4.9.47

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.9.47-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.9-e2e-aws-serial

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.9.18

Created: 2022-08-24 04:51:34 +0000 UTC

Image Digest: sha256:b049b24c534fed3cdd80caf6ae37db84642b7e4923229f319eaefe4df23b9f77

Release 4.9.47 was created from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-08-23-221814

Components

Kubernetes upgraded from 1.22.3 to 1.22.8
Red Hat Enterprise Linux CoreOS upgraded from 49.84.202201212103-0 to 49.84.202208232006-0 (diff)

Rebuilt images without code change

aws-cloud-controller-manager git 18d82a6d sha256:49b41c4c369fc623190e6cedc2c9a2d4187fdcaf1f7c9c292f485aa96834b090
aws-pod-identity-webhook git 37a13282 sha256:a109b173ee7564d392083bb9e8a069d986d92a798203dbd715ecd1b07275d2da
azure-cloud-controller-manager git c02678d8 sha256:9dcb63b77cbe7ec1d561fb0b1b5e85535d58bc1ccbf0307bfe541281d8cae944
azure-cloud-node-manager git c02678d8 sha256:4ccec98e6579c49aeb4deb7571d82a1fae961a00c3ad676d9cda51c269cd7121
azure-disk-csi-driver git ade73731 sha256:c54e829ed0022bf7db53673f69af784989acf332faa73b052174bd783e143b4c
azure-disk-csi-driver-operator git 15e474ce sha256:7a8e21fc2924aef1165d9db84c5dfcac0f1ba65fcca11d85b7adfd84e16f193b
baremetal-machine-controllers git 1c81cab6 sha256:0d4abde6aee328b51179a21a46289bf7ca894056c5d3d7c709d5111bf81775ba
cluster-bootstrap git 7e074a7d sha256:895cc42f042f3520509a25b4f2376144ef833fb31ad73b92eca1ef3d38779a1c
cluster-csi-snapshot-controller-operator git c750d4b4 sha256:75b9c220c81d95ed189a07814332742d5ba5ca8d943de79e002214492ac455c9
cluster-dns-operator git eedd0dc7 sha256:c32026ce39484c9359b59b86982593a81ab3fce6fbe6fb666278a51be604c4b0
cluster-kube-storage-version-migrator-operator git 7245b0f0 sha256:5288371be6c3451f81922957fd75a4a29ee5e2e7977a2aa91cf1c0ed65691706
cluster-machine-approver git 993ec9fe sha256:86c841c6e93e63d0ec631142a263e590daedff5c7abb89f94d470b7af238fdcc
cluster-openshift-controller-manager-operator git 3015cb84 sha256:35ccb0000c12407e8c159089af56614e3d2738c37e34aa4ee2e7228aa5a17943
cluster-policy-controller git 8fbffaf2 sha256:751389f35af81de71cd1e3fd8cc6766f93545555b69f1be213d2deb854b2b5a6
cluster-samples-operator git 9b0a9d76 sha256:0ebd4a30b00a182fdeb9c2b6a6069ea64b115aadef8ffe1c2cf2fd67c3cafb69
configmap-reloader git b84b5bf9 sha256:3599b20d506aa9d00866157f101e9af5af3c46a43a2e0c9e58f9745c93d5b220
coredns git 3cb11c07 sha256:7dcd64102bd02ff08eed136b93802d1d2423214a606ea02cd5d17214aa6853c2
csi-driver-manila git ddbc0e4f sha256:a968d749f4e0e1438778d9eaf19fe2ab7178a4700d755203f5980d85fb38f5dc
csi-driver-nfs git 0e0c1739 sha256:c95b5427a8c46d9b42a4c3f07921eeab7b8b9d714f7e45cb110823cfa7f86048
csi-external-attacher git 0a1737c4 sha256:1e96f1b7f58b6b10b30c21ddd9766a8ad4ed3bb1a525a06d468ba6f264e8816b
csi-external-provisioner git 7736e729 sha256:c400b580970b191619678049c11f1f585d63e3ac75937cdde813b154b55c62ac
csi-external-resizer git dad46d03 sha256:6f6563f4f4ddece23a584ddaf9a7db4384c706285e6a64fdf71a2a0f76d350df
csi-external-snapshotter git 52ab8938 sha256:d7e5c26ce96195aceb2de6d4cf52f033219da54c1a025ad463bade5697e9677e
csi-livenessprobe git c13c3a5f sha256:e77e9d0fcb7a5c6dd6846f7314035560b5b292ea78833d712322b3dc39e1e6f7
csi-node-driver-registrar git 3e02b07e sha256:353716973a732937da3130a3e5d75e6f56fd48cb9b0162341f9e23042c172da0
csi-snapshot-controller git 52ab8938 sha256:e7b8f9778f6360785545c62d08803393a18ff9ad7ffdef4fdaf96176bffb29e9
csi-snapshot-validation-webhook git 52ab8938 sha256:4d87abf8c0c55c2fb5838a2017ff6e29c74a016f092f3d5adb46ebe5106e779c
driver-toolkit git 51a2f1ef sha256:b79f54917c877118d7265a5acb387cc04479f8ab945865edcfdcd82f6b8933fc
egress-router-cni git 099b7569 sha256:2462d32b23aa4cab3b7a59277f52a5ca8b6ac1f683355bbb7a4e71e62c143617
