4.18.0-ec.0

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.0-ec.0-x86_64

Team Approvals:

Tests:

Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.17.0-rc.0, 4.17.0-rc.1

Upgrades to:

4.18.0-rc.1 (changes) - Success
4.18.0-rc.0 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.18.0-0.nightly-2024-12-14-152515

Created: 2024-09-02 08:13:09 +0000 UTC

Image Digest: sha256:e930176c384d1c819f6259c403cb9a4fe419eebb1da80a9ae0a0e8afbd74d964

Release 4.18.0-ec.0 was created from registry.ci.openshift.org/ocp/release:4.18.0-0.nightly-2024-08-27-051932

Components

Kubectl upgraded from 1.31.1 to 1.30.2
Kubernetes upgraded from 1.31.3 to 1.30.3
Kubernetes Tests upgraded from 1.31.1 to 1.30.0
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202412120450-0 to 418.94.202408212252-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSClusterHostedDNS (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ConsolePluginContentSecurityPolicy (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
IngressControllerDynamicConfigurationManager (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
InsightsRuntimeExtractor (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
MinimumKubeletVersion (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
NutanixMultiSubnets (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
VSphereMultiNetworks (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
VolumeAttributesClass (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
AWSEFSDriverVolumeMetrics (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAWS (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiVCenters (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
NewOLM (0 tests)	Disabled	Disabled (Changed)	Enabled (Changed)	Enabled	Enabled (Changed)	Enabled
ClusterAPIInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallAzure (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallGCP (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallNutanix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallOpenStack (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallPowerVS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallVSphere (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MetricsServer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InstallAlternateInfrastructureAWS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

csi-driver-shared-resource git abbeb172 sha256:630124af5236dd2682f488e4f48cc25129ddaf48a980744f1a9d30338c7e9329
csi-driver-shared-resource-operator git c095a1f2 sha256:aa005614212f2c123ee518b749a0f50c74a9680c8413a38c7a91268ccb5967b5
csi-driver-shared-resource-webhook git abbeb172 sha256:9eb687f48aaab0402fba7374df26f1e2206b2a6c3c357dae54105ec778e4154c

Removed images

gcp-workload-identity-federation-webhook
insights-runtime-exporter
insights-runtime-extractor

Rebuilt images without code change

container-networking-plugins git 24a65329 sha256:a73129ceeb345d3a1598dd2a569a65505fa7fdaa1e441e4f776ef4c2f3caf970
containernetworking-plugins-microshift git 24a65329 sha256:b7f3b4b7ea5a09b06ffdfde9f943313e092fe5f082f6e4a15be1ea8688f1c5ec
egress-router-cni git 3193a756 sha256:e7103ff3f490ea2dc4ed96263be262a411aa668c33d0f7f6ec1ab51e5c2b2334
ironic-machine-os-downloader git 04c22eee sha256:bd5b005fb429018542ccac10ffb5046feb2e4442fc87156c6756771a4f2299e1
kubevirt-cloud-controller-manager git 3f4542ec sha256:190094ac57fadb379771ed1e8835e15c9c02dd80639ad6543450e3ce51228a79
libvirt-machine-controllers git a336f0b5 sha256:39393fd89b2b71c654d0c2a21869c89c98a9cb1903f480ab16d61accb3ebcbab
multus-route-override-cni git 391c1b03 sha256:9194414f1a7da1a8f3468a29007f6bac5edf682ec47db5b09e6d4ae8b4e0e340
oauth-proxy git 30f80124 sha256:4c7c47f8e5e0d583ba433471becb84a2531acc85b90a67bbac03ee15dd831f28
ovirt-csi-driver git 1db726a9 sha256:ac30aad474dbe12695d4cffb7c68b1ef0b59ab8fc080abcd634b15067d9d39dc
ovirt-csi-driver-operator git 0feae256 sha256:cfa8ac9b7908e44015f8027a10037c60b759259cabfcf027e850b321182a0893
ovirt-machine-controllers git abb91c84 sha256:72080f7d3aaa12a874b973d5f2cc11ba95f7c5d9d6466abd780ae8c30ad8cbaa
rhel-coreos sha256:3454a541c450fd387aed874218e367776d94710a3cfc8827a20744717c445e11
rhel-coreos-extensions sha256:7c99c8b69c232c2ec7c077a7339af392036c085ec4e821ea242e5dba7a643426
service-ca-operator git 1f7d6472 sha256:c6f0ec531a112300d1203792a769e626bcf525c0507845f8b309467e6d828c1d

