4.14.32

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.32-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.38, 4.13.40, 4.13.41, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.3, 4.14.4, 4.14.5, 4.14.6, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.21

Created: 2024-07-04 17:19:32 +0000 UTC

Image Digest: sha256:912d7c15e1d82ffc4aa1fc34d2b64c4c7b6670ecd11314c14ca2d6ffdcea22a3

Release 4.14.32 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-07-04-081327

Components

Kubernetes upgraded from 1.27.11 to 1.27.15
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202403300950-0 to 414.92.202407032149-0 (diff)

Rebuilt images without code change

agent-installer-utils git ad853769 sha256:9a1c24ac370f30f8dac8c9c100e398f4a0b666cd1602cd9fc9f032b078599330
alibaba-cloud-controller-manager git 8ba0b37a sha256:13877f93203e2fe1b2673d9e4352aaf05960622533a7af291dd614a4eaa61ac0
alibaba-cloud-csi-driver git 3dc363d3 sha256:11b4f9a11a3885a9c582ca195e7eef3d88267fad15f8eecbea2eeb9c5d6dbb32
alibaba-disk-csi-driver-operator git 8853e6ef sha256:7843974536baeeafccfaf0322cbeabb24041c6ecdcdb9241492e757534c79b37
alibaba-machine-controllers git 27f105d3 sha256:9dd264ac882d6e91f53a960e45ddb995cd90d565af7880ae0d5efabf78646069
aws-machine-controllers git e292817c sha256:6da85591ff42b75aaabf66ae12b29c10a16e1bfd149784ae90a0c8d442a273f6
azure-cloud-controller-manager git f0e7cbbc sha256:1323352c579839b02cfe521aa9ffe48e191ce4177ba760bc8c60c67521a21361
azure-cloud-node-manager git f0e7cbbc sha256:ec1f9c030e8994ca21a1b52db8cb16644379c651f081dfc45e40164df589b3a0
azure-disk-csi-driver git b19eec11 sha256:bb41a51be312cc59c71a72d89eb414771b43c1215bf4d6449595885317824d37
azure-disk-csi-driver-operator git 91893576 sha256:bd34e87b7dd83db947fc75a11da831c7b646d0561ade20985285f017167bc400
baremetal-machine-controllers git fb20cdac sha256:71cabd53ebfa51e2176d69a76c5558c335912531d1bdcace7da4a79365d4ce55
cluster-authentication-operator git 9203d4d5 sha256:55ec01df0ebfefd9f0af4e790a138c489eed9f02801a5a37e7121c33581e4e21
cluster-autoscaler git 9d87281f sha256:76d70ad44659fc77e536d56cabc75474205fa25366ea6dbb9ed52bd70ef1d024
cluster-baremetal-operator git 270579c6 sha256:fc4d223f3f789e1a74050fb717f00ae3016b6d8532fc45c767d1a7b3b62568b8
cluster-bootstrap git 93fba13f sha256:ac136ef59d167d1653c21526cc64babc2070113e71241971c51356214a0c5ad2
cluster-capi-controllers git ae83c553 sha256:6d068ff3ecba712fcb28bb610231ac07dfa3d55a2c851dac68e495c3e10f8d4f
cluster-config-operator git 91fa980a sha256:f0caafab688912bb278e900f0ce372d0661c282e833dacbb585c47be76ab05a3
cluster-kube-cluster-api-operator git b287d08b sha256:c6935d4c553e8ccce40e8e613967e5f500f1c63785971a4496e2ff963fb78063
cluster-kube-controller-manager-operator git 4e059638 sha256:662eb6d898074a978e06dc3d68a3c79877f54bbd02e36e1bae1d717ea17dca78
cluster-kube-scheduler-operator git 33f630dc sha256:71c62cd20a612f5337c282db42cc4290d1fe46220387f163e6b0c822e6aca1f4
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:c44e1fb72f0fe02e19af69ae4ab092838d7ed26bed1cca39156d15ddb32c6d7d
cluster-machine-approver git 711b4f6e sha256:e69ba2a45da87cb5e1d9215b430855e8f90d172826a5c5432106e6e279615ad7
