4.11.44

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.44-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Succeeded periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.38, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.60, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.3, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.4, 4.11.40, 4.11.6, 4.11.7, 4.11.8, 4.11.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.11.20

Created: 2023-06-29 01:06:57 +0000 UTC

Image Digest: sha256:52cbfbbeb9cc03b49c2788ac7333e63d3dae14673e01a9d8e59270f3a8390ed3

Release 4.11.44 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-06-28-095402

Components

Kubernetes upgraded from 1.24.6 to 1.24.15
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202212072103-0 to 411.86.202306261114-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git e74ffbf5 sha256:e8bb0f5af7508690067f83857a71add110fcc5598e087c2a5882053aa6f5f364
alibaba-cloud-controller-manager git 0daf34f1 sha256:fc18b3cd900268ab720190c95a8ec6f0df99cfb994856a73ea85d685add195ce
alibaba-cloud-csi-driver git 8dd7ae6f sha256:ce2640548c6ca0c9b8fc234e8db328c2eaf0c46102800925d0142410a8f1e0b8
alibaba-disk-csi-driver-operator git f70a51b8 sha256:915cc786431737ac5ead405d641a7937cbe66dd76f3aa907561c80d4e567cc6d
alibaba-machine-controllers git 41451089 sha256:3e3c35b38410860c857be04da8eec26ab766cf68e8596f27f02cd9d4f57ed0b0
apiserver-network-proxy git 61e198ca sha256:70b8290f72aa9b9681ec4eb8d24e2d13a858ab8ab0b8360fe3a795ef63b9f764
aws-cloud-controller-manager git ea1a9b23 sha256:eca0c7fbf61df0ff2e63a0a9a3372a85bff1e07a6e3e5e62cad793dea6a05cb3
aws-cluster-api-controllers git b3fe15be sha256:247040b871397d0f3a5dd87db029783e9f78a3659e79603398e12fca6c359edb
aws-ebs-csi-driver git ba035522 sha256:259af0bab7299f32a2935f8decec0c4adebd0d9463fe1ef508b29d58ee38c2db
aws-ebs-csi-driver-operator git 2c7529e7 sha256:925b3605995870069049a26e48a64cd43241b5ccd0ddb1d03d4032f4133c9051
aws-pod-identity-webhook git a085f1cd sha256:8a9326828969c00ce503334a852687c92733ceb74955175cf5c2adb8965577e9
azure-cloud-controller-manager git 6bf2e335 sha256:b7ff738ab6baceec2354ce62d4ebc40a8a138e6c8658a306ac8753f1bb2a0b71
azure-cloud-node-manager git 6bf2e335 sha256:3824b616e85f7613dd4a34df657c8ca7841e3704177474c2b32a5d5790ad2c06
azure-cluster-api-controllers git a851a354 sha256:9828f4e93ec89f586e730614edf71a99e59070c36f086963562e0115a537b1b2
azure-disk-csi-driver git 2757f099 sha256:412aebeeb47365a2395b5b6ec01e57d9505f328b58278451e178610807ca30ae
azure-file-csi-driver git 67c3831e sha256:d3c553d2637549d6543fa1c848d281373145bcde8f995c852a3ff7828adaf4f3
azure-file-csi-driver-operator git 4ddaca2a sha256:e72607e9c31327d8593b81e6082ac87af1b8b84f5dfed9697d2c0784381d3249
baremetal-machine-controllers git 3cbef7f4 sha256:1116612e1d1d7fc5ce01c9d326a4b8975757e56e3fbb58f7033da7d4327a12fb
cluster-authentication-operator git e2bcbaaf sha256:d092e5eeeea6fe96d62c854959063e42dbf6b19fc0731c4bc2cc758fa259fce7
cluster-autoscaler git bf6c1c32 sha256:9e147f0326dd681255ca3bfde6fd4c0eed882bf05a67870ea8b28e0d6debd8cd
cluster-autoscaler-operator git fcffbcda sha256:bae5a899f3732202f45aae3a429c2de816548a1f9d4e090cd62aab093c7e3baa
cluster-capi-controllers git f9c215c4 sha256:0b5d409acdcffd24b4537e514ac871c662e5f650f24c2e5ff6c2ba3660ef0281
cluster-capi-operator git 06d77efa sha256:99c655d952bdedb63e2fcb618db86aeb639c2072c00f9556556405fc05ad10f6
cluster-config-operator git 0e01b06b sha256:6d0fb57f81354d03f1a465cb91ac6907b67e11619ba0dc253f173a6d542c8149
