4.11.55

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.55-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.60, 4.10.61, 4.10.62, 4.10.64, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.28, 4.11.29, 4.11.3, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.4, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.5, 4.11.50, 4.11.51, 4.11.6, 4.11.7, 4.11.8

Upgrades to:

4.12.49 (changes) - Failed
4.12.48 (changes) - Failed
4.12.47 (changes) - Failed
4.12.46 (changes) - F S S S
4.12.0-0.nightly-2024-01-04-044538 (changes) - S S F S
4.12.0-0.nightly-2024-01-03-213108 (changes) - S F F F
4.12.0-0.nightly-2024-01-03-002636 (changes) - F S S S F
4.12.0-0.nightly-2024-01-02-113651 (changes) - S S F F
4.12.0-0.nightly-2024-01-01-140543 (changes) - S F F F
4.12.0-0.nightly-2023-12-22-180720 (changes) - S S S S
4.12.0-0.nightly-2023-12-22-035636 (changes) - S S F S
4.12.0-0.nightly-2023-12-21-162946 (changes) - F S F S F
4.12.0-0.nightly-2023-12-20-103323 (changes) - F F S F F S
4.12.0-0.nightly-2023-12-18-194028 (changes) - S S S S
4.12.0-0.nightly-2023-12-18-085630 (changes) - F F F S S F S
4.12.0-0.nightly-2023-12-14-220753 (changes) - S S S F
4.12.0-0.nightly-2023-12-14-152413 (changes) - S F F S
4.12.0-0.nightly-2023-12-14-055027 (changes) - S S F F
4.12.0-0.nightly-2023-12-13-235027 (changes) - S F F S
4.12.0-0.nightly-2023-12-13-175027 (changes) - S F F F
4.12.0-0.nightly-2023-12-13-104928 (changes) - S S F S
4.12.0-0.nightly-2023-12-13-002926 (changes) - S S S F
4.12.0-0.nightly-2023-12-12-182926 (changes) - S S F F
4.12.0-0.nightly-2023-12-12-122216 (changes) - S S F S
4.12.0-0.nightly-2023-12-11-235407 (changes) - F S S F F
4.12.0-0.nightly-2023-12-11-012035 (changes) - S S F F
4.12.0-0.nightly-2023-12-09-044636 (changes) - S S F F
4.12.0-0.nightly-2023-12-08-222002 (changes) - F S S S S
4.12.0-0.nightly-2023-12-08-162002 (changes) - S S F F
4.12.0-0.nightly-2023-12-08-085637 (changes) - F S S F F
4.12.0-0.nightly-2023-12-07-191409 (changes) - F F S S F F
4.12.0-0.ci-2024-01-04-232553 (changes) - S S S
4.12.0-0.ci-2024-01-04-091258 (changes) - S F F F F S
4.12.0-0.ci-2024-01-03-230726 (changes) - S S F F S
4.12.0-0.ci-2024-01-03-125214 (changes) - S S F F S
4.12.0-0.ci-2024-01-03-062808 (changes) - S S F S
4.12.0-0.ci-2024-01-03-002808 (changes) - S S F S
4.12.0-0.ci-2024-01-02-105249 (changes) - F S S F S
4.12.0-0.ci-2024-01-01-130653 (changes) - F F S F F S
4.12.0-0.ci-2023-12-28-220422 (changes) - S S S
4.12.0-0.ci-2023-12-28-123254 (changes) - S F F F S
4.12.0-0.ci-2023-12-26-135832 (changes) - S S S
4.12.0-0.ci-2023-12-26-044237 (changes) - S S F S
4.12.0-0.ci-2023-12-22-142748 (changes) - S S F F S
4.12.0-0.ci-2023-12-22-051536 (changes) - F F S S F S
4.12.0-0.ci-2023-12-21-152938 (changes) - S F F F F F
4.12.0-0.ci-2023-12-20-230239 (changes) - S S S
4.12.0-0.ci-2023-12-20-090129 (changes) - S S F F F F
4.12.0-0.ci-2023-12-20-024651 (changes) - S S F S
4.12.0-0.ci-2023-12-19-135146 (changes) - S S F F F S
4.12.0-0.ci-2023-12-18-193014 (changes) - S S S
4.12.0-0.ci-2023-12-18-093801 (changes) - S S F F S
4.12.0-0.ci-2023-12-16-020014 (changes) - S S F F F S
4.12.0-0.ci-2023-12-15-155510 (changes) - F S S F F F F
4.12.0-0.ci-2023-12-15-062047 (changes) - S S F F S
4.12.0-0.ci-2023-12-14-173624 (changes) - S S F F F F
4.12.0-0.ci-2023-12-14-050702 (changes) - S S F S
4.12.0-0.ci-2023-12-13-230702 (changes) - S F S
4.12.0-0.ci-2023-12-13-151201 (changes) - S S S
4.12.0-0.ci-2023-12-13-054621 (changes) - F S F F F F S
4.12.0-0.ci-2023-12-12-233513 (changes) - S S F S
4.12.0-0.ci-2023-12-12-121904 (changes) - S S F F F F
4.12.0-0.ci-2023-12-12-061904 (changes) - S F S
4.12.0-0.ci-2023-12-11-193344 (changes) - S S F F S
4.12.0-0.ci-2023-12-11-124245 (changes) - S S F S
4.12.0-0.ci-2023-12-09-062536 (changes) - S S F F S
4.12.0-0.ci-2023-12-08-202508 (changes) - S S F F S
4.12.0-0.ci-2023-12-08-080659 (changes) - F S S F F F S
4.12.0-0.ci-2023-12-07-190052 (changes) - S S F F F F
4.11.58 (changes) - Success
4.11.57 (changes) - Success
4.11.56 (changes) - F S S S S

Loading changelog, this may take a while ...

