4.10.45

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.45-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Pending periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.10, 4.10.11, 4.10.12, 4.10.13, 4.10.14, 4.10.15, 4.10.16, 4.10.17, 4.10.18, 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.41, 4.10.6, 4.10.8, 4.10.9, 4.9.23, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.30, 4.9.31, 4.9.32, 4.9.33, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.39, 4.9.40, 4.9.41, 4.9.42, 4.9.43, 4.9.44, 4.9.45, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.50

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.7

Created: 2022-12-07 12:08:12 +0000 UTC

Image Digest: sha256:5f9ac79c9c257c28b8b51e79a0382de285d6e4c4e4537710b7c117601d320293

Release 4.10.45 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2022-12-06-230458

Components

Kubernetes upgraded from 1.23.5 to 1.23.12
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202203290245-0 to 410.84.202212061416-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:28a18eaef25a2458889dee02f007f58df47ba9ead7ef09d583f7f304f2a0e44e
aws-cloud-controller-manager git d85867fe sha256:7cf4d8ffab494498859dfa6b70c15cd189edcb795ff9ae089c5ce0460e73a6b1
aws-pod-identity-webhook git 7f9eb87a sha256:f77f364e52ffca633e48097e44f5d57cdf358014ad531d79fcd735e633957648
azure-file-csi-driver-operator git 3807eb37 sha256:429d142e44df869c9082475673e8821752036aaf4f27c026d768668ca55901bd
cluster-autoscaler-operator git 8bcdcccb sha256:d43ecccafe40a86636d4d1dc67c23fbccb35d5c855830e07fe4f1fb22fc7b121
cluster-bootstrap git f22d1c60 sha256:4b1927817c52b8d831039ad6d55fe8c6dcbfffe2efcdea323d87b81e159b5dc7
cluster-csi-snapshot-controller-operator git ace18623 sha256:d234c73452ceff46ac2722797dd8fc29129ba0e448c01a19b5c26ae26e95e136
cluster-dns-operator git bc48e0aa sha256:90178a54169528adf258651ace33dcf77ebce0a3441fcbd26495562a2a45b4b8
cluster-openshift-controller-manager-operator git b8b65d15 sha256:f0e77599180685cbf042b5bff1d2eedc47d19d4c116eb0d96f460d2e8716e6d3
cluster-policy-controller git 8e5b3651 sha256:fef1efe256b360a71c08ff853f98c5f0adc9d2d4dacb7e4da4e649bef9311f7d
configmap-reloader git 22a40ce7 sha256:856a9758a101fb6d40fbf765d119380be32e71f49e67079b73ac1532ac88a787
coredns git 3ec1ee7d sha256:da4c035c5b03b6d00db009644dd1ed25d4a5139d16da9cd5d79f06deda74090c
csi-driver-manila git df0b27de sha256:f8ca801efaabe72479c82c61a4600293836f64bde6e2d3a5d68c4af43edd429f
csi-driver-nfs git 3448830c sha256:d40af23997c9f43b2327d700b89ecaf80501672a693f2287b2390296fc411175
csi-driver-shared-resource git d06ff18b sha256:79b4f1c98be89af1abf71db807358a9505e32d77a3cbdc24b6cd998a2e8b3fc2
csi-driver-shared-resource-operator git 662615b3 sha256:56b16eb38e3adc1336a999786a6bf11cba83da394bfe8cf204cd49f8938a3023
csi-external-attacher git 27e71f2b sha256:ca2c7764335b7c79ba8c992076199d840809a210dbee50b8bfbb1f615c42792d
csi-external-provisioner git 31de1e19 sha256:e45dc5891669c694f35cbfebb197f9accf6dc2f689019157cb7b364371ff2dc2
csi-external-resizer git e5934091 sha256:0d70647aabf6cd3d053bff2450b56cd4613e168d7f999fb03563af4dbdbc927d
csi-external-snapshotter git fe4a0a2f sha256:9d06b2db3e67a8087e07176cb3d917bdb1967c90beb3bee9eb69cf39a98c016f
csi-livenessprobe git 8c1a5bca sha256:3898817a402fe6a51d9619f1b5ae9ef2c75f134b654826b321866136bebf9a2b
csi-node-driver-registrar git bb0bd823 sha256:28c1dbe7ecfd83739ced6f389dbff922c3130edacfd2d0a0c42d2ff3c77b3297
csi-snapshot-controller git fe4a0a2f sha256:5e706903f0bdd204bd3ddc4b5709413cbe1c261c1ba1569577905e473caad13c
csi-snapshot-validation-webhook git fe4a0a2f sha256:324f2cb9f976523cbcb5f05662da90cfed44689c5af0a89bc77d1ca892278566
egress-router-cni git 5c56bc8a sha256:54ebed29d3ee0923e4f931261de0a2c2a6b20d27f4a3a02358eb53f93d866bb9
gcp-cloud-controller-manager git 4dc728d0 sha256:c8b277a63e3106d474ba8051d9eda82fbe93c9841ef3a63f36902c8a51ebd36a
gcp-machine-controllers git 3fe46c8b sha256:03dd364864aa85a01e316db55f0fb23d95a8d276e521ba34ab359b9a01436786
gcp-pd-csi-driver git 19e9a57f sha256:83fad86e2e80cab815410ff0f3121e57028e16245ba6dacea169f44e204e7dc3
grafana git 48aec355 sha256:b67b7b4430b527b37f758b381b578fce160295dcc8eb5f3766bbb770b89cf934
ibm-cloud-controller-manager git e3039120 sha256:bd1a498d225f709e56957a46642848d61aadeab2f3cb1b78aeb2d0a085600233
ibm-vpc-node-label-updater git 7074dfc3 sha256:f14a0d23d7b8db9504e5315cc5dd8f03a5318df8e242045964001f3392726c72
ibmcloud-machine-controllers git 7449a94f sha256:81e92a5892e736778643a0028fca9a817f461b3a156acff9599a7776c593b81f
ironic-hardware-inventory-recorder git 62469223 sha256:7983f54709fa8d0a34506691e733126833b11adf1735febba33c75ec8f81593d
ironic-machine-os-downloader git 81fe2974 sha256:2a8dc4caf7e41cf785af3ff9235bbbbaa1a524e186037ff16d9f0f1cb55ca1c4
ironic-static-ip-manager git 45a1c542 sha256:905609f582949cb3c64975b533a7dd7455b50e8a678422624f6f9d9cc1ee6bca
k8s-prometheus-adapter git 4052b317 sha256:6676fa9d493a9247e0a72652cd68420c6bbb1e15c7550fee5928ab5444700030
keepalived-ipfailover git 5d526c41 sha256:52f0cca121e5172154933e18ea2d7e3ef81b1256b761e7a7acaa7faa6631cae4
kube-rbac-proxy git 4f198b2b sha256:9958a0bf32e9d936366cd8d68306ef951e9a0da8b9a426454bd2dcd026b26260
kube-storage-version-migrator git 901a6d22 sha256:9a11eea5f6b4ec345c1505fbfdf05f597c55644c228f8d3a90fd94a8e7c5186e
libvirt-machine-controllers git 3b330b72 sha256:fce9d5a42056d5db78343d7a3d643de941c8906e5c67d83da6717d91727010b4
machine-os-content sha256:bd5f239902139eac3f58c3eeffa00dbe3021e7d6c16e53d018ae40ef241bdecc
multus-admission-controller git d7a7fe5d sha256:066a32be9820c8191935c7351ad013eae7966a3248c3b3b4f7b9c16a54de2288
multus-networkpolicy git bfcc6c85 sha256:a7ef789b880abf67d388d6372877e7b47802adabdebe1bdb5e9a04bdfe599e34
multus-route-override-cni git 707dd380 sha256:0ffb1065817f35d6545036bd802887daa40cd7bd492d0422aa5eda15e266a8d4
network-tools git bcfec9c5 sha256:42989a9f7167486a672bf82f3cc1330b489cc396ba263193cabaed236283e19f
oauth-proxy git 799d414b sha256:24a1f220cb3fb6fcdc97896c2e618f1458a52ca6d2c2cc30fd4bb920921f1c68
oauth-server git 245b95f8 sha256:9ac76f7f4cb26787be2f9b162c3581d89d5d3dc9c7c76852eba017d22117e2ef
openshift-controller-manager git 2c2d50db sha256:7ed21b70b7528115d6121ccb262815691bf577b17e059ce4041af94d936a1acb
openstack-cinder-csi-driver git df0b27de sha256:a0119e1f06932519b59c7cdd3b31d6c0377ffca9ed3d29692ee654b205c4cd0a
openstack-cloud-controller-manager git df0b27de sha256:7e672a7abefadf0626788f591a1650cc123cb4a85b1c9ab23f8f90a755e3b139
openstack-machine-api-provider git 2401f74d sha256:e7e2f707c77cfc4d4902207d91d5cdd8e017ca423d7102e901bf729a4a461948
operator-marketplace git 80b92ecf sha256:33a1008bb2c1155d2fab4023fd8b2d946afbf49c073dc687fc2dad4168f8b3a1
ovirt-machine-controllers git 35ce9aaf sha256:b497c394e241ae617b201019685e600c5c20fd7a47a39ff3db048a6fff48cc8e
powervs-machine-controllers git c1d68e7b sha256:ad3e1c5a4d38179f7073f72b5f8964f1be2f14e5e3db0b8bb5f7af12d38e272f
prom-label-proxy git 5f4c8992 sha256:8163eaa0fece3c8f6c178b923fdf3c7c6d92c6d75c4d1e58ce1edb25839516ff
prometheus-alertmanager git 01339596 sha256:57b73f833ce834e50f9e234745401a71ccd74f9a528856b54162705e1d8b8da9
prometheus-node-exporter git 0eed3102 sha256:e20b9ba662691896634ded0f58e008bed07d2fdaabb3ca7c570990e127567f2d
service-ca-operator git 1611373e sha256:61ddb2cd4bad77b4ad7e9f0f4ecc62e7858d3467efe5c62394681c82bdf33bff
telemeter git 2c9c76e6 sha256:01296142b77456d1a513ce92b6d1d0964cfb3e4565659da33979f4755f20e607
vsphere-csi-driver git e310f4d3 sha256:13be876c138054d9e250aeeae7ed81fd1fc2e8c6339d167e96e2a0545b5b1334
vsphere-csi-driver-syncer git e310f4d3 sha256:d35a38216c8cfebf85f1c69171abdaee7438c9b92dd9fd3755c7244314ebcd3d
vsphere-problem-detector git a11df08a sha256:380f34a6208406a58dee6022a705ea2577ff412f36f8256f383fe748727cd162