cluster-csi-snapshot-controller-operator git 8d0774fd sha256:01653be5d4aae49a67b77929479af4d612cfc585b36200aeb9a24d3ce62766f2
cluster-dns-operator git 8abe243f sha256:18583876301ac063913155f7bb8202acbd485b406e00aeed78c779e318b8afc8
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:d4c6161272b03f3051a5e9ce4d63ecf31c8ed927251a5151682e551eee5216d4
cluster-openshift-controller-manager-operator git a536525d sha256:3e7bdbe4011301cfb5267eb01e7e8f720bb78dbe0923376664a4eceb3ef11311
cluster-storage-operator git e4de8c76 sha256:eb9c54ebbd9ae3f3056b02b6643e917dc206c281bfdb46797f5d72cb808d9964
cluster-update-keys git 289032fb sha256:c8b19483331b58ed663d244725ff9f4e37611cc98c014cba9402e33366f06bac
configmap-reloader git b7c03bb0 sha256:f3ed75bc37e21b6261779ec383f8a2847b872a9bdb6fa2338f63cb6342155326
container-networking-plugins git 0ad9da64 sha256:bbbf6dbe61a30fd2c7dc92d136a29de643b78179f0370a76a78a0d4c5659dd5b
csi-driver-nfs git f144bb43 sha256:508522606e708cb8967bccc4f190ea8cbb2604eb77f6493e612f66140f791bbb
csi-driver-shared-resource git 3f69f2f2 sha256:dabb249a60062a0298ddc9dfc9053ef170932ab63f30cd3238a0e7545d661a2e
csi-driver-shared-resource-operator git d3985eb1 sha256:8222ba75d6cb32649431566b82d4f273c985338de449bd788997959001996c80
csi-driver-shared-resource-webhook git 3f69f2f2 sha256:b64f6a3cb933000664468886143c86eaa7b51307da0bf4d62b6cecf27bed09d0
csi-external-attacher git da5442f1 sha256:c5c598f48b8bca3d64a0841b8dbb07c56bb0177daf6aaf7ac74d0371a7245ac0
csi-external-provisioner git 86277ec2 sha256:9b921d94a7a6a8cdbd78c0372b268c94cde68270b554417fcbad43ed7deb865d
csi-external-resizer git 2cea576d sha256:ebcb6064dc4bb4c666c97c4cfcf7fa825134c663d544feda7a5d600cbc54fc1b
csi-external-snapshotter git 0afdf731 sha256:6c1637b2003dc7a0a6641751ce3e44423edb92a76d86ecc728a0c9299bccc95d
csi-node-driver-registrar git 710109c8 sha256:35c908f0df164f0459608ca91f4cc533aad3123f9640975c2702022566bebd6f
csi-snapshot-controller git 0afdf731 sha256:88d7545d91604e34557120656b14f306b5d066f45c8c5bb4a1425438297129a8
csi-snapshot-validation-webhook git 0afdf731 sha256:8fabd62251e652546929b929c0819a3403b8087475ac67eecf76c4b54a88f1fc
egress-router-cni git fccaf1d9 sha256:39a682e76cb1830ef288d4019fb4d1ade12f5826475cdc7d23265d2e0c74892c
gcp-cloud-controller-manager git a5a0048a sha256:e70e9877d28d3413ba41ea7d6ada9d87e123bc3ae2b06c17dc53dd33ca9b19bd
gcp-cluster-api-controllers git ff20dda8 sha256:711891fc3ed65d7c6ed57a224c8aa479cfcb26973336af64138dd1a0e59dd56c
gcp-pd-csi-driver-operator git bc7bad4f sha256:8fa58c03c57a1c26c326c8d5e3ebe4075222a5f033c4d04882318dc4302df9e2
ibm-cloud-controller-manager git ce836969 sha256:2754628b259c7b7dc87bbf1f2d8d77aac3e1471f4124798e9bfa7b12668b28e0
ibm-vpc-block-csi-driver git 65f0da2d sha256:f90e296e13dcb0072c1a863a70ef10711342dfc4e6c41cf3a9b4586b2c44a409
ibm-vpc-block-csi-driver-operator git e4a21800 sha256:1a1f8b404da996af6f09e03e2874773d57b547b4574f64e3017b5e9ae2db76c9
ibm-vpc-node-label-updater git 32e18fa7 sha256:2a9995ae59ebb37aaaa7e78af9f1fa5e1b4f5d1b554a111d3a9695b021ad521e
ibmcloud-machine-controllers git 3bde969f sha256:140644fe4152aac65f716541c66929d3158ac7555413b8e59657cb75680d4e07
ironic-machine-os-downloader git 876128b5 sha256:45c3a4fb765b0095ac736f86d6ac808b43aafd69f69d528af2b890b2c67b937b
k8s-prometheus-adapter git 32fb8ea0 sha256:8c0f41430a098ce5d3cf8920259e71d5b5154656d569e32a5867125a843ba218
keepalived-ipfailover git f1330f6f sha256:7f39f247a2ab1b4294d7ef5e72e914e6722474c66c1484c489c6f9f5f2e34f28
