Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.48-x86_64

Team Approvals:

• Accepted
  • QE

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
  • aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
  • fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.14-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.14.46 (changes) - S S S S S
• 4.14.45 (changes) - Success
• 4.14.44 (changes) - Success
• 4.14.35 (changes) - Failed
• 4.14.26 - Failed
• 4.14.13 (changes) - Failed
• 4.14.2 (changes) - Failed
• 4.14.1 (changes) - Success
• 4.14.0 (changes) - Failed
• 4.13.55 (changes) - F S S S
• 4.13.54 (changes) - Failed
• 4.13.53 (changes) - Failed
• 4.13.49 (changes) - Failed
• 4.13.34 (changes) - Failed
• 4.13.33 (changes) - Success
• 4.13.22 (changes) - Failed
• 4.13.21 (changes) - Failed
• 4.13.19 (changes) - Failed

Upgrades to:

• 4.15.46 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.14.26

Created: 2025-02-14 12:32:01 +0000 UTC

Image Digest: sha256:fb135efb431ce01079dfaab6c1384b5c299311b74271fa37e5f0068fb9383282

Components

• Kubernetes upgraded from 1.27.13 to 1.27.16
• Red Hat Enterprise Linux CoreOS upgraded from 414.92.202405132100-0 to 414.92.202502111902-0 (diff)

