4.14.27

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.27-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.33, 4.13.34, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.21, 4.14.22, 4.14.23, 4.14.3, 4.14.4, 4.14.5, 4.14.6, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.8

Created: 2024-05-23 12:18:03 +0000 UTC

Image Digest: sha256:4d30b359aa6600a89ed49ce6a9a5fdab54092bcb821a25480fdfbc47e66af9ec

Release 4.14.27 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-05-20-155905

Components

Kubernetes upgraded from 1.27.8 to 1.27.13
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202312191502-0 to 414.92.202405162017-0 (diff)

Rebuilt images without code change

agent-installer-utils git ad853769 sha256:c294d0e0a08c16b1ec0a2fca681c2e95a95e5a2fbdd73d866ca006fe65225c99
alibaba-cloud-controller-manager git 8ba0b37a sha256:5e410c7be022691ccbfd2dcc393960e7056c7665a87700c94ff8950a81698420
alibaba-cloud-csi-driver git 3dc363d3 sha256:ded55f3f15437d118661c247dc4c78e35db9bdb54c02ccba18c432484fe1d2ab
alibaba-machine-controllers git 27f105d3 sha256:67f21f33da6603690868bf89b57be195b71a6c7352ccbdebee0579f7d3ab54ca
aws-machine-controllers git e292817c sha256:ae4a86efedd87a94a5478d5feb4c8d1a31e3fdb9dbc51963e756aedea0ff6472
azure-cloud-controller-manager git f0e7cbbc sha256:6cdc8ede4b2bebb4b26d1ed81f9f2374d5c7cb45caffba12a8c5006c8248d419
azure-cloud-node-manager git f0e7cbbc sha256:d1fe1c926b57c1dd06690052a8074432169013d3e009ab768c759c741c1b6a65
azure-cluster-api-controllers git 7ad2773c sha256:18c652494e2b53890277881d338d8e447c41fb4d02797143e4ab4503322d9119
azure-disk-csi-driver git b19eec11 sha256:ab6a37d4e21da3cf36fc750ad9df3907b533aa96a0a0aac06da44baec4d7a0c6
cluster-baremetal-operator git 270579c6 sha256:01983aa17323a4cae5a0ed967a350859207af907f5dc0b8e180e2afa4f9b7939
cluster-bootstrap git 93fba13f sha256:5e1c01751c5b50fec772b18dbf76da15a54811b8c60b3c2b853ffec17af2c567
cluster-capi-controllers git ae83c553 sha256:d51c26661abd86363a830db7b502bd61392ad1828c3288b954d0fab6be74fc90
cluster-capi-operator git b4c4fb13 sha256:d16aa414422579e97bc5b491445c58389fa2fe85ec59baf7b7d45747f70216d6
cluster-dns-operator git 5553a226 sha256:bab7d3ecc6dbe45a20aab8b1a544175913067753050fb8a30022c36f82505c10
cluster-ingress-operator git d876f5ab sha256:6a5162a07728a95086ea9d4a2aeb8f7afd505049b0551bbb5f141037019c64f6
cluster-kube-cluster-api-operator git b287d08b sha256:87c4727b1855cecb60aee5b0992a849ce5591ccc8d789b931b12fa2acb75799c
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:86c018fa6e1384dcbdb2934bfe333a67a1fc7930b2b26f93dbad4e857f813203
cluster-olm-operator git 0dbbb613 sha256:dd32910405df15e8f264d2d423f04613be7dfd962774dd2255f09f86dfc99cc3
cluster-platform-operators-manager git 08fb27e7 sha256:99fb59b309699f666cda1e0ed0114438b1723c5703e8d0bfa5c61ad1bffc9c92
cluster-policy-controller git 219f6f6f sha256:1f8e9ea878ba371ab0ecfb13f728f096e49172bee5e2cf27984598ac50156796
cluster-update-keys git e0c26a08 sha256:e1306752b052d00e945c73ed77ce7961820084a4130d636b0ceccc7b305103d9
configmap-reloader git 716a0c33 sha256:97eda353776926e23e3b2349c92be1dd46d9c08f4f9c4798740b1413f15f6822
csi-driver-nfs git e1dd4537 sha256:bacde2f1dd06776914146b39f4d0276a7e5f4e3513f30ae4892d49315ddcfa00
csi-external-attacher git 06e8ce0d sha256:147c4c761646b8fe178878b3cf2b1c310dc73a2f166bef9550578b5470acdc7c
csi-external-provisioner git 78a710fd sha256:4ad3f25f67f7168c6e9c25d3595aaa18017e90541258971095b6f7b8a2661968
csi-external-resizer git 59a701a4 sha256:98c996e09001f26d97989108549a0497f6167df827e167477ed46d5e1797b42e
csi-livenessprobe git a9bcbde1 sha256:d3c8156b425e2904923863374a9f483ddd83f6d2bcff366ebde6aeb66fa0ac1e
csi-node-driver-registrar git 9dcaa7f5 sha256:42ab03765511073fd9c9b187e3f5fd68f4c042ded86169f705f223d748a25392
driver-toolkit git cafed17b sha256:4feae2e6bb59f667431e11e832d294fc5900c1ab38a3bb845191ee93524208e4
egress-router-cni git afffdd45 sha256:44b8147c571c9928b86fa62f3664f7d4b97542af97d036daf60b54eec0f14c4a
gcp-cloud-controller-manager git 09e96a91 sha256:5e16c21474c2fc1bcb0991ce9c8bba5739b7ccd783d9e5a87f12eb3463022cc9
gcp-cluster-api-controllers git d99fb31a sha256:321aa1d7370cd67a60c5d1b6196a8b216da01d7da0685afb763ba7bb40ce4b37
gcp-machine-controllers git a676e6b6 sha256:fad7ad1b083347c0ce985bbe0a974b2d90981c9c1d14c64843d0151e03613cff
gcp-pd-csi-driver git 8a626fe5 sha256:70f786e0e3844ee8fed0d69ffa0a9b98fa9d3e08826899e423e604d9caa660aa
ibm-vpc-block-csi-driver git 02471d96 sha256:183cccc6ad3600b185d93199d371fc7eb6087eff49ecfd61befeabe09dd48740
ibm-vpc-node-label-updater git 44a2b943 sha256:d8552451c4fbe59b4173a87d584b5d076cc779c0d9fcb5f6b78c59c247c63422
