Back to index

4.5.33

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.5.33-x86_64

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

• 4.5.32 (changes) - Failed Success
• 4.5.31 (changes) - Success
• 4.5.30 (changes) - Failed
• 4.5.29 (changes) - Failed
• 4.5.28 (changes) - Failed
• 4.5.27 (changes) - Success
• 4.5.25 (changes) - Success
• 4.5.24 (changes) - Failed
• 4.5.23 (changes) - Success
• 4.5.22 (changes) - Success
• 4.5.21 (changes) - Failed
• 4.5.20 (changes) - Failed
• 4.5.19 (changes) - Failed
• 4.5.18 (changes) - Success
• 4.5.17 (changes) - Success
• 4.5.16 (changes) - Failed
• 4.5.15 (changes) - Success
• 4.5.14 (changes) - Success
• 4.5.13 (changes) - Failed
• 4.5.12 (changes) - Success
• 4.5.11 (changes) - Success
• 4.5.10 - Failed
• 4.5.9 (changes) - Success
• 4.5.8 (changes) - Success
• 4.5.7 (changes) - Failed
• 4.5.6 (changes) - Success
• 4.5.5 (changes) - Failed
• 4.5.4 (changes) - Failed
• 4.5.3 (changes) - Success
• 4.4.33 (changes) - Success
• 4.4.32 (changes) - Success
• 4.4.31 (changes) - Success
• 4.4.30 (changes) - Failed
• 4.4.29 (changes) - Success
• 4.4.28 (changes) - Success
• 4.4.27 (changes) - Failed
• 4.4.26 (changes) - Success
• 4.4.25 (changes) - Success
• 4.4.24 (changes) - Failed
• 4.4.23 (changes) - Success
• 4.4.22 (changes) - Success
• 4.4.21 (changes) - Failed
• 4.4.20 (changes) - Success
• 4.4.19 (changes) - Success
• 4.4.18 (changes) - Failed
• 4.4.17 (changes) - Success
• 4.4.16 (changes) - Success
• 4.4.15 (changes) - Failed
• 4.4.14 (changes) - Success
• 4.4.13 (changes) - Success

Upgrades to:

• 4.6.35 (changes) - Success
• 4.6.34 (changes) - Success
• 4.6.33 (changes) - Success
• 4.6.32 (changes) - Success
• 4.6.31 (changes) - Failed Failed
• 4.6.30 (changes) - Success
• 4.6.29 (changes) - Failed
• 4.6.28 (changes) - Failed
• 4.6.27 (changes) - Failed Failed
• 4.6.26 (changes) - Success
• 4.6.25 (changes) - Failed
• 4.6.24 (changes) - Success
• 4.6.23 (changes) - Success
• 4.6.22 (changes) - Success
• 4.6.21 (changes) - Success
• 4.6.20 (changes) - Success Success
• 4.6.19 (changes) - Failed
• 4.6.0-0.nightly-2021-03-04-084324 (changes) - Success Success
• 4.6.0-0.nightly-2021-03-04-071024 (changes) - Success Success
• 4.6.0-0.nightly-2021-03-04-040959 (changes) - Success Success
• 4.6.0-0.nightly-2021-03-04-005204 (changes) - Success Success
• 4.6.0-0.nightly-2021-03-03-125613 (changes) - Success Failed
• 4.6.0-0.nightly-2021-03-01-051748 (changes) - Success Failed
• 4.6.0-0.nightly-2021-02-25-073053 (changes) - Pending Pending
• 4.6.0-0.nightly-2021-02-25-051452 (changes) - Success Success
• 4.6.0-0.nightly-2021-02-25-015411 (changes) - Success Success
• 4.6.0-0.ci-2021-03-04-183813 (changes) - Success
• 4.6.0-0.ci-2021-03-04-073131 (changes) - F F F F F F S S F F S S S S
• 4.6.0-0.ci-2021-03-04-062635 (changes) - F F F F S
• 4.6.0-0.ci-2021-03-04-041725 (changes) - F F S
• 4.6.0-0.ci-2021-03-04-005140 (changes) - F F F S F S F F S S
• 4.6.0-0.ci-2021-03-03-235422 (changes) - Success
• 4.6.0-0.ci-2021-03-03-224533 (changes) - F S S
• 4.6.0-0.ci-2021-03-02-214859 (changes) - F F F F F F F F F F S S F S S F F S F S S F F F F F F F S S S S S F F S S F F F
• 4.6.0-0.ci-2021-03-02-184825 (changes) - Failed
• 4.6.0-0.ci-2021-03-01-234527 (changes) - Success
• 4.6.0-0.ci-2021-03-01-210209 (changes) - Failed
• 4.6.0-0.ci-2021-03-01-184252 (changes) - Failed
• 4.6.0-0.ci-2021-03-01-160124 (changes) - Success
• 4.6.0-0.ci-2021-03-01-124252 (changes) - F F F F F F F F F F F F F F F S F S S F S S F S S S S S S S F F F F F F S F F F F F S S S S S F F F F S F S S F S S
• 4.6.0-0.ci-2021-03-01-102550 (changes) - Failed
• 4.6.0-0.ci-2021-02-26-141652 (changes) - F F F F S F F F F F S F S S S F F F F F F S F S S F
• 4.5.40 (changes) - Failed
• 4.5.39 (changes) - Failed
• 4.5.38 (changes) - Success
• 4.5.37 (changes) - Failed
• 4.5.36 (changes) - Success
• 4.5.35 (changes) - Success
• 4.5.34 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.5.10

Created: 2021-02-24 07:38:11 +0000 UTC

Image Digest: sha256:8e6b3ffc19aa6106096936733a128095646a604b69924b5cf606260d433661f0

Release 4.5.33 was created from registry.ci.openshift.org/ocp/release:4.5.0-0.nightly-2021-02-20-065540

Components

• Kubernetes 1.18.3
• Red Hat Enterprise Linux CoreOS upgraded from 45.82.202009120029-0 to 45.82.202102130409-0 (diff)

