4.12.23

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.23-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.16, 4.12.17, 4.12.18, 4.12.3, 4.12.4, 4.12.6, 4.12.7, 4.12.8, 4.12.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.5

Created: 2023-06-29 18:29:05 +0000 UTC

Image Digest: sha256:2309578b68c5666dad62aed696f1f9d778ae1a089ee461060ba7b9514b7ca417

Release 4.12.23 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-06-28-213654

Components

Kubernetes upgraded from 1.25.4 to 1.25.11
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202302170236-0 to 412.86.202306271602-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 1959de0e sha256:6cac727dcd4c3b6b43869c258757decaf81649a6c47756b49757a9e952a3c7fa
alibaba-cloud-csi-driver git 664d8cb0 sha256:5454405d9096af85e71a862354a04fde2bf98d14736a318ecaccfbbd127567bf
alibaba-disk-csi-driver-operator git e324a71c sha256:23acfd47f7a05d0bf72b4c0132af9927da56dbb563700d95c0690f2ba45dbbdd
alibaba-machine-controllers git b9287c05 sha256:4b41f8e9cda9736059d331530f08cbe7fc2c9a2532faf031d93cfbc5a6d55d28
apiserver-network-proxy git 61e198ca sha256:0c506b8419f2fe534abc1574340ec480105942ad9ad68ba456ea159d705c6841
aws-cloud-controller-manager git 7fb891f4 sha256:6af4408b8369f423bc2d61b9fc6b9ac27c851bae9c849c30ecd9d6c3459ca47b
aws-cluster-api-controllers git 15ff2acd sha256:7cd77d57ae2ef5b0a1db704c612c7c5151b25d33f0218bc94f99a36065edc26c
aws-machine-controllers git b82e889d sha256:28a511d4641cfa9fae6c33be1cd92f5c69376a1a17b41de0f02023945189350a
aws-pod-identity-webhook git 6197630b sha256:04e44a663070fa5f9d06ad7cec10dd42bc5f57bc5ce83b43230295ee500c8fca
azure-cloud-controller-manager git 6ff1c8e5 sha256:de3d736a5ca06b046bfa2d625d2c706e933e39144047e384ac18dab584e41787
azure-cloud-node-manager git 6ff1c8e5 sha256:2344a0f009694f4e7937bdef8d437b976507a5cdfff0963a83da26ea5b937bae
azure-cluster-api-controllers git d1d4f770 sha256:5b7e34305ee618985d00d2c93066f28fbb9445de8597da7541d9c3b65a3e7c67
azure-disk-csi-driver git ba105788 sha256:aed54aa456f8db265294892a70b3326c178cf3d0385709fb7638f5d2d2937386
azure-file-csi-driver git 746fab2b sha256:3697993af0054969f74845aa00cbdde1adabb9bebe9f3568191e6830006d2276
azure-file-csi-driver-operator git 0a02fa02 sha256:cd6d4218fd366d47cb99439b772e275d7aa035661447b2ebeb15109346cc8eee
azure-machine-controllers git cfb76acd sha256:badaeb5eb07725bf2b18b901dd14368bdfb821e6dbcfb1205b89f87dead5fc83
baremetal-machine-controllers git 63dcaf1e sha256:a5229ba0fce1c5dc6082103aae536c60b95fb014b6f57e9999f00590280ae9b3
cluster-authentication-operator git bb764848 sha256:5ab211a32ac9d0156ee1919b90b8b854e7ad189d5df662caf0a79704e2dd2f3e
cluster-autoscaler git 6ab8e62b sha256:cdb37c970615d26784b91ffcb5a1e27127471a9c5e89e140b310db64798b571f
cluster-autoscaler-operator git 8b232255 sha256:b0a14eecae16b0a28f39be00cd4f62bd77f1b8e208a51222904a5a631a9805ed
cluster-capi-controllers git f9c215c4 sha256:7e73155adfe1dff5e4f3c7bf0e4b290901d58a8a516f8f2c2fb355e86eaf7c52
cluster-capi-operator git 3bfe36aa sha256:93a316f82b1b21f5bda60ca9ffebecbc269d6eff1a04bdb6501b604814f72110
cluster-config-operator git 4c6e171d sha256:2759bb72644ab1c1c2d3db2f6ce3e6024c97bdf7b4288b121df055adf5417ae0
cluster-dns-operator git 1c136fe3 sha256:10a863b53f2c96806e8035917a1b0cded306e3d7cac9655818835fc14a9bf5a1
cluster-kube-cluster-api-operator git 7bb05468 sha256:194590e6bd4932f21f263a02ba3160229e93ec3b0c1cd49e832231fee9168752
cluster-kube-storage-version-migrator-operator git 12d050ab sha256:8d1ba0d6c53c8fdd6fa67da2d10735aa7b332c7ea94386d2e7dddc18813bb886
cluster-machine-approver git 60081982 sha256:7f9d4454b0015894f00fb4a51e4da08eece6bddbf161c1087ffdef3618ba7f30
cluster-openshift-apiserver-operator git 4c5b4882 sha256:26a98fa0f13f996225a9b76a6b6135ef6350ad40e706100776d6335b78a981e9
