4.12.16

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.16-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-micro Pending (1 retries) periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.12-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.12-upgrade-from-stable-4.11-e2e-gcp-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.17, 4.11.18, 4.11.19, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.12.10, 4.12.11, 4.12.5, 4.12.6, 4.12.7, 4.12.8, 4.12.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.4

Created: 2023-05-04 08:12:30 +0000 UTC

Image Digest: sha256:5339b3c4686010dc42990e0addce5aa4fddd071d6d9504dffe08a4b5059f6f38

Release 4.12.16 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-05-04-010834

Components

Kubernetes upgraded from 1.25.4 to 1.25.8
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202302091419-0 to 412.86.202305030814-0 (diff)

Rebuilt images without code change

agent-installer-api-server git b03e2db9 sha256:5e82ea79719b8bd4db4d0687fcc99d5fc154c431cb98a738ea79e9594adb77e7
alibaba-cloud-controller-manager git 1959de0e sha256:49ea938191754d414d000edc93eedebe7c8862125df41d34ab10aadd8e06400d
alibaba-cloud-csi-driver git 664d8cb0 sha256:89699a7bdaa4bcc1bb33c552111043375537a3077cdb280a1f4124b9608cbd54
alibaba-disk-csi-driver-operator git e324a71c sha256:713f38f83f574f9dee98fac168fd00cc6f1b3c3eea490d9693673eec312333ee
alibaba-machine-controllers git b9287c05 sha256:ce36ff6faf535d1fd97b7fbeab928a64f5eed696a065f86dc83b9a964ede54b2
apiserver-network-proxy git 61e198ca sha256:bc144099cc225fe6181ec93c054caccd65d547990eb77e3cee42048fdf3bba4f
aws-cloud-controller-manager git 7fb891f4 sha256:716dac7bcd2604bff8de6c3fbb1a2840ae43d3b8a12f4fadf455286c4640905e
aws-cluster-api-controllers git 15ff2acd sha256:85204ccdca62375ca94cedad56537c79b526f3b83b5a5f05b3f281eb251d9fe7
aws-ebs-csi-driver git 15841171 sha256:20277c93f1c079f400935a95fda93e4dd0098792a1648ab9bdaaf214ec683571
aws-machine-controllers git b82e889d sha256:cd0c0474ae4d5048370737bed8c5d85281a64002526fc52f70aa119c127b804a
aws-pod-identity-webhook git 6197630b sha256:4de82cbab8b3d22e6ed56833a7ad80115464adf1bc8656a5cc97e4384688be23
azure-cloud-controller-manager git 6ff1c8e5 sha256:4a35ecf0c0757fd264095d46407309314279ab7918d8886b877f607fc76e5dcb
azure-cloud-node-manager git 6ff1c8e5 sha256:312da8945140c97f11f919e0318e9241aa40bf71d44f070f4f458721ae254be0
azure-cluster-api-controllers git d1d4f770 sha256:b7268c77415c56755a6f355403a3742e12f897dc08971ce1022560d286c9c4df
azure-disk-csi-driver git ba105788 sha256:c83723159f03c0536cb34a410ee6dcc4ac28bec1d05fca97b3bdf951ce63e996
azure-file-csi-driver git 746fab2b sha256:688e31071b1319db95d3b42e99485470d95b9aba2bf62b097634f0dbe763d9b9
azure-file-csi-driver-operator git 0a02fa02 sha256:6cb79f0ca0491ffea75c58706f94aad9ef624b655e7d3d8a51ecba51a5e8180e
azure-machine-controllers git cfb76acd sha256:3e7947b2e5cb512d43e445fde0aa97b4dc82e531769914238e0455b314245525
baremetal-machine-controllers git 63dcaf1e sha256:1ce269bd7f21622a99950a43482a55f07facd790077fe688da8561fe8df1aa0f
