Back to index

4.3.35

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:557107b1a5911d73d9fa749cf103cc3b45d688bf0da991471279042eec84f830

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

• 4.3.33 (changes) - F S F S
• 4.3.32 (changes) - Failed Failed
• 4.3.31 (changes) - Failed Success
• 4.3.29 (changes) - Failed Success
• 4.3.28 (changes) - Failed Failed
• 4.3.27 (changes) - Failed Success
• 4.3.26 (changes) - Failed Success
• 4.3.25 (changes) - Failed Failed
• 4.3.23 (changes) - Failed Success
• 4.3.22 (changes) - Failed Success
• 4.3.21 (changes) - Failed Success
• 4.3.19 (changes) - Failed Success
• 4.3.18 (changes) - Failed Success
• 4.3.17 (changes) - Failed Failed
• 4.3.13 (changes) - Failed Success
• 4.3.12 (changes) - Failed Success
• 4.3.11 (changes) - Failed Failed
• 4.3.10 (changes) - Failed Success
• 4.3.9 - Failed Success
• 4.3.8 (changes) - Failed Success
• 4.3.5 (changes) - Failed Success
• 4.3.3 (changes) - Failed Success
• 4.3.2 (changes) - Failed Failed
• 4.3.1 (changes) - Failed Failed
• 4.3.0 (changes) - Failed Success
• 4.2.36 (changes) - F S S F F F F
• 4.2.34 (changes) - Failed Failed
• 4.2.33 (changes) - Failed Success
• 4.2.29 (changes) - Failed Success
• 4.2.28 (changes) - Failed Failed
• 4.2.27 (changes) - Failed Success
• 4.2.25 (changes) - Failed Failed
• 4.2.23 (changes) - Failed Failed
• 4.2.22 (changes) - Success

Upgrades to:

• 4.4.32 (changes) - Success
• 4.4.29 (changes) - Success
• 4.4.28 (changes) - Success
• 4.4.27 (changes) - Success
• 4.4.26 (changes) - Success
• 4.4.25 (changes) - Success
• 4.4.24 (changes) - Success
• 4.4.23 (changes) - Success Success
• 4.4.22 (changes) - Success Failed
• 4.4.21 (changes) - Success Success
• 4.4.20 (changes) - Failed Success
• 4.3.40 (changes) - Success
• 4.3.38 (changes) - Success Success

---

Loading changelog, this may take a while ...

Changes from 4.3.9

Created: 2020-09-02 03:08:29 +0000 UTC

Image Digest: sha256:557107b1a5911d73d9fa749cf103cc3b45d688bf0da991471279042eec84f830

Release 4.3.35 was created from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-09-01-015751

