4.14.39

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.39-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (3 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.46, 4.13.48, 4.13.49, 4.14.10, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.4, 4.14.5, 4.14.6, 4.14.7, 4.14.8

Loading changelog, this may take a while ...

Changes from 4.14.27

Created: 2024-10-17 13:53:08 +0000 UTC

Image Digest: sha256:da153230f1e6745e4f06759698bd993f61d90dcea3b9cd2eb5f6905f0603741d

Release 4.14.39 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-10-16-233537

Components

Kubernetes upgraded from 1.27.13 to 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202405162017-0 to 414.92.202410112148-0 (diff)

Rebuilt images without code change

agent-installer-csr-approver git 5d64ad00 sha256:e4b3aafe512b4eec112715b8f66da14f87563cbc263e67febab577a0299ccc11
agent-installer-orchestrator git 5d64ad00 sha256:a440e759a28a5f1f6f27ebc8e1c5479cb01b7d19f7047970c6d3b3cd98c96c87
alibaba-cloud-controller-manager git 8ba0b37a sha256:33d203a132516d699ee9c57d61ca992b46b2dd53228d606a51d1d2f9f0081135
alibaba-cloud-csi-driver git 3dc363d3 sha256:2bd7101d1568f97c65a805734a740f31440027d6499718b75609c1c9fd082470
alibaba-disk-csi-driver-operator git 8853e6ef sha256:e4bcbde73dc16c750037046ef73f8b5dce90165eb3ef894d750d0a8e881f562a
alibaba-machine-controllers git 27f105d3 sha256:e9c82fa512d4b511fdfc7617a7518b89b87158063d395316204811b7a26c8f7f
aws-ebs-csi-driver-operator git 609879c3 sha256:e423a47d02939433963c5da4d3624b08c827196975916dceb3eca544119b6d25
aws-machine-controllers git e292817c sha256:d10aaf73d420b4cb70cd23905265cbff7cd21293c22d8c786f5a361efa8c53fa
aws-pod-identity-webhook git 2c864ca0 sha256:8ee2ad7a01eb656cfb28846036332d5a12c48c93ef52ddac8489525679799d00
azure-disk-csi-driver-operator git 91893576 sha256:6c66a1ae45d2b5235f36fc5b5f7fc1d3659049a2843543bad0b75fcaecd957ec
azure-file-csi-driver-operator git 4469d805 sha256:0c229a33364985f5561f229dec41f4ccfbf66b6768e9ac3ae2b7450f2ffa6aa8
azure-workload-identity-webhook git bcb88d94 sha256:3b2b306c67366f95538ff5a5282aefb8718d54f539571b8bd5cf345887a0e70b
baremetal-machine-controllers git fb20cdac sha256:e60571a4cf17fb3c3699cc5e686c72cdecbc7609edfe6f4733445575bee17eef
cluster-authentication-operator git 9203d4d5 sha256:f80c249d35b3dd954decaa7e470c29653584027e1767eb677fe8e4036ff5dea7
cluster-autoscaler-operator git 32854baa sha256:e75cb8c1af1d9f255255019857a64bb3ed8d398fa9a2ea356fb994abcc700ec4
cluster-bootstrap git 93fba13f sha256:7d3438dbb13e1c7c5647c3bb60c1f24d652614a86f4ef013bf3d6a691301c815
cluster-capi-controllers git ae83c553 sha256:495c2e936647b6bc354357abcf0597df5de86a9ebc38747982ae9f6f636796b6
cluster-config-operator git 91fa980a sha256:93b0e21681a271b87c629c7c9ec39dbf9e10e3f36336fe64107225cb53d8724f
cluster-csi-snapshot-controller-operator git d4a11625 sha256:42590a2dc7600e574fdd1b9c8db9350355ed2a32b9d5793fd927f3faee51b193
cluster-kube-cluster-api-operator git b287d08b sha256:6b58ab638eea960c78212bfcfc5a5617ef1a524e50c32718c32e1bafec942cdf
cluster-kube-controller-manager-operator git 4e059638 sha256:9e382f6da5ee95362a8106c7f52383e3ae3217185e82331d39e46efac6e97b99
cluster-kube-scheduler-operator git 33f630dc sha256:c2c96440a9dc5029c760f7ae0dab433a25cfa4f61b31b16f3df301f1174c9114
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:18754b1646f44120676ec0726b0d0e1ecb8bac891203230bb0a882b6a223fad2
cluster-machine-approver git 711b4f6e sha256:633dc9351b7f53fb3b041c66715bb528eaafce8504b52f83b8fe6e1b91a82938
cluster-olm-operator git 0dbbb613 sha256:5934a6ca6df802ba8980bf2be4e752b94839c2d168279ee008b0828bbc8e5062
cluster-openshift-apiserver-operator git 700dc111 sha256:4528650f603bf2eff4afee0596dbbf5cd41a8bab9a59d33019dbfdb0e3885732
cluster-platform-operators-manager git 08fb27e7 sha256:67b347f75146fd6efdf0fb3ea66a24cd48be36537b532050fda1f3cbf83313a6
cluster-policy-controller git 219f6f6f sha256:503a0976bef90fffe14a7f31243bc8ac496c2317f17571c254422cf77ae9964e
