4.5.24

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:f3ce0aeebb116bbc7d8982cc347ffc68151c92598dfb0cc45aaf3ce03bb09d11

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.5.1

Created: 2020-12-16 12:14:29 +0000 UTC

Image Digest: sha256:f3ce0aeebb116bbc7d8982cc347ffc68151c92598dfb0cc45aaf3ce03bb09d11

Release 4.5.24 was created from registry.svc.ci.openshift.org/ocp/release:4.5.0-0.nightly-2020-12-15-015107

Components

Kubernetes 1.18.3
Red Hat Enterprise Linux CoreOS upgraded from 45.82.202007062333-0 to 45.82.202012110429-0 (diff)

Rebuilt images without code change

aws-pod-identity-webhook git 2251f7e2 sha256:ab2ba33befc2ddde85c200ef4732f4dc49b63e01707faf0e207963bd99f5d24d
cluster-bootstrap git 04c97c30 sha256:49d8788fc430e04ec62b885d501385e2e5d8959b67fe08b6fd9e144984a336bd
cluster-node-tuned git 27b3ad70 sha256:82da3edca79c2bf2baec29410a7a7b2ee51530d12004625c2aa179de52756823
configmap-reloader git 8b987c8e sha256:fa98ea3192ce7f070cc6aaff197e899ab0793711271121e78dc26ab33d19ef65
container-networking-plugins git d097ce25 sha256:2f15084f285e2e94c6e26e96c5cf4ebc3034c7778911889d54d0ff87cf34e95d
csi-snapshot-controller git f23c075c sha256:17f49496d454d1f3cb83dd9dbec515f7db5c6ee9da6ae7eae83b872b708609c9
docker-registry git 861af923 sha256:40020784f3d839077d699487bf48b082e020d9e67b23b4ff4d9d270f18f97727
grafana git f6535967 sha256:5b5db499a848f91d1f619f48e95a07cc2be8a1693fbc46d88adc148fc173ab4e
ironic-hardware-inventory-recorder git 09f6db6b sha256:7f573493b628b3c22b92ad61eba83db77861be29c195fc3ee953dc585efb6f65
ironic-inspector git 9914db24 sha256:ccd2c0ef4907d9de4afc99bd004f71bfe48c6b86be3ef1397e4ad4276df070db
ironic-ipa-downloader git 999c80f1 sha256:78fa3c79b337431a48573ca56c78696d76dbf23a4c24151498507a3cac1e9406
ironic-machine-os-downloader git 561c7d4c sha256:9d6876f9bce2439fdca99815cfdd9b9f8c36ae0f73870764307faafc00083e72
ironic-static-ip-manager git 058e8fd2 sha256:4dfc9eb7cb78c057affcdf1785941ed11a9bb5c9c82257fe6c43bcc05a3356f6
kube-rbac-proxy git 76fc3658 sha256:086664ac901c076f04912f90f8999a7d4b425b3c7b2100d90d6a53331d3c8d82
local-storage-static-provisioner git 424ccbd2 sha256:d9905a374921463fb5cf800eaa291757bbd7c1dc94555cd661cc7453fa33a5f4
machine-os-content sha256:eeac58af650cc0468f6ced466b0304618d8b12010b033853791216699448a23f
mdns-publisher git 0e41fab1 sha256:378a334c05d39517cc1aafadb6bdf73628224ee0c3a41d1d440609375118cf97
multus-admission-controller git 0bd3ff5e sha256:a2f66db4b0f7f8d82af8edf2b5497247c9655f79391409424f39db7895f11edc
multus-cni git 69a29635 sha256:c41937bee460632b3dc499f52c0aaca53e66b4ae730436bfe0248549b057523c
multus-route-override-cni git 7f6f53e3 sha256:35c3116f55c0a7822e64a1ffd7a534fcdfc6921c63634f7324742814136f5aed
oauth-proxy git afb73cdd sha256:c58256d0ce85226ed8f78f12bbd3651834e224d8d21dec934de1f6c01e6407f1
prom-label-proxy git cfcfdbd1 sha256:c48b3a42ee7bf665b6ada8b84b9c02950e1dbfaffb0e98a36a1b196ca40d54f1
prometheus-alertmanager git 26fa6b42 sha256:75b7ea03f7066900ec11937e1032a96416fd1fe8c5ccd7ee177effc69d03b250
telemeter git ca9c4f2c sha256:28f1136f02374df548abdca2db9c9cda9266de666424660a4c317ca5a1cd7377
thanos git 0d2ebce5 sha256:a2853836179abea46cce7e334f0ead84cd7597b372c09251d0b00c73f5bf62dc

