4.4.8

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:26760772b0128f11b3c3c13eeebf1238cf9b86ea5377808febdd14d4d00a2c31

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.3.25

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.4.4

Created: 2020-06-10 08:54:51 +0000 UTC

Image Digest: sha256:26760772b0128f11b3c3c13eeebf1238cf9b86ea5377808febdd14d4d00a2c31

Release 4.4.8 was created from registry.svc.ci.openshift.org/ocp/release:4.4.0-0.nightly-2020-06-08-083627

Components

Kubernetes 1.17.1

Rebuilt images without code change

azure-machine-controllers git 25bb1938 sha256:f5a029c4451ed43d951aefa55a755b2628c01ada552d5ada2c29c4be59f1f3f9
baremetal-machine-controllers git 4d1663e7 sha256:e51a68128cbdf6e5dbda44e8ed93922e20945cab9ddec5c14fdb0705092b030e
baremetal-operator git e4aebc7a sha256:b9e1d6ab4652c60e1f40185b71dbfdabb12428aaec62d693cc214584490be281
cluster-autoscaler git 6768c3c3 sha256:5dc5784b413da01fad657643432769f2af00e7bee4fa3fd284dc2bab9f735382
cluster-bootstrap git 04c97c30 sha256:8ce5181e5d041c959c09c8d564f9d4a79e4d8d51d0f98081dbd77114ae435f38
cluster-config-operator git 3d7c9399 sha256:17c2ee9c5883c92a1aa85b142a780cf700a155bcdd63b7554bf44933fb9ac605
cluster-csi-snapshot-controller-operator git 4492120d sha256:c2373d674f3d66520867d629a63d552ad8689da51bca1a28c380c19b6b6b93ae
cluster-dns-operator git de1a3573 sha256:8555a29bdd59bfa60f7999d8ea274e1d1ac97337614d81d176705567c7f99731
cluster-ingress-operator git 39760557 sha256:f77dfadaf0afa8a23ff524b15b32adf2ac6345b8734c8fce797a4b8747afa074
cluster-kube-controller-manager-operator git c34cdcb1 sha256:99706e3cfc50bbdf6d066ff8137316d3e605a28d6a55a61f132cf7cde7db6947
cluster-kube-scheduler-operator git 02325ba1 sha256:37232a4001bf4f73e0213dda3dc692a67530364996f7456900910a55dafe92b9
cluster-kube-storage-version-migrator-operator git bb6fb49e sha256:a348fce5e71e0f4d3886d8abcc04aca363e62a2fe5b81a711de5b705ba275842
cluster-machine-approver git 1bb09ce6 sha256:71cea89d05c0199ae21187a2831992f48db497a35c5b7b35268f198936dfd12b
cluster-monitoring-operator git 784585a6 sha256:e2e419596af38792378b39ca588a0e5b20d10e8303d173a378ea8c8724014d8a
cluster-node-tuned git 927879ff sha256:0d3b3b7ac0923c8038c7ea30f17395b6cf1c000ddf85316335bc17b5f297dc3e
cluster-node-tuning-operator git 2473a80c sha256:b89e9a469c30c0b707766d0ae31665ccd6a13135c8074087f617ddee12860774
cluster-openshift-controller-manager-operator git 7408e19d sha256:c80e171f2e7854829839e83ad1629ee7b17acdc650900e4e69c3f8b7234e1f49
cluster-policy-controller git f47f9ab7 sha256:ae59f6eb8e568a9f9d4587b0514d132dff2978cb812ed16a43fae0197d653b8a
cluster-storage-operator git a9548e6d sha256:48c6c19947be363747a6fc97a9c79cc23915673a905351043b8fb2b7a90a3a4a
cluster-update-keys git cca4ce69 sha256:a4955f05a57c4dcd170000a731a3c35aec45d9080a596bd8840a41a35afd3b10
configmap-reloader git 841b0bfe sha256:d7a71a527f95dd9b607cb2db3a2809003818573e6f550a96238ac2a55cc8a635
container-networking-plugins git cdba584f sha256:d5441ced3440395aa27b2d6ceec3315acf55f2dccc19d76a2f0e704d30b77cc0
coredns git e4c99779 sha256:3e185bf343f119d7e64d3d4297ad358c86a613bd047f8d45176a0a484f5d87f3
csi-snapshot-controller git f758cee9 sha256:5d0e3e14feeba4aa9070290e93a8bc278bfdc914c0234a771d4307f4f22f5ca7
docker-builder git bea4ef19 sha256:cd67a72a0f4a6c6829388b43b53da57ddbac132659535d7da0e5724249013924
etcd git 9003f534 sha256:5c5dbe3bbdbeaaa83844ea222c1e5344a445b9ef94776e1232d1ac63b75f8ad0
grafana git fb91937f sha256:d879eb6e4426c976d1fffef15a38ff2454bca5d382c13c7b157181db9373f43e
haproxy-router git 9cbaab11 sha256:43e5bf12c08a33946f99f475ae062187242d5ec74b7d23b48621a1b9f91e44b3
ironic-hardware-inventory-recorder git 2424a571 sha256:8657d39789cb74a822558414c87d04745df7c26e228adfa6690996c2dd2031eb
