Skip to content

Latest commit

 

History

History
844 lines (660 loc) · 123 KB

cs_versions_changelog_117.md

File metadata and controls

844 lines (660 loc) · 123 KB
Raw
copyright lastupdated keywords subcollection
years
2014, 2024
2024-06-07
kubernetes, versions, update, upgrade, BOM, bill of materials, versions, patch
containers

{{site.data.keyword.attribute-definition-list}}

Version 1.17 change log

{: #117_changelog}

This version is no longer supported. Update your cluster to a supported version as soon as possible. {: important}

Change log for worker node fix pack 1.17.17_1568, released 19 July 2021

{: #11717_1568}

The following table shows the changes that are in the worker node fix pack 1.17.17_1568. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 16.04 packages N/A N/A Updated worker node images with kernel package updates.
Ubuntu 18.04 packages N/A N/A Updated worker node images with kernel package updates.
{: caption="Changes since version 1.17.17_1567" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1567, released 6 July 2021

{: #11717_1567_worker}

The following table shows the changes that are in the worker node fix pack 1.17.17_1567. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy 700dc6 aae810 Updated image with fixes for CVE-2021-3520{: external}, CVE-2021-20271{: external}, CVE-2021-3516{: external}, CVE-2021-3517{: external}, CVE-2021-3518{: external}, CVE-2021-3537{: external}, and CVE-2021-3541{: external}.
Ubuntu 18.04 packages 4.15.0.144 4.15.0.147 Updated worker node images with kernel package updates for CVE-2021-23133{: external}, CVE-2021-3444{: external}, and CVE-2021-3600{: external}.
{: caption="Changes since version 1.17.17_1566" caption-side="bottom"}

Change log for master fix pack 1.17.17_1567, released 28 June 2021

{: #11717_1567}

The following table shows the changes that are in the master fix pack patch update 1.17.17_1567. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.22 v1.1.23 Updated to use Go version 1.15.12. Updated image for CVE-2021-33194{: external}.
GPU device plug-in and installer 4aa248d 83ae89b Updated to use Go version 1.15.12. Updated universal base image (UBI) to version 8.4 to resolve CVEs. Updated the GPU drivers to version 460.73.01{: external}.
IBM Calico extension 689 730 Updated to use Go version 1.16.15. Updated UBI minimal base image to version 8.4 to resolve CVEs.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 392 394 Updated to use Go version 1.15.12. Updated UBI base image to version 8.4 to resolve CVEs.
Key Management Service provider v1.0.14 v1.0.15 Updated to use Go version 1.15.12. Updated image for CVE-2021-33194{: external}.
{: caption="Changes since version 1.17.17_1563" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1566, released 22 June 2021

{: #11717_1566}

The following table shows the changes that are in the worker node fix pack 1.17.17_1566. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy 26c5cc d3dc33 Updated image with fixes for CVE-2020-24977{: external}, CVE-2020-13434{: external}, CVE-2020-15358{: external}, CVE-2020-29361{: external}, CVE-2020-29362{: external}, CVE-2020-29363{: external}, CVE-2019-2708{: external}, CVE-2019-13012{: external}, CVE-2020-13543{: external}, CVE-2020-13584{: external}, CVE-2020-9948{: external}, CVE-2020-9951{: external}, CVE-2020-9983{: external}, CVE-2021-27219{: external}, CVE-2020-8231{: external}, CVE-2020-8284{: external}, CVE-2020-8285{: external}, CVE-2020-8286{: external}, CVE-2016-10228{: external}, CVE-2019-25013{: external}, CVE-2019-9169{: external}, CVE-2020-27618{: external}, CVE-2021-3326{: external}, CVE-2020-26116{: external}, CVE-2020-27619{: external}, CVE-2021-23336{: external}, CVE-2021-3177{: external}, CVE-2019-3842{: external}, CVE-2020-13776{: external}, CVE-2020-24330{: external}, CVE-2020-24331{: external}, CVE-2020-24332{: external}, CVE-2017-14502{: external}, CVE-2020-8927{: external} and CVE-2020-28196{: external}.
{{site.data.keyword.registrylong_notm}} N/A N/A Added private-only registry support for ca.icr.io, br.icr.io and jp2.icr.io.
Ubuntu 18.04 packages N/A N/A Updated worker node images with package updates for CVE-2017-8779{: external}, CVE-2017-8872{: external}, CVE-2018-16869{: external}, CVE-2019-20388{: external}, CVE-2020-24977{: external}, CVE-2021-3516{: external}, CVE-2021-3517{: external} CVE-2021-3518{: external}, CVE-2021-3537{: external}, CVE-2021-3580{: external}.
{: caption="Changes since version 1.17.17_1565" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1565, released 7 June 2021

{: #11717_1565}

The following table shows the changes that are in the worker node fix pack 1.17.17_1565. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy 26c5cc 700dc6 Updated the image for CVE-2021-27219{: external}.
TCP keepalive optimization for VPC N/A N/A Set the net.ipv4.tcp_keepalive_time setting to 180 seconds for compatibility with VPC gateways.
Ubuntu 18.04 packages 4.15.0-143 4.15.0-144 Updated worker node images with kernel package updates for CVE-2021-25217{: external}, CVE-2021-31535{: external}, CVE-2021-32547{: external}, CVE-2021-32552{: external}, CVE-2021-32556{: external}, CVE-2021-32557{: external}, CVE-2021-3448{: external}, and CVE-2021-3520{: external}.
{: caption="Changes since version 1.17.17_1564" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1564, released 24 May 2021

{: #11717_1564}

The following table shows the changes that are in the worker node fix pack 1.17.17_1564. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy e0fa2f 26c5cc Updated image with fixes for CVE-2020-26116{: external}, CVE-2020-27619{: external}, CVE-2021-23336{: external}, CVE-2021-3177{: external}, CVE-2019-3842{: external}, CVE-2020-13776{: external}, CVE-2019-18276{: external}, CVE-2020-24977{: external}, CVE-2020-13434{: external}, CVE-2020-15358{: external}, CVE-2019-13012{: external}, CVE-2020-13543{: external}, CVE-2020-13584{: external}, CVE-2020-9948{: external}, CVE-2020-9951{: external}, CVE-2020-9983{: external}, CVE-2020-8231{: external}, CVE-2020-8284{: external}, CVE-2020-8285{: external}, CVE-2020-8286{: external}, CVE-2020-24330{: external}, CVE-2020-24331{: external}, CVE-2020-24332{: external}, CVE-2020-29361{: external}, CVE-2020-29362{: external}, CVE-2020-29363{: external}, CVE-2020-28196{: external}, CVE-2019-2708{: external}, CVE-2016-10228{: external}, CVE-2019-25013{: external}, CVE-2019-9169{: external}, CVE-2020-27618{: external}, CVE-2021-3326{: external}, and CVE-2020-8927{: external}.
Ubuntu 18.04 packages 4.15.0-142 4.15.0-143 Updated worker node images with kernel package updates for CVE-2021-28688{: external}, CVE-2021-20292{: external}, CVE-2021-29264{: external}, CVE-2021-29265{: external}, and CVE-2021-29650{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node images with package updates for CVE-2009-5155{: external} and CVE-2020-6096{: external}.
{: caption="Changes since version 1.17.17_1562" caption-side="bottom"}

Change log for master fix pack 1.17.17_1563, released 24 May 2021

{: #11717_1563}

The following table shows the changes that are in the master fix pack patch update 1.17.17_1563. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.21 v1.1.22 Updated image to implement additional IBM security controls and for CVE-2020-26160{: external}, CVE-2020-28483{: external} and CVE-2021-20305{: external}.
Gateway-enabled cluster controller 1322 1352 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for CVE-2021-28831{: external}, CVE-2021-30139{: external}, CVE-2021-3449{: external} and CVE-2021-3450{: external}.
IBM Calico extension 618 689 Updated to use Go version 1.15.12. Updated image to implement additional IBM security controls and for CVE-2020-14391{: external}, CVE-2020-25661{: external} and CVE-2020-25662{: external}.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for CVE-2021-20305{: external}.
Key Management Service provider v1.0.12 v1.0.14 Updated image to implement additional IBM security controls and for CVE-2020-26160{: external} and CVE-2020-28483{: external}.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider 1274 1328 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for CVE-2021-28831{: external}, CVE-2021-30139{: external}, CVE-2021-3449{: external} and CVE-2021-3450{: external}.
{: caption="Changes since version 1.17.17_1560" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1562, released 10 May 2021