alibaba-cloud-csi-driver

OCPBUGS-4123: Add explicit pciutils package #19
Bug 2076671: 4.10: Add a parameter to the schema to automatically increase volume sizes #14
Full changelog

alibaba-disk-csi-driver-operator

Bug 2076671: Auto increase volume size to 20 GiB in the default storage class #28
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #23
Full changelog

aws-ebs-csi-driver

OCPBUGS-1804: UPSTREAM: 1398: Add resolver to handle custom endpoints #210
Full changelog

aws-ebs-csi-driver-operator

Bug 2077894: Set custom endpoint environment variable if available #154
Full changelog

aws-machine-controllers

Bug 2117557: Fix panic when accessing nil machine annotations map #50
Bug 2109124: Validate unknown regions using AWS API #48
Bug 2083270: Custom DHCP Option Set: empty domain-name is a valid custom domain #37
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds #42
Full changelog

azure-disk-csi-driver

Bug 2118392: Update dd table 4.10 #31
Full changelog

azure-disk-csi-driver-operator

Bug 2105304: Increase pod startup timeout in e2e tests #52
Bug 2097439: Only use credentials that are provided by the azure-inject-credential… #50
Full changelog

azure-file-csi-driver

OCPBUGS-2607: remove “replace” directive in go.mod #20
Full changelog

azure-machine-controllers

OCPBUGS-3165: Update azure instance types cache #38
OCPBUGS-930: Ignore unknown Instance types in accelerated networking check #34
Bug 2093275: update getAvailabilitySetName function #23
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-377: UPI image download govc rate limit failure #6245
OCPBUGS-4160: OpenStack: Force JSON content-type in Swift #6628
OCPBUGS-3743: build: change ppc64le linking mode #6597
Bug 2099604: Remove optional services from permissions check #6507
OCPBUGS-2795: Bump gophercloud #6529
Bug 2101014: Release 4.10 go getter update #6361
OCPBUGS-1737: OpenStack: Lift validation for 14 chars cluster names #6420
OCPBUGS-1936: bump RHCOS 4.10 bootimage metadata #6454
Bug 2107154: Make azure baseDomainResoureGroup optional for private c… #6120
Bug 2112914: Fix validation errors for instance type #6189
Bug 2102363: Dynamic retrieval of GCP Regions for a Project #6059
OCPBUGS-784: Download yq in upi installer containers #6285
Bug 2111258: vsphere installconfig: use full dc path in network validation #6173
OCPBUGS-249: Allow setting bootstrap kubelet ip #6231
Bug 2095319: bump RHCOS 4.10 bootimage metadata #6095
Bug 2099673: Collect whole journal and netstat data #6035
Bug 2097753: Bootstrap timeout increase #6017
Bug 2083632: Delete all the ports from tagged Neutron networks. #5882
Bug 2077904: Fix empty string usage in ValidateForProvisioning #5835
Bug 2045771: bump RHCOS 4.10 bootimage metadata #5932
Bug 2083335: Set rc-manager=unmanaged for on-prem bootstrap #5876
Bug 2084547: update azure arm templates to support customer provided vnet #5892
Bug 2083327: [release-4.10] Add ‘ARG TAGS=“”’ line for each build step #5874
Bug 2076613: [release-4.10] data/data/coreos/fcos.json: update initial FCOS to 35.20220327.3.0 #5820
Bug 2079589: azurestack: stop pinning to Standard_LRS for disk type #5851
Bug 2041765: Update BMO vendor #5705
Bug 2077411: for vsphere ipi add cluster domain to the uploaded vm configs so that 30-local-dns-prepender can use it #5827
Bug 2068948: Update region check for coreos AMIs #5752
Bug 2072135: vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5773
Full changelog

