4.8.47

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.47-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.7.26, 4.7.28, 4.7.29, 4.7.31, 4.7.32, 4.7.33, 4.7.35, 4.7.36, 4.7.37, 4.7.39, 4.7.40, 4.7.41, 4.7.43, 4.7.44, 4.7.45, 4.7.47, 4.7.48, 4.7.49, 4.7.50, 4.8.10, 4.8.12, 4.8.13, 4.8.14, 4.8.15, 4.8.16, 4.8.18, 4.8.19, 4.8.20, 4.8.21, 4.8.22, 4.8.24, 4.8.25, 4.8.26, 4.8.27, 4.8.28, 4.8.30, 4.8.31, 4.8.32, 4.8.33, 4.8.34, 4.8.36, 4.8.37, 4.8.38, 4.8.39, 4.8.40, 4.8.41, 4.8.7, 4.8.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.8.6

Created: 2022-08-03 16:32:57 +0000 UTC

Image Digest: sha256:cc74abac76c51be6798df097930848b36e41e98806d78c56a08f6db46aec0ce4

Release 4.8.47 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-08-03-105617

Components

Kubernetes upgraded from 1.21.1 to 1.21.11
Red Hat Enterprise Linux CoreOS upgraded from 48.84.202108161759-0 to 48.84.202208030919-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver-operator git d1fe616c sha256:c475ae65234f08c16d3e08cc2ed754b4d3b9c17c7e7c2a1f865803afbc4d8afe
azure-disk-csi-driver git 2d461b39 sha256:e5f858d998f945227bef9e9509580735447a1b25c3b0662ae6876e58ed6116c0
azure-disk-csi-driver-operator git d3a3c298 sha256:ed87c736038cae7be3f022f787e2b6d7dadc7980c52e0658a0e16cfd66c2fea1
cluster-autoscaler git 7bbde4cc sha256:0d703c47006e2900b67868ed33159150a2d36228535828512e48fe2bae6ae968
cluster-bootstrap git 1af395b7 sha256:a9aadde413bb1f9cf3dfd1d564efad36ead52bf9047d8424176c5b47369ac794
cluster-csi-snapshot-controller-operator git 07b3f810 sha256:a2425d517f2a1c9e0a0bab12a1aa820fc8110625ffd1bed5470cdd80c33bb3d8
cluster-dns-operator git fdb2ebec sha256:d18e6e953e4d8ed504e693daeceb38e4093f761472f4207ff4a88436325d1392
cluster-openshift-controller-manager-operator git 286c1577 sha256:ba5e10e3d7a8d48a7ae4343d105874e09574d5cfbbeecede983ea82901d754c5
cluster-policy-controller git ec46ea5c sha256:e6b3b388a1d6d9e8fc76bd4293cff295f0b3c20e767aa7e1e311ee4e8603b9a5
cluster-samples-operator git 31fb491f sha256:23183b5ab6ca405d46c6b893b75cbfc44a0313bef956b4a762e1b8d0abedfd44
cluster-update-keys git 87835b73 sha256:ad68eba3f0c6c432340f419ef5955d2e9763116f6630c7782f15f18e541f84f8
container-networking-plugins git 71a8b346 sha256:5471adc6a3003812897833531d50cf6f2f22f6454bd704b543ef38ffb7016fd7
coredns git 642b46ef sha256:c86746740e3fda41db2803f30b121fb2dd294fba63799bf83c074f702de0bfe1
csi-driver-manila git 3579eadc sha256:c794bb6e87dfa05108f79ae50c7934d3dfda96920208010cf52e079a9e14f287
csi-external-attacher git 596da63e sha256:a6fc542064cf8fd250ab12bd8b1644739058e522ed2f1de58cedbc1726e0c65a
csi-external-provisioner git 3ea7e68a sha256:b89c27834f96c09f4f4bb9dafc0c5cd19503a78ce8e860262e3dfb014e0d2397
csi-external-resizer git b5dd2b39 sha256:5a040b37c9482d37b8c84526f1409594b527c5271ed7532e6c0fb3738266ea07
csi-external-snapshotter git 1e2cca95 sha256:38fcf4a4400b5b62c78ad9b4b6b09105fb5d7b90210314ae3bf4ff9201dc27d6
csi-livenessprobe git a29b1153 sha256:14405fe47e70e96fa058fc6eebee229c28632bb8b283a12e19d79f7024a8092a
csi-node-driver-registrar git 0519730f sha256:f7c55c59e140c45b9b106cb5883722b0c2464de76ff1e4c062ccac1882b78029
csi-snapshot-controller git 1e2cca95 sha256:2d14d29c267efe1cd8612cd9ae60d26af06236b6ad7ebe9fd1884f9d6e3742d9