{: #11717_1562}

The following table shows the changes that are in the worker node fix pack 1.17.17_1562. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages N/A N/A Updated worker node images with package updates for CVE-2021-25214{: external}, CVE-2021-25215{: external}, and CVE-2021-25216{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node images with package updates for CVE-2020-27350{: external}, CVE-2020-3810{: external}, CVE-2021-25214{: external}, CVE-2021-25215{: external}, and CVE-2021-25216{: external}.
{: caption="Changes since version 1.17.17_1561" caption-side="bottom"}

Change log for master fix pack 1.17.17_1560, released 27 April 2021

{: #11717_1560}

The following table shows the changes that are in the master fix pack patch update 1.17.17_1560. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.19 v1.1.21 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for CVE-2021-3449{: external}, CVE-2021-3450{: external}, and CVE-2021-20305{: external}.
GPU device plug-in and installer 65e4401 4aa248d Updated image for CVE-2021-3449{: external}, CVE-2021-3450{: external}, and CVE-2021-20305{: external}.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for CVE-2020-28851{: external} and CVE-2021-3121{: external}.
Key Management Service provider v1.0.10 v1.0.12 Updated to use Go version 1.15.11 and for CVE-2021-3449{: external}, CVE-2021-3450{: external}, and CVE-2021-20305{: external}.
OpenVPN client 2.4.6-r3-IKS-301 2.4.6-r3-IKS-386 Updated image to implement additional IBM security controls.
OpenVPN server 2.4.6-r3-IKS-301 2.4.6-r3-IKS-385 Updated image to implement additional IBM security controls.
Operator Lifecycle Manager 0.14.1-IKS-4 0.14.1-IKS-8 Updated image for CVE-2021-3449{: external}, CVE-2021-3450{: external}, and CVE-2021-30139{: external}.
{: caption="Changes since version 1.17.17_1557" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1561, released 26 April 2021

{: #11717_1561}

The following table shows the changes that are in the worker node fix pack 1.17.17_1561. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy a3b1ff e0fa2f The update addresses CVE-2021-20305{: external}.
Ubuntu 18.04 packages N/A N/A Added resiliency to systemd units to prevent failures situations where the worker nodes are overused. \n Updated worker node images with kernel and package updates for CVE-2018-13095{: external}, CVE-2021-20305{: external}, CVE-2021-29154{: external}, and CVE-2021-3348{: external}.
Ubuntu 16.04 packages 4.4.0-206 4.4.0-210 Updated worker node images with kernel and package updates for [CVE-2015-1350{: external}, CVE-2017-15107{: external}, CVE-2017-5967{: external}, CVE-2018-13095{: external}, CVE-2018-5953{: external}, CVE-2019-14513{: external}, CVE-2019-16231{: external}, CVE-2019-16232{: external}, CVE-2019-19061{: external}, CVE-2021-20305{: external}, and CVE-2021-29154{: external}.
{: caption="Changes since version 1.17.17_1559" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1559, released 12 April 2021

{: #11717_1559}

The following table shows the changes that are in the worker node fix pack 1.17.17_1559. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy 9b2dca a3b1ff The update addresses CVE-2021-3449{: external} and CVE-2021-3450{: external}.
Ubuntu 18.04 packages N/A N/A Updated worker node images with package updates for CVE-2021-22876{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node images with package updates for CVE-2021-22876{: external}.
{: caption="Changes since version 1.17.17_1558" caption-side="bottom"}

Change log for master fix pack 1.17.17_1557, released 30 March 2021

{: #11717_1557}

The following table shows the changes that are in the master fix pack patch update 1.17.17_1557. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
{{site.data.keyword.at_short}} event N/A N/A Now, the containers-kubernetes.version.update event is sent to {{site.data.keyword.at_short}} when a master fix pack update is initiated for a cluster.
Cluster health image v1.1.18 v1.1.19 Updated image for CVE-2020-28851{: external}.
Gateway-enabled cluster controller 1232 1322 Updated to use Go version 1.15.10 and for CVE-2021-23839{: external}, CVE-2021-23840{: external}, and CVE-2021-23841{: external}.
GPU device plug-in 4d3b934f 65e4401 Updated image for CVE-2021-27919{: external}, CVE-2020-28851{: external}, and CVE-2020-28852{: external}.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 388 389 Updated to use Go version 1.15.8.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider 1165 1274 Fixed a bug that might cause version 2.0 network load balancers (NLBs) to crash and restart on load balancer updates.
{: caption="Changes since version 1.17.17_1555" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1558, released 29 March 2021

{: #11717_1558}

The following table shows the changes that are in the worker node fix pack 1.17.17_1558. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages 4.15.0-136-generic 4.15.0-140-generic Updated worker node images with kernel and package updates for CVE-2020-27170{: external}, CVE-2020-27171{: external}, CVE-2021-27363{: external}, CVE-2021-27365{: external}, CVE-2021-28153{: external}, and CVE-2021-3449{: external}.
Ubuntu 16.04 packages 4.4.0-203-generic 4.4.0-206-generic Updated worker node images with kernel and package updates for CVE-2021-27363{: external}, CVE-2021-27365{: external}, and CVE-2021-28153{: external}.
{: caption="Changes since version 1.17.17_1556" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1556, released 12 March 2021

{: #11717_1556}

The following table shows the changes that are in the worker node fix pack 1.17.17_1556. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Containerd v1.3.9 1.3.10 See the containerd release notes{: external}. The update resolves CVE-2021-21334 (see the IBM security bulletin{: external}).
Ubuntu 18.04 packages N/A N/A Updated worker node image with package updates for CVE-2021-21300{: external}, CVE-2021-24031{: external}, CVE-2021-24032{: external}, CVE-2021-27218{: external}, and CVE-2021-27219{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node image with package updates for{: external}, CVE-2021-21300{: external}, CVE-2021-27218{: external}, CVE-2021-27219{: external}, and CVE-2021-3177{: external}.
{: caption="Changes since version 1.17.17_1555" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1555, released 1 March 2021

{: #11717_1555_worker}

The following table shows the changes that are in the worker node fix pack 1.17.17_1555. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages 4.15.0-135-generic 4.15.0-136-generic Updated worker node image with package updates for CVE-2020-27619{: external}, CVE-2020-29372{: external}, CVE-2020-29374{: external}, CVE-2020-8625{: external}, CVE-2021-23840{: external}, CVE-2021-23841{: external}, CVE-2021-26937{: external}, CVE-2021-27212{: external}, and CVE-2021-3177{: external}.
Ubuntu 16.04 packages 4.4.0-201-generic 4.4.0-203-generic Updated worker node image with package updates for CVE-2020-27619{: external}, CVE-2020-29372{: external}, CVE-2020-29374{: external}, CVE-2020-8625{: external}, CVE-2021-23840{: external}, CVE-2021-23841{: external}, CVE-2021-26937{: external}, CVE-2021-27212{: external}, and CVE-2021-3177{: external}.
{: caption="Changes since version 1.17.17_1553" caption-side="bottom"}

Change log for master fix pack 1.17.17_1555, released 22 February 2021

{: #11717_1555}

The following table shows the changes that are in the master fix pack patch update 1.17.17_1555. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.16 v1.1.18 Updated to use Go version 1.15.7. Updated image to implement additional IBM security controls.
Gateway-enabled cluster controller 1195 1232 Updated to use Go version 1.15.7.
IBM Calico extension 567 618 Updated to use Go version 1.15.7.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.17-1 v1.17.17-6 Updated image for for DLA-2509-1{: external}.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 385 388 Improved the retry logic for provisioning persistent volume claims (PVCs).
Key Management Service provider v1.0.7 v1.0.10 Updated image for CVE-2020-1971{: external} and CVE-2020-24659{: external}.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider 1078 1165 Updated to use Go version 1.15.7.
Operator Lifecycle Manager 0.14.1-IKS-2 0.14.1-IKS-4 Updated image for CVE-2021-23839{: external}, CVE-2021-23840{: external}, and CVE-2021-23841{: external}.
{: caption="Changes since version 1.17.17_1551" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1553, released 15 February 2021

