# 4.8.0-0.okd-2021-10-24-061736

Created: 2021-10-24 08:32:07 +0000 UTC

Image Digest: `sha256:d04edfa59985f8d1fb2d6dcba12778b5aeab4098ed9798fc843715e32625cfdc`

Promoted from registry.ci.openshift.org/origin/release:4.8.0-0.okd-2021-10-24-061736


## Changes from 4.8.0-0.okd-2021-10-01-221835

### Components

* Kubernetes 1.21.4
* Fedora CoreOS 48.34.0


### Removed images

* ovirt-installer


### Rebuilt images without code change

* [branding](https://github.com/openshift/origin-branding) git [27d852b9](https://github.com/openshift/origin-branding/commit/27d852b9ca56f8828fb604e87a47f7256e0e6c0d) `sha256:156e841442926c4a4941bc2dcac9f6c6e7d2654b3586da3e8a50412f73e79224`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [ec46ea5c](https://github.com/openshift/cluster-policy-controller/commit/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0) `sha256:caf8254cbd4f3fc3e923682106a39f3bcfc62e9746ca909ed50b930e2d17a166`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [0b618896](https://github.com/openshift/gcp-pd-csi-driver/commit/0b618896c6b7c977f96d133060c54ed1b6c87540) `sha256:91b13b41b5f51f02a12c98d18192981928cacbdea2a382d53091b2ecbcfb06d9`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [813c3da7](https://github.com/openshift/kube-rbac-proxy/commit/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5) `sha256:459f15f0e457edaf04fa1a44be6858044d9af4de276620df46dc91a565ddb4ec`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [94716629](https://github.com/openshift/kube-state-metrics/commit/947166293195d115500d4479c0c40c8c01a25ad0) `sha256:fbb2f6f558c81ab9bba876835692a3e79e4d16c59b09423326eb6c807af7a18e`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [901a6d22](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/901a6d221d1cf79b4b6ba859bb43521e0ee635b3) `sha256:1236e9008b34a113bfe4a8db9740b5d5ef3a1b02fe9aeb5e6e63fc03aa91a147`
* [machine-os-content](https://github.com/openshift/okd-machine-os) git [53334094](https://github.com/openshift/okd-machine-os/commit/533340942de8d269a3685841a87137a8cc46ded8) `sha256:a9c5b763321544965ea2b6cac5e7dce68db1beab0af74cdd0dbfec5ca5a5a472`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:0feacebad8c3e833b395870c97c9082731eb2fb18b6fb1981943ba4088642c0f`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [7b6cd3d8](https://github.com/openshift/ovirt-csi-driver-operator/commit/7b6cd3d847c807663f63a6f293748c682c2cad2a) `sha256:991bf77805288b54b1c72e65f3135d602879e1511ea64bd6fb96a9c54673dec8`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [cbf02340](https://github.com/openshift/cluster-api-provider-ovirt/commit/cbf023408f4e8cee956e5996aa013346e1d16b65) `sha256:3f8723d0cf531c8612c0a81bcffbbecbd07f3d5ecc2af15cf3f456047eef68dc`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [2faeb405](https://github.com/openshift/prom-label-proxy/commit/2faeb4050010914d6b55da38bffb44b95702e052) `sha256:ac767d067d4655b7cb9d07c1e518bf7312285d72fd9c6c373e1be413a0cbd41f`


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/560ac283add7d24c07db1582db4c2ac7d80aaeba)

* [Bug 1997906](https://bugzilla.redhat.com/show_bug.cgi?id=1997906): csr request: use generate names to prevent getting stuck waiting for a cert [#494](https://github.com/openshift/cluster-authentication-operator/pull/494)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/baa7b5359d586df9ee16472072d8746fdd42cad9...560ac283add7d24c07db1582db4c2ac7d80aaeba)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/499e84e43d1b100b5704b30a1b24a1017c9f38b2)

* [Bug 2015098](https://bugzilla.redhat.com/show_bug.cgi?id=2015098): Avoid disruptions [#725](https://github.com/openshift/cluster-image-registry-operator/pull/725)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/46c632b1b428b40e472bed63e19a9bd26be94d34...499e84e43d1b100b5704b30a1b24a1017c9f38b2)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d1192808259375f9f85cbbf43e3f5a7548a140ba)

