4.12.70

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.70-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-nightly-4.12-upgrade-from-stable-4.11-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.11.57, 4.11.58, 4.11.59, 4.12.0, 4.12.1, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.2, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.7, 4.12.8, 4.12.9

Upgrades to:

4.13.54 (changes) - S S F
4.13.0-0.nightly-2024-12-21-132229 (changes) - S F F F S
4.13.0-0.nightly-2024-12-21-044945 (changes) - S S S S S
4.13.0-0.nightly-2024-12-14-165158 (changes) - S S F F S
4.13.0-0.nightly-2024-12-08-161043 (changes) - S F F S F
4.13.0-0.nightly-2024-11-30-041900 (changes) - S F F S F
4.13.0-0.ci-2024-12-21-103446 (changes) - S S S
4.13.0-0.ci-2024-12-21-043446 (changes) - S S S
4.13.0-0.ci-2024-12-20-070416 (changes) - F S S F S
4.13.0-0.ci-2024-12-19-172422 (changes) - F S F F F F F
4.13.0-0.ci-2024-12-19-012829 (changes) - S S S
4.13.0-0.ci-2024-12-16-051335 (changes) - F S S F F F F
4.13.0-0.ci-2024-12-14-165146 (changes) - S S F S
4.13.0-0.ci-2024-12-14-043905 (changes) - F S F S
4.13.0-0.ci-2024-12-10-015615 (changes) - F S S S
4.13.0-0.ci-2024-12-09-154030 (changes) - F S S F F S
4.13.0-0.ci-2024-12-08-161201 (changes) - F F S F S
4.13.0-0.ci-2024-12-06-150702 (changes) - F S S S
4.13.0-0.ci-2024-12-06-084137 (changes) - S F F S
4.13.0-0.ci-2024-12-05-155634 (changes) - F S S S
4.13.0-0.ci-2024-12-05-054732 (changes) - S S F F F S
4.13.0-0.ci-2024-12-04-200952 (changes) - F F S S S
4.13.0-0.ci-2024-12-03-073039 (changes) - S S F F S
4.13.0-0.ci-2024-12-02-194758 (changes) - F S S F F F F
4.13.0-0.ci-2024-12-02-065956 (changes) - S S F F F F

Loading changelog, this may take a while ...

Changes from 4.12.50

Created: 2024-11-28 11:01:53 +0000 UTC

Image Digest: sha256:40a0dce2a37e3278adc2fd64f63bca67df217b7dd8f68575241b66fdae1f04a3

