Back to index

4.5.32

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.5.32-x86_64

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

• 4.5.31 (changes) - F S S F F
• 4.5.30 (changes) - Failed
• 4.5.29 (changes) - Failed
• 4.5.28 (changes) - Success
• 4.5.27 (changes) - Failed
• 4.5.25 (changes) - Success
• 4.5.24 (changes) - Success
• 4.5.23 (changes) - Failed
• 4.5.22 (changes) - Success
• 4.5.21 (changes) - Success
• 4.5.20 (changes) - Failed
• 4.5.19 (changes) - Success
• 4.5.18 (changes) - Failed
• 4.5.17 (changes) - Success
• 4.5.16 (changes) - Success
• 4.5.15 (changes) - Failed
• 4.5.14 (changes) - Success
• 4.5.13 (changes) - Success
• 4.5.12 (changes) - Failed
• 4.5.11 (changes) - Failed
• 4.5.10 (changes) - Success
• 4.5.9 (changes) - Failed
• 4.5.8 (changes) - Success
• 4.5.7 - Success
• 4.5.6 (changes) - Failed
• 4.5.5 (changes) - Success
• 4.5.4 (changes) - Success
• 4.5.3 (changes) - Failed
• 4.4.33 (changes) - F F F F S
• 4.4.32 (changes) - Success
• 4.4.31 (changes) - Success Failed
• 4.4.30 (changes) - Success
• 4.4.29 (changes) - Success
• 4.4.28 (changes) - Success
• 4.4.27 (changes) - Failed
• 4.4.26 (changes) - Success
• 4.4.25 (changes) - Success
• 4.4.24 (changes) - Failed
• 4.4.23 (changes) - Success
• 4.4.22 (changes) - Success
• 4.4.21 (changes) - Failed
• 4.4.20 (changes) - Failed
• 4.4.19 (changes) - Success
• 4.4.18 (changes) - Failed
• 4.4.17 (changes) - Failed
• 4.4.16 (changes) - Success
• 4.4.15 (changes) - Failed
• 4.4.14 (changes) - Success
• 4.4.13 (changes) - Success

Upgrades to:

• 4.6.61 (changes) - F S F
• 4.6.46 (changes) - Success
• 4.6.45 (changes) - Success
• 4.6.44 (changes) - Success
• 4.6.43 (changes) - Failed
• 4.6.42 (changes) - Success
• 4.6.41 (changes) - Failed
• 4.6.40 (changes) - Failed
• 4.6.39 (changes) - Success
• 4.6.38 (changes) - Failed
• 4.6.37 (changes) - Failed
• 4.6.36 (changes) - Failed
• 4.6.35 (changes) - Failed
• 4.6.34 (changes) - Failed
• 4.6.33 (changes) - Failed
• 4.6.32 (changes) - Success
• 4.6.31 (changes) - Failed Success
• 4.6.30 (changes) - Failed
• 4.6.29 (changes) - Success
• 4.6.28 (changes) - Success
• 4.6.27 (changes) - Failed Success
• 4.6.26 (changes) - Failed
• 4.6.25 (changes) - Failed
• 4.6.24 (changes) - Success
• 4.6.23 (changes) - Success
• 4.6.22 (changes) - Failed
• 4.6.21 (changes) - Success
• 4.6.20 (changes) - Failed Success
• 4.6.19 (changes) - Success Failed
• 4.6.18 (changes) - Success Failed
• 4.6.17 (changes) - Success Success
• 4.5.41 (changes) - Success
• 4.5.40 (changes) - Failed
• 4.5.39 (changes) - Success
• 4.5.38 (changes) - Success
• 4.5.37 (changes) - Success
• 4.5.36 (changes) - Success
• 4.5.35 (changes) - Failed
• 4.5.34 (changes) - Success
• 4.5.33 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.5.7

Created: 2021-02-10 09:50:05 +0000 UTC

Image Digest: sha256:a6551de8a01d2c2d1f9ea048a8dc751a8be0335d8061b27df37beed1285d01a2

Release 4.5.32 was created from registry.ci.openshift.org/ocp/release:4.5.0-0.nightly-2021-02-05-192721

Components

• Kubernetes 1.18.3
• Red Hat Enterprise Linux CoreOS upgraded from 45.82.202008150329-0 to 45.82.202102051743-0 (diff)

