4.14.22

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.22-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (3 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.14.11, 4.14.12, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.3, 4.14.4, 4.14.6, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.10

Created: 2024-04-19 14:12:58 +0000 UTC

Image Digest: sha256:7093fa606debe63820671cc92a1384e14d0b70058d4b4719d666571e1fc62190

Release 4.14.22 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-04-18-034102

Components

Kubernetes upgraded from 1.27.9 to 1.27.12
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202401121330-0 to 414.92.202404162000-0 (diff)

Rebuilt images without code change

agent-installer-utils git ad853769 sha256:1153da3e6c1fa9697eb3c846468f5c9c288a4f364ffac8c99774e2b0a8f4ab53
alibaba-cloud-controller-manager git 8ba0b37a sha256:f97ca9a78dd3da64422050cb5b45290187a3e2b452652138877d11f428e52ad2
alibaba-cloud-csi-driver git 3dc363d3 sha256:8ad814140b9bcfb7327d00ad1322e7792455ef0fd2474efd3ea091755383a39d
alibaba-machine-controllers git 27f105d3 sha256:df77588a6c060966dba325dc623332dfb483e1e26dab5e506bb352f3b372fcba
apiserver-network-proxy git 3362d673 sha256:5b221c38b6e87b83f01fe369c022c58a6b499c31c5c27d4d765451404ab14995
aws-ebs-csi-driver git 2e2e2774 sha256:83be63cbbf26ffdb5c48793a0bc1693ef5e00447e6c0cef43fb6c9220f25d20d
aws-machine-controllers git e292817c sha256:507ca76dafda0e78cceb407ab387537ae2d1e9e494287e86088061272c3dee1e
aws-pod-identity-webhook git ad7aa0ae sha256:c561ef3f3827de1552454d579acba8ad4415efb4020bc379df87424b50d29e3a
azure-cloud-controller-manager git f0e7cbbc sha256:cdb457e3dc9aa5cb22c7cc074b9e949703b196f6b9da6d575a0bbd6427e4e0de
azure-cloud-node-manager git f0e7cbbc sha256:d7c15e1f135a35bc71f5b811f4c7484ea692abd7556cf8110800bea3cd605c90
azure-cluster-api-controllers git 7ad2773c sha256:6fd65ecc66d1b20f93ef7f02d140fda68ca9d4e998bfbf3a2eebf54974f48593
azure-disk-csi-driver git b19eec11 sha256:8be3a7174b2a064794ffe7d5e23017f7f7dfa38129a2b73132e75cc53c35f226
azure-file-csi-driver git f401f536 sha256:1a49e5357814fb2a530c7a64bfabb30116e35eeabfb955e2c39bf84b2fab01f1
azure-workload-identity-webhook git 43a15be6 sha256:40f579115210365c2ed2909c1a78d97f7a49958f2521c798741797be2e2bc5a6
baremetal-runtimecfg git 13046b3b sha256:05584a634eb479bd2df49b5af484fbb4368364aa9fd1bdc65452adb443218afb
cluster-autoscaler-operator git 5d436c6b sha256:9da2bb8a790c36dd5707c1f1e2ceb89c0da8f420db5a00cd53629d189ef84368
cluster-baremetal-operator git 270579c6 sha256:efd980cd84a99b7c20da10ce24588baf813639ff6c0a088fb46832c1db7351d9
cluster-bootstrap git 93fba13f sha256:f5c38ffe21e02ded5d91419a3e4817d492f5485c73b349ef9a7629cce3e0453f
cluster-capi-controllers git ae83c553 sha256:bdc88a418de3e181299162450350ae4e9c712cdde5a2b21770e8ee7805be9815
