Back to index

4.8.49

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.49-x86_64

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.8-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws-serial

Upgrades from:

• 4.8.48 (changes) - F F F F S F S S
• 4.8.47 (changes) - Success
• 4.8.46 (changes) - Failed
• 4.8.45 (changes) - Failed
• 4.8.44 (changes) - Failed
• 4.8.43 (changes) - Failed
• 4.8.42 (changes) - Failed
• 4.8.41 (changes) - Success
• 4.8.40 (changes) - Failed
• 4.8.39 (changes) - Success
• 4.8.38 (changes) - Failed
• 4.8.37 (changes) - Failed
• 4.8.36 (changes) - Success
• 4.8.35 (changes) - Failed
• 4.8.34 (changes) - Success
• 4.8.33 (changes) - Success
• 4.8.32 (changes) - Failed
• 4.8.31 (changes) - Failed
• 4.8.30 (changes) - Success
• 4.8.29 (changes) - Failed
• 4.8.28 (changes) - Failed
• 4.8.27 (changes) - Failed
• 4.8.26 (changes) - Failed
• 4.8.25 (changes) - Success
• 4.8.24 (changes) - Failed
• 4.8.23 (changes) - Failed
• 4.8.22 (changes) - Success
• 4.8.21 (changes) - Failed
• 4.8.20 (changes) - Failed
• 4.8.19 (changes) - Failed
• 4.8.18 (changes) - Failed
• 4.8.17 (changes) - Failed
• 4.8.16 (changes) - Failed
• 4.8.15 (changes) - Failed
• 4.8.14 (changes) - Failed
• 4.8.13 (changes) - Failed
• 4.8.12 (changes) - Success
• 4.8.11 (changes) - Failed
• 4.8.10 (changes) - Failed
• 4.8.9 (changes) - Failed
• 4.8.7 (changes) - Failed
• 4.8.6 (changes) - Failed
• 4.8.5 (changes) - Failed
• 4.8.4 (changes) - Failed
• 4.8.3 - Success
• 4.8.2 (changes) - Failed
• 4.7.58 (changes) - F F F S F S S
• 4.7.57 (changes) - Success Success
• 4.7.56 (changes) - Failed
• 4.7.55 (changes) - Success
• 4.7.54 (changes) - Failed
• 4.7.53 (changes) - Success
• 4.7.52 (changes) - Failed
• 4.7.51 (changes) - Success
• 4.7.50 (changes) - Failed
• 4.7.49 (changes) - Success
• 4.7.48 (changes) - Success
• 4.7.47 (changes) - Failed
• 4.7.46 (changes) - Failed
• 4.7.45 (changes) - Success
• 4.7.44 (changes) - Failed
• 4.7.43 (changes) - Success
• 4.7.42 (changes) - Success
• 4.7.41 (changes) - Failed
• 4.7.40 (changes) - Success
• 4.7.39 (changes) - Success
• 4.7.38 (changes) - Failed
• 4.7.37 (changes) - Success
• 4.7.36 (changes) - Failed
• 4.7.35 (changes) - Failed
• 4.7.34 (changes) - Success
• 4.7.33 (changes) - Failed
• 4.7.32 (changes) - Success
• 4.7.31 (changes) - Success
• 4.7.30 (changes) - Failed
• 4.7.29 (changes) - Failed
• 4.7.28 (changes) - Success
• 4.7.26 (changes) - Failed
• 4.7.25 (changes) - Success
• 4.7.24 (changes) - Success
• 4.7.23 (changes) - Failed
• 4.7.22 (changes) - Success
• 4.7.21 (changes) - Success

Upgrades to:

• 4.9.50 (changes) - Failed
• 4.9.49 (changes) - Failed
• 4.9.48 (changes) - F F F F F S S
• 4.8.52 (changes) - Success
• 4.8.51 (changes) - Success
• 4.8.50 (changes) - F F F S F S

---

Loading changelog, this may take a while ...

Changes from 4.8.3

Created: 2022-09-02 09:21:29 +0000 UTC

Image Digest: sha256:ba6831ecc01cc2b3bfdd8f719e7a9384a877767fe90272a2becee7d7b6c9307c

Release 4.8.49 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-08-31-160214

Components

• Kubernetes upgraded from 1.21.1 to 1.21.11
• Red Hat Enterprise Linux CoreOS upgraded from 48.84.202107271439-0 to 48.84.202208302304-0 (diff)

Rebuilt images without code change

• aws-ebs-csi-driver-operator git d1fe616c sha256:8a99c761722ca2a763d7edfd12a2f3d216f28a28856ecf4049d1e5e218ad737a
• azure-disk-csi-driver git 2d461b39 sha256:2b5748463b29625dd40e1be8d437aa2c7f3aa707a6e49ec169545c3855408861
• azure-disk-csi-driver-operator git d3a3c298 sha256:707ec532cdf4fd0d061179a20849028e6b73e9f035c6b01ffebe63e38beb142d
• cluster-autoscaler git 7bbde4cc sha256:6de8e6b689c06e227f8e73b15ccec568b43590d81f656f4976480404fadb194a
• cluster-bootstrap git 1af395b7 sha256:bf8cfb323478dd0e63679b1a2cd85cadd3550a140b95e80fb98957028d4026a7
• cluster-csi-snapshot-controller-operator git 07b3f810 sha256:806dbfba66e2fd36dc8d7d2b90b598b942ae93ae525d38e3563e76431b05c9b3
• cluster-dns-operator git fdb2ebec sha256:0d3033d5ce335e42deb69077a46300cdb1d4202065fc1b352f052af34a7ab39d
• cluster-openshift-controller-manager-operator git 286c1577 sha256:7478243bd21c4fa6237b796eaacfcafbc7fb00d185cf75b367e2d78f52eea89d
• cluster-policy-controller git ec46ea5c sha256:1d131273fa52719dfd295f889dc3644fa0bf7fe8c492d24dc6e414cdfea1745b
• cluster-samples-operator git 31fb491f sha256:6ead389ff821b59efcf13aec1ada90935c29f657be525900e7063708202aae23
• cluster-update-keys git 87835b73 sha256:8a56e85aa51ce4251eeba51d54b4d14afab6ead0d9ef37329a09d406b8d74de5
• coredns git 642b46ef sha256:f2242ac066837802e21f932ed20f0405b96c74c95c89380e389668ffcc777280
• csi-driver-manila git 3579eadc sha256:b71587fe76638fba77f239bbe9d2d4b4858804fb9babfd10930188b2496ed7b5
• csi-external-attacher git 596da63e sha256:f4209a8f34c9e431f5d3b528b67ead7dbe230005001fcabdcff694e97990514e
• csi-external-provisioner git 3ea7e68a sha256:0626a9afa02f0a7981fc6ddb20586dad181cbedeed39331024138485d9c4de6b
• csi-external-resizer git b5dd2b39 sha256:b80744b8658b5312a1eb8feb34b538da9d3d8f8cf804772cf19fdee3ff8e141f
• csi-external-snapshotter git 1e2cca95 sha256:6bb0736c83cbed81d7210c322fcba4807ee8784e568c1ffbbcc6ff47fc9bb4b0
• csi-livenessprobe git a29b1153 sha256:a88afa984f0102be75d1243fa90f0b9f33a04984a45915a0f7c13370d5280bbf
• csi-node-driver-registrar git 0519730f sha256:a589a0ea2a7340214ed3cd337f5c9ea3f826193bd6eed11a8c2430766a731e46
• csi-snapshot-controller git 1e2cca95 sha256:225678d7ecef94a6fdcf13c1673e32c797f22dd1a9830565004fafd59ca97a8d
• csi-snapshot-validation-webhook git 1e2cca95 sha256:b6dfed4a607dfa480933f3064e5c66c2022a81e6a812de0b6b8167eac291a143
• egress-router-cni git 016bea1a sha256:62fa1517fc67d5c1fd7315966163845681ab3cedc706640e69bd5e0487c64e5a
• gcp-machine-controllers git 34db56eb sha256:10591b30e900da7a92a37d1c4fd9e65e093078e9ecbf96a703b0ecf5e504bf50
• gcp-pd-csi-driver-operator git 35ebe860 sha256:3cf0037cca05f3cc807703e1e64765411b935b1fa11cd1718ee445ac0a85d22c
• ironic-static-ip-manager git d2e40e34 sha256:a13779597aa1c9ba42b022d802519ff8a3bd12e94e1a3e9a6380ab8a8cc64b33
• keepalived-ipfailover git ad38e116 sha256:e522ba71bc0ce977870017ab9f7ec2fb60df0bd37bcc7195af63366fc739489f
• kube-rbac-proxy git 813c3da7 sha256:886a28619658f024e75a353f89442ec6d2b3d26e8922dc51ff044516ecf18900
• kube-state-metrics git 94716629 sha256:d297037a35ab8b6e81e10c74871ec11052bab74d98fd69998c65e381dd4d0d62
• machine-os-content sha256:b34ea56bb089c504b2839c530a8edc100cf3b50855a3b7ffd5b4b8630c96c818
• multus-networkpolicy git 187ad91f sha256:7d73a6f5fdfa9adb2647d8d399cdaef26e868b7de911691cea7f45ce7fe7baca
• network-tools git 5ac3739e sha256:1f11f67671ae0aa456f6ebebef4f09d5ba2998577aa08cec1c47ebcea9b482c8
• oauth-proxy git 3fc0d89b sha256:a1b6d34418b23a6f874dc9302f5e63caaa520cc6dd4d089aae4d12181e306040
• oauth-server git 374e2ee3 sha256:2f3d0c04e7ec5250efa2f0ac2c105064d624450c44dc08a3c8536657889295fb
• openshift-state-metrics git 10142914 sha256:0213a3bc9b058ee41e4c9856f071f23efa6c6b0066045d169aa1ffbe538ad435
• openstack-cinder-csi-driver git 3579eadc sha256:6043d01500019b59feb49f5a44a1030b39f32d52d99456295b61788245c1a73d
• prom-label-proxy git 2faeb405 sha256:545fc0363b3bb1239e06ccc18f57102f2b2b882204c06af3afcbeed98526822e
• prometheus git f3beb880 sha256:3c3ddf8a2cfac7215e617b93a33bc1356ca880b254c386778b7c5dcf081288f5
• prometheus-alertmanager git 7b5ac874 sha256:7980aeb3475515441763553e45a0f4e8c16acea651dee0a20d900807e8539a91
• vsphere-csi-driver git dd5345eb sha256:9deca008332371e8db05371d082f8201f7127e9ede79adf14a71cefe76f790be
• vsphere-csi-driver-syncer git dd5345eb sha256:ee807d354956cfafe02b42ad85a4fa6b4d167aa9ec86203ac53d0f8cd5516414