Rebuilt images without code change

• aws-machine-controllers git 2710ded1 sha256:1e0bb9c7610224df77bbcb4d12cdcfbd0aa119a8616eb49274afcd35f20f3f1d
• aws-pod-identity-webhook git 2251f7e2 sha256:dffed7fc27782f760d13687f90e2408f32d2f9b40d36e37118547e44ce434176
• baremetal-machine-controllers git 1cf0189f sha256:b571ff5c253613b0d66b1f544f1c6a3eebf3e38210d17624f692c1c9b362a67e
• cluster-autoscaler git c821779c sha256:e9c10a52caa62b33c28c413d45c3e289174dbe07f23fd30839d3ad7b21758fae
• cluster-bootstrap git 04c97c30 sha256:bbe6d0e9a5038fa58733fa0407c5448d8b77c18a55c41ec9957deab0a4059bf0
• cluster-node-tuned git 27b3ad70 sha256:74fa4a632906c44ff884690c5fd38bd675f99573fdb8ff3134a058c76c45f78d
• cluster-svcat-apiserver-operator git 095c1873 sha256:e66edf78bb6923160bf0e8b2c44d1d69e0afc65a01497ebe1d144a54a1b5d0aa
• cluster-svcat-controller-manager-operator git 3f8300d0 sha256:3049069da5be381cb8ed081b1f2972f8bdba4329066d903da2c7aa991ee0a730
• cluster-update-keys git 7befe524 sha256:df4e9f2feb80fe382b437cfc61c8a53135f1f9bdd94776bd0cdaaff794da74b6
• configmap-reloader git 8b987c8e sha256:e719a870a79c28511733ebc880d7f31b9b71e97c536497f81cb446f9085a36c7
• container-networking-plugins git d097ce25 sha256:c2290461c2b73efaee6f54cca31067a73f9d46c95106d51d100748dcc49f7f75
• coredns git 29f92ef4 sha256:2f138f95c50a7a5fec75f54ff65b5bfbff869066b567de41bec998ae13008557
• csi-snapshot-controller git f23c075c sha256:290ecf0abac02cc9130d07b01685b5c7d7dceca37f89b1feeb8f4b3295dfad59
• docker-registry git 861af923 sha256:aa04e3703cbac09438ebecdcea20e062461430c4573f50079deec47fc3bb4369
• grafana git f6535967 sha256:48dc302a3da462720227debfacd8e5b5c4521f58160d438aac3e954ccb176352
• ironic-hardware-inventory-recorder git 09f6db6b sha256:069188602970e9bedb94b1b0421224076871a0e22d1ac021167e586a666073c4
• ironic-ipa-downloader git 999c80f1 sha256:9b80cbfdb98040c08f55011372a5697d13e21f08b5929ccc041ff835ccd54645
• ironic-machine-os-downloader git 561c7d4c sha256:1d7747f256b2396f33be3902dc9174e2437ba9b9e2b13ed01e72128e158d5384
• ironic-static-ip-manager git 058e8fd2 sha256:2f35f4060e4147e5be51cd044dd5f653c148dcaf3db37651b3eb5c96cb0c3939
• kube-rbac-proxy git 76fc3658 sha256:56b95f1d36e035dce26b41cbb7bc18fa3e1af3888717f95b98f260e2c2255947
• local-storage-static-provisioner git 424ccbd2 sha256:cc3f76c0355d7931e5757aee1594f47609cf98cfa15c01816559710c73a378b6
• machine-os-content sha256:4e7b1c230ca25f3b2c5d13e1f3bed64ec3529c35a8e988bafdcd8b82dd1e35c6
• mdns-publisher git 0e41fab1 sha256:78734b074d34bda349de561840a8d11da7c91022224f33dabfc8695275de4a06
• multus-admission-controller git 0bd3ff5e sha256:7d18cea70d14b2c93a4b34fc21e74e6edfbd714a502b203c48b3d4e387515147
• multus-cni git 69a29635 sha256:f4d2fbcde84118c0de2d5366747bb107a8f9fcb7d681deab3a66b8fa82ee78db
• multus-route-override-cni git 7f6f53e3 sha256:68fdb51074890145cd2485dc220673b82bdfefca1408b6e7a1dfd749dc0dee07
• oauth-proxy git afb73cdd sha256:19edbab5e24c4822575080afbdf450e7955cea13d0f941fedcd38214197252e5
• prom-label-proxy git cfcfdbd1 sha256:10ee42b8d0a69ea0b66d526021224a90c83714f306654e262d6f2c9a9b18753a
• prometheus-alertmanager git 26fa6b42 sha256:a09011cd0ff94d7020e861fefa9f8127314dd7db021e029768ef09c003dd38eb
• telemeter git ca9c4f2c sha256:7abbf87e564697b9dde88777e4c2ec73a90d08fa4bf39f4132001fca1e196763
• thanos git 0d2ebce5 sha256:1e04dde9b998ffed31d34f9fa821ddd002bd26068f6d9367aef9be7092f02ed2

baremetal-installer, installer, installer-artifacts

• Bug 1918962: vsphere destroy: delete tag category created by installer #4580
• Bug 1920767: disable anonymous auth on bootstrap nodes #4597
• Bug 1891168: data/data/gcp: be pedantic about setting the region #4301
• Bug 1876581: upi/aws Define load balancer health checks #4358
• Bug 1877374: Remove unused bootstrap etcd cert generation mechanism #4150
• Bug 1889775: [release-4.5] vSphere: Update dockerfile removing certificate #4283
• install-approvers: add staebler #4299
• Bug 1874009: Ensure proper tagging of compute nodes ports #4120
• Bug 1880134: destroy/gcp: correct extract service account email from IAM policy binding member #4195
• Bug 1878369: openstack: Upgrade the CI build image #4164
• Full changelog

baremetal-operator

• Bug 1874599: Always delete found host from Ironic on deletion #97
• Full changelog

