# 4.10.6 Created: 2022-03-23 07:34:52 +0000 UTC Image Digest: `sha256:a8a8ad44c289162aa590562d4d8e948fd352d0444cacbef767be4a4f8217c509` Promoted from registry.ci.openshift.org/ocp-ppc64le/release-ppc64le:4.10.0-0.nightly-ppc64le-2022-03-23-025221 ## Changes from 4.10.5 ### Components * Kubernetes upgraded from 1.23.3 to 1.23.5 * Red Hat Enterprise Linux CoreOS upgraded from 410.84.202203141846-0 to 410.84.202203222157-0 ### Rebuilt images without code change * [docker-builder](https://github.com/openshift/builder) git [24d8db40](https://github.com/openshift/builder/commit/24d8db40f7544806bf6e5acc32f56e223a59eed7) `sha256:d0453f666eb479edb561b77a5cc6f23eef1b856cd2bc96258caa32a492ab9591` * [haproxy-router](https://github.com/openshift/router) git [820e08aa](https://github.com/openshift/router/commit/820e08aa07d54458ebb02bc98d512688f86880af) `sha256:129baec459b841968fd7e042d7cba7e8eaab0f44060d8f226489574b0e7b0697` * machine-os-content `sha256:65968578ed4cab51954c6d68d4ebe31a5e5a9ca6b24cf8a18975253909e55aa4` * [must-gather](https://github.com/openshift/must-gather) git [a42fad87](https://github.com/openshift/must-gather/commit/a42fad8768e171ee014d23d3cbdc5aa0e65f7dec) `sha256:a41d4253e616f82e4d67002694915b422df6b74dcdf20ba24d6632fadcce60ba` * [network-tools](https://github.com/openshift/network-tools) git [bcfec9c5](https://github.com/openshift/network-tools/commit/bcfec9c5a054f4c60356175b42a2477ec181fbd9) `sha256:71b0daaad40a1cb155e619cae866ed869c0293cb0a94d7ca48e6cdfd75dd5798` * [tests](https://github.com/openshift/origin) git [9662d8cd](https://github.com/openshift/origin/commit/9662d8cde2124bbd20f37d4a569470ab1aa1cb56) `sha256:431fd716994c8dbdda1326833bd0a78412d626e1023404769e0841c3fda4025e` ### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, hyperkube, image-customization-controller, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-os-images, pod, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/b0357ed765339a43933f657d990f7f9b22f53362) * [Bug 2065620](https://bugzilla.redhat.com/show_bug.cgi?id=2065620): Rebase 1.23.5 [#1220](https://github.com/openshift/kubernetes/pull/1220) * Automated cherry pick of #108631: Remove apf_fd from httplog [#108634](https://github.com/openshift/kubernetes/pull/108634) * Update Go to 1.17.8 [#108559](https://github.com/openshift/kubernetes/pull/108559) * Bump konnectivity-client@v0.0.30 [#108438](https://github.com/openshift/kubernetes/pull/108438) * Automated cherry pick of #107131: Fix default config flags [#108401](https://github.com/openshift/kubernetes/pull/108401) * Automated cherry pick of #108410: fix dryrun when ca file exists [#108469](https://github.com/openshift/kubernetes/pull/108469) * Automated cherry pick of #107121: fix regression introduced by PR 100320 [#108465](https://github.com/openshift/kubernetes/pull/108465) * Automated cherry pick of #107764: wrap error from RunCordonOrUncordon [#107938](https://github.com/openshift/kubernetes/pull/107938) * Automated cherry pick of #107413: kube-proxy: fix duplicate port opening [#108294](https://github.com/openshift/kubernetes/pull/108294) * Automated cherry pick of #107997: cronjob_controllerv2: do not filter jobs to be reconciled by [#108306](https://github.com/openshift/kubernetes/pull/108306) * Automated cherry pick of #108209: increase Azure ACR credential provider timeout [#108226](https://github.com/openshift/kubernetes/pull/108226) * Automated cherry pick of #108149: fix: do not return early in the node informer when there is [#108177](https://github.com/openshift/kubernetes/pull/108177) * Automated cherry pick of #108167: Fix nodes volumesAttached status not updated [#108461](https://github.com/openshift/kubernetes/pull/108461) * Automated cherry pick of #108002: kubeadm: fix the bug that 'kubeadm init --dry-run [#108120](https://github.com/openshift/kubernetes/pull/108120) * test/e2e/framework: include the new control plane taint for "--non-blocking-taints" [#108336](https://github.com/openshift/kubernetes/pull/108336) * /test/e2e_kubeadm: