4.14.58

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.58-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded (1 retries) release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded (3 retries) periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.48, 4.13.49, 4.13.50, 4.13.52, 4.13.53, 4.13.54, 4.13.55, 4.13.56, 4.13.58, 4.14.10, 4.14.11, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.4, 4.14.40, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.48, 4.14.49, 4.14.5, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.6, 4.14.8, 4.14.9

Loading changelog, this may take a while ...

Changes from 4.14.41

Created: 2025-10-23 18:04:30 +0000 UTC

Image Digest: sha256:3f2d4bc82096d5d4d5655e9182b65cdfcf2f33d0f22d07e2fa21c6b3a6132421

Components

Kubernetes 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202411130444-0 to 414.92.202510211419-0 (diff)

Rebuilt images without code change

agent-installer-utils git b3fa10c2 sha256:1defcdcf0b087a3803453b40a37f401748126dc7a22a35a6f12b6ff5e556f950
alibaba-cloud-controller-manager git 8ba0b37a sha256:d20f50a19b674f29b3a1d077f24034f9fcbcbe23cacf650a030734e6b727ff71
alibaba-cloud-csi-driver git 3dc363d3 sha256:c9fff578a58156080131fe82e17178e3cc9570bd51d88b2707a6c3e281266465
alibaba-disk-csi-driver-operator git 8853e6ef sha256:7b3ca78224420af0c1d5f3afb0f7548753841d1a968c4f7326f316a0587f69fe
alibaba-machine-controllers git 27f105d3 sha256:49feae81d3306d085d2b209fd2f32ad9a63e4ff103ce7efe799e9de1c6be4eb7
apiserver-network-proxy git f56c606a sha256:a9be204d1122b5ff30888e8bccf2f9d792c6f374dc3a4aea2777f85ccbc06f88
aws-cloud-controller-manager git 9a7820e8 sha256:40c5d2d029763efbe055588724cec73cedb45bf0e2bb73796cb4a53b0c392fbe
aws-ebs-csi-driver git 4622deec sha256:0ac0f3a24fdf510868855ad5ddafb8373d5b7a7da89760cea79fa152f0cd2ae4
aws-ebs-csi-driver-operator git 609879c3 sha256:4e100b87ea04a002021e4d7c8850c1158123ae83ff53a5f40dddce010153e64b
aws-pod-identity-webhook git 2c864ca0 sha256:222f7cab329ee2dae7f3f14112c24effacea4b121b5d5361e081b616d01c2cc9
azure-cluster-api-controllers git 8c2203f9 sha256:d241639c51185403d998305ca8ee0e3eac1f73fba708ead8f41b0c7dac073240
azure-disk-csi-driver git 6d3558a3 sha256:24bbc95384b5320a0ef702ea9d3cdb1c1fb481a4c9b9fb20e264f0a3a02acdc4
azure-disk-csi-driver-operator git 91893576 sha256:d8daf094a0dde7524dddeadef9c611d017204638f525bf59c2da0b168d0436d5
azure-file-csi-driver-operator git 4469d805 sha256:ea9ab5ccf8fd4ce7dfd595cfd29c4b437cb8facf87a3cf355c5f71c31f5f5f5b
azure-machine-controllers git d526284e sha256:d1c19b013b4f913b49ccf0f992f582caee0a7b7ace71bb4bb641d344bf3c4729
baremetal-runtimecfg git 0ba9e555 sha256:3de1e8cbb728ad1311e2c79a741df6d546d522b6911f711a4fc241c6292e5ba7
cli git 44b3ac26 sha256:c098b90fc4b3f9d55b41babb0b6cabc2b0677c4d1984c78746975c5bfd34240a
cli-artifacts git 44b3ac26 sha256:e2c315449e8ce5625798db64e152d7e771c779e2eab7c61f976c7af043b61ad6
cloud-network-config-controller git 1bd04641 sha256:b70439065582532b0da758befceb1de6efd0674c119fc771c69efdae8afbe55c
cluster-authentication-operator git 9203d4d5 sha256:08c8f51c80f690ab26552936a5a7506542ffb2348e495f21fc4c6d8ac2fcf0d2
cluster-autoscaler-operator git 32854baa sha256:f40c88251e5bbcbdef500996cdfbb887a0b300c31070e1201d30e64e18d075d8
cluster-baremetal-operator git affcfb54 sha256:5df0378fb33e019f4f069ec5d8d032bff374b0d8b7112bc8155631ca6250e880
