4.10.0-0.okd-2022-05-28-062148

New features since version 4.9.0-0.okd-2023-08-26-123046

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.10.0-0.okd-2022-05-28-062148

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

Changes from 4.10.0-0.okd-2022-04-23-131357

Created: 2022-05-28 09:18:45 +0000 UTC

Image Digest: sha256:6667275cbdb7fd9339f3eae015a29704b42b994bed40790a9b31a54834125152

Release 4.10.0-0.okd-2022-05-28-062148 was created from registry.ci.openshift.org/origin/release:4.10.0-0.okd-2022-05-28-062148

Components

Kubernetes 1.23.5
Fedora CoreOS upgraded from 410.35.3 to 410.35.5

Rebuilt images without code change

ovirt-csi-driver git 633cbb6d sha256:206fdd4d7e9a37452442a52b511ff9445ec08922dd2c45eaaf7fe9cce45b9810

alibaba-cloud-controller-manager

NO-JIRA: Update OWNERS #53
OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
Update OWNERS #36
Rebase onto latest upstream version #35
OCPBUGS-10120: Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #30
Update OWNERS #29
Update OWNERS #27
Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #26
Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master into master #21
Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #22
Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master into master #20
Full changelog

alibaba-disk-csi-driver-operator

Bug 2076671: Auto increase volume size to 20 GiB in the default storage class #28
Full changelog

aws-ebs-csi-driver-operator

Bug 2077894: Set custom endpoint environment variable if available #154
Full changelog

aws-machine-controllers

Bug 2083270: Custom DHCP Option Set: empty domain-name is a valid custom domain #37
Full changelog

azure-disk-csi-driver-operator

STOR-1713: Mark the repository obsolete #125
STOR-1714: Release leadership on SIGTERM #122
STOR-1696: Fix gofmt #119
STOR-1688: Chore: add .snyk file to ignore false positives #117
OCPBUGS-25537: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART #118
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #116
OCPBUGS-24829: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART #112
OCPBUGS-23832: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #111
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #113
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #110
OCPBUGS-22560: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #107
STOR-1276: Enable support for mounting volumes with SELinux context #93
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #106
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #100
update readme #99
simplify workload identity feature enablement #92
update readme #94
OCPBUGS-19172: Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #98
OCPBUGS-16654: Revert revert “STOR-1065: Rework sidecar bindings to b… #88
OCPBUGS-16496: Bump library-go to remove dependency on goproxy #90
OCPBUGS-16783: Chore: Update OWNERS #89
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #87
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #84
OCPBUGS-14824: Bump azure-disk-csi-driver-operator library-go #85
CCO-324: Unrevert “CCO-324: add support for workload identity” #83
Revert “CCO-324: add support for workload identity” #82
CCO-324: add support for workload identity #78
STOR-1168: Bump common libraries #81
OCPBUGS-12559: Bump golang.org/x/net@v0.9.0 #80
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #79
OCPBUGS-8683: Add management workloads annotations #74
OCPBUGS-10842: Reorder static resources to create RBAC first #75
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #73
STOR-873: Implement custom keys in Azure Disk CSI driver operator #68
OCPBUGS-7617: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #69
OCPBUGS-6658: Disable managed identity authentication #67
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #66
STOR-947: support disabling default StorageClass via ClusterCSIDriver #63
STOR-1078: Add hostPaths necessary for SELinux mounts #64
Bug 2106736: Add multiplePVsSameID capability #65
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #62
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #61
OCPBUGS-3659: Don’t expose metrics port to whole network #60
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #56
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #55
STOR-858: Bump github.com/openshift/* and k8s.io/* #53
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #51
Bug 2095049: Only use credentials that are provided by the azure-inject-credential… #49
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #48
Mark CSI StorageClass as the default one #47
Bug 2062152: Increase pod startup timeout in e2e tests #45
Bug 2073373: Sync cmdline arguments with upstream #46
Fix CSIDriver fsGroupPolicy #44
Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