csi-snapshot-validation-webhook git 1e2cca95 sha256:092e16702e6e4804421c20e4c8db0db5aa5575b8cca7e3b6d36c69049721aaf1
egress-router-cni git 016bea1a sha256:2c09cf3338f282d45b7364fc2c7c055a3059669a7652e0478a983da961465f70
gcp-machine-controllers git 34db56eb sha256:ec287d8075e3babc1d7b614cc675aaac72ef8eace4621ba674788f3396a1b51b
gcp-pd-csi-driver-operator git 35ebe860 sha256:1469236e40f8a3cd4f6d7f67cb44fb95c0dfda40d7532f7e4f3bd9dde7c56bed
grafana git b987e4b1 sha256:44ca0154d534e0d523f4c06b3d1f4a75338354bdf8779e03475bf2374287acac
ironic-static-ip-manager git d2e40e34 sha256:fbc4012b270e4d5b4d82aa11529cf99a3a50ffd2e8a037a3af7be87af435a8d6
keepalived-ipfailover git ad38e116 sha256:d85ef5e5f7b71d3e5422f38af5e8a611000a1ec76f78d8772cc6adfeecb349e9
kube-rbac-proxy git 813c3da7 sha256:79a7b47fe56752218e8c44621e85d36a826a21da75228d0d32736ee9361289b1
kube-state-metrics git 94716629 sha256:45ef07919ef02f2753850a0e3272fab7816976229cde112dfe755ce62568a513
libvirt-machine-controllers git 9542e5ac sha256:fd4442af320d0f32ee93aca10ad9bbbf53e5833a46b8d0272f2422c4600f5d4f
machine-os-content sha256:f44a01845f2db8a27d7ce1d3ca6e706cecd189829e0c3016f392ae0915ec76c8
multus-admission-controller git 64645feb sha256:d2be6eb821548c4444fa4768b0564dbe19cdfe37052266225dfffe3e393eeaee
multus-networkpolicy git 187ad91f sha256:e33d8a61590bb5b2bb4f9b3ca350b2df3fe971e08a54536fc5980c019ba6e914
network-tools git 5ac3739e sha256:40c955a10d7c1be95c4cf4d8474010f5e0295b74af1eda9d01e641015b911420
oauth-proxy git 3fc0d89b sha256:49540a7bbe8826bde21a086f1dc496fda26f62bb3ee884d4cb03a1b8bd7ff0da
oauth-server git 374e2ee3 sha256:0717a9f18b3e0eeda6cc409e7167ee8e3d796686c44ee92fcc9ba22c865a53ee
openshift-state-metrics git 10142914 sha256:92aedba0568aa003ce62d3f9d119b1dbabc1ab680c37720112f7ce39f4dd3ab8
openstack-cinder-csi-driver git 3579eadc sha256:4505f6e90544a5e7e4807f0f6f85be9db8e45a7369048d8baee21b73c68ec3ce
prom-label-proxy git 2faeb405 sha256:c44798b24d4ad9467bce77988a447dbb8c4a7b07eaa3c3a9a13d44d2d75239df
prometheus git f3beb880 sha256:1ab93bb8e8809b813da105c8eed62e70dab1fdf6880d83322945f7d3bbee38be
prometheus-alertmanager git 7b5ac874 sha256:39b48819c3d739c5798419a095b96c9c27954ffc1f0248e4a712a173b5072fc9
prometheus-config-reloader git 8f4efab9 sha256:e31690e88f5d48892e5cfc8ffe8a6cc9684fc3bbb04e685a657cfecc3acd18ff
prometheus-node-exporter git 9ad2cf90 sha256:b028b4649bf33578d54b188227a2c9e06cf47bcc44b27573f7871ecdea3b3eb5
prometheus-operator git 8f4efab9 sha256:e24438f644d8fbee3660cd8062d4f2e11986721dd9a927cfad4e401e35421601
vsphere-csi-driver git dd5345eb sha256:049715b6e6173cf72fe2c6943de6b3ffccb7b0926baf46b1da47b889e28a5203
vsphere-csi-driver-syncer git dd5345eb sha256:2c2cd35b6818396cb786ac7b57e97cc9d2e5ebc45f4311799f856bd2fe6a074f

aws-ebs-csi-driver

Bug 2106910: Rebase to v1.4.0 #205
Full changelog

aws-machine-controllers

Bug 2066675: Ensure IOPS setting is honoured on all supported block device types #437
Bug 2031905: Prevent Machine from being considered provisioned until it exists in AWS #432
Bug 2016926: do not requeue if the machine has been updated #426
Bug 1974680: Fix eventual consistency logic to be consistent #416
Full changelog

