Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.28-x86_64
Tests:
- Blocking jobs
- Informing jobs
Upgrades from:
Untested upgrades:
4.10.20,
4.10.21,
4.10.22,
4.10.23,
4.10.24,
4.10.25,
4.10.26,
4.10.27,
4.10.28,
4.10.29,
4.10.30,
4.10.31,
4.10.32,
4.10.33,
4.10.34,
4.10.35,
4.10.36,
4.10.37,
4.10.40,
4.10.41,
4.10.42,
4.10.43,
4.10.45,
4.10.46,
4.10.47,
4.10.48,
4.11.10,
4.11.11,
4.11.12,
4.11.13,
4.11.14,
4.11.17,
4.11.19,
4.11.20,
4.11.21,
4.11.22,
4.11.23,
4.11.24,
4.11.3,
4.11.4,
4.11.5,
4.11.6,
4.11.8,
4.11.9Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.11.2
Created: 2023-02-15 12:37:35 +0000 UTC
Image Digest: sha256:85238bc3eddb88e958535597dbe8ec6f2aa88aa1713c2e1ee7faf88d1fefdac0
Release 4.11.28 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-02-14-163917
Components
Rebuilt images without code change
- Updating ose-agent-installer-node-agent images to be consistent with ART (#381) #381
- Full changelog
- Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #19
- Full changelog
- Updating ose-machine-api-provider-aws images to be consistent with ART #57
- Full changelog
- Updating baremetal-machine-controller images to be consistent with ART #165
- Full changelog
- Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #221
- Updating vertical-pod-autoscaler images to be consistent with ART #222
- OCPBUGS-2046: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 #244
- Full changelog
- Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
- Full changelog
- OCPBUGS-6920: Configure ignored namespaces into multus-admission-controller #1698
- OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
- OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
- OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
- Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression #1638
- Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation #1551
- OCPBUGS-3911: SDN: /var/run mount cleanup #1631
- Bug OCPBUGS-1075: HyperShift: Differentiate resources deployed by different CNO instances #1555
- Bug OCPBUGS-1367: Hypershift: Allow configuring hostname and labels on the route #1559
- OCPBUGS-393: Setting disableNetworkDiagnostics: true does not persist when network-operator pod gets re-created #1530
- Bug OCPBUGS-500: Kuryr: Bump timeoutSeconds for livenessProbe #1535
- Full changelog
- Run node selector tests only if we 2 non Performanceworker nodes (#563) #563
- pao: latency-tests: read test log directly from pod (#531) #531
- E2E: Automate Offline CPUs feature (#523) #523
- OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
- E2E fix: Make Nodeselector tests independent (#502) #502
- e2e: perfprof: remove broken test (#497) #497
- Add ktimer to PAO tuned profile (#510) #510
- set RPS for veth on host level only (#508) #508
- Filter out copied csvs when removing pao CSV (#496) #496
- Add intel_pstate=disable to default configuration with no hints (#480) (#487) #480
- e2e: perfprof: get cpus from node capacity (#489) #489
- OCPBUGS-1126: [release-4.11] irqbalance: add unit to clear the cpu ban list (#466) #466
- Add offlined to v1 api Generate new api and docs Add conversion test with offlined (#425) #425
- OCPBUGS-1131: [release-4.11] e2e: perfprof: unbreak the e2e-gcp PAO lane (#467) #467
- Add verification on kernel param rcutree.kthread (#472) #472
- hack: performance: skip tests under 5_latency_testing (#465) #465
- e2e: performance: Update PP isolated cpus (#458) #458
- Switch the upstream to quay centos (#455) #455
- e2e: performance: update path of latency binary (#447) #447
- OCPBUGS-263: tuned: disable irqbalance (#435) #435
- Full changelog
- Adding rpm-build to the Dockerfile (#119) #119
- Adding kernel-rpm-macros to the Dockerfile. (#108) #108
- Full changelog
- OCPBUGS-5876: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #178
- OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
- trim build path #14816
- client/pkg/fileutil: add missing logger to {Create,Touch}DirAll #14799
- clientv3: do not refresh token when users use CommonName based authentication #14790
- etcdserver: call the OnPreCommitUnsafe in unsafeCommit #14733
- add warning message when delete to release-3.5 #13748
- clientv3: fix the implementation of double barrier #14658
- server: add more context to panic message #14676
- fix: close maintenance conn #14662
- test: added e2e test case for issue 14571: etcd doesn’t load auth info when recovering from a snapshot #14656
- server: refresh auth info when etcd recovers from a snapshot #14648
- Backport #14591 to 3.5. #14593
- Release-3.5: server/etcdmain: add configurable cipher list to gRPC proxy listener #14500
- client/v3: Add backoff before retry when watch stream returns unavailable #14582
- Makefile: additional logic fix / Update Ubuntu base #13861
- etcdserver: added more debug log for the purgeFile goroutine #14578
