4.10.66

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.66-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Succeeded periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.10, 4.10.11, 4.10.12, 4.10.13, 4.10.14, 4.10.16, 4.10.17, 4.10.18, 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.6, 4.10.60, 4.10.61, 4.10.62, 4.10.7, 4.10.9, 4.9.23, 4.9.24, 4.9.25, 4.9.26, 4.9.27, 4.9.28, 4.9.29, 4.9.30, 4.9.31, 4.9.33, 4.9.34, 4.9.35, 4.9.36, 4.9.37, 4.9.38, 4.9.40, 4.9.41, 4.9.42, 4.9.43, 4.9.45, 4.9.46, 4.9.47, 4.9.48, 4.9.49, 4.9.50, 4.9.51, 4.9.52, 4.9.53, 4.9.54, 4.9.55, 4.9.56

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.45

Created: 2023-08-17 08:34:16 +0000 UTC

Image Digest: sha256:3911d16111fc9bc3ecbd4e3d45fa105c8bd25d1ae7e4ceeef6da10de16e79746

Release 4.10.66 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-08-15-183548

Components

Kubernetes upgraded from 1.23.12 to 1.23.17
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202212061416-0 to 410.84.202308031410-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git db2d118a sha256:0841966c10add59513b20995eae833a91af5c25eba563db965d311c4ba62536c
alibaba-cloud-csi-driver git 5c30ca11 sha256:2351cf69f71a430b5f515932dc6b47990b154132013e9802adc886345cc391f5
alibaba-disk-csi-driver-operator git f0d69663 sha256:539c8d9c61c75b9a487ce01a617bcfb2bf30ddf5a48d6f389686df52c93061f6
alibaba-machine-controllers git 9617f1f0 sha256:76b1ffd5b8410e3131cce1a60efae7cda9e7d39f063b8eae37a11b8ea50f8934
aws-cloud-controller-manager git d85867fe sha256:c1ba6ec18a365c3ff197382b1ea8c9b3a6c7f48372146ec2dbddca7d0f87118e
aws-ebs-csi-driver git 2bad4b40 sha256:1d9c0de20a1051ca44667552a3a5e9e911307e2be6f11f1352c43dacb2d9af07
aws-ebs-csi-driver-operator git c2e6dc19 sha256:ac23be625f0f54032ec8e9d5793bc8d5ce13af7b25ecb8414aad4ac71776869e
aws-machine-controllers git 8c8d1c15 sha256:6c4c8c199c5576c7628d12a5e03bb91c68e7eb23e74c2195f63de82afc33fd47
aws-pod-identity-webhook git 7f9eb87a sha256:8a44196c229563bb0353edd68aea82e7dfc874a6c0ec7bc7fd779e237918dae6
azure-cloud-controller-manager git ae571af8 sha256:aa5c3df201551b8134ae606cbd43ecb11aa9cf683c18774a5d0758a876c724d7
azure-cloud-node-manager git ae571af8 sha256:8fe960042e378cb16e9192eac986f515e4ff77304b9c5fa62eeec36b1c51fb26
azure-disk-csi-driver git c7c7188d sha256:204bc47724058f87cf1f0a66dca88c2c43280af676707968f142ee7b98ca9301
azure-file-csi-driver git 87b4a718 sha256:15bf2ff2ca42ef6212883c0c6106b2ea17cbd005e791b786caf6ee7833e1b536
azure-file-csi-driver-operator git 3807eb37 sha256:712db6217265b3e0cea2597594dbf1c5552422e13a20f58762e94d5e998950a7
azure-machine-controllers git 04ed0af9 sha256:570beefc0b7c86c41acf7887bdeca69506fb2a8b23a597ee93ef2740efcba85c
