4.4.9

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:15280aba8f1c82fe39180a617e3b4886401f6c2aef63c7962203aa10530d1db8

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.3.26

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.4.4

Created: 2020-06-18 04:56:51 +0000 UTC

Image Digest: sha256:15280aba8f1c82fe39180a617e3b4886401f6c2aef63c7962203aa10530d1db8

Release 4.4.9 was created from registry.svc.ci.openshift.org/ocp/release:4.4.0-0.nightly-2020-06-17-090638

Components

Kubernetes 1.17.1

Rebuilt images without code change

baremetal-machine-controllers git 4d1663e7 sha256:fcc90a7f7d8e5c5e79281e6ccfeae961fc536051e437386c60b17f5c58c9467e
baremetal-operator git e4aebc7a sha256:d6ae45d0899b538760831a43ce5902ff295408fbb18188909c95c6c7ee4b674d
cluster-autoscaler git 6768c3c3 sha256:74bbe22d5aba6d5cb65ed304484da8183896898ee184fd00012bbe65965c89aa
cluster-bootstrap git 04c97c30 sha256:c02d13a9f3f0335645ff8c70b9727a2a9729d0e000dd9686f25b05672634fe3b
cluster-csi-snapshot-controller-operator git 4492120d sha256:e79591f595577af3f7ac33e37fee8ae2c332b9172486611391a3f61f37a9c2a4
cluster-dns-operator git de1a3573 sha256:f933c25f12c606e100c14baea7c475a5676237b1a12c576440178efeb2bdd44a
cluster-ingress-operator git 39760557 sha256:abfe882f726409acbcab8125373003c46b38bf099f2c57652fc9129196daf3af
cluster-kube-storage-version-migrator-operator git bb6fb49e sha256:ae5e638e747924b16fdfa324f8f55469ccc8899a0f2869793c6752c15deeda62
cluster-machine-approver git 1bb09ce6 sha256:a05466267c62ee1c17f04875aeef9ba8975520e9fdf7a13a743cfd9a9c8bf1b0
cluster-monitoring-operator git 784585a6 sha256:ecb399b00afb5f668971c23fb5fa83bbc04701c23cbed166dc5a7d5c2572910a
cluster-node-tuned git 927879ff sha256:e80996157dbbd84cee651f0e82efb89f68f7add1aef0257428a7fd17312a5877
cluster-node-tuning-operator git 2473a80c sha256:527205719b276211bc8fcc8711c3125bb259df88871572b76525f8597a584b44
cluster-openshift-controller-manager-operator git 7408e19d sha256:08f45b22946c990ae47798cb622606ba75fdf163f2f41d74e0e0af732a3d044e
cluster-storage-operator git a9548e6d sha256:cfd25ee11c37fc23f524b7d116e65cc61f32f871448b3017c7bf9eb3124ff187
cluster-update-keys git cca4ce69 sha256:30b8e67a1a918b886689349f349a7ce4d3a08b5f4d47d3f99e2248c416463751
configmap-reloader git 841b0bfe sha256:08e56220c74acf4217acae51c3514dc50542b5fda47dc72d06c662de69c315c8
container-networking-plugins git cdba584f sha256:be946dcbb81164ec9cc9142043779d4153ce9701aeb64b85cc6d8393312e7391
coredns git e4c99779 sha256:efd4cafefeb5fc25f41a5074957a0982f7173eeaa7d0516cf33b813f0e266314
csi-snapshot-controller git f758cee9 sha256:9fd00e08f19a9ab31c859e00fbb454c560ba2041a97bb3e9549fd0ecc80ea2ea
docker-builder git bea4ef19 sha256:0c9afa4b0e8ed0a929d78f54e116aadebd6d7ceaf85dc551ddbbc48f85020b2d
etcd git 9003f534 sha256:73e104db016ecbed1dbc5f2328e776e55ba2f6fc547c0424226ab13a9eb73f48
grafana git fb91937f sha256:806428700332dc42fcf5afa962b42d89934fdd7f7bda17cf8fe3a5730a49d50d
haproxy-router git 9cbaab11 sha256:138768251525e8e129469ab7e31fc7af56cf3b522ae87bb526340a532a87a044
ironic-hardware-inventory-recorder git 2424a571 sha256:a4b13e22121607bd70d73877fdb11f22e55329031b47d560bcb9fe63a0b5080b
