4.8.43

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.43-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.7.26, 4.7.29, 4.7.30, 4.7.31, 4.7.33, 4.7.34, 4.7.35, 4.7.37, 4.7.38, 4.7.39, 4.7.41, 4.7.42, 4.7.43, 4.7.45, 4.7.46, 4.7.47, 4.7.48, 4.7.53, 4.8.10, 4.8.11, 4.8.12, 4.8.14, 4.8.15, 4.8.16, 4.8.17, 4.8.18, 4.8.20, 4.8.21, 4.8.22, 4.8.23, 4.8.24, 4.8.26, 4.8.27, 4.8.28, 4.8.29, 4.8.30, 4.8.32, 4.8.33, 4.8.34, 4.8.35, 4.8.36, 4.8.37, 4.8.7, 4.8.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.8.19

Created: 2022-06-08 11:20:59 +0000 UTC

Image Digest: sha256:3cd3547339d956cecd27962e98107691bebd2c001f2613632324589cc5eb2c53

Release 4.8.43 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-06-07-225227

Components

Kubernetes upgraded from 1.21.4 to 1.21.11
Red Hat Enterprise Linux CoreOS upgraded from 48.84.202110270303-0 to 48.84.202206071759-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver git 8c036e44 sha256:d7933dbe41dfd3ce6b6bc48c67cfe85fc102ec37bd07935bf9d5306ccbd4dbe8
aws-ebs-csi-driver-operator git d1fe616c sha256:017f4a5535bb6df3cb78336cb76ad66c4c2b6707e0958ef43a11f9c995513d45
azure-disk-csi-driver git 2d461b39 sha256:921c0a44edafc11fe0eecf24e042193f130f20c6e1de6bf21c032a7a9ece7809
azure-disk-csi-driver-operator git d3a3c298 sha256:908feab4288bb5a4fe6aee683edff3f3801e64b1cad809cc88fc96b511367918
baremetal-operator git 02a2d3cf sha256:50979817b9bfaf7c3bcefcb9b42c066a666ee43c18b3e9f6c0817f55241a7ee0
cluster-autoscaler git 7bbde4cc sha256:17265d6220f8184f77e57c3a9c1b17887217427ac640fbb4955ccb677e09169a
cluster-bootstrap git 1af395b7 sha256:1918e16f58609820e5f46e300872b6b29673e8fca3e9008f478e238c80bb3911
cluster-config-operator git c1022410 sha256:6b60b5d32be645b876c67387770814c5eb6561014af51f96f9bea9e0b60fec8c
cluster-csi-snapshot-controller-operator git 07b3f810 sha256:6de199ee690e0ce89dd88542d5c48d4b0feaa9f88fa2b5f5bdda383026f1bfee
cluster-dns-operator git fdb2ebec sha256:9ddd470ecb79e88c6a232cdf791f149d2466215f8cbd271baa6c78eeb3f5a8b3
cluster-etcd-operator git 35672ede sha256:36ca1dc2f0b04460df2cfa2f136ec167f836dd8e592a77fe6a5dec957465135a
cluster-kube-controller-manager-operator git 7fa48ebf sha256:9740a689bb877210362a31e21182c144cac89d8f3d7ca4658db32cdbaaa4d38b
cluster-openshift-controller-manager-operator git 286c1577 sha256:de24906634b234f09292f023470cfca9d8fdaa7c79d90aa820323874c88aefe0
cluster-policy-controller git ec46ea5c sha256:72c4cef33ff01b4eb42899e5cb69eeab9159fbcdc9a4b61d38e41958a56e2b9e
cluster-samples-operator git 31fb491f sha256:922d06589324d852b5241e55c66bbce0d002659d9f2ec33869135b2a2c1614e2
cluster-update-keys git 87835b73 sha256:9d5fd1dc2cbbd95a874331856b1f88d7e273c7bbe7a522259f60b9c067b38b5b
configmap-reloader git 0d221296 sha256:8e1f5e118daf6f8b7a28bb2c8517b8fb0ffcc9bf964e5ea5df535baa417b2287
container-networking-plugins git 71a8b346 sha256:ff4fe9f05eb725178d4a360f26f9ee24fcd4adafa2110e9ff120d24268d8ecdb
coredns git 642b46ef sha256:03df8adbbec3bc5c5087e41c306efd588622f1b581c0b412deb96dd230c08abb
csi-driver-manila git 3579eadc sha256:dd915b445d08e93333e73186d176d205944863a294e9a072887f742e5d2c1e8f
csi-driver-manila-operator git f6ffb0d7 sha256:9dfc7cc6c1a323e3f6be2dc41b2c6cf779cf7ab106ea51d6ac296b12b964990c
csi-driver-nfs git 583088ef sha256:3184c6fb1a6cc89347d90c32632ce79b06e420678be93906f99e1f000dcd150c
csi-external-attacher git 596da63e sha256:fe361969b42b6e24717d1f9100ff06d2e9cedd883678648865910421d9d15f06
csi-external-provisioner git 3ea7e68a sha256:d581610eeee6119b5fc66584c9d49dda08c381173359a6801ab98c26e0bff78c
csi-external-resizer git b5dd2b39 sha256:bc24198a9e8b2bf10b62a6bbc2e0834a875830c15e919a9799cec5caf953c5cd
csi-external-snapshotter git 1e2cca95 sha256:8f73d2257249e38659d05b5c3115664d699e138f313f902280fa227d8e64dfe6
csi-livenessprobe git a29b1153 sha256:37a6832db5bdd4ea4c80869c1a21babbfc693070009bf72c64b416e6ccb940d8
