4.14.13

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.13-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Failed (3 retries) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.26, 4.13.27, 4.13.28, 4.13.30, 4.14.3, 4.14.5, 4.14.7, 4.14.8

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.6

Created: 2024-02-15 11:00:39 +0000 UTC

Image Digest: sha256:ff004c122db9d494abedc1630ef5e2e535cc4529b3450ff58aaacf6b6cbba30c

Release 4.14.13 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-02-14-173434

Components

Kubernetes upgraded from 1.27.8 to 1.27.10
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202312011602-0 to 414.92.202402140225-0 (diff)

Rebuilt images without code change

agent-installer-csr-approver git 02dc1175 sha256:12145827bb6e0325a4b0ed1eb7e550b7efea835f83ca7a19ee3deb65dbafa96d
agent-installer-node-agent git e438a5e9 sha256:774436edbf2aaf8797146410a895cb7d1269baf588385572059c74f89a49aba0
agent-installer-orchestrator git 02dc1175 sha256:79e97d8cbd27e2c7402f7e016de97ca2b1f4be27bd52a981a27e7a2132be1ef4
agent-installer-utils git ad853769 sha256:e33378b4d794efda6a44534ed667b319e830a40c1b47d758ecb301be43c725d5
alibaba-cloud-csi-driver git 3dc363d3 sha256:b89e9fdf5964ac869647d126a6427cc1e49a2cb7b7aa8c1a45c38f4c3e0e9013
alibaba-machine-controllers git 27f105d3 sha256:a9570bf8ace629f0ac48db2a658a94ea3faea54116479fb94bccc777a4e2507b
apiserver-network-proxy git 3362d673 sha256:5940ce8f23a3f6a51c636c0a7ef233e295a587459e7403d81e7ee7e170786af1
aws-cluster-api-controllers git a7518d12 sha256:3ab7a5d33d00dbae2e0530ed5104347442c8b8d969376926d9360001d5fc8069
aws-ebs-csi-driver git 2e2e2774 sha256:13a3d4e48eba096706ad94eaa8f9e86f166583f86b81f6cb47a95ad0f8ffc97b
aws-machine-controllers git e292817c sha256:0cc7e8696ffc1cce8cb3763ea15ab9195475ea58e48beb48322ccf35446f0fda
aws-pod-identity-webhook git ad7aa0ae sha256:2484dc92db75b239afd63843db34c960c6fe8946c89017035c01e0e206435b43
azure-cloud-controller-manager git f0e7cbbc sha256:47e50e984e17b9145db00bb9cce84b6fbcac48428086335cdb218cea4fae84d2
azure-cloud-node-manager git f0e7cbbc sha256:a485d30424308564b01a51f9b240a123e6be4f14f2d2e35cf9727844c5ca5afa
azure-cluster-api-controllers git 7ad2773c sha256:7b2eaa4c9331cb9f4c1bb20ed91e5ee3f7b70f600d1289a3976cf991bb0a09e9
azure-disk-csi-driver git b19eec11 sha256:42c89e3d3b4c22f95f248c3445718f9fe1271d0b28b2320c43e650ce50568f63
azure-file-csi-driver git f401f536 sha256:e009e49a0deaeed8a35a23aeb7b67a563308d28f0429f8f45cf7760979fd83f4
baremetal-machine-controllers git 412acb3c sha256:f1f6726d9cf52f6361d644296109b2bd5a6dff3fcc7a432c14d6a3117d685fb8
cloud-network-config-controller git 9cb1bbd8 sha256:07b0757913bddedeb2108597bd002d1e77ef76cdcb1729ad862266d01cefe6d2
cluster-authentication-operator git 9ad3782e sha256:a993c31a6a62dd4ecda9004f663f7f9a8c90d59940bbd6e24454f7ce72b7bd61
cluster-autoscaler git 0822c7b7 sha256:48b59fdbf170649dbfd32db2d9a87fc7ae48d08bd2efa58593a612ab923c8705
cluster-baremetal-operator git 270579c6 sha256:1455bcfbdd4e81f3a8e601ed29d498bd490ef3ca67653300be2c6389feab842c
cluster-bootstrap git 93fba13f sha256:6bafe651d11b093f69f7c5d4036dfae3f20092ce52e6deb47af5272ec8ff653d
