4.11.47

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.47-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Succeeded periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.36, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.60, 4.10.61, 4.10.62, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.24, 4.11.25, 4.11.26, 4.11.29, 4.11.3, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.4, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.5, 4.11.6, 4.11.7, 4.11.8, 4.11.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.11.27

Created: 2023-08-10 12:27:23 +0000 UTC

Image Digest: sha256:bbed7981242fbc034a0e75ef265040137515da3756ac2eab9d2dd46348967c06

Release 4.11.47 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-08-09-063453

Components

Kubernetes upgraded from 1.24.6 to 1.24.15
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202302021552-0 to 411.86.202308081056-0 (diff)

Rebuilt images without code change

agent-installer-api-server git bc51be82 sha256:d5d3927af6a719c2c9b23d080a00e35392d6caf0ea2129a446076fcadfb26519
agent-installer-node-agent git e74ffbf5 sha256:f13ffff5e580c5526360355697d6e280faf7bcf7e61b3640a97397b4bbd7d61b
alibaba-cloud-controller-manager git 0daf34f1 sha256:034c77ee002d0b987efbaec77c6acf6c168e72864a204974777308ed80bdb4f3
alibaba-cloud-csi-driver git 8dd7ae6f sha256:fa0acfa316c4a27f277fa7f8467057749c590e162ccb29a9cf366885845fa3a5
alibaba-disk-csi-driver-operator git f70a51b8 sha256:500b13afbdf96bcca357e7bfe55438dfb2fdc07a639fcc95014f4366e151b07d
alibaba-machine-controllers git 41451089 sha256:c5b864807961519aa820ddd9b2963b69bb4c7f57085dcbffa21ac68c8c854759
apiserver-network-proxy git 61e198ca sha256:9e286fcb3ad989f569eb77a93c96e74f851b6fd9ca396d9349ec773ff11fb2b0
aws-cloud-controller-manager git ea1a9b23 sha256:a5bea5917452e266627b918f9632499ccb887d1125cc5af52daa9be87f3c1b4b
aws-cluster-api-controllers git b3fe15be sha256:cbf055a2a0c45eeace4e90597d7b17a5a4b6ca4454ef7f2a7441022418fec359
aws-ebs-csi-driver-operator git 2c7529e7 sha256:6ee25c87051521525dcd5853be71a77106cddf5cfe75dee8fea69fa9b3f360ab
aws-machine-controllers git a796a77f sha256:76d4df3d3184b876e23717e1541a97727bb562b47dc05afcdddf7d7b8249b705
aws-pod-identity-webhook git a085f1cd sha256:ef4b81a04855750f62b1fe9ee4769d233795f35af5d593ac2345141e9fec964c
azure-cloud-controller-manager git 6bf2e335 sha256:d72368016ca415e6f2fd63c751b83e025febefa3e0ff6a536d21d522961710b3
azure-cloud-node-manager git 6bf2e335 sha256:df60689e642a4d3003444ec8f3fbfc6df7b6723cc77bad64caec837d8f7637fc
azure-cluster-api-controllers git a851a354 sha256:ee9af0e80f2971224d1a955f18a19b8fcb5c12e38aa030a2690b72eb8d49c63c
azure-disk-csi-driver git 2757f099 sha256:ba0b0cd84362b775ff5dc98ec568bde86ab943df588d9c359a818753df739ddd
azure-file-csi-driver git 67c3831e sha256:58b6ef362dd7d45522bacee5de0e5a9bd3fa35581b81c36653b964c9ef11d23e
azure-file-csi-driver-operator git 4ddaca2a sha256:11ad36193850a86425948f5bc9f19ed120a00318cb8e7ec090e8d30bc27c0522
azure-machine-controllers git 415f448b sha256:94f5887c90be1f835d27900b183e6b1c29103a6cc1c23fa04b3de4795be598fd
