4.10.60

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.60-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Pending periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.10, 4.10.11, 4.10.14, 4.10.15, 4.10.16, 4.10.17, 4.10.18, 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.6, 4.10.7, 4.10.8, 4.10.9, 4.9.23, 4.9.24, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.29, 4.9.31, 4.9.32, 4.9.33, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.38, 4.9.39, 4.9.41, 4.9.42, 4.9.43, 4.9.44, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.50, 4.9.51, 4.9.52, 4.9.53, 4.9.54, 4.9.55, 4.9.56

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.29

Created: 2023-05-18 06:51:22 +0000 UTC

Image Digest: sha256:d6efa3107f28b3eab7d44034e52a94296027ecf5d84826bc69ad6f91f006186c

Release 4.10.60 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-05-17-194951

Components

Kubernetes upgraded from 1.23.5 to 1.23.17
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202208161501-0 to 410.84.202305112108-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:0e6126a19a792eaad076d6592542eb2a9f379f4e6086c753bba46ba3354e8c34
alibaba-disk-csi-driver-operator git f0d69663 sha256:04cdc6de3417a00ec744912eb311d76c0fc670a09d264c6e11ac9d666b270c43
aws-cloud-controller-manager git d85867fe sha256:7eb6754c0a4511325165d3923f85e367894d80d5ea0c0b6a6376077af41323bd
aws-ebs-csi-driver-operator git c2e6dc19 sha256:a49ead8037f4fbf26cc231fe83f122a86acdd3a6e28939cde3b5e1f5d1b82945
aws-pod-identity-webhook git 7f9eb87a sha256:95dd9fe2148b93c7086956a2581fc899d8cce4648982dd41c95acbe2a2f4fb8e
azure-disk-csi-driver git c7c7188d sha256:fe71744b6707a664010d30c17a546403bfe324aac82cd29ecb0e2d37c5bed0d8
azure-file-csi-driver-operator git 3807eb37 sha256:ac22648e328bf5666e387531d7540f885f3be25274ccbdfb5b4b2198d7c35e88
baremetal-runtimecfg git 40c11f72 sha256:91a168dd8a58b869870b3025c1622858d71b8bdf74294cc385da073cdb64028d
cluster-authentication-operator git 6a015c71 sha256:1fcb494eceff21c762790a68142052b9d2684ecc5f6901afa735ed3972d0c746
cluster-autoscaler-operator git 8bcdcccb sha256:9476f262c3e8c354b1291d3f32362b9235f1ca379f0e5c70d1ccd0b682df826c
cluster-bootstrap git f22d1c60 sha256:63a5d2fc7c151194212248a35786f5dcac72fc8a463440198098cbb5c621a06f
cluster-config-operator git 0840c6f2 sha256:0f0d8af5995a2563afd56a350475f97c632ebf44030a0a485df4fd0a34045fa2
cluster-csi-snapshot-controller-operator git ace18623 sha256:c5bb9714d09421871d39e9ecb12230ef526b99478c254e816954b7b5c688e9de
cluster-kube-storage-version-migrator-operator git 7e1f5684 sha256:30460bd787f96dc49517e975b8920d7e8e4c6df41d0d9402cd2e97e7eec3c146
cluster-machine-approver git 95404c4e sha256:a455648bc6cf034bf014c2e47705bd824e65182efadf2f27a396e38fdd031f47
cluster-openshift-controller-manager-operator git b8b65d15 sha256:4bcab16996046213973f53b42dc1e2f4c42ef4217804ce7d80d6f277fed834bf
cluster-update-keys git 684f6f42 sha256:efd367f5c4a146a3c940494e3776e2b7ac82817270110efc83282e26d5ba4c46
container-networking-plugins git 3123ef8b sha256:cd171e4e7c9d78da628b936befe305d9d1b6d0266ef41fc858ff3c0edd6e011e
csi-driver-shared-resource git d06ff18b sha256:f2dddd21b262136fecb7d3d8a0815ed8b0e611701b088543b00df622721d5192
csi-driver-shared-resource-operator git 662615b3 sha256:83fbf2403a528bf4691c32a858992c13a177fd23a7b71c2870b1fbd558da075d
csi-external-attacher git 27e71f2b sha256:d683b02252401f051c6f27d3d91af2ef815206c643ca811cc4c911c7c9f03099
csi-external-provisioner git 31de1e19 sha256:8879c38168c99d1960c891217e4b9b5af20b82961fc219339f813c93bc6948c1
csi-external-resizer git e5934091 sha256:021989e7c99bae40f9fbf70ae4bbb2dd6e88027ab7d957c382c74096cfbd3438
csi-external-snapshotter git fe4a0a2f sha256:f625cb6af5bcf0f5017f122dbe292e144644137171062aa04d66e44854ef33a6
csi-livenessprobe git 8c1a5bca sha256:3d26e9212bb9e51a15924f16e0d8e00a2a953b2d0adb1691f0d4f29449897904
csi-node-driver-registrar git bb0bd823 sha256:0c8e4a5293f905031f1a71a3522f35523046d544d8e0df36d81f41531d1eb6db
csi-snapshot-controller git fe4a0a2f sha256:371542dd7f45e3ede19ffb6619d7b292244257657c194bbaee9f0f7fdf5791c1
csi-snapshot-validation-webhook git fe4a0a2f sha256:a04f33f58d05dcd81252bebff7a2bc47b0762c692cb0a87c6faa0fa57ce4f54f
docker-builder git 3b7352af sha256:08088ccb2ce173361fc329103f7041c373d08f03e0510f9e82e4e495c3866689