cluster-bootstrap git 93fba13f sha256:6c8fd01d91dfd2529d9985f412771a8c85ff45bc64b0ad47aa603006f58c66e4
cluster-capi-controllers git ae83c553 sha256:9570e09cfe3999877f8b9690d5c0d6896f298258129afae8b471affad712d3f8
cluster-capi-operator git 60cc3e65 sha256:793d230480eb9ec0945261261a679488aaee3e7505fb45ecd517c88a6302027d
cluster-cloud-controller-manager-operator git a0b9c0d7 sha256:4da0ebae7ede5f4c50ed6440cfb350ad9a80f97ed44756b8041b9cd9e8b6ac3f
cluster-config-operator git 2378670a sha256:ef90d2b26752ea98480210ef36f02a543377a030c2d0a867de5ae86fdb467298
cluster-csi-snapshot-controller-operator git d4a11625 sha256:5cdcc41fc8d72a028ad93156dbe6ee3bf5c06b062d4ff59f99d091b7b5fe55ea
cluster-ingress-operator git e302d856 sha256:9e7e9e7fda30d6b32cc1a1f2016b2cdc6a1257c26234ac0c3a4b5924e3e5591f
cluster-kube-cluster-api-operator git b287d08b sha256:64234d890ad427cd186dbe17d6701442b07ec07636a4a78c78d271fa30b4cb36
cluster-kube-controller-manager-operator git 4e059638 sha256:80fc4a80ac46111ffa788d8cced24d07ab8ea9d6621b56a53c6db746af18173f
cluster-kube-scheduler-operator git 33f630dc sha256:6a0221a4c9255ecee388c8e9c4cdfaad965de455ee22670bff5a30fbc3b1d12e
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:6737c4d38acb107b5375a12c18d29578bb5e4e7a4f666d596bc9639f07e9fba4
cluster-olm-operator git 0dbbb613 sha256:242008b3954b81bb3553c92f21d3b0fe3f739d03c09453c50ccb5707a4cfcde6
cluster-openshift-apiserver-operator git 700dc111 sha256:cdfec5f51d0886592f778d2fb76281e3317fe5f51ac1f0ed7a7e8c7977e3dc34
cluster-platform-operators-manager git 08fb27e7 sha256:4417f208e8c3fc82d63ae0763f5fc426a0fd50a4711b00302e8fa8e7d5bbbbe9
cluster-policy-controller git 219f6f6f sha256:81eb7e152ab7f2060296f92807da42def920b20aa4947031670d002e5de8cc15
cluster-storage-operator git 6c652a5e sha256:3376defe21ae3f5636a57e5f71416ba32951d08b57dabe757afd553125a3400a
cluster-update-keys git 1a7a6e22 sha256:f9e902cf1d14d9711873f83b6112b84c36e28be2d72f15ee1981add02674facf
configmap-reloader git 716a0c33 sha256:7bfcd8fa8d28239b902cd438667c5940f50fa47a251b3676969e7a66aecd02f2
console-operator git e5d3f291 sha256:e7b6bc23d3c9f1a8725fa33798431ab7499fc15713bf6961e5ddccc4327b03cd
csi-driver-manila-operator git d93a218f sha256:0e695395a3c6ca68402e93c88030707d561205e3ad3f4635cfc3180984b4fdc1
csi-driver-nfs git e1dd4537 sha256:8310deeee252e9e627997d457f49136ab67e078f8171d01c802109ae6ff6a8c7
csi-driver-shared-resource git 9232c1ff sha256:05718f59bb2357bef021694df21cfa5ab5db11bbee511ce10c7a46de6e3089b3
csi-driver-shared-resource-operator git c273cd52 sha256:041ea6b84ea550ac17b26f2e895e7c2954d4d8745b9c83c03fce88ede09ddfd1
csi-driver-shared-resource-webhook git 9232c1ff sha256:f0f1d633ee16470a7edec4f910ad46b12124febc4c29ab11ccb0ac487f1a096d
csi-external-attacher git 06e8ce0d sha256:9228a4fe82da082a59607c0e1bbf546f8b61e48534e0219cf3a2242f4a8e8225
csi-external-provisioner git e18ed7f0 sha256:901ac0be0a62a2d234cfce3b8b272aaa2f106980d1e5e3441b7fdb6fa8eb0ee6
csi-external-resizer git 59a701a4 sha256:8ea0ab3e240b603b11c3b5c6ab82ecc0d0a0801de87d51219f11553badef107a
csi-external-snapshotter git a6834536 sha256:43b5f1e16acaf298e4a22ea2b2b95390e5de46d446a430bce0252556e9098629
csi-livenessprobe git a9bcbde1 sha256:e6df5555440527a780a3e9757a611a6ccaabc562a418419a4780f0e3d19d1559