cluster-capi-operator git b4c4fb13 sha256:b6627f03550fec28cb642535a24ec29796a328e7e70f94cee0ac9b844332b8e3
cluster-cloud-controller-manager-operator git 33a706e8 sha256:287d649f79ca34ec4a271bfc4b72d6a7810577b49ff8d1661e7eccfce89b4547
cluster-dns-operator git 5553a226 sha256:f0ae0eb4c325f697c4c3c59cf127d7bb74b63102c4241f43a041264c189e9794
cluster-ingress-operator git d876f5ab sha256:491e4081ddeed001b7def9719f4bdebaf68c02605cdf4e1131e282aa4281353a
cluster-kube-cluster-api-operator git b287d08b sha256:a5a03271fc9f3a7411006f90123895c7812af5692394fb8f424c86c19828c66c
cluster-kube-scheduler-operator git 33f630dc sha256:8d512043c0935ba1a45228b9713bf6951ad2cd971c05718df59a2c6f0a679618
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:4faacf64430513c3bfca92409b8558e60d1512a09062953fbd5bfbc9148bccfa
cluster-olm-operator git 0dbbb613 sha256:81207d7645dcd3637d7e793c95634f857d84ab1adfcb2a19548a627ca9019cb5
cluster-openshift-apiserver-operator git 8bd86026 sha256:1ed465a92e995a470ab34554b6c816a1a37254e6125944ad7531e0ce3e59541c
cluster-platform-operators-manager git 08fb27e7 sha256:52990352cecfbf31addf0fb29e31adf4bc39bb42b1b587c439ae77a8cb872d7b
cluster-policy-controller git 219f6f6f sha256:e8099d2e2f61711c5544ed8cd9bd258fe6626d347c5abc31a9524c01516f0ade
cluster-update-keys git e0c26a08 sha256:8b7b4a65e2b73edb51349fcbf533d64886a7131243ca1376b14a685db75ed47d
configmap-reloader git 716a0c33 sha256:9b1d2022a331618f494f192d097f4968b90ba21f48e797e835ef6498d5640890
container-networking-plugins git 7295a5e0 sha256:90837aaae96f4d01d6121cb317591f7f5a5f9a18d3907f8c8e441dc6263cc7ff
csi-driver-nfs git e1dd4537 sha256:dcc833a6bf6822faf4d091052ee726a5a109b914bebd76f65edff5043116f5b5
csi-external-attacher git 06e8ce0d sha256:2029975064e5e266d055cee3aa5d535e59861f8d0a751b7d2d03188517156d62
csi-external-provisioner git 78a710fd sha256:e26d82eb115c850c959123196702e5cf3893764f84cb62136fd623f54a27ecdb
csi-external-resizer git 59a701a4 sha256:768438fa81695f7e75d8c925fe69f3da9df4c544f7cba35f02db9c2a02fcffdd
csi-livenessprobe git a9bcbde1 sha256:5b26a00d8a568c33c2fddf1db9cbade566ebe8151f34e25ac85830893673e66a
csi-node-driver-registrar git 9dcaa7f5 sha256:4d1c74269506562a51e236c683d536641430f9ff7eec7970a38b736b95cb6e4a
driver-toolkit git cafed17b sha256:259cbd840454c6d9030c21a5d24be0599abc4941cdd525a80f6eeb5d67e7908c
egress-router-cni git afffdd45 sha256:4b46317dd95fc7691854116737b1aaf7fa452860b88d3df5079856f8af846d54
gcp-cloud-controller-manager git 09e96a91 sha256:cf8a7c44ba50ee3bf882e9b8b19130748250d6993df80132ed9f5153943c45af
gcp-cluster-api-controllers git d99fb31a sha256:ec8f98977b1ecf52efb516b1d456d2a87f0729f1e67f85a12c038b72b64ed386
gcp-machine-controllers git a676e6b6 sha256:b290abe47b5cf9dfecfc7a58553bab4e8f6b6cd03e6d0acd783eba803aee5c77
gcp-pd-csi-driver git 8a626fe5 sha256:9cefc6f2111b9b6c9fae9a5c703ff734e01ddbcec22efb546fa55b75d1770ac1