ironic-inspector git a3b771b1 sha256:9fb14e25420f4bd294140754c626e952d3b37b0056d4d1248f8a7cc02caf6634
ironic-ipa-downloader git dfd93208 sha256:5a1613cc782a938e9453084391c7364243ea43ede87467bb29e4eef7d80456ef
ironic-machine-os-downloader git 51e14472 sha256:3026b41fa9b03ecb47f73e1ded4f1c3055c679bb94653cf6a87226791790b009
ironic-static-ip-manager git e33314bd sha256:f4469b9cc090ae4b88ed0e3113cbdb77afaf02b812468f8eb87dfd1c3f625e73
jenkins git a08ad146 sha256:bd8b955ae1fa10135c9904d85c60b20a8f06deda9f103c88a55e1d28f4cb19cb
jenkins-agent-maven git a08ad146 sha256:972513f68fe51b1400c9b5466b610b68c8923afed5a77da5a4278fdb281a612a
jenkins-agent-nodejs git a08ad146 sha256:a7e95adf7ae0cee34bdd7725067207fc59a9ba53b03adb7bc5ee27ced78e0553
k8s-prometheus-adapter git 8f2182e7 sha256:7dd44fb776baea388596b114585060b24f9e4bb7c9e7ee704aa7c16b62ab5852
keepalived-ipfailover git 6cdb5d36 sha256:c5ec8d53faf22153f54fc003b094fa263b769b50a457c878824c800e344b1b2f
kube-client-agent git e61c574c sha256:8bd605794bfb81a3c1a2cea8a9254929ca797784e7b11a773a2963948622e3b1
kube-etcd-signer-server git e61c574c sha256:0233395a9690ce0019bdda0fe4a9d0a339949f37ab0dc4bee0fff7370d04e10c
kube-rbac-proxy git b4791e11 sha256:12cce448b8888f398604eeb6a3a7a14c2850cd9dfd463229bd0735aa68ada885
kube-state-metrics git b659f76c sha256:4a2b416e7088c13546def35164d2058e21134b8336b2b05b576329cfb94329a9
kube-storage-version-migrator git 5a52f4f5 sha256:294f21bc3baa4221f3c02ed3e2dadcf3e61490813691579be9f05d69b3639f3c
local-storage-static-provisioner git da340b47 sha256:b73b080e2d0dd4ef92dc141926a560e45da127ea8a742cb1814efba447ad9728
machine-os-content sha256:099c96f6039633b2c828531c4d15a93cda7e8c0740e72f03755e09c54ff1d18c
mdns-publisher git 24135de2 sha256:6b3e62612cd9192b7af779ff34a95b039cac3058b0c39129eb37a7deec08908e
multus-admission-controller git 9dc63698 sha256:c1fe9cff1be7e75c80d465bb24603690d265bb067c0cbd9901d1b54d579f034a
multus-route-override-cni git 1322dc43 sha256:6b56ea96a9f19d51b2822719cb5b7e4cd34a5253f97f34538b64f3a7111489d8
must-gather git 3cac0b53 sha256:d895aec6e5866ab0dcfd46ad5cda60ec26c38d12b287328ff13ffe9a23b16884
oauth-proxy git 3d0621eb sha256:c69cb2203988cae3506a58d8616ac928b7f2f796d147fbc6640f644398fb1949
oauth-server git 054e15e5 sha256:630aa5c0fa89227281a308f2e3f693fbf0c5a3ad604935bda3bf7a606d4a11e3
openshift-state-metrics git f13d31a1 sha256:dbc06ac527acaed79a4b189ba091fb4a37bfaa4b061f399011e07163fa4fcd26
openstack-machine-controllers git 2937f802 sha256:5c3c0222b7ead80734c12ef04d4973b99657e4a140c2fd90c301af4c1e32a646
operator-marketplace git 985aa35a sha256:12225dd830d1bb0821e1dd97f5e743400733abf259427103bb62ca4a3c44cc9b
pod git 6cdb5d36 sha256:570784e273b695e401ef77926ca6acc2af523f706e9eff1ddd2bba1568d610a5
prom-label-proxy git 00985729 sha256:8f5e521c35f624e1d40570f476c590490ee8624c55834c22f3dfa7e7ab4fd79f
prometheus git 2c426354 sha256:9e4d6bd70d5c481267ec2c420b7ee40d2addecb190e4787ac912996a29c90d00
prometheus-alertmanager git 6299b49b sha256:9166f5f53cbaddbf11d4895c96d73b16a9b9002cb3fadefd9f7e13e96ee16edc
prometheus-config-reloader git b1a7175c sha256:e08c2b9e5bf641a524636e7b699830d27464636e431dd992a4a49f56b27d4dd2
prometheus-node-exporter git a7d3a64d sha256:c14d0178b17e5184c17090bcc624da3e21f84497140865a2e41d6c3d54a0e42a
prometheus-operator git b1a7175c sha256:cb3a6669925dcf4dc803cdc23aaa20f8fc27ec4ff0d0c245d8a0a49db72f9419
service-ca-operator git e5a04d6a sha256:99b6e9c644cfbb11a96ffee5b9ca74accaffcd29a0670788d90847b520172f8f
service-catalog git 6f75f804 sha256:a3e9c18b43d47628932f429d76fc28b1b5e132003209af027b98475bfafd736f
telemeter git debbf860 sha256:04949ebfbcef22755c37a10b10c5fc3fac0dbd2d41ef0f3e71ec9bc32d18e764
thanos git 40b1b225 sha256:19f3539c87ed84a02ee5a15438928083aa9e82294ff9a8dcb86d6eeeeff68c0b

