4.8.36

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.36-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.7.28, 4.7.29, 4.7.31, 4.7.32, 4.7.34, 4.7.35, 4.7.37, 4.7.38, 4.7.40, 4.7.41, 4.7.42, 4.8.11, 4.8.12, 4.8.13, 4.8.15, 4.8.16, 4.8.17, 4.8.19, 4.8.20, 4.8.21, 4.8.23, 4.8.24, 4.8.25, 4.8.27, 4.8.28, 4.8.29, 4.8.30, 4.8.7, 4.8.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.8.14

Created: 2022-04-01 00:35:58 +0000 UTC

Image Digest: sha256:faf1f5ae9636ef79c6027cd1ca68b0a93607f8ccc12e8e537f8f8bc21d7dfb15

Release 4.8.36 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-03-31-201158

Components

Kubernetes upgraded from 1.21.4 to 1.21.8
Red Hat Enterprise Linux CoreOS upgraded from 48.84.202110042259-0 to 48.84.202203290727-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver git 8c036e44 sha256:3bfc007c04596d2d2879e1245d17169f54ca0c7fc8e3d2857e4e4bcc0dbaca25
aws-ebs-csi-driver-operator git d1fe616c sha256:0661362e54c530e4e8e16f99cbdda7421af4bf370481552fe9905a4585838051
azure-disk-csi-driver git 2d461b39 sha256:4446df5bed5fc234d6f4d6b702516ca0f77f82153d5b6c868f6982a2dae44eae
azure-disk-csi-driver-operator git d3a3c298 sha256:68b4e20833382a33a76b07105214d684f07d1d28f4af34760ccba5dfc06213e3
baremetal-machine-controllers git a60d493e sha256:cb302b180c443379cb9896de25c920b06b8eabb35293b97873252816a0c61100
baremetal-operator git 02a2d3cf sha256:b17565bb64dfec5f44b7274ddd1fbf21204bce02c973898e9f0efb518941a9f3
cluster-autoscaler git 7bbde4cc sha256:55f31ae1f4539d51b091356afcf6c23d9a02b1327171336094d7a37c3bbe1dcf
cluster-bootstrap git 1af395b7 sha256:2387c2ffd37b5aeef41656fe04726c2f4fbb34af1ac83d9f3381ea8922cdffc1
cluster-config-operator git c1022410 sha256:d4f9bc5ebe5155db96c66f376ea5a78cb4ef62e07cd114c8c1e653ac55c9677e
cluster-csi-snapshot-controller-operator git 07b3f810 sha256:a7a7dd4349fee08be9d1a243dbbc90f9be64063ca9c3187bb62b9f9160a2378c
cluster-dns-operator git fdb2ebec sha256:6abcea6818600099b11f4772f9de3462d27a665f1c35927ed5ce2a5b6d4e4a84
cluster-etcd-operator git 35672ede sha256:23d0bf90f9ef97ae775e6cc4f1d63b1aba5d8fbf257776a23845aabffcf5c572
cluster-kube-controller-manager-operator git 7fa48ebf sha256:4a5aa39cdf33a174f895a63746631ef5d961f26a975c116dcb651f9f70fe1348
cluster-openshift-controller-manager-operator git 286c1577 sha256:6838240e993a1357e305b99b0be981d79795fd6251293cbe8380cab214a00a29
cluster-policy-controller git ec46ea5c sha256:314a6ccdd3a5beec93c1cdcd4b37e1be5e6d074754a801482225ba24825bb769
cluster-samples-operator git 31fb491f sha256:334eb85a7361c4ce18bee3c46db1f09743906ab281c50134e52f55c3c4256069
cluster-update-keys git 87835b73 sha256:c5251a474064e42c148fea915b732c685bae0fbe9a0a529efb5e4009ce738567
configmap-reloader git 0d221296 sha256:5909d2854cb2af95bd538d598f23618800db0535948fca95f5651599f5241b7a
container-networking-plugins git 71a8b346 sha256:7dc10caf8271cd88358952cb387b5a1f1724ccd914d42c95b80708dd0af42bfa
coredns git 642b46ef sha256:c9d9cf0ee2e1fa1312ebd0915e22bba0cc8e8d05852eba431d44ce1652355a34
csi-driver-manila git 3579eadc sha256:7a93b3c57eb8255181b0f49501233455db3c6285a60f34deb9ef706094b1e9a2
csi-driver-manila-operator git f6ffb0d7 sha256:017032a37d20956d913a006dd0db2c3788702f25e5f8d64b0bdf6000d9bbd94c
csi-driver-nfs git 583088ef sha256:bbb234b17dc2a7c0feeb680512a33fd4f53d6c51619cefe5c11dfee411419dcd
csi-external-attacher git 596da63e sha256:6e430f5613cc5fe65f20ab537ca2fe5ab10c9b6f160e75e107e8d00fa0b55e7c
csi-external-provisioner git 3ea7e68a sha256:a82bce7ce4413e89063be78dda10245584925e407bb9e3bdefcf1e89becd2863
csi-external-resizer git b5dd2b39 sha256:11ff9942ce0a1c8278a5d23731222887b2aad0b8ef64033c0dcf086c91c7799c
csi-external-snapshotter git 1e2cca95 sha256:3ed8374f84943ecf5167fe15af6548ce1914948b4cb81353c9d31483fbe068dd
csi-livenessprobe git a29b1153 sha256:5be6b2b846db2264a9ed50c48371c2884c0bba5763331eac4706cc6d5425b3c4
csi-node-driver-registrar git 0519730f sha256:b75e074468b0790c187876b1c1462cc147f276c8895cab73ce37846944ce3c70
csi-snapshot-controller git 1e2cca95 sha256:5787885c2fb7054870e006be96c819c7aa02d8b3370b35f56196b9532b93801d