Components

• Kubernetes 1.16.2

Rebuilt images without code change

• aws-machine-controllers git 86a378fe sha256:71f2552c7be7361d4e28e7c36e20802c088917696e506760273fac92be50ea2a
• baremetal-machine-controllers git a2a47790 sha256:8103861017a2fb33675062a73af9765da286337b2d21f5790ade0020985e779a
• cluster-bootstrap git 106f76b4 sha256:46cc53787e75413bcddc967452649e4ab4e94826269946966f57dff68332e589
• cluster-config-operator git d5ddbcdd sha256:cf435388f8bd037254129a6d86c58b8feb81854af6f610f690e9e92ad416abaa
• cluster-ingress-operator git d86b0316 sha256:10b1798c63b7700f19ae29d9786ffa62fdd20713108b199d13763e20d2392bde
• cluster-svcat-controller-manager-operator git 727d37d9 sha256:d77957f859d67feff23886d3e868f3d15d9dfb6a7c5471f6a9abd8dfb1c225c7
• cluster-update-keys git cca4ce69 sha256:bad449c2ca44637e214e160f8bac19646c0aa6a0a4471fdf0b0cef4e387469db
• configmap-reloader git 841b0bfe sha256:a981ca1452765021bdf94079e0b91a62980eb9bafd340e1001c94ab3f653fa6b
• container-networking-plugins git 386465fe sha256:7038367facd4ea0a6eb001a9ecc57fed26b4a9a25181c6b5c321f8023dce325d
• coredns git 052209af sha256:9a984a555dd4d08b9c3572ed367fe27c6b38d1b5c03a3f6defb85eab983a9293
• docker-registry git 7511ca65 sha256:921ee21bb2bf3f1d62ccee1d6828c3c41fb99438ec3327709ce70bec6c532d0e
• grafana git e2261e14 sha256:3919074ce21f200676213453508ae262175a9b66f528a730a88915e5739ab62e
• ironic-hardware-inventory-recorder git 5f57661e sha256:c57852ba4bcf5cc38e7e0e88ba752c854fca2ea5e6023fa9c65910aec655e40f
• ironic-inspector git b83630ce sha256:2ed0cc51189f8b2238277eeb5700b6c47e22af1e9d08ec50cd100fb8605b5f86
• ironic-ipa-downloader git 9a9e4d48 sha256:4a3442ba6bb3301b842067cc6d75a94ecc775affef250b6c8259946fc25fea28
• ironic-machine-os-downloader git 2405ba63 sha256:402442e59e2f15d4099847ee8b7dcbb65a5a2837cfe50e4ec8db221c06054498
• ironic-static-ip-manager git e33314bd sha256:3a958a211e0be4b6db50ed899745d7a33d532365b4bb65efe199777a03457428
• k8s-prometheus-adapter git 3d1c61e9 sha256:b6e78e1702f804f23f55eaaebb1587487a3ffd1fd1b9b769e76cae85047db761
• kube-client-agent git 878550ca sha256:b0f7e230d2d90cccc3f9e5087dfda095dbf9a48d1ca07dc5c5ad9e2709bd7500
• kube-etcd-signer-server git 878550ca sha256:3933cd5fd8de1ecc2dea19145045a97006d2350d1e50ef00ccd4560e19513a8c
• kube-rbac-proxy git 84e7dac6 sha256:a7389cda6a999df24dac94247342a5e14485dcf93ed75ac68c5c2ed484a8ecb3
• kube-state-metrics git 83f9fc56 sha256:a3128c4131c426a1df30d544daa9196f7049411bf73445ed41b220d6442a0aa0
• local-storage-static-provisioner git da340b47 sha256:d4d6358304f5613591b4103a9f2948a846f37263cd7c1da24ffee6f0e470cb7d
• machine-os-content sha256:4192378a72aa43618505273119881e6dd485f9ef1098e156d4ee022a085a1012
• mdns-publisher git 24135de2 sha256:787bf5229625711a01e31e824fae9c5b9a9c6ff66b4d82168907675bbb01d8d1
• multus-admission-controller git ead10a3c sha256:4c550e27a12cbb406638fd79b34df312066d27d1f26e798597a32406824a2caf
• multus-route-override-cni git 1322dc43 sha256:8095b3cd97dcf5b08833c0ca5a2e3eae50810c785d22099034978078bc0407f1
• multus-whereabouts-ipam-cni git 9cca449d sha256:17c89408d027303022880396641e47d210ea6f5e0e77c2e75e666a5c5ae12292
• must-gather git 23037ad1 sha256:58bba19084b2c4ead3bad2575491cd98c2475c80934c75cc01da2b91ce3fc75e
• oauth-proxy git d5df3188 sha256:0b8044828bcc1c426088901c1e61d0e0af2360afc7808b00578be7dc257b0a9e
• openstack-machine-controllers git 7aa99e29 sha256:3b1a4d2068f5aceaba452edb7dd4c2f136bce38b1ac37f74459c8eb3049a059e
• prom-label-proxy git b8153a7f sha256:eae3e6947f6bd5fd3530a51bf53b50d00ea4dbe08cdb9f924098bf569ff90bd7
• prometheus git c086098d sha256:ca657980d4b9c432afb4f16ab72a2ddd309649363bbc0f1e13ef952f7015ae90
• prometheus-alertmanager git 11aa2a87 sha256:f95c4d173bf641a0f8e26a6deb91defa3768cee50a008558b3699f146b8c566e
• prometheus-node-exporter git d0b913aa sha256:06875d12f7064ce086476bbf05551d4494112fca059001b51c435c18c30783f9
• service-ca-operator git dd7235b4 sha256:2d26d20edf48a1dc5c1fce41da47e477753d483d2e1c2cac0ed2955a0f489c7b
• service-catalog git 6f75f804 sha256:ff247a81ce4f09c0266a92e415347f86db66badebad46cbbc1f3a36bb648314c
• thanos git 4aaa91e9 sha256:1d5b6719e5f6be52891cb83a5384adea75af4d0a7084d3d9965105110a581177

baremetal-installer, installer, installer-artifacts

• Bug 1862114: bump RHCOS images for CVE-2020-10713 #3987
• Bug 1851949: Add the –pod-infra-container-image flag to the kubelet service #3815
• Bug 1849171: OpenStack: Wait for router interface to create FIP #3780
• BUG 1826073: Disable client side rate limiting in Azure. #3714
• Bug 1842531: images: libvirt: add yq to libvirt CI image #3699
• Bug 1840230: data/azure/vnet: switch to HTTPS probes for lbs #3665
• Bug 1820222: libvirt: Bump bootstrap memory to 5G for ppc64le #3428
• Bug 1828632: Don’t fail on unavailable features on OpenStack #3514
• Bug 1820591: Add retries to DeleteSwiftContainer #3408
• Bug 1824921: [release-4.3] OpenStack: Correcting the instructions to refresh a CA cert #3466
• Bug 1824239: Validate Azure regions #3460
• Bug 1825973: OpenStack: Replace remote_group_id with remote_ip_prefix #3481
• Bug 1825478: OpenStack CI Install awscli from zip #3478
• Bug 1810492: OpenStack: pass all CAs to bootstrap ignition #3242
• Bug 1817717: Backport Azure UPI to 4.3 #3351
• Bug 1818140: Backport adding groundwork for multi-arch images #3233
• Bug 1786364: filter out unsupported regions in Azure #3320
• Bug 1816705: images/libvirt: remove epel-release #3339
• Bug 1816264: Generic libvirt installer image for CI #3331
• Full changelog

baremetal-operator

• Bug 1816122: Don’t assume IPv4 in introspection data #54
• Full changelog

baremetal-runtimecfg

• Bug 1843488: Move haproxy listening port due to conflict #66
• Full changelog

cli, cli-artifacts, deployer

• Bug 1806782: Allow a file:// release argument to release mirror #458
• Bug 1808221: bump(golang.org/x/crypto|net|sys) #429
• Bug 1806782: Allow a file:// release argument to release mirror #328
• Bug 1821648: Zeroing BearerTokenFile for prune #376
• Bug 1790954: fix version ldflags #255
• Bug 1802262: Use polymorphic helpers from exec, when reading a pod #294
• Full changelog

