4.6.52

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.6.52-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.5.21, 4.5.22, 4.5.24, 4.5.25, 4.5.28, 4.5.29, 4.5.31, 4.5.32, 4.5.34, 4.5.35, 4.5.36, 4.6.10, 4.6.12, 4.6.13, 4.6.15, 4.6.16, 4.6.17, 4.6.19, 4.6.20, 4.6.21, 4.6.22, 4.6.23, 4.6.24, 4.6.26, 4.6.27, 4.6.28, 4.6.29, 4.6.30, 4.6.31, 4.6.33, 4.6.34, 4.6.35, 4.6.36, 4.6.37, 4.6.38, 4.6.40, 4.6.41, 4.6.42, 4.6.43, 4.6.44, 4.6.45, 4.6.46, 4.6.6, 4.6.7, 4.6.8

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.6.18

Created: 2021-12-08 11:40:04 +0000 UTC

Image Digest: sha256:58c2e7bd1b248b1ffd9829b84b4ee89bb93e3e47b997d312e7e1ade5517eb1a6

Release 4.6.52 was created from registry.ci.openshift.org/ocp/release:4.6.0-0.nightly-2021-12-06-014835

Components

Kubernetes upgraded from 1.19.4 to 1.19.16
Red Hat Enterprise Linux CoreOS upgraded from 46.82.202102120340-0 to 46.82.202112041703-0 (diff)

New images

driver-toolkit git bd508e26 sha256:829a92cf82a3c82ecd8b1ffe6b634938739cdaeeebc41e2d9e663bcf16d7f047