cloud-network-config-controller git e613bcbc sha256:35e37faa1d1a62f24a23f1c70dc80b9b603757c8a46ea25c2df887f5352e1c7c
cluster-authentication-operator git bb764848 sha256:5ff9b93e35ae442774f3ecfb04cfc6d85d8bbe7ea794f2b682aaa2366c614c08
cluster-autoscaler git 6ab8e62b sha256:1f45792dbb5dc90a739ceb8e978f096345e7a9a3723f64103c4217320f3d0378
cluster-autoscaler-operator git 8b232255 sha256:35fdb318cd69d41471d6fd5474d4369c7bf95fa36da360e2d12658bdb1cdcf95
cluster-bootstrap git f22d1c60 sha256:e390a84c57aab87afa1456dbf0f8e445afc69ee0faf2005db165ddc97e95c9f0
cluster-capi-controllers git f9c215c4 sha256:3ea508366f097031c159f36d9dc98fefb6564ef8ebc9c8722a7c22562ac3c843
cluster-capi-operator git 3bfe36aa sha256:c5ead18b4ff07088a06e46c139999c479de4a15345d581f50c8ade8e1c21fa32
cluster-config-operator git 4c6e171d sha256:92a10ac26976324d2e92f4fb0ef8802d50fb523d63db9a7c4461e169e3be355a
cluster-dns-operator git 1c136fe3 sha256:7a204606d1778af8990dc423fa460d28702e6ff53f9e1858010c51c322df3f67
cluster-kube-cluster-api-operator git 7bb05468 sha256:7997313d0554be09bea1916ea216bdb91341dee487084f8896475e0651a34f30
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:12d2f3433656b0725a4a43f4272017c283d1ace1fcd84d8f369487d0787c0957
cluster-machine-approver git 60081982 sha256:2433053bbdcfe84e708f348a1ad425548e536a0383226f798ce75810781ce32a
cluster-openshift-apiserver-operator git 4c5b4882 sha256:c30ca9112db66f6a116ab7fb1cdf9d1341458857a6a1b3a217a81eca139cba43
cluster-openshift-controller-manager-operator git d1915d13 sha256:db0e87e15afb10aa1b3b021a3dc7c5e91002aa4c062aff61eaa00bfc3a24c580
cluster-platform-operators-manager git d40fae81 sha256:1c1be7414812a3a21c53724dbedad2fcecca45863f5025314897b4b71b6e43d4
cluster-update-keys git 2796e173 sha256:96e9fdd4e111dc44abf7071fc94980b10201d36de814680841ff4160486f8ec5
configmap-reloader git e4d9170e sha256:ea12387c3c3f42a4782c9a31ff91a3ce7304276f0ede3bcf94bb0f9c43991a7a
container-networking-plugins git 6d237727 sha256:89936485f94d099e0d02a9d84812898500fc579bac375def048b2f360acdb230
coredns git 9aaa7e0a sha256:e4e81d7d9a9b373350d0379e12f4398789f799f1b8809c5c669079a390ed97df
csi-driver-nfs git d9099257 sha256:f6c30517134d388f1e6759381902370bf088834c5801ffb45f8253ff770538b0
csi-driver-shared-resource git 20cffc04 sha256:f58883df2fcdd3815c94b15719178a4ee0d8520ec85e5581e6ea8b8294e29971
csi-driver-shared-resource-operator git 3201431c sha256:43dc64b3c61f6579db6906d39715141dd1d84139354d7f97334af847706da635
csi-driver-shared-resource-webhook git 20cffc04 sha256:24dca1cd8ac1af5ec219e4bc2d9e09af843ec52da4287bfc0737072e43961a52
csi-external-attacher git 6945eef8 sha256:47693a0588f327fc04fc7fb7d2c3b6e3d38c9bbfbb359423bc78dec1f720e122
csi-external-provisioner git 140851f6 sha256:e3878b5ecd5e61178ae2a3b7822a6e4a117dcc7ed973bab3739ea5c2c53de9c0
csi-external-resizer git 239d751f sha256:41774ce3836d291d72b75fd07cc6d033c735b544f55224b8d63e60b9814dcde3
csi-external-snapshotter git 7e232566 sha256:9cd2b900dd42d2b60848128fb9f71118a38a0ee971a3cd711fb5a0b72660b7ce
csi-livenessprobe git 720e1d6e sha256:8cba8982bb4223b864a4faf9783a32b2888bfc80817305ff808ee8efb0a28562
csi-node-driver-registrar git 805d5ac2 sha256:fc1a668f830717d54a879405eed83a8f5590879138ec6c1c057c41d14e37202a
