Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.45-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
  • aws-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.12-micro Succeeded (3 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
  • gcp-ovn-upgrade-4.12-minor Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.12-upgrade-from-stable-4.11-e2e-gcp-ovn-upgrade
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.12.44 (changes) - F F F S S S S
• 4.12.43 (changes) - Success
• 4.12.42 (changes) - Failed
• 4.12.41 (changes) - Success
• 4.12.29 (changes) - Success
• 4.12.28 (changes) - Success
• 4.12.21 - Success
• 4.12.2 (changes) - Success
• 4.12.1 (changes) - Failed
• 4.12.0 (changes) - Success
• 4.11.54 (changes) - F F S F S
• 4.11.53 (changes) - Failed
• 4.11.52 (changes) - Failed
• 4.11.40 (changes) - Failed
• 4.11.30 (changes) - Success
• 4.11.19 (changes) - Failed
• 4.11.13 (changes) - Success
• 4.11.12 (changes) - Failed
• 4.11.11 (changes) - Success

Upgrades to:

• 4.13.46 (changes) - Failed
• 4.13.43 (changes) - Success
• 4.13.30 (changes) - Success
• 4.13.29 (changes) - Failed
• 4.13.28 (changes) - Success
• 4.13.27 (changes) - F S S S
• 4.13.26 (changes) - F S S S
• 4.13.25 (changes) - Success
• 4.13.0-0.nightly-2023-12-14-214122 (changes) - F F S S S F S
• 4.13.0-0.nightly-2023-12-13-204132 (changes) - S S S S
• 4.13.0-0.nightly-2023-12-13-101502 (changes) - F F S S S S S
• 4.13.0-0.nightly-2023-12-12-144414 (changes) - S F S F F
• 4.13.0-0.nightly-2023-12-12-055122 (changes) - F S S S S S
• 4.13.0-0.nightly-2023-12-11-225920 (changes) - F S F S S F
• 4.13.0-0.nightly-2023-12-11-165920 (changes) - S S S S F
• 4.13.0-0.nightly-2023-12-08-072634 (changes) - S S F F S
• 4.13.0-0.nightly-2023-12-07-160307 (changes) - S F F S F
• 4.13.0-0.nightly-2023-12-06-205733 (changes) - F S F S S S
• 4.13.0-0.nightly-2023-12-06-135158 (changes) - S S F S S
• 4.13.0-0.nightly-2023-12-05-144824 (changes) - S S S F F
• 4.13.0-0.nightly-2023-12-05-084824 (changes) - S F S S F
• 4.13.0-0.nightly-2023-12-05-015329 (changes) - S S S F F
• 4.13.0-0.nightly-2023-12-04-114627 (changes) - F F F F S F F F
• 4.13.0-0.nightly-2023-12-01-041832 (changes) - S S S S S
• 4.13.0-0.ci-2023-12-15-120452 (changes) - S F S
• 4.13.0-0.ci-2023-12-14-224222 (changes) - S S F F F F
• 4.13.0-0.ci-2023-12-14-120952 (changes) - S S F F F F
• 4.13.0-0.ci-2023-12-13-230757 (changes) - S F S
• 4.13.0-0.ci-2023-12-13-154825 (changes) - S S S
• 4.13.0-0.ci-2023-12-13-094547 (changes) - S S S
• 4.13.0-0.ci-2023-12-13-034547 (changes) - S S S
• 4.13.0-0.ci-2023-12-12-173013 (changes) - S F F S
• 4.13.0-0.ci-2023-12-12-054820 (changes) - S F F F F F
• 4.13.0-0.ci-2023-12-11-234817 (changes) - S S S
• 4.13.0-0.ci-2023-12-11-105829 (changes) - S S F F F S
• 4.13.0-0.ci-2023-12-11-014039 (changes) - S F F F S
• 4.13.0-0.ci-2023-12-09-033736 (changes) - S S S
• 4.13.0-0.ci-2023-12-08-213736 (changes) - S S S
• 4.13.0-0.ci-2023-12-08-153719 (changes) - S S S
• 4.13.0-0.ci-2023-12-08-093719 (changes) - S S F S
• 4.13.0-0.ci-2023-12-08-033719 (changes) - S S S
• 4.13.0-0.ci-2023-12-07-160750 (changes) - S S F F F F
• 4.13.0-0.ci-2023-12-07-100750 (changes) - S F S
• 4.13.0-0.ci-2023-12-07-035248 (changes) - F S F S
• 4.13.0-0.ci-2023-12-06-215248 (changes) - S S S
• 4.13.0-0.ci-2023-12-06-125829 (changes) - S F F F S
• 4.13.0-0.ci-2023-12-06-062130 (changes) - S S S
• 4.13.0-0.ci-2023-12-05-235515 (changes) - F S S F F F F
• 4.13.0-0.ci-2023-12-05-113553 (changes) - F S S F F F S
• 4.13.0-0.ci-2023-12-05-052232 (changes) - F S F F S
• 4.13.0-0.ci-2023-12-04-205108 (changes) - S F F F S
• 4.13.0-0.ci-2023-12-04-120004 (changes) - S F F F F S
• 4.13.0-0.ci-2023-12-04-031644 (changes) - S S F F S
• 4.13.0-0.ci-2023-12-03-180318 (changes) - S S S
• 4.13.0-0.ci-2023-12-03-062842 (changes) - S S F F F F
• 4.13.0-0.ci-2023-12-02-200912 (changes) - S S S
• 4.13.0-0.ci-2023-12-02-140912 (changes) - S S S
• 4.13.0-0.ci-2023-12-02-061407 (changes) - S S S
• 4.13.0-0.ci-2023-12-02-001407 (changes) - S S S
• 4.13.0-0.ci-2023-12-01-181407 (changes) - S S F S
• 4.13.0-0.ci-2023-12-01-112733 (changes) - S S F S
• 4.13.0-0.ci-2023-12-01-052733 (changes) - S S S
• 4.13.0-0.ci-2023-11-30-222221 (changes) - Success
• 4.12.48 (changes) - Success
• 4.12.47 (changes) - Success
• 4.12.46 (changes) - F S F S F S

---

Loading changelog, this may take a while ...

