4.4.29

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:82a072fc712c8338f0190644f55da362f32579d3c64f72b1811b9beea2e69c59

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.4.3

Created: 2020-10-21 02:25:04 +0000 UTC

Image Digest: sha256:82a072fc712c8338f0190644f55da362f32579d3c64f72b1811b9beea2e69c59

Release 4.4.29 was created from registry.svc.ci.openshift.org/ocp/release:4.4.0-0.nightly-2020-10-14-150602

Components

Kubernetes 1.17.1
Red Hat Enterprise Linux CoreOS upgraded from 44.81.202004260825-0 to 44.82.202010081631-0 (diff)

Rebuilt images without code change

baremetal-machine-controllers git 4d1663e7 sha256:ed8a170acabb312693bf26e88391b86a88374d02ee634c32fce372d7fb66de49
cluster-bootstrap git 04c97c30 sha256:66b0156b5e4f089725e6c2d11d23905f2ec8a99e89eaf286c4a48da8508d54ef
cluster-ingress-operator git 39760557 sha256:1e6a83215acd49094a3fd91ee8841ffafae438ec97375ebe141840c3652e2cca
cluster-kube-storage-version-migrator-operator git bb6fb49e sha256:aafd9a1a2a58b8d0c181434c79c719683c9adc8e9570b616815200df78f98988
cluster-node-tuned git 927879ff sha256:6bac519900ec150de18570d8256a5cb31daf0130bc2de94b3ddb41770c1c0b57
cluster-node-tuning-operator git 2473a80c sha256:105f644c30b9710aefa16ebf98e5432dc5ed2b0a4460fcf0ba3397613be489d3
cluster-update-keys git cca4ce69 sha256:0b0217768a1be27ae17187738847a4ebac6697f4e8c40850045b4e0030ab292f
configmap-reloader git 841b0bfe sha256:411454ebf68774cba279cc2369327760d4c608e9c722a3c75c53c3e4a3f67002
container-networking-plugins git cdba584f sha256:ff6c97c5fbfc3601f7754657d7053d1f3333e19661eaa1ed972061aaf5171afd
csi-snapshot-controller git f758cee9 sha256:2edc8c89daacdcfa2559da925298a1b7754d6b5869c408b15b3184f71a60fabf
ironic-hardware-inventory-recorder git 2424a571 sha256:7cdc9ed18c1a234aa2538789cbb00a63b8ce88ed19dc1be9cd52e02c7513372a
ironic-ipa-downloader git dfd93208 sha256:02b7c1c7732d9dd4a24334b763f21df14ffbf03c372c85c091e052719afce185
ironic-machine-os-downloader git 51e14472 sha256:4d3df4d9d74d3e418e92f41f3844f7b3244f4ee248d6bb79fb6714d435a13285
ironic-static-ip-manager git e33314bd sha256:381d368fe0898bb217217eaff7c214234c054586a29276129669fa7a190756f8
k8s-prometheus-adapter git 8f2182e7 sha256:9c0a710d8e36f6b6b4f35c8cf9c64a03df60f07126919bf51b846f48a59756af
kube-client-agent git e61c574c sha256:f787b55e93dce63e6d0205a53966a71a3642f16247c1dd974f557a4fc3374b14
kube-etcd-signer-server git e61c574c sha256:b44cf1f3404149a261856aecc9f6c7c4aa626398e053dfb388e7bb96463eb432
kube-rbac-proxy git b4791e11 sha256:c581692326d23e74e966169ab14aebaeb824ff8b7acd7c7c332d0d06a57fe52b
kube-state-metrics git b659f76c sha256:a2e4d8cf06686012c3ae1ccaae7e6c0657eb6fb9de013cb3496998b788c3e3a2
kube-storage-version-migrator git 5a52f4f5 sha256:5fbfa5e0f1c64869c5070e8b3d387df1ae7cf6966a5eea3d6652bc44b8671680
local-storage-static-provisioner git da340b47 sha256:606c0892d554dabd6ee2380aeff04f7f64ef41abf141d9b3d896297738f21a2d
machine-os-content sha256:66c2ecf008af9558434cc44b0bd2938f4162fc7b55122c73affbe2ff5e14c1ed
mdns-publisher git 24135de2 sha256:73c257dd8a061fd7e4e7fbcc43db58ac7d9f1fc459106a2d5845669907187edc
multus-admission-controller git 9dc63698 sha256:7fe924dd2a05f2b3528088fccbc9a7173563700a853615f75b670d7d4a978314
multus-route-override-cni git 1322dc43 sha256:a021ebf0f1299adf5b84b0528a06614c7516d892f11d0c818f42c39025d08256
must-gather git 3cac0b53 sha256:0748bebb0dd6782d07ba4486d12cac79f6570a3432ebc25fb6159a76eb13efe9
oauth-proxy git 3d0621eb sha256:0cf895e446aa2a887ac8fd0d36b460bcbc40704dcc6cc838cc4a543a6deb38cf
oauth-server git 054e15e5 sha256:ac1c45c7542ddfbae29fadac7eac119c2b3212e9d064ace944b29a906d95431d
openshift-state-metrics git f13d31a1 sha256:69a10555d8a607c99b280c78d778703e2bb02af3b7d9d3811c34fe1c6b40a374
prom-label-proxy git 00985729 sha256:3311b034d7444f686a697e0a63213f9c54c3240a7c880f180dce1a29057ae233
prometheus git 2c426354 sha256:6c09284696b4edd166521d6c5dd175b4baec4eb17f47ad0e874fc757f47c08dc
prometheus-alertmanager git 6299b49b sha256:0220102406b92d262fe53dcb6dbcaa2cb29c0ba13269021a659d981b1eef124b
service-ca-operator git e5a04d6a sha256:64563e33f1ce74106a0fa7a5d25ed9c97f6e3dd90b66d494197e8461c448f806
service-catalog git 6f75f804 sha256:a002dd33ef0da9d2f6c84488710dd122728efd5bba22a5fe11f1af7416299a08
telemeter git debbf860 sha256:06cec4c73f685a71ff0075b21e794a85212cafbed256d6662270863cec736806
thanos git 40b1b225 sha256:0f94ccffd7fe49750ba522761c4b11087d3d63dc7f3a7a2a6a0256fb7e2e0c3a

