4.9.57

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.57-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.8.17, 4.8.19, 4.8.21, 4.8.22, 4.8.23, 4.8.24, 4.8.25, 4.8.26, 4.8.28, 4.8.29, 4.8.30, 4.8.31, 4.8.32, 4.8.33, 4.8.34, 4.8.35, 4.8.36, 4.8.37, 4.8.38, 4.8.39, 4.8.40, 4.8.41, 4.8.42, 4.8.43, 4.8.44, 4.8.45, 4.8.46, 4.8.47, 4.8.48, 4.8.49, 4.8.50, 4.8.51, 4.8.52, 4.8.53, 4.8.54, 4.9.10, 4.9.11, 4.9.12, 4.9.13, 4.9.15, 4.9.17, 4.9.18, 4.9.19, 4.9.21, 4.9.22, 4.9.23, 4.9.24, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.32, 4.9.33, 4.9.35, 4.9.36, 4.9.37, 4.9.39, 4.9.40, 4.9.41, 4.9.42, 4.9.44, 4.9.45, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.5, 4.9.50, 4.9.51, 4.9.52, 4.9.53, 4.9.6, 4.9.7, 4.9.8, 4.9.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.9.34

Created: 2023-03-01 09:11:53 +0000 UTC

Image Digest: sha256:7c084a62ebc510ec2b2207bf11c686b751c29495affae23ac29e39acbe090e3f

Release 4.9.57 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2023-02-28-091622

Components

Kubernetes upgraded from 1.22.8 to 1.22.15
Red Hat Enterprise Linux CoreOS upgraded from 49.84.202205132131-0 to 49.84.202302111038-0 (diff)

