# 4.11.25 Created: 2023-01-18 18:47:13 +0000 UTC Image Digest: `sha256:2adcf72e10e67ace02ade32467ff7e75680ec1c71545a038196e569dc3149ad0` Promoted from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-01-17-083429 ## Changes from 4.11.24 ### Components * Kubernetes 1.24.6 * Red Hat Enterprise Linux CoreOS 411.86.202301102150-0 ### Rebuilt images without code change * [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [1c9e8a1e](https://github.com/openshift/image-customization-controller/commit/1c9e8a1efc92ad6457e00b0262adecd93ed3961c) `sha256:0d51be783947044e1fb4752e73b98ace91907f24acb0672895f8a6cd10b870df` * [machine-os-images](https://github.com/openshift/machine-os-images) git [b1580a29](https://github.com/openshift/machine-os-images/commit/b1580a29e6bc76598c2d408c0e27460bc6b638be) `sha256:665e8bb5925a89fc20376b1c7393cdbef743368b99eaebf001d873a7e2fe4718` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bc51be826e96cae9e00d0fff0970fd273c078d9a) * Updating ose-agent-installer-api-server images to be consistent with ART (#3980) [#3980](https://github.com/openshift/assisted-service/pull/3980) * [MGMT-11799](https://issues.redhat.com/browse/MGMT-11799): change all 'go get' commands (#4887) [#4887](https://github.com/openshift/assisted-service/pull/4887) * [Full changelog](https://github.com/openshift/assisted-service/compare/0f526475e7ec16c6586ee351c5216ef6ae225b1b...bc51be826e96cae9e00d0fff0970fd273c078d9a) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b1b244444835f9a3fd2c5e6717db9ba6d18607be) * [OCPBUGS-5422](https://issues.redhat.com/browse/OCPBUGS-5422): Switch back to gp2 ebs volume type for bootstrap instance [#6743](https://github.com/openshift/installer/pull/6743) * [OCPBUGS-4685](https://issues.redhat.com/browse/OCPBUGS-4685): out-of-bounds read in golang.org/x/text/language leads to DoS [#6685](https://github.com/openshift/installer/pull/6685) * [Full changelog](https://github.com/openshift/installer/compare/f746e45c4eb7c279ebf5a69a71ba14a5c543fd03...b1b244444835f9a3fd2c5e6717db9ba6d18607be) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/06b363fafd082397c9b6f4fc9e10c4573ba590d2) * Updating ose-cluster-baremetal-operator images to be consistent with ART [#264](https://github.com/openshift/cluster-baremetal-operator/pull/264) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/1f1ea5376edf6b4631cd9dc552e77da99cacb056...06b363fafd082397c9b6f4fc9e10c4573ba590d2) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/6626a79181b2466f3d923fc4101d17d30c7d0816) * [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#1429](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1429) * [OCPBUGS-4301](https://issues.redhat.com/browse/OCPBUGS-4301): bootstrap-kube-apiserver: specify resources.requests [#1412](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1412) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/6721877bea074776b335b2ecf44927260f58067e...6626a79181b2466f3d923fc4101d17d30c7d0816) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/96f12680f9dd8fa0b704ecd7383ccb042d3ed6fd) * [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#690](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/690) * [OCPBUGS-4304](https://issues.redhat.com/browse/OCPBUGS-4304): resources.requests for operator pod [#667](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/667) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/74584b7e3c7fd13b71bcb93c517d070d54a29409...96f12680f9dd8fa0b704ecd7383ccb042d3ed6fd) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/55c3556f1a1f9c849a9e2a59f8457a69bb54d6d0) * [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#458](https://github.com/openshift/cluster-kube-scheduler-operator/pull/458) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/730f219306e9738f9e533dd8f4bd61a9e5f39d06...55c3556f1a1f9c849a9e2a59f8457a69bb54d6d0) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/317fcac5c060e01615b48b735c6b1b841c0ebaaf) * [OCPBUGS-3971](https://issues.redhat.com/browse/OCPBUGS-3971): HyperShift: Do