Rebuilt images without code change

• aws-pod-identity-webhook git 2251f7e2 sha256:60e1bf482d7f7eefff9a33e325b686c8f2e66beaf7927cb6f5fcd55e8eb22b7e
• cluster-autoscaler git c821779c sha256:703bad9fa962864295455d339e9bdc32c4548cb2f3a9273e2adc57fbf843feec
• cluster-bootstrap git 04c97c30 sha256:28ef15147c3d39cb1e821126aea923e97b629717fb82b816ffe5efccd4621656
• cluster-node-tuned git 27b3ad70 sha256:f849c22a52bfa01c3e366d7469fc1ce55d5be5b1911a3f6315a2521a16d205a2
• cluster-update-keys git 7befe524 sha256:abef9bde72f8551c7d09cf88cdaef52077b6a7869c94071ec5d03babac8ee560
• configmap-reloader git 8b987c8e sha256:894dfcbfdbe28623059404eeaac9d6f0000fbd0aaf1c33458196b6df7a8e5f2d
• container-networking-plugins git d097ce25 sha256:af488f681447c8add983ebcee82e9f822f5aa0e893f5e6180d321b77c9428c50
• csi-snapshot-controller git f23c075c sha256:47bf990942a0b9e7a047f728f5a153f37cc00f9dec32d55857f9799fab718b78
• docker-registry git 861af923 sha256:a7000a79ca1a0b2a6d0f255273bb32b6466246d58376e9be243b8f3171c4ad7c
• grafana git f6535967 sha256:bc9f3f5028aa69c0f8f90673e74e8f66ef3366a0e28861e4a68900e145deab96
• ironic-hardware-inventory-recorder git 09f6db6b sha256:2a08a8ee78f126ae8de51a7a7feb34d7915801d59b358b5f8f19d044b8dabf3c
• ironic-ipa-downloader git 999c80f1 sha256:209513597ec766c69b85b9a287a1d5655687dab2a8c75cffc80df22a2fe0cf25
• ironic-machine-os-downloader git 561c7d4c sha256:6a74591dc6fabfc85c69ab6b69b62d23647d9a8a9241b1b45288d3f8bd30391b
• ironic-static-ip-manager git 058e8fd2 sha256:a98da0ee3fa055ca49e05b5be5060679d5ff969c5d19da92646a42747eb2443b
• kube-rbac-proxy git 76fc3658 sha256:9761657a18a2d6c8029a6962d82f003f6d83ed3fed7f54be89e4dc51bdf816c1
• local-storage-static-provisioner git 424ccbd2 sha256:57c58cf27346677a42d87a80963ec12c52a0d773cea51d60c0e6030455dc96b3
• machine-os-content sha256:087d3e8e2ce5451fe31d4bdc8d96cc215414117d1eb27675fab8fde90e9a274d
• mdns-publisher git 0e41fab1 sha256:6df853c2c11eb9829f05139bd3195d55b40efbdf0ea0f1a97d634c2c4b9b8fcb
• multus-admission-controller git 0bd3ff5e sha256:459e46ff5fd345becf355fbd03e6260af799888ba2c81288e34c1fe666942c7b
• multus-cni git 69a29635 sha256:dae138db81e0264697597b52106967c6a536437be0a9c3cbe9754d45afe27f96
• multus-route-override-cni git 7f6f53e3 sha256:3c12da296462c8f1bac2fb23ded812cbd94827a91b49dc4731c9b22e30916206
• oauth-proxy git afb73cdd sha256:55f9ac6c2bfed0fbae8e26d176861fe3e9976528a04f2b43df2b79773a6e50f0
• prom-label-proxy git cfcfdbd1 sha256:7b1316fdf1acb4380d8f840eb17e62cf8ef4a61adbe65109410057b1464ca261
• prometheus-alertmanager git 26fa6b42 sha256:69ed7b7d6620c31979ae3c9f58e3d1cec66483e18162a39ef02c0a342005e325
• telemeter git ca9c4f2c sha256:104a35090b1d150b0bbc11f91b0d2ee23099a797098d3bd7faaf7e4752109645
• thanos git 0d2ebce5 sha256:ea1f80aa6c3d06d9ec7dd897bfa595875a23e23c2c825871b2ec2f41c7d21efb

aws-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #342
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1918962: vsphere destroy: delete tag category created by installer #4580
• Bug 1920767: disable anonymous auth on bootstrap nodes #4597
• Bug 1891168: data/data/gcp: be pedantic about setting the region #4301
• Bug 1876581: upi/aws Define load balancer health checks #4358
• Bug 1877374: Remove unused bootstrap etcd cert generation mechanism #4150
• Bug 1889775: [release-4.5] vSphere: Update dockerfile removing certificate #4283
• install-approvers: add staebler #4299
• Bug 1874009: Ensure proper tagging of compute nodes ports #4120
• Bug 1880134: destroy/gcp: correct extract service account email from IAM policy binding member #4195
• Bug 1878369: openstack: Upgrade the CI build image #4164
• Bug 1872629: OpenStack: dynamically set end of DHCP allocation pool #4094
• Bug 1874582: use https for lb probes in Azure UPI #4123
• Bug 1873537: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4111
• Bug 1859874: Add basic engine URL validation #3948
• Bug 1852720: deleting vsphere cluster tag after deleting the attached resources #3981
• Bug 1868350: Backport new feature to bypass problems with AWS Accounts using SCP #4046
• Full changelog

baremetal-machine-controllers

• Bug 1864352: Update leader election for release 4.5 #106
• Bug 1862875: remove machine finalizer from host when deleting machine #94
• Bug 1863010: ensure delete removes the link between machine and host #93
• Full changelog

baremetal-operator

• Bug 1874599: Always delete found host from Ironic on deletion #97
• Bug 1851531: Do not write status annotation #84
• Full changelog

baremetal-runtimecfg

• Bug 1888301: Add check for iptables rule to keepalived-monitor #105
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1920676: add timestamps marking start and end for must-gather and inspect #718
• Bug 1884580: Set appropriate owner references when creating a job from cronjob #602
• Bug 1860789: Rebase k8s to 1.18.8 to enable approving CSRs on a 4.6 server #551
• Bug 1876238: fix typo in oc adm upgrade help #557
• Bug 1875551: must-gather: move gather init container under containers #554
• Bug 1872519: Allow prune to move on with Removed registry #532
• Bug 1870667: oc logout should make the token invalid #525
• Full changelog

cloud-credential-operator

• Bug 1898199: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #269
• Bug 1883412: Update upgradeable condition on admin cred changes. #253
• Bug 1871713: Mark Manual Clusters Upgradeable=False If 4.6 Cred Request Secrets Are Not Provisioned #244
• Bug 1873345: specify a serviceaccount in the deployment #240
• Bug 1868350: Backport Permissions Check Bypass for AWS SCP Use Cases #232
• Full changelog

cluster-authentication-operator

• Bug 1879417: don’t error out on non-json output of password grant attempt #349
• Bug 1877960: [release-4.5] router-secrets: set named certificates to empty array instead of nil when none found #342
• Full changelog

cluster-autoscaler-operator

• Bug 1879162: ensure full boolean arguments #164
• Bug 1880320: Bump K8s dependencies to v0.18.9 #169
• Full changelog