Removed images

local-storage-static-provisioner

Rebuilt images without code change

aws-ebs-csi-driver git b4647c12 sha256:c2e03dea4de07998fa8062aad14ba0b71460c456519293baad78cbc470c9f86f
aws-ebs-csi-driver-operator git 71b6b964 sha256:555ff4ff8330e26b155306851b29e43e85024700536c8b97f08d4d62f7c94a39
aws-pod-identity-webhook git d5f12719 sha256:988ee74fe3abd67c52c567d903b4f87d359d9a86f8219f2acdcddcbe21f4b972
baremetal-operator git b4b10a08 sha256:7d4f4c4af61847f53722ed007548bea723234554a960d7eacd57d49a5bbd7a0b
cluster-autoscaler-operator git 8e81a68d sha256:5c41fd0616e68c5a87537186bc935c5d846d2beaef2c8b2d9343ceec4b6263be
cluster-bootstrap git 64410191 sha256:7d8011a2ca2ebf4d44ca586e3eb2c011e700aa0c62c87271e8582f8a7771d481
cluster-csi-snapshot-controller-operator git 68618ad3 sha256:6b798a2aeb0d74b2644b613801feb06411c9f6444e4be462073b72df5bb35451
cluster-kube-apiserver-operator git 0a8f1f99 sha256:38b0061ea15ace519955e223ba3be004d9e8c71c95bd3c9155b33f028fbef2c5
cluster-kube-scheduler-operator git 0b9b05bc sha256:47ec92433a059a3adf5abf3216a3ffc3e76b45056355dc2a06d3e5fd13cf8369
cluster-machine-approver git a6320f45 sha256:f821afd6941c9070e6cfc5e3e6169d6b16168ad9fca89a5e0265a863f867ea9e
cluster-policy-controller git aa12fbe3 sha256:f47007f136492ddd3574d720493da6624ddfae842363e6f96ecda6bb0af8cfe7
cluster-storage-operator git 58bf46ea sha256:f1c3255b55cd57639781c529c27f98ee3e8101c31265cbd6cc63896eee70d63c
cluster-update-keys git 70c87c70 sha256:a0c1a12d237cc90b2d4cbcadd9bd395f33d793d40685c5efb4642715f6698c4b
configmap-reloader git 2ac2b635 sha256:ba303d6ca96abd0073e2f0c03f1db898665aa7d9f8e56a4814ba7625eb48ceec
console-operator git 7fd78a28 sha256:e6ef1b92b9d6147acd487c1230256c06910ae96071778fad99eec8545ec38fb4
container-networking-plugins git ca372dec sha256:9290248773de78bc750709a850ef66bd0d32a64ab1ed5228d344557e8bade398
coredns git 885fb55e sha256:4bfcb018947b57966ce4bc55f9d96768ffc0127195ae207324f3f8cde8ee1ebf
csi-driver-manila git 6dd9c201 sha256:be9a28ad603ec78700cf43ad648ba9af15f1d8dd140260a76b5c05fa87db8c55
csi-driver-nfs git 5e962cbd sha256:d66990ee2e12b085459fa976d78184e8870e6cdc012f77e3e8f633956711ac3b
csi-external-attacher git 45e712af sha256:ea4795f2e7c7447e3331977ae9cf8141c291046f0ccba45dff87276d98bb7900
csi-external-provisioner git e079d112 sha256:4b030762a0cf6b55c43e73a73c9588db4ffb65ffa17e59d68411ef513daadaa9
csi-external-resizer git b2c4b923 sha256:3e4eb1fdd321c1969cce38a03ddc66b690f77778acdb2d9201fa4a83a84eb636
csi-external-snapshotter git c80c3836 sha256:83ec002e9ef9fff0dfa713310ffe07b6b98f464f8f6689de6649de6261d36fb7
csi-livenessprobe git 53f2398a sha256:437817f4dade1929f903f0801f488825d1de813c577ffdae8d2d737213ca6574
csi-node-driver-registrar git 4ba25176 sha256:d5c183279807002f75b8a41cef99e693c135328d89d648e2bc81aa26c0398faa
csi-snapshot-controller git c80c3836 sha256:c4a090f3ea32ac6d7f815bf1c7f58c589436bc80abf968fa9bac3f5e21e83744
ironic-hardware-inventory-recorder git 2205538a sha256:1968e574815a8b22e6c0e051cf03ae3d7052704e64aa12c464bcbd5ca6ae8d3f
ironic-static-ip-manager git 2f197d07 sha256:20ba115bb1f025caf45259b7d928360d5ed124e567302929443f207b56b37ce6
kube-storage-version-migrator git 6deeefa7 sha256:b268776e5b0b054bcac9ca4b57ce629c6d852d12792cf72d8c3adc2cb88037df
machine-os-content sha256:6ea6c6f23e0fe047c5813c0607c3bed53dc6bcf2c1064f8fc72235236aacc182
multus-admission-controller git de9b6e18 sha256:88fbce0b30a1d0786fbdfeb0f93431d4703f1a0ec974f7e9426859dee8619c9b
multus-cni git 30668ec2 sha256:f54f352668f99e4776c12a0b9477bf1910af43bc27f7d17cdf6d9dd494b408fe
multus-route-override-cni git da944e11 sha256:3816ed95856807e1d3d7d6194adcb7a1df78972d512253d5b9b621fd395c0fe9
openshift-apiserver git c09e60bc sha256:24334ae0354b28b6c3dc830871fe6ded2c257ecaa5794f4dca075f86b6504333
ovirt-machine-controllers git 91f12f3f sha256:74fa3ecb8f73970b8096bebe9fd52954bde09ddee840fc2d6470f5abace6ac83
prom-label-proxy git 2b514992 sha256:c2417c6691b2a9e14e5f682cad05931631f259fedf040468acb73db604a4dfa3
prometheus git f97d7ec8 sha256:a2fb18d00f4da6a1f4f00186b793155f231a275dd3af0e54e924a687bb16ec6e
prometheus-alertmanager git ddfb948a sha256:2b7f8a5c0c45e29642dda6d575de9b971c192935c3599470487fd0e8b4732be7
service-ca-operator git 0a316210 sha256:bf9539d6f39fdfc4049ed5c3f16ed3b9b97c11408b9b36fc7c2090d1cbddf178

aws-machine-controllers

Bug 1976198: update aws-sdk-go to v1.38.25 #414
Bug 1941563: Ensure response body is closed when we are finished with the request #395
“Bug 1912531: revendor mao” #388
Updating ose-aws-machine-controllers builder & base images to be consistent with ART #383
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1964751: Bump boot images for RHCOS fixes #5228
Update OWNERS #5244
OWNERS: add more core team members as approvers #5125
Bug 1981929: aws: allow use of unknown regions in known partitions #5073
release-4.6: Update OpenStack approvers #4507
Bug 1951572: registry.svc.ci.openshift.org is no longer valid #4862
Bug 1956485: bump RHCOS 4.6 boot images #5011
Bug 1963959: remove ovirt_cafile from ovirt-credentials secret #4955
Bug 1974775: Adding more nitro and the AMD instance types (AWS, UPI) #5022
Bug 1949150: add proxy params to bootstrap ignition #4847
Bug 1976633: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5036
Bug 1971164: Updating AWS instance types #5021
Bug 1964120: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4956
Bug 1947998: gcp: install google cloud sdk with yum the recommended way #4840
Bug 1929872: remove GCP role bindings before service accounts #4665
Bug 1920552: vSphere destroy: handle failed clusters #4618
Updating ose-baremetal-installer builder & base images to be consistent with ART #4539
Updating ose-installer builder & base images to be consistent with ART #4538
Updating ose-installer-artifacts builder & base images to be consistent with ART #4547
Bug 1916297: openstack: Create Control plane nodes sequentially #4550
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller builder & base images to be consistent with ART #133
“Bug 1912531: revendor mao” #137
Full changelog