aws-machine-controllers

Bug 1833359: Custom dns name support #326
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1841930: images: libvirt: add yq to libvirt CI image #3687
BUG 1826069: Disable client side rate limiting in Azure. #3616
Bug 1837478: update vSphere UPI docs to remove machinesets #3624
Bug 1842378: [UPI] Rely on security group ID when deleting it #3694
Bug 1838885: installconfig: relax GCP cluster id restriction #3662
Bug 1836982: data/data/aws/vpc: create subnet sizes based on az count #3614
Bug 1821638: oVirt, add os_type to ovirt templates #3415
Bug 1826922: baremetal: update provisioning CR to quote strings #3504
Bug 1835795: downport disk extension support for masters/workers #3628
Bug 1836092: openstack: Add jq to the CI image #3607
Bug 1836821: Install upi support on openstack-installer image #3605
Bug 1823766: os: Mention the bootstrap FIP #3449
Bug 1822379: Fix LB deletion for lbs with same or status pending #3431
Bug 1836038: data/azure/vnet: switch to HTTPS probes for lbs #3606
Bug 1824180: Backport adding groundwork for multi-arch images #3457
Bug 1832137: Fix bootstrap certificate generation #3554
Bug 1828948: cmd/openshift-install/create.go: return lastErr when waiting API fails #3571
Bug 1820575: Cherry-pick oVirt PR 3406 vNIC profiles #3569
Bug 1823978: AWS Terraform: use machine_cidr instead of VPC main cidr #3453
Bug 1824991: Update vSphere and Metal UPI for terraform 0.12 #3497
Full changelog

baremetal-runtimecfg

Bug 1831008: Move haproxy listening port due to conflict #61
Bug 1823465: runtimecfg: tool to show the Virtual Router IDs #55
Full changelog

cli, cli-artifacts, deployer

Bug 1806780: release: Mirroring from custom directory via oc adm release mirror fails #446
Bug 1837675: Backport enhancements/oc/mirroring-release-signatures implementation #426
Bug 1835739: Fix oc drain to ignore daemonsets and others #420
Bug 1838614: Backport oc status project 4.5 changes #432
Full changelog

cloud-credential-operator

Bug 1838810: do not special-case handling read-only credentialsRequest #191
Bug 1807659: no need to run CCO as privileged pod #189
Full changelog

cluster-authentication-operator

Bug 1842442: explicitly set oauth-server container’s root file system to writable #286
Bug 1823622: [release-4.4] Fix ingress state condition flapping #278
Full changelog

