4.6.49

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.6.49-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

Untested upgrades: 4.5.21, 4.5.22, 4.5.24, 4.5.25, 4.5.28, 4.5.29, 4.5.31, 4.5.32, 4.5.34, 4.5.35, 4.5.36, 4.6.10, 4.6.12, 4.6.13, 4.6.16, 4.6.17, 4.6.18, 4.6.19, 4.6.20, 4.6.21, 4.6.23, 4.6.24, 4.6.25, 4.6.26, 4.6.27, 4.6.28, 4.6.30, 4.6.31, 4.6.32, 4.6.33, 4.6.34, 4.6.35, 4.6.37, 4.6.38, 4.6.39, 4.6.40, 4.6.41, 4.6.42, 4.6.43, 4.6.7, 4.6.8, 4.6.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.6.1

Created: 2021-10-27 10:44:09 +0000 UTC

Image Digest: sha256:82254f7c552f688775f7951ff96addcc384b47d6483e3a3eab474788a891ec81

Release 4.6.49 was created from registry.ci.openshift.org/ocp/release:4.6.0-0.nightly-2021-10-27-050036

Components

Kubernetes upgraded from 1.19.0 to 1.19.14
Red Hat Enterprise Linux CoreOS upgraded from 46.82.202010091720-0 to 46.82.202110262158-0 (diff)

New images

driver-toolkit git bd508e26 sha256:313379e26b715b4fdeda22a3a625f9db714a63e19bf3b986facb92fda5551cfb
jenkins-agent-base git 57c7cb18 sha256:123020125a18e7b11b36a61ef74b0fac63133a6d6582d18baf00a67525457161

Removed images

local-storage-static-provisioner

Rebuilt images without code change

cluster-bootstrap git 64410191 sha256:4f09b13ced6e735aaf1a11e7037c77c038deed6c698de38fbbad68511f3fe413
container-networking-plugins git ca372dec sha256:a106a5a132158000b67c400ac9017286d48f2e01713d277b248d4dc469e9c744
ironic-hardware-inventory-recorder git 2205538a sha256:0c30243bf7e7429aa4ac0fbc9314e15738072e89b5ed71390e4649e4be0ae9cf
kube-storage-version-migrator git 6deeefa7 sha256:535b78f9a6533f323bd1544ca7d12c1dcfdb09ee514ca1d7842f768340e49ec7
machine-os-content sha256:1ad140e1665ebe768e0ff957a8d7963141c34dd58c9e9691f3fbf9d89212787b

aws-ebs-csi-driver

Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #177
Full changelog

aws-ebs-csi-driver-operator

Bug 1915467: redeploy CSI Controller Deployment when secret change #110
Bug 1912720: Remove stale ResourceSyncControllerDegraded condition #105
Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #108
Full changelog

aws-machine-controllers

Bug 1976198: update aws-sdk-go to v1.38.25 #414
Bug 1941563: Ensure response body is closed when we are finished with the request #395
“Bug 1912531: revendor mao” #388
Updating ose-aws-machine-controllers builder & base images to be consistent with ART #383
Full changelog

aws-pod-identity-webhook

Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #131
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1964751: Bump boot images for RHCOS fixes #5228
Update OWNERS #5244
OWNERS: add more core team members as approvers #5125
Bug 1981929: aws: allow use of unknown regions in known partitions #5073
release-4.6: Update OpenStack approvers #4507
Bug 1951572: registry.svc.ci.openshift.org is no longer valid #4862
Bug 1956485: bump RHCOS 4.6 boot images #5011
Bug 1963959: remove ovirt_cafile from ovirt-credentials secret #4955
Bug 1974775: Adding more nitro and the AMD instance types (AWS, UPI) #5022
Bug 1949150: add proxy params to bootstrap ignition #4847
Bug 1976633: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5036
Bug 1971164: Updating AWS instance types #5021
Bug 1964120: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4956
Bug 1947998: gcp: install google cloud sdk with yum the recommended way #4840
Bug 1929872: remove GCP role bindings before service accounts #4665
Bug 1920552: vSphere destroy: handle failed clusters #4618
Updating ose-baremetal-installer builder & base images to be consistent with ART #4539
Updating ose-installer builder & base images to be consistent with ART #4538
Updating ose-installer-artifacts builder & base images to be consistent with ART #4547
Bug 1916297: openstack: Create Control plane nodes sequentially #4550
Bug 1918510: installconfig: enable vsphere folders for datacenters and clusters. #4574
Bug 1915050: Set same additional networks on Bootstrap as Control Plane #4535
Bug 1917928: Set Additional Control Plane Security Groups on Bootstrap Node #4570
Bug 1924670: openstack/validation: enforce control plane size #4612
Bug 1918961: vsphere destroy: delete tag category created by installer #4579
Bug 1920253: disable anonymous auth on bootstrap nodes #4591
Bug 1913813: OpenStack: Skip collecting info for empty subnet IDs #4527
Bug 1899161: openstack: consider volumes for storage requirements checks #4508
Bug 1901736: openstack: CP nodes port to use addtional SGs #4420
Bug 1894678: Patch Flavor Not Found validation for OpenStack Install Config #4505
Bug 1898172: add tagging perms for aws shared networks #4384
Bug 1899161: Cherry-Pick: openstack: remove platform flavor validation #4394
Bug 1899176: Bump RHCOS bootimages to 46.82.202011260640-0 #4422
Bug 1894310: baremetal: pin libvirt to 4.5.0 #4340
Bug 1889855: additional AWS regions for RHCOS AMIs #4286
Bug 1889764: [release-4.6] vSphere: Update dockerfile removing certificate #4284
install-approvers: add staebler #4298
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller builder & base images to be consistent with ART #133
“Bug 1912531: revendor mao” #137
Bug 1886582: Remove Node finalizer first on delete #123
Full changelog

baremetal-operator

Updating ose-baremetal-operator builder & base images to be consistent with ART #119
Full changelog

baremetal-runtimecfg

Bug 1983124: Keepalived- verify that unicast peers list isn’t empty on master nodes #147
Bug 1942506: 4.6 EUS node-ip handling extravaganza #133
Bug 1932967: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #123
Bug 1926732: add CloseIdleConnections for HTTP K8S API healthcheck #121
Updating baremetal-runtimecfg builder & base images to be consistent with ART #114
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1942818: when mirroring to a file destination, mount images under the index location #892
Bug 1969929: exclude security during exctraction #877
Bug 1976285: skip-multiple-scopes with adm catalog mirror #873
Bug 1971561: set User-Agent when talking with registries #872
Bug 1973613: Preserve AuthInfo when switching projects #862
Fix unit test failure #839
Bug 1947430: Revert “Bug 1812813: oc debug node: create debug namespace” #808
Bug 1942940: [release-4.6] inspect clusteroperators as a backup to must-gather if it fails #782
Bug 1926172: add rsync & log re-tries #760
Bug 1939549: Fix unit test to use new IS #770
Bug 1923054: Fix error in jsonpath when object is empty #724
Bug 1900991: idle: also annotate the service #727
Bug 1891892: Create Windows version information #630
Bug 1913109: Should be able to debug an init container #686
Bug 1906796: use proper username for image verification #667
Bug 1917548: 4.6 backports for oc adm catalog mirror #711
Bug 1906332: bump discovery burst to 250 #716
Updating openshift-enterprise-cli builder & base images to be consistent with ART #698
Updating ose-tools builder & base images to be consistent with ART #704
Updating ose-cli-artifacts builder & base images to be consistent with ART #705
Updating openshift-enterprise-deployer builder & base images to be consistent with ART #703
Bug 1891427: Login: Avoid overwriting same user from different cluster #619
Bug 1893693: account for nil in LastTransitionTime in route status #633
Bug 1878163: Updating ose-cli-artifacts builder & base images to be consistent with ART #597
Full changelog

cloud-credential-operator

Bug 1963421: oVirt credentials secret contains unnecessary “ovirt_cafile” #347
Bug 1958959: manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #337
Bug 1916868: Check 47 creds backport #287
Bug 1910372: Backport redistribute new root creds in passthrough mode #279
Updating ose-cloud-credential-operator builder & base images to be consistent with ART #281
Bug 1921901: exclude run-level 0 namespaces from MutatingWebhook for Pods #292
Bug 1896919: [release-4.6] add new credentials field for AWS Secrets #268
Bug 1907613: operator: remove odicdiscoveryendpoint controller #277
Bug 1896230: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #267
Full changelog

cluster-authentication-operator

Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #397
Bug 1914848: add ServiceMonitor for the oauth apiserver #396
Bug 1891795: deployment: update event spam #367
Bug 1893803: Fix wrong operator config informer #374
Bug 1893803: update ingress node available to handle custom placement #371
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #188
Bug 1927854: VPA: Ignore admission hook failures #186
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #189
Full changelog

cluster-autoscaler-operator

Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #191
Full changelog

cluster-config-operator

Updating ose-cluster-config-operator builder & base images to be consistent with ART #177
Bug 1905573: [release 4.6] Add warning of the consequences of changing bound token issuer #179
Full changelog

cluster-csi-snapshot-controller-operator

Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART #73
Full changelog

cluster-dns-operator

Bug 1970140: Corefile: Set bufsize to 512 bytes for all servers #279
Bug 1955632: Corefile: Enable bufsize plugin for all servers #272
Bug 1954760: Enable errors plugin for custom upstream resolvers #271
Bug 1937090: Configure CoreDNS to shut down gracefully #248
Bug 1944245: Corefile: Use 30 second max TTL for caching of negative responses #256
Bug 1936589: Set CoreDNS’s cache’s maximum TTL to 900 seconds #246
Bug 1928773: Set CoreDNS readiness probe period and timeout each to 3 seconds #236
Bug 1916907: Prevent dig errors from corrupting host’s /etc/hosts #231
Bug 1903887: Set DNS DaemonSet’s maxUnavailable value to 10% #219
Updating ose-cluster-dns-operator builder & base images to be consistent with ART #228
Full changelog

