RHBA-2020:0062 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.3.0, which fixes several bugs and includes various enhancements, is now available.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat
OpenShift Container Platform 4.3.0. See the following advisory for the
RPM packages for this release:

https://access.redhat.com/errata/RHBA-2020:0063

Space precludes documenting all of the bug fixes and enhancements in this
advisory, as well as all of the container images in this advisory. See the
following Release Notes documentation, which will be updated shortly for
this release, for details about these changes:

https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html

You may download the oc tool and use it to inspect release image metadata as follows:

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.3.0-x86_64

The image digest is sha256:3a516480dfd68e0f87f702b4d7bdd6f6a0acfdac5cd2e9767b838ceede34d70d

All OpenShift Container Platform 4.3 users are advised to upgrade to these
updated packages and images.

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

Affected Products

• Red Hat OpenShift Container Platform 4.3 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.3 for RHEL 7 x86_64

Fixes

• BZ - 1540560 - [trello Z96KTq9O] oc status should display deployment/rs/sts consistently with dc/rc
• BZ - 1542325 - oc status should not suggest "oc set probe pod"
• BZ - 1619479 - Couldn't re-login to kibana after logout from kibana web console.
• BZ - 1665368 - Custom label for pvc in statefulsets
• BZ - 1665828 - In-correct usage info of binary cluster-version-operator
• BZ - 1674407 - Result button in VM and VM Template Wizards
• BZ - 1683057 - [ci] [aws] haproxy should expose prometheus metrics for a route
• BZ - 1684079 - egressnetworkpolicy with dnsname has performance impact due to calling dig often
• BZ - 1685189 - oc get clusteroperators -o wide -w ignores the wide output option when used in a watch
• BZ - 1685338 - Distinguish between "could not talk to Cincinnati" and "Cincinnati did not find my channel/version in the graph"
• BZ - 1688613 - Avoid duplicate error message for failed validation
• BZ - 1690588 - DynamicProvisioner tests failing in 4.0 e2e
• BZ - 1691190 - passthrough route created using path
• BZ - 1692227 - wrong doc link on networkpolicy page
• BZ - 1693169 - Different memory usage units are used under "Home - Status"
• BZ - 1698829 - flake: volume is not attached in time due to AWS API trhottling
• BZ - 1701495 - Eventrouter pod in CrashLoopBackOff status: "runtime error: invalid memory address or nil pointer dereference"
• BZ - 1704961 - oc adm must-gather not in bash-completion
• BZ - 1706103 - etcd overloaded when there are large number of objects, cluster goes down when one etcd member is down
• BZ - 1707006 - kube-proxy: etcd recovery causes endpoint updates to be missed
• BZ - 1707403 - API throttling results in long delays to state update
• BZ - 1707785 - Autoscaling for Memory Utilization is not working
• BZ - 1707905 - After upgrading ingresses.spec.domain,the host of route will be upgraded automatically
• BZ - 1710939 - [v2v][UI] VM name obligatory field is confusing in case of Import VM.
• BZ - 1711535 - Enable back TaintBasedEvictions e2e
• BZ - 1711538 - [REBASE] Enable two service tests
• BZ - 1711544 - Enable back 'build with long names test'
• BZ - 1711600 - MountPropagation test is failing (should be enabled?)
• BZ - 1712068 - cluster-api machines are recreated when backing instance removed
• BZ - 1712697 - Different indentation used when describe node
• BZ - 1713134 - AvoidPod serial e2e test has flaked
• BZ - 1713193 - Overlap on Pod list page
• BZ - 1713263 - "--force" did not take effect when work with "--to-latest" when do upgrade with cli
• BZ - 1715001 - oc and openshift-intall version show "dirty" no matter the rc.x clients or extracted from payload
• BZ - 1716550 - oc client tool randomly gives "panic: runtime error: slice bounds out of range"
• BZ - 1717255 - No monitoring rules report when cloud-credential pod is failing
• BZ - 1717461 - Unsupported value: "SCTP" when deploying service
• BZ - 1722811 - spelling of HyperConverged in the console
• BZ - 1722878 - Changing storage type makes impossible to delete config.imageregistry.operator.openshift.io
• BZ - 1723248 - Incorrect error returned when exec'ing to a pod that has been deleted
• BZ - 1723254 - Kebab actions for resources lists does not work for the last row
• BZ - 1723400 - EXTENDED_VALIDATION doesn't capture certificate / key mismatch, causing the router to misbehave
• BZ - 1723948 - Cluster Version Operator doesn't set a condition when Overrides are set on the cluster version
• BZ - 1723955 - Instances of type metal.m5 are not automatically approved by the node auto-approver
• BZ - 1725006 - The 4.1 Cluster Console does not allow the creation of Routes with multiple service endpoints, which was one of the features of the 3.x dev UI
• BZ - 1725517 - Set `ENABLE_PROMETHEUS_ENDPOINT=false` in rsyslog env doesn't take effect.
• BZ - 1725977 - Unable to create a release image with new manifests
• BZ - 1727781 - all links got 404 in "oc explain pods"
• BZ - 1730401 - Feature gate setting for TechPreviewNoUpgrade is not respected by the CVO
• BZ - 1731228 - The cluster should be reporting an alert if it is not upgradeable due to tech preview features being enabled
• BZ - 1731480 - Navigating to a VM via URL is not working
• BZ - 1733594 - etcd failed during upgrade and left etcd in bad state
• BZ - 1734029 - Prometheus statefulset is reconciled on pod deletion but not when is scaled down
• BZ - 1734270 - Alerts are marked as "Not grouped" in Alertmanager web console
• BZ - 1734319 - AWS: secondary IP address order still wrong
• BZ - 1734539 - [OSP] openshift installer needs to allow nameserver to be set on tenant networks it creates
• BZ - 1735509 - monitor servicemonitors in openshift-kube-apiserver/openshift-kube-controller-manager/openshift-kube-scheduler are 0/0 up
• BZ - 1735548 - The pipeline_metadata.collector.ipaddr6 is not correct when using rsyslog as log collector.
• BZ - 1735691 - [OperatorHub]Prometheus operator creating memory limit too small
• BZ - 1736254 - Unable to add a new node to a recent UPI on vSphere installation
• BZ - 1736793 - CSI: Dynamic pvc does not add events after pv created
• BZ - 1736806 - When using a local other than "en", the "openshift-jenkins-login-plugin-config" ConfigMap cannot be applied to Jenkins configuration and leads to login failure
• BZ - 1737097 - [OSP] openshift-installer creates multiple IP addresses on worker and master nodes that aren't allowed by OpenStack Security Groups
• BZ - 1737392 - oc new-build --help should not have some flags in the help text
• BZ - 1737630 - Shutdown Clusters don't come back up
• BZ - 1738360 - Help prompt for 'Pull Secret' on openshift-install points to an invalid URL
• BZ - 1738374 - [sriov]sriov-network-config-daemon pod become CrashLoopBackOff when set numVfs more than total num
• BZ - 1739375 - "Prometheus Remote Write" is shown in grafana even remote write is not enabled
• BZ - 1739447 - Can't create VM from web console when using hostpath provisioner
• BZ - 1740357 - Auth operator reporting unavailable and reason "available"
• BZ - 1740374 - 5 clusters reporting ingress unavailable and reason ingressunavailable
• BZ - 1740375 - DNS operator reports unavailable reason as DNSUnavailable
• BZ - 1741120 - Feature gates "VolumePVCDataSource" could not be enabled
• BZ - 1741265 - Bare Metal Host power operation can be re-triggered
• BZ - 1741391 - imagestream import should use imagecontentsourcepolicy for SHA imports
• BZ - 1741685 - must-gather does not collect monitoring rules (PrometheusRule or ServiceMonitor) from openshift-* namespaces
• BZ - 1743459 - "Not Found" displays on vm list page
• BZ - 1743514 - "Pod Error" shows by restarting the VM several times
• BZ - 1743938 - Some error messages for validating vm name are not good
• BZ - 1744046 - e2e failed: Failed to connect to kube-apiserver Kube API and openshift-apiserver OpenShift API due to dns issue
• BZ - 1744462 - [4.3] The value of the "Upgradeable" field of the "service-catalog-controller-manager" should NOT be NoData
• BZ - 1744909 - [sig-storage] EmptyDir wrapper volumes should not cause race condition when used for configmaps [Serial] [Conformance] [Suite:openshift/conformance/serial/minimal] [Suite:k8s]
• BZ - 1745028 - networkpolicy - specifying protocol and not specifying port results in traffic being blocked to pods in that project
• BZ - 1745102 - If openshift-control-plane is down, new pods cannot be created
• BZ - 1745192 - Builds are not configured to use mirrors in disconnected enivronments
• BZ - 1745671 - cluster-kubesscheduler-operator makes 4 req/s at idle
• BZ - 1745773 - Delay in detecting a successful CSI mount or incorrect report of failed mount, by kubelet for Ceph CSI based volume (due to the recursive fsGroup setting)
• BZ - 1745910 - different metrics result in query browser and prometheus UI after upgrade
• BZ - 1746222 - [sriov] the SR-IOV network operator shall be deployed in namespaces with prefix "openshift-"
