# 4.10.0-0.okd-2022-07-09-073606 Created: 2022-07-10 09:12:53 +0000 UTC Image Digest: `sha256:5a748561c829c23c7413b0fe0ec8f97b4eabf5cfd1934b9e93a8a5df3f59738d` Promoted from registry.ci.openshift.org/origin/release:4.10.0-0.okd-2022-07-09-073606 ## Changes from 4.10.0-0.okd-2022-05-28-062148 ### Components * Kubernetes 1.23.5 * Fedora CoreOS upgraded from 410.35.5 to 410.35.7 ### Rebuilt images without code change * [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [8f980ccc](https://github.com/openshift/azure-disk-csi-driver-operator/commit/8f980ccc460b8973f5a3f7d91a57fbfe03a39809) `sha256:113b50fe08bd68d9a6ff83d5f1ab9a5b33cc1ba8e6617dfa180f27d81d3bbce8` * [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [8723adb2](https://github.com/openshift/cloud-network-config-controller/commit/8723adb2d36b7d96363d57b8a9208880eccea53e) `sha256:f513fd308c1d6bfb90d5dec80e6a682c920c6e4ec285ec948372e3a9c9bcf6c8` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [73f96098](https://github.com/openshift/cluster-node-tuning-operator/commit/73f960989a07e5c4aed79ba1e9a86a09886eb271) `sha256:692656f1e04a39771df647cd7463806a802216fac33fe22eb01f6f27ec60f44c` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [c6100acd](https://github.com/openshift/cluster-storage-operator/commit/c6100acd3bf10416ccc0fda65f2a248cdb5a10b1) `sha256:187012c0eafc641800cc39b7035289e81ab293605064b4def6e59022574a0ac6` * [haproxy-router](https://github.com/openshift/router) git [11109e40](https://github.com/openshift/router/commit/11109e4028b69749d6f842a4da682916e0d91d2f) `sha256:a230107a3e1a0e090bda4af1b35504c5cc9dc5e71d4e2efa22b04f7701579737` * [machine-os-images](https://github.com/openshift/machine-os-images) git [52118759](https://github.com/openshift/machine-os-images/commit/52118759e5c68733954f15d0cdc45c255752aa3c) `sha256:46b5aa951678f8495247b16b32950294f69a9341629f16609ac11c8e6d2a988a` ### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/3ddbb2b9d4994206183b5ffd6a0872ad9a5ce193) * [Bug 2076671](https://bugzilla.redhat.com/show_bug.cgi?id=2076671): 4.10: Add a parameter to the schema to automatically increase volume sizes [#14](https://github.com/openshift/alibaba-cloud-csi-driver/pull/14) * [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/b9dd1ad5bd2a8971c22dca927d61d8f259516035...3ddbb2b9d4994206183b5ffd6a0872ad9a5ce193) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/0b2bf9904788e4019b91212532e9af35b240cbdc) * [Bug 2093275](https://bugzilla.redhat.com/show_bug.cgi?id=2093275): update getAvailabilitySetName function [#23](https://github.com/openshift/machine-api-provider-azure/pull/23) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/177035a6720a99b86e3ecd0ee83ca9f0ec63b60c...0b2bf9904788e4019b91212532e9af35b240cbdc) ### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/d63a12ba0ec33d492093a8fc0e268a01a075f5da) * [Bug 2099673](https://bugzilla.redhat.com/show_bug.cgi?id=2099673): Collect whole journal and netstat data [#6035](https://github.com/openshift/installer/pull/6035) * [Bug 2097753](https://bugzilla.redhat.com/show_bug.cgi?id=2097753): Bootstrap timeout increase [#6017](https://github.com/openshift/installer/pull/6017) * [Bug 2083632](https://bugzilla.redhat.com/show_bug.cgi?id=2083632): Delete all the ports from tagged Neutron networks. [#5882](https://github.com/openshift/installer/pull/5882) * [Full changelog](https://github.com/openshift/installer/compare/25f497505abeaf6b8563bd97bb21037159cb61ad...d63a12ba0ec33d492093a8fc0e268a01a075f5da) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/20e2b86e4f02dd1d5b23e86d09b1bf4c97e8c56f) * [Bug 2097695](https://bugzilla.redhat.com/show_bug.cgi?id=2097695): Stop treating missing network as fatal error [#230](https://github.com/openshift/baremetal-operator/pull/230) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/28771f489634da2364fb46766953f2e1962bf350...20e2b86e4f02dd1d5b23e86d09b1bf4c97e8c56f) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/40c11f7299386a9608e18feb8cc062c2ebc3364b) * [Bug 2084187](https://bugzilla.redhat.com/show_bug.cgi?id=2084187): Avoid kubernetes node port range [#178](https://github.com/openshift/baremetal-runtimecfg/pull/178) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/edc9617a13839571f596109529573937fe199c2d...40c11f7299386a9608e18feb8cc062c2ebc3364b) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/45460a55f50834ff18308b13b4569a6c89b9d37a) * [Bug 2095584](https://bugzilla.redhat.com/show_bug.cgi?id=2095584): Backport `oc adm catalog mirror` --continue-on-error flag [#1170](https://github.com/openshift/oc/pull/1170) * [Bug 2084591](https://bugzilla.redhat.com/show_bug.cgi?id=2084591): [inspect] Add namespace-scoped networking resources to inspect [#1133](https://github.com/openshift/oc/pull/1133) * [Full changelog](https://github.com/openshift/oc/compare/878f5a8fe0d04ea70c5e5de11fa9cc7a49afb86e...45460a55f50834ff18308b13b4569a6c89b9d37a) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/85fbfb7435d75d336d0946894f0e320616fb8f7e) * [Bug 2091738](https://bugzilla.redhat.com/show_bug.cgi?id=2091738): Fix interpretation of Deployment Status Conditions [#267](https://github.com/openshift/cluster-baremetal-operator/pull/267) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/76fd38be960e6aad3f98b7e645607f96e5bfcd36...85fbfb7435d75d336d0946894f0e320616fb8f7e) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e2e0d4f901ef8a89dcda6f5555b44ff9398cf22d) * [Bug 2099499](https://bugzilla.redhat.com/show_bug.cgi?id=2099499): Backport resourceapply changes for being able to recreate daemonsets/deployments [#194](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/194) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/c6037b17561d4d335b09fa3067588fd7a580f0d3...e2e0d4f901ef8a89dcda6f5555b44ff9398cf22d) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4f1dca6106255a9221481ba40b387c7622682354) * [Bug 2105148](https://bugzilla.redhat.com/show_bug.cgi?id=2105148): fix degraded missing cluster version [#878](https://github.com/openshift/cluster-etcd-operator/pull/878) * [Bug 2102793](https://bugzilla.redhat.com/show_bug.cgi?id=2102793): avoid extrapolation in leaderhip alert [#870](https://github.com/openshift/cluster-etcd-operator/pull/870) * [Bug 2095579](https://bugzilla.redhat.com/show_bug.cgi?id=2095579): etcdHighNumberOfFailedGRPCRequests alerts with wrong results [#850](https://github.com/openshift/cluster-etcd-operator/pull/850) * [Bug 2101912](https://bugzilla.redhat.com/show_bug.cgi?id=2101912): Upping defrag timeout to 1 minute [#866](https://github.com/openshift/cluster-etcd-operator/pull/866) * [Bug 2095114](https://bugzilla.redhat.com/show_bug.cgi?id=2095114): cluster-backup.sh script has a conflict to use the '/etc/kubernetes/static-pod-certs' folder if a custom API certificate is defined [#848](https://github.com/openshift/cluster-etcd-operator/pull/848) * [Bug 2010346](https://bugzilla.redhat.com/show_bug.cgi?id=2010346): Add summary to etcd alert rules [#825](https://github.com/openshift/cluster-etcd-operator/pull/825) * [Bug 2088131](https://bugzilla.redhat.com/show_bug.cgi?id=2088131): remove etcd_perf before restore [#836](https://github.com/openshift/cluster-etcd-operator/pull/836) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/7d5f84865b340ae9e4ff026727cc2960d9bde3d0...4f1dca6106255a9221481ba40b387c7622682354) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d2df5e8ef58452eac263b9352c02e3cdc1249847) * [Bug 2083242](https://bugzilla.redhat.com/show_bug.cgi?id=2083242): IR-253: add prometheus rules for image registry operations metrics [#786](https://github.com/openshift/cluster-image-registry-operator/pull/786) * [Bug 2083242](https://bugzilla.redhat.com/show_bug.cgi?id=2083242): IR-120: Add prometheus rules for image stream tags rules [#777](https://github.com/openshift/cluster-image-registry-operator/pull/777) * [Bug 2083242](https://bugzilla.redhat.com/show_bug.cgi?id=2083242): IR-120: Implementing metrics for ImageStreams [#775](https://github.com/openshift/cluster-image-registry-operator/pull/775) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/def258f60da724f6cdd9a19f46e089ed34704238...d2df5e8ef58452eac263b9352c02e3cdc1249847) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f50a80e5eaa6b1eb969430f8e0bf2cce7dbbdb65) * [Bug 2097735](https://bugzilla.redhat.com/show_bug.cgi?id=2097735): Fix loadBalancerServiceAnnotationsChanged check and update [#784](https://github.com/openshift/cluster-ingress-operator/pull/784) * [Bug 2100630](https://bugzilla.redhat.com/show_bug.cgi?id=2100630): Fix flakey logic in haproxy timeout tests [#792](https://github.com/openshift/cluster-ingress-operator/pull/792) * [Bug 2082161](https://bugzilla.redhat.com/show_bug.cgi?id=2082161): Delete LoadBalancer-type service finalizer logic [#755](https://github.com/openshift/cluster-ingress-operator/pull/755) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e59a3a2e2d7864f1cb896b28cb929a4decd298f1...f50a80e5eaa6b1eb969430f8e0bf2cce7dbbdb65) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/d8694a5bde4de696c8dd710816c1da76fa49cc36) * [Bug 