4.12.14

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.14-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-ci-4.12-upgrade-from-stable-4.11-e2e-gcp-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.22, 4.11.23, 4.11.24, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.34, 4.11.35, 4.12.10, 4.12.3, 4.12.5, 4.12.7, 4.12.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.2

Created: 2023-04-19 08:46:01 +0000 UTC

Image Digest: sha256:157cc02d63bfe67988429fd803da632e495e230d811759b1aed1e6ffa7a3f31a

Release 4.12.14 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-04-18-151010

Components

Kubernetes upgraded from 1.25.4 to 1.25.8
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202301311551-0 to 412.86.202304131008-0 (diff)

Rebuilt images without code change

agent-installer-api-server git b03e2db9 sha256:876e918e308728526b2d0929c4f6967fbac73e505c4b7abb393f4a2d8d2da6bd
alibaba-cloud-controller-manager git 1959de0e sha256:8f5c3c74d3c8748ab31a5f1b33240cd542e869eab3d51886d773dcb65cbb1e92
alibaba-cloud-csi-driver git 664d8cb0 sha256:1ff9953a6110c9cd43879cad4be1d2cff63036f6ee507d854bf0c77309bf13f4
alibaba-disk-csi-driver-operator git e324a71c sha256:2efcd7cbe6ce549720f9fa7664fe1671b5ee4ea27d03810578c56709876f912d
alibaba-machine-controllers git b9287c05 sha256:4a9c3863048c65b020a715294be2bcd7e1d735bfbf2d6109174f15150ff7cefc
apiserver-network-proxy git 61e198ca sha256:5dbf490cea0b2a6816409d0f9f2bb4b48bb576089ba7687519754bcf761cbb85
aws-cloud-controller-manager git 7fb891f4 sha256:9ad7b8a41dd497223994927e3c214890a05bf9253cc417306467b4e91877f6ab
aws-cluster-api-controllers git 15ff2acd sha256:027eabbfc009d61845d53ac3a8784bfa070d3227346432a1d53bdeb4b27ec863
aws-ebs-csi-driver git 15841171 sha256:570abf8bc4438ac84823e871b60698e3bd08cea930b32ed3ac49f95243e0d510
aws-machine-controllers git b82e889d sha256:3d3b9635715f8fd82f0cdbb539f8d752ec7eb5c1b3b826a6c902cc8ddaaad784
aws-pod-identity-webhook git 6197630b sha256:00307b65c713992f36460712d9de0bc7a3e41d425e460883376370f95e49792a
azure-cloud-controller-manager git 6ff1c8e5 sha256:cc7647eb41b9693ec24737fdf971abc7e68f18dd922b7d36355db89a042d7a30
azure-cloud-node-manager git 6ff1c8e5 sha256:e1dbca39e973361d868f9c42faaac52285b00b009c89880c485910e21ba6dec0
azure-cluster-api-controllers git d1d4f770 sha256:13f732a9e3307f401d35f632247bcc886a3e4765a71e1887f646365feaff75b3
azure-disk-csi-driver git ba105788 sha256:60ce328bb76c85aa2006126ce97224196007988b02dfd225fb3a131158146a7b
azure-file-csi-driver git 746fab2b sha256:78fc95a5a0dc399b6fd7d3d7cdb9e700abbd074803fb35dbd4ee79ffe6f7fa6a
azure-file-csi-driver-operator git 0a02fa02 sha256:debee38dd97b76ef92a3769c7bf6db8dd9b3ce7f98ec289bd4634016628f87d9
azure-machine-controllers git cfb76acd sha256:30e2257e54872f3f84fe44b783261e90cbb4ba966f65bda2b1b86edc56095e26
baremetal-machine-controllers git 63dcaf1e sha256:39951896dcfe64d5282698ce198a1a4c404763fb3ba688c29be467a3484dc6bd
cloud-network-config-controller git e613bcbc sha256:5d8bd6f8690d85542993c610b911d35d7d49963134781e54d7d8916a0cff182d
