Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.6.23-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws-serial

Upgrades from:

• 4.7.5 (changes) - Failed
• 4.6.22 (changes) - Failed Success
• 4.6.21 (changes) - Failed
• 4.6.20 (changes) - Success
• 4.6.19 (changes) - Failed
• 4.6.18 (changes) - Success
• 4.6.17 (changes) - Success
• 4.6.16 (changes) - Success
• 4.6.15 (changes) - Success
• 4.6.13 (changes) - Success
• 4.6.12 - Failed
• 4.6.10 (changes) - Success
• 4.6.9 (changes) - Success
• 4.6.8 (changes) - Success
• 4.6.7 (changes) - Success
• 4.6.6 (changes) - Success
• 4.6.5 (changes) - Success
• 4.6.4 (changes) - Success
• 4.6.3 (changes) - Success
• 4.6.2 (changes) - Success
• 4.6.1 (changes) - Success
• 4.5.36 (changes) - Success Success
• 4.5.35 (changes) - Success
• 4.5.34 (changes) - Failed
• 4.5.33 (changes) - Success
• 4.5.32 (changes) - Success
• 4.5.31 (changes) - Success
• 4.5.30 (changes) - Failed
• 4.5.29 (changes) - Failed
• 4.5.28 (changes) - Success
• 4.5.27 (changes) - Failed
• 4.5.25 (changes) - Failed
• 4.5.24 (changes) - Failed
• 4.5.23 (changes) - Success
• 4.5.22 (changes) - Success
• 4.5.21 (changes) - Success
• 4.5.20 (changes) - Success
• 4.5.19 (changes) - Success
• 4.5.18 (changes) - Failed
• 4.5.17 (changes) - Failed
• 4.5.16 (changes) - Success

Upgrades to:

• 4.7.6 (changes) - Success
• 4.7.5 (changes) - Success
• 4.7.4 (changes) - Success Success
• 4.6.61 (changes) - S F F
• 4.6.53 (changes) - Failed
• 4.6.50 (changes) - Failed
• 4.6.47 (changes) - Success
• 4.6.46 (changes) - Success
• 4.6.45 (changes) - Success
• 4.6.44 (changes) - Failed
• 4.6.43 (changes) - Failed
• 4.6.42 (changes) - Success
• 4.6.41 (changes) - Success
• 4.6.40 (changes) - Failed
• 4.6.39 (changes) - Success
• 4.6.38 (changes) - Success
• 4.6.37 (changes) - Success
• 4.6.36 (changes) - Success
• 4.6.35 (changes) - Success
• 4.6.34 (changes) - Success
• 4.6.33 (changes) - Success
• 4.6.32 (changes) - Success
• 4.6.31 (changes) - Failed Failed
• 4.6.30 (changes) - Success
• 4.6.29 (changes) - Success
• 4.6.28 (changes) - Success
• 4.6.27 (changes) - Success
• 4.6.26 (changes) - Success
• 4.6.25 (changes) - Success
• 4.6.24 (changes) - Success Success

---

Loading changelog, this may take a while ...

Changes from 4.6.12

Created: 2021-03-24 05:16:55 +0000 UTC

Image Digest: sha256:5c8ab6c4a863f9ac077bc743579d9387bb7cd311a36c3197e609f8be63d17981

Release 4.6.23 was created from registry.ci.openshift.org/ocp/release:4.6.0-0.nightly-2021-03-21-131139

Components

• Kubernetes 1.19.4
• Red Hat Enterprise Linux CoreOS upgraded from 46.82.202101131942-0 to 46.82.202103211221-0 (diff)

Removed images

• local-storage-static-provisioner

Rebuilt images without code change

• cluster-bootstrap git 64410191 sha256:8630672ed792a0b9ab52715177d2a9bd72cd47bf773280b6b813704fa49eaa58
• cluster-openshift-apiserver-operator git 163e5e79 sha256:b1cb137cffc2087474b0b38590cf7cae9753f5823e677448f3306a9d1593558e
• container-networking-plugins git ca372dec sha256:6ce273494ed1f53bb63cae8bd98b3e18aafa6df2617c171c9722265863b1b692
• ironic-hardware-inventory-recorder git 2205538a sha256:66090ba3915a3d78b42c91111edc0b8ea0366537a8cc5a6de7e276bb2769f5bc
• kube-storage-version-migrator git 6deeefa7 sha256:d6c3e26cbfff1d8c79dbb99d28865e4fd078b939e45f3dddd61646ff43d6b8c9
• libvirt-machine-controllers git 1ca52ada sha256:d6970be53022930b50a821df0937083b04fa4b9dde49eae9dbf36b23b66819f7
• machine-os-content sha256:74b81659ace1115224b515a0af0fff413050ed8705cef6339280e322b7ea6138
• network-metrics-daemon git c5b56ed9 sha256:236f690d631215edfa96cb6f39a8f4f0d6770c36d97267a0687d7200d8971461

aws-ebs-csi-driver

• Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #177
• Full changelog

aws-ebs-csi-driver-operator

• Bug 1915467: redeploy CSI Controller Deployment when secret change #110
• Bug 1912720: Remove stale ResourceSyncControllerDegraded condition #105
• Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #108
• Full changelog

aws-machine-controllers

• “Bug 1912531: revendor mao” #388
• Updating ose-aws-machine-controllers builder & base images to be consistent with ART #383
• Full changelog

