4.8.37

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.8.37-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.8-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.7.26, 4.7.28, 4.7.30, 4.7.31, 4.7.33, 4.7.34, 4.7.36, 4.7.37, 4.7.39, 4.7.40, 4.7.42, 4.7.43, 4.7.44, 4.8.10, 4.8.12, 4.8.13, 4.8.14, 4.8.16, 4.8.17, 4.8.18, 4.8.20, 4.8.21, 4.8.22, 4.8.24, 4.8.25, 4.8.26, 4.8.28, 4.8.29, 4.8.30, 4.8.31, 4.8.7, 4.8.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.8.11

Created: 2022-04-13 22:26:54 +0000 UTC

Image Digest: sha256:462178399720c61fc4f9a99e572e3c10428c35f704ed36a44e75def2fc6261c7

Release 4.8.37 was created from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-04-13-042657

Components

Kubernetes upgraded from 1.21.1 to 1.21.8
Red Hat Enterprise Linux CoreOS upgraded from 48.84.202109090400-0 to 48.84.202204041528-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver git 8c036e44 sha256:74a5dfae2521219c170e64819aa56ebcf8254d886eab6fd23ede3e14f8471f80
aws-ebs-csi-driver-operator git d1fe616c sha256:8c17c08d03cdb8aa1a5395ad03ef2815c32827c787554c7239157541cb9cc3e4
azure-disk-csi-driver git 2d461b39 sha256:456b93aaae9e1e44de9d74354c748cfd12e8bf760fa189d233e26f4ff0b32764
azure-disk-csi-driver-operator git d3a3c298 sha256:37ba874d506ab087f62b4f29fdce0254b7f50bfe28e0361b54d9e09f493a41a6
baremetal-machine-controllers git a60d493e sha256:59b662c73227772a8d960796604c34d05d5cd28e60c80c4ce09e53937056ea99
cluster-autoscaler git 7bbde4cc sha256:88a421b9e65a48061c3a695f3a1895cdd4c482667cc69177654f1562d122edf4
cluster-bootstrap git 1af395b7 sha256:a551f5c81de7d8fde091f3f2c41ffa5aa40700b329ae39773e897c74b6614312
cluster-config-operator git c1022410 sha256:14505206563931c7b223370cae5e6e431117a8314402cf686a452da29cd9b8f6
cluster-csi-snapshot-controller-operator git 07b3f810 sha256:5d63a15ad037856e1d569bf61d81ced0036896fab8d4ce524503cc79e5db07ed
cluster-dns-operator git fdb2ebec sha256:ea18ab26bfe694a660bb8129e73d5ced252b463f9f54dcba1d1511c9c4667752
cluster-kube-controller-manager-operator git 7fa48ebf sha256:cf3d9206cef55b651dba134dff058521dd0f63e7d0998276b6614c9500399188
cluster-openshift-controller-manager-operator git 286c1577 sha256:cb5f02dab9d7f763471e5bb18392d12be92d8a2ed87010b388e287a028fe599e
cluster-policy-controller git ec46ea5c sha256:19949502370ca21fa3c35df3ba792007db71d51a43fbd3f7e8dc20adcd18a0ef
cluster-samples-operator git 31fb491f sha256:b9ee6e3679f091c3ff79ef30c63f72a82042909e54d2025a5ac0f6cd899b62e6
cluster-update-keys git 87835b73 sha256:bad9012d7cb5da2fee227ea11a56dd051e0638152e7f1f1b73c61790d73539ce
configmap-reloader git 0d221296 sha256:685182b96290ab89cc574fee00e4ecd22899ce8c42c204abd32e04c63b2ecc29
container-networking-plugins git 71a8b346 sha256:54d694f2f96360ceed6dc1c8caeeb83e73e6c804f12944969021c529ac721572
coredns git 642b46ef sha256:6b4767582eed540e3e51585c04cc35fb901f2ab5f00a87e7c1a1e87d84b79fe9
csi-driver-manila git 3579eadc sha256:574dfc82d1b66bc9f0ff54280a6ea5104e188aebfd55081c8caf58be5621f5f1
csi-driver-nfs git 583088ef sha256:92a0aa6f8f9f5dbae36bb35f738e4af931c938a96160ccb6234b7c10750b2e1f
csi-external-attacher git 596da63e sha256:4999d1b5313fe0380ddfb15c08ce520e99f6c7c035946e6e0d388a4587a5258c
csi-external-provisioner git 3ea7e68a sha256:f834647b6291b8a85802357651c59e90b0eff92f63a045beee31523ae4f9ebdd
csi-external-resizer git b5dd2b39 sha256:6cf91b3cc74164f6c73c8144c1581570fe08052b7bc2ec6266f8ef48d6443898
csi-external-snapshotter git 1e2cca95 sha256:7a6dbd6c635c7739693ed795f00e009bab55dc677a090702fdc4b84f2e92d6a0
csi-livenessprobe git a29b1153 sha256:b74de6b62f5239bb583b4fbb6f6c2ba3fb81a8cabdeef45ea343c1145f33177d
csi-node-driver-registrar git 0519730f sha256:66cb478dc04b02df18c966ee986e62c113a637b1711d563f8d6583527d3c14d4
csi-snapshot-controller git 1e2cca95 sha256:feb5d7b94384350f37e1e24eb3b808359a6f64a8e3a0e3bd095781597b845974
csi-snapshot-validation-webhook git 1e2cca95 sha256:2e08f1a22c47b40862470efbb29ca7fb699e80dba9fc8fa5cf4a8541c58c6ab5
egress-router-cni git 016bea1a sha256:2c92c3db45686c34a31d5b258b458a0c29f6f197baab3acaef84397cae143feb
etcd git aefa6bf5 sha256:cd6850eb715a005fe87681ec9f5e88fc6d942816e3366918b3d2e2bd82f2a985
gcp-machine-controllers git 34db56eb sha256:92bd82ea785b314834764ee4aa5745540fda42958a08a3f78f920549f062561a
gcp-pd-csi-driver-operator git 35ebe860 sha256:20f358e7e34fb91492e6e4efc278fefda5e88f24331dd9f1e016bd50d6befb86
grafana git b987e4b1 sha256:532c751fc6dd7d4f5f86ac6f9f66b0e74bd8991010bc8d457fa3bb6193599bb0
haproxy-router git 9c9f9f42 sha256:936f7fe4ce99f586c7c8194a3ac9228c77ed1f31854a6117187a5c6db6345be0
ironic-ipa-downloader git ba878326 sha256:62b92050ea50e23f48cbea6f3b170ab56ad82d0d747c487a87d69b27533d6dd3
ironic-static-ip-manager git d2e40e34 sha256:710a1380b576043430ee67582aa9dc2162084242709b5ee0c59fe3988033e2fe
keepalived-ipfailover git ad38e116 sha256:4af3b3599c3db9dae2d59ac57725b1740ee4bd3dce1dde9cb8d5b41c99dfc5f4
kube-rbac-proxy git 813c3da7 sha256:17db34c23a31896d1b29faae3a3b1c4b5766db773dbaa7d8a60bf059c6f9adc2
kube-state-metrics git 94716629 sha256:b9933a19b1ef4e1aab5a5e491042bc10e86a8f88eb7f9c15734f21cac6760e30
kube-storage-version-migrator git 901a6d22 sha256:0ff6d8a30ebdcb97970016dc5cec93cf420df77ab42bf5fe6753cc74bc5c4abc
libvirt-machine-controllers git 9542e5ac sha256:b9969dfacee113fc2de2f8e2e9bef5b611f4429ef3510584c7ebd0dbb9210df8
machine-os-content sha256:52988bb906c3705f5594e3336eed6eebd85fcccf1c20b81e3b576c85a2261c28
multus-admission-controller git 64645feb sha256:38f9e95ceb98887818cb28d415aa19e4c186a97db3929cb2baadd7ccd7ee3e51
multus-cni git 0c972341 sha256:25b90c0b3b6a09217d011e54bd1a1c55f3d4e914c4e4b38635b76454a0f1b5fe
multus-networkpolicy git 187ad91f sha256:1e66326fff2f0759d96fe4be2b55d7cb026fd19b5108662b89eaea79c89d84c6
multus-route-override-cni git 1662c3ec sha256:397fdbd2957eb77d568b147a571a1e5561752de4febc1b1ea5a95f7564239841
network-metrics-daemon git f02c63ae sha256:e716301b5afeda80f3eb1a9f8e9c28cbfc26077d6905a3b08e495f20c0e509e9
network-tools git 5ac3739e sha256:b71cc69272e34301a6f505f2ad7f9fde9af8d352487219076999945368c3b05f
oauth-proxy git 3fc0d89b sha256:205947fa38f72521b4a927faaf862ccfa785af985ed6db4ee38d86c3467af291
oauth-server git 374e2ee3 sha256:545894462f18c4c8116480c6a3121097f989f21bea4e0fc5a539d50e4b823c7d
openshift-state-metrics git 10142914 sha256:c45196cf160e8f390c759e7e67158433a7fb6e846198fb763d4ca92a7e8d4ce3
openstack-cinder-csi-driver git 3579eadc sha256:626293af1b0e793cd21c1e05db6c023037b1c79b7532127f9d70f00d455b502a
prom-label-proxy git 2faeb405 sha256:da0a65f9debca529bcece5c06ebdbea4f2524aa42eb9f105c6d644dd15651fba
prometheus git f3beb880 sha256:63255ce13e67e0e3ec97b58e672d378daa31c94f58e8ce7c0d42241167cfd5de
prometheus-alertmanager git 7b5ac874 sha256:02f84b3181f4478ce4225c045d5ec75d655499ff38eecba897dcd334d286f6da
prometheus-config-reloader git 8f4efab9 sha256:3e536ab8942c7666ef4464723118c6728b2edbd1a8960110e9b882984e325948
prometheus-node-exporter git 9ad2cf90 sha256:40098332bf046bb567466a450c9d5c94bea88726c2bdef78263c86de4e7b6085
prometheus-operator git 8f4efab9 sha256:2ae8d5fe659d5ae2f5380f06472a4726ac16c22f11044060220cf97ba20c4e3e
thanos git f7c1227d sha256:0818f049fe97c2fce0155e606c92c7b59dfada74a998d078d7159b125d216315
vsphere-csi-driver git dd5345eb sha256:8b04c7cd23ebdc2c8553322016e93e727c47f1c0ecc29c482295d9330fa5ad27
vsphere-csi-driver-syncer git dd5345eb sha256:ab087b8534cf98cb516ca51a3c8280d0b97d01ad157693abc2006fc644fbeedc