cluster-authentication-operator git bb764848 sha256:8ffe482b12d24c9b7939db6ae9bdd5f449fcb729fc734b91194c933f8a8948f4
cluster-autoscaler git 6ab8e62b sha256:03d1be380ad3acaedc5db08beaa1f484d020931ec6f47e4a30c864ea89b1e91c
cluster-autoscaler-operator git 8b232255 sha256:cc8c26a46a2d52a3880df7957ff288e535b69d46028730455a0f1a9c6c56b80d
cluster-bootstrap git f22d1c60 sha256:05ddf329fd4677b348411126c4aeb7a538cd16cf8824ee20619174e9207062fd
cluster-capi-controllers git f9c215c4 sha256:389ef622b752276370b930cc00635a52d631f2e0d3e32be1c25f09cf97d0f0e3
cluster-capi-operator git 3bfe36aa sha256:5b5871527be8d83fa5047e9c545c2035eee730b8cd35153fe4acc172077828d9
cluster-config-operator git 4c6e171d sha256:acb81d87fd9a053d4169fd00448913676ba9696830d7dead335f87edafaef00c
cluster-dns-operator git 1c136fe3 sha256:a66bd68c77d20d86d58f49bdd4350b25f2e61a8b1dd8b7b62d5142007b61b2d1
cluster-kube-cluster-api-operator git 7bb05468 sha256:873fa6dbeb447bcda7e6747bae8133230e3931bfde228bd8c1e7713879c38d78
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:581fae6cfeb9e0d6faed3e191915ca6efce1a6e8b25d9b557fd010e8bf90a8b6
cluster-machine-approver git 60081982 sha256:82f9f1649101e2b659c694c0b7defa89537804a98ded2cf9f1390c684c13e8a3
cluster-openshift-apiserver-operator git 4c5b4882 sha256:8bec43339fef3a282ef96bd66d0d30b05154387c4a5534e09ab1ef4f0cd34743
cluster-openshift-controller-manager-operator git d1915d13 sha256:293a71aa36f80decddb35f8ecb3df7d7cd6afe56924e14048aa72e822177e54e
cluster-platform-operators-manager git d40fae81 sha256:f3536e313e780a6c92dc6b146b47a25a668c65c016eebb76a1b4bc7e4654bba0
cluster-update-keys git 2796e173 sha256:3beb76f9be12f9f7072f59c423ab829481488875ff753aece0fb0d38f1eaafe9
configmap-reloader git e4d9170e sha256:456274c7d83d514e74017c010d00b6fd689b46cb17273a7515d3e42f9b28f6f2
container-networking-plugins git 6d237727 sha256:22d2357f8e8b3d346cdc449d2cb41f9a8e4b5ab403bfa872fdc2513c808a995d
coredns git 9aaa7e0a sha256:d6b37db6614e5e6f573e7fa4a92926b49cc19a66c0421a0e9d57b1cfbc01acaf
csi-driver-shared-resource git 20cffc04 sha256:97c9f71215cc07bef117f8d79d5ed42cb8e494e31e9682bd00111b6577177665
csi-driver-shared-resource-operator git 3201431c sha256:e395af7d3eb82536c10925d42e63a62695f9b884cdea4598ed66599cc7f7acc7
csi-driver-shared-resource-webhook git 20cffc04 sha256:72a390af62143293256c969c770f7c5826ebf1b59053286fa18497e86718a92f
csi-external-attacher git 6945eef8 sha256:408833bc86ab6c443c85a9f347c323a0ee4cca4c65dd7390cc5e23cfbfa350f0
csi-external-provisioner git 140851f6 sha256:5382380185f0b0ea058b1f1395d2de0af7dc90343868bb639b629bfb9ec03e47
csi-external-resizer git 239d751f sha256:3e25cd6c4997ef7c71db31ef9f400e4442d99e42e43d784d6f798c658f15e25c
csi-external-snapshotter git 7e232566 sha256:48ba05c2d88ce8dbc2f0a08757cc7bc26d4045e7695e4d0a0ba9828160891acf
csi-livenessprobe git 720e1d6e sha256:20fb28ec66f85711821ebfff9ed883b27b866541a1c4eb12aa864f29cbf28047