csi-driver-manila-operator

NO-JIRA: Cleanup duplicated resources requests #238
AUTH-482: set required-scc for openshift workloads #234
STOR-1596: Bump all deps for 4.17 #233
OCPBUGS-34090: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.17 #232
OCPBUGS-34090: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.17 #231
OCPBUGS-28230: enforce termination message policy on all platform pods #229
STOR-1574: Bump all deps #226
OCPBUGS-28934: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 #227
NO-ISSUE: Remove local manifests #208
STOR-1574: Bump library-go #225
OCPBUGS-23809: Bump opentelemetry libs #220
STOR-1714: Release leadership on SIGTERM #223
STOR-1688: Chore: add .snyk file to ignore false positives #218
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #217
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #214
OCPBUGS-24824: Updating csi-driver-manila-operator-container image to be consistent with ART #213
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #212
OCPBUGS-9331: Fix selector for manila-csi-driver-controller-metrics service #210
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #207
OCPBUGS-21940: Update k8s.io/apimachinery and k8s.io/apiserver #206
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #205
OCPBUGS-19166: Updating csi-driver-manila-operator images to be consistent with ART #204
Configure User Agent #191
STOR-1440: Restart controller Pods if metrics-serving-cert changed #198
OCPBUGS-12499: Bump dependencies #197
Remove unused Dockerfile.openshift.ci file #193
Rework how we build the container image #194
OCPBUGS-14049: Don’t cache OpenStack client #184
Revert “OCPBUGS-14049: Add secret informer” #192
OCPBUGS-16453: Bump library-go #190
OCPBUGS-16783: Chore: Update OWNERS #189
OCPBUGS-14049: Add secret informer #187
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #186
OCPBUGS-14824: Bump csi-driver-manila-operator library-go #183
STOR-1168: Bump common libraries #182
Updating csi-driver-manila-operator images to be consistent with ART #181
Updating csi-driver-manila-operator images to be consistent with ART #180
Updating csi-driver-manila-operator images to be consistent with ART #179
OCPBUGS-8683: Add management workloads annotations #175
OCPBUGS-8628: Bump go.mongodb.org/mongo-driver to v1.5.1 #173
Updating csi-driver-manila-operator images to be consistent with ART #172
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #167
OCPBUGS-6301: Address CVE-2022-41717 #165
Bug 2106736: Add multiplePVsSameID capability #164
STOR-1078: Add hostPaths necessary for SELinux mounts #162
Updating csi-driver-manila-operator images to be consistent with ART #161
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #160
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #159
Updating csi-driver-manila-operator images to be consistent with ART #157
Ensure files follow go 1.19 formatting #158
Bug 2057637: Include secrets to VolumeSnapshotClass #156
STOR-858: Bump github.com/openshift/* and k8s.io/* #155
Bug OCPBUGS-944: Fix RBAC race during initial deployment #154
Expose CSI_FSGROUP_POLICY as an operator option #142
Updating csi-driver-manila-operator images to be consistent with ART #151
Bug 2090662: SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #149
Bug 2083153: Fetch application credentials #148
Bug 2090662: SWEET32: Improve TLS configuration for Kube RBAC Proxy #145
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #144
Updating csi-driver-manila-operator images to be consistent with ART #143
Bug 2074274: Address CVE-2022-27191 #141
Bug 2067749: Address CVE-2022-21698 #140
ci: enable more tests #138
Updating csi-driver-manila-operator images to be consistent with ART #137
shiftstack: Update OWNERS #135
Bug 2043130: csi-driver-manila: Add external-snapshotter permissions to patch snapshots #136
Bug 2038934: Add custom CA bundle support #134
Bug 2038053: Bump k8s to 1.23 #133
Bug 2034537: OWNERS: Update ShiftStack members #132
Normalize the storage class name when ShareType has invalid characters #131
Updating csi-driver-manila-operator images to be consistent with ART #130
Updating csi-driver-manila-operator images to be consistent with ART #128
Updating csi-driver-manila-operator images to be consistent with ART #121
Bug 2001620: Do not degrade cluster on failure to reach Manila #120
Bug 1993931: Storage operators use older kubernetes client #117