- Automated cherry pick of #13224 #14572 #14573
- *: avoid closing a watch with ID 0 incorrectly #14563
- Backport PR 14322 to release-3.5 #14547
- Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt #14489
- OCPBUGS-947: Rebase openshift/etcd 4.11 onto 3.5.5 #155
- fix the flaky test TestV3AuthRestartMember #14454
- server: don’t panic in readonly serializable txn #14178
- etcdctl: allow move-leader to connect to multiple endpoints #14434
- testing: fix TestOpenWithMaxIndex cleanup #14440
- server/etcdmain: add build support for Apple M1 #14436
- server,test: refresh cache on each NewAuthStore #14409
- Fix corruption checks v3.5 #14282
- Move consistent_index forward when executing alarmList operation #14429
- fix the potential data loss for clusters with only one member #14424
- Backport of pull/14354 to release-3.5 #14397
- Refactor the keepAliveListener and keepAliveConn #14366
- clientv3: close streams after use in lessor keepAliveOnce method #14361
- etcdserver: bump OpenTelemetry to 1.0.1 and gRPC to 1.41.0 #14312
- Change default sampling rate from 100% to 0% #14318
- server/auth: protect rangePermCache with a RW lock #14227
- clientv3: Fix parsing of ETCD_CLIENT_DEBUG #14222
- Support configuring
MaxConcurrentStreams for http2 #14219
- Automated cherry pick of #14182 #14187
- client/v3: do not overwrite authTokenBundle on dial #14132
- Restrict the max size of each WAL entry to the remaining size of the WAL file #14127
- Backport two lease related bug fixes to 3.5 #14087
- scripts: Avoid additional repo clone #14050
- Test release scripts #14043
- [backport 3.5]: server/auth: enable tokenProvider if recoved store enables auth #13205
- Update golang.org/x/crypto to latest #13996
- Update consitent_index when applying fails #13946
- Revert #13714 #13950
- Full changelog
- Updating ose-gcp-cloud-controller-manager images to be consistent with ART #14
- Full changelog
- OCPBUGS-6683: add message about possibly working with restricted SCC #1459
- Bug 2117679: UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1343
- OCPBUGS-1991: UPSTREAM: 110939: don’t quota events.k8s.io events by default #1379
- OCPBUGS-3174: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1408
- Bug 2099800: bump to k8s 1.24.6 #1381
- Automated cherry pick of #112299: Reduce default gzip compression level from 4 to 1 in #112399
- Automated cherry pick of #112427: Add zone field to vsphere test cloudconfig #112479
- Automated cherry pick of #112526: Limit redirect proxy handling to redirected responses #112528
- Automated cherry pick of #112508: kubeadm: allow RSA and ECDSA format keys in preflight check #112535
- Automated cherry pick of #111205: Fix problem in updating VolumeAttached in node status #112304
- Automated cherry pick of #112193: Add an option for aggregator #112331
- Automated cherry pick of #112017: exec auth: support TLS config caching #112337
- Update images, dependencies and version to Go 1.18.6 #112322
- Automated cherry pick of #110951: fix nestedPendingOperations mount and umount parallel bug #112101
- Bump cel-go to v0.10.2 and add unit tests #111970
- Automated cherry pick of #111009: Windows: ensure runAsNonRoot does case-insensitive comparison #112211
- Automated cherry pick of #110179: Prune defaults for CRD serving #110582
- Automated cherry pick of #111752: Revert “client-go: remove no longer used #112056
- Automated cherry pick of #111999: fix error type #112139
- Automated cherry pick of #112183: Tolerate sub-microsecond eventTime changes on update #112187
- Automated cherry pick of #112150: Improve kubectl display of invalid errors #112155
- Automated cherry pick of #111773: fix a memory leak problem when calling DryRunPreemption #111803
- Automated cherry pick of #110075: Add retry logic for Unix Domain sockets on Windows #110935
- Automated cherry pick of #110670: Keep track of each pod that uses a volume during #111636
- Automated cherry pick of #111472: allow namespace admins to use leases to encourage migration #111515
- Automated cherry pick of #111141: Fix kubelet panic when accessing metrics/resource endpoint #111163
- Automated cherry pick of #110140: Fixing issue in generatePodSandboxWindowsConfig for #110966
- fix
kubeadm upgrade plan issue with FQDN nodes names #111430
- Automated cherry pick of #111235: fix a possible panic because of taking the address of nil #111274
- Automated cherry pick of #111477: Share a single etcd3 client logger across all clients #111648
- Automated cherry pick of #111721: Fix deleting UIDs tracking expectations #111722
- Automated cherry pick of #110813: Ensure the dir of –audit-log-path exists #111225
- Automated cherry pick of #111646: Fix JobTrackingWithFinalizers when a pod succeeds after the #111664
- Fix: filter out unsatisfied nodes when calling AddPod in PodTopologyS… #111511
