4.8.24

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.24-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.7.21, 4.7.22, 4.7.23, 4.7.24, 4.7.25, 4.7.26, 4.7.28, 4.7.29, 4.7.30, 4.7.34, 4.8.11, 4.8.13, 4.8.15, 4.8.17, 4.8.18, 4.8.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.8.3

Created: 2021-12-08 07:04:56 +0000 UTC

Image Digest: sha256:0708475f51e969dd9e6902d958f8ffed668b1b9c8d63b6241e7c9e40d9548eee

Release 4.8.24 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2021-12-06-234030

Components

Kubernetes upgraded from 1.21.1 to 1.21.6
Red Hat Enterprise Linux CoreOS upgraded from 48.84.202107271439-0 to 48.84.202112022303-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver git 8c036e44 sha256:c652f4473ef20c3adf6dbd780dbc23208dd30ec52ac21fac803895e137a3c21f
aws-ebs-csi-driver-operator git d1fe616c sha256:9ad247451d77190acf4b73b318da810ad6b46b114032e4e97a25bfc0a54427be
azure-disk-csi-driver git 2d461b39 sha256:334b3b6acec5c6b8cf268d16a11aa0f22fecd686ce1ec8f79bd7d4b845c52e4c
azure-disk-csi-driver-operator git d3a3c298 sha256:47dcd8efb87c10a78c3831c5406608b200938be6f7618334acd243c1c837f104
azure-machine-controllers git 83010763 sha256:35b734fb1e7f63304b45746c2986a30004e5e2041eef8785c6fc6e99b3623b0b
baremetal-machine-controllers git a60d493e sha256:07010ea51b154381dd5f0d6e6c7ee18592e3f6b2c63f96c74689c2e6ab19190f
cluster-autoscaler git 7bbde4cc sha256:97f4434fdb3e4b52f4a1230d42f3d2b30cbde1ea53da84ea5ac11164d85ea822
cluster-bootstrap git 1af395b7 sha256:24a66808a20e69fabf5c6bb8ee59bc56224c0e201a41ea73371dcc955107adc8
cluster-config-operator git c1022410 sha256:1c479af5d3e6fb395c6a7b240d4c2e9627f82dd3c1b2ca4a6580e8b71977dda0
cluster-csi-snapshot-controller-operator git 07b3f810 sha256:09cb15eb840b14bf093d1cf032dd752da055fa5613c62ab9f95b2b3d5b7d7e5d
cluster-dns-operator git fdb2ebec sha256:904d02ac25563efbe221950c47451188509fa2491c25b852f05aac1fb4f776ea
cluster-openshift-controller-manager-operator git 286c1577 sha256:8ddda01195abd473b1770ebc6a2373f0db796f196bff8c47506932695a0ee745
cluster-policy-controller git ec46ea5c sha256:d34679b0089853be17452c236f1c5aa8a52ef0882495d8fa91cafa538fdf7b50
cluster-samples-operator git 31fb491f sha256:f651b27a67edb8c78aa78dcf764b9fdf3e59c33d76b451efad896972fb0800f9
cluster-update-keys git 87835b73 sha256:f5b8da2529b012910774d1ba888b9b528be24d7d8a245defc843dd3134b3d7ad
coredns git 642b46ef sha256:fc94195d219afafed445884a40ea374b0c94ed64441ecaf1d79c367a961ff470
csi-driver-manila git 3579eadc sha256:9e5ccd34a912cc643007d02c9fe52f95cce8763bc722c7a664e6176a0bda188a
csi-external-attacher git 596da63e sha256:c2488d0cc3ee9035fcfad8a0a50c1c1b737f136dcd1bdbb1c0fa81c110fbbd4f
csi-external-provisioner git 3ea7e68a sha256:937c956360cb8fea0d0281e525ae0fcd27c6810903b45267613448d994dceecd
csi-external-resizer git b5dd2b39 sha256:6049138a9aa5bd51e36f14332b6df79af1e1732787eb2244f9248f02e9dea805
csi-external-snapshotter git 1e2cca95 sha256:b656b7d8dafcb3a45da38903526a59a4b26902224e8e204dbaaf10f54c5698cb
csi-livenessprobe git a29b1153 sha256:d26140c64dfbf14d5af5ed2db905fd9065adecb09f217f1abd2250ae91b93fa7
csi-node-driver-registrar git 0519730f sha256:ce54c14b59a33c3f68bcaaeafeace71a502838e527d0fd812b0cfeaea772f67c
csi-snapshot-controller git 1e2cca95 sha256:a0a2e0306d6d5e45155c72f326cae1259e453e4adc3c0b4650d21f58582b842d
csi-snapshot-validation-webhook git 1e2cca95 sha256:02a280b9714cda6a97a16fc84fe71a3321ddb56056ddffa86af669d0761447af