cloud-credential-operator

• Bug 1808222: CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic #221
• Bug 1816704: handle old Infrastructure objects without PlatformStatus #169
• Full changelog

cluster-authentication-operator

• Bug 1842465: explicitly set operator’s and operand’s container’s root file system to writable #297
• Bug 1824167: The oauth server should wait until it is out of rotation to shut down #257
• Full changelog

cluster-autoscaler

• BUG 1824215: Raise maximum memory capacity difference #144
• BUG 1805160: Ensure DeleteNodes doesn’t delete a node twice #129
• Full changelog

cluster-autoscaler-operator

• Bug 1807762: Drop run-level #154
• Bug 1814091: ROKS - remove additional autoscaler manifests #138
• Full changelog

cluster-dns-operator

• Bug 1859685: Tolerate all taints #186
• Full changelog

cluster-image-registry-operator

• Bug 1832144: Assure storage bucket names in lowercase #541
• Bug 1836753: Use release-4.3 api #564
• Bug 1810563: bootstrap HA configuration #536
• Bug 1825719: update object dumper #533
• Bug 1830363: removing verify-sec / gosec #544
• Bug 1816656: update ClusterOperator object even if operator is unmanaged #504
• Bug 1820242: nodeca daemon should tolerate all taints #511
• Bug 1808426: ignore most kube-system events #503
• Bug 1815124: force path style for custom endpoints #500
• Full changelog

cluster-kube-apiserver-operator

• Bug 1829576: Add e2e test that ensures stale condition is removed #840
• Bug 1802161: regenerate-certificates command blocked by error illegal base64 data at input byte 3 #765
• Bug 1822770: Normalize CPU requests on masters #825
• Bug 1827337: Remove stale condition DefaultSecurityContextConstraintsUpgradeable #838
• Bug 1820542: certrotationcontroller: fix typo calling wrong internal LB func #814
• Bug 1823921: Revert SCC Upgradeable False #830
• Bug 1810184: Components using globs in Dockerfile COPY commands may break on OCP 4 #816
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1853171: Fix gce cloud provider permissions #427
• Bug 1822770: Normalize CPU requests on masters #395
• Full changelog

cluster-kube-scheduler-operator

• Bug 1848583: bump(library-go): Add resource requests to installer/pruner pods #256
• Bug 1822770: Normalize CPU requests on masters #239
• Full changelog

cluster-machine-approver

• Bug 1815578: ROKS - remove ClusterMachineApproverDown prometheus rule #66
• Full changelog

cluster-monitoring-operator

• Bug 1818806: jsonnet/*: adapt resource requests #852
• Bug 1818806: remove cpu limits for config reloader #848
• Bug 1812382: Enable discovery of Podmonitors Custom Resource across namespaces #694
• Bug 1807141: jsonnet/rules.jsonnet: Add MultipleContainersOOMKilled alert #692
• Bug 1814736: Exclude Kubernetes control plane rules when running on IBM Cloud #713
• Bug 1791194: Removing KubeVersionMismatch alert #612
• Full changelog

cluster-network-operator

• Bug 1857744: [release-4.3] Set timeoutSeconds to reflect expected timeout for OVS commands #725
• Bug 1846344: Remove dead member from LB pool. #666
• Bug 1851338: Split etcd sg rule ports range into different sg rules #680
• Bug 1846459: Recreate DNS service upon Octavia upgrade #667
• Bug 1844135: Setting resource request for kube-proxy deployment #658
• Bug 1807670: Fixes to reliably save/restore flows #626
• Bug 1834247: Don’t override containernetworking binaries in SDN and Kuryr #634
• Bug 1834858: Kuryr: Remove old SG rules on upgrade #637
• Bug 1832311: Kuryr: Tighten security groups #621
• Bug 1821294: Normalize CPU requests on nodes #587
• Bug 1814352: Delete admission controller if double listeners is supported #599
• Bug 1824866: [release-4.3] Fix dhcp daemon api version #598
• Bug 1775838: Back-port, OVNKubernetes: introduce OVS anti-selector #492
• Bug 1821166: [Back-port 4.3] Remove logfile from ovnkube configmap #567
• Bug 1808997: Ensure no API LB recreation happens upon Octavia upgrade #517
• Full changelog

cluster-node-tuned

• Bug 1825007: Fix tuned reload behaviour on SIGHUP for invalid tuned profiles. #38
• Full changelog

cluster-node-tuning-operator

• Bug 1826167: Mount host’s /etc/sysctl.{conf,d/} to enable sysctl override from the host. #128
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1837353: encryption: don’t degrade when daemonset is not found #365
• Bug 1822770: Normalize CPU requests on masters #351
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1867175: account for nil DaemonSet returned from library-go #168
• Bug 1854133: ensure progressing is not set to false if version is missing #161
• Full changelog

cluster-policy-controller

• Bug 1829328: use patch when updating namespace #26
• Full changelog

cluster-samples-operator

• Bug 1826028: revert pr 177; no override jenkins* registry hosts for mirrors #263
• Bug 1835996: ensure s390/ppc64le platforms bootstrap as removed following upgrade #285
• Bug 1841996: correctly handle removed templates watch events as part of an upgrade #280
• Bug 1835996: avoid listing file system content for unsupported architures #273
• Bug 1829083: copy install pull secret when boostrapped as removed #267
• Bug 1814396: abort metrics in general if removed/unmanaged #251
• Bug 1811206: purge removed imagestreams as a part of upgrade from progessing/impor… #243
• Full changelog