cluster-etcd-operator

Bug 1979585: Validate the status of the etcd snapshot during backup and restore #624
Bug 1987134: Provide an option force backup even when API is not available to check the health. #633
Bug 1978014: Increase inertia duration for the EtcdMembersDegraded condition #620
Bug 1965535: [release-4.6] Improve cert controller detection and correction of invalid certs #604
Bug 1905566: Backup script should get the latest revision of static-pod-resources #508
Bug 1934342: pkg/operator/metriccontroller: cleanup transports #551
Bug 1915560: operator: remove EtcdMemberIPMigratorDegraded stale condition #521
Bug 1918281: *: ensure etcd listens on strong ciphers #526
Bug 1917411: pkg/operator: ensure etcd endpoints configmap #530
Updating cluster-etcd-operator builder & base images to be consistent with ART #520
Bug 1903353: Use socket readiness probe to avoid generating zombies #503
Bug 1897542: Revert “Use restore pod yaml from the backup when restoring” #496
Bug 1888026: bump library-go for static pod uid #479
OWNERS: change component to Etcd #470
Full changelog

cluster-image-registry-operator

Bug 1982611: bump aws-sdk-go to v1.38.35 #706
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #652
Bug 1959563: Using http.DefaultTransport timeouts #690
Bug 1949040: Use mkdir -p to create ca-trust directories #678
Bug 1936984: Make /etc/pki/ca-trust/extracted writable #672
Bug 1923993: Make pruner always aware of registry name #659
Bug 1904091: Creating prometheus record rule for v1 imports #646
Bug 1916857: Sync status to spec with regards to Swift config #654
Bug 1893977: Keep node-ca daemonset in-sync with reference version #632
Bug 1898152: Reduce default log level for pruner #641
Bug 1894195: Operator should use entrypoint script #633
Full changelog

cluster-ingress-operator

Bug 1921193: Fix inconsistent ingress operator status after upgrade #541
Bug 1927364: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #547
Bug 1918994: Override termination grace period for the router deployment #539
Bug 1896167: Back port HAProxy reload failures alert fix #486
Bug 1918371: Add “ingress.operator.openshift.io/hard-stop-after” annotation #535
Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #528
Bug 1905490: Revert “Support changing ingresscontroller load balancer scope” #507
Bug 1904594: Assume ingresscontroller is external absent status #503
Bug 1893879: Improve status reporting when pods cannot be scheduled #483
Bug 1891626: Support changing ingresscontroller load balancer scope #482
Bug 1887935: TestForwardedHeaderPolicy*: Make case-insensitive #475
Full changelog

cluster-kube-apiserver-operator

Bug 1891742: bump(library-go): controller/staticpod: reduce noise of not-ready containers #1029
Bug 1900270: don’t allow upgrades when webhooktokenauthenticators are set #1010
Bug 1888862: [4.6] set servicesSubnet correctly in dual-stack clusters #985
Bug 1888026: [release-4.6] bump library-go for static pod uid #994
BUG 1888309: p&f: make oas/oauth SAR/TokenReview traffic exempt #984
Full changelog

cluster-kube-controller-manager-operator

Bug 1913030: Add recycler pod template as a ConfigMap #490
Bug 1916347: Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #496
Bug 1891742: bump(library-go): controller/staticpod: reduce noise of … #493
Bug 1898831: do not set allocate-node-cidrs, which is handled by ovn and sdn #484
Bug 1888026: bump library-go for static pod uid #474
Full changelog

cluster-kube-scheduler-operator

Bug 1916347: Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART #320
Bug 1891742: bump(library-go): controller/staticpod: reduce noise of … #314
Bug 1903586: Sync new kube-scheduler-client-cert-key on recovery #315
Bug 1888026: bump library-go for static pod uid #296
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #37
Full changelog

cluster-machine-approver

Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #99
Full changelog

cluster-monitoring-operator

Bug 2009094: manifest allowlist: add acm_managed_cluster_info in 4.6 #1408
Bug 1987246: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1304
Bug 1969964: Recording rule for builds by strategy #1207
Bug 1967938: Use alertmanager_integrations metric instead of alertmanager_notifications_total for AlertmanagerReceiversNotConfigured #1228
Bug 1941634: allow only /metrics for kube-rbac-proxy in front of UWM #1222
Bug 1955483: [4.6] Drop high-cardinality metrics from kube-state-metrics which aren’t used #1221
Bug 1955464: drop container_memory_failures_total metric backport #1180
Bug 1955454: [release-4.6] removing crio metric #1159
Bug 1960465: [release-4.6] Bring new etcd alerts #1161
Bug 1955471: [4.6] Disable collection of node_mountstats_nfs metrics in node_exporter #1147
Bug 1946597: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1105
Bug 1929354: [4.6] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus #1071
Bug 1920898: [4.6] pkg/manifests: fix prometheus-proxy trustedCA #1083
Bug 1937907: etcdInsufficientMembers is wrong when etcd is in a pod #1080
Bug 1918202: jsonnet: remove Ceph block devices in rules #1040
Bug 1904091: Exporting registry v1 protocol usage metric #1002
Bug 1912430: [Backport 4.6] Set resources to the native spec field #1028
Bug 1907830: Backporting #965 #1022
Updating cluster-monitoring-operator builder & base images to be consistent with ART #1036
Bug 1900792: Collect all resource counts for telemetry #989
Bug 1905903: jsonnet: remove apiserver_request:availability30d #1014
Bug 1892706: fix cluster:cpu_core_hyperthreading rule for s390x #1005
Bug 1900988: jsonnet: configure SCCs #990
Bug 1887339: Preserve labels and annotations during reconciliation #955
Full changelog

cluster-network-operator

Bug 1973770: Reduce SSL sec level for ovsdb connections #1131
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #1150
Bug 1983744: Use 10% for ovnkube-node for maxUnavailable #1157
Bug 1851549: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.6 #1121
Bug 1972587: config: Allow enable-profiling to be used to set profiling #1135
Bug 1973599: Escape characters on ini file #1137
Bug 1937400: kuryr/alerts: change the rule for free count #1012
Bug 1970453: Replace to correct OpenFlow version when replacing flows #1111
Bug 1932114: Detect Nodes Network MTU #1070
Bug 1963280: The Multus daemonset should handle 10% maxUnavailable #1103
Bug 1963279: Use 10% for ovs maxUnavailable for rolling update #1102
Bug 1959185: Backport rbac proxy init script fixes #1096
Bug 1950407: Fix kube-rbac-proxy startup scripts #1061
Bug 1936710: OSD-6600 network-metrics missing priorityClass #1006
Bug 1950094: Upgrade nodes before masters #1060
Bug 1897526: Ensure LimitedPortsOnNetwork is only triggered when needed #907
Bug 1942862: Kuryr: Let Kuryr autodetect primary CNI interface #1035
Bug 1934652: [release-4.6] - Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable #998
Bug 1938280: Include LB members for Machines created on day-2 operation #1018
Bug 1916601: guard against the deletion of the network CRD: network.operator.openshift.io #953
Bug 1901605: Kuryr: Allow changes to KuryrConfig #890
Updating cluster-network-operator builder & base images to be consistent with ART #946
Bug 1887462: Add ovn-db-pod label on the master pods #871
Bug 1890297: openshift-sdn: multitenant: join openshift-etcd-operator to etcd #850
Bug 1880591: Adds missing check for ovs-config-executed #836
Full changelog

cluster-node-tuning-operator

Bug 1990629: gather all Tuned CRs #259
Bug 1920525: Recover gracefully after Tuned errors. #197
Updating cluster-node-tuning-operator builder & base images to be consistent with ART #190
Bug 1900261: Automatically restart stalld after exit. #182
Bug 1896381: Add a weak dependency on kmod to tuned. #176
Bug 1892459: [release-4.6] Ship the latest version of stalld. #171
Bug 1892459: [release-4.6] Set scheduling policy to SCHED_FIFO to stalld and lower threshold. #170
Full changelog

cluster-openshift-apiserver-operator

Bug 1996051: bindata: run openshift-apiserver as root explicitly. #469
Bug 1955506: explicitly allow apiserver pods to write to their root FS #470
Bug 1887718: need to be able to disable kube-apiserver connectivity checks #403
Full changelog

cluster-openshift-controller-manager-operator

Bug 1944145: Bump kubernetes to 0.19.9 #205
Bug 1931857: Set registry routes in operand config #200
Bug 1916347: Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #193
Full changelog

cluster-policy-controller

Updating cluster-policy-controller builder & base images to be consistent with ART #53
Bug 1904028: The quota controllers should resync on new resources and make progress. #50
Bug 1891518: openshift-object-counts quota is not dynamically updating as the resource is deleted #45
Bug 1890532: release lock on graceful shutdown #43
Full changelog

cluster-samples-operator

Bug 1950809: add DeepCopy to avoid SharedInformer cache mutation #371
Updating ose-cluster-samples-operator builder & base images to be consistent with ART #353
Bug 1890232: Override jenkins-agent-base imagestream #333
Full changelog

cluster-storage-operator

Bug 1921599: Add annotations to cluster-csi-drivers namespace #132
Updating cluster-storage-operator builder & base images to be consistent with ART #124
Full changelog

cluster-update-keys

Bug 1916582: readme: specify which keys are used in nightlies/OKD/OCP builds #30
Updating ose-cluster-update-keys builder & base images to be consistent with ART #29
Full changelog

cluster-version-operator

Bug 2014165: pkg/cvo/egress: Load HTTPS proxy from Proxy status #673
Bug 1943973: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #540
Bug 1924194: pkg/payload/task_graph: Require firstIncompleteNode to have tasks #510
Bug 1925199: add current profile annotations to CVO manifests #512
Bug 1927515: pkg/cvo: Use shutdownContext for final status synchronization #517
Bug 1921180: pkg/cvo/sync_worker.go: Ignore work changes during init #506
Bug 1918494: use child context to verify payload signature on forced update #504
*: Replace registry.svc.ci.openshift.org with registry.ci.openshift.org #502
Bug 1896584: pkg/cvo/metrics: Abandon child goroutines after shutdownContext expires #480
Full changelog

configmap-reloader

Updating configmap-reload builder & base images to be consistent with ART #26
Full changelog

