4.12.55

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.55-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-sdn-serial
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-main-ci-4.12-e2e-azure-ovn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.31, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.6, 4.12.8, 4.12.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.7

Created: 2024-04-04 20:59:56 +0000 UTC

Image Digest: sha256:ecf790d11e32ec8c88c4224660eb1a107db5fdf54b0712eededb9d9bf0ab1a6d

Components

Kubernetes upgraded from 1.25.4 to 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202303011010-0 to 412.86.202403280709-0 (diff)

Rebuilt images without code change

alibaba-machine-controllers git b9287c05 sha256:fbb76c7019649c08d530f5dbfdba7ca3ab03e5735bc7daf0c220d78b2bf1121f
cluster-update-keys git 2796e173 sha256:c9d4cd2f4b8a45be2d64d4f026984a85fa68eaabcf650080dfb87fa95a34f06e
configmap-reloader git e4d9170e sha256:6d7cda3c6c02c4159393199a8caff92fe77b9e78b17b8057b0543b7b489bc15b
csi-driver-nfs git d9099257 sha256:fc8fc38d0d3bb5477de0dffb598b2345bfa49778d9222d6674613fa2cef4bb9f
driver-toolkit git 6e5c04c0 sha256:425301031f818d6740c12d96364fc234e51f3573388d9f176d377f6ab7fcf842
egress-router-cni git a92e4157 sha256:d847db171e717b9344f88466f6e1f782f24002055d91dfdcdbb3c61cbeee26ff
ibmcloud-machine-controllers git 31a67dac sha256:0ab6699202f7bb7282540f571b50850ff00125d6b8040c379981ed7994f47e57
keepalived-ipfailover git 7e8a0105 sha256:94091dcae31700c8092bbdc495117e500190aa8ff077bbe478839455fe1ad1b1
kube-storage-version-migrator git 596745ce sha256:cb88f0cce4302475bf8550086ba69a544e0f16c1fb7c83da72055f994c1ebcbe
kubevirt-cloud-controller-manager git a19615cd sha256:ca8f3cd661c0909d2c354893d882444855a88e981cf9806e6b345731511fec80
kubevirt-csi-driver git f407c8a7 sha256:bd7a7f3a52e2eb2f2cc61165969e2d9030c49ef4abdef3c10b388250ae8bd129
libvirt-machine-controllers git a2882f7a sha256:e89aa49ed079765a31a98f1d17b0ff02f5ac10e62f455be0e31f0bf4be1cefcf
machine-os-content sha256:fd8058c91a30d6d3a27b59763c83421fb406c665fef5a053062fbe9b0ff8efcd
machine-os-images git 566bf595 sha256:af5a4b5753c40a4e7a3b031ef78a88e52c9511802e28eaf6f53b1fb95d93586b
network-tools git c76613c7 sha256:7ddd3597c5a0cec45698f71b5dd0a4f0142070e306528af67d9cee9c9f06e889
oauth-proxy git 03e5b13b sha256:c01eac7a4ad21bcbf65187e2769620e84770aa0dcae6dd4bf75e78190383f855
openshift-controller-manager git b6528f9e sha256:aefa2a217d099b6bada4e3417ee2fc0abb1a3b15f4de6a1240a154127dfcd54b
ovirt-machine-controllers git 03e8cb50 sha256:99ffd1c9c4ea5568bb1f2f644221a507ced2028800497dccd9be4d6733d923cf
prom-label-proxy git b1907888 sha256:b22b259eaae6a1bdda98d8bfd1feb2df7aefdd93346bfd9339befec2016d80e3
rhel-coreos-8 sha256:6687dda7546065368535467b05f37e826fa89ac629662921b0bcbd76d0a83771
rhel-coreos-8-extensions sha256:328ed719b37eede690d50f8a3c0e8e1bbca3d66013e032a0bdb6f4d120ff99e0

agent-installer-api-server

MGMT-15150: Use same installer binary for all platform types (#5347) #5347
OCPBUGS-13356: Fix ‘vendor’ root device hint evaluation (#5206) #5206
OCPBUGS-13529: Support by-path root device hints (#5214) #5214
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#726) #670
OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) #631
Full changelog

agent-installer-node-agent

OCPBUGS-23537: backport of agent retries (#627) #627
MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21218: Bump golang.org/x/net to v0.19.0 #45
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-21313: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-21404: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #66
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #58
Full changelog

apiserver-network-proxy

HOSTEDCP-1323: Merge latest code into 4.14 branch #45
OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

aws-cloud-controller-manager

OCPBUGS-20722: Update golang.org/x/net to v0.17.0 #55
Full changelog

aws-cluster-api-controllers

OCPBUGS-20810: bump golang.org/x/net to v0.17.0 #483
OCPBUGS-15548: Pass right SGs for IsExternallyManaged on creation #469
Full changelog

aws-ebs-csi-driver

OCPBUGS-20919: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #241
OCPBUGS-14281: Volume unmount repeats after successful unmount, preventing pod delete #226
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-21018: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #282
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #265
OCPBUGS-13721: assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #230
4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208
Full changelog

aws-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #97
OCPBUGS-21562: Update golang.org/x/net to v0.17.0 #90
Full changelog

aws-pod-identity-webhook

OCPBUGS-21312: Upgrade golang/x/net for CVE-2023-39325 (4.12) #185
NO-ISSUE: Sync OWNERS with team members #178
NO-ISSUE: snyk: exclude vendor/ #174
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21401: Bump golang.org/x/net to v0.18.0 #95
OCPBUGS-22832: UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #91
OCPBUGS-17159: Increase service idle max timeout to 100 minutes #82
Full changelog

azure-cluster-api-controllers

OCPBUGS-21489: bump golang.org/x/net to v0.17.0 #289
Full changelog

azure-disk-csi-driver

OCPBUGS-22941: UPSTREAM: 1755: fix: detach disk failure when there is throttling #62
OCPBUGS-22832: UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #60
OCPBUGS-20675: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #56
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-20749: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #103
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #95
Full changelog

azure-file-csi-driver

OCPBUGS-20842: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39
Full changelog

azure-file-csi-driver-operator

OCPBUGS-20946: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #78
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #71
Full changelog

azure-machine-controllers

OCPBUGS-24564: Reduce cardinality #97
OCPBUGS-20741: Bump x/net package to v0.18.0 #84
OCPBUGS-19549, OCPBUGS-22247: Fix empty clusterName references for GenerateMachinePublicIPName #82
OCPBUGS-17960: Machine Actuator should not set metadata.name #71
OCPBUGS-17221: Add user defined Tags to NIC Azure resources #69
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-30768: update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 #8140
OCPBUGS-30134: [release-4.12] bump containerd for vulnerability fix #8091
OCPBUGS-27454: baremetal: correct external_http_url for v6-only BMCs #7900
OCPBUGS-25593: [release-4.12] OCPBUGS-16640: Update azure cli version to 2.49.0 #7849
OCPBUGS-23184: azure: validation: validate defaultMachinePlatform #7709
OCPBUGS-25476: destroy: gcp: fix destroying regional disks #7845
OCPBUGS-23302: images: installer: add xz to the container #7726
OCPBUGS-23379: images: update govc image in upi-installer #7739
OCPBUGS-22116: Add KMS encryption keys if provided #7769
OCPBUGS-23329: Specify google cloud CLI to version 447.0.0 #7731
OCPBUGS-22933: [release-4.12]: vsphere: fix validation of CPUS and CoresPerSocket #7677
OCPBUGS-13288: use python3 for cloud sdk #7170
OCPBUGS-18645: new Aws secret regions support #7473
OCPBUGS-22288: Don’t log password values #7627
OCPBUGS-18644: terraform: aws: secret regions now support ALIAS record #7472
OCPBUGS-17651: Validate that the rendevousIP is assigned to a master #7416
OCPBUGS-20145: [release-4.12] Use updated ansible-core for Openstack image #7560
OCPBUGS-18646: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7474
OCPBUGS-10992: bootstrap-pivot: skip pivot in SCOS Live ISO #7035
CORS-2792: AWS Shared VPC Backport [release-4.12] #7435
OCPBUGS-18320: CORS-2445: GCP: Add osImage to the install config #7454
OCPBUGS-17404: backport openstack UPI for ansible 2.10 #7399
OCPBUGS-16778: bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 #7420
OCPBUGS-17467: Allow override of networkType #7406
OCPBUGS-17174: Set AdditionalTrustBundle in override when mirroring not enabled #7386
OCPBUGS-16382: azure: skip LB creation when not needed #7342
OCPBUGS-14868: Shorten SNO installation duration by releasing CPC lease #7242
OCPBUGS-14495: Support /dev/disk/by-path root device hints #7227
OCPBUGS-16151: ic: azure: validate diskTypes in AzureStack #7331
OCPBUGS-11199: azure: upi: use Image Gallery in ARM templates #7054
OCPBUGS-13940: bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249
OCPBUGS-14664: Shorten SNO installation duration by releasing CVO lease #7235
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7175
OCPBUGS-13819: Bootstrap on aws should have same metadata service type as on other nodes #7196
OCPBUGS-12202: Relax vsphere, nutanix VIP validation #7116
OCPBUGS-7551: vSphere - ignore all bootstrap disk changes #6860
OCPBUGS-14014: Do not always output warning msg when releaseImage is digest #7202
OCPBUGS-13052: bump RHCOS 4.12 bootimage metadata #7164
OCPBUGS-12956: openstack: Add netcat to the Installer image #7148
OCPBUGS-12749: [Alibaba] update the bandwidth value of EIP #7131
OCPBUGS-7400: Check for AWS STS installation before trying to get all IAM Roles #7141
OCPBUGS-11360: Use 100 GB as minimum disk size in validations #7065
OCPBUGS-11662: AWS - Remove ACLs from s3 ign #7084
OCPBUGS-11208: GCP: add europe-west12 region to the survey as supported region #7055
OCPBUGS-11108: Kubelet Client Cert should include system:serviceaccounts group #7050
OCPBUGS-8384: Specify filename for default registries.conf #6941
OCPBUGS-10904: IBMCloud: Fix SSH Private bootstrap #7028
OCPBUGS-10905: IBMCloud set dnsrecords offset #7029
OCPBUGS-10740: bump RHCOS 4.12 bootimage metadata #7019
OCPBUGS-7481: Fix file check for loading openshift manifests #6907
OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-21700: Uplift x/net to v0.17.0 #200
Full changelog

baremetal-operator

OCPBUGS-24490: backport: Delay delete of detached hosts #326
OCPBUGS-23291: hack for deploying V6-only clusters from dualstack hubs #320
OCPBUGS-21154: Uplift x/net to v0.17.0 #310
OCPBUGS-17703: Trigger reconcile on Secret change #298
OCPBUGS-17459: Set minimum TLS version for webhook to 1.2 #297
OCPBUGS-14188: Deleting unmanaged BMH get stuck fix #283
OCPBUGS-13530: Support /dev/disk/by-path root device hints #278
OCPBUGS-12175: Revert live-iso validation #269
OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
Full changelog

