4.9.32

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.32-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

Untested upgrades: 4.8.20, 4.8.21, 4.8.23, 4.8.24, 4.8.26, 4.8.27, 4.8.29, 4.8.30, 4.8.32, 4.8.33, 4.8.34, 4.9.10, 4.9.12, 4.9.13, 4.9.17, 4.9.18, 4.9.21, 4.9.22, 4.9.24, 4.9.25, 4.9.26, 4.9.7, 4.9.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.9.8

Created: 2022-05-04 13:12:04 +0000 UTC

Image Digest: sha256:ecdb6d0df547b857eaf0edb5574ddd64ca6d9aff1fa61fd1ac6fb641203bedfa

Release 4.9.32 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-05-03-122129

Components

Kubernetes upgraded from 1.22.2 to 1.22.8
Red Hat Enterprise Linux CoreOS upgraded from 49.84.202111111343-0 to 49.84.202204272145-0 (diff)

Rebuilt images without code change

aws-cloud-controller-manager git 18d82a6d sha256:328d647a2ab96f16365ef0f7e1ad0aa23784220605db539e1a92ebab640fa5fc
aws-ebs-csi-driver git 26f1b6f4 sha256:166a91d82bb4bb12965c0ce70bba7e142d0d55c929e5428f99056d2ad11dcce0
aws-ebs-csi-driver-operator git e8e2cb36 sha256:f5e22958185982dcf4d43a2de3ff7fa7069f3b6016e467ae112079b831202d5c
azure-cloud-controller-manager git c02678d8 sha256:569b5a7316ce41e8649f83570486ec6100c440073aa5b993bf09ddb9fdeed379
azure-cloud-node-manager git c02678d8 sha256:5969764d950699d4dbd1f7f19569995da5cae5d557d32f0ea5a9ac93dc0a4e1b
azure-disk-csi-driver git ade73731 sha256:2e5a3e30563065963a0afc374cbfcd4d0b2d0640eed96ffe7a443484d0dbaae2
baremetal-machine-controllers git 1c81cab6 sha256:5d2667f0721274d5139a41c36b0130dc3de47906f98a623079169ba33f9c8e63
baremetal-operator git 6e62a546 sha256:32abf691dbbe1cd56351dc6ac767e64e2058bcf794829f1d0d82945fe9563819
cluster-bootstrap git 7e074a7d sha256:4bfc98fac9cbf1bb0bfbd6a7cf4eefb97e8374f812f73842512c1afa6324d247
cluster-csi-snapshot-controller-operator git c750d4b4 sha256:84994ec0fb0892afae23847b592e1c04e56f7483173b316bfd16a756c75dc05c
cluster-dns-operator git eedd0dc7 sha256:7f7bfb1073308cce2cf5568731aa2a96503707a2f06b6de06ace97a56df703a3
cluster-kube-storage-version-migrator-operator git 7245b0f0 sha256:9f67903db2cd1380cb9a618fff0ce8e7b6a8ace0de03f0b257b81a10143e6dba
cluster-openshift-controller-manager-operator git 3015cb84 sha256:82a94d5116194381e0da862d32e07866300e69b38747ace54f128b01be4b820d
cluster-policy-controller git 8fbffaf2 sha256:eb332799027239acd151916f3b0dcb8d0e0f269f7ab28aed109d15f91a749bf2
cluster-storage-operator git 2e76e02c sha256:530894aed67346440f0fc388fd21b45e6d090802a8b46d70c570da2df5db4fa3
cluster-update-keys git 3e200433 sha256:bfb8031ecdae6e0e725bea8070a56749595b8d83e02a65a2f985e564cc612f96
configmap-reloader git b84b5bf9 sha256:18ef30e641d5c3d7f33014e41dd44465575aef4a8f97acd856a1d1ed94c8a958
container-networking-plugins git 44a49134 sha256:63b6db0158ce851d43827bf06d2c54bb7a9d3c34e3c55b06191382cb8f5954d5
coredns git 3cb11c07 sha256:f387489a26dabba1f5bc0c0c83d33c8330ce1084b1fedf343c35823f1f94b5de
csi-driver-manila git ddbc0e4f sha256:674393551efafbe68402cf6c0ca14e84003434e93b84b5b8857319a318a31660
csi-driver-manila-operator git fd2d838d sha256:cdfb2a25f4aface0efbe73ead334912283a25a9cf2234bbeaef05a5492cd3499
csi-driver-nfs git 0e0c1739 sha256:c0ed475d1cb3e14bca773cb568c7246703df766a48b31dd8356e6f32e3a306c3
csi-external-attacher git 0a1737c4 sha256:5361767174a0251c51f0bb3d5ad74d973741fbbcd6abf44810d644b131d7b5de
csi-external-provisioner git 7736e729 sha256:e50e3a715aeea056db2c5285b277d28714811e929b48f389f683de33951d7d4c
csi-external-resizer git dad46d03 sha256:496961c92dd19adff61b03cb5725705729a0a3837f7207b784dbc132fcd20891
csi-external-snapshotter git 52ab8938 sha256:ec6d949ab770a87cfcfcfca97df275f68804f0d3e09141c5f4c767e56c496e75
csi-livenessprobe git c13c3a5f sha256:c1b3980dc3f39902ea102adea26155418c225f4e3612ca20adbe12c62d98f16f
csi-node-driver-registrar git 3e02b07e sha256:7839fe89c84b79a9ad3f3866bfa16a3246b3b99cdd6ade5e67362a59178694a2
csi-snapshot-controller git 52ab8938 sha256:d28bef3ba6623000ac3495832268d04aa33057c8c589b653b34519aac00a9780