not accept empty infrastructure name [#1635](https://github.com/openshift/cluster-network-operator/pull/1635) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ae7c9d9bda28637ce8bd5667d0940246ee872ef8...317fcac5c060e01615b48b735c6b1b841c0ebaaf) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/83d123eebd8cce393eeb9fd7b7b52a37ba88b8d3) * pao: latency-tests: read test log directly from pod (#531) [#531](https://github.com/openshift/cluster-node-tuning-operator/pull/531) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/bfb03760cfd73f856a6d64b229638779680cae66...83d123eebd8cce393eeb9fd7b7b52a37ba88b8d3) ### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/565118124779c16428c32b624005cae038456838) * [OCPBUGS-5787](https://issues.redhat.com/browse/OCPBUGS-5787): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#96](https://github.com/openshift/cluster-policy-controller/pull/96) * [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/c7201edacb6e4ac1f8a1624b152911f3c404dbc7...565118124779c16428c32b624005cae038456838) ### [console](https://github.com/openshift/console/tree/bb81604768f1c2a6964798a3df8fc385b259e014) * [OCPBUGS-1727](https://issues.redhat.com/browse/OCPBUGS-1727): Allow regular users to access debug pods [#12100](https://github.com/openshift/console/pull/12100) * [Full changelog](https://github.com/openshift/console/compare/d890c2674142814e26b0f09acfe5dd0ddd4d0bcc...bb81604768f1c2a6964798a3df8fc385b259e014) ### [console-operator](https://github.com/openshift/console-operator/tree/b7f40255d6229242dc56365f30b893c9d42e78f4) * [OCPBUGS-5499](https://issues.redhat.com/browse/OCPBUGS-5499): Add host inventory quickstart (#718) [#718](https://github.com/openshift/console-operator/pull/718) * [Full changelog](https://github.com/openshift/console-operator/compare/2161b0cfbb0ebf7b7b5f79d5a7fd9568c299612a...b7f40255d6229242dc56365f30b893c9d42e78f4) ### [hypershift](https://github.com/openshift/hypershift/tree/186a3909c1adfdad83edad4af7d1f1d984ab76dc) * cherry-pick #2006 [#2028](https://github.com/openshift/hypershift/pull/2028) * [Full changelog](https://github.com/openshift/hypershift/compare/8d5f8f497ed5bf63e000e2a4ade42a1412065732...186a3909c1adfdad83edad4af7d1f1d984ab76dc) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/034e60ec00470f0d778ef1f6ebde47526cccb690) * [OCPBUGS-998](https://issues.redhat.com/browse/OCPBUGS-998): [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade [#488](https://github.com/openshift/sdn/pull/488) * [OCPBUGS-2105](https://issues.redhat.com/browse/OCPBUGS-2105): fix network policy egress [#464](https://github.com/openshift/sdn/pull/464) * [Full changelog](https://github.com/openshift/sdn/compare/c6fadea09079472f42320ba7b7ca118be79344d5...034e60ec00470f0d778ef1f6ebde47526cccb690) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b36482885ba1304e122e7c01c26cd671dfdd0418) * [OCPBUGS-4945](https://issues.redhat.com/browse/OCPBUGS-4945): Do not allow empty system reserved values [#3459](https://github.com/openshift/machine-config-operator/pull/3459) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/92012a837e2ed0ed3c9e61c715579ac82ad0a464...b36482885ba1304e122e7c01c26cd671dfdd0418) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cb6810ac51d29bfbab55da0fb8249affed0b4b3d) * [OCPBUGS-4446](https://issues.redhat.com/browse/OCPBUGS-4446): fix service account token secret reference (#2862) [#416](https://github.com/openshift/operator-framework-olm/pull/416) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/60941887ec69e459e82398f5a523eac84b5b3996...cb6810ac51d29bfbab55da0fb8249affed0b4b3d) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/82cfcd53e2776a35e3c040a4081aa8fe0b02957d) * [OCPBUGS-5790](https://issues.redhat.com/browse/OCPBUGS-5790): Allow cluster to be upgraded even if using multiple datacenters [#130](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/130) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/8308ce4b593f63b913ea7fbe528539fd96c1ff44...82cfcd53e2776a35e3c040a4081aa8fe0b02957d)