aws-ebs-csi-driver

• Bug 2106910: Rebase to v1.4.0 #205
• Release v1.4.0 #1089
• Release v1.3.1 #1084
• Reorder isMounted for readability #1087
• deploy: Fix csi-resizer tag and bump to v1.1.0 #1085
• Search for nvme device path even if non-nvme exists #1082
• Fix windows NodePublish failing because mount target doesn’t exist #1081
• deploy: Add resizer and snapshotter images to kustomization #1080
• Move mocks to parent package to avoid import cycle #1078
• Refactor pkg/cloud/metadata.go into pkg/cloud/metadata_*.go files #1074
• Update windows example for image release #1070
• Allow default fstype to be overriden via values.yaml #1069
• merge 1.3.0 release and post-release commits into master #1068
• Bump csi-proxy from RC v1.0.0 to GA v1.0.1 #1018
• Support image.pullPolicy for csi-resizer image #1045
• Recognize instance-type node label when EC2 metadata isn’t available #1060
• Fix spacing in RELEASE.md #1035
• merge patch commits back to master #1058
• Fix windows build IsCorruptedMnt not implemented #1047
• hash volume name to get client token #1041
• Include ClusterRole and ClusterRoleBinding for csi-node #1021
• Node Publish Mount Idempotent #1019
• Fix gcr prow builld failing because docker missing –os-version #1020
• Add controller strategy #1008
• Update helm chart alongside kustomize, after images have been pushed, for consistency #1015
• Fix gcr prow build failing because of IMAGE variable collision #1017
• Fix github build failing because of wrong docker hub registry name #1016
• Build and push multi-arch/os (amazon and windows, no debian) image manifest via Make rules #957
• Node update strategy & auto driver image tag #988
• Update kustomize templates only after verifying images are available in registries #995
• Release v1.2.0 #1005
• release v1.2.0 - part 2 #1004
• release v1.2.0 - part 1 #999
• add ecr images to readme #998
• utilize latest go sdk to ensure createVolume idempotency #982
• Release 1.1.3 #992
• Update base images: yum update al2, bump debian tag #986
• Increased the helm chart version #980
• Updated default setting of windows daemon set #978
• Updated README.md and changed the version in snapshot example #976
• Add how to consume new hack/e2e scripts in other repos (efs/fsx) #972
• Update to csi-proxy v1 APIs #966
• Several breaking changes to the helm chart #965
• Feature/allow add debug args #970
• Nit: Fix typo in the CHANGELOG #971
• Install snapshot controller independently of helm for e2e tests #968
• Release v1.1.1 and chart v1.2.4 #959
• Download fixed version of eksctl to avoid bugs #967
• csi-snapshotter in ebs-csi-controller now checks for enableVolumeSnapshot before including it in containers #960
• Stop pushing latest tag and remove all references to it #949
• Add migration upgrade/downgrade test #927
• Clarify that using instance profile for permission requires instance metadata access on #952
• Adding CRDs VolumeSnapshotClass, VolumeSnapshotContent, VolumeSnapshot for snapshot.storage.k8s.io/v1 #938
• Revert “Fix kustomize RBAC bindings to have namespace kube-system” #947
• Implement Windows NodePublish/Unpublish #823
• Update example policy, use it in tests, and document it #940
• Default controller.extra-create-metadata true so that volumes get created with pvc/pv tags #941
• Grant EKSCTL_ADMIN_ROLE admin access to eksctl clusters #933
• Add KubernetesCluster tag to provisioned volumes when cluster-id set #932
• Default extra-create-metadata true so that volumes get created with pvc/pv tags #937
• Add test-e2e-external-eks make rule that tests EKS with pod instance metadata disabled. Remove hostNetwork from DaemonSet #907
• Disable uuid checks on XFS #913
• Update driver capabilities #922
• helm chart configurable log verbosity #908
• update inFlight cache to avoid race condition on volume operation #924
• Fix podLabels case in Helm chart #925
• merge v1.1.0 release commits back to master #921
• Full changelog

aws-machine-controllers

• Bug 2066675: Ensure IOPS setting is honoured on all supported block device types #437
• Bug 2031905: Prevent Machine from being considered provisioned until it exists in AWS #432
• Bug 2016926: do not requeue if the machine has been updated #426
• Bug 1974680: Fix eventual consistency logic to be consistent #416
• Full changelog

aws-pod-identity-webhook

• Bug 2029253: update go.mod for go1.16 #148
• Full changelog

azure-machine-controllers

• Bug 2051576: Requeue create on invalid credentials errors #253
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-448: Allow setting bootstrap kubelet ip #6253
• Bug 2098252: locations fix #6222
• Bug 2025901: Improve host role management during assets creation #5409
• Bug 2098252: bump RHCOS 4.8 bootimage metadata #6192
• Bug 2108581: [release-4.8] RHCOS: move to rhcos.mirror.openshift.com #6137
• Bug 2100304: Collect whole journal and netstat data #6040
• Bug 2098162: Bootstrap timeout #6026
• Bug 2006965: bump RHCOS 4.8 boot images #5987
• Bug 2069166: stop considering Mint mode as supported on Azure (#5699) #5753
• Bug 2022171: Relax vcenter hostname check #5371
• Updating ose-installer-artifacts builder & base images to be consistent with ART #4782
• Bug 2023363: Add ingress rules to master SG for compact clusters #5386
• Bug 2017986: Set AWS Bootstrap Type == Master #5338
• Bug 2017258: bump oVirt terraform provider version which fix “Disk is locked” bug #5329
• Bug 2002349: Fix invalid UPI AWS instance type #5199
• Bug 2008823: baremetal: Ensure ipv6 bootstrap VM client-id is predictable #5250
• Bug 2009019: update legacy RHCOS boot image metadata #5255
• Bug 1982001: Bump RHCOS 4.8 boot image #5227
• Update OWNERS #5242
• Bug 2004236: Document how to enable Octavia Day 2 #5161
• Bug 1973421: [4.8] improve dual-stack install-config validation #5114
• Bug 1987848: openstack: quotas/BYON improvements #5122
• Bug 1969651: bump RHCOS 4.8 boot images #5051
• Bug 1981548: [release-4.8] aws: move elastic ip permissions to create networking category #5056
• OWNERS: add more core team members as approvers #5124
• Updating ose-installer builder & base images to be consistent with ART #4780
• Full changelog

baremetal-machine-controllers

• Updating baremetal-machine-controller builder & base images to be consistent with ART #147
• Full changelog

baremetal-operator

• Bug 2100994: Uplift kustomize to remove go-getter dependency #236
• Bug 2000442: Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #174
• Full changelog

baremetal-runtimecfg

• Bug 2059584: Ignore VIPs in node-ip show #172
• Bug 2053720: Avoid dynamically allocated port range for haproxy #171
• Bug 2050288: Add delay after sending bootstrap stop and start messages #170
• Bug 1996573: CoreDNS Corefile hosts - add support for dual-stack #149
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 2092264: [inspect] Add namespace-scoped networking resources to inspect #1158
• Bug 2052980: bump(k8s.io/*) v0.21.9 #1061
• Bug 2066760: Add TMOUT env to debug node pod #1095
• Bug 2039762: Remove git:// from new-app tests #1023
• Bug 2053223: Fix mirroring images that have dots in their namespace #1069
• Bug 2038931: properly handle –dry-run=server #1017
• Bug 2004193: Registry mirror panic #926
• Add kevinrizza as catalog-approver #921
• Bug 1992639: revert incorrect allowance of ssh:// prefix with scp styled URLs #898
• Bug 1974267: make oc logs work with BuildConfig’s JenkinsPipeline strategy #867
• Full changelog

cloud-credential-operator

• Bug 2058270: Remove Azure mint mode support as Active Directory Graph API will be sunset #454
• Bug 2027928: pod-identity-webhook starts without tls #429
• Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
• Bug 2026098: Check for aws status in infra platform status field before client setup #425
• Full changelog

cluster-authentication-operator

• Bug 2062591: e2e: Pin Keycloack to the legacy variant #557
• Bug 1997906: csr request: use generate names to prevent getting stuck waiting for a cert #494
• Bug 2003632: manifests, bindata: explicitely set runAsUser for operator and operand #484
• Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #488
• Bug 1989587: pkg/operator: Add deprecated stale status #471
• Bug 1979303: clear encryption conditions when there is no work to be done #467
• Full changelog

cluster-autoscaler-operator

• Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART #193
• Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
• Bug 1995595: add csidrivers and csistoragecapacities to autoscaler cluster role #220
• Bug 1991501: Do not recreate CA deployment when CA CR is being deleted #217
• Full changelog

cluster-baremetal-operator

• Bug 2091748: Fix interpretation of Deployment Status Conditions #269
• Bug 2055279: Calculating network stack only on supported Platforms #248
• Bug 2000445: Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never #194
• Bug 1975711: Only start static ip set if provisioning net not disabled #166
• Full changelog

cluster-config-operator

• Bug 2081457: bump API to fix ComponentRoutes TLD validation #255
• Full changelog

cluster-etcd-operator

• Bug 2008414: pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus #665
• Bug 1994483: bindata/etcd: remove unix socket from advertised list #642
• Bug 1999777: [release-4.8]: pkg/operator: add cluster backup upgrade controller #652
• Bug 1993800: Bump library-go to include backoff fix of installers #648
• Full changelog