aws-pod-identity-webhook

Bug 2029253: update go.mod for go1.16 #148
Full changelog

azure-machine-controllers

Bug 2051576: Requeue create on invalid credentials errors #253
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2100304: Collect whole journal and netstat data #6040
Bug 2098162: Bootstrap timeout #6026
Bug 2006965: bump RHCOS 4.8 boot images #5987
Bug 2069166: stop considering Mint mode as supported on Azure (#5699) #5753
Bug 2022171: Relax vcenter hostname check #5371
Updating ose-installer-artifacts builder & base images to be consistent with ART #4782
Bug 2023363: Add ingress rules to master SG for compact clusters #5386
Bug 2017986: Set AWS Bootstrap Type == Master #5338
Bug 2017258: bump oVirt terraform provider version which fix “Disk is locked” bug #5329
Bug 2002349: Fix invalid UPI AWS instance type #5199
Bug 2008823: baremetal: Ensure ipv6 bootstrap VM client-id is predictable #5250
Bug 2009019: update legacy RHCOS boot image metadata #5255
Bug 1982001: Bump RHCOS 4.8 boot image #5227
Update OWNERS #5242
Bug 2004236: Document how to enable Octavia Day 2 #5161
Bug 1973421: [4.8] improve dual-stack install-config validation #5114
Bug 1987848: openstack: quotas/BYON improvements #5122
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller builder & base images to be consistent with ART #147
Full changelog

baremetal-operator

Bug 2000442: Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #174
Full changelog

baremetal-runtimecfg

Bug 2059584: Ignore VIPs in node-ip show #172
Bug 2053720: Avoid dynamically allocated port range for haproxy #171
Bug 2050288: Add delay after sending bootstrap stop and start messages #170
Bug 1996573: CoreDNS Corefile hosts - add support for dual-stack #149
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2092264: [inspect] Add namespace-scoped networking resources to inspect #1158
Bug 2052980: bump(k8s.io/*) v0.21.9 #1061
Bug 2066760: Add TMOUT env to debug node pod #1095
Bug 2039762: Remove git:// from new-app tests #1023
Bug 2053223: Fix mirroring images that have dots in their namespace #1069
Bug 2038931: properly handle –dry-run=server #1017
Bug 2004193: Registry mirror panic #926
Add kevinrizza as catalog-approver #921
Full changelog

cloud-credential-operator

Bug 2058270: Remove Azure mint mode support as Active Directory Graph API will be sunset #454
Bug 2027928: pod-identity-webhook starts without tls #429
Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
Bug 2026098: Check for aws status in infra platform status field before client setup #425
Full changelog

cluster-authentication-operator

Bug 2062591: e2e: Pin Keycloack to the legacy variant #557
Bug 1997906: csr request: use generate names to prevent getting stuck waiting for a cert #494
Bug 2003632: manifests, bindata: explicitely set runAsUser for operator and operand #484
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #488
Full changelog

cluster-autoscaler-operator

Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART #193
Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
Bug 1995595: add csidrivers and csistoragecapacities to autoscaler cluster role #220
Full changelog

cluster-baremetal-operator

Bug 2091748: Fix interpretation of Deployment Status Conditions #269
Bug 2055279: Calculating network stack only on supported Platforms #248
Bug 2000445: Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never #194
Bug 1975711: Only start static ip set if provisioning net not disabled #166
Full changelog

cluster-config-operator

Bug 2081457: bump API to fix ComponentRoutes TLD validation #255
Full changelog

cluster-etcd-operator

Bug 2008414: pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus #665
Bug 1994483: bindata/etcd: remove unix socket from advertised list #642
Bug 1999777: [release-4.8]: pkg/operator: add cluster backup upgrade controller #652
Bug 1993800: Bump library-go to include backoff fix of installers #648
Full changelog

cluster-image-registry-operator

Bug 2074053: Deployment annotations, runtimeClassName override and fs policy change #767
Bug 2067107: Retry on pruner failures #761
Bug 2015098: Avoid disruptions #725
Bug 2004028: Update rolling update parameters #717
Full changelog

cluster-ingress-operator

Bug 2066302: Disable keepalive for canary probe #726
Bug 2017708: Change default balancing algorithm to “leastconn” #670
Bug 1998103: cleanup condition metrics for deleted ingress controllers #649
Bug 2000414: Configure router to use “source” for passthrough #651
Full changelog

cluster-kube-apiserver-operator

Bug 2026089: library-go bump #1320
Bug 2016213: Exempt metrics scrapes from APF. #1247
Bug 2012010: alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1241
Bug 2001244: Enforce OpenShift’s defined kubelet version skew policies #1224
Bug 1993800: bump(library-go): staticpod/installer: fix backoff of installers #1214
Full changelog

cluster-kube-controller-manager-operator

Bug 1993800: Bump library-go to include backoff fix of installers #560
Full changelog

