4.12.10

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.10-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-ci-4.12-upgrade-from-stable-4.11-e2e-gcp-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.29, 4.11.31, 4.12.5

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.1

Created: 2023-03-29 09:56:39 +0000 UTC

Image Digest: sha256:db976910d909373b1136261a5479ed18ec08c93971285ff760ce75c6217d3943

Release 4.12.10 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-03-28-180259

Components

Kubernetes upgraded from 1.25.4 to 1.25.7
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202301191053-0 to 412.86.202303241612-0 (diff)

Rebuilt images without code change

agent-installer-csr-approver git 0f14c3d1 sha256:7c9083d06f5c4927e5b72ee8c4783fd5e1c60fa33433df07db9043148108c6bd
agent-installer-orchestrator git 0f14c3d1 sha256:9eaaca6231a5a85fe7abd8826acfad72ee46930b916cf4f8eca41e7fb93839f6
alibaba-cloud-controller-manager git 1959de0e sha256:39d9c9968f33aeba98ddbf34808e12f2725b05c2e3c9f22ac55093b402d7b355
alibaba-disk-csi-driver-operator git e324a71c sha256:be2356bc563511e8c9607a612c1b947febcc48d42a6a279485bb010c6844e8c7
alibaba-machine-controllers git b9287c05 sha256:21a6d48edec77ef67a98c93edf47937a989418034491f7a92e2a072742924aac
apiserver-network-proxy git 61e198ca sha256:c7141f1e8fe80f25256c467142637d93891e29ecbd3e928540d197aa6759cb87
aws-cloud-controller-manager git 7fb891f4 sha256:db2cc39a7562a686032ed7391d70ee855f82c18d35fd600bb5d6e076f3b0e94b
aws-cluster-api-controllers git 15ff2acd sha256:46a2a30a595be8f504bebed51d3c43a71ff22f733cfa65e67596f183c014997c
aws-ebs-csi-driver git 15841171 sha256:fae64db69f0d08d71e9ee1d44d7ff1dfb315d6d1201aa9b6942ea8fb8d744aac
aws-machine-controllers git b82e889d sha256:fdbedb5411b60f42a4496c293fcd600b05e5d26f1517bc1753d73c345ee63c8c
aws-pod-identity-webhook git 6197630b sha256:b5fb8d9b5c4b415bc7749554c9b518a0d6e2d86516ff770b08b202bacea967c6
azure-cloud-controller-manager git 6ff1c8e5 sha256:1045f270c20c6709bdd6cab5ccc224372643d09e135dad1cdb53fed6b05a98d5
azure-cloud-node-manager git 6ff1c8e5 sha256:16f746486893cdd88bcd69fbb0be72cc268508b8d15ac307f28ceed7add570ed
azure-cluster-api-controllers git d1d4f770 sha256:c692c63a677c9755cef5dccfae665ca2ea356f18cdca7b73ccecdea553b6b318
azure-disk-csi-driver git ba105788 sha256:1f401cedab947e11edf9511c2e8e7dddc07ca6b6a69cd35aec2ccf8ee5932282
azure-file-csi-driver git 746fab2b sha256:ca2610ad726db8910da58517154d21ff4226ec9b052bd1a348b679f46f5d6564
azure-file-csi-driver-operator git 0a02fa02 sha256:48aa0878a30db4cb20dc2368c4493f78e5dd9ac9cb2dc4eb80145358e8902e5f
azure-machine-controllers git cfb76acd sha256:d4240c8d687cca059951a73d39c8bb263f561d5ceddb3963b3f26b1fc63acdb7
baremetal-machine-controllers git 63dcaf1e sha256:354c794d3ac740bcc4ca0770330cdd081714893e7c63fe8b9927d6a25d19eb17
cloud-credential-operator git 3eb4889e sha256:77476b5bbc5457a63663f2cc89e75bce777899731edced2d01f0ebde1ed1dfde
cloud-network-config-controller git e613bcbc sha256:bcccb5d19122cdb424cc2d005a18285e5d9942d907b1af08faa29afb6561c2b4
cluster-authentication-operator git bb764848 sha256:85a4a2ca225bbef5509cd020c322826fc93d99e7ebb768dad6c28bb5f1f0e8d3