Changes from 4.11.27

Created: 2023-12-07 10:43:33 +0000 UTC

Image Digest: sha256:5054bd54461e838f8ecf4a9b1c012cb38001ca79586bbd23e4db7041f2777a26

Release 4.11.55 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-12-06-145103

Components

Kubernetes upgraded from 1.24.6 to 1.24.16
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202302021552-0 to 411.86.202311302109-0 (diff)

Rebuilt images without code change

agent-installer-api-server git bc51be82 sha256:e15f82d7665954e22107e3552f7d51a29fb21f9e523c8dd483f0845d59e316fa
agent-installer-node-agent git e74ffbf5 sha256:7ec81463b7f9b0cc8d20af4f1b8118b601cdf25ba28dabb2661d568efbfd793e
alibaba-cloud-controller-manager git 0daf34f1 sha256:06c04f8625d82cf9e21d0d7c300438aed73ec78d675086a861383a86f74c8400
alibaba-machine-controllers git 41451089 sha256:18860b11365c235a069cb235dd507aa991875ee79bd5e7c671738ca40581568b
aws-cluster-api-controllers git b3fe15be sha256:05277c077d0c774a09959150ed6f3aa33af6fcdb2a4f6392fd8da10e678952f3
aws-machine-controllers git a796a77f sha256:8f851202132e27b6f0ddfa92e067ba7bf17cde7980efa5ad955378b065d73a35
cluster-authentication-operator git e2bcbaaf sha256:ae2bd96954fed864d4ef6cf9f2219c83b1d87a8e4c96da38e36c32a0e5ca1690
cluster-autoscaler git bf6c1c32 sha256:6e4b7a7ef6ee04379b6060b6019783b83f1c2fb9c8387261beee77e76a9d0522
cluster-autoscaler-operator git fcffbcda sha256:dd6ac1f163504749b3510399dbf4729e947c41902334e148877cbc51b57ed6dd
cluster-cloud-controller-manager-operator git 2dbffc67 sha256:c4b7520a4b3aa7a41e515d297891afbbc3891328d84ac4cb8248aec091eca0f9
cluster-update-keys git 289032fb sha256:fbd4485eed46dc17e99b2aaac0f7042650666929a5a296a4542713ea7d8a457e
configmap-reloader git b7c03bb0 sha256:5488efd925d423a57eb760401d8482f40674c5710f8bf194bc8194436c7fb050
csi-driver-nfs git f144bb43 sha256:021990353b648275d676aaf887d1d13e2f94b61a166f58745101666e5c67d3ec
driver-toolkit git 28589b0a sha256:f3e2f03f117efe598b09acf67dabd9d8570d9a6cf05acddc5336f2c655735050
egress-router-cni git fccaf1d9 sha256:4437a31bbb2569ec4df7c997b05452ee692f3f5fd4280cd6b8c5f56d0ef1186c
gcp-cloud-controller-manager git a5a0048a sha256:6d35664be820cc6ea77aa07dda7f50e4c7fa5e0493d2e8789d153953f64c5572
ibm-cloud-controller-manager git ce836969 sha256:54b5055a9a1f50544ad0ff072943e7b249ce7e0b476eb5bfce2fe3a0a8978b7d
ibmcloud-machine-controllers git 3bde969f sha256:aa084b05d07543fb3a7cdf2dc3b81f3f6a04d59f502b77f4f2904ded16694198
ironic-machine-os-downloader git 876128b5 sha256:7a2ef75479bd0306d14e5cbe4c4604fdf68b958556f4c958e0aafd1aa62a1f05
keepalived-ipfailover git f1330f6f sha256:6cbf732e71e10b85d2483fa9a89fb95dd4461675a0612c3d0603532071ae5894
kube-storage-version-migrator git 596745ce sha256:2bd985847edc70aa9fef61f55f490a0795f3ad90650cae4315f31c8517c6a631
libvirt-machine-controllers git b6e14eab sha256:db7d2a930e2fa100df92d4b69c2b461d896d2fca3b724e285b400c3ce9ae907c
machine-os-content sha256:d48e4d330c3732f1de5d593936c794d0fa6ce56f8ca17240ec500e292239438d
machine-os-images git b1580a29 sha256:877d09da709a9f9405cbc9303530b16380ced389d5b802d53fb234bee0744f87
multus-route-override-cni git 523b7904 sha256:41feb2856c73a9ce8cc4050af78a5edce196b295166d59288160cfc110c3699b
must-gather git 44f6adac sha256:18cd61e05aeff623d2886cd923069c1790f31b986013cf87bbf8e9dae259f497
network-interface-bond-cni git b76a6770 sha256:b74c74d4e2f2f489e4fc42e9f4ccf295c69b494c77d39885046287ff8b006cca
network-tools git 4e87286c sha256:dc15bb5cd8d908910c6725b7796d6b6aee7ca94a4f3873cce8742d2a0c2c371d
nutanix-machine-controllers git a94eb77c sha256:7f22b15b4edd28eeff97ecd3240b7a9494c0a7a6e5f94f0c7b9ceda54b87b643
oauth-apiserver git c9c2dd15 sha256:4de568bc0f9c66edc216dea5a8e6216537e0611c3600510e6616d061be1225a4
oauth-proxy git aad1b28f sha256:afee631f1a5c5f5d77e7f707602fb82ecfe3da8e7f0bc62f4468a3d18e041cff
oauth-server git 8d80088e sha256:e4c316d879fc13c0ca5beb0c9916c15d5a44bd7624a9f3bdb428eb1c39ae7ef9
openshift-apiserver git 35df5a02 sha256:7a98c999f07153f94b5dbd0afb4780b08b8ba5c84a929a85cb93605d11525797
ovirt-csi-driver git cd3370fb sha256:d31f7a5ca16dfe67ca06ecde0f5d741d720c986364ef376ac8662324e58305c4
ovirt-machine-controllers git 5a93d94c sha256:5f8653c819c5543672f4106be0bb28def6aad7d15d2743fe74eeb1c54ed90f69
prom-label-proxy git af12fbc4 sha256:ff384e38d9ca65ec1a2c15bd3a9e80e85acc6e0d5722c8bc2f8054ca5b80331c
service-ca-operator git 0899d112 sha256:0b73fe6f209564bfe26f8ef62a4ee24e7c0975b40f0943a45debe15dc9063245
vsphere-cloud-controller-manager git 91f7b1fa sha256:378681749b52cd3f8b9931b059b45af7a9101106c5315c0e4cae507cb614a1d8
vsphere-cluster-api-controllers git f67d1d02 sha256:e1e14e929c072f4b30698e7a33337fbc6ff6cf301f3719327ec9f972e0c85d3d

