4.11.37

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.37-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-aws-serial
- azure-ovn-upgrade-4.11-micro Succeeded periodic-ci-openshift-release-master-ci-4.11-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.11-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.11-upgrade-from-stable-4.10-e2e-gcp-ovn-rt-upgrade
- metal-ipi Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-ovn-ipv6
- metal-ipi-serial Succeeded periodic-ci-openshift-release-master-nightly-4.11-e2e-metal-ipi-serial-ipv4

Upgrades from:

Untested upgrades: 4.10.20, 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.27, 4.10.28, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.43, 4.10.44, 4.10.45, 4.10.46, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.3, 4.11.30, 4.11.31, 4.11.32, 4.11.4, 4.11.5, 4.11.6, 4.11.7, 4.11.8, 4.11.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.11.14

Created: 2023-04-12 21:29:08 +0000 UTC

Image Digest: sha256:d06421d7594b65f775e2e7a8eabfef7bf2bcd0a357971ecdcd4edddaee6007e5

Release 4.11.37 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-04-12-130625

Components

Kubernetes upgraded from 1.24.6 to 1.24.12
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202211072153-0 to 411.86.202304082149-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 0daf34f1 sha256:1728cff14a5e2630cf1774f11de08df19595edd102dfb76cad7e187515a456d2
alibaba-cloud-csi-driver git 8dd7ae6f sha256:80fa04baeb3a0fdc1dc89c28a574df35bed9e25ee753c65f645b940ca1102f30
alibaba-disk-csi-driver-operator git f70a51b8 sha256:d3d1e7956169b5c012f771a1ec6a11bc74f10a012d1f36ab554b8f672d5c4b2a
alibaba-machine-controllers git 41451089 sha256:adde581310912edb761de7fcc0e8f7f698f3959bce89dc1dae26f46fdb8107d9
apiserver-network-proxy git 61e198ca sha256:fe9083d4a1e01ee2ac024688d0d736486e1616bcdb8dbfca3c8d5ee5e70cb8e6
aws-cloud-controller-manager git ea1a9b23 sha256:2bc15d1108f0f1f18de34644ac7240f767f34c6b2ee47ac84e2789f3099108a2
aws-cluster-api-controllers git b3fe15be sha256:9259a44881f0cca34425e6bef733a61cf4a82aa1caa42c699e04fe91cd6aedd6
aws-ebs-csi-driver-operator git 2c7529e7 sha256:02d56a1140f16d984d9e36107e6f27c3c438631e05c4818f9b0bce4c61f94c55
aws-pod-identity-webhook git a085f1cd sha256:33a34a41563e4b0f77e53c35a49d9d6ba869c38103625571690d6ad4fe03e42f
azure-cloud-controller-manager git 6bf2e335 sha256:75e63fbfb9a9e793aee9db0e5c83baf5be8f901d9688f42bf0e7b6277e39121f
azure-cloud-node-manager git 6bf2e335 sha256:3870f877cc39f7a33cc997b87320c412935bd3dd177db348954361eafa234a99
azure-cluster-api-controllers git a851a354 sha256:264ad473e6a7b49fa59cb2ee194676951f3395fe854a4ba98a8e21d0a7399da3
azure-disk-csi-driver git 2757f099 sha256:a49fccc0f3e1f138039b4853590a1975f972f8b29c7490910bb556a8f8db0060
azure-file-csi-driver git 67c3831e sha256:bfdd96e9d91cb812c68ff60129229ac8fcd04db163df44cabfe1379b7a0f80c4