Rebuilt images without code change

• alibaba-cloud-controller-manager git 8ba0b37a sha256:b957acecf2e46bd5a6e025f2dd0f377781b68c719d234ee596ce3c33a9e8c340
• alibaba-cloud-csi-driver git 3dc363d3 sha256:8eb21704cb6eab0b00621db0362980c018fa512c4bfc69c7e9c979561461e1f6
• alibaba-disk-csi-driver-operator git 8853e6ef sha256:6ec0f89bee0465deea6951d707b734b30ced8ef20b335208bb15b79efd396a37
• alibaba-machine-controllers git 27f105d3 sha256:7268c46ff53da5f2033eda76f45f0852c689d94f4c9b356a7bf05e10100cde90
• aws-ebs-csi-driver-operator git 609879c3 sha256:3a0a875365c482660b6f59123d7ece81d74115514a3d0812bc47e76783fe2ca3
• aws-machine-controllers git e292817c sha256:ef44d159dd038c194c60563c7ea40ec4a8bffb72799140209e48ea698bae8e41
• aws-pod-identity-webhook git 2c864ca0 sha256:76fa2d3f06e6008a46e42062b08d25924a1a40bf8091f3b8513520d4aea63f8f
• azure-disk-csi-driver-operator git 91893576 sha256:7112fbf5d403c10f6321009861802dd50cee3b7d5491df7f1d5a210c4893898f
• azure-file-csi-driver-operator git 4469d805 sha256:c39891b45d4f862d447e90eecbc1f02ce6ec63a3aeaa2b59fcf2b7b41084f8a4
• azure-workload-identity-webhook git bcb88d94 sha256:db7329789c7ac63c25a38328dd719abb400fbf62d0beed1da34c3603e12a4a7b
• cluster-authentication-operator git 9203d4d5 sha256:bd601188f9da01469686415d7bd27e808ce177dd74cdd52dc0edade9c898895b
• cluster-bootstrap git 93fba13f sha256:2450adeb5d6f9e2beed2027a33574ed81c1e91e5861f45793d014e904e41b23f
• cluster-capi-controllers git ae83c553 sha256:476a88aa1e2d60bc67489a100b5d77a193582d97247a2170bcdb7f24ce53807a
• cluster-csi-snapshot-controller-operator git d4a11625 sha256:ade9a149eff6350780f25b608aa9915e0653169629b5025bae51bad8f0d42a8d
• cluster-kube-cluster-api-operator git b287d08b sha256:71f25f6bdeefe3cc20f3a0a935d77195c7cac084187ff454747687d461ab5332
• cluster-kube-controller-manager-operator git 4e059638 sha256:6f4b3fec9d1c86959e6d16d0be9de836ebbe9a0551c7fc9ac76b0dab5d03a0c2
• cluster-kube-scheduler-operator git 33f630dc sha256:90fdd0cb8ccde985073f2645352ccd6e4d822ed930d79f6bcc6c4a87999c57e0
• cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:5f1411bb6a9c5e68ec0ffa736203a60345fbf616b4d6574e6a32e4588288eb73
• cluster-olm-operator git 0dbbb613 sha256:46868deddaecc1aac1eb6610a7ccaf1ed0c96369f6cacc1dd092693224696ad3
• cluster-openshift-apiserver-operator git 700dc111 sha256:ff62b86c6f96670933aac91481928e451c3e33a4c27b398077bafd623dedecab
• cluster-platform-operators-manager git 08fb27e7 sha256:30ef89ef853b4b9de53bdf4e4d200e0acc16750cb6e20c7e46d835f10443d2f1
• cluster-policy-controller git 219f6f6f sha256:ee9f2d207f642b5d0b5863c46d917d41f0c882929718704e729c411f136c6a16
• cluster-storage-operator git 6c652a5e sha256:cbf14a074cc07ddc51737235a2cd23dea2045063f9031ef168d0b07429fb139f
• configmap-reloader git 716a0c33 sha256:6443a55c8f7deede9f67d251c8f2a6efb08e8a915486a0a4b1035b6c2d2c5ca4
• csi-driver-manila git 697083a8 sha256:cefa1f798ab9022a4b8f3b471a0d0a8f90f49a237171407ffa0c3c26de12f4c5
• csi-driver-manila-operator git d93a218f sha256:1185cf85513b51ab32688408ec783376aebf60a6352e780814dae3d3f2e9707f
• csi-driver-nfs git e1dd4537 sha256:141e1f09b76ce06641a8022dc5af85a2297837be895bdf3a6e9800d62119dccf
• csi-driver-shared-resource git 9232c1ff sha256:54376156708aaf410af9295f316df55fb62951f4a9a36b8848f62730d6950d56
• csi-driver-shared-resource-operator git c273cd52 sha256:8c9c3b8b651eac63a9958bef3b8ba339595b2f9df9642b0e65a59359ff9e94ac
• csi-driver-shared-resource-webhook git 9232c1ff sha256:a93edf1e71fa6426fdf26b3e22c9c2c71c4d70f2f52bcf97b047f451cf35004b
• csi-external-attacher git 06e8ce0d sha256:96225fbf5102cf8cddbb4ac650933f43d4a8c667d9034595a04cbe2bd56e7a1a
• csi-external-resizer git 59a701a4 sha256:6234451eb75ea77631632466fb1091b9d4632130e22d62b7d554f67e93393070
• csi-external-snapshotter git a6834536 sha256:5fcba3e8d20b1b0d619fd6da80f35baa0c0706d814047127e6507aef1790e642
• csi-livenessprobe git a9bcbde1 sha256:1be0d5fbe08005f51e64ab91a02e12dc930d0b434901be50fee4f42264ab35ad
• csi-node-driver-registrar git 9dcaa7f5 sha256:52e4647ca73fdefb7b4655cfae5d2beb0ca3b548a8db396ee63c6eedab1d636e
• csi-snapshot-controller git a6834536 sha256:dbafe731ea313b375147ed4399080fb474b952d45a3e1f7277f8a53b9ef85f02
• csi-snapshot-validation-webhook git a6834536 sha256:99f876aabd3b670423a65faf92de5850dab171599b73f0e7f38f72d7286e6afd
• docker-registry git f03c2404 sha256:4ab12f93385902aee0ea5d9bcd7f0b98f1c07e26fe209e095b7b9be1dda4e6cd
• driver-toolkit git cafed17b sha256:89ddaddedc91654f2da321649327da489e71a283252da2b90e43f041c44c5ad5
• gcp-cloud-controller-manager git 09e96a91 sha256:918ae693088390cd781b124bc1441d2c3243df7337fb340ba4189eef0264c175
• gcp-cluster-api-controllers git d99fb31a sha256:c4ed835a6381ff0a9e5832de95ace6c15fef8b8d32b5f9e22c12d3a0449d483b
• gcp-machine-controllers git a676e6b6 sha256:4d3640efbc09004bd9f4cad755748cff1da5395c7cfda9c5875cd9e2d50be065
• gcp-pd-csi-driver git 8a626fe5 sha256:c8067a7dbc7fde1d49f56a6bd83a31c56edfcfdb84f03d0f3f3e70e05b7f05dd
• gcp-pd-csi-driver-operator git 95d55a04 sha256:3b54c3d8a83d6a5d203ddea78f9272454a6f78746ed46e01a31a40bdd4eb5716
• ironic-machine-os-downloader git 7b56c306 sha256:600295004ee2c968b6279e99548036f5a3391c5be95d715d845e43385ce840de
• k8s-prometheus-adapter git 801a912b sha256:3b9dbc103128642c9b643367321a5ee09200ab548ffd5756bc7c8e348b6dff91
• kube-state-metrics git db0c5499 sha256:3060054cd88b7679f82a25e6f47e70c45f214e991830928bfad203208a56e46c
• kube-storage-version-migrator git 8558e14a sha256:f2bc68cde18e0c983fc0695895c35c483000cca3dc3e46309dcdb8cc3e491911
• kubevirt-cloud-controller-manager git 7d96f56d sha256:263b53602f52b95ab7e19726042c4e8c272ab9d8eddc7583e3149d91ed91484f
• kubevirt-csi-driver git 48fafc4a sha256:c497753d4027ca3f980226a48ec8a717e9c27d18cb287e82c9660dca893712fc
• kuryr-cni git 8926a294 sha256:df3e8bf6d7bdb448d25f2d5e078af6f6a985b88ee0af8bd6ece3b4816c4fbeab
• kuryr-controller git 8926a294 sha256:3cf8b6d778c8cf397784b80a7b2f07eb4505699841c6f5c89e0469e3d7e356d3
• libvirt-machine-controllers git 34dfccba sha256:d1c4202dd43807647672d4820426b0dd294392f3a20f31c3e7347ec5b1d33fcf
• machine-image-customization-controller git 2a6627ba sha256:6b21ed8bf7757b891632ad51f4a47c2f47954ceafcafdf5bc193bd2197013186
• machine-os-content sha256:c9dcb3d2cd63845b3d8841dca2f2a27de5e66b12962014ad5008e59838132276
• machine-os-images git d3a4a6c3 sha256:a11e47cd1936c587720fa41abb1dd52e704b52be762670874f64938289f1f9f4
• network-interface-bond-cni git 29f61f6b sha256:0eaa8d7b583f66128868f5a14178f0b0c182cdcb442a6e58db8f4ffbee0aa63a
• network-tools git e79d8173 sha256:0a8e1606c8166760df9752fffe53967fc172ab4092031166124187f189fc88a8
• oauth-proxy git a4a2f270 sha256:e32322eb08730872aa11110b5418e7929b99f0bbc3cf7818d5f3946c94aa852b
• oauth-server git 35f4739f sha256:7e7b6831037e743fae6fb6d087047f9eb1e8ed6c56c95e21bfb63801a443c02b
• olm-catalogd git a333cb0b sha256:1d7a2a2b4c518bfdce7881696ac3b4ed43e6dbefd6a9d87b482d88fd8af7f937
• olm-operator-controller git fb6fb278 sha256:ede987720f61d4ea0ffe07c265325053c78b07c52156b40931716c8984b4d4c3
• openshift-state-metrics git dff4b0f4 sha256:b378da448810f89fd11a02c8a2b279e3f055be335578947ba5671b6be10d2495
• openstack-cinder-csi-driver git 697083a8 sha256:c96a96da1993997c1ba213ca570e128d216a9462698dd09329f0f8831c008457
• openstack-cloud-controller-manager git 697083a8 sha256:cb7ec78b34eabf3c17fca0f0918e9c426632b8a0f566feff8156c45c839d0dfa
• openstack-machine-api-provider git 51f8e4d6 sha256:6210d8b35c60fb340838edf76d41f26ff4129a7de0b0c46695294963354380a5
• ovirt-csi-driver git f21b470f sha256:11c6ad89f00743bbdef45483dbd4d42b0dd6268d171861b761b9a3a9d0d9c173
• ovirt-csi-driver-operator git 2fa33aa7 sha256:f4912135daea8bc33fabc04a34ea8dd5ff68a11507695bfe5ec84debefb4c27e
• ovirt-machine-controllers git 5d708631 sha256:08c460e434eab3793d42d27b71bd3e086042638ce4823ecf41432f6b75ebdad5
• powervs-block-csi-driver-operator git 7436369a sha256:8c1dfeff1c15b90f42767b635fba580903effde8648066f556c57c7af1645c9d
• prom-label-proxy git af40ed09 sha256:2dca6d56aee18a9d3539762051ca9a934efb773ba337ff538fe7577e6e872d87
• prometheus-alertmanager git e3725166 sha256:2861c426df850287bf1ebe0857382422e7c9093414fe9562148177d361ff84c4
• prometheus-config-reloader git a4b845a7 sha256:95b43e350aae2997e44bac2a0265c5e237e74e40c68913edbb0a62ce0d890335
• prometheus-node-exporter git 5ee0a9d9 sha256:95ba4d2bb69a3d4cb619912b33d44aec1ee042c2d45842d67955982e766d33c3
• prometheus-operator git a4b845a7 sha256:e60d54f8f22ef08a6b94b45b466b9684896d7da9f02e11a83fb5a6ca2fe42c96
• prometheus-operator-admission-webhook git a4b845a7 sha256:a94a315bb23510319c960ae08009950e1f8f5ce2b3020c822451d906c40583e7
• rhel-coreos sha256:d3fb8f5b2a816c22929a993ef55b98e9581f23429ce8cbba2c0b998fa55ec128
• rhel-coreos-extensions sha256:e9863399773d69651449ac1121016af4955b753c6547f95cca42d18ff9417076
• route-controller-manager git 1a5e72f4 sha256:aa6fa3da9619710c746b14f05803fd59d7275a2d88e901eb2dc8cb7996595e0f
• service-ca-operator git 3c3f82f7 sha256:d1b1532a8b5dc4ba7c2a5162d507b092862433e6fc38178ccd79a6f590714c42
• thanos git a2671250 sha256:415d85780065eb94bcf22bdff4a4f908f054339d6a1aa4b07f72291113269ea2
• vsphere-csi-driver-operator git 5d5105f9 sha256:d8a487e7a727e2678b0a32eaf5abfc541e22b6e12c53e611099067cb135dd04c