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202402131748-0 to 412.86.202411270001-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:d2fea2f452c66fcf0609dfe24d1348b647075c41c267f324191f798df377aa5c
alibaba-cloud-csi-driver git 4d3b1125 sha256:896a8e551e28569f3fe01f351cd175ca7dcd4fe9bf96c629d9b09f17fdd69b7a
alibaba-disk-csi-driver-operator git 99bcda8d sha256:ba2c540d3230b9a3f9b79b36b507ad90c9a53bbdf5f2ea9c21baf0cdbc3be30c
alibaba-machine-controllers git b9287c05 sha256:511e73d6d0834d7f13d70985385d358c608bfe7fd79bb9bdcf46a864b8c06ffc
aws-cluster-api-controllers git 16156acc sha256:89ddccdd91372cca17d538fd69cf8a21b5910ebb2d1a99e5d72919c289bc7a52
azure-cloud-controller-manager git 2193ccfa sha256:7e22dc5743452d8e2b1cd5d6b9af44dbdf3f9cf0fbfe6953b9416af477876e6a
azure-cloud-node-manager git 2193ccfa sha256:7761711b17368693ca6ea85f99e1f4ed758f7b2cbca11a8806ccb80763bbe302
azure-disk-csi-driver git a930c89b sha256:03c406c5b41dfa6b5c9ab00adcde6a62b7f79ff27996a21396526e1303feeb84
azure-disk-csi-driver-operator git 988b8cc8 sha256:2070d62a32f3bcb293aca95bc2eb4d19e04b02bdd8efecb1604c97c7f74cdb6d
azure-file-csi-driver git 15aade4d sha256:5630526404e6091c9c93562ac2d1d58ebcff052b337cab7ceb826f8fa116af50
azure-file-csi-driver-operator git 060ba825 sha256:4aa65e1a1e797731a494bedd769b611ec98d0a5d065ef104a8b3679751ec5e7a
baremetal-machine-controllers git 24a47014 sha256:7ac5a21f2fc3b376402d0527422d01c3a6926a67224819440c622ab344d7d805
baremetal-runtimecfg git 474ed48e sha256:b0b2f7b57c6f1fafb5b9734b081470cc7b9728ecc4c812a6dd0c288f68a73de0
cluster-authentication-operator git 4f7f6b1a sha256:ab5e96bb8786aca17cd320588d756b3ccbd3d26e9ade73438f8b669ab1ff3026
cluster-bootstrap git 138a1cf2 sha256:2ad9f5852f8831c159f32abb00c6ed9e6a266ca2ffe0b0c93b5b534a518e36ea
cluster-capi-controllers git 03d89f21 sha256:9b2ab82e2071af559aecfcd1283e29260eff2707991ae958838fca52e8cec29f
cluster-capi-operator git 60a36d83 sha256:79bd2a6fb8ed9b8639118b55874afd80b34b5304646208b437de12402a7951a7
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:41fcadcb73ad603290c4e5966088610ba7dc15690c7bf8322c3d0629cab4395f
cluster-dns-operator git e9555341 sha256:2fc222480539872b8bd5590ac2d0cb9c3c7fb40ede3f3037dfdedd2d313bee5c
cluster-kube-apiserver-operator git 09d7ddba sha256:a636589d398d01d2bd1d632c8b0cf749350276f4d1a3b78a5017bcb2b179627a
cluster-kube-cluster-api-operator git d50f7322 sha256:08de3ba3490d8a4e986fcdabbf7e9506c8333f7a7f9910b72e40f2a889d9e42a
cluster-kube-controller-manager-operator git c3c07beb sha256:98d3aca38181af51ba534a61221b299c8afd393a0fbb4df4d2e46af375eb1587
cluster-kube-scheduler-operator git 48cd96c9 sha256:cfa773eb998a45f46aecff3798b9b6ad9a7a39707abadddd4f2ee996fa815e6a
cluster-kube-storage-version-migrator-operator git 1a251f4d sha256:abff159dd996da20dc700c54a508dcb7dfbcee9d2db2a7b51e8f45dd63ca3bbb
cluster-machine-approver git 7b08a4de sha256:b87d63dad1ac6e5d8b202c3d98e183b0b4dabbb6b380e7863a6781bfbfd3de45
cluster-openshift-apiserver-operator git b870fc67 sha256:d9e8a730526b12484a9ceb7d903bb126121f658346c5fb4a34a274fcb48e9c13
cluster-openshift-controller-manager-operator git ab963d8a sha256:25b624c30c0c05d5dcd1e7ed15b7ae5f9d9a9e3d4d9408c9d6b336174edc606f