baremetal-machine-controllers git 3cbef7f4 sha256:75263d965e0defc924fe39905879503f7bf7e7c99917d08fc11d760f1557bb8d
cluster-authentication-operator git e2bcbaaf sha256:961aecdf9d44e0ffc7f348c2d3520bb2752ffb47fffeabb2d782d06e378b6c7d
cluster-autoscaler git bf6c1c32 sha256:1e88a8c5b23c6446c26d05aaed7019edde0dd3bff89ba55de3e3dffdd11d03e0
cluster-autoscaler-operator git fcffbcda sha256:bedfc6f236924608eb1dc533dfd83106bd5ad62569f5f6acebf1dd4920997b67
cluster-baremetal-operator git 4ffdd2f9 sha256:365afc71631c125e0247258db974869c84ca8aed22b4ba89186aed8b18f2b09a
cluster-capi-controllers git f9c215c4 sha256:de057773b3d3b3b3270d93321e22d2bd4f01c3b5d3b5efb2ed6eacdcdb9d0742
cluster-capi-operator git 06d77efa sha256:86ef6dd100f81d55faef9ce85a8ab9fa4def2a5eab80ccedec6042f368ec5143
cluster-cloud-controller-manager-operator git 2dbffc67 sha256:36f22f5259b1fcb3ff598bde3632af750109ba1ddcd572a1c500be9648be7f35
cluster-config-operator git 0e01b06b sha256:3e91dafe447bbd8401be76dc1217182867b70ec9a97e4a86544335cd95b354eb
cluster-csi-snapshot-controller-operator git 8d0774fd sha256:4d4f255e9dbfbea88c6be28c996115ea244662800133e35684532398c793fb27
cluster-dns-operator git 8abe243f sha256:c80e37b137572df145480f8e15ca8c84039f915e30cba1debd4ad16bf121fd32
cluster-kube-cluster-api-operator git 21da027d sha256:aa241993e135b8ae50834dcc5ce8235ff323bf9c90717d39ca102d2b0ca9588d
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:534b90900e5eb8264dc609bfc95a9510ce4206a3e4b9a36b84e830d2feb87204
cluster-openshift-apiserver-operator git cb39fde1 sha256:512dd9ca3666e27f36659c28fbed84e95b395291f20e236efd3ad36f1c672386
cluster-openshift-controller-manager-operator git a536525d sha256:19e163334d148d27b525f1d8310a96c7443c5536abd58d58b19ce8d546bd1d99
cluster-policy-controller git 56511812 sha256:fa02c23d30f85a63e7132b020c650e53a6e51eae85e9357a9773f15c89d9bbb8
cluster-storage-operator git e4de8c76 sha256:0b9c347e5747510ce16a8a38f2f664df9bd7b7af586fc627692da0a39b73417d
cluster-update-keys git 289032fb sha256:d5019dbed433b87edb6268cae4457725835fd87838c977a438edc0672140c15d
configmap-reloader git b7c03bb0 sha256:d0f3ccde425e5ef570bcbdcfefcf2de79ab5cd394427eb373ff6817039c1c896
container-networking-plugins git 0ad9da64 sha256:cbee194660639c4bb02710932eae1acdf17c4744bbadc3b88eb924451fc2979f
coredns git 227d7279 sha256:c7d05f9a1ee696e84dff57b3862ce9ddf04280138958d132f88ecf20eb7245d9
csi-driver-nfs git f144bb43 sha256:d72c2183ce1d658d4e7a85672b57d0e96eeb547674b2b0691789da47efa634be
csi-driver-shared-resource git 3f69f2f2 sha256:15091151d6438185fa0fbce8b0b50f807f9ad116142d37e2fdb502a0c1881db1
csi-driver-shared-resource-operator git d3985eb1 sha256:33a441cbb4e297cb68021e731abfe44529892061dc462921ea965be7c739de39
csi-driver-shared-resource-webhook git 3f69f2f2 sha256:499e9adbd297a84b8c1e90011b46ab5801365d150f0d55210429de01264f579b
csi-external-attacher git da5442f1 sha256:cf442d7591582937b486bb73b956b4f034ba8cb284a7009fffd25652befd29b0
csi-external-provisioner git 86277ec2 sha256:0e3f9c00297346dd8dd3192ede8d8cb1fdd742b14c5f42e1f51db21401a4b3a6