cluster-autoscaler-operator

Bug 1806439: Drop run-level #137
Full changelog

cluster-etcd-operator

Bug 1837630: pkg/operator/etcdcertsigner: sign etcd certs for 3 years #358
Bug 1836270: Cluster restore should not stop network pods on bare-metal #357
Bug 1838781: pkg/etcdcli: refactor health checks #360
Bug 1823608: fix message reporting for etcdmemberscontroller #336
Bug 1825236: Fix podman auth #337
Bug 1831664: pkg/cmd/render: Backport adding support for s390 and s390x arch #348
Bug 1826383: add infra flag and configure raft for Azure #316
Full changelog

cluster-image-registry-operator

Bug 1832140: Assure storage bucket names in lowercase #540
Full changelog

cluster-kube-apiserver-operator

Bug 1829319: add relatedobjects for immediate creation by CVO #843
Full changelog

cluster-network-operator

Bug 1841507: Allow connection between authentication net namespaces #657
Bug 1834474: ovnkube: set NB/SB database inactivity probes to 60 seconds #636
Bug 1807648: Fixes to reliably save/restore flows #625
Full changelog

cluster-openshift-apiserver-operator

Bug 1840857: openshift-apiserver doesn’t live reload extension-apiserver-authentication trust #366
Full changelog

cluster-samples-operator

Bug 1835995: ensure s390/ppc64le platforms bootstrap as removed following upgrade #279
Bug 1842560: improve reason text on degraded condition #282
Bug 1824280: revert pr 177; no override jenkins* registry hosts for mirrors #261
Bug 1832344: correctly handle removed templates watch events as part of an upgrade #269
Bug 1835995: avoid listing file system content for unsupported architures #272
Bug 1829073: copy install pull secret when boostrapped as removed #266
Bug 1814395: abort metrics in general if removed/unmanaged #250
Full changelog

cluster-svcat-apiserver-operator

Bug 1831019: Upgradeable = False, link to OpenShift docs #89
Full changelog

cluster-svcat-controller-manager-operator

Bug 1831027: Upgradeable = False, link to OpenShift docs #77
Full changelog

cluster-version-operator

Bug 1843732: pkg/cvo/sync_worker: Do not treat “All errors were context errors…” as success #379
Bug 1835483: Add cert to service to support https #367
Full changelog

console

Bug 1838420: Fix payload for PVCPool BackingStore Creation #5673
Bug 1840954: Pipeline Builder supports invalid task refs #5612
Bug 1829063: Don’t blacklist SecurityContextConstraints on the search page #5221
Bug 1828253: Add workload badge/name to monitoring dashboard when navigating to it from the Side Panel monitoring tab #5195
Bug 1840445: Fix conditions table runtime error on operand details page #5631
Bug 1826503: Requested tweaks to OperatorHub by UX #5182
Bug 1827197: Add query parameter for selected container to pod logs #5167
Bug 1827746: Register Subscription list page from plugin #5162
Bug 1825975: Add deployment configs and stateful sets to project ove… #5122
Bug 1810364: Monitoring Dashboards: Fix JS warning for empty table cells #4679
Bug 1838815: Fix “SyntaxError: Unexpected identifier ‘e’” in Safari (production build only) #5528
Bug 1840647: do not display ‘Catalog source was removed’ for PackageServer #5598
Bug 1837550: Fixed legends on data consumption card #5492
Bug 1829591: Fix handling of Operand conditions #5238
Bug 1835325: Add default value to buffer prop to prevent runtime error #5432
Bug 1828717: removes techpreview badge from serverless #5210
Bug 1827457: Fixed the issue for fieldDependency spec descriptor for create operan… #5157
Bug 1826409: Fix create operand validation #5124
Bug 1828784: fix(prun): rerun cancelled run #5212
Bug 1813884: Fix Pipeline Builder parameters of type Array #4738
Bug 1838792: handle embedded pipeline spec in pipelinerun scenario #5526
Bug 1834717: Check runStrategy when checking for running vm #5409
Bug 1821625: Fix bug where networking metrics unavailable to regular users #5001
Bug 1831137: Fix create operand form advanced field bug #5125
Bug 1834331: Add column Storage Class for PVCs Table Column Overlaps #5367
Bug 1832933: Fix select descriptor #5338
Bug 1833344: Fix timeout issue in Helm installation #5362
Bug 1828849: do not support SLIRP NetworkInterface in NIC modal #5296
Bug 1823855: Use ordered-values.yaml in Helm install #5117
Bug 1820130: [release-4.4] Backport 4.4 correct ocs version #4978
[Release 4.4] Bug 1826512: Include an override to use PF4 link colors in the catalog vertical-tabs #5431
Full changelog

