Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.6.0-0.okd-2021-01-23-132511

Team Approvals:

No tests for this release

Upgrades from:

• 4.6.9 (changes) - Failed
• 4.6.0-0.okd-2021-01-22-215636 (changes) - F F S
• 4.6.0-0.okd-2021-01-17-185703 (changes) - Success
• 4.6.0-0.okd-2020-12-12-135354 (changes) - Success
• 4.6.0-0.okd-2020-11-27-200126 - Success
• 4.5.0-0.okd-2020-10-15-235428 (changes) - Failed Success

Upgrades to:

• 4.7.0-0.okd-2021-03-07-090821 (changes) - Success
• 4.6.0-0.okd-2021-02-14-205305 (changes) - S S S S

---

Loading changelog, this may take a while ...

Changes from 4.6.0-0.okd-2020-11-27-200126

Created: 2021-01-23 21:54:15 +0000 UTC

Image Digest: sha256:63289dbb5f6304df117c3962ff4185eb1081053916b32c45845260562f72dd36

Release 4.6.0-0.okd-2021-01-23-132511 was created from registry.ci.openshift.org/origin/release:4.6.0-0.okd-2021-01-23-132511

Components

• Kubernetes upgraded from 1.19.0 to 1.19.4
• Fedora CoreOS upgraded from 33.20201124.10 to 33.20210104.3

Rebuilt images without code change

• azure-machine-controllers git db910986 sha256:fd5f495f61ffc75f31cfb1af22ea4b5036ccf67869da04e0612eef2812babccb
• cluster-config-operator git 60c2657a sha256:561cea9b23ee8caae480415cfe979d955228fed47150d20f505bccc6f98afb97
• k8s-prometheus-adapter git 06726fb0 sha256:191193fc71e08e67e9c51106db0666427b485fd3e0a7aa6c1a62e6a4e406c053

aws-ebs-csi-driver

• Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #177
• Full changelog

aws-ebs-csi-driver-operator

• Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #108
• Full changelog

baremetal-installer, installer-artifacts

• vsphere bootstrap: support systemd-resolved in NM prepender #4584
• Fix Authentication manifest for SNO #4578
• Update FCOS to 33.20210104.3.0 #4567
• pkg/asset/machines: include authentication setting for single master #4557
• Update FCOS to 33.20201214.3.1 #4520
• Update base image to 33.20201201.3.0 #4502
• Periodic rebase on release-4.6 #4488
• [FCOS 4.6] release-image-download.sh: use pre-pivot.sh #4475
• Rebase fcos on release-4.6 #4458
• Full changelog

baremetal-runtimecfg

• Updating baremetal-runtimecfg builder & base images to be consistent with ART #114
• Full changelog

cli, cli-artifacts, deployer, tools

• Updating openshift-enterprise-cli builder & base images to be consistent with ART #698
• Updating ose-tools builder & base images to be consistent with ART #704
• Updating ose-cli-artifacts builder & base images to be consistent with ART #705
• Updating openshift-enterprise-deployer builder & base images to be consistent with ART #703
• Bug 1891427: Login: Avoid overwriting same user from different cluster #619
• Bug 1893693: account for nil in LastTransitionTime in route status #633
• Full changelog

cloud-credential-operator

• Bug 1907613: operator: remove odicdiscoveryendpoint controller #277
• Full changelog

cluster-authentication-operator

• Bug 1891795: deployment: update event spam #367
• Full changelog

cluster-autoscaler-operator

• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #191
• Full changelog

cluster-csi-snapshot-controller-operator

• Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART #73
• Full changelog

cluster-dns-operator

• Updating ose-cluster-dns-operator builder & base images to be consistent with ART #228
• Full changelog

cluster-etcd-operator

• Bug 1917411: pkg/operator: ensure etcd endpoints configmap #530
• Updating cluster-etcd-operator builder & base images to be consistent with ART #520
• Bug 1903353: Use socket readiness probe to avoid generating zombies #503
• Full changelog

cluster-image-registry-operator

• Bug 1893977: Keep node-ca daemonset in-sync with reference version #632
• Full changelog