baremetal-runtimecfg

Bug 1983124: Keepalived- verify that unicast peers list isn’t empty on master nodes #147
Bug 1942506: 4.6 EUS node-ip handling extravaganza #133
Bug 1932967: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #123
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2028280: write to files instead of stdout #984
Bug 1942818: when mirroring to a file destination, mount images under the index location #892
Bug 1969929: exclude security during exctraction #877
Bug 1976285: skip-multiple-scopes with adm catalog mirror #873
Bug 1971561: set User-Agent when talking with registries #872
Bug 1973613: Preserve AuthInfo when switching projects #862
Fix unit test failure #839
Bug 1947430: Revert “Bug 1812813: oc debug node: create debug namespace” #808
Bug 1942940: [release-4.6] inspect clusteroperators as a backup to must-gather if it fails #782
Bug 1926172: add rsync & log re-tries #760
Bug 1939549: Fix unit test to use new IS #770
Full changelog

cloud-credential-operator

Bug 1963421: oVirt credentials secret contains unnecessary “ovirt_cafile” #347
Bug 1958959: manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #337
Full changelog

cluster-authentication-operator

Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #397
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #188
Bug 1927854: VPA: Ignore admission hook failures #186
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #189
Full changelog

cluster-config-operator

Updating ose-cluster-config-operator builder & base images to be consistent with ART #177
Full changelog

cluster-dns-operator

Bug 1970140: Corefile: Set bufsize to 512 bytes for all servers #279
Bug 1955632: Corefile: Enable bufsize plugin for all servers #272
Bug 1954760: Enable errors plugin for custom upstream resolvers #271
Bug 1937090: Configure CoreDNS to shut down gracefully #248
Bug 1944245: Corefile: Use 30 second max TTL for caching of negative responses #256
Bug 1936589: Set CoreDNS’s cache’s maximum TTL to 900 seconds #246
Bug 1928773: Set CoreDNS readiness probe period and timeout each to 3 seconds #236
Full changelog

cluster-etcd-operator

Bug 1979585: Validate the status of the etcd snapshot during backup and restore #624
Bug 1987134: Provide an option force backup even when API is not available to check the health. #633
Bug 1978014: Increase inertia duration for the EtcdMembersDegraded condition #620
Bug 1965535: [release-4.6] Improve cert controller detection and correction of invalid certs #604
Bug 1905566: Backup script should get the latest revision of static-pod-resources #508
Bug 1934342: pkg/operator/metriccontroller: cleanup transports #551
Full changelog

cluster-image-registry-operator

Bug 1982611: bump aws-sdk-go to v1.38.35 #706
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #652
Bug 1959563: Using http.DefaultTransport timeouts #690
Bug 1949040: Use mkdir -p to create ca-trust directories #678
Bug 1936984: Make /etc/pki/ca-trust/extracted writable #672
Bug 1923993: Make pruner always aware of registry name #659
Full changelog

cluster-ingress-operator

Bug 1921193: Fix inconsistent ingress operator status after upgrade #541
Bug 1927364: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #547
Bug 1918994: Override termination grace period for the router deployment #539
Full changelog

cluster-kube-controller-manager-operator

Bug 1913030: Add recycler pod template as a ConfigMap #490
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #37
Full changelog

cluster-monitoring-operator

Bug 2009094: manifest allowlist: add acm_managed_cluster_info in 4.6 #1408
Bug 1987246: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1304
Bug 1969964: Recording rule for builds by strategy #1207
Bug 1967938: Use alertmanager_integrations metric instead of alertmanager_notifications_total for AlertmanagerReceiversNotConfigured #1228
Bug 1941634: allow only /metrics for kube-rbac-proxy in front of UWM #1222
Bug 1955483: [4.6] Drop high-cardinality metrics from kube-state-metrics which aren’t used #1221
Bug 1955464: drop container_memory_failures_total metric backport #1180
Bug 1955454: [release-4.6] removing crio metric #1159
Bug 1960465: [release-4.6] Bring new etcd alerts #1161
Bug 1955471: [4.6] Disable collection of node_mountstats_nfs metrics in node_exporter #1147
Bug 1946597: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1105
Bug 1929354: [4.6] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus #1071
Bug 1920898: [4.6] pkg/manifests: fix prometheus-proxy trustedCA #1083
Bug 1937907: etcdInsufficientMembers is wrong when etcd is in a pod #1080
Full changelog