Changes from 4.12.21

Created: 2023-11-30 09:28:06 +0000 UTC

Image Digest: sha256:faf0aebc0abce8890e046eecfa392c24bc24f6c49146c45447fb0977e692db6e

Release 4.12.45 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-11-29-211658

Components

• Kubernetes upgraded from 1.25.10 to 1.25.14
• Red Hat Enterprise Linux CoreOS upgraded from 412.86.202306031844-0 to 412.86.202311271639-0 (diff)

Rebuilt images without code change

• alibaba-cloud-controller-manager git 1959de0e sha256:0dd60912d88f90c28e5f9bcfb5f2ed681c05e3f764e8c1cd5a31f92b8522b06c
• alibaba-machine-controllers git b9287c05 sha256:7319b5c11520b6497e8469df25382d7a8f33c14686af71e3f39cf31a1fc8fdf3
• aws-machine-controllers git b82e889d sha256:17255aaccc7a96fc66f8b19df80f16c4f420b098a62e0720b33449e14c505685
• cluster-autoscaler-operator git 8b232255 sha256:55cff8ed4a1554b2b424bb32bf3b40029e2ecf8f8ba6ced01ee3235cb453293a
• cluster-cloud-controller-manager-operator git 103cb2ec sha256:c27eea36dbbae6f6379d5aee1f18f5ce2b941184c916a2011579bbe6bd41229b
• cluster-update-keys git 2796e173 sha256:3647e54ee5d117e809a2a730b5b39f165303aeeedda78c1a0a690700c61f3a56
• configmap-reloader git e4d9170e sha256:790d70f55507ac05d04afc2615e02306f3e2afce1c3ff010841986801ed53dc0
• csi-driver-nfs git d9099257 sha256:28c960f2c20e9351feb1110a4d67737cd9ab6e7d93506824d454e914c2163bc9
• driver-toolkit git 6e5c04c0 sha256:61a6d6f20c21eedec340467df57aa468426ff9b818b36c845e14a8328092b892
• egress-router-cni git a92e4157 sha256:28f05f6b302f89a2dec5ebcb855e4e7b04228ba726ca21b892965667f406ddf9
• gcp-cloud-controller-manager git 8d208a7f sha256:fecf1768e5bb3620e404f4e1a36845e7795ce27a24e61fee242e926d708a8906
• ibm-cloud-controller-manager git e5f25fc6 sha256:b9774357fbd2cd48bef8233649e1626d28bab84f3dd7456e06b1076dbed1dfc7
• ibmcloud-cluster-api-controllers git c1304c80 sha256:29453294e50788f81fb5d64882c884aa780a7ef2da0265236600b684e76453c4
• ibmcloud-machine-controllers git 31a67dac sha256:cd5b074c96aa0e6669f4df6756a320bee267216d5e458343f572c0dcfec8cc58
• ironic-static-ip-manager git a8ade8fe sha256:c6cdaae3f5187be8d3c2f18de5177d55185264fdaa2701119e63bf8523428b0c
• keepalived-ipfailover git 7e8a0105 sha256:706ef57a7f69becb5e7b0f33ac3abfd1b4e8043c37dd60b32b6d0c08f8fe89fe
• kube-storage-version-migrator git 596745ce sha256:98dd7b90128935e2b0faea024bde227ebd681005f6d9ab51f151ccbb6cb58dde
• kubevirt-cloud-controller-manager git a19615cd sha256:96bb4556c7235f0858d82db0895a347274fb9e92494f14faa24a2294e9cb6f44
• kubevirt-csi-driver git f407c8a7 sha256:dc986de37524724962ab73b3ade148a2ee9ac48fb55619a6b0c33376f6cc343e
• libvirt-machine-controllers git a2882f7a sha256:fc8a2ba2dd821bf1ce90561b85bc0162786f17f3f782db6bdc896207c501b639
• machine-api-operator git a6c42a42 sha256:0073e2eec6797fdd1f5f6d24ffae96ad85194fa7b4f07060002c90af1bfcd4e1
• machine-os-content sha256:41d0d32b4280bc668add7a4b6b3a64a83ab4faad1ea2d9d02261d328d2e1e17c
• machine-os-images git 566bf595 sha256:6ab76d76c3560b03e0a0036f3215bb4cc146b73ad338a356bbd5d11503810731
• multus-route-override-cni git efd6ffbb sha256:653eb956c2c9bba0e4895b47b46dce5b28a555c8320972caa06b431cc8c907e8
• must-gather git 5fd21761 sha256:8477c3819e9c7dad1503d8af01a276ca7f8ae85137181d25da8cec5965febee0
• network-interface-bond-cni git 30386d6b sha256:1c3211056f26a6fffe6196fd1b614bd9992a5ee85195976ca0c7fd4ed401a6dd
• network-tools git c76613c7 sha256:726136f1b03f86320c06f883882aa8c1c44e965862d21b3030c499eec91788f8
• nutanix-machine-controllers git 25aea2d4 sha256:7437b534c2ce0d0a16e044530d841b42190d8e92a2980488f05f1b1e774c9149
• oauth-apiserver git cfafdccf sha256:4756f3444d5fdf28cd58b74021454ad3d3098aeff06cdc61f50a7ba41c19972a
• oauth-proxy git 03e5b13b sha256:d7feaa482a38a6293845b0a77f5effaea43f256b881cbd0c498e0ff07250b3c3
• openshift-apiserver git 635ed5cc sha256:2633326e0e205d1990b92d20fb885a564975ff4d6163efff3c0ff103de36a054
• openshift-controller-manager git b6528f9e sha256:1339a415c26e1494bbb5f3ee0b86b6120a00a9cac1d9dad8bd0d410bb7e8eed2
• ovirt-machine-controllers git 03e8cb50 sha256:a741945ae2a4ee13ec8f9e3be0da08938da7922ad61bda27402771cc66b2e623
• prom-label-proxy git b1907888 sha256:cfc4b5897e7c15b4b8edef1ffe20350a2fb9bf8bba5b49dcfda4418d4c167337
• rhel-coreos-8 sha256:20b4937e8d107af19d8e39329e1767471b78ba6abd07b5a3e328dafd7b146858
• rhel-coreos-8-extensions sha256:3d2b012d82bccfa965cf721531b7414f82891d12e784ca2e03923c37f91aa9d0
• route-controller-manager git 0f141ce9 sha256:6474893b0cb06b5d89fae2080a3c4e1bb36ded45a5c7c189837bbf3380e1e41a
• service-ca-operator git 299b7097 sha256:8011cdfad6534d7065cf2e5e5311978cb852a08c421fe959406522eea3dba5f7
• vsphere-cloud-controller-manager git e993e31f sha256:56a2efeaae6ba1184b265b7e1da63face8ddec6f79720d373f806bb16140008c
• vsphere-cluster-api-controllers git 5c261b3b sha256:3a484073c6144b9c068075511f59a7b4d2c9bda72ea227c5c1a01dc435f65a5b

agent-installer-api-server

• MGMT-15150: Use same installer binary for all platform types (#5347) #5347
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#726) #670
• Full changelog

agent-installer-node-agent

• OCPBUGS-23537: backport of agent retries (#627) #627
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-21313: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-21404: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #66
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #58
• Full changelog

apiserver-network-proxy

• OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-20722: Update golang.org/x/net to v0.17.0 #55
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-20810: bump golang.org/x/net to v0.17.0 #483
• OCPBUGS-15548: Pass right SGs for IsExternallyManaged on creation #469
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20919: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #241
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-21018: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #282
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #265
• Full changelog