cluster-image-registry-operator

• Bug 2074053: Deployment annotations, runtimeClassName override and fs policy change #767
• Bug 2067107: Retry on pruner failures #761
• Bug 2015098: Avoid disruptions #725
• Bug 2004028: Update rolling update parameters #717
• Bug 1973662: Properly set custom tolerations #696
• Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #673
• Full changelog

cluster-ingress-operator

• Bug 2066302: Disable keepalive for canary probe #726
• Bug 2017708: Change default balancing algorithm to “leastconn” #670
• Bug 1998103: cleanup condition metrics for deleted ingress controllers #649
• Bug 2000414: Configure router to use “source” for passthrough #651
• Full changelog

cluster-kube-apiserver-operator

• Bug 2026089: library-go bump #1320
• Bug 2016213: Exempt metrics scrapes from APF. #1247
• Bug 2012010: alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1241
• Bug 2001244: Enforce OpenShift’s defined kubelet version skew policies #1224
• Bug 1993800: bump(library-go): staticpod/installer: fix backoff of installers #1214
• Bug 1979303: clear encryption conditions when there is no work to be done #1188
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1993800: Bump library-go to include backoff fix of installers #560
• Full changelog

cluster-kube-scheduler-operator

• Bug 2026110: Disable balancedAllocation and add weight for HighNodeUtilization profile #380
• Bug 1993800: Bump library-go to include backoff fix of installers #366
• Full changelog

cluster-kube-storage-version-migrator-operator

• Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 4 #79
• Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
• Full changelog

cluster-machine-approver

• Bug 2031047: Ensure pending CSR count is valid post approval #146
• Bug 2032092: Replace certificates with generated certificates #148
• Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
• Full changelog

cluster-monitoring-operator

• OCPBUGS-644: grafana: bump to 7.5.11 #1754
• Bug 2030698: KubePodCrashLooping may fire when pod is not in CrashLoopBackOff #1619
• Bug 2039538: Add custom profile metric for Node Tuning Operator to telemetry #1565
• Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
• Bug 2012039: Allow namespace label in metric allow list #1436
• Bug 2005205: improve update and status reporting 4.8 #1428
• Revert “Bug 1999057: jsonnet: Sync with kube-prometheus” #1394
• Bug 1999057: jsonnet: Sync with kube-prometheus #1360
• Bug 1997497: Backport etcd telemetry #1344
• Bug 1995699: Get insights on series churn during upgrades #1349
• Bug 1999148: alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… #1351
• Bug 1991836: Revise Alert Severity in OCP 4.8 #1342
• Bug 1984753: jsonnet: Sync with kube-prometheus #1323
• Bug 1978208: Sync dependencies for 4.8 release backports #1264
• Bug 1982778: jsonnet: thanosquery: Use HTTP probes as opposed to exec #1289
• Bug 1976765: Update AlertmanagerMembersInconsistent rule #1283
• Bug 1988991: pkg/client/client.go: Add retry logic for daemonset create #1309
• Bug 1982369: Fix deployment update with retry option #1285
• Bug 1981246: [4.8]: Add HighlyAvailableWorkloadIncorrectlySpread alert #1276
• Bug 1943565: ThanosSidecarUnhealthy will never fire if the sidecar is never healthy #1265
• Full changelog

cluster-network-operator

• Bug 2092264: Cleanup CNO relatedObjects #1469
• Bug 2084366: ovn: try to gracefully terminate ovn-northd #1438
• Bug 2090000: Reserve port TCP/9104 for cluster-network-operator #1457
• Adds dougbtv to owners [release-4.8] #1403
• Bug 2058674: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.8] #1324
• Bug 2038295: Backport 4.8 OVN drop icmp frag from other nodes on Azure cluster #1274
• Bug 2068895: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1351
• [release 4.8] Updates owners #1334
• Bug 2054642: sbdb and nbdb containers leave pid around if they restarted or crashed #1310
• Bug 2023426: Add ip6tables NOTRACK rules for udp/6081 #1228
• Bug 2021221: ovnkube: set ovn-controller lflow cache limit to 1GB #1278
• Bug 2034352: Whereabouts IP Reconciliaton [backport 4.8] #1265
• Bug 2022747: Allow to use proxy to connect to OSP cloud #1225
• Bug 2037500: Bump openshift/build-machinery-go #1271
• Bug 2029590: Set upgrade strategy on kube-proxy #1244 #1244
• Bug 2018513: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1211
• Bug 2008589: [4.8z] Slow OVN Recovery on SNO #1200
• Bug 1985308: Add a newline between user CAs and system CAs #1162
• Bug 1990928: [Backport 4.8] Whereabouts should have RBAC for leases #1185
• Bug 1985588: Update service network status to reflect dual stack entries #1164
• Bug 1987046: Add pre-puller ds to reduce upgrade downtime #1167
• Bug 1988425: Change to use mountPath: /host #1169
• Full changelog

cluster-node-tuning-operator

• Bug 2018053: tuned: add timeout and restarts #286
• Bug 2013678: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #280
• Bug 1998120: Add a cgroup blacklisting rule to parent openshift profile. #266
• Bug 1999608: Reload when deps of recommended profile change. #268
• Bug 1986992: Handle kube-apiserver disruption more gracefully. #257
• Bug 1985908: scheduler: new option cgroup_ps_blacklist #254
• Full changelog

cluster-openshift-apiserver-operator

• Bug 2052097: global pull secret not working in OCP4.7.4+ for additio… #493
• Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
• Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
• Bug 1996044: bindata: run openshift-apiserver as root explicitly. #467
• Bug 1979303: clear encryption conditions when there is no work to be done #463
• Full changelog

cluster-storage-operator

• Bug 2103447: Add missing ibm cloud annotations to prometheus rbac #295
• Bug 2034270: Add trusted CA bundle to vsphere operators #249
• Bug 1996672: Add proxy support to cinder CSI #210
• Bug 1986026: Manila CSI driver is not in must-gather #192
• Full changelog

cluster-version-operator

• Bug 2109962: pkg/cvo: retain initial completed update history entry #803
• Bug 2047434: Changing the ClusterNotUpgradeable alert to info #731
• Bug 2038936: *: Use –v=2 logging to drop client-side throttling noise #724
• Bug 1982683: [release-4.8] Respect noProxy #691
• Bug 2025955: Removing the extra indentation #696
• Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
• Bug 2011954: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #672
• Bug 1999092: Add and enable admin ack Upgradeable condition gate #647
• Bug 1999777: Ensure recent etcd backup before allowing minor-version updates #649
• Bug 1980411: [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status #627
• Full changelog

configmap-reloader

• Updating configmap-reload builder & base images to be consistent with ART #32
• Full changelog

console

• Bug 2112999: Replace sum_irate with sum_rate for Deployments CPU graph #11917
• OCPBUGS-604: Backport CI test fix to previous releases #11990
• Bug 2088756: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11539
• Bug 2092767: Set dashboards timeout based on selected timespan #11628
• Bug 2089725: Eliminate use of lookaside cache and move to Cachito #11573
• Bug 2079436: Pipeline metrics: use prometheus-tenancy API to get data #11409
• Bug 2066365: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11271
• Bug 2060450: Fix that the preferred namespace was not selected when it contains just numbers #11134
• Bug 2055132: Fix TypeError when application has HelmRelease #11069
• Bug 2060616: Add error boundary in edit-flows #11137
• Bug 2061266: Update e2e test to use 3scale operator to increase test stability #11141
• Bug 2046215: Filter superseded helm secrets and fix firehose to support partial metadata #10936
• Bug 2045592: Check if name label exists before comparing #10929
• Bug 2048900: Fix knative function label cherry pick #10987
• Bug 2045051: Add subject name selector field to SinkBinding form #10925
• Bug 2046051: Add support for fetching partial metadata and fix helm list page crash #10932
• Bug 2004086: Add name field in edit deployment form #10873
• Bug 2046043: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10931
• Bug 2008141: Allow web terminal to be installed in any namespace #10134
• Bug 2019301: Check for resource in ServiceBinding spec’s service reference #10376
• Bug 2018064: fix dev-catalog stuck in loading state #10346
• Bug 2044571: Update CRW operator name to fix failing e2e tests #10918
• Bug 2036045: fix resource limit form validation #10788
• Bug 2034640: cant delete VM with un-owned pvc attached #10718
• Bug 2030443: Fix ClusterOperators link #10638
• Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
• Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
• Bug 2017469: key not a valid prop name causing display issue in env editor #10419
• Bug 2009224: Regular user cannot restore VM snapshot #10436
• Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
• Bug 2017326: Update PatternFly/react-console #10384
• Bug 1984102: Switch Cypress OLM tests to use supported Red Hat operators #9560
• Bug 2005871: Cannot create Network Attachment Definition through UI #10314
• Bug 1997901: Cannot delete user created vm template #10367
• Bug 2001212: Notifications is not translated on the top right bar #10040
• Bug 2002649: Fix SerialConsole display bug #10034
• Bug 1994983: use strict promoted template list #9824
• Bug 1977659: Adjusting to new reference models changes - cherry-picked rls 4.8 #9379
• Bug 2013091: adds check for status in ksvc in util logic #10211
• Bug 1998692: Normal user cannot create VM because it cannot access v2v-vmware #10171
• (4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com #9470
• Bug 2010076: Update prow setup v4.8 #10168
• Bug 1999717: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #9952
• Bug 2005917: CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False #10103
• Bug 1993236: Do not drop environment variables without name but with a value, also fix crash when ref is empty #9799
• Bug 2000474: Create BuildConfig webhook secrets before creating knative resources #9970
• Bug 1996758: Update Resource Dropdown Tech preview text [Release-4.8] #9838
• Bug 1990141: Console overview operators shown upgrading when still waiting on approval #9732
• Bug 1995118: Virtualization is not available in Home Overview #9826
• Bug 1999931: move event sources add option to serverless add group #9958
• Bug 1984367: OCS deployment using Multus: UI allows StorageCluster creation with empty public and cluster network in “Internal - Attached Devices” #9566
• Bug 1992720: Update Ingress to v1 API version #9788
• Bug 1983644: Add a TechPreviewBadge for Multus #9539
• Bug 1972987: chore(i18n): update translations #9284
• Bug 1982458: Remove kube admin notifier for kubeadmin crc user #9516
• Bug 1985193: Add create resource extension #9601
• Bug 1989798: Fix previously deleted dragged files that show up in import yaml editor #9718
• Bug 1985081: Fix Pipeline Download All #9596
• Bug 1987167: Add inspect url to devconsole monitoring chart #9671
• Bug 1972258: adds check for kamelet source in provider #9254
• Bug 1971911: Do not render samples column and helm link when add page customization disabled them #9240
• Bug 1976144: fix optional workspace checkbox check/uncheck #9343
• Bug 1984242: filter null yaml objects before validating to prevent undefined exception #9565
• Bug 1973696: Fix time range issue for devconsole monitoring dashboard #9298
• Bug 1986581: Web console doesn’t list all the registries credentials in a secret #9651
• Bug 1985356: Check for nonexistent CSVs in installed block #9735
• Bug 1989152: [Release-4.8] Use specific release for files used in e2e tests #9700
• Bug 1982246: Skip empty categories (id and label) in OperatorHub tab view #9509
• Bug 1980136: Add cypress tests for key/value secrets with binary, ascii, and unicode values. #9439
• Bug 1978043: Monitoring dashboards: Dropdowns default to “All” if present #9388
• Bug 1976008: Monitoring dashboards: Custom time range fixes #9342
• Bug 1975559: Fix typo in olm message #9334
• Bug 1972478: improve failure alert for copied CSV #9266
• Bug 1986955: Fix to persist YAML Editor success message #9664
• Bug 1982221: Increase HTTP plugin proxy request timeout #9506
• Bug 1977782: Preserve user annotations while editing an app #9381
• Full changelog

