4.11.50

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.50-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Failed (3 retries) periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded (3 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.61, 4.10.62, 4.10.63, 4.10.64, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.3, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.4, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.5, 4.11.6, 4.11.7, 4.11.8

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.11.0

Created: 2023-09-26 08:38:58 +0000 UTC

Image Digest: sha256:57b4ea34db9f8ac57b3d796ae0e82e749d9a7708821364cc1770292586edfd87

Release 4.11.50 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-09-24-100546

Components

Kubernetes upgraded from 1.24.0 to 1.24.16
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202208031059-0 to 411.86.202309200611-0 (diff)

Rebuilt images without code change

alibaba-cloud-csi-driver git 8dd7ae6f sha256:ec8540385e05a21a4025fcfafa9157a762a9f771ae90b8faa465a0472beef1a6
alibaba-machine-controllers git 41451089 sha256:090ed27e440a51d4ccf86500e1a1bf1e00a6570cccbc763a8effb3f561c14d1f
aws-cloud-controller-manager git ea1a9b23 sha256:58f42ee4cfe245237344918bb8b6bf572b9ae112fb003f5b91f867b2492a1e6c
aws-cluster-api-controllers git b3fe15be sha256:651cfaa7dd700995a4b57a9e0d63203b0dab3286a56b7f17b2dea76fdf078bad
aws-pod-identity-webhook git a085f1cd sha256:424730e6b023b8edd25b4b76473865c78ea03ac91e2f0a4c8391711d3e36b682
azure-cluster-api-controllers git a851a354 sha256:a5661c687a786a6c5a0c2b0d385c1ed4756cf88db1d21b9feebc0b7afe0d90ae
azure-file-csi-driver git 67c3831e sha256:53c58c441ac650924852e3e11a29e0979bca12fd083880839194a10efb54c490
cluster-authentication-operator git e2bcbaaf sha256:1adcef1f8938080becf956083ec99c2fe4bb4857496bd8107683cd54d1379f60
cluster-autoscaler-operator git fcffbcda sha256:9c3d4949c64679563c45643428d709890ddb9fbbe558dfdf5d612f8d4b633ae2
cluster-capi-controllers git f9c215c4 sha256:46700e8bdf1a0ca6525634482721d053cfc9c42060751d8cc6a23349dc4272ad
cluster-config-operator git 0e01b06b sha256:dbc9081a48309fc388ad6c3cf6bf32782aa952ba15e1ad3c54f5f5211acfd49e
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:0b8fa97b150c878d185577e19e90e5a5df1a6360872fdc7be5ee9438260f63ba
cluster-update-keys git 289032fb sha256:2b1934bcdeb84362d3666dbab237bc08e697f39a503e62732d071672aec3b3cd
configmap-reloader git b7c03bb0 sha256:1523a83583750b4553918e8f7727d4b40e610584ca20639cc7fe88f4cc04d985
container-networking-plugins git 0ad9da64 sha256:72a59a7bfd1009c716c1bec661933897a06a6824f01a0e0e915387a6a50803bf
csi-driver-nfs git f144bb43 sha256:cb9c969b0e88cc16b7e103db72551ba7044ef43b70783cbc7d14ac7397e59ad5
csi-driver-shared-resource git 3f69f2f2 sha256:6490151b0ace2f3a5f26b6ff23662d2311b5cd45167ef02616e5e66e30ee6cfc
csi-driver-shared-resource-operator git d3985eb1 sha256:24bda252541b42abedccbb36f4b22fefeeac50bf14529d40fe9f269fbc44a54b
csi-driver-shared-resource-webhook git 3f69f2f2 sha256:f7ab502986d8cd91a13a8f14142fdc1aa5fe7709c8d3f79ed766ee261af3e7cf
csi-external-attacher git da5442f1 sha256:b8c1d3050f3fc04baf43d5d0d9abbff20cb0cfc13063c27cfb395fe46f4c50bd
csi-external-provisioner git 86277ec2 sha256:43a4c462af44b25d0c5c535000d1b79941a4c024971edbca93ef888ce6f66681
csi-external-resizer git 2cea576d sha256:138b0956d3e4264f7baadb1dbba4eac8166fc2ae194b4cdf7aa81c56c07a01d0
csi-external-snapshotter git 0afdf731 sha256:db0efd5d857fb26991d2c7dda2fa70534264eb4db48d9ccc4db2a5cbd07e0edc
csi-node-driver-registrar git 710109c8 sha256:26785cc7e3f7cb49f7b112ec62727a08febee14f400cb7ced444909ecfb69a46
csi-snapshot-controller git 0afdf731 sha256:7dee0ab40c1d9c1eee459ef776a7c783de37b8c4288c391b02bfb38763225492
csi-snapshot-validation-webhook git 0afdf731 sha256:e690b9099ce38a5f6f36da13e84cc5e7f3bb4586bab3c0c3f25815c2556a24a2
egress-router-cni git fccaf1d9 sha256:092d0d2d46838a1f593e4024044eff9718a2b5c27349b7ace737fbabcf25dc79
gcp-cluster-api-controllers git ff20dda8 sha256:581add9fbac519b5ca7d1623ccb3775a7e68ca2fb3020c96a785e31998629d1a
ibm-cloud-controller-manager git ce836969 sha256:8891a75c8c936273bafecc17cfaf870e8fe03effe8c3f5df40aff5028609414e
ibm-vpc-block-csi-driver-operator git e4a21800 sha256:0efa136dda617e04662256abf877cba2462a48b447efd6c7204c3b68d5c84bf7
ibm-vpc-node-label-updater git 32e18fa7 sha256:ebea8b2dae315f057a25ea827dd46b2e077b40f0783d6fc1607e2c140b027da4
ibmcloud-machine-controllers git 3bde969f sha256:ef4a3f44553eb187bcd3b08e5d52b722ffd9c8e116feb7b684cc49eb5dbc4fda
k8s-prometheus-adapter git 32fb8ea0 sha256:e6de73f940e710ebe019d719aacdc6b82c37bee342ae13d9d4c6c87f71c7e469
keepalived-ipfailover git f1330f6f sha256:d3b01105573a124d15224bbcb885caca237b48976aabcad57e6cc26af62df1fa
kube-rbac-proxy git a805ba5e sha256:1a04043b009a0a8301b0042b68675f57415e88c0d3555f1d6812036675cf5ccd
kube-storage-version-migrator git 596745ce sha256:f51e88cec281a2f8c35ab77b101f2e37b1290a07f5ef8cc589cd9a3c5b798b53
libvirt-machine-controllers git b6e14eab sha256:643548eb121a61460ccaab45d180d555cc39dd108c20bd233a181becb9204663
machine-os-content sha256:07842d1df6ba61422233a443bfa2a427c2c574907e37ae47bb971dd42a053540
multus-networkpolicy git 643fdaf6 sha256:e70c3c44ae6610287bec3919fb656d68123672e4ae30672980e0e99c30342441
multus-route-override-cni git 523b7904 sha256:2e806505d3ea5a09f2b8c2a4c594f6c7e215d30624ec491f5feafeb25d5948e9
nutanix-machine-controllers git a94eb77c sha256:e6cf42efd05a6790d46aac12720c1d6d7c12be4ea34e5643de72e8d028c905fd
oauth-proxy git aad1b28f sha256:ed935e0d1b157626f694af08452be94ac29f28163863769fb50f16747000e91d
oauth-server git 8d80088e sha256:856cc7c0e05b0d42c0512c97bad1b5bb121940a908570dde94bc37a97c18c51b
openshift-state-metrics git 1a7a5dcb sha256:1511d873020fcef543a1732b5d92e8dca5a83745f4cfefd54851d6851ebf95df
ovirt-machine-controllers git 5a93d94c sha256:5b3c1ad170317b850746226bda49b32ba6ce81101ba25f498d83c187dee75109
powervs-cloud-controller-manager git 8ace6e94 sha256:442f7b829ce18cd718625c69a2df15c21efc7513ae083e76088f0c51a408dc0e
powervs-machine-controllers git 76649b32 sha256:c92270186abce86510f0b4aa9ea6d1a9d956a5198b1934634bf71e81dcdba482
prom-label-proxy git af12fbc4 sha256:a2fe963b6cc36a9ebfe465863259336d7175eabc8d98d19ab9189872ef5f44af
prometheus-alertmanager git 05cfc390 sha256:51ad398ddffe0bd53573bf83a7b948b77a732e3bff5acb2f5c99c350b163cb95
service-ca-operator git 0899d112 sha256:0ad8a1e6375d18f07b8868cb6b8b27daad6236570f0daaf8ea616499da3abf08
vsphere-cluster-api-controllers git f67d1d02 sha256:58ada7e910e76807931b8f79a79409471ecbe11b53dd16bda6c12aaba4943024
vsphere-problem-detector git 5910f330 sha256:209e8701c08883b64ca27f9e27c6093e9795bea14abdda7488a792497933824f