aws-pod-identity-webhook

• NO-ISSUE: Sync OWNERS with team members #178
• NO-ISSUE: snyk: exclude vendor/ #174
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-22832: UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #91
• OCPBUGS-17159: Increase service idle max timeout to 100 minutes #82
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-21489: bump golang.org/x/net to v0.17.0 #289
• Full changelog

azure-disk-csi-driver

• OCPBUGS-22941: UPSTREAM: 1755: fix: detach disk failure when there is throttling #62
• OCPBUGS-22832: UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #60
• OCPBUGS-20675: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #56
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-20749: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #103
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #95
• Full changelog

azure-file-csi-driver

• OCPBUGS-20842: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20946: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #78
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #71
• Full changelog

azure-machine-controllers

• OCPBUGS-19549, OCPBUGS-22247: Fix empty clusterName references for GenerateMachinePublicIPName #82
• OCPBUGS-17960: Machine Actuator should not set metadata.name #71
• OCPBUGS-17221: Add user defined Tags to NIC Azure resources #69
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-23329: Specify google cloud CLI to version 447.0.0 #7731
• OCPBUGS-22933: [release-4.12]: vsphere: fix validation of CPUS and CoresPerSocket #7677
• OCPBUGS-13288: use python3 for cloud sdk #7170
• OCPBUGS-18645: new Aws secret regions support #7473
• OCPBUGS-22288: Don’t log password values #7627
• OCPBUGS-18644: terraform: aws: secret regions now support ALIAS record #7472
• OCPBUGS-17651: Validate that the rendevousIP is assigned to a master #7416
• OCPBUGS-20145: [release-4.12] Use updated ansible-core for Openstack image #7560
• OCPBUGS-18646: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7474
• OCPBUGS-10992: bootstrap-pivot: skip pivot in SCOS Live ISO #7035
• CORS-2792: AWS Shared VPC Backport [release-4.12] #7435
• OCPBUGS-18320: CORS-2445: GCP: Add osImage to the install config #7454
• OCPBUGS-17404: backport openstack UPI for ansible 2.10 #7399
• OCPBUGS-16778: bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 #7420
• OCPBUGS-17467: Allow override of networkType #7406
• OCPBUGS-17174: Set AdditionalTrustBundle in override when mirroring not enabled #7386
• OCPBUGS-16382: azure: skip LB creation when not needed #7342
• OCPBUGS-14868: Shorten SNO installation duration by releasing CPC lease #7242
• OCPBUGS-14495: Support /dev/disk/by-path root device hints #7227
• OCPBUGS-16151: ic: azure: validate diskTypes in AzureStack #7331
• OCPBUGS-11199: azure: upi: use Image Gallery in ARM templates #7054
• OCPBUGS-13940: bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249
• OCPBUGS-14664: Shorten SNO installation duration by releasing CVO lease #7235
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21700: Uplift x/net to v0.17.0 #200
• Full changelog

baremetal-operator

• OCPBUGS-23291: hack for deploying V6-only clusters from dualstack hubs #320
• OCPBUGS-21154: Uplift x/net to v0.17.0 #310
• OCPBUGS-17703: Trigger reconcile on Secret change #298
• OCPBUGS-17459: Set minimum TLS version for webhook to 1.2 #297
• Full changelog

baremetal-runtimecfg

• OCPBUGS-20127: Increase timeout for bootstrap kubeapi #279
• OCPBUGS-18606: Move haproxy firewall rule check earlier in loop #272
• OCPBUGS-17715: Don’t render config with incomplete unicast peer list #268
• OCPBUGS-15315: Use machine-config state instead of comparing roles #262
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-23222: regeneratemco: explicitly check for PlatformStatus field #1598
• OCPBUGS-20248: oc process: Set original namespace if it differs #1560
• OCPBUGS-20291: Truncate existing files when writing from inspect #1563
• OCPBUGS-20299: Use quay redis image instead docker mysql #1567
• OCPBUGS-16173: Add tls-server-name when property exists in kubeconfig #1507
• OCPBUGS-1283: Bump golang.org/x dependencies #1421
• OCPBUGS-16056: mcs cert: account for environments that use IP directly #1501
• OCPBUGS-16194: reboot: set ignition version to 3.1 #1509
• handle the error case of node retrieval while waiting for reboot #1485
• bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478
• OCPBUGS-14647: [release-4.12] Do not set master node selector if there’s no masters #1366
• Full changelog

cloud-credential-operator

• OCPBUGS-21348: Upgrade golang/x/net for CVE-2023-39325 #624
• NO-ISSUE: snyk: exclude vendor/ #619
• NO-ISSUE: Removing andrew from OWNERS #618
• Full changelog

cloud-network-config-controller

• OCPBUGS-22949: Azure: skip backend pool if attached to an outbound rule #128
• OCPBUGS-16325: Azure: Handle already existing IP configurations #117
• OCPBUGS-14717: increase GCP egress ip capacity to 100 from 10 #114
• Full changelog

cluster-authentication-operator

• OCPBUGS-13346: dont log jwt tokens #622
• Full changelog

cluster-autoscaler

• OCPBUGS-23274: Rebase 4.12 branch onto cluster autoscaler 1.25.3 #267
• Full changelog

cluster-baremetal-operator

• OCPBUGS-23291: hack for deploying V6-only clusters from dualstack hubs #389
• OCPBUGS-20845: Uplift x/net to v0.17.0 #371
• OCPBUGS-19557: Guard against nil PlatformStatus #367
• OCPBUGS-16169: use proxying for inspector in addition to ironic #349
• OCPBUGS-15715: Limit role binding to openshift-machine-api namespace #347
• Full changelog

cluster-bootstrap

• OCPBUGS-14386: Update dependencies and image #91
• Full changelog

cluster-capi-controllers

• OCPBUGS-21521: bump golang.org/x/net to v0.17.0 #186
• Full changelog

cluster-capi-operator

• OCPBUGS-21055: Bump golang.org/x/net to v0.17.0 #138
• Full changelog

cluster-config-operator

• : OCPBUGS-21245: bump library-go to include switch to HTTP/1.1 #373
• CORS-2794: AWS Shared VPC API Bump [release-4.12] #344
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-21342: Bump golang.org/x/net to v0.17.0 #260
• OCPBUGS-14960: Check ProviderSpec before generating MachineInfo #216
• OCPBUGS-15198: Surface cpms vs machines diff #219
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21442: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #169
• Full changelog

cluster-dns-operator

• OCPBUGS-21525: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #391
• OCPBUGS-19933: update-node-resolver.sh: Check for errors from >> #385
• OCPBUGS-19933: ensure original hosts file contents are preserved #383
• OCPBUGS-15251: Add support for protocolStrategy API field to enable force_tcp configuration #378
• Full changelog