cluster-autoscaler git 6ab8e62b sha256:d25a96416173ea9cd1e87addc4d229bb99a2f5a1631c19ecacda1bc4ea5b2d32
cluster-autoscaler-operator git 8b232255 sha256:49e5a07bc5ea22f283774545c5c5f87b0cd6f03e20f4de27cc3aab78f9fdfd5f
cluster-bootstrap git f22d1c60 sha256:cf5c9399acbb6dc5f763a46d500880147b72cf49f6e075f876f862ecf0378be8
cluster-capi-controllers git f9c215c4 sha256:cf01f887a832484e285fda6ade446511bf99217744087ae03621e791c5c3a20f
cluster-capi-operator git 3bfe36aa sha256:f88a9c01206e6053ebc24ebbbcac5913844fc52576a7b56661f0237538bc0c62
cluster-config-operator git 4c6e171d sha256:426ee4d32e9bc19a5b7522cc06908b7f1a14b90410924ea4f24d0c189c06f3c0
cluster-control-plane-machine-set-operator git 89727d88 sha256:d7b23b95aadc88016d6f8d9497cbcab009af24d1626e794c2ef07582d699c236
cluster-csi-snapshot-controller-operator git 05d89ec7 sha256:794a37b6f8c7c7df00e6e18f22f60a952b3fe12d2f1f1d19c45973978f3590fb
cluster-dns-operator git 1c136fe3 sha256:f2a50c562ed8eef2af4d08c070e0791fb59dbb6216e94e9b97581a8124a185f9
cluster-ingress-operator git 992b43b3 sha256:de8ebeefa4658664f0659a976124f882cc6356590625280f691eee012bd5396a
cluster-kube-cluster-api-operator git 7bb05468 sha256:e9e525402a9203d16a368f6f9396293e641633cdeecd352fcb2bb08442434c9c
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:e57a21e45982200ed54e1e55878ce7d2cc776aefb48f3e57db2ed6992b1e3dc9
cluster-machine-approver git 60081982 sha256:4c0558c6cea9d0eb6a61aaa2f8f6db65b49b80b594e73dd94610eb36705bc677
cluster-openshift-apiserver-operator git 4c5b4882 sha256:36635ca93cae2396f15444c45ff27e07a3ee3f800c2a582e63874f104e6cf4ce
cluster-openshift-controller-manager-operator git d1915d13 sha256:00c72a08082b831ef35713c2feb3ff6e65ff1fa5250af35dd03d9a0d4f915723
cluster-platform-operators-manager git d40fae81 sha256:0a7f90d95cd9e5eaeb807d573b595b649d9f3e2e0c2803d79f1cbefacb0fc455
cluster-update-keys git 2796e173 sha256:9f5b8f1220ea882eed1cd4db5624ff5657282f32eb31d5266d7a06f3eb9a3e55
configmap-reloader git e4d9170e sha256:a633978cfac3006b89519bcaccf925b313a69d4c07a51d9d24247e7005998941
container-networking-plugins git 6d237727 sha256:ead6bcd0b70aa59249307f70cabe9767f66ae7914e65933aa360c793f7d569b8
coredns git 9aaa7e0a sha256:675d4d6225f3427946e5feeb7636dbde3fbb6c4bc2e88172bc3ae5c630cbd511
csi-driver-shared-resource git 20cffc04 sha256:90c90b5658502818f9f3f7024982f91f452f70c14d5646f4eb45a65efac66a2a
csi-driver-shared-resource-operator git 3201431c sha256:66e6c4ab4ae8226ab5baf3435635d90db31ffcfd7fc7519c4427ac96e4023e6e
csi-driver-shared-resource-webhook git 20cffc04 sha256:8d74632e3d0fbb49b7e7329f32885cb8726be46d88add68f16948e649d40a829
csi-external-attacher git 6945eef8 sha256:dedf1b125b7a5c8eef8ec37d231c5146ac10d15c91663fec04d49414ad5394fc
csi-external-provisioner git 140851f6 sha256:b6ffae89d0b3b801d5e84c3326a0baeb8de491b3cd4559075c5257b2847df2b2
csi-external-resizer git 239d751f sha256:3d72b11a6bc4efbcad2bda5c692b1013d4922ac81b828153395aff336c57b5b0
csi-external-snapshotter git 7e232566 sha256:1cc27acf025129ba49eaa07c466fa7d66b435e5ee2788459c6ad366ffba0e739
