4.3.15

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:0e9642d28c12f5f54c1ab0fffbfd866daa6179a900e745a935f17f8e6e1e28fc

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.2.30, 4.3.1, 4.3.10, 4.3.11, 4.3.12, 4.3.13, 4.3.2, 4.3.3, 4.3.5, 4.3.8, 4.3.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.3.0

Created: 2020-04-22 20:03:38 +0000 UTC

Image Digest: sha256:0e9642d28c12f5f54c1ab0fffbfd866daa6179a900e745a935f17f8e6e1e28fc

Release 4.3.15 was created from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-04-20-084750

Components

Kubernetes 1.16.2

New images

multus-route-override-cni git 1322dc43 sha256:15c1b47da2e5e7574caffb1a212b9f94d8137deab40df9d4f90158f927804547
multus-whereabouts-ipam-cni git 9cca449d sha256:279e90b833f40a318951662482aca067b107ce8ba2fe053e5898893e523d2716

Rebuilt images without code change

azure-machine-controllers git 86ecb23d sha256:6d094bcc6584e136dfd488467c9dd02cc92244b6f9e7d121a628425ee7a6e9a5
baremetal-machine-controllers git a2a47790 sha256:6f2a7ee4191e915dc2a865fd1fdccfbfd42c86402976cab72bcd5350804cc338
cluster-authentication-operator git df8cd95e sha256:4552306fdb92edbc3bdda3cf3eed7fd1ad0fd9348fd7ecc9e3608fba209fb73c
cluster-bootstrap git 106f76b4 sha256:f243a6c187d0aea037146f2694dc0eb60bceeae87c4ed6f8e1e5b051cd06442d
cluster-config-operator git d5ddbcdd sha256:290d15ca3cd9837af2d3cc6ccb1d9a960249e235e362c56a38ee246463dbb9e4
cluster-node-tuned git 4de82474 sha256:cb533037f0a1b723e4773e6467babe5795d60e30dd1af989f5415015c0519c15
cluster-openshift-controller-manager-operator git 10fc162e sha256:cf12265549e6b628e30c14a9476dfbfb4d9e07789bbd59fb5972cc1e02f0304c
cluster-policy-controller git 9b6ccc80 sha256:67f2f79584bde75b522e36aa3671cbc507adcf86ca8d664e8cabf02453440aa6
cluster-storage-operator git a9548e6d sha256:db3e823109cd1d375e65a99d92c5d2cb751ad14670023688a10202e6937f4e1b
cluster-svcat-controller-manager-operator git 727d37d9 sha256:c29c3706707df31e61890ab68735d698b29528831edf52b02667f645a0e1e492
cluster-update-keys git cca4ce69 sha256:047ff3b87f6cae5e41d7c53e2640af585feb5684bdc711fd8f47075324526e54
configmap-reloader git 841b0bfe sha256:82fee091133a728e50c85247e2d1669a35725ce005f18a9fd5baaea48e5aa956
container-networking-plugins git 386465fe sha256:a05407554e1ab71ca95088f9ab3eae15039b863d4c248dbd0c12c9b1577fd850
etcd git e30a18f2 sha256:5ec245797eed60ffd2c360f8d8d9b2937a089cd26d7f755205b8904840a53e3c
grafana git e2261e14 sha256:df14f5a552934be2c6a385b76d312bd89bab807385471f44a9c365f72d311be9
haproxy-router git 1526917a sha256:f43a88c5f27eed30d8a2195e0b7fa8c22cf9128e2cda6ca9cf5c95b7e074cbfa
ironic-hardware-inventory-recorder git 5f57661e sha256:ada6666e6dbe59a0dd30c40464ae04ceeef0ce5350aa7a89ff9b340b541595dd
ironic-inspector git b83630ce sha256:957d28102d6d8a8825d3da20d213a1edb02d6342a0fe18bf6f4def62dad2da5a
ironic-machine-os-downloader git 2405ba63 sha256:8e15e3fbcb7407741af8f6dfd0f0a1267c113cde94f8b35a78f6a23455b54443
ironic-static-ip-manager git e33314bd sha256:72daf9fa09f2c3e70295727cf5dff66c8789728194d6005a142d54e3756619da
k8s-prometheus-adapter git 3d1c61e9 sha256:301eceb84701ed5ffba8a6d8197e03055e7a3a892a92237394a7c5a4de10cbbf
keepalived-ipfailover git 1be922de sha256:f30f6fcf8e2da3e01d72cf83d702d62c61a7ab1c55507d17d8b7fe414ae438d3
kube-client-agent git 878550ca sha256:def9761e6ae543fb7b3ba4232a54744bbff80732958c91f079181c1cc675782e
kube-etcd-signer-server git 878550ca sha256:2da5ef75a725b17dbe4724f9bac15415a49cfdb624877539cf36ea85f4f63a9f
kube-rbac-proxy git 84e7dac6 sha256:25e573fd3f7d4d47c1c4c9f46fe7b8ab2546466b7fe8bfcdd972bbb3570b63ff
kube-state-metrics git 83f9fc56 sha256:8c2344c1ee1b1dceb6512af140eecb0712e477dd4e6089d1a743057a18164c54
local-storage-static-provisioner git da340b47 sha256:5a3196a91ddc987ffa7223f77b7a26b4da3390055930d5c6f4fc17f879766224
machine-os-content sha256:66eb0fe4147f958abe7b258442927e4d5dd69dee92ada169a22e2d7af4e1b31e
mdns-publisher git 24135de2 sha256:0f3868074df4531ffcdefd1ad9a1ece38f13612c7c60740d1fcf3819bac7b68e
multus-admission-controller git ead10a3c sha256:eb0f0064c2bcdd2722b6f981a5e6dec511f2548088233a063e31a55a0d009285
must-gather git 23037ad1 sha256:2e10ad0fc17f39c7a83aac32a725c78d7dd39cd9bbe3ec5ca0b76dcaa98416fa
oauth-server git d3065e59 sha256:57079219d0a6ed718200811269c51c22c83063d55e81536a4e1395d0498ccf5a
openshift-state-metrics git c01d2de6 sha256:b3bf5802f8106f832470506bb26eb2b4734bd524eb73a34a44de7a865ec4324f
pod git 1be922de sha256:102f71fc09bc11085718d24a3221a74a9a517372069447f047a1b19b63f13b66
prom-label-proxy git b8153a7f sha256:682adb2f41e357604bfba88ddd9f2eb541434aea36bda5e7294d6ef10c5e1b20
prometheus git c086098d sha256:71500395c957ad431622b3db0091d19375a07a34ecc81a04c234a75e902b592e
prometheus-alertmanager git 11aa2a87 sha256:c50ef2bafdf6c8a39bfa186f0d3c157381ad6f6f5fd0f2e18c3eeac1a47aaea1
service-catalog git 6f75f804 sha256:cae4cf2a71a900655c933ff4a930b9ef771c3eb351c121adefc71588eb93ec2f
thanos git 4aaa91e9 sha256:c74fd29d369468f40d1e6f724bb86a267a74793e13cd08e64e299ae414ee9b63