csi-snapshot-validation-webhook git 1e2cca95 sha256:c66823a6d3afdb2861e42840b8f09940125d0e2721bdb617d23a4bac822905f0
egress-router-cni git 016bea1a sha256:e89230c25077c3b3976d303b411022dbbb311f92571d23d7bc4e19214b4dd846
etcd git aefa6bf5 sha256:21c9dcfdefa782ff595c78a5ba70b137d776dc5ddc091950d76a0f97e4553544
gcp-machine-controllers git 34db56eb sha256:683d167e954cc943f70c3fe2d9900fef90f902c6491246667e6327a5cf31ef14
gcp-pd-csi-driver-operator git 35ebe860 sha256:502375fc58a5421b1592b35aa680078addec2ff653e5295df0ca61670a998612
grafana git b987e4b1 sha256:20936e4552c886a92eb3c3270bc7364c3aefd31fe6f876f8b520a4aeb3f3fac3
haproxy-router git 9c9f9f42 sha256:feea0f9b7bd726440e00ddd38dc1b9e7e180c517063b5c7d914d6507df29bda6
ironic-ipa-downloader git ba878326 sha256:bc0f540f9ba1bb9a5d585334494e8e4ffd9dbcab5551c1e03abae2530e98f80d
ironic-static-ip-manager git d2e40e34 sha256:3ed3f3f7ac361b35558e1f9d25eda0b56fdbd6dba918abbd342161b5f6d8e4ff
k8s-prometheus-adapter git bfffea3b sha256:7ae1d470f6b70f0565a94986bd536a958d444b1f0d4d9d527294a69d5708c4b6
keepalived-ipfailover git ad38e116 sha256:103c7defa5708c82856de53895ccb94555ec8201fe8bdeafe51ac1a9ee57bbfc
kube-rbac-proxy git 813c3da7 sha256:7a8b4b60345cff84089835a561b4b65c5eccb4585283314c90ce2108c063c87d
kube-state-metrics git 94716629 sha256:1a0a272ebd65331c30b8d21dab266d197254ffec0ec416d5a765b5f35810d9c0
kube-storage-version-migrator git 901a6d22 sha256:476d1866388139920700a6bf0df309e21d1f099d8b295a3e5a1911952050d896
libvirt-machine-controllers git 9542e5ac sha256:1bfcc23dac781eb1bbd75f1c4bac243880c27ba7b7fc2ace6a642ed92b3b05c2
machine-os-content sha256:a768dca45d8eabd3495d8454c231a4e167cb1bf1372b7c387718efef781f814e
mdns-publisher git 1c707a28 sha256:c0222c0ab580e33d418071d9b76e0dc8a3837f59df7debf2af4cf8880b93ba0c
multus-admission-controller git 64645feb sha256:eb4aa54e465f9d66ccb4abd64e4c35aa42382f08da63433ed8a3df4d101f7f54
multus-cni git 0c972341 sha256:01d76bad013578e40d5a73577bd074f0aaa5938ba44474cac4b856f34f839781
multus-networkpolicy git 187ad91f sha256:9749ec8ff989c370d229778278a5a54c5e58a982ae3830ee4380c326577d7370
multus-route-override-cni git 1662c3ec sha256:898de0bfbc58b7b3de5c0b2b45a3110cc18eb71b5434b5084c065363b99c8f10
network-metrics-daemon git f02c63ae sha256:bf289e98b50e82df29fa93115faa2588e688f5361b8cc6dfacc5671e640bb239
network-tools git 5ac3739e sha256:6e62a61f267a1fb33481b253622a7a6bf56c17d9cd1497b9fb29181afd356d6d
oauth-proxy git 3fc0d89b sha256:0ca2ff4ca48ca4483a2bfacb1dacf75672c1c6b5fd292cde057dcad3317821bd
oauth-server git 374e2ee3 sha256:064ac56806379327c3929bde26ec6ecbd1336564cf5c7d88292edeadd176b5a0
openshift-state-metrics git 10142914 sha256:4d3743708967c3eb94e3f26028796d8cc15556ac99d5593b3a5e6c3f02080971
openstack-cinder-csi-driver git 3579eadc sha256:5b182b1bbb5b45d4390435fa105aab803f373e41f042e5eb36b3cbb2e613d3a0
operator-marketplace git 3f3d7d1f sha256:ee0e8df575f7cd72d139c76b976e99065e178c91b296431dab596fc2dc0e743f
prom-label-proxy git 2faeb405 sha256:3ffcd9c9d249f7c121ce6b44057f381b37180b19c9ab038e041a1b4746a301e9
prometheus git f3beb880 sha256:60983d237a104a98c8c093df519f90df8e4792ecc78c6792e5a8564834ebae05
prometheus-alertmanager git 7b5ac874 sha256:6c676daec2620a945486d61d26471be6b322fc77a8e0470ba0eb5ccba569d79a
prometheus-config-reloader git 8f4efab9 sha256:6a26777b10a6f162145a314257c7cba43f7e332e43d85f867832d8d8bd8ad460
prometheus-node-exporter git 9ad2cf90 sha256:03203c6b8a272b5943233e760d99b4286de8875ea29492d1f482f69bed936056
prometheus-operator git 8f4efab9 sha256:5a1f93cd34bba854e3ccfabfe14f6e102a2f3b108fd077d72c2741da2a10098e
service-ca-operator git b66c4506 sha256:462623977d4ab761468eb8d84f5e8bab32771845832a7fd6628f51255bcc8be3
thanos git f7c1227d sha256:924e0b70d287c14a1df9e6729411faaaa9259790bf4b07893f3c400cd669ac9f
vsphere-csi-driver git dd5345eb sha256:5b936518462fedc3e6a7e3f257c1ceb86ec7774ccf51646e4982ae8607b9ad4e
vsphere-csi-driver-syncer git dd5345eb sha256:01366ea7fd74c8bb03f401937eb049a377db7d488598a542332722704c612ad4