cluster-openshift-controller-manager-operator git d1915d13 sha256:b2d884639fcb9b73b8e02dade8063f818b9eedab7573b4233affe3a44e1ed4ff
cluster-platform-operators-manager git d40fae81 sha256:febb4ab5d1f1f7d49a0219602bc71fe7a44524610d6ae7813530c4b56306f285
cluster-update-keys git 2796e173 sha256:3fc97c79c5b9b678cb3f389721cf35b1fc74a198d3d5d3fec5767f19debb72cd
configmap-reloader git e4d9170e sha256:ec5bbffbdd71746c0460bc57c622bc0c8d1f79bf1c33d5debeca6f7dab0617b1
container-networking-plugins git 6d237727 sha256:7e320ee6ff42ff5ca0eef524d8126d71f5cac24e6b7c02a782d5e38d272b667f
coredns git 9aaa7e0a sha256:95dd3672584bef74a77a559cb92f466410fad0d9f3bf6d6fac2769e46c735292
csi-driver-nfs git d9099257 sha256:e1ee7978b33ad8559bdc09c8b80ff206a1d21353c9f1d415476414056f4ebd00
csi-driver-shared-resource git 20cffc04 sha256:9e6c128e7aab8821ea33b9a7141b6a3f1aafd14a0752acb1eb736ebd46fbb87b
csi-driver-shared-resource-operator git 3201431c sha256:039216add262950b76931f9c4b47085945ff47faf6553f041e39d966913a31c6
csi-driver-shared-resource-webhook git 20cffc04 sha256:6a8b2e132382bbc2898513be7d881fc76d3d46d50bcee8171aad6ba0610f90ac
csi-external-attacher git 6945eef8 sha256:17220817d7d4b2a81636c48727f5c32f22a69e99bd9e994b40c138a53c950038
csi-external-provisioner git 140851f6 sha256:c35043de6bfe9c71924332440d2fbfc953fb9705a295f804add8ee8d6a5fec7b
csi-external-resizer git 239d751f sha256:6543fea59eb331dbf4d9720c95eafccfb7288826d45e3240a2a2360b96760df4
csi-external-snapshotter git 7e232566 sha256:c39828331e7ff79ca6aeb56e54c1c5501b6c7055cd20510b2142badd3901a23a
csi-node-driver-registrar git 805d5ac2 sha256:fe27cfaaea97f006b187a9b76d1a685c81fc03d42a2c55f18344a6d3fb15460a
csi-snapshot-controller git 7e232566 sha256:38626355d4250f932a3fa332f80e68aa9e894dfbdd499a00b8c171f57212b2ac
csi-snapshot-validation-webhook git 7e232566 sha256:9b51ef34ea6daaf4f6d1bc116882e9fddff68d4ec8dee12335ffcf01e5bb0529
driver-toolkit git 6e5c04c0 sha256:e280217aadb71060cb66f22a84d3ae89f240498c91ec7469eff8d8f67d803ed6
egress-router-cni git a92e4157 sha256:4ebd0bdc34a0d6ee6949ae433717c259d1a5e8505e59c470d8d9d49ab9bc5f9f
gcp-cloud-controller-manager git 8d208a7f sha256:a4a39129238a516e2341b9d384642d0fd1090f255ebed4f78749037cfa60ae98
gcp-cluster-api-controllers git eea0586c sha256:14fa29b714f69cda6d6fc008a0affd555294ea5d0f7625f00102ceb0e644d693
gcp-pd-csi-driver git 223d8464 sha256:1580a2289f7198ef0bb4a6d4f73e49d045ca6817d2e69b80f1bd69d5b8e4355d
gcp-pd-csi-driver-operator git 020aeb67 sha256:2adcb64a452cb477b9776e9ac0878c063c24935403d50ca30183081632f6d8bb
ibm-cloud-controller-manager git e5f25fc6 sha256:63c1e111ecd2b9bd5921d54930e0884d82f4424229e09717fecf12015d495fce
ibm-vpc-block-csi-driver-operator git f70fccea sha256:10f9437645df6bc821a70f4da0d65ce06220961465c7c720c3d9cf71cc091e39
ibm-vpc-node-label-updater git 737d00c9 sha256:4a9c00a113526b2ffa7c9610bf7a1fcf083bb145ee52c76abac48b5ac1929136
ibmcloud-cluster-api-controllers git c1304c80 sha256:ea656bbd7907106d097fa5968edb6962311fb9cf3aba49374c70a2203301c9a4
ibmcloud-machine-controllers git 31a67dac sha256:54019b4192b085a0251566a51cff89612691b2bd6b00e170fe5a2dcbba42c0e5
ironic-machine-os-downloader git a580a447 sha256:d6efe96b5829568ad4d15948086823dffc31e66bb85ee01c6d44a3b01bd49517
k8s-prometheus-adapter git 987e5da8 sha256:3dca2a8e208ed9ce82d6e3c3b43c33c107eae2104bede086eec98f83ff94a15a
keepalived-ipfailover git 7e8a0105 sha256:bf216d47b8648002b715a97293a23f828d3d0a42ef5a89986b6adcae3b95cd2d
kube-state-metrics git 9a1bf9b8 sha256:48fe6d1d26708f6f44776b1968ec1c0b415c0e759be81010b01994db4d9a21b5
kube-storage-version-migrator git 596745ce sha256:db07ce6476e5712c2e2ca5461c057fe8652cb761efc6ec02467d90b244027859
