4.14.16

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.16-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.14-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-sdn-upgrade-4.14-micro Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (3 retries) periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.29, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.14.11, 4.14.3, 4.14.4, 4.14.5, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.2

Created: 2024-03-07 19:32:20 +0000 UTC

Image Digest: sha256:8fb5c55afbb51ddd11650ee54988468c64608ac1c2f58e0ffcc73fcc3e41cadb

Release 4.14.16 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-03-07-132827

Components

Kubernetes upgraded from 1.27.6 to 1.27.10
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202311061957-0 to 414.92.202403051622-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git e438a5e9 sha256:eea32e491d0c12d5535a99ba06e6026ae9383983a0fe0a4f3ed76cd84b41c271
agent-installer-utils git ad853769 sha256:279f204fb62497a2e492fa7595092ef985c0b2d37fc202d57c2dee9b87ba801a
alibaba-cloud-csi-driver git 3dc363d3 sha256:93ddad33f877c71915ca8ae039a8e8fefa0a60065c2cfb9b1ca37ea82d88bbba
alibaba-machine-controllers git 27f105d3 sha256:e7d819ec688342e5e7fc1b6d7a36ec9194729cac0f979644284e275fc7434d87
aws-cluster-api-controllers git a7518d12 sha256:2d528b97541e57720438ef19498f6643fff2d810ce1f4ab1353d131d688c96cf
aws-ebs-csi-driver git 2e2e2774 sha256:03577a3c79b71098f8c2029adfa3d424dce65c0ef6f0c27bbf538a761e470d55
aws-machine-controllers git e292817c sha256:7ec73734623e06726f244c5b2ea1ef88955ca864fc0f23670dab167f800a416a
azure-cluster-api-controllers git 7ad2773c sha256:0ba88b18305d19b8203f64a5e07a998907c2fa7f2654f08ac3a0ecf79418824c
azure-disk-csi-driver git b19eec11 sha256:e96081562f725aa03aedabe7bc543a193c012f08dc99fd624187575e98ed162e
azure-file-csi-driver git f401f536 sha256:5e2bcaa3bde26e90a29b422ec13074373f965b67cc8b774953ca7cc726ba0715
cloud-network-config-controller git 9cb1bbd8 sha256:79d75b87999c2036f5cfd457c58d9e1ebf9140bc854ed9e6a3c00b5a1b2a5f26
cluster-authentication-operator git 9ad3782e sha256:67eb6b6933b40d9e019479099cfd49649a0f316190a33f060b8ceb525b60eb4c
cluster-autoscaler git 0822c7b7 sha256:ed95ccce979d8b8e36f2fdc6701c1ee1036f5baa7defd94debbd11e8b22c987d
cluster-bootstrap git 93fba13f sha256:2a5306e652ad990ea221bf743802a8d4f30337692cd1bcf5949501778a2e3df9
cluster-capi-controllers git ae83c553 sha256:5c310f4016e1b93c096e96b1d02af0ae3e749d9dde3c1cd97e19cc7788eb992d
cluster-capi-operator git b4c4fb13 sha256:d903d2512faca0366712e577a528caa9aaeee4bd969bea1bde7f4848532f392b
cluster-dns-operator git 5553a226 sha256:2efc361af524e5edcf5173e3da5c7081b3aa61dad2939c5cf410dc414888b70d
cluster-ingress-operator git d876f5ab sha256:e8a5842e25ebfbff82540deddc6b592619efb656c93bbc2445ed6a4cbd2e92db
cluster-kube-cluster-api-operator git b287d08b sha256:0e83d00fc223313206f0ec4694aadb16217489cb114d01d47b10574c2fa4707b
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:28a020a7ef54bb394d86489652a522b7a9c8192c27118e39be50a564ceb30c73
cluster-openshift-apiserver-operator git 8bd86026 sha256:54e68ead0769ff2eb1edfc53f29b3e4c188dd8dc8c53c44d3691ff36f8962d56
cluster-platform-operators-manager git 08fb27e7 sha256:2fcd59dcc1ba0bc565b4027d95fecb82d32c4810781ef08591382b52a00bccd8
cluster-policy-controller git 219f6f6f sha256:16a7d637dfbfb2bb7bb0fcdaecef363819f67ec6b0e193ced1779f1987a31e79
cluster-samples-operator git b5396eb1 sha256:c4250e176f919b61d055d25c6b7deae351b555d3f98607f421c9bd7dc9a5721d
configmap-reloader git 716a0c33 sha256:0168cdeacc302dcaa1d3ad169fa69dbfbcd553f968cb0d4bb5baa44ff3635606
csi-driver-nfs git e1dd4537 sha256:3a7afb09661c538a0c871727cbc3c5afd259565d60b19900f276c0dbe24f0964
csi-external-attacher git 06e8ce0d sha256:300be8f617fdd54aa3c07905a709d416936aa82ef9f5be6d8d6a5596d90a5a24
csi-external-provisioner git 78a710fd sha256:c5b8aa937ae04709026c7f16ae55320abbf9e584dd6f4b3797f7d69fac69e5d0
csi-external-resizer git 59a701a4 sha256:1c60cf42df98a4e3566762095dc41148f46f595ffd8eaab59c8a29279f4b0ccd
csi-livenessprobe git a9bcbde1 sha256:193f0ae3770a2d69e51cabd185f88e13eca8937f47db7285c2c7ed9fb4acc71d
csi-node-driver-registrar git 9dcaa7f5 sha256:17eea2ce41178554bb23a7124ff036eee0f32f0fc2d3c74ea88a78e61e9f6bda
driver-toolkit git cafed17b sha256:559e79cf826662c3556306e5dc709c53ba1266e26b1ef54a10e45ae0849d4590
egress-router-cni git afffdd45 sha256:6bc053eb51c86308f596c5d92bc43cc4873fbdf010ac05edb0b18e66662bb661
gcp-machine-controllers git a676e6b6 sha256:b709c1e6e56029e79a0853cbb859b78191e89f0e93884abd2bc5d0155c5e6638
gcp-pd-csi-driver git 8a626fe5 sha256:4932ead88f1e56e9ff7126fdf514a3e69c82bf9e32df62edf3f2c2d8864517e9
haproxy-router git b3af193f sha256:589eab341610ba6573c7f11b3c85721e9dd39947b9b28fb5b000ead9bbe7b8c3
ibm-vpc-block-csi-driver git 02471d96 sha256:0e0a951f70e057460c357d77d06b6d839a49fc9b21fcbb967bddf79e3bdf255e
ibm-vpc-node-label-updater git 44a2b943 sha256:893fe07a7e618be3d4a11a80cc55898de99339992a8a4240ed489d2a5f7fe806
ibmcloud-machine-controllers git c28b2232 sha256:9b2e3c6f06b7fb491e440c663af7bff62ef7d4f02f2d9876bf81a10c72af9ed0
ironic-machine-os-downloader git 7b56c306 sha256:a0a2a65459d52f070421e9180e6fa7ebd9a8ded04cf08d36c68d1d98fa79c673
ironic-static-ip-manager git c038d5a4 sha256:8aa6774c5da80aaf08540dd8789281540856a860cc4bf0ca5a75cc50157acc82
keepalived-ipfailover git f08cee33 sha256:20af0a42c2971f1f09a4c37fe4a5228942c85ef56f1705d21359bb439e37f4ce
kube-rbac-proxy git 1a646b98 sha256:f8e8cbd072bb8f1f096013dbcd34db56f8eff715e9cdf6ee3f187d79c082f33e
kube-state-metrics git db0c5499 sha256:2d7c4d661d791cd52dd67598c4ed2a1c2c5b1f11f39471d5eb0943ab7a6db93b
kube-storage-version-migrator git 8558e14a sha256:111ca7a63308724399c0583f155a1acde859920ffe75a5bfe05a501f3d52abe3
kubevirt-cloud-controller-manager git 62ca8ad3 sha256:7e483e5ddcae3421c67f91c088e7548151143dd3465eb6c88bf51d40bb4e0f1b
kubevirt-csi-driver git 831ff3eb sha256:316a2fe180279553ef15fe497a2bbfa8fed3175c7bd097f82089fa67de326267
kuryr-cni git 8926a294 sha256:810b03e373a5b8e1bc3e6690da6e3d11e4fab2b54bdedc8ccd67f3d2a0bb0b5b
kuryr-controller git 8926a294 sha256:51dad45b8a2931876af572bbef356803b2866cba5634665acd13177ba5cca4ca
libvirt-machine-controllers git 34dfccba sha256:9665130b5e16327d06b9461d56f468a531b0ce84f8ce38a4206356b4c06c3e48
machine-os-content sha256:67e0d3ffc2b63efda6cdfc8a5c4eda7af5b3ce0611d2a475df92a4860a4091f3
machine-os-images git d3a4a6c3 sha256:214ec9a0accf21ba1e9eabed2505b5090166d579a0341ec0f55ed2191793a5d1
multus-admission-controller git 5e74b0fa sha256:e9044f1b4af86646dfe21712e57536d2d5a808510d371f7fe5dab34ae709ae29
multus-cni git 599223b8 sha256:9836822ecdb3e6c516dddf3bb041abf294766b3b67f43c68dd8c2a68fef4a867
multus-route-override-cni git 078aee5c sha256:187e9c217d214fe5d7d1552a529a49310c14bbc9a8f5a69e67efdf6e2e512f0f
must-gather git 833e1de9 sha256:81bf4ea2ef578327fc9cd43c616b8e0d4697261a8cfcfc12cff0a40d72ee6a47
network-interface-bond-cni git 29f61f6b sha256:cd25e1e345f4c765144539ab1765987c3967b9c48385beedac3e6b7dab884fb5
network-tools git a1dc6afd sha256:83fa5bfec1b1375afc8cab38812b7ec2aeb6c0aeb3acf31d4b40f92fe96a782a
nutanix-cloud-controller-manager git bc568865 sha256:304b66598c33bd78e0ff8541fe481a7b69da4c041b21e21ac16d0ff0b23aa34d
nutanix-machine-controllers git 6f50b1ac sha256:c23029185631d1e5d741d0da13af1318156f12e08a86f5c24900ce3c4f3c4e91
oauth-server git 35f4739f sha256:ccf8554ffe35d7dc4e9079d135d2dc76dbb305d7f4a8519cf2dc03e146bb88ff
openshift-state-metrics git dff4b0f4 sha256:551306d06e0f51eef3c8c9ee1edc7e5291db5673d390a48d9d4fa432fb7f8f9d
operator-marketplace git a367cea6 sha256:b64fe0e0922fd138cf6d735ff7b42db68874b441bd2ee83049c75c039c50ae03
ovirt-csi-driver git f21b470f sha256:ebf9d972c18482c11b3418c85c13b137fb5e28d19e889ae9abe394a19e8173ca
ovirt-csi-driver-operator git 2fa33aa7 sha256:5463b24c00dfcbacc4310d492a3267da617c6ea86bcb9e767ea899f85003cca5
ovirt-machine-controllers git 5d708631 sha256:3f26a8a95a74e87d2d8fe831e57a508205a4459be312c5bd65252ece394c90e7
prom-label-proxy git af40ed09 sha256:961a6fe610e4684fa26c0a607428c7b127ed3af571f7aac914bee4f2cf957adb
prometheus-alertmanager git e3725166 sha256:6fc48ea4ad6f92502692ab6cef003f220832ca22c25d95f139161e835b4e2aa3
prometheus-node-exporter git 5ee0a9d9 sha256:bd0283f45644123c962e5eb0752de116d88777c6e43c5a6c8cc8d675d3af4810
rhel-coreos sha256:455d8d3d2ff31e0112a766904e02bb63aab07180970b5073bd5e20fdb85bf975
rhel-coreos-extensions sha256:29af3c5fb92dad9c6075f9c3cf245d5a196ed0cedf2c9ef2ac2c28b1efe1bb4c
route-controller-manager git 1a5e72f4 sha256:57815608900fb4c85ac82334496ddd3f182f7dcfb1852603cd24689fb671540a
vsphere-cluster-api-controllers git 72e998c3 sha256:f54cac79d1f2a63aad4fa7118e49c02d74687d982add20dc53debb94ffddb7a9
vsphere-csi-driver git a5ed57f5 sha256:86c1884e24f6febfcc4e6bbeb07948f51b93c2a46b12f9646075d3b196bf1dda
vsphere-csi-driver-syncer git a5ed57f5 sha256:73dc5054439969c3c60d0c9bdf1ef6a6ae68d165331c053aa5d3141e2450b1a5