baremetal-runtimecfg

• Bug 1926730: add CloseIdleConnections for HTTP K8S API healthcheck #122
• Bug 1888301: Add check for iptables rule to keepalived-monitor #105
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1920676: add timestamps marking start and end for must-gather and inspect #718
• Bug 1884580: Set appropriate owner references when creating a job from cronjob #602
• Bug 1860789: Rebase k8s to 1.18.8 to enable approving CSRs on a 4.6 server #551
• Full changelog

cloud-credential-operator

• Bug 1898199: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #269
• Bug 1883412: Update upgradeable condition on admin cred changes. #253
• Bug 1871713: Mark Manual Clusters Upgradeable=False If 4.6 Cred Request Secrets Are Not Provisioned #244
• Full changelog

cluster-authentication-operator

• Bug 1879417: don’t error out on non-json output of password grant attempt #349
• Bug 1877960: [release-4.5] router-secrets: set named certificates to empty array instead of nil when none found #342
• Full changelog

cluster-autoscaler-operator

• Bug 1879162: ensure full boolean arguments #164
• Bug 1880320: Bump K8s dependencies to v0.18.9 #169
• Full changelog

cluster-config-operator

• Bug 1905576: [release-4.5] Add warning of the consequences of changing bound token issuer #180
• Bug 1878007: Add Controller to Normalize the Operator Log Level Values #150
• Bug 1880304: Fix bug in reflector not recovering from “Too large resource version” #155
• Bug 1879492: Add secure access token annotation controller to handle downgrade from 4.6 #153
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1881359: Run the controller on master nodes #52
• Bug 1880309: Bump k8s.io/client-go to v0.18.6 to fix bug in reflector not recovering from “Too large resource version” #53
• Full changelog

cluster-dns-operator

• [Release 4.5] Bug 1880311: Fix bug in reflector not recovering from “Too large resource version” #198
• Full changelog

cluster-etcd-operator

• Bug 1924913: A valid etcd endpoint should have the URL scheme prepended. #536
• Bug 1906483: Use socket readiness probe to avoid generating zombies #510
• Bug 1897543: DR: Make restore pod yaml specific to restoring node #497
• Bug 1894267: Remove the rollbackcopier #494
• Bug 1899563: remove etcdMemberIPMigrator controller #389
• Bug 1883268: remove erroneously specified label drop rules #452
• Bug 1877374: Render bootstrap certificates #438
• OWNERS: change component to Etcd #471
• Bug 1877930: Use restore pod yaml from the backup when restoring #442
• Bug 1880313: vendor: bump k8s to 1.18.6 to fix bug in reflector not recovering from “Too large resource version” #447
• Bug 1859684: Exclude bootstrap in the env variable ETCDCTL_ENDPOINTS #402
• Full changelog

cluster-image-registry-operator

• Bug 1916859: Sync status to spec with regards to Swift config #656
• Bug 1895856: httpSecret should be generated when it is not set #636
• Bug 1894621: Avoiding bootstrap failure on unavailable swift #635
• Bug 1886603: Remove unsafe type casting #623
• Bug 1886849: panic during creation of Azure storage container #624
• Bug 1880314: Fix bug in reflector not recovering from “Too large resource version” #616
• Bug 1843244: Add documentation for Logging field #614
• Bug 1880485: Retrying in case of conflict during Config update #613
• Bug 1879176: Alerting on failed image prune job #612
• Full changelog

cluster-ingress-operator

• Bug 1920421: Add “ingress.operator.openshift.io/hard-stop-after” annotation #538
• [Release 4.5] Bug 1880315: Fix bug in reflector not recovering from “Too large resource version” #461
• Full changelog

cluster-kube-apiserver-operator

• BUG 1885353: protect openshift traffic by using dedicated flowschema #968
• Bug 1880322: fix bug in reflector not recovering from “Too large resource version” #954
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1880324: fix bug in reflector not recovering from “Too large reso… #461
• Bug 1881534: Use internal load balancer instead of localhost 4.5 #455
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #445
• Full changelog

cluster-kube-scheduler-operator

• Bug 1915363: Sync new kube-scheduler-client-cert-key on recovery #317
• Bug 1893202: [release-4.5] Extend Prometheus E2E timeout #299
• Bug 1887942: [release-4.5] Switch to v1beta1 Scheduler config to bridge between Policy/Plugin APIs #290
• Bug 1880326: fix bug in reflector not recovering from “Too large reso… #287
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #278
• Full changelog

cluster-kube-storage-version-migrator-operator

• Bug 1880327: fix bug in reflector not recovering from “Too large resource version” #27
• Full changelog

cluster-machine-approver

• Bug 1880344: Bump K8s dependencies to v0.18.9 #90
• Full changelog

cluster-monitoring-operator

• Bug 1906081: jsonnet: remove apiserver_request:availability30d #1016
• Bug 1892585: Client go 0.18.9 #978
• Bug 1887354: Backport fix checking if ClusterRoleBindings need update #956
• Bug 1858010: Backport fix for KubePodCrashLooping alert #952
• Bug 1888542: decrease CMO log verbosity from 3 to 2 #961
• Bug 1881043: Bump client-go & co. #945
• Bug 1859791: alert is firing KubeJobCompletion and KubeJobFailed at the same time #885
• Full changelog

cluster-network-operator

• Bug 1924137: Increase the initialDelaySeconds for liveness and readiness probes #967
• Bug 1849154: Fixes Proxy ReadinessEndpoints Validation #677
• Bug 1882502: SDN mount host’s /var/run/netns #805
• Bug 1891751: openshift-sdn: multitenant: join openshift-etcd-operator to etcd #851
• Bug 1886127: [release-4.5] sdn-ovs: don’t step on directory permissions. #842
• Bug 1886127: [4.5] sdn-ovs: fix liveness probe for downgrade case #837
• Bug 1886127: Handle downgrades from 4.6 to 4.5 #833
• Bug 1881429: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #799
• Bug 1874737: [release-4.5] OVN: Handle OVN db upgrades #779
• Bug 1868444: Fixes providing empty slice for HybridClusterNetwork #790
• Full changelog

