Back to index

4.5.40

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.5.40-x86_64

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

• 4.5.39 (changes) - Success Success
• 4.5.38 (changes) - Success
• 4.5.37 (changes) - Success
• 4.5.36 (changes) - Success
• 4.5.35 (changes) - Failed
• 4.5.34 (changes) - Success
• 4.5.33 (changes) - Failed
• 4.5.32 (changes) - Failed
• 4.5.31 (changes) - Success
• 4.5.30 (changes) - Failed
• 4.5.29 (changes) - Failed
• 4.5.28 (changes) - Success
• 4.5.27 (changes) - Success
• 4.5.25 (changes) - Failed
• 4.5.24 (changes) - Success
• 4.5.23 (changes) - Success
• 4.5.22 (changes) - Success
• 4.5.21 (changes) - Success
• 4.5.20 (changes) - Success
• 4.5.19 (changes) - Success
• 4.5.18 (changes) - Success
• 4.5.17 (changes) - Success
• 4.5.16 (changes) - Failed
• 4.5.15 (changes) - Success
• 4.5.14 (changes) - Success
• 4.5.13 (changes) - Success
• 4.5.12 (changes) - Success
• 4.5.11 - Success
• 4.5.10 (changes) - Success
• 4.5.9 (changes) - Success
• 4.5.8 (changes) - Success
• 4.5.7 (changes) - Failed
• 4.5.6 (changes) - Failed
• 4.5.5 (changes) - Success
• 4.5.4 (changes) - Success
• 4.5.3 (changes) - Success
• 4.4.33 (changes) - Success Failed
• 4.4.32 (changes) - Success
• 4.4.31 (changes) - Failed
• 4.4.30 (changes) - Success
• 4.4.29 (changes) - Success
• 4.4.28 (changes) - Success
• 4.4.27 (changes) - Failed
• 4.4.26 (changes) - Success
• 4.4.25 (changes) - Success
• 4.4.24 (changes) - Success
• 4.4.23 (changes) - Success
• 4.4.22 (changes) - Success
• 4.4.21 (changes) - Success
• 4.4.20 (changes) - Success
• 4.4.19 (changes) - Success
• 4.4.18 (changes) - Success
• 4.4.17 (changes) - Success
• 4.4.16 (changes) - Success
• 4.4.15 (changes) - Success
• 4.4.14 (changes) - Success
• 4.4.13 (changes) - Success

Upgrades to:

• 4.6.60 (changes) - Failed
• 4.6.59 (changes) - Failed
• 4.6.58 (changes) - Failed
• 4.6.57 (changes) - Failed
• 4.6.56 (changes) - Failed
• 4.6.55 (changes) - Failed
• 4.6.54 (changes) - Failed Failed
• 4.6.53 (changes) - Failed
• 4.6.52 (changes) - Failed
• 4.6.51 (changes) - Failed Failed
• 4.6.50 (changes) - Failed
• 4.6.49 (changes) - Success
• 4.6.48 (changes) - Success
• 4.6.47 (changes) - Success
• 4.6.46 (changes) - Failed
• 4.6.45 (changes) - Success
• 4.6.44 (changes) - Success
• 4.6.43 (changes) - Success
• 4.6.42 (changes) - Success
• 4.6.41 (changes) - Failed
• 4.6.40 (changes) - Failed
• 4.6.39 (changes) - Failed
• 4.6.38 (changes) - Success
• 4.6.37 (changes) - Success
• 4.6.36 (changes) - Failed Success
• 4.6.35 (changes) - Success Failed
• 4.6.34 (changes) - Success Failed
• 4.6.33 (changes) - Failed Success
• 4.6.32 (changes) - Success Failed
• 4.6.31 (changes) - F S F S S
• 4.5.41 (changes) - Success Failed

---

Loading changelog, this may take a while ...

Changes from 4.5.11

Created: 2021-05-21 14:06:44 +0000 UTC

Image Digest: sha256:7055ea4fa8ea7caf451e7db05fe31bfacc660e2f127019aad4744a9fb1d66161

Release 4.5.40 was created from registry.ci.openshift.org/ocp/release:4.5.0-0.nightly-2021-05-19-143143

Components

• Kubernetes 1.18.3
• Red Hat Enterprise Linux CoreOS upgraded from 45.82.202009181447-0 to 45.82.202105191319-0 (diff)

