Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.10.0-0.okd-2022-04-23-131357

Team Approvals:

No tests for this release

Upgrades from:

• 4.10.0-0.okd-2022-04-22-164413 (changes) - Failed Failed
• 4.10.0-0.okd-2022-03-07-131213 - F F S
• 4.9.0-0.okd-2022-02-12-140851 (changes) - F F F F F

Upgrades to:

• 4.10.0-0.okd-2022-05-28-062148 (changes) - Success
• 4.10.0-0.okd-2022-05-07-021833 (changes) - F F F S

---

Changes from 4.10.0-0.okd-2022-03-07-131213

Created: 2022-04-23 14:02:49 +0000 UTC

Image Digest: sha256:136c507d8909d4a5f6368713da12766a63a2229ad1b58bc00793baa9d8aab8cc

Release 4.10.0-0.okd-2022-04-23-131357 was created from registry.ci.openshift.org/origin/release:4.10.0-0.okd-2022-04-23-131357

Components

• Kubernetes upgraded from 1.23.3 to 1.23.5
• Fedora CoreOS upgraded from 410.35.1 to 410.35.3

New images

• ovirt-installer git 08bc665c sha256:9d78f16f9c9cd527b48985d03494d5d95a1a9b53b73430d2a389f185b1a3ee18

Rebuilt images without code change

• azure-file-csi-driver git f88155b4 sha256:aee53c3846d79b7cef26f1cfc9dca0eb3acdfebd2f17ac1b951eeaec25bc4438
• azure-file-csi-driver-operator git 3807eb37 sha256:24b97aba6e4dca5df9b7a3a2945d54d6f3516cdcfdb7f9331e54f5a90275483f
• cluster-baremetal-operator git 76fd38be sha256:9b64b9c453d58bdf72a4a89202cbd780b5ab9e9010c71d96f3b1625c66cc54fa
• cluster-bootstrap git f22d1c60 sha256:2910fb77e51807b8ff8d41c2d9794ae369f076afb9f4bef69e2784a01ea16696
• coredns git 3ec1ee7d sha256:82723e1d41ab68c0fde2e2f8bfa22ea470a11dd3101d7d214cdf9dd63171788d
• csi-driver-manila git df0b27de sha256:482cbaef97c7532236d07c810899194cbe09ac014de3fd8b461a49bfb35383b0
• openstack-cinder-csi-driver git df0b27de sha256:c4f7fe4e32e5caf3ad17b8e91808f63075d6c97017f85c3ba23144e2b23898b4
• openstack-cinder-csi-driver-operator git e0b57159 sha256:192366a0e644e63647559abbee4bb9d3a20063337561180bc5f89dfaa85692f0
• openstack-cloud-controller-manager git df0b27de sha256:36b9d2eebc016564d22cf1263540d3f4544539960c0abb7656002c1266344eba

baremetal-installer, installer, installer-artifacts

• Bug 2068948: Update region check for coreos AMIs #5752
• Bug 2072135: vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5773
• Bug 2062429: IBMCloud: Missing infra providertype #5693
• Bug 2065808: stop considering Mint mode as supported on Azure (#5699) #5717
• Bug 2064731: fix(ibmcloud): Properly match regex for DNS destroy #5711
• Bug 2051334: Remove non-public AWS regions from list of regions #5624
• Bug 2062748: vsphere: Not found TagCategory when destroying ipi cluster #5696
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug 2068763: make sure that we check for resorces and files before picking the simplest path #1098
• Bug 2068474: expose –keep-startup flag for oc debug #1097
• Bug 2049427: Enhancing the output provided when backup collections are attempted #1056
• Bug 2060419: reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1083
• Bug 2051267: pkg/cli/admin/upgrade: Mention –allow-explicit-upgrade next step when appropriate #1052
• Full changelog

cloud-network-config-controller

• Bug 2062133: Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #28
• Full changelog

cluster-authentication-operator

• Bug 2060473: e2e: Pin Keycloack to the legacy variant #555
• Full changelog

cluster-autoscaler-operator

• Bug 2069095: add leader election flags to autoscaler deployment #243
• Full changelog

cluster-csi-snapshot-controller-operator

• Bug 2062197: Fix race when setting Progressing condition #115
• Full changelog

cluster-etcd-operator

• Bug 2059347: Fix FSyncController degraded latch #755
• Bug 2069825: turn on initial corruption check #771
• Full changelog

cluster-image-registry-operator

• Bug 2074050: Deployment annotations, runtimeClassName override and fs policy change #765
• Full changelog

cluster-ingress-operator

• BUG 2063283: Disable keepalive for canary probe #719
• Bug 2059210: Set Upgradeable=False if default cert has no SAN #710
• Full changelog