cluster-node-tuning-operator

• Bug 1882005: Issue a warning when two or more profiles use the same priority. #157
• Bug 1880348: Bump to k8s 1.18.9 to fix bug in reflector not recovering from “Too large resource version” #155
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #395
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1894667: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #185
• Full changelog

cluster-policy-controller

• Bug 1904030: The quota controllers should resync on new resources and make progress #51
• Bug 1891527: openshift-object-counts quota is not dynamically updating as the resource is deleted #47
• Bug 1894666: fix bug in reflector not recovering from “Too large resource version” #46
• Full changelog

cluster-samples-operator

• Bug 1881068: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #325
• Full changelog

cluster-storage-operator

• Bug 1882394: UPSTREAM: <carry>: operator-sdk: return error if lock is not leader-for-life #96
• Bug 1882394: Delete lock created by CSO 4.6 #91
• Full changelog

cluster-version-operator

• Bug 1886939: vendor: Bump client-go to v0.18.9 #470
• Bug 1872906: pkg/start: Release leader lease on graceful shutdown #446
• Full changelog

console

• Bug 1895202: Access server API via kubernetes.default.svc from Helm endpoints #7133
• Bug 1898303: Use KUBEADM_PASSWORD_FILE by default #7228
• Bug 1908587: fix filesystem queries #7599
• Bug 1905909: Update library-go and replace runc module for v1.0.0-rc8 version #7477
• Bug 1898102: Ensure correct git URL for topology edit icon #7219
• Bug 1876922: fix unexpected changes of tabs when importing VMWare VMs #6553
• Bug 1896601: Tolerate missing status on OperatorGroups #7178
• Bug 1879017: Disable card model if using SRIOV interface #6623
• Bug 1896990: Handle values of 0 for maxUnavailable and maxSurge #7192
• Bug 1894782: Use correct service account for operator monitoring #7107
• Bug 1885228: Fix runtime error for basic users creating Prometheus instance #6833
• Bug 1893022: Fix git validation on selecting git type #7046
• Bug 1893277: deployment of vmware fails if VMware URL contains space at the end #7055
• Bug 1885582: Fix that the Start Pipeline form is not always validated correctly #6853
• Bug 1883225: Use new parameter prefix (tt.param.) for Tekton Trigger version 0.6+ #6759
• Bug 1883098: add legends under devconsole monitoring dashboard graphs #6755
• Bug 1874373: RHV URL validation is missing https:// #6551
• Bug 1877278: report errors when v2v-vmware ConfigMap is not available #6567
• Bug 1889982: pick latestCRDversion instead of latest/served true #6965
• Bug 1889783: Support ServiceBinding breaking api changes #6962
• Bug 1881380: Disable creation of External Mode Cluster in cloud environments #6706
• Bug 1884574: Include repo branch in URL for che icon #6815
• Bug 1883967: Fix layout issue which appears only on Safari #6798
• Bug 1883881: Avoid adding a newline between pipelinerun log fetches #6795
• Bug 1883177: Update node queries to exclude fstype, mountpoint #6781
• Bug 1882196: Add resource badges in the add trigger form dropdown #6734
• Bug 1852530: kubevirt - fix importing VMs with same vnicIDs for ovirt provider #5885
• Bug 1884411: Fix runtime error in legacy operand form #6810
• Bug 1879973: properly encode vpx URL #6803
• Bug 1883342: [Release 4.5] Convert Pipeline StartedBy Label to Annotation #6769
• Bug 1879016: kubevirt support only e1000e and virtio #6622
• Bug 1884760: add candidate-4.6, fast-4.6, and stable-4.6 channels #6822
• Bug 1877728: Fixes bug attaching block storage to pods, deployments in attach-storage page #6609
• Bug 1877290: fix edit flow with update git url #6568
• Bug 1878849: Use metadata.generatorName when create a pipeline trigger #6615
• Bug 1880376: Fix Add Pipeline Trigger for Pipeline Operator 1.1 #6675
• Bug 1879247: Fix inline taskSpec error in pipeline page #6638
• Bug 1881784: fix empty default value for pipeline parameters #6715
• Bug 1878214: Add support for more params and create resources only if required #6598
• Bug 1878713: Add fallback to builder image detection #6617
• Bug 1840253: Tighten cipher usage to library-go #6503
• Bug 1879224: Empty secret should be editable in generic secret form #6636
• Bug 1877012: Hide cluster upgrade UI on OpenShift Dedicated #6616
• Bug 1876461: remove the import VM from dev perspective #6552
• Full changelog

console-operator

• Bug 1876025: clidownloads: IBM Power and Z are supported #467
• Bug 1880307: Bump k8s vendors to 1.18.9. to fix bug in reflector not recovering from ‘Too large resource version’ #470
• Bug 1880307: Fix inconsistent vendoring in vendor/modules.txt #471
• Full changelog

docker-builder

• Bug 1921966: narrow scope of rhsm transient bind mount #214
• Force use of runc, since we know we’re privileged, and customize our seccomp filter #208
• Bug 1889956: CVE-2020-8564 #194
• Full changelog

etcd

• OWNERS: add component #62
• Bug 1884011: discover-etcd-initial-cluster: improve error handling when we dont scale member #58
• Full changelog

gcp-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #114
• Full changelog

haproxy-router

• Bug 1920421: Add tunnel-timeout and hard-stop-after options to haproxy template #250
• Bug 1921252: Prevent unnecessary reloads in router shards #251
• Bug 1906132: back port: Change router’s internal endpoint.ID to prevent HAProxy server line collisions #234
• Bug 1896914: Back port Clip haproxy.router.openshift.io/timeout annotation values to prevent bricking on upgrade #218
• Bug 1886214: haproxy-config.template: Only enable HTX for HTTP/2 #200
• Bug 1890534: Fix decreasing counter metrics when reloading HAProxy #205
• Bug 1885688: Back port Switch to periodic process reaper #195
• Bug 1879120: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #184
• Full changelog