aws-pod-identity-webhook

• Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #131
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1929872: remove GCP role bindings before service accounts #4665
• Bug 1920552: vSphere destroy: handle failed clusters #4618
• Updating ose-baremetal-installer builder & base images to be consistent with ART #4539
• Updating ose-installer builder & base images to be consistent with ART #4538
• Updating ose-installer-artifacts builder & base images to be consistent with ART #4547
• Bug 1916297: openstack: Create Control plane nodes sequentially #4550
• Bug 1918510: installconfig: enable vsphere folders for datacenters and clusters. #4574
• Bug 1915050: Set same additional networks on Bootstrap as Control Plane #4535
• Bug 1917928: Set Additional Control Plane Security Groups on Bootstrap Node #4570
• Bug 1924670: openstack/validation: enforce control plane size #4612
• Bug 1918961: vsphere destroy: delete tag category created by installer #4579
• Bug 1920253: disable anonymous auth on bootstrap nodes #4591
• Bug 1913813: OpenStack: Skip collecting info for empty subnet IDs #4527
• Bug 1899161: openstack: consider volumes for storage requirements checks #4508
• Full changelog

baremetal-machine-controllers

• “Bug 1912531: revendor mao” #137
• Full changelog

baremetal-operator

• Updating ose-baremetal-operator builder & base images to be consistent with ART #119
• Full changelog

baremetal-runtimecfg

• Bug 1932967: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #123
• Bug 1926732: add CloseIdleConnections for HTTP K8S API healthcheck #121
• Updating baremetal-runtimecfg builder & base images to be consistent with ART #114
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1926172: add rsync & log re-tries #760
• Bug 1939549: Fix unit test to use new IS #770
• Bug 1923054: Fix error in jsonpath when object is empty #724
• Bug 1900991: idle: also annotate the service #727
• Bug 1891892: Create Windows version information #630
• Bug 1913109: Should be able to debug an init container #686
• Bug 1906796: use proper username for image verification #667
• Bug 1917548: 4.6 backports for oc adm catalog mirror #711
• Bug 1906332: bump discovery burst to 250 #716
• Updating openshift-enterprise-cli builder & base images to be consistent with ART #698
• Updating ose-tools builder & base images to be consistent with ART #704
• Updating ose-cli-artifacts builder & base images to be consistent with ART #705
• Updating openshift-enterprise-deployer builder & base images to be consistent with ART #703
• Full changelog

cloud-credential-operator

• Bug 1916868: Check 47 creds backport #287
• Bug 1910372: Backport redistribute new root creds in passthrough mode #279
• Updating ose-cloud-credential-operator builder & base images to be consistent with ART #281
• Bug 1921901: exclude run-level 0 namespaces from MutatingWebhook for Pods #292
• Bug 1896919: [release-4.6] add new credentials field for AWS Secrets #268
• Bug 1907613: operator: remove odicdiscoveryendpoint controller #277
• Full changelog

cluster-authentication-operator

• Bug 1914848: add ServiceMonitor for the oauth apiserver #396
• Full changelog

cluster-autoscaler

• Updating vertical-pod-autoscaler builder & base images to be consistent with ART #189
• Full changelog

cluster-autoscaler-operator

• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #191
• Full changelog

cluster-config-operator

• Updating ose-cluster-config-operator builder & base images to be consistent with ART #177
• Bug 1905573: [release 4.6] Add warning of the consequences of changing bound token issuer #179
• Full changelog

cluster-csi-snapshot-controller-operator

• Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART #73
• Full changelog

cluster-dns-operator

• Bug 1928773: Set CoreDNS readiness probe period and timeout each to 3 seconds #236
• Bug 1916907: Prevent dig errors from corrupting host’s /etc/hosts #231
• Bug 1903887: Set DNS DaemonSet’s maxUnavailable value to 10% #219
• Updating ose-cluster-dns-operator builder & base images to be consistent with ART #228
• Full changelog

cluster-etcd-operator

• Bug 1905566: Backup script should get the latest revision of static-pod-resources #508
• Bug 1934342: pkg/operator/metriccontroller: cleanup transports #551
• Bug 1915560: operator: remove EtcdMemberIPMigratorDegraded stale condition #521
• Bug 1918281: *: ensure etcd listens on strong ciphers #526
• Bug 1917411: pkg/operator: ensure etcd endpoints configmap #530
• Updating cluster-etcd-operator builder & base images to be consistent with ART #520
• Full changelog

cluster-image-registry-operator

• Bug 1923993: Make pruner always aware of registry name #659
• Bug 1904091: Creating prometheus record rule for v1 imports #646
• Bug 1916857: Sync status to spec with regards to Swift config #654
• Full changelog

cluster-ingress-operator

• Bug 1927364: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #547
• Bug 1918994: Override termination grace period for the router deployment #539
• Bug 1896167: Back port HAProxy reload failures alert fix #486
• Bug 1918371: Add “ingress.operator.openshift.io/hard-stop-after” annotation #535
• Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #528
• Full changelog

cluster-kube-apiserver-operator

• Bug 1891742: bump(library-go): controller/staticpod: reduce noise of not-ready containers #1029
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1913030: Add recycler pod template as a ConfigMap #490
• Bug 1916347: Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #496
• Bug 1891742: bump(library-go): controller/staticpod: reduce noise of … #493
• Full changelog

cluster-kube-scheduler-operator

• Bug 1916347: Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART #320
• Bug 1891742: bump(library-go): controller/staticpod: reduce noise of … #314
• Bug 1903586: Sync new kube-scheduler-client-cert-key on recovery #315
• Full changelog

