4.10.59

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.59-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.10, 4.10.11, 4.10.12, 4.10.13, 4.10.14, 4.10.15, 4.10.16, 4.10.17, 4.10.18, 4.10.20, 4.10.21, 4.10.24, 4.10.25, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.6, 4.10.7, 4.10.8, 4.10.9, 4.9.25, 4.9.27, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.32, 4.9.33, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.38, 4.9.39, 4.9.40, 4.9.41, 4.9.42, 4.9.43, 4.9.44, 4.9.45, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.50, 4.9.51, 4.9.52, 4.9.53, 4.9.54, 4.9.55, 4.9.56

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.23

Created: 2023-04-26 08:28:18 +0000 UTC

Image Digest: sha256:0a737fac208f55a5d031b58adfb76fdafa7d129ee86552745fe3ff8de29c5ebc

Release 4.10.59 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-04-25-131025

Components

Kubernetes upgraded from 1.23.5 to 1.23.17
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202207140725-0 to 410.84.202304250854-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:4dc000ba92604762ab22b73823c8b17cfc10cb561ed903903f106fdda450f66b
alibaba-disk-csi-driver-operator git f0d69663 sha256:51eac86a62ad3d8c22f7d1e7c947f7f3a71fa5e3e0b46d81b9fd6f8384af6f84
aws-cloud-controller-manager git d85867fe sha256:c9aa88f51cb7250be0827ff083896b3ddb74ca85f92488f9e1479c0231d9f393
aws-ebs-csi-driver-operator git c2e6dc19 sha256:cc3b68b0b116bf53c0c0af9247a16743d13e701f969790f93cdda9f276297e6b
aws-pod-identity-webhook git 7f9eb87a sha256:83c248be560329ea1a031087ea106fdbc649ea26fc9372acc37eecb015907c6f
azure-file-csi-driver-operator git 3807eb37 sha256:00e4f5e6c244fef21181c712d5ce9f53ed1eef286ef2679177a3d4b079e45ebb
baremetal-runtimecfg git 40c11f72 sha256:73b96041b7a3304d31f45b7ca7d2562cda28080e459f511b747f9888945d5e5c
cluster-autoscaler-operator git 8bcdcccb sha256:a36743993f45648dfece5e9db0c8336866e534f495eec5e2397abd7e6ae55499
cluster-bootstrap git f22d1c60 sha256:bb8d80a93e900244ddaa654a692f2250f24c514b08c1f8572270b21af4a1427e
cluster-config-operator git 0840c6f2 sha256:939156c5a49e44071e9ba926e2adb7f0d8eaf2c69b30a85487d03d5c27a89760
cluster-csi-snapshot-controller-operator git ace18623 sha256:38b43c8dbce1dd56dee59e2c22abfc7a51a8355980a7e34bd3d7b9791ebbe815
cluster-kube-storage-version-migrator-operator git 7e1f5684 sha256:233d07d805f00acb8dd71823e4850b2a576dd3ebbb2a5e634533c9d04b632700
cluster-openshift-controller-manager-operator git b8b65d15 sha256:5a842b4e50705ec5e804145d3b274bee1742b92b4013b2149dbeb21f9a5035be
cluster-update-keys git 684f6f42 sha256:de5905ce2e1f76dbcfacff52114b9b2228d684455830a07f318a6bdc6da30880
csi-driver-shared-resource git d06ff18b sha256:e043a6943d49a46f50a58715915de7865ccc9ef431923d1bd8f76d51341361ab
csi-driver-shared-resource-operator git 662615b3 sha256:a0f3a9d3903d6f3bac0e87f5ca795dc020367ebfbff5f3a3d93f327a6a0aa66c
csi-external-attacher git 27e71f2b sha256:0fbc44e8fe564425fe18af81d24d65dec4690614dbba2c9b5bb37f88aef9ed53
csi-external-provisioner git 31de1e19 sha256:6234230e8d33fe612990313c6daefee4e70cfb3152235f13149bfa52a5011c67
csi-external-resizer git e5934091 sha256:c7ce8ab729dd845d492ac0f00847ce306846125ff01ce305099c788101bfaa27
csi-external-snapshotter git fe4a0a2f sha256:a497ab039f6e482c6b0bba51538e97e27388f446ee0264d15a03df521c52b14a
csi-livenessprobe git 8c1a5bca sha256:886ac3914cebbe13a386905fc2d9fde83019f93fae705413cf5b2a5490353f5d
csi-node-driver-registrar git bb0bd823 sha256:ba7c50bf5a82d90f63c9ecc6f903dd5a7e39193d5dd4ce8f3bdbfe4860162efe
csi-snapshot-controller git fe4a0a2f sha256:c7c37d4647a333a1909db6a32a91d379aa51b43283150dd0f77c1fc818b9c1ef
csi-snapshot-validation-webhook git fe4a0a2f sha256:b2ef8c73749945267be542f5d08387983645dc078296fcc236425958a5e2b857
egress-router-cni git 5c56bc8a sha256:b94aa45c8d908a7d1e3a5ca208b35916647c87a7209039ddd74f713f68ea2c3f
gcp-cloud-controller-manager git 4dc728d0 sha256:6eda2ead073af7aac76a99bbc1a7d542305c9cf2d4da5a241409f5211d7ebcf6