console

Bug 2002151: Fix the event listener optional types #10019
Bug 1987228: Handle array to string conversion for HTTPS checkbox value #9676
Bug 1980182: operator UI not working with multiple version CRD in 4.6 #9549
Bug 1978159: update cluster-local label for ksvc #9389
Bug 1972694: Omit bitbucket branch in URL if it contains slash #9271
Bug 1970984: Add pipeline annotation to secrets for private git repo import with pipeline #9224
Bug 1972661: fixes: WebTerminal widget should send resize events #9270
Bug 1969878: fix resources fetched by firehose to show the correct Pod donut #9199
Bug 1960094: Make console works against api proxy #8915
Bug 1960545: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8926
Bug 1966422: Create application edit url based on git provider #9088
Bug 1950490: Fix “Create binding” link from Role page, RoleBindings tab #8686
Bug 1961936: Fix topology crash on install of ODH operator to project #8971
Bug 1933666: [release-4.6] Create ImageStream and other resources for samples step by step #8261
Bug 1948370: Remove cluster label from predefined monitoring queries #8614
Updating openshift-enterprise-console builder & base images to be consistent with ART #8386
Bug 1939609: Fix null handling in FilterToolbar_ to prevent possible exceptions #8395
Bug 1943160: support service binding operator version 0.5.0 #8465
Bug 1940905: [release-4.6] Remove master as default branch and use only when ref is given #8424
Bug 1943705: Add ‘Roll Back’ action for Replication Controllers #8491
Bug 1927855: sort cluster task in pipeline builder #8139
Bug 1925037: fix delete app modal error when resource not found #8053
Bug 1935096: Apply var pf-global–FontFamily–monospace to the create secret textarea input #8312
Bug 1931515: allow choice of binding type when creating RoleBinding #8212
Bug 1933017: Fix to avoid overriding of d/dc pod template container values #8322
Bug 1934664: Consider finally tasks when calculating task status #8292
Bug 1928230: retry co-fetch on 409 POST or 429 #8155
Bug 1933727: fix Internal registry deploy flow #8267
Bug 1926121: Listing Subscriptions in OLM should also show them when ‘All Projects’ namespace is picked #8096
Bug 1923939: add missing trigger types and update the optional fields - 4.6 #8015
Bug 1927800: fix query browser prometheus URL for non admin user #8138
Bug 1926371: scale pods using the ‘scale’ subresource #8099
Bug 1926340: Fix that image containers are fetched from external container registries (which doesn’t work for private image containers) #8098
Bug 1924437: Missing User RoleBindings in the Project Access Web UI #8034
Bug 1924069: fix pipeline rerun when pipelineSpec is embedded #8024
Bug 1919138: helmchartrepo is not http(s)_proxy-aware #7901
Bug 1916860: Filter out helm charts based on kubernetes version #7851
Bug 1920493: fix pipeline visualization with same pipeline & task name #7927
Bug 1920530: - System roles are not present while trying to create new role binding through web console #7929
Bug 1914342: make filesystem queries compatible with both RHCOS and RHEL nodes #7777
Bug 1916406: Helm chart repository index can contain unresolvable relative URL’s #7841
Bug 1911260: Fix logs streaming issue in multistream logs #7663
Bug 1924224: Fix source code URL for apps created using self-hosted repositories #8031
Bug 1921603: Fix crash when loaded is true but the data set doesn’t include the pods #7985
Bug 1916378: fix skipped tasks in conditional pipelines #7843
Bug 1915013: Fix pipeline visualization issue when taskspecs is used #7859
Bug 1910199: Replace ‘Baremetal’ with ‘BareMetal’ in the supported platforms for I… #7637
Bug 1924085: don’t hard-code artifact dir path #8025
Bug 1893738: Fix crash when helm manifest yaml contains duplicate keys #7069
Bug 1887813: assign masquerade to pod interface in RHV import #6936
Bug 1907827: fixes issue with kn resources if trigger goes to ksvc and IMC from same broker #7550
Bug 1905788: - Role name missing on create role binding form #7476
Bug 1909673: Hide scale buttons of pod donut for Pod resources #7472
Bug 1891697: Handle missing labels as empty #7002
Updating openshift-enterprise-console builder & base images to be consistent with ART #7811
Bug 1910066: fix yaml editor from remounting #7635
Bug 1910156: Add tolerations for ocs taint in localvolumeset and localvolumediscovery #7636
[release-4.6 ]Bug 1908749: Fix cluster creation when using localvolume #7591
Bug 1895325: Enable external mode for OpenStack and oVirt platform #7141
Bug 1905947: Add support for phase values of CephObjectStoreKind CRD used in OCS 4.5 #7478
Bug 1905622: Remove restriction on disk type selection for LocalVolumeSet #7464
Bug 1885442: Fallback to GQL HTTP on iOS devices #6843
Bug 1899382: removes techpreview badge from eventing #7264
Bug 1899056: Update dc strategy type and rolling params #7263
Bug 1898302: Use KUBEADM_PASSWORD_FILE by default #7227
Bug 1897766: [release-4.6]Incorrect instructions in the Serverless operator and application quick starts (edit) #7215
Bug 1897019: disable os upload if no os avaliable #7194
Bug 1896625: update apiVersion for eventing resources wrt serverless 1.10 #7179
Bug 1896149: Determine Secret type upon the save #7161
Bug 1895434: Fix edit flow in case of custom template application #7148
Bug 1895426: Show custom builder image in edit flows BuilderImage section #7147
Bug 1894878: Access server API via kubernetes.default.svc from Helm endpoints #7132
Bug 1891499: Show additional machine config pools while updating #7008
Bug 1891891: Wrong detail head on network policy detail page #7007
Bug 1890994: Fix form re-render on cancelling #6988
Bug 1890993: Fix selected capacity to reflect correct disk size #6987
Bug 1888717: Cypress: Fix ‘link-name’ accesibility violation #6942
Bug 1887551: Add additional provisioners to their AccessMode mapping #6908
Bug 1904600: Fix cluster monitoring link #7429
Bug 1901110: fix pod donut information #7313
Bug 1899728: fix filesystem queries #7278
Bug 1892428: Update library-go and replace runc module for v1.0.0-rc8 version #7022
Bug 1897043: add support for customSchema in resource sidebar for helm charts #7175
Bug 1898096: Ensure correct git URL for topology edit icon #7218
Bug 1890614: Fix Cypress test flake and accesibility violation: ‘Ensures buttons have discernible text’ #6981
Bug 1887782: Include CDI disk cloning to VM status #6923
Bug 1898875: Remove Tech Preview badge from dev console monitoring #7063
Bug 1893909: Remove Project link from Application Details page #7078
Bug 1899512: Allow creating storage cluster irrespective of LSO namespace #7268
Bug 1896600: Tolerate missing status on OperatorGroups #7177
Bug 1894868: Correctly report errors when backend tests fail #7273
Bug 1894868: fixed test “returned merged index file for all accessible helm repos” #7149
Bug 1894227: Handle values of 0 for maxUnavailable and maxSurge #7090
Bug 1893626: Fix Encryption request for OCS #7089
Bug 1885309: Fix bug where <Timestamp> for 12 hour has incorrect suffix #6835
Bug 1894235: Fix to allow shift-drag to regroup knative services in topology #7091
Bug 1893620: Replace route dropdown input with typeahead select menu in import/edit flow #7064
Bug 1892259: Format markdown text in Install Operand Form #7010
Bug 1890465: Fix edit app flow in case service not available #6978
Bug 1888577: PVC upload cannot continue after approve the certificate #6938
Bug 1887612: Change default terminal command for Windows Pods #6911
Bug 1885724: Update doc links in installed operators page #6855
Bug 1894129: Dont use lookbehinds regexp #7085
Bug 1893784: Use correct service account for operator monitoring #7073
Bug 1893015: Fix compression card metrics for Persitent dashboard #7044
Bug 1892695: update kafkaSource v1beta1 spec to remove resources #7027
Bug 1885239: Fix runtime error for basic users creating Prometheus instance #6834
Bug 1886541: Update trigger limit for Minimal Deployment #7032
Full changelog

console-operator

Updating openshift-enterprise-console-operator builder & base images to be consistent with ART #497
Full changelog

coredns

Updating coredns builder & base images to be consistent with ART #49
Full changelog

csi-driver-manila

Updating csi-driver-manila builder & base images to be consistent with ART #42
Full changelog

csi-driver-manila-operator

Bug 2002556: Do not degrade cluster on failure to reach Manila #127
Bug 2000097: Use cluster Proxy when available #118
Updating csi-driver-manila-operator builder & base images to be consistent with ART #76
Bug 1918367: Make Manila operator more tolerant #88
Bug 1921599: Add “openshift.io/node-selector” annotation to namespace #87
Full changelog

csi-driver-nfs

Bug 1916166: Updating csi-driver-nfs builder & base images to be consistent with ART #38
Full changelog

csi-external-attacher

Updating csi-attacher builder & base images to be consistent with ART #27
Full changelog

csi-external-provisioner

Updating csi-provisioner builder & base images to be consistent with ART #35
Full changelog

csi-external-resizer

Updating ose-csi-external-resizer builder & base images to be consistent with ART #116
Full changelog

csi-external-snapshotter, csi-snapshot-controller

Updating ose-csi-snapshot-controller builder & base images to be consistent with ART #37
Updating ose-csi-external-snapshotter builder & base images to be consistent with ART #38
Full changelog

csi-livenessprobe

Updating csi-livenessprobe builder & base images to be consistent with ART #20
Full changelog

csi-node-driver-registrar

Updating csi-node-driver-registrar builder & base images to be consistent with ART #25
Full changelog

docker-builder

Bug 1946363: move entitlement related secrets back to mounts.conf #242
Bug 1939219: bump(*): #225
Bug 1919359: better surface dockerconfigjson errors causing image pull errors #210
Updating openshift-enterprise-builder builder & base images to be consistent with ART #201
Bug 1920626: more automount of cluster trust bundle reverts; no longer automount /run/secrets #212
Bug 1920626: narrow scope of rhsm transient bind mount #211
Force use of runc, since we know we’re privileged, and customize our seccomp filter #207
Bug 1889955: Bump dependencies to mitigate CVE-2020-8564 #193
Bug 1901512: Fix private git clones behind a proxy #192
Bug 1895093: Do not mount /etc/pki/ca-trust in builds #186
Full changelog

docker-registry

Bug 2003629: Use apimachinery with HTTP/2 health checks enabled #293
Bug 1982611: bump aws-sdk-go to v1.38.35 #287
Bug 1946694: Run remote registries for pull-through tests as pods #269
Bug 1930802: Replace bitbucket.org/ww/goautoneg with its mirror #266
Updating openshift-enterprise-registry builder & base images to be consistent with ART #261
Full changelog