cluster-capi-controllers git ae83c553 sha256:b2a7ebdd562a8b113fa0c4d3a35468ca40c1dbd8c78125f69192f6771f738a25
cluster-capi-operator git b4c4fb13 sha256:c3d742b4d915bbb7f40411551edb4b9760d1748611eab3c6b63e5c21d923b76a
cluster-control-plane-machine-set-operator git 0455a742 sha256:3c6bd6406d844f5d7d7838184cc354e03f2b2532ef975928bedf718d2093ad4e
cluster-csi-snapshot-controller-operator git 73dc400f sha256:45ca3243a8ddd6230f9d1c25f55a924f57f87180523329f8d991f6b94ca0ba48
cluster-dns-operator git 5553a226 sha256:187767838f9d7dbf12acf01279ac4fc986a84522b7ce328888c8548a93bdfe00
cluster-image-registry-operator git d27b918c sha256:a7d32c1d79c48e9b17b86accca7d657351f3dc81ed0981032b0aa7ba847254ec
cluster-ingress-operator git d876f5ab sha256:930b5bd27584df4fb521c5ec0377603e51f1d633a3f99dc3d3a833fd600fc35a
cluster-kube-cluster-api-operator git b287d08b sha256:87856da4ee5bf7914f4de930db200fc3afabf5d1e103c58858d5c0ee6978f4d0
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:332d30e0c9e25e7453c38cd5f5940352856c029abb45e916f3e463319472b69d
cluster-openshift-apiserver-operator git 8bd86026 sha256:7e3fec226fb5deeeff16b7e329c8241bd6d0cb2b7dc6bb9f357d6f7b077431f8
cluster-platform-operators-manager git 08fb27e7 sha256:b49d43221c742dc4f89be9ebe2b9a26d23629fd13263e57d0f9ad0b254fc4bd2
cluster-policy-controller git 219f6f6f sha256:9de519211a57ec3ed86046d9ae65aaa45bec0bab62ac7c6cf187500d0096904b
cluster-samples-operator git b5396eb1 sha256:4c30a4b506a04d6a2d22795f0e95b47bf8a30c1ccd4f778e65fb8e942140d7b5
cluster-update-keys git e0c26a08 sha256:f891189e69d54c2d7499166184205183ab4e9a7a7c75c692fd723b1857aec0bf
configmap-reloader git 716a0c33 sha256:7e233e636f20f447b79de8dd859ec78b7ecd3683e4bbbc33b2859dc5f33ab3ff
container-networking-plugins git 7295a5e0 sha256:38ff2b79106b412567008136569e1fe9eccab3b6eae7b19d8c47c9bc2cf1f99a
csi-driver-nfs git e1dd4537 sha256:0c6686268f8b90fe3a89f644b20b57698e2ae432827a7f4a46d8ebfa9ba414eb
csi-external-attacher git 06e8ce0d sha256:866a05ff4f4163933cd3ba6d9c1eaf1bca89761f7540a8373cbef0874fce41fd
csi-external-provisioner git 78a710fd sha256:df809b556d527a3c506cbd768b8baea76e4ac17de8fca3debeddc24c35b1edbe
csi-external-resizer git 59a701a4 sha256:c375b70e74baa4562972049170f613dee4d4eeb6f8c163a3b8116a4931342eac
csi-external-snapshotter git 0bf92766 sha256:b9d0a828722870d6e3e7487daa457c4eab72a5382e358eef28b59dc295dfa21e
csi-livenessprobe git a9bcbde1 sha256:e34214fdede95af0661d7169292848568d1cf1226019ae12ccb667e0f6826952
csi-node-driver-registrar git 9dcaa7f5 sha256:582de6b2d7d410dda3caea9ee2993cef4125be24a4205ed9c6c0c55649eef429
csi-snapshot-controller git 0bf92766 sha256:63583b28d051006bd1d8ceccce2916be107ae99fb6a4256f138e2031ff46f3e7
csi-snapshot-validation-webhook git 0bf92766 sha256:855cc97e238bad594aa1f070e25e01d31e3e080242b3bf2ad081ac925c864f7b
docker-registry git 690b5a21 sha256:0437b6e70a2364cca080fe64e5b481a1f397b433f6e188423c9e47512120c178
driver-toolkit git cafed17b sha256:242a3c6d3736a6827b16cf403eabbf5b12eb5dd766575a5606b5e48e230bea77
egress-router-cni git afffdd45 sha256:bae1c43ad895bf85ea535042f71842b60148a25a0e356a081913bf67c83f5855