gcp-pd-csi-driver git 19e9a57f sha256:97b93c96547c175335de3c0f3284d9409898bab9113ee0052d2d2e8009463ecb
gcp-pd-csi-driver-operator git 0e369dee sha256:960e2b2b846039b6e0b284e44c1f9ac280a48e478eca7a7da97512b3d603c381
ibm-cloud-controller-manager git e3039120 sha256:0c20123692e7ee6ab24eb2d7adf5ea19f9f0da3b89619eb00b4f23e88d093da2
ibm-vpc-block-csi-driver-operator git 28bad53d sha256:985c847e520446427cebd962704068b9adb53ead2575a64c45e63584f85db23c
ibm-vpc-node-label-updater git 7074dfc3 sha256:e0a6defc10f8bbf061b873a318dbd944eacf32580c4efd01955f1a4842ced22c
ibmcloud-machine-controllers git 7449a94f sha256:c2a7af57c046a75e25f7b9240a6a535479d9a93a84494c4b580eeb309fd2ca92
ironic-hardware-inventory-recorder git 62469223 sha256:2da14c0f5b13bfd706105fefecf42a6f806d7f5ce4e206c58d794569b897ff05
ironic-machine-os-downloader git 81fe2974 sha256:4f9f8018b108029f80f25d5b3dd7225a0c63e7c48f035ec6e32a924cebafe230
ironic-static-ip-manager git 45a1c542 sha256:1b21f240e52ad634ef3a618cb026e78a92d3464300f7bd9623c188a4d622b1c6
k8s-prometheus-adapter git 4052b317 sha256:9e96ca98f0b664102e5099a84c901fd69f6176a7d984042d1562dbbd37af8fc5
keepalived-ipfailover git 5d526c41 sha256:21b51515886ca8face38df4c7d1cbcd422190c084877ce558247af63a608125c
kube-rbac-proxy git 4f198b2b sha256:fedb8ea6b7e1067c86f86b399d97d8b1f7ce793deea1cdb03faf68b900f1043d
kube-storage-version-migrator git 901a6d22 sha256:ef5a279458ca4d09eb552bb42bd9f867ad7053265c42baef98d934438d5b79ed
libvirt-machine-controllers git 3b330b72 sha256:3e90323c6bf7fbc204d7fa6df2165fffd9ed52f5c0d6d7bab2a5100324803499
machine-os-content sha256:ea41674620d30467f70352efa33f5335db701dff9a29e590ca9ab83553395780
multus-networkpolicy git bfcc6c85 sha256:4c02ea0d55391267d01364c1e06ef14b2004f4775b674373868fdd5fe2b88930
multus-route-override-cni git 707dd380 sha256:d3ba9d3cbff212837483a72a6108d638f3aa96a7b771b1c5aa7f7ff62e8ababf
network-metrics-daemon git 234c1388 sha256:a987833e2976b9ea9b517700cefc713d887a30d228e26fda5e0e61de91bed8b1
network-tools git bcfec9c5 sha256:2cd146358ea1f5b393b996d0125e0632ec1266804e407d3f7a1f07df39f2aed6
oauth-proxy git 799d414b sha256:e832de8728630d88235cbbe06e13167f6eaa5483bfafefa3b2a0ff151f014eeb
oauth-server git 245b95f8 sha256:694ac55fa8a69ac59eac13eee4da824a18cdb6d849dcd9d6e20f9be644eee838
oc-mirror git 71ca0a1a sha256:1f1a94b532ea33fed98c058117c54d532881b3883d7f588d4609e0357e4c757f
openshift-controller-manager git 2c2d50db sha256:2316518d40c21f2097336a08da4a18408887a87d1f308fdd417873d285baca7c
openshift-state-metrics git e5c50aae sha256:7481d1b260aafaaea21795751ce5d940ffcb491a12d9f40185d508b770272565
openstack-machine-api-provider git 2401f74d sha256:2fa911f971a570c5acdc24668d081207335eaaea0716c09ddbc3c1ecf1ca79fd
operator-marketplace git 80b92ecf sha256:fdede457aa4cc119b91df05089dc1970d6603979381511d0d1125642043ce071
ovirt-csi-driver-operator git 573ac478 sha256:5f47f398367e48916a76d4920bc0f27da435db61e95c72a20316845af8658d9b
ovirt-machine-controllers git 35ce9aaf sha256:3e9844b5af417f7ab22bd35533a60918cc3d7224d4fb5f496d6b0a9583c50822
powervs-machine-controllers git c1d68e7b sha256:668f53de7229434e6d1492b37aaed53d749032f814889e307df82f58ef517471
prom-label-proxy git 5f4c8992 sha256:540612d2355c97cfb2caac39770af43ec8e45e03688abf5fe5ee0fcf4d53a8ec
prometheus-alertmanager git 01339596 sha256:75bae4ff085713f72fa926663ffd69e0a65fd478820456963fe1af8678698e8e
prometheus-node-exporter git 0eed3102 sha256:eb6211205e261fbcd17715b3d643b39cba02c033fec345a127ef3aa03486ee9d
service-ca-operator git 1611373e sha256:9ceff04dac27335bde854697cfab5c5f0f7f64ad4c33083f54df6926bb6b8065
vsphere-csi-driver git e310f4d3 sha256:7019518028d2d9ecb433b54a6fdbc22b57541b88b8ed349d1b1e9d93cf7e3b65
vsphere-csi-driver-syncer git e310f4d3 sha256:b63d10977079dea0b255adec97bd9bb11843155d627c346cb9ab892f8d786225
vsphere-problem-detector git a11df08a sha256:3b228c6825f3d0eb34285084c538801d52fa24dce1db87293e8cc9accd83aaa1

