4.10.0-0.okd-2022-05-28-062148

New features since version 4.9.0-0.okd-2023-08-26-123046

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.10.0-0.okd-2022-05-28-062148

No tests for this release

Upgrades from:

Upgrades to:

Changes from 4.10.0-0.okd-2022-05-07-021833

Created: 2022-05-28 09:18:45 +0000 UTC

Image Digest: sha256:6667275cbdb7fd9339f3eae015a29704b42b994bed40790a9b31a54834125152

Release 4.10.0-0.okd-2022-05-28-062148 was created from registry.ci.openshift.org/origin/release:4.10.0-0.okd-2022-05-28-062148

Components

Kubernetes 1.23.5
Fedora CoreOS upgraded from 410.35.4 to 410.35.5

alibaba-cloud-controller-manager

OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
Update OWNERS #36
Rebase onto latest upstream version #35
OCPBUGS-10120: Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #30
Update OWNERS #29
Update OWNERS #27
Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #26
Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master into master #21
Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #22
Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master into master #20
Full changelog

alibaba-disk-csi-driver-operator

Bug 2076671: Auto increase volume size to 20 GiB in the default storage class #28
Full changelog

aws-machine-controllers

Bug 2083270: Custom DHCP Option Set: empty domain-name is a valid custom domain #37
Full changelog

azure-disk-csi-driver-operator

STOR-1713: Mark the repository obsolete #125
STOR-1714: Release leadership on SIGTERM #122
STOR-1696: Fix gofmt #119
STOR-1688: Chore: add .snyk file to ignore false positives #117
OCPBUGS-25537: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART #118
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #116
OCPBUGS-24829: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART #112
OCPBUGS-23832: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #111
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #113
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #110
OCPBUGS-22560: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #107
STOR-1276: Enable support for mounting volumes with SELinux context #93
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #106
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #100
update readme #99
simplify workload identity feature enablement #92
update readme #94
OCPBUGS-19172: Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #98
OCPBUGS-16654: Revert revert “STOR-1065: Rework sidecar bindings to b… #88
OCPBUGS-16496: Bump library-go to remove dependency on goproxy #90
OCPBUGS-16783: Chore: Update OWNERS #89
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #87
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #84
OCPBUGS-14824: Bump azure-disk-csi-driver-operator library-go #85
CCO-324: Unrevert “CCO-324: add support for workload identity” #83
Revert “CCO-324: add support for workload identity” #82
CCO-324: add support for workload identity #78
STOR-1168: Bump common libraries #81
OCPBUGS-12559: Bump golang.org/x/net@v0.9.0 #80
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #79
OCPBUGS-8683: Add management workloads annotations #74
OCPBUGS-10842: Reorder static resources to create RBAC first #75
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #73
STOR-873: Implement custom keys in Azure Disk CSI driver operator #68
OCPBUGS-7617: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #69
OCPBUGS-6658: Disable managed identity authentication #67
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #66
STOR-947: support disabling default StorageClass via ClusterCSIDriver #63
STOR-1078: Add hostPaths necessary for SELinux mounts #64
Bug 2106736: Add multiplePVsSameID capability #65
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #62
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #61
OCPBUGS-3659: Don’t expose metrics port to whole network #60
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #56
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #55
STOR-858: Bump github.com/openshift/* and k8s.io/* #53
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #51
Bug 2095049: Only use credentials that are provided by the azure-inject-credential… #49
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #48
Mark CSI StorageClass as the default one #47
Bug 2062152: Increase pod startup timeout in e2e tests #45
Bug 2073373: Sync cmdline arguments with upstream #46
Fix CSIDriver fsGroupPolicy #44
Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

Bug 2077904: Fix empty string usage in ValidateForProvisioning #5835
Bug 2045771: bump RHCOS 4.10 bootimage metadata #5932
Bug 2083335: Set rc-manager=unmanaged for on-prem bootstrap #5876
Bug 2084547: update azure arm templates to support customer provided vnet #5892
Bug 2083327: [release-4.10] Add ‘ARG TAGS=“”’ line for each build step #5874
Full changelog

cli, cli-artifacts, deployer, tools

Bug 2087248: Add the ReleaseAccepted condition to the oc adm upgrade command #1147
Bug 2080151: Remove network CRDs scheme registration #1122
Bug 2084429: Fix project command auto completion #1131
Full changelog

cluster-etcd-operator

Bug 2082312: Adding Thomas to reviewers, adding Allen to approvers #817
Bug 2080554: manually disable defrag #809
Full changelog

cluster-image-registry-operator

Bug 2084514: Fix cloudfront middleware configuration #780
Bug 2083559: IBMCloud: Add admin permissions to CR #778
Full changelog

