4.10.67

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.67-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Succeeded periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.10, 4.10.11, 4.10.12, 4.10.13, 4.10.14, 4.10.15, 4.10.16, 4.10.17, 4.10.18, 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.48, 4.10.50, 4.10.51, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.6, 4.10.60, 4.10.61, 4.10.62, 4.10.63, 4.10.7, 4.10.8, 4.10.9, 4.9.23, 4.9.24, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.32, 4.9.33, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.38, 4.9.39, 4.9.40, 4.9.42, 4.9.43, 4.9.44, 4.9.45, 4.9.46, 4.9.48, 4.9.49, 4.9.50, 4.9.51, 4.9.52, 4.9.53, 4.9.54, 4.9.56

Upgrades to:

4.11.59 (changes) - F F S F
4.11.58 (changes) - F F F F S S
4.11.57 (changes) - F F S S S
4.11.56 (changes) - S S S
4.11.55 (changes) - F S S S S S
4.11.53 (changes) - F S F F
4.11.52 (changes) - F S S S
4.11.51 (changes) - F F F F F F S F F F S
4.11.50 (changes) - F F F F F F S S S
4.11.49 (changes) - F F F S S S
4.11.0-0.nightly-2024-07-06-014057 (changes) - F F F F S F F
4.11.0-0.nightly-2024-07-01-085547 (changes) - F F F F S F F
4.11.0-0.nightly-2024-04-20-132621 (changes) - F F F F S S S
4.11.0-0.nightly-2024-04-15-123706 (changes) - F F F F S F F
4.11.0-0.nightly-2024-04-15-034627 (changes) - F F F S F F
4.11.0-0.nightly-2024-03-18-165432 (changes) - F F F F S S F
4.11.0-0.nightly-2024-03-12-222930 (changes) - F F F F S F F
4.11.0-0.nightly-2024-01-19-110702 (changes) - F F F S S F S
4.11.0-0.nightly-2024-01-15-022949 (changes) - F F F S S S F
4.11.0-0.nightly-2024-01-10-203533 (changes) - F S F S S
4.11.0-0.ci-2024-07-30-203253 (changes) - S F F F F F
4.11.0-0.ci-2024-07-23-170806 (changes) - F S F F F F F
4.11.0-0.ci-2024-07-01-091038 (changes) - S S S
4.11.0-0.ci-2024-06-07-194400 (changes) - S S F S
4.11.0-0.ci-2024-06-05-162718 (changes) - S S F F F S
4.11.0-0.ci-2024-06-01-042714 (changes) - S S F S

Loading changelog, this may take a while ...

Changes from 4.10.47

Created: 2023-08-31 07:31:38 +0000 UTC

Image Digest: sha256:828afb599f68042c213498161977de6c1cc938da4836ae585561af25fd43440b

Release 4.10.67 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-08-30-093810

