4.3.7

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:483af630c87f42f26fe529b7191918351a79eefd43fe98d682bb0f395ed087a1

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.3.0-rc.1

Created: 2020-03-18 14:28:41 +0000 UTC

Image Digest: sha256:483af630c87f42f26fe529b7191918351a79eefd43fe98d682bb0f395ed087a1

Release 4.3.7 was created from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-03-18-011727

Components

Kubernetes 1.16.2

New images

multus-route-override-cni git 1322dc43 sha256:eaf17cc59301226d3e9f74566a58012114e9dad1d81600ecc5f1fb9903fe70a5
multus-whereabouts-ipam-cni git 9cca449d sha256:6f203f73d4d197aea3762831fa723623496062dc72fb3d815708fd4ebed127be

Rebuilt images without code change

azure-machine-controllers git 86ecb23d sha256:1e63003241a70635c01f62acd1ba8f26531a11d5775fc9cacd23f6871a72323c
baremetal-machine-controllers git a2a47790 sha256:ab8b5cfd5b65c61d5593a419a74feccda2c7c22e9d8b0cbe1f74826ed3969a8a
baremetal-operator git d981ea02 sha256:3a285cf4ec58c97d632aded052d7c7f328bd0b716a7354207e81ff851633f080
cluster-authentication-operator git df8cd95e sha256:7e711981526c575826db42dcb0182c625601540b5dec6a6f57e38e76e0773975
cluster-autoscaler git d45f94da sha256:8fd9b0f28ae8483f9068a585d223277b90baaf05c70e658e7ea009c1566b42e5
cluster-autoscaler-operator git 3752471e sha256:f3b89c7e701baa16a516da711249e52566097a94d4f2f71b0bb263084be11098
cluster-bootstrap git 106f76b4 sha256:04f79187a3b97f2d256dbc03a0aab4596315535d168035fcaaf9f42baa7c47f9
cluster-config-operator git d5ddbcdd sha256:dd3f18a0c48a2bd126b9b28d340ce6f62fef3fcaf522ab7fc3d5e01d0fe7c315
cluster-machine-approver git 86bdd875 sha256:d0a3cd10c37b3d13d766d9eab61c65e8a3169c86a35d687612891a30be320abc
cluster-node-tuned git 4de82474 sha256:c4aebd1d4371beb8159464866cdb87f611f3acfc49e08a3306a05e18a3c662e1
cluster-openshift-controller-manager-operator git 10fc162e sha256:238da07a96f530bd3376fcb39e700820f5847262d6e8d2dcdd899767d91a3375
cluster-policy-controller git 9b6ccc80 sha256:91b7cca56b082b2628216b349d54798a070d6f599c21ae649eb4fcbb6e7d2e70
cluster-storage-operator git a9548e6d sha256:2d16c84a827439a96bd96be1c796581555204ec1c0a64facd5478220b52ce26e
cluster-svcat-apiserver-operator git 61c2f1d3 sha256:8ed114fda6afc8c577d2e814da141353d66a34d22b237efd22a4b99fd2c4a4f8
cluster-svcat-controller-manager-operator git 727d37d9 sha256:55e7e3907db1c493d6c6bf8aa04b0afc446e026144a5a046734b019940c51040
cluster-update-keys git cca4ce69 sha256:656fcb8249ef56c0d89b03d2b1c275ff858b835def52d4e6a5a741a35a6e6cc7
configmap-reloader git 841b0bfe sha256:46276473e250109b4521803aedd54946cc40498b99fcbedce34a1931f0fb6ebf
container-networking-plugins git 386465fe sha256:9a2c8594f07c9091f8f23346fad1cd6afc18f400f3600b1dd869b8eff4641c88
etcd git e30a18f2 sha256:e9a7267ad2a1146abdfd69eff5a9ccb5cb1c4b06ad92404b97fa34ecebd31a05
grafana git e2261e14 sha256:84b248990793417ee8f13434bad8867ac480565d818e7c868149d942ae82ac9a
