4.8.28

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.28-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.7.26, 4.7.29, 4.7.31, 4.7.33, 4.7.35, 4.7.36, 4.8.11, 4.8.12, 4.8.14, 4.8.15, 4.8.17, 4.8.18, 4.8.20, 4.8.21, 4.8.22, 4.8.7, 4.8.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.8.10

Created: 2022-01-19 10:15:29 +0000 UTC

Image Digest: sha256:ba1299680b542e46744307afc7effc15957a20592d88de4651610b52ed8be9a8

Release 4.8.28 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-01-19-035759

Components

Kubernetes upgraded from 1.21.1 to 1.21.6
Red Hat Enterprise Linux CoreOS upgraded from 48.84.202108301459-0 to 48.84.202201102304-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver git 8c036e44 sha256:1244a67a77dfcefae567e72bf8a181684eb08d9777e8c6a1da0f4e7d04f682d9
aws-ebs-csi-driver-operator git d1fe616c sha256:99e8e55c2c5d8804985b24934c9aacbe613a01c1907419963c2e0feedad8434f
azure-disk-csi-driver git 2d461b39 sha256:310594c3dc4572323c146245f99c6016da3357077b506789b945e72b645cc8dd
azure-disk-csi-driver-operator git d3a3c298 sha256:c42aaa649c715520e2889660bfec948dd305f2bd01b06cfb531786b786407287
baremetal-machine-controllers git a60d493e sha256:333ab67a8a19048b782f3fa525f362eac98340aa5d09128883debf39e56dba75
baremetal-runtimecfg git ae824ab2 sha256:55d0ac99688d9ee46751861835f074f671d94a4b0bda52f1bf46bde9ce4aaa0a
cluster-autoscaler git 7bbde4cc sha256:b8b22c595846e4a1ababc4c4e0b74cbd4fad811b6c4c870f839fa63d5baf399b
cluster-bootstrap git 1af395b7 sha256:42fba85f4832614651a8c6f6bddaf601f9b1acc419060ff5c524ac23a9ebc138
cluster-config-operator git c1022410 sha256:62ba4189865ec607c6b5266fbc2777f4dc4afc7d297b112debfb57b4003f1743
cluster-csi-snapshot-controller-operator git 07b3f810 sha256:83ce923c01fde1391ef977ace7aa412ff3907409c3c5af8e4b134b64ab03b7a1
cluster-dns-operator git fdb2ebec sha256:0520592b4647bcc4161f5d011fa1180de89d1ca7567ad222c576387668acc5a7
cluster-openshift-controller-manager-operator git 286c1577 sha256:868ff2e5a8b5f0057a454f86cc155eaef641912f44963b511f9fc0b4ff25cd51
cluster-policy-controller git ec46ea5c sha256:84b861ca9f6d5ed5afc501c9ad364b0c0d7f0257966d175168335d57ac900a84
cluster-samples-operator git 31fb491f sha256:61c9c37228cc13529a325c40c1ce43f8e31d02b432796f88ebbc15701ab4c0a6
cluster-update-keys git 87835b73 sha256:9ee08142cc135faa38483532023bebd04d687b91e533627fdc6e03debb1f3c40
configmap-reloader git 0d221296 sha256:7a7c29140e1d3fa0069af60749b378acc30aa0d16956f3cfd5976991b7b0805b
container-networking-plugins git 71a8b346 sha256:e03886b903515053a156bfb6a3014553e982678d5a5761656cea8dc540bac6d0
coredns git 642b46ef sha256:d01bfcfa10f4db458217f6ec06311bbcf21f2a6fe03ccd49b69a7b42ad586d49
csi-driver-manila git 3579eadc sha256:00e8648ce190469ee69cd3c0a75e9f3fb65a6dc6c535fe126a79557255ab922a
csi-driver-nfs git 583088ef sha256:cf35ecefb1a06cbf1b37fa9bff1c28ed3e63ab7ac7897163c3167721bef6ead5
csi-external-attacher git 596da63e sha256:032a13b2ad678026352f884258aa7aea3abad6c660b17a0e083589d21ef4578e
csi-external-provisioner git 3ea7e68a sha256:aadba1675def20ed1355126feeacf6bfaf994864cb492dc628a9b07c9e8d17b1
csi-external-resizer git b5dd2b39 sha256:4737f1dd7fab357a10e6ac47a7bddc0d37a98dea1a975e83d0371652556f76df
csi-external-snapshotter git 1e2cca95 sha256:3aca8960ec67aa8de1780d981d4a9cb2e933039cb413886d592516881b66a123
csi-livenessprobe git a29b1153 sha256:5c003e3745cb01b53437e2e46cf723e10d75830ab5117bb7be0f93a59b266882
csi-node-driver-registrar git 0519730f sha256:07b404388de14ab30a0e8f5cc3ecc138f85401d8533f46c3292c2480be70dd62
csi-snapshot-controller git 1e2cca95 sha256:f11e948a4f2dd01208c16e6e80ed4c46cb39613277b7b4022a71af6d11414aac
csi-snapshot-validation-webhook git 1e2cca95 sha256:e5546645bc9314e619a4a6a0618c9a20a2ed26c4286e099dbad9d6db88c5409b
docker-builder git b59f2b3a sha256:11a3ff14ecc103cf59af8e366f4ce32d795bed1d8017779c6d0158eee7febd95
egress-router-cni git 016bea1a sha256:db68525d7b85570231371776ac6a59740da1d89d9fbbd95522a1dc5d4ef5a41e