gcp-pd-csi-driver git 48d49f7f sha256:838d2bfede9c218d0432745a1ae92110d7e678c92d054a21111708fdc65ba41f
gcp-pd-csi-driver-operator git d8a891de sha256:02e1fe709e6eeae0415db140c336f97e149afd6cb684f623d15b6ad94eb771d8
grafana git 6130ba8b sha256:d584defd7df0dbc2b08028e6924e26bf581ff29fe48adf0f7e65d36648e51edd
ironic-hardware-inventory-recorder git 8e2d1db6 sha256:2d9e4bcf2e59bb13e032211e7d5a8cf7412c48517f05a3aa5721f2215879db3b
ironic-inspector git 9474b758 sha256:544441f4b872ddecbec9011e4677d70d51761da13405d6c97e6ee95537ead2f8
ironic-machine-os-downloader git 90b57223 sha256:53b33f802275fed86db2ca95fe0b6544b5f329f2ce78e8a08e0c212c8cdfe2f5
ironic-static-ip-manager git d13dccb8 sha256:2e1c5b94f7ff94e2a2e7fbd8711201d78ee84846fb3515f6315764a22ab3a3fb
kube-rbac-proxy git 58e09297 sha256:94aa9386cec03a785776cffa74751761d7d13260be566d7d72911b97fcd273d5
kube-state-metrics git 6e41dbd4 sha256:020e4111595d7f653f94691aa7edf08d54a994e9068fe337ac39623df9dc7690
kuryr-cni git 1e8c94f8 sha256:570134f56e57d177c12942fb5a6fcf84302c0f10e770920516630f91d30279e7
kuryr-controller git 1e8c94f8 sha256:91b9491bf4d0eadafcc0776772511385d94c92cdc7755fe073ff5f4e0d1121fa
libvirt-machine-controllers git 59ae2edf sha256:ec040aaec15b64f20faa990864d4bbe7805d32046b4efd6afbe66eea3e54dfa1
machine-os-content sha256:515d47c296034444c9c2c0c5f960a40fef0d165e182a4a4ca06a147dae203d21
mdns-publisher git 266597b3 sha256:21dd4d23c9033774cdc80c990a24af6a5e64b6540a6090f1cec5e7133deeb9bf
multus-admission-controller git 3c28a57a sha256:adaf3ce72f7d24a73ed2c50adf5db4036a058c245675e399921333a9c067a4c4
multus-cni git c2499377 sha256:212518da0837d4073cd644f501d2d434101ee6559ae21ce9b7ebef386eb92c75
multus-networkpolicy git fd12fede sha256:40a0955020e7e2c32b2f7530197f5c58a4dd855a981a7e830478b16ad405aa74
network-tools git ed0b846c sha256:d26644791ed5bef4892897b1da1161ee109a882d5106458bdf297aaf6e5969ae
oauth-proxy git 9ea1ebc8 sha256:65317c4c01e4f2d7aba27ad1b00328d179c9cbc303e6fb788f9fddb9d04227ef
oauth-server git 1ee9925b sha256:ee89ac7113580cfc5eb221169c94a390a7aece5dffa3b723f742593479573015
openshift-controller-manager git 79857a32 sha256:9a69024eecc55c612d20dfdba706c2c4ba2dfc093db3fb2e069263a9eb57927f
openshift-state-metrics git 689af8b8 sha256:1f5658863eefdfbbba398ef15f49037a42cd0aca689a7bcdf22282a4d158fa5d
openstack-cinder-csi-driver git ddbc0e4f sha256:a5bd7f04b0892ec5e10c9e2dac59727977d35744824456cd16803855252bd711
openstack-cloud-controller-manager git ddbc0e4f sha256:f06429e4980bb4b2b354ae1d7926203a57d5875bdf17b5aa9e06db8bdb133de1
operator-marketplace git 85947272 sha256:c0f0c895de6293c53284360b0697232932d841f7baa1511a97e42ef8e5cc36e6
ovirt-csi-driver git fe2a7fdf sha256:1ffbee1cd524692ce379bf6f0d39bc44f147fc253b55915471ad01c6166eeabf
ovirt-machine-controllers git 15a6add2 sha256:ac587774e49d3ca61fdffad3415cb1f8a93886e5a22a2eda21e46996f2d3c4d7
prom-label-proxy git 9f870bfa sha256:02776b170346447258d3f67f243daa844f8fd4f3519d22697b4712c26779f3c2
prometheus git 3197fa71 sha256:6a0b9dbcea9daa7dd537561e6e7cfd83def4299cd2aa7c8674a262c88b7deb73
prometheus-alertmanager git 579e3c68 sha256:e749b7c80a0538cbe0af73aa80a0f868f2ad8010d45561205934abc237b8ed04
prometheus-node-exporter git 1ab97f35 sha256:83bc9b1007e33544bcedb0491c05c2c215b18da1c944ece65925165bc91374ca
service-ca-operator git ab44f586 sha256:c69e2b80c00b1d8e08f79ed4c84e76575c64a4a1b40f5668c259d4c350ebfa92
telemeter git 03842e05 sha256:759e5fc59fd69691f6d70ff6fae034be55bb3b5db1cd96183f5f0d4a9d653935
vsphere-csi-driver git 4ece3d1b sha256:4829ba8b70b9fb8141d95f29b75691be5fff5ce626537c14af1f80c14246d5c5
vsphere-csi-driver-operator git 9f56afd3 sha256:3cb49625e180d80a30ac23d41ecebdb8f82f77d5d5d7902dc7d58b4cfa5cde38
vsphere-csi-driver-syncer git 4ece3d1b sha256:a713b8c273aa2d1a96008427ca8f730de480ba0a0b4ce57e636c9da1207a5667

