OCP 4.5 Release Notes Tracker

[soltysh]

Please leave comments here for anything that should be highlighted in the 4.5 release notes. Thank you!

Rendered draft of 4.5 release notes: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html

[soltysh]

openshift/oc#310 drops the following commands and flags:

• oc policy can-i command deprecated in 3.9 (openshift/origin@73338c4), users should use oc auth can-i instead
• oc new-app --image and oc new-build --image flags deprecated in 3.2 (openshift/origin@6517d76), users should use --image-stream instead
• oc process -t flag deprecated in 3.11 (openshift/origin@6a8cc0b), users should use --template instead
• oc process --output-version flag deprecated in 3.11 (openshift/origin@6a8cc0b), the flag was already ignored
• oc set deployment-hook -v flag deprecated in 3.11 (openshift/origin@2fcf185), users should use --volumes instead
• oc set volumes --list flag deprecated in 3.3 (openshift/origin@af79d7d), oc set volumes w/o flags will list volumes
• oc status -v and oc status --verbose flags deprecated in 3.11 (openshift/origin@2fcf185), users should use --suggest instead

[codyhoag]

The deprecated /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt file will be removed in 4.5. From #18426 (comment).

[soltysh]

openshift/oc#355 changes default behavior of oc new-app, starting since 4.5 the default resource produced by oc new-app will be Deployment and not DeploymentConfig (for more information about differences see https://docs.openshift.com/container-platform/4.3/applications/deployments/what-deployments-are.html). Users interested in generating DeploymentConfig can pass --as-deployment-config flag when invoking oc new-app.

[jboxman]

Notable changes

The OVN-Kubernetes Pod network provider now uses the Open vSwitch (OVS) version installed on the cluster nodes. Previously, OVS ran in a container on each node, managed by a DaemonSet. Using the host OVS eliminates any possible downtime from upgrading the containerized version of OVS.

(Because OVN-Kubernetes will GA in 4.5, I'm not sure how notable this is, but here it is nonetheless.)

Hi @mccv1r0 -- Is the above correct? If not, what changes can you suggest? Thanks!

[mccv1r0]

@jboxman I can speak to OVN-Kubernetes (I'm not sure what OpenShift SDN is doing.) What you wrote is correct. No need to change a thing.

[yapei]

https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html#ocp-4-5-new-attribute-filters

NEW CAPABILITY AND SUBSCRIPTION REQUIRED FILTERS FOR OPERATORS IN OPERATORHUB
OLM provides a list of attributes that Operator developers can tag their Operators with, that describe the Operator’s functionality or attributes, such as disconnected, license required, FIPS mode, and so on. You can now filter these options by Capability and Subscription Required in OperatorHub

We only support filter type Infrastructure Features in OperatorHub, and we usually set FIPS Mode, Disconnected, Proxy for operators.openshift.io/infrastructure-features annotation

We also added support for operators.openshift.io/valid-subscription annotation, but the Valid Subscription badge only appears in Operator modal, we don't have a filter type for it

[bmcelvee]

Node Pull Secrets
You can import and use images from any registry configured during or after the cluster installation by sharing node's pull secret credentials with openshift-api, builder and image-registry Pods.

[qinpingli]

External provisioner for AWS EFS in table 2 should be moved to table 1.

[qinpingli]

Looks raw block feature is GA in k8s 1.18, but in table 2, Raw Block with iSCSI is GA from OCP4.3 and the Raw Block with Cinder is TP feature.

Suggest we can merge these two into one named Block Volume.

[qinpingli]

CSI volume cloning is GA in OCP 4.5

[jianzhangbjz]

Service Catalog, Template Service Broker, and CatalogSourceConfigs are removed for OCP 4.5. OperatorSources is DEP for 4.5. @emmajiafan correct me if I'm wrong, thanks!

[gpei]

we're starting to support VMware vSphere IPI deployment - https://issues.redhat.com/browse/CORS-1272, GCP UPI shared VPC (XPN) - https://issues.redhat.com/browse/CORS-1390 in 4.5, better to highlight them in the release notes.

[lihongan]

The INGRESS ENHANCEMENTS is missing in New features and enhancements section and should add 2 enhancements below:

1. https://issues.redhat.com/browse/NE-280 ingress access logging
2. https://issues.redhat.com/browse/NE-278 wildcard route policy