haproxy-router git 1526917a sha256:08ba9cb4f45c557b2ec8cea6528bb60b1efcd3a7588046a71f5babe19e5fc9c0
ironic git 7b39640a sha256:4c03d90458c3da2df8b790cc873b7ed934ea33996fbe9ce29ae5911cef2611c5
ironic-hardware-inventory-recorder git 5f57661e sha256:251311898b452e3f74067c70411d855db3707b316b44748407eba4f1654333cf
ironic-inspector git b83630ce sha256:aab679cc37356d784f713f082a02369fef99de2f715a0b06613a18692cbf88e3
ironic-machine-os-downloader git 2405ba63 sha256:cdfbd408cc7372a673fd0e0353a8f7db5eaa86b28e8e8b62cc9f1d54481cc908
ironic-static-ip-manager git e33314bd sha256:ccdb4c32acc208b616b2e46c16a378268aa600125cfb99fb82fbee5ec3a3ce87
k8s-prometheus-adapter git 3d1c61e9 sha256:3b09bae5166e5426634bacc701138675645b7e3c4064878e5ff4d6de029118b2
keepalived-ipfailover git 1be922de sha256:d7109d8f53a9db0cdc56a18716a0c5363338af3f1146d93044825555558bbc9e
kube-client-agent git 878550ca sha256:11427cf0bf365873a6614e68814f5c083cc5936453010350d754cff024c4d2f4
kube-etcd-signer-server git 878550ca sha256:9160d52b7b0ddb43679b489f04ab99ca8ee56b98a14e4d1a35564d22c3ae76cc
kube-rbac-proxy git 84e7dac6 sha256:edbacf69d159af2598f9c5f626493c35a29d65f7f2d2c212f168001a719d8c31
kube-state-metrics git 83f9fc56 sha256:fdebb6bb24e5af64a44b0779802f82b68d276398e710c71bce9ebdc05d6e27cc
libvirt-machine-controllers git dd3fc51a sha256:da0c4f067476f17863ebfa671bb335821143259f528252557c6bd34d4e64cb7a
local-storage-static-provisioner git da340b47 sha256:b834ca2f5c5b44278cbb97fc10698b50920fd116b6b50b9673d1bc30a09b169b
machine-os-content sha256:d80cac98075212dc3c540db7038def149682d31abd7f74a107d1ab9defe129b2
mdns-publisher git 24135de2 sha256:2c5e36a7b628735301c8f8942239522ede628e61c26c7bd706aca1b1b18cee32
multus-admission-controller git ead10a3c sha256:44ee1baa692c7b87ad81f0bcc02c77e60474f16b519cbeb8dab305ed4c2a1d49
must-gather git 23037ad1 sha256:896e3940714445b6a1196f1d57582fae552b55d52d39ded0fccb6538bb16d69c
oauth-server git d3065e59 sha256:1c26b7a6944b94621880ac4bfa741f6b945927db05f5a706afdfec70ada5e207
openshift-state-metrics git c01d2de6 sha256:d57b9ab77f64cb3cc667d957d53248f004dfa3ba5c8e3270ad06465815fca9e1
pod git 1be922de sha256:ee50534c2f97c6c9a6baeacf120cf7b4f13a8a59f6b673b152006ad7fb8702d6
prom-label-proxy git b8153a7f sha256:431d605858b2b0e03ddad79854dded6176ae93a89c53b7a92f599b797cb01634
prometheus git c086098d sha256:62f7a5e596028e36518adec7d5228c062fb515bb8395eaef3aa3914891fbee21
prometheus-alertmanager git 11aa2a87 sha256:eb1dce11bd134ad4491fa4bd5a2633e2e6ce29e953479e662bf9b1505d9520c8
prometheus-config-reloader git 6ba21de5 sha256:083e5d6e7379d4043488a6093009cd2e4f19f7bdaf1a197b3daf45e0603f68ce
prometheus-operator git 6ba21de5 sha256:71da4faabafa36cd938f47c6fbdddc9c9e785b1b4003e17199c8fbe83cc83798
service-catalog git 6f75f804 sha256:166c51bb7c54be67f0f85a68a3ec3927cceb7bf3b296b9ae434bfc9046f78eb6
thanos git 4aaa91e9 sha256:e697e0ba41815ade9ab7cd05c275b9f6730761355435ace189b9119f89d81238