cluster-config-operator

• Bug 1905576: [release-4.5] Add warning of the consequences of changing bound token issuer #180
• Bug 1878007: Add Controller to Normalize the Operator Log Level Values #150
• Bug 1880304: Fix bug in reflector not recovering from “Too large resource version” #155
• Bug 1879492: Add secure access token annotation controller to handle downgrade from 4.6 #153
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1881359: Run the controller on master nodes #52
• Bug 1880309: Bump k8s.io/client-go to v0.18.6 to fix bug in reflector not recovering from “Too large resource version” #53
• Full changelog

cluster-dns-operator

• [Release 4.5] Bug 1880311: Fix bug in reflector not recovering from “Too large resource version” #198
• Full changelog

cluster-etcd-operator

• Bug 1924913: A valid etcd endpoint should have the URL scheme prepended. #536
• Bug 1906483: Use socket readiness probe to avoid generating zombies #510
• Bug 1897543: DR: Make restore pod yaml specific to restoring node #497
• Bug 1894267: Remove the rollbackcopier #494
• Bug 1899563: remove etcdMemberIPMigrator controller #389
• Bug 1883268: remove erroneously specified label drop rules #452
• Bug 1877374: Render bootstrap certificates #438
• OWNERS: change component to Etcd #471
• Bug 1877930: Use restore pod yaml from the backup when restoring #442
• Bug 1880313: vendor: bump k8s to 1.18.6 to fix bug in reflector not recovering from “Too large resource version” #447
• Bug 1859684: Exclude bootstrap in the env variable ETCDCTL_ENDPOINTS #402
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #434
• Update OWNERS #404
• Bug 1859678: Forget bootstrap etcd member IP after bootstrap #401
• Full changelog

cluster-image-registry-operator

• Bug 1895856: httpSecret should be generated when it is not set #636
• Bug 1894621: Avoiding bootstrap failure on unavailable swift #635
• Bug 1886603: Remove unsafe type casting #623
• Bug 1886849: panic during creation of Azure storage container #624
• Bug 1880314: Fix bug in reflector not recovering from “Too large resource version” #616
• Bug 1843244: Add documentation for Logging field #614
• Bug 1880485: Retrying in case of conflict during Config update #613
• Bug 1879176: Alerting on failed image prune job #612
• Bug 1858927: Fix TestPodAffinityConfiguration flake #581
• Bug 1873496: Using last finished job status and disabling retries #599
• Full changelog

cluster-ingress-operator

• Bug 1920421: Add “ingress.operator.openshift.io/hard-stop-after” annotation #538
• [Release 4.5] Bug 1880315: Fix bug in reflector not recovering from “Too large resource version” #461
• Bug 1878148: Backport: Delete Router Deployment Only Upon DNSRecord Deletion #456
• Bug 1874244: publishRecordToZones: Fix status merge #449
• Bug 1868257: dns: Reread cloud credentials secret if it changes #443
• Bug 1871175: Add basic HAProxy alert rules for HAProxy status and Reload failures #440
• Full changelog

cluster-kube-apiserver-operator

• BUG 1885353: protect openshift traffic by using dedicated flowschema #968
• Bug 1880322: fix bug in reflector not recovering from “Too large resource version” #954
• Bug 1874597: static-pod-installer: remove deadlock by recreating inst… #942
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1880324: fix bug in reflector not recovering from “Too large reso… #461
• Bug 1881534: Use internal load balancer instead of localhost 4.5 #455
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #445
• Bug 1868615: Revert “Don’t use upstream recycler pod” #438
• Bug 1868615: Don’t use upstream recycler pod #433
• Full changelog

cluster-kube-scheduler-operator

• Bug 1915363: Sync new kube-scheduler-client-cert-key on recovery #317
• Bug 1893202: [release-4.5] Extend Prometheus E2E timeout #299
• Bug 1887942: [release-4.5] Switch to v1beta1 Scheduler config to bridge between Policy/Plugin APIs #290
• Bug 1880326: fix bug in reflector not recovering from “Too large reso… #287
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #278
• Full changelog

cluster-kube-storage-version-migrator-operator

• Bug 1880327: fix bug in reflector not recovering from “Too large resource version” #27
• Full changelog

cluster-machine-approver

• Bug 1880344: Bump K8s dependencies to v0.18.9 #90
• Full changelog

cluster-monitoring-operator

• Bug 1906081: jsonnet: remove apiserver_request:availability30d #1016
• Bug 1892585: Client go 0.18.9 #978
• Bug 1887354: Backport fix checking if ClusterRoleBindings need update #956
• Bug 1858010: Backport fix for KubePodCrashLooping alert #952
• Bug 1888542: decrease CMO log verbosity from 3 to 2 #961
• Bug 1881043: Bump client-go & co. #945
• Bug 1859791: alert is firing KubeJobCompletion and KubeJobFailed at the same time #885
• Bug 1877256: disable grafana telemetry #922
• Bug 1858010: decrease alerts severity #926
• Bug 1868304: remove ValidatingWebhookConfiguration for downgrades #909
• Full changelog

cluster-network-operator

• Bug 1849154: Fixes Proxy ReadinessEndpoints Validation #677
• Bug 1882502: SDN mount host’s /var/run/netns #805
• Bug 1891751: openshift-sdn: multitenant: join openshift-etcd-operator to etcd #851
• Bug 1886127: [release-4.5] sdn-ovs: don’t step on directory permissions. #842
• Bug 1886127: [4.5] sdn-ovs: fix liveness probe for downgrade case #837
• Bug 1886127: Handle downgrades from 4.6 to 4.5 #833
• Bug 1881429: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #799
• Bug 1874737: [release-4.5] OVN: Handle OVN db upgrades #779
• Bug 1868444: Fixes providing empty slice for HybridClusterNetwork #790
• Bug 1861412: NetworkAttachmentDefinitions should have output for “oc explain” #734
• Bug 1858830: mount host-slash HostToContainer #719
• Bug 1856130: [release-4.5] bump golang.org/x/text/encoding to v0.3.3 #714
• Full changelog