ibmcloud-machine-controllers git c28b2232 sha256:359964784e3ca4c7d526d6a5b9a1f13a78317b99bfada718f7d192c8e5ab111f
ironic-machine-os-downloader git 7b56c306 sha256:1a3bf3549f14452bd745dcb51f34c32ad66813118b554c16aac8283b0965abdc
ironic-static-ip-manager git c038d5a4 sha256:3ddf304d2bcc76743540536e57af9c459dd1fb63a127a07b128074a42b992300
k8s-prometheus-adapter git 801a912b sha256:8bdf539d384802a2b4dd0961c7c4a67e87eb7b0a1167e9f13aff48ef5b7049ff
keepalived-ipfailover git f08cee33 sha256:7672cad292d3832a3aec287fd9530974b2808af7fa6747ce900595b1bc3dcd01
kube-proxy git 1a9befcb sha256:a7e3ec918ee1a1e7856a88bd48586cb11076443ce7a48e60b557e664983bb73e
kube-rbac-proxy git 1a646b98 sha256:41cf2f6ddbe07a2356bada1196f1f09804bc2ff8b5b588117190ef4e8028f8b2
kube-state-metrics git db0c5499 sha256:c159d5cec9cf5a1236c20e04a0ab1dab565aafad3a6ca3c001e4866bb09aac23
kube-storage-version-migrator git 8558e14a sha256:b9e75da6387bc47f3ac4b2ccd830dd368095402793a75d2b8f09305b0b0f2eab
kuryr-cni git 8926a294 sha256:aa21db5de118d775c8c8321580aa15d0d2f33e799f5263bef8102a8971a51e49
kuryr-controller git 8926a294 sha256:2259b8efcceffebd87e71331c3a2880bb2aa9031cbe815bf30d3fe6334cd1ff5
libvirt-machine-controllers git 34dfccba sha256:bbcb37ac1606720a464a1dafb731a6980a6d37bb630d7ce995c2202a5583f095
machine-os-content sha256:a1a98858213065a862fc068cd6e70d0b34227e5ca69ec9eca870c847b1d5206f
machine-os-images git d3a4a6c3 sha256:bb989e948b726b77227501fba85a35008d8f3f7f303f03f125ea85f6a61d7469
multus-admission-controller git 5e74b0fa sha256:cb85c8f62908949e8bb0acdf562333d42a94f5b50fa9c524bcb70d040b975e76
multus-networkpolicy git cd6eae10 sha256:acd2301ce05d3cc826ed6ce90ede766adf1fb133baedb54096632f40489981f0
multus-route-override-cni git 078aee5c sha256:c01e950d1e761f68a2304f8061f5d7bf066cb3d2b30f2d3626d7b5088ea92b4c
must-gather git 833e1de9 sha256:d6de9d4771f16512ac86120e48b40bffcc7362b1c51249c731b1532951c61f4c
network-interface-bond-cni git 29f61f6b sha256:a1a3b902af70c75285b396bd6036b423f50cb55887b1bbbaf8689c5b284c8484
network-metrics-daemon git 69d0021a sha256:01f06fa42223f8661dc4c2a97c3aa1e1982ea769e059df73bd21444b895b6028
nutanix-cloud-controller-manager git bc568865 sha256:091f162067b002994014dfd5676cbb9758db846c0fe3a15a084167a3b8a9de1e
nutanix-machine-controllers git 6f50b1ac sha256:2940d8a0e74e5a5b4db9b08d9a20d4d141062c46c55aa7fd64a934b39a0b4966
oauth-proxy git a4a2f270 sha256:95377a4f01331c26fd5d43497f3470ea4d69096f7f71a0c777bd23bb26d4ad65
oauth-server git 35f4739f sha256:747409a23e757f159fe0455e46463a1c918949fe87e49a851854ba485197500c
openshift-state-metrics git dff4b0f4 sha256:6845265670f2ff4541bbb76343add49d01cc446fbd931cb599968c9caf58d4de
operator-marketplace git a367cea6 sha256:42266061839a50cbfc31763efd49790d73abcbf2098cdc207322d3db1093f8e7
ovirt-csi-driver git f21b470f sha256:4009f862636a8b5943a255ab51ffee7a707c28483484ac58ae4d5e9b22423ac7
ovirt-csi-driver-operator git 2fa33aa7 sha256:89bfb6f9cc87629a0002aefb5176d50c2accfa3dc1e276df72061149ccadc542
ovirt-machine-controllers git 5d708631 sha256:fef96c365677ac44946934d090d7ea78589f628c92a48d7b7d09ceb30f8aa838
powervs-cloud-controller-manager git 32c1028e sha256:d2da83540f6acf49b4af5298e3e9836e806e8bedc25e161f7b0efc23763aed73
powervs-machine-controllers git 1a957dae sha256:a5608c51d7691c62f7a6ff19204a91004191baef433528c652c57661b540e35f
prom-label-proxy git af40ed09 sha256:99152e308098f38d05c7f729acd7b97b8c573ca1f87515f77ed5089304a22363
prometheus git b7c61bcb sha256:5ae1e5de86608dbe7afa4506d3b578678bf8f0783c5ac31825bb8520ff7bb1f2
prometheus-alertmanager git e3725166 sha256:97874b3f9bd6f75bb1be5e49560e4f27ca0cf7bfe6d992b10de01c369b8a95bf
prometheus-node-exporter git 5ee0a9d9 sha256:6b4c0d0057296213c08bc25fa42a5b2863c8ad0403b0b883ad3dfc2bc6f2d848
rhel-coreos sha256:068f0728a42fa333660d2c4f70f04d8fc56036aad0a7a0b5095bdab21903bdfc
rhel-coreos-extensions sha256:032ea84ca72e5da56f1dc3d102f872693695bcae7156aa42286f34ebc14168e6
route-controller-manager git 1a5e72f4 sha256:e580d74324b7caea2ba2ce8c8b302e7fc46d895a6ad1846a81e1d6a9af03e3dc
sdn git 1a9befcb sha256:8f675cc4918d47a5ecb900390aa6031d367fc004625a389446e63888a7dc6d40
service-ca-operator git 3c3f82f7 sha256:01c9e7fffa1e6c0cc6b1ded0f8c381ac00a6f34699f1281ac477657717806fe6
telemeter git c683f657 sha256:a8a0a831d382b74f975a8c86b21b38c0f435ecd440f9afa562715718176ae42c
thanos git a2671250 sha256:e14fd51d2343579a53e70884c095198c18f3a86635348e30f3b0cea7e312a190
vsphere-cloud-controller-manager git b04567f7 sha256:92f0e020200d9b177454456a89743a2beff65daaa200decbca19ab387a607507
vsphere-cluster-api-controllers git 72e998c3 sha256:852a46f07f21ec2741abf4b932e3dbbe6898bed2ccee1a695bd8080a1c390675