cluster-platform-operators-manager git c930dc74 sha256:ed2602118132d2aa4221961c532e5e46024696aa72fbaba9d4a9f36e24b57a86
cluster-policy-controller git cb8862b0 sha256:6d5cc5496d2ae173b0e65d9aac6c5e44a696b276acd1ec74d36afd7ec45834ee
cluster-samples-operator git f1b49e34 sha256:a4801f150896740bbb4eb6581ff55ad8c4a7c9a6e12102d74b03b0fe8f470a52
cluster-storage-operator git 21ebf328 sha256:75f439b9800f1fd9e5284efc43aa2d49183ecf5fac7002780717d80b73e25d92
cluster-update-keys git 2796e173 sha256:6b0a1f13690bcf2eb26fd73c1dc5e259b5ee915ed308d3116675dca8c0241ca7
cluster-version-operator git 8e2c472a sha256:7f1bd0ef7d9abe0e2fb08affbe5108ace41565e223a7fb101c0b334666c85249
configmap-reloader git e4d9170e sha256:5b99795bc429094a0197c748361e285d7b4a6206dae3becd17b863aed6cc71ef
container-networking-plugins git 1b339719 sha256:72c7fb671f59e0f0ed1e3101f1df56e32b1561de0ceb167c02482448a9e79bad
coredns git cc1194ea sha256:1925b34f64c04108923b8ae77becb69516bc884528a18f01b4c3b4df41265932
csi-driver-manila git 2f1d9f8a sha256:f5f0f445dbc96ce5b10f3c9a4d27bea6cf7c3438f9f6d01e4ffd3280e2a146c6
csi-driver-nfs git d9099257 sha256:58552ac1861a2bece7fdcf837dbb3a0beeda5da864895a358f9b51d20b4a25f5
csi-driver-shared-resource git d054948f sha256:93bfc5f6361e8ffc58afa80a1ed437bdee32b325652a228da00f53f4146aec3e
csi-driver-shared-resource-operator git cc297702 sha256:6343fe3f1a1d857f8429faeaac27ae7f5ef05ec4c83b8a2845c44119c81ad3fe
csi-driver-shared-resource-webhook git d054948f sha256:83fb851dac2371b0caed95c401c82f65ea18c28b7076128d6261a1b3cc0df308
csi-external-attacher git fac7b8fd sha256:16df4a7036586b0b8ba93765a83a4e4d3d91de1755bf6f78fada14b0f697c856
csi-external-provisioner git 3aa7c527 sha256:f4895a04be51bfeb9cb67edaf301f215ac5ad1d648d71c4e95c3a5780c47660b
csi-external-resizer git 5b066ba4 sha256:0a1a9eb8e276f58b901902db3408d27f68a8767f122d4c148d9a6269bde9e6b2
csi-livenessprobe git e6545e71 sha256:f56b5229b46c19c26773f17f29acd639d494a8cd8b60a2fddcad27bd5f0d8225
csi-node-driver-registrar git c316b896 sha256:49dd59ec24063416c6b4bb0a788c59cd81f514053e09e77b1446452e25c8c9d8
docker-registry git 9e75355c sha256:9610287d3fa98acd090a930a1bfc6ff9118c2ca05c31509783bf1d3fa2779aea
driver-toolkit git 6e5c04c0 sha256:a44318703adefa08a44bb5cb1e800b1b9b3b73aed5945a3e55b7432968b33609
egress-router-cni git a92e4157 sha256:26b51cc84264eac60fd97e94598c757a19ca8069a3c0c9df4e9ba464de0d9e2e
gcp-cloud-controller-manager git 8a84952e sha256:d6ddab85f987104da9512c066d89aaeb588ca743eadfd455af06126922aa7416
gcp-cluster-api-controllers git e00019fa sha256:c201c691695610dbb7a1424f03e7ccefd2b6eb2c922d7e2175552eaf741c0b41
gcp-machine-controllers git d6d8c1cc sha256:9188a481b8c05a85e91cc835cf08be64f3ecd48409c38fbbd387340fd57eb91b
gcp-pd-csi-driver git 5dcfd675 sha256:d82aa7bab6dea98e84f646d4fefbb560bdbbe0be78c0f16586c6a32037b95cfb
gcp-pd-csi-driver-operator git 30e97ba5 sha256:ab528d17e8a09fffde91193be7846909c12409fee5a0613e54f18a193a8e708c
ibm-cloud-controller-manager git 8bd0ea8f sha256:e17140c1683fcb4e428895bafb230cba9b387656fc9fa4ad779703ef24ca106d
ibm-vpc-node-label-updater git f9da23ac sha256:59a24e76b4d36ec9fd3d0c431df0d136e1ca9a18289899007fcc0cc4e568a472