agent-installer-api-server

MGMT-16950: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) #5973
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5974) #5974
MGMT-16517: Add Env Var Deployment Type & Set ABI (#5987) #5987
MGMT-15796: set CloudControllerManager to External for OCI (#5877) #5877
OCPBUGS-23069: Ignore hostPrefix validation for plugins other than OVN/SDN (#5676) #5676
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Ensure valid hostname during install (#794) #794
OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#753) #753
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21255: Bump golang.org/x/net to v0.18.0 #38
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #71
Full changelog

apiserver-network-proxy

HOSTEDCP-1323: Merge latest code into 4.14 branch #45
Full changelog

aws-cloud-controller-manager

OCPBUGS-23826: bump go.opentelemetry.io #67
OCPBUGS-27759: Adds ecr-credential-plugin .spec #71
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #296
Full changelog

aws-pod-identity-webhook

OCPBUGS-21761: Backport the recent rebase to 4.14 #168
NO-ISSUE: Sync OWNERS with team members #176
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21439: Bump golang.org/x/net to v0.18.0 #93
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #109
Full changelog

azure-file-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #83
Full changelog

azure-machine-controllers

OCPBUGS-29152: Don’t create availability set when using spot instances #98
OCPBUGS-28745: Improving performance of VMs created in Azure #96
Full changelog

azure-workload-identity-webhook

OCPBUGS-21093: Upgrade golang/x/net for CVE-2023-39325 (4.14) #14
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-29123: IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626: update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
OCPBUGS-28929: [release-4.14] Bump containerd for vulnerability fix #7981
OCPBUGS-27419: Fix depreciated typo #7929
OCPBUGS-24521: set vmType in azure cloud config [release-4.14] #7804
OCPBUGS-23738: vSphere - when using RP network path is incorrect #7759
OCPBUGS-27241: baremetal: correct external_http_url for v6-only BMCs #7914
OCPBUGS-22315: bootstrap: Enable gatewayd units only on RHCOS #7628
OCPBUGS-23498: update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
OCPBUGS-20860: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887
OCPBUGS-22895: Do not generate azure-cloud-provider in manual mode for aro builds #7670
OCPBUGS-22771: aws: use security groups from defaultMachinePlatform #7658
OCPBUGS-24489: baremetal: populate customDeploy in advance #7802
OCPBUGS-22770: destroy: gcp: fix destroying regional disks #7657
Bug OCPBUGS-22776: OpenStack: Fix IPv6 address configuration for bootstrap #7660
OCPBUGS-22978: IBMCloud: Add eu-es region #7684
OCPBUGS-23399: Check if PER is enabled in the target PowerVS workspace #7736
OCPBUGS-22688: Bump Fedora CoreOS to latest stable #7647
OCPBUGS-22774: Add KMS encryption keys if provided #7659
OCPBUGS-21868: vSphere,segfault on version check #7605
OCPBUGS-22945: Update gcloud version to 447.0.0 #7681
Full changelog

baremetal-machine-controllers

OCPBUGS-29177: Extend metal3remediation aggregation role #211
Full changelog

baremetal-operator

OCPBUGS-24409: Don’t munge timestamp in structured logs, again #324
OCPBUGS-24489: Do not update instance_info and deploy_interface for active nodes #325
Full changelog

baremetal-runtimecfg

OCPBUGS-26928: Add .snyk file to ignore vendor and test files #294
OCPBUGS-23474: Use shorter IP label for keepalived VIP #288
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-25983: Remove deprecated password defaulting in default config flag #1646
OCPBUGS-24197: Add client version in must-gather summary #1607
OCPBUGS-24460: Overwrite template’s namespace with the explicit one #1616
Full changelog

cloud-credential-operator

OCPBUGS-29156: Fix the ClusterOperator watch of the status controller #676
OCPBUGS-28231: Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670
OCPBUGS-29199: ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911: Resolve all outstanding snyk vulnerabilities #650
OCPBUGS-28382: Use cached clients to avoid client side throttling #666
OCPBUGS-27515: Write manifests when AWS IAM roles already exist. #659
OCPBUGS-26512: Use live client for metrics #647
OCPBUGS-25275: Azure Workload Identity info in CredsRequests creates a Secret #643
OCPBUGS-24346: Discover AWS dns suffix from partition and region. #635
OCPBUGS-23986: Use per-project custom roles instead of per-cluster custom roles #631
OCPBUGS-23426: Explicitly set the vsphere secret credential data on sync. #629
OCPBUGS-21388: Upgrade golang/x/net for CVE-2023-39325 #622
Full changelog

cluster-autoscaler-operator

OCPBUGS-25749: Add Snyk file to exclude vendor directory on scan #308
Full changelog

cluster-baremetal-operator

OCPBUGS-23392, OCPBUGS-23393: fix IRONIC_EXTERNAL_URL_V6 #384
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-26548: Adds CloudConfigTransformer for Azure #321
OCPBUGS-21189: Bump golang.org/x/net to v0.18.0 #295
Full changelog

