4.12.39

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.39-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Failed (3 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-ci-4.12-upgrade-from-stable-4.11-e2e-gcp-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.17, 4.12.18, 4.12.19, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.4, 4.12.5, 4.12.6, 4.12.7, 4.12.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.20

Created: 2023-10-16 13:34:35 +0000 UTC

Image Digest: sha256:75687feb6344caeb0edb6b1513b53fd07b90b481079415b6545d860fe74059eb

Release 4.12.39 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-10-14-145904

Components

Kubernetes upgraded from 1.25.10 to 1.25.14
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202305310359-0 to 412.86.202310141028-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git a7aa6000 sha256:a694a3e608e48289f2f86d69d70448c459d0a99d61b2f176206678b4c3e6701e
alibaba-cloud-controller-manager git 1959de0e sha256:a054a203b4223d82be3366c157eebcddce847221335970bcc1ae1e50e842b353
alibaba-cloud-csi-driver git 664d8cb0 sha256:435eb3a9f140c4feb229ac21117ca0cde06e5bad7d7213c4ea83061344d59328
alibaba-machine-controllers git b9287c05 sha256:9cba18f6b508908682df024831e05e1fc5a7a7c5030a4ebd21973400f5fd177c
aws-cloud-controller-manager git 7fb891f4 sha256:b08c22c078902f502e0218863a8712dbd27b012cf27068e09a820868648b508a
aws-machine-controllers git b82e889d sha256:b8475781e0e92822d55f8bf9218669b017331d55b8adef2ff587c66f6e3c282a
aws-pod-identity-webhook git 6197630b sha256:682a0406306d6571a81baf2fba5a4b2f79adb87c735f0b3de8e99d95a19815e2
azure-cluster-api-controllers git d1d4f770 sha256:c9f292e77b27b0f0b970ac46db7d7337deb8d9690bd0cf28a7d3edd86a7602ad
azure-disk-csi-driver git ba105788 sha256:9f46405b0f89558b083719c3998cc7a06246fb38852454840035b16ea637eae9
azure-file-csi-driver git 746fab2b sha256:494091d03eb6d5c558082c9c55a214518c0484a0df94f4d258bde340f65dd3f7
baremetal-machine-controllers git 63dcaf1e sha256:490a93a82d73d4118d39e35697524bd4806003fbc5f275cd9be4515ac2646f04
cloud-credential-operator git d4f6bcaa sha256:1d893399666d8a521ebc6864f675cd1a71e87f1d5d27114630218844de97121f
cluster-autoscaler git 6ab8e62b sha256:a5973f96085fb80f83c70ffd0ecf1c1f55ebf7cda9548cfb8575c17485673b74
cluster-autoscaler-operator git 8b232255 sha256:df10841a4904e27b2bdcdbc94a7914557984d0b3c1f023903ea6c5886e051a48
cluster-capi-controllers git f9c215c4 sha256:2fc2ee087ea60fcaa450d506c6c4ff7e3bb010e75f8f0e3308c57291988f662b
cluster-capi-operator git 3bfe36aa sha256:b0f3e2bf7578dddb596c93943223032d0c15a55ad36efda0b779bdbffb7d41e1
cluster-cloud-controller-manager-operator git 103cb2ec sha256:4387db6c7688472009a01b676b1a152b84c401827ef6fdc5213021b304818fb6
cluster-csi-snapshot-controller-operator git 06bd5f66 sha256:e4d9857dab7071f2a3e4cc4e012bdb223f35d0c280254501f8f572e2ffd39933
