cloud Direct Link to the [VPN connectivity](https://cloud.ibm.com/docs/openshift?topic=openshift-vpn) page as a way to create a direct, private connection between your remote network environments and IBM Cloud Kubernetes Service without routing over the public internet.
ID: crn:v1:bluemix:public:secrets-manager:us-south:a/f047b55a3362ac06afad8a3f2f5586ea:fe06948b-0c6b-4183-8d4b-e6c1d38ff65f::
GUID: fe06948b-0c6b-4183-8d4b-e6c1d38ff65f
Location: us-south
Service Name: secrets-manager
Service Plan Name: trial
Resource Group Name: default
State: active
Type: service_instance
Sub Type:
Created at: 2021-01-06T17:11:32Z
Created by: zara@example.com
Updated at: 2021-03-31T02:33:26Z



5. Set the context for your Kubernetes cluster in the CLI.

ibmcloud ks cluster config --cluster my-test-cluster
6. Verify that kubectl commands run properly and that the Kubernetes context is set to your cluster.

kubectl config current-context

Example output:

my-test-cluster/<your_cluster_ID>







 Create a trusted profile 

A trusted profile enables the External Secrets operator to read from Secrets Manager, without having to create a service ID or manage an API key.



1. Get the CRNs for your Secrets Manager instance and Kubernetes cluster.

CLUSTER_CRN=$(ibmcloud ks cluster get --cluster my-test-cluster --output json | jq -r '.crn')
SECRETS_MANAGER_CRN=$(ibmcloud resource service-instance my-secrets-manager --output JSON | jq -r '.[0].crn')
2. Create the profile.

ibmcloud iam trusted-profile-create 'External Secrets'
3. Authorize the Kubernetes cluster to use the trusted profile.
Use these commands to view the Kubernetes resources that run in clusters that are registered with [Satellite Configuration](https://cloud.ibm.com/docs/satellite?topic=satellite-setup-clusters-satconfig).



 ibmcloud sat resource get 

Get the details of a Kubernetes resource that is managed by a Satellite configuration.

ibmcloud sat resource get --resource RESOURCE [--save-data] [-q]



 Minimum required permissions 

IBM Cloud IAM Viewer platform role for the Resource resource in Satellite. For more information, see [Checking user permissions](https://cloud.ibm.com/docs/satellite?topic=satellite-iam-assign-accesschecking-perms).





 Command options 

--resource RESOURCE
: Required. The ID of the Kubernetes resource. To list Kubernetes resources, run ibmcloud sat resource ls.

--save-data
: Optional. Download and save the Kubernetes resource definition to a temporary file.

-q
: Optional. Do not show the message of the day or update reminders.





 Example 

ibmcloud sat resource get --resource 1234567







 ibmcloud sat resource history get 

Get the history of a Kubernetes resource.

ibmcloud sat resource history --resource RESOURCE [--limit LIMIT] [--output json] [-q]



 Minimum required permissions 

IBM Cloud IAM Viewer platform role for the Resource resource in Satellite. For more information, see [Checking user permissions](https://cloud.ibm.com/docs/satellite?topic=satellite-iam-assign-accesschecking-perms).





 Command options 

--resource RESOURCE
: Required. The ID of the Kubernetes resource. To list Kubernetes resources, run ibmcloud sat resource ls.

--limit LIMIT
: Optional. The maximum number of history entries to return.

--output json
: Optional. Prints the command output in JSON format.