kubevirt-cloud-controller-manager git a19615cd sha256:3f0721800ecf460036e9b9bb4574fa332099b8b95f3f83d8e7b3a65eecc402e2
kubevirt-csi-driver git f407c8a7 sha256:2049df74f75834f16f3754e565cff75c30a7c50c1bcb17392eeb89165f871e0e
libvirt-machine-controllers git a2882f7a sha256:8a49898e5865a6866e11e593e3b36c00515967c75a16f4fb5e21b2b9b7f1cbad
machine-image-customization-controller git 27777d0e sha256:5ffc761ff1ad98852d2006c838fc643fe6ddac46d4d4c779529726c845cf3333
machine-os-content sha256:f99b698d1b1091c9f9c4436eb1b7d65d5ae7926329126e4e57269a9536cd194c
machine-os-images git 566bf595 sha256:e79087f3603696a5f800bae7d6cfa0f6168397b20374b346c50a1c5ad39353ac
multus-networkpolicy git 421718ab sha256:267bbceb068c516090693b4993eb93b1f56c238653c585a8716b03626ce87c27
must-gather git 5fd21761 sha256:2eddfe6b31b4275d681e16a21c8d0db983f7fe6a86f6cf309b8c1a06c03ba63d
network-tools git c76613c7 sha256:c4227d1aaf1953442ef515eef1ad384d1241bbbda6a57ebad4127d85c57a4952
nutanix-machine-controllers git 25aea2d4 sha256:723ed61852a0f3ab7e738f800e3dccd2ae6f500eca8132e503aa42a239a0a5fc
oauth-proxy git 03e5b13b sha256:4734c5bb510bd658a084059136e2df0d267696699dc093f265678170d66f58d2
olm-rukpak git 1b52bfeb sha256:8ba327b0aa6d385c26bb6a2493936a5b630d91b6e864212c6db24952bed73eb9
openshift-controller-manager git b6528f9e sha256:4344a11b5b91679f98d18ca1040bae371bbf2339a827c1ad99de6b038854a3a7
openshift-state-metrics git 4c711c74 sha256:dfc8c3544982ae445a5a22d56404198668a6d5c9f229352a61f1f7cbf6469663
openstack-cinder-csi-driver-operator git 308a62d8 sha256:662f77d8347c20533b560e07b8f0821097badf1aad691e9cdd450e85b63784e6
openstack-machine-controllers git 8bd9c35f sha256:6538a5408fee0bc60f6e5fff83291803151a7f183bf9e5c823360f22211f5c0d
ovirt-csi-driver git 64d58fb5 sha256:c28f29eee61fb5465471ad8a93fa85b8a1572ff80c1c65dbf939555bf76741b5
ovirt-csi-driver-operator git feb14fbb sha256:fd6fa79402cea88a2d49b303e51f7cf533a32cd5a76ab8528c3309c6b511a2ac
ovirt-machine-controllers git 03e8cb50 sha256:0e3a228f67175bdc4f27292fc23b725c83689a37859b773aca21f4bfbcb865a5
powervs-block-csi-driver git 5eb2b132 sha256:f243e124caefaeb6fcaac1e749a7accb54ea3f152cdfd31b53de8b3ce849227d
powervs-block-csi-driver-operator git b4da8bcc sha256:c91bdab2d50b2dbacd9bea181d0baa35a168af275b216b1bf377b45f661d2f43
powervs-cloud-controller-manager git d8ddc10c sha256:93a571de93bdabcd315086ca4247f7f339774a45262dda7bfa414c4ecb39b323
powervs-machine-controllers git 3f498f79 sha256:d7575ca6be5007758173e3e41311e69689eb6f50fabcec7948efa873e17f2135
prom-label-proxy git b1907888 sha256:a778d14159894f47289ef8d92ed6ae4b7eb533717c812f988a68282dcca8cf60
prometheus git c749fdb4 sha256:b71cf039176e8b32e7963ba2aae2d4a997cf1e313350d8dab08c0678188d9071
prometheus-alertmanager git 86b18354 sha256:f524571705bfc20c9e51e7872b4c75b78a181b5093c41d41848947455050a844
prometheus-config-reloader git 57e7c574 sha256:1dee62467a15940ef63088df693702d81c1abab75d0ca3c04a446c730c3a4805
prometheus-node-exporter git af2f49ca sha256:581c874acf7f051c5aa2b0a8b16d5fa42eca78c2210bd37096d8765fdadcf964
prometheus-operator git 57e7c574 sha256:7a08679ceaf6cc684a22f6a99eed17f42652b5f1aea88fdddc35a984475feb5d
prometheus-operator-admission-webhook git 57e7c574 sha256:7d913f0ed8df6b21633168ab79a2a3991c2a749c605f6c563680c47cc0d20656
rhel-coreos-8 sha256:fb065c8d91453ce4a3f5518189b34bce94406c01f43957abde01f08165b3a085
rhel-coreos-8-extensions sha256:26fba0d4cdaf1b072aa05ae4e26c8efb320f7d104cd1a8ef2967ce089ad93f62
service-ca-operator git 299b7097 sha256:bfbcbd8aab1b2d2e43efd85df3ea537098f36754b75b2ce5ca92f358e19c4222
vsphere-cloud-controller-manager git e993e31f sha256:ea12cdc4966710225132fb402c768e43d6951afd6ed3feb21c1606e280673b59
vsphere-cluster-api-controllers git 5c261b3b sha256:f5209b95632be5ce5805ebdb0ca4c528ccd8a07580c864a57e75973a52bf25ae