cluster-kube-scheduler-operator

Bug 2026110: Disable balancedAllocation and add weight for HighNodeUtilization profile #380
Bug 1993800: Bump library-go to include backoff fix of installers #366
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 4 #79
Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
Full changelog

cluster-machine-approver

Bug 2031047: Ensure pending CSR count is valid post approval #146
Bug 2032092: Replace certificates with generated certificates #148
Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
Full changelog

cluster-monitoring-operator

Bug 2030698: KubePodCrashLooping may fire when pod is not in CrashLoopBackOff #1619
Bug 2039538: Add custom profile metric for Node Tuning Operator to telemetry #1565
Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
Bug 2012039: Allow namespace label in metric allow list #1436
Bug 2005205: improve update and status reporting 4.8 #1428
Revert “Bug 1999057: jsonnet: Sync with kube-prometheus” #1394
Bug 1999057: jsonnet: Sync with kube-prometheus #1360
Bug 1997497: Backport etcd telemetry #1344
Bug 1995699: Get insights on series churn during upgrades #1349
Bug 1999148: alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… #1351
Bug 1991836: Revise Alert Severity in OCP 4.8 #1342
Bug 1984753: jsonnet: Sync with kube-prometheus #1323
Full changelog

cluster-network-operator

Bug 2092264: Cleanup CNO relatedObjects #1469
Bug 2084366: ovn: try to gracefully terminate ovn-northd #1438
Bug 2090000: Reserve port TCP/9104 for cluster-network-operator #1457
Adds dougbtv to owners [release-4.8] #1403
Bug 2058674: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.8] #1324
Bug 2038295: Backport 4.8 OVN drop icmp frag from other nodes on Azure cluster #1274
Bug 2068895: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1351
[release 4.8] Updates owners #1334
Bug 2054642: sbdb and nbdb containers leave pid around if they restarted or crashed #1310
Bug 2023426: Add ip6tables NOTRACK rules for udp/6081 #1228
Bug 2021221: ovnkube: set ovn-controller lflow cache limit to 1GB #1278
Bug 2034352: Whereabouts IP Reconciliaton [backport 4.8] #1265
Bug 2022747: Allow to use proxy to connect to OSP cloud #1225
Bug 2037500: Bump openshift/build-machinery-go #1271
Bug 2029590: Set upgrade strategy on kube-proxy #1244 #1244
Bug 2018513: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1211
Bug 2008589: [4.8z] Slow OVN Recovery on SNO #1200
Bug 1985308: Add a newline between user CAs and system CAs #1162
Bug 1990928: [Backport 4.8] Whereabouts should have RBAC for leases #1185
Bug 1985588: Update service network status to reflect dual stack entries #1164
Bug 1987046: Add pre-puller ds to reduce upgrade downtime #1167
Full changelog

cluster-node-tuning-operator

Bug 2018053: tuned: add timeout and restarts #286
Bug 2013678: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #280
Bug 1998120: Add a cgroup blacklisting rule to parent openshift profile. #266
Bug 1999608: Reload when deps of recommended profile change. #268
Full changelog

cluster-openshift-apiserver-operator

Bug 2052097: global pull secret not working in OCP4.7.4+ for additio… #493
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
Bug 1996044: bindata: run openshift-apiserver as root explicitly. #467
Full changelog

cluster-storage-operator

Bug 2103447: Add missing ibm cloud annotations to prometheus rbac #295
Bug 2034270: Add trusted CA bundle to vsphere operators #249
Bug 1996672: Add proxy support to cinder CSI #210
Full changelog

cluster-version-operator

Bug 2109962: pkg/cvo: retain initial completed update history entry #803
Bug 2047434: Changing the ClusterNotUpgradeable alert to info #731
Bug 2038936: *: Use –v=2 logging to drop client-side throttling noise #724
Bug 1982683: [release-4.8] Respect noProxy #691
Bug 2025955: Removing the extra indentation #696
Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
Bug 2011954: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #672
Bug 1999092: Add and enable admin ack Upgradeable condition gate #647
Bug 1999777: Ensure recent etcd backup before allowing minor-version updates #649
Bug 1980411: [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status #627
Full changelog

configmap-reloader

Updating configmap-reload builder & base images to be consistent with ART #32
Full changelog