Components

Kubernetes upgraded from 1.23.12 to 1.23.17
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202212161019-0 to 410.84.202308291254-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:312a4b947b15edabc317c022e262a5231f36ce9f8815351105540c2ad321f0e7
alibaba-cloud-csi-driver git 5c30ca11 sha256:316fbafc20c7832d20b507af356726817f4e64809d6e8f689d4f1ca7a9ee8052
alibaba-disk-csi-driver-operator git f0d69663 sha256:22933eff67eb9afda496bd141bba4a232c1e005d328bb9d25acef315a7a72bd5
alibaba-machine-controllers git 9617f1f0 sha256:4eb301c6d6bf1d8ddd0edb99b7ff402436442eba6249cf8ad44f82737293e266
aws-cloud-controller-manager git d85867fe sha256:f5b099a9816d2c390543a3ab06bdef7126841f5f8b799ebec69624bf91797e64
aws-ebs-csi-driver git 2bad4b40 sha256:6e8021fbe8db3f1057c8e0087eedb789b93b57fd44cca3107a1fa9a45943a529
aws-ebs-csi-driver-operator git c2e6dc19 sha256:10bc843bdf5354165bf5522fa9abaa433d923c95dfa42f36392c5c290cf15319
aws-machine-controllers git 8c8d1c15 sha256:511042c884e0109c9368ddaa9d831515bfddf02b65c2298ff448998deff73d7f
aws-pod-identity-webhook git 7f9eb87a sha256:50ce420a069da82eff1899d0ec3b5b29110820fd3966cc9138f5a1c2103c9cb5
azure-cloud-controller-manager git ae571af8 sha256:24948f128fa8eeeaee3999a9e6c6231823a2ffb8aa561154475e3d02974ec051
azure-cloud-node-manager git ae571af8 sha256:1f3b2f329740287e6a375c3df6aaf2c34a5034cec4998a96cff526686f43b16b
azure-disk-csi-driver git c7c7188d sha256:daaaa2ed2f2dd766047686c5ba7ee2ab9bacf4262a0f538e2d8b15c8445fa379
azure-file-csi-driver git 87b4a718 sha256:379d8561a51e1e9315f27328d0647a56e76ff46faf23d3681fc7a67e23a87cc7
azure-file-csi-driver-operator git 3807eb37 sha256:4fd33c1f350f9187545446dfd5d01e0eb2558433f93fc028eb0897ceb3517dcf
azure-machine-controllers git 04ed0af9 sha256:6205876bc053b8de5ba48b8ad89c1abc5350522a46114e0e4c2ffc25dcd9f0da
baremetal-machine-controllers git adff401d sha256:5621101da9f9f4a52f438c5a33e2955675e56e4f45eed4f93a4e4f0ff8dce77c
baremetal-runtimecfg git 40c11f72 sha256:25aed865b06595a86e7ceaa76e6d8cbb9ae3cbd3d23a93460f2f00cc2363ce25
cluster-authentication-operator git 6a015c71 sha256:62e11aa1701b64955a3a49cff19f85189fc50389e6fb9f36e158bee3f7004b34
cluster-autoscaler git 266ba2db sha256:4966c0e30e65c52c53102f48efbe5d748fc4d83d4641fe75b33401fdb39fb3f1
cluster-autoscaler-operator git 8bcdcccb sha256:1a8be96fec74f8919ca639755ae607464d13b30417dfe96afc9709f5a8d75a2a
cluster-config-operator git 0840c6f2 sha256:3cc392b7cbea37c7542e624b73c4bfd076293d53dd25312c24a3ca799485e7ca
cluster-csi-snapshot-controller-operator git ace18623 sha256:4235f9a4eca39762192ca751fac3ee2c4fd11ff26718419e712f17a24084145d
cluster-dns-operator git ab6f33b3 sha256:182374b1f693955d507ae48327e7921822ed45d40afda069556780831af11233
cluster-ingress-operator git 805d0587 sha256:4e71c2bf855f6b839cc990184dcf863f21fee1853f016f1279a794e045a2a295
cluster-kube-storage-version-migrator-operator git 7e1f5684 sha256:2beeb0bc6f184116203674c47b0028ec0d4fde38145b8d83d23e14770d4427cf
cluster-machine-approver git 95404c4e sha256:d3c3400c2f81561075f33a455dc6bc9aaf8e63718caf3b116076b3502fc0c903
cluster-node-tuning-operator git b1c5690f sha256:88252bf1d7f7ce3a9b24b06c477ef3ed9a220de362cbaaad098ed80fdce0c6be
cluster-openshift-controller-manager-operator git b8b65d15 sha256:3846b76c736b900a530cf24d8fde67ad3b8ee0d09c480cfbacb3d7d566084e00
cluster-samples-operator git b27c4ce6 sha256:9f092735517c1e79a09d04ffd245e3e5c51e0f7888d4b14fc478151da055bfbc
