4.14.30

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.30-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.27, 4.13.28, 4.13.30, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.40, 4.13.41, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.15, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.3, 4.14.4, 4.14.6, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.14

Created: 2024-06-13 11:18:33 +0000 UTC

Image Digest: sha256:2bda857a6a92b9a6cd353e707029218a78ba1b4a60a762d849a2bc0eb4234e25

Release 4.14.30 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-06-12-150117

Components

Kubernetes upgraded from 1.27.10 to 1.27.14
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202402201520-0 to 414.92.202406111017-0 (diff)

Rebuilt images without code change

agent-installer-utils git ad853769 sha256:4c01102aec6bf2691dc2cd1b21e41390f3378328f734868ac1ab08096f83a581
alibaba-cloud-controller-manager git 8ba0b37a sha256:a17fd81ee4ef19933306fded47b4cbb3625b23c48ccc4928ff86004418c8f50e
alibaba-cloud-csi-driver git 3dc363d3 sha256:a96440d6e2516159b5f6185007de7ed3a1d20c0e9b65de3a15c07c37baf0d9c1
alibaba-disk-csi-driver-operator git 8853e6ef sha256:28680c95c8da81d53b912c4d852fa57eed967763dbee71111c33dbf0420f2e98
alibaba-machine-controllers git 27f105d3 sha256:abc051460f77b13111188046f01f5538bb3a1aaa1c8f9deb8acb613e6244654d
aws-cloud-controller-manager git 607e2dde sha256:85f626324ab394a62fff962e00184f6352dc0dbd3e1e249c3e5df0f3c7a78330
aws-machine-controllers git e292817c sha256:d7cb3d6c2dfd6a661ce558f990afd72ba344d764cf626b033efacf71d3a6a28f
azure-cloud-controller-manager git f0e7cbbc sha256:2e5b0263eebc9086c9b53e2212c1280ec4cd8273ec43e35ecf42c7246a26c40f
azure-cloud-node-manager git f0e7cbbc sha256:a31981af11514bf165a8d507e5b3c0c5113b9357306054df87992d2af5e161f3
azure-cluster-api-controllers git 7ad2773c sha256:eb2a999d47f84135aabf8cb0be0ca961a521ec919d618348620a9a8de19e09f8
azure-disk-csi-driver git b19eec11 sha256:011e2008928e6b6468f253f78aa6868f96cb7dc8e032833d26b438c4668e7b89
cluster-baremetal-operator git 270579c6 sha256:60a0d0e44ae9ec6ad7e9f1e603da357b8eeef6afc5b26fe7870876c9b6473c04
cluster-bootstrap git 93fba13f sha256:408d4d504689a3cd0bb4ed47d23ead5700a38a5801c7da8cb8bb9f28ff40b191
cluster-capi-controllers git ae83c553 sha256:5306bbe7bc3abae1c9ffd87ab987fa25ebc467af471c0923492df6830cf31410
cluster-capi-operator git b4c4fb13 sha256:a521b27408a483a57d5a81eb3cb57277346c3acb665b4ac488f5894901289acd
cluster-kube-cluster-api-operator git b287d08b sha256:ecfa66c785dee5ca8cc2545e0bb1034567e82fed8c9ad0a50431fa54ebbf1989
cluster-kube-controller-manager-operator git 4e059638 sha256:65b425a476492267e585bc9d400c4c610c92051d5718de1c7c912a7de03282ca
cluster-kube-scheduler-operator git 33f630dc sha256:998df36090ba0944f4a181960ab6e2960a0fe31fed7efeeb211b019fc391ff64
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:4d5b83fbb4c2106c8febdefd2c3c32cc69fa4564865528850d231a5b09aa59a9
cluster-machine-approver git 711b4f6e sha256:a5b08113418f8b39b8f296d03cdc76d2d220f620b04cc45762b3633eb7173a15
cluster-olm-operator git 0dbbb613 sha256:f9b0b007b1efb99f1d5db1aa74ff0f84f5659b8285c7029a39e8bc96d5315b1d