egress-router-cni git 016bea1a sha256:32e2b1044523d34d5951353db0b57a66cc7960a7734450ffe4fac21e5d7a159c
etcd git aefa6bf5 sha256:a60070bccdea39afbf11431e74917a210cda1f9cd01a616866d2f2c935a8a212
gcp-machine-controllers git 34db56eb sha256:7ef014e5e137480e269c5dfcd63c3549eb4e1685d5fea6a8517e0811a27f5d4d
gcp-pd-csi-driver git 0b618896 sha256:433187c950372721a99c8fa2106b94f957c7e80c5e166b0a1931eaddd408d0cb
gcp-pd-csi-driver-operator git 35ebe860 sha256:eabfc70fd979e7d93df9ea0cb747874eec0db7db4618be23b304d5be70faf108
grafana git b987e4b1 sha256:bfb2f86a35744e5a4377acea90e3027513a4d3260d086a19b84b9abe28c49c74
ironic-inspector git 9aafd074 sha256:feb8cdb91b81c8169ae0cadfd3d6b113cd4c51009d2aaec22d90369285f0f888
ironic-ipa-downloader git ba878326 sha256:11269690bd34ec1b7446db2fe74bae15eb38efb1255dcdffdddb634b0a17a70d
ironic-machine-os-downloader git 71967e7d sha256:d82f49614b4b2102fb3f93737a0e6b1729f2ff92eb11778928b619e99f17159a
ironic-static-ip-manager git d2e40e34 sha256:6a8b12150090b4dcac17cafbf7daad521532d76aa7de7328324429eb324bd944
keepalived-ipfailover git ad38e116 sha256:e0570f644044aeaed1eec663aef3b6c1bd23ccf1a76ad9560a686145fd5ac582
kube-rbac-proxy git 813c3da7 sha256:73331ff6219bdc97f91742969533ed87be1205679059d8cafacd129fb38de760
kube-state-metrics git 94716629 sha256:bb05660fa6f31f4b5e1910829e8426521f3a01e653970cf84c5154a136af3519
kube-storage-version-migrator git 901a6d22 sha256:1d7edb5daf72120f14580b450c40b85d4c09128bc85c242684cce1f51bec3ac8
machine-os-content sha256:a483b8f61dacaa714c6fb570ba5be023978ce91a60fdced2f410bdee8b1446bc
multus-cni git 0c972341 sha256:4dfbe2051c551d80fd9a56d6595df691c033d5adeb1cebe003e4485bb5abe592
multus-networkpolicy git 187ad91f sha256:5305a4ea6a9f9d24476fd9fc5db096d9e831fbec714ec9196b36e0741ee086c8
multus-route-override-cni git 1662c3ec sha256:9e52591144e7720b29ce53b39a8a8f108b36b01af8fd3d033c1f81d5033c7434
network-metrics-daemon git f02c63ae sha256:2e900c4db62b8a5250c119124403028b3eaccb239e1197e68993d8660b047c6e
network-tools git 5ac3739e sha256:bd942bdb6e3d3aa7cec309bee896c71637a6ddfcb5ecd5101a7f8599da9f8d40
oauth-apiserver git 09435a5d sha256:6e1a98730f27d7f08f1f140226b67fb2f995df2e6555146f00d6c9067ad733d5
oauth-proxy git 3fc0d89b sha256:a696ee8062f4cb6da9828d337d72b1a5a66ec5052ab8ba5718252c8b8ca633ed
oauth-server git 374e2ee3 sha256:14efdd28949662a9a30f354cb05ab0b4350167c594c5ab4303e1b2e6c6dbb6b5
openshift-state-metrics git 10142914 sha256:5a3b5acee12522900dabba877f3c0962e8145bb74e82f69f14834a67528da545
openstack-cinder-csi-driver git 3579eadc sha256:e1b89940d2959f8a0abd77760b3fcebdf909c19a0f12e646f87c260afb81617e
openstack-cinder-csi-driver-operator git 1184ace0 sha256:b3b9aeba2acedc36e9543d61537ed72950d2f359408faa591a0e46b49d0cc910
ovirt-csi-driver-operator git 7b6cd3d8 sha256:ad8bc91b62991fa805baa15ebb195bce7c70b871350efac6ce1b1cb9c13dfbd1
prom-label-proxy git 2faeb405 sha256:8a5ac28f757afd594bff5855089a2b4bd96f1c6d7fe410136971bfda7304c3cb
prometheus git f3beb880 sha256:b409668983f252eb22a8856c2e2815d6f90eb9ebda7f82ac2f4c783160e35a02
prometheus-alertmanager git 7b5ac874 sha256:d05dec20034bed91fb9b81f8ae8fb7cd8ec8187760bc3ec9d27af963a5e18040
vsphere-csi-driver git dd5345eb sha256:714987e64efdec2fb21a3fdcb6939b1f01271bd63c5eae5f0a931c1c0e3d3566
vsphere-csi-driver-syncer git dd5345eb sha256:5ed0625b365035a7a6f169ee04fd4987763a9156c391d65af3c0b314402ebd32
vsphere-problem-detector git c02283d6 sha256:42e502e7ac595efbe7e9d5fc0150bec81387c74405ad2204245602284cd7fa12