gcp-cloud-controller-manager git 09e96a91 sha256:607a6ba0ebe8f609093da1a9848a3846450f62f22004bf7bc48f45f2cf23d0b3
gcp-cluster-api-controllers git d99fb31a sha256:364e270189806e2a95d6a9edeeb02bab1da900b7dd8cb6dac608bb7a4c1e4c86
gcp-machine-controllers git a676e6b6 sha256:c6dffa9fd5bbe426be450f8ea3501a61b5ec0c820d57eb2c3f3f2ebd1d15587d
gcp-pd-csi-driver git 8a626fe5 sha256:b8ab61dad2f1a431a66b54cf4c7f4a90d30560352d83d1e89e560c2d7fb1ebd5
haproxy-router git b3af193f sha256:68c513e4be3224c418e14e665ad79fdaef130f67d8aceb365921be8fb2b9c209
ibm-vpc-block-csi-driver git 02471d96 sha256:9fbeab26d2defb41251903007cb37b877b550cc9375c64ab64a81fba6db4ca82
ibm-vpc-node-label-updater git 44a2b943 sha256:bfe0e55f41024a429ec397db9c9eea55210274195d5985484e58db450acd96af
ibmcloud-cluster-api-controllers git c62bc9d9 sha256:ae00c2c9d05f56e20b9af89bbb25a95113561bb3758cc76acb917fd19ddf9f0b
ibmcloud-machine-controllers git c28b2232 sha256:de09acea424be042bb795f4826f57111f3f741319bf81c2a8f242a86e5c61b15
ironic-machine-os-downloader git 7b56c306 sha256:1bf91a55df1f89c0195450219af8890ac8ca49f3da6b2b49fd44e9c7fdfd9ef4
ironic-static-ip-manager git c038d5a4 sha256:b3c7b9b2c5cc4ff54f3f43ca3abaef8342bd68f8c247c099b3ac5ae0595413be
k8s-prometheus-adapter git 801a912b sha256:c47e61a64f876da497c67a3ef5b18224ebc4b9009b3a3aa25bff130e39f64ce4
keepalived-ipfailover git f08cee33 sha256:d24879d39e10fcf00a7c28ab23de1d6cf0c433a1234ff34880f12642b75d4512
kube-proxy git 1a9befcb sha256:07b5c090f25b02accb727659326fa188f29c19f96a48f2d091dca8a8db16c03c
kube-rbac-proxy git 1a646b98 sha256:b3cc4a7529a6c70b983803c59ee744c5a0a989ca6f8c6eab15d041d96399df88
kube-state-metrics git db0c5499 sha256:21d620e7bb84d91c8d7144734e0cbe6e9c2fabfbc97cbcf67f38a112284defd3
kube-storage-version-migrator git 8558e14a sha256:7996d52f0a3e714a386fdb81c1ca1cfd226a9dae1a1cf08bbd7914c1bc45fbe6
kubevirt-cloud-controller-manager git 62ca8ad3 sha256:37e3cf2108a4f6c6ec669edbf817584db965b18105de54a75d147aeec73f380d
kubevirt-csi-driver git 831ff3eb sha256:f1fc3af50e9227f749aa0bfa6f148896e1bc970bff10ac33b3e3316076544d0f
kuryr-cni git 8926a294 sha256:b4b1ac7a836dd328ee23297bae4f8efcfb2723d26b9e4329daaa0b72b3a1b527
kuryr-controller git 8926a294 sha256:381bda849a9f3ebd6e71c1aabfd7938d6ebcc83f51b684e42083badfeb471044
libvirt-machine-controllers git 34dfccba sha256:3aacc25773107894934551d04311b8400d29f7413bf3af5395885a90703800e1
machine-os-content sha256:1cda06ee4d6544e67afe562cf3064cdf4753448bc6937b4f2da6e4c1ba596a9b
machine-os-images git d3a4a6c3 sha256:b5c3abc173df9dac763e757b6018a33f489bfd5df95c0833f5b638181551725a
multus-admission-controller git 5e74b0fa sha256:6bcc3dd736eb761f264064fb8b3d62e01acb54e0bfa13dfad1d27a0f98ef4a6f
multus-cni git 599223b8 sha256:27fb71a6cbae202f99d429f625a10a1bb30ebd3d79e7379297bd01d4bda25e75
multus-networkpolicy git cd6eae10 sha256:ba99168d056f016038c3b2d64d32d93a078648e1b9efcf6045cb38d4c82c855b
multus-route-override-cni git 078aee5c sha256:198f5a31c424606b1ea67581b132a51efe71c416c56ec7652f8fd445af44773f
must-gather git 833e1de9 sha256:6bbd98c7cb0b18d43e55ae378e5caecfcfb29590df348b44dff1ddce6c9ceb31