cluster-etcd-operator

• OCPBUGS-21127: fixing CVE-2023-39325 by updating dependencies #1148
• OCPBUGS-20100: [4.12] Backports of backup/restore fixes #1137
• OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #1128
• OCPBUGS-17808: reset snapshot default counts to avoid file already lo… #1100
• Full changelog

cluster-image-registry-operator

• OCPBUGS-20684: mitigate effects of rapid reset #947
• Full changelog

cluster-ingress-operator

• OCPBUGS-20765: Bump golang.org/x/net for CVE-2023-44487 #988
• OCPBUGS-22432: test/e2e: Don’t use openshift/origin-node #992
• NE-1372: Add support for AWS shared VPC in another account #966 #971
• OCPBUGS-13049: bump controller-runtime to fix the multi namespace cache indexing #922
• OCPBUGS-15467: Add missing AWS permission for ListTagsForResources #954
• OCPBUGS-16620: Deflake TestRouterCompressionOperation #963
• OCPBUGS-16621: Fix TestClientTLS flakes #964
• OCPBUGS-15644: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #959
• OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #941
• Full changelog

cluster-kube-apiserver-operator

• : OCPBUGS-20855: bump library-go to include switch to HTTP/1.1 #1574
• OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #1559
• OCPBUGS-17139: make webhook connection failure a warning in log #1533
• OCPBUGS-13346: dont log jwt tokens #1524
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-20962: bump golang.org/x/net to v0.17.0 #29
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-21048: Bump deps to address CVE-2023-44487 [4.12] #759
• OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #754
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-21239: Sync deps CVE 2023 39325 4.12 #505
• OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #499
• OCPBUGS-14652: disable debug pporf with unauthenticated port for 4.12 #481
• Full changelog

cluster-kube-storage-version-migrator-operator

• : OCPBUGS-21336: bump library-go to include switch to HTTP/1.1 #98
• Full changelog

cluster-machine-approver

• OCPBUGS-21430: Bump x/net package to v0.18.0 #214
• Full changelog

cluster-monitoring-operator

• OCPBUGS-22843: [release-4.12] add RHACS telemetry metrics #2140
• OCPBUGS-21234: upgrade golang.org/x/net to v0.17.0 #2123
• OCPBUGS-17125: backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 #2047
• OCPBUGS-16028: Add the trusted CA bundle in UWM Prometheus pods #2042
• OCPBUGS-15473: Limit the value of GOMAXPROCS on node-exporter to 4 #2023
• Full changelog

cluster-network-operator

• OCPBUGS-23293: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #2108
• OCPBUGS-20277: Edited multus-admission-controller deployment config to not add autoount a service account token #1884
• OCPBUGS-20197: remove prestop hooks for northd, sbdbd and nbdb #2055
• OCPBUGS-17656: prevent creation of multiple cni-sysctl-allowlist-ds pods #1948
• OCPBUGS-11547: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1775
• OCPBUGS-16142: fix reconciliation process of the allowlist controller #1891
• [release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay #1764
• OCPBUGS-15588: Add release version annotation to whereabouts-reconciler #1856
• OCPBUGS-13891: [release-4.12] HyperShift: Support HostedControlPlane node selector #1816
• Full changelog

cluster-node-tuning-operator

• Disable HTTP/2 for webhook and metrics servers (#849) #849
• Remove obsolete protocols and weak ciphers (#847) #847
• OCPBUGS-21837: nto: pao avoid timeout when there are too many CSV (#838) #838
• Tighten the rules for modifying Tuned Profiles (#790) #790
• OCPBUGS-19459: check for object being nil (#821) #821
• OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) #788
• Release leader election on manager exit (#789) #789
• Fix a race in e2e test rollback.go code (#742) #742
• pao: e2e: Make script executable (#734) #734
• pao e2e: Split gcp-pao lane (#728) #728
• Do not rollback settings on TuneD exit (#711) #711
• OCPBUGS-15800: e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710
• Revert “Remove optimization to allow full resync (#569)” (#688) #569
• update owners 20230109 (#549) #549
• Full changelog

cluster-openshift-apiserver-operator

• : OCPBUGS-20694: bump library-go to include switch to HTTP/1.1 #556
• OCPBUGS-13346: dont log jwt tokens #543
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-20777: bump(k8s,openshift) to address CVE-2023-44487 #311
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-20979: [release-4.12] Bump golang.org/x/net to v0.17.0 #99
• Full changelog

cluster-policy-controller

• OCPBUGS-21080: Bump deps to address CVE-2023-44487 [4.12] #136
• OCPBUGS-12442: psalabelsyncer: handle empty namespace of a rolebinding subject #111
• Full changelog

cluster-samples-operator

• OCPBUGS-15757: Update Jenkins and Jenkins Agent Base image versions #506
• Full changelog

cluster-storage-operator

• OCPBUGS-21266: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #407
• OCPBUGS-18131: Add patch for allowing configmap updates via clusterrole #402
• Full changelog

cluster-version-operator

• OCPBUGS-20729: [4.12] Bump http-related deps #990
• OCPBUGS-22408: pkg/clusterconditions/promql: Warm cache with 1s delay #988
• OCPBUGS-22198: Reconcile Volumes in SCCs #985
• OCPBUGS-14096: Trigger new sync round on ClusterOperator Available changes #938
• Full changelog

console

• OCPBUGS-23346: update the KnativeServing API version to v1beta1 for global-config extension #13334
• OCPBUGS-23154: remove expandable toggle for conditional update risk d… #13322
• OCPBUGS-22964: add support for new features annotations while preservi… #13305
• OCPBUGS-19382: Could not import multiple resources via JSON (while YAML supports this) #13168
• OCPBUGS-20071: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13212
• OCPBUGS-21727: fetch TaskRuns without selector and reduces the get TaskRuns requests #13251
• OCPBUGS-21731: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13252
• OCPBUGS-13580: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12747
• OCPBUGS-19907: Fixed Edit Application form for Knative Services #13205
• OCPBUGS-19045: Web console slowness on Project>Project access page #13155
• OCPBUGS-18273: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13113
• OCPBUGS-18563: OLM Pages work when copied CSVs are disabled #13055
• OCPBUGS-17530: fix bug where binary secret values are corrupted on edit and add test coverage #13087
• OCPBUGS-18366: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13122
• OCPBUGS-16660: Manual cherry-pick of #12978 #13039
• OCPBUGS-17192: “Duplicate RoleBinding” leads to “Unsupported value” error #13063
• OCPBUGS-16846: Fix stop PLR option #13051
• OCPBUGS-2182: re-enable operator-install-single-namespace.spec.ts test #13013
• OCPBUGS-16732: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047
• OCPBUGS-16046, OCPBUGS-16047, OCPBUGS-16048: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997
• OCPBUGS-15898: account for single object in status.conditions instead… #12982
• OCPBUGS-16139: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004
• OCPBUGS-15710: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962
• OCPBUGS-15849: Add Pipeline metrics unsupported empty page #12977
• OCPBUGS-9405: [OSD] There is no error message shown on node label edi… #12965
• OCPBUGS-15798: Remove access review check for PipelineResource from Pipeline section #12969
• OCPBUGS-13643: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813
• OCPBUGS-15569: use service port name instead targetPort in the Pipeline Event listener route #12958
• OCPBUGS-15535: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955
• OCPBUGS-15404: Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935
• OCPBUGS-15057: only copy workload annotations to debug pod #12903
• OCPBUGS-15099: visiting Configurations page returns error Cannot read… #12906
• OCPBUGS-15482: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948
• OCPBUGS-14190: When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859
• Full changelog

