4.6.47

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.6.47-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.5.21, 4.5.22, 4.5.24, 4.5.25, 4.5.28, 4.5.29, 4.5.31, 4.5.32, 4.5.34, 4.5.35, 4.5.36, 4.6.10, 4.6.12, 4.6.13, 4.6.15, 4.6.16, 4.6.18, 4.6.19, 4.6.20, 4.6.21, 4.6.22, 4.6.24, 4.6.25, 4.6.26, 4.6.27, 4.6.28, 4.6.30, 4.6.31, 4.6.32, 4.6.33, 4.6.34, 4.6.36, 4.6.37, 4.6.38, 4.6.39, 4.6.40, 4.6.41, 4.6.6, 4.6.7, 4.6.8

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.6.17

Created: 2021-10-06 14:01:25 +0000 UTC

Image Digest: sha256:5f57680f3fc9632b0e6db4a9a8804d347108e96c38bc769b03e4158576035895

Release 4.6.47 was created from registry.ci.openshift.org/ocp/release:4.6.0-0.nightly-2021-10-05-160021

Components

Kubernetes 1.19.4
Red Hat Enterprise Linux CoreOS upgraded from 46.82.202102051640-0 to 46.82.202110041927-0 (diff)

New images

driver-toolkit git bd508e26 sha256:b1c4d1d15102a93bcb9caf3341b9d0734ec8d851a457ca5846cb9d14be9759b0

Removed images

local-storage-static-provisioner

Rebuilt images without code change

aws-ebs-csi-driver git b4647c12 sha256:c7779c311b248e5ece4b5aef8fadd4b828c02bb35065812be5bb589f69bea994
baremetal-operator git b4b10a08 sha256:5617913e9932aa2abf4b91d3f81db0c68b16ac8ab7b24a7ad5de6074e69f8d10
cluster-autoscaler-operator git 8e81a68d sha256:d11d31f65fc27476a31a6aecfd63f421b440b20a8a9794ad2630f9dccfda1d0b
cluster-bootstrap git 64410191 sha256:7a62a76232d8201f980e3d58e17bdb34dfb35db03a40b3492c7457ec85d0d061
cluster-csi-snapshot-controller-operator git 68618ad3 sha256:10ff0182421d4946bac5ca51acf7314e898e1e343d8564779e180f6e8152adfa
cluster-kube-apiserver-operator git 0a8f1f99 sha256:0ef9463aee50f2739729764663d699e7a5a698df6968133b47885e238d562ddb
cluster-kube-scheduler-operator git 0b9b05bc sha256:cd915561550ebf07d58a79c66fad455c33e9e15b3c41b2c3d16e7a5458bc7608
cluster-machine-approver git a6320f45 sha256:2f1e7a417ad871dab1159bed9bbaed0036766b4957a39f6475c044d6f31e5a22
cluster-policy-controller git aa12fbe3 sha256:7f4c574501b38cc68a961a4e2bcf0984b0dd99414e00def1f634abcc049ca593
cluster-storage-operator git 58bf46ea sha256:c5285126f21582decafd84c7b8b1eb9bde0b7cd82effb0787d008d9ee7e8f9e4
cluster-update-keys git 70c87c70 sha256:06a3b2dd9bda370bf77fe5ac2b399ced3b3f48afe65f7449112387903e8a36c1
configmap-reloader git 2ac2b635 sha256:b1c15bf0a28bdd61e0dd4ba76f388295dca0fa2d08ff9dcf3aa92e6080438711
console-operator git 7fd78a28 sha256:c21e452422d72ddd6ffe4e73b525d9dcb58742d3f8d2a6353971c1d769e6ab01
container-networking-plugins git ca372dec sha256:1a9613169df7ee83d687f7b43e7a564a55ac9913bd00257407cd1ef96d9b8c44
coredns git 885fb55e sha256:a47ac275c5b2decd7521968198f9e86916891bce1d49bb4a5e985a2e575b5a6b
csi-driver-manila git 6dd9c201 sha256:3e047881fe768b2df430f2a599dd7a7e1b68db04108a8fc382ddd1e247a9c0a0
csi-driver-nfs git 5e962cbd sha256:21b8a55343a5f8322c2bbd66373ec6aa87044bd1d40ff74859729c9548105868
csi-external-attacher git 45e712af sha256:a6bca78043199f303121d7fabdde4729ebea6c7e1b6b69c826c194e3a0f4e8a6
csi-external-provisioner git e079d112 sha256:099606fd6ad2691a9ce239eb5b166847ea7080cb8c206608fcf3c159402595fb
csi-external-resizer git b2c4b923 sha256:eeffce109113154ed194bacfc78918be2ab8bbea7bb4427d34610a00477bf3b4
csi-external-snapshotter git c80c3836 sha256:b6a72aea92871a516f66640db524649827ecb8ca3f11ffb6509403753620519c
csi-livenessprobe git 53f2398a sha256:9f5205009a1a3e8c82a20c671556f69a15b9152c2badfd08119c376fdfd00233
csi-node-driver-registrar git 4ba25176 sha256:879ad31bf282419d3cbb7ffec5375e106f4c2511e1625c58fb0f1ef07bbd4c09
csi-snapshot-controller git c80c3836 sha256:610450376f44a7eb543cb20cc025410f6f0e6d606f5ca05370dfb2c0205e4cd3
ironic-hardware-inventory-recorder git 2205538a sha256:992d2c46d4a86fcf71cb8a4a23e223af9a75fcb59a3bca71eba9cb63f79800b6
ironic-static-ip-manager git 2f197d07 sha256:0d6a4ea5b88f12088288e261ea42421745682bdc53d12725a9eac15039b6f173
kube-storage-version-migrator git 6deeefa7 sha256:ed78355a2073159994205b1f98a225fc20bf57ffb76419ddb809b9eba3c0ce01
machine-os-content sha256:9f932c4e3e65c840cd97d082e24918e2d0b46e7b388b50ac0186f197c97482be
multus-admission-controller git de9b6e18 sha256:3af89fc58810a32e881fb5441e9d2511863a223ad5996c0a821908efe7a8a4ca
multus-cni git 30668ec2 sha256:527d1bfefe1606781ace26a5ce9003accbfef92c4a26500a9c576cbd000bef12
multus-route-override-cni git da944e11 sha256:9245b98685112a4a9a00d6e81cfff88b586927c22aab040b244d67e260399079
oauth-server git 48380052 sha256:19b7a1532bff21778d4c096d49bbcbb1fbc83d4fed7f14d7130ed59d63eaaa4f
openshift-apiserver git c09e60bc sha256:6ca447b4bc1d7d4e9917e7a9ea1404c71072432944846bdb4a8cf6099ba79816
prom-label-proxy git 2b514992 sha256:bc5972cf74a2ee8d189ee143ec54275202a8a3f232772d3487b6fec403f81547
prometheus git f97d7ec8 sha256:f4a2647fac87d7633b83faba5f6cd11751ee18779cdc6b050a10a8654d025084
prometheus-alertmanager git ddfb948a sha256:dc359349ce75e4d33b9a265bfe4d5e0566c7f6a618274923bf839ba322c4be12
service-ca-operator git 0a316210 sha256:abaa1eccf2b6e522ab1d0e42be8463d7a1177348b0a41627b390af32308602c9

