# 4.12.7

Created: 2023-03-08 13:56:42 +0000 UTC

Image Digest: `sha256:bd712a7aa5c1763870e721f92e19104c3c1b930d1a7d550a122c0ebbe2513aee`

Promoted from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-03-07-093406


## Changes from 4.12.6

### Components

* Kubernetes 1.25.4
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202302282003-0 to 412.86.202303011010-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [b03e2db9](https://github.com/openshift/assisted-service/commit/b03e2db9f58b8bc2fdcb339659b47973688436e3) `sha256:37781ad0f99b498a4865456e2a82a472806d602a0b7fbd87a4cf32362b567484`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [0f14c3d1](https://github.com/openshift/assisted-installer/commit/0f14c3d16cb089b55ca3658038e83bc0bcd01f47) `sha256:09a04ef5496261098e4531b424feb57376d22df7119459c979a2faf4b34dc498`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [92b9be25](https://github.com/openshift/kuryr-kubernetes/commit/92b9be25999aee9c3b225606510c56fd14378bdf) `sha256:254401d6f0c9f79efeded980503b1989bdbb4042ad21989953c29937e65c52bf`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [92b9be25](https://github.com/openshift/kuryr-kubernetes/commit/92b9be25999aee9c3b225606510c56fd14378bdf) `sha256:1b4f75282e0626407dcf146cecb2a6e1ed2a3b6e418c2451cdb9ea4b4f93384d`
* machine-os-content `sha256:44cbf5644fadcafdaba0da34deb0d4fa38d74afb740ec6fcdc0901425695bfae`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [566bf595](https://github.com/openshift/machine-os-images/commit/566bf59501f178bd80e410fda66cc424de6a4891) `sha256:b50365b3cfd82c3dd08d725b6db7be506834be93f967e86e680862e721a7fe69`
* [must-gather](https://github.com/openshift/must-gather) git [5fd21761](https://github.com/openshift/must-gather/commit/5fd2176182e7aec687da553fe185b9f6f739bbb2) `sha256:fa02cb89634c60c6fd159eef9f7fd5323cd0fec3dc74adb3e3f0ba2f08174e13`
* [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:0d18e67bc307f41858880cc329bd17813f7a4daa7d3446269923895256ce8a56`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [5f8cd83c](https://github.com/openshift/ovn-kubernetes/commit/5f8cd83cb3efb1d167f0da085f880377958ea502) `sha256:857b6fbffb8a0192a6f866918b0c8d9ee508a921b747ccd523744b11f684d89c`
* [prometheus](https://github.com/openshift/prometheus) git [c749fdb4](https://github.com/openshift/prometheus/commit/c749fdb468ee6d0ac586156832ad9b094c76d867) `sha256:333d71d1b16a6a63849dee549c7797fa2fb255b866ab62dcd001c6e52db4836b`
* rhel-coreos-8 `sha256:71658b50c68fdc974de2271f0ab166c663bc475e4626b4871f292e6a21ca1c41`
* rhel-coreos-8-extensions `sha256:861855fb6e33f259b0dafa61080d7e46e2bb67b0f4aed0c67ab6ae9521c2d1f8`


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7c2530226516a12c37f10bc14e070f66c0f27930)

* [OCPBUGS-7594](https://issues.redhat.com/browse/OCPBUGS-7594): fully qualified username must be provided [#6864](https://github.com/openshift/installer/pull/6864)
* [OCPBUGS-7746](https://issues.redhat.com/browse/OCPBUGS-7746): Convert platform type for AgentClusterInstall [#6878](https://github.com/openshift/installer/pull/6878)
* [OCPBUGS-8015](https://issues.redhat.com/browse/OCPBUGS-8015): make VIP 168.63.129.16 noProxy in all clouds except Public [#6909](https://github.com/openshift/installer/pull/6909)
* [Full changelog](https://github.com/openshift/installer/compare/fd9e75e61946e79de4e5d9959c7d681cc0271043...7c2530226516a12c37f10bc14e070f66c0f27930)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/846602e50eb29ecdc7441ebed2fc846048959eaa)

* [OCPBUGS-7960](https://issues.redhat.com/browse/OCPBUGS-7960): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1354](https://github.com/openshift/oc/pull/1354)
* [Full changelog](https://github.com/openshift/oc/compare/b05f7d40f9a2dac30771be620e9e9148d26ffd07...846602e50eb29ecdc7441ebed2fc846048959eaa)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/efccbb31f95542615c9b7bea9cde36b416b17824)

