4.5.14

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release@sha256:8ff55fb77359dff9a44392bb382584f53cfb345036a09d27c381545c2912f4eb

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.4.20, 4.4.21, 4.4.23, 4.4.25, 4.4.26, 4.4.27, 4.5.11, 4.5.12, 4.5.13, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.5.9

Loading changelog, this may take a while ...

Changes from 4.5.7

Created: 2020-09-30 13:03:18 +0000 UTC

Image Digest: sha256:8ff55fb77359dff9a44392bb382584f53cfb345036a09d27c381545c2912f4eb

Release 4.5.14 was created from registry.svc.ci.openshift.org/ocp-s390x/release-s390x:4.5.0-0.nightly-s390x-2020-09-28-124000

Components

Kubernetes 1.18.3
Red Hat Enterprise Linux CoreOS upgraded from 45.82.202008150257-0 to 45.82.202009261457-0 (diff)

Rebuilt images without code change

aws-pod-identity-webhook git 2251f7e2 sha256:44e1040683a0344599c04c15dba7de9fb7578ac972b0c8fe912e86da1c68c94d
baremetal-runtimecfg git cefc74c3 sha256:c611f6fbddb2ec35a24ac079e2fcce3a67b302626c894925edfc6bd739e569b1
cluster-autoscaler git c821779c sha256:22cc7e9e63eef8ba5f2a0703e2d4c49d4dab8f6308052043fcf526a17fda7217
cluster-autoscaler-operator git 798a64b7 sha256:c0ecda588453867cec59e138bac617206ceb45911cd3562a3eaba324a1ee3e73
cluster-bootstrap git 04c97c30 sha256:3406c7ec8d691613e7f68da7aa943b88a85c62792942011e08fbb0ba8a11cd1a
cluster-machine-approver git d326f0ae sha256:9894d1b0d463dbd444c36cccd0238ee38230a17db98ca802d59be5b9caef7960
cluster-node-tuned git 27b3ad70 sha256:1c7a7d603eae458a7eca19b9e2c7ac4353b579e4bfd458bd9926b23cde7ed891
cluster-openshift-controller-manager-operator git f5f0253c sha256:e806eaaaa3ff1a47e7a373ff1c9ccbcdf7d90910a9b92142f27eef3bfc5d57e9
cluster-policy-controller git b3c936ae sha256:d7209506b2e81f6a83c58938dd1fe8e77f41f787774f32c207ef384ea4fa8136
cluster-update-keys git 7befe524 sha256:8f865271cc5dc27e032a4f514b151cb702bfc685067f7b0c9464c02988cdba80
configmap-reloader git 8b987c8e sha256:43649a6655ca0382b71331dc6b0a1b63162b179ef5587ee993bbe94095a2f12f
container-networking-plugins git d097ce25 sha256:c55ce017334b8f36d574ab7fff6c1a9f465f8f9ba9722fca9b5ddf7b730e89a9
csi-snapshot-controller git f23c075c sha256:325f49ee12f8616d60dceeedfdfe9c0994d31665ad9c17211a86a17ad344bebb
docker-registry git 861af923 sha256:f3073916ff6c69e97532abb4d50d0384e07bdc7f26f5ecbeecb3e613270554fb
etcd git 9b0a7f70 sha256:41c9f3adcb08042c661165a10781b3f5de44308408a46e861ac9afc8bc25b11c
grafana git f6535967 sha256:8c14b83abab4c32e2993dfed601c97f0623c1e66094be271be551aba36ca95b9