hyperkube, tests

• Bug 1887311: UPSTREAM: 94712: [credentialprovider] avoid potential secret leaking while reading .dockercfg #25694
• Bug 1894918: Panic output due to timeouts in kube-apiserver #25751
• Bug 1916660: UPSTREAM: 97916: kube-aggregator: fix apiservice availability gauge #25800
• Bug 1879208: fixes a data race in SerializeObject function #25824
• Bug 1918919: broaden acceptance of scl sample s2i image usage messages #25816
• Bug 1912566: UPSTREAM: 97206: clean up executing request on panic #25777
• Bug 1907938: Nodes goes into NotReady state (VMware) #25773
• Bug 1907507: Fix skipping of SDN tests #25768
• Bug 1908764: Skew 4.5 to 4.6 tests are failing due to a misplaced skip (prevents all tests from running) #25772
• Bug 1884195: test/extended/operators: add etcd-quorum-guard to unevictable whitelist #25700
• UPSTREAM: <carry>: Bug 1893156: include / prefix in instance ID output #25655
• Bug 1899721: HPA: Ignore deleted pods. #25698
• Bug 1852695: CVE-2020-8559 compromised node could escalate to cluster level privileges #25656
• Bug 1828858: use net/http instead of client-go for e2e PDB test #25635
• Bug 1893742: move jenkins e2e nfs setup from docker.io to quay.io image #25654
• Bug 1880326: Backport disruption test improvements #25603
• Bug 1893071: move off docker.io in templates/builds/jenkins tests #25648
• Bug 1881351: KCM and KS graceful termination #25536
• Bug 1887942: [release-4.5] Pick scheduler v1beta1 componentconfig API #25252
• Bug 1883345: [release-4.5] Re-enable skipped conformance tests for IBM Cloud #25520
• Bug 1888002: move image ecosystem e2e suite from centos to rhel; create rhel only jenkins e2e suite #25387
• Bug 1879192: Make offline volume expansion tests more robust #25556
• Bug 1857268: UPSTREAM: 94252: If firstTimestamp is not set use eventTime when printing event #25461
• Bug 1886174: skip test during skew testing that won’t run on 4.6 #25591
• Bug 1868490: upgrade test use LoadBalancers with ExternalTrafficPolicy set to Local #25481
• Bug 1860789: test: Report an error message when a pod fails in a cmd test #25560
• Bug 1867800: Make EBS attachDisk idempotent #25400
• Bug 1856529: Add NET_RAW capability to internal_ports test #25518
• Bug 1877346: KubeAPIErrorsHigh firing due to too large resource version #25489
• Bug 1883235: Adjust wait duration for marketplace test #25557
• Bug 1882030: UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison #25541
• Bug 1877346: Fix bug for inconsistent lists served from etcd #25490
• Bug 1846451: UPSTREAM: 90419: update strategy used to reuse CPUs from init containers in CPUManager #25310
• Bug 1879650: For clusters upgraded from 4.1, skip the anonymous browser access test #25510
• Full changelog

insights-operator

• Bug 1889679: Collect installplans #244
• Bug 1914255: Red Hat image and crashlooping OpenShift pod collection #308
• Bug 1894243: Fixes records index on diskrecorder #262
• [release 4.5] Bug 1887763: Adds MachineConfigPool gatherer #214
• Bug 1905106: Collect spec config for clusteroperator resources #287
• [release 4.5] Bug 1888607: Fixes policyClient and the corresponding config. #227
• Bug 1904079: Add hostsubnet to sample archive & fix bug… #278
• Bug 1880318: Update k8s version to v0.18.6 #284
• [release 4.5] Bug 1887886: Add the namespace to the gatherers reports to avoid conflicts #219
• Backport e2e tests #252
• [release 4.5] Bug 1885515: Fixes ‘make build’ #204
• Bug 1884551: Adds PodDisruptionBudgets gather. #199
• Bug 1883175: Gather MachineSet info #195
• Bug 1880352: collect hostsubnet information #180
• Bug 1882237: Add new team members to OWNERS #191
• Full changelog

ironic

• Bug 1917966: Force update of dnsmasq #138
• Full changelog

ironic-inspector

• Bug 1917966: Force update of dnsmasq #57
• Full changelog

jenkins, jenkins-agent-maven

• Bug 1922554: Update ant plugin CVE-2020-11979 #1210
• Bug 1896402: various fixes #1175
• Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
• Full changelog

k8s-prometheus-adapter

• Bug 1897313: Populate both CPU and Memory resource container metrics if one is specified #37
• Full changelog

keepalived-ipfailover, pod

• Bug 1900725: Pod process container does not correctly reap zombie process with shareProcessNamespace: true #57
• Full changelog

kube-client-agent, kube-etcd-signer-server

• Bug 1872535: vendor: bump golang.org/x/text #23
• Full changelog

kube-proxy, sdn

• Bug 1904456: NetworkPolicy performance fixes, v2 #258
• Bug 1891455: Fix error handling from DNS nameservers #211
• Bug 1897478: Bump OVS to 2.13 #238
• Bug 1915008: Revert NetworkPolicy performance fixes (4.5) #242
• Bug 1904456: NetworkPolicy performance (pod caching) #229
• Bug 1894784: fix pod creation deadlock #217
• Bug 1901043: Enable conntrack for ovs-multitenant unless userspace proxy #225
• UPSTREAM<carry>: Bug 1880341: Fix bug in reflector not recovering from “Too large resource version” #215
• Bug 1895057: Ignore if netns is already deleted while deleting ns #218
• Bug 1878624: Invalid egressCIDR value causes sdn pods to fail on startup #187
• Bug 1881830: Emit a warning and ignore if empty cidr is passed to kubeproxy #195
• Bug 1878788: vxlan_monitor_test: fix flake #191
• Bug 1874798: Add NodeInformer to EgressIP #182
• Full changelog

kube-state-metrics

• Bug 1881103: Bump to fix a bug in client-go #36
• Full changelog

kube-storage-version-migrator

• Bug 1893637: Fix bug in reflector not recovering from “Too large resource version” #161
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1901495: Correctly compare SG rules in NP code #429
• Bug 1900491: Ensure members are deleted from pools when there is no endpoints #413
• Bug 1893996: Fix duplicated sg rules on NP crd #392
• Bug 1884192: Set read timeout for any request in K8sClient #360
• Bug 1860311: Civilize logging vol 2 #351
• Bug 1883419: Cleanup ports belonging to deleted nodes #354
• Full changelog

