4.6.55

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.6.55-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.6-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.5.21, 4.5.22, 4.5.24, 4.5.25, 4.5.28, 4.5.29, 4.5.31, 4.5.32, 4.5.34, 4.5.35, 4.5.36, 4.6.10, 4.6.12, 4.6.13, 4.6.15, 4.6.16, 4.6.18, 4.6.19, 4.6.20, 4.6.21, 4.6.22, 4.6.23, 4.6.24, 4.6.26, 4.6.27, 4.6.28, 4.6.29, 4.6.30, 4.6.31, 4.6.32, 4.6.34, 4.6.35, 4.6.36, 4.6.37, 4.6.38, 4.6.39, 4.6.40, 4.6.42, 4.6.43, 4.6.44, 4.6.45, 4.6.46, 4.6.47, 4.6.48, 4.6.49, 4.6.6, 4.6.8, 4.6.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.6.17

Created: 2022-02-16 10:31:07 +0000 UTC

Image Digest: sha256:be674c4ef096457dc8751725251d728ff7386cb2a1576497a2a373188e9ce9c5

Release 4.6.55 was created from registry.ci.openshift.org/ocp/release:4.6.0-0.nightly-2022-02-15-135310

Components

Kubernetes upgraded from 1.19.4 to 1.19.16
Red Hat Enterprise Linux CoreOS upgraded from 46.82.202102051640-0 to 46.82.202202141703-0 (diff)

New images

driver-toolkit git bd508e26 sha256:9d89664c224ff77571a76adbc74815cf1fdcfa2190014069079765883a1229d3

Removed images

local-storage-static-provisioner

Rebuilt images without code change

aws-ebs-csi-driver git b4647c12 sha256:a85e86a3756f1d04588ab57efd35675278d77f2004b72dabdfeb1443c56ac7d8
baremetal-operator git b4b10a08 sha256:bdf5eaabedc1137f435e7b3cbc3ac0b17c0818f24ba2113799d06fcca7689d61
cluster-autoscaler-operator git 8e81a68d sha256:7ebeeef69f568033a8f0857ae14648027cf5e7505e391f300e29cdefe8da933f
cluster-bootstrap git 64410191 sha256:426b8f6c71938a3ed73e718cf87f104519d148f3349b262c937ea0593ec4ce30
cluster-csi-snapshot-controller-operator git 68618ad3 sha256:a6716ed26aef5f13468d3e32342d38ebcc95b22ef014e636287e4ae021fed662
cluster-kube-apiserver-operator git 0a8f1f99 sha256:4a340fa9917248066eebbca05b63ec700722766e9da0fe1230d4fa4b7846bc55
cluster-kube-scheduler-operator git 0b9b05bc sha256:c30aee90040485f7c0eafe8c0fe06ca9e8205b1b4a36530e5635ee3947cad40e
cluster-machine-approver git a6320f45 sha256:40cdf3cd6bd84af96efd0a36ea8be87920bf0aa68b1243532fb4c48bd3ce7d39
cluster-policy-controller git aa12fbe3 sha256:c1ec23171584d4752e8fcc1b99cd88486ab676067a97f630edb0eefec642cbac
cluster-storage-operator git 58bf46ea sha256:6e75a01570f5962a2173c4504a3022dd1c4467c905a5cbf55d1529b4c0a99360
cluster-update-keys git 70c87c70 sha256:5b6da8aef7c8bffc9bb7567a725694affa6beca66f2ac95cf7dd3e24c1bb201c
configmap-reloader git 2ac2b635 sha256:25ac8fae658bc8b3297cb87256618aa452830dc0942ed3fcee4e13b1b10bbcec
console-operator git 7fd78a28 sha256:7989ab4e7ae05601c2d83d9132ee320e39a2ab38ca4aa5546c96cf8943d43fa4
container-networking-plugins git ca372dec sha256:373d9480eadfe10d1fe1ffc3bc2029a6228ad8a03ffb488595acfaedd217ac1c
coredns git 885fb55e sha256:5efb97d925b86c820db530735cd3b36471e992a8d3254ffeaf6abfa14edc83a2
csi-driver-manila git 6dd9c201 sha256:fd6826dbbb1cea18f9adec40985f1efdef6ce7990b8b9d7043fd3fc992e1dfbf
csi-driver-nfs git 5e962cbd sha256:a2e17c30dfca204b793bf76ed781b5785b668a5df985580fe0d53a930ef28dae
csi-external-attacher git 45e712af sha256:fd820c1d0cd88c125ae735f491f38bd470a74f52cc3c15e081463526e6a18b98
csi-external-provisioner git e079d112 sha256:28bd84813ee06f17890aaa91a1888ec47446a42e1dc71d6abf91c6f8247dcaf8
csi-external-resizer git b2c4b923 sha256:fb9e6b7a01ebf708fab94db32e1b7c6fb48d16ef457d77a7bb6e74760ddddf89
csi-external-snapshotter git c80c3836 sha256:5a9033806b19cdc288b7118c5285ad88d2e619b0054539ebda993851f06541a1
csi-livenessprobe git 53f2398a sha256:af50f5a238d06e92729e748bf824e61a96b650de521b49670e4218bb600028c0
csi-node-driver-registrar git 4ba25176 sha256:987389a19d7ca9ace42cd38eac5634abfdca64fee6258a28ef10b776b0d59363
csi-snapshot-controller git c80c3836 sha256:72560399fc325b97cb9d2b4be4733d8985cc45c43aabb96343ef15ce1522f6f0
ironic-hardware-inventory-recorder git 2205538a sha256:102860cfbac03c2c47e9f7332c54b38348025a167dad1bf116d3273745bc0b5b
ironic-static-ip-manager git 2f197d07 sha256:ac12262a2af938f668cb8407cb4402792c25d73b6a363a23eca0725e523574f8
kube-storage-version-migrator git 6deeefa7 sha256:3938a925470d626aa7305b35f4e11876f9042802e00d713dcbfe938308eeffa7
machine-os-content sha256:4260e3df4e55f38c88c3403933ad91d93b1ef1fab146396b552b2426a55a64ee
multus-admission-controller git de9b6e18 sha256:fac8aff3338d11163aa005ba460b66ff1b4fa6a892b3a8d3f5cd1782d210a087
multus-cni git 30668ec2 sha256:2aaa28767e391fd5a3c12d1c8f5a52f38bb145fb344b76408f167f41e6e41c35
multus-route-override-cni git da944e11 sha256:972829372397c7c56719c7744b22d24a4f4c2361abfa5391206d724fca3e59f7
openshift-apiserver git c09e60bc sha256:999b22c7c74c44be5910d6cde029b32924ae3e3db95a8e5733e40061b5099516
prom-label-proxy git 2b514992 sha256:beda54ba9ed630c22fc0df2e79b83dcb2d77068f30036deea5e1e3bc85f4e438
prometheus git f97d7ec8 sha256:228db4ca2008e0abced358433cf4240ba229a9b949c7b07d3b96920e7ea10ce3
prometheus-alertmanager git ddfb948a sha256:67505e0d943aa43e4b8ee5056ee8825cf2ba75bffd0b63e41769cc20b9926f46
service-ca-operator git 0a316210 sha256:fc16463f1048d5dc310e9f5fa4f316db5bbe66253024fd5cd145c99690bddf9e