console-operator

• OCPBUGS-18951: Add haproxy timeout annotation to console routes #792
• OCPBUGS-18309: Add missing watch permission for helm-chartrepos-viewers #789
• OCPBUGS-15834: Dockerfile: Shift ConsolePlugin CRD after the operator Deployment #791
• OCPBUGS-18563: OLM Pages work when copied CSVs are disabled #780
• Full changelog

container-networking-plugins

• OCPBUGS-20593: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.12] #131
• Full changelog

coredns

• OCPBUGS-21023: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #103
• OCPBUGS-20144: UPSTREAM: <carry>: openshift: Fix OCPBUGS-20144 #98
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-21236: Upgrade dependencies #242
• OCPBUGS-20573: [release-4.12] CARRY: Add DOWNSTREAM_OWNERS #229
• OCPBUGS-20124: FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #220
• OCPBUGS-15971: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #198
• Full changelog

csi-driver-manila-operator

• OCPBUGS-18475: Don’t cache OpenStack client #202
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #199
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-23118: Should reference configmaps instead of secrets #154
• OCPBUGS-20703: bump golang.org/x/net to v0.17.0 #148
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-20787: bump golang.org/x/net to v0.17.0 #88
• Full changelog

csi-external-attacher

• OCPBUGS-21139: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #62
• Full changelog

csi-external-provisioner

• OCPBUGS-20743: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #74
• Full changelog

csi-external-resizer

• OCPBUGS-20885: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #149
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-20991: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #111
• Full changelog

csi-livenessprobe

• OCPBUGS-20629: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20674: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #54
• Full changelog

docker-builder

• OCPBUGS-23037: Add -p flag to cp command to preserve timestamps #372
• OCPBUGS-20695: [release-4.12]Bump golang.org/x/net #364
• OCPBUGS-17228: bump github.com/containers/buildah to v1.26.6 #325
• OCPBUGS-15643: Add the git-lfs package #353
• Full changelog

docker-registry

• OCPBUGS-19306: bump docker-distribution #382
• Full changelog

etcd

• OCPBUGS-21187: [4.12] Carrying fixes for CVE-2023-44487 #228
• OCPBUGS-15860: [4.12] Rebase openshift/etcd to 3.5.9 #207
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-21380: Bump golang.org/x/net to v0.17.0 #205
• Full changelog

gcp-machine-controllers

• OCPBUGS-20833: Bump x/net package to v0.18.0 #69
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20718: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #47
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20807: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #89
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #82
• Full changelog

haproxy-router

• OCPBUGS-21098: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #532
• OCPBUGS-17766: haproxy/template: mitigate CVE-2023-40225 #507
• OCPBUGS-18639: properly handle weight=0 #511
• OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #491
• Full changelog

hyperkube, pod

• OCPBUGS-23288: UPSTREAM: 121881: Use golang library instead of mklink #1803
• OCPBUGS-20113: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1747
• openshift-hack: Fix sporadic 141 errors in build-rpms #1774
• OCPBUGS-21435: [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1760
• OCPBUGS-18288, OCPBUGS-19483: Update to kubernetes 1.25.14 #1719
• OCPBUGS-18768: UPSTREAM: <carry>: Force using host go always and use host libriaries #1694
• OCPBUGS-17188: Update to Kubernetes 1.25.12 #1669
• OCPBUGS-17159: Increase service idle max timeout to 100 minutes #1662
• OCPBUGS-8737: UPSTREAM: <drop>: bump apiserver-library-go for scc fix #1619
• OCPBUGS-15309: Bump to k8s 1.25.11 #1615
• OCPBUGS-14745: [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600
• Full changelog

hypershift

• MULTIARCH-3709: PowerVS - Add reuse resource flags to e2e test #2994
• MULTIARCH-3732: PowerVS - Fix cluster deletion when existing resources passed #2993
• MULTIARCH-3733: Add dev flags in destroy cluster powervs command #2998
• Updated secret permissions for openshift-route-controller-manager #2924
• fix(hcco): Add HCP label to HCCO by default #2972
• fix(ignition): Add HCP label to ignition-server by default #2949
• OCPBUGS-16847: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855
• [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803
• OCPBUGS-16411: fix deletion bug when hostedzone is already deleted #2835
• Kas policy 4.12 #2826
• Leader election config update. #2800
• OCPBUGS-15614: Check OwningIngressController also in Labels #2759
• OCPBUGS-16086: autoscaling balance similar groups #2806
• HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2749
• OCPBUGS-14873: Update vendored openshift API for 4.12 #2734
• HOSTEDCP-1073: enforce blocked rollout of HCP #2745
• properly handle user CA bundle not existing #2711
• OCPBUGS-15304: [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695
• OCPBUGS-14873: Honor global ingress configuration LoadBalancer type on AWS #2678
• OCPBUGS-14803: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667
• [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-20583: [IBM VPC] failed provisioning volume in proxy cluster #56
• OCPBUGS-21206: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-20583: [IBM VPC] failed provisioning volume in proxy cluster #79
• OCPBUGS-21302: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #83
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21415: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #29
• Full changelog

insights-operator

• OCPBUGS-23439: remove username & password config options (#869) #869
• OCPBUGS-22922: create Prometheus rules programmatically according the… (#860) (#862) #860
• OCPBUGS-20731: update dependencies (#841) #841
• Add cherry-pick from 4.13 (#853) #853
• OCPBUGS-19476: update Insights report config logging (#831) #831
• OCPBUGS-19405: workload info gatherer, add external image repo (#823) #823
• OCPBUGS-15031: fix the config serialization & add test (#794) (#800) #794
• OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) #804
• OCPBUGS-15414: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) #788
• Full changelog

ironic

• OCPBUGS-23357: Upgrade werkzeug dependency #423
• OCPBUGS-23182: Use bash process substitution instead of pipe #419
• OCPBUGS-19064: Handle Eject DVD in 4.12 #417
• OCPBUGS-21849: bump eventlet version #409
• OCPBUGS-17642: Expand regex for fcos/okd packages list #392
• OCPBUGS-16169: allow inspector to also be proxied #385
• Full changelog