cluster-image-registry-operator git e9a895af sha256:b17aa7755033eed5c205462fd14ee0770d37561006d4d72025717d39c58e0466
cluster-kube-cluster-api-operator git 7bb05468 sha256:bdf372b751fc1daf7726ed7abed81538088572cd268dd0c7b89528029d1d66d0
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:42aeaaa55f25f45a3b38a3cba27d1b09db4ff7abdfc980827102c6969416dc2a
cluster-machine-approver git 60081982 sha256:d6a4b0cca5c0dbfbe3936a3e614cd73fd21ee01e3dfab76ca7d67fdfc2d8b651
cluster-openshift-controller-manager-operator git d1915d13 sha256:d0d0f412a3b71dcf5a4797ad63102d8f25ba5929596f277ebf4ece3b37aa68e0
cluster-platform-operators-manager git d40fae81 sha256:9d82659c138baf5c7289a4e8f5a4e7bab7ae992f1569e7ba12b9ae2102e42932
cluster-update-keys git 2796e173 sha256:222330b621caabbdf4bc368501b431ee808687f430a608e672e9f952c2fd6f52
configmap-reloader git e4d9170e sha256:502d33d8294549a5c757cbda56f64c8dcabcd5f3e8f9a3b73aac3763f8c4cdf1
container-networking-plugins git 6d237727 sha256:553738115619921b194eb99df4f53c1a0f920a443cd0cfcbbbf8ce192b22aa6f
csi-driver-nfs git d9099257 sha256:337c48a33191c3fa255c10e35e70fc5c9e7ce83abe3bd0b1f5530bd12f6e3070
csi-driver-shared-resource git 20cffc04 sha256:fa70e06e32fd3ffa17a179c8d847ba2da322f4154d8b211dcb4d0e4bf99135a3
csi-driver-shared-resource-operator git 3201431c sha256:004c9303b073818f375ff937a78ebb2586e435122b273a1feaa342ff0532022a
csi-driver-shared-resource-webhook git 20cffc04 sha256:cd7ff268bbcf7113b7aed636b27b8bc0d099b724daeb213835c472d0b4aca3f5
csi-external-attacher git 6945eef8 sha256:4d2e36b8f9428d5522be5e1d80241c97ce3760a605eb45821397740dde5573af
csi-external-provisioner git 140851f6 sha256:6ddb4787beda2026a8c1a88cba7664215b1774a90f5fdafe1269de8a1504ea73
csi-external-resizer git 239d751f sha256:54b43b0e1773bc28b24613e0ab9cf59d1d0a79ee185d2e5823243b735619fb75
csi-external-snapshotter git 7e232566 sha256:36fc868a380da2d36d2ed0873d1d39ea3e365264b2ba5629791e03a8375cb017
csi-livenessprobe git 9cb05642 sha256:2a97a0ec0555391bd681cd14cd2e789d4099cef797a3626cfccc3bd63ce22804
csi-node-driver-registrar git 805d5ac2 sha256:40064e19757e2e87c53812666f036f9f426e5f0623ea54514fb9ea5e6348f3e3
csi-snapshot-controller git 7e232566 sha256:16d1bb0caf060c192ec4aecf3060120a0d46d4005d70632c3e6597baa2ffa464
csi-snapshot-validation-webhook git 7e232566 sha256:74cd5c33f19576f134d4e6a90ac1f2570ba5f9f3401e0b8c046fac5ffee6d41e
driver-toolkit git 6e5c04c0 sha256:c6028d79687f87d4bd78d3dbcd582b5b4d20952c74cf7536299fe3bf71a46287
egress-router-cni git a92e4157 sha256:5c0d8f8a18d25ea1bba6cad879aa1922b44e9bb0b0a736be4d699314ef9e1b4b
gcp-cloud-controller-manager git 8d208a7f sha256:9fb7fd77256e3250aab346444da8204ee662d84e99df479dea1d057257ceef3e
gcp-cluster-api-controllers git eea0586c sha256:7aec617151741e618ac5bd9c86c532cbc529fe48f6f83eaaa2bce568421f081a
gcp-machine-controllers git e7cecfc1 sha256:83f32141a9f13cebc99f190a71990db8b6293db3aa2775db45c6086ff966d9e9
gcp-pd-csi-driver git 223d8464 sha256:de5a288006f3600b1320e1d174c9bf33d1ac910f350c267d2e1f5c6497652b7d