console-operator

• Bug 2071200: Fix setting of custom cert for default route #643
• Bug 2008141: Change web terminal subscription permissions from get to list #595
• Bug 2041359: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627
• Bug 2018391: Remove SimpleHTTP ‘server’ response header value #606
• Bug 1987315: Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #591
• Bug 2003639: Use kubernetes.io/hostname for workload anti-affi… …nity #589
• Bug 2001268: console-operator should report Available=true when at least available replica exists #583
• Bug 1976349: Add policy-group label to the openshift-console namespace manifest #561
• Full changelog

container-networking-plugins

• Updating ose-containernetworking-plugins builder & base images to be consistent with ART #42
• Full changelog

csi-driver-manila-operator

• Bug 2002554: Do not degrade cluster on failure to reach Manila #125
• Bug 1987020: Use cluster Proxy when available #109
• Bug 1988506: Backport e2e testing #111
• Full changelog

csi-driver-nfs

• Updating csi-driver-nfs builder & base images to be consistent with ART #40
• Full changelog

docker-builder

• Bug 2053122: [release-4.8] getAssembleUser(): strip the group part out before checking the UID #289
• Update OWNERS file #290
• Bug 1992639: bump(s2i): revert incorrect ssh scp fix #259
• Bug 1981939: Updating openshift-enterprise-builder builder & base images to be consistent with ART #230
• Full changelog

docker-registry

• Bug 2042678: Fix auth for docker.io images #306
• Bug 2053223: Fix pull-through for images that have dots in their namespace #310
• Bug 2012163: Supporting mirror authentication during pull through #297
• Updating openshift-enterprise-registry builder & base images to be consistent with ART #270
• Full changelog

driver-toolkit

• Bug 2031938: Add e2e test to 4.9 branch #72
• Bug 2011460: Add imagestream for driver-toolkit #65
• Bug 1988478: Use kernel config to determine GCC version #55
• Full changelog

etcd

• Update OWNERS #125
• Full changelog

gcp-pd-csi-driver

• Bug 2052955: Disable uuid checks on XFS #23
• Full changelog

grafana

• OCPBUGS-644: bump Grafana to 7.5.11 #89
• Full changelog

haproxy-router

• Bug 2076380: generateRouteHostRegexp: Escape blanks #2
• Bug 1990370: haproxy-config.template: Fix power-of-two balancing #324
• Bug 1984565: config template: accept IPv6 IPs for whitelisting #321
• Bug 1971730: error pages - don’t use bootstrap/normalize #305
• Full changelog