agent-installer-api-server

Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
MGMT-11799: change all ‘go get’ commands (#4887) #4887
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update OWNERS to match master branch (#682) #682
CVE-2022, OCPBUGS-15068: 21235 github.com/Masterminds/vcs command inj (#681) #681
Remove jira tickets prefix requirements (#596) #596
Full changelog

agent-installer-node-agent

Updating ose-agent-installer-node-agent images to be consistent with ART (#381) #381
Full changelog

alibaba-cloud-controller-manager

Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #19
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #59
Full changelog

apiserver-network-proxy

OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
remove alvaroaleman and ironcladlou #28
Updating ose-apiserver-network-proxy images to be consistent with ART #26
Updating ose-apiserver-network-proxy images to be consistent with ART #23
Switch Dockerfile build to a static golang build #24
Full changelog

aws-ebs-csi-driver

OCPBUGS-19069: Volume unmount repeats after successful unmount, preventing pod delete #234
OCPBUGS-12932: 4.11: Bump golang.org/x/text #227
OCPBUGS-4185: Fix nodeService.getVolumesLimit() adding more instance #213
OCPBUGS-1749: UPSTREAM: 1398: Add resolver to handle custom endpoints #209
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #266
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #57
Bug 2108021: Fix panic when accessing nil machine annotations map #47
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

bug OCPBUGS-2003: .dockerignore: enable OSBS2 builds #38
Updating ose-azure-cloud-node-manager images to be consistent with ART #28
Full changelog

azure-disk-csi-driver

Bug 2112266: UPSTREAM 1367, 1409: Update max data disk count table #30
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #96
OCPBUGS-7987: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #71
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #42
Full changelog

azure-file-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #72
Bug 2105972: disable VHD disk feature #35
Full changelog

azure-machine-controllers

OCPBUGS-14012: Add user defined tags to Azure NIC resources #70
OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
OCPBUGS-2501: Update azure instance types cache #37
Bug 2109487: make Azure instance types case-insensitive #29
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-18545: CORS-2445: GCP: Add osImage to the install config #7468
OCPBUGS-16779: bump RHCOS 4.11 bootimage metadata to 411.86.202308081056-0 #7424
OCPBUGS-17246: azurestack: do not use gen2 images #7393
OCPBUGS-16915: [release-4.11] azure: skip LB creation when not needed #7372
OCPBUGS-16353: ic: azure: validate diskTypes in AzureStack #7341
OCPBUGS-17002: GCP: add europe-west12 region to the survey as supported region #7377
OCPBUGS-5708: hold bootkube service until bootstrap has pivoted #6759
OCPBUGS-13104: openstack: Add netcat to the Installer image #7163
OCPBUGS-14288: baremetal: Extra time for provisioning interface #7214
OCPBUGS-12750: [Alibaba] update the bandwidth value of EIP #7132
OCPBUGS-11663: AWS - Remove ACLs from s3 ign #7085
OCPBUGS-10594: [release-4.11] aws: bump aws-sdk-go version #7000
OCPBUGS-7530: bump RHCOS 4.11 bootimage metadata #6875
OCPBUGS-5665: CVE-2021-4238: goutils: update for randomness fix #6765
OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
OCPBUGS-4720: GCP: Add me-west1 region #6690
OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
OCPBUGS-4398: update golang.org/x/crypto #6652
OCPBUGS-3023: GCP: Add missing regions #6542
OCPBUGS-4325: gcp: fail during validation if service usage is not enabled #6647
OCPBUGS-4325: Service Usage API is required, not optional #6642
OCPBUGS-4081: OpenStack: Force JSON content-type in Swift #6625
Bug 2105331: Switch to perform normal marshalling with unknown fields #6102
OCPBUGS-378: UPI image download govc rate limit failure #6246
OCPBUGS-2983: Azure: Fix DiskEncryptionSet regex validation #6537
OCPBUGS-1346: OpenStack UPI: Create server group for Computes #6351
Bug 2101015: go getter update for terraform & terraform providers #6411
OCPBUGS-1242: Add PowerVS zone mon01 support #6341
OCPBUGS-536: vSphere - enable steal time accounting #6260
BUG 2117368: Add AWS S3 Bucket Permissions #6216
OCPBUGS-1876: download ‘aliyun’ #6377
OCPBUGS-562: bump RHCOS 4.11 bootimage metadata #6459
OCPBUGS-1349: OpenStack: Lift validation for 14 chars cluster names #6355
Bug 2107153: Make azure baseDomainResoureGroup optional for private c… #6119
OCPBUGS-759: Extend user tags limit to 25 based on AWS limits for 4.11 release #6303
Revert “[release-4.11] OCPBUGS-1157: Add depends to enforce order for azure terraform dependencies” #6344
OCPBUGS-1157: Add depends to enforce order for azure terraform dependencies #6333
OCPBUGS-455: vsphere: fix default disk type when not speficied #6256
Bug 2104825: Remove unnecessary SG rule #6092
Bug 2112928: Fix validation errors for instance type #6190
OCPBUGS-433: nutanix: allow creating manifests without Prism Central connection #6251
Bug 2115807: data/data/coreos: update FCOS to 36.20220716.3.1 #6204
Bug 2117279: bump RHCOS 4.11 bootimage metadata #6226
OCPBUGS-365: Updating ose-baremetal-installer images to be consistent with ART #5897
Bug 2118514: [4.11] Download yq in upi installer containers #6225
Bug 2106014: Allow setting bootstrap kubelet ip #6110
Updating ose-installer-artifacts images to be consistent with ART #5951
Bug 2110482: vsphere installconfig: use full dc path in network validation #6160
Full changelog