k8s-prometheus-adapter git 66b40f8c sha256:1191b7a16db2408804efcfdb16568eeba868093e975058c75299fbb1f58b876d
kube-rbac-proxy git 76fc3658 sha256:c5e4b35e2e5ae13e1f3a01784b5ffe1140eac54248c70d9b8e4d5ae6e6b3fc63
kube-storage-version-migrator git e63ed4cc sha256:7e90f4c9241e84e92c6a22a933e0a051fe00bc5b1a88d04f3b0593901eb897df
libvirt-machine-controllers git 18593ad7 sha256:1a82be581ade1b46e86c5baec6f2025c481e5b6127956e29910a18c4c6423cd0
local-storage-static-provisioner git 424ccbd2 sha256:bdaeb2e1ccd06208f51255c285ba53c1929fcf501b0d32f6e6aabfcb6dcdeeb1
machine-api-operator git d19e8d00 sha256:54b42b7166ecff3dc7b39a91318f909a536d302a1ff0c80643d72c15218181b0
machine-os-content sha256:2fa035d449704b089e97d0ebf81991db01d540851f113b72056dfa2296e4dcfd
mdns-publisher git 0e41fab1 sha256:7c4b88a15761a525ae23ccfedd8f259b2250b1ac038600a52993e46ace5decfe
multus-admission-controller git 0bd3ff5e sha256:8814a6c0e273759babe99228234bb1f0fb7af89367c0488c0b798101458361d5
multus-cni git 69a29635 sha256:0bf90db74b21b6e267c508e8efa56fe1504cb763ee2d2a9e33980821fd2183ea
multus-route-override-cni git 7f6f53e3 sha256:58b99fc7623b01c765940bdc51a77b42dc5dc4bec7d712ef9f75ee58b7861c57
must-gather git 4e97decf sha256:cbdff2acf3a833a87215447fb4c67d55f2c034317eb25e19d24d833ea2fe237d
oauth-proxy git afb73cdd sha256:2a55da5157d2abd23b88f48e968ead969a70064a556bcad2ac6935499feacf8e
oauth-server git 9f353212 sha256:aa12a58799cea54148c33433d3335bf2bf0b3a90ade9e574e22174ce6518f8e5
openshift-controller-manager git 36e439c1 sha256:d3c7557a6af10546290d9a8eab3fa31a9e2c52421c628a9906a3625a2690fa6a
openshift-state-metrics git 9ba3c522 sha256:affe337d8e27f66f194dd04c0005bd59ecf14d4e02a8fc5773ac556dad5ab974
pod git f8e42129 sha256:c8c55edce054605c9c268e4f4c373619594397cf45fd106e05a4bc3bd18786c6
prom-label-proxy git cfcfdbd1 sha256:20bb8c18c392429c09a324b9ab3dc3416ba0936c29258a813a5c9f940253fc9a
prometheus git b95ba625 sha256:1975fbd6122d9a6b5dd6b2d50aa3fbd3786ab02323fd3c5fdaae9f2f8683e4fe
prometheus-alertmanager git 26fa6b42 sha256:f40dd90b53d95fd9e26e031f86c2e4ecf027e1df81e961029156459df2d60dd6
prometheus-config-reloader git 99b89390 sha256:3e3bd4342c8895e4abffc8102d701337527e01b2592c8bb9b286ff5a76c94e46
prometheus-node-exporter git e6c361ec sha256:5298aa1dfb4240133cc7299e406e05e9bbac5af803e709d7eda9118e55c5873c
prometheus-operator git 99b89390 sha256:c072374a0be978522dbbda789f39c8688b95b6d53641e559b940ba139e4d508b
telemeter git ca9c4f2c sha256:1dc2c7d3fd6aadc3b5fc10c22ea067a010f61508af411c3b09caf3763d16585b
thanos git 0d2ebce5 sha256:5bd336cf7be41d1297f6600de0c9e0825cbe03943d08f1eb771543ab41e13723

