# 4.14.8

Created: 2024-01-04 09:32:14 +0000 UTC

Image Digest: `sha256:073a4e46289be25e2a05f5264c8f1d697410db66b960c9ceeddebd1c61e58717`

Promoted from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-01-03-152035


## Changes from 4.14.7

### Components

* Kubernetes 1.27.8
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202312132152-0 to 414.92.202312191502-0


### Rebuilt images without code change

* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [ad853769](https://github.com/openshift/agent-installer-utils/commit/ad8537697818870b53b6262041f0dfa78a3b41c2) `sha256:adebb76821e84a04fc1a26091e17036644bc56e53e85a3cd1fbfe554c989bd63`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:75f0741046ecfb687173533f5f4008a4b65442a98163bb0be88421963655fe31`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:6ba20b57eef50f8cee16212722928402d2cf33a59501b9aef38d5be1a745d68e`
* machine-os-content `sha256:0c775724df42e5712e0634ecb2cab512dd3288bba1648d33512b67a7d76b7c33`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [d3a4a6c3](https://github.com/openshift/machine-os-images/commit/d3a4a6c3b46e26fa260de80465b45879311e23c4) `sha256:93c5f7502b7b395083c0a361b1e966ce5f60ff79294147077cc82a77d644b1be`
* [network-tools](https://github.com/openshift/network-tools) git [a1dc6afd](https://github.com/openshift/network-tools/commit/a1dc6afd7c96374babe7fd11b3c236fcc5d7618a) `sha256:9833aaa8ef64abfd5d456f8be81fc67d4ed5e2fbce70fe5bd2abac45b622ff4b`
* rhel-coreos `sha256:c23737c7c479780e144b8c4a6c40a2fae33a74de189e71d46908d0d7addf62a0`
* rhel-coreos-extensions `sha256:05ada174630c103130fe785e43c0d3eecd326986626af870072205fb359c70ca`


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/8ba0b37a45510404a842d6dbd84d40a18008e81d)

* [OCPBUGS-21255](https://issues.redhat.com/browse/OCPBUGS-21255): Bump golang.org/x/net to v0.18.0 [#38](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/38)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8c532d2e64aa0f2fc30e49d658a47426fab38cb3...8ba0b37a45510404a842d6dbd84d40a18008e81d)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/557c4f4617d45e50127363e34d4512b59e8c8bb6)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#109](https://github.com/openshift/azure-disk-csi-driver-operator/pull/109)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/3e2ddb326b30b0a4bf482b2869beee2ffdf8695b...557c4f4617d45e50127363e34d4512b59e8c8bb6)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/96fab8160e575991c1f50101bf1ec8bb0259165e)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#83](https://github.com/openshift/azure-file-csi-driver-operator/pull/83)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/43838ae6c329e7d818c19ec59dfba5abde7535f6...96fab8160e575991c1f50101bf1ec8bb0259165e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/a3cbb199faaa440a9d7e130f35b6be83f912aef9)

* [OCPBUGS-22771](https://issues.redhat.com/browse/OCPBUGS-22771): aws: use security groups from defaultMachinePlatform [#7658](https://github.com/openshift/installer/pull/7658)
* [OCPBUGS-24489](https://issues.redhat.com/browse/OCPBUGS-24489): baremetal: populate customDeploy in advance [#7802](https://github.com/openshift/installer/pull/7802)
* [OCPBUGS-22770](https://issues.redhat.com/browse/OCPBUGS-22770): destroy: gcp: fix destroying regional disks [#7657](https://github.com/openshift/installer/pull/7657)
* [Full changelog](https://github.com/openshift/installer/compare/619e87d9147fe606b95c7a5e5bf14bc10849691e...a3cbb199faaa440a9d7e130f35b6be83f912aef9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/fba5608095b60438575339bd406c7a9ed40995ae)

* [OCPBUGS-25275](https://issues.redhat.com/browse/OCPBUGS-25275): Azure Workload Identity info in CredsRequests creates a Secret [#643](https://github.com/openshift/cloud-credential-operator/pull/643)
* [OCPBUGS-24346](https://issues.redhat.com/browse/OCPBUGS-24346): Discover AWS dns suffix from partition and region. [#635](https://github.com/openshift/cloud-credential-operator/pull/635)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/549cff9de8bc7a7bcf12eaa286bac04a7fc0b2f7...fba5608095b60438575339bd406c7a9ed40995ae)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/2a07e2dc098b9bea4e3e27279c692da10a6a519e)

