# 4.10.6

Created: 2022-03-23 07:34:52 +0000 UTC

Image Digest: `sha256:a8a8ad44c289162aa590562d4d8e948fd352d0444cacbef767be4a4f8217c509`

Promoted from registry.ci.openshift.org/ocp-ppc64le/release-ppc64le:4.10.0-0.nightly-ppc64le-2022-03-23-025221


## Changes from 4.10.5

### Components

* Kubernetes upgraded from 1.23.3 to 1.23.5
* Red Hat Enterprise Linux CoreOS upgraded from 410.84.202203141846-0 to 410.84.202203222157-0


### Rebuilt images without code change

* [docker-builder](https://github.com/openshift/builder) git [24d8db40](https://github.com/openshift/builder/commit/24d8db40f7544806bf6e5acc32f56e223a59eed7) `sha256:d0453f666eb479edb561b77a5cc6f23eef1b856cd2bc96258caa32a492ab9591`
* [haproxy-router](https://github.com/openshift/router) git [820e08aa](https://github.com/openshift/router/commit/820e08aa07d54458ebb02bc98d512688f86880af) `sha256:129baec459b841968fd7e042d7cba7e8eaab0f44060d8f226489574b0e7b0697`
* machine-os-content `sha256:65968578ed4cab51954c6d68d4ebe31a5e5a9ca6b24cf8a18975253909e55aa4`
* [must-gather](https://github.com/openshift/must-gather) git [a42fad87](https://github.com/openshift/must-gather/commit/a42fad8768e171ee014d23d3cbdc5aa0e65f7dec) `sha256:a41d4253e616f82e4d67002694915b422df6b74dcdf20ba24d6632fadcce60ba`
* [network-tools](https://github.com/openshift/network-tools) git [bcfec9c5](https://github.com/openshift/network-tools/commit/bcfec9c5a054f4c60356175b42a2477ec181fbd9) `sha256:71b0daaad40a1cb155e619cae866ed869c0293cb0a94d7ca48e6cdfd75dd5798`
* [tests](https://github.com/openshift/origin) git [9662d8cd](https://github.com/openshift/origin/commit/9662d8cde2124bbd20f37d4a569470ab1aa1cb56) `sha256:431fd716994c8dbdda1326833bd0a78412d626e1023404769e0841c3fda4025e`


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, hyperkube, image-customization-controller, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-os-images, pod, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/b0357ed765339a43933f657d990f7f9b22f53362)