{: #11717_1553}

The following table shows the changes that are in the worker node fix pack 1.17.17_1553. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages N/A N/A Updated worker node image with package updates for CVE-2020-36221{: external}, CVE-2020-36222{: external}, CVE-2020-36223{: external}, CVE-2020-36224{: external}, CVE-2020-36225{: external}, CVE-2020-36226{: external}, CVE-2020-36227{: external}, CVE-2020-36228{: external}, CVE-2020-36229{: external}, CVE-2020-36230{: external}, CVE-2021-25682{: external}, CVE-2021-25683{: external}, and CVE-2021-25684{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node image with package updates for CVE-2020-36221{: external}, CVE-2020-36222{: external}, CVE-2020-36223{: external}, CVE-2020-36224{: external}, CVE-2020-36225{: external}, CVE-2020-36226{: external}, CVE-2020-36227{: external}, CVE-2020-36228{: external}, CVE-2020-36229{: external}, CVE-2020-36230{: external}, CVE-2021-25682{: external}, CVE-2021-25683{: external}, and CVE-2021-25684{: external}.
{: caption="Changes since version 1.17.17_1552" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1552, released 1 February 2021

{: #11717_1552}

The following table shows the changes that are in the worker node fix pack 1.17.17_1552. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 16.04 packages 4.4.0-200-generic 4.4.0-201-generic Updated worker node image with kernel and package updates for CVE-2019-14834{: external}, CVE-2020-25681{: external}, CVE-2020-25682{: external}, CVE-2020-25683{: external}, CVE-2020-25684{: external}, CVE-2020-25685{: external}, CVE-2020-25686{: external}, CVE-2020-25687{: external}, CVE-2020-27777{: external}, CVE-2021-23239{: external}, and CVE-2021-3156{: external}.
Ubuntu 18.04 packages 4.15.0-132-generic 4.15.0-135-generic Updated worker node image with kernel and package updates for CVE-2019-12761{: external}, CVE-2019-14834{: external}, CVE-2020-25681{: external}, CVE-2020-25682{: external}, CVE-2020-25683{: external}, CVE-2020-25684{: external}, CVE-2020-25685{: external}, CVE-2020-25686{: external}, CVE-2020-25687{: external}, CVE-2020-27777{: external}, CVE-2021-23239{: external}, and CVE-2021-3156{: external}.
{: caption="Changes since version 1.17.17_1551" caption-side="bottom"}

Change log for master fix pack 1.17.17_1551, released 19 January 2021

{: #11717_1551_master}

The following table shows the changes that are in the master fix pack patch update 1.17.17_1551. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.13 v1.1.16 Updated image to implement additional IBM security controls.
Gateway-enabled cluster controller 1184 1195 Updated image for CVE-2020-1971{: external}.
GPU device plug-in and installer adcae42 4d3b934f Updated image for CVE-2021-3114{: external}, CVE-2021-3115{: external}, CVE-2020-27350{: external}, CVE-2020-29361{: external}, CVE-2020-29362{: external}, CVE-2020-29363{: external}, CVE-2020-1971{: external}, CVE-2020-8231{: external}, CVE-2020-8284{: external}, CVE-2020-8285{: external}, and CVE-2020-8286{: external}.
IBM Calico extension 556 567 Updated image for CVE-2020-1971{: external} and CVE-2020-24659{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.16-1 v1.17.17-1 Updated to support the Kubernetes 1.17.17 release.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 384 385 Updated image for CVE-2020-1971{: external} and CVE-2020-24659{: external}.
Key Management Service provider v1.0.5 v1.0.7 Fixed bug to ignore conflict errors during KMS secret reencryption. Updated to use Go version 1.15.5. Updated image for CVE-2020-1971{: external}.
Kubernetes v1.17.16 v1.17.17 See the Kubernetes release notes{: external}. Updated to implement additional IBM security controls.
Kubernetes Dashboard v2.0.4 v2.0.5 See the Kubernetes Dashboard release notes{: external}.
Kubernetes Dashboard metrics scraper v1.0.4 v1.0.6 See the Kubernetes Dashboard metrics scraper release notes{: external}.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider 1004 1078 Updated image for CVE-2020-1971{: external}.
{: caption="Changes since version 1.17.16_1550" caption-side="bottom"}

Change log for worker node fix pack 1.17.17_1551, released 18 January 2021

{: #11717_1551}

The following table shows the changes that are in the worker node fix pack 1.17.17_1551. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Kubernetes v1.17.15 v1.17.17 See the Kubernetes release notes{: external}.
Ubuntu 16.04 packages 4.4.0-197-generic 4.4.0-200-generic Updated worker node image with kernel and package updates for CVE-2018-20482{: external}, CVE-2019-9923{: external}, CVE-2020-28374{: external}, CVE-2020-29361{: external} external}, and CVE-2020-29362{: external} external}.
Ubuntu 18.04 packages 4.15.0-128-generic 4.15.0-132-generic Updated worker node image with kernel and package updates for CVE-2018-20482{: external}, CVE-2019-9923{: external}, CVE-2020-28374{: external}, CVE-2020-29361{: external}, CVE-2020-29362{: external}, CVE-2020-29363{: external}, CVE-2021-1052{: external}, CVE-2021-1053{: external}, and CVE-2019-19770{: external}.
{: caption="Changes since version 1.17.15_1549" caption-side="bottom"}

Change log for master fix pack 1.17.16_1550, released 6 January 2021

{: #11716_1550}

The following table shows the changes that are in the master fix pack patch update 1.17.16_1550. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
IBM Calico extension 544 556 Updated image to include the ip command.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.15-1 v1.17.16-1 Updated to support the Kubernetes 1.17.16 release.
{{site.data.keyword.filestorage_full_notm}} plug-in N/A N/A Updated to run with a privileged security context.
Kubernetes v1.17.15 v1.17.16 See the Kubernetes release notes{: external}.
Operator Lifecycle Manager 0.14.1-IKS-1 0.14.1-IKS-2 Updated image for CVE-2020-1971{: external} and CVE-2020-28928{: external}.
{: caption="Changes since version 1.17.15_1548" caption-side="bottom"}

Change log for worker node fix pack 1.17.15_1549, released 21 December 2020

{: #11715_1549}

The following table shows the changes that are in the worker node fix pack 1.17.15_1549. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 16.04 packages N/A N/A Updated worker node image with package updates for: CVE-2020-1971{: external}, CVE-2020-27350{: external}, CVE-2020-27351{: external}, CVE-2020-8284{: external}, CVE-2020-8285{: external}, and CVE-2020-8286{: external}.
Ubuntu 18.04 packages 4.15.0-126-generic 4.15.0-128-generic Updated worker node image with kernel and package updates for: CVE-2020-1971{: external}, CVE-2020-27350{: external}, CVE-2020-27351{: external}, CVE-2020-8284{: external}, CVE-2020-8285{: external}, and CVE-2020-8286{: external}.
Kubernetes v1.17.14 v1.17.15 See the Kubernetes change logs.{: external}
Ephemeral storage reservations N/A N/A Reserve local ephemeral storage to prevent workload evictions.
HAProxy db4e6d 9b2dca Image update for CVE-2020-1971{: external} and CVE-2020-24659{: external}.
{: caption="Changes since version 1.17.15_1548" caption-side="bottom"}

Change log for master fix pack 1.17.15_1548, released 14 December 2020

{: #11715_1548}

The following table shows the changes that are in the master fix pack patch update 1.17.15_1548. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
CoreDNS 1.6.9 1.8.0 See the CoreDNS release notes{: external}. Additionally, updated the CoreDNS configuration to increase the weight of scheduling CoreDNS pods to different worker nodes and zones.
etcd v3.4.13 v3.4.14 See the etcd release notes{: external}.
Gateway-enabled cluster controller 1105 1184 Updated to use Go version 1.15.5. Updated image to implement additional IBM security controls.
GPU device plug-in and installer c7a8cf7 adcae42 Updated the GPU drivers to version 450.80.02{: external}. Updated image for CVE-2020-28367{: external}, CVE-2020-28366{: external}, and CVE-2020-28362{: external}. Updated image to implement additional IBM security controls.
IBM Calico extension 378 544 Updated to use the universal base image (UBI) and to use Go version 1.15.5. Updated image to implement additional IBM security controls.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.14-1 v1.17.15-1 Updated to support the Kubernetes 1.17.15 release. Updated image to implement additional IBM security controls.
{{site.data.keyword.filestorage_full_notm}} monitor 379 384 Updated to use Go version 1.15.5 and to run as a non-root user. Updated image to implement additional IBM security controls.
{{site.data.keyword.filestorage_full_notm}} plug-in 379 384 Updated to use Go version 1.15.5 and to run with a least privileged security context. Updated image to implement additional IBM security controls.
Key management service (KMS) provider v1.0.4 v1.0.5 Updated image to implement additional IBM security controls.
Kubernetes v1.17.14 v1.17.15 See the Kubernetes release notes{: external}.
Kubernetes NodeLocal DNS cache N/A N/A Updated the NodeLocal DNS cache configuration to support customizing the node-local-dns config map.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider 208 1004 Updated Alpine base image to version 3.12 and to use Go version 1.15.5. Updated image for CVE-2020-8037{: external} and CVE-2020-28928{: external}. Updated image to implement additional IBM security controls.
OpenVPN client 2.4.6-r3-IKS-116 2.4.6-r3-IKS-301 Updated image to implement additional IBM security controls.
OpenVPN server 2.4.6-r3-IKS-222 2.4.6-r3-IKS-301 Updated image to implement additional IBM security controls.
{: caption="Changes since version 1.17.14_1545" caption-side="bottom"}