ironic-ipa-downloader git dfd93208 sha256:04b6cecfe1cd519f692f3783d8afd386557dfdec7e7a0ffe267a6dc3cc960df8
ironic-machine-os-downloader git 51e14472 sha256:c94ef5de92d0846c45eda1fe0758e7123093747936c936945463cdaeab6e1696
ironic-static-ip-manager git e33314bd sha256:1344fbefc292c8bc6966be8e2e4fa77f50e5f0be80b152c62877cd72c03c8228
k8s-prometheus-adapter git 8f2182e7 sha256:e27c7ce4c5652ed7b7ba09b279ae93450f79ef0ce70d93e5ba18241be1494a4e
keepalived-ipfailover git 6cdb5d36 sha256:9e5488cf19058966afdfa8f0bcb94cd75eef06077bbe6b7478d1a6341b10ebb0
kube-client-agent git e61c574c sha256:14fffc97f35fbe2aa4167a534b3717b0e003d3bab92dc8f047ee4b1f747f4e21
kube-etcd-signer-server git e61c574c sha256:0790d3eb5f629be54fa0368e65707461a1068b4ec71b990d0186491ec104b2ce
kube-rbac-proxy git b4791e11 sha256:aa0abeddb305059e95404ecfa2fa7a4ce63d9ff13136b4ff772387b4eade03da
kube-state-metrics git b659f76c sha256:1ef0e70efd3235e1a4d3600f184e92f29441472ae0d8bcb5f65abdac0d5f4738
kube-storage-version-migrator git 5a52f4f5 sha256:07927d3ede52a86e7183ee2bd164a2cf69b907dcc0e40632439b6e359b93587c
local-storage-static-provisioner git da340b47 sha256:8a6b3285e546a825a723f69d5650aac4429d0af0d0a1b3a3be5548bf7de34191
machine-os-content sha256:0dcbd38df25ba42c4f62aba0520509e0fcab5c3ca2679df2f26d1e7de78f1f67
mdns-publisher git 24135de2 sha256:c1e44468ab3ed99660751640aac49fafd345573ce706d72645cb7cfe28aa6b8b
multus-admission-controller git 9dc63698 sha256:5c98818e9c6e4940eea9647eb330148d7fd16d9eac992fb2cc7d546a08ee1854
multus-route-override-cni git 1322dc43 sha256:444485ebbcc9ded4ffd411587dd3725c197570862954592838b1903afb846ce9
must-gather git 3cac0b53 sha256:efdca86dc4db776ad406e5e8271583dc95dbe9cf2b602f022bb806645191205f
oauth-proxy git 3d0621eb sha256:681f12ee366c23d428f7be187a10822adc0d24c206e1a5420b739d98355b5eec
oauth-server git 054e15e5 sha256:f619094187f83d335bfc7e9bb12169821aee67618ae92c1dc09fa59c6c3044e6
openshift-state-metrics git f13d31a1 sha256:27b3b68fb6d04c08e2e4ba14a8adc177d90b2b71a8b8f121b453344faef27d2f
openstack-machine-controllers git 2937f802 sha256:2b6966b18e294ba0eeed45c4bb7fcc87aef678bf3830594a6b74f78705a0a9c1
operator-marketplace git 985aa35a sha256:6859b7760aacb7a8b85e07da8d987561a2fe6637c6ad03cd97bb54232ef3d98a
pod git 6cdb5d36 sha256:e05cd5ae31a4aea80249ef3661fe974520b609cd67b64b03de31677807cb910f
prom-label-proxy git 00985729 sha256:30de92dee333d8f64e0e352bb41598b77a79dabd8f4e9561196444d0a9bb4c88
prometheus git 2c426354 sha256:5a636b833c3faf95d09eaf84d67515176f1744ce110f514813ac76ee14c4f732
prometheus-alertmanager git 6299b49b sha256:86a264b4e3178c423921f7a6053f81d29b416ab7ef56e7070a3921a43b126b6b
prometheus-node-exporter git a7d3a64d sha256:24edde4153cce771ce6066219f132e5a6481435700f0f7cd65d3dbcd2a173aac
service-ca-operator git e5a04d6a sha256:deb7d3526c2cc7ed7ff64bcc63c11929d074fb36985e47b73ed96661239137d0
service-catalog git 6f75f804 sha256:5701bd109beacd348a8f06f6875e088ebf71a345a293875e59ddd99df716b356
telemeter git debbf860 sha256:d05cb5979faa817a9807a02e2134d6efefaa2c4747cd0cc43aa3e4adf9f28725
thanos git 40b1b225 sha256:b17e987e1ded557c58bf7d21fa86ae2efe1cea507e9af20293485d357e5db87a