aws-machine-controllers, azure-machine-controllers, cli, cli-artifacts, deployer, gcp-machine-controllers, ironic, ironic-inspector, ironic-ipa-downloader, ironic-machine-os-downloader, ironic-static-ip-manager, keepalived-ipfailover, kuryr-cni, kuryr-controller, tools

Bug 1876238: fix typo in oc adm upgrade help #557
Bug 1875551: must-gather: move gather init container under containers #554
Bug 1872519: Allow prune to move on with Removed registry #532
Bug 1870667: oc logout should make the token invalid #525
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 1874009: Ensure proper tagging of compute nodes ports #4120
Bug 1880134: destroy/gcp: correct extract service account email from IAM policy binding member #4195
Bug 1878369: openstack: Upgrade the CI build image #4164
Bug 1872629: OpenStack: dynamically set end of DHCP allocation pool #4094
Bug 1874582: use https for lb probes in Azure UPI #4123
Bug 1873537: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4111
Bug 1859874: Add basic engine URL validation #3948
Bug 1852720: deleting vsphere cluster tag after deleting the attached resources #3981
Bug 1868350: Backport new feature to bypass problems with AWS Accounts using SCP #4046
Full changelog

baremetal-machine-controllers

Bug 1864352: Update leader election for release 4.5 #106
Bug 1862875: remove machine finalizer from host when deleting machine #94
Bug 1863010: ensure delete removes the link between machine and host #93
Full changelog

baremetal-operator

Bug 1851531: Do not write status annotation #84
Full changelog

cloud-credential-operator

Bug 1871713: Mark Manual Clusters Upgradeable=False If 4.6 Cred Request Secrets Are Not Provisioned #244
Bug 1873345: specify a serviceaccount in the deployment #240
Bug 1868350: Backport Permissions Check Bypass for AWS SCP Use Cases #232
Full changelog

cluster-authentication-operator

Bug 1877960: [release-4.5] router-secrets: set named certificates to empty array instead of nil when none found #342
Full changelog

cluster-config-operator

Bug 1880304: Fix bug in reflector not recovering from “Too large resource version” #155
Bug 1879492: Add secure access token annotation controller to handle downgrade from 4.6 #153
Full changelog

cluster-csi-snapshot-controller-operator

Bug 1881359: Run the controller on master nodes #52
Bug 1880309: Bump k8s.io/client-go to v0.18.6 to fix bug in reflector not recovering from “Too large resource version” #53
Full changelog

cluster-dns-operator

[Release 4.5] Bug 1880311: Fix bug in reflector not recovering from “Too large resource version” #198
Full changelog

cluster-etcd-operator

Bug 1877930: Use restore pod yaml from the backup when restoring #442
Bug 1880313: vendor: bump k8s to 1.18.6 to fix bug in reflector not recovering from “Too large resource version” #447
Bug 1859684: Exclude bootstrap in the env variable ETCDCTL_ENDPOINTS #402
Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #434
Update OWNERS #404
Bug 1859678: Forget bootstrap etcd member IP after bootstrap #401
Full changelog

cluster-image-registry-operator

Bug 1843244: Add documentation for Logging field #614
Bug 1880485: Retrying in case of conflict during Config update #613
Bug 1879176: Alerting on failed image prune job #612
Bug 1858927: Fix TestPodAffinityConfiguration flake #581
Bug 1873496: Using last finished job status and disabling retries #599
Full changelog

cluster-ingress-operator

[Release 4.5] Bug 1880315: Fix bug in reflector not recovering from “Too large resource version” #461
Bug 1878148: Backport: Delete Router Deployment Only Upon DNSRecord Deletion #456
Bug 1874244: publishRecordToZones: Fix status merge #449
Bug 1868257: dns: Reread cloud credentials secret if it changes #443
Bug 1871175: Add basic HAProxy alert rules for HAProxy status and Reload failures #440
Full changelog

cluster-kube-apiserver-operator

Bug 1880322: fix bug in reflector not recovering from “Too large resource version” #954
Bug 1874597: static-pod-installer: remove deadlock by recreating inst… #942
Full changelog

cluster-kube-controller-manager-operator

Bug 1881534: Use internal load balancer instead of localhost 4.5 #455
Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #445
Bug 1868615: Revert “Don’t use upstream recycler pod” #438
Bug 1868615: Don’t use upstream recycler pod #433
Full changelog

cluster-kube-scheduler-operator

Bug 1874597: static-pod-installer: remove deadlock by recreating installers that disappear #278
Full changelog

cluster-kube-storage-version-migrator-operator

Bug 1880327: fix bug in reflector not recovering from “Too large resource version” #27
Full changelog

cluster-monitoring-operator

Bug 1859791: alert is firing KubeJobCompletion and KubeJobFailed at the same time #885
Bug 1877256: disable grafana telemetry #922
Bug 1858010: decrease alerts severity #926
Bug 1868304: remove ValidatingWebhookConfiguration for downgrades #909
Full changelog

cluster-network-operator

Bug 1881429: openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 #799
Bug 1874737: [release-4.5] OVN: Handle OVN db upgrades #779
Bug 1868444: Fixes providing empty slice for HybridClusterNetwork #790
Bug 1861412: NetworkAttachmentDefinitions should have output for “oc explain” #734
Bug 1858830: mount host-slash HostToContainer #719
Bug 1856130: [release-4.5] bump golang.org/x/text/encoding to v0.3.3 #714
Full changelog