adjust label / taint checks for 1.23 [#108170](https://github.com/openshift/kubernetes/pull/108170) * Automated cherry pick of #108127: test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap [#108128](https://github.com/openshift/kubernetes/pull/108128) * Automated cherry pick of #107900: Add an e2e test for updating a static pod while it [#107931](https://github.com/openshift/kubernetes/pull/107931) * Automated cherry pick of #108198: Updating EndpointSlice strategy to retain node name in [#108201](https://github.com/openshift/kubernetes/pull/108201) * Automated cherry pick of #108138: Revert v1beta1 PodDisruptionBudget select patchStrategy [#108139](https://github.com/openshift/kubernetes/pull/108139) * Automated cherry pick of #107670: Ignore container notfound error while getPodstatuses [#108164](https://github.com/openshift/kubernetes/pull/108164) * Automated cherry pick of #107789: Mark device as uncertain if unmount device succeeds [#107791](https://github.com/openshift/kubernetes/pull/107791) * Update Go to 1.17.7 [#108100](https://github.com/openshift/kubernetes/pull/108100) * Automated cherry pick of #107575: fix: azurefile volumeid conflict in csi migration [#107850](https://github.com/openshift/kubernetes/pull/107850) * Automated cherry pick of #106715: set secondary address on host-network pods [#107988](https://github.com/openshift/kubernetes/pull/107988) * Automated cherry pick of #107970: Make JSON schema round tripping test more strict [#108030](https://github.com/openshift/kubernetes/pull/108030) * Automated cherry pick of #107956: Deeply copy JSONSchemaProps.XValidations. [#107968](https://github.com/openshift/kubernetes/pull/107968) * Automated cherry pick of #107786: Revert "Fix comparison between FQDN and hostname" [#107902](https://github.com/openshift/kubernetes/pull/107902) * Automated cherry pick of #107847: service REST: Call Decorator(old) on update path [#107875](https://github.com/openshift/kubernetes/pull/107875) * Automated cherry pick of #106280: Set max results if its not set [#107651](https://github.com/openshift/kubernetes/pull/107651) * Automated cherry pick of #107695: kubelet: fix podstatus not containing pod full name [#107761](https://github.com/openshift/kubernetes/pull/107761) * [Full changelog](https://github.com/openshift/kubernetes/compare/e419edff267ffa1c60d5e3c51aaaeba7d39c3483...b0357ed765339a43933f657d990f7f9b22f53362) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/17c2fe7527e96e250e442a15727f7558b2fb8899) * [Bug 2064731](https://bugzilla.redhat.com/show_bug.cgi?id=2064731): fix(ibmcloud): Properly match regex for DNS destroy [#5711](https://github.com/openshift/installer/pull/5711) * [Full changelog](https://github.com/openshift/installer/compare/26fec8834ed5b3fef59f4f08f16c66fce52c001e...17c2fe7527e96e250e442a15727f7558b2fb8899) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/6de42bda13eab9625daa5ce18008f9fca1f7ca0f) * [Bug 2049427](https://bugzilla.redhat.com/show_bug.cgi?id=2049427): Enhancing the output provided when backup collections are attempted [#1056](https://github.com/openshift/oc/pull/1056) * [Bug 2060419](https://bugzilla.redhat.com/show_bug.cgi?id=2060419): reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories [#1083](https://github.com/openshift/oc/pull/1083) * [Full changelog](https://github.com/openshift/oc/compare/6db43e22ecffd58dbd1cfb3b245967bde98f9a66...6de42bda13eab9625daa5ce18008f9fca1f7ca0f) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e59a3a2e2d7864f1cb896b28cb929a4decd298f1) * BUG 2063283: Disable keepalive for canary probe [#719](https://github.com/openshift/cluster-ingress-operator/pull/719) * [Bug 2059210](https://bugzilla.redhat.com/show_bug.cgi?id=2059210): Set Upgradeable=False if default cert has no SAN [#710](https://github.com/openshift/cluster-ingress-operator/pull/710) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/377604b43df7d588c70f82c01d48be65808b4f8b...e59a3a2e2d7864f1cb896b28cb929a4decd298f1) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/dc27a8ef15384f8beb38dd0984a565bc366a8c0f) * [Bug 