• BZ - 1746406 - Cannot get all pakcagemanifest resources due to 504 timeout
• BZ - 1746854 - OCP 4.2 - machine-config operator fails to rollout during cluster upgrade after adding new machineset
• BZ - 1746871 - [4.3] SDN cannot add egress IP to team interface
• BZ - 1748452 - race condition on bootstrap node between openshift and bootkube services
• BZ - 1748478 - readiness probe could show an invalid message in some conditions.
• BZ - 1748777 - Usage info is being printed on all errors
• BZ - 1749144 - [OVN] Creation of service with external IP is forbidden
• BZ - 1749256 - Cannot prune registry 'invalid resource name "psd2-anusha/psd2-anusha": [may not contain '/']'
• BZ - 1749910 - Enabled support for SSS
• BZ - 1750494 - Improve error message when apiVersion is mispelled: no version was provided
• BZ - 1750675 - [Azure]Image registry pods go to CrashLoopBackOff when container name contains a sequence of dashes
• BZ - 1750890 - failed to acquire a resource (boskos.ci, "no such host" or EOF)
• BZ - 1751124 - Fix "volumes should store data" tests for hostPath volumes
• BZ - 1751246 - Cluster upgrade failing with `Cluster operator dns is reporting a failure`
• BZ - 1751458 - OpenShift sdn crashes when there is a gretap link
• BZ - 1751513 - Failed to update from a head of channel
• BZ - 1751602 - [4.1.z]monitoring reports Degraded after scaling up/down prometheus-k8s pods which bound with PVs
• BZ - 1751640 - Enable "volumeMode should not mount / map unused volumes in a pod" test
• BZ - 1751641 - AllowVolumeExpansion is not set when upgrade from 4.1.z to 4.2
• BZ - 1751654 - Enable `should support exec using resource/name` back
• BZ - 1751756 - [IPI][OSP][Kuryr] The installer times out when running in OSP 13 with Kuryr sdn
• BZ - 1751820 - Fix "waiting for the cluster version to be applied" test to check for empty desired status
• BZ - 1752045 - No RBAC method for setting ExternalIPs
• BZ - 1752144 - applying a MC with `nosmt` karg can prevent the MC from being rolled out to all nodes
• BZ - 1752222 - [ovn] Failed to create pods, CNI request failed, due to NetworkPolicy deadlock
• BZ - 1752636 - Networkpolicy resources not getting applied on update
• BZ - 1752646 - Conformance "should set Forwarded headers appropriately" router test is disabled
• BZ - 1752744 - kube-scheduler-operator target is (0/0 up)
• BZ - 1752929 - External CSI provisioner logs extra lines for non-migrated volume plugins
• BZ - 1753059 - openshift-dns fails to start due to NetworkPluginNotReady message:Network plugin returns error: Missing CNI default network
• BZ - 1753067 - [IPI][OSP] Kubelet fail to admit pod with insufficient memory due to coredns, keepalived and mdns-publisher have no pods in kube-apiserver
• BZ - 1753124 - Example Report Query YAML lack of required fields
• BZ - 1753187 - [IPI][OSP] High flake rate in parallel and serial test suites
• BZ - 1753216 - Duplicated IPs on InfraNodes using automatic egress IP
• BZ - 1753232 - Default example VM has bridge NIC binding method instead of masquerade
• BZ - 1753265 - Starting a VM after it has been stopped yields 'Forbidden Error'
• BZ - 1753419 - 4.2 on AZURE failed to create worker nodes
• BZ - 1753467 - [4.3][proxy] no proxy is set for kube-controller-manager.
• BZ - 1753472 - e2e-azure: The HAProxy router should override the route host with a custom value
• BZ - 1753568 - transient.cluster.routing.allocation.enable is none sometimes after cluster upgrade
• BZ - 1753618 - VM created from container fails to start for the first time when image is pulled
• BZ - 1753688 - Adding disk via VM Disks tab always adds a disk with 'Filesystem' VolumeMode
• BZ - 1753731 - Builds can use incorrect location for pullthrough imagestream tags
• BZ - 1753734 - e2e-azure: The HAProxy router should support reencrypt to services backed by a serving certificate automatically
• BZ - 1753778 - OpenShift fails to upgrade when image-registry operator is unmanaged or removed
• BZ - 1753812 - The modify/edit view of "UpdateStrategy" Descriptor is missing
• BZ - 1753884 - openshift-kube-scheduler pod haven't log err msg if Edit configmap scheduler-policy with wrong character string
• BZ - 1753930 - [proxy] Need to add "metadata.google.internal." to noProxy list on GCP
• BZ - 1753936 - fluentd couldn't forward logs to rsyslog out:syslog: invalid facility value DEVICE
• BZ - 1753953 - [IPI][OSP] [Feature:Platform][Smoke] Managed cluster should ensure control plane operators do not make themselves unevictable [Suite:openshift/conformance/parallel] fails
• BZ - 1754042 - [gcp] `oc adm release new` fails if upload to GCS storage fails
• BZ - 1754049 - [proxy] Need to add "metadata.google.internal." to noProxy list on GCP
• BZ - 1754070 - [RFE][IPI][OpenStack]: Support Boot from Volume
• BZ - 1754154 - Missing CNI default network
• BZ - 1754412 - Baremetal host dashboard page flickers too long as it updates every 5 seconds
• BZ - 1754452 - [IPI][OSP] destroy cluster command doesn't have a timeout and never ends when there are problems deleting objects
• BZ - 1754542 - [IPI][Openstack]: Destroy Script Fails when run before bootstrap completes
• BZ - 1754569 - [build-cop] release-openshift-origin-installer-e2e-aws-upgrade-4.2-to-4.3 failure
• BZ - 1754592 - cluster level alert fires spuriously
• BZ - 1754631 - [build-cop] install CI failures due to segfaulting cni plugin
• BZ - 1754640 - CRD schema generator doesn't produce resources with structural schema
• BZ - 1754644 - [vsphere] [upi] [ci] bootstrap timeout
• BZ - 1754647 - [vsphere] [upi] [ci] out of disk space on datastore
• BZ - 1754682 - DHCP mode failed when configuring it in multus CNI IPAM
• BZ - 1754738 - [sriov] sriov operator pod crash when there is NAD created by manual
• BZ - 1754789 - "Import Error" shows immediately after create vm from URL
• BZ - 1754840 - Message does not fit the cause when creating pod without available pvc
• BZ - 1754939 - [upi] [baremetal] Installer doesn't validate dns requirements
• BZ - 1755000 - kubelet version skew causing CI flakes
• BZ - 1755115 - Error on cluster image import never retries
• BZ - 1755130 - Package description links to incorrect "about reporting" documentation URL
• BZ - 1755240 - node:node_memory_bytes_available:sum recording rule is not available
• BZ - 1755383 - CVO blocks use of new Kube API features of 1.14+ in OpenShift manifests
• BZ - 1755469 - All nodes go NotReady after 24 hours, several pending CSRs
• BZ - 1755552 - Interactive installer fails without clear error message if flavors do not exist
• BZ - 1755560 - Performing disaster recovery twice on a cluster can fail to proceed the second time
• BZ - 1755606 - metering-operator does not validate storage secrets exist before installing components
• BZ - 1755699 - "Add Capacity" workflow for OCS breaks Portworx Operator
• BZ - 1755784 - Nodes become NotReady due to ovn-node pod cannot be running with error no chassis ID configured with OVN plugin
• BZ - 1755812 - oc apply does not update configmap with role jenkins-slave
• BZ - 1755936 - [GCP] [flake] [Feature:Prometheus][Conformance] Prometheus when installed on the cluster should provide ingress metrics [Suite:openshift/conformance/parallel/minimal]
• BZ - 1755991 - [4.3] FailedCreatePodContainer "Delegation not available for unit type"
• BZ - 1756107 - must-gather should log errors as warnings if script can not gather information from certain operator pods
• BZ - 1756108 - Tests must allow skipping certain platform invariants to do node skew testing
• BZ - 1756132 - New IngressController operator API field incorrectly marked optional in OpenAPI spec
• BZ - 1756189 - redhat-operators-art use an outdate image `ose-oauth-proxy:v4.2.0-201909221318`
• BZ - 1756298 - unknown command "controller-manager" for "hyperkube"
• BZ - 1756302 - Failed DNS updates causes recursive data accumulation leading to update failure
• BZ - 1756312 - Network Policy wrongly enforced due to wrong pod IP (Kuryr)
• BZ - 1756319 - Resources Tab under Custom Resource details page for installed operator crashes
• BZ - 1756344 - [IPI][OpenStack] Intermittent DNS errors for ingress records within the pods
• BZ - 1756417 - Schema change in ClusterResourceQuota from 4.1 to 4.2 results in breakage
• BZ - 1756421 - Enable back oc explain tests
• BZ - 1756442 - Back-off pulling image "registry.connect.redhat.com/planetscale/operator:0.1.8"
• BZ - 1756453 - User upgrading a cluster from 4.1 to 4.2 before official release may bypass security protection
• BZ - 1756461 - ClusterVersion upgrade history of previously completed upgrades completionTimestamp is being modified when it shouldnt
• BZ - 1756471 - [sriov] sriov operator tag should be use 4.3 not latest
• BZ - 1756475 - Cannot disable S3 redirect via operator
• BZ - 1756500 - machine-config-daemon has dangling symlink
• BZ - 1756542 - CI: fix verify tools build failure
• BZ - 1756548 - Metering operator importing 0 container cpu/memory usage metrics in 4.3
• BZ - 1756669 - [sriov]The deviceID of PF should be convert to VF device ID in the device-plugin-config
• BZ - 1756981 - Wrongly try to enforce Network Policies on SVCs without selectors and ports
• BZ - 1757099 - Gracefully handle the disabled default opsrc during the upgrade
