# 4.11.42 Created: 2023-05-25 07:20:39 +0000 UTC Image Digest: `sha256:518177a34452837920f1e77944f6afa08864537260c9f742b8c88b6157e4f901` Promoted from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-05-24-190452 ## Changes from 4.11.39 ### Components * Kubernetes 1.24.12 * Red Hat Enterprise Linux CoreOS upgraded from 411.86.202304190130-0 to 411.86.202305231231-0 ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [bc51be82](https://github.com/openshift/assisted-service/commit/bc51be826e96cae9e00d0fff0970fd273c078d9a) `sha256:985981af01d868016ce9e1111c95b9f87b17fd82a2d0a983d1211b22799424f0` * [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [67c3831e](https://github.com/openshift/azure-file-csi-driver/commit/67c3831e8262bb2faaf22228f194ccc926f43390) `sha256:1c5eb90c9cbf6fbc4e2c1c692f8ac4fe3d3eb90eedf895874db54970827a4cf1` * [docker-builder](https://github.com/openshift/builder) git [5597323a](https://github.com/openshift/builder/commit/5597323a485c23b4ca7e1baf4b8bb39bb03272ab) `sha256:415b376e7bc5c29c127c98c0d2a1d0fd2d6590e61d12bcf58413a72433acafcc` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [28589b0a](https://github.com/openshift/driver-toolkit/commit/28589b0a149df1fa10b2759fff13b1885d0dfa14) `sha256:521365b0e122d6fbfd6167bb4f3cfdca4c40399c1c82f27196670ebda4282aae` * [haproxy-router](https://github.com/openshift/router) git [601ba575](https://github.com/openshift/router/commit/601ba575b7fadc1e05e7b4e2f35a660859db9788) `sha256:0dfd7b5f4a111c6f4155735db42834d6649119cac3ee896c6344975720845ebb` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [876128b5](https://github.com/openshift/ironic-rhcos-downloader/commit/876128b5ac733a244a3838b151b0a6df663937aa) `sha256:3ddd8e4aee16f74b4d3ac17f47ac1db94525a00f127d542e792f086f13a0eaae` * [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [e0e39797](https://github.com/openshift/image-customization-controller/commit/e0e39797b92fe2faab4d674526d7673ac6b697a9) `sha256:026ad30a90097d32a3311728e8b5c10b5d385848658a044ecc42204a82d77f66` * machine-os-content `sha256:240733f7586953b8b8f3b3b8bfa535f1db94edec870697a39dfd9a59d206c0e2` * [network-tools](https://github.com/openshift/network-tools) git [4e87286c](https://github.com/openshift/network-tools/commit/4e87286cff4d645777cf2632a0671eed0d82270c) `sha256:e0fa33f4202acaf40992d29ee689161af743c71129fdc7f4c52effc4e3323608` * [tools](https://github.com/openshift/oc) git [dea6f474](https://github.com/openshift/oc/commit/dea6f474b21d4a33a76ca138fce4eba81ede2bee) `sha256:6ff7efacc3ba2817d560c8766fc58829de4be301f3fcfdb25e1b60d6a5b6130e` ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/22ca40e206b6753c0e73d3c5aa54b17ea5a06056) * [OCPBUGS-13544](https://issues.redhat.com/browse/OCPBUGS-13544): Verify kubelet version in upgrade check [#250](https://github.com/openshift/baremetal-runtimecfg/pull/250) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8628c60b5c7213ee468201b78aa88826ea7da5a3...22ca40e206b6753c0e73d3c5aa54b17ea5a06056) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7c4c93514b97515b97a78dec9c5a80c507fc2569) * [OCPBUGS-13792](https://issues.redhat.com/browse/OCPBUGS-13792): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#540](https://github.com/openshift/cloud-credential-operator/pull/540) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/bd6c8117e6c638c011f9babdb19601bafaa7a59b...7c4c93514b97515b97a78dec9c5a80c507fc2569) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ce29f2247e58a81bbdb40563ebe29bf94c2c5db8) * [OCPBUGS-3560](https://issues.redhat.com/browse/OCPBUGS-3560): Allow PROXY protocol for "Private" strategy [#914](https://github.com/openshift/cluster-ingress-operator/pull/914) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/bf10ee702a5294ba49ee470d6059d27875201439...ce29f2247e58a81bbdb40563ebe29bf94c2c5db8) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/82a4f72ca38f2130bb3fff9756a5e2970ed0c0af) * [OCPBUGS-11763](https://issues.redhat.com/browse/OCPBUGS-11763): HyperShift: Add POD_NAME env to ovnkube-node [#1780](https://github.com/openshift/cluster-network-operator/pull/1780) * [OCPBUGS-12277](https://issues.redhat.com/browse/OCPBUGS-12277): remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1789](https://github.com/openshift/cluster-network-operator/pull/1789) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bb4594c0e32f931c2301f1649e49a8b8830dcb74...82a4f72ca38f2130bb3fff9756a5e2970ed0c0af) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d9dbe6b56532a11a0ede2747acf71c1a5c828c8b) * Remove