csi-external-resizer git 2cea576d sha256:a553a5a859d8f02401a35f1b1cba5342db15b62cfe686e81acc67f5219abe305
csi-external-snapshotter git 0afdf731 sha256:eabd0ab0f117716ed9a5404b2d0e3140b871dfb8eb99f63a451a48aded87fbcf
csi-node-driver-registrar git 710109c8 sha256:dce1d8081e6c9d1d0f2a9d17e4b0ca19128c59102e78986190771b33104b9c61
csi-snapshot-controller git 0afdf731 sha256:48bb39ab779777a829fa6fa5e60ca6e1884654ee7aa5a9318493293f784d787e
csi-snapshot-validation-webhook git 0afdf731 sha256:f2d0731d4c8a1a572534af8b319e8c3c395658d3a09fd6edf408eb02982af67d
driver-toolkit git 28589b0a sha256:f054a49113a3e43e482bb8131933d969b74102b80cb0bfd35afd0b6569ace082
egress-router-cni git fccaf1d9 sha256:077691b3f7f4f907a7667cdfc32d0655daa8ac8dc551d63148dc8166c93bebc3
gcp-cloud-controller-manager git a5a0048a sha256:845b6cf4cf421b42a3c7dfaa83aede439cb76d0930585a829f35fca5e31167de
gcp-cluster-api-controllers git ff20dda8 sha256:c48c55dc1150fa5ac2926cefe6890690e4044cb6b44030854579b7a846a7cdc5
gcp-machine-controllers git 9363d87d sha256:a0c31d71405b838b61c2683a09535fb0927b93a81710d04ebafd35e49f52a528
gcp-pd-csi-driver-operator git bc7bad4f sha256:7d9529ff8dc9988940cb631f091fdbe9184f9df84515eefeae0cc87d1366b8d8
ibm-cloud-controller-manager git ce836969 sha256:1bfd15e361cf9f8918de7702da714c90e910fd5c5ea5d0425a283530886316bb
ibm-vpc-block-csi-driver git 65f0da2d sha256:71267542e7b0efbc0a92b1a7569cb18a1ac6c09f0e95c1e878f2232d78322570
ibm-vpc-block-csi-driver-operator git e4a21800 sha256:4edf45e212789bf32faca28b02de208a6d51047385d40f9af8ab4427e21349b4
ibm-vpc-node-label-updater git 32e18fa7 sha256:d379c5deccc80094baf834e55191dcd3d22a648888d61787bd276c8be72ce9a9
ibmcloud-machine-controllers git 3bde969f sha256:d792ca3516bf5da1c80516996960ae55788cf489ae63934a9055f00229a840b8
ironic-machine-os-downloader git 876128b5 sha256:78e2d8de1816e5bc19e2b525c7f297b0f18a5adfc31474f2c2dc9202611746be
k8s-prometheus-adapter git 32fb8ea0 sha256:6ea53a07732fc3826546b74bf5cda02fbc68845294e993f80ed848d25ff01e57
keepalived-ipfailover git f1330f6f sha256:3b2327c4cb8d5d3f5e71eebf84540ce96bfc67fd1af129bcdc66f1e9c66f5e97
kube-rbac-proxy git a805ba5e sha256:e7a1f3d392e9d96042383576eab58360965902c10ebbad3b06d843af1a5b539a
kube-state-metrics git 8dc2dc0b sha256:c3e2dee8980e18411e2534c228bd7549592d8d774514d48cf19c61a8b960ca98
kube-storage-version-migrator git 596745ce sha256:b7f82a2b1e5078bc2405fcbf3a3627d5f81c8ee3250a71fd4ccd204f88154b5f
libvirt-machine-controllers git b6e14eab sha256:0a1ee76e2fc0d7a57d699063e09cb32fde473468807ed315eb1c39e95047c9fa
machine-image-customization-controller git e0e39797 sha256:e12820c63837176b695b462b5306b4b9e81e2773ac4734351efe0f002d9f75c1
machine-os-content sha256:a557d3950160ef0a2ae6c8215a9c8a6a41d4e910b60fadeb218bd9e29fdc92c5
machine-os-images git b1580a29 sha256:5658d926a71002ad507e3934da6b8f6b4e684e49f008733c79f4e01f1932c296
multus-networkpolicy git 643fdaf6 sha256:b03d104e9fe11b3211fdcdcd44b738905e9f9c8a0001f9c44bbd2ce328fb72aa
multus-route-override-cni git 523b7904 sha256:e85abb6859c08c1d641ada1bdcaf78dfa5300425fb47221409691b879df38a71