agent-installer-api-server

• OCPBUGS-46941: OCPBUGS-46184: Bump golang.org/x/net to 0.33.0 (#7200) #7200
• OCPBUGS-15346, OCPBUGS-15347: Update version go-http-metrics and gin-gonic/gin (#6899) #6899
• OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6416) #6416
• OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) #6322
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Bump golang.org/x/net to v0.33.0 (#1012) #1012
• OCPBUGS-15347: Update version go-http-metrics/gin (#933) #933
• Full changelog

agent-installer-node-agent

• OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#709) #709
• OCPBUGS-33404: Make removable disks eligible (#725) #725
• Full changelog

agent-installer-utils

• OCPBUGS-25727: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.14 #34
• Full changelog

apiserver-network-proxy

• OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-38786: Ensure that addresses are added in network device index order #93
• OCPBUGS-32066: update for CVE-2023-45288 [release-4.14] #83
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-44295: [release-4.14] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #533
• OCPBUGS-34856: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #516
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-35123: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #271
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-23829: Bump otelgrpc to v0.49.0 #124
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-36023: Update go-retryablehttp to v0.7.7 #313
• OCPBUGS-35125: Bump x/crypto to v0.24.0 #307
• Full changelog

azure-disk-csi-driver

• OCPBUGS-35126: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #82
• Full changelog

azure-file-csi-driver

• OCPBUGS-41164: bump mount-utils to treat ENODEV error as corrupted mount #79
• Full changelog

azure-machine-controllers

• CFE-1050: Added support of capacity reservation group #109
• OCPBUGS-35133: Bump x/crypto to v0.24.0 #112
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-48196: IBMCloud: Ignore failed VPC regions #9350
• OCPBUGS-45464: add chrony.conf file when additional NTP sources are configured #9269
• OCPBUGS-43505: Stop rendering networks.config CRD #9105
• OCPBUGS-42285: Add AWS r8g to arm tested instance types #9050
• OCPBUGS-42848: add tested instance type for IBMCloud #9082
• OCPBUGS-25508: Update Golang SSH package version update to 0.17.0 #8992
• OCPBUGS-39411: Added yq to ci image #8943
• OCPBUGS-36180: baremetal IPI without provisioning network failing on provisioning-interface.service #8712
• OCPBUGS-36089: [release-4.14] bump go-retryablehttp for CVE fix #8658
• OCPBUGS-37183: ic: fix typo in warning message #8771
• OCPBUGS-37068: update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 #8748
• OCPBUGS-36748: Add yq-v4 to the upi-installer image for CI #8684
• OCPBUGS-35827: If host is offline or disconnected don’t check ver #8634
• OCPBUGS-35826: [release-4.14] bump github.com/containers/image for CVE fix #8633
• OCPBUGS-35485: [release-4.14] aws: terraform: add spot instance support for masters #8605
• OCPBUGS-34024: go.mod: bump aws-sdk-go for ca-west-1 support #8440
• OCPBUGS-33401: PowerVS: Add composite_instance to listServiceInstances #8479
• CORS-2951: Add deprecation notice for OpenShiftSDN for 4.14 users #8518
• OCPBUGS-28611: remove retired serial NCv2 from azure tested instance type list on x86 #7960
• OCPBUGS-27394: preserve category name when trying to find tag category #7926
• Full changelog

baremetal-machine-controllers

• OCPBUGS-46643: Bump x/net to 0.33.0 #228
• Full changelog

baremetal-operator

• OCPBUGS-38940: [OCP] Ability to disable agent power off after deployment #374
• OCPBUGS-34814: PreprovisioningImage should not be created on poweroff #359
• Full changelog

baremetal-runtimecfg

• OCPBUGS-37502: Fix handling of ELB Node IP detection #324
• OCPBUGS-35846: Add support for OVN HostCidrs annotation #321
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-35475: Remove some of newapp unit tests relying on external deprecated images #1802
• OCPBUGS-35447: bump go-git to 5.11.0 #1799
• Full changelog

cloud-credential-operator

• OCPBUGS-47069: golang.org/x/net v0.33.0 #810
• OCPBUGS-46487: Add AWS region to aws-pod-identity-webhook #801
• OCPBUGS-45009: Add retry to ccoctl gcp create functions #791
• OCPBUGS-45004: github.com/golang-jwt/jwt/v4 v4.5.1 #785
• OCPBUGS-43647: Only attempt timed token credentials on supported platforms. #775
• OCPBUGS-43339: Update github.com/sirupsen/logrus v1.9.3 #769
• OCPBUGS-41236: List secrets in batches to avoid api timeout #755
• OCPBUGS-38378: Update google.golang.org/grpc v1.65.0 #750
• OCPBUGS-37823: GCP passthrough permissions check to ignore problematic permissions. #741
• OCPBUGS-37062: Update cloud.google.com/go/storage v1.43.0 #742
• OCPBUGS-37420: SNYK ignore go-client misreporting #739
• OCPBUGS-37276: Update to azidentity v1.7.0 #732
• OCPBUGS-36029: IBM/go-sdk-core update to v5.17.4 #721
• OCPBUGS-36716: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #713
• Full changelog

cloud-network-config-controller

• OCPBUGS-34197: Avoid panic when looking up attachedOutboundRule.ID in azure #147
• Full changelog

cluster-autoscaler

• OCPBUGS-45150: [release-4.14] VPA: Update OWNERS file #327
• OCPBUGS-40925: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #316
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-31976: Update x/net to v0.25.0 #322
• Full changelog

cluster-baremetal-operator

• OCPBUGS-31977: bump x/net to 0.23.0 #438
• OCPBUGS-22943: Add tls-cipher-suites to baremetal-kube-rbac-proxy #379
• Full changelog

cluster-capi-operator

• OCPBUGS-37974: fix: sort CredentialsRequest manifests after namespace #194
• OCPBUGS-36369: Revert cluster-api-operator go.sum hash #184
• OCPBUGS-35128: Bump x/crypto to v0.24.0 #177
• OCPBUGS-35957: Fix gcp providers-list.yaml branch #178
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-34556: update azure and ash tolerations on node manager #347
• Full changelog

cluster-config-operator

• OCPBUGS-44095: Backport SDN live migration #425
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-48211: Add unreadyNodeGracePeriod for allowing brief node hiccups #340
• CFE-1087: API Bump for capacity Reservation #319
• OCPBUGS-35520: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #309
• OCPBUGS-35338: Improved debugging of API listing errors #303
• Full changelog

cluster-dns-operator

• OCPBUGS-5943: Enable topology-aware hints iff nodes in >=2 zones #416
• OCPBUGS-5943: Ignore max unavailable for status #400
• Full changelog

cluster-etcd-operator

• OCPBUGS-34495: return errors in wait-for-ceo #1266
• Full changelog

cluster-image-registry-operator

• OCPBUGS-44048: fix proxy config and leader election test flakes #1153
• OCPBUGS-44002: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1152
• OCPBUGS-42935: azureclient: stop validating credentials when creating the client #1137
• OCPBUGS-39100: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1114
• OCPBUGS-36035: go.*,vendor: bump go-retryablehttp #1069
• OCPBUGS-33147: azure-path-fix: get client secret from k8s secret #1058
• OCPBUGS-34668: pkg/storage/s3: use force path style in favour of virtual hosted style config #1051
• OCPBUGS-33409: azurepathfix: check if platform status is nil before accessing it #1033
• Full changelog