cluster-storage-operator git 0ad6026d sha256:a625e399a26b545df65a4b3a89f8b40f559e4556330b9985bd7986f020505acd
cluster-update-keys git 684f6f42 sha256:21a8e55348b72ff1884e555d3e79565ab908f37553638282b3f5984c84a54f79
container-networking-plugins git 3123ef8b sha256:af6e3440c60ee59e8d136b29b941a128667897273a9e84eceab8d6faba6b3404
coredns git 6c032514 sha256:da0012c7b7f7af5711a86777c9889d5b9a2b77a2ede73b6712325e7231af6707
csi-driver-shared-resource git d06ff18b sha256:79b33d8d432669be87c42b29150185de417ae569aa2a5c00de301879f5d303e3
csi-driver-shared-resource-operator git 662615b3 sha256:36e1bd2796f72d0f39cce1e6f454f3ef49db2c75005e2820e01531df2991c660
csi-external-attacher git 27e71f2b sha256:39649bb03aa094de0f9eb43bb8e83ee7c57c4f6f46ed4031769b817f25cda369
csi-external-provisioner git 31de1e19 sha256:22adff89cbff5d39d7b59c8f3cb1bf2a7d24992e8b969c7bc4b9580ae1b8c4d8
csi-external-resizer git e5934091 sha256:f72c3ae76f8cee44dbef9b700e02e7a1f37f59b35c7451c26e63e8e1226c89b0
csi-external-snapshotter git fe4a0a2f sha256:10bfc3d3baef35ea49f2fa77cda3c981b95922015aca5dfc3b41e92b94e2a616
csi-node-driver-registrar git bb0bd823 sha256:fc822a3e9abe48e5a00b23def1e6fa2a342b97f76cd691d9e08d8eeb2bf923a8
csi-snapshot-controller git fe4a0a2f sha256:240ef7008f5a9ce6fcb5919e0a3c0187d26c6d80dabd07ced45a9119f97ee082
csi-snapshot-validation-webhook git fe4a0a2f sha256:81def31ce08aceade30213bea88f9c1fa8135eec46bfe198901fe7e8e675f971
docker-registry git 1892f21a sha256:549d9f3e53f4de8f8a81e8e6c3926a8a0c37bbf0a3627286e919abd33989a700
driver-toolkit git fd4ea71c sha256:58a7675dc243112fad4f3a6b3ef5336ac80174a1e5e3e96949a315a5cb422106
egress-router-cni git 5c56bc8a sha256:f18000315c49c24d19fa10239b0ea5e53f013abb61c160f28e4e73e87e5f10f6
gcp-cloud-controller-manager git 4dc728d0 sha256:55ae0f1d15a6859a9ccf258f7614208a62cac22731fdfea1d00ec5735fd8483f
gcp-pd-csi-driver git 19e9a57f sha256:2b4117ed8746d138220439bb7764c8b0ae185616af459d108ffc08e7c0c99ca6
gcp-pd-csi-driver-operator git 0e369dee sha256:018f78f71c43a43aec9dcfdaf09bbe28b987b3af3edd8b77af1cbe4e73f98a7c
grafana git ca476d4c sha256:4e9afc758dac30df5f7b24722394d7c48eb3a3404ce07aef351786186cdc5d6f
haproxy-router git c1e7f405 sha256:e2abc1a9982cc976fa980458bc43a0b5b9479ec1d3accb2a01d52873657e24a8
ibm-cloud-controller-manager git e3039120 sha256:e41401335fad176bdfd0dd4ce9a2bd4e5bd073b5ef36243234fb7db7e496f028
ibm-vpc-block-csi-driver git fc60caeb sha256:400b3848be68ed9cad9b1ca8e6970cc562e89855464d759536ab40f2cad55e66
ibm-vpc-block-csi-driver-operator git 28bad53d sha256:029d6b74048a88c0e5eece73ddcca1da4e7b5c7d06d7fbc013c2f85427e71dac
ibm-vpc-node-label-updater git 7074dfc3 sha256:cc16f0f3305654d3068cf3d119e0ee602cdeae099a37b05b98b92f2ebbd77c4e
ibmcloud-machine-controllers git 7449a94f sha256:00c18b1b0ffe3cfd0a93debdfcafb9d10778b4025e03735068023db2dc1cac62
image-customization-controller git a24f082c sha256:770fbfe61fbe1f0ed32dba28169b2d1e191e231325aecef851a2c7cd09ee154f
ironic-hardware-inventory-recorder git 62469223 sha256:0ee90ca5557ce6d361b2ea351cdb7f9b316d907798a3f1f0a075913f3adb67b3
ironic-machine-os-downloader git 81fe2974 sha256:4e47d5cfb1c769813e4f11e03a584a97a7a7be41762502a2dbb2b2b6b04ac59c
ironic-static-ip-manager git 45a1c542 sha256:215819a6fc123661504606a1fb5460e128bf703ff14d32609869bb4e987afd39
k8s-prometheus-adapter git 4052b317 sha256:cd211842b9395936c955f849c77968ed72dbbe489941ff06f8615e56087d5058
keepalived-ipfailover git 5d526c41 sha256:b947770e6fff98858484b21d609000d7a034198ff85bda03ae130ead5e221526