ironic-agent

• OCPBUGS-19008: better compatibility with old hostnamectl #92
• OCPBUGS-19008: backport hostname fixes #90
• “Bug OCPBUGS-15831: Switch to udevadm command install instead of package” #82
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-15735: Binary should be compiled on rhel9 #92
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-20580: limit number of simultaneous client requests #79
• Full changelog

kube-proxy, sdn

• OCPBUGS-22972: Change the permission of 80-openshift-network.conf to 600 #583
• OCPBUGS-18325: Vendor o/k to consume update to prefer local TCP eps for DNS #573
• OCPBUGS-13785: EgressNetworkPolicy DNS resolution does not fall back to TCP #542
• Full changelog

kube-rbac-proxy

• OCPBUGS-20687: trim down http2, make it configurable 4.12 #85
• Full changelog

kube-state-metrics

• OCPBUGS-20764: bump x/net to v0.17.0 #103
• Full changelog

kuryr-cni, kuryr-controller

• Bug OCPBUGS-16376: Fix np retry #740
• OCPBUGS-15493: Remove unneeded grpcio dependencies from RPM #737
• OCPBUGS-13778: KuryrPort cleanup: Fix issue of subport not found #731
• Full changelog

machine-config-operator

• OCPBUGS-21038: update library-go and kube deps to latest version #4013
• OCPBUGS-22719: Backport logspam PRs #4008
• OCPBUGS-21723: keepalived/ingress: change healthcheck script #3985
• OCPBUGS-18433: Prevent NM from unsetting the hostname #3900
• OCPBUGS-20509: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3969
• OCPBUGS-19779: daemon: always use podman cp to copy extensions container content #3944
• OCPBUGS-19515: The kubeconfig copied on to each node has 644 permissions #3931
• OCPBUGS-17862: Agent-based install process the container machine-config-controller will be oom #3875
• OCPBUGS-17461: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3844
• OCPBUGS-15570: configure-ovs: support UUID in vlan.parent #3768
• OCPBUGS-16754: daemon: Don’t traverse /run/ostree/auth.json symlink #3818
• OCPBUGS-11303: Fix regex dot in coredns config file #3660
• Full changelog

machine-image-customization-controller

• OCPBUGS-21543: Uplift x/net to v0.17.0 #106
• OCPBUGS-19008: Pass BareMetalHost name to IPA (take 2) #101
• OCPBUGS-18687: Watch networkData Secrets for changes #96
• Full changelog

multus-admission-controller

• OCPBUGS-21330: Update go.mod for CVE-2023-39325 [Release-4.12] #73
• Full changelog

multus-cni

• OCPBUGS-21061: Update go.mod for CVE-2023-39325 [Release-4.12] #196
• OCPBUGS-22461: fix multiple default gw #200
• Full changelog

multus-networkpolicy

• OCPBUGS-21420: Update go.mod for CVE-2023-39325 (#36) #36
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-5953: Denormalize IP name before checking if pod is alive [Backport 4.12] #178
• Full changelog

network-metrics-daemon

• Update the k8s dependencies to 1.25.15 (#84) #84
• Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
• Full changelog

oauth-server

• OCPBUGS-13906: don’t log request query and fragment on failed authn request #129
• Full changelog

oc-mirror

• OCPBUGS-21440: fix: CVE-2023-39325 and CVE-2023-44487 (#713) #713
• Full changelog

olm-rukpak

• OCPBUGS-23449: [release-4.12] Address http2 Vulnerability #64
• OCPBUGS-21343: [release-4.12] Bump golang.org/x/net to v0.17.0 #41
• UPSTREAM: <carry>: add downstream owners #43
• Full changelog

openshift-state-metrics

• OCPBUGS-20706: bump x/net to v0.17.0 #106
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21557: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #137
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #130
• Full changelog

openstack-machine-api-provider

• Bug OCPBUGS-19770: Set controller’s SyncPeriod to 1 hour #86
• OCPBUGS-10607: Use TenantID if ProjectID is empty #66
• Full changelog

openstack-machine-controllers

• OCPBUGS-20780: deps: Upgrade golang.org/x/net to v0.17.0 #277
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-22132: [release-4.12] Bump golang.org/x/net to v0.17.0 #590
• OCPBUGS-18512, RHIBMCS-168: Copied csv listing backport #559
• Introduce DOWNSTREAM_OWNERS file #541
• Allow cpb to be statically compiled / exempt from FIPS compliance #512
• OCPBUGS-15858: fix dynamic conversion webhook #503
• OCPBUGS-15737: Re-enable psa plugin #500
• Full changelog

operator-marketplace

• OCPBUGS-20955: [release-4.12] bump golang.org/x/net to 0.17.0 #550
• OCPBUGS-18503: remove a race condition #533
• Full changelog

ovirt-csi-driver

• OCPBUGS-23162: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-23266: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #128
• OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #121
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-18681: Check libovsdbclient.ErrNotFound on wrapped errors #1862
• OCPBUGS-20241: fix race condition in hybrid overlay DRIP alloc #1932
• OCPBUGS-18353: Update bridge flow cache when the host address changes #1872
• OCPBUGS-14708, OCPBUGS-19089, OCPBUGS-19904, OCPBUGS-19906: Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp #1881
• OCPBUGS-18054: Emit node events only when retry failure #1837
• OCPBUGS-18652: Do not return error if pod IP cannot be retrieved for deletePeerPod and perf improvements #1903
• OCPBUGS-19432: Remove stale egressip status entry #1892
• OCPBUGS-18586: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1856
• OCPBUGS-18058: [release-4.12] Create egress firewall with one db transaction #1835
• OCPBUGS-17675: Don’t return error on delete event that doesn’t ave a chance to succeed. #1814
• OCPBUGS-17522: [release-4.12] libovsdb: give monitor setup time to process than normal transactions #1808
• OCPBUGS-16336: Backport support AllocateLoadBalancerNodePortsFalse #1766
• OCPBUGS-15593: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1730
• OCPBUGS-15719: [relase-4.12] Fix egressFirewall create error handling #1746
• OCPBUGS-13744: Improve syncNodes to remove stale data #1732
• OCPBUGS-13885: [release-4.12] Drop packets that were not properly SNATed #1679
• OCPBUGS-15388: Fix stale SNAT entries for completed pods #1723
• OCPBUGS-15709: [release-4.12] Remove non-existing functions test. #1739
• OCPBUGS-15424: [release-4.12] Fix network policy to work with long namespace names #1725
• OCPBUGS-14982: Validate port before deleting conntrack flow #1713
• OCPBUGS-14041: Fix bug that resulted in routes not be restored to a new vnic #1681
• Full changelog