agent-installer-api-server

MGMT-17594: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6216) #6216
MGMT-17549: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6203) #6203
MGMT-17541: Replace broken golangci reference (#6197) #6197
NO-ISSUE: replace postgres images as current one disappeared from quay (#6134) #6134
MGMT-16950: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) #5973
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5974) #5974
MGMT-16517: Add Env Var Deployment Type & Set ABI (#5987) #5987
MGMT-15796: set CloudControllerManager to External for OCI (#5877) #5877
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17594: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#834) #834
MGMT-17591: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#830) #830
MGMT-16843: Ensure valid hostname during install (#794) #794
Full changelog

agent-installer-node-agent

MGMT-17594: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#705) #705
MGMT-17591: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#703) #703
MGMT-17541: Replace broken golangci reference (#698) #698
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
Full changelog

apiserver-network-proxy

OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-23826: bump go.opentelemetry.io #67
OCPBUGS-27759: Adds ecr-credential-plugin .spec #71
Full changelog

aws-cluster-api-controllers

OCPBUGS-31332: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #506
OCPBUGS-31251: fix e2e tests on release branches #505
Full changelog

aws-ebs-csi-driver

OCPBUGS-33078: UPSTREAM: 1919: Add reserved-volume-attachments #264
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33078: Explicitly reserve 1 attachment for the root disk #306
OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
Full changelog

aws-pod-identity-webhook

OCPBUGS-32884: Upgrade go-jose module to 2.6.3 #189
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
Full changelog

azure-file-csi-driver

OCPBUGS-33039: Rebase v1.29.5 for OCP 4.14 #66
Full changelog

azure-file-csi-driver-operator

OCPBUGS-33039: add token audience for Azure File #104
OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
Full changelog

azure-machine-controllers

OCPBUGS-30898: Remove startupScript vmextension lookup #106
OCPBUGS-29152: Don’t create availability set when using spot instances #98
OCPBUGS-28745: Improving performance of VMs created in Azure #96
Full changelog