agent-installer-api-server

OCPBUGS-13356: Fix ‘vendor’ root device hint evaluation (#5206) #5206
OCPBUGS-13529: Support by-path root device hints (#5214) #5214
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) #631
Full changelog

agent-installer-node-agent

MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
Add sg3_utils package (#497) (#500) #497
Full changelog

aws-ebs-csi-driver

OCPBUGS-14281: Volume unmount repeats after successful unmount, preventing pod delete #226
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-13721: assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #230
4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208
OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-11199: azure: upi: use Image Gallery in ARM templates #7054
OCPBUGS-13940: bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249
OCPBUGS-14664: Shorten SNO installation duration by releasing CVO lease #7235
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7175
OCPBUGS-13819: Bootstrap on aws should have same metadata service type as on other nodes #7196
OCPBUGS-12202: Relax vsphere, nutanix VIP validation #7116
OCPBUGS-7551: vSphere - ignore all bootstrap disk changes #6860
OCPBUGS-14014: Do not always output warning msg when releaseImage is digest #7202
OCPBUGS-13052: bump RHCOS 4.12 bootimage metadata #7164
OCPBUGS-12956: openstack: Add netcat to the Installer image #7148
OCPBUGS-12749: [Alibaba] update the bandwidth value of EIP #7131
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7141
OCPBUGS-11360: Use 100 GB as minimum disk size in validations #7065
OCPBUGS-11662: AWS - Remove ACLs from s3 ign #7084
OCPBUGS-11208: GCP: add europe-west12 region to the survey as supported region #7055
OCPBUGS-11108: Kubelet Client Cert should include system:serviceaccounts group #7050
OCPBUGS-8384: Specify filename for default registries.conf #6941
OCPBUGS-10904: IBMCloud: Fix SSH Private bootstrap #7028
OCPBUGS-10905: IBMCloud set dnsrecords offset #7029
OCPBUGS-10740: bump RHCOS 4.12 bootimage metadata #7019
OCPBUGS-7481: Fix file check for loading openshift manifests #6907
OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
OCPBUGS-7594: fully qualified username must be provided #6864
OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
Full changelog

baremetal-operator

OCPBUGS-14188: Deleting unmanaged BMH get stuck fix #283
OCPBUGS-13530: Support /dev/disk/by-path root device hints #278
OCPBUGS-12175: Revert live-iso validation #269
OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
Full changelog

baremetal-runtimecfg

OCPBUGS-15315: Use machine-config state instead of comparing roles #262
OCPBUGS-12805: Make nested dual stack VIP configs respect EnableUnicast #240
OCPBUGS-13405: Verify kubelet version in upgrade check #249
OCPBUGS-11145: fix isUpgradeStillRunning() #232
Full changelog

cli, cli-artifacts, deployer, tools

handle the error case of node retrieval while waiting for reboot #1485
bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478
OCPBUGS-14647: [release-4.12] Do not set master node selector if there’s no masters #1366
OCPBUGS-14236: Remove closed centos7 registry from newapp unit tests #1434
OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
Full changelog