cluster-monitoring-operator

Bug 2083460: Set timeout across Grafana components #1654
Bug 2077722: Adjust NodeFilesystemSpaceFillingUp thresholds according default kubelet GC behavior #1665
Full changelog

cluster-network-operator

Bug 2058508: Add rolling update strategy for Kuryr-CNI. #1321
Bug 2083593: Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1436
Bug 2079031: Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [backport 4.10] #1398
Bug 2081149: Reserve port TCP/9104 for cluster-network-operator #1418
Full changelog

cluster-node-tuning-operator

Ignore Profile updates triggered by old operands (#357) #357
Full changelog

cluster-storage-operator

AUTH-482: set required-scc for openshift workloads #459
OCPBUGS-28748: log default storage class names when collector is triggered #460
OCPBUGS-30498: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #463
STOR-1758: Add azure file hypershift #454
OCPBUGS-28879: Fix problem-detector proxy setting #457
OCPBUGS-29573: Apply hypershift cluster-profile for ibm-cloud-managed #458
OCPBUGS-28765: Remove master node selector from azure-csi-driver-operator deployment #448
OCPBUGS-29196: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #455
STOR-1574: Bump all deps #447
STOR-1611: remove ibm-vpc-node-label-updater #445
OCPBUGS-27159: Allow vSphere CSI driver to be disabled #444
STOR-1289: Move vSphere prometheus rules to CSO #442
STOR-1354: Remove Alibaba Disk CSI Driver #440
STOR-1574: Bump library-go #443
STOR-1722: Azure disk hypershift #420
STOR-1714: Release leadership on SIGTERM #437
OCPBUGS-22994: Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert #430
OCPBUGS-22422: Fix PodStartupStorageOperationsFailing alert #436
STOR-1688: Chore: add .snyk file to ignore false positives #434
OCPBUGS-25564: Updating ose-cluster-storage-operator-container image to be consistent with ART #435
CCO-251: replace instanceAdmin role with specific compute permissions #429
OCPBUGS-24927: Updating ose-cluster-storage-operator-container image to be consistent with ART #432
OCPBUGS-23852: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #431
OCPVE-789: annotate credentials request manifests #418
STOR-1277: Add Prometheus rules for SELinux telemetry #422
TRT-1376: Revert #410 “CCO-251: use granular permissions for gcp credentails request” #426
CCO-251: use granular permissions for gcp credentails request #410
OCPBUGS-24112: Updating ose-cluster-storage-operator-container image to be consistent with ART #424
STOR-1487: bump openshift/api to get IBMCloudCSIDriverConfigSpec #423
OCPBUGS-24027: forbidden access to resource on shared-resource-csi-driver-operator #425
STOR-1402: Chore: update libraries in all operators [4.15] #421
OCPBUGS-23120: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #417
STOR-1453: Grant permissions to access apiserver to CSI driver operators #415
OCPBUGS-22594: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #414
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #411
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #404
OCPBUGS-13669: skip Azure File installation on Azure StackHub #395
OCPBUGS-19073: Move KAS access label to right place #403
update readme #400
OCPBUGS-19073: Add KAS label to aws-ebs-operator #399
OCPBUGS-19184: Updating cluster-storage-operator images to be consistent with ART #398
STOR-1446: Restart vsphere-problem-detector-operator Pods if serving-cert changed #394
STOR-1274: use granular permissons for Azure credential requests #388
STOR-1432: hypershift: pass through control plane images to AWS EBS CSI driver operator #393
STOR-1432: hypershift: add independent refs for AWS EBS driver controller images #392
OCPBUGS-17356: Fix PodStartupStorageOperationsFailing alert #391
Remove “get” verb from “events” resource of RBAC for provisioner sidecar #390
OCPBUGS-11359: Remove unused versions from status #374
OCPBUGS-16783: Chore: Update OWNERS #389
OCPBUGS-16265: Publish csi sidecar clusterroles earlier #386
OCPBUGS-15940: Revert revert of hypershift cleanup #385
Revert “STOR-1369: Start hypershift refactor” #384 #384
STOR-1369: Start hypershift refactor #381
OCPBUGS-13696: Warn about CBT enabled VMs via vsphere-problem-detector #371
OCPBUGS-14053: decrease severity for MultipleDefaultStorageClasses alert #382
STOR-1065: Publish ClusterRoles for csi driver sidecars #379
STOR-1167: Add permissions needed by fast snapshots to AWS CSI driver #369
CCO-319: Add serviceAccountNames to azure-disk and azure-file credentials #364
OCPBUGS-13187: Make vsphere-problem-detector alerts configurable #380
CCO-324, CCO-325: pass version to azure operators #372
OCPBUGS-13914: allow removal of vsphereStorageDriver field in 4.14 #378
STOR-1334: update storage operator to read featuregates from API #376
