4.9.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.53-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.8.17, 4.8.18, 4.8.19, 4.8.20, 4.8.21, 4.8.22, 4.8.23, 4.8.24, 4.8.25, 4.8.26, 4.8.27, 4.8.28, 4.8.29, 4.8.30, 4.8.31, 4.8.32, 4.8.33, 4.8.34, 4.8.36, 4.8.37, 4.8.38, 4.8.39, 4.8.40, 4.8.41, 4.8.42, 4.8.43, 4.8.44, 4.8.45, 4.8.46, 4.8.47, 4.8.49, 4.8.51, 4.9.10, 4.9.11, 4.9.12, 4.9.13, 4.9.15, 4.9.17, 4.9.18, 4.9.19, 4.9.21, 4.9.22, 4.9.23, 4.9.24, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.32, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.39, 4.9.41, 4.9.42, 4.9.43, 4.9.44, 4.9.45, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.5, 4.9.6, 4.9.7, 4.9.8, 4.9.9

4.9.52 (changes) - F F F S S F F S S F F S S
4.9.51 (changes) - Success
4.9.50 (changes) - Success
4.9.40 (changes) - Success
4.9.38 (changes) - Failed
4.9.33 - Success
4.9.4 (changes) - Failed
4.9.1 (changes) - Success
4.9.0 (changes) - F F S F
4.8.54 (changes) - Failed Success
4.8.53 (changes) - Success
4.8.52 (changes) - Success
4.8.50 (changes) - Failed
4.8.48 (changes) - Success
4.8.35 (changes) - Success
4.8.16 (changes) - Failed
4.8.15 (changes) - Failed
4.8.14 (changes) - Failed

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.9.33

Created: 2022-12-01 00:16:10 +0000 UTC

Image Digest: sha256:50bed2a31fd04336df604c5af7c64584c067f80e7b94aa86656302dc7fb391a4

Release 4.9.53 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-11-30-174746

Components

Kubernetes upgraded from 1.22.8 to 1.22.15
Red Hat Enterprise Linux CoreOS upgraded from 49.84.202205050701-0 to 49.84.202211291357-0 (diff)

