4.2.36

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:449b9b839d2cdf33ff2a494a5863d24dc1b436f995c286d8f8d58821ae293b82

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Upgrades to:

4.3.40 (changes) - F F S S F S S F F F
4.3.38 (changes) - Success Failed
4.3.35 (changes) - F S S F F F F
4.3.33 (changes) - F S S S S F F F F F F F F F F F F F F F F F F F F F F F F
4.3.32 (changes) - Success Failed
4.3.31 (changes) - F S F S F F F F F F F
4.3.29 (changes) - Failed Success
4.3.28 (changes) - Success Success
4.3.27 (changes) - S S F
4.3.13 (changes) - Failed
4.3.0-0.nightly-2021-02-23-060813 (changes) - Success
4.3.0-0.nightly-2021-02-22-141216 (changes) - Failed
4.3.0-0.nightly-2021-02-21-141347 (changes) - Success
4.3.0-0.nightly-2021-02-20-230558 (changes) - Success
4.3.0-0.nightly-2021-02-20-191327 (changes) - Success
4.3.0-0.ci-2021-02-18-185642 (changes) - Success
4.3.0-0.ci-2021-02-04-162408 (changes) - Success
4.3.0-0.ci-2021-02-04-154408 (changes) - Success
4.3.0-0.ci-2021-02-02-224422 (changes) - Success
4.3.0-0.ci-2021-02-02-110149 (changes) - S S S S S S S S F F S F S F S F S S S S S S F S S S S S S S S S S S S S S S F F F S S F F F F F F F F F F F F F F F F F F F F F F F F F F S
4.3.0-0.ci-2021-02-02-003009 (changes) - Success
4.3.0-0.ci-2021-02-01-235009 (changes) - Success Success
4.3.0-0.ci-2021-02-01-210854 (changes) - Success Success
4.3.0-0.ci-2020-12-19-041731 (changes) - F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F S F F S S S F S S S S S S S F F S F F F S F S S F S S S F S S S S S S S S S S S F S F S S S S F F F F F F F F F F F F F F F F F F F F F F F S F S S F S S F F F F S F F F S S F S S S F S S S F S S S
4.3.0-0.ci-2020-12-12-042426 (changes) - S F S S F F S F F F S F F F F F F F S
4.2.0-0.nightly-2021-02-22-141219 (changes) - S S S S F S S F
4.2.0-0.nightly-2021-02-21-162759 (changes) - Success
4.2.0-0.nightly-2021-02-20-201532 (changes) - Success

Changes from 4.2.8

Created: 2020-06-24 07:47:55 +0000 UTC

Image Digest: sha256:449b9b839d2cdf33ff2a494a5863d24dc1b436f995c286d8f8d58821ae293b82

Release 4.2.36 was created from registry.svc.ci.openshift.org/ocp/release:4.2.0-0.nightly-2020-06-23-091453