cluster-samples-operator git 61a34659 sha256:4c4d7ab7199de3ad48a91a3cb971d43b83e0c5be87be0f6dc8ed48330d977bd9
cluster-storage-operator git 6c652a5e sha256:0ec81ee823485b5ac946d7bbc6544394179976c7793b0be577e4b023c7268fe3
cluster-update-keys git e0c26a08 sha256:081b11eafd66ee07658947688d00e2c46c310d7266da37cf7860980665bfcd24
cluster-version-operator git af210dc6 sha256:bdf1690f78a5c4465d07d8e52a66e40fc39d7835dd61265a3af1aa603700ae4e
configmap-reloader git 716a0c33 sha256:bb429b4274d99d46d0ccb97fa7aecd8db5acfbce202fa3a8d6365f5418f3fd57
container-networking-plugins git bab8a4f7 sha256:aa5db99b4a217f77314e2409c129e4a34238b181d48e9481388ff4ad8d0487cf
csi-driver-manila git 697083a8 sha256:fd1024194d422e1e9d80355197ecffbf02ccaadf6b0cbffa76a43be1f251bf02
csi-driver-manila-operator git d93a218f sha256:b6158fc4d3e54977039b44166a16e3773b3f7ba178a1dc80ffa953fe91cbe3d4
csi-driver-nfs git e1dd4537 sha256:d7e0fbf4150c111afa9654803ac332e4b38e77b5f25c5ef679bb80d5da9f772c
csi-driver-shared-resource git 9232c1ff sha256:3cfe556e9a3a71af4895e686779c88002fe63833041eb5f30d2881dc0ed428c5
csi-driver-shared-resource-operator git c273cd52 sha256:8019ee4cd21ef65d0f28c04de31ac1a6fc73ef665492162d92a652e036e1343d
csi-driver-shared-resource-webhook git 9232c1ff sha256:c84caa3c6b07e91fce903d6f68d705a3f8a3b88f0a34894b726320bf54a3647b
csi-external-attacher git 06e8ce0d sha256:aa304a71c0594ce1b1dd2811bffc529c8ead2479fd08707755733197d516e95b
csi-external-resizer git 59a701a4 sha256:edcffca98938dca52bb98fc9fadde28f431e6ec010f61689e75673dd470b87fd
csi-external-snapshotter git a6834536 sha256:7a6c84563564fd97987cb26fa5da8fa3a4882b09becfd455cd6199b57cf4f454
csi-livenessprobe git a9bcbde1 sha256:09ac4cc4692fccbfb2bbd1853c53e58824fcf6f794fccf2bac9683288f0f1c3b
csi-node-driver-registrar git 9dcaa7f5 sha256:db2e7cfa9df812ef5e1423265ff20abe249715fdd46a6e529303ab2e6821aeca
csi-snapshot-controller git a6834536 sha256:cd625745b23cb2ede63cb486410dd01acb9f078330c120f79130ad669a3141f8
csi-snapshot-validation-webhook git a6834536 sha256:b7f85fa8572123a2002ecd8f6c280241d348deaaf247e276f5c98d43ba8d9c22
docker-registry git f03c2404 sha256:b21d962b0ee86df9ef5b101462cca4c146f718f3b099562cbf3a3deb08c7f111
driver-toolkit git cafed17b sha256:3ac553ab0ae91d3c1bf4f6edd3140559c525ab2359c3c9ccfe9f9445d7562f15
gcp-cloud-controller-manager git 09e96a91 sha256:0a2fa62bbac7a1cb6f05fe815182f2e4ffc4ac8ef779b6316f697e3d3a4e1df5
gcp-cluster-api-controllers git d99fb31a sha256:a19aa7c33e6c8ecb43eb8f9cb46fb87b4ca51132d180b68c01e00a00e3b7f938
gcp-machine-controllers git a676e6b6 sha256:e8269e35345b2d57f5b21cfb87baacb38437a1d73ce35ef527489ade678599b5
gcp-pd-csi-driver git 8a626fe5 sha256:fffc4396fd451fce265d7f557fc8fb508e5f4ae68475f6d2f031ae4ca3e21bad
gcp-pd-csi-driver-operator git 95d55a04 sha256:a37cafcf01eabe061114e74c2b09cb98f2e8027e60025b97c594f65554d8268a
ibmcloud-cluster-api-controllers git 004ecde5 sha256:a85412513842d7023bac3b08cfd9e32b3b988c8ad62ba9071c27f554f2b9e908
ibmcloud-machine-controllers git c28b2232 sha256:f0af653302058bafe72802fb18979bb6344131936ad2b164a0d5d7b88a2b30ce
ironic-machine-os-downloader git 7b56c306 sha256:29d037b20943c08bb033fe77b70347fa7fe2a794fc0b76bdfc167e04b62e737d
ironic-static-ip-manager git c038d5a4 sha256:95c26ebb8f36484a6113ee5c139120b5e86e897835ddaace98cd2d9463b3e06b
k8s-prometheus-adapter git 801a912b sha256:b3081e8885ba9413daa9143303d9fc8ce84ca78aa0e8c5cf9f2794609b2af4b1
kube-proxy git 1a9befcb sha256:8247be76f270712a6b472232ec0193a1cb137241f26918cadaae1627550b54b5
kube-state-metrics git db0c5499 sha256:d03d65eb739cea40e3beb25fca6cdb527751890f086c441dcb209a8c3acce40b
kube-storage-version-migrator git 8558e14a sha256:446895855b806fe3698b6d67c08c00d9b000fa7bae4f4f7f2a4ff02fae34e433
kubevirt-cloud-controller-manager git 7d96f56d sha256:3c3de8cd7e362858fcaff8afd00d15efd7b0415122e86fb7f3430fa0ff174ba5
kubevirt-csi-driver git 48fafc4a sha256:8a28240da5729a79f81a40a7622b3145b3107da17911952bd595da3d2041b8c2