hyperkube, pod

• Bug 2083557: UPSTREAM: 109935: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1257
• Bug 2105664: UPSTREAM: <carry>: update list of deprecated apis #1317
• [release 4.8] Bug Bug 2106970: UPSTREAM: <carry>: use correct base image for testing #1323
• Bug 2077004: Rebase 1.21.11 #1246
• Update Go to 1.16.15 #108565
• bump konnectivity-client@v0.0.30 #108440
• Automated cherry pick of #107997: cronjob_controllerv2: do not filter jobs to be reconciled by #108304
• Automated cherry pick of #107121: fix regression introduced by PR 100320 #108467
• Automated cherry pick of #106164: fix: remove outdated ipv4 route when the corresponding node #108275
• Automated cherry pick of #108410: fix dryrun when ca file exists #108472
• Automated cherry pick of #108002: kubeadm: fix the bug that ‘kubeadm init –dry-run #108117
• backports k/utils bump (PR#107637) to 1.21 #108335
• Automated cherry pick of #108198: Updating EndpointSlice strategy to retain node name in #108203
• Automated cherry pick of #108138: Revert v1beta1 PodDisruptionBudget select patchStrategy #108142
• Automated cherry pick of #106581: Enabling kube-proxy metrics on windows kernel mode #107610
• Automated cherry pick of #107789: Mark device as uncertain if unmount device succeeds #108012
• Update Go to 1.16.14 #108102
• Automated cherry pick of #107406: fix: delete non existing disk issue #107578
• Automated cherry pick of #107575: fix: azurefile volumeid conflict in csi migration #107852
• Automated cherry pick of #99398: Fix DaemonSet status update retry #107639
• Automated cherry pick of #106280: Set max results if its not set #107653
• Automated cherry pick of #107312: Execute sync before taking the snapshot #107807
• Automated cherry pick of #107427: removed unnecessary log line #107486
• update to Go 1.16.13 #107615
• Automated cherry pick of #107565: upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 #107569
• Cherry pick #106045 to 1.21: Fix concurrent map writes error in kube-apiserver #106337
• Automated cherry pick of #104991: Fix workqueue memory leak #106583
• Automated cherry pick of #105777: fix: do not delete the lb that does not exist #106068
• vendor: bump cAdvisor to v0.39.3 #107356
• Automated cherry pick of #105253: fix: leave the probe path empty for TCP probes #106064
• Automated cherry pick of #105839: fix: remove VMSS and VMSS instances from SLB backend pool #106075
• Automated cherry pick of #107452: Fix header mutation race in timeout filter #107460
• Automated cherry pick of #102122: Don’t set sysctl net.ipv4.vs.conn_reuse_mode for kernels #107438
• Automated cherry pick of #107200: flake fix: remove the error handler for cronjob integration #107359
• Automated cherry pick of #100567: Mark volume mount as uncertain in case of volume expansion #107110
• Automated cherry pick of #100183: Mark volume as uncertain after Unmount* fails #107014
• Automated cherry pick of #103385: Ensure proper resource creation #103404
• Automated cherry pick of #107327: kubeadm: remove the restriction that the ca.crt can only #107366
• Automated cherry pick of #107337: Fix the leak of vSphere client sessions #107351
• Automated cherry pick of #107311: client-go: Clear the ResourceVersionMatch on paged list calls #107336
• Automated cherry pick of #106936: Skip creating HNS loadbalancer with empty endpoints #106970
• Automated cherry pick of #106906: mount-utils: Detect potential stale file handle #107040
• Cherry pick of anp 0.0.27 for v1.21 #107188
• Automated cherry pick of #107221: fix nil pointer in create secret commands #107345
• Automated cherry pick of #107091: Improving performance of EndpointSlice controller metrics #107169
• Automated cherry pick of #104799: fix the error when cleaning up jobs for cronjob #107128
• Bug 2063953: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1245
• Bug 2075043: golang toolchain unsupported parsers tag #1240
• Bug 2043808: IPs with leading zeros are still valid in the apiserver #1173
• Bug 2060494: Backports inotify leak fix into kubelet #1203
• Bug 2024642: Rebase v1.21.8 #1102
• Update to go1.16.12 #106983
• dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 #106961
• Update to go1.16.11 #106839
• Automated cherry pick of #106891: kubeadm: validate local etcd certficates during #106924
• Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig #106929
• Automated cherry pick of #105666: fix: skip instance not found when decoupling vmss from lb #105835
• Automated cherry pick of #105612: Remove Error Message Check Dynamic PV Tests #106357
• Automated cherry pick of #96115: Get inodes and disk usage via pure go #104021
• Automated cherry pick of #102882: devicemanager: checkpoint: support pre-1.20 data #106254
• Automated cherry pick of #103154: Update mounter interface in volume manager #106553
• Automated cherry pick of #104287: Reduce calls to docker from dockershim for stats #106502
• Automated cherry pick of #106102: Ensure deletion of pods in queues and cache #106685
• Automated cherry pick of #106412: kube-scheduler: Increase the duration to expire an assumed #106632
• Automated cherry pick of #106526: Ignore ‘wait: no child processes’ error when calling #106527
• Automated cherry pick of #105046: Skip check for all topology labels when using system default #106605
• Automated cherry pick of #105065: parameter ‘disabled-metrics’ is invalid #106391
• Automated cherry pick of #106317 upstream release 1.21 - Fixed nil pointer dereference #106354
• Automated cherry pick of #106382: defer close the rotated log open #106384
• Automated cherry pick of #104526: Fix issue in node status updating VolumeAttached list #106053
• remove listx from OWNERS_ALIASES #104261
• Automated cherry pick of #105512: Add check for subpaths #106351
• Manual cherry pick of kube-openapi changes for release-1.21 #106255
• Update to go1.16.10 #106224
• Automated cherry pick of #105934: Don’t guess SELinux support on error #106260
• Automated cherry pick of #102059: Bump k8s.io/utils #102656
• Automated cherry pick of #94165: Use separate pathSpec for local and remote to properly handle #106236
• Cherry-pick of #101708: Fix log spam for du failure on pod etc-hosts metrics #105887
• Update debian, debian-iptables, setcap images to pick up CVEs fixes #106147
• Automated cherry pick of #105946: Remove nodes with Cluster Autoscaler taint from LB backends. #106096
• Automated cherry pick of #105997: Fixing how EndpointSlice Mirroring handles Service selector #106135
• Automated cherry pick of #105673: support more than 100 disk mounts on Windows #105693
• Automated cherry pick of #105755: Support cgroupv2 in node problem detector test #105991
• Cherry pick of #104551: Run storage hostpath e2e test client pod as privileged #105787
• Automated cherry pick of #105734: Fix race condition in logging when request times out #106113
• Bug 2050131: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1168
• Bug 2039377: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1108
• Bug 2029466: UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails #1146
• Bug 2024995: Fix subpath source check #1067
• Bug 2032325: UPSTREAM: <carry>: api request counts for current hour are incorrect #1092
• Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
• Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
• Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
• Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
• Bug 2022265: Rebase v1.21.6 #1060
• Automated cherry pick of #105509: [test]: Fix PreferNominatedNode test #105665
• Update to go1.16.9 #105672
• Automated cherry pick of #104985: Aggregator uses the regular transport even if the request #105641
• Automated cherry pick of #99748: check log directory for restartCount #105614
• Automated cherry pick of #104593: fix: ignore the case when updating tags #104686
• Automated cherry pick of #103371: tests: Wait for the network connectivity first #105441
• Automated cherry pick of #105185: Ignore VMs in vmss delete backend pools #105402
• Cherry pick of #105188 and #98350 to release 1.21 #105365
• Automated cherry pick of #102665: Add explicit capability for online volume expansion #102740
• Automated cherry pick of #104913: kube-controller-manager: properly check generic ephemeral #105037
• Automated cherry pick of #102409: Bump golang.org/x/text to v0.3.6 #102601
• Bump klog to v2.9.0 #105407
• Automated cherry pick of #105048: Remove a duplicate StorageClass creation call #105354
• Automated cherry pick of #105205: e2e scheduling priorities: do not reference control loop #105278
• Automated cherry pick of #102292: Local PV e2e: fix leaked local volumes #103349
• Automated cherry pick of #104467: fix 104329: check for headless before trying to release #104973
• Automated cherry pick of #104572: fix detach disk issue on deleting node #104898
• Automated cherry pick of #105388: Copy VolumeSnapshotContent annotations in snapshottable.go #105497
• Revert 102925: Fix Node Resources plugins score when there are pods with no requests #105238
• release 1.21: metrics grabbing #104328
• Automated cherry pick of #101047: Only use dualstack if the node and config supports it #103783
• Automated cherry pick of #104969: Propagate conversion errors #104989
• Automated cherry pick of #104634: storege e2etest: Delete restored PVC/Pod in snapshottable #105153
• v1.21: Fix test flake in old svc registry #105110
• Automated cherry pick of #100125: ‘New’ Event namespace validate failed #105088
• Automated cherry pick of #104833 (1.21): Refine locking in API Priority and Fairness config controller #105050
• Updating openshift-enterprise-pod images to be consistent with ART #680
• Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
• Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
• Bug 2008403: Rebase v1.21.5 #981
• Update to go1.16.8 #104906
• Automated cherry pick of #104369: Fix storage class setup in regional_pd.go #104537
• Backport 104410 to release-1.21 #104534
• Automated cherry pick of #104314: legacy-cloud-providers: aws: Add support for consuming web #104870
• Automated cherry pick of #104845: e2e iperf2 change threshold to 10MBps = 80 Mbps #104865
• Automated cherry pick of #103532: Service: Fix semantics for Update wrt allocations #104673
• Automated cherry pick of #103050: Fix NodeAuthenticator tests in dual stack #104840
• Automated cherry pick of #100720: Fix buckets initialization #104514
• Automated cherry pick of #104384: fix: skip case sensitivity when checking Azure NSG rules #104447
• Automated cherry pick of #104279: Copy golang license to staging copies #104311
• Automated cherry pick of #104703: Fix the key missing issue for structured log #104719
• bump runc to 1.0.2 #104530
• Automated cherry pick of #104604: Don’t prematurely close reflectors in case of slow #104616
• Automated cherry pick of #103958: Set idle and readheader timeouts #103989
• Automated cherry pick of #104009: delete stale UDP conntrack entries for loadbalancer IPs #104151
• Automated cherry pick of #104253: Pass additional flags to subpath mount to avoid flakes in #104347
• Bug 2011460: UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005
• Bug 1995714: UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #895
• Bug 1994457: Update to kubernetes 1.21.4 #888
• Automated cherry pick of #102083: fix: delete non existing disk issue #102163
• Automated cherry pick of #104182: Avoid spurious calls to update/delete validation #104208
• Update to go1.16.7 #104201
• Automated cherry pick of #102576: kubelet: do not call RemoveAll on volumes directory for #103826
• Automated cherry pick of #103284: Fix the code is leaking the defaulting between unrelated pod #103676
• Automated cherry pick of #103160: Remove extra zone test #103405
• Automated cherry pick of #103019: Fix frameworkImpl.extenders being not set #103031
• Automated cherry pick of #101611: let objects without metadata pass through the managedFields #101649
• Automated cherry pick of #104135: Update configure-helper.sh #104179
• Automated cherry pick of #103794: feat: Provide IPv6 support for internal load balancer #104028
• Automated cherry pick of #104161 upstream release 1.21 #104190
• Automated cherry pick of #103997: Fix: ignore not a VMSS error for VMAS nodes in #104029
• Automated cherry pick of #103937: Fix disruptive subPath test failures #104044
• Automated cherry pick of #102539: Fix closing of decorated watcher channel on timeout #102541
• Automated cherry pick of #102928: Simplify use of the fake dynamic client #103614
• Automated cherry pick of #103895: Update to using apiserver-network-proxy v1.22 #103931
• Automated cherry pick of #100637: storage e2e: automate hostpath YAML updates, hostpath #102212: Update pd csi driver images to use v1 images (CSINode, #103920
• Automated cherry pick of #103831: disable aufs module #103927
• cherry-pick #100353: strip prefix ‘v’ in coredns version if exists #102905
• Automated cherry pick of #103823: Make CSR cleaner tolerate objects with invalid #103948
• Backport fix for flaky ESIPP test to 1.21 #103492
• Automated cherry pick of #103126 upstream release 1.21: Updated to use konnectivity client v0.0.21, and implemented placehold… #103699
• Cherry pick of #100110: Cherry pick #537 from cloud provider azure: Refresh VM cache when node is not found and #102935: fix: cleanup outdated routes #102983
• Cherry pick of #103470: fix: return empty VMAS name if using standalone VM #103599
• Automated cherry pick of #103733 upstream release 1.21 #103734
• Automated cherry pick of #101118 upstream release 1.21 #103712
• Automated cherry pick of #103235: Update debian-base image to buster-v1.8.0 #103488
• Update to go1.16.6 #103670
• Automated cherry pick of #103138: Loadbalancer IngressIP policy should be configured as non-DSR #103140
• Automated cherry pick of #103133 on 1.21: switch scheduler to generate the merge patch on pod status instead of the full pod #103279
• Automated cherry pick of #99680: fix error of setting negative value for containerLogMaxSize #102389
• Manual cherry pick of #103318: Bump SMD to v4.1.2 to pick up #102749 fix #103319
• Cherry pick of #102516: serviceOwnsFrontendIP shouldn’t report error when the public IP doesn’t match #102548
• Automated cherry pick of #102892: Do not throw error when we can’t get canonical path #102969
• Automated cherry pick of #102925: Fix Node Resources plugins score when there are pods with no #102994
• Automated cherry pick of #102584: Fix race in attachdetach tests #103051
• Automated cherry pick of #102845: Remove error wrap from logs #102852
• Automated cherry pick of #101592: chunk target operatation for aws targetGroup #101812
• Automated cherry pick of #102673: feat: remove ephemeral-storage etcd requirement #102705
• Automated cherry pick of #102788: client-go: reduce log level of reflector again #102800
• Update to go1.16.5 #102739
• Automated cherry pick of #102683: endpointslicemirroring controller mirror address status #102702
• Automated cherry pick of #100948: Avoid caching the VMSS instances whose network profile is nil #101825
• Cherry pick of #101752: fix: not tagging static public IP #101819
• Automated cherry pick of #102498: sched: fix a bug that a preemptor pod exists as a phantom #102667
• Automated cherry pick of #102306: Return UnschedulableAndUnresolvable instead of Error when #102514
• (scheduler e2e) Create balanced pods in parallel #102487
• Automated cherry pick of #102005: Azure: avoid setting cached Sku when updating VMSS and VMSS #102119
• Automated cherry pick of #101443: Add missing clientset to EBS storage e2e test #101956
• Automated cherry pick of #101857: fixed wrong warning in kube-proxy regarding topology aware #101939
• Automated cherry pick of #101615: fix removing pods from podTopologyHints mapping #101892
• Cherry pick of #101595: Update cos-gpu-installer image #101890
• Cherry pick of #101739: fix: avoid nil-pointer panic when checking the frontend IP configuration #101885
• Automated cherry pick of #101652: Add jitter to lease controller #101863
• Automated cherry pick of #100326: Fix watchForLockfileContention memory leak #101795
• Automated cherry pick of #102176: Fix VolumeAttachment garbage collection for migrated PVs #102456
• Revert “Cleanup portforward streams after their usage” [1.21] #102587
• Automated cherry pick of #102502: use subpath for coredns only for default repository #102506
• Automated cherry pick of #102213: Upgrade konnectivity-client for GRPC connection fixes #102273
• Automated cherry pick of #102157: kubeadm: remove e2e test for ClusterStatus #102358
• Automated cherry pick of #102377: Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml #102379
• Automated cherry pick of #102302: Update debian-iptables to buster-v1.6.1 #102340
• Automated cherry pick of #102027: Remove unnecessary quotes from get-kube scripts #102042
• Automated cherry pick of #102105: Respect annotation size limit for SSA last-applied. #102184
• Automated cherry pick of #102224: Fix expired unit test certs #102225
• Automated cherry pick of #102147: vendor: bump runc to rc95 #102196
• Automated cherry pick of #101358: Ref counting is only applicable to Remote endpoints #102001
• Automated cherry pick of #101737: Use CSI driver to determine unique name for migrated in-tree #101805
• Automated cherry pick of #101950: Make watch order conformance test reliable #101980
• Bug 1993754: UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… #940
• Bug 1998391: UPSTREAM: 104530: [1.21] bump runc to 1.0.2 #912
• Bug 1957133: do not throw error when we can’t get canonical path #854
• Bug 1981770: UPSTREAM: <drop>: bump(apiserver-library-go) #864
• Full changelog