aws-machine-controllers

Bug 1800315: [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller’s changes #298
Bug 1798597: [release-4.3] take into consideration all instance states for deletion #292
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1810492: OpenStack: pass all CAs to bootstrap ignition #3242
Bug 1817717: Backport Azure UPI to 4.3 #3351
Bug 1818140: Backport adding groundwork for multi-arch images #3233
Bug 1786364: filter out unsupported regions in Azure #3320
Bug 1816705: images/libvirt: remove epel-release #3339
Bug 1816264: Generic libvirt installer image for CI #3331
Bug 1808973: azure - vendor update to support multiple prefixes #3316
Bug 1791995: proxy: use explicit list of platforms for metadata addresses #2944
Bug 1812599: bump RHCOS boot images to 43.81.202003111353.0 #3274
Bug 1807037: data/data/gcp,azure: block private dns zone on public record #3185
Bug 1810018: create bootstrap floating ip after the bootstrap machine #3281
Bug 1801801: openstack docs day 2 ssc refresh #3113
Bug 1809922: OpenStack: return an error if load balancer deletion fails #3231
[Release 4.3] Bug 1811154: validation: Allow periods in gcp and azure cluster names. #3264
Bug 1807203: additionalTrustBundle IsCA check to warn instead of drop #3190
Bug 1808095: Bump survey vendor for panic #3213
Bug 1801446: Move permissions check to cluster asset #3096
Bug 1808482: OpenStack: allow to overwrite default os image in the install config #3207
Bug 1803187: baremetal: map hardware profile to baremetal-operator default #3106
Bug 1796618: [release-4.3 IPv6] Replace MachineCIDR with MachineNetwork, add Azure IPv6 #3029
Bug 1803805: cmd/openshift-install/create: wait 60 minutes for baremetal #3116
Bug 1791440: asset/manifests: add openshift-install configmap #3031
Bug 1757244: use region info when simulating permissions #3102
Bug 1790537: pkg/version: Prepare of extract-time oc version injection #2907
Bug 1798805: baremetal: Fix bootstrap local DNS for IPv6 #3092
Bug 1791457: [release-4.3] Add support for AWS Bahrain region me-south-1 #2877
Bug 1779469: Fix node ports #3048
Bug 1796822: Support deployment on OpenStack with self-signed certificate #3036
Bug 1789748: Ensure enough number of retries for cluster with Kuryr SDN #2903
Bug 1794765: ipv6: Fix IPv6 address encoding #2977
Bug 1788062: OpenStack: create security rules sequentially #2887
Bug 1798060: cmd/openshift-install/create: add env var to preserve bootstrap #3053
Full changelog