kube-rbac-proxy git 4f198b2b sha256:695eb0e189565eb8ccf06d32f6f06598908d35cdfea88edc0c75560806a037b7
kube-state-metrics git df55d3ea sha256:9c093996c2da84ef154d8a50609a2780309c08c7340b980215d22b5963834726
kube-storage-version-migrator git 901a6d22 sha256:cb035bc1ae31bd147032445a180db06b97d86719ef7f751bdd618ad6a6137de8
libvirt-machine-controllers git 3b330b72 sha256:39db70c6ce2e04334ef78b0cb9c042e3e3a1b5efdd2644c8688f397ea0b74f16
machine-os-content sha256:ec0997939fae90b34207a415ea82fe30041d13d98e5d8baa61c8291bfa1ffefb
machine-os-images git 09a132b7 sha256:48ffe5a27eef34017c1bb2097f6be4e73a052194fc99052af3a31a7676f8d233
multus-route-override-cni git 707dd380 sha256:14b7a9fb4bcf45427d950eebf84df5e14d82a0e970cff1744ad67af6f6449701
must-gather git db7f815b sha256:bcd0b2b747ef3fe948136d31a213dd2188e323b37812958aa482f939fa934f9e
network-interface-bond-cni git 6edc4a73 sha256:27ac7caa16308ec12e72eafdc6d6092fc4789bce351be6e32d35d6a2d48c5ae8
network-metrics-daemon git 234c1388 sha256:0ea8855602f19f5c47c119dec46bad757b7247a42657a9d09b5bb393b796b263
network-tools git bcfec9c5 sha256:44102cb6046621b34acd3d41350aca88368aa54b6eea61f48b5f5f6387758f97
oauth-apiserver git cd4f5bb0 sha256:e79dd2ed5ce1d722a2cfb01c9472019299fb24fdcf78d2da1e4c58766584280a
oauth-proxy git 799d414b sha256:e49589dbfb006cdff570c7e30b065278e1659d708e9e0d6b539c8a86018cdeb1
oauth-server git 245b95f8 sha256:e2891a32f5a3355431c05f38763a1dd8366e811643558d98cf5385720dbd698f
oc-mirror git 71ca0a1a sha256:246950bd3c3928bb3785935423c63359cf051304f647875940966ce9e52e9fd4
openshift-controller-manager git 2c2d50db sha256:a0a8cfcc3a961142e678a258d8a1beb6980ebc6a5cb6ea7e36211ba83dddff8a
openshift-state-metrics git e5c50aae sha256:923f46b79c5843a4fd5c9b58c3f24ca76944c6efc85737d56b32e3f6e4d17a49
openstack-machine-api-provider git 2401f74d sha256:a0d6d6dd6d23e8d65a3c9a87d702ce579dd913381d93f8519b18e8333a4189ce
operator-marketplace git 80b92ecf sha256:cc3d1698ce9c702e21b493735780b2dbb85eac91ea537e4672a409bade13940c
ovirt-csi-driver git 9773aef8 sha256:774ec537cd8bd00d0874edb069a4b1883a16a91979d605edaf5185e67b83bef9
ovirt-csi-driver-operator git 573ac478 sha256:80429ee12da067d7582cefc0db43ee9afb927357d29677a5a1a9b43cb8231d52
ovirt-machine-controllers git 35ce9aaf sha256:aecf1fedfb71c991daa26425fa0d5bc21d541f30ae5ce77aa15e010572989d0c
powervs-machine-controllers git c1d68e7b sha256:24f15b8a71ff658020fab02212db2a6f299d74e2eae49570c1c800f02341acd8
prom-label-proxy git 5f4c8992 sha256:6f67682be74d2723c623df09eb8f1a92797f3937f593bc9dac0a6431de8e3545
prometheus git b91d7c75 sha256:bc5206b8e13f64b51abb152352428ed77f1b8d11c9da79c7cea963ee351d387f
prometheus-alertmanager git 01339596 sha256:36147358c69327c7803fada4a6bac203bb50e30cda3ac69b36ca9caf3305287f
prometheus-node-exporter git 0eed3102 sha256:cedec3adbd73631b97fdd2379a1b9c978c03b41965101dde488579a49c9cd1c4
service-ca-operator git 1611373e sha256:39cfba4dba3cc9f0f185c5261de3f21abede0e816d28ff233e0ad10f3908465a
thanos git ac176319 sha256:2d673764c9a2f55e24effe0425fd0c7d027048285d80f1e625a1e4ceb99edff6
vsphere-cloud-controller-manager git f2bc9eb3 sha256:58f83dc3870ba63ae5e8784790e350dd776e8dde6f02172e637fa85585a969e7
vsphere-csi-driver git e310f4d3 sha256:c6dffb74c59059a88c5321689db9d474144ed9b2570fc6eccca8f01bc41c5e0e
vsphere-csi-driver-syncer git e310f4d3 sha256:a03c494a988c01793dc2a8990c963b4839e73557504b0587db3ed50b747dd9cf
vsphere-problem-detector git a11df08a sha256:56fcd66841c0f2a9606728bf526e504b2d1fc4e18fd3786871d1dbaf86be10d4