csi-node-driver-registrar git 0519730f sha256:56c08750234d6665d7109ff8eef413f58df1036662fe60981a0c6538fa55c63e
csi-snapshot-controller git 1e2cca95 sha256:19484d226f31279e8349dcff2d60982d539009ae3b4d4f5a4345b5c617075b51
csi-snapshot-validation-webhook git 1e2cca95 sha256:d3fd5987620ea0367526a7f8dc6482f42857024b582f18240f7ecbd6d7e1337d
egress-router-cni git 016bea1a sha256:c3aacfd118206c831f5ba5e46f0672a6180bec71c565159d361593acde589d0a
gcp-machine-controllers git 34db56eb sha256:d9d512849b30788850289e03a961c0f320597d26be173996104e4c6b32309335
gcp-pd-csi-driver-operator git 35ebe860 sha256:c13ee2dcae9ef95596f83aaf9b86385f83b8c05784ee1668e4b070f54b8d2b9b
grafana git b987e4b1 sha256:34c6b56db054273fc6b0a7ab5682619b2b05b2df0b403929486e6fedbfbc94de
ironic-hardware-inventory-recorder git b3ecae8d sha256:d8b303eea23677b47dde6757f66e09c63ebe9b435d4b0c9d3cab8a52d67bf566
ironic-static-ip-manager git d2e40e34 sha256:bec14d9df1310a7fee4b5e2bbe0d32398626b8138f9e1583c0d51a13ff64d381
k8s-prometheus-adapter git bfffea3b sha256:f174a0418e18594db4c35c8d5ad47bb0c05086e275ae33246244ae4c1d754c77
keepalived-ipfailover git ad38e116 sha256:ea1aede527c45d3e78106b59056230570c336dbcbacca25f53cb2a7b5bb417a3
kube-rbac-proxy git 813c3da7 sha256:cffffc0b3bec1356750f7956de88f3f1fc62335a146fbb89d98d3bf886b27a54
kube-state-metrics git 94716629 sha256:9f165e8327befd2c9a06efd85dc5accb73db33f1a7089553bcf8e0b2f45007fc
libvirt-machine-controllers git 9542e5ac sha256:f4bc7945b63bcd24154a8f0a348142a504b197e1c04f2adecbe6eb2589d33f4a
machine-os-content sha256:7f87b302762dabcddc556a480f8dec9d69cb91700a3717742c30103b8a913a0a
mdns-publisher git 1c707a28 sha256:28b4efbc8c274e7327ae2ffe59ea00613ad13a6874336001c36c96a8bd08e019
multus-admission-controller git 64645feb sha256:a17fe3cc85e988f92b065957846c1d122ca3508901fb536ce865e7aaf5ec320d
multus-networkpolicy git 187ad91f sha256:dc239c08e585bbd04558d6aa6a5c4ff1ddddcffc245cb5658170c5e71f04d947
network-tools git 5ac3739e sha256:178b0c7a754f87e69f06fb9f0de809186609cf37f7ed2ff4cbee4b22c33aec22
oauth-proxy git 3fc0d89b sha256:7d592d79e97e15add214b47e6585eb1c3b49c369fd010eb35969347aac9291fe
oauth-server git 374e2ee3 sha256:97e5a919d509ba24ac4773489c456f397ac8d9b66ecaf7c826e75fd609f3b422
openshift-controller-manager git 69a83a3f sha256:2a8ac47eb06f32ca93e86d4fd99af53775a60c601d1a8c435c9031d8d195506a
openshift-state-metrics git 10142914 sha256:a27ca4d7a50a7ee302a86c9b570a62c5a465da278ed7b20f07563f521d06fd10
openstack-cinder-csi-driver git 3579eadc sha256:e1f3ebdb2724900f44365d31a0b252e5d897f06c3b7d6bb9eea7067c4bdeaa13
operator-marketplace git 3f3d7d1f sha256:9a4560f5ac7c0af95e21f03c2d9d009ebc5901092f3157844a570eedf8e0fa2b
ovirt-csi-driver git c57863f2 sha256:cd8baabeda3c3df3bb4ee2e1f2f8e9c03f35182627afcbcdc9754aca0ab1d524
prom-label-proxy git 2faeb405 sha256:fe44c71ef0fdd900dd2a258e540c5dac25087926e0a5deb2bc23482c32d1a123
prometheus git f3beb880 sha256:8afc76c80406a43c6598e49a60adfc8669fa392d442c573195fd587f042147f6
prometheus-alertmanager git 7b5ac874 sha256:f53390bd3a8d5739668e486a201fd625b45087eb87a610dd0fb31d30025eccbf
prometheus-config-reloader git 8f4efab9 sha256:d1f78446e141115a5390f738b52bb5c9b2ed2b69e3447d5f64449912bdc5887f
prometheus-node-exporter git 9ad2cf90 sha256:26fa35eca61d174d942c3ad93b6a63e9255d5f5f36224ee79e9e59f2db845db4
prometheus-operator git 8f4efab9 sha256:26b765fb607099b2b718adff6d77b55a13d1eb1c8771b26fc4eb0b186336c2c7
service-ca-operator git b66c4506 sha256:7809fd52e20108c0cf0b78fabe64d5863d8ff65778e644258f9fc3af03c7353c
telemeter git eabad556 sha256:938b84b8cf5018bd05ea91f824ec2a9d2866564b0f814f3e2f536d7532968298
thanos git f7c1227d sha256:ea426e72ae70d9100a8f84ea8c0ce1c7e0e7a5c7a5feafd49d7e951b60436bdd
vsphere-csi-driver git dd5345eb sha256:527eccd2e460b71463e45b0295bd156e689f48d42466d618185a4cd014317ace
vsphere-csi-driver-syncer git dd5345eb sha256:60e27f08d1541224369235731b77e452611d76b0e50f286d8e021ee6f77b8cfc