aws-machine-controllers

Bug 1810531: Revendor MAO with timeout formatting fix #333
Bug 1833359: Custom dns name support #326
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1872887: use https for lb probes in Azure UPI #4202
Bug 1880988: openstack: Upgrade the CI build image #4204
Bug 1880202: destroy/gcp: correct extract service account email from IAM policy binding member #4197
Bug 1862113: bump RHCOS images for CVE-2020-10713 #3985
Bug 1866099: Dockerfile.upi.ci: Add GCP UPI required binaries. #3559
Bug 1857816: adjust Azure UPI disk size to the same used in IPI #3904
Bug 1829894: OpenStack: Set vrrp protocol number instead of name #3528
Baremetal: Bug 1840106: Pull data from ironic inspector and annotate BareMetalHost #3656
Bug 1848021: Add the –pod-infra-container-image flag to the kubelet service #3766
Bug 1847957: OpenStack: Wait for router interface to create FIP #3764
Bug 1841930: images: libvirt: add yq to libvirt CI image #3687
BUG 1826069: Disable client side rate limiting in Azure. #3616
Bug 1837478: update vSphere UPI docs to remove machinesets #3624
Bug 1842378: [UPI] Rely on security group ID when deleting it #3694
Bug 1838885: installconfig: relax GCP cluster id restriction #3662
Bug 1836982: data/data/aws/vpc: create subnet sizes based on az count #3614
Bug 1821638: oVirt, add os_type to ovirt templates #3415
Bug 1826922: baremetal: update provisioning CR to quote strings #3504
Bug 1835795: downport disk extension support for masters/workers #3628
Bug 1836092: openstack: Add jq to the CI image #3607
Bug 1836821: Install upi support on openstack-installer image #3605
Bug 1823766: os: Mention the bootstrap FIP #3449
Bug 1822379: Fix LB deletion for lbs with same or status pending #3431
Bug 1836038: data/azure/vnet: switch to HTTPS probes for lbs #3606
Bug 1824180: Backport adding groundwork for multi-arch images #3457
Bug 1832137: Fix bootstrap certificate generation #3554
Bug 1828948: cmd/openshift-install/create.go: return lastErr when waiting API fails #3571
Bug 1820575: Cherry-pick oVirt PR 3406 vNIC profiles #3569
Bug 1823978: AWS Terraform: use machine_cidr instead of VPC main cidr #3453
Bug 1824991: Update vSphere and Metal UPI for terraform 0.12 #3497
Bug 1828238: OpenStack: Allow Booting bootstrap node from volume #3511
images/baremetal: save rhcos.json in container image #3510
Full changelog

baremetal-operator

Bug 1840106: Backport get-hardware-details #87
Bug 1843230: Read BMH status from annotation #70
Full changelog

baremetal-runtimecfg

Bug 1862898: Move haproxy port to 9445 due to conflict with KCM #88
Bug 1831008: Move haproxy listening port due to conflict #61
Bug 1823465: runtimecfg: tool to show the Virtual Router IDs #55
Full changelog

cli, cli-artifacts, deployer

Bug 1872520: Allow prune to move on with Removed registry #533
Bug 1872520: Replace bitbucket.org/ww/goautoneg with its mirror #578
Bug 1847323: Place apache license in cli-artifacts #472
Bug 1808174: bump(golang.org/x/crypto|net|sys) #428
Bug 1806780: release: Mirroring from custom directory via oc adm release mirror fails #446
Bug 1837675: Backport enhancements/oc/mirroring-release-signatures implementation #426
Bug 1835739: Fix oc drain to ignore daemonsets and others #420
Bug 1838614: Backport oc status project 4.5 changes #432
Full changelog

