4.9.59

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.59-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.8.17, 4.8.18, 4.8.19, 4.8.20, 4.8.21, 4.8.22, 4.8.23, 4.8.24, 4.8.25, 4.8.26, 4.8.27, 4.8.28, 4.8.29, 4.8.30, 4.8.31, 4.8.33, 4.8.34, 4.8.35, 4.8.37, 4.8.38, 4.8.39, 4.8.40, 4.8.41, 4.8.42, 4.8.43, 4.8.44, 4.8.45, 4.8.46, 4.8.47, 4.8.48, 4.8.50, 4.8.51, 4.8.52, 4.8.53, 4.8.54, 4.9.10, 4.9.11, 4.9.12, 4.9.13, 4.9.15, 4.9.17, 4.9.18, 4.9.19, 4.9.21, 4.9.22, 4.9.24, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.32, 4.9.33, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.38, 4.9.39, 4.9.40, 4.9.41, 4.9.42, 4.9.43, 4.9.44, 4.9.45, 4.9.46, 4.9.48, 4.9.49, 4.9.5, 4.9.50, 4.9.51, 4.9.52, 4.9.54, 4.9.55, 4.9.6, 4.9.7, 4.9.8, 4.9.9

Upgrades to:

4.10.67 (changes) - S S S
4.10.66 (changes) - S S F
4.10.65 (changes) - F S F
4.10.64 (changes) - F S S
4.10.63 (changes) - F S S S
4.10.62 (changes) - S S S
4.10.61 (changes) - F F F S F S
4.10.60 (changes) - F F F
4.10.59 (changes) - F F S S S
4.10.58 (changes) - F S F S
4.10.57 (changes) - F F S F S
4.10.56 (changes) - F S S S
4.10.0-0.nightly-2023-11-18-064553 (changes) - Failed Failed
4.10.0-0.nightly-2023-11-05-194758 (changes) - S S S F
4.10.0-0.nightly-2023-11-04-070725 (changes) - F S F S F
4.10.0-0.nightly-2023-11-04-010725 (changes) - S F F F
4.10.0-0.ci-2024-07-23-230545 (changes) - S F F F F S F F F F
4.10.0-0.ci-2024-07-23-170545 (changes) - S S S F
4.10.0-0.ci-2024-07-23-030300 (changes) - F S S F F F S
4.10.0-0.ci-2024-07-22-210300 (changes) - F S S S F F
4.10.0-0.ci-2024-06-18-021838 (changes) - S S S F F S
4.10.0-0.ci-2024-06-17-163854 (changes) - F S S F F F F
4.10.0-0.ci-2024-06-08-032544 (changes) - F S S S
4.10.0-0.ci-2024-06-07-194153 (changes) - F S F F S
4.10.0-0.ci-2024-06-06-064354 (changes) - S S S F F F F
4.10.0-0.ci-2024-06-05-220234 (changes) - F F F S F F F S
4.10.0-0.ci-2024-05-15-041629 (changes) - F F F F S F F F F F
4.10.0-0.ci-2024-05-14-164321 (changes) - S F F F S S S
4.10.0-0.ci-2024-04-05-170549 (changes) - F F F S S F F F F
4.10.0-0.ci-2024-03-26-073720 (changes) - F F S F F F F F
4.10.0-0.ci-2024-03-21-081939 (changes) - F F F F F F F F F F
4.10.0-0.ci-2024-03-20-203416 (changes) - F F S F F F F F
4.10.0-0.ci-2024-03-16-083800 (changes) - F F F S S F F S
4.10.0-0.ci-2024-03-15-162851 (changes) - S S S F S
4.10.0-0.ci-2024-03-15-073603 (changes) - F F S F F F S
4.10.0-0.ci-2024-03-02-012059 (changes) - S S S F F F F
4.10.0-0.ci-2024-02-14-014057 (changes) - S S F F F F F
4.10.0-0.ci-2024-02-13-142855 (changes) - F F F F F S F F F F
4.10.0-0.ci-2024-02-02-154307 (changes) - F S F F F F F
4.10.0-0.ci-2024-02-01-162516 (changes) - S S S F F F F
4.10.0-0.ci-2024-01-26-194950 (changes) - F S F F F F F
4.10.0-0.ci-2024-01-24-153747 (changes) - F S S F F F F
4.10.0-0.ci-2024-01-23-203141 (changes) - F S F F S
4.10.0-0.ci-2024-01-23-143141 (changes) - S F S F S
4.10.0-0.ci-2024-01-12-082644 (changes) - F F S S F F F S
4.10.0-0.ci-2024-01-11-210046 (changes) - F F S F F F F S
4.10.0-0.ci-2024-01-03-111738 (changes) - F F S S F F F F
4.10.0-0.ci-2024-01-03-051710 (changes) - S S F F S
4.10.0-0.ci-2023-12-29-000255 (changes) - S S F F F
4.10.0-0.ci-2023-12-28-122343 (changes) - F F F F S S F F F F
4.10.0-0.ci-2023-12-26-023728 (changes) - S F F F S S F F F S
4.10.0-0.ci-2023-12-19-134639 (changes) - S F S S F S
4.10.0-0.ci-2023-12-16-133913 (changes) - F F S S S
4.10.0-0.ci-2023-12-15-213414 (changes) - F F F F S S S
4.10.0-0.ci-2023-12-15-101920 (changes) - F S S F F F S
4.10.0-0.ci-2023-12-14-184130 (changes) - S S F F F
4.10.0-0.ci-2023-12-14-073527 (changes) - F F F F F F F F F F
4.10.0-0.ci-2023-12-11-192927 (changes) - F F S F F S
4.10.0-0.ci-2023-12-11-132927 (changes) - F S S S S
4.10.0-0.ci-2023-12-11-045547 (changes) - F S S F S
4.10.0-0.ci-2023-12-07-231651 (changes) - F F S F F S
4.10.0-0.ci-2023-12-07-143424 (changes) - S F F S F S
4.10.0-0.ci-2023-12-07-055651 (changes) - S F F S F F F F
4.10.0-0.ci-2023-12-06-211219 (changes) - S S F F F F F
4.10.0-0.ci-2023-12-06-094526 (changes) - F S S F F F F
4.10.0-0.ci-2023-12-05-221140 (changes) - F F S F F F F F
4.10.0-0.ci-2023-12-04-112928 (changes) - S S F S
4.10.0-0.ci-2023-12-04-025808 (changes) - S F F F S F S
4.10.0-0.ci-2023-12-03-194750 (changes) - S S S S
4.10.0-0.ci-2023-12-03-053847 (changes) - S S F S
4.10.0-0.ci-2023-12-02-233847 (changes) - S S F F S
4.10.0-0.ci-2023-12-01-091631 (changes) - F F F F F F F F F F
4.10.0-0.ci-2023-12-01-003914 (changes) - S S F F F S
4.10.0-0.ci-2023-11-30-183914 (changes) - F F S F F F F
4.10.0-0.ci-2023-11-30-070015 (changes) - S S S F F F F

Loading changelog, this may take a while ...