alibaba-cloud-csi-driver

OCPBUGS-4123: Add explicit pciutils package #19
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #23
Full changelog

aws-ebs-csi-driver

OCPBUGS-1804: UPSTREAM: 1398: Add resolver to handle custom endpoints #210
Full changelog

aws-machine-controllers

Bug 2117557: Fix panic when accessing nil machine annotations map #50
Bug 2109124: Validate unknown regions using AWS API #48
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds #42
Full changelog

azure-disk-csi-driver

Bug 2118392: Update dd table 4.10 #31
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-8020: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #72
Bug 2105304: Increase pod startup timeout in e2e tests #52
Full changelog

azure-file-csi-driver

OCPBUGS-2607: remove “replace” directive in go.mod #20
Full changelog

azure-machine-controllers

OCPBUGS-3165: Update azure instance types cache #38
OCPBUGS-930: Ignore unknown Instance types in accelerated networking check #34
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-5663: CVE-2021-4238: goutils: update for randomness fix #6766
OCPBUGS-2731: OpenStack UPI: Create server group for Computes #6510
OCPBUGS-6697: destroy/gcp: Use min length for destroying disks #6808
OCPBUGS-2743: skip sts credentials check in terraform #6518
OCPBUGS-5112: OpenStack: Force JSON content-type in Swift object listing #6726
OCPBUGS-377: UPI image download govc rate limit failure #6245
OCPBUGS-4160: OpenStack: Force JSON content-type in Swift #6628
OCPBUGS-3743: build: change ppc64le linking mode #6597
Bug 2099604: Remove optional services from permissions check #6507
OCPBUGS-2795: Bump gophercloud #6529
Bug 2101014: Release 4.10 go getter update #6361
OCPBUGS-1737: OpenStack: Lift validation for 14 chars cluster names #6420
OCPBUGS-1936: bump RHCOS 4.10 bootimage metadata #6454
Bug 2107154: Make azure baseDomainResoureGroup optional for private c… #6120
Bug 2112914: Fix validation errors for instance type #6189
Bug 2102363: Dynamic retrieval of GCP Regions for a Project #6059
OCPBUGS-784: Download yq in upi installer containers #6285
Bug 2111258: vsphere installconfig: use full dc path in network validation #6173
OCPBUGS-249: Allow setting bootstrap kubelet ip #6231
Bug 2095319: bump RHCOS 4.10 bootimage metadata #6095
Full changelog

baremetal-machine-controllers

Update OWNERS #179
Bug 2099584: Update BMO vendor to v0.0.0-20211102102625-469cc9bf7fee #174
Full changelog

baremetal-operator

OCPBUGS-11686: allow namespace to continue with terminating when deprovisioning at t… #263
Bug 2061794: [4.10] Only update the HFS status on changes #247
Bug 2069638: Use deep copy/equal for host root device hints #221
Bug 2047930: Move from Available to Preparing if HostFirmwareSettings changed #210
Bug 2100996: Uplift kustomize to v4 to remove go-getter dependency #234
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-10750: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1379
OCPBUGS-10777: bump repo sclorg/s2i-ruby-container location for newapp test #1383
Bug 2086969: Delete recently created images when –prune-over-size-limit is used #1146
OCPBUGS-3968: set proper pod security ns labels #1293
Bug 2015119: bump(k8s.io/kubectl) to pick up k/k#110764 #1270
OCPBUGS-1788: oc adm logs: generate proper path for static pods #1246
OCPBUGS-1638: Increase default value of cache TTL to 6 hours #1241
Bug 2116526: oc adm inspect: check a resource exists before its inspection #1227
Bug 2106158: remove klog format and update messages for docker config deprecation #1205
Full changelog

cloud-credential-operator

OCPBUGS-11717: ccoctl: Enable public anon read access to default OIDC S3 bucket #531
OCPBUGS-2802: Backport –credentials-requests-dir for ccoctl gcp delete. #507
OCPBUGS-2884: Make ccoctl use regional STS endpoint by default #504
OCPBUGS-2279: Add ccoctl support to create OIDC endpoint with private S3 bucket #501
Bug 2107276: Make ccoctl work with credentials fetched from gcloud cli defaults #479
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
OCPBUGS-2162: Add resolver to handle custom endpoints #67
Full changelog

cluster-authentication-operator

Bug 2084054: only ever include certificates in the oauth-serving-cert CM #577
Full changelog

cluster-autoscaler

OCPBUGS-2546: UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #245
Bug 2105110: Have VPA ignore phantom containers named “POD” #236
Full changelog

cluster-baremetal-operator

OCPBUGS-3997: add a workaround for a NetworkManager issue #308
OCPBUGS-1239: do not rely on string “master” to be in BMH names #287
OCPBUGS-1517: [release-4.10] Fix a few papercuts #291
Bug 2101002: Uplift kustomize and BMO to remove go-getter dependency #281
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-6039: Try to limit groups for the REST mapper discovery #229
Full changelog