cluster-ingress-operator

• Bug 1918371: Add “ingress.operator.openshift.io/hard-stop-after” annotation #535
• Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #528
• Bug 1905490: Revert “Support changing ingresscontroller load balancer scope” #507
• Bug 1904594: Assume ingresscontroller is external absent status #503
• Bug 1893879: Improve status reporting when pods cannot be scheduled #483
• Full changelog

cluster-kube-apiserver-operator

• Bug 1891742: bump(library-go): controller/staticpod: reduce noise of not-ready containers #1029
• Bug 1900270: don’t allow upgrades when webhooktokenauthenticators are set #1010
• Full changelog

cluster-kube-controller-manager-operator

• Bug 1891742: bump(library-go): controller/staticpod: reduce noise of … #493
• Bug 1898831: do not set allocate-node-cidrs, which is handled by ovn and sdn #484
• Full changelog

cluster-kube-scheduler-operator

• Bug 1891742: bump(library-go): controller/staticpod: reduce noise of … #314
• Bug 1903586: Sync new kube-scheduler-client-cert-key on recovery #315
• Full changelog

cluster-machine-approver

• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #99
• Full changelog

cluster-monitoring-operator

• Updating cluster-monitoring-operator builder & base images to be consistent with ART #1036
• Bug 1900792: Collect all resource counts for telemetry #989
• Bug 1905903: jsonnet: remove apiserver_request:availability30d #1014
• Bug 1892706: fix cluster:cpu_core_hyperthreading rule for s390x #1005
• Bug 1900988: jsonnet: configure SCCs #990
• Full changelog

cluster-network-operator

• Updating cluster-network-operator builder & base images to be consistent with ART #946
• Full changelog

cluster-node-tuning-operator

• Updating cluster-node-tuning-operator builder & base images to be consistent with ART #190
• Bug 1900261: Automatically restart stalld after exit. #182
• Full changelog

cluster-openshift-apiserver-operator

• Bug 1887718: need to be able to disable kube-apiserver connectivity checks #403
• Full changelog

cluster-policy-controller

• Bug 1904028: The quota controllers should resync on new resources and make progress. #50
• Bug 1891518: openshift-object-counts quota is not dynamically updating as the resource is deleted #45
• Full changelog

cluster-samples-operator

• Updating ose-cluster-samples-operator builder & base images to be consistent with ART #353
• Full changelog

cluster-storage-operator

• Updating cluster-storage-operator builder & base images to be consistent with ART #124
• Full changelog

cluster-update-keys

• Bug 1916582: readme: specify which keys are used in nightlies/OKD/OCP builds #30
• Updating ose-cluster-update-keys builder & base images to be consistent with ART #29
• Full changelog

cluster-version-operator

• *: Replace registry.svc.ci.openshift.org with registry.ci.openshift.org #502
• Full changelog

configmap-reloader

• Updating configmap-reload builder & base images to be consistent with ART #26
• Full changelog

console

• Updating openshift-enterprise-console builder & base images to be consistent with ART #7811
• Bug 1910066: fix yaml editor from remounting #7635
• Bug 1910156: Add tolerations for ocs taint in localvolumeset and localvolumediscovery #7636
• [release-4.6 ]Bug 1908749: Fix cluster creation when using localvolume #7591
• Bug 1895325: Enable external mode for OpenStack and oVirt platform #7141
• Bug 1905947: Add support for phase values of CephObjectStoreKind CRD used in OCS 4.5 #7478
• Bug 1905622: Remove restriction on disk type selection for LocalVolumeSet #7464
• Bug 1885442: Fallback to GQL HTTP on iOS devices #6843
• Bug 1899382: removes techpreview badge from eventing #7264
• Bug 1899056: Update dc strategy type and rolling params #7263
• Bug 1898302: Use KUBEADM_PASSWORD_FILE by default #7227
• Bug 1897766: [release-4.6]Incorrect instructions in the Serverless operator and application quick starts (edit) #7215
• Bug 1897019: disable os upload if no os avaliable #7194
• Bug 1896625: update apiVersion for eventing resources wrt serverless 1.10 #7179
• Bug 1896149: Determine Secret type upon the save #7161
• Bug 1895434: Fix edit flow in case of custom template application #7148
• Bug 1895426: Show custom builder image in edit flows BuilderImage section #7147
• Bug 1894878: Access server API via kubernetes.default.svc from Helm endpoints #7132
• Bug 1891499: Show additional machine config pools while updating #7008
• Bug 1891891: Wrong detail head on network policy detail page #7007
• Bug 1890994: Fix form re-render on cancelling #6988
• Bug 1890993: Fix selected capacity to reflect correct disk size #6987
• Bug 1888717: Cypress: Fix ‘link-name’ accesibility violation #6942
• Bug 1887551: Add additional provisioners to their AccessMode mapping #6908
• Bug 1904600: Fix cluster monitoring link #7429
• Bug 1901110: fix pod donut information #7313
• Bug 1899728: fix filesystem queries #7278
• Bug 1892428: Update library-go and replace runc module for v1.0.0-rc8 version #7022
• Bug 1897043: add support for customSchema in resource sidebar for helm charts #7175
• Bug 1898096: Ensure correct git URL for topology edit icon #7218
• Bug 1890614: Fix Cypress test flake and accesibility violation: ‘Ensures buttons have discernible text’ #6981
• Bug 1887782: Include CDI disk cloning to VM status #6923
• Bug 1898875: Remove Tech Preview badge from dev console monitoring #7063
• Bug 1893909: Remove Project link from Application Details page #7078
• Bug 1899512: Allow creating storage cluster irrespective of LSO namespace #7268
• Full changelog