• BZ - 1757110 - When marking a node as schedulabe again, the baremetal hosts page still shows "starting maintenance"
• BZ - 1757141 - [Kuryr] NPs for svc don't react to namespace labels updates
• BZ - 1757319 - When registering nodes from the GUI, they are stuck in "powering on" state
• BZ - 1757424 - adjust build/image_ecosystem extended tests to account for kubectl/oc exec changes
• BZ - 1757503 - Cherry-pick: Kubelet should use watch-based configMapAndSecretChangeDetectionStrategy
• BZ - 1757526 - [UI] Page Not Found (404) instead of a list of CRDs in UI
• BZ - 1757547 - Metering fails to import pod cpu/memory usage metrics due to many-to-many matching error
• BZ - 1757752 - Vm template source is 'Unknown DataVolume' if the provision source is URL
• BZ - 1757777 - hostIP and podIP differs with hostNetwork: true
• BZ - 1757836 - pkg/daemon: add check for logger in CentOS
• BZ - 1757973 - [Proxy]cluster external endpoints should be noProxy
• BZ - 1757975 - [Proxy]cluster external endpoints should not be noProxy by default
• BZ - 1758008 - Setting manual approval strategy ignored for subsequent releases
• BZ - 1758031 - Query Browser can flip between two different query results
• BZ - 1758091 - [UPI][BAREMETAL] RHCOS 4.2 installation does not work when using bonding configuration
• BZ - 1758306 - Bump boot images to pick up signed RPMs
• BZ - 1758343 - downloads pod doesn't respond to drain
• BZ - 1758434 - Could not specify Statefulset.emptyDir.sizeLimit
• BZ - 1758500 - Restarting the crio service remove config.json for podman containers.
• BZ - 1758528 - [Kuryr] KNPs cannot be deleted due to ports on the pools with its associated SG
• BZ - 1758543 - Fix block device reconstruction
• BZ - 1758606 - No automated test job verifies disruption in PRs or as release informing
• BZ - 1758623 - The details card is showing the host instead of the node, and clicking on it leads to a 404
• BZ - 1758628 - Console workload show restricted acccess if knative serverless TP1 operator is installed and logged in as non admin
• BZ - 1758666 - Upgrading a managed cluster from 4.1.18 to 4.2.0-rc.1 results in CCO CA cert issues
• BZ - 1758687 - [DR] etcd-member-recover.sh: tokenization can fail silently
• BZ - 1759095 - Kuryr-controller restarts due to race between namespace and pod creation
• BZ - 1759169 - [4.3] oauth-proxy container OOM killed
• BZ - 1759185 - Help for oc adm upgrade --force option does not describe new behavior
• BZ - 1759248 - [Suite:openshift/oauth][Serial] ldap group sync can sync groups from ldap [Suite:openshift/conformance/serial]
• BZ - 1759299 - [build-cop] release-openshift-openshift-ansible-e2e-aws-scaleup-rhel7-4.2 failure
• BZ - 1759363 - [Proxy]machine configs are not updated when proxy.config.openshift.io gets updated
• BZ - 1759469 - [4.2.z] sometimes find "found duplicate series for the match group" error in prometheus-k8s pod logs
• BZ - 1759487 - Create instead of Create Virtual Machine button
• BZ - 1759494 - Create Nic instead of create NIC
• BZ - 1759659 - [azure] MachineWithNoRunningPhase firing even when machines are running
• BZ - 1759880 - update rules in cluster-monitoring-operator to reflect chages to container and pod metric labels
• BZ - 1759920 - `oc new-build` Fails If Inline Dockerfile Has Multiple Aliases
• BZ - 1759945 - Incorrect cluster memory and disk usage displayed in openshift dashboard.
• BZ - 1759965 - GCP backend for api server has incorrect ranges allowed for heath checks
• BZ - 1759971 - Kuryr - occasional "BadRequest: Invalid input for operation: Non unique UUID for subport" when namespace gets deleted
• BZ - 1759984 - Races between retries and deletion actions
• BZ - 1759998 - Remove temporary AWS throttling fix
• BZ - 1760103 - .well-known/oauth-authorization-server Client.Timeout exceeded while awaiting headers on upgrade
• BZ - 1760393 - Add metric cpuinfo to node_exporter to gather cpu topology/hyperthreading information in telemetry
• BZ - 1760425 - [UPI] GCP backend for api server has incorrect ranges allowed for heath checks
• BZ - 1760478 - podman 1.6 breaks the ability for RHCOS to be built
• BZ - 1760479 - cluster-image-registry-operator container image is built with CGO_ENABLED=0
• BZ - 1760494 - Update available channels in UI for 4.3 release
• BZ - 1760665 - upgrade.yml playbook didn't update cri-o package during upgrade
• BZ - 1760787 - [simpleMacvlan] CNO will crashes when simpleMacvlan is configured without ipamConfig
• BZ - 1760810 - admin console overview sidebar showing wrong resources when serverless installed
• BZ - 1760827 - discrepancy between topology, sidebar pod list, and workload pod list
• BZ - 1760836 - deploy image ignores target port drop down selection and always uses first entry
• BZ - 1760858 - UI in topology view is broken for edge browser
• BZ - 1761041 - non-admin can open vm wizard dialog in other namespace
• BZ - 1761049 - There are typos in Local Storage Operator's operatorsource
• BZ - 1761276 - Suppress monitor errors in Testgrid output by writing event monitor error to a separate file
• BZ - 1761344 - kuryrnet handler makes kuryr-controller to restart frequently
• BZ - 1761348 - Placeholder bug for OCP 4.3.0 image release
• BZ - 1761372 - [build-cop] openshift/cli image stream is invalid
• BZ - 1761505 - Neutron internal error when activating vif or adding subports to trunk crashes kuryr-controller
• BZ - 1761506 - dns operator degraded status flaps during rollouts
• BZ - 1761557 - 4.1 to 4.2 upgrade fails, second master is caught in a drain loop wedge and upgrade never completes
• BZ - 1761682 - [Feature:OAuthServer] [Token Expiration] Using a OAuth client with a non-default token max age to generate tokens that expire shortly works as expected when using a token authorization flow
• BZ - 1761689 - [Feature:DeploymentConfig] deploymentconfigs adoption [Conformance] will orphan all RCs and adopt them back when recreated [Suite:openshift/conformance/parallel/minimal]
• BZ - 1761721 - Cluster upgrade fails due to UpdatingPrometheusOperatorFailed problem
• BZ - 1761815 - Informers can miss notifications
• BZ - 1761871 - Subscriptions are not getting processed / take very long to get processed
• BZ - 1761921 - Manifest lists are not copied by oc image mirror or oc adm release mirror
• BZ - 1761924 - [OLM][Auto] Error from server: no table handler registered for this type *operators.PackageManifestList
• BZ - 1761925 - Cluster Loader fails when called without configuration
• BZ - 1762137 - Get error : "TLS handshake timeout"
• BZ - 1762145 - TLS handshake error breaking multus admission controller functionality
• BZ - 1762149 - [Conformance][Area:Networking][Feature:Router] The HAProxy router should serve the correct routes when scoped to a single namespace and label set [Suite:openshift/conformance/parallel/minimal]
• BZ - 1762162 - Flaky tests: [Conformance][Area:Networking][Feature:Router] The HAProxy router converges when multiple routers are writing status [Suite:openshift/conformance/parallel/minimal]
• BZ - 1762217 - the conversion pod does not start with blockMode PVCs
• BZ - 1762298 - kube-proxy fix for spurious connection resets
• BZ - 1762343 - Description is empty when oc explain networks.spec.externalIP
• BZ - 1762413 - [GCP] openshift-install destroy cluster can leak firewall rules
• BZ - 1762536 - MCO applies new manifests to host before host is drained
• BZ - 1762614 - ifcfg-ens192 in bootstrap ignition was not applied after the vm boot
• BZ - 1762618 - [proxy] report-progress.sh on bootstrap need external api server to create bootstrap configmap resource
• BZ - 1762653 - [Conformance][Area:Networking][Feature:Router] The HAProxy router should run even if it has no access to update status [Suite:openshift/conformance/parallel/minimal]
• BZ - 1762769 - OLM dependency resolution does not prefer the initial catalog
• BZ - 1762787 - Kuryr: Failures releasing port when pod doesn't have status.hostIP set
• BZ - 1762841 - GCP ingress router only targeting compute nodes
• BZ - 1762868 - Updating 00-master can wedge (master never progresses)
• BZ - 1762888 - OpenShift fails upgrade when a pod has a PodDisruptionBudget minAvailable set to 1 and disruptionsAllowed set to 0
• BZ - 1762968 - Prometheus container doesn't have terminationMessagePolicy FallbackToLogsOnError
• BZ - 1762979 - only 1 attempt at imagestreamimport for a failed, initial sample import
• BZ - 1763005 - [ASB] asb unable to retrieve images from registry-proxy.engineering.redhat.com
• BZ - 1763056 - Wrong number of reported pods in unavailable state
• BZ - 1763078 - Project name should be left aligned in developer console
• BZ - 1763091 - "No datapoints found." after executing the Example Query
• BZ - 1763278 - kuryrnet and neutron resources leftovers after kuryr-controller restart
• BZ - 1763293 - SyncingFailed and other waitForDeploymentRollout consumers often show only 'timed out waiting for the condition'
• BZ - 1763303 - Metering aws-billing integration not working
• BZ - 1763306 - Metering tables are stored in textformat instead of ORC
• BZ - 1763341 - ip=<ipaddress>... kernel argument sets the Static IP, but not DNS