cluster-node-tuning-operator

• Bug 1882005: Issue a warning when two or more profiles use the same priority. #157
• Bug 1880348: Bump to k8s 1.18.9 to fix bug in reflector not recovering from “Too large resource version” #155
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #395
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1894667: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #185
• Full changelog

cluster-policy-controller

• Bug 1904030: The quota controllers should resync on new resources and make progress #51
• Bug 1891527: openshift-object-counts quota is not dynamically updating as the resource is deleted #47
• Bug 1894666: fix bug in reflector not recovering from “Too large resource version” #46
• Full changelog

cluster-samples-operator

• Bug 1881068: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #325
• Bug 1857201: initial create errors should map to SamplesExists instead of ImageChangesInProgress #304
• Full changelog

cluster-storage-operator

• Bug 1882394: UPSTREAM: <carry>: operator-sdk: return error if lock is not leader-for-life #96
• Bug 1882394: Delete lock created by CSO 4.6 #91
• Bug 1874873: Move notUpgradeable check later to prevent z-stream upgrade failures #83
• Full changelog

cluster-svcat-apiserver-operator

• Bug 1854978: Remove servicecatalogapiserver CRD #91
• Bug 1866052: Update golang.org/x/text to v0.3.3 #94
• Full changelog

cluster-svcat-controller-manager-operator

• Bug 1854978: Remove servicecatalogcontrollermanager CRD #78
• Bug 1866054: Update golang.org/x/text to v0.3.3 #81
• Full changelog

cluster-version-operator

• Bug 1886939: vendor: Bump client-go to v0.18.9 #470
• Bug 1872906: pkg/start: Release leader lease on graceful shutdown #446
• Bug 1868478: lib/resourcemerge/core: set ShareProcessNamespace, DNSConfig and TerminationGracePeriodSeconds #433
• Bug 1857682: [release-4.5] Updating the golang.org/x/text version to v0.3.3 #409
• Bug 1866480: pkg/cvo/status: Raise Operator leveling grace-period to 20 minutes #427
• Full changelog

console

• Bug 1895202: Access server API via kubernetes.default.svc from Helm endpoints #7133
• Bug 1898303: Use KUBEADM_PASSWORD_FILE by default #7228
• Bug 1908587: fix filesystem queries #7599
• Bug 1905909: Update library-go and replace runc module for v1.0.0-rc8 version #7477
• Bug 1898102: Ensure correct git URL for topology edit icon #7219
• Bug 1876922: fix unexpected changes of tabs when importing VMWare VMs #6553
• Bug 1896601: Tolerate missing status on OperatorGroups #7178
• Bug 1879017: Disable card model if using SRIOV interface #6623
• Bug 1896990: Handle values of 0 for maxUnavailable and maxSurge #7192
• Bug 1894782: Use correct service account for operator monitoring #7107
• Bug 1885228: Fix runtime error for basic users creating Prometheus instance #6833
• Bug 1893022: Fix git validation on selecting git type #7046
• Bug 1893277: deployment of vmware fails if VMware URL contains space at the end #7055
• Bug 1885582: Fix that the Start Pipeline form is not always validated correctly #6853
• Bug 1883225: Use new parameter prefix (tt.param.) for Tekton Trigger version 0.6+ #6759
• Bug 1883098: add legends under devconsole monitoring dashboard graphs #6755
• Bug 1874373: RHV URL validation is missing https:// #6551
• Bug 1877278: report errors when v2v-vmware ConfigMap is not available #6567
• Bug 1889982: pick latestCRDversion instead of latest/served true #6965
• Bug 1889783: Support ServiceBinding breaking api changes #6962
• Bug 1881380: Disable creation of External Mode Cluster in cloud environments #6706
• Bug 1884574: Include repo branch in URL for che icon #6815
• Bug 1883967: Fix layout issue which appears only on Safari #6798
• Bug 1883881: Avoid adding a newline between pipelinerun log fetches #6795
• Bug 1883177: Update node queries to exclude fstype, mountpoint #6781
• Bug 1882196: Add resource badges in the add trigger form dropdown #6734
• Bug 1852530: kubevirt - fix importing VMs with same vnicIDs for ovirt provider #5885
• Bug 1884411: Fix runtime error in legacy operand form #6810
• Bug 1879973: properly encode vpx URL #6803
• Bug 1883342: [Release 4.5] Convert Pipeline StartedBy Label to Annotation #6769
• Bug 1879016: kubevirt support only e1000e and virtio #6622
• Bug 1884760: add candidate-4.6, fast-4.6, and stable-4.6 channels #6822
• Bug 1877728: Fixes bug attaching block storage to pods, deployments in attach-storage page #6609
• Bug 1877290: fix edit flow with update git url #6568
• Bug 1878849: Use metadata.generatorName when create a pipeline trigger #6615
• Bug 1880376: Fix Add Pipeline Trigger for Pipeline Operator 1.1 #6675
• Bug 1879247: Fix inline taskSpec error in pipeline page #6638
• Bug 1881784: fix empty default value for pipeline parameters #6715
• Bug 1878214: Add support for more params and create resources only if required #6598
• Bug 1878713: Add fallback to builder image detection #6617
• Bug 1840253: Tighten cipher usage to library-go #6503
• Bug 1879224: Empty secret should be editable in generic secret form #6636
• Bug 1877012: Hide cluster upgrade UI on OpenShift Dedicated #6616
• Bug 1876461: remove the import VM from dev perspective #6552
• Bug 1870078: Fix Backing Store selection flickering issue in Bucket Class creation wizard #6371
• Bug 1855820: Editable TT, EL, CTB, TB #5947
• Bug 1870825: Fix blank page/error on ImageManifestVulnPage #6392
• Bug 1870585: Fix pipeline workspace volume-type empty-directory #6384
• Bug 1875858: fixes issue with internal image imports for self-provisioner with edi… #6533
• Bug 1872625: cherry-pick 4.5 add resource icon to task and cluster-task #6446
• Bug 1877083: add RBAC checks to cluster upgrade UI #6557
• Bug 1856156: Fixes deletion of node connected to a split node #5955
• Bug 1875263: Add Storage Class filter for SC dropdown in Backing Store creation page for PVC type #6501
• Bug 1847282: Fix DynamicForm component logic for hiding schemas that do not produce form fields #5752
• Bug 1873053: Include only node-level network traffic in Network Utilization item. #6459
• Bug 1869961: Delete only KSVC, not Route associated with KSVC #6367
• Bug 1872288: Delete the hashed session token on user logout #6445
• Bug 1869967: adds badge support for providedApis creation #6368
• Bug 1869631: Mode Detection independent of Storage Cluster CR name #6353
• Bug 1867042: fix log completiontime issue #6244
• Bug 1872289: Persistent dashboard to reflect ceph health status as Warning #6427
• Bug 1861433: Show descriptions for all dynamic form fields #6136
• Bug 1861358: fixes issue with ksvc decorator not showing base route #6131
• Bug 1852790: When node disk is under pressure NodeTerminalError should show pod’s status message #5876
• Bug 1867050: Use match.path to build tab paths #6260
• Bug 1867526: support pipeline task resources to be an optional field based on spec #6282
• Bug 1854612: Machine’s ‘Provisioned as node’ phase should use SuccessStatus component with GreenCheckCircleIcon icon #5910
• Full changelog