aws-machine-controllers

Bug 1800315: [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller’s changes #298
Bug 1798597: [release-4.3] take into consideration all instance states for deletion #292
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1812599: bump RHCOS boot images to 43.81.202003111353.0 #3274
Bug 1807037: data/data/gcp,azure: block private dns zone on public record #3185
Bug 1810018: create bootstrap floating ip after the bootstrap machine #3281
Bug 1801801: openstack docs day 2 ssc refresh #3113
Bug 1809922: OpenStack: return an error if load balancer deletion fails #3231
[Release 4.3] Bug 1811154: validation: Allow periods in gcp and azure cluster names. #3264
Bug 1807203: additionalTrustBundle IsCA check to warn instead of drop #3190
Bug 1808095: Bump survey vendor for panic #3213
Bug 1801446: Move permissions check to cluster asset #3096
Bug 1808482: OpenStack: allow to overwrite default os image in the install config #3207
Bug 1803187: baremetal: map hardware profile to baremetal-operator default #3106
Bug 1796618: [release-4.3 IPv6] Replace MachineCIDR with MachineNetwork, add Azure IPv6 #3029
Bug 1803805: cmd/openshift-install/create: wait 60 minutes for baremetal #3116
Bug 1791440: asset/manifests: add openshift-install configmap #3031
Bug 1757244: use region info when simulating permissions #3102
Bug 1790537: pkg/version: Prepare of extract-time oc version injection #2907
Bug 1798805: baremetal: Fix bootstrap local DNS for IPv6 #3092
Bug 1791457: [release-4.3] Add support for AWS Bahrain region me-south-1 #2877
Bug 1779469: Fix node ports #3048
Bug 1796822: Support deployment on OpenStack with self-signed certificate #3036
Bug 1789748: Ensure enough number of retries for cluster with Kuryr SDN #2903
Bug 1794765: ipv6: Fix IPv6 address encoding #2977
Bug 1788062: OpenStack: create security rules sequentially #2887
Bug 1798060: cmd/openshift-install/create: add env var to preserve bootstrap #3053
Full changelog

baremetal-runtimecfg

Bug 1802675: Consider mdns hostname file existence in utils.ShortHostname #45
Bug 1792493: Convert /128 addresses to /64 again #43
Full changelog

cli, cli-artifacts, deployer

Bug 1810533: Don’t default to always mirror manifestlists #342
Bug 1810959: oc adm inspect namespace doesn’t collect pod logs #290
Bug 1795302: initialize auth plugins #268
Bug 1802881: bump(github.com/mtrmac/gpgme): v0.1.2 #307
Bug 1809360: fix(catalog): use registry image from openshift quay namespace #335
Bug 1796675: bump(operator-framework/operator-registry) #336
Bug 1807812: [release-4.3] override FileDir with FromFileDir if set in Complete #325
Bug 1792334: pods that are no longer running can still have logs #263
Bug 1804463: Option to force RepoDigest mirror #313
Bug 1792334: collect endpoints for namespaces #264
Bug 1797026: [CLI] oc adm catalog build neither support “-a, –registry-config=” flag, nor uses podman registry credentials file #296
Bug 1789857: allow –config and –kubeconfig #247
Bug 1785201: don’t gather pod endpoints using tokens #237
Bug 1788016: Suppress nil pointer dereference for job spec #243
Bug 1786062: fix describe for HPA #228
Bug 1784756: set insecure-skip-tls-verify-backend flag #225
Bug 1779353: Verify outbound manifests now that schema1 support is dropped #211
Bug 1797730: Mirror images one by one for oc adm catalog mirror #278
Bug 1790537: pkg/cli/admin/release/extract_tools: Inject release version into installer #249
Bug 1796182: remove destination digests if present #274
Full changelog