aws-ebs-csi-driver

Bug 2103982: Fix build on ARM after rebase #204
Bug 2103982: Rebase to v1.4.0 #203
Full changelog

aws-ebs-csi-driver-operator

Bug 2077897: Set custom endpoint environment variable if available #155
Full changelog

aws-machine-controllers

Bug 2111004: Validate unknown regions using AWS API #441
Bug 2065483: Ensure IOPS setting is honoured on all supported block device types #436
Full changelog

azure-machine-controllers

Bug 2047845: Requeue create on invalid credentials errors #249
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-250: Allow setting bootstrap kubelet ip #6240
Bug 2095320: bump RHCOS 4.9 bootimage metadata #6159
Bug 2009024: Delete all the ports from tagged Neutron networks. #6122
Bug 2098158: Bootstrap timeout #6025
Bug 2099741: Collect whole journal and netstat data #6036
Bug 2043298: bump RHCOS 4.9 boot images #5963
Bug 2087972: Set rc-manager=unmanaged for on-prem bootstrap #5926
Bug 2025862: Improve host role management during assets creation #5408
Bug 2067092: stop considering Mint mode as supported on Azure (#5699) #5738
Bug 2052307: aws: Filter out local zones when generating a default list of zones #5627
Bug 2042443: openstack/Dockerfile: add make and gettext #5549
Bug 2038429: Azure: Update Default Instance Types #5520
Bug 2043590: vendor: bump aws terraform provider to v3.1.0-openshift-2 #5559
Full changelog

baremetal-operator

Bug 2100995: Uplift kustomize to v4 to remove go-getter dependency #235
Full changelog