haproxy-router git b3af193f sha256:c208177fb840247d5287139260048416233cd4bfb1ff142a88f95260c10f0718
ibm-cloud-controller-manager git 446871ff sha256:0ada7be467d17e948c1d6605cac7a80852022c24b2ffc3b4677feec89f1b4a48
ibm-vpc-block-csi-driver git 02471d96 sha256:26d621cce2ce47a50215efdde17bfea120790a59e9a44543e3ee04b0e7ab1dd4
ibm-vpc-node-label-updater git 44a2b943 sha256:fd25ee50285bf21f55ca3fe9253a3da88ad1acb6d8f73baa288ee1c7409c918f
ibmcloud-machine-controllers git c28b2232 sha256:d88407edcdcecad3d93577453aa6fd1120f318eb9681dd60a5d00940592fb6b8
ironic-machine-os-downloader git 7b56c306 sha256:6be003035008fb7b802f7610ef1d8079098a5f50a7872f326f40599bf7505fd5
ironic-static-ip-manager git c038d5a4 sha256:a8ec82833a1a48b5fff01ee0947a6347f1b3484316fa89be58c21764d673a6ad
k8s-prometheus-adapter git 801a912b sha256:786e4a9be645d9d849d066051aee53fba81e519976dfb69d092361a969399338
keepalived-ipfailover git f08cee33 sha256:3cebef06cc749edf819610a8aed01780cbf7de4f678d593e35b08c67a5ac679b
kube-proxy git 1a9befcb sha256:44dd54571a61f0b5a23d76370286b3a22182853a49f4275af862f70507f97107
kube-rbac-proxy git 1a646b98 sha256:dd19615f32a1411f842cdd4c5617addc504634ced1687640281116cfbbe6c701
kube-state-metrics git db0c5499 sha256:22a788d4f43c37bb389535f979fd8352df35f4372f74ec21c91d8eefb4b84686
kube-storage-version-migrator git 8558e14a sha256:da95632d5be259be5b2b771855becbaccfbba1de95e22d637a056af338029850
kuryr-cni git 8926a294 sha256:ecfd1c383ed648dc07daffdc29f8bf940038149da8a0283cdeeb2bad0e56e365
kuryr-controller git 8926a294 sha256:021fafab32ece44753a3692ccff38425abe0a0c7288c08c9558b597c97f5ddc9
libvirt-machine-controllers git 34dfccba sha256:00145579882714a50de64a93375c45b8454bbf59975bb6501b91a370e42034f2
machine-image-customization-controller git 2a6627ba sha256:5a18eca61dcb4a7a42102d8c31e52098279225b3b398dc4500c837284e7528ba
machine-os-content sha256:a3d2e8a00d3e521c1a960a6b38b7889fdb533e65b11f307180a4a27977b70097
machine-os-images git d3a4a6c3 sha256:a39c890cd1eac71e09986384e83033b71825e7c4b4b32b0e18288a1a34117223
multus-admission-controller git 5e74b0fa sha256:fcd385a04318e0b15c0410418ebf478541f412cf608e1d5b342dcd06c8070f02
multus-networkpolicy git cd6eae10 sha256:d0b2d939db922bd626f6d6591a93cc4a88d51b8fe5d611ff8bdb5dfb9f3cf994
multus-route-override-cni git 078aee5c sha256:4be956daa820547fd9551f49cab9ec3c991b310bf456400c902d70d25e1de5a9
must-gather git 833e1de9 sha256:8c288715e88f80d0c410d2aa5855080553f69935a9c0e19121eee706157078be
network-interface-bond-cni git 29f61f6b sha256:e8cea6570f4b8d9d85c26ce2b5492736b73e547f154f9653d8e7a6473b27b737
network-metrics-daemon git 69d0021a sha256:e24ea64c030e85ab03814b4f9b2601b70e9d4ec61eca2ad4a23c060ea870a937
nutanix-cloud-controller-manager git bc568865 sha256:3714ddf0aca585a81ceaedc86ec848ce9bd564fb10ec7b0a01c45cff3454cba4
nutanix-machine-controllers git 6f50b1ac sha256:73c79c9b4cbc7608c3456b4d8f1fff36e0c5824de89feee547ff439e371750fa