aws-machine-controllers

Bug 2066675: Ensure IOPS setting is honoured on all supported block device types #437
Bug 2031905: Prevent Machine from being considered provisioned until it exists in AWS #432
Bug 2016926: do not requeue if the machine has been updated #426
Full changelog

aws-pod-identity-webhook

Bug 2029253: update go.mod for go1.16 #148
Full changelog

azure-machine-controllers

Bug 2051576: Requeue create on invalid credentials errors #253
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2022171: Relax vcenter hostname check #5371
Updating ose-installer-artifacts builder & base images to be consistent with ART #4782
Bug 2023363: Add ingress rules to master SG for compact clusters #5386
Bug 2017986: Set AWS Bootstrap Type == Master #5338
Bug 2017258: bump oVirt terraform provider version which fix “Disk is locked” bug #5329
Bug 2002349: Fix invalid UPI AWS instance type #5199
Full changelog

baremetal-runtimecfg

Bug 2059584: Ignore VIPs in node-ip show #172
Bug 2053720: Avoid dynamically allocated port range for haproxy #171
Bug 2050288: Add delay after sending bootstrap stop and start messages #170
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2066760: Add TMOUT env to debug node pod #1095
Bug 2039762: Remove git:// from new-app tests #1023
Bug 2053223: Fix mirroring images that have dots in their namespace #1069
Bug 2038931: properly handle –dry-run=server #1017
Full changelog

cloud-credential-operator

Bug 2058270: Remove Azure mint mode support as Active Directory Graph API will be sunset #454
Bug 2027928: pod-identity-webhook starts without tls #429
Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
Bug 2026098: Check for aws status in infra platform status field before client setup #425
Full changelog

