4.10.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.53-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Pending periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.10, 4.10.11, 4.10.12, 4.10.13, 4.10.14, 4.10.15, 4.10.16, 4.10.17, 4.10.18, 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.48, 4.10.6, 4.10.7, 4.10.8, 4.10.9, 4.9.23, 4.9.24, 4.9.25, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.32, 4.9.33, 4.9.34, 4.9.35, 4.9.37, 4.9.38, 4.9.39, 4.9.40, 4.9.41, 4.9.42, 4.9.43, 4.9.44, 4.9.45, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.50, 4.9.51, 4.9.52, 4.9.53

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.25

Created: 2023-02-22 08:20:01 +0000 UTC

Image Digest: sha256:0f683cf611bd6f2d3ab045b52df0fcda8adefa086e6ee80c5551275e5692cd8c

Release 4.10.53 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-02-21-061718

Components

Kubernetes upgraded from 1.23.5 to 1.23.12
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202207262020-0 to 410.84.202302090253-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:22596de20235bf97567e8da1f9509762e5d87c1627db8a89e766bfc0bf87fe43
alibaba-disk-csi-driver-operator git f0d69663 sha256:be4b581b72bc41d2d58d2c52c90af5ea707fb51553276e7ab49a3b2520e9ed09
aws-cloud-controller-manager git d85867fe sha256:68e593a04696948a11c4e860a95a400f99cb12513a4a3846526809ba4fc82624
aws-ebs-csi-driver-operator git c2e6dc19 sha256:931ef5254ac6303c95e7db5f90a6470f957349e7ef95dd2a3184adc978ddcf76
aws-pod-identity-webhook git 7f9eb87a sha256:e82a84e205171d3ed699e646503e195d5e5c674df963072b3ab03287cddc0305
azure-file-csi-driver-operator git 3807eb37 sha256:348374ae5040060ccf56321f58bf19e497e1cfd88e178ba1b1ac663840ee991a
baremetal-runtimecfg git 40c11f72 sha256:5a9576b48f2b72564a06e6aa9100a3a85bbb859dea093254424a9af04020f658
cluster-authentication-operator git 6a015c71 sha256:9819ad87ae3ba62bcb66550c26ec1b3e100f41988724d4cde78e9c03cd2d9d93
cluster-autoscaler-operator git 8bcdcccb sha256:1aef414a915735e1e8800739b7ac52130479b6397a137fdf5a19eaf88b53a0b7
cluster-bootstrap git f22d1c60 sha256:f80413448c0952a40264ea05d174b71cdfe595622436d23180884fbb14d5215b
cluster-cloud-controller-manager-operator git e2e0d4f9 sha256:be2ef4ed52fd39bafa210ed1409c102c5a1bf2c3e8f9529114929c6af16fb9c0
cluster-config-operator git 0840c6f2 sha256:1962d80cc3aa73d18dbeb12de6af134385ecca27f0d6af73c28cbdd5672115eb
cluster-csi-snapshot-controller-operator git ace18623 sha256:e21d8b4e3590940322af48a6a72d2b8714d43d27999d2e835a03240f557bdb55
cluster-kube-scheduler-operator git d8694a5b sha256:0a661a81adf07d562ecb77c9afa3c8e12403532165cad10e82e9ac81163282db
cluster-kube-storage-version-migrator-operator git 7e1f5684 sha256:e41e127af5beea5549acef16b3cc6ae4756cbe46875e68662a5b3fdf9449fa48
cluster-openshift-controller-manager-operator git b8b65d15 sha256:a48a14532349e47faa378faf565004dade3c6d4cc5544c09ffafaa0db5d159b2
cluster-update-keys git 684f6f42 sha256:f51581667df24baee8e4c999f23f7db6194d094110af92cc829b5d730479b5de
container-networking-plugins git 3123ef8b sha256:b34d78f3cf80208541c4ac9cc84d8393fef336537ab9258726a81a684b3a578d
csi-driver-manila-operator git a0942c0d sha256:37b77a815db9af37524eb81552ea3d967586309b747b1dd98d423cdf8a121bb4
csi-driver-nfs git 3448830c sha256:10463a57c9826d0ff866fc54ac3499f97dd86a6b59a55132f8003ad509a30f9b
csi-driver-shared-resource git d06ff18b sha256:461ec09a87defd4293fa102da3cb2803d4920340c379a2de9dce19b16dc299c2
csi-driver-shared-resource-operator git 662615b3 sha256:913a0d4b662a076437139551f75b3f52c9fc6ac9de69ea0233014cd3d07ef9bb
csi-external-attacher git 27e71f2b sha256:29174679b0bbd6d7014d72aa723d10c96695ea52654bccf97516966dbd1fc2ac
csi-external-provisioner git 31de1e19 sha256:8b086f4e7d87d43eca79028879dce115f8a2fe13fb17eab37a8fb509bf2ccc52
csi-external-resizer git e5934091 sha256:00b67980ea5c780118daf5d602324861eb9f0aa5fdf392e857ebf366a65f564d
csi-external-snapshotter git fe4a0a2f sha256:63f9af8bb8e44752588dda8b5503bfa613efc9e6c1ad46b44c697229b95af71e
csi-livenessprobe git 8c1a5bca sha256:2a51cb97a82a78758dc08ff4053add576906e56f21367a0662107a1076e3eaa4
csi-node-driver-registrar git bb0bd823 sha256:1847d8560861bf7876e0758c9e542649d12f61f2e78d5f4d1aa76ed9a242198b
csi-snapshot-controller git fe4a0a2f sha256:21967243dfa80aa46d272f3d3dcc1ad64fe60b5c6b9602c50858ac3b71b334af