Change log for worker node fix pack 1.17.14_1548, released 11 December 2020

{: #11714_1548}

The following table shows the changes that are in the worker node fix pack 1.17.14_1548. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 bare metal kernel 4.15.0-126-generic 4.15.0-123-generic Bare metal worker nodes: Reverted the kernel version for bare metal worker nodes while Canonical addresses issues with the previous version that prevented worker nodes from being reloaded or updated.
{: caption="Changes since version 1.17.14_1546" caption-side="bottom"}

Change log for worker node fix pack 1.17.14_1546, released 7 December 2020

{: #11714_1546}

The following table shows the changes that are in the worker node fix pack 1.17.14_1546. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Containerd v1.3.4 1.3.9 See the containerd release notes{: external}. The update resolves CVE-2020–15257 (see the IBM security bulletin{: external}).
HAProxy 1.8.26-384f42 db4e6d Added provenance labels for source tracking.
Ubuntu 18.04 packages 4.15.0-123-generic 4.15.0-126-generic Updated worker node image with kernel and package updates for CVE-2020-14351{: external} and CVE-2020-4788{: external}.
Ubuntu 16.04 packages 4.4.0-194-generic 4.4.0-197-generic Updated worker node image with kernel and package updates for CVE-2020-0427{: external}, CVE-2020-12352{: external}, CVE-2020-14351{: external}, CVE-2020-25645{: external}, and CVE-2020-4788{: external}.
{: caption="Changes since version 1.17.14_1545" caption-side="bottom"}

Change log for worker node fix pack 1.17.14_1545, released 23 November 2020

{: #11714_1545_worker}

The following table shows the changes that are in the worker node fix pack 1.17.14_1545. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Kubernetes v1.17.13 v1.17.14 See the Kubernetes change log{: external}.
Ubuntu 18.04 packages 4.15.0-122-generic 4.15.0-123-generic Updated worker node image with kernel and package updates for CVE-2020-25692{: external}, CVE-2020-25709{: external}, CVE-2020-25710{: external}, CVE-2020-28196{: external}, and CVE-2020-8694{: external}.
Ubuntu 16.04 packages 4.4.0-193-generic 4.4.0-194-generic Updated worker node image with kernel and package updates for CVE-2020-25692{: external}, CVE-2020-25709{: external}, CVE-2020-25710{: external}, CVE-2020-28196{: external}, and CVE-2020-8694{: external}.
{: caption="Changes since version 1.17.13_1544" caption-side="bottom"}

Change log for master fix pack 1.17.14_1545, released 16 November 2020

{: #11714_1545}

The following table shows the changes that are in the master fix pack patch update 1.17.14_1545. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.12 v1.1.13 Updated image for DLA-2424-1{: external}.
GPU device plug-in and installer edd26a4 c7a8cf7 Updated image for CVE-2019-20386{: external}, CVE-2019-13050{: external}, CVE-2020-8177{: external}, CVE-2019-14889{: external}, CVE-2020-1730{: external}, CVE-2020-10029{: external}, CVE-2020-1751{: external}, CVE-2020-1752{: external}, CVE-2019-16168{: external}, CVE-2019-20218{: external}, CVE-2019-5018{: external}, CVE-2020-13630{: external}, CVE-2020-13631{: external}, CVE-2020-13632{: external}, CVE-2020-6405{: external}, CVE-2020-9327{: external}, CVE-2019-1551{: external}, CVE-2019-19221{: external}, CVE-2019-16935{: external}, CVE-2019-20907{: external}, CVE-2020-14422{: external}, CVE-2020-8492{: external}, CVE-2019-19906{: external}, CVE-2019-20454{: external}, CVE-2019-19956{: external}, CVE-2019-20388{: external}, CVE-2020-7595{: external}, CVE-2019-13627{: external}, CVE-2018-20843{: external}, CVE-2019-15903{: external}, and CVE-2019-20387{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.13-1 v1.17.14-1 Updated to support the Kubernetes 1.17.14 release. Updated image for DLA-2424-1{: external}.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 378 379 Updated to use the universal base image (UBI) and to use Go version 1.15.2.
Key Management Service provider v1.0.3 v1.0.4 Updated image for DLA-2424-1{: external}.
Kubernetes v1.17.13 v1.17.14 See the Kubernetes release notes{: external}.
{: caption="Changes since version 1.17.13_1543" caption-side="bottom"}

Change log for worker node fix pack 1.17.13_1544, released 9 November 2020

{: #11713_1544}

The following table shows the changes that are in the worker node fix pack 1.17.13_1544. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages N/A N/A Updated worker node image with kernel and package updates for CVE-2018-14036{: external}, CVE-2020-10543{: external}, CVE-2020-10878{: external}, CVE-2020-12723{: external}, CVE-2020-16126{: external}, CVE-2020-25659{: external}, and CVE-2017-18269{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node image with package updates for CVE-2018-14036{: external}, CVE-2020-10543{: external}, CVE-2020-10878{: external}, CVE-2020-12723{: external}, CVE-2020-16126{: external}, and CVE-2020-25659{: external}.
{: caption="Changes since version 1.17.13_1543" caption-side="bottom"}

Change log for worker node fix pack 1.17.13_1543, released 26 October 2020

{: #11713_1543_worker}

The following table shows the changes that are in the worker node fix pack 1.17.13_1543. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Kubernetes v1.17.12 v1.17.13 See the Kubernetes release notes{: external}.
Ubuntu 18.04 packages 4.15.0-118-generic 4.15.0-122-generic Updated worker node images with kernel and package updates for CVE-2018-10322{: external}, CVE-2019-20807{: external}, CVE-2019-20916{: external}, CVE-2020-12351{: external}, CVE-2020-12352{: external}, CVE-2020-15999{: external}, CVE-2020-16119{: external}, CVE-2020-16120{: external}, CVE-2020-24490{: external}, and CVE-2020-26116{: external}.
Ubuntu 16.04 packages 4.4.0-190-generic 4.4.0-193-generic Updated worker node images with kernel and package updates for CVE-2017-17087{: external}, CVE-2018-10322{: external}, CVE-2019-20807{: external}, CVE-2020-15999{: external}, CVE-2020-16119{: external}, and CVE-2020-26116{: external}.
{: caption="Changes since version 1.17.12_1542" caption-side="bottom"}

Change log for master fix pack 1.17.13_1543, released 26 October 2020

{: #11713_1543}

The following table shows the changes that are in the master fix pack patch update 1.17.13_1543. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Calico configuration N/A N/A Updated the calico-node daemon set in the kube-system namespace to set the spec.updateStrategy.rollingUpdate.maxUnavailable parameter to 10% for clusters with more than 50 worker nodes.
Cluster health image v1.1.11 v1.1.12 Updated to use Go version 1.15.2.
Gateway-enabled cluster controller 1082 1105 Updated to use Go version 1.15.2.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.12-1 v1.17.13-1 Updated to support the Kubernetes 1.17.13 release.
Kubernetes v1.17.12 v1.17.13 See the Kubernetes release notes{: external}.
Kubernetes NodeLocal DNS cache 1.15.13 1.15.14 See the Kubernetes NodeLocal DNS cache release notes{: external}.
{: caption="Changes since version 1.17.12_1540" caption-side="bottom"}

Change log for worker node fix pack 1.17.12_1542, released 12 October 2020

{: #11712_1542}

The following table shows the changes that are in the worker node fix pack 1.17.12_1542. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages N/A N/A Updated worker node image with package updates for CVE-2019-8936{: external}, CVE-2020-26137{: external}, and CVE-2020-14365{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node image with package updates for CVE-2020-14365{: external} and CVE-2020-26137{: external}.
{: caption="Changes since version 1.17.12_1541" caption-side="bottom"}