console

Bug 2088756: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11539
Bug 2092767: Set dashboards timeout based on selected timespan #11628
Bug 2089725: Eliminate use of lookaside cache and move to Cachito #11573
Bug 2079436: Pipeline metrics: use prometheus-tenancy API to get data #11409
Bug 2066365: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11271
Bug 2060450: Fix that the preferred namespace was not selected when it contains just numbers #11134
Bug 2055132: Fix TypeError when application has HelmRelease #11069
Bug 2060616: Add error boundary in edit-flows #11137
Bug 2061266: Update e2e test to use 3scale operator to increase test stability #11141
Bug 2046215: Filter superseded helm secrets and fix firehose to support partial metadata #10936
Bug 2045592: Check if name label exists before comparing #10929
Bug 2048900: Fix knative function label cherry pick #10987
Bug 2045051: Add subject name selector field to SinkBinding form #10925
Bug 2046051: Add support for fetching partial metadata and fix helm list page crash #10932
Bug 2004086: Add name field in edit deployment form #10873
Bug 2046043: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10931
Bug 2008141: Allow web terminal to be installed in any namespace #10134
Bug 2019301: Check for resource in ServiceBinding spec’s service reference #10376
Bug 2018064: fix dev-catalog stuck in loading state #10346
Bug 2044571: Update CRW operator name to fix failing e2e tests #10918
Bug 2036045: fix resource limit form validation #10788
Bug 2034640: cant delete VM with un-owned pvc attached #10718
Bug 2030443: Fix ClusterOperators link #10638
Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
Bug 2017469: key not a valid prop name causing display issue in env editor #10419
Bug 2009224: Regular user cannot restore VM snapshot #10436
Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
Bug 2017326: Update PatternFly/react-console #10384
Bug 1984102: Switch Cypress OLM tests to use supported Red Hat operators #9560
Bug 2005871: Cannot create Network Attachment Definition through UI #10314
Bug 1997901: Cannot delete user created vm template #10367
Bug 2001212: Notifications is not translated on the top right bar #10040
Bug 2002649: Fix SerialConsole display bug #10034
Bug 1994983: use strict promoted template list #9824
Bug 1977659: Adjusting to new reference models changes - cherry-picked rls 4.8 #9379
Bug 2013091: adds check for status in ksvc in util logic #10211
Bug 1998692: Normal user cannot create VM because it cannot access v2v-vmware #10171
(4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com #9470
Bug 2010076: Update prow setup v4.8 #10168
Bug 1999717: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #9952
Bug 2005917: CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False #10103
Bug 1993236: Do not drop environment variables without name but with a value, also fix crash when ref is empty #9799
Bug 2000474: Create BuildConfig webhook secrets before creating knative resources #9970
Bug 1996758: Update Resource Dropdown Tech preview text [Release-4.8] #9838
Bug 1990141: Console overview operators shown upgrading when still waiting on approval #9732
Bug 1995118: Virtualization is not available in Home Overview #9826
Bug 1999931: move event sources add option to serverless add group #9958
Bug 1984367: OCS deployment using Multus: UI allows StorageCluster creation with empty public and cluster network in “Internal - Attached Devices” #9566
Bug 1992720: Update Ingress to v1 API version #9788
Bug 1983644: Add a TechPreviewBadge for Multus #9539
Bug 1972987: chore(i18n): update translations #9284
Full changelog

console-operator

Bug 2071200: Fix setting of custom cert for default route #643
Bug 2008141: Change web terminal subscription permissions from get to list #595
Bug 2041359: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627
Bug 2018391: Remove SimpleHTTP ‘server’ response header value #606
Bug 1987315: Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #591
Bug 2003639: Use kubernetes.io/hostname for workload anti-affi… …nity #589
Bug 2001268: console-operator should report Available=true when at least available replica exists #583
Full changelog

csi-driver-manila-operator

Bug 2002554: Do not degrade cluster on failure to reach Manila #125
Full changelog

csi-driver-nfs

Updating csi-driver-nfs builder & base images to be consistent with ART #40
Full changelog

docker-builder

Bug 2053122: [release-4.8] getAssembleUser(): strip the group part out before checking the UID #289
Update OWNERS file #290
Full changelog

docker-registry

Bug 2042678: Fix auth for docker.io images #306
Bug 2053223: Fix pull-through for images that have dots in their namespace #310
Bug 2012163: Supporting mirror authentication during pull through #297
Updating openshift-enterprise-registry builder & base images to be consistent with ART #270
Full changelog

driver-toolkit

Bug 2031938: Add e2e test to 4.9 branch #72
Bug 2011460: Add imagestream for driver-toolkit #65
Full changelog