csi-node-driver-registrar git 9dcaa7f5 sha256:ddc914381702e9bb21c61a139b95bb82bff2f8157988af8ba4c2cdf2dba245dd
csi-snapshot-controller git a6834536 sha256:683a1d6a64ace7cdec32e0c21a28adefa10f3b0fc489a008f27a3a6fca419a93
csi-snapshot-validation-webhook git a6834536 sha256:7107b64d4569ea153c53ad5113153d5b9da7da6bc41684d4b5f983e5bcb5324a
deployer git 44b3ac26 sha256:0af54608361cf01739af2e75fe6efd947770ca8c62dc23643d01398082520e20
driver-toolkit git cafed17b sha256:b4266e669cfe42ad19852c481abf63c17e5064f458f5d619441c85c55d81dc52
egress-router-cni git 96f2f54f sha256:2d4f3a992ecc2ad053da5ba7dafd27369f7e23caaa54f9d47fce7bfa897e33a7
etcd git 5ed5044c sha256:73b600edb1cde168571cc693646ce30733c4648e7fe062442652bf4588306c0f
gcp-cloud-controller-manager git 09e96a91 sha256:d17c32d6bcfbf999f4659064359066cb1b315cc937e275826f8f0d687c7fa4d3
gcp-cluster-api-controllers git d99fb31a sha256:81ea91415bebc7b029c2d86d4c52b3d719c41fe1510529b49956935fc43a1586
gcp-pd-csi-driver git 8a626fe5 sha256:b2ebb9cf3505ef88b576c612bd5bc5f5017bf9b824261eb821420c715800d7af
gcp-pd-csi-driver-operator git 95d55a04 sha256:13a4392ad39afa2fe3d08d9b8b8da5f389f88fbfcc7eb074d3f326065d56cc9a
haproxy-router git c3a2430c sha256:9068e30396087b8dc6be259dacbb53bd6f83a6d5a72474535c592fb8e1e434c0
hyperkube git 03a907c6 sha256:60147317d92ed4d7104bc996572ef434dfca5c0b74699014a67b9541bbcbc2ca
ibm-cloud-controller-manager git f39488c5 sha256:776110739e19f5b10fd89562b1a11de0bb2b22b887f364e587006a0caf29f472
ironic-agent git e839a4e8 sha256:17cf60f035979d812add53425e54808becc551caa047bc948862f5ac269aa667
ironic-machine-os-downloader git 7b56c306 sha256:1a54a85c6afa39dca2ff2dee0ab9c9e25267d69b63d8cdcdaf49d2c9b6e2f7d3
k8s-prometheus-adapter git 801a912b sha256:2b6a08ae8bc4ab696f1ca267e68b3447250b92a0045c5b6c9d8b15b5d0130520
keepalived-ipfailover git 03e5f407 sha256:2463e1e0c4a3bbbdda82a59603c1b3376448a963e9ba4507767bd74c56d27981
kube-rbac-proxy git b8b82595 sha256:aba88fc148f67cf0fd5b21c3b8f76048b9e0c728aa944a3152419a3fbd40d40d
kube-state-metrics git db0c5499 sha256:3fa7d2c9422a1e17b3c74ded977d31f98f28435548408c8a08345dda57e168b3
kubevirt-cloud-controller-manager git 7d96f56d sha256:76a1c35b5306e7fd24e4ea064b16eea6103c1a7d492ce476e5f3c37d706c6dc4
kubevirt-csi-driver git 48fafc4a sha256:f5ec9aceeaa4682f6bdf767f4e1e23e8e957dd0dcca9a5ba96f7fb7ab2be3ed2
kuryr-cni git 8926a294 sha256:6f8a729c5e3cf4e11b5242b02fb748521eeaad1cb4f146d5a82e97e54af4522f
kuryr-controller git 8926a294 sha256:7b122a6e19efbe9e98b5f6f98ee1b80a97ecf94fe798c56c8cabb08dc1b087f0
libvirt-machine-controllers git 34dfccba sha256:91be4ef4cb4eccbdc263acdcdf75a19cac1e6201f9f8cd01159bfacdda4cb27c
machine-image-customization-controller git 2a6627ba sha256:e03f1da46e015594ef18e5d3a2417922496a9ca430349798c33fa3bc507328bf
machine-os-content sha256:25fab161e1ad21814e212408d9baede43480c4881e54cc512e2f466e0dc26ea7
multus-networkpolicy git f670647c sha256:75e5d358db353a535cb5682548b5537d4dc13fc5f8cc367e0abfdef711d403da
multus-route-override-cni git 5965fed6 sha256:074f8e8e3396606d9b203d3388578a78b38b1d11cb5e7bef74ab1c5e48cd296d
network-interface-bond-cni git 29f61f6b sha256:5ccd15473a3cb03c80ab6e13e54f2c65acdf6e7a7c5fb9cf286103348c10a692
network-tools git e79d8173 sha256:7dae0bf64a3588de0a0510756e5f9a7781c9ac1ac94351a81dd691a8b52ac2c4
oauth-apiserver git e1cd9d05 sha256:c3f83420e3f7bc257d4d660ee19eb279b728620e7de78650ed8a89580de9fb68