cluster-dns-operator

OCPBUGS-2602: Allow autoscaler to evict DNS pods #350
Full changelog

cluster-etcd-operator

OCPBUGS-10233: increase live/ready timeout and failure thresholds #1026
OCPBUGS-7741: fail early on missing node status envs #1008
OCPBUGS-7827: set default timeouts in etcdcli #1010
OCPBUGS-5425: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #979
OCPBUGS-2940: revisit defrag controller degradation #961
OCPBUGS-2920: update prometheus alerts #956
OCPBUGS-2800: Add niceness to important etcd processes #953
OCPBUGS-1758: fix cert rotation on IP changes #936
Bug 2116624: etcd-metrics container is flooding logs #906
OCPBUGS-200: Exits with a non-zero code in case Etcd backup fails #907
Bug 2108176: Fix etcd minor upgrade backup #892
Bug 2105249: Add etcd pod liveness and readiness probes #880
Full changelog

cluster-image-registry-operator

OCPBUGS-6972: OpenStack: Add support for Proxy #837
OCPBUGS-5974: swift: Retry connecting to OpenStack #832
add myself to OWNERS #838
Bug 2110957: Add progressing condition for node-ca daemon set #791
OCPBUGS-2107: Enable enableHttpsTrafficOnly for Azure storage account #804
Bug 2110957: Use actualDaemonSet for SetDaemonSetGeneration #799
Bug 2115267: Disable dualstack when it is not available #794
Bug 2110963: Bump aws-sdk-go to 1.44.4 #793
Full changelog

cluster-ingress-operator

OCPBUGS-4494: Update CRLs when they expire #861
BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention #820
Bug 2079034: Add allowPrivilegeEscalation to the router container #748
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly #1451
OCPBUGS-5345: routes/status resources can leak sensitive data #1421
OCPBUGS-2202: [release-4.10] Wire support for trusted service account issuers #1387
Bug 2060058: superfluous apirequestcount entries in audit log #1327
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly 4.10 #704
OCPBUGS-466: PodDisruptionBudgetAtLimit should not alert when no app/pods exist #648
Bug 2116983: e2e: Fix test pod disruption budget at limit alert #646
Bug 2114587: add runbook urls to KCM-o alerts #645
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-8235: Guard controller: set the readiness probe endpoint explicitly #465
Full changelog

cluster-machine-approver

Updating ose-cluster-machine-approver images to be consistent with ART #168
Full changelog

cluster-monitoring-operator

OCPBUGS-11579: jsonnet: Add prometheus container in UWM prometheus asset file #1942
OCPBUGS-10491: Increase startupProbe for prometheus #1920
OCPBUGS-5864: grafana: add the Content-Security-Policy header to requests #1866
OCPBUGS-2623: Fix dashboards having container_fs* metrices in queries #1798
OCPBUGS-2037: Bump Thanos to 0.23.2 #1811
OCPBUGS-450: jsonnet: bump dependencies #1802
OCPBUGS-1446: [release-4.10] Use service ca beta annotation #1778
OCPBUGS-1676: Dedicated kubelet ServiceMonitor for prometheus-adapter #1777
OCPBUGS-924: increase alertmanager’s startupProbe failure threshold #1760
OCPBUGS-579: Give precedence to CMO config map proxy config #1751
Bug 2118303: Adds UWM extrenalLabels from Prometheus to ThanosRuler labels #1742
Bug 2099526: Updates jsonnet dependencies, prom-adapter #1715
Full changelog

cluster-network-operator

OCPBUGS-11828: Kuryr: Update CRD from upstream #1782
OCPBUGS-64: CNI binary copy should account for the possibility of symlinks [backport 4.10] #1617
OCPBUGS-5955: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1687
OCPBUGS-6736: Remove nbctl logfile #1587
OCPBUGS-5575: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1682
Bug 2092193: Bump PodDisruptionBudget to v1 #1470
OCPBUGS-4614: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1651
Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression #1646
Bug 2111588: Enable OVS metrics for ovnk #1599
OCPBUGS-1538: Make northd probe interval default to 10 seconds #1563
Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe #1550
Bug 2095111: ovn: fix northd preStop command handling #1477
Bug 2083266: Limit Kuryr pods permissions #1435
Full changelog

cluster-node-tuning-operator

Switch to OS-shipped stalld (#490) #490
e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) #428
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-5345: routes/status resources can leak sensitive data, exclude it from audit #514
[release 4.10] Bug 2109235: openshift-apiserver pods never going NotReady #501
Full changelog

cluster-policy-controller

OCPBUGS-5788: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #97
Full changelog

cluster-samples-operator

OCPBUGS-2132: openshift template cakephp-mysql-persistent apiVersion for 4.10 #466
Full changelog

cluster-storage-operator

OCPBUGS-691: [release-4.10] correct sc error messages for ibm and alibaba platforms #314
OCPBUGS-286: HTTPS_PROXY ENV missing in some CSI driver operators #311
Bug 2098655: gcp cluster rollback fails due to storage failure #300
Full changelog

cluster-version-operator

OCPBUGS-10814: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #917
OCPBUGS-233: pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #824
OCPBUGS-235: pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #825
Bug 2108292: pkg/cvo: retain initial completed update history entry #798
Full changelog

configmap-reloader

OCPBUGS-6538: go.mod: update github.com/prometheus/client_golang to v1.11.0 #49
Full changelog