ibm-cloud-controller-manager git e5f25fc6 sha256:f5e8e4ab576bbf7dae2adcfddb8b1e6a5287ccfa5ed1046c276bcf6fa2f46bf4
ibm-vpc-block-csi-driver git e0f7a3bc sha256:26af1a08c2ce53fd84c6919d644395d53f03a4a6ea8d5e7172cae0df85cf44b8
ibm-vpc-block-csi-driver-operator git f70fccea sha256:324f5e6a6a16f0dc41a57c7f52b6c65491198464d6067906e78ab1b155353e95
ibm-vpc-node-label-updater git 737d00c9 sha256:80c4df656293e916a5f99004a94b7b4314f9c65932f8d54f6fb5676338758706
ibmcloud-cluster-api-controllers git c1304c80 sha256:b953a494d70d21bd3f92e66a644fb22f17405c213ccbf621b49ca32bdd469846
ibmcloud-machine-controllers git 31a67dac sha256:6432358a188566f0cb3f0b5d07723a5d67d8ca47cf5697bc6be79da1050325a7
k8s-prometheus-adapter git 987e5da8 sha256:5c7b46489389ce80bad709403ff2b5bafa272581ae36fa94b4f35060b6cfc9db
keepalived-ipfailover git 7e8a0105 sha256:b7645aa3974909450a3c194cb0f92ddfa921cdf5ee95bb9ef580bfff1ccde273
kube-rbac-proxy git 94f3fde7 sha256:5dbab2c49fdabe46c43b03e08eba6bba957430598d22573f4e57520f21cdcbc6
kube-state-metrics git 9a1bf9b8 sha256:c851659fb77fba2ec89ff9d4790359d101c19f8907f70f374f15d71be9157ffb
kube-storage-version-migrator git 596745ce sha256:c030733b0efb6d13eaa1f4d43bf1e599b67c77d3601957544e832e8ad8cbfa1c
kubevirt-cloud-controller-manager git a19615cd sha256:376a814c7d31cd1e6edb8424242db3642b12378613f6ceb1fdb1e173831e19f3
kubevirt-csi-driver git f407c8a7 sha256:e53a501145a39687189cc152c7d999b906ae1173b1e22ea5a30d5896dbab55fa
libvirt-machine-controllers git a2882f7a sha256:96186b6680a632d1d8c70d1b973de54180307df42b6045572fad7700ae09abf5
machine-api-operator git a6c42a42 sha256:624c5e39ec4b4f4bea52ab558ba0fee954920f3542d047d541ea5d974dd8eb17
machine-os-content sha256:41948e7af10c7e66c65382ebfd01a0498cba6bb5023d4506fa90d97ae54dc92e
machine-os-images git 566bf595 sha256:6f860774a594504714b9160a32d2484307c9d9a994dffef32ef1fb81836e6c1b
multus-admission-controller git 5bd752a1 sha256:8fe1cbf0d7b6a155d1b10c89c8d3b53359e6650dabf827deebd1f05d6e9bbd9a
multus-cni git 210e5408 sha256:a9d740ba35c95b4be818191e9ed06e9c54dbf5b68eeb59fba9e84a8ba72a8c91
multus-networkpolicy git 421718ab sha256:cecf0e0cce853c714efa62079bc55ee0f64c7c0485344ca1fb8433b67170ff22
multus-route-override-cni git efd6ffbb sha256:1beeb27907396171afeb7e780046ac78147aedaafae562fbb65d259bc87ad82a
must-gather git 5fd21761 sha256:cc6dd96281d1a85829fab5582dfec273f6787d0d051f4e5a51626d9a00b6f4e2
network-interface-bond-cni git 30386d6b sha256:27c9211ee7d8b56e11b1b882b81ad9be481cb4124e604118538a6dd7bbb0c69e
network-tools git c76613c7 sha256:e09282b881945f301ccd9dc35c8f794a75f3e0902936900b1bcf7aac92d016a4
nutanix-machine-controllers git 25aea2d4 sha256:8d172fb8be96878f63a7caf49af4d32a6a77174183f2bf62ad84923dd3289b6a
oauth-apiserver git cfafdccf sha256:b4a08052c62917a405dfacf38b365650d7661b1c62f405f6476cd4ef4c1319e9
oauth-proxy git 03e5b13b sha256:4497bf0a0a758df0f328e83e98078baae3b9d160252c8aa0f072cb8b780e6cbe