Bug 1991814: Move namespace creation to cluster-storage-operator #115
Bug 1948090: Deploy multiple replicas of CSI Controller Service #112
Bug 1960152: Use cluster Proxy when available #108
Generate default volumesnapshotclass for Manila CSI driver #107
Remove Fedosin from Owners #101
Use go:embed for static yaml files #179 #105
Updating csi-driver-manila-operator images to be consistent with ART #104
test/e2e/manifest: hardcode StorageClass #103
Add e2e manifest for testing #100
Updating .ci-operator.yaml build_root_image from openshift/release #102
Create CI image for Manila CSI Operator testing #99
Bug 1820238: add cluster id to share metadata #98
Bug 1947774: fix imagePullPolicy to ifNotPresent #97
Bug 1949357: Fix namespace in metrics collection objects #96
Manila: Add metrics scraping #95
Updating csi-driver-manila-operator builder & base images to be consistent with ART #94
Bug 1918564: bump library-go #93
Bug 1933184: Add maxUnavailable to DaemonSets #92
Updating csi-driver-manila-operator builder & base images to be consistent with ART #89
Cleanup: Remove serviceName from controller manifest #90
Bug 1917587: disable Manila operator in case of 404 error #84
Bug 1918716: increase Keystone timeout to 2 minutes #85
Bug 1918140: Fix sync of config.openshift.io informer #82
Bug 1917587: disable Manila operator in case of 403 error #81
Bug 1915643: revert setting metadata in the storage classes #77
Bug 1912948: Include proxy ENV in CSI driver #79
Updating csi-driver-manila-operator builder & base images to be consistent with ART #78
Bug 1820238: add metadata with cluster ID to generated storage classes #73
Updating csi-driver-manila-operator builder & base images to be consistent with ART #71
go.mod: Remove unused dependencies #74
Bug 1894025: Add annotation to operand’s namespace #72
owners: Add adduarte and mdbooth as approvers #70
Add a new ShiftStack team member #69
Include huffmanca as an approver #67
Bug 1879475: Update library-go to include explicit reasons #66
Bug 1883018: Fix location of node plugin cacert file #65
Bug 1880896: Replace cert authority path from clouds.yaml #64
Bug 1878163: Updating build/Dockerfile.openshift baseimages to mach ocp-build-data config #63
Bug 1876791: Update RBAC of the external-provisioner #60
Bug 1866791: Bump library-go to get better operatorLogLevel validation #59
Bug 1868339: Use the CredentialsRequest created by CVO #58
Bug 1868339: Don’t create CredentialsRequest in Manila CSI Driver Operator #57
Bug 1871999: Allow controller and DaemonSets to run on master nodes #56
Bug 1872080: Updating build/Dockerfile.openshift baseimages to mach ocp-build-data config #55
Add missing assets #53
Bug 1869585: Fix log level of NFS CSI driver #50
Bug 1869504: base storageclass names on lower case #51
Bug 1867735: Fix sync of openshift-config/cloud-provider-config ConfigMap #49
Bug 1863056: Allow the driver to run on any node #46
Update to latest library-go #48
Remove ManilaControllerAvailable condition #47
Change operand namespace #45
Rework to library-go #44
Bug 1837421: Set mounted share permissions to 777 #40
Update display name and operator description for CSV #38
Bug 1848146: Rename operator package to manila-csi-driver-operator #37
Force ‘cluster’ as CR name #35
Bug 1837859: Allow Manila CSI controller to update volumesnapshotcontents/status #31
Bump operator’s version to 4.6.0 #33
Bug 1839226: Implement self-signed certificates support for the driver and the operator #30
Use 4.5 images in the manifests #29
Update documentation and examples #28
Meet the CSI driver operator requirements #27
Bug 1835654: Update CSV manifest #18
Bug 1837219: implement ManilaDriver uninstallation #26
Bug 1837226: Make sure we do not have duplicate ManilaDriver entities #25
Bug 1835654: Add last applied annotations #24
Change image for example pods #22
Bug 1837210: Separate operator and driver namespaces #23
Bug 1834160: Rename CRD to ManilaDriver #21
Bug 1835654: Support seamless upgrades #20
Create manifest for new index image format #14
Automate security context constraints creation #10
Allow to redefine container images #13
Update Dockerfiles for OpenShift #12
Add Bugzilla component information #11
Update owners #9
Automate StorageClass creation #8
Automate credentials request creation #7
Add crd to OLM #6
Generate OLM catalog manifests #5
Reconcile secrets #4
Use official images #3
Add README.md #2
Full changelog