must-gather git 44f6adac sha256:58c17a0ba85879af50d45966950b6dab420ee0b83869e795658a470d60fd52aa
network-interface-bond-cni git b76a6770 sha256:d3452707eba7a2c1373d8b38e0639e5c73c7b27a3e5b3d59d21b72b3a888ec72
network-tools git 4e87286c sha256:8cb0ba8b8382b4c5ad389982fc2f1e2a6d3b371264473a65b33237281deebd1b
nutanix-machine-controllers git a94eb77c sha256:4e46829832e86a9ea5d406825c5d27c58a34d49555d3547c1c679d6889069b6a
oauth-apiserver git c9c2dd15 sha256:bc7c6de08717048649bbcceb313d6232321adad3609f498b6bcfeb8e7d248e1a
oauth-proxy git aad1b28f sha256:ad1c8377ed580782a5758b751802d15254afa13f762755fdb0f52202d12dbf7a
oauth-server git 8d80088e sha256:e381a4bd25bd4f7bf0ae7c886cd63275f1cb8b444c8bb7ae717f1099acb586e3
openshift-apiserver git 35df5a02 sha256:cebef901e0a9d19c5d23e52ad6544efd74dbc5e0623141245e7a56e51b462a51
openshift-controller-manager git 911da575 sha256:2136e0783762eb95307a1fc9122a07498d28d9e0e20e724340d2be2e07fae18d
openshift-state-metrics git 1a7a5dcb sha256:ead32e0a93d738a8975bb7e865204e759950bad945a7d8f8695f83ee49c5a84b
openstack-cinder-csi-driver-operator git df9f0367 sha256:d161c47e92cd0210eee1012d32f4d297cf1be20fdd5700f31bdc4184f3b19c1c
openstack-machine-controllers git 38f15dbc sha256:845bf39e2d06909cd9d0c30c1978a9bdf99e209521afce5fdfc5e9457abe8731
operator-marketplace git c7a65336 sha256:8388bafe6c6008e9f900bcd23cc8565aaa6a634cd0ad80227de03a61201dd4e0
ovirt-csi-driver git cd3370fb sha256:6e3438f9565992cc4bf7491f15adfedc5283a6682327eae5f184a7ada41df98e
ovirt-csi-driver-operator git 7a30e388 sha256:f2ed4767b433f98a3e4c63091a4f95bd77f34c5637775a52b529d97d6b9c99bf
ovirt-machine-controllers git 5a93d94c sha256:b530173b08468e0014232448cea9901fff6a9f7d6636824c7b36936efc84a7b1
powervs-cloud-controller-manager git 8ace6e94 sha256:5f1680482840a1dcd514e80a8deb11cdfd95770e1db2123748af842aeb54136d
powervs-machine-controllers git 76649b32 sha256:c5cb4262631e530409a928a65f6ff1e22985b72c4046e9030dd3ba96ada44f71
prom-label-proxy git af12fbc4 sha256:308ac732815f23252507c8a3674144dd9f88d4fe70ea63a742f521f4c26a6d1e
prometheus git e751c61e sha256:83bc1107e90391a5cf4301ad1aa5082b103b73038f25b7ab07384fe9434f6a16
prometheus-alertmanager git 05cfc390 sha256:bcfd723642c4ab001a13e93b8a052c6ebf2b26e0e643a5189098e9fd08c049d8
prometheus-node-exporter git 40942c28 sha256:bccbf3b6fcd5ecf0ae7466b0b12097a0ad521b87a8799b362ff810e6b9bacff9
service-ca-operator git 0899d112 sha256:7ad2e61485740df09eb81edc407719c101b6a7a6c97cee73a98661d2ef7d9a35
telemeter git b1f5dd2c sha256:4dcc105f34ba6146441353cf150c8ff4a8d4d5381125891bc0296b583fe0b9f9
vsphere-cloud-controller-manager git 91f7b1fa sha256:ae9890a90eeaeb1de4212db593c12cbe16f14358faad9ace388264a1227bc4de
vsphere-cluster-api-controllers git f67d1d02 sha256:a0a412c11d9702bfccbc63871b502be9de7cce416ea5f4dadfa944311ef72cc2
vsphere-csi-driver-operator git 82cfcd53 sha256:1a6237d3f85d41901f734295923e491f73739317c63f3b043bbd408dd1bc64b4
vsphere-problem-detector git 5910f330 sha256:7c38d8635d9a073af4e12189e21ebf4d3e606b8fc63764f1d622ed3f1da6e7a5

