# 4.9.0-0.okd-2021-12-12-025847 Created: 2021-12-12 08:49:11 +0000 UTC Image Digest: `sha256:4323eccc8c7cf782ff632a3c8ddf783b3f971af52e1b4bdcb93ab9127ed0be57` Promoted from registry.ci.openshift.org/origin/release:4.9.0-0.okd-2021-12-12-025847 ## Changes from 4.9.0-0.okd-2021-11-28-035710 ### Components * Kubernetes 1.22.3 * Fedora CoreOS upgraded from 49.34.1 to 49.34.2 ### Rebuilt images without code change * [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [473fd0c0](https://github.com/openshift/kuryr-kubernetes/commit/473fd0c037239a478f29431e8c0c21d0dbee58db) `sha256:28a3b5f4c984807eee94dce4e370562cac96e7b0289587ec5a03661dac158783` * [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [473fd0c0](https://github.com/openshift/kuryr-kubernetes/commit/473fd0c037239a478f29431e8c0c21d0dbee58db) `sha256:d3dabdcdbaa13a1b4126a7a1142865a030ea802dcef6947db510ba6196557218` ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/37a13282bc56887e72d463c24168df59d5971b2f) * [Bug 2026379](https://bugzilla.redhat.com/show_bug.cgi?id=2026379): update go.mod for go1.16 [#147](https://github.com/openshift/aws-pod-identity-webhook/pull/147) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/175f98f8b3167349e96a6793f13d1c46a07f7582...37a13282bc56887e72d463c24168df59d5971b2f) ### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/96418c49a7761dc0a299bc083795a771df9ef789) * [Bug 2022172](https://bugzilla.redhat.com/show_bug.cgi?id=2022172): Relax vcenter hostname check [#5372](https://github.com/openshift/installer/pull/5372) * [Bug 2029409](https://bugzilla.redhat.com/show_bug.cgi?id=2029409): Update defaultReleaseImageOriginal to 4.9 [#5450](https://github.com/openshift/installer/pull/5450) * [Bug 2028611](https://bugzilla.redhat.com/show_bug.cgi?id=2028611): vendor: update terraform-provider-google for rate limit fix [#5445](https://github.com/openshift/installer/pull/5445) * [Bug 2027329](https://bugzilla.redhat.com/show_bug.cgi?id=2027329): Handle unset default machine pool [#5424](https://github.com/openshift/installer/pull/5424) * [Bug 2022616](https://bugzilla.redhat.com/show_bug.cgi?id=2022616): Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal [#5380](https://github.com/openshift/installer/pull/5380) * [Full changelog](https://github.com/openshift/installer/compare/1c538b8949f3a0e5b993e1ae33b9cd799806fa93...96418c49a7761dc0a299bc083795a771df9ef789) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/99cf2c85c5bb4c065dfc56053f01617215d4382b) * [Bug 2025691](https://bugzilla.redhat.com/show_bug.cgi?id=2025691): retrieve only single type addresses for Keepalived ingress [#160](https://github.com/openshift/baremetal-runtimecfg/pull/160) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/066cf9fd92c2ddcb47894d87ef6bef52b7fef292...99cf2c85c5bb4c065dfc56053f01617215d4382b) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d642d1125fa4f68415ad7562aab2efa8015cc251) * [Bug 2024751](https://bugzilla.redhat.com/show_bug.cgi?id=2024751): pod-identity-webhook starts without tls [#423](https://github.com/openshift/cloud-credential-operator/pull/423) * [Bug 2015977](https://bugzilla.redhat.com/show_bug.cgi?id=2015977): Stop putting CCO in degraded state when stale credentials are found [#404](https://github.com/openshift/cloud-credential-operator/pull/404) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/fc9fec3cd02ff30fb30a47f6e936847f35e7b40f...d642d1125fa4f68415ad7562aab2efa8015cc251) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/46be73eb6e3c7a4a04f270df3ce35ae3996faedb) * [Bug 2015503](https://bugzilla.redhat.com/show_bug.cgi?id=2015503): User CA bundle sync controller [#138](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/138) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/2b9246cdcb8873e92d9d7913608bed501d900cc9...46be73eb6e3c7a4a04f270df3ce35ae3996faedb) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/63b7a27153503066d1d8db8d66ff9f4ce8cb2417) * [Bug 2029504](https://bugzilla.redhat.com/show_bug.cgi?id=2029504): encryption-controller: sync secrets conditionally [#1268](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1268) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/3a02848339e2e10e4522031c1deaec9a6d553063...63b7a27153503066d1d8db8d66ff9f4ce8cb2417) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5bdde0ed672eec07610dd85ff71f2870d8cb0649) * [Bug 2028961](https://bugzilla.redhat.com/show_bug.cgi?id=2028961): [release-4.9] Set upgrade strategy on kube-proxy [#1239](https://github.com/openshift/cluster-network-operator/pull/1239) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2d3e8d668deccf673c6f9d98a3a09ca1eb8d0679...5bdde0ed672eec07610dd85ff71f2870d8cb0649) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/edeb6536f536af3709c9512e489225d5495e25b3) * controller: update MC after application by TuneD (#294) [#294](https://github.com/openshift/cluster-node-tuning-operator/pull/294) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d2467050dc8053fd7ffde728a37a36cef4124e82...edeb6536f536af3709c9512e489225d5495e25b3) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/13dbfe90070f494ee74518fe74780c4c9f4a7f6e) * [Bug 2029504](https://bugzilla.redhat.com/show_bug.cgi?id=2029504): encryption-controller: sync secrets conditionally [#487](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/487) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/4cc29cff25abd99f618d7f893f5190ff44f7f901...13dbfe90070f494ee74518fe74780c4c9f4a7f6e) ### [console](https://github.com/openshift/console/tree/0f0780c9866da8a0833fd2f250c0dc271bf9233f) * [Bug 2029378](https://bugzilla.redhat.com/show_bug.cgi?id=2029378): Fix NodePort RDP bug [#10612](https://github.com/openshift/console/pull/10612) * [Bug 2026243](https://bugzilla.redhat.com/show_bug.cgi?id=2026243): Fixes add capacity for MCG standalone [#10544](https://github.com/openshift/console/pull/10544) * [Bug 2025937](https://bugzilla.redhat.com/show_bug.cgi?id=2025937): KMS resources not getting created for IBM FlashSystem storage [#10540](https://github.com/openshift/console/pull/10540) * [Bug 2029297](https://bugzilla.redhat.com/show_bug.cgi?id=2029297): Fix troubleshoot link for MON_DISK_LOW [#10609](https://github.com/openshift/console/pull/10609) * [Bug 2026618](https://bugzilla.redhat.com/show_bug.cgi?id=2026618): Add Dev Preview tag for IBM FlashSystem [#10555](https://github.com/openshift/console/pull/10555) * [Bug 2026219](https://bugzilla.redhat.com/show_bug.cgi?id=2026219): Fix Noobaa resources broken details pages [#10543](https://github.com/openshift/console/pull/10543) * [Bug 2028535](https://bugzilla.redhat.com/show_bug.cgi?id=2028535): Backing Store YAML tab on click displays a blank screen on UI [#10603](https://github.com/openshift/console/pull/10603) * [Bug 2022446](https://bugzilla.redhat.com/show_bug.cgi?id=2022446): Fix issue with standalone dashboards (4.9 backport) [#10441](https://github.com/openshift/console/pull/10441) * [Full changelog](https://github.com/openshift/console/compare/1175ba426ffbb7bf8e452a071d583b3453184052...0f0780c9866da8a0833fd2f250c0dc271bf9233f) ### [docker-builder](https://github.com/openshift/builder/tree/62ce08286ce9b6385e785b28c053232361a0f1a3) * [Bug 2022866](https://bugzilla.redhat.com/show_bug.cgi?id=2022866): bump github.com/containers/buildah to v1.22.3 [#272](https://github.com/openshift/builder/pull/272) * [Full changelog](https://github.com/openshift/builder/compare/50d5b91b77c33d9f62f06cf44d4ea6a41a65f3a5...62ce08286ce9b6385e785b28c053232361a0f1a3) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/934e08bc2ce38f85908bcb3c4417fb7aaff850e0) * [Bug 2023452](https://bugzilla.redhat.com/show_bug.cgi?id=2023452): UPSTREAM: 106382: defer close the rotated log open [#1057](https://github.com/openshift/kubernetes/pull/1057) * [Bug 2024967](https://bugzilla.redhat.com/show_bug.cgi?id=2024967): Fix subpath unmount error [#1066](https://github.com/openshift/kubernetes/pull/1066) * [Full changelog](https://github.com/openshift/kubernetes/compare/4dd1b5a1afc832ea28e8c58af4a8d67b30f1278f...934e08bc2ce38f85908bcb3c4417fb7aaff850e0) ### [insights-operator](https://github.com/openshift/insights-operator/tree/3ea4e398afe731042f24b2e493a969ab4db52642) * [Bug 2027637](https://bugzilla.redhat.com/show_bug.cgi?id=2027637): gather webhook configurations (#508) (#559) [#508](https://github.com/openshift/insights-operator/pull/508) * [Full changelog](https://github.com/openshift/insights-operator/compare/02dab7d83f468176ac2a4d5e56ca9b00f8d3a7f3...3ea4e398afe731042f24b2e493a969ab4db52642) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/ecd60f937c2ad1526888917378023fc06818b012) * [Bug 2026302](https://bugzilla.redhat.com/show_bug.cgi?id=2026302): [EgressIP] move `ct(commit)` action from OVS group to flow [#375](https://github.com/openshift/sdn/pull/375) * [Full changelog](https://github.com/openshift/sdn/compare/0b782b36ca62d715720951fefca683b3b30552cb...ecd60f937c2ad1526888917378023fc06818b012) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/383c9b959b69044ec533118cf5d41f17101137f1) * [Bug 2025697](https://bugzilla.redhat.com/show_bug.cgi?id=2025697): [release-4.9]: Bump CAPZ API [#965](https://github.com/openshift/machine-api-operator/pull/965) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/849bd73289228d415414fdde920186539b4c450c...383c9b959b69044ec533118cf5d41f17101137f1) ### [machine-config-operator](https://github.com/vrutkovs/machine-config-operator/tree/03a31c8d9e27b858181dcf857b1e53800856553a) * [Bug 2026275](https://bugzilla.redhat.com/show_bug.cgi?id=2026275): daemon: make cordon/uncordon more robust [#2839](https://github.com/vrutkovs/machine-config-operator/pull/2839) * [Full changelog](https://github.com/vrutkovs/machine-config-operator/compare/178194ec84ff3aa3978279d9f45307f549cd1d8f...03a31c8d9e27b858181dcf857b1e53800856553a) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/83c67f892f0dc9ffe0298d2d07da947f2cf20f0d) * Mid-December bump [#266](https://github.com/openshift/okd-machine-os/pull/266) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/dc6774ca4f1928c5cd0a30b036306eacf81a2387...83c67f892f0dc9ffe0298d2d07da947f2cf20f0d) ### [multus-cni](https://github.com/openshift/multus-cni/tree/c2499377b6fb43320618025876eb5b9751006222) * [Bug 2017881](https://bugzilla.redhat.com/show_bug.cgi?id=2017881): add handling of pod UIDs passed from runtime [#111](https://github.com/openshift/multus-cni/pull/111) * [Full changelog](https://github.com/openshift/multus-cni/compare/5e081d5de3ba3bbb48d0904eabce050f636140e4...c2499377b6fb43320618025876eb5b9751006222) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/2a99475824b229d2d85da89737cf65a162701d41) * Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#71](https://github.com/openshift/whereabouts-cni/pull/71) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/10aaefec5207bb12e950e8e6dfbede09ebfce02a...2a99475824b229d2d85da89737cf65a162701d41) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5fc4c78bb48e66a252672aae137c8dcd8a6e43a8) * [Bug 2024048](https://bugzilla.redhat.com/show_bug.cgi?id=2024048): Remove outdated subscription update logic to improve resolution delay [#215](https://github.com/openshift/operator-framework-olm/pull/215) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/6a8cbc2fef0c94bf9455fee0d08e7357b47cef5b...5fc4c78bb48e66a252672aae137c8dcd8a6e43a8) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/3432c36ae149321863d622ea282c74400c3cd00c) * [Bug 2027864](https://bugzilla.redhat.com/show_bug.cgi?id=2027864): [4.9z] Fixes race between node handler and pod sync [#857](https://github.com/openshift/ovn-kubernetes/pull/857) * [Bug 2027983](https://bugzilla.redhat.com/show_bug.cgi?id=2027983): [4.9.z] Make config parsing more resilient for unknown fields [#860](https://github.com/openshift/ovn-kubernetes/pull/860) * [Bug 2027485](https://bugzilla.redhat.com/show_bug.cgi?id=2027485): [4.9z] addressManager should not call sync() from ErrorCallback [#852](https://github.com/openshift/ovn-kubernetes/pull/852) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7517036e0946010d7439184cba4ac53db4e7b126...3432c36ae149321863d622ea282c74400c3cd00c) ### [tests](https://github.com/openshift/origin/tree/1e6c3ab7e81c4d8a566f7f69a29e3a66d00c2511) * [Bug 2027796](https://bugzilla.redhat.com/show_bug.cgi?id=2027796): [release-4.9] Specify default namespace when getting API endpoint #26644 [#26644](https://github.com/openshift/origin/pull/26644) * [Bug 2027929](https://bugzilla.redhat.com/show_bug.cgi?id=2027929): test/e2e/upgrade/adminack: Poll gates for duration of update [#26656](https://github.com/openshift/origin/pull/26656) * [Bug 2024433](https://bugzilla.redhat.com/show_bug.cgi?id=2024433): CustomNoUpgrade should not fire no-upgrade failures [#26615](https://github.com/openshift/origin/pull/26615) * [Bug 2024773](https://bugzilla.redhat.com/show_bug.cgi?id=2024773): Skipping Django Test until bug is fixed [#26622](https://github.com/openshift/origin/pull/26622) * [Bug 2022866](https://bugzilla.redhat.com/show_bug.cgi?id=2022866): tests/extended/builds handle new step logging [#26606](https://github.com/openshift/origin/pull/26606) * [Bug 2024659](https://bugzilla.redhat.com/show_bug.cgi?id=2024659): Switch the cluster-role-reapers test to Serial [#26618](https://github.com/openshift/origin/pull/26618) * [Bug 2024656](https://bugzilla.redhat.com/show_bug.cgi?id=2024656): Create new-project without updating kubeconfig [#26619](https://github.com/openshift/origin/pull/26619) * [Bug 2025722](https://bugzilla.redhat.com/show_bug.cgi?id=2025722): test/e2e/upgrade: Bump durationToSoftFailure by 15m for minor updates [#26634](https://github.com/openshift/origin/pull/26634) * [Full changelog](https://github.com/openshift/origin/compare/92f7f780917d40239a2e3f12b1392508eabb5eb7...1e6c3ab7e81c4d8a566f7f69a29e3a66d00c2511)