etcd

ETCD-178: Bug 1951823: openshift-tools: fix on off flow and add unit tests #77
Updating ose-etcd builder & base images to be consistent with ART #66
OWNERS: add component #61
Full changelog

gcp-machine-controllers

Bug 1941563: Ensure response body is closed when we are finished with the request #154
“Bug 1912531: revendor mao” #149
Full changelog

grafana

Updating grafana builder & base images to be consistent with ART #53
Full changelog

haproxy-router

Bug 1971013: template helper - generateHAProxyWhiteListFile, use right arg type #303
Bug 1965329: Add a condition to check if the Endpoints ID is duplicated #292
Bug 1938922: router/template: Cache compiled regular expressions #270
Bug 1900991: Move idle check from endpoints to service #253
Bug 1896167: metrics: Rework template_router_reload_failure metric #215
Bug 1918194: Prevent unnecessary reloads in router shards #247
Bug 1918371: Add tunnel-timeout and hard-stop-after options to haproxy template #249
Updating openshift-enterprise-haproxy-router builder & base images to be consistent with ART #246
Updating ose-haproxy-router-base builder & base images to be consistent with ART #242
Bug 1904010: Add unit tests to verify NotReadyAddresses in EndpointSlices #232
Bug 1904010: Check Ready condition status in Endpointslices #230
Bug 1886213: haproxy-config.template: Only enable HTX for HTTP/2 #199
Bug 1896905: Clip haproxy.router.openshift.io/timeout annotation values to prevent bricking on upgrade #217
Full changelog