Rebuilt images without code change

aws-cloud-controller-manager git 18d82a6d sha256:97fd4bff9ca9a19460a8d67ccf37d0bb7a2398087962a29935d9f2c36bf02a42
aws-ebs-csi-driver-operator git 3bea487d sha256:21b086edb9d935b9765711ceb3616fb4431da1c494c5e7746e4ef956a076e8ea
aws-pod-identity-webhook git 37a13282 sha256:f6e88176b54721f9421d73eb3123bc9fad1af87e149961c02cab1b78e470ac2b
azure-disk-csi-driver git ade73731 sha256:95739aaadb74d1d6fdff3c0ae41e9e270842947b2bb6ebc68ce1e28595990400
azure-disk-csi-driver-operator git 15e474ce sha256:bef22c4c05c575247e208410c1519613dd3c18faa8238ef76d5476f306c84b1a
cluster-autoscaler-operator git 69a74410 sha256:bfa2123ac10674245d30b301e46529370ea482c78135659f221e21c88bb3fd43
cluster-bootstrap git 7e074a7d sha256:df20c93c9464e0950fd3d844423c2afa33249a696550e9f7e8ef4fb1478775f6
cluster-cloud-controller-manager-operator git 3712f8e1 sha256:2c3df7bb893b249faaad57d7d84c3eba0bf295873ce32d355639a697c1dd3dd0
cluster-config-operator git a6176504 sha256:61c9ff1614f80185de801aede34024a22b0128ef7f416c9d596f45a63bbe1b29
cluster-csi-snapshot-controller-operator git c750d4b4 sha256:e8b52a46d9b44b3888d3efb0b2b0e45c6ee7ef4ee1e89d7e31fda44e0289c56d
cluster-dns-operator git eedd0dc7 sha256:c735bdaa8156e9c2270a56462906e29a467c6ca9d79bd9cc81f0d9b1e030a125
cluster-kube-controller-manager-operator git 78b8e48b sha256:1290abdf4c511f0e64d5f96a7f1e926cfecc87145cfd8914672aad04a2b44338
cluster-kube-scheduler-operator git 0cfc646b sha256:12ec0dae8ad1866424b37b46f473f71cf2393f839ac3da2b50eead97e65bcdb8
cluster-kube-storage-version-migrator-operator git 7245b0f0 sha256:59c6b39a2746932c0c23409af9aadb31ffd85cd89ca671d0a0a1632a8a4d0f96
cluster-machine-approver git 993ec9fe sha256:8a4c331e8e3356340e821375be9ae02f59e8a4bb2b1201fc69c398d2cfd06ae7
cluster-node-tuning-operator git cadc2f1d sha256:7a4474fcbe045ee9fd921aa5301acd53c2cccfdd51d7b94c34df2224b4e34105
cluster-openshift-controller-manager-operator git 3015cb84 sha256:09a8f0e581b29bae8bdcb40a64e829943ac20fb1810da86f104f5eee0fe73184
cluster-policy-controller git 8fbffaf2 sha256:ba58de9486d05c9dcf1853d5e6e3deb76401d28532c6f9ecf826f7c55451c20c
cluster-samples-operator git 9b0a9d76 sha256:17accde96ea1513c1f5a0ec0d940437400527c8cdcec5c0b9d4f41d44d832db2
csi-driver-nfs git 0e0c1739 sha256:d37fc1cb5a95392a4cf249e55c515c03ee9d21b75736459e0319ded69965f0f9
csi-external-attacher git 0a1737c4 sha256:8ac6a0738ffe98b5eea49e132920194aaeda08be602a9cc8d7e13254d9ab91c3
csi-external-provisioner git 7736e729 sha256:1c77759e6c55a107309fe596faf6ecfd3e921f888d0e415f4433c0bf4d8c1354
csi-external-resizer git dad46d03 sha256:906abc070c3134b43bb0f1fe866d36483f4d755b8151c3661c722ec33c85b2a0
csi-external-snapshotter git 52ab8938 sha256:649416cd25577675a82812d7885d2662807dfc52377619521d52fbbe7062ce2f
csi-livenessprobe git c13c3a5f sha256:6382284e5bcbec0b5ba0d5bcd9689b410fae2c9e5560d96091c24c9cf8752f87
csi-node-driver-registrar git 3e02b07e sha256:c81b6be335631dd4a5ff590e73e494ac2fc841045d9a46c0c8437140cde970bc
csi-snapshot-controller git 52ab8938 sha256:5bcddd6c09c1673e1bc18b063f5f51a20d23d61da338a78503121e88ece108c8
csi-snapshot-validation-webhook git 52ab8938 sha256:126f7539d7b7fed6714ab52dabc98b8e1b16113c40a05a7720b2f743dd47bc2b
docker-builder git 1a32676c sha256:01beff02e16695cd6d5577dc8c2601545cac06893b6d7feb257ec51a97ba9c1e
driver-toolkit git 51a2f1ef sha256:3f5dca9e9d09fead9dbe7928744e303d8c29251d15872fe62cc5c51cea4b700c
egress-router-cni git 099b7569 sha256:2296a648ee0f82c1f3b2be37c5d04bed46bbac52fcc59114de7fb0770ab7b38d
gcp-pd-csi-driver git 48d49f7f sha256:03a95c18e265fb278aaf92d0addb3f71c2af7dfaa2727f46e3fa9baeaf8f7ee8
gcp-pd-csi-driver-operator git d8a891de sha256:848020220d4c90f67846107a71de5cbf1ec13870c9fb7c45eb89726468e0d78e
ironic-hardware-inventory-recorder git 8e2d1db6 sha256:f2ba81cddb2bd49b2052b1b8ced21d3f92686119f509c32b5859aeb21b366363