libvirt-machine-controllers

• Bug 1887373: Add leader election mechanism to release-4.5 #211
• Full changelog

machine-api-operator

• Bug 1869320: [release-4.5] [vSphere] Reduce sync period to 10 minutes #764
• Bug 1880343: Bump K8s dependencies to v0.18.9 #718
• Bug 1864352: Add leader election mechanism to release 4.5 #664
• Full changelog

machine-config-operator

• Bug 1884195: etcd-quorum-guard remove toleration timeouts #2133
• Bug 1880333: bump k8s.io/client-go to 0.18.6 #2354
• Bug 1873207: [baremetal] Wait for NM dhcp nameserver population #2119
• Bug 1907636: [vsphere, openstack] Add missing proxy settings to resolv-prepender #2347
• Bug 1907636: [on-prem] export proxy variables to be taken in account #2301
• Bug 1903655: Use mc name as finalizer for kubelet config #2274
• Bug 1900013: Drop kubelet logging back down to level 3 #2247
• Bug 1904082: ctrcfg_test: Wait for our prior target config #2284 #2284
• Bug 1890797: Set NonVirtualIP in mdns plugin config #2137
• Bug 1874815: pkg/server: reduce calls to ignition parse #2053
• Bug 1856529: Create a drop-in file for cri-o’s default_capabilities #2050
• Bug 1862874: [baremetal & friends] verify resolv.conf in HAProxy static pod synced with host resolv.conf #1974
• Bug 1881147: OpenStack: Don’t failover api vip if loadbalanced endpoint is responding #2110
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1868772: [backport 4.5] Change error message (for missing kubeconfig) #26
• Full changelog

must-gather

• Bug 1887446: [release-4.5]Backport gather_core_dumps #183
• Full changelog

oauth-server

• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #66
• Bug 1882055: Fix bug in reflector not recovering from “Too large resource version” #57
• Full changelog

openshift-apiserver

• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #164
• Bug 1906429: When using webhooks in OCP 4.5 fails to rollout latest deploymentconfig #168
• Bug 1883994: Fix label value validation for BuildConfigs #144
• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #137
• Full changelog

openshift-controller-manager

• remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #163
• Bug 1883994: Fix label value validation for Builds #138
• Bug 1880357: Bump k8s.io packages #140
• Full changelog

openshift-state-metrics

• Bug 1882448: bump k8s.io/client-go dependency #58
• Full changelog

openstack-machine-controllers

• Bug 1864352: Update leader election for release 4.5 #117
• Full changelog

operator-lifecycle-manager

• Bug 1928263: Fix zero-delay resyncs for certain registry update policies. #2006
• Bug 1904584: Check sa owner 4.5 #1909
• Bug 1896079: Services should not have duplicate ownerrefs #1857
• Bug 1921484: use OLM client when installing CRDs #1985
• Bug 1910401: Preserve original .status.lastUpdateTime in copied CSVs. #1930
• Bug 1905137: Recreate pending installplan if deleted before approval #1894
• Bug 1892372: OLM should use valid CA certs if available #1865
• Bug 1882444: remove extra polling check #1780
• Bug 1878297: remove duplicate catalog source pod when polling #1765
• Bug 1887944: ensure installplan step resource manifests reference configmaps #1809
• Bug 1880359: [release-4.5] Bump 1.18.9 #1778
• Bug 1878307: shorten catalog sync interval if polling is enabled #1764
• Bug 1878359: update catalog image pull policy #1760
• Full changelog

operator-marketplace

• Bug 1909217: Do not report degraded when Marketplace exits gracefully #371
• Bug 1881542: Set all CO conditions on meeting expected sync ratio #356
• Bug 1867799: Correctly count non-default Marketplace CRs #324
• Bug 1873546: Increase registry delay for large payloads #335
• Full changelog

operator-registry

• Bug 1904554: TestListPackages is flaky #533
• Bug 1902803: Reconstruct replaces/splits for Listbundles from channel_entry. #524
• Bug 1845588: fix(images): use docker/podman create and cp for exec unpacking #400
• Full changelog

ovirt-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #68
• Full changelog

ovn-kubernetes

• Bug 1921283: [4.5] Fix MCS-blocking iptables rules #426
• Bug 1882694: Pin OVS to latest 4.4.22 RPM version #290
• Bug 1908921: ovn/node: use node name as chassis hostname #390
• Bug 1877561: [release-4.5]Fix orphaned ACLs backport to 4.5 #287
• Bug 1888352: Fix IPv6 neighbor discovery hack #313
• Bug 1862700: Fix ovnkube-node aggressive memory allocation to prevent memory bloating #227
• Bug 1882092: Pin 4.5 OVN to 4.4.24 #284
• Bug 1868501: Do not default HO cluster subnets #268
• Full changelog

prometheus

• Bug 1892583: bump k8s.io/client-go to v0.18.9 #68
• Bug 1881111: go.mod,go.sum: Bump client-go & co. #59
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1891815: Revert “Bug 1881077:go.sum,go.mod: Bump client-go & co. to fix known bug” #99
• Bug 1881077: go.sum,go.mod: Bump client-go & co. to fix known bug #95
• Full changelog

prometheus-node-exporter

• Bug 1890466: Fix issues with too many log messages in NFS collector #71
• Full changelog

service-ca-operator

• Bug 1880360: Fix bug in reflector not recovering from “Too large resource version” #124
• Full changelog