cluster-olm-operator git 0dbbb613 sha256:e5ba79473fddfed792494f78a08a49366e721694720de11b2b67a988ccc976a3
cluster-openshift-controller-manager-operator git 3985c55f sha256:1df78d5951464b0d2dd404b5db5bc342336c5e920f75e5f6b728573ca59e142a
cluster-platform-operators-manager git 08fb27e7 sha256:ec061d4828c026b5aac85c550b1d8b05cb35798b1534bb7e05b86bfa9c7f73f7
cluster-policy-controller git 219f6f6f sha256:948c099f7283b11f664aef0c10b4a058a217567b3cc116e0e6946aaeeae58923
cluster-samples-operator git 61a34659 sha256:755fc85d5bd219ebdd488a151e19ec67ef965ae6fe0760ab185b9d94b131e424
cluster-update-keys git e0c26a08 sha256:8f49e8c52c4be5e23851e681abd95e470fcb5bcddfc764e81c85377838f4d6ab
cluster-version-operator git af210dc6 sha256:16e496c32df0d1a84340c36dc37ee5caaa8cc5df3c429480019a50d4efe6df6d
configmap-reloader git 716a0c33 sha256:969185d3c4e56fe175aa1cdd354106576948c1cdcab3873acd7ceca3f7308fa2
coredns git 7d3fa777 sha256:72f1dfdef97d43e25ec4d1e500886de79f063636529f19e07ac7bc056992534d
csi-driver-manila git 697083a8 sha256:597d85baac39228a2f53ac089e3ba0924b9a9714cd4d811a4b456d8be42b5d81
csi-driver-manila-operator git d93a218f sha256:094f9119e44272ac8a95b8e59b9c37839b34c97158782cb2f084ac6c2fee68c9
csi-driver-nfs git e1dd4537 sha256:866b66f8093a8d5a7c15e18b8758d91bb53446198fe7adc37a276168d101a4fe
csi-driver-shared-resource git 9232c1ff sha256:659d18468cf473c36c524b5d304b34c4f6d81a6476fa5ee94a2231b14dd2ffbe
csi-driver-shared-resource-operator git c273cd52 sha256:5e781ee27c4b8e1509981dbe76eac04db470e31a77619475b15ece037b2f058f
csi-driver-shared-resource-webhook git 9232c1ff sha256:c18ca63ee9b7df83b12e616661bd5b077f773ebe34bb0a4d7b7c52db3f79c58a
csi-external-attacher git 06e8ce0d sha256:4b6ad8b26dc1c87962980ad41fd1cf3cc562209d1c3dd475d0b7ff547170bf6c
csi-external-resizer git 59a701a4 sha256:a66f65831793a4257cdb6b5a7abdba0dd30ee1cbf35c45438fc76ec6d2afa512
csi-external-snapshotter git a6834536 sha256:1cbb139a9fcdac73a959e1e58494b040b7df46bda4b1cc415876b42956c36b4c
csi-livenessprobe git a9bcbde1 sha256:84939ba4b7f684c077562838a2f52ec4a6d64ff9b989f8a9ce40079cce2b7b0c
csi-node-driver-registrar git 9dcaa7f5 sha256:011d28afecfe686a6a963ad4c8bc2ff4750360599bfca8525695d6f670344c06
csi-snapshot-controller git a6834536 sha256:a8ee564e6ad1ef6f1ad224a765491880e62713e1037b09b45e08f98042425abf
csi-snapshot-validation-webhook git a6834536 sha256:9a1b239e35ceccf6b74f2f37dc88a70c4d9ac61b286d6920c8ec4fe580288910
docker-builder git 9c104de0 sha256:c23acef17663334108e5eaf5081377fc5e90e342b56ee015e9062ea25080ca2d
driver-toolkit git cafed17b sha256:922d7766eb508aaa8ce42422df0b00393d07b578c613688a7b52cab4f97b859c
egress-router-cni git afffdd45 sha256:ba289952f212e425d60f2eb050ff41629f17c8d5277dbb6cdd3f206ae4691997
gcp-cloud-controller-manager git 09e96a91 sha256:9da84b2088ee8ad526919a420c448f104ec295559135efa69ba281f7bf85af4a
gcp-cluster-api-controllers git d99fb31a sha256:a64dc0766ea5ad8db040629789af27e2fe5237ff46e3471ab823de1592986f89
gcp-machine-controllers git a676e6b6 sha256:540cf1f5f992fcebc972c55db4de60cb8140bd10d9f80849cc6008d7295d1d65
gcp-pd-csi-driver git 8a626fe5 sha256:a033b2ba4b3bc467fe9f005d63642b5593ede8d181c6ffafd2ca634a83988e60
gcp-pd-csi-driver-operator git 95d55a04 sha256:f64d6c68bfeef5e314dad39c1bb1399a799db687276c22c9378171afd6f96732