azure-disk-csi-driver-operator

OCPBUGS-8020: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #72
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-12751: [Alibaba] update the bandwidth value of EIP #7130
OCPBUGS-14557: openstack: Add netcat to the Installer image #7230
OCPBUGS-537: vSphere - enable steal time accounting #6261
OCPBUGS-5931: destroy/gcp: Disk names are filtered using kubernetes name format #6972
OCPBUGS-5663: CVE-2021-4238: goutils: update for randomness fix #6766
OCPBUGS-2731: OpenStack UPI: Create server group for Computes #6510
OCPBUGS-6697: destroy/gcp: Use min length for destroying disks #6808
OCPBUGS-2743: skip sts credentials check in terraform #6518
Full changelog

baremetal-operator

OCPBUGS-11686: allow namespace to continue with terminating when deprovisioning at t… #263
Bug 2061794: [4.10] Only update the HFS status on changes #247
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-16060: mcs cert: account for environments that use IP directly #1505
OCPBUGS-16196: reboot: set ignition version to 3.1 #1511
Add extraction for rhel7 oc #1490
Use rhel 8 builder to match the base image #1489
handle the error case of node retrieval while waiting for reboot #1487
bring some cert rotation helpers back into 4.10 [fix unit-tests] #1481
OCPBUGS-10750: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1379
OCPBUGS-10777: bump repo sclorg/s2i-ruby-container location for newapp test #1383
Full changelog

cloud-credential-operator

OCPBUGS-13847: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #541
OCPBUGS-11717: ccoctl: Enable public anon read access to default OIDC S3 bucket #531
Full changelog

cloud-network-config-controller

OCPBUGS-16626: pull project name from subnet uri #119
Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
Full changelog

cluster-baremetal-operator

OCPBUGS-3997: add a workaround for a NetworkManager issue #308
Full changelog

cluster-bootstrap

Add API team to the OWNERS #96
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-6039: Try to limit groups for the REST mapper discovery #229
Full changelog

cluster-etcd-operator

OCPBUGS-10233: increase live/ready timeout and failure thresholds #1026
OCPBUGS-7741: fail early on missing node status envs #1008
OCPBUGS-7827: set default timeouts in etcdcli #1010
OCPBUGS-5425: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #979
Full changelog