azure-workload-identity-webhook

OCPBUGS-32894: Upgrade go-jose module to 2.6.3 #19
OCPBUGS-21093: Upgrade golang/x/net for CVE-2023-39325 (4.14) #14
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-28611: remove retired serial NCv2 from azure tested instance type list on x86 #7960
OCPBUGS-27394: preserve category name when trying to find tag category #7926
OCPBUGS-33010: escape ‘%’ in proxy settings #8318
OCPBUGS-31756: openstack: Honour worker server group policy #8231
NO-ISSUE: test fix to support slightly different nmstate error messages #8286
OCPBUGS-32358: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8281
OCPBUGS-31885: Validate control plane replicas #8241
OCPBUGS-31677: coreos-installer iso kargs show broken on Agent ISO #8228
OCPBUGS-31338: upi: aws: fix typo in worker templates #8203
Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027: gcp: better error msg when service accnt missing #8078
OCPBUGS-30259: PowerVS remove ibm cloud/bluemix go 4.14 #8103
OCPBUGS-29123: IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626: update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
OCPBUGS-28929: [release-4.14] Bump containerd for vulnerability fix #7981
OCPBUGS-27419: Fix depreciated typo #7929
OCPBUGS-24521: set vmType in azure cloud config [release-4.14] #7804
OCPBUGS-23738: vSphere - when using RP network path is incorrect #7759
OCPBUGS-27241: baremetal: correct external_http_url for v6-only BMCs #7914
OCPBUGS-22315: bootstrap: Enable gatewayd units only on RHCOS #7628
OCPBUGS-23498: update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
OCPBUGS-20860: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887
OCPBUGS-22895: Do not generate azure-cloud-provider in manual mode for aro builds #7670
Full changelog

baremetal-machine-controllers

OCPBUGS-31435: Bump golang-protobuf version #215
OCPBUGS-29177: Extend metal3remediation aggregation role #211
Full changelog

baremetal-operator

OCPBUGS-23324: Backport node poweroff fixes #318
OCPBUGS-24409: Don’t munge timestamp in structured logs, again #324
Full changelog

baremetal-runtimecfg

OCPBUGS-32524: Decrease log level when detecting node IP #306
OCPBUGS-26928: Add .snyk file to ignore vendor and test files #294
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30287: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699
OCPBUGS-25983: Remove deprecated password defaulting in default config flag #1646
Full changelog

cloud-credential-operator

OCPBUGS-32899: Upgrade go-jose module to 2.6.3 #697
OCPBUGS-29156: Fix the ClusterOperator watch of the status controller #676
OCPBUGS-28231: Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670
OCPBUGS-29199: ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911: Resolve all outstanding snyk vulnerabilities #650
OCPBUGS-28382: Use cached clients to avoid client side throttling #666
OCPBUGS-27515: Write manifests when AWS IAM roles already exist. #659
OCPBUGS-26512: Use live client for metrics #647
Full changelog

cloud-network-config-controller

OCPBUGS-32112: Avoid nil pointer panic while assigning private IP on Azure #138
Full changelog

cluster-authentication-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #649
Full changelog

cluster-autoscaler

OCPBUGS-31621: add check for taint.value == nil #294
OCPBUGS-30628: Fix unstructured taint parsing in Cluster API provider #288
Full changelog

cluster-autoscaler-operator

OCPBUGS-31976: Update x/net to v0.25.0 #322
OCPBUGS-25749: Add Snyk file to exclude vendor directory on scan #308
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-26548: Adds CloudConfigTransformer for Azure #321
Full changelog

cluster-config-operator

OCPBUGS-28649: Add required PSa labels #403
NO-JIRA: add inert featuregate files to allow diff against later releases #398
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30014: Never delete a Machine when there’s a single Machine in an index #283
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-31886: create suitable role and roleBinding for csi-snapshot-webhook #205
Full changelog

cluster-etcd-operator

OCPBUGS-31392: remove etcd-health-probe log #1258
OCPBUGS-31972: update golang x net #1254
OCPBUGS-31428: CEO aliveness check should only detect deadlocks #1231
OCPBUGS-30067: fix panic in health check timeouts #1213
OCPBUGS-30012: Replace nodelister with master nodelister everywhere #1211
OCPBUGS-23571: Add annotation in the etcd-guard static pod for worklo… #1162
OCPBUGS-26214: fix device busy errors #1176
Full changelog

cluster-image-registry-operator

OCPBUGS-32450: azure-path-fix: support auth via account key (without clientID) #1023
OCPBUGS-31857: bump aws-sdk-go from v1.44 to v1.50 #1018
OCPBUGS-28989: pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755: azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604: move azure storage blobs from docker back into /docker #1001
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-31506: Add sno section to alert description #1658
OCPBUGS-31316: add provider name to cluster_infrastructure_provider when external platform #1657
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
OCPBUGS-27063: bump(library-go)=release-4.14 #787
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27022: bump(library-go)=release-4.14 #527
Full changelog

cluster-machine-approver

OCPBUGS-28745: Increase concurrent reconciles to 10 #228
Full changelog

cluster-monitoring-operator

OCPBUGS-28768: fix generation of telemeter token hash #2304
OCPBUGS-27471: prevent plugin entry assets from caching #2241
OCPBUGS-25800: Wait for 3 (instead of 2) consecutive failing reconcil… #2216
OCPBUGS-27418: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2239
OCPBUGS-25799: Detect ipv4/ipv6 socket in pod ip for nginx conf #2215
OCPBUGS-25387: Add RHACM telemetry metric for 4.14 #2202
Full changelog