baremetal-runtimecfg

OCPBUGS-26930: Add .snyk file to ignore vendor and test files #296
OCPBUGS-20127: Increase timeout for bootstrap kubeapi #279
OCPBUGS-18606: Move haproxy firewall rule check earlier in loop #272
OCPBUGS-17715: Don’t render config with incomplete unicast peer list #268
OCPBUGS-15315: Use machine-config state instead of comparing roles #262
OCPBUGS-12805: Make nested dual stack VIP configs respect EnableUnicast #240
OCPBUGS-13405: Verify kubelet version in upgrade check #249
OCPBUGS-11145: fix isUpgradeStillRunning() #232
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-25642: Add client version in must-gather summary #1639
OCPBUGS-24462: Overwrite template’s namespace with the explicit one #1618
OCPBUGS-23222: regeneratemco: explicitly check for PlatformStatus field #1598
OCPBUGS-20248: oc process: Set original namespace if it differs #1560
OCPBUGS-20291: Truncate existing files when writing from inspect #1563
OCPBUGS-20299: Use quay redis image instead docker mysql #1567
OCPBUGS-16173: Add tls-server-name when property exists in kubeconfig #1507
OCPBUGS-1283: Bump golang.org/x dependencies #1421
OCPBUGS-16056: mcs cert: account for environments that use IP directly #1501
OCPBUGS-16194: reboot: set ignition version to 3.1 #1509
handle the error case of node retrieval while waiting for reboot #1485
bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478
OCPBUGS-14647: [release-4.12] Do not set master node selector if there’s no masters #1366
OCPBUGS-14236: Remove closed centos7 registry from newapp unit tests #1434
OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
Full changelog

cloud-credential-operator

OCPBUGS-21348: Upgrade golang/x/net for CVE-2023-39325 #624
NO-ISSUE: snyk: exclude vendor/ #619
NO-ISSUE: Removing andrew from OWNERS #618
OCPBUGS-13739: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #539
OCPBUGS-11707: ccoctl: Enable public anon read access to default OIDC S3 bucket #529
Full changelog

cloud-network-config-controller

OCPBUGS-22949: Azure: skip backend pool if attached to an outbound rule #128
OCPBUGS-16325: Azure: Handle already existing IP configurations #117
OCPBUGS-14717: increase GCP egress ip capacity to 100 from 10 #114
OCPBUGS-13802: sync CloudPrivateIpConfig when node is missing #112
OCPBUGS-13183: pull project name from subnet uri #108
Full changelog

cluster-authentication-operator

OCPBUGS-20683: CVE 2023 39325 [4.12] #653
OCPBUGS-22689: increase timeout for probes #639
OCPBUGS-13346: dont log jwt tokens #622
Full changelog

cluster-autoscaler

OCPBUGS-30911: Fix unstructured taint parsing in Cluster API provider #291
OCPBUGS-23274: Rebase 4.12 branch onto cluster autoscaler 1.25.3 #267
Full changelog

cluster-autoscaler-operator

OCPBUGS-20754: Bump x/net package to v0.18.0 #300
Full changelog

cluster-baremetal-operator

OCPBUGS-23291: hack for deploying V6-only clusters from dualstack hubs #389
OCPBUGS-20845: Uplift x/net to v0.17.0 #371
OCPBUGS-19557: Guard against nil PlatformStatus #367
OCPBUGS-16169: use proxying for inspector in addition to ironic #349
OCPBUGS-15715: Limit role binding to openshift-machine-api namespace #347
OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
Full changelog

cluster-bootstrap

OCPBUGS-14386: Update dependencies and image #91
Add API team to the OWNERS #97
Full changelog

cluster-capi-controllers

OCPBUGS-21521: bump golang.org/x/net to v0.17.0 #186
Full changelog

cluster-capi-operator

OCPBUGS-21055: Bump golang.org/x/net to v0.17.0 #138
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-21148: Bump golang.org/x/net to v0.18.0 #297
OCPBUGS-13862: add separate upgradeable condition for the sync controller #254
OCPBUGS-13188: update config sync controller to add upgrade status #251
OCPBUGS-7898: add a check for nutanix cloud conf map #239
Full changelog

cluster-config-operator

OCPBUGS-16243: retire LatencySensitive featureset #336
: OCPBUGS-21245: bump library-go to include switch to HTTP/1.1 #373
CORS-2794: AWS Shared VPC API Bump [release-4.12] #344
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-21342: Bump golang.org/x/net to v0.17.0 #260
OCPBUGS-14960: Check ProviderSpec before generating MachineInfo #216
OCPBUGS-15198: Surface cpms vs machines diff #219
OCPBUGS-13943: fix double machine creation on stale cache #210
OCPBUGS-12440: Prioritise machine mapping over alphabetical mapping #204
OCPBUGS-11692: E2E periodics test timeout failures improvement #190
OCPBUGS-8503: machine’s node must be ready for CPMS machine to be ready + fixes #193
OCPBUGS-11521: Use PlatformStatus instead of PlatformSpec to determine platform #188
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-21442: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #169
OCPBUGS-10646: Hypershift: set Deployment properties #148
OCPBUGS-8374: [4.12] remove cluster-admin role. #143
Full changelog

cluster-dns-operator

OCPBUGS-21525: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #391
OCPBUGS-19933: update-node-resolver.sh: Check for errors from >> #385
OCPBUGS-19933: ensure original hosts file contents are preserved #383
OCPBUGS-15251: Add support for protocolStrategy API field to enable force_tcp configuration #378
Full changelog

cluster-etcd-operator

OCPBUGS-30938: fix panic in health check timeouts #1228
OCPBUGS-27776: [4.13] Remove z-upgrades from UpgradeBackupController #1185
OCPBUGS-23151: relax readiness to local serializable requests #1156
OCPBUGS-21127: fixing CVE-2023-39325 by updating dependencies #1148
OCPBUGS-20100: [4.12] Backports of backup/restore fixes #1137
OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #1128
OCPBUGS-17808: reset snapshot default counts to avoid file already lo… #1100
OCPBUGS-12473: Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time #1046
OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-22125: increase storage account key cache expiration #939
OCPBUGS-20684: mitigate effects of rapid reset #947
OCPBUGS-8491: bump aws-sdk-go #846
Full changelog

cluster-ingress-operator

OCPBUGS-20765: Bump golang.org/x/net for CVE-2023-44487 #988
OCPBUGS-22432: test/e2e: Don’t use openshift/origin-node #992
NE-1372: Add support for AWS shared VPC in another account #966 #971
OCPBUGS-13049: bump controller-runtime to fix the multi namespace cache indexing #922
OCPBUGS-15467: Add missing AWS permission for ListTagsForResources #954
OCPBUGS-16620: Deflake TestRouterCompressionOperation #963
OCPBUGS-16621: Fix TestClientTLS flakes #964
OCPBUGS-15644: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #959
OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #941
OCPBUGS-12464: Target metrics port by name in internal service #910
OCPBUGS-3517: Ingress controller should not have affinity policy in single-replica clusters #857
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-22736: pkg/operator/configobserver: check that the serving certificate refer… #1571
: OCPBUGS-20855: bump library-go to include switch to HTTP/1.1 #1574
OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #1559
OCPBUGS-17139: make webhook connection failure a warning in log #1533
OCPBUGS-13346: dont log jwt tokens #1524
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-20962: bump golang.org/x/net to v0.17.0 #29
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-27068: bump(library-go)=release-4.12 #789
OCPBUGS-21048: Bump deps to address CVE-2023-44487 [4.12] #759
OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #754
OCPBUGS-6789: Enforce PSA when techpreview is enabled #694
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27067: bump(library-go)=release-4.12 #529
OCPBUGS-21239: Sync deps CVE 2023 39325 4.12 #505
OCPBUGS-19837: Update staticpod file permissions to conform with CIS benchmarks #499
OCPBUGS-14652: disable debug pporf with unauthenticated port for 4.12 #481
Full changelog

cluster-kube-storage-version-migrator-operator

: OCPBUGS-21336: bump library-go to include switch to HTTP/1.1 #98
Full changelog

cluster-machine-approver

OCPBUGS-23486: Filter non node CSRs in metrics #220
OCPBUGS-21430: Bump x/net package to v0.18.0 #214
Full changelog

cluster-monitoring-operator

OCPBUGS-25389: Add RHACM telemetry metric for 4.12 #2204
OCPBUGS-21441: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2148
OCPBUGS-22843: [release-4.12] add RHACS telemetry metrics #2140
OCPBUGS-21234: upgrade golang.org/x/net to v0.17.0 #2123
OCPBUGS-17125: backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 #2047
OCPBUGS-16028: Add the trusted CA bundle in UWM Prometheus pods #2042
OCPBUGS-15473: Limit the value of GOMAXPROCS on node-exporter to 4 #2023
OCPBUGS-13008: Add build number to vcenter version information #1965
OCPBUGS-12727: backport OCPBUGS-5353 to 4.12 #1955
OCPBUGS-11508: add startup probe for prometheus-adapter #1940
OCPBUGS-11623: node-exporter: disable btrfs collector #1944
OCPBUGS-11404: jsonnet: Add prometheus container in UWM #1935
OCPBUGS-2439: set the argument path.udev.data in node exporter #1800
Full changelog

cluster-network-operator

OCPBUGS-29167: fix whereabouts conformance test failures #2256
OCPBUGS-29884: add env var in whereabouts-reconciler daemonset #2284
OCPBUGS-29302: Update ingressconfig_controller to use field Manager #2268
OCPBUGS-28801: [release-4.12] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2244
NO-JIRA: add kyrtapz as reviewer and approver for release 4.12 #2230
[release 4.12] OCPBUGS-23025: Add maxLogFiles config for OVN-K Audit Logging #2188
OCPBUGS-24039: remove all managed fields used by old manager #2099
OCPBUGS-21715: Bump golang.org/x/net and github.com/openshift/library-go #2124
OCPBUGS-24571: Disable weak SSH cipher suites #2164
OCPBUGS-25128: Update to go 1.19 and x/net 0.8.0 #2157
OCPBUGS-23293: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #2108
OCPBUGS-20277: Edited multus-admission-controller deployment config to not add autoount a service account token #1884
OCPBUGS-20197: remove prestop hooks for northd, sbdbd and nbdb #2055
OCPBUGS-17656: prevent creation of multiple cni-sysctl-allowlist-ds pods #1948
OCPBUGS-11547: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1775
OCPBUGS-16142: fix reconciliation process of the allowlist controller #1891
[release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay #1764
OCPBUGS-15588: Add release version annotation to whereabouts-reconciler #1856
OCPBUGS-13891: [release-4.12] HyperShift: Support HostedControlPlane node selector #1816
OCPBUGS-13067: Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] #1829
OCPBUGS-6061: Update github.com/Masterminds/sprig to v3 #1689
OCPBUGS-13013: AUTH: update cluster-reader to include k8s.ovn.org #1799
OCPBUGS-13067: Whereabouts should implement the reconciliation controller [backport 4.12] #1801
OCPBUGS-11559: multus-admission-controller should not run as root under Hypershift #1777
Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net #1671
OCPBUGS-10977: HyperShift: Add POD_NAME env to ovnkube-node #1753
OCPBUGS-11461: Split out konnectivity certs #1771
OCPBUGS-11178: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759
OCPBUGS-11059: Fix info log formatting #1659
OCPBUGS-10319: HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738
OCPBUGS-8014: add default noProxy config for Azure #1722
OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
Full changelog