cluster-kube-storage-version-migrator-operator

• Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #37
• Full changelog

cluster-machine-approver

• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #99
• Full changelog

cluster-monitoring-operator

• Bug 1929354: [4.6] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus #1071
• Bug 1920898: [4.6] pkg/manifests: fix prometheus-proxy trustedCA #1083
• Bug 1937907: etcdInsufficientMembers is wrong when etcd is in a pod #1080
• Bug 1918202: jsonnet: remove Ceph block devices in rules #1040
• Bug 1904091: Exporting registry v1 protocol usage metric #1002
• Bug 1912430: [Backport 4.6] Set resources to the native spec field #1028
• Bug 1907830: Backporting #965 #1022
• Updating cluster-monitoring-operator builder & base images to be consistent with ART #1036
• Full changelog

cluster-network-operator

• Bug 1938280: Include LB members for Machines created on day-2 operation #1018
• Bug 1916601: guard against the deletion of the network CRD: network.operator.openshift.io #953
• Bug 1901605: Kuryr: Allow changes to KuryrConfig #890
• Updating cluster-network-operator builder & base images to be consistent with ART #946
• Full changelog

cluster-node-tuning-operator

• Bug 1920525: Recover gracefully after Tuned errors. #197
• Updating cluster-node-tuning-operator builder & base images to be consistent with ART #190
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1916347: Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #193
• Full changelog

cluster-policy-controller

• Updating cluster-policy-controller builder & base images to be consistent with ART #53
• Full changelog

cluster-samples-operator

• Updating ose-cluster-samples-operator builder & base images to be consistent with ART #353
• Full changelog

cluster-storage-operator

• Bug 1921599: Add annotations to cluster-csi-drivers namespace #132
• Updating cluster-storage-operator builder & base images to be consistent with ART #124
• Full changelog

cluster-update-keys

• Bug 1916582: readme: specify which keys are used in nightlies/OKD/OCP builds #30
• Updating ose-cluster-update-keys builder & base images to be consistent with ART #29
• Full changelog

cluster-version-operator

• Bug 1924194: pkg/payload/task_graph: Require firstIncompleteNode to have tasks #510
• Bug 1925199: add current profile annotations to CVO manifests #512
• Bug 1927515: pkg/cvo: Use shutdownContext for final status synchronization #517
• Bug 1921180: pkg/cvo/sync_worker.go: Ignore work changes during init #506
• Bug 1918494: use child context to verify payload signature on forced update #504
• *: Replace registry.svc.ci.openshift.org with registry.ci.openshift.org #502
• Full changelog

configmap-reloader

• Updating configmap-reload builder & base images to be consistent with ART #26
• Full changelog

console

• Bug 1927855: sort cluster task in pipeline builder #8139
• Bug 1925037: fix delete app modal error when resource not found #8053
• Bug 1935096: Apply var pf-global–FontFamily–monospace to the create secret textarea input #8312
• Bug 1931515: allow choice of binding type when creating RoleBinding #8212
• Bug 1933017: Fix to avoid overriding of d/dc pod template container values #8322
• Bug 1934664: Consider finally tasks when calculating task status #8292
• Bug 1928230: retry co-fetch on 409 POST or 429 #8155
• Bug 1933727: fix Internal registry deploy flow #8267
• Bug 1926121: Listing Subscriptions in OLM should also show them when ‘All Projects’ namespace is picked #8096
• Bug 1923939: add missing trigger types and update the optional fields - 4.6 #8015
• Bug 1927800: fix query browser prometheus URL for non admin user #8138
• Bug 1926371: scale pods using the ‘scale’ subresource #8099
• Bug 1926340: Fix that image containers are fetched from external container registries (which doesn’t work for private image containers) #8098
• Bug 1924437: Missing User RoleBindings in the Project Access Web UI #8034
• Bug 1924069: fix pipeline rerun when pipelineSpec is embedded #8024
• Bug 1919138: helmchartrepo is not http(s)_proxy-aware #7901
• Bug 1916860: Filter out helm charts based on kubernetes version #7851
• Bug 1920493: fix pipeline visualization with same pipeline & task name #7927
• Bug 1920530: - System roles are not present while trying to create new role binding through web console #7929
• Bug 1914342: make filesystem queries compatible with both RHCOS and RHEL nodes #7777
• Bug 1916406: Helm chart repository index can contain unresolvable relative URL’s #7841
• Bug 1911260: Fix logs streaming issue in multistream logs #7663
• Bug 1924224: Fix source code URL for apps created using self-hosted repositories #8031
• Bug 1921603: Fix crash when loaded is true but the data set doesn’t include the pods #7985
• Bug 1916378: fix skipped tasks in conditional pipelines #7843
• Bug 1915013: Fix pipeline visualization issue when taskspecs is used #7859
• Bug 1910199: Replace ‘Baremetal’ with ‘BareMetal’ in the supported platforms for I… #7637
• Bug 1924085: don’t hard-code artifact dir path #8025
• Bug 1893738: Fix crash when helm manifest yaml contains duplicate keys #7069
• Bug 1887813: assign masquerade to pod interface in RHV import #6936
• Bug 1907827: fixes issue with kn resources if trigger goes to ksvc and IMC from same broker #7550
• Bug 1905788: - Role name missing on create role binding form #7476
• Bug 1909673: Hide scale buttons of pod donut for Pod resources #7472
• Bug 1891697: Handle missing labels as empty #7002
• Updating openshift-enterprise-console builder & base images to be consistent with ART #7811
• Full changelog

console-operator

• Updating openshift-enterprise-console-operator builder & base images to be consistent with ART #497
• Full changelog

coredns

• Updating coredns builder & base images to be consistent with ART #49
• Full changelog

csi-driver-manila

• Updating csi-driver-manila builder & base images to be consistent with ART #42
• Full changelog

csi-driver-manila-operator

• Updating csi-driver-manila-operator builder & base images to be consistent with ART #76
• Bug 1918367: Make Manila operator more tolerant #88
• Bug 1921599: Add “openshift.io/node-selector” annotation to namespace #87
• Full changelog