oauth-proxy git a4a2f270 sha256:41cda7bc8c2df871ce796dc918d86dccc973758a5938d74cd17002eda6c2dd48
oauth-server git 35f4739f sha256:efea3a560d06f814962a39440ae5e08f8a9ece83ab53fa787a1e43df71032410
openshift-apiserver git 9e9b51d2 sha256:99bf9dc11c982258d206f1573b1bf1aafa72fe705db86c490406ae677d119ed2
openshift-state-metrics git dff4b0f4 sha256:f077310a489643cbb8060cd5b15b14615157cea9d5179c6de58f79b0a2c04d8b
openstack-machine-api-provider git 89858767 sha256:2a1b22c0efd63772db728ef7659939864abc209a5909afeef8bbe06b083299fc
operator-marketplace git a367cea6 sha256:e0a9fadcbaa03be31f78ab723de3126c90eeca032fc20b4f96a14ad57b9e7b8c
ovirt-csi-driver git f21b470f sha256:c646f45802e27b7ea55d84443b9eb73f926beb84ee1c4acb5e01b0efd5846e0c
ovirt-csi-driver-operator git 2fa33aa7 sha256:d2be8b0e42870a7c30f4e5d37eeec53da62b660965d65d7552cbf911cd500d3e
ovirt-machine-controllers git 5d708631 sha256:fc781d049165ea0960047f4bec5debf1bee028631e8e625d1ce77353f1f31b42
powervs-block-csi-driver git 8ecfd7fd sha256:97de12b850645983362c3d5e3537a848625c929c845fe855f062fa4c56184fe7
powervs-cloud-controller-manager git 32c1028e sha256:71d3f0df1a5615de5056eb7e279e3cb7cc27c7dba9091e21b8d2b505668d3bd3
powervs-machine-controllers git 1a957dae sha256:80a0ff73a119e73a51c88d42374c8667d68e529d33bfd7b4cbdab912cac016f0
prom-label-proxy git af40ed09 sha256:d2bf91009cdfb478efe96127da1c9f75eb3726ff344705ee8d6b14b9bb342bb2
prometheus git b7c61bcb sha256:170184517b4d077d2c6473ed2b41ff35f1a44134801cdf2138459583623a00c5
prometheus-alertmanager git e3725166 sha256:4c4ef065e26be7688b48bb6aae092938ba968796ffe3a21570260e5e784a4964
prometheus-node-exporter git 5ee0a9d9 sha256:d597739ac753c5d2dd8f1faa3e6e324ab894f27a5ba30e758146310b63c434bc
rhel-coreos sha256:3bac5f987094f14c117d557d319d963c876c0836af645a3296007f3cc71ae928
rhel-coreos-extensions sha256:4256c5e56493085bdcd9748d0044d5f30d731e7c1651731ee7e66113a85dc97f
route-controller-manager git 1a5e72f4 sha256:7d90dedb67a1d4281b1be5ac78c6555002dfa5a50c4fe121f3e7613b9c44c2a3
sdn git 1a9befcb sha256:b44aedd72f8a90912145db2203f5c9c69715ec718124267e026b49891a2ed18f
service-ca-operator git 3c3f82f7 sha256:b99da1fe9c941c6280d546f8df8df78fd5419f5f443c7546e0e9efbca3045b8b
telemeter git c683f657 sha256:94368ed331ce2eb334031aee859089f4d91de909227a2d646f20aed0ca6b0655
thanos git a2671250 sha256:910b550bbe25558692f3632f3d6f0744cd5903c9d5bdcd0beedda93b24023fb1
vsphere-cloud-controller-manager git b04567f7 sha256:764aa2a7d83bd8bef250a7b292054d70605fd5fa1438aded748c0e95739fdc55
vsphere-cluster-api-controllers git 72e998c3 sha256:d8b9ffeaca4358a226d7c3af29275f7930938e10f4a4412137ec437bcd5cc797
vsphere-csi-driver git a5ed57f5 sha256:38ad3d8f777df23b0e6d061ea42315b5dacb303aeda4391f79f76fcc683a40fc
vsphere-csi-driver-syncer git a5ed57f5 sha256:e9f8b64ceb479e809e528813b14487b80ccf917aac597ad9575bf8ecbf7ba219