baremetal-machine-controllers git adff401d sha256:f2180b860622ad4b6c82ceef909223511cc8b8314c9f7b5862a0ef3767133cb1
baremetal-runtimecfg git 40c11f72 sha256:ededd956b8199b4ec573b47a7720f51bbaf6e50d1eb2981abec3edb7dc4b1bf0
cluster-authentication-operator git 6a015c71 sha256:12230146715cc2647ab9fafa5f101ddab015fbd8690a79ccbe96fd997a1ddc04
cluster-autoscaler git 266ba2db sha256:48ac02bb25ac65977004e995db5505ef6fd8663f2859b26027d89bdc3e0f508a
cluster-autoscaler-operator git 8bcdcccb sha256:adda7679533a9f966ae07e53a91c722d5028f605b648670020fbb31be59eb4d2
cluster-config-operator git 0840c6f2 sha256:d3ca5e14d2dda5e9b9572d1351225bd945d797d4ff054f89d22a819d0966d8f6
cluster-csi-snapshot-controller-operator git ace18623 sha256:0fcb6189b0f935aaf4d04f0151e34fe2f93e0d6ab82c29ce2aa40ec32ef9a9eb
cluster-kube-storage-version-migrator-operator git 7e1f5684 sha256:f239d175adab0ff66fe6d50e43f3f616b01e40be45a772f8e3b42ff581f50ad7
cluster-machine-approver git 95404c4e sha256:335f4fa14122a9fa71a21a0ae00e4f32cf76a84e0ab09f9254d54f7f7f4b7731
cluster-node-tuning-operator git b1c5690f sha256:2201cfc0b313d147b33b9138203ff9e4efa18fa9911cc4d75f0f2d9a36f93260
cluster-openshift-controller-manager-operator git b8b65d15 sha256:8b4931f4c4311e8d55473b5c8b2c64fc9b508e97e68b0d081e4c09fbf8b0cc48
cluster-samples-operator git b27c4ce6 sha256:d2f2fa5153f645e032e9aac104a601130d686cd4776f626a17fc632ec29f706e
cluster-storage-operator git 0ad6026d sha256:3f6dd02d19b61f7297517e88e0e38c38673af8e2df231f3cdd9f1a4a46c6eda3
cluster-update-keys git 684f6f42 sha256:d8f36a25dc222a9e78ca89b507b1dcc5400f07dbf90d479a3eb29ce81cd29c65
container-networking-plugins git 3123ef8b sha256:a224f2907eada5d327fa26463cd2580501daca3bef39e2f5e4ab37eff8812d51
csi-driver-shared-resource git d06ff18b sha256:e589a8ba3b2c8d2a399b655036511809854a8d2e43e0c899be3f681a9b35f498
csi-driver-shared-resource-operator git 662615b3 sha256:d6ed808457dfa8991994f8183f4f4a80ffc1c91290a6af42bc0578ee0e820313
csi-external-attacher git 27e71f2b sha256:48e3e6ebf9839d3064893dc52f0b537163c5215677668c82e3407f2da547552d
csi-external-provisioner git 31de1e19 sha256:fc4a14323b0e1b6603bd9e2fe2a7c7d20e7b177d573dd694f5bf925ef9a0793d
csi-external-resizer git e5934091 sha256:eb6486c27d29f97cfd285b9f5bd18704911347f1bb6168b1c2f4cbaa715c7c1e
csi-external-snapshotter git fe4a0a2f sha256:8b01a0f4fcfbd2b6fe8eb721b735a3ac7f62d5cc786e98ad03c8c754cb781f5a
csi-node-driver-registrar git bb0bd823 sha256:b16a963ce7c73d59cf8aea926b1a057b5af5b2babaea3a743281f69564bdc4ba
csi-snapshot-controller git fe4a0a2f sha256:fe1bd19dceae1a449f1d944e2bbc05cea9c02fbde457ba43fd598819ee754939
csi-snapshot-validation-webhook git fe4a0a2f sha256:0b7bc1631f5ed24659ca9c0581bf3707c77acf782f74b8dbb4cb66a1684f50c6
