4.14.21

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.21-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded (2 retries) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.37, 4.14.10, 4.14.13, 4.14.14, 4.14.15, 4.14.17, 4.14.3, 4.14.4, 4.14.5, 4.14.6, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.11

Created: 2024-04-10 20:02:43 +0000 UTC

Image Digest: sha256:6e3fba19a1453e61f8846c6b0ad3abf41436a3550092cbfd364ad4ce194582b7

Components

Kubernetes upgraded from 1.27.10 to 1.27.11
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202402010350-0 to 414.92.202403300950-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git e438a5e9 sha256:91626df2ac8266f7c8e15f435f77933b79adfcff31b7184961db97f3654c004d
agent-installer-utils git ad853769 sha256:3116ede71c70e9a9ef31511fa6e73d5ab73edca690dfde19ca43c105c56e90b1
alibaba-cloud-controller-manager git 8ba0b37a sha256:962f5f3967348cb043c8f9a50cbde474e39d99e8d54249a44598e9142292a46c
alibaba-cloud-csi-driver git 3dc363d3 sha256:6e2d87b9064ad466462b5e3766c4156e8d9813bbd949b335606e856f4c0bc07e
alibaba-machine-controllers git 27f105d3 sha256:80c0e683c334dbd16ae2d501731ebd5a57c931a0e5fa0ddcbc570ef5cb03df8e
apiserver-network-proxy git 3362d673 sha256:4ebfb1e36e0762d625751cd18bc1eb8cb91c3eded4055f6c05e991df57ac6edf
aws-cloud-controller-manager git 607e2dde sha256:e8a5e6979538c23b3bd94aff84af2ccfd3ed8ffb538d3b765718d30f493cdc11
aws-ebs-csi-driver git 2e2e2774 sha256:b1a487c21a68fb237c2874a68b619ba99ab504a0970c0399ba7623aff5a6412b
aws-machine-controllers git e292817c sha256:be36d79bbcca18ff528081156fba2afae5640b2434fcda3bbce00cf6454034b9
aws-pod-identity-webhook git ad7aa0ae sha256:9a0f71b3dfe79501e840d154c925bed4773880801f67d2ad65aaffc17a99a993
azure-cloud-controller-manager git f0e7cbbc sha256:3c45e6e0ec50694a2c838341b02f9fadde962aa2ed0674a589199af5132350cf
azure-cloud-node-manager git f0e7cbbc sha256:6fd2183026cbbdff0ea6620bc07b7fc0c72fae130ecc8965ce725b2efe8ce4ac
azure-cluster-api-controllers git 7ad2773c sha256:15be04ec303631f222760674dc6eb1725e9de291df1f6b556701a767b4e6fe18
azure-disk-csi-driver git b19eec11 sha256:85b32b81d7d67bf5a8f10fac04d9b72afafd0c797f9adef9cc23efe68498ad02
azure-file-csi-driver git f401f536 sha256:564fe2991c2fdaac92361e52a2ba58fbeaeb5bc9fbf3366d44911e5cd3cca568
azure-workload-identity-webhook git 43a15be6 sha256:80d5425cfbd829a3b4108177f8b82a6ba8c1e1d5e626555edeb6f87e30c464e7
baremetal-runtimecfg git 13046b3b sha256:1ac5fa8283f12fcefa6c81bdb47848f022c67a97fc977f5f01d0842b0f496e52
cloud-network-config-controller git 9cb1bbd8 sha256:fca43af24437504c3a729330c9b4f3e44f4c928df0e5c9d06e4e345ac452466c