Rebuilt images without code change

aws-cloud-controller-manager git 18d82a6d sha256:6c96a2e7aba969ca2a7e4b6f1fa4330f94dda3b559ca8768594790d3d7397eea
aws-ebs-csi-driver-operator git 3bea487d sha256:90f9054fa7a633f668438fa26288ac620d917fc63a32c401db7e64e578101231
aws-pod-identity-webhook git 37a13282 sha256:32eb02ebff4f4b7056a0c0b5f369753e002d56efed82555f3ac3af714c82a560
azure-disk-csi-driver git ade73731 sha256:0e80226fd062875f73d51d8542513ddbe689cec1e4b03bd5a6a824bb97eb4ea2
azure-disk-csi-driver-operator git 15e474ce sha256:cfc834a58fc0d83f6e5436e365b210d4d3cea8a83669ef15057242be4b7c6cf5
cluster-autoscaler-operator git 69a74410 sha256:bb70b7dd29ba9361f05cdc832a35d86322b38bedb6e9b4d927c71c548a6ac244
cluster-bootstrap git 7e074a7d sha256:a9c05b35335d859463b58c89b3fae37ec19919084368b5a5ff46ea9d1bed6159
cluster-cloud-controller-manager-operator git 3712f8e1 sha256:30da751f4bcb61363e365dadb5cece21d7b64dc8ca09b3ade61ef7bd896f2abb
cluster-config-operator git a6176504 sha256:bae2e74a71695363336a0af4debb36d6c42860a44016bffd33b7d27e6b81ae2a
cluster-csi-snapshot-controller-operator git c750d4b4 sha256:a9659155bc0f100f70772cf3736013edc9b660178a51cb33ecc35dab86de1e9a
cluster-dns-operator git eedd0dc7 sha256:3269faff63e5f8294a4da4f4e1259d3b7feae8e102b8cc7f5540e6d63d0fbc5c
cluster-image-registry-operator git a2f7f709 sha256:6cbfaf522520102b41c5100399f116551db5093b338a3ff93f34457f6f541c30
cluster-kube-controller-manager-operator git 78b8e48b sha256:5ff2c858188ee1647712aaa359185049d5b7a46df1a1b02b9c76e09accf980a4
cluster-kube-scheduler-operator git 0cfc646b sha256:a51fbc732ab3600515f3805e9a90a15946a09c816a3b874fa1cda0405b2bf9dd
cluster-kube-storage-version-migrator-operator git 7245b0f0 sha256:efbbfb34ff7c82ac11fd40811b2d5b547eca9d6941470ff856b886eb57b6894f
cluster-machine-approver git 993ec9fe sha256:3799cd66590c1c2ef0026a09e4da71b4870cef09951dbaafb5485631d66628ae
cluster-openshift-controller-manager-operator git 3015cb84 sha256:534cd876223217b8cf656b8c0b4a7fe85a74b02bc8b140fe69d7576817c8935c
cluster-policy-controller git 8fbffaf2 sha256:46776564122af842b7365ea05c832f33103a7365552ce3cd22ce666c26c3896f
cluster-samples-operator git 9b0a9d76 sha256:a68a1df578492b0626d659e3d1e4a608dfe69143591074a6346177d9deb4d39e
configmap-reloader git b84b5bf9 sha256:6c30045a3bbfc43fe56a385189530fb5fd537caca81cd734f07d0705f12f9989
coredns git 3cb11c07 sha256:9e8662ef833c7f24b2be0009bdc8d900c88caddc9f25bffbd5aef1bc210a3269
csi-driver-manila git ddbc0e4f sha256:de77d36c8f9c23a36f1ac5bf4eaf03d7e8a168c7e9129495c2c3fb478c4132b4
csi-driver-nfs git 0e0c1739 sha256:a59f204ec1e696bd676676ab46a86bfa304de5b947390f55b4950779dd8a9183
csi-external-attacher git 0a1737c4 sha256:e449c348f99d6002e39bfff360507662a4db85d7503b991410f879b5ce4b4062
csi-external-provisioner git 7736e729 sha256:816f59644669cea2ab17d0cdeb0f65c5883fae7fa6b2c5134c9dcf02c65ad09e
csi-external-resizer git dad46d03 sha256:bce3a268c337381c7955929dda39332f844a386545caf552166fb5ad7a05c0f5
csi-external-snapshotter git 52ab8938 sha256:04b89d36943b8ea7386e9e86e04e2dcd81d38399a5b78ad94f8fce3b9030448b
csi-livenessprobe git c13c3a5f sha256:4328ef767e7fc9bbade62517389d82157e74a13bf3159931f75568e6ad198790
csi-node-driver-registrar git 3e02b07e sha256:930bc7827804bcb34a4d037b9bcdec174b579bb9e2d58150849d682049a86ecb
csi-snapshot-controller git 52ab8938 sha256:a75c7fc6a59a09be77be07b749d7df99a435980d138c4a732b799e846d6cb58c
csi-snapshot-validation-webhook git 52ab8938 sha256:1ab4a84b124d099edfee85723c1a7261b6aa3fea5e9cd1a7c27f3825339441fa
docker-builder git 1a32676c sha256:d50da01d569a0754fc2e97cbe980e446a2490ec021c239c461c02bde55a5c73a
driver-toolkit git 51a2f1ef sha256:c14b85d4f11acce4048c75a3f6dfbbb9a751ed333fbe38ff6c4997ba20d76eec
egress-router-cni git 099b7569 sha256:981d8cb7f2ea58a9c11bc9b9fde43fa8581e4b29a522b8be07276c3b5ff5d3f8
gcp-pd-csi-driver git 48d49f7f sha256:05dc7516e0f36764ab650f2dabebef037237ecc88c43e685484ca2861264be26
gcp-pd-csi-driver-operator git d8a891de sha256:c3d3475071acf20a2c31939a6819a8cacc02eadf746b9619643e5471a1bff37e
