4.11.29

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.29-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Pending periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Succeeded periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.35, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.19, 4.11.20, 4.11.21, 4.11.23, 4.11.24, 4.11.25, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.11.8, 4.11.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.11.7

Created: 2023-02-22 09:36:04 +0000 UTC

Image Digest: sha256:1105aa27f627a99a2b3a8b6257a12697b2033a44f1fa2af41491a8e66cd279ac

Release 4.11.29 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-02-21-221643

Components

Kubernetes upgraded from 1.24.0 to 1.24.6
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202209211811-0 to 411.86.202302141454-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 0daf34f1 sha256:d4cf12be73d1f022582d8302a646485f4a606645dc480ecea9a5ea283b284346
alibaba-cloud-csi-driver git 8dd7ae6f sha256:a320e580b90907b597608d7a8b1406f052e12dc2863c6e2ca35cc8ab6a851fce
alibaba-disk-csi-driver-operator git f70a51b8 sha256:d1730a8d84af13a3a474c417ecfee795574dde6cd75ef59b93d459a4cc007b16
alibaba-machine-controllers git 41451089 sha256:a1e053704b9ecdfc262c5e0b8bb5fec9f5f82ec06393d38f002c868ba2807159
apiserver-network-proxy git 61e198ca sha256:0891d2de7e8e09f38539c9b17d8b79ad401c2a8cd1a70452c200670d80b40609
aws-cloud-controller-manager git ea1a9b23 sha256:15f60d30e979208960cf27800a0795eeb1cba913265473f5ce6a7f9aaf744eb8
aws-cluster-api-controllers git b3fe15be sha256:bd7c7463d26543b4a155fa2633d05a80b4a612da02500a478b4b20a5da754f29
aws-ebs-csi-driver-operator git 2c7529e7 sha256:f98612a326237e4911324cee26797cf5bd29989595411f66c5e705fdb4af105a
aws-pod-identity-webhook git a085f1cd sha256:2123186913e4e6a1e0554d26f8ecd096f1ebba4734e5c8e417278a31e8462ff0
azure-cluster-api-controllers git a851a354 sha256:76db00c9f4a78d002e22b6ea1bddcf04dfc781520b76401184cdd1e2ca11dc8f
azure-disk-csi-driver git 2757f099 sha256:b84d0e476f23dcd06f6d77442b4a035c34a9341b8e2b6f9f903849bf07955a47
azure-disk-csi-driver-operator git ca54bcb7 sha256:1441b0777869ac4099576c39d553d93e1a0254fde9af371384067d58ac4c3115
azure-file-csi-driver git 67c3831e sha256:2ddd1b0c2bbfdaff635a4c349e7c57a2686c7f4854f17905b2f825556154178b
azure-file-csi-driver-operator git 4ddaca2a sha256:d574f144a2ee827bd769ef15c75582f94b92def98026926d73411f6d119b6974
baremetal-operator git 3122fabe sha256:e76d518e258915d0e1908017deccd27dcfcd4fe05436226dc3512e170fb7ce98
cluster-authentication-operator git e2bcbaaf sha256:e6ad589a8a64d3c62055048fd6278ddfa4c72fca259ae286be8924a0a3528545
cluster-autoscaler-operator git fcffbcda sha256:16fa4cbb12b6884903d65a0fea1cf359a68dcb824c0ac5411e7d4285a9ca2a0a
cluster-bootstrap git f22d1c60 sha256:048dded5f6c020d056d4023fc0da6c64b8f062d3cca1b6ea83e933195bd4b9ee
cluster-capi-controllers git f9c215c4 sha256:5cbebdd15b363b4d582e82a46a890fa43086176038e76467743aabb15289a8b2
cluster-capi-operator git 06d77efa sha256:88fc1f9636e525537d8860562735ac8a67f96dc7e577e659cbe509dd1dd6e3f0
cluster-config-operator git 0e01b06b sha256:8311292ff0308da545d93a4cefed6d78ac01fbe9209bd2f5f6ca33f6335e18ef
cluster-csi-snapshot-controller-operator git 8d0774fd sha256:70b7ec92ac470988fd681a12187e5b85dbed97a2f2eb7f8b2c1a74ab3e090282