agent-installer-api-server

MGMT-17541: Replace broken golangci reference (#6197) #6197
NO-ISSUE: replace postgres images as current one disappeared from quay (#6134) #6134
MGMT-16950: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) #5973
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5974) #5974
MGMT-16517: Add Env Var Deployment Type & Set ABI (#5987) #5987
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Ensure valid hostname during install (#794) #794
Full changelog

agent-installer-node-agent

MGMT-17541: Replace broken golangci reference (#698) #698
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
Full changelog

aws-cloud-controller-manager

OCPBUGS-23826: bump go.opentelemetry.io #67
OCPBUGS-27759: Adds ecr-credential-plugin .spec #71
Full changelog

aws-cluster-api-controllers

OCPBUGS-31332: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #506
OCPBUGS-31251: fix e2e tests on release branches #505
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
Full changelog

azure-file-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
Full changelog

azure-machine-controllers

OCPBUGS-30898: Remove startupScript vmextension lookup #106
OCPBUGS-29152: Don’t create availability set when using spot instances #98
OCPBUGS-28745: Improving performance of VMs created in Azure #96
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-31885: Validate control plane replicas #8241
OCPBUGS-31677: coreos-installer iso kargs show broken on Agent ISO #8228
OCPBUGS-31338: upi: aws: fix typo in worker templates #8203
Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027: gcp: better error msg when service accnt missing #8078
OCPBUGS-30259: PowerVS remove ibm cloud/bluemix go 4.14 #8103
OCPBUGS-29123: IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626: update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
OCPBUGS-28929: [release-4.14] Bump containerd for vulnerability fix #7981
OCPBUGS-27419: Fix depreciated typo #7929
OCPBUGS-24521: set vmType in azure cloud config [release-4.14] #7804
OCPBUGS-23738: vSphere - when using RP network path is incorrect #7759
OCPBUGS-27241: baremetal: correct external_http_url for v6-only BMCs #7914
OCPBUGS-22315: bootstrap: Enable gatewayd units only on RHCOS #7628
OCPBUGS-23498: update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
Full changelog

baremetal-machine-controllers

OCPBUGS-31435: Bump golang-protobuf version #215
OCPBUGS-29177: Extend metal3remediation aggregation role #211
Full changelog

baremetal-operator

OCPBUGS-23324: Backport node poweroff fixes #318
OCPBUGS-24409: Don’t munge timestamp in structured logs, again #324
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30287: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699
Full changelog

cloud-credential-operator

OCPBUGS-29156: Fix the ClusterOperator watch of the status controller #676
OCPBUGS-28231: Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670
OCPBUGS-29199: ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911: Resolve all outstanding snyk vulnerabilities #650
OCPBUGS-28382: Use cached clients to avoid client side throttling #666
OCPBUGS-27515: Write manifests when AWS IAM roles already exist. #659
Full changelog

cloud-network-config-controller

OCPBUGS-32112: Avoid nil pointer panic while assigning private IP on Azure #138
Full changelog

cluster-authentication-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #649
Full changelog

cluster-autoscaler

OCPBUGS-31621: add check for taint.value == nil #294
OCPBUGS-30628: Fix unstructured taint parsing in Cluster API provider #288
Full changelog

cluster-config-operator

OCPBUGS-28649: Add required PSa labels #403
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30014: Never delete a Machine when there’s a single Machine in an index #283
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-31886: create suitable role and roleBinding for csi-snapshot-webhook #205
Full changelog

cluster-etcd-operator

OCPBUGS-31428: CEO aliveness check should only detect deadlocks #1231
OCPBUGS-30067: fix panic in health check timeouts #1213
OCPBUGS-30012: Replace nodelister with master nodelister everywhere #1211
OCPBUGS-23571: Add annotation in the etcd-guard static pod for worklo… #1162
Full changelog

cluster-image-registry-operator

OCPBUGS-31857: bump aws-sdk-go from v1.44 to v1.50 #1018
OCPBUGS-28989: pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755: azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604: move azure storage blobs from docker back into /docker #1001
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-31506: Add sno section to alert description #1658
OCPBUGS-31316: add provider name to cluster_infrastructure_provider when external platform #1657
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
Full changelog

cluster-machine-approver

OCPBUGS-28745: Increase concurrent reconciles to 10 #228
Full changelog

cluster-monitoring-operator

OCPBUGS-28768: fix generation of telemeter token hash #2304
OCPBUGS-27471: prevent plugin entry assets from caching #2241
OCPBUGS-25800: Wait for 3 (instead of 2) consecutive failing reconcil… #2216
OCPBUGS-27418: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2239
Full changelog

cluster-network-operator

OCPBUGS-30021: Fully disable network-node-identity on ROKS #2315
OCPBUGS-31669: [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2311
OCPBUGS-31360: Remove egressip write permissions from ovn-kubernetes-node #2320
OCPBUGS-30021: [release-4.14] Disable network-node-identity on ROKS #2286
OCPBUGS-30100: ipsec: fix openssl typo #2287
OCPBUGS-29168: add env var in whereabouts-reconciler daemonset #2257
OCPBUGS-26573: Improve troubleshooting IC upgrades #2076
OCPBUGS-29033: network node identity: tolarate all taints #2248
OCPBUGS-18281: only 2 master nodes are required for ovn-kubernetes #2154
OCPBUGS-29300: Update ingressconfig_controller to use field Manager #2266
OCPBUGS-28608: fix whereabouts conformance test failures #2235
NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858: [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
OCPBUGS-27013: HyperShift, network-node-identity: Check the deployment in the management cluster #2195
OCPBUGS-24326: adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
Full changelog