cluster-network-operator

OCPBUGS-30021: Fully disable network-node-identity on ROKS #2315
OCPBUGS-31669: [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2311
OCPBUGS-31360: Remove egressip write permissions from ovn-kubernetes-node #2320
OCPBUGS-30021: [release-4.14] Disable network-node-identity on ROKS #2286
OCPBUGS-30100: ipsec: fix openssl typo #2287
OCPBUGS-29168: add env var in whereabouts-reconciler daemonset #2257
OCPBUGS-26573: Improve troubleshooting IC upgrades #2076
OCPBUGS-29033: network node identity: tolarate all taints #2248
OCPBUGS-18281: only 2 master nodes are required for ovn-kubernetes #2154
OCPBUGS-29300: Update ingressconfig_controller to use field Manager #2266
OCPBUGS-28608: fix whereabouts conformance test failures #2235
NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858: [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
OCPBUGS-27013: HyperShift, network-node-identity: Check the deployment in the management cluster #2195
OCPBUGS-24326: adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
OCPBUGS-24037: remove all managed fields used by old manager #2112
Full changelog

cluster-node-tuning-operator

OCPBUGS-30153: fix rendering extra ctrcfgs (#978) #978
fix extra-reboot on upgrade with paused mcp worker (#1053) #1053
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1052) #1012
Systemd processes not being moved to cpuset/systemd.slice fix (#1040) #1040
Reduce number of reboots in offline tests (#1035) #1035
OCPBUGS-30507: Add performance real time tuned template (#984) (#1025) #984
Report duplicate priority only for multiple matching profiles (#1018) #1018
Scheduler plugin: ignore IRQs (#1023) #1023
irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640: [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989
rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
OCPBUGS-26003: E2E: PPC Test cases (#905) #905
Make MC names deterministic (#903) #903
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #570
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28951: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
Full changelog

cluster-samples-operator

OCPBUGS-21217: CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) #539
Full changelog

cluster-storage-operator

OCPBUGS-33467: Fix problem-detector proxy setting #472
OCPBUGS-30054: Update AWSCSIDriverConfigSpec fields validation to accept all curren #462
OCPBUGS-28988: Allow vSphere CSI driver to be disabled #449
Full changelog

cluster-version-operator

OCPBUGS-30878: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040
OCPBUGS-27822: Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs #1021
OCPBUGS-27048: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
OCPBUGS-26207: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016
Full changelog

console

OCPBUGS-33321: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824
OCPBUGS-33635: restrict Masthead logo to max-height to 60px #13847
OCPBUGS-33640: Add visual connector between VMs and non VMs workloads #13848
OCPBUGS-33462: fix issues with Edit Route form #13831
OCPBUGS-33110: change OperatorHub filter FIPS Mode to Designed for FIPS #13804
OCPBUGS-32697: Routes created by devfiles do not always use HTTPS #13787
OCPBUGS-21799: Fix empty editor error #13256
OCPBUGS-32168: fix bug where paused MCPs were incorrectly unpausing w… #13753
OCPBUGS-20173: Console should not panic when no response is retrieved for plugin assets #13217
OCPBUGS-31388: Application creation fail when manually entering input scaling value in local setup #13697
OCPBUGS-31394: PipelineRuns in Console show wrong status or load indefinitely #13698
OCPBUGS-31864: Fix config ini format #13738
OCPBUGS-25145: fix vCenter cluster being empty #13436
OCPBUGS-28746: fix bug where Expand PVC modal assumes pvc.spec.resou… #13558
OCPBUGS-29783: Fix operands list endpoint #13625
OCPBUGS-29813: Release 4.14 backports #13646
OCPBUGS-29813: Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274: Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972: Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898: Add support for custom segment domains (to load JS and make API calls) #13540
OCPBUGS-29349: Error in displaying BuildRun logs in Console #13601
OCPBUGS-29100: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239: Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990: update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157: add additional check to determine if file is binary #13507
OCPBUGS-28635: Bump graphql-go to v1.3.0 #13553
OCPBUGS-27305: Copy response code from proxied plugin requests #13517
OCPBUGS-27851: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537
OCPBUGS-27350: Add Pipeline metrics tab using plugin #13520
OCPBUGS-26171: Set unlimited line width in YAML editor #13482
OCPBUGS-24640: Strip ‘Server’ header from proxy response #13423
OCPBUGS-25997: change Alertmanager form to create using matchers inst… #13478
Full changelog

console-operator

OCPBUGS-21029: Bump library-go and golang.org/x/net #850
Full changelog

container-networking-plugins

OCPBUGS-33066: macvlan enable ipv6 ndisc_notify #160
Full changelog

coredns

OCPBUGS-28200: UPSTREAM: 6277: openshift: Fix OCPBUGS-28200 #114
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