hyperkube

Bug 2008266: Rebase 1.19.14 #962
Automated cherry pick of #104182: Avoid spurious calls to update/delete validation #104210
Update to go1.15.15 #104216
Automated cherry pick of #102576: kubelet: do not call RemoveAll on volumes directory for #103859
Add missing locks for device-manager in 1.19 #103262
Automated cherry pick of #102584: Fix race in attachdetach tests #103454
Automated cherry pick of #94693: test/e2e: Busybox image is not being templatized #103666
Update to Go 1.15.14 (CP of #103677) #103705
Automated cherry pick of #103235: Update debian-base image to buster-v1.8.0 #103491
Automated cherry pick of #103133 on 1.19: switch scheduler to generate the merge patch on pod status instead of the full pod #103277
Manual cherry pick of #103318: Bump SMD to v4.1.2 to pick up #102749 fix #103321
Automated cherry pick of #93250: Handle int -> float conversion in FromUnstructured #103105
Automated cherry pick of #102925: Fix Node Resources plugins score when there are pods with no #102997
Automated cherry pick of #101595: Update cos-gpu-installer image #102036
Automated cherry pick of #102845: Remove error wrap from logs #102854
Update to Go 1.15.13 #102809
Automated cherry pick of #100326: Fix watchForLockfileContention memory leak #101797
Automated cherry pick of #102306: Return UnschedulableAndUnresolvable instead of Error when #102695
Automated cherry pick of #101592: chunk target operatation for aws targetGroup #101814
Automated cherry pick of #98510: Ignore transient errors when gather stats #102500
Automated cherry pick of #100948: Avoid caching the VMSS instances whose network profile is nil #101827
Automated cherry pick of #102498: sched: fix a bug that a preemptor pod exists as a phantom #102675
Speed up PV provisioning for vsphere driver #102351
Automated cherry pick of #102083: fix: delete non existing disk issue #102165
Automated cherry pick of #102005: Azure: avoid setting cached Sku when updating VMSS and VMSS #102117
Automated cherry pick of #102176: Fix VolumeAttachment garbage collection for migrated PVs #102458
Revert “Cleanup portforward streams after their usage” [1.19] #102588
Automated cherry pick of #102302: Update debian-iptables to buster-v1.6.1 #102342
Automated cherry pick of #96444: actually retry if we failed to reconcile some objects #101954
Automated cherry pick of #102105: Respect annotation size limit for SSA last-applied. #102182
Automated cherry pick of #102224: Fix expired unit test certs #102227
Automated cherry pick of #101358: Ref counting is only applicable to Remote endpoints #101999
Automated cherry pick of #101950: Make watch order conformance test reliable #101983
Automated cherry pick of #101737: Use CSI driver to determine unique name for migrated in-tree #101804
1.19 cherry-pick: Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY #100590
Update to go1.15.12 #101846
Automated cherry pick of #99839: Cleanup portforward streams after their usage #100953
Automated cherry pick of #101763: Updating EndpointSlice controllers to avoid duplicate #101764
Automated cherry pick of #100731: Normalize share name to not include capital letters #101551
Automated cherry pick of #100944: Ensure service deleted when the Azure resource group has been deleted #101499
Automated cherry pick of #101235: fix: azure file namespace issue in csi translation #101356
add duration encoder to structured logger #101159
Automated cherry pick of #101347: Extend pod start timeout to 5min for storage subpath #101546
cherry pick of #100913: no watch endpointslice in userpace mode #101502
Automated cherry pick of #100678: apf: exempt probes /healthz /livez /readyz #101113
Backport SIG Node approvers to 1.19 #101591
Automated cherry pick of #101093: Fix startupProbe behaviour changed #101225
Automated cherry pick of #99336: pkg/kubelet: improve the node informer sync check #101344
Automated cherry pick of #96882: Make parallel build memory threshold configurable #101365
Automated cherry pick of #101084: Updating EndpointSlice validation to match Endpoints #101387
Automated cherry pick of #101306: Additional CVE-2021-3121 fix #101327
Automated cherry pick of #100762: list pod list once to avoid timeout #101040
Update to go1.15.11 #101197
Automated cherry pick of #98571: Stop probing a pod during graceful shutdown #100526
Cherry pick of #100690: azure: fix node public IP not able to fetch issues from IMDS #100911
Automated cherry pick of #92839: AWS cloudprovider allow nlb-ip and external type lbs to be managed externally #97975
Automated cherry pick of #99169: Use the correct volum handle format for GCE regional PD. #100076
Automated cherry pick of fixes for “large leases overload event etcd” issue (96836) #100450
Automated cherry pick of #97431: additional subnet configuration for AWS ELB #100416
do not create StatefulSet pods when PVC is being deleted #98732
cherry pick #100341 #98576 #95836 on 1.19 to enable SSA with APIService #100713
Automated cherry pick of #99958: For LoadBalancer Service type don’t create a HNS policy for empty or … #100227
Revert “Automated cherry pick of #97417: fix azure file secret not found issue” #100398
Automated cherry pick of #100638: apf: fix data race in queueset #100669
Automated cherry pick of #100443: slice mirroring controller mirror annotations #100504
Cherry pick of #98477: update gogo/protobuf to v1.3.2 #100515
Automated cherry pick of #100254: apf: handle error from PollImmediateUntil #100528
Automated cherry pick of #100056: e2e fix: loosen configmap to 10 in resource quota #100532
Automated cherry pick of #100505: Fixed describe ingress causing SEGFAULT #100542
Update sigs.k8s.io/structured-merge-diff to v4.0.3 #99040
Update to go1.15.10 #100520
Automated cherry pick of #95783: webhook config manager: HasSynced returns true when the #100494
Automated cherry pick of #99946: tweak validation to avoid mutation #100316
Automated cherry pick of #99795: Increasing maximum number of ports allowed in EndpointSlice #100381
Automated cherry pick of #98336: update metadata-concealment to 1.6 for removing legacy #100462
Automated cherry pick of #99600: Count pod overhead as an entity’s resource usage #100038
Automated cherry pick of #99464: Number of sockets is assumed to be same as NUMA nodes #99771
Automated cherry pick of #96021 upstream release 1.19 #99206
Automated cherry pick of #95301: Automatically remove orphaned pod’s dangling volumes #100104
vendor: upgrading cAdvisor to 0.37.5 #99209
Automated cherry pick of #99345: Updating EndpointSlice controller to wait for cache to be #100114
Automated cherry pick of #99756: Updating EndpointSliceMirroring controller to wait for cache #100144
Automated cherry pick of #99463: Use Lstat in plugin watcher to avoid Windows problem #99723: Fix issue in checking domain socket for plugin watcher #99745
Automated cherry pick of #98830 upstream release 1.19 #99137
Balance nodes in scheduling e2e #98810
Automated cherry pick of #90980: Avoid using socket for hints #99276
Automated cherry pick of #99538: Skip visiting empty secret and configmap names #99588
Cherry pick #96876 in controller to 1.19: fix nodelifecyle controller not add NoExecute taint bug #98140
Automated cherry pick of #98555: Storage e2e: Remove pd csi driver installation in GKE #99166
Automated cherry pick of #95150: DNS should support configurable pod #99473
Bump konnectivity-client to v0.0.15 in release-1.19 #99172
Automated cherry pick of #94589: deferredResponseWriter returns after calling the Close() #98393
Automated cherry pick of #97700: OWNERS: Update SIG Release aliases #98370
Automated cherry pick of 87266 93196 94438 94653 95229 95867 96294 96330 96479 96626 96644 96690 96843 #99220
Update to go1.15.8 #99093
Automated cherry pick of #96421: kube-aggregator: fix apiservice availability gauge #97915
Automated cherry pick of #98103: kubelet: Delete static pods gracefully #98317
Automated cherry pick of #94087: node sync at least once #97996
Cherry pick of #98254 for 1.19: Fix the kube-scheduler binary’s descr… #98873
cherry-pick of #95111: make podTopologyHints protected by lock #98500
Automated cherry pick of #98750: Fix nil pointer dereference in disruption controller #98776
Automated cherry pick of #98836: kubeadm: get k8s CI version markers from k8s infra bucket #98843
Automated cherry pick of #98715: fix kube-scheduler cannot send event because the Note field #98795
Automated cherry pick of #96821: Use volumeHandle as PV name when translating EBS inline #98031
Automated cherry pick of #98311: Fix translation of Cinder storage classess to CSI #98609
Automated cherry pick of #98350: aggregate errors when putting vmss #98352
Automated cherry pick of #93638: Avoid dereferencing same endpoint twice on the deletion or update of a service #98291
Automated cherry pick of #97877: fix azure file migration issue #98329
Automated cherry pick of #94599: Fixes Attach Detach Controller reconciler race reading #96617: Recover CSI volumes from dangling attachments #98223
Cherry pick #465 in cloud provider azure to 1.19: Cleanup subnet in frontend IP configs #98288
Automated cherry pick of #94238: Set snapshotType for tests with NTFS. #94242: Remove file_mode args for Windows test #94881: e2e: add option to create pods with different image in #95780: Enable Volume Expansion tests for Windows #98549
Automated cherry pick of #96751: Lower the frequency of volume plugin deprecation warning #97893
Automated cherry pick of #98430: Deflake ingress updates #98443
Automated cherry pick of #94823: Delete namespace parameter in create adapter #98493
Automated cherry pick of #97764 upstream release 1.19: ignore cgroup driver check in windows node upgrade #98385
Automated cherry pick of #97860: move all variables in sampleAndWaterMarkHistograms::innerSet #98432
Automated cherry pick of #96530: Fixed quantization and made monotic time reversal not panic #98386
Automated cherry pick of #97087: kubeadm: change the default image repository for CI images #98275
Automated cherry pick of #97463: clean up executing request on panic #97978
Automated cherry pick of #97464: fix the deadlock in priority and fairness config controller #97977
Automated cherry pick of #97820: handle webhook authenticator and authorizer error #98233
Automated cherry pick of #95874: Webhook: handle error when calling wait.ExponentialBackoff #98231
vendor: update cAdvisor to v0.37.4 #98015
cherry-pick part of #97451: fix counting error in service/nodeport/loadbalancer quota check #97828
automated-cherry-pick-of-#97625: use default unkown sock for kubeadm cmd if cri detect is not needed #97848
Automated cherry pick of #97740: Release reserved GCE IP address after ensure completes. #97771
Automated cherry pick of #97417: fix azure file secret not found issue #97450
Automated cherry pick of #97082: fix: azure file latency issue for metadata-heavy workload #97441
Automated cherry pick of #97699: Ensure reproducible builds when build through docker #97730
Automated cherry pick of #97427: Fix bug in CPUManager with race on map acccess #97528
Automated cherry pick of #97254: Create OWNERS for most of the API Priority and Fairness impl #97672
Automated cherry pick of #97006: Fix cadvisor machine metrics #97692
Automated cherry pick of #97259 upstream release 1.19 #97332
Automated cherry pick of #95971: E2E stress test suite for VolumeSnapshots #97299
release-1.19: volumebinding: report UnschedulableAndUnresolvable status instead of an error when PVC not found #96850
Update to go1.15.5 #97246
Automated cherry pick of #95770: Remove ready directory which created in empty volumeMounter #96737
cherry pick of #95269: fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable #96297
Automated cherry pick of #97013: Fix FibreChannel volume plugin corrupting filesystem on #97198
vendor: update cAdvisor to v0.37.3 #97176
Automated cherry pick of #95316: Mask bearer token in logs when logLevel >= 9 #95353
Add AcceleratorStats to cri_stats_provider for 1.19 #97017
Automated cherry pick of #95725: DelegatingAuthorizationOptions: exposes and sets a default #95910
Automated cherry pick of #96051 #96157
Automated cherry pick of #97016: fix migration logic #97059
coredns dep.Severity is newdefault, not newDefault #96970
Automated cherry pick of #96742: Update ingress conformance test for finalizers #96953
Automated cherry pick of #95240: Do not update managedFields timestamp when they don’t change #95773
Automated cherry pick of #96810: Restore beta os/arch labels on initial node registration #96811
Automated cherry pick of #96417: Fix double counting of IP addresses #96801
Cherrypick #95981 to 1.19, Enables HTTP/2 health check #96778
Automated cherry pick of #96705: fix: resize Azure disk issue when it’s in attached state #96738
Automated cherry pick of #94609: Use namespace flag passed to RunKubectl* methods #94789: Clean up remaining ns flag #95594: Fix –dry-run invocation in kubectl e2e #95831: use patch instead of replace to test the dry-run option #96434
Automated cherry pick of #95541: report UnschedulableAndUnresolvable status instead of an #96291
Automated cherry pick of #96777: fix: concurrent map writes error in VolumeBinding plugin during Filter #96809
bump cadvisor to v0.37.2 #96849
Automated cherry pick of #96499: Choosing the right source VIP for local endpoints #96789
Updating to cadvisor v0.37.1 #96695
Automated cherry pick of #95371: do not allow inflight watermark histograms to fall too far #96282
Automated cherry pick of #96716: Bump node-problem-detector to v0.8.5 #96785
Automated cherry pick of #96266 upstream release 1.19 #96601
change GetFullQualifiedPluginNameForVolume to distinuish different drivers #96477
Automated cherry pick of #96439: Fix a bug that DefaultPreemption plugin is disabled when #96472
Automated cherry pick of #94340: Update max data disk count with new instance types #96406
Automated cherry pick of #95933: Fix bug in JSON path parser where an error occurs when a #96201
Automated cherry pick of #96355: fix pull image error from multiple ACRs using azure managed #96546
Automated cherry pick of #94915: fix kube-proxy cleanup #96518
Fix kubectl CRD validation with preserve-unknown-fields #96562
Bug 1993752: UPSTREAM: 104340: Pass additional flags to subpath mount to avoid fla… #942
Bug 1996849: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #902
Bug 1989061: don’t apply defaultAllowPrivilegeEscalation:false when container is privileged #939
Bug 1981784: UPSTREAM: <drop>: bump(apiserver-library-go) #894
Bug 1951727: Speed up PV provisioning for vsphere driver (ocp-4.6) #691
Bug 1959420: fix a 4.6 test flake #740
Bug 1958371: UPSTREAM: 98424: register all pending pod deletions and check for kill #779
Bug 1966811: UPSTREAM: 102224: Fix expired unit test certs #781
Bug 1942146: Fix labels of Cinder PVs #636
Bug 1960002: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #745
Bug 1951467: fix loop bug for verify attached volume #683
Bug 1942630: UPSTREAM: 96789: Choosing the right source VIP for local endpoints #639
Bug 1933624: 4.6: UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning #596
Bug 1930960: UPSTREAM: 94087: kubelet: node sync at least once #582
Bug 1918994: Override termination grace period on annotation #533
Bug 1913543: UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics #511
Bug 1924785: UPSTREAM: 89885: SQUASH: Fix cinder crash #548
BUG 1891107: UPSTREAM: 95259: allocate service-account flowschema to global-default #428
Bug 1926262: Prevent GCP e2e tests from triggering a rate limit on the listZone API #556
Bug 1919453: Allow test images to be in a single mirror #536
Bug 1919069: UPSTREAM: 98103: kubelet: Delete static pod gracefully and fix mirrorPodTerminationMap leak #535
Bug 1900241: UPSTREAM: Skip “subPath should be able to unmount” NFS test #468
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #519
Bug 1894916: Panic output due to timeouts in kube apiserver #480
Merge #540
Bug 1907461: kubelet: do not rerun init containers if any main containers have status #486
Bug 1915583: UPSTREAM: 97860: move all variables in sampleAndWaterMarkHistograms::innerSet #521
Bug 1916335: UPSTREAM: 96310: PV e2e: fix race in NFS recycling test #524
Bug 1915247: UPSTREAM: 97915: kube-aggregator: fix apiservice availability gauge #518
Bug 1887308: UPSTREAM: 94712: avoid potential secret leaking while reading .dockercfg #437
Bug 1912564: UPSTREAM: 97323: fix the deadlock in priority and fairness config controller #501
Bug 1912564: UPSTREAM: 97206: clean up executing request on panic #502
Bug 1889936: UPSTREAM: 94774: Fix misusage of RLock in timeCache lru.Cache.Get() #419
Bug 1887748: [4.6] UPSTREAM: 95245: Mask Ceph RBD adminSecrets in logs when logLevel >= 4 #407
Bug 1901208: Nodes goes into NotReady state (VMware) #466
Bug 1896691: UPSTREAM: 96120: kubelet: Expose a simple Get-WinEvent shim on the kubelet logs endpoint #446
Bug 1885619: fix kube-apiserver termination event(s) validation failures #396
Bug 1896318: UPSTREAM: 95236: vsphere: improve logging message on node cache refresh event #443
Bug 1900630: 4.6: Update from Kubernetes 1.19.0 to 1.19.4 #435
Automated cherry pick of #94781: Don’t attempt to detach an FC device… on release-1.19 #95644
Automated cherry pick of #95939: Address scenario where releasing a resource lock fails if a prior update fails or gets cancelled #95963
Automated cherry pick of #96092: Honor disabled LocalStorageCapacityIsolation in scheduling #96140
Automated cherry pick of #94987 upstream release 1.19 #95535
Automated cherry pick of #95560: Ignore deleted pods. #95651
Automated cherry pick of #95647: If we set SelectPolicy MinPolicySelect on scaleUp behavior or #95829
Automated cherry pick of #96052 upstream release 1.19 #96113
Automated cherry pick of #95812: Fix a bug that Pods with topologySpreadConstraints get #95880
Cherry pick of #95748: Update the PIP when it is not in the Succeeded provisioning state during the LB update #95758
Automated cherry pick of #95559: Do not skip externalLB update if some nodes are not found. #96195
Automated cherry pick of #94107: Updating kube-proxy to trim space from #94979
Automated cherry pick of #95985: Fix seccomp PSP docker/default annotation handling #95990
Automated cherry pick of #80954: Generate complete leader election record to resolve #95926
Automated cherry pick of #95786: fix: add missing patch flag for kubeadm init phase #95797
Automated cherry pick of #94489: Do not assume storageclass is still in-tree after csi migration #95721
Automated cherry pick of #92614: Don’t create a new sandbox for pod with #94725
Automated cherry pick of #95260: Fixes high CPU usage in kubectl drain #95710
Automated cherry pick of #95342: cloud node controller: handle empty providerID from #95452
Automated cherry pick of #94985: Fix kubectl describe ingress format #95591
Automated cherry pick of #95451: Fix fcpath #95610
Automated cherry pick of #95456: fix azure disk data loss issue on Windows #95516
Automated cherry pick of #95463: fix azure disk attach failure for disk size bigger than 4TB #95509
Automated cherry pick of #95427: don’t cache transports for incomparable configs #95618
Automated cherry pick of #95289 upstream release 1.19 #95305
Automated cherry pick of #94975 #95341 upstream release 1.19 #95405
Cherry pick of #94873: Fix the cloudprovider_azure_api_request_duration_seconds metric buckets to correctly capture the latency metrics #94943
Automated cherry pick of #95363 upstream release 1.19 #95413
upgrade test for BoundServiceAccountTokenVolume #95291
Automated cherry pick of #95245: Mask Ceph RBD adminSecrets in logs when logLevel >= 4 #95327
Automated cherry pick of #94712: avoid potential secret leaking while reading .dockercfg #95346
Automated cherry pick of #95236: vsphere: improve logging message on node cache refresh event #95241
Automated cherry pick of #95130: Fix UpdateSnapshot when Node is partially removed #95153
Automated cherry pick of #94730: Ensuring EndpointSlices are recreated after Service #94948
Fix misusage of RLock in timeCache lru.Cache.Get() for release-1.19 #94774
Automated cherry pick of #94728: portforward: Fix UDP-only ports calculation #94847
Automated cherry pick of #93011: fix: azure disk resize error if source does not exist #94642
Automated cherry pick of #94936: Return the Kubernetes version which stopped serving #94973
Cherry pick of #94355: Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null #94802
Automated cherry pick of #94853: fix azure file migration panic #94904
Automated cherry pick of #94773: count of etcd object should be limited to the specified #94819
Automated cherry pick of #93962: Allow 404 error on lb deletion in azure #94713
Automated cherry pick of #95177: fix detach azure disk issue when vm not exist #95272
Automated cherry pick of #93583: support ipv6 in e2e policy tests #94721
Automated cherry pick of #94816: kubeadm: relax the validation of kubeconfig server URLs #94890
Remove canonicalization of endpoints by endpoints controller for better comparison #94937
Automated cherry pick of #94666: Handle nil elements when sorting, instead of panicking #94944
Automated cherry pick of #94885: fix: detach azure disk broken on Azure Stack #94960
Automated cherry pick of #94988: kubeadm: warn but do not error out on missing CA keys on #95120
Automated cherry pick of #94059: Track pods with required anti-affinity #94804
Update to go1.15.2 #94838
Automated cherry pick of #94580: Fix index out of range panic for kubectl alpha debug #94724
Automated cherry pick of #93687: kubectl describe pod: use ReportingController as an event #94680
Automated cherry pick of #94367: Update CNI plugins to v0.8.7 #94677
Automated cherry pick of #94481 #94639 upstream release 1.19 #94654
Automated cherry pick of #94629: Sort list of formats for –logging-format description to make #94632
build: Fix go-runner arch in server images #94613
Automated cherry pick of #94287: Update default etcd server to 3.4.13 #94536
Automated cherry pick of #93909: Update snapshot controller to use k8s.gcr.io #94502
Automated cherry pick of #92878: cleanup: print warning message only if the function does not finish within 30 seconds #94405
Automated cherry pick of #94506: kubeadm: remove the CoreDNS check for supported image digests #94507
Automated cherry pick of #94204: Add impersonated user to system:authenticated group #94408
Automated cherry pick of #94421: kubeadm: Fix upgrade plan for air-gapped setups #94422
Automated cherry pick of #93773: fix(kubelet): protect containerCleanupInfos from concurrent map writes #94352
Automated cherry pick of #94306: fix(azure): check error returned by scaleSet.getVMSS #94344
Automated cherry pick of #94294: Remove duplicate nodeSelector #94342
Automated cherry pick of #94316: Fixed reflector not recovering from “Too large resource #94431
Automated cherry pick of #94246: Fix issue on skipTest in storage suits #94283
Automated cherry pick of #93646: let panics propagate up when processLoop panic #94427
Add PR #89069 Action Required to 1.19 release notes #94264
Automated cherry pick of #94398: kubeadm: make the scheduler and KCM connect to local endpoint #94442
Automated cherry pick of #93515: Use NLB Subnet CIDRs instead of VPC CIDRs in #94266
Bug 1899406: HPA: Ignore deleted pods. #465
Bug 1888847: UPSTREAM: 95561: kubelet container status calculation doesn’t handle suddenly missing data properly #412
Bug 1891539: UPSTREAM: 95261: test: e2e: fix race in pods test #404
Full changelog