cluster-network-operator

Bug 1988427: Change to use mountPath: /host #1171
Bug 1973770: Reduce SSL sec level for ovsdb connections #1131
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #1150
Bug 1983744: Use 10% for ovnkube-node for maxUnavailable #1157
Bug 1851549: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.6 #1121
Bug 1972587: config: Allow enable-profiling to be used to set profiling #1135
Bug 1973599: Escape characters on ini file #1137
Bug 1937400: kuryr/alerts: change the rule for free count #1012
Bug 1970453: Replace to correct OpenFlow version when replacing flows #1111
Bug 1932114: Detect Nodes Network MTU #1070
Bug 1963280: The Multus daemonset should handle 10% maxUnavailable #1103
Bug 1963279: Use 10% for ovs maxUnavailable for rolling update #1102
Bug 1959185: Backport rbac proxy init script fixes #1096
Bug 1950407: Fix kube-rbac-proxy startup scripts #1061
Bug 1936710: OSD-6600 network-metrics missing priorityClass #1006
Bug 1950094: Upgrade nodes before masters #1060
Bug 1897526: Ensure LimitedPortsOnNetwork is only triggered when needed #907
Bug 1942862: Kuryr: Let Kuryr autodetect primary CNI interface #1035
Bug 1934652: [release-4.6] - Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable #998
Bug 1938280: Include LB members for Machines created on day-2 operation #1018
Full changelog

cluster-node-tuning-operator

Bug 1990629: gather all Tuned CRs #259
Bug 1920525: Recover gracefully after Tuned errors. #197
Full changelog

cluster-openshift-apiserver-operator

Bug 1996051: bindata: run openshift-apiserver as root explicitly. #469
Bug 1955506: explicitly allow apiserver pods to write to their root FS #470
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944145: Bump kubernetes to 0.19.9 #205
Bug 1931857: Set registry routes in operand config #200
Full changelog

cluster-samples-operator

Bug 1950809: add DeepCopy to avoid SharedInformer cache mutation #371
Full changelog

cluster-version-operator

Bug 2014165: pkg/cvo/egress: Load HTTPS proxy from Proxy status #673
Bug 1943973: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #540
Bug 1924194: pkg/payload/task_graph: Require firstIncompleteNode to have tasks #510
Bug 1925199: add current profile annotations to CVO manifests #512
Bug 1927515: pkg/cvo: Use shutdownContext for final status synchronization #517
Bug 1921180: pkg/cvo/sync_worker.go: Ignore work changes during init #506
Full changelog

console

Bug 2002151: Fix the event listener optional types #10019
Bug 1987228: Handle array to string conversion for HTTPS checkbox value #9676
Bug 1980182: operator UI not working with multiple version CRD in 4.6 #9549
Bug 1978159: update cluster-local label for ksvc #9389
Bug 1972694: Omit bitbucket branch in URL if it contains slash #9271
Bug 1970984: Add pipeline annotation to secrets for private git repo import with pipeline #9224
Bug 1972661: fixes: WebTerminal widget should send resize events #9270
Bug 1969878: fix resources fetched by firehose to show the correct Pod donut #9199
Bug 1960094: Make console works against api proxy #8915
Bug 1960545: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8926
Bug 1966422: Create application edit url based on git provider #9088
Bug 1950490: Fix “Create binding” link from Role page, RoleBindings tab #8686
Bug 1961936: Fix topology crash on install of ODH operator to project #8971
Bug 1933666: [release-4.6] Create ImageStream and other resources for samples step by step #8261
Bug 1948370: Remove cluster label from predefined monitoring queries #8614
Updating openshift-enterprise-console builder & base images to be consistent with ART #8386
Bug 1939609: Fix null handling in FilterToolbar_ to prevent possible exceptions #8395
Bug 1943160: support service binding operator version 0.5.0 #8465
Bug 1940905: [release-4.6] Remove master as default branch and use only when ref is given #8424
Bug 1943705: Add ‘Roll Back’ action for Replication Controllers #8491
Bug 1927855: sort cluster task in pipeline builder #8139
Bug 1925037: fix delete app modal error when resource not found #8053
Bug 1935096: Apply var pf-global–FontFamily–monospace to the create secret textarea input #8312
Bug 1931515: allow choice of binding type when creating RoleBinding #8212
Bug 1933017: Fix to avoid overriding of d/dc pod template container values #8322
Bug 1934664: Consider finally tasks when calculating task status #8292
Bug 1928230: retry co-fetch on 409 POST or 429 #8155
Bug 1933727: fix Internal registry deploy flow #8267
Bug 1926121: Listing Subscriptions in OLM should also show them when ‘All Projects’ namespace is picked #8096
Bug 1923939: add missing trigger types and update the optional fields - 4.6 #8015
Bug 1927800: fix query browser prometheus URL for non admin user #8138
Bug 1926371: scale pods using the ‘scale’ subresource #8099
Bug 1926340: Fix that image containers are fetched from external container registries (which doesn’t work for private image containers) #8098
Bug 1924437: Missing User RoleBindings in the Project Access Web UI #8034
Bug 1924069: fix pipeline rerun when pipelineSpec is embedded #8024
Bug 1919138: helmchartrepo is not http(s)_proxy-aware #7901
Bug 1916860: Filter out helm charts based on kubernetes version #7851
Full changelog