oauth-proxy git a4a2f270 sha256:240f425218985b442289bbf9284cceef0564705b52e590fb172b9a1f81e25782
oauth-server git 35f4739f sha256:b64fe040512b3337621cc52445471abb190f21d3c1487670082725abdb2a3ff6
olm-catalogd git a333cb0b sha256:073c8fb49f154f62ac789e849092dee8b965297ac06d25766db1f19c586540b3
olm-operator-controller git fb6fb278 sha256:4d0b8b7272382c9de8a828c996b74384f5a780e0bf81e23e46ac8c422ba791ea
olm-rukpak git c9409c62 sha256:8289dfff664956b57f8eb18d530996e686407fa78e52ca2ee1d4723d097ee0bb
openshift-state-metrics git dff4b0f4 sha256:407f6ca337e5e5f9c63ff211b48873604c3aaf5a0b0a9cbbb3c0069909f37316
openstack-cinder-csi-driver-operator git 1713e971 sha256:fc2ce18f8c74ce46f5be72c7fb291ef0f3f652c1667df0e1423efe6047efb0bd
openstack-machine-api-provider git 51f8e4d6 sha256:c4f580a6e91873ef53a545df013cc5ac5861426600262c6aeae6204ca14e562f
ovirt-csi-driver git f21b470f sha256:2cf97818d3b507e20e85309dbad46e65e79fc9eeaf2d43652c42e6730a79d62e
ovirt-csi-driver-operator git 2fa33aa7 sha256:00cb6c1c462328e980dafde1f1f41854569bb91b6264d6bdd12f3932c5869c43
ovirt-machine-controllers git 5d708631 sha256:5599b26773b15f423e08e2bfa607f33e887808b6a147bcf5e917613135489eb2
pod git 03a907c6 sha256:4f63b38bf99ea18ebb2638a6bfef329d556c98a4667ddba4fcb928b5477dbf88
powervs-block-csi-driver git 988f7109 sha256:7102daeaba10741061120fda1e1475add56ba9ca0f321ac8887adce45bf63e14
powervs-block-csi-driver-operator git 7436369a sha256:6e022860aaf9c26660126e867fec183762fadb47d9874f444a5a087c6a473bf6
powervs-cloud-controller-manager git 19cf1d3f sha256:3d72fed274b5f4d04d9f61af6770370120a04e8eed5066b0d7fbffef0e449c7c
prom-label-proxy git af40ed09 sha256:0d7dda84427ca57dd03ef2301e5963a54572adfcfdcb3a9492bb6b5794baadd4
prometheus-alertmanager git e3725166 sha256:0086fde95354e0da6b47b60a5231536b36971b519fbca4d642561a8fa5dec49f
prometheus-config-reloader git a4b845a7 sha256:cfcec2e9408de56966a49ea2eb1731587eeed3b330dd0d0ee3d2352dc749566d
prometheus-node-exporter git 5ee0a9d9 sha256:563c7c41ea3921a02798ddc391c49f0f105c18ccd3253f02b5cfe01af34e1064
prometheus-operator git a4b845a7 sha256:fa644562f9f3adf10da0739c0c1992e3bb63d858975eb3795ef827a54125ea1d
prometheus-operator-admission-webhook git a4b845a7 sha256:b3b0ec61024905609f6b3a033f214b65c97e92f8b79f962b3323946fb6e14ce6
rhel-coreos sha256:62286ce73b762a6a157907090731d8b9069f10d661518c330c99ed2d74e27765
rhel-coreos-extensions sha256:59370bc82204d1233b6b513345f12a974909b8b5e116c21642bea38a0236eea8
route-controller-manager git 1a5e72f4 sha256:0e60900fed7eb2a199b339b0895590cd1535247b41703fced1e73822dc2d3c0d
service-ca-operator git 3c3f82f7 sha256:d91c6182bd03933ba0eae3d7b9fd45abf347d05dbfd9252505552077e5374230
telemeter git 1f726816 sha256:c78c909806d175c243a31149f5110a6adea9a9cad026e0e565de56e360fb91ec
thanos git a2671250 sha256:571bea7747c2609f5e285a4ce2e78616dcdb38e66b7d02e8b90b7cb4b189a649
tools git 44b3ac26 sha256:7d0c5d35826439fcfa471f775e9658817b4a3ffce11d6cc4429aa9d1a83ee4dd
vsphere-cloud-controller-manager git efaed5cd sha256:6b4771f18ab196aeaf295388edfcf5728d5bd535a5344f8a2be4e85d634de1cd
vsphere-csi-driver-operator git 5d5105f9 sha256:dd10db1602b0667c287bddb86039fa2dc54bb4f285b31b755d50044b83b0e266
vsphere-problem-detector git a9c08425 sha256:ee8e7a9822e75b3c8486a425add350f392aca2f48eed433f00f87f838d16574d