cluster-authentication-operator

Bug 2062591: e2e: Pin Keycloack to the legacy variant #557
Bug 1997906: csr request: use generate names to prevent getting stuck waiting for a cert #494
Full changelog

cluster-autoscaler-operator

Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART #193
Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
Full changelog

cluster-baremetal-operator

Bug 2055279: Calculating network stack only on supported Platforms #248
Full changelog

cluster-image-registry-operator

Bug 2067107: Retry on pruner failures #761
Bug 2015098: Avoid disruptions #725
Full changelog

cluster-ingress-operator

Bug 2066302: Disable keepalive for canary probe #726
Bug 2017708: Change default balancing algorithm to “leastconn” #670
Full changelog

cluster-kube-apiserver-operator

Bug 2026089: library-go bump #1320
Bug 2016213: Exempt metrics scrapes from APF. #1247
Bug 2012010: alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1241
Full changelog

cluster-kube-scheduler-operator

Bug 2026110: Disable balancedAllocation and add weight for HighNodeUtilization profile #380
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 4 #79
Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
Full changelog

cluster-machine-approver

Bug 2031047: Ensure pending CSR count is valid post approval #146
Bug 2032092: Replace certificates with generated certificates #148
Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
Full changelog

cluster-monitoring-operator

Bug 2039538: Add custom profile metric for Node Tuning Operator to telemetry #1565
Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
Bug 2012039: Allow namespace label in metric allow list #1436
Bug 2005205: improve update and status reporting 4.8 #1428
Full changelog

cluster-network-operator

Bug 2068895: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1351
[release 4.8] Updates owners #1334
Bug 2054642: sbdb and nbdb containers leave pid around if they restarted or crashed #1310
Bug 2023426: Add ip6tables NOTRACK rules for udp/6081 #1228
Bug 2021221: ovnkube: set ovn-controller lflow cache limit to 1GB #1278
Bug 2034352: Whereabouts IP Reconciliaton [backport 4.8] #1265
Bug 2022747: Allow to use proxy to connect to OSP cloud #1225
Bug 2037500: Bump openshift/build-machinery-go #1271
Bug 2029590: Set upgrade strategy on kube-proxy #1244 #1244
Bug 2018513: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1211
Full changelog

cluster-node-tuning-operator

Bug 2018053: tuned: add timeout and restarts #286
Bug 2013678: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #280
Full changelog

cluster-openshift-apiserver-operator

Bug 2052097: global pull secret not working in OCP4.7.4+ for additio… #493
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
Full changelog

cluster-storage-operator

Bug 2034270: Add trusted CA bundle to vsphere operators #249
Full changelog

cluster-version-operator

Bug 2047434: Changing the ClusterNotUpgradeable alert to info #731
Bug 2038936: *: Use –v=2 logging to drop client-side throttling noise #724
Bug 1982683: [release-4.8] Respect noProxy #691
Bug 2025955: Removing the extra indentation #696
Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
Bug 2011954: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #672
Full changelog

console

Bug 2060450: Fix that the preferred namespace was not selected when it contains just numbers #11134
Bug 2055132: Fix TypeError when application has HelmRelease #11069
Bug 2060616: Add error boundary in edit-flows #11137
Bug 2061266: Update e2e test to use 3scale operator to increase test stability #11141
Bug 2046215: Filter superseded helm secrets and fix firehose to support partial metadata #10936
Bug 2045592: Check if name label exists before comparing #10929
Bug 2048900: Fix knative function label cherry pick #10987
Bug 2045051: Add subject name selector field to SinkBinding form #10925
Bug 2046051: Add support for fetching partial metadata and fix helm list page crash #10932
Bug 2004086: Add name field in edit deployment form #10873
Bug 2046043: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10931
Bug 2008141: Allow web terminal to be installed in any namespace #10134
Bug 2019301: Check for resource in ServiceBinding spec’s service reference #10376
Bug 2018064: fix dev-catalog stuck in loading state #10346
Bug 2044571: Update CRW operator name to fix failing e2e tests #10918
Bug 2036045: fix resource limit form validation #10788
Bug 2034640: cant delete VM with un-owned pvc attached #10718
Bug 2030443: Fix ClusterOperators link #10638
Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
Bug 2017469: key not a valid prop name causing display issue in env editor #10419
Bug 2009224: Regular user cannot restore VM snapshot #10436
Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
Bug 2017326: Update PatternFly/react-console #10384
Bug 1984102: Switch Cypress OLM tests to use supported Red Hat operators #9560
Bug 2005871: Cannot create Network Attachment Definition through UI #10314
Bug 1997901: Cannot delete user created vm template #10367
Bug 2001212: Notifications is not translated on the top right bar #10040
Bug 2002649: Fix SerialConsole display bug #10034
Bug 1994983: use strict promoted template list #9824
Bug 1977659: Adjusting to new reference models changes - cherry-picked rls 4.8 #9379
Bug 2013091: adds check for status in ksvc in util logic #10211
Bug 1998692: Normal user cannot create VM because it cannot access v2v-vmware #10171
(4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com #9470
Bug 2010076: Update prow setup v4.8 #10168
Full changelog

