Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.26-x86_64
Tests:
- Blocking jobs
- Informing jobs
Upgrades from:
Untested upgrades:
4.10.20,
4.10.21,
4.10.22,
4.10.23,
4.10.24,
4.10.25,
4.10.26,
4.10.27,
4.10.28,
4.10.30,
4.10.31,
4.10.32,
4.10.33,
4.10.34,
4.10.35,
4.10.36,
4.10.37,
4.10.38,
4.10.40,
4.10.41,
4.10.43,
4.10.44,
4.10.45,
4.10.46,
4.10.47,
4.11.11,
4.11.12,
4.11.13,
4.11.14,
4.11.16,
4.11.17,
4.11.18,
4.11.19,
4.11.20,
4.11.22,
4.11.4,
4.11.5,
4.11.6,
4.11.7,
4.11.8,
4.11.9Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.11.0
Created: 2023-02-01 09:29:43 +0000 UTC
Image Digest: sha256:1c3913a65b0a10b4a0650f54e545fe928360a94767acea64c0bd10faa52c945a
Release 4.11.26 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-01-31-120242
Components
Rebuilt images without code change
- Updating ose-agent-installer-node-agent images to be consistent with ART (#381) #381
- Full changelog
- Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #19
- Full changelog
- remove alvaroaleman and ironcladlou #28
- Updating ose-apiserver-network-proxy images to be consistent with ART #26
- Updating ose-apiserver-network-proxy images to be consistent with ART #23
- Switch Dockerfile build to a static golang build #24
- Full changelog
- Updating ose-machine-api-provider-aws images to be consistent with ART #57
- Bug 2108021: Fix panic when accessing nil machine annotations map #47
- Full changelog
- bug OCPBUGS-2003: .dockerignore: enable OSBS2 builds #38
- Updating ose-azure-cloud-node-manager images to be consistent with ART #28
- Full changelog
- Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #42
- Full changelog
- Updating baremetal-machine-controller images to be consistent with ART #165
- Full changelog
- Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #221
- Updating vertical-pod-autoscaler images to be consistent with ART #222
- OCPBUGS-2046: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #244
- Full changelog
- Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
- Full changelog
- OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
- OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
- Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #426
- Bug 2117746: Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #435
- Full changelog
- OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
- OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
- OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
- Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression #1638
- Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation #1551
- OCPBUGS-3911: SDN: /var/run mount cleanup #1631
- Bug OCPBUGS-1075: HyperShift: Differentiate resources deployed by different CNO instances #1555
- Bug OCPBUGS-1367: Hypershift: Allow configuring hostname and labels on the route #1559
- OCPBUGS-393: Setting disableNetworkDiagnostics: true does not persist when network-operator pod gets re-created #1530
- Bug OCPBUGS-500: Kuryr: Bump timeoutSeconds for livenessProbe #1535
- Bug 2096456: Add init container to ensure that Status.podIP is set before postStart hooks run #1512
- Full changelog
- pao: latency-tests: read test log directly from pod (#531) #531
- E2E: Automate Offline CPUs feature (#523) #523
- OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
- E2E fix: Make Nodeselector tests independent (#502) #502
- e2e: perfprof: remove broken test (#497) #497
- Add ktimer to PAO tuned profile (#510) #510
- set RPS for veth on host level only (#508) #508
- Filter out copied csvs when removing pao CSV (#496) #496
- Add intel_pstate=disable to default configuration with no hints (#480) (#487) #480
- e2e: perfprof: get cpus from node capacity (#489) #489
- OCPBUGS-1126: [release-4.11] irqbalance: add unit to clear the cpu ban list (#466) #466
- Add offlined to v1 api Generate new api and docs Add conversion test with offlined (#425) #425
- OCPBUGS-1131: [release-4.11] e2e: perfprof: unbreak the e2e-gcp PAO lane (#467) #467