Removed images

• local-storage-static-provisioner

Rebuilt images without code change

• aws-machine-controllers git 2710ded1 sha256:a06c87e3fe416852cf70b03afaccfe4812cec14cab0498d9e641294ae08e49d1
• aws-pod-identity-webhook git 2251f7e2 sha256:b90447d1fdaf8e5a846066cc1950369314c7cb92b0aa7d7bef790f806934991c
• baremetal-machine-controllers git 1cf0189f sha256:2ab47a2ec3f27ee4b4b417bfeab5ca6157b1bc8edea180b7eb50fa344ce52703
• cluster-autoscaler git c821779c sha256:f6d3ecf4ee81b16ba1411971de2b5ac5e2ea2f2ea630c0221b09175407754bee
• cluster-bootstrap git 04c97c30 sha256:cc7a69a70d46e0c41a32676a772183508b7d055429b65973d7aa0e98e88cea38
• cluster-node-tuned git 27b3ad70 sha256:c093e076852ac0b5b732660d8bc08510d058b1fb47444d478b235d51124787fe
• cluster-svcat-apiserver-operator git 095c1873 sha256:e8bd4d294411f7625b37b6a4c40aff9cd036cbf568e2b90c79e7f0786f45dd96
• cluster-svcat-controller-manager-operator git 3f8300d0 sha256:391e9dc9308a7bc7b324c210fa834fd7d2c367f3eb3ca33f1d3f07291173cf2d
• cluster-update-keys git 7befe524 sha256:479ea6bab237e26c9cdf93f8706672e1b33fdc7607cec359de382d325a60d1a2
• configmap-reloader git 8b987c8e sha256:c18a0c96fc172ea696ec868424d190492ffa370ce64c1f2ef8d9eabee157398f
• container-networking-plugins git d097ce25 sha256:537228987914281c5f5c1ca0ea900ce626631386c5857eee90e63036eca3f350
• coredns git 29f92ef4 sha256:1314585ea7847a35d1c10cd65f839e59fba2c061673f3241d3584793ff1b31d8
• csi-snapshot-controller git f23c075c sha256:779848020e75aa74966d976e944c2b750b08cfb6dfbe8fc777b1f17c76a543c9
• docker-registry git 861af923 sha256:6cd07fc2d5129929c70f6186d6f824294cd6fd24f60054a0e68b0c9d1ab0a095
• grafana git f6535967 sha256:4cf378a6ba580920d9a3f23d6468e915ea9c40fd1e2ec039d14ebae684824017
• ironic-hardware-inventory-recorder git 09f6db6b sha256:153836c701c91d5fba18a89150446f34080c4fd9d8ef6279177980b0d0ce2acb
• ironic-ipa-downloader git 999c80f1 sha256:9c7c314a556c0671335ac5040e83a38d7cfdad7eebd0eedd41b932d7f37f3ed0
• ironic-machine-os-downloader git 561c7d4c sha256:86e63d81b2a7c16b49beafdf9a07f635702539ce05636b816731995a3443de5b
• ironic-static-ip-manager git 058e8fd2 sha256:33e8ddeb6cbdc2e3bb99e966cf1ec508cde89705dddd8c2b9f4903afeca5dbda
• kube-rbac-proxy git 76fc3658 sha256:f3b67b1e71713e227f506cf7a01e651a5188a14815824a155d3fde518795abfe
• machine-os-content sha256:e27486d62f824013171c340fcb003d3ec995f691071039996158f3adf4ed4bd3
• mdns-publisher git 0e41fab1 sha256:188cf55040f5a31a398db03434e00248278fcdf6990b63486f464052d4bcb0c8
• multus-admission-controller git 0bd3ff5e sha256:f2a58dc00db64fadeaa8147708bd26a785399b6138c3e6335f1317a954f5f945
• multus-cni git 69a29635 sha256:1f0d6fa997fd741f1bc5750b39cd9c675a80ab63194cfa436c008a729057c7bc
• multus-route-override-cni git 7f6f53e3 sha256:df2d75b436823e422719720b8f7622c2c3380b7bb052d3b0b478ad05d86ab57a
• oauth-proxy git afb73cdd sha256:a9dc407643e398ef0344c674cd887ef70cd8fc4a15dd75d73dd9dd4202472750
• prom-label-proxy git cfcfdbd1 sha256:4f74afc5f3c05db039f829d4ac719fdb27503da7e31037abebcd681882b2fbca
• prometheus-alertmanager git 26fa6b42 sha256:3898e9907096015ad870b866ef091102da3b22c4f5f08ef4b18b574d0c706301
• telemeter git ca9c4f2c sha256:144d5d3b24a0b3c4694cce10bf8fbaccadca936f38a9ea21231546fe3c85e367
• thanos git 0d2ebce5 sha256:59f2732ba323d5096b1bc69d0f3ccc29258ec4866b598dbd81740a0114187d51

baremetal-installer, installer, installer-artifacts

• Bug 1918962: vsphere destroy: delete tag category created by installer #4580
• Bug 1920767: disable anonymous auth on bootstrap nodes #4597
• Bug 1891168: data/data/gcp: be pedantic about setting the region #4301
• Bug 1876581: upi/aws Define load balancer health checks #4358
• Bug 1877374: Remove unused bootstrap etcd cert generation mechanism #4150
• Bug 1889775: [release-4.5] vSphere: Update dockerfile removing certificate #4283
• install-approvers: add staebler #4299
• Bug 1874009: Ensure proper tagging of compute nodes ports #4120
• Bug 1880134: destroy/gcp: correct extract service account email from IAM policy binding member #4195
• Bug 1878369: openstack: Upgrade the CI build image #4164
• Full changelog

baremetal-operator

• Bug 1874599: Always delete found host from Ironic on deletion #97
• Full changelog

baremetal-runtimecfg

• Bug 1926730: add CloseIdleConnections for HTTP K8S API healthcheck #122
• Bug 1888301: Add check for iptables rule to keepalived-monitor #105
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 1920676: add timestamps marking start and end for must-gather and inspect #718
• Bug 1884580: Set appropriate owner references when creating a job from cronjob #602
• Bug 1860789: Rebase k8s to 1.18.8 to enable approving CSRs on a 4.6 server #551
• Full changelog

cloud-credential-operator

• Bug 1898199: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #269
• Bug 1883412: Update upgradeable condition on admin cred changes. #253
• Bug 1871713: Mark Manual Clusters Upgradeable=False If 4.6 Cred Request Secrets Are Not Provisioned #244
• Full changelog