csi-driver-manila-operator

Bug 2002556: Do not degrade cluster on failure to reach Manila #127
Bug 2000097: Use cluster Proxy when available #118
Updating csi-driver-manila-operator builder & base images to be consistent with ART #76
Full changelog

docker-builder

Bug 1946363: move entitlement related secrets back to mounts.conf #242
Bug 1939219: bump(*): #225
Full changelog

docker-registry

Bug 2003629: Use apimachinery with HTTP/2 health checks enabled #293
Bug 1982611: bump aws-sdk-go to v1.38.35 #287
Bug 1946694: Run remote registries for pull-through tests as pods #269
Bug 1930802: Replace bitbucket.org/ww/goautoneg with its mirror #266
Updating openshift-enterprise-registry builder & base images to be consistent with ART #261
Full changelog

etcd

ETCD-178: Bug 1951823: openshift-tools: fix on off flow and add unit tests #77
Full changelog

gcp-machine-controllers

Bug 1941563: Ensure response body is closed when we are finished with the request #154
“Bug 1912531: revendor mao” #149
Full changelog

grafana

Updating grafana builder & base images to be consistent with ART #53
Full changelog

haproxy-router

Bug 1971013: template helper - generateHAProxyWhiteListFile, use right arg type #303
Bug 1965329: Add a condition to check if the Endpoints ID is duplicated #292
Bug 1938922: router/template: Cache compiled regular expressions #270
Full changelog

hyperkube

Bug 1939541: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #659
Bug 2021468: Rebase v1.19.16 #1035
Bug 2008266: Rebase 1.19.14 #962
Bug 1993752: UPSTREAM: 104340: Pass additional flags to subpath mount to avoid fla… #942
Bug 1996849: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #902
Bug 1989061: don’t apply defaultAllowPrivilegeEscalation:false when container is privileged #939
Bug 1981784: UPSTREAM: <drop>: bump(apiserver-library-go) #894
Bug 1951727: Speed up PV provisioning for vsphere driver (ocp-4.6) #691
Bug 1959420: fix a 4.6 test flake #740
Bug 1958371: UPSTREAM: 98424: register all pending pod deletions and check for kill #779
Bug 1966811: UPSTREAM: 102224: Fix expired unit test certs #781
Bug 1942146: Fix labels of Cinder PVs #636
Bug 1960002: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #745
Bug 1951467: fix loop bug for verify attached volume #683
Bug 1942630: UPSTREAM: 96789: Choosing the right source VIP for local endpoints #639
Bug 1933624: 4.6: UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning #596
Bug 1930960: UPSTREAM: 94087: kubelet: node sync at least once #582
Bug 1918994: Override termination grace period on annotation #533
Bug 1913543: UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics #511
Bug 1924785: UPSTREAM: 89885: SQUASH: Fix cinder crash #548
Full changelog

insights-operator

[release 4.6] Bug 1953582: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#413) #413
[release 4.6] Bug 1965219: Adds virt_platform metric to the collected metrics (#435) #435
Bug 1951033: Extend OLM data with CSV display name (#403) #403
Bug 1935574: Extend the OLM operator data with related … (#363) #363
Bug 1942907: Gather datahubs.installers.datahub.sap.com resources from SAP clusters (#384) #384
Adds metadata to the IO archive (#382) #382
Bug 1939059: sap license management logs gatherer (#373) #373
Bug 1935775: Gather info about unhealthy SAP pods (#367) #367
Bug 1939640: Do not degrade in case of gathering failure (#378) #378
Bug <TODO>: Gather “cluster-monitoring-config” configmap (#366) #366
Bug 1932775: Refactor (#335) #335
Bug 1921743: collect logs from openshift-sdn-controller pod (#324) #324
Bug 1922855: Gather SAP configuration (SCC & ClusterRoleBinding) (#328) #328
Gather ServiceAccounts stats from cluster namespaces (#330) #330
Bug 1922207: Gather netnamespaces network info & remove hostsubnet IP anonymization (#326) #326
Bug 1928108: Gather PersistentVolume definition (if any) used in Image registry storage config (#339) #339
Bug 1921554: Gather OpenShift SDN error messages from logs (#321) #321
Full changelog