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:abf7e2f7c4823007584d934d5c99390589e74beb1130b83fd1250b45471491ad
cluster-machine-approver git 3ee1fe4d sha256:eddb8cc0fae502786b16989a59e5247ef1edc0986ef3247497f77d4c977ba23b
cluster-openshift-controller-manager-operator git a536525d sha256:65d2f1fea5ff5843c297df8035aed3678979a500feb5794a9b124b9a5ea8e7c5
cluster-storage-operator git e4de8c76 sha256:cdd8e089146eaaf87c2cb257781de64eee75133c864d393500720b0b69381916
cluster-update-keys git 289032fb sha256:f6a9d58620ebf5df0be8e94134392b76742e4440c773ab65a40c1d9e3f964fbc
configmap-reloader git b7c03bb0 sha256:1ec0c8c3e31a89fad3e0a8107f1badbf3f80fbbfae30fb3022f9c3affc8f4ab1
container-networking-plugins git 0ad9da64 sha256:19c738bc7b22678ad66083fec60a1d2d18c94609b6121d74fb5a523491dad53f
csi-driver-manila-operator git 12cb253a sha256:f093f58179941185d22bc9c86a1446fb71a18630909094db38ae54f47b2bd8ea
csi-driver-nfs git f144bb43 sha256:97cf45046bfa836c9bf7f9b90b6596899858697d6965d693ec4f13c7b111f0ce
csi-driver-shared-resource git 3f69f2f2 sha256:2768ce00615634e9c1c58d4841424911ce976949186044745c40e35dcbc02030
csi-driver-shared-resource-operator git d3985eb1 sha256:cc8dafc73be40f142d6f2856416909f9b41164765a2fec74141c900ac3a8643d
csi-driver-shared-resource-webhook git 3f69f2f2 sha256:51d13b7d0d5226b46ef69c164794cce991a6207fc33a673b0fd9edfb5de91800
csi-external-attacher git da5442f1 sha256:e2ea2520ab2787b89d0eed996cd440c12778562e451f6baf83e4cf1755ba55a2
csi-external-provisioner git 86277ec2 sha256:ebb6c433e904fc22548b8da523f5b707ec727d2b4cdac317c02b00897e6769ec
csi-external-resizer git 2cea576d sha256:f89c935790b3f44af6703ea94d98180502863f5fb872c4a59f891cc03510680c
csi-external-snapshotter git 0afdf731 sha256:965798b594b4005d473721825e0273e9913e40e11f701e6cf16da51f9080ee3a
csi-livenessprobe git 7319607c sha256:181cdc50e26ee517f78e2a09d6a82d7b2317b2a025d67553b0f9c6f455bab498
csi-node-driver-registrar git 710109c8 sha256:55b579e6ac3a11b53087d70379ddc556904c8c03119cb75882a3ff99c22234e2
csi-snapshot-controller git 0afdf731 sha256:d2ab0d58d1ac2933f7e081679bc6fdc42fed7d2d1479578f3d563afcb0c81fec
csi-snapshot-validation-webhook git 0afdf731 sha256:99e64b191eb299117a32950f731b98239ea6ede2ee6af72713068cd161d288fb
docker-builder git 09e95c1c sha256:0e7936be00b487aac810f6c519a0cec1341b3f8065a23b969730f96c1a5c5dd0
egress-router-cni git fccaf1d9 sha256:7697bb40fc8bbe22afb9f2c98954c4029e42f905363845531dd2a2b5dc12e4e0
gcp-cloud-controller-manager git a5a0048a sha256:f32ac9277622a00afc26015cb3608c0fb166592f3d5126ead40361f79a03176e
gcp-cluster-api-controllers git ff20dda8 sha256:3cee6a746bf970b674ac59df871af61955903d96fc8c3ce02ee9f0e859b513d0
gcp-pd-csi-driver git f9d7fdce sha256:e6e167b273f3582fbe7c73d20e9edb47bcfef5b25024a4d16221b0cab7a98ce8
gcp-pd-csi-driver-operator git bc7bad4f sha256:7ceabae2ce1453fcc674164587b6af9983f1afbf4e62b166a55f885ba47d5616
haproxy-router git 601ba575 sha256:ed86bb60ec106f00435fcd31c290bf3647995f0b2fff877b8bc00ea8da8ffa1c
ibm-cloud-controller-manager git ce836969 sha256:a962d5f90cbd1d506d42ef35b963a64316cd298920d72a427f437dcf3951c7de
ibm-vpc-block-csi-driver-operator git e4a21800 sha256:be214a9de8b73753023f3e7186cd61873ce9f2811d8d7ba4d1abbf7e14f1515b
ibm-vpc-node-label-updater git 32e18fa7 sha256:d056f72c2d141eb60f9251a15fd6676306acfb9a948a2250c0ae1f528c6d1d34
