# 4.8.24

Created: 2021-12-08 07:04:56 +0000 UTC

Image Digest: `sha256:0708475f51e969dd9e6902d958f8ffed668b1b9c8d63b6241e7c9e40d9548eee`

Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2021-12-06-234030


## Changes from 4.8.21

### Components

* Kubernetes upgraded from 1.21.5 to 1.21.6
* Red Hat Enterprise Linux CoreOS upgraded from 48.84.202111061102-0 to 48.84.202112022303-0


### Rebuilt images without code change

* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:b656b7d8dafcb3a45da38903526a59a4b26902224e8e204dbaaf10f54c5698cb`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:a0a2e0306d6d5e45155c72f326cae1259e453e4adc3c0b4650d21f58582b842d`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:02a280b9714cda6a97a16fc84fe71a3321ddb56056ddffa86af669d0761447af`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [b3ecae8d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/b3ecae8d1c6cd84a8784cf3dd17532797af7b724) `sha256:e0cd62001cd6258c50cef00c076be0c0e0c5f9c6c13da7d1aa024afc834c0ee0`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [71967e7d](https://github.com/openshift/ironic-rhcos-downloader/commit/71967e7deca9e9d0e094cbaedb7fe7ce0267dd84) `sha256:d82f49614b4b2102fb3f93737a0e6b1729f2ff92eb11778928b619e99f17159a`
* machine-os-content `sha256:a483b8f61dacaa714c6fb570ba5be023978ce91a60fdced2f410bdee8b1446bc`
* [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:bd942bdb6e3d3aa7cec309bee896c71637a6ddfcb5ecd5101a7f8599da9f8d40`
* [tools](https://github.com/openshift/oc) git [88e7eba3](https://github.com/openshift/oc/commit/88e7eba36ac7cc026d064bb6e4a988acc18a144e) `sha256:892b6b34e50000e714161fd5dbf28d35d48cfe7b48579d19be45b2a16e7a7176`


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/58ef8af861317beceac26691d5c452af45ca0e4a)

* [Bug 2029253](https://bugzilla.redhat.com/show_bug.cgi?id=2029253): update go.mod for go1.16 [#148](https://github.com/openshift/aws-pod-identity-webhook/pull/148)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/2b8eee2a4f0555c6d4ce7700fda774190574fb5d...58ef8af861317beceac26691d5c452af45ca0e4a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7123680a2275e9f6f33a0a325ab61a129a54c2af)

* [Bug 2023363](https://bugzilla.redhat.com/show_bug.cgi?id=2023363): Add ingress rules to master SG for compact clusters [#5386](https://github.com/openshift/installer/pull/5386)
* [Full changelog](https://github.com/openshift/installer/compare/1c11fbcac64b85985ed1c30852317164cab06f10...7123680a2275e9f6f33a0a325ab61a129a54c2af)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/eb682c49d885fdb109f5867b8e09535f76ce89aa)

* [Bug 2027928](https://bugzilla.redhat.com/show_bug.cgi?id=2027928): pod-identity-webhook starts without tls [#429](https://github.com/openshift/cloud-credential-operator/pull/429)
* [Bug 2027832](https://bugzilla.redhat.com/show_bug.cgi?id=2027832): Stop putting CCO in degraded state when stale credentials are found [#428](https://github.com/openshift/cloud-credential-operator/pull/428)
* [Bug 2026098](https://bugzilla.redhat.com/show_bug.cgi?id=2026098): Check for aws status in infra platform status field before client setup [#425](https://github.com/openshift/cloud-credential-operator/pull/425)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b8932e9fc555bc5bc356eddb3b48358caba72e92...eb682c49d885fdb109f5867b8e09535f76ce89aa)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/add29b86c2c920c68d21e9db50a16019266fcf58)

* [Bug 2026237](https://bugzilla.redhat.com/show_bug.cgi?id=2026237): Change ClusterAutoscalerUnschedulablePods severity to info [#232](https://github.com/openshift/cluster-autoscaler-operator/pull/232)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/eb7d0773ce09b4cc121487497e7dc6cdb7a77aa5...add29b86c2c920c68d21e9db50a16019266fcf58)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e6d8251927350ef2ac8d283833954485827b9b85)

* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 1 [#78](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/78)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/c4f4f8bbfc87b9fe057de2a05e484387eea1fddb...e6d8251927350ef2ac8d283833954485827b9b85)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/828e403f08f371888b458ad1d210ae989e66fe2b)