cluster-openshift-controller-manager-operator git 3985c55f sha256:0be3759372f3667e026d6bd0136dce6b45eb54e28ec3d7136d250fc224fbc7e9
cluster-platform-operators-manager git 08fb27e7 sha256:e9c03f33a687cf7491129fa53c0e3f750e924e9189048e140b54b21746440d95
cluster-policy-controller git 219f6f6f sha256:2560f44915f47320666044ae56f38be9221e7fa43776a7e84c9d9576783d08dd
cluster-update-keys git e0c26a08 sha256:4524cee99f07da25f0364d4ede56e6de8238ba26936734aa3c77ff7e495b7812
configmap-reloader git 716a0c33 sha256:09b5278d2585c10d1f8b5e9328458f16a680f84560f46d1d53c894eabe2ea655
coredns git 7d3fa777 sha256:60eaf6b3d575c07ae9cd6326a7effc11bfd56eeec96b6b8cd1323a87fda6f046
csi-driver-manila git 697083a8 sha256:d785946981536b33feb72c78893208f18b5825beb38dd7fc7f93a0c6537a4330
csi-driver-manila-operator git d93a218f sha256:0b753e53b02b50c49a2092f9cd8a69227069ee751d241acb3318bcb914e57d13
csi-driver-nfs git e1dd4537 sha256:db3fe94aeb846cbb6687d2e202b773a1aa04c11a6cf5fba8b9c6777cf494fd06
csi-driver-shared-resource git 9232c1ff sha256:8428aa1e45e58e50f2bb898e5e93b757f026cf971469a180bb634c74275fd30b
csi-driver-shared-resource-operator git c273cd52 sha256:647a06b0e56f17beb491e102ed3722c6fcc2c0762aa088dbe2a348cf78ecf4c7
csi-driver-shared-resource-webhook git 9232c1ff sha256:b3ab2da947086b035839582542c02b8d7fa4e8981a0d17e34266d9543729e80e
csi-external-attacher git 06e8ce0d sha256:973711a3f73169824183f73d5c4d57f5cc492be823be4381dd1a12f0a83f054c
csi-external-provisioner git 78a710fd sha256:5f6c3b4917882e38802543f7c0332c1645879d982bc309570c9229b422a75478
csi-external-resizer git 59a701a4 sha256:df3d04b31625d3ed3cd74bbda493a37e10b9716d94a9d921966f9f63e77b8e34
csi-external-snapshotter git a6834536 sha256:d3510003c5ebcb28be2825641599617e04170998090878fa62ed07661ba3dc63
csi-livenessprobe git a9bcbde1 sha256:2a655edc9b6b87db6eb0294bc5746b33b758a96110e550a7244711e45023f8e9
csi-node-driver-registrar git 9dcaa7f5 sha256:60f833064195ea66c4776885d20c2e6f2215ad03f11e4ad2fd106da7eaa2e627
csi-snapshot-controller git a6834536 sha256:409f60bdf11430c0b34def19129fe6cc0f1402fbd25a800ad0c9276abfd82871
csi-snapshot-validation-webhook git a6834536 sha256:dc9de32fa8db9a7025f651fc607427f226b78526beda1c385e60270a8b941a3d
docker-builder git 9c104de0 sha256:d6780361ffa7e786ee711d8ff23620734339cee6f3f3a2cc3965121cd2eaef7b
driver-toolkit git cafed17b sha256:31a1602655c3d8f49eff45abfb99bf4b3437a34906e93a168a2ba46f672fe761
egress-router-cni git afffdd45 sha256:0f7265ac1d38fc747c17ee0b8b24215d1066a78d30293f41b9f12883e99910df
gcp-cloud-controller-manager git 09e96a91 sha256:055a94124ccacbdc7c805d892b9d9fc4b380c9f79bd839866cae870010591bae
gcp-cluster-api-controllers git d99fb31a sha256:c0c6de98fa6841ed3217f2fa6d234c6148f9e1c9ee6fc97205fd00c485c7fae8
gcp-machine-controllers git a676e6b6 sha256:c088da5f694412d8eb9d55fcf0fb67d9ad6e9aae0f0217851001b73830541dfc
gcp-pd-csi-driver git 8a626fe5 sha256:e7b40fa247e26aad78509e6547dc5c9eca49d6e6f3fb1dbfec84c7355c6017f9
gcp-pd-csi-driver-operator git 95d55a04 sha256:15e70c89abd8bbdaec757d10be218c587913dfd0262e002d88130f7a707b71bf
ibm-cloud-controller-manager git 446871ff sha256:803c34af6aadb73a129da4d6a32fc9f2dbcd36010b23f29e9489b083461949d5