ibmcloud-machine-controllers git 3bde969f sha256:54bb9b28461b711dbd22246be2a0c8d1f291db2df67f7d28eb97ec9eec327e5c
ironic-machine-os-downloader git 876128b5 sha256:088b7f6ea73c9f2cbbf3a0582cd3e6a19a2598237cc209db29d99a60d8223666
ironic-static-ip-manager git 84a378e0 sha256:4f980684630fb9f2dcd9f6d96b516b3f6aada0d6e51a44ae3dc2c7520939a74e
k8s-prometheus-adapter git 32fb8ea0 sha256:77a28126647765441fd0d067656917cdf872e5dfef33ef553f7846f52e8ecb8d
keepalived-ipfailover git f1330f6f sha256:c3f4940dd867cec4324fb45803ef58382fed52973fb22693a14a131386bfb603
kube-rbac-proxy git a805ba5e sha256:1f8db823d7e3133462be30a13592873e31eea87a782b9817ebf0bcf522f9e83b
kube-storage-version-migrator git 596745ce sha256:f1be0716bee558bb577b73182c66fbf34c954cac581e65c84832086b8b465773
libvirt-machine-controllers git b6e14eab sha256:6804fe2588e69442615807d98434d80327ec1d936f269f172742ef3b49b4dedc
machine-os-content sha256:a05642eff255046c016f36745aeed3da7f07111d7b09b774644dd830625029fc
machine-os-images git b1580a29 sha256:52444c6a760d58bbbde413536982833aff7c0039f55d67837f58d38d44942c96
multus-cni git 3cc5a3ac sha256:331eb426d3eea004ff501ffc95ab1400f10dd1c18d09e286707e406cc45fd643
multus-networkpolicy git 643fdaf6 sha256:66e054eed507aad32b975b6ee5d5fe6784c5d04d524dc98a2abd0dbcea07dc4f
multus-route-override-cni git 523b7904 sha256:20548b10470053504855b6691fcce0bc41f3bf79143aa7557d5467ba91583626
network-interface-bond-cni git b76a6770 sha256:a18c4b220f6320217a745a67429f1d340bdb531b08dfb0c40ae3a76921dd82d2
network-tools git 4e87286c sha256:98dd10fd542e7bfe727af4d0537570561c63120e53f966533010a440030f787a
nutanix-machine-controllers git a94eb77c sha256:3c73b1735f0f100df88c30e4a27a4454f9ee99207e16f00443d9ca67685e0af1
oauth-proxy git aad1b28f sha256:c81066cf6667bdd11da7f0006fa76e5cd453eafeb90cb34935ff6158efd205cb
oauth-server git 8d80088e sha256:de4bdad4c48de34cb64f41ca443921b84465b7bb079a17706ed76a21ce4b6d64
openshift-controller-manager git 911da575 sha256:f20e6253a2e33653cd738048965aab251ee84b040b4522c0d40fe4be3be0ea52
openshift-state-metrics git 1a7a5dcb sha256:68e44ab7b40776892d83424e0a667e4a6286cec24b440bd7d3b87fef6005a730
ovirt-csi-driver git cd3370fb sha256:a27bebd0ff4cb6f8be8529d9595228d034912f3cac7c503c900fbf97a39bed66
ovirt-csi-driver-operator git 7a30e388 sha256:ce97acf9492809165b58c51ab86909cc88f87cae742c1f54b04ef61e924b41df
ovirt-machine-controllers git 5a93d94c sha256:0cfca71bcdb6d305c130c9437b00555f09c863be671c1ab678bc411a7024a974
powervs-cloud-controller-manager git 8ace6e94 sha256:6b6bd50ea3411346d71d8b6a8791d8aa30d7a2cea8b12b7cdbb3db511bc96234
powervs-machine-controllers git 76649b32 sha256:5bfa2650cdf5393f3bbfce03d034b1ef8d0553a6014bc728c57af9bc575ec266
prom-label-proxy git af12fbc4 sha256:6039ec2a217afc6511d15c779bd4d26db05a5d0aee8ad562cf39be3c39a78fad
prometheus-alertmanager git 05cfc390 sha256:bcf4c313af3c5b13b784900ec6bd5f7d1f4d1b58c890e0f294f5fac451698895
service-ca-operator git 0899d112 sha256:f8a4b652a1ee88062c84a2e77990d5aca08778350a3a7df201a86fd89cbfb845
telemeter git b1f5dd2c sha256:31e2c43a193de232fbbfa36ce3dd3d4e45aed57e160a19c0aa3c460fdd302f69
vsphere-cluster-api-controllers git f67d1d02 sha256:b2eede4f70522c1d6fc18f8218fb486a00013773283123f306eee1b6193fc7dc
vsphere-problem-detector git 5910f330 sha256:1c16128ec25600e6fb5b43b6dce4be41fdcf21865e25bf667bebdb9a16ec9703

