Kubernetes v1.20.11 is live!

[Adolfo García Veytia]

Kubernetes Community,

Kubernetes v1.20.11 has been built and pushed using Golang version 1.15.15.

The release notes have been updated in CHANGELOG-1.20.md, with a pointer to them on GitHub:

---

v1.20.11

Downloads for v1.20.11

Source Code

filename	sha512 hash
kubernetes.tar.gz	2804919885242d853ad7ed6f6c9ee98d317293c1d2dad4ad1c5f5739d497b40018f642091b07d79a51d8109837364965e64207722486698659b9c3a8f13b0b20
kubernetes-src.tar.gz	66960f3bd5844d093a85366855d613018bf514e88f3ea32ae7ecd9c89753ae6dd09bff7cd7f9be42835f4d8707a18e16c8491f71b3e3363b4a80f7f60c0125a4

Client Binaries

filename	sha512 hash
kubernetes-client-darwin-amd64.tar.gz	e3112ba3e80b61f07dea3e12782af45095a964cbdd36eb6c58061d07a03a8fda9bdb605f79515daf6fe7f93c338fdf4cd6ab67d3d3695199a31dd546ff5868a0
kubernetes-client-linux-386.tar.gz	b60e14c9908124181d109c1b13b828f0e307be34ee7bc99ab7ae61c6a673d1c217a40a7f015e42200853bcab6d463ae699a754478f73fc95c8f38075aa91ddf2
kubernetes-client-linux-amd64.tar.gz	fdb48e8d190da6461a0dc5ea7ba0d85b6bc4ac7b8da124783104e961f8fbbfca6d2696de72e4a5c4986abfb5c1f991866bef33049ca04a707891ac94313033a9
kubernetes-client-linux-arm.tar.gz	8c8d2a78b20198a35f0f1b5c9dbab836b61d0fe6b46458a63fd1e9b4114c9928a4816280071e52f150e69663355a1921a02a7541de58c3d8a51389579f35b810
kubernetes-client-linux-arm64.tar.gz	a83047b95a2d938e8599289f180681e8a6c143bff92e6324be59cf4ab477d6d07f22bd5c6acbb4bf3d6b4b8edb8af932ca325e55bbc9786ddcbb08b9ce093347
kubernetes-client-linux-ppc64le.tar.gz	a6dd9e2b13d0fd1aa87e912b44cfcacdcaf78456cf397ba3a83af151cbe66f584cd6a86ac43586a06ef1540b57971b78c6ef896f98f3cf260a0831665c798991
kubernetes-client-linux-s390x.tar.gz	558bffc5eddd81ac51eaa5ea26244793acc6f8874660bcf7aaa3cad03b3ff5c63042d21ab13cfa84b62a0196c233f782304985116b8a1df48336650414e583f9
kubernetes-client-windows-386.tar.gz	c0ef52430c67a3592b5091477f956561d366560be60dbd785a22113dc0895089ad0fa9dc75a53fdcf604fe8cfbb98ee1b1455e319a39e2188a8388916d6bf5b7
kubernetes-client-windows-amd64.tar.gz	afba62da4ca2fd60a821df207f1d6977359a58c9810a023e663ffe312e0b30624cf4c3254e120e07faed440f19e9de641b8c780f3c2f606cf971f5febcdefbbe

Server Binaries

filename	sha512 hash
kubernetes-server-linux-amd64.tar.gz	99bd926e7056784c212a7f1392e1f5e9b4c201aec45df142564ba246af77a638dc3c2374408142629162be7d5c5d2b370d4fd08b8e0873199469fd49313a55dd
kubernetes-server-linux-arm.tar.gz	30c24631e5d5c12ecb52017974503f52acac17359d0ea67c3430686051c5453789195da86867dd8eb0941fa34e129ebb44cbd4d74a97c7760d3b22b3f1555284
kubernetes-server-linux-arm64.tar.gz	a1c5a28dfc74138d35b623a93ac45efdc4a4c2f7bb025df5463bd406ea51334855605683ac65f63adaeaa80286425ba7855b490ff6fc29f09cfbdd63cce63f82
kubernetes-server-linux-ppc64le.tar.gz	dad9aed9ba361f3e0d437b5327714ca8c8d0585513ce69efafc5ae978234918fb1ca43010dd681a916208c3a22cc6e9ee1ec66e705f5347acbfce48ab0e646ce
kubernetes-server-linux-s390x.tar.gz	ae22ae6127136033f6ea3439b132dafc01ff4266170ca27af2441a518ba5a17f0e63991bc4d2cd79508b8aa2bd7c122105a6b7d0d06e915164f5e9a811698d9c