csi-snapshot-validation-webhook git 52ab8938 sha256:186e7d10fff492d70952325a4b26323932bc005fd3861f7e86ff0cae355d8f31
egress-router-cni git 099b7569 sha256:c6bdce86dd253997208a1a2253ac7590ae0893fbf91b3bd3fcdd6111388b615c
etcd git f99cada0 sha256:40a2d0d04fd4c91557020931c989b2588a3e634243204848733680e170fe7c1a
gcp-machine-controllers git d92b0884 sha256:2d95839343199218ae0bc3a797ae1afe924b257722e6e9d2f7bf0e0ca7a9c569
gcp-pd-csi-driver git 48d49f7f sha256:cccd1f187fd539afeb7ec0b73c8aa62860c332bd107c2ed2d19df821ace068a0
grafana git 6130ba8b sha256:ec0f12c0f71ebcd1b5eb186a4d2d4bae3abb8521f6ac000717289a55a39b69b4
haproxy-router git 2d1e1f4b sha256:c018e42ab9f4788da94aae1c79e43e7e3cc2b2322bb0055ec12bc8daacd0123b
ironic-hardware-inventory-recorder git 8e2d1db6 sha256:f4d7cd2e72d598b741ffe88dd966f9b03c4f3896e3ef64c926d90b232f0b8319
ironic-inspector git 9474b758 sha256:a0a6e6bdfd1d0b1aa8673e3103c46bea658564218fa61efb483b42d036d9e910
ironic-ipa-downloader git 6e9af39e sha256:e6ae89aaf807e8aa6298b71a68caca6bd98af64ef31f2bffdd872376542bf38c
ironic-machine-os-downloader git 90b57223 sha256:d206bc0ad7915cea245827b4fe302925f2e0ac0b53deb8d317aab73842065c47
ironic-static-ip-manager git d13dccb8 sha256:3ff1605c130a8c3fd73b516cb4da776da3de9f84764bf3377cd34a0162586e83
k8s-prometheus-adapter git adfdd41d sha256:f115cdcd48a7782f060664d27a39f40b182295f949f4491c4fbcaa97dabb3a66
kube-rbac-proxy git 58e09297 sha256:0aca72724fff5dacf49f18f4a5db2188a7002fbe557263f1b6c7c10331edd84f
kube-state-metrics git 6e41dbd4 sha256:bee33082c5c265897d1b81bee1d5d1d467708316e107779b85eafec3ed049045
kube-storage-version-migrator git 901a6d22 sha256:63a9cb9c1797bccb060833fce33f724e0c7e2a381c38a4873ad2542019826ca5
libvirt-machine-controllers git 59ae2edf sha256:d5cb49db3495ceeba1f93b3c0d981d739761ea318066039fa91de68fcc6b6922
machine-os-content sha256:05e77979d17f2c1d1c3b012d2961f1ca13821f19c078ab2c632f1ca575a8ee8a
mdns-publisher git 266597b3 sha256:923a9a1614bf70cdbd217bca92bb6fdd722b1bf1dce1af7b066637b96d830698
multus-admission-controller git 3c28a57a sha256:799f39c9a1fe5263c1df9a6eb3145e19cdb14591dbc04fb70e2c52aaced7d381
multus-networkpolicy git fd12fede sha256:5a5a164f8a35cd441ddf42d927ebb8b5a76b8f4240cc55515f9e60bcf60877e4
network-metrics-daemon git 9fd61030 sha256:2249fb19ac4ea06d931b653bb80d12e4e39b76f538715904635ca09ae58749d6
network-tools git ed0b846c sha256:3a8fb195e0e27cb248d581a04c31264cce7f59a08ad9f0063d0e3af2cadf9ad0
oauth-proxy git 9ea1ebc8 sha256:e4ef032d520f0bfa8eaf77b17000a5d8297fc002af613974149e9c9294a8be76
openshift-controller-manager git 79857a32 sha256:5591b73afe31ec7e9e833724ee13963074f73db4f8e9e3019b33bf746ca442c6
openshift-state-metrics git 689af8b8 sha256:e1db652ddfd7ad0a27ffcbd4717b187cb6bd82f84da3776bff97189dba66adc3
openstack-cinder-csi-driver git ddbc0e4f sha256:46a9b974d7dbdfa72d959dee88b8e980462e2461b4bec5b920224f144a573fbb
openstack-cloud-controller-manager git ddbc0e4f sha256:163761b495f72a91cf88429cf696eb86b255a0c6ce826ae17cfb655a208b373c
ovirt-csi-driver git fe2a7fdf sha256:ce99cef744a8450d48a5c5d84ac9eac5dd44102a3559232f56bbcc10d1f202a1
prom-label-proxy git 9f870bfa sha256:e43cb9f1a00070938796bfb1917e9d5f5fc42e1892051348aaff2487bc013ac3
prometheus git 3197fa71 sha256:8f0a067b46b7a002f3408dfad7f16d1391447e470dbe63abba52c35544ec898f
prometheus-alertmanager git 579e3c68 sha256:e6c93db2343f9942a9f4a80ed225d7bb7b8013b11a9148b229af6f9ac1e35eff
prometheus-node-exporter git 1ab97f35 sha256:eb274a147470a5556b2437df84bfb4a46def86b71dfd7142ce83ecd123c1d2cc
service-ca-operator git ab44f586 sha256:cefe0146f6e2727ec975bef303882218fbb97b019d04bee695e3e15fda8cae93
telemeter git 03842e05 sha256:6ec49acd37881b1f15d145da03f4596d413e167a5ef4b381d7c5cfe6f2763f4f
vsphere-csi-driver git 4ece3d1b sha256:145bc3793cb3b114d768771e7e4106e22f8c122b35afa4418ebd017164bc53e1
vsphere-csi-driver-operator git 9f56afd3 sha256:26655b3b65f7088b8cd495b9888c9c6fba3fbace96b9dba653f36057dc995f61
vsphere-csi-driver-syncer git 4ece3d1b sha256:bca74a1762f8fa751e821ab9f751706e57c0dc0afe74610c23cc565232c2df4e