cloud-credential-operator

OCPBUGS-13739: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #539
OCPBUGS-11707: ccoctl: Enable public anon read access to default OIDC S3 bucket #529
Full changelog

cloud-network-config-controller

OCPBUGS-14717: increase GCP egress ip capacity to 100 from 10 #114
OCPBUGS-13802: sync CloudPrivateIpConfig when node is missing #112
OCPBUGS-13183: pull project name from subnet uri #108
Full changelog

cluster-baremetal-operator

OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
Full changelog

cluster-bootstrap

Add API team to the OWNERS #97
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-13862: add separate upgradeable condition for the sync controller #254
OCPBUGS-13188: update config sync controller to add upgrade status #251
OCPBUGS-7898: add a check for nutanix cloud conf map #239
OCPBUGS-7884: Restart pods if related configuration was changed #228
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-15198: Surface cpms vs machines diff #219
OCPBUGS-13943: fix double machine creation on stale cache #210
OCPBUGS-12440: Prioritise machine mapping over alphabetical mapping #204
OCPBUGS-11692: E2E periodics test timeout failures improvement #190
OCPBUGS-8503: machine’s node must be ready for CPMS machine to be ready + fixes #193
OCPBUGS-11521: Use PlatformStatus instead of PlatformSpec to determine platform #188
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-10646: Hypershift: set Deployment properties #148
OCPBUGS-8374: [4.12] remove cluster-admin role. #143
Full changelog

cluster-etcd-operator

OCPBUGS-12473: Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time #1046
OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
Update reviewers and approvers #987
Full changelog

cluster-image-registry-operator

OCPBUGS-8491: bump aws-sdk-go #846
Full changelog

cluster-ingress-operator

OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #941
OCPBUGS-12464: Target metrics port by name in internal service #910
OCPBUGS-3517: Ingress controller should not have affinity policy in single-replica clusters #857
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-6789: enable pod security admission for techpreview #1440
OCPBUGS-6789: make the bootstrap kube-apiserver honor cluster-wide featuregates #1439
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-6789: Enforce PSA when techpreview is enabled #694
OCPBUGS-6789: honor feature gates during bootstrapping #695
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-14652: disable debug pporf with unauthenticated port for 4.12 #481
Full changelog

cluster-monitoring-operator

OCPBUGS-13008: Add build number to vcenter version information #1965
OCPBUGS-12727: backport OCPBUGS-5353 to 4.12 #1955
OCPBUGS-11508: add startup probe for prometheus-adapter #1940
OCPBUGS-11623: node-exporter: disable btrfs collector #1944
OCPBUGS-11404: jsonnet: Add prometheus container in UWM #1935
OCPBUGS-2439: set the argument path.udev.data in node exporter #1800
Full changelog

cluster-network-operator

OCPBUGS-13891: [release-4.12] HyperShift: Support HostedControlPlane node selector #1816
OCPBUGS-13067: Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] #1829
OCPBUGS-6061: Update github.com/Masterminds/sprig to v3 #1689
OCPBUGS-13013: AUTH: update cluster-reader to include k8s.ovn.org #1799
OCPBUGS-13067: Whereabouts should implement the reconciliation controller [backport 4.12] #1801
OCPBUGS-11559: multus-admission-controller should not run as root under Hypershift #1777
Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net #1671
OCPBUGS-10977: HyperShift: Add POD_NAME env to ovnkube-node #1753
OCPBUGS-11461: Split out konnectivity certs #1771
OCPBUGS-11178: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759
OCPBUGS-11059: Fix info log formatting #1659
OCPBUGS-10319: HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738
OCPBUGS-8014: add default noProxy config for Azure #1722
OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
Full changelog

cluster-node-tuning-operator

Revert “Remove optimization to allow full resync (#569)” (#688) #569
update owners 20230109 (#549) #549
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667
OCPBUGS-14472: Fix updating numa core siblings map in GetCpuSiblings function (#675) #675
Remove trailing spaces from test names (#572) #572
Remove optimization to allow full resync (#569) #569
e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) #539
e2e: add missing test id (#630) #630
Remove subPaths, they are broken (#627) #627
Remove the preStop hook for openshift-tuned (#621) #621
E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
Full changelog

cluster-policy-controller

OCPBUGS-14092: [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources #117
OCPBUGS-13889: external template and route Informer #114
OCPBUGS-6789: backport feature gate honoring for PSa label syncer #98
Full changelog

cluster-samples-operator

OCPBUGS-10918: update Jenkins to v4.12 #492
Full changelog

cluster-storage-operator

OCPBUGS-14307: User real node name in failing mount alerts #377
OCPBUGS-13719: assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #370
OCPBUGS-10646: Hypershift: set control plane operand properties #355
OCPBUGS-8374: Add UID to CSO Pod to be able to run with custom SCCs #347
Full changelog