ironic-inspector git 9474b758 sha256:b7719ac8d5f5c332c8afed64a09ab5cc549782cbfe095810d6120a4cfe6628d6
ironic-machine-os-downloader git 90b57223 sha256:a13fb6d4f05ea5f872f4cc541ac3404940a9c5459fb99fafdb26098441d253b0
ironic-static-ip-manager git d13dccb8 sha256:7ef83071984e9441cf19cef828576741cbee87f09fc058bb1a2f8b0172ce3fe1
kube-rbac-proxy git 58e09297 sha256:bb1f21ce071f423edd110d8ed860db0251fdf277988f5a6009bbb0ea62aaa17b
kube-state-metrics git 6e41dbd4 sha256:0e822fcce5d5238cee5ad7a5cb2bc585c315c9663d3b3b7c2c068346281542e5
kuryr-cni git 1e8c94f8 sha256:64abe9dade4b281544ee9dbae8ac15d8286eff101ed78c987f0339af656fca0b
kuryr-controller git 1e8c94f8 sha256:9cc498823da81f89e2303c0c8a0b8c430434b6432421eda1f8ff8fc83d3e526b
libvirt-machine-controllers git 59ae2edf sha256:15b0dd666619a201e9f28f9765e3a855e495b29ec453acbfdb4a096b19abc316
machine-os-content sha256:a4b5f4ffd93c0dbc62c77d339330174cf469608f93fff02e6333772ba0ba307c
mdns-publisher git 266597b3 sha256:625dbea9e200d453d77bd3f448b7c44167217968ff474bec6eb4a766f67cdc77
multus-admission-controller git 3c28a57a sha256:8e1bb2a52e90bd154417d4a961d4275541feb1f714be67f65f7a3eb1cfc6789b
multus-networkpolicy git fd12fede sha256:1272d69c606635e31fb02e370d0834f6d06125f28078904d483fbb21bf773b3e
multus-whereabouts-ipam-cni git ddda41c6 sha256:27be09764c842a955dc84d584450ed91b4c30847d5a8353d97ea79f5ceff1ef9
network-tools git ed0b846c sha256:e64d125c209bdd7bf0ee85bd118273b9063bd0ed1430ae7fa9c2d1abd4953db4
oauth-apiserver git 8b203f97 sha256:40651d05970b850baa1e58192ffd47a2e92298b3d90002b6e1b7de38e5e893ad
oauth-proxy git 9ea1ebc8 sha256:14bc1d89bedc991d9508cfc141deb5b589f1dd14caad8ff7580a7c5eeb9be331
oauth-server git 1ee9925b sha256:88d657089815ba803d290072cb1b5adbab39aa9e20ed97b0ea54859ae13e0b27
openshift-controller-manager git 79857a32 sha256:233a52fc7ba9b5ca96f9c934c35d81eab80963855c5e40dca50ac3b1c3c54e44
openshift-state-metrics git 689af8b8 sha256:9d928d965fd20d43ffb6494905ff3b14bf55baaa22186ebb884a48d792048bbf
operator-marketplace git 85947272 sha256:681265ef32ccb9ec4e3a00c31dd200013ca6d2ae0de12ab67c0203f7365b6b36
ovirt-csi-driver git fe2a7fdf sha256:12e736e0d8916c8273d4a5e1303a82cb51ed99670f9eeff603649a3396c9e1df
ovirt-csi-driver-operator git 5ea2970a sha256:6810d356e1550ff71643ae70d7aff6c3b342bf9e3d04429617435e16d615802b
ovirt-machine-controllers git 15a6add2 sha256:8d613732507194c00fba08330c53e725ea6a7afb5d752801766df73951b5a80f
prom-label-proxy git 9f870bfa sha256:4410dc9ff4c25b7f62d3abdd50da379fe5702e2e2d9b6a8464b3bcf41beed6d2
prometheus git 3197fa71 sha256:abf3575f5e1c93b21129661e16c2fc4d30cf29dd06e326db392681f6b8969464
prometheus-alertmanager git 579e3c68 sha256:f18b33e0f92935556a6ff489bcdea020dfafb319c942ee8b43ceae30a44f4371
prometheus-config-reloader git 170b0686 sha256:4e2fbbe138d02583bbc141abc549a5e277421c865729989950bf394c3985f03a
prometheus-node-exporter git 1ab97f35 sha256:911626c926d731bb72fd37312dec146e3eb0a66297b785e37192a052b06461d5
prometheus-operator git 170b0686 sha256:628d7d2312f995724f1b8509a169a2b7f1fae6e291be5a28d866d6607a6ddf4e
service-ca-operator git ab44f586 sha256:721529a127ce9ea2ccfa979638f10821d039d5c3628a2a893e9d03151b592e96
telemeter git 03842e05 sha256:8144b1899c2e1aba2eff9077e349bc8d5537307d027c1f334f5e64fac0af681f
thanos git 996a5f0b sha256:205fc545cb2ace58e1b8f4f82190df6894fb43bbc2a42388fbd3e561cc6c2d75
vsphere-csi-driver git 4ece3d1b sha256:2e23960ffac66a4a990afab623a9263c2631c426c4ce8c0def7f38cf50212e62
vsphere-csi-driver-operator git 9f56afd3 sha256:afd864dc79a083152020d2b8cad8515422b4447882cd192db9905c8af92abb9f
vsphere-csi-driver-syncer git 4ece3d1b sha256:6e9a41332aa17f149d5ef1b88a303e8a3aaacb75e036122118435083b8a49902
vsphere-problem-detector git 53290ea4 sha256:b875bbe676413d9de923026b371bcb1bf48b930fa22799b0042ba9040e330dfa