insights-operator

[release 4.6] Bug 1891544: Adds ContainerRuntimeConfig gatherer #238
Bug 1913645: Improved Red Hat image and crashlooping OpenShift pod collection #304
[release 4.6] Bug 1889676: Gather installplans #243
[release 4.6] Bug 1887759: Adds MachineConfigPool gatherer #213
[release 4.6] Bug 1905031: Collect spec config for clusteroperator resources #286
Updating ose-insights-operator builder & base images to be consistent with ART #311
Bug 1894244: Fixes records index on diskrecorder #261
[release 4.6] Bug 1888165: Add the namespace to the gatherers reports to avoid conflicts #221
Bug 1904014: Add hostsubnet to sample archive & fix bug… #276
[release 4.6] Bug 1888602: Fixes policyClient and the corresponding config. #226
temporarily remove e2e-tests (delayed upload) #256
Update owners list #251
Backport e2e tests #248
Full changelog

ironic

Bug 1917481: Wait for expected number of drivers starting API #136
Bug 1918178: Explicitly set minimum versions of ironic packages #141
Bug 1899107: Limit the default number of API workers to 4 #122
Bug 1903649: Re-enable automated_clean #128
Bug 1917937: Force rebuild to pick up latest dnsmasq #139
Updating ironic builder & base images to be consistent with ART #135
Full changelog

ironic-inspector

Updating ironic-inspector builder & base images to be consistent with ART #55
Bug 1918178: Explicitly set minimum versions of python libraries #60
Full changelog

ironic-ipa-downloader

Bug 1975531: [release-4.6] Update ipa version #77
Updating ironic-ipa-downloader builder & base images to be consistent with ART #58
Bug 1905004: Use new ironic-python-agent images #52
Bug 1902797: Always set hostname from DHCP6_FQDN_FQDN if set #54
Bug 1899190: Apply hack to eventlet #53
Full changelog

ironic-machine-os-downloader

Updating ironic-rhcos-downloader builder & base images to be consistent with ART #35
Full changelog

ironic-static-ip-manager

Bug 1918779: Toggle addr_gen_mode to 1 and back #17
Updating ironic-static-ip-manager builder & base images to be consistent with ART #16
Bug 1909682: Force addr_gen_mode to “0” on PROVISIONING_INTERFACE #13
Full changelog

jenkins, jenkins-agent-maven, jenkins-agent-nodejs

Bug 1972366: Bump jenkins version 2.289.2 #1280
Bug 1952561: bump config-file-provider to 3.7.1 #1266
[release 4.6] Bug 1952337: Update Jenkins to 2.277.3 and disable setup wizard #1260
[release 4.6] Bug 1929121: update kubernetes-client-api #1231
[release 4.6] Bug 1929919: Upgrade Jenkins to 2.263.3 #1234
Bug 1922139: Update Maven version to 3.6 in maven agent #1209
Bug 1918637: Updating openshift-jenkins-2 builder & base images to be consistent with ART #1202
Bug 1918619: Updating ose-jenkins-agent-base builder & base images to be consistent with ART #1201
Bug 1918628: Updating ose-jenkins-agent-nodejs-10 builder & base images to be consistent with ART #1205
Bug 1918632: Updating ose-jenkins-agent-nodejs-12 builder & base images to be consistent with ART #1204
Bug 1918630: Updating ose-jenkins-agent-maven builder & base images to be consistent with ART #1203
Bug 1914101: Update ant plugin CVE-2020-11979 #1194
Bug 1899472: Add casc plugins #1185
Bug 1896403: various fixes #1186
Bug 1888650: updating the scl_source enable from rh-maven35 to rh-maven36 #1171
Bug 1888901: Align plugin version #1174
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter builder & base images to be consistent with ART #42
Bug 1895532: Populate both CPU and Memory resource container metrics if one is specified #36
Full changelog

keepalived-ipfailover, pod

Bug 1926267: Egress router: Add iptables package to Dockerfile #78
Updating openshift-enterprise-pod builder & base images to be consistent with ART #66
Updating openshift-enterprise-base builder & base images to be consistent with ART #64
Full changelog

kube-proxy, sdn

Bug 2004720: improve SDN’s OVS healthcheck and logging #353
Bug 1998453: Fix MCS-blocking iptables rules #340
Bug 1995873: Disable conntrack for vxlan traffic #339
Bug 1970046: Fix for empty egress policy #315
Bug 1915849: Bump 4.6 to use OVS 2.13 #303
Bug 1959425: Fix incorrect unmonitoring of egress nodes #298
Bug 1926662: Do not use egressIP on reply packets #257
Bug 1937547: networkpolicy: pass traffic through NAT to handle possible tuple collisions #274
Bug 1928773: Prefer local endpoint for cluster DNS service #261
Updating ose-sdn builder & base images to be consistent with ART #244
Updating kube-proxy builder & base images to be consistent with ART #247
Bug 1904455: NetworkPolicy performance fixes, v2 #249
Bug 1915007: Revert NetworkPolicy performance fixes (4.6) #241
Bug 1891454: Fix error handling from DNS nameservers #210
Bug 1904455: NetworkPolicy performance (pod caching) #228
Bug 1894155: Ignore if netns is already deleted while deleting ns #216
Bug 1893809: fix pod creation deadlock #213
Bug 1890656: Fix ruleversion #206
Full changelog

kube-rbac-proxy

Updating kube-rbac-proxy builder & base images to be consistent with ART #39
Bug 1906836: Dockerfile.ocp: specify numeric uid #37
Full changelog

kube-state-metrics

Updating kube-state-metrics builder & base images to be consistent with ART #42
Full changelog