---

View changelog in Markdown or change previous release: 4.5.324.5.314.5.304.5.294.5.284.5.274.5.264.5.254.5.244.5.234.5.224.5.214.5.204.5.194.5.184.5.174.5.164.5.154.5.144.5.134.5.124.5.114.5.104.5.94.5.84.5.74.5.64.5.54.5.44.5.34.5.24.5.14.5.1-rc.04.5.04.5.0-rc.74.5.0-rc.64.5.0-rc.54.5.0-rc.44.5.0-rc.34.5.0-rc.24.5.0-rc.14.4.334.4.324.4.314.4.304.4.294.4.284.4.274.4.264.4.254.4.244.4.234.4.224.4.214.4.204.4.194.4.184.4.174.4.164.4.154.4.144.4.134.4.124.4.114.4.104.4.94.4.84.4.74.4.64.4.54.4.44.4.34.4.24.4.14.4.04.4.0-rc.134.4.0-rc.124.4.0-rc.114.4.0-rc.104.4.0-rc.94.4.0-rc.84.4.0-rc.74.4.0-rc.64.4.0-rc.54.4.0-rc.44.4.0-rc.34.4.0-rc.24.4.0-rc.14.4.0-rc.04.3.404.3.384.3.354.3.334.3.324.3.314.3.294.3.284.3.274.3.264.3.254.3.244.3.234.3.224.3.214.3.194.3.184.3.174.3.164.3.154.3.144.3.134.3.124.3.114.3.104.3.94.3.84.3.74.3.54.3.34.3.24.3.14.3.04.3.0-rc.34.3.0-rc.24.3.0-rc.14.3.0-rc.04.2.364.2.344.2.334.2.324.2.304.2.294.2.284.2.274.2.264.2.254.2.244.2.234.2.224.2.214.2.204.2.194.2.184.2.164.2.154.2.144.2.134.2.124.2.114.2.104.2.94.2.84.2.74.2.64.2.54.2.44.2.24.2.14.2.04.2.0-rc.54.2.0-rc.44.2.0-rc.34.2.0-rc.24.2.0-rc.14.2.0-rc.04.1.414.1.384.1.374.1.344.1.314.1.304.1.294.1.284.1.274.1.264.1.254.1.244.1.234.1.224.1.214.1.204.1.194.1.184.1.174.1.164.1.154.1.144.1.134.1.124.1.114.1.104.1.94.1.84.1.74.1.64.1.44.1.34.1.24.1.14.1.04.1.0-rc.94.1.0-rc.84.1.0-rc.74.1.0-rc.64.1.0-rc.54.1.0-rc.44.1.0-rc.34.1.0-rc.24.1.0-rc.14.1.0-rc.0───4.9.0-0.nightly-2021-06-21-1918584.9.0-0.nightly-2021-06-21-1702584.9.0-0.nightly-2021-06-21-1459544.9.0-0.nightly-2021-06-21-1316054.9.0-0.nightly-2021-06-21-0847034.9.0-0.nightly-2021-06-21-0723384.9.0-0.nightly-2021-06-20-0845494.9.0-0.nightly-2021-06-20-0704164.9.0-0.nightly-2021-06-20-0157014.9.0-0.nightly-2021-06-19-2354074.9.0-0.nightly-2021-06-19-2006214.9.0-0.nightly-2021-06-19-1718524.9.0-0.nightly-2021-06-19-1436134.9.0-0.nightly-2021-06-19-1303244.9.0-0.nightly-2021-06-19-0859364.9.0-0.nightly-2021-06-19-0733204.9.0-0.nightly-2021-06-19-0346064.9.0-0.nightly-2021-06-18-2003024.9.0-0.nightly-2021-06-18-1426394.9.0-0.nightly-2021-06-18-1252284.9.0-0.nightly-2021-06-18-0610224.9.0-0.nightly-2021-06-18-0029314.9.0-0.nightly-2021-06-17-2254224.9.0-0.nightly-2021-06-17-1953444.9.0-0.nightly-2021-06-17-1406104.9.0-0.nightly-2021-06-17-1252134.9.0-0.nightly-2021-06-17-0525444.9.0-0.nightly-2021-06-17-0216444.9.0-0.nightly-2021-06-16-193806───4.9.0-0.ci-2021-06-21-1907494.9.0-0.ci-2021-06-21-1836334.9.0-0.ci-2021-06-21-1611164.9.0-0.ci-2021-06-21-1541164.9.0-0.ci-2021-06-21-1340344.9.0-0.ci-2021-06-21-1310344.9.0-0.ci-2021-06-21-1050134.9.0-0.ci-2021-06-21-1020134.9.0-0.ci-2021-06-21-0749094.9.0-0.ci-2021-06-19-1050014.9.0-0.ci-2021-06-19-0815434.9.0-0.ci-2021-06-19-0722054.9.0-0.ci-2021-06-19-0514384.9.0-0.ci-2021-06-19-0435374.9.0-0.ci-2021-06-19-0201214.9.0-0.ci-2021-06-18-2313114.9.0-0.ci-2021-06-18-2226114.9.0-0.ci-2021-06-18-201220───4.8.0-0.nightly-2021-06-21-1755374.8.0-0.nightly-2021-06-21-1518324.8.0-0.nightly-2021-06-21-1438324.8.0-0.nightly-2021-06-19-0051194.8.0-0.nightly-2021-06-18-1434504.8.0-0.nightly-2021-06-18-1354504.8.0-0.nightly-2021-06-18-0558404.8.0-0.nightly-2021-06-17-2228234.8.0-0.nightly-2021-06-17-1545394.8.0-0.nightly-2021-06-17-1209364.8.0-0.nightly-2021-06-17-0020344.8.0-0.nightly-2021-06-16-190035───4.8.0-0.ci-2021-06-21-1821094.8.0-0.ci-2021-06-21-1502334.8.0-0.ci-2021-06-21-1325124.8.0-0.ci-2021-06-21-1255124.8.0-0.ci-2021-06-21-0935354.8.0-0.ci-2021-06-18-2342024.8.0-0.ci-2021-06-14-0900144.8.0-0.ci-2021-06-13-0603134.8.0-0.ci-2021-06-12-2059134.8.0-0.ci-2021-06-12-1604314.8.0-0.ci-2021-06-12-131617───4.7.0-0.nightly-2021-06