baremetal-machine-controllers

Update OWNERS #179
Bug 2099584: Update BMO vendor to v0.0.0-20211102102625-469cc9bf7fee #174
Full changelog

baremetal-operator

Bug 2047930: Move from Available to Preparing if HostFirmwareSettings changed #210
Bug 2100996: Uplift kustomize to v4 to remove go-getter dependency #234
Bug 2097695: Stop treating missing network as fatal error #230
Full changelog

baremetal-runtimecfg

Bug 2084187: Avoid kubernetes node port range #178
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-3968: set proper pod security ns labels #1293
Bug 2015119: bump(k8s.io/kubectl) to pick up k/k#110764 #1270
OCPBUGS-1788: oc adm logs: generate proper path for static pods #1246
OCPBUGS-1638: Increase default value of cache TTL to 6 hours #1241
Bug 2116526: oc adm inspect: check a resource exists before its inspection #1227
Bug 2106158: remove klog format and update messages for docker config deprecation #1205
Bug 2095584: Backport oc adm catalog mirror –continue-on-error flag #1170
Bug 2084591: [inspect] Add namespace-scoped networking resources to inspect #1133
Bug 2087248: Add the ReleaseAccepted condition to the oc adm upgrade command #1147
Bug 2080151: Remove network CRDs scheme registration #1122
Bug 2084429: Fix project command auto completion #1131
Bug 2077332: pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates #1114
Bug 2079325: Fix kubectl version to 1.23.0 #1117
Bug 2068763: make sure that we check for resorces and files before picking the simplest path #1098
Full changelog

cloud-credential-operator

OCPBUGS-2802: Backport –credentials-requests-dir for ccoctl gcp delete. #507
OCPBUGS-2884: Make ccoctl use regional STS endpoint by default #504
OCPBUGS-2279: Add ccoctl support to create OIDC endpoint with private S3 bucket #501
Bug 2107276: Make ccoctl work with credentials fetched from gcloud cli defaults #479
Full changelog

cloud-network-config-controller

OCPBUGS-2162: Add resolver to handle custom endpoints #67
Bug 2075444: Get subnet information from subnet instead of from network addresses #40
Bug 2076935: azure: default empty environment to AzurePublicCloud #37
Bug 2062133: Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #28
Full changelog

cluster-authentication-operator

Bug 2084054: only ever include certificates in the oauth-serving-cert CM #577
Full changelog

cluster-autoscaler

OCPBUGS-2546: UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #245
Bug 2105110: Have VPA ignore phantom containers named “POD” #236
Full changelog

cluster-baremetal-operator

OCPBUGS-1239: do not rely on string “master” to be in BMH names #287
OCPBUGS-1517: [release-4.10] Fix a few papercuts #291
Bug 2101002: Uplift kustomize and BMO to remove go-getter dependency #281
Synchronize OWNERS from master #274
Bug 2091738: Fix interpretation of Deployment Status Conditions #267
Full changelog

cluster-cloud-controller-manager-operator

Bug 2099499: Backport resourceapply changes for being able to recreate daemonsets/deployments #194
Bug 2079791: Ensure release version is injected into all controller status clients #187
Full changelog

cluster-config-operator

Bug 2072739: [release-4.10] Bump openshift/api to a83e6f8f1d #247
Full changelog

cluster-etcd-operator

OCPBUGS-2940: revisit defrag controller degradation #961
OCPBUGS-2920: update prometheus alerts #956
OCPBUGS-2800: Add niceness to important etcd processes #953
OCPBUGS-1758: fix cert rotation on IP changes #936
Bug 2116624: etcd-metrics container is flooding logs #906
OCPBUGS-200: Exits with a non-zero code in case Etcd backup fails #907
Bug 2108176: Fix etcd minor upgrade backup #892
Bug 2105249: Add etcd pod liveness and readiness probes #880
Bug 2086451: fix races in etcdclient #828
fixing unit test health flakes with tolerance #882
Bug 2105148: fix degraded missing cluster version #878
Bug 2102793: avoid extrapolation in leaderhip alert #870
Bug 2095579: etcdHighNumberOfFailedGRPCRequests alerts with wrong results #850
Bug 2101912: Upping defrag timeout to 1 minute #866
Bug 2095114: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #848
Bug 2010346: Add summary to etcd alert rules #825
Bug 2088131: remove etcd_perf before restore #836
Bug 2082312: Adding Thomas to reviewers, adding Allen to approvers #817
Bug 2080554: manually disable defrag #809
Bug 2079660: pkg/operator/upgradebackupcontroller: Pivot from Failing to ReleaseAccepted #806
Bug 2055833: Increase IBMCloud VPC heartbeat timeout to 500ms and leader election timeout to 2500ms #794
Bug 2059632: pkg/operator/metriccontroller/fsync_controller: Fix “treshold” -> “thresholds” typos #757
Bug 2076773: Update owners to add new team members #793
Bug 2059347: Fix FSyncController degraded latch #755
Bug 2069825: turn on initial corruption check #771
Full changelog

cluster-image-registry-operator

Bug 2110957: Add progressing condition for node-ca daemon set #791
OCPBUGS-2107: Enable enableHttpsTrafficOnly for Azure storage account #804
Bug 2110957: Use actualDaemonSet for SetDaemonSetGeneration #799
Bug 2115267: Disable dualstack when it is not available #794
Bug 2110963: Bump aws-sdk-go to 1.44.4 #793
Bug 2083242: IR-253: add prometheus rules for image registry operations metrics #786
Bug 2083242: IR-120: Add prometheus rules for image stream tags rules #777
Bug 2083242: IR-120: Implementing metrics for ImageStreams #775
Bug 2084514: Fix cloudfront middleware configuration #780
Bug 2083559: IBMCloud: Add admin permissions to CR #778
Bug 2074050: Deployment annotations, runtimeClassName override and fs policy change #765
Full changelog