aws-machine-controllers

Bug 1864352: Add leader election mechanism to release 4.5 #342
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1891168: data/data/gcp: be pedantic about setting the region #4301
Bug 1876581: upi/aws Define load balancer health checks #4358
Bug 1877374: Remove unused bootstrap etcd cert generation mechanism #4150
Bug 1889775: [release-4.5] vSphere: Update dockerfile removing certificate #4283
install-approvers: add staebler #4299
Bug 1874009: Ensure proper tagging of compute nodes ports #4120
Bug 1880134: destroy/gcp: correct extract service account email from IAM policy binding member #4195
Bug 1878369: openstack: Upgrade the CI build image #4164
Bug 1872629: OpenStack: dynamically set end of DHCP allocation pool #4094
Bug 1874582: use https for lb probes in Azure UPI #4123
Bug 1873537: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4111
Bug 1859874: Add basic engine URL validation #3948
Bug 1852720: deleting vsphere cluster tag after deleting the attached resources #3981
Bug 1868350: Backport new feature to bypass problems with AWS Accounts using SCP #4046
Bug 1862112: bump RHCOS images for CVE-2020-10713 #3984
Bug 1855844: Add validations for IP inputs #3875
Bug 1852722: Bump go-ovirt #3826
Bug 1866539: Add ResourcePoolPath to machines in vsphere #4014
Bug 1853614: Release 4.5 update terraform provider aws 2.67.0 #3846
Bug 1856820: update boot images for RHCOS Secure Boot issue #3889
Bug 1855079: adjust Azure UPI disk size to the same used in IPI #3867
Full changelog

baremetal-machine-controllers

Bug 1864352: Update leader election for release 4.5 #106
Bug 1862875: remove machine finalizer from host when deleting machine #94
Bug 1863010: ensure delete removes the link between machine and host #93
Full changelog

baremetal-operator

Bug 1874599: Always delete found host from Ironic on deletion #97
Bug 1851531: Do not write status annotation #84
Full changelog

baremetal-runtimecfg

Bug 1888301: Add check for iptables rule to keepalived-monitor #105
BUG 1858498: Move haproxy port to 9445 due to conflict with KCM #73
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1884580: Set appropriate owner references when creating a job from cronjob #602
Bug 1860789: Rebase k8s to 1.18.8 to enable approving CSRs on a 4.6 server #551
Bug 1876238: fix typo in oc adm upgrade help #557
Bug 1875551: must-gather: move gather init container under containers #554
Bug 1872519: Allow prune to move on with Removed registry #532
Bug 1870667: oc logout should make the token invalid #525
Bug 1853852: fix filter-by-os parsing for oc adm catalog mirror #483
Bug 1850452: allow switching project even to users outside self-provisioner role (revert) #477
Full changelog

cloud-credential-operator

Bug 1898199: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #269
Bug 1883412: Update upgradeable condition on admin cred changes. #253
Bug 1871713: Mark Manual Clusters Upgradeable=False If 4.6 Cred Request Secrets Are Not Provisioned #244
Bug 1873345: specify a serviceaccount in the deployment #240
Bug 1868350: Backport Permissions Check Bypass for AWS SCP Use Cases #232
Full changelog

cluster-authentication-operator

Bug 1879417: don’t error out on non-json output of password grant attempt #349
Bug 1877960: [release-4.5] router-secrets: set named certificates to empty array instead of nil when none found #342
Bug 1860922: adds OAuthAPIServer pruner controller #317
Full changelog

cluster-autoscaler

Bug 1820654: Fallback to Status Replicas if Replicas nil when listing NodeGroups #161
BUG 1846967: Allow small tolerance on memory capacity when comparing nodegroups #157
Full changelog

cluster-autoscaler-operator

Bug 1879162: ensure full boolean arguments #164
Bug 1880320: Bump K8s dependencies to v0.18.9 #169
Full changelog

cluster-config-operator

Bug 1878007: Add Controller to Normalize the Operator Log Level Values #150
Bug 1880304: Fix bug in reflector not recovering from “Too large resource version” #155
Bug 1879492: Add secure access token annotation controller to handle downgrade from 4.6 #153
Full changelog

cluster-csi-snapshot-controller-operator

Bug 1881359: Run the controller on master nodes #52
Bug 1880309: Bump k8s.io/client-go to v0.18.6 to fix bug in reflector not recovering from “Too large resource version” #53
Full changelog

cluster-dns-operator

[Release 4.5] Bug 1880311: Fix bug in reflector not recovering from “Too large resource version” #198
Full changelog

cluster-etcd-operator

Bug 1897543: DR: Make restore pod yaml specific to restoring node #497
Bug 1894267: Remove the rollbackcopier #494
Bug 1899563: remove etcdMemberIPMigrator controller #389
Bug 1883268: remove erroneously specified label drop rules #452
Bug 1877374: Render bootstrap certificates #438
OWNERS: change component to Etcd #471
Bug 1877930: Use restore pod yaml from the backup when restoring #442
Bug 1880313: vendor: bump k8s to 1.18.6 to fix bug in reflector not recovering from “Too large resource version” #447
Bug 1859684: Exclude bootstrap in the env variable ETCDCTL_ENDPOINTS #402
Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #434
Update OWNERS #404
Bug 1859678: Forget bootstrap etcd member IP after bootstrap #401
Bug 1854402: Improve bootstrap reliability on heterogeneous UPI network configurations #385
Full changelog