ibmcloud-cluster-api-controllers git 0fe74f67 sha256:d96dc6c25893618e5ee10cf137c5f1e4b25ab00c6a6714c219d9bf95e315e95a
ibmcloud-machine-controllers git 31a67dac sha256:429e32f6bfef6ce223331fe0fae74610af65f261f36b2bf30c038b65a17f0d96
ironic-machine-os-downloader git c65c1f1c sha256:fa3ea1edd37b1ec9554ffbe73775fd83544680dc6eb652730819153a79ec2586
ironic-static-ip-manager git a8ade8fe sha256:23278bad2b78dfd93444750bac01bc0ce71245edf34719272f23deaeae2fe8b7
k8s-prometheus-adapter git 36c06694 sha256:62a9b9e6e7db41ca504f16f827205820c2d7c73a3e163a4383e7c14bcb75a222
keepalived-ipfailover git 7e8a0105 sha256:cdcd2dad1098dfd416ab718703a6b39350470bdf46ce94c3df90da7d647495c0
kube-proxy git 9706f967 sha256:f6fe98a9748c07f3fd42b85625cf204a29ac4bbd113b4ea72d47918999fa8b66
kube-state-metrics git 748f7131 sha256:da1d6299f0560d35ca548369926381c4b224a9f45d7d63685b6a34d84bbdba13
kube-storage-version-migrator git 596745ce sha256:430c8def557c8a69df8b20a72dd184198ebf01ec86f49bd395de1ba83d9e6f56
kubevirt-cloud-controller-manager git a19615cd sha256:503b40f662de4f9e1bbee4bc29f002c8006d6772220aa9992476b02f0840b708
kubevirt-csi-driver git f407c8a7 sha256:0a9092661c4975530f869d1ac08fd6d8d34b1110874eff85a1ca15767e3af6df
kuryr-cni git 8fd2f8b0 sha256:053a377fbc613de11de6780eaed5b0b94c4089609fdb6c66351a7b8958f89970
kuryr-controller git 8fd2f8b0 sha256:4824748937a43d6d349fb9650753dae2597f12d1159cf9247831f8f630ab404f
libvirt-machine-controllers git a2882f7a sha256:2bd351362f128431698bb6d32b6f548bae66a6698a26bcf2971cf731b9668cf0
machine-image-customization-controller git e456249d sha256:b1e1f2c9cbc8a58c70364557c10da4e114cf4fd43b56732d7fb841c5ee17e97b
machine-os-content sha256:43d07a52a910ab1b6f8a1aba2ab713b43658b4dff60df64aee388a0da9d5585a
machine-os-images git 566bf595 sha256:46222ce6b137a25b5860883c1ff570d1dd4c84c13f430545e9c8f5d0830084e1
multus-admission-controller git e27952fc sha256:6d83aaf524712f59d74e9a8393a8e3e19f3c5157f58d1d86550c49e29ce5b631
multus-networkpolicy git 644461f2 sha256:c0d1e20f80c26a8f949cc3743baf5fe2f8847e58a9b1d4f9c888fe098db935a0
multus-route-override-cni git efd6ffbb sha256:2bd659263d884ff626c8011552f552b9a2c70065b66f2c5b4d64fd1fcaa5b167
must-gather git dc23fd81 sha256:a8da52d691442e71dfeea38e9421e420f1f014d4102ad8a2417bc3d0ac19d9fa
network-interface-bond-cni git 30386d6b sha256:17e98af0a9b11ab37138725120a7e75ca8006ebccbadf989bf408ab547e06564
network-metrics-daemon git fad45782 sha256:0b6cb7c4ac44d55b14743d70e9e29cc50b77a302ac2f35a4ecb0823dab7684cf
network-tools git c76613c7 sha256:6509116b4ede7eb1e8a4a7eedff95819c000e04c6b0c45763265fc9da47e12de
nutanix-machine-controllers git 708c6dae sha256:7719a2ab0213b0fe284747b4d46133fcf635decf6b278a84785db095f446c6c6
oauth-proxy git 03e5b13b sha256:82324d0ef8da2fdc3ccef6b4d46fc80a35dec2ba791de439a0c8a16bea78cdd2
openshift-apiserver git e9ad6499 sha256:90a05beea5e1a6a22153a0efc7c4ce816c8c619302dbf5970f2eba6afaa7fa8f
openshift-state-metrics git 3d5dc18d sha256:a6fa680c66eb3df81f5b7c931d1360169a96b32d3ffb45a647e1dc4b9ea4bbdf
openstack-cinder-csi-driver git 2f1d9f8a sha256:362a04a7caf6ac86724f07822b0d8b981b7249963065356c25a0b9a80f6550ba