cluster-ingress-operator

BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention #820
Bug 2079034: Add allowPrivilegeEscalation to the router container #748
Bug 2097735: Fix loadBalancerServiceAnnotationsChanged check and update #784
Bug 2100630: Fix flakey logic in haproxy timeout tests #792
Bug 2082161: Delete LoadBalancer-type service finalizer logic #755
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-2202: [release-4.10] Wire support for trusted service account issuers #1387
Bug 2060058: superfluous apirequestcount entries in audit log #1327
Bug 2071030: OCP 4.10 should be firing APIRemovedInNextEUSReleaseInUse for APIs removed in 1.25 #1335
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-466: PodDisruptionBudgetAtLimit should not alert when no app/pods exist #648
Bug 2116983: e2e: Fix test pod disruption budget at limit alert #646
Bug 2114587: add runbook urls to KCM-o alerts #645
Full changelog

cluster-kube-scheduler-operator

Bug 2089336: Fix bootstrap leader election config #429
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #65
Full changelog

cluster-machine-approver

Updating ose-cluster-machine-approver images to be consistent with ART #168
Bug 2072928: Reconcile recently approved CSRs by other controllers #162
Full changelog

cluster-monitoring-operator

OCPBUGS-2623: Fix dashboards having container_fs* metrices in queries #1798
OCPBUGS-2037: Bump Thanos to 0.23.2 #1811
OCPBUGS-450: jsonnet: bump dependencies #1802
OCPBUGS-1446: [release-4.10] Use service ca beta annotation #1778
OCPBUGS-1676: Dedicated kubelet ServiceMonitor for prometheus-adapter #1777
OCPBUGS-924: increase alertmanager’s startupProbe failure threshold #1760
OCPBUGS-579: Give precedence to CMO config map proxy config #1751
Bug 2118303: Adds UWM extrenalLabels from Prometheus to ThanosRuler labels #1742
Bug 2099526: Updates jsonnet dependencies, prom-adapter #1715
Bug 2098505: Backport PR#1692 to release-4.10 #1695
Bug 2083242: IR-254: Collecting registry and image stream usage #1694
Bug 2089806: Refactors CreateRouteIfNotExists to CreateOrUpdateRoute #1677
Bug 2090422: pkg/manifest: Allow retention to be configurable for Thanos-Ruler in UWM #1678
Bug 2090602: Federation for UWM metrics #1657
Bug 2083460: Set timeout across Grafana components #1654
Bug 2077722: Adjust NodeFilesystemSpaceFillingUp thresholds according default kubelet GC behavior #1665
Bug 2075757: UWM: add SAR capabilities to prometheus cluster role #1653
Bug 2075757: use bearer token as fall-back authn method #1641
Full changelog

cluster-network-operator

Bug 2111588: Enable OVS metrics for ovnk #1599
OCPBUGS-1538: Make northd probe interval default to 10 seconds #1563
Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe #1550
Bug 2095111: ovn: fix northd preStop command handling #1477
Bug 2083266: Limit Kuryr pods permissions #1435
Bug 2077384: Bump max value of hist quantile for kuryr_cni_request_duration #1388
Bug 2084591: Cleanup CNO relatedObjects #1467
Bug 2085510: OCPVE-106 Customize rollout strategy to fix SNO upgrade #1445
Bug 2078501: [release-4.10] Drop Node update permission for sdn-node #1410
Bug 2058508: Add rolling update strategy for Kuryr-CNI. #1321
Bug 2083593: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1436
Bug 2079031: Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [backport 4.10] #1398
Bug 2081149: Reserve port TCP/9104 for cluster-network-operator #1418
Adds dougbtv to owners [release-4.10] #1401
Bug 2058672: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.10] #1322
Full changelog

cluster-node-tuning-operator

Switch to OS-shipped stalld (#490) #490
e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) #428
Ignore Profile updates triggered by old operands (#357) #357
Full changelog

cluster-openshift-apiserver-operator

[release 4.10] Bug 2109235: openshift-apiserver pods never going NotReady #501
Full changelog

cluster-samples-operator

OCPBUGS-2132: openshift template cakephp-mysql-persistent apiVersion for 4.10 #466
Full changelog

cluster-storage-operator

OCPBUGS-691: [release-4.10] correct sc error messages for ibm and alibaba platforms #314
OCPBUGS-286: HTTPS_PROXY ENV missing in some CSI driver operators #311
Bug 2098655: gcp cluster rollback fails due to storage failure #300
Bug 2102242: Add missing ibm cloud annotations to prometheus rbac #293
Bug 2072191: cluster storage operator AWS credentialsrequest lacks KMS privileges #268
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #41
Full changelog

cluster-version-operator

OCPBUGS-233: pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #824
OCPBUGS-235: pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #825
Bug 2108292: pkg/cvo: retain initial completed update history entry #798
Bug 2094078: pkg/cvo/updatepayload: Guard against ‘rm -fR -whatever’ with ./* #787
Bug 2090150: pkg/cvo/sync_worker.go: Save overrides #782
Bug 2083370: Do not save desired update on load failures #776
Bug 2080058: pkg/cvo/updatepayload: Prune previous payload downloads #769
Bug 2071211: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #764
Full changelog