cluster-node-tuning-operator

Disable HTTP/2 for webhook and metrics servers (#849) #849
Remove obsolete protocols and weak ciphers (#847) #847
OCPBUGS-21837: nto: pao avoid timeout when there are too many CSV (#838) #838
Tighten the rules for modifying Tuned Profiles (#790) #790
OCPBUGS-19459: check for object being nil (#821) #821
OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) #788
Release leader election on manager exit (#789) #789
Fix a race in e2e test rollback.go code (#742) #742
pao: e2e: Make script executable (#734) #734
pao e2e: Split gcp-pao lane (#728) #728
Do not rollback settings on TuneD exit (#711) #711
OCPBUGS-15800: e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710
Revert “Remove optimization to allow full resync (#569)” (#688) #569
update owners 20230109 (#549) #549
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667
OCPBUGS-14472: Fix updating numa core siblings map in GetCpuSiblings function (#675) #675
Remove trailing spaces from test names (#572) #572
Remove optimization to allow full resync (#569) #569
e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) #539
e2e: add missing test id (#630) #630
Remove subPaths, they are broken (#627) #627
Remove the preStop hook for openshift-tuned (#621) #621
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-22689: increase timeout for probes #558
: OCPBUGS-20694: bump library-go to include switch to HTTP/1.1 #556
OCPBUGS-13346: dont log jwt tokens #543
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-20777: bump(k8s,openshift) to address CVE-2023-44487 #311
Full changelog

cluster-platform-operators-manager

OCPBUGS-20979: [release-4.12] Bump golang.org/x/net to v0.17.0 #99
Full changelog

cluster-policy-controller

OCPBUGS-21080: Bump deps to address CVE-2023-44487 [4.12] #136
OCPBUGS-12442: psalabelsyncer: handle empty namespace of a rolebinding subject #111
OCPBUGS-14092: [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources #117
OCPBUGS-13889: external template and route Informer #114
Full changelog

cluster-samples-operator

OCPBUGS-15757: Update Jenkins and Jenkins Agent Base image versions #506
OCPBUGS-10918: update Jenkins to v4.12 #492
Full changelog

cluster-storage-operator

OCPBUGS-21266: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #407
OCPBUGS-18131: Add patch for allowing configmap updates via clusterrole #402
OCPBUGS-14307: User real node name in failing mount alerts #377
OCPBUGS-13719: assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #370
OCPBUGS-10646: Hypershift: set control plane operand properties #355
OCPBUGS-8374: Add UID to CSO Pod to be able to run with custom SCCs #347
Full changelog

cluster-version-operator

OCPBUGS-27443: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1024
OCPBUGS-20729: [4.12] Bump http-related deps #990
OCPBUGS-22408: pkg/clusterconditions/promql: Warm cache with 1s delay #988
OCPBUGS-22198: Reconcile Volumes in SCCs #985
OCPBUGS-14096: Trigger new sync round on ClusterOperator Available changes #938
OCPBUGS-12182: Update dnsPolicy to allow consistent resolution of the internal LB #931
OCPBUGS-10565: RetrievePayload: Improve timeouts and cover behavior with tests #914
OCPBUGS-10514: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913
OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
Full changelog

console

OCPBUGS-27479: Bump helm pkg #13528
OCPBUGS-29746: Add Pipeline metrics tab using plugin #13621
OCPBUGS-29348: Added Proxy to non k8s endpoints #13600
OCPBUGS-22431: Check if filtered object contains name property #13285
OCPBUGS-25213: add access review for impersonate #13440
OCPBUGS-18116: Bump helm version #13104
OCPBUGS-24236: Remove tech preview badge from Pipeline repository pages #13384
OCPBUGS-23413: Correct logout process #13342
OCPBUGS-24364: Subsequent PipelineRuns take initial PipelineRun name into account #13401
OCPBUGS-13357: add multipath device type to LocalVolumeSet #12805
OCPBUGS-23346: update the KnativeServing API version to v1beta1 for global-config extension #13334
OCPBUGS-23154: remove expandable toggle for conditional update risk d… #13322
OCPBUGS-22964: add support for new features annotations while preservi… #13305
OCPBUGS-19382: Could not import multiple resources via JSON (while YAML supports this) #13168
OCPBUGS-20071: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13212
OCPBUGS-21727: fetch TaskRuns without selector and reduces the get TaskRuns requests #13251
OCPBUGS-21731: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13252
OCPBUGS-13580: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12747
OCPBUGS-19907: Fixed Edit Application form for Knative Services #13205
OCPBUGS-19045: Web console slowness on Project>Project access page #13155
OCPBUGS-18273: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13113
OCPBUGS-18563: OLM Pages work when copied CSVs are disabled #13055
OCPBUGS-17530: fix bug where binary secret values are corrupted on edit and add test coverage #13087
OCPBUGS-18366: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13122
OCPBUGS-16660: Manual cherry-pick of #12978 #13039
OCPBUGS-17192: “Duplicate RoleBinding” leads to “Unsupported value” error #13063
OCPBUGS-16846: Fix stop PLR option #13051
OCPBUGS-2182: re-enable operator-install-single-namespace.spec.ts test #13013
OCPBUGS-16732: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047
OCPBUGS-16046, OCPBUGS-16047, OCPBUGS-16048: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997
OCPBUGS-15898: account for single object in status.conditions instead… #12982
OCPBUGS-16139: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004
OCPBUGS-15710: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962
OCPBUGS-15849: Add Pipeline metrics unsupported empty page #12977
OCPBUGS-9405: [OSD] There is no error message shown on node label edi… #12965
OCPBUGS-15798: Remove access review check for PipelineResource from Pipeline section #12969
OCPBUGS-13643: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813
OCPBUGS-15569: use service port name instead targetPort in the Pipeline Event listener route #12958
OCPBUGS-15535: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955
OCPBUGS-15404: Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935
OCPBUGS-15057: only copy workload annotations to debug pod #12903
OCPBUGS-15099: visiting Configurations page returns error Cannot read… #12906
OCPBUGS-15482: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948
OCPBUGS-14190: When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859
OCPBUGS-11989: Modified git import flow module to handle create button enable-disable issue #12775
OCPBUGS-6848: Service name search ability while creating the Route from console #12505
OCPBUGS-7619: Search page: LazyActionMenus are shown below Add/Remove from navigation button #12575
OCPBUGS-7924: Developer - Topology : ‘Filter by resource’ drop-down i18n misses #12598
OCPBUGS-13803: add support for minimal status of tekton #12831
OCPBUGS-13750: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12829
OCPBUGS-12839: Show type of sample on the samples view #12783
OCPBUGS-12992: Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12791
OCPBUGS-9336: use buildconfig form also for create #12770
OCPBUGS-11601: Move operator install status to it’s own … #12715
OCPBUGS-12232: Fix for broken Create key/value secrets e2e tests #12750
OCPBUGS-11844: delete associated pipeline, triggertemplate and eventlistener when deleting app #12727
OCPBUGS-11972: update the default pipelineRun template name #12687
OCPBUGS-6888: Show Git icon and repo link as per the Git provider #12511
OCPBUGS-12476: Pipelines repository list and creation form doesn’t show Tech Preview status #12763
OCPBUGS-1753: Fix OLM descriptor components deletes operand e2e test failing #12573
OCPBUGS-12477: Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765
OCPBUGS-11998: Do not show builder ImageStreams without sampleRepo as samples #12740
OCPBUGS-5009: Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382
OCPBUGS-7953: fix devfile error #12605
OCPBUGS-6672: In DeploymentConfig both the Form view and Yaml view are not in sync #12475
OCPBUGS-8016: PipelineRun templates must be fetched from OpenShift namespace #12614
OCPBUGS-10225: Get the Event type value from the latest PLR of the Repository #12643
OCPBUGS-7333: Add missing SDK extensions descriptions #12556
OCPBUGS-7951: delete application should delete all part-of resources #12604
OCPBUGS-6036: Project dropdown order is not as smart as project list page order #12447
OCPBUGS-7800: add subject kind dropdown in the project access form #12586
OCPBUGS-8339: disable operator-install-single-namespace.spec.ts until… #12624
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-20988: Disable HTTP/2 for webhook #876
OCPBUGS-30990: [release-4.12] Bump library-go and golang.org/x/net #867
OCPBUGS-18951: Add haproxy timeout annotation to console routes #792
OCPBUGS-18309: Add missing watch permission for helm-chartrepos-viewers #789
OCPBUGS-15834: Dockerfile: Shift ConsolePlugin CRD after the operator Deployment #791
OCPBUGS-18563: OLM Pages work when copied CSVs are disabled #780
OCPBUGS-13647: Proper cleanup of route sync conditions #762
OCPBUGS-7999: Distinguish between route conditions and remove the old ones #735
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins

OCPBUGS-20593: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.12] #131
Full changelog

coredns

OCPBUGS-21023: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #103
OCPBUGS-20144: UPSTREAM: <carry>: openshift: Fix OCPBUGS-20144 #98
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

update tags to v1.25.4 #2118
And 28 elided commits (e.g. from squash or rebase merges)
Full changelog

csi-driver-manila-operator

OCPBUGS-30295: Fix selector for manila-csi-driver-controller-metrics service #228
OCPBUGS-18475: Don’t cache OpenStack client #202
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #199
OCPBUGS-10556: Bump go.mongodb.org/mongo-driver to v1.5.1 #176
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28953: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #169
OCPBUGS-23118: Should reference configmaps instead of secrets #154
OCPBUGS-20703: bump golang.org/x/net to v0.17.0 #148
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28959: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #105
OCPBUGS-20787: bump golang.org/x/net to v0.17.0 #88
Full changelog

csi-external-attacher

OCPBUGS-21139: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #62
Full changelog

csi-external-provisioner

OCPBUGS-20743: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #74
Full changelog

csi-external-resizer

OCPBUGS-20885: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #149
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29244: cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #140
OCPBUGS-20991: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #111
Full changelog

csi-livenessprobe

OCPBUGS-20629: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52
OCPBUGS-13821: Bump gRPC from 1.38.0 to 1.49.0 #43
Full changelog

csi-node-driver-registrar

OCPBUGS-20674: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #54
Full changelog

docker-builder

OCPBUGS-23037: Add -p flag to cp command to preserve timestamps #372
OCPBUGS-20695: [release-4.12]Bump golang.org/x/net #364
OCPBUGS-17228: bump github.com/containers/buildah to v1.26.6 #325
OCPBUGS-15643: Add the git-lfs package #353
OCPBUGS-6753: manage-dockerfile: use the original form of HEALTHCHECK #324
Full changelog

docker-registry

OCPBUGS-19306: bump docker-distribution #382
OCPBUGS-10496: bump docker-distribution #365
OCPBUGS-8491: bump aws-sdk-go #362
Full changelog

etcd

OCPBUGS-28736: Rebase etcd 3.5.12 openshift 4.12 #246
OCPBUGS-27102: Rebase etcd 3.5.11 openshift 4.12 #240
OCPBUGS-21187: [4.12] Carrying fixes for CVE-2023-44487 #228
OCPBUGS-15860: [4.12] Rebase openshift/etcd to 3.5.9 #207
Update owners #185
Updating ose-etcd images to be consistent with ART #153
Full changelog

gcp-cloud-controller-manager

OCPBUGS-21282: Bump golang.org/x/net to v0.18.0 #44
Full changelog

gcp-cluster-api-controllers

OCPBUGS-21380: Bump golang.org/x/net to v0.17.0 #205
Full changelog

gcp-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality. #76
OCPBUGS-20833: Bump x/net package to v0.18.0 #69
OCPBUGS-14120: Register control plane machines to instance group #52
Full changelog

gcp-pd-csi-driver

OCPBUGS-20718: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #47
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-20807: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #89
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #82
Full changelog

haproxy-router

OCPBUGS-21098: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #532
OCPBUGS-17766: haproxy/template: mitigate CVE-2023-40225 #507
OCPBUGS-18639: properly handle weight=0 #511
OCPBUGS-14454, OCPBUGS-14455: Handle mTLS CRLs, and fix accidental CRL duplication #491
Full changelog

hyperkube, pod

Address CVE #13
OCPBUGS-15527: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1887
OCPBUGS-25815: Fix device uncertain errors on reboot 4.12 #1833
OCPBUGS-25214: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1835
OCPBUGS-23568: Update to kubernetes 1.25.16 #1807
OCPBUGS-23288: UPSTREAM: 121881: Use golang library instead of mklink #1803
OCPBUGS-20113: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1747
openshift-hack: Fix sporadic 141 errors in build-rpms #1774
OCPBUGS-21435: [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1760
OCPBUGS-18288, OCPBUGS-19483: Update to kubernetes 1.25.14 #1719
OCPBUGS-18768: UPSTREAM: <carry>: Force using host go always and use host libriaries #1694
OCPBUGS-17188: Update to Kubernetes 1.25.12 #1669
OCPBUGS-17159: Increase service idle max timeout to 100 minutes #1662
OCPBUGS-8737: UPSTREAM: <drop>: bump apiserver-library-go for scc fix #1619
OCPBUGS-15309: Bump to k8s 1.25.11 #1615
OCPBUGS-14745: [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600
OCPBUGS-13173: Bump to k8s 1.25.10 #1582
OCPBUGS-7589: UPSTREAM: <carry>: add default kubelet sysctls within rpm #1478
OCPBUGS-11166: UPSTREAM: <carry>: Force using the go tooling from the system #1531
OCPBUGS-11166: Bump to k8s 1.25.8 #1527
OCPBUGS-8705: Fix mounted volume expansion tests #1503
OCPBUGS-7078: Bump to k8s 1.25.7 #1496
Full changelog

hypershift

MULTIARCH-3709: PowerVS - Add reuse resource flags to e2e test #2994
MULTIARCH-3732: PowerVS - Fix cluster deletion when existing resources passed #2993
MULTIARCH-3733: Add dev flags in destroy cluster powervs command #2998
Updated secret permissions for openshift-route-controller-manager #2924
fix(hcco): Add HCP label to HCCO by default #2972
fix(ignition): Add HCP label to ignition-server by default #2949
OCPBUGS-16847: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803
OCPBUGS-16411: fix deletion bug when hostedzone is already deleted #2835
Kas policy 4.12 #2826
Leader election config update. #2800
OCPBUGS-15614: Check OwningIngressController also in Labels #2759
OCPBUGS-16086: autoscaling balance similar groups #2806
HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2749
OCPBUGS-14873: Update vendored openshift API for 4.12 #2734
HOSTEDCP-1073: enforce blocked rollout of HCP #2745
properly handle user CA bundle not existing #2711
OCPBUGS-15304: [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695
OCPBUGS-14873: Honor global ingress configuration LoadBalancer type on AWS #2678
OCPBUGS-14803: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
OCPBUGS-14156: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614
OCPBUGS-14031: Include default ingress CA in root CA bundle #2600
OCPBUGS-13626: Sync proxy TrustedCA to guest cluster #2557
OCPBUGS-13639: Cherry pick aws endpoint sg #2579
OCPBUGS-12787: fix(hcco): Get OLM CatalogSource images from defined map #2485
ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials #2486
Configurable SRE MetricsSet #2545
OCPBUGS-13077: Ensure ingress controllers are removed before load balancers #2515
OCPBUGS-11544: Pass runAsUser to CNO so it can run its managed services with proper security context #2391
OCPBUGS-12845: Delete kubeadmin secret when an idp is defined #2492
OCPBUGS-12738: Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2473
OCPBUGS-12199: remove ACL for aws bucket #2458
OCPBUGS-11607: properly reconcile with user specified changes for in proxy configuration #2395
OCPBUGS-11726: Update HostedCluster oauthCallbackURLTemplate #2410
e2e: Cleanup shared OIDC provider on SIGTERM #2449
HOSTEDCP-568: Update Konnectiviy socks5 proxy for IBM exception #2406
OCPBUGS-10584: Switch NTO metrics auth to certs generated by HCP controller #2293
OCPBUGS-11014: Do not proxy when guest cluster resolution fails #2340
OCPBUGS-11654: [release-4.12] Create new EC2 client for AWS identity provider health check #2403
OCPBUGS-10646: Add storage operators perms. to watch HostedControlPlane #2306
HOSTEDCP-939: [release-4.12] Setup shared OIDC provider for e2e clusters #2365
HOSTEDCP-806: Fix ValidAWSKMSConfig condition #2362
OCPBUGS-11056: fix external APIServer address selection based on endpointAccess #2350
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707: No more specifying the scrape interval at servicemonitors & podmonitors level #2356
HOSTEDCP-900: Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285
OCPBUGS-10504: Deletion of the VPCEnpoint on conflicting service names #2310
HOSTEDCP-806: [release-4.12] Validate etcd KMS config #2273
HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
Force controleplane upgrade always #2289
OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
Add configuration for automatic labeling and label commands #2255
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24644: Add Snyk file to exclude vendor directory on scan #67
OCPBUGS-21113: Bump golang.org/x/net to v0.18.0 #57
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-20583: [IBM VPC] failed provisioning volume in proxy cluster #56
OCPBUGS-21206: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52
OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-20583: [IBM VPC] failed provisioning volume in proxy cluster #79
OCPBUGS-21302: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #83
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-21415: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #29
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-21397: UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 #67
Full changelog

insights-operator

OCPBUGS-28519: Add extra check in ids to bypass validations (#906) #906
adds helm information gather (#890) #890
OCPBUGS-23439: remove username & password config options (#869) #869
OCPBUGS-22922: create Prometheus rules programmatically according the… (#860) (#862) #860
OCPBUGS-20731: update dependencies (#841) #841
Add cherry-pick from 4.13 (#853) #853
OCPBUGS-19476: update Insights report config logging (#831) #831
OCPBUGS-19405: workload info gatherer, add external image repo (#823) #823
OCPBUGS-15031: fix the config serialization & add test (#794) (#800) #794
OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) #804
OCPBUGS-15414: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) #788
OCPBUGS-7871: Collect info about monitoring pods pv (#769) #769
OCPBUGS-11008: update the cluster transfer interval to 12h (#765) #765
OCPBUGS-10531: service_accounts.go Marshal fix (#754) #754
Full changelog

ironic

OCPBUGS-29229: Fix Inspector iPXE config for IPv6 addresses #454
OCPBUGS-23979: Ironic side of external_http_url (METAL-163) is not wired in correctly #431
OCPBUGS-23357: Upgrade werkzeug dependency #423
OCPBUGS-23182: Use bash process substitution instead of pipe #419
OCPBUGS-19064: Handle Eject DVD in 4.12 #417
OCPBUGS-21849: bump eventlet version #409
OCPBUGS-17642: Expand regex for fcos/okd packages list #392
OCPBUGS-16169: allow inspector to also be proxied #385
OCPBUGS-13586: Add python-flask dependency #373
Bug OCPBUGS-13335: Bump ironic version to include fix to OCPBUGS-13335. #367
OCPBUGS-13041: Bump python-sushy #363
OCPBUGS-7566: Bump werkzeug 4.12 #352
Full changelog

ironic-agent

OCPBUGS-29769: Always add ignition to set hostname on /etc/hostname #112
OCPBUGS-19008: better compatibility with old hostnamectl #92
OCPBUGS-19008: backport hostname fixes #90
“Bug OCPBUGS-15831: Switch to udevadm command install instead of package” #82
OCPBUGS-9934: Adding dep on python3-werkzeug >= 2.0.3-4 #72
Full changelog

ironic-machine-os-downloader

OCPBUGS-15735: Binary should be compiled on rhel9 #92
Full changelog

ironic-static-ip-manager

OCPBUGS-14415: Flush addresses on provisioning interface with global scope only #37
Full changelog

k8s-prometheus-adapter

OCPBUGS-21441: upgrade golang.org/x/net to 0.17.0 to address CVE #91
OCPBUGS-20580: limit number of simultaneous client requests #79
Full changelog

kube-proxy, sdn

OCPBUGS-20753: update x/net to v0.17.0 #615
OCPBUGS-22972: Change the permission of 80-openshift-network.conf to 600 #583
OCPBUGS-18325: Vendor o/k to consume update to prefer local TCP eps for DNS #573
OCPBUGS-13785: EgressNetworkPolicy DNS resolution does not fall back to TCP #542
OCPBUGS-14304: fix possible concurrent map read/write #551
OCPBUGS-13058: save and delete the old egress network policy #539
OCPBUGS-13761: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) #541
OCPBUGS-10805: Fix race in Egress IP Tracker start #521
Full changelog