-20-0933084.7.0-0.nightly-2021-06-19-1856364.7.0-0.nightly-2021-06-19-1400004.7.0-0.nightly-2021-06-19-0539374.7.0-0.nightly-2021-06-18-2026104.7.0-0.nightly-2021-06-18-1158404.7.0-0.nightly-2021-06-18-0356104.7.0-0.nightly-2021-06-18-0302524.7.0-0.nightly-2021-06-17-2248434.7.0-0.nightly-2021-06-17-1731404.7.0-0.nightly-2021-06-17-1016214.7.0-0.nightly-2021-06-17-0756324.7.0-0.nightly-2021-06-16-202127───4.7.0-0.ci-2021-06-21-1440554.7.0-0.ci-2021-06-21-1309204.7.0-0.ci-2021-06-20-1528194.7.0-0.ci-2021-06-19-1723134.7.0-0.ci-2021-06-19-1524204.7.0-0.ci-2021-06-19-0414114.7.0-0.ci-2021-06-18-0544534.7.0-0.ci-2021-06-16-0907404.7.0-0.ci-2021-06-12-0043394.7.0-0.ci-2021-06-11-172414───4.6.0-0.nightly-2021-06-19-1655444.6.0-0.nightly-2021-06-19-0718334.6.0-0.nightly-2021-06-18-1235564.6.0-0.nightly-2021-06-18-1141444.6.0-0.nightly-2021-06-17-1257294.6.0-0.nightly-2021-06-17-0850294.6.0-0.nightly-2021-06-17-0758094.6.0-0.nightly-2021-06-16-154412───4.6.0-0.ci-2021-06-21-1439214.6.0-0.ci-2021-06-19-1543544.6.0-0.ci-2021-06-19-0620104.6.0-0.ci-2021-06-18-1816364.6.0-0.ci-2021-06-18-1604374.6.0-0.ci-2021-06-18-1534374.6.0-0.ci-2021-06-16-1857424.6.0-0.ci-2021-06-16-0902224.6.0-0.ci-2021-06-11-1513284.6.0-0.ci-2021-06-11-051019───4.5.0-0.nightly-2021-06-21-1814164.5.0-0.nightly-2021-06-21-1525274.5.0-0.nightly-2021-06-21-1240124.5.0-0.nightly-2021-06-16-1525014.5.0-0.nightly-2021-06-14-2007464.5.0-0.nightly-2021-06-14-1240514.5.0-0.nightly-2021-06-11-195732───4.5.0-0.ci-2021-06-16-1226534.5.0-0.ci-2021-06-16-1140484.5.0-0.ci-2021-06-16-0922044.5.0-0.ci-2021-06-15-1609174.5.0-0.ci-2021-06-11-1542484.5.0-0.ci-2021-06-03-1553054.5.0-0.ci-2021-06-02-1545484.5.0-0.ci-2021-05-30-1527434.5.0-0.ci-2021-05-28-1346344.5.0-0.ci-2021-05-18-1422084.5.0-0.ci-2021-04-29-184058───4.4.0-0.nightly-2021-03-19-0223154.4.0-0.nightly-2021-03-18-1425124.4.0-0.nightly-2021-03-17-1720504.4.0-0.nightly-2021-03-16-1720024.4.0-0.nightly-2021-03-15-164528───4.4.0-0.ci-2021-05-18-1341234.4.0-0.ci-2021-05-13-0938044.4.0-0.ci-2021-05-12-1755194.4.0-0.ci-2021-03-15-1949044.4.0-0.ci-2021-03-10-1141234.4.0-0.ci-2021-03-10-0716204.4.0-0.ci-2021-03-09-1449434.4.0-0.ci-2021-02-22-0538354.4.0-0.ci-2021-02-11-2129254.4.0-0.ci-2021-02-04-021441───4.3.0-0.nightly-2021-02-23-0608134.3.0-0.nightly-2021-02-22-1412164.3.0-0.nightly-2021-02-21-1413474.3.0-0.nightly-2021-02-20-2305584.3.0-0.nightly-2021-02-20-1913274.3.0-0.nightly-2020-04-13-1904244.3.0-0.nightly-2020-03-23-1304394.3.0-0.nightly-2020-03-04-222846───4.3.0-0.ci-2021-03-08-1857374.3.0-0.ci-2021-02-18-1856424.3.0-0.ci-2021-02-04-1624084.3.0-0.ci-2021-02-04-1544084.3.0-0.ci-2021-02-02-2244224.3.0-0.ci-2021-02-02-1101494.3.0-0.ci-2021-02-01-2350094.3.0-0.ci-2021-02-01-2108544.3.0-0.ci-2020-12-19-0417314.3.0-0.ci-2020-12-12-042426───4.2.0-0.nightly-2021-02-22-1412194.2.0-0.nightly-2021-02-22-0221514.2.0-0.nightly-2021-02-21-1627594.2.0-0.nightly-2021-02-20-2015324.2.0-0.nightly-2021-02-20-161619───4.2.0-0.ci-2021-04-13-2038314.2.0-0.ci-2021-02-04-1613214.2.0-0.ci-2021-02-04-1543214.2.0-0.ci-2021-02-03-1555064.2.0-0.ci-2021-02-02-1937314.2.0-0.ci-2021-02-01-2350154.2.0-0.ci-2021-01-25-1816084.2.0-0.ci-2021-01-25-1746084.2.0-0.ci-2021-01-16-0519184.2.0-0.ci-2021-01-09-120434───4.1.0-0.nightly-2020-07-29-2108564.1.0-0.nightly-2020-05-28-0403214.1.0-0.nightly-2020-05-27-0424224.1.0-0.nightly-2020-05-26-0357284.1.0-0.nightly-2020-05-25-040303───4.1.0-0.ci-2021-02-04-1612324.1.0-0.ci-2021-02-04-1542324.1.0-0.ci-2021-02-03-1552464.1.0-0.ci-2021-02-02-1936454.1.0-0.ci-2021-02-02-1101324.1.0-0.ci-2021-02-01-2350214.1.0-0.ci-2021-02-01-211231

Source code for this page located on github