baremetal-runtimecfg

Bug 2101794: Avoid kubernetes node port range #182
Bug 2026012: Ignore VIPs in node-ip show #161
Bug 2043650: Avoid dynamically allocated port range for haproxy #167
Bug 2049903: Add delay after sending bootstrap stop and start messages #169
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2103913: [must-gather] Add options for multi-node, host-network capture #1191
Bug 2103910: Introduce an option to retrieve the rotated log files for a pod #1190
Bug 2092265: [inspect] Add namespace-scoped networking resources to inspect #1157
Bug 2065174: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1089
Bug 2051944: Enhancing the output provided when backup collections are attempted #1057
Bug 2065302: Add TMOUT env to debug node pod #1090
Bug 2051626: bump(k8s.io/*) v0.22.6 #1060
Bug 2045008: bump discovery burst #1034
Bug 2053149: Fix catalog mirror from files #1064
Bug 2053222: Fix mirroring images that have dots in their namespace #1068
Bug 2039761: Remove git:// from new-app tests #1022
Full changelog

cloud-credential-operator

Bug 2055821: Remove Azure mint mode support as Active Directory Graph API will be sunset #453
Full changelog

cluster-authentication-operator

Bug 2107027: only ever include certificates in the oauth-serving-cert CM #578
Bug 2037944: endpoints checker: check only the custom hostname if configured #531
Bug 2052467: Custom route HTTPS certificate SAN validation #545
Bug 2077483: routeName used as customSecretName #560
Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #544
Bug 2062292: e2e: Pin Keycloack to the legacy variant #556
Bug 2039417: remove degraded condition 4.9 #542
Bug 2037274: starter.go: add invalidCertsController #535
Full changelog

cluster-autoscaler

Bug 2108949: Have VPA ignore phantom containers named “POD” #237
Bug 2066270: UPSTREAM: <carry>: Fallback to CAPI annotations #226
Full changelog

cluster-autoscaler-operator

Bug 2070277: add leader election flags to autoscaler deployment #244
Full changelog

cluster-baremetal-operator

Bug 2091747: Fix interpretation of Deployment Status Conditions #268
Bug 2053581: Calculating network stack only on supported Platforms #244
Full changelog

cluster-cloud-controller-manager-operator

Bug 2064837: Fix CCCMO metric ports configuration #180
Full changelog

cluster-config-operator

Bug 2075551: [release-4.9] backport api to commit 019a246c52 #252
Full changelog

cluster-etcd-operator

Bug 2102005: Upping defrag timeout to 1 minute #867
Bug 2095115: cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #849
Bug 2086119: Add summary to etcd alert rules #826
Bug 2082316: Add new etcd members to reviewers, add Allen to approvers #818
Bug 2068084: manually disable defrag #810
update OWNERS #721
Bug 2069830: turn on initial corruption check #772
Full changelog

cluster-image-registry-operator

Bug 2074052: Deployment annotations, runtimeClassName override and fs policy change #766
Bug 2059606: Retry on pruner failures #757
Full changelog

cluster-ingress-operator

Bug 2084336: Fix enabling PROXY protocol on an upgraded cluster #757
Bug 2097736: Fix loadBalancerServiceAnnotationsChanged check and update #786
Bug 2094054: Delete LoadBalancer-type service finalizer logic #771
Bug 2079517: Use externalTrafficPolicy: Cluster with OVN #713
Bug 2032677: Azure: Add Support for Azure Stack Hub #690
Bug 2064586: Disable keepalive for canary probe #722
Bug 2060111: Set Upgradeable=False if default cert has no SAN #711
Bug 2057518: Normalize the AWS internal LB annotation value #706
Bug 2058699: Upgradeable Condition in Operator and IC status #709
Full changelog

cluster-kube-apiserver-operator

Bug 2037274: pkg/operator#LegacyCNCerts: use increase function #1318
Bug 2044622: staticpod pruner: check if the cert directory exists to avoid panic #1297
Full changelog

cluster-kube-controller-manager-operator

Bug 2049907: allow cluster-policy-controller to fallback to default cert #600
Bug 2044622: Sync with the latest 4.9 library-go #593
Full changelog

cluster-kube-scheduler-operator

Bug 2026109: Disable balancedAllocation and add weight for HighNodeUtilization profile #379
Bug 2044622: Sync with the latest 4.9 library-go #405
Bug 2037665: Check policy name field independently of the configmap change #403
Full changelog