csi-snapshot-controller git 7e232566 sha256:8fda8144db3127452d781b5d3ed6cbdae71d93ac64d68e8982e1457452aaf31d
csi-snapshot-validation-webhook git 7e232566 sha256:c38dfedd9653e322bebb9dff109100ca84d25dd1a75254e17a28942d544b6997
driver-toolkit git 6e5c04c0 sha256:b15009bbd00ac617c84e707a15754e845cde19bd06c6519b2bd4a248afb84782
egress-router-cni git a92e4157 sha256:905c1ecac13dae89519a6437ca5bdb87afd66a92cfc32c1075baccba65b854c7
gcp-cloud-controller-manager git 8d208a7f sha256:fda03d95f6e04f1295e1cb7db48e629e8b61c3d943554abd58de171a66e64d55
gcp-cluster-api-controllers git eea0586c sha256:0b1d117e1c94c65bf83a25ea9fa0636fa9765d6b585d70a695c0fa59590a62bb
gcp-machine-controllers git ada83dc6 sha256:6081ef253a9ba4761ad60bfb5625500a0f5ae2b6cf41d4445254e3d3301c8490
gcp-pd-csi-driver git 223d8464 sha256:d3404d4330375812b9b9f11454fb4d667cf6e93f53bed72d8ac85249615c852b
gcp-pd-csi-driver-operator git 020aeb67 sha256:73433c02bd7fc6acf66038a013599dd8e16ce79d3ebac4eac13667808ee49485
haproxy-router git 3065f658 sha256:5d6a5661e4c6d244bcfac981b3fa88ac44443a563eef97ecb9290d9cb89c7319
ibm-cloud-controller-manager git e5f25fc6 sha256:9ae325f25a0b33299fddca5809de1cf943bea2d3f5ae5a89e03f988b5c464065
ibm-vpc-block-csi-driver-operator git f70fccea sha256:f99e1ba39a87f5ab0859e16d17c95aea45b81483f280c920199a7276a1c09228
ibm-vpc-node-label-updater git 737d00c9 sha256:e4f615209cc165b9068af342b4ee0fddde2a0d1710f843d2edada3c3eb14c19a
ibmcloud-cluster-api-controllers git c1304c80 sha256:ecd71db26f2b86e57dfe24db0e19dfd5a7c31b49a62a5b22565997bd8a665982
ibmcloud-machine-controllers git 31a67dac sha256:c7069e11447e2fbbc66df7a573d86358ce770dd3396a4f713dac98b95ba0334b
ironic-machine-os-downloader git a580a447 sha256:75886be85149939546dc08395f9eef21ec57ddd792575338fd3ab105c405e25d
ironic-static-ip-manager git 0c7fbba9 sha256:dff0ca4bc76dad7dafc3191e77a78fea8effbcde9eabe0964c5f1f3813b8c40e
k8s-prometheus-adapter git 987e5da8 sha256:cb792d85373296417331109af821dee2ae6bfbab0b4049697fa33ae5180fe2b7
keepalived-ipfailover git 7e8a0105 sha256:9b8a7bad18667e53b7c9b8f0cfe8c7b0e5e473cf940c073f639d8aba35132148
kube-state-metrics git 9a1bf9b8 sha256:3fc229a636da0f61dfcb76fde98584380f52e05eb69fd8a188ec5b3ef55b9f54
kube-storage-version-migrator git 596745ce sha256:f753c1794decdf371419306f82ec05eb7618fe8f2269ada9112fcfb072c6b707
kubevirt-cloud-controller-manager git a19615cd sha256:b3ba9822014f3abfe5370ea982759e4a88bcc82e68fa2da43d5d3fbd0187d6c5
kubevirt-csi-driver git f407c8a7 sha256:f94fd4e0ee09e28c22708a7e96b19a9f8eb3539b24bb2493008e237d6ffd778b
libvirt-machine-controllers git a2882f7a sha256:2f7b26b977326b63fbaf924f54cdb0490815a2897b08198b27b4f9f40c0b8f74
machine-image-customization-controller git 27777d0e sha256:ec7c4f20d8591e96727aa1df0e8c0b2003d78f304953df3eb9a36553eb8d6f42
machine-os-content sha256:f6e12a3c8886d4c56879eaf452a1b7f5ac83ed7bb0776ad607e29964ade59a4f
machine-os-images git 566bf595 sha256:f9a61fa9bf0ffad1813444aa08390dddd4f07a6382f8fa6ea572e8da87601570
multus-networkpolicy git 421718ab sha256:8d19b2dd53f333808ed09f1072510bf676abe6518fff8531cffec1056ab3a0a0