etcd git aefa6bf5 sha256:c8edd40568f85a9172e99f9a9a3804df381cbba71344277236c42328ddf3a171
gcp-machine-controllers git 34db56eb sha256:b0346c10a22ba99e95c3f7b1d7f52511d6c96f752d0f3708f689d13426d6a63c
gcp-pd-csi-driver git 0b618896 sha256:df12b4ec4a5d4576420c11059b591011487e6ee154c134f5aa4c660dce81034b
gcp-pd-csi-driver-operator git 35ebe860 sha256:59b2dc4056bd445476691363b9b4f43b2711de681da495a3e7dc82fec8177e43
grafana git b987e4b1 sha256:9fe586b1e8db09a2bcd15bc80e5a4bcf494b452096913be0e4841a461da5c4be
haproxy-router git 9c9f9f42 sha256:600eff8490d26a015003de22513ba06c77171a36bc567c2ff9ee567ace6b1a3b
ironic-ipa-downloader git ba878326 sha256:894c5433894500e5975a7a15378e070a4dfecacd8bb34fa8d8dd9aa462e5de62
ironic-static-ip-manager git d2e40e34 sha256:23086809ec4fe7795cd85832d4323350a3525199033284dc006f58d01ee7b0ed
keepalived-ipfailover git ad38e116 sha256:38a70c1af9974cfdf9051a9457cd9de4adf419c5d364b2244f2809f601ced3d9
kube-rbac-proxy git 813c3da7 sha256:1996cf9e317c2255556ca28cdb958b23a5957ad43ff567d8aac93afd28cce4b5
kube-state-metrics git 94716629 sha256:46716c4e6f2708c9db305a9ad4355c3db2fa6fda60f8087462332aebcacbe7f6
kube-storage-version-migrator git 901a6d22 sha256:e537f2a7714e7f18935ff750b0f10eb21a8ea9862b698014a3119556f726be5b
libvirt-machine-controllers git 9542e5ac sha256:763f6beb94591531e62ef78c81e7dcd8a7d344a35eba8106e37603c567745978
machine-os-content sha256:a79bf10aaf54cc0e3e6898729481a1c704637020626eacb7a9005a50fad5d0ac
multus-admission-controller git 64645feb sha256:2325591e43a41a86c365b28a9503f607ef81f9f729d5974059b0b748b26b366e
multus-cni git 0c972341 sha256:58bd4787d80f919e3fdaa527df62010cf7c9783b52d874739137e7dbc605c5b5
multus-networkpolicy git 187ad91f sha256:c5f1ac96b7bdd5e0fa44bb45d9639c4b188c8848e3bf706eb790ae1440e4dabe
multus-route-override-cni git 1662c3ec sha256:bbce5b460081ad1aadebcc627255b1ceb73b9e8d161fe4e41baacfdf7d1b0b5b
must-gather git 515e0502 sha256:b9694710390d7e99f1c26959025d6399f6fb5e9809ae49a336a9a6b3dad1b565
network-metrics-daemon git f02c63ae sha256:94b081f9a5b3edb8b9078c631ae255919f25736fcf2570d811c42d79729457f6
network-tools git 5ac3739e sha256:78ad9d942f0bcebb457d1a51aa3e8628ab8f3aa438bb13e4975d54911fce097a
oauth-apiserver git 09435a5d sha256:042c53ce2c89d8e5f9270007f345fb11051e384effd8bed57b3a4295b795e5f7
oauth-proxy git 3fc0d89b sha256:500eae512f2633fdd60d42efe36e697378602a35659b5d3437cca8bb0114cd3e
oauth-server git 374e2ee3 sha256:bddb36fb12d0e6b3fa139b43c668dd3a709f389231b09b964e6192b1f74e5e60
openshift-state-metrics git 10142914 sha256:851cf92577d3ec2ece05d4572f5619c8bd47b8cf6e6bcc92acde2ec47ee30226
openstack-cinder-csi-driver git 3579eadc sha256:a546e0624bfdd5b13666857bad8c25a63afebc5df152419d37c4e65ea5a27fd2
openstack-cinder-csi-driver-operator git 1184ace0 sha256:c23502530b8ca09ec4fdeab51ec71e0d5d31915d829d7c993ca4de7df3b8caad
ovirt-csi-driver-operator git 7b6cd3d8 sha256:b003e0cbe4e3ca926473ee7f830f6611f6aa3d35cf875674660cbead81f7ae7a
ovirt-machine-controllers git cbf02340 sha256:30a97188ab3b93a24eb9fcebc158ff12a6f772ddca824a4432c779b654fe7fb1
prom-label-proxy git 2faeb405 sha256:33db67487c7509611fc5316d3cedec74249a569d6fc47c4702b3ba3ff223014b
prometheus git f3beb880 sha256:08db303a9579f3d55baa28c05c6a6a90def7ff3639821592a73ec69cfa1818c4
prometheus-alertmanager git 7b5ac874 sha256:4ded377dcbbe673ffc90b9fcf4a8d97b0352fa085bc432e75f16c9e34ef8ebd9
prometheus-config-reloader git 8f4efab9 sha256:146e755aa84788307285a77ff83657603267ec47022ade1aeae34df39ab204c5
prometheus-node-exporter git 9ad2cf90 sha256:05260b455cfcd0924e8b9a814666c2588568507117a2d6c8496584d091acb6b4
prometheus-operator git 8f4efab9 sha256:36d798b3122dd7ab5fb8a86788fc908405f3a57b8727f20bb4bb6443a89e4849
thanos git f7c1227d sha256:fdb0767e6e8fe5731c9dc031fe922c76fe260047b9ce2a646dc5258949b34c3b
vsphere-csi-driver git dd5345eb sha256:8901cba0a8450c7cc8ada599c66bfe07f1d07856c740531420ba5cfaa447d487
vsphere-csi-driver-syncer git dd5345eb sha256:8000d44563d81b9da492cfa11b52e29882ca0ba03b820fbf35a0324306f3afe8