console-operator

• Bug 1876025: clidownloads: IBM Power and Z are supported #467
• Bug 1880307: Bump k8s vendors to 1.18.9. to fix bug in reflector not recovering from ‘Too large resource version’ #470
• Bug 1880307: Fix inconsistent vendoring in vendor/modules.txt #471
• Bug 1874529: Configuring custom certificate for default console route #465
• Full changelog

coredns

• Bug 1862584: Adds HealthcheckBrokenCount to forward plugin #36
• Bug 1869309: Back port Handle endpoint tombstones (upstream #3887) #38
• Full changelog

docker-builder

• Bug 1921966: narrow scope of rhsm transient bind mount #214
• Force use of runc, since we know we’re privileged, and customize our seccomp filter #208
• Bug 1889956: CVE-2020-8564 #194
• Bug 1868401: bump(containers/buildah): #169
• Full changelog

etcd

• OWNERS: add component #62
• Bug 1884011: discover-etcd-initial-cluster: improve error handling when we dont scale member #58
• Full changelog

gcp-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #114
• BUG 1868751: Support networks shared from a different project #116
• Full changelog

haproxy-router

• Bug 1920421: Add tunnel-timeout and hard-stop-after options to haproxy template #250
• Bug 1921252: Prevent unnecessary reloads in router shards #251
• Bug 1906132: back port: Change router’s internal endpoint.ID to prevent HAProxy server line collisions #234
• Bug 1896914: Back port Clip haproxy.router.openshift.io/timeout annotation values to prevent bricking on upgrade #218
• Bug 1886214: haproxy-config.template: Only enable HTX for HTTP/2 #200
• Bug 1890534: Fix decreasing counter metrics when reloading HAProxy #205
• Bug 1885688: Back port Switch to periodic process reaper #195
• Bug 1879120: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #184
• Full changelog

hyperkube, tests

• Bug 1887311: UPSTREAM: 94712: [credentialprovider] avoid potential secret leaking while reading .dockercfg #25694
• Bug 1894918: Panic output due to timeouts in kube-apiserver #25751
• Bug 1916660: UPSTREAM: 97916: kube-aggregator: fix apiservice availability gauge #25800
• Bug 1879208: fixes a data race in SerializeObject function #25824
• Bug 1918919: broaden acceptance of scl sample s2i image usage messages #25816
• Bug 1912566: UPSTREAM: 97206: clean up executing request on panic #25777
• Bug 1907938: Nodes goes into NotReady state (VMware) #25773
• Bug 1907507: Fix skipping of SDN tests #25768
• Bug 1908764: Skew 4.5 to 4.6 tests are failing due to a misplaced skip (prevents all tests from running) #25772
• Bug 1884195: test/extended/operators: add etcd-quorum-guard to unevictable whitelist #25700
• UPSTREAM: <carry>: Bug 1893156: include / prefix in instance ID output #25655
• Bug 1899721: HPA: Ignore deleted pods. #25698
• Bug 1852695: CVE-2020-8559 compromised node could escalate to cluster level privileges #25656
• Bug 1828858: use net/http instead of client-go for e2e PDB test #25635
• Bug 1893742: move jenkins e2e nfs setup from docker.io to quay.io image #25654
• Bug 1880326: Backport disruption test improvements #25603
• Bug 1893071: move off docker.io in templates/builds/jenkins tests #25648
• Bug 1881351: KCM and KS graceful termination #25536
• Bug 1887942: [release-4.5] Pick scheduler v1beta1 componentconfig API #25252
• Bug 1883345: [release-4.5] Re-enable skipped conformance tests for IBM Cloud #25520
• Bug 1888002: move image ecosystem e2e suite from centos to rhel; create rhel only jenkins e2e suite #25387
• Bug 1879192: Make offline volume expansion tests more robust #25556
• Bug 1857268: UPSTREAM: 94252: If firstTimestamp is not set use eventTime when printing event #25461
• Bug 1886174: skip test during skew testing that won’t run on 4.6 #25591
• Bug 1868490: upgrade test use LoadBalancers with ExternalTrafficPolicy set to Local #25481
• Bug 1860789: test: Report an error message when a pod fails in a cmd test #25560
• Bug 1867800: Make EBS attachDisk idempotent #25400
• Bug 1856529: Add NET_RAW capability to internal_ports test #25518
• Bug 1877346: KubeAPIErrorsHigh firing due to too large resource version #25489
• Bug 1883235: Adjust wait duration for marketplace test #25557
• Bug 1882030: UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison #25541
• Bug 1877346: Fix bug for inconsistent lists served from etcd #25490
• Bug 1846451: UPSTREAM: 90419: update strategy used to reuse CPUs from init containers in CPUManager #25310
• Bug 1879650: For clusters upgraded from 4.1, skip the anonymous browser access test #25510
• Bug 1874251: UPSTREAM: 94204: Add impersonated user to system:authenticated group #25458
• Bug 1871951: allow recycler pods to run with best effort qos #25316
• Bug 1869220: UPSTREAM: <carry>: oauth: support sha256~ prefixed tokens #25415
• Bug 1868314: UPSTREAM: 93355: Fix scheduler issue with nodetree additions #25407
• Bug 1862194: UPSTREAM: 85983: fix metrics kubelet_running_pod_count #25359
• Bug 1861382: UPSTREAM: 91642: Adjust Azure e2e binding mode #25333
• Full changelog