openstack-cinder-csi-driver-operator git d09e51ae sha256:afd2c3fe2f2b9bea7381b8cfc21e777f43ad3f9410908e09ef79d019f287803e
openstack-cloud-controller-manager git 2f1d9f8a sha256:0db8194b89628eb085bf36b3b444f6536634adb95324ec0ab872080b010e4b22
openstack-machine-api-provider git 05657663 sha256:05b2ddbe37549b3d16a66917bb1a2525fcac2113b45c6606b082ef5e8a8cc607
openstack-machine-controllers git f13e381e sha256:4f0a63c8b7458a55b6a46614a59cabfb7c1961a33c2e313a78434d7769d69e80
ovirt-csi-driver git 87ab3789 sha256:408262df9552a4ce9fc11bdac870b99a662cb71b78227e7d81dcec7a06b778ce
ovirt-csi-driver-operator git e5e02335 sha256:9bf198b249319b787bb17ae856c9ba58c1367acae8623254f23dda40df4ebfc7
ovirt-machine-controllers git 03e8cb50 sha256:cd617615ea01bbc8c58df4c90b869d0e363908c7e9f22fb73541dc2898cb2388
powervs-block-csi-driver git b78e8e78 sha256:a2a5b588fb56d42911f00895626f234e7a0e59ac7a435a485f6f7cdd55d1a7df
powervs-block-csi-driver-operator git 7dadc08a sha256:e6bbd419ced7bcce10742ed464a8a588a63dc0e2fb6ff4c549070467f344e5e9
powervs-cloud-controller-manager git 4fb4334c sha256:ad04eff75ddb665cf66164c5c936c092f0e173a72ea8f17a9ba094a187eae93e
prom-label-proxy git b1907888 sha256:e7085bb59074d9e784bd44bd2b553d692b7440e10765d8863f96582d6cfc544b
prometheus git 72ceaef4 sha256:d39b5366d4e24d3773a16a64a17bf04556ffe5566c0fdbd793cbe523910d1027
prometheus-alertmanager git 914cad82 sha256:33a24e8648bb33353bfc4e07f2293a8887001cd5a58507a3a1b1d4e46e7669fe
prometheus-config-reloader git d1e399d5 sha256:8bdbab3cbc26bb76e759bed3b3dc4644549d6a42615711d4d529b0505b439ba1
prometheus-node-exporter git 99077a3c sha256:8324f630fc65036ecc947c7c3262ffde75a17fcc4b6ba76eff095c6a77a70f7b
prometheus-operator git d1e399d5 sha256:96bd5506e45ddba4827b0388300503f90001d70da3a78f3d4ff227ece941911e
prometheus-operator-admission-webhook git d1e399d5 sha256:69f6c7e5c30a0d0a62d7bc32954c7e23cd45b2f282079a10ca8c06a148e84e7d
rhel-coreos-8 sha256:4f5585c6f8b5397327aec653ec8847cc6061da22710493e4819d3ada0f1e77af
rhel-coreos-8-extensions sha256:87b03401340f1290f4f1a32f3da87e06f000500c116fb69aa1d0cbd8f7451fbe
route-controller-manager git 0f141ce9 sha256:07b0620e47ff1ddc029713afe56e10689bbdae759d9df9089dbb7bc636f14451
sdn git 9706f967 sha256:6a12e0ee5ee137920c7cc50a76df194062ac30957599c25ee0d86d7364dbf370
service-ca-operator git ef1d057d sha256:b345e4d9fb0e40880adc93b676c2b19c80b3bf2ec2236c8adc222d163d8d2e56
thanos git 2867a6b5 sha256:c3bd4bf591aa9786011d8d049b43e1b1cfb0e9570b6cdf58dbe4c58da00100ec
vsphere-cloud-controller-manager git e170dce5 sha256:442c303f853d013d917e01c271cd1eda8e26a5a5df8da5b22def7ee8914284c2
vsphere-cluster-api-controllers git a61d43b7 sha256:40eb3a9c92dd075f471b77235fe62a7f5a13441225be03ee7e025576bd1937dc
vsphere-csi-driver git e4c0e103 sha256:bdfeb8d7f8c36e6a926c8a7f9440d85f98bfbb5266da7860133a7b7f46e27e68
vsphere-csi-driver-operator git d7cca470 sha256:1b206bb70595525053445379dea7feb295f61589c8d30cc0cfaa8d973dcbc60f
vsphere-csi-driver-syncer git e4c0e103 sha256:b828bc8effa9bfc0b837a5133ccf5bae64eecbc71f68207b6342ec717457a415
vsphere-problem-detector git f25ae2ad sha256:256400a3add3b34c518564d5a52211cb00719f090e072909305d6b4ec5c76510