aws-machine-controllers

Bug 2031905: Prevent Machine from being considered provisioned until it exists in AWS #432
Bug 2016926: do not requeue if the machine has been updated #426
Full changelog

aws-pod-identity-webhook

Bug 2029253: update go.mod for go1.16 #148
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2022171: Relax vcenter hostname check #5371
Updating ose-installer-artifacts builder & base images to be consistent with ART #4782
Bug 2023363: Add ingress rules to master SG for compact clusters #5386
Bug 2017986: Set AWS Bootstrap Type == Master #5338
Bug 2017258: bump oVirt terraform provider version which fix “Disk is locked” bug #5329
Bug 2002349: Fix invalid UPI AWS instance type #5199
Bug 2008823: baremetal: Ensure ipv6 bootstrap VM client-id is predictable #5250
Bug 2009019: update legacy RHCOS boot image metadata #5255
Bug 1982001: Bump RHCOS 4.8 boot image #5227
Update OWNERS #5242
Bug 2004236: Document how to enable Octavia Day 2 #5161
Bug 1973421: [4.8] improve dual-stack install-config validation #5114
Full changelog

baremetal-operator

Bug 2000442: Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #174
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2004193: Registry mirror panic #926
Add kevinrizza as catalog-approver #921
Full changelog

cloud-credential-operator

Bug 2027928: pod-identity-webhook starts without tls #429
Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
Bug 2026098: Check for aws status in infra platform status field before client setup #425
Full changelog

cluster-authentication-operator

Bug 1997906: csr request: use generate names to prevent getting stuck waiting for a cert #494
Bug 2003632: manifests, bindata: explicitely set runAsUser for operator and operand #484
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #488
Full changelog

cluster-autoscaler-operator

Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
Bug 1995595: add csidrivers and csistoragecapacities to autoscaler cluster role #220
Full changelog

cluster-baremetal-operator

Bug 2000445: Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never #194
Bug 1975711: Only start static ip set if provisioning net not disabled #166
Full changelog

cluster-etcd-operator

Bug 2008414: pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus #665
Bug 1994483: bindata/etcd: remove unix socket from advertised list #642
Bug 1999777: [release-4.8]: pkg/operator: add cluster backup upgrade controller #652
Full changelog

cluster-image-registry-operator

Bug 2015098: Avoid disruptions #725
Bug 2004028: Update rolling update parameters #717
Full changelog

cluster-ingress-operator

Bug 2017708: Change default balancing algorithm to “leastconn” #670
Bug 1998103: cleanup condition metrics for deleted ingress controllers #649
Bug 2000414: Configure router to use “source” for passthrough #651
Full changelog