cloud-credential-operator

Bug 1801261: [release-4.3] Fix exclusion annotation for hosted use case #156
Bug 1757244: improve permissions simulation by adding region info #155
Full changelog

cluster-dns-operator

Bug 1798869: Try TCP DNS in dns-node-resolver #155
Full changelog

cluster-image-registry-operator

Bug 1808426: backport removing kubesystem configmap watch #475
Bug 1808431: tolerate all NoSchedule taints #472
Bug 1796584: aws-sdk-go v1.28.2 #455
Bug 1785302: Using types from openshift/api repository. #424
Bug 1796822: Support deployment on OpenStack with self-signed certificate #454
Full changelog

cluster-ingress-operator

Bug 1800338: [release-4.3] update to setDefaultPublishingStrategy() to add IBMCloudPlatform #362
Bug 1800338: [release-4.3] add LB changes for IBM Cloud Platform #355
Bug 1788711: [release-4.3] publish a router-ca that can be used to verify routes in golang clients #336
Bug 1798789: Only initialize DNS providers if DNS config is present #356
Bug 1789124: Configure router for IPv6 #352
Full changelog

cluster-kube-apiserver-operator

Bug 1795617: Remove entirely deprecated alerts #741
Bug 1808602: kube-apiserver-operator should set upgradeable=false if default SCC mutates #784
Bug 1806634: kube-apiserver should never use the bootstrap etcd member #781
Bug 1805865: [release-4.3] baremetal: Explicitly advertise the host IP chosen by kubelet #777
Bug 1795701: change the next empty encryption key’s name for encryption e2e test #717
Bug 1789421: [release-4.3] If the cluster is single-stack IPv6, bind to :: rather than 0.0.0.0. #710
Full changelog

cluster-kube-controller-manager-operator

Bug 1810184: Remove wildcard COPY form Dockerfile #371
Full changelog

cluster-kube-scheduler-operator

Bug 1810184: Fix dockerfile #220
Bug 1803742: [release-4.3] Improve node controller condition message #210
Full changelog

cluster-monitoring-operator

Bug 1807775: Backport setting resource requests #681
Bug 1805317: pkg/manifests/telemeter: bump size limit to 5mb #667
Bug 1805116: Use aggregated up metrics #664
Bug 1799540: Node exporter init collectors must be privileged #646
Bug 1791200: Add alert for no routes configured in alertmanager #613
Bug 1800513: assets,jsonnet,pkg: Fix generate check #649
Full changelog

cluster-network-operator

Bug 1807062: Reintroduce whereabouts & routeoverride in 4.3.z #526
Bug 1807062: Revert inclusion of route-override/whereabouts in 4.3 #519
Bug 1807062: [Backport 4.3.z] Adds route-override-cni and whereabouts for secondary network routing and IPAM #496
Bug 1798142: Add preserveUnknownFields tag in the CRDs #501
Bug 1805726: Add MachineNetworks to proxy.status.noProxy #504
Bug 1805444: Uses the readiness indicator file option for Multus [backport 4.3] #485
Bug 1806009: Backport ovn-kubernetes-related changes to 4.3 #483
Bug 1791278: Stop deploying kuryr-admission-controller if double listeners supported # #449
Bug 1779863: backport ovn-controller rbac fix to 4.3 #470
Bug 1801802: [4.3] Put brackets around IPv6 addresses passed to ovn-ctl #471
Bug 1792309: IPv6 backports for 4.3 #450
Bug 1796822: Support deployment on OpenStack with self-signed certificate #463
Full changelog

cluster-node-tuning-operator

Bug 1795665: Do not set owner references on tuned ServiceAccount #108
Full changelog