aws-machine-controllers

Bug 2066675: Ensure IOPS setting is honoured on all supported block device types #437
Bug 2031905: Prevent Machine from being considered provisioned until it exists in AWS #432
Bug 2016926: do not requeue if the machine has been updated #426
Full changelog

aws-pod-identity-webhook

Bug 2029253: update go.mod for go1.16 #148
Full changelog

azure-machine-controllers

Bug 2051576: Requeue create on invalid credentials errors #253
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2069166: stop considering Mint mode as supported on Azure (#5699) #5753
Bug 2022171: Relax vcenter hostname check #5371
Updating ose-installer-artifacts builder & base images to be consistent with ART #4782
Bug 2023363: Add ingress rules to master SG for compact clusters #5386
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller builder & base images to be consistent with ART #147
Full changelog

baremetal-runtimecfg

Bug 2059584: Ignore VIPs in node-ip show #172
Bug 2053720: Avoid dynamically allocated port range for haproxy #171
Bug 2050288: Add delay after sending bootstrap stop and start messages #170
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2052980: bump(k8s.io/*) v0.21.9 #1061
Bug 2066760: Add TMOUT env to debug node pod #1095
Bug 2039762: Remove git:// from new-app tests #1023
Bug 2053223: Fix mirroring images that have dots in their namespace #1069
Bug 2038931: properly handle –dry-run=server #1017
Full changelog

cloud-credential-operator

Bug 2058270: Remove Azure mint mode support as Active Directory Graph API will be sunset #454
Bug 2027928: pod-identity-webhook starts without tls #429
Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
Bug 2026098: Check for aws status in infra platform status field before client setup #425
Full changelog

cluster-authentication-operator

Bug 2062591: e2e: Pin Keycloack to the legacy variant #557
Full changelog

cluster-autoscaler-operator

Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART #193
Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
Full changelog