ibm-vpc-block-csi-driver git 02471d96 sha256:3592f17e63e21960c1a9cd2e1e1d133a9736b9a143daa117a012c6a06e26975e
ibm-vpc-block-csi-driver-operator git 7fd94aa7 sha256:2d17fcddfe27b5be89d7dbb07c0e4889893d2124d98d95e5eb4d0dddc9e31783
ibm-vpc-node-label-updater git 44a2b943 sha256:59cd4a1652e166eb45f2658ff70aae410da932bdc6bf5e50c839b8219ad56dfc
ibmcloud-cluster-api-controllers git 004ecde5 sha256:623208bbd50dbd077c674c43321042c4954ed708665c2be7cb23b0031018354e
ibmcloud-machine-controllers git c28b2232 sha256:5fa93b393ba2ec1c8ba1b5e06c368c93ee531223f3f05b7f82d1adcf2d388a5e
ironic-machine-os-downloader git 7b56c306 sha256:4b5e063c36b30962747933926a1f608b180a9774e3278c2a4689da934a54857c
ironic-static-ip-manager git c038d5a4 sha256:250c2cbaeecfc1816fbacd4b7d909c9a3814164884d4d49f805494beded6ea37
k8s-prometheus-adapter git 801a912b sha256:497f9ada00eab94c8827cfb6fbae836a76b8590483a6ee2bda00bbabd005b392
keepalived-ipfailover git f08cee33 sha256:28be47974cb4e51c649ab0522793e68832651691ee2f79b2b98483a459523056
kube-proxy git 1a9befcb sha256:b853d7d43505bed99e67b821cf62b0dfceb7c38912a8695bcabc331ad9c81c6e
kube-rbac-proxy git 1a646b98 sha256:600c03493940c25ae3381c9a6ffb7f18f67e1601ba20302e460cc4a1ef132216
kube-state-metrics git db0c5499 sha256:562dfd380ab022e5c4c8c67e1324edca2e80fc66be96473c6fd41a6e36ced33b
kube-storage-version-migrator git 8558e14a sha256:70fb2952e84b91b76ba0778d68b2b7811ae3774cffde9210cf0ce36ccf4cd665
kuryr-cni git 8926a294 sha256:7738650465d10a305f2c3f1e7b0e8b78751f3a9373f15b359d91ee1eef0deea0
kuryr-controller git 8926a294 sha256:bd48682ef2493382fa62d478aef8c000ff93cdba641fc9f7f5bf792bb1a255b1
libvirt-machine-controllers git 34dfccba sha256:0d4d44808dd6a1a6dc207b13ad38f5e182f4bb1ba2b4a0fa9620645897be21a8
machine-image-customization-controller git 2a6627ba sha256:920c626822a1578d9b01692be984174ca60eb2b7e4620642bbe4ac8279fc9540
machine-os-content sha256:e48bdce6cd9daf8db7d193dc4010310f30c18982d4d0070d3d077a7cef8acbfc
machine-os-images git d3a4a6c3 sha256:73f31ed5e9f4f07c8f46757504ea4b7e6c45c01431875e777b90c3713ff27eda
monitoring-plugin git 6fb20810 sha256:f7d3b6a5f3bc1ecf8d92fdace2c8deed78c2338403961144f477b84eea676a6e
multus-admission-controller git 5e74b0fa sha256:61de39f5d63790190177c6a682d0724131a06a397a874489826da04fb3cc51d5
multus-networkpolicy git cd6eae10 sha256:56168489a5e2771b717bdd972254c8c8c742906791dfa4191c3392f0bb9b9214
multus-route-override-cni git 078aee5c sha256:3be5a2947f827c5e108caa60f4d2ae180abba17db7e1a998ee2e4fb41406769d
must-gather git 833e1de9 sha256:bee448ca05fe1a428ffe2d230bbf9acece086dcfe552227f970b570d2e7d56bc
network-interface-bond-cni git 29f61f6b sha256:401f3bd21a0645d97912e80bf6fed5dff84cc4e96a367eb79ed8f37dbba44ece
network-metrics-daemon git 69d0021a sha256:89fedb291eb26879aed7b0fe09561a474e04c08e1807136fe2b378f6f5bb7d90
nutanix-cloud-controller-manager git bc568865 sha256:e380bb05422a0dc676530d6068627fc0c10a71f1ccc09c260be45e38d5c6caa0
nutanix-machine-controllers git 6f50b1ac sha256:080cff23a84878fd8ca725ad65b15cff71436d33674b7f292aef552b4e17afc9
oauth-apiserver git 8f5c90c7 sha256:395cb45953bc07bfbd9812f3b673a3ea756b527ce1cddff2a959aab0ff740db2