ibm-cloud-controller-manager git 446871ff sha256:f8db3664de114e14ced217640d01add29d42b8034fc4673f57535ff7f1622698
ibm-vpc-block-csi-driver git 02471d96 sha256:358ca8dcab49b4b032091bcd1df462a2d11c16f5b3bd6e12e8dfbe18888fd317
ibm-vpc-block-csi-driver-operator git 7fd94aa7 sha256:bdb227f7038f41fa9e18c1c19255952e917c665011bcb934e3a0de76fef2f934
ibm-vpc-node-label-updater git 44a2b943 sha256:126b754b8bb8a78bf0b153712568919096851ed1bb4b5f815acc98855c4ee06b
ibmcloud-cluster-api-controllers git 004ecde5 sha256:cd442031c8aa3bb7b37385dd77b98b01d305fede70518cb21b8887e03645604c
ibmcloud-machine-controllers git c28b2232 sha256:696e39cc0c11cc443b27b871358d07e0b22c1e0c2867fae7c6d7b44264d05501
ironic-machine-os-downloader git 7b56c306 sha256:8bd4f8ab39d8bb41dd13121c3f6a8c144d3065cad2d0bf3f89daad716949f633
ironic-static-ip-manager git c038d5a4 sha256:63847a1e2b4fc6996ad03f553273487d05f99d9eaa265a7b5dff58569916b693
k8s-prometheus-adapter git 801a912b sha256:532460e2bdca2daafc50d740ac98904854f44aad2fb5d22f9ec56503fb2c3421
keepalived-ipfailover git f08cee33 sha256:49dbac8e180540c31777ad168b3d4371e199a9ac9fcf5710511323e56713b7f4
kube-proxy git 1a9befcb sha256:fc0653b0ed2216d957547727203d5114ff7c5f9d97cf86b5de648235278239ad
kube-rbac-proxy git 1a646b98 sha256:2944ff508d44c320977c58f693dc331dfdb0fa7c79175e25ee93803a59fc104b
kube-state-metrics git db0c5499 sha256:7ddb1fa6372c3d181a7eddc131d5de63135831dfd4744ab369844280e57dfb6e
kube-storage-version-migrator git 8558e14a sha256:fc582f2ff79351bdd2224864b1368b1f3fb19d7cefc36da7673651fa22f95714
kuryr-cni git 8926a294 sha256:94a747c4fb21373a2d5e63ff43934a9809993360c5c79bde445fe18136e3ac4a
kuryr-controller git 8926a294 sha256:ad7d3a7436d540aae4f42b3b07147567a626975ad768de6013478b5de0261312
libvirt-machine-controllers git 34dfccba sha256:752528e092fba64b8b75474aa1ea85d0d8d288ed554d42ab2fe5f225b2f5d6d9
machine-image-customization-controller git 2a6627ba sha256:e6c14e32b7aad44e2663d4909be09247a8bc3aec0156b619ea1eb8ed4c821897
machine-os-content sha256:0383a7bdaf2f04a9f210ff17efef94f0d0e3fc344cb938cfb844dbc004be29ad
machine-os-images git d3a4a6c3 sha256:1a97336f10219799dc6da80a5f9743e45d6488a695f926c3b08d83db883afb0f
monitoring-plugin git 6fb20810 sha256:7bba6e59f4c2fed8aa1540c0d419bb92ceca9941ec9e7e35fd491a31e780b0e2
multus-admission-controller git 5e74b0fa sha256:0d6436c5679a7c2bca037f3c7a392b767aee7e2a6bb17d0c50f330e6d7afc3ce
multus-networkpolicy git cd6eae10 sha256:666e282d541ef1330c07d82d592bd1822e1e9f37a761878c3dd9461de024dd89
multus-route-override-cni git 078aee5c sha256:09e7a7a56265346fff9448e91613bd027d07c14f8b294bc3074cc0ca86ecade3
must-gather git 833e1de9 sha256:1d0190b2e1110469c9ea981f24f758dccacf621c5d46ab01ba1edaf5755b2ec1
network-interface-bond-cni git 29f61f6b sha256:5f227741cf86ccde638a1223a70003d4a873dff62ce986e851bd884e33749dde
network-metrics-daemon git 69d0021a sha256:542dea2beb0c690cb9a39f5370d7ff292a7cd71699df5007ade8407131ac4ba5
nutanix-cloud-controller-manager git bc568865 sha256:61847a81ff25fdc6cd2640726335e0fb09cd7aa3691f6e83a671179b901f79e4
nutanix-machine-controllers git 6f50b1ac sha256:2a157d97b0f9d05f879fb386a27d2c6746f192ca126963ac6e076e4d4687fbde