agent-installer-api-server

Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
MGMT-11799: change all ‘go get’ commands (#4887) #4887
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Remove jira tickets prefix requirements (#596) #596
Full changelog

agent-installer-node-agent

Updating ose-agent-installer-node-agent images to be consistent with ART (#381) #381
Full changelog

aws-ebs-csi-driver

OCPBUGS-4185: Fix nodeService.getVolumesLimit() adding more instance #213
OCPBUGS-1749: UPSTREAM: 1398: Add resolver to handle custom endpoints #209
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #57
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2003: .dockerignore: enable OSBS2 builds #38
Full changelog

azure-machine-controllers

OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
OCPBUGS-2501: Update azure instance types cache #37
Bug 2109487: make Azure instance types case-insensitive #29
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-5665: CVE-2021-4238: goutils: update for randomness fix #6765
OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
OCPBUGS-4720: GCP: Add me-west1 region #6690
OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
OCPBUGS-4398: update golang.org/x/crypto #6652
OCPBUGS-3023: GCP: Add missing regions #6542
OCPBUGS-4325: gcp: fail during validation if service usage is not enabled #6647
OCPBUGS-4325: Service Usage API is required, not optional #6642
OCPBUGS-4081: OpenStack: Force JSON content-type in Swift #6625
Bug 2105331: Switch to perform normal marshalling with unknown fields #6102
OCPBUGS-378: UPI image download govc rate limit failure #6246
OCPBUGS-2983: Azure: Fix DiskEncryptionSet regex validation #6537
OCPBUGS-1346: OpenStack UPI: Create server group for Computes #6351
Bug 2101015: go getter update for terraform & terraform providers #6411
OCPBUGS-1242: Add PowerVS zone mon01 support #6341
OCPBUGS-536: vSphere - enable steal time accounting #6260
BUG 2117368: Add AWS S3 Bucket Permissions #6216
OCPBUGS-1876: download ‘aliyun’ #6377
OCPBUGS-562: bump RHCOS 4.11 bootimage metadata #6459
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller images to be consistent with ART #165
Full changelog

baremetal-runtimecfg

OCPBUGS-673: Apply ipv6 bind check to non-VIP case too #192
Full changelog

cli, cli-artifacts, deployer, tools

Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect #1230
OCPBUGS-2766: pkg/cli/login: Warn, but do not fail, on surprise project-list errors #1274
Full changelog