aws-machine-controllers

Bug 2016926: do not requeue if the machine has been updated #426
Bug 1974680: Fix eventual consistency logic to be consistent #416
Full changelog

aws-pod-identity-webhook

Bug 2029253: update go.mod for go1.16 #148
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2023363: Add ingress rules to master SG for compact clusters #5386
Bug 2017986: Set AWS Bootstrap Type == Master #5338
Bug 2017258: bump oVirt terraform provider version which fix “Disk is locked” bug #5329
Bug 2002349: Fix invalid UPI AWS instance type #5199
Bug 2008823: baremetal: Ensure ipv6 bootstrap VM client-id is predictable #5250
Bug 2009019: update legacy RHCOS boot image metadata #5255
Bug 1982001: Bump RHCOS 4.8 boot image #5227
Update OWNERS #5242
Bug 2004236: Document how to enable Octavia Day 2 #5161
Bug 1973421: [4.8] improve dual-stack install-config validation #5114
Bug 1987848: openstack: quotas/BYON improvements #5122
Bug 1969651: bump RHCOS 4.8 boot images #5051
Bug 1981548: [release-4.8] aws: move elastic ip permissions to create networking category #5056
OWNERS: add more core team members as approvers #5124
Updating ose-installer builder & base images to be consistent with ART #4780
Full changelog

baremetal-operator

Bug 2000442: Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #174
Full changelog

baremetal-runtimecfg

Bug 1996573: CoreDNS Corefile hosts - add support for dual-stack #149
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2004193: Registry mirror panic #926
Add kevinrizza as catalog-approver #921
Bug 1992639: revert incorrect allowance of ssh:// prefix with scp styled URLs #898
Bug 1974267: make oc logs work with BuildConfig’s JenkinsPipeline strategy #867
Full changelog

cloud-credential-operator

Bug 2027928: pod-identity-webhook starts without tls #429
Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
Bug 2026098: Check for aws status in infra platform status field before client setup #425
Full changelog