csi-node-driver-registrar git 805d5ac2 sha256:2609f5c0c8b106482b4876f59067252f352ea4aa1e590b7080a410fb581fd001
csi-snapshot-controller git 7e232566 sha256:99cb069881386ac52038e957cf1cde1b08cfabcbffb5df92312de238f6425da4
csi-snapshot-validation-webhook git 7e232566 sha256:8302556124982bc8ad3e73e84be6e8235a88333df35049fc938d1ce8f63a509e
driver-toolkit git 6e5c04c0 sha256:6afc764e57b39493f57dd20a714cf9bee8cd02a34bf361570f68888b4af753ad
egress-router-cni git a92e4157 sha256:e7525b423138e414b17c3cfa4414eb76c473a7b8d2c4a746e5795eef3fd076df
gcp-cloud-controller-manager git 8d208a7f sha256:d3e1d598219321bca237b2790b9d70507a92d0555e6fc1b96a657a18834acf13
gcp-cluster-api-controllers git eea0586c sha256:48de0d8dd4fe0492cb653ca6b6b167278e3d9a21b02d2b75d49bb39e422265b4
gcp-machine-controllers git ada83dc6 sha256:e9dcca6df5b24925bb50a46a515327e4f463a23266a2a2b52b477cac87d32171
gcp-pd-csi-driver git 223d8464 sha256:ab44fa88aa94035d0a13e03800404b29316a2960375716e77ee18295c25cdbc2
gcp-pd-csi-driver-operator git 020aeb67 sha256:becb045c1b7c4880c57bf81f3c6c730e504a043091dbc4d2e542332b3aa331b4
haproxy-router git 3065f658 sha256:e2774c71dd16b8a25cb6d19d0c0a02bf6582915c78766b918c65c5c55bffae52
ibm-cloud-controller-manager git e5f25fc6 sha256:6223334dd86797651b65a76605e63755ea9c29c3672fc78260c4a3869aa1441b
ibm-vpc-block-csi-driver-operator git f70fccea sha256:e7df85427cbf40598067ff86cb2a8322d2946bbad4be19cb29efb4f5e874b41f
ibm-vpc-node-label-updater git 737d00c9 sha256:e11ed124600660c35f6a6e1e44db95d3c9629ea979042db414e23cb9d11d1700
ibmcloud-cluster-api-controllers git c1304c80 sha256:5a31df58052ee492a2a33e564425c6f8680f82eb0c9093b1a1921695e3eede5c
ibmcloud-machine-controllers git 31a67dac sha256:55b52d51c54f7e15053e9fd3e2e4eddaf6283e7551fc5865ea710cf05f5f256d
ironic-machine-os-downloader git a580a447 sha256:bf6f7776cdc94730c1b034d7e889c1647bc9ba08408f60c8835530e9f16dc9bb
ironic-static-ip-manager git 0c7fbba9 sha256:3e1eee82208efb5adddd4305831c8d0feef949ca065bd2587dbe5543d804c50f
k8s-prometheus-adapter git 987e5da8 sha256:957da1fe99cfe0c38bee515ca1ef83afe167a7c0d3b59029eb0291b69b8bffa6
keepalived-ipfailover git 7e8a0105 sha256:475a18b7a683d21a5236d096980c12f9547b15dbd7440d5ca2088442a9350b3a
kube-state-metrics git 9a1bf9b8 sha256:e8e13974492d119997c6badc21154b210741ff3893d2ceb3dd80ae1bea95f212
kube-storage-version-migrator git 596745ce sha256:8d8fe72ecc26d1512ab673dcde242446861db9652fd119b5f76004aeff30cd36
kubevirt-cloud-controller-manager git a19615cd sha256:e56a1534d1ac49b834f0b697f22e165304dfcba9a167380241212135c91cd18b
kubevirt-csi-driver git f407c8a7 sha256:56c9ea69619296a7eb052fe2d0ab878ae149e564046814a849f4392e46bc9556
kuryr-cni git 92b9be25 sha256:f612e2037a0685830d8a27a4e6cb05d7651761a20d1bff298a2cf01690d84a26
kuryr-controller git 92b9be25 sha256:1405b6611eb3eba57c7839fc99090d30e317229c8fc3b0e71ec691558d51ad11
libvirt-machine-controllers git a2882f7a sha256:2c13514d9747e54ab1db6ca888ea578c4cd9dce31380ccd04c78389561410704
machine-image-customization-controller git 27777d0e sha256:c2c369d6510b463b97363b2643b0dc73759cc45f3260dc2d0fe19078bcd9b95a