cluster-image-registry-operator

Bug 1895856: httpSecret should be generated when it is not set #636
Bug 1894621: Avoiding bootstrap failure on unavailable swift #635
Bug 1886603: Remove unsafe type casting #623
Bug 1886849: panic during creation of Azure storage container #624
Bug 1880314: Fix bug in reflector not recovering from “Too large resource version” #616
Bug 1843244: Add documentation for Logging field #614
Bug 1880485: Retrying in case of conflict during Config update #613
Bug 1879176: Alerting on failed image prune job #612
Bug 1858927: Fix TestPodAffinityConfiguration flake #581
Bug 1873496: Using last finished job status and disabling retries #599
Full changelog

cluster-ingress-operator

[Release 4.5] Bug 1880315: Fix bug in reflector not recovering from “Too large resource version” #461
Bug 1878148: Backport: Delete Router Deployment Only Upon DNSRecord Deletion #456
Bug 1874244: publishRecordToZones: Fix status merge #449
Bug 1868257: dns: Reread cloud credentials secret if it changes #443
Bug 1871175: Add basic HAProxy alert rules for HAProxy status and Reload failures #440
Full changelog

cluster-kube-apiserver-operator

BUG 1885353: protect openshift traffic by using dedicated flowschema #968
Bug 1880322: fix bug in reflector not recovering from “Too large resource version” #954
Bug 1874597: static-pod-installer: remove deadlock by recreating inst… #942
Bug 1862156: LatencySensitive feature gate allows upgrades #921
Full changelog

cluster-kube-controller-manager-operator

Bug 1880324: fix bug in reflector not recovering from “Too large reso… #461
Bug 1881534: Use internal load balancer instead of localhost 4.5 #455
Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #445
Bug 1868615: Revert “Don’t use upstream recycler pod” #438
Bug 1868615: Don’t use upstream recycler pod #433
Bug 1851390: Fix port check #422
Full changelog

cluster-kube-scheduler-operator

Bug 1893202: [release-4.5] Extend Prometheus E2E timeout #299
Bug 1887942: [release-4.5] Switch to v1beta1 Scheduler config to bridge between Policy/Plugin APIs #290
Bug 1880326: fix bug in reflector not recovering from “Too large reso… #287
Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #278
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 1880327: fix bug in reflector not recovering from “Too large resource version” #27
Full changelog

cluster-machine-approver

Bug 1880344: Bump K8s dependencies to v0.18.9 #90
Full changelog

cluster-monitoring-operator

Bug 1892585: Client go 0.18.9 #978
Bug 1887354: Backport fix checking if ClusterRoleBindings need update #956
Bug 1858010: Backport fix for KubePodCrashLooping alert #952
Bug 1888542: decrease CMO log verbosity from 3 to 2 #961
Bug 1881043: Bump client-go & co. #945
Bug 1859791: alert is firing KubeJobCompletion and KubeJobFailed at the same time #885
Bug 1877256: disable grafana telemetry #922
Bug 1858010: decrease alerts severity #926
Bug 1868304: remove ValidatingWebhookConfiguration for downgrades #909
Bug 1853496: Cleanup thanos ruler route when user workload monitoring is disabled #840
Bug 1857248: changing KubeQuotaExceeded to KubeQuotaFullyUsed #857
BUG 1856719: manifests/telemetry: replace apiserver_request_count with apiserver_r… #877
Bug 1845445: KubeApiLatency alert firing even though not all conditions are matched #805
Full changelog

cluster-network-operator

Bug 1886127: [release-4.5] sdn-ovs: don’t step on directory permissions. #842
Bug 1886127: [4.5] sdn-ovs: fix liveness probe for downgrade case #837
Bug 1886127: Handle downgrades from 4.6 to 4.5 #833
Bug 1881429: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #799
Bug 1874737: [release-4.5] OVN: Handle OVN db upgrades #779
Bug 1868444: Fixes providing empty slice for HybridClusterNetwork #790
Bug 1861412: NetworkAttachmentDefinitions should have output for “oc explain” #734
Bug 1858830: mount host-slash HostToContainer #719
Bug 1856130: [release-4.5] bump golang.org/x/text/encoding to v0.3.3 #714
Bug 1855894: Add netns mount #730
Bug 1859374: Disable conntrack for GENEVE #722
Bug 1857738: [release-4.5] Set timeoutSeconds to reflect expected timeout for OVS commands #712
Bug 1858712: Revert “[release-4.5] Bug 1854072: Check if the db file has been correctly initialized with raft. #718
Bug 1856374: Block MCS and metadata for host-networking pods #706
Bug 1854072: Check if the db file has been correctly initialized with raft. #693
Bug 1854736: [metrics] TargetDown alert is always fired in ovnkube-node job #697
Full changelog

cluster-node-tuning-operator

Bug 1882005: Issue a warning when two or more profiles use the same priority. #157
Bug 1880348: Bump to k8s 1.18.9 to fix bug in reflector not recovering from “Too large resource version” #155
Full changelog

cluster-openshift-apiserver-operator

Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #395
Full changelog

cluster-openshift-controller-manager-operator

Bug 1894667: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #185
Bug 1860397: account for nil DaemonSet returned from library-go #164
Full changelog

cluster-policy-controller

Bug 1891527: openshift-object-counts quota is not dynamically updating as the resource is deleted #47
Bug 1894666: fix bug in reflector not recovering from “Too large resource version” #46
Bug 1858798: add UID deallocation logic #32
Full changelog