cluster-monitoring-operator

Bug 2030630: jsonnet: update kube-prometheus and kubernetes-mixin #1538
Bug 2059470: Unable to connect external Grafana with Openshift Monitoring #1549
Bug 2038406: Add custom profile metric for Node Tuning Operator to telemetry #1535
Full changelog

cluster-network-operator

Bug 2093978: Drop Node update permission for sdn-node #1476
Bug 2092265: Cleanup CNO relatedObjects #1468
Bug 2083079: Reserve port TCP/9104 for cluster-network-operator #1429
Bug 2085463: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1444
Adds dougbtv to owners [release-4.9] #1402
Bug 2058673: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.9] #1323
Bug 2057957: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1316
[release 4.9] Updates owners #1333
Bug 2040530: ovn: try to gracefully terminate ovn-northd and ovsdb #1279
Bug 2046476: sbdb and nbdb containers leave pid around if they restarted or crashed #1291
Bug 2038252: Backport 4.9 OVN drop icmp frag from other nodes on Azure cluster #1273
Full changelog

cluster-node-tuning-operator

Ignore Profile updates triggered by old operands (#361) #361
Full changelog

cluster-openshift-apiserver-operator

[release 4.10] Bug 2109399: openshift-apiserver pods never going NotReady #502
Bug 2047331: global pull secret not working in OCP4.7.4+ for additio… #491
Full changelog

cluster-storage-operator

Bug 2102760: Add missing ibm cloud annotations to prometheus rbac #294
Bug 2084219: Fix RelatedObjects when an API is missing in the API server #281
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #38
Full changelog

cluster-version-operator

OCPBUGS-230: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #823
Bug 2108619: pkg/cvo: retain initial completed update history entry #799
Bug 2091806: pkg/cvo: Separate payload load from payload apply #786
Bug 2032125: lib/resourcemerge/core: Merge volumeMounts by mountPath #715
Bug 2055314: Fixing the sync issue when desired version and channel changed at the same time #742
Full changelog