oauth-apiserver git 8f5c90c7 sha256:68e1ebdacb6048bc90302815a94745dc45129406f25d62ade289d2e592629a28
oauth-proxy git a4a2f270 sha256:b19901e3a185701f78141db22afab7e6f49850887f07ef75fea8ed4ddf6742da
oauth-server git 35f4739f sha256:5ecbc8d63a2dee6e9966d219577ac41e5fa643b5f22a84ee396be707a6b2b413
olm-catalogd git a333cb0b sha256:1c2d64a0f23956953c4943ca2bf66d6373ce6bb42cb1912ccfb6ed62816ddd51
olm-operator-controller git fb6fb278 sha256:4c26bc856593eea78a42ed5438370ccd1d8ea26c8083a6db450714f95ab71274
openshift-controller-manager git 27209ef1 sha256:91a6564b7216b4bd2ee918a62422eee33538158aaaea66df68d88792c8c6264f
openshift-state-metrics git dff4b0f4 sha256:f4abc67921105ba222dc73f35705e51bc534bb8ceab5eeb3e6539f56b957a1f0
openstack-cinder-csi-driver git 697083a8 sha256:cfbffded65848bc7b2eb655fddd9cafa8ac48c68d3a4866d5d0b910522324d8c
openstack-cloud-controller-manager git 697083a8 sha256:2a4ff280dbdf884595623c73765077cd09ceba836bef39622ea47fa740caf17e
ovirt-csi-driver git f21b470f sha256:e5afaefe3481597384f98568f75e8b831feff560a183608db1c2bf2c2e7b0ed0
ovirt-csi-driver-operator git 2fa33aa7 sha256:a582cd68f9349e94d9c95a0928b54a63c5d7c7777b38dcfeacf32938e832fc8e
ovirt-machine-controllers git 5d708631 sha256:bd55e6a5ac963cebee7ce981eb840c463f2b843d8229f46037d55711f24e70f6
powervs-block-csi-driver-operator git 7436369a sha256:44f13387e3dd986fd0deedc6e86b4f38464587e1d714f208d86bf11b79dd64d1
powervs-cloud-controller-manager git 32c1028e sha256:6757d1f8d6bee7e14291454e08ea70dc17624c1d9a563c5122f8aa7d0a969685
powervs-machine-controllers git 1a957dae sha256:e8cc25815c970a1957eb1a107dce6a61a342749cb4029d65cda1be032b74c9ee
prom-label-proxy git af40ed09 sha256:9af31cee6c20a9d7af259b8eb65d6cd56ecadf1cc4f7715cc3ce6cbca259b548
prometheus git b7c61bcb sha256:5eef6f6bef97ed453dc5428095691385d208aa7bab4d850090ca0243bf34aec7
prometheus-alertmanager git e3725166 sha256:0ed321d73cef97961c0f3d0c661d7abe4341987a6ffd3db7ffbd33732ff90da9
prometheus-config-reloader git a4b845a7 sha256:2efd2e61a46dc0ec26eff57816ec4eaac77d121d4e7eacf60e7151d448117914
prometheus-node-exporter git 5ee0a9d9 sha256:c53451e1a7f6ed849db0f267761be7b332bf82d148838f15aeb855b74b56b6bf
prometheus-operator git a4b845a7 sha256:213b49d238f814c4c15fcc23e8920ebda8629c4e1d692b0ad0e0d4b61f8f22fb
prometheus-operator-admission-webhook git a4b845a7 sha256:60bef2c8cadeac55ad9a454cf8e5f661c1ca33e13b1e6441f2e2dc4c4ac933b2
rhel-coreos sha256:75b90ce012613e1cdae255373a18956231437a346a8d015aa1a2ee35efd2cbc4
rhel-coreos-extensions sha256:9f958187ca2295ed4b15548f249f089fdbf7e8defe4f732aa01beef34ff1b5b3
route-controller-manager git 1a5e72f4 sha256:26354f91a5f17c87029789b5729e1c5bda7e3f1794e521e907eee8502fa519ed
sdn git 1a9befcb sha256:5248ce78a14ab2b0ec49d312af0cc3124b2ce01992eba91c72b7882ae3745049
service-ca-operator git 3c3f82f7 sha256:2989add59587a9ccefa7363a5f205f0e61ce4965d069cf02f65c3014ef0470f8
thanos git a2671250 sha256:76464542578cfe02b42ac611c8f67ec0a8f688e0dee0ff98dea6093c3f8287b7
vsphere-cloud-controller-manager git b04567f7 sha256:ac0cf4155d5c132abdf791f7ccb1a42679b43032e359931b8f2dc1eba712cf35
vsphere-csi-driver-operator git 5d5105f9 sha256:c41e62f3a15e5cccd3ccefa75db84ab26a815f423a5804ce0da67ceb47c4e1ab