cloud-credential-operator

OCPBUGS-2801: Backport –credentials-requests-dir for ccoctl gcp delete. #506
OCPBUGS-2883: Make ccoctl use regional STS endpoint by default #503
OCPBUGS-2278: Add ccoctl support to create OIDC endpoint with private S3 bucket #500
Update OWNERS to reflect reality. #496
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
OCPBUGS-3932: Add assigned egress ips into capacity #78
OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
OCPBUGS-4528: AWS: build temp credentials file from AWS key and secret #84
OCPBUGS-4167: Run azure operations in sequence #79
OCPBUGS-4163: AWS: Fix race in IP address assignment code #83
Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig #75
OCPBUGS-4233: Updating ose-cloud-network-config-controller images to be consistent with ART #81
OCPBUGS-3089: Update OWNERS #71
OCPBUGS-1846: Add resolver to handle custom endpoints #63
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #221
Updating vertical-pod-autoscaler images to be consistent with ART #222
OCPBUGS-2046: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #244
Full changelog

cluster-baremetal-operator

OCPBUGS-5628: Update dependencies #321
Updating ose-cluster-baremetal-operator images to be consistent with ART #264
OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
OCPBUGS-1762: add a workaround for a NetworkManager issue #298
OCPBUGS-747: Use machines instead of nodes to detect masters #307
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-5781: Try to limit groups for the REST mapper discovery #216
Full changelog

cluster-dns-operator

OCPBUGS-2528: keep dns-default annotations intact #349
OCPBUGS-2050: Reconcile the DNS namespace #346
OCPBUGS-2112: [release-4.11] Backport Address e2e failures due to pod security #347
Full changelog

cluster-etcd-operator

OCPBUGS-7720: set default timeouts in etcdcli #1007
OCPBUGS-7510: [release-4.11] fail early on missing node status envs #1006
OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
OCPBUGS-2919: update prometheus alerts #957
OCPBUGS-2113: Add niceness to important etcd processes #943
OCPBUGS-1607: increase etcdGRPCRequestsSlow thresholds #934
Full changelog

cluster-image-registry-operator

add myself to OWNERS #831
OCPBUGS-6907: OpenStack: Add support for Proxy #836
OCPBUGS-5778: swift: Retry connecting to OpenStack #830
OCPBUGS-1847: bump aws-go-sdk, adding support for me-central-1 #801
Full changelog

cluster-ingress-operator

OCPBUGS-3049: Update CRLs when they expire #853
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-2938: Duplicate prometheus rules for API SLOs after upgrade #1397
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
OCPBUGS-2160: [release-4.11] serviceaccountissuer: fix case when default value is being used and not trusted after change #1394
OCPBUGS-2199: [release-4.11] Wire support for trusted service account issuers #1386
Full changelog

cluster-kube-cluster-api-operator

Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
OCPBUGS-4304: resources.requests for operator pod #667
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
Full changelog

cluster-monitoring-operator

Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
OCPBUGS-4640: Increase startupProbe for prometheus #1845
OCPBUGS-4030: test: increase timeout when checking remote write metrics #1821
OCPBUGS-1790: Pass user-defined Alertmanager service in shared configmap #1781
Full changelog

cluster-network-operator

OCPBUGS-6920: Configure ignored namespaces into multus-admission-controller #1698
OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression #1638
Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation #1551
OCPBUGS-3911: SDN: /var/run mount cleanup #1631
Full changelog

cluster-node-tuning-operator

Run node selector tests only if we 2 non Performanceworker nodes (#563) #563
pao: latency-tests: read test log directly from pod (#531) #531
E2E: Automate Offline CPUs feature (#523) #523
OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
E2E fix: Make Nodeselector tests independent (#502) #502
e2e: perfprof: remove broken test (#497) #497
Add ktimer to PAO tuned profile (#510) #510
set RPS for veth on host level only (#508) #508
Filter out copied csvs when removing pao CSV (#496) #496
Add intel_pstate=disable to default configuration with no hints (#480) (#487) #480
e2e: perfprof: get cpus from node capacity (#489) #489
OCPBUGS-1126: [release-4.11] irqbalance: add unit to clear the cpu ban list (#466) #466
Add offlined to v1 api Generate new api and docs Add conversion test with offlined (#425) #425
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
Full changelog