aws-ebs-csi-driver

Bug 2103982: Fix build on ARM after rebase #204
Bug 2103982: Rebase to v1.4.0 #203
Full changelog

aws-machine-controllers

OCPBUGS-3326: Update map of supported aws instance types #452
OCPBUGS-2578: Fix go list for go1.18 #449
OCPBUGS-572: Fix panic when accessing nil machine annotations map #446
Bug 2111004: Validate unknown regions using AWS API #441
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2101: .dockerignore: enable OSBS2 builds #43
Full changelog

azure-machine-controllers

OCPBUGS-2581: Fix go list for go1.18 #264
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-6086: OpenStack: Force JSON content-type in Swift #6787
Bug 2101013: Release 4.9 go getter update #6381
OCPBUGS-1010: Download yq in upi installer containers #6316
OCPBUGS-250: Allow setting bootstrap kubelet ip #6240
Bug 2095320: bump RHCOS 4.9 bootimage metadata #6159
Bug 2009024: Delete all the ports from tagged Neutron networks. #6122
Bug 2098158: Bootstrap timeout #6025
Bug 2099741: Collect whole journal and netstat data #6036
Bug 2043298: bump RHCOS 4.9 boot images #5963
Bug 2087972: Set rc-manager=unmanaged for on-prem bootstrap #5926
Bug 2025862: Improve host role management during assets creation #5408
Full changelog

baremetal-machine-controllers

Bug 2100983: Uplift BMO to remove go-getter dependency #176
Update OWNERS #180
Full changelog

baremetal-operator

Bug 2100995: Uplift kustomize to v4 to remove go-getter dependency #235
Full changelog

baremetal-runtimecfg

Bug 2101794: Avoid kubernetes node port range #182
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-3969: set proper pod security ns labels #1294
Bug 2103913: [must-gather] Add options for multi-node, host-network capture #1191
Bug 2103910: Introduce an option to retrieve the rotated log files for a pod #1190
Bug 2092265: [inspect] Add namespace-scoped networking resources to inspect #1157
Full changelog

cloud-credential-operator

Update OWNERS to reflect reality #498
Full changelog

cluster-authentication-operator

Bug 2107027: only ever include certificates in the oauth-serving-cert CM #578
Bug 2037944: endpoints checker: check only the custom hostname if configured #531
Bug 2052467: Custom route HTTPS certificate SAN validation #545
Full changelog

cluster-autoscaler

Bug 2108949: Have VPA ignore phantom containers named “POD” #237
Full changelog

cluster-baremetal-operator

Bug 2101001: Uplift kustomize and BMO to remove go-getter dependency #289
OCPBUGS-1518: [release-4.9] Fix a few papercuts #292
Update with current OWNERS #296
Bug 2091747: Fix interpretation of Deployment Status Conditions #268
Full changelog

cluster-etcd-operator

OCPBUGS-5554: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #983
OCPBUGS-2944: Add niceness to important etcd processes #959
OCPBUGS-2120: fix cert rotation on IP changes #945
OCPBUGS-614: ensure healthy quorum before config update #912
Bug 2102005: Upping defrag timeout to 1 minute #867
Bug 2095115: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #849
Bug 2086119: Add summary to etcd alert rules #826
Full changelog

cluster-image-registry-operator

OCPBUGS-7407: OpenStack: Add support for Proxy #841
OCPBUGS-7371: swift: Retry connecting to OpenStack #839
Full changelog

cluster-ingress-operator

OCPBUGS-4881: Update CRLs when they expire #870
Bug 2100631: Fix flakey logic in haproxy timeout tests #795
OCPBUGS-1624: Fix removing custom created service in openshift-ingress with same name #831
Bug 2084336: Fix enabling PROXY protocol on an upgraded cluster #757
Bug 2097736: Fix loadBalancerServiceAnnotationsChanged check and update #786
Bug 2094054: Delete LoadBalancer-type service finalizer logic #771
Bug 2079517: Use externalTrafficPolicy: Cluster with OVN #713
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-2206: [release-4.9] Wire support for trusted service account issuers #1388
Full changelog