* [Bug 2065620](https://bugzilla.redhat.com/show_bug.cgi?id=2065620): Rebase 1.23.5 [#1220](https://github.com/openshift/kubernetes/pull/1220)
* Automated cherry pick of #108631: Remove apf_fd from httplog [#108634](https://github.com/openshift/kubernetes/pull/108634)
* Update Go to 1.17.8 [#108559](https://github.com/openshift/kubernetes/pull/108559)
* Bump konnectivity-client@v0.0.30 [#108438](https://github.com/openshift/kubernetes/pull/108438)
* Automated cherry pick of #107131: Fix default config flags [#108401](https://github.com/openshift/kubernetes/pull/108401)
* Automated cherry pick of #108410: fix dryrun when ca file exists [#108469](https://github.com/openshift/kubernetes/pull/108469)
* Automated cherry pick of #107121: fix regression introduced by PR 100320 [#108465](https://github.com/openshift/kubernetes/pull/108465)
* Automated cherry pick of #107764: wrap error from RunCordonOrUncordon [#107938](https://github.com/openshift/kubernetes/pull/107938)
* Automated cherry pick of #107413: kube-proxy: fix duplicate port opening [#108294](https://github.com/openshift/kubernetes/pull/108294)
* Automated cherry pick of #107997: cronjob_controllerv2: do not filter jobs to be reconciled by [#108306](https://github.com/openshift/kubernetes/pull/108306)
* Automated cherry pick of #108209: increase Azure ACR credential provider timeout [#108226](https://github.com/openshift/kubernetes/pull/108226)
* Automated cherry pick of #108149: fix: do not return early in the node informer when there is [#108177](https://github.com/openshift/kubernetes/pull/108177)
* Automated cherry pick of #108167: Fix nodes volumesAttached status not updated [#108461](https://github.com/openshift/kubernetes/pull/108461)
* Automated cherry pick of #108002: kubeadm: fix the bug that 'kubeadm init --dry-run [#108120](https://github.com/openshift/kubernetes/pull/108120)
* test/e2e/framework: include the new control plane taint for "--non-blocking-taints" [#108336](https://github.com/openshift/kubernetes/pull/108336)
* /test/e2e_kubeadm: adjust label / taint checks for 1.23 [#108170](https://github.com/openshift/kubernetes/pull/108170)
* Automated cherry pick of #108127: test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap [#108128](https://github.com/openshift/kubernetes/pull/108128)
* Automated cherry pick of #107900: Add an e2e test for updating a static pod while it [#107931](https://github.com/openshift/kubernetes/pull/107931)
* Automated cherry pick of #108198: Updating EndpointSlice strategy to retain node name in [#108201](https://github.com/openshift/kubernetes/pull/108201)
* Automated cherry pick of #108138: Revert v1beta1 PodDisruptionBudget select patchStrategy [#108139](https://github.com/openshift/kubernetes/pull/108139)
* Automated cherry pick of #107670: Ignore container notfound error while getPodstatuses [#108164](https://github.com/openshift/kubernetes/pull/108164)
* Automated cherry pick of #107789: Mark device as uncertain if unmount device succeeds [#107791](https://github.com/openshift/kubernetes/pull/107791)
* Update Go to 1.17.7 [#108100](https://github.com/openshift/kubernetes/pull/108100)
* Automated cherry pick of #107575: fix: azurefile volumeid conflict in csi migration [#107850](https://github.com/openshift/kubernetes/pull/107850)
* Automated cherry pick of #106715: set secondary address on host-network pods [#107988](https://github.com/openshift/kubernetes/pull/107988)
* Automated cherry pick of #107970: Make JSON schema round tripping test more strict [#108030](https://github.com/openshift/kubernetes/pull/108030)
* Automated cherry pick of #107956: Deeply copy JSONSchemaProps.XValidations. [#107968](https://github.com/openshift/kubernetes/pull/107968)
* Automated cherry pick of #107786: Revert "Fix comparison between FQDN and hostname" [#107902](https://github.com/openshift/kubernetes/pull/107902)
* Automated cherry pick of #107847: service REST: Call Decorator(old) on update path [#107875](https://github.com/openshift/kubernetes/pull/107875)
* Automated cherry pick of #106280: Set max results if its not set [#107651](https://github.com/openshift/kubernetes/pull/107651)
* Automated cherry pick of #107695: kubelet: fix podstatus not containing pod full name [#107761](https://github.com/openshift/kubernetes/pull/107761)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e419edff267ffa1c60d5e3c51aaaeba7d39c3483...b0357ed765339a43933f657d990f7f9b22f53362)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/17c2fe7527e96e250e442a15727f7558b2fb8899)

* [Bug 2064731](https://bugzilla.redhat.com/show_bug.cgi?id=2064731): fix(ibmcloud): Properly match regex for DNS destroy [#5711](https://github.com/openshift/installer/pull/5711)
* [Full changelog](https://github.com/openshift/installer/compare/26fec8834ed5b3fef59f4f08f16c66fce52c001e...17c2fe7527e96e250e442a15727f7558b2fb8899)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/6de42bda13eab9625daa5ce18008f9fca1f7ca0f)

* [Bug 2049427](https://bugzilla.redhat.com/show_bug.cgi?id=2049427): Enhancing the output provided when backup collections are attempted [#1056](https://github.com/openshift/oc/pull/1056)
* [Bug 2060419](https://bugzilla.redhat.com/show_bug.cgi?id=2060419): reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories [#1083](https://github.com/openshift/oc/pull/1083)
* [Full changelog](https://github.com/openshift/oc/compare/6db43e22ecffd58dbd1cfb3b245967bde98f9a66...6de42bda13eab9625daa5ce18008f9fca1f7ca0f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e59a3a2e2d7864f1cb896b28cb929a4decd298f1)

* BUG 2063283: Disable keepalive for canary probe [#719](https://github.com/openshift/cluster-ingress-operator/pull/719)
* [Bug 2059210](https://bugzilla.redhat.com/show_bug.cgi?id=2059210): Set Upgradeable=False if default cert has no SAN [#710](https://github.com/openshift/cluster-ingress-operator/pull/710)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/377604b43df7d588c70f82c01d48be65808b4f8b...e59a3a2e2d7864f1cb896b28cb929a4decd298f1)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/dc27a8ef15384f8beb38dd0984a565bc366a8c0f)