kuryr-cni git 8926a294 sha256:91b3e12388f86f94d81f64dad8a8642af963364cb65f17d95098768af582ff45
kuryr-controller git 8926a294 sha256:cc951ff31ed6ec1f1c0f83f52992f5c58cca069cc376f919e916f8159cc8b679
libvirt-machine-controllers git 34dfccba sha256:a7a20aa27d2bcca0da5363fdd77f6d4aadf493ab8ac9ffe52f3efce239ea545a
machine-image-customization-controller git 2a6627ba sha256:187cbaab7dd84a05517643deeb895280c723ff15114a3f28681518f47569de94
machine-os-content sha256:d2aa57296c5fa4ccf61787ed8344d1da2ca0b0a2cc6cc3bfa5a3105b4444c978
machine-os-images git d3a4a6c3 sha256:837eb54fa59c0bb3887625f2d93cab3e6ea2abf4428a5a4f9e78f3e2239e8718
monitoring-plugin git 6fb20810 sha256:3dd25a080a710aa7b83f9513fabf976931652da9dd2fe8eb182a2f60d461f96b
must-gather git 833e1de9 sha256:42e18f51c6b852a2d71e41e4c3906e96b6a799af0e33634207e4d46430cf36d3
network-interface-bond-cni git 29f61f6b sha256:ee9de3a6695208fb57fce20d0b61e8a80f0a213448ccecd7ece9ed592289074f
network-tools git e79d8173 sha256:9eec785c92d4f3e91986ee40a8a2229b16d8ce39e0e39e404e6b2082d58d8371
nutanix-cloud-controller-manager git bc568865 sha256:c911546e9a30152ee20e426b974bb00dd15ac67cdbbae12a190b8b9bc2712afa
oauth-proxy git a4a2f270 sha256:4288c48e6d3e32cb2a7054fbc3e9c784909bfacd0225186b64f3007824e0462c
oauth-server git 35f4739f sha256:1b4b1987dac7843c976e5558972ffade439091c0079b27e2b0b4eb406055e5c3
oc-mirror git a0733c17 sha256:2c17b6c9acef434f2a3f2fbde6e8435fa8b0c6da3200ac82bbdde12b79bbc9d9
olm-catalogd git a333cb0b sha256:b788029ad7d4c7dd5d2bb046b05f1cb13d3d18b4d3f9ab763c6d0ee09bac6a01
olm-operator-controller git fb6fb278 sha256:ff41966bc204691d855705085d723b4d0bf6ef92d3c990ea9f066d035b6561f0
openshift-state-metrics git dff4b0f4 sha256:a1f08bb6eedbca32627ebf6647451847c1524c542c9533cd67727d0480d09761
openstack-cinder-csi-driver git 697083a8 sha256:8ad8442b71d044939df84e35f52b513d59480a5d0dd1dbd77633ed83040755ce
openstack-cloud-controller-manager git 697083a8 sha256:81d76324f0f7a37c567bb09b2e9d9749c0aa4550f4b87e2b2204a84ecfe16c4b
openstack-machine-api-provider git 51f8e4d6 sha256:ae4e83063db116c196860245ff940c93f5867083f3cea1618e1031c8219d4e0b
ovirt-csi-driver git f21b470f sha256:7198eec575c772c3cbf037e06a1a50d00a1b4173986abee55f846725213a6497
ovirt-csi-driver-operator git 2fa33aa7 sha256:bce206c0a75eb89f455c97c147b3977eb927d87b52f0eb462eae8a07e5e8508c
ovirt-machine-controllers git 5d708631 sha256:404b3d2b36a4c8c06260c5b0a93c430e6dcb174455f563aae7a74c5f53e96d7b
powervs-block-csi-driver-operator git 7436369a sha256:d3aac4e8edf3a3a2469c9013703515138cd7c811a090dd06752902e09021e513
prom-label-proxy git af40ed09 sha256:c6d024a44df561a669e5b20636eeac268871314b7d57262b5a1a15927d5b05ea
prometheus git b7c61bcb sha256:825049f0f1b6c01097dc27d4934aa0a6a180ba2c645a29a8b03aa1a73015fc27
prometheus-alertmanager git e3725166 sha256:5bf4bcc6af0fcc08e124f4c74a31b9a8ae9f99fa1dd663097c52435f8ba80fe6
prometheus-config-reloader git a4b845a7 sha256:f3cfcbe81b08546c190cf11d89a2404d99fcb85171ce637bd087913be3b9cd05
prometheus-node-exporter git 5ee0a9d9 sha256:fac3e42b2bfe07569248062235356ef858a2ce4b8dddc1bcf21b364d8c0b7a8f
prometheus-operator git a4b845a7 sha256:22fee14c456b14294090fcb799f9756779781c083db31530aba529b8a93395b7
prometheus-operator-admission-webhook git a4b845a7 sha256:36b15c0cd0047529f76b85692949ea2b2768cf3edeb6b5bef3d9d39253665bbc
rhel-coreos sha256:7374386ed9e098103dcbe5930527565bff7dbc2724fd5659ead16b1cba973965
rhel-coreos-extensions sha256:b5777de5943b6e7fc719b72ad004d361529e4b561ea0d2d48b216d738af95a38
route-controller-manager git 1a5e72f4 sha256:d1d85a0c21675126e2f9dcad70037a723721d516282effe233bbf0c6dfde4529
sdn git 1a9befcb sha256:b4f752309945de5a4eb63bab6e9d2b54b4245324d745551abbd8733792b12164
service-ca-operator git 3c3f82f7 sha256:5b6d7362de20ce346986035e12c64177b86c8fb26ed336660022563f1b21441d
thanos git a2671250 sha256:4ca7d60a0e1e8ee5a9862385d040b2402c822d5185143d199214659e13ac55e2
vsphere-csi-driver-operator git 5d5105f9 sha256:d1f8cdc534f949ca755f923474d4926068c92f00a4509887cab1db0b8e17e0ee

