Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.43-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
  • aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

• 4.9.42 (changes) - Success Success
• 4.9.41 (changes) - Success
• 4.9.40 (changes) - Success
• 4.9.39 (changes) - Failed
• 4.9.38 (changes) - Failed
• 4.9.32 (changes) - Failed
• 4.9.27 (changes) - Failed
• 4.9.22 (changes) - Success
• 4.9.15 (changes) - Success
• 4.9.9 (changes) - Success
• 4.9.6 (changes) - Failed
• 4.9.5 (changes) - Failed
• 4.9.4 (changes) - Success
• 4.9.1 (changes) - Failed
• 4.9.0 - Failed
• 4.8.46 (changes) - F F F F F F F F F F F F F F F F F F S F
• 4.8.45 (changes) - Failed
• 4.8.44 (changes) - Success
• 4.8.43 (changes) - Failed
• 4.8.42 (changes) - Success
• 4.8.37 (changes) - Failed
• 4.8.33 (changes) - Failed
• 4.8.29 (changes) - Success
• 4.8.25 (changes) - Failed
• 4.8.21 (changes) - Failed
• 4.8.18 (changes) - Failed
• 4.8.17 (changes) - Failed
• 4.8.16 (changes) - Failed
• 4.8.15 (changes) - Failed
• 4.8.14 (changes) - Failed

Upgrades to:

• 4.10.64 (changes) - Failed
• 4.10.63 (changes) - Success
• 4.10.57 (changes) - Success
• 4.10.43 (changes) - Success
• 4.10.42 (changes) - Success
• 4.10.41 (changes) - Failed
• 4.10.37 (changes) - Success
• 4.10.32 (changes) - Failed
• 4.10.31 (changes) - S F F
• 4.10.30 (changes) - F F S
• 4.10.29 (changes) - Failed Failed
• 4.10.28 (changes) - Failed
• 4.10.27 (changes) - Failed
• 4.10.26 (changes) - Failed
• 4.10.25 (changes) - Failed
• 4.10.24 (changes) - F F F F
• 4.10.23 (changes) - F S F
• 4.9.57 (changes) - Failed
• 4.9.48 (changes) - Failed
• 4.9.47 (changes) - F F S S
• 4.9.46 (changes) - Success
• 4.9.45 (changes) - Success
• 4.9.44 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.9.0

Created: 2022-07-13 06:08:13 +0000 UTC

Image Digest: sha256:93256bbe6227fea0f8c89c6c194888ce1e2277feecb75002e401a42a2465730b

Release 4.9.43 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-07-13-014801

Components

• Kubernetes upgraded from 1.22.1 to 1.22.8
• Red Hat Enterprise Linux CoreOS upgraded from 49.84.202110081407-0 to 49.84.202207070907-0 (diff)

Rebuilt images without code change

• aws-cloud-controller-manager git 18d82a6d sha256:e5f05125fe17708fea8b2005712a747b80b349a61e53d77b23c29042dd6959bf
• aws-ebs-csi-driver git 26f1b6f4 sha256:1adf9086599199ac6690575839cc4ebfda8ec2e1011c4501c99c3127c4a50b16
• azure-cloud-controller-manager git c02678d8 sha256:b85dffdb9f64182cf2f318e3d73d5a476d87ad36cee3fff6af99cd2f77421502
• azure-cloud-node-manager git c02678d8 sha256:18ff4e641ed452fdd1da95bac8001772e4a0c05ffe5a5a904f7428790cc8c2e5
• azure-disk-csi-driver git ade73731 sha256:e50762aea53d92240ba22686c6a6507306167493576e827491fd042c34f316b9
• baremetal-machine-controllers git 1c81cab6 sha256:b7356398de214f471cc2ff18b0b679887504693ebf339a242bc0d2a5235c6a23
• cluster-bootstrap git 7e074a7d sha256:95acdaf15eecdf12d3ec5bbef5df9d6231d425f96272133fc2a8cd2a610c76a6
• cluster-csi-snapshot-controller-operator git c750d4b4 sha256:91181c9e54a69e0f377710947d601624b086e51d70a4989e20b201479e0ea23d
• cluster-openshift-controller-manager-operator git 3015cb84 sha256:b134ad08c091eb3e66cb528b7805551fb5194e2efbb4121423465957a7399357
• cluster-policy-controller git 8fbffaf2 sha256:7411cfa7110c6ee546c74ff111fa32311cb4b43e335c7f68be5d39491c3ddafc
• configmap-reloader git b84b5bf9 sha256:c8734ce1c987467de7cb429a8442c8e1507778e207d77f8c260be48adcf4fc52
• container-networking-plugins git 44a49134 sha256:5186c0764c9a29f87be66cf3e7cd41734490a91d7fcc15821c072b9dc996d2cf
• coredns git 3cb11c07 sha256:d2b9b2429079d03176528b11656bffc34c6d2576ec3d31b8f56c06a47ad3dd58
• csi-driver-manila git ddbc0e4f sha256:f8c700e3ea6f2ffcc73dc201ca0e5ab452cba7dd1c5fcec880ae8528ebd1be95
• csi-driver-manila-operator git fd2d838d sha256:39321117eb9d93b64cb7a20e04dae962558d8cfbc09a27beb2d209c467783300
• csi-driver-nfs git 0e0c1739 sha256:18536c0098dc131be45c747ae3ee26268fe3e8debc1ffa593e5cd804ad5eeda4
• csi-external-attacher git 0a1737c4 sha256:8dfd080452dc184ea0687070d9cd1f00702557c91ec64e503da2e0924c7dddec
• csi-external-provisioner git 7736e729 sha256:cec118cd293db02e090c7f5cd6b502d994e2b5cf052c847029fe4ab1b86f1878
• csi-external-resizer git dad46d03 sha256:cf15d98a8b135e45cca22b8ebc4a41d32e0b42bd3b539cc5d296dfd62ce5f5f5
• csi-external-snapshotter git 52ab8938 sha256:c2f4dcf7620e0b0a22f73502a5368448a3338496e90cd690baac766cb866b011
• csi-livenessprobe git c13c3a5f sha256:e71ad2038c8772cfaafb2da7e17d2865e189a20dea5d659ce4a185ea997fec9d
• csi-node-driver-registrar git 3e02b07e sha256:3e014c76462408e7a8ffbf4000dc726e533efab4ab56b71a4d62aeb401b9478d
• csi-snapshot-controller git 52ab8938 sha256:a4901af87fb7ffe48587e7ea262396ed49c2a0b0fa0b7234457b0c665d472436
• csi-snapshot-validation-webhook git 52ab8938 sha256:faefa3ed5c8c520b2a0baf84faaba92a5cdd0fdd2b3324ae1eb6ae802341fd7a
• egress-router-cni git 099b7569 sha256:b3d4cac3b44228c42bd17ce31a85ce246349d169801107d2ac2184d44ef1f387
• gcp-pd-csi-driver git 48d49f7f sha256:bf425701c275c871a68e5f0d06dd34954148e15c5c78e7889cbf24c621c189c3
• grafana git 6130ba8b sha256:47148ba7fa9873fa73dd41dc4cf1b0106f7fe6a6396c5ab18c790f5f99bbc479
• ironic-inspector git 9474b758 sha256:2bfff62bcf1421f77b344d5425db116637409ea5e4d731db385e7d0b10e17315
• ironic-static-ip-manager git d13dccb8 sha256:b954745858c6b14b1d58c178d9bd1c444577d2e56ab9f93bca2c29f4f41a63fd
• kube-rbac-proxy git 58e09297 sha256:543dbcf59475f67ec1fb2c29e8c88ad067e35cda75835924719a2619e0348619
• kube-state-metrics git 6e41dbd4 sha256:3d7baec9b3c2420262ab20c53ba51e5e6aed8272173fa7726a86becda0045be7
• libvirt-machine-controllers git 59ae2edf sha256:2dc0b7379974b02072e46acb69078174ca6c52b5041bee5431d22b3a48fc5a23
• machine-os-content sha256:a431ba8ff5972ce19c2144d6972cf7ba8767524d82e218a1b23236a2dc346d83
• mdns-publisher git 266597b3 sha256:51f2735e19fd2b371259344c71999b663e335026564450820cb542ac4a72f229
• multus-admission-controller git 3c28a57a sha256:5978c108971458d12f6817c4ca35c26e5269bdde3d30cc02868871020d87b77e
• multus-networkpolicy git fd12fede sha256:a28ead61f61b63d332b7e341f25f714527995045cef5a32581fcc42f614fb23a
• network-tools git ed0b846c sha256:1845f8026443fd184bdeb4a0db3468d32908213939fc8c17f2f93cdd70a82087
• oauth-proxy git 9ea1ebc8 sha256:5f19d8c0210061111f218922bd3e7fbc168a0dec297d8a7a9dabc62a424f9cf5
• openshift-state-metrics git 689af8b8 sha256:850073672505d78f5868f0c90956e0117bea48d1493ad801be77ca657677baaa
• openstack-cinder-csi-driver git ddbc0e4f sha256:78f03ca61a0d1fb66388b6fe4729f395a23fb032ed145612e115abab7b5ac7d2
• openstack-cloud-controller-manager git ddbc0e4f sha256:2bd2b75e1e224c4c647285d552658e35462f27e72a0aff54e56191c29e887ea4
• prometheus git 3197fa71 sha256:89dadf5373c933540b4e039a615448c42d0ce0f21329c05ccb62bc43319a8c63
• prometheus-alertmanager git 579e3c68 sha256:72929100430eecec345ef9b3b6697dd55fc3c85a3d1dd8d2a2343d46664c0805
• prometheus-node-exporter git 1ab97f35 sha256:b03e939e5111cc9f796f9077355101911df3e97d43185dd56c40ba6f0b3dfea4
• service-ca-operator git ab44f586 sha256:716d6ccc60f834876eb7f9b3e5e65300e8847a292ac95261cd5d939e2733d25b
• telemeter git 03842e05 sha256:0c2c8ae9c06cac2db313a4ae394a4eab22f611b071ed1e612e86944709e120be
• vsphere-csi-driver git 4ece3d1b sha256:83937cc370e3861482659c58814a865641a17f0b6427d28aa40118d7da10ea98
• vsphere-csi-driver-syncer git 4ece3d1b sha256:29b9bfab6b470eb758de7ca3a3cf11014acea8987cc81cb45baa5672eba339d8