* [Bug 2024689](https://bugzilla.redhat.com/show_bug.cgi?id=2024689): Allow fallback to serving cert renewal accounting for egress IPs on SDN [#142](https://github.com/openshift/cluster-machine-approver/pull/142)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/724abd216ea546671fbfa4c9060180ff1619c85a...828e403f08f371888b458ad1d210ae989e66fe2b)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/837db83388c0aeafac0068d5f3a0d5adbbefbbb3)

* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#473](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/473)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ae147c0da31eb02daf90c76808c0caaa6017a017...837db83388c0aeafac0068d5f3a0d5adbbefbbb3)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/887cf90963a370dda85c7753eceabdcdcaea17eb)

* [Bug 1982683](https://bugzilla.redhat.com/show_bug.cgi?id=1982683): [release-4.8] Respect noProxy [#691](https://github.com/openshift/cluster-version-operator/pull/691)
* [Bug 2025955](https://bugzilla.redhat.com/show_bug.cgi?id=2025955): Removing the extra indentation [#696](https://github.com/openshift/cluster-version-operator/pull/696)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/d8950e184b86798d71fe50b69e452b52e3169265...887cf90963a370dda85c7753eceabdcdcaea17eb)


### [console](https://github.com/openshift/console/tree/622bf63922c2ec79c49f7e527c4a9d846f468c7e)

* [Bug 2024206](https://bugzilla.redhat.com/show_bug.cgi?id=2024206): Fix resource metrics 403 errors for project admin users [#10496](https://github.com/openshift/console/pull/10496)
* [Bug 2026950](https://bugzilla.redhat.com/show_bug.cgi?id=2026950): Fix autofocus on pf select component for search resource dropdown [#10577](https://github.com/openshift/console/pull/10577)
* [Full changelog](https://github.com/openshift/console/compare/965c21f4d329d633835165a25fc8b51c6e9a2781...622bf63922c2ec79c49f7e527c4a9d846f468c7e)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/c180a7cb22ca0f5e7db459a299405ea69e556128)

* [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054)
* [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559)
* [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069)
* [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060)
* Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6a39d04599dcbdd4a65f033b55539f9f552d4b2c...c180a7cb22ca0f5e7db459a299405ea69e556128)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0a81fa44a7b981a64c8e34d25b0d5206564f4cd7)

* [Bug 2027720](https://bugzilla.redhat.com/show_bug.cgi?id=2027720): gather webhook configurations (#508) (#560) [#508](https://github.com/openshift/insights-operator/pull/508)
* [Bug 2026646](https://bugzilla.redhat.com/show_bug.cgi?id=2026646): Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) [#516](https://github.com/openshift/insights-operator/pull/516)
* [Bug 2021572](https://bugzilla.redhat.com/show_bug.cgi?id=2021572): Anonymize identity provider attributes in the (#520) (#527) (#541) [#520](https://github.com/openshift/insights-operator/pull/520)
* [Full changelog](https://github.com/openshift/insights-operator/compare/54edca0db6403e9c3d9828d5cf55be8cf43a5e8e...0a81fa44a7b981a64c8e34d25b0d5206564f4cd7)


### [ironic](https://github.com/openshift/ironic-image/tree/fa8525ea51101fb69b8766d927a5123986a74725)

* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): Compare IPs using the short form of IPv6 address [#233](https://github.com/openshift/ironic-image/pull/233)
* [Bug 2017413](https://bugzilla.redhat.com/show_bug.cgi?id=2017413): [4.8] fix Image provisioning fails with file name too long [#229](https://github.com/openshift/ironic-image/pull/229)
* [Bug 2025755](https://bugzilla.redhat.com/show_bug.cgi?id=2025755): Enable vMedia provisioning of SuperMicro X11/X12 [#237](https://github.com/openshift/ironic-image/pull/237)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8962ebaf9495a1543073418a81555ab7a0690bef...fa8525ea51101fb69b8766d927a5123986a74725)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/b6350470611671e97424c0905cecb4494f9b6814)

* [Bug 2020614](https://bugzilla.redhat.com/show_bug.cgi?id=2020614): Update Jenkins and plugins per 2021-11 advisory [#1347](https://github.com/openshift/jenkins/pull/1347)
* [Full changelog](https://github.com/openshift/jenkins/compare/1ebe7d07db6f05981ead1cbeff601d969ee0714a...b6350470611671e97424c0905cecb4494f9b6814)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/62479b7460d72578e5217efd6ed86087913405ec)