aws-machine-controllers

Bug 2065483: Ensure IOPS setting is honoured on all supported block device types #436
Bug 2029993: Prevent Machine from being considered provisioned until it exists in AWS #431
Full changelog

aws-pod-identity-webhook

Bug 2026379: update go.mod for go1.16 #147
Full changelog

azure-disk-csi-driver-operator

Bug 2029571: Add custom CA bundle support #39
Full changelog

azure-machine-controllers

Bug 2047845: Requeue create on invalid credentials errors #249
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2067092: stop considering Mint mode as supported on Azure (#5699) #5738
Bug 2052307: aws: Filter out local zones when generating a default list of zones #5627
Bug 2042443: openstack/Dockerfile: add make and gettext #5549
Bug 2038429: Azure: Update Default Instance Types #5520
Bug 2043590: vendor: bump aws terraform provider to v3.1.0-openshift-2 #5559
Bug 2031606: aws: get ips for all control plane instances for bootstrap gather #5474
Bug 2022172: Relax vcenter hostname check #5372
Bug 2029409: Update defaultReleaseImageOriginal to 4.9 #5450
Bug 2028611: vendor: update terraform-provider-google for rate limit fix #5445
Bug 2027329: Handle unset default machine pool #5424
Bug 2022616: Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5380
Full changelog

baremetal-runtimecfg

Bug 2026012: Ignore VIPs in node-ip show #161
Bug 2043650: Avoid dynamically allocated port range for haproxy #167
Bug 2049903: Add delay after sending bootstrap stop and start messages #169
Bug 2025691: retrieve only single type addresses for Keepalived ingress #160
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2065174: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1089
Bug 2051944: Enhancing the output provided when backup collections are attempted #1057
Bug 2065302: Add TMOUT env to debug node pod #1090
Bug 2051626: bump(k8s.io/*) v0.22.6 #1060
Bug 2045008: bump discovery burst #1034
Bug 2053149: Fix catalog mirror from files #1064
Bug 2053222: Fix mirroring images that have dots in their namespace #1068
Bug 2039761: Remove git:// from new-app tests #1022
Bug 2038930: properly handle –dry-run=server #1016
Full changelog

cloud-credential-operator

Bug 2055821: Remove Azure mint mode support as Active Directory Graph API will be sunset #453
Bug 2024751: pod-identity-webhook starts without tls #423
Bug 2015977: Stop putting CCO in degraded state when stale credentials are found #404
Bug 1992563: update alerts with summary and descriptions #397
Bug 2024751: pod-identity-webhook starts without tls #424
Bug 2015989: Check for aws status in infra platform status field before client setup #405
Full changelog

cluster-authentication-operator

Bug 2077483: routeName used as customSecretName #560
Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #544
Bug 2062292: e2e: Pin Keycloack to the legacy variant #556
Bug 2039417: remove degraded condition 4.9 #542
Bug 2037274: starter.go: add invalidCertsController #535
golang 1.16 bump: Updating ose-cluster-authentication-operator images to be consistent with ART #526
Full changelog

cluster-autoscaler

Bug 2066270: UPSTREAM: <carry>: Fallback to CAPI annotations #226
Full changelog

cluster-autoscaler-operator

Bug 2070277: add leader election flags to autoscaler deployment #244
Bug 2025582: Change ClusterAutoscalerUnschedulablePods severity to info #230
Full changelog

cluster-baremetal-operator

Bug 2053581: Calculating network stack only on supported Platforms #244
Full changelog

cluster-cloud-controller-manager-operator

Bug 2034504: Ensure old deployment is deleted before new deployment creation #162
Bug 2015503: User CA bundle sync controller #138
Full changelog

cluster-config-operator

Bug 2015306: bump api #224
Full changelog

cluster-etcd-operator

update OWNERS #721
Bug 2069830: turn on initial corruption check #772
Full changelog

cluster-image-registry-operator

Bug 2059606: Retry on pruner failures #757
Bug 2023219: Wait until cluster operators recover before proceeding #731
Full changelog

cluster-ingress-operator

Bug 2064586: Disable keepalive for canary probe #722
Bug 2060111: Set Upgradeable=False if default cert has no SAN #711
Bug 2057518: Normalize the AWS internal LB annotation value #706
Bug 2058699: Upgradeable Condition in Operator and IC status #709
Full changelog

cluster-kube-apiserver-operator

Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #1318
Bug 2044622: staticpod pruner: check if the cert directory exists to avoid panic #1297
Bug 2037274: starter: include metrics controller #1274
Bug 2029504: encryption-controller: sync secrets conditionally #1268
Full changelog

cluster-kube-controller-manager-operator

Bug 2049907: allow cluster-policy-controller to fallback to default cert #600
Bug 2044622: Sync with the latest 4.9 library-go #593
Full changelog

cluster-kube-scheduler-operator

Bug 2026109: Disable balancedAllocation and add weight for HighNodeUtilization profile #379
Bug 2044622: Sync with the latest 4.9 library-go #405
Bug 2037665: Check policy name field independently of the configmap change #403
Bug 2037665: Remove policy upgradeable when policy field cleared #402
Bug 2037665: Set upgradeable=false if using Policy field #400
Full changelog

cluster-machine-approver

Bug 2031061: Replace certificates with generated certificates #147
Bug 2024216: Allow fallback to serving cert renewal accounting for egress IPs on SDN #141
Full changelog

cluster-monitoring-operator

Bug 2030630: jsonnet: update kube-prometheus and kubernetes-mixin #1538
Bug 2059470: Unable to connect external Grafana with Openshift Monitoring #1549
Bug 2038406: Add custom profile metric for Node Tuning Operator to telemetry #1535
Full changelog

