4.9.18

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.18-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.8.24

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.9.0

Created: 2022-01-26 14:50:25 +0000 UTC

Image Digest: sha256:b9ede044950f73730f00415a6fe8eb1b5afac34def872292fd0f9392c9b483f1

Release 4.9.18 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-01-24-212243

Components

Kubernetes upgraded from 1.22.1 to 1.22.3
Red Hat Enterprise Linux CoreOS upgraded from 49.84.202110081407-0 to 49.84.202201212103-0 (diff)

Rebuilt images without code change

aws-cloud-controller-manager git 18d82a6d sha256:c3031018efe7c2e5489227700e31242402aeae9d4d00f7a304ab4d7a0035cccb
aws-ebs-csi-driver git 26f1b6f4 sha256:c64a6e1a0ff0825e6b8809e58d2e8879ced05a8821b7301c023e1e3a1abec7b3
aws-ebs-csi-driver-operator git e8e2cb36 sha256:0ceab74dbb279d3dd684a2bbd66e995bd6c6e258d4ad1a2b89bcdedf1f8bbd62
azure-cloud-controller-manager git c02678d8 sha256:7ac79a35c8bcc2794bccdba2fd1a9869a9cafcc7678cf7648eb1f33d51bd8e28
azure-cloud-node-manager git c02678d8 sha256:54cfaab07586820c1a4184313b47b7a1a87f65df79e97764774aded37d11d91b
azure-disk-csi-driver git ade73731 sha256:05da0232cf98ecb96c2013f89f25135d0d47a2097d1d416677274ee974bbc1f5
baremetal-machine-controllers git 1c81cab6 sha256:14ce47bd3db5993077543a8251cf79a45e4c29f9a370df0380f8190781c77fc1
cluster-autoscaler git 68fe93aa sha256:4334cf1861a072f6edd078965a5e065fe54c09e5d7198e7d3db4d0699e28cd38
cluster-bootstrap git 7e074a7d sha256:65f6ef18c51fb26e77873089008ae8535bc3e742dbf03223d8a9f13b58566379
cluster-csi-snapshot-controller-operator git c750d4b4 sha256:993765d1f63d39be8e026309bab4b9da4d3502b0267098284227c460ab2de094
cluster-openshift-controller-manager-operator git 3015cb84 sha256:6e79258d69c6c5d7f67e102f49603e3378c6644dee6e3a2c74f80ad541e87f07
cluster-policy-controller git 8fbffaf2 sha256:5be37619ac8dffb97ad4744d52a25de81238b78d259ca0e23af2800e849d63e4
cluster-storage-operator git 2e76e02c sha256:c90d7887cb21533ab4e34cbec2aaa9386140773501bb3e941d09bd565e8d186d
cluster-update-keys git 3e200433 sha256:aaaec3417207330eaeb203f459bdd819c27bac1956f1d9f0684f42dc5a3807e6
configmap-reloader git b84b5bf9 sha256:532d76c579cb24e1cb6169356fc6306460d88b0f293039a6dec1f2025cbfaaa5
container-networking-plugins git 44a49134 sha256:8fad62d379f28b91b6502478adba8d977d2238b6e9659e6a0ef455ac9c9063a7
coredns git 3cb11c07 sha256:db09cc47fa9beecbe25d5b11302e060b7a7290306181826d7995da5749a7c9aa