agent-installer-api-server

MGMT-17596: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) #6214
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) #6207
MGMT-17541: Replace broken golangci reference (#6195) #6195
NO-ISSUE: replace postgres images as current one disappeared from quay (#6132) #6132
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) #836
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) #828
MGMT-17541: Replace broken golangci reference (#825) #825
Full changelog

agent-installer-node-agent

MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#707) #707
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#701) #701
MGMT-17541: Replace broken golangci reference (#696) #696
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32079: update for CVE-2023-45288 [release-4.12] #85
Full changelog

aws-ebs-csi-driver

OCPBUGS-33457: UPSTREAM: 1919: Add reserved-volume-attachments #267
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33457: Explicitly reserve 1 attachment for the root disk #308
Full changelog

aws-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #97
Full changelog

aws-pod-identity-webhook

OCPBUGS-32880: Upgrade go-jose module to 2.6.3 #191
Full changelog

azure-cluster-api-controllers

OCPBUGS-36021: Update go-retryablehttp to v0.7.7 #315
Full changelog

azure-machine-controllers

OCPBUGS-36148: Fix mapi_instance_create_failed metric with accelerated networking #115
OCPBUGS-30809: Don’t create availability set when using spot instances #105
OCPBUGS-24564: Reduce cardinality #97
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-36087: [release-4.12]: bump go-retryablehttp for CVE fix #8660
OCPBUGS-39290: Add yq v4 to ci image #8929
OCPBUGS-36179: [release-4.12]: bump github.com/container/images for CVE fix #8663
OCPBUGS-22981: IBMCloud: Add eu-es region #7686
OCPBUGS-30630: baremetal: populate customDeploy in advance #8144
OCPBUGS-32449: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8290
OCPBUGS-30768: update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 #8140
OCPBUGS-30134: [release-4.12] bump containerd for vulnerability fix #8091
OCPBUGS-27454: baremetal: correct external_http_url for v6-only BMCs #7900
Full changelog

baremetal-operator

OCPBUGS-30630: Do not update instance_info and deploy_interface for active nodes #338
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30289: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1701
Full changelog

cloud-credential-operator

OCPBUGS-37322: update modules: grpc, protobuf, logrus #764
OCPBUGS-42166: Resolve SNYK errors in security job. #760
OCPBUGS-37422: SNYK ignore go-client misreporting #744
NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027: IBM/go-sdk-core update to v5.17.4 #723
OCPBUGS-32897: Upgrade go-jose module to 2.6.3 #699
Full changelog

cloud-network-config-controller

OCPBUGS-33198: Avoid nil pointer panic while assigning private IP on Azure #141
Full changelog