Changes from 4.9.4

Created: 2023-03-29 21:06:09 +0000 UTC

Image Digest: sha256:b22d8c20d3f7fc0afb8654f5df4cfafa8230ad6fe58c0c48760c3f42a3aae5fd

Release 4.9.59 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2023-03-29-091237

Components

Kubernetes upgraded from 1.22.1 to 1.22.17
Red Hat Enterprise Linux CoreOS upgraded from 49.84.202110142155-0 to 49.84.202303281500-0 (diff)

Rebuilt images without code change

aws-cloud-controller-manager git 18d82a6d sha256:69fa9c6f191de2a9690dd6e8f6f449f54b77e28e27e584c803da343939751930
azure-disk-csi-driver git ade73731 sha256:c37e290cd62b86f68e1f1da7fb1c2c9b41d6d0de072c19f85b9593dc97e812ba
cluster-bootstrap git 7e074a7d sha256:24acb2db0046d54bca5eebf4a2d635fdcd9cc2ea9f5f559803ba52938957a104
cluster-csi-snapshot-controller-operator git c750d4b4 sha256:cc1ade4d410350b7b3d7cf12208bf4443d7c8f072773ef370b86ac6eecf597f1
cluster-openshift-controller-manager-operator git 3015cb84 sha256:d42ba2567c3b815926aa8f856b0df634ce735697cbe9f04d2c0e6e20691a68bb
cluster-policy-controller git 8fbffaf2 sha256:7169ffa380dea352013123b898b001ba32598a9542c4c27cadda4e9f79e1be94
csi-external-attacher git 0a1737c4 sha256:0d713da674d51482a0143d11c64221b4e9ed42d510feee5f1cdc01d6674eb51f
csi-external-provisioner git 7736e729 sha256:171650646415738808c520d5e6ebe33327fd4efd9f3ae00e26665172f5d7cd9c
csi-external-resizer git dad46d03 sha256:e5e6c93ae7fe4af19e865a5eeb6aa0e2d31d79ce79d69e5f897a59c669a872c9
csi-external-snapshotter git 52ab8938 sha256:b308a0afe80e7194515b7ffe28a419b27ba8605a7146c92c01b7c2f3d60a325e
csi-livenessprobe git c13c3a5f sha256:04ac0ead670682acad6afaaab719d8063948ff03cc01b05ff4376e7ab03cebf1
csi-node-driver-registrar git 3e02b07e sha256:7cec2acc261261fdc948734f9097691b687599142a51942eb1803899eb7545c2
csi-snapshot-controller git 52ab8938 sha256:ee300c403deb2602189c5ddfaafbeeecb82b0f097b905577f0e185f576bc142e
csi-snapshot-validation-webhook git 52ab8938 sha256:99cabc427c7530ac921fc4db450a74b89574bd34404ebe4c33e567150747fed1
egress-router-cni git 099b7569 sha256:584a0c2c5a65c5e44b301de332f0acfe90c146f77367fd16954ca2f0e5e83722
gcp-pd-csi-driver git 48d49f7f sha256:3016cc6623242c979b29e08eecb065213fedc3d2258ade7b7d78e0e397b20355
ironic-hardware-inventory-recorder git 8e2d1db6 sha256:6c7a2804bb7993c3af61dc9b94b832796872ac3c683d6867ed7825c773920e83
ironic-inspector git 9474b758 sha256:8967c0214bdd4ae2b22216b7076fcdc0dd7b5792ed6913af0b5985f10f1234a8
ironic-static-ip-manager git d13dccb8 sha256:0041a7e1f25bab9744f479cadc8308bd79cd29c96445fa0fee67eaac1a802306
kube-rbac-proxy git 58e09297 sha256:8455540375239b72fe2d321d44ecf93ac7ef37c8457ccbe94bda04cf5810052b
kube-state-metrics git 6e41dbd4 sha256:19bcec06a43139c9b467b624484a4a96de121188b3f6542f8f6e776fe9c294aa
libvirt-machine-controllers git 59ae2edf sha256:d00d6b2f11795ad211a99ab05caa902a5202f3194305df22ee4a4850d5a8c534
machine-os-content sha256:cacaa2faf72f25dc690fdf8429b55ea4f91ce37e62c27c63e1a06323de7163ae
mdns-publisher git 266597b3 sha256:90492d9249c97cba1b2c8cc32169bd5ebfdab4ccaba34b407cc2da15754ae704
multus-admission-controller git 3c28a57a sha256:84683dcf95b10cc66e9350de96f80e105f01bef067f47e7b810049bea0238626
multus-networkpolicy git fd12fede sha256:2bd517e3919acab3a6a7c98987056448c1522b23d61693ee0a8bd926417247a4
network-tools git ed0b846c sha256:39d7368ef33eb1e15b0e999cc608520f677e64caa2c3a17720bb6b81836f65b7
oauth-proxy git 9ea1ebc8 sha256:b6d63fb752ef333115243399955157e4d493b5f5f1e4624862ce6e1fae714343
openshift-state-metrics git 689af8b8 sha256:9436153384f323e20373517220dcd8df1daf12fde561673ef1b2fa4ee04672bf
prom-label-proxy git 9f870bfa sha256:c9925c9e38857096eb5bc657b6f6f4a48ad8e3aa9fdf89510449b86d406decb1
prometheus git 3197fa71 sha256:4878428b172101e7b8e1cb891c04cf70616e88368e9884dfa9af3e13cda503ff
prometheus-alertmanager git 579e3c68 sha256:8c225850ed93316ad24950d437938d4dd96fb7f93b22fb6575df3cb370af75f9
prometheus-node-exporter git 1ab97f35 sha256:365d8e7c395731def1687f234b7eceb81881951a46f7d834b6ad7793ffa58a4c
service-ca-operator git ab44f586 sha256:f34b066cef99c84e659a039a6bfa6faf9cc3294fe8e85754e3e670a6bca6c552
telemeter git 03842e05 sha256:61829aae577b90e4ad98f305e1eabf778adc8b4ae1e00766ad5cf72f0de73b7b
vsphere-csi-driver git 4ece3d1b sha256:2f9eaed67c538fac2ec1ebda0d9a0accb24114d9272d4c3811bc22831203a351
vsphere-csi-driver-syncer git 4ece3d1b sha256:83bce06a9c2274fcfae8514ca1c9cdf98a2d2aa721cc0d862d0dc5de4536a4a1

aws-ebs-csi-driver

Bug 2103982: Fix build on ARM after rebase #204
Bug 2103982: Rebase to v1.4.0 #203
Full changelog

aws-ebs-csi-driver-operator

Bug 2077897: Set custom endpoint environment variable if available #155
Full changelog

aws-machine-controllers

OCPBUGS-3326: Update map of supported aws instance types #452
OCPBUGS-2578: Fix go list for go1.18 #449
OCPBUGS-572: Fix panic when accessing nil machine annotations map #446
Bug 2111004: Validate unknown regions using AWS API #441
Bug 2065483: Ensure IOPS setting is honoured on all supported block device types #436
Bug 2029993: Prevent Machine from being considered provisioned until it exists in AWS #431
Bug 2015605: do not requeue if the machine has been updated #425
Full changelog

aws-pod-identity-webhook

Bug 2026379: update go.mod for go1.16 #147
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2101: .dockerignore: enable OSBS2 builds #43
Full changelog

azure-disk-csi-driver-operator

Bug 2029571: Add custom CA bundle support #39
Full changelog

azure-machine-controllers

OCPBUGS-2581: Fix go list for go1.18 #264
Bug 2047845: Requeue create on invalid credentials errors #249
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-6086: OpenStack: Force JSON content-type in Swift #6787
Bug 2101013: Release 4.9 go getter update #6381
OCPBUGS-1010: Download yq in upi installer containers #6316
OCPBUGS-250: Allow setting bootstrap kubelet ip #6240
Bug 2095320: bump RHCOS 4.9 bootimage metadata #6159
Bug 2009024: Delete all the ports from tagged Neutron networks. #6122
Bug 2098158: Bootstrap timeout #6025
Bug 2099741: Collect whole journal and netstat data #6036
Bug 2043298: bump RHCOS 4.9 boot images #5963
Bug 2087972: Set rc-manager=unmanaged for on-prem bootstrap #5926
Bug 2025862: Improve host role management during assets creation #5408
Bug 2067092: stop considering Mint mode as supported on Azure (#5699) #5738
Bug 2052307: aws: Filter out local zones when generating a default list of zones #5627
Bug 2042443: openstack/Dockerfile: add make and gettext #5549
Bug 2038429: Azure: Update Default Instance Types #5520
Bug 2043590: vendor: bump aws terraform provider to v3.1.0-openshift-2 #5559
Bug 2031606: aws: get ips for all control plane instances for bootstrap gather #5474
Bug 2022172: Relax vcenter hostname check #5372
Bug 2029409: Update defaultReleaseImageOriginal to 4.9 #5450
Bug 2028611: vendor: update terraform-provider-google for rate limit fix #5445
Bug 2027329: Handle unset default machine pool #5424
Bug 2022616: Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5380
Bug 2017985: Set AWS Bootstrap Type == Master #5337
Bug 2016267: Add ingress rules to master SG for compact clusters #5320
Bug 2004052: OpenStack: Fix links in SR-IOV workers doc #5212
Bug 2009787: Fix RAM validation for openstack flavors #5262
Bug 2004569: Fix router clean up upon cluster destroy #5220
Bug 2015811: bump oVirt terraform provider version which fix “Disk is locked” bug #5315
Full changelog