manage-security-groups: Only add SGs to LB members (#2455) #2455
Fix protocol case mismatch (tcp vs TCP) (#2320) #2320
Get IP addresses of neutron subports (#2306) #2306
Make manage-security-groups work with OVN (#2291) #2291
Delete sgs on reconfiguration (#2305) #2305
Optimize applyNodeSecurityGroupIDForLB() (#2293) #2293
Remove unused manila code (#2299) #2299
Use instanceIDFromProviderID() function (#2302) #2302
Remove filtering by device_owner. (#2304) #2304
Allocate array capacity in advance (#2297) #2297
Corrected the grammar (#2301) #2301
Delete unused SG rules with manage-security-groups (#2287) #2287
Improved the grammar in sidecarcompatibility.md (#2292) #2292
Added comments and arranged the variable names (#2290) #2290
occm cinder-csi securityContext (#2286) #2286
fixed Grammatical mistakes in barbican-kms-plugin (#2289) #2289
efactors and enhances the codebase of the cinder csi plugin (#2288) #2288
Wait for LB to be ACTIVE on HM update (#2280) #2280
(barbican-kms-plugin)Refactor and enhance Barbican KMS plugin codebase. (#2278) #2278
Fixed the typo in the load balancing section in the README (#2232) #2232
Fix image tag in manila csi e2e test (#2244) #2244
enable secret injection and common annotations (#2264) #2264
Update to gophercloud 1.4.0 (#2265) #2265
Replace call to Nova os-interfaces with direct Neutron call (#2250) #2250
add secret enabled option (#2239) #2239
Fix CSI spec versions (#2254) #2254
LoadBalancers: Remove dead SG code (#2248) #2248
Make ensureSecurityRule() safely idempotent (#2249) #2249
shrink image, remove unnecessary utils (#2233) (#2238) #2233
Doc: update statement about neutron lbaas removeal (#2236) #2236
add environment variable for timeout (#2235) #2235
Increase timeout for LB to get to ACTIVE state (#2223) #2223
Ignore proxies when calling Nova Metadata (#2218) #2218
add priorityClassName to openstack-cloud-controller-manager helm chart (#2210) #2210
Do not default Octavia provider to “octavia” (#2208) #2208
Full changelog

csi-driver-manila-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #219
OCPBUGS-23443: Fix selector for manila-csi-driver-controller-metrics service #211
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28952: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
OCPBUGS-25069, OCPBUGS-26309, OCPBUGS-26323: add snyk config file for SAST scan #163
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28957: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
OCPBUGS-26312: add snyk config file for SAST scank #97
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29433: cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142
Full changelog

docker-builder

OCPBUGS-28949: Replace ‘coreydaley’ with ‘sayan-biswas’ #379
Full changelog

docker-registry

OCPBUGS-31857: vendor: bump aws-sdk-go to support ca-west-1 #397
OCPBUGS-29604: vendor: bump distribution to fix azure storage path bug #394
Full changelog

etcd

OCPBUGS-31650: Rebase etcd 3.5.13 openshift 4.14 #261
OCPBUGS-28733: Rebase etcd 3.5.12 openshift 4.14 #244
OCPBUGS-24939: Rebase etcd 3.5.11 openshift 4.14 #235
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
Full changelog

haproxy-router

OCPBUGS-33797: Reject routes with MD5 certs #598
OCPBUGS-33389: Count active services before setting weight to 1 #592
OCPBUGS-30773: OCPBUGS 6958 backport to 4.14 #568
OCPBUGS-32437: Introduce ‘idle-close-on-response’ option for frontends #580
Full changelog

hyperkube, pod

OCPBUGS-33417: Provide SCC access via RBAC #1965
OCPBUGS-14373: Fix flaky HPA e2e tests by not failing on context cancelled (#117669) #1958
OCPBUGS-32580: allow override of NewVolumeManagerReconstruction #1956
OCPBUGS-32309: Bump K8s api to 1.27.13 #1950
OCPBUGS-29924: UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches #1898
OCPBUGS-31504: Bump to 1.27.12 #1927
OCPBUGS-31741: 4.14: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1936
Address CVE #12
OCPBUGS-30964: Set up CEL IP/CIDR library from 4.14 onwards #1913
OCPBUGS-29662: Update to kubernetes 1.27.11 #1890
OCPBUGS-27347: UPSTREAM: <carry>: Update management webhook pod admission logic #1855
OCPBUGS-27369: Update to kubernetes 1.27.10 #1860
OCPBUGS-25813: Fix uncertain device in 4.14 #1830
UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 #1552
OCPBUGS-26006: Update to Kubernetes 1.27.9 #1838
Full changelog

hypershift

NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4025
NO-JIRA: Update RHTAP references (release-4.14) #3995
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3958
OCPBUGS-33105: [release-4.14] remove PrivateIngressController cleanup #3960
OCPBUGS-32471: Fix ICSP and IDMS inclusion as registriesOverrides #3912
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3920
OCPBUGS-32221: Added support for OLM Disable default sources on HC creation #3882
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3903
NO-JIRA: [4.14] [e2e test framework] Add a flag to add an annotation to Hosted Cluster #3905
HOSTEDCP-1526: [release-4.14] Support additional node selectors for request serving nodes #3898
chore(deps): update rhtap references (release-4.14) #3888
NO-JIRA: Update RHTAP references (release-4.14) #3874
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3869
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3858
NO-JIRA: Update RHTAP references (release-4.14) #3836
OCPBUGS-31657: disable http2 for ignition server and proxy #3831
OCPBUGS-31605: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3826
HOSTEDCP-1322: NodeUpgradeType defaulted by provider #3822
NO-JIRA: Update RHTAP references (release-4.14) #3813
OCPBUGS-31417: honor HC image configuration #3806
OCPBUGS-23914: Added OLMCatalogPlacement option to the CLI #3229
OCPBUGS-30211: set Konnectivity cipher suites #3679
chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3756
NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596: Bump golang.org/x/net to version v0.17.0 #3711
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782: use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094: Make ControllerAvailabilityPolicy immutable #3534
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084: Reduce the policy access scope to specific instance #3530
OCPBUGS-29206: Add GC knobs for KAS #3543
OCPBUGS-29187: node spread anti-affinity for HA HCP #3541
OCPBUGS-19956, OCPBUGS-28984, OCPBUGS-28985, OCPBUGS-28986, OCPBUGS-29000: Support Disconnected HCP #3520
OCPBUGS-29030: Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238: consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526: Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526: Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072: Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180, OCPBUGS-20547: Added network validations #3096
OCPBUGS-23997: add watch for HCP pullsecret to HCCO #3265
OCPBUGS-28249: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485
NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315: Add prestop to konnectiviy server #3268
OCPBUGS-24307: Set shutdown-delay-duration to 15s #3264
OCPBUGS-21795: change trusted bundle volume mount for CPO #3102
OCPBUGS-25217: Konnectivity agent update strategy #3308
OCPBUGS-26574: Set new condition on SG deletion. #3398
Update RHTAP references (release-4.14) #3402
Update RHTAP references (release-4.14) #3383
OCPBUGS-22360: Validate accessTokenInactivityTimeout >= 300s #3175
OCPBUGS-23936: Use correct kubeconfig in CCM and remove CCMs access t… #3232
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24665: Add Snyk file to exclude vendor directory on scan #65
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-27279: Add Snyk file to exclude vendor directory on scan #76
Full changelog

