You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: release_notes/ocp-4-20-release-notes.adoc
+43-64Lines changed: 43 additions & 64 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -58,11 +58,11 @@ Before this update, the self-signed loopback certificate for the Kubernetes API
58
58
59
59
Before this update, deleting an `istag` resource with the `--dry-run=server` option unintentionally caused actual deletion of the image from the server. This unexpected deletion occurred due to the `dry-run` option being implemented incorrectly in the `oc delete istag` command. With this release, the `dry-run` option is wired to the `oc delete istag` command. As a result, the accidental deletion of image objects is prevented and the `istag` object remains intact when using the `--dry-run=server` option.
@@ -1008,8 +1008,8 @@ This new feature enhances TLS certificate rotations in {product-title}, ensuring
1008
1008
1009
1009
With this update, the etcd product documentation is updated to include additional requirements for reducing {product-title} cluster latency. This update clarifies the prerequisites and setup procedures for using etcd, resulting in an improved user experience. As a result, this feature introduces support for Transport Layer Security (TLS) 1.3 in etcd, which enhances security and performance for data transmission, and enables etcd to comply with the latest security standards, reducing potential vulnerabilities. The improved encryption ensures more secure communication between etcd and its clients. For more information, see xref:../etcd/etcd-practices.adoc#recommended-cluster-latency-etcd_etcd-practices[Cluster latency requirements for etcd].
1010
1010
1011
-
[id="ocp-release-notes-security_{context}"]
1012
-
=== Security
1011
+
//[id="ocp-release-notes-security_{context}"]
1012
+
//=== Security
1013
1013
1014
1014
[id="ocp-release-notes-storage_{context}"]
1015
1015
=== Storage
@@ -1365,14 +1365,14 @@ This prevents users from discovering certain problems only after the cache is po
1365
1365
|====
1366
1366
1367
1367
1368
-
[id="ocp-hardware-an-driver-dep-rem_{context}"]
1369
-
=== Specialized hardware and driver enablement deprecated and removed features
1368
+
//[id="ocp-hardware-an-driver-dep-rem_{context}"]
1369
+
//=== Specialized hardware and driver enablement deprecated and removed features
1370
1370
1371
-
.Specialized hardware and driver enablement deprecated and removed tracker
1372
-
[cols="4,1,1,1",options="header"]
1373
-
|====
1374
-
|Feature |4.18 |4.19 |4.20
1375
-
|====
1371
+
//.Specialized hardware and driver enablement deprecated and removed tracker
1372
+
//[cols="4,1,1,1",options="header"]
1373
+
//|====
1374
+
//|Feature |4.18 |4.19 |4.20
1375
+
//|====
1376
1376
1377
1377
1378
1378
=== Storage deprecated and removed features
@@ -1389,14 +1389,14 @@ This prevents users from discovering certain problems only after the cache is po
1389
1389
|====
1390
1390
1391
1391
1392
-
[id="ocp-clusters-dep-rem_{context}"]
1393
-
=== Updating clusters deprecated and removed features
1392
+
//[id="ocp-clusters-dep-rem_{context}"]
1393
+
//=== Updating clusters deprecated and removed features
1394
1394
1395
-
.Updating clusters deprecated and removed tracker
1396
-
[cols="4,1,1,1",options="header"]
1397
-
|====
1398
-
|Feature |4.18 |4.19 |4.20
1399
-
|====
1395
+
//.Updating clusters deprecated and removed tracker
@@ -1659,12 +1659,8 @@ As a result, the controller handles errors during migration better.
1659
1659
1660
1660
* Before this update, when you created a cluster autoscaler object with the Cluster Autoscaler Operator enabled in the cluster, two `cluster-autoscaler-default` pods in the `openshift-machine-api` were sometimes created at the same time and one of the pods was immediately killed. With this release, only one pod is created. (link:https://issues.redhat.com/browse/OCPBUGS-57041[OCPBUGS-57041])
@@ -1702,13 +1698,8 @@ As a result, the controller handles errors during migration better.
1702
1698
1703
1699
* Before this update, the catalogd and Operator Controller components did not display the correct version and commit information in the {oc-first}. With this update, the correct commit and version information is displayed. (link:https://issues.redhat.com/browse/OCPBUGS-23055[OCPBUGS-23055])
@@ -1717,7 +1708,7 @@ As a result, the controller handles errors during migration better.