aws-ebs-csi-driver-operator

Bug 1915467: redeploy CSI Controller Deployment when secret change #110
Bug 1912720: Remove stale ResourceSyncControllerDegraded condition #105
Full changelog

aws-machine-controllers

Bug 1976198: update aws-sdk-go to v1.38.25 #414
Bug 1941563: Ensure response body is closed when we are finished with the request #395
“Bug 1912531: revendor mao” #388
Updating ose-aws-machine-controllers builder & base images to be consistent with ART #383
Full changelog

aws-pod-identity-webhook

Bug 2048081: update go.mod for go1.15 #150
Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #131
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1964751: Bump boot images for RHCOS fixes #5228
Update OWNERS #5244
OWNERS: add more core team members as approvers #5125
Bug 1981929: aws: allow use of unknown regions in known partitions #5073
release-4.6: Update OpenStack approvers #4507
Bug 1951572: registry.svc.ci.openshift.org is no longer valid #4862
Bug 1956485: bump RHCOS 4.6 boot images #5011
Bug 1963959: remove ovirt_cafile from ovirt-credentials secret #4955
Bug 1974775: Adding more nitro and the AMD instance types (AWS, UPI) #5022
Bug 1949150: add proxy params to bootstrap ignition #4847
Bug 1976633: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5036
Bug 1971164: Updating AWS instance types #5021
Bug 1964120: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4956
Bug 1947998: gcp: install google cloud sdk with yum the recommended way #4840
Bug 1929872: remove GCP role bindings before service accounts #4665
Bug 1920552: vSphere destroy: handle failed clusters #4618
Updating ose-baremetal-installer builder & base images to be consistent with ART #4539
Updating ose-installer builder & base images to be consistent with ART #4538
Updating ose-installer-artifacts builder & base images to be consistent with ART #4547
Bug 1916297: openstack: Create Control plane nodes sequentially #4550
Bug 1918510: installconfig: enable vsphere folders for datacenters and clusters. #4574
Bug 1915050: Set same additional networks on Bootstrap as Control Plane #4535
Bug 1917928: Set Additional Control Plane Security Groups on Bootstrap Node #4570
Bug 1924670: openstack/validation: enforce control plane size #4612
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller builder & base images to be consistent with ART #133
“Bug 1912531: revendor mao” #137
Full changelog