console

Bug 2089592: [release-4.9] Add debounce to tektonhub versions api call to avoid many calls #11553
Bug 2093910: change metrics queries based on metrics level configurations #11644
Bug 2097618: Avoid using ‘gp2’ hardcoded storage class #11716
Bug 2068203: Sample catalog is not displayed when one API call to the backend fails #11616
Bug 2084496: fix bug where “Update blocked” label incorrectly displa… #11484
Bug 2097554: Fix failing backend test after devfile registry update #11714
Bug 2082493: - Rolebindings page doesn’t load for normal users #11630
Bug 2084028: Improve Firehose cache, fix broken import #11554
Bug 2089847: Set dashboards timeout based on selected timespan #11561
Bug 2076690: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11362
Bug 2081389: Translate Extensions On Each Language Change #11430
Bug 2089546: [release-4.9] Eliminate use of lookaside cache and move to Cachito #11519
Bug 2084028: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11476
Bug 2030408: Disable replacement procedure from ODF UI #11483
Bug 2079231: fix bug where ClusterRole > RoleBindings did not display… #11405
Bug 2048631: missing volumes list in snapshot modal #10984
Bug 2046016: SnapShot with Disk Hot-plug hangs #10959
Bug 2078554: - Roles -> RoleBindings tab doesn’t show RoleBindings correctly #11392
Bug 2070827: Pipeline metrics: use prometheus-tenancy API to get data #11270
Bug 2073999: avoid pre-fetching tekton hub task versions #11312
Bug 2066771: Enhance Insights widget empty states #11218
Bug 2069258: Decode secrets before authorizing repository #11243
Bug 2071579: fix RoleBindings list page filter #11279
Bug 2077003: Fix failing TestGetRegistrySamples test #11368
Bug 2071692: Backport add-flow e2e tests to 4.9 #11300
-Bug 2021595: Key value field is not getting updated under Environment Tab in OpenShift Web Console #11176
Bug 2064454: return process data as array for list true in firehose as done in hooks #11256
Bug 2066298: fix ClusterOperator Status, Version col sorts #11206
Bug 2065549: Change the tekton hub api endpoint to use v1 api #11197
Bug 2060449: Fix potential issues with namespaces that contains just numbers #11133
Bug 2021702: Render correct conditions for csv vs installplan and subscriptioncondition #10423
Bug 2064454: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11184
Bug 2033712: Update CSR model & fix approval/denial process #10690
Bug 2055293: Sum total memory of unnamed container only #11073
Bug 2046641: Add warning alert when installing operator to non suggested namespace #10944
Bug 2055100: Revert “Add Dev Preview tag for IBM FlashSystem” #11068
Bug 2054608: omit rolebindings with no subjects #11055
Bug 2056826: Revert “Merge pull request #10316 from dtaylor113/e2e-tests-replace-codeready-operator” #11087
Bug 2052553: Add ‘Unavailable’ status for cluster operator #10125
Bug 2050271: show latest pipelinerun on the top of the list #11019
Bug 2033274: Fix tektonhub task upgrading issue #10678
Bug 2051523: change the Image Vulnerabilities tab to be project and not cluster scoped #10159
Bug 2053496: Monitoring: use namespace to detect the activePerspective instead of useActivePerspective hook #11042
Bug 2052850: Refreshing console from toaster taking to Install Operator #11025
Bug 2047350: Fix TypeError when application has HelmRelease #10990
Bug 2026553: Dispatch name filter value to redux #10553
Bug 2022158: omit extension when code ref resolution fails #10435
Bug 2023339: fix broken Argo CD link image #10461
Bug 2026414: use prometheus tenancy URL to load data in devconsole observe dashboard #10961
Bug 2041434: Monitoring: show a error message if wrong dashboard name is passed to the URL #10857
Bug 2047633: Fix that export download model wasn’t shown when primer export finished #10965
Bug 2040296: Enable error stack trace messages to scroll #10072
Bug 2042041: Console 2969: Changes to the project selector to allow system namespaces that are Favorited to be included in the Favorited list even when the option to Show default projects is unselected. #10886
Bug 2030128: Fix pipeline builder edge spacing to avoid improper edge shapes #10629
Bug 2044292: Filter superseded helm secrets and fix firehose to support partial metadata #10915
[release 4.9] Bug 2042683: Check rbac before polling for rules silences #10888
Bug 2044287: Add support for fetching partial metadata and fix helm list page crash #10914
Bug 2044259: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10913
Bug 2042456: Check if name label exists before comparing #10882
Full changelog

console-operator

Bug 2055494: Distinguish between route conditions #662
Bug 2055494: console-operator should report Upgradeable False when SAN-less certs are used #638
Bug 2075030: Re-enable TestMetricsEndpoint e2e test case #647
Full changelog

container-networking-plugins

Bug 2101664: Sysctl IFNAME [backport 4.9] #64
Full changelog

csi-driver-manila-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #152
Full changelog

docker-builder

Bug 2050287: Update buildah to v1.22.4 #285
Bug 2042444: getAssembleUser(): strip the group part out before checking the UID #280
Full changelog

docker-registry

Bug 2086864: Fix ICSP for subrepositories #333
Bug 2060363: Fix s3 driver for supporting ceph radosgw #327
Bug 2053222: Fix pull-through for images that have dots in their namespace #309
Bug 2042677: Fix auth for docker.io images #305
Bug 2029987: Try another registry if blob is not found #303
Full changelog

etcd

Update OWNERS #124
Bug 2077501: Merge Upstream etcd 3.5.3 into Openshift 4.9 #119
Full changelog

gcp-machine-controllers

Updating ose-gcp-machine-controllers images to be consistent with ART #166
Full changelog

haproxy-router

Bug 2010227: HTTPS redirect happens even if there is a more specific http-only route #367
Full changelog