agent-installer-api-server

OCPBUGS-15346, OCPBUGS-15347: Update version go-http-metrics and gin-gonic/gin (#6899) #6899
OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6416) #6416
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) #6322
Full changelog

agent-installer-node-agent

OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#709) #709
OCPBUGS-33404: Make removable disks eligible (#725) #725
Full changelog

agent-installer-utils

OCPBUGS-25727: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.14 #34
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
Full changelog

aws-cloud-controller-manager

OCPBUGS-38786: Ensure that addresses are added in network device index order #93
OCPBUGS-32066: update for CVE-2023-45288 [release-4.14] #83
Full changelog

aws-cluster-api-controllers

OCPBUGS-34856: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #516
Full changelog

aws-ebs-csi-driver

OCPBUGS-35123: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #271
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-23829: Bump otelgrpc to v0.49.0 #124
Full changelog

azure-cluster-api-controllers

OCPBUGS-36023: Update go-retryablehttp to v0.7.7 #313
OCPBUGS-35125: Bump x/crypto to v0.24.0 #307
Full changelog

azure-disk-csi-driver

OCPBUGS-35126: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #82
Full changelog

azure-file-csi-driver

OCPBUGS-41164: bump mount-utils to treat ENODEV error as corrupted mount #79
Full changelog

azure-machine-controllers

CFE-1050: Added support of capacity reservation group #109
OCPBUGS-35133: Bump x/crypto to v0.24.0 #112
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-42285: Add AWS r8g to arm tested instance types #9050
OCPBUGS-42848: add tested instance type for IBMCloud #9082
OCPBUGS-25508: Update Golang SSH package version update to 0.17.0 #8992
OCPBUGS-39411: Added yq to ci image #8943
OCPBUGS-36180: baremetal IPI without provisioning network failing on provisioning-interface.service #8712
OCPBUGS-36089: [release-4.14] bump go-retryablehttp for CVE fix #8658
OCPBUGS-37183: ic: fix typo in warning message #8771
OCPBUGS-37068: update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 #8748
OCPBUGS-36748: Add yq-v4 to the upi-installer image for CI #8684
OCPBUGS-35827: If host is offline or disconnected don’t check ver #8634
OCPBUGS-35826: [release-4.14] bump github.com/containers/image for CVE fix #8633
OCPBUGS-35485: [release-4.14] aws: terraform: add spot instance support for masters #8605
OCPBUGS-34024: go.mod: bump aws-sdk-go for ca-west-1 support #8440
OCPBUGS-33401: PowerVS: Add composite_instance to listServiceInstances #8479
CORS-2951: Add deprecation notice for OpenShiftSDN for 4.14 users #8518
Full changelog

baremetal-operator

OCPBUGS-38940: [OCP] Ability to disable agent power off after deployment #374
OCPBUGS-34814: PreprovisioningImage should not be created on poweroff #359
Full changelog