aws-ebs-csi-driver-operator

Bug 1915467: redeploy CSI Controller Deployment when secret change #110
Bug 1912720: Remove stale ResourceSyncControllerDegraded condition #105
Full changelog

aws-machine-controllers

Bug 1976198: update aws-sdk-go to v1.38.25 #414
Bug 1941563: Ensure response body is closed when we are finished with the request #395
“Bug 1912531: revendor mao” #388
Updating ose-aws-machine-controllers builder & base images to be consistent with ART #383
Full changelog

aws-pod-identity-webhook

Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #131
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1964751: Bump boot images for RHCOS fixes #5228
Update OWNERS #5244
OWNERS: add more core team members as approvers #5125
Bug 1981929: aws: allow use of unknown regions in known partitions #5073
release-4.6: Update OpenStack approvers #4507
Bug 1951572: registry.svc.ci.openshift.org is no longer valid #4862
Bug 1956485: bump RHCOS 4.6 boot images #5011
Bug 1963959: remove ovirt_cafile from ovirt-credentials secret #4955
Bug 1974775: Adding more nitro and the AMD instance types (AWS, UPI) #5022
Bug 1949150: add proxy params to bootstrap ignition #4847
Bug 1976633: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5036
Bug 1971164: Updating AWS instance types #5021
Bug 1964120: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4956
Bug 1947998: gcp: install google cloud sdk with yum the recommended way #4840
Bug 1929872: remove GCP role bindings before service accounts #4665
Bug 1920552: vSphere destroy: handle failed clusters #4618
Updating ose-baremetal-installer builder & base images to be consistent with ART #4539
Updating ose-installer builder & base images to be consistent with ART #4538
Updating ose-installer-artifacts builder & base images to be consistent with ART #4547
Bug 1916297: openstack: Create Control plane nodes sequentially #4550
Bug 1918510: installconfig: enable vsphere folders for datacenters and clusters. #4574
Bug 1915050: Set same additional networks on Bootstrap as Control Plane #4535
Bug 1917928: Set Additional Control Plane Security Groups on Bootstrap Node #4570
Bug 1924670: openstack/validation: enforce control plane size #4612
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller builder & base images to be consistent with ART #133
“Bug 1912531: revendor mao” #137
Full changelog