agent-installer-api-server

OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6416) #6416
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) #6322
MGMT-17594: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6216) #6216
MGMT-17549: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6203) #6203
MGMT-17541: Replace broken golangci reference (#6197) #6197
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17594: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#834) #834
MGMT-17591: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#830) #830
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#725) #725
MGMT-17594: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#705) #705
MGMT-17591: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#703) #703
MGMT-17541: Replace broken golangci reference (#698) #698
Full changelog

apiserver-network-proxy

OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32066: update for CVE-2023-45288 [release-4.14] #83
Full changelog

aws-cluster-api-controllers

OCPBUGS-34856: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #516
Full changelog

aws-ebs-csi-driver

OCPBUGS-33078: UPSTREAM: 1919: Add reserved-volume-attachments #264
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33078: Explicitly reserve 1 attachment for the root disk #306
Full changelog

aws-pod-identity-webhook

OCPBUGS-32884: Upgrade go-jose module to 2.6.3 #189
Full changelog

azure-cluster-api-controllers

OCPBUGS-35125: Bump x/crypto to v0.24.0 #307
Full changelog

azure-file-csi-driver

OCPBUGS-33039: Rebase v1.29.5 for OCP 4.14 #66
Full changelog

azure-file-csi-driver-operator

OCPBUGS-33039: add token audience for Azure File #104
Full changelog

azure-machine-controllers

OCPBUGS-35133: Bump x/crypto to v0.24.0 #112
Full changelog

azure-workload-identity-webhook

OCPBUGS-32894: Upgrade go-jose module to 2.6.3 #19
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-35827: If host is offline or disconnected don’t check ver #8634
OCPBUGS-35826: [release-4.14] bump github.com/containers/image for CVE fix #8633
OCPBUGS-35485: [release-4.14] aws: terraform: add spot instance support for masters #8605
OCPBUGS-34024: go.mod: bump aws-sdk-go for ca-west-1 support #8440
OCPBUGS-33401: PowerVS: Add composite_instance to listServiceInstances #8479
CORS-2951: Add deprecation notice for OpenShiftSDN for 4.14 users #8518
OCPBUGS-28611: remove retired serial NCv2 from azure tested instance type list on x86 #7960
OCPBUGS-27394: preserve category name when trying to find tag category #7926
OCPBUGS-33010: escape ‘%’ in proxy settings #8318
OCPBUGS-31756: openstack: Honour worker server group policy #8231
NO-ISSUE: test fix to support slightly different nmstate error messages #8286
OCPBUGS-32358: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8281
OCPBUGS-31885: Validate control plane replicas #8241
OCPBUGS-31677: coreos-installer iso kargs show broken on Agent ISO #8228
Full changelog

baremetal-operator

OCPBUGS-34814: PreprovisioningImage should not be created on poweroff #359
Full changelog

baremetal-runtimecfg

OCPBUGS-35846: Add support for OVN HostCidrs annotation #321
OCPBUGS-32524: Decrease log level when detecting node IP #306
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-35447: bump go-git to 5.11.0 #1799
Full changelog

cloud-credential-operator

OCPBUGS-32899: Upgrade go-jose module to 2.6.3 #697
Full changelog

cloud-network-config-controller

OCPBUGS-34197: Avoid panic when looking up attachedOutboundRule.ID in azure #147
OCPBUGS-32112: Avoid nil pointer panic while assigning private IP on Azure #138
Full changelog

cluster-autoscaler-operator

OCPBUGS-31976: Update x/net to v0.25.0 #322
Full changelog

cluster-capi-operator

OCPBUGS-36369: Revert cluster-api-operator go.sum hash #184
OCPBUGS-35128: Bump x/crypto to v0.24.0 #177
OCPBUGS-35957: Fix gcp providers-list.yaml branch #178
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34556: update azure and ash tolerations on node manager #347
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-35520: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #309
OCPBUGS-35338: Improved debugging of API listing errors #303
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-31886: create suitable role and roleBinding for csi-snapshot-webhook #205
Full changelog

cluster-dns-operator

OCPBUGS-5943: Enable topology-aware hints iff nodes in >=2 zones #416
OCPBUGS-5943: Ignore max unavailable for status #400
Full changelog