baremetal-operator

Bug 1816122: Don’t assume IPv4 in introspection data #54
Full changelog

baremetal-runtimecfg

Bug 1802675: Consider mdns hostname file existence in utils.ShortHostname #45
Full changelog

cli, cli-artifacts, deployer

Bug 1821648: Zeroing BearerTokenFile for prune #376
Bug 1790954: fix version ldflags #255
Bug 1802262: Use polymorphic helpers from exec, when reading a pod #294
Bug 1810533: Don’t default to always mirror manifestlists #342
Bug 1810959: oc adm inspect namespace doesn’t collect pod logs #290
Bug 1795302: initialize auth plugins #268
Bug 1802881: bump(github.com/mtrmac/gpgme): v0.1.2 #307
Bug 1809360: fix(catalog): use registry image from openshift quay namespace #335
Bug 1796675: bump(operator-framework/operator-registry) #336
Bug 1807812: [release-4.3] override FileDir with FromFileDir if set in Complete #325
Bug 1792334: pods that are no longer running can still have logs #263
Bug 1804463: Option to force RepoDigest mirror #313
Bug 1792334: collect endpoints for namespaces #264
Bug 1797026: [CLI] oc adm catalog build neither support “-a, –registry-config=” flag, nor uses podman registry credentials file #296
Bug 1789857: allow –config and –kubeconfig #247
Bug 1785201: don’t gather pod endpoints using tokens #237
Bug 1788016: Suppress nil pointer dereference for job spec #243
Bug 1786062: fix describe for HPA #228
Bug 1784756: set insecure-skip-tls-verify-backend flag #225
Bug 1779353: Verify outbound manifests now that schema1 support is dropped #211
Bug 1797730: Mirror images one by one for oc adm catalog mirror #278
Bug 1790537: pkg/cli/admin/release/extract_tools: Inject release version into installer #249
Bug 1796182: remove destination digests if present #274
Full changelog

cloud-credential-operator

Bug 1816704: handle old Infrastructure objects without PlatformStatus #169
Bug 1801261: [release-4.3] Fix exclusion annotation for hosted use case #156
Bug 1757244: improve permissions simulation by adding region info #155
Full changelog

cluster-autoscaler

BUG 1805160: Ensure DeleteNodes doesn’t delete a node twice #129
Full changelog

cluster-autoscaler-operator

Bug 1814091: ROKS - remove additional autoscaler manifests #138
Full changelog

cluster-dns-operator

Bug 1798869: Try TCP DNS in dns-node-resolver #155
Full changelog

cluster-image-registry-operator

Bug 1816656: update ClusterOperator object even if operator is unmanaged #504
Bug 1820242: nodeca daemon should tolerate all taints #511
Bug 1808426: ignore most kube-system events #503
Bug 1815124: force path style for custom endpoints #500
Bug 1814759: Use junit_*.xml pattern for junit reports #497
Bug 1808426: backport removing kubesystem configmap watch #475
Bug 1808431: tolerate all NoSchedule taints #472
Bug 1796584: aws-sdk-go v1.28.2 #455
Bug 1785302: Using types from openshift/api repository. #424
Bug 1796822: Support deployment on OpenStack with self-signed certificate #454
Full changelog

cluster-ingress-operator

Bug 1800338: [release-4.3] update to setDefaultPublishingStrategy() to add IBMCloudPlatform #362
Bug 1800338: [release-4.3] add LB changes for IBM Cloud Platform #355
Bug 1788711: [release-4.3] publish a router-ca that can be used to verify routes in golang clients #336
Bug 1798789: Only initialize DNS providers if DNS config is present #356
Bug 1789124: Configure router for IPv6 #352
Full changelog

cluster-kube-apiserver-operator

Bug 1820542: certrotationcontroller: fix typo calling wrong internal LB func #814
Bug 1823921: Revert SCC Upgradeable False #830
Bug 1810184: Components using globs in Dockerfile COPY commands may break on OCP 4 #816
Bug 1795617: Remove entirely deprecated alerts #741
Bug 1808602: kube-apiserver-operator should set upgradeable=false if default SCC mutates #784
Bug 1806634: kube-apiserver should never use the bootstrap etcd member #781
Bug 1805865: [release-4.3] baremetal: Explicitly advertise the host IP chosen by kubelet #777
Bug 1795701: change the next empty encryption key’s name for encryption e2e test #717
Bug 1789421: [release-4.3] If the cluster is single-stack IPv6, bind to :: rather than 0.0.0.0. #710
Full changelog