csi-driver-nfs

• Bug 1916166: Updating csi-driver-nfs builder & base images to be consistent with ART #38
• Full changelog

csi-external-attacher

• Updating csi-attacher builder & base images to be consistent with ART #27
• Full changelog

csi-external-provisioner

• Updating csi-provisioner builder & base images to be consistent with ART #35
• Full changelog

csi-external-resizer

• Updating ose-csi-external-resizer builder & base images to be consistent with ART #116
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• Updating ose-csi-snapshot-controller builder & base images to be consistent with ART #37
• Updating ose-csi-external-snapshotter builder & base images to be consistent with ART #38
• Full changelog

csi-livenessprobe

• Updating csi-livenessprobe builder & base images to be consistent with ART #20
• Full changelog

csi-node-driver-registrar

• Updating csi-node-driver-registrar builder & base images to be consistent with ART #25
• Full changelog

docker-builder

• Bug 1939219: bump(*): #225
• Bug 1919359: better surface dockerconfigjson errors causing image pull errors #210
• Updating openshift-enterprise-builder builder & base images to be consistent with ART #201
• Bug 1920626: more automount of cluster trust bundle reverts; no longer automount /run/secrets #212
• Bug 1920626: narrow scope of rhsm transient bind mount #211
• Force use of runc, since we know we’re privileged, and customize our seccomp filter #207
• Full changelog

docker-registry

• Bug 1930802: Replace bitbucket.org/ww/goautoneg with its mirror #266
• Updating openshift-enterprise-registry builder & base images to be consistent with ART #261
• Full changelog

etcd

• Updating ose-etcd builder & base images to be consistent with ART #66
• Full changelog

gcp-machine-controllers

• “Bug 1912531: revendor mao” #149
• Full changelog

grafana

• Updating grafana builder & base images to be consistent with ART #53
• Full changelog

haproxy-router

• Bug 1900991: Move idle check from endpoints to service #253
• Bug 1896167: metrics: Rework template_router_reload_failure metric #215
• Bug 1918194: Prevent unnecessary reloads in router shards #247
• Bug 1918371: Add tunnel-timeout and hard-stop-after options to haproxy template #249
• Updating openshift-enterprise-haproxy-router builder & base images to be consistent with ART #246
• Updating ose-haproxy-router-base builder & base images to be consistent with ART #242
• Full changelog

hyperkube

• Bug 1933624: 4.6: UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning #596
• Bug 1930960: UPSTREAM: 94087: kubelet: node sync at least once #582
• Bug 1918994: Override termination grace period on annotation #533
• Bug 1913543: UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics #511
• Bug 1924785: UPSTREAM: 89885: SQUASH: Fix cinder crash #548
• BUG 1891107: UPSTREAM: 95259: allocate service-account flowschema to global-default #428
• Bug 1926262: Prevent GCP e2e tests from triggering a rate limit on the listZone API #556
• Bug 1919453: Allow test images to be in a single mirror #536
• Bug 1919069: UPSTREAM: 98103: kubelet: Delete static pod gracefully and fix mirrorPodTerminationMap leak #535
• Bug 1900241: UPSTREAM: Skip “subPath should be able to unmount” NFS test #468
• Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #519
• Bug 1894916: Panic output due to timeouts in kube apiserver #480
• Merge #540
• Bug 1907461: kubelet: do not rerun init containers if any main containers have status #486
• Bug 1915583: UPSTREAM: 97860: move all variables in sampleAndWaterMarkHistograms::innerSet #521
• Bug 1916335: UPSTREAM: 96310: PV e2e: fix race in NFS recycling test #524
• Bug 1915247: UPSTREAM: 97915: kube-aggregator: fix apiservice availability gauge #518
• Bug 1887308: UPSTREAM: 94712: avoid potential secret leaking while reading .dockercfg #437
• Bug 1912564: UPSTREAM: 97323: fix the deadlock in priority and fairness config controller #501
• Bug 1912564: UPSTREAM: 97206: clean up executing request on panic #502
• Full changelog

insights-operator

• [release 4.6] Bug 1891544: Adds ContainerRuntimeConfig gatherer #238
• Bug 1913645: Improved Red Hat image and crashlooping OpenShift pod collection #304
• [release 4.6] Bug 1889676: Gather installplans #243
• [release 4.6] Bug 1887759: Adds MachineConfigPool gatherer #213
• [release 4.6] Bug 1905031: Collect spec config for clusteroperator resources #286
• Updating ose-insights-operator builder & base images to be consistent with ART #311
• Full changelog

ironic

• Bug 1917481: Wait for expected number of drivers starting API #136
• Bug 1918178: Explicitly set minimum versions of ironic packages #141
• Bug 1899107: Limit the default number of API workers to 4 #122
• Bug 1903649: Re-enable automated_clean #128
• Bug 1917937: Force rebuild to pick up latest dnsmasq #139
• Updating ironic builder & base images to be consistent with ART #135
• Full changelog

ironic-inspector

• Updating ironic-inspector builder & base images to be consistent with ART #55
• Bug 1918178: Explicitly set minimum versions of python libraries #60
• Full changelog

ironic-ipa-downloader

• Updating ironic-ipa-downloader builder & base images to be consistent with ART #58
• Full changelog

ironic-machine-os-downloader

• Updating ironic-rhcos-downloader builder & base images to be consistent with ART #35
• Full changelog