csi-driver-manila git ddbc0e4f sha256:13dddb42d2197fce72adc0a8f5bdd57f1281e031c0f3f34f8d99b214ade139ee
csi-driver-manila-operator git fd2d838d sha256:7a80018296dcd8143820be82abac347cdfcdf2fd5603a567d4f64dc0590bed0f
csi-driver-nfs git 0e0c1739 sha256:d02c8c1581cc457c3a526d84b2e002b69d60e2af9d21b144159ffed684f6d461
csi-external-attacher git 0a1737c4 sha256:856c5235403b8747121196d3ca30ce1be470d9117dbe60cc309a9e585627534e
csi-external-provisioner git 7736e729 sha256:c4d5cd36e85af885a5e15641abb09822df2ef7f2c010e73ddc36ebfbf305acbf
csi-external-resizer git dad46d03 sha256:a09fce62d4cb1058634d35b60c5da08fbefc83b9258bc39bbbc379c2dc871f44
csi-external-snapshotter git 52ab8938 sha256:091ca242d89ee0b37fe978cbe3c7d87a63e8310439d75e80610947e2b0426571
csi-livenessprobe git c13c3a5f sha256:54bc67dee75e6dda6afcb6710b90b54eacfb54f0047e412e397ce678c5e18e30
csi-node-driver-registrar git 3e02b07e sha256:16118a7c84c2dcdbed5682180d2c8a03464878deaba9c29ae3f7a3dab61bf02a
csi-snapshot-controller git 52ab8938 sha256:ebac92e8cdd166d3454ff888d00a0fab45df94f9526a279730d5d562b04169d4
csi-snapshot-validation-webhook git 52ab8938 sha256:336f684991bc4b7f35594fee4e5bd78291420e301513d23e998d69f242c410bd
docker-registry git 50d54ae3 sha256:3b019279c06a0289b310840cfefe35afe616ee9519be9d9c85faf705d13723d5
egress-router-cni git 099b7569 sha256:4813806b2d99a8d9b51c34ccc2e6ee7fcdf82463dbaf5743bb80a4af007954e4
gcp-machine-controllers git d92b0884 sha256:b748cc091a42b2e78d1d65c04d5ea19f5766b3d993f842b9c24e244ad863411c
gcp-pd-csi-driver git 48d49f7f sha256:a3b5494645432f96bf92adf6db73dd49b811f972624fd634840e3e2724520693
grafana git 6130ba8b sha256:33a67bce77902a4ab1c32e1bc9c00fd3b17eb0a465eea5a9f8f35a92eea80b16
haproxy-router git 2d1e1f4b sha256:c899a163fb35f119b7135a60e1271521851bbbb1a85ae319c9cee617cbb2e0fb
ironic-inspector git 9474b758 sha256:2ca0eac586a91aa35fb1b4982fdcfb2c1fbe3dd0fbe32cc238f8dfa08d2bffb5
ironic-ipa-downloader git 6e9af39e sha256:0d741e590eee37fd9708609dde99c68f0b8fba9d0d5cee172227037b7446e3c7
ironic-static-ip-manager git d13dccb8 sha256:0310a7b9ec788788a2a6324475add611b5c5304511fe27e7444500fdefbc6ef0
k8s-prometheus-adapter git adfdd41d sha256:bf4ee12adfd896adb24959d5ca64f046a99a2b9c5de09fe08963a68773920916
keepalived-ipfailover git f93eca83 sha256:00bfbe7800a9c803d13e666122a7b1f52bea6e53b0fb2352d8566d1e75759708
kube-rbac-proxy git 58e09297 sha256:69d0c9591ea5efc8719b3c668f1e0754ac2043aaed4127dfd0bd41632dbdf1ef
kube-state-metrics git 6e41dbd4 sha256:cedad98a9e6faa12405487d0bea5f8d5a3b12f59e96e95eddeced8b74b9aa935
