Back to index
4.10.24
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.24-x86_64
Tests:
- Blocking jobs
- Informing jobs
Upgrades from:
Untested upgrades:
4.10.10,
4.10.12,
4.10.14,
4.10.16,
4.10.17,
4.10.8,
4.9.25,
4.9.26,
4.9.28,
4.9.29,
4.9.31,
4.9.32,
4.9.34,
4.9.35,
4.9.37,
4.9.38,
4.9.39Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.10.5
Created: 2022-07-20 07:22:27 +0000 UTC
Image Digest: sha256:aab51636460b5a9757b736a29bc92ada6e6e6282e46b06e6fd483063d590d62a
Release 4.10.24 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2022-07-19-210744
Components
Removed images
- cluster-capi-controllers
- cluster-capi-operator
Rebuilt images without code change
- Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #65
- Full changelog
- Update OWNERS #123
- Bug 2077498: Merge Upstream etcd 3.5.3 into Openshift 4.10 #118
- PR 13923 to release-3.5 #13938
- Dockerfile*: Switch baseimage to k8s hosted one #13862
- Set backend to cindex before recovering the lessor in applySnapshot #13933
- Support linearizable renew lease #13932
- clientv3: filter learners members during autosync #13917
- etcdserver: upgrade the golang.org/x/crypto dependency #13669
- Fix the data inconsistency issue by adding a txPostLockHook into the backend #13908
- server: Save consistency index and term to backend even when they decrease #13904
- go.mod: Upgrade to prometheus/client_golang v1.11.1 #13895
- server: Add verification of whether lock was called within out outsid… #13887
- Fix inconsistent log format #13866
- Makefile: Fix wrong target #13858
- Update go to 1.16.15 #13832
- Fix offline defrag in etcdctl #13792
- backport 3.5: #13676 load all leases from backend #13726
- server/storage/backend: restore original bolt db options after defrag #13701
- Always print raft term in decimal when displaying member list in json #13727
- *: fix IsOptsWithFromKey #13736
- enhance health check endpoint to support serializable request #13706
- Trim the suffix dot from the srv.Target for etcd-client DNS lookup #13714
- Update dep: gopkg.in/yaml.v2 v2.2.8 -> v2.4.0 due to: CVE-2019-11254 [release 3.5] #13616
- Backport watchablestore runlock bug fix to release-3.5 #13541
- Set the backend again after recovering v3 backend from snapshot #13501
- Backport Lease Checkpoints fix to release-3.5 #13515
- Backport PR 13308 to release-3.5 #13477
- cherry-pick to 3.5 from #13467 exclude the same alarm type activated by multiple peers #13476
- storage/backend: Add a gauge to indicate if defrag is active (backport) #13395
- Dockerfile: bump debian bullseye-20210927 #13380
- Cherry pick “Fix http2 authority header in single endpoint scenario” to release-3.5 #13375
- Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync #13348
- Stop using tip golang version in CI #13349
- [backport 3.5]: Automated cherry pick of #13145 #13237 #13257
- Full changelog
- Bug 2106414: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1318
- Bug 2103381: UPSTREAM: <carry>: update list of deprecated apis #1306
- Bug 2104928: UPSTREAM: 109932: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1263
- Bug 2067464: Backport 107821 and 107831 #1241
- Bug 2075831: UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved… #1244
- Bug 2074094: UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic #1237
- Bug 2069311: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1231
- Bug 2065774: Backport 108723 OutofCpu Fixes #1221
- Bug 2065620: Rebase 1.23.5 #1220
- Automated cherry pick of #108631: Remove apf_fd from httplog #108634
- Update Go to 1.17.8 #108559
- Bump konnectivity-client@v0.0.30 #108438
- Automated cherry pick of #107131: Fix default config flags #108401
- Automated cherry pick of #108410: fix dryrun when ca file exists #108469
- Automated cherry pick of #107121: fix regression introduced by PR 100320 #108465
- Automated cherry pick of #107764: wrap error from RunCordonOrUncordon #107938
- Automated cherry pick of #107413: kube-proxy: fix duplicate port opening #108294
- Automated cherry pick of #107997: cronjob_controllerv2: do not filter jobs to be reconciled by #108306
- Automated cherry pick of #108209: increase Azure ACR credential provider timeout #108226
- Automated cherry pick of #108149: fix: do not return early in the node informer when there is #108177
- Automated cherry pick of #108167: Fix nodes volumesAttached status not updated #108461
- Automated cherry pick of #108002: kubeadm: fix the bug that ‘kubeadm init –dry-run #108120
- test/e2e/framework: include the new control plane taint for “–non-blocking-taints” #108336