cluster-authentication-operator

• Bug 1879417: don’t error out on non-json output of password grant attempt #349
• Bug 1877960: [release-4.5] router-secrets: set named certificates to empty array instead of nil when none found #342
• Full changelog

cluster-autoscaler-operator

• Bug 1879162: ensure full boolean arguments #164
• Bug 1880320: Bump K8s dependencies to v0.18.9 #169
• Full changelog

cluster-config-operator

• Bug 1905576: [release-4.5] Add warning of the consequences of changing bound token issuer #180
• Bug 1878007: Add Controller to Normalize the Operator Log Level Values #150
• Bug 1880304: Fix bug in reflector not recovering from “Too large resource version” #155
• Bug 1879492: Add secure access token annotation controller to handle downgrade from 4.6 #153
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 1881359: Run the controller on master nodes #52
• Bug 1880309: Bump k8s.io/client-go to v0.18.6 to fix bug in reflector not recovering from “Too large resource version” #53
• Full changelog

cluster-dns-operator

• Bug 1935297: Set CoreDNS readiness probe period and timeout each to 3 seconds #242
• [Release 4.5] Bug 1880311: Fix bug in reflector not recovering from “Too large resource version” #198
• Full changelog

cluster-etcd-operator

• Bug 1939318: pkg/operator/metriccontroller: cleanup transports #555
• Bug 1924913: A valid etcd endpoint should have the URL scheme prepended. #536
• Bug 1906483: Use socket readiness probe to avoid generating zombies #510
• Bug 1897543: DR: Make restore pod yaml specific to restoring node #497
• Bug 1894267: Remove the rollbackcopier #494
• Bug 1899563: remove etcdMemberIPMigrator controller #389
• Bug 1883268: remove erroneously specified label drop rules #452
• Bug 1877374: Render bootstrap certificates #438
• OWNERS: change component to Etcd #471
• Bug 1877930: Use restore pod yaml from the backup when restoring #442
• Bug 1880313: vendor: bump k8s to 1.18.6 to fix bug in reflector not recovering from “Too large resource version” #447
• Bug 1859684: Exclude bootstrap in the env variable ETCDCTL_ENDPOINTS #402
• Full changelog

cluster-image-registry-operator

• Bug 1916859: Sync status to spec with regards to Swift config #656
• Bug 1895856: httpSecret should be generated when it is not set #636
• Bug 1894621: Avoiding bootstrap failure on unavailable swift #635
• Bug 1886603: Remove unsafe type casting #623
• Bug 1886849: panic during creation of Azure storage container #624
• Bug 1880314: Fix bug in reflector not recovering from “Too large resource version” #616
• Bug 1843244: Add documentation for Logging field #614
• Bug 1880485: Retrying in case of conflict during Config update #613
• Bug 1879176: Alerting on failed image prune job #612
• Full changelog

cluster-ingress-operator

• Bug 1896168: Back port HAProxy reload failures alert fix #487
• Bug 1920421: Add “ingress.operator.openshift.io/hard-stop-after” annotation #538
• [Release 4.5] Bug 1880315: Fix bug in reflector not recovering from “Too large resource version” #461
• Full changelog

cluster-kube-apiserver-operator

• BUG 1885353: protect openshift traffic by using dedicated flowschema #968
• Bug 1880322: fix bug in reflector not recovering from “Too large resource version” #954
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1880324: fix bug in reflector not recovering from “Too large reso… #461
• Bug 1881534: Use internal load balancer instead of localhost 4.5 #455
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #445
• Full changelog

cluster-kube-scheduler-operator

• Bug 1915363: Sync new kube-scheduler-client-cert-key on recovery #317
• Bug 1893202: [release-4.5] Extend Prometheus E2E timeout #299
• Bug 1887942: [release-4.5] Switch to v1beta1 Scheduler config to bridge between Policy/Plugin APIs #290
• Bug 1880326: fix bug in reflector not recovering from “Too large reso… #287
• Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #278
• Full changelog

cluster-kube-storage-version-migrator-operator

• Bug 1880327: fix bug in reflector not recovering from “Too large resource version” #27
• Full changelog

cluster-machine-approver

• Bug 1880344: Bump K8s dependencies to v0.18.9 #90
• Full changelog

cluster-monitoring-operator

• Bug 1906081: jsonnet: remove apiserver_request:availability30d #1016
• Bug 1892585: Client go 0.18.9 #978
• Bug 1887354: Backport fix checking if ClusterRoleBindings need update #956
• Bug 1858010: Backport fix for KubePodCrashLooping alert #952
• Bug 1888542: decrease CMO log verbosity from 3 to 2 #961
• Bug 1881043: Bump client-go & co. #945
• Bug 1859791: alert is firing KubeJobCompletion and KubeJobFailed at the same time #885
• Full changelog

cluster-network-operator

• Bug 1941604: Include LB members for Machines created on day-2 operation #1032
• Bug 1924137: Increase the initialDelaySeconds for liveness and readiness probes #967
• Bug 1849154: Fixes Proxy ReadinessEndpoints Validation #677
• Bug 1882502: SDN mount host’s /var/run/netns #805
• Bug 1891751: openshift-sdn: multitenant: join openshift-etcd-operator to etcd #851
• Bug 1886127: [release-4.5] sdn-ovs: don’t step on directory permissions. #842
• Bug 1886127: [4.5] sdn-ovs: fix liveness probe for downgrade case #837
• Bug 1886127: Handle downgrades from 4.6 to 4.5 #833
• Bug 1881429: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #799
• Bug 1874737: [release-4.5] OVN: Handle OVN db upgrades #779
• Bug 1868444: Fixes providing empty slice for HybridClusterNetwork #790
• Full changelog