hyperkube, pod

Bug 2106655: UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1325
Bug 2083554: UPSTREAM: 109933: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1256
Bug 2105663: UPSTREAM: <carry>: update list of deprecated apis #1316
[release 4.9] Bug Bug 2106962: UPSTREAM: <carry>: use correct base image for testing #1321
Bug 2075704: Backport 107821 and 107831 #1267
Bug 2075704: Revert Backport 107821 and 107831 #1266
Bug 2075704: Backport 107821 and 107831 #1242
Bug 2069310: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1233
Bug 2066390: Rebase 1.22.8 #1223
Bug 2050632: UPSTREAM: <drop>: Give warning when ipFamilyPolicy implicitly set #1170
Bug 2073153: golang toolchain unsupported parsers tag #1239
Bug 2065786: Backport 108366 OutofCpu Fixes #1222
Bug 2024643: Rebase v1.22.5 #1103
Bug 2043807: UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1134
Bug 2043807: add deprecated parser build flag #1166
Bug 2045972: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1144
Bug 2039373: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1107
Bug 2044438: UPSTREAM: 107637: backport inotify fix to 4.9 #1138
Bug 2040338: UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources #1125
Full changelog

insights-operator

Bug 2083467: Fix the clusteroperator conditions values when IO is degraded (#623) #623
Bug 2076903: Gather namespace names with overlapping UIDs (#605) (#611) #605
Bug 2066825: Gather some error messages from the kube-controller-manager containers (#598) (#599) #598
Full changelog

ironic

[OCP 4.9] Update OWNERS #278
Bug 2088319: Backport weak eTag handling fix to OpenShift 4.9 #277
Bug 2082103: Enable vMedia provisioning of Nokia servers #274
Full changelog

ironic-ipa-downloader

Bug 2100786: Include Fix discovering WWN/serial for devicemapper devices #93
Bug 2089313: Multipath fix for passive paths #92
[OCP 4.9] Update OWNERS #89
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2076256: Mitigate multiple CVEs #1432
Bug 2077289: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1433
Bug 2069498: [release-4.9] update bundle plugins #1422
Bug 2067128: [release-4.9] compute bundle plugins in build #1413
Bug 2058751: [release-4.9] 2022-02-15 Security Advisory #1406
Bug 2052063: bump openshift-sync to 1.0.53 #1385
Bug 2044941: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1369
Full changelog

k8s-prometheus-adapter

Updating ose-prometheus-adapter images to be consistent with ART #50
Full changelog

keepalived-ipfailover

Updating ose-egress-http-proxy images to be consistent with ART #91
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #93
Full changelog

kube-proxy, sdn

Bug 2093978: Remove node-tainting for too-small MTU #436
Bug 2090624: Masquerade in cluster traffic that is marked for egress IP #433
Bug 2063970: delete stale UDP conntrack entries for loadbalancer IPs #413
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator images to be consistent with ART #179
Full changelog

machine-api-operator

Bug 2111004: Add DescribeRegions permission for aws controller #1048
Full changelog

machine-config-operator

Bug 2108538: configure-ovs: improve handling of static ip and mac address configuration #3254
Bug 2098099: configure-ovs: clone connection to avoid selinux problems #3188
Bug 2089763: configure-ovs: persist profiles after auto-connect has been set #3183
Bug 2089763: configure-ovs: avoid restarting NetworkManager #3160
Bug 2071689: lib/resourcemerge: handle container env var deletions #3057
Bug 2081123: Add KUBELET_NODEIP_HINT to nodeip-configuration #3130
Bug 2070490: configure-ovs: reload NM only when necessary #3048
Bug 2074491: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3077
Bug 2062310: Add –templates flag to MCC bootstrap command #2998
Bug 2063327: [release-4.9] Ensure directories are created with usable permission bits #3013
Bug 2038249: Improvements for configure-ovs script #2901
Bug 2025474: annotate rendered config with OCP version #2964
Bug 2058511: Prepend to search domains instead of replacing #2966
Bug 2050911: tighten operator availability conditions #2946
Bug 2032985: fixes 1 to 1 containerruntime config mapping #2876
Bug 2043650: Avoid dynamically allocated port range for haproxy #2923
Bug 2044503: ovs-configuration: use lower than NM default ethernet route metric #2928
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #23
Updating ose-multus-route-override-cni-alt images to be consistent with ART #18
Full changelog

multus-whereabouts-ipam-cni

Bug 2064859: Sync context improvements [backport 4.9] #89
Full changelog

must-gather

Bug 2092265: Add networking resources #308
Bug 2052929: Fix ovn-nbctl commands for ipv6 #284
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#56) #56
Fix field selector (#51) #51
Full changelog

oauth-apiserver

Bug 2043807: add deprecated parser build flag #72
Updating ose-oauth-apiserver images to be consistent with ART #56
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #299
Bug 2053222: Fix importing images that have dots in their namespace #282
Bug 2043807: add deprecated parser build flag #277
Full changelog