cluster-ingress-operator

• OCPBUGS-36467: Allow operator to update Route spec.subdomain #1101
• OCPBUGS-36555: Implement connect timeout tuning option #1105
• OCPBUGS-36461: Add Regexp Anchor to TestAll #1098
• OCPBUGS-35399: Internal service changed: fix target port logic #1086
• OCPBUGS-34973: TestHostNetworkPortBinding: Delete t.Parallel() #1077
• OCPBUGS-34410: Don’t add clientca-configmap finalizer if deleting #1063
• OCPBUGS-34407: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1061
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-31354: add SNO control plane high cpu usage alert #1707
• OCPBUGS-33930: add a controller that reconciles SCCs’ volumes #1681
• Full changelog

cluster-machine-approver

• OCPBUGS-46057: Ensure trailing dots on DNS names do not block serving cert auth #259
• OCPBUGS-46057: Client internal DNS checks should ignore trailing dot #255
• OCPBUGS-44774: Client internal DNS checks should be case insensitive #246
• Full changelog

cluster-monitoring-operator

• OCPBUGS-48368: Add new metrics for OpenShift logging telemetry #2556
• OCPBUGS-44007: fix(monitoring-plugin): disable emitting nginx version on error pages #2520
• OCPBUGS-43916: Add runbook url for TelemeterClientFail… #2510
• OCPBUGS-43678: Remove temporary no more needed code #2496
• OCPBUGS-42603: Exclude windows nodes from kubelet servicemonitor #2489
• OCPBUGS-41916: filter alerts sent to Telemeter #2473
• OCPBUGS-39176: Backport #2441 for 4.14 #2449
• OCPBUGS-37468: Backport of PR #2384 #2433
• OCPBUGS-36565: add runbook_url annotations #2407
• OCPBUGS-37296: Making sure proxy settings are correctly forwarded in the generated remote write configs #2415
• OCPBUGS-36416: inject trusted CA bundle into UWM Alertmanager #2402
• OCPBUGS-34023: fix KRP permissions for Thanos Querier #2374
• OCPBUGS-33585: fix Thanos ruler alert generator url #2345
• Full changelog

cluster-network-operator

• OCPBUGS-48323: Pass transit_switch_subnet options in ovnkube-node pod for single-zone #2617
• OCPBUGS-42754: Set mount propagation to HostToContainer for /var/lib/kubelet #2521
• OCPBUGS-47320: Pass transit_switch_subnet options in ovnkube-node pod #2607
• OCPBUGS-43821: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2546
• OCPBUGS-39086: Fix wait logic for IPsec certificate signing request #2481
• OCPBUGS-41508: Tighten the permissions on whereabouts.conf #2493
• OCPBUGS-42021: Add proxy env vars to onvkube-node #2505
• OCPBUGS-38440: [release-4.14] 4.14 subnet config #2473
• OCPBUGS-37221: Ensure that the node-identity webhook address contains colons for IPv6 #2440
• OCPBUGS-38073: Fix IC distributed control plane alerts #2463
• OCPBUGS-37468: Backport ipsec state metric #2444
• OCPBUGS-32706: Add conditions for ignored-namespaces #2380
• OCPBUGS-36722: update whereabouts crd #2434
• OCPBUGS-34885: [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled #2390
• OCPBUGS-27925, OCPBUGS-30579: [release-4.14] tighten conditions for the state transitions in IC upgrade #2207
• Full changelog

cluster-node-tuning-operator

• e2e:performance: decode to valid kubeletconfig object (#1276) #1276
• Fix context deadlines in ExecCommandOnPod() (#1272) #1272
• OCPBUGS-44506: Drop sched_migration_cost_ns setting (#1215) #1215
• OCPBUGS-44283: right-hand-side profile_dirs take precedence (#1210) #1210
• OCPBUGS-42567: Add cluster-wide proxy env file (#1176) #1176
• TuneD prior to kubelet in one-shot mode (#1137) #1137
• OCPBUGS-37754: Remove tuned/rendered object (#1133) #1133
• OCPBUGS-37734: Backport fix for OCPBUGS-36355 (#1126) #1126
• OCPBUGS-33929: Negative net interface name does not reduce queues (#1074) #1074
• Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-48841: Add new team members to the OWNERS file #380
• OCPBUGS-33295: Update opentelemetry to mitigate CVE-2023-47108 #344
• Full changelog

cluster-samples-operator

• OCPBUGS-49421: add shannon and aroyoredhat as owners #598
• Full changelog

cluster-update-keys

• OCPBUGS-43628: keys: Update Red Hat keys to use SHA256 signatures #66
• Full changelog

cluster-version-operator

• OCPBUGS-45331: deps: bump golang.org/x/net to 0.31.0 #1120
• OCPBUGS-44704: Fix desired before sync_worker’s work is initialized #1109
• Full changelog

console

• OCPBUGS-46603: Unable to remove finally tasks in pipeline builder mode #14642
• OCPBUGS-33145: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14370
• OCPBUGS-45323: Use vCenterCluster value from CM as primary resource #14574
• OCPBUGS-39368: Remove deprecated resources from spec of the Pipeline #14230
• OCPBUGS-45283: Add IBM Block Storage CSI driver support for RWX #14569
• OCPBUGS-44791: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14518
• OCPBUGS-42962: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14386
• OCPBUGS-43000: List of default Camel K event sources disappears when adding a custom event source #14388
• OCPBUGS-36558: Increase login flow state paramater length/entropy #14439
• OCPBUGS-10337: Updating openshift-enterprise-console images to be consistent with ART #12760
• OCPBUGS-42518: The filepath including leading slash makes error during parsing devfile using Gitlab #14342
• OCPBUGS-42517: Values entered into the Instantiate Template form are automatically cleared #14341
• OCPBUGS-42757: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14369
• OCPBUGS-38883: Fix password set to Secret created through Start Pipeline form #14184
• OCPBUGS-37353: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #14108
• OCPBUGS-41836: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14281
• OCPBUGS-39389: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14231
• OCPBUGS-41581: Increased max nodes limit to 200 in topology page #14262
• OCPBUGS-38972: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14234
• OCPBUGS-38053: fix BMH restart annotation #14109
• OCPBUGS-33748: Fix Pipeline details page with when expression using CEL expression #13856
• OCPBUGS-32499: Fixed some problems in topology Chinese translation text #13779
• OCPBUGS-33942: make sure folder is encapsulated with quotas #13869
• OCPBUGS-35723: Upgrade Pipeline trigger resources to v1beta1 #13985
• OCPBUGS-33558: Display “With Data upload form” in Create PVC drop down once #13840
• OCPBUGS-33064: Fix PipelineRun Logs tab navigation #13673
• OCPBUGS-33321: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824
• OCPBUGS-33635: restrict Masthead logo to max-height to 60px #13847
• OCPBUGS-33640: Add visual connector between VMs and non VMs workloads #13848
• Full changelog

console-operator

• OCPBUGS-31916: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #885
• Full changelog

container-networking-plugins

• OCPBUGS-46121: [4.14] cherry-pick containernetworking/plugins#997 #168
• Full changelog

coredns

• OCPBUGS-37467: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #126
• Full changelog

csi-external-provisioner

• OCPBUGS-35112: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #99
• Full changelog