etcd

Update OWNERS #125
Full changelog

gcp-pd-csi-driver

Bug 2052955: Disable uuid checks on XFS #23
Full changelog

hyperkube, pod

Bug 2083557: UPSTREAM: 109935: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1257
Bug 2105664: UPSTREAM: <carry>: update list of deprecated apis #1317
[release 4.8] Bug Bug 2106970: UPSTREAM: <carry>: use correct base image for testing #1323
Bug 2077004: Rebase 1.21.11 #1246
Bug 2063953: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1245
Bug 2075043: golang toolchain unsupported parsers tag #1240
Bug 2043808: IPs with leading zeros are still valid in the apiserver #1173
Bug 2060494: Backports inotify leak fix into kubelet #1203
Bug 2024642: Rebase v1.21.8 #1102
Bug 2050131: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1168
Bug 2039377: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1108
Bug 2029466: UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails #1146
Bug 2024995: Fix subpath source check #1067
Bug 2032325: UPSTREAM: <carry>: api request counts for current hour are incorrect #1092
Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
Bug 2022265: Rebase v1.21.6 #1060
Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
Bug 2008403: Rebase v1.21.5 #981
Bug 2011460: UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005
Bug 1995714: UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #895
Bug 1994457: Update to kubernetes 1.21.4 #888
Bug 1993754: UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… #940
Bug 1998391: UPSTREAM: 104530: [1.21] bump runc to 1.0.2 #912
Full changelog

insights-operator

Bug 2077765: Gather namespace names with overlapping UIDs (#605) (#611) (#612) #605
Bug 2033546: Gather all CostManagementMericsConfig definitions. (#525) (#569) #525
Update OWNERS (#543) #543
Bug 2027720: gather webhook configurations (#508) (#560) #508
Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
obfuscation ovn clusters bug (#523) #523
Bug TBD: Gather installed PSP names (#489) (#490) #489
Full changelog

ironic

[OCP 4.8] Update OWNERS #279
Bug 2088196: Backport weak eTag handling fix to OpenShift 4.8 #276
Bug 2048672: Enable vMedia provisioning of Nokia servers #275
Bug 2023765: Compare IPs using the short form of IPv6 address #233
Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
Bug 2003035: Sync sushy to include the latest bugfixes for 4.8 #214
Bug 1991979: [4.8] Sync image with ironic #206
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
Full changelog

ironic-inspector

Bug 2023765: For inspector, compare IPs using the short form of IPv6 address #71
Full changelog

ironic-ipa-downloader

Bug 2100787: Include Fix discovering WWN/serial for devicemapper devices #94
Bug 2070519: Multipath fix for passive paths #91
[OCP 4.8] Update OWNERS #90
Full changelog

ironic-machine-os-downloader

Bug 2005805: Clear proxy env variables if go would have #72
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2076251: Mitigate multiple CVEs #1435
Bug 2078477: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1439
Bug 2058750: [release-4.8] 2022-02-15 Security Advisory #1408
Bug 2055911: bump openshift-sync to 1.0.53 #1392
Bug 2044940: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1370
Bug 2038960: bump sync plugin to 1.0.52 #1362
Bug 2037348: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1360
Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
Bug 2008114: Upgrade Jenkins to 2.289.3 (and related fixes) #1324
Full changelog

k8s-prometheus-adapter

Bug 2002281: 4.8: pkg/resourceprovider: guard from negative metrics #55
Full changelog

kube-proxy, sdn

Bug 2092166: Masquerade in cluster traffic that is marked for egress IP #435
Remove some binaries that accidentally got committed #398
Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
Bug 2014166: Remove locking from EgressIPTracker.Ping #362
Bug 2002290: [4.8] proxy: don’t re-check every userspace proxy rule on every change #347
Bug 1987239: when assigning and releasing egressIP try more than once before failing #326
Bug 1999946: improve SDN’s OVS healthcheck and logging #341
Bug 1995871: Disable conntrack for vxlan traffic #337
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator images to be consistent with ART #174
Full changelog

kuryr-cni, kuryr-controller

Bug 2037745: Improve retrieval of Trunks info #621
Bug 2028307: [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN #607
Bug 2028274: Ensure DOWN subports are cleaned up #606
Bug 2022722: Make completed Pods Ports reusable #600
Bug 2018232: Update TOX_CONSTRAINTS_FILE for stable/xena #587
Bug 1995013: Remove ep_slices from klb on endpoint delete event #550
Bug 1989550: Increase keystoneauth’s connection pool size #546
Full changelog

machine-api-operator

Bug 2048496: Fix user-agent in vCenter sessions list #984
Bug 2027896: [release-4.8] Add support for Azure Marketplace Images #970
Bug 2026562: MaxUnhealthy should not be a string type #962
Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
Bug 1999585: [release-4.8] add alert for machine with long deletion phase #908
Bug 2000038: Respect MaxUnhealthy limit for external remediation #910
Bug 1993117: Make sure nodes don’t have attached volumes before vm deletion #903
Full changelog