baremetal-runtimecfg

Bug 1983124: Keepalived- verify that unicast peers list isn’t empty on master nodes #147
Bug 1942506: 4.6 EUS node-ip handling extravaganza #133
Bug 1932967: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #123
Bug 1926732: add CloseIdleConnections for HTTP K8S API healthcheck #121
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2028280: write to files instead of stdout #984
Bug 1942818: when mirroring to a file destination, mount images under the index location #892
Bug 1969929: exclude security during exctraction #877
Bug 1976285: skip-multiple-scopes with adm catalog mirror #873
Bug 1971561: set User-Agent when talking with registries #872
Bug 1973613: Preserve AuthInfo when switching projects #862
Fix unit test failure #839
Bug 1947430: Revert “Bug 1812813: oc debug node: create debug namespace” #808
Bug 1942940: [release-4.6] inspect clusteroperators as a backup to must-gather if it fails #782
Bug 1926172: add rsync & log re-tries #760
Bug 1939549: Fix unit test to use new IS #770
Bug 1923054: Fix error in jsonpath when object is empty #724
Full changelog

cloud-credential-operator

Bug 2028971: Check for aws status in infra platform status field before client setup #430
Bug 1963421: oVirt credentials secret contains unnecessary “ovirt_cafile” #347
Bug 1958959: manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #337
Bug 1916868: Check 47 creds backport #287
Bug 1910372: Backport redistribute new root creds in passthrough mode #279
Updating ose-cloud-credential-operator builder & base images to be consistent with ART #281
Full changelog

cluster-authentication-operator

Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #397
Bug 1914848: add ServiceMonitor for the oauth apiserver #396
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #188
Bug 1927854: VPA: Ignore admission hook failures #186
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #189
Full changelog

cluster-config-operator

Updating ose-cluster-config-operator builder & base images to be consistent with ART #177
Full changelog

cluster-dns-operator

Bug 1970140: Corefile: Set bufsize to 512 bytes for all servers #279
Bug 1955632: Corefile: Enable bufsize plugin for all servers #272
Bug 1954760: Enable errors plugin for custom upstream resolvers #271
Bug 1937090: Configure CoreDNS to shut down gracefully #248
Bug 1944245: Corefile: Use 30 second max TTL for caching of negative responses #256
Bug 1936589: Set CoreDNS’s cache’s maximum TTL to 900 seconds #246
Bug 1928773: Set CoreDNS readiness probe period and timeout each to 3 seconds #236
Full changelog

cluster-etcd-operator

Bug 1979585: Validate the status of the etcd snapshot during backup and restore #624
Bug 1987134: Provide an option force backup even when API is not available to check the health. #633
Bug 1978014: Increase inertia duration for the EtcdMembersDegraded condition #620
Bug 1965535: [release-4.6] Improve cert controller detection and correction of invalid certs #604
Bug 1905566: Backup script should get the latest revision of static-pod-resources #508
Bug 1934342: pkg/operator/metriccontroller: cleanup transports #551
Full changelog

cluster-image-registry-operator

Bug 1982611: bump aws-sdk-go to v1.38.35 #706
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #652
Bug 1959563: Using http.DefaultTransport timeouts #690
Bug 1949040: Use mkdir -p to create ca-trust directories #678
Bug 1936984: Make /etc/pki/ca-trust/extracted writable #672
Bug 1923993: Make pruner always aware of registry name #659
Full changelog

cluster-ingress-operator

Bug 1921193: Fix inconsistent ingress operator status after upgrade #541
Bug 1927364: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #547
Bug 1918994: Override termination grace period for the router deployment #539
Bug 1896167: Back port HAProxy reload failures alert fix #486
Full changelog

cluster-kube-controller-manager-operator

Bug 1913030: Add recycler pod template as a ConfigMap #490
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #37
Full changelog

cluster-monitoring-operator

Bug 2009094: manifest allowlist: add acm_managed_cluster_info in 4.6 #1408
Bug 1987246: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1304
Bug 1969964: Recording rule for builds by strategy #1207
Bug 1967938: Use alertmanager_integrations metric instead of alertmanager_notifications_total for AlertmanagerReceiversNotConfigured #1228
Bug 1941634: allow only /metrics for kube-rbac-proxy in front of UWM #1222
Bug 1955483: [4.6] Drop high-cardinality metrics from kube-state-metrics which aren’t used #1221
Bug 1955464: drop container_memory_failures_total metric backport #1180
Bug 1955454: [release-4.6] removing crio metric #1159
Bug 1960465: [release-4.6] Bring new etcd alerts #1161
Bug 1955471: [4.6] Disable collection of node_mountstats_nfs metrics in node_exporter #1147
Bug 1946597: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1105
Bug 1929354: [4.6] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus #1071
Bug 1920898: [4.6] pkg/manifests: fix prometheus-proxy trustedCA #1083
Bug 1937907: etcdInsufficientMembers is wrong when etcd is in a pod #1080
Full changelog