oc-mirror git 3ac49d9b sha256:486058655245cd3ccc5f7108471ef71b7d1052af964ec3cde4bbe392c58be7e4
olm-rukpak git 1b52bfeb sha256:890391ee6f716e14f7ab61c9309efa989228b2490b5438132c171fd3e2c9f542
openshift-apiserver git 635ed5cc sha256:9e78eed8c7120deab960cc328dcf69ddb8a034f526eba2033dfd8ad40b0f100a
openshift-controller-manager git b6528f9e sha256:3337fd2886ae340746deaa5f9ff60840a9bd8a571dd48c8a96ed27e8149fb5e9
openshift-state-metrics git 4c711c74 sha256:0f042e9958e1ba2385916bd32b18769b9045c862d72d67cebc8313aaeab2803f
openstack-machine-controllers git 8bd9c35f sha256:ea631e0e1df653927f75c95b879469b93cf904e12c007bd537c1e7124524b93d
ovirt-csi-driver git 64d58fb5 sha256:6f7a12ab1de8a45b5d113a0ee0253d91f848676c9edb06e675909f09a7c77368
ovirt-machine-controllers git 03e8cb50 sha256:f9de72a30a4b00ce4073754cde76937cba9e0ad063cd50b1bcd6e38a7d0d635e
powervs-block-csi-driver git 5eb2b132 sha256:113a1af5c02436ac2f2b1518404ba6747dd620d8fc76be9700f6dafb9713ae03
powervs-block-csi-driver-operator git b4da8bcc sha256:9614b2b97f0bf4c2cd6fad56a3069eac1bd1e072dd84d256522e080515481370
powervs-cloud-controller-manager git d8ddc10c sha256:b727ce122e3a0c8179377b7ea612e547afeca2045c6937b46de70b118bce894b
powervs-machine-controllers git 3f498f79 sha256:e14cf23a6f91cf4ef46525c555a60ceeed16e39cc3f6124b4104d2a3deffa0ee
prom-label-proxy git b1907888 sha256:bcacd16dd329cfb15810de42a69619c039e7b09c820a1442e5f20679a95c8b73
prometheus git c749fdb4 sha256:26bef101cbe51b7eb91e6fe41f5a274a85aeba8364299d5366edc6a8d91d2ac3
prometheus-alertmanager git 86b18354 sha256:1f6425caf3f889cb7615eefe2a334ddd37e34255d1ac1be6e0189545af774424
prometheus-config-reloader git 57e7c574 sha256:f8add743497c5ec323d783e5207e848a3d08d5eae50d525d14ca6c425bbf0e3d
prometheus-node-exporter git af2f49ca sha256:8c4cee456097757993868c8df368286bf57c3bc6ffbb24b10e0760a087a18880
prometheus-operator git 57e7c574 sha256:f19b5d02b07a1ae97965101a37280efcc1c611976b308b00ad0c6ba643ba318b
prometheus-operator-admission-webhook git 57e7c574 sha256:6afd42b8e6a6e83a3b82cfd7a568ce252d68af01c1ac2d4cf00ee64cb4f9484e
rhel-coreos-8 sha256:196855292d026eeebb9ced1452634a13c0d35cd4af2c2a88b533cdbb3eb29298
rhel-coreos-8-extensions sha256:e46ea676c529cc9c57fb443f1d6736d2185a5d2d2279017511f76e9b67b5ed4b
service-ca-operator git 299b7097 sha256:87b535be1f3afb1a0cffc8740d7fd5ead91ab48ad3ebe83f56d21ce1c136a086
telemeter git fc631fcb sha256:8e1332c1990b71e7aa68375067d0ca2cb81d09c42e73c9c97292ee33d7345840
thanos git 9f2b5ff5 sha256:325a283b585ddc55f0448ea28e445e58cba0bebef404cb950acd1906143b5335
vsphere-cloud-controller-manager git e993e31f sha256:aaaf8698be7079a05b13522134074cd84b3eecb6afcd6af6302933a8e6d8b074
vsphere-cluster-api-controllers git 5c261b3b sha256:2097f5005b9bcedefbd9d7519ccf8b6b7107ccd0b4b0cd48f5f02e164c2f2bc8
vsphere-problem-detector git 2fa9a1ec sha256:218f512ea779ee0c769e9897aa71458717bd6390d9c3cac5ba2548d0214b704e