baremetal-runtimecfg

Bug 1983124: Keepalived- verify that unicast peers list isn’t empty on master nodes #147
Bug 1942506: 4.6 EUS node-ip handling extravaganza #133
Bug 1932967: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #123
Bug 1926732: add CloseIdleConnections for HTTP K8S API healthcheck #121
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1942818: when mirroring to a file destination, mount images under the index location #892
Bug 1969929: exclude security during exctraction #877
Bug 1976285: skip-multiple-scopes with adm catalog mirror #873
Bug 1971561: set User-Agent when talking with registries #872
Bug 1973613: Preserve AuthInfo when switching projects #862
Fix unit test failure #839
Bug 1947430: Revert “Bug 1812813: oc debug node: create debug namespace” #808
Bug 1942940: [release-4.6] inspect clusteroperators as a backup to must-gather if it fails #782
Bug 1926172: add rsync & log re-tries #760
Bug 1939549: Fix unit test to use new IS #770
Bug 1923054: Fix error in jsonpath when object is empty #724
Full changelog

cloud-credential-operator

Bug 1963421: oVirt credentials secret contains unnecessary “ovirt_cafile” #347
Bug 1958959: manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #337
Bug 1916868: Check 47 creds backport #287
Bug 1910372: Backport redistribute new root creds in passthrough mode #279
Updating ose-cloud-credential-operator builder & base images to be consistent with ART #281
Full changelog

cluster-authentication-operator

Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #397
Bug 1914848: add ServiceMonitor for the oauth apiserver #396
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #188
Bug 1927854: VPA: Ignore admission hook failures #186
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #189
Full changelog

cluster-config-operator

Updating ose-cluster-config-operator builder & base images to be consistent with ART #177
Full changelog

cluster-dns-operator

Bug 1970140: Corefile: Set bufsize to 512 bytes for all servers #279
Bug 1955632: Corefile: Enable bufsize plugin for all servers #272
Bug 1954760: Enable errors plugin for custom upstream resolvers #271
Bug 1937090: Configure CoreDNS to shut down gracefully #248
Bug 1944245: Corefile: Use 30 second max TTL for caching of negative responses #256
Bug 1936589: Set CoreDNS’s cache’s maximum TTL to 900 seconds #246
Bug 1928773: Set CoreDNS readiness probe period and timeout each to 3 seconds #236
Full changelog

cluster-etcd-operator

Bug 1979585: Validate the status of the etcd snapshot during backup and restore #624
Bug 1987134: Provide an option force backup even when API is not available to check the health. #633
Bug 1978014: Increase inertia duration for the EtcdMembersDegraded condition #620
Bug 1965535: [release-4.6] Improve cert controller detection and correction of invalid certs #604
Bug 1905566: Backup script should get the latest revision of static-pod-resources #508
Bug 1934342: pkg/operator/metriccontroller: cleanup transports #551
Full changelog

cluster-image-registry-operator

Bug 1982611: bump aws-sdk-go to v1.38.35 #706
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #652
Bug 1959563: Using http.DefaultTransport timeouts #690
Bug 1949040: Use mkdir -p to create ca-trust directories #678
Bug 1936984: Make /etc/pki/ca-trust/extracted writable #672
Bug 1923993: Make pruner always aware of registry name #659
Full changelog

cluster-ingress-operator

Bug 1921193: Fix inconsistent ingress operator status after upgrade #541
Bug 1927364: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #547
Bug 1918994: Override termination grace period for the router deployment #539
Bug 1896167: Back port HAProxy reload failures alert fix #486
Full changelog

cluster-kube-controller-manager-operator

Bug 1913030: Add recycler pod template as a ConfigMap #490
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #37
Full changelog

cluster-monitoring-operator

Bug 1987246: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1304
Bug 1969964: Recording rule for builds by strategy #1207
Bug 1967938: Use alertmanager_integrations metric instead of alertmanager_notifications_total for AlertmanagerReceiversNotConfigured #1228
Bug 1941634: allow only /metrics for kube-rbac-proxy in front of UWM #1222
Bug 1955483: [4.6] Drop high-cardinality metrics from kube-state-metrics which aren’t used #1221
Bug 1955464: drop container_memory_failures_total metric backport #1180
Bug 1955454: [release-4.6] removing crio metric #1159
Bug 1960465: [release-4.6] Bring new etcd alerts #1161
Bug 1955471: [4.6] Disable collection of node_mountstats_nfs metrics in node_exporter #1147
Bug 1946597: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1105
Bug 1929354: [4.6] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus #1071
Bug 1920898: [4.6] pkg/manifests: fix prometheus-proxy trustedCA #1083
Bug 1937907: etcdInsufficientMembers is wrong when etcd is in a pod #1080
Full changelog