kube-rbac-proxy git a805ba5e sha256:faf2b1113221beb3d7e365b1280a03e583690861e45d38c0638d9947faba8596
kube-state-metrics git 8dc2dc0b sha256:2450d59cbfbb76de91f0e97641e2846748d34ef55abb1ae9657d539e582a387b
kube-storage-version-migrator git 596745ce sha256:857529404bc38450e96993976edc35d73c81de6f57a1738ee447be29a678abb2
libvirt-machine-controllers git b6e14eab sha256:e292915bd570969f049643352be76ede448d978acb926f8d43a813660d31b12b
machine-os-content sha256:a8af19691c2be1126b7fb1185259b61f72d88d019503bc8902067e4f80b5cc92
machine-os-images git b1580a29 sha256:c84dc805b5ce77e85cb9e245e83349ac9aceaeb9c9517d0b2984106b140a684f
multus-networkpolicy git 643fdaf6 sha256:53f34ac849c7b407b463eb4290b0704251a7240dc2b53034be04b2e3fbc4c823
multus-route-override-cni git 523b7904 sha256:a30658e8c19567ebd97caf44c1def037201c3072b3166e70867149ffec56ff01
network-interface-bond-cni git b76a6770 sha256:72c4289a39bc8e132b38bbdd1b53a34b8017f4d1c9d82f3a2ba1c431e5819bfe
network-tools git 4e87286c sha256:f4336c1f8ae417f78c598de0e160f5146a9280f2b0c211b01f287cf5f96104e1
nutanix-machine-controllers git a94eb77c sha256:94b6e61d7414ea3ad8cff4430880b2b847cdafa4589c48a464e6d0b2a9841c25
oauth-apiserver git c9c2dd15 sha256:3d738fd03a79170967d513a214cfe957dde549745687349b21691c12842446ba
oauth-proxy git aad1b28f sha256:7d4af9d36225056c9bf36aec5a714de5b785e8ea7f69c4b4d1b2e91a9b2dc1a7
oauth-server git 8d80088e sha256:6f7718cc8b1037cd8ab34a2ac8231734796ab746df7827de16369f817dd8b50f
openshift-controller-manager git 911da575 sha256:cfe0bd5515b2855c4bfc82fe46b3c15979fa65736e121c06c351ac826c2d4c26
openshift-state-metrics git 1a7a5dcb sha256:42d56a5b02471b161c8d40b8faa5596145023e40c6b29cfaaf1f5ddda261ff83
openstack-machine-controllers git 38f15dbc sha256:abace9253d13f843ee0616c3b9804932143022ee7dce119502c610db1028d840
operator-marketplace git c7a65336 sha256:0fe0cf32eb99484bdbbcf4ac58adb9aadb120763f570c2e35716a08cf4431308
ovirt-csi-driver git cd3370fb sha256:0a93d623546861461df48b9c5ee19ff4b8da076036c090feec666f3a5497eff3
ovirt-csi-driver-operator git 7a30e388 sha256:4296db98941e065979486d74885fc841ef8b8af41594a9ac90657092c3f6d68d
ovirt-machine-controllers git 5a93d94c sha256:e5f26f5b714b80998b79f6f482c4c4a15d31b5bfaf620061c0074d642a88b2be
powervs-cloud-controller-manager git 8ace6e94 sha256:b13c6c3d59f0fd725d8ccaa5786bad36d1936abe84a9cf698f0558575a428d35
powervs-machine-controllers git 76649b32 sha256:949f6137f67a292d1ebf2d6e5a1da6e4e9db8bfb4aad6589fdcc4056f5086c35
prom-label-proxy git af12fbc4 sha256:11c6cbd8fe830e768589679e485ab87d891168474cfedab46d486b394b8e7083
prometheus git e751c61e sha256:9075d049ae3a9cecbd208eecf77557e26566724b6e1ec7b3f624cc04c1088205
prometheus-alertmanager git 05cfc390 sha256:c66ac6cf75152bd9d9287fc0a09637b6d7f03576db94c9788d498aec384d9877
prometheus-node-exporter git 40942c28 sha256:d035277ec9fdccc92ceaca5c086cafa4a80a228201f007f76e274ec0c74db8b1
service-ca-operator git 0899d112 sha256:bfe7ff8ed0b8eb186ae72dec14ee4f00bc0052f9a65afe609ad371f87939e11a
telemeter git b1f5dd2c sha256:d921ffbcf105dd67f575341b9fa41cdd6fd3581368ff595c403d0856ba1efd39
vsphere-cloud-controller-manager git 91f7b1fa sha256:56eb4e5a235f41cb4a8d1ef96e75a0f68dea0673d77ce25a900aad6b6993dc2b
vsphere-cluster-api-controllers git f67d1d02 sha256:2c924fe7b67ad6ad678f58c9f5d11d201f0761539c066678bf4c40909a4eb9e2
vsphere-problem-detector git 5910f330 sha256:d85d886990ebcb85abfee22e8f2d021804b694c0080e04bf7a3c8c524769ce40