Bug 2077904: Fix empty string usage in ValidateForProvisioning #5835
Bug 2045771: bump RHCOS 4.10 bootimage metadata #5932
Bug 2083335: Set rc-manager=unmanaged for on-prem bootstrap #5876
Bug 2084547: update azure arm templates to support customer provided vnet #5892
Bug 2083327: [release-4.10] Add ‘ARG TAGS=“”’ line for each build step #5874
Bug 2076613: [release-4.10] data/data/coreos/fcos.json: update initial FCOS to 35.20220327.3.0 #5820
Bug 2079589: azurestack: stop pinning to Standard_LRS for disk type #5851
Bug 2041765: Update BMO vendor #5705
Bug 2077411: for vsphere ipi add cluster domain to the uploaded vm configs so that 30-local-dns-prepender can use it #5827
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2087248: Add the ReleaseAccepted condition to the oc adm upgrade command #1147
Bug 2080151: Remove network CRDs scheme registration #1122
Bug 2084429: Fix project command auto completion #1131
Bug 2077332: pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates #1114
Bug 2079325: Fix kubectl version to 1.23.0 #1117
Full changelog

cloud-network-config-controller

Bug 2075444: Get subnet information from subnet instead of from network addresses #40
Bug 2076935: azure: default empty environment to AzurePublicCloud #37
Full changelog

cluster-cloud-controller-manager-operator

Bug 2079791: Ensure release version is injected into all controller status clients #187
Full changelog

cluster-config-operator

Bug 2072739: [release-4.10] Bump openshift/api to a83e6f8f1d #247
Full changelog

cluster-etcd-operator

Bug 2082312: Adding Thomas to reviewers, adding Allen to approvers #817
Bug 2080554: manually disable defrag #809
Bug 2079660: pkg/operator/upgradebackupcontroller: Pivot from Failing to ReleaseAccepted #806
Bug 2055833: Increase IBMCloud VPC heartbeat timeout to 500ms and leader election timeout to 2500ms #794
Bug 2059632: pkg/operator/metriccontroller/fsync_controller: Fix “treshold” -> “thresholds” typos #757
Bug 2076773: Update owners to add new team members #793
Full changelog

cluster-image-registry-operator

Bug 2084514: Fix cloudfront middleware configuration #780
Bug 2083559: IBMCloud: Add admin permissions to CR #778
Full changelog

cluster-monitoring-operator

Bug 2083460: Set timeout across Grafana components #1654
Bug 2077722: Adjust NodeFilesystemSpaceFillingUp thresholds according default kubelet GC behavior #1665
Bug 2075757: UWM: add SAR capabilities to prometheus cluster role #1653
Bug 2075757: use bearer token as fall-back authn method #1641
Full changelog

cluster-network-operator

Bug 2058508: Add rolling update strategy for Kuryr-CNI. #1321
Bug 2083593: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1436
Bug 2079031: Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [backport 4.10] #1398
Bug 2081149: Reserve port TCP/9104 for cluster-network-operator #1418
Adds dougbtv to owners [release-4.10] #1401
Full changelog