aws-ebs-csi-driver-operator

• Bug 2077897: Set custom endpoint environment variable if available #155
• Full changelog

aws-machine-controllers

• Bug 2065483: Ensure IOPS setting is honoured on all supported block device types #436
• Bug 2029993: Prevent Machine from being considered provisioned until it exists in AWS #431
• Bug 2015605: do not requeue if the machine has been updated #425
• Full changelog

aws-pod-identity-webhook

• Bug 2026379: update go.mod for go1.16 #147
• Full changelog

azure-disk-csi-driver-operator

• Bug 2029571: Add custom CA bundle support #39
• Full changelog

azure-machine-controllers

• Bug 2047845: Requeue create on invalid credentials errors #249
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug 2098158: Bootstrap timeout #6025
• Bug 2099741: Collect whole journal and netstat data #6036
• Bug 2043298: bump RHCOS 4.9 boot images #5963
• Bug 2087972: Set rc-manager=unmanaged for on-prem bootstrap #5926
• Bug 2025862: Improve host role management during assets creation #5408
• Bug 2067092: stop considering Mint mode as supported on Azure (#5699) #5738
• Bug 2052307: aws: Filter out local zones when generating a default list of zones #5627
• Bug 2042443: openstack/Dockerfile: add make and gettext #5549
• Bug 2038429: Azure: Update Default Instance Types #5520
• Bug 2043590: vendor: bump aws terraform provider to v3.1.0-openshift-2 #5559
• Bug 2031606: aws: get ips for all control plane instances for bootstrap gather #5474
• Bug 2022172: Relax vcenter hostname check #5372
• Bug 2029409: Update defaultReleaseImageOriginal to 4.9 #5450
• Bug 2028611: vendor: update terraform-provider-google for rate limit fix #5445
• Bug 2027329: Handle unset default machine pool #5424
• Bug 2022616: Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5380
• Bug 2017985: Set AWS Bootstrap Type == Master #5337
• Bug 2016267: Add ingress rules to master SG for compact clusters #5320
• Bug 2004052: OpenStack: Fix links in SR-IOV workers doc #5212
• Bug 2009787: Fix RAM validation for openstack flavors #5262
• Bug 2004569: Fix router clean up upon cluster destroy #5220
• Bug 2015811: bump oVirt terraform provider version which fix “Disk is locked” bug #5315
• Full changelog

baremetal-operator

• Bug 2009849: Avoid logging BMC password when creds change #183
• Bug 2009850: Fix fallback for ironic drivers that don’t support soft power off #184
• Full changelog

baremetal-runtimecfg

• Bug 2026012: Ignore VIPs in node-ip show #161
• Bug 2043650: Avoid dynamically allocated port range for haproxy #167
• Bug 2049903: Add delay after sending bootstrap stop and start messages #169
• Bug 2025691: retrieve only single type addresses for Keepalived ingress #160
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 2103913: [must-gather] Add options for multi-node, host-network capture #1191
• Bug 2103910: Introduce an option to retrieve the rotated log files for a pod #1190
• Bug 2092265: [inspect] Add namespace-scoped networking resources to inspect #1157
• Bug 2065174: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1089
• Bug 2051944: Enhancing the output provided when backup collections are attempted #1057
• Bug 2065302: Add TMOUT env to debug node pod #1090
• Bug 2051626: bump(k8s.io/*) v0.22.6 #1060
• Bug 2045008: bump discovery burst #1034
• Bug 2053149: Fix catalog mirror from files #1064
• Bug 2053222: Fix mirroring images that have dots in their namespace #1068
• Bug 2039761: Remove git:// from new-app tests #1022
• Bug 2038930: properly handle –dry-run=server #1016
• Full changelog

cloud-credential-operator

• Bug 2055821: Remove Azure mint mode support as Active Directory Graph API will be sunset #453
• Bug 2024751: pod-identity-webhook starts without tls #423
• Bug 2015977: Stop putting CCO in degraded state when stale credentials are found #404
• Bug 1992563: update alerts with summary and descriptions #397
• Bug 2024751: pod-identity-webhook starts without tls #424
• Bug 2015989: Check for aws status in infra platform status field before client setup #405
• Full changelog

cluster-authentication-operator

• Bug 2037944: endpoints checker: check only the custom hostname if configured #531
• Bug 2052467: Custom route HTTPS certificate SAN validation #545
• Bug 2077483: routeName used as customSecretName #560
• Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #544
• Bug 2062292: e2e: Pin Keycloack to the legacy variant #556
• Bug 2039417: remove degraded condition 4.9 #542
• Bug 2037274: starter.go: add invalidCertsController #535
• golang 1.16 bump: Updating ose-cluster-authentication-operator images to be consistent with ART #526
• Full changelog

cluster-autoscaler

• Bug 2066270: UPSTREAM: <carry>: Fallback to CAPI annotations #226
• Full changelog

cluster-autoscaler-operator

• Bug 2070277: add leader election flags to autoscaler deployment #244
• Bug 2025582: Change ClusterAutoscalerUnschedulablePods severity to info #230
• Full changelog

cluster-baremetal-operator

• Bug 2091747: Fix interpretation of Deployment Status Conditions #268
• Bug 2053581: Calculating network stack only on supported Platforms #244
• Bug 2012684: add a new field “ProvisioningMacAddresses” to the provisioning CRD #207
• Full changelog

cluster-cloud-controller-manager-operator

• Bug 2064837: Fix CCCMO metric ports configuration #180
• Bug 2034504: Ensure old deployment is deleted before new deployment creation #162
• Bug 2015503: User CA bundle sync controller #138
• Full changelog