cluster-network-operator

Bug 1973770: Reduce SSL sec level for ovsdb connections #1131
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #1150
Bug 1983744: Use 10% for ovnkube-node for maxUnavailable #1157
Bug 1851549: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.6 #1121
Bug 1972587: config: Allow enable-profiling to be used to set profiling #1135
Bug 1973599: Escape characters on ini file #1137
Bug 1937400: kuryr/alerts: change the rule for free count #1012
Bug 1970453: Replace to correct OpenFlow version when replacing flows #1111
Bug 1932114: Detect Nodes Network MTU #1070
Bug 1963280: The Multus daemonset should handle 10% maxUnavailable #1103
Bug 1963279: Use 10% for ovs maxUnavailable for rolling update #1102
Bug 1959185: Backport rbac proxy init script fixes #1096
Bug 1950407: Fix kube-rbac-proxy startup scripts #1061
Bug 1936710: OSD-6600 network-metrics missing priorityClass #1006
Bug 1950094: Upgrade nodes before masters #1060
Bug 1897526: Ensure LimitedPortsOnNetwork is only triggered when needed #907
Bug 1942862: Kuryr: Let Kuryr autodetect primary CNI interface #1035
Bug 1934652: [release-4.6] - Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable #998
Bug 1938280: Include LB members for Machines created on day-2 operation #1018
Bug 1916601: guard against the deletion of the network CRD: network.operator.openshift.io #953
Full changelog

cluster-node-tuning-operator

Bug 1990629: gather all Tuned CRs #259
Bug 1920525: Recover gracefully after Tuned errors. #197
Full changelog

cluster-openshift-apiserver-operator

Bug 1996051: bindata: run openshift-apiserver as root explicitly. #469
Bug 1955506: explicitly allow apiserver pods to write to their root FS #470
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944145: Bump kubernetes to 0.19.9 #205
Bug 1931857: Set registry routes in operand config #200
Full changelog

cluster-samples-operator

Bug 1950809: add DeepCopy to avoid SharedInformer cache mutation #371
Full changelog

cluster-version-operator

Bug 1943973: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #540
Bug 1924194: pkg/payload/task_graph: Require firstIncompleteNode to have tasks #510
Bug 1925199: add current profile annotations to CVO manifests #512
Bug 1927515: pkg/cvo: Use shutdownContext for final status synchronization #517
Bug 1921180: pkg/cvo/sync_worker.go: Ignore work changes during init #506
Bug 1918494: use child context to verify payload signature on forced update #504
Full changelog