cluster-baremetal-operator

Bug 2091748: Fix interpretation of Deployment Status Conditions #269
Bug 2055279: Calculating network stack only on supported Platforms #248
Full changelog

cluster-image-registry-operator

Bug 2074053: Deployment annotations, runtimeClassName override and fs policy change #767
Bug 2067107: Retry on pruner failures #761
Full changelog

cluster-ingress-operator

Bug 2066302: Disable keepalive for canary probe #726
Full changelog

cluster-kube-apiserver-operator

Bug 2026089: library-go bump #1320
Full changelog

cluster-kube-scheduler-operator

Bug 2026110: Disable balancedAllocation and add weight for HighNodeUtilization profile #380
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 4 #79
Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
Full changelog

cluster-machine-approver

Bug 2031047: Ensure pending CSR count is valid post approval #146
Bug 2032092: Replace certificates with generated certificates #148
Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
Full changelog

cluster-monitoring-operator

Bug 2030698: KubePodCrashLooping may fire when pod is not in CrashLoopBackOff #1619
Bug 2039538: Add custom profile metric for Node Tuning Operator to telemetry #1565
Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
Full changelog

cluster-network-operator

Bug 2090000: Reserve port TCP/9104 for cluster-network-operator #1457
Adds dougbtv to owners [release-4.8] #1403
Bug 2058674: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.8] #1324
Bug 2038295: Backport 4.8 OVN drop icmp frag from other nodes on Azure cluster #1274
Bug 2068895: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1351
[release 4.8] Updates owners #1334
Bug 2054642: sbdb and nbdb containers leave pid around if they restarted or crashed #1310
Bug 2023426: Add ip6tables NOTRACK rules for udp/6081 #1228
Bug 2021221: ovnkube: set ovn-controller lflow cache limit to 1GB #1278
Bug 2034352: Whereabouts IP Reconciliaton [backport 4.8] #1265
Bug 2022747: Allow to use proxy to connect to OSP cloud #1225
Bug 2037500: Bump openshift/build-machinery-go #1271
Bug 2029590: Set upgrade strategy on kube-proxy #1244 #1244
Bug 2018513: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1211
Full changelog

cluster-node-tuning-operator

Bug 2018053: tuned: add timeout and restarts #286
Full changelog

cluster-openshift-apiserver-operator

Bug 2052097: global pull secret not working in OCP4.7.4+ for additio… #493
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
Full changelog

cluster-storage-operator

Bug 2034270: Add trusted CA bundle to vsphere operators #249
Full changelog

cluster-version-operator

Bug 2047434: Changing the ClusterNotUpgradeable alert to info #731
Bug 2038936: *: Use –v=2 logging to drop client-side throttling noise #724
Bug 1982683: [release-4.8] Respect noProxy #691
Bug 2025955: Removing the extra indentation #696
Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
Full changelog

console

Bug 2088756: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11539
Bug 2092767: Set dashboards timeout based on selected timespan #11628
Bug 2089725: Eliminate use of lookaside cache and move to Cachito #11573
Bug 2079436: Pipeline metrics: use prometheus-tenancy API to get data #11409
Bug 2066365: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11271
Bug 2060450: Fix that the preferred namespace was not selected when it contains just numbers #11134
Bug 2055132: Fix TypeError when application has HelmRelease #11069
Bug 2060616: Add error boundary in edit-flows #11137
Bug 2061266: Update e2e test to use 3scale operator to increase test stability #11141
Bug 2046215: Filter superseded helm secrets and fix firehose to support partial metadata #10936
Bug 2045592: Check if name label exists before comparing #10929
Bug 2048900: Fix knative function label cherry pick #10987
Bug 2045051: Add subject name selector field to SinkBinding form #10925
Bug 2046051: Add support for fetching partial metadata and fix helm list page crash #10932
Bug 2004086: Add name field in edit deployment form #10873
Bug 2046043: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10931
Bug 2008141: Allow web terminal to be installed in any namespace #10134
Bug 2019301: Check for resource in ServiceBinding spec’s service reference #10376
Bug 2018064: fix dev-catalog stuck in loading state #10346
Bug 2044571: Update CRW operator name to fix failing e2e tests #10918
Bug 2036045: fix resource limit form validation #10788
Bug 2034640: cant delete VM with un-owned pvc attached #10718
Bug 2030443: Fix ClusterOperators link #10638
Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
Bug 2017469: key not a valid prop name causing display issue in env editor #10419
Bug 2009224: Regular user cannot restore VM snapshot #10436
Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
Bug 2017326: Update PatternFly/react-console #10384
Full changelog