cluster-kube-apiserver-operator

• Bug 2071030: OCP 4.10 should be firing APIRemovedInNextEUSReleaseInUse for APIs removed in 1.25 #1335
• Full changelog

cluster-machine-approver

• Bug 2072928: Reconcile recently approved CSRs by other controllers #162
• Full changelog

cluster-monitoring-operator

• Bug 2062452: React to changes in clusteroperators #1585
• Bug 2060756: Properly deal with an empty console URL #1582
• Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568
• Full changelog

cluster-network-operator

• Bug 2058672: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.10] #1322
• Bug 2057961: Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1317
• Bug 2052446: Kuryr: Decrease vif_annotation_timeout #1303
• Update project owners #1332
• Full changelog

cluster-storage-operator

• Bug 2072191: cluster storage operator AWS credentialsrequest lacks KMS privileges #268
• Bug 2061483: Incorrect installation of ibmcloud vpc csi driver in IBM… #265
• Full changelog

cluster-version-operator

• Bug 2071211: lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #764
• Bug 2064991: pkg/cvo: Separate payload load from payload apply #753
• Bug 2052839: pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating #738
• Bug 2053359: Feature gate initialization #740
• Full changelog

console

• Bug 2065008: add a hardcoded blog link as fallback in guided tours #11193
• Bug 2074571: fix bug where Cluster Settings shows 0 of N, 0% progres… #11319
• Bug 2073023: Fix WebSockets not reconnecting during upgrade #11302
• Bug 2072839: fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11297
• Bug 2069246: Fixed the render of a Tab Extension when there is a version present #11242
• Bug 2076221: Fix failing TestGetRegistrySamples test #11351
• Bug 2057218: Added support for customized wizard - new templates #11341
• Bug 2069959: Update getting started blog link #11255
• Bug 2074895: Display correct disk size in Edit disk modal #11329
• Bug 2061250: Update ConsolePlugin manifest #11267
• Bug 2072440: avoid pre-fetching tekton hub task versions in pipeline builder #11290
• Bug 2067719: correct ChannelDocLink url #11225
• Bug 2069913: Fix disabling community tasks in pipeline builder issue #11253
• Bug 2059186: Don’t pass Authorization header when not needed #11108
• Bug 2048892: Add empty state to running VMs card #10986
• Bug 2054949: Disabling Vault SA based auth for storage class encryption #11064
• Bug 2049762: Cannot change storage class of boot disk when creating VM #10994
• Bug 2054650: Allow custom template namespace #11057
• Bug 2067983: Pipeline metrics: use prometheus-tenancy API to get data #11226
• Bug 2065480: Fix VolumeSnapshot creation sort #11196
• Bug 2064988: [Tekton Hub] show read more link in the task quick search details pane #11192
• Bug 2057507: Decode secrets before authorizing repository #11094
• Bug 2052414: Add started-by annotation to pipelines created with “Start last run” #11015
• Bug 2059807: Show standalone resources as sink and not the one’s owned by other resource #11119
• Bug 2065672: Fix alert from showing an object #11200
• Bug 2060090: updates versions for kafka and kafkaTopic #11127
• Bug 2059989: Fix to add labels to webhook secrets created during import #11125
• Bug 2056512: fix ClusterOperator Status, Version col sorts #11084
• Bug 2064510: Change the tekton hub api endpoint to use v1 api #11186
• Bug 2062258: Add optional chaining to avoid npe #11164
• Bug 2059805: clear dashboard variables for dev perspective on unmount #11118
• Bug 2060448: Fix potential issues with namespaces that contains just numbers #11132
• Bug 2059849: fix console crashing in the edit deployment form #11122
• Bug 2055444: Fix sticky footer in pipeline builder’s form yaml switcher #11079
• Bug 2054757: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11059
• Bug 2062146: Allow topology list to select application group #11162
• Bug 2059848: fix duplicate edit app action on installing virtualization operator #11121
• Bug 2062837: Remove tech preview badge for web terminal #11173
• Bug 2055290: Sum total memory of unnamed container only #11072
• Bug 2057260: Fix pipeline run logs autoscrolling issue #11092
• Bug 2048047: Make namespace bar full width and sticky in console #11065
• Full changelog

console-operator

• Bug 2059992: Re-enable TestMetricsEndpoint e2e test case #646
• Bug 2054535: ODF quickstart permissions check #637
• Bug 2054199: Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository #636
• Full changelog

docker-registry

• Bug 2069807: Bug 2060362: Revert “Support authentication using gcp workload identity federation” #321
• Bug 2061785: Fix ICSP for subrepositories #318
• Full changelog

external-dns

• UPSTREAM: <carry>: openshift: Add Arjun in DOWNSTREAM_OWNERS #41
• UPSTREAM: <carry>: openshift: Disable dependabot #35
• Full changelog

