CRI-O v1.26.3
The release notes have been generated for the commit range
v1.26.2…bef5d84 on Wed, 12 Jul 2023 23:32:15 UTC.
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
To verify the artifact signatures via cosign, run:
> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.bef5d84248312a6b1fae41cb686bc18d35855c87.tar.gz \
--certificate-identity-regexp '.*' \
--certificate-oidc-issuer-regexp '.*' \
--signature cri-o.amd64.bef5d84248312a6b1fae41cb686bc18d35855c87.tar.gz.sig \
--certificate cri-o.amd64.bef5d84248312a6b1fae41cb686bc18d35855c87.tar.gz.cert
To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:
> tar xfz cri-o.amd64.bef5d84248312a6b1fae41cb686bc18d35855c87.tar.gz
> bom validate -e cri-o.amd64.bef5d84248312a6b1fae41cb686bc18d35855c87.tar.gz.spdx -d cri-o
Changelog since v1.26.2
Changes by Kind
Feature
- Add support for
io.kubernetes.cri-o.LinkLogs annotation, which allows a pod’s logs to be mounted into a specified empty-dir for inspection by a log aggregator (#7045, @haircommander)
- Update high performance hooks to disable load balancing through cgroups, rather than directly through the kernel’s sysfs (#6812, @haircommander)
Bug or Regression
- Fix a bug where the
cpu-quota.crio.io annotation was not propagated to the pod cgroup, meaning cpu quota was not disabled for the container (#6938, @haircommander)
- Fix a bug with cpu quota annotation that manifests like:
pod with cpu-quota.crio.io: disable fails with error: set CPU CFS quota: invalid slice name: /kubepods.slice
Fix a bug where stopped containers break cpu load balancing being disabled (#7013, @haircommander)
- Fixed bug where CRI-O runs with umask of
0. (#6895, @saschagrunert)
Uncategorized
- Adds debug log to identify when a relabel was not requested (#6962, @openshift-cherrypick-robot)
- Change metrics endpoint to gracefully shutdown, and move metric server fatal errors to just errors. (#6771, @openshift-cherrypick-robot)
- Fix a bug where network metrics collection is broken with systemd cgroup driver and dropped infra containers. (#6875, @openshift-cherrypick-robot)
- Fix a bug where sending information to cadvisor is stalled on taking the container’s state lock (#7131, @sohankunkerkar)
- Updated CNI plugins to v1.2.0. (#6761, @openshift-cherrypick-robot)
- Updated crun to v1.8.3 and runc to v1.5.1. (#6773, @openshift-cherrypick-robot)
Dependencies
Added
- github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper: v0.2.0
- github.com/alibabacloud-go/alibabacloud-gateway-spi: v0.0.4
- github.com/alibabacloud-go/cr-20160607: v1.0.1
- github.com/alibabacloud-go/cr-20181201: v1.0.10
- github.com/alibabacloud-go/darabonba-openapi: v0.1.18
- github.com/alibabacloud-go/darabonba-string: v1.0.0
- github.com/alibabacloud-go/debug: 9472017
- github.com/alibabacloud-go/endpoint-util: v1.1.1
- github.com/alibabacloud-go/openapi-util: v0.0.11
- github.com/alibabacloud-go/tea-utils: v1.4.4
- github.com/alibabacloud-go/tea-xml: v1.1.2
- github.com/alibabacloud-go/tea: v1.1.18
- github.com/aliyun/credentials-go: v1.2.3
- github.com/arbovm/levenshtein: 48b4e1c
- github.com/checkpoint-restore/go-criu/v4: v4.1.0
- github.com/clbanning/mxj/v2: v2.5.6
- github.com/dgryski/trifles: dd97f9a
- github.com/goark/errs: v1.1.0
- github.com/goark/go-cvss: v1.3.0
- github.com/google/go-github/v47: v47.1.0