cluster-network-operator

Bug 2034358: Whereabouts IP Reconciliaton [backport 4.6] #1267
[release 4.6] Bug 2046551: add missing klog v2 #1292
Bug 1988427: Change to use mountPath: /host #1171
Bug 1973770: Reduce SSL sec level for ovsdb connections #1131
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #1150
Bug 1983744: Use 10% for ovnkube-node for maxUnavailable #1157
Bug 1851549: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.6 #1121
Bug 1972587: config: Allow enable-profiling to be used to set profiling #1135
Bug 1973599: Escape characters on ini file #1137
Bug 1937400: kuryr/alerts: change the rule for free count #1012
Bug 1970453: Replace to correct OpenFlow version when replacing flows #1111
Bug 1932114: Detect Nodes Network MTU #1070
Bug 1963280: The Multus daemonset should handle 10% maxUnavailable #1103
Bug 1963279: Use 10% for ovs maxUnavailable for rolling update #1102
Bug 1959185: Backport rbac proxy init script fixes #1096
Bug 1950407: Fix kube-rbac-proxy startup scripts #1061
Bug 1936710: OSD-6600 network-metrics missing priorityClass #1006
Bug 1950094: Upgrade nodes before masters #1060
Bug 1897526: Ensure LimitedPortsOnNetwork is only triggered when needed #907
Bug 1942862: Kuryr: Let Kuryr autodetect primary CNI interface #1035
Bug 1934652: [release-4.6] - Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable #998
Bug 1938280: Include LB members for Machines created on day-2 operation #1018
Bug 1916601: guard against the deletion of the network CRD: network.operator.openshift.io #953
Full changelog

cluster-node-tuning-operator

Bug 1990629: gather all Tuned CRs #259
Bug 1920525: Recover gracefully after Tuned errors. #197
Full changelog

cluster-openshift-apiserver-operator

Bug 1996051: bindata: run openshift-apiserver as root explicitly. #469
Bug 1955506: explicitly allow apiserver pods to write to their root FS #470
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944145: Bump kubernetes to 0.19.9 #205
Bug 1931857: Set registry routes in operand config #200
Full changelog

cluster-samples-operator

Bug 1950809: add DeepCopy to avoid SharedInformer cache mutation #371
Full changelog

cluster-version-operator

Bug 2014165: pkg/cvo/egress: Load HTTPS proxy from Proxy status #673
Bug 1943973: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #540
Bug 1924194: pkg/payload/task_graph: Require firstIncompleteNode to have tasks #510
Bug 1925199: add current profile annotations to CVO manifests #512
Bug 1927515: pkg/cvo: Use shutdownContext for final status synchronization #517
Bug 1921180: pkg/cvo/sync_worker.go: Ignore work changes during init #506
Bug 1918494: use child context to verify payload signature on forced update #504
Full changelog

console

Bug 2002151: Fix the event listener optional types #10019
Bug 1987228: Handle array to string conversion for HTTPS checkbox value #9676
Bug 1980182: operator UI not working with multiple version CRD in 4.6 #9549
Bug 1978159: update cluster-local label for ksvc #9389
Bug 1972694: Omit bitbucket branch in URL if it contains slash #9271
Bug 1970984: Add pipeline annotation to secrets for private git repo import with pipeline #9224
Bug 1972661: fixes: WebTerminal widget should send resize events #9270
Bug 1969878: fix resources fetched by firehose to show the correct Pod donut #9199
Bug 1960094: Make console works against api proxy #8915
Bug 1960545: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8926
Bug 1966422: Create application edit url based on git provider #9088
Bug 1950490: Fix “Create binding” link from Role page, RoleBindings tab #8686
Bug 1961936: Fix topology crash on install of ODH operator to project #8971
Bug 1933666: [release-4.6] Create ImageStream and other resources for samples step by step #8261
Bug 1948370: Remove cluster label from predefined monitoring queries #8614
Updating openshift-enterprise-console builder & base images to be consistent with ART #8386
Bug 1939609: Fix null handling in FilterToolbar_ to prevent possible exceptions #8395
Bug 1943160: support service binding operator version 0.5.0 #8465
Bug 1940905: [release-4.6] Remove master as default branch and use only when ref is given #8424
Bug 1943705: Add ‘Roll Back’ action for Replication Controllers #8491
Bug 1927855: sort cluster task in pipeline builder #8139
Bug 1925037: fix delete app modal error when resource not found #8053
Bug 1935096: Apply var pf-global–FontFamily–monospace to the create secret textarea input #8312
Bug 1931515: allow choice of binding type when creating RoleBinding #8212
Bug 1933017: Fix to avoid overriding of d/dc pod template container values #8322
Bug 1934664: Consider finally tasks when calculating task status #8292
Bug 1928230: retry co-fetch on 409 POST or 429 #8155
Bug 1933727: fix Internal registry deploy flow #8267
Bug 1926121: Listing Subscriptions in OLM should also show them when ‘All Projects’ namespace is picked #8096
Bug 1923939: add missing trigger types and update the optional fields - 4.6 #8015
Bug 1927800: fix query browser prometheus URL for non admin user #8138
Bug 1926371: scale pods using the ‘scale’ subresource #8099
Bug 1926340: Fix that image containers are fetched from external container registries (which doesn’t work for private image containers) #8098
Bug 1924437: Missing User RoleBindings in the Project Access Web UI #8034
Bug 1924069: fix pipeline rerun when pipelineSpec is embedded #8024
Bug 1919138: helmchartrepo is not http(s)_proxy-aware #7901
Bug 1916860: Filter out helm charts based on kubernetes version #7851
Bug 1920493: fix pipeline visualization with same pipeline & task name #7927
Bug 1920530: - System roles are not present while trying to create new role binding through web console #7929
Bug 1914342: make filesystem queries compatible with both RHCOS and RHEL nodes #7777
Bug 1916406: Helm chart repository index can contain unresolvable relative URL’s #7841
Bug 1911260: Fix logs streaming issue in multistream logs #7663
Bug 1924224: Fix source code URL for apps created using self-hosted repositories #8031
Bug 1921603: Fix crash when loaded is true but the data set doesn’t include the pods #7985
Bug 1916378: fix skipped tasks in conditional pipelines #7843
Bug 1915013: Fix pipeline visualization issue when taskspecs is used #7859
Bug 1910199: Replace ‘Baremetal’ with ‘BareMetal’ in the supported platforms for I… #7637
Full changelog

