# 4.11.28 Created: 2023-02-15 12:37:35 +0000 UTC Image Digest: `sha256:85238bc3eddb88e958535597dbe8ec6f2aa88aa1713c2e1ee7faf88d1fefdac0` Promoted from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-02-14-163917 ## Changes from 4.11.27 ### Components * Kubernetes 1.24.6 * Red Hat Enterprise Linux CoreOS upgraded from 411.86.202302021552-0 to 411.86.202302091729-0 ### Rebuilt images without code change * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [28589b0a](https://github.com/openshift/driver-toolkit/commit/28589b0a149df1fa10b2759fff13b1885d0dfa14) `sha256:f49690c772895ddfda8d5c246816a534690ab436b21bac75a1aa7d8f90e1abc1` * [haproxy-router](https://github.com/openshift/router) git [601ba575](https://github.com/openshift/router/commit/601ba575b7fadc1e05e7b4e2f35a660859db9788) `sha256:53056d53167346440dfc4fb6bf51b32c4d807e126f437666347f72bd9647ffab` * [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [93daed6b](https://github.com/openshift/kuryr-kubernetes/commit/93daed6bc4e8e4e59f1e609a493daad1a2d0d1ec) `sha256:08352e323733c63fc5727ae81669eb44a8f9acbc54c37e08f305e6fb61fe40fb` * [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [93daed6b](https://github.com/openshift/kuryr-kubernetes/commit/93daed6bc4e8e4e59f1e609a493daad1a2d0d1ec) `sha256:0bf0c504386e3090ae5e2cc302ea3dd4a5c7ff9a06198ce907e295e555c73331` * machine-os-content `sha256:d3bf5db684edcaeac5e6385d8540a55283d50d56385d65dd2511dfe8219cd708` * [machine-os-images](https://github.com/openshift/machine-os-images) git [b1580a29](https://github.com/openshift/machine-os-images/commit/b1580a29e6bc76598c2d408c0e27460bc6b638be) `sha256:52444c6a760d58bbbde413536982833aff7c0039f55d67837f58d38d44942c96` * [network-tools](https://github.com/openshift/network-tools) git [4e87286c](https://github.com/openshift/network-tools/commit/4e87286cff4d645777cf2632a0671eed0d82270c) `sha256:87beb41b30a883c08b84dc115f467a6cb677a7ec030282bbf23d26b4e6501c47` * [sdn](https://github.com/openshift/sdn) git [6d45763d](https://github.com/openshift/sdn/commit/6d45763d37a3146637d6a655a183ad9941b66b36) `sha256:a7d3e65f77fa54f503c19610d7f381d9ca1390675abc9c750b39bf31ec96a418` ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/59d11963b3cde06a6c4fc75844e83df5cec1faf0) * [OCPBUGS-5665](https://issues.redhat.com/browse/OCPBUGS-5665): CVE-2021-4238: goutils: update for randomness fix [#6765](https://github.com/openshift/installer/pull/6765) * [Full changelog](https://github.com/openshift/installer/compare/b1b244444835f9a3fd2c5e6717db9ba6d18607be...59d11963b3cde06a6c4fc75844e83df5cec1faf0) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d27a36e0ca534467d5e0c18351cfbfb42da58617) * Run node selector tests only if we 2 non Performanceworker nodes (#563) [#563](https://github.com/openshift/cluster-node-tuning-operator/pull/563) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/83d123eebd8cce393eeb9fd7b7b52a37ba88b8d3...d27a36e0ca534467d5e0c18351cfbfb42da58617) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/645e5ff555aa5219bb3235c5037264991d509c8e) * [OCPBUGS-7330](https://issues.redhat.com/browse/OCPBUGS-7330): When setting allowedRegistries urls the openshift-samples operator is degraded [#490](https://github.com/openshift/cluster-samples-operator/pull/490) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/99469697ca5df630e42a65f7258b76e206fdbfc9...645e5ff555aa5219bb3235c5037264991d509c8e) ### [console](https://github.com/openshift/console/tree/adb1684e6260b1d20103f8d4545e91f330ddb451) * [OCPBUGS-6492](https://issues.redhat.com/browse/OCPBUGS-6492): Add RBAC check on Create a Project link in all-namespaces pages [#12514](https://github.com/openshift/console/pull/12514) * [Full changelog](https://github.com/openshift/console/compare/f354c932979a8ce0e30adefe4982ffdbe85a6e9f...adb1684e6260b1d20103f8d4545e91f330ddb451) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/587614588aa6de7fd4a9a7d0e5e482ef2366d6af) * [OCPBUGS-6684](https://issues.redhat.com/browse/OCPBUGS-6684): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 [#176](https://github.com/openshift/cloud-provider-openstack/pull/176) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/8a437640c2fab4bceaf09758bcc1152cb58b8573...587614588aa6de7fd4a9a7d0e5e482ef2366d6af) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/deccab3b24a30df438d48826eea1fb64db14e7d8) * [OCPBUGS-6683](https://issues.redhat.com/browse/OCPBUGS-6683): add message about possibly working with restricted SCC [#1459](https://github.com/openshift/kubernetes/pull/1459) * [Full changelog](https://github.com/openshift/kubernetes/compare/263df153c0874fd11ba1f43ed22d13ca40cb91e8...deccab3b24a30df438d48826eea1fb64db14e7d8) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/08a91f1f1022015b2c7335cbf0f7c6267fa110e4) * [OCPBUGS-3942](https://issues.redhat.com/browse/OCPBUGS-3942): Excluded ranges bug (#282) [#104](https://github.com/openshift/whereabouts-cni/pull/104) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/bdc15c08a928ca7ff9fa5640a0fdc2adf8c28034...08a91f1f1022015b2c7335cbf0f7c6267fa110e4) ### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/f8ea13a29099134f6b193a8527feb3c3d5ee65e9) * [OCPBUGS-7322](https://issues.redhat.com/browse/OCPBUGS-7322): Address CVE-2022-41717 [#57](https://github.com/openshift/machine-api-provider-openstack/pull/57) * [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/eb7e497ff47739d9289063cb864436277c6f7bc0...f8ea13a29099134f6b193a8527feb3c3d5ee65e9) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/8e52d6337948510946e788e30048cb94a6f0e1cc) * [OCPBUGS-7319](https://issues.redhat.com/browse/OCPBUGS-7319): Bump OVN to 22.09, enable session affinity timeout [#1522](https://github.com/openshift/ovn-kubernetes/pull/1522) * [OCPBUGS-5245](https://issues.redhat.com/browse/OCPBUGS-5245): Move check_pkt_larger to gateway router ports [#1505](https://github.com/openshift/ovn-kubernetes/pull/1505) * [OCPBUGS-7010](https://issues.redhat.com/browse/OCPBUGS-7010): [release-4.11] Fix Egress FW ACL rules in dualstack mode [#1507](https://github.com/openshift/ovn-kubernetes/pull/1507) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1075c31c41cc4df59e83bae98fa23013e2512e0a...8e52d6337948510946e788e30048cb94a6f0e1cc) ### [tests](https://github.com/openshift/origin/tree/ac2791c48010de6eade67e38bf5f1e6d3aaf874d) * [OCPBUGS-6851](https://issues.redhat.com/browse/OCPBUGS-6851): [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade [#27685](https://github.com/openshift/origin/pull/27685) * [Full changelog](https://github.com/openshift/origin/compare/48b167669bb913d817f8a3270b0b30619ba42800...ac2791c48010de6eade67e38bf5f1e6d3aaf874d)