kube-rbac-proxy

OCPBUGS-20687: trim down http2, make it configurable 4.12 #85
OCPBUGS-11645: Updating kube-rbac-proxy images to be consistent with ART #56
Full changelog

kube-state-metrics

OCPBUGS-20764: bump x/net to v0.17.0 #103
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-16376: Fix np retry #740
OCPBUGS-15493: Remove unneeded grpcio dependencies from RPM #737
OCPBUGS-13778: KuryrPort cleanup: Fix issue of subport not found #731
Bug OCPBUGS-12164: Fix ValueError when Pod has no IP address #722
OCPBUGS-11993: Fix VIF revert on KuryrPort status update error #721
Full changelog

machine-api-operator

OCPBUGS-25303: Update reference URL #1189
OCPBUGS-21501: Bump golang.org/x/net to v0.18.0 #1176
OCPBUGS-10943: Fix empty component version #1132
OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
Full changelog

machine-config-operator

OCPBUGS-30829: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4257
OCPBUGS-30823: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4268
OCPBUGS-30329: set nodeStatusReportFrequency #4246
OCPBUGS-19659: After dual-stack conversion reconcile IPFamilies #3936
OCPBUGS-29366: release-4.12: fix nodeStatusUpdateFrequency #4180
OCPBUGS-29278: crio: drop automatic image cleanup on upgrades #4178
OCPBUGS-14071: Imageinspect takes type of error into account, drop podman inspect fallback #3717
OCPBUGS-21038: update library-go and kube deps to latest version #4013
OCPBUGS-22719: Backport logspam PRs #4008
OCPBUGS-21723: keepalived/ingress: change healthcheck script #3985
OCPBUGS-18433: Prevent NM from unsetting the hostname #3900
OCPBUGS-20509: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3969
OCPBUGS-19779: daemon: always use podman cp to copy extensions container content #3944
OCPBUGS-19515: The kubeconfig copied on to each node has 644 permissions #3931
OCPBUGS-17862: Agent-based install process the container machine-config-controller will be oom #3875
OCPBUGS-17461: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3844
OCPBUGS-15570: configure-ovs: support UUID in vlan.parent #3768
OCPBUGS-16754: daemon: Don’t traverse /run/ostree/auth.json symlink #3818
OCPBUGS-11303: Fix regex dot in coredns config file #3660
OCPBUGS-13757: The MCD has a non-functional pivot command that should be removed #3710
OCPBUGS-7718: Prevent possible split-brain scenario with keepalived unicast #3562
OCPBUGS-7945: [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573
OCPBUGS-5935: Wrap podman commands in a while loop #3495
OCPBUGS-7167: Avoid ‘too restrictive’ SCC problems by being more explicit #3542
OCPBUGS-10505: daemon: Drop duplicate --authfile used in run #3617
OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
Full changelog

machine-image-customization-controller

OCPBUGS-27090: configurable ironic agent vlan creation #119
OCPBUGS-21543: Uplift x/net to v0.17.0 #106
OCPBUGS-19008: Pass BareMetalHost name to IPA (take 2) #101
OCPBUGS-18687: Watch networkData Secrets for changes #96
Full changelog

multus-admission-controller

OCPBUGS-21330: Update go.mod for CVE-2023-39325 [Release-4.12] #73
Updating ose-multus-admission-controller images to be consistent with ART #61
OCPBUGS-10506: Client golang [backport 4.12] #59
Full changelog

multus-cni

OCPBUGS-21061: Update go.mod for CVE-2023-39325 [Release-4.12] #196
OCPBUGS-22461: fix multiple default gw #200
OCPBUGS-7844: Fix multus to support CNI plugin which does not create interface [backport 4.12] #164
OCPBUGS-10535: Multus sync Mar-20-2023 to OCP 4.12 #149
OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
Full changelog

multus-networkpolicy

OCPBUGS-21420: Update go.mod for CVE-2023-39325 (#36) #36
Full changelog

multus-route-override-cni

Updating ose-multus-route-override-cni images to be consistent with ART #27
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-28801: [release-4.12] Enable whereabouts config #244
OCPBUGS-16008: Cherry pick fix assignment 4.12 #238
OCPBUGS-21499: update golang.org/x/net to v0.17.0 #209
OCPBUGS-5953: Denormalize IP name before checking if pod is alive [Backport 4.12] #178
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #134
OCPBUGS-8673: Dual stack support #131
OCPBUGS-7429: Invalid ipv6 backport 4.12 #109
OCPBUGS-11321: respect requested allocation range when exluding ranges [Backport 4.12] #123
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #93
Full changelog

must-gather

OCPBUGS-24523: [release-4.12] Add csi-proxy logs collection in must-gather for Windows nodes #394
Full changelog

network-interface-bond-cni

OCPBUGS-13836: Ignore missing links during delete command #53
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#92) #92
Update the k8s dependencies to 1.25.15 (#84) #84
Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Remove e2e tests that consistently fail in 4.12 (#74) #74
Full changelog

nutanix-machine-controllers

OCPBUGS-25675: Fix CI by running tests natively by default #62
Full changelog

oauth-apiserver

OCPBUGS-21049: Bump K8s to v1.25 #104
Full changelog

oauth-server

OCPBUGS-13906: don’t log request query and fragment on failed authn request #129
OCPBUGS-12757: bump lib-go for group cache fix, kube 1.24->1.25 #127
Full changelog

oc-mirror

OCPBUGS-385: Capability to override default channel (#749) (#796) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#779) #779
OCPBUGS-21440: fix: CVE-2023-39325 and CVE-2023-44487 (#713) #713
OCPBUGS-14065: Fix destination image reference (#650) #650
OCPBUGS-11908: Fix (#607) (#641) #607
OCPBUGS-14065: fix: Limit the nested repository path while mirroring the images (#642) #642
updates the OWNERS file (#646) #646
OCPBUGS-12261: fix: skips bundles with ‘skips’ field on head bundle (#618) #618
OCPBUGS-863: Add skip pruning flag and logic (#591) #591
Bugfix for destination registry nested paths length (#590) #590
Full changelog

olm-rukpak

: OCPBUGS-27593,OCPBUGS-27678: Update go-git to v5.11.0 #76
OCPBUGS-23449: [release-4.12] Address http2 Vulnerability #64
OCPBUGS-21343: [release-4.12] Bump golang.org/x/net to v0.17.0 #41
UPSTREAM: <carry>: add downstream owners #43
Full changelog

openshift-apiserver

: OCPBUGS-21429: Enable HTTP/2 CVE mitigation #399
OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
Full changelog

openshift-state-metrics

OCPBUGS-20706: bump x/net to v0.17.0 #106
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-21557: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #137
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #130
Full changelog

openstack-machine-api-provider

Bug OCPBUGS-19770: Set controller’s SyncPeriod to 1 hour #86
OCPBUGS-10607: Use TenantID if ProjectID is empty #66
OCPBUGS-10603: machineset_controller: Stop caching clouds credentials #65
Full changelog

openstack-machine-controllers

OCPBUGS-20780: deps: Upgrade golang.org/x/net to v0.17.0 #277
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-27563, OCPBUGS-27568, OCPBUGS-27648, OCPBUGS-27653: bump go-git/v5 to 5.11.0 #688
OCPBUGS-27962: [CARRY] SSC RBAC #671
OCPBUGS-28229: Registry Pod Controller Flag #673
OCPBUGS-24619: Update to latest k8s v0.25.15 API server and enable HTTP/2 DoS mitigations #660
OCPBUGS-22132: [release-4.12] Bump golang.org/x/net to v0.17.0 #590
OCPBUGS-18512, RHIBMCS-168: Copied csv listing backport #559
Introduce DOWNSTREAM_OWNERS file #541
Allow cpb to be statically compiled / exempt from FIPS compliance #512
OCPBUGS-15858: fix dynamic conversion webhook #503
OCPBUGS-15737: Re-enable psa plugin #500
OCPBUGS-7650: Catalog Pod Startup Probe Timeout #450
Updating operator-registry images to be consistent with ART #397
Full changelog

operator-marketplace

OCPBUGS-20955: [release-4.12] bump golang.org/x/net to 0.17.0 #550
OCPBUGS-18503: remove a race condition #533
OCPBUGS-14109: Revert default catsrc diff changes #519
Full changelog

ovirt-csi-driver

OCPBUGS-23162: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
Full changelog

ovirt-csi-driver-operator

OCPBUGS-23266: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #128
OCPBUGS-18417: set TLS cipher suites in Kube RBAC sidecars #121
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-23259: [release-4.12] Update leaderelection config to allow retries #2017
OCPBUGS-28598: CARRY: Updates owners and adds Surya #2034
OCPBUGS-26700: [release-4.12] fixes MTU configuration on gateway router #2015
OCPBUGS-24420: OVNK/GW: Ignore headless services in syncServices #1972
OCPBUGS-23981: Netpol retryFramework cleanup #1977
OCPBUGS-26243: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2006
OCPBUGS-25096: Fragment oversized reply packets in LGW mode #1984
OCPBUGS-22091: Bump OVN to 23.06.1-39.el8fdp #1943
OCPBUGS-18681: Check libovsdbclient.ErrNotFound on wrapped errors #1862
OCPBUGS-20241: fix race condition in hybrid overlay DRIP alloc #1932
OCPBUGS-18353: Update bridge flow cache when the host address changes #1872
OCPBUGS-14708, OCPBUGS-19089, OCPBUGS-19904, OCPBUGS-19906: Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp #1881
OCPBUGS-18054: Emit node events only when retry failure #1837
OCPBUGS-18652: Do not return error if pod IP cannot be retrieved for deletePeerPod and perf improvements #1903
OCPBUGS-19432: Remove stale egressip status entry #1892
OCPBUGS-18586: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1856
OCPBUGS-18058: [release-4.12] Create egress firewall with one db transaction #1835
OCPBUGS-17675: Don’t return error on delete event that doesn’t ave a chance to succeed. #1814
OCPBUGS-17522: [release-4.12] libovsdb: give monitor setup time to process than normal transactions #1808
OCPBUGS-16336: Backport support AllocateLoadBalancerNodePortsFalse #1766
OCPBUGS-15593: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1730
OCPBUGS-15719: [relase-4.12] Fix egressFirewall create error handling #1746
OCPBUGS-13744: Improve syncNodes to remove stale data #1732
OCPBUGS-13885: [release-4.12] Drop packets that were not properly SNATed #1679
OCPBUGS-15388: Fix stale SNAT entries for completed pods #1723
OCPBUGS-15709: [release-4.12] Remove non-existing functions test. #1739
OCPBUGS-15424: [release-4.12] Fix network policy to work with long namespace names #1725
OCPBUGS-14982: Validate port before deleting conntrack flow #1713
OCPBUGS-14041: Fix bug that resulted in routes not be restored to a new vnic #1681
OCPBUGS-13953: [release-4.12] Use loadbalancer.Name as client index #1680
OCPBUGS-13599: Call SyncEndpoints from AddService #1673
OCPBUGS-7439: [release-4.12]: Egress Service: Fix nodeSelector parsing #1529
OCPBUGS-12768: : [release-4.12] Delete equivalent ACLs when searching by predicate. #1661
OCPBUGS-12265: [release-4.12] Network scale metrics #1653
OCPBUGS-8226: fix hybridOverlay DRIP in ICNIv1 pods #1633
OCPBUGS-11701: [release-4.12] CARRY: use “prefer local” for annotated services #1638
OCPBUGS-11109: [release-4.12] Batch potentially big transaction on egress firewall ACLs migration #1617
OCPBUGS-10947: [release-4.12] Egress firewall fix retry #1610
OCPBUGS-10314: [release-4.12] Handle Completed pods deletion #1581
Updating ovn-kubernetes-microshift images to be consistent with ART #1288
OCPBUGS-10632: Check the “Serving” field for endpoints #1569
OCPBUGS-6034: Update egress node assignability on every egress node update #1483
OCPBUGS-7732: Fix leak in service controller cache #1545
OCPBUGS-10490: [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go #1595
OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
Full changelog