cluster-config-operator

• Bug 2075551: [release-4.9] backport api to commit 019a246c52 #252
• Bug 2015306: bump api #224
• Full changelog

cluster-dns-operator

• Bug 2002621: serviceChanged: Fix internalTrafficPolicy #295
• Full changelog

cluster-etcd-operator

• Bug 2102005: Upping defrag timeout to 1 minute #867
• Bug 2095115: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #849
• Bug 2086119: Add summary to etcd alert rules #826
• Bug 2082316: Add new etcd members to reviewers, add Allen to approvers #818
• Bug 2068084: manually disable defrag #810
• update OWNERS #721
• Bug 2069830: turn on initial corruption check #772
• Bug 2008175: pkg/operator/metriccontroller: Fix query #686
• Bug 2009890: pkg/operator/upgradebackupcontroller: fix backup dir name in status condition #683
• Bug 2007454: pkg/cmd/render: disallow placeholder IPs #667
• Bug 2003540: bump library-go #663
• Bug 2009016: Suppress noisy logs and improve client errors #679
• Full changelog

cluster-image-registry-operator

• Bug 2074052: Deployment annotations, runtimeClassName override and fs policy change #766
• Bug 2059606: Retry on pruner failures #757
• Bug 2023219: Wait until cluster operators recover before proceeding #731
• Bug 2005049: Avoid disruptions #719
• Full changelog

cluster-ingress-operator

• Bug 2084336: Fix enabling PROXY protocol on an upgraded cluster #757
• Bug 2097736: Fix loadBalancerServiceAnnotationsChanged check and update #786
• Bug 2094054: Delete LoadBalancer-type service finalizer logic #771
• Bug 2079517: Use externalTrafficPolicy: Cluster with OVN #713
• Bug 2032677: Azure: Add Support for Azure Stack Hub #690
• Bug 2064586: Disable keepalive for canary probe #722
• Bug 2060111: Set Upgradeable=False if default cert has no SAN #711
• Bug 2057518: Normalize the AWS internal LB annotation value #706
• Bug 2058699: Upgradeable Condition in Operator and IC status #709
• Bug 2014938: Use fake dns provider with external cp topology only in IBM Cloud case #666
• Bug 2014711: Fix for Azure dns privateZone degrade e2e test #673
• Bug 2015829: Change default balancing algorithm to “leastconn” #667
• Full changelog

cluster-kube-apiserver-operator

• Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #1318
• Bug 2044622: staticpod pruner: check if the cert directory exists to avoid panic #1297
• Bug 2037274: starter: include metrics controller #1274
• Bug 2029504: encryption-controller: sync secrets conditionally #1268
• Bug 2014615: Exempt metrics scrapes from APF. #1244
• Bug 2012346: prometheus-k8s-0 cpu usage keeps increasing for the first 3 days #1242
• Bug 2003540: bump library-go #1232
• Full changelog

cluster-kube-controller-manager-operator

• Bug 2049907: allow cluster-policy-controller to fallback to default cert #600
• Bug 2044622: Sync with the latest 4.9 library-go #593
• Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #537
• Bug 2003540: bump library-go #564
• Full changelog

cluster-kube-scheduler-operator

• Bug 2026109: Disable balancedAllocation and add weight for HighNodeUtilization profile #379
• Bug 2044622: Sync with the latest 4.9 library-go #405
• Bug 2037665: Check policy name field independently of the configmap change #403
• Bug 2037665: Remove policy upgradeable when policy field cleared #402
• Bug 2037665: Set upgradeable=false if using Policy field #400
• Bug 2003540: bump library-go #370
• Full changelog

cluster-kube-storage-version-migrator-operator

• Bug 2022528: Extensive number of requests from storage version operator in cluster #77
• Bug 2016176: kube-storage-version-migrator constantly reporting type “Upgradeable” status Unknown #72
• Full changelog

cluster-machine-approver

• Bug 2031061: Replace certificates with generated certificates #147
• Bug 2024216: Allow fallback to serving cert renewal accounting for egress IPs on SDN #141
• Bug 2019754: Ensure pending CSR count is valid post approval #139
• Full changelog

cluster-monitoring-operator

• Bug 2030630: jsonnet: update kube-prometheus and kubernetes-mixin #1538
• Bug 2059470: Unable to connect external Grafana with Openshift Monitoring #1549
• Bug 2038406: Add custom profile metric for Node Tuning Operator to telemetry #1535
• Bug 2021097: Set Upgradeable: false when HA workloads are incorrectly spread #1472
• Bug 2018455: Keep container_fs_usage_bytes metric #1461
• Bug 2015571: [4.9] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1457
• Bug 2013617: Update KubePodCrashLooping alert #1448
• Bug 2013148: jsonnet: Drop unnecessary kube-state-metrics alerts #1435
• Bug 2011359: Backport Application Services metric to 4.9 release #1420
• Bug 2011798: Prometheus when installed on the cluster shouldn’t have failing rules evaluation #1418
• Bug 2008120: Adjust dropped cAdvisor metrics #1404
• Bug 2012029: Allow namespace label in metric allow list #1422
• Full changelog

cluster-network-operator

• Bug 2093978: Drop Node update permission for sdn-node #1476
• Bug 2092265: Cleanup CNO relatedObjects #1468
• Bug 2083079: Reserve port TCP/9104 for cluster-network-operator #1429
• Bug 2085463: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1444
• Adds dougbtv to owners [release-4.9] #1402
• Bug 2058673: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.9] #1323
• Bug 2057957: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1316
• [release 4.9] Updates owners #1333
• Bug 2040530: ovn: try to gracefully terminate ovn-northd and ovsdb #1279
• Bug 2046476: sbdb and nbdb containers leave pid around if they restarted or crashed #1291
• Bug 2038252: Backport 4.9 OVN drop icmp frag from other nodes on Azure cluster #1273
• Bug 2034351: Whereabouts IP Reconciliaton [backport 4.9] #1264
• Bug 2023423: Add ip6tables NOTRACK rules for udp/6081 #1229
• Bug 2037499: Bump openshift/build-machinery-go #1270
• Bug 2028961: [release-4.9] Set upgrade strategy on kube-proxy #1239
• Bug 2014021: Use proxy to connect to OSP cloud #1201
• Full changelog

cluster-node-tuning-operator

• Bug 2017066: openshift profile: fix malformed patch #284
• Bug 2013653: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #279
• Full changelog

cluster-openshift-apiserver-operator

• Bug 2047331: global pull secret not working in OCP4.7.4+ for additio… #491
• Bug 2029504: encryption-controller: sync secrets conditionally #487
• Full changelog

cluster-samples-operator

• Bug 2010136: Including Template in must-gather related objects. #401
• Bug 2009722: acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #400
• Full changelog

cluster-storage-operator

• Bug 2102760: Add missing ibm cloud annotations to prometheus rbac #294
• Bug 2084219: Fix RelatedObjects when an API is missing in the API server #281
• Full changelog

cluster-update-keys

• Updating ose-cluster-update-keys images to be consistent with ART #38
• Full changelog

cluster-version-operator

• Bug 2032125: lib/resourcemerge/core: Merge volumeMounts by mountPath #715
• Bug 2055314: Fixing the sync issue when desired version and channel changed at the same time #742
• Bug 2038275: *: Use –v=2 logging to drop client-side throttling noise #723
• Bug 2028602: lib/resourcemerge/apps: Default Deployment replicas to one #702
• Bug 2024588: Changing the ClusterNotUpgradeable alert to info #693
• Bug 2022570: cvo: Compare manifest group in getOverrideForManifest #690
• Bug 2015024: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #678
• Full changelog