Components

Kubernetes 1.14.6

Rebuilt images without code change

azure-machine-controllers git 719f40a4 sha256:72a9d1198595cff346b911b49c9f7f3ef2469e6e793261754db7bdd2fb8b1a8c
baremetal-machine-controllers git a2a47790 sha256:2b4bcbb9b45a964cfbecc06386030bd9514bae63d64a5ee31ff9e90e9a796a42
baremetal-operator git 7869f83d sha256:ff761de5619a195d6c6027f7e828e22a1d4f52152c4a3880e7667df83c6a1261
cluster-autoscaler git c44b83da sha256:a90654321f70b068d41ae23356b6efb93a5184b951e8307b0bab6e8ba4314c0d
cluster-bootstrap git 106f76b4 sha256:9126b06756d5ca19a6764ee1e52130c348dc7de840698ac5d753b11ff3797421
cluster-config-operator git 7e4895c7 sha256:30792be0cf12b1dd29814d05dcff956877cbd2081b8a97890291cd8fa525dc17
cluster-node-tuned git eeaa9721 sha256:0064f5b780a408afb32cfbe43ee2dc52b08d836bf92d28a4c6e0b2358a37a666
cluster-openshift-apiserver-operator git 76ae60eb sha256:61bea75a9e3b6f92ee58c2e29032ecefd1fec324d013e8bc23fa12adb70c7f0f
cluster-openshift-controller-manager-operator git 377cff19 sha256:9abf0134209bc831a5c05ef39efe316dca4c4182d153b7c8b2e1fd44087a2389
cluster-svcat-apiserver-operator git f8b8b5b3 sha256:f55d74143dd232b6dd8e7de292bf0e9b53cb741c263d1f1206cb5af2e8c90446
cluster-svcat-controller-manager-operator git 9ef3f62c sha256:2e138ff733855837ea4e37f49fb61f44759cd5e0e4e3dfe2ad7dce24f967f91c
cluster-update-keys git cca4ce69 sha256:46a2ea48269ab442a347ebbcb5b61d3db09e7fa02a2735b4b92c0253c4844c1b
configmap-reloader git 841b0bfe sha256:663f4e61fbb7e556d37589a47fc39b5d5756860c3ea25125895dbe4bc4fd6239
container-networking-plugins git b5e1059a sha256:120e0bdb4322fbba710f69843e63a746606df4e0925dd6a9451919b38b5ff287
coredns git 51569b24 sha256:60beb61ac1370ffbf58ec5c997a7c1d020c661c0bccf8fb5683e4718c41c8b09
etcd git 3ebe3d9f sha256:b0bfc5889e5f2582d24fc2fe307ec79ff7e00bccbffaa7caf845b8e1d0bcd11a
gcp-machine-controllers git 602750a8 sha256:48654f67cea4f19fb9670b47894971832e005b1e56c7048a29f288aa199bb1c2
grafana git 91b439ee sha256:f6c1b8dddfc43747ebbef90a6810482b81fd52cdacd6202b35181b5658330233
ironic git 246346b5 sha256:1ea9f4ab5b2d32498342faedf741b1508ffde6488937d5700c3f7a6aee6ee784
ironic-inspector git b83630ce sha256:cd92f8d7fa06ad04be94bb720b5b509c8a2f1703d5f3473fde416a3fd41a6481
ironic-ipa-downloader git b1a14498 sha256:71498c94e4f435c88b2c264bac686bdab591c1d45a8b0ef099f1651271045090
ironic-rhcos-downloader git 93c9e1c5 sha256:00fa605b1ec95e90bfb42b7e59dbf4ee1e2e318ea9c3cf27e9a816d4ab544a57
ironic-static-ip-manager git e33314bd sha256:6b01b75345900fc9c0d18cecb2f0070b45a4315743ae2dbe25eb357a0a9d4085
k8s-prometheus-adapter git 9c5a42a3 sha256:aa895f5554dbadc7155771eb771df0d19fcfdfefa21c3b099e824201eeb3f99c
keepalived-ipfailover git 1be922de sha256:719b154fcd4394c7235063d51dd8861f35f1b83ac380e2b5cd1efa9468aad061
kube-rbac-proxy git 2658b244 sha256:8b9c2c5c00ff86b42fcd29cc26a09f0f157b370703b7fb3b525cefa65a6de763
kube-state-metrics git 07b29740 sha256:b8ccc7ae76430b46adbbefb3f42ec794e3e63c8896e505d694531e4acbb61919
kuryr-cni git 87d0a1bf sha256:c25efdef9bde345bc2bd2a500017857bef0be313b2686c4025d64274d504a131
kuryr-controller git 87d0a1bf sha256:44f3800193d56c66dfeba28361f1fb41ee123d93ff7794372faee2623d5f142d
local-storage-static-provisioner git da340b47 sha256:cdcc31dae587fe35c0413243a78fe451db94adf1707d42b70ddf129a39c31fcb
machine-api-operator git 474e14e4 sha256:1c267f2ab73da57c8241884009cbc1f187d3fd3a10068c1c6e72b5fddbeb6ed4
machine-os-content sha256:b64e472b57538ebd6808a1e0528d9ea83877207d29c091634f41627a609f9b04
mdns-publisher git b02f19c5 sha256:d4ae7338ef372daae1cb27281cd8f8473a740f34f98fcff9bffafd47bd278b2e
multus-admission-controller git ccd6c61c sha256:3c597093aacd2f568d147992314df3d31aa42a67f482c133076af0fc7a70d80b
multus-cni git d3a18156 sha256:6a51d7e3b2844bb98c8c75e02ba6da2107f0a8b1d19aff8f1d340c633167e93b
must-gather git 318faeff sha256:169e701a77720baef6b64dcdfffd9131ad55e02d5ae0f8df5be5438666e5ad66
oauth-server git 3ac077fa sha256:f58fa026e8f46443fe114a199d7011ace3947cc2ac18dc90fd7faa123ae100b0
openshift-state-metrics git c01d2de6 sha256:3b60f0cf0a622e86c3beecc12577d9bc34143ebdae1bcdfa3dc070b6f2722a00
openstack-machine-controllers git 52a3e249 sha256:3cd2ff5a670b0f0e72bac4f23193d85b19efe39bb6e824b14da1da607caf29de
operator-registry git 98ebd340 sha256:32ce6b3f9d799b290783bd044815a0d271bbd6365734971c906eefcd99db8199
pod git 1be922de sha256:482e7ac338a502f9e01f5edada3ca3df520bf21f339a40909d872c16413884dd
prom-label-proxy git dd9a418a sha256:b92e2f666275eea5bb21b0ac581a9e53a7481e3098474417efada16e0e9a7108
prometheus git 52650c0f sha256:eb35df9b1b01d06a0dfbc5e9efd3e7bd9de0b2429c764421109494b7cc6509f0
prometheus-alertmanager git 6858fa0f sha256:666039179c8bbe627e4ae8ded180fdb3bb37667794879355b313d8af0e21b342
service-catalog git 7d8b2a29 sha256:10b4982ca40f7c82236d268b553de9788ba837f95f17b3f4e76c491ce232d77c