machine-config-operator

Bug 2098274: Add KUBELET_NODEIP_HINT to nodeip-configuration #3192
Bug 2078799: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3117
Bug 2057544: daemon: Explicitly start rpm-ostreed, restart if we detect active txn #2967
Bug 2062655: Fix bad cherry-pick at 9f7a7eb96 #3065
Bug 2062655: Improvements for configure-ovs script #3004
Bug 2025396: annotate rendered config with OCP version #2972
Bug 2059330: ovs-configuration: use lower than NM default ethernet route metric #2974
Bug 2058789: Prepend to search domains instead of replacing #2970
Bug 2028854: Backport of SystemMemoryExceedsReservation alert rule #2956
Bug 2032996: fixes 1 to 1 containerruntime config mapping #2877
Bug 2053720: Avoid dynamically allocated port range for haproxy #2951
Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
Bug 2026085: Send WARN message to stderr #2836
Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
Bug 2016275: [on-prem] Set coredns bufsize to 512 #2807
Bug 2011083: templates: Silence audit events from container infra by default #2793
Bug 1985736: [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer #2692
Bug 2000958: fixes 1 to 1 kubelet config mapping #2753
Bug 1999531: Set timeoutSeconds for keepalived liveness probe #2741
Bug 2004122: Set ovs syslog level to info #2762
Bug 1973873: match tlsSecurityProfile doc with kubelet.conf file #2628
Bug 2000500: bump SystemMemoryExceedsReservation alert threshold to 95% #2748
Bug 1976110: configure-ovs: fix nondeterministic master in slave profiles #2644
Bug 1985735: [ON-PREM] HAProxy - enable listening sockets retrieval from old processes #2691
Bug 1998106: vSpehere: disable vmxnet3 tx csum offload #2736
Bug 1995809: crio: complete crio default config #2724
Full changelog

mdns-publisher

Bug 1988145: Update zeroconf vendoring #35
Full changelog

multus-cni

Updating multus-cni builder & base images to be consistent with ART #95
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni builder & base images to be consistent with ART #12
Full changelog

multus-whereabouts-ipam-cni

Bug 2028966: Whereabouts should reconcile IP addresses [backport 4.8] #78
Bug 2009497: Release on cancel, sync for 4.8 #70
Bug 1990113: Syncs with upstream for leader election [backport 4.8] #63
Full changelog

must-gather

Bug 2092264: Add networking resources #309
Bug 2057345: Fix ovn-nbctl commands for ipv6 #287
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#57) #57
Fix field selector (#52) #52
Full changelog

oauth-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #74
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #300
Bug 2043808: IPs with leading zeros are still valid in the apiserver #280
Bug 2053223: Fix importing images that have dots in their namespace #283
Bug 2042732: Make OriginImageMutators aware of origin objects #271
Bug 2020644: Image policy should mutate DeploymentConfigs #259
Full changelog

openshift-controller-manager

Bug 2006793: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #206
Full changelog

openstack-cinder-csi-driver-operator

Bug 2049088: Explicitly set default value for ReclaimPolicy #71
Full changelog

openstack-machine-controllers

Bug 2064634: Ensure subnets belong to the queried network #223
Bug 2000542: Adds Proxy to provider client http transport #199
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2074680: Emit CSV metric on startup #288
Bug 2073963: Fix a bug in deletion of webhook service for replacement #281
Bug 2030489: Remove oudated subscription update logic to improve resolution delay #222
Bug 1996162: Check for pruned bundles on add in replaces mode #165
Bug 1986476: resolver: remove legacy support for fallback parsing of CSVs #140
Bug 1994038: clarify maxOpenShiftVersion upgrade error message #173
Bug 1994038: Update kubebuilder installation in the build root dockerfile #174
Bug 1994110: fix(openshift): drop z from next calculated y-stream #167
Full changelog

operator-marketplace

Bug 1998938: Use client-go’s leader election implementation #421
Full changelog

ovirt-csi-driver

Bug 2013945: pvc stuck on pending status when using preallocated storage domain #89
Full changelog

ovirt-csi-driver-operator

Bug 2062745: Increase timeouts for CSI driver #90
Full changelog

ovirt-machine-controllers

Bug 2046356: detach non-bootable disks before removing the VM #127
Full changelog