cloud-credential-operator

Bug 1808175: CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic #194
Bug 1838810: do not special-case handling read-only credentialsRequest #191
Bug 1807659: no need to run CCO as privileged pod #189
Full changelog

cluster-authentication-operator

Bug 1842442: explicitly set oauth-server container’s root file system to writable #286
Bug 1823622: [release-4.4] Fix ingress state condition flapping #278
Full changelog

cluster-autoscaler

BUG 1835160: Fallback to status if replicas nil in spec #153
Full changelog

cluster-autoscaler-operator

Bug 1806439: Drop run-level #137
Full changelog

cluster-config-operator

Bug 1856763: update golang version to be 1.13 #142
Bug 1825194: oc explain still shows “The default is auth.openshift.io” #131
Bug 1847457: Fix Dockerfiles #138
Full changelog

cluster-csi-snapshot-controller-operator

Bug 1845623: Add extra check for v1alpha CRD #42
Full changelog

cluster-dns-operator

Bug 1847197: Tolerate all taints #179
Full changelog

cluster-etcd-operator

Bug 1869681: handle IP migration when DNS fails on Azure IPI #419
Bug 1829645: add relatedobjects for immediate creation by CVO #315
Bug 1846025: Adding rollbackcopy subcommand #379
Bug 1840150: operator: add fsync controller #369
Bug 1841162: Fix openshift_etcd_operator_build_info metric #365
Bug 1837630: pkg/operator/etcdcertsigner: sign etcd certs for 3 years #358
Bug 1836270: Cluster restore should not stop network pods on bare-metal #357
Bug 1838781: pkg/etcdcli: refactor health checks #360
Bug 1823608: fix message reporting for etcdmemberscontroller #336
Bug 1825236: Fix podman auth #337
Bug 1831664: pkg/cmd/render: Backport adding support for s390 and s390x arch #348
Bug 1826383: add infra flag and configure raft for Azure #316
Bug 1830510: pkg/operator/etcdcertsigner: sign peer DNS SAN with explicit FQDN #340
Bug 1832919: Stop reconciling in response to global configmap events #339
Full changelog

cluster-image-registry-operator

Bug 1873534: Using last finished job and disabling retries #600
Bug 1832140: Assure storage bucket names in lowercase #540
Bug 1825164: update object dumper #532
Full changelog

cluster-kube-apiserver-operator

Bug 1876484: static-pod-installer: remove deadlock by recreating inst… #959
Bug 1863076: LatencySensitive feature gate allows upgrades #923
Bug 1851831: static pod: don’t wait for 6080 in apiserver container #892
Bug 1851066: 4.4: use “ss” instead of “lsof” to check port; check on container start #891
Bug 1829580: Add e2e test that ensures stale condition is removed #845
Bug 1829319: add relatedobjects for immediate creation by CVO #843
Full changelog

cluster-kube-controller-manager-operator

Bug 1876484: static-pod-installer: remove deadlock by recreating inst… #457
Bug 1851397: Fix port check 4.4 #423
Bug 1816806: Fix gce cloud provider permissions #426
Bug 1833128: Updates Resource Graph to use default-ingress-cert CM #409
Bug 1829319: add relatedobjects for immediate creation by CVO #407
Bug 1825987: Sync new client cert-key on recovery #401
Full changelog

cluster-kube-scheduler-operator

Bug 1876484: static-pod-installer: remove deadlock by recreating installers that disappear #284
Bug 1833122: Have targetconfig controller use cm/default-ingress-cert #247
Full changelog

cluster-machine-approver

BUG 1854385: Update golang/crypto to bring CVE-2020-9283 #76
Full changelog

cluster-monitoring-operator

BUG 1856767: manifests/telemetry: replace apiserver_request_count with apiserver_r… #880
Bug 1857597: Do not report ‘all’ in relatedObjects #855
Bug 1845444: KubeApiLatency alert firing even though not all conditions are matched #809
Bug 1850615: fix AlertmanagerConfigInconsistent alert #824
Bug 1813221: remove cpu limits for config reloader #841
Bug 1851920: Add namespace selector to CPUThrottlingHigh #833
Bug 1813221: jsonnet: add missing resource requests for alertmanager sidecar #818
Bug 1834913: bump kubernetes-monitoring/kubernetes-mixin #787
Bug 1813221: set remaining cpu requests #769
Full changelog