azure-file-csi-driver-operator git 4ddaca2a sha256:73740113e292cee3d822e130c8a927e25d99e759ec45f9bf8e6e2b0492560494
baremetal-machine-controllers git 3cbef7f4 sha256:b9dcfc9e0dea39094aab8f586a17864db482c2c341daa2ebbfe13c18b114ad81
baremetal-runtimecfg git ea6a9491 sha256:dec8a90de29ea27f52b4058b95a23630cefa9898412966a03860c1eb82329e09
cloud-credential-operator git a36704a0 sha256:47da91fffef0fe1e565cb1c18ff9bd736e9384f6aac2408364872dc6786fb044
cluster-authentication-operator git e2bcbaaf sha256:26287ba65dab4413ba3d1e921c97d409ca1315198dca9cc34161140e75f09346
cluster-autoscaler-operator git fcffbcda sha256:e1cdb2561edf82faffa8e328748fd6b23d33e9a5d754f59e771bfb3b7984fe98
cluster-bootstrap git f22d1c60 sha256:b7d8b40fb6fd3bc56062328ab6cd3b5ee88efbc57b23610ffeec88fba2e5fd1b
cluster-capi-controllers git f9c215c4 sha256:aaac411fa7dc2bf26c895c905bbf1dbc31b560edee4e82642abbfffece14f839
cluster-capi-operator git 06d77efa sha256:e13e3fe72bd691171ca84254091405751a324cd3793f33d47d2d3bde287b12e7
cluster-config-operator git 0e01b06b sha256:050d4edfc9a48e8fb6cd4ef9d4793c6a3c0fcfadb215f52569e412853ecaee7d
cluster-csi-snapshot-controller-operator git 8d0774fd sha256:c97c8043d23474047c1e5400c412c901e3e2ce1bb930d7476bb07c5d55b6a275
cluster-dns-operator git 8abe243f sha256:77ae0addd9f2c7fe12ecd6e033e63bd38757748e0c46127231f79b997a7dc8db
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:86f5b26c54859353cb88ae873cd04860b042e020756d87745156294c55d1083e
cluster-openshift-controller-manager-operator git a536525d sha256:910e4ce55aea045ec4f78bf95365af982376f001a89706e4a2d2bea02dd550ea
cluster-storage-operator git e4de8c76 sha256:bf0358f7159879902f1905684f00a796901b53b2dc3df445ed45bfbb1b4d901b
cluster-update-keys git 289032fb sha256:a03aa27db4d8be6cd5b200b27e9d812b9a57636ff629ff1cb82aab3831a47f45
configmap-reloader git b7c03bb0 sha256:56116d9a349eebeebf893e584eea9121d0a335898946c4fde11b33bd1c681fe8
container-networking-plugins git 0ad9da64 sha256:e5827fd649522af612228057a6c9a85da1fdba34576c488c0ce6c8c80b09257f
csi-driver-nfs git f144bb43 sha256:8826f6f382d248557c6b4eb9f6ae0a0195863e897aa42c784a2d48e79fca1955
csi-driver-shared-resource git 3f69f2f2 sha256:7ff3f5dc09e7b581d7db18a3bef0495d45d310808021396579e24f9fd742a305
csi-driver-shared-resource-operator git d3985eb1 sha256:1709211e7cfef7903d82d00e72c99dc1efbd58d412e7ffe14bc6af85442708dc
csi-driver-shared-resource-webhook git 3f69f2f2 sha256:0e7a431f4aaa50ed67539d143f48149247cb338c0e2aeab20c1a99f1c6992b99
csi-external-attacher git da5442f1 sha256:7841c4a6b54656328c026e9e52188f6c146997e623d97540249828d133dc6c48
csi-external-provisioner git 86277ec2 sha256:97d167e91bd13b9864f939765fe8b3315bca25fe21afedaebe1e827d31b43861
csi-external-resizer git 2cea576d sha256:e30e6d8cd11b3ff1185a3a79004b7954c704e9e7dc76f8a266971521054cbb2b
csi-external-snapshotter git 0afdf731 sha256:bd635913b7eae19b461666f5fcf72d61b98b8b60f683374869815e58a44d93e1