network-interface-bond-cni git 29f61f6b sha256:7afae9702bc149efe67fb2090704b0d57998b7f656c11d93a45f9a11a235c4b3
network-metrics-daemon git 69d0021a sha256:693fef5f95dd1facfdcb6df3514a001a425a6939676a53406734c3e49ebdbecb
network-tools git a1dc6afd sha256:96c7ff1a86e0e44bc2fcfc1c5879260aa8b04932683e2042276d61b41b6ce04d
nutanix-cloud-controller-manager git bc568865 sha256:19c56eda796c614fb0d535a74c676021cf6e1e12140d1ab0cf2f8ab129fa7848
nutanix-machine-controllers git 6f50b1ac sha256:9e2910c2f4335b28a4bae5f939a5fd9d3a50d13bcca7a8232dab13a2be796585
oauth-proxy git a4a2f270 sha256:652cc1022714aa53983339251d81d0610fba78c8b557dd4eedf831126ce3b51d
oauth-server git 35f4739f sha256:8fcc37da717ae1b769060b06fba7b5069521f996c026f4af9ece6c23721e1d44
openshift-state-metrics git dff4b0f4 sha256:b525633b0763c04c17171743e0992bc7d83d5ec5dd17eb37f09330f51bf09ca6
operator-marketplace git a367cea6 sha256:c6bd57a551785a478f5d46425c32ff49f73db06b592ed559113b00a65a3dc8d3
ovirt-csi-driver git f21b470f sha256:a32d36b1dc9935914e9596c7f57f9349c6daeba429382f664126e99a14a75662
ovirt-csi-driver-operator git 2fa33aa7 sha256:cf9c10652eff07210d60b66aa64f3b74b20687e20184cbb1573f82e74b4930ec
ovirt-machine-controllers git 5d708631 sha256:0b749a50c06b6d53975a85a36e951bbe83cff6bfdfff6b1eb834eeb12473cde1
prom-label-proxy git af40ed09 sha256:6b276343a22889b5a1c7aeee0a08a570bc2de94646c8fa6766b9a85503e56d94
prometheus git b7c61bcb sha256:20a7886fdf1b9c60bc94e52a87fa7d10947f7ea559c27e2982b253c3986a8fa4
prometheus-alertmanager git e3725166 sha256:aa6e8c201d94870dc6aa9814b195eb2faa3269d3344a74222b48e8e73cf09e55
prometheus-config-reloader git 73729eda sha256:2832461df403cdeec2323c45d5a64eb7c87b98288e0a5072e112825e0d0a86cb
prometheus-node-exporter git 5ee0a9d9 sha256:33835833fc124d5220af83ef4b85338c2bee24daee48eb0f775dfb39a742acd6
prometheus-operator git 73729eda sha256:136cb92af1cdbaa5d58870dd6b7f5ddcabbd592bd035f35f8a8188bff014b1b2
prometheus-operator-admission-webhook git 73729eda sha256:dbb516f5f882ca2f3602783b50a3aab7690a3defe7beb7e4b193aea4148b5951
rhel-coreos sha256:a655fd609a9cc764bacb74aeb73ecd54de5112043e7d6f39c6c5dee998e5be14
rhel-coreos-extensions sha256:d4a282597b9b60675663a931f668560e6e2d76b975fddcf8c7701b0e27fc66fa
route-controller-manager git 1a5e72f4 sha256:b40807acbd72ea6facc9aa8094d571fca708d8b0e437d12b04d4ba0fd02eddfc
sdn git 1a9befcb sha256:ac59d66362f1cebe713714e3ffff83a1d13b63997a6f29c921d02153e3318dc3
service-ca-operator git 3c3f82f7 sha256:8b27a584c2fd72a69c83f0803207821aedf97cb3a92c5e1e8cbc849218093a98
thanos git a2671250 sha256:32fef6d80275c0c1eb932e27ee6ee6ed284d961c61c1a7dfc287da78da4de429
vsphere-cloud-controller-manager git b04567f7 sha256:f1e0cf7ce555dd088fd4c7b64c1dee85221fb32996b736d86cdd41619aefecb4
vsphere-cluster-api-controllers git 72e998c3 sha256:9fa6b1f1cb12abc8b93273efcf816eb4ae95dcde828712c4eb91086210c184fa
vsphere-csi-driver git a5ed57f5 sha256:4eee55c7d083cfbb80d398580eefaa23dfcdec65b17c6f2ebea7e39db16c002f
vsphere-csi-driver-syncer git a5ed57f5 sha256:eefd5ec891ff211237c4a853b9ce8bc09cbda088585b4938970e3aa2bb860f9f