cluster-kube-apiserver-operator

Bug 2016213: Exempt metrics scrapes from APF. #1247
Bug 2012010: alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1241
Bug 2001244: Enforce OpenShift’s defined kubelet version skew policies #1224
Bug 1993800: bump(library-go): staticpod/installer: fix backoff of installers #1214
Full changelog

cluster-kube-controller-manager-operator

Bug 1993800: Bump library-go to include backoff fix of installers #560
Full changelog

cluster-kube-scheduler-operator

Bug 1993800: Bump library-go to include backoff fix of installers #366
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 4 #79
Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
Full changelog

cluster-machine-approver

Bug 2031047: Ensure pending CSR count is valid post approval #146
Bug 2032092: Replace certificates with generated certificates #148
Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
Full changelog

cluster-monitoring-operator

Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
Bug 2012039: Allow namespace label in metric allow list #1436
Bug 2005205: improve update and status reporting 4.8 #1428
Revert “Bug 1999057: jsonnet: Sync with kube-prometheus” #1394
Bug 1999057: jsonnet: Sync with kube-prometheus #1360
Bug 1997497: Backport etcd telemetry #1344
Bug 1995699: Get insights on series churn during upgrades #1349
Bug 1999148: alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… #1351
Full changelog

cluster-network-operator

Bug 2022747: Allow to use proxy to connect to OSP cloud #1225
Bug 2037500: Bump openshift/build-machinery-go #1271
Bug 2029590: Set upgrade strategy on kube-proxy #1244 #1244
Bug 2018513: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1211
Bug 2008589: [4.8z] Slow OVN Recovery on SNO #1200
Bug 1985308: Add a newline between user CAs and system CAs #1162
Bug 1990928: [Backport 4.8] Whereabouts should have RBAC for leases #1185
Full changelog

cluster-node-tuning-operator

Bug 2018053: tuned: add timeout and restarts #286
Bug 2013678: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #280
Bug 1998120: Add a cgroup blacklisting rule to parent openshift profile. #266
Bug 1999608: Reload when deps of recommended profile change. #268
Full changelog

cluster-openshift-apiserver-operator

Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
Full changelog

cluster-storage-operator

Bug 2034270: Add trusted CA bundle to vsphere operators #249
Bug 1996672: Add proxy support to cinder CSI #210
Full changelog

cluster-version-operator

Bug 2038936: *: Use –v=2 logging to drop client-side throttling noise #724
Bug 1982683: [release-4.8] Respect noProxy #691
Bug 2025955: Removing the extra indentation #696
Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
Bug 2011954: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #672
Bug 1999092: Add and enable admin ack Upgradeable condition gate #647
Bug 1999777: Ensure recent etcd backup before allowing minor-version updates #649
Bug 1980411: [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status #627
Full changelog

console

Bug 2034640: cant delete VM with un-owned pvc attached #10718
Bug 2030443: Fix ClusterOperators link #10638
Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
Bug 2017469: key not a valid prop name causing display issue in env editor #10419
Bug 2009224: Regular user cannot restore VM snapshot #10436
Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
Bug 2017326: Update PatternFly/react-console #10384
Bug 1984102: Switch Cypress OLM tests to use supported Red Hat operators #9560
Bug 2005871: Cannot create Network Attachment Definition through UI #10314
Bug 1997901: Cannot delete user created vm template #10367
Bug 2001212: Notifications is not translated on the top right bar #10040
Bug 2002649: Fix SerialConsole display bug #10034
Bug 1994983: use strict promoted template list #9824
Bug 1977659: Adjusting to new reference models changes - cherry-picked rls 4.8 #9379
Bug 2013091: adds check for status in ksvc in util logic #10211
Bug 1998692: Normal user cannot create VM because it cannot access v2v-vmware #10171
(4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com #9470
Bug 2010076: Update prow setup v4.8 #10168
Bug 1999717: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #9952
Bug 2005917: CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False #10103
Bug 1993236: Do not drop environment variables without name but with a value, also fix crash when ref is empty #9799
Bug 2000474: Create BuildConfig webhook secrets before creating knative resources #9970
Bug 1996758: Update Resource Dropdown Tech preview text [Release-4.8] #9838
Bug 1990141: Console overview operators shown upgrading when still waiting on approval #9732
Bug 1995118: Virtualization is not available in Home Overview #9826
Bug 1999931: move event sources add option to serverless add group #9958
Full changelog

console-operator

Bug 2041359: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627
Bug 2018391: Remove SimpleHTTP ‘server’ response header value #606
Bug 1987315: Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #591
Bug 2003639: Use kubernetes.io/hostname for workload anti-affi… …nity #589
Bug 2001268: console-operator should report Available=true when at least available replica exists #583
Full changelog

csi-driver-manila-operator

Bug 2002554: Do not degrade cluster on failure to reach Manila #125
Full changelog