egress-router-cni git 5c56bc8a sha256:7382c0f07c104f0335cbdba83a0f60048cf0812a0ba100add2313963b2d9b5b1
gcp-cloud-controller-manager git 4dc728d0 sha256:c961d7819ff6089f1fffe2282c6673d9500e02d68c3dcaaa66815282caee3100
gcp-pd-csi-driver git 19e9a57f sha256:47e246a63ac2bac26c67585f0d76b5149c241e0df104e15634b57022e8d92141
gcp-pd-csi-driver-operator git 0e369dee sha256:3440a23b5926a7a6d99876016c2b9e9ff3fbeb7dedb08a214021bf20ed784d7d
ibm-cloud-controller-manager git e3039120 sha256:86f68a940241900df0e20456daefdf1d87c6924323a22b2448bc4aab54b9b5f1
ibm-vpc-block-csi-driver-operator git 28bad53d sha256:8151a55472245fd20b23301d4ddc4f6e60f1715c1300bc39f90b7b92d31b74ad
ibm-vpc-node-label-updater git 7074dfc3 sha256:e1d5449d1599a0c180d6406c604a05e517649ca7d68d55d494fa5a96564103a1
ibmcloud-machine-controllers git 7449a94f sha256:a2e986609df967c262712cf2e2c995f835569240a6273d78ad6e4dbd89973e77
ironic-hardware-inventory-recorder git 62469223 sha256:569619b0a57151b813dbd53b5d906d1289b1f2d765f27d08a5bef8c6416f9e3f
ironic-machine-os-downloader git 81fe2974 sha256:78b36c00ae16ef8d2ba7c16ca96fbe1f84b12d7d67d7f0bbadb5fdf64301eb8b
ironic-static-ip-manager git 45a1c542 sha256:8f898620a8aa671ea6925f01987a6fd5f41fa14560ec8ab0591cfe48137c3594
k8s-prometheus-adapter git 4052b317 sha256:b7c2a66bd19e8bb9632b2ef94aab872d06951970c8d665f5bb862f7331de1516
keepalived-ipfailover git 5d526c41 sha256:68dd67a23a0ce189e057d095e38df70e84057604852703d049ebfa517c1af00f
kube-rbac-proxy git 4f198b2b sha256:ff63492c6a26ee22acbeca4ee9869b12fde87b3afb2947557e82492a98575adb
kube-storage-version-migrator git 901a6d22 sha256:1b79d2c3516711450ec95ff38c4052eacbb4d2ac4a2534915163bd5d0991b15a
libvirt-machine-controllers git 3b330b72 sha256:6ae9d1a1353923869a3beec5de487e1150d91b356e9ec627606a10d1c06cfec6
machine-os-content sha256:0374e84acfe5ad160d530888745f7cf8fd3bc7fbfcde5583ed3de64982730e9f
multus-networkpolicy git bfcc6c85 sha256:6a7b9036f5d0c461321f5f008059e44eb5a168386c3bca606a2986efde22d643
multus-route-override-cni git 707dd380 sha256:bb3f620b9b224e1349ab2ee898e45fa456b99305b05ed3474de04426df7b74e3
must-gather git db7f815b sha256:6eac618c70508e7c135084b46d87f2a293ed5ea9d4ca616280f0663afb1a3e77
network-interface-bond-cni git 6edc4a73 sha256:2e4f2d2c1e4ced7686ffb178704b761abd8a59b0b19869e9c7f622ef56edff29
network-metrics-daemon git 234c1388 sha256:d9681994ccd3fcfe8012b7a9f0af6d602d9975379792637dc31288d35c316071
network-tools git bcfec9c5 sha256:e2cc15573ba0e996d366257e4cc5ee6de0c5008193c96912f5e20c01822dd0f3
oauth-proxy git 799d414b sha256:4d02af4df33b5486518be22d88a43e82779c6e4019dc6bcfaefc91bf61195d5c
oauth-server git 245b95f8 sha256:4b3adbaca82bbb6adef27804de227d7e261167366f68d73a5f7598538c2cb915
oc-mirror git 71ca0a1a sha256:8e1507b665122d799d4699e475bd3c65c153afc658cabe638636c35631557ed9
openshift-controller-manager git 2c2d50db sha256:aaeaf1394bcb72c876ed5b40a3a450a185c654d8f272f5146b70ceadfe09d733
openshift-state-metrics git e5c50aae sha256:8ece11303ed872adba13c41607276f86ec3e4c0a4788be51c05a7c069428306c
openstack-machine-api-provider git 2401f74d sha256:9dd9c8b88d82529e2a9f90471912fc9616adc31927d9f6a007bdab062db4198a
operator-marketplace git 80b92ecf sha256:9323fb02c892fea0d831407174074e3ae8cf9ffa9ce0a855a8c2fe593c0026d2
ovirt-csi-driver-operator git 573ac478 sha256:4e905fbbe4a0a12ca3aa20d2207137d95cc2f37bb854ec79a7f5070c0c6920c7
ovirt-machine-controllers git 35ce9aaf sha256:1d7f0f47426e069bf706f7f83ca2070d10e6ecee3533caeb967e6f91f5da00ab
powervs-machine-controllers git c1d68e7b sha256:70fbf076caca9492905405269dd0164e58ed6c2dc17e168470ca9ab85004cf0b
prom-label-proxy git 5f4c8992 sha256:8234eb4e8062233579eb6690793e297f344942a4d66ed4f739aebe65289a55c9
prometheus-alertmanager git 01339596 sha256:40a532529bb151f11cc939e80a4d5a98778a6513be32d6924d63bdc1aeb082bb
prometheus-node-exporter git 0eed3102 sha256:63e946fa682bb967f649a11b0f67054c17e0d9db21ff4ff8ed79b7482661ad5b
service-ca-operator git 1611373e sha256:7b187148d957a9ca44e610314d301e773077186694a90d6420bd83dfd6c886a4
vsphere-csi-driver git e310f4d3 sha256:4cc4c6d6d8b5d96644e1ea8ce4bdc63ba7ed21af9d2cd17b04caf2c8db35890e
vsphere-csi-driver-syncer git e310f4d3 sha256:4609da3f4a0db489f621443e295b009cab8eabe53bbb6aeb0ffe1f69d00bbde6
vsphere-problem-detector git a11df08a sha256:8c730385700e7f98195fcd289609b0e67bf1021ff9f0d9d3f96c72944916f62d