multus-route-override-cni git 523b7904 sha256:9bfd4c447c9221f48590c90cb36c1b7ed9f61e0dfd24731889e3c30897315ef0
must-gather git 5fd21761 sha256:7f00cc87fa34ce8cb80674f32e26697588285cbb0bd9e27f2c3b5c0fdc93450c
network-tools git c76613c7 sha256:60294e80578f5521af48e767f15822c6964bf1afd8dc5026f7a5f9e9de9e5dbd
nutanix-machine-controllers git 25aea2d4 sha256:dbc6519bb3d31b5439aec8fe8d97f9f1134dac5f903022078e2b7fbc0bc95d69
oauth-proxy git 03e5b13b sha256:1548db806196a01b830e5f5445b16dbf2d07e42d8270e67745e818c7e0d1e5fe
oauth-server git a803bf49 sha256:6f784e3c55b30bb0d403c84041563cf501861eb6ad6246e45ffe486416e932b1
olm-rukpak git 1b52bfeb sha256:514f6d734597db09588a506b3f424265f6a5f573d9098ec5418164ba3cce610e
openshift-controller-manager git b6528f9e sha256:2996d22ed2fc898e42a56b83940930b98bffc1fe05113fd5a8df376d5d605347
openshift-state-metrics git 4c711c74 sha256:8b466fe813a3d46d45f0c4ebeea05ec2d14e9a2a5c92395c6b97901bf9ef66ae
openstack-cinder-csi-driver-operator git 308a62d8 sha256:ace95ef2892c735420a62474022aee68bd6dea6b94f66ace2b4d9bdab8ac0342
openstack-machine-controllers git 8bd9c35f sha256:54e834e520de6d48d1de026e0b43face81786b7e7cdc0eaa58c1ad3c499fa15a
ovirt-csi-driver git 64d58fb5 sha256:64699e463da553d069995cdebb64a40c265d1300c8f43c037df2265a22137626
ovirt-csi-driver-operator git feb14fbb sha256:03c0aba04f62bee7c6f2e6e7981bc0cbecbf782e80eef0211f05a101535d2dc3
ovirt-machine-controllers git 03e8cb50 sha256:0fff125dfda6a239ba78d5152aecd2f6ba5d8e1c39ebdd39d0f39011586eb5f9
powervs-block-csi-driver git 5eb2b132 sha256:8fa5fd0f7263d6d0566d492b76c91990fcde877a98bc638caf70c6775cd57476
powervs-block-csi-driver-operator git b4da8bcc sha256:6c12cfeccaca2975954904c9158715784c7bae698c71d50e4e73e5675df773b1
powervs-cloud-controller-manager git d8ddc10c sha256:f9b9369acbc10debb3401d6a4af3baa12825a8ab45e5c39c813bfd021f87c6f0
powervs-machine-controllers git 3f498f79 sha256:91301e568df37b3320b692b4929b9a8e094ac566adf3818718346f43edaae438
prom-label-proxy git b1907888 sha256:663a065c284b65bc6a5c66c994a8a2569f729cc07b4d254313e82d13f7d9271c
prometheus git c749fdb4 sha256:1d159ff9238db4952e2f5aff86ff34a32cd40b28c5052357c5cd063c5ddba34d
prometheus-alertmanager git 86b18354 sha256:a07bd70d27dedafc20dcf7fd2007b7f2263ccdbf5f27d1ab31c995adbb0d2f92
prometheus-node-exporter git af2f49ca sha256:ba9908c44cc83a61f275517717c163929b840f4076af138048878ba7ffae33bd
rhel-coreos-8 sha256:13d7cff3fd3b59c6fdf35c76d283e9e31a2981210640677fd92475b345392352
rhel-coreos-8-extensions sha256:c57956f8def5b46d8ca62d9e074e2d7c89db5ae5c4460529b2e7c9b4ac840877
route-controller-manager git 9e74d175 sha256:79770fc878c4bbf3c17d78a5fbae46b851ba481665e2244937e697baf933aae4
service-ca-operator git 299b7097 sha256:aa202021969ad1f1565e92a52a35359a30870ffeb47edd7ff29da30d2856cbdb
vsphere-cloud-controller-manager git e993e31f sha256:a60ced3ebff6cfd4c5e5bd759ae91f858c38de56a1dc16ff324a6319a29d74f6
vsphere-cluster-api-controllers git 5c261b3b sha256:f96dc951288c2ba27b188ac3fbecb1c0202750f749636c6a03cdb9f84d6887cf
vsphere-problem-detector git c65eb79c sha256:d5b5d9f1292e77db33d5118d4cc9312b72547d13a97a176c8a28fd3faf1dd019