cluster-autoscaler-operator git 5d436c6b sha256:ceb5c7a21a1629113abec7d919ebf2d2ba99f47c9c997fd29e8bd448707675cf
cluster-baremetal-operator git 270579c6 sha256:cc2801152b63990cab68f03413946c247fe228380e2eb6d98f7c4f17eff81012
cluster-bootstrap git 93fba13f sha256:a2212e2002b1444ae8edfc2ee52487873af4b7d7993b21fd07a414f754169af9
cluster-capi-controllers git ae83c553 sha256:8511b69c329bdacc4ef63d2d553201d6b851f2af06d83727fa084e25b84ee06c
cluster-capi-operator git b4c4fb13 sha256:5e718fd5f09a433dcc5b28443d3f2e8b25a2440018a3e795ee27545145075077
cluster-cloud-controller-manager-operator git 33a706e8 sha256:8f75a5a8756acaf90796456c0de804ebe82d5ff9097707dac272a643f4b9f263
cluster-csi-snapshot-controller-operator git 73dc400f sha256:cf8476ed93ff0918f648483b3d1d89601d2f46fa92bec8cc413e8d1c11e3f931
cluster-dns-operator git 5553a226 sha256:6e4df254cc9d93c80958ed66bd36612ddff935aa0f823c10d2a2448295fb60f1
cluster-ingress-operator git d876f5ab sha256:36686fc4a3379d924051e9c23466dd54bd03bcfaec71f615c0b0c74fefcc61db
cluster-kube-cluster-api-operator git b287d08b sha256:31961b08286e5badc412a1066e0f363af2f64c99daf0253a97aa363c5e421b1a
cluster-kube-scheduler-operator git 33f630dc sha256:86f09b945c3bf7e1bd4191bfd89c09b73d5d216fe82937e7a9463ae0a7ca33a1
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:b002e3a6ef6b8152cb88767f676e2ca2d93df272a9ac4ada0b5203450f3010c2
cluster-monitoring-operator git cef0da44 sha256:972a23c5eaf2552cd53485c27b02c1ef690c7d6fa7b1a825f52228b22cd5b811
cluster-olm-operator git 0dbbb613 sha256:0f298bde96f8b890b6011b51239577e49ffb4b8e8033c9495f5e2faf2e68bc92
cluster-openshift-apiserver-operator git 8bd86026 sha256:ecf41723fb964c0f5bff9471993a288155f5b748b8ca3124449f4e268fb89b71
cluster-platform-operators-manager git 08fb27e7 sha256:793d27ff32086509446cc5a62b01098eb30a1199e716ada2d527ecec515cd2b8
cluster-policy-controller git 219f6f6f sha256:ade951b29a499e1d23de22648ac22de13fadc8fc20a5f3db0d4c08d5a0c2ff97
cluster-update-keys git e0c26a08 sha256:8b7b4a65e2b73edb51349fcbf533d64886a7131243ca1376b14a685db75ed47d
configmap-reloader git 716a0c33 sha256:8e44871ae1849f5c89c525376c0f19f7cd66065c3faa9e3c676ed860f889c95f
container-networking-plugins git 7295a5e0 sha256:a7d1b6acf7d675163be6497bad94fabe036ffafe3cecd0d067bab6d846710e98
coredns git 7d3fa777 sha256:b51ade173e06e83d256f5f4467855f2763140f39fe0ef1bc93540436cc540e81
csi-driver-nfs git e1dd4537 sha256:7f88c1f7c20c8c2f573f83300537b928381766704e38e73b2dfcb7784859ddb5
csi-external-attacher git 06e8ce0d sha256:a0c38d42764ec5a54878a01f3f761107f3b8e256dee01bb7415f9c309226c89c