csi-livenessprobe git 720e1d6e sha256:bf51c44c3e74e41905bf999a506270f12c1223941195d21f8accad8039e0ede9
csi-node-driver-registrar git 805d5ac2 sha256:543c476b5ab938c3901d716ee2b80d3297c60963f5db2dd8349626380d9a3626
csi-snapshot-controller git 7e232566 sha256:ce91cf24be031b27459919f56e6d21b2d06bc3401966466630721aa5b4d6db92
csi-snapshot-validation-webhook git 7e232566 sha256:5b37c747e679a1423ad98e850e18c3b4f08c3cd95dd37339ed9bae05f5e8d30a
docker-builder git e76828eb sha256:ef12c5c1aad9c5b4c6494eea7bfe1eedd1e8d7a9006832fb174a96b0de6c17fe
egress-router-cni git a92e4157 sha256:201c21db83744b111433100f02bd02ddeaccd9472bf318936e4a4f897f55ed41
gcp-cloud-controller-manager git 8d208a7f sha256:70fbef26e37bcc37e07b3835becfd66c43dcc2416fc1b0775b9aa4d755901ed9
gcp-cluster-api-controllers git eea0586c sha256:ee96df632517d06e044b6285ae069a6a347a77d995e3957c653e272c4d59fd17
gcp-machine-controllers git ada83dc6 sha256:c44e2cf83ea4f99d9780d339a8c07a265f4a9b0e00e5987c5ecf80bcabfe46b4
gcp-pd-csi-driver git 223d8464 sha256:08872afc0f71db8f5d1ac0ac0eef1520b9eb1e491a678556f275da3ff7959aed
gcp-pd-csi-driver-operator git 020aeb67 sha256:4530974c417b9a6e5bee50217cdf2427a73b3cdf72cc7a190b97103a1c921481
haproxy-router git 3065f658 sha256:455f14c36eb6b5d51c515d844053357a53839262c75023a32a2280be97301fe4
ibm-cloud-controller-manager git e5f25fc6 sha256:e76c722e42534bff304053a7402ebeffba45cafaafd0aac007881ab438aada53
ibm-vpc-block-csi-driver-operator git f70fccea sha256:9768d167b91ce17563e2314456ece49996e3bfd59be2b9987408cd33940f8f35
ibm-vpc-node-label-updater git 737d00c9 sha256:5b453be3b57e26663681b1cdf01b7a5152b83b9b60728be9de6c2b3d406cbf4a
ibmcloud-cluster-api-controllers git c1304c80 sha256:2b9130d8dcf565f84c3b5b08147e76ff6ba5a8ed21018f7d622f1e8c34052f66
ibmcloud-machine-controllers git 31a67dac sha256:55367b1aee1fe720bd25ce03058b590d5e44cb2b902fdeadd2bf9adf8acd27d6
ironic git 27695b69 sha256:739ab43be86f978f9b6ba0b0dae97c1aae4ad49ce398161765136d29b8348fa6
ironic-agent git fb675baa sha256:76f31d0a17a792c59ee30dbe2d61210ba518780dd080cc582db1ce7c0912b86c
ironic-machine-os-downloader git a580a447 sha256:1fe7a31ff5b91a1a79f09486cc0c4b2e2cff7c6e994ed78f12a904eb82a93030
ironic-static-ip-manager git 0c7fbba9 sha256:970830896ba8089182e2c59332e630fe7a130f22568208462ea620c8a92f393d
k8s-prometheus-adapter git 987e5da8 sha256:6db08be93d81d7d37e2abe44a2e431e2591b71e31adea5ea98d053ea3a0ad4d3
keepalived-ipfailover git 7e8a0105 sha256:c4a6b4e3ce3f9f2458635333978e72df9adcbdbb6ee6551a53ff6e57e263c273
kube-rbac-proxy git 513fd321 sha256:ffbccd590dcfe4400aa218659618a453e237951662ffb9ccab96d56156a9b31f
kube-state-metrics git 9a1bf9b8 sha256:40b1732fbbb43e269a0beb38f80b2692ae2f85a795ca8ab85d627210b3c38178
kube-storage-version-migrator git 596745ce sha256:4e71cc0f1a79adfc25ff1549ce24d5cec48d074b63a73634e01da93c5a00c9e9
kubevirt-cloud-controller-manager git a19615cd sha256:4d9001ae0e28967b08f9cdb39b4a3c0aa322dc6915d92d3feb3c0a5091f70a17
kubevirt-csi-driver git f407c8a7 sha256:c565750fd1fa650da91dd353919a7987ddaa261b20a679f1a8b8494419a62cd2
kuryr-cni git 92b9be25 sha256:e8ea651a9c9ac2fe76210b73d4679083c4eb988519544e5e0a49c1fc1696aa60