machine-os-content sha256:ed68d04d720a83366626a11297a4f3c5761c0b44d02ef66fe4cbcc70a6854563
machine-os-images git 566bf595 sha256:22d285536e8676525e3ce7329cece5132c8d51829a0a20c615d16faceb9f059b
multus-networkpolicy git 421718ab sha256:46391d27547c10496cc55fec2b567e4c4077b6a7515c88b8754eae5e12537979
multus-route-override-cni git 523b7904 sha256:9a842f662dccd8bda6a0f08da0dae1f4fc3656c215bc6424aacc7bb4e029db55
must-gather git 5fd21761 sha256:4df9407ba81dcb67365b2c4f14fcce49a27ceb61fe58f015c3a33f4a518a7aa1
network-tools git c76613c7 sha256:20f03e2d2b721fc96311ea9da2be84393dc00cc9ae6d8c86118cd72b94c41698
nutanix-machine-controllers git 25aea2d4 sha256:3d478be6029621c7ee8d4047fa6224a8be2bebbcd78d98f7365e1dc2a4619aa7
oauth-proxy git 03e5b13b sha256:998e99134cc3c4abbce787e300f04046d49c515f2374961108c3474e07638fa6
oauth-server git a803bf49 sha256:f79b93f8cba25d29d1300be181e3fa67a2cd152c845c8e371af859ee12e1d50b
olm-rukpak git 1b52bfeb sha256:3a5772a8ca960e813b7691009997829617ec556c0c192c4d70284dec0329bed4
openshift-controller-manager git b6528f9e sha256:2f6f6765b0b7019f41c2d74743e9a0ba512979587afa20dbbe4599adc07a9f63
openshift-state-metrics git 4c711c74 sha256:3a03bb750292893b9823df7f295dacf87ba95096b25f4fbe2c9635b539a7addf
openstack-cinder-csi-driver-operator git 308a62d8 sha256:ca1956febbad429edc59a45bd921961441a9ef5b8556441c92745538041243b5
openstack-machine-controllers git 8bd9c35f sha256:7dcc631dd0b61c3a190065a5e4aa6dd2bb4e24b2f46960bbe937a89b3db94e27
ovirt-csi-driver git 64d58fb5 sha256:f7fbb6eb272492a1d4b58c888d58a79ec8ac6a682e4130d2e319cbc97609db3a
ovirt-csi-driver-operator git feb14fbb sha256:45388181a0278f6a4a1c7ea81c9e4efdf66c4a257e682ede452d6a51c7b7f5e2
ovirt-machine-controllers git 03e8cb50 sha256:4399ce7db4ef01aae67ae45e3b2dcd0bf6fe0db26c882e302f59444d3e7fa4ab
prom-label-proxy git b1907888 sha256:93281b6d2f29d6b08c53285cdb7ada3a1f604b4e1dd25980c0bc956cf7c1e8b7
prometheus git c749fdb4 sha256:7993aef37badb2ab24ad74bf2e636c0ac4c2f176a44c73a3f8daceff1c9dc20b
prometheus-alertmanager git 86b18354 sha256:cd0c354e78293093ec38608b9ef0ab92705d2ec0f7402b1c63a52eb7b4533828
prometheus-node-exporter git af2f49ca sha256:c7d63ca69ca4dc7f204408da9ca7a2428cb3508737fb75cd2c1a13edf1fa3c97
rhel-coreos-8 sha256:90625d9f3713874b50b91b59b61d3a9d7c39c61ef38da8147c5d9203edfe50a9
rhel-coreos-8-extensions sha256:ad48fe01f3e82584197797ce2151eecdfdcce67ae1096f06412e5ace416f66ce
route-controller-manager git 9e74d175 sha256:194203af0da351892c0a0b449ae6e08df0e1f12e417d5bf720182caee8d54434
service-ca-operator git 299b7097 sha256:717a72f7e9f17a0b41e33541ec65e21c8e5e86132866cb5bc11527d529f2e058
thanos git 306214e8 sha256:54b8854eb6b1f1b2bd626ffba4456c4674cff64220d1ea5c58ae3fb501c3562d
vsphere-cloud-controller-manager git e993e31f sha256:af7d81019945fd8e3a3c26c9b53ff3ae15c1b9e0e012d45f40bd7d966d6ca9ac
vsphere-cluster-api-controllers git 5c261b3b sha256:6037d84b9be0dbfd84cc82795412b56c8133bd9164646d32b39e3dc9ba12ea28

