Back to index

4.5.35

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.5.35-x86_64

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

• 4.5.34 (changes) - Failed Success
• 4.5.33 (changes) - Success
• 4.5.32 (changes) - Failed
• 4.5.31 (changes) - Success
• 4.5.30 (changes) - Success
• 4.5.29 (changes) - Success
• 4.5.28 (changes) - Success
• 4.5.27 (changes) - Failed
• 4.5.25 (changes) - Failed
• 4.5.24 (changes) - Success
• 4.5.23 (changes) - Failed
• 4.5.22 (changes) - Success
• 4.5.21 (changes) - Success
• 4.5.20 (changes) - Failed
• 4.5.19 (changes) - Success
• 4.5.18 (changes) - Success
• 4.5.17 (changes) - Failed
• 4.5.16 (changes) - Success
• 4.5.15 (changes) - Success
• 4.5.14 (changes) - Failed
• 4.5.13 (changes) - Success
• 4.5.12 (changes) - Success
• 4.5.11 (changes) - Failed
• 4.5.10 (changes) - Success
• 4.5.9 - Success
• 4.5.8 (changes) - Success
• 4.5.7 (changes) - Failed
• 4.5.6 (changes) - Success
• 4.5.5 (changes) - Success
• 4.5.4 (changes) - Failed
• 4.5.3 (changes) - Failed
• 4.4.33 (changes) - Success Failed
• 4.4.32 (changes) - Success
• 4.4.31 (changes) - Failed
• 4.4.30 (changes) - Success
• 4.4.29 (changes) - Failed
• 4.4.28 (changes) - Success
• 4.4.27 (changes) - Success
• 4.4.26 (changes) - Failed
• 4.4.25 (changes) - Success
• 4.4.24 (changes) - Success
• 4.4.23 (changes) - Failed
• 4.4.22 (changes) - Failed
• 4.4.21 (changes) - Success
• 4.4.20 (changes) - Failed
• 4.4.19 (changes) - Failed
• 4.4.18 (changes) - Success
• 4.4.17 (changes) - Failed
• 4.4.16 (changes) - Success
• 4.4.15 (changes) - Failed
• 4.4.14 (changes) - Failed
• 4.4.13 (changes) - Success

Upgrades to:

• 4.6.46 (changes) - Failed
• 4.6.45 (changes) - Failed
• 4.6.44 (changes) - Failed
• 4.6.43 (changes) - Failed
• 4.6.42 (changes) - Failed
• 4.6.41 (changes) - Failed
• 4.6.40 (changes) - Success
• 4.6.39 (changes) - Failed
• 4.6.38 (changes) - Failed
• 4.6.37 (changes) - Failed
• 4.6.36 (changes) - Failed
• 4.6.35 (changes) - Success
• 4.6.34 (changes) - Failed
• 4.6.33 (changes) - Success
• 4.6.32 (changes) - Failed
• 4.6.31 (changes) - Failed Failed
• 4.6.30 (changes) - Failed
• 4.6.29 (changes) - Failed
• 4.6.28 (changes) - Failed
• 4.6.27 (changes) - Success Failed
• 4.6.26 (changes) - Failed
• 4.6.25 (changes) - Success
• 4.6.24 (changes) - Failed
• 4.6.23 (changes) - Success
• 4.6.22 (changes) - Success Failed
• 4.5.41 (changes) - Success
• 4.5.40 (changes) - Failed
• 4.5.39 (changes) - Success
• 4.5.38 (changes) - Success
• 4.5.37 (changes) - Success
• 4.5.36 (changes) - Success Failed

---

Loading changelog, this may take a while ...

Changes from 4.5.9

Created: 2021-03-15 02:18:03 +0000 UTC

Image Digest: sha256:ea89ed06f4a5c38dde36f053b250df4bab184729c1adf60afa43d0de8b1930f3

Release 4.5.35 was created from registry.ci.openshift.org/ocp/release:4.5.0-0.nightly-2021-03-09-132412

Components

• Kubernetes 1.18.3
• Red Hat Enterprise Linux CoreOS upgraded from 45.82.202009040230-0 to 45.82.202103091131-0 (diff)