kuryr-controller git 92b9be25 sha256:5fbc63c0abe4153177cf8f859733cddc26dc22a8068402c8b6a3079faa9f4faa
libvirt-machine-controllers git a2882f7a sha256:a75070929303fd9a00a1071b478833e42596751425303a83aa8770a9c8e8078a
machine-image-customization-controller git 27777d0e sha256:2695ca335aafb32eb93f6071938a6d27879429dc1bb3e20041a2bb140be3aa4d
machine-os-content sha256:b936b252478770218f4cdd35abcec175443fcbb820e451916c2de2c146e82872
machine-os-images git 566bf595 sha256:eb34aa94fea61a8d2d91d00264c7b31621ba639946b0f50cfc199596b50d636f
multus-networkpolicy git 421718ab sha256:8715bd4692f768cecd56ad1ada0f204ec6036866351d982c254925a87d68a088
multus-route-override-cni git 523b7904 sha256:6195bd46cee997ad1f318c93590ec5425c9620b27e9bc96eae9ac6077ef59328
must-gather git 5fd21761 sha256:9f2aab404da2c43c7d3974e9dfc8d7ff3194222b72565a15a61e3e84110a464f
network-tools git c76613c7 sha256:0d58acd4d630008f644636388c6a73550aa098ff4c4e9b379eba347cd4c31a02
nutanix-machine-controllers git 25aea2d4 sha256:06f9f887233de6f9189a483349b8d67112565e6b313f80113e422ac3cdd9bcc4
oauth-proxy git 03e5b13b sha256:49affb19635777cf255b74605900210105b724692d0936e6d6d73c9f8c875a32
oauth-server git a803bf49 sha256:ab3a5ef78441be9f06f8570baa1aa418f91c2ac7a0e4d3fe76e5d222264e24ff
olm-rukpak git 1b52bfeb sha256:2492280f0c690782b0029d4d953d06e818de241d53da0a8b7201d446b311a103
openshift-controller-manager git b6528f9e sha256:b963214f14897cb4b880d45165a13955c11f263ff47aeefb8bec71e2b71be406
openshift-state-metrics git 4c711c74 sha256:71dd3bdcf8258ab466bb46ac264785b139eb43ce139e93b442fc60cd674b793b
openstack-cinder-csi-driver-operator git 308a62d8 sha256:003be6593cd773f0d4ad81b5d0ec11ceeaab18ceda0a716fbce203f84327915a
openstack-machine-controllers git 8bd9c35f sha256:a6a5f3250f03adedd7633354269fe794573bd18bdbf362d53ebcdca2c7cb6864
ovirt-csi-driver git 64d58fb5 sha256:a4110402ae6da949a535d8c9311ac4f2644a61f5549050edd711feec7a05caf5
ovirt-csi-driver-operator git feb14fbb sha256:2071fa3c7a5e7160fecc8fa886883b767816716e9afffdd931e2d41c319a3d48
prom-label-proxy git b1907888 sha256:3662a32999dcf34b8ec2626b18d13e93680b3d11fd74b50d3d13e91cebc75d2a
prometheus git c749fdb4 sha256:97ffae63353c694fe66615679429351a96711cbdeb400555181dea8688a388ea
prometheus-alertmanager git 86b18354 sha256:dd5ed598424eea2089f125b33fa9cf8309e4fdafc39d305106269ccf4beeba9a
prometheus-node-exporter git af2f49ca sha256:012458d3d79fdfc744338722fe75d2553ecbf1fa9cc050dd0830696569a0ba36
rhel-coreos-8 sha256:65108e2e52a5bae7109215a5a6ba325a36916aec7fb02178a9eed96e90e7481e
rhel-coreos-8-extensions sha256:998bf3784e3f66dd923bc00ecb3e396d0a1e83ebf1f038339e86728d98de546f
route-controller-manager git 9e74d175 sha256:bdb7526832ecada22aad67a4e593d31d5a93887fa51845cd5dfe4f65cffb3214
service-ca-operator git 299b7097 sha256:b25d9d6cf2f69ef64952d4fb550a0d03641c23ba5375754789a92a72ca1d2bdd
thanos git 306214e8 sha256:1848386719cc0afcddd67d5117beb55081ea2ba473dedb55d8c21d2d7bb82485
vsphere-cloud-controller-manager git e993e31f sha256:a3ee8ca80e8dfcf161b9100d732b4df4a8fa1a2f836e70e4f204efc6deb1def9
vsphere-cluster-api-controllers git 5c261b3b sha256:bd9d9bc77bb3409f5c19449cb2e6f06b7095c116acf565700bef5146ed093b6b