powervs-block-csi-driver

• OCPBUGS-21079: CVE-2023-39325 - Update net dependencies - 4.12 #53
• Update OWNERS add yussufsh #55
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-21168: CVE-2023-39325 - Update net dependencies - 4.12 #42
• Update OWNERS add yussufsh #46
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-21260: CVE-2023-39325 - Update net dependencies - 4.12 #47
• Full changelog

powervs-machine-controllers

• OCPBUGS-21882: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.12 #57
• Full changelog

prometheus

• OCPBUGS-21219: update golang.org/x/net to v0.17.0 [4.12] #175
• Full changelog

prometheus-alertmanager

• OCPBUGS-21031: Bump golang.org/x/net to v0.17.0 #82
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-20843: Bump golang.org/x/net to v0.17.0 #249
• Full changelog

prometheus-node-exporter

• OCPBUGS-21123: upgrade golang.org/x/net to v0.17.0 #136
• Full changelog

telemeter

• OCPBUGS-21310: [release-4.12] fix: Bump golang.org/x/net to v0.17.0 #486
• Full changelog

tests

• Bug OCPBUGS-20557: Correct condition for rejecting connection #28327
• OCPBUGS-18490: bump monitoring SNO bounds #28239
• OCPBUGS-18527: Ignore timeout and connection refused errors during upgrade tests for 4.12 #28270
• OCPBUGS-18309: Add missing watch permission for console users #28234
• OCPBUGS-16696: Wait for DNS DS pods to be ready #28083
• OCPBUGS-16243: allow cluster-config-operator to manage featuregate upgrade block #28055
• OCPBUGS-15933: remove references to registry.centos.org #28033
• Full changelog

thanos

• OCPBUGS-21135: Bump golang.org/x/net to v0.17.0 #126
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-20417: syncer: fix nil pointer dereference in log message #98
• OCPBUGS-21552: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #92
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21416: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #175
• OCPBUGS-18131: Block upgrade to 4.13 via admin ack #171
• OCPBUGS-18333: disable controller hostNetwork #167
• Full changelog

vsphere-problem-detector

• OCPBUGS-21574: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
• Full changelog