ironic-static-ip-manager

• Bug 1918779: Toggle addr_gen_mode to 1 and back #17
• Updating ironic-static-ip-manager builder & base images to be consistent with ART #16
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• [release 4.6] Bug 1929919: Upgrade Jenkins to 2.263.3 #1234
• Bug 1922139: Update Maven version to 3.6 in maven agent #1209
• Bug 1918637: Updating openshift-jenkins-2 builder & base images to be consistent with ART #1202
• Bug 1918619: Updating ose-jenkins-agent-base builder & base images to be consistent with ART #1201
• Bug 1918628: Updating ose-jenkins-agent-nodejs-10 builder & base images to be consistent with ART #1205
• Bug 1918632: Updating ose-jenkins-agent-nodejs-12 builder & base images to be consistent with ART #1204
• Bug 1918630: Updating ose-jenkins-agent-maven builder & base images to be consistent with ART #1203
• Bug 1914101: Update ant plugin CVE-2020-11979 #1194
• Bug 1899472: Add casc plugins #1185
• Full changelog

k8s-prometheus-adapter

• Updating ose-prometheus-adapter builder & base images to be consistent with ART #42
• Full changelog

keepalived-ipfailover, pod

• Updating openshift-enterprise-pod builder & base images to be consistent with ART #66
• Updating openshift-enterprise-base builder & base images to be consistent with ART #64
• Full changelog

kube-proxy, sdn

• Bug 1937547: networkpolicy: pass traffic through NAT to handle possible tuple collisions #274
• Bug 1928773: Prefer local endpoint for cluster DNS service #261
• Updating ose-sdn builder & base images to be consistent with ART #244
• Updating kube-proxy builder & base images to be consistent with ART #247
• Bug 1904455: NetworkPolicy performance fixes, v2 #249
• Full changelog

kube-rbac-proxy

• Updating kube-rbac-proxy builder & base images to be consistent with ART #39
• Full changelog

kube-state-metrics

• Updating kube-state-metrics builder & base images to be consistent with ART #42
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1938161: Get trunks more diligently #478
• Bug 1897526: Fix ports count on subnet #427
• Bug 1894408: Delete ports created for host networking pods #395
• Bug 1893681: Bulk port creation exception not completely formatted #390
• Bug 1906741: Skip unscheduled pods when deleting NPs #428
• Bug 1920995: Decrease CPU usage of Prometheus exporter #440
• Updating kuryr-cni builder & base images to be consistent with ART #435
• Updating kuryr-controller builder & base images to be consistent with ART #434
• Full changelog

machine-api-operator

• Bug 1933676: Cherry-pick: Azure disconnected reject publicIP setting #812
• Updating ose-machine-api-operator builder & base images to be consistent with ART #786
• Bug 1912531: 4.6: Update kubectl dep #782
• Bug 1890452: Bump Azure dependency to include BYOK encryption fields #763
• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #779
• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging for operator #784
• Full changelog

machine-config-operator

• Bug 1897552: Mode mismatch fix for confusing strings #2353
• Bug 1933075: backport systemd dropin/units zero-length handling #2435
• Bug 1906298: update MCDDrainErr to reduce cardinality & fix nodename #2419
• Bug 1908940: [test] Skip TestKernelType on OKD #2311
• Bug 1919272: [release-4.6] NM resolve prepender: support appending a nameserver for systemd-resolved #2356
• Bug 1901602: Inject version into controllerconfig, refuse mismatches #2257
• Bug 1899535: ds/machine-config-daemon: Set maxUnavailable 10% #2240
• Bug 1893409: daemon: add back metrics for pivot error #2216
• Bug 1913099: Handle keepalived hangs in liveness probe #2319
• Bug 1914910: Add a prestart line to change ownership of openvswitch dir #2331
• Bug 1913316: check for scheduler support before setting #2321
• Bug 1914892: update.go: only set BFQ scheduler for masters #2330
• Updating ose-machine-config-operator builder & base images to be consistent with ART #2335
• Full changelog

mdns-publisher

• Bug 1936539: Update zeroconf to pull in rate-limiting fix #27
• Updating ose-mdns-publisher builder & base images to be consistent with ART #22
• Full changelog

multus-admission-controller

• Updating ose-multus-admission-controller builder & base images to be consistent with ART #31
• Full changelog

multus-cni

• Updating multus-cni builder & base images to be consistent with ART #85
• Full changelog

multus-route-override-cni

• Updating ose-multus-route-override-cni builder & base images to be consistent with ART #11
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1898616: Excluded subnet handling for ipv6 [backport 4.6] #37
• Bug 1898672: Removes error when deallocating IP errors out, instead just warns [backport 4.6] #40
• Updating ose-multus-whereabouts-ipam-cni builder & base images to be consistent with ART #44
• Full changelog

must-gather

• Updating ose-must-gather builder & base images to be consistent with ART #203
• Full changelog

oauth-apiserver

• Updating ose-oauth-apiserver builder & base images to be consistent with ART #36
• Bug 1919966: fixes a data race in SerializeObject function #38
• Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #34
• Full changelog

oauth-proxy

• Bug 1915667: remove logging when authz header is present but basic auth is not attempted #200
• Bug 1891725: don’t segfault on wrong option combination #193
• Full changelog

oauth-server

• Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #64
• Full changelog

openshift-apiserver

• Bug 1919966: fixes a data race in SerializeObject function #182
• Bug 1900991: policy/unidling-controller: allow get/update on services #183
• Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #162
• Bug 1894916: Panic output due to timeouts in openshift-apiserver #161
• Full changelog

openshift-controller-manager

• Bug 1900991: unidling: switch away from endpoints to the service #167
• Updating ose-openshift-controller-manager builder & base images to be consistent with ART #157
• remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #161
• Full changelog

openshift-state-metrics

• Updating openshift-state-metrics builder & base images to be consistent with ART #65
• Full changelog