ovn-kubernetes

Bug 2105655: egressIP: node retrieval failure is not respected, causes panic #1187
Bug 2107645: Set the OVS port as transient #1197
Bug 2105272: EGW: Clean Stale Conntrack Entries #1193
Bug 2106089: Fix panics in DestroyNetworkPolicy if policy is nil #1184
Bug 2084110: EgressIP NATs are not being cleared correctly from the logical router #1107
Bug 2087227: enable exportloopref linter and fix violations #1097
Bug 2070762: [release-4.8] Multiple ExGW cache validation/improvements #1019
Bug 2077370: [release-4.8] fix ipv6 network policy #1047
Bug 2062842: [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #1009
Bug 2065303: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #998
Bug 2070521: egressgw: fix deadlock due to behavior of RWLock #1018
Bug 2063836: backport 2052975 to 4.8 #997
Bug 2068509: EgressGW: only return unique elements from getRouteInfosForGateway() #1011
Bug 2065311: [release-4.8] Network Policy fixes #999
Bug 2057557: Create iptables NAT rules also for loadbalancer services #967
Bug 2058679: Bumps ovn2.13-20.12.0-195.el8fdp #979
[release 4.8] Update project owners #992
Bug 2057931: Fix podHandlerCache key #969
Bug 2057152: Fix egress IP allocator sync #965
Bug 2053611: Lock the reassignment procedure during node deletion to avoid races #970
Bug 2054225: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #957
Bug 2056975: Don’t return err when annotation cannot be unmarshalled #963
Bug 2052966: [release-4.8] bump ovn to 20.12.0-193 #949
Bug 2043757: Fix node connectivity to service backed by egress IP pods #922
Bug 2042516: Fixes for shared to local gateway migration #916
Bug 2037884: [4.8-backport] Fix nepol statefulset 4.8 #894
Bug 2041767: Fix pod handlers and pod IP parsing for egress IP #912
Bug 2039279: filter out KubeAPIAuth when logging CNI requests #897
Bug 2021221: Add ovn-controller logical flow cache options #890
Bug 2030465: Make config parsing more resilient for unknown fields #868
Bug 2027873: [4.8z] Fixes race between node handler and pod sync #858
Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
Bug 2011391: [4.8] bump OVN to 20.12.0-183.el8fdp #783
Bug 1986708: Add routes for pod: fail only after checking all the gw addresses / ips #774
Bug 2005480: [4.8z] Remove waiting for namespace and namespace lock contention #760
[release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses #661
Bug 2004336: Ensure host interfaces are deleted by CNI #745
Bug 2005464: [4.8z] Fixes skipping pods accidentally in retry #758
Bug 2005357: [4.8z] Fixes misuse of pod annotations during update event #753
Bug 1996739: Fix ensurePod to call addPodExternalGW only for annotation updates #752
Bug 2004488: panic after EgressFirewall deletion and DNS record expiration #749
Bug 2004269: Sync ECMP routes on startup and fixes stale ECMP routes #743
Bug 1999638: Fix duplicate incrementing of subnet allocation metric #700
Bug 1996729: NetworkPolicy: bulk-add pods to new policies (or on restart) #678
Bug 2000214: Fix GetPortAddresses for HBO #711
Bug 2001641: egressfirewall not set after upgrade #722
Bug 1996201: Fixes cases of timed out while waiting for OVS port binding #686
Bug 2001542: fix reserve joinSwitch LRP IPs #720
Bug 2001363: [4.8z] Ensure client handling of canceled/dropped OVSDB monitor #718
Bug 1999895: Revert “[release-4.8] fix reserve joinSwitch LRP IPs” #706
Bug 1996965: Add quotes around nexthop and dst-ip fields #680
Bug 1994937: Fix: sync egress IP for missed events on start-up #665
Bug 1997049: fix reserve joinSwitch LRP IPs #681
Bug 1985957: Backport ovnkube-trace requires ip package to be installed to 4.8 #656
Full changelog

service-ca-operator

Updating ose-service-ca-operator images to be consistent with ART #177
Update go version to 1.16 #179
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #374
Full changelog

tests

Bug 1999288: [release-4.8]: bump openshift/kubernetes to the latest #26886
Bug 2038876: [release-4.8] test: skip tests that won’t work behind a proxy automatically #26733
Bug 1984275: Add renamed Prometheus test into skipped disconnected list #26344
Bug 2033426: test/e2e/upgrade/adminack: Poll gates for duration of update #26704
Bug 2033379: [release-4.8] remove perma-failing prometheus upgrade invariant #26698
Bug 2027262: Create new-project without updating kubeconfig #26645
Bug 2028815: Skipping Django Test until bug is fixed #26665
Bug 2028021: Bump update time limit 4.8 #26657
Bug 1929650: Increase OVN upgrade timeout by 15m #26654
Bug 2025724: Add admin ack Upgradeable condition gate test #26635
Bug 2020644: Add more tests for image policy #26584
Bug 2019519: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26562
fix: add proxy support to OAuthServer tests #26539
Bug 2008114: Add role label to jenkins imagestream #26503
Bug 2002552: Retry kubeconfig checks, when kube-apiserver is temporarily unavailable #26458
Bug 1989402: Add tests required internet into Skipped:Disconnected list #26369
Bug 1986259: Enable TestEndpointAdmission test only for OpenShift SDN #26351
Re-enable cluster quota test #26234
Full changelog

thanos

Bug 1994156: dockerignore: remove vendor from ignored list #70
Full changelog

vsphere-csi-driver-operator

Bug 2021620: Close connection to vCenter API #51
Full changelog

vsphere-problem-detector

Bug 2036967: Deferred logout after checks are run #68
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github