csi-driver-manila-operator

Bug 2002556: Do not degrade cluster on failure to reach Manila #127
Bug 2000097: Use cluster Proxy when available #118
Updating csi-driver-manila-operator builder & base images to be consistent with ART #76
Bug 1918367: Make Manila operator more tolerant #88
Full changelog

docker-builder

Bug 1946363: move entitlement related secrets back to mounts.conf #242
Bug 1939219: bump(*): #225
Bug 1919359: better surface dockerconfigjson errors causing image pull errors #210
Full changelog

docker-registry

Bug 2003629: Use apimachinery with HTTP/2 health checks enabled #293
Bug 1982611: bump aws-sdk-go to v1.38.35 #287
Bug 1946694: Run remote registries for pull-through tests as pods #269
Bug 1930802: Replace bitbucket.org/ww/goautoneg with its mirror #266
Updating openshift-enterprise-registry builder & base images to be consistent with ART #261
Full changelog

etcd

ETCD-178: Bug 1951823: openshift-tools: fix on off flow and add unit tests #77
Full changelog

gcp-machine-controllers

Updating ose-gcp-machine-controllers builder & base images to be consistent with ART #142
Bug 1941563: Ensure response body is closed when we are finished with the request #154
“Bug 1912531: revendor mao” #149
Full changelog

grafana

Updating grafana builder & base images to be consistent with ART #53
Full changelog

haproxy-router

Bug 1971013: template helper - generateHAProxyWhiteListFile, use right arg type #303
Bug 1965329: Add a condition to check if the Endpoints ID is duplicated #292
Bug 1938922: router/template: Cache compiled regular expressions #270
Bug 1900991: Move idle check from endpoints to service #253
Full changelog

hyperkube

Bug 2026380: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1115
Bug 2023306: UPSTREAM: 106261: Don’t guess SELinux support on error #1056
Bug 1939541: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #659
Bug 2021468: Rebase v1.19.16 #1035
Bug 2008266: Rebase 1.19.14 #962
Bug 1993752: UPSTREAM: 104340: Pass additional flags to subpath mount to avoid fla… #942
Bug 1996849: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #902
Bug 1989061: don’t apply defaultAllowPrivilegeEscalation:false when container is privileged #939
Bug 1981784: UPSTREAM: <drop>: bump(apiserver-library-go) #894
Bug 1951727: Speed up PV provisioning for vsphere driver (ocp-4.6) #691
Bug 1959420: fix a 4.6 test flake #740
Bug 1958371: UPSTREAM: 98424: register all pending pod deletions and check for kill #779
Bug 1966811: UPSTREAM: 102224: Fix expired unit test certs #781
Bug 1942146: Fix labels of Cinder PVs #636
Bug 1960002: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #745
Bug 1951467: fix loop bug for verify attached volume #683
Bug 1942630: UPSTREAM: 96789: Choosing the right source VIP for local endpoints #639
Bug 1933624: 4.6: UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning #596
Bug 1930960: UPSTREAM: 94087: kubelet: node sync at least once #582
Bug 1918994: Override termination grace period on annotation #533
Bug 1913543: UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics #511
Bug 1924785: UPSTREAM: 89885: SQUASH: Fix cinder crash #548
BUG 1891107: UPSTREAM: 95259: allocate service-account flowschema to global-default #428
Bug 1926262: Prevent GCP e2e tests from triggering a rate limit on the listZone API #556
Bug 1919453: Allow test images to be in a single mirror #536
Full changelog