* [OCPBUGS-25384](https://issues.redhat.com/browse/OCPBUGS-25384): psa cluster fleet evaluation [#1600](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1600)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/37fc6f91227f01076cbdc48e2b9965da10793862...2a07e2dc098b9bea4e3e27279c692da10a6a519e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/2d7ced4536c90a4c848ae9a67caf4c0766cfde78)

* [OCPBUGS-24320](https://issues.redhat.com/browse/OCPBUGS-24320): Add apbroute/status patch rights for ovnkube-node to update status [#2143](https://github.com/openshift/cluster-network-operator/pull/2143)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0ede33d163bc29ae52661d9e6db4838452a104c1...2d7ced4536c90a4c848ae9a67caf4c0766cfde78)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/7387b0e125b76ac8ddf1f4e94035b8f313972e0d)

* [OCPBUGS-25671](https://issues.redhat.com/browse/OCPBUGS-25671): rps: fix mask update for SR-IOV devices (#891) [#891](https://github.com/openshift/cluster-node-tuning-operator/pull/891)
* [OCPBUGS-18640](https://issues.redhat.com/browse/OCPBUGS-18640): Fix Racing Machine Configs and add Day 0 Support (#854) (#871) [#854](https://github.com/openshift/cluster-node-tuning-operator/pull/854)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d63bf046d029ee3195128ad4b31255ce788690e8...7387b0e125b76ac8ddf1f4e94035b8f313972e0d)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/0dbbb6132ced379602040731ff889eebb4202e73)

* [OCPBUGS-25481](https://issues.redhat.com/browse/OCPBUGS-25481): NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#41](https://github.com/openshift/cluster-olm-operator/pull/41)
* [OCPBUGS-22581](https://issues.redhat.com/browse/OCPBUGS-22581): [release-4.14] OCPBUGS-24652: Bump k8s dependencies [#38](https://github.com/openshift/cluster-olm-operator/pull/38)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/9e05f328825215a8ad58c9023c0f9d62c843c5aa...0dbbb6132ced379602040731ff889eebb4202e73)


### [console](https://github.com/openshift/console/tree/52c0b1598989cea2264a4dda1372a91bcd6647ec)

* [OCPBUGS-24349](https://issues.redhat.com/browse/OCPBUGS-24349): Fix crash when ArtifactHub Task has no version [#13399](https://github.com/openshift/console/pull/13399)
* [OCPBUGS-25397](https://issues.redhat.com/browse/OCPBUGS-25397): fix runtime error on Node details Overview when Machin… [#13446](https://github.com/openshift/console/pull/13446)
* [OCPBUGS-23771](https://issues.redhat.com/browse/OCPBUGS-23771): Fix for yaml editor that crashes with MCE and ACM plugins enabled [#13360](https://github.com/openshift/console/pull/13360)
* [OCPBUGS-24667](https://issues.redhat.com/browse/OCPBUGS-24667): Fix plugin proxy handler [#13425](https://github.com/openshift/console/pull/13425)
* [OCPBUGS-24474](https://issues.redhat.com/browse/OCPBUGS-24474): S2I Build Wizard should check for Containerfile in addition to Dockerfile [#13415](https://github.com/openshift/console/pull/13415)
* [Full changelog](https://github.com/openshift/console/compare/5add6734a615addaf4d9c389210d3c227c376ec2...52c0b1598989cea2264a4dda1372a91bcd6647ec)


### [console-operator](https://github.com/openshift/console-operator/tree/a5176b4e8454e5d1d28023d77ddbad880db99168)

* [OCPBUGS-23968](https://issues.redhat.com/browse/OCPBUGS-23968): Disable route controller health check for NLB setup [#817](https://github.com/openshift/console-operator/pull/817)
* [Full changelog](https://github.com/openshift/console-operator/compare/b421447a2d64d1978d3029896fc39c96ea774385...a5176b4e8454e5d1d28023d77ddbad880db99168)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/a80805c456a51f78dd561801e2721d9f5596eca9)

* [OCPBUGS-25804](https://issues.redhat.com/browse/OCPBUGS-25804): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 [#247](https://github.com/openshift/cloud-provider-openstack/pull/247)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/af51129010209b42d1b298e410a3d26a7279b450...a80805c456a51f78dd561801e2721d9f5596eca9)