baremetal-runtimecfg

OCPBUGS-37502: Fix handling of ELB Node IP detection #324
OCPBUGS-35846: Add support for OVN HostCidrs annotation #321
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-35475: Remove some of newapp unit tests relying on external deprecated images #1802
OCPBUGS-35447: bump go-git to 5.11.0 #1799
Full changelog

cloud-credential-operator

OCPBUGS-41236: List secrets in batches to avoid api timeout #755
OCPBUGS-38378: Update google.golang.org/grpc v1.65.0 #750
OCPBUGS-37823: GCP passthrough permissions check to ignore problematic permissions. #741
OCPBUGS-37062: Update cloud.google.com/go/storage v1.43.0 #742
OCPBUGS-37420: SNYK ignore go-client misreporting #739
OCPBUGS-37276: Update to azidentity v1.7.0 #732
OCPBUGS-36029: IBM/go-sdk-core update to v5.17.4 #721
OCPBUGS-36716: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #713
Full changelog

cloud-network-config-controller

OCPBUGS-34197: Avoid panic when looking up attachedOutboundRule.ID in azure #147
Full changelog

cluster-autoscaler

OCPBUGS-40925: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #316
Full changelog

cluster-baremetal-operator

OCPBUGS-31977: bump x/net to 0.23.0 #438
OCPBUGS-22943: Add tls-cipher-suites to baremetal-kube-rbac-proxy #379
Full changelog

cluster-capi-operator

OCPBUGS-37974: fix: sort CredentialsRequest manifests after namespace #194
OCPBUGS-36369: Revert cluster-api-operator go.sum hash #184
OCPBUGS-35128: Bump x/crypto to v0.24.0 #177
OCPBUGS-35957: Fix gcp providers-list.yaml branch #178
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34556: update azure and ash tolerations on node manager #347
Full changelog

cluster-control-plane-machine-set-operator

CFE-1087: API Bump for capacity Reservation #319
OCPBUGS-35520: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #309
OCPBUGS-35338: Improved debugging of API listing errors #303
Full changelog

cluster-dns-operator

OCPBUGS-5943: Enable topology-aware hints iff nodes in >=2 zones #416
OCPBUGS-5943: Ignore max unavailable for status #400
Full changelog

cluster-etcd-operator

OCPBUGS-34495: return errors in wait-for-ceo #1266
Full changelog

cluster-image-registry-operator

OCPBUGS-39100: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1114
OCPBUGS-36035: go.*,vendor: bump go-retryablehttp #1069
OCPBUGS-33147: azure-path-fix: get client secret from k8s secret #1058
OCPBUGS-34668: pkg/storage/s3: use force path style in favour of virtual hosted style config #1051
OCPBUGS-33409: azurepathfix: check if platform status is nil before accessing it #1033
Full changelog

cluster-ingress-operator

OCPBUGS-36467: Allow operator to update Route spec.subdomain #1101
OCPBUGS-36555: Implement connect timeout tuning option #1105
OCPBUGS-36461: Add Regexp Anchor to TestAll #1098
OCPBUGS-35399: Internal service changed: fix target port logic #1086
OCPBUGS-34973: TestHostNetworkPortBinding: Delete t.Parallel() #1077
OCPBUGS-34410: Don’t add clientca-configmap finalizer if deleting #1063
OCPBUGS-34407: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1061
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-31354: add SNO control plane high cpu usage alert #1707
OCPBUGS-33930: add a controller that reconciles SCCs’ volumes #1681
Full changelog

cluster-monitoring-operator

OCPBUGS-42603: Exclude windows nodes from kubelet servicemonitor #2489
OCPBUGS-41916: filter alerts sent to Telemeter #2473
OCPBUGS-39176: Backport #2441 for 4.14 #2449
OCPBUGS-37468: Backport of PR #2384 #2433
OCPBUGS-36565: add runbook_url annotations #2407
OCPBUGS-37296: Making sure proxy settings are correctly forwarded in the generated remote write configs #2415
OCPBUGS-36416: inject trusted CA bundle into UWM Alertmanager #2402
OCPBUGS-34023: fix KRP permissions for Thanos Querier #2374
OCPBUGS-33585: fix Thanos ruler alert generator url #2345
Full changelog

cluster-network-operator

OCPBUGS-39086: Fix wait logic for IPsec certificate signing request #2481
OCPBUGS-41508: Tighten the permissions on whereabouts.conf #2493
OCPBUGS-42021: Add proxy env vars to onvkube-node #2505
OCPBUGS-38440: [release-4.14] 4.14 subnet config #2473
OCPBUGS-37221: Ensure that the node-identity webhook address contains colons for IPv6 #2440
OCPBUGS-38073: Fix IC distributed control plane alerts #2463
OCPBUGS-37468: Backport ipsec state metric #2444
OCPBUGS-32706: Add conditions for ignored-namespaces #2380
OCPBUGS-36722: update whereabouts crd #2434
OCPBUGS-34885: [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled #2390
OCPBUGS-27925, OCPBUGS-30579: [release-4.14] tighten conditions for the state transitions in IC upgrade #2207
Full changelog