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) #631
Full changelog

agent-installer-node-agent

MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
Add sg3_utils package (#497) (#500) #497
Full changelog

aws-ebs-csi-driver-operator

4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208
OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-11360: Use 100 GB as minimum disk size in validations #7065
OCPBUGS-11662: AWS - Remove ACLs from s3 ign #7084
OCPBUGS-11208: GCP: add europe-west12 region to the survey as supported region #7055
OCPBUGS-11108: Kubelet Client Cert should include system:serviceaccounts group #7050
OCPBUGS-8384: Specify filename for default registries.conf #6941
OCPBUGS-10904: IBMCloud: Fix SSH Private bootstrap #7028
OCPBUGS-10905: IBMCloud set dnsrecords offset #7029
OCPBUGS-10740: bump RHCOS 4.12 bootimage metadata #7019
OCPBUGS-7481: Fix file check for loading openshift manifests #6907
OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
OCPBUGS-7594: fully qualified username must be provided #6864
OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
OCPBUGS-7521: Update AgentConfig template #6857
OCPBUGS-5992: azure: validate Windows-only VM types #6780
OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
OCPBUGS-6807: Check platform baremetal settings against default values #6815
OCPBUGS-7103: Set the configured proxy settings for agent installer #6830
OCPBUGS-7131: bootstrap: set 0644 mode for registries.conf #6804
OCPBUGS-5960: bump RHCOS 4.12 bootimage metadata #6791
OCPBUGS-5996: vsphere: set default resource pool when missing failure domain topology #6781
OCPBUGS-5667: CVE-2021-4238: goutils: update for randomness fix #6764
Full changelog

baremetal-operator

OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
Full changelog

baremetal-runtimecfg

OCPBUGS-11145: fix isUpgradeStillRunning() #232
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
Full changelog

cloud-credential-operator

OCPBUGS-11707: ccoctl: Enable public anon read access to default OIDC S3 bucket #529
Full changelog

cluster-baremetal-operator

OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-7898: add a check for nutanix cloud conf map #239
OCPBUGS-7884: Restart pods if related configuration was changed #228
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-11692: E2E periodics test timeout failures improvement #190
OCPBUGS-8503: machine’s node must be ready for CPMS machine to be ready + fixes #193
OCPBUGS-11521: Use PlatformStatus instead of PlatformSpec to determine platform #188
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-10646: Hypershift: set Deployment properties #148
OCPBUGS-8374: [4.12] remove cluster-admin role. #143
Full changelog

cluster-etcd-operator

OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
Update reviewers and approvers #987
OCPBUGS-7409: set default timeouts in etcdcli #1005
OCPBUGS-6935: add dedicated success status for bootstrap removal #999
OCPBUGS-7373: [release-4.12] fail early on missing node status envs #1004
OCPBUGS-6898: updating library-go for CVE-2022-41717 #998
Full changelog

cluster-image-registry-operator

OCPBUGS-8491: bump aws-sdk-go #846
Full changelog

cluster-ingress-operator

OCPBUGS-3517: Ingress controller should not have affinity policy in single-replica clusters #857
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-6789: enable pod security admission for techpreview #1440
OCPBUGS-6789: make the bootstrap kube-apiserver honor cluster-wide featuregates #1439
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #1445
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-6789: Enforce PSA when techpreview is enabled #694
OCPBUGS-6789: honor feature gates during bootstrapping #695
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #699
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7369: Guard controller: set the readiness probe endpoint explicitly #462
Full changelog

cluster-monitoring-operator

OCPBUGS-11508: add startup probe for prometheus-adapter #1940
OCPBUGS-11623: node-exporter: disable btrfs collector #1944
OCPBUGS-11404: jsonnet: Add prometheus container in UWM #1935
OCPBUGS-2439: set the argument path.udev.data in node exporter #1800
Full changelog

cluster-network-operator

OCPBUGS-10977: HyperShift: Add POD_NAME env to ovnkube-node #1753
OCPBUGS-11461: Split out konnectivity certs #1771
OCPBUGS-11178: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759
OCPBUGS-11059: Fix info log formatting #1659
OCPBUGS-10319: HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738
OCPBUGS-8014: add default noProxy config for Azure #1722
OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
OCPBUGS-5953: Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685
OCPBUGS-7044: HyperShift: Add .hypershift.local to no proxy list #1706
OCPBUGS-7044: HyperShift: Do not use proxy for internal routes #1704
OCPBUGS-4778: Fix handling of deployment and statefulset updates #1663
OCPBUGS-4238: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1645
OCPBUGS-6494: OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB #1691
Full changelog