Removed images

• local-storage-static-provisioner

Rebuilt images without code change

• aws-pod-identity-webhook git 2251f7e2 sha256:8e6a68fa648af5d62ce21c5eb5106674f9e1f473728d19800678c86236841f6f
• cluster-autoscaler git c821779c sha256:74440ccc793cee3516aa0ed99f1ca5cdd7cf20482cc83e2a4ffdbfcac326a746
• cluster-bootstrap git 04c97c30 sha256:64377a623ff0e8a43cd1ee0e2be9eb4d04febfc6d1f6eac5a434297f38ef5e2d
• cluster-node-tuned git 27b3ad70 sha256:c34f5f7d952f112902545bd33042d98bab4b8670d77eba0fc0c37b96d485bd25
• cluster-update-keys git 7befe524 sha256:96820b4d82640e93e98c4c5ab8aaf2dafbcfe4f2396729e4ee5d66adecfb77a8
• configmap-reloader git 8b987c8e sha256:ca13f42f4d6d98c1663f8083fa0b5b4f0c85bde2d4fde5b6944912a98c08e17b
• container-networking-plugins git d097ce25 sha256:cb1f5c36c1ac088e48dd6a002dadd635eaa7e98dd315cfd93d73dcbf4a9cc2a1
• csi-snapshot-controller git f23c075c sha256:83bb66df6d9fb6dd60edf9ba3f6d3f3a307e86b7ff541d0245a5cb29284afa54
• docker-registry git 861af923 sha256:c73b56777690a719ca593022df0836ff2b2ea6b69387789385e36942ba83e2d1
• grafana git f6535967 sha256:fc7a723bc42708cd01b176c97df06e99e328eba771231af7e1be73c842dbfb8c
• ironic-hardware-inventory-recorder git 09f6db6b sha256:a9d728903c7dc326410d013f79cf48746eaaa8d311e223f376d44236b484e8fc
• ironic-ipa-downloader git 999c80f1 sha256:b5793574ce022fb7597e0ce11adc8b04288916fd66fcdd851d90a2bbcf2202be
• ironic-machine-os-downloader git 561c7d4c sha256:ca166d6141d22bf68fc111a146f8308a163c8cecabe14217384efe90a3177395
• ironic-static-ip-manager git 058e8fd2 sha256:26f67a1cccb8351718df54a37d2994e8c5e4bfee24d198cef3d9ee07adefa737
• kube-rbac-proxy git 76fc3658 sha256:3336f9f5a3f5a111c6f7e929af45043f1b34ec04c59fec5e8a04d8fc7f10bfcb
• machine-os-content sha256:b327369d2401b148f23877b4b9017ad71f54ac4be30d2d19f350d551d76cafae
• mdns-publisher git 0e41fab1 sha256:f8090033c6c26d515f90651b2bb511d9d7e0ae280565f117808b0f9ccd0c9d89
• multus-admission-controller git 0bd3ff5e sha256:60b927d591c7737fc2c27085754a011f54b8dd7222710c39096d6c2cedcd9153
• multus-cni git 69a29635 sha256:6a75c549d30d2759a15a832fc2c554d765add8ea1c2566e765435153b012874d
• multus-route-override-cni git 7f6f53e3 sha256:9a74eb2f06f785a3491e521cf74e0856a21a988b7c7f62ded29e29214543ed06
• oauth-proxy git afb73cdd sha256:747f9e15fe53b485d3ebdacd8d76e60468d317b8327ae174fd0a7dcb40fa7e1a
• prom-label-proxy git cfcfdbd1 sha256:c3a062998572151d2eb9124827f3428f5b1725eabbb52ddd445ac781a4c87db9
• prometheus-alertmanager git 26fa6b42 sha256:38c0410ee0ae4d725ea2252d221447a3507484faa7aea35d33e6a7903e18408d
• telemeter git ca9c4f2c sha256:aec1ba8f7d40c08280d51aec974b7fe23075e55d098d069bbdc7d442909b68d4
• thanos git 0d2ebce5 sha256:4cdbafaf3559f768ae371a9f5ab870178753ed3e75b917bceb76b5b96583cd89

aws-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #342
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 1918962: vsphere destroy: delete tag category created by installer #4580
• Bug 1920767: disable anonymous auth on bootstrap nodes #4597
• Bug 1891168: data/data/gcp: be pedantic about setting the region #4301
• Bug 1876581: upi/aws Define load balancer health checks #4358
• Bug 1877374: Remove unused bootstrap etcd cert generation mechanism #4150
• Bug 1889775: [release-4.5] vSphere: Update dockerfile removing certificate #4283
• install-approvers: add staebler #4299
• Bug 1874009: Ensure proper tagging of compute nodes ports #4120
• Bug 1880134: destroy/gcp: correct extract service account email from IAM policy binding member #4195
• Bug 1878369: openstack: Upgrade the CI build image #4164
• Bug 1872629: OpenStack: dynamically set end of DHCP allocation pool #4094
• Bug 1874582: use https for lb probes in Azure UPI #4123
• Full changelog

baremetal-machine-controllers

• Bug 1864352: Update leader election for release 4.5 #106
• Full changelog

baremetal-operator

• Bug 1874599: Always delete found host from Ironic on deletion #97
• Full changelog

baremetal-runtimecfg

• Bug 1926730: add CloseIdleConnections for HTTP K8S API healthcheck #122
• Bug 1888301: Add check for iptables rule to keepalived-monitor #105
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1920676: add timestamps marking start and end for must-gather and inspect #718
• Bug 1884580: Set appropriate owner references when creating a job from cronjob #602
• Bug 1860789: Rebase k8s to 1.18.8 to enable approving CSRs on a 4.6 server #551
• Bug 1876238: fix typo in oc adm upgrade help #557
• Bug 1875551: must-gather: move gather init container under containers #554
• Full changelog

cloud-credential-operator

• Bug 1898199: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #269
• Bug 1883412: Update upgradeable condition on admin cred changes. #253
• Bug 1871713: Mark Manual Clusters Upgradeable=False If 4.6 Cred Request Secrets Are Not Provisioned #244
• Full changelog

cluster-authentication-operator

• Bug 1879417: don’t error out on non-json output of password grant attempt #349
• Bug 1877960: [release-4.5] router-secrets: set named certificates to empty array instead of nil when none found #342
• Full changelog