subPaths, they are broken (#635) [#635](https://github.com/openshift/cluster-node-tuning-operator/pull/635) * Remove the preStop hook for openshift-tuned (#636) [#636](https://github.com/openshift/cluster-node-tuning-operator/pull/636) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d27a36e0ca534467d5e0c18351cfbfb42da58617...d9dbe6b56532a11a0ede2747acf71c1a5c828c8b) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/1cb2fa29adba95b326c31a36ade90592f5cb0870) * [OCPBUGS-13043](https://issues.redhat.com/browse/OCPBUGS-13043): pkg/cvo: reset payload load status [#935](https://github.com/openshift/cluster-version-operator/pull/935) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/c659e6ccaca7fe11a324aa92f9a0eb52b3196547...1cb2fa29adba95b326c31a36ade90592f5cb0870) ### [console](https://github.com/openshift/console/tree/680d42bb6dcca530e8bfb104141be4ac0a65df91) * [OCPBUGS-12284](https://issues.redhat.com/browse/OCPBUGS-12284): Fix to use and set correct secretReference for build-config triggers [#12762](https://github.com/openshift/console/pull/12762) * [OCPBUGS-13864](https://issues.redhat.com/browse/OCPBUGS-13864): delete associated pipeline, triggertemplate and eventlistener when deleting app [#12837](https://github.com/openshift/console/pull/12837) * [OCPBUGS-13730](https://issues.redhat.com/browse/OCPBUGS-13730): Show type of sample on the samples view [#12826](https://github.com/openshift/console/pull/12826) * [OCPBUGS-13746](https://issues.redhat.com/browse/OCPBUGS-13746): PipelineRun templates must be fetched from OpenShift namespace [#12827](https://github.com/openshift/console/pull/12827) * [OCPBUGS-12279](https://issues.redhat.com/browse/OCPBUGS-12279): Do not show builder ImageStreams without `sampleRepo` as samples [#12759](https://github.com/openshift/console/pull/12759) * [OCPBUGS-12959](https://issues.redhat.com/browse/OCPBUGS-12959): update the default pipelineRun template name [#12790](https://github.com/openshift/console/pull/12790) * [OCPBUGS-12231](https://issues.redhat.com/browse/OCPBUGS-12231): Get the Event type value from the latest PLR of the Repository [#12749](https://github.com/openshift/console/pull/12749) * [OCPBUGS-10708](https://issues.redhat.com/browse/OCPBUGS-10708): delete application should delete all part-of resources [#12772](https://github.com/openshift/console/pull/12772) * [OCPBUGS-13012](https://issues.redhat.com/browse/OCPBUGS-13012): Show Tag label and tag name if tag is detected in repository PipelineRun list and details page [#12793](https://github.com/openshift/console/pull/12793) * [OCPBUGS-10613](https://issues.redhat.com/browse/OCPBUGS-10613): add subject kind dropdown in the project access form [#12663](https://github.com/openshift/console/pull/12663) * [OCPBUGS-11580](https://issues.redhat.com/browse/OCPBUGS-11580): In DeploymentConfig both the Form view and Yaml view are not in sync [#12714](https://github.com/openshift/console/pull/12714) * [OCPBUGS-6984](https://issues.redhat.com/browse/OCPBUGS-6984): Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered [#12523](https://github.com/openshift/console/pull/12523) * [OCPBUGS-7949](https://issues.redhat.com/browse/OCPBUGS-7949): Webhook Secret (1 of 2) is not removed when Knative Service is deleted [#12602](https://github.com/openshift/console/pull/12602) * [OCPBUGS-6954](https://issues.redhat.com/browse/OCPBUGS-6954): Fix to show correct help texts for each git repo status error code [#12518](https://github.com/openshift/console/pull/12518) * [OCPBUGS-7764](https://issues.redhat.com/browse/OCPBUGS-7764): Fix crash when pinnedResources is null [#12581](https://github.com/openshift/console/pull/12581) * [Full changelog](https://github.com/openshift/console/compare/a11f0efa3e97bdd30925b0bc2645e2366f04931c...680d42bb6dcca530e8bfb104141be4ac0a65df91) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/662d6d5985b3fcfc10270c2ede87c8cd1eb38573) * [OCPBUGS-11000](https://issues.redhat.com/browse/OCPBUGS-11000): UPSTREAM: 988: Simplify node backoff logic [#34](https://github.com/openshift/gcp-pd-csi-driver/pull/34) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/f9d7fdce42b5ae816d4e8af7e47422b4588828a8...662d6d5985b3fcfc10270c2ede87c8cd1eb38573) ### [hypershift](https://github.com/openshift/hypershift/tree/da0a576c1cdd3f3d4bbd7b3540bf6ac843fa4483) * [OCPBUGS-11608](https://issues.redhat.com/browse/OCPBUGS-11608): properly