baremetal-machine-controllers

Updating baremetal-machine-controller images to be consistent with ART #165
Full changelog

baremetal-operator

OCPBUGS-17955: Trigger reconcile on Secret change #299
OCPBUGS-11612: allow namespace to continue with terminating when deprovisioning at t… #262
OCPBUGS-8298: cve: 2022-21698: upgrade prometheus/client_golang #256
Updating ose-baremetal-operator images to be consistent with ART #225
Full changelog

baremetal-runtimecfg

OCPBUGS-18815: Move haproxy firewall rule check earlier in loop #273
OCPBUGS-18096: Don’t render config with incomplete unicast peer list #269
OCPBUGS-15539: Use machine-config state instead of comparing roles #263
OCPBUGS-13544: Verify kubelet version in upgrade check #250
OCPBUGS-11297: fix isUpgradeStillRunning() #233
OCPBUGS-673: Apply ipv6 bind check to non-VIP case too #192
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-16059: mcs cert: account for environments that use IP directly #1504
OCPBUGS-16195: reboot: set ignition version to 3.1 #1510
OCPBUGS-4812: [release-4.11] New-App Using Git via SSH #1283
handle the error case of node retrieval while waiting for reboot #1486
bring some cert rotation helpers back into 4.11 [fix unit-tests] #1479
OCPBUGS-10772: bump repo sclorg/s2i-ruby-container location for newapp test #1380
OCPBUGS-8205: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1360
Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect #1230
OCPBUGS-2766: pkg/cli/login: Warn, but do not fail, on surprise project-list errors #1274
OCPBUGS-1497: oc adm logs: generate proper path for static pods #1239
Bug 2117823: release: extract ccoctl #1220
Bug 2110567: oc adm inspect: check a resource exists before its inspection #1222
Bug 2107003: Set completion function for get command #1206
Bug 2103638: Use from-release as based image when base digest is invalid #1196
Full changelog

cloud-credential-operator

OCPBUGS-13792: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #540
OCPBUGS-11708: ccoctl: Enable public anon read access to default OIDC S3 bucket #530
OCPBUGS-2801: Backport –credentials-requests-dir for ccoctl gcp delete. #506
OCPBUGS-2883: Make ccoctl use regional STS endpoint by default #503
OCPBUGS-2278: Add ccoctl support to create OIDC endpoint with private S3 bucket #500
Update OWNERS to reflect reality. #496
Bug 2118680: Refactor Nutanix plugin to use external credentials structs #487
Full changelog

cloud-network-config-controller

OCPBUGS-13240: pull project name from subnet uri #109
Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
OCPBUGS-3932: Add assigned egress ips into capacity #78
OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
OCPBUGS-4528: AWS: build temp credentials file from AWS key and secret #84
OCPBUGS-4167: Run azure operations in sequence #79
OCPBUGS-4163: AWS: Fix race in IP address assignment code #83
Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig #75
OCPBUGS-4233: Updating ose-cloud-network-config-controller images to be consistent with ART #81
OCPBUGS-3089: Update OWNERS #71
OCPBUGS-1846: Add resolver to handle custom endpoints #63
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #221
Updating vertical-pod-autoscaler images to be consistent with ART #222
OCPBUGS-2046: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #244
Full changelog

cluster-baremetal-operator

OCPBUGS-5628: Update dependencies #321
Updating ose-cluster-baremetal-operator images to be consistent with ART #264
OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
OCPBUGS-1762: add a workaround for a NetworkManager issue #298
OCPBUGS-747: Use machines instead of nodes to detect masters #307
OCPBUGS-1511: [release-4.11] Fix a few papercuts #290
OCPBUGS-747: do not rely on string “master” to be in BMH names #283
Full changelog

cluster-bootstrap

OCPBUGS-14387: Update dependencies and image #92
Add API team to the OWNERS #95
Full changelog

cluster-capi-operator

Bug 2107564: Add E2E for GCP #66
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-5781: Try to limit groups for the REST mapper discovery #216
Bug 2110524: Improve decision logic around syncing cloud config #198
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-19513: Fix readOnlyRootFilesystem for 4.11 #165
Full changelog

cluster-dns-operator

OCPBUGS-2528: keep dns-default annotations intact #349
OCPBUGS-2050: Reconcile the DNS namespace #346
OCPBUGS-2112: [release-4.11] Backport Address e2e failures due to pod security #347
Full changelog

cluster-etcd-operator

OCPBUGS-18283: reset snapshot default counts to avoid file already lo… #1103
OCPBUGS-9908: Garbage collect grafana-dashboard-etcd #1022
OCPBUGS-9967: increase live/ready timeout and failure thresholds #1025
OCPBUGS-7720: set default timeouts in etcdcli #1007
OCPBUGS-7510: [release-4.11] fail early on missing node status envs #1006
OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
OCPBUGS-2919: update prometheus alerts #957
OCPBUGS-2113: Add niceness to important etcd processes #943
OCPBUGS-1607: increase etcdGRPCRequestsSlow thresholds #934
OCPBUGS-1354: fix cert rotation on IP changes #931
OCPBUGS-685: preserve log message on failures #924
Bug 2108595: Cherrypick move etcd monitoring dashboard… #893
Bug 2107070: etcd-metrics container is flooding logs #889
Full changelog

cluster-image-registry-operator

OCPBUGS-9921: bump aws-sdk-go #848
add myself to OWNERS #831
OCPBUGS-6907: OpenStack: Add support for Proxy #836
OCPBUGS-5778: swift: Retry connecting to OpenStack #830
OCPBUGS-1847: bump aws-go-sdk, adding support for me-central-1 #801
Bug 2110958: Use actualDaemonSet for SetDaemonSetGeneration #795
Bug 2110958: Add progressing condition for node-ca daemon set #792
Full changelog