aws-machine-controllers

Bug 1796595: [release-4.2] Mitigate aws eventual consistency issues #295
Bug 1799034: [release-4.2] take into consideration all instance states for deletion #294
Bug 1781160: Update Machine status with all instance IP addresses #279
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1842577: images: libvirt: add yq to libvirt CI image #3700
Bug 1827795: OpenStack: Replace remote_group_id with remote_ip_prefix #3505
Bug 1803221: use region info when simulating permissions #3142
Bug 1788585: OpenStack: create security rules sequentially #2888
Bug 1793128: enable s390x bootimage support #2933
Bug 1788707: Backport Azure private DNS to 4.2 branch #2825
Bug 1778969: Default new file and directory permissions to not be world readable #2793
images: add a new generic libvirt CI image #2923
Bug 1782994: terraform/plugins: update libvirt provider #2804
Bug 1782588: destroy/gcp/policybinding.go: identity deleted service accounts belonging to the cluster #2798
Bug 1771358: manually prepare cloud provider’s config #2660
Bug 1779793: vSphere UPI: set specific version of ignition provider #2752
Bug 1773909: OpenStack: Fix destroy module #2701
Bug 1775062: OpenStack: Use UTF-8 locales in CI container image #2700
Bug 1775531: images/openstack: add awscli to image #2707
Bug 1770223: bootstrap kubeconfig to use api-int #2668
Full changelog

baremetal-runtimecfg

Bug 1775123: Tweak VRID calculation to avoid 0 #35
Full changelog

cli, cli-artifacts, deployer

Bug 1795312: initialize auth plugins #270
Bug 1789869: allow –config and –kubeconfig #248
Bug 1776495: don’t install quota CRDs #214
Bug 1772463: Set TypeSetter in get print flags, like we do everywhere elsewhere #163
Bug 1770741: Fixed Dockerfile FROM statement parser. #154
Bug 1761922: Manifest lists can fail to mirror because dependent manifests are not uploaded #128
Bug 1773807: Enable all Linux arches in cli-artifacts [4.2] #168
Bug 1771420: Update ruby-22-centos7 to ruby-25-centos7 #195
Full changelog