csi-snapshot-validation-webhook git fe4a0a2f sha256:8f9d6ee075bfb8fbb8cb584c12bd4a6f35905ec53045ecdcec7c66f43cb4d5e0
egress-router-cni git 5c56bc8a sha256:974d6f1a4f0131d695aeb7b3c46ea4f9ce3ecae8da7b02a7045675171ef1d3ff
gcp-cloud-controller-manager git 4dc728d0 sha256:36ec1571b29e2c8e8ca18319eed377b6192e3f9dbaed8efdf863cc5c24a106d4
gcp-pd-csi-driver git 19e9a57f sha256:563a2d276104295a7177554bb6eaa1140f9a9140ce81625efaae9090bfd4e054
gcp-pd-csi-driver-operator git 0e369dee sha256:5b5e5aacdfe4663e69936041101e23435e6ac1f17f743cb8159e4f1923394593
ibm-cloud-controller-manager git e3039120 sha256:1c064bce339b5ec9e3581d37629aab9ba8716c82bb2bb68ee060f99a2f836f91
ibm-vpc-block-csi-driver-operator git 28bad53d sha256:358090699e6c3e697bb34e7aa30fb1c564f8618b29dc13f2f8b24e35b61b0c93
ibm-vpc-node-label-updater git 7074dfc3 sha256:2944e00d556c577cfb2035f3e1dd661616441c47ac2975249f6977492ae67ec2
ibmcloud-machine-controllers git 7449a94f sha256:5459b537047cd56153388b275ccbb2026cccda05c46d595090121e0b68052b08
ironic-hardware-inventory-recorder git 62469223 sha256:39d31f4d3599aa7e8217070da233ecef3716041474dc17b33fa3692c962c48af
ironic-machine-os-downloader git 81fe2974 sha256:ed98e86bc9a9e7a7781835a3bf6936b0c6d781d646a73f5dedf018b177c1ba94
ironic-static-ip-manager git 45a1c542 sha256:c4a8f357607cc09df578eed17adeb4a194e29a99e1bb96135c6cdea5d16c189f
k8s-prometheus-adapter git 4052b317 sha256:0e251b370923902036e06c36a99d9393d7a4e9bdb97fb924e4a1f80c9b0de986
keepalived-ipfailover git 5d526c41 sha256:7bf77cb05725a098f8f6614a53a6f9230f6c76d6fc794009b9ba4bbb7876772d
kube-rbac-proxy git 4f198b2b sha256:d253bc69fdc967c1fc1543b01deddacd4eefe816cc9ed4541ea3673e35321753
kube-storage-version-migrator git 901a6d22 sha256:ecb2f830cb211728de87c2b166a714bdcb3047be342a73d3d899b3236eef2815
libvirt-machine-controllers git 3b330b72 sha256:9427860888cdc77632a4cb655b8f0951aa208cc323ab027063ae3738d09143bb
machine-os-content sha256:327c6cdf2a9ed63fcac653dd4ba8905d9e40f7a2128b823563388cabdf655bc6
multus-networkpolicy git bfcc6c85 sha256:c7dd765223d1d94477050ba69449132db609d52b8e07c66dc4ca4902479cf62d
multus-route-override-cni git 707dd380 sha256:16e6426a05c744b04ffc20e810a1c48465037f84b7412c27ccb1e5b7b922fa42
must-gather git db7f815b sha256:2c85d28023596717ece3bd221eb7b80dc271afafdd441c11f07e1eb8868a4304
network-metrics-daemon git 234c1388 sha256:b70654bb15424f347a985f8e973171e9ff3667d069eaa1535ba02233682c7cc8
network-tools git bcfec9c5 sha256:93dcc8c8f3488b2192713b2babfeb139c91085b93897a8046957ec93d438b19f
oauth-proxy git 799d414b sha256:65234696ad55f1c997665762491e05c2137898dcd595180cc5337e268bc5fc3c
oauth-server git 245b95f8 sha256:73db334e251ce085c1bdac76a793cf244d340ef6ba7058f7ca5ba77566c058df
oc-mirror git 71ca0a1a sha256:72e40001f8e10b73c3e8a68096f28a482b9e96dfad1172a3d496303cf1bba811
openshift-controller-manager git 2c2d50db sha256:91a53833b4bd4cbad006cd0b249dc31784d00d342a209b192c63e08f86b99630
openshift-state-metrics git e5c50aae sha256:aa241200fb660ba3a61b91d310ffd6119ec521335d373591dcc522b666facab0
openstack-machine-api-provider git 2401f74d sha256:9b289fca65a000b4e5f6313fb27f93e755fa9d60894e2733f79cbd76b95cf4bc
operator-marketplace git 80b92ecf sha256:8478a14170786045bad82111b5761ec3f3a6e8457026e803793f3870e6d133d3
ovirt-csi-driver-operator git 573ac478 sha256:f13cf6505b0b49e2090820c14aa46f2a331179c22feca9306fe02c95879b5dc9
ovirt-machine-controllers git 35ce9aaf sha256:34da3f437dc02ecc351880ba60b93312f4a9b221fd8894fdec39d934cefb9ac7
powervs-machine-controllers git c1d68e7b sha256:9be09dd0ae8cb3c61baf6a27f63e9769af7144757dc4fb0f57afbd11334dbaac
prom-label-proxy git 5f4c8992 sha256:65bf312988a29aff26a6205ff45a7f60effb2c4d359dd9a50b1fe946b031c7c7
prometheus-alertmanager git 01339596 sha256:68bc0cf91427c41e2859f78424590760ece47a1113953a49664d41df22c47907
prometheus-node-exporter git 0eed3102 sha256:715ca7ad443f1b95d9db40463ba7e404df7cb12edf584475b5b253f7710ff6f8
service-ca-operator git 1611373e sha256:6c80ee7d9e97893321cf2b45aa3c3bf09d20bfa575f7c9b2e6fa50318f8f4281
vsphere-csi-driver git e310f4d3 sha256:73449f60475b3b3e1a471be5b853df35d70642aeb2d950d63b5d3a953ac1e749
vsphere-csi-driver-syncer git e310f4d3 sha256:b002f89ce89efb36ccc9243d0c8fc3f9d7581f1aaaf275385b93b1023deb6e16
vsphere-problem-detector git a11df08a sha256:d8a86583e20a66f0a037744ab049dbebc6f8557e2db3abdbce017d6ebe7d24f3

