Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.64-x86_64
Team Approvals:
Tests:
- Blocking jobs
- Informing jobs
Upgrades from:
Untested upgrades:
4.10.10,
4.10.11,
4.10.12,
4.10.13,
4.10.14,
4.10.15,
4.10.16,
4.10.17,
4.10.18,
4.10.20,
4.10.21,
4.10.22,
4.10.23,
4.10.24,
4.10.25,
4.10.26,
4.10.27,
4.10.28,
4.10.29,
4.10.30,
4.10.31,
4.10.32,
4.10.33,
4.10.34,
4.10.35,
4.10.36,
4.10.37,
4.10.39,
4.10.40,
4.10.41,
4.10.43,
4.10.44,
4.10.45,
4.10.46,
4.10.47,
4.10.48,
4.10.50,
4.10.51,
4.10.52,
4.10.53,
4.10.54,
4.10.55,
4.10.56,
4.10.57,
4.10.59,
4.10.6,
4.10.60,
4.10.7,
4.10.8,
4.10.9,
4.9.23,
4.9.24,
4.9.25,
4.9.26,
4.9.27,
4.9.28,
4.9.29,
4.9.30,
4.9.32,
4.9.33,
4.9.34,
4.9.35,
4.9.36,
4.9.37,
4.9.38,
4.9.39,
4.9.40,
4.9.41,
4.9.42,
4.9.44,
4.9.45,
4.9.46,
4.9.47,
4.9.48,
4.9.49,
4.9.50,
4.9.51,
4.9.53,
4.9.54,
4.9.55,
4.9.56Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.10.4
Created: 2023-07-20 08:17:40 +0000 UTC
Image Digest: sha256:5b525ce48b754dc3e4119a94dee7391494934752bf98a5c352bde0b762179096
Release 4.10.64 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-07-19-211703
Components
Removed images
- cluster-capi-controllers
- cluster-capi-operator
Rebuilt images without code change
- Updating ose-alibaba-machine-controllers images to be consistent with ART #23
- Full changelog
- Add extraction for rhel7 oc #1490
- Use rhel 8 builder to match the base image #1489
- handle the error case of node retrieval while waiting for reboot #1487
- bring some cert rotation helpers back into 4.10 [fix unit-tests] #1481
- OCPBUGS-10750: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1379
- OCPBUGS-10777: bump repo sclorg/s2i-ruby-container location for newapp test #1383
- Bug 2086969: Delete recently created images when –prune-over-size-limit is used #1146
- OCPBUGS-3968: set proper pod security ns labels #1293
- Bug 2015119: bump(k8s.io/kubectl) to pick up k/k#110764 #1270
- OCPBUGS-1788: oc adm logs: generate proper path for static pods #1246
- OCPBUGS-1638: Increase default value of cache TTL to 6 hours #1241
- Bug 2116526: oc adm inspect: check a resource exists before its inspection #1227
- Bug 2106158: remove klog format and update messages for docker config deprecation #1205
- Bug 2095584: Backport
oc adm catalog mirror –continue-on-error flag #1170
- Bug 2084591: [inspect] Add namespace-scoped networking resources to inspect #1133
- Bug 2087248: Add the ReleaseAccepted condition to the oc adm upgrade command #1147
- Bug 2080151: Remove network CRDs scheme registration #1122
- Bug 2084429: Fix project command auto completion #1131
- Bug 2077332: pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates #1114
- Bug 2079325: Fix kubectl version to 1.23.0 #1117
- Bug 2068763: make sure that we check for resorces and files before picking the simplest path #1098
- Bug 2068474: expose –keep-startup flag for oc debug #1097
- Bug 2049427: Enhancing the output provided when backup collections are attempted #1056
- Bug 2060419: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1083
- Bug 2051267: pkg/cli/admin/upgrade: Mention –allow-explicit-upgrade next step when appropriate #1052
- Full changelog
- Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
- OCPBUGS-2162: Add resolver to handle custom endpoints #67
- Bug 2075444: Get subnet information from subnet instead of from network addresses #40
- Bug 2076935: azure: default empty environment to AzurePublicCloud #37
- Bug 2062133: Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #28
- Full changelog
- Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #65
- Full changelog
- Switch to OS-shipped stalld (#490) #490
- e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) #428
- Ignore Profile updates triggered by old operands (#357) #357
- Full changelog
- OCPBUGS-5345: routes/status resources can leak sensitive data, exclude it from audit #514
- [release 4.10] Bug 2109235: openshift-apiserver pods never going NotReady #501