docker-registry

Bug 2012163: Supporting mirror authentication during pull through #297
Full changelog

driver-toolkit

Bug 2031938: Add e2e test to 4.9 branch #72
Bug 2011460: Add imagestream for driver-toolkit #65
Full changelog

hyperkube, pod

Bug 2024995: Fix subpath source check #1067
Bug 2032325: UPSTREAM: <carry>: api request counts for current hour are incorrect #1092
Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
Bug 2022265: Rebase v1.21.6 #1060
Automated cherry pick of #105509: [test]: Fix PreferNominatedNode test #105665
Update to go1.16.9 #105672
Automated cherry pick of #104985: Aggregator uses the regular transport even if the request #105641
Automated cherry pick of #99748: check log directory for restartCount #105614
Automated cherry pick of #104593: fix: ignore the case when updating tags #104686
Automated cherry pick of #103371: tests: Wait for the network connectivity first #105441
Automated cherry pick of #105185: Ignore VMs in vmss delete backend pools #105402
Cherry pick of #105188 and #98350 to release 1.21 #105365
Automated cherry pick of #102665: Add explicit capability for online volume expansion #102740
Automated cherry pick of #104913: kube-controller-manager: properly check generic ephemeral #105037
Automated cherry pick of #102409: Bump golang.org/x/text to v0.3.6 #102601
Bump klog to v2.9.0 #105407
Automated cherry pick of #105048: Remove a duplicate StorageClass creation call #105354
Automated cherry pick of #105205: e2e scheduling priorities: do not reference control loop #105278
Automated cherry pick of #102292: Local PV e2e: fix leaked local volumes #103349
Automated cherry pick of #104467: fix 104329: check for headless before trying to release #104973
Automated cherry pick of #104572: fix detach disk issue on deleting node #104898
Automated cherry pick of #105388: Copy VolumeSnapshotContent annotations in snapshottable.go #105497
Revert 102925: Fix Node Resources plugins score when there are pods with no requests #105238
release 1.21: metrics grabbing #104328
Automated cherry pick of #101047: Only use dualstack if the node and config supports it #103783
Automated cherry pick of #104969: Propagate conversion errors #104989
Automated cherry pick of #104634: storege e2etest: Delete restored PVC/Pod in snapshottable #105153
v1.21: Fix test flake in old svc registry #105110
Automated cherry pick of #100125: ‘New’ Event namespace validate failed #105088
Automated cherry pick of #104833 (1.21): Refine locking in API Priority and Fairness config controller #105050
Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
Bug 2008403: Rebase v1.21.5 #981
Update to go1.16.8 #104906
Automated cherry pick of #104369: Fix storage class setup in regional_pd.go #104537
Backport 104410 to release-1.21 #104534
Automated cherry pick of #104314: legacy-cloud-providers: aws: Add support for consuming web #104870
Automated cherry pick of #104845: e2e iperf2 change threshold to 10MBps = 80 Mbps #104865
Automated cherry pick of #103532: Service: Fix semantics for Update wrt allocations #104673
Automated cherry pick of #103050: Fix NodeAuthenticator tests in dual stack #104840
Automated cherry pick of #100720: Fix buckets initialization #104514
Automated cherry pick of #104384: fix: skip case sensitivity when checking Azure NSG rules #104447
Automated cherry pick of #104279: Copy golang license to staging copies #104311
Automated cherry pick of #104703: Fix the key missing issue for structured log #104719
bump runc to 1.0.2 #104530
Automated cherry pick of #104604: Don’t prematurely close reflectors in case of slow #104616
Automated cherry pick of #103958: Set idle and readheader timeouts #103989
Automated cherry pick of #104009: delete stale UDP conntrack entries for loadbalancer IPs #104151
Automated cherry pick of #104253: Pass additional flags to subpath mount to avoid flakes in #104347
Bug 2011460: UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005
Bug 1995714: UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #895
Bug 1994457: Update to kubernetes 1.21.4 #888
Automated cherry pick of #102083: fix: delete non existing disk issue #102163
Automated cherry pick of #104182: Avoid spurious calls to update/delete validation #104208
Update to go1.16.7 #104201
Automated cherry pick of #102576: kubelet: do not call RemoveAll on volumes directory for #103826
Automated cherry pick of #103284: Fix the code is leaking the defaulting between unrelated pod #103676
Automated cherry pick of #103160: Remove extra zone test #103405
Automated cherry pick of #103019: Fix frameworkImpl.extenders being not set #103031
Automated cherry pick of #101611: let objects without metadata pass through the managedFields #101649
Automated cherry pick of #104135: Update configure-helper.sh #104179
Automated cherry pick of #103794: feat: Provide IPv6 support for internal load balancer #104028
Automated cherry pick of #104161 upstream release 1.21 #104190
Automated cherry pick of #103997: Fix: ignore not a VMSS error for VMAS nodes in #104029
Automated cherry pick of #103937: Fix disruptive subPath test failures #104044