• BZ - 1763605 - Router pod keep restarting when set tlsSecurityProfile to Modern
• BZ - 1763635 - etcd-member manifest rendered with an empty image reference and leading to cluster disruption during a 4.1->4.2 upgrade
• BZ - 1763639 - ciphers and minTLSVersion are not correct when setting tlsSecurityProfile to Old
• BZ - 1763700 - NetworkManager & kubelet startup race condition
• BZ - 1763725 - Pipeline doesn't start because of trigger type
• BZ - 1763727 - Ingress controller private issuesas per https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-enable-ingress-controllers, looks to work on AWS ok but getting issues on azure.
• BZ - 1763728 - oc adm release extract --tools, --command broken if using extracted oc
• BZ - 1763807 - --since argument for 'oc adm node-logs' command returns an error "error: rhhi-node-master-0 the server rejected our request for an unknown reason"
• BZ - 1763821 - [upgrade-4.1-4.2] Canceling the task graph partway though should be an error even if no tasks fail
• BZ - 1763836 - New project dashboard doesn't show namespace dashboard links from ConsoleLink resources
• BZ - 1763849 - Metrics don't work for normal users in new project dashboard
• BZ - 1763927 - "FATAL failed to fetch Terraform Variables" error is seen when installing to existing VPC using install-config.yaml and did not configure default region in localhost
• BZ - 1763929 - 4.x oc client is not compatible with OCP 3.11 for some resources
• BZ - 1764017 - The CVO wrongly makes an API server update call and return modified true
• BZ - 1764076 - [Conformance][Area:Networking][Feature:Router] The HAProxy router should override the route host for overridden domains with a custom value [Suite:openshift/conformance/parallel/minimal] expand_more
• BZ - 1764079 - [Conformance][Area:Networking][Feature:Router] The HAProxy router should override the route host with a custom value [Suite:openshift/conformance/parallel/minimal]
• BZ - 1764081 - [Conformance][Area:Networking][Feature:Router] The HAProxy router should serve a route that points to two services and respect weights [Suite:openshift/conformance/parallel/minimal]
• BZ - 1764092 - [MHC] String value on maxUnhealthy reveals typo in machinehealthcheck_controller
• BZ - 1764216 - fix multus-admission-controller definition to avoid spurious error messages
• BZ - 1764219 - migrate examples from apps/v1beta* APIs to apps/v1
• BZ - 1764224 - Incorrect validation pattern on ConsoleCLIDownloads Href field
• BZ - 1764313 - Console operator /metrics endpoint doesn't contain console_url metric [openshift-4.3]
• BZ - 1764323 - "s2i build with a quota Building from a template" test is failing with cri-o 1.16 and OpenShift 4.3
• BZ - 1764411 - OCP 4.3 is using CRIO 1.14.11-0.23.dev.rhaos4.2.gitc41de67.el8
• BZ - 1764414 - [Serial] [Feature:OAuthServer] [RequestHeaders] [IdP] test RequestHeaders IdP [Suite:openshift/conformance/serial]
• BZ - 1764491 - CVO uses deprecated API
• BZ - 1764498 - OCM uses deprecated extentions/v1beta1 APIs
• BZ - 1764556 - OCP4.3 machine-config operator failing in UPI mode
• BZ - 1764558 - [4.3] Authentication attempts are failing with Request Header Authentication Provider
• BZ - 1764704 - console pods should not use ca.crt from ServiceAccount to validate ingress certificate
• BZ - 1764728 - ovn-kubernetes on Azure fails due to ovnkube-master not retrying setting pod annotation
• BZ - 1765009 - Resources Tab under Custom Resource details page for installed operator does not list Custom Resources
• BZ - 1765015 - Resources Tab under Custom Resource details page for installed operator does not list StorageClass
• BZ - 1765068 - The baremetal host counter in the inventory card is not updating
• BZ - 1765083 - Websocket connection warnings appear in the browser console
• BZ - 1765177 - Many router e2e tests are flaky due to a buggy wait script
• BZ - 1765219 - [Disruptive] Cluster upgrade should maintain a functioning cluster
• BZ - 1765261 - Logging operator adds "kubernetes.io/os: linux" to nodeSelectors, breaking deployment on OCP 4.1.20
• BZ - 1765269 - Can not create cluster in AWS region Stockholm (eu-north-1) via IPI
• BZ - 1765282 - authentication operator reports RouteHealthDegraded: failed to GET route: dial tcp: lookup oauth-openshift.apps.<namespace>.<domain> on 172.30.0.10:53: no such host
• BZ - 1765315 - High CPU usage in prometheus, thanos-querier while single user sits on dashboard
• BZ - 1765427 - [MHC] Remediation does not trigger when machine has nodeRef but node is deleted
• BZ - 1765457 - Ingress operator 4.4 image breaks bootstrapping in e2e jobs
• BZ - 1765458 - Different result with same metrics queried on Firefox and Chrome
• BZ - 1765733 - [Feature:OAuthServer] [Token Expiration] Using a OAuth client with a non-default token max age to generate tokens that do not expire works as expected when using a code authorization flow
• BZ - 1765738 - OCP RHCOS v4.2.0 QCOW2 image for OSP is invalid
• BZ - 1765749 - [sig-api-machinery] Namespaces [Serial] should always delete fast (ALL of 100 namespaces in 150 seconds)
• BZ - 1765756 - [sig-apps] Deployment should not disrupt a cloud load-balancer's connectivity during rollout
• BZ - 1765803 - elasticsearch-proxy clusterrolebinding has been overwritten as istio-system elasticsearch even though openshif-logging elasticsearch is configured that.
• BZ - 1766111 - Enable Prometheus local compaction for in-cluster and user workload monitors.
• BZ - 1766141 - [GCP] the DNS record for the wildcard apps is not updated after recreating the default ingresscontroller
• BZ - 1766181 - Authentication "500 Internal Error" when accessing monitoring components
• BZ - 1766187 - Authentication "500 Internal Error"
• BZ - 1766339 - Fix Metering image mirroring scripts for testing staging/pre-production OLM content
• BZ - 1766356 - Cluster with ovn-kubernetes network type is failing to bootstrap
• BZ - 1766446 - After deploy PTP DaemonSet, it doesn t deploy pods on master nodes.
• BZ - 1766482 - When a node host is CPU usage to spike, goroutine stack traces was recoreded with Resource temporarily unavailable
• BZ - 1766513 - MCD could shadow errors since the force validation file isn't deleted once used
• BZ - 1766587 - Follow up changes from ocs install PR - https://github.com/openshift/console/pull/2359
• BZ - 1766607 - Validate Selected Nodes to meet CPU and memory requirements
• BZ - 1766632 - Top consumers links can overflow popover in dashboard
• BZ - 1766638 - e2e should fail when there are alerts firing
• BZ - 1766739 - unable to write ifcfg file to /etc/sysconfig/network-scripts/ due to bad SELinux labeling
• BZ - 1766747 - A lot of events in the activity card have a timestamp of 1 AM
• BZ - 1766792 - e2e-aws-scaleup-rhel7 constantly failing
• BZ - 1766851 - upgrade fail due to ingress operator go to degraded
• BZ - 1766856 - Local volume feature broken with RBAC permission issue
• BZ - 1766907 - CVO not using proxy settings
• BZ - 1766918 - [DR]function 'verify_certs'(in openshift-recovery-tools) in dead loop and without Exit timeout
• BZ - 1766949 - SKU Validation failed for 4 OCP SKUs - MW00692,MW00693,MW00694,MW00695
• BZ - 1766984 - trustedCA for cluster-wide proxy is not picked up correctly by Alertmanager
• BZ - 1767004 - Invalid CSV data may cause OLM to not update status on csv
• BZ - 1767014 - cluster-policy-controller uses deprecated apis and triggers alerts
• BZ - 1767156 - During upgrades openshift-apiserver reports degraded with MultipleAvailable as the reason
• BZ - 1767163 - new-app with imagestream results in bad k8s labels
• BZ - 1767218 - Builds Without BuildConfigs Cause Build Controller to Have Errant Behavior
• BZ - 1767219 - Builds Without BuildConfigs Cause Build Controller to Have Errant Pruning Behavior
• BZ - 1767295 - [GCP] Internal scope of loadBalancer doesn't work
• BZ - 1767547 - Marketplace-operator produces unbounded number of package registry replicasets when CatalogSourceConfig targetNamespace is missing
• BZ - 1767629 - Metering - openshift-metering/hive-metastore-0 - Exception in thread "main" MetaException(message:java.lang.ClassNotFoundException: Class com.google.cloud.hadoop.fs.gcs.GoogleHadoopFileSystem not found)
• BZ - 1767675 - Typo in the description of "oc debug"
• BZ - 1767853 - Kubevirt pages for management console do not load on Edge browser
• BZ - 1767926 - `targetResource` missing from generated ConsoleYAMLSample CRD
• BZ - 1767954 - openshift/api verify job not catching missing regens
• BZ - 1767964 - oc cert deny says "approved" on the confirmation message
• BZ - 1768002 - [Conformance][Area:Networking][Feature:Router] The HAProxy router converges when multiple routers are writing conflicting status
• BZ - 1768262 - node failed to upgrade - master node not ready
• BZ - 1768298 - Gather events for namespaces defined as related objects in degraded operators
• BZ - 1768315 - "endpoints informer unable to sync cache" error in prometheus container logs
• BZ - 1768328 - Some parameters in PTP operator log cannot display correctly.
• BZ - 1768333 - The ptp-operator deployment miss the tolerations by default
• BZ - 1768341 - The cursor always moves to the end if try to add Aggregation operators to one typed metrics