agent-installer-api-server

MGMT-15796: set CloudControllerManager to External for OCI (#5877) #5877
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21255: Bump golang.org/x/net to v0.18.0 #38
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
Full changelog

aws-cloud-controller-manager

OCPBUGS-23826: bump go.opentelemetry.io #67
OCPBUGS-27759: Adds ecr-credential-plugin .spec #71
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #109
Full changelog

azure-file-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #83
Full changelog

azure-machine-controllers

OCPBUGS-28745: Improving performance of VMs created in Azure #96
Full changelog

azure-workload-identity-webhook

OCPBUGS-21093: Upgrade golang/x/net for CVE-2023-39325 (4.14) #14
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-28929: [release-4.14] Bump containerd for vulnerability fix #7981
OCPBUGS-27419: Fix depreciated typo #7929
OCPBUGS-24521: set vmType in azure cloud config [release-4.14] #7804
OCPBUGS-23738: vSphere - when using RP network path is incorrect #7759
OCPBUGS-27241: baremetal: correct external_http_url for v6-only BMCs #7914
OCPBUGS-22315: bootstrap: Enable gatewayd units only on RHCOS #7628
OCPBUGS-23498: update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
OCPBUGS-20860: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887
OCPBUGS-22895: Do not generate azure-cloud-provider in manual mode for aro builds #7670
OCPBUGS-22771: aws: use security groups from defaultMachinePlatform #7658
OCPBUGS-24489: baremetal: populate customDeploy in advance #7802
OCPBUGS-22770: destroy: gcp: fix destroying regional disks #7657
Bug OCPBUGS-22776: OpenStack: Fix IPv6 address configuration for bootstrap #7660
OCPBUGS-22978: IBMCloud: Add eu-es region #7684
Full changelog

baremetal-operator

OCPBUGS-24489: Do not update instance_info and deploy_interface for active nodes #325
Full changelog

baremetal-runtimecfg

OCPBUGS-26928: Add .snyk file to ignore vendor and test files #294
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-25983: Remove deprecated password defaulting in default config flag #1646
OCPBUGS-24197: Add client version in must-gather summary #1607
OCPBUGS-24460: Overwrite template’s namespace with the explicit one #1616
Full changelog

cloud-credential-operator

OCPBUGS-29199: ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911: Resolve all outstanding snyk vulnerabilities #650
OCPBUGS-28382: Use cached clients to avoid client side throttling #666
OCPBUGS-27515: Write manifests when AWS IAM roles already exist. #659
OCPBUGS-26512: Use live client for metrics #647
OCPBUGS-25275: Azure Workload Identity info in CredsRequests creates a Secret #643
OCPBUGS-24346: Discover AWS dns suffix from partition and region. #635
Full changelog

cluster-autoscaler-operator

OCPBUGS-25749: Add Snyk file to exclude vendor directory on scan #308
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-26548: Adds CloudConfigTransformer for Azure #321
Full changelog

cluster-config-operator

NO-JIRA: add inert featuregate files to allow diff against later releases #398
Full changelog

cluster-etcd-operator

OCPBUGS-23571: Add annotation in the etcd-guard static pod for worklo… #1162
OCPBUGS-26214: fix device busy errors #1176
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-25384: psa cluster fleet evaluation #1600
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
OCPBUGS-27063: bump(library-go)=release-4.14 #787
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27022: bump(library-go)=release-4.14 #527
Full changelog

cluster-machine-approver

OCPBUGS-28745: Increase concurrent reconciles to 10 #228
Full changelog

cluster-monitoring-operator

OCPBUGS-27471: prevent plugin entry assets from caching #2241
OCPBUGS-25800: Wait for 3 (instead of 2) consecutive failing reconcil… #2216
OCPBUGS-27418: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2239
OCPBUGS-25799: Detect ipv4/ipv6 socket in pod ip for nginx conf #2215
OCPBUGS-25387: Add RHACM telemetry metric for 4.14 #2202
Full changelog

cluster-network-operator

OCPBUGS-29300: Update ingressconfig_controller to use field Manager #2266
OCPBUGS-28608: fix whereabouts conformance test failures #2235
NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858: [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
OCPBUGS-27013: HyperShift, network-node-identity: Check the deployment in the management cluster #2195
OCPBUGS-24326: adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
OCPBUGS-24037: remove all managed fields used by old manager #2112
OCPBUGS-24320: Add apbroute/status patch rights for ovnkube-node to update status #2143
OCPBUGS-22787, OCPBUGS-22788, OCPBUGS-22789: ovnkube: container scripts cleanup #2090
OCPBUGS-23371: hypershift, hosted clusters: enable multi-homing and multi-net features #2117
OCPBUGS-21717: Bump golang.org/x/net and github.com/openshift/library-go #2122
OCPBUGS-24633: ipsec add pluto restart #2152
Full changelog