cluster-authentication-operator

Bug 1997906: csr request: use generate names to prevent getting stuck waiting for a cert #494
Bug 2003632: manifests, bindata: explicitely set runAsUser for operator and operand #484
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #488
Bug 1989587: pkg/operator: Add deprecated stale status #471
Bug 1979303: clear encryption conditions when there is no work to be done #467
Full changelog

cluster-autoscaler-operator

Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
Bug 1995595: add csidrivers and csistoragecapacities to autoscaler cluster role #220
Bug 1991501: Do not recreate CA deployment when CA CR is being deleted #217
Full changelog

cluster-baremetal-operator

Bug 2000445: Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never #194
Bug 1975711: Only start static ip set if provisioning net not disabled #166
Full changelog

cluster-etcd-operator

Bug 2008414: pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus #665
Bug 1994483: bindata/etcd: remove unix socket from advertised list #642
Bug 1999777: [release-4.8]: pkg/operator: add cluster backup upgrade controller #652
Bug 1993800: Bump library-go to include backoff fix of installers #648
Full changelog

cluster-image-registry-operator

Bug 2015098: Avoid disruptions #725
Bug 2004028: Update rolling update parameters #717
Bug 1973662: Properly set custom tolerations #696
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #673
Full changelog

cluster-ingress-operator

Bug 2017708: Change default balancing algorithm to “leastconn” #670
Bug 1998103: cleanup condition metrics for deleted ingress controllers #649
Bug 2000414: Configure router to use “source” for passthrough #651
Full changelog

cluster-kube-apiserver-operator

Bug 2016213: Exempt metrics scrapes from APF. #1247
Bug 2012010: alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1241
Bug 2001244: Enforce OpenShift’s defined kubelet version skew policies #1224
Bug 1993800: bump(library-go): staticpod/installer: fix backoff of installers #1214
Bug 1979303: clear encryption conditions when there is no work to be done #1188
Full changelog

cluster-kube-controller-manager-operator

Bug 1993800: Bump library-go to include backoff fix of installers #560
Full changelog

cluster-kube-scheduler-operator

Bug 1993800: Bump library-go to include backoff fix of installers #366
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
Full changelog

cluster-machine-approver

Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
Full changelog

cluster-monitoring-operator

Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
Bug 2012039: Allow namespace label in metric allow list #1436
Bug 2005205: improve update and status reporting 4.8 #1428
Revert “Bug 1999057: jsonnet: Sync with kube-prometheus” #1394
Bug 1999057: jsonnet: Sync with kube-prometheus #1360
Bug 1997497: Backport etcd telemetry #1344
Bug 1995699: Get insights on series churn during upgrades #1349
Bug 1999148: alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… #1351
Bug 1991836: Revise Alert Severity in OCP 4.8 #1342
Bug 1984753: jsonnet: Sync with kube-prometheus #1323
Bug 1978208: Sync dependencies for 4.8 release backports #1264
Bug 1982778: jsonnet: thanosquery: Use HTTP probes as opposed to exec #1289
Bug 1976765: Update AlertmanagerMembersInconsistent rule #1283
Bug 1988991: pkg/client/client.go: Add retry logic for daemonset create #1309
Bug 1982369: Fix deployment update with retry option #1285
Bug 1981246: [4.8]: Add HighlyAvailableWorkloadIncorrectlySpread alert #1276
Bug 1943565: ThanosSidecarUnhealthy will never fire if the sidecar is never healthy #1265
Full changelog

cluster-network-operator

Bug 2008589: [4.8z] Slow OVN Recovery on SNO #1200
Bug 1985308: Add a newline between user CAs and system CAs #1162
Bug 1990928: [Backport 4.8] Whereabouts should have RBAC for leases #1185
Bug 1985588: Update service network status to reflect dual stack entries #1164
Bug 1987046: Add pre-puller ds to reduce upgrade downtime #1167
Bug 1988425: Change to use mountPath: /host #1169
Full changelog