agent-installer-api-server

MGMT-13192: dualstack SNO cluster fails to complete - getting error In dual stack installation we should set dhcp,dhcp6 kargs in order to wait for ipv6 address when node comes after reboot (#4914) #4914
Full changelog

agent-installer-node-agent

MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
Add sg3_utils package (#497) (#500) #497
Full changelog

alibaba-cloud-csi-driver

Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #17
OCPBUGS-6493: UPSTREAM: 682: fix gofmt #22
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-10740: bump RHCOS 4.12 bootimage metadata #7019
OCPBUGS-7481: Fix file check for loading openshift manifests #6907
OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
OCPBUGS-7594: fully qualified username must be provided #6864
OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
OCPBUGS-7521: Update AgentConfig template #6857
OCPBUGS-5992: azure: validate Windows-only VM types #6780
OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
OCPBUGS-6807: Check platform baremetal settings against default values #6815
OCPBUGS-7103: Set the configured proxy settings for agent installer #6830
OCPBUGS-7131: bootstrap: set 0644 mode for registries.conf #6804
OCPBUGS-5960: bump RHCOS 4.12 bootimage metadata #6791
OCPBUGS-5996: vsphere: set default resource pool when missing failure domain topology #6781
OCPBUGS-5667: CVE-2021-4238: goutils: update for randomness fix #6764
OCPBUGS-5782: CVE-2021-4235: Denial of Service in go-yaml #6769
OCPBUGS-6052: validate additional confidential VM types #6785
Full changelog

baremetal-operator

OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
Full changelog

baremetal-runtimecfg

OCPBUGS-5743: If primary ip address was already created no need to choose new ip #214
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
OCPBUGS-6600: Fix kube version from 1.24.1 to 1.25.2 #1327
Full changelog

cluster-baremetal-operator

OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-7884: Restart pods if related configuration was changed #228
Full changelog

cluster-etcd-operator

OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
Update reviewers and approvers #987
OCPBUGS-7409: set default timeouts in etcdcli #1005
OCPBUGS-6935: add dedicated success status for bootstrap removal #999
OCPBUGS-7373: [release-4.12] fail early on missing node status envs #1004
OCPBUGS-6898: updating library-go for CVE-2022-41717 #998
OCPBUGS-5762: should not scale-down when all members are healthy #984
Full changelog