* [Bug 2062452](https://bugzilla.redhat.com/show_bug.cgi?id=2062452): React to changes in clusteroperators [#1585](https://github.com/openshift/cluster-monitoring-operator/pull/1585)
* [Bug 2060756](https://bugzilla.redhat.com/show_bug.cgi?id=2060756): Properly deal with an empty console URL [#1582](https://github.com/openshift/cluster-monitoring-operator/pull/1582)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/85f0ee918adacc75c948b216788ebd0ac37f0109...dc27a8ef15384f8beb38dd0984a565bc366a8c0f)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f0fb0faa90ff02e5bd8bb2baa6e015d30cf55d2c)

* [Bug 2052839](https://bugzilla.redhat.com/show_bug.cgi?id=2052839): pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating [#738](https://github.com/openshift/cluster-version-operator/pull/738)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/50246cb21aa73155c2bacf2da116baa2df043bc6...f0fb0faa90ff02e5bd8bb2baa6e015d30cf55d2c)


### [console](https://github.com/openshift/console/tree/4b91063ce1241c8ee5c28bcabea721367c7475b4)

* [Bug 2059807](https://bugzilla.redhat.com/show_bug.cgi?id=2059807): Show standalone resources as sink and not the one's owned by other resource [#11119](https://github.com/openshift/console/pull/11119)
* [Bug 2065672](https://bugzilla.redhat.com/show_bug.cgi?id=2065672): Fix  alert from showing an object [#11200](https://github.com/openshift/console/pull/11200)
* [Bug 2060090](https://bugzilla.redhat.com/show_bug.cgi?id=2060090): updates versions for kafka and kafkaTopic [#11127](https://github.com/openshift/console/pull/11127)
* [Bug 2059989](https://bugzilla.redhat.com/show_bug.cgi?id=2059989): Fix to add labels to webhook secrets created during import [#11125](https://github.com/openshift/console/pull/11125)
* [Bug 2056512](https://bugzilla.redhat.com/show_bug.cgi?id=2056512): fix ClusterOperator Status, Version col sorts [#11084](https://github.com/openshift/console/pull/11084)
* [Bug 2064510](https://bugzilla.redhat.com/show_bug.cgi?id=2064510): Change the tekton hub api endpoint to use v1 api [#11186](https://github.com/openshift/console/pull/11186)
* [Full changelog](https://github.com/openshift/console/compare/7f54212c5716850eb316c0cd68c5fea8f931ad6f...4b91063ce1241c8ee5c28bcabea721367c7475b4)


### [console-operator](https://github.com/openshift/console-operator/tree/e44516b9c315e2dbf9a16ff375a89f3d24ae5af2)

* [Bug 2054199](https://bugzilla.redhat.com/show_bug.cgi?id=2054199): Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository [#636](https://github.com/openshift/console-operator/pull/636)
* [Full changelog](https://github.com/openshift/console-operator/compare/17a555447f3a6323d371cf2d5228dbc95918c80e...e44516b9c315e2dbf9a16ff375a89f3d24ae5af2)


### [docker-registry](https://github.com/openshift/image-registry/tree/1b72fd80dc58f52a5dc3a9e55c285894de331bad)

* [Bug 2061785](https://bugzilla.redhat.com/show_bug.cgi?id=2061785): Fix ICSP for subrepositories [#318](https://github.com/openshift/image-registry/pull/318)
* [Full changelog](https://github.com/openshift/image-registry/compare/9fb745125fafe759d08b01c18adf3a5734fb829b...1b72fd80dc58f52a5dc3a9e55c285894de331bad)