cluster-network-operator

Adds dougbtv to owners [release-4.9] #1402
Bug 2058673: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.9] #1323
Bug 2057957: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1316
[release 4.9] Updates owners #1333
Bug 2040530: ovn: try to gracefully terminate ovn-northd and ovsdb #1279
Bug 2046476: sbdb and nbdb containers leave pid around if they restarted or crashed #1291
Bug 2038252: Backport 4.9 OVN drop icmp frag from other nodes on Azure cluster #1273
Bug 2034351: Whereabouts IP Reconciliaton [backport 4.9] #1264
Bug 2023423: Add ip6tables NOTRACK rules for udp/6081 #1229
Bug 2037499: Bump openshift/build-machinery-go #1270
Bug 2028961: [release-4.9] Set upgrade strategy on kube-proxy #1239
Full changelog

cluster-node-tuning-operator

Add nto_custom_profile:count metric via PrometheusRule (#292) (#309) #292
Add handling for certificate rotation in pkg/metrics/server.go and an e2e test (#305) #305
Prevent unnecessary ksm* error log messages. (#308) #308
build-machinery-go: bump to the latest version (#306) #306
controller: update MC after application by TuneD (#294) #294
Full changelog

cluster-openshift-apiserver-operator

Bug 2047331: global pull secret not working in OCP4.7.4+ for additio… #491
Bug 2029504: encryption-controller: sync secrets conditionally #487
Full changelog

cluster-samples-operator

Bug 2010136: Including Template in must-gather related objects. #401
Full changelog

cluster-version-operator

Bug 2032125: lib/resourcemerge/core: Merge volumeMounts by mountPath #715
Bug 2055314: Fixing the sync issue when desired version and channel changed at the same time #742
Bug 2038275: *: Use –v=2 logging to drop client-side throttling noise #723
Bug 2028602: lib/resourcemerge/apps: Default Deployment replicas to one #702
Bug 2024588: Changing the ClusterNotUpgradeable alert to info #693
Bug 2022570: cvo: Compare manifest group in getOverrideForManifest #690
Full changelog

console

Bug 2078554: - Roles -> RoleBindings tab doesn’t show RoleBindings correctly #11392
Bug 2070827: Pipeline metrics: use prometheus-tenancy API to get data #11270
Bug 2073999: avoid pre-fetching tekton hub task versions #11312
Bug 2066771: Enhance Insights widget empty states #11218
Bug 2069258: Decode secrets before authorizing repository #11243
Bug 2071579: fix RoleBindings list page filter #11279
Bug 2077003: Fix failing TestGetRegistrySamples test #11368
Bug 2071692: Backport add-flow e2e tests to 4.9 #11300
-Bug 2021595: Key value field is not getting updated under Environment Tab in OpenShift Web Console #11176
Bug 2064454: return process data as array for list true in firehose as done in hooks #11256
Bug 2066298: fix ClusterOperator Status, Version col sorts #11206
Bug 2065549: Change the tekton hub api endpoint to use v1 api #11197
Bug 2060449: Fix potential issues with namespaces that contains just numbers #11133
Bug 2021702: Render correct conditions for csv vs installplan and subscriptioncondition #10423
Bug 2064454: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11184
Bug 2033712: Update CSR model & fix approval/denial process #10690
Bug 2055293: Sum total memory of unnamed container only #11073
Bug 2046641: Add warning alert when installing operator to non suggested namespace #10944
Bug 2055100: Revert “Add Dev Preview tag for IBM FlashSystem” #11068
Bug 2054608: omit rolebindings with no subjects #11055
Bug 2056826: Revert “Merge pull request #10316 from dtaylor113/e2e-tests-replace-codeready-operator” #11087
Bug 2052553: Add ‘Unavailable’ status for cluster operator #10125
Bug 2050271: show latest pipelinerun on the top of the list #11019
Bug 2033274: Fix tektonhub task upgrading issue #10678
Bug 2051523: change the Image Vulnerabilities tab to be project and not cluster scoped #10159
Bug 2053496: Monitoring: use namespace to detect the activePerspective instead of useActivePerspective hook #11042
Bug 2052850: Refreshing console from toaster taking to Install Operator #11025
Bug 2047350: Fix TypeError when application has HelmRelease #10990
Bug 2026553: Dispatch name filter value to redux #10553
Bug 2022158: omit extension when code ref resolution fails #10435
Bug 2023339: fix broken Argo CD link image #10461
Bug 2026414: use prometheus tenancy URL to load data in devconsole observe dashboard #10961
Bug 2041434: Monitoring: show a error message if wrong dashboard name is passed to the URL #10857
Bug 2047633: Fix that export download model wasn’t shown when primer export finished #10965
Bug 2040296: Enable error stack trace messages to scroll #10072
Bug 2042041: Console 2969: Changes to the project selector to allow system namespaces that are Favorited to be included in the Favorited list even when the option to Show default projects is unselected. #10886
Bug 2030128: Fix pipeline builder edge spacing to avoid improper edge shapes #10629
Bug 2044292: Filter superseded helm secrets and fix firehose to support partial metadata #10915
[release 4.9] Bug 2042683: Check rbac before polling for rules silences #10888
Bug 2044287: Add support for fetching partial metadata and fix helm list page crash #10914
Bug 2044259: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10913
Bug 2042456: Check if name label exists before comparing #10882
Bug 2036340: Fix secure route pre-filled issue in edit flow #10759
Bug 2027804: use namespace instead of useActivePerspective hooks to get the variables in Observe dashboard #10586
Bug 2027269: Add subject name selector field to SinkBinding form #10568
Bug 2027268: Optimize name validation regex for forms #10567
Bug 2019884: adds feature flag for all extension for knative plugin #10393
Bug 2038607: Fix that user settings ConfigMap is also created for users with restricted access #10799
Bug 2036115: add support for new labels for serverless function #10755
Bug 2013253: Fix to let the user create the application even if dockerfile is not detected #10216
Bug 2036859: Shift invalid devfile alert down #10766
Bug 2034183: Open export details page from the resource link on the topology sidepanel #10694
Bug 2033265: Fix an error to show Knative Services and Revisions also if the Service has no owner revision #10677
Bug 2029861: backport the change from #10394 to release 4.9 #10620
Backport of #10464 and #10570 #1
Bug 2029370: Trim the strings before localCompare #10611
Bug 2025799: Remove Tech preview badge for the triggers component for triggers GA … #10535
Bug 2044089: Update CRW operator name to fix failing e2e tests #10910
Bug 2040365: Check if ‘auths’ key when switching between create image secret subforms #10838
Bug 2034636: - RoleBindings tab doesn’t show correct rolebindings #10711
Bug 2037619: Could not filter out machine by using node name on machines page (temp fix) #10807
Bug 2040291: Prevent null references and “ResizeObserver loop limit exceeded” errors in IFrameMarkdownView #10116
Bug 2034829: cant delete VM with un-owned pvc attached #10719
Bug 2028286: Fix blank page error for Installed Operators #10596
Bug 2029378: Fix NodePort RDP bug #10612
Bug 2026243: Fixes add capacity for MCG standalone #10544
Bug 2025937: KMS resources not getting created for IBM FlashSystem storage #10540
Bug 2029297: Fix troubleshoot link for MON_DISK_LOW #10609
Bug 2026618: Add Dev Preview tag for IBM FlashSystem #10555
Bug 2026219: Fix Noobaa resources broken details pages #10543
Bug 2028535: Backing Store YAML tab on click displays a blank screen on UI #10603
Bug 2022446: Fix issue with standalone dashboards (4.9 backport) #10441
Bug 2022303: Fix creation of ibm storage system at backing storage step #10438
Bug 2022462: Set large width for modals with modal-lg class #10442
Full changelog