console-operator

Bug 2008141: Change web terminal subscription permissions from get to list #595
Bug 2041359: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627
Bug 2018391: Remove SimpleHTTP ‘server’ response header value #606
Full changelog

docker-builder

Bug 2053122: [release-4.8] getAssembleUser(): strip the group part out before checking the UID #289
Update OWNERS file #290
Full changelog

docker-registry

Bug 2042678: Fix auth for docker.io images #306
Bug 2053223: Fix pull-through for images that have dots in their namespace #310
Bug 2012163: Supporting mirror authentication during pull through #297
Full changelog

driver-toolkit

Bug 2031938: Add e2e test to 4.9 branch #72
Bug 2011460: Add imagestream for driver-toolkit #65
Full changelog

gcp-pd-csi-driver

Bug 2052955: Disable uuid checks on XFS #23
Full changelog

hyperkube, pod

Bug 2043808: IPs with leading zeros are still valid in the apiserver #1173
Bug 2060494: Backports inotify leak fix into kubelet #1203
Bug 2024642: Rebase v1.21.8 #1102
Bug 2050131: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1168
Bug 2039377: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1108
Bug 2029466: UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails #1146
Bug 2024995: Fix subpath source check #1067
Bug 2032325: UPSTREAM: <carry>: api request counts for current hour are incorrect #1092
Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
Bug 2022265: Rebase v1.21.6 #1060
Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
Bug 2008403: Rebase v1.21.5 #981
Bug 2011460: UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005
Full changelog

insights-operator

Bug 2033546: Gather all CostManagementMericsConfig definitions. (#525) (#569) #525
Update OWNERS (#543) #543
Bug 2027720: gather webhook configurations (#508) (#560) #508
Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
obfuscation ovn clusters bug (#523) #523
Full changelog

ironic

Bug 2023765: Compare IPs using the short form of IPv6 address #233
Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
Full changelog

ironic-inspector

Bug 2023765: For inspector, compare IPs using the short form of IPv6 address #71
Full changelog

ironic-machine-os-downloader

Bug 2005805: Clear proxy env variables if go would have #72
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2058750: [release-4.8] 2022-02-15 Security Advisory #1408
Bug 2055911: bump openshift-sync to 1.0.53 #1392
Bug 2044940: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1370
Bug 2038960: bump sync plugin to 1.0.52 #1362
Bug 2037348: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1360
Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
Bug 2008114: Upgrade Jenkins to 2.289.3 (and related fixes) #1324
Full changelog

kube-proxy, sdn

Remove some binaries that accidentally got committed #398
Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
Bug 2014166: Remove locking from EgressIPTracker.Ping #362
Full changelog

kuryr-cni, kuryr-controller

Bug 2037745: Improve retrieval of Trunks info #621
Bug 2028307: [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN #607
Bug 2028274: Ensure DOWN subports are cleaned up #606
Bug 2022722: Make completed Pods Ports reusable #600
Bug 2018232: Update TOX_CONSTRAINTS_FILE for stable/xena #587
Bug 1995013: Remove ep_slices from klb on endpoint delete event #550
Full changelog

machine-api-operator

Bug 2048496: Fix user-agent in vCenter sessions list #984
Bug 2027896: [release-4.8] Add support for Azure Marketplace Images #970
Bug 2026562: MaxUnhealthy should not be a string type #962
Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
Full changelog

machine-config-operator

Bug 2062655: Improvements for configure-ovs script #3004
Bug 2025396: annotate rendered config with OCP version #2972
Bug 2059330: ovs-configuration: use lower than NM default ethernet route metric #2974
Bug 2058789: Prepend to search domains instead of replacing #2970
Bug 2028854: Backport of SystemMemoryExceedsReservation alert rule #2956
Bug 2032996: fixes 1 to 1 containerruntime config mapping #2877
Bug 2053720: Avoid dynamically allocated port range for haproxy #2951
Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
Bug 2026085: Send WARN message to stderr #2836
Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
Bug 2016275: [on-prem] Set coredns bufsize to 512 #2807
Bug 2011083: templates: Silence audit events from container infra by default #2793
Full changelog