• BZ - 1768346 - [sriov] 'nodeSelector' should be replaced by 'configDaemonNodeSelector' in CRD sriovoperatorconfigs
• BZ - 1768350 - External link in deprecation notes of pipeline build strategy does not exist
• BZ - 1768357 - [BM]Installation return failed when default image-registry is Removed
• BZ - 1768359 - [sriov] should update to on/off for spoofChk in the template sriovnetwork
• BZ - 1768417 - Test cluster is firing large number of UsingDeprecatedAPIExtensionsV1Beta1 alerts.
• BZ - 1768442 - Import virtual machine in UI shows create virtual machine
• BZ - 1768474 - Remove Collector example from the cluster logging CSV
• BZ - 1768483 - [marketplace] Default OpSrc metrics cardinality is too great
• BZ - 1768492 - Grafana html/template: "index" is undefined
• BZ - 1768507 - misleading image reference when pull-through fails
• BZ - 1768516 - oc adm release extract - cannot use extracted oc to extract another version of oc
• BZ - 1768537 - CLO has metadata.annotations.alm-examples contains invalid json string
• BZ - 1768542 - Add 'snippet' to ConsoleYAMLSample CRD spec
• BZ - 1768564 - [IPI Baremetal] baremetal: IPI baremetal image download broken by appended checksum query string
• BZ - 1768568 - Ruby install fails for install_fluentd playbook
• BZ - 1768599 - API success rate reporting 0% in console dashboard
• BZ - 1768611 - VM/VMTemplate List page keeps scrolling up when a overlapping dropdown is opened
• BZ - 1768614 - VM DIsks tab ignores Interface and type selected when adding new disk via 'Add Disk' modal
• BZ - 1768616 - Console shows nodes that aren't bare metal nodes as "powered off"
• BZ - 1768639 - Update the Known Issues doc to reflect the features that are landing in 4.3
• BZ - 1768654 - MS Edge does not support scrollTo used on details pages
• BZ - 1768662 - kubevirt-web-ui-components dependency loads on console load, significantly increasing the size of console JS
• BZ - 1768684 - two entries returned when query console_url metrics
• BZ - 1768685 - There are many "No secret data \"infra-key\" found" logs in CLO pod.
• BZ - 1768688 - Got many `Reconciler error` after creating logforwarding CR instance.
• BZ - 1768701 - Local storage operator is using version 4.2 on 4.3 cluster
• BZ - 1768716 - Launcher section don't show up on Namespace Overview
• BZ - 1768723 - Should not redirect to Dashboard when kubeadmin impersonate normal user
• BZ - 1768765 - app registry redhat-operators-art doesn't have 4.3 packagemanifest for asb and tsb
• BZ - 1768769 - example YAML lack of required fields for Pipelines related resources
• BZ - 1768771 - [sriov] sriovnetworknodepolicies CR cannot be shown in 'Provided APIs' from Webconsole
• BZ - 1768782 - Pipeline Run duration is not shown
• BZ - 1768814 - only 1 attempt at imagestreamimport failed for multiple tags, initial sample import
• BZ - 1768820 - Projects get stuck in Terminating status with "object *v1beta1.ServiceBindingList does not implement the protobuf marshalling interface and cannot be encoded to a protobuf message ..."
• BZ - 1768877 - Imagestream policy lookup doesn't work for apps/v1 RS and DS
• BZ - 1768905 - OCP 4.2.0 to 4.2.2 upgrade.yml with rhel7 workers failing
• BZ - 1768926 - openshift sdn treats unsupported network policy to deny-all
• BZ - 1768936 - Set minikube version in EO operator
• BZ - 1768938 - Add min_tx_rate flag for SR-IOV VF in SR-IOV CNI
• BZ - 1769005 - Fix promtail image reference in ClusterLoggingOperator
• BZ - 1769011 - Missing openapi CRD definitions for oc explain to work
• BZ - 1769012 - Missing openapi CRD definitions for oc explain to work
• BZ - 1769013 - Missing openapi CRD definitions for oc explain to work
• BZ - 1769016 - Missing openapi CRD definitions for oc explain to work
• BZ - 1769017 - Missing openapi CRD definitions for oc explain to work (controller-manager-operator)
• BZ - 1769076 - CPU usage and disk usage popovers on dashboards have wrong units
• BZ - 1769151 - SR-IOV network resources injector cannot parse ipam ips configuration in pod annotation
• BZ - 1769157 - Concurrent builds on 4.3 are frequently evicted with node low on ephemeral storage. AWS instances root filesystm is only 9.5G in 4.3
• BZ - 1769167 - Missing openapi CRD definitions for oc explain for configs.samples.operator.openshift.io
• BZ - 1769174 - OCP 4.3 : Special Resources Operator (SRO) fails to deploy the NVIDIA driver daemonset, need new driver image matching new kernel version on worker nodes
• BZ - 1769263 - Images csi-external-resizer and csi-external-provisioner are not in the 4.3-art-latest
• BZ - 1769303 - Creation of a VM with in-page VM Wizard fails due to mutatevirtualmachines.example.com request denial
• BZ - 1769325 - VM Wizard preselects a VM Template option
• BZ - 1769331 - [OSP] Port conflict between coredns and CNO
• BZ - 1769391 - Some tabs on details pages are unreachable at mobile
• BZ - 1769395 - No samples for various kinds of ConsoleLink
• BZ - 1769412 - Collect openshift-network-operator namespace on must-gather
• BZ - 1769422 - YAML editor shortcuts are not discoverable
• BZ - 1769435 - [Multus] multus-admission-controller is being too strict about requiring the "type" field
• BZ - 1769455 - OCP 4.3: oc explain nodefeaturediscoveries.nfd.openshift.io cmd returns empty Description field
• BZ - 1769468 - tuned does not have proper oc explain output
• BZ - 1769578 - Specfile global commit has to be overridable
• BZ - 1769585 - Fluentd log collector dropping logs
• BZ - 1769601 - The metrics of "service_catalog_controller_manager_enabled" is missing
• BZ - 1769602 - The metrics of "service_catalog_apiserver_enabled" is missing
• BZ - 1769609 - Missing openapi CRD definitions for oc explain to work (apiserver-operator)
• BZ - 1769612 - Impersonate button is not in action list on user detail page
• BZ - 1769615 - The metrics of "service_catalog_apiserver_enabled" is missing
• BZ - 1769641 - StorageOSCluster example on StorageOS Operator description is not correct
• BZ - 1769645 - StorageOS CR daemonsets are crashing
• BZ - 1769647 - Description is empty when oc explain authentication.operator.openshift.io
• BZ - 1769700 - [upgrade] Service Catalog apiserver failed to upgrade to 4.3 from 4.2.2
• BZ - 1769704 - There is no PTP package in the registry redhat-operators-art
• BZ - 1769742 - Cancel button in the new wizard doesn't navigate user back to the VM list view
• BZ - 1769768 - RelatedObjects in clusteroperator monitoring references non-existent monitoring resource
• BZ - 1769779 - library-go operator /metrics endpoint doesn't contain metrics
• BZ - 1769793 - Description is empty for oc explain servicecas.operator.openshift.io
• BZ - 1769807 - Use protobuf in SDN clients to reduce CPU usage
• BZ - 1769915 - Node secondary status shows "Host is powered off" when no host is attached to the node yet
• BZ - 1769949 - Build tests fail using github.com/openshift/ruby-hello-world repo
• BZ - 1769962 - Ovn-kubernetes pods crashing when enabling hybrid networking
• BZ - 1769985 - etcd: server certs should support client usage
• BZ - 1770003 - Deployment picks up wrong image by imagechange trigger
• BZ - 1770006 - Installer leaves behind orphaned Swift Containers
• BZ - 1770084 - The channel name should be string in nfd.package.yaml
• BZ - 1770101 - Kubelet cannot pull k8s.gcr.io/pause:3.1 image on bootpstrap node
• BZ - 1770108 - Miss description info for CRD servicecatalogcontrollermanagers
• BZ - 1770109 - Miss description info for CRD servicecatalogapiservers
• BZ - 1770144 - Cannot recognize image tag when run oc new-app with namespace after --imagestream
• BZ - 1770152 - SecondaryStatus is not rendered below PopoverStatus
• BZ - 1770269 - [DR]etcd client should be inline with what is shipped with product.
• BZ - 1770273 - [DR] Recovery script fails to handle error during drain
• BZ - 1770348 - Some NodeFilesystem* alerts display wrong percentage
• BZ - 1770387 - network_attachment_definition_enabled_instance_up{networks="any"} should not be 1 if pod is not running
• BZ - 1770406 - Azure: No validations for bring-you-own-VPC
• BZ - 1770441 - [OSP] Image auto-download unable to work with images with `.gz` extension
• BZ - 1770573 - Machine status phase missing from UI
• BZ - 1770642 - [sriov] The MTU of PF should be set when deviceType is vfio-pci
• BZ - 1770654 - The CLO does not manage fluentd when forward type is elasticsearch in the logforwarding instance.
• BZ - 1770655 - [OVN][Tracking] OVNKubernetes Active/Active HA using Raft development still in progress
• BZ - 1770665 - VM wizard cannot use hostname in cloud-init as the VM hostname when using custom script
• BZ - 1770709 - [sriov] oc explain cannot be worked for sriov CRD
• BZ - 1770724 - Filesystem and Network charts are missing in Project dashboard
• BZ - 1770749 - Bare Metal Hosts navigation item is incorrectly positioned within 'Compute' nav section
• BZ - 1770757 - Node maintenance percentage is incorrectly calculated when NMO isn't running
• BZ - 1770808 - Top consumers should link to dev perspective if user does not have access to monitoring section
• BZ - 1770903 - "No Operators are available for project #ALL_NS#" appears in UI