- Full changelog
- OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2412
- Use non-strict mode when parsing global config #1619
- adopt existing immutable selectors to prevent errors reconciling components from roks toolkit clusters #1571
- cache registry files #1567
- feat(oauth): allow challenge override for OpenID #1543
- Add fallback set cache value from old token #1531
- Set Recommended Leader Election Values #1507
- feat(cpo): Support disable profiling annotation #1501
- Use ImagePullPolicyIfNotPresent for HO #1483
- Updated secret permissions to conform to kubernetes CIS benchmark #1480
- Ensure that everything uses imagePullPolicy IfNotPResent for resiliency #1475
- Add missing control plane prometheus rules #1471
- Ensure cache is set during token rotation before reconciling #1461
- Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1416
- feat(cpo): adhere to upgrade order from kube version skew policy #1410
- Set shutdown params to improve graceful shutdown #1387
- fix(cpo): Scope down secrets access for olm collect profiles cj #1378
- move to ga apis for all components now that management clusters at minimum release boundary #1361
- configure cipher suites to prevent using medium strength ssl ciphers #1359
- Use apiserver host/port from InfraStatus in reconciling Kube API Server #1333
- Ignition server: Actually use workdir #1317
- Use forked processes instead of pods to generate ignition payload #1311
- disable reconcile of registry config in IBMCloud deployments #1309
- feat(cpo): Disable PodSecurity for 4.10 #1289
- Disable PodSecurity admission in 4.11 as it breaks conformance #1286
- Expose a service account signing key in the API #1265
- release-4.10 - Create valid route names with long namespace names #1252
- Fast-Forward from main #1233
- Forward from main #1190
- Forward from main #1178
- Update release-4.10 branch with latest from main #1173
- Update release-4.10 branch with latest from main #1160
- Forward from main #1148
- Updating hypershift images to be consistent with ART #1121
- Full changelog
- OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) #726
- OCPBUGS-1987: do not periodically update Available clusteroperator co… (#718) (#720) #718
- helm upgrades and uninstalls backport 4.10 (#663) #663
- OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) #659
- Backport console helm installs to 4.10 (#638) #638
- Bug 2081844: Fix the clusteroperator conditions values when IO is (#619) #619
- Bug 2079318: Remove PSP gatherer (#608) (#615) #608
- Bug 2072848: Gather namespace names with overlapping UIDs (#605) #605
- Gather some error messages from the kube-controller-manager containers (#598) #598
- Gather cluster images.config.openshift.io resource definition (#581) #581
- Full changelog
- OCPBUGS-11590: suppress uid mismatch error/warning in case of static pod #150
- OCPBUGS-8672: SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] #147
- Bug 2071800: Remove error handling for getPod to force to proceed cmdDel [backport 4.10] #132
- OCPBUGS-2448: Fix missing device-info in networks-status annotation for chained plugins #137
- Bug 2084289: Bumps net-attach-def client library (for CNI v1.0 IP compatibility) [backport 4.10] #128
- Updating multus-cni images to be consistent with ART #110
- Full changelog
- Updating ose-network-metrics-daemon images to be consistent with ART (#40) #40
- Fix field selector (#50) #50
- Added METRIC_TEST_IMAGE var (#47) #47
- Full changelog
- Bug 2075051: [release-4.10] fix: adds handling for channel with different prefixes in cincinnati.go (#413) #413
- build(deps): bump operator-registry dep to v1.21.1 (#390) #390
- Bug 2064901: fix(associations): modifies association return values to allows image… (#359) #359
- Bug 2065500: resolves multiple channel heads in merged catalogs (#372) #372
- chore: adds dynamic version info for version command with ldflags (#328) (#334) #328
- Full changelog
Source code for this page located on github