insights-operator

• TBD: Gather status of the cephclusters.ceph.rook.io resources (#659) (#665) (#668) #659
• Bug 2077765: Gather namespace names with overlapping UIDs (#605) (#611) (#612) #605
• Bug 2033546: Gather all CostManagementMericsConfig definitions. (#525) (#569) #525
• Update OWNERS (#543) #543
• Bug 2027720: gather webhook configurations (#508) (#560) #508
• Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
• Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
• Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
• obfuscation ovn clusters bug (#523) #523
• Bug TBD: Gather installed PSP names (#489) (#490) #489
• Bug 1977342: Fix obfuscation translation table secret 4.8 (#467) #467
• Gather all MachineConfig definitions (#449) (#459) #449
• Bug 1974877: Add egress ips to anonymizer to 4.8 (#462) #462
• Bug 1982170: Set also the summary operation when updating status (#475) #475
• MemoryRecord name can be obfuscated & fix case of duplicate records (#444) (#453) #444
• Full changelog

ironic

• [OCP 4.8] Update OWNERS #279
• Bug 2088196: Backport weak eTag handling fix to OpenShift 4.8 #276
• Bug 2048672: Enable vMedia provisioning of Nokia servers #275
• Bug 2023765: Compare IPs using the short form of IPv6 address #233
• Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
• Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
• Bug 2003035: Sync sushy to include the latest bugfixes for 4.8 #214
• Bug 1991979: [4.8] Sync image with ironic #206
• Bug 1975137: [4.8] Sync image with the latest ironic code #187
• Full changelog

ironic-hardware-inventory-recorder

• Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
• Full changelog

ironic-inspector

• Bug 2023765: For inspector, compare IPs using the short form of IPv6 address #71
• Full changelog

ironic-ipa-downloader

• Bug 2100787: Include Fix discovering WWN/serial for devicemapper devices #94
• Bug 2070519: Multipath fix for passive paths #91
• [OCP 4.8] Update OWNERS #90
• Full changelog

ironic-machine-os-downloader

• Bug 2005805: Clear proxy env variables if go would have #72
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 2076251: Mitigate multiple CVEs #1435
• Bug 2078477: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1439
• Bug 2058750: [release-4.8] 2022-02-15 Security Advisory #1408
• Bug 2055911: bump openshift-sync to 1.0.53 #1392
• Bug 2044940: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1370
• Bug 2038960: bump sync plugin to 1.0.52 #1362
• Bug 2037348: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1360
• Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
• Bug 2008114: Upgrade Jenkins to 2.289.3 (and related fixes) #1324
• Full changelog

k8s-prometheus-adapter

• Bug 2002281: 4.8: pkg/resourceprovider: guard from negative metrics #55
• Full changelog

kube-proxy, sdn

• Bug 2063971: delete stale UDP conntrack entries for loadbalancer IPs #414
• Bug 2092166: Masquerade in cluster traffic that is marked for egress IP #435
• Remove some binaries that accidentally got committed #398
• Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
• Bug 2014166: Remove locking from EgressIPTracker.Ping #362
• Bug 2002290: [4.8] proxy: don’t re-check every userspace proxy rule on every change #347
• Bug 1987239: when assigning and releasing egressIP try more than once before failing #326
• Bug 1999946: improve SDN’s OVS healthcheck and logging #341
• Bug 1995871: Disable conntrack for vxlan traffic #337
• Updating ose-sdn builder & base images to be consistent with ART #255
• Updating kube-proxy builder & base images to be consistent with ART #256
• Full changelog

kube-storage-version-migrator

• Updating ose-kube-storage-version-migrator images to be consistent with ART #174
• Full changelog

kuryr-cni, kuryr-controller

• Bug 2037745: Improve retrieval of Trunks info #621
• Bug 2028307: [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN #607
• Bug 2028274: Ensure DOWN subports are cleaned up #606
• Bug 2022722: Make completed Pods Ports reusable #600
• Bug 2018232: Update TOX_CONSTRAINTS_FILE for stable/xena #587
• Bug 1995013: Remove ep_slices from klb on endpoint delete event #550
• Bug 1989550: Increase keystoneauth’s connection pool size #546
• Full changelog

libvirt-machine-controllers

• Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #217
• Full changelog

machine-api-operator

• Bug 2048496: Fix user-agent in vCenter sessions list #984
• Bug 2027896: [release-4.8] Add support for Azure Marketplace Images #970
• Bug 2026562: MaxUnhealthy should not be a string type #962
• Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
• Bug 1999585: [release-4.8] add alert for machine with long deletion phase #908
• Bug 2000038: Respect MaxUnhealthy limit for external remediation #910
• Bug 1993117: Make sure nodes don’t have attached volumes before vm deletion #903
• Bug 1977634: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #896
• Full changelog

machine-config-operator

• Bug 2108699: storage.conf: remove obsolete option override_kernel_check #3259
• Bug 2098274: Add KUBELET_NODEIP_HINT to nodeip-configuration #3192
• Bug 2078799: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3117
• Bug 2057544: daemon: Explicitly start rpm-ostreed, restart if we detect active txn #2967
• Bug 2062655: Fix bad cherry-pick at 9f7a7eb96 #3065
• Bug 2062655: Improvements for configure-ovs script #3004
• Bug 2025396: annotate rendered config with OCP version #2972
• Bug 2059330: ovs-configuration: use lower than NM default ethernet route metric #2974
• Bug 2058789: Prepend to search domains instead of replacing #2970
• Bug 2028854: Backport of SystemMemoryExceedsReservation alert rule #2956
• Bug 2032996: fixes 1 to 1 containerruntime config mapping #2877
• Bug 2053720: Avoid dynamically allocated port range for haproxy #2951
• Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
• Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
• Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
• Bug 2026085: Send WARN message to stderr #2836
• Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
• Bug 2016275: [on-prem] Set coredns bufsize to 512 #2807
• Bug 2011083: templates: Silence audit events from container infra by default #2793
• Bug 1985736: [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer #2692
• Bug 2000958: fixes 1 to 1 kubelet config mapping #2753
• Bug 1999531: Set timeoutSeconds for keepalived liveness probe #2741
• Bug 2004122: Set ovs syslog level to info #2762
• Bug 1973873: match tlsSecurityProfile doc with kubelet.conf file #2628
• Bug 2000500: bump SystemMemoryExceedsReservation alert threshold to 95% #2748
• Bug 1976110: configure-ovs: fix nondeterministic master in slave profiles #2644
• Bug 1985735: [ON-PREM] HAProxy - enable listening sockets retrieval from old processes #2691
• Bug 1998106: vSpehere: disable vmxnet3 tx csum offload #2736
• Bug 1995809: crio: complete crio default config #2724
• Bug 1993385: crio: use conmon from path #2714
• Bug 1975078: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2636
• Updating ose-machine-config-operator builder & base images to be consistent with ART #2484
• Full changelog

mdns-publisher

• Bug 1988145: Update zeroconf vendoring #35
• Full changelog

multus-admission-controller

• Updating ose-multus-admission-controller builder & base images to be consistent with ART #32
• Full changelog

multus-cni

• Updating multus-cni builder & base images to be consistent with ART #95
• Full changelog

multus-route-override-cni

• Updating ose-multus-route-override-cni builder & base images to be consistent with ART #12
• Full changelog

multus-whereabouts-ipam-cni

• Bug 2064860: Sync context improvements [backport 4.8] #90
• Bug 2028966: Whereabouts should reconcile IP addresses [backport 4.8] #78
• ip-reconciler: do not reconcile pods in Pending phase #166
• ip-reconciler: Add all non default interfaces to Pod IP list #147
• Add label app=whereabouts to ip-reconciler pod template #150
• Configurable sleep_for_race parameter #161
• e2e tests: fix currently broken setup on kind clusters #156
• ip-reconciler: remove kubeconfig from k8s client #159
• Fix reconciler spec #158
• Use k8snetworkplumbingwg repo instead of dougbtv in sources #123
• build, ip reconciler: have configurable logging #155
• build: enable e2e testing for podman #154
• Fix test to include error when IP pool total doesn’t equal assigned WB pod IPs #152
• added sleep-for-race option for IPAM #151
• Bug 2009497: Release on cancel, sync for 4.8 #70
• Add E2E test cases and execute with GH workflow #148
• Add total Add/Del timeout #142
• Release lease lock when LE ends #145
• propagate context timeout error #143
• Upload whereabouts binary as release asset #149
• Add support for CNI version #135
• readme: fix yaml paths #134
• Bug 1990113: Syncs with upstream for leader election [backport 4.8] #63
• Bump k8s api version #126
• fix: Skip default network in ip reconciler #128
• IP ranges cleanup #118
• Cherry pick overlapping ranges to master #120
• build: vendor leader election dependencies #124
• Add leader election #113
• build: update openshift build image to golang 1.15 #121
• Updates image push on release to refer to correct dockerfile location #122
• ippools schema: add podref #116
• Remove bigint code to fix starts-with-zero-ipv6-problem #89
• Fix github actions #93
• Change CI pipeline from travis CI to github actions #92
• Adds a login so we can pull images from the registry #91
• README incorrectly stated Whereabouts requires three parameters #90
• updated readme with instructions on how to install using helm3 #82
• The first example can drop the optional parameters #81
• Logic for IPv6 assignment should not omit the broadcast addresses #77
• Reduces required parameters by introducing flatfile configuration by default #69
• Removes error when deallocating IP errors out, instead just warns. #74
• Includes fix for excluding IPv6 ranges as well as unit test #73
• Adds the missing error/log/warn methods to the install-cni.sh #67
• whereabouts.kubeconfig wrong in IPv6 only env #47
• Add a more meaningful error for invalid CIDR #66
• Fixing wrong DNS-1123 name for some IPv6 addresses #61
• Specifiy image repo URL explicitly #56
• Change error message #54
• Full changelog

