4.10.25

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.25-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Pending periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Succeeded periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.11, 4.10.13, 4.10.15, 4.10.17, 4.10.18, 4.10.9, 4.9.19, 4.9.25, 4.9.26, 4.9.28, 4.9.29, 4.9.31, 4.9.32, 4.9.34, 4.9.35, 4.9.37, 4.9.38, 4.9.39

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.3

Created: 2022-07-27 09:29:20 +0000 UTC

Image Digest: sha256:ed84fb3fbe026b3bbb4a2637ddd874452ac49c6ead1e15675f257e28664879cc

Release 4.10.25 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2022-07-26-232654

Components

Kubernetes upgraded from 1.23.3 to 1.23.5
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202202251620-0 to 410.84.202207262020-0 (diff)

New images

hypershift git 0820c7aa sha256:5b5ebd21fc4501c39d52036c817a09b644d35cf53c7d2c14dbe5430738205199

Removed images

cluster-capi-controllers
cluster-capi-operator

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:bc3bf6a5d24bb0c782a4680b34ef627043f27cb5c890877bac1d23e7df35d23a
alibaba-machine-controllers git 02061213 sha256:147d92ba3668288393fc57f1edfe8440697397a7698c2d2f42bebbbd88450c61
aws-cloud-controller-manager git d85867fe sha256:fee71716ce525ed04a8735570abb9ed33a8dc0b28075e93d31bfd9a5685a5830
aws-ebs-csi-driver git 8ba0c7a8 sha256:4310e332020025fff550a963fadb5c2d09750cc073ca2dc7f2d3b85fb9baefd3
aws-pod-identity-webhook git 7f9eb87a sha256:b70c09b0294a0a7379d7c234b8d15c09152afc65fac8fdccb4101100d0e1c8f0
azure-cloud-controller-manager git 07f13351 sha256:2bdcc0a30dc140476e938c8118dbc75f71923600c732d0b4cd891d090f074733
azure-cloud-node-manager git 07f13351 sha256:376864b6143162db45b4259d7de97a62c63245b6fdb27518530fd6d20f71ae05
azure-disk-csi-driver git 3d79d39e sha256:959b0eac39df0279eb7d4bba95f090c72745a9d57550be48dca50b623a331942
azure-file-csi-driver git f88155b4 sha256:e77afb318cc3263d79b876caff6c275427c0a1c3b7332e5f3582eec6e25f9679
azure-file-csi-driver-operator git 3807eb37 sha256:880221883e252dd5f9f835385e55ef9bfe9515d8420bbc8131f72f8b24932ec5
baremetal-machine-controllers git 0716ee4c sha256:c6603605589c15a25dc67295961efbca7ba44daaccd6bc43f5107e9e655cadfa
cluster-bootstrap git f22d1c60 sha256:3e041c15dbd6c9e695eabcb34631d1ed727c930e08f304217b519ca0ad451e0f
cluster-dns-operator git bc48e0aa sha256:fd1247554ece77b28772d8354a36ac99e54d4158d45d9e4e736ea044b5f9c7e7
cluster-kube-controller-manager-operator git ca3ff539 sha256:9c2cf5ac3a0fd931b3561255ac7c3a595790dfac1fdff63c7a8f9c3f936c7788
cluster-openshift-controller-manager-operator git b8b65d15 sha256:9ee19dfdcfdad32eff8f89eca56965fc3739e29046cb6640b581faf5e6294545
cluster-policy-controller git 8e5b3651 sha256:f8959640581dd59327dddea6fa485f75d82a8e506454cafb1138247e9a5ec6da
cluster-samples-operator git d41950dc sha256:1f02fd10639509b02e9d3bc96f7bef8b2eb3fd5077df646c025b8aca2ee2434f
configmap-reloader git 22a40ce7 sha256:5d761b3e587c8dbe785849df18247e12a127ab3974b6aad5977e51215112b9a6
coredns git 3ec1ee7d sha256:167c4cc8c700d60ddb29b3dd68263e3f4e8d5885a28bf7efceb6182f4632d00a
csi-driver-manila git df0b27de sha256:42692e7494c329627ba5e500a6a6beb1029febcd7adbe0c5e853bd366b15d47d
csi-driver-nfs git 3448830c sha256:0ee2acff2ce466671d84817c83716eed24e5f69480ef11b365c3a993f7c5fb5b
csi-driver-shared-resource git d06ff18b sha256:9aa73be59a10cdd13981f0d0bc729db04cf8a54a1aab9f5bbd39677027d6f511
csi-driver-shared-resource-operator git 662615b3 sha256:5aea03513ba5fbbcef33bc19afe600414e1ce86f4903e620a11039eeee55257e
csi-external-attacher git 27e71f2b sha256:ea3e66e4d35145d05c6f2e0d415bb4a5c1fb6711be5300c41455dc1726c1025a
csi-external-provisioner git 31de1e19 sha256:12b9686db994e4373c78644706f0d0a47667498014da0d4720124f8cff7b220b
csi-external-resizer git e5934091 sha256:e88e0b93e65b718aa52e23842f827087b74b4c60e4b9a8e623a69a5ed0f3455d
csi-external-snapshotter git fe4a0a2f sha256:2046360405a649d093478b99caea295d292f3041b1b116b670afa23589f428d6
csi-livenessprobe git 8c1a5bca sha256:bea18eb5a8563da088a5c2642d944a93d4669dbb9843507835a2e4e6b927d80a
csi-node-driver-registrar git bb0bd823 sha256:33fd806600fd405adbbff630c10391af07553536b12999c59a6df6ed69cdcb90
csi-snapshot-controller git fe4a0a2f sha256:e7948432d93b3b5a4fcc4ce96c4bd926033728fd1c0e34bd5c1ea9d8c06c6ce5
csi-snapshot-validation-webhook git fe4a0a2f sha256:b8cbee387b817a1447fcc8624b13ec1a534e868ff9103402cb186a7eacf603a1
docker-builder git 24d8db40 sha256:aecd1cb82ff1d78d0c8363a5bbdfaf7a19652e9f4e31c48e63d18a933624655f