cluster-storage-operator

• Bug 1860100: Includes validation check for VolumeSnapshot v1alpha1 CRDs #63
• Full changelog

cluster-svcat-apiserver-operator

• Bug 1813488: set Upgradeable to true #84
• Full changelog

cluster-version-operator

• Bug 1844117: pkg/cvo/sync_worker: Do not treat “All errors were context errors…” as success #380
• Bug 1820231: loosen upgradeable condition to allow z-level upgrades #315
• Bug 1783054: Add signature verification in airgapped environments #340
• Full changelog

console

• Bug 1825722: Handle undefined MachineConfigPools status #6000
• Bug 1827747: Register Subscription list page from plugin #5163
• Bug 1796079: Backport OLM filter by OS and ARCH #4928
• Bug 1829046: removes techpreview badge from serverless #5220
• Bug 1840765: Fixed legends on data consumption card #5600
• Bug 1829276: fix(prun): Rerun cancelled runs | release-4.3 #5228
• Bug 1839036: handle embedded pipeline spec in pipelinerun scenario #5536
• Bug 1819289: Fix navigation separator background colour #4864
• Bug 1821647: Correctly handle Unicode characters in pod terminal #5198
• Bug 1804708: only show “Create Project” option in project dropdown i… #4369
• Bug 1821852: Hide OpenShift Cluster Manager when branding is azure #4957
• Bug 1798130: add error boundary around OLM descriptors #4241
• Bug 1823726: Decode Noobaa secret details before passing to SecretValue in OBC page #4993
• Bug 1818980: Specify ts-loader configFile in webpack.config.ts #4859
• Bug 1813185: Add stable-4.4, fast-4.4 and candidate-4.4 channel for 4.4 release #4727
• Bug 1819941: Fix PackageManifest access review #4902
• Bug 1800327: fix runtime error creating PVC with no storage class #4896
• Bug 1819603: Limit Bucket Class search to storage namespace in OBC creation page #4869
• Full changelog

console-operator

• Bug 1836939: Bump godeps to get fix from library-go#799 #430
• Bug 1813302: Update oc clidownload cr to indicate that certain builds are unsupported #409
• Full changelog

docker-builder

• Bug 1832975: use of ARG step in Dockerfile causes panic in imagebuilder #152
• Bug 1821861: manage-dockerfile: use the original form of ENV/LABEL #149
• Full changelog

etcd

• Bug 1815634: bump etcd v3.3.22 #53
• Automated cherry pick of #11817 on release-3.3 #11856
• Automated cherry pick of #11652 #11670 #11710 #11753
• Automated cherry pick of #11638 on release-3.3 #11665
• Automated cherry pick of #11630 to release-3.3 #11632
• Automated cherry pick of #11613 to release-3.3 #11623
• Automated cherry pick of #10218 #10468 on release 3.3 #11378
• Automated cherry pick of #11374 on release 3.3 #11394
• Automated cherry pick of #11308 on release-3.3 #11314
• Automated cherry pick of #11247 #11253
• cherry pick “etcd_cluster_version” metric” (#10257, #11233, #11254, #11265) to release-3.3 #11261
• scripts: avoid release builds on darwin machine. #11245
• Full changelog

gcp-machine-controllers

• Bug 1837124: Add the machine’s name as a known NodeInternalDNS #92
• Full changelog

haproxy-router

• Sync OWNERS with master branch #164
• Bug 1816540: [4.3] Backport “remove proto-version header field” #105
• Bug 1818856: Wildcard is not needed to copy subdirectory in dockerfile #101
• Full changelog

hyperkube, tests

• Bug 1852857: UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e #25344
• Bug 1860832: Ensure Azure availability zone is always in lower cases #25327
• Fix commit checker #25368
• Bug 1867402: Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 #25394
• Bug 1845773: [release-4.3] kubelet: block non-forwarded packets from crossing the localhost boundary #25144
• Bug 1843877: UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage #25063
• Bug 1851606: remove problematic upstream client plugin test #25215
• Bug 1838196: stop printing usage help when the server commands exit #25003
• Bug 1847089: UPSTREAM: 86691: fix: azure disk could not mounted on Standard_DC4s/DC2s #25110
• Bug 1848976: reenable jenkins e2e in e2e-gcp-builds #25171
• Bug 1848622: [release-4.3]: UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV #25138
• Bug 1841988: more upstream to installed template switch in image-eco (django this time) #25046
• Bug 1822487: UPSTREAM: 89794: Clean up event messages for errors #25049
• Bug 1830093: provides a temporal fix to improve CRD publishing e2e tests in an HA setup #24940
• Bug 1829959: [release-4.3] Introduce IBMCloud provider, skip/fix tests #24829
• Bug 1835948: unskip template extended tests #24983
• Bug 1822680: UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin #24855
• Bug 1798461: makes unavailableGauge metric to always reflect the current state of a service #24501
• Bug 1830130: Fix nil reference when accessing un-migrated platform status #24810
• Bug 1813847: fixes configmap “extension-apiserver-authentication” not found #24699
• Bug 1822955: UPSTREAM: 88734: Work-around for missing metrics on CRI-O exited containers #24860
• Bug 1821341: UPSTREAM: 88440: Report deleted pod status correctly #24841
• Bug 1820266: use rbac vs direct scc edit for s2i root bld test #24821
• Bug 1817618: make s2i-dropcaps more reliable by not depending on a yum install to #24784
• Bug 1817040: [4.3] UPSTREAM: 88507: Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs #24763
• Bug 1816408: UPSTREAM: 87913: Add code to fix kubelet/metrics memory issue #24758
• Bug 1815944: Pick up Ginkgo test performance fix to reduce e2e CPU usage #24746
• Bug 1806408: Ensure upgrade tests verify application disruption #24726
• Full changelog