cluster-node-tuning-operator

• Bug 1882005: Issue a warning when two or more profiles use the same priority. #157
• Bug 1880348: Bump to k8s 1.18.9 to fix bug in reflector not recovering from “Too large resource version” #155
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #395
• Full changelog

cluster-openshift-controller-manager-operator

• Bug 1894667: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #185
• Full changelog

cluster-policy-controller

• Bug 1904030: The quota controllers should resync on new resources and make progress #51
• Bug 1891527: openshift-object-counts quota is not dynamically updating as the resource is deleted #47
• Bug 1894666: fix bug in reflector not recovering from “Too large resource version” #46
• Full changelog

cluster-samples-operator

• Bug 1881068: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #325
• Full changelog

cluster-storage-operator

• Bug 1882394: UPSTREAM: <carry>: operator-sdk: return error if lock is not leader-for-life #96
• Bug 1882394: Delete lock created by CSO 4.6 #91
• Full changelog

cluster-version-operator

• Bug 1940652: Bump logging to –v=5 #533
• Bug 1857478: pkg/verify: Parallelize HTTP(S) signature retrieval #487
• Bug 1931025: pkg/cvo: Use shutdownContext for final status synchronization #525
• Bug 1886939: vendor: Bump client-go to v0.18.9 #470
• Bug 1872906: pkg/start: Release leader lease on graceful shutdown #446
• Full changelog

console

• Bug 1915032: make filesystem queries compatible with both RHCOS and RHEL nodes #7796
• Bug 1895202: Access server API via kubernetes.default.svc from Helm endpoints #7133
• Bug 1898303: Use KUBEADM_PASSWORD_FILE by default #7228
• Bug 1908587: fix filesystem queries #7599
• Bug 1905909: Update library-go and replace runc module for v1.0.0-rc8 version #7477
• Bug 1898102: Ensure correct git URL for topology edit icon #7219
• Bug 1876922: fix unexpected changes of tabs when importing VMWare VMs #6553
• Bug 1896601: Tolerate missing status on OperatorGroups #7178
• Bug 1879017: Disable card model if using SRIOV interface #6623
• Bug 1896990: Handle values of 0 for maxUnavailable and maxSurge #7192
• Bug 1894782: Use correct service account for operator monitoring #7107
• Bug 1885228: Fix runtime error for basic users creating Prometheus instance #6833
• Bug 1893022: Fix git validation on selecting git type #7046
• Bug 1893277: deployment of vmware fails if VMware URL contains space at the end #7055
• Bug 1885582: Fix that the Start Pipeline form is not always validated correctly #6853
• Bug 1883225: Use new parameter prefix (tt.param.) for Tekton Trigger version 0.6+ #6759
• Bug 1883098: add legends under devconsole monitoring dashboard graphs #6755
• Bug 1874373: RHV URL validation is missing https:// #6551
• Bug 1877278: report errors when v2v-vmware ConfigMap is not available #6567
• Bug 1889982: pick latestCRDversion instead of latest/served true #6965
• Bug 1889783: Support ServiceBinding breaking api changes #6962
• Bug 1881380: Disable creation of External Mode Cluster in cloud environments #6706
• Bug 1884574: Include repo branch in URL for che icon #6815
• Bug 1883967: Fix layout issue which appears only on Safari #6798
• Bug 1883881: Avoid adding a newline between pipelinerun log fetches #6795
• Bug 1883177: Update node queries to exclude fstype, mountpoint #6781
• Bug 1882196: Add resource badges in the add trigger form dropdown #6734
• Bug 1852530: kubevirt - fix importing VMs with same vnicIDs for ovirt provider #5885
• Bug 1884411: Fix runtime error in legacy operand form #6810
• Bug 1879973: properly encode vpx URL #6803
• Bug 1883342: [Release 4.5] Convert Pipeline StartedBy Label to Annotation #6769
• Bug 1879016: kubevirt support only e1000e and virtio #6622
• Bug 1884760: add candidate-4.6, fast-4.6, and stable-4.6 channels #6822
• Bug 1877728: Fixes bug attaching block storage to pods, deployments in attach-storage page #6609
• Bug 1877290: fix edit flow with update git url #6568
• Bug 1878849: Use metadata.generatorName when create a pipeline trigger #6615
• Bug 1880376: Fix Add Pipeline Trigger for Pipeline Operator 1.1 #6675
• Bug 1879247: Fix inline taskSpec error in pipeline page #6638
• Bug 1881784: fix empty default value for pipeline parameters #6715
• Bug 1878214: Add support for more params and create resources only if required #6598
• Bug 1878713: Add fallback to builder image detection #6617
• Bug 1840253: Tighten cipher usage to library-go #6503
• Bug 1879224: Empty secret should be editable in generic secret form #6636
• Bug 1877012: Hide cluster upgrade UI on OpenShift Dedicated #6616
• Bug 1876461: remove the import VM from dev perspective #6552
• Full changelog