aws-machine-controllers

Bug 2066675: Ensure IOPS setting is honoured on all supported block device types #437
Bug 2031905: Prevent Machine from being considered provisioned until it exists in AWS #432
Bug 2016926: do not requeue if the machine has been updated #426
Full changelog

aws-pod-identity-webhook

Bug 2029253: update go.mod for go1.16 #148
Full changelog

azure-machine-controllers

Bug 2051576: Requeue create on invalid credentials errors #253
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2069166: stop considering Mint mode as supported on Azure (#5699) #5753
Bug 2022171: Relax vcenter hostname check #5371
Updating ose-installer-artifacts builder & base images to be consistent with ART #4782
Bug 2023363: Add ingress rules to master SG for compact clusters #5386
Bug 2017986: Set AWS Bootstrap Type == Master #5338
Bug 2017258: bump oVirt terraform provider version which fix “Disk is locked” bug #5329
Bug 2002349: Fix invalid UPI AWS instance type #5199
Bug 2008823: baremetal: Ensure ipv6 bootstrap VM client-id is predictable #5250
Bug 2009019: update legacy RHCOS boot image metadata #5255
Bug 1982001: Bump RHCOS 4.8 boot image #5227
Update OWNERS #5242
Bug 2004236: Document how to enable Octavia Day 2 #5161
Bug 1973421: [4.8] improve dual-stack install-config validation #5114
Full changelog

baremetal-operator

Bug 2000442: Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #174
Full changelog