cluster-autoscaler-operator

• Bug 1879162: ensure full boolean arguments #164
• Bug 1880320: Bump K8s dependencies to v0.18.9 #169
• Full changelog

cluster-config-operator

• Bug 1905576: [release-4.5] Add warning of the consequences of changing bound token issuer #180
• Bug 1878007: Add Controller to Normalize the Operator Log Level Values #150
• Bug 1880304: Fix bug in reflector not recovering from “Too large resource version” #155
• Bug 1879492: Add secure access token annotation controller to handle downgrade from 4.6 #153
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1881359: Run the controller on master nodes #52
• Bug 1880309: Bump k8s.io/client-go to v0.18.6 to fix bug in reflector not recovering from “Too large resource version” #53
• Full changelog

cluster-dns-operator

• [Release 4.5] Bug 1880311: Fix bug in reflector not recovering from “Too large resource version” #198
• Full changelog

cluster-etcd-operator

• Bug 1924913: A valid etcd endpoint should have the URL scheme prepended. #536
• Bug 1906483: Use socket readiness probe to avoid generating zombies #510
• Bug 1897543: DR: Make restore pod yaml specific to restoring node #497
• Bug 1894267: Remove the rollbackcopier #494
• Bug 1899563: remove etcdMemberIPMigrator controller #389
• Bug 1883268: remove erroneously specified label drop rules #452
• Bug 1877374: Render bootstrap certificates #438
• OWNERS: change component to Etcd #471
• Bug 1877930: Use restore pod yaml from the backup when restoring #442
• Bug 1880313: vendor: bump k8s to 1.18.6 to fix bug in reflector not recovering from “Too large resource version” #447
• Bug 1859684: Exclude bootstrap in the env variable ETCDCTL_ENDPOINTS #402
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #434
• Full changelog

cluster-image-registry-operator

• Bug 1916859: Sync status to spec with regards to Swift config #656
• Bug 1895856: httpSecret should be generated when it is not set #636
• Bug 1894621: Avoiding bootstrap failure on unavailable swift #635
• Bug 1886603: Remove unsafe type casting #623
• Bug 1886849: panic during creation of Azure storage container #624
• Bug 1880314: Fix bug in reflector not recovering from “Too large resource version” #616
• Bug 1843244: Add documentation for Logging field #614
• Bug 1880485: Retrying in case of conflict during Config update #613
• Bug 1879176: Alerting on failed image prune job #612
• Bug 1858927: Fix TestPodAffinityConfiguration flake #581
• Full changelog

cluster-ingress-operator

• Bug 1920421: Add “ingress.operator.openshift.io/hard-stop-after” annotation #538
• [Release 4.5] Bug 1880315: Fix bug in reflector not recovering from “Too large resource version” #461
• Bug 1878148: Backport: Delete Router Deployment Only Upon DNSRecord Deletion #456
• Bug 1874244: publishRecordToZones: Fix status merge #449
• Bug 1868257: dns: Reread cloud credentials secret if it changes #443
• Full changelog

cluster-kube-apiserver-operator

• BUG 1885353: protect openshift traffic by using dedicated flowschema #968
• Bug 1880322: fix bug in reflector not recovering from “Too large resource version” #954
• Bug 1874597: static-pod-installer: remove deadlock by recreating inst… #942
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1880324: fix bug in reflector not recovering from “Too large reso… #461
• Bug 1881534: Use internal load balancer instead of localhost 4.5 #455
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #445
• Full changelog

cluster-kube-scheduler-operator

• Bug 1915363: Sync new kube-scheduler-client-cert-key on recovery #317
• Bug 1893202: [release-4.5] Extend Prometheus E2E timeout #299
• Bug 1887942: [release-4.5] Switch to v1beta1 Scheduler config to bridge between Policy/Plugin APIs #290
• Bug 1880326: fix bug in reflector not recovering from “Too large reso… #287
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #278
• Full changelog

cluster-kube-storage-version-migrator-operator

• Bug 1880327: fix bug in reflector not recovering from “Too large resource version” #27
• Full changelog

cluster-machine-approver

• Bug 1880344: Bump K8s dependencies to v0.18.9 #90
• Full changelog

cluster-monitoring-operator

• Bug 1906081: jsonnet: remove apiserver_request:availability30d #1016
• Bug 1892585: Client go 0.18.9 #978
• Bug 1887354: Backport fix checking if ClusterRoleBindings need update #956
• Bug 1858010: Backport fix for KubePodCrashLooping alert #952
• Bug 1888542: decrease CMO log verbosity from 3 to 2 #961
• Bug 1881043: Bump client-go & co. #945
• Bug 1859791: alert is firing KubeJobCompletion and KubeJobFailed at the same time #885
• Bug 1877256: disable grafana telemetry #922
• Bug 1858010: decrease alerts severity #926
• Full changelog

cluster-network-operator

• Bug 1924137: Increase the initialDelaySeconds for liveness and readiness probes #967
• Bug 1849154: Fixes Proxy ReadinessEndpoints Validation #677
• Bug 1882502: SDN mount host’s /var/run/netns #805
• Bug 1891751: openshift-sdn: multitenant: join openshift-etcd-operator to etcd #851
• Bug 1886127: [release-4.5] sdn-ovs: don’t step on directory permissions. #842
• Bug 1886127: [4.5] sdn-ovs: fix liveness probe for downgrade case #837
• Bug 1886127: Handle downgrades from 4.6 to 4.5 #833
• Bug 1881429: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #799
• Bug 1874737: [release-4.5] OVN: Handle OVN db upgrades #779
• Bug 1868444: Fixes providing empty slice for HybridClusterNetwork #790
• Full changelog