csi-livenessprobe git 7319607c sha256:03bebf09cfc01da0c48ab9969af25f3664d5f597c6ffccd595a8c0d0f03bed19
csi-node-driver-registrar git 710109c8 sha256:0087448a68789026f928eea46f5a4a155541d7dba6e1bb9272ced374439af766
csi-snapshot-controller git 0afdf731 sha256:c642371025f69ed52dde4cb1567801b6f4fdf0721507d26367f6402e9d1c4b25
csi-snapshot-validation-webhook git 0afdf731 sha256:e878f1c521de48a79bd69b1ea69dc88dfa999d576333e3cb4ad3fb582f81ebc4
docker-builder git 09e95c1c sha256:284c1b9958f934be38e79c088db587945ae7318b1225f143e184e3786ef9e74f
egress-router-cni git fccaf1d9 sha256:675da84cc3bbbae50c17209c639464ab2e8a3f43d78b77b49ae620bf070ca15e
gcp-cloud-controller-manager git a5a0048a sha256:b4d2e45b0b16d9dbfdc3de55c9eb5367cca7b4dc79114a2222e8bb36a5d24fb0
gcp-cluster-api-controllers git ff20dda8 sha256:f698438cdc12b4152ffa72f77463b7a2aee9812a907e8cdeb0e7118f9c852562
gcp-pd-csi-driver git f9d7fdce sha256:b897e829b70c5ef669ea3ffa60183cec353710fb1e556bf14bf50e2a3d9683c3
gcp-pd-csi-driver-operator git bc7bad4f sha256:61a8640243462d0a5cadb4b80998a0198d6751892e6d6a1384449e024a7ebdea
haproxy-router git 601ba575 sha256:a86a39f1e310c5329686318bfae1876e46fc3d02e85140fd1adf8728563bd084
ibm-cloud-controller-manager git ce836969 sha256:5eef9c7d45427eef66316b5a270540198f76585b79a9181a5809a84256e1b086
ibm-vpc-block-csi-driver git 65f0da2d sha256:48f170d05bb1bfb77c0b6a1e840676c3e6741a3d25a5f7ab446cd440dea6e0c9
ibm-vpc-block-csi-driver-operator git e4a21800 sha256:f18d8d8fdfab7a55cc77b0cfbe513e05b464e82493017050bc7b7b2c480829ef
ibm-vpc-node-label-updater git 32e18fa7 sha256:b4c168347a83c2f96f87cdd66753a9c08a70bc35460333e06ed73849e8c29d60
ibmcloud-machine-controllers git 3bde969f sha256:bfa6959c3620adb3399ff76a2eaccc232e30db99639c7d44099a0eedf35f92eb
ironic-machine-os-downloader git 876128b5 sha256:77f9172cf79e66a442c84f3aedc00e269520411c032d5a3bfd58aa5e7a89d80b
ironic-static-ip-manager git 84a378e0 sha256:96b05fb0a4619167d49446eec6d38bf654c1205a534b29d6c1c44dd9f7cd5a1a
k8s-prometheus-adapter git 32fb8ea0 sha256:359e6b5d205da2de79a2ecd0096a397078f10c300d205dbe9bbebcee972ad72b
keepalived-ipfailover git f1330f6f sha256:ff35aadaea006eaa3ab2378e842defba25bdf86ac7b6d7659761d91e07b8c41a
kube-rbac-proxy git a805ba5e sha256:44a3c43796beb054b9cc16bd1977a2194835813f9a9a84cbbb516f9937ae640e
kube-storage-version-migrator git 596745ce sha256:c87d8b037025acaf468c7a14c45d49647166d8911a45e57b3fb05c2c7ae548b0
kuryr-cni git 93daed6b sha256:84d87da6131b6f06b0d561885a60ac2fb1157e59be4a375cc3aa32c5e91608a0
kuryr-controller git 93daed6b sha256:443730d96bbf3cd31c1ff33a921c8c2a4fa41a31e44134bd196a6a340f8f9f22
libvirt-machine-controllers git b6e14eab sha256:d3c656b2cc39a47be52c8129771f86c92631c9999a405ee870ec417e7a92d757
machine-os-content sha256:19a1e685e27f3559549a3b54147b413ad46bcab6dbc550fafb52ffcb3e3c4030