cluster-monitoring-operator

OCPBUGS-937: Give precedence to CMO config map proxy config #1762
OCPBUGS-641: grafana: bump to 7.5.11 #1753
Full changelog

cluster-network-operator

OCPBUGS-5574: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1683
OCPBUGS-4788: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1664
Jira OCPBUGS-3854: IPsec: Fix broken counter++ expression #1653
Bug 2101915: Make the use of the ip-reconciler cronjob opt-in [backport 4.9] #1501
OCPBUGS-2594: Make northd probe interval default to 10 seconds #1593
Bug 2095112: ovn: fix northd preStop command handling #1478
Bug OCPBUGS-1514: Kuryr: Bump timeoutSeconds for livenessProbe #1562
Bug 2101092: OCPVE-106 Customize rollout strategy to fix SNO upgrade #1500
Bug 2093978: Drop Node update permission for sdn-node #1476
Bug 2092265: Cleanup CNO relatedObjects #1468
Bug 2083079: Reserve port TCP/9104 for cluster-network-operator #1429
Bug 2085463: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1444
Full changelog

cluster-openshift-apiserver-operator

[release 4.10] Bug 2109399: openshift-apiserver pods never going NotReady #502
Full changelog

cluster-storage-operator

Bug 2102760: Add missing ibm cloud annotations to prometheus rbac #294
Bug 2084219: Fix RelatedObjects when an API is missing in the API server #281
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #38
Full changelog

cluster-version-operator

OCPBUGS-230: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #823
Bug 2108619: pkg/cvo: retain initial completed update history entry #799
Bug 2091806: pkg/cvo: Separate payload load from payload apply #786
Full changelog

configmap-reloader

OCPBUGS-6537: go.mod: update github.com/prometheus/client_golang to v1.11.0 #50
Full changelog

console

OCPBUGS-53: Non-existing link in the “Learn more about OpenShift update channels” in “Select Channel” pop-up. #12440
OCPBUGS-6694: Fix NPE when displaying CSV with incomplete information #12482
Bug 2105912: Fix create-namespace e2e test with updated 3scale operator #11813
OCPBUGS-3886: Add checks for pods in hpaPodRingLabel #12281
OCPBUGS-2718: Update dependencies to the registry library and devfile parser #12192
Bug 2094244: Add ‘Unavailable’ status to clusteroperator status filter #11658
OCPBUGS-2008: Show already loaded catalog items after a timeout (3sec) #12136
OCPBUGS-2173: do not show NodesUpdateGroup if there are 0 nodes #12153
OCPBUGS-2576, OCPBUGS-2719: Fix backend test (devfile registry change), fix console e2e test (3scale operator name change) #12201
OCPBUGS-1956: fetch shared resource imagestreams based on labels instance or name #12126
OCPBUGS-1635: Update registry library dependency to pick up proxy support #12041
OCPBUGS-1981: Fix devfile registry assertion #12133
Bug 2114863: fix bug where Cluster update modal errors weren’t displa… #11926
Bug 2117608: use the correct Alertmanager tenancy proxy #11954
Bug 2077141: Fix Web Terminal availability check to verify operator is installed #11373
OCPBUGS-686: fix helm readme bug #11986
OCPBUGS-695: Input values in Instantiate Template are disappeared randomly in the developer console #12002
OCPBUGS-410: show Limit exceeded state for large number of nodes in topology #11973
Bug 2097724: Change Ping source spec.jsonData (deprecated) field to spec.data #11720
OCPBUGS-508: Backport CI test fix to relase 4.10 #11977
Bug 2089592: [release-4.9] Add debounce to tektonhub versions api call to avoid many calls #11553
Bug 2093910: change metrics queries based on metrics level configurations #11644
Bug 2097618: Avoid using ‘gp2’ hardcoded storage class #11716
Bug 2068203: Sample catalog is not displayed when one API call to the backend fails #11616
Bug 2084496: fix bug where “Update blocked” label incorrectly displa… #11484
Bug 2097554: Fix failing backend test after devfile registry update #11714
Bug 2082493: - Rolebindings page doesn’t load for normal users #11630
Bug 2084028: Improve Firehose cache, fix broken import #11554
Bug 2089847: Set dashboards timeout based on selected timespan #11561
Bug 2076690: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11362
Bug 2081389: Translate Extensions On Each Language Change #11430
Bug 2089546: [release-4.9] Eliminate use of lookaside cache and move to Cachito #11519
Bug 2084028: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11476
Full changelog