### [hypershift](https://github.com/openshift/hypershift/tree/fe045fd56f45102333417749ad332fab2141f284)

* Forward from main [#1178](https://github.com/openshift/hypershift/pull/1178)
* Add ClusterID to HostedCluster [#1151](https://github.com/openshift/hypershift/pull/1151)
* Remove CAPI-provider-agent ClusterRole from hypershift Agent platform [#1162](https://github.com/openshift/hypershift/pull/1162)
* Fix typo in how to pause reconciliation doc [#1174](https://github.com/openshift/hypershift/pull/1174)
* Update release-4.10 branch with latest from main [#1173](https://github.com/openshift/hypershift/pull/1173)
* Ensure that all control plane pods use the cluster's pull secret [#1172](https://github.com/openshift/hypershift/pull/1172)
* PKI: Use ECDSA keys by default [#1167](https://github.com/openshift/hypershift/pull/1167)
* dev: specify a more useful `ko` base image [#1165](https://github.com/openshift/hypershift/pull/1165)
* Unify hypershift install make targets [#1171](https://github.com/openshift/hypershift/pull/1171)
* Run unitests with racedetector and -count=25 to detect flakes [#1166](https://github.com/openshift/hypershift/pull/1166)
* Dump: Dump guest cluster nodes [#1170](https://github.com/openshift/hypershift/pull/1170)
* Add proxy support [#1157](https://github.com/openshift/hypershift/pull/1157)
* Resources: Improve runtime of test [#1168](https://github.com/openshift/hypershift/pull/1168)
* ensure token minter, socks proxy, and availablity prober are versioned with the control plane operator to prevent large scale restarts on hypershift operator upgrades for IBM Cloud [#1164](https://github.com/openshift/hypershift/pull/1164)
* add clusterid label to admin kubeconfig secret [#1154](https://github.com/openshift/hypershift/pull/1154)
* Fix events message unit test flake [#1161](https://github.com/openshift/hypershift/pull/1161)
* Switching KubeVirt platform's default ingress to NodePort [#1150](https://github.com/openshift/hypershift/pull/1150)
* Update release-4.10 branch with latest from main [#1160](https://github.com/openshift/hypershift/pull/1160)
* e2e: support dns indirection [#1149](https://github.com/openshift/hypershift/pull/1149)
* Surface cloud error conditions for HostedCluster resources [#1135](https://github.com/openshift/hypershift/pull/1135)
* feat(cpo): Support OLM catalog placement [#1139](https://github.com/openshift/hypershift/pull/1139)
* Allow overriding images at the hypershift operator level [#1155](https://github.com/openshift/hypershift/pull/1155)
* Remove capi-provider-agent role from hypershift management [#1153](https://github.com/openshift/hypershift/pull/1153)
* Restructure how-to docs to categorise per platform [#1147](https://github.com/openshift/hypershift/pull/1147)
* Alow hypershift operator to grant RBAC permissions to the cpai-provider-agent [#1152](https://github.com/openshift/hypershift/pull/1152)
* Enable DNS indirection to control plane endpoints [#1145](https://github.com/openshift/hypershift/pull/1145)
* Forward from main [#1148](https://github.com/openshift/hypershift/pull/1148)
* Validate that agent namespace exists [#1138](https://github.com/openshift/hypershift/pull/1138)
* Agent: each hostedcluster provider should have it's own role and role binding in the agent namespace [#1137](https://github.com/openshift/hypershift/pull/1137)
* Documented howto BM agent/none [#1079](https://github.com/openshift/hypershift/pull/1079)
* prevent privilege esclation by explicitly not allowing the escalate and bind verbs with rbac on the control plane operator [#1136](https://github.com/openshift/hypershift/pull/1136)
* Run the konnektivity agent DS with hostnetwork [#1142](https://github.com/openshift/hypershift/pull/1142)
* Azure: Fix image name to match what HPO expects [#1141](https://github.com/openshift/hypershift/pull/1141)
* Rename variable for machineconfig and pretty print message [#1140](https://github.com/openshift/hypershift/pull/1140)
* add konnectivity proxy sidecar to ingress-operator to ensure it can properly perform in cluster canary healthchecks [#1131](https://github.com/openshift/hypershift/pull/1131)
* Azure: Add multi-AZ support [#1127](https://github.com/openshift/hypershift/pull/1127)
* Azure: Stop logging errors during role assignment retry [#1120](https://github.com/openshift/hypershift/pull/1120)
* Azure: Use an apiserver port that ends with 443 to make conformance tests happy [#1133](https://github.com/openshift/hypershift/pull/1133)
* Give control-plane-operator access to the pull secret [#1132](https://github.com/openshift/hypershift/pull/1132)
* add https prefix for proper redirects of console url [#1129](https://github.com/openshift/hypershift/pull/1129)
* Move oidc configmap management back into install command [#1128](https://github.com/openshift/hypershift/pull/1128)
* fix dns crd reconciliation for ibm cloud or providers that provide a subdomain [#1123](https://github.com/openshift/hypershift/pull/1123)
* Fix create nodepool azure command [#1118](https://github.com/openshift/hypershift/pull/1118)
* Azure: Fix credentials log [#1126](https://github.com/openshift/hypershift/pull/1126)
* Updated secret permissions to 416 [#1124](https://github.com/openshift/hypershift/pull/1124)
* Add missing readiness probes on HA deployments [#1106](https://github.com/openshift/hypershift/pull/1106)
* Fix type in azurecluser for Private DNS name [#1119](https://github.com/openshift/hypershift/pull/1119)
* Azure: Make the rootdisksize on nodepool configurable [#1097](https://github.com/openshift/hypershift/pull/1097)
* [Full changelog](https://github.com/openshift/hypershift/compare/0dc31266db811458bf5f75f5f93fd972380190ad...fe045fd56f45102333417749ad332fab2141f284)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2c979ab4124d32388c75bbac7c78d444c97638a7)