cluster-image-registry-operator

OCPBUGS-6972: OpenStack: Add support for Proxy #837
OCPBUGS-5974: swift: Retry connecting to OpenStack #832
add myself to OWNERS #838
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly #1451
OCPBUGS-5345: routes/status resources can leak sensitive data #1421
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly 4.10 #704
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-8235: Guard controller: set the readiness probe endpoint explicitly #465
Full changelog

cluster-monitoring-operator

OCPBUGS-11579: jsonnet: Add prometheus container in UWM prometheus asset file #1942
OCPBUGS-10491: Increase startupProbe for prometheus #1920
OCPBUGS-5864: grafana: add the Content-Security-Policy header to requests #1866
Full changelog

cluster-network-operator

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #1809
OCPBUGS-12795: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1794
OCPBUGS-11828: Kuryr: Update CRD from upstream #1782
OCPBUGS-64: CNI binary copy should account for the possibility of symlinks [backport 4.10] #1617
OCPBUGS-5955: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1687
OCPBUGS-6736: Remove nbctl logfile #1587
OCPBUGS-5575: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1682
Bug 2092193: Bump PodDisruptionBudget to v1 #1470
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-5345: routes/status resources can leak sensitive data, exclude it from audit #514
Full changelog

cluster-policy-controller

OCPBUGS-5788: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #97
Full changelog

cluster-version-operator

OCPBUGS-10814: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #917
Full changelog

configmap-reloader

OCPBUGS-6538: go.mod: update github.com/prometheus/client_golang to v1.11.0 #49
Full changelog

console

OCPBUGS-18014: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13100
OCPBUGS-15932: visiting Configurations page returns error Cannot read… #12985
OCPBUGS-13831: Get the Event type value from the latest PLR of the Repository #12833
OCPBUGS-13358: add subject kind dropdown in the project access form #12803
OCPBUGS-8320: Repositories list does not show the running pipelinerun as last pipelinerun #12623
OCPBUGS-12438: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12533
OCPBUGS-7961: fix broken pipeline secret #12607
OCPBUGS-7478: Add RBAC check on Create a Project link in all-namespaces pages #12566
OCPBUGS-12245: disable operator-install-single-namespace.spec.ts to solve CI issues #12752
OCPBUGS-7657: Editing Pipeline in the ocp console should show correct information #12576
OCPBUGS-7787: [4.10.z] Fix kubevirt-console tests #12580
OCPBUGS-6754: Fix for initial showing of topology contents #12486
OCPBUGS-5296: Pan nodes into view if all nodes are not visible on load #12485
OCPBUGS-6690: Fix NPE when displaying CSV with incomplete information #12481
OCPBUGS-5961: add support for version v1beta1 for knativeServing and knativeEventing #12441
Full changelog

console-operator

OCPBUGS-11342: Deleting downloads deployment should not fail if already deleted #744
OCPBUGS-14845: Distinguish between route conditions and remove the old ones #768
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6903: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 #177
OCPBUGS-5012: Sync with upstream release-1.23 #158
Full changelog

csi-driver-manila-operator

OCPBUGS-10722: Bump go.mongodb.org/mongo-driver to v1.5.1 #178
OCPBUGS-7796: Address CVE-2022-41717 #169
Full changelog

csi-driver-nfs

OCPBUGS-10554: Bump go.mongodb.org/mongo-driver to v1.5.1 #114
Full changelog

csi-livenessprobe

OCPBUGS-13143: Bump gRPC from 1.38.0 to 1.49.0 #41
Full changelog

docker-builder

OCPBUGS-15652: Add the git-lfs package #355
OCPBUGS-11782: manage-dockerfile: use the original form of HEALTHCHECK #342
Full changelog

etcd

Update owners #187
Updating ose-etcd images to be consistent with ART #151
OCPBUGS-5950: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #179
OCPBUGS-3103: Rebase openshift/etcd 4.10 onto v3.5.6 #171
Full changelog

gcp-machine-controllers

OCPBUGS-5291: refactor restartPolicyToBool function #36
Full changelog

hyperkube, pod

OCPBUGS-8735: UPSTREAM: <drop>: bump apiserver-library-go #1628
OCPBUGS-8314: bump to k8s 1.23.17 #1497
OCPBUGS-10244: Fix mounted volume expansion tests #1510
Full changelog