ironic-hardware-inventory-recorder git 8e2d1db6 sha256:50dd9fe8d152252d8f9f56934031aea26f1b211adfa2fa069419059d7ffc702c
ironic-inspector git 9474b758 sha256:db852916cfe94dc6d75949e2d78e83644755f774f75305668e201e47346b7b62
ironic-machine-os-downloader git 90b57223 sha256:e3e6d82bf75e42c33de12fd78e75b326dc4ba3e55c4ee653f2874d2cfabe48c2
ironic-static-ip-manager git d13dccb8 sha256:4421460f6376bb6d7da2ca030f02cb345f51e3d571d07e57aa5f911eda0e3659
kube-rbac-proxy git 58e09297 sha256:37e05f09b498b674fde0f9668dca6ead730b1413b2ca641e952203b895e7b558
kube-state-metrics git 6e41dbd4 sha256:ab2379d867edb537a164e66b43c0cdec780b7dc4fa86dfe2c7cf1b93a2a2bb38
kuryr-cni git 1e8c94f8 sha256:534162c6913ca36966741a9566be715b5416c3808aaef345d0068eb729734eaa
kuryr-controller git 1e8c94f8 sha256:8f978c73e07934a8241f8b1813e7b8272c86993c5feae3f918941ca5c93e4105
libvirt-machine-controllers git 59ae2edf sha256:808cf16fc707a9b64dba6cea8a7d37bf49706589803badc0d580ca5adf674546
machine-os-content sha256:a47f8068dc700f3c4782c1983c2142694f6356dc0ac6cedb9efec57d7f894c9e
mdns-publisher git 266597b3 sha256:c8f9209a66c96062ab6debd73b1c8641fef481dc0943b4c3345fb22112f4dcb3
multus-admission-controller git 3c28a57a sha256:721ad326568a8ae798a6f59ac36824879d910d36bb4eec4eed2289177524fd0c
multus-cni git c2499377 sha256:3b5e753c1c3ae138fcc46016f3bdbff83fcebf8b30f89090fa9e837b9cfda385
multus-networkpolicy git fd12fede sha256:146a800e403720eb0e8c6e03b976391178553fc811cd6461937c859f4efd8658
multus-whereabouts-ipam-cni git ddda41c6 sha256:7459b3d89433e97e5d5a73b20f80c68e89a6286d0a71d46053462cc2aef1c378
network-tools git ed0b846c sha256:0638314b6396228bee499b12fa294612f55c83549f05a19fc379eebff4cf2326
oauth-apiserver git 8b203f97 sha256:792adb8ea846a2694f3a9832425b0f1bd32b5c77f0a833d791741ef6669e18b3
oauth-proxy git 9ea1ebc8 sha256:2d035a898f0df792e8dab1c5ea4210c287d45f1548fcd7ead9570f5f73c3942e
oauth-server git 1ee9925b sha256:b836ba90178385de0bcc453277f3f73bfa7f0747447e2edd0e74280940804154
openshift-controller-manager git 79857a32 sha256:b76e18302ce28c66dfba0886f1072c29e70d600c16a5029699b110e2439a0637
openshift-state-metrics git 689af8b8 sha256:cc0363c54e2d8bd18166da71ed45ebc00c1202b482b047e00b2bfdff23f59ffc
openstack-cinder-csi-driver git ddbc0e4f sha256:d9b9cb60aa91afcc59e9bd97253d1a69ef6fe0a82af208dd791335aed34b362a
openstack-cloud-controller-manager git ddbc0e4f sha256:b1d7e81c6aad6b3fde4c6461e389498c74109a0f88fc4f0b476b72426b212b64
operator-marketplace git 85947272 sha256:86d90e5d75496897f26e3f0fdb3048643c0684f2c5f439dc896890ea47e851cb
ovirt-csi-driver git fe2a7fdf sha256:856db5c0b3808b188ba048d25de85c6dfc664cc08888f8b0da1bb6c56f9949b1
ovirt-machine-controllers git 15a6add2 sha256:c23425339af87fe9b4f5bf7e3473a62b3ded35f9e24a8d4040d8b2ca56055723
prom-label-proxy git 9f870bfa sha256:d1601c5cd655dda6b8c2df8dd7dfd1dab0190114d117c06fc42d2d72ec35a32a
prometheus git 3197fa71 sha256:eebdb1805df10b18cf1282476c2c7a0c3df853a6a647cec0539c2c21661476c1
prometheus-alertmanager git 579e3c68 sha256:1771caf813bc5f41d8465f2581e50324c3796188796caf90f3c69f2e1f5adfe8
prometheus-config-reloader git 170b0686 sha256:853ccd3b77f6c24e72360c0074ce6b5fe9faf1a243da97a20cb1ff21abad134c
prometheus-node-exporter git 1ab97f35 sha256:89341f24cf4732142208f1d2026a1715c91b98d55d39597b4a397ab67eeb4032
prometheus-operator git 170b0686 sha256:1112e07a8569fb4644ce7f648554b9bc17ddb9536f0db74ae0ee395847639abd
service-ca-operator git ab44f586 sha256:8e402cc6c4864f73b40ae27db1a823b6ae583d11151c2ec0f861819fc5b323d7
telemeter git 03842e05 sha256:ea7bd9b59147f5fe186f4a5839a50a242d151649b81fcd727e4c0b04c68f91e3
thanos git 996a5f0b sha256:029eeb8672fd8f22be0260e69efe426644f183ed38633dbfb2b9838e9c6ed919
vsphere-csi-driver git 4ece3d1b sha256:dba6fbc3422c322f9652c72460ef2d2781c0a021acbd3adb8b1de2a18bc210ce
vsphere-csi-driver-operator git 9f56afd3 sha256:fe22a791818d9629cbacfcd24e597e648f4d922fc6a905f19cd0c3b071601087
vsphere-csi-driver-syncer git 4ece3d1b sha256:45668ca3df01f78570838c1eb509041bf3925b3054d5156f8cfdc0950271378f
vsphere-problem-detector git 53290ea4 sha256:6922765656e2e392708c149c651b6c32eb097b95c2e479457699a64707fc5a74