csi-external-provisioner git 78a710fd sha256:014ce4836212a9292bef3ca1749506d67954586fe1fb5d760c9434ab961dc9fc
csi-external-resizer git 59a701a4 sha256:941b87b948fdb906101e21f9b74556c75cca5b9cdc69f6bd555cb31e4e7e8192
csi-livenessprobe git a9bcbde1 sha256:de457b4db8e889c0da09ae93d0aa4491a2fab4958d0ed204c1efca4ab53cac73
csi-node-driver-registrar git 9dcaa7f5 sha256:fe5c57389d497a441f7eb2e1b1d70941a0742e6578004deee44bd83d09e9d1e3
driver-toolkit git cafed17b sha256:747dfd6559cd52771532d901b0a33bb464d287dd9c2ab876b386e4f3a1424396
egress-router-cni git afffdd45 sha256:07ef57ab74c7570aa69670937043a032870a9d5c0012bd7fd78307150a6b9947
gcp-cloud-controller-manager git 09e96a91 sha256:f2340369bf0c88f6fc92988b0a41537e09df070d0ca1c7f2ceeb6bd555efbe64
gcp-cluster-api-controllers git d99fb31a sha256:87d3da2072b54ae757574033dabade27cbe441dd49dde09affa9941b3179c601
gcp-machine-controllers git a676e6b6 sha256:e0b874600b2b1dcdc81f52efffd8383745f81cf40aacf57d07c86a18faf35b5b
gcp-pd-csi-driver git 8a626fe5 sha256:4f13e6f12ea4f0a6a27ea207f3e816b943ff5b58a49fce7c2926e3c79a4836d4
haproxy-router git b3af193f sha256:e96712c2acbe62ae1aaf432dec4a6f172683317e893ad84e6c02da32fddf4396
ibm-cloud-controller-manager git 446871ff sha256:b4df49670900ea230845933c4b53bf0f739fa934f1dddfbc898b47935c19c361
ibm-vpc-block-csi-driver git 02471d96 sha256:675d4b7f2f6dff6ca6c686d7208e9f47b4a47cbcb8fddd60d874cd1e5e6353fa
ibm-vpc-node-label-updater git 44a2b943 sha256:5e6553e55089c8f0bee18c5fe922f08a785115846455200f9506adac77ffa980
ibmcloud-machine-controllers git c28b2232 sha256:58d8336262cc5204875ea9e85e87750ef6aea3ff1076528677866106bd011572
ironic-machine-os-downloader git 7b56c306 sha256:cad1314cfcdd7097ccfb64d46e243113e2e48d8f0bd3dc825d798b3bafcc53f0
ironic-static-ip-manager git c038d5a4 sha256:047f22503ec75bfed9177ca3f1d1e10947beebdbf93dd15b3319e9d41a9d7249
k8s-prometheus-adapter git 801a912b sha256:4c23161ebe8b2e187f8f83d6f777e1dabfea0e7091340e57ee2d58c8e812928c
keepalived-ipfailover git f08cee33 sha256:3cebef06cc749edf819610a8aed01780cbf7de4f678d593e35b08c67a5ac679b
kube-proxy git 1a9befcb sha256:40dfea26430ffc1cb1a8dadecdabcb297734efcedb440c427c54749c474df083
kube-rbac-proxy git 1a646b98 sha256:8f2bce3de40f54c2b9523372873588ef91d99d76eca5912b3bc93752f1bab39b
kube-state-metrics git db0c5499 sha256:44c5064b711f12bbc5d50ba27a7b92c2a7f3cdd80f31d69a8843d41a9f4f56ab
kube-storage-version-migrator git 8558e14a sha256:e77317460cf1fde193e4f1d1706253febe6429b050275939f1adc2852399a4fc