console

OCPBUGS-12438: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12533
OCPBUGS-7961: fix broken pipeline secret #12607
OCPBUGS-7478: Add RBAC check on Create a Project link in all-namespaces pages #12566
OCPBUGS-12245: disable operator-install-single-namespace.spec.ts to solve CI issues #12752
OCPBUGS-7657: Editing Pipeline in the ocp console should show correct information #12576
OCPBUGS-7787: [4.10.z] Fix kubevirt-console tests #12580
OCPBUGS-6754: Fix for initial showing of topology contents #12486
OCPBUGS-5296: Pan nodes into view if all nodes are not visible on load #12485
OCPBUGS-6690: Fix NPE when displaying CSV with incomplete information #12481
OCPBUGS-5961: add support for version v1beta1 for knativeServing and knativeEventing #12441
OCPBUGS-3485: check that user can patch console operator config in s… #12258
Bug 2105911: Fix create-namespace e2e test with updated 3scale operator #11811
OCPBUGS-3619: Find latest pipeline run without firehose selector #12265
OCPBUGS-3336: Add checks for pods in hpaPodRingLabel #12249
OCPBUGS-2717: Update dependencies to the registry library and devfile parser #12191
OCPBUGS-2781: Fix broken advanced options layout on the add page #12204
OCPBUGS-3161: ‘CatalogSource not found’ in the virtualization #12202
Bug 2072792: Fetch common templates in a different namespace #12163
Bug 2071517: Fix swap usage queries for Top Consumers card in virtualization Overview page #12172
Bug 2090127: Remove nodeSelectorTerms if not defined #12161
Bug 2052469: Filter template list for boot source available #12164
OCPBUGS-2583: attach owner reference to resources created on creating a user to allow garbage collection #12189
OCPBUGS-2894: UI crash when storage class had missing annotation #12220
OCPBUGS-1696: Handle missing BMH for Node gracefully #12129
OCPBUGS-1465: mock call to /api/devfile in e2e #12062
OCPBUGS-2622: Use local test data to mock a devfile registry #12194
OCPBUGS-2523: updates test id for 3scale #12184
Bug 2072790: Regression “Create VM” #12160
OCPBUGS-938: do not show NodesUpdateGroup if there are 0 nodes #12061
Bug 2090127: CNV 20527: Enable boot source select for vm template #12082
Bug 2094074: Remove error on user template with DS #12092
Bug 2054917: Fix template example yaml #12091
Bug 2072790: Select template using also queryParams #12090
OCPBUGS-1759: Show already loaded catalog items after a timeout (3sec) #12106
OCPBUGS-403: fix broken update server link #11974
OCPBUGS-1815: fetch shared resource imagestreams based on labels instance or name #12110
Bug 2107898: Access mode and volume mode with sourceRef will now be taken from default storageclass #11907
OCPBUGS-1828: Fix devfile registry assertion #12112
OCPBUGS-1634: Update registry library dependency to pick up proxy support #12040
Bug 2080389: Link to documentation from the overview page goes to a missing link #11909
OCPBUGS-382: [OSD] ClusterVersion YAML editor should be read only #11922
OCPBUGS-550: Input values in Instantiate Template are disappeared randomly in the developer console #11983
Bug 2077142: Fix Web Terminal availability check to verify operator is installed #11374
Bug 2117642: Backport CI test fix to relase 4.10 #11966
Bug 2117351: fix helm readme bug #11950
Revert “Bug 2100103: Can’t delete rootdisk in customization wizard” #11932
Bug 2114833: Use hostname from provided git url when making git api calls #11924
Bug 2111335: Cannot edit ssh even vm is stopped #11886
Bug 2101412: fix bug where Cluster update modal errors weren’t displa… #11765
Bug 2112910: Fix search redirect #11914
Bug 2100103: Can’t delete rootdisk in customization wizard #11887
Bug 2052444: Unstar RHEL 7 template #11885
Bug 2110536: add z-index to ocs-drawer to make box-shadow visible #11873
Bug 2110938: VM list page crashed #11879
Bug 2063153: Use link to the downstream doc for Sysprep info #11772
Bug 2108193: update icons for eventSource and eventSink #11847
Bug 2053703: Handle blank usernames in error message #11045
Bug 2109225: Remove modelsLoaded conditional rendering from ModelStatusBox #11857
Bug 2106385: Fix CronJob resource version to batch/v1 #11820
Bug 2106385: redirect v1beta1 CronJobs #11819
Bug 2095217: VM SSH command generated by UI points at api VIP #11779
[release 4.10] Bug 2094584: Cant create vm with sysprep #11775
Bug 2100974: Restore spacing between/below modal body content #11763
Bug 2092832: Check if spec is available in MCP details page #11629
Bug 2084629: Add params prop to HorizontalNav component #11488
Full changelog

console-operator

Bug 2106944: InfrastructureTopology must be driving console affinity rule creation #664
Bug 2078912: Modify the operator display name to match it with the name displayed in operatorhub #651
Full changelog

container-networking-plugins

Bug 2103175: Sysctl IFNAME [backport 4.10] #63
Full changelog

coredns

OCPBUGS-2902: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #80
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6903: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 #177
OCPBUGS-5012: Sync with upstream release-1.23 #158
Full changelog

csi-driver-manila-operator

OCPBUGS-10722: Bump go.mongodb.org/mongo-driver to v1.5.1 #178
OCPBUGS-7796: Address CVE-2022-41717 #169
Bug 2091649: SWEET32: Improve TLS configuration for Kube RBAC Proxy #150
Full changelog

csi-driver-nfs

OCPBUGS-10554: Bump go.mongodb.org/mongo-driver to v1.5.1 #114
Full changelog

docker-builder

OCPBUGS-205: Add support for BUILDAH_QUIET environment variable #310
Full changelog

docker-registry

OCPBUGS-920: Keep OCI image configs when hard prune #344
Bug 2110963: Bump aws-sdk-go to 1.44.4 #340
Full changelog