aws-ebs-csi-driver

Bug 2103982: Fix build on ARM after rebase #204
Bug 2103982: Rebase to v1.4.0 #203
Full changelog

aws-machine-controllers

OCPBUGS-3326: Update map of supported aws instance types #452
OCPBUGS-2578: Fix go list for go1.18 #449
OCPBUGS-572: Fix panic when accessing nil machine annotations map #446
Bug 2111004: Validate unknown regions using AWS API #441
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2101: .dockerignore: enable OSBS2 builds #43
Full changelog

azure-machine-controllers

OCPBUGS-2581: Fix go list for go1.18 #264
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-1010: Download yq in upi installer containers #6316
OCPBUGS-250: Allow setting bootstrap kubelet ip #6240
Bug 2095320: bump RHCOS 4.9 bootimage metadata #6159
Bug 2009024: Delete all the ports from tagged Neutron networks. #6122
Bug 2098158: Bootstrap timeout #6025
Bug 2099741: Collect whole journal and netstat data #6036
Bug 2043298: bump RHCOS 4.9 boot images #5963
Bug 2087972: Set rc-manager=unmanaged for on-prem bootstrap #5926
Bug 2025862: Improve host role management during assets creation #5408
Full changelog

baremetal-machine-controllers

Bug 2100983: Uplift BMO to remove go-getter dependency #176
Update OWNERS #180
Full changelog

baremetal-operator

Bug 2100995: Uplift kustomize to v4 to remove go-getter dependency #235
Full changelog

baremetal-runtimecfg

Bug 2101794: Avoid kubernetes node port range #182
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2103913: [must-gather] Add options for multi-node, host-network capture #1191
Bug 2103910: Introduce an option to retrieve the rotated log files for a pod #1190
Bug 2092265: [inspect] Add namespace-scoped networking resources to inspect #1157
Full changelog

cloud-credential-operator

Update OWNERS to reflect reality #498
Full changelog

cluster-authentication-operator

Bug 2107027: only ever include certificates in the oauth-serving-cert CM #578
Bug 2037944: endpoints checker: check only the custom hostname if configured #531
Bug 2052467: Custom route HTTPS certificate SAN validation #545
Full changelog