console-operator

• Bug 1876025: clidownloads: IBM Power and Z are supported #467
• Bug 1880307: Bump k8s vendors to 1.18.9. to fix bug in reflector not recovering from ‘Too large resource version’ #470
• Bug 1880307: Fix inconsistent vendoring in vendor/modules.txt #471
• Full changelog

docker-builder

• Bug 1921966: narrow scope of rhsm transient bind mount #214
• Force use of runc, since we know we’re privileged, and customize our seccomp filter #208
• Bug 1889956: CVE-2020-8564 #194
• Full changelog

etcd

• OWNERS: add component #62
• Bug 1884011: discover-etcd-initial-cluster: improve error handling when we dont scale member #58
• Full changelog

gcp-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #114
• Full changelog

haproxy-router

• Bug 1938923: router/template: Cache compiled regular expressions #271
• Bug 1896168: metrics: Rework template_router_reload_failure metric #216
• Bug 1920421: Add tunnel-timeout and hard-stop-after options to haproxy template #250
• Bug 1921252: Prevent unnecessary reloads in router shards #251
• Bug 1906132: back port: Change router’s internal endpoint.ID to prevent HAProxy server line collisions #234
• Bug 1896914: Back port Clip haproxy.router.openshift.io/timeout annotation values to prevent bricking on upgrade #218
• Bug 1886214: haproxy-config.template: Only enable HTX for HTTP/2 #200
• Bug 1890534: Fix decreasing counter metrics when reloading HAProxy #205
• Bug 1885688: Back port Switch to periodic process reaper #195
• Bug 1879120: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #184
• Full changelog

hyperkube, tests

• Bug 1957927: test/e2e/upgrade/upgrade.go: Bump upgrade ACK timeout to 4 minutes #26135
• Bug 1951663: Fix volume loop bugs #26094
• Bug 1930554: Update multicast test image for use in release-4.5 #25933
• BUG 1891106: UPSTREAM: 95259: allocate service-account flowschema to global-default #25627
• Bug 1928978: UPSTREAM: 89885: SQUASH: Fix cinder crash #25899
• Bug 1887311: UPSTREAM: 94712: [credentialprovider] avoid potential secret leaking while reading .dockercfg #25694
• Bug 1894918: Panic output due to timeouts in kube-apiserver #25751
• Bug 1916660: UPSTREAM: 97916: kube-aggregator: fix apiservice availability gauge #25800
• Bug 1879208: fixes a data race in SerializeObject function #25824
• Bug 1918919: broaden acceptance of scl sample s2i image usage messages #25816
• Bug 1912566: UPSTREAM: 97206: clean up executing request on panic #25777
• Bug 1907938: Nodes goes into NotReady state (VMware) #25773
• Bug 1907507: Fix skipping of SDN tests #25768
• Bug 1908764: Skew 4.5 to 4.6 tests are failing due to a misplaced skip (prevents all tests from running) #25772
• Bug 1884195: test/extended/operators: add etcd-quorum-guard to unevictable whitelist #25700
• UPSTREAM: <carry>: Bug 1893156: include / prefix in instance ID output #25655
• Bug 1899721: HPA: Ignore deleted pods. #25698
• Bug 1852695: CVE-2020-8559 compromised node could escalate to cluster level privileges #25656
• Bug 1828858: use net/http instead of client-go for e2e PDB test #25635
• Bug 1893742: move jenkins e2e nfs setup from docker.io to quay.io image #25654
• Bug 1880326: Backport disruption test improvements #25603
• Bug 1893071: move off docker.io in templates/builds/jenkins tests #25648
• Bug 1881351: KCM and KS graceful termination #25536
• Bug 1887942: [release-4.5] Pick scheduler v1beta1 componentconfig API #25252
• Bug 1883345: [release-4.5] Re-enable skipped conformance tests for IBM Cloud #25520
• Bug 1888002: move image ecosystem e2e suite from centos to rhel; create rhel only jenkins e2e suite #25387
• Bug 1879192: Make offline volume expansion tests more robust #25556
• Bug 1857268: UPSTREAM: 94252: If firstTimestamp is not set use eventTime when printing event #25461
• Bug 1886174: skip test during skew testing that won’t run on 4.6 #25591
• Bug 1868490: upgrade test use LoadBalancers with ExternalTrafficPolicy set to Local #25481
• Bug 1860789: test: Report an error message when a pod fails in a cmd test #25560
• Bug 1867800: Make EBS attachDisk idempotent #25400
• Bug 1856529: Add NET_RAW capability to internal_ports test #25518
• Bug 1877346: KubeAPIErrorsHigh firing due to too large resource version #25489
• Bug 1883235: Adjust wait duration for marketplace test #25557
• Bug 1882030: UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison #25541
• Bug 1877346: Fix bug for inconsistent lists served from etcd #25490
• Bug 1846451: UPSTREAM: 90419: update strategy used to reuse CPUs from init containers in CPUManager #25310
• Bug 1879650: For clusters upgraded from 4.1, skip the anonymous browser access test #25510
• Full changelog