-q
: Optional.
<br> <br>Resources <br><br><br><br> * random_id<br> * kubernetes_secret<br> * helm_release<br><br><br> [View code snippet](https://github.com/IBM-Cloud/terraform-provider-ibm/tree/master/examples/portworx) 
 ibm-lbaas Create an IBM Cloud® Load Balancer for a classic virtual server instance. You configure the load balancer to manage incoming HTTPS and HTTP network traffic and set up health monitoring for your virtual server instance. <br> <br>Resources <br><br><br><br> * ibm_compute_ssl_certificate<br> * ibm_compute_ssh_key<br> * ibm_compute_vm_instance<br> * ibm_lbaas<br> * ibm_lbaas_server_instance_attachment<br> * ibm_lbaas_health_monitor<br><br><br> [View code snippet](https://github.com/IBM-Cloud/terraform-provider-ibm/tree/master/examples/ibm-lbaas) 
 ibm-logdna-cluster-integration Create an IBM Cloud cluster integration service to configure IBM Cloud provider such as Helm, Kubernetes. Then, you can use a resource role binding to fetch resource key, and agents to log through resource role binding. <br> <br>Resources <br><br><br><br> * random_id<br> * kubernetes_role_binding<br> * helm_release<br><br><br> [View code snippet](https://github.com/IBM-Cloud/terraform-provider-ibm/tree/master/examples/ibm-logdna-cluster-integration) 







 Transit Gateway templates 



 Name Description and resources Code 

 ibm-transit-gateway Create a transit gateways, list available connections, and locations for the gateways.
IBM Cloud Provider v1.15.1-86 v1.15.2-94 Updated to support the Kubernetes 1.15.2 release. 
 IBM Cloud File Storage for Classic plug-in 347 348 Image updated for [CVE-2019-14697](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14697). 
 Kubernetes v1.15.1 v1.15.2 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.15.2). Updates resolves [CVE-2019-11247](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11247) (see [IBM security bulletin](https://www.ibm.com/support/pages/node/967115)) and [CVE-2019-11249](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11249) (see [IBM security bulletin](https://www.ibm.com/support/pages/node/967123)). 
 Load balancer and load balancer monitor for IBM Cloud Provider 146 147 Image updated for [CVE-2019-14697](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14697). 
 OpenVPN client 2.4.6-r3-IKS-90 2.4.6-r3-IKS-116 Image updated for [CVE-2019-14697](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14697).
: [Kubernetes 1.15](https://cloud.ibm.com/docs/containers?topic=containers-cs_versionscs_versions_available) is now the default version.





 21 January 2020 

Default IBM Cloud Kubernetes Service settings
: Review the [default settings](https://cloud.ibm.com/docs/containers?topic=containers-service-settings) for Kubernetes components, such as the kube-apiserver, kubelet, or kube-proxy.





 20 January 2020 

Helm version 3
: Updated [Adding services by using Helm charts](https://cloud.ibm.com/docs/containers?topic=containers-helm) to include steps for installing Helm v3 in your cluster. Migrate to Helm v3 today for several advantages over Helm v2, such as the removal of the Helm server, Tiller.

Ingress ALB change log
: Updated the [nginx-ingress image build to 621](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelogkube_ingress_changelog).

Version change log
: Patch updates are available.
: Kubernetes [1.16.5_1522](https://cloud.ibm.com/docs/containers?topic=containers-116_changelog1165_1522), [1.15.8_1529](https://cloud.ibm.com/docs/containers?topic=containers-115_changelog1158_1529), [1.14.10_1545](https://cloud.ibm.com/docs/containers?topic=containers-114_changelog11410_1545), and [1.13.12_1548](https://cloud.ibm.com/docs/containers?topic=containers-113_changelog11312_1548).





 13 January 2020 

Block Storage for Classic
Related links 



* [Caveonix integration](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vrw-caveonix)
* [Veeam on IBM Cloud overview](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-veeamvm_overview)
* [Veeam Backup & Replication best practices](https://bp.veeam.com/vbr/)
You must have the correct level of authority for specific tasks. These roles are set in Identity and access management. See [IBM Cloud service roles](https://cloud.ibm.com/docs/codeengine?topic=codeengine-iamservice).



