# 4.11.23

Created: 2023-01-11 13:57:38 +0000 UTC

Image Digest: `sha256:24a273f879d6eed8d6cce1426798a623ebbe095e01a881e58aa78c4e9eff0c8b`

Promoted from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-01-11-025441


## Changes from 4.11.20

### Components

* Kubernetes 1.24.6
* Red Hat Enterprise Linux CoreOS upgraded from 411.86.202212072103-0 to 411.86.202301102150-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [0f526475](https://github.com/openshift/assisted-service/commit/0f526475e7ec16c6586ee351c5216ef6ae225b1b) `sha256:fb552df3c7b29781db8ffd0f89ca3cb9ad0045279bf542d051ce37dc2b50fe95`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [13ccef87](https://github.com/openshift/driver-toolkit/commit/13ccef8780beaa079803888088e77bed20898835) `sha256:fc5681900c4fe09e9b2d36c225170c2c7c00b1cc1b1ade588c2be531ec0f9f58`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [93daed6b](https://github.com/openshift/kuryr-kubernetes/commit/93daed6bc4e8e4e59f1e609a493daad1a2d0d1ec) `sha256:16ef18f210fe155fe40da2527d9b39d246ca9d51c7397ca084dc99bec9ae7636`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [93daed6b](https://github.com/openshift/kuryr-kubernetes/commit/93daed6bc4e8e4e59f1e609a493daad1a2d0d1ec) `sha256:a370f6f8b409db4e873eac8d806554942d69eb683c7468f9de7e927e03b948ab`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [1c9e8a1e](https://github.com/openshift/image-customization-controller/commit/1c9e8a1efc92ad6457e00b0262adecd93ed3961c) `sha256:5659fc6eb8c6b0854a29b88798f8d064bba54fe1f7f22df17e359d8d2fb813ba`
* machine-os-content `sha256:e3154887d070c8fef6eb2b05d97592f1671a8681884d31a6dea1e7cdf9ea5d9e`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b1580a29](https://github.com/openshift/machine-os-images/commit/b1580a29e6bc76598c2d408c0e27460bc6b638be) `sha256:12f2716805c3cdbcc9eff6c07ab351da1da2051fe0310166a4932fe111b38f66`
* [network-tools](https://github.com/openshift/network-tools) git [4e87286c](https://github.com/openshift/network-tools/commit/4e87286cff4d645777cf2632a0671eed0d82270c) `sha256:6f56116e66ff47108771ce99f029c398f584c5217744ec350f1cfd58b4461535`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6521f30171eef41729efd0907d15d6ae1665e7d3)

* Remove jira tickets prefix requirements (#596) [#596](https://github.com/openshift/assisted-installer/pull/596)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9a6e300a4a7311feef98580d3ef07c4a314fca07...6521f30171eef41729efd0907d15d6ae1665e7d3)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/a796a77f62697f908fb8d6c354244f94b9c2ee03)

* Updating ose-machine-api-provider-aws images to be consistent with ART [#57](https://github.com/openshift/machine-api-provider-aws/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f6cf48823cee9ac0c2449abb31141c3033970ed5...a796a77f62697f908fb8d6c354244f94b9c2ee03)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/415f448b1570b7d15aebe60bae12052e06df59b4)

* [OCPBUGS-2123](https://issues.redhat.com/browse/OCPBUGS-2123): Fix availability sets unwanted creation for unknown vmSizes [#41](https://github.com/openshift/machine-api-provider-azure/pull/41)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/25eb7e1c09bf263fd10e538f9272add49be58772...415f448b1570b7d15aebe60bae12052e06df59b4)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/f746e45c4eb7c279ebf5a69a71ba14a5c543fd03)

* [OCPBUGS-3193](https://issues.redhat.com/browse/OCPBUGS-3193): [release-4.11] [AWS] Add AWS r6i into tested instance types table [#6350](https://github.com/openshift/installer/pull/6350)
* [OCPBUGS-3362](https://issues.redhat.com/browse/OCPBUGS-3362): bump RHCOS 4.11 bootimage metadata [#6720](https://github.com/openshift/installer/pull/6720)
* [OCPBUGS-4720](https://issues.redhat.com/browse/OCPBUGS-4720): GCP: Add me-west1 region [#6690](https://github.com/openshift/installer/pull/6690)
* [OCPBUGS-5078](https://issues.redhat.com/browse/OCPBUGS-5078): OpenStack: Force JSON content-type in Swift object listing [#6725](https://github.com/openshift/installer/pull/6725)
* [OCPBUGS-4405](https://issues.redhat.com/browse/OCPBUGS-4405): UPI: Azure: create HyperV2 rhcos image [#6681](https://github.com/openshift/installer/pull/6681)
* [OCPBUGS-4530](https://issues.redhat.com/browse/OCPBUGS-4530): Enable CVO unmanage overrides in bootstrap-in-place installations [#6668](https://github.com/openshift/installer/pull/6668)
* [Full changelog](https://github.com/openshift/installer/compare/7e60d787431c862a90f6ffc918b24251516f0585...f746e45c4eb7c279ebf5a69a71ba14a5c543fd03)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/5dd318b4fa16f138cdba8110234b3ac814edb7d4)

* Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#93](https://github.com/openshift/cloud-network-config-controller/pull/93)
* [OCPBUGS-3932](https://issues.redhat.com/browse/OCPBUGS-3932): Add assigned egress ips into capacity [#78](https://github.com/openshift/cloud-network-config-controller/pull/78)
* [OCPBUGS-4529](https://issues.redhat.com/browse/OCPBUGS-4529): Node controller: Skip uninitialized nodes [#85](https://github.com/openshift/cloud-network-config-controller/pull/85)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/7876bc67488da9ffacf4a40a79601863625c3023...5dd318b4fa16f138cdba8110234b3ac814edb7d4)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/1f1ea5376edf6b4631cd9dc552e77da99cacb056)

* [OCPBUGS-5075](https://issues.redhat.com/browse/OCPBUGS-5075): Do not fail the reconciler when no master Machines exist [#318](https://github.com/openshift/cluster-baremetal-operator/pull/318)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c5fa43802a55f60843eded25969fb0e3270dd68b...1f1ea5376edf6b4631cd9dc552e77da99cacb056)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ac462432e3299341a4ce0806522e821b94efd520)

* [OCPBUGS-4785](https://issues.redhat.com/browse/OCPBUGS-4785): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#973](https://github.com/openshift/cluster-etcd-operator/pull/973)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/c831f3c2ee3ff0b1d43930d901708f373733a3a1...ac462432e3299341a4ce0806522e821b94efd520)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/6721877bea074776b335b2ecf44927260f58067e)

* [OCPBUGS-3290](https://issues.redhat.com/browse/OCPBUGS-3290): routes/status resources can leak sensitive data, exclude it from audit [#1422](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1422)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f28fe4d8dc2cb1201657d9904b24db195cad9e35...6721877bea074776b335b2ecf44927260f58067e)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/21da027d835977c0216a9a7303a0b3851f46379a)

* Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#6](https://github.com/openshift/cluster-api-operator/pull/6)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/55efc390b9c04d602a7a51c23bf9ab426a7c5f13...21da027d835977c0216a9a7303a0b3851f46379a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/7ebe9421bfdf4a168d94230e108062c681cbba00)

* Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift [#1749](https://github.com/openshift/cluster-monitoring-operator/pull/1749)
* [OCPBUGS-4640](https://issues.redhat.com/browse/OCPBUGS-4640): Increase startupProbe for prometheus [#1845](https://github.com/openshift/cluster-monitoring-operator/pull/1845)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a397875156b940051f9a46be450ac62182512849...7ebe9421bfdf4a168d94230e108062c681cbba00)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ae7c9d9bda28637ce8bd5667d0940246ee872ef8)

* [OCPBUGS-3490](https://issues.redhat.com/browse/OCPBUGS-3490): OVN-Kubernetes: Prefer oldest nodes [#1641](https://github.com/openshift/cluster-network-operator/pull/1641)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0d88535182cfb2c418dd53daf7c637034327df1c...ae7c9d9bda28637ce8bd5667d0940246ee872ef8)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/bfb03760cfd73f856a6d64b229638779680cae66)

* E2E: Automate Offline CPUs feature (#523) [#523](https://github.com/openshift/cluster-node-tuning-operator/pull/523)
* [OCPBUGS-4216](https://issues.redhat.com/browse/OCPBUGS-4216): e2e: performance profile: add logs and minor fixes (#515) [#515](https://github.com/openshift/cluster-node-tuning-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/6f3d8ecd2f1fac30ff072d5abe5ec64f3288722d...bfb03760cfd73f856a6d64b229638779680cae66)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/cb39fde1ff115ce4ef4b9adee8d1649ea8e6b248)

* [OCPBUGS-3290](https://issues.redhat.com/browse/OCPBUGS-3290): routes/status resources can leak sensitive data, exclude it from audit [#513](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/513)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/5ddbeef319c297618a94d97a79dcb0cc0a2ec497...cb39fde1ff115ce4ef4b9adee8d1649ea8e6b248)