alibaba-cloud-csi-driver

OCPBUGS-4123: Add explicit pciutils package #19
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #23
Full changelog

aws-ebs-csi-driver

OCPBUGS-1804: UPSTREAM: 1398: Add resolver to handle custom endpoints #210
Full changelog

aws-machine-controllers

Bug 2117557: Fix panic when accessing nil machine annotations map #50
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds #42
Full changelog

azure-disk-csi-driver

Bug 2118392: Update dd table 4.10 #31
Full changelog

azure-disk-csi-driver-operator

Bug 2105304: Increase pod startup timeout in e2e tests #52
Full changelog

azure-file-csi-driver

OCPBUGS-2607: remove “replace” directive in go.mod #20
Full changelog

azure-machine-controllers

OCPBUGS-3165: Update azure instance types cache #38
OCPBUGS-930: Ignore unknown Instance types in accelerated networking check #34
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-5663: CVE-2021-4238: goutils: update for randomness fix #6766
OCPBUGS-2731: OpenStack UPI: Create server group for Computes #6510
OCPBUGS-6697: destroy/gcp: Use min length for destroying disks #6808
OCPBUGS-2743: skip sts credentials check in terraform #6518
OCPBUGS-5112: OpenStack: Force JSON content-type in Swift object listing #6726
OCPBUGS-377: UPI image download govc rate limit failure #6245
OCPBUGS-4160: OpenStack: Force JSON content-type in Swift #6628
OCPBUGS-3743: build: change ppc64le linking mode #6597
Bug 2099604: Remove optional services from permissions check #6507
OCPBUGS-2795: Bump gophercloud #6529
Bug 2101014: Release 4.10 go getter update #6361
OCPBUGS-1737: OpenStack: Lift validation for 14 chars cluster names #6420
OCPBUGS-1936: bump RHCOS 4.10 bootimage metadata #6454
Bug 2107154: Make azure baseDomainResoureGroup optional for private c… #6120
Bug 2112914: Fix validation errors for instance type #6189
Bug 2102363: Dynamic retrieval of GCP Regions for a Project #6059
OCPBUGS-784: Download yq in upi installer containers #6285
Bug 2111258: vsphere installconfig: use full dc path in network validation #6173
OCPBUGS-249: Allow setting bootstrap kubelet ip #6231
Full changelog