- Update Go to 1.18.5 #111639
- Update Go to 1.18.4 #111464
- Execute the Run function of kubelet, no log output after failure #110917
- kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join #111021
- Automated cherry pick of #111026: Do not skip job requeue in conflict error #111037
- Automated cherry pick of #110465: e2e: ensure single image for populator containers #110541
- Automated cherry pick of #110639: fix a bug on endpointslices tests comparing the wrong #110920
- Cherry pick of #110294 GIT-110239: fix activeDeadlineSeconds enforcement bug #110544
- Automated cherry pick of #110523: fix image pulling failure when IMDS is unavailalbe in kubelet #110554
- Automated cherry pick of #110791: kubeadm: fix the bug that configurable KubernetesVersion not #110908
- Automated cherry pick of #109580: e2e: add storage capability for offline volume expansion #110615
- Automated cherry pick of #110365: Fix unnecessary recreation of placeholder EndpointSlice #110732
- Automated cherry pick of #110469: add missing error handling steps #110609
- Automated cherry pick of #110408: apiserver: printers should use int64 #110572
- Automated cherry pick of #110652: fix: –chunk-size with selector returns missing result #110735
- kubeadm: fix error adding extra prefix unix:// #110634
- Automated cherry pick of #108284: fix: exclude non-ready nodes and deleted nodes from azure #109931
- Automated cherry pick of #110256: kubelet: Mark ready condition as false explicitly for terminal pods #110479
- Automated cherry pick of #109657: GCE Windows: Copy the CNI binaries from the right folder #109787
- Automated cherry pick of #109624: Ignore EndpointSlices that are already marked for deletion #110484
- Automated cherry pick of #110145: fix audit union loop variables in closures #110276
- Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules #109974
- Automated cherry pick of #109987: Fix resizing of ephemeral volumes #110117
- Automated cherry pick of #110191: kubelet: Pod probes should be handled by pod worker #110416
- Update Go to 1.18.3 #110422
- Automated cherry pick of #110255: Endpoints and EndpointSlices should not publish IPs for terminal pods #110258
- Automated cherry pick of #109103: cpu manager policy set to none, no one remove container id #110307
- kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24 #110103
- Automated cherry pick of #109722: Do not wrap lines if we can’t read term size #109725
- Automated cherry pick of #110009: Fix requests scope classification #110087
- Automated cherry pick of #109947: Wait for cache to sync in job’s TestWatchOrphanPods #109979
- Automated cherry pick of #109928: Fix ServiceIPStaticSubrange assigns duplicate IP addresses #109940
- Automated cherry pick of #109969: authn: fix cache mutation by AuthenticatedGroupAdder #110004
- Automated cherry pick of #109858: GCE: skip updating and deleting external loadbalancers if #110003
- Automated cherry pick of #109880: Remove warning log for merging meta and scale type #110042
- Update Go to 1.18.2 #110044
- Automated cherry pick of #109836: Fix OpenAPI loading error caused by empty APIService #109866
- Automated cherry pick of #109840: kubeadm: only taint CP nodes when the legacy “master” taint #109841
- Automated cherry pick of #109486: Integration test for backoff limit and finalizers #109786
- OCPBUGS-1540: UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1375
- [release 4.11] Bug 2117424: UPSTREAM: <carry>: Remove reserved CPUs from default set #1351
- Full changelog
- cherry-pick #2006 #2028
- Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
- Add missing rbac for authentication reader #1822
- update OLM catalogs to 4.11 #1786
- Bug OCPBUGS-1367: CNO: Handle long OVN SBDB route hostnames #1747
- Add rbac so route-to-ingress controller can do its leader election #1728
- fix(oauth): Do not proxy IBM Cloud IAM endpoints #1723
- Ingress endpoint #1667
- Self image lookup: Retry on empty string #1695
- Full changelog
- OCPBUGS-3380: fix storage/ceph path structure (#698) #698
- OCPBUGS-6025: operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) #719
- OCPBUGS-5349: do not periodically update Available clusteroperator co… (#718) #718
- OCPBUGS-2346: refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) (#689) #685
- OCPBUGS-1355: update the DVO metrics gatherer (#664) (#677) #664
- manifests/02-namespace: Explicitly clear run-level label (#676) #676
- backport helm upgrade and uninstall metric (#662) #662
- Full changelog
- Bug OCPBUGS-1713: Cleanup KuryrPort when Pod is missing #694
- Bug OCPBUGS-577: Fix unbound router_id variable while creating event #687
- Full changelog
- fix: remove release architecture validation at the config level (#504) #504
- Full changelog
Source code for this page located on github