cluster-etcd-operator

OCPBUGS-34495: return errors in wait-for-ceo #1266
OCPBUGS-31392: remove etcd-health-probe log #1258
OCPBUGS-31972: update golang x net #1254
Full changelog

cluster-image-registry-operator

OCPBUGS-33147: azure-path-fix: get client secret from k8s secret #1058
OCPBUGS-34668: pkg/storage/s3: use force path style in favour of virtual hosted style config #1051
OCPBUGS-33409: azurepathfix: check if platform status is nil before accessing it #1033
OCPBUGS-32450: azure-path-fix: support auth via account key (without clientID) #1023
OCPBUGS-31857: bump aws-sdk-go from v1.44 to v1.50 #1018
Full changelog

cluster-ingress-operator

OCPBUGS-35399: Internal service changed: fix target port logic #1086
OCPBUGS-34973: TestHostNetworkPortBinding: Delete t.Parallel() #1077
OCPBUGS-34410: Don’t add clientca-configmap finalizer if deleting #1063
OCPBUGS-34407: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1061
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-33930: add a controller that reconciles SCCs’ volumes #1681
OCPBUGS-31506: Add sno section to alert description #1658
Full changelog

cluster-monitoring-operator

OCPBUGS-36416: inject trusted CA bundle into UWM Alertmanager #2402
OCPBUGS-34023: fix KRP permissions for Thanos Querier #2374
OCPBUGS-33585: fix Thanos ruler alert generator url #2345
OCPBUGS-28768: fix generation of telemeter token hash #2304
Full changelog

cluster-network-operator

OCPBUGS-34885: [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled #2390
OCPBUGS-27925, OCPBUGS-30579: [release-4.14] tighten conditions for the state transitions in IC upgrade #2207
OCPBUGS-30021: Fully disable network-node-identity on ROKS #2315
OCPBUGS-31669: [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2311
Full changelog

cluster-node-tuning-operator

OCPBUGS-33929: Negative net interface name does not reduce queues (#1074) #1074
Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
OCPBUGS-30153: fix rendering extra ctrcfgs (#978) #978
fix extra-reboot on upgrade with paused mcp worker (#1053) #1053
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1052) #1012
Systemd processes not being moved to cpuset/systemd.slice fix (#1040) #1040
Reduce number of reboots in offline tests (#1035) #1035
OCPBUGS-30507: Add performance real time tuned template (#984) (#1025) #984
Report duplicate priority only for multiple matching profiles (#1018) #1018
Scheduler plugin: ignore IRQs (#1023) #1023
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #570
Full changelog

cluster-storage-operator

OCPBUGS-33467: Fix problem-detector proxy setting #472
Full changelog

console

OCPBUGS-33942: make sure folder is encapsulated with quotas #13869
OCPBUGS-35723: Upgrade Pipeline trigger resources to v1beta1 #13985
OCPBUGS-33558: Display “With Data upload form” in Create PVC drop down once #13840
OCPBUGS-33064: Fix PipelineRun Logs tab navigation #13673
OCPBUGS-33321: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824
OCPBUGS-33635: restrict Masthead logo to max-height to 60px #13847
OCPBUGS-33640: Add visual connector between VMs and non VMs workloads #13848
OCPBUGS-33462: fix issues with Edit Route form #13831
OCPBUGS-33110: change OperatorHub filter FIPS Mode to Designed for FIPS #13804
OCPBUGS-32697: Routes created by devfiles do not always use HTTPS #13787
OCPBUGS-21799: Fix empty editor error #13256
OCPBUGS-32168: fix bug where paused MCPs were incorrectly unpausing w… #13753
OCPBUGS-20173: Console should not panic when no response is retrieved for plugin assets #13217
OCPBUGS-31388: Application creation fail when manually entering input scaling value in local setup #13697
OCPBUGS-31394: PipelineRuns in Console show wrong status or load indefinitely #13698
OCPBUGS-31864: Fix config ini format #13738
OCPBUGS-25145: fix vCenter cluster being empty #13436
Full changelog

console-operator

OCPBUGS-31916: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #885
Full changelog

container-networking-plugins

OCPBUGS-33066: macvlan enable ipv6 ndisc_notify #160
Full changelog

csi-external-provisioner

OCPBUGS-35112: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #99
Full changelog

docker-registry

OCPBUGS-31857: vendor: bump aws-sdk-go to support ca-west-1 #397
Full changelog

etcd

OCPBUGS-32813: Revert “Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… #265
OCPBUGS-31650: Rebase etcd 3.5.13 openshift 4.14 #261
Full changelog