baremetal-machine-controllers

Update OWNERS #179
Bug 2099584: Update BMO vendor to v0.0.0-20211102102625-469cc9bf7fee #174
Full changelog

baremetal-operator

Bug 2061794: [4.10] Only update the HFS status on changes #247
Bug 2069638: Use deep copy/equal for host root device hints #221
Bug 2047930: Move from Available to Preparing if HostFirmwareSettings changed #210
Bug 2100996: Uplift kustomize to v4 to remove go-getter dependency #234
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2086969: Delete recently created images when –prune-over-size-limit is used #1146
OCPBUGS-3968: set proper pod security ns labels #1293
Bug 2015119: bump(k8s.io/kubectl) to pick up k/k#110764 #1270
OCPBUGS-1788: oc adm logs: generate proper path for static pods #1246
OCPBUGS-1638: Increase default value of cache TTL to 6 hours #1241
Bug 2116526: oc adm inspect: check a resource exists before its inspection #1227
Bug 2106158: remove klog format and update messages for docker config deprecation #1205
Full changelog

cloud-credential-operator

OCPBUGS-2802: Backport –credentials-requests-dir for ccoctl gcp delete. #507
OCPBUGS-2884: Make ccoctl use regional STS endpoint by default #504
OCPBUGS-2279: Add ccoctl support to create OIDC endpoint with private S3 bucket #501
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
OCPBUGS-2162: Add resolver to handle custom endpoints #67
Full changelog

cluster-autoscaler

OCPBUGS-2546: UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #245
Full changelog

cluster-baremetal-operator

OCPBUGS-1239: do not rely on string “master” to be in BMH names #287
OCPBUGS-1517: [release-4.10] Fix a few papercuts #291
Bug 2101002: Uplift kustomize and BMO to remove go-getter dependency #281
Full changelog

cluster-dns-operator

OCPBUGS-2602: Allow autoscaler to evict DNS pods #350
Full changelog

cluster-etcd-operator

OCPBUGS-5425: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #979
OCPBUGS-2940: revisit defrag controller degradation #961
OCPBUGS-2920: update prometheus alerts #956
OCPBUGS-2800: Add niceness to important etcd processes #953
OCPBUGS-1758: fix cert rotation on IP changes #936
Bug 2116624: etcd-metrics container is flooding logs #906
OCPBUGS-200: Exits with a non-zero code in case Etcd backup fails #907
Bug 2108176: Fix etcd minor upgrade backup #892
Bug 2105249: Add etcd pod liveness and readiness probes #880
Full changelog

cluster-image-registry-operator

OCPBUGS-6972: OpenStack: Add support for Proxy #837
OCPBUGS-5974: swift: Retry connecting to OpenStack #832
add myself to OWNERS #838
Bug 2110957: Add progressing condition for node-ca daemon set #791
OCPBUGS-2107: Enable enableHttpsTrafficOnly for Azure storage account #804
Bug 2110957: Use actualDaemonSet for SetDaemonSetGeneration #799
Bug 2115267: Disable dualstack when it is not available #794
Bug 2110963: Bump aws-sdk-go to 1.44.4 #793
Full changelog

cluster-ingress-operator

OCPBUGS-4494: Update CRLs when they expire #861
BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention #820
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-5345: routes/status resources can leak sensitive data #1421
OCPBUGS-2202: [release-4.10] Wire support for trusted service account issuers #1387
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-466: PodDisruptionBudgetAtLimit should not alert when no app/pods exist #648
Bug 2116983: e2e: Fix test pod disruption budget at limit alert #646
Bug 2114587: add runbook urls to KCM-o alerts #645
Full changelog

cluster-machine-approver

Updating ose-cluster-machine-approver images to be consistent with ART #168
Full changelog

cluster-monitoring-operator

OCPBUGS-5864: grafana: add the Content-Security-Policy header to requests #1866
OCPBUGS-2623: Fix dashboards having container_fs* metrices in queries #1798
OCPBUGS-2037: Bump Thanos to 0.23.2 #1811
OCPBUGS-450: jsonnet: bump dependencies #1802
OCPBUGS-1446: [release-4.10] Use service ca beta annotation #1778
OCPBUGS-1676: Dedicated kubelet ServiceMonitor for prometheus-adapter #1777
OCPBUGS-924: increase alertmanager’s startupProbe failure threshold #1760
OCPBUGS-579: Give precedence to CMO config map proxy config #1751
Bug 2118303: Adds UWM extrenalLabels from Prometheus to ThanosRuler labels #1742
Full changelog