cluster-node-tuning-operator

OCPBUGS-30507: Add performance real time tuned template (#984) (#1025) #984
Report duplicate priority only for multiple matching profiles (#1018) #1018
Scheduler plugin: ignore IRQs (#1023) #1023
irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640: [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989
rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28951: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
Full changelog

cluster-samples-operator

OCPBUGS-21217: CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) #539
Full changelog

cluster-storage-operator

OCPBUGS-30054: Update AWSCSIDriverConfigSpec fields validation to accept all curren #462
OCPBUGS-28988: Allow vSphere CSI driver to be disabled #449
Full changelog

cluster-version-operator

OCPBUGS-30878: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040
OCPBUGS-27822: Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs #1021
OCPBUGS-27048: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
Full changelog

console

OCPBUGS-25145: fix vCenter cluster being empty #13436
OCPBUGS-28746: fix bug where Expand PVC modal assumes pvc.spec.resou… #13558
OCPBUGS-29783: Fix operands list endpoint #13625
OCPBUGS-29813: Release 4.14 backports #13646
OCPBUGS-29813: Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274: Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972: Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898: Add support for custom segment domains (to load JS and make API calls) #13540
OCPBUGS-29349: Error in displaying BuildRun logs in Console #13601
OCPBUGS-29100: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239: Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990: update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157: add additional check to determine if file is binary #13507
OCPBUGS-28635: Bump graphql-go to v1.3.0 #13553
OCPBUGS-27305: Copy response code from proxied plugin requests #13517
OCPBUGS-27851: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537
OCPBUGS-27350: Add Pipeline metrics tab using plugin #13520
Full changelog

console-operator

OCPBUGS-21029: Bump library-go and golang.org/x/net #850
Full changelog

coredns

OCPBUGS-28200: UPSTREAM: 6277: openshift: Fix OCPBUGS-28200 #114
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

manage-security-groups: Only add SGs to LB members (#2455) #2455
Fix protocol case mismatch (tcp vs TCP) (#2320) #2320
Get IP addresses of neutron subports (#2306) #2306
Make manage-security-groups work with OVN (#2291) #2291
Delete sgs on reconfiguration (#2305) #2305
Optimize applyNodeSecurityGroupIDForLB() (#2293) #2293
Remove unused manila code (#2299) #2299
Use instanceIDFromProviderID() function (#2302) #2302
Remove filtering by device_owner. (#2304) #2304
Allocate array capacity in advance (#2297) #2297
Corrected the grammar (#2301) #2301
Delete unused SG rules with manage-security-groups (#2287) #2287
Improved the grammar in sidecarcompatibility.md (#2292) #2292
Added comments and arranged the variable names (#2290) #2290
occm cinder-csi securityContext (#2286) #2286
fixed Grammatical mistakes in barbican-kms-plugin (#2289) #2289
efactors and enhances the codebase of the cinder csi plugin (#2288) #2288
Wait for LB to be ACTIVE on HM update (#2280) #2280
(barbican-kms-plugin)Refactor and enhance Barbican KMS plugin codebase. (#2278) #2278
Fixed the typo in the load balancing section in the README (#2232) #2232
Fix image tag in manila csi e2e test (#2244) #2244
enable secret injection and common annotations (#2264) #2264
Update to gophercloud 1.4.0 (#2265) #2265
Replace call to Nova os-interfaces with direct Neutron call (#2250) #2250
add secret enabled option (#2239) #2239
Fix CSI spec versions (#2254) #2254
LoadBalancers: Remove dead SG code (#2248) #2248
Make ensureSecurityRule() safely idempotent (#2249) #2249
shrink image, remove unnecessary utils (#2233) (#2238) #2233
Doc: update statement about neutron lbaas removeal (#2236) #2236
add environment variable for timeout (#2235) #2235
Increase timeout for LB to get to ACTIVE state (#2223) #2223
Ignore proxies when calling Nova Metadata (#2218) #2218
add priorityClassName to openstack-cloud-controller-manager helm chart (#2210) #2210
Do not default Octavia provider to “octavia” (#2208) #2208
Full changelog

csi-driver-manila-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #219
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28952: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28957: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29433: cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142
Full changelog