insights-operator

• Bug 1889679: Collect installplans #244
• Bug 1914255: Red Hat image and crashlooping OpenShift pod collection #308
• Bug 1894243: Fixes records index on diskrecorder #262
• [release 4.5] Bug 1887763: Adds MachineConfigPool gatherer #214
• Bug 1905106: Collect spec config for clusteroperator resources #287
• [release 4.5] Bug 1888607: Fixes policyClient and the corresponding config. #227
• Bug 1904079: Add hostsubnet to sample archive & fix bug… #278
• Bug 1880318: Update k8s version to v0.18.6 #284
• [release 4.5] Bug 1887886: Add the namespace to the gatherers reports to avoid conflicts #219
• Backport e2e tests #252
• [release 4.5] Bug 1885515: Fixes ‘make build’ #204
• Bug 1884551: Adds PodDisruptionBudgets gather. #199
• Bug 1883175: Gather MachineSet info #195
• Bug 1880352: collect hostsubnet information #180
• Bug 1882237: Add new team members to OWNERS #191
• Full changelog

ironic

• Bug 1917966: Force update of dnsmasq #138
• Full changelog

ironic-inspector

• Bug 1917966: Force update of dnsmasq #57
• Full changelog

jenkins, jenkins-agent-maven

• [release 4.5] Bug 1929120: update kubernetes-client-api #1232
• [release 4.5] Bug 1929918: Upgrade Jenkins to 2.263.3 #1235
• Bug 1922554: Update ant plugin CVE-2020-11979 #1210
• Bug 1896402: various fixes #1175
• Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
• Full changelog

jenkins-agent-nodejs

• [release 4.5] Bug 1929120: update kubernetes-client-api #1232
• [release 4.5] Bug 1929918: Upgrade Jenkins to 2.263.3 #1235
• Bug 1922554: Update ant plugin CVE-2020-11979 #1210
• Bug 1896402: various fixes #1175
• Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
• Bug 1857550: bump jenkins to 2.235.2 #1117
• Bug 1857559: Bump matrix plugin #1127
• Full changelog

k8s-prometheus-adapter

• Bug 1897313: Populate both CPU and Memory resource container metrics if one is specified #37
• Full changelog

keepalived-ipfailover, pod

• Bug 1900725: Pod process container does not correctly reap zombie process with shareProcessNamespace: true #57
• Full changelog

kube-client-agent, kube-etcd-signer-server

• Bug 1872535: vendor: bump golang.org/x/text #23
• Full changelog

kube-proxy, sdn

• Bug 1935297: Prefer local endpoint for cluster DNS service #268
• Bug 1904456: NetworkPolicy performance fixes, v2 #258
• Bug 1891455: Fix error handling from DNS nameservers #211
• Bug 1897478: Bump OVS to 2.13 #238
• Bug 1915008: Revert NetworkPolicy performance fixes (4.5) #242
• Bug 1904456: NetworkPolicy performance (pod caching) #229
• Bug 1894784: fix pod creation deadlock #217
• Bug 1901043: Enable conntrack for ovs-multitenant unless userspace proxy #225
• UPSTREAM<carry>: Bug 1880341: Fix bug in reflector not recovering from “Too large resource version” #215
• Bug 1895057: Ignore if netns is already deleted while deleting ns #218
• Bug 1878624: Invalid egressCIDR value causes sdn pods to fail on startup #187
• Bug 1881830: Emit a warning and ignore if empty cidr is passed to kubeproxy #195
• Bug 1878788: vxlan_monitor_test: fix flake #191
• Bug 1874798: Add NodeInformer to EgressIP #182
• Full changelog

kube-state-metrics

• Bug 1881103: Bump to fix a bug in client-go #36
• Full changelog

kube-storage-version-migrator

• Bug 1893637: Fix bug in reflector not recovering from “Too large resource version” #161
• Full changelog

kuryr-cni, kuryr-controller

• Bug 1901495: Correctly compare SG rules in NP code #429
• Bug 1900491: Ensure members are deleted from pools when there is no endpoints #413
• Bug 1893996: Fix duplicated sg rules on NP crd #392
• Bug 1884192: Set read timeout for any request in K8sClient #360
• Bug 1860311: Civilize logging vol 2 #351
• Bug 1883419: Cleanup ports belonging to deleted nodes #354
• Full changelog

libvirt-machine-controllers

• Bug 1887373: Add leader election mechanism to release-4.5 #211
• Full changelog

machine-api-operator

• Bug 1888206: Adjust alert timing and severity #729
• Bug 1869320: [release-4.5] [vSphere] Reduce sync period to 10 minutes #764
• Bug 1880343: Bump K8s dependencies to v0.18.9 #718
• Bug 1864352: Add leader election mechanism to release 4.5 #664
• Full changelog

machine-config-operator

• Bug 1884195: etcd-quorum-guard remove toleration timeouts #2133
• Bug 1880333: bump k8s.io/client-go to 0.18.6 #2354
• Bug 1873207: [baremetal] Wait for NM dhcp nameserver population #2119
• Bug 1907636: [vsphere, openstack] Add missing proxy settings to resolv-prepender #2347
• Bug 1907636: [on-prem] export proxy variables to be taken in account #2301
• Bug 1903655: Use mc name as finalizer for kubelet config #2274
• Bug 1900013: Drop kubelet logging back down to level 3 #2247
• Bug 1904082: ctrcfg_test: Wait for our prior target config #2284 #2284
• Bug 1890797: Set NonVirtualIP in mdns plugin config #2137
• Bug 1874815: pkg/server: reduce calls to ignition parse #2053
• Bug 1856529: Create a drop-in file for cri-o’s default_capabilities #2050
• Bug 1862874: [baremetal & friends] verify resolv.conf in HAProxy static pod synced with host resolv.conf #1974
• Bug 1881147: OpenStack: Don’t failover api vip if loadbalanced endpoint is responding #2110
• Full changelog