docker-registry git 1892f21a sha256:f38433453c4bca0c41674cc5c910eb3d204b0c9bfd22ca270d97463d2e8cc8ef
driver-toolkit git fd4ea71c sha256:768c2155df340163aaaee271ba9118c50dabf70004373d6291827f59bf880a06
egress-router-cni git 5c56bc8a sha256:7a024baf43034342c21755c36f454ff3bed88b46de573a8e4c31cdeeb8f15788
gcp-cloud-controller-manager git 4dc728d0 sha256:28097d8009f3ed45c273b3fa77e483d704cc04c7ccb83ae7e1c6f3591b524883
gcp-pd-csi-driver git 19e9a57f sha256:d3cb293fbafcd3c23f767dd43f6dd629f525c0b13505f07091d6e00ed982e55c
gcp-pd-csi-driver-operator git 0e369dee sha256:148b3026c0c316e116cf0ff2b92777d191336594249ee0382b3c520e43b553e3
haproxy-router git c1e7f405 sha256:f7aba06132c43d3eab7961fb4884b3171a5122af78c9b7fb6b08ebf08ed00125
ibm-cloud-controller-manager git e3039120 sha256:519f5f2efb21b3abafec352b436e7f74c4af2d829126b2052f1fea9cf85b216c
ibm-vpc-block-csi-driver git fc60caeb sha256:98077358bc10ab03a948337529e54737993e01694fea042076b94be0d13d2c5f
ibm-vpc-block-csi-driver-operator git 28bad53d sha256:8975aee9934f9d5614f6f77112abae2af6cd93c1865c755c27bc52c0f68e357d
ibm-vpc-node-label-updater git 7074dfc3 sha256:ff303a2a282421b280c6625962b3aeae601febd34c58373fa64d11b4c0cee43b
ibmcloud-machine-controllers git 7449a94f sha256:14b08a469d158c6a54b6700448007e2fe1ec675c50757797ab94d5032f74a5a3
image-customization-controller git a24f082c sha256:014a3577c77c2a5c815acf02795db6d8ea717950d12f2e7f2c17762aa1b4de3d
ironic-hardware-inventory-recorder git 62469223 sha256:2a0615b551fceaf5222175909884e3b9956f5c2f9d076b03291f3b69919c36b1
ironic-machine-os-downloader git 81fe2974 sha256:bb54553281eafe87aa6c31679416cad8e5d2e21f42cb2535712012ef2797b01e
ironic-static-ip-manager git 45a1c542 sha256:bbb00bf6406d03c0722dbe30071d0225d3b60fb57bef56e0da29a64b4b2efddf
k8s-prometheus-adapter git 4052b317 sha256:5d6e027d67eb9ce1c1c3a91d035d1bc090a149e69261b198ddd4136b0282df80
keepalived-ipfailover git 5d526c41 sha256:f60004a30beb3cd06afd0be9eadc5b79752f6abeabf56171bcf9cfa139915267
kube-rbac-proxy git 4f198b2b sha256:650bc3c98ea46f9415ec8fe7b35d8fc052733e6e94c6a700e4512eeff9feba39
kube-state-metrics git df55d3ea sha256:3b644fd0705827b3cdd2a9e4a1382bb87682aac6c041ddd7cee1053836730afa
kube-storage-version-migrator git 901a6d22 sha256:985c9f83c402a9eaa2fca297f47afa9c90ea7828d75045b14948f193d4cd5a76
libvirt-machine-controllers git 3b330b72 sha256:59040f1f5cda46a32cebbc68d2868913c8910b0bad52e0cec865fd5749aea0d2
machine-os-content sha256:9773d4c26a722f920a5faed9f019871cd5be6470937214bd462694638cd5e97c
machine-os-images git 09a132b7 sha256:bc6dbbad3860eb3b393776fb0866344203fb20b5f02468b82a036004f838a5cb
multus-route-override-cni git 707dd380 sha256:8e71f6c289c49e4e2e3ea8e25dcba41a7cd1a84e58f25f40678eb4ad841934e7
