# 4.8.24 Created: 2021-12-08 07:04:56 +0000 UTC Image Digest: `sha256:0708475f51e969dd9e6902d958f8ffed668b1b9c8d63b6241e7c9e40d9548eee` Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2021-12-06-234030 ## Changes from 4.8.22 ### Components * Kubernetes 1.21.6 * Red Hat Enterprise Linux CoreOS upgraded from 48.84.202111222303-0 to 48.84.202112022303-0 ### Rebuilt images without code change * [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [b3ecae8d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/b3ecae8d1c6cd84a8784cf3dd17532797af7b724) `sha256:e0cd62001cd6258c50cef00c076be0c0e0c5f9c6c13da7d1aa024afc834c0ee0` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [71967e7d](https://github.com/openshift/ironic-rhcos-downloader/commit/71967e7deca9e9d0e094cbaedb7fe7ce0267dd84) `sha256:d82f49614b4b2102fb3f93737a0e6b1729f2ff92eb11778928b619e99f17159a` * [jenkins](https://github.com/openshift/jenkins) git [b6350470](https://github.com/openshift/jenkins/commit/b6350470611671e97424c0905cecb4494f9b6814) `sha256:72f248cc54bb653d08c21f7362be9e9115bde57f187b27a448f37538d376d130` * [jenkins-agent-base](https://github.com/openshift/jenkins) git [b6350470](https://github.com/openshift/jenkins/commit/b6350470611671e97424c0905cecb4494f9b6814) `sha256:03b17aa4c1c74d50b09f0b050ece13f081fac39885046ec7a510bb8934a6eb33` * [jenkins-agent-maven](https://github.com/openshift/jenkins) git [b6350470](https://github.com/openshift/jenkins/commit/b6350470611671e97424c0905cecb4494f9b6814) `sha256:7f9ada7c62a7290fdb376ada52e582b05a65e5008598d1c218675bcc5089e1e5` * [jenkins-agent-nodejs](https://github.com/openshift/jenkins) git [b6350470](https://github.com/openshift/jenkins/commit/b6350470611671e97424c0905cecb4494f9b6814) `sha256:c009c145bd5c9113630d94dcb8b83f88b9f0a6689ff71b87ffe70b8f76645222` * machine-os-content `sha256:a483b8f61dacaa714c6fb570ba5be023978ce91a60fdced2f410bdee8b1446bc` * [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:bd942bdb6e3d3aa7cec309bee896c71637a6ddfcb5ecd5101a7f8599da9f8d40` * [tools](https://github.com/openshift/oc) git [88e7eba3](https://github.com/openshift/oc/commit/88e7eba36ac7cc026d064bb6e4a988acc18a144e) `sha256:892b6b34e50000e714161fd5dbf28d35d48cfe7b48579d19be45b2a16e7a7176` ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/58ef8af861317beceac26691d5c452af45ca0e4a) * [Bug 2029253](https://bugzilla.redhat.com/show_bug.cgi?id=2029253): update go.mod for go1.16 [#148](https://github.com/openshift/aws-pod-identity-webhook/pull/148) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/2b8eee2a4f0555c6d4ce7700fda774190574fb5d...58ef8af861317beceac26691d5c452af45ca0e4a) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/eb682c49d885fdb109f5867b8e09535f76ce89aa) * [Bug 2027928](https://bugzilla.redhat.com/show_bug.cgi?id=2027928): pod-identity-webhook starts without tls [#429](https://github.com/openshift/cloud-credential-operator/pull/429) * [Bug 2027832](https://bugzilla.redhat.com/show_bug.cgi?id=2027832): Stop putting CCO in degraded state when stale credentials are found [#428](https://github.com/openshift/cloud-credential-operator/pull/428) * [Bug 2026098](https://bugzilla.redhat.com/show_bug.cgi?id=2026098): Check for aws status in infra platform status field before client setup [#425](https://github.com/openshift/cloud-credential-operator/pull/425) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b8932e9fc555bc5bc356eddb3b48358caba72e92...eb682c49d885fdb109f5867b8e09535f76ce89aa) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/add29b86c2c920c68d21e9db50a16019266fcf58) * [Bug 