kubevirt-csi-driver git 831ff3eb sha256:59905bd73cd1124382aad2a04eff3a18b2b559a1d0de6ee43525df5b3ec9ef3e
kuryr-cni git 8926a294 sha256:5d19eec7d0db414213bee36b7600699068522c3272cea8910a2b5f9ad05fc98c
kuryr-controller git 8926a294 sha256:e082208743b59512f18807faec8ffcec2c679660565775658fa25af0de13a865
libvirt-machine-controllers git 34dfccba sha256:0dd45065f7036bb89b9150b65a6992694af968c9e6cb8207a9fe26e93069df57
machine-image-customization-controller git 2a6627ba sha256:ed4ba6bd2aadb5b4f6de26232ec780fa2b2b00385d90797d2b2e1b70412d1e21
machine-os-content sha256:5b9f1c07ef2772e816bf918ee7162f838325d287a10f4fabea3f075e434a2e54
machine-os-images git d3a4a6c3 sha256:74673d24095dbba4b5544a91e6e5ef79ee1a876283861d03549bec2d52691249
monitoring-plugin git 6fb20810 sha256:ded51b6604d9c357490d796250802c0bb13584e21526c984b9c72e5964396a7b
multus-admission-controller git 5e74b0fa sha256:f437490ddd89aefd103bc9a37c980415b2318bd295b0d441b95e9a0f25f0e291
multus-networkpolicy git cd6eae10 sha256:8b2317eaa2ce4c0360009fc0cee90b160ead1c512ccdfb31389bda8c58ef08d7
multus-route-override-cni git 078aee5c sha256:7d2d99a72867d0283ab2e0ab3d9cd6651c732826b8383b3ceb0efc0e53cd54d5
multus-whereabouts-ipam-cni git 13aebf74 sha256:27ee52f3deef1115e6e3f47181a22b69ebe9b13d86030be58df3a188c68f4582
must-gather git 833e1de9 sha256:97af04e8f6e0717b42b1a2511be2ac011e32ce58f79b617f2d5f4ca65a770aa9
network-interface-bond-cni git 29f61f6b sha256:d551035e5ad102437f09289d1750dd575603906bd9cfb2a2d80a5afcfb7e15a3
network-metrics-daemon git 69d0021a sha256:cc0a77090fdd7f48a655f3750b9406de37fe332adf696a2a3c1cf6d8531b71a2
network-tools git a1dc6afd sha256:4573ba26135fa9c3b49b08517bf5c345f6d01151a8f606297ca7d0fb0c2d7229
nutanix-cloud-controller-manager git bc568865 sha256:4b94064236d7b4dc9dc3aef289c0095cf0a88088ec084fb47fe5de9d0c048d90
nutanix-machine-controllers git 6f50b1ac sha256:7fe6576ae824dfcc0fe4d7b421904173c1be95099cb17e612cf24a7c1bb2a2f5
oauth-proxy git a4a2f270 sha256:c139f39a492b406414475d7681a387ea0b11fed930fcd18aae905658e60d4756
oauth-server git 35f4739f sha256:b60fefb24b50420c7bef9128edf0baa39f0128f62c6f16c8fc3b8744a76b216a
olm-catalogd git a333cb0b sha256:bea0837e10ab33126d2bd8c3b920381b000ffb8821a88c70cc7c418fd5eb76ff
olm-operator-controller git fb6fb278 sha256:11e468d0077eb1e34a59d86307faf2e50feb0b18a5210b713baf0b3c71a14717
openshift-apiserver git 9e9b51d2 sha256:0c1b976dca8c7aaa43b8368c220df5e364279ae6e249d417820c6bc5598a4d4a
openshift-state-metrics git dff4b0f4 sha256:3867ca1ecf8e41fbf9e5325761e2fa16b489b2b08520aa93daae764e26011b0b
openstack-machine-api-provider git 89858767 sha256:8be14bbaaa8117e5178b0ca0f661d0b728ef3f61dbb47e5551fedddfbd42b195