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update OWNERS to match master branch (#682) #682
CVE-2022, OCPBUGS-15068: 21235 github.com/Masterminds/vcs command inj (#681) #681
Full changelog

aws-ebs-csi-driver

OCPBUGS-12932: 4.11: Bump golang.org/x/text #227
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7987: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #71
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-17246: azurestack: do not use gen2 images #7393
OCPBUGS-16915: [release-4.11] azure: skip LB creation when not needed #7372
OCPBUGS-16353: ic: azure: validate diskTypes in AzureStack #7341
OCPBUGS-17002: GCP: add europe-west12 region to the survey as supported region #7377
OCPBUGS-5708: hold bootkube service until bootstrap has pivoted #6759
OCPBUGS-13104: openstack: Add netcat to the Installer image #7163
OCPBUGS-14288: baremetal: Extra time for provisioning interface #7214
OCPBUGS-12750: [Alibaba] update the bandwidth value of EIP #7132
OCPBUGS-11663: AWS - Remove ACLs from s3 ign #7085
OCPBUGS-10594: [release-4.11] aws: bump aws-sdk-go version #7000
OCPBUGS-7530: bump RHCOS 4.11 bootimage metadata #6875
OCPBUGS-5665: CVE-2021-4238: goutils: update for randomness fix #6765
Full changelog

baremetal-operator

OCPBUGS-11612: allow namespace to continue with terminating when deprovisioning at t… #262
OCPBUGS-8298: cve: 2022-21698: upgrade prometheus/client_golang #256
Full changelog

baremetal-runtimecfg

OCPBUGS-15539: Use machine-config state instead of comparing roles #263
OCPBUGS-13544: Verify kubelet version in upgrade check #250
OCPBUGS-11297: fix isUpgradeStillRunning() #233
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-16059: mcs cert: account for environments that use IP directly #1504
OCPBUGS-16195: reboot: set ignition version to 3.1 #1510
OCPBUGS-4812: [release-4.11] New-App Using Git via SSH #1283
handle the error case of node retrieval while waiting for reboot #1486
bring some cert rotation helpers back into 4.11 [fix unit-tests] #1479
OCPBUGS-10772: bump repo sclorg/s2i-ruby-container location for newapp test #1380
OCPBUGS-8205: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1360
Full changelog

cloud-credential-operator

OCPBUGS-13792: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #540
OCPBUGS-11708: ccoctl: Enable public anon read access to default OIDC S3 bucket #530
Full changelog

cloud-network-config-controller

OCPBUGS-13240: pull project name from subnet uri #109
Full changelog

cluster-bootstrap

Add API team to the OWNERS #95
Full changelog

cluster-etcd-operator

OCPBUGS-9908: Garbage collect grafana-dashboard-etcd #1022
OCPBUGS-9967: increase live/ready timeout and failure thresholds #1025
OCPBUGS-7720: set default timeouts in etcdcli #1007
OCPBUGS-7510: [release-4.11] fail early on missing node status envs #1006
Full changelog