cluster-node-tuning-operator

E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
E2E: Network stack Pinning tests (#533) #533
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543
pao: latency-tests: read test log directly from pod (#547) #547
Add authentication to the /metrics endpoint (#553) #553
Full changelog

cluster-policy-controller

OCPBUGS-6789: backport feature gate honoring for PSa label syncer #98
OCPBUGS-7705: [release-4.12] update dependencies to point to v0.25.0 #102
Full changelog

cluster-samples-operator

OCPBUGS-10918: update Jenkins to v4.12 #492
OCPBUGS-7208: When setting allowedRegistries urls the openshift-samples operator is degraded #489
Full changelog

cluster-storage-operator

OCPBUGS-10646: Hypershift: set control plane operand properties #355
OCPBUGS-8374: Add UID to CSO Pod to be able to run with custom SCCs #347
OCPBUGS-7331: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337
Full changelog

cluster-version-operator

OCPBUGS-10565: RetrievePayload: Improve timeouts and cover behavior with tests #914
OCPBUGS-10514: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913
OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
Full changelog

console

OCPBUGS-5009: Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382
OCPBUGS-7953: fix devfile error #12605
OCPBUGS-6672: In DeploymentConfig both the Form view and Yaml view are not in sync #12475
OCPBUGS-8016: PipelineRun templates must be fetched from OpenShift namespace #12614
OCPBUGS-10225: Get the Event type value from the latest PLR of the Repository #12643
OCPBUGS-7333: Add missing SDK extensions descriptions #12556
OCPBUGS-7951: delete application should delete all part-of resources #12604
OCPBUGS-6036: Project dropdown order is not as smart as project list page order #12447
OCPBUGS-7800: add subject kind dropdown in the project access form #12586
OCPBUGS-8339: disable operator-install-single-namespace.spec.ts until… #12624
OCPBUGS-3892: Add cluster to query params of websocket requests #12282
OCPBUGS-5092: Fix to use and set correct secretReference for build-config triggers #12388
OCPBUGS-7895: Bump helm version to 3.10.1 #12579
OCPBUGS-6873: The dropdown list component will be covered by deployment details page on Topology page #12507
OCPBUGS-6831: Fix crash when pinnedResources is null #12503
OCPBUGS-7471: Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565
OCPBUGS-7506: Fix different CI issues #12555
OCPBUGS-6966: Remove description field from the PLR parameters page #12519
OCPBUGS-7437: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560
OCPBUGS-6887: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510
OCPBUGS-6816: Repositories list does not show the running pipelinerun as last pipelinerun #12500
OCPBUGS-4072: Fix rerender loop/crash when bindable-kinds is found but has no status #12304
OCPBUGS-6671: fix broken pipeline secret #12474
OCPBUGS-6913: PipelineRun task status overlaps status text #12516
OCPBUGS-6766: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12491
OCPBUGS-6969: Added translation to Last used in resource type dropdown #12521
OCPBUGS-6764: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12490
OCPBUGS-4281: Do not disable metrics when auth is disabled #12323
OCPBUGS-6669: Do not show UpdateInProgress when status is Failing #12473
OCPBUGS-5093: Fix to show correct help texts for each git repo status error code #12389
OCPBUGS-6085: Editing Pipeline in the ocp console should show correct information #12452
OCPBUGS-6758: Add RBAC check on Create a Project link in all-namespaces pages #12489
OCPBUGS-6755: Remove refs-heads from the branch name for Repository pipelineRun row #12487
Full changelog

console-operator

OCPBUGS-7999: Distinguish between route conditions and remove the old ones #735
OCPBUGS-6921: Recover ConsoleNotificationSync after being degraded #728
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6591: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #174
Full changelog

csi-driver-manila-operator

OCPBUGS-10556: Bump go.mongodb.org/mongo-driver to v1.5.1 #176
OCPBUGS-6599: Address CVE-2022-41717 #166
Full changelog

csi-driver-nfs

OCPBUGS-6590: Address CVE-2022-41717 #105
Full changelog

docker-builder

OCPBUGS-6753: manage-dockerfile: use the original form of HEALTHCHECK #324
Full changelog

docker-registry

OCPBUGS-10496: bump docker-distribution #365
OCPBUGS-8491: bump aws-sdk-go #362
Full changelog

etcd

Update owners #185
Updating ose-etcd images to be consistent with ART #153
Full changelog