operator-marketplace git a367cea6 sha256:5a147eefe52949be425970ae56261aa8801cfbc9544dd9c0e11ffa5493133c57
ovirt-csi-driver git f21b470f sha256:a3790fb760e8181905ffa8a83e2c28c6782a5f59b504d93ad2fc9682180790b6
ovirt-csi-driver-operator git 2fa33aa7 sha256:4dd3c64791bee6040640f9f3754bb2c311fe61991e83c2511401838d3e0eb4f7
ovirt-machine-controllers git 5d708631 sha256:7425c565dca917f739853482159342c95cf57f0b8f0cb2e6d0a2d5d9f50778df
powervs-block-csi-driver git 8ecfd7fd sha256:1779dd64ec6a1ffac293ee4bbbc8c32e247528b3e858e5b01a0f4ae2ce5de401
powervs-block-csi-driver-operator git 7436369a sha256:d3f66f0adb3e2db1a776d0f2b6c6d4fa483afcd72e4a78c84b7cf8e0cc6c5945
powervs-cloud-controller-manager git 32c1028e sha256:97f85e469ba4a50ed12ec1445bd11b22bcd5ac48bb11b1311930f04854e05f6e
powervs-machine-controllers git 1a957dae sha256:6eba7e35157410222b1a41ab9a5376c1c115ad6a19de8b2cde254fcab7daea59
prom-label-proxy git af40ed09 sha256:9beefaaab0442a7add613973a01e493bf26c7049b662cba44d7a04dd0eb8cbef
prometheus git b7c61bcb sha256:21c4b00b13921cdd6756df53a5ff3cef89587c8d4cbd62d2583124eed48f68a8
prometheus-alertmanager git e3725166 sha256:388b3242b9f7363cd0072f9f60aab441803b67f992573efd98d29af981b10c82
prometheus-node-exporter git 5ee0a9d9 sha256:13a0a85943534554a7fa1e38cd16ba3b6188073e29e8a78da45105e1a2bee44e
rhel-coreos sha256:8db7cb83c8e9faf72e832604a13bcfbbcbae2db649c6dc5bee1ed4194e374645
rhel-coreos-extensions sha256:9748ec178194091ca70a9e3e883a5abf8561bf837735818f4d559f82f0d39e58
route-controller-manager git 1a5e72f4 sha256:b6e3ce037f4cabb3d3704405d19045cb9ab1c0e798024de74e3a3ce4594493f6
sdn git 1a9befcb sha256:330fdd017982b83b372842fbdbb79eebf203a6b23bc9e72dd1c825343e972992
service-ca-operator git 3c3f82f7 sha256:026d821001256836d4628f3d8c11135c24de5ee04496a9a549861fb1691e2086
telemeter git c683f657 sha256:59622e02fdb0d42477e0befc7a7399780e8ff60e9dece50c5fa58188a884be9e
thanos git a2671250 sha256:6fa903d7e1035beeee17548e16089496d6972eb252a44aa19040a1a7d65259c5
vsphere-cloud-controller-manager git b04567f7 sha256:28bd462f4cae9a7a2435c763f9701d2c700609d602f2190f366a17c1f3c7ac6a
vsphere-cluster-api-controllers git 72e998c3 sha256:872d9c632df09eff59d1925aeac6288ab5ea835f34c532dcd795ef026e3d366d
vsphere-csi-driver git a5ed57f5 sha256:1a6021f8a08c80bceb45a63c31e4cb72ffe4c6cb7a9a2fa2238e1bca4a007772
vsphere-csi-driver-syncer git a5ed57f5 sha256:d9fe1fc1317eda9c850e4bff8b0c1626418b4554e29c7089dc76abbad5181edd
vsphere-problem-detector git ece171d2 sha256:ebec80db64d54658f8fda98fccc64e61f64101b561621886716645e7b395e12e