console

OCPBUGS-3336: Add checks for pods in hpaPodRingLabel #12249
OCPBUGS-2717: Update dependencies to the registry library and devfile parser #12191
OCPBUGS-2781: Fix broken advanced options layout on the add page #12204
OCPBUGS-3161: ‘CatalogSource not found’ in the virtualization #12202
Bug 2072792: Fetch common templates in a different namespace #12163
Bug 2071517: Fix swap usage queries for Top Consumers card in virtualization Overview page #12172
Bug 2090127: Remove nodeSelectorTerms if not defined #12161
Bug 2052469: Filter template list for boot source available #12164
OCPBUGS-2583: attach owner reference to resources created on creating a user to allow garbage collection #12189
OCPBUGS-2894: UI crash when storage class had missing annotation #12220
OCPBUGS-1696: Handle missing BMH for Node gracefully #12129
OCPBUGS-1465: mock call to /api/devfile in e2e #12062
OCPBUGS-2622: Use local test data to mock a devfile registry #12194
OCPBUGS-2523: updates test id for 3scale #12184
Bug 2072790: Regression “Create VM” #12160
OCPBUGS-938: do not show NodesUpdateGroup if there are 0 nodes #12061
Bug 2090127: CNV 20527: Enable boot source select for vm template #12082
Bug 2094074: Remove error on user template with DS #12092
Bug 2054917: Fix template example yaml #12091
Bug 2072790: Select template using also queryParams #12090
OCPBUGS-1759: Show already loaded catalog items after a timeout (3sec) #12106
OCPBUGS-403: fix broken update server link #11974
OCPBUGS-1815: fetch shared resource imagestreams based on labels instance or name #12110
Bug 2107898: Access mode and volume mode with sourceRef will now be taken from default storageclass #11907
OCPBUGS-1828: Fix devfile registry assertion #12112
OCPBUGS-1634: Update registry library dependency to pick up proxy support #12040
Bug 2080389: Link to documentation from the overview page goes to a missing link #11909
OCPBUGS-382: [OSD] ClusterVersion YAML editor should be read only #11922
OCPBUGS-550: Input values in Instantiate Template are disappeared randomly in the developer console #11983
Bug 2077142: Fix Web Terminal availability check to verify operator is installed #11374
Bug 2117642: Backport CI test fix to relase 4.10 #11966
Bug 2117351: fix helm readme bug #11950
Revert “Bug 2100103: Can’t delete rootdisk in customization wizard” #11932
Bug 2114833: Use hostname from provided git url when making git api calls #11924
Bug 2111335: Cannot edit ssh even vm is stopped #11886
Bug 2101412: fix bug where Cluster update modal errors weren’t displa… #11765
Bug 2112910: Fix search redirect #11914
Bug 2100103: Can’t delete rootdisk in customization wizard #11887
Bug 2052444: Unstar RHEL 7 template #11885
Bug 2110536: add z-index to ocs-drawer to make box-shadow visible #11873
Bug 2110938: VM list page crashed #11879
Bug 2063153: Use link to the downstream doc for Sysprep info #11772
Bug 2108193: update icons for eventSource and eventSink #11847
Bug 2053703: Handle blank usernames in error message #11045
Bug 2109225: Remove modelsLoaded conditional rendering from ModelStatusBox #11857
Bug 2106385: Fix CronJob resource version to batch/v1 #11820
Bug 2106385: redirect v1beta1 CronJobs #11819
Bug 2095217: VM SSH command generated by UI points at api VIP #11779
[release 4.10] Bug 2094584: Cant create vm with sysprep #11775
Bug 2100974: Restore spacing between/below modal body content #11763
Bug 2092832: Check if spec is available in MCP details page #11629
Bug 2084629: Add params prop to HorizontalNav component #11488
Bug 2100330: disable upload for sourceRef templates #11774
Bug 2104889: Fix topology sidebar update issues #11798
Bug 2052416: fix offensive vm names #11778
Bug 2094194: fix bug where log stream pauses in Chrome #11654
Bug 2100345: fix clone vm error creating DV #11770
Bug 2097338: Filter virtualization alerts in status card #11715
Bug 2094215: Pass contextSource to TopologyApplicationActionProvider #11656
Bug 2099600: Topology toolbars are unaligned to other toolbars #11703
Bug 2095637: Disable update channel validation as well #11753
Bug 2078699: Display disk size in correct units #11746
Bug 2099527: Bug fix context menu position on topology #11735
Bug 2078699: Display disk size in GiB in VM customize wizard #11733
Bug 2079985: use the correct Alertmanager tenancy proxy #11418
Bug 2094348: Display only running VMs in Virtualization Overview chart #11659
Bug 2095217: Fix SSH command string #11679
Bug 2062980: fixes uri case for event sink #11175
Bug 2092496: [release-4.10] Added vault_tenants_sa to the list of supported providers #11584
Bug 2094863: fix web terminal start #11672
Bug 2094211: Change Ping source spec.jsonData (deprecated) field to spec.data #11655
Bug 2090750: Handle medik8s node maintenance #11581
Bug 2091482: change metrics queries based on metrics level configurations #11595
Bug 2089589: add debounce to tektonhub versions api call to avoid many calls #11552
Bug 2092140: Avoid using ‘gp2’ hardcoded storage class #11618
Bug 2089315: fix rolebinding in DevConsole dropping all subjects when updating #11545
Bug 2095637: Fix failing backend test after devfile registry update #11710
Bug 2094001: Add high priority alerts to overview #11647
Bug 2092168: Add ‘Unavailable’ status to clusteroperator status filter #11619
Bug 2088210: Monitoring: Fix first panel sometimes not rendered #11528
Bug 2090124: Removing SSH service selectors to minimum required #11565
Bug 2081946: Fix default branch param in pipeline import from git flow #11442
Bug 2091402: cloud-init User check for Windows VM refuses to accept capitalized #11592
Bug 2084430: fixes apiversion for k8s svc and resource selection for sink for form yaml switcher #11482
Bug 2087065: show Limit exceeded state for large number of nodes in topology #11506
Bug 2050273: Update MON_DISK_LOW whitelisted alert documentation URL #11411
Bug 2089162: Change learn more link in virtualization -> migration tool #11541
Bug 2089547: Eliminate use of lookaside cache and move to Cachito #11551
Bug 2088430: Set dashboards timeout based on selected timespan #11532
Bug 2084091: MCG standalone deployment page goes blank when the KMS option is enabled #11479
Bug 2088247: Different status shows on VM list page and details page #11538
Bug 2087041: back port conditional updates #11487
Bug 2088281: Attached disk keeps in loading status when add disk to a power off VM by non-privileged user #11530
Bug 2088246: Overview page crash if no labels available #11525
Bug 2051433: [release-4.10] Create HANA VM does not use values from customized HANA templates #11011
Bug 2088255: Adding missing annotations to create VM from YAML #11527
Bug 2088019: The default YAML on vm wizard is not latest #11522
Bug 2083729: Fix Filter Dropdown State Management #11471
Bug 2084489: Create VM from template that has sourceRef - will now reflect sourceRef at yaml #11485
Bug 2076989: Fix ResourceQuota dashboard card and ACRQ donut label #11367
Bug 2083385: fix bug where “Update blocked” label incorrectly displa… #11466
Bug 2076370: fix CRD name filter #11356
Bug 2083551: customize wizard is crashed #11469
Bug 2076275: Update and scope our breadcrumb padding rule so it doesn’t effect a pure implementation #11365
Bug 2076777: add update mode to Update cluster #11364
Bug 2074163: remove .pf-c-button.pf-m-link override #11315
Bug 2071904: Translate Extensions On Each Language Change #11348
Bug 2078385: Remove reference to deprecated v2v-vmware ConfigMap #11387
Bug 2076369: fix bug where ClusterRole > RoleBindings did not display… #11354
Bug 2073477: Add IBM Flashsystem volume types #11308
Bug 2077641: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11382
Bug 2065008: add a hardcoded blog link as fallback in guided tours #11193
Bug 2074571: fix bug where Cluster Settings shows 0 of N, 0% progres… #11319
Bug 2073023: Fix WebSockets not reconnecting during upgrade #11302
Bug 2072839: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11297
Bug 2069246: Fixed the render of a Tab Extension when there is a version present #11242
Bug 2076221: Fix failing TestGetRegistrySamples test #11351
Bug 2057218: Added support for customized wizard - new templates #11341
Bug 2069959: Update getting started blog link #11255
Bug 2074895: Display correct disk size in Edit disk modal #11329
Bug 2061250: Update ConsolePlugin manifest #11267
Bug 2072440: avoid pre-fetching tekton hub task versions in pipeline builder #11290
Bug 2067719: correct ChannelDocLink url #11225
Bug 2069913: Fix disabling community tasks in pipeline builder issue #11253
Bug 2059186: Don’t pass Authorization header when not needed #11108
Bug 2048892: Add empty state to running VMs card #10986
Full changelog