cluster-node-tuning-operator

Ignore Profile updates triggered by old operands (#357) #357
Full changelog

cluster-storage-operator

STOR-2078: Typo in clusterRole resources for VolumeAttributesClasses #549
OCPBUGS-45617: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.19 #546
OCPBUGS-45737: Remove unecessary resources from the guest cluster #544
STOR-2078: Add RBAC rule for Volumeattributesclass #545
STOR-2078: Add OPERATOR_IMAGE_VERSION var to AWS-EBS operator #542
NO-JIRA: Remove kustomize-related annotations from generated assets #531
OSASINFRA-3635: Add manila csi to hypershift #527
STOR-2078: Add var OPERATOR_IMAGE_VERSION #539
NO-JIRA: Add openstack-approvers to root OWNERS #535
OSASINFRA-3632: Rename expected config map for HCP management cluster #538
STOR-2017: Bump all deps for 4.18 #523
OSASINFRA-3632: Add Hypershift support to openstack-cinder #525
STOR-2078: Add ClusterRole Volumeattributesclass for provisioner and resizer #534
OSASINFRA-3483: Prepare for openstack-cinder Hypershift integration #510
OCPBUGS-43767: Fix PodStartupStorageOperationsFailing alert #533
AUTH-482: set required-scc for openshift workloads #524
NO-JIRA: Remove redundant clusterrole rules #532
NO-JIRA: Add README to assets + remove redundant definitions #526
STOR-1823: Remove shared-resource CSI driver from CSO #509
HOSTEDCP-2033: Add ARO HCP environment vars to CSI deployment #517
OCPBUGS-41365: add KUBE_RBAC_PROXY_CONTROL_PLANE_IMAGE to other neede… #522
NO-JIRA: assets: shared-resource: hypershift: add pull-secret to operator SA #519
OCPBUGS-41365: fix typo CONTROL_PLANE_KUBE_RBAC_PROXY_IMAGE -> KUBE_R… #518
OCPBUGS-41365: add ability to control kube rbac proxy container image… #515
AUTH-482: set required-scc for openshift workloads #516
NO-JIRA: Remove OLMOperatorRemovalController #513
NO-JIRA: Always recreate manifests #511
NO-JIRA: create CRDs from openshift/api #505
API-1835: bump openshift/api #504
STOR-1422: Bump openshift/api to get EFS volume metrics #502
OCPBUGS-41138: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.18 #500
OCPBUGS-37663: include azure perms for route table #499
OCPBUGS-38183: Use restricted-v2 SCC and remove runAsUser in Hypershift #497
STOR-1422: Bump(openshift/api): to get EFS volume metrics #496
CFE-879: Add TagUser role to creadentials request of GCP PD operator #490
OCPBUGS-37488: Pass TOOLS_IMAGE env var to AWS EBS CSI Driver operator #494
CNV-44992: HCP custom tolerations integration #493
OCPBUGS-37633: Add permissions for vsphere_problem_detector to access clustercsidrivers #495
STOR-1767: Disable vsphere-problem-detector alerts if ManagementState==Removed #487
STOR-1596: Bump all deps for 4.17 #486
MON-2065: manifests: add k8s storage rules #477
OCPBUGS-36169: deactivate MultipleDefaultStorageClasses alert immediately after being fixed #483
STOR-1767: add env var OPERATOR_NAME to vsphere csi operator deployment #485
STOR-1593: add patch role to PVs for provisioner #482
OCPBUGS-34590: revert vsphere problem detector controller name change #479
OCPBUGS-34291: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.17 #476
STOR-1839: VSphereDriverConfiguration feature Accessible-by-default #478
STOR-1839: VSphereDriverConfiguration feature Accessible-by-default #475
OCPBUGS-34291: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.17 #474
SPLAT-1555: Added featuregate for vSphere Multi vCenter. #465
OCPBUGS-28230: enforce termination message policy on all platform pods #470
OCPBUGS-29126: vsphere-problem-detector: don’t set Available condition #456
OCPBUGS-28230: enforce termination message policy on all platform pods #467
STOR-1804: update ClusterCSIDriver CRDs #464
AUTH-482: set required-scc for openshift workloads #459
OCPBUGS-28748: log default storage class names when collector is triggered #460
OCPBUGS-30498: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #463
STOR-1758: Add azure file hypershift #454
OCPBUGS-28879: Fix problem-detector proxy setting #457
OCPBUGS-29573: Apply hypershift cluster-profile for ibm-cloud-managed #458
OCPBUGS-28765: Remove master node selector from azure-csi-driver-operator deployment #448
OCPBUGS-29196: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #455