console-operator

• Updating openshift-enterprise-console-operator builder & base images to be consistent with ART #497
• Full changelog

coredns

• Updating coredns builder & base images to be consistent with ART #49
• Full changelog

csi-driver-manila

• Updating csi-driver-manila builder & base images to be consistent with ART #42
• Full changelog

csi-driver-nfs

• Bug 1916166: Updating csi-driver-nfs builder & base images to be consistent with ART #38
• Full changelog

csi-external-attacher

• Updating csi-attacher builder & base images to be consistent with ART #27
• Full changelog

csi-external-provisioner

• Updating csi-provisioner builder & base images to be consistent with ART #35
• Full changelog

csi-external-resizer

• Updating ose-csi-external-resizer builder & base images to be consistent with ART #116
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• Updating ose-csi-snapshot-controller builder & base images to be consistent with ART #37
• Updating ose-csi-external-snapshotter builder & base images to be consistent with ART #38
• Full changelog

csi-livenessprobe

• Updating csi-livenessprobe builder & base images to be consistent with ART #20
• Full changelog

csi-node-driver-registrar

• Updating csi-node-driver-registrar builder & base images to be consistent with ART #25
• Full changelog

docker-builder

• Force use of runc, since we know we’re privileged, and customize our seccomp filter #207
• Bug 1889955: Bump dependencies to mitigate CVE-2020-8564 #193
• Bug 1901512: Fix private git clones behind a proxy #192
• Full changelog

etcd

• Updating ose-etcd builder & base images to be consistent with ART #66
• Full changelog

haproxy-router

• Bug 1918371: Add tunnel-timeout and hard-stop-after options to haproxy template #249
• Updating openshift-enterprise-haproxy-router builder & base images to be consistent with ART #246
• Updating ose-haproxy-router-base builder & base images to be consistent with ART #242
• Bug 1904010: Add unit tests to verify NotReadyAddresses in EndpointSlices #232
• Bug 1904010: Check Ready condition status in Endpointslices #230
• Full changelog

hyperkube

• Bug 1916335: UPSTREAM: 96310: PV e2e: fix race in NFS recycling test #524
• Bug 1915247: UPSTREAM: 97915: kube-aggregator: fix apiservice availability gauge #518
• Bug 1887308: UPSTREAM: 94712: avoid potential secret leaking while reading .dockercfg #437
• Bug 1912564: UPSTREAM: 97323: fix the deadlock in priority and fairness config controller #501
• Bug 1912564: UPSTREAM: 97206: clean up executing request on panic #502
• Bug 1889936: UPSTREAM: 94774: Fix misusage of RLock in timeCache lru.Cache.Get() #419
• Bug 1887748: [4.6] UPSTREAM: 95245: Mask Ceph RBD adminSecrets in logs when logLevel >= 4 #407
• Bug 1901208: Nodes goes into NotReady state (VMware) #466
• Bug 1896691: UPSTREAM: 96120: kubelet: Expose a simple Get-WinEvent shim on the kubelet logs endpoint #446
• Bug 1885619: fix kube-apiserver termination event(s) validation failures #396
• Bug 1896318: UPSTREAM: 95236: vsphere: improve logging message on node cache refresh event #443
• Bug 1900630: 4.6: Update from Kubernetes 1.19.0 to 1.19.4 #435
• Full changelog