console-operator

Bug 2106944: InfrastructureTopology must be driving console affinity rule creation #664
Bug 2078912: Modify the operator display name to match it with the name displayed in operatorhub #651
Bug 2076453: Console operator should not block installation/upgrade process when set to Removed state #649
Bug 2059992: Re-enable TestMetricsEndpoint e2e test case #646
Bug 2054535: ODF quickstart permissions check #637
Full changelog

container-networking-plugins

Bug 2103175: Sysctl IFNAME [backport 4.10] #63
Full changelog

csi-driver-manila-operator

Bug 2091649: SWEET32: Improve TLS configuration for Kube RBAC Proxy #150
Full changelog

docker-builder

OCPBUGS-205: Add support for BUILDAH_QUIET environment variable #310
Full changelog

docker-registry

OCPBUGS-920: Keep OCI image configs when hard prune #344
Bug 2110963: Bump aws-sdk-go to 1.44.4 #340
Bug 2099416: Support authentication using gcp workload identity federation #336
Bug 2085414: forward http.StatusTooManyRequests to client #332
Full changelog

driver-toolkit

Adding kernel-rpm-macros to the Dockerfile. (#109) #109
Full changelog

etcd

OCPBUGS-2142: Rebase openshift/etcd 4.10 onto 3.5.5 #156
Update OWNERS #123
Bug 2077498: Merge Upstream etcd 3.5.3 into Openshift 4.10 #118
Full changelog

gcp-pd-csi-driver-operator

Bug 2098655: gcp cluster rollback fails due to storage failure #49
Full changelog

haproxy-router

Bug 2098230: Fix gap in router’s handling of graceful shutdowns. #406
Bug 2096362: HAProxy: enable PROXY protocol for all listeners #405
Bug 2076371: generateRouteHostRegexp: Escape blanks #385
Full changelog

hyperkube, pod

OCPBUGS-3434: UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines #1415
UPSTREAM: <carry>: Wait for default service account in node authorizer test #1398
Bug 2101326: bump to k8s 1.23.12 #1382
OCPBUGS-1266: UPSTREAM: <carry>: Remove reserved CPUs from default set #1362
Bug 2106414: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1318
Bug 2103381: UPSTREAM: <carry>: update list of deprecated apis #1306
Bug 2104928: UPSTREAM: 109932: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1263
Bug 2067464: Backport 107821 and 107831 #1241
Bug 2075831: UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved… #1244
Bug 2074094: UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic #1237
Bug 2069311: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1231
Full changelog

hypershift

Use non-strict mode when parsing global config #1619
adopt existing immutable selectors to prevent errors reconciling components from roks toolkit clusters #1571
cache registry files #1567
feat(oauth): allow challenge override for OpenID #1543
Add fallback set cache value from old token #1531
Set Recommended Leader Election Values #1507
feat(cpo): Support disable profiling annotation #1501
Use ImagePullPolicyIfNotPresent for HO #1483
Updated secret permissions to conform to kubernetes CIS benchmark #1480
Ensure that everything uses imagePullPolicy IfNotPResent for resiliency #1475
Add missing control plane prometheus rules #1471
Ensure cache is set during token rotation before reconciling #1461
Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1416
feat(cpo): adhere to upgrade order from kube version skew policy #1410
Set shutdown params to improve graceful shutdown #1387
fix(cpo): Scope down secrets access for olm collect profiles cj #1378
move to ga apis for all components now that management clusters at minimum release boundary #1361
configure cipher suites to prevent using medium strength ssl ciphers #1359
Use apiserver host/port from InfraStatus in reconciling Kube API Server #1333
Ignition server: Actually use workdir #1317
Use forked processes instead of pods to generate ignition payload #1311
disable reconcile of registry config in IBMCloud deployments #1309
feat(cpo): Disable PodSecurity for 4.10 #1289
Disable PodSecurity admission in 4.11 as it breaks conformance #1286
Expose a service account signing key in the API #1265
release-4.10 - Create valid route names with long namespace names #1252
Fast-Forward from main #1233
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-1488: Add udev #20
Full changelog

ibm-vpc-block-csi-driver-operator

Bug 2077419: [4.10] [ibm-vpc-block] Unable to change default storage class #35
Full changelog

image-customization-controller

OCPBUGS-3999: use host IPC for the agent container #71
OCPBUGS-754: mount /run/udev into the agent container #64
Bug 2098627: Remove the container at exit #56
Update OWNERS to current team status #53
Bug 2061977: Add delay between ironic-agent restart, but restart forever #54
Bug 2061977: Restart ironic-agent.service when it fails #43
Full changelog

insights-operator

helm upgrades and uninstalls backport 4.10 (#663) #663
OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) #659
Backport console helm installs to 4.10 (#638) #638
Bug 2081844: Fix the clusteroperator conditions values when IO is (#619) #619
Bug 2079318: Remove PSP gatherer (#608) (#615) #608
Bug 2072848: Gather namespace names with overlapping UIDs (#605) #605
Full changelog

ironic

OCPBUGS-2829: Removed ServerName from VirtualHost Directives #307
OCPBUGS-1740: Backport improvements to iDRAC steps to OCP 4.10 #303
OCPBUGS-1225: sync BIOS settings fixes #298
Bug 2109125: Upgrade version of ironic package to include fix for ZTP deployment #284
Bug 2080442: Update sushy version #272
Full changelog

ironic-agent

OCPBUGS-1232: Include Fix for discovering bond interfaces #63
Bug 2100775: Include Fix discovering WWN/serial for devicemapper devices #56
Bug 2100836: Add missing multipath modules #55
Bug 2089312: multipath fix for passive paths #52
Bug 2053752: import time #49
Bug 2053752: Bump retries for UEFI boot configuration #48
Bug 2061278: [release-4.10] Retry UEFI boot Configuration #43
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-3697: [release-4.10] Update OWNERS #1521
[release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 #1496
OCPBUGS-724: Update blueocean-autofavorite to 1.2.5 #1478
OCPBUGS-2943: Force git-server to an earlier version #1509
OCPBUGS-2185: Bump Jenkins version to 2.361.1 #1499
OCPBUGS-1440: fix install plugins script #1484
OCPBUGS-1037: Install glibc language package to remove setLocale warning #1480
OCPBUGS-473: CVE mitigations #1479
OCPBUGS-713: Add user coreydaley to approvers list #1477
OCPBUGS-400: Revert xmlstarlet usage #1469
Bug 2095620: Bump matrix-project plugin to 1.20 #1453
Bug 2080204: Correctly declare Jenkins URL with trailing slash #1441
Bug 2076253: Mitigate multiple CVEs #1430
Bug 2075135: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1425
Bug 2069134: [release-4.10] Update bundle-plugins.txt #1420
Full changelog