cluster-node-tuning-operator

Bug 2018053: tuned: add timeout and restarts #286
Bug 2013678: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #280
Bug 1998120: Add a cgroup blacklisting rule to parent openshift profile. #266
Bug 1999608: Reload when deps of recommended profile change. #268
Bug 1986992: Handle kube-apiserver disruption more gracefully. #257
Bug 1985908: scheduler: new option cgroup_ps_blacklist #254
Full changelog

cluster-openshift-apiserver-operator

Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
Bug 1996044: bindata: run openshift-apiserver as root explicitly. #467
Bug 1979303: clear encryption conditions when there is no work to be done #463
Full changelog

cluster-storage-operator

Bug 1996672: Add proxy support to cinder CSI #210
Bug 1986026: Manila CSI driver is not in must-gather #192
Full changelog

cluster-version-operator

Bug 1982683: [release-4.8] Respect noProxy #691
Bug 2025955: Removing the extra indentation #696
Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
Bug 2011954: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #672
Bug 1999092: Add and enable admin ack Upgradeable condition gate #647
Bug 1999777: Ensure recent etcd backup before allowing minor-version updates #649
Bug 1980411: [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status #627
Full changelog

configmap-reloader

Updating configmap-reload builder & base images to be consistent with ART #32
Full changelog

console

Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
Bug 2017469: key not a valid prop name causing display issue in env editor #10419
Bug 2009224: Regular user cannot restore VM snapshot #10436
Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
Bug 2017326: Update PatternFly/react-console #10384
Bug 1984102: Switch Cypress OLM tests to use supported Red Hat operators #9560
Bug 2005871: Cannot create Network Attachment Definition through UI #10314
Bug 1997901: Cannot delete user created vm template #10367
Bug 2001212: Notifications is not translated on the top right bar #10040
Bug 2002649: Fix SerialConsole display bug #10034
Bug 1994983: use strict promoted template list #9824
Bug 1977659: Adjusting to new reference models changes - cherry-picked rls 4.8 #9379
Bug 2013091: adds check for status in ksvc in util logic #10211
Bug 1998692: Normal user cannot create VM because it cannot access v2v-vmware #10171
(4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com #9470
Bug 2010076: Update prow setup v4.8 #10168
Bug 1999717: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #9952
Bug 2005917: CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False #10103
Bug 1993236: Do not drop environment variables without name but with a value, also fix crash when ref is empty #9799
Bug 2000474: Create BuildConfig webhook secrets before creating knative resources #9970
Bug 1996758: Update Resource Dropdown Tech preview text [Release-4.8] #9838
Bug 1990141: Console overview operators shown upgrading when still waiting on approval #9732
Bug 1995118: Virtualization is not available in Home Overview #9826
Bug 1999931: move event sources add option to serverless add group #9958
Bug 1984367: OCS deployment using Multus: UI allows StorageCluster creation with empty public and cluster network in “Internal - Attached Devices” #9566
Bug 1992720: Update Ingress to v1 API version #9788
Bug 1983644: Add a TechPreviewBadge for Multus #9539
Bug 1972987: chore(i18n): update translations #9284
Bug 1982458: Remove kube admin notifier for kubeadmin crc user #9516
Bug 1985193: Add create resource extension #9601
Bug 1989798: Fix previously deleted dragged files that show up in import yaml editor #9718
Bug 1985081: Fix Pipeline Download All #9596
Bug 1987167: Add inspect url to devconsole monitoring chart #9671
Bug 1972258: adds check for kamelet source in provider #9254
Bug 1971911: Do not render samples column and helm link when add page customization disabled them #9240
Bug 1976144: fix optional workspace checkbox check/uncheck #9343
Bug 1984242: filter null yaml objects before validating to prevent undefined exception #9565
Bug 1973696: Fix time range issue for devconsole monitoring dashboard #9298
Bug 1986581: Web console doesn’t list all the registries credentials in a secret #9651
Bug 1985356: Check for nonexistent CSVs in installed block #9735
Bug 1989152: [Release-4.8] Use specific release for files used in e2e tests #9700
Bug 1982246: Skip empty categories (id and label) in OperatorHub tab view #9509
Bug 1980136: Add cypress tests for key/value secrets with binary, ascii, and unicode values. #9439
Bug 1978043: Monitoring dashboards: Dropdowns default to “All” if present #9388
Bug 1976008: Monitoring dashboards: Custom time range fixes #9342
Bug 1975559: Fix typo in olm message #9334
Bug 1972478: improve failure alert for copied CSV #9266
Bug 1986955: Fix to persist YAML Editor success message #9664
Bug 1982221: Increase HTTP plugin proxy request timeout #9506
Bug 1977782: Preserve user annotations while editing an app #9381
Full changelog