hyperkube, pod

OCPBUGS-11166: UPSTREAM: <carry>: Force using the go tooling from the system #1531
OCPBUGS-11166: Bump to k8s 1.25.8 #1527
OCPBUGS-8705: Fix mounted volume expansion tests #1503
OCPBUGS-7078: Bump to k8s 1.25.7 #1496
OCPBUGS-5769: scc admission - seccomp profiles fix #1471
Full changelog

hypershift

OCPBUGS-10584: Switch NTO metrics auth to certs generated by HCP controller #2293
OCPBUGS-11014: Do not proxy when guest cluster resolution fails #2340
OCPBUGS-11654: [release-4.12] Create new EC2 client for AWS identity provider health check #2403
OCPBUGS-10646: Add storage operators perms. to watch HostedControlPlane #2306
HOSTEDCP-939: [release-4.12] Setup shared OIDC provider for e2e clusters #2365
HOSTEDCP-806: Fix ValidAWSKMSConfig condition #2362
OCPBUGS-11056: fix external APIServer address selection based on endpointAccess #2350
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707: No more specifying the scrape interval at servicemonitors & podmonitors level #2356
HOSTEDCP-900: Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285
OCPBUGS-10504: Deletion of the VPCEnpoint on conflicting service names #2310
HOSTEDCP-806: [release-4.12] Validate etcd KMS config #2273
HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
Force controleplane upgrade always #2289
OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826: Customize DNS base domain prefix #2235
feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323: pki: split out konnectivity certs from the rootCA #2156
fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
Full changelog

insights-operator

OCPBUGS-11008: update the cluster transfer interval to 12h (#765) #765
OCPBUGS-10531: service_accounts.go Marshal fix (#754) #754
OCPBUGS-6732: Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727
OCPBUGS-6833: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) #736
OCPBUGS-6782: Create gatherer for gathering machines. (#734) #734
Full changelog

ironic

OCPBUGS-7566: Bump werkzeug 4.12 #352
Full changelog

ironic-agent

OCPBUGS-9934: Adding dep on python3-werkzeug >= 2.0.3-4 #72
Full changelog

kube-proxy, sdn

OCPBUGS-10805: Fix race in Egress IP Tracker start #521
OCPBUGS-7474: Initialize egress node monitoring struct with previous reachability status #505
OCPBUGS-6842: Handle race condition to setup default vnid flows #497
OCPBUGS-7227: Update for 4.12 / go 1.19, including gofmt updates #482
Full changelog

kube-rbac-proxy

OCPBUGS-11645: Updating kube-rbac-proxy images to be consistent with ART #56
Full changelog

machine-api-operator

OCPBUGS-10943: Fix empty component version #1132
OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
OCPBUGS-8286: Short circuit misfiring #1109
Full changelog

machine-config-operator

OCPBUGS-7718: Prevent possible split-brain scenario with keepalived unicast #3562
OCPBUGS-7945: [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573
OCPBUGS-5935: Wrap podman commands in a while loop #3495
OCPBUGS-7167: Avoid ‘too restrictive’ SCC problems by being more explicit #3542
OCPBUGS-10505: daemon: Drop duplicate --authfile used in run #3617
OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
OCPBUGS-6943: Improvements for configure-ovs.sh #3528
OCPBUGS-6045: There are not enough logs in case “oc extract” is stuck in mco first boot #3503
OCPBUGS-6973: configure-ovs: optionally generate configuration in /run #3532
OCPBUGS-6779: baremetal: clean state generated by NM when run by dracut #3521
OCPBUGS-7241: controller: default overwrite to true for files #3546
OCPBUGS-6997: Fix 4.12 art images #3535
OCPBUGS-6805: Only check image type if we are sure there is work that needs to be done #3526
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #61
OCPBUGS-10506: Client golang [backport 4.12] #59
Full changelog

multus-cni

OCPBUGS-10535: Multus sync Mar-20-2023 to OCP 4.12 #149
OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-7429: Invalid ipv6 backport 4.12 #109
OCPBUGS-11321: respect requested allocation range when exluding ranges [Backport 4.12] #123
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #93
OCPBUGS-3941: Backport Excluded ranges bug (#282) #103
Full changelog

network-interface-bond-cni

Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver images to be consistent with ART #80
Full changelog