docker-builder

• OCPBUGS-48495: skipping some unit tests to avoid failures as they are duplicate #430
• OCPBUGS-48477: Add team members to the OWNERS file #429
• BUILD-854: Add adambkaplan as approver #404
• Full changelog

egress-router-cni

• OCPBUGS-35143: update to go 1.19 and k8s.io mods to v0.27.4 #87
• Full changelog

etcd

• OCPBUGS-32813: Revert “Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… #265
• Full changelog

haproxy-router

• OCPBUGS-32634: Properly handle rewrite-target annotation #583
• OCPBUGS-33797: Reject routes with MD5 certs #598
• Full changelog

hyperkube, pod

• OCPBUGS-39413: Return from EnsureHostInPool on all NIC errors #2073
• : OCPBUGS-38959: Upstream: 115702 kubelet: output log even file is rotated #2060
• NO-JIRA: update downstream owners #2051
• OCPBUGS-37623: Bump to Kubernetes v1.27.16 #2043
• OCPBUGS-35553: Disable vulncheck #2010
• OCPBUGS-35553: Bump k8s 1.27.15 #1992
• OCPBUGS-33964: UPSTREAM: 123055: Fix race condition between resizer and kubelet #1973
• UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check #1951
• OCPBUGS-33712: Bump to Kubernetes v1.27.14 #1970
• OCPBUGS-33417: Provide SCC access via RBAC #1965
• Full changelog

hypershift

• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 #5537
• OCPBUGS-49405: add ValidIDPConfiguration condition to report IDP config issues #5520
• NO-JIRA: chore: update konflux references & bump up go version to 1.20 #5517
• NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) #5444
• NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) #5430
• NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net #5372
• NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) #5331
• NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) #5330
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned #5308
• OCPBUGS-44279: Configure OAuth https proxy to dial cloud endpoints directly #5067
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) #5162
• NO-JIRA: chore(deps): update konflux references (release-4.14) #5145
• NO-JIRA: chore(deps): update konflux references (release-4.14) #5121
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) #5105
• NO-JIRA: Update Konflux references (release-4.14) #5100
• chore(deps): update konflux references (release-4.14) #5076
• NO-JIRA: chore(deps): update konflux references (release-4.14) #5055
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.14) #5056
• NO-JIRA: Update Konflux references to fedcfe0 (release-4.14) #5043
• chore(deps): update konflux references (release-4.14) #5026
• chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.43 (release-4.14) #5021
• chore(deps): update konflux references to f53fe54 (release-4.14) #5020
• NO-JIRA: Update Konflux references (release-4.14) #5011
• OCPBUGS-41701: cmd: report server version, supported OCP #4718
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4975
• OCPBUGS-43688: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4964
• chore(deps): update konflux references (release-4.14) #4953
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.14) #4948
• OCPBUGS-43368: Let payload generation pick the release for the NodePool #4913
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4934
• NO-JIRA: chore(deps): update konflux references to 66f551f (release-4.14) #4924
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.14) #4917
• NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.14) #4910
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4898
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.14) #4879
• NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.14 #4851
• OCPBUGS-42533: enable audit log for oauth-openshift #4822
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.13 (release-4.14) #4794
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.14) #4828
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4813
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.14) #4805
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.14) #4788
• chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.14) #4758
• chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.14) #4784
• OCPBUGS-41374: CPO oauth idp converter: resolve names before dialing #4763
• NO-JIRA: chore(deps): update konflux references to 5ac9b24 (release-4.14) #4783
• chore(deps): update konflux references to 2c3426a (release-4.14) #4773
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4757
• OCPBUGS-42221: Make guest cluster components use the correct KAS port #4753
• OCPBUGS-38060: Add HTTP konnectivity proxy to OAuth server #4498
• OCPBUGS-38066: [release-4.14] Use HTTP proxy for ingress controller #4724
• NO-JIRA: Security fixes for openshift-ci-security job #4752
• OCPBUGS-42184: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4747
• OCPBUGS-41506: fix: bump google.golang.org/protobuf #4687
• HOSTEDCP-1957: bump go-jose version #4698
• OCPBUGS-39378: Set KCM node monitor grace period #4659
• chore(deps): update konflux references (release-4.14) #4683
• OCPBUGS-39183: fix: bump github.com/IBM/go-sdk-core/v5 #4626
• NO-JIRA: Add PodDisruptionBudget for router deployment #4692
• NO-JIRA: Revert “Merge pull request #4661 from jparrill/bp-4.14/OCPBUGS-24308” #4667
• NO-JIRA: PDB backports #4661
• NO-JIRA: Konflux migration 4.14 #4648
• OCPBUGS-39230: set proxy envvars on aws CCM #4638
• OCPBUGS-38791: Let the CPO oidc check resolve through data plane #4617
• NO-JIRA: Flaky cert validation test #4633
• HOSTEDCP-1897: [release-4.14] Allow setting Kube APIServer maximum requests in flight #4553
• OCPBUGS-37076: Fixed audit-logs sigterm failing to terminate gracefully #4369
• OCPBUGS-38624: remove weak ciphers from security profile #4575
• OCPBUGS-37173: Add newline after TLS certs referenced by image.config #4471
• OCPBUGS-37172: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4490
• OCPBUGS-36944: [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4360
• HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4473
• OCPBUGS-37175: Delete IDMS in dataplane once HCP ICS field is removed #4472
• NO-JIRA: Konflux mce-2.4 pipeline fixes #4464
• NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4288
• NO-JIRA: [release-4.14] test/e2e: remove api budget checks #4438
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned #4363
• NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.21.10-1.1719562237 (release-4.14) - abandoned #4326
• NO-JIRA: Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.4-1134 (release-4.14) - abandoned #4325
• OCPBUGS-36518: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4315
• OCPBUGS-36159: Generate default worker security group rules based on machineCIDR #4270
• OCPBUGS-35549: Restrict image registry overrides to control plane component #4223
• OCPBUGS-35365: fix router on 4.14 y-stream upgrade #4205
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4257
• OCPBUGS-35401: Fix disconnected metadata inspection for nodepool #4208
• OCPBUGS-35482: Add TrustedBundles to OAS container #4216
• OCPBUGS-35290: [release-4.14] Backport etcd defrag #4189
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4248
• OCPBUGS-35183: add AWS STS URL to OIDC provider audiences #4179
• NO-JIRA: hack: make the e2e script generic #4201
• chore(deps): update konflux references to 2be7c9c (release-4.14) #4225
• NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
• NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
• OCPBUGS-34856: [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149
• NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
• NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
• NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
• NO-JIRA: Remove CLI inspection of release image #4061
• OCPBUGS-33713: Reconcile over ICSP/IDMS #4059
• NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
• OCPBUGS-33844: Fix disconnected metadata inspection #4049
• OCPBUGS-33843: Recycler-pod image now points to the OCP Payload reference #4048
• NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-23861: Bump otelgrpc to v0.49.0 #73
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-36065: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #73
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-36071: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #122
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-36011: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #42
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-36077: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.14 #88
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-36083: Bump dependency for CVE #57
• Full changelog

insights-operator

• Ignore previous status when disabling alerts (#1059) #1059
• OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1058) #1058
• Add haproxy metric (#999) #999
• Add missing permission for GatherClusterIngressCertificates (#984) #984
• OCPBUGS-37673: Ingress controller related certificates’ validate dates gathering (#976) #976
• OCPBUGS-36475: properly encode the URL for the advisor links (#962) #962
• OCPBUGS-36380: Collect aggregated Prometheus Alertmanager instances (#960) #960
• Full changelog