ironic

Bug 1917481: Wait for expected number of drivers starting API #136
Full changelog

ironic-inspector

Updating ironic-inspector builder & base images to be consistent with ART #55
Full changelog

ironic-ipa-downloader

Bug 1975531: [release-4.6] Update ipa version #77
Full changelog

ironic-machine-os-downloader

Updating ironic-rhcos-downloader builder & base images to be consistent with ART #35
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2020612: Update Jenkins and plugins per 2021-11 advisory #1349
Bug 1972366: Bump jenkins version 2.289.2 #1280
Bug 1952561: bump config-file-provider to 3.7.1 #1266
[release 4.6] Bug 1952337: Update Jenkins to 2.277.3 and disable setup wizard #1260
[release 4.6] Bug 1929121: update kubernetes-client-api #1231
[release 4.6] Bug 1929919: Upgrade Jenkins to 2.263.3 #1234
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter builder & base images to be consistent with ART #42
Full changelog

keepalived-ipfailover, pod

Bug 1926267: Egress router: Add iptables package to Dockerfile #78
Full changelog

kube-proxy, sdn

Bug 2004720: improve SDN’s OVS healthcheck and logging #353
Bug 1998453: Fix MCS-blocking iptables rules #340
Bug 1995873: Disable conntrack for vxlan traffic #339
Bug 1970046: Fix for empty egress policy #315
Bug 1915849: Bump 4.6 to use OVS 2.13 #303
Bug 1959425: Fix incorrect unmonitoring of egress nodes #298
Bug 1926662: Do not use egressIP on reply packets #257
Bug 1937547: networkpolicy: pass traffic through NAT to handle possible tuple collisions #274
Bug 1928773: Prefer local endpoint for cluster DNS service #261
Updating ose-sdn builder & base images to be consistent with ART #244
Updating kube-proxy builder & base images to be consistent with ART #247
Full changelog

kube-rbac-proxy

Updating kube-rbac-proxy builder & base images to be consistent with ART #39
Full changelog

kube-state-metrics

Updating kube-state-metrics builder & base images to be consistent with ART #42
Full changelog

kuryr-cni, kuryr-controller

Bug 2019721: Update TOX_CONSTRAINTS_FILE for stable/xena #592
Bug 1983107: Fix KLB conversion from annotations #541
Bug 1983107: Allow clean up of unused member #540
Bug 1975676: Workaround OVN bug causing subports to be DOWN #533
Bug 1968418: Fixing bug, Kuryr-Controller crashes when it’s missing the status #519
Bug 1958106: Skip pool pre population if no Status is present on CRD #513
Bug 1958106: Fix port pools #512
Bug 1958103: Include service subnet to be open for namespaceSelector set to all. #511
Bug 1958093: kuryr-controller restarting after 3 days cluster running - pools without members #509
Bug 1963846: Fix NPs for OVN LBs with hairpin traffic #518
Bug 1952429: Narrow connection to the cluster only on namespaceSelector. #507
Bug 1932114: Allow to config network MTU #506
Bug 1947343: NPs: Do not set ports for protocol-less SG rules #496
Bug 1940141: Do not default protocol to TCP for allow-all NPs #484
Bug 1938161: Get trunks more diligently #478
Bug 1897526: Fix ports count on subnet #427
Bug 1894408: Delete ports created for host networking pods #395
Bug 1893681: Bulk port creation exception not completely formatted #390
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #216
Bug 1939259: [release-4.6] Update MAO and set metrics on :8081 address #220
Full changelog

machine-api-operator

Bug 2022840: GCP CI runs are complaining about APIs not being enabled #955
Bug 1993120: Make sure nodes don’t have attached volumes before vm deletion #905
Bug 1947813: vSphere, detach virtual disks before virtual machine destroy if node not available #845
Bug 1916772: Inject the cluster-wide proxy environment variables in the baremetal pod #808
Bug 1933676: Cherry-pick: Azure disconnected reject publicIP setting #812
Updating ose-machine-api-operator builder & base images to be consistent with ART #786
Full changelog