baremetal-runtimecfg

Bug 2059584: Ignore VIPs in node-ip show #172
Bug 2053720: Avoid dynamically allocated port range for haproxy #171
Bug 2050288: Add delay after sending bootstrap stop and start messages #170
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2066760: Add TMOUT env to debug node pod #1095
Bug 2039762: Remove git:// from new-app tests #1023
Bug 2053223: Fix mirroring images that have dots in their namespace #1069
Bug 2038931: properly handle –dry-run=server #1017
Bug 2004193: Registry mirror panic #926
Add kevinrizza as catalog-approver #921
Full changelog

cloud-credential-operator

Bug 2058270: Remove Azure mint mode support as Active Directory Graph API will be sunset #454
Bug 2027928: pod-identity-webhook starts without tls #429
Bug 2027832: Stop putting CCO in degraded state when stale credentials are found #428
Bug 2026098: Check for aws status in infra platform status field before client setup #425
Full changelog

cluster-authentication-operator

Bug 2062591: e2e: Pin Keycloack to the legacy variant #557
Bug 1997906: csr request: use generate names to prevent getting stuck waiting for a cert #494
Bug 2003632: manifests, bindata: explicitely set runAsUser for operator and operand #484
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #488
Full changelog

cluster-autoscaler-operator

Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART #193
Bug 2026237: Change ClusterAutoscalerUnschedulablePods severity to info #232
Bug 1995595: add csidrivers and csistoragecapacities to autoscaler cluster role #220
Full changelog

cluster-baremetal-operator

Bug 2055279: Calculating network stack only on supported Platforms #248
Bug 2000445: Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never #194
Bug 1975711: Only start static ip set if provisioning net not disabled #166
Full changelog

cluster-etcd-operator

Bug 2008414: pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus #665
Bug 1994483: bindata/etcd: remove unix socket from advertised list #642
Bug 1999777: [release-4.8]: pkg/operator: add cluster backup upgrade controller #652
Full changelog

cluster-image-registry-operator

Bug 2067107: Retry on pruner failures #761
Bug 2015098: Avoid disruptions #725
Bug 2004028: Update rolling update parameters #717
Full changelog

cluster-ingress-operator

Bug 2066302: Disable keepalive for canary probe #726
Bug 2017708: Change default balancing algorithm to “leastconn” #670
Bug 1998103: cleanup condition metrics for deleted ingress controllers #649
Bug 2000414: Configure router to use “source” for passthrough #651
Full changelog

cluster-kube-apiserver-operator

Bug 2026089: library-go bump #1320
Bug 2016213: Exempt metrics scrapes from APF. #1247
Bug 2012010: alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1241
Bug 2001244: Enforce OpenShift’s defined kubelet version skew policies #1224
Bug 1993800: bump(library-go): staticpod/installer: fix backoff of installers #1214
Full changelog

cluster-kube-scheduler-operator

Bug 2026110: Disable balancedAllocation and add weight for HighNodeUtilization profile #380
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 4 #79
Bug 2022844: Extensive number of requests from storage version operator in cluster – Part 1 #78
Full changelog

cluster-machine-approver

Bug 2031047: Ensure pending CSR count is valid post approval #146
Bug 2032092: Replace certificates with generated certificates #148
Bug 2024689: Allow fallback to serving cert renewal accounting for egress IPs on SDN #142
Full changelog

cluster-monitoring-operator

Bug 2030698: KubePodCrashLooping may fire when pod is not in CrashLoopBackOff #1619
Bug 2039538: Add custom profile metric for Node Tuning Operator to telemetry #1565
Bug 2018431: [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1459
Bug 2012039: Allow namespace label in metric allow list #1436
Bug 2005205: improve update and status reporting 4.8 #1428
Revert “Bug 1999057: jsonnet: Sync with kube-prometheus” #1394
Bug 1999057: jsonnet: Sync with kube-prometheus #1360
Bug 1997497: Backport etcd telemetry #1344
Full changelog

cluster-network-operator

Bug 2068895: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1351
[release 4.8] Updates owners #1334
Bug 2054642: sbdb and nbdb containers leave pid around if they restarted or crashed #1310
Bug 2023426: Add ip6tables NOTRACK rules for udp/6081 #1228
Bug 2021221: ovnkube: set ovn-controller lflow cache limit to 1GB #1278
Bug 2034352: Whereabouts IP Reconciliaton [backport 4.8] #1265
Bug 2022747: Allow to use proxy to connect to OSP cloud #1225
Bug 2037500: Bump openshift/build-machinery-go #1271
Bug 2029590: Set upgrade strategy on kube-proxy #1244 #1244
Bug 2018513: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1211
Bug 2008589: [4.8z] Slow OVN Recovery on SNO #1200
Bug 1985308: Add a newline between user CAs and system CAs #1162
Bug 1990928: [Backport 4.8] Whereabouts should have RBAC for leases #1185
Full changelog

cluster-node-tuning-operator

Bug 2018053: tuned: add timeout and restarts #286
Bug 2013678: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #280
Bug 1998120: Add a cgroup blacklisting rule to parent openshift profile. #266
Bug 1999608: Reload when deps of recommended profile change. #268
Full changelog

cluster-openshift-apiserver-operator

Bug 2052097: global pull secret not working in OCP4.7.4+ for additio… #493
Bug 2003946: Deploy PDB to prevent more than one replica going unavailable #473
Bug 1994655: apiservice-controller: don’t update the failing condition when an operator has been requested to shutdown #482
Full changelog

cluster-storage-operator

Bug 2034270: Add trusted CA bundle to vsphere operators #249
Bug 1996672: Add proxy support to cinder CSI #210
Full changelog

cluster-version-operator

Bug 2047434: Changing the ClusterNotUpgradeable alert to info #731
Bug 2038936: *: Use –v=2 logging to drop client-side throttling noise #724
Bug 1982683: [release-4.8] Respect noProxy #691
Bug 2025955: Removing the extra indentation #696
Bug 2015025: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #679
Bug 2011954: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #672
Bug 1999092: Add and enable admin ack Upgradeable condition gate #647
Bug 1999777: Ensure recent etcd backup before allowing minor-version updates #649
Bug 1980411: [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status #627
Full changelog