kube-storage-version-migrator git 901a6d22 sha256:b324b5011a4dc029e7c382c82d08997699806f70dc74df82975ccf8ceb487fd3
libvirt-machine-controllers git 59ae2edf sha256:c60b8ebb4987dba91e4737ae6785437ac803955f1ebb4bf821ac9f722089f516
machine-os-content sha256:7ec42dd76ab742a9c7a4044d9033c0f59fa9c7569348f51af4e50134a0dde0cf
mdns-publisher git 266597b3 sha256:9aeabb9327d08aff915cefa6a73f744fc008bb3b081024bb6a2da0a9c1ebe803
multus-admission-controller git 3c28a57a sha256:94d2d3a9653041529b60b9c914042b1204e868977aaaf6d402c4af0d33ba35a2
multus-networkpolicy git fd12fede sha256:99837d6ee14594e4a151600ccbb003fde688f06983de36948a8b1f030efc71d6
multus-route-override-cni git 707dd380 sha256:618a46a2b07207bf50c38b21da0f964645ce7a15e0b9e06501ebe1d31d6fb476
must-gather git d4b3f385 sha256:5a9e37c04aaeebe358d66b45463e42a44a1093f5f6478d0e752b867e4cd26d77
network-metrics-daemon git 9fd61030 sha256:472800f14fa561cf2528012c2b05c13b3f58e216544a19a314e221f171bedfe1
network-tools git ed0b846c sha256:f1469135b45b34de7618eb802507cb87f979640630d05e579f75b223517477ee
oauth-apiserver git 6e0f9219 sha256:4b60e18cb6b8fe1e989efec2d4abfee897b23337ff2488b3dd72a6f77bf2acab
oauth-proxy git 9ea1ebc8 sha256:2b008ad6cc682de5064f78ac83d563e58f5560ceaf6669ae7dac49384b57b8bc
openshift-state-metrics git 689af8b8 sha256:a60c8250c38845495711459f0b657eebf0e8a29f4de3903a96cededf7de40d28
openstack-cinder-csi-driver git ddbc0e4f sha256:fc7f18008b3f79f9067b59802e7861b43f3a4dfb152c0037f0c31e2ede501804
openstack-cloud-controller-manager git ddbc0e4f sha256:661d9175497c5db10c1f835c3adca8f563853fe4db746fdb3dcbdb94ebda0650
openstack-machine-controllers git a7442bb1 sha256:774375958c15a76e7dfd2e042111ab09dc5ee34cf5123d80611da74d9437fefb
prometheus git 3197fa71 sha256:4b4d1370d6e9f8b92e01d6959c3cbd99521091dfe599397a90ab38717681b567
prometheus-alertmanager git 579e3c68 sha256:ef63ee3ab09e416195c5f08d94d8d8bf70842298dec5e49f9d9eb7cdbe55952e
prometheus-node-exporter git 1ab97f35 sha256:59899a8ae5194596195cc7bb4e3f16460aa941f79e3b28bb4e918e3d1ce312e0
service-ca-operator git ab44f586 sha256:b0a219df9facdbfb5275e8d82b60a76845bb40dc9914b349c9ac157706174916
telemeter git 03842e05 sha256:61371d7b65e6dfe5cdfc9ad0bb3921bf544996e6b7f280643bdee62b4971723d
thanos git e0fa82ca sha256:ede6c1d3b11b1e659d3051bec561a27ab76a48040db7af008088e23e4a22b5fd
vsphere-csi-driver git 4ece3d1b sha256:69dce23fe0e4a4bdca9826aae3b40ce956c46e307e31c895add36ab73107439f
vsphere-csi-driver-syncer git 4ece3d1b sha256:b32ccd8cc776591b2d6589d5f2885d7d340cc0a38435c89acf3a41b7d00ff683