cloud-credential-operator

Bug 1819183: handle old Infrastructure objects without PlatformStatus #173
Bug 1803221: improve permissions simulation by adding region info #157
Full changelog

cluster-authentication-operator

Bug 1772839: operator: add ingress and routes to related objects #217
Full changelog

cluster-autoscaler-operator

Bug 1779743: Don’t suppress errors when reporting operator status #126
Full changelog

cluster-dns-operator

Bug 1780213: Don’t start DNS on NotReady nodes #150
Full changelog

cluster-image-registry-operator

Bug 1831088: removing verify-sec / gosec #545
Bug 1820243: nodeca daemon should tolerate all taints #538
Bug 1825718: update object dumper #534
Bug 1808433: tolerate all NoSchedule taints #473
Bug 1814765: use junit_*.xml pattern for junit reports #498
Bug 1815125: force path style for custom endpoints #501
Bug 1808505: only process install config changes to configmaps in the… #477
Bug 1770658: report Available when registry is explicitly Removed #412
Full changelog

cluster-ingress-operator

Bug 1788707: [release-4.2] NE-250: Support both DNSZone and PrivateDNSZone resources #344
Full changelog

cluster-kube-apiserver-operator

Bug 1795395: Properly set pod as privileged #724
Bug 1820543: certrotationcontroller: fix typo calling wrong internal LB func #813
[release 4-2] Bug 1810185: Components using globs in Dockerfile COPY commands may break on OCP 4 #824
Bug 1803750: [release-4.2] Improve node controller condition message #766
Bug 1771665: file observer has not restarted process on serving cert change #680
Bug 1758958: hide secrets in logs #647
Full changelog

cluster-kube-controller-manager-operator

Bug 1770303: alert when number of expected pods is equal or lower than desired healthy pods in a PDB #306
Bug 1810185: Remove wildcard COPY form Dockerfile #372
Bug 1802297: Inject kube-controller-manager pods trust stores with trusted ca bundle #350
Bug 1803750: [release-4.2] Improve node controller condition message #348
Bug 1718061: Fix KCM leader election configmap deletion recovery #323
Bug 1779801: watch for changes to input secrets from the operator namespace #305
Bug 1758959: hide secrets in logs #314
Full changelog

cluster-kube-scheduler-operator

Bug 1810185: Fix dockerfile #221
Bug 1803744: [release-4.2] Improve node controller condition message #209
Bug 1758957: hide secrets in logs #186
Full changelog

cluster-machine-approver

Bug 1781160: Fall back to machine-api check if certificate check fails #59
Full changelog

cluster-monitoring-operator

Bug 1803957: Specify grafana-proxy container by name #719
Bug 1791211: Add alert for no routes configured in alertmanager #614
Bug 1803957: Backport trusted ca support for prometheus #683
Bug 1796040: pkg/manifests: change location of trustedCA bundle; add trustedCA to … #658
Bug 1788477: trustedCA bundle support for grafana oauth proxy #602
Bug 1773665: Bump telemeter to backport changes BZ 1760393 to 4.2.z #589
Bug 1773665: add cluster cpu recording rules #572
Bug 1773246: Bump telemeter to get whitelist changes for virt_platform #573
Bug 1773246: Add a rule that sums the nodes reporting virt_platform types #557
Bug 1770779: Fix filesystem alerts #540
Full changelog

cluster-network-operator

Bug 1785728: openshift-sdn, CNO: handle new kubeconfig path #431
Bug 1778314: False Alarm - SDN pod has gone too long without syncing iptables rule #416
Bug 1778235: network operator crashes when infra.status.platformStatus is missing #407
Bug 1770223: Reverts PR #388 #405
Bug 1769482: pkg/controller/operconfig/operconfig_controller: Add operator namespace to relatedObjects #387
Full changelog