cluster-config-operator

OCPBUGS-28649: Add required PSa labels #403
NO-JIRA: add inert featuregate files to allow diff against later releases #398
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30014: Never delete a Machine when there’s a single Machine in an index #283
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #174
Full changelog

cluster-etcd-operator

OCPBUGS-30067: fix panic in health check timeouts #1213
OCPBUGS-30012: Replace nodelister with master nodelister everywhere #1211
OCPBUGS-23571: Add annotation in the etcd-guard static pod for worklo… #1162
OCPBUGS-26214: fix device busy errors #1176
Revert “[release-4.14] OCPBUGS-21802: remove revision stability check from bootstrap complet…” #1168
OCPBUGS-22477: Remove z-upgrades from UpgradeBackupController #1140
OCPBUGS-21802: remove revision stability check from bootstrap complet… #1138
Full changelog

cluster-image-registry-operator

OCPBUGS-28989: pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755: azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604: move azure storage blobs from docker back into /docker #1001
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646
OCPBUGS-25384: psa cluster fleet evaluation #1600
: OCPBUGS-24022: Add workload partitioning annotation #1590
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
OCPBUGS-27063: bump(library-go)=release-4.14 #787
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27022: bump(library-go)=release-4.14 #527
Full changelog

cluster-machine-approver

OCPBUGS-28745: Increase concurrent reconciles to 10 #228
OCPBUGS-23150: Filter non node CSRs in metrics #209
Full changelog

cluster-monitoring-operator

OCPBUGS-27471: prevent plugin entry assets from caching #2241
OCPBUGS-25800: Wait for 3 (instead of 2) consecutive failing reconcil… #2216
OCPBUGS-27418: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2239
OCPBUGS-25799: Detect ipv4/ipv6 socket in pod ip for nginx conf #2215
OCPBUGS-25387: Add RHACM telemetry metric for 4.14 #2202
OCPBUGS-21473: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2147
OCPBUGS-22917: jsonnet: pin commits #2143
Full changelog

cluster-network-operator

OCPBUGS-30100: ipsec: fix openssl typo #2287
OCPBUGS-29168: add env var in whereabouts-reconciler daemonset #2257
OCPBUGS-26573: Improve troubleshooting IC upgrades #2076
OCPBUGS-29033: network node identity: tolarate all taints #2248
OCPBUGS-18281: only 2 master nodes are required for ovn-kubernetes #2154
OCPBUGS-29300: Update ingressconfig_controller to use field Manager #2266
OCPBUGS-28608: fix whereabouts conformance test failures #2235
NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858: [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
OCPBUGS-27013: HyperShift, network-node-identity: Check the deployment in the management cluster #2195
OCPBUGS-24326: adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
OCPBUGS-24037: remove all managed fields used by old manager #2112
OCPBUGS-24320: Add apbroute/status patch rights for ovnkube-node to update status #2143
OCPBUGS-22787, OCPBUGS-22788, OCPBUGS-22789: ovnkube: container scripts cleanup #2090
OCPBUGS-23371: hypershift, hosted clusters: enable multi-homing and multi-net features #2117
OCPBUGS-21717: Bump golang.org/x/net and github.com/openshift/library-go #2122
OCPBUGS-24633: ipsec add pluto restart #2152
OCPBUGS-22363: Added HCP label to CNO pods #2081
OCPBUGS-22286: hypershift: adjust backoff on infrastructure name retry #2078
OCPBUGS-23011: Block upgrades to 4.15 with Kuryr #2096
OCPBUGS-23315: set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2107
Full changelog

cluster-node-tuning-operator

rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
OCPBUGS-26003: E2E: PPC Test cases (#905) #905
Make MC names deterministic (#903) #903
OCPBUGS-25671: rps: fix mask update for SR-IOV devices (#891) #891
OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) (#871) #854
OCPBUGS-24638: Do not set default RPS sysctl twice (#880) #880
OCPBUGS-21845: rps: trigger udev event per queue #832 (#832) #832
OCPBUGS-21845: e2e:rps: improve logging (#831) #831
render: change dir path (#826) #826
Full changelog

cluster-olm-operator

OCPBUGS-25481: NO-ISSUE: Bump k8s.io/apiextensions-apiserver #41
OCPBUGS-22581: [release-4.14] OCPBUGS-24652: Bump k8s dependencies #38
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28951: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
OCPBUGS-23490: Remove blockage of ConfigObserver by build informer has synced flag #318
Full changelog

cluster-storage-operator

OCPBUGS-28988: Allow vSphere CSI driver to be disabled #449
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #416
OCPBUGS-23210: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #419
Full changelog

cluster-update-keys

OCPBUGS-10126: Updating ose-agent-installer-orchestrator images to be consistent with ART #48
Full changelog

cluster-version-operator

OCPBUGS-27822: Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs #1021
OCPBUGS-27048: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
OCPBUGS-26207: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016
Full changelog

console

OCPBUGS-29813: Release 4.14 backports #13646
OCPBUGS-29813: Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274: Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972: Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898: Add support for custom segment domains (to load JS and make API calls) #13540
OCPBUGS-29349: Error in displaying BuildRun logs in Console #13601
OCPBUGS-29100: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239: Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990: update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157: add additional check to determine if file is binary #13507
OCPBUGS-28635: Bump graphql-go to v1.3.0 #13553
OCPBUGS-27305: Copy response code from proxied plugin requests #13517
OCPBUGS-27851: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537
OCPBUGS-27350: Add Pipeline metrics tab using plugin #13520
OCPBUGS-26171: Set unlimited line width in YAML editor #13482
OCPBUGS-24640: Strip ‘Server’ header from proxy response #13423
OCPBUGS-25997: change Alertmanager form to create using matchers inst… #13478
OCPBUGS-24349: Fix crash when ArtifactHub Task has no version #13399
OCPBUGS-25397: fix runtime error on Node details Overview when Machin… #13446
OCPBUGS-23771: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13360
OCPBUGS-24667: Fix plugin proxy handler #13425
OCPBUGS-24474: S2I Build Wizard should check for Containerfile in addition to Dockerfile #13415
OCPBUGS-24432: fix filtering issues on Events #13413
OCPBUGS-24352: add access review for impersonate #13400
OCPBUGS-22240: Save also the location.search and .hash values in localStorage to restore them after login #13270
OCPBUGS-24293: ConsolePlugin metrics must no longer be grouped by the vendor #13391
OCPBUGS-24423: Searching for items in quick search is confusing #13412
OCPBUGS-22375: Delete results.tekton.dev annotations before rerun the pipelineRun #13278
OCPBUGS-22478: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13290
OCPBUGS-24196: ApiVersion displayed on console is v1alpha1 whereas we support v1beta1 #13402
OCPBUGS-23423: Cannot Edit Shipwright Build #13343
OCPBUGS-22980: remove expandable toggle for conditional update risk d… #13308
Full changelog

console-operator

OCPBUGS-21029: Bump library-go and golang.org/x/net #850
OCPBUGS-23968: Disable route controller health check for NLB setup #817
OCPBUGS-24293: ConsolePlugin metrics must no longer be grouped by the vendor #820
Full changelog

container-networking-plugins

OCPBUGS-20374: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129
Full changelog

coredns

OCPBUGS-28200: UPSTREAM: 6277: openshift: Fix OCPBUGS-28200 #114
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

manage-security-groups: Only add SGs to LB members (#2455) #2455
Fix protocol case mismatch (tcp vs TCP) (#2320) #2320
Get IP addresses of neutron subports (#2306) #2306
Make manage-security-groups work with OVN (#2291) #2291
Delete sgs on reconfiguration (#2305) #2305
Optimize applyNodeSecurityGroupIDForLB() (#2293) #2293
Remove unused manila code (#2299) #2299
Use instanceIDFromProviderID() function (#2302) #2302
Remove filtering by device_owner. (#2304) #2304
Allocate array capacity in advance (#2297) #2297
Corrected the grammar (#2301) #2301
Delete unused SG rules with manage-security-groups (#2287) #2287
Improved the grammar in sidecarcompatibility.md (#2292) #2292
Added comments and arranged the variable names (#2290) #2290
occm cinder-csi securityContext (#2286) #2286
fixed Grammatical mistakes in barbican-kms-plugin (#2289) #2289
efactors and enhances the codebase of the cinder csi plugin (#2288) #2288
Wait for LB to be ACTIVE on HM update (#2280) #2280
(barbican-kms-plugin)Refactor and enhance Barbican KMS plugin codebase. (#2278) #2278
Fixed the typo in the load balancing section in the README (#2232) #2232
Fix image tag in manila csi e2e test (#2244) #2244
enable secret injection and common annotations (#2264) #2264
Update to gophercloud 1.4.0 (#2265) #2265
Replace call to Nova os-interfaces with direct Neutron call (#2250) #2250
add secret enabled option (#2239) #2239
Fix CSI spec versions (#2254) #2254
LoadBalancers: Remove dead SG code (#2248) #2248
Make ensureSecurityRule() safely idempotent (#2249) #2249
shrink image, remove unnecessary utils (#2233) (#2238) #2233
Doc: update statement about neutron lbaas removeal (#2236) #2236
add environment variable for timeout (#2235) #2235
Increase timeout for LB to get to ACTIVE state (#2223) #2223
Ignore proxies when calling Nova Metadata (#2218) #2218
add priorityClassName to openstack-cloud-controller-manager helm chart (#2210) #2210
Do not default Octavia provider to “octavia” (#2208) #2208
retry ubuntu image download on temp error (#2507) #2507
update k8s.io/kubernetes to v1.27.8 in go.mod (#2497) #2497
fix: octavia tlsContainerRef validation for barbican secrets (#2460) #2460
Full changelog