cluster-image-registry-operator

OCPBUGS-9921: bump aws-sdk-go #848
Full changelog

cluster-ingress-operator

OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #942
OCPBUGS-3560: Allow PROXY protocol for “Private” strategy #914
OCPBUGS-8000: certificate-publisher: Don’t publish extraneous certificates #894
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #1448
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #703
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7756: Guard controller: set the readiness probe endpoint explicitly #464
Full changelog

cluster-machine-approver

OCPBUGS-10382: ignore case when checking csr hostnames #181
Full changelog

cluster-monitoring-operator

OCPBUGS-11759: add startup probe for prometheus-adapter #1947
OCPBUGS-11465: jsonnet: Add prometheus container in UWM #1938
Full changelog

cluster-network-operator

OCPBUGS-13661: AUTH: update cluster-reader to include k8s.ovn.org #1811
OCPBUGS-11763: HyperShift: Add POD_NAME env to ovnkube-node #1780
OCPBUGS-12277: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1789
OCPBUGS-10487: Enable configuration of node healthz server on ovnkube #1742
OCPBUGS-5954: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1686
OCPBUGS-6993: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1702
OCPBUGS-3462: CNI binary copy should account for the possibility of symlinks [backport 4.11] #1616
Full changelog

cluster-node-tuning-operator

Merge #548
Full changelog

cluster-samples-operator

OCPBUGS-15758: Update Jenkins and Jenkins Agent Base image versions #507
OCPBUGS-7330: When setting allowedRegistries urls the openshift-samples operator is degraded #490
Full changelog

cluster-version-operator

OCPBUGS-5011: Backport SecurityContext reconciliation behavior #940
OCPBUGS-13043: pkg/cvo: reset payload load status #935
OCPBUGS-10671: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #915
Full changelog

console

OCPBUGS-17375: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13071
OCPBUGS-15562: only copy workload annotations to debug pod #12956
OCPBUGS-15532: visiting Configurations page returns error Cannot read… #12953
OCPBUGS-14004: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12845
OCPBUGS-14413: Modified git import flow module to handle create button enable-disable issue #12874
OCPBUGS-13214: the name of the object (imagestream-name) does not match the name on the URL (deployment_name) #12835
OCPBUGS-12284: Fix to use and set correct secretReference for build-config triggers #12762
OCPBUGS-13864: delete associated pipeline, triggertemplate and eventlistener when deleting app #12837
OCPBUGS-13730: Show type of sample on the samples view #12826
OCPBUGS-13746: PipelineRun templates must be fetched from OpenShift namespace #12827
OCPBUGS-12279: Do not show builder ImageStreams without sampleRepo as samples #12759
OCPBUGS-12959: update the default pipelineRun template name #12790
OCPBUGS-12231: Get the Event type value from the latest PLR of the Repository #12749
OCPBUGS-10708: delete application should delete all part-of resources #12772
OCPBUGS-13012: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12793
OCPBUGS-10613: add subject kind dropdown in the project access form #12663
OCPBUGS-11580: In DeploymentConfig both the Form view and Yaml view are not in sync #12714
OCPBUGS-6984: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12523
OCPBUGS-7949: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12602
OCPBUGS-6954: Fix to show correct help texts for each git repo status error code #12518
OCPBUGS-7764: Fix crash when pinnedResources is null #12581
OCPBUGS-2916: Storage -> PVC -> upload data, does not support source reference #12221
OCPBUGS-6687: Hide silent switch for alerting rule if no associated alerts are present in devconsole #12479
OCPBUGS-2844: [OKD/nanokube] Fix NPE when project or build status is not defined #12207
OCPBUGS-12243: disable operator-install-single-namespace.spec.ts to solve CI issues #12751
OCPBUGS-7950: Repositories list does not show the running pipelinerun as last pipelinerun #12603
OCPBUGS-7494: fix broken pipeline secret #12569
OCPBUGS-7789: [4.11.z] Fix kubevirt-console tests #12325
OCPBUGS-7539: Fix rerender loop/crash when bindable-kinds is found but has no status #12570
OCPBUGS-7043: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12532
OCPBUGS-7127: Editing Pipeline in the ocp console should show correct information #12540
OCPBUGS-6879: Remove refs-heads from the branch name for Repository pipelineRun row #12509
OCPBUGS-7069: PipelineRun task status overlaps status text #12534
OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages #12514
Full changelog