console

Bug 2002151: Fix the event listener optional types #10019
Bug 1987228: Handle array to string conversion for HTTPS checkbox value #9676
Bug 1980182: operator UI not working with multiple version CRD in 4.6 #9549
Bug 1978159: update cluster-local label for ksvc #9389
Bug 1972694: Omit bitbucket branch in URL if it contains slash #9271
Bug 1970984: Add pipeline annotation to secrets for private git repo import with pipeline #9224
Bug 1972661: fixes: WebTerminal widget should send resize events #9270
Bug 1969878: fix resources fetched by firehose to show the correct Pod donut #9199
Bug 1960094: Make console works against api proxy #8915
Bug 1960545: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8926
Bug 1966422: Create application edit url based on git provider #9088
Bug 1950490: Fix “Create binding” link from Role page, RoleBindings tab #8686
Bug 1961936: Fix topology crash on install of ODH operator to project #8971
Bug 1933666: [release-4.6] Create ImageStream and other resources for samples step by step #8261
Bug 1948370: Remove cluster label from predefined monitoring queries #8614
Updating openshift-enterprise-console builder & base images to be consistent with ART #8386
Bug 1939609: Fix null handling in FilterToolbar_ to prevent possible exceptions #8395
Bug 1943160: support service binding operator version 0.5.0 #8465
Bug 1940905: [release-4.6] Remove master as default branch and use only when ref is given #8424
Bug 1943705: Add ‘Roll Back’ action for Replication Controllers #8491
Bug 1927855: sort cluster task in pipeline builder #8139
Bug 1925037: fix delete app modal error when resource not found #8053
Bug 1935096: Apply var pf-global–FontFamily–monospace to the create secret textarea input #8312
Bug 1931515: allow choice of binding type when creating RoleBinding #8212
Bug 1933017: Fix to avoid overriding of d/dc pod template container values #8322
Bug 1934664: Consider finally tasks when calculating task status #8292
Bug 1928230: retry co-fetch on 409 POST or 429 #8155
Bug 1933727: fix Internal registry deploy flow #8267
Bug 1926121: Listing Subscriptions in OLM should also show them when ‘All Projects’ namespace is picked #8096
Bug 1923939: add missing trigger types and update the optional fields - 4.6 #8015
Bug 1927800: fix query browser prometheus URL for non admin user #8138
Bug 1926371: scale pods using the ‘scale’ subresource #8099
Bug 1926340: Fix that image containers are fetched from external container registries (which doesn’t work for private image containers) #8098
Bug 1924437: Missing User RoleBindings in the Project Access Web UI #8034
Bug 1924069: fix pipeline rerun when pipelineSpec is embedded #8024
Bug 1919138: helmchartrepo is not http(s)_proxy-aware #7901
Bug 1916860: Filter out helm charts based on kubernetes version #7851
Bug 1920493: fix pipeline visualization with same pipeline & task name #7927
Bug 1920530: - System roles are not present while trying to create new role binding through web console #7929
Bug 1914342: make filesystem queries compatible with both RHCOS and RHEL nodes #7777
Bug 1916406: Helm chart repository index can contain unresolvable relative URL’s #7841
Bug 1911260: Fix logs streaming issue in multistream logs #7663
Bug 1924224: Fix source code URL for apps created using self-hosted repositories #8031
Bug 1921603: Fix crash when loaded is true but the data set doesn’t include the pods #7985
Bug 1916378: fix skipped tasks in conditional pipelines #7843
Bug 1915013: Fix pipeline visualization issue when taskspecs is used #7859
Bug 1910199: Replace ‘Baremetal’ with ‘BareMetal’ in the supported platforms for I… #7637
Full changelog

csi-driver-manila-operator

Bug 2002556: Do not degrade cluster on failure to reach Manila #127
Bug 2000097: Use cluster Proxy when available #118
Updating csi-driver-manila-operator builder & base images to be consistent with ART #76
Bug 1918367: Make Manila operator more tolerant #88
Full changelog

docker-builder

Bug 1946363: move entitlement related secrets back to mounts.conf #242
Bug 1939219: bump(*): #225
Bug 1919359: better surface dockerconfigjson errors causing image pull errors #210
Full changelog

docker-registry

Bug 2003629: Use apimachinery with HTTP/2 health checks enabled #293
Bug 1982611: bump aws-sdk-go to v1.38.35 #287
Bug 1946694: Run remote registries for pull-through tests as pods #269
Bug 1930802: Replace bitbucket.org/ww/goautoneg with its mirror #266
Updating openshift-enterprise-registry builder & base images to be consistent with ART #261
Full changelog

etcd

ETCD-178: Bug 1951823: openshift-tools: fix on off flow and add unit tests #77
Full changelog

gcp-machine-controllers

Bug 1941563: Ensure response body is closed when we are finished with the request #154
“Bug 1912531: revendor mao” #149
Full changelog

grafana

Updating grafana builder & base images to be consistent with ART #53
Full changelog

haproxy-router

Bug 1971013: template helper - generateHAProxyWhiteListFile, use right arg type #303
Bug 1965329: Add a condition to check if the Endpoints ID is duplicated #292
Bug 1938922: router/template: Cache compiled regular expressions #270
Bug 1900991: Move idle check from endpoints to service #253
Full changelog

hyperkube

Bug 1993752: UPSTREAM: 104340: Pass additional flags to subpath mount to avoid fla… #942
Bug 1996849: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #902
Bug 1989061: don’t apply defaultAllowPrivilegeEscalation:false when container is privileged #939
Bug 1981784: UPSTREAM: <drop>: bump(apiserver-library-go) #894
Bug 1951727: Speed up PV provisioning for vsphere driver (ocp-4.6) #691
Bug 1959420: fix a 4.6 test flake #740
Bug 1958371: UPSTREAM: 98424: register all pending pod deletions and check for kill #779
Bug 1966811: UPSTREAM: 102224: Fix expired unit test certs #781
Bug 1942146: Fix labels of Cinder PVs #636
Bug 1960002: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #745
Bug 1951467: fix loop bug for verify attached volume #683
Bug 1942630: UPSTREAM: 96789: Choosing the right source VIP for local endpoints #639
Bug 1933624: 4.6: UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning #596
Bug 1930960: UPSTREAM: 94087: kubelet: node sync at least once #582
Bug 1918994: Override termination grace period on annotation #533
Bug 1913543: UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics #511
Bug 1924785: UPSTREAM: 89885: SQUASH: Fix cinder crash #548
BUG 1891107: UPSTREAM: 95259: allocate service-account flowschema to global-default #428
Bug 1926262: Prevent GCP e2e tests from triggering a rate limit on the listZone API #556
Bug 1919453: Allow test images to be in a single mirror #536
Full changelog