powervs-block-csi-driver

OCPBUGS-24733: synk: ignore vendor dir #62
OCPBUGS-21079: CVE-2023-39325 - Update net dependencies - 4.12 #53
Update OWNERS add yussufsh #55
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25717: snyk: ignore vendor dir #62
OCPBUGS-21168: CVE-2023-39325 - Update net dependencies - 4.12 #42
Update OWNERS add yussufsh #46
Full changelog

powervs-cloud-controller-manager

OCPBUGS-24740: UPSTREAM: <carry>: snyk code scan exclude vendor directory #52
OCPBUGS-21260: CVE-2023-39325 - Update net dependencies - 4.12 #47
Full changelog

powervs-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #75
OCPBUGS-24738: snyk code scan exclude vendor directory #63
OCPBUGS-21882: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.12 #57
Full changelog

prometheus

OCPBUGS-21219: update golang.org/x/net to v0.17.0 [4.12] #175
Full changelog

prometheus-alertmanager

OCPBUGS-21031: Bump golang.org/x/net to v0.17.0 #82
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-20843: Bump golang.org/x/net to v0.17.0 #249
Full changelog

prometheus-node-exporter

OCPBUGS-21123: upgrade golang.org/x/net to v0.17.0 #136
Full changelog

route-controller-manager

OCPBUGS-14275: Bump k8s to 1.25.10 #27
Full changelog

service-ca-operator

OCPBUGS-21026: CVE 2023 39325 (4.12) #231
Full changelog

telemeter

OCPBUGS-21310: [release-4.12] fix: Bump golang.org/x/net to v0.17.0 #486
Full changelog

tests

Bug OCPBUGS-20557: Correct condition for rejecting connection #28327
OCPBUGS-18490: bump monitoring SNO bounds #28239
OCPBUGS-18527: Ignore timeout and connection refused errors during upgrade tests for 4.12 #28270
OCPBUGS-18309: Add missing watch permission for console users #28234
OCPBUGS-16696: Wait for DNS DS pods to be ready #28083
OCPBUGS-16243: allow cluster-config-operator to manage featuregate upgrade block #28055
OCPBUGS-15933: remove references to registry.centos.org #28033
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27941
OCPBUGS-14152: Move from registry.centos.org to quay.io #27949
OCPBUGS-12914: Add (optional) dual-stack tests to the CNI certification test suite #27903
Updating openshift-enterprise-tests images to be consistent with ART #27293
add specific test for failing cgroups path #27856
OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-27100: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #137
OCPBUGS-21135: Bump golang.org/x/net to v0.17.0 #126
OCPBUGS-4276: Update exporter-toolkit to 0.7.3 #111
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-21493: Bump golang.org/x/net to v0.18.0 #56
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-21548: bump golang.org/x/net to v0.17.0 #24
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-20417: syncer: fix nil pointer dereference in log message #98
OCPBUGS-21552: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #92
OCPBUGS-14312: Update 4.12 against v2.7.1 #81
Full changelog

vsphere-csi-driver-operator

OCPBUGS-21416: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #175
OCPBUGS-18131: Block upgrade to 4.13 via admin ack #171
OCPBUGS-18333: disable controller hostNetwork #167
OCPBUGS-12712: Add backoff for successful storage policy creations #152
Full changelog

vsphere-problem-detector

OCPBUGS-21574: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
OCPBUGS-10812: Add build number to metrics #104
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Machine OS (`rhel-coreos-8`)

Package List

cri-o-1.25.5-13.1.rhaos4.12.git76343da.el8
kernel-4.18.0-372.98.1.el8_6
openshift-kubelet-
systemd-239-58.el8_6.13

Full list (501 packages)