Automated cherry pick of #102539: Fix closing of decorated watcher channel on timeout #102541
Automated cherry pick of #102928: Simplify use of the fake dynamic client #103614
Automated cherry pick of #103895: Update to using apiserver-network-proxy v1.22 #103931
Automated cherry pick of #100637: storage e2e: automate hostpath YAML updates, hostpath #102212: Update pd csi driver images to use v1 images (CSINode, #103920
Automated cherry pick of #103831: disable aufs module #103927
cherry-pick #100353: strip prefix ‘v’ in coredns version if exists #102905
Automated cherry pick of #103823: Make CSR cleaner tolerate objects with invalid #103948
Backport fix for flaky ESIPP test to 1.21 #103492
Automated cherry pick of #103126 upstream release 1.21: Updated to use konnectivity client v0.0.21, and implemented placehold… #103699
Cherry pick of #100110: Cherry pick #537 from cloud provider azure: Refresh VM cache when node is not found and #102935: fix: cleanup outdated routes #102983
Cherry pick of #103470: fix: return empty VMAS name if using standalone VM #103599
Automated cherry pick of #103733 upstream release 1.21 #103734
Automated cherry pick of #101118 upstream release 1.21 #103712
Automated cherry pick of #103235: Update debian-base image to buster-v1.8.0 #103488
Update to go1.16.6 #103670
Automated cherry pick of #103138: Loadbalancer IngressIP policy should be configured as non-DSR #103140
Automated cherry pick of #103133 on 1.21: switch scheduler to generate the merge patch on pod status instead of the full pod #103279
Automated cherry pick of #99680: fix error of setting negative value for containerLogMaxSize #102389
Manual cherry pick of #103318: Bump SMD to v4.1.2 to pick up #102749 fix #103319
Cherry pick of #102516: serviceOwnsFrontendIP shouldn’t report error when the public IP doesn’t match #102548
Automated cherry pick of #102892: Do not throw error when we can’t get canonical path #102969
Automated cherry pick of #102925: Fix Node Resources plugins score when there are pods with no #102994
Automated cherry pick of #102584: Fix race in attachdetach tests #103051
Automated cherry pick of #102845: Remove error wrap from logs #102852
Automated cherry pick of #101592: chunk target operatation for aws targetGroup #101812
Automated cherry pick of #102673: feat: remove ephemeral-storage etcd requirement #102705
Automated cherry pick of #102788: client-go: reduce log level of reflector again #102800
Update to go1.16.5 #102739
Automated cherry pick of #102683: endpointslicemirroring controller mirror address status #102702
Automated cherry pick of #100948: Avoid caching the VMSS instances whose network profile is nil #101825
Cherry pick of #101752: fix: not tagging static public IP #101819
Automated cherry pick of #102498: sched: fix a bug that a preemptor pod exists as a phantom #102667
Automated cherry pick of #102306: Return UnschedulableAndUnresolvable instead of Error when #102514
(scheduler e2e) Create balanced pods in parallel #102487
Automated cherry pick of #102005: Azure: avoid setting cached Sku when updating VMSS and VMSS #102119
Automated cherry pick of #101443: Add missing clientset to EBS storage e2e test #101956
Automated cherry pick of #101857: fixed wrong warning in kube-proxy regarding topology aware #101939
Automated cherry pick of #101615: fix removing pods from podTopologyHints mapping #101892
Cherry pick of #101595: Update cos-gpu-installer image #101890
Cherry pick of #101739: fix: avoid nil-pointer panic when checking the frontend IP configuration #101885
Automated cherry pick of #101652: Add jitter to lease controller #101863
Automated cherry pick of #100326: Fix watchForLockfileContention memory leak #101795
Automated cherry pick of #102176: Fix VolumeAttachment garbage collection for migrated PVs #102456
Revert “Cleanup portforward streams after their usage” [1.21] #102587
Automated cherry pick of #102502: use subpath for coredns only for default repository #102506
Automated cherry pick of #102213: Upgrade konnectivity-client for GRPC connection fixes #102273
Automated cherry pick of #102157: kubeadm: remove e2e test for ClusterStatus #102358
Automated cherry pick of #102377: Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml #102379
Automated cherry pick of #102302: Update debian-iptables to buster-v1.6.1 #102340
Automated cherry pick of #102027: Remove unnecessary quotes from get-kube scripts #102042
Automated cherry pick of #102105: Respect annotation size limit for SSA last-applied. #102184
Automated cherry pick of #102224: Fix expired unit test certs #102225
Automated cherry pick of #102147: vendor: bump runc to rc95 #102196
Automated cherry pick of #101358: Ref counting is only applicable to Remote endpoints #102001
Automated cherry pick of #101737: Use CSI driver to determine unique name for migrated in-tree #101805
Automated cherry pick of #101950: Make watch order conformance test reliable #101980
Bug 1993754: UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… #940
Bug 1998391: UPSTREAM: 104530: [1.21] bump runc to 1.0.2 #912
Full changelog