driver-toolkit git 0c77c8d6 sha256:c2310b158df2d08470e660a4e9bafb5dd9c1d6d8bd355613c77e2e5b33c08a72
egress-router-cni git 5c56bc8a sha256:224bdc89631e9fb65b4775c3b3a32df9af5cc788d53294f441131a5fd76e448f
gcp-cloud-controller-manager git 4dc728d0 sha256:18a1061339290549e86403202556c562963aae10a766d3aafb6ab428bef25290
gcp-machine-controllers git 3fe46c8b sha256:af6f8142632a5752ab626969d11726c87ff8a7883128476193493d27d4c3657f
gcp-pd-csi-driver git 19e9a57f sha256:db0aa8f0f9df8505bb309f542a8427514cff6ad684f1b9856015f83790d88665
grafana git 48aec355 sha256:1a737b5b2ce66229ee5ff0af530b4931c2c86aac631c44534f4fdaa67039129a
ibm-cloud-controller-manager git e3039120 sha256:44750eef0c78f0156368e7a5c1f765eb1eeae3f821c2f562aa9f97b93c01e0b7
ibm-vpc-block-csi-driver git d54e3706 sha256:7fa1e988cf69de1cd22b287b09e3a53261d2c77b823d132ae023851e322111a4
ibm-vpc-node-label-updater git 7074dfc3 sha256:ddac00d38898d0d68ecef5168a951706dc995e70a7c5b2044230e1cb48a5c3b4
ibmcloud-machine-controllers git 7449a94f sha256:b8008e85c92802b12410be775b8d891cf587d09a1a02116d4a4f986fb35f37a5
ironic-hardware-inventory-recorder git 62469223 sha256:31ab053d19ba229e94786597dc1f04065d25ef4f6ea3ea3b64d4afae2f99e606
ironic-machine-os-downloader git 81fe2974 sha256:64082aeeb52f87851e46f5c83e81d9392c4288956c5cf41659d34ef54627f4e6
ironic-static-ip-manager git 45a1c542 sha256:6e3ddd042f0e2557675703d5c70050df67d085d80be29c431a45eaa588e4fde3
k8s-prometheus-adapter git 4052b317 sha256:3d1b7794b7433e28653f2f52eb861e87371f86d3f6c1133af72eb45211f42f9c
kube-rbac-proxy git 4f198b2b sha256:78738deaa12571bbc7be8ada32892436d28f261710a2cb4de80646fd428155f1
kube-storage-version-migrator git 901a6d22 sha256:938b39610ca4a0af30248e1d489cd59370256f0f228c1d3c9f213f6b1b3effaf
libvirt-machine-controllers git 3b330b72 sha256:8b55d2aa5efba315d77dae6a39dc1c9d0b7a949e0a405fae52539ed0416a5baf
machine-os-content sha256:375e222c564e23086be556668cde1f2139237479218b928c40c8e060ad1c6f25
multus-admission-controller git d7a7fe5d sha256:eef64108a4fbb7470cad119f2256c4f5a239c93ff56c1bc71b91be7fb9906ce0
multus-networkpolicy git bfcc6c85 sha256:4f285d5f1b499415ce7a3685b307a6f94ea29ea2fad2227e84f1c163acd428a7
multus-route-override-cni git 707dd380 sha256:db7aa40146470436f6e60a3a3476f17185f8e86a7e4666795e7d700af63c3706
network-tools git bcfec9c5 sha256:bbc93d24b8c35b34837a534b250247ce0b01f6634eb76db2e3821e7848857d9f
oauth-proxy git 799d414b sha256:f9b4aabc09c7130752c44b40e56dc16591b27075c9f9f1d802d25ba19c3074bf
oauth-server git 245b95f8 sha256:8e3426c3897b5398e0f75f914200c83263dbac74b2fb1e7fba04c3d894569705
openshift-controller-manager git 2c2d50db sha256:a25277fd7f6a0c4be78925a5665a5ff9887c1968227e4075868776b0fb8b539a
openstack-cinder-csi-driver git df0b27de sha256:bc4cbe4bf18dbe5c8e27430cc5d56d62b366d0f71eb9b2ec428d4726fa51cb76
openstack-cloud-controller-manager git df0b27de sha256:5d78728297698e810b81f39c9045975ee42bf9eb058907f90123791f6a066adb
openstack-machine-api-provider git 2401f74d sha256:42b505da01f54eaaca87fed0559a3682d94e0949e6cc4d2438476c27da90e8b5
operator-marketplace git 80b92ecf sha256:b39c26e21ab326f014e39b85404795dd2f5138b1cdf3a1f32d698408991782ea
ovirt-csi-driver git 633cbb6d sha256:95d1b0a8c5943d1bd2fa469fe8d581fe171cdc65f9510a41568d5ae572a6178c
ovirt-machine-controllers git 35ce9aaf sha256:6d4f0a8f63428da23296604283f3a4de648ac0796319562727543943b8a81c4a
powervs-machine-controllers git c1d68e7b sha256:67ebcdf5656471407ac6d6cff7c7acd3c3705e2409ab6ea561aa1138460df802
prom-label-proxy git 5f4c8992 sha256:a99f13a11e5387af6816634ff4cd7e3d70611474615f25186052a09bd04f5808
prometheus git 3c6cd55e sha256:2a8e37672562fe2b8c10e22daef8c80bdf2e8b8369f2808ae688f8a106147a1f
prometheus-alertmanager git 01339596 sha256:22b9d876bf10ac6c1cb27772a9af76d224d5f9be2b68f61657c5afe00fc578bf
prometheus-node-exporter git 0eed3102 sha256:f29b8d57031454681dc45f661a4c1b918b99737092af504a8bd7c9ba76d5ee9f
service-ca-operator git 1611373e sha256:14943019af64e98eb0c5b8e50df8264bd750e1f8b7bec937b6fc99a55dc6d1b7
telemeter git 2c9c76e6 sha256:e39e317f230d112895c305b434e734b3d5f37e83963958c4d319fd223eae2a19
thanos git 10ca1d38 sha256:08af8609752e543da226fa61512f3a8fe95c2284bce3631524923e2e71f77beb
vsphere-cloud-controller-manager git 25b98d3b sha256:5f1739e4fdd473eb0566dee353c11bdaa0eb27412bd8b3d57e264c187afc1443
vsphere-csi-driver git e310f4d3 sha256:1a6cec5904ccdeb531868603a142c72450de55081aafeca8e4ac984016715d32
vsphere-csi-driver-syncer git e310f4d3 sha256:3d0fb6614714962e761142d121ce29d25acb9275b9ffad15de17eb8ad72dc5ab