console-operator

OCPBUGS-11343: Distinguish between route conditions and remove the old ones #745
OCPBUGS-11969: Changing field on any of routes in the openshift-console namespace wont trigger sync loop #753
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6684: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #176
Full changelog

csi-driver-manila-operator

OCPBUGS-8067: Fix SCC admission failure race during initial deployment #188
OCPBUGS-10605: Bump go.mongodb.org/mongo-driver to v1.5.1 #177
OCPBUGS-7278: Address CVE-2022-41717 #168
Full changelog

csi-livenessprobe

OCPBUGS-13820: Bump gRPC from 1.38.0 to 1.49.0 #42
Full changelog

docker-builder

OCPBUGS-15645: Add the git-lfs package #354
OCPBUGS-11401: manage-dockerfile: use the original form of HEALTHCHECK #339
Full changelog

docker-registry

OCPBUGS-11366: bump docker-distribution #367
OCPBUGS-9921: bump aws-sdk-go #364
Full changelog

etcd

Update owners #186
Updating ose-etcd images to be consistent with ART #158
Full changelog

gcp-pd-csi-driver

OCPBUGS-11000: UPSTREAM: 988: Simplify node backoff logic #34
Full changelog

haproxy-router

OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #492
Full changelog

hyperkube, pod

OCPBUGS-8736: UPSTREAM: <drop>: bump apiserver-library-go #1627
OCPBUGS-15361: Bump to k8s 1.24.15 #1607
OCPBUGS-14746: [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1606
OCPBUGS-13166: Bump to k8s 1.24.14 #1588
OCPBUGS-11314: UPSTREAM: <carry>: Force using the go tooling from the system #1536
OCPBUGS-11314: Bump to k8s 1.24.12 #1529
OCPBUGS-10215: Fix mounted volume expansion tests #1509
OCPBUGS-7079: Bump to k8s 1.24.11 #1500
OCPBUGS-6683: add message about possibly working with restricted SCC #1459
Full changelog

hypershift

OCPBUGS-11608: properly reconcile with user specified changes for in proxy configuration #2396
install: add flag to wait for HyperShift operator rollout #2370
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2352
Full changelog

insights-operator

OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) (#806) #804
OCPBUGS-15446: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#802) #788
OCPBUGS-7872: Collect info about monitoring pods pv (#773) #773
OCPBUGS-11818: update the cluster transfer interval to 12h (#765) (#766) #765
OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#739) #726
OCPBUGS-6783: Create gatherer for gathering machines. (#737) #737
Full changelog

ironic

OCPBUGS-13585: Add python-flask dependency #381
OCPBUGS-14654: Include fix to OCPBUGS-13335 in OCP 4.11. #380
OCPBUGS-13645: Bump python-sushy #369
OCPBUGS-7565: Adding dep on python3-werkzeug >= 2.0.3-4 #356
Full changelog

ironic-agent

OCPBUGS-11438: Adding dep on python3-werkzeug >= 2.0.3-4 #74
Full changelog

ironic-static-ip-manager

OCPBUGS-14564: Flush addresses on provisioning interface with global scope only #38
Full changelog

kube-proxy, sdn

OCPBUGS-14305: fix possible concurrent map read/write #552
OCPBUGS-13917: save and delete the old egress network policy #544
OCPBUGS-13902: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #543
OCPBUGS-10853: Fix race in Egress IP Tracker start #522
OCPBUGS-8399: Initialize egress node monitoring struct with previous reachability status #513
OCPBUGS-7515: Handle race condition to setup default vnid flows #506
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-14931: KuryrPort cleanup: Fix issue of subport not found #733
Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address #727
OCPBUGS-12840: Fix VIF revert on KuryrPort status update error #725
Full changelog

machine-api-operator

OCPBUGS-10719: [release-4.11] - manual cp #1057 - machines stuck in provisioned or provisioning #1141
OCPBUGS-11326: Fix empty component version #1133
OCPBUGS-10901: Block machine deletion if extra disks are attached #1131
OCPBUGS-8311: Short circuit misfiring #1124
OCPBUGS-8257: Append annotations from machine template spec to the node #1123
Full changelog