kuryr-cni, kuryr-controller

Bug 1983107: Fix KLB conversion from annotations #541
Bug 1983107: Allow clean up of unused member #540
Bug 1975676: Workaround OVN bug causing subports to be DOWN #533
Bug 1968418: Fixing bug, Kuryr-Controller crashes when it’s missing the status #519
Bug 1958106: Skip pool pre population if no Status is present on CRD #513
Bug 1958106: Fix port pools #512
Bug 1958103: Include service subnet to be open for namespaceSelector set to all. #511
Bug 1958093: kuryr-controller restarting after 3 days cluster running - pools without members #509
Bug 1963846: Fix NPs for OVN LBs with hairpin traffic #518
Bug 1952429: Narrow connection to the cluster only on namespaceSelector. #507
Bug 1932114: Allow to config network MTU #506
Bug 1947343: NPs: Do not set ports for protocol-less SG rules #496
Bug 1940141: Do not default protocol to TCP for allow-all NPs #484
Bug 1938161: Get trunks more diligently #478
Bug 1897526: Fix ports count on subnet #427
Bug 1894408: Delete ports created for host networking pods #395
Bug 1893681: Bulk port creation exception not completely formatted #390
Bug 1906741: Skip unscheduled pods when deleting NPs #428
Bug 1920995: Decrease CPU usage of Prometheus exporter #440
Updating kuryr-cni builder & base images to be consistent with ART #435
Updating kuryr-controller builder & base images to be consistent with ART #434
Bug 1900562: NP changes sometimes influence new pods/services. #414
Bug 1896370: Handle None or {} labels in match_selector() #399
Bug 1892270: Removing network policy from namespace causes inability to access pods through loadbalancer. #385
Bug 1902204: Force pyroute2 0.5.7 #418
Bug 1898950: Ensure members are deleted from pools when there is no endpoints #407
Bug 1886696: Add protection from unexpected issues #367
Bug 1890897: CNI: Lookup offending interface on NetlinkError #380
Bug 1888318: Fix is_host_network() #374
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #216
Bug 1939259: [release-4.6] Update MAO and set metrics on :8081 address #220
Full changelog

machine-api-operator

Bug 1993120: Make sure nodes don’t have attached volumes before vm deletion #905
Bug 1947813: vSphere, detach virtual disks before virtual machine destroy if node not available #845
Bug 1916772: Inject the cluster-wide proxy environment variables in the baremetal pod #808
Bug 1933676: Cherry-pick: Azure disconnected reject publicIP setting #812
Updating ose-machine-api-operator builder & base images to be consistent with ART #786
Bug 1912531: 4.6: Update kubectl dep #782
Bug 1890452: Bump Azure dependency to include BYOK encryption fields #763
Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #779
Bug 1908316: Reduce verbosity of kube-rbac-proxy logging for operator #784
Bug 1896705: Inject cluster-wide proxy configuration in to machine-api-controller deployment #756
Full changelog

machine-config-operator

Bug 2000502: bump SystemMemoryExceedsReservation alert threshold to 95% #2750
Bug 2004136: [on-prem] Disable liveness probe until keepalived.conf exists #2763
Bug 1998181: ensure SSH key uniqueness #2737
Bug 1975626: Add nil check for KubeletConfig #2719
Bug 1989403: daemon: add check before updating kernelArgs #2720
Bug 1987221: Backport drain timeout optimizations #2707
Bug 1993218: alerts: SystemMemoryExceedsReservation triggers too quickly #2713
Bug 1975626: Fix KubeletConfig nil error #2699
Bug 1975626: KubeletConfig validation warning in CRD and Docs #2672
Bug 1978041: templates: split unit dropins into separate files #2652
Bug 1926944: enable madvdontneed in system components #2632
Bug 1940594: [baremetal and friends] Drop unnecessary readiness probes #2480
Bug 1927555: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2615
Bug 1942506: [4.6] Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2589
Bug 1953493: daemon: return nil for unsupported operation on an OS #2545
Bug 1955715: Add on-prem namespaces to relatedObjects #2556
Bug 1948533: Add nodeip-configuration.service for oVirt #2567
Bug 1945544: templates: add After=ostree-finalize-staged.service to kubelet.service #2502
Bug 1933206: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2439
Bug 1951089: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2537
Bug 1940585: conditionally set nodeip-service enabled for vSphere #2493
Bug 1883916: [4.6z backport] Fixes setting route metric for ovs-config #2467
Bug 1931617: OVS Config: fixes detecting bond NM files with static IP #2453
Bug 1908534: update ctrcfg crd to make spec & containerruntimeconfig required #2308
Bug 1897552: Mode mismatch fix for confusing strings #2353
Bug 1933075: backport systemd dropin/units zero-length handling #2435
Bug 1906298: update MCDDrainErr to reduce cardinality & fix nodename #2419
Bug 1908940: [test] Skip TestKernelType on OKD #2311
Bug 1919272: [release-4.6] NM resolve prepender: support appending a nameserver for systemd-resolved #2356
Bug 1901602: Inject version into controllerconfig, refuse mismatches #2257
Bug 1899535: ds/machine-config-daemon: Set maxUnavailable 10% #2240
Bug 1893409: daemon: add back metrics for pivot error #2216
Bug 1913099: Handle keepalived hangs in liveness probe #2319
Bug 1914910: Add a prestart line to change ownership of openvswitch dir #2331
Bug 1913316: check for scheduler support before setting #2321
Bug 1914892: update.go: only set BFQ scheduler for masters #2330
Updating ose-machine-config-operator builder & base images to be consistent with ART #2335
Bug 1899622: backport bond options fixes #2298
Bug 1904825: [release-4.6] templates: Set vSphere hostname from guestinfo before NM starts #2289
Bug 1904065: [on-prem] export proxy variables to be taken in account #2279
Bug 1898567: Fix awk syntax in configure-ovs.sh #2233
Bug 1900666: daemon: Only switch to bfq scheduler when we have an OS update #2251
Bug 1887519: Use mc name as finalizer for kubelet config #2150
Bug 1899735: pkg/daemon: don’t delete a file if its replaced with a dropin #2246
Bug 1888467: firstboot.service: disable existing repos before pivot #2161
Bug 1897575: server: Target the spec configuration if we have at least one node #2225
Bug 1894483: Fix bash in nodeip-configuration.service #2200
Bug 1896329: Drop kubelet logging back down to level 3 #2244
Bug 1899368: ctrcfg_test: Wait for our prior target config #2239
Bug 1888853: daemon: allow an extension to install group of packages #2187
Bug 1887596: Fix ovs-configuration detecting bond and vlan interfaces #2174
Bug 1893483: vendor in drain fix for using high cpu #2193
Bug 1887607: OVS config: check if OVS is installed #2164
Full changelog

mdns-publisher

Bug 2003563: Update zeroconf vendoring #40
Bug 1936539: Update zeroconf to pull in rate-limiting fix #27
Updating ose-mdns-publisher builder & base images to be consistent with ART #22
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller builder & base images to be consistent with ART #31
Full changelog

multus-cni

Updating multus-cni builder & base images to be consistent with ART #85
Bug 1905230: Multus should exit zero on DEL when cache file is missing [backport 4.6] #84
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni builder & base images to be consistent with ART #11
Full changelog

multus-whereabouts-ipam-cni

Bug 1931953: [backport 4.6] Fix for IPv6 when leading hextets equal zero #50
Bug 1898616: Excluded subnet handling for ipv6 [backport 4.6] #37
Bug 1898672: Removes error when deallocating IP errors out, instead just warns [backport 4.6] #40
Updating ose-multus-whereabouts-ipam-cni builder & base images to be consistent with ART #44
Full changelog

must-gather

Bug 1975970: Backport gather network logs #233
Updating ose-must-gather builder & base images to be consistent with ART #203
Bug 1896691: Collect docker logs from WinEvent log on Windows machines #197
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon builder & base images to be consistent with ART #31
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver builder & base images to be consistent with ART #36
Bug 1919966: fixes a data race in SerializeObject function #38
Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #34
Bug 1894345: [release-4.6] register api groups to legacyscheme.Scheme early #27
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #199
Bug 1915667: remove logging when authz header is present but basic auth is not attempted #200
Bug 1891725: don’t segfault on wrong option combination #193
Bug 1893969: fix e2e tests to use aws cluster supplied by the CI #194
Full changelog

oauth-server

Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #64
Full changelog

openshift-apiserver

Bug 1919966: fixes a data race in SerializeObject function #182
Bug 1900991: policy/unidling-controller: allow get/update on services #183
Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #162
Bug 1894916: Panic output due to timeouts in openshift-apiserver #161
Bug 1906428: When using webhooks in OCP 4.5 fails to rollout latest deploymentconfig #166
Full changelog

openshift-controller-manager

Bug 1955211: fixed LANG for the builder container #181
Bug 1935362: Listing All Events with Chunking #170
Bug 1900991: unidling: switch away from endpoints to the service #167
Updating ose-openshift-controller-manager builder & base images to be consistent with ART #157
remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #161
Full changelog

openshift-state-metrics

Updating openshift-state-metrics builder & base images to be consistent with ART #65
Full changelog

openstack-machine-controllers

Bug 2002752: Adds Proxy to provider client http transport #201
Bug 1933667: Update ose-openstack-machine-controllers builder & base images to be consistent with ART #154
Bug 1933667: Updating ose-openstack-machine-controllers builder & base images to be consistent with ART #165
“Bug 1912531: revendor mao” #164
Full changelog

operator-lifecycle-manager

Bug 1975456: Handle invalid label during resource cleanup #2209
Bug 1968226: Fix inconsistent dependency candidate order. #2184
Bug 1965307: Make ClusterOperator Available condition sticky. #2177
Bug 1969412: fix(catalog): Reduce namespace resync in resolution failure #2189
Bug 1965069: Simplify deployment status check to reduce flapping. #2176
Bug 1963139: Set reason/message for Available condition in packageserver co #2172
Bug 1962310: Use DeploymentAvailable instead of custom test for CSV status. #2169
Bug 1955112: Preserve existing ServiceAccount owner references during installs. #2128
Bug 1954880: Add resource requests for bundle unpacker #2126
Bug 1954759: Fix resolution error if inner entry doesn’t provide a required API. #2123
Bug 1945149: only override deployment resources when explicitly defined in subscription config #2071
Bug 1947916: Don’t adopt copied csvs #2094
Updating operator-lifecycle-manager builder & base images to be consistent with ART #1952
Bug 1940649: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2051
Bug 1940453: Support jittering relatively small resync intervals. #2050
Bug 1938618: Infer package name property for unannotated CSVs, if possible. #2043
Bug 1938369: fix(resolver): Allow skipped versions to be installed initially #2040
Bug 1934637: Honor all subscriptions to a package #2026
Bug 1929335: Only re-create operator resource if it has existing components #2008
Bug 1922919: Fix zero-delay resyncs for certain registry update policies. #1989
Bug 1924257: Fix time comparison in CSV reconcile loop #1991
Use docker driver for minikube installation test. #1988
Bug 1917498: use OLM client when installing CRDs #1967
Bug 1918525: Fix infinite loop when a CSV replacement chain contains a cycle. #1970
Bug 1920873: Support InstallPlan steps upgrading existing ClusterIP Services. #1977
Bug 1908463: Reduce log noise from OLM #1910
Bug 1904583: Check sa owner 46 #1890
Bug 1901871: fix(catalog): be defensive about directly indexing catalog pods #1880
Bug 1906416: Preserve original .status.lastUpdateTime in copied CSVs. #1902
Bug 1905746: fix(e2e): Fix subscription manual approval flaky test #1898
Bug 1899747: Recreate pending installplan if deleted before approval #1874
Bug 1896051: Services should not have duplicate ownerrefs #1856
Bug 1886448: Retrieve CA from conversion webhooks for CA Hash #1802
Bug 1894163: Add spec hash to service’s label to ensure service is correct #1851
Bug 1889745: fix(operators): prevent hotloop #1852
Full changelog