### [console](https://github.com/openshift/console/tree/d890c2674142814e26b0f09acfe5dd0ddd4d0bcc)

* [OCPBUGS-5258](https://issues.redhat.com/browse/OCPBUGS-5258): add support for version v1beta1 for knativeServing and knativeEventing [#12403](https://github.com/openshift/console/pull/12403)
* [OCPBUGS-5418](https://issues.redhat.com/browse/OCPBUGS-5418): Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) [#12413](https://github.com/openshift/console/pull/12413)
* [OCPBUGS-4786](https://issues.redhat.com/browse/OCPBUGS-4786): Fix for initial showing of topology contents [#12311](https://github.com/openshift/console/pull/12311)
* [OCPBUGS-5206](https://issues.redhat.com/browse/OCPBUGS-5206): Pan nodes into view if all nodes are not visible on load [#12398](https://github.com/openshift/console/pull/12398)
* [OCPBUGS-2443](https://issues.redhat.com/browse/OCPBUGS-2443): Monitoring: Fix help popovers [#12173](https://github.com/openshift/console/pull/12173)
* [Full changelog](https://github.com/openshift/console/compare/695cf01abe0c6935958ad1f1108eb8146316dc61...d890c2674142814e26b0f09acfe5dd0ddd4d0bcc)


### [coredns](https://github.com/openshift/coredns/tree/227d72792347fcec2e2f1c14a44ea7eee4f97054)

* [OCPBUGS-2901](https://issues.redhat.com/browse/OCPBUGS-2901): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#79](https://github.com/openshift/coredns/pull/79)
* [Full changelog](https://github.com/openshift/coredns/compare/7fe212f3354bf70d16e7327029e4ad819e326cfd...227d72792347fcec2e2f1c14a44ea7eee4f97054)


### [etcd](https://github.com/openshift/etcd/tree/c50e9aadacd29bbc6308d8be43d346368506fa83)

* [OCPBUGS-3101](https://issues.redhat.com/browse/OCPBUGS-3101): Rebase openshift/etcd 4.11 onto v3.5.6 [#170](https://github.com/openshift/etcd/pull/170)
* [Full changelog](https://github.com/openshift/etcd/compare/53284bc6743964f36f869fa8db3b796f5c802137...c50e9aadacd29bbc6308d8be43d346368506fa83)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9363d87de998726d9f8081463f8b2bd9267ad71d)

* [OCPBUGS-4579](https://issues.redhat.com/browse/OCPBUGS-4579): refactor restartPolicyToBool function [#30](https://github.com/openshift/machine-api-provider-gcp/pull/30)
* [OCPBUGS-4532](https://issues.redhat.com/browse/OCPBUGS-4532): Set sync period for Machine controller [#27](https://github.com/openshift/machine-api-provider-gcp/pull/27)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/17a3a9f5bc5344472e328db58338af34415ffd35...9363d87de998726d9f8081463f8b2bd9267ad71d)


### [ironic](https://github.com/openshift/ironic-image/tree/72ac16f370083b2b4e922c2e809c91a17ebfa703)

* Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image [#344](https://github.com/openshift/ironic-image/pull/344)
* [OCPBUGS-4908](https://issues.redhat.com/browse/OCPBUGS-4908): Update packages versions with latest available [#336](https://github.com/openshift/ironic-image/pull/336)
* [OCPBUGS-5145](https://issues.redhat.com/browse/OCPBUGS-5145): Configure Ironic iLO driver to use web server [#342](https://github.com/openshift/ironic-image/pull/342)
* [OCPBUGS-3674](https://issues.redhat.com/browse/OCPBUGS-3674): Don't save OS_ prefixed variables [#318](https://github.com/openshift/ironic-image/pull/318)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f8cd4b0928806884cf29dbee4e093ab503909a35...72ac16f370083b2b4e922c2e809c91a17ebfa703)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/4636d193704b52c3e127c0ee856e66372e6d15c0)

* [OCPBUGS-5099](https://issues.redhat.com/browse/OCPBUGS-5099): make coreos-installer output available in the logs [#67](https://github.com/openshift/ironic-agent-image/pull/67)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/501911577eed7db671c45b2c8fdee43a392935ba...4636d193704b52c3e127c0ee856e66372e6d15c0)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/92012a837e2ed0ed3c9e61c715579ac82ad0a464)

* [OCPBUGS-4099](https://issues.redhat.com/browse/OCPBUGS-4099): daemon: gate done state on uncordon completion [#3434](https://github.com/openshift/machine-config-operator/pull/3434)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/60746a843e7ef8855ae00f2ffcb655c53e0e8296...92012a837e2ed0ed3c9e61c715579ac82ad0a464)