kube-proxy

SDN-4925: Revendor k/k to upstream 1.30.3 (for kube-proxy) #630
OCPBUGS-34279: ART sync and golang 1.22 update #629
OCPBUGS-34279: Updating kube-proxy-container image to be consistent with ART for 4.17 #623
OCPBUGS-26084: Fix scan issue #622
OCPBUGS-30431: CVE-2024-24786: bump pkg golang protobuf #620
SDN-4404: Kube 1.29 bump #618
SDN-4114: Do per-pod MCS/metadata blocking with nftables rather than iptables #581
NO-JIRA: Update README to note that openshift-sdn is deprecated #611
NO-JIRA: Move sdn to RHEL9 base image #598
OCPBUGS-25740: Updating ose-node-container image to be consistent with ART for 4.16 #599
OCPBUGS-23666: Add Snyk file to exclude directories on scan #604
OCPBUGS-25779: Updating kube-proxy-container image to be consistent with ART for 4.16 #600
SDN-4179: Metrics: Add metric for multicast enabled netnamespaces #603
OCPBUGS-25015: Updating kube-proxy-container image to be consistent with ART #596
OCPBUGS-25036: Use openshift-clients rpm rather than cli image #593
OCPBUGS-22077: update x/net to v0.17.0 #585
OCPBUGS-16788: Create IPAM files with 0600 permissions #584
SDN-4123: rebase sdn to kube 1.28.3 #580
OCPBUGS-18785: Controller: add flag for node name #578
OCPBUGS-19143: Updating kube-proxy images to be consistent with ART #575
OCPBUGS-19103: Updating ose-sdn images to be consistent with ART #574
Collect pod operation latency metrics properly #576
Live migration: Add flows that allow openshift-sdn to connect to ovnkube #569
OCPBUGS-17316: CVE-2023-3978: golang.org/x/net/html: Cross site scripting #571
OCPBUGS-16790: Change the permission of 80-openshift-network.conf to 600 #570
Dockerfile changes to build both rhel8 and rhel9 binaries #559
SDN-3900: rebase to 1.27.1 #555
OCPBUGS-12644: CVE-2022-41723 golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #538
OCPBUGS-3176: Enable IP Forwarding if disabled #549
OCPBUGS-13975: fix possible concurrent map read/write #546
OCPBUGS-13717: Use the ovsver build arg to infer the openvswitch short version number #534
Updating kube-proxy images to be consistent with ART #531
Updating ose-sdn images to be consistent with ART #530
OCPBUGS-12233: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) #535
OCPBUGS-12435: EgressNetworkPolicy DNS resolution does not fall back to TCP #532
Change fedora image to use latest upstream #523
Updating kube-proxy images to be consistent with ART #516
OCPBUGS-1370: save and delete the old egress network policy #525
Updating ose-sdn images to be consistent with ART #514
OCPBUGS-9985: Prefer local TCP endpoint for cluster DNS service #518
OCPBUGS-8007: Fix race in Egress IP Tracker start #515
Drop non-conntrack-based Service support #507
SDN-3635: OSDN kube 1.26.0 rebase 2nd attempt #510
Revert “SDN-3635: OSDN kube 1.26.0 rebase” #508
SDN-3635: OSDN kube 1.26.0 rebase #504
OCPBUGS-6714: Initialize egress node monitoring struct with previous reachability status #503
OCPBUGS-5842: Add /usr/bin/oc to image #495
OCPBUGS-4133: rebase kube to kube 1.25.4 #498
Add Tim R and remove Casey from OWNERS #493
Handle race condition to setup default vnid flows #490
iptables: use container iptables, not host’s #496
Update for 4.13 / go 1.19, including gofmt updates #481
OCPBUGS-95: Retry IP re-assignment on failure #480
OCPBUGS-95: Add node egress IP assignment resync #463
Bug 2050230: pass ResourceVersion:0 for kube List() calls #471
OCPBUGS-69: Generate egress ip metrics for sdn node #470
OCPBUGS-1533: rebase to kube 1.25.1 #458
OCPBUGS-256: fix network policy egress #459
Bug 2104953: rebase to 1.24, take 2 #450
Enable EgressIP on OpenStack #447
Bug 2081562: setup network policy rules during pod creation to fix postStart hook #439
Updating kube-proxy images to be consistent with ART #448
Bug 2101622: Revert ‘kube 1.24 rebase’; master #442
Bug 2079958: Add TopologyAwareHints support in kube-proxy. #426
Bug 2089350: kube 1.24 rebase #440
Bug 2067865: Bump prometheus/client_golang to 1.11.1 #432
Updating kube-proxy images to be consistent with ART #429