cluster-node-tuning-operator

• Bug 1882005: Issue a warning when two or more profiles use the same priority. #157
• Bug 1880348: Bump to k8s 1.18.9 to fix bug in reflector not recovering from “Too large resource version” #155
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #395
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1894667: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #185
• Full changelog

cluster-policy-controller

• Bug 1904030: The quota controllers should resync on new resources and make progress #51
• Bug 1891527: openshift-object-counts quota is not dynamically updating as the resource is deleted #47
• Bug 1894666: fix bug in reflector not recovering from “Too large resource version” #46
• Full changelog

cluster-samples-operator

• Bug 1881068: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #325
• Full changelog

cluster-storage-operator

• Bug 1882394: UPSTREAM: <carry>: operator-sdk: return error if lock is not leader-for-life #96
• Bug 1882394: Delete lock created by CSO 4.6 #91
• Bug 1874873: Move notUpgradeable check later to prevent z-stream upgrade failures #83
• Full changelog

cluster-svcat-apiserver-operator

• Bug 1854978: Remove servicecatalogapiserver CRD #91
• Bug 1866052: Update golang.org/x/text to v0.3.3 #94
• Full changelog

cluster-svcat-controller-manager-operator

• Bug 1854978: Remove servicecatalogcontrollermanager CRD #78
• Full changelog

cluster-version-operator

• Bug 1931025: pkg/cvo: Use shutdownContext for final status synchronization #525
• Bug 1886939: vendor: Bump client-go to v0.18.9 #470
• Bug 1872906: pkg/start: Release leader lease on graceful shutdown #446
• Full changelog

console

• Bug 1895202: Access server API via kubernetes.default.svc from Helm endpoints #7133
• Bug 1898303: Use KUBEADM_PASSWORD_FILE by default #7228
• Bug 1908587: fix filesystem queries #7599
• Bug 1905909: Update library-go and replace runc module for v1.0.0-rc8 version #7477
• Bug 1898102: Ensure correct git URL for topology edit icon #7219
• Bug 1876922: fix unexpected changes of tabs when importing VMWare VMs #6553
• Bug 1896601: Tolerate missing status on OperatorGroups #7178
• Bug 1879017: Disable card model if using SRIOV interface #6623
• Bug 1896990: Handle values of 0 for maxUnavailable and maxSurge #7192
• Bug 1894782: Use correct service account for operator monitoring #7107
• Bug 1885228: Fix runtime error for basic users creating Prometheus instance #6833
• Bug 1893022: Fix git validation on selecting git type #7046
• Bug 1893277: deployment of vmware fails if VMware URL contains space at the end #7055
• Bug 1885582: Fix that the Start Pipeline form is not always validated correctly #6853
• Bug 1883225: Use new parameter prefix (tt.param.) for Tekton Trigger version 0.6+ #6759
• Bug 1883098: add legends under devconsole monitoring dashboard graphs #6755
• Bug 1874373: RHV URL validation is missing https:// #6551
• Bug 1877278: report errors when v2v-vmware ConfigMap is not available #6567
• Bug 1889982: pick latestCRDversion instead of latest/served true #6965
• Bug 1889783: Support ServiceBinding breaking api changes #6962
• Bug 1881380: Disable creation of External Mode Cluster in cloud environments #6706
• Bug 1884574: Include repo branch in URL for che icon #6815
• Bug 1883967: Fix layout issue which appears only on Safari #6798
• Bug 1883881: Avoid adding a newline between pipelinerun log fetches #6795
• Bug 1883177: Update node queries to exclude fstype, mountpoint #6781
• Bug 1882196: Add resource badges in the add trigger form dropdown #6734
• Bug 1852530: kubevirt - fix importing VMs with same vnicIDs for ovirt provider #5885
• Bug 1884411: Fix runtime error in legacy operand form #6810
• Bug 1879973: properly encode vpx URL #6803
• Bug 1883342: [Release 4.5] Convert Pipeline StartedBy Label to Annotation #6769
• Bug 1879016: kubevirt support only e1000e and virtio #6622
• Bug 1884760: add candidate-4.6, fast-4.6, and stable-4.6 channels #6822
• Bug 1877728: Fixes bug attaching block storage to pods, deployments in attach-storage page #6609
• Bug 1877290: fix edit flow with update git url #6568
• Bug 1878849: Use metadata.generatorName when create a pipeline trigger #6615
• Bug 1880376: Fix Add Pipeline Trigger for Pipeline Operator 1.1 #6675
• Bug 1879247: Fix inline taskSpec error in pipeline page #6638
• Bug 1881784: fix empty default value for pipeline parameters #6715
• Bug 1878214: Add support for more params and create resources only if required #6598
• Bug 1878713: Add fallback to builder image detection #6617
• Bug 1840253: Tighten cipher usage to library-go #6503
• Bug 1879224: Empty secret should be editable in generic secret form #6636
• Bug 1877012: Hide cluster upgrade UI on OpenShift Dedicated #6616
• Bug 1876461: remove the import VM from dev perspective #6552
• Bug 1870078: Fix Backing Store selection flickering issue in Bucket Class creation wizard #6371
• Bug 1855820: Editable TT, EL, CTB, TB #5947
• Bug 1870825: Fix blank page/error on ImageManifestVulnPage #6392
• Bug 1870585: Fix pipeline workspace volume-type empty-directory #6384
• Bug 1875858: fixes issue with internal image imports for self-provisioner with edi… #6533
• Bug 1872625: cherry-pick 4.5 add resource icon to task and cluster-task #6446
• Bug 1877083: add RBAC checks to cluster upgrade UI #6557
• Full changelog