haproxy-router

OCPBUGS-32634: Properly handle rewrite-target annotation #583
OCPBUGS-33797: Reject routes with MD5 certs #598
OCPBUGS-33389: Count active services before setting weight to 1 #592
OCPBUGS-30773: OCPBUGS 6958 backport to 4.14 #568
OCPBUGS-32437: Introduce ‘idle-close-on-response’ option for frontends #580
Full changelog

hyperkube, pod

OCPBUGS-35553: Disable vulncheck #2010
OCPBUGS-35553: Bump k8s 1.27.15 #1992
OCPBUGS-33964: UPSTREAM: 123055: Fix race condition between resizer and kubelet #1973
UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check #1951
OCPBUGS-33712: Bump to Kubernetes v1.27.14 #1970
OCPBUGS-33417: Provide SCC access via RBAC #1965
OCPBUGS-14373: Fix flaky HPA e2e tests by not failing on context cancelled (#117669) #1958
OCPBUGS-32580: allow override of NewVolumeManagerReconstruction #1956
OCPBUGS-32309: Bump K8s api to 1.27.13 #1950
OCPBUGS-29924: UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches #1898
OCPBUGS-31504: Bump to 1.27.12 #1927
OCPBUGS-31741: 4.14: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1936
Full changelog

hypershift

OCPBUGS-36159: Generate default worker security group rules based on machineCIDR #4270
OCPBUGS-35549: Restrict image registry overrides to control plane component #4223
OCPBUGS-35365: fix router on 4.14 y-stream upgrade #4205
NO-JIRA: chore(deps): update konflux references (release-4.14) #4257
OCPBUGS-35401: Fix disconnected metadata inspection for nodepool #4208
OCPBUGS-35482: Add TrustedBundles to OAS container #4216
OCPBUGS-35290: [release-4.14] Backport etcd defrag #4189
NO-JIRA: chore(deps): update konflux references (release-4.14) #4248
OCPBUGS-35183: add AWS STS URL to OIDC provider audiences #4179
NO-JIRA: hack: make the e2e script generic #4201
chore(deps): update konflux references to 2be7c9c (release-4.14) #4225
NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
OCPBUGS-34856: [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
NO-JIRA: Remove CLI inspection of release image #4061
OCPBUGS-33713: Reconcile over ICSP/IDMS #4059
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
OCPBUGS-33844: Fix disconnected metadata inspection #4049
OCPBUGS-33843: Recycler-pod image now points to the OCP Payload reference #4048
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4025
NO-JIRA: Update RHTAP references (release-4.14) #3995
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3958
OCPBUGS-33105: [release-4.14] remove PrivateIngressController cleanup #3960
OCPBUGS-32471: Fix ICSP and IDMS inclusion as registriesOverrides #3912
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3920
OCPBUGS-32221: Added support for OLM Disable default sources on HC creation #3882
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3903
NO-JIRA: [4.14] [e2e test framework] Add a flag to add an annotation to Hosted Cluster #3905
HOSTEDCP-1526: [release-4.14] Support additional node selectors for request serving nodes #3898
chore(deps): update rhtap references (release-4.14) #3888
NO-JIRA: Update RHTAP references (release-4.14) #3874
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3869
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3858
NO-JIRA: Update RHTAP references (release-4.14) #3836
Full changelog

insights-operator

OCPBUGS-36380: Collect aggregated Prometheus Alertmanager instances (#960) #960
OCPBUGS-33193: anonymization - externalIP can be nil (#931) (#933) #931
OCPBUGS-31975: bump golang.org/x/net version (#926) #926
OCPBUGS-32343: fix error message when the data processing was not successful (#833) (#928) #833
Full changelog

ironic

Bug OCPBUGS-34657: Disable installation of .pyc files through pip #512
METAL-1004: Update ironic-lib to latest release-4.14 commit #492
OCPBUGS-32364: [4.14] remove unused prometheus-exporter #487
OCPBUGS-32169: [4.14] Add hybrid configuration for cachito #482
OCPBUGS-32388: Use unix sockets by default for reverse proxy communication #475
OCPBUGS-32169: [4.14] Add requirements placeholders for cachito #469
Full changelog

ironic-agent

OCPBUGS-33452: update ironic-lib with latest fixes #133
METAL-1004: Update ironic-lib to latest release-4.14 commit #130
OCPBUGS-32170: [4.14] Add hybrid configuration for cachito #127
OCPBUGS-32170: [4.14] Add placeholders for cachito #124
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-23866: deps, bump opentelemetry #38
Full changelog