cluster-network-operator

Bug 1881430: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #800
Bug 1875438: [release-4.4] OVN: Handle OVN db upgrades #781
Bug 1858217: bump golang.org/x/text/encoding #760
Bug 1823709: [backport 4.4] NetworkAttachmentDefinitions should have output for “oc explain” #735
Bug 1855895: Add netns mount #731
Bug 1857742: [release-4.4] Set timeoutSeconds to reflect expected timeout for OVS commands #724
Bug 1858183: Block MCS and metadata for host-networking pods #715
Bug 1851903: Kuryr: Mount /run/netns to ensure netns access #684
Bug 1851489: The DHCP CNI daemonset should mount the netns paths #681
Bug 1847558: Drop ovn-octavia provider limitation for multiprotocol listeners #675
Bug 1849540: Split etcd sg rule ports range into different sg rules #678
Bug 1847675: [4.4] mount /var/run/netns rslave in ovnkube #669
Bug 1844245: bindata/network/ovn-kubernetes/ovnkube-: update resource requests #662
Bug 1832872: Remove dead member from LB pool. #629
Bug 1841029: Recreate DNS service upon Octavia upgrade #653
Bug 1844136: Setting resource request for kube-proxy deployment #659
Bug 1841507: Allow connection between authentication net namespaces #657
Bug 1834474: ovnkube: set NB/SB database inactivity probes to 60 seconds #636
Bug 1807648: Fixes to reliably save/restore flows #625
Bug 1832899: Kuryr: Remove old SG rules on upgrade #623
Bug 1811140: Don’t override containernetworking binaries in SDN and Kuryr #602
Full changelog

cluster-openshift-apiserver-operator

Bug 1840857: openshift-apiserver doesn’t live reload extension-apiserver-authentication trust #366
Full changelog

cluster-openshift-controller-manager-operator

Bug 1861874: account for nil DaemonSet returned from library-go #166
Bug 1852249: ensure progressing is not set to false if version is missing #160
Full changelog

cluster-policy-controller

Bug 1858800: add UID deallocation logic #33
Bug 1856763: update golang version to be 1.13 #31
Bug 1829327: use patch when updating namespace #25
Full changelog

cluster-samples-operator

Bug 1865889: Fix Jenkins Monitored templates typo and other updates #294
Bug 1871832: initial create errors should map to SamplesExists instead of ImageChangesInProgress #315
Bug 1792102: Install imagestreams and templates on Power and Z [4.4] #297
Bug 1835995: ensure s390/ppc64le platforms bootstrap as removed following upgrade #279
Bug 1842560: improve reason text on degraded condition #282
Bug 1824280: revert pr 177; no override jenkins* registry hosts for mirrors #261
Bug 1832344: correctly handle removed templates watch events as part of an upgrade #269
Bug 1835995: avoid listing file system content for unsupported architures #272
Bug 1829073: copy install pull secret when boostrapped as removed #266
Bug 1814395: abort metrics in general if removed/unmanaged #250
Full changelog

cluster-storage-operator

Bug 1879109: Move notUpgradeable check later to prevent z-stream upgrade failures #87
Bug 1858168: Includes validation check for VolumeSnapshot v1alpha1 CRDs #61
Full changelog

cluster-svcat-apiserver-operator

Bug 1831019: Upgradeable = False, link to OpenShift docs #89
Full changelog

cluster-svcat-controller-manager-operator

Bug 1831027: Upgradeable = False, link to OpenShift docs #77
Full changelog

cluster-version-operator

Bug 1841239: Avoid pre-creating clusteroperators that should be excluded #376
Bug 1848783: Expand supported set of probe field mutations #390
Bug 1843732: pkg/cvo/sync_worker: Do not treat “All errors were context errors…” as success #379
Bug 1835483: Add cert to service to support https #367
Full changelog