cluster-network-operator

OCPBUGS-6736: Remove nbctl logfile #1587
OCPBUGS-5575: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1682
Bug 2092193: Bump PodDisruptionBudget to v1 #1470
OCPBUGS-4614: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1651
Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression #1646
Bug 2111588: Enable OVS metrics for ovnk #1599
OCPBUGS-1538: Make northd probe interval default to 10 seconds #1563
Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe #1550
Bug 2095111: ovn: fix northd preStop command handling #1477
Bug 2083266: Limit Kuryr pods permissions #1435
Full changelog

cluster-node-tuning-operator

Switch to OS-shipped stalld (#490) #490
e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) #428
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-5345: routes/status resources can leak sensitive data, exclude it from audit #514
Full changelog

cluster-policy-controller

OCPBUGS-5788: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #97
Full changelog

cluster-samples-operator

OCPBUGS-2132: openshift template cakephp-mysql-persistent apiVersion for 4.10 #466
Full changelog

cluster-storage-operator

OCPBUGS-691: [release-4.10] correct sc error messages for ibm and alibaba platforms #314
OCPBUGS-286: HTTPS_PROXY ENV missing in some CSI driver operators #311
Full changelog

cluster-version-operator

OCPBUGS-233: pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #824
OCPBUGS-235: pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #825
Full changelog

configmap-reloader

OCPBUGS-6538: go.mod: update github.com/prometheus/client_golang to v1.11.0 #49
Full changelog

console

OCPBUGS-7787: [4.10.z] Fix kubevirt-console tests #12580
OCPBUGS-6754: Fix for initial showing of topology contents #12486
OCPBUGS-5296: Pan nodes into view if all nodes are not visible on load #12485
OCPBUGS-6690: Fix NPE when displaying CSV with incomplete information #12481
OCPBUGS-5961: add support for version v1beta1 for knativeServing and knativeEventing #12441
OCPBUGS-3485: check that user can patch console operator config in s… #12258
Bug 2105911: Fix create-namespace e2e test with updated 3scale operator #11811
OCPBUGS-3619: Find latest pipeline run without firehose selector #12265
OCPBUGS-3336: Add checks for pods in hpaPodRingLabel #12249
OCPBUGS-2717: Update dependencies to the registry library and devfile parser #12191
OCPBUGS-2781: Fix broken advanced options layout on the add page #12204
OCPBUGS-3161: ‘CatalogSource not found’ in the virtualization #12202
Bug 2072792: Fetch common templates in a different namespace #12163
Bug 2071517: Fix swap usage queries for Top Consumers card in virtualization Overview page #12172
Bug 2090127: Remove nodeSelectorTerms if not defined #12161
Bug 2052469: Filter template list for boot source available #12164
OCPBUGS-2583: attach owner reference to resources created on creating a user to allow garbage collection #12189
OCPBUGS-2894: UI crash when storage class had missing annotation #12220
OCPBUGS-1696: Handle missing BMH for Node gracefully #12129
OCPBUGS-1465: mock call to /api/devfile in e2e #12062
OCPBUGS-2622: Use local test data to mock a devfile registry #12194
OCPBUGS-2523: updates test id for 3scale #12184
Bug 2072790: Regression “Create VM” #12160
OCPBUGS-938: do not show NodesUpdateGroup if there are 0 nodes #12061
Bug 2090127: CNV 20527: Enable boot source select for vm template #12082
Bug 2094074: Remove error on user template with DS #12092
Bug 2054917: Fix template example yaml #12091
Bug 2072790: Select template using also queryParams #12090
OCPBUGS-1759: Show already loaded catalog items after a timeout (3sec) #12106
OCPBUGS-403: fix broken update server link #11974
OCPBUGS-1815: fetch shared resource imagestreams based on labels instance or name #12110
Bug 2107898: Access mode and volume mode with sourceRef will now be taken from default storageclass #11907
OCPBUGS-1828: Fix devfile registry assertion #12112
OCPBUGS-1634: Update registry library dependency to pick up proxy support #12040
Bug 2080389: Link to documentation from the overview page goes to a missing link #11909
OCPBUGS-382: [OSD] ClusterVersion YAML editor should be read only #11922
OCPBUGS-550: Input values in Instantiate Template are disappeared randomly in the developer console #11983
Bug 2077142: Fix Web Terminal availability check to verify operator is installed #11374
Bug 2117642: Backport CI test fix to relase 4.10 #11966
Bug 2117351: fix helm readme bug #11950
Revert “Bug 2100103: Can’t delete rootdisk in customization wizard” #11932
Bug 2114833: Use hostname from provided git url when making git api calls #11924
Bug 2111335: Cannot edit ssh even vm is stopped #11886
Bug 2101412: fix bug where Cluster update modal errors weren’t displa… #11765
Bug 2112910: Fix search redirect #11914
Bug 2100103: Can’t delete rootdisk in customization wizard #11887
Bug 2052444: Unstar RHEL 7 template #11885
Bug 2110536: add z-index to ocs-drawer to make box-shadow visible #11873
Bug 2110938: VM list page crashed #11879
Bug 2063153: Use link to the downstream doc for Sysprep info #11772
Bug 2108193: update icons for eventSource and eventSink #11847
Bug 2053703: Handle blank usernames in error message #11045
Full changelog