agent-installer-api-server

MGMT-15150: Use same installer binary for all platform types (#5347) #5347
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#726) #670
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #58
Full changelog

apiserver-network-proxy

OCPBUGS-19266: Updating ose-apiserver-network-proxy images to be consistent with ART #33
OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

aws-cluster-api-controllers

OCPBUGS-15548: Pass right SGs for IsExternallyManaged on creation #469
Full changelog

aws-ebs-csi-driver

OCPBUGS-14281: Volume unmount repeats after successful unmount, preventing pod delete #226
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #265
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-17159: Increase service idle max timeout to 100 minutes #82
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #95
Full changelog

azure-file-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #71
Full changelog

azure-machine-controllers

OCPBUGS-17960: Machine Actuator should not set metadata.name #71
OCPBUGS-17221: Add user defined Tags to NIC Azure resources #69
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-17651: Validate that the rendevousIP is assigned to a master #7416
OCPBUGS-20145: [release-4.12] Use updated ansible-core for Openstack image #7560
OCPBUGS-18646: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7474
OCPBUGS-10992: bootstrap-pivot: skip pivot in SCOS Live ISO #7035
CORS-2792: AWS Shared VPC Backport [release-4.12] #7435
OCPBUGS-18320: CORS-2445: GCP: Add osImage to the install config #7454
OCPBUGS-17404: backport openstack UPI for ansible 2.10 #7399
OCPBUGS-16778: bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 #7420
OCPBUGS-17467: Allow override of networkType #7406
OCPBUGS-17174: Set AdditionalTrustBundle in override when mirroring not enabled #7386
OCPBUGS-16382: azure: skip LB creation when not needed #7342
OCPBUGS-14868: Shorten SNO installation duration by releasing CPC lease #7242
OCPBUGS-14495: Support /dev/disk/by-path root device hints #7227
OCPBUGS-16151: ic: azure: validate diskTypes in AzureStack #7331
OCPBUGS-11199: azure: upi: use Image Gallery in ARM templates #7054
OCPBUGS-13940: bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249
OCPBUGS-14664: Shorten SNO installation duration by releasing CVO lease #7235
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7175
OCPBUGS-13819: Bootstrap on aws should have same metadata service type as on other nodes #7196
Full changelog

baremetal-operator

OCPBUGS-17703: Trigger reconcile on Secret change #298
OCPBUGS-17459: Set minimum TLS version for webhook to 1.2 #297
OCPBUGS-14188: Deleting unmanaged BMH get stuck fix #283
Full changelog

baremetal-runtimecfg

OCPBUGS-18606: Move haproxy firewall rule check earlier in loop #272
OCPBUGS-17715: Don’t render config with incomplete unicast peer list #268
OCPBUGS-15315: Use machine-config state instead of comparing roles #262
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-20299: Use quay redis image instead docker mysql #1567
OCPBUGS-16173: Add tls-server-name when property exists in kubeconfig #1507
OCPBUGS-1283: Bump golang.org/x dependencies #1421
OCPBUGS-16056: mcs cert: account for environments that use IP directly #1501
OCPBUGS-16194: reboot: set ignition version to 3.1 #1509
handle the error case of node retrieval while waiting for reboot #1485
bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478
OCPBUGS-14647: [release-4.12] Do not set master node selector if there’s no masters #1366
Full changelog

cloud-network-config-controller

OCPBUGS-16325: Azure: Handle already existing IP configurations #117
OCPBUGS-14717: increase GCP egress ip capacity to 100 from 10 #114
OCPBUGS-13802: sync CloudPrivateIpConfig when node is missing #112
Full changelog

cluster-authentication-operator

OCPBUGS-13346: dont log jwt tokens #622
Full changelog

cluster-baremetal-operator

OCPBUGS-19557: Guard against nil PlatformStatus #367
OCPBUGS-16169: use proxying for inspector in addition to ironic #349
OCPBUGS-15715: Limit role binding to openshift-machine-api namespace #347
Full changelog

cluster-bootstrap

OCPBUGS-14386: Update dependencies and image #91
Add API team to the OWNERS #97
Full changelog

cluster-config-operator

CORS-2794: AWS Shared VPC API Bump [release-4.12] #344
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-14960: Check ProviderSpec before generating MachineInfo #216
OCPBUGS-15198: Surface cpms vs machines diff #219
Full changelog

cluster-dns-operator

OCPBUGS-19933: update-node-resolver.sh: Check for errors from >> #385
OCPBUGS-19933: ensure original hosts file contents are preserved #383
OCPBUGS-15251: Add support for protocolStrategy API field to enable force_tcp configuration #378
Full changelog

cluster-etcd-operator

OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #1128
OCPBUGS-17808: reset snapshot default counts to avoid file already lo… #1100
Full changelog

cluster-ingress-operator

NE-1372: Add support for AWS shared VPC in another account #966 #971
OCPBUGS-13049: bump controller-runtime to fix the multi namespace cache indexing #922
OCPBUGS-15467: Add missing AWS permission for ListTagsForResources #954
OCPBUGS-16620: Deflake TestRouterCompressionOperation #963
OCPBUGS-16621: Fix TestClientTLS flakes #964
OCPBUGS-15644: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #959
OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #941
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #1559
OCPBUGS-17139: make webhook connection failure a warning in log #1533
OCPBUGS-13346: dont log jwt tokens #1524
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #754
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #499
OCPBUGS-14652: disable debug pporf with unauthenticated port for 4.12 #481
Full changelog