insights-operator

• Bug 1825758: Collecting config maps #105
• Bug 1821149: Cherry-pick release 4.3 Support for specific http proxy for the service #91
• Bug 1805919: Insights operator does not require being in an openshift run-level to function #80
• Full changelog

ironic

• Bug 1847317: Add WORKDIR to builder #82
• Bug 1810078: Copy iPXE binaries directly to /shared at runtime #61
• Full changelog

jenkins, jenkins-agent-maven

• Bug 1819530: update subversion plugin #1131
• Bug 1847452: Set OPENSHIFT_JENKINS_IMAGE_VERSION #1083
• Bug 1843941: bump jenkins to 2.222.1 and update plugins #1067
• Bug 1848335: [release-4.3] Support Nodejs 12 Agent #1075
• Bug 1826172: handle ingress certificate signed by custom ca #1049
• Full changelog

jenkins-agent-nodejs

• Bug 1847452: Set OPENSHIFT_JENKINS_IMAGE_VERSION #1083
• Bug 1843941: bump jenkins to 2.222.1 and update plugins #1067
• Bug 1848335: [release-4.3] Support Nodejs 12 Agent #1075
• Bug 1826172: handle ingress certificate signed by custom ca #1049
• Full changelog

keepalived-ipfailover, pod

• Bug 1851398: Add iproute package to get ss tool for port wait #22
• Full changelog

kube-proxy, sdn

• Bug 1859869: [release-4.3] Add support for –may-exist when adding the bridge in sdn #167
• Bug 1853198: [release-4.3] Backport OVS-retries #156
• Bug 1840762: Fix egressVXLANMonitor and egressIPTracker deadlock #146
• Bug 1839109: [backport-4.3] node/vnids: Correctly handle case where NetNamespace watch is far behind #144
• Bug 1804745: Revert excessive proxy logging #109
• Bug 1816390: handle pod updates correctly in networkpolicy #129
• Bug 1820778: fix health check in standalone kube-proxy #126
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1786298: Bunch of kuryr-daemon NetlinkError fixes #292
• Bug 1845923: Get RPM and Kuryr version from git #273
• Bug 1852834: Fix hacking min version to 3.0.1 #294
• Bug 1846259: Ensure LB resources with ERROR status are deleted #276
• Bug 1846228: Skip LB sg update when no endpoint is found #275
• Bug 1828699: Ensure NP are enforced on SVC with different port and target port #227
• Bug 1829840: Ensure LB state annotation sg matches the SG on the LB #225
• Bug 1818067: Ensure no attempt to deleted sg rules owned by Octavia happens #208
• Full changelog

libvirt-machine-controllers

• BUG 1859308: fix memory leak that leads to unresponsive libvirt URI #205
• Bug 1818149: Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le #189
• Full changelog

machine-api-operator

• BUG 1807762: Drop run-level #500
• BUG 1807762: Remove explicit securityContext and add granular securitycontextconstraints “use” permissions in machine-api-controllers clusterRole #635
• Bug 1814092: ROKS: remove machine related CRDs from cluster [4.3] #531
• Full changelog

machine-config-operator

• Bug 1845494: daemon: fix restoring file logic to avoid unnecessary deletion #1796
• Bug 1855304: Parse the kubelet.conf data after an update #1916
• Bug 1846358: MCD: tolerate all taints #1816
• Bug 1826021: Fix a problem with a greedy regular expression matching more than needed #1913
• Bug 1851949: Set the pod-infra-container-image flag in kubelet to ocp pause image #1877
• Bug 1840300: kubelet: add log level environment variable #1752
• Bug 1827540: pkg/server: disable weak TLS versions #1681
• Bug 1837124: templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml #1738
• Bug 1838984: [release-4.3] templates: Don’t enable machine-config-daemon-host.service by default #1747
• Bug 1811827: baremetal: Add missing network-online dependency to kubelet unit #1549
• Bug 1804067: Prevent etcd-member-add.sh from running on an active master #1740
• Bug 1825221: templates/master:openshift-recovery-tools pass –authfile to podman create #1661
• Bug 1801430: Write environment variables needed for etcdctl execution into ~/.profile #1726
• Bug 1824940: The Multus CNI configuration file “00-multus.conf” should not be removed #1646
• Bug 1834247: Add containernetworking-plugin RPM’s bin location to CRI-O config #1722
• Bug 1822269: Add new crio.conf field to the template #1668
• Bug 1817458: [release-4.3] fix wrongful backup of files not originally on the system #1686
• Bug 1801824: kubelet: add more system reservation to protect node #1458
• Bug 1822750: [ctrcfg controller] Use a struct array instead of map when creating new ignitions #1645
• Bug 1824282: [release 4.3] cri-o: set log level to info #1635
• Bug 1811720: Specify cgroups in kubelet.conf so cAdvisor stats will be tracked #1581
• Full changelog

