4.10.0-0.okd-2022-04-23-131357

New features since version 4.9.0-0.okd-2023-08-26-123046

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.10.0-0.okd-2022-04-23-131357

Team Approvals:

No tests for this release

Upgrades from:

4.10.0-0.okd-2022-04-22-164413 (changes) - Failed Failed
4.10.0-0.okd-2022-03-07-131213 - F F S
4.9.0-0.okd-2022-02-12-140851 (changes) - F F F F F

Upgrades to:

4.10.0-0.okd-2022-05-28-062148 (changes) - Success
4.10.0-0.okd-2022-05-07-021833 (changes) - F F F S

Changes from 4.10.0-0.okd-2022-03-07-131213

Created: 2022-04-23 14:02:49 +0000 UTC

Image Digest: sha256:136c507d8909d4a5f6368713da12766a63a2229ad1b58bc00793baa9d8aab8cc

Release 4.10.0-0.okd-2022-04-23-131357 was created from registry.ci.openshift.org/origin/release:4.10.0-0.okd-2022-04-23-131357

Components

Kubernetes upgraded from 1.23.3 to 1.23.5
Fedora CoreOS upgraded from 410.35.1 to 410.35.3

New images

ovirt-installer git 08bc665c sha256:9d78f16f9c9cd527b48985d03494d5d95a1a9b53b73430d2a389f185b1a3ee18

Rebuilt images without code change

azure-file-csi-driver git f88155b4 sha256:aee53c3846d79b7cef26f1cfc9dca0eb3acdfebd2f17ac1b951eeaec25bc4438
azure-file-csi-driver-operator git 3807eb37 sha256:24b97aba6e4dca5df9b7a3a2945d54d6f3516cdcfdb7f9331e54f5a90275483f
cluster-baremetal-operator git 76fd38be sha256:9b64b9c453d58bdf72a4a89202cbd780b5ab9e9010c71d96f3b1625c66cc54fa
cluster-bootstrap git f22d1c60 sha256:2910fb77e51807b8ff8d41c2d9794ae369f076afb9f4bef69e2784a01ea16696
coredns git 3ec1ee7d sha256:82723e1d41ab68c0fde2e2f8bfa22ea470a11dd3101d7d214cdf9dd63171788d
csi-driver-manila git df0b27de sha256:482cbaef97c7532236d07c810899194cbe09ac014de3fd8b461a49bfb35383b0
openstack-cinder-csi-driver git df0b27de sha256:c4f7fe4e32e5caf3ad17b8e91808f63075d6c97017f85c3ba23144e2b23898b4
openstack-cinder-csi-driver-operator git e0b57159 sha256:192366a0e644e63647559abbee4bb9d3a20063337561180bc5f89dfaa85692f0
openstack-cloud-controller-manager git df0b27de sha256:36b9d2eebc016564d22cf1263540d3f4544539960c0abb7656002c1266344eba

baremetal-installer, installer, installer-artifacts

Bug 2068948: Update region check for coreos AMIs #5752
Bug 2072135: vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5773
Bug 2062429: IBMCloud: Missing infra providertype #5693
Bug 2065808: stop considering Mint mode as supported on Azure (#5699) #5717
Bug 2064731: fix(ibmcloud): Properly match regex for DNS destroy #5711
Bug 2051334: Remove non-public AWS regions from list of regions #5624
Bug 2062748: vsphere: Not found TagCategory when destroying ipi cluster #5696
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2068763: make sure that we check for resorces and files before picking the simplest path #1098
Bug 2068474: expose –keep-startup flag for oc debug #1097
Bug 2049427: Enhancing the output provided when backup collections are attempted #1056
Bug 2060419: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1083
Bug 2051267: pkg/cli/admin/upgrade: Mention –allow-explicit-upgrade next step when appropriate #1052
Full changelog

cloud-network-config-controller

Bug 2062133: Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #28
Full changelog

cluster-authentication-operator

Bug 2060473: e2e: Pin Keycloack to the legacy variant #555
Full changelog

cluster-autoscaler-operator

Bug 2069095: add leader election flags to autoscaler deployment #243
Full changelog

cluster-csi-snapshot-controller-operator

Bug 2062197: Fix race when setting Progressing condition #115
Full changelog

cluster-etcd-operator

Bug 2059347: Fix FSyncController degraded latch #755
Bug 2069825: turn on initial corruption check #771
Full changelog