alibaba-cloud-csi-driver

Bug 2076671: 4.10: Add a parameter to the schema to automatically increase volume sizes #14
Full changelog

alibaba-disk-csi-driver-operator

Bug 2076671: Auto increase volume size to 20 GiB in the default storage class #28
Bug 2058716: Add test manifests + Dockerfile for it #22
Full changelog

aws-ebs-csi-driver-operator

Bug 2077894: Set custom endpoint environment variable if available #154
Full changelog

aws-machine-controllers

Bug 2109124: Validate unknown regions using AWS API #48
Bug 2083270: Custom DHCP Option Set: empty domain-name is a valid custom domain #37
Full changelog

azure-disk-csi-driver-operator

Bug 2097439: Only use credentials that are provided by the azure-inject-credential… #50
Full changelog

azure-machine-controllers

Bug 2093275: update getAvailabilitySetName function #23
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2095319: bump RHCOS 4.10 bootimage metadata #6095
Bug 2099673: Collect whole journal and netstat data #6035
Bug 2097753: Bootstrap timeout increase #6017
Bug 2083632: Delete all the ports from tagged Neutron networks. #5882
Bug 2077904: Fix empty string usage in ValidateForProvisioning #5835
Bug 2045771: bump RHCOS 4.10 bootimage metadata #5932
Bug 2083335: Set rc-manager=unmanaged for on-prem bootstrap #5876
Bug 2084547: update azure arm templates to support customer provided vnet #5892
Bug 2083327: [release-4.10] Add ‘ARG TAGS=“”’ line for each build step #5874
Bug 2076613: [release-4.10] data/data/coreos/fcos.json: update initial FCOS to 35.20220327.3.0 #5820
Bug 2079589: azurestack: stop pinning to Standard_LRS for disk type #5851
Bug 2041765: Update BMO vendor #5705
Bug 2077411: for vsphere ipi add cluster domain to the uploaded vm configs so that 30-local-dns-prepender can use it #5827
Bug 2068948: Update region check for coreos AMIs #5752
Bug 2072135: vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5773
Bug 2062429: IBMCloud: Missing infra providertype #5693
Bug 2065808: stop considering Mint mode as supported on Azure (#5699) #5717
Bug 2064731: fix(ibmcloud): Properly match regex for DNS destroy #5711
Bug 2051334: Remove non-public AWS regions from list of regions #5624
Bug 2062748: vsphere: Not found TagCategory when destroying ipi cluster #5696
Full changelog

baremetal-operator

Bug 2097695: Stop treating missing network as fatal error #230
Full changelog

baremetal-runtimecfg

Bug 2084187: Avoid kubernetes node port range #178
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2095584: Backport oc adm catalog mirror –continue-on-error flag #1170
Bug 2084591: [inspect] Add namespace-scoped networking resources to inspect #1133
Bug 2087248: Add the ReleaseAccepted condition to the oc adm upgrade command #1147
Bug 2080151: Remove network CRDs scheme registration #1122
Bug 2084429: Fix project command auto completion #1131
Bug 2077332: pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates #1114
Bug 2079325: Fix kubectl version to 1.23.0 #1117
Bug 2068763: make sure that we check for resorces and files before picking the simplest path #1098
Bug 2068474: expose –keep-startup flag for oc debug #1097
Bug 2049427: Enhancing the output provided when backup collections are attempted #1056
Bug 2060419: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1083
Bug 2051267: pkg/cli/admin/upgrade: Mention –allow-explicit-upgrade next step when appropriate #1052
Full changelog

cloud-credential-operator

Bug 2107276: Make ccoctl work with credentials fetched from gcloud cli defaults #479
Full changelog

cloud-network-config-controller

Bug 2075444: Get subnet information from subnet instead of from network addresses #40
Bug 2076935: azure: default empty environment to AzurePublicCloud #37
Bug 2062133: Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #28
Full changelog

cluster-authentication-operator

Bug 2084054: only ever include certificates in the oauth-serving-cert CM #577
Bug 2060473: e2e: Pin Keycloack to the legacy variant #555
Full changelog

cluster-autoscaler

Bug 2105110: Have VPA ignore phantom containers named “POD” #236
Full changelog

cluster-autoscaler-operator

Bug 2069095: add leader election flags to autoscaler deployment #243
Full changelog