cluster-samples-operator

Bug 1881068: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #325
Bug 1857201: initial create errors should map to SamplesExists instead of ImageChangesInProgress #304
Bug 1846145: Fix Jenkins Monitored templates typo and other updates #291
Full changelog

cluster-storage-operator

Bug 1882394: UPSTREAM: <carry>: operator-sdk: return error if lock is not leader-for-life #96
Bug 1882394: Delete lock created by CSO 4.6 #91
Bug 1874873: Move notUpgradeable check later to prevent z-stream upgrade failures #83
Bug 1846112: Includes validation check for VolumeSnapshot v1alpha1 CRDs #60
Full changelog

cluster-svcat-apiserver-operator

Bug 1854978: Remove servicecatalogapiserver CRD #91
Bug 1866052: Update golang.org/x/text to v0.3.3 #94
Full changelog

cluster-svcat-controller-manager-operator

Bug 1854978: Remove servicecatalogcontrollermanager CRD #78
Bug 1866054: Update golang.org/x/text to v0.3.3 #81
Full changelog

cluster-update-keys

Bug 1854960: Update CI search location to match where release signer publishes #19
Full changelog

cluster-version-operator

Bug 1886939: vendor: Bump client-go to v0.18.9 #470
Bug 1872906: pkg/start: Release leader lease on graceful shutdown #446
Bug 1868478: lib/resourcemerge/core: set ShareProcessNamespace, DNSConfig and TerminationGracePeriodSeconds #433
Bug 1857682: [release-4.5] Updating the golang.org/x/text version to v0.3.3 #409
Bug 1866480: pkg/cvo/status: Raise Operator leveling grace-period to 20 minutes #427
Full changelog