must-gather git db7f815b sha256:89863bb637bfbff4c1a68f2d246f07ba0ca45087b20403e5abf349411b7e33b1
network-interface-bond-cni git 6edc4a73 sha256:27dd226a128343e75ae7b3feba759188d2c85da48950b2b5af981139ce4d65b3
network-metrics-daemon git 234c1388 sha256:1a6362ecef39175746f55b1358ebab05acf2cf7935c00b07b4b316487b7d9c29
network-tools git bcfec9c5 sha256:f45db1ba36fe218397c1267b0be652cecb5a02e48a810d0e11aff03469a4831a
oauth-apiserver git cd4f5bb0 sha256:cd27428903202cd7fe5c347174ae13c96a52781ca7e662f7db90956f5b64e611
oauth-proxy git 799d414b sha256:57c6ab2c20dcc91bc2bd609af37233ff7ac384e24d7823479ba997069edb56c4
oauth-server git 245b95f8 sha256:5dfb8a04a367dcf3dd948c412d81dd2838528f826347e632515d04e99c5e50d2
oc-mirror git 71ca0a1a sha256:df4eb8bbec0748087f9b2b1cb7625527732ca33a628bb117a823db5cc820d84c
openshift-controller-manager git 2c2d50db sha256:d27518ea8709a77885b9ae261a58b9a2aee334137cdd0246bd40e03ecb3b8b75
openshift-state-metrics git e5c50aae sha256:b64e239441d112218e3367ed493585847ab1601be5d7caec0b979193f896b5b7
openstack-machine-api-provider git 2401f74d sha256:15b1921db43637cb5f248ff6e4f67a900469448cad72c38f2c74a4f9c5ce7198
operator-marketplace git 80b92ecf sha256:e52f80cf403cd36074cbb8a5815bcc739bf041c625454c2c1b7b899544ddf922
ovirt-csi-driver git 9773aef8 sha256:c954e9300e7b757b3b993c8fd5c7d7d90a232c59918fe2354a09f8457dbf56e5
ovirt-csi-driver-operator git 573ac478 sha256:ef87bd36260161c17bbd2006e4a56745eb02139e87a9c3eef101fd25b8cdc95b
ovirt-machine-controllers git 35ce9aaf sha256:faa9f0aeace3023cec5dd5afd05eb63cfdfdf1d0eb2fc818134c9bfe1cda0b03
powervs-machine-controllers git c1d68e7b sha256:b05e7c523ffb46bd54bd55370d82bd85723b8a926b1374dfe4712b04ca4415cd
prom-label-proxy git 5f4c8992 sha256:c784bd228c856bfdca33cfb73ac7f7aea507643bccaecc1a793155dbece40133
prometheus git b91d7c75 sha256:3a746d4a404d7bb3e8dc5e75c1dbd53cfd8e634362c162f4ea781d028446845f
prometheus-alertmanager git 01339596 sha256:e8a460d06b983aaa4c69c49934452c89bf98f61cb229a9a1a7a4955d0b977b52
prometheus-node-exporter git 0eed3102 sha256:58663f5d78690786eea9710f5618d7aa46520a3bf8e0491da018508f0cdce8c1
service-ca-operator git 1611373e sha256:2f329141319bfdcb2dd6db5af07552206ca72f9603581b8148f603bb0fea46a6
thanos git ac176319 sha256:8844655a854b60e2252e21dd80fbf329ead7cefee9a8da2811d4da04ab5f28c8
vsphere-cloud-controller-manager git f2bc9eb3 sha256:7c50fe0a2fb02a114795eb3feca8635bbd03d46fdcebd8b3e1e9e41e25e7bbe5
vsphere-csi-driver git e310f4d3 sha256:17c49b6ebc167de385aec9cb5fd93f250c4750ac1a7baf89d6afb1103f1a50a1
vsphere-csi-driver-syncer git e310f4d3 sha256:9d72cabb71fc3b1be7cd4ac25185c2e1e40f6c752ee5b3124eee63c1037b9875
vsphere-problem-detector git a11df08a sha256:fa4422417a61d0d37f5020356c5669a41252d2a7f41721f4827844efca4ca26d