alibaba-cloud-csi-driver

OCPBUGS-4123: Add explicit pciutils package #19
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #23
Full changelog

aws-ebs-csi-driver

OCPBUGS-1804: UPSTREAM: 1398: Add resolver to handle custom endpoints #210
Full changelog

aws-machine-controllers

Bug 2117557: Fix panic when accessing nil machine annotations map #50
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds #42
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-8020: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #72
Bug 2105304: Increase pod startup timeout in e2e tests #52
Full changelog

azure-file-csi-driver

OCPBUGS-2607: remove “replace” directive in go.mod #20
Full changelog

azure-machine-controllers

OCPBUGS-3165: Update azure instance types cache #38
OCPBUGS-930: Ignore unknown Instance types in accelerated networking check #34
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-537: vSphere - enable steal time accounting #6261
OCPBUGS-5931: destroy/gcp: Disk names are filtered using kubernetes name format #6972
OCPBUGS-5663: CVE-2021-4238: goutils: update for randomness fix #6766
OCPBUGS-2731: OpenStack UPI: Create server group for Computes #6510
OCPBUGS-6697: destroy/gcp: Use min length for destroying disks #6808
OCPBUGS-2743: skip sts credentials check in terraform #6518
OCPBUGS-5112: OpenStack: Force JSON content-type in Swift object listing #6726
OCPBUGS-377: UPI image download govc rate limit failure #6245
OCPBUGS-4160: OpenStack: Force JSON content-type in Swift #6628
OCPBUGS-3743: build: change ppc64le linking mode #6597
Bug 2099604: Remove optional services from permissions check #6507
OCPBUGS-2795: Bump gophercloud #6529
Bug 2101014: Release 4.10 go getter update #6361
OCPBUGS-1737: OpenStack: Lift validation for 14 chars cluster names #6420
OCPBUGS-1936: bump RHCOS 4.10 bootimage metadata #6454
Bug 2107154: Make azure baseDomainResoureGroup optional for private c… #6120
Bug 2112914: Fix validation errors for instance type #6189
Bug 2102363: Dynamic retrieval of GCP Regions for a Project #6059
OCPBUGS-784: Download yq in upi installer containers #6285
Bug 2111258: vsphere installconfig: use full dc path in network validation #6173
Full changelog