agent-installer-api-server

Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
MGMT-11799: change all ‘go get’ commands (#4887) #4887
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Remove jira tickets prefix requirements (#596) #596
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #57
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7987: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #71
Full changelog

azure-machine-controllers

OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-13104: openstack: Add netcat to the Installer image #7163
OCPBUGS-14288: baremetal: Extra time for provisioning interface #7214
OCPBUGS-12750: [Alibaba] update the bandwidth value of EIP #7132
OCPBUGS-11663: AWS - Remove ACLs from s3 ign #7085
OCPBUGS-10594: [release-4.11] aws: bump aws-sdk-go version #7000
OCPBUGS-7530: bump RHCOS 4.11 bootimage metadata #6875
OCPBUGS-5665: CVE-2021-4238: goutils: update for randomness fix #6765
OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
OCPBUGS-4720: GCP: Add me-west1 region #6690
OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
Full changelog

baremetal-operator

OCPBUGS-11612: allow namespace to continue with terminating when deprovisioning at t… #262
OCPBUGS-8298: cve: 2022-21698: upgrade prometheus/client_golang #256
Full changelog

baremetal-runtimecfg

OCPBUGS-13544: Verify kubelet version in upgrade check #250
OCPBUGS-11297: fix isUpgradeStillRunning() #233
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-4812: [release-4.11] New-App Using Git via SSH #1283
handle the error case of node retrieval while waiting for reboot #1486
bring some cert rotation helpers back into 4.11 [fix unit-tests] #1479
OCPBUGS-10772: bump repo sclorg/s2i-ruby-container location for newapp test #1380
OCPBUGS-8205: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1360
Full changelog