docker-builder

OCPBUGS-28949: Replace ‘coreydaley’ with ‘sayan-biswas’ #379
Full changelog

docker-registry

OCPBUGS-29604: vendor: bump distribution to fix azure storage path bug #394
Full changelog

etcd

OCPBUGS-31650: Rebase etcd 3.5.13 openshift 4.14 #261
OCPBUGS-28733: Rebase etcd 3.5.12 openshift 4.14 #244
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
Full changelog

hyperkube, pod

OCPBUGS-29924: UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches #1898
OCPBUGS-31504: Bump to 1.27.12 #1927
OCPBUGS-31741: 4.14: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1936
Address CVE #12
OCPBUGS-30964: Set up CEL IP/CIDR library from 4.14 onwards #1913
OCPBUGS-29662: Update to kubernetes 1.27.11 #1890
OCPBUGS-27347: UPSTREAM: <carry>: Update management webhook pod admission logic #1855
OCPBUGS-27369: Update to kubernetes 1.27.10 #1860
Full changelog

hypershift

chore(deps): update rhtap references (release-4.14) #3888
NO-JIRA: Update RHTAP references (release-4.14) #3874
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3869
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3858
NO-JIRA: Update RHTAP references (release-4.14) #3836
OCPBUGS-31657: disable http2 for ignition server and proxy #3831
OCPBUGS-31605: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3826
HOSTEDCP-1322: NodeUpgradeType defaulted by provider #3822
NO-JIRA: Update RHTAP references (release-4.14) #3813
OCPBUGS-31417: honor HC image configuration #3806
OCPBUGS-23914: Added OLMCatalogPlacement option to the CLI #3229
OCPBUGS-30211: set Konnectivity cipher suites #3679
chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3756
NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596: Bump golang.org/x/net to version v0.17.0 #3711
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782: use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094: Make ControllerAvailabilityPolicy immutable #3534
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084: Reduce the policy access scope to specific instance #3530
OCPBUGS-29206: Add GC knobs for KAS #3543
OCPBUGS-29187: node spread anti-affinity for HA HCP #3541
OCPBUGS-19956, OCPBUGS-28984, OCPBUGS-28985, OCPBUGS-28986, OCPBUGS-29000: Support Disconnected HCP #3520
OCPBUGS-29030: Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238: consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526: Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526: Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072: Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180, OCPBUGS-20547: Added network validations #3096
OCPBUGS-23997: add watch for HCP pullsecret to HCCO #3265
OCPBUGS-28249: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485
NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315: Add prestop to konnectiviy server #3268
OCPBUGS-24307: Set shutdown-delay-duration to 15s #3264
OCPBUGS-21795: change trusted bundle volume mount for CPO #3102
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-27279: Add Snyk file to exclude vendor directory on scan #76
Full changelog

insights-operator

Add linting recommendations (#904) #904
gather etcd_server_slow metrics (#902) #902
Full changelog

ironic

OCPBUGS-27773: Update inspector package to fix LLDP unicode error #452
OCPBUGS-27193: Fix Inspector iPXE config for IPv6 addresses #448
Full changelog

ironic-agent

OCPBUGS-29454: Always add ignition to set hostname on /etc/hostname #109
OCPBUGS-28554: Update to latest ironic-python-agent for bugfixes #107
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-23866: deps, bump opentelemetry #38
OCPBUGS-21174: Bump golang.org/x/net to v0.18.0 #37
OCPBUGS-30861: Bump golang.org/x/net to v0.18.0 #36
Full changelog

kubevirt-csi-driver

“OCPBUGS-29792: [release-4.14] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #34
Full changelog

machine-api-operator

OCPBUGS-30898: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1224
OCPBUGS-28745: Set –max-concurrent-reconciles=10 for Azure machine controller #1217
OCPBUGS-28745: Add AddWithActuatorOpts to allow overriding Machine controller options #1214
Full changelog