cluster-autoscaler

Bug 2108949: Have VPA ignore phantom containers named “POD” #237
Full changelog

cluster-baremetal-operator

Bug 2101001: Uplift kustomize and BMO to remove go-getter dependency #289
OCPBUGS-1518: [release-4.9] Fix a few papercuts #292
Update with current OWNERS #296
Bug 2091747: Fix interpretation of Deployment Status Conditions #268
Full changelog

cluster-etcd-operator

OCPBUGS-2944: Add niceness to important etcd processes #959
OCPBUGS-2120: fix cert rotation on IP changes #945
OCPBUGS-614: ensure healthy quorum before config update #912
Bug 2102005: Upping defrag timeout to 1 minute #867
Bug 2095115: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #849
Bug 2086119: Add summary to etcd alert rules #826
Bug 2082316: Add new etcd members to reviewers, add Allen to approvers #818
Bug 2068084: manually disable defrag #810
Full changelog

cluster-ingress-operator

Bug 2100631: Fix flakey logic in haproxy timeout tests #795
OCPBUGS-1624: Fix removing custom created service in openshift-ingress with same name #831
Bug 2084336: Fix enabling PROXY protocol on an upgraded cluster #757
Bug 2097736: Fix loadBalancerServiceAnnotationsChanged check and update #786
Bug 2094054: Delete LoadBalancer-type service finalizer logic #771
Bug 2079517: Use externalTrafficPolicy: Cluster with OVN #713
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-2206: [release-4.9] Wire support for trusted service account issuers #1388
Full changelog

cluster-monitoring-operator

OCPBUGS-937: Give precedence to CMO config map proxy config #1762
OCPBUGS-641: grafana: bump to 7.5.11 #1753
Full changelog

cluster-network-operator

Bug 2101915: Make the use of the ip-reconciler cronjob opt-in [backport 4.9] #1501
OCPBUGS-2594: Make northd probe interval default to 10 seconds #1593
Bug 2095112: ovn: fix northd preStop command handling #1478
Bug OCPBUGS-1514: Kuryr: Bump timeoutSeconds for livenessProbe #1562
Bug 2101092: OCPVE-106 Customize rollout strategy to fix SNO upgrade #1500
Bug 2093978: Drop Node update permission for sdn-node #1476
Bug 2092265: Cleanup CNO relatedObjects #1468
Bug 2083079: Reserve port TCP/9104 for cluster-network-operator #1429
Bug 2085463: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1444
Full changelog

cluster-node-tuning-operator

Ignore Profile updates triggered by old operands (#361) #361
Full changelog

cluster-openshift-apiserver-operator

[release 4.10] Bug 2109399: openshift-apiserver pods never going NotReady #502
Full changelog

cluster-storage-operator

Bug 2102760: Add missing ibm cloud annotations to prometheus rbac #294
Bug 2084219: Fix RelatedObjects when an API is missing in the API server #281
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #38
Full changelog

cluster-version-operator

OCPBUGS-230: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #823
Bug 2108619: pkg/cvo: retain initial completed update history entry #799
Bug 2091806: pkg/cvo: Separate payload load from payload apply #786
Full changelog