agent-installer-api-server

NO-ISSUE: replace postgres images as current one disappeared from quay (#6134) #6134
MGMT-16950: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) #5973
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5974) #5974
MGMT-16517: Add Env Var Deployment Type & Set ABI (#5987) #5987
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Ensure valid hostname during install (#794) #794
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-31332: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #506
OCPBUGS-31251: fix e2e tests on release branches #505
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
Full changelog

azure-file-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
Full changelog

azure-machine-controllers

OCPBUGS-30898: Remove startupScript vmextension lookup #106
OCPBUGS-29152: Don’t create availability set when using spot instances #98
OCPBUGS-28745: Improving performance of VMs created in Azure #96
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-31338: upi: aws: fix typo in worker templates #8203
Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027: gcp: better error msg when service accnt missing #8078
OCPBUGS-30259: PowerVS remove ibm cloud/bluemix go 4.14 #8103
OCPBUGS-29123: IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626: update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
OCPBUGS-28929: [release-4.14] Bump containerd for vulnerability fix #7981
Full changelog

baremetal-machine-controllers

OCPBUGS-31435: Bump golang-protobuf version #215
OCPBUGS-29177: Extend metal3remediation aggregation role #211
Full changelog

baremetal-operator

OCPBUGS-23324: Backport node poweroff fixes #318
OCPBUGS-24409: Don’t munge timestamp in structured logs, again #324
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30287: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699
Full changelog

cloud-credential-operator

OCPBUGS-29156: Fix the ClusterOperator watch of the status controller #676
OCPBUGS-28231: Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670
OCPBUGS-29199: ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911: Resolve all outstanding snyk vulnerabilities #650
Full changelog

cluster-authentication-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #649
Full changelog

cluster-autoscaler

OCPBUGS-31621: add check for taint.value == nil #294
OCPBUGS-30628: Fix unstructured taint parsing in Cluster API provider #288
Full changelog

cluster-config-operator

OCPBUGS-28649: Add required PSa labels #403
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30014: Never delete a Machine when there’s a single Machine in an index #283
Full changelog

cluster-etcd-operator

OCPBUGS-31428: CEO aliveness check should only detect deadlocks #1231
OCPBUGS-30067: fix panic in health check timeouts #1213
OCPBUGS-30012: Replace nodelister with master nodelister everywhere #1211
Full changelog

cluster-image-registry-operator

OCPBUGS-28989: pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755: azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604: move azure storage blobs from docker back into /docker #1001
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-31316: add provider name to cluster_infrastructure_provider when external platform #1657
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
Full changelog

cluster-machine-approver

OCPBUGS-28745: Increase concurrent reconciles to 10 #228
Full changelog

cluster-network-operator

OCPBUGS-31360: Remove egressip write permissions from ovn-kubernetes-node #2320
OCPBUGS-30021: [release-4.14] Disable network-node-identity on ROKS #2286
OCPBUGS-30100: ipsec: fix openssl typo #2287
OCPBUGS-29168: add env var in whereabouts-reconciler daemonset #2257
OCPBUGS-26573: Improve troubleshooting IC upgrades #2076
OCPBUGS-29033: network node identity: tolarate all taints #2248
OCPBUGS-18281: only 2 master nodes are required for ovn-kubernetes #2154
OCPBUGS-29300: Update ingressconfig_controller to use field Manager #2266
Full changelog

cluster-node-tuning-operator

irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640: [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28951: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
Full changelog

cluster-samples-operator

OCPBUGS-21217: CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) #539
Full changelog

cluster-storage-operator

OCPBUGS-30054: Update AWSCSIDriverConfigSpec fields validation to accept all curren #462
OCPBUGS-28988: Allow vSphere CSI driver to be disabled #449
Full changelog

cluster-version-operator

OCPBUGS-30878: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040
Full changelog

console

OCPBUGS-28746: fix bug where Expand PVC modal assumes pvc.spec.resou… #13558
OCPBUGS-29783: Fix operands list endpoint #13625
OCPBUGS-29813: Release 4.14 backports #13646
OCPBUGS-29813: Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274: Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972: Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898: Add support for custom segment domains (to load JS and make API calls) #13540
OCPBUGS-29349: Error in displaying BuildRun logs in Console #13601
OCPBUGS-29100: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239: Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990: update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157: add additional check to determine if file is binary #13507
OCPBUGS-28635: Bump graphql-go to v1.3.0 #13553
Full changelog