- /test/e2e_kubeadm: adjust label / taint checks for 1.23 #108170
- Automated cherry pick of #108127: test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap #108128
- Automated cherry pick of #107900: Add an e2e test for updating a static pod while it #107931
- Automated cherry pick of #108198: Updating EndpointSlice strategy to retain node name in #108201
- Automated cherry pick of #108138: Revert v1beta1 PodDisruptionBudget select patchStrategy #108139
- Automated cherry pick of #107670: Ignore container notfound error while getPodstatuses #108164
- Automated cherry pick of #107789: Mark device as uncertain if unmount device succeeds #107791
- Update Go to 1.17.7 #108100
- Automated cherry pick of #107575: fix: azurefile volumeid conflict in csi migration #107850
- Automated cherry pick of #106715: set secondary address on host-network pods #107988
- Automated cherry pick of #107970: Make JSON schema round tripping test more strict #108030
- Automated cherry pick of #107956: Deeply copy JSONSchemaProps.XValidations. #107968
- Automated cherry pick of #107786: Revert “Fix comparison between FQDN and hostname” #107902
- Automated cherry pick of #107847: service REST: Call Decorator(old) on update path #107875
- Automated cherry pick of #106280: Set max results if its not set #107651
- Automated cherry pick of #107695: kubelet: fix podstatus not containing pod full name #107761
- Full changelog
- cache registry files #1567
- feat(oauth): allow challenge override for OpenID #1543
- Add fallback set cache value from old token #1531
- Set Recommended Leader Election Values #1507
- feat(cpo): Support disable profiling annotation #1501
- Use ImagePullPolicyIfNotPresent for HO #1483
- Updated secret permissions to conform to kubernetes CIS benchmark #1480
- Ensure that everything uses imagePullPolicy IfNotPResent for resiliency #1475
- Add missing control plane prometheus rules #1471
- Ensure cache is set during token rotation before reconciling #1461
- Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1416
- feat(cpo): adhere to upgrade order from kube version skew policy #1410
- Set shutdown params to improve graceful shutdown #1387
- fix(cpo): Scope down secrets access for olm collect profiles cj #1378
- move to ga apis for all components now that management clusters at minimum release boundary #1361
- configure cipher suites to prevent using medium strength ssl ciphers #1359
- Use apiserver host/port from InfraStatus in reconciling Kube API Server #1333
- Ignition server: Actually use workdir #1317
- Use forked processes instead of pods to generate ignition payload #1311
- disable reconcile of registry config in IBMCloud deployments #1309
- feat(cpo): Disable PodSecurity for 4.10 #1289
- Disable PodSecurity admission in 4.11 as it breaks conformance #1286
- Expose a service account signing key in the API #1265
- release-4.10 - Create valid route names with long namespace names #1252
- Fast-Forward from main #1233
- e2e: Don’t enable user workload monitoring on management clusters #1231
- Fix priority class for olm cronjob and verify priorityclasses in e2e #1226
- e2e: Don’t fail test on transient recoverable API lookup #1230
- Hypershift operator: Give a priority that is higher than any controlplane component #1229
- Get autoscaler/machine-approver images from the payload #1090
- Document KubeVirt Platform Ingress Setup #1213
- AntiAffinity rules to spread KubeVirt VMs across mgmt nodes #1218
- Retry EIP tagging failures during infra creation #1219
- Fix CPO to work with 4.11 #1217
- read apiserver-network-proxy image from ocp payload #1215
- Add support for AdditionalTrustBundle #972
- docs for DNS indirection #1208
- docs: Upgrade mkdocs/material to fix Netlify breakages #1212
- Dump: Always create an archive #1204
- Update staticcheck to a version that works with go 1.18 #1207
- Unique OpenShift vxlan port for KubeVirt Platform #1206
- Registry configuration: reconcile only what we need to changes #1202
- enable external-dns registry #1198
- sync MaxConcurrentReconciles across all controllers #1199
- add external-dns flags to CI install make target #1163
- KAS: Set proxy, but exempt pod and service CIDR #1200
- HO: Don’t report NotFund for hostedcluster as error #1192
- Forward from main #1190
- Revert “PKI: Use ECDSA keys by default” #1195
- add required-api to availablity prober for OLM and HCCO #1193
- Trigger reconcile when paused time is up #1184
- Fix
ko entries and update ignition-server dev docs #1191
- Converge helper binaries and ignition-server into CPO binary #1169
- KAS: Never set proxy #1187