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) #631
Full changelog

agent-installer-node-agent

MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
Add sg3_utils package (#497) (#500) #497
Full changelog

aws-ebs-csi-driver-operator

4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208
OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7141
OCPBUGS-11360: Use 100 GB as minimum disk size in validations #7065
OCPBUGS-11662: AWS - Remove ACLs from s3 ign #7084
OCPBUGS-11208: GCP: add europe-west12 region to the survey as supported region #7055
OCPBUGS-11108: Kubelet Client Cert should include system:serviceaccounts group #7050
OCPBUGS-8384: Specify filename for default registries.conf #6941
OCPBUGS-10904: IBMCloud: Fix SSH Private bootstrap #7028
OCPBUGS-10905: IBMCloud set dnsrecords offset #7029
OCPBUGS-10740: bump RHCOS 4.12 bootimage metadata #7019
OCPBUGS-7481: Fix file check for loading openshift manifests #6907
OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
OCPBUGS-7594: fully qualified username must be provided #6864
OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
OCPBUGS-7521: Update AgentConfig template #6857
OCPBUGS-5992: azure: validate Windows-only VM types #6780
OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
Full changelog

baremetal-operator

OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
Full changelog

baremetal-runtimecfg

OCPBUGS-11145: fix isUpgradeStillRunning() #232
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
Full changelog

cloud-credential-operator

OCPBUGS-11707: ccoctl: Enable public anon read access to default OIDC S3 bucket #529
Full changelog

cluster-baremetal-operator

OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-7898: add a check for nutanix cloud conf map #239
OCPBUGS-7884: Restart pods if related configuration was changed #228
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-12440: Prioritise machine mapping over alphabetical mapping #204
OCPBUGS-11692: E2E periodics test timeout failures improvement #190
OCPBUGS-8503: machine’s node must be ready for CPMS machine to be ready + fixes #193
OCPBUGS-11521: Use PlatformStatus instead of PlatformSpec to determine platform #188
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-10646: Hypershift: set Deployment properties #148
OCPBUGS-8374: [4.12] remove cluster-admin role. #143
Full changelog

cluster-etcd-operator

OCPBUGS-12473: Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time #1046
OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
Update reviewers and approvers #987
OCPBUGS-7409: set default timeouts in etcdcli #1005
OCPBUGS-6935: add dedicated success status for bootstrap removal #999
OCPBUGS-7373: [release-4.12] fail early on missing node status envs #1004
Full changelog

cluster-image-registry-operator

OCPBUGS-8491: bump aws-sdk-go #846
Full changelog

cluster-ingress-operator

OCPBUGS-3517: Ingress controller should not have affinity policy in single-replica clusters #857
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-6789: enable pod security admission for techpreview #1440
OCPBUGS-6789: make the bootstrap kube-apiserver honor cluster-wide featuregates #1439
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #1445
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-6789: Enforce PSA when techpreview is enabled #694
OCPBUGS-6789: honor feature gates during bootstrapping #695
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #699
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7369: Guard controller: set the readiness probe endpoint explicitly #462
Full changelog