baremetal-machine-controllers

Bug 2100983: Uplift BMO to remove go-getter dependency #176
Update OWNERS #180
Full changelog

baremetal-operator

Bug 2100995: Uplift kustomize to v4 to remove go-getter dependency #235
Bug 2009849: Avoid logging BMC password when creds change #183
Bug 2009850: Fix fallback for ironic drivers that don’t support soft power off #184
Full changelog

baremetal-runtimecfg

Bug 2101794: Avoid kubernetes node port range #182
Bug 2026012: Ignore VIPs in node-ip show #161
Bug 2043650: Avoid dynamically allocated port range for haproxy #167
Bug 2049903: Add delay after sending bootstrap stop and start messages #169
Bug 2025691: retrieve only single type addresses for Keepalived ingress #160
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-3969: set proper pod security ns labels #1294
Bug 2103913: [must-gather] Add options for multi-node, host-network capture #1191
Bug 2103910: Introduce an option to retrieve the rotated log files for a pod #1190
Bug 2092265: [inspect] Add namespace-scoped networking resources to inspect #1157
Bug 2065174: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1089
Bug 2051944: Enhancing the output provided when backup collections are attempted #1057
Bug 2065302: Add TMOUT env to debug node pod #1090
Bug 2051626: bump(k8s.io/*) v0.22.6 #1060
Bug 2045008: bump discovery burst #1034
Bug 2053149: Fix catalog mirror from files #1064
Bug 2053222: Fix mirroring images that have dots in their namespace #1068
Bug 2039761: Remove git:// from new-app tests #1022
Bug 2038930: properly handle –dry-run=server #1016
Full changelog

cloud-credential-operator

Update OWNERS to reflect reality #498
Bug 2055821: Remove Azure mint mode support as Active Directory Graph API will be sunset #453
Bug 2024751: pod-identity-webhook starts without tls #423
Bug 2015977: Stop putting CCO in degraded state when stale credentials are found #404
Bug 1992563: update alerts with summary and descriptions #397
Bug 2024751: pod-identity-webhook starts without tls #424
Bug 2015989: Check for aws status in infra platform status field before client setup #405
Full changelog

cluster-authentication-operator

Bug 2107027: only ever include certificates in the oauth-serving-cert CM #578
Bug 2037944: endpoints checker: check only the custom hostname if configured #531
Bug 2052467: Custom route HTTPS certificate SAN validation #545
Bug 2077483: routeName used as customSecretName #560
Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #544
Bug 2062292: e2e: Pin Keycloack to the legacy variant #556
Bug 2039417: remove degraded condition 4.9 #542
Bug 2037274: starter.go: add invalidCertsController #535
golang 1.16 bump: Updating ose-cluster-authentication-operator images to be consistent with ART #526
Full changelog

cluster-autoscaler

Bug 2108949: Have VPA ignore phantom containers named “POD” #237
Bug 2066270: UPSTREAM: <carry>: Fallback to CAPI annotations #226
Full changelog

cluster-autoscaler-operator

Bug 2070277: add leader election flags to autoscaler deployment #244
Bug 2025582: Change ClusterAutoscalerUnschedulablePods severity to info #230
Full changelog

cluster-baremetal-operator

Bug 2101001: Uplift kustomize and BMO to remove go-getter dependency #289
OCPBUGS-1518: [release-4.9] Fix a few papercuts #292
Update with current OWNERS #296
Bug 2091747: Fix interpretation of Deployment Status Conditions #268
Bug 2053581: Calculating network stack only on supported Platforms #244
Bug 2012684: add a new field “ProvisioningMacAddresses” to the provisioning CRD #207
Full changelog

cluster-cloud-controller-manager-operator

Bug 2064837: Fix CCCMO metric ports configuration #180
Bug 2034504: Ensure old deployment is deleted before new deployment creation #162
Bug 2015503: User CA bundle sync controller #138
Full changelog

cluster-config-operator

Bug 2075551: [release-4.9] backport api to commit 019a246c52 #252
Bug 2015306: bump api #224
Full changelog

cluster-dns-operator

Bug 2002621: serviceChanged: Fix internalTrafficPolicy #295
Full changelog

cluster-etcd-operator

OCPBUGS-7982: fail early on missing node status envs #1015
OCPBUGS-7957: set default etcd client timeout #1014
OCPBUGS-5554: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #983
OCPBUGS-2944: Add niceness to important etcd processes #959
OCPBUGS-2120: fix cert rotation on IP changes #945
OCPBUGS-614: ensure healthy quorum before config update #912
Bug 2102005: Upping defrag timeout to 1 minute #867
Bug 2095115: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #849
Bug 2086119: Add summary to etcd alert rules #826
Bug 2082316: Add new etcd members to reviewers, add Allen to approvers #818
Bug 2068084: manually disable defrag #810
update OWNERS #721
Bug 2069830: turn on initial corruption check #772
Bug 2008175: pkg/operator/metriccontroller: Fix query #686
Bug 2009890: pkg/operator/upgradebackupcontroller: fix backup dir name in status condition #683
Bug 2007454: pkg/cmd/render: disallow placeholder IPs #667
Full changelog

cluster-image-registry-operator

OCPBUGS-7407: OpenStack: Add support for Proxy #841
OCPBUGS-7371: swift: Retry connecting to OpenStack #839
Bug 2074052: Deployment annotations, runtimeClassName override and fs policy change #766
Bug 2059606: Retry on pruner failures #757
Bug 2023219: Wait until cluster operators recover before proceeding #731
Full changelog

cluster-ingress-operator

OCPBUGS-4881: Update CRLs when they expire #870
Bug 2100631: Fix flakey logic in haproxy timeout tests #795
OCPBUGS-1624: Fix removing custom created service in openshift-ingress with same name #831
Bug 2084336: Fix enabling PROXY protocol on an upgraded cluster #757
Bug 2097736: Fix loadBalancerServiceAnnotationsChanged check and update #786
Bug 2094054: Delete LoadBalancer-type service finalizer logic #771
Bug 2079517: Use externalTrafficPolicy: Cluster with OVN #713
Bug 2032677: Azure: Add Support for Azure Stack Hub #690
Bug 2064586: Disable keepalive for canary probe #722
Bug 2060111: Set Upgradeable=False if default cert has no SAN #711
Bug 2057518: Normalize the AWS internal LB annotation value #706
Bug 2058699: Upgradeable Condition in Operator and IC status #709
Bug 2014938: Use fake dns provider with external cp topology only in IBM Cloud case #666
Bug 2014711: Fix for Azure dns privateZone degrade e2e test #673
Bug 2015829: Change default balancing algorithm to “leastconn” #667
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-2206: [release-4.9] Wire support for trusted service account issuers #1388
Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #1318
Bug 2044622: staticpod pruner: check if the cert directory exists to avoid panic #1297
Bug 2037274: starter: include metrics controller #1274
Bug 2029504: encryption-controller: sync secrets conditionally #1268
Bug 2014615: Exempt metrics scrapes from APF. #1244
Full changelog