console

Bug 2066365: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11271
Bug 2060450: Fix that the preferred namespace was not selected when it contains just numbers #11134
Bug 2055132: Fix TypeError when application has HelmRelease #11069
Bug 2060616: Add error boundary in edit-flows #11137
Bug 2061266: Update e2e test to use 3scale operator to increase test stability #11141
Bug 2046215: Filter superseded helm secrets and fix firehose to support partial metadata #10936
Bug 2045592: Check if name label exists before comparing #10929
Bug 2048900: Fix knative function label cherry pick #10987
Bug 2045051: Add subject name selector field to SinkBinding form #10925
Bug 2046051: Add support for fetching partial metadata and fix helm list page crash #10932
Bug 2004086: Add name field in edit deployment form #10873
Bug 2046043: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10931
Bug 2008141: Allow web terminal to be installed in any namespace #10134
Bug 2019301: Check for resource in ServiceBinding spec’s service reference #10376
Bug 2018064: fix dev-catalog stuck in loading state #10346
Bug 2044571: Update CRW operator name to fix failing e2e tests #10918
Bug 2036045: fix resource limit form validation #10788
Bug 2034640: cant delete VM with un-owned pvc attached #10718
Bug 2030443: Fix ClusterOperators link #10638
Bug 2024206: Fix resource metrics 403 errors for project admin users #10496
Bug 2026950: Fix autofocus on pf select component for search resource dropdown #10577
Bug 2017469: key not a valid prop name causing display issue in env editor #10419
Bug 2009224: Regular user cannot restore VM snapshot #10436
Bug 2020162: PVC is deleted along with VM even with “Delete Disks” unchecked #10399
Bug 2017326: Update PatternFly/react-console #10384
Bug 1984102: Switch Cypress OLM tests to use supported Red Hat operators #9560
Bug 2005871: Cannot create Network Attachment Definition through UI #10314
Bug 1997901: Cannot delete user created vm template #10367
Bug 2001212: Notifications is not translated on the top right bar #10040
Bug 2002649: Fix SerialConsole display bug #10034
Bug 1994983: use strict promoted template list #9824
Bug 1977659: Adjusting to new reference models changes - cherry-picked rls 4.8 #9379
Bug 2013091: adds check for status in ksvc in util logic #10211
Bug 1998692: Normal user cannot create VM because it cannot access v2v-vmware #10171
(4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com #9470
Bug 2010076: Update prow setup v4.8 #10168
Bug 1999717: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #9952
Bug 2005917: CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False #10103
Bug 1993236: Do not drop environment variables without name but with a value, also fix crash when ref is empty #9799
Bug 2000474: Create BuildConfig webhook secrets before creating knative resources #9970
Bug 1996758: Update Resource Dropdown Tech preview text [Release-4.8] #9838
Bug 1990141: Console overview operators shown upgrading when still waiting on approval #9732
Bug 1995118: Virtualization is not available in Home Overview #9826
Full changelog

console-operator

Bug 2071200: Fix setting of custom cert for default route #643
Bug 2008141: Change web terminal subscription permissions from get to list #595
Bug 2041359: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627
Bug 2018391: Remove SimpleHTTP ‘server’ response header value #606
Bug 1987315: Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #591
Bug 2003639: Use kubernetes.io/hostname for workload anti-affi… …nity #589
Bug 2001268: console-operator should report Available=true when at least available replica exists #583
Full changelog

csi-driver-manila-operator

Bug 2002554: Do not degrade cluster on failure to reach Manila #125
Full changelog

docker-builder

Bug 2053122: [release-4.8] getAssembleUser(): strip the group part out before checking the UID #289
Update OWNERS file #290
Full changelog

docker-registry

Bug 2042678: Fix auth for docker.io images #306
Bug 2053223: Fix pull-through for images that have dots in their namespace #310
Bug 2012163: Supporting mirror authentication during pull through #297
Full changelog

driver-toolkit

Bug 2031938: Add e2e test to 4.9 branch #72
Bug 2011460: Add imagestream for driver-toolkit #65
Full changelog