oauth-proxy git a4a2f270 sha256:9be5db42f0ff2025b842d7e773fc3a69e5b8cf59151a6b0842f3f7f046b4247a
oauth-server git 35f4739f sha256:7df9c9a225a35be9e3030b8977ffbe169420ae2c78bbdf0340ee82bdb7e8cd4b
olm-catalogd git a333cb0b sha256:201b6ef7df39565a2a68bd37c572de12ef9fea3f28ecb05c56232958c939e301
olm-operator-controller git fb6fb278 sha256:415dbb9173843c610de7603c8639def12d53a69b65c0eb23d407b7ebc2a0f071
olm-rukpak git 2287fb27 sha256:3e5039c96733419b7c349164cac6f390e975102992118533ff2e94bf19b62f23
openshift-controller-manager git 27209ef1 sha256:6aa0b233db2d6fe1d47e9a90a8c6ec3fe2b98808e8ff66c9b9bf72c90cab21b8
openshift-state-metrics git dff4b0f4 sha256:f9c65fd4483ca43d94d1b6d64b9f94bc7ec5a77234d60817377d1eaacaa57cf3
openstack-cinder-csi-driver git 697083a8 sha256:cc804c5be06d5bf892f180326704c5ebbe1e1830290df98744fb3aa3751a04ec
openstack-cloud-controller-manager git 697083a8 sha256:ba901b4eec6d12cfe49239e8b9c79ceacd6d14a3da9331df2fa91d5ad976c7a0
ovirt-csi-driver git f21b470f sha256:dcdb2ed72df1e5f775cbc8a59391513ce7ad80734c640fe5bb9ac0a37d3aa1c3
ovirt-csi-driver-operator git 2fa33aa7 sha256:048e6f04c30b455aef7ea400b1ec641fee69c90016d122588853f8d95c77c5bb
ovirt-machine-controllers git 5d708631 sha256:51c942b1bab152451f449fb67c3e241a5d0f24355e852532cb6468a5762940ef
powervs-block-csi-driver-operator git 7436369a sha256:6e357662240a238a88668777b1e9454bd263d3a5964f6c7db88915def7f5ef03
powervs-cloud-controller-manager git 32c1028e sha256:2fe3ee959f5716874c80e0cf112b54b1ce1546ba475c13a4a719fc06f18bc1ef
powervs-machine-controllers git 1a957dae sha256:a8341c432e35af46953b9ae447d299e1f6bc05d2cd7f35d48040e9ed1e2758b5
prom-label-proxy git af40ed09 sha256:650bc04cb5e8f30c1e208fe38d40cd1948ae4191e6a5dc976202e328e5d9413a
prometheus git b7c61bcb sha256:a3cb3df82facb8fb70b9fe5c81c484677c059884bc3b3dec6d1f693bbc2133e8
prometheus-alertmanager git e3725166 sha256:ddc7bd8fdebe6d2cd3edb9e4604641f4eb0a6f0c031c0ceafb632b7b63cb1f57
prometheus-node-exporter git 5ee0a9d9 sha256:3c8887163254e42456c8c680fbedf4a13166184ad28260425169fa5e5d9682e2
rhel-coreos sha256:ec7cb6d190f076b5891f516959b070576fe07c76f22af6720ff5bda1323bf658
rhel-coreos-extensions sha256:d39d6a7aef2ccb99002b06f86e56c06df46c9574798fbbdae2ae1ce1c6e1923c
route-controller-manager git 1a5e72f4 sha256:7c8c9cfa51e7add71b55bbab465b547f9fb428a7e49c99ecc8c3f9ac8b9139b2
sdn git 1a9befcb sha256:4ee71072d7f3746572e7efe00453e0f6d6df00685f429e310bcc081883a99c50
service-ca-operator git 3c3f82f7 sha256:53cdb9dbbc53a93861f725ea08a2c8574cdd8e9ff3e7dfd843877758dc571263
telemeter git c683f657 sha256:7276899328f721b13633eea3367007bfc21c3ec3837a274e1aa998620ff19e77
thanos git a2671250 sha256:02b24cb5e764b02778aacf20968fe631706db9fcfc678297929aaa8bdbdfd433
vsphere-cloud-controller-manager git b04567f7 sha256:a04096de03c2698886844469ef0ee8717fa20acf63a17ee4917f706e73a67509
vsphere-cluster-api-controllers git 72e998c3 sha256:0b760b982abf7b1d6a7e93571445fa13779f5e2c459631a6c28ffa858aa60ffd
vsphere-csi-driver-operator git 5d5105f9 sha256:ce6801140fc4a79adc31bb2b53509c3443ef52b3962b8573e02b991fd8696dbb
vsphere-problem-detector git ece171d2 sha256:8939194e8f8d1a63c5958212276dc5591201c5031d56eee68e34dfac44c6282b