cluster-kube-controller-manager-operator

Bug 1810184: Remove wildcard COPY form Dockerfile #371
Full changelog

cluster-kube-scheduler-operator

Bug 1810184: Fix dockerfile #220
Bug 1803742: [release-4.3] Improve node controller condition message #210
Full changelog

cluster-machine-approver

Bug 1815578: ROKS - remove ClusterMachineApproverDown prometheus rule #66
Full changelog

cluster-monitoring-operator

Bug 1814736: Exclude Kubernetes control plane rules when running on IBM Cloud #713
Bug 1791194: Removing KubeVersionMismatch alert #612
Bug 1807775: Backport setting resource requests #681
Bug 1805317: pkg/manifests/telemeter: bump size limit to 5mb #667
Bug 1805116: Use aggregated up metrics #664
Bug 1799540: Node exporter init collectors must be privileged #646
Bug 1791200: Add alert for no routes configured in alertmanager #613
Bug 1800513: assets,jsonnet,pkg: Fix generate check #649
Full changelog

cluster-network-operator

Bug 1775838: Back-port, OVNKubernetes: introduce OVS anti-selector #492
Bug 1821166: [Back-port 4.3] Remove logfile from ovnkube configmap #567
Bug 1808997: Ensure no API LB recreation happens upon Octavia upgrade #517
Bug 1812037: Ensure correct Octavia API version is retrieved #534
Bug 1815457: Ensure removal of not rendered resources upon CNO recreation #547
Bug 1807062: Reintroduce whereabouts & routeoverride in 4.3.z #526
Bug 1807062: Revert inclusion of route-override/whereabouts in 4.3 #519
Bug 1807062: [Backport 4.3.z] Adds route-override-cni and whereabouts for secondary network routing and IPAM #496
Bug 1798142: Add preserveUnknownFields tag in the CRDs #501
Bug 1805726: Add MachineNetworks to proxy.status.noProxy #504
Bug 1805444: Uses the readiness indicator file option for Multus [backport 4.3] #485
Bug 1806009: Backport ovn-kubernetes-related changes to 4.3 #483
Bug 1791278: Stop deploying kuryr-admission-controller if double listeners supported # #449
Bug 1779863: backport ovn-controller rbac fix to 4.3 #470
Bug 1801802: [4.3] Put brackets around IPv6 addresses passed to ovn-ctl #471
Bug 1792309: IPv6 backports for 4.3 #450
Bug 1796822: Support deployment on OpenStack with self-signed certificate #463
Full changelog

cluster-node-tuning-operator

Bug 1795665: Do not set owner references on tuned ServiceAccount #108
Full changelog

cluster-openshift-apiserver-operator

Bug 1809532: waits for requestheader-client-ca-file in extension-apiserver-authentication before rolling out a new version #326
Bug 1805388: Cleanup 4.4 deployment on downgrade to 4.3 #314
Bug 1795693: change the next empty encryption key’s name for encryption e2e test #298
Bug 1790523: [release-4.3] Specify “bindNetwork: tcp” so apiserver will work on IPv6 single-stack #296
Full changelog

cluster-samples-operator

Bug 1812554: manifests: add openshift/oauth-proxy:v4.4 image #247
Bug 1805815: no longer gate removed processing when imagestreams in progress #232
Bug 1784317: properly handle removal of samplesRegistry; clean up importError mess… #219
Bug 1798573: bootstrap as removed for if tbr inaccessible after 3 minutes #218
Full changelog

cluster-svcat-apiserver-operator

Bug 1813488: set Upgradeable to true #84
Full changelog

cluster-version-operator

Bug 1820231: loosen upgradeable condition to allow z-level upgrades #315
Bug 1783054: Add signature verification in airgapped environments #340
Bug 1802331: metrics: include upi installs in cluster_installer #321
Bug 1802710: lib/resourcemerge: remove ports which are no longer required #323
Bug 1798049: lib/resourcemerge/core: Fix panic on container/port removal #313
Bug 1792004: lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required #299
Full changelog