console

OCPBUGS-2718: Update dependencies to the registry library and devfile parser #12192
Bug 2094244: Add ‘Unavailable’ status to clusteroperator status filter #11658
OCPBUGS-2008: Show already loaded catalog items after a timeout (3sec) #12136
OCPBUGS-2173: do not show NodesUpdateGroup if there are 0 nodes #12153
OCPBUGS-2576, OCPBUGS-2719: Fix backend test (devfile registry change), fix console e2e test (3scale operator name change) #12201
OCPBUGS-1956: fetch shared resource imagestreams based on labels instance or name #12126
OCPBUGS-1635: Update registry library dependency to pick up proxy support #12041
OCPBUGS-1981: Fix devfile registry assertion #12133
Bug 2114863: fix bug where Cluster update modal errors weren’t displa… #11926
Bug 2117608: use the correct Alertmanager tenancy proxy #11954
Bug 2077141: Fix Web Terminal availability check to verify operator is installed #11373
OCPBUGS-686: fix helm readme bug #11986
OCPBUGS-695: Input values in Instantiate Template are disappeared randomly in the developer console #12002
OCPBUGS-410: show Limit exceeded state for large number of nodes in topology #11973
Bug 2097724: Change Ping source spec.jsonData (deprecated) field to spec.data #11720
OCPBUGS-508: Backport CI test fix to relase 4.10 #11977
Bug 2089592: [release-4.9] Add debounce to tektonhub versions api call to avoid many calls #11553
Bug 2093910: change metrics queries based on metrics level configurations #11644
Bug 2097618: Avoid using ‘gp2’ hardcoded storage class #11716
Bug 2068203: Sample catalog is not displayed when one API call to the backend fails #11616
Bug 2084496: fix bug where “Update blocked” label incorrectly displa… #11484
Bug 2097554: Fix failing backend test after devfile registry update #11714
Bug 2082493: - Rolebindings page doesn’t load for normal users #11630
Bug 2084028: Improve Firehose cache, fix broken import #11554
Bug 2089847: Set dashboards timeout based on selected timespan #11561
Bug 2076690: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11362
Bug 2081389: Translate Extensions On Each Language Change #11430
Bug 2089546: [release-4.9] Eliminate use of lookaside cache and move to Cachito #11519
Bug 2084028: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11476
Bug 2030408: Disable replacement procedure from ODF UI #11483
Bug 2079231: fix bug where ClusterRole > RoleBindings did not display… #11405
Bug 2048631: missing volumes list in snapshot modal #10984
Bug 2046016: SnapShot with Disk Hot-plug hangs #10959
Full changelog

console-operator

Bug 2055494: Distinguish between route conditions #662
Bug 2055494: console-operator should report Upgradeable False when SAN-less certs are used #638
Full changelog

container-networking-plugins

Bug 2101664: Sysctl IFNAME [backport 4.9] #64
Full changelog

csi-driver-manila-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #152
Full changelog

docker-registry

Bug 2086864: Fix ICSP for subrepositories #333
Full changelog

etcd

OCPBUGS-2143: Rebase openshift/etcd 4.9 onto 3.5.5 #157
Update OWNERS #124
Full changelog

gcp-machine-controllers

Updating ose-gcp-machine-controllers images to be consistent with ART #166
Full changelog

grafana

OCPBUGS-641: bump Grafana to 7.5.11 #88
Full changelog

haproxy-router

OCPBUGS-1620: Fix gap in router’s handling of graceful shutdowns. #418
OCPBUGS-1338: HAProxy: enable PROXY protocol for all listeners #416
Bug 2010227: HTTPS redirect happens even if there is a more specific http-only route #367
Full changelog

hyperkube, pod

Bug 2101345: bump to k8s 1.22.15 #1383
Bug 2106655: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1325
Bug 2083554: UPSTREAM: 109933: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1256
Bug 2105663: UPSTREAM: <carry>: update list of deprecated apis #1316
[release 4.9] Bug Bug 2106962: UPSTREAM: <carry>: use correct base image for testing #1321
Bug 2075704: Backport 107821 and 107831 #1267
Bug 2075704: Revert Backport 107821 and 107831 #1266
Bug 2075704: Backport 107821 and 107831 #1242
Full changelog

insights-operator

OCPBUGS-443 Gather status of the cephclusters.ceph.rook.io resources (#659) (#665) #659
Bug 2083467: Fix the clusteroperator conditions values when IO is degraded (#623) #623
Full changelog

ironic

[OCP 4.9] Update OWNERS #278
Bug 2088319: Backport weak eTag handling fix to OpenShift 4.9 #277
Bug 2082103: Enable vMedia provisioning of Nokia servers #274
Full changelog

ironic-ipa-downloader

Bug 2100786: Include Fix discovering WWN/serial for devicemapper devices #93
Bug 2089313: Multipath fix for passive paths #92
[OCP 4.9] Update OWNERS #89
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-3698: [release-4.9] Update OWNERS #1520
OCPBUGS-3627: Bump jenkins version to 2.361.1 #1515
OCPBUGS-3173: Add glibc-langpack-en package in agent-base image #1512
OCPBUGS-474: CVE Mitigations #1481
OCPBUGS-1757: Install glibc language package to remove setLocale warning #1488
OCPBUGS-1811: update install plugins script #1489
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter images to be consistent with ART #50
Full changelog