baremetal-machine-controllers

Update OWNERS #179
Full changelog

baremetal-operator

OCPBUGS-11686: allow namespace to continue with terminating when deprovisioning at t… #263
Bug 2061794: [4.10] Only update the HFS status on changes #247
Bug 2069638: Use deep copy/equal for host root device hints #221
Bug 2047930: Move from Available to Preparing if HostFirmwareSettings changed #210
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-10750: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1379
OCPBUGS-10777: bump repo sclorg/s2i-ruby-container location for newapp test #1383
Bug 2086969: Delete recently created images when –prune-over-size-limit is used #1146
OCPBUGS-3968: set proper pod security ns labels #1293
Bug 2015119: bump(k8s.io/kubectl) to pick up k/k#110764 #1270
OCPBUGS-1788: oc adm logs: generate proper path for static pods #1246
OCPBUGS-1638: Increase default value of cache TTL to 6 hours #1241
Bug 2116526: oc adm inspect: check a resource exists before its inspection #1227
Full changelog

cloud-credential-operator

OCPBUGS-11717: ccoctl: Enable public anon read access to default OIDC S3 bucket #531
OCPBUGS-2802: Backport –credentials-requests-dir for ccoctl gcp delete. #507
OCPBUGS-2884: Make ccoctl use regional STS endpoint by default #504
OCPBUGS-2279: Add ccoctl support to create OIDC endpoint with private S3 bucket #501
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
OCPBUGS-2162: Add resolver to handle custom endpoints #67
Full changelog

cluster-autoscaler

OCPBUGS-2546: UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #245
Full changelog

cluster-baremetal-operator

OCPBUGS-3997: add a workaround for a NetworkManager issue #308
OCPBUGS-1239: do not rely on string “master” to be in BMH names #287
OCPBUGS-1517: [release-4.10] Fix a few papercuts #291
Bug 2101002: Uplift kustomize and BMO to remove go-getter dependency #281
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-6039: Try to limit groups for the REST mapper discovery #229
Full changelog

cluster-dns-operator

OCPBUGS-2602: Allow autoscaler to evict DNS pods #350
Full changelog

cluster-etcd-operator

OCPBUGS-10233: increase live/ready timeout and failure thresholds #1026
OCPBUGS-7741: fail early on missing node status envs #1008
OCPBUGS-7827: set default timeouts in etcdcli #1010
OCPBUGS-5425: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #979
OCPBUGS-2940: revisit defrag controller degradation #961
OCPBUGS-2920: update prometheus alerts #956
OCPBUGS-2800: Add niceness to important etcd processes #953
OCPBUGS-1758: fix cert rotation on IP changes #936
Full changelog

cluster-image-registry-operator

OCPBUGS-6972: OpenStack: Add support for Proxy #837
OCPBUGS-5974: swift: Retry connecting to OpenStack #832
add myself to OWNERS #838
Bug 2110957: Add progressing condition for node-ca daemon set #791
OCPBUGS-2107: Enable enableHttpsTrafficOnly for Azure storage account #804
Bug 2110957: Use actualDaemonSet for SetDaemonSetGeneration #799
Full changelog

cluster-ingress-operator

OCPBUGS-4494: Update CRLs when they expire #861
BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention #820
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly #1451
OCPBUGS-5345: routes/status resources can leak sensitive data #1421
OCPBUGS-2202: [release-4.10] Wire support for trusted service account issuers #1387
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly 4.10 #704
OCPBUGS-466: PodDisruptionBudgetAtLimit should not alert when no app/pods exist #648
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-8235: Guard controller: set the readiness probe endpoint explicitly #465
Full changelog

cluster-monitoring-operator

OCPBUGS-11579: jsonnet: Add prometheus container in UWM prometheus asset file #1942
OCPBUGS-10491: Increase startupProbe for prometheus #1920
OCPBUGS-5864: grafana: add the Content-Security-Policy header to requests #1866
OCPBUGS-2623: Fix dashboards having container_fs* metrices in queries #1798
OCPBUGS-2037: Bump Thanos to 0.23.2 #1811
OCPBUGS-450: jsonnet: bump dependencies #1802
OCPBUGS-1446: [release-4.10] Use service ca beta annotation #1778
OCPBUGS-1676: Dedicated kubelet ServiceMonitor for prometheus-adapter #1777
OCPBUGS-924: increase alertmanager’s startupProbe failure threshold #1760
OCPBUGS-579: Give precedence to CMO config map proxy config #1751
Bug 2118303: Adds UWM extrenalLabels from Prometheus to ThanosRuler labels #1742
Full changelog

cluster-network-operator

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #1809
OCPBUGS-12795: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1794
OCPBUGS-11828: Kuryr: Update CRD from upstream #1782
OCPBUGS-64: CNI binary copy should account for the possibility of symlinks [backport 4.10] #1617
OCPBUGS-5955: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1687
OCPBUGS-6736: Remove nbctl logfile #1587
OCPBUGS-5575: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1682
Bug 2092193: Bump PodDisruptionBudget to v1 #1470
OCPBUGS-4614: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1651
Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression #1646
Bug 2111588: Enable OVS metrics for ovnk #1599
OCPBUGS-1538: Make northd probe interval default to 10 seconds #1563
Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe #1550
Full changelog

cluster-node-tuning-operator

Switch to OS-shipped stalld (#490) #490
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-5345: routes/status resources can leak sensitive data, exclude it from audit #514
Full changelog