2089336](https://bugzilla.redhat.com/show_bug.cgi?id=2089336): Fix bootstrap leader election config [#429](https://github.com/openshift/cluster-kube-scheduler-operator/pull/429) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/0c57d73f94b50ab95fc2914a7615cc1b23e7678e...d8694a5bde4de696c8dd710816c1da76fa49cc36) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/7e1f56849bb85b870585b2b67566d29fd7767a31) * Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#65](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/65) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9030c0dc82348a977a9a15330d63448ac0c767ff...7e1f56849bb85b870585b2b67566d29fd7767a31) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/57d239c2c2909ea4f8a561d738db0c34b7275ad8) * [Bug 2098505](https://bugzilla.redhat.com/show_bug.cgi?id=2098505): Backport PR#1692 to release-4.10 [#1695](https://github.com/openshift/cluster-monitoring-operator/pull/1695) * [Bug 2083242](https://bugzilla.redhat.com/show_bug.cgi?id=2083242): IR-254: Collecting registry and image stream usage [#1694](https://github.com/openshift/cluster-monitoring-operator/pull/1694) * [Bug 2089806](https://bugzilla.redhat.com/show_bug.cgi?id=2089806): Refactors CreateRouteIfNotExists to CreateOrUpdateRoute [#1677](https://github.com/openshift/cluster-monitoring-operator/pull/1677) * [Bug 2090422](https://bugzilla.redhat.com/show_bug.cgi?id=2090422): pkg/manifest: Allow retention to be configurable for Thanos-Ruler in UWM [#1678](https://github.com/openshift/cluster-monitoring-operator/pull/1678) * [Bug 2090602](https://bugzilla.redhat.com/show_bug.cgi?id=2090602): Federation for UWM metrics [#1657](https://github.com/openshift/cluster-monitoring-operator/pull/1657) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a5febd0db51adf41a12d4e30a463f68428c51fb3...57d239c2c2909ea4f8a561d738db0c34b7275ad8) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a9b63ea675fc71fc01836518f7f9b9d0caf02ba9) * [Bug 2077384](https://bugzilla.redhat.com/show_bug.cgi?id=2077384): Bump max value of hist quantile for kuryr_cni_request_duration [#1388](https://github.com/openshift/cluster-network-operator/pull/1388) * [Bug 2084591](https://bugzilla.redhat.com/show_bug.cgi?id=2084591): Cleanup CNO relatedObjects [#1467](https://github.com/openshift/cluster-network-operator/pull/1467) * [Bug 2085510](https://bugzilla.redhat.com/show_bug.cgi?id=2085510): OCPVE-106 Customize rollout strategy to fix SNO upgrade [#1445](https://github.com/openshift/cluster-network-operator/pull/1445) * [Bug 2078501](https://bugzilla.redhat.com/show_bug.cgi?id=2078501): [release-4.10] Drop Node update permission for sdn-node [#1410](https://github.com/openshift/cluster-network-operator/pull/1410) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f76262ceb3a37cf05801b960d8bc40746243d870...a9b63ea675fc71fc01836518f7f9b9d0caf02ba9) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b09fb92a168981d235a1b8e2d320336aa7405ad6) * [Bug 2094078](https://bugzilla.redhat.com/show_bug.cgi?id=2094078): pkg/cvo/updatepayload: Guard against 'rm -fR -whatever' with ./* [#787](https://github.com/openshift/cluster-version-operator/pull/787) * [Bug 2090150](https://bugzilla.redhat.com/show_bug.cgi?id=2090150): pkg/cvo/sync_worker.go: Save overrides [#782](https://github.com/openshift/cluster-version-operator/pull/782) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b3da2d3eba82adcd53198d662607f21641817c4a...b09fb92a168981d235a1b8e2d320336aa7405ad6) ### [console](https://github.com/openshift/console/tree/b8396ad05795f20b19a25f945b922fa7c48d66d9) * [Bug 2052416](https://bugzilla.redhat.com/show_bug.cgi?id=2052416): fix offensive vm names [#11778](https://github.com/openshift/console/pull/11778) * [Bug 2094194](https://bugzilla.redhat.com/show_bug.cgi?id=2094194): fix bug where log stream pauses in Chrome [#11654](https://github.com/openshift/console/pull/11654) * [Bug 2100345](https://bugzilla.redhat.com/show_bug.cgi?id=2100345): fix clone vm error creating DV [#11770](https://github.com/openshift/console/pull/11770) * [Bug 2097338](https://bugzilla.redhat.com/show_bug.cgi?id=2097338): Filter virtualization alerts in status card [#11715](https://github.com/openshift/console/pull/11715) * [Bug 2094215](https://bugzilla.redhat.com/show_bug.cgi?id=2094215): Pass contextSource to