insights-operator

Bug 2033546: Gather all CostManagementMericsConfig definitions. (#525) (#569) #525
Update OWNERS (#543) #543
Bug 2027720: gather webhook configurations (#508) (#560) #508
Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
obfuscation ovn clusters bug (#523) #523
Bug TBD: Gather installed PSP names (#489) (#490) #489
Full changelog

ironic

Bug 2023765: Compare IPs using the short form of IPv6 address #233
Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
Bug 2003035: Sync sushy to include the latest bugfixes for 4.8 #214
Bug 1991979: [4.8] Sync image with ironic #206
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
Full changelog

ironic-inspector

Bug 2023765: For inspector, compare IPs using the short form of IPv6 address #71
Full changelog

ironic-machine-os-downloader

Bug 2005805: Clear proxy env variables if go would have #72
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2037348: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1360
Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
Bug 2008114: Upgrade Jenkins to 2.289.3 (and related fixes) #1324
Full changelog

k8s-prometheus-adapter

Bug 2002281: 4.8: pkg/resourceprovider: guard from negative metrics #55
Full changelog

kube-proxy, sdn

Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
Bug 2014166: Remove locking from EgressIPTracker.Ping #362
Bug 2002290: [4.8] proxy: don’t re-check every userspace proxy rule on every change #347
Bug 1987239: when assigning and releasing egressIP try more than once before failing #326
Bug 1999946: improve SDN’s OVS healthcheck and logging #341
Full changelog

kuryr-cni, kuryr-controller

Bug 2037745: Improve retrieval of Trunks info #621
Bug 2028307: [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN #607
Bug 2028274: Ensure DOWN subports are cleaned up #606
Bug 2022722: Make completed Pods Ports reusable #600
Bug 2018232: Update TOX_CONSTRAINTS_FILE for stable/xena #587
Bug 1995013: Remove ep_slices from klb on endpoint delete event #550
Full changelog

machine-api-operator

Bug 2027896: [release-4.8] Add support for Azure Marketplace Images #970
Bug 2026562: MaxUnhealthy should not be a string type #962
Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
Bug 1999585: [release-4.8] add alert for machine with long deletion phase #908
Bug 2000038: Respect MaxUnhealthy limit for external remediation #910
Bug 1993117: Make sure nodes don’t have attached volumes before vm deletion #903
Full changelog

machine-config-operator

Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
Bug 2026085: Send WARN message to stderr #2836
Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
Bug 2016275: [on-prem] Set coredns bufsize to 512 #2807
Bug 2011083: templates: Silence audit events from container infra by default #2793
Bug 1985736: [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer #2692
Bug 2000958: fixes 1 to 1 kubelet config mapping #2753
Bug 1999531: Set timeoutSeconds for keepalived liveness probe #2741
Bug 2004122: Set ovs syslog level to info #2762
Bug 1973873: match tlsSecurityProfile doc with kubelet.conf file #2628
Bug 2000500: bump SystemMemoryExceedsReservation alert threshold to 95% #2748
Bug 1976110: configure-ovs: fix nondeterministic master in slave profiles #2644
Bug 1985735: [ON-PREM] HAProxy - enable listening sockets retrieval from old processes #2691
Full changelog

mdns-publisher

Bug 1988145: Update zeroconf vendoring #35
Full changelog

multus-whereabouts-ipam-cni

Bug 2009497: Release on cancel, sync for 4.8 #70
Add E2E test cases and execute with GH workflow #148
Add total Add/Del timeout #142
Release lease lock when LE ends #145
propagate context timeout error #143
Upload whereabouts binary as release asset #149
Add support for CNI version #135
readme: fix yaml paths #134
Bug 1990113: Syncs with upstream for leader election [backport 4.8] #63
Bump k8s api version #126
fix: Skip default network in ip reconciler #128
IP ranges cleanup #118
Cherry pick overlapping ranges to master #120
build: vendor leader election dependencies #124
Add leader election #113
build: update openshift build image to golang 1.15 #121
Updates image push on release to refer to correct dockerfile location #122
ippools schema: add podref #116
Remove bigint code to fix starts-with-zero-ipv6-problem #89
Fix github actions #93
Change CI pipeline from travis CI to github actions #92
Adds a login so we can pull images from the registry #91
README incorrectly stated Whereabouts requires three parameters #90
updated readme with instructions on how to install using helm3 #82
The first example can drop the optional parameters #81
Logic for IPv6 assignment should not omit the broadcast addresses #77
Reduces required parameters by introducing flatfile configuration by default #69
Removes error when deallocating IP errors out, instead just warns. #74
Includes fix for excluding IPv6 ranges as well as unit test #73
Adds the missing error/log/warn methods to the install-cni.sh #67
whereabouts.kubeconfig wrong in IPv6 only env #47
Add a more meaningful error for invalid CIDR #66
Fixing wrong DNS-1123 name for some IPv6 addresses #61
Specifiy image repo URL explicitly #56
Change error message #54
Full changelog