- Add verification on kernel param rcutree.kthread (#472) #472
- hack: performance: skip tests under 5_latency_testing (#465) #465
- e2e: performance: Update PP isolated cpus (#458) #458
- Switch the upstream to quay centos (#455) #455
- e2e: performance: update path of latency binary (#447) #447
- OCPBUGS-263: tuned: disable irqbalance (#435) #435
- Bug 2115805: E2E test case Telco friendly workload hints (#423) #423
- OCPBUGS-63: e2e: performance profile: Latency tests stabilization (#402) #402
- Bug 2102450: set rcutree.kthread_prio to ksoftirqd prio (#414) #414
- makefile: enable running pao latency testing suite (#401) #401
- openshift-tuned: remember recommended profile (#424) #424
- e2e: check for tsc=reliable instead of tsc=nowatchdog (#411) #411
- Full changelog
- OCPBUGS-5876: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #178
- OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
- trim build path #14816
- client/pkg/fileutil: add missing logger to {Create,Touch}DirAll #14799
- clientv3: do not refresh token when users use CommonName based authentication #14790
- etcdserver: call the OnPreCommitUnsafe in unsafeCommit #14733
- add warning message when delete to release-3.5 #13748
- clientv3: fix the implementation of double barrier #14658
- server: add more context to panic message #14676
- fix: close maintenance conn #14662
- test: added e2e test case for issue 14571: etcd doesn’t load auth info when recovering from a snapshot #14656
- server: refresh auth info when etcd recovers from a snapshot #14648
- Backport #14591 to 3.5. #14593
- Release-3.5: server/etcdmain: add configurable cipher list to gRPC proxy listener #14500
- client/v3: Add backoff before retry when watch stream returns unavailable #14582
- Makefile: additional logic fix / Update Ubuntu base #13861
- etcdserver: added more debug log for the purgeFile goroutine #14578
- Automated cherry pick of #13224 #14572 #14573
- *: avoid closing a watch with ID 0 incorrectly #14563
- Backport PR 14322 to release-3.5 #14547
- Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt #14489
- OCPBUGS-947: Rebase openshift/etcd 4.11 onto 3.5.5 #155
- fix the flaky test TestV3AuthRestartMember #14454
- server: don’t panic in readonly serializable txn #14178
- etcdctl: allow move-leader to connect to multiple endpoints #14434
- testing: fix TestOpenWithMaxIndex cleanup #14440
- server/etcdmain: add build support for Apple M1 #14436
- server,test: refresh cache on each NewAuthStore #14409
- Fix corruption checks v3.5 #14282
- Move consistent_index forward when executing alarmList operation #14429
- fix the potential data loss for clusters with only one member #14424
- Backport of pull/14354 to release-3.5 #14397
- Refactor the keepAliveListener and keepAliveConn #14366
- clientv3: close streams after use in lessor keepAliveOnce method #14361
- etcdserver: bump OpenTelemetry to 1.0.1 and gRPC to 1.41.0 #14312
- Change default sampling rate from 100% to 0% #14318
- server/auth: protect rangePermCache with a RW lock #14227
- clientv3: Fix parsing of ETCD_CLIENT_DEBUG #14222
- Support configuring
MaxConcurrentStreams for http2 #14219
- Automated cherry pick of #14182 #14187
- client/v3: do not overwrite authTokenBundle on dial #14132
- Restrict the max size of each WAL entry to the remaining size of the WAL file #14127
- Backport two lease related bug fixes to 3.5 #14087
- scripts: Avoid additional repo clone #14050
- Test release scripts #14043
- [backport 3.5]: server/auth: enable tokenProvider if recoved store enables auth #13205
- Update golang.org/x/crypto to latest #13996
- Update consitent_index when applying fails #13946
- Revert #13714 #13950
- Full changelog
- Updating ose-gcp-cloud-controller-manager images to be consistent with ART #14
- Full changelog
- Bug 2117679: UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1343
- OCPBUGS-1991: UPSTREAM: 110939: don’t quota events.k8s.io events by default #1379
- OCPBUGS-3174: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1408