cluster-monitoring-operator

OCPBUGS-17125: backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 #2047
OCPBUGS-16028: Add the trusted CA bundle in UWM Prometheus pods #2042
OCPBUGS-15473: Limit the value of GOMAXPROCS on node-exporter to 4 #2023
Full changelog

cluster-network-operator

OCPBUGS-17656: prevent creation of multiple cni-sysctl-allowlist-ds pods #1948
OCPBUGS-11547: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1775
OCPBUGS-16142: fix reconciliation process of the allowlist controller #1891
[release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay #1764
OCPBUGS-15588: Add release version annotation to whereabouts-reconciler #1856
OCPBUGS-13891: [release-4.12] HyperShift: Support HostedControlPlane node selector #1816
OCPBUGS-13067: Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] #1829
Full changelog

cluster-node-tuning-operator

Tighten the rules for modifying Tuned Profiles (#790) #790
OCPBUGS-19459: check for object being nil (#821) #821
OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) #788
Release leader election on manager exit (#789) #789
Fix a race in e2e test rollback.go code (#742) #742
pao: e2e: Make script executable (#734) #734
pao e2e: Split gcp-pao lane (#728) #728
Do not rollback settings on TuneD exit (#711) #711
OCPBUGS-15800: e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710
Revert “Remove optimization to allow full resync (#569)” (#688) #569
update owners 20230109 (#549) #549
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667
OCPBUGS-14472: Fix updating numa core siblings map in GetCpuSiblings function (#675) #675
Remove trailing spaces from test names (#572) #572
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-13346: dont log jwt tokens #543
Full changelog

cluster-policy-controller

OCPBUGS-12442: psalabelsyncer: handle empty namespace of a rolebinding subject #111
OCPBUGS-14092: [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources #117
Full changelog

cluster-samples-operator

OCPBUGS-15757: Update Jenkins and Jenkins Agent Base image versions #506
Full changelog

cluster-storage-operator

OCPBUGS-18131: Add patch for allowing configmap updates via clusterrole #402
OCPBUGS-14307: User real node name in failing mount alerts #377
Full changelog

cluster-version-operator

OCPBUGS-14096: Trigger new sync round on ClusterOperator Available changes #938
Full changelog

console

OCPBUGS-13580: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12747
OCPBUGS-19907: Fixed Edit Application form for Knative Services #13205
OCPBUGS-19045: Web console slowness on Project>Project access page #13155
OCPBUGS-18273: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13113
OCPBUGS-18563: OLM Pages work when copied CSVs are disabled #13055
OCPBUGS-17530: fix bug where binary secret values are corrupted on edit and add test coverage #13087
OCPBUGS-18366: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13122
OCPBUGS-16660: Manual cherry-pick of #12978 #13039
OCPBUGS-17192: “Duplicate RoleBinding” leads to “Unsupported value” error #13063
OCPBUGS-16846: Fix stop PLR option #13051
OCPBUGS-2182: re-enable operator-install-single-namespace.spec.ts test #13013
OCPBUGS-16732: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047
OCPBUGS-16046, OCPBUGS-16047, OCPBUGS-16048: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997
OCPBUGS-15898: account for single object in status.conditions instead… #12982
OCPBUGS-16139: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004
OCPBUGS-15710: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962
OCPBUGS-15849: Add Pipeline metrics unsupported empty page #12977
OCPBUGS-9405: [OSD] There is no error message shown on node label edi… #12965
OCPBUGS-15798: Remove access review check for PipelineResource from Pipeline section #12969
OCPBUGS-13643: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813
OCPBUGS-15569: use service port name instead targetPort in the Pipeline Event listener route #12958
OCPBUGS-15535: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955
OCPBUGS-15404: Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935
OCPBUGS-15057: only copy workload annotations to debug pod #12903
OCPBUGS-15099: visiting Configurations page returns error Cannot read… #12906
OCPBUGS-15482: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948
OCPBUGS-14190: When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859
Full changelog

console-operator

OCPBUGS-15834: Dockerfile: Shift ConsolePlugin CRD after the operator Deployment #791
OCPBUGS-18563: OLM Pages work when copied CSVs are disabled #780
Full changelog