aws-machine-controllers

Bug 1833359: Custom dns name support #326
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1841930: images: libvirt: add yq to libvirt CI image #3687
BUG 1826069: Disable client side rate limiting in Azure. #3616
Bug 1837478: update vSphere UPI docs to remove machinesets #3624
Bug 1842378: [UPI] Rely on security group ID when deleting it #3694
Bug 1838885: installconfig: relax GCP cluster id restriction #3662
Bug 1836982: data/data/aws/vpc: create subnet sizes based on az count #3614
Bug 1821638: oVirt, add os_type to ovirt templates #3415
Bug 1826922: baremetal: update provisioning CR to quote strings #3504
Bug 1835795: downport disk extension support for masters/workers #3628
Bug 1836092: openstack: Add jq to the CI image #3607
Bug 1836821: Install upi support on openstack-installer image #3605
Bug 1823766: os: Mention the bootstrap FIP #3449
Bug 1822379: Fix LB deletion for lbs with same or status pending #3431
Bug 1836038: data/azure/vnet: switch to HTTPS probes for lbs #3606
Bug 1824180: Backport adding groundwork for multi-arch images #3457
Bug 1832137: Fix bootstrap certificate generation #3554
Bug 1828948: cmd/openshift-install/create.go: return lastErr when waiting API fails #3571
Bug 1820575: Cherry-pick oVirt PR 3406 vNIC profiles #3569
Bug 1823978: AWS Terraform: use machine_cidr instead of VPC main cidr #3453
Bug 1824991: Update vSphere and Metal UPI for terraform 0.12 #3497
Full changelog

baremetal-runtimecfg

Bug 1831008: Move haproxy listening port due to conflict #61
Bug 1823465: runtimecfg: tool to show the Virtual Router IDs #55
Full changelog

cli, cli-artifacts, deployer

Bug 1806780: release: Mirroring from custom directory via oc adm release mirror fails #446
Bug 1837675: Backport enhancements/oc/mirroring-release-signatures implementation #426
Bug 1835739: Fix oc drain to ignore daemonsets and others #420
Bug 1838614: Backport oc status project 4.5 changes #432
Full changelog

cloud-credential-operator

Bug 1838810: do not special-case handling read-only credentialsRequest #191
Bug 1807659: no need to run CCO as privileged pod #189
Full changelog

cluster-authentication-operator

Bug 1842442: explicitly set oauth-server container’s root file system to writable #286
Bug 1823622: [release-4.4] Fix ingress state condition flapping #278
Full changelog