Table 1. Kubernetes authorities

 Resource Manager role Writer role Reader role 

 serviceaccounts get, list, watch get, list, watch None 
 secrets get, list, watch, create, delete, update, patch, apply, edit get, list, watch, create, delete, update, patch, apply, edit None 
 configmaps get, list, watch, create, delete, update, patch, apply, edit get, list, watch, create, delete, update, patch, apply, edit None 
 events get, list, watch get, list, watch None 
 pods/log get, list, watch get, list, watch get, list, watch 
 pods get, list, watch, create, delete, patch, apply get, list, watch, create, delete, patch, apply get, list, watch 
 services get, list, watch, create, delete, patch, apply get, list, watch, create, delete, patch, apply get, list, watch 
 pods/exec create create None 
 pods/portforward create create None 
 pods/attach create None None 
 pods/status get, list get, list None 
 resourcequotas get, list, watch get, list, watch get, list, watch 
 limitranges get, list, watch get, list, watch None 
 deployments get, list, watch, create, delete, patch, apply get, list, watch, create, delete, patch, apply get, list, watch 
 daemonset get, list, watch get, list, watch get, list, watch 
 pods.metrics.k8s.io list list list
GPU device plug-in and installer eb3a259 e32d51c Updated images for [CVE-2019-6454](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6454). 
 IBM Cloud Provider v1.10.12-252 v1.10.13-288 Updated to support the Kubernetes 1.10.13 release. Fixed periodic connectivity problems for load balancers that set externalTrafficPolicy to local. Updated load balancer events to use the latest IBM Cloud documentation links. 
 IBM Cloud File Storage for Classic plug-in 342 344 Changed the base operating system for the image from Fedora to Alpine. Updated image for [CVE-2019-6486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6486). 
 Key Management Service provider 122 136 Increased client timeout to IBM Key Protect for IBM Cloud. Updated image for [CVE-2019-6486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6486). 
 Kubernetes v1.10.12 v1.10.13 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.10.13). 
 Kubernetes DNS N/A N/A Increased Kubernetes DNS pod memory limit from 170Mi to 400Mi to handle more cluster services. 
 Load balancer and load balancer monitor for IBM Cloud Provider 132 143 Updated image for [CVE-2019-6486](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6486).
: Kubernetes version [1.18.6_1522](https://cloud.ibm.com/docs/containers?topic=containers-118_changelog1186_1522), [1.17.9_1534](https://cloud.ibm.com/docs/containers?topic=containers-117_changelog1179_1534), [1.16.13_1541](https://cloud.ibm.com/docs/containers?topic=containers-116_changelog11613_1541), and [1.15.12_1548](https://cloud.ibm.com/docs/containers?topic=containers-115_changelog11512_1548).

Worker node replacement
: Added a troubleshooting topic for when [replacing a worker node does not create a worker node](https://cloud.ibm.com/docs/containers?topic=containers-auto-rebalance-off).





 20 July 2020 

Master versions
: Master fix pack update change log documentation is available.
: Kubernetes version [1.18.6_1521](https://cloud.ibm.com/docs/containers?topic=containers-118_changelog1186_1521), [1.17.9_1533](https://cloud.ibm.com/docs/containers?topic=containers-117_changelog1179_1533), [1.16.13_1540](https://cloud.ibm.com/docs/containers?topic=containers-116_changelog11613_1540), and [1.15.12_1547](https://cloud.ibm.com/docs/containers?topic=containers-115_changelog11512_1547).

Worker node versions
: Worker node fix pack update change log documentation is available.
List your Kubernetes services and find the name of the LoadBalancer service you want to change.

kubectl get services

Example output.

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
my-load-balancer LoadBalancer 172.21.77.198 52.118.150.107 8080:32767/TCP,443:30943/TCP 5d
3. Find the VPC load balancer that corresponds with the Kubernetes LoadBalancer service.