cluster-ingress-operator

OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #942
OCPBUGS-3560: Allow PROXY protocol for “Private” strategy #914
OCPBUGS-8000: certificate-publisher: Don’t publish extraneous certificates #894
OCPBUGS-3049: Update CRLs when they expire #853
Bug 2110528: Fix another issue with route status clearing race condition caused by not validating generation id #813
Bug 2108214: Fix route status clearing race condition caused by using the cache #807
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #1448
OCPBUGS-2938: Duplicate prometheus rules for API SLOs after upgrade #1397
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
OCPBUGS-2160: [release-4.11] serviceaccountissuer: fix case when default value is being used and not trusted after change #1394
OCPBUGS-2199: [release-4.11] Wire support for trusted service account issuers #1386
Full changelog

cluster-kube-cluster-api-operator

Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #703
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
OCPBUGS-4304: resources.requests for operator pod #667
OCPBUGS-826: gc watcher should close connections after throwing away a client #654
Bug 2118282: Make KCM-O conditionally dependent on monitoring stack availability + reconcile #653
Bug 2114580: add runbook urls to KCM-o alerts #644
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7756: Guard controller: set the readiness probe endpoint explicitly #464
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #426
Bug 2117746: Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #435
Full changelog

cluster-machine-approver

OCPBUGS-10382: ignore case when checking csr hostnames #181
Full changelog

cluster-monitoring-operator

OCPBUGS-11759: add startup probe for prometheus-adapter #1947
OCPBUGS-11465: jsonnet: Add prometheus container in UWM #1938
Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
OCPBUGS-4640: Increase startupProbe for prometheus #1845
OCPBUGS-4030: test: increase timeout when checking remote write metrics #1821
OCPBUGS-1790: Pass user-defined Alertmanager service in shared configmap #1781
OCPBUGS-1551: Dedicated kubelet ServiceMonitor for prometheus-adapter #1774
Bug 2111345: go.mod: update openshift-api to current release-4.11 tip #1755
Bug 2103127: fix alert controllers when not in techpreview #1709
OCPBUGS-516: [release-4.11] Give precedence to CMO config map proxy config #1743
Bug 2108595: Removes etcd related dashboards from CMO #1723
Bug 2109731: increase alertmanager startupProbe failure threshold #1726
Full changelog

cluster-network-operator

OCPBUGS-13661: AUTH: update cluster-reader to include k8s.ovn.org #1811
OCPBUGS-11763: HyperShift: Add POD_NAME env to ovnkube-node #1780
OCPBUGS-12277: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1789
OCPBUGS-10487: Enable configuration of node healthz server on ovnkube #1742
OCPBUGS-5954: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1686
OCPBUGS-6993: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1702
OCPBUGS-3462: CNI binary copy should account for the possibility of symlinks [backport 4.11] #1616
OCPBUGS-6920: Configure ignored namespaces into multus-admission-controller #1698
OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression #1638
Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation #1551
OCPBUGS-3911: SDN: /var/run mount cleanup #1631
Bug OCPBUGS-1075: HyperShift: Differentiate resources deployed by different CNO instances #1555
Bug OCPBUGS-1367: Hypershift: Allow configuring hostname and labels on the route #1559
OCPBUGS-393: Setting disableNetworkDiagnostics: true does not persist when network-operator pod gets re-created #1530
Bug OCPBUGS-500: Kuryr: Bump timeoutSeconds for livenessProbe #1535
Bug 2096456: Add init container to ensure that Status.podIP is set before postStart hooks run #1512
Full changelog

cluster-node-tuning-operator

Merge #548
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
Full changelog

cluster-openshift-controller-manager-operator

Bug 2111901: Add namespace and RBAC needed for ingress-to-route #251
Bug 2111992: BUILD-417: Adding leader election leases #252
Full changelog

cluster-policy-controller

OCPBUGS-5787: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #96
Full changelog

cluster-samples-operator

OCPBUGS-15758: Update Jenkins and Jenkins Agent Base image versions #507
OCPBUGS-7330: When setting allowedRegistries urls the openshift-samples operator is degraded #490
OCPBUGS-2092: Use X.Y floating tags for golang #467
Full changelog

cluster-storage-operator

OCPBUGS-689: correct sc error messages for ibm and alibaba platforms #313
Bug 2102576: DefaultStorageClassController reports fake message on azure and openstack #298
Bug 2109205: HTTPS_PROXY ENV missing in some CSI driver operators #302
Full changelog

cluster-version-operator

OCPBUGS-5011: Backport SecurityContext reconciliation behavior #940
OCPBUGS-13043: pkg/cvo: reset payload load status #935
OCPBUGS-10671: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #915
OCPBUGS-5882: Set upgradeability check throttling period to 2m #885
OCPBUGS-2293: Allow unknown capabilities during payload load and implicit enablement checking #854
OCPBUGS-1251: Add admin-gate ack-4.11-kube-1.25-api-removals-in-4.12 #836
OCPBUGS-306: pkg/cvo/sync_worker: Trigger new sync round on ClusterOperator versions[name=operator] changes #826
Bug 2114602: pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #811
Bug 2115564: pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #815
Full changelog