cluster-kube-controller-manager-operator

Bug 2049907: allow cluster-policy-controller to fallback to default cert #600
Bug 2044622: Sync with the latest 4.9 library-go #593
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #537
Full changelog

cluster-kube-scheduler-operator

Bug 2026109: Disable balancedAllocation and add weight for HighNodeUtilization profile #379
Bug 2044622: Sync with the latest 4.9 library-go #405
Bug 2037665: Check policy name field independently of the configmap change #403
Bug 2037665: Remove policy upgradeable when policy field cleared #402
Bug 2037665: Set upgradeable=false if using Policy field #400
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022528: Extensive number of requests from storage version operator in cluster #77
Bug 2016176: kube-storage-version-migrator constantly reporting type “Upgradeable” status Unknown #72
Full changelog

cluster-machine-approver

Bug 2031061: Replace certificates with generated certificates #147
Bug 2024216: Allow fallback to serving cert renewal accounting for egress IPs on SDN #141
Bug 2019754: Ensure pending CSR count is valid post approval #139
Full changelog

cluster-monitoring-operator

OCPBUGS-937: Give precedence to CMO config map proxy config #1762
OCPBUGS-641: grafana: bump to 7.5.11 #1753
Bug 2030630: jsonnet: update kube-prometheus and kubernetes-mixin #1538
Bug 2059470: Unable to connect external Grafana with Openshift Monitoring #1549
Bug 2038406: Add custom profile metric for Node Tuning Operator to telemetry #1535
Bug 2021097: Set Upgradeable: false when HA workloads are incorrectly spread #1472
Bug 2018455: Keep container_fs_usage_bytes metric #1461
Bug 2015571: [4.9] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1457
Bug 2013617: Update KubePodCrashLooping alert #1448
Full changelog

cluster-network-operator

OCPBUGS-5574: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1683
OCPBUGS-4788: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1664
Jira OCPBUGS-3854: IPsec: Fix broken counter++ expression #1653
Bug 2101915: Make the use of the ip-reconciler cronjob opt-in [backport 4.9] #1501
OCPBUGS-2594: Make northd probe interval default to 10 seconds #1593
Bug 2095112: ovn: fix northd preStop command handling #1478
Bug OCPBUGS-1514: Kuryr: Bump timeoutSeconds for livenessProbe #1562
Bug 2101092: OCPVE-106 Customize rollout strategy to fix SNO upgrade #1500
Bug 2093978: Drop Node update permission for sdn-node #1476
Bug 2092265: Cleanup CNO relatedObjects #1468
Bug 2083079: Reserve port TCP/9104 for cluster-network-operator #1429
Bug 2085463: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1444
Adds dougbtv to owners [release-4.9] #1402
Bug 2058673: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.9] #1323
Bug 2057957: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1316
[release 4.9] Updates owners #1333
Bug 2040530: ovn: try to gracefully terminate ovn-northd and ovsdb #1279
Bug 2046476: sbdb and nbdb containers leave pid around if they restarted or crashed #1291
Bug 2038252: Backport 4.9 OVN drop icmp frag from other nodes on Azure cluster #1273
Bug 2034351: Whereabouts IP Reconciliaton [backport 4.9] #1264
Bug 2023423: Add ip6tables NOTRACK rules for udp/6081 #1229
Bug 2037499: Bump openshift/build-machinery-go #1270
Bug 2028961: [release-4.9] Set upgrade strategy on kube-proxy #1239
Bug 2014021: Use proxy to connect to OSP cloud #1201
Full changelog

cluster-node-tuning-operator

Bug 2017066: openshift profile: fix malformed patch #284
Full changelog

cluster-openshift-apiserver-operator

[release 4.10] Bug 2109399: openshift-apiserver pods never going NotReady #502
Bug 2047331: global pull secret not working in OCP4.7.4+ for additio… #491
Bug 2029504: encryption-controller: sync secrets conditionally #487
Full changelog

cluster-samples-operator

Bug 2010136: Including Template in must-gather related objects. #401
Bug 2009722: acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #400
Full changelog

cluster-storage-operator

Bug 2102760: Add missing ibm cloud annotations to prometheus rbac #294
Bug 2084219: Fix RelatedObjects when an API is missing in the API server #281
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #38
Full changelog

cluster-version-operator

OCPBUGS-230: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #823
Bug 2108619: pkg/cvo: retain initial completed update history entry #799
Bug 2091806: pkg/cvo: Separate payload load from payload apply #786
Bug 2032125: lib/resourcemerge/core: Merge volumeMounts by mountPath #715
Bug 2055314: Fixing the sync issue when desired version and channel changed at the same time #742
Bug 2038275: *: Use –v=2 logging to drop client-side throttling noise #723
Bug 2028602: lib/resourcemerge/apps: Default Deployment replicas to one #702
Bug 2024588: Changing the ClusterNotUpgradeable alert to info #693
Bug 2022570: cvo: Compare manifest group in getOverrideForManifest #690
Bug 2015024: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #678
Full changelog

configmap-reloader

OCPBUGS-6537: go.mod: update github.com/prometheus/client_golang to v1.11.0 #50
Full changelog