cluster-node-tuning-operator

Bug 1795671: Do not set owner references on tuned ServiceAccount (4.2) #109
Bug 1769471: Use net.ipv4.conf.all.arp_announce=2 in the openshift profile. #93
Full changelog

cluster-samples-operator

Bug 1805615: no longer gate removed processing when imagestreams in progress #234
Bug 1805250: manifests: add openshift/oauth-proxy:v4.4 image #248
Bug 1779935: set version to start for s390/ppc until we have actual samples #206
Bug 1775333: fetch arch from GOARCH, allow for z/ppc #200
Bug 1772178: no longer gate setting progressing to false on in flight imagestream … #199
Bug 1768816: retry every failed IST; track retry on imagestream basis vs. global b… #196
Full changelog

cluster-storage-operator

Bug 1753355: Enables updating of StorageClass if a change is detected. #48
Full changelog

cluster-version-operator

Bug 1846177: pkg/cvo/sync_worker: Do not treat “All errors were context errors…” as success #382
Bug 1800346: lib/resourcemerge/core: Fix panic on container removal #314
Bug 1792005: lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required #300
Bug 1802248: lib/resourcemerge: remove ports which are no longer required #325
Bug 1786315: pkg/cvo/updatepayload: Drop ephemeral-storage request #288
Bug 1785533: Set resource requests on the extract job #286
Bug 1775836: Add proxy support for CVO #271
Full changelog

console

Bug 1807294: Fix sort criteria for capacity for storage tables #4688
Bug 1798646: Backport fix for incorrect channel displayed in OperatorHub #4379
Bug 1796634: Fix bug where booleanSwitch does not default to false #4142
Bug 1787585: Fix off by one bug in metrics rows count #3859
Bug 1790557: Fix Pipeline Params #3983
Bug 1774843: Fix clone build access review #3683
Bug 1791182: Add 4.3 channels to UI in 4.2.z #3991
Bug 1789903: Fixed the display issue in operand detail view, when the value of the… #3920
Bug 1789119: Support for Pipeline Operator 0.9 on OpenShift 4.2 #3898
Bug 1786591: Shows the values in expand modal dropdown #3843
Bug 1788705: Lazy load images in OperatorHub #3885
Bug 1776164: Filtering Storage Class logic added [release-4.2] #3576
Bug 1781055: Fix new/old alerts comparison in withDashboardResources #3638
Bug 1781146: Fixes selection of SC from dropdown #3748
Bug 1775217: Fix access review message for namespaced resources #3527
Bug 1776769: Added CSI provisioner to storage class #3595
Bug 1760357: “VolumeMode Block” should be set for RBD+RWX in pvc creation #3152
Bug 1775720: Backport to 4.2 - Chargeback Reports and ReportQueries change to v1 apiVersion #3523
Bug 1774508: webpack: include contenthash in CSS filenames #3491
Bug 1774653: Fix overview dashboard prometheus queries #3557
Bug 1772009: Increase OSD size from 1Ti to 2Ti #3502
Bug 1777012: Align info tootip #3594
Bug 1756403: Backport for disabling ROX for the OCS based SC when creating PVs #3414
Bug 1767865: Bump kubevirt-web-ui-components-v0.1.44-2 #3231
Full changelog

console-operator

Bug 1773808: Enable multi-arch support in downloads [4.2] #352
Full changelog

docker-builder

Bug 1802888: bump(*): CVE-2020-8945 #137
Bug 1754680: do not force skip tls verify to true on image source injection #111
Full changelog

docker-registry

Use Spyglass-compatible name for junit reports #212
Full changelog

haproxy-router

Bug 1809398: Dynamically reload metrics certificate/key file changes #96
Full changelog