machine-os-images git b1580a29 sha256:5619505b769eabf0d731383f8eecb4752308b9b378e0d7990e58c221bb825998
multus-networkpolicy git 643fdaf6 sha256:5e611eae7fca4633df5e48d1638da2042e260e253aff129e844198852cbba23c
multus-route-override-cni git 523b7904 sha256:735146890e982cd09c2b376ba6fbd7c26bb35c56098c9f6e04c5868d9e142524
network-interface-bond-cni git b76a6770 sha256:948d55208c2f3c8bb17093b73d0b37353b7d80c06fb9517860978fe7677fcf4a
network-tools git 4e87286c sha256:dc24f72da7593b76f601f37c4dcacf28a1c4c0d715eb2536a164fcbd92baeb06
nutanix-machine-controllers git a94eb77c sha256:ffe55406f0e3cb6b6bfd75f2cacca738bf71dfa17b2d60d60091e81cf419aed2
oauth-apiserver git c9c2dd15 sha256:c57247135a0217b0faf9bc53f412e8b56abf8c4106d4931d483d170abb109575
oauth-proxy git aad1b28f sha256:f3d5b2261e01c73fcd7a390fc5a8a6356da0f20d3c94563b6c7c8ce31403c780
oauth-server git 8d80088e sha256:1527a5a49df6c9ed3da42f2a3b1e3e30e49acb28a6f583278edf58637dd74413
openshift-controller-manager git 911da575 sha256:ea9d88c9eaaab173b6eb02f50cdd4b4d55bb8411cd7c8bac88d6cdbfc7010cc9
openshift-state-metrics git 1a7a5dcb sha256:c3f8e33c2ac370105ec97b1e80d9b181e7414a3f71ee9bdb5b87b4d4bf0a01f7
openstack-machine-controllers git 38f15dbc sha256:e2c845e1fc972e77f14d04d77998deb26a67e0447e27c005eb583486c53ebfdd
operator-marketplace git c7a65336 sha256:dee41ef5b8f50b9e3edeaa25dec103f24545ac5cbaf30d2d2d1e0998840cc342
ovirt-csi-driver git cd3370fb sha256:f6f17b4fdfb46f83f65c6f392ad0cf080db9f371cf277210740a9699aac2abbe
ovirt-csi-driver-operator git 7a30e388 sha256:d23470af7b21d7146236be0196e4583129a0aef50e0a4a6353eb1374efc5c8c0
ovirt-machine-controllers git 5a93d94c sha256:50fa16eea2f2142e96fd504525aba1ee124b783f69a21e5ac572f0f84882ecc7
powervs-cloud-controller-manager git 8ace6e94 sha256:e55acd915ab7d6b2e20cdbb3d8fad01effd5c4d5a72a371ab8537720783ccae9
powervs-machine-controllers git 76649b32 sha256:f3f85a1c131e132eebe0fadc4bb5510f419ea7742e9d858eebc8633669f8a570
prom-label-proxy git af12fbc4 sha256:9dd4b17a4cc290b63039262f5920088b285ba886b91627dfe8b6c5516e590df8
prometheus git e751c61e sha256:19742764d5bcc3f5e93dbcad54e9839d5cc7b17953d112926178fc333ecb4a55
prometheus-alertmanager git 05cfc390 sha256:17aa7599ea91cae9515f1a5653fbd4a64a3489bf18c0ef128e2d6d1f5d5f2cc2
prometheus-node-exporter git 40942c28 sha256:d327a3563fdb9b69844eed159a5dc73585a0e707ad117b5abd035a6cc56c035f
service-ca-operator git 0899d112 sha256:e92a50b0a728ecbca56de755ddb5ea32b5786ea2c1b521bfd8089ffff957c2b1
telemeter git b1f5dd2c sha256:48e276eff7610ec00d6cabb5d43f82cdfd5ef172141f1dc9b94147343af31e61
vsphere-cloud-controller-manager git 91f7b1fa sha256:28ba505025849044ea24b7e33484b32c15da5e2a68ab60a0337a9fbf90937658
vsphere-cluster-api-controllers git f67d1d02 sha256:459e057b65b910d3b30036af0c2e2c077a5127b9f6ed13e9738c0904460511d6
vsphere-problem-detector git 5910f330 sha256:f5d9c6d1f9a3ae790f6b6735d00d40ff32b8aa77434f315eca1c70af39c9d666

