# 4.8.23 Created: 2021-12-01 06:30:37 +0000 UTC Image Digest: `sha256:3fab205d36c66825423274eac90f4c142a18cdf358b4a666a1783d325afba860` Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2021-11-30-125318 ## Changes from 4.8.21 ### Components * Kubernetes upgraded from 1.21.5 to 1.21.6 * Red Hat Enterprise Linux CoreOS upgraded from 48.84.202111061102-0 to 48.84.202111301103-0 ### Rebuilt images without code change * [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:b656b7d8dafcb3a45da38903526a59a4b26902224e8e204dbaaf10f54c5698cb` * [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:a0a2e0306d6d5e45155c72f326cae1259e453e4adc3c0b4650d21f58582b842d` * [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:02a280b9714cda6a97a16fc84fe71a3321ddb56056ddffa86af669d0761447af` * machine-os-content `sha256:256d35befaa94d5c54f1223771693e56c68835286ae3481c6520f1cd20bafe32` * [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:30d677c3467c17651ea13934c130228375c56a89b667feba9211c7021eab2fb4` ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7123680a2275e9f6f33a0a325ab61a129a54c2af) * [Bug 2023363](https://bugzilla.redhat.com/show_bug.cgi?id=2023363): Add ingress rules to master SG for compact clusters [#5386](https://github.com/openshift/installer/pull/5386) * [Full changelog](https://github.com/openshift/installer/compare/1c11fbcac64b85985ed1c30852317164cab06f10...7123680a2275e9f6f33a0a325ab61a129a54c2af) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/b81033d29af3654503dc1505b86032a7a7a88dde) * [Bug 2026098](https://bugzilla.redhat.com/show_bug.cgi?id=2026098): Check for aws status in infra platform status field before client setup [#425](https://github.com/openshift/cloud-credential-operator/pull/425) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b8932e9fc555bc5bc356eddb3b48358caba72e92...b81033d29af3654503dc1505b86032a7a7a88dde) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/add29b86c2c920c68d21e9db50a16019266fcf58) * [Bug 2026237](https://bugzilla.redhat.com/show_bug.cgi?id=2026237): Change ClusterAutoscalerUnschedulablePods severity to info [#232](https://github.com/openshift/cluster-autoscaler-operator/pull/232) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/eb7d0773ce09b4cc121487497e7dc6cdb7a77aa5...add29b86c2c920c68d21e9db50a16019266fcf58) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e6d8251927350ef2ac8d283833954485827b9b85) * [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 1 [#78](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/78) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/c4f4f8bbfc87b9fe057de2a05e484387eea1fddb...e6d8251927350ef2ac8d283833954485827b9b85) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/887cf90963a370dda85c7753eceabdcdcaea17eb) * [Bug 1982683](https://bugzilla.redhat.com/show_bug.cgi?id=1982683): [release-4.8] Respect noProxy [#691](https://github.com/openshift/cluster-version-operator/pull/691) * [Bug 2025955](https://bugzilla.redhat.com/show_bug.cgi?id=2025955): Removing the extra indentation [#696](https://github.com/openshift/cluster-version-operator/pull/696) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/d8950e184b86798d71fe50b69e452b52e3169265...887cf90963a370dda85c7753eceabdcdcaea17eb) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/935ba91ed9a84f6eca651febef85882c2dc05daa) * [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045) * Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559) * [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069) * [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060) * Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680) * [Full changelog](https://github.com/openshift/kubernetes/compare/6a39d04599dcbdd4a65f033b55539f9f552d4b2c...935ba91ed9a84f6eca651febef85882c2dc05daa) ### [insights-operator](https://github.com/openshift/insights-operator/tree/44ea07237eafeef8610a8389f84f1eb60966d4c5) * [Bug 2021572](https://bugzilla.redhat.com/show_bug.cgi?id=2021572): Anonymize identity provider attributes in the (#520) (#527) (#541) [#520](https://github.com/openshift/insights-operator/pull/520) * [Full