console-operator

OCPBUGS-21029: Bump library-go and golang.org/x/net #850
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

manage-security-groups: Only add SGs to LB members (#2455) #2455
Fix protocol case mismatch (tcp vs TCP) (#2320) #2320
Get IP addresses of neutron subports (#2306) #2306
Make manage-security-groups work with OVN (#2291) #2291
Delete sgs on reconfiguration (#2305) #2305
Optimize applyNodeSecurityGroupIDForLB() (#2293) #2293
Remove unused manila code (#2299) #2299
Use instanceIDFromProviderID() function (#2302) #2302
Remove filtering by device_owner. (#2304) #2304
Allocate array capacity in advance (#2297) #2297
Corrected the grammar (#2301) #2301
Delete unused SG rules with manage-security-groups (#2287) #2287
Improved the grammar in sidecarcompatibility.md (#2292) #2292
Added comments and arranged the variable names (#2290) #2290
occm cinder-csi securityContext (#2286) #2286
fixed Grammatical mistakes in barbican-kms-plugin (#2289) #2289
efactors and enhances the codebase of the cinder csi plugin (#2288) #2288
Wait for LB to be ACTIVE on HM update (#2280) #2280
(barbican-kms-plugin)Refactor and enhance Barbican KMS plugin codebase. (#2278) #2278
Fixed the typo in the load balancing section in the README (#2232) #2232
Fix image tag in manila csi e2e test (#2244) #2244
enable secret injection and common annotations (#2264) #2264
Update to gophercloud 1.4.0 (#2265) #2265
Replace call to Nova os-interfaces with direct Neutron call (#2250) #2250
add secret enabled option (#2239) #2239
Fix CSI spec versions (#2254) #2254
LoadBalancers: Remove dead SG code (#2248) #2248
Make ensureSecurityRule() safely idempotent (#2249) #2249
shrink image, remove unnecessary utils (#2233) (#2238) #2233
Doc: update statement about neutron lbaas removeal (#2236) #2236
add environment variable for timeout (#2235) #2235
Increase timeout for LB to get to ACTIVE state (#2223) #2223
Ignore proxies when calling Nova Metadata (#2218) #2218
add priorityClassName to openstack-cloud-controller-manager helm chart (#2210) #2210
Do not default Octavia provider to “octavia” (#2208) #2208
Full changelog

csi-driver-manila-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #219
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28952: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28957: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29433: cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142
Full changelog

docker-builder

OCPBUGS-28949: Replace ‘coreydaley’ with ‘sayan-biswas’ #379
Full changelog

docker-registry

OCPBUGS-29604: vendor: bump distribution to fix azure storage path bug #394
Full changelog

etcd

OCPBUGS-28733: Rebase etcd 3.5.12 openshift 4.14 #244
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
Full changelog

hyperkube, pod

Address CVE #12
OCPBUGS-30964: Set up CEL IP/CIDR library from 4.14 onwards #1913
OCPBUGS-29662: Update to kubernetes 1.27.11 #1890
OCPBUGS-27347: UPSTREAM: <carry>: Update management webhook pod admission logic #1855
Full changelog

hypershift

OCPBUGS-31657: disable http2 for ignition server and proxy #3831
OCPBUGS-31605: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3826
HOSTEDCP-1322: NodeUpgradeType defaulted by provider #3822
NO-JIRA: Update RHTAP references (release-4.14) #3813
OCPBUGS-31417: honor HC image configuration #3806
OCPBUGS-23914: Added OLMCatalogPlacement option to the CLI #3229
OCPBUGS-30211: set Konnectivity cipher suites #3679
chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3756
NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596: Bump golang.org/x/net to version v0.17.0 #3711
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782: use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094: Make ControllerAvailabilityPolicy immutable #3534
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084: Reduce the policy access scope to specific instance #3530
OCPBUGS-29206: Add GC knobs for KAS #3543
OCPBUGS-29187: node spread anti-affinity for HA HCP #3541
OCPBUGS-19956, OCPBUGS-28984, OCPBUGS-28985, OCPBUGS-28986, OCPBUGS-29000: Support Disconnected HCP #3520
OCPBUGS-29030: Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238: consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526: Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526: Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072: Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-27279: Add Snyk file to exclude vendor directory on scan #76
Full changelog