azure-disk-csi-driver-operator

OCPBUGS-8020: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #72
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-12751: [Alibaba] update the bandwidth value of EIP #7130
OCPBUGS-14557: openstack: Add netcat to the Installer image #7230
OCPBUGS-537: vSphere - enable steal time accounting #6261
OCPBUGS-5931: destroy/gcp: Disk names are filtered using kubernetes name format #6972
OCPBUGS-5663: CVE-2021-4238: goutils: update for randomness fix #6766
OCPBUGS-2731: OpenStack UPI: Create server group for Computes #6510
OCPBUGS-6697: destroy/gcp: Use min length for destroying disks #6808
OCPBUGS-2743: skip sts credentials check in terraform #6518
OCPBUGS-5112: OpenStack: Force JSON content-type in Swift object listing #6726
Full changelog

baremetal-operator

OCPBUGS-11686: allow namespace to continue with terminating when deprovisioning at t… #263
Bug 2061794: [4.10] Only update the HFS status on changes #247
Bug 2069638: Use deep copy/equal for host root device hints #221
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-16060: mcs cert: account for environments that use IP directly #1505
OCPBUGS-16196: reboot: set ignition version to 3.1 #1511
Add extraction for rhel7 oc #1490
Use rhel 8 builder to match the base image #1489
handle the error case of node retrieval while waiting for reboot #1487
bring some cert rotation helpers back into 4.10 [fix unit-tests] #1481
OCPBUGS-10750: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1379
OCPBUGS-10777: bump repo sclorg/s2i-ruby-container location for newapp test #1383
Bug 2086969: Delete recently created images when –prune-over-size-limit is used #1146
Full changelog

cloud-credential-operator

OCPBUGS-13847: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #541
OCPBUGS-11717: ccoctl: Enable public anon read access to default OIDC S3 bucket #531
Full changelog

cloud-network-config-controller

OCPBUGS-16626: pull project name from subnet uri #119
Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
Full changelog

cluster-baremetal-operator

OCPBUGS-3997: add a workaround for a NetworkManager issue #308
Full changelog

cluster-bootstrap

Add API team to the OWNERS #96
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-6039: Try to limit groups for the REST mapper discovery #229
Full changelog

cluster-dns-operator

OCPBUGS-2602: Allow autoscaler to evict DNS pods #350
Full changelog

cluster-etcd-operator

OCPBUGS-10233: increase live/ready timeout and failure thresholds #1026
OCPBUGS-7741: fail early on missing node status envs #1008
OCPBUGS-7827: set default timeouts in etcdcli #1010
OCPBUGS-5425: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #979
Full changelog

cluster-image-registry-operator

OCPBUGS-6972: OpenStack: Add support for Proxy #837
OCPBUGS-5974: swift: Retry connecting to OpenStack #832
add myself to OWNERS #838
Full changelog

cluster-ingress-operator

OCPBUGS-4494: Update CRLs when they expire #861
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly #1451
OCPBUGS-5345: routes/status resources can leak sensitive data #1421
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-8235: Guard pod set readiness probe endpoint explicitly 4.10 #704
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-8235: Guard controller: set the readiness probe endpoint explicitly #465
Full changelog

cluster-monitoring-operator

OCPBUGS-11579: jsonnet: Add prometheus container in UWM prometheus asset file #1942
OCPBUGS-10491: Increase startupProbe for prometheus #1920
OCPBUGS-5864: grafana: add the Content-Security-Policy header to requests #1866
Full changelog

cluster-network-operator

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #1809
OCPBUGS-12795: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1794
OCPBUGS-11828: Kuryr: Update CRD from upstream #1782
OCPBUGS-64: CNI binary copy should account for the possibility of symlinks [backport 4.10] #1617
OCPBUGS-5955: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1687
OCPBUGS-6736: Remove nbctl logfile #1587
OCPBUGS-5575: CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be #1682
Bug 2092193: Bump PodDisruptionBudget to v1 #1470
OCPBUGS-4614: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1651
Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression #1646
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-5345: routes/status resources can leak sensitive data, exclude it from audit #514
Full changelog

cluster-policy-controller

OCPBUGS-5788: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #97
Full changelog

cluster-version-operator

OCPBUGS-10814: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #917
Full changelog

configmap-reloader

OCPBUGS-6538: go.mod: update github.com/prometheus/client_golang to v1.11.0 #49
Full changelog