agent-installer-api-server

OCPBUGS-58632, OCPBUGS-58637: Bump glog to v1.2.5 in release-4.14 (#7906) #7906
OCPBUGS-53691: Bump jwt to 4.5.2 in release-4.14 (#7499) #7499
OCPBUGS-46941: OCPBUGS-46184: Bump golang.org/x/net to 0.33.0 (#7200) #7200
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58642: CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) #1194
OCPBUGS-53715: Bump jwt to 4.5.2 in release-4.14 (#1093) #1093
Bump golang.org/x/net to v0.33.0 (#1012) #1012
Full changelog

agent-installer-node-agent

OCPBUGS-58652, OCPBUGS-58657: Bump glog to v1.2.5 in release-4.14 (#1073) #1073
OCPBUGS-53707: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) #973
OCPBUGS-46955: Bump golang.org/x/net to 0.33.0 (#885) #885
Full changelog

aws-cluster-api-controllers

OCPBUGS-61944: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #574
OCPBUGS-58667, OCPBUGS-58672: bump github.com/golang/glog to v1.2.5 #563
Full changelog

aws-machine-controllers

OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #142
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-57111: Adds acr-credential-provider spec file and build script #144
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failures #95
Full changelog

azure-workload-identity-webhook

OCPBUGS-53795: github.com/golang-jwt/jwt/v4 v4.5.2 #35
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-62814: Release 4.14 bump terraform provider azurerm #10001
OCPBUGS-55193: data/manifests/bootkube/cvo-overrides: Default to eus-4.14 #9643
OCPBUGS-54323: Update upi references to api-internal #9609
OCPBUGS-54264: IBMCloud: Move to IBM TF openshift fork #9605
OCPBUGS-54260: vsphere-fix convert if only provided name #9602
OCPBUGS-52996: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9587
OCPBUGS-53210: PowerVS: remove system pools #9572
OCPBUGS-46606: Power VS: Create region-zone-sysType hierarchy #9331
OCPBUGS-48196: IBMCloud: Ignore failed VPC regions #9350
OCPBUGS-45464: add chrony.conf file when additional NTP sources are configured #9269
Full changelog

baremetal-machine-controllers

OCPBUGS-46643: Bump x/net to 0.33.0 #228
Full changelog

baremetal-operator

OCPBUGS-53337: BMO can expose any secret via BMCEventSubscription CRD #409
Full changelog