TopologyApplicationActionProvider [#11656](https://github.com/openshift/console/pull/11656) * [Bug 2099600](https://bugzilla.redhat.com/show_bug.cgi?id=2099600): Topology toolbars are unaligned to other toolbars [#11703](https://github.com/openshift/console/pull/11703) * [Bug 2095637](https://bugzilla.redhat.com/show_bug.cgi?id=2095637): Disable update channel validation as well [#11753](https://github.com/openshift/console/pull/11753) * [Bug 2078699](https://bugzilla.redhat.com/show_bug.cgi?id=2078699): Display disk size in correct units [#11746](https://github.com/openshift/console/pull/11746) * [Bug 2099527](https://bugzilla.redhat.com/show_bug.cgi?id=2099527): Bug fix context menu position on topology [#11735](https://github.com/openshift/console/pull/11735) * [Bug 2078699](https://bugzilla.redhat.com/show_bug.cgi?id=2078699): Display disk size in GiB in VM customize wizard [#11733](https://github.com/openshift/console/pull/11733) * [Bug 2079985](https://bugzilla.redhat.com/show_bug.cgi?id=2079985): use the correct Alertmanager tenancy proxy [#11418](https://github.com/openshift/console/pull/11418) * [Bug 2094348](https://bugzilla.redhat.com/show_bug.cgi?id=2094348): Display only running VMs in Virtualization Overview chart [#11659](https://github.com/openshift/console/pull/11659) * [Bug 2095217](https://bugzilla.redhat.com/show_bug.cgi?id=2095217): Fix SSH command string [#11679](https://github.com/openshift/console/pull/11679) * [Bug 2062980](https://bugzilla.redhat.com/show_bug.cgi?id=2062980): fixes uri case for event sink [#11175](https://github.com/openshift/console/pull/11175) * [Bug 2092496](https://bugzilla.redhat.com/show_bug.cgi?id=2092496): [release-4.10] Added vault_tenants_sa to the list of supported providers [#11584](https://github.com/openshift/console/pull/11584) * [Bug 2094863](https://bugzilla.redhat.com/show_bug.cgi?id=2094863): fix web terminal start [#11672](https://github.com/openshift/console/pull/11672) * [Bug 2094211](https://bugzilla.redhat.com/show_bug.cgi?id=2094211): Change Ping source spec.jsonData (deprecated) field to spec.data [#11655](https://github.com/openshift/console/pull/11655) * [Bug 2090750](https://bugzilla.redhat.com/show_bug.cgi?id=2090750): Handle medik8s node maintenance [#11581](https://github.com/openshift/console/pull/11581) * [Bug 2091482](https://bugzilla.redhat.com/show_bug.cgi?id=2091482): change metrics queries based on metrics level configurations [#11595](https://github.com/openshift/console/pull/11595) * [Bug 2089589](https://bugzilla.redhat.com/show_bug.cgi?id=2089589): add debounce to tektonhub versions api call to avoid many calls [#11552](https://github.com/openshift/console/pull/11552) * [Bug 2092140](https://bugzilla.redhat.com/show_bug.cgi?id=2092140): Avoid using 'gp2' hardcoded storage class [#11618](https://github.com/openshift/console/pull/11618) * [Bug 2089315](https://bugzilla.redhat.com/show_bug.cgi?id=2089315): fix rolebinding in DevConsole dropping all subjects when updating [#11545](https://github.com/openshift/console/pull/11545) * [Bug 2095637](https://bugzilla.redhat.com/show_bug.cgi?id=2095637): Fix failing backend test after devfile registry update [#11710](https://github.com/openshift/console/pull/11710) * [Bug 2094001](https://bugzilla.redhat.com/show_bug.cgi?id=2094001): Add high priority alerts to overview [#11647](https://github.com/openshift/console/pull/11647) * [Bug 2092168](https://bugzilla.redhat.com/show_bug.cgi?id=2092168): Add 'Unavailable' status to clusteroperator status filter [#11619](https://github.com/openshift/console/pull/11619) * [Bug 2088210](https://bugzilla.redhat.com/show_bug.cgi?id=2088210): Monitoring: Fix first panel sometimes not rendered [#11528](https://github.com/openshift/console/pull/11528) * [Bug 2090124](https://bugzilla.redhat.com/show_bug.cgi?id=2090124): Removing SSH service selectors to minimum required [#11565](https://github.com/openshift/console/pull/11565) * [Bug 2081946](https://bugzilla.redhat.com/show_bug.cgi?id=2081946): Fix default branch param in pipeline import from git flow [#11442](https://github.com/openshift/console/pull/11442) * [Bug 2091402](https://bugzilla.redhat.com/show_bug.cgi?id=2091402): cloud-init User check for Windows VM refuses to accept capitalized [#11592](https://github.com/openshift/console/pull/11592) * [Full changelog](https://github.com/openshift/console/compare/7419e0314f29133b331fc611a4bb1b0ca8ed1426...b8396ad05795f20b19a25f945b922fa7c48d66d9) ### [docker-registry](https://github.com/openshift/image-registry/tree/534ab3aa5e58cb48fb21ff564f59a3ac5077aef1) * [Bug 