openstack-cinder-csi-driver-operator

Bug 2110255: SWEET32: Improve TLS configuration for Kube RBAC Proxy #91
Full changelog

openstack-machine-controllers

Bug 2077381: Fix InstanceCreate port & trunk cleanup #234
Bug 2064633: Ensure subnets belong to the queried network #222
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2102559: opm bug fix #328
Bug 2079082: Replace collect-profile jobs that haven’t completed #293
Bug 2073967: Fix a bug in deletion of webhook service for replacement #284
Bug 2072995: Emit CSV metric on startup #280
Bug 2054848: Do not modify object from the lister cache (#2562) #253
Bug 2048450: Bump containerd to 1.4.11 #252
Bug 2000379: fix: ensure operator images are included in rendered bundles related images #180
Full changelog

ovirt-csi-driver-operator

Bug 2024491: Align manifest dir with storage operator #78
Bug 2056995: Increase timeouts for CSI driver #88
Full changelog

ovn-kubernetes

Bug 2115845: [release-4.9] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode #1233
Bug 2096802: duplicated IPs can be assigned to multiple Pods #1136
Bug 2105654: egressIP: node retrieval failure is not respected, causes panic #1186
Bug 2105266: EGW: Clean Stale Conntrack Entries #1192
Bug 2097157: Bumps OVN to 21.12.0-58.el8fdp #1140
Bug 2105277: Fix panics in DestroyNetworkPolicy if policy is nil #1183
Bug 2088630: EgressIP NATs are not being cleared correctly from the logical router #1103
Bug 2083239: [Downstream-only][4.9-only] Always add complete efw ACL rules #1088
Bug 2087226: enable exportloopref linter and fix violations #1096
Bug 2065782: [release-4.9][backport] Fix cleaning VF representor ports #1002
Bug 2077369: [release-4.9] fix ipv6 network policy #1046
Bug 2059700: [4.9z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs #981
Bug 2058683: [4.9z] Multiple ExGW cache validation/improvements #972
Bug 2068619: egressgw: fix deadlock due to behavior of RWLock #1012
Bug 2063835: backport 2052975 to 4.9 #996
Bug 2060080: [release-4.9] Network Policy fixes #985
[release 4.9] Update project owners #991
Bug 2055317: Hack ITP:preferLocal for DNS service #964
Bug 2034744: Fix egress IP allocator sync #887
Bug 2053310: [release-4.9] Fix pod-creation-retry #951
Bug 2045576: [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set #938
Bug 2054299: Lock the reassignment procedure during node deletion to avoid races #955
Bug 2056883: Revert “HACK: disable skip_snat for load balancers.” #942
Bug 2055549: Fix podHandlerCache key #962
Bug 2040594: Create iptables NAT rules also for loadbalancer services #905
Bug 2014003: Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services #952
Bug 2054139: Don’t return err when annotation cannot be unmarshalled #954
Bug 1996751: Bump OVN to 21.12 #959
Bug 2028812: Modification of ClusterIPs shall trigger svc update #872
Bug 2042494: [4.9] Set the OVS port as transient #914
Bug 2022049: EgressGW: only return unique elements from getRouteInfosForGateway() #826
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2052201: Address race condition in recreate flow for statefulset #167
Full changelog

tests

Bug 2101429: test: switch to testing CapBnd over CapInh #27279
Bug 2064800: skip imageregistry serial test on disconnected environments #27189
Bug 2077167: disable unidling test failing under ovn-k #27172
Bug 2087230: disable flaky unidling test #27150
Bug 2076241: Remove second reference to BlueOcean annotations #27066
Bug 2076256: Remove BlueOcean annotation check #27038
Bug 2072902: [release-4.9] exclude loki-promtail from duplicated events #26986
Bug 2055380: cleanup network policy ACL extended test #26947
Bug 2063284: Add debug info for signature test #26903
Bug 2041358: images: port image signature workflow test to OCP4/UBI8 #26751
Full changelog

thanos

Bug 2074413: Thanos Querier high CPU and memory usage till OOM #81
Full changelog

vsphere-problem-detector

Bug 2060214: Fix stale metrics #82
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github