insights-operator

[release 4.6] Bug 1891544: Adds ContainerRuntimeConfig gatherer #238
Full changelog

ironic

Bug 1917481: Wait for expected number of drivers starting API #136
Full changelog

ironic-inspector

Updating ironic-inspector builder & base images to be consistent with ART #55
Full changelog

ironic-ipa-downloader

Bug 2025495: Bump IPA version to 15.2-20211013.1 #88
Bug 1975531: [release-4.6] Update ipa version #77
Full changelog

ironic-machine-os-downloader

Updating ironic-rhcos-downloader builder & base images to be consistent with ART #35
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2044938: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1372
Bug 2020612: Update Jenkins and plugins per 2021-11 advisory #1349
Bug 1972366: Bump jenkins version 2.289.2 #1280
Bug 1952561: bump config-file-provider to 3.7.1 #1266
[release 4.6] Bug 1952337: Update Jenkins to 2.277.3 and disable setup wizard #1260
[release 4.6] Bug 1929121: update kubernetes-client-api #1231
[release 4.6] Bug 1929919: Upgrade Jenkins to 2.263.3 #1234
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter builder & base images to be consistent with ART #42
Full changelog

keepalived-ipfailover, pod

Bug 1926267: Egress router: Add iptables package to Dockerfile #78
Full changelog

kube-proxy, sdn

Bug 2004720: improve SDN’s OVS healthcheck and logging #353
Bug 1998453: Fix MCS-blocking iptables rules #340
Bug 1995873: Disable conntrack for vxlan traffic #339
Bug 1970046: Fix for empty egress policy #315
Bug 1915849: Bump 4.6 to use OVS 2.13 #303
Bug 1959425: Fix incorrect unmonitoring of egress nodes #298
Bug 1926662: Do not use egressIP on reply packets #257
Bug 1937547: networkpolicy: pass traffic through NAT to handle possible tuple collisions #274
Bug 1928773: Prefer local endpoint for cluster DNS service #261
Updating ose-sdn builder & base images to be consistent with ART #244
Updating kube-proxy builder & base images to be consistent with ART #247
Bug 1904455: NetworkPolicy performance fixes, v2 #249
Full changelog

kube-rbac-proxy

Updating kube-rbac-proxy builder & base images to be consistent with ART #39
Full changelog

kube-state-metrics

Updating kube-state-metrics builder & base images to be consistent with ART #42
Full changelog

kuryr-cni, kuryr-controller

Bug 2041903: Make completed Pods Ports reusable #623
Bug 2019721: Update TOX_CONSTRAINTS_FILE for stable/xena #592
Bug 1983107: Fix KLB conversion from annotations #541
Bug 1983107: Allow clean up of unused member #540
Bug 1975676: Workaround OVN bug causing subports to be DOWN #533
Bug 1968418: Fixing bug, Kuryr-Controller crashes when it’s missing the status #519
Bug 1958106: Skip pool pre population if no Status is present on CRD #513
Bug 1958106: Fix port pools #512
Bug 1958103: Include service subnet to be open for namespaceSelector set to all. #511
Bug 1958093: kuryr-controller restarting after 3 days cluster running - pools without members #509
Bug 1963846: Fix NPs for OVN LBs with hairpin traffic #518
Bug 1952429: Narrow connection to the cluster only on namespaceSelector. #507
Bug 1932114: Allow to config network MTU #506
Bug 1947343: NPs: Do not set ports for protocol-less SG rules #496
Bug 1940141: Do not default protocol to TCP for allow-all NPs #484
Bug 1938161: Get trunks more diligently #478
Bug 1897526: Fix ports count on subnet #427
Bug 1894408: Delete ports created for host networking pods #395
Bug 1893681: Bulk port creation exception not completely formatted #390
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #216
Bug 1939259: [release-4.6] Update MAO and set metrics on :8081 address #220
Full changelog

machine-api-operator

Bug 2022840: GCP CI runs are complaining about APIs not being enabled #955
Bug 1993120: Make sure nodes don’t have attached volumes before vm deletion #905
Bug 1947813: vSphere, detach virtual disks before virtual machine destroy if node not available #845
Bug 1916772: Inject the cluster-wide proxy environment variables in the baremetal pod #808
Bug 1933676: Cherry-pick: Azure disconnected reject publicIP setting #812
Updating ose-machine-api-operator builder & base images to be consistent with ART #786
Bug 1912531: 4.6: Update kubectl dep #782
Full changelog