cluster-autoscaler-operator

Bug 1806439: Drop run-level #137
Full changelog

cluster-config-operator

Bug 1847457: Fix Dockerfiles #138
Full changelog

cluster-etcd-operator

Bug 1840150: operator: add fsync controller #369
Bug 1841162: Fix openshift_etcd_operator_build_info metric #365
Bug 1837630: pkg/operator/etcdcertsigner: sign etcd certs for 3 years #358
Bug 1836270: Cluster restore should not stop network pods on bare-metal #357
Bug 1838781: pkg/etcdcli: refactor health checks #360
Bug 1823608: fix message reporting for etcdmemberscontroller #336
Bug 1825236: Fix podman auth #337
Bug 1831664: pkg/cmd/render: Backport adding support for s390 and s390x arch #348
Bug 1826383: add infra flag and configure raft for Azure #316
Full changelog

cluster-image-registry-operator

Bug 1832140: Assure storage bucket names in lowercase #540
Full changelog

cluster-kube-apiserver-operator

Bug 1829319: add relatedobjects for immediate creation by CVO #843
Full changelog

cluster-kube-controller-manager-operator

Bug 1833128: Updates Resource Graph to use default-ingress-cert CM #409
Bug 1829319: add relatedobjects for immediate creation by CVO #407
Full changelog

cluster-kube-scheduler-operator

Bug 1833122: Have targetconfig controller use cm/default-ingress-cert #247
Full changelog

cluster-network-operator

Bug 1832872: Remove dead member from LB pool. #629
Bug 1841029: Recreate DNS service upon Octavia upgrade #653
Bug 1844136: Setting resource request for kube-proxy deployment #659
Bug 1841507: Allow connection between authentication net namespaces #657
Bug 1834474: ovnkube: set NB/SB database inactivity probes to 60 seconds #636
Bug 1807648: Fixes to reliably save/restore flows #625
Full changelog

cluster-openshift-apiserver-operator

Bug 1840857: openshift-apiserver doesn’t live reload extension-apiserver-authentication trust #366
Full changelog

cluster-policy-controller

Bug 1829327: use patch when updating namespace #25
Full changelog

cluster-samples-operator

Bug 1835995: ensure s390/ppc64le platforms bootstrap as removed following upgrade #279
Bug 1842560: improve reason text on degraded condition #282
Bug 1824280: revert pr 177; no override jenkins* registry hosts for mirrors #261
Bug 1832344: correctly handle removed templates watch events as part of an upgrade #269
Bug 1835995: avoid listing file system content for unsupported architures #272
Bug 1829073: copy install pull secret when boostrapped as removed #266
Bug 1814395: abort metrics in general if removed/unmanaged #250
Full changelog

cluster-svcat-apiserver-operator

Bug 1831019: Upgradeable = False, link to OpenShift docs #89
Full changelog

cluster-svcat-controller-manager-operator

Bug 1831027: Upgradeable = False, link to OpenShift docs #77
Full changelog

cluster-version-operator

Bug 1843732: pkg/cvo/sync_worker: Do not treat “All errors were context errors…” as success #379
Bug 1835483: Add cert to service to support https #367
Full changelog