### [must-gather](https://github.com/openshift/must-gather/tree/44f6adacb094952723f957d4d7d61043b6f2fe04)

* [OCPBUGS-4324](https://issues.redhat.com/browse/OCPBUGS-4324): backport PodNetworkConnectivityCheck gather script #334 [#338](https://github.com/openshift/must-gather/pull/338)
* [Full changelog](https://github.com/openshift/must-gather/compare/32bca4033d79326225d966d98641935927888428...44f6adacb094952723f957d4d7d61043b6f2fe04)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/df9f0367e66448b0e8736111e4d6c4f7d98eec4d)

* Bug OCPBUGS-4103: Add SecretHashAnnotation to node service [#99](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/ae4c45caf3f689d9797972ab133612e5cc030d90...df9f0367e66448b0e8736111e4d6c4f7d98eec4d)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/4b9339a108b626c7a595c0695036f7a09e89f3ec)

* [OCPBUGS-4761](https://issues.redhat.com/browse/OCPBUGS-4761): [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1438](https://github.com/openshift/ovn-kubernetes/pull/1438)
* [OCPBUGS-1720](https://issues.redhat.com/browse/OCPBUGS-1720): Backport changes to ovnkube-trace [#1436](https://github.com/openshift/ovn-kubernetes/pull/1436)
* [OCPBUGS-4829](https://issues.redhat.com/browse/OCPBUGS-4829): Set the node as reachable only when it is being added as an egressip node [#1445](https://github.com/openshift/ovn-kubernetes/pull/1445)
* [OCPBUGS-4655](https://issues.redhat.com/browse/OCPBUGS-4655): [release-4.11] Don't delete equivalent ACLs by predicate, since it will fail if [#1444](https://github.com/openshift/ovn-kubernetes/pull/1444)
* [OCPBUGS-4992](https://issues.redhat.com/browse/OCPBUGS-4992): [release-4.11] fixing hybrid subnet allocator [#1459](https://github.com/openshift/ovn-kubernetes/pull/1459)
* [OCPBUGS-4863](https://issues.redhat.com/browse/OCPBUGS-4863): [release-4.11] Fix address set cleanup: only delete address sets owned by given object [#1448](https://github.com/openshift/ovn-kubernetes/pull/1448)
* [OCPBUGS-4887](https://issues.redhat.com/browse/OCPBUGS-4887): [release-4.11] Fixes scenario where deleted + completed pods may leak [#1455](https://github.com/openshift/ovn-kubernetes/pull/1455)
* [OCPBUGS-4838](https://issues.redhat.com/browse/OCPBUGS-4838), [OCPBUGS-4860](https://issues.redhat.com/browse/OCPBUGS-4860): [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1447](https://github.com/openshift/ovn-kubernetes/pull/1447)
* [OCPBUGS-3614](https://issues.redhat.com/browse/OCPBUGS-3614): [4.11] CARRY: client: don't construct transaction log string when it's not needed [#1374](https://github.com/openshift/ovn-kubernetes/pull/1374)
* [OCPBUGS-3116](https://issues.redhat.com/browse/OCPBUGS-3116): append instead of overwrite logicalSwitch other-config [#1350](https://github.com/openshift/ovn-kubernetes/pull/1350)
* [OCPBUGS-4475](https://issues.redhat.com/browse/OCPBUGS-4475): Handle expired entry while handling dns update [#1417](https://github.com/openshift/ovn-kubernetes/pull/1417)
* [OCPBUGS-4564](https://issues.redhat.com/browse/OCPBUGS-4564): pods: deleteLogicalPort should not fail when node is gone [#1422](https://github.com/openshift/ovn-kubernetes/pull/1422)
* [OCPBUGS-4408](https://issues.redhat.com/browse/OCPBUGS-4408): Validate node subnet annotations against cluster networks [#1415](https://github.com/openshift/ovn-kubernetes/pull/1415)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0205a851eb531f174bb81da688514250d6547f88...4b9339a108b626c7a595c0695036f7a09e89f3ec)


### [thanos](https://github.com/openshift/thanos/tree/e447c3abaa67cd60721116ae9ccdcbb6e6c31906)

* Updating thanos images to be consistent with ART [#99](https://github.com/openshift/thanos/pull/99)
* [Full changelog](https://github.com/openshift/thanos/compare/f769b174108d65f161e0563b05d65607ded161ae...e447c3abaa67cd60721116ae9ccdcbb6e6c31906)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/8308ce4b593f63b913ea7fbe528539fd96c1ff44)

* [OCPBUGS-5472](https://issues.redhat.com/browse/OCPBUGS-5472): Fix sc creation on resync [#127](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/127)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/85df37ee6c1b4ef7ce13e864df44b7b32639a168...8308ce4b593f63b913ea7fbe528539fd96c1ff44)