machine-config-operator

Bug 2000502: bump SystemMemoryExceedsReservation alert threshold to 95% #2750
Bug 2004136: [on-prem] Disable liveness probe until keepalived.conf exists #2763
Bug 1998181: ensure SSH key uniqueness #2737
Bug 1975626: Add nil check for KubeletConfig #2719
Bug 1989403: daemon: add check before updating kernelArgs #2720
Bug 1987221: Backport drain timeout optimizations #2707
Bug 1993218: alerts: SystemMemoryExceedsReservation triggers too quickly #2713
Bug 1975626: Fix KubeletConfig nil error #2699
Bug 1975626: KubeletConfig validation warning in CRD and Docs #2672
Bug 1978041: templates: split unit dropins into separate files #2652
Bug 1926944: enable madvdontneed in system components #2632
Bug 1940594: [baremetal and friends] Drop unnecessary readiness probes #2480
Bug 1927555: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2615
Bug 1942506: [4.6] Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2589
Bug 1953493: daemon: return nil for unsupported operation on an OS #2545
Bug 1955715: Add on-prem namespaces to relatedObjects #2556
Bug 1948533: Add nodeip-configuration.service for oVirt #2567
Bug 1945544: templates: add After=ostree-finalize-staged.service to kubelet.service #2502
Bug 1933206: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2439
Bug 1951089: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2537
Bug 1940585: conditionally set nodeip-service enabled for vSphere #2493
Bug 1883916: [4.6z backport] Fixes setting route metric for ovs-config #2467
Bug 1931617: OVS Config: fixes detecting bond NM files with static IP #2453
Bug 1908534: update ctrcfg crd to make spec & containerruntimeconfig required #2308
Bug 1897552: Mode mismatch fix for confusing strings #2353
Bug 1933075: backport systemd dropin/units zero-length handling #2435
Bug 1906298: update MCDDrainErr to reduce cardinality & fix nodename #2419
Bug 1908940: [test] Skip TestKernelType on OKD #2311
Bug 1919272: [release-4.6] NM resolve prepender: support appending a nameserver for systemd-resolved #2356
Full changelog

mdns-publisher

Bug 2003563: Update zeroconf vendoring #40
Bug 1936539: Update zeroconf to pull in rate-limiting fix #27
Updating ose-mdns-publisher builder & base images to be consistent with ART #22
Full changelog

multus-whereabouts-ipam-cni

Bug 2028968: Whereabouts should reconcile IP addresses [backport 4.6] #80
Bug 1931953: [backport 4.6] Fix for IPv6 when leading hextets equal zero #50
Bug 1898616: Excluded subnet handling for ipv6 [backport 4.6] #37
Full changelog

must-gather

Bug 2018197: [release-4.6] Add olm resources to default must-gather #242
Bug 1975970: Backport gather network logs #233
Updating ose-must-gather builder & base images to be consistent with ART #203
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon builder & base images to be consistent with ART #31
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver builder & base images to be consistent with ART #36
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #199
Bug 1915667: remove logging when authz header is present but basic auth is not attempted #200
Full changelog

oauth-server

Updating oauth-server images to be consistent with ART #89
Full changelog

openshift-controller-manager

Bug 1955211: fixed LANG for the builder container #181
Bug 1935362: Listing All Events with Chunking #170
Full changelog

openshift-state-metrics

Updating openshift-state-metrics builder & base images to be consistent with ART #65
Full changelog

openstack-machine-controllers

Bug 2002752: Adds Proxy to provider client http transport #201
Bug 1933667: Update ose-openstack-machine-controllers builder & base images to be consistent with ART #154
Bug 1933667: Updating ose-openstack-machine-controllers builder & base images to be consistent with ART #165
“Bug 1912531: revendor mao” #164
Full changelog

operator-lifecycle-manager

Bug 1975456: Handle invalid label during resource cleanup #2209
Bug 1968226: Fix inconsistent dependency candidate order. #2184
Bug 1965307: Make ClusterOperator Available condition sticky. #2177
Bug 1969412: fix(catalog): Reduce namespace resync in resolution failure #2189
Bug 1965069: Simplify deployment status check to reduce flapping. #2176
Bug 1963139: Set reason/message for Available condition in packageserver co #2172
Bug 1962310: Use DeploymentAvailable instead of custom test for CSV status. #2169
Bug 1955112: Preserve existing ServiceAccount owner references during installs. #2128
Bug 1954880: Add resource requests for bundle unpacker #2126
Bug 1954759: Fix resolution error if inner entry doesn’t provide a required API. #2123
Bug 1945149: only override deployment resources when explicitly defined in subscription config #2071
Bug 1947916: Don’t adopt copied csvs #2094
Updating operator-lifecycle-manager builder & base images to be consistent with ART #1952
Bug 1940649: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2051
Bug 1940453: Support jittering relatively small resync intervals. #2050
Bug 1938618: Infer package name property for unannotated CSVs, if possible. #2043
Bug 1938369: fix(resolver): Allow skipped versions to be installed initially #2040
Bug 1934637: Honor all subscriptions to a package #2026
Bug 1929335: Only re-create operator resource if it has existing components #2008
Full changelog

operator-marketplace

Updating marketplace-operator builder & base images to be consistent with ART #374
Bug 1937986: wrong community catalog image reference #384
Full changelog