insights-operator

• Bug 1889679: Collect installplans #244
• Bug 1914255: Red Hat image and crashlooping OpenShift pod collection #308
• Bug 1894243: Fixes records index on diskrecorder #262
• [release 4.5] Bug 1887763: Adds MachineConfigPool gatherer #214
• Bug 1905106: Collect spec config for clusteroperator resources #287
• [release 4.5] Bug 1888607: Fixes policyClient and the corresponding config. #227
• Bug 1904079: Add hostsubnet to sample archive & fix bug… #278
• Bug 1880318: Update k8s version to v0.18.6 #284
• [release 4.5] Bug 1887886: Add the namespace to the gatherers reports to avoid conflicts #219
• Backport e2e tests #252
• [release 4.5] Bug 1885515: Fixes ‘make build’ #204
• Bug 1884551: Adds PodDisruptionBudgets gather. #199
• Bug 1883175: Gather MachineSet info #195
• Bug 1880352: collect hostsubnet information #180
• Bug 1882237: Add new team members to OWNERS #191
• Bug 1855240: Check also Pod status before enabling Fast upload #139
• Bug 1869319: Add @natiiix to OWNERS #156
• Full changelog

ironic

• Bug 1917966: Force update of dnsmasq #138
• Bug 1859488: Add the idrac-redfish-virtual-media boot interface #88
• Full changelog

ironic-inspector

• Bug 1917966: Force update of dnsmasq #57
• Full changelog

jenkins, jenkins-agent-maven

• Bug 1922554: Update ant plugin CVE-2020-11979 #1210
• Bug 1896402: various fixes #1175
• Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
• Bug 1857550: bump jenkins to 2.235.2 #1117
• Full changelog

k8s-prometheus-adapter

• Bug 1897313: Populate both CPU and Memory resource container metrics if one is specified #37
• Full changelog

keepalived-ipfailover, pod

• Bug 1900725: Pod process container does not correctly reap zombie process with shareProcessNamespace: true #57
• Full changelog

kube-client-agent, kube-etcd-signer-server

• Bug 1872535: vendor: bump golang.org/x/text #23
• OWNERS: cleanup #22
• Full changelog

kube-proxy, sdn

• Bug 1891455: Fix error handling from DNS nameservers #211
• Bug 1897478: Bump OVS to 2.13 #238
• Bug 1915008: Revert NetworkPolicy performance fixes (4.5) #242
• Bug 1904456: NetworkPolicy performance (pod caching) #229
• Bug 1894784: fix pod creation deadlock #217
• Bug 1901043: Enable conntrack for ovs-multitenant unless userspace proxy #225
• UPSTREAM<carry>: Bug 1880341: Fix bug in reflector not recovering from “Too large resource version” #215
• Bug 1895057: Ignore if netns is already deleted while deleting ns #218
• Bug 1878624: Invalid egressCIDR value causes sdn pods to fail on startup #187
• Bug 1881830: Emit a warning and ignore if empty cidr is passed to kubeproxy #195
• Bug 1878788: vxlan_monitor_test: fix flake #191
• Bug 1874798: Add NodeInformer to EgressIP #182
• Bug 1870303: Port stuck open when ep deleted before svc in unidling mode #173
• Full changelog

kube-state-metrics

• Bug 1881103: Bump to fix a bug in client-go #36
• Bug 1862404: Bump to v1.9.7 #31
• BUG 1859956: Openshift 1.9.7 bump #30
• *: cut release-1.9.7 #1150
• Full changelog

kube-storage-version-migrator

• Bug 1893637: Fix bug in reflector not recovering from “Too large resource version” #161
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1901495: Correctly compare SG rules in NP code #429
• Bug 1900491: Ensure members are deleted from pools when there is no endpoints #413
• Bug 1893996: Fix duplicated sg rules on NP crd #392
• Bug 1884192: Set read timeout for any request in K8sClient #360
• Bug 1860311: Civilize logging vol 2 #351
• Bug 1883419: Cleanup ports belonging to deleted nodes #354
• Bug 1874840: Ensure proper cleanup of subports #334
• Bug 1860311: Civilize logging #312
• Full changelog

libvirt-machine-controllers

• Bug 1887373: Add leader election mechanism to release-4.5 #211
• Full changelog

machine-api-operator

• Bug 1869320: [release-4.5] [vSphere] Reduce sync period to 10 minutes #764
• Bug 1880343: Bump K8s dependencies to v0.18.9 #718
• Bug 1864352: Add leader election mechanism to release 4.5 #664
• Full changelog