- Bug 2099800: bump to k8s 1.24.6 #1381
- Automated cherry pick of #112299: Reduce default gzip compression level from 4 to 1 in #112399
- Automated cherry pick of #112427: Add zone field to vsphere test cloudconfig #112479
- Automated cherry pick of #112526: Limit redirect proxy handling to redirected responses #112528
- Automated cherry pick of #112508: kubeadm: allow RSA and ECDSA format keys in preflight check #112535
- Automated cherry pick of #111205: Fix problem in updating VolumeAttached in node status #112304
- Automated cherry pick of #112193: Add an option for aggregator #112331
- Automated cherry pick of #112017: exec auth: support TLS config caching #112337
- Update images, dependencies and version to Go 1.18.6 #112322
- Automated cherry pick of #110951: fix nestedPendingOperations mount and umount parallel bug #112101
- Bump cel-go to v0.10.2 and add unit tests #111970
- Automated cherry pick of #111009: Windows: ensure runAsNonRoot does case-insensitive comparison #112211
- Automated cherry pick of #110179: Prune defaults for CRD serving #110582
- Automated cherry pick of #111752: Revert “client-go: remove no longer used #112056
- Automated cherry pick of #111999: fix error type #112139
- Automated cherry pick of #112183: Tolerate sub-microsecond eventTime changes on update #112187
- Automated cherry pick of #112150: Improve kubectl display of invalid errors #112155
- Automated cherry pick of #111773: fix a memory leak problem when calling DryRunPreemption #111803
- Automated cherry pick of #110075: Add retry logic for Unix Domain sockets on Windows #110935
- Automated cherry pick of #110670: Keep track of each pod that uses a volume during #111636
- Automated cherry pick of #111472: allow namespace admins to use leases to encourage migration #111515
- Automated cherry pick of #111141: Fix kubelet panic when accessing metrics/resource endpoint #111163
- Automated cherry pick of #110140: Fixing issue in generatePodSandboxWindowsConfig for #110966
- fix
kubeadm upgrade plan issue with FQDN nodes names #111430
- Automated cherry pick of #111235: fix a possible panic because of taking the address of nil #111274
- Automated cherry pick of #111477: Share a single etcd3 client logger across all clients #111648
- Automated cherry pick of #111721: Fix deleting UIDs tracking expectations #111722
- Automated cherry pick of #110813: Ensure the dir of –audit-log-path exists #111225
- Automated cherry pick of #111646: Fix JobTrackingWithFinalizers when a pod succeeds after the #111664
- Fix: filter out unsatisfied nodes when calling AddPod in PodTopologyS… #111511
- Update Go to 1.18.5 #111639
- Update Go to 1.18.4 #111464
- Execute the Run function of kubelet, no log output after failure #110917
- kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join #111021
- Automated cherry pick of #111026: Do not skip job requeue in conflict error #111037
- Automated cherry pick of #110465: e2e: ensure single image for populator containers #110541
- Automated cherry pick of #110639: fix a bug on endpointslices tests comparing the wrong #110920
- Cherry pick of #110294 GIT-110239: fix activeDeadlineSeconds enforcement bug #110544
- Automated cherry pick of #110523: fix image pulling failure when IMDS is unavailalbe in kubelet #110554
- Automated cherry pick of #110791: kubeadm: fix the bug that configurable KubernetesVersion not #110908
- Automated cherry pick of #109580: e2e: add storage capability for offline volume expansion #110615
- Automated cherry pick of #110365: Fix unnecessary recreation of placeholder EndpointSlice #110732
- Automated cherry pick of #110469: add missing error handling steps #110609
- Automated cherry pick of #110408: apiserver: printers should use int64 #110572
- Automated cherry pick of #110652: fix: –chunk-size with selector returns missing result #110735
- kubeadm: fix error adding extra prefix unix:// #110634
- Automated cherry pick of #108284: fix: exclude non-ready nodes and deleted nodes from azure #109931