cluster-image-registry-operator

Bug 2074050: Deployment annotations, runtimeClassName override and fs policy change #765
Full changelog

cluster-ingress-operator

BUG 2063283: Disable keepalive for canary probe #719
Bug 2059210: Set Upgradeable=False if default cert has no SAN #710
Full changelog

cluster-kube-apiserver-operator

Bug 2071030: OCP 4.10 should be firing APIRemovedInNextEUSReleaseInUse for APIs removed in 1.25 #1335
Full changelog

cluster-machine-approver

Bug 2072928: Reconcile recently approved CSRs by other controllers #162
Full changelog

cluster-monitoring-operator

Bug 2062452: React to changes in clusteroperators #1585
Bug 2060756: Properly deal with an empty console URL #1582
Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568
Full changelog

cluster-network-operator

Bug 2058672: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.10] #1322
Bug 2057961: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1317
Bug 2052446: Kuryr: Decrease vif_annotation_timeout #1303
Update project owners #1332
Full changelog

cluster-storage-operator

Bug 2072191: cluster storage operator AWS credentialsrequest lacks KMS privileges #268
Bug 2061483: Incorrect installation of ibmcloud vpc csi driver in IBM… #265
Full changelog

cluster-version-operator

Bug 2071211: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #764
Bug 2064991: pkg/cvo: Separate payload load from payload apply #753
Bug 2052839: pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating #738
Bug 2053359: Feature gate initialization #740
Full changelog

console

Bug 2065008: add a hardcoded blog link as fallback in guided tours #11193
Bug 2074571: fix bug where Cluster Settings shows 0 of N, 0% progres… #11319
Bug 2073023: Fix WebSockets not reconnecting during upgrade #11302
Bug 2072839: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11297
Bug 2069246: Fixed the render of a Tab Extension when there is a version present #11242
Bug 2076221: Fix failing TestGetRegistrySamples test #11351
Bug 2057218: Added support for customized wizard - new templates #11341
Bug 2069959: Update getting started blog link #11255
Bug 2074895: Display correct disk size in Edit disk modal #11329
Bug 2061250: Update ConsolePlugin manifest #11267
Bug 2072440: avoid pre-fetching tekton hub task versions in pipeline builder #11290
Bug 2067719: correct ChannelDocLink url #11225
Bug 2069913: Fix disabling community tasks in pipeline builder issue #11253
Bug 2059186: Don’t pass Authorization header when not needed #11108
Bug 2048892: Add empty state to running VMs card #10986
Bug 2054949: Disabling Vault SA based auth for storage class encryption #11064
Bug 2049762: Cannot change storage class of boot disk when creating VM #10994
Bug 2054650: Allow custom template namespace #11057
Bug 2067983: Pipeline metrics: use prometheus-tenancy API to get data #11226
Bug 2065480: Fix VolumeSnapshot creation sort #11196
Bug 2064988: [Tekton Hub] show read more link in the task quick search details pane #11192
Bug 2057507: Decode secrets before authorizing repository #11094
Bug 2052414: Add started-by annotation to pipelines created with “Start last run” #11015
Bug 2059807: Show standalone resources as sink and not the one’s owned by other resource #11119
Bug 2065672: Fix alert from showing an object #11200
Bug 2060090: updates versions for kafka and kafkaTopic #11127
Bug 2059989: Fix to add labels to webhook secrets created during import #11125
Bug 2056512: fix ClusterOperator Status, Version col sorts #11084
Bug 2064510: Change the tekton hub api endpoint to use v1 api #11186
Bug 2062258: Add optional chaining to avoid npe #11164
Bug 2059805: clear dashboard variables for dev perspective on unmount #11118
Bug 2060448: Fix potential issues with namespaces that contains just numbers #11132
Bug 2059849: fix console crashing in the edit deployment form #11122
Bug 2055444: Fix sticky footer in pipeline builder’s form yaml switcher #11079
Bug 2054757: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11059
Bug 2062146: Allow topology list to select application group #11162
Bug 2059848: fix duplicate edit app action on installing virtualization operator #11121
Bug 2062837: Remove tech preview badge for web terminal #11173
Bug 2055290: Sum total memory of unnamed container only #11072
Bug 2057260: Fix pipeline run logs autoscrolling issue #11092
Bug 2048047: Make namespace bar full width and sticky in console #11065
Full changelog