cluster-openshift-apiserver-operator

Bug 1809532: waits for requestheader-client-ca-file in extension-apiserver-authentication before rolling out a new version #326
Bug 1805388: Cleanup 4.4 deployment on downgrade to 4.3 #314
Bug 1795693: change the next empty encryption key’s name for encryption e2e test #298
Bug 1790523: [release-4.3] Specify “bindNetwork: tcp” so apiserver will work on IPv6 single-stack #296
Full changelog

cluster-samples-operator

Bug 1805815: no longer gate removed processing when imagestreams in progress #232
Bug 1784317: properly handle removal of samplesRegistry; clean up importError mess… #219
Bug 1798573: bootstrap as removed for if tbr inaccessible after 3 minutes #218
Full changelog

cluster-version-operator

Bug 1802331: metrics: include upi installs in cluster_installer #321
Bug 1802710: lib/resourcemerge: remove ports which are no longer required #323
Bug 1798049: lib/resourcemerge/core: Fix panic on container/port removal #313
Bug 1792004: lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required #299
Full changelog

console

Bug 1792847: Kubevirt vm real node name #4503
Bug 1811520: CreateContainerConfigError when obc is attached to deployment #4690
Bug 1811525: Add Pipeline Resources on Pipelines Resources tab don’t work #4473
Bug 1808968: fixes sbr to work with knative services #4578
[Version 4.3] Bug 1807291: Fix sort criteria for capacity for storage #4560
Bug 1808436: Make dev-console project selector sticky again #4557
Bug 1808282: fixes issue with new imageStream getting created for knative in case of internal image registry #4546
Bug 1794009: Incorrect memory loads from edited vm template #4625
Bug 1796186: Add pipeline for resource and runtime #4509
Bug 1806706: add namespace level imagestream fetching #4461
Bug 1803935: Fix bug where installed operators list status is missing or incorrect #4343
Bug 1780657: Extend dashboard grey background to full height of view… #4210
Bug 1788246: Fix “requires approval” install plan link #4170
Bug 1796461: Fix bug where resource filter is broken for GroupVersion… #4126
Bug 1786272: update the number of pods in daemon set with correct status prop #4340
Bug 1801660: Property array should render its properties on schema page #4281
Bug 1800320: Set default pullSecret #4244
Bug 1800331: include system:authenticated when impersonating groups #4238
Bug 1800615: Serverless apiVersion from v1beta1 to v1 #4264
Bug 1803955: Fix “environment” typo on “Add to Secret” page #4344
Bug 1791346: Error occurs while removing the second CD-ROM (4.3) #4058
Bug 1804077: fixes issue with external image registry not working for tags #4347
Bug 1782558: Fix edit link for cluster-scoped operand #3764
Bug 1801607: updates apiGroup for knativeServing resource #4277
Bug 1794925: correctly show schema information for all core resources #4067
Bug 1783312: Replace multiple occurrences of log link variable expressions #3778
Bug 1789150: support snippets in edit mode, not just create #3902
Bug 1788201: Remove serviceAccount in favour of serviceAccountName #3869
Bug 1790750: Fix off by one bug in metrics rows count #3864
Bug 1785010: Added legacy plural url field in the OB/C models #3852
Bug 1797501: Adds flexible OSD Sizes in the install flow #4149
Bug 1792507: Add missing candidate-4.3 channel #4093
Bug 1792419: fix(pipeline-tasks): Cancelled tasks #3993
Bug 1791101: Make subscriptions & catalog sources optional so normal users can see installed operators #3963
Full changelog

console-operator

Bug 1785492: fix RBAC for ConsoleYAMLSample #372
Bug 1794548: IPv6 support to console operator & console [openshift-4.3.z] #376
Full changelog

coredns

Bug 1801343: Rebase to upstream 1.6.6 #23
Full changelog

docker-builder

Bug 1802894: bump(github.com/mtrmac/gpgme): v0.1.2 #136
Bug 1790525: bump github.com/containers/{storage,image,buildah} #127
Full changelog

docker-registry

Bug 1804494: Dockerfile: Clear yum cache after install #223
Bug 1796584: aws-sdk-go v1.28.2 #218
Full changelog