openstack-machine-controllers

• Bug 1933667: Update ose-openstack-machine-controllers builder & base images to be consistent with ART #154
• Bug 1933667: Updating ose-openstack-machine-controllers builder & base images to be consistent with ART #165
• “Bug 1912531: revendor mao” #164
• Full changelog

operator-lifecycle-manager

• Bug 1938618: Infer package name property for unannotated CSVs, if possible. #2043
• Bug 1938369: fix(resolver): Allow skipped versions to be installed initially #2040
• Bug 1934637: Honor all subscriptions to a package #2026
• Bug 1929335: Only re-create operator resource if it has existing components #2008
• Bug 1922919: Fix zero-delay resyncs for certain registry update policies. #1989
• Bug 1924257: Fix time comparison in CSV reconcile loop #1991
• Use docker driver for minikube installation test. #1988
• Bug 1917498: use OLM client when installing CRDs #1967
• Bug 1918525: Fix infinite loop when a CSV replacement chain contains a cycle. #1970
• Bug 1920873: Support InstallPlan steps upgrading existing ClusterIP Services. #1977
• Bug 1908463: Reduce log noise from OLM #1910
• Full changelog

operator-marketplace

• Bug 1937986: wrong community catalog image reference #384
• Bug 1915905: Preserve custom catsrc w/ default catsrc name #375
• Full changelog

operator-registry

• Updating operator-registry builder & base images to be consistent with ART #550
• Bug 1915068: Fix windows build with golang 1.15 #547
• Bug 1918012: Unexpected images left in related_images after pruning #560
• Bug 1889865: Avoid duplicate registry binaries across downstream image layers. #535
• Bug 1904547: Include the bundle image itself as a related image. #532
• Full changelog

ovirt-csi-driver

• Bug 1924623: pass ovirtClient to identity and remove redundant call to Test connection #69
• Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #71
• Bug 1921817: support raw block devices #68
• Bug 1917149: [release-4.6] bump go-ovirt and run make vendor #64
• Full changelog

ovirt-csi-driver-operator

• Bug 1924626: increase livenessProbe period #44
• Bug 1916100: [release-4.6] bump go-ovirt to 2020-10-23 #38
• Bug 1916096: [release-4.6] check FollowLink errors #37
• Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART #39
• Full changelog

ovirt-machine-controllers

• Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #81
• Full changelog

ovn-kubernetes

• Bug 1935691: [release-4.6] Backport port_claim improvement #459
• Bug 1933752: Bump to ovn2.13-20.09.0-7.el8fdn #455
• Bug 1889460: Guard against nil address set usage #353
• Bug 1920482: Configure GARP for egress IP re-assignment #424
• Bug 1921274: Fix MCS-blocking iptables rules #425
• Bug 1890274: Fixes External IP with local gateway mode #354
• Bug 1912328: Bump OVS to 2.13.0-72 #372
• Bug 1917240: [4.6] Backport Add clusterIP to ingress policy AS for SNAT-ed hairpin Traffic Cherry Pick #411
• Bug 1917609: Fixes deleting exgw pod #421
• Bug 1912388: Fix broken make check on 4.6 #395
• Bug 1898160: Egress IP fail-over and health checks #394
• Bug 1886062: Backport klog v2 changes to 4.6 #391
• Full changelog

prom-label-proxy

• Updating prom-label-proxy builder & base images to be consistent with ART #331
• Full changelog

prometheus

• Updating golang-github-prometheus-prometheus builder & base images to be consistent with ART #71
• Full changelog

prometheus-alertmanager

• Updating golang-github-prometheus-alertmanager builder & base images to be consistent with ART #42
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1935586: pkg/prometheus: remove liveness probe #110
• Updating prometheus-operator builder & base images to be consistent with ART #103
• Updating prometheus-config-reloader builder & base images to be consistent with ART #104
• Full changelog

prometheus-node-exporter

• Bug 1928073: Remove escape characters #83
• Updating golang-github-prometheus-node_exporter builder & base images to be consistent with ART #77
• Full changelog

service-ca-operator

• Updating ose-service-ca-operator builder & base images to be consistent with ART #135
• Full changelog

telemeter

• Updating telemeter builder & base images to be consistent with ART #368
• Full changelog

tests

• Bug 1939549: Update tests to use Ruby 2.7 #25967
• Bug 1930724: server-side apply e2e: fix oauthclientauthorization race with KCM #25908
• Bug 1902054: Update multicast test image for use in release-4.6 #25825
• Bug 1900991: test/extended/router: add idle/unidle e2e test #25858
• Bug 1925539: Allow RHE7 /run contents for build fs test #25864
• Bug 1924744: allow OKD /run contents for build fs test #25851
• Bug 1900991: idle.sh: Drop endpoints mocks from idle tests #25855
• Bug 1920626: add test to verify build /run fs contents #25838
• Bug 1921473: don’t wait for PV removal in volumes.sh #25831
• Updating openshift-enterprise-tests builder & base images to be consistent with ART #25796
• Bug 1917014: replace test/cmd/builds.sh direct/indirect docker.io refs with imagestream image refs #25805
• Bug 1916687: broaden acceptance of scl sample s2i image usage messages #25804
• Full changelog