* [OCPBUGS-7884](https://issues.redhat.com/browse/OCPBUGS-7884): Restart pods if related configuration was changed [#228](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/83768c8057de19a6da8f58edf6430884e3081050...efccbb31f95542615c9b7bea9cde36b416b17824)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/2076f3d0e4fea6fca54028ec7831407173ea81f5)

* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): enable pod security admission for techpreview [#1440](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1440)
* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): make the bootstrap kube-apiserver honor cluster-wide featuregates [#1439](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1439)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a9a4df5f0cedeba2868a6ceb63ab58f67a0cdbf2...2076f3d0e4fea6fca54028ec7831407173ea81f5)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b108134de5b1c7ef179fc523ffd62bc5898106a3)

* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): honor feature gates during bootstrapping [#695](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/695)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/73f7ea7014f57cc37d6f2c720d3bcc00c7d4718b...b108134de5b1c7ef179fc523ffd62bc5898106a3)


### [hypershift](https://github.com/openshift/hypershift/tree/48221dac3359fcdeb3efab327a331187d003db02)

* fix(cpo): Delete multus validatingwebhookconfiguration on CNO init [#2251](https://github.com/openshift/hypershift/pull/2251)
* feat(HCCO): Block DNS operator delete until Cluster Version updated [#2242](https://github.com/openshift/hypershift/pull/2242)
* kms addition for pod identity workflow [#2247](https://github.com/openshift/hypershift/pull/2247)
* Add e2e test for hosted cluster behind a proxy [#2199](https://github.com/openshift/hypershift/pull/2199)
* Add e2e test for cluster creation with AWS KMS [#2201](https://github.com/openshift/hypershift/pull/2201)
* [HOSTEDCP-826](https://issues.redhat.com/browse/HOSTEDCP-826): Customize DNS base domain prefix [#2235](https://github.com/openshift/hypershift/pull/2235)
* [Full changelog](https://github.com/openshift/hypershift/compare/60b84e336138bde4cdb66470a607c7b391bb93f9...48221dac3359fcdeb3efab327a331187d003db02)


### [insights-operator](https://github.com/openshift/insights-operator/tree/c57da131e725a9b08ea4e8e90e7c3b1696524b2a)

* [OCPBUGS-6732](https://issues.redhat.com/browse/OCPBUGS-6732): Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) [#727](https://github.com/openshift/insights-operator/pull/727)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2b7243e668246fd70fd4878ad75185cbcd6669c1...c57da131e725a9b08ea4e8e90e7c3b1696524b2a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/64b64f9bf0f8f0ab9c5ce98cb49ddacdf0d39ffc)

* [OCPBUGS-7474](https://issues.redhat.com/browse/OCPBUGS-7474): Initialize egress node monitoring struct with previous reachability status [#505](https://github.com/openshift/sdn/pull/505)
* [Full changelog](https://github.com/openshift/sdn/compare/e32a8fa9f58a7f38045af135b207fe6764616e24...64b64f9bf0f8f0ab9c5ce98cb49ddacdf0d39ffc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/52d4e1b4e709ef1a10b665de4c6d4b5feaf9a021)

* [OCPBUGS-8286](https://issues.redhat.com/browse/OCPBUGS-8286): Short circuit misfiring [#1109](https://github.com/openshift/machine-api-operator/pull/1109)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a99a63b994407212a5dcc83cc5bc7c02222350b3...52d4e1b4e709ef1a10b665de4c6d4b5feaf9a021)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/cfafdccf09150ab55b8b853df16e4395ff3bda4b)

* Updating ose-oauth-apiserver images to be consistent with ART [#80](https://github.com/openshift/oauth-apiserver/pull/80)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/94026d8cfe0ae214aec62a5f14ae5934676b4355...cfafdccf09150ab55b8b853df16e4395ff3bda4b)


### [tests](https://github.com/openshift/origin/tree/76791c0fc048c6d29282748b1bc792fb606f309f)

* [OCPBUGS-8024](https://issues.redhat.com/browse/OCPBUGS-8024): Backport fixes to resume gathering CI disruption data for SLB and image registry [#27759](https://github.com/openshift/origin/pull/27759)
* [Full changelog](https://github.com/openshift/origin/compare/4262632da6af0f720159bda4c37276956e8829e5...76791c0fc048c6d29282748b1bc792fb606f309f)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/4861197f38425f4f92c7c28b7e65f1ec42f5dabf)

* [OCPBUGS-7901](https://issues.redhat.com/browse/OCPBUGS-7901): Bump sidecar timeouts for vsphere [#142](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/142)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/24a1cc54e5efaed8e90e310f320a1bc8b2d3e079...4861197f38425f4f92c7c28b7e65f1ec42f5dabf)