cluster-node-tuning-operator

Bug 1880348: Bump to k8s 1.18.9 to fix bug in reflector not recovering from “Too large resource version” #155
Full changelog

cluster-openshift-apiserver-operator

Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #395
Full changelog

cluster-samples-operator

Bug 1881068: bump(k8s): Fix bug in reflector not recovering from ‘Too large resource version’ #325
Bug 1857201: initial create errors should map to SamplesExists instead of ImageChangesInProgress #304
Full changelog

cluster-storage-operator

Bug 1874873: Move notUpgradeable check later to prevent z-stream upgrade failures #83
Full changelog

cluster-svcat-apiserver-operator

Bug 1854978: Remove servicecatalogapiserver CRD #91
Bug 1866052: Update golang.org/x/text to v0.3.3 #94
Full changelog

cluster-svcat-controller-manager-operator

Bug 1854978: Remove servicecatalogcontrollermanager CRD #78
Bug 1866054: Update golang.org/x/text to v0.3.3 #81
Full changelog

cluster-version-operator

Bug 1868478: lib/resourcemerge/core: set ShareProcessNamespace, DNSConfig and TerminationGracePeriodSeconds #433
Bug 1857682: [release-4.5] Updating the golang.org/x/text version to v0.3.3 #409
Bug 1866480: pkg/cvo/status: Raise Operator leveling grace-period to 20 minutes #427
Full changelog

console

Bug 1880376: Fix Add Pipeline Trigger for Pipeline Operator 1.1 #6675
Bug 1879247: Fix inline taskSpec error in pipeline page #6638
Bug 1881784: fix empty default value for pipeline parameters #6715
Bug 1878214: Add support for more params and create resources only if required #6598
Bug 1878713: Add fallback to builder image detection #6617
Bug 1840253: Tighten cipher usage to library-go #6503
Bug 1879224: Empty secret should be editable in generic secret form #6636
Bug 1877012: Hide cluster upgrade UI on OpenShift Dedicated #6616
Bug 1876461: remove the import VM from dev perspective #6552
Bug 1870078: Fix Backing Store selection flickering issue in Bucket Class creation wizard #6371
Bug 1855820: Editable TT, EL, CTB, TB #5947
Bug 1870825: Fix blank page/error on ImageManifestVulnPage #6392
Bug 1870585: Fix pipeline workspace volume-type empty-directory #6384
Bug 1875858: fixes issue with internal image imports for self-provisioner with edi… #6533
Bug 1872625: cherry-pick 4.5 add resource icon to task and cluster-task #6446
Bug 1877083: add RBAC checks to cluster upgrade UI #6557
Bug 1856156: Fixes deletion of node connected to a split node #5955
Bug 1875263: Add Storage Class filter for SC dropdown in Backing Store creation page for PVC type #6501
Bug 1847282: Fix DynamicForm component logic for hiding schemas that do not produce form fields #5752
Bug 1873053: Include only node-level network traffic in Network Utilization item. #6459
Bug 1869961: Delete only KSVC, not Route associated with KSVC #6367
Bug 1872288: Delete the hashed session token on user logout #6445
Bug 1869967: adds badge support for providedApis creation #6368
Bug 1869631: Mode Detection independent of Storage Cluster CR name #6353
Bug 1867042: fix log completiontime issue #6244
Bug 1872289: Persistent dashboard to reflect ceph health status as Warning #6427
Bug 1861433: Show descriptions for all dynamic form fields #6136
Bug 1861358: fixes issue with ksvc decorator not showing base route #6131
Bug 1852790: When node disk is under pressure NodeTerminalError should show pod’s status message #5876
Bug 1867050: Use match.path to build tab paths #6260
Bug 1867526: support pipeline task resources to be an optional field based on spec #6282
Bug 1854612: Machine’s ‘Provisioned as node’ phase should use SuccessStatus component with GreenCheckCircleIcon icon #5910
Full changelog

console-operator

Bug 1880307: Fix inconsistent vendoring in vendor/modules.txt #471
Bug 1874529: Configuring custom certificate for default console route #465
Full changelog

coredns

Bug 1862584: Adds HealthcheckBrokenCount to forward plugin #36
Bug 1869309: Back port Handle endpoint tombstones (upstream #3887) #38
Full changelog

docker-builder

Bug 1868401: bump(containers/buildah): #169
Full changelog

haproxy-router

Bug 1879120: Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant #184
Full changelog