cluster-version-operator

OCPBUGS-12182: Update dnsPolicy to allow consistent resolution of the internal LB #931
OCPBUGS-10565: RetrievePayload: Improve timeouts and cover behavior with tests #914
OCPBUGS-10514: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913
OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
Full changelog

console

OCPBUGS-15099: visiting Configurations page returns error Cannot read… #12906
OCPBUGS-15482: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948
OCPBUGS-14190: When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859
OCPBUGS-11989: Modified git import flow module to handle create button enable-disable issue #12775
OCPBUGS-6848: Service name search ability while creating the Route from console #12505
OCPBUGS-7619: Search page: LazyActionMenus are shown below Add/Remove from navigation button #12575
OCPBUGS-7924: Developer - Topology : ‘Filter by resource’ drop-down i18n misses #12598
OCPBUGS-13803: add support for minimal status of tekton #12831
OCPBUGS-13750: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12829
OCPBUGS-12839: Show type of sample on the samples view #12783
OCPBUGS-12992: Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12791
OCPBUGS-9336: use buildconfig form also for create #12770
OCPBUGS-11601: Move operator install status to it’s own … #12715
OCPBUGS-12232: Fix for broken Create key/value secrets e2e tests #12750
OCPBUGS-11844: delete associated pipeline, triggertemplate and eventlistener when deleting app #12727
OCPBUGS-11972: update the default pipelineRun template name #12687
OCPBUGS-6888: Show Git icon and repo link as per the Git provider #12511
OCPBUGS-12476: Pipelines repository list and creation form doesn’t show Tech Preview status #12763
OCPBUGS-1753: Fix OLM descriptor components deletes operand e2e test failing #12573
OCPBUGS-12477: Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765
OCPBUGS-11998: Do not show builder ImageStreams without sampleRepo as samples #12740
OCPBUGS-5009: Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382
OCPBUGS-7953: fix devfile error #12605
OCPBUGS-6672: In DeploymentConfig both the Form view and Yaml view are not in sync #12475
OCPBUGS-8016: PipelineRun templates must be fetched from OpenShift namespace #12614
OCPBUGS-10225: Get the Event type value from the latest PLR of the Repository #12643
OCPBUGS-7333: Add missing SDK extensions descriptions #12556
OCPBUGS-7951: delete application should delete all part-of resources #12604
OCPBUGS-6036: Project dropdown order is not as smart as project list page order #12447
OCPBUGS-7800: add subject kind dropdown in the project access form #12586
OCPBUGS-8339: disable operator-install-single-namespace.spec.ts until… #12624
OCPBUGS-3892: Add cluster to query params of websocket requests #12282
OCPBUGS-5092: Fix to use and set correct secretReference for build-config triggers #12388
OCPBUGS-7895: Bump helm version to 3.10.1 #12579
Full changelog

console-operator

OCPBUGS-13647: Proper cleanup of route sync conditions #762
OCPBUGS-7999: Distinguish between route conditions and remove the old ones #735
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-11906: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #193
Full changelog

csi-driver-manila-operator

OCPBUGS-10556: Bump go.mongodb.org/mongo-driver to v1.5.1 #176
Full changelog

csi-livenessprobe

OCPBUGS-13821: Bump gRPC from 1.38.0 to 1.49.0 #43
Full changelog

docker-builder

OCPBUGS-6753: manage-dockerfile: use the original form of HEALTHCHECK #324
Full changelog

docker-registry

OCPBUGS-10496: bump docker-distribution #365
OCPBUGS-8491: bump aws-sdk-go #362
Full changelog

etcd

Update owners #185
Updating ose-etcd images to be consistent with ART #153
Full changelog

gcp-machine-controllers

OCPBUGS-14120: Register control plane machines to instance group #52
Full changelog

haproxy-router

OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #491
Full changelog

hyperkube, pod

OCPBUGS-15309: Bump to k8s 1.25.11 #1615
OCPBUGS-14745: [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600
OCPBUGS-13173: Bump to k8s 1.25.10 #1582
OCPBUGS-7589: UPSTREAM: <carry>: add default kubelet sysctls within rpm #1478
OCPBUGS-11166: UPSTREAM: <carry>: Force using the go tooling from the system #1531
OCPBUGS-11166: Bump to k8s 1.25.8 #1527
OCPBUGS-8705: Fix mounted volume expansion tests #1503
OCPBUGS-7078: Bump to k8s 1.25.7 #1496
OCPBUGS-5769: scc admission - seccomp profiles fix #1471
Full changelog