hypershift

OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2412
Full changelog

insights-operator

OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) #726
OCPBUGS-1987: do not periodically update Available clusteroperator co… (#718) (#720) #718
Full changelog

ironic

OCPBUGS-13729: Bump python-sushy #374
OCPBUGS-7163: Increase power_state_change_timeout setting #348
Bug OCPBUGS-6886: Fix setting boot related attributes #347
OCPBUGS-5344: Configure Ironic iLO driver to use web server #343
OCPBUGS-4467: Remove RDO distribution configuration #330
OCPBUGS-5415: Update packages versions with latest available #345
Full changelog

ironic-agent

OCPBUGS-7533: make coreos-installer output available in the logs #68
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-14650: Bump Jenkins plugins to latest versions #1696
OCPBUGS-14401: Combined backport updates #1689
OCPBUGS-14279: Updates to use Java 11 by default #1682
mitigate CVEs #1675
OCPBUGS-13654: Bump Jenkins version and Plugin versions #1672
OCPBUGS-11499, OCPBUGS-11500, OCPBUGS-11501: Various issues #1658
OCPBUGS-11238: Fix labels for jenkins-slave-base-rhel8 #1643
OCPBUGS-10012, OCPBUGS-10020, OCPBUGS-6079: Bump Jenkins #1639
OCPBUGS-11236, OCPBUGS-11237, OCPBUGS-11239: Bump Jenkins version to 2.387.1 #1642
OCPBUGS-11240: configuration-as-code bumped to 1569.vb_72405b_80249 #1644
OCPBUGS-6627: Bump script security plugin #1624
OCPBUGS-7238: Enable Websocket support #1587
OCPBUGS-7052: Sync jenkins version and plugins with ma… #1582
OCPBUGS-4095: Required Plugin workflow-multibranch #1569
OCPBUGS-6645: Handle routes properly in s2i/run #1562
OCPBUGS-4095: Various CVEs September/2022 #1547
OCPBUGS-900: Bump openshift login plugin to 1.0.29 #1561
Full changelog

kube-proxy, sdn

OCPBUGS-13919: save and delete the old egress network policy #545
OCPBUGS-13984: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #548
OCPBUGS-10912: Fix race in Egress IP Tracker start #524
OCPBUGS-10524: Initialize egress node monitoring struct with previous reachability status #519
OCPBUGS-8091: Handle race condition to setup default vnid flows #512
OCPBUGS-5977: Use pagination and set ResourceVersion to 0 when listing resources #494
OCPBUGS-6911: Add node egress IP assignment resync #501
OCPBUGS-2106: fix network policy egress #465
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-15491: KuryrPort cleanup: Fix issue of subport not found #736
Bug OCPBUGS-13779: Fix ValueError when Pod has no IP address #732
Bug OCPBUGS-2216: Cleanup KuryrPort when Pod is missing #702
OCPBUGS-11828: CNI: Watch for deleted pods #712
Full changelog

machine-api-operator

OCPBUGS-13600: vSphere - enable steal time accounting #1143
OCPBUGS-11327: Fix empty component version #1134
OCPBUGS-8359: Append annotations from machine template spec to the node #1125
Updating ose-machine-api-operator images to be consistent with ART #1103
Full changelog

machine-config-operator

Permit consistent go compilation #3748
OCPBUGS-9837: Increase keepalived API check fall value to 3](https://github.com/openshift/machine-config-operator/pull/3176#top) #3176
OCPBUGS-10703: configure-ovs: fix mtu-migration cleanup #3622
OCPBUGS-5692: 4.10 - remove goutils from dependency tree #3500
OCPBUGS-4830: daemon: gate done state on uncordon completion #3278
OCPBUGS-6702: controller: don’t render new MC until base MCs update #3517
OCPBUGS-5831: Do not allow empty system reserved values #3487
OCPBUGS-4810: Sync controllerconfig anyway if daemon sync fails #3454
Full changelog