console

• Bug 2089592: [release-4.9] Add debounce to tektonhub versions api call to avoid many calls #11553
• Bug 2093910: change metrics queries based on metrics level configurations #11644
• Bug 2097618: Avoid using ‘gp2’ hardcoded storage class #11716
• Bug 2068203: Sample catalog is not displayed when one API call to the backend fails #11616
• Bug 2084496: fix bug where “Update blocked” label incorrectly displa… #11484
• Bug 2097554: Fix failing backend test after devfile registry update #11714
• Bug 2082493: - Rolebindings page doesn’t load for normal users #11630
• Bug 2084028: Improve Firehose cache, fix broken import #11554
• Bug 2089847: Set dashboards timeout based on selected timespan #11561
• Bug 2076690: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11362
• Bug 2081389: Translate Extensions On Each Language Change #11430
• Bug 2089546: [release-4.9] Eliminate use of lookaside cache and move to Cachito #11519
• Bug 2084028: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11476
• Bug 2030408: Disable replacement procedure from ODF UI #11483
• Bug 2079231: fix bug where ClusterRole > RoleBindings did not display… #11405
• Bug 2048631: missing volumes list in snapshot modal #10984
• Bug 2046016: SnapShot with Disk Hot-plug hangs #10959
• Bug 2078554: - Roles -> RoleBindings tab doesn’t show RoleBindings correctly #11392
• Bug 2070827: Pipeline metrics: use prometheus-tenancy API to get data #11270
• Bug 2073999: avoid pre-fetching tekton hub task versions #11312
• Bug 2066771: Enhance Insights widget empty states #11218
• Bug 2069258: Decode secrets before authorizing repository #11243
• Bug 2071579: fix RoleBindings list page filter #11279
• Bug 2077003: Fix failing TestGetRegistrySamples test #11368
• Bug 2071692: Backport add-flow e2e tests to 4.9 #11300
• -Bug 2021595: Key value field is not getting updated under Environment Tab in OpenShift Web Console #11176
• Bug 2064454: return process data as array for list true in firehose as done in hooks #11256
• Bug 2066298: fix ClusterOperator Status, Version col sorts #11206
• Bug 2065549: Change the tekton hub api endpoint to use v1 api #11197
• Bug 2060449: Fix potential issues with namespaces that contains just numbers #11133
• Bug 2021702: Render correct conditions for csv vs installplan and subscriptioncondition #10423
• Bug 2064454: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11184
• Bug 2033712: Update CSR model & fix approval/denial process #10690
• Bug 2055293: Sum total memory of unnamed container only #11073
• Bug 2046641: Add warning alert when installing operator to non suggested namespace #10944
• Bug 2055100: Revert “Add Dev Preview tag for IBM FlashSystem” #11068
• Bug 2054608: omit rolebindings with no subjects #11055
• Bug 2056826: Revert “Merge pull request #10316 from dtaylor113/e2e-tests-replace-codeready-operator” #11087
• Bug 2052553: Add ‘Unavailable’ status for cluster operator #10125
• Bug 2050271: show latest pipelinerun on the top of the list #11019
• Bug 2033274: Fix tektonhub task upgrading issue #10678
• Bug 2051523: change the Image Vulnerabilities tab to be project and not cluster scoped #10159
• Bug 2053496: Monitoring: use namespace to detect the activePerspective instead of useActivePerspective hook #11042
• Bug 2052850: Refreshing console from toaster taking to Install Operator #11025
• Bug 2047350: Fix TypeError when application has HelmRelease #10990
• Bug 2026553: Dispatch name filter value to redux #10553
• Bug 2022158: omit extension when code ref resolution fails #10435
• Bug 2023339: fix broken Argo CD link image #10461
• Bug 2026414: use prometheus tenancy URL to load data in devconsole observe dashboard #10961
• Bug 2041434: Monitoring: show a error message if wrong dashboard name is passed to the URL #10857
• Bug 2047633: Fix that export download model wasn’t shown when primer export finished #10965
• Bug 2040296: Enable error stack trace messages to scroll #10072
• Bug 2042041: Console 2969: Changes to the project selector to allow system namespaces that are Favorited to be included in the Favorited list even when the option to Show default projects is unselected. #10886
• Bug 2030128: Fix pipeline builder edge spacing to avoid improper edge shapes #10629
• Bug 2044292: Filter superseded helm secrets and fix firehose to support partial metadata #10915
• [release 4.9] Bug 2042683: Check rbac before polling for rules silences #10888
• Bug 2044287: Add support for fetching partial metadata and fix helm list page crash #10914
• Bug 2044259: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10913
• Bug 2042456: Check if name label exists before comparing #10882
• Bug 2036340: Fix secure route pre-filled issue in edit flow #10759
• Bug 2027804: use namespace instead of useActivePerspective hooks to get the variables in Observe dashboard #10586
• Bug 2027269: Add subject name selector field to SinkBinding form #10568
• Bug 2027268: Optimize name validation regex for forms #10567
• Bug 2019884: adds feature flag for all extension for knative plugin #10393
• Bug 2038607: Fix that user settings ConfigMap is also created for users with restricted access #10799
• Bug 2036115: add support for new labels for serverless function #10755
• Bug 2013253: Fix to let the user create the application even if dockerfile is not detected #10216
• Bug 2036859: Shift invalid devfile alert down #10766
• Bug 2034183: Open export details page from the resource link on the topology sidepanel #10694
• Bug 2033265: Fix an error to show Knative Services and Revisions also if the Service has no owner revision #10677
• Bug 2029861: backport the change from #10394 to release 4.9 #10620
• Bug 2029370: Trim the strings before localCompare #10611
• Bug 2025799: Remove Tech preview badge for the triggers component for triggers GA … #10535
• Bug 2044089: Update CRW operator name to fix failing e2e tests #10910
• Bug 2040365: Check if ‘auths’ key when switching between create image secret subforms #10838
• Bug 2034636: - RoleBindings tab doesn’t show correct rolebindings #10711
• Bug 2037619: Could not filter out machine by using node name on machines page (temp fix) #10807
• Bug 2040291: Prevent null references and “ResizeObserver loop limit exceeded” errors in IFrameMarkdownView #10116
• Bug 2034829: cant delete VM with un-owned pvc attached #10719
• Bug 2028286: Fix blank page error for Installed Operators #10596
• Bug 2029378: Fix NodePort RDP bug #10612
• Bug 2026243: Fixes add capacity for MCG standalone #10544
• Bug 2025937: KMS resources not getting created for IBM FlashSystem storage #10540
• Bug 2029297: Fix troubleshoot link for MON_DISK_LOW #10609
• Bug 2026618: Add Dev Preview tag for IBM FlashSystem #10555
• Bug 2026219: Fix Noobaa resources broken details pages #10543
• Bug 2028535: Backing Store YAML tab on click displays a blank screen on UI #10603
• Bug 2022446: Fix issue with standalone dashboards (4.9 backport) #10441
• Bug 2022303: Fix creation of ibm storage system at backing storage step #10438
• Bug 2022462: Set large width for modals with modal-lg class #10442
• Bug 2020000: Fix resource metrics 403 errors for project admin users #10396
• Bug 2021527: Fix ClusterOperators link #10417
• Bug 2023285: #cloud-config is now added to yaml #10459
• Bug 2016602: ODF tab is missing if user clicks on ‘Refresh web console’ #10295
• Bug 2017722: Fix creation for BackingStore, BucketClass and NamespaceStore #10340
• Bug 2016939: Block MCG deploymeny when no storage class found #10304
• Bug 2017717: Use conditions for status in Storage System list page #10339
• Bug 2018637: Pass pod toolbar filters to useListPageFilter #10366
• Bug 2019494: Delete ssh service when vm is deleted #10385
• Bug 2019736: PVC is deleted along with VM even with “Delete Disks” unchecked #10391
• Bug 2010677: Update PatternFly/react-console #10258
• Bug 2015134: Reveal the switch status of the button “Show default project” in code #10252
• Bug 2014303: Fix wrong in-cluster hostname on the Service details page #10246
• Bug 2013105: fixes imagestream from reference for alias to existing IS #10212
• (4.9 Backport) Bug 2008142: Allow web terminal to be installed in any namespace #10135
• Bug 2017484: Check for resource in ServiceBinding spec’s service reference #10327
• Bug 2002905: Fix list page route for build configs #10043
• Bug 1989798: Fix state bug to eliminate duplicates in dragged files #10131
• Bug 2002006: Allow side nav borders to extend to left and right edges of yaml sidebar #10011
• Bug 2014145: Failed to load RoleBindings list that will lead to ‘Role name’ is not able to be selected on Create RoleBinding page as well #10241
• Bug 2011705: fix dev-catalog stuck in loading state #10198
• Bug 2004075: Fix to show image-tag selector in s2i form and re-validate git url on git-type change #10067
• Bug 2010160: Clicking on the perspective switcher shows a white page with loader #10169
• Bug 2002856: Dont validate the install operator form when submitted #10041
• Bug 2002600: Enable add capacity if osd size is not matching #10032
• Bug 2008456: Fix to fetch ocs csv in external mode #10144
• Bug 2003870: Fix state of volume mode dropdown #10062
• Bug 2004567: Fix basic spring boot sample form crash #10076
• Bug 2014095: Monitoring: Fix error message when Silences fail to load #10240
• Bug 2013132: Overview tab is missing under Storage after successful deployment on UI #10214
• Bug 2008499: Add monitoring and nodes label for external storage platforms #10146
• Bug 2015558: Fix failing OLM test scenario #10267
• Bug 2014048: Console update toast notification can appear multiple times #10239
• Bug 2002697: Fix disks undefined on create local volume set step #10037
• Bug 2012825: update the BindableService CRD changes to align with BindableKinds #10206
• Bug 2010308: Fix create broker button in Add broker page #10172
• Bug 2004241: Storage class name not passed in CR #10069
• Bug 2002696: Fix links and texts for Storage link provided in Overview page. #10050
• Bug 2013088: node page fail #10210
• Full changelog