thanos

• Updating thanos builder & base images to be consistent with ART #44
• Bug 1918792: pkg/rules/proxy: fix hotlooping when receiving client errors #47
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.nightly-2024-10-07-2009534.18.0-0.nightly-2024-10-07-1343094.18.0-0.nightly-2024-10-07-0900364.18.0-0.nightly-2024-10-07-0404314.18.0-0.nightly-2024-10-06-2232324.18.0-0.nightly-2024-10-06-1741044.18.0-0.nightly-2024-10-06-1033154.18.0-0.nightly-2024-10-06-0535524.18.0-0.nightly-2024-10-05-2227174.18.0-0.nightly-2024-10-05-1732524.18.0-0.nightly-2024-10-05-1246484.18.0-0.nightly-2024-10-05-0731594.18.0-0.nightly-2024-10-04-2108384.18.0-0.nightly-2024-10-04-1312004.18.0-0.nightly-2024-10-04-0433524.18.0-0.nightly-2024-10-02-2102284.18.0-0.nightly-2024-10-02-1251034.18.0-0.nightly-2024-10-02-0810044.18.0-0.nightly-2024-10-01-2349404.18.0-0.nightly-2024-10-01-1058524.18.0-0.nightly-2024-10-01-0628044.18.0-0.nightly-2024-10-01-0159144.18.0-0.nightly-2024-09-30-1618174.18.0-0.nightly-2024-09-30-1012064.18.0-0.nightly-2024-09-30-0510284.18.0-0.nightly-2024-09-29-2226034.18.0-0.nightly-2024-09-29-1505564.18.0-0.nightly-2024-09-27-2127074.18.0-0.nightly-2024-09-27-114528───4.18.0-0.ci-2024-10-07-1855244.18.0-0.ci-2024-10-07-1254524.18.0-0.ci-2024-10-07-0654524.18.0-0.ci-2024-10-06-2015334.18.0-0.ci-2024-10-06-1415334.18.0-0.ci-2024-10-06-0815334.18.0-0.ci-2024-10-05-1955564.18.0-0.ci-2024-10-05-1355554.18.0-0.ci-2024-10-05-0755544.18.0-0.ci-2024-10-05-015554───4.17.0-0.nightly-2024-10-07-1410004.17.0-0.nightly-2024-10-07-0310204.17.0-0.nightly-2024-10-06-2052074.17.0-0.nightly-2024-10-06-1332534.17.0-0.nightly-2024-10-06-0649224.17.0-0.nightly-2024-10-06-0210394.17.0-0.nightly-2024-10-05-2116464.17.0-0.nightly-2024-10-05-1409494.17.0-0.nightly-2024-10-05-0720184.17.0-0.nightly-2024-10-05-0245464.17.0-0.nightly-2024-10-04-1709584.17.0-0.nightly-2024-10-04-0916084.17.0-0.nightly-2024-10-04-0049384.17.0-0.nightly-2024-10-03-1729574.17.0-0.nightly-2024-10-03-1012194.17.0-0.nightly-2024-10-03-0216164.17.0-0.nightly-2024-10-02-1740474.17.0-0.nightly-2024-10-02-0714074.17.0-0.nightly-2024-10-01-1837414.17.0-0.nightly-2024-10-01-0753534.17.0-0.nightly-2024-09-30-2036524.17.0-0.nightly-2024-09-30-0743484.17.0-0.nightly-2024-09-29-1734214.17.0-0.nightly-2024-09-27-2135034.17.0-0.nightly-2024-09-27-1432004.17.0-0.nightly-2024-09-27-0951224.17.0-0.nightly-2024-09-27-0448514.17.0-0.nightly-2024-09-26-2355434.17.0-0.nightly-2024-09-26-1859484.17.0-0.nightly-2024-09-26-1459484.17.0-0.nightly-2024-09-25-1311594.17.0-0.nightly-2024-09-25-0611414.17.0-0.nightly-2024-09-24-2117024.17.0-0.nightly-2024-09-23-211417───4.17.0-0.ci-2024-10-07-1642384.17.0-0.ci-2024-10-07-1042384.17.0-0.ci-2024-10-05-1325534.17.0-0.ci-2024-10-05-0725534.17.0-0.ci-2024-10-05-0125534.17.0-0.ci-2024-10-04-192553───4.16.0-0.nightly-2024-10-07-1438324.16.0-0.nightly-2024-10-07-0712284.16.0-0.nightly-2024-10-07-0229344.16.0-0.nightly-2024-10-06-1921064.16.0-0.nightly-2024-10-06-1249554.16.0-0.nightly-2024-10-06-0737384.16.0-0.nightly-2024-10-06-0229024.16.0-0.nightly-2024-10-05-2148254.16.0-0.nightly-2024-10-05-1721164.16.0-0.nightly-2024-10-05-1230184.16.0-0.nightly-2024-10-05-0537514.16.0-0.nightly-2024-10-04-2214304.16.0-0.nightly-2024-10-04-1645364.16.0-0.nightly-2024-10-04-0746364.16.0-0.nightly-2024-10-03-2034494.16.0-0.nightly-2024-10-03-1536124.16.0-0.nightly-2024-10-03-0858254.16.0-0.nightly-2024-10-03-0331234.16.0-0.nightly-2024-10-02-2208524.16.0-0.nightly-2024-10-02-1438094.16.0-0.nightly-2024-10-02-0936034.16.0-0.nightly-2024-10-02-0446164.16.0-0.nightly-2024-10-01-2132254.16.0-0.nightly-2024-10-01-1303314.16.0-0.nightly-2024-10-01-0824414.16.0-0.nightly-2024-10-01-0336074.16.0-0.nightly-2024-09-30-2001214.16.0-0.nightly-2024-09-30-1432334.16.0-0.nightly-2024-09-30-0843134.16.0-0.nightly-2024-09-30-0133274.16.