console-operator

Bug 2055494: Distinguish between route conditions #662
Bug 2055494: console-operator should report Upgradeable False when SAN-less certs are used #638
Full changelog

container-networking-plugins

Bug 2101664: Sysctl IFNAME [backport 4.9] #64
Full changelog

coredns

OCPBUGS-2903: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #81
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6035: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.22 into release-4.9 #170
Full changelog

csi-driver-manila-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #152
Full changelog

docker-registry

Bug 2086864: Fix ICSP for subrepositories #333
Full changelog

etcd

OCPBUGS-6516: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #180
OCPBUGS-3104: Rebase openshift/etcd 4.9 onto v3.5.6 #172
OCPBUGS-2143: Rebase openshift/etcd 4.9 onto 3.5.5 #157
Full changelog

gcp-machine-controllers

Updating ose-gcp-machine-controllers images to be consistent with ART #166
Full changelog

grafana

OCPBUGS-4259: bump github.com/crewjam/saml dependency #94
OCPBUGS-641: bump Grafana to 7.5.11 #88
Full changelog

haproxy-router

OCPBUGS-1620: Fix gap in router’s handling of graceful shutdowns. #418
OCPBUGS-1338: HAProxy: enable PROXY protocol for all listeners #416
Bug 2010227: HTTPS redirect happens even if there is a more specific http-only route #367
Full changelog

hyperkube, pod

OCPBUGS-3472: UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines #1417
Bug 2101345: bump to k8s 1.22.15 #1383
Bug 2106655: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1325
Bug 2083554: UPSTREAM: 109933: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1256
Bug 2105663: UPSTREAM: <carry>: update list of deprecated apis #1316
[release 4.9] Bug Bug 2106962: UPSTREAM: <carry>: use correct base image for testing #1321
Bug 2075704: Backport 107821 and 107831 #1267
Full changelog

insights-operator

OCPBUGS-443 Gather status of the cephclusters.ceph.rook.io resources (#659) (#665) #659
Full changelog

ironic

Bug OCPBUGS-1246: Improve resiliency of eTag handling #317
[OCP 4.9] Update OWNERS #278
Bug 2088319: Backport weak eTag handling fix to OpenShift 4.9 #277
Bug 2082103: Enable vMedia provisioning of Nokia servers #274
Full changelog

ironic-ipa-downloader

Bug 2100786: Include Fix discovering WWN/serial for devicemapper devices #93
Bug 2089313: Multipath fix for passive paths #92
[OCP 4.9] Update OWNERS #89
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-7053: Sync jenkins version and plugins with mas… #1583
OCPBUGS-4111: Various CVEs September/2022 #1544
OCPBUGS-6881: Handle routes properly in s2i/run #1566
OCPBUGS-6711: Force git server to an earlier version #1564
[release: 4.9] OCPBUGS-6495: Sync javax-mail-api with version required by jenkins 2.361.1 #1556
OCPBUGS-911: Add maven plugin in base plugins #1539
OCPBUGS-3698: [release-4.9] Update OWNERS #1520
OCPBUGS-3627: Bump jenkins version to 2.361.1 #1515
OCPBUGS-3173: Add glibc-langpack-en package in agent-base image #1512
OCPBUGS-474: CVE Mitigations #1481
OCPBUGS-1757: Install glibc language package to remove setLocale warning #1488
OCPBUGS-1811: update install plugins script #1489
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter images to be consistent with ART #50
Full changelog

keepalived-ipfailover

Updating ose-egress-http-proxy images to be consistent with ART #91
Full changelog