cluster-monitoring-operator

OCPBUGS-11508: add startup probe for prometheus-adapter #1940
OCPBUGS-11623: node-exporter: disable btrfs collector #1944
OCPBUGS-11404: jsonnet: Add prometheus container in UWM #1935
OCPBUGS-2439: set the argument path.udev.data in node exporter #1800
Full changelog

cluster-network-operator

OCPBUGS-11559: multus-admission-controller should not run as root under Hypershift #1777
Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net #1671
OCPBUGS-10977: HyperShift: Add POD_NAME env to ovnkube-node #1753
OCPBUGS-11461: Split out konnectivity certs #1771
OCPBUGS-11178: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759
OCPBUGS-11059: Fix info log formatting #1659
OCPBUGS-10319: HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738
OCPBUGS-8014: add default noProxy config for Azure #1722
OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
OCPBUGS-5953: Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685
Full changelog

cluster-node-tuning-operator

Remove subPaths, they are broken (#627) #627
Remove the preStop hook for openshift-tuned (#621) #621
E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
Full changelog

cluster-policy-controller

OCPBUGS-6789: backport feature gate honoring for PSa label syncer #98
OCPBUGS-7705: [release-4.12] update dependencies to point to v0.25.0 #102
Full changelog

cluster-samples-operator

OCPBUGS-10918: update Jenkins to v4.12 #492
Full changelog

cluster-storage-operator

OCPBUGS-10646: Hypershift: set control plane operand properties #355
OCPBUGS-8374: Add UID to CSO Pod to be able to run with custom SCCs #347
OCPBUGS-7331: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337
Full changelog

cluster-version-operator

OCPBUGS-10565: RetrievePayload: Improve timeouts and cover behavior with tests #914
OCPBUGS-10514: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913
OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
Full changelog

console

OCPBUGS-11844: delete associated pipeline, triggertemplate and eventlistener when deleting app #12727
OCPBUGS-11972: update the default pipelineRun template name #12687
OCPBUGS-6888: Show Git icon and repo link as per the Git provider #12511
OCPBUGS-12476: Pipelines repository list and creation form doesn’t show Tech Preview status #12763
OCPBUGS-1753: Fix OLM descriptor components deletes operand e2e test failing #12573
OCPBUGS-12477: Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765
OCPBUGS-11998: Do not show builder ImageStreams without sampleRepo as samples #12740
OCPBUGS-5009: Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382
OCPBUGS-7953: fix devfile error #12605
OCPBUGS-6672: In DeploymentConfig both the Form view and Yaml view are not in sync #12475
OCPBUGS-8016: PipelineRun templates must be fetched from OpenShift namespace #12614
OCPBUGS-10225: Get the Event type value from the latest PLR of the Repository #12643
OCPBUGS-7333: Add missing SDK extensions descriptions #12556
OCPBUGS-7951: delete application should delete all part-of resources #12604
OCPBUGS-6036: Project dropdown order is not as smart as project list page order #12447
OCPBUGS-7800: add subject kind dropdown in the project access form #12586
OCPBUGS-8339: disable operator-install-single-namespace.spec.ts until… #12624
OCPBUGS-3892: Add cluster to query params of websocket requests #12282
OCPBUGS-5092: Fix to use and set correct secretReference for build-config triggers #12388
OCPBUGS-7895: Bump helm version to 3.10.1 #12579
OCPBUGS-6873: The dropdown list component will be covered by deployment details page on Topology page #12507
OCPBUGS-6831: Fix crash when pinnedResources is null #12503
OCPBUGS-7471: Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565
OCPBUGS-7506: Fix different CI issues #12555
OCPBUGS-6966: Remove description field from the PLR parameters page #12519
OCPBUGS-7437: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560
OCPBUGS-6887: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510
OCPBUGS-6816: Repositories list does not show the running pipelinerun as last pipelinerun #12500
OCPBUGS-4072: Fix rerender loop/crash when bindable-kinds is found but has no status #12304
OCPBUGS-6671: fix broken pipeline secret #12474
Full changelog