agent-installer-api-server

OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6416) #6416
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) #6322
MGMT-17594: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6216) #6216
MGMT-17549: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6203) #6203
MGMT-17541: Replace broken golangci reference (#6197) #6197
NO-ISSUE: replace postgres images as current one disappeared from quay (#6134) #6134
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17594: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#834) #834
MGMT-17591: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#830) #830
MGMT-16843: Ensure valid hostname during install (#794) #794
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#725) #725
MGMT-17594: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#705) #705
MGMT-17591: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#703) #703
MGMT-17541: Replace broken golangci reference (#698) #698
Full changelog

apiserver-network-proxy

OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cluster-api-controllers

OCPBUGS-34856: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #516
OCPBUGS-31332: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #506
OCPBUGS-31251: fix e2e tests on release branches #505
Full changelog

aws-ebs-csi-driver

OCPBUGS-33078: UPSTREAM: 1919: Add reserved-volume-attachments #264
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33078: Explicitly reserve 1 attachment for the root disk #306
Full changelog

aws-pod-identity-webhook

OCPBUGS-32884: Upgrade go-jose module to 2.6.3 #189
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
Full changelog

azure-file-csi-driver

OCPBUGS-33039: Rebase v1.29.5 for OCP 4.14 #66
Full changelog

azure-file-csi-driver-operator

OCPBUGS-33039: add token audience for Azure File #104
Full changelog

azure-machine-controllers

OCPBUGS-30898: Remove startupScript vmextension lookup #106
OCPBUGS-29152: Don’t create availability set when using spot instances #98
Full changelog

azure-workload-identity-webhook

OCPBUGS-32894: Upgrade go-jose module to 2.6.3 #19
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-34024: go.mod: bump aws-sdk-go for ca-west-1 support #8440
OCPBUGS-33401: PowerVS: Add composite_instance to listServiceInstances #8479
CORS-2951: Add deprecation notice for OpenShiftSDN for 4.14 users #8518
OCPBUGS-28611: remove retired serial NCv2 from azure tested instance type list on x86 #7960
OCPBUGS-27394: preserve category name when trying to find tag category #7926
OCPBUGS-33010: escape ‘%’ in proxy settings #8318
OCPBUGS-31756: openstack: Honour worker server group policy #8231
NO-ISSUE: test fix to support slightly different nmstate error messages #8286
OCPBUGS-32358: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8281
OCPBUGS-31885: Validate control plane replicas #8241
OCPBUGS-31677: coreos-installer iso kargs show broken on Agent ISO #8228
OCPBUGS-31338: upi: aws: fix typo in worker templates #8203
Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027: gcp: better error msg when service accnt missing #8078
OCPBUGS-30259: PowerVS remove ibm cloud/bluemix go 4.14 #8103
OCPBUGS-29123: IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626: update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
Full changelog

baremetal-machine-controllers

OCPBUGS-31435: Bump golang-protobuf version #215
OCPBUGS-29177: Extend metal3remediation aggregation role #211
Full changelog

baremetal-operator

OCPBUGS-34814: PreprovisioningImage should not be created on poweroff #359
OCPBUGS-23324: Backport node poweroff fixes #318
OCPBUGS-24409: Don’t munge timestamp in structured logs, again #324
Full changelog

baremetal-runtimecfg

OCPBUGS-32524: Decrease log level when detecting node IP #306
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30287: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699
Full changelog

cloud-credential-operator

OCPBUGS-32899: Upgrade go-jose module to 2.6.3 #697
OCPBUGS-29156: Fix the ClusterOperator watch of the status controller #676
Full changelog

cloud-network-config-controller

OCPBUGS-34197: Avoid panic when looking up attachedOutboundRule.ID in azure #147
OCPBUGS-32112: Avoid nil pointer panic while assigning private IP on Azure #138
Full changelog

cluster-authentication-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #649
Full changelog

cluster-autoscaler

OCPBUGS-31621: add check for taint.value == nil #294
OCPBUGS-30628: Fix unstructured taint parsing in Cluster API provider #288
Full changelog

cluster-autoscaler-operator

OCPBUGS-31976: Update x/net to v0.25.0 #322
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34556: update azure and ash tolerations on node manager #347
Full changelog

cluster-config-operator

OCPBUGS-28649: Add required PSa labels #403
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30014: Never delete a Machine when there’s a single Machine in an index #283
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-31886: create suitable role and roleBinding for csi-snapshot-webhook #205
Full changelog

cluster-dns-operator

OCPBUGS-5943: Ignore max unavailable for status #400
Full changelog

cluster-etcd-operator

OCPBUGS-34495: return errors in wait-for-ceo #1266
OCPBUGS-31392: remove etcd-health-probe log #1258
OCPBUGS-31972: update golang x net #1254
OCPBUGS-31428: CEO aliveness check should only detect deadlocks #1231
OCPBUGS-30067: fix panic in health check timeouts #1213
OCPBUGS-30012: Replace nodelister with master nodelister everywhere #1211
Full changelog