STOR-1574: Bump all deps #447
STOR-1611: remove ibm-vpc-node-label-updater #445
OCPBUGS-27159: Allow vSphere CSI driver to be disabled #444
STOR-1289: Move vSphere prometheus rules to CSO #442
STOR-1354: Remove Alibaba Disk CSI Driver #440
STOR-1574: Bump library-go #443
STOR-1722: Azure disk hypershift #420
STOR-1714: Release leadership on SIGTERM #437
OCPBUGS-22994: Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert #430
OCPBUGS-22422: Fix PodStartupStorageOperationsFailing alert #436
STOR-1688: Chore: add .snyk file to ignore false positives #434
OCPBUGS-25564: Updating ose-cluster-storage-operator-container image to be consistent with ART #435
CCO-251: replace instanceAdmin role with specific compute permissions #429
OCPBUGS-24927: Updating ose-cluster-storage-operator-container image to be consistent with ART #432
OCPBUGS-23852: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #431
OCPVE-789: annotate credentials request manifests #418
STOR-1277: Add Prometheus rules for SELinux telemetry #422
TRT-1376: Revert #410 “CCO-251: use granular permissions for gcp credentails request” #426
CCO-251: use granular permissions for gcp credentails request #410
OCPBUGS-24112: Updating ose-cluster-storage-operator-container image to be consistent with ART #424
STOR-1487: bump openshift/api to get IBMCloudCSIDriverConfigSpec #423
OCPBUGS-24027: forbidden access to resource on shared-resource-csi-driver-operator #425
STOR-1402: Chore: update libraries in all operators [4.15] #421
OCPBUGS-23120: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #417
STOR-1453: Grant permissions to access apiserver to CSI driver operators #415
OCPBUGS-22594: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #414
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #411
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #404
OCPBUGS-13669: skip Azure File installation on Azure StackHub #395
OCPBUGS-19073: Move KAS access label to right place #403
update readme #400
OCPBUGS-19073: Add KAS label to aws-ebs-operator #399
OCPBUGS-19184: Updating cluster-storage-operator images to be consistent with ART #398
STOR-1446: Restart vsphere-problem-detector-operator Pods if serving-cert changed #394
STOR-1274: use granular permissons for Azure credential requests #388
STOR-1432: hypershift: pass through control plane images to AWS EBS CSI driver operator #393
STOR-1432: hypershift: add independent refs for AWS EBS driver controller images #392
OCPBUGS-17356: Fix PodStartupStorageOperationsFailing alert #391
Remove “get” verb from “events” resource of RBAC for provisioner sidecar #390
OCPBUGS-11359: Remove unused versions from status #374
OCPBUGS-16783: Chore: Update OWNERS #389
OCPBUGS-16265: Publish csi sidecar clusterroles earlier #386
OCPBUGS-15940: Revert revert of hypershift cleanup #385
Revert “STOR-1369: Start hypershift refactor” #384 #384
STOR-1369: Start hypershift refactor #381
OCPBUGS-13696: Warn about CBT enabled VMs via vsphere-problem-detector #371
OCPBUGS-14053: decrease severity for MultipleDefaultStorageClasses alert #382
STOR-1065: Publish ClusterRoles for csi driver sidecars #379
STOR-1167: Add permissions needed by fast snapshots to AWS CSI driver #369
CCO-319: Add serviceAccountNames to azure-disk and azure-file credentials #364
OCPBUGS-13187: Make vsphere-problem-detector alerts configurable #380
CCO-324, CCO-325: pass version to azure operators #372
OCPBUGS-13914: allow removal of vsphereStorageDriver field in 4.14 #378
STOR-1334: update storage operator to read featuregates from API #376
Revert “update storage operator to read featuregates from API on standalone OCP” #375
STOR-1334: update storage operator to read featuregates from API on standalone OCP #368
OCPBUGS-11617: Bump github.com/prometheus-operator/prometheus-operator #358
Updating cluster-storage-operator images to be consistent with ART #365
OCPBUGS-11729: VSphereStorageDriver does not document the platform default #360
OCPBUGS-11493: vsphereStorageDriver validation is misleading #357
OCPBUGS-8683: Add management workloads annotations #350
OCPBUGS-11112: Add missing workload label to openshift-manila-csi-driver NS #353
OCPBUGS-8691: Hypershift: set control plane operand properties #352