cluster-policy-controller

OCPBUGS-5787: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #96
Full changelog

cluster-samples-operator

OCPBUGS-7330: When setting allowedRegistries urls the openshift-samples operator is degraded #490
OCPBUGS-2092: Use X.Y floating tags for golang #467
Full changelog

cluster-version-operator

OCPBUGS-5882: Set upgradeability check throttling period to 2m #885
OCPBUGS-2293: Allow unknown capabilities during payload load and implicit enablement checking #854
Full changelog

console

OCPBUGS-7789: [4.11.z] Fix kubevirt-console tests #12325
OCPBUGS-7539: Fix rerender loop/crash when bindable-kinds is found but has no status #12570
OCPBUGS-7043: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12532
OCPBUGS-7127: Editing Pipeline in the ocp console should show correct information #12540
OCPBUGS-6879: Remove refs-heads from the branch name for Repository pipelineRun row #12509
OCPBUGS-7069: PipelineRun task status overlaps status text #12534
OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages #12514
OCPBUGS-6989: Don’t proxy CORS response headers #12524
OCPBUGS-5459: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12417
OCPBUGS-6689: Fix NPE when displaying CSV with incomplete information #12478
OCPBUGS-1727: Allow regular users to access debug pods #12100
OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
OCPBUGS-4786: Fix for initial showing of topology contents #12311
OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
OCPBUGS-2443: Monitoring: Fix help popovers #12173
OCPBUGS-2716: Update dependencies to the registry library and devfile parser #12186
OCPBUGS-3300: check that user can patch console operator config in s… #12240
OCPBUGS-2447: Add checks for pods in hpaPodRingLabel #12174
OCPBUGS-1790: Use Alertmanager services for user-defined alerts from config #12104
OCPBUGS-2077: Find latest pipeline run without firehose selector #12144
OCPBUGS-2515: Change annotation to be used for fake helm repositories #12182
OCPBUGS-2014: Use local test data to mock a devfile registry #12137
OCPBUGS-2451: updates test id for 3scale #12175
OCPBUGS-1984: fix helm version dropdown entries #12135
OCPBUGS-526: improve bug report links #11965
OCPBUGS-1974: Use displayname for PHCR in the catalog page #12130
OCPBUGS-1782: Handle fake helm chart repository #12107
Bug 2109573: Fix operand affinity form field #11861
OCPBUGS-1419: fetch shared resource imagestreams based on labels instance or name #12056
OCPBUGS-1786: Fix devfile registry assertion #12108
OCPBUGS-1523: Show already loaded catalog items after a timeout (3sec) #12070
Full changelog

console-operator

OCPBUGS-5518: Deleting downloads deployment should not fail if already deleted #715
Bug 1770297: State that odo is comunity supported #700
OCPBUGS-1790: Retrieve user-defined Alertmanager services from shared configmap #685
Full changelog

coredns

OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6684: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #176
OCPBUGS-6046: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #166
Full changelog

docker-registry

OCPBUGS-1847: bump aws-go-sdk, adding support for me-central-1 #349
Full changelog

driver-toolkit

Adding rpm-build to the Dockerfile (#119) #119
Adding kernel-rpm-macros to the Dockerfile. (#108) #108
Full changelog

etcd

OCPBUGS-5876: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #178
OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
OCPBUGS-947: Rebase openshift/etcd 4.11 onto 3.5.5 #155
Full changelog

gcp-machine-controllers

OCPBUGS-4579: refactor restartPolicyToBool function #30
OCPBUGS-4532: Set sync period for Machine controller #27
Full changelog

hyperkube, pod

OCPBUGS-6683: add message about possibly working with restricted SCC #1459
Bug 2117679: UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1343
OCPBUGS-1991: UPSTREAM: 110939: don’t quota events.k8s.io events by default #1379
OCPBUGS-3174: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1408
Bug 2099800: bump to k8s 1.24.6 #1381
OCPBUGS-1540: UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1375
Full changelog