multus-cni

• Bug 1824940: Adds readinessindicatorfile check on CNI DEL #65
• Full changelog

oauth-server

• Bug 1836974: reduce ldap connection timeout from 60s to 30s #43
• Bug 1823777: Add back some missing metrics #41
• Full changelog

openshift-apiserver

• Bug 1829328: allow patch for updating namespace #101
• Bug 1821500: bump to kube 1.17.4 #109
• Bug 1833019: include ISI error message changes when determining new generation need #106
• [release 4-3] Bug 1824127: fixes configmap “extension-apiserver-authentication” not found #92
• Full changelog

openshift-controller-manager

• Bug 1831888: StatefulSets v1 do not trigger on image changes #116
• Bug 1813420: fix img reg ref on ICT if OCM knows img reg host before apiserver #75
• Bug 1819850: Increase pull secrets controller QPS to 100 #91
• [release 4.3] Bug 1779282: Use OwnerRefs to clean up SA pull secrets #72
• Full changelog

openshift-state-metrics

• Bug 1818806: jsonnet: set cpu requests #49
• Full changelog

operator-lifecycle-manager

• Bug 1859748: fix(resolver): Exclude all installed packages in dependency search #1676
• Bug 1856125: Resolve only default channels #1634
• Bug 1843703: Deleting a CSV removes related CSV metrics #1569
• Bug 1846220: Update PkgManifest upon catsrc update #1581
• Bug 1843694: fix(resolver): don’t pick operator from same package when resolve requiredAPI #1571
• Bug 1840939: fix(queues): use a single gc queue #1553
• Bug 1827822: Generation bug 4.3 #1485
• Bug 1818851: feat(catalogs): add spec validation for sourcetypes #1508
• Bug 1818851: Prevent nil pointer dereference #1486
• Bug 1821318: feat(packagemanifest): add default os/arch labels if not present #1432
• Bug 1814777: fix(catsrc): remove limits on catalogsource pods #1406
• Bug 1807631: Duplicate packages in packageserver APIService response #1363
• Full changelog

operator-marketplace

• Bug 1849153: Ensure correct registry image #317
• Bug 1805271: increase initial delay for appregistry pods #301
• Bug 1813995: support serving marketplace prometheus metrics over https #296
• Full changelog

operator-registry

• Bug 1849152: fix(server): make a copy of the db before migrating it #364
• Bug 1843647: Detect replacement cycles while adding package channels #345
• Bug 1816185: fix(dns): fix slow dns resolution of localhost for grpc health probe #331
• Full changelog

ovn-kubernetes

• Bug 1819888: [4.3] bump OVS/OVN to 2.13 #127
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1818806: pkg/alertmanager: mergepatch alertmanager containers #75
• Bug 1805833: Tighten permissions related to CRD create/update #60
• Full changelog

telemeter

• Bug 1818806: jsonnet/telemeter: set cpu requests, unset limits #346
• Full changelog