console

OCPBUGS-15932: visiting Configurations page returns error Cannot read… #12985
OCPBUGS-13831: Get the Event type value from the latest PLR of the Repository #12833
OCPBUGS-13358: add subject kind dropdown in the project access form #12803
OCPBUGS-8320: Repositories list does not show the running pipelinerun as last pipelinerun #12623
OCPBUGS-12438: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12533
OCPBUGS-7961: fix broken pipeline secret #12607
OCPBUGS-7478: Add RBAC check on Create a Project link in all-namespaces pages #12566
OCPBUGS-12245: disable operator-install-single-namespace.spec.ts to solve CI issues #12752
OCPBUGS-7657: Editing Pipeline in the ocp console should show correct information #12576
OCPBUGS-7787: [4.10.z] Fix kubevirt-console tests #12580
OCPBUGS-6754: Fix for initial showing of topology contents #12486
OCPBUGS-5296: Pan nodes into view if all nodes are not visible on load #12485
OCPBUGS-6690: Fix NPE when displaying CSV with incomplete information #12481
OCPBUGS-5961: add support for version v1beta1 for knativeServing and knativeEventing #12441
OCPBUGS-3485: check that user can patch console operator config in s… #12258
Bug 2105911: Fix create-namespace e2e test with updated 3scale operator #11811
OCPBUGS-3619: Find latest pipeline run without firehose selector #12265
Full changelog

console-operator

OCPBUGS-14845: Distinguish between route conditions and remove the old ones #768
Full changelog

coredns

OCPBUGS-2902: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #80
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6903: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 #177
OCPBUGS-5012: Sync with upstream release-1.23 #158
Full changelog

csi-driver-manila-operator

OCPBUGS-10722: Bump go.mongodb.org/mongo-driver to v1.5.1 #178
OCPBUGS-7796: Address CVE-2022-41717 #169
Full changelog

csi-driver-nfs

OCPBUGS-10554: Bump go.mongodb.org/mongo-driver to v1.5.1 #114
Full changelog

csi-livenessprobe

OCPBUGS-13143: Bump gRPC from 1.38.0 to 1.49.0 #41
Full changelog

docker-builder

OCPBUGS-15652: Add the git-lfs package #355
OCPBUGS-11782: manage-dockerfile: use the original form of HEALTHCHECK #342
Full changelog

etcd

Update owners #187
Updating ose-etcd images to be consistent with ART #151
OCPBUGS-5950: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #179
OCPBUGS-3103: Rebase openshift/etcd 4.10 onto v3.5.6 #171
Full changelog

gcp-machine-controllers

OCPBUGS-5291: refactor restartPolicyToBool function #36
Full changelog

grafana

OCPBUGS-4260: bump github.com/crewjam/saml dependency #93
Full changelog

hyperkube, pod

OCPBUGS-8314: bump to k8s 1.23.17 #1497
OCPBUGS-10244: Fix mounted volume expansion tests #1510
Full changelog

hypershift

OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2412
Full changelog

insights-operator

OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) #726
OCPBUGS-1987: do not periodically update Available clusteroperator co… (#718) (#720) #718
Full changelog

ironic

OCPBUGS-13729: Bump python-sushy #374
OCPBUGS-7163: Increase power_state_change_timeout setting #348
Bug OCPBUGS-6886: Fix setting boot related attributes #347
OCPBUGS-5344: Configure Ironic iLO driver to use web server #343
OCPBUGS-4467: Remove RDO distribution configuration #330
OCPBUGS-5415: Update packages versions with latest available #345
Bug OCPBUGS-3477: Improve resiliency of eTag handling #316
Full changelog

ironic-agent

OCPBUGS-7533: make coreos-installer output available in the logs #68
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