cluster-image-registry-operator

OCPBUGS-8491: bump aws-sdk-go #846
OCPBUGS-6517: OpenStack: Add support for Proxy #834
OCPBUGS-4678: Bump aws-sdk-go to v1.44.145 #822
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-6789: enable pod security admission for techpreview #1440
OCPBUGS-6789: make the bootstrap kube-apiserver honor cluster-wide featuregates #1439
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #1445
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-6789: honor feature gates during bootstrapping #695
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #699
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7369: Guard controller: set the readiness probe endpoint explicitly #462
Full changelog

cluster-monitoring-operator

OCPBUGS-2439: set the argument path.udev.data in node exporter #1800
Full changelog

cluster-network-operator

OCPBUGS-10319: HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738
OCPBUGS-8014: add default noProxy config for Azure #1722
OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
OCPBUGS-5953: Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685
OCPBUGS-7044: HyperShift: Add .hypershift.local to no proxy list #1706
OCPBUGS-7044: HyperShift: Do not use proxy for internal routes #1704
OCPBUGS-4778: Fix handling of deployment and statefulset updates #1663
OCPBUGS-4238: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1645
OCPBUGS-6494: OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB #1691
OCPBUGS-3461: CNI binary copy should account for the possibility of symlinks [backport 4.12] #1615
OCPBUGS-4856: Disable the drop-icmp container ‘oc’ pprof webserver on Azure #1666
Full changelog

cluster-node-tuning-operator

E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
E2E: Network stack Pinning tests (#533) #533
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543
pao: latency-tests: read test log directly from pod (#547) #547
Add authentication to the /metrics endpoint (#553) #553
Update NTO images to be consistent with ART (#557) #557
OCPBUGS-5021: [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) #530
Full changelog

cluster-policy-controller

OCPBUGS-6789: backport feature gate honoring for PSa label syncer #98
OCPBUGS-7705: [release-4.12] update dependencies to point to v0.25.0 #102
Full changelog

cluster-samples-operator

OCPBUGS-10918: update Jenkins to v4.12 #492
OCPBUGS-7208: When setting allowedRegistries urls the openshift-samples operator is degraded #489
Full changelog

cluster-storage-operator

OCPBUGS-8374: Add UID to CSO Pod to be able to run with custom SCCs #347
OCPBUGS-7331: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337
Full changelog

cluster-version-operator

OCPBUGS-10514: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913
OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
Full changelog

console

OCPBUGS-7951: delete application should delete all part-of resources #12604
OCPBUGS-6036: Project dropdown order is not as smart as project list page order #12447
OCPBUGS-7800: add subject kind dropdown in the project access form #12586
OCPBUGS-8339: disable operator-install-single-namespace.spec.ts until… #12624
OCPBUGS-3892: Add cluster to query params of websocket requests #12282
OCPBUGS-5092: Fix to use and set correct secretReference for build-config triggers #12388
OCPBUGS-7895: Bump helm version to 3.10.1 #12579
OCPBUGS-6873: The dropdown list component will be covered by deployment details page on Topology page #12507
OCPBUGS-6831: Fix crash when pinnedResources is null #12503
OCPBUGS-7471: Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565
OCPBUGS-7506: Fix different CI issues #12555
OCPBUGS-6966: Remove description field from the PLR parameters page #12519
OCPBUGS-7437: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560
OCPBUGS-6887: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510
OCPBUGS-6816: Repositories list does not show the running pipelinerun as last pipelinerun #12500
OCPBUGS-4072: Fix rerender loop/crash when bindable-kinds is found but has no status #12304
OCPBUGS-6671: fix broken pipeline secret #12474
OCPBUGS-6913: PipelineRun task status overlaps status text #12516
OCPBUGS-6766: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12491
OCPBUGS-6969: Added translation to Last used in resource type dropdown #12521
OCPBUGS-6764: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12490
OCPBUGS-4281: Do not disable metrics when auth is disabled #12323
OCPBUGS-6669: Do not show UpdateInProgress when status is Failing #12473
OCPBUGS-5093: Fix to show correct help texts for each git repo status error code #12389
OCPBUGS-6085: Editing Pipeline in the ocp console should show correct information #12452
OCPBUGS-6758: Add RBAC check on Create a Project link in all-namespaces pages #12489
OCPBUGS-6755: Remove refs-heads from the branch name for Repository pipelineRun row #12487
OCPBUGS-6743: Fix react warning when open console, add missing keys in navigation #12484
OCPBUGS-5875: Don’t proxy CORS response headers #12276
OCPBUGS-6678: fix run-time error on Cluster Settings when availableUp… #12476
OCPBUGS-4633: Monitoring: Fix alert descriptions with duplicate resources #12352
Full changelog