• BZ - 1770970 - [MSTR-485] When operatorLogLevel set to Debug, etcd encryption migration is stuck
• BZ - 1771003 - Deprovision bare metal host state is not reflected when host's node is in maintenance
• BZ - 1771017 - pod log files not being rotated
• BZ - 1771172 - [Multi Arch] cri-o rejects clone calls on s390x
• BZ - 1771233 - [sirov] The 'priority' in SriovNetworkNodePolicy should be able to be added if it do not be set
• BZ - 1771245 - UI created template cannot be used in cli
• BZ - 1771249 - There is invalid json string in ptp manifests
• BZ - 1771273 - The `opm alpha bundle build` command should support to build image for the manifest, which has multi sub-folders
• BZ - 1771321 - [Disconnected] openshift-samples operator is reporting bad status to make the whole installation get failed.
• BZ - 1771335 - S2I build from authenticated registry can't pull image
• BZ - 1771355 - Bare Metal Host's 'Ready' status collides with Node's 'Ready' status
• BZ - 1771389 - Sometimes there are PrometheusRuleFailures alerts due to failed to evaluating rule "cluster:capacity_cpu_sockets_hyperthread_enabled:sum" and "node_role_os_version_machine:cpu_capacity_sockets:sum"
• BZ - 1771431 - installer exit upon an installation from ignition files with customer subnets specified
• BZ - 1771522 - [operator-registry] Version and skiprange fields not populated during insert
• BZ - 1771736 - Dashboard popover opens behind left nav
• BZ - 1771744 - Modal dialog for adding Network Interfaces keeps loading Networks indefinitely
• BZ - 1771783 - Template router metrics listener is potentially broken by service CA rotation
• BZ - 1771784 - Traceback during installation Failed to watch *v1.ClusterVersion
• BZ - 1771813 - Fluentd doesn't use the `shared_key` in the user-managed secret when secure forward enabled.
• BZ - 1771843 - No prometheus graph for firing alerts except Watchdog
• BZ - 1771850 - The `bundle extract ` command should output errors when reading the wrong key/values
• BZ - 1771851 - Console does not allow git repository with port defined
• BZ - 1771919 - [GCP] Stopped machine has 'Failed' phase
• BZ - 1771931 - Catalogsource AVAILABLE will be false when enable it (message: 'Available: v1beta1.servicecatalog.k8s.io is not ready: 503')
• BZ - 1771995 - [RFE] Emit events when certs are rotated
• BZ - 1772000 - CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in Grafana route
• BZ - 1772002 - Unable to provision the cinder volume in OCP 4.2 on OSP 13
• BZ - 1772049 - VMs are not shown in project overview page
• BZ - 1772067 - Breaking change in the service annotation service.alpha.openshift.io/serving-cert-secret-name feature
• BZ - 1772080 - [IPI Baremetal]: gz openstack image suffix breaks deployment
• BZ - 1772094 - Restrict NADs UI to supported environments and network types
• BZ - 1772154 - CRI-O incorrectly setting PodIP breaks baremetal IPI platform
• BZ - 1772155 - Etcd quorum guard pods does not have a proper termination policy
• BZ - 1772163 - AWS: Machine API operator marks (pending) Machine Failed: Can't find created instance
• BZ - 1772190 - Excess events written for file that exists, poorly formatted event message
• BZ - 1772317 - Network type is not selectable in Networking -> Network Attachment Definitions
• BZ - 1772340 - VM Node isn't changed after migrating it to other node
• BZ - 1772346 - Failed to display the InstallPlan on the Web console if use manual way
• BZ - 1772392 - ASB/TSB operators failed to upgrade from 4.2 to 4.3 for no "olm.skipRange" or "replace" field in CSVs
• BZ - 1772451 - etcd: client bump to 3.3.17
• BZ - 1772455 - Unit tests fail using ruby-22-centos7 image stream
• BZ - 1772477 - [IPI][Openstack] First attempt to destroy cluster sometimes fails with msg="Resource not found"
• BZ - 1772502 - A lot of events in the activity card have a timestamp of 1 AM
• BZ - 1772509 - iOS 13 errors after visiting Pod > Logs
• BZ - 1772599 - [IPI Baremetal]] Installer needs to decompress RHCOS images for libvirt and baremetal IPI installations
• BZ - 1772687 - Upgrade from 4.2.2 to 4.2.4 causes Console CSS to break/not render until cache is cleared
• BZ - 1772767 - [sriov] cluster:network_attachment_definition_instances:max{networks="sriov"} should not '-1' When the sriov type pod is deleted
• BZ - 1772796 - "No datapoints found." is shown in metrics chart on route overview page
• BZ - 1772804 - [Azure] Use of DNS private zones from the preview resource model
• BZ - 1772849 - 'Number of pods' host query is not valid range query for query_range prometheus endpoint
• BZ - 1772874 - Bare metal host popovers does not display anything in the Top Consumers
• BZ - 1772900 - MCO: Stale feature flags in kubelet.conf extracted from ignition file
• BZ - 1772912 - VM Wizard cannot find datavolume when creating VM from a templated created from URL
• BZ - 1773243 - Cannot identify cluster virtualization or bare metal status from telemetry
• BZ - 1773431 - 4.3 console is pointing to 4.2 docs
• BZ - 1773480 - Failed to run `oc adm catalog build` in a restricted cluster
• BZ - 1773634 - openshift-ansible scaleup.yaml playbook fails on s390x & ppc64le (release-4.3+)
• BZ - 1773661 - catalog source pods are scheduled onto windows nodes
• BZ - 1773686 - Installer Panic When Trying to Gather logs in Private Clusters
• BZ - 1773725 - Button spacing too wide for install plan approval
• BZ - 1773727 - Awkward wrapping in installed operators list
• BZ - 1773733 - Install plan components of same type use same key resulting in console error
• BZ - 1773847 - Got `sed: couldn't open temporary file /etc/fluent/configs.d/user/sedBZf21K: Read-only file system` when LOGGING_FILE_PATH=console
• BZ - 1773854 - [proxy]Can't access jenkins webconsole with SocketTimeoutException behind http proxy cluster
• BZ - 1773995 - VM Wizard style/usability issues
• BZ - 1774060 - alertmanager-access role is not created
• BZ - 1774173 - Individual project dashboard page generating a repeating console error
• BZ - 1774212 - kube-apiserver-operator panic during gcp install
• BZ - 1774352 - Installation fails with co/monitoring not available due to 'Alertmanager.monitoring.coreos.com "main" is invalid: type: Required value'
• BZ - 1774353 - the readability of router pod logs is getting worse
• BZ - 1774369 - kubeletconfig's description will show duplicate lines for finalizers and status
• BZ - 1774451 - [sriov] VF cannot be init in rhel worker
• BZ - 1774589 - Ship updated coreos installer for s390x support
• BZ - 1774630 - Incorrect CSV data causes grpc pod to panic
• BZ - 1774642 - `oc adm release extract --tools` fails on macOS
• BZ - 1774720 - potential memory leak not handling returned context cancellation functions when reconciling
• BZ - 1774813 - Private GCP cluster install fails due to bootstrap node in master instance group
• BZ - 1774837 - Too many `warning: The environment variable HTTP_PROXY is discouraged. Use http_proxy.` in fluentd pod logs after enable forwarding logs to user-managed ES as insecure
• BZ - 1774841 - The csv container-security-operator.v1.0.0 metadata refer to the image which does not exist on the quay.io
• BZ - 1774907 - continuous "cannot list resource "endpoints\services\pods" error for openshift-apiserver
• BZ - 1774912 - console will get error when sorting by 'Availability' on the catalogsource page
• BZ - 1774917 - file observer has not restarted process on serving cert change
• BZ - 1774930 - VM wizard does not register templates and vmware import does not work
• BZ - 1774936 - VM Wizard cloud init and other style/usability issues
• BZ - 1775009 - machine-config operators controller segfaults during 4.2.4 upgrade
• BZ - 1775055 - OSP CI bootstrap log collection fails with "'ascii' codec can't encode characters"
• BZ - 1775119 - OSP Keepalived static pod crashlooping
• BZ - 1775131 - Fix Windows Tools CD container names by branding
• BZ - 1775156 - Explore type access review tab incorrectly says "at the cluster scope"
• BZ - 1775170 - The Nodes list page is broken
• BZ - 1775245 - Avoid creating pod on windows worker for openshift-marketplace
• BZ - 1775279 - libvirt installer instructions need updating for Fedora 31
• BZ - 1775323 - OLM takes about 5 minutes to detect internal CatalogSource changes
• BZ - 1775379 - Clicking the Prometheus UI link does not open anything under the metrics menu. Missing HREF tag.
• BZ - 1775384 - [wmcb] Failed to bootstrap windows node on OCP 4.3
• BZ - 1775527 - operator-registry appregistry image builder doesn't respect given cache directory
• BZ - 1775580 - [MSTR-485] co/kube-apiserver stuck in Progressing and Degraded after deleting openshift-kube-apiserver
• BZ - 1775643 - etcd: DR setup-etcd-environment regression
• BZ - 1775723 - Downstream operator shows incorrect channel description from the packagemanifest in webconsole
• BZ - 1775730 - Error in updating master machines in private cluster on GCP
• BZ - 1775742 - Topology Applications are overlapping on each other
• BZ - 1775752 - User with lack of permissions to create Operator subscription can see the Create button - No UI Feedback
• BZ - 1775826 - kubelet needs --reserved-cpus to have fine control over isolation of system resources vs static-cpu pods