2099416](https://bugzilla.redhat.com/show_bug.cgi?id=2099416): Support authentication using gcp workload identity federation [#336](https://github.com/openshift/image-registry/pull/336) * [Bug 2085414](https://bugzilla.redhat.com/show_bug.cgi?id=2085414): forward http.StatusTooManyRequests to client [#332](https://github.com/openshift/image-registry/pull/332) * [Full changelog](https://github.com/openshift/image-registry/compare/1c5b669cae9d66f05a9572bcf35d5391efeb80f6...534ab3aa5e58cb48fb21ff564f59a3ac5077aef1) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/0e369dee1b74696a17faf9b9c28e391d6726bf52) * [Bug 2098655](https://bugzilla.redhat.com/show_bug.cgi?id=2098655): gcp cluster rollback fails due to storage failure [#49](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/49) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/223a251c3ba39d8af605258d14794b32a5cfafda...0e369dee1b74696a17faf9b9c28e391d6726bf52) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/8cfebb1ce4a59f15fd8cdd4fba6bb5dc516324f1) * [Bug 2103381](https://bugzilla.redhat.com/show_bug.cgi?id=2103381): UPSTREAM: <carry>: update list of deprecated apis [#1306](https://github.com/openshift/kubernetes/pull/1306) * [Bug 2104928](https://bugzilla.redhat.com/show_bug.cgi?id=2104928): UPSTREAM: 109932: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1263](https://github.com/openshift/kubernetes/pull/1263) * [Full changelog](https://github.com/openshift/kubernetes/compare/3afdacbd0183254f82d302d4e8d14da3d311955f...8cfebb1ce4a59f15fd8cdd4fba6bb5dc516324f1) ### [hypershift](https://github.com/openshift/hypershift/tree/2adf613c06b1050104b4f76908b728ca39856542) * Add fallback set cache value from old token [#1531](https://github.com/openshift/hypershift/pull/1531) * Set Recommended Leader Election Values [#1507](https://github.com/openshift/hypershift/pull/1507) * feat(cpo): Support disable profiling annotation [#1501](https://github.com/openshift/hypershift/pull/1501) * Use ImagePullPolicyIfNotPresent for HO [#1483](https://github.com/openshift/hypershift/pull/1483) * Updated secret permissions to conform to kubernetes CIS benchmark [#1480](https://github.com/openshift/hypershift/pull/1480) * Ensure that everything uses imagePullPolicy IfNotPResent for resiliency [#1475](https://github.com/openshift/hypershift/pull/1475) * Add missing control plane prometheus rules [#1471](https://github.com/openshift/hypershift/pull/1471) * Ensure cache is set during token rotation before reconciling [#1461](https://github.com/openshift/hypershift/pull/1461) * [Full changelog](https://github.com/openshift/hypershift/compare/1db3a63c75e98bc95072cc99107a4b50bd7a7cb2...2adf613c06b1050104b4f76908b728ca39856542) ### [image-customization-controller](https://github.com/openshift/image-customization-controller/tree/44d63f1f9c76ede6d281a1a0f97a823fa0e365e0) * [Bug 2098627](https://bugzilla.redhat.com/show_bug.cgi?id=2098627): Remove the container at exit [#56](https://github.com/openshift/image-customization-controller/pull/56) * Update OWNERS to current team status [#53](https://github.com/openshift/image-customization-controller/pull/53) * [Bug 2061977](https://bugzilla.redhat.com/show_bug.cgi?id=2061977): Add delay between ironic-agent restart, but restart forever [#54](https://github.com/openshift/image-customization-controller/pull/54) * [Bug 2061977](https://bugzilla.redhat.com/show_bug.cgi?id=2061977): Restart ironic-agent.service when it fails [#43](https://github.com/openshift/image-customization-controller/pull/43) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/04a5cb352bd086a12436b6d2683d5b1bc99c39bc...44d63f1f9c76ede6d281a1a0f97a823fa0e365e0) ### [insights-operator](https://github.com/openshift/insights-operator/tree/85bb6ef1e3de2ebea0840a5eba816f19c6d551d8) * Backport console helm installs to 4.10 (#638) [#638](https://github.com/openshift/insights-operator/pull/638) * [Full changelog](https://github.com/openshift/insights-operator/compare/c860386ba27f5a7a7cb0a2a674ad0dfe87ee64ae...85bb6ef1e3de2ebea0840a5eba816f19c6d551d8) ### [ironic](https://github.com/openshift/ironic-image/tree/a5138bf485c5a62c4fe2dd86cdd6c0095f0c5372) * [Bug 2080442](https://bugzilla.redhat.com/show_bug.cgi?id=2080442): Update sushy version [#272](https://github.com/openshift/ironic-image/pull/272) * [Full