2026237](https://bugzilla.redhat.com/show_bug.cgi?id=2026237): Change ClusterAutoscalerUnschedulablePods severity to info [#232](https://github.com/openshift/cluster-autoscaler-operator/pull/232) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/eb7d0773ce09b4cc121487497e7dc6cdb7a77aa5...add29b86c2c920c68d21e9db50a16019266fcf58) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/828e403f08f371888b458ad1d210ae989e66fe2b) * [Bug 2024689](https://bugzilla.redhat.com/show_bug.cgi?id=2024689): Allow fallback to serving cert renewal accounting for egress IPs on SDN [#142](https://github.com/openshift/cluster-machine-approver/pull/142) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/724abd216ea546671fbfa4c9060180ff1619c85a...828e403f08f371888b458ad1d210ae989e66fe2b) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/837db83388c0aeafac0068d5f3a0d5adbbefbbb3) * [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#473](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/473) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ae147c0da31eb02daf90c76808c0caaa6017a017...837db83388c0aeafac0068d5f3a0d5adbbefbbb3) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/887cf90963a370dda85c7753eceabdcdcaea17eb) * [Bug 1982683](https://bugzilla.redhat.com/show_bug.cgi?id=1982683): [release-4.8] Respect noProxy [#691](https://github.com/openshift/cluster-version-operator/pull/691) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b54acbccdd9d562ba413e0d4391d79bb77f51663...887cf90963a370dda85c7753eceabdcdcaea17eb) ### [console](https://github.com/openshift/console/tree/622bf63922c2ec79c49f7e527c4a9d846f468c7e) * [Bug 2024206](https://bugzilla.redhat.com/show_bug.cgi?id=2024206): Fix resource metrics 403 errors for project admin users [#10496](https://github.com/openshift/console/pull/10496) * [Bug 2026950](https://bugzilla.redhat.com/show_bug.cgi?id=2026950): Fix autofocus on pf select component for search resource dropdown [#10577](https://github.com/openshift/console/pull/10577) * [Full changelog](https://github.com/openshift/console/compare/965c21f4d329d633835165a25fc8b51c6e9a2781...622bf63922c2ec79c49f7e527c4a9d846f468c7e) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/c180a7cb22ca0f5e7db459a299405ea69e556128) * [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054) * [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045) * Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559) * [Full changelog](https://github.com/openshift/kubernetes/compare/81bc6270c11a47c112024568f26b4d4f893a21c3...c180a7cb22ca0f5e7db459a299405ea69e556128) ### [insights-operator](https://github.com/openshift/insights-operator/tree/0a81fa44a7b981a64c8e34d25b0d5206564f4cd7) * [Bug 2027720](https://bugzilla.redhat.com/show_bug.cgi?id=2027720): gather webhook configurations (#508) (#560) [#508](https://github.com/openshift/insights-operator/pull/508) * [Bug 2026646](https://bugzilla.redhat.com/show_bug.cgi?id=2026646): Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) [#516](https://github.com/openshift/insights-operator/pull/516) * [Full changelog](https://github.com/openshift/insights-operator/compare/44ea07237eafeef8610a8389f84f1eb60966d4c5...0a81fa44a7b981a64c8e34d25b0d5206564f4cd7) ### [ironic](https://github.com/openshift/ironic-image/tree/fa8525ea51101fb69b8766d927a5123986a74725) * [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): Compare IPs using the short form of IPv6 address [#233](https://github.com/openshift/ironic-image/pull/233) * [Bug 2017413](https://bugzilla.redhat.com/show_bug.cgi?id=2017413): [4.8] fix Image provisioning fails with file name too long [#229](https://github.com/openshift/ironic-image/pull/229) * [Bug 2025755](https://bugzilla.redhat.com/show_bug.cgi?id=2025755): Enable vMedia provisioning of SuperMicro X11/X12 [#237](https://github.com/openshift/ironic-image/pull/237) * [Full changelog](https://github.com/openshift/ironic-image/compare/8962ebaf9495a1543073418a81555ab7a0690bef...fa8525ea51101fb69b8766d927a5123986a74725) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/62479b7460d72578e5217efd6ed86087913405ec) * [Bug 2027397](https://bugzilla.redhat.com/show_bug.cgi?id=2027397): [EgressIP] move ct(commit) action from OVS group to flow [#377](https://github.com/openshift/sdn/pull/377) * [Full changelog](https://github.com/openshift/sdn/compare/97e380e65983b903b9ba7c5e492f1a94f384bfaf...62479b7460d72578e5217efd6ed86087913405ec) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7870c095fcb4509c445ed36c800f99ae919daf30) * [Bug 2026562](https://bugzilla.redhat.com/show_bug.cgi?id=2026562): MaxUnhealthy should not be a string type [#962](https://github.com/openshift/machine-api-operator/pull/962) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/42084dcdfac268926b35ddae3b73ed43b34cd16e...7870c095fcb4509c445ed36c800f99ae919daf30) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1aeaf8c9c93dc772e65e23668dd435d06d833bcf) * [Bug 2028025](https://bugzilla.redhat.com/show_bug.cgi?id=2028025): [Release 4.8] daemon: make cordon/uncordon more robust and better logging [#2853](https://github.com/openshift/machine-config-operator/pull/2853) * [Bug 2017493](https://bugzilla.redhat.com/show_bug.cgi?id=2017493): configure-ovs: Persist addr-gen-mode for ipv6 connections [#2810](https://github.com/openshift/machine-config-operator/pull/2810) * [Bug 2021073](https://bugzilla.redhat.com/show_bug.cgi?id=2021073): [ipi onprem] cherry pick Keepalived default ingress scripts fixes [#2826](https://github.com/openshift/machine-config-operator/pull/2826) * [Bug 2026085](https://bugzilla.redhat.com/show_bug.cgi?id=2026085): Send WARN message to stderr [#2836](https://github.com/openshift/machine-config-operator/pull/2836) * [Bug 2024511](https://bugzilla.redhat.com/show_bug.cgi?id=2024511): [release-4.8] [on-prem] Manual backporting of keepalived arp retries [#2831](https://github.com/openshift/machine-config-operator/pull/2831) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/3b46a2229b706cc9aa53e3ed86a407fbe3c5dff4...1aeaf8c9c93dc772e65e23668dd435d06d833bcf) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/46a77c4cdb4d797fcce009442d537dad01018298) * [Bug 2027487](https://bugzilla.redhat.com/show_bug.cgi?id=2027487): [4.8z] addressManager should not call sync() from ErrorCallback [#853](https://github.com/openshift/ovn-kubernetes/pull/853) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b5183e8b7b7b9551600dea317bf5c212db0cf4e6...46a77c4cdb4d797fcce009442d537dad01018298) ### [tests](https://github.com/openshift/origin/tree/afb0cd2c22518d599d0bcf6b6c2ede00ef439b40) * [Bug 2028021](https://bugzilla.redhat.com/show_bug.cgi?id=2028021): Bump update time limit 4.8 [#26657](https://github.com/openshift/origin/pull/26657) * [Bug 1929650](https://bugzilla.redhat.com/show_bug.cgi?id=1929650): Increase OVN upgrade timeout by 15m [#26654](https://github.com/openshift/origin/pull/26654) * [Bug 2025724](https://bugzilla.redhat.com/show_bug.cgi?id=2025724): Add admin ack Upgradeable condition gate test [#26635](https://github.com/openshift/origin/pull/26635) * [Full changelog](https://github.com/openshift/origin/compare/e2ce082172877303a92ec6a0bd60ee523e25402e...afb0cd2c22518d599d0bcf6b6c2ede00ef439b40)