• BZ - 1775849 - NFD pods disappear after cluster upgrade
• BZ - 1775874 - AWS MachineWithNoRunningPhase firing, phase Failed, instanceState pending
• BZ - 1775878 - ~10% of CI jobs fail: Some tests fail with 'etcdserver: request timed out'
• BZ - 1776010 - Poor getting started message when user doesn't have permission to create projects
• BZ - 1776043 - make sure x86_64 samples are not installed on s390x clusters (initial 4.2.x targeted GA)
• BZ - 1776060 - ServiceAccount namespace is wrong in 0000_90_kube-apiserver-operator_04_servicemonitor-apiserver.yaml
• BZ - 1776135 - ansible-service-broker-operator doesn't notify users and admins via alerts in prometheus
• BZ - 1776189 - KubeAPI server doesn't accept patch requests > 1MB
• BZ - 1776193 - In Developer perspective, graphs should not link to Administrator perspective version of Metrics page
• BZ - 1776213 - Authentication "500 Internal Error" when accessing grafana UI on HTTPS_PROXY cluster
• BZ - 1776295 - Pin openshift/origin dependencies in release-4.3 so we don't move accidentally
• BZ - 1776297 - MachineAPIOperatorDown alert is threw out after upgrade OCP from 4.2 to 4.3
• BZ - 1776305 - Pin openshift/api dependencies in release-4.3 so we don't move accidentally
• BZ - 1776311 - Pin openshift/client-go dependencies in release-4.3 so we don't move accidentally
• BZ - 1776339 - default template for metering report for editor should use v1 instead of v1apha1
• BZ - 1776401 - It's impossible to identify which object the context menu is associated in the topology view
• BZ - 1776421 - Disable authentication operator for hosted control plane deployments
• BZ - 1776474 - topology: changing operations while dragging using the shift button causes node to jump out of position
• BZ - 1776486 - Navigating from the Dashboard results in two navigation items highlighted
• BZ - 1776493 - `oc edit clusterresourcequota` cannot work
• BZ - 1776521 - Replacing (updating) operator creates duplicate secrets for the operator's ServiceAccount
• BZ - 1776533 - Alert `FluentdNodeDown` is firing when enable logforwarding and the logstore is not set in the clusterlogging instance.
• BZ - 1776604 - [sriov] VF resource will not be used after restart sriov operator pod and config daemon pod by manual
• BZ - 1776660 - Region for AWS not being passed to the operator while creating a backingstore.
• BZ - 1776698 - Bumping of dependencies in origin dropped UPSTREAM commits
• BZ - 1776700 - CCOProvisioningFailed alert is found in a fresh cluster
• BZ - 1776708 - [4.3][IPI on Azure] - openshift-install create cluster on Azure fails with index out of range when having a different number of workers than masters
• BZ - 1776759 - [Azure] Machine does not become 'Failed' when it has create error
• BZ - 1776768 - [Feature:Platform] Managed cluster should have no crashlooping pods in core namespaces over two minutes [Suite:openshift/conformance/parallel]
• BZ - 1776773 - [Vsphere][4.3] Volume cannot mount to node after upgrade and for from scratch case
• BZ - 1776797 - [MSTR-485] kube-apiserver etcd encryption is too slow on fresh installed env, always taking nearly 15mins
• BZ - 1776812 - Selecting VM template in VM creation wizard closes the wizard window
• BZ - 1776867 - continuous "dns resolution failed" error in thanos-querier container logs
• BZ - 1776885 - Non-unique Machine names in cluster-api-actuator-pkg E2E tests
• BZ - 1776897 - Race between pools recovery and previous request_vifs
• BZ - 1776914 - [sriov] sriov webhook should validate the resourcename in SriovNetworkNodePolicy
• BZ - 1776935 - OLM CSV Metrics are not present in Telemeter
• BZ - 1776990 - CCO fallbacks to Mint mode on Azure
• BZ - 1777036 - Recent builds booting to Emergency mode during install on AWS: e.g. 4.3.0-0.nightly-2019-11-21-122827 and 4.3.0-0.nightly-2019-11-22-050018
• BZ - 1777178 - "Insert Example Query" button should also enable the query
• BZ - 1777205 - Missing DESCRIPTION for oc explain kubeschedulers.spec
• BZ - 1777229 - Missing ESCRIPTION for oc explain kubecontrollermanagers.spec
• BZ - 1777233 - [4.3]node-exporter "/var/node_exporter/textfile/virt.prom" file contains unescaped new-line
• BZ - 1777273 - BucketClass is spelled incorrectly
• BZ - 1777281 - Link issue in backingstore and bucketclass
• BZ - 1777291 - Missing DESCRIPTION for oc explain kubeapiserver.spec
• BZ - 1777388 - cloud-utils-growpart install conflicts with gce-disk-expand in google managed image when scale up rhel node
• BZ - 1777424 - Race between namespace deletion and member addition
• BZ - 1777477 - Fluentd: "Could not communicate to Elasticsearch" when http proxy enabled in the cluster.
• BZ - 1777513 - Not handled exceptions wrongly cause Kuryr Controller restart
• BZ - 1777517 - Unable to delete Neutron Port from Pool
• BZ - 1777593 - Metrics endpoints of catalog-operator and olm-operator are potentially broken by service CA rotation
• BZ - 1777732 - Port NotFound exception wrongly cause Kuryr-Controller restart
• BZ - 1777753 - [RFE] Message is missing in ServiceCatalogControllerManagerEnabled and ServiceCatalogAPIServerEnabled alert
• BZ - 1777776 - [MSTR-485] When OAS-O operatorLogLevel set to Debug, its etcd encryption migration is stuck with pod CrashLoopBackOff
• BZ - 1777838 - crio-1.16 does not execute or read in hook description
• BZ - 1777970 - Event sources in topology should be displayed with respective icons
• BZ - 1778017 - "Displaying with reduced resolution due to large dataset." shows and disappears quickly even there are just a few records
• BZ - 1778205 - Gitlab Git Detection Appears to Run Forever
• BZ - 1778213 - Pipeline ClusterTasks need to be rendered in Pipeline Overview
• BZ - 1778312 - Edge Errors on Pipeline Logs
• BZ - 1778535 - Improve API descriptions of important user facing objects for API explorer and oc explain
• BZ - 1778686 - [MHC] MachineHealthCheck does not have status when it's created with a machine already unhealthy
• BZ - 1778894 - [IPI Baremetal]baremetal ipi should not require mkisofs
• BZ - 1778904 - NodeControllerDegradedMasterNodesReady: NodeControllerDegraded: The master node(s) ".*" not ready
• BZ - 1778930 - console operator panic when RouterCAValidationDegraded
• BZ - 1778940 - Need to have /etc/system-fips in the initrd for true FIPS boot
• BZ - 1778954 - [4.3] 4.2 to 4.3 upgrades broken when cluster-dns-operator attempts to upgrade due to missing metrics-tls secret
• BZ - 1779101 - asb/tsb can not be installed on baremental disconnected cluster with FIPS on
• BZ - 1779189 - [4.3] Taints and Tolerations are not working with Local Storage Operator
• BZ - 1779191 - Knative revision should have connectors in topology
• BZ - 1779195 - Duplicate content on detail page of "LocalVolumes"
• BZ - 1779222 - [baremetal-pxeboot]bootstrap always resetart for UPI install on baremetal with PXE boot
• BZ - 1779237 - During upgrade encryption operator throws errors due to missing revision on pods
• BZ - 1779316 - "Rebuild" item is disabled for common user
• BZ - 1779322 - Don't mark network operator un-Available or Degraded because of multus-admission-controller
• BZ - 1779329 - [GCP] openshift-install destroy cluster can leak buckets
• BZ - 1779332 - oc debug init container on hostnetwork / hostpid DaemonSet Pod does not work
• BZ - 1779348 - MCO should be updated based on the backport of reserved-cpus feature
• BZ - 1779383 - yaml editor does not work well after click shortcut popover
• BZ - 1779487 - Pod tooltip shouldn't be Scaled to Zero when the build has not yet completed
• BZ - 1779491 - dns-node-resolver sometimes exits with status 255 on upgrade
• BZ - 1779492 - Inconsisteny in Object service Dashboard Unavailable statuses
• BZ - 1779524 - Dependency error when installing cri-o-1.16.1-1.dev.rhaos4.3.git356cd12.el7.x86_64
• BZ - 1779535 - oc rollout restart is missing in oc
• BZ - 1779665 - Can't create Azure worker nodes without managed identity (4.3)
• BZ - 1779679 - Image security dashboard card should make it clear we only check images from quay
• BZ - 1779681 - Try It button for ConsoleYAMLSample resources silently fails on invalid YAML
• BZ - 1779741 - Cluster-autoscaler stuck on update, doesn't report status
• BZ - 1779791 - Vsphere UPI 4.3 failiing with: Error applying plan: module.compute.data.ignition_config.ign[0]: data.ignition_config.ign.0: No valid JSON found, make sure you're using .rendered and not .id: invalid character 'c' after top-level value
• BZ - 1779831 - Action to re-run pipeline run does not work
• BZ - 1779913 - Allow some telemetry metrics to be added without changes to whitelist
• BZ - 1779915 - Topology edit actions should be disabled if the user does not have correct permission
• BZ - 1779916 - dns operator exits with code 255 on sigterm, should be 0 on safe exit
• BZ - 1779956 - Bucket Class wizard goes to next with whitespaces
• BZ - 1779995 - Packagemanifest get/list is very slow
• BZ - 1780142 - alertmanager-access role prevents cluster-monitoring-view grantees users to view fired alerts
• BZ - 1780379 - Miss description and FIELDS info for CRD catalogsourceconfig
• BZ - 1780384 - "text" x-descriptors (both "specDescriptor" and "statusDescriptor") always shows "None" whenever the data is "True".