VPC load balancer names are in the format kube-<cluster_ID>-<kubernetes_lb_service_UID>. To see your cluster ID, run ibmcloud ks cluster get --cluster <cluster_name>. To see the Kubernetes LoadBalancer service UID, run kubectl get svc <load-balancer-name> -o yaml and look for the metadata.uid field in the output. The dashes (-) are removed from the Kubernetes LoadBalancer service UID in the VPC load balancer name.

ibmcloud is load-balancers

Example output.

ID Name Family Subnets Is public Provision status Operating status Resource group
r000-5aaaa11f6-c111-111f-b2e0-1c11aaaaf0dc0 kube-c441c43d02mb8mg00r70-3e25d0b5bf11111111fe4ca3f11111cb Network subnet-1 true active online default Application
4. Get the Kubernetes LoadBalancer service definition and save the output as a yaml file called my-lb.yaml.

kubectl describe service my-load-balancer -o yaml
5. Delete the Kubernetes LoadBalancer service. This also deletes the corresponding VPC load balancer.

kubectl delete service my-load-balancer
6. Update the Kubernetes LoadBalancer service definition file with the subnet or zone changes you want to implement.
-22824](https://nvd.nist.gov/vuln/detail/CVE-2022-22824), [CVE-2022-22825](https://nvd.nist.gov/vuln/detail/CVE-2022-22825), [CVE-2022-22826](https://nvd.nist.gov/vuln/detail/CVE-2022-22826), [CVE-2022-22827](https://nvd.nist.gov/vuln/detail/CVE-2022-22827), [CVE-2022-22942](https://nvd.nist.gov/vuln/detail/CVE-2022-22942), [CVE-2022-23852](https://nvd.nist.gov/vuln/detail/CVE-2022-23852), [CVE-2022-23990](https://nvd.nist.gov/vuln/detail/CVE-2022-23990), [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407), [CVE-2022-25235](https://nvd.nist.gov/vuln/detail/CVE-2022-25235), [CVE-2022-25236](https://nvd.nist.gov/vuln/detail/CVE-2022-25236). 
 Kubernetes v1.22.6 v1.22.7 For more information, see the [change logs](https://github.com/kubernetes/kubernetes/releases/tag/v1.22.7). 
 HA proxy f6a2b3 15198fb Contains fixes for [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407).
Additionally, you can now scale up the number of Kubernetes Dashboard pods by running kubectl -n kube-system scale deploy kubernetes-dashboard --replicas=3. 
 Kubernetes DNS 1.14.10 1.14.13 See the [Kubernetes DNS release notes]([https://github.com/kubernetes/dns/releases/tag/1.14.13](https://github.com/kubernetes/dns/releases/tag/1.14.13)]{: external}. 
 Kubernetes Metrics Server N/A v0.3.1 See the [Kubernetes Metrics Server release notes]([https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.3.1](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.3.1)]{: external}. 
 IBM Cloud Provider v1.11.3-118 v1.12.2-68 Updated to support the Kubernetes 1.12 release. Additional changes include the following:<br><br><br><br> * Load balancer pods (ibm-cloud-provider-ip- in ibm-system namespace) now set CPU and memory resource requests.<br> * The service.kubernetes.io/ibm-load-balancer-cloud-provider-vlan annotation is added to specify the VLAN that the load balancer service deploys to. To see available VLANs in your cluster, run ibmcloud ks vlan ls --zone <zone>.<br> * A new [load balancer 2.0](https://cloud.ibm.com/docs/containers?topic=containers-loadbalancer-aboutplanning_ipvs) is available as a beta.<br><br><br> 