console

Bug 1804708: only show “Create Project” option in project dropdown i… #4369
Bug 1821852: Hide OpenShift Cluster Manager when branding is azure #4957
Bug 1798130: add error boundary around OLM descriptors #4241
Bug 1823726: Decode Noobaa secret details before passing to SecretValue in OBC page #4993
Bug 1818980: Specify ts-loader configFile in webpack.config.ts #4859
Bug 1813185: Add stable-4.4, fast-4.4 and candidate-4.4 channel for 4.4 release #4727
Bug 1819941: Fix PackageManifest access review #4902
Bug 1800327: fix runtime error creating PVC with no storage class #4896
Bug 1819603: Limit Bucket Class search to storage namespace in OBC creation page #4869
Bug 1814075: Mount OCS form when csv is available #4746
Bug 1813933: Correct the selection nodes text #4739
Bug 1792847: Kubevirt vm real node name #4503
Bug 1811520: CreateContainerConfigError when obc is attached to deployment #4690
Bug 1811525: Add Pipeline Resources on Pipelines Resources tab don’t work #4473
Bug 1808968: fixes sbr to work with knative services #4578
[Version 4.3] Bug 1807291: Fix sort criteria for capacity for storage #4560
Bug 1808436: Make dev-console project selector sticky again #4557
Bug 1808282: fixes issue with new imageStream getting created for knative in case of internal image registry #4546
Bug 1794009: Incorrect memory loads from edited vm template #4625
Bug 1796186: Add pipeline for resource and runtime #4509
Bug 1806706: add namespace level imagestream fetching #4461
Bug 1803935: Fix bug where installed operators list status is missing or incorrect #4343
Bug 1780657: Extend dashboard grey background to full height of view… #4210
Bug 1788246: Fix “requires approval” install plan link #4170
Bug 1796461: Fix bug where resource filter is broken for GroupVersion… #4126
Bug 1786272: update the number of pods in daemon set with correct status prop #4340
Bug 1801660: Property array should render its properties on schema page #4281
Bug 1800320: Set default pullSecret #4244
Bug 1800331: include system:authenticated when impersonating groups #4238
Bug 1800615: Serverless apiVersion from v1beta1 to v1 #4264
Bug 1803955: Fix “environment” typo on “Add to Secret” page #4344
Bug 1791346: Error occurs while removing the second CD-ROM (4.3) #4058
Bug 1804077: fixes issue with external image registry not working for tags #4347
Bug 1782558: Fix edit link for cluster-scoped operand #3764
Bug 1801607: updates apiGroup for knativeServing resource #4277
Bug 1794925: correctly show schema information for all core resources #4067
Bug 1783312: Replace multiple occurrences of log link variable expressions #3778
Bug 1789150: support snippets in edit mode, not just create #3902
Bug 1788201: Remove serviceAccount in favour of serviceAccountName #3869
Bug 1790750: Fix off by one bug in metrics rows count #3864
Bug 1785010: Added legacy plural url field in the OB/C models #3852
Bug 1797501: Adds flexible OSD Sizes in the install flow #4149
Bug 1792507: Add missing candidate-4.3 channel #4093
Bug 1792419: fix(pipeline-tasks): Cancelled tasks #3993
Bug 1791101: Make subscriptions & catalog sources optional so normal users can see installed operators #3963
Full changelog

console-operator

Bug 1813302: Update oc clidownload cr to indicate that certain builds are unsupported #409
Bug 1785492: fix RBAC for ConsoleYAMLSample #372
Bug 1794548: IPv6 support to console operator & console [openshift-4.3.z] #376
Full changelog

coredns

Bug 1801343: Rebase to upstream 1.6.6 #23
Full changelog

docker-builder

Bug 1802894: bump(github.com/mtrmac/gpgme): v0.1.2 #136
Bug 1790525: bump github.com/containers/{storage,image,buildah} #127
Full changelog

docker-registry

Bug 1804494: Dockerfile: Clear yum cache after install #223
Bug 1796584: aws-sdk-go v1.28.2 #218
Full changelog

gcp-machine-controllers

Bug 1800315: [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller’s changes #75
Full changelog