console-operator

• Bug 1876025: clidownloads: IBM Power and Z are supported #467
• Bug 1880307: Bump k8s vendors to 1.18.9. to fix bug in reflector not recovering from ‘Too large resource version’ #470
• Bug 1880307: Fix inconsistent vendoring in vendor/modules.txt #471
• Full changelog

coredns

• Bug 1862584: Adds HealthcheckBrokenCount to forward plugin #36
• Full changelog

docker-builder

• Bug 1921966: narrow scope of rhsm transient bind mount #214
• Force use of runc, since we know we’re privileged, and customize our seccomp filter #208
• Bug 1889956: CVE-2020-8564 #194
• Full changelog

etcd

• OWNERS: add component #62
• Bug 1884011: discover-etcd-initial-cluster: improve error handling when we dont scale member #58
• Full changelog

gcp-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #114
• Full changelog

haproxy-router

• Bug 1920421: Add tunnel-timeout and hard-stop-after options to haproxy template #250
• Bug 1921252: Prevent unnecessary reloads in router shards #251
• Bug 1906132: back port: Change router’s internal endpoint.ID to prevent HAProxy server line collisions #234
• Bug 1896914: Back port Clip haproxy.router.openshift.io/timeout annotation values to prevent bricking on upgrade #218
• Bug 1886214: haproxy-config.template: Only enable HTX for HTTP/2 #200
• Bug 1890534: Fix decreasing counter metrics when reloading HAProxy #205
• Bug 1885688: Back port Switch to periodic process reaper #195
• Bug 1879120: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #184
• Full changelog

hyperkube, tests

• BUG 1891106: UPSTREAM: 95259: allocate service-account flowschema to global-default #25627
• Bug 1928978: UPSTREAM: 89885: SQUASH: Fix cinder crash #25899
• Bug 1887311: UPSTREAM: 94712: [credentialprovider] avoid potential secret leaking while reading .dockercfg #25694
• Bug 1894918: Panic output due to timeouts in kube-apiserver #25751
• Bug 1916660: UPSTREAM: 97916: kube-aggregator: fix apiservice availability gauge #25800
• Bug 1879208: fixes a data race in SerializeObject function #25824
• Bug 1918919: broaden acceptance of scl sample s2i image usage messages #25816
• Bug 1912566: UPSTREAM: 97206: clean up executing request on panic #25777
• Bug 1907938: Nodes goes into NotReady state (VMware) #25773
• Bug 1907507: Fix skipping of SDN tests #25768
• Bug 1908764: Skew 4.5 to 4.6 tests are failing due to a misplaced skip (prevents all tests from running) #25772
• Bug 1884195: test/extended/operators: add etcd-quorum-guard to unevictable whitelist #25700
• UPSTREAM: <carry>: Bug 1893156: include / prefix in instance ID output #25655
• Bug 1899721: HPA: Ignore deleted pods. #25698
• Bug 1852695: CVE-2020-8559 compromised node could escalate to cluster level privileges #25656
• Bug 1828858: use net/http instead of client-go for e2e PDB test #25635
• Bug 1893742: move jenkins e2e nfs setup from docker.io to quay.io image #25654
• Bug 1880326: Backport disruption test improvements #25603
• Bug 1893071: move off docker.io in templates/builds/jenkins tests #25648
• Bug 1881351: KCM and KS graceful termination #25536
• Bug 1887942: [release-4.5] Pick scheduler v1beta1 componentconfig API #25252
• Bug 1883345: [release-4.5] Re-enable skipped conformance tests for IBM Cloud #25520
• Bug 1888002: move image ecosystem e2e suite from centos to rhel; create rhel only jenkins e2e suite #25387
• Bug 1879192: Make offline volume expansion tests more robust #25556
• Bug 1857268: UPSTREAM: 94252: If firstTimestamp is not set use eventTime when printing event #25461
• Bug 1886174: skip test during skew testing that won’t run on 4.6 #25591
• Bug 1868490: upgrade test use LoadBalancers with ExternalTrafficPolicy set to Local #25481
• Bug 1860789: test: Report an error message when a pod fails in a cmd test #25560
• Bug 1867800: Make EBS attachDisk idempotent #25400
• Bug 1856529: Add NET_RAW capability to internal_ports test #25518
• Bug 1877346: KubeAPIErrorsHigh firing due to too large resource version #25489
• Bug 1883235: Adjust wait duration for marketplace test #25557
• Bug 1882030: UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison #25541
• Bug 1877346: Fix bug for inconsistent lists served from etcd #25490
• Bug 1846451: UPSTREAM: 90419: update strategy used to reuse CPUs from init containers in CPUManager #25310
• Bug 1879650: For clusters upgraded from 4.1, skip the anonymous browser access test #25510
• Bug 1874251: UPSTREAM: 94204: Add impersonated user to system:authenticated group #25458
• Full changelog