cluster-node-tuning-operator

rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
OCPBUGS-26003: E2E: PPC Test cases (#905) #905
Make MC names deterministic (#903) #903
OCPBUGS-25671: rps: fix mask update for SR-IOV devices (#891) #891
OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) (#871) #854
OCPBUGS-24638: Do not set default RPS sysctl twice (#880) #880
Full changelog

cluster-olm-operator

OCPBUGS-25481: NO-ISSUE: Bump k8s.io/apiextensions-apiserver #41
OCPBUGS-22581: [release-4.14] OCPBUGS-24652: Bump k8s dependencies #38
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28951: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
Full changelog

cluster-storage-operator

OCPBUGS-28988: Allow vSphere CSI driver to be disabled #449
Full changelog

cluster-version-operator

OCPBUGS-27822: Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs #1021
OCPBUGS-27048: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
OCPBUGS-26207: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016
Full changelog

console

OCPBUGS-29100: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239: Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990: update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157: add additional check to determine if file is binary #13507
OCPBUGS-28635: Bump graphql-go to v1.3.0 #13553
OCPBUGS-27305: Copy response code from proxied plugin requests #13517
OCPBUGS-27851: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537
OCPBUGS-27350: Add Pipeline metrics tab using plugin #13520
OCPBUGS-26171: Set unlimited line width in YAML editor #13482
OCPBUGS-24640: Strip ‘Server’ header from proxy response #13423
OCPBUGS-25997: change Alertmanager form to create using matchers inst… #13478
OCPBUGS-24349: Fix crash when ArtifactHub Task has no version #13399
OCPBUGS-25397: fix runtime error on Node details Overview when Machin… #13446
OCPBUGS-23771: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13360
OCPBUGS-24667: Fix plugin proxy handler #13425
OCPBUGS-24474: S2I Build Wizard should check for Containerfile in addition to Dockerfile #13415
OCPBUGS-24432: fix filtering issues on Events #13413
OCPBUGS-24352: add access review for impersonate #13400
OCPBUGS-22240: Save also the location.search and .hash values in localStorage to restore them after login #13270
OCPBUGS-24293: ConsolePlugin metrics must no longer be grouped by the vendor #13391
OCPBUGS-24423: Searching for items in quick search is confusing #13412
Full changelog

console-operator

OCPBUGS-23968: Disable route controller health check for NLB setup #817
OCPBUGS-24293: ConsolePlugin metrics must no longer be grouped by the vendor #820
Full changelog

coredns

OCPBUGS-28200: UPSTREAM: 6277: openshift: Fix OCPBUGS-28200 #114
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

manage-security-groups: Only add SGs to LB members (#2455) #2455
Fix protocol case mismatch (tcp vs TCP) (#2320) #2320
Get IP addresses of neutron subports (#2306) #2306
Make manage-security-groups work with OVN (#2291) #2291
Delete sgs on reconfiguration (#2305) #2305
Optimize applyNodeSecurityGroupIDForLB() (#2293) #2293
Remove unused manila code (#2299) #2299
Use instanceIDFromProviderID() function (#2302) #2302
Remove filtering by device_owner. (#2304) #2304
Allocate array capacity in advance (#2297) #2297
Corrected the grammar (#2301) #2301
Delete unused SG rules with manage-security-groups (#2287) #2287
Improved the grammar in sidecarcompatibility.md (#2292) #2292
Added comments and arranged the variable names (#2290) #2290
occm cinder-csi securityContext (#2286) #2286
fixed Grammatical mistakes in barbican-kms-plugin (#2289) #2289
efactors and enhances the codebase of the cinder csi plugin (#2288) #2288
Wait for LB to be ACTIVE on HM update (#2280) #2280
(barbican-kms-plugin)Refactor and enhance Barbican KMS plugin codebase. (#2278) #2278
Fixed the typo in the load balancing section in the README (#2232) #2232
Fix image tag in manila csi e2e test (#2244) #2244
enable secret injection and common annotations (#2264) #2264
Update to gophercloud 1.4.0 (#2265) #2265
Replace call to Nova os-interfaces with direct Neutron call (#2250) #2250
add secret enabled option (#2239) #2239
Fix CSI spec versions (#2254) #2254
LoadBalancers: Remove dead SG code (#2248) #2248
Make ensureSecurityRule() safely idempotent (#2249) #2249
shrink image, remove unnecessary utils (#2233) (#2238) #2233
Doc: update statement about neutron lbaas removeal (#2236) #2236
add environment variable for timeout (#2235) #2235
Increase timeout for LB to get to ACTIVE state (#2223) #2223
Ignore proxies when calling Nova Metadata (#2218) #2218
add priorityClassName to openstack-cloud-controller-manager helm chart (#2210) #2210
Do not default Octavia provider to “octavia” (#2208) #2208
retry ubuntu image download on temp error (#2507) #2507
update k8s.io/kubernetes to v1.27.8 in go.mod (#2497) #2497
fix: octavia tlsContainerRef validation for barbican secrets (#2460) #2460
Full changelog