console-operator

Bug 2106944: InfrastructureTopology must be driving console affinity rule creation #664
Bug 2078912: Modify the operator display name to match it with the name displayed in operatorhub #651
Full changelog

coredns

OCPBUGS-2902: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #80
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6903: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 #177
OCPBUGS-5012: Sync with upstream release-1.23 #158
Full changelog

docker-builder

OCPBUGS-205: Add support for BUILDAH_QUIET environment variable #310
Full changelog

docker-registry

OCPBUGS-920: Keep OCI image configs when hard prune #344
Bug 2110963: Bump aws-sdk-go to 1.44.4 #340
Full changelog

driver-toolkit

Adding kernel-rpm-macros to the Dockerfile. (#109) #109
Full changelog

etcd

Updating ose-etcd images to be consistent with ART #151
OCPBUGS-5950: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #179
OCPBUGS-3103: Rebase openshift/etcd 4.10 onto v3.5.6 #171
OCPBUGS-2142: Rebase openshift/etcd 4.10 onto 3.5.5 #156
Full changelog

gcp-machine-controllers

OCPBUGS-5291: refactor restartPolicyToBool function #36
Full changelog

grafana

OCPBUGS-4260: bump github.com/crewjam/saml dependency #93
Full changelog

haproxy-router

Bug 2098230: Fix gap in router’s handling of graceful shutdowns. #406
Bug 2096362: HAProxy: enable PROXY protocol for all listeners #405
Full changelog

hyperkube, pod

OCPBUGS-3434: UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines #1415
UPSTREAM: <carry>: Wait for default service account in node authorizer test #1398
Bug 2101326: bump to k8s 1.23.12 #1382
OCPBUGS-1266: UPSTREAM: <carry>: Remove reserved CPUs from default set #1362
Full changelog

hypershift

Use non-strict mode when parsing global config #1619
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-1488: Add udev #20
Full changelog

image-customization-controller

OCPBUGS-3999: use host IPC for the agent container #71
OCPBUGS-754: mount /run/udev into the agent container #64
Full changelog

insights-operator

OCPBUGS-1987: do not periodically update Available clusteroperator co… (#718) (#720) #718
helm upgrades and uninstalls backport 4.10 (#663) #663
OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) #659
Full changelog

ironic

OCPBUGS-7163: Increase power_state_change_timeout setting #348
Bug OCPBUGS-6886: Fix setting boot related attributes #347
OCPBUGS-5344: Configure Ironic iLO driver to use web server #343
OCPBUGS-4467: Remove RDO distribution configuration #330
OCPBUGS-5415: Update packages versions with latest available #345
Bug OCPBUGS-3477: Improve resiliency of eTag handling #316
OCPBUGS-2829: Removed ServerName from VirtualHost Directives #307
OCPBUGS-1740: Backport improvements to iDRAC steps to OCP 4.10 #303
OCPBUGS-1225: sync BIOS settings fixes #298
Full changelog

ironic-agent

OCPBUGS-7533: make coreos-installer output available in the logs #68
OCPBUGS-1232: Include Fix for discovering bond interfaces #63
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-7238: Enable Websocket support #1587
OCPBUGS-7052: Sync jenkins version and plugins with ma… #1582
OCPBUGS-4095: Required Plugin workflow-multibranch #1569
OCPBUGS-6645: Handle routes properly in s2i/run #1562
OCPBUGS-4095: Various CVEs September/2022 #1547
OCPBUGS-900: Bump openshift login plugin to 1.0.29 #1561
OCPBUGS-912: Add maven plugin dependency in base plugins #1530
OCPBUGS-3697: [release-4.10] Update OWNERS #1521
[release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 #1496
OCPBUGS-724: Update blueocean-autofavorite to 1.2.5 #1478
OCPBUGS-2943: Force git-server to an earlier version #1509
OCPBUGS-2185: Bump Jenkins version to 2.361.1 #1499
OCPBUGS-1440: fix install plugins script #1484
OCPBUGS-1037: Install glibc language package to remove setLocale warning #1480
OCPBUGS-473: CVE mitigations #1479
OCPBUGS-713: Add user coreydaley to approvers list #1477
OCPBUGS-400: Revert xmlstarlet usage #1469
Full changelog