multus-whereabouts-ipam-cni

• Bug 1868772: [backport 4.5] Change error message (for missing kubeconfig) #26
• Full changelog

must-gather

• Bug 1887446: [release-4.5]Backport gather_core_dumps #183
• Full changelog

oauth-server

• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #66
• Bug 1882055: Fix bug in reflector not recovering from “Too large resource version” #57
• Full changelog

openshift-apiserver

• Bug 1931404: fixes a data race in SerializeObject function #188
• Bug 1905991: Detecting broken connections to the Kube API takes up to 15 minutes #164
• Bug 1906429: When using webhooks in OCP 4.5 fails to rollout latest deploymentconfig #168
• Bug 1883994: Fix label value validation for BuildConfigs #144
• Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #137
• Full changelog

openshift-controller-manager

• remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #163
• Bug 1883994: Fix label value validation for Builds #138
• Bug 1880357: Bump k8s.io packages #140
• Full changelog

openshift-state-metrics

• Bug 1882448: bump k8s.io/client-go dependency #58
• Full changelog

openstack-machine-controllers

• Bug 1864352: Update leader election for release 4.5 #117
• Full changelog

operator-lifecycle-manager

• Bug 1940651: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2052
• Bug 1933779: Support InstallPlan steps upgrading existing ClusterIP Services. #2021
• Bug 1928263: Fix zero-delay resyncs for certain registry update policies. #2006
• Bug 1904584: Check sa owner 4.5 #1909
• Bug 1896079: Services should not have duplicate ownerrefs #1857
• Bug 1921484: use OLM client when installing CRDs #1985
• Bug 1910401: Preserve original .status.lastUpdateTime in copied CSVs. #1930
• Bug 1905137: Recreate pending installplan if deleted before approval #1894
• Bug 1892372: OLM should use valid CA certs if available #1865
• Bug 1882444: remove extra polling check #1780
• Bug 1878297: remove duplicate catalog source pod when polling #1765
• Bug 1887944: ensure installplan step resource manifests reference configmaps #1809
• Bug 1880359: [release-4.5] Bump 1.18.9 #1778
• Bug 1878307: shorten catalog sync interval if polling is enabled #1764
• Bug 1878359: update catalog image pull policy #1760
• Full changelog

operator-marketplace

• Bug 1909217: Do not report degraded when Marketplace exits gracefully #371
• Bug 1881542: Set all CO conditions on meeting expected sync ratio #356
• Bug 1867799: Correctly count non-default Marketplace CRs #324
• Bug 1873546: Increase registry delay for large payloads #335
• Full changelog

operator-registry

• Bug 1904554: TestListPackages is flaky #533
• Bug 1902803: Reconstruct replaces/splits for Listbundles from channel_entry. #524
• Bug 1845588: fix(images): use docker/podman create and cp for exec unpacking #400
• Full changelog

ovirt-machine-controllers

• Bug 1864352: Add leader election mechanism to release 4.5 #68
• Full changelog

ovn-kubernetes

• Bug 1921283: [4.5] Fix MCS-blocking iptables rules #426
• Bug 1882694: Pin OVS to latest 4.4.22 RPM version #290
• Bug 1908921: ovn/node: use node name as chassis hostname #390
• Bug 1877561: [release-4.5]Fix orphaned ACLs backport to 4.5 #287
• Bug 1888352: Fix IPv6 neighbor discovery hack #313
• Bug 1862700: Fix ovnkube-node aggressive memory allocation to prevent memory bloating #227
• Bug 1882092: Pin 4.5 OVN to 4.4.24 #284
• Bug 1868501: Do not default HO cluster subnets #268
• Full changelog

prometheus

• Bug 1892583: bump k8s.io/client-go to v0.18.9 #68
• Bug 1881111: go.mod,go.sum: Bump client-go & co. #59
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 1891815: Revert “Bug 1881077:go.sum,go.mod: Bump client-go & co. to fix known bug” #99
• Bug 1881077: go.sum,go.mod: Bump client-go & co. to fix known bug #95
• Full changelog

prometheus-node-exporter

• Bug 1890466: Fix issues with too many log messages in NFS collector #71
• Full changelog

service-ca-operator

• Bug 1880360: Fix bug in reflector not recovering from “Too large resource version” #124
• Full changelog