gcp-pd-csi-driver

Bug 2052955: Disable uuid checks on XFS #23
Full changelog

hyperkube, pod

Bug 2043808: IPs with leading zeros are still valid in the apiserver #1173
Bug 2060494: Backports inotify leak fix into kubelet #1203
Bug 2024642: Rebase v1.21.8 #1102
Update to go1.16.12 #106983
dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 #106961
Update to go1.16.11 #106839
Automated cherry pick of #106891: kubeadm: validate local etcd certficates during #106924
Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig #106929
Automated cherry pick of #105666: fix: skip instance not found when decoupling vmss from lb #105835
Automated cherry pick of #105612: Remove Error Message Check Dynamic PV Tests #106357
Automated cherry pick of #96115: Get inodes and disk usage via pure go #104021
Automated cherry pick of #102882: devicemanager: checkpoint: support pre-1.20 data #106254
Automated cherry pick of #103154: Update mounter interface in volume manager #106553
Automated cherry pick of #104287: Reduce calls to docker from dockershim for stats #106502
Automated cherry pick of #106102: Ensure deletion of pods in queues and cache #106685
Automated cherry pick of #106412: kube-scheduler: Increase the duration to expire an assumed #106632
Automated cherry pick of #106526: Ignore ‘wait: no child processes’ error when calling #106527
Automated cherry pick of #105046: Skip check for all topology labels when using system default #106605
Automated cherry pick of #105065: parameter ‘disabled-metrics’ is invalid #106391
Automated cherry pick of #106317 upstream release 1.21 - Fixed nil pointer dereference #106354
Automated cherry pick of #106382: defer close the rotated log open #106384
Automated cherry pick of #104526: Fix issue in node status updating VolumeAttached list #106053
remove listx from OWNERS_ALIASES #104261
Automated cherry pick of #105512: Add check for subpaths #106351
Manual cherry pick of kube-openapi changes for release-1.21 #106255
Update to go1.16.10 #106224
Automated cherry pick of #105934: Don’t guess SELinux support on error #106260
Automated cherry pick of #102059: Bump k8s.io/utils #102656
Automated cherry pick of #94165: Use separate pathSpec for local and remote to properly handle #106236
Cherry-pick of #101708: Fix log spam for du failure on pod etc-hosts metrics #105887
Update debian, debian-iptables, setcap images to pick up CVEs fixes #106147
Automated cherry pick of #105946: Remove nodes with Cluster Autoscaler taint from LB backends. #106096
Automated cherry pick of #105997: Fixing how EndpointSlice Mirroring handles Service selector #106135
Automated cherry pick of #105673: support more than 100 disk mounts on Windows #105693
Automated cherry pick of #105755: Support cgroupv2 in node problem detector test #105991
Cherry pick of #104551: Run storage hostpath e2e test client pod as privileged #105787
Automated cherry pick of #105734: Fix race condition in logging when request times out #106113
Bug 2050131: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1168
Bug 2039377: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1108
Bug 2029466: UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails #1146
Bug 2024995: Fix subpath source check #1067
Bug 2032325: UPSTREAM: <carry>: api request counts for current hour are incorrect #1092
Bug 2022741: UPSTREAM: 106260: Don’t guess SELinux support on error #1054
Bug 2021997: Read k8s version from hyperkube Dockerfile #1045
Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027: UPSTREAM: <drop>: bump apiserver-library-go #1069
Bug 2022265: Rebase v1.21.6 #1060
Automated cherry pick of #105509: [test]: Fix PreferNominatedNode test #105665
Update to go1.16.9 #105672
Automated cherry pick of #104985: Aggregator uses the regular transport even if the request #105641
Automated cherry pick of #99748: check log directory for restartCount #105614
Automated cherry pick of #104593: fix: ignore the case when updating tags #104686
Automated cherry pick of #103371: tests: Wait for the network connectivity first #105441
Automated cherry pick of #105185: Ignore VMs in vmss delete backend pools #105402
Cherry pick of #105188 and #98350 to release 1.21 #105365
Automated cherry pick of #102665: Add explicit capability for online volume expansion #102740
Automated cherry pick of #104913: kube-controller-manager: properly check generic ephemeral #105037
Automated cherry pick of #102409: Bump golang.org/x/text to v0.3.6 #102601
Bump klog to v2.9.0 #105407
Automated cherry pick of #105048: Remove a duplicate StorageClass creation call #105354
Automated cherry pick of #105205: e2e scheduling priorities: do not reference control loop #105278
Automated cherry pick of #102292: Local PV e2e: fix leaked local volumes #103349
Automated cherry pick of #104467: fix 104329: check for headless before trying to release #104973
Automated cherry pick of #104572: fix detach disk issue on deleting node #104898
Automated cherry pick of #105388: Copy VolumeSnapshotContent annotations in snapshottable.go #105497
Revert 102925: Fix Node Resources plugins score when there are pods with no requests #105238
release 1.21: metrics grabbing #104328
Automated cherry pick of #101047: Only use dualstack if the node and config supports it #103783
Automated cherry pick of #104969: Propagate conversion errors #104989
Automated cherry pick of #104634: storege e2etest: Delete restored PVC/Pod in snapshottable #105153
v1.21: Fix test flake in old svc registry #105110
Automated cherry pick of #100125: ‘New’ Event namespace validate failed #105088
Automated cherry pick of #104833 (1.21): Refine locking in API Priority and Fairness config controller #105050
Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050
Bug 1994655: openshift-apiserver should not set Available=False APIServicesAvailable on update #955
Bug 2008403: Rebase v1.21.5 #981
Update to go1.16.8 #104906
Automated cherry pick of #104369: Fix storage class setup in regional_pd.go #104537
Backport 104410 to release-1.21 #104534
Automated cherry pick of #104314: legacy-cloud-providers: aws: Add support for consuming web #104870
Automated cherry pick of #104845: e2e iperf2 change threshold to 10MBps = 80 Mbps #104865
Automated cherry pick of #103532: Service: Fix semantics for Update wrt allocations #104673
Automated cherry pick of #103050: Fix NodeAuthenticator tests in dual stack #104840
Automated cherry pick of #100720: Fix buckets initialization #104514
Automated cherry pick of #104384: fix: skip case sensitivity when checking Azure NSG rules #104447
Automated cherry pick of #104279: Copy golang license to staging copies #104311
Automated cherry pick of #104703: Fix the key missing issue for structured log #104719
bump runc to 1.0.2 #104530
Automated cherry pick of #104604: Don’t prematurely close reflectors in case of slow #104616
Automated cherry pick of #103958: Set idle and readheader timeouts #103989
Automated cherry pick of #104009: delete stale UDP conntrack entries for loadbalancer IPs #104151
Automated cherry pick of #104253: Pass additional flags to subpath mount to avoid flakes in #104347
Bug 2011460: UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005
Bug 1995714: UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #895
Bug 1994457: Update to kubernetes 1.21.4 #888
Automated cherry pick of #102083: fix: delete non existing disk issue #102163
Automated cherry pick of #104182: Avoid spurious calls to update/delete validation #104208
Update to go1.16.7 #104201
Automated cherry pick of #102576: kubelet: do not call RemoveAll on volumes directory for #103826
Automated cherry pick of #103284: Fix the code is leaking the defaulting between unrelated pod #103676
Automated cherry pick of #103160: Remove extra zone test #103405
Automated cherry pick of #103019: Fix frameworkImpl.extenders being not set #103031
Automated cherry pick of #101611: let objects without metadata pass through the managedFields #101649
Automated cherry pick of #104135: Update configure-helper.sh #104179
Automated cherry pick of #103794: feat: Provide IPv6 support for internal load balancer #104028
Automated cherry pick of #104161 upstream release 1.21 #104190
Automated cherry pick of #103997: Fix: ignore not a VMSS error for VMAS nodes in #104029
Automated cherry pick of #103937: Fix disruptive subPath test failures #104044
Automated cherry pick of #102539: Fix closing of decorated watcher channel on timeout #102541
Automated cherry pick of #102928: Simplify use of the fake dynamic client #103614
Automated cherry pick of #103895: Update to using apiserver-network-proxy v1.22 #103931
Automated cherry pick of #100637: storage e2e: automate hostpath YAML updates, hostpath #102212: Update pd csi driver images to use v1 images (CSINode, #103920
Automated cherry pick of #103831: disable aufs module #103927
cherry-pick #100353: strip prefix ‘v’ in coredns version if exists #102905
Automated cherry pick of #103823: Make CSR cleaner tolerate objects with invalid #103948
Backport fix for flaky ESIPP test to 1.21 #103492
Automated cherry pick of #103126 upstream release 1.21: Updated to use konnectivity client v0.0.21, and implemented placehold… #103699
Cherry pick of #100110: Cherry pick #537 from cloud provider azure: Refresh VM cache when node is not found and #102935: fix: cleanup outdated routes #102983
Cherry pick of #103470: fix: return empty VMAS name if using standalone VM #103599
Automated cherry pick of #103733 upstream release 1.21 #103734
Automated cherry pick of #101118 upstream release 1.21 #103712
Automated cherry pick of #103235: Update debian-base image to buster-v1.8.0 #103488
Update to go1.16.6 #103670
Automated cherry pick of #103138: Loadbalancer IngressIP policy should be configured as non-DSR #103140
Automated cherry pick of #103133 on 1.21: switch scheduler to generate the merge patch on pod status instead of the full pod #103279
Automated cherry pick of #99680: fix error of setting negative value for containerLogMaxSize #102389
Manual cherry pick of #103318: Bump SMD to v4.1.2 to pick up #102749 fix #103319
Cherry pick of #102516: serviceOwnsFrontendIP shouldn’t report error when the public IP doesn’t match #102548
Automated cherry pick of #102892: Do not throw error when we can’t get canonical path #102969
Automated cherry pick of #102925: Fix Node Resources plugins score when there are pods with no #102994
Automated cherry pick of #102584: Fix race in attachdetach tests #103051
Automated cherry pick of #102845: Remove error wrap from logs #102852
Automated cherry pick of #101592: chunk target operatation for aws targetGroup #101812
Automated cherry pick of #102673: feat: remove ephemeral-storage etcd requirement #102705
Automated cherry pick of #102788: client-go: reduce log level of reflector again #102800
Update to go1.16.5 #102739
Automated cherry pick of #102683: endpointslicemirroring controller mirror address status #102702
Automated cherry pick of #100948: Avoid caching the VMSS instances whose network profile is nil #101825
Cherry pick of #101752: fix: not tagging static public IP #101819
Automated cherry pick of #102498: sched: fix a bug that a preemptor pod exists as a phantom #102667
Automated cherry pick of #102306: Return UnschedulableAndUnresolvable instead of Error when #102514
(scheduler e2e) Create balanced pods in parallel #102487
Automated cherry pick of #102005: Azure: avoid setting cached Sku when updating VMSS and VMSS #102119
Automated cherry pick of #101443: Add missing clientset to EBS storage e2e test #101956
Automated cherry pick of #101857: fixed wrong warning in kube-proxy regarding topology aware #101939
Automated cherry pick of #101615: fix removing pods from podTopologyHints mapping #101892
Cherry pick of #101595: Update cos-gpu-installer image #101890
Cherry pick of #101739: fix: avoid nil-pointer panic when checking the frontend IP configuration #101885
Automated cherry pick of #101652: Add jitter to lease controller #101863
Automated cherry pick of #100326: Fix watchForLockfileContention memory leak #101795
Automated cherry pick of #102176: Fix VolumeAttachment garbage collection for migrated PVs #102456
Revert “Cleanup portforward streams after their usage” [1.21] #102587
Automated cherry pick of #102502: use subpath for coredns only for default repository #102506
Automated cherry pick of #102213: Upgrade konnectivity-client for GRPC connection fixes #102273
Automated cherry pick of #102157: kubeadm: remove e2e test for ClusterStatus #102358
Automated cherry pick of #102377: Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml #102379
Automated cherry pick of #102302: Update debian-iptables to buster-v1.6.1 #102340
Automated cherry pick of #102027: Remove unnecessary quotes from get-kube scripts #102042
Automated cherry pick of #102105: Respect annotation size limit for SSA last-applied. #102184
Automated cherry pick of #102224: Fix expired unit test certs #102225
Automated cherry pick of #102147: vendor: bump runc to rc95 #102196
Automated cherry pick of #101358: Ref counting is only applicable to Remote endpoints #102001
Automated cherry pick of #101737: Use CSI driver to determine unique name for migrated in-tree #101805
Automated cherry pick of #101950: Make watch order conformance test reliable #101980
Bug 1993754: UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… #940
Bug 1998391: UPSTREAM: 104530: [1.21] bump runc to 1.0.2 #912
Full changelog