driver-toolkit

Adding kernel-rpm-macros to the Dockerfile. (#109) #109
Full changelog

etcd

Update owners #187
Updating ose-etcd images to be consistent with ART #151
OCPBUGS-5950: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #179
OCPBUGS-3103: Rebase openshift/etcd 4.10 onto v3.5.6 #171
OCPBUGS-2142: Rebase openshift/etcd 4.10 onto 3.5.5 #156
Full changelog

gcp-machine-controllers

OCPBUGS-5291: refactor restartPolicyToBool function #36
Full changelog

grafana

OCPBUGS-4260: bump github.com/crewjam/saml dependency #93
Full changelog

haproxy-router

Bug 2098230: Fix gap in router’s handling of graceful shutdowns. #406
Bug 2096362: HAProxy: enable PROXY protocol for all listeners #405
Full changelog

hyperkube, pod

OCPBUGS-8314: bump to k8s 1.23.17 #1497
OCPBUGS-10244: Fix mounted volume expansion tests #1510
OCPBUGS-3434: UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines #1415
UPSTREAM: <carry>: Wait for default service account in node authorizer test #1398
Bug 2101326: bump to k8s 1.23.12 #1382
OCPBUGS-1266: UPSTREAM: <carry>: Remove reserved CPUs from default set #1362
Full changelog

hypershift

OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2412
Use non-strict mode when parsing global config #1619
adopt existing immutable selectors to prevent errors reconciling components from roks toolkit clusters #1571
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-1488: Add udev #20
Full changelog

image-customization-controller

OCPBUGS-3999: use host IPC for the agent container #71
OCPBUGS-754: mount /run/udev into the agent container #64
Full changelog

insights-operator

OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) #726
OCPBUGS-1987: do not periodically update Available clusteroperator co… (#718) (#720) #718
helm upgrades and uninstalls backport 4.10 (#663) #663
OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) #659
Full changelog

ironic

OCPBUGS-7163: Increase power_state_change_timeout setting #348
Bug OCPBUGS-6886: Fix setting boot related attributes #347
OCPBUGS-5344: Configure Ironic iLO driver to use web server #343
OCPBUGS-4467: Remove RDO distribution configuration #330
OCPBUGS-5415: Update packages versions with latest available #345
Bug OCPBUGS-3477: Improve resiliency of eTag handling #316
OCPBUGS-2829: Removed ServerName from VirtualHost Directives #307
OCPBUGS-1740: Backport improvements to iDRAC steps to OCP 4.10 #303
OCPBUGS-1225: sync BIOS settings fixes #298
Bug 2109125: Upgrade version of ironic package to include fix for ZTP deployment #284
Full changelog

ironic-agent

OCPBUGS-7533: make coreos-installer output available in the logs #68
OCPBUGS-1232: Include Fix for discovering bond interfaces #63
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-11499, OCPBUGS-11500, OCPBUGS-11501: Various issues #1658
OCPBUGS-11238: Fix labels for jenkins-slave-base-rhel8 #1643
OCPBUGS-10012, OCPBUGS-10020, OCPBUGS-6079: Bump Jenkins #1639
OCPBUGS-11236, OCPBUGS-11237, OCPBUGS-11239: Bump Jenkins version to 2.387.1 #1642
OCPBUGS-11240: configuration-as-code bumped to 1569.vb_72405b_80249 #1644
OCPBUGS-6627: Bump script security plugin #1624
OCPBUGS-7238: Enable Websocket support #1587
OCPBUGS-7052: Sync jenkins version and plugins with ma… #1582
OCPBUGS-4095: Required Plugin workflow-multibranch #1569
OCPBUGS-6645: Handle routes properly in s2i/run #1562
OCPBUGS-4095: Various CVEs September/2022 #1547
OCPBUGS-900: Bump openshift login plugin to 1.0.29 #1561
OCPBUGS-912: Add maven plugin dependency in base plugins #1530
OCPBUGS-3697: [release-4.10] Update OWNERS #1521
[release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 #1496
OCPBUGS-724: Update blueocean-autofavorite to 1.2.5 #1478
OCPBUGS-2943: Force git-server to an earlier version #1509
OCPBUGS-2185: Bump Jenkins version to 2.361.1 #1499
OCPBUGS-1440: fix install plugins script #1484
OCPBUGS-1037: Install glibc language package to remove setLocale warning #1480
OCPBUGS-473: CVE mitigations #1479
OCPBUGS-713: Add user coreydaley to approvers list #1477
OCPBUGS-400: Revert xmlstarlet usage #1469
Full changelog

kube-proxy, sdn

OCPBUGS-10912: Fix race in Egress IP Tracker start #524
OCPBUGS-10524: Initialize egress node monitoring struct with previous reachability status #519
OCPBUGS-8091: Handle race condition to setup default vnid flows #512
OCPBUGS-5977: Use pagination and set ResourceVersion to 0 when listing resources #494
OCPBUGS-6911: Add node egress IP assignment resync #501
OCPBUGS-2106: fix network policy egress #465
Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 #475
OCPBUGS-3996: egressip: Continue to process other nodes if a node is not ready #472
OCPBUGS-647: Fix DNS endpoint hack to prefer local instead of forcing it #467
OCPBUGS-647: Fix OCP hack to prefer local DNS endpoints #457
OCPBUGS-255: setup network policy rules during pod creation to fix postStart hook #455
Full changelog