console-operator

• Bug 2055494: console-operator should report Upgradeable False when SAN-less certs are used #638
• Bug 2075030: Re-enable TestMetricsEndpoint e2e test case #647
• Bug 2039681: Fix setting of custom cert for default route #624
• Bug 2040275: Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #626
• Bug 2008142: Change web terminal subscription permissions from get to list #596
• Bug 2016028: Correction/Changes in Quick Start Guides for ODF #609
• Bug 2010681: Resync all controllers periodically #600
• Bug 2002878: Remove SimpleHTTP ‘server’ response header value #587
• Full changelog

docker-builder

• Bug 2050287: Update buildah to v1.22.4 #285
• Bug 2042444: getAssembleUser(): strip the group part out before checking the UID #280
• Bug 2037776: Update containers/storage to address incorrect overlay options being set on rhel7 nodes #279
• Bug 2022866: bump github.com/containers/buildah to v1.22.3 #272
• Full changelog

docker-registry

• Bug 2086864: Fix ICSP for subrepositories #333
• Bug 2060363: Fix s3 driver for supporting ceph radosgw #327
• Bug 2053222: Fix pull-through for images that have dots in their namespace #309
• Bug 2042677: Fix auth for docker.io images #305
• Bug 2029987: Try another registry if blob is not found #303
• Full changelog

driver-toolkit

• Bug 2031854: Add e2e test to 4.9 branch #71
• Full changelog

etcd

• Update OWNERS #124
• Bug 2077501: Merge Upstream etcd 3.5.3 into Openshift 4.9 #119
• Bug 2016174: UPSTREAM: <carry>: server: Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync #99
• Full changelog

gcp-machine-controllers

• Updating ose-gcp-machine-controllers images to be consistent with ART #166
• Full changelog

gcp-pd-csi-driver-operator

• Bug 2038191: Add custom CA bundle support #42
• Full changelog

haproxy-router

• Bug 2010227: HTTPS redirect happens even if there is a more specific http-only route #367
• Full changelog

hyperkube, pod

• Bug 2075704: Backport 107821 and 107831 #1267
• Bug 2075704: Revert Backport 107821 and 107831 #1266
• Bug 2075704: Backport 107821 and 107831 #1242
• Bug 2069310: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1233
• Bug 2066390: Rebase 1.22.8 #1223
• Bug 2050632: UPSTREAM: <drop>: Give warning when ipFamilyPolicy implicitly set #1170
• Bug 2073153: golang toolchain unsupported parsers tag #1239
• Bug 2065786: Backport 108366 OutofCpu Fixes #1222
• Bug 2024643: Rebase v1.22.5 #1103
• Bug 2043807: UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1134
• Bug 2043807: add deprecated parser build flag #1166
• Bug 2045972: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1144
• Bug 2039373: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1107
• Bug 2044438: UPSTREAM: 107637: backport inotify fix to 4.9 #1138
• Bug 2040338: UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources #1125
• Bug 2030697: UPSTREAM: <carry>: api request counts for current hour are incorrect #1088
• Bug 2023452: UPSTREAM: 106382: defer close the rotated log open #1057
• Bug 2024967: Fix subpath unmount error #1066
• Bug 2021995: Read k8s version from hyperkube Dockerfile #1044
• Bug 2022740: UPSTREAM: 106259: Don’t guess SELinux support on error #1053
• Bug 2022281: Rebase v1.22.3 #1048
• Bug 2023866: Fix patch 104847 #1061
• Bug 2018442: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1033
• Bug 2008827: Rebase v1.22.2 #985
• Bug 2018516: 4.9: bump(github.com/openshift/*): make go.{mod,sum} point to 1.22.1 #1030
• Bug 2006717: etcd-client starts retrying transient errors from the etcd cluster #974
• Bug 2010225: UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps #986
• Full changelog

insights-operator

• Bug 2083467: Fix the clusteroperator conditions values when IO is degraded (#623) #623
• Bug 2076903: Gather namespace names with overlapping UIDs (#605) (#611) #605
• Bug 2066825: Gather some error messages from the kube-controller-manager containers (#598) (#599) #598
• Bug 2033540: Gather all CostManagementMericsConfig definitions. (#525) (#568) #525
• Bug 2027637: gather webhook configurations (#508) (#559) #508
• Bug 2026644: Gather all the container logs from relate namespaces of degraded clusteroperator (#553) #553
• Bug 2017773: Anonymize identity provider attributes in the (#520) (#527) #520
• Bug 2017759: Anonymize the ImageRegistry storage information also in (#507) (#526) #507
• Bug 2005338: OCM controller - change type of the secret (#500) (#506) #500
• Bug 2001823: Fix the error logic in the OCM controller & degrade only in HTTP error (#494) (#503) #494
• Bug 2003893: ApiRequestCount conditional gathering (#492) (#496) #492
• obfuscation ovn clusters bug (#522) #522
• Full changelog

ironic

• [OCP 4.9] Update OWNERS #278
• Bug 2088319: Backport weak eTag handling fix to OpenShift 4.9 #277
• Bug 2082103: Enable vMedia provisioning of Nokia servers #274
• Bug 2023748: Compare IPs using the short form of IPv6 address #232
• Bug 2025754: Enable vMedia provisioning of SuperMicro X11/X12 #238
• Bug 2017412: [4.9] fix Image provisioning fails with file name too long #228
• Bug 2012798: Ironic resumes clean before raid configuration job is actually completed #221
• Full changelog

ironic-hardware-inventory-recorder

• Updating ironic-hardware-inventory-recorder-image images to be consistent with ART #506
• Full changelog

ironic-ipa-downloader

• Bug 2089313: Multipath fix for passive paths #92
• [OCP 4.9] Update OWNERS #89
• Full changelog

ironic-machine-os-downloader

• Bug 2020546: Clear proxy env variables if go would have #68
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 2076256: Mitigate multiple CVEs #1432
• Bug 2077289: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1433
• Bug 2069498: [release-4.9] update bundle plugins #1422
• Bug 2067128: [release-4.9] compute bundle plugins in build #1413
• Bug 2058751: [release-4.9] 2022-02-15 Security Advisory #1406
• Bug 2052063: bump openshift-sync to 1.0.53 #1385
• Bug 2044941: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1369
• Bug 2038961: bump sync plugin to 1.0.52 #1363
• Bug 2037346: Update openshift-sync-plugin to 1.0.51 and various dependant plugins #1359
• Bug 2020615: Update Jenkins and plugins per 2021-11 advisory #1346
• Full changelog