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update OWNERS to match master branch (#682) #682
CVE-2022, OCPBUGS-15068: 21235 github.com/Masterminds/vcs command inj (#681) #681
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-21292: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-21389: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #67
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #59
Full changelog

apiserver-network-proxy

HOSTEDCP-1323: Merge latest code into 4.14 branch #45
OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

aws-cloud-controller-manager

OCPBUGS-20708: Update golang.org/x/net to v0.17.0 #56
Full changelog

aws-ebs-csi-driver

OCPBUGS-20892: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #242
OCPBUGS-19069: Volume unmount repeats after successful unmount, preventing pod delete #234
OCPBUGS-12932: 4.11: Bump golang.org/x/text #227
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-20997: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #283
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #266
Full changelog

aws-pod-identity-webhook

NO-ISSUE: snyk: exclude vendor/ #175
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21387: Bump golang.org/x/net to v0.18.0 #96
Full changelog

azure-cluster-api-controllers

OCPBUGS-21476: bump golang.org/x/net to v0.17.0 #290
Full changelog

azure-disk-csi-driver

OCPBUGS-20662: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #57
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-20733: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #104
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #96
OCPBUGS-7987: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #71
Full changelog

azure-file-csi-driver

OCPBUGS-20822: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #40
Full changelog

azure-file-csi-driver-operator

OCPBUGS-20924: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #79
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #72
Full changelog

azure-machine-controllers

OCPBUGS-14012: Add user defined tags to Azure NIC resources #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-23478: Specify google cloud CLI to version 256.0.0 #7747
OCPBUGS-494: [release-4.11] Switch libvirt VM’s to vnc graphic mode #6252
OCPBUGS-18545: CORS-2445: GCP: Add osImage to the install config #7468
OCPBUGS-16779: bump RHCOS 4.11 bootimage metadata to 411.86.202308081056-0 #7424
OCPBUGS-17246: azurestack: do not use gen2 images #7393
OCPBUGS-16915: [release-4.11] azure: skip LB creation when not needed #7372
OCPBUGS-16353: ic: azure: validate diskTypes in AzureStack #7341
OCPBUGS-17002: GCP: add europe-west12 region to the survey as supported region #7377
OCPBUGS-5708: hold bootkube service until bootstrap has pivoted #6759
OCPBUGS-13104: openstack: Add netcat to the Installer image #7163
OCPBUGS-14288: baremetal: Extra time for provisioning interface #7214
OCPBUGS-12750: [Alibaba] update the bandwidth value of EIP #7132
OCPBUGS-11663: AWS - Remove ACLs from s3 ign #7085
OCPBUGS-10594: [release-4.11] aws: bump aws-sdk-go version #7000
OCPBUGS-7530: bump RHCOS 4.11 bootimage metadata #6875
OCPBUGS-5665: CVE-2021-4238: goutils: update for randomness fix #6765
Full changelog