console-operator

Bug 2059992: Re-enable TestMetricsEndpoint e2e test case #646
Bug 2054535: ODF quickstart permissions check #637
Bug 2054199: Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository #636
Full changelog

docker-registry

Bug 2069807: Bug 2060362: Revert “Support authentication using gcp workload identity federation” #321
Bug 2061785: Fix ICSP for subrepositories #318
Full changelog

external-dns

UPSTREAM: <carry>: openshift: Add Arjun in DOWNSTREAM_OWNERS #41
UPSTREAM: <carry>: openshift: Disable dependabot #35
Full changelog

hyperkube, pod

Bug 2069311: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1231
Bug 2065774: Backport 108723 OutofCpu Fixes #1221
Bug 2065620: Rebase 1.23.5 #1220
Full changelog

hypershift

feat(cpo): Disable PodSecurity for 4.10 #1289
Disable PodSecurity admission in 4.11 as it breaks conformance #1286
Expose a service account signing key in the API #1265
release-4.10 - Create valid route names with long namespace names #1252
Fast-Forward from main #1233
Forward from main #1190
Forward from main #1178
Update release-4.10 branch with latest from main #1173
Update release-4.10 branch with latest from main #1160
Forward from main #1148
Updating hypershift images to be consistent with ART #1121
Update 410 #1113
Full changelog

insights-operator

Bug 2072848: Gather namespace names with overlapping UIDs (#605) #605
Gather some error messages from the kube-controller-manager containers (#598) #598
Gather cluster images.config.openshift.io resource definition (#581) #581
Full changelog

ironic-agent

Bug 2048481: Update ironic-python-agent to latest bugfix version #38
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2075135: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1425
Bug 2069134: [release-4.10] Update bundle-plugins.txt #1420
Bug 2069134: [release-4.10] Enable supply-chain check #1417
Bug 2061616: [release-4.10] Compute bundle plugins in build #1398
Bug 2063898: [release-4.10] 2022-02-15 Security Advisory #1403
Bug 2062053: Add Jitendar to OWNERS file #1401
Bug 2055653: Add xmlstarlet to handle JENKINS_PASSWORD properly #1391
Full changelog

keepalived-ipfailover

OCPBUGS-33629: Only set the instancetype to master if the preempt strategy is not nopreempt. #197
OCPBUGS-39480: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.18 #193
OCPBUGS-41231: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.18 #196
OCPBUGS-41213: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.18 #195
OCPBUGS-39544: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.18 #194
OCPBUGS-38285: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.18 #191
OCPBUGS-38286: Updating openshift-enterprise-base-container image to be consistent with ART for 4.18 #192
OCPBUGS-34348: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.17 #186
OKD-219: add util-linux to base image #187
OCPBUGS-34152: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.17 #184
OCPBUGS-34338: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.17 #185
OCPBUGS-34103: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.17 #183
OCPBUGS-33909: Updating openshift-enterprise-base-container image to be consistent with ART for 4.17 #182
OCPBUGS-33908: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.17 #181
OKD-40: Revert #179 #180
OKD-40: Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179
Add dnf-plugins-core in scos to help with OCP image compat #178
OKD-210: Add sig-cloud repository and enable rt repository #177
OKD-210: Add the sig-nfv repo in the CS9 base #176
OCPBUGS-24850: Bump OpenShift 4.16, RHEL9, and iptables package #175
OCPBUGS-24990: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART #159
OCPBUGS-24800: Updating ose-egress-http-proxy-container image to be consistent with ART #156
NO-ISSUE: Add Scott and Mrunal as image approvers #170
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484: update unit tests in egress/dns-proxy #165
NE-1444: egress/dns-proxy: switch to haproxy28 RPM package #160
OCPBUGS-24861: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158
OCPBUGS-24751: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155
OCPBUGS-24723: Updating openshift-enterprise-base-container image to be consistent with ART #154
OCPBUGS-19261: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153
OCPBUGS-19107: Updating ose-egress-http-proxy images to be consistent with ART #150
OCPBUGS-19239: Updating openshift-enterprise-egress-router images to be consistent with ART #151
OCPBUGS-18860: Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149
OCPBUGS-18853: Updating openshift-enterprise-base images to be consistent with ART #148
OCPBUGS-10176: 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132
OCPBUGS-10163: Updating openshift-enterprise-egress-router images to be consistent with ART #131
OCPBUGS-10181: 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133
NE-1304: container builds: switch to haproxy26 package #141
OCPBUGS-11385: Removed chroot setting #137
egress: update owners #139
OCPBUGS-11595: Revert “[NE-1267] container builds: switch to haproxy26 package” #138
egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003: Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134
Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
bump RHEL8 egress-dns-proxy image to haproxy26 #125
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
Updating ose-egress-http-proxy images to be consistent with ART #120
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
Updating openshift-enterprise-base images to be consistent with ART #119
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126: ipfailover: Autodetect the “ens3” NIC #111
Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188: VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
Full changelog