insights-operator

Bug 2033546: Gather all CostManagementMericsConfig definitions. (#525) (#569) #525
Update OWNERS (#543) #543
Bug 2027720: gather webhook configurations (#508) (#560) #508
Bug 2026646: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516
Bug 2021572: Anonymize identity provider attributes in the (#520) (#527) (#541) #520
Bug 2020601: Anonymize the ImageRegistry storage information also in status (#536) #536
obfuscation ovn clusters bug (#523) #523
Bug TBD: Gather installed PSP names (#489) (#490) #489
Full changelog

ironic

Bug 2023765: Compare IPs using the short form of IPv6 address #233
Bug 2017413: [4.8] fix Image provisioning fails with file name too long #229
Bug 2025755: Enable vMedia provisioning of SuperMicro X11/X12 #237
Bug 2003035: Sync sushy to include the latest bugfixes for 4.8 #214
Bug 1991979: [4.8] Sync image with ironic #206
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
Full changelog

ironic-inspector

Bug 2023765: For inspector, compare IPs using the short form of IPv6 address #71
Full changelog

ironic-machine-os-downloader

Bug 2005805: Clear proxy env variables if go would have #72
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2058750: [release-4.8] 2022-02-15 Security Advisory #1408
Bug 2055911: bump openshift-sync to 1.0.53 #1392
Bug 2044940: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1370
Bug 2038960: bump sync plugin to 1.0.52 #1362
Bug 2037348: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1360
Bug 2020614: Update Jenkins and plugins per 2021-11 advisory #1347
Bug 2008114: Upgrade Jenkins to 2.289.3 (and related fixes) #1324
Full changelog