console

OCPBUGS-19359: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #13079
OCPBUGS-17375: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13071
OCPBUGS-15562: only copy workload annotations to debug pod #12956
OCPBUGS-15532: visiting Configurations page returns error Cannot read… #12953
OCPBUGS-14004: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12845
OCPBUGS-14413: Modified git import flow module to handle create button enable-disable issue #12874
OCPBUGS-13214: the name of the object (imagestream-name) does not match the name on the URL (deployment_name) #12835
OCPBUGS-12284: Fix to use and set correct secretReference for build-config triggers #12762
OCPBUGS-13864: delete associated pipeline, triggertemplate and eventlistener when deleting app #12837
OCPBUGS-13730: Show type of sample on the samples view #12826
OCPBUGS-13746: PipelineRun templates must be fetched from OpenShift namespace #12827
OCPBUGS-12279: Do not show builder ImageStreams without sampleRepo as samples #12759
OCPBUGS-12959: update the default pipelineRun template name #12790
OCPBUGS-12231: Get the Event type value from the latest PLR of the Repository #12749
OCPBUGS-10708: delete application should delete all part-of resources #12772
OCPBUGS-13012: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12793
OCPBUGS-10613: add subject kind dropdown in the project access form #12663
OCPBUGS-11580: In DeploymentConfig both the Form view and Yaml view are not in sync #12714
OCPBUGS-6984: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12523
OCPBUGS-7949: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12602
OCPBUGS-6954: Fix to show correct help texts for each git repo status error code #12518
OCPBUGS-7764: Fix crash when pinnedResources is null #12581
OCPBUGS-2916: Storage -> PVC -> upload data, does not support source reference #12221
OCPBUGS-6687: Hide silent switch for alerting rule if no associated alerts are present in devconsole #12479
OCPBUGS-2844: [OKD/nanokube] Fix NPE when project or build status is not defined #12207
OCPBUGS-12243: disable operator-install-single-namespace.spec.ts to solve CI issues #12751
OCPBUGS-7950: Repositories list does not show the running pipelinerun as last pipelinerun #12603
OCPBUGS-7494: fix broken pipeline secret #12569
OCPBUGS-7789: [4.11.z] Fix kubevirt-console tests #12325
OCPBUGS-7539: Fix rerender loop/crash when bindable-kinds is found but has no status #12570
OCPBUGS-7043: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12532
OCPBUGS-7127: Editing Pipeline in the ocp console should show correct information #12540
OCPBUGS-6879: Remove refs-heads from the branch name for Repository pipelineRun row #12509
OCPBUGS-7069: PipelineRun task status overlaps status text #12534
OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages #12514
OCPBUGS-6989: Don’t proxy CORS response headers #12524
OCPBUGS-5459: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12417
OCPBUGS-6689: Fix NPE when displaying CSV with incomplete information #12478
OCPBUGS-1727: Allow regular users to access debug pods #12100
OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
OCPBUGS-4786: Fix for initial showing of topology contents #12311
OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
OCPBUGS-2443: Monitoring: Fix help popovers #12173
OCPBUGS-2716: Update dependencies to the registry library and devfile parser #12186
OCPBUGS-3300: check that user can patch console operator config in s… #12240
OCPBUGS-2447: Add checks for pods in hpaPodRingLabel #12174
OCPBUGS-1790: Use Alertmanager services for user-defined alerts from config #12104
OCPBUGS-2077: Find latest pipeline run without firehose selector #12144
OCPBUGS-2515: Change annotation to be used for fake helm repositories #12182
OCPBUGS-2014: Use local test data to mock a devfile registry #12137
OCPBUGS-2451: updates test id for 3scale #12175
OCPBUGS-1984: fix helm version dropdown entries #12135
OCPBUGS-526: improve bug report links #11965
OCPBUGS-1974: Use displayname for PHCR in the catalog page #12130
OCPBUGS-1782: Handle fake helm chart repository #12107
Bug 2109573: Fix operand affinity form field #11861
OCPBUGS-1419: fetch shared resource imagestreams based on labels instance or name #12056
OCPBUGS-1786: Fix devfile registry assertion #12108
OCPBUGS-1523: Show already loaded catalog items after a timeout (3sec) #12070
OCPBUGS-1410: mock call to /api/devfile in e2e #12020
OCPBUGS-721: show git icon in repository details page based on git provider #12005
OCPBUGS-1030: Update registry library dependency to pick up proxy support #12028
OCPBUGS-1070: Update ODC owner files #11936
OCPBUGS-524: reset ErrorBoundary state on location change #11968
Bug 2109887: remove redundant model check to prevent tab reloading #11899
OCPBUGS-185: Search doesn’t show all entries when name filter is cleared #11975
Bug 2102335: Implement dynamic plugin dependency resolution #11901
OCPBUGS-541: Input values in Instantiate Template are disappeared randomly in the developer console #11982
Bug 2116265: fix failed PipelineRun log texts color in light mode #11941
Bug 2115561: fix MultiColumnField header alignment used for Pipeline parameters #11935
Bug 2116288: Fix Monitoring Alert decorator icon color in Topology #11942
Bug 2106755: fix broken update server link #11830
Bug 2113019: Update pod YAML sample for restricted pod security admission policy #11916
Bug 2113962: - Edit PodDisruptionBudget page sometimes takes user to not synced YAML view #11918
Bug 2107777: Added separate reducers for status and title for pipeline status #11842
Bug 2109052: Unset the overflow to display sub menu content #11854
Bug 2107871: Added the spacing between advanced options #11843
Bug 2115315: fix helm readme bug #11933
Full changelog

console-operator

OCPBUGS-11343: Distinguish between route conditions and remove the old ones #745
OCPBUGS-11969: Changing field on any of routes in the openshift-console namespace wont trigger sync loop #753
OCPBUGS-5518: Deleting downloads deployment should not fail if already deleted #715
Bug 1770297: State that odo is comunity supported #700
OCPBUGS-1790: Retrieve user-defined Alertmanager services from shared configmap #685
Bug 2117640: Update permission for projecthelmchartrepositories with an aggregator role #671
Bug 2102335: Pass RELEASE_VERSION envar into the console pod #679
Full changelog

coredns

OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6684: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #176
OCPBUGS-6046: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #166
Full changelog

csi-driver-manila-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #200
OCPBUGS-18782: Don’t cache OpenStack client #203
OCPBUGS-8067: Fix SCC admission failure race during initial deployment #188
OCPBUGS-10605: Bump go.mongodb.org/mongo-driver to v1.5.1 #177
OCPBUGS-7278: Address CVE-2022-41717 #168
Full changelog

csi-livenessprobe

OCPBUGS-13820: Bump gRPC from 1.38.0 to 1.49.0 #42
Full changelog

docker-builder

OCPBUGS-15645: Add the git-lfs package #354
OCPBUGS-11401: manage-dockerfile: use the original form of HEALTHCHECK #339
Bug 2118375: Add support for BUILDAH_QUIET environment variable #308
Full changelog

docker-registry

OCPBUGS-11366: bump docker-distribution #367
OCPBUGS-9921: bump aws-sdk-go #364
OCPBUGS-1847: bump aws-go-sdk, adding support for me-central-1 #349
OCPBUGS-749: Keep OCI image configs when hard prune #343
Full changelog

driver-toolkit

Adding rpm-build to the Dockerfile (#119) #119
Adding kernel-rpm-macros to the Dockerfile. (#108) #108
Full changelog

etcd

OCPBUGS-16791: [4.11] Rebase openshift/etcd to 3.5.9 #210
Update owners #186
Updating ose-etcd images to be consistent with ART #158
OCPBUGS-5876: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #178
OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
OCPBUGS-947: Rebase openshift/etcd 4.11 onto 3.5.5 #155
Full changelog

gcp-cloud-controller-manager

Updating ose-gcp-cloud-controller-manager images to be consistent with ART #14
Full changelog

gcp-machine-controllers

OCPBUGS-4579: refactor restartPolicyToBool function #30
OCPBUGS-4532: Set sync period for Machine controller #27
Full changelog