cluster-baremetal-operator

Synchronize OWNERS from master #274
Bug 2091738: Fix interpretation of Deployment Status Conditions #267
Full changelog

cluster-cloud-controller-manager-operator

Bug 2099499: Backport resourceapply changes for being able to recreate daemonsets/deployments #194
Bug 2079791: Ensure release version is injected into all controller status clients #187
Full changelog

cluster-config-operator

Bug 2072739: [release-4.10] Bump openshift/api to a83e6f8f1d #247
Full changelog

cluster-csi-snapshot-controller-operator

Bug 2062197: Fix race when setting Progressing condition #115
Full changelog

cluster-etcd-operator

Bug 2086451: fix races in etcdclient #828
fixing unit test health flakes with tolerance #882
Bug 2105148: fix degraded missing cluster version #878
Bug 2102793: avoid extrapolation in leaderhip alert #870
Bug 2095579: etcdHighNumberOfFailedGRPCRequests alerts with wrong results #850
Bug 2101912: Upping defrag timeout to 1 minute #866
Bug 2095114: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #848
Bug 2010346: Add summary to etcd alert rules #825
Bug 2088131: remove etcd_perf before restore #836
Bug 2082312: Adding Thomas to reviewers, adding Allen to approvers #817
Bug 2080554: manually disable defrag #809
Bug 2079660: pkg/operator/upgradebackupcontroller: Pivot from Failing to ReleaseAccepted #806
Bug 2055833: Increase IBMCloud VPC heartbeat timeout to 500ms and leader election timeout to 2500ms #794
Bug 2059632: pkg/operator/metriccontroller/fsync_controller: Fix “treshold” -> “thresholds” typos #757
Bug 2076773: Update owners to add new team members #793
Bug 2059347: Fix FSyncController degraded latch #755
Bug 2069825: turn on initial corruption check #771
Full changelog

cluster-image-registry-operator

Bug 2083242: IR-253: add prometheus rules for image registry operations metrics #786
Bug 2083242: IR-120: Add prometheus rules for image stream tags rules #777
Bug 2083242: IR-120: Implementing metrics for ImageStreams #775
Bug 2084514: Fix cloudfront middleware configuration #780
Bug 2083559: IBMCloud: Add admin permissions to CR #778
Bug 2074050: Deployment annotations, runtimeClassName override and fs policy change #765
Full changelog

cluster-ingress-operator

Bug 2079034: Add allowPrivilegeEscalation to the router container #748
Bug 2097735: Fix loadBalancerServiceAnnotationsChanged check and update #784
Bug 2100630: Fix flakey logic in haproxy timeout tests #792
Bug 2082161: Delete LoadBalancer-type service finalizer logic #755
BUG 2063283: Disable keepalive for canary probe #719
Bug 2059210: Set Upgradeable=False if default cert has no SAN #710
Full changelog

cluster-kube-apiserver-operator

Bug 2060058: superfluous apirequestcount entries in audit log #1327
Bug 2071030: OCP 4.10 should be firing APIRemovedInNextEUSReleaseInUse for APIs removed in 1.25 #1335
Full changelog

cluster-kube-scheduler-operator

Bug 2089336: Fix bootstrap leader election config #429
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #65
Full changelog

cluster-machine-approver

Bug 2072928: Reconcile recently approved CSRs by other controllers #162
Full changelog

cluster-monitoring-operator

Bug 2099526: Updates jsonnet dependencies, prom-adapter #1715
Bug 2098505: Backport PR#1692 to release-4.10 #1695
Bug 2083242: IR-254: Collecting registry and image stream usage #1694
Bug 2089806: Refactors CreateRouteIfNotExists to CreateOrUpdateRoute #1677
Bug 2090422: pkg/manifest: Allow retention to be configurable for Thanos-Ruler in UWM #1678
Bug 2090602: Federation for UWM metrics #1657
Bug 2083460: Set timeout across Grafana components #1654
Bug 2077722: Adjust NodeFilesystemSpaceFillingUp thresholds according default kubelet GC behavior #1665
Bug 2075757: UWM: add SAR capabilities to prometheus cluster role #1653
Bug 2075757: use bearer token as fall-back authn method #1641
Bug 2062452: React to changes in clusteroperators #1585
Bug 2060756: Properly deal with an empty console URL #1582
Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568
Full changelog

cluster-network-operator

Bug 2077384: Bump max value of hist quantile for kuryr_cni_request_duration #1388
Bug 2084591: Cleanup CNO relatedObjects #1467
Bug 2085510: OCPVE-106 Customize rollout strategy to fix SNO upgrade #1445
Bug 2078501: [release-4.10] Drop Node update permission for sdn-node #1410
Bug 2058508: Add rolling update strategy for Kuryr-CNI. #1321
Bug 2083593: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1436
Bug 2079031: Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [backport 4.10] #1398
Bug 2081149: Reserve port TCP/9104 for cluster-network-operator #1418
Adds dougbtv to owners [release-4.10] #1401
Bug 2058672: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.10] #1322
Bug 2057961: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1317
Bug 2052446: Kuryr: Decrease vif_annotation_timeout #1303
Update project owners #1332
Full changelog

cluster-node-tuning-operator

Ignore Profile updates triggered by old operands (#357) #357
Full changelog

cluster-openshift-apiserver-operator

[release 4.10] Bug 2109235: openshift-apiserver pods never going NotReady #501
Full changelog

cluster-storage-operator

Bug 2098655: gcp cluster rollback fails due to storage failure #300
Bug 2102242: Add missing ibm cloud annotations to prometheus rbac #293
Bug 2072191: cluster storage operator AWS credentialsrequest lacks KMS privileges #268
Bug 2061483: Incorrect installation of ibmcloud vpc csi driver in IBM… #265
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #41
Full changelog