Change log for worker node fix pack 1.17.12_1541, released 28 September 2020

{: #11712_1541}

The following table shows the changes that are in the worker node fix pack 1.17.12_1541. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Kubernetes v1.17.11 v1.17.12 See the Kubernetes release notes{: external}.
Ubuntu 18.04 packages 4.15.0-117-generic 4.15.0-118-generic Updated worker node image with kernel and package updates for CVE-2018-1000500{: external}, CVE-2018-7738{: external}, CVE-2019-14855{: external}, CVE-2019-1547{: external}, CVE-2019-1551{: external}, CVE-2019-1563{: external}, CVE-2020-10753{: external}, CVE-2020-12059{: external}, CVE-2020-12888{: external}, CVE-2020-1760{: external}, and CVE-2020-1968{: external}.
Ubuntu 16.04 packages 4.4.0-189-generic 4.4.0-190-generic Updated worker node image with kernel and package updates for CVE-2019-20811{: external}, CVE-2019-9453{: external}, CVE-2020-0067{: external}, and CVE-2020-1968{: external}.
{: caption="Changes since version 1.17.11_1539" caption-side="bottom"}

Change log for master fix pack 1.17.12_1540, released 21 September 2020

{: #11712_1540}

The following table shows the changes that are in the master fix pack patch update 1.17.12_1540. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.9 v1.1.11 Updated Go version for CVE-2020-16845{: external} and CVE-2020-24553{: external}.
etcd v3.4.10 v3.4.13 See the etcd release notes{: external}.
GPU device plug-in and installer bacb9e1 edd26a4 Updated Go version for CVE-2020-16845{: external} and CVE-2020-24553{: external}. Updated the GPU drivers to version 450.51.06{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.9-1 v1.17.12-1 Updated to support the Kubernetes 1.17.12 release and to use Go version 1.13.15.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 377 378 Updated Go version for CVE-2020-16845{: external}.
Key Management Service provider v1.0.1 v1.0.3 Updated Go version for CVE-2020-16845{: external} and CVE-2020-24553{: external}.
Kubernetes v1.17.11 v1.17.12 See the Kubernetes release notes{: external}.
Kubernetes Dashboard v2.0.3 v2.0.4 See the Kubernetes Dashboard release notes{: external}.
{: caption="Changes since version 1.17.11_1539" caption-side="bottom"}

Change log for worker node fix pack 1.17.11_1539, released 14 September 2020

{: #11711_1539}

The following table shows the changes that are in the worker node fix pack 1.17.11_1539. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HAProxy 1.8.25-384f42 1.8.26-561f1a See the HAProxy change log{: external}.
Ubuntu 18.04 packages 4.15.0-112-generic 4.15.0-117-generic Updated worker node image with kernel and package updates for CVE-2020-14344{: external}, CVE-2020-14363{: external}, and CVE-2020-14386{: external}.
Ubuntu 16.04 packages 4.4.0-187-generic 4.4.0-189-generic Updated worker node image with kernel and package updates for CVE-2020-14344{: external} and CVE-2020-14363{: external}.
{: caption="Changes since version 1.17.11_1538" caption-side="bottom"}

Change log for worker node fix pack 1.17.11_1538, released 31 August 2020

{: #11711_1538}

The following table shows the changes that are in the worker node fix pack 1.17.11_1538. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages N/A N/A Updated worker node image with package updates for CVE-2020-12403{: external}, CVE-2020-8231{: external}, CVE-2020-8622{: external}, CVE-2020-8623{: external}, and CVE-2020-8624{: external}.
Ubuntu 16.04 packages 4.4.0-186-generic 4.4.0-187-generic Updated worker node image with kernel and package updates for CVE-2020-8231{: external}, CVE-2020-8622{: external}, and CVE-2020-8623{: external}.
{: caption="Changes since version 1.17.11_1537" caption-side="bottom"}

Change log for master fix pack 1.17.11_1537, released 18 August 2020

{: #11711_1537_master}

The following table shows the changes that are in the master fix pack patch update 1.17.11_1537. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health image v1.1.8 v1.1.9 Updated to use Go version 1.13.13.
etcd v3.4.9 v3.4.10 See the etcd release notes{: external}.
GPU device plug-in and installer 8c24345 bacb9e1 Updated image for CVE-2020-14039{: external} and CVE-2020-15586{: external}.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 376 377 Fixed a bug that prevents persistent volume claim (PVC) creation failures from being retried.
Key Management Service provider v1.0.0 v1.0.1 Updated image for CVE-2020-15586{: external}.
Kubernetes v1.17.9 v1.17.11 See the Kubernetes release notes{: external}.
Kubernetes add-on resizer 1.8.5 1.8.11 See the Kubernetes add-on resizer release notes{: external}.
Kubernetes configuration N/A N/A The Kubernetes API server audit policy configuration is updated to include auditing of all API groups except apiregistration.k8s.io and coordination.k8s.io.
Kubernetes Metrics Server v0.3.6 v0.3.7 See the Kubernetes Metrics Server release notes{: external}.
Kubernetes NodeLocal DNS cache configuration N/A N/A Increased the pod termination grace period.
{: caption="Changes since version 1.17.9_1535" caption-side="bottom"}

Change log for worker node fix pack 1.17.11_1537, released 17 August 2020

{: #11711_1537}

The following table shows the changes that are in the worker node fix pack 1.17.11_1537. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Kubernetes v1.17.9 v1.17.11 See the Kubernetes change logs{: external}.
Ubuntu 18.04 packages N/A N/A Updated worker node image with package updates for CVE-2020-11936{: external}, CVE-2020-12400{: external}, CVE-2020-12401{: external}, CVE-2020-15701{: external}, CVE-2020-15702{: external}, CVE-2020-15709{: external}, and CVE-2020-6829{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node image with package updates for CVE-2020-11936{: external}, CVE-2020-15701{: external}, CVE-2020-15702{: external}, and CVE-2020-15709{: external}.
{: caption="Changes since version 1.17.9_1535" caption-side="bottom"}

Change log for worker node fix pack 1.17.9_1535, released 3 August 2020

{: #1179_1535}

The following table shows the changes that are in the worker node fix pack 1.17.9_1535. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages 4.15.0-111-generic 4.15.0-112-generic Updated worker node images with kernel and package updates for CVE-2019-17514{: external}, CVE-2019-20907{: external}, CVE-2019-9674{: external}, CVE-2020-10713{: external}, CVE-2020-10757{: external}, CVE-2020-11935{: external}, CVE-2020-14308{: external}, CVE-2020-14309{: external}, CVE-2020-14310{: external}, CVE-2020-14311{: external}, CVE-2020-14422{: external}, CVE-2020-15705{: external}, CVE-2020-15706{: external}, and CVE-2020-15707{: external}.
Ubuntu 16.04 packages 4.4.0-185-generic 4.4.0-186-generic Updated worker node images with package updates for CVE-2019-12380{: external}, CVE-2019-17514{: external}, CVE-2019-20907{: external}, CVE-2019-9674{: external}, CVE-2020-10713{: external}, CVE-2020-11935{: external}, CVE-2020-14308{: external}, CVE-2020-14309{: external}, CVE-2020-14310{: external}, CVE-2020-14311{: external}, CVE-2020-14422{: external}, CVE-2020-15705{: external}, CVE-2020-15706{: external}, and CVE-2020-15707{: external}.
{: caption="Changes since version 1.17.9_1532" caption-side="bottom"}

Change log for master fix pack 1.17.9_1534, released 24 July 2020

{: #1179_1534}

The following table shows the changes that are in the master fix pack patch update 1.17.9_1534. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster master operations N/A N/A Fixed a problem that might cause pods to fail authentication to the Kubernetes API server after a cluster master operation.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 375 376 Updated to use Go version 1.13.8.
{: caption="Changes since version 1.17.9_1533" caption-side="bottom"}