hyperkube, tests

Bug 1822955: UPSTREAM: 88734: Work-around for missing metrics on CRI-O exited containers #24860
Bug 1821341: UPSTREAM: 88440: Report deleted pod status correctly #24841
Bug 1820266: use rbac vs direct scc edit for s2i root bld test #24821
Bug 1817618: make s2i-dropcaps more reliable by not depending on a yum install to #24784
Bug 1817040: [4.3] UPSTREAM: 88507: Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs #24763
Bug 1816408: UPSTREAM: 87913: Add code to fix kubelet/metrics memory issue #24758
Bug 1815944: Pick up Ginkgo test performance fix to reduce e2e CPU usage #24746
Bug 1806408: Ensure upgrade tests verify application disruption #24726
Bug 1808548: UPSTREAM: 88146: remove duplicate pv delete commands #24624
Bug 1813411: UPSTREAM: 85912: Fixed bug in TopologyManager with SingleNUMANode Policy #24688
Bug 1811200: /readyz should start returning failure on shutdown initiation #24712
Bug 1804516: kubelet: Make default journal format precise #24575
Bug 1803077: 4.3: UPSTREAM: 87673: blank out value for unbounded client label #24542
Bug 1795629: fix deployment config flake by using informer #24468
Bug 1802262: Loosen help tests for oc rsh #24660
Bug 1808429: UPSTREAM: 88251: Partially fix incorrect configuration of kubepods.slice unit by kubelet #24611
Allow oauth token + cert fallback test to be skipped when running skew tests #24561
Bug 1794852: UPSTREAM: 86191: Sync the status of static Pods #24453
Bug 1793587: sccadmission plugin incorrectly reports “no SecurityContextConstraints found in xxx” #24428
Bug 1796716: Verify services and API are available during upgrade #24479
Bug 1788065: move more image-eco db template tests from upstream repos to sample operator installed #24407
Bug 1800662: [release-4.3] test/cmd: build.sh can’t reach old openshift/origin:v1.1 image #24519
Bug 1791730: 4.3 ipv6 backports #24405
Bug 1788065: pin image-eco sclorg samples usage to specific versions to shield from upstream churn wrt EOL image removals #24406
Bug 1791200: test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking #24465
Bug 1790481: Fix delegated auth CM perms #24392
Full changelog

insights-operator

Bug 1805919: Insights operator does not require being in an openshift run-level to function #80
Bug 1788112: override node selector (4.3) #63
Backport code owners to 4.3 #76
Full changelog

ironic

Bug 1810078: Copy iPXE binaries directly to /shared at runtime #61
Full changelog

ironic-ipa-downloader

Bug 1804278: set hostnames and make DHCPv6 IDs predictable #29
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1797144: Bump Jenkins 2.204.2 #1036
Bug 1809924: Bump login plugin to 1.0.23 #1030
Bug 1793322: [4.3] Remove use of /etc/passwd and upgrade plugins versions #1021
Full changelog

kube-proxy, sdn

Bug 1804745: Revert excessive proxy logging #109
Bug 1816390: handle pod updates correctly in networkpolicy #129
Bug 1820778: fix health check in standalone kube-proxy #126
Bug 1801737: drop firewalld monitoring, add better iptables monitor #39
Bug 1797042: [4.3] Clean up stale egress IP iptables rules on startup #100
Bug 1794024: [4.3] Update deps, including informer fix #94
Bug 1800324: [4.3] Bug 1796157: Fix handling of VNID 0 with NetworkPolicy #104
Bug 1790805: Fix reinitialization of deny-all NetworkPolicy state on restart #98
Full changelog

kuryr-cni, kuryr-controller

Bug 1818067: Ensure no attempt to deleted sg rules owned by Octavia happens #208
Bug 1786298: Nested CNI: Remove interfaces on DEL requests #183
Bug 1810522: Ensure list of pods items is retrieved #184
Bug 1815019: Ensures accurate quota calculation during the readiness checks #194
Bug 1799393: Ensure LB with error status is only recreated after deleted #160
Bug 1799401: Ensure no sg rule is repeated on the Network Policy CRD #159
Bug 1791278: Add support for listeners on the same port but different protocol #154
Bug 1790339: Add support to Octavia ACLs #153
Bug 1790339: Ensure lb SG is not updated on member creation #146
Bug 1789330: Fix more problem of changing size during dict iteration #144
Bug 1792240: Avoid KeyError when deleting NPs #142
Bug 1789330: Fix problem with dicts while iterating on for loops #135
Bug 1788635: Fix Octavia version detection #131
Bug 1787343: Protect from sg Not Found on multiple np enforcement #129
Full changelog

libvirt-machine-controllers

Bug 1818149: Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le #189
Full changelog

machine-api-operator

Bug 1814092: ROKS: remove machine related CRDs from cluster [4.3] #531
Bug 1796822: Support deployment on OpenStack with self-signed certificate #485
Full changelog