kubevirt-csi-driver

“OCPBUGS-29792: [release-4.14] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #34
Full changelog

machine-api-operator

OCPBUGS-31980: Update x/net to v0.25.0 #1236
OCPBUGS-30898: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1224
Full changelog

machine-config-operator

OCPBUGS-36356: daemon/update: disable systemd unit before overwriting #4447
OCPBUGS-32472: Delete state files on reboot only #4331
OCPBUGS-33590: ovs-configure: fix vlan_parent calculation #4361
OCPBUGS-34716: If multiple hostnames are returned, use the first one for the Node name #4385
OCPBUGS-17658: Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383
OCPBUGS-33643: Don’t error if the certs.d dir doesn’t exist yet #4362
OCPBUGS-32341: Remove the condition for checking the multiple ovs-if-br-ex profiles #4325
OCPBUGS-27030: Log network service output to console #4114
: OCPBUGS-31731: kubelet: restorecon necessary files on kubelet’s prestart #4307
OCPBUGS-32260: fix: resources were in the wrong indentation level #4322
OCPBUGS-27108: Add \n in cert_writer for old cert methods and skip cloudCA validation #4117
OCPBUGS-31487: Prevent OVS-configuration to run before kdump #4291
OCPBUGS-29400: Run resolv-prepender entirely async #4182
Full changelog

multus-cni

OCPBUGS-33478: Fix CNI cache update function to prevent nil access #232
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-35263: Use IP to identify orphaned allocation to be deleted #289
Full changelog

network-tools

OCPBUGS-31862: replace wireshark with wireshark-cli #122
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#822) #822
Full changelog

openshift-apiserver

OCPBUGS-31509: vendor upgrade runtime-utils #426
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-35337: Correct out-of-bounds check #173
OCPBUGS-34792: Make Cinder CSI Driver Topology feature configurable #162
Full changelog

openstack-machine-api-provider

OCPBUGS-32428: Ensure portSecurity is correctly set in the Instance Ports #109
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-31969, OCPBUGS-31970: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #787
OCPBUGS-35230: Unblock CI #771
OCPBUGS-33356: UPSTREAM: <carry>: bump go-jose #743
Full changelog

operator-marketplace

OCPBUGS-32067: update golang.org/x/net for CVE-2023-45288 #565
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-35009: ipv6+all protocols conntrack flush #2199
OCPBUGS-34570: Fix EIP GARP config overwritten by gateway update #2188
OCPBUGS-33721: use a forked version of j-keck/arping that fixes a threading issue #2170
OCPBUGS-34076: Reuse node-subnet from cache if exists #2177
OCPBUGS-34405: [release-4.14] dns: fix deadlock in case of error #2183
OCPBUGS-33469: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2160
OCPBUGS-33537: Improves service iptables efficiency on start up #2164
OCPBUGS-32104: Periodically check the ovnkube-node certificate is not expired #2117
OCPBUGS-32319: [release-4.14] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2128
[Release 4.14] OCPBUGS-32987: Bump OVS #2148
OCPBUGS-32247: [release-4.14] OVN bump to 23.09.0-139 #2123
OCPBUGS-29397: 4.14 High CPU usage with APB CRD #2118
OCPBUGS-32353: Custom v4 and v6 transit switch subnets while creating kind cluster #2122
OCPBUGS-31853, OCPBUGS-31854: EIP multi NIC IPv6 support and default route with next hop #2114
OCPBUGS-31648: Set mac binding age threshold in gateway routers #2115
Full changelog

powervs-block-csi-driver

OCPBUGS-33637: Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 #81
Full changelog

telemeter

OCPBUGS-34830: fix issuer check during JWT authentication 4.14 #539
OCPBUGS-32888: update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 #535
Full changelog

tests

OCPBUGS-36464: test/extended: skip etcd leader change check on hypershift #28921
OCPBUGS-35475: Use centos7 tag instead of latest for cmd images tests #28881
OCPBUGS-33417: Provide SCC access via RBAC #28806
OCPBUGS-33563: Adjust the method of get the apiServer (release-4.14) #28763
OCPBUGS-29970: Do not assume there is just a single kubelet systemd service #28620
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-35136: Bump x/crypto to v0.24.0 #46
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-35138: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #123
OCPBUGS-33798: FailedPrecondition volume does not appear staged #119
Full changelog

vsphere-problem-detector

OCPBUGS-35913: Fix missing failure-domains #162
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github