keepalived-ipfailover

Updating ose-egress-http-proxy images to be consistent with ART #91
Full changelog

kube-proxy, sdn

OCPBUGS-2204: Fix DNS endpoint hack to prefer local instead of forcing it #468
Bug 2093978: Remove node-tainting for too-small MTU #436
Bug 2090624: Masquerade in cluster traffic that is marked for egress IP #433
Bug 2063970: delete stale UDP conntrack entries for loadbalancer IPs #413
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator images to be consistent with ART #179
Full changelog

machine-api-operator

Bug 2111004: Add DescribeRegions permission for aws controller #1048
Full changelog

machine-config-operator

OCPBUGS-3200: configure-ovs: avoid using ‘ip -j’ unavailable in RHEL7 #3407
OCPBUGS-2814: Make sure there is a search domain in resolv.conf #3385
Bug 2096792: mcd pull service: use cp instead of cat to copy MCD on host #3187
OCPBUGS-288: configure-ovs: clone inactive autoconnect slaves #3296
OCPBUGS-420: Fix problem with retaining data in string array in piped while loop #3300
Bug 2101794: Avoid kubernetes node port range #3255
Bug 2108538: configure-ovs: improve handling of static ip and mac address configuration #3254
Bug 2098099: configure-ovs: clone connection to avoid selinux problems #3188
Bug 2089763: configure-ovs: persist profiles after auto-connect has been set #3183
Bug 2089763: configure-ovs: avoid restarting NetworkManager #3160
Bug 2071689: lib/resourcemerge: handle container env var deletions #3057
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #23
Full changelog

must-gather

OCPBUGS-2261: [release-4.9] Collect rotated log files #331
Bug 2108892: Add timeout to oc cp command to fix must-gather delays when routers are terminating #324
Bug 2092265: Add networking resources #308
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#56) #56
Fix field selector (#51) #51
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #299
Full changelog

openstack-cinder-csi-driver-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #91
Full changelog

openstack-machine-controllers

Bug 2077381: Fix InstanceCreate port & trunk cleanup #234
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-570: [release-4.9] remove broken thread-safety (#2697) #372
OCPBUGS-459: fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #371
Bug 2102559: opm bug fix #328
Full changelog

ovirt-csi-driver-operator

Bug 2024491: Align manifest dir with storage operator #78
Full changelog

ovn-kubernetes

Bug 2115926: Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected #1235
OCPBUGS-811: [Release 4.9] correct creation and update of egressFirewall #1261
Bug OCPBUGS-574: EgressGW: don’t error out trying to add SPK when a pod without ip exists #1252
Bug 2090315: Remove conntrack entries after rules #1220
Bug 2115845: [release-4.9] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode #1233
Bug 2096802: duplicated IPs can be assigned to multiple Pods #1136
Bug 2105654: egressIP: node retrieval failure is not respected, causes panic #1186
Bug 2105266: EGW: Clean Stale Conntrack Entries #1192
Bug 2097157: Bumps OVN to 21.12.0-58.el8fdp #1140
Bug 2105277: Fix panics in DestroyNetworkPolicy if policy is nil #1183
Bug 2088630: EgressIP NATs are not being cleared correctly from the logical router #1103
Bug 2083239: [Downstream-only][4.9-only] Always add complete efw ACL rules #1088
Bug 2087226: enable exportloopref linter and fix violations #1096
Bug 2065782: [release-4.9][backport] Fix cleaning VF representor ports #1002
Full changelog

tests

disruption checking is disabled for prior releases because we lack a … #27473
OCPBUGS-1967: allow 2.5% disruption for 4.9 controlplane availability test #27465
OCPBUGS-1052: allow frontends to tolerate 2.5% disruption during upgrades #27434
Bug 2101429: test: switch to testing CapBnd over CapInh #27279
Bug 2064800: skip imageregistry serial test on disconnected environments #27189
Bug 2077167: disable unidling test failing under ovn-k #27172
Bug 2087230: disable flaky unidling test #27150
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github