must-gather

• Bug 2092264: Add networking resources #309
• Bug 2057345: Fix ovn-nbctl commands for ipv6 #287
• Updating ose-must-gather builder & base images to be consistent with ART #221
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#57) #57
• Fix field selector (#52) #52
• Full changelog

oauth-apiserver

• Bug 2043808: IPs with leading zeros are still valid in the apiserver #74
• Full changelog

openshift-apiserver

• Add coreydaley as reviewer/approver for pkg/build #300
• Bug 2043808: IPs with leading zeros are still valid in the apiserver #280
• Bug 2053223: Fix importing images that have dots in their namespace #283
• Bug 2042732: Make OriginImageMutators aware of origin objects #271
• Bug 2020644: Image policy should mutate DeploymentConfigs #259
• Bug 1992639: revert incorrect ssh scp fix #241
• Full changelog

openshift-controller-manager

• Bug 2006793: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #206
• Full changelog

openstack-cinder-csi-driver-operator

• Bug 2049088: Explicitly set default value for ReclaimPolicy #71
• Full changelog

openstack-machine-controllers

• Bug 2064634: Ensure subnets belong to the queried network #223
• Bug 2000542: Adds Proxy to provider client http transport #199
• Bug 1985015: Eliminate instanceCreate volume leak #192
• Full changelog

operator-lifecycle-manager, operator-registry

• Bug 2074680: Emit CSV metric on startup #288
• Bug 2073963: Fix a bug in deletion of webhook service for replacement #281
• Bug 2030489: Remove oudated subscription update logic to improve resolution delay #222
• Bug 1996162: Check for pruned bundles on add in replaces mode #165
• Bug 1986476: resolver: remove legacy support for fallback parsing of CSVs #140
• Bug 1994038: clarify maxOpenShiftVersion upgrade error message #173
• Bug 1994038: Update kubebuilder installation in the build root dockerfile #174
• Bug 1994110: fix(openshift): drop z from next calculated y-stream #167
• Bug 1989779: installplans: retry crd updates on conflicts #156
• Bug 1989711: fix(openshift): block upgrades on invalid max properties (#2302) #155
• Bug 1990650: Add PriorityClass setting to registry pods for default CatalogSource (#2304) #158
• Bug 1986023: Translate legacy “bundle dependencies” to properties. #134
• Bug 1979525: OLM blocks minor OpenShift upgrades when incompatible optional operators are installed #120
• Full changelog

operator-marketplace

• Bug 1998938: Use client-go’s leader election implementation #421
• Bug 1990650: Add priorityclass annotation to default catalogsources #418
• Full changelog

ovirt-csi-driver

• Bug 2013945: pvc stuck on pending status when using preallocated storage domain #89
• Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #75
• Full changelog

ovirt-csi-driver-operator

• Bug 2062745: Increase timeouts for CSI driver #90
• Full changelog

ovirt-machine-controllers

• Bug 2046356: detach non-bootable disks before removing the VM #127
• Bug 1989676: correct IPAddress detection for OVNKubernetes #116
• Bug 1987182: allow auto pinning new names #115
• Full changelog

ovn-kubernetes

• Bug 2115039: [release-4.8] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode #1234
• Bug 2105655: egressIP: node retrieval failure is not respected, causes panic #1187
• Bug 2107645: Set the OVS port as transient #1197
• Bug 2105272: EGW: Clean Stale Conntrack Entries #1193
• Bug 2106089: Fix panics in DestroyNetworkPolicy if policy is nil #1184
• Bug 2084110: EgressIP NATs are not being cleared correctly from the logical router #1107
• Bug 2087227: enable exportloopref linter and fix violations #1097
• Bug 2070762: [release-4.8] Multiple ExGW cache validation/improvements #1019
• Bug 2077370: [release-4.8] fix ipv6 network policy #1047
• Bug 2062842: [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #1009
• Bug 2065303: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #998
• Bug 2070521: egressgw: fix deadlock due to behavior of RWLock #1018
• Bug 2063836: backport 2052975 to 4.8 #997
• Bug 2068509: EgressGW: only return unique elements from getRouteInfosForGateway() #1011
• Bug 2055379: [release-4.8] fixing network policy #4
• Bug 2065311: [release-4.8] Network Policy fixes #999
• Bug 2057557: Create iptables NAT rules also for loadbalancer services #967
• Bug 2058679: Bumps ovn2.13-20.12.0-195.el8fdp #979
• [release 4.8] Update project owners #992
• Bug 2057931: Fix podHandlerCache key #969
• Bug 2057152: Fix egress IP allocator sync #965
• Bug 2053611: Lock the reassignment procedure during node deletion to avoid races #970
• Bug 2054225: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #957
• Bug 2056975: Don’t return err when annotation cannot be unmarshalled #963
• Bug 2052966: [release-4.8] bump ovn to 20.12.0-193 #949
• Bug 2043757: Fix node connectivity to service backed by egress IP pods #922
• Bug 2042516: Fixes for shared to local gateway migration #916
• Bug 2037884: [4.8-backport] Fix nepol statefulset 4.8 #894
• Bug 2041767: Fix pod handlers and pod IP parsing for egress IP #912
• Bug 2039279: filter out KubeAPIAuth when logging CNI requests #897
• Bug 2021221: Add ovn-controller logical flow cache options #890
• Bug 2030465: Make config parsing more resilient for unknown fields #868
• Bug 2027873: [4.8z] Fixes race between node handler and pod sync #858
• Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
• Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
• Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
• Bug 2011391: [4.8] bump OVN to 20.12.0-183.el8fdp #783
• Bug 1986708: Add routes for pod: fail only after checking all the gw addresses / ips #774
• Bug 2005480: [4.8z] Remove waiting for namespace and namespace lock contention #760
• [release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses #661
• Bug 2004336: Ensure host interfaces are deleted by CNI #745
• Bug 2005464: [4.8z] Fixes skipping pods accidentally in retry #758
• Bug 2005357: [4.8z] Fixes misuse of pod annotations during update event #753
• Bug 1996739: Fix ensurePod to call addPodExternalGW only for annotation updates #752
• Bug 2004488: panic after EgressFirewall deletion and DNS record expiration #749
• Bug 2004269: Sync ECMP routes on startup and fixes stale ECMP routes #743
• Bug 1999638: Fix duplicate incrementing of subnet allocation metric #700
• Bug 1996729: NetworkPolicy: bulk-add pods to new policies (or on restart) #678
• Bug 2000214: Fix GetPortAddresses for HBO #711
• Bug 2001641: egressfirewall not set after upgrade #722
• Bug 1996201: Fixes cases of timed out while waiting for OVS port binding #686
• Bug 2001542: fix reserve joinSwitch LRP IPs #720
• Bug 2001363: [4.8z] Ensure client handling of canceled/dropped OVSDB monitor #718
• Bug 1999895: Revert “[release-4.8] fix reserve joinSwitch LRP IPs” #706
• Bug 1996965: Add quotes around nexthop and dst-ip fields #680
• Bug 1994937: Fix: sync egress IP for missed events on start-up #665
• Bug 1997049: fix reserve joinSwitch LRP IPs #681
• Bug 1985957: Backport ovnkube-trace requires ip package to be installed to 4.8 #656
• Bug 1988487: Fix lgw eip 4.8 #636
• Bug 1976241: Update existing policy ACLs on start #635
• Updating ose-ovn-kubernetes builder & base images to be consistent with ART #473
• Bug 1985514: Add v6 management interface address for host network policy #624
• Bug 1986573: Declare a maximum line length for batching #631
• Bug 1976644: Bump OVN to 20.12.0-140.el8fdp #591
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1979575: [4.8]: Add timeout to informers cache sync #132
• Full changelog

prometheus-node-exporter

• Bug 1984074: netclass: retrieve interface names and filter before parsing #91
• Full changelog

service-ca-operator

• Updating ose-service-ca-operator images to be consistent with ART #177
• Update go version to 1.16 #179
• Full changelog

telemeter

• Updating telemeter builder & base images to be consistent with ART #374
• Full changelog

tests

• Bug 1999288: [release-4.8]: bump openshift/kubernetes to the latest #26886
• Bug 2038876: [release-4.8] test: skip tests that won’t work behind a proxy automatically #26733
• Bug 1984275: Add renamed Prometheus test into skipped disconnected list #26344
• Bug 2033426: test/e2e/upgrade/adminack: Poll gates for duration of update #26704
• Bug 2033379: [release-4.8] remove perma-failing prometheus upgrade invariant #26698
• Bug 2027262: Create new-project without updating kubeconfig #26645
• Bug 2028815: Skipping Django Test until bug is fixed #26665
• Bug 2028021: Bump update time limit 4.8 #26657
• Bug 1929650: Increase OVN upgrade timeout by 15m #26654
• Bug 2025724: Add admin ack Upgradeable condition gate test #26635
• Bug 2020644: Add more tests for image policy #26584
• Bug 2019519: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26562
• fix: add proxy support to OAuthServer tests #26539
• Bug 2008114: Add role label to jenkins imagestream #26503
• Bug 2002552: Retry kubeconfig checks, when kube-apiserver is temporarily unavailable #26458
• Bug 1989402: Add tests required internet into Skipped:Disconnected list #26369
• Bug 1986259: Enable TestEndpointAdmission test only for OpenShift SDN #26351
• Re-enable cluster quota test #26234
• Bug 1978090: testPodSandboxCreation: skip sandbox errors for pods which were not deleted during network update #26297
• Bug 1981246: [4.8]: test/e2e: allow workload incorrectly spread alert #26319
• Full changelog

thanos

• Bug 1994156: dockerignore: remove vendor from ignored list #70
• Full changelog