machine-config-operator

• Bug 1884195: etcd-quorum-guard remove toleration timeouts #2133
• Bug 1880333: bump k8s.io/client-go to 0.18.6 #2354
• Bug 1873207: [baremetal] Wait for NM dhcp nameserver population #2119
• Bug 1907636: [vsphere, openstack] Add missing proxy settings to resolv-prepender #2347
• Bug 1907636: [on-prem] export proxy variables to be taken in account #2301
• Bug 1903655: Use mc name as finalizer for kubelet config #2274
• Bug 1900013: Drop kubelet logging back down to level 3 #2247
• Bug 1904082: ctrcfg_test: Wait for our prior target config #2284 #2284
• Bug 1890797: Set NonVirtualIP in mdns plugin config #2137
• Bug 1874815: pkg/server: reduce calls to ignition parse #2053
• Bug 1856529: Create a drop-in file for cri-o’s default_capabilities #2050
• Bug 1862874: [baremetal & friends] verify resolv.conf in HAProxy static pod synced with host resolv.conf #1974
• Bug 1881147: OpenStack: Don’t failover api vip if loadbalanced endpoint is responding #2110
• Bug 1872337: remove err cardinality from mcd_kubelet_state metrics #2023
• Bug 1873321: Check the version hash so we resync on an upgrade #2034
• Bug 1861026: daemon: perform other rpm-ostree operations after OS rebase #2029
• Bug 1870285: OpenStack: Ensure resolv.conf exists before running podman #2012
• Bug 1862538: telemetry: change MCDDrainErr from critical to warning #1966
• Bug 1855373: etcd: remove etcd entries from mdns #1917
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1868772: [backport 4.5] Change error message (for missing kubeconfig) #26
• Bug 1877065: Fixing wrong DNS-1123 name for some IPv6 addresses #29
• Full changelog

must-gather

• Bug 1887446: [release-4.5]Backport gather_core_dumps #183
• Full changelog

oauth-server

• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #66
• Bug 1882055: Fix bug in reflector not recovering from “Too large resource version” #57
• Full changelog

openshift-apiserver

• Bug 1906429: When using webhooks in OCP 4.5 fails to rollout latest deploymentconfig #168
• Bug 1883994: Fix label value validation for BuildConfigs #144
• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #137
• Full changelog

openshift-controller-manager

• remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #163
• Bug 1883994: Fix label value validation for Builds #138
• Bug 1880357: Bump k8s.io packages #140
• Full changelog

openshift-state-metrics

• Bug 1882448: bump k8s.io/client-go dependency #58
• Full changelog

openstack-machine-controllers

• Bug 1864352: Update leader election for release 4.5 #117
• Full changelog

operator-lifecycle-manager

• Bug 1910401: Preserve original .status.lastUpdateTime in copied CSVs. #1930
• Bug 1905137: Recreate pending installplan if deleted before approval #1894
• Bug 1892372: OLM should use valid CA certs if available #1865
• Bug 1882444: remove extra polling check #1780
• Bug 1878297: remove duplicate catalog source pod when polling #1765
• Bug 1887944: ensure installplan step resource manifests reference configmaps #1809
• Bug 1880359: [release-4.5] Bump 1.18.9 #1778
• Bug 1878307: shorten catalog sync interval if polling is enabled #1764
• Bug 1878359: update catalog image pull policy #1760
• Bug 1870782: Retry conflicting catalog source pod update after fetching latest pod spec #1734
• Bug 1864121: fix(install): account for installplans when calculating generation #1686
• Bug 1866828: Remove unneeded toleration from catalog source pod #1712
• Full changelog

operator-marketplace

• Bug 1909217: Do not report degraded when Marketplace exits gracefully #371
• Bug 1881542: Set all CO conditions on meeting expected sync ratio #356
• Bug 1867799: Correctly count non-default Marketplace CRs #324
• Bug 1873546: Increase registry delay for large payloads #335
• Bug 1877564: Sync remote app-registry #340
• Full changelog

operator-registry

• Bug 1904554: TestListPackages is flaky #533
• Bug 1902803: Reconstruct replaces/splits for Listbundles from channel_entry. #524
• Bug 1845588: fix(images): use docker/podman create and cp for exec unpacking #400
• Bug 1866861: 4.5 index images should work with 4.6 catalog operator. #434
• Full changelog

ovirt-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #68
• BUG 1854787: [release-4.5] abort network reconciling while vm is in transient state #65
• Full changelog

ovn-kubernetes

• Bug 1882694: Pin OVS to latest 4.4.22 RPM version #290
• Bug 1908921: ovn/node: use node name as chassis hostname #390
• Bug 1877561: [release-4.5]Fix orphaned ACLs backport to 4.5 #287
• Bug 1888352: Fix IPv6 neighbor discovery hack #313
• Bug 1862700: Fix ovnkube-node aggressive memory allocation to prevent memory bloating #227
• Bug 1882092: Pin 4.5 OVN to 4.4.24 #284
• Bug 1868501: Do not default HO cluster subnets #268
• Bug 1870867: Fix br-local duplicate MAC #238
• Bug 1874928: Pinning the OVN version for 4.5.8 release #248
• Bug 1858304: Set MTU for br-ext hybrid overlay bridge #207
• Full changelog

prometheus

• Bug 1892583: bump k8s.io/client-go to v0.18.9 #68
• Bug 1881111: go.mod,go.sum: Bump client-go & co. #59
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1891815: Revert “Bug 1881077:go.sum,go.mod: Bump client-go & co. to fix known bug” #99
• Bug 1881077: go.sum,go.mod: Bump client-go & co. to fix known bug #95
• Full changelog

prometheus-node-exporter

• Bug 1890466: Fix issues with too many log messages in NFS collector #71
• Full changelog