Updating ose-sdn images to be consistent with ART #427
Bug 2052332: use pods cache during reattach processing #411
Bug 2016534: Exclude the default drop bit from egress IP VNID #428
Bug 2016534: Masquerade in cluster traffic that is marked for egress IP #423
Bug 2063123: Remove node-tainting for too-small MTU #417
Bug 2050230: Use pagination when listing Netnamespaces #419
Bug 2062558: egressip: Continue to process other nodes if a node is not ready #418
Add unit tests for vxlan no track ip table rule #401
Bug 2061919: Fix releasing egress IP in cloud environments #409
Bug 2061916: mixed ingress and egress policies can result in half-isolated pods #408
Bug 2060553: another fix for mixed ingress and egress policies #406
Bug 2050230: Use pagination when listing resources #400
Bug 2060553: Separate the allPodsSelected into egress and ingress #404
Rebase SDN k8 1.23.4 #399
clean up OWNERS #392
Updating ose-sdn images to be consistent with ART #396
Updating kube-proxy images to be consistent with ART #397
move to-be-deleted userspace proxy code into sdn tree #393
Bug 2043802: Fix CloudPrivateIPConfig enqueueing during egressip reassignment #395
Bug 2038793: Use the kubeClient instead of the informer cache to fetch nodes for egress IP validation. #389
Bug 2039294: SDN controller metrics cannot be scraped by prometheus #388
Bug 2035439: Use cloud egress network config for verifying egress IP in cloud environment #387
Bug 2036622: Fix CloudPrivateIPConfig sync on sdn-controller restart #386
Handle MTU migration #381
Fix flaky check for capacity test for egress IP, and better doc blocs #383
Egress IP on public clouds #365
Block Alibaba metadata service IP #380
Adding --platform-type argument #379
NetworkPolicy ipblock except, port ranges #374
adding network policy egress to openshift-sdn #372
Bug 2024880: [EgressIP] move ct(commit) action from OVS group to flow #373
NP updates preparing for egress support #350
update for ART #369
WIP: Metrics: Add server for Egress IP/firewall #358
Run clearInitialNodeNetworkUnavailableCondition earlier #364
Add documentation about proxying/unidling #361
Bug 2008987: Remove locking from EgressIPTracker.Ping #359
Replace utilruntime.HandleError() with klog.Errorf() #356
Updating kube-proxy images to be consistent with ART #351
Bug 2003859: Fix up event recorder usage (again) #349
resync proxy startup code with upstream #352
remove a bunch of dead/useless code #345
Updating ose-sdn images to be consistent with ART #344
Bug 1966521: proxy: don’t re-check every userspace proxy rule on every change #342
Fix Dockerfile.fedora #333
README minor improvements #336
Bug 1958390: improve SDN’s OVS healthcheck and logging #306
Bug 1985336: Disable conntrack for vxlan traffic #335
Bug 1991551: update usage of Events for 1.22 rebase #332
Bug 1991565: misc cleanup #331
Bug 1989122: rebase to sdn-4.9-kubernetes-1.22.0-rc.0 #325
Bug 1984683: use new default leader election values to handle apiserver rollout on SNO #328
Bug 1989122: Fix hybrid proxier with EndpointSlice #329
Updating ose-sdn images to be consistent with ART #319
proxy: filter/delegate EndpointSlices as well as Endpoints #296
Updating kube-proxy images to be consistent with ART #321
print signal received by the signal handler #323
Bug 1942122: when assigning and releasing egressIP try more than once before failing #316
Bug 1971808: fix local-with-fallback #320
Remove Valadas from owners #283
fix a race condition in networkpolicy_test.go #312
Updating .ci-operator.yaml build_root_image from openshift/release #317
Bug 1948436: remove vxlan_monitor and OVS packet stat parsing #311
Bug 1959711: Reverse table order for egress IP and egress network policy set up #299
Bug 1953257: Fix invalid egress IP assignments in sdn-controller #295
Bug 1960284: Bump openshift/kubernetes for “local-with-fallback” #310
Bug 1964625: NETID duplicate check is only required in NetworkPolicy Mode #307
Bug 1964059: rebase to latest sdn-4.8-kubernetes-1.21.1 #305
Bug 1928851: prevent manually creating netns with existing NetID #294