hyperkube, tests

Bug 1825372: Revert “Bug 1840872: UPSTREAM: 88440: Report deleted pod status correctly” #25149
Bug 1822486: UPSTREAM: 89794: Clean up event messages for errors #25050
Bug 1840872: UPSTREAM: 88440: Report deleted pod status correctly #25038
Bug 1810136: UPSTREAM: 88251: Partially fix incorrect configuration of kubepods.slice unit by kubelet #24631
Bug 1808549: UPSTREAM: 88146: remove duplicate pv delete commands #24623
Bug 1794854: UPSTREAM: 86195: Sync the status of static Pods #24454
Bug 1803083: 4.2: UPSTREAM: 87673: blank out value for unbounded client label #24543
Bug 1817619: make s2i-dropcaps more reliable by not depending on a yum install to #24785
Bug 1791855: backport e2e testing oauth-server fixes #24747
Bug 1791211: test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking #24638
Bug 1794830: move more image-eco db template tests from upstream repos to samples operator #24511
Bug 1800894: test/cmd: build.sh can’t reach old openshift/origin:v1.1 #24521
Bug 1765249: CL fix fixture path & update config path, quickstarts & bindata #24127
Bug 1794813: UPSTREAM: 79160: e2e Flake: Pass updated deployment for comparison of replica count #24474
Bug 1794830: pin image-eco sclorg samples usage to specific versions to shield from upstream development changes #24457
Bug 1785268: bump(*): pin ghodss/yaml #24331
Bug 1784881: fix up ruby-25-centos7 tag check logic #24325
Bug 1781281: UPSTREAM: 86009: kubelet: guarantee at most only one cinfo per containerID #24271
Bug 1781302: Handle build controller skew in tests #24273
Bug 1764044: 4.2: UPSTREAM: 83567: Fix attachment of just detached AWS volumes #24240
Bug 1772087: Fix RS expectations #24144
Bug 1762658: UPSTREAM: 83747: Improve efficiency of csiMountMgr.GetAttributes #24006
Bug 1775736: KubeAPI server doesn’t accept large patch requests #24190
Bug 1767182: test/extended/prometheus: run full promQL queries and improve reporting firing alerts #24152
Full changelog

insights-operator

Bug 1798889: initial commit for tests for release 4.2 #57
Bug 1788116: override node selector (4.2) #64
Backport code owners to 4.2 #75
Added dummy e2e target for release 4.2 #54
Bug 1767719: Fix the event reporting in insights operator #56
Bug 1767719: gather: include network events for namespace that has degraded operator #38
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1810389: Bump login plugin to 1.0.23 #1031
Bug 1793321: [4.2] Remove use of /etc/passwd and upgrade plugins versions #1022
Bug 1773434: Bump Sync Plugin to 1.0.42 #980 #980
Bug 1764461: cve-2019-10432: Stored xss vulnerability #981
Full changelog

kube-client-agent, kube-etcd-signer-server

Bug 1769992: pkg/certsigner/signer: Add “client” usage to server profile #17
Full changelog

kube-proxy, node, sdn-controller

Bug 1840763: Fix egressVXLANMonitor and egressIPTracker deadlock #147
Bug 1760948: Adjust SDN setup so AlreadySetUp check will fail on a half-set-up node #87
Bug 1816389: handle pod updates correctly in networkpolicy #130
Bug 1797043: [4.2] Clean up stale egress IP iptables rules on startup #101
Bug 1806648: Fix pod startup reattach/kill loop #110
Bug 1793952: [4.2] Fix reinitialization of deny-all NetworkPolicy state on restart #105
Bug 1794029: [4.2] Use k8s.io/client-go fork with informer fix, run update-deps #95
Bug 1772592: Make DNS querying more efficient by querying once per dns name #72
Bug 1790704: proxy: add handler with same ResyncPeriod as shared informer. #90
Bug 1772905: [4.2] Clean up egress IPs on startup #73
Bug 1768436: UPSTREAM: 74840: kube-proxy: Drop packets in INVALID state #56
Bug 1769808: Use protobuf for SDN where possible for better performance #68
Full changelog

libvirt-machine-controllers

Bug 1783013: Replace guestfish with config drive on s390x platform #183
Full changelog