multus-admission-controller

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #55
Full changelog

multus-cni

OCPBUGS-11590: suppress uid mismatch error/warning in case of static pod #150
OCPBUGS-8672: SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] #147
Full changelog

multus-networkpolicy

Updating multus-networkpolicy images to be consistent with ART #14
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-13242: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.10] #133
OCPBUGS-3943: Excluded ranges bug (#282) #105
Full changelog

openshift-apiserver

OCPBUGS-4341: fix printer panic #337
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4717: Add SecretHashAnnotation to node service #104
Full changelog

openstack-machine-controllers

OCPBUGS-6596: Address CVE-2022-41717 #251
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-17779: fix dynamic conversion webhook #546
Introduce DOWNSTREAM_OWNERS file #543
OCPBUGS-7904: Cleanup conversion webhooks when an operator is uninstalled #458
Allow cpb to be statically compiled / exempt from FIPS compliance #514
OCPBUGS-6498: Order an operator CR’s status.Component.Refs array (#2880) #432
OCPBUGS-1525: Package Server Manager should enforce expected csv values #387
OCPBUGS-5294: backport cert rotation fix #428
Full changelog

ovn-kubernetes

OCPBUGS-17165: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1794
OCPBUGS-16206: Fix stale SNAT entries for completed pods #1758
Bug OCPBUGS-12792: [release-4.10] Delete equivalent ACLs when searching by predicate. #1670
OCPBUGS-11453: [release-4.10] Batch potentially big transaction on egress firewall ACLs migration #1641
OCPBUGS-11557: Fix leak in service controller cache #1634
OCPBUGS-11423: [release-4.10] Handle Completed pods deletion #1628
OCPBUGS-4762: [4.10] Dockerfile: bump to OVS 2.17.0-62 #1440
Updating ose-ovn-kubernetes images to be consistent with ART #1615
OCPBUGS-8513: Don’t recreate clusterPGs and clusterRtrPGs unless needed #1562
OCPBUGS-7021, OCPBUGS-7990: Delete stale egress ip snat entries by node #1542
OCPBUGS-6641: Drop in-cluster traffic towards svcCIDR at wrong port #1492
OCPBUGS-3656: Fixes dualstack clusterIPs for network policy svc handler #1378
OCPBUGS-7012: [release-4.10] Fix Egress FW ACL rules in dualstack mode #1508
OCPBUGS-2013: Validate node subnet annotations against cluster networks #1332
Bug 2092895: update all egress ACLs’ direction to “from-lport” #1148
OCPBUGS-6814: [release-4.10] Ensure loadbalancer cleanup doesn’t fail #1499
OCPBUGS-4882: append instead of overwrite logicalSwitch other-config #1450
OCPBUGS-3615: [4.10] CARRY: client: don’t construct transaction log string when it’s not needed #1375
OCPBUGS-5929: [release-4.10] Fix egress firewall to allow inbound connections in both gw modes #1482
OCPBUGS-5990: egressip: fix test data race accessing podAssignment cache #1480
OCPBUGS-5077: [release-4.10] Fix load balancer health check locking and update #1463
OCPBUGS-5299: Set the node as reachable only when it is being added as an egressip node #1464
Full changelog

prometheus-config-reloader, prometheus-operator

OCPBUGS-7795: Fixes ThanoRuler StatefulSet re-creation bug #219
Full changelog

telemeter

OCPBUGS-6575: update prometheus/client_golang version #446
Full changelog

tests

OCPBUGS-15178: Move from registry.centos.org to quay.io #27988
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27962
OCPBUGS-11874: Add Kuryr exception to “pods should successfully create sandboxes” test #27878
OCPBUGS-11560, OCPBUGS-11629: flake Pods Extended Pod Container lifecycle evicted pods #27872
OCPBUGS-10244: Bump(openshift/kubernetes): to get fix for resizing flake #27800
OCPBUGS-4578: Bond test 4.10 backport #27593
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5895: Fix vendored ini package #137
OCPBUGS-5895: Backport multi dc support 410 #133
OCPBUGS-5507: Fix sc creation if it is deleted #128
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github