console-operator

Bug 2075030: Re-enable TestMetricsEndpoint e2e test case #647
Bug 2039681: Fix setting of custom cert for default route #624
Bug 2040275: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #626
Bug 2008142: Change web terminal subscription permissions from get to list #596
Full changelog

docker-builder

Bug 2050287: Update buildah to v1.22.4 #285
Bug 2042444: getAssembleUser(): strip the group part out before checking the UID #280
Bug 2037776: Update containers/storage to address incorrect overlay options being set on rhel7 nodes #279
Bug 2022866: bump github.com/containers/buildah to v1.22.3 #272
Full changelog

docker-registry

Bug 2053222: Fix pull-through for images that have dots in their namespace #309
Bug 2042677: Fix auth for docker.io images #305
Bug 2029987: Try another registry if blob is not found #303
Full changelog

driver-toolkit

Bug 2031854: Add e2e test to 4.9 branch #71
Full changelog

gcp-pd-csi-driver-operator

Bug 2038191: Add custom CA bundle support #42
Full changelog

hyperkube, pod

Bug 2069310: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1233
Bug 2066390: Rebase 1.22.8 #1223
Update Go to 1.16.15 #108564
bump konnectivity-client@v0.0.30 #108439
Automated cherry pick of #107121: fix regression introduced by PR 100320 #108466
Automated cherry pick of #108149: fix: do not return early in the node informer when there is #108178
Automated cherry pick of #108167: Fix nodes volumesAttached status not updated #108462
Automated cherry pick of #107997: cronjob_controllerv2: do not filter jobs to be reconciled by #108305
Automated cherry pick of #108209: increase Azure ACR credential provider timeout #108227
Automated cherry pick of #108410: fix dryrun when ca file exists #108471
Automated cherry pick of #108002: kubeadm: fix the bug that ‘kubeadm init –dry-run #108119
Automated cherry pick of #107695 upstream release 1.22 #108303
Automated cherry pick of #108198: Updating EndpointSlice strategy to retain node name in #108202
Automated cherry pick of #108138: Revert v1beta1 PodDisruptionBudget select patchStrategy #108141
Automated cherry pick of #108164: Ignore container notfound error while getPodstatuses #108189
Automated cherry pick of #107789: Mark device as uncertain if unmount device succeeds #107792
Update Go to 1.16.14 #108101
Automated cherry pick of #106581: Enabling kube-proxy metrics on windows kernel mode #107609
Automated cherry pick of #107575: fix: azurefile volumeid conflict in csi migration #107851
Automated cherry pick of #106280: Set max results if its not set #107652
Automated cherry pick of #107312: Execute sync before taking the snapshot #107808
Cherry pick of #106164 and #104705 on release-1.22 #107580
Automated cherry pick of #106853: When volume is not marked in-use, do not backoff #107391
Automated cherry pick of #107406: fix: delete non existing disk issue #107577
Update k/utils to v0.0.0-20211116205334-6203023598ed #107637
update to Go 1.16.13 #107614
Automated cherry pick of #107565: upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 #107568
Automated cherry pick of #105777: fix: do not delete the lb that does not exist #106069
Automated cherry pick of #104991: Fix workqueue memory leak #106582
Cherry pick #106045 to 1.22: Fix concurrent map writes error in kube-apiserver #106338
vendor: bump cAdvisor to v0.39.3 #107355
Automated cherry pick of #107429: fix: azuredisk parameter lowercase translation issue #107519
Automated cherry pick of #104593: fix: ignore the case when updating tags #106731
Automated cherry pick of #105253: fix: leave the probe path empty for TCP probes #106063
Automated cherry pick of #105839: fix: remove VMSS and VMSS instances from SLB backend pool #106072
Automated cherry pick of #107427: removed unnecessary log line #107485
Automated cherry pick of #107452: Fix header mutation race in timeout filter #107459
Automated cherry pick of #107200: flake fix: remove the error handler for cronjob integration #107358
Automated cherry pick of #107327: kubeadm: remove the restriction that the ca.crt can only #107365
Automated cherry pick of #107337: Fix the leak of vSphere client sessions #107352
cherry pick of anp 0.0.27 for v1.22 #107187
Automated cherry pick of #106936: Skip creating HNS loadbalancer with empty endpoints #106966
Automated cherry pick of #106906: mount-utils: Detect potential stale file handle #107039
Automated cherry pick of #107311: client-go: Clear the ResourceVersionMatch on paged list calls #107335
Automated cherry pick of #107221: fix nil pointer in create secret commands #107346
Automated cherry pick of #106683: add gce elb rbs opt-in annotation #107181
Automated cherry pick of #105943: Check for failed sandbox and failed workload containers #107064
Automated cherry pick of #107091: Improving performance of EndpointSlice controller metrics #107168
Automated cherry pick of #104799: fix the error when cleaning up jobs for cronjob #107129
Bug 2050632: UPSTREAM: <drop>: Give warning when ipFamilyPolicy implicitly set #1170
Bug 2073153: golang toolchain unsupported parsers tag #1239
Bug 2065786: Backport 108366 OutofCpu Fixes #1222
Bug 2024643: Rebase v1.22.5 #1103
dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 #106960
Update to go1.16.12 #106982
Automated cherry pick of #106891: kubeadm: validate local etcd certficates during #106925
Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig #106930
Automated cherry pick of #106329: Fix flake caused by sampling signal counter too early. #106457
Automated cherry pick of #105666: fix: skip instance not found when decoupling vmss from lb #105836
Automated cherry pick of #106455: Add warning about using unsupported CRON_TZ #106487
kubelet: set failed phase during graceful shutdown #106899
Update to go1.16.11 #106837
Automated cherry pick of #104743: Ensure there is one running static pod with the same full name #106394