Change log for master fix pack 1.17.9_1533, released 20 July 2020

{: #1179_1533}

The following table shows the changes that are in the master fix pack patch update 1.17.9_1533. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
GPU device plug-in and installer 31d4bb6 8c24345 Updated image for CVE-2017-12133{: external}, CVE-2017-18269{: external}, CVE-2018-11236{: external}, CVE-2018-11237{: external}, CVE-2018-19591{: external}, CVE-2018-6485{: external}, CVE-2019-19126{: external}, CVE-2019-9169{: external}, CVE-2020-10029{: external}, CVE-2020-1751{: external}, and CVE-2020-1752{: external}.
IBM Calico extension 353 378 Updated to handle any ens network interface.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.7-1 v1.17.9-1 Updated to support the Kubernetes 1.17.9 release.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor configuration N/A N/A Added a pod memory limit.
Kubernetes v1.17.7 v1.17.9 See the Kubernetes release notes{: external}. The update resolves CVE-2020-8559 (see the IBM security bulletin{: external}).
Kubernetes configuration N/A N/A The Kubernetes API server audit policy configuration is updated to include auditing the scheduling.k8s.io API group and the tokenreviews resource.
Kubernetes Dashboard v2.0.1 v2.0.3 See the Kubernetes Dashboard release notes{: external}.
OpenVPN server 2.4.6-r3-IKS-131 2.4.6-r3-IKS-222 Removed the deprecated comp-lzo compression configuration option and updated the default cipher that is used for encryption.
Operator Lifecycle Manager 0.14.1 0.14.1-IKS-1 Updated image for CVE-2020-1967{: external}.
{: caption="Changes since version 1.17.7_1530" caption-side="bottom"}

Change log for worker node fix pack 1.17.9_1532, released 20 July 2020

{: #1179_1532}

The following table shows the changes that are in the worker node fix pack 1.17.9_1532. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HAProxy 2.0.15-afe432 1.8.25-384f42 See the HAProxy change log{: external}. Fixes a connection leak that happens when HAProxy is under high load.
Kubernetes v1.17.7 v1.17.9 See the Kubernetes change logs{: external}. The update resolves CVE-2020-8557 (see the IBM security bulletin{: external}).
Ubuntu 18.04 packages 4.15.0-109-generic 4.15.0-111-generic Updated worker node images with kernel and package updates for CVE-2018-11236{: external}, CVE-2018-11237{: external}, CVE-2018-19591{: external}, CVE-2019-19126{: external}, CVE-2019-9169{: external}, CVE-2020-10029{: external}, CVE-2020-12402{: external}, CVE-2020-1751{: external}, and CVE-2020-1752{: external}.
Ubuntu 16.04 packages 4.4.0-184-generic 4.4.0-185-generic Updated worker node images with package updates for CVE-2017-12133{: external}, CVE-2017-18269{: external}, CVE-2018-11236{: external}, CVE-2018-11237{: external}, CVE-2018-6485{: external}, CVE-2019-19126{: external}, CVE-2019-9169{: external}, CVE-2020-0543{: external}, CVE-2020-10029{: external}, CVE-2020-10711{: external}, CVE-2020-13143{: external}, CVE-2020-1751{: external}, and CVE-2020-1752{: external}.
{: caption="Changes since version 1.17.7_1530" caption-side="bottom"}

Change log for worker node fix pack 1.17.7_1530, released 6 July 2020

{: #1177_1530}

The following table shows the changes that are in the worker node fix pack 1.17.7_1530. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HAProxy 1.8.25-30b675 2.0.15-afe432 See the HAProxy change log{: external}.
Ubuntu 18.04 packages 4.15.0-106-generic 4.15.0-109-generic Updated worker node images with kernel and package updates for CVE-2019-12380{: external}, CVE-2019-16089{: external}, CVE-2019-19036{: external}, CVE-2019-19039{: external}, CVE-2019-19318{: external}, CVE-2019-19642{: external}, CVE-2019-19813{: external}, CVE-2019-3689{: external}, CVE-2020-0543{: external}, CVE-2020-10711{: external}, CVE-2020-13143{: external}, CVE-2020-8177{: external}, CVE-2019-19377{: external}, and CVE-2019-19816{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node images with package updates for CVE-2019-3689{: external} and CVE-2020-8177{: external}.
Worker node drain automation N/A N/A Fixes a race condition that can cause worker node drain automation to fail.
{: caption="Changes since version 1.17.7_1529" caption-side="bottom"}

Change log for 1.17.7_1529, released 22 June 2020

{: #1177_1529}

The following table shows the changes that are in the master and worker node update 1.17.7_1529. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. For more information, see Update types. {: shortdesc}

Component Location Previous Current Description
Calico Master v3.12.1 v3.12.2 See the Calico release notes{: external}. The master update resolves CVE-2020-13597 (see the IBM security bulletin{: external}).
Cluster health image Master v1.1.5 v1.1.8 Additional status information is included when an add-on health state is critical. Improved performance when handling cluster status updates.
Cluster master operations Master N/A N/A Cluster master operations such as refresh or update are now canceled if a broken Kubernetes admission webhook{: external} is detected.
etcd Master v3.4.7 v3.4.9 See the etcd release notes{: external}.
GPU device plug-in and installer Master 8b02302 31d4bb6 Updated image for CVE-2020-3810{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager Master v1.17.6-1 v1.17.7-1 Updated to support the Kubernetes 1.17.7 release. Updated the version 2.0 private network load balancers (NLBs) to manage Calico global network policies. Updated calicoctl version to 3.12.2.
{{site.data.keyword.filestorage_full_notm}} plug-in Master 373 375 Fixed a bug that might cause error handling to create additional persistent volumes.
Kubernetes Both v1.17.6 v1.17.7 See the Kubernetes release notes{: external}. The master update resolves CVE-2020-8558 (see the IBM security bulletin{: external}).
Kubernetes configuration Master N/A N/A The Kubernetes API server audit policy configuration is updated to include auditing the apiextensions.k8s.io API group and the persistentvolumeclaims and persistentvolumes resources. Additionally, the http2-max-streams-per-connection option is set to 1000 to mitigate network disruption impacts on the kubelet connection to the API server.
Kubernetes Dashboard Master v2.0.0 v2.0.1 See the Kubernetes Dashboard release notes{: external}.
Ubuntu 18.04 packages Worker 4.15.0-101-generic 4.15.0-106-generic Updated worker node images with kernel and package updates for CVE-2018-8740{: external}, CVE-2019-17023{: external}, CVE-2020-0543{: external}, CVE-2020-12049{: external}, CVE-2020-12399{: external}, CVE-2020-13434{: external}, CVE-2020-13630{: external}, and CVE-2020-13632{: external}.
Ubuntu 16.04 packages Worker 4.4.0-179-generic 4.4.0-184-generic Updated worker node images with package and kernel updates for CVE-2020-12049{: external}, CVE-2020-0543{: external}, CVE-2020-12769{: external}, CVE-2020-1749{: external}, CVE-2020-13434{: external}, CVE-2020-13630{: external}, andCVE-2020-13632{: external}.
{: caption="Changes since version 1.17.6_1527" caption-side="bottom"}

Change log for worker node fix pack 1.17.6_1527, released 8 June 2020

{: #1176_1527}

The following table shows the changes that are in the worker node fix pack 1.17.6_1527. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages N/A N/A Updated worker node images with package updates for CVE-2019-1547{: external}, CVE-2019-1549{: external}, CVE-2019-1551{: external}, CVE-2019-1563{: external}, and CVE-2020-12762{: external}.
Ubuntu 16.04 packages 4.4.0-178-generic 4.4.0-179-generic Updated worker node images with package and kernel updates for CVE-2019-1547{: external}, CVE-2019-1551{: external}, CVE-2019-1563{: external}, and CVE-2020-12762{: external}.
{: caption="Changes since version 1.17.6_1526" caption-side="bottom"}

Change log for 1.17.6_1526, released 26 May 2020

{: #1176_1526}

The following table shows the changes that are in the master and worker node update 1.17.6_1526. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. For more information, see Update types. {: shortdesc}