cluster-version-operator

Bug 2108292: pkg/cvo: retain initial completed update history entry #798
Bug 2094078: pkg/cvo/updatepayload: Guard against ‘rm -fR -whatever’ with ./* #787
Bug 2090150: pkg/cvo/sync_worker.go: Save overrides #782
Bug 2083370: Do not save desired update on load failures #776
Bug 2080058: pkg/cvo/updatepayload: Prune previous payload downloads #769
Bug 2071211: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #764
Bug 2064991: pkg/cvo: Separate payload load from payload apply #753
Bug 2052839: pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating #738
Bug 2053359: Feature gate initialization #740
Full changelog

console

Bug 2109225: Remove modelsLoaded conditional rendering from ModelStatusBox #11857
Bug 2106385: Fix CronJob resource version to batch/v1 #11820
Bug 2106385: redirect v1beta1 CronJobs #11819
Bug 2095217: VM SSH command generated by UI points at api VIP #11779
[release 4.10] Bug 2094584: Cant create vm with sysprep #11775
Bug 2100974: Restore spacing between/below modal body content #11763
Bug 2092832: Check if spec is available in MCP details page #11629
Bug 2084629: Add params prop to HorizontalNav component #11488
Bug 2100330: disable upload for sourceRef templates #11774
Bug 2104889: Fix topology sidebar update issues #11798
Bug 2052416: fix offensive vm names #11778
Bug 2094194: fix bug where log stream pauses in Chrome #11654
Bug 2100345: fix clone vm error creating DV #11770
Bug 2097338: Filter virtualization alerts in status card #11715
Bug 2094215: Pass contextSource to TopologyApplicationActionProvider #11656
Bug 2099600: Topology toolbars are unaligned to other toolbars #11703
Bug 2095637: Disable update channel validation as well #11753
Bug 2078699: Display disk size in correct units #11746
Bug 2099527: Bug fix context menu position on topology #11735
Bug 2078699: Display disk size in GiB in VM customize wizard #11733
Bug 2079985: use the correct Alertmanager tenancy proxy #11418
Bug 2094348: Display only running VMs in Virtualization Overview chart #11659
Bug 2095217: Fix SSH command string #11679
Bug 2062980: fixes uri case for event sink #11175
Bug 2092496: [release-4.10] Added vault_tenants_sa to the list of supported providers #11584
Bug 2094863: fix web terminal start #11672
Bug 2094211: Change Ping source spec.jsonData (deprecated) field to spec.data #11655
Bug 2090750: Handle medik8s node maintenance #11581
Bug 2091482: change metrics queries based on metrics level configurations #11595
Bug 2089589: add debounce to tektonhub versions api call to avoid many calls #11552
Bug 2092140: Avoid using ‘gp2’ hardcoded storage class #11618
Bug 2089315: fix rolebinding in DevConsole dropping all subjects when updating #11545
Bug 2095637: Fix failing backend test after devfile registry update #11710
Bug 2094001: Add high priority alerts to overview #11647
Bug 2092168: Add ‘Unavailable’ status to clusteroperator status filter #11619
Bug 2088210: Monitoring: Fix first panel sometimes not rendered #11528
Bug 2090124: Removing SSH service selectors to minimum required #11565
Bug 2081946: Fix default branch param in pipeline import from git flow #11442
Bug 2091402: cloud-init User check for Windows VM refuses to accept capitalized #11592
Bug 2084430: fixes apiversion for k8s svc and resource selection for sink for form yaml switcher #11482
Bug 2087065: show Limit exceeded state for large number of nodes in topology #11506
Bug 2050273: Update MON_DISK_LOW whitelisted alert documentation URL #11411
Bug 2089162: Change learn more link in virtualization -> migration tool #11541
Bug 2089547: Eliminate use of lookaside cache and move to Cachito #11551
Bug 2088430: Set dashboards timeout based on selected timespan #11532
Bug 2084091: MCG standalone deployment page goes blank when the KMS option is enabled #11479
Bug 2088247: Different status shows on VM list page and details page #11538
Bug 2087041: back port conditional updates #11487
Bug 2088281: Attached disk keeps in loading status when add disk to a power off VM by non-privileged user #11530
Bug 2088246: Overview page crash if no labels available #11525
Bug 2051433: [release-4.10] Create HANA VM does not use values from customized HANA templates #11011
Bug 2088255: Adding missing annotations to create VM from YAML #11527
Bug 2088019: The default YAML on vm wizard is not latest #11522
Bug 2083729: Fix Filter Dropdown State Management #11471
Bug 2084489: Create VM from template that has sourceRef - will now reflect sourceRef at yaml #11485
Bug 2076989: Fix ResourceQuota dashboard card and ACRQ donut label #11367
Bug 2083385: fix bug where “Update blocked” label incorrectly displa… #11466
Bug 2076370: fix CRD name filter #11356
Bug 2083551: customize wizard is crashed #11469
Bug 2076275: Update and scope our breadcrumb padding rule so it doesn’t effect a pure implementation #11365
Bug 2076777: add update mode to Update cluster #11364
Bug 2074163: remove .pf-c-button.pf-m-link override #11315
Bug 2071904: Translate Extensions On Each Language Change #11348
Bug 2078385: Remove reference to deprecated v2v-vmware ConfigMap #11387
Bug 2076369: fix bug where ClusterRole > RoleBindings did not display… #11354
Bug 2073477: Add IBM Flashsystem volume types #11308
Bug 2077641: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11382
Bug 2065008: add a hardcoded blog link as fallback in guided tours #11193
Bug 2074571: fix bug where Cluster Settings shows 0 of N, 0% progres… #11319
Bug 2073023: Fix WebSockets not reconnecting during upgrade #11302
Bug 2072839: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11297
Bug 2069246: Fixed the render of a Tab Extension when there is a version present #11242
Bug 2076221: Fix failing TestGetRegistrySamples test #11351
Bug 2057218: Added support for customized wizard - new templates #11341
Bug 2069959: Update getting started blog link #11255
Bug 2074895: Display correct disk size in Edit disk modal #11329
Bug 2061250: Update ConsolePlugin manifest #11267
Bug 2072440: avoid pre-fetching tekton hub task versions in pipeline builder #11290
Bug 2067719: correct ChannelDocLink url #11225
Bug 2069913: Fix disabling community tasks in pipeline builder issue #11253
Bug 2059186: Don’t pass Authorization header when not needed #11108
Bug 2048892: Add empty state to running VMs card #10986
Bug 2054949: Disabling Vault SA based auth for storage class encryption #11064
Bug 2049762: Cannot change storage class of boot disk when creating VM #10994
Bug 2054650: Allow custom template namespace #11057
Bug 2067983: Pipeline metrics: use prometheus-tenancy API to get data #11226
Bug 2065480: Fix VolumeSnapshot creation sort #11196
Bug 2064988: [Tekton Hub] show read more link in the task quick search details pane #11192
Bug 2057507: Decode secrets before authorizing repository #11094
Bug 2052414: Add started-by annotation to pipelines created with “Start last run” #11015
Bug 2059807: Show standalone resources as sink and not the one’s owned by other resource #11119
Bug 2065672: Fix alert from showing an object #11200
Bug 2060090: updates versions for kafka and kafkaTopic #11127
Bug 2059989: Fix to add labels to webhook secrets created during import #11125
Bug 2056512: fix ClusterOperator Status, Version col sorts #11084
Bug 2064510: Change the tekton hub api endpoint to use v1 api #11186
Bug 2062258: Add optional chaining to avoid npe #11164
Bug 2059805: clear dashboard variables for dev perspective on unmount #11118
Bug 2060448: Fix potential issues with namespaces that contains just numbers #11132
Bug 2059849: fix console crashing in the edit deployment form #11122
Bug 2055444: Fix sticky footer in pipeline builder’s form yaml switcher #11079
Bug 2054757: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11059
Bug 2062146: Allow topology list to select application group #11162
Bug 2059848: fix duplicate edit app action on installing virtualization operator #11121
Bug 2062837: Remove tech preview badge for web terminal #11173
Bug 2055290: Sum total memory of unnamed container only #11072
Bug 2057260: Fix pipeline run logs autoscrolling issue #11092
Bug 2048047: Make namespace bar full width and sticky in console #11065
Full changelog