### [hypershift](https://github.com/openshift/hypershift/tree/9d4f634ad9edfcc529e6c8daa270d713059e55da)

* [OCPBUGS-12720](https://issues.redhat.com/browse/OCPBUGS-12720): Updating hypershift images to be consistent with ART [#2467](https://github.com/openshift/hypershift/pull/2467)
* [OCPBUGS-24627](https://issues.redhat.com/browse/OCPBUGS-24627): unset ServiceAccount on ignition-server-proxy [#3295](https://github.com/openshift/hypershift/pull/3295)
* [Full changelog](https://github.com/openshift/hypershift/compare/792a93b090d10995f3a482897a5f5003a85c9d52...9d4f634ad9edfcc529e6c8daa270d713059e55da)


### [ironic](https://github.com/openshift/ironic-image/tree/bd013d93f9e968f7893665644415c4e67b7a2a1a)

* [OCPBUGS-19884](https://issues.redhat.com/browse/OCPBUGS-19884): update Ironic to include secure boot fixes [#445](https://github.com/openshift/ironic-image/pull/445)
* [Full changelog](https://github.com/openshift/ironic-image/compare/30c987f1f1ab7683202cd365d75c7a50d456e773...bd013d93f9e968f7893665644415c4e67b7a2a1a)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/66340dfefda40211a0bd33b1f42a625f666cf1bf)

* [OCPBUGS-25685](https://issues.redhat.com/browse/OCPBUGS-25685): Relax packages requirements [#103](https://github.com/openshift/ironic-agent-image/pull/103)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/979149f6171a232355564ebc63dd258390b29c20...66340dfefda40211a0bd33b1f42a625f666cf1bf)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a0a1b5a635edc33eba73ada9a9a74a9bdc79711b)

* [OCPBUGS-24664](https://issues.redhat.com/browse/OCPBUGS-24664): disable query link for non metric-based alerts [#82](https://github.com/openshift/monitoring-plugin/pull/82)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/87571978825e63392a56f6920e068af3a71cda6e...a0a1b5a635edc33eba73ada9a9a74a9bdc79711b)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/058c3324517b7a043a823e203bf6b282de5e3b8f)

* [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#766) [#766](https://github.com/openshift/oc-mirror/pull/766)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a9d1320cb1150a1aa25a2e67eb8bb2042fb8c9ac...058c3324517b7a043a823e203bf6b282de5e3b8f)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/d714b463a400b2138af5d589a45bddca2404c298)

* [OCPBUGS-22616](https://issues.redhat.com/browse/OCPBUGS-22616): [release-4.14] Bump go.opentelemetry.io dependencies [#58](https://github.com/openshift/operator-framework-operator-controller/pull/58)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/17343293267cad10f074fbe155c7fa31ed6b9336...d714b463a400b2138af5d589a45bddca2404c298)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8114b59e7f4548167e942fdcf6a96a60f14b6327)

* [OCPBUGS-25746](https://issues.redhat.com/browse/OCPBUGS-25746), [OCPBUGS-25747](https://issues.redhat.com/browse/OCPBUGS-25747): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1996](https://github.com/openshift/ovn-kubernetes/pull/1996)
* [OCPBUGS-24320](https://issues.redhat.com/browse/OCPBUGS-24320): APB status not updated when fails to process during the first reconciliations [#1968](https://github.com/openshift/ovn-kubernetes/pull/1968)
* [OCPBUGS-23257](https://issues.redhat.com/browse/OCPBUGS-23257): Update leaderelection config to allow retries [#1955](https://github.com/openshift/ovn-kubernetes/pull/1955)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0d0b66f68cdf8609e1b316fd2f4162603eb0b80f...8114b59e7f4548167e942fdcf6a96a60f14b6327)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/8ecfd7fd6a201844bb9a926146db70468345852b)

* [OCPBUGS-25980](https://issues.redhat.com/browse/OCPBUGS-25980): Rebase with upstream: Fix snyk code issue: Path Traversal [#72](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/90e87d7c6b2c5d05c005c40271f57443eee6269c...8ecfd7fd6a201844bb9a926146db70468345852b)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/5d2d9d65c6763829c92856cc9a0ed2ebecfc2c55)

* [OCPBUGS-25715](https://issues.redhat.com/browse/OCPBUGS-25715): snyk: ignore vendor dir [#60](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/60)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a33b6b1224ed41791d63cf34e17a33e916818cd7...5d2d9d65c6763829c92856cc9a0ed2ebecfc2c55)