Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.67-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Untested upgrades:
4.10.10 ,
4.10.11 ,
4.10.12 ,
4.10.13 ,
4.10.14 ,
4.10.15 ,
4.10.16 ,
4.10.17 ,
4.10.18 ,
4.10.20 ,
4.10.21 ,
4.10.22 ,
4.10.23 ,
4.10.24 ,
4.10.25 ,
4.10.26 ,
4.10.27 ,
4.10.29 ,
4.10.30 ,
4.10.31 ,
4.10.32 ,
4.10.33 ,
4.10.34 ,
4.10.35 ,
4.10.36 ,
4.10.37 ,
4.10.38 ,
4.10.39 ,
4.10.40 ,
4.10.41 ,
4.10.42 ,
4.10.43 ,
4.10.44 ,
4.10.45 ,
4.10.46 ,
4.10.48 ,
4.10.50 ,
4.10.51 ,
4.10.53 ,
4.10.54 ,
4.10.55 ,
4.10.56 ,
4.10.57 ,
4.10.58 ,
4.10.59 ,
4.10.6 ,
4.10.60 ,
4.10.61 ,
4.10.62 ,
4.10.63 ,
4.10.7 ,
4.10.8 ,
4.10.9 ,
4.9.23 ,
4.9.24 ,
4.9.25 ,
4.9.26 ,
4.9.27 ,
4.9.28 ,
4.9.29 ,
4.9.30 ,
4.9.31 ,
4.9.32 ,
4.9.33 ,
4.9.34 ,
4.9.35 ,
4.9.36 ,
4.9.37 ,
4.9.38 ,
4.9.39 ,
4.9.40 ,
4.9.42 ,
4.9.43 ,
4.9.44 ,
4.9.45 ,
4.9.46 ,
4.9.48 ,
4.9.49 ,
4.9.50 ,
4.9.51 ,
4.9.52 ,
4.9.53 ,
4.9.54 ,
4.9.56 Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.10.4
Created: 2023-08-31 07:31:38 +0000 UTC
Image Digest: sha256:828afb599f68042c213498161977de6c1cc938da4836ae585561af25fd43440b
Release 4.10.67 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-08-30-093810
Components
Removed images
cluster-capi-controllers
cluster-capi-operator
Rebuilt images without code change
Updating ose-alibaba-machine-controllers images to be consistent with ART #23
Full changelog
OCPBUGS-16060 : mcs cert: account for environments that use IP directly #1505 OCPBUGS-16196 : reboot: set ignition version to 3.1 #1511 Add extraction for rhel7 oc #1490
Use rhel 8 builder to match the base image #1489
handle the error case of node retrieval while waiting for reboot #1487
bring some cert rotation helpers back into 4.10 [fix unit-tests] #1481
OCPBUGS-10750 : pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1379 OCPBUGS-10777 : bump repo sclorg/s2i-ruby-container location for newapp test #1383 Bug 2086969 : Delete recently created images when –prune-over-size-limit is used #1146 OCPBUGS-3968 : set proper pod security ns labels #1293 Bug 2015119 : bump(k8s.io/kubectl) to pick up k/k#110764 #1270 OCPBUGS-1788 : oc adm logs: generate proper path for static pods #1246 OCPBUGS-1638 : Increase default value of cache TTL to 6 hours #1241 Bug 2116526 : oc adm inspect: check a resource exists before its inspection #1227 Bug 2106158 : remove klog format and update messages for docker config deprecation #1205 Bug 2095584 : Backport oc adm catalog mirror –continue-on-error flag #1170 Bug 2084591 : [inspect] Add namespace-scoped networking resources to inspect #1133 Bug 2087248 : Add the ReleaseAccepted condition to the oc adm upgrade command #1147 Bug 2080151 : Remove network CRDs scheme registration #1122 Bug 2084429 : Fix project command auto completion #1131 Bug 2077332 : pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates #1114 Bug 2079325 : Fix kubectl version to 1.23.0 #1117 Bug 2068763 : make sure that we check for resorces and files before picking the simplest path #1098 Bug 2068474 : expose –keep-startup flag for oc debug #1097 Bug 2049427 : Enhancing the output provided when backup collections are attempted #1056 Bug 2060419 : reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1083 Bug 2051267 : pkg/cli/admin/upgrade: Mention –allow-explicit-upgrade next step when appropriate #1052 And 2 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-13847 : Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #541 OCPBUGS-11717 : ccoctl: Enable public anon read access to default OIDC S3 bucket #531 OCPBUGS-2802 : Backport –credentials-requests-dir for ccoctl gcp delete. #507 OCPBUGS-2884 : Make ccoctl use regional STS endpoint by default #504 OCPBUGS-2279 : Add ccoctl support to create OIDC endpoint with private S3 bucket #501 Bug 2107276 : Make ccoctl work with credentials fetched from gcloud cli defaults #479 And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-16626 : pull project name from subnet uri #119 Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration #94
OCPBUGS-2162 : Add resolver to handle custom endpoints #67 Bug 2075444 : Get subnet information from subnet instead of from network addresses #40 Bug 2076935 : azure: default empty environment to AzurePublicCloud #37 Bug 2062133 : Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #28 Full changelog
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #65
Full changelog
Switch to OS-shipped stalld (#490) #490
e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) #428
Ignore Profile updates triggered by old operands (#357) #357
Full changelog