gcp-machine-controllers

Bug 1800315: [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller’s changes #75
Full changelog

hyperkube, tests

Bug 1808429: UPSTREAM: 88251: Partially fix incorrect configuration of kubepods.slice unit by kubelet #24611
Allow oauth token + cert fallback test to be skipped when running skew tests #24561
Bug 1794852: UPSTREAM: 86191: Sync the status of static Pods #24453
Bug 1793587: sccadmission plugin incorrectly reports “no SecurityContextConstraints found in xxx” #24428
Bug 1796716: Verify services and API are available during upgrade #24479
Bug 1788065: move more image-eco db template tests from upstream repos to sample operator installed #24407
Bug 1800662: [release-4.3] test/cmd: build.sh can’t reach old openshift/origin:v1.1 image #24519
Bug 1791730: 4.3 ipv6 backports #24405
Bug 1788065: pin image-eco sclorg samples usage to specific versions to shield from upstream churn wrt EOL image removals #24406
Bug 1791200: test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking #24465
Bug 1790481: Fix delegated auth CM perms #24392
Full changelog

insights-operator

Bug 1788112: override node selector (4.3) #63
Backport code owners to 4.3 #76
Full changelog

ironic-ipa-downloader

Bug 1804278: set hostnames and make DHCPv6 IDs predictable #29
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1809924: Bump login plugin to 1.0.23 #1030
Bug 1793322: [4.3] Remove use of /etc/passwd and upgrade plugins versions #1021
Full changelog

kube-proxy, sdn

Bug 1801737: drop firewalld monitoring, add better iptables monitor #39
Bug 1797042: [4.3] Clean up stale egress IP iptables rules on startup #100
Bug 1794024: [4.3] Update deps, including informer fix #94
Bug 1800324: [4.3] Bug 1796157: Fix handling of VNID 0 with NetworkPolicy #104
Bug 1790805: Fix reinitialization of deny-all NetworkPolicy state on restart #98
Bug 1788580: [4.3] slightly improve logging #78
Full changelog

kuryr-cni, kuryr-controller

Bug 1799393: Ensure LB with error status is only recreated after deleted #160
Bug 1799401: Ensure no sg rule is repeated on the Network Policy CRD #159
Bug 1791278: Add support for listeners on the same port but different protocol #154
Bug 1790339: Add support to Octavia ACLs #153
Bug 1790339: Ensure lb SG is not updated on member creation #146
Bug 1789330: Fix more problem of changing size during dict iteration #144
Bug 1792240: Avoid KeyError when deleting NPs #142
Bug 1789330: Fix problem with dicts while iterating on for loops #135
Bug 1788635: Fix Octavia version detection #131
Bug 1787343: Protect from sg Not Found on multiple np enforcement #129
Full changelog

machine-api-operator

Bug 1796822: Support deployment on OpenStack with self-signed certificate #485
Full changelog

machine-config-operator

Bug 1785279: [release-4.3] Discard audit messages from journald #1352
Bug 1809693: [release-4.3] prevent hitting annotation max size limit on nodes #1433
Bug 1807104: Detect default hostname in its variants #1534
Bug 1807279: templates/master/00-master/azure: bump raft tunables #1507
Bug 1807104: daemon: Always create tempfiles in target dir #1535
Bug 1808004: [release-4.3] CRI-O to set stream address in ctrl plane #1510
Bug 1802675: [release-4.3] baremetal: Verify that mdns start only after hostname was set #1479
Bug 1806020: [baremetal] Set hostname when DHCP6_FQDN_FQDN is set #1502
Bug 1801638: [release-4.3] baremetal: all resolvconf editing to NM dispatcher #1470
Bug 1794495: [release-4.3] fix ctrcfg and add e2e test #1447
Bug 1798170: baremetal: Remove .template from path in dhcp-dhclient-conf.yaml #1438
Bug 1798639: [release-4.3] baremetal: IPv6 add dhcp-duid to NetworkManager config #1441
Bug 1797647: [release-4.3] [baremetal] Ipv6 non virtual ip fix #1466
Bug 1797035: Get etcdctl binary from the etcd image and not from the upstream releases #1431
Bug 1793253: [release-4.3] HAProxy infra pod: Make v4/v6 compatible #1399
Bug 1785718: [release-4.3] etcd: Add initial support for an IPv6 control plane #1353
Bug 1796822: Support deployment on OpenStack with self-signed certificate #1426
Bug 1796440: [release-4.3] DR: Cherry-pick keep keys and data separate for snapshot backup #1410
Bug 1794699: [release-4.3] baremetal: ipv6, switch to NM dispatcher for DNS VIP prepending #1406
Full changelog