changelog](https://github.com/openshift/ironic-image/compare/db4f6aa56c5c0105e3fe3bc6448dc709d819f350...a5138bf485c5a62c4fe2dd86cdd6c0095f0c5372) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f68efd033d9ab4faa77cfd83548b8bdc31e897fb) * [Bug 2100775](https://bugzilla.redhat.com/show_bug.cgi?id=2100775): Include Fix discovering WWN/serial for devicemapper devices [#56](https://github.com/openshift/ironic-agent-image/pull/56) * [Bug 2100836](https://bugzilla.redhat.com/show_bug.cgi?id=2100836): Add missing multipath modules [#55](https://github.com/openshift/ironic-agent-image/pull/55) * [Bug 2089312](https://bugzilla.redhat.com/show_bug.cgi?id=2089312): multipath fix for passive paths [#52](https://github.com/openshift/ironic-agent-image/pull/52) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/1170dff4ba9eead71d12d9de053f76e7bf9be2fe...f68efd033d9ab4faa77cfd83548b8bdc31e897fb) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/c5b7159fa16120da52bd2c1e5003e2b1a0e9be33) * [Bug 2095620](https://bugzilla.redhat.com/show_bug.cgi?id=2095620): Bump matrix-project plugin to 1.20 [#1453](https://github.com/openshift/jenkins/pull/1453) * [Full changelog](https://github.com/openshift/jenkins/compare/c8d7a0e46ec04a5d5f64afcf4d43903fe69ff457...c5b7159fa16120da52bd2c1e5003e2b1a0e9be33) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/474a107e08401a2bb9ba749f4b1717b3eb3a508a) * [Bug 2078501](https://bugzilla.redhat.com/show_bug.cgi?id=2078501): [release-4.10] Remove node-tainting for too-small MTU [#422](https://github.com/openshift/sdn/pull/422) * [Full changelog](https://github.com/openshift/sdn/compare/08a8a1a5e774a500f144b4eb49ef2d32f87eb428...474a107e08401a2bb9ba749f4b1717b3eb3a508a) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/e96efa4ed07aa97f3856286a2e884694e3b39dc0) * [Bug 2082079](https://bugzilla.redhat.com/show_bug.cgi?id=2082079): Parallelize ports removal [#663](https://github.com/openshift/kuryr-kubernetes/pull/663) * [Bug 2097277](https://bugzilla.redhat.com/show_bug.cgi?id=2097277): Use upper-constraints.txt from stable/xena in UT [#673](https://github.com/openshift/kuryr-kubernetes/pull/673) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/49e14af45efeb2540d66da35734f3de934e7782f...e96efa4ed07aa97f3856286a2e884694e3b39dc0) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d12b8a8f84ab656b466c89774cbf1992c14f1c9d) * [Bug 2086104](https://bugzilla.redhat.com/show_bug.cgi?id=2086104): Set vCenter client request timeout [#1017](https://github.com/openshift/machine-api-operator/pull/1017) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/668c5b52b104f44f339622cd397c51f584879e02...d12b8a8f84ab656b466c89774cbf1992c14f1c9d) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c3ac7f07f1cae32456a7ab361e29f49af7eb0802) * [Bug 2096564](https://bugzilla.redhat.com/show_bug.cgi?id=2096564): Bug fix for node drain caused by ICSP objects [#3181](https://github.com/openshift/machine-config-operator/pull/3181) * [Bug 2089757](https://bugzilla.redhat.com/show_bug.cgi?id=2089757): configure-ovs: avoid restarting NetworkManager [#3159](https://github.com/openshift/machine-config-operator/pull/3159) * [Bug 2085410](https://bugzilla.redhat.com/show_bug.cgi?id=2085410): OVN Kubernetes configure-ovs-network set static if conversion metric [#3147](https://github.com/openshift/machine-config-operator/pull/3147) * [Bug 2081317](https://bugzilla.redhat.com/show_bug.cgi?id=2081317): configure-ovs.sh: Provide store hint for default route interface [#3131](https://github.com/openshift/machine-config-operator/pull/3131) * [Bug 2076493](https://bugzilla.redhat.com/show_bug.cgi?id=2076493): [on-prem] make Corefile api matching stricter [#3095](https://github.com/openshift/machine-config-operator/pull/3095) * [Bug 2082567](https://bugzilla.redhat.com/show_bug.cgi?id=2082567): [vsphere] remove warning encountered on vSphere UPI cluster without API VIP [#3138](https://github.com/openshift/machine-config-operator/pull/3138) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/f70f2811ec1f6c5057caada406df0a20c477bfc1...c3ac7f07f1cae32456a7ab361e29f49af7eb0802) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/91b015c566df0b8ced35def5d65270e2bb1c0bc4) * Bump fedora-coreos-config to latest stable [#385](https://github.com/openshift/okd-machine-os/pull/385) * Bump FCOS to latest stable [#380](https://github.com/openshift/okd-machine-os/pull/380) * Dockerfile.template: bump machine-os-content version [#377](https://github.com/openshift/okd-machine-os/pull/377) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/3e6786e8f86117475d98d4e19f9e035432ec4176...91b015c566df0b8ced35def5d65270e2bb1c0bc4) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/) * [OCPBUGS-32303](https://issues.redhat.com/browse/OCPBUGS-32303): Add .snyk file to fix SAST warning messages [#84](https://github.com/openshift/multus-admission-controller/pull/84) * [OCPBUGS-32219](https://issues.redhat.com/browse/OCPBUGS-32219): Upstream sync 2024 04 [#83](https://github.com/openshift/multus-admission-controller/pull/83) * [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#80](https://github.com/openshift/multus-admission-controller/pull/80) * [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#79](https://github.com/openshift/multus-admission-controller/pull/79) * [OCPBUGS-24864](https://issues.redhat.com/browse/OCPBUGS-24864): Updating ose-multus-admission-controller-container image to be consistent with ART [#78](https://github.com/openshift/multus-admission-controller/pull/78) * [OCPBUGS-20531](https://issues.redhat.com/browse/OCPBUGS-20531): Update cipher for security hardenings [#76](https://github.com/openshift/multus-admission-controller/pull/76) * [OCPBUGS-21775](https://issues.redhat.com/browse/OCPBUGS-21775): Update master (with CVE fix) [#70](https://github.com/openshift/multus-admission-controller/pull/70) * [OCPBUGS-19094](https://issues.redhat.com/browse/OCPBUGS-19094): Updating ose-multus-admission-controller images to be consistent with ART [#69](https://github.com/openshift/multus-admission-controller/pull/69) * [OCPBUGS-12640](https://issues.redhat.com/browse/OCPBUGS-12640): Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 [#67](https://github.com/openshift/multus-admission-controller/pull/67) * Updating ose-multus-admission-controller images to be consistent with ART [#65](https://github.com/openshift/multus-admission-controller/pull/65) * Updating ose-multus-admission-controller images to be consistent with ART [#64](https://github.com/openshift/multus-admission-controller/pull/64) * Updating ose-multus-admission-controller images to be consistent with ART [#62](https://github.com/openshift/multus-admission-controller/pull/62) * Updating ose-multus-admission-controller images to be consistent with ART [#57](https://github.com/openshift/multus-admission-controller/pull/57) * Updating ose-multus-admission-controller images to be consistent with ART [#54](https://github.com/openshift/multus-admission-controller/pull/54) * Bug #2067863: Dependency Updates [#53](https://github.com/openshift/multus-admission-controller/pull/53) * [SDN-3515](https://issues.redhat.com/browse/SDN-3515): Add the missing handler for tls metrics [#52](https://github.com/openshift/multus-admission-controller/pull/52) * [SDN-3515](https://issues.redhat.com/browse/SDN-3515): Add an option to serve the metrics over HTTPS [#51](https://github.com/openshift/multus-admission-controller/pull/51) * Updating ose-multus-admission-controller images to be consistent with ART [#50](https://github.com/openshift/multus-admission-controller/pull/50) * Allows the optional use of a kubeconfig if the OS env var is set [#49](https://github.com/openshift/multus-admission-controller/pull/49) * Skip to add fieldSelector in case of empty namespace [#48](https://github.com/openshift/multus-admission-controller/pull/48) * Add flag for Ignore namespaces [#46](https://github.com/openshift/multus-admission-controller/pull/46) * Updating ose-multus-admission-controller images to be consistent with ART [#45](https://github.com/openshift/multus-admission-controller/pull/45) * Updating ose-multus-admission-controller images to be consistent with ART [#44](https://github.com/openshift/multus-admission-controller/pull/44) * Updating ose-multus-admission-controller images to be consistent with ART [#42](https://github.com/openshift/multus-admission-controller/pull/42) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d7a7fe5df9f6303487475767acbb5228e8135af3...) ### [multus-cni](https://github.com/openshift/multus-cni/tree/5059ec256a4eb5eb59e10ec59d343d42214d0c08) * [Bug 2084289](https://bugzilla.redhat.com/show_bug.cgi?id=2084289): Bumps net-attach-def client library (for CNI v1.0 IP compatibility) [backport 4.10] [#128](https://github.com/openshift/multus-cni/pull/128) * Updating multus-cni images to be consistent with ART [#110](https://github.com/openshift/multus-cni/pull/110) * [Full