insights-operator

• Updating ose-insights-operator builder & base images to be consistent with ART #311
• Bug 1894244: Fixes records index on diskrecorder #261
• [release 4.6] Bug 1888165: Add the namespace to the gatherers reports to avoid conflicts #221
• Bug 1904014: Add hostsubnet to sample archive & fix bug… #276
• [release 4.6] Bug 1888602: Fixes policyClient and the corresponding config. #226
• Full changelog

installer

• Fix Authentication manifest for SNO #4578
• Update FCOS to 33.20210104.3.0 #4567
• pkg/asset/machines: include authentication setting for single master #4557
• Update FCOS to 33.20201214.3.1 #4520
• Update base image to 33.20201201.3.0 #4502
• Periodic rebase on release-4.6 #4488
• [FCOS 4.6] release-image-download.sh: use pre-pivot.sh #4475
• Rebase fcos on release-4.6 #4458
• Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

• Bug 1899472: Add casc plugins #1185
• Bug 1896403: various fixes #1186
• Bug 1888650: updating the scl_source enable from rh-maven35 to rh-maven36 #1171
• Full changelog

keepalived-ipfailover, pod

• Updating openshift-enterprise-pod builder & base images to be consistent with ART #66
• Updating openshift-enterprise-base builder & base images to be consistent with ART #64
• Full changelog

kube-proxy, sdn

• Bug 1915007: Revert NetworkPolicy performance fixes (4.6) #241
• Bug 1891454: Fix error handling from DNS nameservers #210
• Bug 1904455: NetworkPolicy performance (pod caching) #228
• Full changelog

kube-rbac-proxy

• Bug 1906836: Dockerfile.ocp: specify numeric uid #37
• Full changelog

kuryr-cni, kuryr-controller

• Updating kuryr-cni builder & base images to be consistent with ART #435
• Updating kuryr-controller builder & base images to be consistent with ART #434
• Bug 1900562: NP changes sometimes influence new pods/services. #414
• Bug 1896370: Handle None or {} labels in match_selector() #399
• Bug 1892270: Removing network policy from namespace causes inability to access pods through loadbalancer. #385
• Bug 1902204: Force pyroute2 0.5.7 #418
• Full changelog

local-storage-static-provisioner

• Updating local-storage-static-provisioner builder & base images to be consistent with ART #29
• Full changelog

machine-api-operator

• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging #779
• Bug 1908316: Reduce verbosity of kube-rbac-proxy logging for operator #784
• Full changelog

machine-config-operator

• Bug 1913099: Handle keepalived hangs in liveness probe #2319
• Bug 1914910: Add a prestart line to change ownership of openvswitch dir #2331
• Bug 1913316: check for scheduler support before setting #2321
• Bug 1914892: update.go: only set BFQ scheduler for masters #2330
• Updating ose-machine-config-operator builder & base images to be consistent with ART #2335
• Bug 1899622: backport bond options fixes #2298
• Bug 1904825: [release-4.6] templates: Set vSphere hostname from guestinfo before NM starts #2289
• Bug 1904065: [on-prem] export proxy variables to be taken in account #2279
• Bug 1898567: Fix awk syntax in configure-ovs.sh #2233
• Full changelog

machine-os-content

• entrypoint.sh: use stable CRIO #71
• entrypoint: remove open-vm-tools from extension RPMs #68
• Revert “Pin to 33.20210104.10.0” #57
• Set ssh server config to allow RSA SHA1 keys #55
• overlay: symlink /etc/localtime to UTC #60
• Pin to 33.20210104.10.0 #56
• Symlink resolv.conf to /run/systemd/resolve/resolv.conf #53
• Use FCOS stable stream #51
• revert systemd-resolved tweaks #46
• Pin FCOS to 33.20201209.10.0 #49
• Add qemu-guest-agent RPM to extensions #38
• Add kernel-headers to internal repo #45
• bootstrap: add pre-pivot.sh #43
• Dockerfile: use stable cosa #41
• bootstrap: install open-vm-tools binaries from RPMs #39
• Add files to be reused by installer #37
• Update a list of vendored RPMs #32
• overlay: run gcp-hostname on GCP only #29
• overlay: Disable zincati.service via dropin #30
• Add usbguard and kernel-devel RPMs to extensions yum repo #26
• overlay: add custom /etc/nsswitch.conf #25
• Full changelog