console-operator

Bug 2076453: Console operator should not block installation/upgrade process when set to Removed state #649
Bug 2059992: Re-enable TestMetricsEndpoint e2e test case #646
Bug 2054535: ODF quickstart permissions check #637
Bug 2054199: Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository #636
Full changelog

container-networking-plugins

Bug 2103175: Sysctl IFNAME [backport 4.10] #63
Full changelog

csi-driver-manila-operator

Bug 2091649: SWEET32: Improve TLS configuration for Kube RBAC Proxy #150
Full changelog

docker-registry

Bug 2099416: Support authentication using gcp workload identity federation #336
Bug 2085414: forward http.StatusTooManyRequests to client #332
Bug 2069807: Bug 2060362: Revert “Support authentication using gcp workload identity federation” #321
Bug 2061785: Fix ICSP for subrepositories #318
Full changelog

etcd

Update OWNERS #123
Bug 2077498: Merge Upstream etcd 3.5.3 into Openshift 4.10 #118
Full changelog

gcp-pd-csi-driver-operator

Bug 2098655: gcp cluster rollback fails due to storage failure #49
Full changelog

haproxy-router

Bug 2076371: generateRouteHostRegexp: Escape blanks #385
Full changelog

hyperkube, pod

Bug 2106414: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1318
Bug 2103381: UPSTREAM: <carry>: update list of deprecated apis #1306
Bug 2104928: UPSTREAM: 109932: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1263
Bug 2067464: Backport 107821 and 107831 #1241
Bug 2075831: UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved… #1244
Bug 2074094: UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic #1237
Bug 2069311: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1231
Bug 2065774: Backport 108723 OutofCpu Fixes #1221
Bug 2065620: Rebase 1.23.5 #1220
Full changelog

ibm-vpc-block-csi-driver-operator

Bug 2077419: [4.10] [ibm-vpc-block] Unable to change default storage class #35
Full changelog

image-customization-controller

Bug 2098627: Remove the container at exit #56
Update OWNERS to current team status #53
Bug 2061977: Add delay between ironic-agent restart, but restart forever #54
Bug 2061977: Restart ironic-agent.service when it fails #43
Full changelog

insights-operator

Backport console helm installs to 4.10 (#638) #638
Bug 2081844: Fix the clusteroperator conditions values when IO is (#619) #619
Bug 2079318: Remove PSP gatherer (#608) (#615) #608
Bug 2072848: Gather namespace names with overlapping UIDs (#605) #605
Gather some error messages from the kube-controller-manager containers (#598) #598
Gather cluster images.config.openshift.io resource definition (#581) #581
Full changelog

ironic

Bug 2109125: Upgrade version of ironic package to include fix for ZTP deployment #284
Bug 2080442: Update sushy version #272
Full changelog