- github.com/google/go-github/v48: v48.2.0
- github.com/jellydator/ttlcache/v3: v3.0.0
- github.com/mozillazg/docker-credential-acr-helper: v0.3.0
- github.com/pjbgf/sha1cd: v0.2.3
- github.com/skeema/knownhosts: v1.1.0
- github.com/tjfoc/gmsm: v1.3.2
Changed
Removed
- github.com/OpenPeeDeeP/depguard: v1.0.1
- github.com/StackExchange/wmi: 5d04971
- github.com/blendle/zapdriver: v1.3.1
- github.com/bombsimon/wsl/v3: v3.0.0
- github.com/go-critic/go-critic: v0.4.1
- github.com/go-lintpack/lintpack: v0.5.2
- github.com/go-toolsmith/astcast: v1.0.0
- github.com/go-toolsmith/astcopy: v1.0.0
- github.com/go-toolsmith/astequal: v1.0.0
- github.com/go-toolsmith/astfmt: v1.0.0
- github.com/go-toolsmith/astinfo: 9809ff7
- github.com/go-toolsmith/astp: v1.0.0
- github.com/go-toolsmith/pkgload: v1.0.0
- github.com/go-toolsmith/strparse: v1.0.0
- github.com/go-toolsmith/typep: v1.0.0
- github.com/go-xmlfmt/xmlfmt: d5b6f63
- github.com/golangci/check: cfe4005
- github.com/golangci/dupl: 3e9179a
- github.com/golangci/errcheck: ef45e06
- github.com/golangci/go-misc: 927a3d8
- github.com/golangci/goconst: 041c5f2
- github.com/golangci/gocyclo: 2becd97
- github.com/golangci/gofmt: 244bba7
- github.com/golangci/golangci-lint: v1.25.0
- github.com/golangci/ineffassign: 42439a7
- github.com/golangci/lint-1: 297bf36
- github.com/golangci/maligned: b1d8939
- github.com/golangci/misspell: 950f5d1
- github.com/golangci/prealloc: 215b22d
- github.com/golangci/revgrep: d9c87f5
- github.com/golangci/unconvert: 28b1c44
- github.com/google/go-github/v33: v33.0.0
- github.com/google/go-github/v39: v39.2.0
- github.com/google/go-github/v42: v42.0.0
- github.com/gostaticanalysis/analysisutil: 4088753
- github.com/jingyugao/rowserrcheck: 72ab760
- github.com/jirfag/go-printf-func-name: 45db996
- github.com/klauspost/cpuid: v1.2.0
- github.com/logrusorgru/aurora: a7b3b31
- github.com/maratori/testpackage: v1.0.1
- github.com/matoous/godox: 5d6d842
- github.com/mattn/goveralls: v0.0.2
- github.com/mitchellh/go-ps: 621e559
- github.com/mozilla/tls-observatory: a3c1b6c
- github.com/nakabonne/nestif: v0.3.0
- github.com/nbutton23/zxcvbn-go: ae427f1
- github.com/phayes/checkstyle: bfd46e6
- github.com/prashantv/gostub: v1.1.0
- github.com/quasilyte/go-consistent: c6f3937
- github.com/ryancurrah/gomodguard: v1.0.2
- github.com/sclevine/agouti: v3.0.0+incompatible
- github.com/securego/gosec: 79fbf3a
- github.com/shirou/gopsutil: e4ec7b2
- github.com/shirou/w32: bb4de01
- github.com/shurcooL/go-goon: 37c2f52
- github.com/shurcooL/go: 9e1955d
- github.com/sourcegraph/go-diff: v0.5.1
- github.com/spiegel-im-spiegel/errs: v1.0.5
- github.com/spiegel-im-spiegel/go-cvss: v1.0.0
- github.com/tetafro/godot: v0.2.5
- github.com/timakin/bodyclose: f7f2e9b
- github.com/tommy-muehle/go-mnd: e6f9a99
- github.com/tv42/httpunix: 2ba4b9c
- github.com/ultraware/funlen: v0.0.2
- github.com/ultraware/whitespace: v0.0.4
- github.com/uudashr/gocognit: v1.0.1
- github.com/valyala/bytebufferpool: v1.0.0
- github.com/valyala/fasthttp: v1.2.0
- github.com/valyala/quicktemplate: v1.2.0
- github.com/valyala/tcplisten: ceec8f9
- github.com/vektah/gqlparser/v2: v2.4.6
- knative.dev/pkg: 1f7514a
- mvdan.cc/interfacer: c200402
- mvdan.cc/lint: adc824a
- mvdan.cc/unparam: d517963
- sourcegraph.com/sqs/pbtypes: d3ebe8f