agent-installer-api-server

Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
MGMT-11799: change all ‘go get’ commands (#4887) #4887
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Remove jira tickets prefix requirements (#596) #596
Full changelog

agent-installer-node-agent

Updating ose-agent-installer-node-agent images to be consistent with ART (#381) #381
Full changelog

aws-ebs-csi-driver

OCPBUGS-4185: Fix nodeService.getVolumesLimit() adding more instance #213
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #57
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7987: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #71
Full changelog

azure-machine-controllers

OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-11663: AWS - Remove ACLs from s3 ign #7085
OCPBUGS-10594: [release-4.11] aws: bump aws-sdk-go version #7000
OCPBUGS-7530: bump RHCOS 4.11 bootimage metadata #6875
OCPBUGS-5665: CVE-2021-4238: goutils: update for randomness fix #6765
OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
OCPBUGS-4720: GCP: Add me-west1 region #6690
OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
OCPBUGS-4398: update golang.org/x/crypto #6652
OCPBUGS-3023: GCP: Add missing regions #6542
OCPBUGS-4325: gcp: fail during validation if service usage is not enabled #6647
OCPBUGS-4325: Service Usage API is required, not optional #6642
OCPBUGS-4081: OpenStack: Force JSON content-type in Swift #6625
Bug 2105331: Switch to perform normal marshalling with unknown fields #6102
OCPBUGS-378: UPI image download govc rate limit failure #6246
Full changelog

baremetal-operator

OCPBUGS-11612: allow namespace to continue with terminating when deprovisioning at t… #262
OCPBUGS-8298: cve: 2022-21698: upgrade prometheus/client_golang #256
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-10772: bump repo sclorg/s2i-ruby-container location for newapp test #1380
OCPBUGS-8205: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1360
Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect #1230
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
OCPBUGS-3932: Add assigned egress ips into capacity #78
OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
OCPBUGS-4528: AWS: build temp credentials file from AWS key and secret #84
OCPBUGS-4167: Run azure operations in sequence #79
OCPBUGS-4163: AWS: Fix race in IP address assignment code #83
Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig #75
OCPBUGS-4233: Updating ose-cloud-network-config-controller images to be consistent with ART #81
OCPBUGS-3089: Update OWNERS #71
Full changelog

cluster-autoscaler

Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #221
Full changelog

cluster-baremetal-operator

OCPBUGS-5628: Update dependencies #321
Updating ose-cluster-baremetal-operator images to be consistent with ART #264
OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
OCPBUGS-1762: add a workaround for a NetworkManager issue #298
OCPBUGS-747: Use machines instead of nodes to detect masters #307
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-5781: Try to limit groups for the REST mapper discovery #216
Full changelog

cluster-etcd-operator

OCPBUGS-9908: Garbage collect grafana-dashboard-etcd #1022
OCPBUGS-9967: increase live/ready timeout and failure thresholds #1025
OCPBUGS-7720: set default timeouts in etcdcli #1007
OCPBUGS-7510: [release-4.11] fail early on missing node status envs #1006
OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
Full changelog

cluster-image-registry-operator

OCPBUGS-9921: bump aws-sdk-go #848
add myself to OWNERS #831
OCPBUGS-6907: OpenStack: Add support for Proxy #836
OCPBUGS-5778: swift: Retry connecting to OpenStack #830
Full changelog

cluster-ingress-operator

OCPBUGS-3049: Update CRLs when they expire #853
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #1448
OCPBUGS-2938: Duplicate prometheus rules for API SLOs after upgrade #1397
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
Full changelog

cluster-kube-cluster-api-operator

Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-7756: Guard pod set readiness probe endpoint explicitly #703
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
OCPBUGS-4304: resources.requests for operator pod #667
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7756: Guard controller: set the readiness probe endpoint explicitly #464
OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
Full changelog