cluster-autoscaler

OCPBUGS-40928: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318
OCPBUGS-30911: Fix unstructured taint parsing in Cluster API provider #291
Full changelog

cluster-autoscaler-operator

OCPBUGS-32005: Update x/net to v0.25.0 #325
Full changelog

cluster-baremetal-operator

OCPBUGS-32006: bump x/net to 0.23.0 #440
Full changelog

cluster-config-operator

OCPBUGS-16243: retire LatencySensitive featureset #336
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-35421: Improved debugging of API listing errors #306
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32429: create suitable role and roleBinding for csi-snapshot-webhook #207
Full changelog

cluster-etcd-operator

OCPBUGS-35501: return errors in wait-for-ceo #1277
OCPBUGS-32001: update golang x net #1256
OCPBUGS-30914: Replace nodelister with master nodelister everywhere #1224
OCPBUGS-30938: fix panic in health check timeouts #1228
Full changelog

cluster-image-registry-operator

OCPBUGS-36033: go.*,vendor: bump go-retryablehttp #1071
Full changelog

cluster-ingress-operator

OCPBUGS-43703: Add e2e test for duplicate Transfer-Encoding headers #1158
OCPBUGS-43703: Add alert for RFC 7230 violation in Transfer-Encoding headers #1162
OCPBUGS-35454: internal service changed fix target port logic #1092
OCPBUGS-35304: TestHostNetworkPortBinding: Delete t.Parallel() #1083
OCPBUGS-35027: Don’t add clientca-configmap finalizer if deleting #1080
OCPBUGS-34888: desiredRouterDeployment: Set HostPort if needed #1076
OCPBUGS-34757: Avoid spurious updates for internalTrafficPolicy #1070
OCPBUGS-34110: Avoid spurious updates for scope in IngressClass #1056
OCPBUGS-34548: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068
Full changelog

cluster-monitoring-operator

OCPBUGS-35558: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383
OCPBUGS-28766: fix generation of telemeter token hash #2306
Full changelog

cluster-network-operator

OCPBUGS-43872: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548
OCPBUGS-38905: Add missing runbook for OVNKubernetesNorthdInactive #2479
OCPBUGS-37942: [release-4.12] update whereabouts crd #2461
OCPBUGS-29167: fix whereabouts conformance test failures #2256
OCPBUGS-29884: add env var in whereabouts-reconciler daemonset #2284
Full changelog

cluster-node-tuning-operator

irqbalance: set banned cpus list to 0 (#1006) #1006
Refactor IRQ load balancing enable/disable test (#1038) #1038
Scheduler plugin: ignore IRQs (#1034) #1034
Full changelog

console

OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
OCPBUGS-43639: Copy response code from proxied plugin requests #14423
OCPBUGS-33519: Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334
OCPBUGS-41600: Fix plugin proxy handler #14266
OCPBUGS-41854: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283
OCPBUGS-34564: Routes created by devfiles do not always use HTTPS #13907
OCPBUGS-34933: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930
OCPBUGS-32146: Bump graphql-go to v1.3.0 #13923
OCPBUGS-34845: Fix PipelineRun Logs tab navigation #13920
OCPBUGS-33778: fix issues with Edit Route form #13859
OCPBUGS-27479: Bump helm pkg #13528
OCPBUGS-29746: Add Pipeline metrics tab using plugin #13621
Full changelog

console-operator

OCPBUGS-33386: Reset console operator’s conditions #898
OCPBUGS-20988: Disable HTTP/2 for webhook #876
OCPBUGS-30990: [release-4.12] Bump library-go and golang.org/x/net #867
Full changelog

csi-driver-manila-operator

OCPBUGS-30295: Fix selector for manila-csi-driver-controller-metrics service #228
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29244: cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #140
Full changelog

docker-builder

Replace ‘coreydaley’ with ‘sayan-biswas’ #408
BUILD-854: Add adambkaplan as approver #406
Full changelog