insights-operator

• Bug 1889679: Collect installplans #244
• Bug 1914255: Red Hat image and crashlooping OpenShift pod collection #308
• Bug 1894243: Fixes records index on diskrecorder #262
• [release 4.5] Bug 1887763: Adds MachineConfigPool gatherer #214
• Bug 1905106: Collect spec config for clusteroperator resources #287
• [release 4.5] Bug 1888607: Fixes policyClient and the corresponding config. #227
• Bug 1904079: Add hostsubnet to sample archive & fix bug… #278
• Bug 1880318: Update k8s version to v0.18.6 #284
• [release 4.5] Bug 1887886: Add the namespace to the gatherers reports to avoid conflicts #219
• Backport e2e tests #252
• [release 4.5] Bug 1885515: Fixes ‘make build’ #204
• Bug 1884551: Adds PodDisruptionBudgets gather. #199
• Bug 1883175: Gather MachineSet info #195
• Bug 1880352: collect hostsubnet information #180
• Bug 1882237: Add new team members to OWNERS #191
• Full changelog

ironic

• Bug 1917966: Force update of dnsmasq #138
• Full changelog

ironic-inspector

• Bug 1917966: Force update of dnsmasq #57
• Full changelog

jenkins, jenkins-agent-maven

• Bug 1922554: Update ant plugin CVE-2020-11979 #1210
• Bug 1896402: various fixes #1175
• Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
• Full changelog

k8s-prometheus-adapter

• Bug 1897313: Populate both CPU and Memory resource container metrics if one is specified #37
• Full changelog

keepalived-ipfailover, pod

• Bug 1900725: Pod process container does not correctly reap zombie process with shareProcessNamespace: true #57
• Full changelog

kube-client-agent, kube-etcd-signer-server

• Bug 1872535: vendor: bump golang.org/x/text #23
• Full changelog

kube-proxy, sdn

• Bug 1904456: NetworkPolicy performance fixes, v2 #258
• Bug 1891455: Fix error handling from DNS nameservers #211
• Bug 1897478: Bump OVS to 2.13 #238
• Bug 1915008: Revert NetworkPolicy performance fixes (4.5) #242
• Bug 1904456: NetworkPolicy performance (pod caching) #229
• Bug 1894784: fix pod creation deadlock #217
• Bug 1901043: Enable conntrack for ovs-multitenant unless userspace proxy #225
• UPSTREAM<carry>: Bug 1880341: Fix bug in reflector not recovering from “Too large resource version” #215
• Bug 1895057: Ignore if netns is already deleted while deleting ns #218
• Bug 1878624: Invalid egressCIDR value causes sdn pods to fail on startup #187
• Bug 1881830: Emit a warning and ignore if empty cidr is passed to kubeproxy #195
• Bug 1878788: vxlan_monitor_test: fix flake #191
• Bug 1874798: Add NodeInformer to EgressIP #182
• Full changelog

kube-state-metrics

• Bug 1881103: Bump to fix a bug in client-go #36
• Full changelog

kube-storage-version-migrator

• Bug 1893637: Fix bug in reflector not recovering from “Too large resource version” #161
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1901495: Correctly compare SG rules in NP code #429
• Bug 1900491: Ensure members are deleted from pools when there is no endpoints #413
• Bug 1893996: Fix duplicated sg rules on NP crd #392
• Bug 1884192: Set read timeout for any request in K8sClient #360
• Bug 1860311: Civilize logging vol 2 #351
• Bug 1883419: Cleanup ports belonging to deleted nodes #354
• Bug 1874840: Ensure proper cleanup of subports #334
• Full changelog

libvirt-machine-controllers

• Bug 1887373: Add leader election mechanism to release-4.5 #211
• Full changelog

machine-api-operator

• Bug 1888206: Adjust alert timing and severity #729
• Bug 1869320: [release-4.5] [vSphere] Reduce sync period to 10 minutes #764
• Bug 1880343: Bump K8s dependencies to v0.18.9 #718
• Bug 1864352: Add leader election mechanism to release 4.5 #664
• Full changelog

machine-config-operator

• Bug 1884195: etcd-quorum-guard remove toleration timeouts #2133
• Bug 1880333: bump k8s.io/client-go to 0.18.6 #2354
• Bug 1873207: [baremetal] Wait for NM dhcp nameserver population #2119
• Bug 1907636: [vsphere, openstack] Add missing proxy settings to resolv-prepender #2347
• Bug 1907636: [on-prem] export proxy variables to be taken in account #2301
• Bug 1903655: Use mc name as finalizer for kubelet config #2274
• Bug 1900013: Drop kubelet logging back down to level 3 #2247
• Bug 1904082: ctrcfg_test: Wait for our prior target config #2284 #2284
• Bug 1890797: Set NonVirtualIP in mdns plugin config #2137
• Bug 1874815: pkg/server: reduce calls to ignition parse #2053
• Bug 1856529: Create a drop-in file for cri-o’s default_capabilities #2050
• Bug 1862874: [baremetal & friends] verify resolv.conf in HAProxy static pod synced with host resolv.conf #1974
• Bug 1881147: OpenStack: Don’t failover api vip if loadbalanced endpoint is responding #2110
• Bug 1872337: remove err cardinality from mcd_kubelet_state metrics #2023
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1868772: [backport 4.5] Change error message (for missing kubeconfig) #26
• Bug 1877065: Fixing wrong DNS-1123 name for some IPv6 addresses #29
• Full changelog