aws-machine-controllers

Bug 2029993: Prevent Machine from being considered provisioned until it exists in AWS #431
Bug 2015605: do not requeue if the machine has been updated #425
Full changelog

aws-pod-identity-webhook

Bug 2026379: update go.mod for go1.16 #147
Full changelog

azure-disk-csi-driver-operator

Bug 2029571: Add custom CA bundle support #39
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2031606: aws: get ips for all control plane instances for bootstrap gather #5474
Bug 2022172: Relax vcenter hostname check #5372
Bug 2029409: Update defaultReleaseImageOriginal to 4.9 #5450
Bug 2028611: vendor: update terraform-provider-google for rate limit fix #5445
Bug 2027329: Handle unset default machine pool #5424
Bug 2022616: Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5380
Bug 2017985: Set AWS Bootstrap Type == Master #5337
Bug 2016267: Add ingress rules to master SG for compact clusters #5320
Bug 2004052: OpenStack: Fix links in SR-IOV workers doc #5212
Bug 2009787: Fix RAM validation for openstack flavors #5262
Bug 2004569: Fix router clean up upon cluster destroy #5220
Bug 2015811: bump oVirt terraform provider version which fix “Disk is locked” bug #5315
Full changelog

baremetal-operator

Bug 2009849: Avoid logging BMC password when creds change #183
Bug 2009850: Fix fallback for ironic drivers that don’t support soft power off #184
Full changelog

baremetal-runtimecfg

Bug 2025691: retrieve only single type addresses for Keepalived ingress #160
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2038930: properly handle –dry-run=server #1016
Full changelog

cloud-credential-operator

Bug 2024751: pod-identity-webhook starts without tls #423
Bug 2015977: Stop putting CCO in degraded state when stale credentials are found #404
Bug 1992563: update alerts with summary and descriptions #397
Bug 2024751: pod-identity-webhook starts without tls #424
Bug 2015989: Check for aws status in infra platform status field before client setup #405
Full changelog

cluster-authentication-operator

golang 1.16 bump: Updating ose-cluster-authentication-operator images to be consistent with ART #526
Full changelog

cluster-autoscaler-operator

Bug 2025582: Change ClusterAutoscalerUnschedulablePods severity to info #230
Full changelog

cluster-baremetal-operator

Bug 2012684: add a new field “ProvisioningMacAddresses” to the provisioning CRD #207
Full changelog

cluster-cloud-controller-manager-operator

Bug 2034504: Ensure old deployment is deleted before new deployment creation #162
Bug 2015503: User CA bundle sync controller #138
Full changelog

cluster-config-operator

Bug 2015306: bump api #224
Full changelog

cluster-dns-operator

Bug 2002621: serviceChanged: Fix internalTrafficPolicy #295
Full changelog

cluster-etcd-operator

Bug 2008175: pkg/operator/metriccontroller: Fix query #686
Bug 2009890: pkg/operator/upgradebackupcontroller: fix backup dir name in status condition #683
Bug 2007454: pkg/cmd/render: disallow placeholder IPs #667
Bug 2003540: bump library-go #663
Bug 2009016: Suppress noisy logs and improve client errors #679
Full changelog

cluster-image-registry-operator

Bug 2023219: Wait until cluster operators recover before proceeding #731
Bug 2005049: Avoid disruptions #719
Full changelog

cluster-ingress-operator

Bug 2014938: Use fake dns provider with external cp topology only in IBM Cloud case #666
Bug 2014711: Fix for Azure dns privateZone degrade e2e test #673
Bug 2015829: Change default balancing algorithm to “leastconn” #667
Full changelog

cluster-kube-apiserver-operator

Bug 2037274: starter: include metrics controller #1274
Bug 2029504: encryption-controller: sync secrets conditionally #1268
Bug 2014615: Exempt metrics scrapes from APF. #1244
Bug 2012346: prometheus-k8s-0 cpu usage keeps increasing for the first 3 days #1242
Bug 2003540: bump library-go #1232
Full changelog

cluster-kube-controller-manager-operator

Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #537
Bug 2003540: bump library-go #564
Full changelog

cluster-kube-scheduler-operator

Bug 2037665: Remove policy upgradeable when policy field cleared #402
Bug 2037665: Set upgradeable=false if using Policy field #400
Bug 2003540: bump library-go #370
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 2022528: Extensive number of requests from storage version operator in cluster #77
Bug 2016176: kube-storage-version-migrator constantly reporting type “Upgradeable” status Unknown #72
Full changelog

cluster-machine-approver

Bug 2031061: Replace certificates with generated certificates #147
Bug 2024216: Allow fallback to serving cert renewal accounting for egress IPs on SDN #141
Bug 2019754: Ensure pending CSR count is valid post approval #139
Full changelog

cluster-monitoring-operator

Bug 2021097: Set Upgradeable: false when HA workloads are incorrectly spread #1472
Bug 2018455: Keep container_fs_usage_bytes metric #1461
Bug 2015571: [4.9] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1457
Bug 2013617: Update KubePodCrashLooping alert #1448
Bug 2013148: jsonnet: Drop unnecessary kube-state-metrics alerts #1435
Bug 2011359: Backport Application Services metric to 4.9 release #1420
Bug 2011798: Prometheus when installed on the cluster shouldn’t have failing rules evaluation #1418
Bug 2008120: Adjust dropped cAdvisor metrics #1404
Bug 2012029: Allow namespace label in metric allow list #1422
Full changelog