• BZ - 1780408 - Add a simple set of usage metrics to understand workload configuration
• BZ - 1780509 - UI does not allow adding baremetal host with IPV6 based BMC address
• BZ - 1780587 - Poor use of skeletons on dashboard page
• BZ - 1780590 - AWS: csr failed to approve if node has multiple ip addresses
• BZ - 1780736 - OLM resources do not display status using an icon
• BZ - 1780738 - Dropdown Select input missing default placeholder text
• BZ - 1780835 - Serverless Service / route models clash with other models
• BZ - 1780843 - KCM cannot recover from deleting its lease configmap
• BZ - 1780953 - Missing che icon in topology edit source decorator
• BZ - 1780982 - Authentication and Authorization options are not exposed for OpenShift API server
• BZ - 1780989 - Log into kibana console get `504 Gateway Time-out The server didn't respond in time. ` when http_proxy enabled
• BZ - 1780994 - On overview sidebar pod center has message "0 Pods" but design says "Scaled to 0"
• BZ - 1781019 - Fail to start crio service on RHEL worker
• BZ - 1781037 - Capacity breakdown card should show absolute values and not hourly averaged values
• BZ - 1781053 - WithDashboardResources HOC has incorrect comparison for alerts results
• BZ - 1781083 - `oc login` should prompt messages for how to generate a token with challenge=false for identity provider
• BZ - 1781104 - Failed pods should not trigger KubePodNotReady
• BZ - 1781105 - The dev catalog does not filter out secondary CRDs
• BZ - 1781141 - Upgrade from 4.2.9 to 4.3 failed for MCO: controller version mismatch
• BZ - 1781178 - Helm 3.0.0+ does not work with OpenShift objects (e.g. BuildConfig, Route, ImageStream, etc)
• BZ - 1781193 - Error in topology if knative service created via CLI
• BZ - 1781258 - Kubelet metrics returned HTTP status 500 Internal Server Error
• BZ - 1781284 - CVO extract job runs in the best-effort QoS, should be in burstable
• BZ - 1781286 - kube-apiserver-operator panic during gcp install
• BZ - 1781290 - During a 4.2 to 4.3 upgrade skew test, build e2e tests continuously fail
• BZ - 1781313 - [4.3] 4.2 to 4.3 upgrade stuck on monitoring: waiting for Thanos Querier Route to become ready failed
• BZ - 1781330 - Enable multi-arch support in downloads-openshift-console [4.3]+
• BZ - 1781347 - Knative Revision badge should use REV rather than R
• BZ - 1781558 - Backport 4.3: network operator crashes when infra.status.platformStatus is missing
• BZ - 1781577 - cluster-openshift-apiserver-operator panics
• BZ - 1781678 - 17 min frozen leader election due to TCP networking issues, was: kube-apiserver Progressing=True: 1 nodes are at revision 4; 2 nodes are at revision 6
• BZ - 1781763 - [backport 4.3] RouteHealthDegraded: failed to GET route: dial tcp <ip>:443: connect: connection refused because Load IP missing from node iptables rules
• BZ - 1781795 - revert 1758305 per request from Ben Parees
• BZ - 1781798 - alert name prefixes (CCO) are too generic
• BZ - 1781843 - error building openapi models for clusteroperators.config.openshift.io
• BZ - 1781869 - local-storage-operator does not support LVM devices
• BZ - 1781950 - [4.3] Ingress operator logs spurious "failed to sync ingresscontroller status" errors
• BZ - 1782104 - Openshift installed with FIPS enabled cause exception in ansible module `
• BZ - 1782119 - VM created from VM Template disk does not fill the disk page
• BZ - 1782124 - ingress and routes should be present in related objects for authentication operator
• BZ - 1782147 - [sriov] The exist VF disappeared when worker reboot
• BZ - 1782149 - Pull CI: Cluster operator machine-config Degraded is True with RequiredPoolsFailed: machineconfig.machineconfiguration.openshift.io rendered-master-* not found
• BZ - 1782164 - Builds faling due to missing packages (e.g. python3-kuryr-lib)
• BZ - 1782176 - AWS: terminated Machine adopted by replacement Machine with the same name
• BZ - 1782204 - static pod operator revision pending message is unclear
• BZ - 1782224 - click "Classic UI" from prometheus experimental React UI returns an empty body
• BZ - 1782237 - metering-ocp operator pulls the image via tag instead of digest in OLM package manifest.
• BZ - 1782312 - openshift-sdn repots error trying to add network, pods and tests fail
• BZ - 1782409 - [4.3.0] Unmount error reported frequently from buildah output in openshift builds
• BZ - 1782447 - The naming rule of cluster name does not match the rule of GCP
• BZ - 1782546 - No support for TPM1.2 devices
• BZ - 1782584 - GCP destroy is leaking Project IAM bindings.
• BZ - 1782728 - PVC Pool as a backingstore creation fails
• BZ - 1782795 - [kube-apiserver-operator] Missing degraded condition when the static pod installer is unable to create pods due to networking errors
• BZ - 1782817 - oc adm inspect should use the InsecureSkipTLSVerifyBackend to scrape the logs when possible
• BZ - 1782819 - cloud provider could not be initialized behind mitm proxy which is using some self-signed certificates
• BZ - 1782829 - The DNS provider failed to ensure the record: caused by: Post https://route53.amazonaws.com/xxx: dial tcp x.x.x.x:443: i/o timeout
• BZ - 1782837 - Can't install operator unless I install the dependency operator first
• BZ - 1782860 - openshift-sdn logging is way too verbose
• BZ - 1782992 - Unable to boot RHCOS instances on remote libvirtd on s390x
• BZ - 1782997 - Fix build of ansible-operator for multi-arch [4.3]
• BZ - 1783009 - [4.3] Scaling an ingresscontroller causes a rolling update
• BZ - 1783010 - Unable to boot RHCOS instances using libvirtd on s390x
• BZ - 1783011 - OLM Unit Tests will not run
• BZ - 1783259 - Insights operator unable to resolve cloud.redhat.com with Kuryr
• BZ - 1783353 - kcm doesn't work on IPv6
• BZ - 1783448 - etcd backup/restore should also save and restore kube apiserver static resources
• BZ - 1783587 - conmon should run in the pod slice
• BZ - 1783732 - secure forward not supported unless LogForwarding TechPreview is Enabled
• BZ - 1783829 - asb/tsb can not be installed for ocp 4.3
• BZ - 1783846 - rhel worker can not get ready and crio service is reporting "Unknown option --persist-dir"
• BZ - 1783892 - Can not get local storage operator 4.3 on OCP 4.3
• BZ - 1783974 - Nightly build failing because of missing image
• BZ - 1784082 - Backport of Increase esp size to fix downstream build error
• BZ - 1784086 - Ironic images build failures
• BZ - 1784166 - No etcd alert fires when high number of leader changes occur
• BZ - 1784319 - Image ironic-hardware-inventory-recorder-image not published
• BZ - 1784440 - [Kuryr]Ensure leftover load balancers are deleted upon Kuryr-Controller start
• BZ - 1784469 - [Kuryr]Pod is stuck in container creating after installation
• BZ - 1784475 - [4.3] S3 region invalid if ec2-metadata fails on first attempt
• BZ - 1784500 - ironic image can't be built on ppc64le arch
• BZ - 1784629 - [IPI baremetal]: user should be able to override machine OS images for disconnected (air gapped) use case
• BZ - 1784880 - [e2e-cmd] oc get is ruby-25-centos7 time out
• BZ - 1784915 - [Upgrade] 4.2.12 -> 4.3.0-0.nightly-2019-12-18-105351 upgrade stuck at 77% - olm-operator crash looping
• BZ - 1784981 - Upgrade from 4.2.9 to 4.2.10 stuck in machine-config occasionally
• BZ - 1785138 - subnets and networks leftovers without associated kuryrnet object
• BZ - 1785310 - Helm CLI download link is missing from Console [openshift-4.3]
• BZ - 1785419 - The sctp feature is not available in the LatencySensitive featureset
• BZ - 1785675 - [4.3] openshift-sdn nil dereference in startup
• BZ - 1786141 - Timeout adding member with host networking causes continuous kuryr-controller restart
• BZ - 1786300 - [Kuryr] LB sg update ignored upon NP enforcement
• BZ - 1786993 - RHCOS master and worker nodes may go to NotReady,SchedulingDisabled while upgrading from 4.2.12 to 4.3.0 sometimes
• BZ - 1787334 - Upgrade can not start due to version pod fail to request expected ephemeral-storage on master node
• BZ - 1787587 - /etc/passwd misconfigured in ansible-operator base image
• BZ - 1788054 - RHEL worker nodes fail to get upgraded on behind-proxy clusters
• BZ - 1788118 - Change default upload frequency from 10m to 2hrs
• BZ - 1788321 - [Feature:DisasterRecovery][Disruptive] [dr-quorum-restore] Cluster should restore itself after quorum loss
• BZ - 1788442 - thanos-querier deployment does not fetch the PROXY settings from cluster
• BZ - 1788580 - [4.3] improve sdn logging
• BZ - 1788621 - Improve logging of kubelet-apiserver logging
• BZ - 1788704 - Performance: OLM icons take too long to load, blocking later pages
• BZ - 1789001 - node-exporter not working in IPv6 environment
• BZ - 1789014 - e2e-metal: Installation fails to complete pending on DaemonSet \"openshift-multus/multus\"
• BZ - 1789601 - bonding configuration no longer works as documented
• BZ - 1790329 - Failed OCP build of openshift/ose-ptp:v4.3.0
• BZ - 1791332 - include signed version of ignition-0.34.0-1

CVEs

• CVE-2019-10401
• CVE-2019-10402
• CVE-2019-10403
• CVE-2019-10404
• CVE-2019-10405
• CVE-2019-10406
• CVE-2019-11840
• CVE-2019-16276
• CVE-2020-7039
• CVE-2020-7211

References

(none)