 OpenVPN client configuration N/A N/A OpenVPN client vpn-* pod in the kube-system namespace now sets CPU and memory resource requests.
2020-29363](https://nvd.nist.gov/vuln/detail/CVE-2020-29363), [CVE-2020-28196](https://nvd.nist.gov/vuln/detail/CVE-2020-28196), [CVE-2019-2708](https://nvd.nist.gov/vuln/detail/CVE-2019-2708), [CVE-2016-10228](https://nvd.nist.gov/vuln/detail/CVE-2016-10228), [CVE-2019-25013](https://nvd.nist.gov/vuln/detail/CVE-2019-25013), [CVE-2019-9169](https://nvd.nist.gov/vuln/detail/CVE-2019-9169), [CVE-2020-27618](https://nvd.nist.gov/vuln/detail/CVE-2020-27618), [CVE-2021-3326](https://nvd.nist.gov/vuln/detail/CVE-2021-3326), and [CVE-2020-8927](https://nvd.nist.gov/vuln/detail/CVE-2020-8927). 
 Kubernetes v1.19.10 v1.19.11 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.19.11).
[CVE-2022-3515](https://nvd.nist.gov/vuln/detail/CVE-2022-3515), [CVE-2022-35737](https://nvd.nist.gov/vuln/detail/CVE-2022-35737), [CVE-2022-39253](https://nvd.nist.gov/vuln/detail/CVE-2022-39253), [CVE-2022-39260](https://nvd.nist.gov/vuln/detail/CVE-2022-39260), [CVE-2022-40284](https://nvd.nist.gov/vuln/detail/CVE-2022-40284), [CVE-2022-40674](https://nvd.nist.gov/vuln/detail/CVE-2022-40674), [CVE-2022-40768](https://nvd.nist.gov/vuln/detail/CVE-2022-40768), [CVE-2022-41974](https://nvd.nist.gov/vuln/detail/CVE-2022-41974), [CVE-2022-42010](https://nvd.nist.gov/vuln/detail/CVE-2022-42010), [CVE-2022-42011](https://nvd.nist.gov/vuln/detail/CVE-2022-42011), [CVE-2022-42012](https://nvd.nist.gov/vuln/detail/CVE-2022-42012). 
 Kubernetes 1.24.7 1.24.8 For more information, see the [change log](https://github.com/kubernetes/kubernetes/releases/tag/v1.24.8).
2020-29363](https://nvd.nist.gov/vuln/detail/CVE-2020-29363), [CVE-2020-28196](https://nvd.nist.gov/vuln/detail/CVE-2020-28196), [CVE-2019-2708](https://nvd.nist.gov/vuln/detail/CVE-2019-2708), [CVE-2016-10228](https://nvd.nist.gov/vuln/detail/CVE-2016-10228), [CVE-2019-25013](https://nvd.nist.gov/vuln/detail/CVE-2019-25013), [CVE-2019-9169](https://nvd.nist.gov/vuln/detail/CVE-2019-9169), [CVE-2020-27618](https://nvd.nist.gov/vuln/detail/CVE-2020-27618), [CVE-2021-3326](https://nvd.nist.gov/vuln/detail/CVE-2021-3326), and [CVE-2020-8927](https://nvd.nist.gov/vuln/detail/CVE-2020-8927). 
 Kubernetes v1.20.6 v1.20.7 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.20.7).
2020-29363](https://nvd.nist.gov/vuln/detail/CVE-2020-29363), [CVE-2020-28196](https://nvd.nist.gov/vuln/detail/CVE-2020-28196), [CVE-2019-2708](https://nvd.nist.gov/vuln/detail/CVE-2019-2708), [CVE-2016-10228](https://nvd.nist.gov/vuln/detail/CVE-2016-10228), [CVE-2019-25013](https://nvd.nist.gov/vuln/detail/CVE-2019-25013), [CVE-2019-9169](https://nvd.nist.gov/vuln/detail/CVE-2019-9169), [CVE-2020-27618](https://nvd.nist.gov/vuln/detail/CVE-2020-27618), [CVE-2021-3326](https://nvd.nist.gov/vuln/detail/CVE-2021-3326), and [CVE-2020-8927](https://nvd.nist.gov/vuln/detail/CVE-2020-8927). 