csi-driver-manila-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #219
OCPBUGS-23443: Fix selector for manila-csi-driver-controller-metrics service #211
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28952: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
OCPBUGS-25069, OCPBUGS-26309, OCPBUGS-26323: add snyk config file for SAST scan #163
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28957: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
OCPBUGS-26312: add snyk config file for SAST scank #97
Full changelog

docker-builder

OCPBUGS-28949: Replace ‘coreydaley’ with ‘sayan-biswas’ #379
Full changelog

etcd

OCPBUGS-24939: Rebase etcd 3.5.11 openshift 4.14 #235
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
Full changelog

hyperkube, pod

OCPBUGS-27369: Update to kubernetes 1.27.10 #1860
OCPBUGS-25813: Fix uncertain device in 4.14 #1830
UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 #1552
OCPBUGS-26006: Update to Kubernetes 1.27.9 #1838
Full changelog

hypershift

MULTIARCH-4084: Reduce the policy access scope to specific instance #3530
OCPBUGS-29206: Add GC knobs for KAS #3543
OCPBUGS-29187: node spread anti-affinity for HA HCP #3541
OCPBUGS-19956, OCPBUGS-28984, OCPBUGS-28985, OCPBUGS-28986, OCPBUGS-29000: Support Disconnected HCP #3520
OCPBUGS-29030: Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238: consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526: Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526: Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072: Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180, OCPBUGS-20547: Added network validations #3096
OCPBUGS-23997: add watch for HCP pullsecret to HCCO #3265
OCPBUGS-28249: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485
NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315: Add prestop to konnectiviy server #3268
OCPBUGS-24307: Set shutdown-delay-duration to 15s #3264
OCPBUGS-21795: change trusted bundle volume mount for CPO #3102
OCPBUGS-25217: Konnectivity agent update strategy #3308
OCPBUGS-26574: Set new condition on SG deletion. #3398
Update RHTAP references (release-4.14) #3402
Update RHTAP references (release-4.14) #3383
OCPBUGS-22360: Validate accessTokenInactivityTimeout >= 300s #3175
OCPBUGS-23936: Use correct kubeconfig in CCM and remove CCMs access t… #3232
OCPBUGS-12720: Updating hypershift images to be consistent with ART #2467
OCPBUGS-24627: unset ServiceAccount on ignition-server-proxy #3295
[Release 4.14] OCPBUGS-24556: Fix a bug on deletion of a hostedcluster #3290
OCPBUGS-24269: add CLI oauthclient #3272
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24665: Add Snyk file to exclude vendor directory on scan #65
OCPBUGS-21149: Bump golang.org/x/net to v0.18.0 #55
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
Full changelog

insights-operator

OCPBUGS-23962: adds helm information gather (#868) (#877) #868
Full changelog

ironic

OCPBUGS-27773: Update inspector package to fix LLDP unicode error #452
OCPBUGS-27193: Fix Inspector iPXE config for IPv6 addresses #448
OCPBUGS-19884: update Ironic to include secure boot fixes #445
Full changelog

ironic-agent

OCPBUGS-28554: Update to latest ironic-python-agent for bugfixes #107
OCPBUGS-25685: Relax packages requirements #103
Full changelog

machine-api-operator

OCPBUGS-28745: Add AddWithActuatorOpts to allow overriding Machine controller options #1214
OCPBUGS-24998: Add Snyk file to exclude vendor directory on scan #1191
OCPBUGS-24047: Update reference URL #1186
Full changelog

machine-config-operator

OCPBUGS-26072: Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379: fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384: daemon: allow the user to override drains on IR changes #4150
OCPBUGS-27759: Add Image Credential Provider flags for Kubelet on AWS #4144
[OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178: use *resource.Quantity to not automatically set 0 #4121
OCPBUGS-23089: Don’t retry node-ip show in resolv-prepender #4022
OCPBUGS-27362: Fix typo in AWS node env unit #4131
OCPBUGS-26500: crio: drop automatic image cleanup on upgrades #4105
OCPBUGS-26559: Azure Run ovs-configuration.service before dnsmasq.service #4109
OCPBUGS-26551: kubelet: fix kubelet labels #4107
OCPBUGS-24596: [release-4.14] execute cert related processes to ensure proper rotation #4063
OCPBUGS-24397: gcp-routes: don’t exit on crictl failures #4056
Full changelog