insights-operator

[release 4.6] Bug 1891544: Adds ContainerRuntimeConfig gatherer #238
Full changelog

ironic

Bug 1917481: Wait for expected number of drivers starting API #136
Full changelog

ironic-inspector

Updating ironic-inspector builder & base images to be consistent with ART #55
Full changelog

ironic-ipa-downloader

Bug 1975531: [release-4.6] Update ipa version #77
Full changelog

ironic-machine-os-downloader

Updating ironic-rhcos-downloader builder & base images to be consistent with ART #35
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1972366: Bump jenkins version 2.289.2 #1280
Bug 1952561: bump config-file-provider to 3.7.1 #1266
[release 4.6] Bug 1952337: Update Jenkins to 2.277.3 and disable setup wizard #1260
[release 4.6] Bug 1929121: update kubernetes-client-api #1231
[release 4.6] Bug 1929919: Upgrade Jenkins to 2.263.3 #1234
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter builder & base images to be consistent with ART #42
Full changelog

keepalived-ipfailover, pod

Bug 1926267: Egress router: Add iptables package to Dockerfile #78
Full changelog

kube-proxy, sdn

Bug 2004720: improve SDN’s OVS healthcheck and logging #353
Bug 1998453: Fix MCS-blocking iptables rules #340
Bug 1995873: Disable conntrack for vxlan traffic #339
Bug 1970046: Fix for empty egress policy #315
Bug 1915849: Bump 4.6 to use OVS 2.13 #303
Bug 1959425: Fix incorrect unmonitoring of egress nodes #298
Bug 1926662: Do not use egressIP on reply packets #257
Bug 1937547: networkpolicy: pass traffic through NAT to handle possible tuple collisions #274
Bug 1928773: Prefer local endpoint for cluster DNS service #261
Updating ose-sdn builder & base images to be consistent with ART #244
Updating kube-proxy builder & base images to be consistent with ART #247
Bug 1904455: NetworkPolicy performance fixes, v2 #249
Full changelog

kube-rbac-proxy

Updating kube-rbac-proxy builder & base images to be consistent with ART #39
Full changelog

kube-state-metrics

Updating kube-state-metrics builder & base images to be consistent with ART #42
Full changelog

kuryr-cni, kuryr-controller

Bug 1983107: Fix KLB conversion from annotations #541
Bug 1983107: Allow clean up of unused member #540
Bug 1975676: Workaround OVN bug causing subports to be DOWN #533
Bug 1968418: Fixing bug, Kuryr-Controller crashes when it’s missing the status #519
Bug 1958106: Skip pool pre population if no Status is present on CRD #513
Bug 1958106: Fix port pools #512
Bug 1958103: Include service subnet to be open for namespaceSelector set to all. #511
Bug 1958093: kuryr-controller restarting after 3 days cluster running - pools without members #509
Bug 1963846: Fix NPs for OVN LBs with hairpin traffic #518
Bug 1952429: Narrow connection to the cluster only on namespaceSelector. #507
Bug 1932114: Allow to config network MTU #506
Bug 1947343: NPs: Do not set ports for protocol-less SG rules #496
Bug 1940141: Do not default protocol to TCP for allow-all NPs #484
Bug 1938161: Get trunks more diligently #478
Bug 1897526: Fix ports count on subnet #427
Bug 1894408: Delete ports created for host networking pods #395
Bug 1893681: Bulk port creation exception not completely formatted #390
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #216
Bug 1939259: [release-4.6] Update MAO and set metrics on :8081 address #220
Full changelog

machine-api-operator

Bug 1947813: vSphere, detach virtual disks before virtual machine destroy if node not available #845
Bug 1916772: Inject the cluster-wide proxy environment variables in the baremetal pod #808
Bug 1933676: Cherry-pick: Azure disconnected reject publicIP setting #812
Updating ose-machine-api-operator builder & base images to be consistent with ART #786
Bug 1912531: 4.6: Update kubectl dep #782
Full changelog