machine-config-operator

Bug 1811720: Specify cgroups in kubelet.conf so cAdvisor stats will be tracked #1581
Bug 1785279: [release-4.3] Discard audit messages from journald #1352
Bug 1809693: [release-4.3] prevent hitting annotation max size limit on nodes #1433
Bug 1807104: Detect default hostname in its variants #1534
Bug 1807279: templates/master/00-master/azure: bump raft tunables #1507
Bug 1807104: daemon: Always create tempfiles in target dir #1535
Bug 1808004: [release-4.3] CRI-O to set stream address in ctrl plane #1510
Bug 1802675: [release-4.3] baremetal: Verify that mdns start only after hostname was set #1479
Bug 1806020: [baremetal] Set hostname when DHCP6_FQDN_FQDN is set #1502
Bug 1801638: [release-4.3] baremetal: all resolvconf editing to NM dispatcher #1470
Bug 1794495: [release-4.3] fix ctrcfg and add e2e test #1447
Bug 1798170: baremetal: Remove .template from path in dhcp-dhclient-conf.yaml #1438
Bug 1798639: [release-4.3] baremetal: IPv6 add dhcp-duid to NetworkManager config #1441
Bug 1797647: [release-4.3] [baremetal] Ipv6 non virtual ip fix #1466
Bug 1797035: Get etcdctl binary from the etcd image and not from the upstream releases #1431
Bug 1793253: [release-4.3] HAProxy infra pod: Make v4/v6 compatible #1399
Bug 1785718: [release-4.3] etcd: Add initial support for an IPv6 control plane #1353
Bug 1796822: Support deployment on OpenStack with self-signed certificate #1426
Bug 1796440: [release-4.3] DR: Cherry-pick keep keys and data separate for snapshot backup #1410
Bug 1794699: [release-4.3] baremetal: ipv6, switch to NM dispatcher for DNS VIP prepending #1406
Full changelog

multus-cni

Bug 1809283: Removes configuration invalidation [4.3 backport] #52
Bug 1805444: Exposes readinessindicatorfile and uses wait.PollImmediate [backport 4.3] #48
Full changelog

oauth-proxy

Bug 1809253: Reload serving certs #160
Bug 1798195: fix OAuth discovery in IPv6 environments #150
Full changelog

openshift-apiserver

[release 4-3] Bug 1824127: fixes configmap “extension-apiserver-authentication” not found #92
Bug 1803080: 4.3: UPSTREAM: 87673: blank out value for unbounded client label #75
Full changelog

openshift-controller-manager

Bug 1819850: Increase pull secrets controller QPS to 100 #91
[release 4.3] Bug 1779282: Use OwnerRefs to clean up SA pull secrets #72
Bug 1802889: bump(github.com/mtrmac/gpgme): v0.1.2 #64
Bug 1810306: Restore openshift-controller-manager metrics #71
Bug 1785845: use OCM config registry hostname with imagechangetrigger in case imagestream cache is stale (a la builds) for local ref streams #59
Bug 1784569: Exclude IPv6 Registry Locations #57
Full changelog

openstack-machine-controllers

Bug 1796822: Support deployment on OpenStack with self-signed certificate #81
Full changelog

operator-lifecycle-manager

Bug 1814777: fix(catsrc): remove limits on catalogsource pods #1406
Bug 1807631: Duplicate packages in packageserver APIService response #1363
Bug 1814263: Make provided API ClusterRoles be owned by the corresponding API. #1383
Bug 1805268: Fix configmap registry server readiness probe timeouts #1365
Bug 1808419: Don’t block on ctx.Done() if startup fails. #1366
Bug 1805574: Remove run-level 1 from olm and openshift-operators namespaces #1310
Bug 1809649: Update subscription_sync_count to include the package name #1343
Bug 1798665: Fix cases where an operator’s ready channel may never close. #1280
Bug 1797019: [release-4.3] Fix bad opgroup annotations #1272
Bug 1803135: fix(packagemanifests): Fix index key func to avoid key collision #1292
Bug 1780378: Implement Structural Schema for CRDs #1197
Bug 1796913: packageserver update fails to adopt APIService #1270
Bug 1791852: Remove license year #1243
Full changelog

operator-marketplace

Bug 1813995: support serving marketplace prometheus metrics over https #296
Bug 1810048: Use DNS for CatalogSource address #285
Full changelog

operator-registry

Bug 1794176: Updating summary for ‘Operator Registry ’ containers #169
Bug 1805410: fix(docker): add entrypoint #185
Full changelog