console-operator

OCPBUGS-6921: Recover ConsoleNotificationSync after being degraded #728
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6591: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #174
Full changelog

csi-driver-manila-operator

OCPBUGS-10556: Bump go.mongodb.org/mongo-driver to v1.5.1 #176
OCPBUGS-6599: Address CVE-2022-41717 #166
Full changelog

csi-driver-nfs

OCPBUGS-6590: Address CVE-2022-41717 #105
Full changelog

docker-registry

OCPBUGS-10496: bump docker-distribution #365
OCPBUGS-8491: bump aws-sdk-go #362
Full changelog

driver-toolkit

Adding rpm-build to the Dockerfile (#117) #117
Full changelog

etcd

Update owners #185
Updating ose-etcd images to be consistent with ART #153
Full changelog

hyperkube, pod

OCPBUGS-8705: Fix mounted volume expansion tests #1503
OCPBUGS-7078: Bump to k8s 1.25.7 #1496
OCPBUGS-5769: scc admission - seccomp profiles fix #1471
Full changelog

hypershift

HOSTEDCP-806: [release-4.12] Validate etcd KMS config #2273
HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
Force controleplane upgrade always #2289
OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826: Customize DNS base domain prefix #2235
feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323: pki: split out konnectivity certs from the rootCA #2156
fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
Full changelog

insights-operator

OCPBUGS-6732: Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727
OCPBUGS-6833: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) #736
OCPBUGS-6782: Create gatherer for gathering machines. (#734) #734
OCPBUGS-5976: operators gatherer - handle ingresscontroller relatedObject & simplify (#714) (#719) #714
Full changelog

kube-proxy, sdn

OCPBUGS-10805: Fix race in Egress IP Tracker start #521
OCPBUGS-7474: Initialize egress node monitoring struct with previous reachability status #505
OCPBUGS-6842: Handle race condition to setup default vnid flows #497
OCPBUGS-7227: Update for 4.12 / go 1.19, including gofmt updates #482
Full changelog

machine-api-operator

OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
OCPBUGS-8286: Short circuit misfiring #1109
Full changelog

machine-config-operator

OCPBUGS-7167: Avoid ‘too restrictive’ SCC problems by being more explicit #3542
OCPBUGS-10505: daemon: Drop duplicate --authfile used in run #3617
OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
OCPBUGS-6943: Improvements for configure-ovs.sh #3528
OCPBUGS-6045: There are not enough logs in case “oc extract” is stuck in mco first boot #3503
OCPBUGS-6973: configure-ovs: optionally generate configuration in /run #3532
OCPBUGS-6779: baremetal: clean state generated by NM when run by dracut #3521
OCPBUGS-7241: controller: default overwrite to true for files #3546
OCPBUGS-6997: Fix 4.12 art images #3535
OCPBUGS-6805: Only check image type if we are sure there is work that needs to be done #3526
OCPBUGS-5999: 4.12 - remove goutils from dependency tree #3496
OCPBUGS-6179: controller: don’t render new MC until base MCs update #3506
Full changelog

multus-admission-controller

OCPBUGS-10506: Client golang [backport 4.12] #59
Full changelog

multus-cni

OCPBUGS-10535: Multus sync Mar-20-2023 to OCP 4.12 #149
OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-3941: Backport Excluded ranges bug (#282) #103
Full changelog

network-interface-bond-cni

Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver images to be consistent with ART #80
Full changelog

oc-mirror

OCPBUGS-6703: fix: adds logic that searches for the correct name when using a heads… (#554) #554
Updating oc-mirror-plugin images to be consistent with ART (#515) #515
Full changelog