baremetal-machine-controllers

OCPBUGS-21699: Uplift x/net to v0.17.0 #201
Full changelog

baremetal-operator

OCPBUGS-21136: Uplift x/net to v0.17.0 #311
OCPBUGS-17955: Trigger reconcile on Secret change #299
OCPBUGS-11612: allow namespace to continue with terminating when deprovisioning at t… #262
OCPBUGS-8298: cve: 2022-21698: upgrade prometheus/client_golang #256
Full changelog

baremetal-runtimecfg

OCPBUGS-18815: Move haproxy firewall rule check earlier in loop #273
OCPBUGS-18096: Don’t render config with incomplete unicast peer list #269
OCPBUGS-15539: Use machine-config state instead of comparing roles #263
OCPBUGS-13544: Verify kubelet version in upgrade check #250
OCPBUGS-11297: fix isUpgradeStillRunning() #233
Full changelog

cli, cli-artifacts, deployer, tools

ART-8372: el7 version of oc in 4.11 #1609
OCPBUGS-20292: Truncate existing files when writing from inspect #1564
OCPBUGS-20309: Use quay redis image instead docker mysql #1568
OCPBUGS-16059: mcs cert: account for environments that use IP directly #1504
OCPBUGS-16195: reboot: set ignition version to 3.1 #1510
OCPBUGS-4812: [release-4.11] New-App Using Git via SSH #1283
handle the error case of node retrieval while waiting for reboot #1486
bring some cert rotation helpers back into 4.11 [fix unit-tests] #1479
OCPBUGS-10772: bump repo sclorg/s2i-ruby-container location for newapp test #1380
OCPBUGS-8205: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1360
Full changelog

cloud-credential-operator

OCPBUGS-21328: Upgrade golang/x/net for CVE-2023-39325 #625
NO-ISSUE: snyk: exclude vendor/ #621
NO-ISSUE: Removing andrew from OWNERS #620
OCPBUGS-13792: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #540
OCPBUGS-11708: ccoctl: Enable public anon read access to default OIDC S3 bucket #530
Full changelog

cloud-network-config-controller

OCPBUGS-13240: pull project name from subnet uri #109
Full changelog

cluster-baremetal-operator

OCPBUGS-20828: Uplift x/net to v0.17.0 #372
Full changelog

cluster-bootstrap

OCPBUGS-14387: Update dependencies and image #92
Add API team to the OWNERS #95
Full changelog

cluster-capi-controllers

OCPBUGS-21509: bump golang.org/x/net to v0.17.0 #187
Full changelog

cluster-capi-operator

OCPBUGS-21027: bump golang.org/x/net to v0.17.0 #139
Full changelog

cluster-config-operator

: OCPBUGS-21231: bump library-go to include switch to HTTP/1.1 #374
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-21425: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #170
OCPBUGS-19513: Fix readOnlyRootFilesystem for 4.11 #165
Full changelog

cluster-dns-operator

OCPBUGS-21511: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #392
Full changelog

cluster-etcd-operator

OCPBUGS-21108: fixing CVE-2023-39325 by updating dependencies #1150
OCPBUGS-22785: [4.11] Backports of backup/restore fixes #1145
OCPBUGS-18283: reset snapshot default counts to avoid file already lo… #1103
OCPBUGS-9908: Garbage collect grafana-dashboard-etcd #1022
OCPBUGS-9967: increase live/ready timeout and failure thresholds #1025
OCPBUGS-7720: set default timeouts in etcdcli #1007
OCPBUGS-7510: [release-4.11] fail early on missing node status envs #1006
Full changelog

cluster-image-registry-operator

OCPBUGS-20672: mitigate effects of rapid reset #954
OCPBUGS-9921: bump aws-sdk-go #848
Full changelog

cluster-ingress-operator

OCPBUGS-20748: Bump golang.org/x/net for CVE-2023-44487 #989
OCPBUGS-22433: test/e2e: Don’t use openshift/origin-node #993
OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #942
OCPBUGS-3560: Allow PROXY protocol for “Private” strategy #914
OCPBUGS-8000: certificate-publisher: Don’t publish extraneous certificates #894
Full changelog

cluster-kube-apiserver-operator

: OCPBUGS-20839: bump library-go to include switch to HTTP/1.1 #1575
OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #1448
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-20943: bump golang.org/x/net to v0.17.0 #30
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-21036: Bump deps to address CVE-2023-44487 [4.11] #765
OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #703
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-21220: bump(golang.org/x/net,openshift) to address CVE-2023-44487 #506
OCPBUGS-7756: Guard controller: set the readiness probe endpoint explicitly #464
Full changelog

cluster-kube-storage-version-migrator-operator

: OCPBUGS-21314: bump library-go to include switch to HTTP/1.1 #99
Full changelog