1717
1708
1718
1709
* Before this update, when you installed a cluster on {azure-short} Stack Hub with a user-provisioned infrastructure, the API and API-int load balancers could fail to be created. As a consequence, the installation failed. With this release, the user-provisioned infrastructure templates is updated so that the load balancers are created. As a result, installation is successful. (link:https://issues.redhat.com/browse/OCPBUGS-60545[OCPBUGS-60545])
1719
1710
1720
-
* Before this update, when you installed a cluster on {gcp-short}, the installation program read and processed the `install-config.yaml` file even when an unrecoverable error was reported about not finding a matching public DNS zone. This error was due to an invalid `baseDomain` parameter. As a consequence, cluster administrators recreated the `install-config.yaml` file unnecessarily. With this release, when the installation program reports this error the installation progam does not read and process the `install-config.yaml` file. (link:https://issues.redhat.com/browse/OCPBUGS-59430[OCPBUGS-59430])
1711
+
* Before this update, when you installed a cluster on {gcp-short}, the installation program read and processed the `install-config.yaml` file even when an unrecoverable error was reported about not finding a matching public DNS zone. This error was due to an invalid `baseDomain` parameter. As a consequence, cluster administrators recreated the `install-config.yaml` file unnecessarily. With this release, when the installation program reports this error the installation progam does not read and process the `install-config.yaml` file. (link:https://issues.redhat.com/browse/OCPBUGS-59430[OCPBUGS-59430])
1721
1712
1722
1713
* Before this update, {ibm-cloud-title} was omitted from the list of platforms that supported {sno} installation in the validation code. As a consequence, users could not install a single-node configuration on {ibm-cloud-title} because of a validation error. With this release, {ibm-cloud-title} support for single-node installations is enabled. As a result, users can complete single-node installations on {ibm-cloud-title}. (link:https://issues.redhat.com/browse/OCPBUGS-59220[OCPBUGS-59220])
1723
1714
@@ -2009,27 +2000,18 @@ With this release, the warning message no longer appears in the `metrics-server`
2009
2000
2010
2001
* Before this update, the catalog Operator scheduled catalog snapshots for every 5 minutes. On clusters with many namespaces and subscriptions, snapshots failed and cascaded across catalog sources. As a result, the spikes in CPU loads effectively blocked installing and updating Operators. With this update, catalog snapshots are scheduled for every 30 minutes to allow enough time for the snapshotes to resolve. (link:https://issues.redhat.com/browse/OCPBUGS-43966[OCPBUGS-43966])
* Before this update, setting an invalid certificate secret name in the service annotation `service.beta.openshift.io/serving-cert-secret-name` would cause the service Certificate Authority (CA) Operator to hot loop. With this release, the Operator stops retrying to create the secret after 10 tries. The number of retries cannot be changed. (link:https://issues.redhat.com/browse/OCPBUGS-61966[OCPBUGS-61966])
@@ -2038,11 +2020,8 @@ With this release, the warning message no longer appears in the `metrics-server`
2038
2020
* Before this update, a race condition would sometimes cause an intermittent failure, or _flake_, when a Persistent Volume Claim (PVC) was resized too quickly after being created. This resulted in an error where the system would incorrectly report that the bound Persistent Volume (PV) could not be found. With this release, the timing issue was fixed, so resizing a PVC right after its creation works. (link:https://issues.redhat.com/browse/OCPBUGS-61546[OCPBUGS-61546])
{product-title} release {product-version}.0, which includes security updates, is now available. The list of bug fixes that are included in the update is documented in the link:https://access.redhat.com/errata/RHSA-202X:XXXXX[RHSA-202X:XXXXX] advisory. The RPM packages that are included in the update are provided by the link:https://access.redhat.com/errata/RHEA-202X:XXXX[RHEA-202X:XXXX] advisory.
2851
+
{product-title} release {product-version}.0, which includes security updates, is now available. The list of bug fixes that are included in the update is documented in the link:https://access.redhat.com/errata/RHSA-2025:9562[RHSA-2025:9562] advisory. The RPM packages that are included in the update are provided by the link:https://access.redhat.com/errata/RHEA-2025:4782[RHEA-2025:4782] advisory.
2873
2852
2874
2853
Space precluded documenting all of the container images for this release in the advisory.
0 commit comments