Updating cluster-storage-operator images to be consistent with ART #349
OCPBUGS-8328: assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #346
BUILD-571: enable shared resource operator to run in an hypershift guest cluster #342
STOR-875: Implement custom keys in AWS EBS CSI driver operator #338
OCPBUGS-5410: add ReEncrypt KMS permissions #345
BUILD-407: Revert “remove tech preview feature gate for shared resources” #343
OCPBUGS-6992: Add UID to CSO Pod to be able to run with custom SCCs #344
MULTIARCH-3203: Hypershift changes for CSO moved to CP on PowerVS CSI driver operator #331
STOR-1123: Add alert about topology misconfiguration #334
STOR-1128: Stop creating an in-tree SC for vSphere #340
OCPBUGS-7483: Revert “Merge pull request #332 from bertinatto/default-sc” #339
STOR-1128: Remove defaultstorageclass controller #332
BUILD-407: remove tech preview feature gate for shared resources #335
OCPBUGS-7300: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #336
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #333
Updating cluster-storage-operator images to be consistent with ART #330
OCPBUGS-4173: Restart vsphere-problem-detector after credentials change #328
OCPBUGS-4508: User real node name in failing mount alerts #329
Bug 2066664: Remove wildcard use in rules for CSI operators and drivers #270
STOR-1039: Make changes into CSO for hypershift #318
OCPBUGS-2880: Fix panic on empty featureGate.spec.customNoUpgrade #325
Bug 2093016: Add alert about attach / mount failing #324
OCPBUGS-1361: Reword vSphere problem detector check alerts #322
Remove specific UID from cluster-storage-operator #316
OCPBUGS-1904: Allow CSI operator to get CRDs #323
add storage capability annotation #303
Bump go to 1.19 #321
STOR-858: Bump github.com/openshift/* and k8s.io/* #317
STOR-1050: bump openshift/api to latest master #319
Remove in-tree AWS EBS and GCP PD storage classes #312
TRT-534: Add client certificate and key to service monitor #306
OCPBUGS-946: Resource csi.storage.k8s.io/csinodeinfos added to powervs-block-csi-d river-operator-clusterrole #315
Updating cluster-storage-operator images to be consistent with ART #296
Bug 2112237: correct sc error messages for ibm and alibaba platforms #310
Add PowerVS Block CSI Driver Operator #304
Bug 2108054: Allow Prometheus to scan openshift-cluster-csi-drivers namespace #308
STOR-956: Bump(openshift/api): to get CSI changes #307
Bug 2108054: Add alert about unsupported CSI driver #305
Bug 2107043: HTTPS_PROXY ENV missing in some CSI driver operators #301
Bug 2101645: DefaultStorageClassController reports fake message on azure and openstack #292
Bug 2077599: Fix vCenter / ESXi version alerts #290
Bug 2097400: Allow Shared Resource Driver to operate validating webhook #288
Bug 2077050: Un-Revert “OCP should default to pd-ssd disk type on GCP” #284
Bug 2081557: Fix DefaultStorageClassController getting Available=False on error #277
Bug 2088533: remove unused ‘-v’ for shared resource operator as part of klogv2/openshift api/ k8s bump #287
Bug 2086231: BUILD-405: Install the Shared Resource CSI Driver WebHook #278
Updating cluster-storage-operator images to be consistent with ART #282
Bug 2077050: Revert “OCP should default to pd-ssd disk type on GCP” #283
Bug 2077599: Alert on vCenter < 7.0.2 #279
Bug 2077050: OCP should default to pd-ssd disk type on GCP #273
Bug 2079197: alert when more than one default storage class is detected #276
manifests/deployment: comply to restricted pod security level #274
remove openstack in-tree storage class #271
remove azure in-tree storage class #272
Azure File CSI Driver Operator is GA in OCP 4.11 #266
Add missing ibm cloud annotations to prometheus rbac #267
no CredentialsRequests in ibm-cloud-managed #253
Bug 2060509: Incorrect installation of ibmcloud vpc csi driver in IBM… #264
Bug 2049872: cluster storage operator AWS credentialsrequest lacks KMS privileges #263
Bug 2043132: Add metrics for vsphere operator #262
Bug 2050300: Don’t set generation in object comming from cache #261
Updating cluster-storage-operator images to be consistent with ART #260
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #41
Full changelog