0-0.nightly-2024-09-29-1939404.16.0-0.nightly-2024-09-29-1146264.16.0-0.nightly-2024-09-29-0507414.16.0-0.nightly-2024-09-28-2156054.16.0-0.nightly-2024-09-28-1059484.16.0-0.nightly-2024-09-28-0258284.16.0-0.nightly-2024-09-27-2058244.16.0-0.nightly-2024-09-27-1523384.16.0-0.nightly-2024-09-27-0950464.16.0-0.nightly-2024-09-27-0417134.16.0-0.nightly-2024-09-26-1904114.16.0-0.nightly-2024-09-26-1312484.16.0-0.nightly-2024-09-26-0644594.16.0-0.nightly-2024-09-26-0112094.16.0-0.nightly-2024-09-25-0346364.16.0-0.nightly-2024-09-24-060552───4.16.0-0.ci-2024-10-07-1602054.16.0-0.ci-2024-10-07-0851124.16.0-0.ci-2024-10-06-0336534.16.0-0.ci-2024-10-05-2136534.16.0-0.ci-2024-10-05-1440364.16.0-0.ci-2024-10-05-0038314.16.0-0.ci-2024-10-04-183831───4.15.0-0.nightly-2024-10-07-1546064.15.0-0.nightly-2024-10-07-1030254.15.0-0.nightly-2024-10-07-0626104.15.0-0.nightly-2024-10-07-0215124.15.0-0.nightly-2024-10-06-2013234.15.0-0.nightly-2024-10-06-1246264.15.0-0.nightly-2024-10-06-0531504.15.0-0.nightly-2024-10-05-2235124.15.0-0.nightly-2024-10-05-1608474.15.0-0.nightly-2024-10-05-0953214.15.0-0.nightly-2024-10-05-0318404.15.0-0.nightly-2024-10-04-2025204.15.0-0.nightly-2024-10-04-1418104.15.0-0.nightly-2024-10-04-0701124.15.0-0.nightly-2024-10-04-0015484.15.0-0.nightly-2024-10-03-1321174.15.0-0.nightly-2024-10-03-0640284.15.0-0.nightly-2024-10-02-2345224.15.0-0.nightly-2024-10-02-164209───4.15.0-0.ci-2024-10-07-1239344.15.0-0.ci-2024-10-05-0325564.15.0-0.ci-2024-10-04-1353164.15.0-0.ci-2024-10-04-0753164.15.0-0.ci-2024-10-04-0153164.15.0-0.ci-2024-10-03-1626364.15.0-0.ci-2024-10-03-0932444.15.0-0.ci-2024-10-03-0102404.15.0-0.ci-2024-10-02-091951───4.14.0-0.nightly-2024-10-07-1518374.14.0-0.nightly-2024-10-07-1106254.14.0-0.nightly-2024-10-07-0617294.14.0-0.nightly-2024-10-07-0058094.14.0-0.nightly-2024-10-06-2019574.14.0-0.nightly-2024-10-06-1433284.14.0-0.nightly-2024-10-06-0823364.14.0-0.nightly-2024-10-06-0248114.14.0-0.nightly-2024-10-05-2034424.14.0-0.nightly-2024-10-05-1537314.14.0-0.nightly-2024-10-05-1105474.14.0-0.nightly-2024-10-05-0505084.14.0-0.nightly-2024-10-04-2306064.14.0-0.nightly-2024-10-04-1741044.14.0-0.nightly-2024-10-04-1030134.14.0-0.nightly-2024-10-04-0521224.14.0-0.nightly-2024-10-04-0003094.14.0-0.nightly-2024-10-03-1634104.14.0-0.nightly-2024-10-03-0916484.14.0-0.nightly-2024-10-03-0354414.14.0-0.nightly-2024-10-02-235505───4.14.0-0.ci-2024-10-07-1106554.14.0-0.ci-2024-10-05-0612024.14.0-0.ci-2024-10-04-1641274.14.0-0.ci-2024-10-04-0548034.14.0-0.ci-2024-10-03-1828514.14.0-0.ci-2024-10-02-1945014.14.0-0.ci-2024-10-02-0424134.14.0-0.ci-2024-10-01-1621074.14.0-0.ci-2024-09-30-1229014.14.0-0.ci-2024-09-27-2006394.14.0-0.ci-2024-09-27-055354───4.13.0-0.nightly-2024-10-04-1439374.13.0-0.nightly-2024-10-02-2002544.13.0-0.nightly-2024-10-02-1130014.13.0-0.nightly-2024-10-02-0308494.13.0-0.nightly-2024-10-01-0919094.13.0-0.nightly-2024-10-01-031909───4.13.0-0.ci-2024-10-07-1837344.13.0-0.ci-2024-10-07-0923414.13.0-0.ci-2024-10-03-0339324.13.0-0.ci-2024-10-02-1630274.13.0-0.ci-2024-10-02-0357304.13.0-0.ci-2024-10-01-1941384.13.0-0.ci-2024-10-01-0453474.13.0-0.ci-2024-09-30-0326574.13.0-0.ci-2024-09-26-2049304.13.0-0.ci-2024-09-26-070632───4.12.0-0.nightly-2024-10-04-1439084.12.0-0.nightly-2024-10-03-0201424.12.0-0.nightly-2024-10-02-1130114.12.0-0.nightly-2024-10-02-0245494.12.0-0.nightly-2024-10-01-1921534.12.0-0.nightly-2024-10-01-035743───4.12.0-0.ci-2024-10-07-1839584.12.0-0.ci-2024-10-04-1534124.12.0-0.ci-2024-10-04-0916044.12.0-0.ci-2024-10-03-1854184.12.0-0.ci-2024-10-03-1222474.12.0-0.ci-2024-10-02-2353424.12.0-0.ci-2024-10-02-1010074.12.0-0.ci-2024-10-01-154048───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-28-2035454.11.0-0.ci-2024-06-18-0336354.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.14.18.0-ec.0

Source code for this page located on github