hyperkube, tests

Bug 1877346: Fix bug for inconsistent lists served from etcd #25490
Bug 1846451: UPSTREAM: 90419: update strategy used to reuse CPUs from init containers in CPUManager #25310
Bug 1879650: For clusters upgraded from 4.1, skip the anonymous browser access test #25510
Bug 1874251: UPSTREAM: 94204: Add impersonated user to system:authenticated group #25458
Bug 1871951: allow recycler pods to run with best effort qos #25316
Bug 1869220: UPSTREAM: <carry>: oauth: support sha256~ prefixed tokens #25415
Bug 1868314: UPSTREAM: 93355: Fix scheduler issue with nodetree additions #25407
Bug 1862194: UPSTREAM: 85983: fix metrics kubelet_running_pod_count #25359
Bug 1861382: UPSTREAM: 91642: Adjust Azure e2e binding mode #25333
Full changelog

insights-operator

Bug 1882237: Add new team members to OWNERS #191
Bug 1855240: Check also Pod status before enabling Fast upload #139
Bug 1869319: Add @natiiix to OWNERS #156
Full changelog

jenkins, jenkins-agent-maven

Bug 1875259: Bump Jenkins version to 2.235.5 (cve) #1152
Bug 1857550: bump jenkins to 2.235.2 #1117
Full changelog

kube-client-agent, kube-etcd-signer-server

OWNERS: cleanup #22
Full changelog

kube-proxy, sdn

Bug 1878788: vxlan_monitor_test: fix flake #191
Bug 1874798: Add NodeInformer to EgressIP #182
Bug 1870303: Port stuck open when ep deleted before svc in unidling mode #173
Full changelog

kube-state-metrics

Bug 1862404: Bump to v1.9.7 #31
Full changelog

machine-config-operator

Bug 1881147: OpenStack: Don’t failover api vip if loadbalanced endpoint is responding #2110
Bug 1872337: remove err cardinality from mcd_kubelet_state metrics #2023
Bug 1873321: Check the version hash so we resync on an upgrade #2034
Bug 1861026: daemon: perform other rpm-ostree operations after OS rebase #2029
Bug 1870285: OpenStack: Ensure resolv.conf exists before running podman #2012
Bug 1862538: telemetry: change MCDDrainErr from critical to warning #1966
Bug 1855373: etcd: remove etcd entries from mdns #1917
Full changelog

multus-whereabouts-ipam-cni

Bug 1868772: [backport 4.5] Change error message (for missing kubeconfig) #26
Bug 1877065: Fixing wrong DNS-1123 name for some IPv6 addresses #29
Full changelog

openshift-apiserver

Bug 1880353: Fix bug in reflector not recovering from “Too large resource version” #137
Full changelog

openstack-machine-controllers

Bug 1864352: Update leader election for release 4.5 #117
Full changelog

operator-lifecycle-manager

Bug 1878307: shorten catalog sync interval if polling is enabled #1764
Bug 1878359: update catalog image pull policy #1760
Bug 1870782: Retry conflicting catalog source pod update after fetching latest pod spec #1734
Bug 1864121: fix(install): account for installplans when calculating generation #1686
Bug 1866828: Remove unneeded toleration from catalog source pod #1712
Full changelog

operator-marketplace

Bug 1873546: Increase registry delay for large payloads #335
Bug 1877564: Sync remote app-registry #340
Full changelog

operator-registry

Bug 1845588: fix(images): use docker/podman create and cp for exec unpacking #400
Bug 1866861: 4.5 index images should work with 4.6 catalog operator. #434
Full changelog

ovirt-machine-controllers

Bug 1864352: Add leader election mechanism to release 4.5 #68
BUG 1854787: [release-4.5] abort network reconciling while vm is in transient state #65
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

ovn-kubernetes

Bug 1882092: Pin 4.5 OVN to 4.4.24 #284
Bug 1868501: Do not default HO cluster subnets #268
Bug 1870867: Fix br-local duplicate MAC #238
Bug 1874928: Pinning the OVN version for 4.5.8 release #248
Bug 1858304: Set MTU for br-ext hybrid overlay bridge #207
Full changelog

service-ca-operator

Bug 1880360: Fix bug in reflector not recovering from “Too large resource version” #124
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github