cluster-image-registry-operator

OCPBUGS-33147: azure-path-fix: get client secret from k8s secret #1058
OCPBUGS-34668: pkg/storage/s3: use force path style in favour of virtual hosted style config #1051
OCPBUGS-33409: azurepathfix: check if platform status is nil before accessing it #1033
OCPBUGS-32450: azure-path-fix: support auth via account key (without clientID) #1023
OCPBUGS-31857: bump aws-sdk-go from v1.44 to v1.50 #1018
OCPBUGS-28989: pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755: azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604: move azure storage blobs from docker back into /docker #1001
Full changelog

cluster-ingress-operator

OCPBUGS-34973: TestHostNetworkPortBinding: Delete t.Parallel() #1077
OCPBUGS-34410: Don’t add clientca-configmap finalizer if deleting #1063
OCPBUGS-34407: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1061
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-33930: add a controller that reconciles SCCs’ volumes #1681
OCPBUGS-31506: Add sno section to alert description #1658
OCPBUGS-31316: add provider name to cluster_infrastructure_provider when external platform #1657
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646
Full changelog

cluster-monitoring-operator

OCPBUGS-34023: fix KRP permissions for Thanos Querier #2374
OCPBUGS-33585: fix Thanos ruler alert generator url #2345
OCPBUGS-28768: fix generation of telemeter token hash #2304
Full changelog

cluster-network-operator

OCPBUGS-27925, OCPBUGS-30579: [release-4.14] tighten conditions for the state transitions in IC upgrade #2207
OCPBUGS-30021: Fully disable network-node-identity on ROKS #2315
OCPBUGS-31669: [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2311
OCPBUGS-31360: Remove egressip write permissions from ovn-kubernetes-node #2320
OCPBUGS-30021: [release-4.14] Disable network-node-identity on ROKS #2286
OCPBUGS-30100: ipsec: fix openssl typo #2287
Full changelog

cluster-node-tuning-operator

Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
OCPBUGS-30153: fix rendering extra ctrcfgs (#978) #978
fix extra-reboot on upgrade with paused mcp worker (#1053) #1053
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1052) #1012
Systemd processes not being moved to cpuset/systemd.slice fix (#1040) #1040
Reduce number of reboots in offline tests (#1035) #1035
OCPBUGS-30507: Add performance real time tuned template (#984) (#1025) #984
Report duplicate priority only for multiple matching profiles (#1018) #1018
Scheduler plugin: ignore IRQs (#1023) #1023
irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640: [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #570
Full changelog

cluster-samples-operator

OCPBUGS-21217: CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) #539
Full changelog

cluster-storage-operator

OCPBUGS-33467: Fix problem-detector proxy setting #472
OCPBUGS-30054: Update AWSCSIDriverConfigSpec fields validation to accept all curren #462
Full changelog

cluster-version-operator

OCPBUGS-30878: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040
Full changelog

console

OCPBUGS-33558: Display “With Data upload form” in Create PVC drop down once #13840
OCPBUGS-33064: Fix PipelineRun Logs tab navigation #13673
OCPBUGS-33321: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824
OCPBUGS-33635: restrict Masthead logo to max-height to 60px #13847
OCPBUGS-33640: Add visual connector between VMs and non VMs workloads #13848
OCPBUGS-33462: fix issues with Edit Route form #13831
OCPBUGS-33110: change OperatorHub filter FIPS Mode to Designed for FIPS #13804
OCPBUGS-32697: Routes created by devfiles do not always use HTTPS #13787
OCPBUGS-21799: Fix empty editor error #13256
OCPBUGS-32168: fix bug where paused MCPs were incorrectly unpausing w… #13753
OCPBUGS-20173: Console should not panic when no response is retrieved for plugin assets #13217
OCPBUGS-31388: Application creation fail when manually entering input scaling value in local setup #13697
OCPBUGS-31394: PipelineRuns in Console show wrong status or load indefinitely #13698
OCPBUGS-31864: Fix config ini format #13738
OCPBUGS-25145: fix vCenter cluster being empty #13436
OCPBUGS-28746: fix bug where Expand PVC modal assumes pvc.spec.resou… #13558
OCPBUGS-29783: Fix operands list endpoint #13625
OCPBUGS-29813: Release 4.14 backports #13646
OCPBUGS-29813: Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274: Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972: Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898: Add support for custom segment domains (to load JS and make API calls) #13540
Full changelog

console-operator

OCPBUGS-31916: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #885
Full changelog

container-networking-plugins

OCPBUGS-33066: macvlan enable ipv6 ndisc_notify #160
Full changelog

docker-registry

OCPBUGS-31857: vendor: bump aws-sdk-go to support ca-west-1 #397
OCPBUGS-29604: vendor: bump distribution to fix azure storage path bug #394
Full changelog