Bug 1879077: ValidateMTU: check only the interface that holds the node ip #289
Bug 1952079: Revendor kubernetes to sdn-4.8-kubernetes-1.21.0-rc.0 #267
Bug 1953530: Fix flaky unit test TestEgressCIDRAllocation #293
Bug 1948999: Remove check enforcing single egress IP for automatic assignment #287
Bug 1952079: Don’t require EndpointSlice to be disabled #290
egress IP traffic load-balancing #277
Add a unit test to ensure we don’t change flows without changing ruleVersion #276
Fix multiple race conditions in networkpolicy_test.go #282
Add a networkpolicy test with empty namespaceSelector #278
Bug 1926931: Fix incorrect unmonitoring of egress nodes #275
Support allow-from-router feature using openshift-host-network namespace #262
Bug 1933711: EgressDNS: Keep short lived records at most 30s #263
Bug 1910378: networkpolicy: pass traffic through NAT to handle possible tuple collisions #269
Bug 1924527: CVE-2021-3121 gogo/protobuf lacks certain index validation #260
Bug 1919737: Prefer local endpoint for cluster DNS service #254
Bug 1850060: Make DNS queries for egress network policy async #251
Be less melodramatic when restarting due to OVS restart #248
Bug 1903414: Do not use egressIP on reply packets #236
Updating ose-sdn builder & base images to be consistent with ART #245
Updating kube-proxy builder & base images to be consistent with ART #246
Bug 1905761: Fix empty egress policy connectivity #239
Bug 1915027: Fix MCS-blocking iptables rules #243
Bug 1914284: Don’t try to generate NetworkPolicy flows for non-pod-network pods #240
Bug 1905761: Fix IP list for empty Egress network policy #233
Bug 1906844: Handle unsupported EndpointSlice and EndpointSliceProxying feature gates #230
update to kube 1.20 #227
Bug 1897073: Don’t throw an error for control plane VNID #220
Bug 1896958: NetworkPolicy performance (pod caching) #226
Make binaries not stripped #221
sdn: update to OVS 2.13 #162
Dockerfile: add tcpdump for debugging #201
Bug 1892376: Ignore if netns is already deleted while deleting ns #214
Modifications for klog v2. #207
Bug 1890130: fix pod creation deadlock #209
Owners: Remove Phil from reviewers #208
Bug 1878845: Fix ruleversion #204
Run metrics when using standalone kube-proxy #202
Updating ose-sdn builder & base images to be consistent with ART #199
Updating kube-proxy builder & base images to be consistent with ART #200
Allow running openshift-sdn with standalone kube-proxy #198
update egress dns code for dual-stack… #164
Add documentation to openshift/sdn #185
Bug 1882071: Fix bug in reflector not recovering from “Too large resource version” #196
Bug 1877794: Emit a warning and ignore if empty cidr is passed to kubeproxy #194
Bug 1878163: Updating images/sdn/Dockerfile.rhel baseimages to mach ocp-build-data config #192
Bug 1878163: Updating images/kube-proxy/Dockerfile.rhel baseimages to mach ocp-build-data config #193
Bug 1762580: Enable conntrack for ovs-multitenant unless userspace proxy #189
Bug 1856144: bump golang.org/x/text to v0.3.3 #184
Bug 1878731: vxlan_monitor_test: fix flake #186
Bug 1848478: Invalid egressCIDR value causes sdn pods to fail on startup #169
Bug 1871732: Fix nodeInformer call in EgressIPManager. #175
Bug 1872080: Updating images/kube-proxy/Dockerfile.rhel baseimages to mach ocp-build-data config #176
Bug 1872080: Updating images/sdn/Dockerfile.rhel baseimages to mach ocp-build-data config #177
Bug 1859451: Add NodeInformer to EgressIP #171
Bug 1857743: Port stuck open when ep deleted before svc in unidling mode #172
Remove unused packages from Dockerfile #165
Retry all OVS executions, not only transactions #159
Add support for –may-exist when adding the bridge in sdn #158
Bug 1851182: Retry commiting OVS transactions in case of failure #153
build-image-sdn-test: Make binaries debuggable #142
kube-proxy use node-ip to detect the IP family #152
OWNERS: sync to CNO #151
Bug 1824203: Fix egressVXLANMonitor and egressIPTracker deadlock #139
Bug 1826339: vendor: bump our k8s vendor #138
Bug 1832153: Upstream v1.18.2 rebase #136