machine-config-operator

OCPBUGS-11556: Prevent possible split-brain scenario with keepalived unicast #3667
OCPBUGS-11283: Wrap podman commands in a while loop #3657
OCPBUGS-9986: configure-ovs: fix mtu-migration cleanup #3607
OCPBUGS-10425: Remove hard requirement for the afterburn from early-running aws-related services #3615
OCPBUGS-8260: [release-4.11] backport cleanupDuplicateMC #3577
OCPBUGS-6002: There are not enough logs in case “oc extract” is stuck in mco first boot in mco first boot #3497
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #63
OCPBUGS-9784: Client golang [backport 4.11] #60
Full changelog

multus-cni

Updating multus-cni images to be consistent with ART #155
OCPBUGS-9863: Multus sync to OCP 4.11 mar-21-2023 #152
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-13241: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.11] #132
OCPBUGS-11067: respect requested allocation range when exluding ranges [backport 4.11] #124
OCPBUGS-3942: Excluded ranges bug (#282) #104
Full changelog

network-metrics-daemon

Update golang.org/x/text to 0.7.0 (#67) #67
Full changelog

oc-mirror

changes the OWNERS file (#647) #647
Full changelog

openstack-machine-api-provider

OCPBUGS-10954: machineset_controller: Stop caching clouds credentials #67
OCPBUGS-7322: Address CVE-2022-41717 #57
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-16126: Catalog Pod Startup Probe Timeout #509
Allow cpb to be statically compiled / exempt from FIPS compliance #513
OCPBUGS-12263: cherry-pick pull request refactor FBC caching (#1051) f… #482
Full changelog

ovn-kubernetes

OCPBUGS-16691: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1779
OCPBUGS-15731, OCPBUGS-15745: Improve syncNodes to remove stale data #1734
OCPBUGS-15876: Remove non-existing functions test. #1740
OCPBUGS-16003: Fix stale SNAT entries for completed pods #1751
OCPBUGS-12791: : Delete equivalent ACLs when searching by predicate. #1666
OCPBUGS-11110: [release-4.11] Batch potentially big transaction on egress firewall ACLs migration #1629
OCPBUGS-10734: Bump OVN to 22.12 and turn off neighbour response in router options. #1599
OCPBUGS-10688: Fix leak in service controller cache #1598
OCPBUGS-11035: [release-4.11] Handle Completed pods deletion #1616
OCPBUGS-2303: [4.11] Stale chassis are not removed #1310
OCPBUGS-10486: [release-4.11] node: add node healthz server for cloud load balancers #1594
OCPBUGS-8510: [release-4.11] Don’t recreate clusterPGs and clusterRtrPGs unless needed #1560
OCPBUGS-7858: [release-4.11] Delete stale egress ip snat entries by node #1543
OCPBUGS-6640: Drop in-cluster traffic towards svcCIDR at wrong port #1491
OCPBUGS-7319: Bump OVN to 22.09, enable session affinity timeout #1522
OCPBUGS-5245: Move check_pkt_larger to gateway router ports #1505
OCPBUGS-7010: [release-4.11] Fix Egress FW ACL rules in dualstack mode #1507
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7590: Fixes ThanoRuler StatefulSet re-creation bug #218
Full changelog

tests

OCPBUGS-15942: remove references to registry.centos.org #28036
OCPBUGS-15151: Move from registry.centos.org to quay.io #27985
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27961
OCPBUGS-12962: Add (optional) dual-stack tests to the CNI certification test suite #27904
OCPBUGS-10215: Bump(openshift/kubernetes): to get fix for resizing flake #27796
OCPBUGS-7727: remove reference to old guard pods #27735
OCPBUGS-7319: Unskip service session affinity tests #27722
OCPBUGS-6851: [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade #27685
Full changelog

thanos

OCPBUGS-14559: require at least TLS 1.2 instead of 1.3 #113
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7404: fix for nil user session (#1859) #58
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github