cloud-credential-operator

OCPBUGS-13792: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #540
OCPBUGS-11708: ccoctl: Enable public anon read access to default OIDC S3 bucket #530
Full changelog

cloud-network-config-controller

OCPBUGS-13240: pull project name from subnet uri #109
Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
OCPBUGS-3932: Add assigned egress ips into capacity #78
OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
Full changelog

cluster-baremetal-operator

OCPBUGS-5628: Update dependencies #321
Updating ose-cluster-baremetal-operator images to be consistent with ART #264
OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
Full changelog

cluster-bootstrap

Add API team to the OWNERS #95
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-5781: Try to limit groups for the REST mapper discovery #216
Full changelog

cluster-etcd-operator

OCPBUGS-9908: Garbage collect grafana-dashboard-etcd #1022
OCPBUGS-9967: increase live/ready timeout and failure thresholds #1025
OCPBUGS-7720: set default timeouts in etcdcli #1007
OCPBUGS-7510: [release-4.11] fail early on missing node status envs #1006
OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
Full changelog

cluster-image-registry-operator

OCPBUGS-9921: bump aws-sdk-go #848
add myself to OWNERS #831
OCPBUGS-6907: OpenStack: Add support for Proxy #836
OCPBUGS-5778: swift: Retry connecting to OpenStack #830
Full changelog

cluster-ingress-operator

OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #942
OCPBUGS-3560: Allow PROXY protocol for “Private” strategy #914
OCPBUGS-8000: certificate-publisher: Don’t publish extraneous certificates #894
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #1448
OCPBUGS-2938: Duplicate prometheus rules for API SLOs after upgrade #1397
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
Full changelog

cluster-kube-cluster-api-operator

Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #703
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
OCPBUGS-4304: resources.requests for operator pod #667
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7756: Guard controller: set the readiness probe endpoint explicitly #464
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
Full changelog

cluster-machine-approver

OCPBUGS-10382: ignore case when checking csr hostnames #181
Full changelog

cluster-monitoring-operator

OCPBUGS-11759: add startup probe for prometheus-adapter #1947
OCPBUGS-11465: jsonnet: Add prometheus container in UWM #1938
Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
OCPBUGS-4640: Increase startupProbe for prometheus #1845
Full changelog

cluster-network-operator

OCPBUGS-13661: AUTH: update cluster-reader to include k8s.ovn.org #1811
OCPBUGS-11763: HyperShift: Add POD_NAME env to ovnkube-node #1780
OCPBUGS-12277: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1789
OCPBUGS-10487: Enable configuration of node healthz server on ovnkube #1742
OCPBUGS-5954: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1686
OCPBUGS-6993: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1702
OCPBUGS-3462: CNI binary copy should account for the possibility of symlinks [backport 4.11] #1616
OCPBUGS-6920: Configure ignored namespaces into multus-admission-controller #1698
OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
Full changelog

cluster-node-tuning-operator

Merge #548
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
Full changelog

cluster-policy-controller

OCPBUGS-5787: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #96
Full changelog

cluster-samples-operator

OCPBUGS-7330: When setting allowedRegistries urls the openshift-samples operator is degraded #490
Full changelog

cluster-version-operator

OCPBUGS-13043: pkg/cvo: reset payload load status #935
OCPBUGS-10671: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #915
OCPBUGS-5882: Set upgradeability check throttling period to 2m #885
Full changelog