kube-state-metrics

OCPBUGS-4086: cherry-pick, do not expose ingress path metric when service is nil #86
OCPBUGS-2196: internal/store: fix metrics slice length #79
Bug 2078835: internal/store: fix potential panic in pod store #70
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-11828: CNI: Watch for deleted pods #712
Bug OCPBUGS-941: Fix unbound router_id variable while creating event #688
Full changelog

machine-api-operator

OCPBUGS-11327: Fix empty component version #1134
OCPBUGS-8359: Append annotations from machine template spec to the node #1125
Updating ose-machine-api-operator images to be consistent with ART #1103
OCPBUGS-957: Change “create” sequence with powering on the vm after clone #1065
Bug 2109124: Add DescribeRegions permission for aws controller #1046
Full changelog

machine-config-operator

OCPBUGS-10703: configure-ovs: fix mtu-migration cleanup #3622
OCPBUGS-5692: 4.10 - remove goutils from dependency tree #3500
OCPBUGS-4830: daemon: gate done state on uncordon completion #3278
OCPBUGS-6702: controller: don’t render new MC until base MCs update #3517
OCPBUGS-5831: Do not allow empty system reserved values #3487
OCPBUGS-4810: Sync controllerconfig anyway if daemon sync fails #3454
OCPBUGS-4136: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3436
OCPBUGS-4134: Avoid NM managing patch port between br-int and br-ex #3435
OCPBUGS-3500: Add ephemeral storage to kubelet system reserved args #3408
Bug 2069754: [on-prem] Add NetworkManager reload to resolv-prepender #3041
OCPBUGS-2973: drop doc overlaysize default #3395
OCPBUGS-2070: Make sure there is a search domain in resolv.conf #3366
OCPBUGS-642: Fix .ssh directory not owned by core when created by Machine Config Daemon #3315
Bug 2118609: Fix problem with retaining data in string array in piped while loop #3289
Bug 2118607: configure-ovs: clone inactive autoconnect slaves #3288
Bug 2100894: fix MCNameSuffix with kcfg ctrrcfg #3224
Bug 2084187: Avoid kubernetes node port range #3145
Bug 2099686: controller: de-couple FIPS and realtime detection #3201
Bug 2098626: configure-ovs: improve handling of static ip and mac address configuration #3197
Full changelog

machine-os-images

OCPBUGS-960: Update rhcos release browser url #24
Full changelog

multus-admission-controller

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #55
Full changelog

multus-cni

OCPBUGS-11590: suppress uid mismatch error/warning in case of static pod #150
OCPBUGS-8672: SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] #147
Bug 2071800: Remove error handling for getPod to force to proceed cmdDel [backport 4.10] #132
OCPBUGS-2448: Fix missing device-info in networks-status annotation for chained plugins #137
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-3943: Excluded ranges bug (#282) #105
OCPBUGS-1659: ip-reconciler: Add all non default interfaces to Pod IP list #98
Full changelog

must-gather

Bug 2106842: Add timeout to oc cp command to fix must-gather delays when routers are terminating #323
Full changelog

network-interface-bond-cni

Bug 2116642: Backport “mac duplicates” #42
Full changelog

oauth-apiserver

OCPBUGS-2553: bump kube to 1.23.12 to fix group sync #85
Full changelog

openshift-apiserver

OCPBUGS-4341: fix printer panic #337
OCPBUGS-4604: [release-4.10] bump to kube 1.23.12 #323
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4717: Add SecretHashAnnotation to node service #104
Bug 2091649: SWEET32: Improve TLS configuration for Kube RBAC Proxy #89
Full changelog

openstack-machine-controllers

OCPBUGS-6596: Address CVE-2022-41717 #251
OCPBUGS-2628: Ensure network defs without subnet follow noAllowedAddressPairs #249
OCPBUGS-1951: Apply noAllowedAddressPairs on intended subnets only #245
Bug 1921656: Remove dependence on annotation to allow Server deletion #240
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-6498: Order an operator CR’s status.Component.Refs array (#2880) #432
OCPBUGS-1525: Package Server Manager should enforce expected csv values #387
OCPBUGS-5294: backport cert rotation fix #428
OCPBUGS-4799: Fix label key truncation for subscription annotations (#2731) #421
OCPBUGS-4128: concurrent write bug fix #415
OCPBUGS-2898: [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) #389
OCPBUGS-1323: Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes #392
OCPBUGS-1087: Stop corrupting resolver cache. #385
Bug 2115874: fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #348
Bug 2118261: Update containerd version #357
Bug 2106838: remove broken thread-safety (#2697) #340
Full changelog

ovirt-csi-driver

OCPBUGS-761: CSI provisioned disks are preallocated #117
OCPBUGS-620: Upgrade go-ovirt-client to 1.0.0 #116
Full changelog

