Attention Needed
This patch release enables the etcd corruption checks on every etcd member that is running etcd 3.5 (which applies to all Kubernetes 1.22+ clusters). This change is a recommendation from the etcd maintainers due to issues in etcd 3.5 that can cause data consistency issues. The changes in this patch release will prevent corrupted etcd members from joining or staying in the etcd ring.
Changes by Kind
Bug or Regression
- Regenerate container runtime configurations based on kubeone.yaml during control-plane upgrades on Flatcar Linux nodes, not only on the initial installation. (#1918)
- Approve pending CSRs when upgrading control plane and static worker nodes (#1888)
- Enable the etcd integrity checks (on startup and every 4 hours) for Kubernetes 1.22+ clusters. See the official etcd announcement for more details. (#1909)
- Fix CSR approving issue for existing nodes with already approved and GCed CSRs (#1897)
- Fix missing snapshot CRDs for Openstack CSI (#1913)
- Ensure old machine-controller MutatingWebhookConfiguration is deleted (#1913)
- Fix overwriteRegistry not overwriting the Kubernetes control plane images (#1885)
- Mount /usr/share/ca-certificates to the OpenStack CCM pod to fix the OpenStack CCM pod CrashLooping on Flatcar Linux (#1905)
- Fix the GoBetween script failing to install the zip package on Flatcar Linux (#1905)
- Expand path to SSH private key file (#1859)
- Fix an issue with
kubeone config migratefailing to migrate configs with thecontainerRuntimeblock (#1861)
Checksums
SHA256 checksums can be found in the kubeone_1.4.1_checksums.txt file.