kube-proxy, sdn

OCPBUGS-647: Fix DNS endpoint hack to prefer local instead of forcing it #467
OCPBUGS-647: Fix OCP hack to prefer local DNS endpoints #457
OCPBUGS-255: setup network policy rules during pod creation to fix postStart hook #455
Bug 2078501: [release-4.10] Remove node-tainting for too-small MTU #422
Bug 2087763: Probe failures and pod restarts during 4.7 to 4.8 upgrade #431
Bug 2082451: Masquerade in cluster traffic that is marked for egress IP #430
Bug 2066466: Fix releasing egress IP in cloud environments #416
Bug 2064807: Rebase SDN k8 1.23.4 #415
Bug 2062859: mixed ingress and egress policies can result in half-isolated pods #410
Full changelog

kube-state-metrics

OCPBUGS-4086: cherry-pick, do not expose ingress path metric when service is nil #86
OCPBUGS-2196: internal/store: fix metrics slice length #79
Bug 2078835: internal/store: fix potential panic in pod store #70
Bug 2085329: Use v1 PodDisruptionBudget and CronJob resources #72
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-941: Fix unbound router_id variable while creating event #688
Bug 2082079: Parallelize ports removal #663
Bug 2097277: Use upper-constraints.txt from stable/xena in UT #673
Bug 2077384: Increase cni_request_duration buckets #656
Bug 2055661: Update KLB .spec.provider when required #637
Full changelog

machine-api-operator

OCPBUGS-957: Change “create” sequence with powering on the vm after clone #1065
Bug 2109124: Add DescribeRegions permission for aws controller #1046
Bug 2086104: Set vCenter client request timeout #1017
Full changelog

machine-config-operator

OCPBUGS-4134: Avoid NM managing patch port between br-int and br-ex #3435
OCPBUGS-3500: Add ephemeral storage to kubelet system reserved args #3408
Bug 2069754: [on-prem] Add NetworkManager reload to resolv-prepender #3041
OCPBUGS-2973: drop doc overlaysize default #3395
OCPBUGS-2070: Make sure there is a search domain in resolv.conf #3366
OCPBUGS-642: Fix .ssh directory not owned by core when created by Machine Config Daemon #3315
Bug 2118609: Fix problem with retaining data in string array in piped while loop #3289
Bug 2118607: configure-ovs: clone inactive autoconnect slaves #3288
Bug 2100894: fix MCNameSuffix with kcfg ctrrcfg #3224
Bug 2084187: Avoid kubernetes node port range #3145
Bug 2099686: controller: de-couple FIPS and realtime detection #3201
Bug 2098626: configure-ovs: improve handling of static ip and mac address configuration #3197
Bug 2096564: Bug fix for node drain caused by ICSP objects #3181
Bug 2089757: configure-ovs: avoid restarting NetworkManager #3159
Bug 2085410: OVN Kubernetes configure-ovs-network set static if conversion metric #3147
Bug 2081317: configure-ovs.sh: Provide store hint for default route interface #3131
Bug 2076493: [on-prem] make Corefile api matching stricter #3095
Bug 2082567: [vsphere] remove warning encountered on vSphere UPI cluster without API VIP #3138
Bug 2069798: ClusterRoleUpdated/ClusterRoleBindingUpdated Spamming Event Logs #3045
Bug 2079097: Ensure only one apiserver-watcher process is active on a node. #3121
Bug 2071696: Add KUBELET_NODEIP_HINT to nodeip-configuration #3058
Bug 2072621: Fix bootstrap-unit test failure caused by #3008 #3109
Bug 2076308: Move removeUpdateInProgressTaint functionality to mcc #3091
Bug 2072621: [OCPNODE-869] Create a drop-in file for cri-o’s seccomp use default config #3008
Bug 2070492: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3049
Full changelog

machine-os-images

OCPBUGS-960: Update rhcos release browser url #24
Bug 2090022: Get rid of lookaside cache in OCP build #17
Revert .ci-operator.yaml #18
Updating ose-machine-os-images images to be consistent with ART #9
Bug 2077305: Remove destination coreos if it exists #14
Full changelog

multus-cni

Bug 2071800: Remove error handling for getPod to force to proceed cmdDel [backport 4.10] #132
OCPBUGS-2448: Fix missing device-info in networks-status annotation for chained plugins #137
Bug 2084289: Bumps net-attach-def client library (for CNI v1.0 IP compatibility) [backport 4.10] #128
Updating multus-cni images to be consistent with ART #110
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-1659: ip-reconciler: Add all non default interfaces to Pod IP list #98
Bug 2065488: Sync upstream for context improvements for reconciler [backport 4.10] #88
Full changelog

must-gather

Bug 2106842: Add timeout to oc cp command to fix must-gather delays when routers are terminating #323
Bug 2059777: Fix the namespace extract filter #288
Bug 2106559: fix gather_insights collection #322
Bug 2084591: Add networking resources #307
Bug 2069554: Collect NMState resources when operator is installed #294
Full changelog

network-interface-bond-cni

Bug 2116642: Backport “mac duplicates” #42
Bug 2101841: Backport Fix incorrect bond name issue #36
Bug 2084289: Backport IPAM fixes [4.10] #34
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon images to be consistent with ART (#40) #40
Fix field selector (#50) #50
Full changelog

oauth-apiserver

OCPBUGS-2553: bump kube to 1.23.12 to fix group sync #85
Bug 2094022: Update 4.10 to 1.23 #79
Full changelog

oc-mirror

Bug 2075051: [release-4.10] fix: adds handling for channel with different prefixes in cincinnati.go (#413) #413
build(deps): bump operator-registry dep to v1.21.1 (#390) #390
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #298
Full changelog

openshift-state-metrics

Updating openshift-state-metrics images to be consistent with ART #80
Full changelog

openstack-cinder-csi-driver-operator

Bug 2091649: SWEET32: Improve TLS configuration for Kube RBAC Proxy #89
Full changelog

