4.11.23

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.23-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Pending periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Succeeded periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.27, 4.10.28, 4.10.29, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.18, 4.11.19, 4.11.3, 4.11.5, 4.11.6, 4.11.7, 4.11.9

Upgrades to:

Changes from 4.11.20

Created: 2023-01-11 13:57:38 +0000 UTC

Image Digest: sha256:24a273f879d6eed8d6cce1426798a623ebbe095e01a881e58aa78c4e9eff0c8b

Release 4.11.23 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-01-11-025441

Components

Kubernetes 1.24.6
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202212072103-0 to 411.86.202301102150-0 (diff)

Rebuilt images without code change

agent-installer-api-server git 0f526475 sha256:fb552df3c7b29781db8ffd0f89ca3cb9ad0045279bf542d051ce37dc2b50fe95
driver-toolkit git 13ccef87 sha256:fc5681900c4fe09e9b2d36c225170c2c7c00b1cc1b1ade588c2be531ec0f9f58
kuryr-cni git 93daed6b sha256:16ef18f210fe155fe40da2527d9b39d246ca9d51c7397ca084dc99bec9ae7636
kuryr-controller git 93daed6b sha256:a370f6f8b409db4e873eac8d806554942d69eb683c7468f9de7e927e03b948ab
machine-image-customization-controller git 1c9e8a1e sha256:5659fc6eb8c6b0854a29b88798f8d064bba54fe1f7f22df17e359d8d2fb813ba
machine-os-content sha256:e3154887d070c8fef6eb2b05d97592f1671a8681884d31a6dea1e7cdf9ea5d9e
machine-os-images git b1580a29 sha256:12f2716805c3cdbcc9eff6c07ab351da1da2051fe0310166a4932fe111b38f66
network-tools git 4e87286c sha256:6f56116e66ff47108771ce99f029c398f584c5217744ec350f1cfd58b4461535

agent-installer-csr-approver, agent-installer-orchestrator

Remove jira tickets prefix requirements (#596) #596
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #57
Full changelog

azure-machine-controllers

OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
OCPBUGS-4720: GCP: Add me-west1 region #6690
OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
OCPBUGS-3932: Add assigned egress ips into capacity #78
OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
Full changelog

cluster-baremetal-operator

OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
Full changelog

cluster-etcd-operator

OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
Full changelog

cluster-kube-cluster-api-operator

Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
Full changelog

cluster-monitoring-operator

Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
OCPBUGS-4640: Increase startupProbe for prometheus #1845
Full changelog

cluster-network-operator

OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
Full changelog

cluster-node-tuning-operator

E2E: Automate Offline CPUs feature (#523) #523
OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
Full changelog

console

OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
OCPBUGS-4786: Fix for initial showing of topology contents #12311
OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
OCPBUGS-2443: Monitoring: Fix help popovers #12173
Full changelog

coredns

OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
Full changelog

etcd

OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
Full changelog

gcp-machine-controllers

OCPBUGS-4579: refactor restartPolicyToBool function #30
OCPBUGS-4532: Set sync period for Machine controller #27
Full changelog

ironic

Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
OCPBUGS-4908: Update packages versions with latest available #336
OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
OCPBUGS-3674: Don’t save OS_ prefixed variables #318
Full changelog

ironic-agent

OCPBUGS-5099: make coreos-installer output available in the logs #67
Full changelog

machine-config-operator

OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
Full changelog

must-gather

OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
Full changelog

ovn-kubernetes

OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
OCPBUGS-1720: Backport changes to ovnkube-trace #1436
OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
OCPBUGS-4475: Handle expired entry while handling dns update #1417
OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
Full changelog

thanos

Updating thanos images to be consistent with ART #99
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5472: Fix sc creation on resync #127
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github