cluster-machine-approver

OCPBUGS-10382: ignore case when checking csr hostnames #181
Full changelog

cluster-monitoring-operator

OCPBUGS-11465: jsonnet: Add prometheus container in UWM #1938
Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
OCPBUGS-4640: Increase startupProbe for prometheus #1845
OCPBUGS-4030: test: increase timeout when checking remote write metrics #1821
Full changelog

cluster-network-operator

OCPBUGS-10487: Enable configuration of node healthz server on ovnkube #1742
OCPBUGS-5954: Backport Added missing API field podref to OverlappingRangeIPReservation CRD #1686
OCPBUGS-6993: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1702
OCPBUGS-3462: CNI binary copy should account for the possibility of symlinks [backport 4.11] #1616
OCPBUGS-6920: Configure ignored namespaces into multus-admission-controller #1698
OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression #1638
Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation #1551
OCPBUGS-3911: SDN: /var/run mount cleanup #1631
Full changelog

cluster-node-tuning-operator

Run node selector tests only if we 2 non Performanceworker nodes (#563) #563
pao: latency-tests: read test log directly from pod (#531) #531
E2E: Automate Offline CPUs feature (#523) #523
OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
E2E fix: Make Nodeselector tests independent (#502) #502
e2e: perfprof: remove broken test (#497) #497
Add ktimer to PAO tuned profile (#510) #510
set RPS for veth on host level only (#508) #508
Filter out copied csvs when removing pao CSV (#496) #496
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
Full changelog

cluster-policy-controller

OCPBUGS-5787: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #96
Full changelog

cluster-samples-operator

OCPBUGS-7330: When setting allowedRegistries urls the openshift-samples operator is degraded #490
Full changelog

cluster-version-operator

OCPBUGS-10671: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #915
OCPBUGS-5882: Set upgradeability check throttling period to 2m #885
Full changelog

console

OCPBUGS-7950: Repositories list does not show the running pipelinerun as last pipelinerun #12603
OCPBUGS-7494: fix broken pipeline secret #12569
OCPBUGS-7789: [4.11.z] Fix kubevirt-console tests #12325
OCPBUGS-7539: Fix rerender loop/crash when bindable-kinds is found but has no status #12570
OCPBUGS-7043: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12532
OCPBUGS-7127: Editing Pipeline in the ocp console should show correct information #12540
OCPBUGS-6879: Remove refs-heads from the branch name for Repository pipelineRun row #12509
OCPBUGS-7069: PipelineRun task status overlaps status text #12534
OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages #12514
OCPBUGS-6989: Don’t proxy CORS response headers #12524
OCPBUGS-5459: Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12417
OCPBUGS-6689: Fix NPE when displaying CSV with incomplete information #12478
OCPBUGS-1727: Allow regular users to access debug pods #12100
OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
OCPBUGS-4786: Fix for initial showing of topology contents #12311
OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
OCPBUGS-2443: Monitoring: Fix help popovers #12173
OCPBUGS-2716: Update dependencies to the registry library and devfile parser #12186
OCPBUGS-3300: check that user can patch console operator config in s… #12240
Full changelog

console-operator

OCPBUGS-5518: Deleting downloads deployment should not fail if already deleted #715
Bug 1770297: State that odo is comunity supported #700
OCPBUGS-1790: Retrieve user-defined Alertmanager services from shared configmap #685
Full changelog

coredns

OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6684: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #176
OCPBUGS-6046: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 #166
Full changelog

csi-driver-manila-operator

OCPBUGS-10605: Bump go.mongodb.org/mongo-driver to v1.5.1 #177
OCPBUGS-7278: Address CVE-2022-41717 #168
Full changelog

docker-registry

OCPBUGS-9921: bump aws-sdk-go #364
Full changelog

driver-toolkit

Adding rpm-build to the Dockerfile (#119) #119
Adding kernel-rpm-macros to the Dockerfile. (#108) #108
Full changelog