coredns

OCPBUGS-20144: UPSTREAM: <carry>: openshift: Fix OCPBUGS-20144 #98
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-20573: [release-4.12] CARRY: Add DOWNSTREAM_OWNERS #229
OCPBUGS-20124: FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #220
OCPBUGS-15971: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #198
Full changelog

csi-driver-manila-operator

OCPBUGS-18475: Don’t cache OpenStack client #202
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #199
Full changelog

docker-builder

OCPBUGS-17228: bump github.com/containers/buildah to v1.26.6 #325
OCPBUGS-15643: Add the git-lfs package #353
Full changelog

docker-registry

OCPBUGS-19306: bump docker-distribution #382
Full changelog

etcd

OCPBUGS-15860: [4.12] Rebase openshift/etcd to 3.5.9 #207
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #82
Full changelog

haproxy-router

OCPBUGS-17766: haproxy/template: mitigate CVE-2023-40225 #507
OCPBUGS-18639: properly handle weight=0 #511
OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #491
Full changelog

hyperkube, pod

OCPBUGS-21435: [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1760
OCPBUGS-18288, OCPBUGS-19483: Update to kubernetes 1.25.14 #1719
OCPBUGS-18768: UPSTREAM: <carry>: Force using host go always and use host libriaries #1694
OCPBUGS-17188: Update to Kubernetes 1.25.12 #1669
OCPBUGS-17159: Increase service idle max timeout to 100 minutes #1662
OCPBUGS-8737: UPSTREAM: <drop>: bump apiserver-library-go for scc fix #1619
OCPBUGS-15309: Bump to k8s 1.25.11 #1615
OCPBUGS-14745: [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600
Full changelog

hypershift

MULTIARCH-3709: PowerVS - Add reuse resource flags to e2e test #2994
MULTIARCH-3732: PowerVS - Fix cluster deletion when existing resources passed #2993
MULTIARCH-3733: Add dev flags in destroy cluster powervs command #2998
Updated secret permissions for openshift-route-controller-manager #2924
fix(hcco): Add HCP label to HCCO by default #2972
fix(ignition): Add HCP label to ignition-server by default #2949
OCPBUGS-16847: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803
OCPBUGS-16411: fix deletion bug when hostedzone is already deleted #2835
Kas policy 4.12 #2826
Leader election config update. #2800
OCPBUGS-15614: Check OwningIngressController also in Labels #2759
OCPBUGS-16086: autoscaling balance similar groups #2806
HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2749
OCPBUGS-14873: Update vendored openshift API for 4.12 #2734
HOSTEDCP-1073: enforce blocked rollout of HCP #2745
properly handle user CA bundle not existing #2711
OCPBUGS-15304: [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695
OCPBUGS-14873: Honor global ingress configuration LoadBalancer type on AWS #2678
OCPBUGS-14803: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
OCPBUGS-14156: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614
OCPBUGS-14031: Include default ingress CA in root CA bundle #2600
Full changelog

insights-operator

OCPBUGS-19476: update Insights report config logging (#831) #831
OCPBUGS-19405: workload info gatherer, add external image repo (#823) #823
OCPBUGS-15031: fix the config serialization & add test (#794) (#800) #794
OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) #804
OCPBUGS-15414: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) #788
Full changelog

ironic

OCPBUGS-17642: Expand regex for fcos/okd packages list #392
OCPBUGS-16169: allow inspector to also be proxied #385
OCPBUGS-13586: Add python-flask dependency #373
Full changelog

ironic-agent

OCPBUGS-19008: backport hostname fixes #90
“Bug OCPBUGS-15831: Switch to udevadm command install instead of package” #82
Full changelog

ironic-machine-os-downloader

OCPBUGS-15735: Binary should be compiled on rhel9 #92
Full changelog

ironic-static-ip-manager

OCPBUGS-14415: Flush addresses on provisioning interface with global scope only #37
Full changelog

kube-proxy, sdn

OCPBUGS-18325: Vendor o/k to consume update to prefer local TCP eps for DNS #573
OCPBUGS-13785: EgressNetworkPolicy DNS resolution does not fall back to TCP #542
OCPBUGS-14304: fix possible concurrent map read/write #551
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-16376: Fix np retry #740
OCPBUGS-15493: Remove unneeded grpcio dependencies from RPM #737
OCPBUGS-13778: KuryrPort cleanup: Fix issue of subport not found #731
Full changelog