multus-cni

Bug 1809283: Removes configuration invalidation [4.3 backport] #52
Bug 1805444: Exposes readinessindicatorfile and uses wait.PollImmediate [backport 4.3] #48
Full changelog

oauth-proxy

Bug 1798195: fix OAuth discovery in IPv6 environments #150
Full changelog

openshift-apiserver

Bug 1803080: 4.3: UPSTREAM: 87673: blank out value for unbounded client label #75
Full changelog

openshift-controller-manager

Bug 1810306: Restore openshift-controller-manager metrics #71
Bug 1785845: use OCM config registry hostname with imagechangetrigger in case imagestream cache is stale (a la builds) for local ref streams #59
Bug 1784569: Exclude IPv6 Registry Locations #57
Full changelog

openstack-machine-controllers

Bug 1796822: Support deployment on OpenStack with self-signed certificate #81
Full changelog

operator-lifecycle-manager

Bug 1805268: Fix configmap registry server readiness probe timeouts #1365
Bug 1808419: Don’t block on ctx.Done() if startup fails. #1366
Bug 1805574: Remove run-level 1 from olm and openshift-operators namespaces #1310
Bug 1809649: Update subscription_sync_count to include the package name #1343
Bug 1798665: Fix cases where an operator’s ready channel may never close. #1280
Bug 1797019: [release-4.3] Fix bad opgroup annotations #1272
Bug 1803135: fix(packagemanifests): Fix index key func to avoid key collision #1292
Bug 1780378: Implement Structural Schema for CRDs #1197
Bug 1796913: packageserver update fails to adopt APIService #1270
Bug 1791852: Remove license year #1243
Full changelog

operator-marketplace

Bug 1810048: Use DNS for CatalogSource address #285
Full changelog

operator-registry

Bug 1794176: Updating summary for ‘Operator Registry ’ containers #169
Bug 1805410: fix(docker): add entrypoint #185
Full changelog