etcd

Update owners #186
Updating ose-etcd images to be consistent with ART #158
OCPBUGS-5876: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #178
OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
Full changelog

gcp-machine-controllers

OCPBUGS-4579: refactor restartPolicyToBool function #30
OCPBUGS-4532: Set sync period for Machine controller #27
Full changelog

hyperkube, pod

OCPBUGS-11314: UPSTREAM: <carry>: Force using the go tooling from the system #1536
OCPBUGS-11314: Bump to k8s 1.24.12 #1529
OCPBUGS-10215: Fix mounted volume expansion tests #1509
OCPBUGS-7079: Bump to k8s 1.24.11 #1500
OCPBUGS-6683: add message about possibly working with restricted SCC #1459
Bug 2117679: UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1343
OCPBUGS-1991: UPSTREAM: 110939: don’t quota events.k8s.io events by default #1379
OCPBUGS-3174: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1408
Full changelog

hypershift

install: add flag to wait for HyperShift operator rollout #2370
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2352
cherry-pick #2006 #2028
Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
Full changelog

insights-operator

OCPBUGS-6832: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#739) #726
OCPBUGS-6783: Create gatherer for gathering machines. (#737) #737
OCPBUGS-3380: fix storage/ceph path structure (#698) #698
OCPBUGS-6025: operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) #719
OCPBUGS-5349: do not periodically update Available clusteroperator co… (#718) #718
Full changelog

ironic

Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
OCPBUGS-4908: Update packages versions with latest available #336
OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
OCPBUGS-3674: Don’t save OS_ prefixed variables #318
Bug OCPBUGS-3478: Improve resiliency of eTag handling #314
OCPBUGS-4410: Remove RDO distribution configuration (finally fixes #46) #328
Full changelog

ironic-agent

OCPBUGS-5099: make coreos-installer output available in the logs #67
Full changelog

kube-proxy, sdn

OCPBUGS-10853: Fix race in Egress IP Tracker start #522
OCPBUGS-8399: Initialize egress node monitoring struct with previous reachability status #513
OCPBUGS-7515: Handle race condition to setup default vnid flows #506
OCPBUGS-5926: Add node egress IP assignment resync #492
OCPBUGS-4607: pass ResourceVersion:0 for kube List() calls #479
OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
OCPBUGS-2105: fix network policy egress #464
Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 #477
Full changelog

kube-state-metrics

OCPBUGS-4087: cherry-pick, do not expose ingress path metric when service is nil #85
Full changelog

machine-api-operator

OCPBUGS-11326: Fix empty component version #1133
OCPBUGS-10901: Block machine deletion if extra disks are attached #1131
OCPBUGS-8311: Short circuit misfiring #1124
OCPBUGS-8257: Append annotations from machine template spec to the node #1123
Full changelog

machine-config-operator

OCPBUGS-9986: configure-ovs: fix mtu-migration cleanup #3607
OCPBUGS-10425: Remove hard requirement for the afterburn from early-running aws-related services #3615
OCPBUGS-8260: [release-4.11] backport cleanupDuplicateMC #3577
OCPBUGS-6002: There are not enough logs in case “oc extract” is stuck in mco first boot in mco first boot #3497
OCPBUGS-5694: 4.11 - remove goutils from dependency tree #3499
OCPBUGS-3507: On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3422
OCPBUGS-6622: controller: don’t render new MC until base MCs update #3511
OCPBUGS-4945: Do not allow empty system reserved values #3459
OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
OCPBUGS-3882: Sync controllerconfig anyway if daemon sync fails #3421
OCPBUGS-3807: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3419
OCPBUGS-3756: daemon: Stop setting I/O scheduler to bfq #3418
OCPBUGS-2730: Add ephemeral storage to kubelet system reserved args #3381
OCPBUGS-2091: [release-4.11] TRT-540: Add privileged label to infra namespaces #3346
Full changelog