cloud-credential-operator

OCPBUGS-60975: ccoctl: aws to use proper issuer url on subsequent runs #911
OCPBUGS-58677: github.com/golang/glog v1.2.5 #895
OCPBUGS-53418: github.com/golang/glog v1.2.4 #845
OCPBUGS-53819: update github.com/golang-jwt/jwt #841
OCPBUGS-51542: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #830
OCPBUGS-47069: golang.org/x/net v0.33.0 #810
OCPBUGS-46487: Add AWS region to aws-pod-identity-webhook #801
OCPBUGS-45009: Add retry to ccoctl gcp create functions #791
OCPBUGS-45004: github.com/golang-jwt/jwt/v4 v4.5.1 #785
Full changelog

cluster-autoscaler

OCPBUGS-45150: [release-4.14] VPA: Update OWNERS file #327
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48211: Add unreadyNodeGracePeriod for allowing brief node hiccups #340
Full changelog

cluster-dns-operator

OCPBUGS-52500: [release-4.14] Add runbook_url for CoreDNSErrorsHigh #433
Full changelog

cluster-etcd-operator

OCPBUGS-53507: fix CVE-2025-30204 #1405
Full changelog

cluster-image-registry-operator

OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1229
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1224
OCPBUGS-51598: bump golang.org/x/oauth2 #1213
OCPBUGS-51312: ensure that storage names don’t end in dashes #1185
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50662: Increase waitForFallbackDegradedConditionTimeout #1807
Full changelog

cluster-machine-approver

OCPBUGS-46057: Ensure trailing dots on DNS names do not block serving cert auth #259
OCPBUGS-46057: Client internal DNS checks should ignore trailing dot #255
OCPBUGS-44774: Client internal DNS checks should be case insensitive #246
Full changelog

cluster-monitoring-operator

OCPBUGS-48368: Add new metrics for OpenShift logging telemetry #2556
OCPBUGS-44007: fix(monitoring-plugin): disable emitting nginx version on error pages #2520
Full changelog

cluster-network-operator

OCPBUGS-51170: Use applyconfigurations for updating network.oprerator status #2660
OCPBUGS-48323: Pass transit_switch_subnet options in ovnkube-node pod for single-zone #2617
OCPBUGS-42754: Set mount propagation to HostToContainer for /var/lib/kubelet #2521
OCPBUGS-47320: Pass transit_switch_subnet options in ovnkube-node pod #2607
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1276) #1276
Fix context deadlines in ExecCommandOnPod() (#1272) #1272
OCPBUGS-44506: Drop sched_migration_cost_ns setting (#1215) #1215
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48841: Add new team members to the OWNERS file #380
Full changelog

cluster-samples-operator

OCPBUGS-55655: Adding mutex to func createSamples on handler.go #635
OCPBUGS-54537: add rhdmalone to owners #624
OCPBUGS-49421: add shannon and aroyoredhat as owners #598
Full changelog

cluster-version-operator

OCPBUGS-50592: Set openshift.io/required-scc: privileged annotation in version pods #1151
OCPBUGS-45331: deps: bump golang.org/x/net to 0.31.0 #1120
OCPBUGS-44704: Fix desired before sync_worker’s work is initialized #1109
Full changelog

console

OCPBUGS-44158: bump dompurify to latest #15593
OCPBUGS-59998: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15464
OCPBUGS-58274: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15228
OCPBUGS-57099: Add all files to vendor regardless of gitignore #15135
OCPBUGS-55942: fix bug where operator appears twice #15033
OCPBUGS-55427: Add missing pipelines plugin name to known plugins #15005
OCPBUGS-39010: fix crash if helm chart metadata is nil #14198
OCPBUGS-53437: Show Observe section without PROMETHEUS and MONITORING flags #14892
OCPBUGS-54404: Update the monitoring topic used by the console team #14910
OCPBUGS-54167: fix run time error when no completed version exists #14899
OCPBUGS-51118: redirect to correct alert #14823
OCPBUGS-49753: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14711
OCPBUGS-46603: Unable to remove finally tasks in pipeline builder mode #14642
OCPBUGS-33145: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14370
OCPBUGS-45323: Use vCenterCluster value from CM as primary resource #14574
OCPBUGS-39368: Remove deprecated resources from spec of the Pipeline #14230
OCPBUGS-45283: Add IBM Block Storage CSI driver support for RWX #14569
OCPBUGS-44791: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14518
Full changelog