console

OCPBUGS-53: Non-existing link in the “Learn more about OpenShift update channels” in “Select Channel” pop-up. #12440
OCPBUGS-6694: Fix NPE when displaying CSV with incomplete information #12482
Bug 2105912: Fix create-namespace e2e test with updated 3scale operator #11813
OCPBUGS-3886: Add checks for pods in hpaPodRingLabel #12281
OCPBUGS-2718: Update dependencies to the registry library and devfile parser #12192
Bug 2094244: Add ‘Unavailable’ status to clusteroperator status filter #11658
OCPBUGS-2008: Show already loaded catalog items after a timeout (3sec) #12136
OCPBUGS-2173: do not show NodesUpdateGroup if there are 0 nodes #12153
OCPBUGS-2576, OCPBUGS-2719: Fix backend test (devfile registry change), fix console e2e test (3scale operator name change) #12201
OCPBUGS-1956: fetch shared resource imagestreams based on labels instance or name #12126
OCPBUGS-1635: Update registry library dependency to pick up proxy support #12041
OCPBUGS-1981: Fix devfile registry assertion #12133
Bug 2114863: fix bug where Cluster update modal errors weren’t displa… #11926
Bug 2117608: use the correct Alertmanager tenancy proxy #11954
Bug 2077141: Fix Web Terminal availability check to verify operator is installed #11373
OCPBUGS-686: fix helm readme bug #11986
OCPBUGS-695: Input values in Instantiate Template are disappeared randomly in the developer console #12002
OCPBUGS-410: show Limit exceeded state for large number of nodes in topology #11973
Bug 2097724: Change Ping source spec.jsonData (deprecated) field to spec.data #11720
OCPBUGS-508: Backport CI test fix to relase 4.10 #11977
Bug 2089592: [release-4.9] Add debounce to tektonhub versions api call to avoid many calls #11553
Bug 2093910: change metrics queries based on metrics level configurations #11644
Bug 2097618: Avoid using ‘gp2’ hardcoded storage class #11716
Bug 2068203: Sample catalog is not displayed when one API call to the backend fails #11616
Bug 2084496: fix bug where “Update blocked” label incorrectly displa… #11484
Bug 2097554: Fix failing backend test after devfile registry update #11714
Bug 2082493: - Rolebindings page doesn’t load for normal users #11630
Bug 2084028: Improve Firehose cache, fix broken import #11554
Bug 2089847: Set dashboards timeout based on selected timespan #11561
Bug 2076690: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11362
Bug 2081389: Translate Extensions On Each Language Change #11430
Bug 2089546: [release-4.9] Eliminate use of lookaside cache and move to Cachito #11519
Bug 2084028: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11476
Bug 2030408: Disable replacement procedure from ODF UI #11483
Bug 2079231: fix bug where ClusterRole > RoleBindings did not display… #11405
Bug 2048631: missing volumes list in snapshot modal #10984
Bug 2046016: SnapShot with Disk Hot-plug hangs #10959
Bug 2078554: - Roles -> RoleBindings tab doesn’t show RoleBindings correctly #11392
Bug 2070827: Pipeline metrics: use prometheus-tenancy API to get data #11270
Bug 2073999: avoid pre-fetching tekton hub task versions #11312
Bug 2066771: Enhance Insights widget empty states #11218
Bug 2069258: Decode secrets before authorizing repository #11243
Bug 2071579: fix RoleBindings list page filter #11279
Bug 2077003: Fix failing TestGetRegistrySamples test #11368
Bug 2071692: Backport add-flow e2e tests to 4.9 #11300
-Bug 2021595: Key value field is not getting updated under Environment Tab in OpenShift Web Console #11176
Bug 2064454: return process data as array for list true in firehose as done in hooks #11256
Bug 2066298: fix ClusterOperator Status, Version col sorts #11206
Bug 2065549: Change the tekton hub api endpoint to use v1 api #11197
Bug 2060449: Fix potential issues with namespaces that contains just numbers #11133
Bug 2021702: Render correct conditions for csv vs installplan and subscriptioncondition #10423
Bug 2064454: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11184
Bug 2033712: Update CSR model & fix approval/denial process #10690
Bug 2055293: Sum total memory of unnamed container only #11073
Bug 2046641: Add warning alert when installing operator to non suggested namespace #10944
Bug 2055100: Revert “Add Dev Preview tag for IBM FlashSystem” #11068
Bug 2054608: omit rolebindings with no subjects #11055
Bug 2056826: Revert “Merge pull request #10316 from dtaylor113/e2e-tests-replace-codeready-operator” #11087
Bug 2052553: Add ‘Unavailable’ status for cluster operator #10125
Bug 2050271: show latest pipelinerun on the top of the list #11019
Bug 2033274: Fix tektonhub task upgrading issue #10678
Bug 2051523: change the Image Vulnerabilities tab to be project and not cluster scoped #10159
Bug 2053496: Monitoring: use namespace to detect the activePerspective instead of useActivePerspective hook #11042
Bug 2052850: Refreshing console from toaster taking to Install Operator #11025
Bug 2047350: Fix TypeError when application has HelmRelease #10990
Bug 2026553: Dispatch name filter value to redux #10553
Bug 2022158: omit extension when code ref resolution fails #10435
Bug 2023339: fix broken Argo CD link image #10461
Bug 2026414: use prometheus tenancy URL to load data in devconsole observe dashboard #10961
Bug 2041434: Monitoring: show a error message if wrong dashboard name is passed to the URL #10857
Bug 2047633: Fix that export download model wasn’t shown when primer export finished #10965
Bug 2040296: Enable error stack trace messages to scroll #10072
Bug 2042041: Console 2969: Changes to the project selector to allow system namespaces that are Favorited to be included in the Favorited list even when the option to Show default projects is unselected. #10886
Bug 2030128: Fix pipeline builder edge spacing to avoid improper edge shapes #10629
Bug 2044292: Filter superseded helm secrets and fix firehose to support partial metadata #10915
[release 4.9] Bug 2042683: Check rbac before polling for rules silences #10888
Bug 2044287: Add support for fetching partial metadata and fix helm list page crash #10914
Bug 2044259: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10913
Bug 2042456: Check if name label exists before comparing #10882
Bug 2036340: Fix secure route pre-filled issue in edit flow #10759
Bug 2027804: use namespace instead of useActivePerspective hooks to get the variables in Observe dashboard #10586
Bug 2027269: Add subject name selector field to SinkBinding form #10568
Bug 2027268: Optimize name validation regex for forms #10567
Bug 2019884: adds feature flag for all extension for knative plugin #10393
Bug 2038607: Fix that user settings ConfigMap is also created for users with restricted access #10799
Bug 2036115: add support for new labels for serverless function #10755
Bug 2013253: Fix to let the user create the application even if dockerfile is not detected #10216
Bug 2036859: Shift invalid devfile alert down #10766
Bug 2034183: Open export details page from the resource link on the topology sidepanel #10694
Bug 2033265: Fix an error to show Knative Services and Revisions also if the Service has no owner revision #10677
Bug 2029861: backport the change from #10394 to release 4.9 #10620
Bug 2029370: Trim the strings before localCompare #10611
Bug 2025799: Remove Tech preview badge for the triggers component for triggers GA … #10535
Bug 2044089: Update CRW operator name to fix failing e2e tests #10910
Bug 2040365: Check if ‘auths’ key when switching between create image secret subforms #10838
Bug 2034636: - RoleBindings tab doesn’t show correct rolebindings #10711
Bug 2037619: Could not filter out machine by using node name on machines page (temp fix) #10807
Bug 2040291: Prevent null references and “ResizeObserver loop limit exceeded” errors in IFrameMarkdownView #10116
Bug 2034829: cant delete VM with un-owned pvc attached #10719
Bug 2028286: Fix blank page error for Installed Operators #10596
Bug 2029378: Fix NodePort RDP bug #10612
Bug 2026243: Fixes add capacity for MCG standalone #10544
Bug 2025937: KMS resources not getting created for IBM FlashSystem storage #10540
Bug 2029297: Fix troubleshoot link for MON_DISK_LOW #10609
Bug 2026618: Add Dev Preview tag for IBM FlashSystem #10555
Bug 2026219: Fix Noobaa resources broken details pages #10543
Bug 2028535: Backing Store YAML tab on click displays a blank screen on UI #10603
Bug 2022446: Fix issue with standalone dashboards (4.9 backport) #10441
Bug 2022303: Fix creation of ibm storage system at backing storage step #10438
Bug 2022462: Set large width for modals with modal-lg class #10442
Bug 2020000: Fix resource metrics 403 errors for project admin users #10396
Bug 2021527: Fix ClusterOperators link #10417
Bug 2023285: #cloud-config is now added to yaml #10459
Bug 2016602: ODF tab is missing if user clicks on ‘Refresh web console’ #10295
Bug 2017722: Fix creation for BackingStore, BucketClass and NamespaceStore #10340
Bug 2016939: Block MCG deploymeny when no storage class found #10304
Bug 2017717: Use conditions for status in Storage System list page #10339
Bug 2018637: Pass pod toolbar filters to useListPageFilter #10366
Bug 2019494: Delete ssh service when vm is deleted #10385
Bug 2019736: PVC is deleted along with VM even with “Delete Disks” unchecked #10391
Bug 2010677: Update PatternFly/react-console #10258
Bug 2015134: Reveal the switch status of the button “Show default project” in code #10252
Bug 2014303: Fix wrong in-cluster hostname on the Service details page #10246
Bug 2013105: fixes imagestream from reference for alias to existing IS #10212
(4.9 Backport) Bug 2008142: Allow web terminal to be installed in any namespace #10135
Bug 2017484: Check for resource in ServiceBinding spec’s service reference #10327
Bug 2002905: Fix list page route for build configs #10043
Bug 1989798: Fix state bug to eliminate duplicates in dragged files #10131
Bug 2002006: Allow side nav borders to extend to left and right edges of yaml sidebar #10011
Bug 2014145: Failed to load RoleBindings list that will lead to ‘Role name’ is not able to be selected on Create RoleBinding page as well #10241
Bug 2011705: fix dev-catalog stuck in loading state #10198
Bug 2004075: Fix to show image-tag selector in s2i form and re-validate git url on git-type change #10067
Bug 2010160: Clicking on the perspective switcher shows a white page with loader #10169
Bug 2002856: Dont validate the install operator form when submitted #10041
Bug 2002600: Enable add capacity if osd size is not matching #10032
Bug 2008456: Fix to fetch ocs csv in external mode #10144
Bug 2003870: Fix state of volume mode dropdown #10062
Bug 2004567: Fix basic spring boot sample form crash #10076
Bug 2014095: Monitoring: Fix error message when Silences fail to load #10240
Bug 2013132: Overview tab is missing under Storage after successful deployment on UI #10214
Bug 2008499: Add monitoring and nodes label for external storage platforms #10146
Full changelog