2062452](https://bugzilla.redhat.com/show_bug.cgi?id=2062452): React to changes in clusteroperators [#1585](https://github.com/openshift/cluster-monitoring-operator/pull/1585) * [Bug 2060756](https://bugzilla.redhat.com/show_bug.cgi?id=2060756): Properly deal with an empty console URL [#1582](https://github.com/openshift/cluster-monitoring-operator/pull/1582) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/85f0ee918adacc75c948b216788ebd0ac37f0109...dc27a8ef15384f8beb38dd0984a565bc366a8c0f) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f0fb0faa90ff02e5bd8bb2baa6e015d30cf55d2c) * [Bug 2052839](https://bugzilla.redhat.com/show_bug.cgi?id=2052839): pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating [#738](https://github.com/openshift/cluster-version-operator/pull/738) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/50246cb21aa73155c2bacf2da116baa2df043bc6...f0fb0faa90ff02e5bd8bb2baa6e015d30cf55d2c) ### [console](https://github.com/openshift/console/tree/4b91063ce1241c8ee5c28bcabea721367c7475b4) * [Bug 2059807](https://bugzilla.redhat.com/show_bug.cgi?id=2059807): Show standalone resources as sink and not the one's owned by other resource [#11119](https://github.com/openshift/console/pull/11119) * [Bug 2065672](https://bugzilla.redhat.com/show_bug.cgi?id=2065672): Fix alert from showing an object [#11200](https://github.com/openshift/console/pull/11200) * [Bug 2060090](https://bugzilla.redhat.com/show_bug.cgi?id=2060090): updates versions for kafka and kafkaTopic [#11127](https://github.com/openshift/console/pull/11127) * [Bug 2059989](https://bugzilla.redhat.com/show_bug.cgi?id=2059989): Fix to add labels to webhook secrets created during import [#11125](https://github.com/openshift/console/pull/11125) * [Bug 2056512](https://bugzilla.redhat.com/show_bug.cgi?id=2056512): fix ClusterOperator Status, Version col sorts [#11084](https://github.com/openshift/console/pull/11084) * [Bug 2064510](https://bugzilla.redhat.com/show_bug.cgi?id=2064510): Change the tekton hub api endpoint to use v1 api [#11186](https://github.com/openshift/console/pull/11186) * [Full changelog](https://github.com/openshift/console/compare/7f54212c5716850eb316c0cd68c5fea8f931ad6f...4b91063ce1241c8ee5c28bcabea721367c7475b4) ### [console-operator](https://github.com/openshift/console-operator/tree/e44516b9c315e2dbf9a16ff375a89f3d24ae5af2) * [Bug 2054199](https://bugzilla.redhat.com/show_bug.cgi?id=2054199): Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository [#636](https://github.com/openshift/console-operator/pull/636) * [Full changelog](https://github.com/openshift/console-operator/compare/17a555447f3a6323d371cf2d5228dbc95918c80e...e44516b9c315e2dbf9a16ff375a89f3d24ae5af2) ### [docker-registry](https://github.com/openshift/image-registry/tree/1b72fd80dc58f52a5dc3a9e55c285894de331bad) * [Bug 2061785](https://bugzilla.redhat.com/show_bug.cgi?id=2061785): Fix ICSP for subrepositories [#318](https://github.com/openshift/image-registry/pull/318) * [Full changelog](https://github.com/openshift/image-registry/compare/9fb745125fafe759d08b01c18adf3a5734fb829b...1b72fd80dc58f52a5dc3a9e55c285894de331bad) ### [hypershift](https://github.com/openshift/hypershift/tree/fe045fd56f45102333417749ad332fab2141f284) * Forward from main [#1178](https://github.com/openshift/hypershift/pull/1178) * Add ClusterID to HostedCluster [#1151](https://github.com/openshift/hypershift/pull/1151) * Remove CAPI-provider-agent ClusterRole from hypershift Agent platform [#1162](https://github.com/openshift/hypershift/pull/1162) * Fix typo in how to pause reconciliation doc [#1174](https://github.com/openshift/hypershift/pull/1174) * Update release-4.10 branch with latest from main [#1173](https://github.com/openshift/hypershift/pull/1173) * Ensure that all control plane pods use the cluster's pull secret [#1172](https://github.com/openshift/hypershift/pull/1172) * PKI: Use ECDSA keys by default [#1167](https://github.com/openshift/hypershift/pull/1167) * dev: specify a more useful `ko` base image [#1165](https://github.com/openshift/hypershift/pull/1165) * Unify hypershift install make targets [#1171](https://github.com/openshift/hypershift/pull/1171) * Run unitests with racedetector and -count=25 to detect flakes [#1166](https://github.com/openshift/hypershift/pull/1166) * Dump: Dump guest cluster nodes [#1170](https://github.com/openshift/hypershift/pull/1170) * Add proxy support [#1157](https://github.com/openshift/hypershift/pull/1157) * Resources: Improve runtime of test [#1168](https://github.com/openshift/hypershift/pull/1168) * ensure token minter, socks proxy, and availablity prober are versioned with the control plane operator to prevent large scale restarts on hypershift operator upgrades for IBM Cloud [#1164](https://github.com/openshift/hypershift/pull/1164) * add clusterid label to admin kubeconfig secret [#1154](https://github.com/openshift/hypershift/pull/1154) * Fix events message unit test flake [#1161](https://github.com/openshift/hypershift/pull/1161) * Switching KubeVirt platform's default ingress to NodePort [#1150](https://github.com/openshift/hypershift/pull/1150) * Update release-4.10 branch with latest from main [#1160](https://github.com/openshift/hypershift/pull/1160) * e2e: support dns indirection [#1149](https://github.com/openshift/hypershift/pull/1149) * Surface cloud error conditions for HostedCluster resources [#1135](https://github.com/openshift/hypershift/pull/1135) * feat(cpo): Support OLM catalog placement [#1139](https://github.com/openshift/hypershift/pull/1139) * Allow overriding images at the hypershift operator level [#1155](https://github.com/openshift/hypershift/pull/1155) * Remove capi-provider-agent role from hypershift management [#1153](https://github.com/openshift/hypershift/pull/1153) * Restructure how-to docs to categorise per platform [#1147](https://github.com/openshift/hypershift/pull/1147) * Alow hypershift operator to grant RBAC permissions to the cpai-provider-agent [#1152](https://github.com/openshift/hypershift/pull/1152) * Enable DNS indirection to control plane endpoints [#1145](https://github.com/openshift/hypershift/pull/1145) * Forward from main [#1148](https://github.com/openshift/hypershift/pull/1148) * Validate that agent namespace exists [#1138](https://github.com/openshift/hypershift/pull/1138) * Agent: each hostedcluster provider should have it's own role and role binding in the agent namespace [#1137](https://github.com/openshift/hypershift/pull/1137) * Documented howto BM agent/none [#1079](https://github.com/openshift/hypershift/pull/1079) * prevent privilege esclation by explicitly not allowing the escalate and bind verbs with rbac on the control plane operator [#1136](https://github.com/openshift/hypershift/pull/1136) * Run the konnektivity agent DS with hostnetwork [#1142](https://github.com/openshift/hypershift/pull/1142) * Azure: Fix image name to match what HPO expects [#1141](https://github.com/openshift/hypershift/pull/1141) * Rename variable for machineconfig and pretty print message [#1140](https://github.com/openshift/hypershift/pull/1140) * add konnectivity proxy sidecar to ingress-operator to ensure it can properly perform in cluster canary healthchecks [#1131](https://github.com/openshift/hypershift/pull/1131) * Azure: Add multi-AZ support [#1127](https://github.com/openshift/hypershift/pull/1127) * Azure: Stop logging errors during role assignment retry [#1120](https://github.com/openshift/hypershift/pull/1120) * Azure: Use an apiserver port that ends with 443 to make conformance tests happy [#1133](https://github.com/openshift/hypershift/pull/1133) * Give control-plane-operator access to the pull secret [#1132](https://github.com/openshift/hypershift/pull/1132) * add https prefix for proper redirects of console url [#1129](https://github.com/openshift/hypershift/pull/1129) * Move