k8s-prometheus-adapter

• Updating ose-prometheus-adapter images to be consistent with ART #50
• Full changelog

keepalived-ipfailover

• Updating ose-egress-http-proxy images to be consistent with ART #91
• Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #93
• Full changelog

kube-proxy, sdn

• Bug 2093978: Remove node-tainting for too-small MTU #436
• Bug 2090624: Masquerade in cluster traffic that is marked for egress IP #433
• Bug 2063970: delete stale UDP conntrack entries for loadbalancer IPs #413
• Bug 2026302: [EgressIP] move ct(commit) action from OVS group to flow #375
• Bug 2006290: Fix up event recorder usage (again) #357
• Bug 2013707: Remove locking from EgressIPTracker.Ping #360
• Full changelog

kube-storage-version-migrator

• Updating ose-kube-storage-version-migrator images to be consistent with ART #179
• Full changelog

kuryr-cni, kuryr-controller

• Bug 2022684: Improve retrieval of Trunks info #599
• Bug 2023383: Do not start kuryr-daemon when worker_num <= 1 #602
• Bug 2018129: Ensure KLB is updated #585
• Bug 2023731: Ensure DOWN subports are cleaned up #604
• Bug 2018148: Update TOX_CONSTRAINTS_FILE for stable/xena #586
• Bug 2013017: Include port fix #578
• Full changelog

machine-api-operator

• Bug 2025697: [release-4.9]: Bump CAPZ API #965
• Bug 2022813: GCP credentials reporting networksecurity.googleapis.com API disabled #952
• Bug 2005242: MaxUnhealthy should not be a string type #919
• Bug 2004953: Fix user-agent in vCenter sessions list #918
• Full changelog

machine-config-operator

• Bug 2098099: configure-ovs: clone connection to avoid selinux problems #3188
• Bug 2089763: configure-ovs: persist profiles after auto-connect has been set #3183
• Bug 2089763: configure-ovs: avoid restarting NetworkManager #3160
• Bug 2071689: lib/resourcemerge: handle container env var deletions #3057
• Bug 2081123: Add KUBELET_NODEIP_HINT to nodeip-configuration #3130
• Bug 2070490: configure-ovs: reload NM only when necessary #3048
• Bug 2074491: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3077
• Bug 2062310: Add –templates flag to MCC bootstrap command #2998
• Bug 2063327: [release-4.9] Ensure directories are created with usable permission bits #3013
• Bug 2038249: Improvements for configure-ovs script #2901
• Bug 2025474: annotate rendered config with OCP version #2964
• Bug 2058511: Prepend to search domains instead of replacing #2966
• Bug 2050911: tighten operator availability conditions #2946
• Bug 2032985: fixes 1 to 1 containerruntime config mapping #2876
• Bug 2043650: Avoid dynamically allocated port range for haproxy #2923
• Bug 2044503: ovs-configuration: use lower than NM default ethernet route metric #2928
• Bug 2027926: storage.conf: remove obsolete option override_kernel_check #2848
• Bug 2026275: daemon: make cordon/uncordon more robust #2839
• Bug 2022641: [release-4.9] Send WARN message to stderr #2785
• Bug 2008210: configure-ovs: Persist addr-gen-mode for ipv6 connections #2775
• Bug 2013164: [IPI ON-PREM] move Keepalived default ingress script to separate file #2798
• Bug 2009210: [on-prem] Set coredns bufsize to 512 #2784
• Bug 2011307: Periodically send gratuitous ARPs #2794
• Full changelog

multus-cni

• Bug 2017881: add handling of pod UIDs passed from runtime #111
• Full changelog

multus-route-override-cni

• Updating ose-multus-route-override-cni images to be consistent with ART #23
• Updating ose-multus-route-override-cni-alt images to be consistent with ART #18
• Full changelog

multus-whereabouts-ipam-cni

• Bug 2064859: Sync context improvements [backport 4.9] #89
• Bug 2028964: Whereabouts should reconcile IP addresses [backport 4.9] #77
• Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #71
• Bug 2009493: Release on cancel 4.9 #69
• Updating ose-multus-whereabouts-ipam-cni-alt images to be consistent with ART #64
• Full changelog

must-gather

• Bug 2092265: Add networking resources #308
• Bug 2052929: Fix ovn-nbctl commands for ipv6 #284
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#56) #56
• Fix field selector (#51) #51
• Full changelog

oauth-apiserver

• Bug 2043807: add deprecated parser build flag #72
• Updating ose-oauth-apiserver images to be consistent with ART #56
• Full changelog

oauth-server

• Bug 2037274: pkg/*: introduce x509_missing_san_total metric #95
• Updating oauth-server images to be consistent with ART #85
• Full changelog

openshift-apiserver

• Bug 2053222: Fix importing images that have dots in their namespace #282
• Bug 2043807: add deprecated parser build flag #277
• Bug 2040240: Make OriginImageMutators aware of origin objects #269
• Bug 2018442: Image policy should mutate DeploymentConfigs #255
• Bug 2006791: prevent high frequency logging for aborting build generation from image change trigger based build requests using the deprecated build config spec last image change trigger ID field #247
• Full changelog

openshift-controller-manager

• Bug 2006791: BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 #203
• Full changelog

openstack-cinder-csi-driver-operator

• Bug 2037080: relax health probes against Cinder API #64
• Full changelog

openstack-machine-controllers

• Bug 2077381: Fix InstanceCreate port & trunk cleanup #234
• Bug 2064633: Ensure subnets belong to the queried network #222
• Full changelog

operator-lifecycle-manager, operator-registry

• Bug 2102559: opm bug fix #328
• Bug 2079082: Replace collect-profile jobs that haven’t completed #293
• Bug 2073967: Fix a bug in deletion of webhook service for replacement #284
• Bug 2072995: Emit CSV metric on startup #280
• Bug 2054848: Do not modify object from the lister cache (#2562) #253
• Bug 2048450: Bump containerd to 1.4.11 #252
• Bug 2000379: fix: ensure operator images are included in rendered bundles related images #180
• Bug 2024048: Remove outdated subscription update logic to improve resolution delay #215
• Bug 2017434: Use arguments to configure pprof-secret #212
• Bug 2015799: Introduce GRPC_PROXY EnvVar Support (#2364) #207
• Full changelog

operator-marketplace

• Bug 2023550: Revert “Start without defaults on ARM” #431
• Full changelog

ovirt-csi-driver

• Bug 2014845: Fix storage domain search string #91
• Updating ose-ovirt-csi-driver images to be consistent with ART #79
• Full changelog

ovirt-csi-driver-operator

• Bug 2024491: Align manifest dir with storage operator #78
• Bug 2056995: Increase timeouts for CSI driver #88
• Bug 2017245: Rearrange static files to prevent creation errors #74
• Full changelog

ovirt-machine-controllers

• Bug 2028509: detach non-bootable disks before removing the VM #124
• Full changelog