hypershift

cherry-pick #2006 #2028
Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
Add missing rbac for authentication reader #1822
update OLM catalogs to 4.11 #1786
Full changelog

ibm-vpc-block-csi-driver

Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART #15
UPSTREAM: 93: bump golint for go 1.18 #28
Full changelog

insights-operator

OCPBUGS-6783: Create gatherer for gathering machines. (#737) #737
OCPBUGS-3380: fix storage/ceph path structure (#698) #698
OCPBUGS-6025: operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) #719
OCPBUGS-5349: do not periodically update Available clusteroperator co… (#718) #718
OCPBUGS-2346: refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) (#689) #685
Full changelog

ironic

Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
OCPBUGS-4908: Update packages versions with latest available #336
OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
OCPBUGS-3674: Don’t save OS_ prefixed variables #318
Bug OCPBUGS-3478: Improve resiliency of eTag handling #314
OCPBUGS-4410: Remove RDO distribution configuration (finally fixes #46) #328
OCPBUGS-1972: Removed ServerName from VirtualHost Directives #306
OCPBUGS-2011: Backport improvements to iDRAC steps to OCP 4.11 #302
Full changelog

ironic-agent

OCPBUGS-5099: make coreos-installer output available in the logs #67
Full changelog

kube-proxy, sdn

OCPBUGS-5926: Add node egress IP assignment resync #492
OCPBUGS-4607: pass ResourceVersion:0 for kube List() calls #479
OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
OCPBUGS-2105: fix network policy egress #464
Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 #477
OCPBUGS-668: Fix DNS endpoint hack to prefer local instead of forcing it #466
Full changelog

kube-state-metrics

OCPBUGS-4087: cherry-pick, do not expose ingress path metric when service is nil #85
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-1713: Cleanup KuryrPort when Pod is missing #694
Full changelog

machine-api-operator

OCPBUGS-536: vSphere - enable steal time accounting #1081
OCPBUGS-955: Change “create” sequence with powering on the vm after clone #1064
Full changelog

machine-config-operator

OCPBUGS-6002: There are not enough logs in case “oc extract” is stuck in mco first boot in mco first boot #3497
OCPBUGS-5694: 4.11 - remove goutils from dependency tree #3499
OCPBUGS-3507: On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3422
OCPBUGS-6622: controller: don’t render new MC until base MCs update #3511
OCPBUGS-4945: Do not allow empty system reserved values #3459
OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
OCPBUGS-3882: Sync controllerconfig anyway if daemon sync fails #3421
OCPBUGS-3807: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3419
OCPBUGS-3756: daemon: Stop setting I/O scheduler to bfq #3418
OCPBUGS-2730: Add ephemeral storage to kubelet system reserved args #3381
OCPBUGS-2091: [release-4.11] TRT-540: Add privileged label to infra namespaces #3346
OCPBUGS-1939: Create a drop-in file for cri-o’s add inheritable capabilities #3352
OCPBUGS-1099: Make sure there is a search domain in resolv.conf #3330
Full changelog

machine-image-customization-controller

OCPBUGS-5652: Update dependencies and explicit go 1.18 usage #77
OCPBUGS-3687: use host IPC for the agent container #70
Full changelog

multus-admission-controller

OCPBUGS-6176: Configure ignored namespaces into multus-admission-controller #56
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-3942: Excluded ranges bug (#282) #104
OCPBUGS-1658: ip-reconciler Add all non default interfaces to Pod IP list [backport 4.11] #97
Full changelog

must-gather

OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
Full changelog

network-metrics-daemon

Update golang.org/x/text to 0.7.0 (#67) #67
Full changelog

oauth-apiserver

OCPBUGS-2140: [release-4.11] bump kube to 1.24.4 to fix group sync #84
Full changelog

oc-mirror

fix: remove release architecture validation at the config level (#504) #504
Full changelog

openshift-apiserver

OCPBUGS-4340: fix printer panic #336
OCPBUGS-2809: Revert “projects: add rw mutex to auth cache” #327
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
Full changelog