console

OCPBUGS-14004: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12845
OCPBUGS-14413: Modified git import flow module to handle create button enable-disable issue #12874
OCPBUGS-13214: the name of the object (imagestream-name) does not match the name on the URL (deployment_name) #12835
OCPBUGS-12284: Fix to use and set correct secretReference for build-config triggers #12762
OCPBUGS-13864: delete associated pipeline, triggertemplate and eventlistener when deleting app #12837
OCPBUGS-13730: Show type of sample on the samples view #12826
OCPBUGS-13746: PipelineRun templates must be fetched from OpenShift namespace #12827
OCPBUGS-12279: Do not show builder ImageStreams without sampleRepo as samples #12759
OCPBUGS-12959: update the default pipelineRun template name #12790
OCPBUGS-12231: Get the Event type value from the latest PLR of the Repository #12749
OCPBUGS-10708: delete application should delete all part-of resources #12772
OCPBUGS-13012: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12793
OCPBUGS-10613: add subject kind dropdown in the project access form #12663
OCPBUGS-11580: In DeploymentConfig both the Form view and Yaml view are not in sync #12714
OCPBUGS-6984: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12523
OCPBUGS-7949: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12602
OCPBUGS-6954: Fix to show correct help texts for each git repo status error code #12518
OCPBUGS-7764: Fix crash when pinnedResources is null #12581
OCPBUGS-2916: Storage -> PVC -> upload data, does not support source reference #12221
OCPBUGS-6687: Hide silent switch for alerting rule if no associated alerts are present in devconsole #12479
OCPBUGS-2844: [OKD/nanokube] Fix NPE when project or build status is not defined #12207
OCPBUGS-12243: disable operator-install-single-namespace.spec.ts to solve CI issues #12751
OCPBUGS-7950: Repositories list does not show the running pipelinerun as last pipelinerun #12603
OCPBUGS-7494: fix broken pipeline secret #12569
OCPBUGS-7789: [4.11.z] Fix kubevirt-console tests #12325
OCPBUGS-7539: Fix rerender loop/crash when bindable-kinds is found but has no status #12570
OCPBUGS-7043: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12532
OCPBUGS-7127: Editing Pipeline in the ocp console should show correct information #12540
OCPBUGS-6879: Remove refs-heads from the branch name for Repository pipelineRun row #12509
OCPBUGS-7069: PipelineRun task status overlaps status text #12534
OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages #12514
OCPBUGS-6989: Don’t proxy CORS response headers #12524
OCPBUGS-5459: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12417
OCPBUGS-6689: Fix NPE when displaying CSV with incomplete information #12478
OCPBUGS-1727: Allow regular users to access debug pods #12100
OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
OCPBUGS-4786: Fix for initial showing of topology contents #12311
OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
OCPBUGS-2443: Monitoring: Fix help popovers #12173
Full changelog

console-operator

OCPBUGS-11343: Distinguish between route conditions and remove the old ones #745
OCPBUGS-11969: Changing field on any of routes in the openshift-console namespace wont trigger sync loop #753
OCPBUGS-5518: Deleting downloads deployment should not fail if already deleted #715
Bug 1770297: State that odo is comunity supported #700
Full changelog

coredns

OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6684: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #176
OCPBUGS-6046: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #166
Full changelog

csi-driver-manila-operator

OCPBUGS-10605: Bump go.mongodb.org/mongo-driver to v1.5.1 #177
OCPBUGS-7278: Address CVE-2022-41717 #168
Full changelog

csi-livenessprobe

OCPBUGS-13820: Bump gRPC from 1.38.0 to 1.49.0 #42
Full changelog

docker-builder

OCPBUGS-11401: manage-dockerfile: use the original form of HEALTHCHECK #339
Full changelog

docker-registry

OCPBUGS-11366: bump docker-distribution #367
OCPBUGS-9921: bump aws-sdk-go #364
Full changelog

driver-toolkit

Adding rpm-build to the Dockerfile (#119) #119
Full changelog

etcd

Update owners #186
Updating ose-etcd images to be consistent with ART #158
OCPBUGS-5876: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #178
OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
Full changelog

gcp-machine-controllers

OCPBUGS-4579: refactor restartPolicyToBool function #30
OCPBUGS-4532: Set sync period for Machine controller #27
Full changelog

gcp-pd-csi-driver

OCPBUGS-11000: UPSTREAM: 988: Simplify node backoff logic #34
Full changelog

haproxy-router

OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #492
Full changelog

hyperkube, pod

OCPBUGS-15361: Bump to k8s 1.24.15 #1607
OCPBUGS-14746: [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1606
OCPBUGS-13166: Bump to k8s 1.24.14 #1588
OCPBUGS-11314: UPSTREAM: <carry>: Force using the go tooling from the system #1536
OCPBUGS-11314: Bump to k8s 1.24.12 #1529
OCPBUGS-10215: Fix mounted volume expansion tests #1509
OCPBUGS-7079: Bump to k8s 1.24.11 #1500
OCPBUGS-6683: add message about possibly working with restricted SCC #1459
Bug 2117679: UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1343
OCPBUGS-1991: UPSTREAM: 110939: don’t quota events.k8s.io events by default #1379
Full changelog