ovn-kubernetes

• Bug 2088630: EgressIP NATs are not being cleared correctly from the logical router #1103
• Bug 2083239: [Downstream-only][4.9-only] Always add complete efw ACL rules #1088
• Bug 2087226: enable exportloopref linter and fix violations #1096
• Bug 2065782: [release-4.9][backport] Fix cleaning VF representor ports #1002
• Bug 2077369: [release-4.9] fix ipv6 network policy #1046
• Bug 2059700: [4.9z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #981
• Bug 2058683: [4.9z] Multiple ExGW cache validation/improvements #972
• Bug 2068619: egressgw: fix deadlock due to behavior of RWLock #1012
• Bug 2063835: backport 2052975 to 4.9 #996
• Bug 2060080: [release-4.9] Network Policy fixes #985
• [release 4.9] Update project owners #991
• Bug 2055317: Hack ITP:preferLocal for DNS service #964
• Bug 2034744: Fix egress IP allocator sync #887
• Bug 2053310: [release-4.9] Fix pod-creation-retry #951
• Bug 2045576: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #938
• Bug 2054299: Lock the reassignment procedure during node deletion to avoid races #955
• Bug 2056883: Revert “HACK: disable skip_snat for load balancers.” #942
• Bug 2055549: Fix podHandlerCache key #962
• Bug 2040594: Create iptables NAT rules also for loadbalancer services #905
• Bug 2014003: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #952
• Bug 2054139: Don’t return err when annotation cannot be unmarshalled #954
• Bug 1996751: Bump OVN to 21.12 #959
• Bug 2028812: Modification of ClusterIPs shall trigger svc update #872
• Bug 2042494: [4.9] Set the OVS port as transient #914
• Bug 2022049: EgressGW: only return unique elements from getRouteInfosForGateway() #826
• Bug 2034669: Fix node connectivity to service backed by egress IP pods #886
• Bug 2036977: Fixes for shared to local gateway migration #892
• Bug 2034668: Fix pod handlers and pod IP parsing for egress IP #884
• Bug 2035336: [4.9-backport] Fix Netpol retry mechanisms #893
• Bug 2033672: Multiple exgw - Use –may-exist on hybrid policy and correct hybrid policy cleanup #877
• Bug 2027864: [4.9z] Fixes race between node handler and pod sync #857
• Bug 2027983: [4.9.z] Make config parsing more resilient for unknown fields #860
• Bug 2027485: [4.9z] addressManager should not call sync() from ErrorCallback #852
• Bug 2022042: [4.9z] Avoid stale annotations by re-subscribing to netlink #828
• Bug 2018398: [4.9z] findLegacyLBs to also include idling LBs #837
• Bug 2016945: Update iface-id-ver for existing ports #805
• Bug 1997072: [4.9] phase 2 scale improvements #778
• Bug 2009515: [4.9] ovs: bump to 2.16.0-15.el8fdp #776
• Bug 2009857: filter out KubeAPIAuth when logging CNI requests #777
• Bug 2012025: bump OVN to ovn21.09-21.09.0-20.el8fdp #788
• Full changelog

prom-label-proxy

• Updating prom-label-proxy images to be consistent with ART #337
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 2052201: Address race condition in recreate flow for statefulset #167
• BUG 2041459: alertmanager: only load cfg when writing cfg #148
• Full changelog

tests

• Bug 2101429: test: switch to testing CapBnd over CapInh #27279
• Bug 2064800: skip imageregistry serial test on disconnected environments #27189
• Bug 2077167: disable unidling test failing under ovn-k #27172
• Bug 2087230: disable flaky unidling test #27150
• Bug 2076241: Remove second reference to BlueOcean annotations #27066
• Bug 2076256: Remove BlueOcean annotation check #27038
• Bug 2072902: [release-4.9] exclude loki-promtail from duplicated events #26986
• Bug 2055380: cleanup network policy ACL extended test #26947
• Bug 2063284: Add debug info for signature test #26903
• Bug 2041358: images: port image signature workflow test to OCP4/UBI8 #26751
• Bug 2008181: [release-4.9]: sync with openshift/kubernetes@release-4.9 #26697
• Bug 2026802: copy api-request upperbound for cluster-monitoring-operator #26736
• Bug 2033341: tests: skip some tests for proxy #26705
• Bug 2033341: [release-4.9] test: skip tests that won’t work behind a proxy automatically #26664
• Bug 2027796: [release-4.9] Specify default namespace when getting API endpoint #26644 #26644
• Bug 2027929: test/e2e/upgrade/adminack: Poll gates for duration of update #26656
• Bug 2024433: CustomNoUpgrade should not fire no-upgrade failures #26615
• Bug 2024773: Skipping Django Test until bug is fixed #26622
• Bug 2022866: tests/extended/builds handle new step logging #26606
• Bug 2024659: Switch the cluster-role-reapers test to Serial #26618
• Bug 2024656: Create new-project without updating kubeconfig #26619
• Bug 2025722: test/e2e/upgrade: Bump durationToSoftFailure by 15m for minor updates #26634
• Bug 2025088: Add admin ack Upgradeable condition gate test #26629
• Bug 2018442: Add more tests for image policy #26567
• Bug 2010225: vendor: e2e iperf2 change threshold to 10MBps = 80 Mbps #26526
• Bug 2019518: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26561
• Full changelog

thanos

• Bug 2074413: Thanos Querier high CPU and memory usage till OOM #81
• Full changelog