console-operator

Bug 2018391: Remove SimpleHTTP ‘server’ response header value #606
Bug 1987315: Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #591
Bug 2003639: Use kubernetes.io/hostname for workload anti-affi… …nity #589
Bug 2001268: console-operator should report Available=true when at least available replica exists #583
Bug 1976349: Add policy-group label to the openshift-console namespace manifest #561
Full changelog

container-networking-plugins

Updating ose-containernetworking-plugins builder & base images to be consistent with ART #42
Full changelog

csi-driver-manila-operator

Bug 2002554: Do not degrade cluster on failure to reach Manila #125
Bug 1987020: Use cluster Proxy when available #109
Bug 1988506: Backport e2e testing #111
Full changelog

csi-driver-nfs

Updating csi-driver-nfs builder & base images to be consistent with ART #40
Full changelog

docker-builder

Bug 1992639: bump(s2i): revert incorrect ssh scp fix #259
Bug 1981939: Updating openshift-enterprise-builder builder & base images to be consistent with ART #230
Full changelog

docker-registry

Bug 2012163: Supporting mirror authentication during pull through #297
Updating openshift-enterprise-registry builder & base images to be consistent with ART #270
Full changelog

driver-toolkit

Bug 2011460: Add imagestream for driver-toolkit #65
Bug 1988478: Use kernel config to determine GCC version #55
Full changelog

haproxy-router

Bug 1990370: haproxy-config.template: Fix power-of-two balancing #324
Bug 1984565: config template: accept IPv6 IPs for whitelisting #321
Bug 1971730: error pages - don’t use bootstrap/normalize #305
Full changelog

hyperkube, pod

Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
Bug 2022265: Rebase v1.21.6 #1060
Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
Bug 2008403: Rebase v1.21.5 #981
Bug 2011460: UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005
Bug 1995714: UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #895
Bug 1994457: Update to kubernetes 1.21.4 #888
Bug 1993754: UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… #940
Bug 1998391: UPSTREAM: 104530: [1.21] bump runc to 1.0.2 #912
Bug 1957133: do not throw error when we can’t get canonical path #854
Bug 1981770: UPSTREAM: <drop>: bump(apiserver-library-go) #864
Full changelog

insights-operator

Bug 2027720: gather webhook configurations (#508) (#560) #508
Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
obfuscation ovn clusters bug (#523) #523
Bug TBD: Gather installed PSP names (#489) (#490) #489
Bug 1977342: Fix obfuscation translation table secret 4.8 (#467) #467
Gather all MachineConfig definitions (#449) (#459) #449
Bug 1974877: Add egress ips to anonymizer to 4.8 (#462) #462
Bug 1982170: Set also the summary operation when updating status (#475) #475
MemoryRecord name can be obfuscated & fix case of duplicate records (#444) (#453) #444
Full changelog

ironic

Bug 2023765: Compare IPs using the short form of IPv6 address #233
Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
Bug 2003035: Sync sushy to include the latest bugfixes for 4.8 #214
Bug 1991979: [4.8] Sync image with ironic #206
Bug 1975137: [4.8] Sync image with the latest ironic code #187
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
Bug 2008114: Upgrade Jenkins to 2.289.3 (and related fixes) #1324
Full changelog

k8s-prometheus-adapter

Bug 2002281: 4.8: pkg/resourceprovider: guard from negative metrics #55
Full changelog