Automated cherry pick of #102882: devicemanager: checkpoint: support pre-1.20 data #106253
Automated cherry pick of #104287: Reduce calls to docker from dockershim for stats #106500
Manual cherry pick of #104817: kubelet: Rejected pods should be filtered from admission #104918
Automated cherry pick of #106102: Ensure deletion of pods in queues and cache #106684
Automated cherry pick of #106412: kube-scheduler: Increase the duration to expire an assumed #106633
Automated cherry pick of #103780: Ignore ‘wait: no child processes’ error when calling #106526
Automated cherry pick of #105046: Skip check for all topology labels when using system default #106604
Automated cherry pick of #105915: sched: ensure feature gate is honored when instantiating #106130
Automated cherry pick of #106030: proxy/iptables: Fix sync_proxy_rules_iptables_total #106373
Automated cherry pick of #105065: parameter ‘disabled-metrics’ is invalid #105793
Automated cherry pick of #106317 upstream release 1.22 - Fixed nil pointer dereference #106356
Automated cherry pick of #106163: kube-proxy: fix stale detection logic #106239
Automated cherry pick of #106382: defer close the rotated log open #106383
Automated cherry pick of #104526: Fix issue in node status updating VolumeAttached list #106052
Automated cherry pick of #105845: use original requests in NodeResourcesBalancedAllocation #106081
remove listx from OWNERS_ALIASES #104260
Automated cherry pick of #105512: Add check for subpaths #106350
Manual cherry pick of kube-openapi changes for release-1.22 #106250
Update to go1.16.10 #106223
Automated cherry pick of #105934: Don’t guess SELinux support on error #106259
Automated cherry pick of #94165: Use separate pathSpec for local and remote to properly handle #106235
Update debian, debian-iptables, setcap images to pick up CVEs fixes #106143
Automated cherry pick of #105946: Remove nodes with Cluster Autoscaler taint from LB backends. #106061
Automated cherry pick of #105673: support more than 100 disk mounts on Windows #105692
Automated cherry pick of #105997: Fixing how EndpointSlice Mirroring handles Service selector #106132
Automated cherry pick of #105755: Support cgroupv2 in node problem detector test #105990
Cherry pick of #104551: Run storage hostpath e2e test client pod as privileged #105786
Automated cherry pick of #105511: Free APF seats for watches handled by an aggregated #105827
Automated cherry pick of #105734: Fix race condition in logging when request times out #106112
Bug 2043807: UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1134
Bug 2043807: add deprecated parser build flag #1166
Bug 2045972: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1144
Bug 2039373: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1107
Bug 2044438: UPSTREAM: 107637: backport inotify fix to 4.9 #1138
Bug 2040338: UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources #1125
Bug 2030697: UPSTREAM: <carry>: api request counts for current hour are incorrect #1088
Bug 2023452: UPSTREAM: 106382: defer close the rotated log open #1057
Bug 2024967: Fix subpath unmount error #1066
Bug 2021995: Read k8s version from hyperkube Dockerfile #1044
Bug 2022740: UPSTREAM: 106259: Don’t guess SELinux support on error #1053
Bug 2022281: Rebase v1.22.3 #1048
Automated cherry pick of #105249: Clear initial UDP conntrack entries for loadBalancerIPs #105650
Automated cherry pick of #104268: kubelet: fix sandbox creation error suppression when pods are #104275
Update to go1.16.9 #105671
Automated cherry pick of #104985: Aggregator uses the regular transport even if the request #105640
Automated cherry pick of #105509: Fix PreferNominatedNode test #105622
Automated cherry pick of #104582: Remove Error Message Check Dynamic PV Tests #105612
Fix quota controller hotloop in integration tests #105513
Automated cherry pick of #105185: Ignore VMs in vmss delete backend pools #105400
Automated cherry pick of #104913: kube-controller-manager: properly check generic ephemeral #105036
Automated cherry pick of #105188: fix: consolidate logs for instance not found error #105366
Automated cherry pick of #105527: kubelet: set terminated podWorker status for terminated #105560
Automated cherry pick of #105213: remove StartedPodsErrorsTotal metrice message #105504
Automated cherry pick of #105462: Ensure terminal pods maintain terminal status #105496
Automated cherry pick of #105388: Copy VolumeSnapshotContent annotations in snapshottable.go #105498
Automated cherry pick of #104488: Adds CancelRequest function to CommandHeadersRoundTripper #105476
Automated cherry pick of #105384: Fixes kubectl command headers which hangs on kubectl run #105471
Automated cherry pick of #105396: Fix CSR test to accept certs shorter than the requested #105397
Automated cherry pick of #105048: Remove a duplicate StorageClass creation call #105355
Automated cherry pick of #103855: Update Containerd version - GCE Windows #105331
Automated cherry pick of #104794: pkg/kubelet/cm/memorymanager: Fix ErrorS key/value pair #105139
Automated cherry pick of #104572: fix detach disk issue on deleting node #104897
Automated cherry pick of #105352: Revert “Build non-static binaries with PIE buildmode” #105452
Automated cherry pick of #104467: fix 104329: check for headless before trying to release #104972
Automated cherry pick of #105205: e2e scheduling priorities: do not reference control loop #105277
Automated cherry pick of #104969: Propagate conversion errors #104988
Automated cherry pick of #104634: storege e2etest: Delete restored PVC/Pod in snapshottable #105154
v1.22: Fix test flake in old svc registry #105111
Automated cherry pick of #100125: ‘New’ Event namespace validate failed #105089
Automated cherry pick of #104833 (1.22): Refine locking in API Priority and Fairness config controller #105049
Automated cherry pick of #104847: kubelet: Handle UID reuse in pod worker #105075
Full changelog