ironic

• OCPBUGS-48147, OCPBUGS-48594: Bump jinja2 to 3.0.1-6.el9.2 #625
• OCPBUGS-43954, OCPBUGS-43962: Bump python-waitress [4.14] #607
• OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #571
• OCPBUGS-32266: redfish-virtualmedia fails on XFusion nodes #548
• OCPBUGS-37762, OCPBUGS-39382: Include fixes for CVE-2024-44082 #584
• OCPBUGS-38508: set min version for python3-webob #555
• OCPBUGS-33375: bump werkzeug #537
• OCPBUGS-37410: bump jinja2 #530
• OCPBUGS-37115: Update eventlet version #524
• Bug OCPBUGS-34657: Disable installation of .pyc files through pip #512
• Full changelog

ironic-agent

• OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #158
• OCPBUGS-39382: Include fixes for CVE-2024-44082 #163
• OCPBUGS-33375: set webob and bump werkzeug #151
• Full changelog

ironic-static-ip-manager

• OCPBUGS-49890: Fix subnet validation #50
• Full changelog

keepalived-ipfailover

• OCPBUGS-30414: update unit tests in egress/dns-proxy #173
• Full changelog

kube-proxy, sdn

• OCPBUGS-46536: Bump openvswitch #647
• [Release 4.14] OCPBUGS-43484: NP-1092: backport SDN live migration #631
• Full changelog

kube-rbac-proxy

• OCPBUGS-31971: bump golang.org/x/net [4.14] #108
• Full changelog

machine-api-operator

• OCPBUGS-48245: VSphere: Handle cloned instance with lost taskID #1322
• OCPBUGS-47659: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1318
• OCPBUGS-43821: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1303
• CFE-1051: Adding web-hook validation for capacityReservationGroupID #1260
• OCPBUGS-31980: Update x/net to v0.25.0 #1236
• Full changelog

machine-config-operator

• OCPBUGS-48801: Wait for all subcontrollers #4808
• OCPBUGS-46057: Remove trailing periods from AWS provided hostnames #4747
• OCPBUGS-45271: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4725
• OCPBUGS-42111: Do not use ‘restart’ for ‘oneshot’ service #4622
• MCO-1278: Backport Telemetry to 4.14 #4672
• OCPBUGS-43981: Panic seen in CI job for MCC pod #4671
• OCPBUGS-43980: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4673
• OCPBUGS-37552: On-Prem resolv prepender to watch for NM changes #4500
• OCPBUGS-35322: Decrease logs of haproxy #4405
• OCPBUGS-32258: Log network service output to console #4320
• OCPBUGS-38371: Revert “MCD-pull: run after network-online.target in Azure” #4526
• OCPBUGS-37769: Move StartLimitIntervalSec to Unit section #4521
• OCPBUGS-30794: Mount /run/nodeip-configuration into coredns containers #4253
• OCPBUGS-37483: Remove weights from ingress check script #4485
• OCPBUGS-37738: Openshift uncordoned compute-node that was intentionally cordoned #4502
• OCPBUGS-36915: Use NM’s dns-change event for resolv.conf #4473
• OCPBUGS-37223: Copy RHEL9 binaries used in HCP #4479
• OCPBUGS-36776: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4463
• OCPBUGS-36593: MCD-pull: run after network-online.target in Azure #4456
• OCPBUGS-36356: daemon/update: disable systemd unit before overwriting #4447
• OCPBUGS-32472: Delete state files on reboot only #4331
• OCPBUGS-33590: ovs-configure: fix vlan_parent calculation #4361
• OCPBUGS-34716: If multiple hostnames are returned, use the first one for the Node name #4385
• OCPBUGS-17658: Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383
• OCPBUGS-33643: Don’t error if the certs.d dir doesn’t exist yet #4362
• Full changelog

monitoring-plugin

• OCPBUGS-44392: fix cross-spawn vulnerable dependency #278
• NO-JIRA: [release-4.14] OU-179: Fix the root cause of externalLabels not present on alerts #244
• OCPBUGS-44137: upgrade dompurify dependency #243
• OCPBUGS-43243: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.14 #219
• Full changelog

multus-admission-controller

• OCPBUGS-42048: Update owners #91
• Full changelog

multus-cni

• OCPBUGS-48160: [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket #262
• OCPBUGS-35578: Update owners file #243
• OCPBUGS-33478: Fix CNI cache update function to prevent nil access #232
• Full changelog

multus-networkpolicy

• Update owners (#62) #62
• Full changelog

multus-route-override-cni

• OCPBUGS-42049: [release-4.15]Update owners #60
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-42047: Update owners #311
• OCPBUGS-37815, OCPBUGS-37817: [release-4.14] align api calls timeout and skip pods marked for deletion #309
• OCPBUGS-36722: Return previous IP allocation for add cmd #296
• OCPBUGS-35263: Use IP to identify orphaned allocation to be deleted #289
• Full changelog

must-gather

• OCPBUGS-48058: Support gathering IPsec data #472
• OCPBUGS-43058: [Backport 4.14] Multus is now a Pod and will be captured by normal #451
• Full changelog

network-metrics-daemon

• Correct 4.16 owners file (#100) #100
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-23873: fix for CVE-2023-47108 #43
• OCPBUGS-17304, OCPBUGS-20899: bump golang.org/x/net to v0.17.0 #39
• Full changelog

nutanix-machine-controllers

• OCPBUGS-17305: bump golang.org/x/net to 0.17.0 #85
• OCPBUGS-29549: IPI install fails on Nutanix when using DHCP #70
• Full changelog

oauth-apiserver

• OCPBUGS-31982: bump x/net to 0.24.0 #110
• Full changelog

oc-mirror

• changes the owners file (#1013) #1013
• OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1023) #1023
• Full changelog

openshift-apiserver

• OCPBUGS-32445: bump(x/net) to v0.23.0 #429
• Full changelog

openshift-controller-manager

• OCPBUGS-48480: Add team members to the OWNERS file #360
• NO-JIRA: cleanup root and app OWNERS #349
• OCPBUGS-32869: replaces deprecated square/go-jose wtih go-jose/go-jose #342
• OCPBUGS-41951: Add adambkaplan as approver #334
• [release 4.14] OCPBUGS-33288: Update opentelemetry dependency #295
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-35337: Correct out-of-bounds check #173
• OCPBUGS-34792: Make Cinder CSI Driver Topology feature configurable #162
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-46927, OCPBUGS-46934, OCPBUGS-47314: x/net bump to v0.34.0 [release-4.14] #941
• OCPBUGS-46595: CRD upgrade existing CR validation fix (#3442) #921
• OCPBUGS-45080: SSA for Services and ClusterRoleBindings #905
• OCPBUGS-42828: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #878
• OCPBUGS-41872: Fix e2e flake: upgrade CRD with deprecated version #865
• OCPBUGS-42150: (fix) registry pods do not come up again after node failure (#3366) #872
• OCPBUGS-42017: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #869
• OCPBUGS-38544: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #842
• OCPBUGS-36949: [CARRY] perform operator apiService certificate validity checks directly #821
• OCPBUGS-37016: Bump github.com/containers/image/v5 #824
• OCPBUGS-36452: Can’t install operator on 4.15 after uninstalling it on a prior version #811
• OCPBUGS-31969, OCPBUGS-31970: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #787
• OCPBUGS-35230: Unblock CI #771
• OCPBUGS-33356: UPSTREAM: <carry>: bump go-jose #743
• Full changelog