container-networking-plugins

OCPBUGS-56046: Check error returned by ipv6 SettleAddresses #193
OCPBUGS-46121: [4.14] cherry-pick containernetworking/plugins#997 #168
Full changelog

coredns

OCPBUGS-58713: [release-4.14] Bump github.com/golang/glog to v1.2.4 #139
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58887: CARRY: don’t ignore json files #343
OCPBUGS-52413: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #315
Full changelog

docker-builder

OCPBUGS-58140: S2I build cpu limits observed by assemble are limited to 1 cpu #476
OCPBUGS-42915, OCPBUGS-43297: Bump buildah to 1.33.12 #447
OCPBUGS-43190: runc library bump to 1.1.12 #438
OCPBUGS-48495: skipping some unit tests to avoid failures as they are duplicate #430
OCPBUGS-48477: Add team members to the OWNERS file #429
Full changelog

docker-registry

OCPBUGS-53651: bump jwt and oauth dependencies #434
Full changelog

gcp-machine-controllers

OCPBUGS-56194: Disable shielded VMs for non-UEFI disks #118
Full changelog

hypershift

OCPBUGS-61176: Add missing service network DNS entries to KAS cert #6742
OCPBUGS-57321: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 #6252
OCPBUGS-55936: [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… #6129
CNTRLPLANE-921: Konflux build pipeline service account migration #6080
CNTRLPLANE-921: Konflux build pipeline service account migration #6085
OCPBUGS-51802: Fix golang crypto dependency go.mod replacement #5996
OCPBUGS-53899: bump golang-jwt v4 #5909
OCPBUGS-53433: Prevent IgnitionServer from flooding the API server with patch requests #5878
OCPBUGS-51731, OCPBUGS-51802: Bump dependencies to OCP fork in backports #5899
Red Hat Konflux update control-plane-operator-4-14 #5953
ART-11792: update go mod dependency for konflux #5921
OCPBUGS-53314: Fix IsIPv4 function identifying also addresses instead of CIDRs #5867
OCPBUGS-45559: Add Network Policies for Konnectivity server and Ignition server proxy #5816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 #5730
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5725
chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5687
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 #5681
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5688
OCPBUGS-50700: add region to AWS creds passed to operators managed by CPO #5668
NO-JIRA: Red Hat Konflux update control-plane-operator-4-14 #5339
OCPBUGS-47630: Separate CPO containerfiles #5619
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 #5538
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 #5537
OCPBUGS-49405: add ValidIDPConfiguration condition to report IDP config issues #5520
NO-JIRA: chore: update konflux references & bump up go version to 1.20 #5517
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) #5444
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) #5430
NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net #5372
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) #5331
NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) #5330
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned #5308
OCPBUGS-44279: Configure OAuth https proxy to dial cloud endpoints directly #5067
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) #5162
NO-JIRA: chore(deps): update konflux references (release-4.14) #5145
NO-JIRA: chore(deps): update konflux references (release-4.14) #5121
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) #5105
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58738: bump github.com/golang/glog to v1.2.4 #109
OCPBUGS-56065: tech debt: rework vendor patches #93
OCPBUGS-53907: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #86
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59791: [IBM VPC] set offlineExpansion to false in e2e test manifest #151
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56065: tech debt: rework vendor patches #50
OCPBUGS-53539: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #46
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51816: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #123
OCPBUGS-36077: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.14 #88
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36083: Bump dependency for CVE #57
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1059) #1059
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1058) #1058
Full changelog

ironic

OCPBUGS-48147, OCPBUGS-48594: Bump jinja2 to 3.0.1-6.el9.2 #625
Full changelog

ironic-static-ip-manager

OCPBUGS-49890: Fix subnet validation #50
Full changelog

kube-proxy, sdn

OCPBUGS-54991: Handle openshift-host-network namespace as special when it modifies #655
OCPBUGS-46536: Bump openvswitch #647
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). #229
Full changelog

machine-api-operator

OCPBUGS-53296: add image/read permissions #1350
OCPBUGS-48245: VSphere: Handle cloned instance with lost taskID #1322
OCPBUGS-47659: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1318
Full changelog