Revert “update storage operator to read featuregates from API on standalone OCP” #375
STOR-1334: update storage operator to read featuregates from API on standalone OCP #368
OCPBUGS-11617: Bump github.com/prometheus-operator/prometheus-operator #358
Updating cluster-storage-operator images to be consistent with ART #365
OCPBUGS-11729: VSphereStorageDriver does not document the platform default #360
OCPBUGS-11493: vsphereStorageDriver validation is misleading #357
OCPBUGS-8683: Add management workloads annotations #350
OCPBUGS-11112: Add missing workload label to openshift-manila-csi-driver NS #353
OCPBUGS-8691: Hypershift: set control plane operand properties #352
Updating cluster-storage-operator images to be consistent with ART #349
OCPBUGS-8328: assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #346
BUILD-571: enable shared resource operator to run in an hypershift guest cluster #342
STOR-875: Implement custom keys in AWS EBS CSI driver operator #338
OCPBUGS-5410: add ReEncrypt KMS permissions #345
BUILD-407: Revert “remove tech preview feature gate for shared resources” #343
OCPBUGS-6992: Add UID to CSO Pod to be able to run with custom SCCs #344
MULTIARCH-3203: Hypershift changes for CSO moved to CP on PowerVS CSI driver operator #331
STOR-1123: Add alert about topology misconfiguration #334
STOR-1128: Stop creating an in-tree SC for vSphere #340
OCPBUGS-7483: Revert “Merge pull request #332 from bertinatto/default-sc” #339
STOR-1128: Remove defaultstorageclass controller #332
BUILD-407: remove tech preview feature gate for shared resources #335
OCPBUGS-7300: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #336
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #333
Updating cluster-storage-operator images to be consistent with ART #330
OCPBUGS-4173: Restart vsphere-problem-detector after credentials change #328
OCPBUGS-4508: User real node name in failing mount alerts #329
Bug 2066664: Remove wildcard use in rules for CSI operators and drivers #270
STOR-1039: Make changes into CSO for hypershift #318
OCPBUGS-2880: Fix panic on empty featureGate.spec.customNoUpgrade #325
Bug 2093016: Add alert about attach / mount failing #324
OCPBUGS-1361: Reword vSphere problem detector check alerts #322
Remove specific UID from cluster-storage-operator #316
OCPBUGS-1904: Allow CSI operator to get CRDs #323
add storage capability annotation #303
Bump go to 1.19 #321
STOR-858: Bump github.com/openshift/* and k8s.io/* #317
STOR-1050: bump openshift/api to latest master #319
Remove in-tree AWS EBS and GCP PD storage classes #312
TRT-534: Add client certificate and key to service monitor #306
OCPBUGS-946: Resource csi.storage.k8s.io/csinodeinfos added to powervs-block-csi-d river-operator-clusterrole #315
Updating cluster-storage-operator images to be consistent with ART #296
Bug 2112237: correct sc error messages for ibm and alibaba platforms #310
Add PowerVS Block CSI Driver Operator #304
Bug 2108054: Allow Prometheus to scan openshift-cluster-csi-drivers namespace #308
STOR-956: Bump(openshift/api): to get CSI changes #307
Bug 2108054: Add alert about unsupported CSI driver #305
Bug 2107043: HTTPS_PROXY ENV missing in some CSI driver operators #301
Bug 2101645: DefaultStorageClassController reports fake message on azure and openstack #292
Bug 2077599: Fix vCenter / ESXi version alerts #290
Bug 2097400: Allow Shared Resource Driver to operate validating webhook #288
Bug 2077050: Un-Revert “OCP should default to pd-ssd disk type on GCP” #284
Bug 2081557: Fix DefaultStorageClassController getting Available=False on error #277
Bug 2088533: remove unused ‘-v’ for shared resource operator as part of klogv2/openshift api/ k8s bump #287
Bug 2086231: BUILD-405: Install the Shared Resource CSI Driver WebHook #278
Updating cluster-storage-operator images to be consistent with ART #282
Bug 2077050: Revert “OCP should default to pd-ssd disk type on GCP” #283
Bug 2077599: Alert on vCenter < 7.0.2 #279
Bug 2077050: OCP should default to pd-ssd disk type on GCP #273
Bug 2079197: alert when more than one default storage class is detected #276
manifests/deployment: comply to restricted pod security level #274
remove openstack in-tree storage class #271
remove azure in-tree storage class #272
Azure File CSI Driver Operator is GA in OCP 4.11 #266
Add missing ibm cloud annotations to prometheus rbac #267
no CredentialsRequests in ibm-cloud-managed #253
Bug 2060509: Incorrect installation of ibmcloud vpc csi driver in IBM… #264
Bug 2049872: cluster storage operator AWS credentialsrequest lacks KMS privileges #263
Bug 2043132: Add metrics for vsphere operator #262
Bug 2050300: Don’t set generation in object comming from cache #261
Updating cluster-storage-operator images to be consistent with ART #260
Full changelog