console-operator

Bug 2071200: Fix setting of custom cert for default route #643
Bug 2008141: Change web terminal subscription permissions from get to list #595
Bug 2041359: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627
Full changelog

docker-builder

Bug 2053122: [release-4.8] getAssembleUser(): strip the group part out before checking the UID #289
Update OWNERS file #290
Full changelog

docker-registry

Bug 2042678: Fix auth for docker.io images #306
Bug 2053223: Fix pull-through for images that have dots in their namespace #310
Full changelog

driver-toolkit

Bug 2031938: Add e2e test to 4.9 branch #72
Full changelog

etcd

Update OWNERS #125
Full changelog

gcp-pd-csi-driver

Bug 2052955: Disable uuid checks on XFS #23
Full changelog

hyperkube, pod

Bug 2077004: Rebase 1.21.11 #1246
Bug 2063953: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1245
Bug 2075043: golang toolchain unsupported parsers tag #1240
Bug 2043808: IPs with leading zeros are still valid in the apiserver #1173
Bug 2060494: Backports inotify leak fix into kubelet #1203
Bug 2024642: Rebase v1.21.8 #1102
Bug 2050131: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1168
Bug 2039377: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1108
Bug 2029466: UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails #1146
Bug 2024995: Fix subpath source check #1067
Bug 2032325: UPSTREAM: <carry>: api request counts for current hour are incorrect #1092
Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
Bug 2022265: Rebase v1.21.6 #1060
Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
Bug 2008403: Rebase v1.21.5 #981
Full changelog

insights-operator

Bug 2077765: Gather namespace names with overlapping UIDs (#605) (#611) (#612) #605
Bug 2033546: Gather all CostManagementMericsConfig definitions. (#525) (#569) #525
Update OWNERS (#543) #543
Bug 2027720: gather webhook configurations (#508) (#560) #508
Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
obfuscation ovn clusters bug (#523) #523
Full changelog

ironic

[OCP 4.8] Update OWNERS #279
Bug 2088196: Backport weak eTag handling fix to OpenShift 4.8 #276
Bug 2048672: Enable vMedia provisioning of Nokia servers #275
Bug 2023765: Compare IPs using the short form of IPv6 address #233
Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
Full changelog

ironic-inspector

Bug 2023765: For inspector, compare IPs using the short form of IPv6 address #71
Full changelog

ironic-ipa-downloader

[OCP 4.8] Update OWNERS #90
Full changelog

ironic-machine-os-downloader

Bug 2005805: Clear proxy env variables if go would have #72
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2076251: Mitigate multiple CVEs #1435
Bug 2078477: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1439
Bug 2058750: [release-4.8] 2022-02-15 Security Advisory #1408
Bug 2055911: bump openshift-sync to 1.0.53 #1392
Bug 2044940: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1370
Bug 2038960: bump sync plugin to 1.0.52 #1362
Bug 2037348: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1360
Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
Full changelog

kube-proxy, sdn

Remove some binaries that accidentally got committed #398
Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator images to be consistent with ART #174
Full changelog

kuryr-cni, kuryr-controller

Bug 2037745: Improve retrieval of Trunks info #621
Bug 2028307: [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN #607
Bug 2028274: Ensure DOWN subports are cleaned up #606
Bug 2022722: Make completed Pods Ports reusable #600
Full changelog

machine-api-operator

Bug 2048496: Fix user-agent in vCenter sessions list #984
Bug 2027896: [release-4.8] Add support for Azure Marketplace Images #970
Bug 2026562: MaxUnhealthy should not be a string type #962
Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
Full changelog

machine-config-operator

Bug 2057544: daemon: Explicitly start rpm-ostreed, restart if we detect active txn #2967
Bug 2062655: Fix bad cherry-pick at 9f7a7eb96 #3065
Bug 2062655: Improvements for configure-ovs script #3004
Bug 2025396: annotate rendered config with OCP version #2972
Bug 2059330: ovs-configuration: use lower than NM default ethernet route metric #2974
Bug 2058789: Prepend to search domains instead of replacing #2970
Bug 2028854: Backport of SystemMemoryExceedsReservation alert rule #2956
Bug 2032996: fixes 1 to 1 containerruntime config mapping #2877
Bug 2053720: Avoid dynamically allocated port range for haproxy #2951
Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
Bug 2026085: Send WARN message to stderr #2836
Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
Full changelog