console

Bug 1880478: Empty secret should be editable in generic secret form #6680
Bug 1881058: Tighten cipher usage to library-go #6694
Bug 1875381: Manual cherrypick fix log whitescreen (release-4.4) #6513
Bug 1868035: fix bug where Routes created set route.spec.port.targetP… #6288
Bug 1824429: Make Tag field optional for the ImageStreamImport validation schema #5141
Bug 1859834: Fix crash (white screen) when cancel Pipeline Create with open sidebar #6083
Bug 1804866: Dockerfile.product: Change node headers to v12 #5979
Bug 1822346: Fix bug where pipelines doc link is incorrect #4985
Bug 1822437: Fix instances / version issue with crd pages #5552
Bug 1837784: Query Browser: Add text wrapping for table headers #5498
Bug 1834313: autoselect query from metric dropdown #5740
Bug 1846305: Topology fix for service binding requests with no backingServiceSelector #5721
Bug 1820059: Last navigation item needs more bottom padding #4906
Bug 1847141: Add 4.5 channels to Cluster Settings page #5791
Bug 1839019: Fix edit and import flows deployment triggers #5591
Bug 1840398: correctly link to OperatorGroup from CSV details #5579
Bug 1835939: Operands related views are disappeared due to missing Operand’s displayName field in the CSV #5565
Bug 1828955: Pipelines TechPreview #5550
Bug 1829030: Fix bug where masthead dropdown item spacing is inconsi… #5219
Bug 1827766: Fix bug where K8sResourceLink lacks empty state #5186
Bug 1827306: Remove Edit ClusterServiceVersion menu options from C… #5173
Bug 1824049: Handle undefined MachineConfigPools status #5102
Bug 1829568: Pipeline Builder treats task param default properly #5545
Bug 1836343: match available queries on dashboards and metrics tabs #5461
Bug 1831821: Don’t set net-attach-def type at root #5427
Bug 1817394: Windows CDs use VirtIO instead of sata #5496
Bug 1839115: adds support for addition/updation of env variables and imagePullPolicy #5541
Bug 1841149: Creating role and roleBinding when enabling monitoring for an operator #5617
Bug 1831808: fix bug where operand list status does not show latest … #5616
Bug 1840812: Handle resource names with special characters #5605
Bug 1836807: updates apiGroup for Knative Eventing to latest supported #5477
Bug 1832976: Fix channel issue by narrowing down requests and loading guard #5339
Bug 1824255: Update “view more” apis link #5320
Bug 1838420: Fix payload for PVCPool BackingStore Creation #5673
Bug 1840954: Pipeline Builder supports invalid task refs #5612
Bug 1829063: Don’t blacklist SecurityContextConstraints on the search page #5221
Bug 1828253: Add workload badge/name to monitoring dashboard when navigating to it from the Side Panel monitoring tab #5195
Bug 1840445: Fix conditions table runtime error on operand details page #5631
Bug 1826503: Requested tweaks to OperatorHub by UX #5182
Bug 1827197: Add query parameter for selected container to pod logs #5167
Bug 1827746: Register Subscription list page from plugin #5162
Bug 1825975: Add deployment configs and stateful sets to project ove… #5122
Bug 1810364: Monitoring Dashboards: Fix JS warning for empty table cells #4679
Bug 1838815: Fix “SyntaxError: Unexpected identifier ‘e’” in Safari (production build only) #5528
Bug 1840647: do not display ‘Catalog source was removed’ for PackageServer #5598
Bug 1837550: Fixed legends on data consumption card #5492
Bug 1829591: Fix handling of Operand conditions #5238
Bug 1835325: Add default value to buffer prop to prevent runtime error #5432
Bug 1828717: removes techpreview badge from serverless #5210
Bug 1827457: Fixed the issue for fieldDependency spec descriptor for create operan… #5157
Bug 1826409: Fix create operand validation #5124
Bug 1828784: fix(prun): rerun cancelled run #5212
Bug 1813884: Fix Pipeline Builder parameters of type Array #4738
Bug 1838792: handle embedded pipeline spec in pipelinerun scenario #5526
Bug 1834717: Check runStrategy when checking for running vm #5409
Bug 1821625: Fix bug where networking metrics unavailable to regular users #5001
Bug 1831137: Fix create operand form advanced field bug #5125
Bug 1834331: Add column Storage Class for PVCs Table Column Overlaps #5367
Bug 1832933: Fix select descriptor #5338
Bug 1833344: Fix timeout issue in Helm installation #5362
Bug 1828849: do not support SLIRP NetworkInterface in NIC modal #5296
Bug 1823855: Use ordered-values.yaml in Helm install #5117
Bug 1820130: [release-4.4] Backport 4.4 correct ocs version #4978
[Release 4.4] Bug 1826512: Include an override to use PF4 link colors in the catalog vertical-tabs #5431
Full changelog

console-operator

Bug 1847323: Publish license file #443
Bug 1847524: “downloads” pod does not work on the node which is disabled IPv6 #442
Bug 1824935: [release-4.4] Fix console oauthEndpointCAFile setting #407
Bug 1836938: Bump godeps to get fix from library-go#799 #431
Full changelog

coredns

Bug 1869310: Back port Handle endpoint tombstones (upstream #3887) #39
Full changelog

docker-builder

Bug 1817175: bump github.com/containers/buildah and dependencies #144
Full changelog

docker-registry

Bug 1825313: [release-4.4] Possible error loss in GCS driver #239
Full changelog

etcd

Bug 1815637: bump etcd v3.3.22 #47
Automated cherry pick of #11817 on release-3.3 #11856
Automated cherry pick of #11652 #11670 #11710 #11753
Automated cherry pick of #11638 on release-3.3 #11665
Automated cherry pick of #11630 to release-3.3 #11632
Automated cherry pick of #11613 to release-3.3 #11623
Automated cherry pick of #10218 #10468 on release 3.3 #11378
Bug 1837152: make evaluation of targetMember strict #49
Full changelog

gcp-machine-controllers

Bug 1733474: Revendor MAO with timeout formatting fix #109
Bug 1837122: Add the machine’s name as a known NodeInternalDNS #91
Full changelog

grafana

Bug 1847543: only allow 32 hexadecimal digits for the avatar hash #35
Full changelog