cluster-version-operator

Bug 2083370: Do not save desired update on load failures #776
Bug 2080058: pkg/cvo/updatepayload: Prune previous payload downloads #769
Full changelog

console

Bug 2084430: fixes apiversion for k8s svc and resource selection for sink for form yaml switcher #11482
Bug 2087065: show Limit exceeded state for large number of nodes in topology #11506
Bug 2050273: Update MON_DISK_LOW whitelisted alert documentation URL #11411
Bug 2089162: Change learn more link in virtualization -> migration tool #11541
Bug 2089547: Eliminate use of lookaside cache and move to Cachito #11551
Bug 2088430: Set dashboards timeout based on selected timespan #11532
Bug 2084091: MCG standalone deployment page goes blank when the KMS option is enabled #11479
Bug 2088247: Different status shows on VM list page and details page #11538
Bug 2087041: back port conditional updates #11487
Bug 2088281: Attached disk keeps in loading status when add disk to a power off VM by non-privileged user #11530
Bug 2088246: Overview page crash if no labels available #11525
Bug 2051433: [release-4.10] Create HANA VM does not use values from customized HANA templates #11011
Bug 2088255: Adding missing annotations to create VM from YAML #11527
Bug 2088019: The default YAML on vm wizard is not latest #11522
Bug 2083729: Fix Filter Dropdown State Management #11471
Bug 2084489: Create VM from template that has sourceRef - will now reflect sourceRef at yaml #11485
Bug 2076989: Fix ResourceQuota dashboard card and ACRQ donut label #11367
Bug 2083385: fix bug where “Update blocked” label incorrectly displa… #11466
Bug 2076370: fix CRD name filter #11356
Bug 2083551: customize wizard is crashed #11469
Bug 2076275: Update and scope our breadcrumb padding rule so it doesn’t effect a pure implementation #11365
Bug 2076777: add update mode to Update cluster #11364
Bug 2074163: remove .pf-c-button.pf-m-link override #11315
Bug 2071904: Translate Extensions On Each Language Change #11348
Bug 2078385: Remove reference to deprecated v2v-vmware ConfigMap #11387
Bug 2076369: fix bug where ClusterRole > RoleBindings did not display… #11354
Bug 2073477: Add IBM Flashsystem volume types #11308
Bug 2077641: Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11382
Full changelog

console-operator

Bug 2076453: Console operator should not block installation/upgrade process when set to Removed state #649
Full changelog

etcd

Update OWNERS #123
Bug 2077498: Merge Upstream etcd 3.5.3 into Openshift 4.10 #118
Full changelog

haproxy-router

Bug 2076371: generateRouteHostRegexp: Escape blanks #385
Full changelog

hyperkube, pod

Bug 2067464: Backport 107821 and 107831 #1241
Bug 2075831: UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved… #1244
Bug 2074094: UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic #1237
Full changelog

hypershift

Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1416
feat(cpo): adhere to upgrade order from kube version skew policy #1410
Set shutdown params to improve graceful shutdown #1387
fix(cpo): Scope down secrets access for olm collect profiles cj #1378
move to ga apis for all components now that management clusters at minimum release boundary #1361
configure cipher suites to prevent using medium strength ssl ciphers #1359
Use apiserver host/port from InfraStatus in reconciling Kube API Server #1333
Ignition server: Actually use workdir #1317
Use forked processes instead of pods to generate ignition payload #1311
disable reconcile of registry config in IBMCloud deployments #1309
Full changelog

ibm-vpc-block-csi-driver-operator

Bug 2077419: [4.10] [ibm-vpc-block] Unable to change default storage class #35
Full changelog

insights-operator

Bug 2081844: Fix the clusteroperator conditions values when IO is (#619) #619
Bug 2079318: Remove PSP gatherer (#608) (#615) #608
Full changelog

ironic-agent

Bug 2053752: import time #49
Bug 2053752: Bump retries for UEFI boot configuration #48
Bug 2061278: [release-4.10] Retry UEFI boot Configuration #43
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2080204: Correctly declare Jenkins URL with trailing slash #1441
Bug 2076253: Mitigate multiple CVEs #1430
Full changelog