console-operator

Bug 1824935: [release-4.4] Fix console oauthEndpointCAFile setting #407
Bug 1836938: Bump godeps to get fix from library-go#799 #431
Full changelog

docker-registry

Bug 1825313: [release-4.4] Possible error loss in GCS driver #239
Full changelog

gcp-machine-controllers

Bug 1837122: Add the machine’s name as a known NodeInternalDNS #91
Full changelog

hyperkube, tests

BUG 1824092: Managed cluster should grow and decrease when scaling different machineSets simultaneously (backport) #24909
Bug 1822488: UPSTREAM: 89794: Clean up event messages for errors #25048
Bug 1820274: e2e: Disable router header test on OVN #24823
Bug 1814393: UPSTREAM: 88141: Don’t try to create VolumeSpec immediately after underlying PVC is being deleted #24710
Bug 1841185: more upstream to installed template switch in image-eco (django this time) #25040
Bug 1820731: samename test flake fix #24986
Bug 1838199: stop printing usage help when the server commands exit #25005
Bug 1806699: Limit-based eviction should report metrics #24603
Bug 1831045: Fix client-ca dynamic reload in apiserver #24943
Bug 1833824: unskip template extended tests #24965
Bug 1828790: provides a temporal fix to improve CRD publishing e2e tests in an HA setup #24924
Bug 1829958: [release-4.4] Introduce IBMCloud provider, skip/fix tests #24937
Full changelog

insights-operator

Bug 1825757: Collecting config maps #96
Full changelog

ironic

Bug 1830298: Use snponly.efi instead of ipxe.efi for IPv4 #77
Full changelog

kube-proxy, sdn

Bug 1839107: node/vnids: Correctly handle case where NetNamespace watch is far behind #143
Bug 1840215: Fix egressVXLANMonitor and egressIPTracker deadlock #145
Full changelog

kuryr-cni, kuryr-controller

Bug 1841493: Remove lb sg creation when octavia provider is ovn-octavia #250
Full changelog

libvirt-machine-controllers

Bug 1829037: Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le #191
Full changelog

machine-api-operator

Bug 1829938: Fix External DHCP range values for Baremetal configuration #579
Bug 1833359: Add ec2:DescribeDhcpOptions permission request #583
BUG 1806439: Remove explicit securityContext and add granular securitycontextconstraints “use” permissions in machine-api-controllers clusterRole #511
BUG 1812815: Add GCP roles/compute.loadBalancerAdmin role #515
Full changelog

machine-config-operator

Bug 1834194: vsphere: 4.1 to 4.4 upgrade bug #1769
Bug 1827539: pkg/server: disable weak TLS versions #1680
Bug 1834194: vsphere: check if .Infra.Status and .Infra.Status.PlatformStatus is nil #1735
Bug 1837122: templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml #1737
Full changelog

multus-cni

Bug 1835033: Logging improvement (UID, net-attach-def) / Backport to 4.4 #67
Bug 1827375: Allows allow pods in any namespace refer to net-attach-defs in default namespace #61
Full changelog

multus-whereabouts-ipam-cni

Bug 1813031: Updates CRD name to whereabouts.cni.cncf.io [backport 4.4] #8
Full changelog

openshift-apiserver

Bug 1840857: openshift-apiserver doesn’t live reload extension-apiserver-authentication trust #103
Bug 1832762: updates Dockerfile.rhel to golang 1.13 and ocp:4.4 #104
Bug 1829327: allow patch for updating namespace #100
Full changelog

openshift-controller-manager

Bug 1835913: ensure build pod activeDeadlineSeconds always set #108
Bug 1832839: Use named queues for all controllers #104
Full changelog

operator-lifecycle-manager

Bug 1840887: fix(resolver): don’t pick operator from same package when resolve requiredAPI #1551
Bug 1836905: fix(queues): use a single gc queue #1528
Full changelog

operator-registry

Bug 1816184: fix(dns): fix slow dns resolution of localhost for grpc health probe #269 #276
Full changelog

ovirt-machine-controllers

Bug 1835576: Downport instance customizaton based machine-pool #48
Full changelog

ovn-kubernetes

Bug 1835985: [4.4] hybrid external gw #167
[release 4.4] bug 1829442: Remove errors based on passing nil elements to MarshalPodAnnotations() #157
Bug 1830416: build: require OVN >= 2.13.0-30 for rhbz#1819785, rhbz#1827403, rhbz#1828637, rhbz#1823755 #153
Bug 1828752: regression: logical_router_port mac address is case sensitive #163
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github