haproxy-router

Bug 1879122: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #185
Bug 1857022: Sanitize TLS config that has key bundled with cert #151
Bug 1868521: Back port Remove initial haproxy template commitAndReload #171
Sync OWNERS with master branch #163
Bug 1848687: Ensure router metrics are accurate and increase coverage #141
Bug 1854814: Removes ALPN from haproxy backends #144
Bug 1816544: [4.4] Backport “remove proto-version header field” #106
Full changelog

hyperkube, tests

Bug 1842653: [4.4] All NetworkPolicy tests currently being skipped on openshift-sdn #25197
Bug 1880123: For clusters upgraded from 4.1, skip the anonymous browser access test #25532
Bug 1858169: OpenShift APIs become unavailable for more than 15 minutes #25305
Bug 1849322: UPSTREAM: 89937: portAllocator sync local data before allocate #25175
Bug 1848437: 4.4: UPSTREAM: 91748: FieldManager: Reset if we receive nil or a list with one #25154
Bug 1857080: Include pod /etc/hosts in ephemeral storage calculation for eviction #25288
Bug 1855478: UPSTREAM: 91648: Changes to ManagedFields is not mutation for GC #25265
Bug 1862171: Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 #25348
Bug 1861850: UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e #25343
Bug 1860830: Ensure Azure availability zone is always in lower cases #25326
Fix commit checker #25367
Bug 1852938: Fix azure tests in unzoned environment #25262
Bug 1854312: 4.4: UPSTREAM: 92014: CSI: Modify VolumeAttachment check to use Informer/cache #25251
Bug 1851407: Fix DS expectations on recreate #25210
UPSTREAM: <carry>: Bug 1852565: change etcd health check timeout to 10s #25222
Bug 1845780: [release-4.4] kubelet: block non-forwarded packets from crossing the localhost boundary #25143
Bug 1850719: Measure container restarts over an interval instead of absolute #25202
Bug 1828477: Add CI test to check for critical alerts post upgrade #25204
Bug 1851066: images/hyperkube: install iproute #25216
Bug 1851418: remove problematic upstream client plugin test #25212
Bug 1842629: [release-4.4] openshift-tests: add run-resourcewatch command #25042
Bug 1829327: annotations exist, else forbidden: unable to validate #25161
Bug 1848687: Fix router metrics to be accurate in 4.4 #25165
Bug 1843876: UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage #25062
Bug 1847419: [release-4.4] UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV #25159
Bug 1847551: reenable jenkins e2e in e2e-gcp-builds #25128
Bug 1844831: oVirt, skip network service tests #25072
Bug 1844102: oVirt, add oVirt as a provide to openshift tests #25066
BUG 1824092: Managed cluster should grow and decrease when scaling different machineSets simultaneously (backport) #24909
Bug 1822488: UPSTREAM: 89794: Clean up event messages for errors #25048
Bug 1820274: e2e: Disable router header test on OVN #24823
Bug 1814393: UPSTREAM: 88141: Don’t try to create VolumeSpec immediately after underlying PVC is being deleted #24710
Bug 1841185: more upstream to installed template switch in image-eco (django this time) #25040
Bug 1820731: samename test flake fix #24986
Bug 1838199: stop printing usage help when the server commands exit #25005
Bug 1806699: Limit-based eviction should report metrics #24603
Bug 1831045: Fix client-ca dynamic reload in apiserver #24943
Bug 1833824: unskip template extended tests #24965
Bug 1828790: provides a temporal fix to improve CRD publishing e2e tests in an HA setup #24924
Bug 1829958: [release-4.4] Introduce IBMCloud provider, skip/fix tests #24937
Bug 1822667: UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin #24854
Full changelog

insights-operator

Bug 1880384: - collect hostsubnet information #181
Bug 1885191: Gather MachineSet info #202
Bug 1868165: pkg/gather/clusterconfig/clusterconfig: include node information in every archive #160
Bug 1883160: Add new team members to OWNERS #194
Bug 1869197: Limit collection of ALERTS metric to 1000 lines (~500KiB) to avoid unbearably large archives #162
Bug 1842489: Don’t delay first upload #136
Bug 1870512: Add @natiiix to OWNERS #164
Bug 1840012: [release-4.4] pkg: write files with extension #116
Bug 1834677: Gather image registry config (refresh) #131
Bug 1825757: Collecting config maps #96
Full changelog

ironic

Bug 1838083: Allows users to configure any non-link-local IPV6 address for the provisioning interface #79
Bug 1830298: Use snponly.efi instead of ipxe.efi for IPv4 #77
Bug 1827932: Increase command retries and add PXE booting retries #74
Full changelog

ironic-inspector

Bug 1833508: Allow any IPv6 address to be configured for provisioning instead of link local scope #35
Full changelog