service-ca-operator

• Bug 1880360: Fix bug in reflector not recovering from “Too large resource version” #124
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.0-0.nightly-2022-11-26-0023554.13.0-0.nightly-2022-11-25-2044454.13.0-0.nightly-2022-11-25-1641514.13.0-0.nightly-2022-11-25-1304494.13.0-0.nightly-2022-11-25-0847194.13.0-0.nightly-2022-11-25-0414084.13.0-0.nightly-2022-11-24-2210534.13.0-0.nightly-2022-11-23-1611204.13.0-0.nightly-2022-11-23-0626224.13.0-0.nightly-2022-11-23-0123214.13.0-0.nightly-2022-11-22-2054084.13.0-0.nightly-2022-11-22-171608───4.13.0-0.ci-2022-11-26-1850054.13.0-0.ci-2022-11-26-1250044.13.0-0.ci-2022-11-26-0650044.13.0-0.ci-2022-11-26-0050044.13.0-0.ci-2022-11-25-1850044.13.0-0.ci-2022-11-25-1250044.13.0-0.ci-2022-11-25-0650044.13.0-0.ci-2022-11-25-0050044.13.0-0.ci-2022-11-24-1850044.13.0-0.ci-2022-11-24-1250044.13.0-0.ci-2022-11-24-0650044.13.0-0.ci-2022-11-24-005004───4.12.0-0.nightly-2022-11-25-2313524.12.0-0.nightly-2022-11-25-1854554.12.0-0.nightly-2022-11-25-1421454.12.0-0.nightly-2022-11-25-0856194.12.0-0.nightly-2022-11-25-0050244.12.0-0.nightly-2022-11-24-2031514.12.0-0.nightly-2022-11-24-1550534.12.0-0.nightly-2022-11-24-0035214.12.0-0.nightly-2022-11-23-1504494.12.0-0.nightly-2022-11-23-055211───4.12.0-0.ci-2022-11-26-0726184.12.0-0.ci-2022-11-26-0126184.12.0-0.ci-2022-11-25-1926184.12.0-0.ci-2022-11-25-1326184.12.0-0.ci-2022-11-25-0726184.12.0-0.ci-2022-11-24-2133484.12.0-0.ci-2022-11-24-1533484.12.0-0.ci-2022-11-24-0933484.12.0-0.ci-2022-11-24-005237───4.11.0-0.nightly-2022-11-25-2005404.11.0-0.nightly-2022-11-25-1258024.11.0-0.nightly-2022-11-25-0303034.11.0-0.nightly-2022-11-24-2137274.11.0-0.nightly-2022-11-24-1303404.11.0-0.nightly-2022-11-24-0539084.11.0-0.nightly-2022-11-23-1005014.11.0-0.nightly-2022-11-22-200257───4.11.0-0.ci-2022-11-25-1705504.11.0-0.ci-2022-11-25-1105504.11.0-0.ci-2022-11-25-0148434.11.0-0.ci-2022-11-24-1758164.11.0-0.ci-2022-11-24-083636───4.10.0-0.nightly-2022-11-25-1456534.10.0-0.nightly-2022-11-24-1319344.10.0-0.nightly-2022-11-24-0154284.10.0-0.nightly-2022-11-22-2342484.10.0-0.nightly-2022-11-22-124150───4.10.0-0.ci-2022-11-25-1232374.10.0-0.ci-2022-11-24-1457144.10.0-0.ci-2022-11-24-0857144.10.0-0.ci-2022-11-24-0257144.10.0-0.ci-2022-11-23-082213───4.9.0-0.nightly-2022-11-22-0439524.9.0-0.nightly-2022-11-21-1914194.9.0-0.nightly-2022-11-21-1500064.9.0-0.nightly-2022-11-18-0034294.9.0-0.nightly-2022-11-16-2329374.9.0-0.nightly-2022-11-16-2122064.9.0-0.nightly-2022-11-16-1737164.9.0-0.nightly-2022-11-14-123938───4.9.0-0.ci-2022-11-25-0131174.9.0-0.ci-2022-11-25-0101174.9.0-0.ci-2022-11-24-1502464.9.0-0.ci-2022-11-24-1058354.9.0-0.ci-2022-11-24-0202244.9.0-0.ci-2022-11-23-0042354.9.0-0.ci-2022-11-16-214713───4.8.0-0.nightly-2022-11-24-1309514.8.0-0.nightly-2022-11-24-0145524.8.0-0.nightly-2022-11-23-1459574.8.0-0.nightly-2022-11-23-0521314.8.0-0.nightly-2022-11-21-191324───4.8.0-0.ci-2022-11-25-1904434.8.0-0.ci-2022-11-25-1559264.8.0-0.ci-2022-11-24-0331184.8.0-0.ci-2022-11-24-0111284.8.0-0.ci-2022-11-23-1306274.8.0-0.ci-2022-11-23-0736014.8.0-0.ci-2022-11-23-0557204.8.0-0.ci-2022-11-22-2358044.8.0-0.ci-2022-11-22-0600364.8.0-0.ci-2022-11-18-195531───4.7.0-0.nightly-2022-11-01-1719474.7.0-0.nightly-2022-10-31-1144174.7.0-0.nightly-2022-10-27-1239064.7.0-0.nightly-2022-10-17-0611324.7.0-0.nightly-2022-10-12-142149───4.7.0-0.ci-2022-11-23-1415004.7.0-0.ci-2022-11-22-1427134.7.0-0.ci-2022-11-22-0414394.7.0-0.ci-2022-11-21-1843584.7.0-0.ci-2022-11-21-1443194.7.0-0.ci-2022-11-15-0055394.7.0-0.ci-2022-11-08-200634───4.6.0-0.nightly-2022-11-17-1332454.6.0-0.nightly-2022-11-01-1643484.6.0-0.nightly-2022-10-27-0759414.6.0-0.nightly-2022-10-19-2319474.6.0-0.nightly-2022-10-12-040627───4.6.0-0.ci-2022-11-21-1446314.6.0-0.ci-2022-11-10-0349104.6.0-0.ci-2022-11-10-0210014.6.0-0.ci-2022-11-10-0140014.6.0-0.ci-2022-10-26-1849134.6.0-0.ci-2022-10-21-1851544.6.0-0.ci-2022-10-14-0734274.6.0-0.ci-2022-09-21-195006───4.13.0-ec.04.12.0-ec.54.12.0-ec.44.12.0-ec.34.12.0-ec.24.12.0-ec.14.12.0-ec.0

Source code for this page located on github