machine-config-operator

Bug 2004136: [on-prem] Disable liveness probe until keepalived.conf exists #2763
Bug 1998181: ensure SSH key uniqueness #2737
Bug 1975626: Add nil check for KubeletConfig #2719
Bug 1989403: daemon: add check before updating kernelArgs #2720
Bug 1987221: Backport drain timeout optimizations #2707
Bug 1993218: alerts: SystemMemoryExceedsReservation triggers too quickly #2713
Bug 1975626: Fix KubeletConfig nil error #2699
Bug 1975626: KubeletConfig validation warning in CRD and Docs #2672
Bug 1978041: templates: split unit dropins into separate files #2652
Bug 1926944: enable madvdontneed in system components #2632
Bug 1940594: [baremetal and friends] Drop unnecessary readiness probes #2480
Bug 1927555: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2615
Bug 1942506: [4.6] Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2589
Bug 1953493: daemon: return nil for unsupported operation on an OS #2545
Bug 1955715: Add on-prem namespaces to relatedObjects #2556
Bug 1948533: Add nodeip-configuration.service for oVirt #2567
Bug 1945544: templates: add After=ostree-finalize-staged.service to kubelet.service #2502
Bug 1933206: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2439
Bug 1951089: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2537
Bug 1940585: conditionally set nodeip-service enabled for vSphere #2493
Bug 1883916: [4.6z backport] Fixes setting route metric for ovs-config #2467
Bug 1931617: OVS Config: fixes detecting bond NM files with static IP #2453
Bug 1908534: update ctrcfg crd to make spec & containerruntimeconfig required #2308
Bug 1897552: Mode mismatch fix for confusing strings #2353
Bug 1933075: backport systemd dropin/units zero-length handling #2435
Bug 1906298: update MCDDrainErr to reduce cardinality & fix nodename #2419
Bug 1908940: [test] Skip TestKernelType on OKD #2311
Bug 1919272: [release-4.6] NM resolve prepender: support appending a nameserver for systemd-resolved #2356
Full changelog

mdns-publisher

Bug 2003563: Update zeroconf vendoring #40
Bug 1936539: Update zeroconf to pull in rate-limiting fix #27
Updating ose-mdns-publisher builder & base images to be consistent with ART #22
Full changelog

multus-whereabouts-ipam-cni

Bug 1931953: [backport 4.6] Fix for IPv6 when leading hextets equal zero #50
Bug 1898616: Excluded subnet handling for ipv6 [backport 4.6] #37
Full changelog

must-gather

Bug 1975970: Backport gather network logs #233
Updating ose-must-gather builder & base images to be consistent with ART #203
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon builder & base images to be consistent with ART #31
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver builder & base images to be consistent with ART #36
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #199
Bug 1915667: remove logging when authz header is present but basic auth is not attempted #200
Full changelog

openshift-controller-manager

Bug 1955211: fixed LANG for the builder container #181
Bug 1935362: Listing All Events with Chunking #170
Full changelog

openshift-state-metrics

Updating openshift-state-metrics builder & base images to be consistent with ART #65
Full changelog

openstack-machine-controllers

Bug 2002752: Adds Proxy to provider client http transport #201
Bug 1933667: Update ose-openstack-machine-controllers builder & base images to be consistent with ART #154
Bug 1933667: Updating ose-openstack-machine-controllers builder & base images to be consistent with ART #165
“Bug 1912531: revendor mao” #164
Full changelog

operator-lifecycle-manager

Bug 1975456: Handle invalid label during resource cleanup #2209
Bug 1968226: Fix inconsistent dependency candidate order. #2184
Bug 1965307: Make ClusterOperator Available condition sticky. #2177
Bug 1969412: fix(catalog): Reduce namespace resync in resolution failure #2189
Bug 1965069: Simplify deployment status check to reduce flapping. #2176
Bug 1963139: Set reason/message for Available condition in packageserver co #2172
Bug 1962310: Use DeploymentAvailable instead of custom test for CSV status. #2169
Bug 1955112: Preserve existing ServiceAccount owner references during installs. #2128
Bug 1954880: Add resource requests for bundle unpacker #2126
Bug 1954759: Fix resolution error if inner entry doesn’t provide a required API. #2123
Bug 1945149: only override deployment resources when explicitly defined in subscription config #2071
Bug 1947916: Don’t adopt copied csvs #2094
Updating operator-lifecycle-manager builder & base images to be consistent with ART #1952
Bug 1940649: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2051
Bug 1940453: Support jittering relatively small resync intervals. #2050
Bug 1938618: Infer package name property for unannotated CSVs, if possible. #2043
Bug 1938369: fix(resolver): Allow skipped versions to be installed initially #2040
Bug 1934637: Honor all subscriptions to a package #2026
Bug 1929335: Only re-create operator resource if it has existing components #2008
Full changelog

operator-marketplace

Updating marketplace-operator builder & base images to be consistent with ART #374
Bug 1937986: wrong community catalog image reference #384
Full changelog