Component Location Previous Current Description
Cluster health image Master v1.1.1 v1.1.4 When cluster add-ons don't support the current cluster version, a warning is now returned in the cluster health state.
etcd Master v3.4.3 v3.4.7 See the etcd release notes{: external}.
Gateway-enabled cluster controller Master 1045 1082 Updated image for CVE-2020-1967{: external}.
GPU device plug-in and installer Master 8c6538f 8b02302 Updated image for CVE-2020-1967{: external}.
IBM Calico extension Master 320 353 Skips creating a Calico host endpoint when no endpoint is needed. Updated image for CVE-2020-1967{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager Master v1.17.5-1 v1.17.6-1 Updated to support the Kubernetes 1.17.6 release. Updated network load balancer (NLB) events to use the latest {{site.data.keyword.cloud_notm}} troubleshooting documentation.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor Master 358 373 Updated image for CVE-2020-1967{: external} and CVE-2020-11655{: external}.
Kubernetes Both v1.17.5 v1.17.6 See the Kubernetes release notes{: external}.
Kubernetes Dashboard Master v2.0.0-rc7 v2.0.0 See the Kubernetes Dashboard release notes{: external}.
Kubernetes Metrics Server Master N/A N/A Increased the CPU per node for the metrics-server container to improve availability of the metrics server API service for large clusters.
Kubernetes NodeLocal DNS cache Master 1.15.8 1.15.13 See the Kubernetes NodeLocal DNS cache release notes{: external}. Updated the node-local-dns daemon set to include the prometheus.io/port and prometheus.io/scrape annotations on the pods.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider Master 177 208 Updated the version 2.0 network load balancers (NLB) to clean up unnecessary IPVS rules. Improved application logging. Updated image for CVE-2020-1967{: external}.
Ubuntu 18.04 packages Worker 4.15.0-99-generic 4.15.0-101-generic Updated worker node images with kernel and package updates for CVE-2019-20795{: external}, CVE-2020-11494{: external}, CVE-2020-12762{: external}, CVE-2020-3810{: external}, CVE-2020-8616{: external}, and CVE-2020-8617{: external}.
Ubuntu 16.04 packages Worker 4.4.0-178-generic 4.4.0-179-generic Updated worker node images with package and kernel updates for CVE-2019-19060{: external}, CVE-2020-11494{: external}, CVE-2020-11608{: external}, CVE-2020-12762{: external}, CVE-2020-3810{: external}, CVE-2020-8616{: external}, and CVE-2020-8617{: external}.
{: caption="Changes since version 1.17.5_1524" caption-side="bottom"}

Change log for worker node fix pack 1.17.5_1524, released 11 May 2020

{: #1175_1524}

The following table shows the changes that are in the worker node fix pack 1.17.5_1524. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages 4.15.0-96-generic 4.15.0-99-generic Updated worker node images with kernel and package updates for CVE-2019-19768{: external}, CVE-2020-11884{: external}, and CVE-2020-12243{: external}.
Ubuntu 16.04 packages 4.4.0-177-generic 4.4.0-178-generic Updated worker node images with package and kernel updates for CVE-2019-19768{: external} and CVE-2020-12243{: external}.
{: caption="Changes since version 1.17.4_1523" caption-side="bottom"}

Change log for worker node fix pack 1.17.5_1523, released 27 April 2020

{: #1175_1523}

The following table shows the changes that are in the worker node fix pack 1.17.5_1523. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
containerd v1.3.3 v1.3.4 See the containerd release notes{: external}.
HA proxy 1.8.25-30b675 1.8.25-adb65d The update addresses CVE-2020-1967{: external}.
Kubernetes v1.17.4 v1.17.5 See the Kubernetes release notes{: external}.
Ubuntu 18.04 packages N/A N/A Updated worker node images with package updates for CVE-2018-1000876{: external}, CVE-2018-10372{: external}, CVE-2018-10373{: external}, CVE-2018-10534{: external}, CVE-2018-10535{: external}, CVE-2018-12641{: external}, CVE-2018-12697{: external}, CVE-2018-12698{: external}, CVE-2018-12699{: external}, CVE-2018-12700{: external}, CVE-2018-12934{: external}, CVE-2018-13033{: external}, CVE-2018-17358{: external}, CVE-2018-17359{: external}, CVE-2018-17360{: external}, CVE-2018-17794{: external}, CVE-2018-17985{: external}, CVE-2018-18309{: external}, CVE-2018-18483{: external}, CVE-2018-18484{: external}, CVE-2018-18605{: external}, CVE-2018-18606{: external}, CVE-2018-18607{: external}, CVE-2018-18700{: external}, CVE-2018-18701{: external}, CVE-2018-19931{: external}, CVE-2018-19932{: external}, CVE-2018-20002{: external}, CVE-2018-20623{: external}, CVE-2018-20651{: external}, CVE-2018-20671{: external}, CVE-2018-8945{: external}, CVE-2018-9138{: external}, CVE-2019-12972{: external}, CVE-2019-14250{: external}, CVE-2019-14444{: external}, CVE-2019-17450{: external}, CVE-2019-17451{: external}, CVE-2019-18348{: external}, CVE-2019-9070{: external}, CVE-2019-9071{: external}, CVE-2019-9073{: external}, CVE-2019-9074{: external}, CVE-2019-9075{: external}, CVE-2019-9077{: external}, CVE-2020-11008{: external}, CVE-2020-5260{: external}, and CVE-2020-8492{: external}.
Ubuntu 16.04 packages N/A N/A Updated worker node images with package updates for CVE-2019-18348{: external}, CVE-2020-11008{: external}, CVE-2020-5260{: external}, and CVE-2020-8492{: external}.
{: caption="Changes since version 1.17.4_1521" caption-side="bottom"}

Change log for master fix pack 1.17.5_1522, released 23 April 2020

{: #1175_1522}

The following table shows the changes that are in the master fix pack patch update 1.17.5_1522. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Cluster health N/A v1.1.1 Cluster health now includes more add-on status information.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.4-3 v1.17.5-1 Updated to support the Kubernetes 1.17.5 release and to use Go version 1.13.9.
Kubernetes v1.17.4 v1.17.5 See the Kubernetes release notes{: external}. The update resolves CVE-2020-8555 (see the IBM security bulletin{: external}).
{: caption="Changes since version 1.17.4_1521" caption-side="bottom"}

Change log for master fix pack 1.17.4_1521, released 17 April 2020

{: #1174_1521_master}

The following table shows the changes that are in the master fix pack patch update 1.17.4_1521. Master patch updates are applied automatically. {: shortdesc}

Component Previous Current Description
Calico v3.12.0 v3.12.1 See the Calico release notes{: external}. Updated to allow egress from the worker nodes via the allow-vrrp GlobalNetworkPolicy.
CoreDNS 1.6.7 1.6.9 See the CoreDNS release notes{: external}. Fixed a bug during Corefile migration that might generate invalid data that makes CoreDNS pods fail.
GPU device plug-in and installer 49979f5 8c6538f Updated the GPU drivers to version 440.33.01{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager v1.17.4-1 v1.17.4-3 Updated to use calicoctl version 3.12.1.
Key Management Service provider 277 v1.0.0 Updated the {{site.data.keyword.keymanagementservicelong_notm}} Go client.
Kubernetes Dashboard v2.0.0-rc5 v2.0.0-rc7 See the Kubernetes Dashboard release notes{: external}. Added a readiness probe to the Kubernetes Dashboard configuration.
Kubernetes Dashboard metrics scraper v1.0.3 v1.0.4 See the Kubernetes Dashboard metrics scraper release notes{: external}.
OpenVPN client N/A N/A Fixed problem that might cause the vpn-config secret in the kube-system namespace to be deleted during cluster master operations.
Operator Lifecycle Manager Catalog v1.5.11 v1.6.1 See the Operator Lifecycle Manager Catalog release notes{: external}.
{: caption="Changes since version 1.17.4_1520" caption-side="bottom"}

Change log for worker node fix pack 1.17.4_1521, released 13 April 2020

{: #1174_1521}

The following table shows the changes that are in the worker node fix pack 1.17.4_1521. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
HA proxy 1.8.23 1.8.25 See the HA proxy change logs{: external}. The update addresses CVE-2020-11100{: external}.
Ubuntu 18.04 packages 4.15.0-91-generic 4.15.0-96-generic Updated worker node images with package and kernel updates for CVE-2020-8831{: external}, CVE-2020-8833{: external}, CVE-2020-11100{: external}, and CVE-2020-8834{: external}.
Ubuntu 16.04 packages 4.4.0-176-generic 4.4.0-177-generic Updated worker node images with package and kernel updates for CVE-2020-8831{: external}, CVE-2020-8833{: external}, and CVE-2020-8428{: external}.
{: caption="Changes since version 1.17.4_1520" caption-side="bottom"}

Change log for worker node fix pack 1.17.4_1520, released 30 March 2020

{: #1174_1520}

The following table shows the changes that are in the worker node fix pack 1.17.4_1520. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
Ubuntu 18.04 packages 4.15.0-88-generic 4.15.0-91-generic Updated worker node images with package and kernel updates for CVE-2020-1700{: external}, CVE-2020-10531{: external}, CVE-2020-2732{: external}, CVE-2020-8832{: external}, CVE-2019-12387{: external}, CVE-2019-12855{: external}, CVE-2019-9512{: external}, CVE-2019-9514{: external}, CVE-2019-9515{: external}, CVE-2020-10108{: external}, CVE-2020-10109{: external}, CVE-2018-20786{: external}, and CVE-2019-20079{: external}.
Ubuntu 16.04 packages 4.4.0-174-generic 4.4.0-176-generic Updated worker node images with package updates for CVE-2020-10531{: external}, CVE-2020-2732{: external}, CVE-2017-11109{: external}, CVE-2017-6349{: external}, and CVE-2017-6350{: external}.
{: caption="Changes since version 1.17.4_1519" caption-side="bottom"}