console-operator

Bug 2055494: Distinguish between route conditions #662
Bug 2055494: console-operator should report Upgradeable False when SAN-less certs are used #638
Bug 2075030: Re-enable TestMetricsEndpoint e2e test case #647
Bug 2039681: Fix setting of custom cert for default route #624
Bug 2040275: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #626
Bug 2008142: Change web terminal subscription permissions from get to list #596
Bug 2016028: Correction/Changes in Quick Start Guides for ODF #609
Bug 2010681: Resync all controllers periodically #600
Bug 2002878: Remove SimpleHTTP ‘server’ response header value #587
Full changelog

container-networking-plugins

Bug 2101664: Sysctl IFNAME [backport 4.9] #64
Full changelog

coredns

OCPBUGS-2903: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #81
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6035: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.22 into release-4.9 #170
Full changelog

csi-driver-manila-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #152
Full changelog

csi-driver-nfs

OCPBUGS-10606: Bump go.mongodb.org/mongo-driver to v1.5.1 #115
Full changelog

docker-builder

Bug 2050287: Update buildah to v1.22.4 #285
Bug 2042444: getAssembleUser(): strip the group part out before checking the UID #280
Bug 2037776: Update containers/storage to address incorrect overlay options being set on rhel7 nodes #279
Bug 2022866: bump github.com/containers/buildah to v1.22.3 #272
Full changelog

docker-registry

Bug 2086864: Fix ICSP for subrepositories #333
Bug 2060363: Fix s3 driver for supporting ceph radosgw #327
Bug 2053222: Fix pull-through for images that have dots in their namespace #309
Bug 2042677: Fix auth for docker.io images #305
Bug 2029987: Try another registry if blob is not found #303
Full changelog

driver-toolkit

Bug 2031854: Add e2e test to 4.9 branch #71
Full changelog

etcd

OCPBUGS-6516: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #180
OCPBUGS-3104: Rebase openshift/etcd 4.9 onto v3.5.6 #172
OCPBUGS-2143: Rebase openshift/etcd 4.9 onto 3.5.5 #157
Update OWNERS #124
Bug 2077501: Merge Upstream etcd 3.5.3 into Openshift 4.9 #119
Bug 2016174: UPSTREAM: <carry>: server: Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync #99
Full changelog

gcp-machine-controllers

Updating ose-gcp-machine-controllers images to be consistent with ART #166
Full changelog

gcp-pd-csi-driver-operator

Bug 2038191: Add custom CA bundle support #42
Full changelog

grafana

OCPBUGS-4259: bump github.com/crewjam/saml dependency #94
OCPBUGS-641: bump Grafana to 7.5.11 #88
Full changelog

haproxy-router

OCPBUGS-1620: Fix gap in router’s handling of graceful shutdowns. #418
OCPBUGS-1338: HAProxy: enable PROXY protocol for all listeners #416
Bug 2010227: HTTPS redirect happens even if there is a more specific http-only route #367
Full changelog

hyperkube, pod

OCPBUGS-7081: bump to k8s 1.22.17 #1463
OCPBUGS-10330: Fix mounted volume expansion tests #1512
OCPBUGS-3472: UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines #1417
Bug 2101345: bump to k8s 1.22.15 #1383
Bug 2106655: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1325
Bug 2083554: UPSTREAM: 109933: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1256
Bug 2105663: UPSTREAM: <carry>: update list of deprecated apis #1316
[release 4.9] Bug Bug 2106962: UPSTREAM: <carry>: use correct base image for testing #1321
Bug 2075704: Backport 107821 and 107831 #1267
Bug 2075704: Revert Backport 107821 and 107831 #1266
Bug 2075704: Backport 107821 and 107831 #1242
Bug 2069310: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1233
Bug 2066390: Rebase 1.22.8 #1223
Bug 2050632: UPSTREAM: <drop>: Give warning when ipFamilyPolicy implicitly set #1170
Bug 2073153: golang toolchain unsupported parsers tag #1239
Bug 2065786: Backport 108366 OutofCpu Fixes #1222
Bug 2024643: Rebase v1.22.5 #1103
Bug 2043807: UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1134
Bug 2043807: add deprecated parser build flag #1166
Bug 2045972: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1144
Bug 2039373: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1107
Bug 2044438: UPSTREAM: 107637: backport inotify fix to 4.9 #1138
Bug 2040338: UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources #1125
Bug 2030697: UPSTREAM: <carry>: api request counts for current hour are incorrect #1088
Bug 2023452: UPSTREAM: 106382: defer close the rotated log open #1057
Bug 2024967: Fix subpath unmount error #1066
Bug 2021995: Read k8s version from hyperkube Dockerfile #1044
Bug 2022740: UPSTREAM: 106259: Don’t guess SELinux support on error #1053
Bug 2022281: Rebase v1.22.3 #1048
Bug 2023866: Fix patch 104847 #1061
Bug 2018442: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1033
Bug 2008827: Rebase v1.22.2 #985
Bug 2018516: 4.9: bump(github.com/openshift/*): make go.{mod,sum} point to 1.22.1 #1030
Bug 2006717: etcd-client starts retrying transient errors from the etcd cluster #974
Full changelog

insights-operator

OCPBUGS-443 Gather status of the cephclusters.ceph.rook.io resources (#659) (#665) #659
Bug 2083467: Fix the clusteroperator conditions values when IO is degraded (#623) #623
Bug 2076903: Gather namespace names with overlapping UIDs (#605) (#611) #605
Bug 2066825: Gather some error messages from the kube-controller-manager containers (#598) (#599) #598
Bug 2033540: Gather all CostManagementMericsConfig definitions. (#525) (#568) #525
Bug 2027637: gather webhook configurations (#508) (#559) #508
Bug 2026644: Gather all the container logs from relate namespaces of degraded clusteroperator (#553) #553
Bug 2017773: Anonymize identity provider attributes in the (#520) (#527) #520
Bug 2017759: Anonymize the ImageRegistry storage information also in (#507) (#526) #507
Bug 2005338: OCM controller - change type of the secret (#500) (#506) #500
Bug 2001823: Fix the error logic in the OCM controller & degrade only in HTTP error (#494) (#503) #494
Bug 2003893: ApiRequestCount conditional gathering (#492) (#496) #492
obfuscation ovn clusters bug (#522) #522
Full changelog

ironic

Bug OCPBUGS-1246: Improve resiliency of eTag handling #317
[OCP 4.9] Update OWNERS #278
Bug 2088319: Backport weak eTag handling fix to OpenShift 4.9 #277
Bug 2082103: Enable vMedia provisioning of Nokia servers #274
Bug 2023748: Compare IPs using the short form of IPv6 address #232
Bug 2025754: Enable vMedia provisioning of SuperMicro X11/X12 #238
Bug 2017412: [4.9] fix Image provisioning fails with file name too long #228
Bug 2012798: Ironic resumes clean before raid configuration job is actually completed #221
Full changelog

ironic-ipa-downloader

Bug 2100786: Include Fix discovering WWN/serial for devicemapper devices #93
Bug 2089313: Multipath fix for passive paths #92
[OCP 4.9] Update OWNERS #89
Full changelog