openstack-machine-controllers

OCPBUGS-2628: Ensure network defs without subnet follow noAllowedAddressPairs #249
OCPBUGS-1951: Apply noAllowedAddressPairs on intended subnets only #245
Bug 1921656: Remove dependence on annotation to allow Server deletion #240
Bug 2077380: Fix InstanceCreate port & trunk cleanup #233
Bug 2071538: Address CVE-2022-21698 #226
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-2898: [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) #389
OCPBUGS-1323: Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes #392
OCPBUGS-1087: Stop corrupting resolver cache. #385
Bug 2115874: fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #348
Bug 2118261: Update containerd version #357
Bug 2106838: remove broken thread-safety (#2697) #340
Bug 2101802: opm bug fix #327
Bug 2095329: [release-4.10] Bump go to v1.17 (#922) #310
Bug 2080609: Fix GRPC CheckRegistryServer function (#2756) #298
Bug 2071941: Replace collect-profile jobs that haven’t completed #277
Bug 2070131: Fix a bug in deletion of webhook service for replacement #272
Full changelog

ovirt-csi-driver

OCPBUGS-761: CSI provisioned disks are preallocated #117
OCPBUGS-620: Upgrade go-ovirt-client to 1.0.0 #116
Full changelog

ovirt-csi-driver-operator

Bug 2050118: Add custom CA bundle support #84
Bug 2070525: Recreate oVirt connection for every sync #94
Full changelog

ovn-kubernetes

OCPBUGS-3858: Adjust ovs bundle timeout #1385
OCPBUGS-1568: pods: deleteLogicalPort should not fail when ls is gone #1293
Bug 2099843: Add final db check to egress IP test #1357
Bug 2105657: Fix egressIP object deletion if the node is deleted first #1228
OCPBUGS-2660: Add logging verbosity to configuring OVN logs #1326
OCPBUGS-1454: Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) #1269
OCPBUGS-2746: Fixes SNAT-ing Logic for EgressIPs #1336
OCPBUGS-2208: getDefaultGatewayInterfaceByFamily: custom filter for MultiHop #1303
OCPBUGS-2464: Fix the golang image used for unit-tests #1299
OCPBUGS-1024: Dockerfile: bump to 2.16.0-89.3.el8fdp #1271
Bug 2111552: Remove conntrack entries after rules #1219
OCPBUGS-660: [release-4.10] pods: deleteLogicalPort should not fail when port is already gone #1257
Bug 2113861: reconcile-node-lbs #1227
OCPBUGS-174: [release-4.10] Fix race when adding and removing pod with same name #1250
Bug 2070392: Fix egress IP reassignment on cloud #1203
Bug 2111588: [release-4.10] export OVS metrics #1215
Bug 2109442: Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected #1195
Bug 2104454: improve performance of service sync #1173
Bug 2105653: egressIP: node retrieval failure is not respected, causes panic #1185
Bug 2105275: Fix egressips for pods recreated with same name #1179
Bug 2107903: Append the SNAT rule in management chain #1201
Bug 2105265: EGW: Clean Stale Conntrack Entries #1191
Bug 2099680: [release-4.10] libovsdb fixes for empty values #1164
Bug 2105276: Fix panics in DestroyNetworkPolicy if policy is nil #1182
Bug 2099206: Update logging for specific policy when creating it #1149
Bug 2099822: Fix pointer loop var #1153
Bug 2091157: [release-4.10] Free IPs and delete resources for completed pods #1152
Bug 2092501: Fixes finding default gateway for configured GW interface #1131
Bug 2095193: duplicated IPs can be assigned to multiple Pods #1132
Bug 2088582: Bumps OVN to 21.12.0-58.el8fdp #1101
Bug 2086891: policy: Fix multicast allow policy type. #1093
Bug 2088040: Delete ChassisPrivate along with Chassis #1099
Bug 2077129: [release-4.10] Fixes secondary bridge #1044
Bug 2088627: EgressIP NATs are not being cleared correctly from the logical router #1098
Bug 2087203: enable exportloopref linter and fix violations #1095
Bug 2082467: Fix cluster/status parsing for single-member db cluster (SNO) #1082
Bug 2083116: delete SNAT2NIP if pod.node == egressNodeServingPod #1084
Bug 2080069: Cleanup conntrack entries when services are deleted #1061
Bug 2080895: Ensure stale information is not present in metrics with labels when they change #1070
Bug 2080882: Fix incorrectly logged error when searching for ovnkube master pod #1069
Bug 2080925: Don’t spawn go routines for adding metric events #1071
Bug 2079546: [release-4.10] call clearInitialNodeNetworkUnavailableCondition for noHostSubnet nodes #1057
Bug 2065780: [release-4.10][backport] Fix cleaning VF representor ports #1001
Bug 2073411: Fix ETP=local for host->svc traffic #1063
Bug 2073137: Fix lgw flows for ingress-svc traffic #1026
Bug 2074839: [release-4.10] fix ipv6 network policy #1043
Bug 2052017: Retry Pod Deletions on Failure #1025
Full changelog

prometheus

OCPBUGS-3078: Backkport OCPBUGS-1718 to release 4.10 #146
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2108976: pkg/prometheus: fix curl exec probe #196
Full changelog

tests

OCPBUGS-2614: Fix s2i ruby test that relys on rack #27479
disruption checking is disabled for prior releases because we lack a good baseline #27472
OCPBUGS-1454: Fixes OVN ACL audit log parsing #27429
Bug 2117301: Skip ErrImagePull for expected failures #27352
Bug 2115862: Skip internet connection test if we use a proxy #27344
Bug 2065028: rearrange test cases #26915
OCPBUGS-374: test: allow -f to match tests for any test suite #27366
Bug 2080198: skip tests for etcd leaders when etcd revisions change a lot #27076
Bug 2080759: Remove BlueOcean annotation check #27065
Bug 2077995: Best matcher single node OVN #27048
Bug 2059845: [test]: bump upper bounds for AWS single node and GCP #27055
Bug 2077414: MGMT-9440: Fix single node serial tests API crash #27037
Bug 2074714: synthetictests: skip “alert/Watchdog must have no gaps or changes” on SNO upgrades #27011
Bug 2074448: exclude loki-promtail from duplicated events #27010
Bug 2077516: don’t fail when a query returns warnings #27039
Bug 2059845: operators should not create watch channels very often: bump OpenStack monitoring operator #26879
Bug 2076265: [release-4.10] test: switch to testing CapBnd over CapInh #27021
Bug 2060592: only add failure when no event was found for the target revision #26881
Full changelog

thanos

OCPBUGS-2037: Bump 4.10 to 0.23.2 #92
Full changelog

vsphere-cloud-controller-manager

Bug 2106666: Return error when VM’s info returned from VC doesn’t contain IP address #29
OCPBUGS-2065: fix .dockerignore to satisfy OCP specific requirements #27
Full changelog

vsphere-csi-driver-operator

OCPBUGS-3288: set TLS cipher suites in Kube RBAC sidecars #120
OCPBUGS-2282: Add HTTP proxy to syncer container #114
OCPBUGS-376: storageclass should not be created for unsupported vsphere version #105
Bug 2108003: 4.10: Don’t block upgrades when another CSI driver is found #99
Bug 2095824: Report max. nr. of attachable volumes per node #91
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github