machine-config-operator

Bug 1840461: Update the crio.conf template to have log_dir #1753
Bug 1834823: Write environment variables needed for etcdctl execution into ~/.profile #1727
Bug 1785219: [release-4.2] Discard audit messages from journald #1350
Bug 1797790: [release-4.2] prevent hitting annotation max size limit on nodes (cherry-pick) #1432
Bug 1797038: Get etcdctl binary from the etcd image and not from the upstream releases #1464
Bug 1795561: machineconfig.crd.yaml: add passwd schema #1435
Bug 1781665: pkg/daemon: randomize pivot container name #1347
Bug 1789248: cleanup sdn ips on reboot #1362
Bug 1782152: templates/container-storage: Add a “this is generated” note #1323
Bug 1789565: [release-4.2] Fix osImageURL upgrade race #1358
Bug 1766514: [release-4.2] pkg/daemon: remove force validation file if it exists #1148
Bug 1772680: [release-4.2] pkg/controller: do not enqueue a nil MCP #1282
Bug 1763695: [release-4.2] pkg/daemon: drain before applying changes #1194
Bug 1765759: templates/*etcd-member.yaml: give etcd-metrics container privilege #1263
Bug 1759611: [release-4.2] lib/resourcemerge: account for proxy changes #1175
Bug 1769581: 4.2: Specfile: Make %global commit ... overridable #1249
Full changelog

oauth-proxy

Bug 1809258: Reload serving certs #164
Bug 1762748: Fix high memory usage #139
Full changelog

openshift-apiserver

Bug 1803084: 4.2: UPSTREAM: 87673: blank out value for unbounded client label #76
Full changelog

openshift-controller-manager

Bug 1802882: fixes for CVE-2020-8945 #109
Bug 1767047: add leader lock for cluster-policy-controller in scc_namespace_allocator controller #42
Bug 1754680: add build ca bundle to init containers #47
Full changelog

operator-lifecycle-manager

Bug 1836447: Generation bug #1554
Bug 1843767: fix(resolver): don’t pick operator from same package when resolve requiredAPI #1572
Bug 1841859: fix(queues): use a single gc queue #1561
Bug 1808422: Don’t block on ctx.Done() if startup fails #1422
Bug 1798666: Fix cases where an operator’s ready channel may never close. #1281
Bug 1805575: Remove run-level 1 from olm and openshift-operators namespaces #1309
Bug 1805269: Fix configmap registry server readiness probe timeouts #1378
Bug 1809661: Update subscription_sync_count to include the package name #1367
Bug 1803148: fix(packagemanifests): Fix index key func to avoid key collision #1357
Bug 1797021: Fix bad opgroup annotations #1373
Bug 1796914: packageserver update fails to adopt APIService #1271
Bug 1774752: schedule catalogsource pods to linux nodes only #1145
Bug 1769561: Replacing operator creates duplicate secrets #1159
Bug 1787597: fix(packageserver): cache packagemanifests #1240
Bug 1749031: Enable multiple namespaces sync if catsrc is updated in global ns #1169
Bug 1775250: make certificate updates live upon update #1170
Full changelog

operator-marketplace

Bug 1814012: support serving marketplace prometheus metrics over https #297
Bug 1772768: Schedule registry pods onto linux nodes only #272
Bug 1769841: Don’t create invalid deployment #269
Full changelog

ovn-kubernetes

Bug 1755190: ovn: fix a deadlock in the NetworkPolicy code #54
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1763098: *: Ensure containers have “FallbackToLogsOnError” termination policy #41
Full changelog

prometheus-node-exporter

Bug 1789085: Not reporting ‘none’ when no platforms located #50
Bug 1791414: Disable cpu info metric on non x86 arches #54
Bug 1773665: cpu info metric #46
Bug 1773246: Add a virtualization metric series from virt-what #40
Full changelog

service-ca-operator

Bug 1810421: Ensure service CA certs are created with unique serial numbers #113
Bug 1774156: 4.2 cherry-picks in support of automated service ca rotation #105
Full changelog

telemeter

Bug 1773665: Backport changes from BZ 1760393 to 4.2.z #281
Bug 1773246: Report cluster:virt_platform_nodes:sum to telemetry #266
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github