ironic-machine-os-downloader

Bug 2020546: Clear proxy env variables if go would have #68
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-7053: Sync jenkins version and plugins with mas… #1583
OCPBUGS-4111: Various CVEs September/2022 #1544
OCPBUGS-6881: Handle routes properly in s2i/run #1566
OCPBUGS-6711: Force git server to an earlier version #1564
[release: 4.9] OCPBUGS-6495: Sync javax-mail-api with version required by jenkins 2.361.1 #1556
OCPBUGS-911: Add maven plugin in base plugins #1539
OCPBUGS-3698: [release-4.9] Update OWNERS #1520
OCPBUGS-3627: Bump jenkins version to 2.361.1 #1515
OCPBUGS-3173: Add glibc-langpack-en package in agent-base image #1512
OCPBUGS-474: CVE Mitigations #1481
OCPBUGS-1757: Install glibc language package to remove setLocale warning #1488
OCPBUGS-1811: update install plugins script #1489
Bug 2076256: Mitigate multiple CVEs #1432
Bug 2077289: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1433
Bug 2069498: [release-4.9] update bundle plugins #1422
Bug 2067128: [release-4.9] compute bundle plugins in build #1413
Bug 2058751: [release-4.9] 2022-02-15 Security Advisory #1406
Bug 2052063: bump openshift-sync to 1.0.53 #1385
Bug 2044941: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1369
Bug 2038961: bump sync plugin to 1.0.52 #1363
Bug 2037346: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1359
Bug 2020615: Update Jenkins and plugins per 2021-11 advisory #1346
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter images to be consistent with ART #50
Full changelog

keepalived-ipfailover

Updating ose-egress-http-proxy images to be consistent with ART #91
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #93
Full changelog

kube-proxy, sdn

OCPBUGS-2204: Fix DNS endpoint hack to prefer local instead of forcing it #468
Bug 2093978: Remove node-tainting for too-small MTU #436
Bug 2090624: Masquerade in cluster traffic that is marked for egress IP #433
Bug 2063970: delete stale UDP conntrack entries for loadbalancer IPs #413
Bug 2026302: [EgressIP] move ct(commit) action from OVS group to flow #375
Bug 2006290: Fix up event recorder usage (again) #357
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator images to be consistent with ART #179
Full changelog

kuryr-cni, kuryr-controller

Bug 2022684: Improve retrieval of Trunks info #599
Bug 2023383: Do not start kuryr-daemon when worker_num <= 1 #602
Bug 2018129: Ensure KLB is updated #585
Bug 2023731: Ensure DOWN subports are cleaned up #604
Bug 2018148: Update TOX_CONSTRAINTS_FILE for stable/xena #586
Bug 2013017: Include port fix #578
Full changelog

machine-api-operator

Bug 2111004: Add DescribeRegions permission for aws controller #1048
Bug 2025697: [release-4.9]: Bump CAPZ API #965
Bug 2022813: GCP credentials reporting networksecurity.googleapis.com API disabled #952
Full changelog

machine-config-operator

OCPBUGS-4051: Add ephemeral storage to kubelet system reserved args #3429
OCPBUGS-3200: configure-ovs: avoid using ‘ip -j’ unavailable in RHEL7 #3407
OCPBUGS-2814: Make sure there is a search domain in resolv.conf #3385
Bug 2096792: mcd pull service: use cp instead of cat to copy MCD on host #3187
OCPBUGS-288: configure-ovs: clone inactive autoconnect slaves #3296
OCPBUGS-420: Fix problem with retaining data in string array in piped while loop #3300
Bug 2101794: Avoid kubernetes node port range #3255
Bug 2108538: configure-ovs: improve handling of static ip and mac address configuration #3254
Bug 2098099: configure-ovs: clone connection to avoid selinux problems #3188
Bug 2089763: configure-ovs: persist profiles after auto-connect has been set #3183
Bug 2089763: configure-ovs: avoid restarting NetworkManager #3160
Bug 2071689: lib/resourcemerge: handle container env var deletions #3057
Bug 2081123: Add KUBELET_NODEIP_HINT to nodeip-configuration #3130
Bug 2070490: configure-ovs: reload NM only when necessary #3048
Bug 2074491: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3077
Bug 2062310: Add –templates flag to MCC bootstrap command #2998
Bug 2063327: [release-4.9] Ensure directories are created with usable permission bits #3013
Bug 2038249: Improvements for configure-ovs script #2901
Bug 2025474: annotate rendered config with OCP version #2964
Bug 2058511: Prepend to search domains instead of replacing #2966
Bug 2050911: tighten operator availability conditions #2946
Bug 2032985: fixes 1 to 1 containerruntime config mapping #2876
Bug 2043650: Avoid dynamically allocated port range for haproxy #2923
Bug 2044503: ovs-configuration: use lower than NM default ethernet route metric #2928
Bug 2027926: storage.conf: remove obsolete option override_kernel_check #2848
Bug 2026275: daemon: make cordon/uncordon more robust #2839
Bug 2022641: [release-4.9] Send WARN message to stderr #2785
Bug 2008210: configure-ovs: Persist addr-gen-mode for ipv6 connections #2775
Bug 2013164: [IPI ON-PREM] move Keepalived default ingress script to separate file #2798
Bug 2009210: [on-prem] Set coredns bufsize to 512 #2784
Full changelog

multus-cni

OCPBUGS-2572: Fix missing device-info in networks-status annotation for chained plugins #138
Bug 2017881: add handling of pod UIDs passed from runtime #111
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #29
Updating ose-multus-route-override-cni-alt images to be consistent with ART #26
Updating ose-multus-route-override-cni images to be consistent with ART #23
Updating ose-multus-route-override-cni-alt images to be consistent with ART #18
Full changelog

multus-whereabouts-ipam-cni

Bug 2064859: Sync context improvements [backport 4.9] #89
Bug 2028964: Whereabouts should reconcile IP addresses [backport 4.9] #77
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #71
Bug 2009493: Release on cancel 4.9 #69
Full changelog

must-gather

OCPBUGS-7916: Back-port #259 to release 4.9 #351
OCPBUGS-5195: fix audit gathering script #344
OCPBUGS-2261: [release-4.9] Collect rotated log files #331
Bug 2108892: Add timeout to oc cp command to fix must-gather delays when routers are terminating #324
Bug 2092265: Add networking resources #308
Bug 2052929: Fix ovn-nbctl commands for ipv6 #284
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#56) #56
Fix field selector (#51) #51
Full changelog

oauth-apiserver

Bug 2043807: add deprecated parser build flag #72
Updating ose-oauth-apiserver images to be consistent with ART #56
Full changelog

oauth-server

Bug 2037274: pkg/*: introduce x509_missing_san_total metric #95
Updating oauth-server images to be consistent with ART #85
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #299
Bug 2053222: Fix importing images that have dots in their namespace #282
Bug 2043807: add deprecated parser build flag #277
Bug 2040240: Make OriginImageMutators aware of origin objects #269
Bug 2018442: Image policy should mutate DeploymentConfigs #255
Bug 2006791: prevent high frequency logging for aborting build generation from image change trigger based build requests using the deprecated build config spec last image change trigger ID field #247
Full changelog

openshift-controller-manager

Bug 2006791: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #203
Full changelog

openstack-cinder-csi-driver-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #91
Bug 2037080: relax health probes against Cinder API #64
Full changelog