console

Bug 1836343: match available queries on dashboards and metrics tabs #5461
Bug 1831821: Don’t set net-attach-def type at root #5427
Bug 1817394: Windows CDs use VirtIO instead of sata #5496
Bug 1839115: adds support for addition/updation of env variables and imagePullPolicy #5541
Bug 1841149: Creating role and roleBinding when enabling monitoring for an operator #5617
Bug 1831808: fix bug where operand list status does not show latest … #5616
Bug 1840812: Handle resource names with special characters #5605
Bug 1836807: updates apiGroup for Knative Eventing to latest supported #5477
Bug 1832976: Fix channel issue by narrowing down requests and loading guard #5339
Bug 1824255: Update “view more” apis link #5320
Bug 1838420: Fix payload for PVCPool BackingStore Creation #5673
Bug 1840954: Pipeline Builder supports invalid task refs #5612
Bug 1829063: Don’t blacklist SecurityContextConstraints on the search page #5221
Bug 1828253: Add workload badge/name to monitoring dashboard when navigating to it from the Side Panel monitoring tab #5195
Bug 1840445: Fix conditions table runtime error on operand details page #5631
Bug 1826503: Requested tweaks to OperatorHub by UX #5182
Bug 1827197: Add query parameter for selected container to pod logs #5167
Bug 1827746: Register Subscription list page from plugin #5162
Bug 1825975: Add deployment configs and stateful sets to project ove… #5122
Bug 1810364: Monitoring Dashboards: Fix JS warning for empty table cells #4679
Bug 1838815: Fix “SyntaxError: Unexpected identifier ‘e’” in Safari (production build only) #5528
Bug 1840647: do not display ‘Catalog source was removed’ for PackageServer #5598
Bug 1837550: Fixed legends on data consumption card #5492
Bug 1829591: Fix handling of Operand conditions #5238
Bug 1835325: Add default value to buffer prop to prevent runtime error #5432
Bug 1828717: removes techpreview badge from serverless #5210
Bug 1827457: Fixed the issue for fieldDependency spec descriptor for create operan… #5157
Bug 1826409: Fix create operand validation #5124
Bug 1828784: fix(prun): rerun cancelled run #5212
Bug 1813884: Fix Pipeline Builder parameters of type Array #4738
Bug 1838792: handle embedded pipeline spec in pipelinerun scenario #5526
Bug 1834717: Check runStrategy when checking for running vm #5409
Bug 1821625: Fix bug where networking metrics unavailable to regular users #5001
Bug 1831137: Fix create operand form advanced field bug #5125
Bug 1834331: Add column Storage Class for PVCs Table Column Overlaps #5367
Bug 1832933: Fix select descriptor #5338
Bug 1833344: Fix timeout issue in Helm installation #5362
Bug 1828849: do not support SLIRP NetworkInterface in NIC modal #5296
Bug 1823855: Use ordered-values.yaml in Helm install #5117
Bug 1820130: [release-4.4] Backport 4.4 correct ocs version #4978
[Release 4.4] Bug 1826512: Include an override to use PF4 link colors in the catalog vertical-tabs #5431
Full changelog

console-operator

Bug 1824935: [release-4.4] Fix console oauthEndpointCAFile setting #407
Bug 1836938: Bump godeps to get fix from library-go#799 #431
Full changelog

docker-registry

Bug 1825313: [release-4.4] Possible error loss in GCS driver #239
Full changelog

gcp-machine-controllers

Bug 1837122: Add the machine’s name as a known NodeInternalDNS #91
Full changelog

hyperkube, tests

Bug 1844102: oVirt, add oVirt as a provide to openshift tests #25066
BUG 1824092: Managed cluster should grow and decrease when scaling different machineSets simultaneously (backport) #24909
Bug 1822488: UPSTREAM: 89794: Clean up event messages for errors #25048
Bug 1820274: e2e: Disable router header test on OVN #24823
Bug 1814393: UPSTREAM: 88141: Don’t try to create VolumeSpec immediately after underlying PVC is being deleted #24710
Bug 1841185: more upstream to installed template switch in image-eco (django this time) #25040
Bug 1820731: samename test flake fix #24986
Bug 1838199: stop printing usage help when the server commands exit #25005
Bug 1806699: Limit-based eviction should report metrics #24603
Bug 1831045: Fix client-ca dynamic reload in apiserver #24943
Bug 1833824: unskip template extended tests #24965
Bug 1828790: provides a temporal fix to improve CRD publishing e2e tests in an HA setup #24924
Bug 1829958: [release-4.4] Introduce IBMCloud provider, skip/fix tests #24937
Full changelog

insights-operator

Bug 1825757: Collecting config maps #96
Full changelog

ironic

Bug 1838083: Allows users to configure any non-link-local IPV6 address for the provisioning interface #79
Bug 1830298: Use snponly.efi instead of ipxe.efi for IPv4 #77
Full changelog