changelog](https://github.com/openshift/multus-cni/compare/d27ed81cf52f5f2c3837f536bdf0f487f7abc961...5059ec256a4eb5eb59e10ec59d343d42214d0c08) ### [must-gather](https://github.com/openshift/must-gather/tree/617b8206291039b88a5bbde588682f33938e01aa) * [Bug 2084591](https://bugzilla.redhat.com/show_bug.cgi?id=2084591): Add networking resources [#307](https://github.com/openshift/must-gather/pull/307) * [Full changelog](https://github.com/openshift/must-gather/compare/e1c9bc491c5694a59260beda6dc9e2c22bd8fa9e...617b8206291039b88a5bbde588682f33938e01aa) ### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/d56a6b951d342cd08f45e7222004ab48b7556e95) * [Bug 2084289](https://bugzilla.redhat.com/show_bug.cgi?id=2084289): Backport IPAM fixes [4.10] [#34](https://github.com/openshift/bond-cni/pull/34) * [Full changelog](https://github.com/openshift/bond-cni/compare/84922601528bcd051fbc1e502627cbe93b781c6b...d56a6b951d342cd08f45e7222004ab48b7556e95) ### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/234c13885e0c00a3b3f4f1bf81a868c82508dd2d) * Updating ose-network-metrics-daemon images to be consistent with ART (#40) [#40](https://github.com/openshift/network-metrics-daemon/pull/40) * [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/45712fe06896f0c282e749bd03cde2a110c7a5fb...234c13885e0c00a3b3f4f1bf81a868c82508dd2d) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/effa26af0ee014ef342de1118ba0796cc72aaa01) * [Bug 2094022](https://bugzilla.redhat.com/show_bug.cgi?id=2094022): Update 4.10 to 1.23 [#79](https://github.com/openshift/oauth-apiserver/pull/79) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e854413452142e9c96f4764c0c048f805d5c0e57...effa26af0ee014ef342de1118ba0796cc72aaa01) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/ffc9cbc5da4283c03332afbd41b610954c19d6d2) * [Bug 2101802](https://bugzilla.redhat.com/show_bug.cgi?id=2101802): opm bug fix [#327](https://github.com/openshift/operator-framework-olm/pull/327) * [Bug 2095329](https://bugzilla.redhat.com/show_bug.cgi?id=2095329): [release-4.10] Bump go to v1.17 (#922) [#310](https://github.com/openshift/operator-framework-olm/pull/310) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/1a99acbce6d3fe39fb755c762c362807c98bfc5d...ffc9cbc5da4283c03332afbd41b610954c19d6d2) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7e8f02d004961a2edb050ce8a0ee9ea4b99ca3a7) * [Bug 2099206](https://bugzilla.redhat.com/show_bug.cgi?id=2099206): Update logging for specific policy when creating it [#1149](https://github.com/openshift/ovn-kubernetes/pull/1149) * [Bug 2099822](https://bugzilla.redhat.com/show_bug.cgi?id=2099822): Fix pointer loop var [#1153](https://github.com/openshift/ovn-kubernetes/pull/1153) * [Bug 2091157](https://bugzilla.redhat.com/show_bug.cgi?id=2091157): [release-4.10] Free IPs and delete resources for completed pods [#1152](https://github.com/openshift/ovn-kubernetes/pull/1152) * [Bug 2092501](https://bugzilla.redhat.com/show_bug.cgi?id=2092501): Fixes finding default gateway for configured GW interface [#1131](https://github.com/openshift/ovn-kubernetes/pull/1131) * [Bug 2095193](https://bugzilla.redhat.com/show_bug.cgi?id=2095193): duplicated IPs can be assigned to multiple Pods [#1132](https://github.com/openshift/ovn-kubernetes/pull/1132) * [Bug 2088582](https://bugzilla.redhat.com/show_bug.cgi?id=2088582): Bumps OVN to 21.12.0-58.el8fdp [#1101](https://github.com/openshift/ovn-kubernetes/pull/1101) * [Bug 2086891](https://bugzilla.redhat.com/show_bug.cgi?id=2086891): policy: Fix multicast allow policy type. [#1093](https://github.com/openshift/ovn-kubernetes/pull/1093) * [Bug 2088040](https://bugzilla.redhat.com/show_bug.cgi?id=2088040): Delete ChassisPrivate along with Chassis [#1099](https://github.com/openshift/ovn-kubernetes/pull/1099) * [Bug 2077129](https://bugzilla.redhat.com/show_bug.cgi?id=2077129): [release-4.10] Fixes secondary bridge [#1044](https://github.com/openshift/ovn-kubernetes/pull/1044) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7bf36eea28fe66365d0dfdf8c39e3311ea14d19b...7e8f02d004961a2edb050ce8a0ee9ea4b99ca3a7) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/8cf35b546669161d506cfa1d67eed5d785fe5e01) * [Bug 2095824](https://bugzilla.redhat.com/show_bug.cgi?id=2095824): Report max. nr. of attachable volumes per node [#91](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/91) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5fd04b1ca16b28e0b41d3337e7d370d99074dc46...8cf35b546669161d506cfa1d67eed5d785fe5e01)