k8s-prometheus-adapter

Bug 2002281: 4.8: pkg/resourceprovider: guard from negative metrics #55
Full changelog

kube-proxy, sdn

Remove some binaries that accidentally got committed #398
Bug 2027397: [EgressIP] move ct(commit) action from OVS group to flow #377
Bug 2014166: Remove locking from EgressIPTracker.Ping #362
Bug 2002290: [4.8] proxy: don’t re-check every userspace proxy rule on every change #347
Bug 1987239: when assigning and releasing egressIP try more than once before failing #326
Full changelog

kuryr-cni, kuryr-controller

Bug 2037745: Improve retrieval of Trunks info #621
Bug 2028307: [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN #607
Bug 2028274: Ensure DOWN subports are cleaned up #606
Bug 2022722: Make completed Pods Ports reusable #600
Bug 2018232: Update TOX_CONSTRAINTS_FILE for stable/xena #587
Bug 1995013: Remove ep_slices from klb on endpoint delete event #550
Full changelog

machine-api-operator

Bug 2048496: Fix user-agent in vCenter sessions list #984
Bug 2027896: [release-4.8] Add support for Azure Marketplace Images #970
Bug 2026562: MaxUnhealthy should not be a string type #962
Bug 2022838: GCP CI runs are complaining about APIs not being enabled #953
Bug 1999585: [release-4.8] add alert for machine with long deletion phase #908
Bug 2000038: Respect MaxUnhealthy limit for external remediation #910
Bug 1993117: Make sure nodes don’t have attached volumes before vm deletion #903
Full changelog

machine-config-operator

Bug 2062655: Improvements for configure-ovs script #3004
Bug 2025396: annotate rendered config with OCP version #2972
Bug 2059330: ovs-configuration: use lower than NM default ethernet route metric #2974
Bug 2058789: Prepend to search domains instead of replacing #2970
Bug 2028854: Backport of SystemMemoryExceedsReservation alert rule #2956
Bug 2032996: fixes 1 to 1 containerruntime config mapping #2877
Bug 2053720: Avoid dynamically allocated port range for haproxy #2951
Bug 2028025: [Release 4.8] daemon: make cordon/uncordon more robust and better logging #2853
Bug 2017493: configure-ovs: Persist addr-gen-mode for ipv6 connections #2810
Bug 2021073: [ipi onprem] cherry pick Keepalived default ingress scripts fixes #2826
Bug 2026085: Send WARN message to stderr #2836
Bug 2024511: [release-4.8] [on-prem] Manual backporting of keepalived arp retries #2831
Bug 2016275: [on-prem] Set coredns bufsize to 512 #2807
Bug 2011083: templates: Silence audit events from container infra by default #2793
Bug 1985736: [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer #2692
Bug 2000958: fixes 1 to 1 kubelet config mapping #2753
Bug 1999531: Set timeoutSeconds for keepalived liveness probe #2741
Bug 2004122: Set ovs syslog level to info #2762
Bug 1973873: match tlsSecurityProfile doc with kubelet.conf file #2628
Bug 2000500: bump SystemMemoryExceedsReservation alert threshold to 95% #2748
Bug 1976110: configure-ovs: fix nondeterministic master in slave profiles #2644
Bug 1985735: [ON-PREM] HAProxy - enable listening sockets retrieval from old processes #2691
Full changelog

mdns-publisher

Bug 1988145: Update zeroconf vendoring #35
Full changelog

multus-whereabouts-ipam-cni

Bug 2028966: Whereabouts should reconcile IP addresses [backport 4.8] #78
ip-reconciler: do not reconcile pods in Pending phase #166
ip-reconciler: Add all non default interfaces to Pod IP list #147
Add label app=whereabouts to ip-reconciler pod template #150
Configurable sleep_for_race parameter #161
e2e tests: fix currently broken setup on kind clusters #156
ip-reconciler: remove kubeconfig from k8s client #159
Fix reconciler spec #158
Use k8snetworkplumbingwg repo instead of dougbtv in sources #123
build, ip reconciler: have configurable logging #155
build: enable e2e testing for podman #154
Fix test to include error when IP pool total doesn’t equal assigned WB pod IPs #152
added sleep-for-race option for IPAM #151
Bug 2009497: Release on cancel, sync for 4.8 #70
Add E2E test cases and execute with GH workflow #148
Add total Add/Del timeout #142
Release lease lock when LE ends #145
propagate context timeout error #143
Upload whereabouts binary as release asset #149
Add support for CNI version #135
readme: fix yaml paths #134
Bug 1990113: Syncs with upstream for leader election [backport 4.8] #63
Bump k8s api version #126
fix: Skip default network in ip reconciler #128
IP ranges cleanup #118
Cherry pick overlapping ranges to master #120
build: vendor leader election dependencies #124
Add leader election #113
build: update openshift build image to golang 1.15 #121
Updates image push on release to refer to correct dockerfile location #122
ippools schema: add podref #116
Remove bigint code to fix starts-with-zero-ipv6-problem #89
Fix github actions #93
Change CI pipeline from travis CI to github actions #92
Adds a login so we can pull images from the registry #91
README incorrectly stated Whereabouts requires three parameters #90
updated readme with instructions on how to install using helm3 #82
The first example can drop the optional parameters #81
Logic for IPv6 assignment should not omit the broadcast addresses #77
Reduces required parameters by introducing flatfile configuration by default #69
Removes error when deallocating IP errors out, instead just warns. #74
Includes fix for excluding IPv6 ranges as well as unit test #73
Adds the missing error/log/warn methods to the install-cni.sh #67
whereabouts.kubeconfig wrong in IPv6 only env #47
Add a more meaningful error for invalid CIDR #66
Fixing wrong DNS-1123 name for some IPv6 addresses #61
Specifiy image repo URL explicitly #56
Change error message #54
Full changelog