hypershift

OCPBUGS-11608: properly reconcile with user specified changes for in proxy configuration #2396
install: add flag to wait for HyperShift operator rollout #2370
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2352
cherry-pick #2006 #2028
Full changelog

insights-operator

OCPBUGS-7872: Collect info about monitoring pods pv (#773) #773
OCPBUGS-11818: update the cluster transfer interval to 12h (#765) (#766) #765
OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#739) #726
OCPBUGS-6783: Create gatherer for gathering machines. (#737) #737
OCPBUGS-3380: fix storage/ceph path structure (#698) #698
OCPBUGS-6025: operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) #719
OCPBUGS-5349: do not periodically update Available clusteroperator co… (#718) #718
Full changelog

ironic

OCPBUGS-13585: Add python-flask dependency #381
OCPBUGS-14654: Include fix to OCPBUGS-13335 in OCP 4.11. #380
OCPBUGS-13645: Bump python-sushy #369
OCPBUGS-7565: Adding dep on python3-werkzeug >= 2.0.3-4 #356
Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
OCPBUGS-4908: Update packages versions with latest available #336
OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
OCPBUGS-3674: Don’t save OS_ prefixed variables #318
Full changelog

ironic-agent

OCPBUGS-11438: Adding dep on python3-werkzeug >= 2.0.3-4 #74
OCPBUGS-5099: make coreos-installer output available in the logs #67
Full changelog

ironic-static-ip-manager

OCPBUGS-14564: Flush addresses on provisioning interface with global scope only #38
Full changelog

kube-proxy, sdn

OCPBUGS-14305: fix possible concurrent map read/write #552
OCPBUGS-13917: save and delete the old egress network policy #544
OCPBUGS-13902: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #543
OCPBUGS-10853: Fix race in Egress IP Tracker start #522
OCPBUGS-8399: Initialize egress node monitoring struct with previous reachability status #513
OCPBUGS-7515: Handle race condition to setup default vnid flows #506
OCPBUGS-5926: Add node egress IP assignment resync #492
OCPBUGS-4607: pass ResourceVersion:0 for kube List() calls #479
OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
OCPBUGS-2105: fix network policy egress #464
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-14931: KuryrPort cleanup: Fix issue of subport not found #733
Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address #727
OCPBUGS-12840: Fix VIF revert on KuryrPort status update error #725
Full changelog

machine-api-operator

OCPBUGS-10719: [release-4.11] - manual cp #1057 - machines stuck in provisioned or provisioning #1141
OCPBUGS-11326: Fix empty component version #1133
OCPBUGS-10901: Block machine deletion if extra disks are attached #1131
OCPBUGS-8311: Short circuit misfiring #1124
OCPBUGS-8257: Append annotations from machine template spec to the node #1123
Full changelog

machine-config-operator

OCPBUGS-11556: Prevent possible split-brain scenario with keepalived unicast #3667
OCPBUGS-11283: Wrap podman commands in a while loop #3657
OCPBUGS-9986: configure-ovs: fix mtu-migration cleanup #3607
OCPBUGS-10425: Remove hard requirement for the afterburn from early-running aws-related services #3615
OCPBUGS-8260: [release-4.11] backport cleanupDuplicateMC #3577
OCPBUGS-6002: There are not enough logs in case “oc extract” is stuck in mco first boot in mco first boot #3497
OCPBUGS-5694: 4.11 - remove goutils from dependency tree #3499
OCPBUGS-3507: On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3422
OCPBUGS-6622: controller: don’t render new MC until base MCs update #3511
OCPBUGS-4945: Do not allow empty system reserved values #3459
OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
Full changelog