etcd

OCPBUGS-32813: Revert “Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… #265
OCPBUGS-31650: Rebase etcd 3.5.13 openshift 4.14 #261
OCPBUGS-28733: Rebase etcd 3.5.12 openshift 4.14 #244
Full changelog

haproxy-router

OCPBUGS-32634: Properly handle rewrite-target annotation #583
OCPBUGS-33797: Reject routes with MD5 certs #598
OCPBUGS-33389: Count active services before setting weight to 1 #592
OCPBUGS-30773: OCPBUGS 6958 backport to 4.14 #568
OCPBUGS-32437: Introduce ‘idle-close-on-response’ option for frontends #580
Full changelog

hyperkube, pod

UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check #1951
OCPBUGS-33712: Bump to Kubernetes v1.27.14 #1970
OCPBUGS-33417: Provide SCC access via RBAC #1965
OCPBUGS-14373: Fix flaky HPA e2e tests by not failing on context cancelled (#117669) #1958
OCPBUGS-32580: allow override of NewVolumeManagerReconstruction #1956
OCPBUGS-32309: Bump K8s api to 1.27.13 #1950
OCPBUGS-29924: UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches #1898
OCPBUGS-31504: Bump to 1.27.12 #1927
OCPBUGS-31741: 4.14: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1936
Address CVE #12
OCPBUGS-30964: Set up CEL IP/CIDR library from 4.14 onwards #1913
OCPBUGS-29662: Update to kubernetes 1.27.11 #1890
OCPBUGS-27347: UPSTREAM: <carry>: Update management webhook pod admission logic #1855
Full changelog

hypershift

NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
OCPBUGS-34856: [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
NO-JIRA: Remove CLI inspection of release image #4061
OCPBUGS-33713: Reconcile over ICSP/IDMS #4059
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
OCPBUGS-33844: Fix disconnected metadata inspection #4049
OCPBUGS-33843: Recycler-pod image now points to the OCP Payload reference #4048
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4025
NO-JIRA: Update RHTAP references (release-4.14) #3995
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3958
OCPBUGS-33105: [release-4.14] remove PrivateIngressController cleanup #3960
OCPBUGS-32471: Fix ICSP and IDMS inclusion as registriesOverrides #3912
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3920
OCPBUGS-32221: Added support for OLM Disable default sources on HC creation #3882
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3903
NO-JIRA: [4.14] [e2e test framework] Add a flag to add an annotation to Hosted Cluster #3905
HOSTEDCP-1526: [release-4.14] Support additional node selectors for request serving nodes #3898
chore(deps): update rhtap references (release-4.14) #3888
NO-JIRA: Update RHTAP references (release-4.14) #3874
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3869
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3858
NO-JIRA: Update RHTAP references (release-4.14) #3836
OCPBUGS-31657: disable http2 for ignition server and proxy #3831
OCPBUGS-31605: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3826
HOSTEDCP-1322: NodeUpgradeType defaulted by provider #3822
NO-JIRA: Update RHTAP references (release-4.14) #3813
OCPBUGS-31417: honor HC image configuration #3806
OCPBUGS-23914: Added OLMCatalogPlacement option to the CLI #3229
OCPBUGS-30211: set Konnectivity cipher suites #3679
chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3756
NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596: Bump golang.org/x/net to version v0.17.0 #3711
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782: use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
Full changelog

insights-operator

OCPBUGS-33193: anonymization - externalIP can be nil (#931) (#933) #931
OCPBUGS-31975: bump golang.org/x/net version (#926) #926
OCPBUGS-32343: fix error message when the data processing was not successful (#833) (#928) #833
Full changelog

ironic

Bug OCPBUGS-34657: Disable installation of .pyc files through pip #512
METAL-1004: Update ironic-lib to latest release-4.14 commit #492
OCPBUGS-32364: [4.14] remove unused prometheus-exporter #487
OCPBUGS-32169: [4.14] Add hybrid configuration for cachito #482
OCPBUGS-32388: Use unix sockets by default for reverse proxy communication #475
OCPBUGS-32169: [4.14] Add requirements placeholders for cachito #469
Full changelog

ironic-agent

OCPBUGS-33452: update ironic-lib with latest fixes #133
METAL-1004: Update ironic-lib to latest release-4.14 commit #130
OCPBUGS-32170: [4.14] Add hybrid configuration for cachito #127
OCPBUGS-32170: [4.14] Add placeholders for cachito #124
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-23866: deps, bump opentelemetry #38
OCPBUGS-21174: Bump golang.org/x/net to v0.18.0 #37
OCPBUGS-30861: Bump golang.org/x/net to v0.18.0 #36
Full changelog