vsphere-csi-driver-operator

• Bug 2018496: Close connection to vCenter API #50
• Full changelog

vsphere-problem-detector

• Bug 2060214: Fix stale metrics #82
• Bug 2033733: Deferred logout after checks are run #67
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.nightly-2024-10-06-0535524.18.0-0.nightly-2024-10-05-2227174.18.0-0.nightly-2024-10-05-1732524.18.0-0.nightly-2024-10-05-1246484.18.0-0.nightly-2024-10-05-0731594.18.0-0.nightly-2024-10-05-0208184.18.0-0.nightly-2024-10-04-2108384.18.0-0.nightly-2024-10-04-1312004.18.0-0.nightly-2024-10-04-0433524.18.0-0.nightly-2024-10-03-2208024.18.0-0.nightly-2024-10-03-1626224.18.0-0.nightly-2024-10-02-2102284.18.0-0.nightly-2024-10-02-1251034.18.0-0.nightly-2024-10-02-0810044.18.0-0.nightly-2024-10-01-2349404.18.0-0.nightly-2024-10-01-1058524.18.0-0.nightly-2024-10-01-0628044.18.0-0.nightly-2024-10-01-0159144.18.0-0.nightly-2024-09-30-1618174.18.0-0.nightly-2024-09-30-1012064.18.0-0.nightly-2024-09-30-0510284.18.0-0.nightly-2024-09-29-2226034.18.0-0.nightly-2024-09-29-1505564.18.0-0.nightly-2024-09-27-2127074.18.0-0.nightly-2024-09-27-1145284.18.0-0.nightly-2024-09-23-182657───4.18.0-0.ci-2024-10-05-1955564.18.0-0.ci-2024-10-05-1355554.18.0-0.ci-2024-10-05-0755544.18.0-0.ci-2024-10-05-0155544.18.0-0.ci-2024-10-04-1955524.18.0-0.ci-2024-10-04-1355514.18.0-0.ci-2024-10-04-0755504.18.0-0.ci-2024-10-04-0155494.18.0-0.ci-2024-10-03-1955484.18.0-0.ci-2024-10-03-1355484.18.0-0.ci-2024-10-03-075547───4.17.0-0.nightly-2024-10-06-0210394.17.0-0.nightly-2024-10-05-2116464.17.0-0.nightly-2024-10-05-1409494.17.0-0.nightly-2024-10-05-0720184.17.0-0.nightly-2024-10-05-0245464.17.0-0.nightly-2024-10-04-1709584.17.0-0.nightly-2024-10-04-0916084.17.0-0.nightly-2024-10-04-0049384.17.0-0.nightly-2024-10-03-1729574.17.0-0.nightly-2024-10-03-1012194.17.0-0.nightly-2024-10-03-0216164.17.0-0.nightly-2024-10-02-1740474.17.0-0.nightly-2024-10-02-0714074.17.0-0.nightly-2024-10-01-1837414.17.0-0.nightly-2024-10-01-0753534.17.0-0.nightly-2024-09-30-2036524.17.0-0.nightly-2024-09-30-0743484.17.0-0.nightly-2024-09-29-1734214.17.0-0.nightly-2024-09-28-0248314.17.0-0.nightly-2024-09-27-2135034.17.0-0.nightly-2024-09-27-1432004.17.0-0.nightly-2024-09-27-0951224.17.0-0.nightly-2024-09-27-0448514.17.0-0.nightly-2024-09-26-2355434.17.0-0.nightly-2024-09-26-1859484.17.0-0.nightly-2024-09-26-1459484.17.0-0.nightly-2024-09-25-1311594.17.0-0.nightly-2024-09-25-0611414.17.0-0.nightly-2024-09-24-2117024.17.0-0.nightly-2024-09-23-2114174.17.0-0.nightly-2024-09-23-1628374.17.0-0.nightly-2024-09-23-0908034.17.0-0.nightly-2024-09-23-0350054.17.0-0.nightly-2024-09-22-2111344.17.0-0.nightly-2024-09-22-162519───4.17.0-0.ci-2024-10-05-1325534.17.0-0.ci-2024-10-05-0725534.17.0-0.ci-2024-10-05-0125534.17.0-0.ci-2024-10-04-1925534.17.0-0.ci-2024-10-04-1325534.17.0-0.ci-2024-10-04-0258454.17.0-0.ci-2024-10-03-2058454.17.0-0.ci-2024-10-03-130357───4.16.0-0.nightly-2024-10-06-0229024.16.0-0.nightly-2024-10-05-2148254.16.0-0.nightly-2024-10-05-1721164.16.0-0.nightly-2024-10-05-1230184.16.0-0.nightly-2024-10-05-0537514.16.0-0.nightly-2024-10-04-2214304.16.0-0.nightly-2024-10-04-1645364.16.0-0.nightly-2024-10-04-0746364.16.0-0.nightly-2024-10-03-2034494.16.0-0.nightly-2024-10-03-1536124.16.0-0.nightly-2024-10-03-0858254.16.0-0.nightly-2024-10-03-0331234.16.0-0.nightly-2024-10-02-2208524.16.0-0.nightly-2024-10-02-1438094.16.0-0.nightly-2024-10-02-0936034.16.0-0.nightly-2024-10-02-0446164.16.0-0.nightly-2024-10-01-2132254.16.0-0.nightly-2024-10-01-1303314.16.0-0.nightly-2024-10-01-0824414.16.0-0.nightly-2024-10-01-0336074.16.0-0.nightly-2024-09-30-2001214.16.0-0.nightly-2024-09-30-1432334.16.0-0.nightly-2024-09-30-0843134.16.0-0.nightly-2024-09-30-0133274.16.0-0.nightly-2024-09-29-1939404.16.0-0.nightly-2024-09-29-1146264.16.0-0.nightly-2024-09-29-0507414.16.0-0.nightly-2024-09-28-2156054.16.0-0.nightly-2024-09-28-1059484.16.0-0.nightly-2024-09-28-0258284.16.0-0.nightly-2024-09-27-2058244.16.0-0.nightly-2024-09-27-1523384.16.0-0.nightly-2024-09-27-0950464.16.0-0.nightly-2024-09-27-0417134.16.0-0.nightly-2024-09-26-1904114.16.0-0.nightly-2024-09-26-1312484.16.0-0.nightly-2024-09-26-0644594.16.0-0.nightly-2024-09-26-0112094.16.0-0.nightly-2024-09-25-1729554.16.0-0.nightly-2024-09-25-0859004.16.0-0.nightly-2024-09-25-0346364.16.0-0.nightly-2024-09-24-0605524.16.0-0.nightly-2024-09-23-1832094.16.0-0.nightly-2024-09-23-1250484.16.0-0.nightly-2024-09-22-173535───4.16.0-0.ci-2024-10-06-0336534.16.0-0.ci-2024-10-05-2136534.16.0-0.ci-2024-10-05-1440364.16.0-0.ci-2024-10-05-0038314.16.0-0.ci-2024-10-04-1838314.16.0-0.ci-2024-10-04-1238314.16.0-0.ci-2024-10-04-0638314.16.0-0.ci-2024-10-04-0014224.16.0-0.ci-2024-10-03-1649514.16.0-0.ci-2024-10-03-104951───4.15.0-0.nightly-2024-10-06-0531504.15.0-0.nightly-2024-10-05-2235124.15.0-0.nightly-2024-10-05-1608474.15.0-0.nightly-2024-10-05-0953214.15.0-0.nightly-2024-10-05-0318404.15.0-0.nightly-2024-10-04-2025204.15.0-0.nightly-2024-10-04-1418104.15.0-0.nightly-2024-10-04-0701124.15.0-0.nightly-2024-10-04-0015484.15.0-0.nightly-2024-10-03-1321174.15.0-0.nightly-2024-10-03-0640284.15.0-0.nightly-2024-10-02-2345224.15.0-0.nightly-2024-10-02-1642094.15.0-0.nightly-2024-10-02-0931004.15.0-0.nightly-2024-10-02-0228344.15.0-0.nightly-2024-10-01-1943084.15.0-0.nightly-2024-10-01-1303404.15.0-0.nightly-2024-10-01-064339───4.15.0-0.ci-2024-10-05-0325564.15.0-0.ci-2024-10-04-1353164.15.0-0.ci-2024-10-04-0753164.15.0-0.ci-2024-10-04-0153164.15.0-0.ci-2024-10-03-1626364.15.0-0.ci-2024-10-03-0932444.15.0-0.ci-2024-10-03-0102404.15.0-0.ci-2024-10-02-091951───4.14.0-0.nightly-2024-10-06-0248114.14.0-0.nightly-2024-10-05-2034424.14.0-0.nightly-2024-10-05-1537314.14.0-0.nightly-2024-10-05-1105474.14.0-0.nightly-2024-10-05-0505084.14.0-0.nightly-2024-10-04-2306064.14.0-0.nightly-2024-10-04-1741044.14.0-0.nightly-2024-10-04-1030134.14.0-0.nightly-2024-10-04-0521224.14.0-0.nightly-2024-10-04-0003094.14.0-0.nightly-2024-10-03-1634104.14.0-0.nightly-2024-10-03-0916484.14.0-0.nightly-2024-10-03-0354414.14.0-0.nightly-2024-10-02-2355054.14.0-0.nightly-2024-10-02-1942024.14.0-0.nightly-2024-10-02-1107364.14.0-0.nightly-2024-10-02-0651024.14.0-0.nightly-2024-10-02-0305124.14.0-0.nightly-2024-10-01-2052074.14.0-0.nightly-2024-10-01-1043344.14.0-0.nightly-2024-10-01-033106───4.14.0-0.ci-2024-10-05-0612024.14.0-0.ci-2024-10-04-1641274.14.0-0.ci-2024-10-04-0548034.14.0-0.ci-2024-10-03-1828514.14.0-0.ci-2024-10-02-1945014.14.0-0.ci-2024-10-02-0424134.14.0-0.ci-2024-10-01-1621074.14.0-0.ci-2024-09-30-1229014.14.0-0.ci-2024-09-27-2006394.14.0-0.ci-2024-09-27-055354───4.13.0-0.nightly-2024-10-04-1439374.13.0-0.nightly-2024-10-02-2002544.13.0-0.nightly-2024-10-02-1130014.13.0-0.nightly-2024-10-02-0308494.13.0-0.nightly-2024-10-01-0919094.13.0-0.nightly-2024-10-01-031909───4.13.0-0.ci-2024-10-03-0339324.13.0-0.ci-2024-10-02-1630274.13.0-0.ci-2024-10-02-0357304.13.0-0.ci-2024-10-01-1941384.13.0-0.ci-2024-10-01-0453474.13.0-0.ci-2024-09-30-0326574.13.0-0.ci-2024-09-26-2049304.13.0-0.ci-2024-09-26-070632───4.12.0-0.nightly-2024-10-04-1439084.12.0-0.nightly-2024-10-03-0201424.12.0-0.nightly-2024-10-02-1130114.12.0-0.nightly-2024-10-02-0245494.12.0-0.nightly-2024-10-01-1921534.12.0-0.nightly-2024-10-01-035743───4.12.0-0.ci-2024-10-04-1534124.12.0-0.ci-2024-10-04-0916044.12.0-0.ci-2024-10-03-1854184.12.0-0.ci-2024-10-03-1222474.12.0-0.ci-2024-10-02-2353424.12.0-0.ci-2024-10-02-1010074.12.0-0.ci-2024-10-01-154048───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-28-2035454.11.0-0.ci-2024-06-18-0336354.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.14.18.0-ec.04.17.0-ec.0

Source code for this page located on github