jenkins, jenkins-agent-maven

Bug 1875258: 4.4 bump jenkins 2.235.5 #1153
Bug 1858754: Bump script-security plugin to 1.73 #1108
Bug 1857558: Bump matrix plugin #1128
Bug 1857549: bump jenkins to 2.235.2 #1119
Bug 1847442: Set OPENSHIFT_JENKINS_IMAGE_VERSION #1082
Bug 1847424: [release-4.4] Support Nodejs 12 Agent #1076
Bug 1826174: handle ingress certificate signed by custom ca #1050
Bug 1828939: set default java version to jdk 11 #1053
Bug 1836914: Fix kind in ServiceMonitor for persistent template #1057
Bug 1843945: bump jenkins to 2.222.1 and update plugins #1068
Full changelog

jenkins-agent-nodejs

Bug 1847442: Set OPENSHIFT_JENKINS_IMAGE_VERSION #1082
Bug 1847424: [release-4.4] Support Nodejs 12 Agent #1076
Bug 1826174: handle ingress certificate signed by custom ca #1050
Bug 1828939: set default java version to jdk 11 #1053
Bug 1836914: Fix kind in ServiceMonitor for persistent template #1057
Bug 1843945: bump jenkins to 2.222.1 and update plugins #1068
Full changelog

keepalived-ipfailover, pod

Bug 1851397: Add iproute package to get ss tool for port wait #21
Full changelog

kube-proxy, sdn

Bug 1870304: Port stuck open when ep deleted before svc in unidling mode #174
Bug 1878787: vxlan_monitor_test: fix flake #197
Bug 1874799: Add NodeInformer to EgressIP #183
Bug 1853197: [release-4.4] Backport OVS-retries #155
Bug 1855119: [release-4.4] Add support for –may-exist when adding the bridge in sdn #166
Bug 1839107: node/vnids: Correctly handle case where NetNamespace watch is far behind #143
Bug 1840215: Fix egressVXLANMonitor and egressIPTracker deadlock #145
Full changelog

kuryr-cni, kuryr-controller

Bug 1868427: Periodically fetch full list of watched resources #318
Bug 1847558: Remove ovn-octavia provider tcp+udp limitation #286
Bug 1845921: Get RPM and Kuryr version from git #272
Bug 1779163: CNI: Don’t wait for missing pods on DEL #280
Bug 1779163: CNI: Confirm pods in cache before connecting #246
Bug 1847105: Fix hacking min version to 3.0.1 #284
Bug 1844093: Ensure security_groups on LBaaSLoadBalancer defaults to empty list #265
Bug 1844091: Ensure provider information is used when finding lbs #264
Bug 1840611: Ensure LB resources with ERROR status are deleted #248
Bug 1839023: Skip LB sg update when no endpoint is found #242
Bug 1841493: Remove lb sg creation when octavia provider is ovn-octavia #250
Bug 1828388: Ensure NP are enforced on SVC with different port and target port #223
Bug 1826820: Ensure LB state annotation sg matches the SG on the LB #216
Full changelog

libvirt-machine-controllers

BUG 1859306: fix memory leak that leads to unresponsive libvirt URI #204
Bug 1829037: Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le #191
Full changelog

machine-api-operator

Bug 1816606: Allow Int in String within MHC MaxUnhealthy #539
Bug 1829938: Fix External DHCP range values for Baremetal configuration #579
Bug 1833359: Add ec2:DescribeDhcpOptions permission request #583
BUG 1806439: Remove explicit securityContext and add granular securitycontextconstraints “use” permissions in machine-api-controllers clusterRole #511
BUG 1812815: Add GCP roles/compute.loadBalancerAdmin role #515
Full changelog

machine-config-operator

Bug 1878798: remove err cardinality from mcd_kubelet_state metrics #2083
Bug 1873383: daemon: perform other rpm-ostree operations after OS rebase #2036
Bug 1869962: Add template for recycler pod #2004
Bug 1840366: [baremetal] Switch to /readyz for haproxy healthchecking #1997
Bug 1852792: KubeletConfig: Verify EvictionSoftGracePeriod is set when EvictionSof… #2000
[release 4.4] Bug 1855878: cherry-pick hostname fixes #1938
Bug 1855895: templates: add a file to load legacy iptables #1982
Bug 1845492: daemon: fix restoring file logic to avoid unnecessary deletion #1795
Bug 1825339: [4.4] crio: manage ns lifecycle #1871
Bug 1849217: Sync kublelet config across platforms #1852
Bug 1829752: baremetal - Limit the number of nameservers to 3 #1701
Bug 1851267: OpenStack: Set coredns forward policy to sequencial #1876
Bug 1845635: etcd-quorum-guard: update containers section in deployment.yaml #1820
Bug 1834533: Parse the kubelet.conf data after an update #1734
Bug 1849298: Update to github.com/mtrmac/gpgme v0.1.2 [4.4] #1854
Bug 1846357: MCD: tolerate all taints #1815
Bug 1830160: Makefile: add -failfast to e2e-op #1684
Bug 1848369: lib/resourcemerge: set AdditionalTrustBundle #1843
Bug 1848021: Set the pod-infra-container-image flag in kubelet to ocp pause image #1838
Bug 1829645: reconcile relatedObjects and place them in the clusteroperator for CVO #1764
Bug 1847876: gcp-routes: decrease downfile poll to be faster than LB on recovery #1837
Bug 1843928: gcp-routes: move to MCO, implement downfile, tweak timing #1780
Bug 1834194: vsphere: 4.1 to 4.4 upgrade bug #1769
Bug 1827539: pkg/server: disable weak TLS versions #1680
Bug 1834194: vsphere: check if .Infra.Status and .Infra.Status.PlatformStatus is nil #1735
Bug 1837122: templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml #1737
Bug 1811140: Add containernetworking-plugin RPM’s bin location to CRI-O config #1669
Full changelog