console

Bug 1896601: Tolerate missing status on OperatorGroups #7178
Bug 1879017: Disable card model if using SRIOV interface #6623
Bug 1896990: Handle values of 0 for maxUnavailable and maxSurge #7192
Bug 1894782: Use correct service account for operator monitoring #7107
Bug 1885228: Fix runtime error for basic users creating Prometheus instance #6833
Bug 1893022: Fix git validation on selecting git type #7046
Bug 1893277: deployment of vmware fails if VMware URL contains space at the end #7055
Bug 1885582: Fix that the Start Pipeline form is not always validated correctly #6853
Bug 1883225: Use new parameter prefix (tt.param.) for Tekton Trigger version 0.6+ #6759
Bug 1883098: add legends under devconsole monitoring dashboard graphs #6755
Bug 1874373: RHV URL validation is missing https:// #6551
Bug 1877278: report errors when v2v-vmware ConfigMap is not available #6567
Bug 1889982: pick latestCRDversion instead of latest/served true #6965
Bug 1889783: Support ServiceBinding breaking api changes #6962
Bug 1881380: Disable creation of External Mode Cluster in cloud environments #6706
Bug 1884574: Include repo branch in URL for che icon #6815
Bug 1883967: Fix layout issue which appears only on Safari #6798
Bug 1883881: Avoid adding a newline between pipelinerun log fetches #6795
Bug 1883177: Update node queries to exclude fstype, mountpoint #6781
Bug 1882196: Add resource badges in the add trigger form dropdown #6734
Bug 1852530: kubevirt - fix importing VMs with same vnicIDs for ovirt provider #5885
Bug 1884411: Fix runtime error in legacy operand form #6810
Bug 1879973: properly encode vpx URL #6803
Bug 1883342: [Release 4.5] Convert Pipeline StartedBy Label to Annotation #6769
Bug 1879016: kubevirt support only e1000e and virtio #6622
Bug 1884760: add candidate-4.6, fast-4.6, and stable-4.6 channels #6822
Bug 1877728: Fixes bug attaching block storage to pods, deployments in attach-storage page #6609
Bug 1877290: fix edit flow with update git url #6568
Bug 1878849: Use metadata.generatorName when create a pipeline trigger #6615
Bug 1880376: Fix Add Pipeline Trigger for Pipeline Operator 1.1 #6675
Bug 1879247: Fix inline taskSpec error in pipeline page #6638
Bug 1881784: fix empty default value for pipeline parameters #6715
Bug 1878214: Add support for more params and create resources only if required #6598
Bug 1878713: Add fallback to builder image detection #6617
Bug 1840253: Tighten cipher usage to library-go #6503
Bug 1879224: Empty secret should be editable in generic secret form #6636
Bug 1877012: Hide cluster upgrade UI on OpenShift Dedicated #6616
Bug 1876461: remove the import VM from dev perspective #6552
Bug 1870078: Fix Backing Store selection flickering issue in Bucket Class creation wizard #6371
Bug 1855820: Editable TT, EL, CTB, TB #5947
Bug 1870825: Fix blank page/error on ImageManifestVulnPage #6392
Bug 1870585: Fix pipeline workspace volume-type empty-directory #6384
Bug 1875858: fixes issue with internal image imports for self-provisioner with edi… #6533
Bug 1872625: cherry-pick 4.5 add resource icon to task and cluster-task #6446
Bug 1877083: add RBAC checks to cluster upgrade UI #6557
Bug 1856156: Fixes deletion of node connected to a split node #5955
Bug 1875263: Add Storage Class filter for SC dropdown in Backing Store creation page for PVC type #6501
Bug 1847282: Fix DynamicForm component logic for hiding schemas that do not produce form fields #5752
Bug 1873053: Include only node-level network traffic in Network Utilization item. #6459
Bug 1869961: Delete only KSVC, not Route associated with KSVC #6367
Bug 1872288: Delete the hashed session token on user logout #6445
Bug 1869967: adds badge support for providedApis creation #6368
Bug 1869631: Mode Detection independent of Storage Cluster CR name #6353
Bug 1867042: fix log completiontime issue #6244
Bug 1872289: Persistent dashboard to reflect ceph health status as Warning #6427
Bug 1861433: Show descriptions for all dynamic form fields #6136
Bug 1861358: fixes issue with ksvc decorator not showing base route #6131
Bug 1852790: When node disk is under pressure NodeTerminalError should show pod’s status message #5876
Bug 1867050: Use match.path to build tab paths #6260
Bug 1867526: support pipeline task resources to be an optional field based on spec #6282
Bug 1854612: Machine’s ‘Provisioned as node’ phase should use SuccessStatus component with GreenCheckCircleIcon icon #5910
Bug 1868034: fix bug where Routes created set route.spec.port.targetP… #6287
Bug 1856867: Do not prune empty values from sample on create operand page #5988
Bug 1855741: cherry-pick 4.5 fix git url validation #5896
Bug 1866330: Make the Node Labelling Note more generic to accomodate LSO and dynam… #6246
Bug 1850292: disable addOnPaste in <SelectorInput> #5809
Bug 1848530: Fix ListDropdown loading state #5778
Bug 1857314: Remove updation of Overview filesystem query. #5999
Bug 1856948: Fix incorrect monitoring doc link #5990
Bug 1855812: Allow Tekton Event Listeners to render without a full route #5946
Bug 1851088: console hit runtime error when all receivers are deleted #5826
Bug 1849107: Fix for duplicate ‘Edit Application Grouping’ in knative services #5792
Bug 1857821: Fix for pod ring exception #6021
Bug 1852287: OCS branding changes for External & Internal Mode #5854
Bug 1847277: Fix legacy operand form runtime error #5751
Bug 1847283: Fix number widget detection in operand form #5753
Bug 1842717: Prevent OLM tab component unmounting every render #5643
Bug 1853274: Fix runtime error on legacy operand form #5878
Bug 1845125: Use undefined as default value for width hook #5689
Bug 1847933: Fixed inconsistency in breakdown and utilization card wrt capacities #5761
Bug 1845934: set tileName to desc.kind if displayName not supplied #5713
Bug 1845602: Dont update TargetNamespace when switching UpdateChannels #5703
Bug 1845231: Fix NPE in combinedDisk #5692
Bug 1856268: Fix crash (white screen) when cancel Pipeline Create with open sidebar #5958
Bug 1844503: Use browser-native support for lazy-loading images #5681
Bug 1843552: Only show Edit Grouping action for VMs in topology view #5662
Bug 1842968: - Operand’s tab for Operand list view is missing #5653
Bug 1846969: Migrate to DevWorkspace CR for the terminal #5730
Bug 1844588: Show CSV icon from default channel #5685
Bug 1848425: Affinity modal closes when user attempts to edit #5858
Bug 1847971: VM’s boot order modal will not remove non-bootable disks #5762
Bug 1846409: Remove the checks CAN_GET_NS and prometheusBaseURL for monitoring Dashboard and Metrics tabs in devconsole #5725
Bug 1849213: Fix bug where pending pod log tab throws error #5794
Full changelog

console-operator

Bug 1876025: clidownloads: IBM Power and Z are supported #467
Bug 1880307: Bump k8s vendors to 1.18.9. to fix bug in reflector not recovering from ‘Too large resource version’ #470
Bug 1880307: Fix inconsistent vendoring in vendor/modules.txt #471
Bug 1874529: Configuring custom certificate for default console route #465
Bug 1822637: Publish license file #440
Bug 1847523: “downloads” pod does not work on the node which is disabled IPv6 #441
Bug 1855567: Update console config on change #446
Full changelog

coredns

Bug 1862584: Adds HealthcheckBrokenCount to forward plugin #36
Bug 1869309: Back port Handle endpoint tombstones (upstream #3887) #38
Full changelog

docker-builder

Bug 1889956: CVE-2020-8564 #194
Bug 1868401: bump(containers/buildah): #169
Bug 1845345: Fix building multi-stage image that has a –from=X #166
Bug 1843405: preserve ARG values that come before the first FROM #156
Full changelog

etcd

OWNERS: add component #62
Bug 1884011: discover-etcd-initial-cluster: improve error handling when we dont scale member #58
Bug 1859201: bump etcd v3.4.9 #54
Automated cherry pick of #11735 on release-3.4 #11811
Automated cherry pick of #11817 on release-3.4 #11855
Automated cherry pick of #11652 #11670 #11710 #11752
Automated cherry pick of #11754 on release-3.4 #11757
Full changelog

gcp-machine-controllers

Bug 1864352: Add leader election mechanism to release 4.5 #114
BUG 1868751: Support networks shared from a different project #116
Full changelog