ironic-agent

Bug 2100775: Include Fix discovering WWN/serial for devicemapper devices #56
Bug 2100836: Add missing multipath modules #55
Bug 2089312: multipath fix for passive paths #52
Bug 2053752: import time #49
Bug 2053752: Bump retries for UEFI boot configuration #48
Bug 2061278: [release-4.10] Retry UEFI boot Configuration #43
Bug 2048481: Update ironic-python-agent to latest bugfix version #38
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2095620: Bump matrix-project plugin to 1.20 #1453
Bug 2080204: Correctly declare Jenkins URL with trailing slash #1441
Bug 2076253: Mitigate multiple CVEs #1430
Bug 2075135: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1425
Bug 2069134: [release-4.10] Update bundle-plugins.txt #1420
Bug 2069134: [release-4.10] Enable supply-chain check #1417
Bug 2061616: [release-4.10] Compute bundle plugins in build #1398
Bug 2063898: [release-4.10] 2022-02-15 Security Advisory #1403
Bug 2062053: Add Jitendar to OWNERS file #1401
Bug 2055653: Add xmlstarlet to handle JENKINS_PASSWORD properly #1391
Full changelog

keepalived-ipfailover

Updating openshift-enterprise-base images to be consistent with ART #110
Full changelog

kube-proxy, sdn

Bug 2078501: [release-4.10] Remove node-tainting for too-small MTU #422
Bug 2087763: Probe failures and pod restarts during 4.7 to 4.8 upgrade #431
Bug 2082451: Masquerade in cluster traffic that is marked for egress IP #430
Bug 2066466: Fix releasing egress IP in cloud environments #416
Bug 2064807: Rebase SDN k8 1.23.4 #415
Bug 2062859: mixed ingress and egress policies can result in half-isolated pods #410
Full changelog

kube-state-metrics

Bug 2085329: Use v1 PodDisruptionBudget and CronJob resources #72
Full changelog

kuryr-cni, kuryr-controller

Bug 2082079: Parallelize ports removal #663
Bug 2097277: Use upper-constraints.txt from stable/xena in UT #673
Bug 2077384: Increase cni_request_duration buckets #656
Bug 2055661: Update KLB .spec.provider when required #637
Full changelog

machine-api-operator

Bug 2086104: Set vCenter client request timeout #1017
Full changelog

machine-config-operator

Bug 2100894: fix MCNameSuffix with kcfg ctrrcfg #3224
Bug 2084187: Avoid kubernetes node port range #3145
Bug 2099686: controller: de-couple FIPS and realtime detection #3201
Bug 2098626: configure-ovs: improve handling of static ip and mac address configuration #3197
Bug 2096564: Bug fix for node drain caused by ICSP objects #3181
Bug 2089757: configure-ovs: avoid restarting NetworkManager #3159
Bug 2085410: OVN Kubernetes configure-ovs-network set static if conversion metric #3147
Bug 2081317: configure-ovs.sh: Provide store hint for default route interface #3131
Bug 2076493: [on-prem] make Corefile api matching stricter #3095
Bug 2082567: [vsphere] remove warning encountered on vSphere UPI cluster without API VIP #3138
Bug 2069798: ClusterRoleUpdated/ClusterRoleBindingUpdated Spamming Event Logs #3045
Bug 2079097: Ensure only one apiserver-watcher process is active on a node. #3121
Bug 2071696: Add KUBELET_NODEIP_HINT to nodeip-configuration #3058
Bug 2072621: Fix bootstrap-unit test failure caused by #3008 #3109
Bug 2076308: Move removeUpdateInProgressTaint functionality to mcc #3091
Bug 2072621: [OCPNODE-869] Create a drop-in file for cri-o’s seccomp use default config #3008
Bug 2070492: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3049
Bug 2062666: configure-ovs: reload NM only when necessary #3005
Bug 2062290: Add –templates flag to MCC bootstrap command #2997
Bug 2063326: [release-4.10] Ensure directories are created with usable permission bits #3012
Bug 2060954: Explicitly set keyfile as the default plugin #2985
Full changelog

machine-os-images

Bug 2090022: Get rid of lookaside cache in OCP build #17
Revert .ci-operator.yaml #18
Updating ose-machine-os-images images to be consistent with ART #9
Bug 2077305: Remove destination coreos if it exists #14
Full changelog

multus-cni

Bug 2084289: Bumps net-attach-def client library (for CNI v1.0 IP compatibility) [backport 4.10] #128
Updating multus-cni images to be consistent with ART #110
Full changelog

multus-whereabouts-ipam-cni

Bug 2065488: Sync upstream for context improvements for reconciler [backport 4.10] #88
Full changelog

must-gather

Bug 2106842: Add timeout to oc cp command to fix must-gather delays when routers are terminating #323
Bug 2059777: Fix the namespace extract filter #288
Bug 2106559: fix gather_insights collection #322
Bug 2084591: Add networking resources #307
Bug 2069554: Collect NMState resources when operator is installed #294
Full changelog

network-interface-bond-cni

Bug 2101841: Backport Fix incorrect bond name issue #36
Bug 2084289: Backport IPAM fixes [4.10] #34
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon images to be consistent with ART (#40) #40
Fix field selector (#50) #50
Added METRIC_TEST_IMAGE var (#47) #47
Full changelog

oauth-apiserver

Bug 2094022: Update 4.10 to 1.23 #79
Full changelog

oc-mirror

Bug 2075051: [release-4.10] fix: adds handling for channel with different prefixes in cincinnati.go (#413) #413
build(deps): bump operator-registry dep to v1.21.1 (#390) #390
Bug 2064901: fix(associations): modifies association return values to allows image… (#359) #359
Bug 2065500: resolves multiple channel heads in merged catalogs (#372) #372
chore: adds dynamic version info for version command with ldflags (#328) (#334) #328
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #298
Full changelog