machine-config-operator

OCPBUGS-57341: Do not enable on-prem-resolv-prepender.path for UPI #5114
OCPBUGS-43743: Soften haproxy timeout for kubeapi probe #4664
OCPBUGS-54228: Update ObservedGeneration in KubeletConfig #4950
OCPBUGS-50631: Add clarification to invalid maxUnavailable alert #4848
OCPBUGS-48801: Wait for all subcontrollers #4808
OCPBUGS-46057: Remove trailing periods from AWS provided hostnames #4747
OCPBUGS-45271: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4725
Full changelog

machine-os-images

OCPBUGS-54171: Change rhcos release browser url #59
Full changelog

monitoring-plugin

OCPBUGS-44392: fix cross-spawn vulnerable dependency #278
Full changelog

multus-admission-controller

OCPBUGS-58763: Bump github.com/golang/glog to v1.2.4 #105
Full changelog

multus-cni

OCPBUGS-48160: [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket #262
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55620: Fixes leftover podref issue #367
Full changelog

must-gather

OCPBUGS-42971: Collect etcd object count #457
OCPBUGS-48084: Update owners #475
OCPBUGS-48058: Support gathering IPsec data #472
Full changelog

network-metrics-daemon

OCPBUGS-58778: Bump github.com/golang/glog to v1.2.4 (#115) #115
OCPBUGS-60394: Replace e2e test image (#128) #128
swtich golint install method (#127) #127
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-23873: fix for CVE-2023-47108 #43
OCPBUGS-17304, OCPBUGS-20899: bump golang.org/x/net to v0.17.0 #39
Full changelog

nutanix-machine-controllers

OCPBUGS-47265: fixing CVE-2024-45338 #116
OCPBUGS-51852: Fixing CVE-2025-22868 #108
OCPBUGS-17305: bump golang.org/x/net to 0.17.0 #85
Full changelog

oc-mirror

changes the owners file (#1013) #1013
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1023) #1023
Full changelog

openshift-apiserver

OCPBUGS-56613: Fix image reference in TestImageStreamImportQuayIO #518
OCPBUGS-50477: Pass expected type to deploymentconfig/scale object validation. #497
Full changelog

openshift-controller-manager

OCPBUGS-57940: Set node-pullsecrets volume to read-only to protect image pull credentials #398
OCPBUGS-56951: Empty proxy variables are causing issues during the build #386
OCPBUGS-48480: Add team members to the OWNERS file #360
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61469: [release-4.14] Add NetworkPolicy as a supported kind #1052
OCPBUGS-61390: [4.14] e2e stability fixes #1085
OCPBUGS-46927, OCPBUGS-46934, OCPBUGS-47314: x/net bump to v0.34.0 [release-4.14] #941
OCPBUGS-46595: CRD upgrade existing CR validation fix (#3442) #921
OCPBUGS-45080: SSA for Services and ClusterRoleBindings #905
Full changelog

operator-marketplace

OCPBUGS-62222: Remove Expect func so that the test case can use the retry logic #673
OCPBUGS-49427: Upgrade golang.org/x/net [release-4.14] #589
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-59872: Dockerfile: Remove ovs version pinning #2695
OCPBUGS-57102: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 #2590
OCPBUGS-56420: Update to FDP25.A.1 24.03.5-40. #2574
OCPBUGS-48522: Let OVN-northd bind remote ports #2418
OCPBUGS-54732: Dockerfile.base: bump OVS version to 3.3 #2511
OCPBUGS-50584: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2455
OCPBUGS-45096: pin libreswan to 4.6-3.el9_0.3 #2368
OCPBUGS-44784: Bump ovs to 3.1.0-137 #2360
OCPBUGS-44793: Delete EgressIP LRP stale nexthops when node is not found #2361
OCPBUGS-42944: Fix egress gateway pod cleanup for remote zone pods. #2356
Full changelog

powervs-machine-controllers

OCPBUGS-54754: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.14 #116
Full changelog

prometheus

OCPBUGS-43670: fix(discovery): Handle cache.DeletedFinalStateUnknown … #239
Full changelog

tests

OCPBUGS-61233: images/tests: Remove rteval #30208
OCPBUGS-55747: [build] Ensure Git Clone Does Not Run Privileged #29758
OCPBUGS-54770: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29665
OCPBUGS-52583: Use payload pullspec for image info test #29591
OCPBUGS-51363: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29567
OCPBUGS-51044: Add/remove team members to the OWNERS file for Builds #29554
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61655: Fix unit tests #74
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-51045: Prevent node cache update during attach & detach #139
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github