cluster-policy-controller

OCPBUGS-5788: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #97
Full changelog

cluster-samples-operator

OCPBUGS-2132: openshift template cakephp-mysql-persistent apiVersion for 4.10 #466
Full changelog

cluster-storage-operator

OCPBUGS-691: [release-4.10] correct sc error messages for ibm and alibaba platforms #314
Full changelog

cluster-version-operator

OCPBUGS-10814: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #917
Full changelog

configmap-reloader

OCPBUGS-6538: go.mod: update github.com/prometheus/client_golang to v1.11.0 #49
Full changelog

console

OCPBUGS-8320: Repositories list does not show the running pipelinerun as last pipelinerun #12623
OCPBUGS-12438: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12533
OCPBUGS-7961: fix broken pipeline secret #12607
OCPBUGS-7478: Add RBAC check on Create a Project link in all-namespaces pages #12566
OCPBUGS-12245: disable operator-install-single-namespace.spec.ts to solve CI issues #12752
OCPBUGS-7657: Editing Pipeline in the ocp console should show correct information #12576
OCPBUGS-7787: [4.10.z] Fix kubevirt-console tests #12580
OCPBUGS-6754: Fix for initial showing of topology contents #12486
OCPBUGS-5296: Pan nodes into view if all nodes are not visible on load #12485
OCPBUGS-6690: Fix NPE when displaying CSV with incomplete information #12481
OCPBUGS-5961: add support for version v1beta1 for knativeServing and knativeEventing #12441
OCPBUGS-3485: check that user can patch console operator config in s… #12258
Bug 2105911: Fix create-namespace e2e test with updated 3scale operator #11811
OCPBUGS-3619: Find latest pipeline run without firehose selector #12265
OCPBUGS-3336: Add checks for pods in hpaPodRingLabel #12249
OCPBUGS-2717: Update dependencies to the registry library and devfile parser #12191
OCPBUGS-2781: Fix broken advanced options layout on the add page #12204
OCPBUGS-3161: ‘CatalogSource not found’ in the virtualization #12202
Bug 2072792: Fetch common templates in a different namespace #12163
Bug 2071517: Fix swap usage queries for Top Consumers card in virtualization Overview page #12172
Bug 2090127: Remove nodeSelectorTerms if not defined #12161
Bug 2052469: Filter template list for boot source available #12164
OCPBUGS-2583: attach owner reference to resources created on creating a user to allow garbage collection #12189
OCPBUGS-2894: UI crash when storage class had missing annotation #12220
OCPBUGS-1696: Handle missing BMH for Node gracefully #12129
OCPBUGS-1465: mock call to /api/devfile in e2e #12062
OCPBUGS-2622: Use local test data to mock a devfile registry #12194
OCPBUGS-2523: updates test id for 3scale #12184
Bug 2072790: Regression “Create VM” #12160
OCPBUGS-938: do not show NodesUpdateGroup if there are 0 nodes #12061
Bug 2090127: CNV 20527: Enable boot source select for vm template #12082
Bug 2094074: Remove error on user template with DS #12092
Bug 2054917: Fix template example yaml #12091
Bug 2072790: Select template using also queryParams #12090
OCPBUGS-1759: Show already loaded catalog items after a timeout (3sec) #12106
OCPBUGS-403: fix broken update server link #11974
OCPBUGS-1815: fetch shared resource imagestreams based on labels instance or name #12110
Bug 2107898: Access mode and volume mode with sourceRef will now be taken from default storageclass #11907
OCPBUGS-1828: Fix devfile registry assertion #12112
OCPBUGS-1634: Update registry library dependency to pick up proxy support #12040
Bug 2080389: Link to documentation from the overview page goes to a missing link #11909
OCPBUGS-382: [OSD] ClusterVersion YAML editor should be read only #11922
OCPBUGS-550: Input values in Instantiate Template are disappeared randomly in the developer console #11983
Bug 2077142: Fix Web Terminal availability check to verify operator is installed #11374
Bug 2117642: Backport CI test fix to relase 4.10 #11966
Full changelog

console-operator

Bug 2106944: InfrastructureTopology must be driving console affinity rule creation #664
Bug 2078912: Modify the operator display name to match it with the name displayed in operatorhub #651
Full changelog

coredns

OCPBUGS-2902: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #80
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6903: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 #177
OCPBUGS-5012: Sync with upstream release-1.23 #158
Full changelog

csi-driver-manila-operator

OCPBUGS-10722: Bump go.mongodb.org/mongo-driver to v1.5.1 #178
OCPBUGS-7796: Address CVE-2022-41717 #169
Full changelog