Change log for 1.17.4_1519, released 16 March 2020

{: #1174_1519}

The following table shows the changes that are in the master and worker node update 1.17.4_1519. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. For more information, see Update types. {: shortdesc}

Component Location Previous Current Description
Cluster health image Master N/A N/A Cluster health status now includes links to {{site.data.keyword.cloud_notm}} documentation.
{{site.data.keyword.cloud_notm}} Controller Manager Master v1.17.3-1 v1.17.4-1 Updated to support the Kubernetes 1.17.4 release and to use Go version 1.13.8. Fixed VPC load balancer error message to use the current {{site.data.keyword.containerlong_notm}} plug-in CLI syntax.
Kubernetes Both v1.17.3 v1.17.4 See the Kubernetes release notes{: external}.
Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider Master 169 177 Version 2.0 network load balancers (NLB) were updated to fix problems with long-lived network connections to endpoints that failed readiness probes.
Operator Lifecycle Manager Catalog Master v1.5.9 v1.5.11 See the Operator Lifecycle Manager Catalog release notes{: external}.
Ubuntu 18.04 packages Worker N/A N/A Updated worker node images with package updates for CVE-2019-13734{: external}, CVE-2019-13750{: external}, CVE-2019-13751{: external}, CVE-2019-13752{: external}, CVE-2019-13753{: external}, CVE-2019-19923{: external}, CVE-2019-19924{: external}, CVE-2019-19925{: external}, CVE-2019-19926{: external}, CVE-2019-19959{: external}, and CVE-2019-20218{: external}.
Ubuntu 16.04 packages Worker N/A N/A Updated worker node images with package updates for CVE-2019-13734{: external}, CVE-2019-13750{: external}, CVE-2019-13751{: external}, CVE-2019-13752{: external}, CVE-2019-13753{: external}, CVE-2019-19926{: external}, and CVE-2019-20218{: external}.
{: caption="Changes since version 1.17.3_1518" caption-side="bottom"}

Change log for worker node fix pack 1.17.3_1518, released 2 March 2020

{: #1173_1518}

The following table shows the changes that are in the worker node fix pack 1.17.3_1518. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}

Component Previous Current Description
GPU worker node provisioning N/A N/A Fixed bug where new GPU worker nodes could not automatically join clusters that run Kubernetes version 1.16 or 1.17.
Ubuntu 18.04 packages 4.15.0-76-generic 4.15.0-88-generic Updated worker node images with package updates for CVE-2019-5108{: external}, CVE-2019-20096{: external}, CVE-2019-18885{: external}, CVE-2019-19082{: external}, CVE-2019-19078{: external}, CVE-2019-19332{: external}, CVE-2016-9840{: external}, CVE-2016-9841{: external}, CVE-2016-9842{: external}, and CVE-2016-9843{: external}.
Ubuntu 16.04 packages 4.4.0-173-generic 4.4.0-174-generic Updated worker node images with kernel and package updates for CVE-2019-20096{: external}, CVE-2016-9840{: external}, CVE-2016-9841{: external}, CVE-2016-9842{: external}, and CVE-2016-9843{: external}.
{: caption="Changes since version 1.17.3_1516" caption-side="bottom"}

Change log for fix pack 1.17.3_1516, released 17 February 2020

{: #1173_1516}

The following table shows the changes that are in the master and worker node fix pack update 1.17.3_1516. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. For more information, see Update types. {: shortdesc}

Component Location Previous Current Description
containerd Worker v1.3.2 v1.3.3 See containerd release notes{: external}. Update resolves CVE-2019-19921{: external}, CVE-2019-16884{: external}, CVE-2020-0601{: external}, CVE-2020-7919{: external}, and CVE-2019-11253{: external}.
GPU device plug-in and installer Master affdfe2 49979f5 Image updated for CVE-2018-16888{: external}, CVE-2019-20386{: external}, CVE-2019-3843{: external}, CVE-2019-3844{: external}, and CVE-2020-1712{: external}.
{{site.data.keyword.cloud_notm}} Controller Manager Master v1.17.2-4 v1.17.3-1 Updated to support the Kubernetes 1.17.3 release and to use Go version 1.13.6.
Kubernetes Both v1.17.2 v1.17.3 See the Kubernetes release notes{: external}. The master update resolves CVE-2019-11254 and CVE-2020-8552 (see the IBM security bulletin{: external}), and the worker node update resolves CVE-2020-8551 (see the IBM security bulletin{: external}).
Kubernetes Dashboard Master v2.0.0-rc3 v2.0.0-rc5 See the Kubernetes Dashboard release notes{: external}.
Operator Lifecycle Manager Catalog Master v1.5.8 v1.5.9 See the Operator Lifecycle Manager Catalog release notes{: external}.
Ubuntu 18.04 packages Worker N/A N/A Updated worker node images with package updates for CVE-2019-19956{: external}, CVE-2020-7595{: external}, CVE-2019-18634{: external}, CVE-2019-3843{: external}, CVE-2019-3844{: external}, CVE-2019-20386{: external}, and CVE-2020-1712{: external}.
Ubuntu 16.04 packages Worker N/A N/A Updated worker node images with package updates for CVE-2019-19956{: external}, CVE-2020-7595{: external}, CVE-2019-18634{: external}, CVE-2018-16888{: external}, CVE-2019-20386{: external}, and CVE-2020-1712{: external}.
{: caption="Changes since version 1.17.2_1515" caption-side="bottom"}

Change log for 1.17.2_1515, released 10 February 2020

{: #1172_1515}

The following table shows the changes that are in patch update 1.17.2_1515. {: shortdesc}

Component Previous Current Description
Calico v3.9.5 v3.12.0 See the Calico release notes{: external}.
CoreDNS 1.6.6 1.6.7 See the CoreDNS release notes{: external}.
etcd v3.3.18 v3.4.3 See the etcd release notes{: external}.
GPU device plug-in and installer da19df3 affdfe2 Image updated for CVE-2016-9840{: external}, CVE-2016-9841{: external}, CVE-2016-9842{: external}, CVE-2016-9843{: external}, and CVE-2019-5188{: external}.
New: {{site.data.keyword.cloud_notm}} Controller Manager v1.16.5-148 v1.17.2-4 The {{site.data.keyword.cloud_notm}} Controller Manager component replaces the {{site.data.keyword.cloud_notm}} Provider component by moving the {{site.data.keyword.cloud_notm}} controllers from the Kubernetes kube-controller-manager{: external} to the cloud-controller-manager{: external} component. The {{site.data.keyword.cloud_notm}} Controller Manager is updated to support the Kubernetes 1.17.2 release, to use distroless/static base image version c6d59815, and to use calicoctl version 3.12.0.
{{site.data.keyword.filestorage_full_notm}} plug-in and monitor 357 358 Made the ibmc-file-gold storage class the default storage class for new clusters only. The default storage class for existing clusters is unchanged. In addition, the updated the image for CVE-2019-5188{: external}.
Kubernetes v1.16.5 v1.17.2 See the Kubernetes release notes{: external}.
Kubernetes configuration N/A N/A Updated the OpenID Connect configuration for the cluster's Kubernetes API server to use the {{site.data.keyword.iamlong}} (IAM) iam.cloud.ibm.com endpoint. Added the AllowInsecureBackendProxy=false Kubernetes feature gate to prevent skipping TLS verification of kubelet during pod logs requests.
Kubernetes Dashboard v2.0.0-rc2 v2.0.0-rc3 See the Kubernetes Dashboard release notes{: external}.
Kubernetes Dashboard metrics scraper v1.0.2 v1.0.3 See the Kubernetes Dashboard metrics scraper release notes{: external}.
Kubernetes NodeLocal DNS cache 1.15.4 1.15.8 See the Kubernetes NodeLocal DNS cache release notes{: external}. Now in Kubernetes 1.17, when you apply the label to set up node local DNS caching, the requests are handled immediately and you don't need to reload the worker nodes.
OpenVPN server N/A N/A OpenVPN server is now restarted during cluster master refresh{: external}.
Operator Lifecycle Manager Catalog v1.5.6 v1.5.8 See the Operator Lifecycle Manager Catalog release notes{: external}.
Operator Lifecycle Manager 0.13.0 0.14.1 See the Operator Lifecycle Manager release notes{: external}.
{: caption="Changes since version 1.16.5_1522" caption-side="bottom"}