machine-config-operator

Bug 2000502: bump SystemMemoryExceedsReservation alert threshold to 95% #2750
Bug 2004136: [on-prem] Disable liveness probe until keepalived.conf exists #2763
Bug 1998181: ensure SSH key uniqueness #2737
Bug 1975626: Add nil check for KubeletConfig #2719
Bug 1989403: daemon: add check before updating kernelArgs #2720
Bug 1987221: Backport drain timeout optimizations #2707
Bug 1993218: alerts: SystemMemoryExceedsReservation triggers too quickly #2713
Bug 1975626: Fix KubeletConfig nil error #2699
Bug 1975626: KubeletConfig validation warning in CRD and Docs #2672
Bug 1978041: templates: split unit dropins into separate files #2652
Bug 1926944: enable madvdontneed in system components #2632
Bug 1940594: [baremetal and friends] Drop unnecessary readiness probes #2480
Bug 1927555: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2615
Bug 1942506: [4.6] Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2589
Bug 1953493: daemon: return nil for unsupported operation on an OS #2545
Bug 1955715: Add on-prem namespaces to relatedObjects #2556
Bug 1948533: Add nodeip-configuration.service for oVirt #2567
Bug 1945544: templates: add After=ostree-finalize-staged.service to kubelet.service #2502
Bug 1933206: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2439
Bug 1951089: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2537
Bug 1940585: conditionally set nodeip-service enabled for vSphere #2493
Bug 1883916: [4.6z backport] Fixes setting route metric for ovs-config #2467
Bug 1931617: OVS Config: fixes detecting bond NM files with static IP #2453
Bug 1908534: update ctrcfg crd to make spec & containerruntimeconfig required #2308
Bug 1897552: Mode mismatch fix for confusing strings #2353
Bug 1933075: backport systemd dropin/units zero-length handling #2435
Bug 1906298: update MCDDrainErr to reduce cardinality & fix nodename #2419
Full changelog

mdns-publisher

Bug 2003563: Update zeroconf vendoring #40
Bug 1936539: Update zeroconf to pull in rate-limiting fix #27
Updating ose-mdns-publisher builder & base images to be consistent with ART #22
Full changelog

multus-whereabouts-ipam-cni

Bug 1931953: [backport 4.6] Fix for IPv6 when leading hextets equal zero #50
Bug 1898616: Excluded subnet handling for ipv6 [backport 4.6] #37
Full changelog

must-gather

Bug 2018197: [release-4.6] Add olm resources to default must-gather #242
Bug 1975970: Backport gather network logs #233
Updating ose-must-gather builder & base images to be consistent with ART #203
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon builder & base images to be consistent with ART #31
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver builder & base images to be consistent with ART #36
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #199
Full changelog

oauth-server

Updating oauth-server images to be consistent with ART #89
Full changelog

openshift-controller-manager

Bug 1955211: fixed LANG for the builder container #181
Bug 1935362: Listing All Events with Chunking #170
Full changelog

openshift-state-metrics

Updating openshift-state-metrics builder & base images to be consistent with ART #65
Full changelog

openstack-machine-controllers

Bug 2002752: Adds Proxy to provider client http transport #201
Bug 1933667: Update ose-openstack-machine-controllers builder & base images to be consistent with ART #154
Bug 1933667: Updating ose-openstack-machine-controllers builder & base images to be consistent with ART #165
“Bug 1912531: revendor mao” #164
Full changelog

operator-lifecycle-manager

Bug 1975456: Handle invalid label during resource cleanup #2209
Bug 1968226: Fix inconsistent dependency candidate order. #2184
Bug 1965307: Make ClusterOperator Available condition sticky. #2177
Bug 1969412: fix(catalog): Reduce namespace resync in resolution failure #2189
Bug 1965069: Simplify deployment status check to reduce flapping. #2176
Bug 1963139: Set reason/message for Available condition in packageserver co #2172
Bug 1962310: Use DeploymentAvailable instead of custom test for CSV status. #2169
Bug 1955112: Preserve existing ServiceAccount owner references during installs. #2128
Bug 1954880: Add resource requests for bundle unpacker #2126
Bug 1954759: Fix resolution error if inner entry doesn’t provide a required API. #2123
Bug 1945149: only override deployment resources when explicitly defined in subscription config #2071
Bug 1947916: Don’t adopt copied csvs #2094
Updating operator-lifecycle-manager builder & base images to be consistent with ART #1952
Bug 1940649: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2051
Bug 1940453: Support jittering relatively small resync intervals. #2050
Bug 1938618: Infer package name property for unannotated CSVs, if possible. #2043
Bug 1938369: fix(resolver): Allow skipped versions to be installed initially #2040
Bug 1934637: Honor all subscriptions to a package #2026
Bug 1929335: Only re-create operator resource if it has existing components #2008
Full changelog