kube-proxy, sdn

Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
Bug 2014166: Remove locking from EgressIPTracker.Ping #362
Bug 2002290: [4.8] proxy: don’t re-check every userspace proxy rule on every change #347
Bug 1987239: when assigning and releasing egressIP try more than once before failing #326
Bug 1999946: improve SDN’s OVS healthcheck and logging #341
Bug 1995871: Disable conntrack for vxlan traffic #337
Updating ose-sdn builder & base images to be consistent with ART #255
Updating kube-proxy builder & base images to be consistent with ART #256
Full changelog

kuryr-cni, kuryr-controller

Bug 2022722: Make completed Pods Ports reusable #600
Bug 2018232: Update TOX_CONSTRAINTS_FILE for stable/xena #587
Bug 1995013: Remove ep_slices from klb on endpoint delete event #550
Bug 1989550: Increase keystoneauth’s connection pool size #546
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #217
Full changelog

machine-api-operator

Bug 2026562: MaxUnhealthy should not be a string type #962
Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
Bug 1999585: [release-4.8] add alert for machine with long deletion phase #908
Bug 2000038: Respect MaxUnhealthy limit for external remediation #910
Bug 1993117: Make sure nodes don’t have attached volumes before vm deletion #903
Bug 1977634: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #896
Full changelog

machine-config-operator

Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
Bug 2026085: Send WARN message to stderr #2836
Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
Bug 2016275: [on-prem] Set coredns bufsize to 512 #2807
Bug 2011083: templates: Silence audit events from container infra by default #2793
Bug 1985736: [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer #2692
Bug 2000958: fixes 1 to 1 kubelet config mapping #2753
Bug 1999531: Set timeoutSeconds for keepalived liveness probe #2741
Bug 2004122: Set ovs syslog level to info #2762
Bug 1973873: match tlsSecurityProfile doc with kubelet.conf file #2628
Bug 2000500: bump SystemMemoryExceedsReservation alert threshold to 95% #2748
Bug 1976110: configure-ovs: fix nondeterministic master in slave profiles #2644
Bug 1985735: [ON-PREM] HAProxy - enable listening sockets retrieval from old processes #2691
Bug 1998106: vSpehere: disable vmxnet3 tx csum offload #2736
Bug 1995809: crio: complete crio default config #2724
Bug 1993385: crio: use conmon from path #2714
Bug 1975078: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2636
Updating ose-machine-config-operator builder & base images to be consistent with ART #2484
Full changelog

mdns-publisher

Bug 1988145: Update zeroconf vendoring #35
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller builder & base images to be consistent with ART #32
Full changelog

multus-whereabouts-ipam-cni

Bug 2009497: Release on cancel, sync for 4.8 #70
Bug 1990113: Syncs with upstream for leader election [backport 4.8] #63
Full changelog

must-gather

Updating ose-must-gather builder & base images to be consistent with ART #221
Full changelog

openshift-apiserver

Bug 2020644: Image policy should mutate DeploymentConfigs #259
Bug 1992639: revert incorrect ssh scp fix #241
Full changelog

openshift-controller-manager

Bug 2006793: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #206
Full changelog

openstack-machine-controllers

Bug 2000542: Adds Proxy to provider client http transport #199
Bug 1985015: Eliminate instanceCreate volume leak #192
Full changelog

operator-lifecycle-manager, operator-registry

Bug 1996162: Check for pruned bundles on add in replaces mode #165
Bug 1986476: resolver: remove legacy support for fallback parsing of CSVs #140
Bug 1994038: clarify maxOpenShiftVersion upgrade error message #173
Bug 1994038: Update kubebuilder installation in the build root dockerfile #174
Bug 1994110: fix(openshift): drop z from next calculated y-stream #167
Bug 1989779: installplans: retry crd updates on conflicts #156
Bug 1989711: fix(openshift): block upgrades on invalid max properties (#2302) #155
Bug 1990650: Add PriorityClass setting to registry pods for default CatalogSource (#2304) #158
Bug 1986023: Translate legacy “bundle dependencies” to properties. #134
Bug 1979525: OLM blocks minor OpenShift upgrades when incompatible optional operators are installed #120
Full changelog