kube-proxy, sdn

Bug 2087763: Probe failures and pod restarts during 4.7 to 4.8 upgrade #431
Bug 2082451: Masquerade in cluster traffic that is marked for egress IP #430
Bug 2066466: Fix releasing egress IP in cloud environments #416
Bug 2064807: Rebase SDN k8 1.23.4 #415
Full changelog

kube-state-metrics

Bug 2085329: Use v1 PodDisruptionBudget and CronJob resources #72
Full changelog

kuryr-cni, kuryr-controller

Bug 2077384: Increase cni_request_duration buckets #656
Full changelog

machine-config-operator

Bug 2069798: ClusterRoleUpdated/ClusterRoleBindingUpdated Spamming Event Logs #3045
Bug 2079097: Ensure only one apiserver-watcher process is active on a node. #3121
Bug 2071696: Add KUBELET_NODEIP_HINT to nodeip-configuration #3058
Bug 2072621: Fix bootstrap-unit test failure caused by #3008 #3109
Bug 2076308: Move removeUpdateInProgressTaint functionality to mcc #3091
Full changelog

machine-os-content

manifests/99-sca-disable.yaml: quote bool value #369
Unpin kernel #364
Bump FCOS to latest stable #363
Bump FCOS to latest stable #353
Full changelog

machine-os-images

Bug 2090022: Get rid of lookaside cache in OCP build #17
Revert .ci-operator.yaml #18
Updating ose-machine-os-images images to be consistent with ART #9
Bug 2077305: Remove destination coreos if it exists #14
Full changelog

must-gather

Bug 2069554: Collect NMState resources when operator is installed #294
Full changelog

network-metrics-daemon

Fix field selector (#50) #50
Full changelog

oc-mirror

Bug 2075051: [release-4.10] fix: adds handling for channel with different prefixes in cincinnati.go (#413) #413
Full changelog

openshift-state-metrics

Updating openshift-state-metrics images to be consistent with ART #80
Full changelog

openstack-machine-controllers

Bug 2077380: Fix InstanceCreate port & trunk cleanup #233
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2080609: Fix GRPC CheckRegistryServer function (#2756) #298
Full changelog

ovn-kubernetes

Bug 2088627: EgressIP NATs are not being cleared correctly from the logical router #1098
Bug 2087203: enable exportloopref linter and fix violations #1095
Bug 2082467: Fix cluster/status parsing for single-member db cluster (SNO) #1082
Bug 2083116: delete SNAT2NIP if pod.node == egressNodeServingPod #1084
Bug 2080069: Cleanup conntrack entries when services are deleted #1061
Bug 2080895: Ensure stale information is not present in metrics with labels when they change #1070
Bug 2080882: Fix incorrectly logged error when searching for ovnkube master pod #1069
Bug 2080925: Don’t spawn go routines for adding metric events #1071
Bug 2079546: [release-4.10] call clearInitialNodeNetworkUnavailableCondition for noHostSubnet nodes #1057
Bug 2065780: [release-4.10][backport] Fix cleaning VF representor ports #1001
Bug 2073411: Fix ETP=local for host->svc traffic #1063
Bug 2073137: Fix lgw flows for ingress-svc traffic #1026
Bug 2074839: [release-4.10] fix ipv6 network policy #1043
Bug 2052017: Retry Pod Deletions on Failure #1025
Full changelog

tests

Bug 2080198: skip tests for etcd leaders when etcd revisions change a lot #27076
Bug 2080759: Remove BlueOcean annotation check #27065
Bug 2077995: Best matcher single node OVN #27048
Bug 2059845: [test]: bump upper bounds for AWS single node and GCP #27055
Bug 2077414: MGMT-9440: Fix single node serial tests API crash #27037
Bug 2074714: synthetictests: skip “alert/Watchdog must have no gaps or changes” on SNO upgrades #27011
Bug 2074448: exclude loki-promtail from duplicated events #27010
Bug 2077516: don’t fail when a query returns warnings #27039
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github