openshift-apiserver

OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
Full changelog

openstack-machine-api-provider

OCPBUGS-10603: machineset_controller: Stop caching clouds credentials #65
OCPBUGS-7155: Address CVE-2022-41717 #55
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-7650: Catalog Pod Startup Probe Timeout #450
Updating operator-registry images to be consistent with ART #397
OCPBUGS-7825: Set openshift.io/scc label to empty #456
OCPBUGS-7769: [release-4.12] update cluster policy operator dependency #454
OCPBUGS-7556: Defuse E2e timebomb #449
OCPBUGS-7086: cherry-pick pull request refactor FBC caching (#1051) f… #441
OCPBUGS-6260: Catalog, fatal error: concurrent map read and map write #440
OCPBUGS-7025: Set ImagePullPolicy of bundle unpacker to “IfNotPresent” for image digests #439
Full changelog

operator-marketplace

OCPBUGS-7108: Default CatalogSource aren’t always reverted to default settings #506
Full changelog

ovirt-machine-controllers

OCPBUGS-6309: Fix swapped CPU socket and thread mapping #173
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

Updating ovn-kubernetes-microshift images to be consistent with ART #1288
OCPBUGS-10632: Check the “Serving” field for endpoints #1569
OCPBUGS-6034: Update egress node assignability on every egress node update #1483
OCPBUGS-7732: Fix leak in service controller cache #1545
OCPBUGS-10490: [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go #1595
OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
OCPBUGS-7317: [release-4.12] Delete stale egress ip snat entries by node #1520
OCPBUGS-7026: Bump OVN to 22.12 and turn off neighbour response in router options. #1521
OCPBUGS-6040: addMasqueradeRoute: fallback to gateway interface IPs #1484
OCPBUGS-7230: Delete IGMP Groups when deleting stale chassis #1516
OCPBUGS-3399: Drop in-cluster traffic towards svcCIDR at wrong port #1490
OCPBUGS-6961: update base image of Dockerfile #1504
OCPBUGS-6823: [release-4.12] Fix Egress FW ACL rules in dualstack mode #1500
OCPBUGS-4862: Correct the deletion of noHostSubnet nodes #1470
OCPBUGS-298: ovnkube-trace: run ovn-sbctl and ovn-trace with –no-leader-only #1489
OCPBUGS-5841: ovnkube-node: Existing management port check #1475
OCPBUGS-6812: [release-4.12] Ensure loadbalancer cleanup doesn’t fail #1497
OCPBUGS-298: Bump OVN to 22.09.0-54 #1488
Full changelog

powervs-block-csi-driver

Update OWNERS component to Multi-Arch #24
Full changelog

powervs-block-csi-driver-operator

Update OWNERS component to Multi-Arch #16
Full changelog

powervs-cloud-controller-manager

Updated OWNERS component to Multi-Arch #29
Full changelog

powervs-machine-controllers

Update OWNERS #39
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7458: Fixes ThanoRuler StatefulSet re-creation bug #217
Full changelog

telemeter

OCPBUGS-7702: Add ‘agent-installer’ value to ‘install_type’ label #451
Full changelog

tests

OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
OCPBUGS-8024: Backport fixes to resume gathering CI disruption data for SLB and image registry #27759
OCPBUGS-7633: remove reference to old guard pods #27732
OCPBUGS-7285: extended: security: do not explicitly set api audience on token request #27716
OCPBUGS-6850: [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade #27684
OCPBUGS-5493: Use cluster network MTU for bond interfaces #27637
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7426: Add migrationDataStore field #59
OCPBUGS-6936: fix for nil user session (#1859) #57
Full changelog

vsphere-csi-driver-operator

OCPBUGS-7901: Bump sidecar timeouts for vsphere #142
OCPBUGS-7426: Fix datastore migration bug in 4.12 #139
Full changelog

vsphere-problem-detector

OCPBUGS-6788: Derive the fully qualified vSphere username when checking permissions #98
OCPBUGS-5509: Add a count of zonal volumes #97
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github