Bug 1825355: node/vnids: Correctly handle case where NetNamespace watch is far behind #134
Bug 1824203: Make egressVXLANMonitor updates channel buffered #132
Bug 1822351: Fix hybrid proxier for iptables.Monitor #127
Bug 1812052: Update HACKING.md rebase to use go modules #117
Bug 1816394: handle pod updates correctly in networkpolicy #124
OWNERS: add bugzilla info #125
Drop –url-only-kubeconfig, require –node-name / –node-ip #121
Bug 1813846: handle default-deny rule properely #122
Add –node-name and –node-ip flags to openshift-sdn-node #120
proxy: It should be possible to enable the profiling endpoint #119
Bug 1811739: Fix kube_proxy metrics #114
Do not check err, but ok for K8S_POD_NAMESPACE and K8S_POD_NAME #107
Bug 1810505: Pass -w to iptables when adding anti-metadata-server rules #115
Bug 1804178: Revert excessive proxy logging #106
Bug 1803149: Rebase SDN to kubernetes 1.17.2 #108
Bug 1801357: Migrate from glide to go modules #102
Bug 1796157: Fix handling of VNID 0 with NetworkPolicy #103
Bug 1794022: Update deps, including informer fix #93
Add rcarrillocruz as approver #97
Bug 1787488: Clean up stale egress IP iptables rules on startup #88
Bug 1790440: Fix reinitialization of deny-all NetworkPolicy state on restart #96
Drop old separate node/controller images #86
Bug 1780387: host-local plugin should be built and executed within container #82
Bug 1782847: sdn: undo debug logging #84
proxy: add handler with same ResyncPeriod as shared informer. #79
slightly improve logging #57
Remove some gratuitous CIDR unparsing and reparsing #76
how to do a Kubernetes rebase #32
Additional event logging for add/delete/update informer events #70
Add IPv6 support and multiple CIDR support to SubnetAllocator #66
Bug 1768926: Ignore unsupported NetworkPolicy rules, rather than treating them as errors #69
Simplify CNI plugin build, copy updated rules to images/sdn/ #67
client: Use protobuf for SDN clients #64
sdn-cni-plugin built without openssl and cgo #62
UPSTREAM 83911: Fix DeltaFIFO Replace method #60
Create a merged node/master image #59
Fix pod startup reattach/kill loop #58
Remove watching Endpoints of Headless Services #54
Bug 1760103: Adjust SDN setup so AlreadySetUp check will fail on a half-set-up node #52
Bug 1753216: Clean up egress IPs on startup #51
Make DNS querying more efficient by querying once per dns name #48
Bug 1751458: Fix parsing of IFLA_GRE_COLLECT_METADATA #49
Add support for IPBlocks #26
glide.yaml cleanup #41
update OWNERS #46
further NetworkPolicy caching fixes #42
Bump dependencies and assorted code fixes for Kubernetes 1.16 #38
Bug 1752636: networkpolicy: add a namespaceSelector cache #36
Bug 1751954: images: disable cgo #34
Bug 1745028: adding support for undefined port in networkpolicy definition #31
Remove one layer of proxy wrapping #29
Do not cache egressLink details #27
Stop building CNI loopback and host-local plugins #24
Bug 1740741: Initializing runningPods on SDN bootup for 4.x #20
add LICENSE #22
proxy: add a bit more logging around proxy type and sync status #23
Bug 1700431: Pass egress IP packets to conntrack #19
Dockerfiles: verify that packages are installed #21
Drop accidentally not-dropped duplicate iptables scripts #18
Unidling: minimize iptables lock contention #8
iptables: partial #13 revert, skip masq in chain #17
Add kube-proxy image #14
Untaint node on startup if node is tainted and MTU is ok #11
Allow DNS port when performing iptables filtering on cloud provider metadata IP #12
Bug 1726045: skip OPENSHIFT-MASQ for traffic already marked for masquerade #13
switch to SDN only fork of k/k #10
Initial README #9
Route to SDN irrespective if macvlan mode is used or not #6
Add arping to openshift-sdn image #7
trigger CI #5
Fix Makefile and .gitignore #4
prime repo #2
Drop –config support from openshift-sdn #23205
sdn: suppress misleading OVS healthcheck log messages #23229
Taint node if default interface MTU is less than configured #22571
Fix openshift-sdn –proxy-config parsing #23217
More SDN staging #23193
Full changelog