csi-driver-manila-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #219
OCPBUGS-23443: Fix selector for manila-csi-driver-controller-metrics service #211
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #209
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28952: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
OCPBUGS-25069, OCPBUGS-26309, OCPBUGS-26323: add snyk config file for SAST scan #163
OCPBUGS-23111: Should reference configmaps instead of secrets #152
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28957: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
OCPBUGS-26312: add snyk config file for SAST scank #97
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29433: cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142
Full changelog

docker-builder

OCPBUGS-28949: Replace ‘coreydaley’ with ‘sayan-biswas’ #379
Full changelog

docker-registry

OCPBUGS-29604: vendor: bump distribution to fix azure storage path bug #394
OCPBUGS-22826: Allow ICSP IDMS coexisting #385
Full changelog

etcd

OCPBUGS-24939: Rebase etcd 3.5.11 openshift 4.14 #235
Full changelog

gcp-cloud-controller-manager

OCPBUGS-21321: Bump golang.org/x/net to v0.18.0 #42
Full changelog

gcp-cluster-api-controllers

OCPBUGS-17290, OCPBUGS-21417: Bump golang.org/x/net to v0.17.0 #203
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #96
Full changelog

hyperkube, pod

OCPBUGS-27347: UPSTREAM: <carry>: Update management webhook pod admission logic #1855
OCPBUGS-27369: Update to kubernetes 1.27.10 #1860
OCPBUGS-25813: Fix uncertain device in 4.14 #1830
UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 #1552
OCPBUGS-26006: Update to Kubernetes 1.27.9 #1838
OCPBUGS-23566: followup to #1808 #1813
OCPBUGS-23566: Update to kubernetes 1.27.8 #1808
OCPBUGS-23286: UPSTREAM: 121881: Use golang library instead of mklink #1801
OCPBUGS-22861: UPSTREAM: <carry>: support for both icsp and idms objects #1780
Full changelog

hypershift

NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782: use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094: Make ControllerAvailabilityPolicy immutable #3534
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084: Reduce the policy access scope to specific instance #3530
OCPBUGS-29206: Add GC knobs for KAS #3543
OCPBUGS-29187: node spread anti-affinity for HA HCP #3541
OCPBUGS-19956, OCPBUGS-28984, OCPBUGS-28985, OCPBUGS-28986, OCPBUGS-29000: Support Disconnected HCP #3520
OCPBUGS-29030: Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238: consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526: Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526: Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072: Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180, OCPBUGS-20547: Added network validations #3096
OCPBUGS-23997: add watch for HCP pullsecret to HCCO #3265
OCPBUGS-28249: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485
NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315: Add prestop to konnectiviy server #3268
OCPBUGS-24307: Set shutdown-delay-duration to 15s #3264
OCPBUGS-21795: change trusted bundle volume mount for CPO #3102
OCPBUGS-25217: Konnectivity agent update strategy #3308
OCPBUGS-26574: Set new condition on SG deletion. #3398
Update RHTAP references (release-4.14) #3402
Update RHTAP references (release-4.14) #3383
OCPBUGS-22360: Validate accessTokenInactivityTimeout >= 300s #3175
OCPBUGS-23936: Use correct kubeconfig in CCM and remove CCMs access t… #3232
OCPBUGS-12720: Updating hypershift images to be consistent with ART #2467
OCPBUGS-24627: unset ServiceAccount on ignition-server-proxy #3295
[Release 4.14] OCPBUGS-24556: Fix a bug on deletion of a hostedcluster #3290
OCPBUGS-24269: add CLI oauthclient #3272
OCPBUGS-23569: Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3224
HOSTEDCP-1318: external OIDC enablement #3261
OCPBUGS-23747: Added brackets to IPv6 KAS address on kubeconfig #3228
OCPBUGS-24063: fix(cpo): Set restart annotation on network-node-identity #3248
release-4.14, HOSTEDCP-1315: Improve NodePool CPU arch & platform check #3236
OCPBUGS-22676: Make the OLMCatalogPlacement field immutable #3143
OCPBUGS-23558: Let router use svc ips 4.14 #3221
OCPBUGS-19678: Remove cluster name validation from HCC #3040
”[release-4.14] CNV-35326: unsupported escape hatch mechanism custom HS/KV vms” #3202
OCPBUGS-23027: Configure HSTS for kube-apiserver #3169
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3085
OCPBUGS-23142: adding permission to CNO RBAC Calico path for network-node-identity deploy #3182
OCPBUGS-22295: Added brackets to the kubeconfig server address when IPv6 #3117
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24665: Add Snyk file to exclude vendor directory on scan #65
OCPBUGS-21149: Bump golang.org/x/net to v0.18.0 #55
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-27279: Add Snyk file to exclude vendor directory on scan #76
OCPBUGS-21436: Bump golang.org/x/net to v0.18.0 #63
Full changelog

insights-operator

Add linting recommendations (#904) #904
gather etcd_server_slow metrics (#902) #902
OCPBUGS-23962: adds helm information gather (#868) (#877) #868
OCPBUGS-23445: DVO gatherer - add retry logic (#861) (#870) #861
OCPBUGS-22958: adds cluster storageclasses gather (#858) (#865) #858
Full changelog

ironic

OCPBUGS-27773: Update inspector package to fix LLDP unicode error #452
OCPBUGS-27193: Fix Inspector iPXE config for IPv6 addresses #448
OCPBUGS-19884: update Ironic to include secure boot fixes #445
OCPBUGS-23903: Ironic side of external_http_url (METAL-163) is not wired in correctly #429
OCPBUGS-23505: Uplift eventlet version #426
OCPBUGS-23354: Upgrade markupsafe and werkzeug dependencies #421
OCPBUGS-14926: Handle Eject DVD 4.14 #415
OCPBUGS-22253: Use bash process substitution instead of pipe #411
Full changelog

ironic-agent

OCPBUGS-29454: Always add ignition to set hostname on /etc/hostname #109
OCPBUGS-28554: Update to latest ironic-python-agent for bugfixes #107
OCPBUGS-25685: Relax packages requirements #103
OCPBUGS-23751: Update packages with latest fixes #96
Full changelog

k8s-prometheus-adapter

OCPBUGS-21473: Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #89
Full changelog

kube-proxy, sdn

OCPBUGS-20790: update x/net to v0.17.0 #587
Full changelog

machine-api-operator

OCPBUGS-28745: Set –max-concurrent-reconciles=10 for Azure machine controller #1217
OCPBUGS-28745: Add AddWithActuatorOpts to allow overriding Machine controller options #1214
OCPBUGS-24998: Add Snyk file to exclude vendor directory on scan #1191
OCPBUGS-24047: Update reference URL #1186
OCPBUGS-24047: Use docs URL instead of KCS article #1180
OCPBUGS-17297: [release-4.14] Update x/net to fix CVE #1173
Full changelog

machine-config-operator

OCPBUGS-30225: set nodeStatusReportFrequency #4242
OCPBUGS-29290: AWS: Always persist the existing node name on 4.14 #4215
OCPBUGS-20039: Add v6-primary dual stack support to VSphere UPI #3956
OCPBUGS-29457: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187
OCPBUGS-26072: Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379: fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384: daemon: allow the user to override drains on IR changes #4150
OCPBUGS-27759: Add Image Credential Provider flags for Kubelet on AWS #4144
[OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178: use *resource.Quantity to not automatically set 0 #4121
OCPBUGS-23089: Don’t retry node-ip show in resolv-prepender #4022
OCPBUGS-27362: Fix typo in AWS node env unit #4131
OCPBUGS-26500: crio: drop automatic image cleanup on upgrades #4105
OCPBUGS-26559: Azure Run ovs-configuration.service before dnsmasq.service #4109
OCPBUGS-26551: kubelet: fix kubelet labels #4107
OCPBUGS-24596: [release-4.14] execute cert related processes to ensure proper rotation #4063
OCPBUGS-24397: gcp-routes: don’t exit on crictl failures #4056
OCPBUGS-20554: Ensure gcp-routes hack for internalLB hairpin traffic works for SGW #3973
OCPBUGS-23474: Use shorter IP label for keepalived VIP #4041
OCPBUGS-23208: workaround nmstate bug by configuring ipv{4,6} addresses #4031
Full changelog