haproxy-router

Bug 1906132: back port: Change router’s internal endpoint.ID to prevent HAProxy server line collisions #234
Bug 1896914: Back port Clip haproxy.router.openshift.io/timeout annotation values to prevent bricking on upgrade #218
Bug 1886214: haproxy-config.template: Only enable HTX for HTTP/2 #200
Bug 1890534: Fix decreasing counter metrics when reloading HAProxy #205
Bug 1885688: Back port Switch to periodic process reaper #195
Bug 1879120: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #184
Bug 1866454: Back port Remove initial haproxy template commitAndReload #167
Bug 1857021: Sanitize TLS config that has key bundled with cert #150
Sync OWNERS with master branch #162
Full changelog

hyperkube, tests

Bug 1884195: test/extended/operators: add etcd-quorum-guard to unevictable whitelist #25700
UPSTREAM: <carry>: Bug 1893156: include / prefix in instance ID output #25655
Bug 1899721: HPA: Ignore deleted pods. #25698
Bug 1852695: CVE-2020-8559 compromised node could escalate to cluster level privileges #25656
Bug 1828858: use net/http instead of client-go for e2e PDB test #25635
Bug 1893742: move jenkins e2e nfs setup from docker.io to quay.io image #25654
Bug 1880326: Backport disruption test improvements #25603
Bug 1893071: move off docker.io in templates/builds/jenkins tests #25648
Bug 1881351: KCM and KS graceful termination #25536
Bug 1887942: [release-4.5] Pick scheduler v1beta1 componentconfig API #25252
Bug 1883345: [release-4.5] Re-enable skipped conformance tests for IBM Cloud #25520
Bug 1888002: move image ecosystem e2e suite from centos to rhel; create rhel only jenkins e2e suite #25387
Bug 1879192: Make offline volume expansion tests more robust #25556
Bug 1857268: UPSTREAM: 94252: If firstTimestamp is not set use eventTime when printing event #25461
Bug 1886174: skip test during skew testing that won’t run on 4.6 #25591
Bug 1868490: upgrade test use LoadBalancers with ExternalTrafficPolicy set to Local #25481
Bug 1860789: test: Report an error message when a pod fails in a cmd test #25560
Bug 1867800: Make EBS attachDisk idempotent #25400
Bug 1856529: Add NET_RAW capability to internal_ports test #25518
Bug 1877346: KubeAPIErrorsHigh firing due to too large resource version #25489
Bug 1883235: Adjust wait duration for marketplace test #25557
Bug 1882030: UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison #25541
Bug 1877346: Fix bug for inconsistent lists served from etcd #25490
Bug 1846451: UPSTREAM: 90419: update strategy used to reuse CPUs from init containers in CPUManager #25310
Bug 1879650: For clusters upgraded from 4.1, skip the anonymous browser access test #25510
Bug 1874251: UPSTREAM: 94204: Add impersonated user to system:authenticated group #25458
Bug 1871951: allow recycler pods to run with best effort qos #25316
Bug 1869220: UPSTREAM: <carry>: oauth: support sha256~ prefixed tokens #25415
Bug 1868314: UPSTREAM: 93355: Fix scheduler issue with nodetree additions #25407
Bug 1862194: UPSTREAM: 85983: fix metrics kubelet_running_pod_count #25359
Bug 1861382: UPSTREAM: 91642: Adjust Azure e2e binding mode #25333
Bug 1857081: Include pod /etc/hosts in ephemeral storage calculation for eviction #25287
Bug 1849340: 4.6: UPSTREAM: 91748: FieldManager: Reset if we receive nil or a list with one #25178
Bug 1846453: UPSTREAM: 90377: fix exclusive CPU allocations being deleted at container restart #25309
Fix commit checker #25366
Bug 1849321: UPSTREAM: 89937: portAllocator sync local data before allocate #25174
Bug 1847927: OpenShift APIs become unavailable for more than 15 minutes #25116
pins all 4.5 dependencies and runs hack/update-deps.sh #25259
Bug 1854311: 4.5: UPSTREAM: 91307: CSI: Modify VolumeAttachment check to use Informer/Cache #25250
Bug 1847927: genericapiserver waits for server.Shutdown #25133
Bug 1850240: tests: extended: fix TM regression test #25195
Bug 1845646: router/grpc-interop: switch to WaitForPodRunningSlow #25104
Bug 1857220: e2e: extended: re-enable topology manager tests #25284
Bug 1845242: Fix DS expectations on recreate #25209
Full changelog

insights-operator

Backport e2e tests #252
[release 4.5] Bug 1885515: Fixes ‘make build’ #204
Bug 1884551: Adds PodDisruptionBudgets gather. #199
Bug 1883175: Gather MachineSet info #195
Bug 1880352: collect hostsubnet information #180
Bug 1882237: Add new team members to OWNERS #191
Bug 1855240: Check also Pod status before enabling Fast upload #139
Bug 1869319: Add @natiiix to OWNERS #156
Bug 1866776: Limit collection of ALERTS metric to 1000 lines (~500KiB) to avoid unbearably large archives #153
Bug 1851492: [release-4.5] clusterconfig.go: limit the size of collected logs #128
Bug 1850446: [release-4.5] pkg/gather/clusterconfig/clusterconfig: include node information in every archive #127
Bug 1851839: Make e2e tests more stable #130
Full changelog