gcp-pd-csi-driver

OCPBUGS-11000: UPSTREAM: 988: Simplify node backoff logic #34
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #83
Full changelog

haproxy-router

OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #492
Full changelog

hyperkube, pod

OCPBUGS-18843: UPSTREAM: <carry>: Force using host go always and use host libriaries #1697
OCPBUGS-17189: Update to Kubernetes 1.24.16 #1672
OCPBUGS-8736: UPSTREAM: <drop>: bump apiserver-library-go #1627
OCPBUGS-15361: Bump to k8s 1.24.15 #1607
OCPBUGS-14746: [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1606
OCPBUGS-13166: Bump to k8s 1.24.14 #1588
OCPBUGS-11314: UPSTREAM: <carry>: Force using the go tooling from the system #1536
OCPBUGS-11314: Bump to k8s 1.24.12 #1529
OCPBUGS-10215: Fix mounted volume expansion tests #1509
OCPBUGS-7079: Bump to k8s 1.24.11 #1500
OCPBUGS-6683: add message about possibly working with restricted SCC #1459
Bug 2117679: UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1343
OCPBUGS-1991: UPSTREAM: 110939: don’t quota events.k8s.io events by default #1379
OCPBUGS-3174: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1408
Bug 2099800: bump to k8s 1.24.6 #1381
OCPBUGS-1540: UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1375
[release 4.11] Bug 2117424: UPSTREAM: <carry>: Remove reserved CPUs from default set #1351
Bug 2104344: Fix resizing of ephemeral volumes #1314
Bug 2109270: UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() #1332
Full changelog

hypershift

OCPBUGS-11608: properly reconcile with user specified changes for in proxy configuration #2396
install: add flag to wait for HyperShift operator rollout #2370
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2352
cherry-pick #2006 #2028
Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
Add missing rbac for authentication reader #1822
update OLM catalogs to 4.11 #1786
Bug OCPBUGS-1367: CNO: Handle long OVN SBDB route hostnames #1747
Add rbac so route-to-ingress controller can do its leader election #1728
fix(oauth): Do not proxy IBM Cloud IAM endpoints #1723
Ingress endpoint #1667
Self image lookup: Retry on empty string #1695
Forward from main #1655
Full changelog

ibm-vpc-block-csi-driver

Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART #15
UPSTREAM: 93: bump golint for go 1.18 #28
OCPBUGS-1460: Add udev #19
Full changelog

insights-operator

OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) (#806) #804
OCPBUGS-15446: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#802) #788
OCPBUGS-7872: Collect info about monitoring pods pv (#773) #773
OCPBUGS-11818: update the cluster transfer interval to 12h (#765) (#766) #765
OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#739) #726
OCPBUGS-6783: Create gatherer for gathering machines. (#737) #737
OCPBUGS-3380: fix storage/ceph path structure (#698) #698
OCPBUGS-6025: operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) #719
OCPBUGS-5349: do not periodically update Available clusteroperator co… (#718) #718
OCPBUGS-2346: refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) (#689) #685
OCPBUGS-1355: update the DVO metrics gatherer (#664) (#677) #664
manifests/02-namespace: Explicitly clear run-level label (#676) #676
backport helm upgrade and uninstall metric (#662) #662
Gather status of the cephclusters.ceph.rook.io resources (#654) (#655) #654
Full changelog

ironic

OCPBUGS-13585: Add python-flask dependency #381
OCPBUGS-14654: Include fix to OCPBUGS-13335 in OCP 4.11. #380
OCPBUGS-13645: Bump python-sushy #369
OCPBUGS-7565: Adding dep on python3-werkzeug >= 2.0.3-4 #356
Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
OCPBUGS-4908: Update packages versions with latest available #336
OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
OCPBUGS-3674: Don’t save OS_ prefixed variables #318
Bug OCPBUGS-3478: Improve resiliency of eTag handling #314
OCPBUGS-4410: Remove RDO distribution configuration (finally fixes #46) #328
OCPBUGS-1972: Removed ServerName from VirtualHost Directives #306
OCPBUGS-2011: Backport improvements to iDRAC steps to OCP 4.11 #302
OCPBUGS-746: sync fixes for BIOS settings on SMC #297
OCPBUGS-528: Fix IRONIC_EXTERNAL_IP when TLS is used for virtual media #295
OCPBUGS-453: Update packages to latest bugfix #294
Bug 2110407: ignore case of mac address #285
Full changelog

ironic-agent

OCPBUGS-11438: Adding dep on python3-werkzeug >= 2.0.3-4 #74
OCPBUGS-5099: make coreos-installer output available in the logs #67
OCPBUGS-453: Update packages to latest bugfix #62
Full changelog

ironic-machine-os-downloader

Bug 2111636: libguestfs: error: download: /boot/loader/entries/ostree-1-rhcos.conf: No such file or directory #80
Updating ironic-rhcos-downloader images to be consistent with ART #73
Full changelog

ironic-static-ip-manager

OCPBUGS-14564: Flush addresses on provisioning interface with global scope only #38
Full changelog

kube-proxy, sdn

OCPBUGS-14305: fix possible concurrent map read/write #552
OCPBUGS-13917: save and delete the old egress network policy #544
OCPBUGS-13902: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #543
OCPBUGS-10853: Fix race in Egress IP Tracker start #522
OCPBUGS-8399: Initialize egress node monitoring struct with previous reachability status #513
OCPBUGS-7515: Handle race condition to setup default vnid flows #506
OCPBUGS-5926: Add node egress IP assignment resync #492
OCPBUGS-4607: pass ResourceVersion:0 for kube List() calls #479
OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
OCPBUGS-2105: fix network policy egress #464
Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 #477
OCPBUGS-668: Fix DNS endpoint hack to prefer local instead of forcing it #466
OCPBUGS-668: Fix bad DNS endpoint selection #456
Bug 2112353: setup network policy rules during pod creation to fix postStart hook #453
Full changelog

kube-state-metrics

OCPBUGS-4087: cherry-pick, do not expose ingress path metric when service is nil #85
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-14931: KuryrPort cleanup: Fix issue of subport not found #733
Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address #727
OCPBUGS-12840: Fix VIF revert on KuryrPort status update error #725
Bug OCPBUGS-1713: Cleanup KuryrPort when Pod is missing #694
Bug OCPBUGS-577: Fix unbound router_id variable while creating event #687
Updating kuryr-cni images to be consistent with ART #667
Full changelog