cluster-node-tuning-operator

OCPBUGS-42567: Add cluster-wide proxy env file (#1176) #1176
TuneD prior to kubelet in one-shot mode (#1137) #1137
OCPBUGS-37754: Remove tuned/rendered object (#1133) #1133
OCPBUGS-37734: Backport fix for OCPBUGS-36355 (#1126) #1126
OCPBUGS-33929: Negative net interface name does not reduce queues (#1074) #1074
Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-33295: Update opentelemetry to mitigate CVE-2023-47108 #344
Full changelog

console

OCPBUGS-42518: The filepath including leading slash makes error during parsing devfile using Gitlab #14342
OCPBUGS-42517: Values entered into the Instantiate Template form are automatically cleared #14341
OCPBUGS-42757: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14369
OCPBUGS-38883: Fix password set to Secret created through Start Pipeline form #14184
OCPBUGS-37353: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #14108
OCPBUGS-41836: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14281
OCPBUGS-39389: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14231
OCPBUGS-41581: Increased max nodes limit to 200 in topology page #14262
OCPBUGS-38972: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14234
OCPBUGS-38053: fix BMH restart annotation #14109
OCPBUGS-33748: Fix Pipeline details page with when expression using CEL expression #13856
OCPBUGS-32499: Fixed some problems in topology Chinese translation text #13779
OCPBUGS-33942: make sure folder is encapsulated with quotas #13869
OCPBUGS-35723: Upgrade Pipeline trigger resources to v1beta1 #13985
OCPBUGS-33558: Display “With Data upload form” in Create PVC drop down once #13840
OCPBUGS-33064: Fix PipelineRun Logs tab navigation #13673
Full changelog

console-operator

OCPBUGS-31916: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #885
Full changelog

coredns

OCPBUGS-37467: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #126
Full changelog

csi-external-provisioner

OCPBUGS-35112: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #99
Full changelog

docker-builder

BUILD-854: Add adambkaplan as approver #404
Full changelog

egress-router-cni

OCPBUGS-35143: update to go 1.19 and k8s.io mods to v0.27.4 #87
Full changelog

etcd

OCPBUGS-32813: Revert “Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… #265
Full changelog

haproxy-router

OCPBUGS-32634: Properly handle rewrite-target annotation #583
Full changelog

hyperkube, pod

OCPBUGS-39413: Return from EnsureHostInPool on all NIC errors #2073
: OCPBUGS-38959: Upstream: 115702 kubelet: output log even file is rotated #2060
NO-JIRA: update downstream owners #2051
OCPBUGS-37623: Bump to Kubernetes v1.27.16 #2043
OCPBUGS-35553: Disable vulncheck #2010
OCPBUGS-35553: Bump k8s 1.27.15 #1992
OCPBUGS-33964: UPSTREAM: 123055: Fix race condition between resizer and kubelet #1973
UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check #1951
OCPBUGS-33712: Bump to Kubernetes v1.27.14 #1970
Full changelog