operator-marketplace

Bug 1998938: Use client-go’s leader election implementation #421
Bug 1990650: Add priorityclass annotation to default catalogsources #418
Full changelog

ovirt-csi-driver

Bug 2013945: pvc stuck on pending status when using preallocated storage domain #89
Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #75
Full changelog

ovirt-machine-controllers

Bug 1989676: correct IPAddress detection for OVNKubernetes #116
Bug 1987182: allow auto pinning new names #115
Full changelog

ovn-kubernetes

Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
Bug 2011391: [4.8] bump OVN to 20.12.0-183.el8fdp #783
Bug 1986708: Add routes for pod: fail only after checking all the gw addresses / ips #774
Bug 2005480: [4.8z] Remove waiting for namespace and namespace lock contention #760
[release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses #661
Bug 2004336: Ensure host interfaces are deleted by CNI #745
Bug 2005464: [4.8z] Fixes skipping pods accidentally in retry #758
Bug 2005357: [4.8z] Fixes misuse of pod annotations during update event #753
Bug 1996739: Fix ensurePod to call addPodExternalGW only for annotation updates #752
Bug 2004488: panic after EgressFirewall deletion and DNS record expiration #749
Bug 2004269: Sync ECMP routes on startup and fixes stale ECMP routes #743
Bug 1999638: Fix duplicate incrementing of subnet allocation metric #700
Bug 1996729: NetworkPolicy: bulk-add pods to new policies (or on restart) #678
Bug 2000214: Fix GetPortAddresses for HBO #711
Bug 2001641: egressfirewall not set after upgrade #722
Bug 1996201: Fixes cases of timed out while waiting for OVS port binding #686
Bug 2001542: fix reserve joinSwitch LRP IPs #720
Bug 2001363: [4.8z] Ensure client handling of canceled/dropped OVSDB monitor #718
Bug 1999895: Revert “[release-4.8] fix reserve joinSwitch LRP IPs” #706
Bug 1996965: Add quotes around nexthop and dst-ip fields #680
Bug 1994937: Fix: sync egress IP for missed events on start-up #665
Bug 1997049: fix reserve joinSwitch LRP IPs #681
Bug 1985957: Backport ovnkube-trace requires ip package to be installed to 4.8 #656
Bug 1988487: Fix lgw eip 4.8 #636
Bug 1976241: Update existing policy ACLs on start #635
Updating ose-ovn-kubernetes builder & base images to be consistent with ART #473
Bug 1985514: Add v6 management interface address for host network policy #624
Bug 1986573: Declare a maximum line length for batching #631
Bug 1976644: Bump OVN to 20.12.0-140.el8fdp #591
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 1979575: [4.8]: Add timeout to informers cache sync #132
Full changelog

prometheus-node-exporter

Bug 1984074: netclass: retrieve interface names and filter before parsing #91
Full changelog

service-ca-operator

Updating ose-service-ca-operator images to be consistent with ART #177
Update go version to 1.16 #179
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #374
Full changelog

tests

Bug 2028021: Bump update time limit 4.8 #26657
Bug 1929650: Increase OVN upgrade timeout by 15m #26654
Bug 2025724: Add admin ack Upgradeable condition gate test #26635
Bug 2020644: Add more tests for image policy #26584
Bug 2019519: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26562
fix: add proxy support to OAuthServer tests #26539
Bug 2008114: Add role label to jenkins imagestream #26503
Bug 2002552: Retry kubeconfig checks, when kube-apiserver is temporarily unavailable #26458
Bug 1989402: Add tests required internet into Skipped:Disconnected list #26369
Bug 1986259: Enable TestEndpointAdmission test only for OpenShift SDN #26351
Re-enable cluster quota test #26234
Bug 1978090: testPodSandboxCreation: skip sandbox errors for pods which were not deleted during network update #26297
Bug 1981246: [4.8]: test/e2e: allow workload incorrectly spread alert #26319
Full changelog

thanos

Bug 1994156: dockerignore: remove vendor from ignored list #70
Full changelog

vsphere-csi-driver-operator

Bug 2021620: Close connection to vCenter API #51
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github