ironic

Bug 1859488: Add the idrac-redfish-virtual-media boot interface #88
Full changelog

jenkins, jenkins-agent-maven

Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
Bug 1857550: bump jenkins to 2.235.2 #1117
Bug 1857559: Bump matrix plugin #1127
Bug 1852331: CVE-2020-2182 jenkins-credentials-binding-plugin 1.0.23 [release 4.5] #1100
Bug 1853080: Bump script-security plugin to 1.73 #1103
Full changelog

jenkins-agent-nodejs

Bug 1852331: CVE-2020-2182 jenkins-credentials-binding-plugin 1.0.23 [release 4.5] #1100
Bug 1853080: Bump script-security plugin to 1.73 #1103
Full changelog

k8s-prometheus-adapter

Bug 1897313: Populate both CPU and Memory resource container metrics if one is specified #37
Full changelog

keepalived-ipfailover, pod

Bug 1900725: Pod process container does not correctly reap zombie process with shareProcessNamespace: true #57
Bug 1851390: Add iproute package to get ss tool for port wait #20
Full changelog

kube-client-agent, kube-etcd-signer-server

Bug 1872535: vendor: bump golang.org/x/text #23
OWNERS: cleanup #22
Full changelog

kube-proxy, sdn

Bug 1894784: fix pod creation deadlock #217
Bug 1901043: Enable conntrack for ovs-multitenant unless userspace proxy #225
UPSTREAM<carry>: Bug 1880341: Fix bug in reflector not recovering from “Too large resource version” #215
Bug 1895057: Ignore if netns is already deleted while deleting ns #218
Bug 1878624: Invalid egressCIDR value causes sdn pods to fail on startup #187
Bug 1881830: Emit a warning and ignore if empty cidr is passed to kubeproxy #195
Bug 1878788: vxlan_monitor_test: fix flake #191
Bug 1874798: Add NodeInformer to EgressIP #182
Bug 1870303: Port stuck open when ep deleted before svc in unidling mode #173
Bug 1855118: [release-4.5] Add support for –may-exist when adding the bridge in sdn #160
Bug 1853193: [release-4.5] Backport OVS-retries #154
Full changelog

kube-state-metrics

Bug 1881103: Bump to fix a bug in client-go #36
Bug 1862404: Bump to v1.9.7 #31
BUG 1859956: Openshift 1.9.7 bump #30
*: cut release-1.9.7 #1150
Full changelog

kube-storage-version-migrator

Bug 1893637: Fix bug in reflector not recovering from “Too large resource version” #161
Full changelog

kuryr-cni, kuryr-controller

Bug 1900491: Ensure members are deleted from pools when there is no endpoints #413
Bug 1893996: Fix duplicated sg rules on NP crd #392
Bug 1884192: Set read timeout for any request in K8sClient #360
Bug 1860311: Civilize logging vol 2 #351
Bug 1883419: Cleanup ports belonging to deleted nodes #354
Bug 1874840: Ensure proper cleanup of subports #334
Bug 1860311: Civilize logging #312
Bug 1855773: Attempt to autodetect interface in nested setups #300
Bug 1853215: Periodically fetch full list of watched resources #297
Full changelog

libvirt-machine-controllers

Bug 1887373: Add leader election mechanism to release-4.5 #211
BUG 1857759: fix memory leak that leads to unresponsive libvirt URI #202
Full changelog

machine-api-operator

Bug 1869320: [release-4.5] [vSphere] Reduce sync period to 10 minutes #764
Bug 1880343: Bump K8s dependencies to v0.18.9 #718
Bug 1864352: Add leader election mechanism to release 4.5 #664
Full changelog

machine-config-operator

Bug 1903655: Use mc name as finalizer for kubelet config #2274
Bug 1900013: Drop kubelet logging back down to level 3 #2247
Bug 1904082: ctrcfg_test: Wait for our prior target config #2284 #2284
Bug 1890797: Set NonVirtualIP in mdns plugin config #2137
Bug 1874815: pkg/server: reduce calls to ignition parse #2053
Bug 1856529: Create a drop-in file for cri-o’s default_capabilities #2050
Bug 1862874: [baremetal & friends] verify resolv.conf in HAProxy static pod synced with host resolv.conf #1974
Bug 1881147: OpenStack: Don’t failover api vip if loadbalanced endpoint is responding #2110
Bug 1872337: remove err cardinality from mcd_kubelet_state metrics #2023
Bug 1873321: Check the version hash so we resync on an upgrade #2034
Bug 1861026: daemon: perform other rpm-ostree operations after OS rebase #2029
Bug 1870285: OpenStack: Ensure resolv.conf exists before running podman #2012
Bug 1862538: telemetry: change MCDDrainErr from critical to warning #1966
Bug 1855373: etcd: remove etcd entries from mdns #1917
Bug 1866379: Pass proxy settings nodeip-configuration service for baremetal, vsphere, openstack #1985
Bug 1855543: KubeletConfig: Validate kubeReserved and systemReserved for KubeletConfig #1920
Bug 1852787: KubeletConfig: Verify EvictionSoftGracePeriod is set when EvictionSof… #1887
Bug 1861773: Remove IPI checks for vsphere hostname script and systemd unit #1976
Bug 1849817: kubelet: wait to requeue after mcp error #1861
Bug 1855894: templates: add a file to load legacy iptables kernel modules #1954
Bug 1858907: add nil check for infra.Status.PlatformStatus in isCloudConfigReqd #1936
[release 4.5] Bug 1855877: cherry-pick hostname fixes #1939
Full changelog