insights-operator

Add linting recommendations (#904) #904
gather etcd_server_slow metrics (#902) #902
Full changelog

ironic

OCPBUGS-27773: Update inspector package to fix LLDP unicode error #452
Full changelog

ironic-agent

OCPBUGS-29454: Always add ignition to set hostname on /etc/hostname #109
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-21174: Bump golang.org/x/net to v0.18.0 #37
OCPBUGS-30861: Bump golang.org/x/net to v0.18.0 #36
Full changelog

machine-api-operator

OCPBUGS-28745: Set –max-concurrent-reconciles=10 for Azure machine controller #1217
OCPBUGS-28745: Add AddWithActuatorOpts to allow overriding Machine controller options #1214
Full changelog

machine-config-operator

OCPBUGS-31681: make verify should use MCO’s kube version #4305
OCPBUGS-30992: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266
OCPBUGS-30872: add static pods for rbacproxy #4258
OCPBUGS-30107: annotate on-prem static pods for workload partitioning #4230
OCPBUGS-30225: set nodeStatusReportFrequency #4242
OCPBUGS-29290: AWS: Always persist the existing node name on 4.14 #4215
OCPBUGS-20039: Add v6-primary dual stack support to VSphere UPI #3956
OCPBUGS-29457: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187
OCPBUGS-26072: Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379: fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384: daemon: allow the user to override drains on IR changes #4150
Full changelog

multus-cni

OCPBUGS-26331: Fix SAST scan issues for multus-cni-container [4.14] #220
Full changelog

oauth-apiserver

OCPBUGS-21100: bump k8s.io (release-4.14) #100
Full changelog

oc-mirror

Fix to ensure operator not found error exits with correct status (#797) #797
OCPBUGS-28871: Capability to override default channel (#749) (#790) #749
Full changelog

olm-rukpak

: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
Full changelog

openshift-controller-manager

OCPBUGS-28950: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-30775: [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) #715
OCPBUGS-29192: [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686
OCPBUGS-29194: Retry failing unpack jobs #689
NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 #674
OCPBUGS-27314: Don’t sync namespaces that have no subscriptions #675
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-29342: AdminPolicyBasedExternalRoute CRD failing to watch and reconcile routes for later pods #2076
OCPBUGS-29606: Update HostNetworkNamespace address_set for remote zone nodes #2091
OCPBUGS-28726: Update netpol namespace address sets usage to the old ways #2068
OCPBUGS-28819: Support Permanent Session Affinity #2046
OCPBUGS-29231: [release-4.14] Separate timeout for handler sync from informer sync & do not resync services during node tracker startup #2061
OCPBUGS-29186: Wait for ovnkube controller to start before checking result error. #2067
OCPBUGS-29207: Ignore hybrid-overlay nodes from EgressIP controller #2062
OCPBUGS-25999: Prevent multiple encap-ips per single chassis #2037
OCPBUGS-28789: Fix LGW ETP=Local on IPv6 #2042
OCPBUGS-27925: dont quit if node does not have subnet annotation #2026
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-30015: fix: convert continue field between v1beta1 and v1alpha1 #279
Full changelog

tests

OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28647
OCPBUGS-29928: Only extract node role from properly formatted node-role label #28616
OCPBUGS-29182: updated timeout to 3 seconds to account for network timing issues #28578
OCPBUGS-29034: Replace ‘coreydaley’ with ‘sayan-biswas’ #28574
Full changelog

vsphere-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #203
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github