oidc configmap management back into install command [#1128](https://github.com/openshift/hypershift/pull/1128) * fix dns crd reconciliation for ibm cloud or providers that provide a subdomain [#1123](https://github.com/openshift/hypershift/pull/1123) * Fix create nodepool azure command [#1118](https://github.com/openshift/hypershift/pull/1118) * Azure: Fix credentials log [#1126](https://github.com/openshift/hypershift/pull/1126) * Updated secret permissions to 416 [#1124](https://github.com/openshift/hypershift/pull/1124) * Add missing readiness probes on HA deployments [#1106](https://github.com/openshift/hypershift/pull/1106) * Fix type in azurecluser for Private DNS name [#1119](https://github.com/openshift/hypershift/pull/1119) * Azure: Make the rootdisksize on nodepool configurable [#1097](https://github.com/openshift/hypershift/pull/1097) * [Full changelog](https://github.com/openshift/hypershift/compare/0dc31266db811458bf5f75f5f93fd972380190ad...fe045fd56f45102333417749ad332fab2141f284) ### [insights-operator](https://github.com/openshift/insights-operator/tree/2c979ab4124d32388c75bbac7c78d444c97638a7) * Gather some error messages from the kube-controller-manager containers (#598) [#598](https://github.com/openshift/insights-operator/pull/598) * [Full changelog](https://github.com/openshift/insights-operator/compare/e2ccd26e5a9bf344c82fccc6fb7379b933dd5f36...2c979ab4124d32388c75bbac7c78d444c97638a7) ### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/8b35abf00d38db06a49e569365a06abbdd94db01) * [Bug 2061616](https://bugzilla.redhat.com/show_bug.cgi?id=2061616): [release-4.10] Compute bundle plugins in build [#1398](https://github.com/openshift/jenkins/pull/1398) * [Bug 2063898](https://bugzilla.redhat.com/show_bug.cgi?id=2063898): [release-4.10] 2022-02-15 Security Advisory [#1403](https://github.com/openshift/jenkins/pull/1403) * [Bug 2062053](https://bugzilla.redhat.com/show_bug.cgi?id=2062053): Add Jitendar to OWNERS file [#1401](https://github.com/openshift/jenkins/pull/1401) * [Bug 2055653](https://bugzilla.redhat.com/show_bug.cgi?id=2055653): Add xmlstarlet to handle JENKINS_PASSWORD properly [#1391](https://github.com/openshift/jenkins/pull/1391) * [Full changelog](https://github.com/openshift/jenkins/compare/10e9ee33dcfa338d6cca0f261b98b245e0206ccc...8b35abf00d38db06a49e569365a06abbdd94db01) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/e6ba00b885558712d660a3704c071490d999de6f) * [Bug 2060954](https://bugzilla.redhat.com/show_bug.cgi?id=2060954): Explicitly set keyfile as the default plugin [#2985](https://github.com/openshift/machine-config-operator/pull/2985) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/14a1ca2cb91ff7e0faf9146b21ba12cd6c652d22...e6ba00b885558712d660a3704c071490d999de6f) ### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/4791c3556487d13403f63f258f2c227b47116dec) * [Bug 2050064](https://bugzilla.redhat.com/show_bug.cgi?id=2050064): Ensure subnets belong to the queried network [#219](https://github.com/openshift/cluster-api-provider-openstack/pull/219) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e6b35eb43631023a38b92460661130531236347c...4791c3556487d13403f63f258f2c227b47116dec) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/438d4007de1064385ee4229dd1313a94d5aca0c4) * [Bug 2063834](https://bugzilla.redhat.com/show_bug.cgi?id=2063834): backport 2052975 to 4.10 [#995](https://github.com/openshift/ovn-kubernetes/pull/995) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/74f3edb193507986e746cca162e353273813f8b4...438d4007de1064385ee4229dd1313a94d5aca0c4) ### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/73ddd44bf77c257461981b77a083cf7968745201) * [Bug 2060718](https://bugzilla.redhat.com/show_bug.cgi?id=2060718): Add relabel validations [#161](https://github.com/openshift/prometheus-operator/pull/161) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/53d6d76f3f90adb5a46be6f2347a968e5885c586...73ddd44bf77c257461981b77a083cf7968745201)