hyperkube, pod

• Bug 2069311: UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1231
• Bug 2065774: Backport 108723 OutofCpu Fixes #1221
• Bug 2065620: Rebase 1.23.5 #1220
• Full changelog

hypershift

• feat(cpo): Disable PodSecurity for 4.10 #1289
• Disable PodSecurity admission in 4.11 as it breaks conformance #1286
• Expose a service account signing key in the API #1265
• release-4.10 - Create valid route names with long namespace names #1252
• Fast-Forward from main #1233
• Forward from main #1190
• Forward from main #1178
• Update release-4.10 branch with latest from main #1173
• Update release-4.10 branch with latest from main #1160
• Forward from main #1148
• Updating hypershift images to be consistent with ART #1121
• Update 410 #1113
• Full changelog

insights-operator

• Bug 2072848: Gather namespace names with overlapping UIDs (#605) #605
• Gather some error messages from the kube-controller-manager containers (#598) #598
• Gather cluster images.config.openshift.io resource definition (#581) #581
• Full changelog

ironic-agent

• Bug 2048481: Update ironic-python-agent to latest bugfix version #38
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 2075135: set necessary JVM args to allow jenkins JVM to come up on a FIPS node #1425
• Bug 2069134: [release-4.10] Update bundle-plugins.txt #1420
• Bug 2069134: [release-4.10] Enable supply-chain check #1417
• Bug 2061616: [release-4.10] Compute bundle plugins in build #1398
• Bug 2063898: [release-4.10] 2022-02-15 Security Advisory #1403
• Bug 2062053: Add Jitendar to OWNERS file #1401
• Bug 2055653: Add xmlstarlet to handle JENKINS_PASSWORD properly #1391
• Full changelog

keepalived-ipfailover

• OCPBUGS-33629: Only set the instancetype to master if the preempt strategy is not nopreempt. #197
• OCPBUGS-39480: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.18 #193
• OCPBUGS-41231: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.18 #196
• OCPBUGS-41213: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.18 #195
• OCPBUGS-39544: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.18 #194
• OCPBUGS-38285: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.18 #191
• OCPBUGS-38286: Updating openshift-enterprise-base-container image to be consistent with ART for 4.18 #192
• OCPBUGS-34348: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.17 #186
• OKD-219: add util-linux to base image #187
• OCPBUGS-34152: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.17 #184
• OCPBUGS-34338: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.17 #185
• OCPBUGS-34103: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.17 #183
• OCPBUGS-33909: Updating openshift-enterprise-base-container image to be consistent with ART for 4.17 #182
• OCPBUGS-33908: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.17 #181
• OKD-40: Revert #179 #180
• OKD-40: Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179
• Add dnf-plugins-core in scos to help with OCP image compat #178
• OKD-210: Add sig-cloud repository and enable rt repository #177
• OKD-210: Add the sig-nfv repo in the CS9 base #176
• OCPBUGS-24850: Bump OpenShift 4.16, RHEL9, and iptables package #175
• OCPBUGS-24990: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART #159
• OCPBUGS-24800: Updating ose-egress-http-proxy-container image to be consistent with ART #156
• NO-ISSUE: Add Scott and Mrunal as image approvers #170
• NO-ISSUE: remove bparees from owners #169
• OCPBUGS-29484: update unit tests in egress/dns-proxy #165
• NE-1444: egress/dns-proxy: switch to haproxy28 RPM package #160
• OCPBUGS-24861: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158
• OCPBUGS-24751: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155
• OCPBUGS-24723: Updating openshift-enterprise-base-container image to be consistent with ART #154
• OCPBUGS-19261: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153
• OCPBUGS-19107: Updating ose-egress-http-proxy images to be consistent with ART #150
• OCPBUGS-19239: Updating openshift-enterprise-egress-router images to be consistent with ART #151
• OCPBUGS-18860: Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149
• OCPBUGS-18853: Updating openshift-enterprise-base images to be consistent with ART #148
• OCPBUGS-10176: 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132
• OCPBUGS-10163: Updating openshift-enterprise-egress-router images to be consistent with ART #131
• OCPBUGS-10181: 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133
• NE-1304: container builds: switch to haproxy26 package #141
• OCPBUGS-11385: Removed chroot setting #137
• egress: update owners #139
• OCPBUGS-11595: Revert “[NE-1267] container builds: switch to haproxy26 package” #138
• egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
• OCPBUGS-10003: Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134
• Updating ose-egress-http-proxy images to be consistent with ART #130
• Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
• Updating openshift-enterprise-base images to be consistent with ART #128
• Add jupierce as approver / remove Clayton #127
• rhel9 base image: Fix build failure #126
• Dockerfile: add RHEL9 base image dockerfile #124
• bump RHEL8 egress-dns-proxy image to haproxy26 #125
• Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
• Updating ose-egress-http-proxy images to be consistent with ART #120
• Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
• Updating openshift-enterprise-base images to be consistent with ART #119
• Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
• Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
• Add bparees as approver #118
• Updating openshift-enterprise-base images to be consistent with ART #113
• Updating ose-egress-http-proxy images to be consistent with ART #105
• Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
• Updating openshift-enterprise-egress-router images to be consistent with ART #106
• Bug 2062126: ipfailover: Autodetect the “ens3” NIC #111
• Updating openshift-enterprise-base images to be consistent with ART #109
• Bug 2018188: VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104
• Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
• Full changelog