cluster-machine-approver

OCPBUGS-21413: Bump x/net package to v0.18.0 #215
OCPBUGS-10382: ignore case when checking csr hostnames #181
Full changelog

cluster-monitoring-operator

OCPBUGS-22845: [release-4.11] add RHACS telemetry metrics #2141
OCPBUGS-21214: upgrade golang.org/x/net to v0.17.0 #2124
OCPBUGS-20073: Limit the value of GOMAXPROCS on node-exporter to 4 #2110
OCPBUGS-11759: add startup probe for prometheus-adapter #1947
OCPBUGS-11465: jsonnet: Add prometheus container in UWM #1938
Full changelog

cluster-network-operator

OCPBUGS-13661: AUTH: update cluster-reader to include k8s.ovn.org #1811
OCPBUGS-11763: HyperShift: Add POD_NAME env to ovnkube-node #1780
OCPBUGS-12277: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1789
OCPBUGS-10487: Enable configuration of node healthz server on ovnkube #1742
OCPBUGS-5954: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1686
OCPBUGS-6993: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1702
OCPBUGS-3462: CNI binary copy should account for the possibility of symlinks [backport 4.11] #1616
Full changelog

cluster-node-tuning-operator

Merge #548
Full changelog

cluster-openshift-apiserver-operator

: OCPBUGS-20679: bump library-go to include switch to HTTP/1.1 #557
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-20757: bump(k8s,openshift) to address CVE-2023-44487 #312
Full changelog

cluster-policy-controller

OCPBUGS-21062: Bump deps to address CVE-2023-44487 [4.11] #142
Full changelog

cluster-samples-operator

OCPBUGS-15758: Update Jenkins and Jenkins Agent Base image versions #507
OCPBUGS-7330: When setting allowedRegistries urls the openshift-samples operator is degraded #490
Full changelog

cluster-storage-operator

OCPBUGS-21253: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #408
Full changelog

cluster-version-operator

OCPBUGS-5011: Backport SecurityContext reconciliation behavior #940
OCPBUGS-13043: pkg/cvo: reset payload load status #935
OCPBUGS-10671: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #915
Full changelog

console

OCPBUGS-23064: add support for new features annotations while preservi… #13315
OCPBUGS-19930: Web console slowness on Project>Project access page #13206
OCPBUGS-19297: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13158
OCPBUGS-20217: Fixed Edit Application form for Knative Services #13220
OCPBUGS-18486: Fix stop PLR option #13131
OCPBUGS-19409: Backport tab extension to fix LOG-4504 (support LOG-3388 on OCP 4.11) #13171
OCPBUGS-19359: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #13079
OCPBUGS-17375: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13071
OCPBUGS-15562: only copy workload annotations to debug pod #12956
OCPBUGS-15532: visiting Configurations page returns error Cannot read… #12953
OCPBUGS-14004: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12845
OCPBUGS-14413: Modified git import flow module to handle create button enable-disable issue #12874
OCPBUGS-13214: the name of the object (imagestream-name) does not match the name on the URL (deployment_name) #12835
OCPBUGS-12284: Fix to use and set correct secretReference for build-config triggers #12762
OCPBUGS-13864: delete associated pipeline, triggertemplate and eventlistener when deleting app #12837
OCPBUGS-13730: Show type of sample on the samples view #12826
OCPBUGS-13746: PipelineRun templates must be fetched from OpenShift namespace #12827
OCPBUGS-12279: Do not show builder ImageStreams without sampleRepo as samples #12759
OCPBUGS-12959: update the default pipelineRun template name #12790
OCPBUGS-12231: Get the Event type value from the latest PLR of the Repository #12749
OCPBUGS-10708: delete application should delete all part-of resources #12772
OCPBUGS-13012: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12793
OCPBUGS-10613: add subject kind dropdown in the project access form #12663
OCPBUGS-11580: In DeploymentConfig both the Form view and Yaml view are not in sync #12714
OCPBUGS-6984: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12523
OCPBUGS-7949: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12602
OCPBUGS-6954: Fix to show correct help texts for each git repo status error code #12518
OCPBUGS-7764: Fix crash when pinnedResources is null #12581
OCPBUGS-2916: Storage -> PVC -> upload data, does not support source reference #12221
OCPBUGS-6687: Hide silent switch for alerting rule if no associated alerts are present in devconsole #12479
OCPBUGS-2844: [OKD/nanokube] Fix NPE when project or build status is not defined #12207
OCPBUGS-12243: disable operator-install-single-namespace.spec.ts to solve CI issues #12751
OCPBUGS-7950: Repositories list does not show the running pipelinerun as last pipelinerun #12603
OCPBUGS-7494: fix broken pipeline secret #12569
OCPBUGS-7789: [4.11.z] Fix kubevirt-console tests #12325
OCPBUGS-7539: Fix rerender loop/crash when bindable-kinds is found but has no status #12570
OCPBUGS-7043: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12532
OCPBUGS-7127: Editing Pipeline in the ocp console should show correct information #12540
OCPBUGS-6879: Remove refs-heads from the branch name for Repository pipelineRun row #12509
OCPBUGS-7069: PipelineRun task status overlaps status text #12534
OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages #12514
Full changelog