console-operator

OCPBUGS-7999: Distinguish between route conditions and remove the old ones #735
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-11906: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #193
Full changelog

csi-driver-manila-operator

OCPBUGS-10556: Bump go.mongodb.org/mongo-driver to v1.5.1 #176
Full changelog

docker-builder

OCPBUGS-6753: manage-dockerfile: use the original form of HEALTHCHECK #324
Full changelog

docker-registry

OCPBUGS-10496: bump docker-distribution #365
OCPBUGS-8491: bump aws-sdk-go #362
Full changelog

etcd

Update owners #185
Updating ose-etcd images to be consistent with ART #153
Full changelog

hyperkube, pod

OCPBUGS-7589: UPSTREAM: <carry>: add default kubelet sysctls within rpm #1478
OCPBUGS-11166: UPSTREAM: <carry>: Force using the go tooling from the system #1531
OCPBUGS-11166: Bump to k8s 1.25.8 #1527
OCPBUGS-8705: Fix mounted volume expansion tests #1503
OCPBUGS-7078: Bump to k8s 1.25.7 #1496
OCPBUGS-5769: scc admission - seccomp profiles fix #1471
Full changelog

hypershift

OCPBUGS-12199: remove ACL for aws bucket #2458
OCPBUGS-11607: properly reconcile with user specified changes for in proxy configuration #2395
OCPBUGS-11726: Update HostedCluster oauthCallbackURLTemplate #2410
e2e: Cleanup shared OIDC provider on SIGTERM #2449
HOSTEDCP-568: Update Konnectiviy socks5 proxy for IBM exception #2406
OCPBUGS-10584: Switch NTO metrics auth to certs generated by HCP controller #2293
OCPBUGS-11014: Do not proxy when guest cluster resolution fails #2340
OCPBUGS-11654: [release-4.12] Create new EC2 client for AWS identity provider health check #2403
OCPBUGS-10646: Add storage operators perms. to watch HostedControlPlane #2306
HOSTEDCP-939: [release-4.12] Setup shared OIDC provider for e2e clusters #2365
HOSTEDCP-806: Fix ValidAWSKMSConfig condition #2362
OCPBUGS-11056: fix external APIServer address selection based on endpointAccess #2350
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707: No more specifying the scrape interval at servicemonitors & podmonitors level #2356
HOSTEDCP-900: Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285
OCPBUGS-10504: Deletion of the VPCEnpoint on conflicting service names #2310
HOSTEDCP-806: [release-4.12] Validate etcd KMS config #2273
HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
Force controleplane upgrade always #2289
OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826: Customize DNS base domain prefix #2235
feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
Full changelog

insights-operator

OCPBUGS-11008: update the cluster transfer interval to 12h (#765) #765
OCPBUGS-10531: service_accounts.go Marshal fix (#754) #754
OCPBUGS-6732: Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727
OCPBUGS-6833: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) #736
OCPBUGS-6782: Create gatherer for gathering machines. (#734) #734
Full changelog

ironic

OCPBUGS-7566: Bump werkzeug 4.12 #352
Full changelog

ironic-agent

OCPBUGS-9934: Adding dep on python3-werkzeug >= 2.0.3-4 #72
Full changelog

kube-proxy, sdn

OCPBUGS-10805: Fix race in Egress IP Tracker start #521
OCPBUGS-7474: Initialize egress node monitoring struct with previous reachability status #505
OCPBUGS-6842: Handle race condition to setup default vnid flows #497
Full changelog

kube-rbac-proxy

OCPBUGS-11645: Updating kube-rbac-proxy images to be consistent with ART #56
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-11993: Fix VIF revert on KuryrPort status update error #721
Full changelog

machine-api-operator

OCPBUGS-10943: Fix empty component version #1132
OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
OCPBUGS-8286: Short circuit misfiring #1109
Full changelog