operator-registry

Bug 1968681: fix(containerd): drop xattrs during unpack #678
Updating operator-registry builder & base images to be consistent with ART #550
Bug 1915068: Fix windows build with golang 1.15 #547
Bug 1918012: Unexpected images left in related_images after pruning #560
Full changelog

ovirt-csi-driver

Bug 1960149: disable metrics #76
Bug 1924623: pass ovirtClient to identity and remove redundant call to Test connection #69
Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #71
Bug 1921817: support raw block devices #68
Bug 1917149: [release-4.6] bump go-ovirt and run make vendor #64
Full changelog

ovirt-csi-driver-operator

Bug 1924626: increase livenessProbe period #44
Full changelog

ovirt-machine-controllers

Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #81
Full changelog

ovn-kubernetes

Bug 2046009: Make config parsing more resilient for unknown fields #929
Bug 1988512: [release-4.6] Fix LGW externalIP #676
Bug 1972652: Fix: egress IP route health check detection state on restart #576
Bug 2001980: Fix sync egress IP for missed events on start-up #723
Bug 1985517: Add v6 management interface address for host network policy #626
Bug 1985347: ensure missed events are handled during a reconnection #620
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #603
Bug 1972253: CARRY: fix missed learn for hybrid exgw #575
Bug 1966833: BACKPORT Add a cluster-wide group with node ls-to-cluster-router ports. #573
Bug 1966280: Adds reconciliation for hanging pod adds #561
Bug 1953088: master: Delay deleting Namespace’s address set for 20 seconds #534
Bug 1949240: Bump OVN version in 4.6 to 20.12.0-24 #525
Bug 1947098: [4.6z] Ensure no SNAT on GR for DisableSNATMultipleGws #535
Bug 1950434: [4.6] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #504
Bug 1947836: Fix service update for policy type assertion #501
Bug 1945690: Updating ose-ovn-kubernetes builder & base images to be consistent with ART #401
Bug 1945308: Backport lr nat del add fixes #486
Bug 1945725: Revert the ovn change to avoid a crash #485
Bug 1935691: [release-4.6] Backport port_claim improvement #459
Bug 1933752: Bump to ovn2.13-20.09.0-7.el8fdn #455
Bug 1889460: Guard against nil address set usage #353
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1935586: pkg/prometheus: remove liveness probe #110
Updating prometheus-operator builder & base images to be consistent with ART #103
Updating prometheus-config-reloader builder & base images to be consistent with ART #104
Full changelog

prometheus-node-exporter

Bug 1928073: text_collectors: do not use space as a replacement for escape characters #85
Bug 1928073: Remove escape characters #83
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #368
Full changelog

tests

Bug 1919453: [release-4.6] configure tests to pull images from mirror #26729
Bug 2031263: Skipping Django Test until bug is fixed #26690
Bug 2019522: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26564
Bug 1978717: Add BareMetalPlatformType into e2e upgrade service unsupported list #26309
Bug 1981582: [release-4.6] use vpa package and add debug logs to olm test #26355
Bug 1988176: [release-4.6] Add test of documented backup/restore procedure #26356
Bug 1902221: clean up remaining build busybox refs after claytons overhaul #26332
Bug 1977095: correcting test case #26308
Bug 1978442: comment out multi-namespace jenkins pipeline templates test; moving it to jenkins client plugin in-repo e2e’s #26301
Bug 1977093: Add consolequickstarts and consoleplugins extensions to the authenticated rules #26288
Bug 1955599: test/extended/router: Fix-up Unidling test #26119
Bug 1965588: Testimage install cinder 4.6 #26193
Bug 1963909: move verify run test from tools to cli image; narrow scope to /run/secrets #26177
Bug 1958969: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26146
Bug 1948233: Add openshift/network/third-party suite, for CNI plugin conformance #26059
Bug 1936974: Access git over https for tests #26109
Bug 1941577: test/extended/router/idle: skip test on virt platforms #26069
Bug 1927954: test/extended/router/idle: address flakes/failures seen in CI #25893
Bug 1915559: upgrade/upgrade.go: Enhance upgrade ack time out error #26055
Bug 1931864: test: add vsphere and libvirt to unsupported platforms for LB service #25914
Bug 1930537: improve handling of pending pods crashloop detection test #25600
Bug 1902008: fix ldap group sync tests and move them from bash to golang #25808
Bug 1939549: Update tests to use Ruby 2.7 #25967
Bug 1930724: server-side apply e2e: fix oauthclientauthorization race with KCM #25908
Bug 1902054: Update multicast test image for use in release-4.6 #25825
Bug 1900991: test/extended/router: add idle/unidle e2e test #25858
Bug 1925539: Allow RHE7 /run contents for build fs test #25864
Full changelog

thanos

Bug 1961158: Changing resolver to address thanos-ruler pod issues #57
Updating thanos builder & base images to be consistent with ART #44
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github