hypershift

HOSTEDCP-1073: enforce blocked rollout of HCP #2745
properly handle user CA bundle not existing #2711
OCPBUGS-15304: [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695
OCPBUGS-14873: Honor global ingress configuration LoadBalancer type on AWS #2678
OCPBUGS-14803: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
OCPBUGS-14156: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614
OCPBUGS-14031: Include default ingress CA in root CA bundle #2600
OCPBUGS-13626: Sync proxy TrustedCA to guest cluster #2557
OCPBUGS-13639: Cherry pick aws endpoint sg #2579
OCPBUGS-12787: fix(hcco): Get OLM CatalogSource images from defined map #2485
ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials #2486
Configurable SRE MetricsSet #2545
OCPBUGS-13077: Ensure ingress controllers are removed before load balancers #2515
OCPBUGS-11544: Pass runAsUser to CNO so it can run its managed services with proper security context #2391
OCPBUGS-12845: Delete kubeadmin secret when an idp is defined #2492
OCPBUGS-12738: Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2473
OCPBUGS-12199: remove ACL for aws bucket #2458
OCPBUGS-11607: properly reconcile with user specified changes for in proxy configuration #2395
OCPBUGS-11726: Update HostedCluster oauthCallbackURLTemplate #2410
e2e: Cleanup shared OIDC provider on SIGTERM #2449
HOSTEDCP-568: Update Konnectiviy socks5 proxy for IBM exception #2406
OCPBUGS-10584: Switch NTO metrics auth to certs generated by HCP controller #2293
OCPBUGS-11014: Do not proxy when guest cluster resolution fails #2340
OCPBUGS-11654: [release-4.12] Create new EC2 client for AWS identity provider health check #2403
OCPBUGS-10646: Add storage operators perms. to watch HostedControlPlane #2306
HOSTEDCP-939: [release-4.12] Setup shared OIDC provider for e2e clusters #2365
HOSTEDCP-806: Fix ValidAWSKMSConfig condition #2362
OCPBUGS-11056: fix external APIServer address selection based on endpointAccess #2350
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707: No more specifying the scrape interval at servicemonitors & podmonitors level #2356
HOSTEDCP-900: Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285
OCPBUGS-10504: Deletion of the VPCEnpoint on conflicting service names #2310
HOSTEDCP-806: [release-4.12] Validate etcd KMS config #2273
HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
Force controleplane upgrade always #2289
OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826: Customize DNS base domain prefix #2235
feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
Full changelog

insights-operator

OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) #804
OCPBUGS-15414: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) #788
OCPBUGS-7871: Collect info about monitoring pods pv (#769) #769
OCPBUGS-11008: update the cluster transfer interval to 12h (#765) #765
OCPBUGS-10531: service_accounts.go Marshal fix (#754) #754
OCPBUGS-6732: Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727
Full changelog

ironic

OCPBUGS-13586: Add python-flask dependency #373
Bug OCPBUGS-13335: Bump ironic version to include fix to OCPBUGS-13335. #367
OCPBUGS-13041: Bump python-sushy #363
OCPBUGS-7566: Bump werkzeug 4.12 #352
Full changelog

ironic-agent

OCPBUGS-9934: Adding dep on python3-werkzeug >= 2.0.3-4 #72
Full changelog

ironic-static-ip-manager

OCPBUGS-14415: Flush addresses on provisioning interface with global scope only #37
Full changelog

kube-proxy, sdn

OCPBUGS-13785: EgressNetworkPolicy DNS resolution does not fall back to TCP #542
OCPBUGS-14304: fix possible concurrent map read/write #551
OCPBUGS-13058: save and delete the old egress network policy #539
OCPBUGS-13761: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) #541
OCPBUGS-10805: Fix race in Egress IP Tracker start #521
OCPBUGS-7474: Initialize egress node monitoring struct with previous reachability status #505
Full changelog

kube-rbac-proxy

OCPBUGS-11645: Updating kube-rbac-proxy images to be consistent with ART #56
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-13778: KuryrPort cleanup: Fix issue of subport not found #731
Bug OCPBUGS-12164: Fix ValueError when Pod has no IP address #722
OCPBUGS-11993: Fix VIF revert on KuryrPort status update error #721
Full changelog

machine-api-operator

OCPBUGS-10943: Fix empty component version #1132
OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
OCPBUGS-8286: Short circuit misfiring #1109
Full changelog

machine-config-operator

OCPBUGS-11303: Fix regex dot in coredns config file #3660
OCPBUGS-13757: The MCD has a non-functional pivot command that should be removed #3710
OCPBUGS-7718: Prevent possible split-brain scenario with keepalived unicast #3562
OCPBUGS-7945: [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573
OCPBUGS-5935: Wrap podman commands in a while loop #3495
OCPBUGS-7167: Avoid ‘too restrictive’ SCC problems by being more explicit #3542
OCPBUGS-10505: daemon: Drop duplicate --authfile used in run #3617
OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller images to be consistent with ART #61
OCPBUGS-10506: Client golang [backport 4.12] #59
Full changelog