operator-marketplace

• OCPBUGS-49427: Upgrade golang.org/x/net [release-4.14] #589
• OCPBUGS-32067: update golang.org/x/net for CVE-2023-45288 #565
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-45096: pin libreswan to 4.6-3.el9_0.3 #2368
• OCPBUGS-44784: Bump ovs to 3.1.0-137 #2360
• OCPBUGS-44793: Delete EgressIP LRP stale nexthops when node is not found #2361
• OCPBUGS-42944: Fix egress gateway pod cleanup for remote zone pods. #2356
• OCPBUGS-44379: Revert “Pin libreswan to the known working version 4.5” #2344
• OCPBUGS-42952: pin libreswan to the known working version 4.5 #2323
• OCPBUGS-42986: Add subnet overlap check for transit switch subnet #2317
• OCPBUGS-38263: [release-4.14] Bump OVSDBTimeout and make it configurable #2275
• OCPBUGS-38073: Fix registering northd metrics on appropriate nodes #2249
• OCPBUGS-37197: [release-4.14] ovspinning: Set affinity of each thread #2236
• OCPBUGS-36253: EgressIP: Reload certificates for the grpc heatlhcheck server #2213
• OCPBUGS-36554: Handle IP fragments in SGW mode #2219
• OCPBUGS-36703: Bump ovn to 23.09.4-16 #2222
• OCPBUGS-35009: ipv6+all protocols conntrack flush #2199
• OCPBUGS-34570: Fix EIP GARP config overwritten by gateway update #2188
• OCPBUGS-33721: use a forked version of j-keck/arping that fixes a threading issue #2170
• OCPBUGS-34076: Reuse node-subnet from cache if exists #2177
• OCPBUGS-34405: [release-4.14] dns: fix deadlock in case of error #2183
• OCPBUGS-33469: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2160
• Full changelog

powervs-block-csi-driver

• OCPBUGS-36095: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #90
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-36105: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.14 #75
• Full changelog

powervs-machine-controllers

• OCPBUGS-41978: Update go.mod to fix CVE - 4.14 #86
• Full changelog

prometheus

• OCPBUGS-43670: fix(discovery): Handle cache.DeletedFinalStateUnknown … #239
• Full changelog

telemeter

• OCPBUGS-34830: fix issuer check during JWT authentication 4.14 #539
• OCPBUGS-32888: update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 #535
• Full changelog

tests

• OCPBUGS-44107: Adjust createDNSPod() to support hypershift dual-stack test #29256
• OCPBUGS-39137: Bump timeout for the pod-network-service endpoints check #29062
• OCPBUGS-38365: add Proxy config #28998
• OCPBUGS-36800: Removes dependency on samples operator images #28952
• #28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28792
• #28745 FIX [release-4.14] OCPBUGS-33022: update egressFWTestE2E image which contains ping binary #28899
• OCPBUGS-36464: test/extended: skip etcd leader change check on hypershift #28921
• OCPBUGS-35475: Use centos7 tag instead of latest for cmd images tests #28881
• OCPBUGS-33417: Provide SCC access via RBAC #28806
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-23889: Bump otelgrpc to v0.49.0 #70
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-35136: Bump x/crypto to v0.24.0 #46
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-35138: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #123
• OCPBUGS-33798: FailedPrecondition volume does not appear staged #119
• Full changelog

vsphere-problem-detector

• OCPBUGS-38347: Drop event when CheckDefaultDatastore fails #171
• OCPBUGS-35913: Fix missing failure-domains #162
• Full changelog