---

View changelog in Markdown or change previous release: 4.3.334.3.324.3.314.3.294.3.284.3.274.3.264.3.254.3.244.3.234.3.224.3.214.3.194.3.184.3.174.3.164.3.154.3.144.3.134.3.124.3.114.3.104.3.94.3.84.3.74.3.54.3.34.3.24.3.14.3.04.3.0-rc.34.3.0-rc.24.3.0-rc.14.3.0-rc.04.2.364.2.344.2.334.2.324.2.304.2.294.2.284.2.274.2.264.2.254.2.244.2.234.2.224.2.214.2.204.2.194.2.184.2.164.2.154.2.144.2.134.2.124.2.114.2.104.2.94.2.84.2.74.2.64.2.54.2.44.2.24.2.14.2.04.2.0-rc.54.2.0-rc.44.2.0-rc.34.2.0-rc.24.2.0-rc.14.2.0-rc.04.1.414.1.384.1.374.1.344.1.314.1.304.1.294.1.284.1.274.1.264.1.254.1.244.1.234.1.224.1.214.1.204.1.194.1.184.1.174.1.164.1.154.1.144.1.134.1.124.1.114.1.104.1.94.1.84.1.74.1.64.1.44.1.34.1.24.1.14.1.04.1.0-rc.94.1.0-rc.84.1.0-rc.74.1.0-rc.64.1.0-rc.54.1.0-rc.44.1.0-rc.34.1.0-rc.24.1.0-rc.14.1.0-rc.0───4.10.0-0.nightly-2021-11-26-1956204.10.0-0.nightly-2021-11-26-1456354.10.0-0.nightly-2021-11-26-1121454.10.0-0.nightly-2021-11-26-0605374.10.0-0.nightly-2021-11-26-0056194.10.0-0.nightly-2021-11-25-2055164.10.0-0.nightly-2021-11-25-1554114.10.0-0.nightly-2021-11-25-1053034.10.0-0.nightly-2021-11-25-0645154.10.0-0.nightly-2021-11-25-0246554.10.0-0.nightly-2021-11-24-2135264.10.0-0.nightly-2021-11-24-1640294.10.0-0.nightly-2021-11-24-1157384.10.0-0.nightly-2021-11-24-0756344.10.0-0.nightly-2021-11-24-0301374.10.0-0.nightly-2021-11-23-2147404.10.0-0.nightly-2021-11-23-1331344.10.0-0.nightly-2021-11-22-1954104.10.0-0.nightly-2021-11-22-122803───4.10.0-0.ci-2021-11-26-2255304.10.0-0.ci-2021-11-26-1935304.10.0-0.ci-2021-11-26-1515344.10.0-0.ci-2021-11-26-1047524.10.0-0.ci-2021-11-26-0635284.10.0-0.ci-2021-11-26-0315294.10.0-0.ci-2021-11-25-2322434.10.0-0.ci-2021-11-25-1914474.10.0-0.ci-2021-11-25-1545264.10.0-0.ci-2021-11-25-0235164.10.0-0.ci-2021-11-24-2248594.10.0-0.ci-2021-11-24-0804514.10.0-0.ci-2021-11-24-0349524.10.0-0.ci-2021-11-24-003530───4.9.0-0.nightly-2021-11-26-2255214.9.0-0.nightly-2021-11-26-0639114.9.0-0.nightly-2021-11-26-0308094.9.0-0.nightly-2021-11-25-2314384.9.0-0.nightly-2021-11-25-1650574.9.0-0.nightly-2021-11-25-0705384.9.0-0.nightly-2021-11-25-0619134.9.0-0.nightly-2021-11-24-1850594.9.0-0.nightly-2021-11-24-0905584.9.0-0.nightly-2021-11-24-0225044.9.0-0.nightly-2021-11-23-2101114.9.0-0.nightly-2021-11-23-1704274.9.0-0.nightly-2021-11-23-1333114.9.0-0.nightly-2021-11-23-0416174.9.0-0.nightly-2021-11-22-2158334.9.0-0.nightly-2021-11-22-1636114.9.0-0.nightly-2021-11-22-0851414.9.0-0.nightly-2021-11-22-062405───4.9.0-0.ci-2021-11-26-2207454.9.0-0.ci-2021-11-26-1933454.9.0-0.ci-2021-11-26-1436594.9.0-0.ci-2021-11-26-1003234.9.0-0.ci-2021-11-26-0514444.9.0-0.ci-2021-11-26-0311304.9.0-0.ci-2021-11-26-0139374.9.0-0.ci-2021-11-25-2314564.9.0-0.ci-2021-11-25-2123484.9.0-0.ci-2021-11-25-1855314.9.0-0.ci-2021-11-25-1330384.9.0-0.ci-2021-11-25-1300384.9.0-0.ci-2021-11-25-0815524.9.0-0.ci-2021-11-25-0701104.9.0-0.ci-2021-11-25-0413524.9.0-0.ci-2021-11-25-0343524.9.0-0.ci-2021-11-24-1845574.9.0-0.ci-2021-11-24-1351104.9.0-0.ci-2021-11-24-0928164.9.0-0.ci-2021-11-24-073347───4.8.0-0.nightly-2021-11-26-0502034.8.0-0.nightly-2021-11-26-0055124.8.0-0.nightly-2021-11-25-2149434.8.0-0.nightly-2021-11-25-1934304.8.0-0.nightly-2021-11-25-1620374.8.0-0.nightly-2021-11-25-0753164.8.0-0.nightly-2021-11-25-0400284.8.0-0.nightly-2021-11-25-0100074.8.0-0.nightly-2021-11-24-2201104.8.0-0.nightly-2021-11-24-1901304.8.0-0.nightly-2021-11-24-0201134.8.0-0.nightly-2021-11-23-0049544.8.0-0.nightly-2021-11-22-2034164.8.0-0.nightly-2021-11-22-1759414.8.0-0.nightly-2021-11-22-104754───4.8.0-0.ci-2021-11-26-2305334.8.0-0.ci-2021-11-26-1841174.8.0-0.ci-2021-11-26-1343094.8.0-0.ci-2021-11-26-0907094.8.0-0.ci-2021-11-26-0425444.8.0-0.ci-2021-11-26-0255124.8.0-0.ci-2021-11-26-0135474.8.0-0.ci-2021-11-25-2222374.8.0-0.ci-2021-11-25-2100004.8.0-0.ci-2021-11-25-1830314.8.0-0.ci-2021-11-25-1800314.8.0-0.ci-2021-11-25-1342214.8.0-0.ci-2021-