multus-cni

Updating multus-cni builder & base images to be consistent with ART #95
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni builder & base images to be consistent with ART #12
Full changelog

multus-whereabouts-ipam-cni

Bug 2028966: Whereabouts should reconcile IP addresses [backport 4.8] #78
Bug 2009497: Release on cancel, sync for 4.8 #70
Full changelog

must-gather

Bug 2057345: Fix ovn-nbctl commands for ipv6 #287
Full changelog

network-metrics-daemon

Fix field selector (#52) #52
Full changelog

oauth-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #74
Full changelog

openshift-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #280
Bug 2053223: Fix importing images that have dots in their namespace #283
Bug 2042732: Make OriginImageMutators aware of origin objects #271
Bug 2020644: Image policy should mutate DeploymentConfigs #259
Full changelog

openstack-cinder-csi-driver-operator

Bug 2049088: Explicitly set default value for ReclaimPolicy #71
Full changelog

openstack-machine-controllers

Bug 2064634: Ensure subnets belong to the queried network #223
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2074680: Emit CSV metric on startup #288
Bug 2073963: Fix a bug in deletion of webhook service for replacement #281
Bug 2030489: Remove oudated subscription update logic to improve resolution delay #222
Full changelog

ovirt-csi-driver-operator

Bug 2062745: Increase timeouts for CSI driver #90
Full changelog

ovirt-machine-controllers

Bug 2046356: detach non-bootable disks before removing the VM #127
Full changelog

ovn-kubernetes

Bug 2084110: EgressIP NATs are not being cleared correctly from the logical router #1107
Bug 2087227: enable exportloopref linter and fix violations #1097
Bug 2070762: [release-4.8] Multiple ExGW cache validation/improvements #1019
Bug 2077370: [release-4.8] fix ipv6 network policy #1047
Bug 2062842: [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #1009
Bug 2065303: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #998
Bug 2070521: egressgw: fix deadlock due to behavior of RWLock #1018
Bug 2063836: backport 2052975 to 4.8 #997
Bug 2068509: EgressGW: only return unique elements from getRouteInfosForGateway() #1011
Bug 2065311: [release-4.8] Network Policy fixes #999
Bug 2057557: Create iptables NAT rules also for loadbalancer services #967
Bug 2058679: Bumps ovn2.13-20.12.0-195.el8fdp #979
[release 4.8] Update project owners #992
Bug 2057931: Fix podHandlerCache key #969
Bug 2057152: Fix egress IP allocator sync #965
Bug 2053611: Lock the reassignment procedure during node deletion to avoid races #970
Bug 2054225: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #957
Bug 2056975: Don’t return err when annotation cannot be unmarshalled #963
Bug 2052966: [release-4.8] bump ovn to 20.12.0-193 #949
Bug 2043757: Fix node connectivity to service backed by egress IP pods #922
Bug 2042516: Fixes for shared to local gateway migration #916
Bug 2037884: [4.8-backport] Fix nepol statefulset 4.8 #894
Bug 2041767: Fix pod handlers and pod IP parsing for egress IP #912
Bug 2039279: filter out KubeAPIAuth when logging CNI requests #897
Bug 2021221: Add ovn-controller logical flow cache options #890
Bug 2030465: Make config parsing more resilient for unknown fields #868
Bug 2027873: [4.8z] Fixes race between node handler and pod sync #858
Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
Full changelog

tests

Bug 1999288: [release-4.8]: bump openshift/kubernetes to the latest #26886
Bug 2038876: [release-4.8] test: skip tests that won’t work behind a proxy automatically #26733
Bug 1984275: Add renamed Prometheus test into skipped disconnected list #26344
Bug 2033426: test/e2e/upgrade/adminack: Poll gates for duration of update #26704
Bug 2033379: [release-4.8] remove perma-failing prometheus upgrade invariant #26698
Bug 2027262: Create new-project without updating kubeconfig #26645
Bug 2028815: Skipping Django Test until bug is fixed #26665
Bug 2028021: Bump update time limit 4.8 #26657
Bug 1929650: Increase OVN upgrade timeout by 15m #26654
Bug 2025724: Add admin ack Upgradeable condition gate test #26635
Bug 2020644: Add more tests for image policy #26584
Full changelog

vsphere-csi-driver-operator

Bug 2021620: Close connection to vCenter API #51
Full changelog

vsphere-problem-detector

Bug 2036967: Deferred logout after checks are run #68
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github