vsphere-csi-driver-operator

• Bug 2021620: Close connection to vCenter API #51
• Full changelog

vsphere-problem-detector

• Bug 2036967: Deferred logout after checks are run #68
• Full changelog

---

View changelog in Markdown or change previous release: 4.8.484.8.474.8.464.8.454.8.444.8.434.8.424.8.414.8.404.8.394.8.384.8.374.8.364.8.354.8.344.8.334.8.324.8.314.8.304.8.294.8.284.8.274.8.264.8.254.8.244.8.234.8.224.8.214.8.204.8.194.8.184.8.174.8.164.8.154.8.144.8.134.8.124.8.114.8.104.8.94.8.84.8.74.8.64.8.54.8.44.8.34.8.24.8.14.8.04.8.0-rc.34.8.0-rc.24.8.0-rc.14.8.0-rc.04.8.0-fc.94.8.0-fc.84.8.0-fc.74.8.0-fc.64.8.0-fc.54.8.0-fc.44.8.0-fc.34.8.0-fc.24.8.0-fc.14.8.0-fc.04.7.604.7.594.7.584.7.574.7.564.7.554.7.544.7.534.7.524.7.514.7.504.7.494.7.484.7.474.7.464.7.454.7.444.7.434.7.424.7.414.7.404.7.394.7.384.7.374.7.364.7.354.7.344.7.334.7.324.7.314.7.304.7.294.7.284.7.274.7.264.7.254.7.244.7.234.7.224.7.214.7.204.7.194.7.184.7.174.7.164.7.154.7.144.7.134.7.124.7.114.7.104.7.94.7.84.7.74.7.64.7.54.7.44.7.34.7.24.7.14.7.04.7.0-rc.34.7.0-rc.24.7.0-rc.14.7.0-rc.04.7.0-fc.54.7.0-fc.44.7.0-fc.34.7.0-fc.24.7.0-fc.14.7.0-fc.04.6.624.6.614.6.604.6.594.6.584.6.574.6.564.6.554.6.544.6.534.6.524.6.514.6.504.6.494.6.484.6.474.6.464.6.454.6.444.6.434.6.424.6.414.6.404.6.394.6.384.6.374.6.364.6.354.6.344.6.334.6.324.6.314.6.304.6.294.6.284.6.274.6.264.6.254.6.244.6.234.6.224.6.214.6.204.6.194.6.184.6.174.6.164.6.154.6.144.6.134.6.124.6.114.6.104.6.94.6.84.6.74.6.64.6.54.6.44.6.34.6.24.6.14.6.04.6.0-rc.44.6.0-rc.34.6.0-rc.24.6.0-rc.14.6.0-rc.04.6.0-fc.94.6.0-fc.84.6.0-fc.74.6.0-fc.64.6.0-fc.54.6.0-fc.44.6.0-fc.3───4.13.0-0.nightly-2023-01-30-1112224.13.0-0.nightly-2023-01-30-0254494.13.0-0.nightly-2023-01-29-1856094.13.0-0.nightly-2023-01-29-0650294.13.0-0.nightly-2023-01-28-2212574.13.0-0.nightly-2023-01-28-1316464.13.0-0.nightly-2023-01-27-1651074.13.0-0.nightly-2023-01-27-0515374.13.0-0.nightly-2023-01-24-0619224.13.0-0.nightly-2023-01-17-1523264.13.0-0.nightly-2023-01-11-225449───4.13.0-0.ci-2023-01-30-1500334.13.0-0.ci-2023-01-30-0900334.13.0-0.ci-2023-01-30-0300334.13.0-0.ci-2023-01-29-2100334.13.0-0.ci-2023-01-29-1500334.13.0-0.ci-2023-01-29-0900334.13.0-0.ci-2023-01-27-1310324.13.0-0.ci-2023-01-27-0110324.13.0-0.ci-2023-01-26-1310324.13.0-0.ci-2023-01-25-1910324.13.0-0.ci-2023-01-24-011032───4.12.0-0.nightly-2023-01-30-0836484.12.0-0.nightly-2023-01-24-1504154.12.0-0.nightly-2023-01-24-0858354.12.0-0.nightly-2023-01-24-0130464.12.0-0.nightly-2023-01-23-1729254.12.0-0.nightly-2023-01-23-0907104.12.0-0.nightly-2023-01-21-0804494.12.0-0.nightly-2023-01-19-1107434.12.0-0.nightly-2023-01-18-2014204.12.0-0.nightly-2023-01-18-0526244.12.0-0.nightly-2023-01-17-185858───4.12.0-0.ci-2023-01-30-0819564.12.0-0.ci-2023-01-29-1606464.12.0-0.ci-2023-01-29-0338354.12.0-0.ci-2023-01-28-1329284.12.0-0.ci-2023-01-28-0040214.12.0-0.ci-2023-01-27-1144004.12.0-0.ci-2023-01-27-0526524.12.0-0.ci-2023-01-26-0323324.12.0-0.ci-2023-01-25-0923324.12.0-0.ci-2023-01-24-1523324.12.0-0.ci-2023-01-24-092332───4.11.0-0.nightly-2023-01-28-1134164.11.0-0.nightly-2023-01-28-0046124.11.0-0.nightly-2023-01-27-1153204.11.0-0.nightly-2023-01-26-1742004.11.0-0.nightly-2023-01-26-0059044.11.0-0.nightly-2023-01-25-0449314.11.0-0.nightly-2023-01-17-0834294.11.0-0.nightly-2023-01-16-1922264.11.0-0.nightly-2023-01-16-142951───4.11.0-0.ci-2023-01-30-0739104.11.0-0.ci-2023-01-28-0416254.11.0-0.ci-2023-01-27-1530044.11.0-0.ci-2023-01-27-0930044.11.0-0.ci-2023-01-26-1445514.11.0-0.ci-2023-01-26-0221254.11.0-0.ci-2023-01-25-1402074.11.0-0.ci-2023-01-24-1701404.11.0-0.ci-2023-01-23-2029004.11.0-0.ci-2023-01-23-0829004.11.0-0.ci-2023-01-21-024107───4.10.0-0.nightly-2023-01-30-0609054.10.0-0.nightly-2023-01-27-2013034.10.0-0.nightly-2023-01-26-1844144.10.0-0.nightly-2023-01-26-0135154.10.0-0.nightly-2023-01-24-0852244.10.0-0.nightly-2023-01-23-2340134.10.0-0.nightly-2023-01-23-185707───4.10.0-0.ci-2023-01-30-0432154.10.0-0.ci-2023-01-28-0038004.10.0-0.ci-2023-01-27-1453064.10.0-0.ci-2023-01-27-0307014.10.0-0.ci-2023-01-26-1522374.10.0-0.ci-2023-01-26-0543234.10.0-0.ci-2023-01-25-172250───4.9.0-0.nightly-2023-01-27-1819284.9.0-0.nightly-2023-01-26-0040094.9.0-0.nightly-2023-01-24-1613234.9.0-0.nightly-2023-01-24-1134444.9.0-0.nightly-2023-01-23-1854284.9.0-0.nightly-2023-01-23-1620324.9.0-0.nightly-2023-01-18-1143364.9.0-0.nightly-2023-01-16-1048344.9.0-0.nightly-2023-01-12-1004494.9.0-0.nightly-2023-01-11-123657───4.9.0-0.ci-2023-01-30-1409424.9.0-0.ci-2023-01-27-1616424.9.0-0.ci-2023-01-26-2151274.9.0-0.ci-2023-01-25-1848064.9.0-0.ci-2023-01-24-1843564.9.0-0.ci-2023-01-24-1449394.9.0-0.ci-2023-01-23-1210234.9.0-0.ci-2023-01-13-0308054.9.0-0.ci-2023-01-13-0238054.9.0-0.ci-2023-01-03-154517───4.8.0-0.nightly-2023-01-20-0354534.8.0-0.nightly-2023-01-20-0138094.8.0-0.nightly-2023-01-18-1133304.8.0-0.nightly-2023-01-17-1032304.8.0-0.nightly-2023-01-16-110402───4.8.0-0.ci-2023-01-30-1307464.8.0-0.ci-2023-01-30-0145564.8.0-0.ci-2023-01-26-2150274.8.0-0.ci-2023-01-26-1544094.8.0-0.ci-2023-01-26-0038144.8.0-0.ci-2023-01-23-1537574.8.0-0.ci-2023-01-23-1215184.8.0-0.ci-2023-01-20-2000294.8.0-0.ci-2023-01-20-1855124.8.0-0.ci-2023-01-04-1134294.8.0-0.ci-2023-01-03-134012───4.7.0-0.nightly-2023-01-28-0054404.7.0-0.nightly-2022-11-01-1719474.7.0-0.nightly-2022-10-31-1144174.7.0-0.nightly-2022-10-27-1239064.7.0-0.nightly-2022-10-17-0611324.7.0-0.nightly-2022-10-12-142149───4.7.0-0.ci-2023-01-26-1901374.7.0-0.ci-2023-01-25-2218474.7.0-0.ci-2023-01-25-2148474.7.0-0.ci-2022-12-19-1523324.7.0-0.ci-2022-12-19-1453324.7.0-0.ci-2022-12-14-0904074.7.0-0.ci-2022-12-14-0827394.7.0-0.ci-2022-12-13-1414274.7.0-0.ci-2022-12-09-193557───4.6.0-0.nightly-2022-11-17-1332454.6.0-0.nightly-2022-11-01-1643484.6.0-0.nightly-2022-10-27-0759414.6.0-0.nightly-2022-10-19-2319474.6.0-0.nightly-2022-10-12-040627───4.6.0-0.ci-2023-01-26-2035444.6.0-0.ci-2023-01-26-1958334.6.0-0.ci-2023-01-26-1822344.6.0-0.ci-2023-01-13-1026334.6.0-0.ci-2022-12-19-1526534.6.0-0.ci-2022-12-19-1456534.6.0-0.ci-2022-12-02-1750144.6.0-0.ci-2022-11-21-1446314.6.0-0.ci-2022-11-10-021001───4.13.0-ec.24.13.0-ec.14.13.0-ec.04.12.0-ec.54.12.0-ec.44.12.0-ec.34.12.0-ec.24.12.0-ec.14.12.0-ec.0

Source code for this page located on github