machine-image-customization-controller

OCPBUGS-24576: configurable ironic agent vlan creation #111
Full changelog

monitoring-plugin

OU-318: consider all metric keys to display all results on dashboards tables #99
OCPBUGS-24664: disable query link for non metric-based alerts #82
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27858: Enable reconciler configuration 4.14 #240
OCPBUGS-26553: Cherry pick fix assignment 4.14 #230
Full changelog

oauth-apiserver

OCPBUGS-21100: bump k8s.io (release-4.14) #100
OCPBUGS-27116: UPSTREAM: <carry>: retry etcd Unavailable errors #97
Full changelog

oc-mirror

OCPBUGS-28871: Capability to override default channel (#749) (#790) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#769) #769
OCPBUGS-23327: Fix MirrorToDisk of oci catalogs in hidden folders (#766) #766
Full changelog

olm-catalogd

OCPBUGS-27585, OCPBUGS-27670: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #40
Full changelog

olm-operator-controller

OCPBUGS-27590, OCPBUGS-27675: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #69
OCPBUGS-22616: [release-4.14] Bump go.opentelemetry.io dependencies #58
Full changelog

olm-rukpak

: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
Full changelog

openshift-apiserver

OCPBUGS-27104: UPSTREAM: <carry>: retry etcd Unavailable errors #412
Full changelog

openshift-controller-manager

OCPBUGS-28950: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-26460, OCPBUGS-26461: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #142
Full changelog

openstack-machine-api-provider

OCPBUGS-23202: Don’t build InstanceSpec during delete operations #95
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-27314: Don’t sync namespaces that have no subscriptions #675
OCPBUGS-27565, OCPBUGS-27570, OCPBUGS-27650, OCPBUGS-27655: bump go-git/v5 to 5.11.0 #677
OCPBUGS-27485: [CARRY] SSC RBAC #665
OCPBUGS-22538: bump otelhttp to 44.0 for api #647
OCPBUGS-22538: otelhttp bump [release-4.14] #632
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-29186: Wait for ovnkube controller to start before checking result error. #2067
OCPBUGS-29207: Ignore hybrid-overlay nodes from EgressIP controller #2062
OCPBUGS-25999: Prevent multiple encap-ips per single chassis #2037
OCPBUGS-28789: Fix LGW ETP=Local on IPv6 #2042
OCPBUGS-27925: dont quit if node does not have subnet annotation #2026
OCPBUGS-27256: Ensure session affinity cleanup on backend removal #2021
OCPBUGS-23395: Egressfirewall use port groups #1956
OCPBUGS-27243: CARRY: Updates owners and adds Surya #2019
OCPBUGS-25081: Update ACL syncer: make default deny acls filter more strict, #1981
OCPBUGS-26568: Synchronize node primary address update #2012
OCPBUGS-24326: APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field #1967
OCPBUGS-25903: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2003
OCPBUGS-25746, OCPBUGS-25747: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1996
OCPBUGS-24320: APB status not updated when fails to process during the first reconciliations #1968
OCPBUGS-23257: Update leaderelection config to allow retries #1955
OCPBUGS-23387: Ignore completed virt-launcher pods #1954
OCPBUGS-25087: Fragment oversized reply packets in LGW mode #1982
OCPBUGS-22735: OVNK/GW: Ignore headless services in syncServices #1970
OCPBUGS-24350: [release-4.14] fixes MTU configuration on gateway router #1969
Full changelog

powervs-block-csi-driver

OCPBUGS-25980: Rebase with upstream: Fix snyk code issue: Path Traversal #72
OCPBUGS-24713: synk: ignore vendor dir #60
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58
OCPBUGS-25715: snyk: ignore vendor dir #60
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #48
Full changelog

powervs-cloud-controller-manager

OCPBUGS-24727: UPSTREAM: <carry>: snyk code scan exclude vendor directory #54
Full changelog

powervs-machine-controllers

OCPBUGS-24730: snyk code scan exclude vendor directory #65
Full changelog

telemeter

OCPBUGS-22647: go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #494
Full changelog

tests

OCPBUGS-29182: updated timeout to 3 seconds to account for network timing issues #28578
OCPBUGS-29034: Replace ‘coreydaley’ with ‘sayan-biswas’ #28574
OCPBUGS-26044: Adding test case for when exceed openshift.io/image-tags will ban to … #28493
Full changelog

vsphere-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #203
OCPBUGS-24224: Explicitly degrade the cluster when conditions are not met #194
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #186
OCPBUGS-23169: Fix vsphere csi controller pods from getting constantly restarted #193
Full changelog

vsphere-problem-detector

OCPBUGS-24401: Use failure-domains and other changes from master #142
OCPBUGS-21812: Warn usernames without domain name #134
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github