cluster-network-operator

Bug 2034351: Whereabouts IP Reconciliaton [backport 4.9] #1264
Bug 2023423: Add ip6tables NOTRACK rules for udp/6081 #1229
Bug 2037499: Bump openshift/build-machinery-go #1270
Bug 2028961: [release-4.9] Set upgrade strategy on kube-proxy #1239
Bug 2014021: Use proxy to connect to OSP cloud #1201
Full changelog

cluster-node-tuning-operator

Bug 2017066: openshift profile: fix malformed patch #284
Bug 2013653: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #279
Full changelog

cluster-openshift-apiserver-operator

Bug 2029504: encryption-controller: sync secrets conditionally #487
Full changelog

cluster-samples-operator

Bug 2010136: Including Template in must-gather related objects. #401
Bug 2009722: acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #400
Full changelog

cluster-version-operator

Bug 2038275: *: Use –v=2 logging to drop client-side throttling noise #723
Bug 2028602: lib/resourcemerge/apps: Default Deployment replicas to one #702
Bug 2024588: Changing the ClusterNotUpgradeable alert to info #693
Bug 2022570: cvo: Compare manifest group in getOverrideForManifest #690
Bug 2015024: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #678
Full changelog

console

Bug 2036340: Fix secure route pre-filled issue in edit flow #10759
Bug 2027804: use namespace instead of useActivePerspective hooks to get the variables in Observe dashboard #10586
Bug 2027269: Add subject name selector field to SinkBinding form #10568
Bug 2027268: Optimize name validation regex for forms #10567
Bug 2019884: adds feature flag for all extension for knative plugin #10393
Bug 2038607: Fix that user settings ConfigMap is also created for users with restricted access #10799
Bug 2036115: add support for new labels for serverless function #10755
Bug 2013253: Fix to let the user create the application even if dockerfile is not detected #10216
Bug 2036859: Shift invalid devfile alert down #10766
Bug 2034183: Open export details page from the resource link on the topology sidepanel #10694
Bug 2033265: Fix an error to show Knative Services and Revisions also if the Service has no owner revision #10677
Bug 2029861: backport the change from #10394 to release 4.9 #10620
Bug 2029370: Trim the strings before localCompare #10611
Bug 2025799: Remove Tech preview badge for the triggers component for triggers GA … #10535
Bug 2044089: Update CRW operator name to fix failing e2e tests #10910
Bug 2040365: Check if ‘auths’ key when switching between create image secret subforms #10838
Bug 2034636: - RoleBindings tab doesn’t show correct rolebindings #10711
Bug 2037619: Could not filter out machine by using node name on machines page (temp fix) #10807
Bug 2040291: Prevent null references and “ResizeObserver loop limit exceeded” errors in IFrameMarkdownView #10116
Bug 2034829: cant delete VM with un-owned pvc attached #10719
Bug 2028286: Fix blank page error for Installed Operators #10596
Bug 2029378: Fix NodePort RDP bug #10612
Bug 2026243: Fixes add capacity for MCG standalone #10544
Bug 2025937: KMS resources not getting created for IBM FlashSystem storage #10540
Bug 2029297: Fix troubleshoot link for MON_DISK_LOW #10609
Bug 2026618: Add Dev Preview tag for IBM FlashSystem #10555
Bug 2026219: Fix Noobaa resources broken details pages #10543
Bug 2028535: Backing Store YAML tab on click displays a blank screen on UI #10603
Bug 2022446: Fix issue with standalone dashboards (4.9 backport) #10441
Bug 2022303: Fix creation of ibm storage system at backing storage step #10438
Bug 2022462: Set large width for modals with modal-lg class #10442
Bug 2020000: Fix resource metrics 403 errors for project admin users #10396
Bug 2021527: Fix ClusterOperators link #10417
Bug 2023285: #cloud-config is now added to yaml #10459
Bug 2016602: ODF tab is missing if user clicks on ‘Refresh web console’ #10295
Bug 2017722: Fix creation for BackingStore, BucketClass and NamespaceStore #10340
Bug 2016939: Block MCG deploymeny when no storage class found #10304
Bug 2017717: Use conditions for status in Storage System list page #10339
Bug 2018637: Pass pod toolbar filters to useListPageFilter #10366
Bug 2019494: Delete ssh service when vm is deleted #10385
Bug 2019736: PVC is deleted along with VM even with “Delete Disks” unchecked #10391
Bug 2010677: Update PatternFly/react-console #10258
Bug 2015134: Reveal the switch status of the button “Show default project” in code #10252
Bug 2014303: Fix wrong in-cluster hostname on the Service details page #10246
Bug 2013105: fixes imagestream from reference for alias to existing IS #10212
(4.9 Backport) Bug 2008142: Allow web terminal to be installed in any namespace #10135
Bug 2017484: Check for resource in ServiceBinding spec’s service reference #10327
Bug 2002905: Fix list page route for build configs #10043
Bug 1989798: Fix state bug to eliminate duplicates in dragged files #10131
Bug 2002006: Allow side nav borders to extend to left and right edges of yaml sidebar #10011
Bug 2014145: Failed to load RoleBindings list that will lead to ‘Role name’ is not able to be selected on Create RoleBinding page as well #10241
Bug 2011705: fix dev-catalog stuck in loading state #10198
Bug 2004075: Fix to show image-tag selector in s2i form and re-validate git url on git-type change #10067
Bug 2010160: Clicking on the perspective switcher shows a white page with loader #10169
Bug 2002856: Dont validate the install operator form when submitted #10041
Bug 2002600: Enable add capacity if osd size is not matching #10032
Bug 2008456: Fix to fetch ocs csv in external mode #10144
Bug 2003870: Fix state of volume mode dropdown #10062
Bug 2004567: Fix basic spring boot sample form crash #10076
Bug 2014095: Monitoring: Fix error message when Silences fail to load #10240
Bug 2013132: Overview tab is missing under Storage after successful deployment on UI #10214
Bug 2008499: Add monitoring and nodes label for external storage platforms #10146
Bug 2015558: Fix failing OLM test scenario #10267
Bug 2014048: Console update toast notification can appear multiple times #10239
Bug 2002697: Fix disks undefined on create local volume set step #10037
Bug 2012825: update the BindableService CRD changes to align with BindableKinds #10206
Bug 2010308: Fix create broker button in Add broker page #10172
Bug 2004241: Storage class name not passed in CR #10069
Bug 2002696: Fix links and texts for Storage link provided in Overview page. #10050
Bug 2013088: node page fail #10210
Full changelog