machine-image-customization-controller

OCPBUGS-24576: configurable ironic agent vlan creation #111
Full changelog

monitoring-plugin

OU-318: consider all metric keys to display all results on dashboards tables #99
OCPBUGS-24664: disable query link for non metric-based alerts #82
Full changelog

multus-networkpolicy

Update vendor package (#40) #40
OCPBUGS-21454: Update go.mod for CVE-2023-39325 (#33) #33
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27858: Enable reconciler configuration 4.14 #240
OCPBUGS-26553: Cherry pick fix assignment 4.14 #230
OCPBUGS-21518: update golang.org/x/net to v0.17.0 #207
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#88) #88
Update the k8s dependencies to 1.27.7 (#82) #82
Full changelog

oauth-apiserver

OCPBUGS-21100: bump k8s.io (release-4.14) #100
OCPBUGS-27116: UPSTREAM: <carry>: retry etcd Unavailable errors #97
Full changelog

oauth-proxy

OCPBUGS-20980: go.mod: bump golang.org/x/net to v0.17.0 #267
Full changelog

oc-mirror

OCPBUGS-28871: Capability to override default channel (#749) (#790) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#769) #769
OCPBUGS-23327: Fix MirrorToDisk of oci catalogs in hidden folders (#766) #766
skipping prune failure if manifest not found (#735) #735
Full changelog

olm-catalogd

OCPBUGS-27585, OCPBUGS-27670: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #40
Full changelog

olm-operator-controller

OCPBUGS-27590, OCPBUGS-27675: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #69
OCPBUGS-22616: [release-4.14] Bump go.opentelemetry.io dependencies #58
Full changelog

olm-rukpak

: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
OCPBUGS-23358: [release-4.14] Address http2 vulnerability #53
Full changelog

openshift-apiserver

OCPBUGS-27104: UPSTREAM: <carry>: retry etcd Unavailable errors #412
: OCPBUGS-21464: Enable HTTP/2 CVE mitigation #397
OCPBUGS-20150: pkg/image: avoid unnecessary service lookups when registry is removed #393
Full changelog

openshift-controller-manager

OCPBUGS-28950: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
OCPBUGS-26460, OCPBUGS-26461: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #142
Full changelog

openstack-machine-api-provider

OCPBUGS-23202: Don’t build InstanceSpec during delete operations #95
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-29192: [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686
OCPBUGS-29194: Retry failing unpack jobs #689
NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 #674
OCPBUGS-27314: Don’t sync namespaces that have no subscriptions #675
OCPBUGS-27565, OCPBUGS-27570, OCPBUGS-27650, OCPBUGS-27655: bump go-git/v5 to 5.11.0 #677
OCPBUGS-27485: [CARRY] SSC RBAC #665
OCPBUGS-22538: bump otelhttp to 44.0 for api #647
OCPBUGS-22538: otelhttp bump [release-4.14] #632
OCPBUGS-20829: [releaser-4.14] Fix apiserver vulnerability #608
OCPBUGS-23212: Do not derive installplan.spec.clusterServiceNames from bundle IDs #607
OCPBUGS-18904: [release-4.14] Improve Leader Election Hand Off #605
OCPBUGS-23508: [release-4.14] Use generated namespaces in e2e tests #614
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-28726: Update netpol namespace address sets usage to the old ways #2068
OCPBUGS-28819: Support Permanent Session Affinity #2046
OCPBUGS-29231: [release-4.14] Separate timeout for handler sync from informer sync & do not resync services during node tracker startup #2061
OCPBUGS-29186: Wait for ovnkube controller to start before checking result error. #2067
OCPBUGS-29207: Ignore hybrid-overlay nodes from EgressIP controller #2062
OCPBUGS-25999: Prevent multiple encap-ips per single chassis #2037
OCPBUGS-28789: Fix LGW ETP=Local on IPv6 #2042
OCPBUGS-27925: dont quit if node does not have subnet annotation #2026
OCPBUGS-27256: Ensure session affinity cleanup on backend removal #2021
OCPBUGS-23395: Egressfirewall use port groups #1956
OCPBUGS-27243: CARRY: Updates owners and adds Surya #2019
OCPBUGS-25081: Update ACL syncer: make default deny acls filter more strict, #1981
OCPBUGS-26568: Synchronize node primary address update #2012
OCPBUGS-24326: APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field #1967
OCPBUGS-25903: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2003
OCPBUGS-25746, OCPBUGS-25747: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1996
OCPBUGS-24320: APB status not updated when fails to process during the first reconciliations #1968
OCPBUGS-23257: Update leaderelection config to allow retries #1955
OCPBUGS-23387: Ignore completed virt-launcher pods #1954
OCPBUGS-25087: Fragment oversized reply packets in LGW mode #1982
OCPBUGS-22735: OVNK/GW: Ignore headless services in syncServices #1970
OCPBUGS-24350: [release-4.14] fixes MTU configuration on gateway router #1969
OCPBUGS-24209: Significantly reduce shared informer memory usage #1964
Full changelog

powervs-block-csi-driver

OCPBUGS-25980: Rebase with upstream: Fix snyk code issue: Path Traversal #72
OCPBUGS-24713: synk: ignore vendor dir #60
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58
OCPBUGS-25715: snyk: ignore vendor dir #60
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #48
Full changelog

powervs-cloud-controller-manager

OCPBUGS-24727: UPSTREAM: <carry>: snyk code scan exclude vendor directory #54
Full changelog

powervs-machine-controllers

OCPBUGS-24730: snyk code scan exclude vendor directory #65
Full changelog

prometheus

OCPBUGS-22531: bump otel dependencies #183
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-30015: fix: convert continue field between v1beta1 and v1alpha1 #279
Full changelog

service-ca-operator

OCPBUGS-21066: go.mod: bump golang.org/x/net to v0.17.0 #224
Full changelog

telemeter

OCPBUGS-22647: go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #494
Full changelog

tests

OCPBUGS-29928: Only extract node role from properly formatted node-role label #28616
OCPBUGS-29182: updated timeout to 3 seconds to account for network timing issues #28578
OCPBUGS-29034: Replace ‘coreydaley’ with ‘sayan-biswas’ #28574
OCPBUGS-26044: Adding test case for when exceed openshift.io/image-tags will ban to … #28493
OCPBUGS-21774: backport #28316 to 4.14 release #28335
Revert “[release-4.14] OCPBUGS-22720: Use Centos 8 Stream mysql image in tests” #28368
OCPBUGS-23042: tolerate AWS edge nodes on monitor tests #28387
OCPBUGS-23145: Bump watch requests for cluster-baremetal-operator #28385
trt-1340: backport exact and disable monitor tests options to 4.14 #28391
OCPBUGS-19923: Updating parameters for build timing PushImage test #28291
Full changelog

thanos

OCPBUGS-22636: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 #130
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-21520: Bump golang.org/x/net to v0.18.0 #54
Full changelog

vsphere-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #203
OCPBUGS-24224: Explicitly degrade the cluster when conditions are not met #194
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #186
OCPBUGS-23169: Fix vsphere csi controller pods from getting constantly restarted #193
OCPBUGS-22430: disable http/2 server support in webhook #182
Full changelog

vsphere-problem-detector

OCPBUGS-24401: Use failure-domains and other changes from master #142
OCPBUGS-21812: Warn usernames without domain name #134
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #138
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.27.4-3.rhaos4.14.git914bcba.el9
kernel-5.14.0-284.55.1.el9_2
openshift-kubelet-
systemd-252-14.el9_2.5

Full list (518 packages)