insights-operator

OCPBUGS-33193: anonymization - externalIP can be nil (#931) (#933) #931
OCPBUGS-31975: bump golang.org/x/net version (#926) #926
OCPBUGS-32343: fix error message when the data processing was not successful (#833) (#928) #833
Add linting recommendations (#904) #904
gather etcd_server_slow metrics (#902) #902
Full changelog

ironic

METAL-1004: Update ironic-lib to latest release-4.14 commit #492
OCPBUGS-32364: [4.14] remove unused prometheus-exporter #487
OCPBUGS-32169: [4.14] Add hybrid configuration for cachito #482
OCPBUGS-32388: Use unix sockets by default for reverse proxy communication #475
OCPBUGS-32169: [4.14] Add requirements placeholders for cachito #469
OCPBUGS-27773: Update inspector package to fix LLDP unicode error #452
OCPBUGS-27193: Fix Inspector iPXE config for IPv6 addresses #448
Full changelog

ironic-agent

OCPBUGS-33452: update ironic-lib with latest fixes #133
METAL-1004: Update ironic-lib to latest release-4.14 commit #130
OCPBUGS-32170: [4.14] Add hybrid configuration for cachito #127
OCPBUGS-32170: [4.14] Add placeholders for cachito #124
OCPBUGS-29454: Always add ignition to set hostname on /etc/hostname #109
OCPBUGS-28554: Update to latest ironic-python-agent for bugfixes #107
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-23866: deps, bump opentelemetry #38
OCPBUGS-21174: Bump golang.org/x/net to v0.18.0 #37
OCPBUGS-30861: Bump golang.org/x/net to v0.18.0 #36
Full changelog

kubevirt-csi-driver

“OCPBUGS-29792: [release-4.14] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #34
Full changelog

machine-api-operator

OCPBUGS-31980: Update x/net to v0.25.0 #1236
OCPBUGS-30898: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1224
OCPBUGS-28745: Set –max-concurrent-reconciles=10 for Azure machine controller #1217
OCPBUGS-28745: Add AddWithActuatorOpts to allow overriding Machine controller options #1214
OCPBUGS-24998: Add Snyk file to exclude vendor directory on scan #1191
Full changelog

machine-config-operator

OCPBUGS-32341: Remove the condition for checking the multiple ovs-if-br-ex profiles #4325
OCPBUGS-27030: Log network service output to console #4114
: OCPBUGS-31731: kubelet: restorecon necessary files on kubelet’s prestart #4307
OCPBUGS-32260: fix: resources were in the wrong indentation level #4322
OCPBUGS-27108: Add \n in cert_writer for old cert methods and skip cloudCA validation #4117
OCPBUGS-31487: Prevent OVS-configuration to run before kdump #4291
OCPBUGS-29400: Run resolv-prepender entirely async #4182
OCPBUGS-31681: make verify should use MCO’s kube version #4305
OCPBUGS-30992: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266
OCPBUGS-30872: add static pods for rbacproxy #4258
OCPBUGS-30107: annotate on-prem static pods for workload partitioning #4230
OCPBUGS-30225: set nodeStatusReportFrequency #4242
OCPBUGS-29290: AWS: Always persist the existing node name on 4.14 #4215
OCPBUGS-20039: Add v6-primary dual stack support to VSphere UPI #3956
OCPBUGS-29457: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187
OCPBUGS-26072: Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379: fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384: daemon: allow the user to override drains on IR changes #4150
OCPBUGS-27759: Add Image Credential Provider flags for Kubelet on AWS #4144
[OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178: use *resource.Quantity to not automatically set 0 #4121
OCPBUGS-23089: Don’t retry node-ip show in resolv-prepender #4022
OCPBUGS-27362: Fix typo in AWS node env unit #4131
OCPBUGS-26500: crio: drop automatic image cleanup on upgrades #4105
OCPBUGS-26559: Azure Run ovs-configuration.service before dnsmasq.service #4109
OCPBUGS-26551: kubelet: fix kubelet labels #4107
Full changelog

