CRI-O v1.21.3

The release notes have been generated for the commit range v1.21.2…7415a53 on Fri, 15 Oct 2021 10:21:45 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

Add support for “io.kubernetes.cri-o.TrySkipVolumeSELinuxLabel” annotation, which tells CRI-O to skip relabeling volumes if the top level is already correctly labeled Skip SELinux volume relabeling for super privileged containers (securityContext.seLinuxOptions.type = "spc_t"). (#5406, @haircommander)

Fix a bug where a container exec process received a little less time than the timeout provided (#5093, @haircommander)
Fix a performance regression with exec probes (#5162, @haircommander)
Fix potential panic when reopening a container’s log (#5213, @haircommander)

Fix a PID leak in situations where conmon fails to be moved into the pod cgroup (#5297, @openshift-cherrypick-robot)
Fix a bug where CRI-O waits forever on a conmon process that will not stop (#5407, @openshift-cherrypick-robot)
Fix a bug where host network containers couldn’t read their cgroup hierarchy (#5389, @openshift-cherrypick-robot)
Fix an RSS regression with exec sync requests (#5262, @haircommander)
Fix an issue where a container started with a terminal fails on exec sync calls (#5121, @openshift-cherrypick-robot)
Fixed missing quantile values in container_runtime_crio_operations_latency_microseconds_total metrics (#5266, @saschagrunert)

Nothing has changed.