console-operator

Bug 2039681: Fix setting of custom cert for default route #624
Bug 2040275: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #626
Bug 2008142: Change web terminal subscription permissions from get to list #596
Bug 2016028: Correction/Changes in Quick Start Guides for ODF #609
Bug 2010681: Resync all controllers periodically #600
Bug 2002878: Remove SimpleHTTP ‘server’ response header value #587
Full changelog

docker-builder

Bug 2037776: Update containers/storage to address incorrect overlay options being set on rhel7 nodes #279
Bug 2022866: bump github.com/containers/buildah to v1.22.3 #272
Full changelog

driver-toolkit

Bug 2031854: Add e2e test to 4.9 branch #71
Full changelog

etcd

Bug 2016174: UPSTREAM: <carry>: server: Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync #99
Full changelog

gcp-pd-csi-driver-operator

Bug 2038191: Add custom CA bundle support #42
Full changelog

hyperkube, pod

Bug 2030697: UPSTREAM: <carry>: api request counts for current hour are incorrect #1088
Bug 2023452: UPSTREAM: 106382: defer close the rotated log open #1057
Bug 2024967: Fix subpath unmount error #1066
Bug 2021995: Read k8s version from hyperkube Dockerfile #1044
Bug 2022740: UPSTREAM: 106259: Don’t guess SELinux support on error #1053
Bug 2022281: Rebase v1.22.3 #1048
Bug 2023866: Fix patch 104847 #1061
Bug 2018442: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1033
Bug 2008827: Rebase v1.22.2 #985
Bug 2018516: 4.9: bump(github.com/openshift/*): make go.{mod,sum} point to 1.22.1 #1030
Bug 2006717: etcd-client starts retrying transient errors from the etcd cluster #974
Bug 2010225: UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps #986
Full changelog