etcd

OCPBUGS-28736: Rebase etcd 3.5.12 openshift 4.12 #246
Full changelog

haproxy-router

OCPBUGS-43703: add duplicate_te_header_total metric #632
OCPBUGS-35875: Properly handle rewrite-target annotation #610
OCPBUGS-33432: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #593
OCPBUGS-34212: Reject routes with MD5 certs #601
OCPBUGS-33517: Count active services before setting weight to 1 #581
Full changelog

hyperkube, pod

OCPBUGS-37282: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046
OCPBUGS-30454: CVE 2024-24786 #1974
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1940
Address CVE #13
OCPBUGS-15527: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1887
Full changelog

hypershift

OCPBUGS-41516: set Konnectivity cipher suites #4283
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36063: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36069: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124
Full changelog

insights-operator

OCPBUGS-32004: bump golang.org/x/net version (#932) #932
OCPBUGS-28519: Add extra check in ids to bypass validations (#906) #906
Full changelog

ironic

OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
OCPBUGS-37766, OCPBUGS-39385: Include fixes for CVE-2024-44082 #586
OCPBUGS-38513: set min version for python3-webob #558
OCPBUGS-33373: bump werkzeug #547
OCPBUGS-34897: bump jinja2 #541
OCPBUGS-32362: [4.12] remove unused prometheus-exporter #489
OCPBUGS-32386: Use unix sockets by default for reverse proxy communication #477
Full changelog

ironic-agent

OCPBUGS-39385: Include fixes for CVE-2024-44082 #165
OCPBUGS-38513: set webob and bump werkzeug #153
OCPBUGS-29769: Always add ignition to set hostname on /etc/hostname #112
Full changelog

kube-rbac-proxy

OCPBUGS-32000: CVE-2023-45288 [4.12] #106
Full changelog

machine-api-operator

OCPBUGS-43872: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305
OCPBUGS-32007: Update x/net to v0.25.0 #1257
Full changelog

machine-config-operator

OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
OCPBUGS-38382: [release-4.12] daemon/update: disable systemd unit before overwriting #4530
OCPBUGS-33665: Run resolv-prepender entirely async #4364
OCPBUGS-30829: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4257
OCPBUGS-30823: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4268
OCPBUGS-30329: set nodeStatusReportFrequency #4246
OCPBUGS-19659: After dual-stack conversion reconcile IPFamilies #3936
OCPBUGS-29366: release-4.12: fix nodeStatusUpdateFrequency #4180
Full changelog

multus-cni

OCPBUGS-28520: Fix SAST scan issues for multus-cni-container [4.12] #225
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#825) #825
OCPBUGS-385: Capability to override default channel (#749) (#796) #749
Full changelog

olm-rukpak

: OCPBUGS-27593,OCPBUGS-27678: Update go-git to v5.11.0 #76
Full changelog

openshift-controller-manager

OCPBUGS-41953: Add adambkaplan as approver #336
Full changelog

operator-lifecycle-manager, operator-registry

NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875
OCPBUGS-42161: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873
OCPBUGS-41881: [CARRY] perform operator apiService certificate validity checks directly #866
OCPBUGS-32854: bump go-jose to v2.6.3 #782
OCPBUGS-35242: Unblock CI #773
Full changelog

operator-marketplace

NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081: update golang.org/x/net for CVE-2023-45288 #567
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-35876: [release-4.12] ipv6+all protocols conntrack flush #2214
OCPBUGS-29864: CVE-2022-41723: avoid quadratic complexity in HPACK decoding #2204
OCPBUGS-34273, OCPBUGS-34414: Improves service iptables efficiency on start up + ICMP error messages to pass through #2184
OCPBUGS-32990: Bump OVS #2144
OCPBUGS-33422: [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2135
OCPBUGS-25889: [release-4.12] OVN bump to 23.06.1-112 #2154
Full changelog

powervs-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #75
Full changelog

telemeter

OCPBUGS-34827: fix issuer check during JWT authentication 4.12 #541
Full changelog

tests

OCPBUGS-41585: Removes dependency on samples operator images #29080
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github