---

View changelog in Markdown or change previous release: 4.14.474.14.464.14.454.14.444.14.434.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.554.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2025-02-21-2239454.19.0-0.nightly-2025-02-21-1255064.19.0-0.nightly-2025-02-20-1316514.19.0-0.nightly-2025-02-20-0548194.19.0-0.nightly-2025-02-20-0035134.19.0-0.nightly-2025-02-19-1441514.19.0-0.nightly-2025-02-19-0517494.19.0-0.nightly-2025-02-18-1956544.19.0-0.nightly-2025-02-18-1002574.19.0-0.nightly-2025-02-18-0409484.19.0-0.nightly-2025-02-17-2130464.19.0-0.nightly-2025-02-14-2153064.19.0-0.nightly-2025-02-14-1433164.19.0-0.nightly-2025-02-14-0519044.19.0-0.nightly-2025-02-11-1619124.19.0-0.nightly-2025-02-11-0359124.19.0-0.nightly-2025-02-10-2028384.19.0-0.nightly-2025-02-10-0342434.19.0-0.nightly-2025-02-09-2233214.19.0-0.nightly-2025-02-09-1224404.19.0-0.nightly-2025-02-08-222418───4.19.0-0.konflux-nightly-2025-02-21-0454474.19.0-0.konflux-nightly-2025-02-19-1416154.19.0-0.konflux-nightly-2025-02-15-1522094.19.0-0.konflux-nightly-2025-02-13-1753364.19.0-0.konflux-nightly-2025-02-13-0239074.19.0-0.konflux-nightly-2025-02-12-191052───4.19.0-0.ci-2025-02-22-0658304.19.0-0.ci-2025-02-22-0058304.19.0-0.ci-2025-02-21-1858304.19.0-0.ci-2025-02-21-1258304.19.0-0.ci-2025-02-21-0658304.19.0-0.ci-2025-02-21-0058304.19.0-0.ci-2025-02-20-1854274.19.0-0.ci-2025-02-20-1254274.19.0-0.ci-2025-02-20-0654274.19.0-0.ci-2025-02-20-0054274.19.0-0.ci-2025-02-19-1854274.19.0-0.ci-2025-02-19-1254274.19.0-0.ci-2025-02-19-0654274.19.0-0.ci-2025-02-19-0054274.19.0-0.ci-2025-02-18-1844104.19.0-0.ci-2025-02-18-123059───4.18.0-0.nightly-2025-02-21-0905004.18.0-0.nightly-2025-02-21-0408234.18.0-0.nightly-2025-02-20-1725054.18.0-0.nightly-2025-02-20-0627404.18.0-0.nightly-2025-02-19-2354274.18.0-0.nightly-2025-02-19-1327254.18.0-0.nightly-2025-02-19-0656534.18.0-0.nightly-2025-02-19-0207494.18.0-0.nightly-2025-02-18-1141024.18.0-0.nightly-2025-02-18-0502284.18.0-0.nightly-2025-02-14-2222494.18.0-0.nightly-2025-02-11-1340474.18.0-0.nightly-2025-02-11-0603014.18.0-0.nightly-2025-02-10-142434───4.18.0-0.ci-2025-02-21-1257394.18.0-0.ci-2025-02-21-0657394.18.0-0.ci-2025-02-21-0057394.18.0-0.ci-2025-02-20-1857394.18.0-0.ci-2025-02-20-1257394.18.0-0.ci-2025-02-20-0657124.18.0-0.ci-2025-02-20-0057124.18.0-0.ci-2025-02-19-1857124.18.0-0.ci-2025-02-19-125712───4.17.0-0.nightly-2025-02-20-2350304.17.0-0.nightly-2025-02-20-1549474.17.0-0.nightly-2025-02-20-0427434.17.0-0.nightly-2025-02-19-2128384.17.0-0.nightly-2025-02-19-1410394.17.0-0.nightly-2025-02-19-0710534.17.0-0.nightly-2025-02-18-2354494.17.0-0.nightly-2025-02-18-1721174.17.0-0.nightly-2025-02-18-1135114.17.0-0.nightly-2025-02-18-0304234.17.0-0.nightly-2025-02-17-2107084.17.0-0.nightly-2025-02-17-0548214.17.0-0.nightly-2025-02-15-0955014.17.0-0.nightly-2025-02-14-1949544.17.0-0.nightly-2025-02-14-1310104.17.0-0.nightly-2025-02-13-2043194.17.0-0.nightly-2025-02-13-1254014.17.0-0.nightly-2025-02-13-0756204.17.0-0.nightly-2025-02-12-1157424.17.0-0.nightly-2025-02-11-1312084.17.0-0.nightly-2025-02-11-0635354.17.0-0.nightly-2025-02-10-2318284.17.0-0.nightly-2025-02-10-1838274.17.0-0.nightly-2025-02-10-1112334.17.0-0.nightly-2025-02-10-0227544.17.0-0.nightly-2025-02-08-095745───4.17.0-0.ci-2025-02-21-1523554.17.0-0.ci-2025-02-21-0923554.17.0-0.ci-2025-02-20-2336154.17.0-0.ci-2025-02-20-1736154.17.0-0.ci-2025-02-20-1007104.17.0-0.ci-2025-02-20-0251314.17.0-0.ci-2025-02-19-1940004.17.0-0.ci-2025-02-19-1340004.17.0-0.ci-2025-02-18-230342───4.16.0-0.nightly-2025-02-21-1306294.16.0-0.nightly-2025-02-21-0702154.16.0-0.nightly-2025-02-21-0008564.16.0-0.nightly-2025-02-20-1934534.16.0-0.nightly-2025-02-20-0656414.16.0-0.nightly-2025-02-19-1452114.16.0-0.nightly-2025-02-19-0255454.16.0-0.nightly-2025-02-18-2142284.16.0-0.nightly-2025-02-18-1214054.16.0-0.nightly-2025-02-18-0416024.16.0-0.nightly-2025-02-17-2008124.16.0-0.nightly-2025-02-16-0949514.16.0-0.nightly-2025-02-14-1721034.16.0-0.nightly-2025-02-14-1025514.16.0-0.nightly-2025-02-12-1412164.16.0-0.nightly-2025-02-12-0710364.16.0-0.nightly-2025-02-11-1558544.16.0-0.nightly-2025-02-11-0107124.16.0-0.nightly-2025-02-10-1753004.16.0-0.nightly-2025-02-10-0244054.16.0-0.nightly-2025-02-09-045321───4.16.0-0.ci-2025-02-21-1709464.16.0-0.ci-2025-02-21-0818374.16.0-0.ci-2025-02-21-0008534.16.0-0.ci-2025-02-20-1808534.16.0-0.ci-2025-02-20-1208534.16.0-0.ci-2025-02-20-060853───4.15.0-0.nightly-2025-02-21-0639494.15.0-0.nightly-2025-02-20-1759384.15.0-0.nightly-2025-02-20-0657434.15.0-0.nightly-2025-02-20-0012094.15.0-0.nightly-2025-02-19-1522334.15.0-0.nightly-2025-02-19-0805064.15.0-0.nightly-2025-02-19-0140454.15.0-0.nightly-2025-02-18-1210254.15.0-0.nightly-2025-02-18-0510584.15.0-0.nightly-2025-02-17-1810114.15.0-0.nightly-2025-02-17-104834───4.15.0-0.ci-2025-02-21-2015494.15.0-0.ci-2025-02-21-0625184.15.0-0.ci-2025-02-20-1512384.15.0-0.ci-2025-02-20-0030284.15.0-0.ci-2025-02-19-1626154.15.0-0.ci-2025-02-19-0432044.15.0-0.ci-2025-02-18-2144164.15.0-0.ci-2025-02-18-0547514.15.0-0.ci-2025-02-17-1653234.15.0-0.ci-2025-02-17-101105───4.14.0-0.nightly-2025-02-21-0744594.14.0-0.nightly-2025-02-20-1811404.14.0-0.nightly-2025-02-20-1317124.14.0-0.nightly-2025-02-20-0236494.14.0-0.nightly-2025-02-19-1555334.14.0-0.nightly-2025-02-19-1159234.14.0-0.nightly-2025-02-19-0758174.14.0-0.nightly-2025-02-19-0136484.14.0-0.nightly-2025-02-18-0724154.14.0-0.nightly-2025-02-18-022555───4.14.0-0.ci-2025-02-21-1851094.14.0-0.ci-2025-02-21-0505454.14.0-0.ci-2025-02-20-1500514.14.0-0.ci-2025-02-20-0900514.14.0-0.ci-2025-02-20-0209344.14.0-0.ci-2025-02-19-1825574.14.0-0.ci-2025-02-19-1129104.14.0-0.ci-2025-02-18-182850───4.13.0-0.nightly-2025-02-22-0643024.13.0-0.nightly-2025-02-15-0455064.13.0-0.nightly-2025-02-08-0803324.13.0-0.nightly-2025-02-08-0121144.13.0-0.nightly-2025-02-05-0819544.13.0-0.nightly-2025-02-01-1216524.13.0-0.nightly-2025-02-01-0440334.13.0-0.nightly-2025-01-25-0157254.13.0-0.nightly-2025-01-18-0451344.13.0-0.nightly-2025-01-11-022931───4.13.0-0.ci-2025-02-21-1921504.13.0-0.ci-2025-02-21-0539044.13.0-0.ci-2025-02-20-1615494.13.0-0.ci-2025-02-20-1015494.13.0-0.ci-2025-02-19-1345494.13.0-0.ci-2025-02-17-1346024.13.0-0.ci-2025-02-15-1425164.13.0-0.ci-2025-02-15-043909───4.12.0-0.nightly-2025-02-20-2009304.12.0-0.nightly-2025-02-20-0543094.12.0-0.nightly-2025-02-19-1724554.12.0-0.nightly-2025-02-19-0842564.12.0-0.nightly-2025-02-18-2338294.12.0-0.nightly-2025-02-18-1201164.12.0-0.nightly-2025-02-17-1800044.12.0-0.nightly-2025-02-17-0206064.12.0-0.nightly-2025-02-13-180522───4.12.0-0.ci-2025-02-21-0705144.12.0-0.ci-2025-02-20-1805584.12.0-0.ci-2025-02-20-0529154.12.0-0.ci-2025-02-19-1550124.12.0-0.ci-2025-02-19-0040294.12.0-0.ci-2025-02-18-1840294.12.0-0.ci-2025-02-18-1240294.12.0-0.ci-2025-02-17-1716064.12.0-0.ci-2025-02-15-0843454.12.0-0.ci-2025-02-15-0229544.12.0-0.ci-2025-02-14-0717224.12.0-0.ci-2025-02-13-2035224.12.0-0.ci-2025-02-13-140321───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2025-01-08-1727074.11.0-0.ci-2025-01-08-1041384.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.19.0-ec.24.19.0-ec.14.19.0-ec.0

Source code for this page located on github