csi-driver-nfs

OCPBUGS-10554: Bump go.mongodb.org/mongo-driver to v1.5.1 #114
Full changelog

docker-registry

OCPBUGS-920: Keep OCI image configs when hard prune #344
Full changelog

driver-toolkit

Adding kernel-rpm-macros to the Dockerfile. (#109) #109
Full changelog

etcd

Update owners #187
Updating ose-etcd images to be consistent with ART #151
OCPBUGS-5950: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #179
OCPBUGS-3103: Rebase openshift/etcd 4.10 onto v3.5.6 #171
OCPBUGS-2142: Rebase openshift/etcd 4.10 onto 3.5.5 #156
Full changelog

gcp-machine-controllers

OCPBUGS-5291: refactor restartPolicyToBool function #36
Full changelog

grafana

OCPBUGS-4260: bump github.com/crewjam/saml dependency #93
Full changelog

haproxy-router

Bug 2098230: Fix gap in router’s handling of graceful shutdowns. #406
Bug 2096362: HAProxy: enable PROXY protocol for all listeners #405
Full changelog

hyperkube, pod

OCPBUGS-8314: bump to k8s 1.23.17 #1497
OCPBUGS-10244: Fix mounted volume expansion tests #1510
OCPBUGS-3434: UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines #1415
UPSTREAM: <carry>: Wait for default service account in node authorizer test #1398
Bug 2101326: bump to k8s 1.23.12 #1382
OCPBUGS-1266: UPSTREAM: <carry>: Remove reserved CPUs from default set #1362
Full changelog

hypershift

OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2412
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-1488: Add udev #20
Full changelog

image-customization-controller

OCPBUGS-3999: use host IPC for the agent container #71
OCPBUGS-754: mount /run/udev into the agent container #64
Full changelog

insights-operator

OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) #726
OCPBUGS-1987: do not periodically update Available clusteroperator co… (#718) (#720) #718
helm upgrades and uninstalls backport 4.10 (#663) #663
OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) #659
Full changelog

ironic

OCPBUGS-7163: Increase power_state_change_timeout setting #348
Bug OCPBUGS-6886: Fix setting boot related attributes #347
OCPBUGS-5344: Configure Ironic iLO driver to use web server #343
OCPBUGS-4467: Remove RDO distribution configuration #330
OCPBUGS-5415: Update packages versions with latest available #345
Bug OCPBUGS-3477: Improve resiliency of eTag handling #316
OCPBUGS-2829: Removed ServerName from VirtualHost Directives #307
OCPBUGS-1740: Backport improvements to iDRAC steps to OCP 4.10 #303
OCPBUGS-1225: sync BIOS settings fixes #298
Full changelog

ironic-agent

OCPBUGS-7533: make coreos-installer output available in the logs #68
OCPBUGS-1232: Include Fix for discovering bond interfaces #63
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-13654: Bump Jenkins version and Plugin versions #1672
OCPBUGS-11499, OCPBUGS-11500, OCPBUGS-11501: Various issues #1658
OCPBUGS-11238: Fix labels for jenkins-slave-base-rhel8 #1643
OCPBUGS-10012, OCPBUGS-10020, OCPBUGS-6079: Bump Jenkins #1639
OCPBUGS-11236, OCPBUGS-11237, OCPBUGS-11239: Bump Jenkins version to 2.387.1 #1642
OCPBUGS-11240: configuration-as-code bumped to 1569.vb_72405b_80249 #1644
OCPBUGS-6627: Bump script security plugin #1624
OCPBUGS-7238: Enable Websocket support #1587
OCPBUGS-7052: Sync jenkins version and plugins with ma… #1582
OCPBUGS-4095: Required Plugin workflow-multibranch #1569
OCPBUGS-6645: Handle routes properly in s2i/run #1562
OCPBUGS-4095: Various CVEs September/2022 #1547
OCPBUGS-900: Bump openshift login plugin to 1.0.29 #1561
OCPBUGS-912: Add maven plugin dependency in base plugins #1530
OCPBUGS-3697: [release-4.10] Update OWNERS #1521
[release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 #1496
OCPBUGS-724: Update blueocean-autofavorite to 1.2.5 #1478
OCPBUGS-2943: Force git-server to an earlier version #1509
OCPBUGS-2185: Bump Jenkins version to 2.361.1 #1499
OCPBUGS-1440: fix install plugins script #1484
OCPBUGS-1037: Install glibc language package to remove setLocale warning #1480
OCPBUGS-473: CVE mitigations #1479
OCPBUGS-713: Add user coreydaley to approvers list #1477
OCPBUGS-400: Revert xmlstarlet usage #1469
Full changelog

kube-proxy, sdn

OCPBUGS-10912: Fix race in Egress IP Tracker start #524
OCPBUGS-10524: Initialize egress node monitoring struct with previous reachability status #519
OCPBUGS-8091: Handle race condition to setup default vnid flows #512
OCPBUGS-5977: Use pagination and set ResourceVersion to 0 when listing resources #494
OCPBUGS-6911: Add node egress IP assignment resync #501
OCPBUGS-2106: fix network policy egress #465
Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 #475
OCPBUGS-3996: egressip: Continue to process other nodes if a node is not ready #472
OCPBUGS-647: Fix DNS endpoint hack to prefer local instead of forcing it #467
OCPBUGS-647: Fix OCP hack to prefer local DNS endpoints #457
OCPBUGS-255: setup network policy rules during pod creation to fix postStart hook #455
Full changelog