multus-cni

OCPBUGS-7844: Fix multus to support CNI plugin which does not create interface [backport 4.12] #164
OCPBUGS-10535: Multus sync Mar-20-2023 to OCP 4.12 #149
OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #27
Full changelog

multus-whereabouts-ipam-cni

Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #134
OCPBUGS-8673: Dual stack support #131
OCPBUGS-7429: Invalid ipv6 backport 4.12 #109
OCPBUGS-11321: respect requested allocation range when exluding ranges [Backport 4.12] #123
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #93
Full changelog

network-interface-bond-cni

OCPBUGS-13836: Ignore missing links during delete command #53
Full changelog

network-metrics-daemon

Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Remove e2e tests that consistently fail in 4.12 (#74) #74
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver images to be consistent with ART #80
Full changelog

oauth-server

OCPBUGS-12757: bump lib-go for group cache fix, kube 1.24->1.25 #127
Full changelog

oc-mirror

OCPBUGS-14065: Fix destination image reference (#650) #650
OCPBUGS-11908: Fix (#607) (#641) #607
OCPBUGS-14065: fix: Limit the nested repository path while mirroring the images (#642) #642
updates the OWNERS file (#646) #646
OCPBUGS-12261: fix: skips bundles with ‘skips’ field on head bundle (#618) #618
OCPBUGS-863: Add skip pruning flag and logic (#591) #591
Bugfix for destination registry nested paths length (#590) #590
Full changelog

openshift-apiserver

OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
Full changelog

openstack-machine-api-provider

OCPBUGS-10603: machineset_controller: Stop caching clouds credentials #65
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-7650: Catalog Pod Startup Probe Timeout #450
Updating operator-registry images to be consistent with ART #397
OCPBUGS-7825: Set openshift.io/scc label to empty #456
OCPBUGS-7769: [release-4.12] update cluster policy operator dependency #454
OCPBUGS-7556: Defuse E2e timebomb #449
Full changelog

operator-marketplace

OCPBUGS-14109: Revert default catsrc diff changes #519
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-15424: [release-4.12] Fix network policy to work with long namespace names #1725
OCPBUGS-14982: Validate port before deleting conntrack flow #1713
OCPBUGS-14041: Fix bug that resulted in routes not be restored to a new vnic #1681
OCPBUGS-13953: [release-4.12] Use loadbalancer.Name as client index #1680
OCPBUGS-13599: Call SyncEndpoints from AddService #1673
OCPBUGS-7439: [release-4.12]: Egress Service: Fix nodeSelector parsing #1529
OCPBUGS-12768: : [release-4.12] Delete equivalent ACLs when searching by predicate. #1661
OCPBUGS-12265: [release-4.12] Network scale metrics #1653
OCPBUGS-8226: fix hybridOverlay DRIP in ICNIv1 pods #1633
OCPBUGS-11701: [release-4.12] CARRY: use “prefer local” for annotated services #1638
OCPBUGS-11109: [release-4.12] Batch potentially big transaction on egress firewall ACLs migration #1617
OCPBUGS-10947: [release-4.12] Egress firewall fix retry #1610
OCPBUGS-10314: [release-4.12] Handle Completed pods deletion #1581
Updating ovn-kubernetes-microshift images to be consistent with ART #1288
OCPBUGS-10632: Check the “Serving” field for endpoints #1569
OCPBUGS-6034: Update egress node assignability on every egress node update #1483
OCPBUGS-7732: Fix leak in service controller cache #1545
OCPBUGS-10490: [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go #1595
OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
OCPBUGS-7317: [release-4.12] Delete stale egress ip snat entries by node #1520
Full changelog

route-controller-manager

OCPBUGS-14275: Bump k8s to 1.25.10 #27
Full changelog

telemeter

OCPBUGS-7702: Add ‘agent-installer’ value to ‘install_type’ label #451
Full changelog

tests

CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27941
OCPBUGS-14152: Move from registry.centos.org to quay.io #27949
OCPBUGS-12914: Add (optional) dual-stack tests to the CNI certification test suite #27903
Updating openshift-enterprise-tests images to be consistent with ART #27293
add specific test for failing cgroups path #27856
OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
OCPBUGS-8024: Backport fixes to resume gathering CI disruption data for SLB and image registry #27759
Full changelog

thanos

OCPBUGS-4276: Update exporter-toolkit to 0.7.3 #111
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-14312: Update 4.12 against v2.7.1 #81
OCPBUGS-7426: Add migrationDataStore field #59
Full changelog

vsphere-csi-driver-operator

OCPBUGS-12712: Add backoff for successful storage policy creations #152
OCPBUGS-7901: Bump sidecar timeouts for vsphere #142
OCPBUGS-7426: Fix datastore migration bug in 4.12 #139
Full changelog

vsphere-problem-detector

OCPBUGS-10812: Add build number to metrics #104
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github