machine-image-customization-controller

OCPBUGS-5652: Update dependencies and explicit go 1.18 usage #77
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #63
OCPBUGS-9784: Client golang [backport 4.11] #60
OCPBUGS-6176: Configure ignored namespaces into multus-admission-controller #56
Full changelog

multus-cni

Updating multus-cni images to be consistent with ART #155
OCPBUGS-9863: Multus sync to OCP 4.11 mar-21-2023 #152
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-13241: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.11] #132
OCPBUGS-11067: respect requested allocation range when exluding ranges [backport 4.11] #124
OCPBUGS-3942: Excluded ranges bug (#282) #104
Full changelog

must-gather

OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
Full changelog

network-metrics-daemon

Update golang.org/x/text to 0.7.0 (#67) #67
Full changelog

oc-mirror

changes the OWNERS file (#647) #647
fix: remove release architecture validation at the config level (#504) #504
Full changelog

openshift-apiserver

OCPBUGS-4340: fix printer panic #336
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
Full changelog

openstack-machine-api-provider

OCPBUGS-10954: machineset_controller: Stop caching clouds credentials #67
OCPBUGS-7322: Address CVE-2022-41717 #57
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-12263: cherry-pick pull request refactor FBC caching (#1051) f… #482
OCPBUGS-3876: Order an operator CR’s status.Component.Refs array (#2880) #413
OCPBUGS-4446: fix service account token secret reference (#2862) #416
Full changelog

ovn-kubernetes

OCPBUGS-12791: : Delete equivalent ACLs when searching by predicate. #1666
OCPBUGS-11110: [release-4.11] Batch potentially big transaction on egress firewall ACLs migration #1629
OCPBUGS-10734: Bump OVN to 22.12 and turn off neighbour response in router options. #1599
OCPBUGS-10688: Fix leak in service controller cache #1598
OCPBUGS-11035: [release-4.11] Handle Completed pods deletion #1616
OCPBUGS-2303: [4.11] Stale chassis are not removed #1310
OCPBUGS-10486: [release-4.11] node: add node healthz server for cloud load balancers #1594
OCPBUGS-8510: [release-4.11] Don’t recreate clusterPGs and clusterRtrPGs unless needed #1560
OCPBUGS-7858: [release-4.11] Delete stale egress ip snat entries by node #1543
OCPBUGS-6640: Drop in-cluster traffic towards svcCIDR at wrong port #1491
OCPBUGS-7319: Bump OVN to 22.09, enable session affinity timeout #1522
OCPBUGS-5245: Move check_pkt_larger to gateway router ports #1505
OCPBUGS-7010: [release-4.11] Fix Egress FW ACL rules in dualstack mode #1507
OCPBUGS-6813: [release-4.11] Ensure loadbalancer cleanup doesn’t fail #1498
OCPBUGS-5928: [release-4.11] Fix egress firewall to allow inbound connections in both gw modes #1478
OCPBUGS-5766: egressip: fix test data race accessing podAssignment cache #1471
OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
OCPBUGS-1720: Backport changes to ovnkube-trace #1436
OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
OCPBUGS-4475: Handle expired entry while handling dns update #1417
OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7590: Fixes ThanoRuler StatefulSet re-creation bug #218
Full changelog

tests

OCPBUGS-15151: Move from registry.centos.org to quay.io #27985
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27961
OCPBUGS-12962: Add (optional) dual-stack tests to the CNI certification test suite #27904
OCPBUGS-10215: Bump(openshift/kubernetes): to get fix for resizing flake #27796
OCPBUGS-7727: remove reference to old guard pods #27735
OCPBUGS-7319: Unskip service session affinity tests #27722
OCPBUGS-6851: [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade #27685
OCPBUGS-5091: Add Kuryr exception to “pods should successfully create sandboxes” test #27621
Full changelog

thanos

OCPBUGS-14559: require at least TLS 1.2 instead of 1.3 #113
Updating thanos images to be consistent with ART #99
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7404: fix for nil user session (#1859) #58
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5790: Allow cluster to be upgraded even if using multiple datacenters #130
OCPBUGS-5472: Fix sc creation on resync #127
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github