NetworkManager-1:1.42.2-13.el9_2
NetworkManager-cloud-setup-1:1.42.2-13.el9_2
NetworkManager-libnm-1:1.42.2-13.el9_2
NetworkManager-ovs-1:1.42.2-13.el9_2
NetworkManager-team-1:1.42.2-13.el9_2
NetworkManager-tui-1:1.42.2-13.el9_2
WALinuxAgent-udev-2.7.0.6-9.el9_2.1
aardvark-dns-2:1.5.0-2.el9
acl-2.3.1-3.el9
adcli-0.9.2-1.el9
afterburn-5.4.3-1.rhaos4.14.el9
afterburn-dracut-5.4.3-1.rhaos4.14.el9
alternatives-1.20-2.el9
attr-2.5.1-3.el9
audit-3.0.7-103.el9
audit-libs-3.0.7-103.el9
authselect-1.2.6-1.el9
authselect-libs-1.2.6-1.el9
avahi-libs-0.8-12.el9_2.1
basesystem-11-13.el9
bash-5.1.8-6.el9_1
bash-completion-1:2.11-4.el9
bind-libs-32:9.16.23-11.el9_2.2
bind-license-32:9.16.23-11.el9_2.2
bind-utils-32:9.16.23-11.el9_2.2
bootupd-0.2.7-2.el9
bsdtar-3.5.3-4.el9
bubblewrap-0.4.1-6.el9
bzip2-1.0.8-8.el9
bzip2-libs-1.0.8-8.el9
c-ares-1.17.1-5.el9_2.2
ca-certificates-2023.2.60_v7.0.306-90.1.el9_2
checkpolicy-3.5-1.el9
chrony-4.3-1.el9
cifs-utils-7.0-1.el9
clevis-18-110.el9
clevis-dracut-18-110.el9
clevis-luks-18-110.el9
clevis-systemd-18-110.el9
cloud-utils-growpart-0.33-1.el9
conmon-3:2.1.7-3.2.rhaos4.14.el9
conmon-rs-0.5.1-5.rhaos4.13.git.el9
conntrack-tools-1.4.7-2.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-3:2.228.0-1.rhaos4.14.el9
containernetworking-plugins-1:1.2.0-1.el9
containers-common-3:1-37.rhaos4.13.el9
coreos-installer-0.17.0-2.el9_2
coreos-installer-bootinfra-0.17.0-2.el9_2
coreutils-8.32-34.el9
coreutils-common-8.32-34.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.27.4-3.rhaos4.14.git914bcba.el9
cri-tools-1.27.0-3.el9
criu-3.17-5.el9_2
criu-libs-3.17-5.el9_2
crun-1.14-1.rhaos4.14.el9
crypto-policies-20221215-1.git9a18988.el9_2.2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.2
cryptsetup-2.6.0-2.el9
cryptsetup-libs-2.6.0-2.el9
curl-7.76.1-23.el9_2.6
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-7.el9_2.1
dbus-broker-28-7.el9
dbus-common-1:1.12.20-7.el9_2.1
dbus-libs-1:1.12.20-7.el9_2.1
device-mapper-9:1.02.187-7.el9
device-mapper-event-9:1.02.187-7.el9
device-mapper-event-libs-9:1.02.187-7.el9
device-mapper-libs-9:1.02.187-7.el9
device-mapper-multipath-0.8.7-20.el9
device-mapper-multipath-libs-0.8.7-20.el9
device-mapper-persistent-data-0.9.0-13.el9
diffutils-3.7-12.el9
dmidecode-1:3.3-7.el9_2.1
dnsmasq-2.85-6.el9
dosfstools-4.2-3.el9
dracut-057-22.git20230214.el9_2
dracut-network-057-22.git20230214.el9_2
dracut-squash-057-22.git20230214.el9_2
e2fsprogs-1.46.5-3.el9
e2fsprogs-libs-1.46.5-3.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-default-yama-scope-0.188-3.el9
elfutils-libelf-0.188-3.el9
elfutils-libs-0.188-3.el9
ethtool-2:5.16-1.el9
expat-2.5.0-1.el9
file-5.39-12.1.el9_2
file-libs-5.39-12.1.el9_2
filesystem-3.16-2.el9
findutils-1:4.8.0-5.el9
firewalld-filesystem-1.2.1-1.el9
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-15.el9
fuse-common-3.10.2-5.el9
fuse-libs-2.9.9-15.el9
fuse-overlayfs-1.11-1.el9_2
fuse3-3.10.2-5.el9
fuse3-libs-3.10.2-5.el9
fwupd-1.8.10-2.el9
fwupd-plugin-flashrom-1.8.10-2.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.19-4.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-7.el9
gettext-libs-0.21-7.el9
git-core-2.39.3-1.el9_2
glib2-2.68.4-6.el9
glibc-2.34-60.el9_2.12
glibc-common-2.34-60.el9_2.12
glibc-gconv-extra-2.34-60.el9_2.12
glibc-minimal-langpack-2.34-60.el9_2.12
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-10.el9
gnupg2-2.3.3-2.el9_0
gnutls-3.7.6-21.el9_2.2
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-61.el9_2.2
grub2-efi-x64-1:2.06-61.el9_2.2
grub2-pc-1:2.06-61.el9_2.2
grub2-pc-modules-1:2.06-61.el9_2.2
grub2-tools-1:2.06-61.el9_2.2
grub2-tools-minimal-1:2.06-61.el9_2.2
gssproxy-0.8.4-5.el9_2
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.7.el9
ignition-2.16.2-2.rhaos4.14.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.5-1.el9
ipcalc-1.0.0-5.el9
iproute-6.1.0-1.el9
iproute-tc-6.1.0-1.el9
iptables-libs-1.8.8-6.el9_1
iptables-nft-1.8.8-6.el9_1
iputils-20210202-8.el9_1.1
irqbalance-2:1.9.0-3.el9
iscsi-initiator-utils-6.2.1.4-3.git2a8f9d8.el9
iscsi-initiator-utils-iscsiuio-6.2.1.4-3.git2a8f9d8.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-11-3.el9
jq-1.6-14.el9
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-8.el9
kbd-misc-2.4.0-8.el9
kernel-5.14.0-284.55.1.el9_2
kernel-core-5.14.0-284.55.1.el9_2
kernel-modules-5.14.0-284.55.1.el9_2
kernel-modules-core-5.14.0-284.55.1.el9_2
kernel-modules-extra-5.14.0-284.55.1.el9_2
kexec-tools-2.0.25-13.el9_2.3
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-7.el9
kmod-libs-28-7.el9
kpartx-0.8.7-20.el9
krb5-libs-1.20.1-9.el9_2
less-590-2.el9_2
libacl-2.3.1-3.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-4.el9
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-11.el9_2
libbpf-2:1.0.0-2.el9
libbrotli-1.0.9-6.el9
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-3.el9
libcurl-7.76.1-23.el9_2.6
libdaemon-0.14-23.el9
libdb-5.3.28-53.el9
libdhash-0.5.0-53.el9
libdrm-2.4.114-1.el9
libeconf-0.4.1-3.el9_2
libedit-3.1-37.20210216cvs.el9
libev-4.33-5.el9
libevent-2.1.12-6.el9
libfdisk-2.37.4-11.el9_2
libffi-3.4.2-7.el9
libfido2-1.6.0-7.el9
libgcab1-1.4-6.el9
libgcc-11.3.1-4.3.el9
libgcrypt-1.10.0-10.el9_2
libgomp-11.3.1-4.3.el9
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-1.el9
libibverbs-44.0-2.el9
libicu-67.1-9.el9
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.8.2-5.el9_2.1
libjcat-0.1.6-3.el9
libjose-11-3.el9
libkcapi-1.3.1-3.el9
libkcapi-hmaccalc-1.3.1-3.el9
libksba-1.5.1-6.el9_1
libldb-2.6.1-1.el9
libluksmeta-9-12.el9
libmaxminddb-1.5.2-3.el9
libmicrohttpd-1:0.9.72-4.el9
libmnl-1.0.4-15.el9
libmodulemd-2.13.0-2.el9
libmount-2.37.4-11.el9_2
libmspack-0.10.1-0.7.alpha.el9
libndp-1.8-4.el9
libnet-1.2-6.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-21.el9
libnfsidmap-1:2.5.4-18.el9
libnftnl-1.2.2-1.el9
libnghttp2-1.43.0-5.el9_2.1
libnl3-3.7.0-1.el9
libnl3-cli-3.7.0-1.el9
libnvme-1.2-3.el9_2
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-6.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-7.el9_2.1
libseccomp-2.5.2-2.el9
libselinux-3.5-1.el9
libselinux-utils-3.5-1.el9
libsemanage-3.5-1.el9
libsepol-3.5-1.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-7.el9
libsmartcols-2.37.4-11.el9_2
libsmbclient-4.17.5-104.el9_2
libsmbios-2.4.3-4.el9
libsolv-0.7.22-4.el9
libss-1.46.5-3.el9
libssh-0.10.4-9.el9_2
libssh-config-0.10.4-9.el9_2