machine-api-operator

OCPBUGS-10719: [release-4.11] - manual cp #1057 - machines stuck in provisioned or provisioning #1141
OCPBUGS-11326: Fix empty component version #1133
OCPBUGS-10901: Block machine deletion if extra disks are attached #1131
OCPBUGS-8311: Short circuit misfiring #1124
OCPBUGS-8257: Append annotations from machine template spec to the node #1123
OCPBUGS-536: vSphere - enable steal time accounting #1081
OCPBUGS-955: Change “create” sequence with powering on the vm after clone #1064
Bug 2109193: Fix while setting default processor value for Power VS platform #1041
Full changelog

machine-config-operator

OCPBUGS-18075: Agent-based install process the container machine-config-controller will be oom #3882
OCPBUGS-11556: Prevent possible split-brain scenario with keepalived unicast #3667
OCPBUGS-11283: Wrap podman commands in a while loop #3657
OCPBUGS-9986: configure-ovs: fix mtu-migration cleanup #3607
OCPBUGS-10425: Remove hard requirement for the afterburn from early-running aws-related services #3615
OCPBUGS-8260: [release-4.11] backport cleanupDuplicateMC #3577
OCPBUGS-6002: There are not enough logs in case “oc extract” is stuck in mco first boot in mco first boot #3497
OCPBUGS-5694: 4.11 - remove goutils from dependency tree #3499
OCPBUGS-3507: On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3422
OCPBUGS-6622: controller: don’t render new MC until base MCs update #3511
OCPBUGS-4945: Do not allow empty system reserved values #3459
OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
OCPBUGS-3882: Sync controllerconfig anyway if daemon sync fails #3421
OCPBUGS-3807: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3419
OCPBUGS-3756: daemon: Stop setting I/O scheduler to bfq #3418
OCPBUGS-2730: Add ephemeral storage to kubelet system reserved args #3381
OCPBUGS-2091: [release-4.11] TRT-540: Add privileged label to infra namespaces #3346
OCPBUGS-1939: Create a drop-in file for cri-o’s add inheritable capabilities #3352
OCPBUGS-1099: Make sure there is a search domain in resolv.conf #3330
Bug 2110283: [release-4.11] daemon: Drop tuneableFCOSArgsAllowlist #3265
OCPBUGS-737: Pull container image as a separate step #3319
OCPBUGS-688: Adding day2 remote worker node requires manually approving CSRs #3305
OCPBUGS-509: Fix .ssh directory not owned by core when created by Machine Config D… #3307
Bug 2118586: on-prem: improvements on resolv-prepender #3287
OCPBUGS-197: daemon: Add a workaround for bug 2111817 #3292
Bug 2110737: Master node in SchedulingDisabled after upgrade from 4.10.24 -> 4.11.0-rc.4 #3267
Bug 2104510: [release-4.11] Update ose-machine-config-operator images to be consistent with ART #3229
Bug 2104687: drain controller: don’t skip the MCC pod drain #3234
Bug 2104386: Fix problem with retaining data in string array in piped while loop #3245
Bug 2103899: configure-ovs: clone inactive autoconnect slaves #3220
Full changelog

machine-image-customization-controller

OCPBUGS-5652: Update dependencies and explicit go 1.18 usage #77
OCPBUGS-3687: use host IPC for the agent container #70
OCPBUGS-529: mount /run/udev into the agent container #63
Updating ose-image-customization-controller images to be consistent with ART #47
Bug 2117594: Upgrade golangci-lint to 1.47.3 #59
Full changelog

machine-os-images

OCPBUGS-892: Update rhcos release browser url #22
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #63
OCPBUGS-9784: Client golang [backport 4.11] #60
OCPBUGS-6176: Configure ignored namespaces into multus-admission-controller #56
Full changelog

multus-cni

Updating multus-cni images to be consistent with ART #155
OCPBUGS-9863: Multus sync to OCP 4.11 mar-21-2023 #152
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-5954: Denormalize IP name before checking if pod is alive [Backport 4.11] #182
OCPBUGS-13241: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.11] #132
OCPBUGS-11067: respect requested allocation range when exluding ranges [backport 4.11] #124
OCPBUGS-3942: Excluded ranges bug (#282) #104
OCPBUGS-1658: ip-reconciler Add all non default interfaces to Pod IP list [backport 4.11] #97
Full changelog

must-gather

OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
Full changelog

network-interface-bond-cni

Bug 2112297: Backport “mac duplicates” #41
Full changelog

network-metrics-daemon

Update golang.org/x/text to 0.7.0 (#67) #67
Full changelog

network-tools

Updating ose-network-tools images to be consistent with ART #61
Full changelog

oauth-apiserver

OCPBUGS-2140: [release-4.11] bump kube to 1.24.4 to fix group sync #84
Updating ose-oauth-apiserver images to be consistent with ART #69
Full changelog

oc-mirror

changes the OWNERS file (#647) #647
fix: remove release architecture validation at the config level (#504) #504
Full changelog

openshift-apiserver

OCPBUGS-4340: fix printer panic #336
OCPBUGS-2809: Revert “projects: add rw mutex to auth cache” #327
Full changelog

openshift-controller-manager

Bug 2111901: Split route controller #232
Bug 2117746: [release-4.11] Rebase k8s 1.24 #233
Updating ose-openshift-controller-manager images to be consistent with ART #217
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #131
Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
Full changelog

openstack-machine-api-provider

OCPBUGS-10954: machineset_controller: Stop caching clouds credentials #67
OCPBUGS-7322: Address CVE-2022-41717 #57
Full changelog

openstack-machine-controllers

OCPBUGS-2626: Ensure network defs without subnet follow noAllowedAddressPairs #248
OCPBUGS-1890: Apply noAllowedAddressPairs on intended subnets only #243
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-18513, RHIBMCS-169: Copied csv listing backport #560
OCPBUGS-16075: fix dynamic conversion webhook #536
Introduce DOWNSTREAM_OWNERS file #542
OCPBUGS-16126: Catalog Pod Startup Probe Timeout #509
Allow cpb to be statically compiled / exempt from FIPS compliance #513
OCPBUGS-12263: cherry-pick pull request refactor FBC caching (#1051) f… #482
OCPBUGS-3876: Order an operator CR’s status.Component.Refs array (#2880) #413
OCPBUGS-4446: fix service account token secret reference (#2862) #416
OCPBUGS-1556: Cleanup conversion webhooks when an operator is uninstalled #388
OCPBUGS-1326: Opm serve cmds #382
OCPBUGS-1104: Package Server Manager should enforce expected csv values #381
Bug OCPBUGS-828: backport opm serve caching functionality (and bugfix) + opm serve leaving orphan tmpfiles #375
Bug 2107045: Only update namespaces when OperatorGroup labels need to change. (#2809) #341
Bug 2114574: use env var for OCP version instead of clusterversion status #347
Bug 2117324: concurrent write bug fix #355
Bug 2106772: Update containerd version #339
Full changelog