must-gather

Bug 2057345: Fix ovn-nbctl commands for ipv6 #287
Full changelog

oauth-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #74
Full changelog

openshift-apiserver

Bug 2043808: IPs with leading zeros are still valid in the apiserver #280
Bug 2053223: Fix importing images that have dots in their namespace #283
Bug 2042732: Make OriginImageMutators aware of origin objects #271
Bug 2020644: Image policy should mutate DeploymentConfigs #259
Full changelog

openshift-controller-manager

Bug 2006793: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #206
Full changelog

openstack-cinder-csi-driver-operator

Bug 2049088: Explicitly set default value for ReclaimPolicy #71
Full changelog

openstack-machine-controllers

Bug 2064634: Ensure subnets belong to the queried network #223
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2030489: Remove oudated subscription update logic to improve resolution delay #222
Bug 1996162: Check for pruned bundles on add in replaces mode #165
Bug 1986476: resolver: remove legacy support for fallback parsing of CSVs #140
Full changelog

operator-marketplace

Bug 1998938: Use client-go’s leader election implementation #421
Full changelog

ovirt-csi-driver

Bug 2013945: pvc stuck on pending status when using preallocated storage domain #89
Full changelog

ovirt-csi-driver-operator

Bug 2062745: Increase timeouts for CSI driver #90
Full changelog

ovirt-machine-controllers

Bug 2046356: detach non-bootable disks before removing the VM #127
Full changelog

ovn-kubernetes

Bug 2062842: [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #1009
Bug 2065303: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #998
Bug 2070521: egressgw: fix deadlock due to behavior of RWLock #1018
Bug 2063836: backport 2052975 to 4.8 #997
Bug 2068509: EgressGW: only return unique elements from getRouteInfosForGateway() #1011
Bug 2055379: [release-4.8] fixing network policy #4
Bug 2065311: [release-4.8] Network Policy fixes #999
Bug 2057557: Create iptables NAT rules also for loadbalancer services #967
Bug 2058679: Bumps ovn2.13-20.12.0-195.el8fdp #979
[release 4.8] Update project owners #992
Bug 2057931: Fix podHandlerCache key #969
Bug 2057152: Fix egress IP allocator sync #965
Bug 2053611: Lock the reassignment procedure during node deletion to avoid races #970
Bug 2054225: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #957
Bug 2056975: Don’t return err when annotation cannot be unmarshalled #963
Bug 2052966: [release-4.8] bump ovn to 20.12.0-193 #949
Bug 2043757: Fix node connectivity to service backed by egress IP pods #922
Bug 2042516: Fixes for shared to local gateway migration #916
Bug 2037884: [4.8-backport] Fix nepol statefulset 4.8 #894
Bug 2041767: Fix pod handlers and pod IP parsing for egress IP #912
Bug 2039279: filter out KubeAPIAuth when logging CNI requests #897
Bug 2021221: Add ovn-controller logical flow cache options #890
Bug 2030465: Make config parsing more resilient for unknown fields #868
Bug 2027873: [4.8z] Fixes race between node handler and pod sync #858
Bug 2027487: [4.8z] addressManager should not call sync() from ErrorCallback #853
Bug 2022043: [4.8z] Avoid stale annotations by re-subscribing to netlink #829
Bug 2014332: [4.8z] Scale fixes for pods/exgws #798
Bug 2011391: [4.8] bump OVN to 20.12.0-183.el8fdp #783
Bug 1986708: Add routes for pod: fail only after checking all the gw addresses / ips #774
Bug 2005480: [4.8z] Remove waiting for namespace and namespace lock contention #760
[release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses #661
Bug 2004336: Ensure host interfaces are deleted by CNI #745
Bug 2005464: [4.8z] Fixes skipping pods accidentally in retry #758
Bug 2005357: [4.8z] Fixes misuse of pod annotations during update event #753
Bug 1996739: Fix ensurePod to call addPodExternalGW only for annotation updates #752
Bug 2004488: panic after EgressFirewall deletion and DNS record expiration #749
Bug 2004269: Sync ECMP routes on startup and fixes stale ECMP routes #743
Bug 1999638: Fix duplicate incrementing of subnet allocation metric #700
Bug 1996729: NetworkPolicy: bulk-add pods to new policies (or on restart) #678
Bug 2000214: Fix GetPortAddresses for HBO #711
Bug 2001641: egressfirewall not set after upgrade #722
Bug 1996201: Fixes cases of timed out while waiting for OVS port binding #686
Bug 2001542: fix reserve joinSwitch LRP IPs #720
Bug 2001363: [4.8z] Ensure client handling of canceled/dropped OVSDB monitor #718
Full changelog

service-ca-operator

Updating ose-service-ca-operator images to be consistent with ART #177
Update go version to 1.16 #179
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #374
Full changelog

tests

Bug 1999288: [release-4.8]: bump openshift/kubernetes to the latest #26886
Bug 2038876: [release-4.8] test: skip tests that won’t work behind a proxy automatically #26733
Bug 1984275: Add renamed Prometheus test into skipped disconnected list #26344
Bug 2033426: test/e2e/upgrade/adminack: Poll gates for duration of update #26704
Bug 2033379: [release-4.8] remove perma-failing prometheus upgrade invariant #26698
Bug 2027262: Create new-project without updating kubeconfig #26645
Bug 2028815: Skipping Django Test until bug is fixed #26665
Bug 2028021: Bump update time limit 4.8 #26657
Bug 1929650: Increase OVN upgrade timeout by 15m #26654
Bug 2025724: Add admin ack Upgradeable condition gate test #26635
Bug 2020644: Add more tests for image policy #26584
Bug 2019519: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26562
fix: add proxy support to OAuthServer tests #26539
Bug 2008114: Add role label to jenkins imagestream #26503
Bug 2002552: Retry kubeconfig checks, when kube-apiserver is temporarily unavailable #26458
Bug 1989402: Add tests required internet into Skipped:Disconnected list #26369
Bug 1986259: Enable TestEndpointAdmission test only for OpenShift SDN #26351
Full changelog

vsphere-csi-driver-operator

Bug 2021620: Close connection to vCenter API #51
Full changelog

vsphere-problem-detector

Bug 2036967: Deferred logout after checks are run #68
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github