Node Binaries

filename	sha512 hash
kubernetes-node-linux-amd64.tar.gz	97d9668fd9111b781d86ee5f63a1aed5db4411d80e66f64dbaf70e5e76bacf893dfc1d2af87544f2762e6d005c82e95a3173d110e899cbb4eac97c83b5d11646
kubernetes-node-linux-arm.tar.gz	6aa4b1ba4b3de25368a826ee041772efa52290dca6b0d6a522d7a852eeb898b86864cdb445c572c2f86a0f1cf53c4ec49208b256d04a9f1c83421090181b69dc
kubernetes-node-linux-arm64.tar.gz	1dae937bb79b00795e38f37aad47b34363d5dd670040bdba8a933e508315a813b7e3bd1d197a1619586ef550864210cb468a16b0455f9c0c8fb373c9b5c3e2e6
kubernetes-node-linux-ppc64le.tar.gz	002ffa177c2ab6badc227c5f1641b4c4dc31a886e0fb02a8f9ef03c19cdb935de38ab16abe5296e9575e244124e0136800f97a2383db604f077dc6dbfff9b1ab
kubernetes-node-linux-s390x.tar.gz	b9a779f0d14e4b30f6d9311af282ff4b78773a31cc50fe531662eccce29b32afdac9f864a050c30cb6a4ebdea1bd2505a1a9cb4ce0176b6da7f1a9dfb3e015b5
kubernetes-node-windows-amd64.tar.gz	20369ff5e114eb7947091e23b5723c7ea04239f9fcb2d5753a7250411a7b5e8567929401ee0ca9bf93dd3b7f7c60b2f831e893ececd10037907a9d81f078705f

Changelog since v1.20.10

Important Security Information

This release contains changes that address the following vulnerabilities:

CVE-2021-25741: Symlink Exchange Can Allow Host Filesystem Access

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem. Affected Versions:

• kubelet v1.22.0 - v1.22.1
• kubelet v1.21.0 - v1.21.4
• kubelet v1.20.0 - v1.20.10
• kubelet <= v1.19.14 Fixed Versions:
• kubelet v1.22.2
• kubelet v1.21.5
• kubelet v1.20.11
• kubelet v1.19.15 This vulnerability was reported by Fabricio Voznika and Mark Wolters of Google.

CVSS Rating: High (8.8) CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Changes by Kind

Bug or Regression

• Fix: skip case sensitivity when checking Azure NSG rules fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs (#104448, @feiskyer) [SIG Cloud Provider]
• Kube-proxy: delete stale conntrack UDP entries for loadbalancer ingress IP. (#104152, @aojea) [SIG Network]
• Metrics changes: Fix exposed buckets of scheduler_volume_scheduling_duration_seconds_bucket metric (#100720, @dntosas) [SIG Apps, Instrumentation, Scheduling and Storage]
• Pass additional flags to subpath mount to avoid flakes in certain conditions (#104348, @mauriciopoppe) [SIG Storage]
• When using kubectl replace (or the equivalent API call) on a Service, the caller no longer needs to do a read-modify-write cycle to fetch the allocated values for .spec.clusterIP and .spec.ports[].nodePort. Instead the API server will automatically carry these forward from the original object when the new object does not specify them. (#104674, @thockin) [SIG Network]

Other (Cleanup or Flake)

• Kube-apiserver: sets an upper-bound on the lifetime of idle keep-alive connections and time to read the headers of incoming requests (#103958, @liggitt) [SIG API Machinery and Node]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

---

Contributors, the CHANGELOG-1.20.md has been bootstrapped with v1.20.11 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.