multus-admission-controller

• Updating ose-multus-admission-controller builder & base images to be consistent with ART #31
• Full changelog

multus-cni

• Updating multus-cni builder & base images to be consistent with ART #85
• Bug 1905230: Multus should exit zero on DEL when cache file is missing [backport 4.6] #84
• Full changelog

multus-route-override-cni

• Updating ose-multus-route-override-cni builder & base images to be consistent with ART #11
• Full changelog

multus-whereabouts-ipam-cni

• Updating ose-multus-whereabouts-ipam-cni builder & base images to be consistent with ART #44
• Full changelog

must-gather

• Bug 1896691: Collect docker logs from WinEvent log on Windows machines #197
• Full changelog

oauth-apiserver

• Bug 1905195: Detecting broken connections to the Kube API takes up to 15 minutes #34
• Bug 1894345: [release-4.6] register api groups to legacyscheme.Scheme early #27
• Full changelog

oauth-proxy

• Bug 1893969: fix e2e tests to use aws cluster supplied by the CI #194
• Full changelog

openshift-apiserver

• Bug 1906428: When using webhooks in OCP 4.5 fails to rollout latest deploymentconfig #166
• Full changelog

openshift-controller-manager

• remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) #161
• Full changelog

operator-lifecycle-manager

• Bug 1908463: Reduce log noise from OLM #1910
• Bug 1904583: Check sa owner 46 #1890
• Bug 1901871: fix(catalog): be defensive about directly indexing catalog pods #1880
• Bug 1906416: Preserve original .status.lastUpdateTime in copied CSVs. #1902
• Bug 1905746: fix(e2e): Fix subscription manual approval flaky test #1898
• Bug 1899747: Recreate pending installplan if deleted before approval #1874
• Full changelog

operator-marketplace

• Bug 1908431: Preserve custom catsrc w/ default catsrc name on restart #373
• Fix upstream deployment #342
• Full changelog

operator-registry

• Bug 1904547: Include the bundle image itself as a related image. #532
• Bug 1898746: fix(indexing): order bulk add by version field #521
• Full changelog

ovirt-csi-driver-operator

• Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART #39
• Full changelog

ovirt-machine-controllers

• Bug 1910104: Node is not removed when VM has been removed from oVirt engine #79
• Bug 1909990: Port to machine-api-operator #78
• Full changelog

ovn-kubernetes

• Bug 1898160: Egress IP fail-over and health checks #394
• Bug 1886062: Backport klog v2 changes to 4.6 #391
• Bug 1898178: [release-4.6] Handle egress IP assignment for node IPs #349
• Bug 1908803: [4.6] fix network policy when the namespace label changes #389
• Bug 1908472: [4.6] Increase QPS and Burst setting #388
• Bug 1883917: backport reject acl fixes #356
• Bug 1899266: Fixes ICMPv6 flooding behavior #374
• Bug 1898269: Fix broken make check on 4.6 #347
• Full changelog

prom-label-proxy

• Updating prom-label-proxy builder & base images to be consistent with ART #331
• Full changelog

prometheus

• Updating golang-github-prometheus-prometheus builder & base images to be consistent with ART #71
• Full changelog

prometheus-alertmanager

• Updating golang-github-prometheus-alertmanager builder & base images to be consistent with ART #42
• Full changelog

prometheus-node-exporter

• Updating golang-github-prometheus-node_exporter builder & base images to be consistent with ART #77
• Full changelog

tests

• Bug 1917014: replace test/cmd/builds.sh direct/indirect docker.io refs with imagestream image refs #25805
• Bug 1916687: broaden acceptance of scl sample s2i image usage messages #25804
• Bug 1902029: move off docker.io in build e2e’s (approximate recent 4.7 changes) #25721
• Add e2e testing of server-side apply for openshift types #25699
• Full changelog

thanos

• Bug 1885946: pkg/query: eventually update rules client #38
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-21-1114284.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-221403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github