machine-image-customization-controller

OCPBUGS-24576: configurable ironic agent vlan creation #111
Full changelog

monitoring-plugin

OU-318: consider all metric keys to display all results on dashboards tables #99
Full changelog

multus-cni

OCPBUGS-26331: Fix SAST scan issues for multus-cni-container [4.14] #220
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27858: Enable reconciler configuration 4.14 #240
OCPBUGS-26553: Cherry pick fix assignment 4.14 #230
Full changelog

network-tools

OCPBUGS-31862: replace wireshark with wireshark-cli #122
Full changelog

oauth-apiserver

OCPBUGS-21100: bump k8s.io (release-4.14) #100
OCPBUGS-27116: UPSTREAM: <carry>: retry etcd Unavailable errors #97
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#822) #822
Fix to ensure operator not found error exits with correct status (#797) #797
OCPBUGS-28871: Capability to override default channel (#749) (#790) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#769) #769
Full changelog

olm-catalogd

OCPBUGS-27585, OCPBUGS-27670: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #40
Full changelog

olm-operator-controller

OCPBUGS-27590, OCPBUGS-27675: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #69
Full changelog

olm-rukpak

: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
Full changelog

openshift-apiserver

OCPBUGS-31509: vendor upgrade runtime-utils #426
OCPBUGS-27104: UPSTREAM: <carry>: retry etcd Unavailable errors #412
Full changelog

openshift-controller-manager

OCPBUGS-28950: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
OCPBUGS-26460, OCPBUGS-26461: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156
Full changelog

openstack-machine-api-provider

OCPBUGS-32428: Ensure portSecurity is correctly set in the Instance Ports #109
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-30775: [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) #715
OCPBUGS-29192: [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686
OCPBUGS-29194: Retry failing unpack jobs #689
NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 #674
OCPBUGS-27314: Don’t sync namespaces that have no subscriptions #675
OCPBUGS-27565, OCPBUGS-27570, OCPBUGS-27650, OCPBUGS-27655: bump go-git/v5 to 5.11.0 #677
OCPBUGS-27485: [CARRY] SSC RBAC #665
OCPBUGS-22538: bump otelhttp to 44.0 for api #647
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-33537: Improves service iptables efficiency on start up #2164
OCPBUGS-32104: Periodically check the ovnkube-node certificate is not expired #2117
OCPBUGS-32319: [release-4.14] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2128
[Release 4.14] OCPBUGS-32987: Bump OVS #2148
OCPBUGS-32247: [release-4.14] OVN bump to 23.09.0-139 #2123
OCPBUGS-29397: 4.14 High CPU usage with APB CRD #2118
OCPBUGS-32353: Custom v4 and v6 transit switch subnets while creating kind cluster #2122
OCPBUGS-31853, OCPBUGS-31854: EIP multi NIC IPv6 support and default route with next hop #2114
OCPBUGS-31648: Set mac binding age threshold in gateway routers #2115
OCPBUGS-29342: AdminPolicyBasedExternalRoute CRD failing to watch and reconcile routes for later pods #2076
OCPBUGS-29606: Update HostNetworkNamespace address_set for remote zone nodes #2091
OCPBUGS-28726: Update netpol namespace address sets usage to the old ways #2068
OCPBUGS-28819: Support Permanent Session Affinity #2046
OCPBUGS-29231: [release-4.14] Separate timeout for handler sync from informer sync & do not resync services during node tracker startup #2061
OCPBUGS-29186: Wait for ovnkube controller to start before checking result error. #2067
OCPBUGS-29207: Ignore hybrid-overlay nodes from EgressIP controller #2062
OCPBUGS-25999: Prevent multiple encap-ips per single chassis #2037
OCPBUGS-28789: Fix LGW ETP=Local on IPv6 #2042
OCPBUGS-27925: dont quit if node does not have subnet annotation #2026
OCPBUGS-27256: Ensure session affinity cleanup on backend removal #2021
OCPBUGS-23395: Egressfirewall use port groups #1956
OCPBUGS-27243: CARRY: Updates owners and adds Surya #2019
OCPBUGS-25081: Update ACL syncer: make default deny acls filter more strict, #1981
OCPBUGS-26568: Synchronize node primary address update #2012
OCPBUGS-24326: APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field #1967
OCPBUGS-25903: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2003
Full changelog

powervs-block-csi-driver

OCPBUGS-33637: Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 #81
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-30015: fix: convert continue field between v1beta1 and v1alpha1 #279
Full changelog

tests

OCPBUGS-33563: Adjust the method of get the apiServer (release-4.14) #28763
OCPBUGS-29970: Do not assume there is just a single kubelet systemd service #28620
OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28647
OCPBUGS-29928: Only extract node role from properly formatted node-role label #28616
OCPBUGS-29182: updated timeout to 3 seconds to account for network timing issues #28578
OCPBUGS-29034: Replace ‘coreydaley’ with ‘sayan-biswas’ #28574
OCPBUGS-26044: Adding test case for when exceed openshift.io/image-tags will ban to … #28493
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-33798: FailedPrecondition volume does not appear staged #119
Full changelog

vsphere-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #203
OCPBUGS-24224: Explicitly degrade the cluster when conditions are not met #194
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #186
Full changelog

vsphere-problem-detector

OCPBUGS-24401: Use failure-domains and other changes from master #142
OCPBUGS-21812: Warn usernames without domain name #134
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github