multus-cni

Bug 1835033: Logging improvement (UID, net-attach-def) / Backport to 4.4 #67
Bug 1827375: Allows allow pods in any namespace refer to net-attach-defs in default namespace #61
Full changelog

multus-whereabouts-ipam-cni

Bug 1856783: [backport 4.4] Exclude network address #19
Bug 1813031: Updates CRD name to whereabouts.cni.cncf.io [backport 4.4] #8
Full changelog

openshift-apiserver

Bug 1840857: openshift-apiserver doesn’t live reload extension-apiserver-authentication trust #103
Bug 1832762: updates Dockerfile.rhel to golang 1.13 and ocp:4.4 #104
Bug 1829327: allow patch for updating namespace #100
Full changelog

openshift-controller-manager

Bug 1849174: Allow image push after postCommit script completes #121
Bug 1819770: Bumping openshift/library-go #88
Bug 1819770: Removing yum commands from Dockerfile #106
Bug 1832839: more changes required for named workqueue metrics on pre 1.18 k8s base #117
Bug 1835913: ensure build pod activeDeadlineSeconds always set #108
Bug 1832839: Use named queues for all controllers #104
Bug 1831245: StatefulSets v1 do not trigger on image changes #103
Full changelog

openstack-machine-controllers

Bug 1839012: Allow to define primary ip address for machines #110
Bug 1832999: Migrate to MAO #98
Full changelog

operator-lifecycle-manager

Bug 1851095: Delete subscription metric when an operator is uninstalled #1746
Bug 1869717: fix(install): account for installplans when calculating generation #1737
Bug 1859755: fix(installplans): GC older installplans #1675
Bug 1859594: fix(resolver): Exclude all installed packages in dependency search #1666
Bug 1821274: Add CSV Metadata to PackageManifests #1552
Bug 1827000: Pod Config Deployment Hash Error #1566
Bug 1850112: Resolve only default channels #1590
Bug 1850632: don’t store full manifests in installplan status (for bundle images) #1595
Bug 1843678: Deleting a CSV removes related CSV metrics #1568
Bug 1841171: Update PkgManifest upon catsrc update #1556
Bug 1840887: fix(resolver): don’t pick operator from same package when resolve requiredAPI #1551
Bug 1836905: fix(queues): use a single gc queue #1528
Bug 1827821: Generation bug 4.4 Backport #1484
Full changelog

operator-marketplace

Bug 1873012: Increase registry delay for large payloads #345
Bug 1849518: [release-4.4] show the source commit id #292
Bug 1827777: Fix “DprecatedAPIsInUse” -> “DeprecatedAPIsInUse” typo #305
Bug 1826372: Tigger alert for invalid CSC #303
Bug 1847740: Ensure correct registry image #315
Full changelog

operator-registry

Bug 1846100: fix(server): make a copy of the db before migrating it #356
Bug 1816184: fix(dns): fix slow dns resolution of localhost for grpc health probe #269 #276
Full changelog

ovirt-machine-controllers

Bug 1839738: update machine only when needed #50
Bug 1835576: Downport instance customizaton based machine-pool #48
Full changelog

ovn-kubernetes

Bug 1882066: Pin 4.4 OVN to 20.06.2-4.el7fdp #283
Bug 1870869: Fix br-local duplicate MACs #239
Bug 1858309: Set MTU for br-ext hybrid overlay bridge #208
Bug 1845706: build: require openvswitch2.13 >= 2.13.0-29 or later #184
Bug 1845724: Backport deadlock fixes and dependent commits #185
Bug 1838259: scale: Enable parallel pod creation #173
Bug 1835985: [4.4] hybrid external gw #167
[release 4.4] bug 1829442: Remove errors based on passing nil elements to MarshalPodAnnotations() #157
Bug 1830416: build: require OVN >= 2.13.0-30 for rhbz#1819785, rhbz#1827403, rhbz#1828637, rhbz#1823755 #153
Bug 1828752: regression: logical_router_port mac address is case sensitive #163
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1813221: pkg/alertmanager: mergepatch alertmanager containers #74
Bug 1833427: retain pvc metadata #70
Full changelog

prometheus-node-exporter

Bug 1847961: text_collectors: Don’t detect AWS twice when virt-what is upgraded #63
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github