openshift-apiserver

Bug 2020644: Image policy should mutate DeploymentConfigs #259
Full changelog

openshift-controller-manager

Bug 2006793: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #206
Full changelog

openstack-machine-controllers

Bug 2000542: Adds Proxy to provider client http transport #199
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2030489: Remove oudated subscription update logic to improve resolution delay #222
Bug 1996162: Check for pruned bundles on add in replaces mode #165
Bug 1986476: resolver: remove legacy support for fallback parsing of CSVs #140
Full changelog

operator-marketplace

Bug 1998938: Use client-go’s leader election implementation #421
Full changelog

ovirt-csi-driver

Bug 2013945: pvc stuck on pending status when using preallocated storage domain #89
Full changelog

ovn-kubernetes

Bug 2039279: filter out KubeAPIAuth when logging CNI requests #897
Bug 2021221: Add ovn-controller logical flow cache options #890
Bug 2030465: Make config parsing more resilient for unknown fields #868
Bug 2027873: [4.8z] Fixes race between node handler and pod sync #858
Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
Bug 2011391: [4.8] bump OVN to 20.12.0-183.el8fdp #783
Bug 1986708: Add routes for pod: fail only after checking all the gw addresses / ips #774
Bug 2005480: [4.8z] Remove waiting for namespace and namespace lock contention #760
[release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses #661
Bug 2004336: Ensure host interfaces are deleted by CNI #745
Bug 2005464: [4.8z] Fixes skipping pods accidentally in retry #758
Bug 2005357: [4.8z] Fixes misuse of pod annotations during update event #753
Bug 1996739: Fix ensurePod to call addPodExternalGW only for annotation updates #752
Bug 2004488: panic after EgressFirewall deletion and DNS record expiration #749
Bug 2004269: Sync ECMP routes on startup and fixes stale ECMP routes #743
Bug 1999638: Fix duplicate incrementing of subnet allocation metric #700
Bug 1996729: NetworkPolicy: bulk-add pods to new policies (or on restart) #678
Bug 2000214: Fix GetPortAddresses for HBO #711
Bug 2001641: egressfirewall not set after upgrade #722
Bug 1996201: Fixes cases of timed out while waiting for OVS port binding #686
Bug 2001542: fix reserve joinSwitch LRP IPs #720
Bug 2001363: [4.8z] Ensure client handling of canceled/dropped OVSDB monitor #718
Bug 1999895: Revert “[release-4.8] fix reserve joinSwitch LRP IPs” #706
Full changelog

service-ca-operator

Updating ose-service-ca-operator images to be consistent with ART #177
Update go version to 1.16 #179
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #374
Full changelog

tests

Bug 2038876: [release-4.8] test: skip tests that won’t work behind a proxy automatically #26733
Bug 1984275: Add renamed Prometheus test into skipped disconnected list #26344
Bug 2033426: test/e2e/upgrade/adminack: Poll gates for duration of update #26704
Bug 2033379: [release-4.8] remove perma-failing prometheus upgrade invariant #26698
Bug 2027262: Create new-project without updating kubeconfig #26645
Bug 2028815: Skipping Django Test until bug is fixed #26665
Bug 2028021: Bump update time limit 4.8 #26657
Bug 1929650: Increase OVN upgrade timeout by 15m #26654
Bug 2025724: Add admin ack Upgradeable condition gate test #26635
Bug 2020644: Add more tests for image policy #26584
Bug 2019519: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26562
fix: add proxy support to OAuthServer tests #26539
Bug 2008114: Add role label to jenkins imagestream #26503
Bug 2002552: Retry kubeconfig checks, when kube-apiserver is temporarily unavailable #26458
Bug 1989402: Add tests required internet into Skipped:Disconnected list #26369
Bug 1986259: Enable TestEndpointAdmission test only for OpenShift SDN #26351
Full changelog

vsphere-csi-driver-operator

Bug 2021620: Close connection to vCenter API #51
Full changelog

vsphere-problem-detector

Bug 2036967: Deferred logout after checks are run #68
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github