console-operator

OCPBUGS-18424: Add missing watch permission for helm-chartrepos-viewers #804
OCPBUGS-11343: Distinguish between route conditions and remove the old ones #745
OCPBUGS-11969: Changing field on any of routes in the openshift-console namespace wont trigger sync loop #753
Full changelog

container-networking-plugins

OCPBUGS-20592: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.11] #132
Full changelog

coredns

OCPBUGS-20359: UPSTREAM: <carry>: openshift: Fix OCPBUGS-20359 #99
OCPBUGS-21009: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #104
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-21216: Upgrade dependencies #243
OCPBUGS-20576: [release-4.11] CARRY: Add DOWNSTREAM_OWNERS #230
OCPBUGS-6684: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #176
Full changelog

csi-driver-manila-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #200
OCPBUGS-18782: Don’t cache OpenStack client #203
OCPBUGS-8067: Fix SCC admission failure race during initial deployment #188
OCPBUGS-10605: Bump go.mongodb.org/mongo-driver to v1.5.1 #177
OCPBUGS-7278: Address CVE-2022-41717 #168
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-23123: Should reference configmaps instead of secrets #155
OCPBUGS-20690: bump golang.org/x/net to v0.17.0 #149
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-20768: bump golang.org/x/net to v0.17.0 #89
Full changelog

csi-external-attacher

OCPBUGS-21119: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #63
Full changelog

csi-external-provisioner

OCPBUGS-20727: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #75
Full changelog

csi-external-resizer

OCPBUGS-20865: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #150
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-20971: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #112
Full changelog

csi-livenessprobe

OCPBUGS-20625: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
OCPBUGS-13820: Bump gRPC from 1.38.0 to 1.49.0 #42
Full changelog

csi-node-driver-registrar

OCPBUGS-20657: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
Full changelog

docker-builder

OCPBUGS-23041: Add -p flag to cp command to preserve timestamps #373
OCPBUGS-20685: [release-4.11] Bump golang.org/x/net #365
OCPBUGS-15645: Add the git-lfs package #354
OCPBUGS-11401: manage-dockerfile: use the original form of HEALTHCHECK #339
Full changelog

docker-registry

OCPBUGS-18302: bump docker-distribution #384
OCPBUGS-11366: bump docker-distribution #367
OCPBUGS-9921: bump aws-sdk-go #364
Full changelog

etcd

OCPBUGS-21173: [4.11] Carrying fixes for CVE-2023-44487 #229
OCPBUGS-16791: [4.11] Rebase openshift/etcd to 3.5.9 #210
Update owners #186
Updating ose-etcd images to be consistent with ART #158
Full changelog

gcp-cluster-api-controllers

OCPBUGS-21358: UPSTREAM: <carry>: bump golang.org/x/net to v0.17.0 #206
Full changelog

gcp-machine-controllers

OCPBUGS-20813: Bump x/net package to v0.18.0 #70
Full changelog

gcp-pd-csi-driver

OCPBUGS-20704: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #48
OCPBUGS-11000: UPSTREAM: 988: Simplify node backoff logic #34
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-20788: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #90
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #83
Full changelog

haproxy-router

OCPBUGS-21071: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #533
OCPBUGS-18474: haproxy/template: mitigate CVE-2023-40225 #509
OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #492
Full changelog

hyperkube, pod

OCPBUGS-20122: Make kubelet set alpha.kubernetes.io/provided-node-ip unconditionally #1796
OCPBUGS-23289: UPSTREAM: 121881: Use golang library instead of mklink #1804
OCPBUGS-20112: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1748
openshift-hack: Fix sporadic 141 errors in build-rpms #1775
OCPBUGS-21471: [release-4.11] UPSTREAM: <carry>: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1761
OCPBUGS-18843: UPSTREAM: <carry>: Force using host go always and use host libriaries #1697
OCPBUGS-17189: Update to Kubernetes 1.24.16 #1672
OCPBUGS-8736: UPSTREAM: <drop>: bump apiserver-library-go #1627
OCPBUGS-15361: Bump to k8s 1.24.15 #1607
OCPBUGS-14746: [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1606
OCPBUGS-13166: Bump to k8s 1.24.14 #1588
OCPBUGS-11314: UPSTREAM: <carry>: Force using the go tooling from the system #1536
OCPBUGS-11314: Bump to k8s 1.24.12 #1529
OCPBUGS-10215: Fix mounted volume expansion tests #1509
OCPBUGS-7079: Bump to k8s 1.24.11 #1500
OCPBUGS-6683: add message about possibly working with restricted SCC #1459
Full changelog

hypershift

OCPBUGS-11608: properly reconcile with user specified changes for in proxy configuration #2396
install: add flag to wait for HyperShift operator rollout #2370
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2352
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-21194: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-21283: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #84
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-21396: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #30
Full changelog