multus-whereabouts-ipam-cni

Bug 1868772: [backport 4.5] Change error message (for missing kubeconfig) #26
Bug 1877065: Fixing wrong DNS-1123 name for some IPv6 addresses #29
Bug 1854504: Backport network address 4.5 #16
Full changelog

must-gather

Bug 1887446: [release-4.5]Backport gather_core_dumps #183
Bug 1849244: [release-4.5]Trace ovn processing in cluster #160
Full changelog

oauth-server

Bug 1882055: Fix bug in reflector not recovering from “Too large resource version” #57
Full changelog

openshift-apiserver

Bug 1883994: Fix label value validation for BuildConfigs #144
Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #137
Bug 1857128: Using manifest digest on manifest list import #123
Full changelog

openshift-controller-manager

Bug 1883994: Fix label value validation for Builds #138
Bug 1880357: Bump k8s.io packages #140
Bug 1849173: Allow image push after postCommit script completes #120
Full changelog

openshift-state-metrics

Bug 1882448: bump k8s.io/client-go dependency #58
Full changelog

openstack-machine-controllers

Bug 1864352: Update leader election for release 4.5 #117
Full changelog

operator-lifecycle-manager

Bug 1892372: OLM should use valid CA certs if available #1865
Bug 1882444: remove extra polling check #1780
Bug 1878297: remove duplicate catalog source pod when polling #1765
Bug 1887944: ensure installplan step resource manifests reference configmaps #1809
Bug 1880359: [release-4.5] Bump 1.18.9 #1778
Bug 1878307: shorten catalog sync interval if polling is enabled #1764
Bug 1878359: update catalog image pull policy #1760
Bug 1870782: Retry conflicting catalog source pod update after fetching latest pod spec #1734
Bug 1864121: fix(install): account for installplans when calculating generation #1686
Bug 1866828: Remove unneeded toleration from catalog source pod #1712
Bug 1852443: Remove failfast from operator e2e test #1614
Bug 1850237: Delete subscription metric when an operator is uninstalled #1591
Bug 1862407: fix(resolver): be smarter about the way downgrades are attempted #1689
Bug 1846194: fix(package-server): get icons from default channel #1580
Bug 1859753: fix(installplans): GC older installplans #1674
Bug 1859493: fix(resolver): Exclude all installed packages in dependency search #1664
Bug 1858482: generate unique (Cluster)RoleBinding names #1651
Full changelog

operator-marketplace

Bug 1881542: Set all CO conditions on meeting expected sync ratio #356
Bug 1867799: Correctly count non-default Marketplace CRs #324
Bug 1873546: Increase registry delay for large payloads #335
Bug 1877564: Sync remote app-registry #340
Full changelog

operator-registry

Bug 1904554: TestListPackages is flaky #533
Bug 1902803: Reconstruct replaces/splits for Listbundles from channel_entry. #524
Bug 1845588: fix(images): use docker/podman create and cp for exec unpacking #400
Bug 1866861: 4.5 index images should work with 4.6 catalog operator. #434
Full changelog

ovirt-machine-controllers

Bug 1864352: Add leader election mechanism to release 4.5 #68
BUG 1854787: [release-4.5] abort network reconciling while vm is in transient state #65
Bug 1854787: Reconcile network addresses according to VM status #54
Full changelog

ovn-kubernetes

Bug 1877561: [release-4.5]Fix orphaned ACLs backport to 4.5 #287
Bug 1888352: Fix IPv6 neighbor discovery hack #313
Bug 1862700: Fix ovnkube-node aggressive memory allocation to prevent memory bloating #227
Bug 1882092: Pin 4.5 OVN to 4.4.24 #284
Bug 1868501: Do not default HO cluster subnets #268
Bug 1870867: Fix br-local duplicate MAC #238
Bug 1874928: Pinning the OVN version for 4.5.8 release #248
Bug 1858304: Set MTU for br-ext hybrid overlay bridge #207
Bug 1845664: release-4.5 Cleanup Conntrack when endpoints and pods are deleted #180
Full changelog

prometheus

Bug 1892583: bump k8s.io/client-go to v0.18.9 #68
Bug 1881111: go.mod,go.sum: Bump client-go & co. #59
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1891815: Revert “Bug 1881077:go.sum,go.mod: Bump client-go & co. to fix known bug” #99
Bug 1881077: go.sum,go.mod: Bump client-go & co. to fix known bug #95
Full changelog

prometheus-node-exporter

Bug 1890466: Fix issues with too many log messages in NFS collector #71
Full changelog

service-ca-operator

Bug 1880360: Fix bug in reflector not recovering from “Too large resource version” #124
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github