OCPBUGS-14650: Bump Jenkins plugins to latest versions #1696
OCPBUGS-14401: Combined backport updates #1689
OCPBUGS-14279: Updates to use Java 11 by default #1682
mitigate CVEs #1675
OCPBUGS-13654: Bump Jenkins version and Plugin versions #1672
OCPBUGS-11499, OCPBUGS-11500, OCPBUGS-11501: Various issues #1658
OCPBUGS-11238: Fix labels for jenkins-slave-base-rhel8 #1643
OCPBUGS-10012, OCPBUGS-10020, OCPBUGS-6079: Bump Jenkins #1639
OCPBUGS-11236, OCPBUGS-11237, OCPBUGS-11239: Bump Jenkins version to 2.387.1 #1642
OCPBUGS-11240: configuration-as-code bumped to 1569.vb_72405b_80249 #1644
OCPBUGS-6627: Bump script security plugin #1624
OCPBUGS-7238: Enable Websocket support #1587
OCPBUGS-7052: Sync jenkins version and plugins with ma… #1582
OCPBUGS-4095: Required Plugin workflow-multibranch #1569
OCPBUGS-6645: Handle routes properly in s2i/run #1562
OCPBUGS-4095: Various CVEs September/2022 #1547
OCPBUGS-900: Bump openshift login plugin to 1.0.29 #1561
OCPBUGS-912: Add maven plugin dependency in base plugins #1530
Full changelog

kube-proxy, sdn

OCPBUGS-13919: save and delete the old egress network policy #545
OCPBUGS-13984: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #548
OCPBUGS-10912: Fix race in Egress IP Tracker start #524
OCPBUGS-10524: Initialize egress node monitoring struct with previous reachability status #519
OCPBUGS-8091: Handle race condition to setup default vnid flows #512
OCPBUGS-5977: Use pagination and set ResourceVersion to 0 when listing resources #494
OCPBUGS-6911: Add node egress IP assignment resync #501
OCPBUGS-2106: fix network policy egress #465
Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 #475
OCPBUGS-3996: egressip: Continue to process other nodes if a node is not ready #472
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-15491: KuryrPort cleanup: Fix issue of subport not found #736
Bug OCPBUGS-13779: Fix ValueError when Pod has no IP address #732
Bug OCPBUGS-2216: Cleanup KuryrPort when Pod is missing #702
OCPBUGS-11828: CNI: Watch for deleted pods #712
Full changelog

machine-api-operator

OCPBUGS-13600: vSphere - enable steal time accounting #1143
OCPBUGS-11327: Fix empty component version #1134
OCPBUGS-8359: Append annotations from machine template spec to the node #1125
Updating ose-machine-api-operator images to be consistent with ART #1103
Full changelog

machine-config-operator

Permit consistent go compilation #3748
OCPBUGS-9837: Increase keepalived API check fall value to 3](https://github.com/openshift/machine-config-operator/pull/3176#top) #3176
OCPBUGS-10703: configure-ovs: fix mtu-migration cleanup #3622
OCPBUGS-5692: 4.10 - remove goutils from dependency tree #3500
OCPBUGS-4830: daemon: gate done state on uncordon completion #3278
OCPBUGS-6702: controller: don’t render new MC until base MCs update #3517
OCPBUGS-5831: Do not allow empty system reserved values #3487
OCPBUGS-4810: Sync controllerconfig anyway if daemon sync fails #3454
OCPBUGS-4136: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3436
Full changelog

multus-admission-controller

OCPBUGS-343: Configure ignored namespaces into multus-admission-controller #55
Full changelog

multus-cni

OCPBUGS-11590: suppress uid mismatch error/warning in case of static pod #150
OCPBUGS-8672: SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] #147
Full changelog

multus-networkpolicy

Updating multus-networkpolicy images to be consistent with ART #14
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-13242: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.10] #133
OCPBUGS-3943: Excluded ranges bug (#282) #105
Full changelog

openshift-apiserver

OCPBUGS-4341: fix printer panic #337
OCPBUGS-4604: [release-4.10] bump to kube 1.23.12 #323
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4717: Add SecretHashAnnotation to node service #104
Full changelog