must-gather

• Bug 1887446: [release-4.5]Backport gather_core_dumps #183
• Full changelog

oauth-server

• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #66
• Bug 1882055: Fix bug in reflector not recovering from “Too large resource version” #57
• Full changelog

openshift-apiserver

• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #164
• Bug 1906429: When using webhooks in OCP 4.5 fails to rollout latest deploymentconfig #168
• Bug 1883994: Fix label value validation for BuildConfigs #144
• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #137
• Full changelog

openshift-controller-manager

• remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #163
• Bug 1883994: Fix label value validation for Builds #138
• Bug 1880357: Bump k8s.io packages #140
• Full changelog

openshift-state-metrics

• Bug 1882448: bump k8s.io/client-go dependency #58
• Full changelog

openstack-machine-controllers

• Bug 1864352: Update leader election for release 4.5 #117
• Full changelog

operator-lifecycle-manager

• Bug 1933779: Support InstallPlan steps upgrading existing ClusterIP Services. #2021
• Bug 1928263: Fix zero-delay resyncs for certain registry update policies. #2006
• Bug 1904584: Check sa owner 4.5 #1909
• Bug 1896079: Services should not have duplicate ownerrefs #1857
• Bug 1921484: use OLM client when installing CRDs #1985
• Bug 1910401: Preserve original .status.lastUpdateTime in copied CSVs. #1930
• Bug 1905137: Recreate pending installplan if deleted before approval #1894
• Bug 1892372: OLM should use valid CA certs if available #1865
• Bug 1882444: remove extra polling check #1780
• Bug 1878297: remove duplicate catalog source pod when polling #1765
• Bug 1887944: ensure installplan step resource manifests reference configmaps #1809
• Bug 1880359: [release-4.5] Bump 1.18.9 #1778
• Bug 1878307: shorten catalog sync interval if polling is enabled #1764
• Bug 1878359: update catalog image pull policy #1760
• Bug 1870782: Retry conflicting catalog source pod update after fetching latest pod spec #1734
• Full changelog

operator-marketplace

• Bug 1909217: Do not report degraded when Marketplace exits gracefully #371
• Bug 1881542: Set all CO conditions on meeting expected sync ratio #356
• Bug 1867799: Correctly count non-default Marketplace CRs #324
• Bug 1873546: Increase registry delay for large payloads #335
• Bug 1877564: Sync remote app-registry #340
• Full changelog

operator-registry

• Bug 1904554: TestListPackages is flaky #533
• Bug 1902803: Reconstruct replaces/splits for Listbundles from channel_entry. #524
• Bug 1845588: fix(images): use docker/podman create and cp for exec unpacking #400
• Full changelog

ovirt-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #68
• Full changelog

ovn-kubernetes

• Bug 1921283: [4.5] Fix MCS-blocking iptables rules #426
• Bug 1882694: Pin OVS to latest 4.4.22 RPM version #290
• Bug 1908921: ovn/node: use node name as chassis hostname #390
• Bug 1877561: [release-4.5]Fix orphaned ACLs backport to 4.5 #287
• Bug 1888352: Fix IPv6 neighbor discovery hack #313
• Bug 1862700: Fix ovnkube-node aggressive memory allocation to prevent memory bloating #227
• Bug 1882092: Pin 4.5 OVN to 4.4.24 #284
• Bug 1868501: Do not default HO cluster subnets #268
• Full changelog

prometheus

• Bug 1892583: bump k8s.io/client-go to v0.18.9 #68
• Bug 1881111: go.mod,go.sum: Bump client-go & co. #59
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1891815: Revert “Bug 1881077:go.sum,go.mod: Bump client-go & co. to fix known bug” #99
• Bug 1881077: go.sum,go.mod: Bump client-go & co. to fix known bug #95
• Full changelog

prometheus-node-exporter

• Bug 1890466: Fix issues with too many log messages in NFS collector #71
• Full changelog

service-ca-operator

• Bug 1880360: Fix bug in reflector not recovering from “Too large resource version” #124
• Full changelog