kube-state-metrics

OCPBUGS-4086: cherry-pick, do not expose ingress path metric when service is nil #86
OCPBUGS-2196: internal/store: fix metrics slice length #79
Bug 2078835: internal/store: fix potential panic in pod store #70
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-2216: Cleanup KuryrPort when Pod is missing #702
OCPBUGS-11828: CNI: Watch for deleted pods #712
Bug OCPBUGS-941: Fix unbound router_id variable while creating event #688
Full changelog

machine-api-operator

OCPBUGS-13600: vSphere - enable steal time accounting #1143
OCPBUGS-11327: Fix empty component version #1134
OCPBUGS-8359: Append annotations from machine template spec to the node #1125
Updating ose-machine-api-operator images to be consistent with ART #1103
OCPBUGS-957: Change “create” sequence with powering on the vm after clone #1065
Full changelog

machine-config-operator

OCPBUGS-10703: configure-ovs: fix mtu-migration cleanup #3622
OCPBUGS-5692: 4.10 - remove goutils from dependency tree #3500
OCPBUGS-4830: daemon: gate done state on uncordon completion #3278
OCPBUGS-6702: controller: don’t render new MC until base MCs update #3517
OCPBUGS-5831: Do not allow empty system reserved values #3487
OCPBUGS-4810: Sync controllerconfig anyway if daemon sync fails #3454
OCPBUGS-4136: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3436
OCPBUGS-4134: Avoid NM managing patch port between br-int and br-ex #3435
OCPBUGS-3500: Add ephemeral storage to kubelet system reserved args #3408
Bug 2069754: [on-prem] Add NetworkManager reload to resolv-prepender #3041
OCPBUGS-2973: drop doc overlaysize default #3395
OCPBUGS-2070: Make sure there is a search domain in resolv.conf #3366
OCPBUGS-642: Fix .ssh directory not owned by core when created by Machine Config Daemon #3315
Full changelog

machine-os-images

OCPBUGS-960: Update rhcos release browser url #24
Full changelog

multus-admission-controller

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #55
Full changelog

multus-cni

OCPBUGS-11590: suppress uid mismatch error/warning in case of static pod #150
OCPBUGS-8672: SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] #147
Bug 2071800: Remove error handling for getPod to force to proceed cmdDel [backport 4.10] #132
OCPBUGS-2448: Fix missing device-info in networks-status annotation for chained plugins #137
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-13242: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.10] #133
OCPBUGS-3943: Excluded ranges bug (#282) #105
OCPBUGS-1659: ip-reconciler: Add all non default interfaces to Pod IP list #98
Full changelog

oauth-apiserver

OCPBUGS-2553: bump kube to 1.23.12 to fix group sync #85
Full changelog

openshift-apiserver

OCPBUGS-4341: fix printer panic #337
OCPBUGS-4604: [release-4.10] bump to kube 1.23.12 #323
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4717: Add SecretHashAnnotation to node service #104
Full changelog

openstack-machine-controllers

OCPBUGS-6596: Address CVE-2022-41717 #251
OCPBUGS-2628: Ensure network defs without subnet follow noAllowedAddressPairs #249
OCPBUGS-1951: Apply noAllowedAddressPairs on intended subnets only #245
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-6498: Order an operator CR’s status.Component.Refs array (#2880) #432
OCPBUGS-1525: Package Server Manager should enforce expected csv values #387
OCPBUGS-5294: backport cert rotation fix #428
OCPBUGS-4799: Fix label key truncation for subscription annotations (#2731) #421
OCPBUGS-4128: concurrent write bug fix #415
OCPBUGS-2898: [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) #389
OCPBUGS-1323: Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes #392
OCPBUGS-1087: Stop corrupting resolver cache. #385
Full changelog

ovirt-csi-driver

OCPBUGS-761: CSI provisioned disks are preallocated #117
OCPBUGS-620: Upgrade go-ovirt-client to 1.0.0 #116
Full changelog