insights-operator

Bug 2076903: Gather namespace names with overlapping UIDs (#605) (#611) #605
Bug 2066825: Gather some error messages from the kube-controller-manager containers (#598) (#599) #598
Bug 2033540: Gather all CostManagementMericsConfig definitions. (#525) (#568) #525
Bug 2027637: gather webhook configurations (#508) (#559) #508
Bug 2026644: Gather all the container logs from relate namespaces of degraded clusteroperator (#553) #553
Full changelog

ironic

Bug 2023748: Compare IPs using the short form of IPv6 address #232
Bug 2025754: Enable vMedia provisioning of SuperMicro X11/X12 #238
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2076256: Mitigate multiple CVEs #1432
Bug 2077289: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1433
Bug 2069498: [release-4.9] update bundle plugins #1422
Bug 2067128: [release-4.9] compute bundle plugins in build #1413
Bug 2058751: [release-4.9] 2022-02-15 Security Advisory #1406
Bug 2052063: bump openshift-sync to 1.0.53 #1385
Bug 2044941: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1369
Bug 2038961: bump sync plugin to 1.0.52 #1363
Bug 2037346: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1359
Bug 2020615: Update Jenkins and plugins per 2021-11 advisory #1346
Full changelog

keepalived-ipfailover

Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #93
Full changelog

kube-proxy, sdn

Bug 2026302: [EgressIP] move ct(commit) action from OVS group to flow #375
Full changelog

kuryr-cni, kuryr-controller

Bug 2022684: Improve retrieval of Trunks info #599
Bug 2023383: Do not start kuryr-daemon when worker_num <= 1 #602
Bug 2018129: Ensure KLB is updated #585
Bug 2023731: Ensure DOWN subports are cleaned up #604
Full changelog

machine-api-operator

Bug 2025697: [release-4.9]: Bump CAPZ API #965
Full changelog

machine-config-operator

Bug 2070490: configure-ovs: reload NM only when necessary #3048
Bug 2074491: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3077
Bug 2062310: Add –templates flag to MCC bootstrap command #2998
Bug 2063327: [release-4.9] Ensure directories are created with usable permission bits #3013
Bug 2038249: Improvements for configure-ovs script #2901
Bug 2025474: annotate rendered config with OCP version #2964
Bug 2058511: Prepend to search domains instead of replacing #2966
Bug 2050911: tighten operator availability conditions #2946
Bug 2032985: fixes 1 to 1 containerruntime config mapping #2876
Bug 2043650: Avoid dynamically allocated port range for haproxy #2923
Bug 2044503: ovs-configuration: use lower than NM default ethernet route metric #2928
Bug 2027926: storage.conf: remove obsolete option override_kernel_check #2848
Bug 2026275: daemon: make cordon/uncordon more robust #2839
Bug 2022641: [release-4.9] Send WARN message to stderr #2785
Full changelog

multus-cni

Bug 2017881: add handling of pod UIDs passed from runtime #111
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni-alt images to be consistent with ART #18
Full changelog

multus-whereabouts-ipam-cni

Bug 2064859: Sync context improvements [backport 4.9] #89
Bug 2028964: Whereabouts should reconcile IP addresses [backport 4.9] #77
ip-reconciler: do not reconcile pods in Pending phase #166
ip-reconciler: Add all non default interfaces to Pod IP list #147
Add label app=whereabouts to ip-reconciler pod template #150
Configurable sleep_for_race parameter #161
e2e tests: fix currently broken setup on kind clusters #156
ip-reconciler: remove kubeconfig from k8s client #159
Fix reconciler spec #158
Use k8snetworkplumbingwg repo instead of dougbtv in sources #123
build, ip reconciler: have configurable logging #155
build: enable e2e testing for podman #154
Fix test to include error when IP pool total doesn’t equal assigned WB pod IPs #152
added sleep-for-race option for IPAM #151
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #71
Full changelog