ovn-kubernetes

Bug 1806667: merge master to release-4.3 #100
ipv6: Make IPAddrToHWAddr() aware of IPv6 #101
HACK: add ipv4 interfaces to pods that need them #94
Upstream merge 2020-02-18 #93
fix IPv6 subnet dynamic addressing #1072
config: don’t let environment affect test results #1071
add the ability for ovn-kubernetes to ignore a node by label #1048
Fixes accidental override of file conf settings with defaults #1044
Fix delete order for network policy #1068
Remove kube-proxy in KIND deployment #1067
remove unused methods from KClient #1053
Ensure kind logs are always exported #1065
ci: always export logs #1054
Clustered database (aka RAFT) support for OVN DBs #1051
Bug 1795454: Resync to upstream #87
when performing static ip allocation other-config:subnet is not required #1046
Remove the compat annotation code for OvnPodAnnotationLegacyName and OvnHostSubnetLegacy #1045
ci: remove Travis now that GitHub actions work #1039
J2 render all templates #1041
ci: bump master loglevel to 5 #1040
CNI logging and timeout fixes, plus node handler locking fix #1036
ci: use consistent kind cluster name and fix artifact retrieval #1037
Also run CI for pull requests #1033
Replace Travis CI with GitHub Actions #1028
Iptables followup #1032
Ensure j2 does not fail to run in daemonset.sh if installed globally #1031
Fixes specifying geneve port #1030
fix for iptables issue in CentOS 8 #1027
do not delete integration bridge as part of ovnkube-node cleanup #1029
Yet more cleanups #1023
travis: bump timeout for e2e tests #1024
a way to specify the encap-ip for a k8s worker node #1016
Fix kubetest to enable conformance #1018
add support for custom MAC specified in default network-attachment #997
Validates host subnet prefix length and default behavior #979
ovn: read pod addresses more quickly #1012
Enable e2e CI #1011
Bug 1798613: OVN: Bump image to include ovn2.12 #72
Bug 1796531: CARRY: fix race updating exclude IPs on node switch #83
Upstream rebase 2020-01-17 #77
Restrict address type requirements for tunneling #1014
Allow IPv6 Node addresses for geneve tunnels #1013
factory: parallelize Node events #920
scale: use light weight check to ensure OVN DB endpoints are up #1007
trivial: use GetNodeWellKnownAddresses() to arrive at node mgmt port IP #1009
determine whether we are running in IPv6 mode once at the start time #1005
Fix multicast Port_Group update at pod creation/deletion. #953
IPv6 single-stack support #968
ovn: remove ‘func (oc *Controller)’ from functions that don’t need it #1002
avoid using –wait=sb in ovn-nbctl calls when using ovn-nbctl daemon #1001
Factory and testcase cleanups #999
handle failed management logical_switch_port creation #996
scale: fixed MAC address for the logical router ports #992
do normal processing for all inbound packets that are not tracked #993
scale: clearInitialNodeNetworkUnavailableCondition() is very expensive #994
Fix Windows cross-compilation #76
Fixes missing oc client during openshift image build #74
correct the directory placement of windows binary #73
Build the windows binary as part of the container ovn-kubernetes container build #69
Upstream + hybrid-overlay merge 2019-12-28 #70
scale: waitForNodeLogicalSwitch() should get other-config:subnet itself #989
remove unwanted debug log messages in factory.go #987
ovn-controller: Set ovn-openflow-probe-interval #986
scale: ascertain gateway readiness by checking OpenFlow rules #985
scale: ascertain management port readiness by checking OpenFlow rules #984
set other_config:hwaaddr on br-local before you add br-nexthop #983
Support latest OVN #926
persist the mac address associated with the node management port #950
Better testcase failure descriptions and command matching #976
pkg/cluster: set br-nexthop mtu #975
go mod tidy #973
persist the mac address associated with br-nexthop OVS internal port #949
add node systemID to the list of information passed from node to master #966
Removes duplicate code setting ovn_db_host #971
Update metric service to include not-ready endpoints #974
Fixes detecting loopback for ovnkube-db endpoint #970
cmd: add –metrics-enable-pprof option to serve pprof on metrics port #969
get dynamic_addresses and addresses in one go instead of two execs #963
Manage log level during node bring up #962
Add networkpolicy test cases #939
Disable IPv6 DAD and ensure addresses are ready #937
add a switch to flip on/off multicast support (is disabled by default) #954
use ahostsv4 database to ensure we get IPv4 address always #952
Move pod annotation under k8s.ovn.org namespace #922
Enable IGMP Querier only if a source IPv4 is available. #944
Sync SubnetAllocator from openshift/sdn #945
Fix parsing of IPv6 addresses in ovn URLs #938
build: fix ‘make lint’ when GOPATH isn’t explicitly set #929
AddFilteredEndpointsHandler must take label selector like other handlers #936
Full changelog

prometheus-node-exporter

Bug 1789084: Not reporting ‘none’ when no platforms located #49
Full changelog

service-ca-operator

Bug 1791022: Ensure removal of 4.4-only resources on downgrade to 4.3 #93
Bug 1788179: Enable automated rotation for 4.3 #104
Full changelog

telemeter

Bug 1805116: jsonnet/telemeter/metrics: add aggregated up metric, remove node_uname_info #309
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github