oc-mirror

OCPBUGS-863: Add skip pruning flag and logic (#591) #591
Bugfix for destination registry nested paths length (#590) #590
OCPBUGS-6703: fix: adds logic that searches for the correct name when using a heads… (#554) #554
Updating oc-mirror-plugin images to be consistent with ART (#515) #515
Full changelog

openshift-apiserver

OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
Full changelog

openstack-machine-api-provider

OCPBUGS-10603: machineset_controller: Stop caching clouds credentials #65
OCPBUGS-7155: Address CVE-2022-41717 #55
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-7650: Catalog Pod Startup Probe Timeout #450
Updating operator-registry images to be consistent with ART #397
OCPBUGS-7825: Set openshift.io/scc label to empty #456
OCPBUGS-7769: [release-4.12] update cluster policy operator dependency #454
OCPBUGS-7556: Defuse E2e timebomb #449
OCPBUGS-7086: cherry-pick pull request refactor FBC caching (#1051) f… #441
OCPBUGS-6260: Catalog, fatal error: concurrent map read and map write #440
OCPBUGS-7025: Set ImagePullPolicy of bundle unpacker to “IfNotPresent” for image digests #439
Full changelog

operator-marketplace

OCPBUGS-7108: Default CatalogSource aren’t always reverted to default settings #506
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-8226: fix hybridOverlay DRIP in ICNIv1 pods #1633
OCPBUGS-11701: [release-4.12] CARRY: use “prefer local” for annotated services #1638
OCPBUGS-11109: [release-4.12] Batch potentially big transaction on egress firewall ACLs migration #1617
OCPBUGS-10947: [release-4.12] Egress firewall fix retry #1610
OCPBUGS-10314: [release-4.12] Handle Completed pods deletion #1581
Updating ovn-kubernetes-microshift images to be consistent with ART #1288
OCPBUGS-10632: Check the “Serving” field for endpoints #1569
OCPBUGS-6034: Update egress node assignability on every egress node update #1483
OCPBUGS-7732: Fix leak in service controller cache #1545
OCPBUGS-10490: [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go #1595
OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
OCPBUGS-7317: [release-4.12] Delete stale egress ip snat entries by node #1520
OCPBUGS-7026: Bump OVN to 22.12 and turn off neighbour response in router options. #1521
OCPBUGS-6040: addMasqueradeRoute: fallback to gateway interface IPs #1484
OCPBUGS-7230: Delete IGMP Groups when deleting stale chassis #1516
OCPBUGS-3399: Drop in-cluster traffic towards svcCIDR at wrong port #1490
OCPBUGS-6961: update base image of Dockerfile #1504
OCPBUGS-6823: [release-4.12] Fix Egress FW ACL rules in dualstack mode #1500
OCPBUGS-4862: Correct the deletion of noHostSubnet nodes #1470
OCPBUGS-298: ovnkube-trace: run ovn-sbctl and ovn-trace with –no-leader-only #1489
OCPBUGS-5841: ovnkube-node: Existing management port check #1475
OCPBUGS-6812: [release-4.12] Ensure loadbalancer cleanup doesn’t fail #1497
Full changelog

powervs-block-csi-driver

Update OWNERS component to Multi-Arch #24
Full changelog

powervs-block-csi-driver-operator

Update OWNERS component to Multi-Arch #16
Full changelog

powervs-cloud-controller-manager

Updated OWNERS component to Multi-Arch #29
Full changelog

powervs-machine-controllers

Update OWNERS #39
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7458: Fixes ThanoRuler StatefulSet re-creation bug #217
Full changelog

telemeter

OCPBUGS-7702: Add ‘agent-installer’ value to ‘install_type’ label #451
Full changelog

tests

add specific test for failing cgroups path #27856
OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
OCPBUGS-8024: Backport fixes to resume gathering CI disruption data for SLB and image registry #27759
OCPBUGS-7633: remove reference to old guard pods #27732
OCPBUGS-7285: extended: security: do not explicitly set api audience on token request #27716
OCPBUGS-6850: [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade #27684
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7426: Add migrationDataStore field #59
OCPBUGS-6936: fix for nil user session (#1859) #57
Full changelog

vsphere-csi-driver-operator

OCPBUGS-7901: Bump sidecar timeouts for vsphere #142
OCPBUGS-7426: Fix datastore migration bug in 4.12 #139
Full changelog

vsphere-problem-detector

OCPBUGS-6788: Derive the fully qualified vSphere username when checking permissions #98
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github