ovn-kubernetes

OCPBUGS-11453: [release-4.10] Batch potentially big transaction on egress firewall ACLs migration #1641
OCPBUGS-11557: Fix leak in service controller cache #1634
OCPBUGS-11423: [release-4.10] Handle Completed pods deletion #1628
OCPBUGS-4762: [4.10] Dockerfile: bump to OVS 2.17.0-62 #1440
Updating ose-ovn-kubernetes images to be consistent with ART #1615
OCPBUGS-8513: Don’t recreate clusterPGs and clusterRtrPGs unless needed #1562
OCPBUGS-7021, OCPBUGS-7990: Delete stale egress ip snat entries by node #1542
OCPBUGS-6641: Drop in-cluster traffic towards svcCIDR at wrong port #1492
OCPBUGS-3656: Fixes dualstack clusterIPs for network policy svc handler #1378
OCPBUGS-7012: [release-4.10] Fix Egress FW ACL rules in dualstack mode #1508
OCPBUGS-2013: Validate node subnet annotations against cluster networks #1332
Bug 2092895: update all egress ACLs’ direction to “from-lport” #1148
OCPBUGS-6814: [release-4.10] Ensure loadbalancer cleanup doesn’t fail #1499
OCPBUGS-4882: append instead of overwrite logicalSwitch other-config #1450
OCPBUGS-3615: [4.10] CARRY: client: don’t construct transaction log string when it’s not needed #1375
OCPBUGS-5929: [release-4.10] Fix egress firewall to allow inbound connections in both gw modes #1482
OCPBUGS-5990: egressip: fix test data race accessing podAssignment cache #1480
OCPBUGS-5077: [release-4.10] Fix load balancer health check locking and update #1463
OCPBUGS-5299: Set the node as reachable only when it is being added as an egressip node #1464
OCPBUGS-5040: [release-4.10] Fix hybrid overlay unit tests #1462
OCPBUGS-4864: [release-4.10] Fix address set cleanup: only delete address sets owned by given object #1453
OCPBUGS-4888: [release-4.10] Fixes scenario where deleted + completed pods may leak #1458
OCPBUGS-4839, OCPBUGS-4861: [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1452
Bug 2115872: Fix unit-test failures in 4.10 #1457
OCPBUGS-1568: pods: deleteLogicalPort should not fail when node is gone #1423
OCPBUGS-3778: [release-4.10] Netpol races partial fixes #1434
OCPBUGS-4598: Bumps libovsdb to pick up fixes for optional values #1426
OCPBUGS-3858: Adjust ovs bundle timeout #1385
OCPBUGS-1568: pods: deleteLogicalPort should not fail when ls is gone #1293
Bug 2099843: Add final db check to egress IP test #1357
Bug 2105657: Fix egressIP object deletion if the node is deleted first #1228
OCPBUGS-2660: Add logging verbosity to configuring OVN logs #1326
OCPBUGS-1454: Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) #1269
OCPBUGS-2746: Fixes SNAT-ing Logic for EgressIPs #1336
OCPBUGS-2208: getDefaultGatewayInterfaceByFamily: custom filter for MultiHop #1303
OCPBUGS-2464: Fix the golang image used for unit-tests #1299
OCPBUGS-1024: Dockerfile: bump to 2.16.0-89.3.el8fdp #1271
Bug 2111552: Remove conntrack entries after rules #1219
OCPBUGS-660: [release-4.10] pods: deleteLogicalPort should not fail when port is already gone #1257
Bug 2113861: reconcile-node-lbs #1227
OCPBUGS-174: [release-4.10] Fix race when adding and removing pod with same name #1250
Full changelog

prometheus

OCPBUGS-3078: Backkport OCPBUGS-1718 to release 4.10 #146
Full changelog

prometheus-config-reloader, prometheus-operator

OCPBUGS-7795: Fixes ThanoRuler StatefulSet re-creation bug #219
Bug 2108976: pkg/prometheus: fix curl exec probe #196
Full changelog

telemeter

OCPBUGS-6575: update prometheus/client_golang version #446
Full changelog

tests

OCPBUGS-11874: Add Kuryr exception to “pods should successfully create sandboxes” test #27878
OCPBUGS-11560, OCPBUGS-11629: flake Pods Extended Pod Container lifecycle evicted pods #27872
OCPBUGS-10244: Bump(openshift/kubernetes): to get fix for resizing flake #27800
OCPBUGS-4578: Bond test 4.10 backport #27593
OCPBUGS-2614: Fix s2i ruby test that relys on rack #27479
disruption checking is disabled for prior releases because we lack a good baseline #27472
OCPBUGS-1454: Fixes OVN ACL audit log parsing #27429
Bug 2117301: Skip ErrImagePull for expected failures #27352
Bug 2115862: Skip internet connection test if we use a proxy #27344
Bug 2065028: rearrange test cases #26915
OCPBUGS-374: test: allow -f to match tests for any test suite #27366
Full changelog

thanos

OCPBUGS-2037: Bump 4.10 to 0.23.2 #92
Full changelog

vsphere-cloud-controller-manager

Bug 2106666: Return error when VM’s info returned from VC doesn’t contain IP address #29
OCPBUGS-2065: fix .dockerignore to satisfy OCP specific requirements #27
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5895: Fix vendored ini package #137
OCPBUGS-5895: Backport multi dc support 410 #133
OCPBUGS-5507: Fix sc creation if it is deleted #128
OCPBUGS-3288: set TLS cipher suites in Kube RBAC sidecars #120
OCPBUGS-2282: Add HTTP proxy to syncer container #114
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github