cluster-update-keys

Updating ose-cluster-update-keys images to be consistent with ART #41
Full changelog

cluster-version-operator

Bug 2083370: Do not save desired update on load failures #776
Bug 2080058: pkg/cvo/updatepayload: Prune previous payload downloads #769
Full changelog

console

Bug 2084430: fixes apiversion for k8s svc and resource selection for sink for form yaml switcher #11482
Bug 2087065: show Limit exceeded state for large number of nodes in topology #11506
Bug 2050273: Update MON_DISK_LOW whitelisted alert documentation URL #11411
Bug 2089162: Change learn more link in virtualization -> migration tool #11541
Bug 2089547: Eliminate use of lookaside cache and move to Cachito #11551
Bug 2088430: Set dashboards timeout based on selected timespan #11532
Bug 2084091: MCG standalone deployment page goes blank when the KMS option is enabled #11479
Bug 2088247: Different status shows on VM list page and details page #11538
Bug 2087041: back port conditional updates #11487
Bug 2088281: Attached disk keeps in loading status when add disk to a power off VM by non-privileged user #11530
Bug 2088246: Overview page crash if no labels available #11525
Bug 2051433: [release-4.10] Create HANA VM does not use values from customized HANA templates #11011
Bug 2088255: Adding missing annotations to create VM from YAML #11527
Bug 2088019: The default YAML on vm wizard is not latest #11522
Bug 2083729: Fix Filter Dropdown State Management #11471
Bug 2084489: Create VM from template that has sourceRef - will now reflect sourceRef at yaml #11485
Bug 2076989: Fix ResourceQuota dashboard card and ACRQ donut label #11367
Bug 2083385: fix bug where “Update blocked” label incorrectly displa… #11466
Bug 2076370: fix CRD name filter #11356
Bug 2083551: customize wizard is crashed #11469
Bug 2076275: Update and scope our breadcrumb padding rule so it doesn’t effect a pure implementation #11365
Bug 2076777: add update mode to Update cluster #11364
Bug 2074163: remove .pf-c-button.pf-m-link override #11315
Full changelog

etcd

Update OWNERS #123
Full changelog

hyperkube, pod

Bug 2067464: Backport 107821 and 107831 #1241
Full changelog

hypershift

Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1416
feat(cpo): adhere to upgrade order from kube version skew policy #1410
Set shutdown params to improve graceful shutdown #1387
fix(cpo): Scope down secrets access for olm collect profiles cj #1378
move to ga apis for all components now that management clusters at minimum release boundary #1361
configure cipher suites to prevent using medium strength ssl ciphers #1359
Full changelog

insights-operator

Bug 2081844: Fix the clusteroperator conditions values when IO is (#619) #619
Full changelog

ironic-agent

Bug 2053752: import time #49
Bug 2053752: Bump retries for UEFI boot configuration #48
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2080204: Correctly declare Jenkins URL with trailing slash #1441
Full changelog

kube-proxy, sdn

Bug 2087763: Probe failures and pod restarts during 4.7 to 4.8 upgrade #431
Bug 2082451: Masquerade in cluster traffic that is marked for egress IP #430
Full changelog

kube-state-metrics

Bug 2085329: Use v1 PodDisruptionBudget and CronJob resources #72
Full changelog

machine-os-content

manifests/99-sca-disable.yaml: quote bool value #369
Unpin kernel #364
Bump FCOS to latest stable #363
Full changelog

machine-os-images

Bug 2090022: Get rid of lookaside cache in OCP build #17
Revert .ci-operator.yaml #18
Updating ose-machine-os-images images to be consistent with ART #9
Full changelog

network-metrics-daemon

Fix field selector (#50) #50
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2080609: Fix GRPC CheckRegistryServer function (#2756) #298
Full changelog

ovn-kubernetes

Bug 2088627: EgressIP NATs are not being cleared correctly from the logical router #1098
Bug 2087203: enable exportloopref linter and fix violations #1095
Bug 2082467: Fix cluster/status parsing for single-member db cluster (SNO) #1082
Bug 2083116: delete SNAT2NIP if pod.node == egressNodeServingPod #1084
Bug 2080069: Cleanup conntrack entries when services are deleted #1061
Full changelog

tests

Bug 2080198: skip tests for etcd leaders when etcd revisions change a lot #27076
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github