- Automated cherry pick of #110256: kubelet: Mark ready condition as false explicitly for terminal pods #110479
- Automated cherry pick of #109657: GCE Windows: Copy the CNI binaries from the right folder #109787
- Automated cherry pick of #109624: Ignore EndpointSlices that are already marked for deletion #110484
- Automated cherry pick of #110145: fix audit union loop variables in closures #110276
- Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules #109974
- Automated cherry pick of #109987: Fix resizing of ephemeral volumes #110117
- Automated cherry pick of #110191: kubelet: Pod probes should be handled by pod worker #110416
- Update Go to 1.18.3 #110422
- Automated cherry pick of #110255: Endpoints and EndpointSlices should not publish IPs for terminal pods #110258
- Automated cherry pick of #109103: cpu manager policy set to none, no one remove container id #110307
- kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24 #110103
- Automated cherry pick of #109722: Do not wrap lines if we can’t read term size #109725
- Automated cherry pick of #110009: Fix requests scope classification #110087
- Automated cherry pick of #109947: Wait for cache to sync in job’s TestWatchOrphanPods #109979
- Automated cherry pick of #109928: Fix ServiceIPStaticSubrange assigns duplicate IP addresses #109940
- Automated cherry pick of #109969: authn: fix cache mutation by AuthenticatedGroupAdder #110004
- Automated cherry pick of #109858: GCE: skip updating and deleting external loadbalancers if #110003
- Automated cherry pick of #109880: Remove warning log for merging meta and scale type #110042
- Update Go to 1.18.2 #110044
- Automated cherry pick of #109836: Fix OpenAPI loading error caused by empty APIService #109866
- Automated cherry pick of #109840: kubeadm: only taint CP nodes when the legacy “master” taint #109841
- Automated cherry pick of #109486: Integration test for backoff limit and finalizers #109786
- OCPBUGS-1540: UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1375
- [release 4.11] Bug 2117424: UPSTREAM: <carry>: Remove reserved CPUs from default set #1351
- Bug 2104344: Fix resizing of ephemeral volumes #1314
- Bug 2109270: UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() #1332
- Full changelog
- cherry-pick #2006 #2028
- Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
- Add missing rbac for authentication reader #1822
- update OLM catalogs to 4.11 #1786
- Bug OCPBUGS-1367: CNO: Handle long OVN SBDB route hostnames #1747
- Add rbac so route-to-ingress controller can do its leader election #1728
- fix(oauth): Do not proxy IBM Cloud IAM endpoints #1723
- Ingress endpoint #1667
- Self image lookup: Retry on empty string #1695
- Forward from main #1655
- Introduce node selector support for HostedClusters #1592
- Fix nil pointer dereference for hostedControlPlane.Spec.Etcd.Managed #1638
- doc(aws): markdown formatting updates #1637
- additional trust bundle into vm #1633
- doc(how-to/aws/create-aws-multi-az): fix getting started path #1636
- fix(ho): honor deprecated global config fields #1631
- Add Handling Ingress to Agent docs #1635
- E2E etcd tests: Always run on none platform #1629
- Wait for LB even when hostname is specified #1632
- Add tuning option of AccessModes for Kubevirt NodePool root volume #1583
- Enforce aws cluster cloud provider tag in NodePool controller #1625
- Add ovn-k specific collection commands #1604
- set condition messsage when waiting for kas readiness #1627
- CPO: Unittest and fix eventhandling of HCP controller #1605
- Fix additionalTrustBundle with local ignition provider #1626
- ensure optional mount always added to ibmcloud kms pod for appropriate container build #1621
- fix(api): make HCP networking optional for backward compatibility #1624
- Add flags for destroy cluster powervs command #1613
- PowerVS: upgrade capi image #1618
- Remove .status from serialized configuration on HCP #1617