changelog](https://github.com/openshift/insights-operator/compare/54edca0db6403e9c3d9828d5cf55be8cf43a5e8e...44ea07237eafeef8610a8389f84f1eb60966d4c5) ### [ironic](https://github.com/openshift/ironic-image/tree/2f01b89f40ff769bc2aa7f070b40445d79e3bf44) * [Bug 2017413](https://bugzilla.redhat.com/show_bug.cgi?id=2017413): [4.8] fix Image provisioning fails with file name too long [#229](https://github.com/openshift/ironic-image/pull/229) * [Bug 2025755](https://bugzilla.redhat.com/show_bug.cgi?id=2025755): Enable vMedia provisioning of SuperMicro X11/X12 [#237](https://github.com/openshift/ironic-image/pull/237) * [Full changelog](https://github.com/openshift/ironic-image/compare/8962ebaf9495a1543073418a81555ab7a0690bef...2f01b89f40ff769bc2aa7f070b40445d79e3bf44) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/b6350470611671e97424c0905cecb4494f9b6814) * [Bug 2020614](https://bugzilla.redhat.com/show_bug.cgi?id=2020614): Update Jenkins and plugins per 2021-11 advisory [#1347](https://github.com/openshift/jenkins/pull/1347) * [Full changelog](https://github.com/openshift/jenkins/compare/1ebe7d07db6f05981ead1cbeff601d969ee0714a...b6350470611671e97424c0905cecb4494f9b6814) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/43dd2f6dc30e0536486a5e6678290a48af423532) * [Bug 2022722](https://bugzilla.redhat.com/show_bug.cgi?id=2022722): Make completed Pods Ports reusable [#600](https://github.com/openshift/kuryr-kubernetes/pull/600) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/db40603d14681b807e3ecc532990b2b407a79982...43dd2f6dc30e0536486a5e6678290a48af423532) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7870c095fcb4509c445ed36c800f99ae919daf30) * [Bug 2026562](https://bugzilla.redhat.com/show_bug.cgi?id=2026562): MaxUnhealthy should not be a string type [#962](https://github.com/openshift/machine-api-operator/pull/962) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/42084dcdfac268926b35ddae3b73ed43b34cd16e...7870c095fcb4509c445ed36c800f99ae919daf30) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/9de2dc1eeacb52e0eb46d2392272945d9f1b3977) * [Bug 2021073](https://bugzilla.redhat.com/show_bug.cgi?id=2021073): [ipi onprem] cherry pick Keepalived default ingress scripts fixes [#2826](https://github.com/openshift/machine-config-operator/pull/2826) * [Bug 2026085](https://bugzilla.redhat.com/show_bug.cgi?id=2026085): Send WARN message to stderr [#2836](https://github.com/openshift/machine-config-operator/pull/2836) * [Bug 2024511](https://bugzilla.redhat.com/show_bug.cgi?id=2024511): [release-4.8] [on-prem] Manual backporting of keepalived arp retries [#2831](https://github.com/openshift/machine-config-operator/pull/2831) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/3b46a2229b706cc9aa53e3ed86a407fbe3c5dff4...9de2dc1eeacb52e0eb46d2392272945d9f1b3977) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/e3b259b9f70f3ea3695b73c4f090785c7b964399) * [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs [#259](https://github.com/openshift/openshift-apiserver/pull/259) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/628b46ccb01278190201fa3faf0c339ebfdef110...e3b259b9f70f3ea3695b73c4f090785c7b964399) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/b5183e8b7b7b9551600dea317bf5c212db0cf4e6) * [Bug 2022043](https://bugzilla.redhat.com/show_bug.cgi?id=2022043): [4.8z] Avoid stale annotations by re-subscribing to netlink [#829](https://github.com/openshift/ovn-kubernetes/pull/829) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/f1d74e354da9337853677d4f20b03fc14107beb3...b5183e8b7b7b9551600dea317bf5c212db0cf4e6) ### [tests](https://github.com/openshift/origin/tree/201e1e789bcafad3c4c58b90f1f19d3a22a4aa12) * [Bug 2025724](https://bugzilla.redhat.com/show_bug.cgi?id=2025724): Add admin ack Upgradeable condition gate test [#26635](https://github.com/openshift/origin/pull/26635) * [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Add more tests for image policy [#26584](https://github.com/openshift/origin/pull/26584) * [Full changelog](https://github.com/openshift/origin/compare/6a472cb91076f9fbdf5f2d9f80272828342df687...201e1e789bcafad3c4c58b90f1f19d3a22a4aa12)