kube-proxy, sdn

OCPBUGS-2204: Fix DNS endpoint hack to prefer local instead of forcing it #468
Bug 2093978: Remove node-tainting for too-small MTU #436
Bug 2090624: Masquerade in cluster traffic that is marked for egress IP #433
Bug 2063970: delete stale UDP conntrack entries for loadbalancer IPs #413
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator images to be consistent with ART #179
Full changelog

machine-api-operator

Bug 2111004: Add DescribeRegions permission for aws controller #1048
Full changelog

machine-config-operator

OCPBUGS-4051: Add ephemeral storage to kubelet system reserved args #3429
OCPBUGS-3200: configure-ovs: avoid using ‘ip -j’ unavailable in RHEL7 #3407
OCPBUGS-2814: Make sure there is a search domain in resolv.conf #3385
Bug 2096792: mcd pull service: use cp instead of cat to copy MCD on host #3187
OCPBUGS-288: configure-ovs: clone inactive autoconnect slaves #3296
OCPBUGS-420: Fix problem with retaining data in string array in piped while loop #3300
Bug 2101794: Avoid kubernetes node port range #3255
Bug 2108538: configure-ovs: improve handling of static ip and mac address configuration #3254
Bug 2098099: configure-ovs: clone connection to avoid selinux problems #3188
Bug 2089763: configure-ovs: persist profiles after auto-connect has been set #3183
Bug 2089763: configure-ovs: avoid restarting NetworkManager #3160
Bug 2071689: lib/resourcemerge: handle container env var deletions #3057
Full changelog

multus-cni

OCPBUGS-2572: Fix missing device-info in networks-status annotation for chained plugins #138
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #29
Updating ose-multus-route-override-cni-alt images to be consistent with ART #26
Updating ose-multus-route-override-cni images to be consistent with ART #23
Full changelog

must-gather

OCPBUGS-5195: fix audit gathering script #344
OCPBUGS-2261: [release-4.9] Collect rotated log files #331
Bug 2108892: Add timeout to oc cp command to fix must-gather delays when routers are terminating #324
Bug 2092265: Add networking resources #308
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#56) #56
Fix field selector (#51) #51
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #299
Full changelog

openstack-cinder-csi-driver-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #91
Full changelog

openstack-machine-controllers

Bug 2077381: Fix InstanceCreate port & trunk cleanup #234
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-5938: backport cert rotation fix #430
OCPBUGS-4948: Fix label key truncation for subscription annotations (#2731) #423
OCPBUGS-570: [release-4.9] remove broken thread-safety (#2697) #372
OCPBUGS-459: fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #371
Bug 2102559: opm bug fix #328
Full changelog

ovn-kubernetes

Bug 2115926: Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected #1235
OCPBUGS-811: [Release 4.9] correct creation and update of egressFirewall #1261
Bug OCPBUGS-574: EgressGW: don’t error out trying to add SPK when a pod without ip exists #1252
Bug 2090315: Remove conntrack entries after rules #1220
Bug 2115845: [release-4.9] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode #1233
Bug 2096802: duplicated IPs can be assigned to multiple Pods #1136
Bug 2105654: egressIP: node retrieval failure is not respected, causes panic #1186
Bug 2105266: EGW: Clean Stale Conntrack Entries #1192
Bug 2097157: Bumps OVN to 21.12.0-58.el8fdp #1140
Bug 2105277: Fix panics in DestroyNetworkPolicy if policy is nil #1183
Bug 2088630: EgressIP NATs are not being cleared correctly from the logical router #1103
Bug 2083239: [Downstream-only][4.9-only] Always add complete efw ACL rules #1088
Bug 2087226: enable exportloopref linter and fix violations #1096
Bug 2065782: [release-4.9][backport] Fix cleaning VF representor ports #1002
Full changelog

tests

disruption checking is disabled for prior releases because we lack a … #27473
OCPBUGS-1967: allow 2.5% disruption for 4.9 controlplane availability test #27465
OCPBUGS-1052: allow frontends to tolerate 2.5% disruption during upgrades #27434
Bug 2101429: test: switch to testing CapBnd over CapInh #27279
Bug 2064800: skip imageregistry serial test on disconnected environments #27189
Bug 2077167: disable unidling test failing under ovn-k #27172
Bug 2087230: disable flaky unidling test #27150
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github