- stop clearing configMapRef and secretRef since it breaks reconciliation of existing production workload using these fields #1610
- ensure 4.9 openshift clusters can be managed by hypershift #1608
- ensure release image annotation set on control-plane-operator #1607
- Use non-strict mode when parsing global config #1616
- Rename PowerVS CCM public endpoint env variable #1611
- Create kubeconfig: Respect namespace #1562
- Add dual-stack support to HostedCluster #1533
- fix(ho): detect capabilities on API resource availability #1600
- Update Agent docs on setting hostname and disk #1606
- Add HC condition message in non-error states #1602
- Add min supported version check for isValidReleaseVersion #1591
- Socks 5 proxy: Only use mgmt cluster for cloud apis for ingress operator #1601
- Docs: develop-in-cluster.md minor fix #1603
- Use non-default path for user CA certs #1593
- Fix comments/docs in AWSRoleRefs #1588
- Add e2e changes for PowerVS #1590
- PowerVS: Add DNS record check in base-domain #1587
- Sort deployments for Degraded condition check #1595
- Add controller that installs UWM and configures it for telemetry #1584
- Add latest version check and unit test isValidReleaseVersion #1582
- Add control plane operator component template label to components missing it #1579
- PowerVS: Add DNS Record and VPC LB deletion #1521
- Add check for AWS ARNs #1581
- TestOLM: Don’t hardcode to AWS #1574
- E2E: Don’t retry destroy if it failed due to NoCredentialProviders #1572
- Add label to supported versions configmap #1580
- Add priority classes for autoscaler and mapprover #1578
- add Degraded condition to HostedCluster #1569
- Add configmap containing supported versions to hypershift namespace #1575
- Destroy: Use patch for modifying finalizer to not get conflicts #1573
- TestAutoscaling: Fix to work on Azure #1551
- PowerVS Infra bug fix on DHCP error return and removed a debug log #1548
- Drop unsued domain in ReconcilePrivateRouterDeployment signature #1556
- Add link to CloudProviderConfig code #1555
- install: add operator-only option for OCP metrics #1476
- E2E: Stop retrying destroy if inputs are missing #1564
- add Degraded condition to HCP #1560
- E2E: Use zaptest logger for dumping and AWS/Azure destroy #1559
- Azure: Make disk type configurable and default to SSD instead of HDD #1565
- Align api/fixtures code platform wise #1558
- Add field reporting of immutable errors. #1508
- add label to all CPO managed deployments in the HCP #1554
- Remove unused return value #1557
- E2E: Use zaptest logger for cluster creation #1553
- Add Progressing condition to HostedCluster #1546
- Fix ManagedCAObserver racing with CPO #1547
- Fail gracefully if s3 bucket is already deleted. #1552
- Azure: Tolerate 404 when destroying infra #1545
- Rename OpenshiftSDN to OpenShiftSDN #1549
- Add rules for telemetry metrics #1544
- Added changes for serviceID API Key to access resources #1529
- Full changelog
- OCPBUGS-6025: operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) #719
- OCPBUGS-5349: do not periodically update Available clusteroperator co… (#718) #718
- OCPBUGS-2346: refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) (#689) #685
- OCPBUGS-1355: update the DVO metrics gatherer (#664) (#677) #664
- manifests/02-namespace: Explicitly clear run-level label (#676) #676
- backport helm upgrade and uninstall metric (#662) #662
- Gather status of the cephclusters.ceph.rook.io resources (#654) (#655) #654
- Full changelog
- Bug 2111636: libguestfs: error: download: /boot/loader/entries/ostree-1-rhcos.conf: No such file or directory #80
- Updating ironic-rhcos-downloader images to be consistent with ART #73
- Full changelog
- Bug OCPBUGS-1713: Cleanup KuryrPort when Pod is missing #694
- Bug OCPBUGS-577: Fix unbound router_id variable while creating event #687
- Updating kuryr-cni images to be consistent with ART #667
- Full changelog
- fix: remove release architecture validation at the config level (#504) #504
- Full changelog
Source code for this page located on github