libsss_certmap-2.8.2-5.el9_2.1
libsss_idmap-2.8.2-5.el9_2.1
libsss_nss_idmap-2.8.2-5.el9_2.1
libsss_sudo-2.8.2-5.el9_2.1
libstdc++-11.3.1-4.3.el9
libtalloc-2.3.4-1.el9
libtasn1-4.16.0-8.el9_1
libtdb-1.4.7-1.el9
libteam-1.31-16.el9_1
libtevent-0.13.0-1.el9
libtirpc-1.3.3-1.el9
libtool-ltdl-2.4.6-45.el9
libunistring-0.9.10-15.el9
libusbx-1.0.26-1.el9
libuser-0.63-12.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-11.el9_2
libuv-1:1.42.0-1.el9
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.17.5-104.el9_2
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-3.el9_2.1
libxmlb-0.3.10-1.el9
libxslt-1.1.34-9.el9
libyaml-0.2.5-7.el9
libzstd-1.5.1-2.el9
linux-firmware-20230310-138.el9_2
linux-firmware-whence-20230310-138.el9_2
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-8.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-3.el9
luksmeta-9-12.el9
lvm2-9:2.03.17-7.el9
lvm2-libs-9:2.03.17-7.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.2-8.el9
microcode_ctl-4:20220809-2.20231009.1.el9_2
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-5.el9
ncurses-6.2-8.20210508.el9_2.1
ncurses-base-6.2-8.20210508.el9_2.1
ncurses-libs-6.2-8.20210508.el9_2.1
net-tools-2.0-0.62.20160912git.el9
netavark-2:1.5.1-3.el9_2
nettle-3.8-3.el9_0
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-18.el9
nftables-1:1.0.4-10.el9_1
nmap-ncat-3:7.91-12.el9
nmstate-2.2.24-1.el9_2
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.14-9.el9
nvme-cli-2.2.1-4.el9_2
oniguruma-6.9.6-1.el9.5
open-vm-tools-12.1.5-1.el9_2.4
openldap-2.6.2-3.el9
openldap-compat-2.6.2-3.el9
openshift-clients-4.14.0-202401111553.p0.g286cfa5.assembly.stream.el9
openshift-hyperkube-4.14.0-202402211839.p0.gc79e5e2.assembly.stream.el9
openssh-8.7p1-30.el9_2.3
openssh-clients-8.7p1-30.el9_2.3
openssh-server-8.7p1-30.el9_2.3
openssl-1:3.0.7-18.el9_2
openssl-libs-1:3.0.7-18.el9_2
openvswitch-selinux-extra-policy-1.0-34.el9fdp
openvswitch3.1-3.1.0-73.el9fdp
os-prober-1.77-10.el9
ose-aws-ecr-image-credential-provider-4.14.0-202401261353.p0.g607e2dd.assembly.stream.el9
ostree-2023.1-8.el9_2
ostree-grub2-2023.1-8.el9_2
ostree-libs-2023.1-8.el9_2
p11-kit-0.24.1-2.el9
p11-kit-trust-0.24.1-2.el9
pam-1.5.1-14.el9
passt-0^20230222.g4ddbcb9-4.el9_2
passt-selinux-0^20230222.g4ddbcb9-4.el9_2
passwd-0.80-12.el9
pciutils-3.7.0-5.el9
pciutils-libs-3.7.0-5.el9
pcre-8.44-3.el9.3
pcre2-10.40-2.el9
pcre2-syntax-10.40-2.el9
perl-AutoLoader-5.74-480.el9
perl-B-1.80-480.el9
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-480.el9
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-480.el9
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-480.el9
perl-File-Basename-2.85-480.el9
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-480.el9
perl-FileHandle-2.03-480.el9
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-480.el9
perl-HTTP-Tiny-0.076-460.el9
perl-IO-1.43-480.el9
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-1.el9
perl-IPC-Open3-1.21-480.el9
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-480.el9
perl-Net-SSLeay-1.92-2.el9
perl-POSIX-1.94-480.el9
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-461.el9
perl-SelectSaver-1.02-480.el9
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-480.el9
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-480.el9
perl-constant-1.33-461.el9
perl-if-0.60.800-480.el9
perl-interpreter-4:5.32.1-480.el9
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-480.el9
perl-mro-1.23-480.el9
perl-overload-1.31-480.el9
perl-overloading-0.02-480.el9
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-480.el9
perl-vars-1.05-480.el9
pigz-2.5-4.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-3:4.4.1-11.2.rhaos4.14.el9
policycoreutils-3.5-1.el9
policycoreutils-python-utils-3.5-1.el9
polkit-0.117-11.el9
polkit-libs-0.117-11.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-11.el9
protobuf-c-1.3.3-12.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.16-1.el9_2.3
python3-3.9.16-1.el9_2.3
python3-audit-3.0.7-103.el9
python3-distro-1.5.0-7.el9
python3-libs-3.9.16-1.el9_2.3
python3-libselinux-3.5-1.el9
python3-libsemanage-3.5-1.el9
python3-pip-wheel-21.2.3-6.el9
python3-policycoreutils-3.5-1.el9
python3-pyyaml-5.4.1-6.el9
python3-setools-4.4.1-1.el9
python3-setuptools-53.0.0-12.el9
python3-setuptools-wheel-53.0.0-12.el9
qemu-guest-agent-17:7.2.0-14.el9_2.8
quota-1:4.06-6.el9
quota-nls-1:4.06-6.el9
rdma-core-44.0-2.el9
readline-8.1-4.el9
redhat-release-9.2-0.13.el9
redhat-release-eula-9.2-0.13.el9
rpcbind-1.2.6-5.el9
rpm-4.16.1.3-24.el9_2
rpm-libs-4.16.1.3-24.el9_2
rpm-ostree-2023.3-1.el9_2
rpm-ostree-libs-2023.3-1.el9_2
rpm-plugin-selinux-4.16.1.3-24.el9_2
rsync-3.2.3-19.el9
runc-4:1.1.12-1.rhaos4.14.el9
samba-client-libs-4.17.5-104.el9_2
samba-common-4.17.5-104.el9_2
samba-common-libs-4.17.5-104.el9_2
sed-4.8-9.el9
selinux-policy-38.1.11-2.el9_2.6
selinux-policy-targeted-38.1.11-2.el9_2.6
setup-2.13.7-9.el9
sg3_utils-1.47-9.el9
sg3_utils-libs-1.47-9.el9
shadow-utils-2:4.9-6.el9
shadow-utils-subid-2:4.9-6.el9
shared-mime-info-2.1-5.el9
shim-x64-15.6-1.el9
skopeo-2:1.11.2-10.2.rhaos4.14.el9
slang-2.3.2-11.el9
slirp4netns-1.2.0-3.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-5.el9
sqlite-libs-3.34.1-6.el9_2.1
squashfs-tools-4.4-8.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.8.2-5.el9_2.1
sssd-ad-2.8.2-5.el9_2.1
sssd-client-2.8.2-5.el9_2.1
sssd-common-2.8.2-5.el9_2.1
sssd-common-pac-2.8.2-5.el9_2.1
sssd-ipa-2.8.2-5.el9_2.1
sssd-krb5-2.8.2-5.el9_2.1
sssd-krb5-common-2.8.2-5.el9_2.1
sssd-ldap-2.8.2-5.el9_2.1
sssd-nfs-idmap-2.8.2-5.el9_2.1
sssd-proxy-2.8.2-5.el9_2.1
stalld-1.17.1-1.el9_1
strace-5.18-2.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-9.el9_2.2
systemd-252-14.el9_2.5
systemd-journal-remote-252-14.el9_2.5
systemd-libs-252-14.el9_2.5
systemd-pam-252-14.el9_2.5
systemd-rpm-macros-252-14.el9_2.5
systemd-udev-252-14.el9_2.5
tar-2:1.34-6.el9_1
teamd-1.31-16.el9_1
tmux-3.2a-4.el9
toolbox-0.1.2-1.rhaos4.14.el9
tpm2-tools-5.2-2.el9_1
tpm2-tss-3.0.3-8.el9
tzdata-2024a-1.el9
unbound-libs-1.16.2-3.el9_2.1
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-11.el9_2
util-linux-core-2.37.4-11.el9_2
vim-minimal-2:8.2.2637-20.el9_1
which-2.21-28.el9
xfsprogs-5.14.2-1.el9
xmlsec1-1.2.29-9.el9
xmlsec1-openssl-1.2.29-9.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-21.el9_0
zlib-1.2.11-39.el9
zstd-1.5.1-2.el9