* Gather some error messages from the kube-controller-manager containers (#598) [#598](https://github.com/openshift/insights-operator/pull/598)
* [Full changelog](https://github.com/openshift/insights-operator/compare/e2ccd26e5a9bf344c82fccc6fb7379b933dd5f36...2c979ab4124d32388c75bbac7c78d444c97638a7)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/8b35abf00d38db06a49e569365a06abbdd94db01)

* [Bug 2061616](https://bugzilla.redhat.com/show_bug.cgi?id=2061616): [release-4.10] Compute bundle plugins in build [#1398](https://github.com/openshift/jenkins/pull/1398)
* [Bug 2063898](https://bugzilla.redhat.com/show_bug.cgi?id=2063898): [release-4.10] 2022-02-15 Security Advisory [#1403](https://github.com/openshift/jenkins/pull/1403)
* [Bug 2062053](https://bugzilla.redhat.com/show_bug.cgi?id=2062053): Add Jitendar to OWNERS file [#1401](https://github.com/openshift/jenkins/pull/1401)
* [Bug 2055653](https://bugzilla.redhat.com/show_bug.cgi?id=2055653): Add xmlstarlet to handle JENKINS_PASSWORD properly [#1391](https://github.com/openshift/jenkins/pull/1391)
* [Full changelog](https://github.com/openshift/jenkins/compare/10e9ee33dcfa338d6cca0f261b98b245e0206ccc...8b35abf00d38db06a49e569365a06abbdd94db01)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/e6ba00b885558712d660a3704c071490d999de6f)

* [Bug 2060954](https://bugzilla.redhat.com/show_bug.cgi?id=2060954): Explicitly set keyfile as the default plugin [#2985](https://github.com/openshift/machine-config-operator/pull/2985)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/14a1ca2cb91ff7e0faf9146b21ba12cd6c652d22...e6ba00b885558712d660a3704c071490d999de6f)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/4791c3556487d13403f63f258f2c227b47116dec)

* [Bug 2050064](https://bugzilla.redhat.com/show_bug.cgi?id=2050064): Ensure subnets belong to the queried network [#219](https://github.com/openshift/cluster-api-provider-openstack/pull/219)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e6b35eb43631023a38b92460661130531236347c...4791c3556487d13403f63f258f2c227b47116dec)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/438d4007de1064385ee4229dd1313a94d5aca0c4)

* [Bug 2063834](https://bugzilla.redhat.com/show_bug.cgi?id=2063834): backport 2052975 to 4.10 [#995](https://github.com/openshift/ovn-kubernetes/pull/995)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/74f3edb193507986e746cca162e353273813f8b4...438d4007de1064385ee4229dd1313a94d5aca0c4)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/73ddd44bf77c257461981b77a083cf7968745201)

* [Bug 2060718](https://bugzilla.redhat.com/show_bug.cgi?id=2060718): Add relabel validations [#161](https://github.com/openshift/prometheus-operator/pull/161)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/53d6d76f3f90adb5a46be6f2347a968e5885c586...73ddd44bf77c257461981b77a083cf7968745201)