- fix AWS HostedCluster fixture to set hostname in alignment with endpointAccess #1188
- Use patch instead of update when updating HCP status and finalizers #1186
- Introduce
OIDCConfigurationInvalid condition for OIDC setup validation #1180
- e2e: adjust budgets #1183
- Fix OLM container restart flakes in CI #1185
- Make clusterID optional in HostedControlPlane clusterID #1179
- Hypershift-operator: Increase worker count #1181
- Forward from main #1178
- Add ClusterID to HostedCluster #1151
- Remove CAPI-provider-agent ClusterRole from hypershift Agent platform #1162
- Fix typo in how to pause reconciliation doc #1174
- Update release-4.10 branch with latest from main #1173
- Ensure that all control plane pods use the cluster’s pull secret #1172
- PKI: Use ECDSA keys by default #1167
- dev: specify a more useful
ko base image #1165
- Unify hypershift install make targets #1171
- Run unitests with racedetector and -count=25 to detect flakes #1166
- Dump: Dump guest cluster nodes #1170
- Add proxy support #1157
- Resources: Improve runtime of test #1168
- ensure token minter, socks proxy, and availablity prober are versioned with the control plane operator to prevent large scale restarts on hypershift operator upgrades for IBM Cloud #1164
- add clusterid label to admin kubeconfig secret #1154
- Fix events message unit test flake #1161
- Switching KubeVirt platform’s default ingress to NodePort #1150
- Update release-4.10 branch with latest from main #1160
- e2e: support dns indirection #1149
- Surface cloud error conditions for HostedCluster resources #1135
- feat(cpo): Support OLM catalog placement #1139
- Allow overriding images at the hypershift operator level #1155
- Remove capi-provider-agent role from hypershift management #1153
- Restructure how-to docs to categorise per platform #1147
- Alow hypershift operator to grant RBAC permissions to the cpai-provider-agent #1152
- Enable DNS indirection to control plane endpoints #1145
- Forward from main #1148
- Validate that agent namespace exists #1138
- Agent: each hostedcluster provider should have it’s own role and role binding in the agent namespace #1137
- Documented howto BM agent/none #1079
- prevent privilege esclation by explicitly not allowing the escalate and bind verbs with rbac on the control plane operator #1136
- Run the konnektivity agent DS with hostnetwork #1142
- Azure: Fix image name to match what HPO expects #1141
- Rename variable for machineconfig and pretty print message #1140
- add konnectivity proxy sidecar to ingress-operator to ensure it can properly perform in cluster canary healthchecks #1131
- Azure: Add multi-AZ support #1127
- Azure: Stop logging errors during role assignment retry #1120
- Azure: Use an apiserver port that ends with 443 to make conformance tests happy #1133
- Give control-plane-operator access to the pull secret #1132
- add https prefix for proper redirects of console url #1129
- Move oidc configmap management back into install command #1128
- fix dns crd reconciliation for ibm cloud or providers that provide a subdomain #1123
- Fix create nodepool azure command #1118
- Azure: Fix credentials log #1126
- Updated secret permissions to 416 #1124
- Add missing readiness probes on HA deployments #1106
- Fix type in azurecluser for Private DNS name #1119
- Azure: Make the rootdisksize on nodepool configurable #1097
- Full changelog
- Backport console helm installs to 4.10 (#638) #638
- Bug 2081844: Fix the clusteroperator conditions values when IO is (#619) #619
- Bug 2079318: Remove PSP gatherer (#608) (#615) #608
- Bug 2072848: Gather namespace names with overlapping UIDs (#605) #605
- Gather some error messages from the kube-controller-manager containers (#598) #598
- Full changelog
- Bug 2084289: Bumps net-attach-def client library (for CNI v1.0 IP compatibility) [backport 4.10] #128
- Updating multus-cni images to be consistent with ART #110
- Full changelog
- Updating ose-network-metrics-daemon images to be consistent with ART (#40) #40
- Fix field selector (#50) #50
- Added METRIC_TEST_IMAGE var (#47) #47
- Full changelog
- Bug 2075051: [release-4.10] fix: adds handling for channel with different prefixes in cincinnati.go (#413) #413
- build(deps): bump operator-registry dep to v1.21.1 (#390) #390
- Bug 2064901: fix(associations): modifies association return values to allows image… (#359) #359
- Bug 2065500: resolves multiple channel heads in merged catalogs (#372) #372
- chore: adds dynamic version info for version command with ldflags (#328) (#334) #328
- Full changelog
Source code for this page located on github