openstack-machine-controllers

OCPBUGS-6596: Address CVE-2022-41717 #251
Full changelog

operator-lifecycle-manager, operator-registry

Introduce DOWNSTREAM_OWNERS file #543
OCPBUGS-7904: Cleanup conversion webhooks when an operator is uninstalled #458
Allow cpb to be statically compiled / exempt from FIPS compliance #514
OCPBUGS-6498: Order an operator CR’s status.Component.Refs array (#2880) #432
OCPBUGS-1525: Package Server Manager should enforce expected csv values #387
OCPBUGS-5294: backport cert rotation fix #428
OCPBUGS-4799: Fix label key truncation for subscription annotations (#2731) #421
OCPBUGS-4128: concurrent write bug fix #415
Full changelog

ovn-kubernetes

OCPBUGS-17165: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1794
OCPBUGS-16206: Fix stale SNAT entries for completed pods #1758
Bug OCPBUGS-12792: [release-4.10] Delete equivalent ACLs when searching by predicate. #1670
OCPBUGS-11453: [release-4.10] Batch potentially big transaction on egress firewall ACLs migration #1641
OCPBUGS-11557: Fix leak in service controller cache #1634
OCPBUGS-11423: [release-4.10] Handle Completed pods deletion #1628
OCPBUGS-4762: [4.10] Dockerfile: bump to OVS 2.17.0-62 #1440
Updating ose-ovn-kubernetes images to be consistent with ART #1615
OCPBUGS-8513: Don’t recreate clusterPGs and clusterRtrPGs unless needed #1562
OCPBUGS-7021, OCPBUGS-7990: Delete stale egress ip snat entries by node #1542
OCPBUGS-6641: Drop in-cluster traffic towards svcCIDR at wrong port #1492
OCPBUGS-3656: Fixes dualstack clusterIPs for network policy svc handler #1378
OCPBUGS-7012: [release-4.10] Fix Egress FW ACL rules in dualstack mode #1508
OCPBUGS-2013: Validate node subnet annotations against cluster networks #1332
Bug 2092895: update all egress ACLs’ direction to “from-lport” #1148
OCPBUGS-6814: [release-4.10] Ensure loadbalancer cleanup doesn’t fail #1499
OCPBUGS-4882: append instead of overwrite logicalSwitch other-config #1450
OCPBUGS-3615: [4.10] CARRY: client: don’t construct transaction log string when it’s not needed #1375
OCPBUGS-5929: [release-4.10] Fix egress firewall to allow inbound connections in both gw modes #1482
OCPBUGS-5990: egressip: fix test data race accessing podAssignment cache #1480
OCPBUGS-5077: [release-4.10] Fix load balancer health check locking and update #1463
OCPBUGS-5299: Set the node as reachable only when it is being added as an egressip node #1464
OCPBUGS-5040: [release-4.10] Fix hybrid overlay unit tests #1462
OCPBUGS-4864: [release-4.10] Fix address set cleanup: only delete address sets owned by given object #1453
OCPBUGS-4888: [release-4.10] Fixes scenario where deleted + completed pods may leak #1458
OCPBUGS-4839, OCPBUGS-4861: [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1452
Bug 2115872: Fix unit-test failures in 4.10 #1457
OCPBUGS-1568: pods: deleteLogicalPort should not fail when node is gone #1423
OCPBUGS-3778: [release-4.10] Netpol races partial fixes #1434
OCPBUGS-4598: Bumps libovsdb to pick up fixes for optional values #1426
Full changelog

prometheus-config-reloader, prometheus-operator

OCPBUGS-7795: Fixes ThanoRuler StatefulSet re-creation bug #219
Full changelog

telemeter

OCPBUGS-6575: update prometheus/client_golang version #446
Full changelog

tests

OCPBUGS-15178: Move from registry.centos.org to quay.io #27988
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27962
OCPBUGS-11874: Add Kuryr exception to “pods should successfully create sandboxes” test #27878
OCPBUGS-11560, OCPBUGS-11629: flake Pods Extended Pod Container lifecycle evicted pods #27872
OCPBUGS-10244: Bump(openshift/kubernetes): to get fix for resizing flake #27800
OCPBUGS-4578: Bond test 4.10 backport #27593
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5895: Fix vendored ini package #137
OCPBUGS-5895: Backport multi dc support 410 #133
OCPBUGS-5507: Fix sc creation if it is deleted #128
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github