* [Bug 2012010](https://bugzilla.redhat.com/show_bug.cgi?id=2012010): alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert [#1241](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1241)
* [Bug 2001244](https://bugzilla.redhat.com/show_bug.cgi?id=2001244): Enforce OpenShift's defined kubelet version skew policies [#1224](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1224)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a8fd9c8f6cee1ec62f3aa8871dda261015b0228c...d1192808259375f9f85cbbf43e3f5a7548a140ba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/60c71b8a14a5f50708c5a48bcbcede509d5894e1)

* [Bug 2012039](https://bugzilla.redhat.com/show_bug.cgi?id=2012039): Allow namespace label in metric allow list [#1436](https://github.com/openshift/cluster-monitoring-operator/pull/1436)
* [Bug 2005205](https://bugzilla.redhat.com/show_bug.cgi?id=2005205): improve update and status reporting 4.8 [#1428](https://github.com/openshift/cluster-monitoring-operator/pull/1428)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/30af7c477f632bb57eba4ed9c2a389782d8ed8dd...60c71b8a14a5f50708c5a48bcbcede509d5894e1)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/6e3172b88a2839c3384d44135984c5a0b93c1b38)

* [Bug 2013678](https://bugzilla.redhat.com/show_bug.cgi?id=2013678): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#280](https://github.com/openshift/cluster-node-tuning-operator/pull/280)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3f390ad4ecd592c9ca96b6d85b0b473fcf08fa81...6e3172b88a2839c3384d44135984c5a0b93c1b38)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/32254d5aadfc729f7d836fd54080d873eb42ddf7)

* [Bug 2011954](https://bugzilla.redhat.com/show_bug.cgi?id=2011954): pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False [#672](https://github.com/openshift/cluster-version-operator/pull/672)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1b4c2ef4973b0135e50641038356c96ed886adc1...32254d5aadfc729f7d836fd54080d873eb42ddf7)


### [console](https://github.com/openshift/console/tree/46aeb866d13002950e6c95f8617691b3a3d868a0)

* [Bug 2002649](https://bugzilla.redhat.com/show_bug.cgi?id=2002649): Fix SerialConsole display bug [#10034](https://github.com/openshift/console/pull/10034)
* [Bug 1994983](https://bugzilla.redhat.com/show_bug.cgi?id=1994983): use strict promoted template list [#9824](https://github.com/openshift/console/pull/9824)
* [Bug 1977659](https://bugzilla.redhat.com/show_bug.cgi?id=1977659): Adjusting to new reference models changes - cherry-picked rls 4.8 [#9379](https://github.com/openshift/console/pull/9379)
* [Bug 2013091](https://bugzilla.redhat.com/show_bug.cgi?id=2013091): adds check for status in ksvc in util logic [#10211](https://github.com/openshift/console/pull/10211)
* [Bug 1998692](https://bugzilla.redhat.com/show_bug.cgi?id=1998692): Normal user cannot create VM because it cannot access v2v-vmware [#10171](https://github.com/openshift/console/pull/10171)
* (4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com [#9470](https://github.com/openshift/console/pull/9470)
* [Bug 2010076](https://bugzilla.redhat.com/show_bug.cgi?id=2010076): Update prow setup v4.8 [#10168](https://github.com/openshift/console/pull/10168)
* [Full changelog](https://github.com/openshift/console/compare/7c9eff8310786886580f7a83a79eb64876949b52...46aeb866d13002950e6c95f8617691b3a3d868a0)


### [docker-registry](https://github.com/openshift/image-registry/tree/369fd303a1a7e5a2fcc594a63e72dc9cacb4d41f)

* [Bug 2012163](https://bugzilla.redhat.com/show_bug.cgi?id=2012163): Supporting mirror authentication during pull through [#297](https://github.com/openshift/image-registry/pull/297)
* [Full changelog](https://github.com/openshift/image-registry/compare/55dda00416ba705c5ac34ad82c2cf62e128b4b48...369fd303a1a7e5a2fcc594a63e72dc9cacb4d41f)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/58bf9f0e1f5ed9f2168373f8b150ad2cd2e8d18b)

* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): Add imagestream for driver-toolkit [#65](https://github.com/openshift/driver-toolkit/pull/65)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/72e1f298e1ad32747e0edb3491ea90c8906855f5...58bf9f0e1f5ed9f2168373f8b150ad2cd2e8d18b)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6438632813d72669a22c860cd6c218fd4fe4ec24)

* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#1005](https://github.com/openshift/kubernetes/pull/1005)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a620f506e95653a3ee8672445ed2e1133c6470db...6438632813d72669a22c860cd6c218fd4fe4ec24)


### [installer, installer-artifacts](https://github.com/vrutkovs/installer/tree/7b10e34a03fcd5df135ebeec314ea0a57e34c689)

* [Bug 2002349](https://bugzilla.redhat.com/show_bug.cgi?id=2002349): Fix invalid UPI AWS instance type [#5199](https://github.com/vrutkovs/installer/pull/5199)
* [Bug 2008823](https://bugzilla.redhat.com/show_bug.cgi?id=2008823): baremetal: Ensure ipv6 bootstrap VM client-id is predictable [#5250](https://github.com/vrutkovs/installer/pull/5250)
* [Bug 2009019](https://bugzilla.redhat.com/show_bug.cgi?id=2009019): update legacy RHCOS boot image metadata [#5255](https://github.com/vrutkovs/installer/pull/5255)
* [Bug 1982001](https://bugzilla.redhat.com/show_bug.cgi?id=1982001): Bump RHCOS 4.8 boot image [#5227](https://github.com/vrutkovs/installer/pull/5227)
* Update OWNERS [#5242](https://github.com/vrutkovs/installer/pull/5242)
* [Bug 2004236](https://bugzilla.redhat.com/show_bug.cgi?id=2004236): Document how to enable Octavia Day 2 [#5161](https://github.com/vrutkovs/installer/pull/5161)
* [Full changelog](https://github.com/vrutkovs/installer/compare/225720cc2adce8c2ee18aea45d474f442cbe0f78...7b10e34a03fcd5df135ebeec314ea0a57e34c689)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/1ebe7d07db6f05981ead1cbeff601d969ee0714a)

* [Bug 2008114](https://bugzilla.redhat.com/show_bug.cgi?id=2008114): Upgrade Jenkins to 2.289.3 (and related fixes) [#1324](https://github.com/openshift/jenkins/pull/1324)
* [Full changelog](https://github.com/openshift/jenkins/compare/8f554e2ad7ab8636cdbf55b5d0bde4577a5c0af6...1ebe7d07db6f05981ead1cbeff601d969ee0714a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/97e380e65983b903b9ba7c5e492f1a94f384bfaf)

* [Bug 2014166](https://bugzilla.redhat.com/show_bug.cgi?id=2014166): Remove locking from EgressIPTracker.Ping [#362](https://github.com/openshift/sdn/pull/362)
* [Full changelog](https://github.com/openshift/sdn/compare/8b95177a1d66091a610dd728340d58cc16cdb7c8...97e380e65983b903b9ba7c5e492f1a94f384bfaf)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/15fa4c4f43f1f16e29cf87458f2338ba8dde63cf)

* [Bug 1995013](https://bugzilla.redhat.com/show_bug.cgi?id=1995013): Remove ep_slices from klb on endpoint delete event [#550](https://github.com/openshift/kuryr-kubernetes/pull/550)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/e6496908a18096b7c5f1b3cd69bbf577e3e79142...15fa4c4f43f1f16e29cf87458f2338ba8dde63cf)


### [machine-config-operator](https://github.com/vrutkovs/machine-config-operator/tree/71e87f6ea30cf1f128e511ef4251679c9419f1fe)