openstack-machine-api-provider

OCPBUGS-7322: Address CVE-2022-41717 #57
Full changelog

openstack-machine-controllers

OCPBUGS-2626: Ensure network defs without subnet follow noAllowedAddressPairs #248
OCPBUGS-1890: Apply noAllowedAddressPairs on intended subnets only #243
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-3876: Order an operator CR’s status.Component.Refs array (#2880) #413
OCPBUGS-4446: fix service account token secret reference (#2862) #416
Full changelog

operator-marketplace

OCPBUGS-697: [release-4.11] Dockerfile.okd: include custom OperatorHub manifest #485
Full changelog

ovn-kubernetes

OCPBUGS-6640: Drop in-cluster traffic towards svcCIDR at wrong port #1491
OCPBUGS-7319: Bump OVN to 22.09, enable session affinity timeout #1522
OCPBUGS-5245: Move check_pkt_larger to gateway router ports #1505
OCPBUGS-7010: [release-4.11] Fix Egress FW ACL rules in dualstack mode #1507
OCPBUGS-6813: [release-4.11] Ensure loadbalancer cleanup doesn’t fail #1498
OCPBUGS-5928: [release-4.11] Fix egress firewall to allow inbound connections in both gw modes #1478
OCPBUGS-5766: egressip: fix test data race accessing podAssignment cache #1471
OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
OCPBUGS-1720: Backport changes to ovnkube-trace #1436
OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
OCPBUGS-4475: Handle expired entry while handling dns update #1417
OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
OCPBUGS-4167: EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add #1404
OCPBUGS-3908: [release-4.11] Support proper parsing of IPs with leading zeros #1393
OCPBUGS-2554: Fix UpdateService healthport checks #1389
Bug OCPBUGS-3077: [release-4.11] Fix netpol races #1353
OCPBUGS-3830: Adjust ovs bundle timeout #1383
OCPBUGS-2222: Don’t add ITP specific gw setup for DPU mode #1305
Updating ose-ovn-kubernetes images to be consistent with ART #937
OCPBUGS-2745: Fixes SNAT-ing Logic for EgressIPs #1334
OCPBUGS-2659: Add logging verbosity to configuring OVN logs #1325
OCPBUGS-1739: pods: deleteLogicalPort should not fail when ls is gone #1290
OCPBUGS-1955: 4.11 multihop #1296
OCPBUGS-1750: Trim ACL names according to RFC1123 #1282
Bug 2112100: Forward routes for link-local addresses to vNIC in Windows #1216
OCPBUGS-1552: Dockerfile: bump to openvswitch2.17.0-37.4.el8fdp #1272
Full changelog

prometheus

OCPBUGS-2640: Fix ‘invalid magic number 0’ bug (#11338) #143
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7590: Fixes ThanoRuler StatefulSet re-creation bug #218
Full changelog

prometheus-node-exporter

OCPBUGS-1723: Fix a bug of metric format on AMD EPYC platforms #108
Full changelog

tests

OCPBUGS-7319: Unskip service session affinity tests #27722
OCPBUGS-6851: [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade #27685
OCPBUGS-5091: Add Kuryr exception to “pods should successfully create sandboxes” test #27621
SPLAT-856: [release-4.11] include storage and must-gather tests in expectedTestCount #27494
OCPBUGS-3819: Add bond cni test #27554
OCPBUGS-2616: Fix s2i ruby test that relys on rack #27480
disruption checking is disabled for prior releases because we lack a good baseline #27468
Bug 2108978: pkg/monitor: wait for Prometheus sidecars to be ready #27313
Full changelog

thanos

Updating thanos images to be consistent with ART #99
OCPBUGS-3764: Fix local-test for go 1.18 #87
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-2058: fix .dockerignore to satisfy OCP specific requirements #26
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7404: fix for nil user session (#1859) #58
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5790: Allow cluster to be upgraded even if using multiple datacenters #130
OCPBUGS-5472: Fix sc creation on resync #127
OCPBUGS-3285: set TLS cipher suites in Kube RBAC sidecars #119
OCPBUGS-1710: Add HTTP proxy to syncer container #111
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github