operator-marketplace

OCPBUGS-697: [release-4.11] Dockerfile.okd: include custom OperatorHub manifest #485
Full changelog

ovirt-csi-driver

OCPBUGS-515: CSI provisioned disks are preallocated #115
Full changelog

ovirt-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #122
Full changelog

ovn-kubernetes

OCPBUGS-12819: Handle k8s watcher restart scenario #1806
OCPBUGS-16691: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1779
OCPBUGS-15731, OCPBUGS-15745: Improve syncNodes to remove stale data #1734
OCPBUGS-15876: Remove non-existing functions test. #1740
OCPBUGS-16003: Fix stale SNAT entries for completed pods #1751
OCPBUGS-12791: : Delete equivalent ACLs when searching by predicate. #1666
OCPBUGS-11110: [release-4.11] Batch potentially big transaction on egress firewall ACLs migration #1629
OCPBUGS-10734: Bump OVN to 22.12 and turn off neighbour response in router options. #1599
OCPBUGS-10688: Fix leak in service controller cache #1598
OCPBUGS-11035: [release-4.11] Handle Completed pods deletion #1616
OCPBUGS-2303: [4.11] Stale chassis are not removed #1310
OCPBUGS-10486: [release-4.11] node: add node healthz server for cloud load balancers #1594
OCPBUGS-8510: [release-4.11] Don’t recreate clusterPGs and clusterRtrPGs unless needed #1560
OCPBUGS-7858: [release-4.11] Delete stale egress ip snat entries by node #1543
OCPBUGS-6640: Drop in-cluster traffic towards svcCIDR at wrong port #1491
OCPBUGS-7319: Bump OVN to 22.09, enable session affinity timeout #1522
OCPBUGS-5245: Move check_pkt_larger to gateway router ports #1505
OCPBUGS-7010: [release-4.11] Fix Egress FW ACL rules in dualstack mode #1507
OCPBUGS-6813: [release-4.11] Ensure loadbalancer cleanup doesn’t fail #1498
OCPBUGS-5928: [release-4.11] Fix egress firewall to allow inbound connections in both gw modes #1478
OCPBUGS-5766: egressip: fix test data race accessing podAssignment cache #1471
OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
OCPBUGS-1720: Backport changes to ovnkube-trace #1436
OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
OCPBUGS-4475: Handle expired entry while handling dns update #1417
OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
OCPBUGS-4167: EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add #1404
OCPBUGS-3908: [release-4.11] Support proper parsing of IPs with leading zeros #1393
OCPBUGS-2554: Fix UpdateService healthport checks #1389
Bug OCPBUGS-3077: [release-4.11] Fix netpol races #1353
OCPBUGS-3830: Adjust ovs bundle timeout #1383
OCPBUGS-2222: Don’t add ITP specific gw setup for DPU mode #1305
Updating ose-ovn-kubernetes images to be consistent with ART #937
OCPBUGS-2745: Fixes SNAT-ing Logic for EgressIPs #1334
OCPBUGS-2659: Add logging verbosity to configuring OVN logs #1325
OCPBUGS-1739: pods: deleteLogicalPort should not fail when ls is gone #1290
OCPBUGS-1955: 4.11 multihop #1296
OCPBUGS-1750: Trim ACL names according to RFC1123 #1282
Bug 2112100: Forward routes for link-local addresses to vNIC in Windows #1216
OCPBUGS-1552: Dockerfile: bump to openvswitch2.17.0-37.4.el8fdp #1272
OCPBUGS-772: Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) #1259
OCPBUGS-1012: Bump libovsdb to pick up fixes for optional values #1266
Bug 2111548: Remove conntrack entries after rules #1218
OCPBUGS-658: [release-4.11] pods: deleteLogicalPort should not fail when port is already gone #1256
Bug 2109642: two hybrid overlay fixes #1209
Bug 2115481: master: don’t list node pods on add/update unless necessary #1232
Bug 2118717: [release-4.11] Fix race when adding and removing pod with same name #1247
Bug 2113860: reconcile-node-lbs #1226
Bug 2105444: ITP=local, host->svc case failure #1196
Full changelog

prometheus

OCPBUGS-2640: Fix ‘invalid magic number 0’ bug (#11338) #143
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7590: Fixes ThanoRuler StatefulSet re-creation bug #218
Full changelog

prometheus-node-exporter

OCPBUGS-1723: Fix a bug of metric format on AMD EPYC platforms #108
Full changelog

telemeter

OCPBUGS-1007: go.mod: update github.com/gogo/protobuf to v1.3.2 #421
Full changelog

tests

OCPBUGS-15942: remove references to registry.centos.org #28036
OCPBUGS-15151: Move from registry.centos.org to quay.io #27985
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27961
OCPBUGS-12962: Add (optional) dual-stack tests to the CNI certification test suite #27904
OCPBUGS-10215: Bump(openshift/kubernetes): to get fix for resizing flake #27796
OCPBUGS-7727: remove reference to old guard pods #27735
OCPBUGS-7319: Unskip service session affinity tests #27722
OCPBUGS-6851: [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade #27685
OCPBUGS-5091: Add Kuryr exception to “pods should successfully create sandboxes” test #27621
SPLAT-856: [release-4.11] include storage and must-gather tests in expectedTestCount #27494
OCPBUGS-3819: Add bond cni test #27554
OCPBUGS-2616: Fix s2i ruby test that relys on rack #27480
disruption checking is disabled for prior releases because we lack a good baseline #27468
Bug 2108978: pkg/monitor: wait for Prometheus sidecars to be ready #27313
Bug 2104203: revert: no longer needed logic for rt kernel #27290
BUG 2103700: test/extended/router: Drop host lookup for gRPC HTTP/2 h2spec tests #27287
OCPBUGS-772: [release-4.11] Fixes OVN ACL audit log parsing #27390
Bug 2110723: [4.11] test: allow -f to match tests for any test suite #27300
Bug 2106942: use multi-arch ldap and multicast test images #27305
Full changelog

thanos

OCPBUGS-18299: Update exporter-toolkit to 0.7.3 #116
OCPBUGS-14559: require at least TLS 1.2 instead of 1.3 #113
Updating thanos images to be consistent with ART #99
OCPBUGS-3764: Fix local-test for go 1.18 #87
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-2058: fix .dockerignore to satisfy OCP specific requirements #26
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7404: fix for nil user session (#1859) #58
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5790: Allow cluster to be upgraded even if using multiple datacenters #130
OCPBUGS-5472: Fix sc creation on resync #127
OCPBUGS-3285: set TLS cipher suites in Kube RBAC sidecars #119
OCPBUGS-1710: Add HTTP proxy to syncer container #111
Bug 2109977: storageclass should not be created for unsupported vsphere version #101
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github