4.14.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.3-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.14.0, 4.14.1, 4.14.2

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.2

Created: 2023-11-16 13:54:50 +0000 UTC

Image Digest: sha256:e73ab4b33a9c3ff00c9f800a38d69853ca0c4dfa5a88e3df331f66df8f18ec55

Release 4.14.3 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2023-11-15-111504

Components

Kubernetes 1.27.6
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202311061957-0 to 414.92.202311150705-0 (diff)

Rebuilt images without code change

driver-toolkit git cafed17b sha256:fca57a24b162f5e51f6d5c77d0867618ef9c08d23c27fc25f5bf3fcda602b134
ironic-machine-os-downloader git 7b56c306 sha256:160fd3de1bca1228e0cd69b81674f73572eb88220c9ae2e2c43772fbedd6a86f
kuryr-cni git 8926a294 sha256:3ed8f193cd5d3f52c5eeb66df9c44f3f68cdb90adb346d726daf4fbc7ad072bb
kuryr-controller git 8926a294 sha256:1f8ffb6009d50dfa5101abf26a80f0f8be44529f314d6bfe0ea03512926d058b
machine-os-content sha256:64ac737daf1845f7b6572fd3dfb364fbe9dc730f26b8d7a1f5f5dd44e8a1ba3d
machine-os-images git d3a4a6c3 sha256:69f23e8a3b24f38f3c57b1fc1084b42b03100dc71e626369a3992a4b47a6b5de
rhel-coreos sha256:b5d62f52d1f945c221b7396e5207e464250b062c88a334b5b0b340c9b9788390
rhel-coreos-extensions sha256:eb2c23c3164ef9df18040220337c2baf0acab41c70bf9f8c69ab72353893418a

aws-pod-identity-webhook

NO-ISSUE: Sync OWNERS with team members #176
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-21868: vSphere,segfault on version check #7605
OCPBUGS-22945: Update gcloud version to 447.0.0 #7681
Full changelog

cluster-etcd-operator

OCPBUGS-22477: Remove z-upgrades from UpgradeBackupController #1140
OCPBUGS-21802: remove revision stability check from bootstrap complet… #1138
Full changelog

cluster-monitoring-operator

OCPBUGS-21473: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2147
OCPBUGS-22917: jsonnet: pin commits #2143
Full changelog

cluster-node-tuning-operator

render: change dir path (#826) #826
Full changelog

console

OCPBUGS-22980: remove expandable toggle for conditional update risk d… #13308
Full changelog

container-networking-plugins

OCPBUGS-20374: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-22974: [release-4.14] manage-security-groups: Only add SGs to LB members (#2455) #244
Full changelog

csi-driver-manila-operator

OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #209
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-23111: Should reference configmaps instead of secrets #152
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
Full changelog

docker-registry

OCPBUGS-22826: Allow ICSP IDMS coexisting #385
Full changelog

gcp-cluster-api-controllers

OCPBUGS-17290, OCPBUGS-21417: Bump golang.org/x/net to v0.17.0 #203
Full changelog

hyperkube, pod

OCPBUGS-22861: UPSTREAM: <carry>: support for both icsp and idms objects #1780
Full changelog

hypershift

OCPBUGS-23027: Configure HSTS for kube-apiserver #3169
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3085
OCPBUGS-23142: adding permission to CNO RBAC Calico path for network-node-identity deploy #3182
OCPBUGS-22295: Added brackets to the kubeconfig server address when IPv6 #3117
Full changelog

ironic

OCPBUGS-14926: Handle Eject DVD 4.14 #415
OCPBUGS-22253: Use bash process substitution instead of pipe #411
Full changelog

k8s-prometheus-adapter

OCPBUGS-21473: Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #89
Full changelog

machine-api-operator

OCPBUGS-17297: [release-4.14] Update x/net to fix CVE #1173
Full changelog

multus-networkpolicy

OCPBUGS-21454: Update go.mod for CVE-2023-39325 (#33) #33
Full changelog

network-metrics-daemon

Update the k8s dependencies to 1.27.7 (#82) #82
Full changelog

openshift-apiserver

OCPBUGS-20150: pkg/image: avoid unnecessary service lookups when registry is removed #393
Full changelog

service-ca-operator

OCPBUGS-21066: go.mod: bump golang.org/x/net to v0.17.0 #224
Full changelog

tests

OCPBUGS-23042: tolerate AWS edge nodes on monitor tests #28387
OCPBUGS-23145: Bump watch requests for cluster-baremetal-operator #28385
trt-1340: backport exact and disable monitor tests options to 4.14 #28391
OCPBUGS-19923: Updating parameters for build timing PushImage test #28291
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github