ovn-kubernetes

Bug 1819888: [4.3] bump OVS/OVN to 2.13 #127
Bug 1806667: merge master to release-4.3 #100
ipv6: Make IPAddrToHWAddr() aware of IPv6 #101
HACK: add ipv4 interfaces to pods that need them #94
Upstream merge 2020-02-18 #93
fix IPv6 subnet dynamic addressing #1072
config: don’t let environment affect test results #1071
add the ability for ovn-kubernetes to ignore a node by label #1048
Fixes accidental override of file conf settings with defaults #1044
Fix delete order for network policy #1068
Remove kube-proxy in KIND deployment #1067
remove unused methods from KClient #1053
Ensure kind logs are always exported #1065
ci: always export logs #1054
Clustered database (aka RAFT) support for OVN DBs #1051
Bug 1795454: Resync to upstream #87
when performing static ip allocation other-config:subnet is not required #1046
Remove the compat annotation code for OvnPodAnnotationLegacyName and OvnHostSubnetLegacy #1045
ci: remove Travis now that GitHub actions work #1039
J2 render all templates #1041
ci: bump master loglevel to 5 #1040
CNI logging and timeout fixes, plus node handler locking fix #1036
ci: use consistent kind cluster name and fix artifact retrieval #1037
Also run CI for pull requests #1033
Replace Travis CI with GitHub Actions #1028
Iptables followup #1032
Ensure j2 does not fail to run in daemonset.sh if installed globally #1031
Fixes specifying geneve port #1030
fix for iptables issue in CentOS 8 #1027
do not delete integration bridge as part of ovnkube-node cleanup #1029
Yet more cleanups #1023
travis: bump timeout for e2e tests #1024
a way to specify the encap-ip for a k8s worker node #1016
Fix kubetest to enable conformance #1018
add support for custom MAC specified in default network-attachment #997
Validates host subnet prefix length and default behavior #979
ovn: read pod addresses more quickly #1012
Enable e2e CI #1011
Bug 1798613: OVN: Bump image to include ovn2.12 #72
Bug 1796531: CARRY: fix race updating exclude IPs on node switch #83
Upstream rebase 2020-01-17 #77
Restrict address type requirements for tunneling #1014
Allow IPv6 Node addresses for geneve tunnels #1013
factory: parallelize Node events #920
scale: use light weight check to ensure OVN DB endpoints are up #1007
trivial: use GetNodeWellKnownAddresses() to arrive at node mgmt port IP #1009
determine whether we are running in IPv6 mode once at the start time #1005
Fix multicast Port_Group update at pod creation/deletion. #953
IPv6 single-stack support #968
ovn: remove ‘func (oc *Controller)’ from functions that don’t need it #1002
avoid using –wait=sb in ovn-nbctl calls when using ovn-nbctl daemon #1001
Factory and testcase cleanups #999
handle failed management logical_switch_port creation #996
scale: fixed MAC address for the logical router ports #992
do normal processing for all inbound packets that are not tracked #993
scale: clearInitialNodeNetworkUnavailableCondition() is very expensive #994
Fix Windows cross-compilation #76
Fixes missing oc client during openshift image build #74
correct the directory placement of windows binary #73
Build the windows binary as part of the container ovn-kubernetes container build #69
Upstream + hybrid-overlay merge 2019-12-28 #70
scale: waitForNodeLogicalSwitch() should get other-config:subnet itself #989
remove unwanted debug log messages in factory.go #987
ovn-controller: Set ovn-openflow-probe-interval #986
scale: ascertain gateway readiness by checking OpenFlow rules #985
scale: ascertain management port readiness by checking OpenFlow rules #984
set other_config:hwaaddr on br-local before you add br-nexthop #983
Support latest OVN #926
persist the mac address associated with the node management port #950
Better testcase failure descriptions and command matching #976
pkg/cluster: set br-nexthop mtu #975
go mod tidy #973
persist the mac address associated with br-nexthop OVS internal port #949
add node systemID to the list of information passed from node to master #966
Removes duplicate code setting ovn_db_host #971
Update metric service to include not-ready endpoints #974
Fixes detecting loopback for ovnkube-db endpoint #970
cmd: add –metrics-enable-pprof option to serve pprof on metrics port #969
get dynamic_addresses and addresses in one go instead of two execs #963
Manage log level during node bring up #962
Add networkpolicy test cases #939
Disable IPv6 DAD and ensure addresses are ready #937
add a switch to flip on/off multicast support (is disabled by default) #954
use ahostsv4 database to ensure we get IPv4 address always #952
Move pod annotation under k8s.ovn.org namespace #922
Enable IGMP Querier only if a source IPv4 is available. #944
Sync SubnetAllocator from openshift/sdn #945
Fix parsing of IPv6 addresses in ovn URLs #938
build: fix ‘make lint’ when GOPATH isn’t explicitly set #929
AddFilteredEndpointsHandler must take label selector like other handlers #936
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1805833: Tighten permissions related to CRD create/update #60
Full changelog

prometheus-node-exporter

Bug 1789084: Not reporting ‘none’ when no platforms located #49
Full changelog

service-ca-operator

Bug 1810420: Ensure service CA certs are created with unique serial numbers #112
Bug 1791022: Ensure removal of 4.4-only resources on downgrade to 4.3 #93
Bug 1788179: Enable automated rotation for 4.3 #104
Full changelog

telemeter

Bug 1805116: jsonnet/telemeter/metrics: add aggregated up metric, remove node_uname_info #309
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github