openstack-machine-controllers

Bug 2077381: Fix InstanceCreate port & trunk cleanup #234
Bug 2064633: Ensure subnets belong to the queried network #222
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-5938: backport cert rotation fix #430
OCPBUGS-4948: Fix label key truncation for subscription annotations (#2731) #423
OCPBUGS-570: [release-4.9] remove broken thread-safety (#2697) #372
OCPBUGS-459: fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #371
Bug 2102559: opm bug fix #328
Bug 2079082: Replace collect-profile jobs that haven’t completed #293
Bug 2073967: Fix a bug in deletion of webhook service for replacement #284
Bug 2072995: Emit CSV metric on startup #280
Bug 2054848: Do not modify object from the lister cache (#2562) #253
Bug 2048450: Bump containerd to 1.4.11 #252
Bug 2000379: fix: ensure operator images are included in rendered bundles related images #180
Bug 2024048: Remove outdated subscription update logic to improve resolution delay #215
Bug 2017434: Use arguments to configure pprof-secret #212
Bug 2015799: Introduce GRPC_PROXY EnvVar Support (#2364) #207
Full changelog

operator-marketplace

Bug 2023550: Revert “Start without defaults on ARM” #431
Full changelog

ovirt-csi-driver

Bug 2014845: Fix storage domain search string #91
Full changelog

ovirt-csi-driver-operator

Bug 2024491: Align manifest dir with storage operator #78
Bug 2056995: Increase timeouts for CSI driver #88
Bug 2017245: Rearrange static files to prevent creation errors #74
Full changelog

ovirt-machine-controllers

Bug 2028509: detach non-bootable disks before removing the VM #124
Full changelog

ovn-kubernetes

Bug 2115926: Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected #1235
OCPBUGS-811: [Release 4.9] correct creation and update of egressFirewall #1261
Bug OCPBUGS-574: EgressGW: don’t error out trying to add SPK when a pod without ip exists #1252
Bug 2090315: Remove conntrack entries after rules #1220
Bug 2115845: [release-4.9] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode #1233
Bug 2096802: duplicated IPs can be assigned to multiple Pods #1136
Bug 2105654: egressIP: node retrieval failure is not respected, causes panic #1186
Bug 2105266: EGW: Clean Stale Conntrack Entries #1192
Bug 2097157: Bumps OVN to 21.12.0-58.el8fdp #1140
Bug 2105277: Fix panics in DestroyNetworkPolicy if policy is nil #1183
Bug 2088630: EgressIP NATs are not being cleared correctly from the logical router #1103
Bug 2083239: [Downstream-only][4.9-only] Always add complete efw ACL rules #1088
Bug 2087226: enable exportloopref linter and fix violations #1096
Bug 2065782: [release-4.9][backport] Fix cleaning VF representor ports #1002
Bug 2077369: [release-4.9] fix ipv6 network policy #1046
Bug 2059700: [4.9z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #981
Bug 2058683: [4.9z] Multiple ExGW cache validation/improvements #972
Bug 2068619: egressgw: fix deadlock due to behavior of RWLock #1012
Bug 2063835: backport 2052975 to 4.9 #996
Bug 2060080: [release-4.9] Network Policy fixes #985
[release 4.9] Update project owners #991
Bug 2055317: Hack ITP:preferLocal for DNS service #964
Bug 2034744: Fix egress IP allocator sync #887
Bug 2053310: [release-4.9] Fix pod-creation-retry #951
Bug 2045576: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #938
Bug 2054299: Lock the reassignment procedure during node deletion to avoid races #955
Bug 2056883: Revert “HACK: disable skip_snat for load balancers.” #942
Bug 2055549: Fix podHandlerCache key #962
Bug 2040594: Create iptables NAT rules also for loadbalancer services #905
Bug 2014003: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #952
Bug 2054139: Don’t return err when annotation cannot be unmarshalled #954
Bug 1996751: Bump OVN to 21.12 #959
Bug 2028812: Modification of ClusterIPs shall trigger svc update #872
Bug 2042494: [4.9] Set the OVS port as transient #914
Bug 2022049: EgressGW: only return unique elements from getRouteInfosForGateway() #826
Bug 2034669: Fix node connectivity to service backed by egress IP pods #886
Bug 2036977: Fixes for shared to local gateway migration #892
Bug 2034668: Fix pod handlers and pod IP parsing for egress IP #884
Bug 2035336: [4.9-backport] Fix Netpol retry mechanisms #893
Bug 2033672: Multiple exgw - Use –may-exist on hybrid policy and correct hybrid policy cleanup #877
Bug 2027864: [4.9z] Fixes race between node handler and pod sync #857
Bug 2027983: [4.9.z] Make config parsing more resilient for unknown fields #860
Bug 2027485: [4.9z] addressManager should not call sync() from ErrorCallback #852
Bug 2022042: [4.9z] Avoid stale annotations by re-subscribing to netlink #828
Bug 2018398: [4.9z] findLegacyLBs to also include idling LBs #837
Bug 2016945: Update iface-id-ver for existing ports #805
Bug 1997072: [4.9] phase 2 scale improvements #778
Bug 2009515: [4.9] ovs: bump to 2.16.0-15.el8fdp #776
Bug 2009857: filter out KubeAPIAuth when logging CNI requests #777
Bug 2012025: bump OVN to ovn21.09-21.09.0-20.el8fdp #788
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2052201: Address race condition in recreate flow for statefulset #167
BUG 2041459: alertmanager: only load cfg when writing cfg #148
Full changelog

tests

OCPBUGS-10330: Bump(openshift/kubernetes): to get fix for resizing flake #27805
disruption checking is disabled for prior releases because we lack a … #27473
OCPBUGS-1967: allow 2.5% disruption for 4.9 controlplane availability test #27465
OCPBUGS-1052: allow frontends to tolerate 2.5% disruption during upgrades #27434
Bug 2101429: test: switch to testing CapBnd over CapInh #27279
Bug 2064800: skip imageregistry serial test on disconnected environments #27189
Bug 2077167: disable unidling test failing under ovn-k #27172
Bug 2087230: disable flaky unidling test #27150
Bug 2076241: Remove second reference to BlueOcean annotations #27066
Bug 2076256: Remove BlueOcean annotation check #27038
Bug 2072902: [release-4.9] exclude loki-promtail from duplicated events #26986
Bug 2055380: cleanup network policy ACL extended test #26947
Bug 2063284: Add debug info for signature test #26903
Bug 2041358: images: port image signature workflow test to OCP4/UBI8 #26751
Bug 2008181: [release-4.9]: sync with openshift/kubernetes@release-4.9 #26697
Bug 2026802: copy api-request upperbound for cluster-monitoring-operator #26736
Bug 2033341: tests: skip some tests for proxy #26705
Bug 2033341: [release-4.9] test: skip tests that won’t work behind a proxy automatically #26664
Bug 2027796: [release-4.9] Specify default namespace when getting API endpoint #26644 #26644
Bug 2027929: test/e2e/upgrade/adminack: Poll gates for duration of update #26656
Bug 2024433: CustomNoUpgrade should not fire no-upgrade failures #26615
Bug 2024773: Skipping Django Test until bug is fixed #26622
Bug 2022866: tests/extended/builds handle new step logging #26606
Bug 2024659: Switch the cluster-role-reapers test to Serial #26618
Bug 2024656: Create new-project without updating kubeconfig #26619
Bug 2025722: test/e2e/upgrade: Bump durationToSoftFailure by 15m for minor updates #26634
Bug 2025088: Add admin ack Upgradeable condition gate test #26629
Bug 2018442: Add more tests for image policy #26567
Bug 2010225: vendor: e2e iperf2 change threshold to 10MBps = 80 Mbps #26526
Bug 2019518: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26561
Full changelog

thanos

Bug 2074413: Thanos Querier high CPU and memory usage till OOM #81
Full changelog

vsphere-csi-driver-operator

Bug 2018496: Close connection to vCenter API #50
Full changelog

vsphere-problem-detector

Bug 2060214: Fix stale metrics #82
Bug 2033733: Deferred logout after checks are run #67
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github