* [Bug 2027397](https://bugzilla.redhat.com/show_bug.cgi?id=2027397): [EgressIP] move ct(commit) action from OVS group to flow [#377](https://github.com/openshift/sdn/pull/377)
* [Full changelog](https://github.com/openshift/sdn/compare/97e380e65983b903b9ba7c5e492f1a94f384bfaf...62479b7460d72578e5217efd6ed86087913405ec)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/43dd2f6dc30e0536486a5e6678290a48af423532)

* [Bug 2022722](https://bugzilla.redhat.com/show_bug.cgi?id=2022722): Make completed Pods Ports reusable [#600](https://github.com/openshift/kuryr-kubernetes/pull/600)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/db40603d14681b807e3ecc532990b2b407a79982...43dd2f6dc30e0536486a5e6678290a48af423532)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7870c095fcb4509c445ed36c800f99ae919daf30)

* [Bug 2026562](https://bugzilla.redhat.com/show_bug.cgi?id=2026562): MaxUnhealthy should not be a string type [#962](https://github.com/openshift/machine-api-operator/pull/962)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/42084dcdfac268926b35ddae3b73ed43b34cd16e...7870c095fcb4509c445ed36c800f99ae919daf30)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1aeaf8c9c93dc772e65e23668dd435d06d833bcf)

* [Bug 2028025](https://bugzilla.redhat.com/show_bug.cgi?id=2028025): [Release 4.8] daemon: make cordon/uncordon more robust and better logging [#2853](https://github.com/openshift/machine-config-operator/pull/2853)
* [Bug 2017493](https://bugzilla.redhat.com/show_bug.cgi?id=2017493): configure-ovs: Persist addr-gen-mode for ipv6 connections [#2810](https://github.com/openshift/machine-config-operator/pull/2810)
* [Bug 2021073](https://bugzilla.redhat.com/show_bug.cgi?id=2021073): [ipi onprem] cherry pick Keepalived default ingress scripts fixes [#2826](https://github.com/openshift/machine-config-operator/pull/2826)
* [Bug 2026085](https://bugzilla.redhat.com/show_bug.cgi?id=2026085): Send WARN message to stderr [#2836](https://github.com/openshift/machine-config-operator/pull/2836)
* [Bug 2024511](https://bugzilla.redhat.com/show_bug.cgi?id=2024511): [release-4.8] [on-prem] Manual backporting of keepalived arp retries [#2831](https://github.com/openshift/machine-config-operator/pull/2831)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3b46a2229b706cc9aa53e3ed86a407fbe3c5dff4...1aeaf8c9c93dc772e65e23668dd435d06d833bcf)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/e3b259b9f70f3ea3695b73c4f090785c7b964399)

* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs [#259](https://github.com/openshift/openshift-apiserver/pull/259)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/628b46ccb01278190201fa3faf0c339ebfdef110...e3b259b9f70f3ea3695b73c4f090785c7b964399)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/46a77c4cdb4d797fcce009442d537dad01018298)

* [Bug 2027487](https://bugzilla.redhat.com/show_bug.cgi?id=2027487): [4.8z] addressManager should not call sync() from ErrorCallback [#853](https://github.com/openshift/ovn-kubernetes/pull/853)
* [Bug 2022043](https://bugzilla.redhat.com/show_bug.cgi?id=2022043): [4.8z] Avoid stale annotations by re-subscribing to netlink [#829](https://github.com/openshift/ovn-kubernetes/pull/829)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/f1d74e354da9337853677d4f20b03fc14107beb3...46a77c4cdb4d797fcce009442d537dad01018298)


### [tests](https://github.com/openshift/origin/tree/afb0cd2c22518d599d0bcf6b6c2ede00ef439b40)

* [Bug 2028021](https://bugzilla.redhat.com/show_bug.cgi?id=2028021): Bump update time limit 4.8 [#26657](https://github.com/openshift/origin/pull/26657)
* [Bug 1929650](https://bugzilla.redhat.com/show_bug.cgi?id=1929650): Increase OVN upgrade timeout by 15m [#26654](https://github.com/openshift/origin/pull/26654)
* [Bug 2025724](https://bugzilla.redhat.com/show_bug.cgi?id=2025724): Add admin ack Upgradeable condition gate test [#26635](https://github.com/openshift/origin/pull/26635)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Add more tests for image policy [#26584](https://github.com/openshift/origin/pull/26584)
* [Full changelog](https://github.com/openshift/origin/compare/6a472cb91076f9fbdf5f2d9f80272828342df687...afb0cd2c22518d599d0bcf6b6c2ede00ef439b40)