hypershift

NO-JIRA: chore(deps): update konflux references to 66f551f (release-4.14) #4924
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.14) #4917
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.14) #4910
NO-JIRA: chore(deps): update konflux references (release-4.14) #4898
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.14) #4879
NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.14 #4851
OCPBUGS-42533: enable audit log for oauth-openshift #4822
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.13 (release-4.14) #4794
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.14) #4828
NO-JIRA: chore(deps): update konflux references (release-4.14) #4813
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.14) #4805
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.14) #4788
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.14) #4758
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.14) #4784
OCPBUGS-41374: CPO oauth idp converter: resolve names before dialing #4763
NO-JIRA: chore(deps): update konflux references to 5ac9b24 (release-4.14) #4783
chore(deps): update konflux references to 2c3426a (release-4.14) #4773
NO-JIRA: chore(deps): update konflux references (release-4.14) #4757
OCPBUGS-42221: Make guest cluster components use the correct KAS port #4753
OCPBUGS-38060: Add HTTP konnectivity proxy to OAuth server #4498
OCPBUGS-38066: [release-4.14] Use HTTP proxy for ingress controller #4724
NO-JIRA: Security fixes for openshift-ci-security job #4752
OCPBUGS-42184: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4747
OCPBUGS-41506: fix: bump google.golang.org/protobuf #4687
HOSTEDCP-1957: bump go-jose version #4698
OCPBUGS-39378: Set KCM node monitor grace period #4659
chore(deps): update konflux references (release-4.14) #4683
OCPBUGS-39183: fix: bump github.com/IBM/go-sdk-core/v5 #4626
NO-JIRA: Add PodDisruptionBudget for router deployment #4692
NO-JIRA: Revert “Merge pull request #4661 from jparrill/bp-4.14/OCPBUGS-24308” #4667
NO-JIRA: PDB backports #4661
NO-JIRA: Konflux migration 4.14 #4648
OCPBUGS-39230: set proxy envvars on aws CCM #4638
OCPBUGS-38791: Let the CPO oidc check resolve through data plane #4617
NO-JIRA: Flaky cert validation test #4633
HOSTEDCP-1897: [release-4.14] Allow setting Kube APIServer maximum requests in flight #4553
OCPBUGS-37076: Fixed audit-logs sigterm failing to terminate gracefully #4369
OCPBUGS-38624: remove weak ciphers from security profile #4575
OCPBUGS-37173: Add newline after TLS certs referenced by image.config #4471
OCPBUGS-37172: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4490
OCPBUGS-36944: [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4360
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4473
OCPBUGS-37175: Delete IDMS in dataplane once HCP ICS field is removed #4472
NO-JIRA: Konflux mce-2.4 pipeline fixes #4464
NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4288
NO-JIRA: [release-4.14] test/e2e: remove api budget checks #4438
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned #4363
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.21.10-1.1719562237 (release-4.14) - abandoned #4326
NO-JIRA: Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.4-1134 (release-4.14) - abandoned #4325
OCPBUGS-36518: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4315
OCPBUGS-36159: Generate default worker security group rules based on machineCIDR #4270
OCPBUGS-35549: Restrict image registry overrides to control plane component #4223
OCPBUGS-35365: fix router on 4.14 y-stream upgrade #4205
NO-JIRA: chore(deps): update konflux references (release-4.14) #4257
OCPBUGS-35401: Fix disconnected metadata inspection for nodepool #4208
OCPBUGS-35482: Add TrustedBundles to OAS container #4216
OCPBUGS-35290: [release-4.14] Backport etcd defrag #4189
NO-JIRA: chore(deps): update konflux references (release-4.14) #4248
OCPBUGS-35183: add AWS STS URL to OIDC provider audiences #4179
NO-JIRA: hack: make the e2e script generic #4201
chore(deps): update konflux references to 2be7c9c (release-4.14) #4225
NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
OCPBUGS-34856: [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
NO-JIRA: Remove CLI inspection of release image #4061
OCPBUGS-33713: Reconcile over ICSP/IDMS #4059
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
OCPBUGS-33844: Fix disconnected metadata inspection #4049
OCPBUGS-33843: Recycler-pod image now points to the OCP Payload reference #4048
Full changelog

ibm-cloud-controller-manager

OCPBUGS-23861: Bump otelgrpc to v0.49.0 #73
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36065: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #73
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36071: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #122
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36011: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #42
Full changelog

insights-operator

Add haproxy metric (#999) #999
Add missing permission for GatherClusterIngressCertificates (#984) #984
OCPBUGS-37673: Ingress controller related certificates’ validate dates gathering (#976) #976
OCPBUGS-36475: properly encode the URL for the advisor links (#962) #962
OCPBUGS-36380: Collect aggregated Prometheus Alertmanager instances (#960) #960
Full changelog

ironic

OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #571
OCPBUGS-32266: redfish-virtualmedia fails on XFusion nodes #548
OCPBUGS-37762, OCPBUGS-39382: Include fixes for CVE-2024-44082 #584
OCPBUGS-38508: set min version for python3-webob #555
OCPBUGS-33375: bump werkzeug #537
OCPBUGS-37410: bump jinja2 #530
OCPBUGS-37115: Update eventlet version #524
Bug OCPBUGS-34657: Disable installation of .pyc files through pip #512
Full changelog

ironic-agent

OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #158
OCPBUGS-39382: Include fixes for CVE-2024-44082 #163
OCPBUGS-33375: set webob and bump werkzeug #151
Full changelog

keepalived-ipfailover

OCPBUGS-30414: update unit tests in egress/dns-proxy #173
Full changelog

kube-rbac-proxy

OCPBUGS-31971: bump golang.org/x/net [4.14] #108
Full changelog

machine-api-operator

CFE-1051: Adding web-hook validation for capacityReservationGroupID #1260
Full changelog

machine-config-operator

OCPBUGS-37552: On-Prem resolv prepender to watch for NM changes #4500
OCPBUGS-35322: Decrease logs of haproxy #4405
OCPBUGS-32258: Log network service output to console #4320
OCPBUGS-38371: Revert “MCD-pull: run after network-online.target in Azure” #4526
OCPBUGS-37769: Move StartLimitIntervalSec to Unit section #4521
OCPBUGS-30794: Mount /run/nodeip-configuration into coredns containers #4253
OCPBUGS-37483: Remove weights from ingress check script #4485
OCPBUGS-37738: Openshift uncordoned compute-node that was intentionally cordoned #4502
OCPBUGS-36915: Use NM’s dns-change event for resolv.conf #4473
OCPBUGS-37223: Copy RHEL9 binaries used in HCP #4479
OCPBUGS-36776: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4463
OCPBUGS-36593: MCD-pull: run after network-online.target in Azure #4456
OCPBUGS-36356: daemon/update: disable systemd unit before overwriting #4447
OCPBUGS-32472: Delete state files on reboot only #4331
OCPBUGS-33590: ovs-configure: fix vlan_parent calculation #4361
OCPBUGS-34716: If multiple hostnames are returned, use the first one for the Node name #4385
OCPBUGS-17658: Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383
OCPBUGS-33643: Don’t error if the certs.d dir doesn’t exist yet #4362
Full changelog