* [Bug 2011083](https://bugzilla.redhat.com/show_bug.cgi?id=2011083): templates: Silence audit events from container infra by default [#2793](https://github.com/vrutkovs/machine-config-operator/pull/2793)
* [Bug 1985736](https://bugzilla.redhat.com/show_bug.cgi?id=1985736): [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer [#2692](https://github.com/vrutkovs/machine-config-operator/pull/2692)
* [Bug 2000958](https://bugzilla.redhat.com/show_bug.cgi?id=2000958): fixes 1 to 1 kubelet config mapping [#2753](https://github.com/vrutkovs/machine-config-operator/pull/2753)
* [Bug 1999531](https://bugzilla.redhat.com/show_bug.cgi?id=1999531): Set timeoutSeconds for keepalived liveness probe [#2741](https://github.com/vrutkovs/machine-config-operator/pull/2741)
* [Bug 2004122](https://bugzilla.redhat.com/show_bug.cgi?id=2004122): Set ovs syslog level to info [#2762](https://github.com/vrutkovs/machine-config-operator/pull/2762)
* [Bug 1973873](https://bugzilla.redhat.com/show_bug.cgi?id=1973873): match tlsSecurityProfile  doc with kubelet.conf file [#2628](https://github.com/vrutkovs/machine-config-operator/pull/2628)
* [Bug 2000500](https://bugzilla.redhat.com/show_bug.cgi?id=2000500): bump SystemMemoryExceedsReservation alert threshold to 95% [#2748](https://github.com/vrutkovs/machine-config-operator/pull/2748)
* [Bug 1976110](https://bugzilla.redhat.com/show_bug.cgi?id=1976110): configure-ovs: fix nondeterministic master in slave profiles [#2644](https://github.com/vrutkovs/machine-config-operator/pull/2644)
* [Bug 1985735](https://bugzilla.redhat.com/show_bug.cgi?id=1985735): [ON-PREM] HAProxy - enable listening sockets retrieval from old processes [#2691](https://github.com/vrutkovs/machine-config-operator/pull/2691)
* [Full changelog](https://github.com/vrutkovs/machine-config-operator/compare/0158711a217f17115104c13c2dcd242dcabc5047...71e87f6ea30cf1f128e511ef4251679c9419f1fe)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5649248e3d41134d2f0af130b5d00bcd588e7d3d)

* [Bug 1996162](https://bugzilla.redhat.com/show_bug.cgi?id=1996162): Check for pruned bundles on add in replaces mode [#165](https://github.com/openshift/operator-framework-olm/pull/165)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/597a10a4d97180558226ef5dbf5ea9e722a6ddf0...5649248e3d41134d2f0af130b5d00bcd588e7d3d)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3f3d7d1f9e914aff08d2ca2b5663358c8b611656)

* [Bug 1998938](https://bugzilla.redhat.com/show_bug.cgi?id=1998938): Use client-go's leader election implementation [#421](https://github.com/operator-framework/operator-marketplace/pull/421)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add priorityclass annotation to default catalogsources [#418](https://github.com/operator-framework/operator-marketplace/pull/418)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/45b77b3b2aca47267b9ad5d4a6ade27fe9276c85...3f3d7d1f9e914aff08d2ca2b5663358c8b611656)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/c57863f25ec68b34f3928e02b9b750cfcef3c99c)

* [Bug 2013945](https://bugzilla.redhat.com/show_bug.cgi?id=2013945): pvc stuck on pending status when using preallocated storage domain [#89](https://github.com/openshift/ovirt-csi-driver/pull/89)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/c0b1ec3222eb9ddabdc44200d7270898ea48eef5...c57863f25ec68b34f3928e02b9b750cfcef3c99c)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/2697c0b640c121924eb708f97ad9cc102beac1f3)

* [Bug 1986708](https://bugzilla.redhat.com/show_bug.cgi?id=1986708): Add routes for pod: fail only after checking all the gw addresses / ips [#774](https://github.com/openshift/ovn-kubernetes/pull/774)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a0f8cfe371c074a71d626d7bb27ebe7bbb9742fa...2697c0b640c121924eb708f97ad9cc102beac1f3)


### [telemeter](https://github.com/openshift/telemeter/tree/eabad556e8759422b85b2f27248c52626245f1ba)

* Updating telemeter builder & base images to be consistent with ART [#374](https://github.com/openshift/telemeter/pull/374)
* [Full changelog](https://github.com/openshift/telemeter/compare/d6ceb8a4e94f775510591974b2cdeb19819abda0...eabad556e8759422b85b2f27248c52626245f1ba)


### [tests](https://github.com/openshift/origin/tree/5a9d47d1ff479147ca49d55d6bb6ff64cca5609b)

* [Bug 2008114](https://bugzilla.redhat.com/show_bug.cgi?id=2008114): Add role label to jenkins imagestream [#26503](https://github.com/openshift/origin/pull/26503)
* [Full changelog](https://github.com/openshift/origin/compare/a7992c389e048b27a3dfb1a05e9d2691f9e8f371...5a9d47d1ff479147ca49d55d6bb6ff64cca5609b)