multus-whereabouts-ipam-cni

Bug 2028966: Whereabouts should reconcile IP addresses [backport 4.8] #78
Bug 2009497: Release on cancel, sync for 4.8 #70
Full changelog

must-gather

Bug 2057345: Fix ovn-nbctl commands for ipv6 #287
Full changelog

oauth-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #74
Full changelog

openshift-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #280
Bug 2053223: Fix importing images that have dots in their namespace #283
Bug 2042732: Make OriginImageMutators aware of origin objects #271
Bug 2020644: Image policy should mutate DeploymentConfigs #259
Full changelog

openshift-controller-manager

Bug 2006793: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #206
Full changelog

openstack-cinder-csi-driver-operator

Bug 2049088: Explicitly set default value for ReclaimPolicy #71
Full changelog

openstack-machine-controllers

Bug 2064634: Ensure subnets belong to the queried network #223
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2030489: Remove oudated subscription update logic to improve resolution delay #222
Bug 1996162: Check for pruned bundles on add in replaces mode #165
Full changelog

ovirt-csi-driver

Bug 2013945: pvc stuck on pending status when using preallocated storage domain #89
Full changelog

ovirt-csi-driver-operator

Bug 2062745: Increase timeouts for CSI driver #90
Full changelog

ovirt-machine-controllers

Bug 2046356: detach non-bootable disks before removing the VM #127
Full changelog

ovn-kubernetes

Bug 2063836: backport 2052975 to 4.8 #997
Bug 2068509: EgressGW: only return unique elements from getRouteInfosForGateway() #1011
Bug 2065311: [release-4.8] Network Policy fixes #999
Bug 2057557: Create iptables NAT rules also for loadbalancer services #967
Bug 2058679: Bumps ovn2.13-20.12.0-195.el8fdp #979
[release 4.8] Update project owners #992
Bug 2057931: Fix podHandlerCache key #969
Bug 2057152: Fix egress IP allocator sync #965
Bug 2053611: Lock the reassignment procedure during node deletion to avoid races #970
Bug 2054225: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #957
Bug 2056975: Don’t return err when annotation cannot be unmarshalled #963
Bug 2052966: [release-4.8] bump ovn to 20.12.0-193 #949
Bug 2043757: Fix node connectivity to service backed by egress IP pods #922
Bug 2042516: Fixes for shared to local gateway migration #916
Bug 2037884: [4.8-backport] Fix nepol statefulset 4.8 #894
Bug 2041767: Fix pod handlers and pod IP parsing for egress IP #912
Bug 2039279: filter out KubeAPIAuth when logging CNI requests #897
Bug 2021221: Add ovn-controller logical flow cache options #890
Bug 2030465: Make config parsing more resilient for unknown fields #868
Bug 2027873: [4.8z] Fixes race between node handler and pod sync #858
Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
Bug 2011391: [4.8] bump OVN to 20.12.0-183.el8fdp #783
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #374
Full changelog

tests

Bug 1999288: [release-4.8]: bump openshift/kubernetes to the latest #26886
Bug 2038876: [release-4.8] test: skip tests that won’t work behind a proxy automatically #26733
Bug 1984275: Add renamed Prometheus test into skipped disconnected list #26344
Bug 2033426: test/e2e/upgrade/adminack: Poll gates for duration of update #26704
Bug 2033379: [release-4.8] remove perma-failing prometheus upgrade invariant #26698
Bug 2027262: Create new-project without updating kubeconfig #26645
Bug 2028815: Skipping Django Test until bug is fixed #26665
Bug 2028021: Bump update time limit 4.8 #26657
Bug 1929650: Increase OVN upgrade timeout by 15m #26654
Bug 2025724: Add admin ack Upgradeable condition gate test #26635
Bug 2020644: Add more tests for image policy #26584
Bug 2019519: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26562
fix: add proxy support to OAuthServer tests #26539
Bug 2008114: Add role label to jenkins imagestream #26503
Full changelog

vsphere-csi-driver-operator

Bug 2021620: Close connection to vCenter API #51
Full changelog

vsphere-problem-detector

Bug 2036967: Deferred logout after checks are run #68
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github