Changed:

NetworkManager 1:1.42.2-8.el9_2 → 1:1.42.2-13.el9_2
NetworkManager-cloud-setup 1:1.42.2-8.el9_2 → 1:1.42.2-13.el9_2
NetworkManager-libnm 1:1.42.2-8.el9_2 → 1:1.42.2-13.el9_2
NetworkManager-ovs 1:1.42.2-8.el9_2 → 1:1.42.2-13.el9_2
NetworkManager-team 1:1.42.2-8.el9_2 → 1:1.42.2-13.el9_2
NetworkManager-tui 1:1.42.2-8.el9_2 → 1:1.42.2-13.el9_2
c-ares 1.17.1-5.el9_2.1 → 1.17.1-5.el9_2.2
conmon 3:2.1.7-3.1.rhaos4.14.el9 → 3:2.1.7-3.2.rhaos4.14.el9
container-selinux 3:2.223.0-2.rhaos4.14.el9 → 3:2.228.0-1.rhaos4.14.el9
containers-common 3:1-36.rhaos4.13.el9 → 3:1-37.rhaos4.13.el9
coreos-installer 0.17.0-1.rhaos4.14.el9 → 0.17.0-2.el9_2
coreos-installer-bootinfra 0.17.0-1.rhaos4.14.el9 → 0.17.0-2.el9_2
cri-o 1.27.1-13.1.rhaos4.14.git956c5f7.el9 → 1.27.4-3.rhaos4.14.git914bcba.el9
cri-tools 1.27.0-2.1.el9 → 1.27.0-3.el9
crun 1.11-1.rhaos4.14.el9 → 1.14-1.rhaos4.14.el9
crypto-policies 20221215-1.git9a18988.el9_2.1 → 20221215-1.git9a18988.el9_2.2
crypto-policies-scripts 20221215-1.git9a18988.el9_2.1 → 20221215-1.git9a18988.el9_2.2
curl 7.76.1-23.el9_2.4 → 7.76.1-23.el9_2.6
dracut 057-21.git20230214.el9 → 057-22.git20230214.el9_2
dracut-network 057-21.git20230214.el9 → 057-22.git20230214.el9_2
dracut-squash 057-21.git20230214.el9 → 057-22.git20230214.el9_2
glibc 2.34-60.el9_2.7 → 2.34-60.el9_2.12
glibc-common 2.34-60.el9_2.7 → 2.34-60.el9_2.12
glibc-gconv-extra 2.34-60.el9_2.7 → 2.34-60.el9_2.12
glibc-minimal-langpack 2.34-60.el9_2.7 → 2.34-60.el9_2.12
gnutls 3.7.6-21.el9_2 → 3.7.6-21.el9_2.2
grub2-common 1:2.06-61.el9_2.1 → 1:2.06-61.el9_2.2
grub2-efi-x64 1:2.06-61.el9_2.1 → 1:2.06-61.el9_2.2
grub2-pc 1:2.06-61.el9_2.1 → 1:2.06-61.el9_2.2
grub2-pc-modules 1:2.06-61.el9_2.1 → 1:2.06-61.el9_2.2
grub2-tools 1:2.06-61.el9_2.1 → 1:2.06-61.el9_2.2
grub2-tools-minimal 1:2.06-61.el9_2.1 → 1:2.06-61.el9_2.2
ignition 2.16.2-1.1.rhaos4.14.el9 → 2.16.2-2.rhaos4.14.el9
kernel 5.14.0-284.40.1.el9_2 → 5.14.0-284.55.1.el9_2
kernel-core 5.14.0-284.40.1.el9_2 → 5.14.0-284.55.1.el9_2
kernel-modules 5.14.0-284.40.1.el9_2 → 5.14.0-284.55.1.el9_2
kernel-modules-core 5.14.0-284.40.1.el9_2 → 5.14.0-284.55.1.el9_2
kernel-modules-extra 5.14.0-284.40.1.el9_2 → 5.14.0-284.55.1.el9_2
kexec-tools 2.0.25-13.el9_2.1 → 2.0.25-13.el9_2.3
libcurl 7.76.1-23.el9_2.4 → 7.76.1-23.el9_2.6
libipa_hbac 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
librhsm 0.0.3-7.el9 → 0.0.3-7.el9_2.1
libsmbclient 4.17.5-103.el9_2 → 4.17.5-104.el9_2
libssh 0.10.4-8.el9 → 0.10.4-9.el9_2
libssh-config 0.10.4-8.el9 → 0.10.4-9.el9_2
libsss_certmap 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
libsss_idmap 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
libsss_nss_idmap 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
libsss_sudo 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
libwbclient 4.17.5-103.el9_2 → 4.17.5-104.el9_2
linux-firmware 20230310-135.el9_2 → 20230310-138.el9_2
linux-firmware-whence 20230310-135.el9_2 → 20230310-138.el9_2
microcode_ctl 4:20220809-2.20230808.2.el9_2 → 4:20220809-2.20231009.1.el9_2
ncurses 6.2-8.20210508.el9 → 6.2-8.20210508.el9_2.1
ncurses-base 6.2-8.20210508.el9 → 6.2-8.20210508.el9_2.1
ncurses-libs 6.2-8.20210508.el9 → 6.2-8.20210508.el9_2.1
netavark 2:1.5.1-2.el9_2 → 2:1.5.1-3.el9_2
nmstate 2.2.15-2.el9_2 → 2.2.24-1.el9_2
open-vm-tools 12.1.5-1.el9_2.3 → 12.1.5-1.el9_2.4
openshift-clients 4.14.0-202311031050.p0.g9b1e0d2.assembly.stream.el9 → 4.14.0-202401111553.p0.g286cfa5.assembly.stream.el9
openshift-hyperkube 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el9 → 4.14.0-202402211839.p0.gc79e5e2.assembly.stream.el9
openssh 8.7p1-30.el9_2 → 8.7p1-30.el9_2.3
openssh-clients 8.7p1-30.el9_2 → 8.7p1-30.el9_2.3
openssh-server 8.7p1-30.el9_2 → 8.7p1-30.el9_2.3
openssl 1:3.0.7-17.el9_2 → 1:3.0.7-18.el9_2
openssl-libs 1:3.0.7-17.el9_2 → 1:3.0.7-18.el9_2
openvswitch3.1 3.1.0-54.el9fdp → 3.1.0-73.el9fdp
ostree 2023.1-7.el9_2 → 2023.1-8.el9_2
ostree-grub2 2023.1-7.el9_2 → 2023.1-8.el9_2
ostree-libs 2023.1-7.el9_2 → 2023.1-8.el9_2
podman 3:4.4.1-10.1.rhaos4.14.el9 → 3:4.4.1-11.2.rhaos4.14.el9
python-unversioned-command 3.9.16-1.el9_2.2 → 3.9.16-1.el9_2.3
python3 3.9.16-1.el9_2.2 → 3.9.16-1.el9_2.3
python3-libs 3.9.16-1.el9_2.2 → 3.9.16-1.el9_2.3
qemu-guest-agent 17:7.2.0-14.el9_2.5 → 17:7.2.0-14.el9_2.8
rpm 4.16.1.3-22.el9 → 4.16.1.3-24.el9_2
rpm-libs 4.16.1.3-22.el9 → 4.16.1.3-24.el9_2
rpm-plugin-selinux 4.16.1.3-22.el9 → 4.16.1.3-24.el9_2
runc 4:1.1.9-2.1.rhaos4.14.el9 → 4:1.1.12-1.rhaos4.14.el9
samba-client-libs 4.17.5-103.el9_2 → 4.17.5-104.el9_2
samba-common 4.17.5-103.el9_2 → 4.17.5-104.el9_2
samba-common-libs 4.17.5-103.el9_2 → 4.17.5-104.el9_2
selinux-policy 38.1.11-2.el9_2.4 → 38.1.11-2.el9_2.6
selinux-policy-targeted 38.1.11-2.el9_2.4 → 38.1.11-2.el9_2.6
skopeo 2:1.11.2-10.1.rhaos4.14.el9 → 2:1.11.2-10.2.rhaos4.14.el9
sqlite-libs 3.34.1-6.el9_1 → 3.34.1-6.el9_2.1
sssd 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-ad 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-client 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-common 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-common-pac 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-ipa 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-krb5 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-krb5-common 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-ldap 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-nfs-idmap 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sssd-proxy 2.8.2-3.el9_2 → 2.8.2-5.el9_2.1
sudo 1.9.5p2-9.el9 → 1.9.5p2-9.el9_2.2
systemd 252-14.el9_2.3 → 252-14.el9_2.5
systemd-journal-remote 252-14.el9_2.3 → 252-14.el9_2.5
systemd-libs 252-14.el9_2.3 → 252-14.el9_2.5
systemd-pam 252-14.el9_2.3 → 252-14.el9_2.5
systemd-rpm-macros 252-14.el9_2.3 → 252-14.el9_2.5
systemd-udev 252-14.el9_2.3 → 252-14.el9_2.5
tzdata 2023c-1.el9 → 2024a-1.el9
unbound-libs 1.16.2-3.el9 → 1.16.2-3.el9_2.1

Added:

ose-aws-ecr-image-credential-provider 4.14.0-202401261353.p0.g607e2dd.assembly.stream.el9

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 414.92.202403051622-0 (diff)

OCPBUGS-22688: Bump Fedora CoreOS base layer: to latest stable #7647

View changelog in Markdown or change previous release:

Source code for this page located on github