kube-proxy, sdn

OCPBUGS-6911: Add node egress IP assignment resync #501
OCPBUGS-2106: fix network policy egress #465
Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 #475
OCPBUGS-3996: egressip: Continue to process other nodes if a node is not ready #472
OCPBUGS-647: Fix DNS endpoint hack to prefer local instead of forcing it #467
OCPBUGS-647: Fix OCP hack to prefer local DNS endpoints #457
OCPBUGS-255: setup network policy rules during pod creation to fix postStart hook #455
Full changelog

kube-state-metrics

OCPBUGS-4086: cherry-pick, do not expose ingress path metric when service is nil #86
OCPBUGS-2196: internal/store: fix metrics slice length #79
Bug 2078835: internal/store: fix potential panic in pod store #70
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-941: Fix unbound router_id variable while creating event #688
Full changelog

machine-api-operator

Updating ose-machine-api-operator images to be consistent with ART #1103
OCPBUGS-957: Change “create” sequence with powering on the vm after clone #1065
Bug 2109124: Add DescribeRegions permission for aws controller #1046
Full changelog

machine-config-operator

OCPBUGS-4830: daemon: gate done state on uncordon completion #3278
OCPBUGS-6702: controller: don’t render new MC until base MCs update #3517
OCPBUGS-5831: Do not allow empty system reserved values #3487
OCPBUGS-4810: Sync controllerconfig anyway if daemon sync fails #3454
OCPBUGS-4136: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3436
OCPBUGS-4134: Avoid NM managing patch port between br-int and br-ex #3435
OCPBUGS-3500: Add ephemeral storage to kubelet system reserved args #3408
Bug 2069754: [on-prem] Add NetworkManager reload to resolv-prepender #3041
OCPBUGS-2973: drop doc overlaysize default #3395
OCPBUGS-2070: Make sure there is a search domain in resolv.conf #3366
OCPBUGS-642: Fix .ssh directory not owned by core when created by Machine Config Daemon #3315
Bug 2118609: Fix problem with retaining data in string array in piped while loop #3289
Bug 2118607: configure-ovs: clone inactive autoconnect slaves #3288
Full changelog

machine-os-images

OCPBUGS-960: Update rhcos release browser url #24
Full changelog

multus-admission-controller

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #55
Full changelog

multus-cni

Bug 2071800: Remove error handling for getPod to force to proceed cmdDel [backport 4.10] #132
OCPBUGS-2448: Fix missing device-info in networks-status annotation for chained plugins #137
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-3943: Excluded ranges bug (#282) #105
OCPBUGS-1659: ip-reconciler: Add all non default interfaces to Pod IP list #98
Full changelog

network-interface-bond-cni

Bug 2116642: Backport “mac duplicates” #42
Full changelog

oauth-apiserver

OCPBUGS-2553: bump kube to 1.23.12 to fix group sync #85
Full changelog

openshift-apiserver

OCPBUGS-4604: [release-4.10] bump to kube 1.23.12 #323
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4717: Add SecretHashAnnotation to node service #104
Full changelog

openstack-machine-controllers

OCPBUGS-6596: Address CVE-2022-41717 #251
OCPBUGS-2628: Ensure network defs without subnet follow noAllowedAddressPairs #249
OCPBUGS-1951: Apply noAllowedAddressPairs on intended subnets only #245
Bug 1921656: Remove dependence on annotation to allow Server deletion #240
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-6498: Order an operator CR’s status.Component.Refs array (#2880) #432
OCPBUGS-1525: Package Server Manager should enforce expected csv values #387
OCPBUGS-5294: backport cert rotation fix #428
OCPBUGS-4799: Fix label key truncation for subscription annotations (#2731) #421
OCPBUGS-4128: concurrent write bug fix #415
OCPBUGS-2898: [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) #389
OCPBUGS-1323: Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes #392
OCPBUGS-1087: Stop corrupting resolver cache. #385
Bug 2115874: fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #348
Bug 2118261: Update containerd version #357
Full changelog

ovirt-csi-driver

OCPBUGS-761: CSI provisioned disks are preallocated #117
OCPBUGS-620: Upgrade go-ovirt-client to 1.0.0 #116
Full changelog