operator-marketplace

Updating marketplace-operator builder & base images to be consistent with ART #374
Bug 1937986: wrong community catalog image reference #384
Full changelog

operator-registry

Bug 1968681: fix(containerd): drop xattrs during unpack #678
Updating operator-registry builder & base images to be consistent with ART #550
Bug 1915068: Fix windows build with golang 1.15 #547
Full changelog

ovirt-csi-driver

Bug 1960149: disable metrics #76
Bug 1924623: pass ovirtClient to identity and remove redundant call to Test connection #69
Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #71
Bug 1921817: support raw block devices #68
Full changelog

ovirt-csi-driver-operator

Bug 1924626: increase livenessProbe period #44
Full changelog

ovn-kubernetes

Bug 1988512: [release-4.6] Fix LGW externalIP #676
Bug 1972652: Fix: egress IP route health check detection state on restart #576
Bug 2001980: Fix sync egress IP for missed events on start-up #723
Bug 1985517: Add v6 management interface address for host network policy #626
Bug 1985347: ensure missed events are handled during a reconnection #620
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #603
Bug 1972253: CARRY: fix missed learn for hybrid exgw #575
Bug 1966833: BACKPORT Add a cluster-wide group with node ls-to-cluster-router ports. #573
Bug 1966280: Adds reconciliation for hanging pod adds #561
Bug 1953088: master: Delay deleting Namespace’s address set for 20 seconds #534
Bug 1949240: Bump OVN version in 4.6 to 20.12.0-24 #525
Bug 1947098: [4.6z] Ensure no SNAT on GR for DisableSNATMultipleGws #535
Bug 1950434: [4.6] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #504
Bug 1947836: Fix service update for policy type assertion #501
Bug 1945690: Updating ose-ovn-kubernetes builder & base images to be consistent with ART #401
Bug 1945308: Backport lr nat del add fixes #486
Bug 1945725: Revert the ovn change to avoid a crash #485
Bug 1935691: [release-4.6] Backport port_claim improvement #459
Bug 1933752: Bump to ovn2.13-20.09.0-7.el8fdn #455
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1935586: pkg/prometheus: remove liveness probe #110
Updating prometheus-operator builder & base images to be consistent with ART #103
Updating prometheus-config-reloader builder & base images to be consistent with ART #104
Full changelog

prometheus-node-exporter

Bug 1928073: text_collectors: do not use space as a replacement for escape characters #85
Bug 1928073: Remove escape characters #83
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #368
Full changelog

tests

Bug 2019522: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26564
Bug 1978717: Add BareMetalPlatformType into e2e upgrade service unsupported list #26309
Bug 1981582: [release-4.6] use vpa package and add debug logs to olm test #26355
Bug 1988176: [release-4.6] Add test of documented backup/restore procedure #26356
Bug 1902221: clean up remaining build busybox refs after claytons overhaul #26332
Bug 1977095: correcting test case #26308
Bug 1978442: comment out multi-namespace jenkins pipeline templates test; moving it to jenkins client plugin in-repo e2e’s #26301
Bug 1977093: Add consolequickstarts and consoleplugins extensions to the authenticated rules #26288
Bug 1955599: test/extended/router: Fix-up Unidling test #26119
Bug 1965588: Testimage install cinder 4.6 #26193
Bug 1963909: move verify run test from tools to cli image; narrow scope to /run/secrets #26177
Bug 1958969: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26146
Bug 1948233: Add openshift/network/third-party suite, for CNI plugin conformance #26059
Bug 1936974: Access git over https for tests #26109
Bug 1941577: test/extended/router/idle: skip test on virt platforms #26069
Bug 1927954: test/extended/router/idle: address flakes/failures seen in CI #25893
Bug 1915559: upgrade/upgrade.go: Enhance upgrade ack time out error #26055
Bug 1931864: test: add vsphere and libvirt to unsupported platforms for LB service #25914
Bug 1930537: improve handling of pending pods crashloop detection test #25600
Bug 1902008: fix ldap group sync tests and move them from bash to golang #25808
Bug 1939549: Update tests to use Ruby 2.7 #25967
Bug 1930724: server-side apply e2e: fix oauthclientauthorization race with KCM #25908
Full changelog

thanos

Bug 1961158: Changing resolver to address thanos-ruler pod issues #57
Updating thanos builder & base images to be consistent with ART #44
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github