openshift-state-metrics

Updating openshift-state-metrics images to be consistent with ART #80
Bug 2052804: adding new build comments required for go 1.17 #83
Full changelog

openstack-cinder-csi-driver-operator

Bug 2091649: SWEET32: Improve TLS configuration for Kube RBAC Proxy #89
Full changelog

openstack-machine-controllers

Bug 2077380: Fix InstanceCreate port & trunk cleanup #233
Bug 2071538: Address CVE-2022-21698 #226
Bug 2050064: Ensure subnets belong to the queried network #219
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2106838: remove broken thread-safety (#2697) #340
Bug 2101802: opm bug fix #327
Bug 2095329: [release-4.10] Bump go to v1.17 (#922) #310
Bug 2080609: Fix GRPC CheckRegistryServer function (#2756) #298
Bug 2071941: Replace collect-profile jobs that haven’t completed #277
Bug 2070131: Fix a bug in deletion of webhook service for replacement #272
Full changelog

ovirt-csi-driver-operator

Bug 2050118: Add custom CA bundle support #84
Bug 2070525: Recreate oVirt connection for every sync #94
Full changelog

ovn-kubernetes

Bug 2105653: egressIP: node retrieval failure is not respected, causes panic #1185
Bug 2105275: Fix egressips for pods recreated with same name #1179
Bug 2107903: Append the SNAT rule in management chain #1201
Bug 2105265: EGW: Clean Stale Conntrack Entries #1191
Bug 2099680: [release-4.10] libovsdb fixes for empty values #1164
Bug 2105276: Fix panics in DestroyNetworkPolicy if policy is nil #1182
Bug 2099206: Update logging for specific policy when creating it #1149
Bug 2099822: Fix pointer loop var #1153
Bug 2091157: [release-4.10] Free IPs and delete resources for completed pods #1152
Bug 2092501: Fixes finding default gateway for configured GW interface #1131
Bug 2095193: duplicated IPs can be assigned to multiple Pods #1132
Bug 2088582: Bumps OVN to 21.12.0-58.el8fdp #1101
Bug 2086891: policy: Fix multicast allow policy type. #1093
Bug 2088040: Delete ChassisPrivate along with Chassis #1099
Bug 2077129: [release-4.10] Fixes secondary bridge #1044
Bug 2088627: EgressIP NATs are not being cleared correctly from the logical router #1098
Bug 2087203: enable exportloopref linter and fix violations #1095
Bug 2082467: Fix cluster/status parsing for single-member db cluster (SNO) #1082
Bug 2083116: delete SNAT2NIP if pod.node == egressNodeServingPod #1084
Bug 2080069: Cleanup conntrack entries when services are deleted #1061
Bug 2080895: Ensure stale information is not present in metrics with labels when they change #1070
Bug 2080882: Fix incorrectly logged error when searching for ovnkube master pod #1069
Bug 2080925: Don’t spawn go routines for adding metric events #1071
Bug 2079546: [release-4.10] call clearInitialNodeNetworkUnavailableCondition for noHostSubnet nodes #1057
Bug 2065780: [release-4.10][backport] Fix cleaning VF representor ports #1001
Bug 2073411: Fix ETP=local for host->svc traffic #1063
Bug 2073137: Fix lgw flows for ingress-svc traffic #1026
Bug 2074839: [release-4.10] fix ipv6 network policy #1043
Bug 2052017: Retry Pod Deletions on Failure #1025
Bug 2059354: [4.10z] After reboot egress node, lr-policy-list was not correct #994
Bug 2061804: [4.10] Fixes “ErrorAddingLogicalPort: duplicate IP found in ECMP Pod route cache!” for same pod #990
Bug 2063834: backport 2052975 to 4.10 #995
Bug 2057723: Multiple fixes around Network Policies #971
Update project owners #983
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2060718: Add relabel validations #161
Full changelog

tests

Bug 2080198: skip tests for etcd leaders when etcd revisions change a lot #27076
Bug 2080759: Remove BlueOcean annotation check #27065
Bug 2077995: Best matcher single node OVN #27048
Bug 2059845: [test]: bump upper bounds for AWS single node and GCP #27055
Bug 2077414: MGMT-9440: Fix single node serial tests API crash #27037
Bug 2074714: synthetictests: skip “alert/Watchdog must have no gaps or changes” on SNO upgrades #27011
Bug 2074448: exclude loki-promtail from duplicated events #27010
Bug 2077516: don’t fail when a query returns warnings #27039
Bug 2059845: operators should not create watch channels very often: bump OpenStack monitoring operator #26879
Bug 2076265: [release-4.10] test: switch to testing CapBnd over CapInh #27021
Bug 2060592: only add failure when no event was found for the target revision #26881
Bug 2055381: cleanup network policy ACL extended test #26946
Bug 2059717: IBMCloud: Ignore CRB already exists #26869
Bug 2061554: Add debug info for signature test #26889
Bug 2060862: [release-4.10] Increase cluster-monitor-operator watch count threshold on single-node clusters #26872
Bug 2059454: images/tests: yum update python3-six to workaround ART issue #26866
Bug 2058688: Alibaba: enable init for alibabacloud provider #26821
Full changelog

vsphere-csi-driver-operator

Bug 2108003: 4.10: Don’t block upgrades when another CSI driver is found #99
Bug 2095824: Report max. nr. of attachable volumes per node #91
Bug 2060213: Fix node check result cache between checks #78
Full changelog

vsphere-problem-detector

Bug 2055895: change NodePerfCheck criteria to be based on average latency #76
Bug 2059255: Fix stale metrics by resetting them #80
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github