insights-operator

OCPBUGS-20715: update dependencies (#856) #856
Add cherry-pick from 4.12 (#855) #855
Add workload repo image gathering (#829) #829
OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) (#806) #804
OCPBUGS-15446: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#802) #788
OCPBUGS-7872: Collect info about monitoring pods pv (#773) #773
OCPBUGS-11818: update the cluster transfer interval to 12h (#765) (#766) #765
OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#739) #726
OCPBUGS-6783: Create gatherer for gathering machines. (#737) #737
Full changelog

ironic

OCPBUGS-13585: Add python-flask dependency #381
OCPBUGS-14654: Include fix to OCPBUGS-13335 in OCP 4.11. #380
OCPBUGS-13645: Bump python-sushy #369
OCPBUGS-7565: Adding dep on python3-werkzeug >= 2.0.3-4 #356
Full changelog

ironic-agent

OCPBUGS-20486: fix eventlet regression with Python 3.6 #93
OCPBUGS-11438: Adding dep on python3-werkzeug >= 2.0.3-4 #74
Full changelog

ironic-static-ip-manager

OCPBUGS-14564: Flush addresses on provisioning interface with global scope only #38
Full changelog

k8s-prometheus-adapter

OCPBUGS-21652: limit number of simultaneous client requests #87
Full changelog

kube-proxy, sdn

OCPBUGS-15084: EgressNetworkPolicy DNS resolution does not fall back to TCP #556
OCPBUGS-14305: fix possible concurrent map read/write #552
OCPBUGS-13917: save and delete the old egress network policy #544
OCPBUGS-13902: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #543
OCPBUGS-10853: Fix race in Egress IP Tracker start #522
OCPBUGS-8399: Initialize egress node monitoring struct with previous reachability status #513
OCPBUGS-7515: Handle race condition to setup default vnid flows #506
Full changelog

kube-rbac-proxy

OCPBUGS-20676: v4.11 CVE 44487 #86
Full changelog

kube-state-metrics

OCPBUGS-20746: bump x/net to v0.17.0 #99
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-14931: KuryrPort cleanup: Fix issue of subport not found #733
Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address #727
OCPBUGS-12840: Fix VIF revert on KuryrPort status update error #725
Full changelog

machine-api-operator

OCPBUGS-10719: [release-4.11] - manual cp #1057 - machines stuck in provisioned or provisioning #1141
OCPBUGS-11326: Fix empty component version #1133
OCPBUGS-10901: Block machine deletion if extra disks are attached #1131
OCPBUGS-8311: Short circuit misfiring #1124
OCPBUGS-8257: Append annotations from machine template spec to the node #1123
Full changelog

machine-config-operator

OCPBUGS-21016: vendor: unpin deps and update library-go, container and kube deps #4019
OCPBUGS-21995: Prevent NM from unsetting the hostname #3989
OCPBUGS-18075: Agent-based install process the container machine-config-controller will be oom #3882
OCPBUGS-11556: Prevent possible split-brain scenario with keepalived unicast #3667
OCPBUGS-11283: Wrap podman commands in a while loop #3657
OCPBUGS-9986: configure-ovs: fix mtu-migration cleanup #3607
OCPBUGS-10425: Remove hard requirement for the afterburn from early-running aws-related services #3615
OCPBUGS-8260: [release-4.11] backport cleanupDuplicateMC #3577
OCPBUGS-6002: There are not enough logs in case “oc extract” is stuck in mco first boot in mco first boot #3497
Full changelog

machine-image-customization-controller

OCPBUGS-21528: Uplift x/net to v0.17.0 #107
OCPBUGS-19424: Watch networkData Secrets for changes #100
Full changelog

multus-admission-controller

OCPBUGS-21309: Update go.mod for CVE-2023-39325 [Release-4.11] #74
Updating ose-multus-admission-controller images to be consistent with ART #63
OCPBUGS-9784: Client golang [backport 4.11] #60
Full changelog

multus-cni

OCPBUGS-21040: Update go.mod for CVE-2023-39325 [Release-4.11] #197
Updating multus-cni images to be consistent with ART #155
OCPBUGS-9863: Multus sync to OCP 4.11 mar-21-2023 #152
Full changelog

multus-networkpolicy

OCPBUGS-21412: Update go.mod for CVE-2023-39325 Release-4.11 #37
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-5954: Denormalize IP name before checking if pod is alive [Backport 4.11] #182
OCPBUGS-13241: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.11] #132
OCPBUGS-11067: respect requested allocation range when exluding ranges [backport 4.11] #124
OCPBUGS-3942: Excluded ranges bug (#282) #104
Full changelog

network-metrics-daemon

Update golang.org/x/net to v0.17.0 (#85) #85
Update golang.org/x/text to 0.7.0 (#67) #67
Full changelog

oc-mirror

OCPBUGS-21422: fix: CVE-2023-39325 and CVE-2023-44487 (#715) #715
changes the OWNERS file (#647) #647
Full changelog

openshift-controller-manager

OCPBUGS-23175: [release-4.11] fix template namespace processing #277
Full changelog

openshift-state-metrics

OCPBUGS-20691: bump x/net to v0.17.0 #105
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-21553: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #138
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #131
Full changelog