NetworkManager-1:1.36.0-18.el8_6
NetworkManager-cloud-setup-1:1.36.0-18.el8_6
NetworkManager-libnm-1:1.36.0-18.el8_6
NetworkManager-ovs-1:1.36.0-18.el8_6
NetworkManager-team-1:1.36.0-18.el8_6
NetworkManager-tui-1:1.36.0-18.el8_6
WALinuxAgent-udev-2.3.0.2-2.el8_6.3
acl-2.2.53-1.el8
adcli-0.8.2-12.el8
afterburn-5.3.0-2.rhaos4.12.el8
afterburn-dracut-5.3.0-2.rhaos4.12.el8
attr-2.4.48-3.el8
audit-3.0.7-2.el8.2
audit-libs-3.0.7-2.el8.2
authselect-1.2.2-3.el8
authselect-libs-1.2.2-3.el8
avahi-libs-0.7-20.el8_6.3
basesystem-11-5.el8
bash-4.4.20-4.el8_6
bash-completion-1:2.7-5.el8
bind-libs-32:9.11.36-3.el8_6.5
bind-libs-lite-32:9.11.36-3.el8_6.5
bind-license-32:9.11.36-3.el8_6.5
bind-utils-32:9.11.36-3.el8_6.5
bootupd-0.2.5-3.rhaos4.12.el8
brotli-1.0.6-3.el8
bsdtar-3.3.3-4.el8_6
bubblewrap-0.4.0-1.el8
bzip2-1.0.6-26.el8
bzip2-libs-1.0.6-26.el8
c-ares-1.13.0-6.el8_6.3
ca-certificates-2023.2.60_v7.0.306-80.0.el8_6
checkpolicy-2.9-1.el8
chkconfig-1.19.1-1.el8
chrony-4.1-1.el8
cifs-utils-6.8-3.el8
clevis-15-8.el8
clevis-dracut-15-8.el8
clevis-luks-15-8.el8
clevis-systemd-15-8.el8
cloud-utils-growpart-0.31-3.el8
conmon-2:2.1.2-5.2.rhaos4.12.el8
conmon-rs-0.5.1-4.rhaos4.12.el8
conntrack-tools-1.4.4-10.el8
console-login-helper-messages-0.20.4-1.rhaos4.12.el8
console-login-helper-messages-issuegen-0.20.4-1.rhaos4.12.el8
console-login-helper-messages-profile-0.20.4-1.rhaos4.12.el8
container-selinux-3:2.215.0-1.rhaos4.12.el8
containernetworking-plugins-1:1.4.0-1.1.rhaos4.12.el8
containers-common-2:1-36.rhaos4.12.el8
coreos-installer-0.16.1-1.rhaos4.12.el8
coreos-installer-bootinfra-0.16.1-1.rhaos4.12.el8
coreutils-8.30-12.el8
coreutils-common-8.30-12.el8
cpio-2.12-11.el8
cracklib-2.9.6-15.el8
cracklib-dicts-2.9.6-15.el8
cri-o-1.25.5-13.1.rhaos4.12.git76343da.el8
cri-tools-1.25.0-2.2.el8
criu-3.15-4.rhaos4.11.el8
crun-1.4.2-2.rhaos4.12.el8
crypto-policies-20211116-1.gitae470d6.el8
crypto-policies-scripts-20211116-1.gitae470d6.el8
cryptsetup-2.3.7-2.el8
cryptsetup-libs-2.3.7-2.el8
cups-libs-1:2.2.6-45.el8_6.4
curl-7.61.1-22.el8_6.12
cyrus-sasl-gssapi-2.1.27-6.el8_5
cyrus-sasl-lib-2.1.27-6.el8_5
dbus-1:1.12.8-18.el8_6.3
dbus-common-1:1.12.8-18.el8_6.3
dbus-daemon-1:1.12.8-18.el8_6.3
dbus-libs-1:1.12.8-18.el8_6.3
dbus-tools-1:1.12.8-18.el8_6.3
device-mapper-8:1.02.181-3.el8_6.2
device-mapper-event-8:1.02.181-3.el8_6.2
device-mapper-event-libs-8:1.02.181-3.el8_6.2
device-mapper-libs-8:1.02.181-3.el8_6.2
device-mapper-multipath-0.8.4-22.el8_6.5
device-mapper-multipath-libs-0.8.4-22.el8_6.5
device-mapper-persistent-data-0.9.0-6.el8
diffutils-3.6-6.el8
dnsmasq-2.79-21.el8_6.5
dosfstools-4.1-6.el8
dracut-049-203.git20220511.el8_6
dracut-network-049-203.git20220511.el8_6
dracut-squash-049-203.git20220511.el8_6
e2fsprogs-1.45.6-6.el8_6
e2fsprogs-libs-1.45.6-6.el8_6
efi-filesystem-3-3.el8
efibootmgr-16-1.el8
efivar-libs-37-4.el8
elfutils-debuginfod-client-0.186-1.el8
elfutils-default-yama-scope-0.186-1.el8
elfutils-libelf-0.186-1.el8
elfutils-libs-0.186-1.el8
ethtool-2:5.13-1.el8
expat-2.2.5-8.el8_6.4
file-5.33-20.el8
file-libs-5.33-20.el8
filesystem-3.8-6.el8
findutils-1:4.6.0-20.el8
firewalld-filesystem-0.9.3-13.el8
freetype-2.9.1-5.el8_6.3
fstrm-0.6.1-2.el8
fuse-2.9.7-15.el8
fuse-common-3.3.0-15.el8
fuse-libs-2.9.7-15.el8
fuse-overlayfs-1.9-2.rhaos4.12.el8
fuse3-3.3.0-15.el8
fuse3-libs-3.3.0-15.el8
fwupd-1.7.4-3.el8_6
gawk-4.2.1-4.el8
gdbm-1:1.18-1.el8
gdbm-libs-1:1.18-1.el8
gdisk-1.0.3-9.el8
geolite2-city-20180605-1.el8
geolite2-country-20180605-1.el8
gettext-0.19.8.1-17.el8
gettext-libs-0.19.8.1-17.el8
git-core-2.31.8-2.el8_6
glib2-2.56.4-158.el8_6.1
glibc-2.28-189.8.el8_6
glibc-all-langpacks-2.28-189.8.el8_6
glibc-common-2.28-189.8.el8_6
glibc-gconv-extra-2.28-189.8.el8_6
glusterfs-6.0-56.4.el8
glusterfs-client-xlators-6.0-56.4.el8
glusterfs-fuse-6.0-56.4.el8
glusterfs-libs-6.0-56.4.el8
gmp-1:6.1.2-11.el8_6.1
gnupg2-2.2.20-3.el8_6
gnupg2-smime-2.2.20-3.el8_6
gnutls-3.6.16-5.el8_6.3
gpgme-1.13.1-11.el8
grep-3.1-6.el8
groff-base-1.22.3-18.el8
grub2-common-1:2.02-123.el8_6.16
grub2-efi-x64-1:2.02-123.el8_6.16
grub2-pc-1:2.02-123.el8_6.16
grub2-pc-modules-1:2.02-123.el8_6.16
grub2-tools-1:2.02-123.el8_6.16
grub2-tools-extra-1:2.02-123.el8_6.16
grub2-tools-minimal-1:2.02-123.el8_6.16
gssproxy-0.8.0-20.el8
gzip-1.9-13.el8_5
hardlink-1:1.3-6.el8
hostname-3.20-6.el8
hwdata-0.314-8.12.1.el8_6
ignition-2.14.0-7.1.rhaos4.12.el8
info-6.5-7.el8
initscripts-10.00.17-1.el8_6.2
iproute-5.15.0-4.el8_6.1
iproute-tc-5.15.0-4.el8_6.1
iptables-1.8.4-22.el8_6.3
iptables-libs-1.8.4-22.el8_6.3
iputils-20180629-9.el8
irqbalance-2:1.4.0-6.el8
iscsi-initiator-utils-6.2.1.4-4.git095f59c.el8
iscsi-initiator-utils-iscsiuio-6.2.1.4-4.git095f59c.el8
isns-utils-libs-0.99-1.el8
jansson-2.14-1.el8
jose-10-2.el8
jq-1.6-3.el8
json-c-0.13.1-3.el8
json-glib-1.4.4-1.el8
kbd-2.0.4-10.el8
kbd-legacy-2.0.4-10.el8
kbd-misc-2.0.4-10.el8
kernel-4.18.0-372.98.1.el8_6
kernel-core-4.18.0-372.98.1.el8_6
kernel-modules-4.18.0-372.98.1.el8_6
kernel-modules-extra-4.18.0-372.98.1.el8_6
kexec-tools-2.0.20-69.el8_6.2
keyutils-1.5.10-9.el8
keyutils-libs-1.5.10-9.el8
kmod-25-19.el8
kmod-libs-25-19.el8
kpartx-0.8.4-22.el8_6.5
krb5-libs-1.18.2-16.el8_6
less-530-1.el8
libacl-2.2.53-1.el8
libaio-0.3.112-1.el8
libarchive-3.3.3-4.el8_6
libassuan-2.5.1-3.el8
libattr-2.4.48-3.el8
libbasicobjects-0.1.1-39.el8
libblkid-2.32.1-36.el8_6
libbpf-0.4.0-3.el8
libcap-2.48-4.el8_6
libcap-ng-0.7.11-1.el8
libcollection-0.7.0-39.el8
libcom_err-1.45.6-6.el8_6
libcroco-0.6.12-4.el8_2.1
libcurl-7.61.1-22.el8_6.12
libdaemon-0.14-15.el8
libdb-5.3.28-42.el8_4
libdb-utils-5.3.28-42.el8_4
libdhash-0.5.0-39.el8
libdrm-2.4.108-1.el8
libedit-3.1-23.20170329cvs.el8
libevent-2.1.8-5.el8
libfdisk-2.32.1-36.el8_6
libffi-3.1-23.el8
libgcab1-1.1-1.el8
libgcc-8.5.0-10.3.el8_6
libgcrypt-1.8.5-7.el8_6
libgomp-8.5.0-10.3.el8_6
libgpg-error-1.31-1.el8
libgudev-232-4.el8
libgusb-0.3.0-1.el8
libibverbs-37.2-1.el8_6.1
libicu-60.3-2.el8_1
libidn2-2.2.0-1.el8
libini_config-1.3.1-39.el8
libipa_hbac-2.6.2-4.el8_6.2
libjose-10-2.el8
libkcapi-1.2.0-2.el8
libkcapi-hmaccalc-1.2.0-2.el8
libksba-1.3.5-9.el8_6
libldb-2.4.1-1.el8
libluksmeta-9-4.el8
libmaxminddb-1.2.0-10.el8_6.1
libmicrohttpd-1:0.9.59-2.el8_6.1
libmnl-1.0.4-6.el8
libmodulemd-2.13.0-1.el8
libmount-2.32.1-36.el8_6
libmspack-0.7-0.3.alpha.el8.4
libndp-1.7-6.el8
libnet-1.1.6-15.el8
libnetfilter_conntrack-1.0.6-5.el8
libnetfilter_cthelper-1.0.0-15.el8
libnetfilter_cttimeout-1.0.0-11.el8
libnetfilter_queue-1.0.4-3.el8
libnfnetlink-1.0.1-13.el8
libnfsidmap-1:2.3.3-51.el8_6.1
libnftnl-1.1.5-5.el8
libnghttp2-1.33.0-4.el8_6.1
libnl3-3.5.0-1.el8
libnl3-cli-3.5.0-1.el8
libnsl2-1.2.0-2.20180605git4a062cf.el8
libpath_utils-0.2.1-39.el8
libpcap-14:1.9.1-5.el8
libpciaccess-0.14-1.el8
libpkgconf-1.4.2-1.el8
libpng-2:1.6.34-5.el8
libpsl-0.20.2-6.el8
libpwquality-1.4.4-3.el8
libref_array-0.1.5-39.el8
librepo-1.14.2-1.el8
libreport-filesystem-2.9.5-15.el8
librhsm-0.0.3-4.el8
libseccomp-2.5.2-1.el8
libsecret-0.18.6-1.el8
libselinux-2.9-5.el8
libselinux-utils-2.9-5.el8
libsemanage-2.9-8.el8
libsepol-2.9-3.el8
libsigsegv-2.11-5.el8
libslirp-4.4.0-4.rhaos4.12.el8
libsmartcols-2.32.1-36.el8_6
libsmbclient-4.15.5-15.el8_6
libsmbios-2.4.1-2.el8
libsolv-0.7.20-1.el8
libss-1.45.6-6.el8_6
libssh-0.9.6-4.el8_6
libssh-config-0.9.6-4.el8_6
libsss_autofs-2.6.2-4.el8_6.2
libsss_certmap-2.6.2-4.el8_6.2
libsss_idmap-2.6.2-4.el8_6.2
libsss_nss_idmap-2.6.2-4.el8_6.2
libsss_sudo-2.6.2-4.el8_6.2
libstdc++-8.5.0-10.3.el8_6
libtalloc-2.3.3-1.el8
libtasn1-4.13-3.el8_6.1
libtdb-1.4.4-1.el8
libteam-1.31-2.el8
libtevent-0.11.0-0.el8
libtirpc-1.1.4-6.el8_6.1
libtool-ltdl-2.4.6-25.el8
libunistring-0.9.9-3.el8
libusbx-1.0.23-4.el8
libuser-0.62-24.el8
libutempter-1.1.6-14.el8
libuuid-2.32.1-36.el8_6
libverto-0.3.0-5.el8
libverto-libevent-0.3.0-5.el8
libwbclient-4.15.5-15.el8_6
libxcrypt-4.1.1-6.el8
libxkbcommon-0.9.1-1.el8
libxml2-2.9.7-13.el8_6.4
libxmlb-0.1.15-1.el8
libxslt-1.1.32-6.el8
libyaml-0.1.7-5.el8
libzstd-1.4.4-1.el8
linux-firmware-20220210-114.git6342082c.el8_6
lmdb-libs-0.9.24-1.el8
logrotate-3.14.0-4.el8
lua-libs-5.3.4-12.el8
luksmeta-9-4.el8
lvm2-8:2.03.14-3.el8_6.2
lvm2-libs-8:2.03.14-3.el8_6.2
lz4-libs-1.8.3-3.el8_4
lzo-2.08-14.el8
mdadm-4.2-2.el8
memstrack-0.1.11-1.el8
microcode_ctl-4:20220207-1.20231009.1.el8_6
mokutil-1:0.3.0-11.el8_6.1
mozjs60-60.9.0-4.el8
mpfr-3.1.6-1.el8
nano-2.9.8-1.el8
ncurses-6.1-9.20180224.el8_6.1
ncurses-base-6.1-9.20180224.el8_6.1
ncurses-libs-6.1-9.20180224.el8_6.1
net-tools-2.0-0.52.20160912git.el8
nettle-3.4.1-7.el8
newt-0.52.20-11.el8
nfs-utils-1:2.3.3-51.el8_6.1
nftables-1:0.9.3-25.el8
nmap-ncat-2:7.70-6.el8
npth-1.5-4.el8
nss-altfiles-2.18.1-12.el8
numactl-libs-2.0.12-13.el8
nvme-cli-1.16-3.el8
oniguruma-6.8.2-2.1.el8_6
open-vm-tools-11.3.5-1.el8_6.5
openldap-2.4.46-18.el8
openshift-clients-4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8
openshift-hyperkube-4.12.0-202403251017.p0.g9946c63.assembly.stream.el8
openssh-8.0p1-15.el8_6.3
openssh-clients-8.0p1-15.el8_6.3
openssh-server-8.0p1-15.el8_6.3
openssl-1:1.1.1k-12.el8_6
openssl-libs-1:1.1.1k-12.el8_6
openssl-pkcs11-0.4.10-2.el8
openvswitch-selinux-extra-policy-1.0-31.el8fdp
openvswitch3.1-3.1.0-96.el8fdp
os-prober-1.74-9.el8
ostree-2022.2-8.el8
ostree-grub2-2022.2-8.el8
ostree-libs-2022.2-8.el8
p11-kit-0.23.22-1.el8
p11-kit-trust-0.23.22-1.el8
pam-1.3.1-16.el8_6.1
passwd-0.80-4.el8
pciutils-3.7.0-1.el8
pciutils-libs-3.7.0-1.el8
pcre-8.42-6.el8
pcre2-10.32-3.el8_6
perl-Carp-1.42-396.el8
perl-Data-Dumper-2.167-399.el8
perl-Digest-1.17-395.el8
perl-Digest-MD5-2.55-396.el8
perl-Encode-4:2.97-3.el8
perl-Errno-1.28-421.el8
perl-Exporter-5.72-396.el8
perl-File-Path-2.15-2.el8
perl-File-Temp-0.230.600-1.el8
perl-Getopt-Long-1:2.50-4.el8
perl-HTTP-Tiny-0.074-1.el8_6.1
perl-IO-1.38-421.el8
perl-IO-Socket-IP-0.39-5.el8
perl-IO-Socket-SSL-2.066-4.el8
perl-MIME-Base64-3.15-396.el8
perl-Mozilla-CA-20160104-7.el8
perl-Net-SSLeay-1.88-1.el8
perl-PathTools-3.74-1.el8
perl-Pod-Escapes-1:1.07-395.el8
perl-Pod-Perldoc-3.28-396.el8
perl-Pod-Simple-1:3.35-395.el8
perl-Pod-Usage-4:1.69-395.el8
perl-Scalar-List-Utils-3:1.49-2.el8
perl-Socket-4:2.027-3.el8
perl-Storable-1:3.11-3.el8
perl-Term-ANSIColor-4.06-396.el8
perl-Term-Cap-1.17-395.el8
perl-Text-ParseWords-3.30-395.el8
perl-Text-Tabs+Wrap-2013.0523-395.el8
perl-Time-Local-1:1.280-1.el8
perl-URI-1.73-3.el8
perl-Unicode-Normalize-1.25-396.el8
perl-constant-1.33-396.el8
perl-interpreter-4:5.26.3-421.el8
perl-libnet-3.11-3.el8
perl-libs-4:5.26.3-421.el8
perl-macros-4:5.26.3-421.el8
perl-parent-1:0.237-1.el8
perl-podlators-4.11-1.el8
perl-threads-1:2.21-2.el8
perl-threads-shared-1.58-2.el8
pigz-2.4-4.el8
pinentry-1.1.0-2.el8
pkgconf-1.4.2-1.el8
pkgconf-m4-1.4.2-1.el8
pkgconf-pkg-config-1.4.2-1.el8
platform-python-3.6.8-47.el8_6.5
platform-python-pip-9.0.3-22.3.el8_6
platform-python-setuptools-39.2.0-7.el8_6
podman-3:4.4.1-2.1.rhaos4.12.el8
podman-catatonit-3:4.4.1-2.1.rhaos4.12.el8
policycoreutils-2.9-19.el8
policycoreutils-python-utils-2.9-19.el8
polkit-0.115-14.el8_6.1
polkit-libs-0.115-14.el8_6.1
polkit-pkla-compat-0.1-12.el8
popt-1.18-1.el8
procps-ng-3.3.15-6.el8
protobuf-c-1.3.0-8.el8_6
psmisc-23.1-5.el8
publicsuffix-list-dafsa-20180723-1.el8
python3-audit-3.0.7-2.el8.2
python3-bind-32:9.11.36-3.el8_6.5
python3-libs-3.6.8-47.el8_6.5
python3-libselinux-2.9-5.el8
python3-libsemanage-2.9-8.el8
python3-pip-wheel-9.0.3-22.3.el8_6
python3-ply-3.9-9.el8
python3-policycoreutils-2.9-19.el8
python3-pyyaml-3.12-12.el8
python3-setools-4.3.0-3.el8
python3-setuptools-wheel-39.2.0-7.el8_6
python3-sssdconfig-2.6.2-4.el8_6.2
qemu-guest-agent-15:6.2.0-11.module+el8.6.0+21121+f1d2ec3c.12
quota-1:4.04-14.el8
quota-nls-1:4.04-14.el8
rdma-core-37.2-1.el8_6.1
readline-7.0-10.el8
redhat-release-8.6-0.2.el8
redhat-release-eula-8.6-0.2.el8
rpcbind-1.2.5-8.el8
rpm-4.14.3-26.el8_6
rpm-libs-4.14.3-26.el8_6
rpm-ostree-2022.10.117.g52714b51-1.el8
rpm-ostree-libs-2022.10.117.g52714b51-1.el8
rpm-plugin-selinux-4.14.3-26.el8_6
rsync-3.1.3-14.el8_6.5
runc-3:1.1.6-5.2.rhaos4.12.el8
samba-client-libs-4.15.5-15.el8_6
samba-common-4.15.5-15.el8_6
samba-common-libs-4.15.5-15.el8_6
sed-4.5-5.el8
selinux-policy-3.14.3-95.el8_6.11
selinux-policy-targeted-3.14.3-95.el8_6.11
setup-2.12.2-6.el8
sg3_utils-1.44-5.el8
sg3_utils-libs-1.44-5.el8
shadow-utils-2:4.6-17.el8_6
shadow-utils-subid-2:4.6-17.el8_6
shared-mime-info-1.9-3.el8
shim-x64-15.6-1.el8
skopeo-2:1.9.4-3.2.rhaos4.12.el8
slang-2.3.2-3.el8
slirp4netns-1.1.8-2.rhaos4.12.el8
snappy-1.1.8-3.el8
socat-1.7.4.1-1.el8
sqlite-libs-3.26.0-16.el8_6.2
squashfs-tools-4.3-20.el8
sssd-2.6.2-4.el8_6.2
sssd-ad-2.6.2-4.el8_6.2
sssd-client-2.6.2-4.el8_6.2
sssd-common-2.6.2-4.el8_6.2
sssd-common-pac-2.6.2-4.el8_6.2
sssd-ipa-2.6.2-4.el8_6.2
sssd-krb5-2.6.2-4.el8_6.2
sssd-krb5-common-2.6.2-4.el8_6.2
sssd-ldap-2.6.2-4.el8_6.2
sssd-nfs-idmap-2.6.2-4.el8_6.2
sssd-proxy-2.6.2-4.el8_6.2
stalld-1.17.1-1.el8_6
strace-5.13-4.el8
subscription-manager-rhsm-certificates-1.28.29.1-2.el8_6
sudo-1.9.5p2-1.el8_6
systemd-239-58.el8_6.13
systemd-journal-remote-239-58.el8_6.13
systemd-libs-239-58.el8_6.13
systemd-pam-239-58.el8_6.13
systemd-udev-239-58.el8_6.13
tar-2:1.30-5.el8_6.1
teamd-1.31-2.el8
timedatex-0.5-3.el8
tmux-2.7-1.el8
toolbox-0.1.1-3.rhaos4.12.el8
tpm2-tools-4.1.1-5.el8
tpm2-tss-2.3.2-4.el8
trousers-0.3.15-1.el8
trousers-lib-0.3.15-1.el8
tzdata-2024a-1.el8
unbound-libs-1.7.3-17.el8_6.1
userspace-rcu-0.10.1-4.el8
util-linux-2.32.1-36.el8_6
vim-minimal-2:8.0.1763-19.el8_6.4
which-2.21-17.el8
xfsprogs-5.0.0-11.el8_6
xkeyboard-config-2.28-1.el8
xmlsec1-1.2.25-4.el8
xmlsec1-openssl-1.2.25-4.el8
xz-5.2.4-4.el8_6
xz-libs-5.2.4-4.el8_6
yajl-2.1.0-10.el8
zlib-1.2.11-19.el8_6
zstd-1.4.4-1.el8