---

View changelog in Markdown or change previous release: 4.12.0-0.nightly-2022-08-12-0534384.12.0-0.nightly-2022-08-11-2347104.12.0-0.nightly-2022-08-11-1917504.12.0-0.nightly-2022-08-11-1310114.12.0-0.nightly-2022-08-11-0911444.12.0-0.nightly-2022-08-11-0408424.12.0-0.nightly-2022-08-10-2006114.12.0-0.nightly-2022-08-10-1411164.12.0-0.nightly-2022-08-10-0348424.12.0-0.nightly-2022-08-09-2238064.12.0-0.nightly-2022-08-09-1146214.12.0-0.nightly-2022-08-09-0631524.12.0-0.nightly-2022-08-08-193833───4.12.0-0.ci-2022-08-12-1411454.12.0-0.ci-2022-08-12-1041154.12.0-0.ci-2022-08-12-0541154.12.0-0.ci-2022-08-12-0151144.12.0-0.ci-2022-08-11-2203424.12.0-0.ci-2022-08-11-1827384.12.0-0.ci-2022-08-11-1410224.12.0-0.ci-2022-08-11-0947344.12.0-0.ci-2022-08-11-0521444.12.0-0.ci-2022-08-11-0130214.12.0-0.ci-2022-08-10-2150214.12.0-0.ci-2022-08-10-1753544.12.0-0.ci-2022-08-10-1335224.12.0-0.ci-2022-08-10-055257───4.11.0-0.nightly-2022-08-12-0003134.11.0-0.nightly-2022-08-11-0236084.11.0-0.nightly-2022-08-10-1612274.11.0-0.nightly-2022-08-04-0813144.11.0-0.nightly-2022-08-03-2304464.11.0-0.nightly-2022-08-03-1840584.11.0-0.nightly-2022-08-03-1206124.11.0-0.nightly-2022-08-03-0219594.11.0-0.nightly-2022-08-02-014045───4.11.0-0.ci-2022-08-12-1022454.11.0-0.ci-2022-08-12-0551144.11.0-0.ci-2022-08-12-0211494.11.0-0.ci-2022-08-11-2221144.11.0-0.ci-2022-08-11-1814584.11.0-0.ci-2022-08-11-1450214.11.0-0.ci-2022-08-11-1031484.11.0-0.ci-2022-08-11-0641474.11.0-0.ci-2022-08-11-0243484.11.0-0.ci-2022-08-10-2309504.11.0-0.ci-2022-08-10-1928594.11.0-0.ci-2022-08-10-151639───4.10.0-0.nightly-2022-08-12-0141024.10.0-0.nightly-2022-08-11-1852534.10.0-0.nightly-2022-08-10-1403544.10.0-0.nightly-2022-08-09-2036114.10.0-0.nightly-2022-08-09-125340───4.10.0-0.ci-2022-08-12-0822474.10.0-0.ci-2022-08-12-0244204.10.0-0.ci-2022-08-11-2101094.10.0-0.ci-2022-08-11-1225454.10.0-0.ci-2022-08-10-1455314.10.0-0.ci-2022-08-10-0715514.10.0-0.ci-2022-08-10-040605───4.9.0-0.nightly-2022-08-11-2325494.9.0-0.nightly-2022-08-11-1857114.9.0-0.nightly-2022-08-11-0503554.9.0-0.nightly-2022-08-10-0154404.9.0-0.nightly-2022-08-09-1553594.9.0-0.nightly-2022-08-08-0749134.9.0-0.nightly-2022-08-05-0617414.9.0-0.nightly-2022-08-03-0124584.9.0-0.nightly-2022-08-01-1500294.9.0-0.nightly-2022-07-26-141848───4.9.0-0.ci-2022-08-12-0614584.9.0-0.ci-2022-08-12-0314304.9.0-0.ci-2022-08-11-2238464.9.0-0.ci-2022-08-11-2010314.9.0-0.ci-2022-08-11-1907104.9.0-0.ci-2022-08-11-1647244.9.0-0.ci-2022-08-11-1548114.9.0-0.ci-2022-08-11-0324194.9.0-0.ci-2022-08-02-0343524.9.0-0.ci-2022-08-02-003741───4.8.0-0.nightly-2022-08-09-2334324.8.0-0.nightly-2022-08-09-1921104.8.0-0.nightly-2022-08-09-1252434.8.0-0.nightly-2022-08-05-0617294.8.0-0.nightly-2022-08-03-142819───4.8.0-0.ci-2022-08-12-1043464.8.0-0.ci-2022-08-12-0526354.8.0-0.ci-2022-08-11-2142214.8.0-0.ci-2022-08-11-1920284.8.0-0.ci-2022-08-11-1847004.8.0-0.ci-2022-08-11-1500114.8.0-0.ci-2022-08-09-2106344.8.0-0.ci-2022-08-02-1337004.8.0-0.ci-2022-08-02-0340154.8.0-0.ci-2022-08-01-051538───4.7.0-0.nightly-2022-08-12-1037384.7.0-0.nightly-2022-08-11-1647334.7.0-0.nightly-2022-08-10-0954334.7.0-0.nightly-2022-08-10-0903574.7.0-0.nightly-2022-08-03-204229───4.7.0-0.ci-2022-08-12-1338134.7.0-0.ci-2022-08-12-0440004.7.0-0.ci-2022-08-11-1930564.7.0-0.ci-2022-08-11-1812534.7.0-0.ci-2022-08-09-1745174.7.0-0.ci-2022-08-09-1451294.7.0-0.ci-2022-08-04-180808───4.6.0-0.nightly-2022-08-10-1016164.6.0-0.nightly-2022-08-09-1540164.6.0-0.nightly-2022-08-09-1419054.6.0-0.nightly-2022-08-09-1116484.6.0-0.nightly-2022-08-03-091852───4.6.0-0.ci-2022-08-12-1006334.6.0-0.ci-2022-08-11-1920554.6.0-0.ci-2022-08-03-1557224.6.0-0.ci-2022-08-02-1804484.6.0-0.ci-2022-08-01-0129294.6.0-0.ci-2022-08-01-0059294.6.0-0.ci-2022-07-27-143900───4.12.0-ec.14.12.0-ec.0

Source code for this page located on github