operator-registry

Bug 1968681: fix(containerd): drop xattrs during unpack #678
Updating operator-registry builder & base images to be consistent with ART #550
Bug 1915068: Fix windows build with golang 1.15 #547
Bug 1918012: Unexpected images left in related_images after pruning #560
Full changelog

ovirt-csi-driver

Bug 1960149: disable metrics #76
Bug 1924623: pass ovirtClient to identity and remove redundant call to Test connection #69
Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #71
Bug 1921817: support raw block devices #68
Bug 1917149: [release-4.6] bump go-ovirt and run make vendor #64
Full changelog

ovirt-csi-driver-operator

Bug 1924626: increase livenessProbe period #44
Full changelog

ovirt-machine-controllers

Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #81
Full changelog

ovn-kubernetes

Bug 1988512: [release-4.6] Fix LGW externalIP #676
Bug 1972652: Fix: egress IP route health check detection state on restart #576
Bug 2001980: Fix sync egress IP for missed events on start-up #723
Bug 1985517: Add v6 management interface address for host network policy #626
Bug 1985347: ensure missed events are handled during a reconnection #620
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #603
Bug 1972253: CARRY: fix missed learn for hybrid exgw #575
Bug 1966833: BACKPORT Add a cluster-wide group with node ls-to-cluster-router ports. #573
Bug 1966280: Adds reconciliation for hanging pod adds #561
Bug 1953088: master: Delay deleting Namespace’s address set for 20 seconds #534
Bug 1949240: Bump OVN version in 4.6 to 20.12.0-24 #525
Bug 1947098: [4.6z] Ensure no SNAT on GR for DisableSNATMultipleGws #535
Bug 1950434: [4.6] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #504
Bug 1947836: Fix service update for policy type assertion #501
Bug 1945690: Updating ose-ovn-kubernetes builder & base images to be consistent with ART #401
Bug 1945308: Backport lr nat del add fixes #486
Bug 1945725: Revert the ovn change to avoid a crash #485
Bug 1935691: [release-4.6] Backport port_claim improvement #459
Bug 1933752: Bump to ovn2.13-20.09.0-7.el8fdn #455
Bug 1889460: Guard against nil address set usage #353
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1935586: pkg/prometheus: remove liveness probe #110
Updating prometheus-operator builder & base images to be consistent with ART #103
Updating prometheus-config-reloader builder & base images to be consistent with ART #104
Full changelog

prometheus-node-exporter

Bug 1928073: text_collectors: do not use space as a replacement for escape characters #85
Bug 1928073: Remove escape characters #83
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #368
Full changelog

tests

Bug 1978717: Add BareMetalPlatformType into e2e upgrade service unsupported list #26309
Bug 1981582: [release-4.6] use vpa package and add debug logs to olm test #26355
Bug 1988176: [release-4.6] Add test of documented backup/restore procedure #26356
Bug 1902221: clean up remaining build busybox refs after claytons overhaul #26332
Bug 1977095: correcting test case #26308
Bug 1978442: comment out multi-namespace jenkins pipeline templates test; moving it to jenkins client plugin in-repo e2e’s #26301
Bug 1977093: Add consolequickstarts and consoleplugins extensions to the authenticated rules #26288
Bug 1955599: test/extended/router: Fix-up Unidling test #26119
Bug 1965588: Testimage install cinder 4.6 #26193
Bug 1963909: move verify run test from tools to cli image; narrow scope to /run/secrets #26177
Bug 1958969: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26146
Bug 1948233: Add openshift/network/third-party suite, for CNI plugin conformance #26059
Bug 1936974: Access git over https for tests #26109
Bug 1941577: test/extended/router/idle: skip test on virt platforms #26069
Bug 1927954: test/extended/router/idle: address flakes/failures seen in CI #25893
Bug 1915559: upgrade/upgrade.go: Enhance upgrade ack time out error #26055
Bug 1931864: test: add vsphere and libvirt to unsupported platforms for LB service #25914
Bug 1930537: improve handling of pending pods crashloop detection test #25600
Bug 1902008: fix ldap group sync tests and move them from bash to golang #25808
Bug 1939549: Update tests to use Ruby 2.7 #25967
Bug 1930724: server-side apply e2e: fix oauthclientauthorization race with KCM #25908
Bug 1902054: Update multicast test image for use in release-4.6 #25825
Bug 1900991: test/extended/router: add idle/unidle e2e test #25858
Bug 1925539: Allow RHE7 /run contents for build fs test #25864
Full changelog

thanos

Bug 1961158: Changing resolver to address thanos-ruler pod issues #57
Updating thanos builder & base images to be consistent with ART #44
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github