machine-config-operator

OCPBUGS-20509: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3969
OCPBUGS-19779: daemon: always use podman cp to copy extensions container content #3944
OCPBUGS-19515: The kubeconfig copied on to each node has 644 permissions #3931
OCPBUGS-17862: Agent-based install process the container machine-config-controller will be oom #3875
OCPBUGS-17461: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3844
OCPBUGS-15570: configure-ovs: support UUID in vlan.parent #3768
OCPBUGS-16754: daemon: Don’t traverse /run/ostree/auth.json symlink #3818
OCPBUGS-11303: Fix regex dot in coredns config file #3660
Full changelog

machine-image-customization-controller

OCPBUGS-19008: Pass BareMetalHost name to IPA (take 2) #101
OCPBUGS-18687: Watch networkData Secrets for changes #96
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-5953: Denormalize IP name before checking if pod is alive [Backport 4.12] #178
Full changelog

network-metrics-daemon

Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Full changelog

oauth-server

OCPBUGS-13906: don’t log request query and fragment on failed authn request #129
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #130
Full changelog

openstack-machine-api-provider

Bug OCPBUGS-19770: Set controller’s SyncPeriod to 1 hour #86
OCPBUGS-10607: Use TenantID if ProjectID is empty #66
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-18512, RHIBMCS-168: Copied csv listing backport #559
Introduce DOWNSTREAM_OWNERS file #541
Allow cpb to be statically compiled / exempt from FIPS compliance #512
OCPBUGS-15858: fix dynamic conversion webhook #503
OCPBUGS-15737: Re-enable psa plugin #500
Full changelog

operator-marketplace

OCPBUGS-18503: remove a race condition #533
OCPBUGS-14109: Revert default catsrc diff changes #519
Full changelog

ovirt-csi-driver-operator

OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #121
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-14708, OCPBUGS-19089, OCPBUGS-19904, OCPBUGS-19906: Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp #1881
OCPBUGS-18054: Emit node events only when retry failure #1837
OCPBUGS-18652: Do not return error if pod IP cannot be retrieved for deletePeerPod and perf improvements #1903
OCPBUGS-19432: Remove stale egressip status entry #1892
OCPBUGS-18586: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1856
OCPBUGS-18058: [release-4.12] Create egress firewall with one db transaction #1835
OCPBUGS-17675: Don’t return error on delete event that doesn’t ave a chance to succeed. #1814
OCPBUGS-17522: [release-4.12] libovsdb: give monitor setup time to process than normal transactions #1808
OCPBUGS-16336: Backport support AllocateLoadBalancerNodePortsFalse #1766
OCPBUGS-15593: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1730
OCPBUGS-15719: [relase-4.12] Fix egressFirewall create error handling #1746
OCPBUGS-13744: Improve syncNodes to remove stale data #1732
OCPBUGS-13885: [release-4.12] Drop packets that were not properly SNATed #1679
OCPBUGS-15388: Fix stale SNAT entries for completed pods #1723
OCPBUGS-15709: [release-4.12] Remove non-existing functions test. #1739
OCPBUGS-15424: [release-4.12] Fix network policy to work with long namespace names #1725
OCPBUGS-14982: Validate port before deleting conntrack flow #1713
OCPBUGS-14041: Fix bug that resulted in routes not be restored to a new vnic #1681
OCPBUGS-13953: [release-4.12] Use loadbalancer.Name as client index #1680
Full changelog

route-controller-manager

OCPBUGS-14275: Bump k8s to 1.25.10 #27
Full changelog

tests

OCPBUGS-18490: bump monitoring SNO bounds #28239
OCPBUGS-18527: Ignore timeout and connection refused errors during upgrade tests for 4.12 #28270
OCPBUGS-18309: Add missing watch permission for console users #28234
OCPBUGS-16696: Wait for DNS DS pods to be ready #28083
OCPBUGS-16243: allow cluster-config-operator to manage featuregate upgrade block #28055
OCPBUGS-15933: remove references to registry.centos.org #28033
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27941
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-14312: Update 4.12 against v2.7.1 #81
Full changelog

vsphere-csi-driver-operator

OCPBUGS-18131: Block upgrade to 4.13 via admin ack #171
OCPBUGS-18333: disable controller hostNetwork #167
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github