machine-image-customization-controller

OCPBUGS-5652: Update dependencies and explicit go 1.18 usage #77
OCPBUGS-3687: use host IPC for the agent container #70
Full changelog

multus-admission-controller

OCPBUGS-6176: Configure ignored namespaces into multus-admission-controller #56
Full changelog

multus-cni

Updating multus-cni images to be consistent with ART #155
OCPBUGS-9863: Multus sync to OCP 4.11 mar-21-2023 #152
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-3942: Excluded ranges bug (#282) #104
Full changelog

must-gather

OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
Full changelog

network-metrics-daemon

Update golang.org/x/text to 0.7.0 (#67) #67
Full changelog

oc-mirror

fix: remove release architecture validation at the config level (#504) #504
Full changelog

openshift-apiserver

OCPBUGS-4340: fix printer panic #336
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
Full changelog

openstack-machine-api-provider

OCPBUGS-10954: machineset_controller: Stop caching clouds credentials #67
OCPBUGS-7322: Address CVE-2022-41717 #57
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-3876: Order an operator CR’s status.Component.Refs array (#2880) #413
OCPBUGS-4446: fix service account token secret reference (#2862) #416
Full changelog

ovn-kubernetes

OCPBUGS-10688: Fix leak in service controller cache #1598
OCPBUGS-11035: [release-4.11] Handle Completed pods deletion #1616
OCPBUGS-2303: [4.11] Stale chassis are not removed #1310
OCPBUGS-10486: [release-4.11] node: add node healthz server for cloud load balancers #1594
OCPBUGS-8510: [release-4.11] Don’t recreate clusterPGs and clusterRtrPGs unless needed #1560
OCPBUGS-7858: [release-4.11] Delete stale egress ip snat entries by node #1543
OCPBUGS-6640: Drop in-cluster traffic towards svcCIDR at wrong port #1491
OCPBUGS-7319: Bump OVN to 22.09, enable session affinity timeout #1522
OCPBUGS-5245: Move check_pkt_larger to gateway router ports #1505
OCPBUGS-7010: [release-4.11] Fix Egress FW ACL rules in dualstack mode #1507
OCPBUGS-6813: [release-4.11] Ensure loadbalancer cleanup doesn’t fail #1498
OCPBUGS-5928: [release-4.11] Fix egress firewall to allow inbound connections in both gw modes #1478
OCPBUGS-5766: egressip: fix test data race accessing podAssignment cache #1471
OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
OCPBUGS-1720: Backport changes to ovnkube-trace #1436
OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
OCPBUGS-4475: Handle expired entry while handling dns update #1417
OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
OCPBUGS-4167: EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add #1404
OCPBUGS-3908: [release-4.11] Support proper parsing of IPs with leading zeros #1393
OCPBUGS-2554: Fix UpdateService healthport checks #1389
Bug OCPBUGS-3077: [release-4.11] Fix netpol races #1353
OCPBUGS-3830: Adjust ovs bundle timeout #1383
OCPBUGS-2222: Don’t add ITP specific gw setup for DPU mode #1305
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7590: Fixes ThanoRuler StatefulSet re-creation bug #218
Full changelog

tests

OCPBUGS-10215: Bump(openshift/kubernetes): to get fix for resizing flake #27796
OCPBUGS-7727: remove reference to old guard pods #27735
OCPBUGS-7319: Unskip service session affinity tests #27722
OCPBUGS-6851: [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade #27685
OCPBUGS-5091: Add Kuryr exception to “pods should successfully create sandboxes” test #27621
SPLAT-856: [release-4.11] include storage and must-gather tests in expectedTestCount #27494
OCPBUGS-3819: Add bond cni test #27554
Full changelog

thanos

Updating thanos images to be consistent with ART #99
OCPBUGS-3764: Fix local-test for go 1.18 #87
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7404: fix for nil user session (#1859) #58
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5790: Allow cluster to be upgraded even if using multiple datacenters #130
OCPBUGS-5472: Fix sc creation on resync #127
OCPBUGS-3285: set TLS cipher suites in Kube RBAC sidecars #119
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github