kube-proxy, sdn

Bug 2062859: mixed ingress and egress policies can result in half-isolated pods #410
Bug 2060956: another fix for mixed ingress and egress policies #407
Full changelog

kuryr-cni, kuryr-controller

Bug 2055661: Update KLB .spec.provider when required #637
Full changelog

machine-config-operator

Bug 2072621: [OCPNODE-869] Create a drop-in file for cri-o’s seccomp use default config #3008
Bug 2070492: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3049
Bug 2062666: configure-ovs: reload NM only when necessary #3005
Bug 2062290: Add –templates flag to MCC bootstrap command #2997
Bug 2063326: [release-4.10] Ensure directories are created with usable permission bits #3012
Bug 2060954: Explicitly set keyfile as the default plugin #2985
Full changelog

machine-os-content

Seperate the two fixes for the ‘dot’ in /etc/resolv.conf and the coredns #350
Pin Fedora kernel #347
Configure DHCP client identifier via NM #343
okd overlay: fix openvswitch permissions #337
fix-resolv-conf-search.service: run after NM #324
manifests: add support secret #322
Bump machine-os version #320
Bump openshift-os to latest release-4.10 #316
crio: use F35 build of cri-tools #314
Bump fedora-coreos-config to latest stable #305
Full changelog

multus-whereabouts-ipam-cni

Bug 2065488: Sync upstream for context improvements for reconciler [backport 4.10] #88
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#47) #47
Full changelog

oc-mirror

build(deps): bump operator-registry dep to v1.21.1 (#390) #390
Bug 2064901: fix(associations): modifies association return values to allows image… (#359) #359
Bug 2065500: resolves multiple channel heads in merged catalogs (#372) #372
chore: adds dynamic version info for version command with ldflags (#328) (#334) #328
Full changelog

openshift-state-metrics

Bug 2052804: adding new build comments required for go 1.17 #83
Full changelog

openstack-machine-controllers

Bug 2071538: Address CVE-2022-21698 #226
Bug 2050064: Ensure subnets belong to the queried network #219
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2071941: Replace collect-profile jobs that haven’t completed #277
Bug 2070131: Fix a bug in deletion of webhook service for replacement #272
Full changelog

ovirt-csi-driver-operator

Bug 2050118: Add custom CA bundle support #84
Bug 2070525: Recreate oVirt connection for every sync #94
Full changelog

ovn-kubernetes

Bug 2059354: [4.10z] After reboot egress node, lr-policy-list was not correct #994
Bug 2061804: [4.10] Fixes “ErrorAddingLogicalPort: duplicate IP found in ECMP Pod route cache!” for same pod #990
Bug 2063834: backport 2052975 to 4.10 #995
Bug 2057723: Multiple fixes around Network Policies #971
Update project owners #983
Full changelog

powervs-machine-controllers

Updated the package module name #2
Synch repo cluster-api-provider-powervs with machine-api-provider-powervs #1
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2060718: Add relabel validations #161
Full changelog

tests

Bug 2059845: operators should not create watch channels very often: bump OpenStack monitoring operator #26879
Bug 2076265: [release-4.10] test: switch to testing CapBnd over CapInh #27021
Bug 2060592: only add failure when no event was found for the target revision #26881
Bug 2055381: cleanup network policy ACL extended test #26946
Bug 2059717: IBMCloud: Ignore CRB already exists #26869
Bug 2061554: Add debug info for signature test #26889
Bug 2060862: [release-4.10] Increase cluster-monitor-operator watch count threshold on single-node clusters #26872
Full changelog

vsphere-csi-driver-operator

Bug 2060213: Fix node check result cache between checks #78
Full changelog

vsphere-problem-detector

Bug 2055895: change NodePerfCheck criteria to be based on average latency #76
Bug 2059255: Fix stale metrics by resetting them #80
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github