multus-admission-controller

OCPBUGS-42048: Update owners #91
Full changelog

multus-cni

OCPBUGS-35578: Update owners file #243
OCPBUGS-33478: Fix CNI cache update function to prevent nil access #232
Full changelog

multus-networkpolicy

Update owners (#62) #62
Full changelog

multus-route-override-cni

OCPBUGS-42049: [release-4.15]Update owners #60
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-42047: Update owners #311
OCPBUGS-37815, OCPBUGS-37817: [release-4.14] align api calls timeout and skip pods marked for deletion #309
OCPBUGS-36722: Return previous IP allocation for add cmd #296
OCPBUGS-35263: Use IP to identify orphaned allocation to be deleted #289
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#100) #100
Full changelog

nutanix-machine-controllers

OCPBUGS-29549: IPI install fails on Nutanix when using DHCP #70
Full changelog

oauth-apiserver

OCPBUGS-31982: bump x/net to 0.24.0 #110
Full changelog

openshift-apiserver

OCPBUGS-32445: bump(x/net) to v0.23.0 #429
Full changelog

openshift-controller-manager

OCPBUGS-32869: replaces deprecated square/go-jose wtih go-jose/go-jose #342
OCPBUGS-41951: Add adambkaplan as approver #334
[release 4.14] OCPBUGS-33288: Update opentelemetry dependency #295
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-35337: Correct out-of-bounds check #173
OCPBUGS-34792: Make Cinder CSI Driver Topology feature configurable #162
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-42828: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #878
OCPBUGS-41872: Fix e2e flake: upgrade CRD with deprecated version #865
OCPBUGS-42150: (fix) registry pods do not come up again after node failure (#3366) #872
OCPBUGS-42017: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #869
OCPBUGS-38544: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #842
OCPBUGS-36949: [CARRY] perform operator apiService certificate validity checks directly #821
OCPBUGS-37016: Bump github.com/containers/image/v5 #824
OCPBUGS-36452: Can’t install operator on 4.15 after uninstalling it on a prior version #811
OCPBUGS-31969, OCPBUGS-31970: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #787
OCPBUGS-35230: Unblock CI #771
OCPBUGS-33356: UPSTREAM: <carry>: bump go-jose #743
Full changelog

operator-marketplace

OCPBUGS-32067: update golang.org/x/net for CVE-2023-45288 #565
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-42986: Add subnet overlap check for transit switch subnet #2317
OCPBUGS-38263: [release-4.14] Bump OVSDBTimeout and make it configurable #2275
OCPBUGS-38073: Fix registering northd metrics on appropriate nodes #2249
OCPBUGS-37197: [release-4.14] ovspinning: Set affinity of each thread #2236
OCPBUGS-36253: EgressIP: Reload certificates for the grpc heatlhcheck server #2213
OCPBUGS-36554: Handle IP fragments in SGW mode #2219
OCPBUGS-36703: Bump ovn to 23.09.4-16 #2222
OCPBUGS-35009: ipv6+all protocols conntrack flush #2199
OCPBUGS-34570: Fix EIP GARP config overwritten by gateway update #2188
OCPBUGS-33721: use a forked version of j-keck/arping that fixes a threading issue #2170
OCPBUGS-34076: Reuse node-subnet from cache if exists #2177
OCPBUGS-34405: [release-4.14] dns: fix deadlock in case of error #2183
OCPBUGS-33469: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2160
Full changelog

powervs-block-csi-driver

OCPBUGS-36095: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #90
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36105: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.14 #75
Full changelog

powervs-machine-controllers

OCPBUGS-41978: Update go.mod to fix CVE - 4.14 #86
Full changelog

telemeter

OCPBUGS-34830: fix issuer check during JWT authentication 4.14 #539
OCPBUGS-32888: update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 #535
Full changelog

tests

OCPBUGS-39137: Bump timeout for the pod-network-service endpoints check #29062
OCPBUGS-38365: add Proxy config #28998
OCPBUGS-36800: Removes dependency on samples operator images #28952
#28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28792
#28745 FIX [release-4.14] OCPBUGS-33022: update egressFWTestE2E image which contains ping binary #28899
OCPBUGS-36464: test/extended: skip etcd leader change check on hypershift #28921
OCPBUGS-35475: Use centos7 tag instead of latest for cmd images tests #28881
OCPBUGS-33417: Provide SCC access via RBAC #28806
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-23889: Bump otelgrpc to v0.49.0 #70
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-35136: Bump x/crypto to v0.24.0 #46
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-35138: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #123
Full changelog

vsphere-problem-detector

OCPBUGS-38347: Drop event when CheckDefaultDatastore fails #171
OCPBUGS-35913: Fix missing failure-domains #162
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github