reconcile with user specified changes for in proxy configuration [#2396](https://github.com/openshift/hypershift/pull/2396) * [Full changelog](https://github.com/openshift/hypershift/compare/2586a416719afbefcf365286ef94bd37516f987e...da0a576c1cdd3f3d4bbd7b3540bf6ac843fa4483) ### [insights-operator](https://github.com/openshift/insights-operator/tree/abc6aa2a6e567484ad725fbada41b8ebf34a769c) * [OCPBUGS-7872](https://issues.redhat.com/browse/OCPBUGS-7872): Collect info about monitoring pods pv (#773) [#773](https://github.com/openshift/insights-operator/pull/773) * [Full changelog](https://github.com/openshift/insights-operator/compare/94de72ca22dc5711dc088cbba2a41af609224d57...abc6aa2a6e567484ad725fbada41b8ebf34a769c) ### [ironic](https://github.com/openshift/ironic-image/tree/3285ef207b0b5c0c1b87d23691718d4e46ee4d81) * [OCPBUGS-13645](https://issues.redhat.com/browse/OCPBUGS-13645): Bump python-sushy [#369](https://github.com/openshift/ironic-image/pull/369) * [Full changelog](https://github.com/openshift/ironic-image/compare/1bd6bc938c3931be2f9e9000a82c24c1b5fde99a...3285ef207b0b5c0c1b87d23691718d4e46ee4d81) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/3018862ad731bee38ea64c77530a5ab287928cf6) * [OCPBUGS-13902](https://issues.redhat.com/browse/OCPBUGS-13902): CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] [#543](https://github.com/openshift/sdn/pull/543) * [Full changelog](https://github.com/openshift/sdn/compare/cb0a452ae0a7eca8822ad594bef1de88c8acd699...3018862ad731bee38ea64c77530a5ab287928cf6) ### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/2dfd79728468cd99ec45885308a1aa8d4a51d353) * Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address [#727](https://github.com/openshift/kuryr-kubernetes/pull/727) * [OCPBUGS-12840](https://issues.redhat.com/browse/OCPBUGS-12840): Fix VIF revert on KuryrPort status update error [#725](https://github.com/openshift/kuryr-kubernetes/pull/725) * [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/93daed6bc4e8e4e59f1e609a493daad1a2d0d1ec...2dfd79728468cd99ec45885308a1aa8d4a51d353) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8f952d7fd1397bef3b488eb53e630291ef180563) * [OCPBUGS-11556](https://issues.redhat.com/browse/OCPBUGS-11556): Prevent possible split-brain scenario with keepalived unicast [#3667](https://github.com/openshift/machine-config-operator/pull/3667) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/8fa0b7e8903226b3cfb76e6c6f49409cfc0dd0e7...8f952d7fd1397bef3b488eb53e630291ef180563) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/47c8f7b28edefd7105deb231b9c1ef021ee2879d) * [OCPBUGS-13241](https://issues.redhat.com/browse/OCPBUGS-13241): Added trailing 0 to ipv6 ranges that end in ":" [Backport 4.11] [#132](https://github.com/openshift/whereabouts-cni/pull/132) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/6cfd8b2361ad451e98ded977fdce5a125a870a25...47c8f7b28edefd7105deb231b9c1ef021ee2879d) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/3a667ecc956dcaacf47eb748ec2f2882633fc150) * [OCPBUGS-12263](https://issues.redhat.com/browse/OCPBUGS-12263): cherry-pick pull request refactor FBC caching (#1051) f… [#482](https://github.com/openshift/operator-framework-olm/pull/482) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/7fdc3c538a9ed4bd95fd4a878435dc3351fbc049...3a667ecc956dcaacf47eb748ec2f2882633fc150) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7126e3c9b850f201f82fa73cb55c802e574c7ab9) * [OCPBUGS-12791](https://issues.redhat.com/browse/OCPBUGS-12791): : Delete equivalent ACLs when searching by predicate. [#1666](https://github.com/openshift/ovn-kubernetes/pull/1666) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7d28d164945daf53d7a92fd2e99739c11b5d63d2...7126e3c9b850f201f82fa73cb55c802e574c7ab9) ### [tests](https://github.com/openshift/origin/tree/d837641cd84463d7ed91400766b4c02f71e74c35) * [OCPBUGS-12962](https://issues.redhat.com/browse/OCPBUGS-12962): Add (optional) dual-stack tests to the CNI certification test suite [#27904](https://github.com/openshift/origin/pull/27904) * [Full changelog](https://github.com/openshift/origin/compare/968ffcdc784527fb95b35a894dbf23054363d812...d837641cd84463d7ed91400766b4c02f71e74c35)