openstack-cinder-csi-driver-operator

NO-JIRA: Add more docs for configuration options #167
STOR-1596: Bump all deps for 4.17 #176
OCPBUGS-30949: Add config map hooks #168
OCPBUGS-34870: Correct out-of-bounds check #170
OCPBUGS-34276: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.17 #169
OCPBUGS-28230: enforce termination message policy on all platform pods #166
OCPBUGS-26924: Add healtcheck for node-registrar #161
OCPBUGS-30951: Relax requirement to enable topology #164
STOR-1574: Bump all deps #159
OCPBUGS-28937: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 #160
STOR-1574: Bump library-go #158
STOR-1714: Release leadership on SIGTERM #155
OCPBUGS-25340: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #152
STOR-1688: Chore: add .snyk file to ignore false positives #151
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #150
OCPBUGS-25340: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #149
OCPBUGS-24844: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #145
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #146
STOR-1281: Make Cinder CSI Driver Topology feature configurable #127
OCPBUGS-23878: OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 #141
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #143
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #140
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #134
STOR-1276: Enable support for mounting volumes with SELinux context #129
OCPBUGS-19213: Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #133
OSASINFRA-2139: Document how we manage configuration #110
STOR-1436: Restart openstack-cinder-csi-driver-controller Pods if metrics-serving-cert changed #128
Remove Dockerfile.rhel7 #126
Configure User Agent #123
OCPBUGS-16654: Revert revert “STOR-1065: Rework sidecar bindings to b… #119
OCPBUGS-16783: Chore: Update OWNERS and OWNERS_ALIASES #121
OCPBUGS-16526: Bump library-go to remove dependency on goproxy #122
OCPBUGS-16678: Fix SCC admission failure race during initial deployment #120
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #118
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #117
OCPBUGS-14824: Bump cinder-csi-driver-operator library-go #116
STOR-1168: Bump common libraries #115
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #113
OCPBUGS-12651: Bump golang.org/x/net@v0.9.0 #114
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #112
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #111
OSASINFRA-3000 Prefer a Cinder CSI-specific config map #82
OCPBUGS-8683: Add management workloads annotations #109
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #108
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #107
STOR-947: support disabling default StorageClass via ClusterCSIDriver #103
Bug 2106736: Add multiplePVsSameID capability #106
STOR-1078: Add hostPaths necessary for SELinux mounts #105
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #101
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #100
Bug OCPBUGS-2845: Add SecretHashAnnotation to node service #96
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #94
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #93
STOR-858: Bump github.com/openshift/* and k8s.io/* #92
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #90
Bug 2090662: SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #88
Bug 2090662: SWEET32: Improve TLS configuration for Kube RBAC Proxy #85
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #84
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #83
Bug 2065597: Add support for dynamic, user-managed config #78
Mark CSI StorageClass as the default one #80
Add OpenStack team to approvers #81
Bug 2074292: Address CVE-2022-27191 #79
Bug 2067869: Address CVE-2022-21698 #77
Remove Ephemeral mode from the CSI driver #76
Bug 2061732: Fail gracefully on failure to populate cloud info #74
Set fsGroupPolicy in CSIDriver #75
Bump gophercloud #73
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #68
Bug 2043130: openstack-cinder: Add external-snapshotter permissions to patch snapshots #67
Bug 2038934: Add custom CA bundle support #66
Bug 2038053: Bump k8s to 1.23 #65
Bug 2027685: relax health probes against Cinder API #63
Bug 2028484: CSI driver’s livenessprobe does not respect operator’s loglevel #62
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #60
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #57
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #56
Bug 1993931: Storage operators use older kubernetes client #55
Bug 1989215: [openstack-cinder-csi-driver-operator] csi-liveness-probe is not deployed #52
Bug 1948090: Fix number of replicas #53
Bug 1948090: Deploy multiple replicas of CSI Controller Service #51
Remove Fedosin from Owners #46
Bug 1909058: Explicitly set default value for ReclaimPolicy #50
Start using embed for assets #42
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #48
Updating .ci-operator.yaml build_root_image from openshift/release #47
Bug 1960732: delete manifests and update readme #45
Bug 1936871: support clouds with multiple availability zones #43
Bug 1905849: create default VolumeSnapshotClass #40
Bug 1952211: Fix error when mounting /var/lib/kubelet/pods #41
Bug 1957149: Revert “Bug 1905849: create default VolumeSnapshotClass” #38
Bug 1905849: create default VolumeSnapshotClass #36
Bug 1954003: Fix snapshotter metrics endpoint #37
Bug 1947774: fix imagePullPolicy to ifNotPresent #35
Cinder: Add metrics scraping #34
Bug 1909136: Pass cluster ID to CSI driver #33
Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART #32
Bug 1918562: bump library-go #30
Bug 1933184: Add maxUnavailable to DaemonSets #28
Fix logLevel propagation to the operands #27
Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART #25
Cleanup: Remove serviceName from controller manifest #26
Bug 1908998: add secret hash annotation hook to the controller #24
Bug 1918140: Fix sync of config.openshift.io informer #23
Bug 1902547: Add Mike and Martin to OWNERS #22
Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART #13
Bug 1903062: Make default fsType explicit in csi-provisioner #19
Bug 1902547: Ensure cinder-csi-driver-controller runs on master nodes #17
Bug 1906274: Set allowVolumeExpansion for standard-csi SC #15
Bug 1912947: Include proxy ENV In CSI driver #21
Bug 1902546: Allow cinder-csi-driver-node pods to run everywhere #18
Bug 1902600: Set csi-snapshotter imagePullPolicy to IfNotPresent #16
Bug 1902545: Only run driver-node on Linux workers #14
Enable topology support #11
Prepare scripts and manifests for e2e tests #8
Fix resources in deployment template #12
Enable Cinder CSI to work with self-signed certificates #9
Do not set NFS_DRIVER_IMAGE variable #7
Add README.md #6
Configure the driver #4
Bug 1879475: Update library-go to include explicit reasons #5
Bug 1881046: Add manifests and regenerate bindata #2
Initial code for operator #1
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github