11-24-2017064.8.0-0.ci-2021-11-24-1312504.8.0-0.ci-2021-11-23-233250───4.7.0-0.nightly-2021-11-25-1312314.7.0-0.nightly-2021-11-23-1415314.7.0-0.nightly-2021-11-22-2047044.7.0-0.nightly-2021-11-22-1757364.7.0-0.nightly-2021-11-22-1126434.7.0-0.nightly-2021-11-22-1046434.7.0-0.nightly-2021-11-20-094922───4.7.0-0.ci-2021-11-26-2211284.7.0-0.ci-2021-11-26-1750234.7.0-0.ci-2021-11-26-1248304.7.0-0.ci-2021-11-26-0810084.7.0-0.ci-2021-11-26-0632164.7.0-0.ci-2021-11-26-0202594.7.0-0.ci-2021-11-25-2132294.7.0-0.ci-2021-11-25-1710374.7.0-0.ci-2021-11-25-1109504.7.0-0.ci-2021-11-24-0316424.7.0-0.ci-2021-11-23-180129───4.6.0-0.nightly-2021-11-26-0624034.6.0-0.nightly-2021-11-24-0550244.6.0-0.nightly-2021-11-23-2059034.6.0-0.nightly-2021-11-22-2204544.6.0-0.nightly-2021-11-22-1742254.6.0-0.nightly-2021-11-22-1641104.6.0-0.nightly-2021-11-22-110446───4.6.0-0.ci-2021-11-24-1658194.6.0-0.ci-2021-11-23-1906184.6.0-0.ci-2021-11-22-1828584.6.0-0.ci-2021-11-22-1526344.6.0-0.ci-2021-11-19-1850004.6.0-0.ci-2021-11-19-1354394.6.0-0.ci-2021-11-17-1630174.6.0-0.ci-2021-11-17-0033214.6.0-0.ci-2021-11-12-2122204.6.0-0.ci-2021-11-10-163639───4.5.0-0.nightly-2021-09-07-1641084.5.0-0.nightly-2021-08-31-1450504.5.0-0.nightly-2021-08-31-1144404.5.0-0.nightly-2021-08-30-1024104.5.0-0.nightly-2021-08-11-224754───4.5.0-0.ci-2021-11-22-1829084.5.0-0.ci-2021-11-18-1835424.5.0-0.ci-2021-11-18-1755424.5.0-0.ci-2021-09-29-1912164.5.0-0.ci-2021-09-21-0943424.5.0-0.ci-2021-08-03-2048504.5.0-0.ci-2021-07-28-1553194.5.0-0.ci-2021-06-22-1609444.5.0-0.ci-2021-06-16-1226534.5.0-0.ci-2021-06-16-1140484.5.0-0.ci-2021-06-16-0922044.5.0-0.ci-2021-06-15-1609174.5.0-0.ci-2021-06-11-1542484.5.0-0.ci-2021-06-03-1553054.5.0-0.ci-2021-06-02-154548───4.4.0-0.nightly-2021-03-19-0223154.4.0-0.nightly-2021-03-18-1425124.4.0-0.nightly-2021-03-17-1720504.4.0-0.nightly-2021-03-16-1720024.4.0-0.nightly-2021-03-15-164528───4.4.0-0.ci-2021-11-22-1824454.4.0-0.ci-2021-09-29-1912234.4.0-0.ci-2021-09-13-1516394.4.0-0.ci-2021-09-08-1103574.4.0-0.ci-2021-09-07-1703064.4.0-0.ci-2021-08-03-2048264.4.0-0.ci-2021-05-18-1341234.4.0-0.ci-2021-05-13-0938044.4.0-0.ci-2021-05-12-1755194.4.0-0.ci-2021-03-15-1949044.4.0-0.ci-2021-03-10-1141234.4.0-0.ci-2021-03-10-0716204.4.0-0.ci-2021-02-22-0538354.4.0-0.ci-2021-02-11-2129254.4.0-0.ci-2021-02-04-021441───4.3.0-0.nightly-2021-02-23-0608134.3.0-0.nightly-2021-02-22-1412164.3.0-0.nightly-2021-02-21-1413474.3.0-0.nightly-2021-02-20-2305584.3.0-0.nightly-2021-02-20-1913274.3.0-0.nightly-2020-04-13-1904244.3.0-0.nightly-2020-03-23-1304394.3.0-0.nightly-2020-03-04-222846───4.3.0-0.ci-2021-11-22-1825004.3.0-0.ci-2021-11-17-0033384.3.0-0.ci-2021-09-07-1702124.3.0-0.ci-2021-08-30-1940094.3.0-0.ci-2021-08-18-1532244.3.0-0.ci-2021-02-02-1101494.3.0-0.ci-2021-02-01-2350094.3.0-0.ci-2021-02-01-2108544.3.0-0.ci-2020-12-19-0417314.3.0-0.ci-2020-12-12-042426───4.2.0-0.nightly-2021-02-22-1412194.2.0-0.nightly-2021-02-22-0221514.2.0-0.nightly-2021-02-21-1627594.2.0-0.nightly-2021-02-20-2015324.2.0-0.nightly-2021-02-20-161619───4.2.0-0.ci-2021-11-22-1824454.2.0-0.ci-2021-11-17-0031174.2.0-0.ci-2021-10-01-1722204.2.0-0.ci-2021-09-23-1653474.2.0-0.ci-2021-09-13-1516584.2.0-0.ci-2021-02-01-2350154.2.0-0.ci-2021-01-25-1816084.2.0-0.ci-2021-01-25-1746084.2.0-0.ci-2021-01-16-0519184.2.0-0.ci-2021-01-09-120434───4.1.0-0.nightly-2020-07-29-2108564.1.0-0.nightly-2020-05-28-0403214.1.0-0.nightly-2020-05-27-0424224.1.0-0.nightly-2020-05-26-0357284.1.0-0.nightly-2020-05-25-040303───4.1.0-0.ci-2021-11-22-1824474.1.0-0.ci-2021-11-17-0033274.1.0-0.ci-2021-10-01-1721254.1.0-0.ci-2021-09-07-1702044.1.0-0.ci-2021-08-09-1439074.1.0-0.ci-2021-08-05-0140384.1.0-0.ci-2021-08-04-2116104.1.0-0.ci-2021-08-04-2046104.1.0-0.ci-2021-02-04-1542324.1.0-0.ci-2021-02-02-1936454.1.0-0.ci-2021-02-02-1101324.1.0-0.ci-2021-02-01-2350214.1.0-0.ci-2021-02-01-211231

Source code for this page located on github