openstack-machine-api-provider

OCPBUGS-10954: machineset_controller: Stop caching clouds credentials #67
OCPBUGS-7322: Address CVE-2022-41717 #57
Full changelog

openstack-machine-controllers

OCPBUGS-20761: deps: Upgrade golang.org/x/net to v0.17.0 #278
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-22131: [release-4.11] Bump golang.org/x/net to v0.17.0 #591
OCPBUGS-18513, RHIBMCS-169: Copied csv listing backport #560
OCPBUGS-16075: fix dynamic conversion webhook #536
Introduce DOWNSTREAM_OWNERS file #542
OCPBUGS-16126: Catalog Pod Startup Probe Timeout #509
Allow cpb to be statically compiled / exempt from FIPS compliance #513
OCPBUGS-12263: cherry-pick pull request refactor FBC caching (#1051) f… #482
Full changelog

operator-marketplace

OCPBUGS-20937: [release-4.11] bump golang.org/x/net to 0.17.0 #551
Full changelog

ovirt-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #122
Full changelog

ovn-kubernetes

OCPBUGS-21762: Update bridge flow cache when the host address changes #1938
OCPBUGS-19911: [release-4.11] Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp #1918
OCPBUGS-19650: Delete IGMP Groups when deleting stale chassis #1901
OCPBUGS-12819: Handle k8s watcher restart scenario #1806
OCPBUGS-16691: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1779
OCPBUGS-15731, OCPBUGS-15745: Improve syncNodes to remove stale data #1734
OCPBUGS-15876: Remove non-existing functions test. #1740
OCPBUGS-16003: Fix stale SNAT entries for completed pods #1751
OCPBUGS-12791: : Delete equivalent ACLs when searching by predicate. #1666
OCPBUGS-11110: [release-4.11] Batch potentially big transaction on egress firewall ACLs migration #1629
OCPBUGS-10734: Bump OVN to 22.12 and turn off neighbour response in router options. #1599
OCPBUGS-10688: Fix leak in service controller cache #1598
OCPBUGS-11035: [release-4.11] Handle Completed pods deletion #1616
OCPBUGS-2303: [4.11] Stale chassis are not removed #1310
OCPBUGS-10486: [release-4.11] node: add node healthz server for cloud load balancers #1594
OCPBUGS-8510: [release-4.11] Don’t recreate clusterPGs and clusterRtrPGs unless needed #1560
OCPBUGS-7858: [release-4.11] Delete stale egress ip snat entries by node #1543
OCPBUGS-6640: Drop in-cluster traffic towards svcCIDR at wrong port #1491
OCPBUGS-7319: Bump OVN to 22.09, enable session affinity timeout #1522
OCPBUGS-5245: Move check_pkt_larger to gateway router ports #1505
OCPBUGS-7010: [release-4.11] Fix Egress FW ACL rules in dualstack mode #1507
Full changelog

powervs-cloud-controller-manager

OCPBUGS-21242: CVE-2023-39325 - Update net dependencies - 4.11 #48
Full changelog

powervs-machine-controllers

OCPBUGS-21883: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.11 #56
Full changelog

prometheus

OCPBUGS-21199: update golang.org/x/net to v0.17.0 [4.11] #177
Full changelog

prometheus-alertmanager

OCPBUGS-21013: Bump golang.org/x/net to v0.17.0 #83
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-20823: Bump golang.org/x/net to v0.17.0 #250
OCPBUGS-7590: Fixes ThanoRuler StatefulSet re-creation bug #218
Full changelog

prometheus-node-exporter

OCPBUGS-21104: upgrade golang.org/x/net to v0.17.0 #137
Full changelog

telemeter

OCPBUGS-21298: [release-4.11] fix: Bump golang.org/x/net to v0.17.0 #488
Full changelog

tests

OCPBUGS-18424: Add missing watch permission for console users #28235
OCPBUGS-18129: Ignore timeout and connection refused errors during upgrade tests for 4.11 #28247
OCPBUGS-15942: remove references to registry.centos.org #28036
OCPBUGS-15151: Move from registry.centos.org to quay.io #27985
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27961
OCPBUGS-12962: Add (optional) dual-stack tests to the CNI certification test suite #27904
OCPBUGS-10215: Bump(openshift/kubernetes): to get fix for resizing flake #27796
OCPBUGS-7727: remove reference to old guard pods #27735
OCPBUGS-7319: Unskip service session affinity tests #27722
OCPBUGS-6851: [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade #27685
Full changelog

thanos

OCPBUGS-21109: Bump golang.org/x/net to v0.17.0 #127
OCPBUGS-18299: Update exporter-toolkit to 0.7.3 #116
OCPBUGS-14559: require at least TLS 1.2 instead of 1.3 #113
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-21542: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #93
OCPBUGS-7404: fix for nil user session (#1859) #58
Full changelog

vsphere-csi-driver-operator

OCPBUGS-21402: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #176
Full changelog

vsphere-problem-detector

OCPBUGS-21569: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #132
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github