machine-config-operator

: OCPBUGS-31731: kubelet: restorecon necessary files on kubelet’s prestart #4307
OCPBUGS-32260: fix: resources were in the wrong indentation level #4322
OCPBUGS-27108: Add \n in cert_writer for old cert methods and skip cloudCA validation #4117
OCPBUGS-31487: Prevent OVS-configuration to run before kdump #4291
OCPBUGS-29400: Run resolv-prepender entirely async #4182
OCPBUGS-31681: make verify should use MCO’s kube version #4305
OCPBUGS-30992: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266
OCPBUGS-30872: add static pods for rbacproxy #4258
OCPBUGS-30107: annotate on-prem static pods for workload partitioning #4230
OCPBUGS-30225: set nodeStatusReportFrequency #4242
OCPBUGS-29290: AWS: Always persist the existing node name on 4.14 #4215
OCPBUGS-20039: Add v6-primary dual stack support to VSphere UPI #3956
OCPBUGS-29457: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187
OCPBUGS-26072: Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379: fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384: daemon: allow the user to override drains on IR changes #4150
OCPBUGS-27759: Add Image Credential Provider flags for Kubelet on AWS #4144
[OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178: use *resource.Quantity to not automatically set 0 #4121
OCPBUGS-23089: Don’t retry node-ip show in resolv-prepender #4022
OCPBUGS-27362: Fix typo in AWS node env unit #4131
Full changelog

monitoring-plugin

OU-318: consider all metric keys to display all results on dashboards tables #99
Full changelog

multus-cni

OCPBUGS-26331: Fix SAST scan issues for multus-cni-container [4.14] #220
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27858: Enable reconciler configuration 4.14 #240
OCPBUGS-26553: Cherry pick fix assignment 4.14 #230
Full changelog

network-tools

OCPBUGS-31862: replace wireshark with wireshark-cli #122
Full changelog

oauth-apiserver

OCPBUGS-21100: bump k8s.io (release-4.14) #100
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#822) #822
Fix to ensure operator not found error exits with correct status (#797) #797
OCPBUGS-28871: Capability to override default channel (#749) (#790) #749
Full changelog

olm-catalogd

OCPBUGS-27585, OCPBUGS-27670: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #40
Full changelog

olm-operator-controller

OCPBUGS-27590, OCPBUGS-27675: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #69
Full changelog

olm-rukpak

: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
Full changelog

openshift-controller-manager

OCPBUGS-28950: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-30775: [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) #715
OCPBUGS-29192: [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686
OCPBUGS-29194: Retry failing unpack jobs #689
NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 #674
OCPBUGS-27314: Don’t sync namespaces that have no subscriptions #675
OCPBUGS-27565, OCPBUGS-27570, OCPBUGS-27650, OCPBUGS-27655: bump go-git/v5 to 5.11.0 #677
OCPBUGS-27485: [CARRY] SSC RBAC #665
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-31648: Set mac binding age threshold in gateway routers #2115
OCPBUGS-29342: AdminPolicyBasedExternalRoute CRD failing to watch and reconcile routes for later pods #2076
OCPBUGS-29606: Update HostNetworkNamespace address_set for remote zone nodes #2091
OCPBUGS-28726: Update netpol namespace address sets usage to the old ways #2068
OCPBUGS-28819: Support Permanent Session Affinity #2046
OCPBUGS-29231: [release-4.14] Separate timeout for handler sync from informer sync & do not resync services during node tracker startup #2061
OCPBUGS-29186: Wait for ovnkube controller to start before checking result error. #2067
OCPBUGS-29207: Ignore hybrid-overlay nodes from EgressIP controller #2062
OCPBUGS-25999: Prevent multiple encap-ips per single chassis #2037
OCPBUGS-28789: Fix LGW ETP=Local on IPv6 #2042
OCPBUGS-27925: dont quit if node does not have subnet annotation #2026
OCPBUGS-27256: Ensure session affinity cleanup on backend removal #2021
OCPBUGS-23395: Egressfirewall use port groups #1956
OCPBUGS-27243: CARRY: Updates owners and adds Surya #2019
OCPBUGS-25081: Update ACL syncer: make default deny acls filter more strict, #1981
OCPBUGS-26568: Synchronize node primary address update #2012
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-30015: fix: convert continue field between v1beta1 and v1alpha1 #279
Full changelog

tests

OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28647
OCPBUGS-29928: Only extract node role from properly formatted node-role label #28616
OCPBUGS-29182: updated timeout to 3 seconds to account for network timing issues #28578
OCPBUGS-29034: Replace ‘coreydaley’ with ‘sayan-biswas’ #28574
Full changelog

vsphere-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #203
Full changelog

vsphere-problem-detector

OCPBUGS-24401: Use failure-domains and other changes from master #142
OCPBUGS-21812: Warn usernames without domain name #134
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github