machine-config-operator

OCPBUGS-7718: Prevent possible split-brain scenario with keepalived unicast #3562
OCPBUGS-7945: [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573
OCPBUGS-5935: Wrap podman commands in a while loop #3495
OCPBUGS-7167: Avoid ‘too restrictive’ SCC problems by being more explicit #3542
OCPBUGS-10505: daemon: Drop duplicate --authfile used in run #3617
OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #61
OCPBUGS-10506: Client golang [backport 4.12] #59
Full changelog

multus-cni

OCPBUGS-10535: Multus sync Mar-20-2023 to OCP 4.12 #149
OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-7429: Invalid ipv6 backport 4.12 #109
OCPBUGS-11321: respect requested allocation range when exluding ranges [Backport 4.12] #123
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #93
Full changelog

network-interface-bond-cni

Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog

network-metrics-daemon

Remove e2e tests that consistently fail in 4.12 (#74) #74
Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver images to be consistent with ART #80
Full changelog

oc-mirror

OCPBUGS-12261: fix: skips bundles with ‘skips’ field on head bundle (#618) #618
OCPBUGS-863: Add skip pruning flag and logic (#591) #591
Bugfix for destination registry nested paths length (#590) #590
Full changelog

openshift-apiserver

OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
Full changelog

openstack-machine-api-provider

OCPBUGS-10603: machineset_controller: Stop caching clouds credentials #65
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-7650: Catalog Pod Startup Probe Timeout #450
Updating operator-registry images to be consistent with ART #397
OCPBUGS-7825: Set openshift.io/scc label to empty #456
OCPBUGS-7769: [release-4.12] update cluster policy operator dependency #454
OCPBUGS-7556: Defuse E2e timebomb #449
OCPBUGS-7086: cherry-pick pull request refactor FBC caching (#1051) f… #441
Full changelog

operator-marketplace

OCPBUGS-7108: Default CatalogSource aren’t always reverted to default settings #506
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-12768: : [release-4.12] Delete equivalent ACLs when searching by predicate. #1661
OCPBUGS-12265: [release-4.12] Network scale metrics #1653
OCPBUGS-8226: fix hybridOverlay DRIP in ICNIv1 pods #1633
OCPBUGS-11701: [release-4.12] CARRY: use “prefer local” for annotated services #1638
OCPBUGS-11109: [release-4.12] Batch potentially big transaction on egress firewall ACLs migration #1617
OCPBUGS-10947: [release-4.12] Egress firewall fix retry #1610
OCPBUGS-10314: [release-4.12] Handle Completed pods deletion #1581
Updating ovn-kubernetes-microshift images to be consistent with ART #1288
OCPBUGS-10632: Check the “Serving” field for endpoints #1569
OCPBUGS-6034: Update egress node assignability on every egress node update #1483
OCPBUGS-7732: Fix leak in service controller cache #1545
OCPBUGS-10490: [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go #1595
OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
OCPBUGS-7317: [release-4.12] Delete stale egress ip snat entries by node #1520
OCPBUGS-7026: Bump OVN to 22.12 and turn off neighbour response in router options. #1521
OCPBUGS-6040: addMasqueradeRoute: fallback to gateway interface IPs #1484
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7458: Fixes ThanoRuler StatefulSet re-creation bug #217
Full changelog

telemeter

OCPBUGS-7702: Add ‘agent-installer’ value to ‘install_type’ label #451
Full changelog

tests

OCPBUGS-12914: Add (optional) dual-stack tests to the CNI certification test suite #27903
Updating openshift-enterprise-tests images to be consistent with ART #27293
add specific test for failing cgroups path #27856
OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
OCPBUGS-8024: Backport fixes to resume gathering CI disruption data for SLB and image registry #27759
OCPBUGS-7633: remove reference to old guard pods #27732
Full changelog

thanos

OCPBUGS-4276: Update exporter-toolkit to 0.7.3 #111
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7426: Add migrationDataStore field #59
Full changelog

vsphere-csi-driver-operator

OCPBUGS-7901: Bump sidecar timeouts for vsphere #142
OCPBUGS-7426: Fix datastore migration bug in 4.12 #139
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github