---

View changelog in Markdown or change previous release: 4.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.18.0-0.nightly-2024-10-06-0535524.18.0-0.nightly-2024-10-05-2227174.18.0-0.nightly-2024-10-05-1732524.18.0-0.nightly-2024-10-05-1246484.18.0-0.nightly-2024-10-05-0731594.18.0-0.nightly-2024-10-05-0208184.18.0-0.nightly-2024-10-04-2108384.18.0-0.nightly-2024-10-04-1312004.18.0-0.nightly-2024-10-04-0433524.18.0-0.nightly-2024-10-03-2208024.18.0-0.nightly-2024-10-03-1626224.18.0-0.nightly-2024-10-02-2102284.18.0-0.nightly-2024-10-02-1251034.18.0-0.nightly-2024-10-02-0810044.18.0-0.nightly-2024-10-01-2349404.18.0-0.nightly-2024-10-01-1058524.18.0-0.nightly-2024-10-01-0628044.18.0-0.nightly-2024-10-01-0159144.18.0-0.nightly-2024-09-30-1618174.18.0-0.nightly-2024-09-30-1012064.18.0-0.nightly-2024-09-30-0510284.18.0-0.nightly-2024-09-29-2226034.18.0-0.nightly-2024-09-29-1505564.18.0-0.nightly-2024-09-27-2127074.18.0-0.nightly-2024-09-27-1145284.18.0-0.nightly-2024-09-23-182657───4.18.0-0.ci-2024-10-06-0815334.18.0-0.ci-2024-10-05-1955564.18.0-0.ci-2024-10-05-1355554.18.0-0.ci-2024-10-05-0755544.18.0-0.ci-2024-10-05-0155544.18.0-0.ci-2024-10-04-1955524.18.0-0.ci-2024-10-04-1355514.18.0-0.ci-2024-10-04-0755504.18.0-0.ci-2024-10-04-0155494.18.0-0.ci-2024-10-03-1955484.18.0-0.ci-2024-10-03-135548───4.17.0-0.nightly-2024-10-06-0649224.17.0-0.nightly-2024-10-06-0210394.17.0-0.nightly-2024-10-05-2116464.17.0-0.nightly-2024-10-05-1409494.17.0-0.nightly-2024-10-05-0720184.17.0-0.nightly-2024-10-05-0245464.17.0-0.nightly-2024-10-04-1709584.17.0-0.nightly-2024-10-04-0916084.17.0-0.nightly-2024-10-04-0049384.17.0-0.nightly-2024-10-03-1729574.17.0-0.nightly-2024-10-03-1012194.17.0-0.nightly-2024-10-03-0216164.17.0-0.nightly-2024-10-02-1740474.17.0-0.nightly-2024-10-02-0714074.17.0-0.nightly-2024-10-01-1837414.17.0-0.nightly-2024-10-01-0753534.17.0-0.nightly-2024-09-30-2036524.17.0-0.nightly-2024-09-30-0743484.17.0-0.nightly-2024-09-29-1734214.17.0-0.nightly-2024-09-28-0248314.17.0-0.nightly-2024-09-27-2135034.17.0-0.nightly-2024-09-27-1432004.17.0-0.nightly-2024-09-27-0951224.17.0-0.nightly-2024-09-27-0448514.17.0-0.nightly-2024-09-26-2355434.17.0-0.nightly-2024-09-26-1859484.17.0-0.nightly-2024-09-26-1459484.17.0-0.nightly-2024-09-25-1311594.17.0-0.nightly-2024-09-25-0611414.17.0-0.nightly-2024-09-24-2117024.17.0-0.nightly-2024-09-23-2114174.17.0-0.nightly-2024-09-23-1628374.17.0-0.nightly-2024-09-23-0908034.17.0-0.nightly-2024-09-23-0350054.17.0-0.nightly-2024-09-22-2111344.17.0-0.nightly-2024-09-22-162519───4.17.0-0.ci-2024-10-05-1325534.17.0-0.ci-2024-10-05-0725534.17.0-0.ci-2024-10-05-0125534.17.0-0.ci-2024-10-04-1925534.17.0-0.ci-2024-10-04-1325534.17.0-0.ci-2024-10-04-0258454.17.0-0.ci-2024-10-03-2058454.17.0-0.ci-2024-10-03-130357───4.16.0-0.nightly-2024-10-06-0737384.16.0-0.nightly-2024-10-06-0229024.16.0-0.nightly-2024-10-05-2148254.16.0-0.nightly-2024-10-05-1721164.16.0-0.nightly-2024-10-05-1230184.16.0-0.nightly-2024-10-05-0537514.16.0-0.nightly-2024-10-04-2214304.16.0-0.nightly-2024-10-04-1645364.16.0-0.nightly-2024-10-04-0746364.16.0-0.nightly-2024-10-03-2034494.16.0-0.nightly-2024-10-03-1536124.16.0-0.nightly-2024-10-03-0858254.16.0-0.nightly-2024-10-03-0331234.16.0-0.nightly-2024-10-02-2208524.16.0-0.nightly-2024-10-02-1438094.16.0-0.nightly-2024-10-02-0936034.16.0-0.nightly-2024-10-02-0446164.16.0-0.nightly-2024-10-01-2132254.16.0-0.nightly-2024-10-01-1303314.16.0-0.nightly-2024-10-01-0824414.16.0-0.nightly-2024-10-01-0336074.16.0-0.nightly-2024-09-30-2001214.16.0-0.nightly-2024-09-30-1432334.16.0-0.nightly-2024-09-30-0843134.16.0-0.nightly-2024-09-30-0133274.16.0-0.nightly-2024-09-29-1939404.16.0-0.nightly-2024-09-29-1146264.16.0-0.nightly-2024-09-29-0507414.16.0-0.nightly-2024-09-28-2156054.16.0-0.nightly-2024-09-28-1059484.16.0-0.nightly-2024-09-28-0258284.16.0-0.nightly-2024-09-27-2058244.16.0-0.nightly-2024-09-27-1523384.16.0-0.nightly-2024-09-27-0950464.16.0-0.nightly-2024-09-27-0417134.16.0-0.nightly-2024-09-26-1904114.16.0-0.nightly-2024-09-26-1312484.16.0-0.nightly-2024-09-26-0644594.16.0-0.nightly-2024-09-26-0112094.16.0-0.nightly-2024-09-25-1729554.16.0-0.nightly-2024-09-25-0859004.16.0-0.nightly-2024-09-25-0346364.16.0-0.nightly-2024-09-24-0605524.16.0-0.nightly-2024-09-23-1832094.16.0-0.nightly-2024-09-23-1250484.16.0-0.nightly-2024-09-22-173535───4.16.0-0.ci-2024-10-06-0336534.16.0-0.ci-2024-10-05-2136534.16.0-0.ci-2024-10-05-1440364.16.0-0.ci-2024-10-05-0038314.16.0-0.ci-2024-10-04-1838314.16.0-0.ci-2024-10-04-1238314.16.0-0.ci-2024-10-04-0638314.16.0-0.ci-2024-10-04-0014224.16.0-0.ci-2024-10-03-1649514.16.0-0.ci-2024-10-03-104951───4.15.0-0.nightly-2024-10-06-0531504.15.0-0.nightly-2024-10-05-2235124.15.0-0.nightly-2024-10-05-1608474.15.0-0.nightly-2024-10-05-0953214.15.0-0.nightly-2024-10-05-0318404.15.0-0.nightly-2024-10-04-2025204.15.0-0.nightly-2024-10-04-1418104.15.0-0.nightly-2024-10-04-0701124.15.0-0.nightly-2024-10-04-0015484.15.0-0.nightly-2024-10-03-1321174.15.0-0.nightly-2024-10-03-0640284.15.0-0.nightly-2024-10-02-2345224.15.0-0.nightly-2024-10-02-1642094.15.0-0.nightly-2024-10-02-0931004.15.0-0.nightly-2024-10-02-0228344.15.0-0.nightly-2024-10-01-1943084.15.0-0.nightly-2024-10-01-1303404.15.0-0.nightly-2024-10-01-064339───4.15.0-0.ci-2024-10-05-0325564.15.0-0.ci-2024-10-04-1353164.15.0-0.ci-2024-10-04-0753164.15.0-0.ci-2024-10-04-0153164.15.0-0.ci-2024-10-03-1626364.15.0-0.ci-2024-10-03-0932444.15.0-0.ci-2024-10-03-0102404.15.0-0.ci-2024-10-02-091951───4.14.0-0.nightly-2024-10-06-0823364.14.0-0.nightly-2024-10-06-0248114.14.0-0.nightly-2024-10-05-2034424.14.0-0.nightly-2024-10-05-1537314.14.0-0.nightly-2024-10-05-1105474.14.0-0.nightly-2024-10-05-0505084.14.0-0.nightly-2024-10-04-2306064.14.0-0.nightly-2024-10-04-1741044.14.0-0.nightly-2024-10-04-1030134.14.0-0.nightly-2024-10-04-0521224.14.0-0.nightly-2024-10-04-0003094.14.0-0.nightly-2024-10-03-1634104.14.0-0.nightly-2024-10-03-0916484.14.0-0.nightly-2024-10-03-0354414.14.0-0.nightly-2024-10-02-2355054.14.0-0.nightly-2024-10-02-1942024.14.0-0.nightly-2024-10-02-1107364.14.0-0.nightly-2024-10-02-0651024.14.0-0.nightly-2024-10-02-0305124.14.0-0.nightly-2024-10-01-2052074.14.0-0.nightly-2024-10-01-104334───4.14.0-0.ci-2024-10-05-0612024.14.0-0.ci-2024-10-04-1641274.14.0-0.ci-2024-10-04-0548034.14.0-0.ci-2024-10-03-1828514.14.0-0.ci-2024-10-02-1945014.14.0-0.ci-2024-10-02-0424134.14.0-0.ci-2024-10-01-1621074.14.0-0.ci-2024-09-30-1229014.14.0-0.ci-2024-09-27-2006394.14.0-0.ci-2024-09-27-055354───4.13.0-0.nightly-2024-10-04-1439374.13.0-0.nightly-2024-10-02-2002544.13.0-0.nightly-2024-10-02-1130014.13.0-0.nightly-2024-10-02-0308494.13.0-0.nightly-2024-10-01-0919094.13.0-0.nightly-2024-10-01-031909───4.13.0-0.ci-2024-10-03-0339324.13.0-0.ci-2024-10-02-1630274.13.0-0.ci-2024-10-02-0357304.13.0-0.ci-2024-10-01-1941384.13.0-0.ci-2024-10-01-0453474.13.0-0.ci-2024-09-30-0326574.13.0-0.ci-2024-09-26-2049304.13.0-0.ci-2024-09-26-070632───4.12.0-0.nightly-2024-10-04-1439084.12.0-0.nightly-2024-10-03-0201424.12.0-0.nightly-2024-10-02-1130114.12.0-0.nightly-2024-10-02-0245494.12.0-0.nightly-2024-10-01-1921534.12.0-0.nightly-2024-10-01-035743───4.12.0-0.ci-2024-10-04-1534124.12.0-0.ci-2024-10-04-0916044.12.0-0.ci-2024-10-03-1854184.12.0-0.ci-2024-10-03-1222474.12.0-0.ci-2024-10-02-2353424.12.0-0.ci-2024-10-02-1010074.12.0-0.ci-2024-10-01-154048───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-28-2035454.11.0-0.ci-2024-06-18-0336354.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.14.18.0-ec.04.17.0-ec.0

Source code for this page located on github