insights-operator

Bug 2033540: Gather all CostManagementMericsConfig definitions. (#525) (#568) #525
Bug 2027637: gather webhook configurations (#508) (#559) #508
Bug 2026644: Gather all the container logs from relate namespaces of degraded clusteroperator (#553) #553
Bug 2017773: Anonymize identity provider attributes in the (#520) (#527) #520
Bug 2017759: Anonymize the ImageRegistry storage information also in (#507) (#526) #507
Bug 2005338: OCM controller - change type of the secret (#500) (#506) #500
Bug 2001823: Fix the error logic in the OCM controller & degrade only in HTTP error (#494) (#503) #494
Bug 2003893: ApiRequestCount conditional gathering (#492) (#496) #492
obfuscation ovn clusters bug (#522) #522
Full changelog

ironic

Bug 2023748: Compare IPs using the short form of IPv6 address #232
Bug 2025754: Enable vMedia provisioning of SuperMicro X11/X12 #238
Bug 2017412: [4.9] fix Image provisioning fails with file name too long #228
Bug 2012798: Ironic resumes clean before raid configuration job is actually completed #221
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image images to be consistent with ART #506
Full changelog

ironic-machine-os-downloader

Bug 2020546: Clear proxy env variables if go would have #68
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2038961: bump sync plugin to 1.0.52 #1363
Bug 2037346: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1359
Bug 2020615: Update Jenkins and plugins per 2021-11 advisory #1346
Full changelog

kube-proxy, sdn

Bug 2026302: [EgressIP] move ct(commit) action from OVS group to flow #375
Bug 2006290: Fix up event recorder usage (again) #357
Bug 2013707: Remove locking from EgressIPTracker.Ping #360
Full changelog

kuryr-cni, kuryr-controller

Bug 2022684: Improve retrieval of Trunks info #599
Bug 2023383: Do not start kuryr-daemon when worker_num <= 1 #602
Bug 2018129: Ensure KLB is updated #585
Bug 2023731: Ensure DOWN subports are cleaned up #604
Bug 2018148: Update TOX_CONSTRAINTS_FILE for stable/xena #586
Bug 2013017: Include port fix #578
Full changelog

machine-api-operator

Bug 2025697: [release-4.9]: Bump CAPZ API #965
Bug 2022813: GCP credentials reporting networksecurity.googleapis.com API disabled #952
Bug 2005242: MaxUnhealthy should not be a string type #919
Bug 2004953: Fix user-agent in vCenter sessions list #918
Full changelog

machine-config-operator

Bug 2027926: storage.conf: remove obsolete option override_kernel_check #2848
Bug 2026275: daemon: make cordon/uncordon more robust #2839
Bug 2022641: [release-4.9] Send WARN message to stderr #2785
Bug 2008210: configure-ovs: Persist addr-gen-mode for ipv6 connections #2775
Bug 2013164: [IPI ON-PREM] move Keepalived default ingress script to separate file #2798
Bug 2009210: [on-prem] Set coredns bufsize to 512 #2784
Bug 2011307: Periodically send gratuitous ARPs #2794
Full changelog

multus-cni

Bug 2017881: add handling of pod UIDs passed from runtime #111
Full changelog

multus-whereabouts-ipam-cni

Bug 2028964: Whereabouts should reconcile IP addresses [backport 4.9] #77
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #71
Bug 2009493: Release on cancel 4.9 #69
Updating ose-multus-whereabouts-ipam-cni-alt images to be consistent with ART #64
Full changelog

oauth-server

Bug 2037274: pkg/*: introduce x509_missing_san_total metric #95
Updating oauth-server images to be consistent with ART #85
Full changelog