ironic-inspector

Bug 1833508: Allow any IPv6 address to be configured for provisioning instead of link local scope #35
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1826174: handle ingress certificate signed by custom ca #1050
Bug 1828939: set default java version to jdk 11 #1053
Bug 1836914: Fix kind in ServiceMonitor for persistent template #1057
Bug 1843945: bump jenkins to 2.222.1 and update plugins #1068
Full changelog

kube-proxy, sdn

Bug 1839107: node/vnids: Correctly handle case where NetNamespace watch is far behind #143
Bug 1840215: Fix egressVXLANMonitor and egressIPTracker deadlock #145
Full changelog

kuryr-cni, kuryr-controller

Bug 1844093: Ensure security_groups on LBaaSLoadBalancer defaults to empty list #265
Bug 1844091: Ensure provider information is used when finding lbs #264
Bug 1840611: Ensure LB resources with ERROR status are deleted #248
Bug 1839023: Skip LB sg update when no endpoint is found #242
Bug 1841493: Remove lb sg creation when octavia provider is ovn-octavia #250
Full changelog

libvirt-machine-controllers

Bug 1829037: Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le #191
Full changelog

machine-api-operator

Bug 1829938: Fix External DHCP range values for Baremetal configuration #579
Bug 1833359: Add ec2:DescribeDhcpOptions permission request #583
BUG 1806439: Remove explicit securityContext and add granular securitycontextconstraints “use” permissions in machine-api-controllers clusterRole #511
BUG 1812815: Add GCP roles/compute.loadBalancerAdmin role #515
Full changelog

machine-config-operator

Bug 1843928: gcp-routes: move to MCO, implement downfile, tweak timing #1780
Bug 1834194: vsphere: 4.1 to 4.4 upgrade bug #1769
Bug 1827539: pkg/server: disable weak TLS versions #1680
Bug 1834194: vsphere: check if .Infra.Status and .Infra.Status.PlatformStatus is nil #1735
Bug 1837122: templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml #1737
Full changelog

multus-cni

Bug 1835033: Logging improvement (UID, net-attach-def) / Backport to 4.4 #67
Bug 1827375: Allows allow pods in any namespace refer to net-attach-defs in default namespace #61
Full changelog

multus-whereabouts-ipam-cni

Bug 1813031: Updates CRD name to whereabouts.cni.cncf.io [backport 4.4] #8
Full changelog

openshift-apiserver

Bug 1840857: openshift-apiserver doesn’t live reload extension-apiserver-authentication trust #103
Bug 1832762: updates Dockerfile.rhel to golang 1.13 and ocp:4.4 #104
Bug 1829327: allow patch for updating namespace #100
Full changelog

openshift-controller-manager

Bug 1835913: ensure build pod activeDeadlineSeconds always set #108
Bug 1832839: Use named queues for all controllers #104
Full changelog

operator-lifecycle-manager

Bug 1841171: Update PkgManifest upon catsrc update #1556
Bug 1840887: fix(resolver): don’t pick operator from same package when resolve requiredAPI #1551
Bug 1836905: fix(queues): use a single gc queue #1528
Full changelog

operator-registry

Bug 1816184: fix(dns): fix slow dns resolution of localhost for grpc health probe #269 #276
Full changelog

ovirt-machine-controllers

Bug 1835576: Downport instance customizaton based machine-pool #48
Full changelog

ovn-kubernetes

Bug 1838259: scale: Enable parallel pod creation #173
Bug 1835985: [4.4] hybrid external gw #167
[release 4.4] bug 1829442: Remove errors based on passing nil elements to MarshalPodAnnotations() #157
Bug 1830416: build: require OVN >= 2.13.0-30 for rhbz#1819785, rhbz#1827403, rhbz#1828637, rhbz#1823755 #153
Bug 1828752: regression: logical_router_port mac address is case sensitive #163
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1833427: retain pvc metadata #70
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github