kubevirt-csi-driver

“OCPBUGS-29792: [release-4.14] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #34
Full changelog

machine-api-operator

OCPBUGS-31980: Update x/net to v0.25.0 #1236
OCPBUGS-30898: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1224
Full changelog

machine-config-operator

OCPBUGS-17658: Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383
OCPBUGS-33643: Don’t error if the certs.d dir doesn’t exist yet #4362
OCPBUGS-32341: Remove the condition for checking the multiple ovs-if-br-ex profiles #4325
OCPBUGS-27030: Log network service output to console #4114
: OCPBUGS-31731: kubelet: restorecon necessary files on kubelet’s prestart #4307
OCPBUGS-32260: fix: resources were in the wrong indentation level #4322
OCPBUGS-27108: Add \n in cert_writer for old cert methods and skip cloudCA validation #4117
OCPBUGS-31487: Prevent OVS-configuration to run before kdump #4291
OCPBUGS-29400: Run resolv-prepender entirely async #4182
OCPBUGS-31681: make verify should use MCO’s kube version #4305
OCPBUGS-30992: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266
OCPBUGS-30872: add static pods for rbacproxy #4258
OCPBUGS-30107: annotate on-prem static pods for workload partitioning #4230
OCPBUGS-30225: set nodeStatusReportFrequency #4242
OCPBUGS-29290: AWS: Always persist the existing node name on 4.14 #4215
Full changelog

multus-cni

OCPBUGS-33478: Fix CNI cache update function to prevent nil access #232
OCPBUGS-26331: Fix SAST scan issues for multus-cni-container [4.14] #220
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-35263: Use IP to identify orphaned allocation to be deleted #289
Full changelog

network-tools

OCPBUGS-31862: replace wireshark with wireshark-cli #122
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#822) #822
Fix to ensure operator not found error exits with correct status (#797) #797
Full changelog

openshift-apiserver

OCPBUGS-31509: vendor upgrade runtime-utils #426
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-34792: Make Cinder CSI Driver Topology feature configurable #162
OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
Full changelog

openstack-machine-api-provider

OCPBUGS-32428: Ensure portSecurity is correctly set in the Instance Ports #109
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-35230: Unblock CI #771
OCPBUGS-33356: UPSTREAM: <carry>: bump go-jose #743
OCPBUGS-30775: [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) #715
OCPBUGS-29192: [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686
Full changelog

operator-marketplace

OCPBUGS-32067: update golang.org/x/net for CVE-2023-45288 #565
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-35009: ipv6+all protocols conntrack flush #2199
OCPBUGS-34570: Fix EIP GARP config overwritten by gateway update #2188
OCPBUGS-33721: use a forked version of j-keck/arping that fixes a threading issue #2170
OCPBUGS-34076: Reuse node-subnet from cache if exists #2177
OCPBUGS-34405: [release-4.14] dns: fix deadlock in case of error #2183
OCPBUGS-33469: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2160
OCPBUGS-33537: Improves service iptables efficiency on start up #2164
OCPBUGS-32104: Periodically check the ovnkube-node certificate is not expired #2117
OCPBUGS-32319: [release-4.14] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2128
[Release 4.14] OCPBUGS-32987: Bump OVS #2148
OCPBUGS-32247: [release-4.14] OVN bump to 23.09.0-139 #2123
OCPBUGS-29397: 4.14 High CPU usage with APB CRD #2118
OCPBUGS-32353: Custom v4 and v6 transit switch subnets while creating kind cluster #2122
OCPBUGS-31853, OCPBUGS-31854: EIP multi NIC IPv6 support and default route with next hop #2114
OCPBUGS-31648: Set mac binding age threshold in gateway routers #2115
OCPBUGS-29342: AdminPolicyBasedExternalRoute CRD failing to watch and reconcile routes for later pods #2076
OCPBUGS-29606: Update HostNetworkNamespace address_set for remote zone nodes #2091
OCPBUGS-28726: Update netpol namespace address sets usage to the old ways #2068
Full changelog

powervs-block-csi-driver

OCPBUGS-33637: Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 #81
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-30015: fix: convert continue field between v1beta1 and v1alpha1 #279
Full changelog

tests

OCPBUGS-33417: Provide SCC access via RBAC #28806
OCPBUGS-33563: Adjust the method of get the apiServer (release-4.14) #28763
OCPBUGS-29970: Do not assume there is just a single kubelet systemd service #28620
OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28647
OCPBUGS-29928: Only extract node role from properly formatted node-role label #28616
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-33798: FailedPrecondition volume does not appear staged #119
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github