kube-proxy, sdn

• Bug 2062859: mixed ingress and egress policies can result in half-isolated pods #410
• Bug 2060956: another fix for mixed ingress and egress policies #407
• Full changelog

kuryr-cni, kuryr-controller

• Bug 2055661: Update KLB .spec.provider when required #637
• Full changelog

machine-config-operator

• Bug 2072621: [OCPNODE-869] Create a drop-in file for cri-o’s seccomp use default config #3008
• Bug 2070492: configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3049
• Bug 2062666: configure-ovs: reload NM only when necessary #3005
• Bug 2062290: Add –templates flag to MCC bootstrap command #2997
• Bug 2063326: [release-4.10] Ensure directories are created with usable permission bits #3012
• Bug 2060954: Explicitly set keyfile as the default plugin #2985
• Full changelog

machine-os-content

• Seperate the two fixes for the ‘dot’ in /etc/resolv.conf and the coredns #350
• Pin Fedora kernel #347
• Configure DHCP client identifier via NM #343
• okd overlay: fix openvswitch permissions #337
• fix-resolv-conf-search.service: run after NM #324
• manifests: add support secret #322
• Bump machine-os version #320
• Bump openshift-os to latest release-4.10 #316
• crio: use F35 build of cri-tools #314
• Bump fedora-coreos-config to latest stable #305
• Full changelog

multus-whereabouts-ipam-cni

• Bug 2065488: Sync upstream for context improvements for reconciler [backport 4.10] #88
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#47) #47
• Full changelog

oc-mirror

• build(deps): bump operator-registry dep to v1.21.1 (#390) #390
• Bug 2064901: fix(associations): modifies association return values to allows image… (#359) #359
• Bug 2065500: resolves multiple channel heads in merged catalogs (#372) #372
• chore: adds dynamic version info for version command with ldflags (#328) (#334) #328
• Full changelog

openshift-state-metrics

• Bug 2052804: adding new build comments required for go 1.17 #83
• Full changelog

openstack-machine-controllers

• Bug 2071538: Address CVE-2022-21698 #226
• Bug 2050064: Ensure subnets belong to the queried network #219
• Full changelog

operator-lifecycle-manager, operator-registry

• Bug 2071941: Replace collect-profile jobs that haven’t completed #277
• Bug 2070131: Fix a bug in deletion of webhook service for replacement #272
• Full changelog

ovirt-csi-driver-operator

• Bug 2050118: Add custom CA bundle support #84
• Bug 2070525: Recreate oVirt connection for every sync #94
• Full changelog

ovn-kubernetes

• Bug 2059354: [4.10z] After reboot egress node, lr-policy-list was not correct #994
• Bug 2061804: [4.10] Fixes “ErrorAddingLogicalPort: duplicate IP found in ECMP Pod route cache!” for same pod #990
• Bug 2063834: backport 2052975 to 4.10 #995
• Bug 2057723: Multiple fixes around Network Policies #971
• Update project owners #983
• Full changelog

powervs-machine-controllers

• Updated the package module name #2
• Synch repo cluster-api-provider-powervs with machine-api-provider-powervs #1
• Full changelog

prometheus-config-reloader, prometheus-operator

• Bug 2060718: Add relabel validations #161
• Full changelog

tests

• Bug 2059845: operators should not create watch channels very often: bump OpenStack monitoring operator #26879
• Bug 2076265: [release-4.10] test: switch to testing CapBnd over CapInh #27021
• Bug 2060592: only add failure when no event was found for the target revision #26881
• Bug 2055381: cleanup network policy ACL extended test #26946
• Bug 2059717: IBMCloud: Ignore CRB already exists #26869
• Bug 2061554: Add debug info for signature test #26889
• Bug 2060862: [release-4.10] Increase cluster-monitor-operator watch count threshold on single-node clusters #26872
• Full changelog

vsphere-csi-driver-operator

• Bug 2060213: Fix node check result cache between checks #78
• Full changelog

vsphere-problem-detector

• Bug 2055895: change NodePerfCheck criteria to be based on average latency #76
• Bug 2059255: Fix stale metrics by resetting them #80
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github