operator-marketplace

Updating marketplace-operator builder & base images to be consistent with ART #374
Bug 1937986: wrong community catalog image reference #384
Bug 1915905: Preserve custom catsrc w/ default catsrc name #375
Bug 1892382: Fix operator exited message #365
Bug 1895952: Allow catsrc with default catsrc name in disconnected env #362
Bug 1895392: clean up child resources for old opsrcs #360
Full changelog

operator-registry

Bug 1968681: fix(containerd): drop xattrs during unpack #678
Updating operator-registry builder & base images to be consistent with ART #550
Bug 1915068: Fix windows build with golang 1.15 #547
Bug 1918012: Unexpected images left in related_images after pruning #560
Bug 1889865: Avoid duplicate registry binaries across downstream image layers. #535
Bug 1904547: Include the bundle image itself as a related image. #532
Bug 1898746: fix(indexing): order bulk add by version field #521
Bug 1891064: Check prerelease version for semver-skippatch mode #488
Bug 1892360: Reconstruct replaces/splits for Listbundles from channel_entry. #520
Bug 1892391: [release-4.6] Fix test flake based on random aggregate error order. #498
Bug 1892395: [release-4.6] TestListPackages is flaky #499
Full changelog

ovirt-csi-driver

Bug 1960149: disable metrics #76
Bug 1924623: pass ovirtClient to identity and remove redundant call to Test connection #69
Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #71
Bug 1921817: support raw block devices #68
Bug 1917149: [release-4.6] bump go-ovirt and run make vendor #64
Full changelog

ovirt-csi-driver-operator

Bug 1924626: increase livenessProbe period #44
Bug 1916100: [release-4.6] bump go-ovirt to 2020-10-23 #38
Bug 1916096: [release-4.6] check FollowLink errors #37
Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART #39
Full changelog

ovirt-machine-controllers

Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #81
Bug 1910104: Node is not removed when VM has been removed from oVirt engine #79
Bug 1909990: Port to machine-api-operator #78
Full changelog

ovn-kubernetes

Bug 1988512: [release-4.6] Fix LGW externalIP #676
Bug 1972652: Fix: egress IP route health check detection state on restart #576
Bug 2001980: Fix sync egress IP for missed events on start-up #723
Bug 1985517: Add v6 management interface address for host network policy #626
Bug 1985347: ensure missed events are handled during a reconnection #620
Bug 1942604: Allow-from-router network policy support for ovn-kubernetes #603
Bug 1972253: CARRY: fix missed learn for hybrid exgw #575
Bug 1966833: BACKPORT Add a cluster-wide group with node ls-to-cluster-router ports. #573
Bug 1966280: Adds reconciliation for hanging pod adds #561
Bug 1953088: master: Delay deleting Namespace’s address set for 20 seconds #534
Bug 1949240: Bump OVN version in 4.6 to 20.12.0-24 #525
Bug 1947098: [4.6z] Ensure no SNAT on GR for DisableSNATMultipleGws #535
Bug 1950434: [4.6] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #504
Bug 1947836: Fix service update for policy type assertion #501
Bug 1945690: Updating ose-ovn-kubernetes builder & base images to be consistent with ART #401
Bug 1945308: Backport lr nat del add fixes #486
Bug 1945725: Revert the ovn change to avoid a crash #485
Bug 1935691: [release-4.6] Backport port_claim improvement #459
Bug 1933752: Bump to ovn2.13-20.09.0-7.el8fdn #455
Bug 1889460: Guard against nil address set usage #353
Bug 1920482: Configure GARP for egress IP re-assignment #424
Bug 1921274: Fix MCS-blocking iptables rules #425
Bug 1890274: Fixes External IP with local gateway mode #354
Bug 1912328: Bump OVS to 2.13.0-72 #372
Bug 1917240: [4.6] Backport Add clusterIP to ingress policy AS for SNAT-ed hairpin Traffic Cherry Pick #411
Bug 1917609: Fixes deleting exgw pod #421
Bug 1912388: Fix broken make check on 4.6 #395
Bug 1898160: Egress IP fail-over and health checks #394
Bug 1886062: Backport klog v2 changes to 4.6 #391
Bug 1898178: [release-4.6] Handle egress IP assignment for node IPs #349
Bug 1908803: [4.6] fix network policy when the namespace label changes #389
Bug 1908472: [4.6] Increase QPS and Burst setting #388
Bug 1883917: backport reject acl fixes #356
Bug 1899266: Fixes ICMPv6 flooding behavior #374
Bug 1898269: Fix broken make check on 4.6 #347
Bug 1885675: Consider changed configuration when kicking out raft members #330
Bug 1880591: Fixes race during 4.5->4.6 upgrade with ovn node and master #307
Full changelog

prom-label-proxy

Updating prom-label-proxy builder & base images to be consistent with ART #331
Full changelog

prometheus

Updating golang-github-prometheus-prometheus builder & base images to be consistent with ART #71
Bug 1889711: bump Prometheus to v2.22.2 #62
Cut v2.22.2 #8187
Cut v2.22.1 #8146
Calculate head chunk size based on actual disk usage (#8139) #8147
*: Cut v2.22.0 #8059
*: Cut v2.22.0-rc.0 #8020
*: Update dependencies #8027
Introduce timestamp tolerance in scrapes #7976
Bump k8s dependencies + support k8s.io/klog/v2 #8015
Vendor prometheus/common v0.14.0 #7968
Eureka: Fix service discovery when compiled in 32-bit (#7961) #7964
Merge release 2.21 in master #7929
Merge release 2.21 into master #7913
Full changelog

prometheus-alertmanager

Updating golang-github-prometheus-alertmanager builder & base images to be consistent with ART #42
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1935586: pkg/prometheus: remove liveness probe #110
Updating prometheus-operator builder & base images to be consistent with ART #103
Updating prometheus-config-reloader builder & base images to be consistent with ART #104
Full changelog

prometheus-node-exporter

Bug 1928073: text_collectors: do not use space as a replacement for escape characters #85
Bug 1928073: Remove escape characters #83
Updating golang-github-prometheus-node_exporter builder & base images to be consistent with ART #77
Full changelog

service-ca-operator

Updating ose-service-ca-operator builder & base images to be consistent with ART #135
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #368
Full changelog

tests

Bug 1978717: Add BareMetalPlatformType into e2e upgrade service unsupported list #26309
Bug 1981582: [release-4.6] use vpa package and add debug logs to olm test #26355
Bug 1988176: [release-4.6] Add test of documented backup/restore procedure #26356
Bug 1902221: clean up remaining build busybox refs after claytons overhaul #26332
Bug 1977095: correcting test case #26308
Bug 1978442: comment out multi-namespace jenkins pipeline templates test; moving it to jenkins client plugin in-repo e2e’s #26301
Bug 1977093: Add consolequickstarts and consoleplugins extensions to the authenticated rules #26288
Bug 1955599: test/extended/router: Fix-up Unidling test #26119
Bug 1965588: Testimage install cinder 4.6 #26193
Bug 1963909: move verify run test from tools to cli image; narrow scope to /run/secrets #26177
Bug 1958969: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26146
Bug 1948233: Add openshift/network/third-party suite, for CNI plugin conformance #26059
Bug 1936974: Access git over https for tests #26109
Bug 1941577: test/extended/router/idle: skip test on virt platforms #26069
Bug 1927954: test/extended/router/idle: address flakes/failures seen in CI #25893
Bug 1915559: upgrade/upgrade.go: Enhance upgrade ack time out error #26055
Bug 1931864: test: add vsphere and libvirt to unsupported platforms for LB service #25914
Bug 1930537: improve handling of pending pods crashloop detection test #25600
Bug 1902008: fix ldap group sync tests and move them from bash to golang #25808
Bug 1939549: Update tests to use Ruby 2.7 #25967
Bug 1930724: server-side apply e2e: fix oauthclientauthorization race with KCM #25908
Bug 1902054: Update multicast test image for use in release-4.6 #25825
Bug 1900991: test/extended/router: add idle/unidle e2e test #25858
Bug 1925539: Allow RHE7 /run contents for build fs test #25864
Bug 1924744: allow OKD /run contents for build fs test #25851
Bug 1900991: idle.sh: Drop endpoints mocks from idle tests #25855
Bug 1920626: add test to verify build /run fs contents #25838
Bug 1921473: don’t wait for PV removal in volumes.sh #25831
Updating openshift-enterprise-tests builder & base images to be consistent with ART #25796
Bug 1917014: replace test/cmd/builds.sh direct/indirect docker.io refs with imagestream image refs #25805
Bug 1916687: broaden acceptance of scl sample s2i image usage messages #25804
Bug 1902029: move off docker.io in build e2e’s (approximate recent 4.7 changes) #25721
Add e2e testing of server-side apply for openshift types #25699
Bug 1891711: deflake e2e test “Application behind service load balancer with PDB is not disrupted ” #25634
Bug 1890297: [release-4.6] Fix skipping of SDN tests #25670
Bug 1886665: move jenkins e2e nfs setup from docker.io to quay.io image #25598
Bug 1890524: move off docker.io in templates/builds/jenkins tests #25622
Full changelog

thanos

Bug 1961158: Changing resolver to address thanos-ruler pod issues #57
Updating thanos builder & base images to be consistent with ART #44
Bug 1918792: pkg/rules/proxy: fix hotlooping when receiving client errors #47
Bug 1885946: pkg/query: eventually update rules client #38
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github