---

View changelog in Markdown or change previous release: 4.12.0-0.nightly-2022-08-12-0534384.12.0-0.nightly-2022-08-11-2347104.12.0-0.nightly-2022-08-11-1917504.12.0-0.nightly-2022-08-11-1310114.12.0-0.nightly-2022-08-11-0911444.12.0-0.nightly-2022-08-11-0408424.12.0-0.nightly-2022-08-10-2006114.12.0-0.nightly-2022-08-10-1411164.12.0-0.nightly-2022-08-10-0348424.12.0-0.nightly-2022-08-09-223806───4.12.0-0.ci-2022-08-14-2204584.12.0-0.ci-2022-08-14-0352324.12.0-0.ci-2022-08-13-1924014.12.0-0.ci-2022-08-13-1356564.12.0-0.ci-2022-08-13-0912254.12.0-0.ci-2022-08-13-0058404.12.0-0.ci-2022-08-12-2118194.12.0-0.ci-2022-08-12-1751164.12.0-0.ci-2022-08-12-1411454.12.0-0.ci-2022-08-12-1041154.12.0-0.ci-2022-08-12-054115───4.11.0-0.nightly-2022-08-12-0003134.11.0-0.nightly-2022-08-11-0236084.11.0-0.nightly-2022-08-10-1612274.11.0-0.nightly-2022-08-04-0813144.11.0-0.nightly-2022-08-03-2304464.11.0-0.nightly-2022-08-03-1840584.11.0-0.nightly-2022-08-03-1206124.11.0-0.nightly-2022-08-03-0219594.11.0-0.nightly-2022-08-02-014045───4.11.0-0.ci-2022-08-14-2147444.11.0-0.ci-2022-08-14-1713424.11.0-0.ci-2022-08-12-1022454.11.0-0.ci-2022-08-12-0551144.11.0-0.ci-2022-08-12-0211494.11.0-0.ci-2022-08-11-2221144.11.0-0.ci-2022-08-11-1814584.11.0-0.ci-2022-08-11-1450214.11.0-0.ci-2022-08-11-1031484.11.0-0.ci-2022-08-11-0641474.11.0-0.ci-2022-08-11-024348───4.10.0-0.nightly-2022-08-12-0141024.10.0-0.nightly-2022-08-11-1852534.10.0-0.nightly-2022-08-10-1403544.10.0-0.nightly-2022-08-09-2036114.10.0-0.nightly-2022-08-09-125340───4.10.0-0.ci-2022-08-14-0154124.10.0-0.ci-2022-08-12-0822474.10.0-0.ci-2022-08-12-0244204.10.0-0.ci-2022-08-11-2101094.10.0-0.ci-2022-08-11-1225454.10.0-0.ci-2022-08-10-1455314.10.0-0.ci-2022-08-10-071551───4.9.0-0.nightly-2022-08-11-2325494.9.0-0.nightly-2022-08-11-1857114.9.0-0.nightly-2022-08-11-0503554.9.0-0.nightly-2022-08-10-0154404.9.0-0.nightly-2022-08-09-1553594.9.0-0.nightly-2022-08-08-0749134.9.0-0.nightly-2022-08-05-0617414.9.0-0.nightly-2022-08-03-0124584.9.0-0.nightly-2022-08-01-1500294.9.0-0.nightly-2022-07-26-141848───4.9.0-0.ci-2022-08-12-0614584.9.0-0.ci-2022-08-12-0314304.9.0-0.ci-2022-08-11-2238464.9.0-0.ci-2022-08-11-2010314.9.0-0.ci-2022-08-11-1907104.9.0-0.ci-2022-08-11-1647244.9.0-0.ci-2022-08-11-1548114.9.0-0.ci-2022-08-11-0324194.9.0-0.ci-2022-08-02-0343524.9.0-0.ci-2022-08-02-003741───4.8.0-0.nightly-2022-08-12-1807004.8.0-0.nightly-2022-08-09-2334324.8.0-0.nightly-2022-08-09-1921104.8.0-0.nightly-2022-08-09-1252434.8.0-0.nightly-2022-08-05-061729───4.8.0-0.ci-2022-08-12-1043464.8.0-0.ci-2022-08-12-0526354.8.0-0.ci-2022-08-11-2142214.8.0-0.ci-2022-08-11-1920284.8.0-0.ci-2022-08-11-1847004.8.0-0.ci-2022-08-11-1500114.8.0-0.ci-2022-08-09-2106344.8.0-0.ci-2022-08-02-1337004.8.0-0.ci-2022-08-02-0340154.8.0-0.ci-2022-08-01-051538───4.7.0-0.nightly-2022-08-12-1037384.7.0-0.nightly-2022-08-11-1647334.7.0-0.nightly-2022-08-10-0954334.7.0-0.nightly-2022-08-10-0903574.7.0-0.nightly-2022-08-03-204229───4.7.0-0.ci-2022-08-12-1804014.7.0-0.ci-2022-08-12-1338134.7.0-0.ci-2022-08-12-0440004.7.0-0.ci-2022-08-11-1930564.7.0-0.ci-2022-08-11-1812534.7.0-0.ci-2022-08-09-1745174.7.0-0.ci-2022-08-09-1451294.7.0-0.ci-2022-08-04-180808───4.6.0-0.nightly-2022-08-10-1016164.6.0-0.nightly-2022-08-09-1540164.6.0-0.nightly-2022-08-09-1419054.6.0-0.nightly-2022-08-09-1116484.6.0-0.nightly-2022-08-03-091852───4.6.0-0.ci-2022-08-12-1815174.6.0-0.ci-2022-08-12-1006334.6.0-0.ci-2022-08-11-1920554.6.0-0.ci-2022-08-03-1557224.6.0-0.ci-2022-08-02-1804484.6.0-0.ci-2022-08-01-0129294.6.0-0.ci-2022-08-01-0059294.6.0-0.ci-2022-07-27-143900───4.12.0-ec.14.12.0-ec.0

Source code for this page located on github