ovn-kubernetes

OCPBUGS-3656: Fixes dualstack clusterIPs for network policy svc handler #1378
OCPBUGS-7012: [release-4.10] Fix Egress FW ACL rules in dualstack mode #1508
OCPBUGS-2013: Validate node subnet annotations against cluster networks #1332
Bug 2092895: update all egress ACLs’ direction to “from-lport” #1148
OCPBUGS-6814: [release-4.10] Ensure loadbalancer cleanup doesn’t fail #1499
OCPBUGS-4882: append instead of overwrite logicalSwitch other-config #1450
OCPBUGS-3615: [4.10] CARRY: client: don’t construct transaction log string when it’s not needed #1375
OCPBUGS-5929: [release-4.10] Fix egress firewall to allow inbound connections in both gw modes #1482
OCPBUGS-5990: egressip: fix test data race accessing podAssignment cache #1480
OCPBUGS-5077: [release-4.10] Fix load balancer health check locking and update #1463
OCPBUGS-5299: Set the node as reachable only when it is being added as an egressip node #1464
OCPBUGS-5040: [release-4.10] Fix hybrid overlay unit tests #1462
OCPBUGS-4864: [release-4.10] Fix address set cleanup: only delete address sets owned by given object #1453
OCPBUGS-4888: [release-4.10] Fixes scenario where deleted + completed pods may leak #1458
OCPBUGS-4839, OCPBUGS-4861: [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1452
Bug 2115872: Fix unit-test failures in 4.10 #1457
OCPBUGS-1568: pods: deleteLogicalPort should not fail when node is gone #1423
OCPBUGS-3778: [release-4.10] Netpol races partial fixes #1434
OCPBUGS-4598: Bumps libovsdb to pick up fixes for optional values #1426
OCPBUGS-3858: Adjust ovs bundle timeout #1385
OCPBUGS-1568: pods: deleteLogicalPort should not fail when ls is gone #1293
Bug 2099843: Add final db check to egress IP test #1357
Bug 2105657: Fix egressIP object deletion if the node is deleted first #1228
OCPBUGS-2660: Add logging verbosity to configuring OVN logs #1326
OCPBUGS-1454: Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) #1269
OCPBUGS-2746: Fixes SNAT-ing Logic for EgressIPs #1336
OCPBUGS-2208: getDefaultGatewayInterfaceByFamily: custom filter for MultiHop #1303
OCPBUGS-2464: Fix the golang image used for unit-tests #1299
OCPBUGS-1024: Dockerfile: bump to 2.16.0-89.3.el8fdp #1271
Bug 2111552: Remove conntrack entries after rules #1219
OCPBUGS-660: [release-4.10] pods: deleteLogicalPort should not fail when port is already gone #1257
Bug 2113861: reconcile-node-lbs #1227
OCPBUGS-174: [release-4.10] Fix race when adding and removing pod with same name #1250
Bug 2070392: Fix egress IP reassignment on cloud #1203
Bug 2111588: [release-4.10] export OVS metrics #1215
Bug 2109442: Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected #1195
Bug 2104454: improve performance of service sync #1173
Full changelog

prometheus

OCPBUGS-3078: Backkport OCPBUGS-1718 to release 4.10 #146
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2108976: pkg/prometheus: fix curl exec probe #196
Full changelog

telemeter

OCPBUGS-6575: update prometheus/client_golang version #446
Full changelog

tests

OCPBUGS-4578: Bond test 4.10 backport #27593
OCPBUGS-2614: Fix s2i ruby test that relys on rack #27479
disruption checking is disabled for prior releases because we lack a good baseline #27472
OCPBUGS-1454: Fixes OVN ACL audit log parsing #27429
Bug 2117301: Skip ErrImagePull for expected failures #27352
Bug 2115862: Skip internet connection test if we use a proxy #27344
Bug 2065028: rearrange test cases #26915
OCPBUGS-374: test: allow -f to match tests for any test suite #27366
Full changelog

thanos

OCPBUGS-2037: Bump 4.10 to 0.23.2 #92
Full changelog

vsphere-cloud-controller-manager

Bug 2106666: Return error when VM’s info returned from VC doesn’t contain IP address #29
OCPBUGS-2065: fix .dockerignore to satisfy OCP specific requirements #27
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5895: Fix vendored ini package #137
OCPBUGS-5895: Backport multi dc support 410 #133
OCPBUGS-5507: Fix sc creation if it is deleted #128
OCPBUGS-3288: set TLS cipher suites in Kube RBAC sidecars #120
OCPBUGS-2282: Add HTTP proxy to syncer container #114
OCPBUGS-376: storageclass should not be created for unsupported vsphere version #105
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github