openshift-apiserver

Bug 2040240: Make OriginImageMutators aware of origin objects #269
Bug 2018442: Image policy should mutate DeploymentConfigs #255
Bug 2006791: prevent high frequency logging for aborting build generation from image change trigger based build requests using the deprecated build config spec last image change trigger ID field #247
Full changelog

openshift-controller-manager

Bug 2006791: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #203
Full changelog

openstack-cinder-csi-driver-operator

Bug 2037080: relax health probes against Cinder API #64
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2024048: Remove outdated subscription update logic to improve resolution delay #215
Bug 2017434: Use arguments to configure pprof-secret #212
Bug 2015799: Introduce GRPC_PROXY EnvVar Support (#2364) #207
Full changelog

operator-marketplace

Bug 2023550: Revert “Start without defaults on ARM” #431
Full changelog

ovirt-csi-driver

Bug 2014845: Fix storage domain search string #91
Updating ose-ovirt-csi-driver images to be consistent with ART #79
Full changelog

ovirt-csi-driver-operator

Bug 2017245: Rearrange static files to prevent creation errors #74
Full changelog

ovirt-machine-controllers

Bug 2028509: detach non-bootable disks before removing the VM #124
Full changelog

ovn-kubernetes

Bug 2034669: Fix node connectivity to service backed by egress IP pods #886
Bug 2036977: Fixes for shared to local gateway migration #892
Bug 2034668: Fix pod handlers and pod IP parsing for egress IP #884
Bug 2035336: [4.9-backport] Fix Netpol retry mechanisms #893
Bug 2033672: Multiple exgw - Use –may-exist on hybrid policy and correct hybrid policy cleanup #877
Bug 2027864: [4.9z] Fixes race between node handler and pod sync #857
Bug 2027983: [4.9.z] Make config parsing more resilient for unknown fields #860
Bug 2027485: [4.9z] addressManager should not call sync() from ErrorCallback #852
Bug 2022042: [4.9z] Avoid stale annotations by re-subscribing to netlink #828
Bug 2018398: [4.9z] findLegacyLBs to also include idling LBs #837
Bug 2016945: Update iface-id-ver for existing ports #805
Bug 1997072: [4.9] phase 2 scale improvements #778
Bug 2009515: [4.9] ovs: bump to 2.16.0-15.el8fdp #776
Bug 2009857: filter out KubeAPIAuth when logging CNI requests #777
Bug 2012025: bump OVN to ovn21.09-21.09.0-20.el8fdp #788
Full changelog

prom-label-proxy

Updating prom-label-proxy images to be consistent with ART #337
Full changelog

prometheus-config-reloader, prometheus-operator

BUG 2041459: alertmanager: only load cfg when writing cfg #148
Full changelog

tests

Bug 2008181: [release-4.9]: sync with openshift/kubernetes@release-4.9 #26697
Bug 2026802: copy api-request upperbound for cluster-monitoring-operator #26736
Bug 2033341: tests: skip some tests for proxy #26705
Bug 2033341: [release-4.9] test: skip tests that won’t work behind a proxy automatically #26664
Bug 2027796: [release-4.9] Specify default namespace when getting API endpoint #26644 #26644
Bug 2027929: test/e2e/upgrade/adminack: Poll gates for duration of update #26656
Bug 2024433: CustomNoUpgrade should not fire no-upgrade failures #26615
Bug 2024773: Skipping Django Test until bug is fixed #26622
Bug 2022866: tests/extended/builds handle new step logging #26606
Bug 2024659: Switch the cluster-role-reapers test to Serial #26618
Bug 2024656: Create new-project without updating kubeconfig #26619
Bug 2025722: test/e2e/upgrade: Bump durationToSoftFailure by 15m for minor updates #26634
Bug 2025088: Add admin ack Upgradeable condition gate test #26629
Bug 2018442: Add more tests for image policy #26567
Bug 2010225: vendor: e2e iperf2 change threshold to 10MBps = 80 Mbps #26526
Bug 2019518: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26561
Full changelog

vsphere-csi-driver-operator

Bug 2018496: Close connection to vCenter API #50
Full changelog

vsphere-problem-detector

Bug 2033733: Deferred logout after checks are run #67
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github