ovn-kubernetes

OCPBUGS-11453: [release-4.10] Batch potentially big transaction on egress firewall ACLs migration #1641
OCPBUGS-11557: Fix leak in service controller cache #1634
OCPBUGS-11423: [release-4.10] Handle Completed pods deletion #1628
OCPBUGS-4762: [4.10] Dockerfile: bump to OVS 2.17.0-62 #1440
Updating ose-ovn-kubernetes images to be consistent with ART #1615
OCPBUGS-8513: Don’t recreate clusterPGs and clusterRtrPGs unless needed #1562
OCPBUGS-7021, OCPBUGS-7990: Delete stale egress ip snat entries by node #1542
OCPBUGS-6641: Drop in-cluster traffic towards svcCIDR at wrong port #1492
OCPBUGS-3656: Fixes dualstack clusterIPs for network policy svc handler #1378
OCPBUGS-7012: [release-4.10] Fix Egress FW ACL rules in dualstack mode #1508
OCPBUGS-2013: Validate node subnet annotations against cluster networks #1332
Bug 2092895: update all egress ACLs’ direction to “from-lport” #1148
OCPBUGS-6814: [release-4.10] Ensure loadbalancer cleanup doesn’t fail #1499
OCPBUGS-4882: append instead of overwrite logicalSwitch other-config #1450
OCPBUGS-3615: [4.10] CARRY: client: don’t construct transaction log string when it’s not needed #1375
OCPBUGS-5929: [release-4.10] Fix egress firewall to allow inbound connections in both gw modes #1482
OCPBUGS-5990: egressip: fix test data race accessing podAssignment cache #1480
OCPBUGS-5077: [release-4.10] Fix load balancer health check locking and update #1463
OCPBUGS-5299: Set the node as reachable only when it is being added as an egressip node #1464
OCPBUGS-5040: [release-4.10] Fix hybrid overlay unit tests #1462
OCPBUGS-4864: [release-4.10] Fix address set cleanup: only delete address sets owned by given object #1453
OCPBUGS-4888: [release-4.10] Fixes scenario where deleted + completed pods may leak #1458
OCPBUGS-4839, OCPBUGS-4861: [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1452
Bug 2115872: Fix unit-test failures in 4.10 #1457
OCPBUGS-1568: pods: deleteLogicalPort should not fail when node is gone #1423
OCPBUGS-3778: [release-4.10] Netpol races partial fixes #1434
OCPBUGS-4598: Bumps libovsdb to pick up fixes for optional values #1426
OCPBUGS-3858: Adjust ovs bundle timeout #1385
OCPBUGS-1568: pods: deleteLogicalPort should not fail when ls is gone #1293
Bug 2099843: Add final db check to egress IP test #1357
Bug 2105657: Fix egressIP object deletion if the node is deleted first #1228
OCPBUGS-2660: Add logging verbosity to configuring OVN logs #1326
OCPBUGS-1454: Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) #1269
OCPBUGS-2746: Fixes SNAT-ing Logic for EgressIPs #1336
OCPBUGS-2208: getDefaultGatewayInterfaceByFamily: custom filter for MultiHop #1303
OCPBUGS-2464: Fix the golang image used for unit-tests #1299
OCPBUGS-1024: Dockerfile: bump to 2.16.0-89.3.el8fdp #1271
Bug 2111552: Remove conntrack entries after rules #1219
OCPBUGS-660: [release-4.10] pods: deleteLogicalPort should not fail when port is already gone #1257
Bug 2113861: reconcile-node-lbs #1227
OCPBUGS-174: [release-4.10] Fix race when adding and removing pod with same name #1250
Bug 2070392: Fix egress IP reassignment on cloud #1203
Bug 2111588: [release-4.10] export OVS metrics #1215
Bug 2109442: Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected #1195
Bug 2104454: improve performance of service sync #1173
Bug 2105653: egressIP: node retrieval failure is not respected, causes panic #1185
Bug 2105275: Fix egressips for pods recreated with same name #1179
Bug 2107903: Append the SNAT rule in management chain #1201
Bug 2105265: EGW: Clean Stale Conntrack Entries #1191
Full changelog

prometheus

OCPBUGS-3078: Backkport OCPBUGS-1718 to release 4.10 #146
Full changelog

prometheus-config-reloader, prometheus-operator

OCPBUGS-7795: Fixes ThanoRuler StatefulSet re-creation bug #219
Bug 2108976: pkg/prometheus: fix curl exec probe #196
Full changelog

telemeter

OCPBUGS-6575: update prometheus/client_golang version #446
Full changelog

tests

OCPBUGS-11874: Add Kuryr exception to “pods should successfully create sandboxes” test #27878
OCPBUGS-11560, OCPBUGS-11629: flake Pods Extended Pod Container lifecycle evicted pods #27872
OCPBUGS-10244: Bump(openshift/kubernetes): to get fix for resizing flake #27800
OCPBUGS-4578: Bond test 4.10 backport #27593
OCPBUGS-2614: Fix s2i ruby test that relys on rack #27479
disruption checking is disabled for prior releases because we lack a good baseline #27472
OCPBUGS-1454: Fixes OVN ACL audit log parsing #27429
Bug 2117301: Skip ErrImagePull for expected failures #27352
Bug 2115862: Skip internet connection test if we use a proxy #27344
Bug 2065028: rearrange test cases #26915
OCPBUGS-374: test: allow -f to match tests for any test suite #27366
Full changelog

thanos

OCPBUGS-2037: Bump 4.10 to 0.23.2 #92
Full changelog

vsphere-cloud-controller-manager

Bug 2106666: Return error when VM’s info returned from VC doesn’t contain IP address #29
OCPBUGS-2065: fix .dockerignore to satisfy OCP specific requirements #27
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5895: Fix vendored ini package #137
OCPBUGS-5895: Backport multi dc support 410 #133
OCPBUGS-5507: Fix sc creation if it is deleted #128
OCPBUGS-3288: set TLS cipher suites in Kube RBAC sidecars #120
OCPBUGS-2282: Add HTTP proxy to syncer container #114
OCPBUGS-376: storageclass should not be created for unsupported vsphere version #105
Bug 2108003: 4.10: Don’t block upgrades when another CSI driver is found #99
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github