OCPBUGS-5345 : routes/status resources can leak sensitive data, exclude it from audit #514 [release 4.10] Bug 2109235: openshift-apiserver pods never going NotReady #501
Full changelog
OCPBUGS-11342 : Deleting downloads deployment should not fail if already deleted #744 OCPBUGS-14845 : Distinguish between route conditions and remove the old ones #768 Bug 2106944 : InfrastructureTopology must be driving console affinity rule creation #664 Bug 2078912 : Modify the operator display name to match it with the name displayed in operatorhub #651 Bug 2076453 : Console operator should not block installation/upgrade process when set to Removed state #649 Bug 2059992 : Re-enable TestMetricsEndpoint e2e test case #646 Bug 2054535 : ODF quickstart permissions check #637 Bug 2054199 : Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository #636 And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2412
Use non-strict mode when parsing global config #1619
adopt existing immutable selectors to prevent errors reconciling components from roks toolkit clusters #1571
cache registry files #1567
feat(oauth): allow challenge override for OpenID #1543
Add fallback set cache value from old token #1531
Set Recommended Leader Election Values #1507
feat(cpo): Support disable profiling annotation #1501
Use ImagePullPolicyIfNotPresent for HO #1483
Updated secret permissions to conform to kubernetes CIS benchmark #1480
Ensure that everything uses imagePullPolicy IfNotPResent for resiliency #1475
Add missing control plane prometheus rules #1471
Ensure cache is set during token rotation before reconciling #1461
Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1416
feat(cpo): adhere to upgrade order from kube version skew policy #1410
Set shutdown params to improve graceful shutdown #1387
fix(cpo): Scope down secrets access for olm collect profiles cj #1378
move to ga apis for all components now that management clusters at minimum release boundary #1361
configure cipher suites to prevent using medium strength ssl ciphers #1359
Use apiserver host/port from InfraStatus in reconciling Kube API Server #1333
Ignition server: Actually use workdir #1317
Use forked processes instead of pods to generate ignition payload #1311
disable reconcile of registry config in IBMCloud deployments #1309
feat(cpo): Disable PodSecurity for 4.10 #1289
Disable PodSecurity admission in 4.11 as it breaks conformance #1286
Expose a service account signing key in the API #1265
release-4.10 - Create valid route names with long namespace names #1252
Fast-Forward from main #1233
Forward from main #1190
Forward from main #1178
Update release-4.10 branch with latest from main #1173
Update release-4.10 branch with latest from main #1160
Forward from main #1148
Updating hypershift images to be consistent with ART #1121
Full changelog
OCPBUGS-6832 : feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) #726 OCPBUGS-1987 : do not periodically update Available clusteroperator co… (#718) (#720) #718 helm upgrades and uninstalls backport 4.10 (#663) #663
OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) #659
Backport console helm installs to 4.10 (#638) #638
Bug 2081844 : Fix the clusteroperator conditions values when IO is (#619) #619 Bug 2079318 : Remove PSP gatherer (#608) (#615) #608 Bug 2072848 : Gather namespace names with overlapping UIDs (#605) #605 Gather some error messages from the kube-controller-manager containers (#598) #598
Gather cluster images.config.openshift.io resource definition (#581) #581
Full changelog
OCPBUGS-11590 : suppress uid mismatch error/warning in case of static pod #150 OCPBUGS-8672 : SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] #147 Bug 2071800 : Remove error handling for getPod to force to proceed cmdDel [backport 4.10] #132 OCPBUGS-2448 : Fix missing device-info in networks-status annotation for chained plugins #137 Bug 2084289 : Bumps net-attach-def client library (for CNI v1.0 IP compatibility) [backport 4.10] #128 Updating multus-cni images to be consistent with ART #110
Full changelog
Updating ose-network-metrics-daemon images to be consistent with ART (#40) #40
Fix field selector (#50) #50
Added METRIC_TEST_IMAGE var (#47) #47
Full changelog
Bug 2075051 : [release-4.10] fix: adds handling for channel with different prefixes in cincinnati.go (#413) #413 build(deps): bump operator-registry dep to v1.21.1 (#390) #390
Bug 2064901 : fix(associations): modifies association return values to allows image… (#359) #359 Bug 2065500 : resolves multiple channel heads in merged catalogs (#372) #372 chore: adds dynamic version info for version command with ldflags (#328) (#334) #328
Full changelog
Source code for this page located on github