 Kubernetes v1.18.18 v1.18.19 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.18.19).
View a configuration of Kubernetes resources that are managed by Satellite Config. channel [configuration get](https://cloud.ibm.com/docs/satellite?topic=satellite-satellite-cli-referencecli-config-configuration-get) /n [configuration ls](https://cloud.ibm.com/docs/satellite?topic=satellite-satellite-cli-referencecli-config-configuration-ls) ![Feature available.](https://cloud.ibm.com/docs-content/v1/content/c8335d66af691d19e837116fd633481c477061eb/satellite/images/icon-checkmark-filled.svg) 
 Create a configuration for Kubernetes resources that are managed by Satellite Config. addChannel [configuration create](https://cloud.ibm.com/docs/satellite?topic=satellite-satellite-cli-referencecli-config-configuration-create) ![Feature available.](https://cloud.ibm.com/docs-content/v1/content/c8335d66af691d19e837116fd633481c477061eb/satellite/images/icon-checkmark-filled.svg) 
 Update a configuration of Kubernetes resources that are managed by Satellite Config. editChannel [configuration rename](https://cloud.ibm.com/docs/satellite?topic=satellite-satellite-cli-referencecli-config-configuration-rename) ![Feature available.](https://cloud.ibm.com/docs-content/v1/content/c8335d66af691d19e837116fd633481c477061eb/satellite/images/icon-checkmark-filled.svg) ![Feature available.]
[CVE-2022-3515](https://nvd.nist.gov/vuln/detail/CVE-2022-3515), [CVE-2022-35737](https://nvd.nist.gov/vuln/detail/CVE-2022-35737), [CVE-2022-39253](https://nvd.nist.gov/vuln/detail/CVE-2022-39253), [CVE-2022-39260](https://nvd.nist.gov/vuln/detail/CVE-2022-39260), [CVE-2022-40284](https://nvd.nist.gov/vuln/detail/CVE-2022-40284), [CVE-2022-40674](https://nvd.nist.gov/vuln/detail/CVE-2022-40674), [CVE-2022-40768](https://nvd.nist.gov/vuln/detail/CVE-2022-40768), [CVE-2022-41974](https://nvd.nist.gov/vuln/detail/CVE-2022-41974), [CVE-2022-42010](https://nvd.nist.gov/vuln/detail/CVE-2022-42010), [CVE-2022-42011](https://nvd.nist.gov/vuln/detail/CVE-2022-42011), [CVE-2022-42012](https://nvd.nist.gov/vuln/detail/CVE-2022-42012). 
 Kubernetes 1.22.15 1.22.16 For more information, see the [change log](https://github.com/kubernetes/kubernetes/releases/tag/v1.22.16).
[CVE-2022-3515](https://nvd.nist.gov/vuln/detail/CVE-2022-3515), [CVE-2022-35737](https://nvd.nist.gov/vuln/detail/CVE-2022-35737), [CVE-2022-39253](https://nvd.nist.gov/vuln/detail/CVE-2022-39253), [CVE-2022-39260](https://nvd.nist.gov/vuln/detail/CVE-2022-39260), [CVE-2022-40284](https://nvd.nist.gov/vuln/detail/CVE-2022-40284), [CVE-2022-40674](https://nvd.nist.gov/vuln/detail/CVE-2022-40674), [CVE-2022-40768](https://nvd.nist.gov/vuln/detail/CVE-2022-40768), [CVE-2022-41974](https://nvd.nist.gov/vuln/detail/CVE-2022-41974), [CVE-2022-42010](https://nvd.nist.gov/vuln/detail/CVE-2022-42010), [CVE-2022-42011](https://nvd.nist.gov/vuln/detail/CVE-2022-42011), [CVE-2022-42012](https://nvd.nist.gov/vuln/detail/CVE-2022-42012). 
 Kubernetes 1.25.3 1.25.4 For more information, see the [change log](https://github.com/kubernetes/kubernetes/releases/tag/v1.25.4).