must-gather

Bug 2052929: Fix ovn-nbctl commands for ipv6 #284
Full changelog

oauth-apiserver

Bug 2043807: add deprecated parser build flag #72
Updating ose-oauth-apiserver images to be consistent with ART #56
Full changelog

oauth-server

Bug 2037274: pkg/*: introduce x509_missing_san_total metric #95
Updating oauth-server images to be consistent with ART #85
Full changelog

openshift-apiserver

Bug 2053222: Fix importing images that have dots in their namespace #282
Bug 2043807: add deprecated parser build flag #277
Bug 2040240: Make OriginImageMutators aware of origin objects #269
Full changelog

openstack-cinder-csi-driver-operator

Bug 2037080: relax health probes against Cinder API #64
Full changelog

openstack-machine-controllers

Bug 2064633: Ensure subnets belong to the queried network #222
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2079082: Replace collect-profile jobs that haven’t completed #293
Bug 2073967: Fix a bug in deletion of webhook service for replacement #284
Bug 2072995: Emit CSV metric on startup #280
Bug 2054848: Do not modify object from the lister cache (#2562) #253
Bug 2048450: Bump containerd to 1.4.11 #252
Bug 2000379: fix: ensure operator images are included in rendered bundles related images #180
Bug 2024048: Remove outdated subscription update logic to improve resolution delay #215
Full changelog

operator-marketplace

Bug 2023550: Revert “Start without defaults on ARM” #431
Full changelog

ovirt-csi-driver-operator

Bug 2056995: Increase timeouts for CSI driver #88
Full changelog

ovirt-machine-controllers

Bug 2028509: detach non-bootable disks before removing the VM #124
Full changelog

ovn-kubernetes

Bug 2077369: [release-4.9] fix ipv6 network policy #1046
Bug 2059700: [4.9z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #981
Bug 2058683: [4.9z] Multiple ExGW cache validation/improvements #972
Bug 2068619: egressgw: fix deadlock due to behavior of RWLock #1012
Bug 2055379: [release-4.9] support new ingress pipeline option for ACLs #3
Bug 2063835: backport 2052975 to 4.9 #996
Bug 2060080: [release-4.9] Network Policy fixes #985
[release 4.9] Update project owners #991
Bug 2055317: Hack ITP:preferLocal for DNS service #964
Bug 2034744: Fix egress IP allocator sync #887
Bug 2053310: [release-4.9] Fix pod-creation-retry #951
Bug 2045576: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #938
Bug 2054299: Lock the reassignment procedure during node deletion to avoid races #955
Bug 2056883: Revert “HACK: disable skip_snat for load balancers.” #942
Bug 2055549: Fix podHandlerCache key #962
Bug 2040594: Create iptables NAT rules also for loadbalancer services #905
Bug 2014003: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #952
Bug 2054139: Don’t return err when annotation cannot be unmarshalled #954
Bug 1996751: Bump OVN to 21.12 #959
Bug 2028812: Modification of ClusterIPs shall trigger svc update #872
Bug 2042494: [4.9] Set the OVS port as transient #914
Bug 2022049: EgressGW: only return unique elements from getRouteInfosForGateway() #826
Bug 2034669: Fix node connectivity to service backed by egress IP pods #886
Bug 2036977: Fixes for shared to local gateway migration #892
Bug 2034668: Fix pod handlers and pod IP parsing for egress IP #884
Bug 2035336: [4.9-backport] Fix Netpol retry mechanisms #893
Bug 2033672: Multiple exgw - Use –may-exist on hybrid policy and correct hybrid policy cleanup #877
Bug 2027864: [4.9z] Fixes race between node handler and pod sync #857
Bug 2027983: [4.9.z] Make config parsing more resilient for unknown fields #860
Bug 2027485: [4.9z] addressManager should not call sync() from ErrorCallback #852
Bug 2022042: [4.9z] Avoid stale annotations by re-subscribing to netlink #828
Full changelog

prometheus-config-reloader, prometheus-operator

BUG 2041459: alertmanager: only load cfg when writing cfg #148
Full changelog

tests

Bug 2076256: Remove BlueOcean annotation check #27038
Bug 2072902: [release-4.9] exclude loki-promtail from duplicated events #26986
Bug 2055380: cleanup network policy ACL extended test #26947
Bug 2063284: Add debug info for signature test #26903
Bug 2041358: images: port image signature workflow test to OCP4/UBI8 #26751
Bug 2008181: [release-4.9]: sync with openshift/kubernetes@release-4.9 #26697
Bug 2026802: copy api-request upperbound for cluster-monitoring-operator #26736
Bug 2033341: tests: skip some tests for proxy #26705
Bug 2033341: [release-4.9] test: skip tests that won’t work behind a proxy automatically #26664
Bug 2027796: [release-4.9] Specify default namespace when getting API endpoint #26644 #26644
Bug 2027929: test/e2e/upgrade/adminack: Poll gates for duration of update #26656
Bug 2024433: CustomNoUpgrade should not fire no-upgrade failures #26615
Bug 2024773: Skipping Django Test until bug is fixed #26622
Bug 2022866: tests/extended/builds handle new step logging #26606
Bug 2024659: Switch the cluster-role-reapers test to Serial #26618
Bug 2024656: Create new-project without updating kubeconfig #26619
Bug 2025722: test/e2e/upgrade: Bump durationToSoftFailure by 15m for minor updates #26634
Bug 2025088: Add admin ack Upgradeable condition gate test #26629
Full changelog

thanos

Bug 2074413: Thanos Querier high CPU and memory usage till OOM #81
Full changelog

vsphere-problem-detector

Bug 2060214: Fix stale metrics #82
Bug 2033733: Deferred logout after checks are run #67
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github