Changed:

NetworkManager 1:1.36.0-12.el8_6 → 1:1.36.0-18.el8_6
NetworkManager-cloud-setup 1:1.36.0-12.el8_6 → 1:1.36.0-18.el8_6
NetworkManager-libnm 1:1.36.0-12.el8_6 → 1:1.36.0-18.el8_6
NetworkManager-ovs 1:1.36.0-12.el8_6 → 1:1.36.0-18.el8_6
NetworkManager-team 1:1.36.0-12.el8_6 → 1:1.36.0-18.el8_6
NetworkManager-tui 1:1.36.0-12.el8_6 → 1:1.36.0-18.el8_6
avahi-libs 0.7-20.el8 → 0.7-20.el8_6.3
bind-libs 32:9.11.36-3.el8_6.1 → 32:9.11.36-3.el8_6.5
bind-libs-lite 32:9.11.36-3.el8_6.1 → 32:9.11.36-3.el8_6.5
bind-license 32:9.11.36-3.el8_6.1 → 32:9.11.36-3.el8_6.5
bind-utils 32:9.11.36-3.el8_6.1 → 32:9.11.36-3.el8_6.5
bsdtar 3.3.3-3.el8_5 → 3.3.3-4.el8_6
c-ares 1.13.0-6.el8 → 1.13.0-6.el8_6.3
ca-certificates 2022.2.54-80.2.el8_6 → 2023.2.60_v7.0.306-80.0.el8_6
conmon 2:2.1.2-3.rhaos4.12.el8 → 2:2.1.2-5.2.rhaos4.12.el8
conmon-rs 0.4.0-2.rhaos4.12.git.el8 → 0.5.1-4.rhaos4.12.el8
container-selinux 2:2.188.0-2.rhaos4.12.el8 → 3:2.215.0-1.rhaos4.12.el8
containernetworking-plugins 1.0.1-6.rhaos4.12.el8 → 1:1.4.0-1.1.rhaos4.12.el8
containers-common 2:1-33.rhaos4.12.el8 → 2:1-36.rhaos4.12.el8
cri-o 1.25.2-10.rhaos4.12.git0a083f9.el8 → 1.25.5-13.1.rhaos4.12.git76343da.el8
cri-tools 1.25.0-2.el8 → 1.25.0-2.2.el8
cups-libs 1:2.2.6-45.el8_6.2 → 1:2.2.6-45.el8_6.4
curl 7.61.1-22.el8_6.4 → 7.61.1-22.el8_6.12
dbus 1:1.12.8-18.el8_6.2 → 1:1.12.8-18.el8_6.3
dbus-common 1:1.12.8-18.el8_6.2 → 1:1.12.8-18.el8_6.3
dbus-daemon 1:1.12.8-18.el8_6.2 → 1:1.12.8-18.el8_6.3
dbus-libs 1:1.12.8-18.el8_6.2 → 1:1.12.8-18.el8_6.3
dbus-tools 1:1.12.8-18.el8_6.2 → 1:1.12.8-18.el8_6.3
device-mapper-multipath 0.8.4-22.el8_6.2 → 0.8.4-22.el8_6.5
device-mapper-multipath-libs 0.8.4-22.el8_6.2 → 0.8.4-22.el8_6.5
dnsmasq 2.79-21.el8_6.1 → 2.79-21.el8_6.5
e2fsprogs 1.45.6-4.el8 → 1.45.6-6.el8_6
e2fsprogs-libs 1.45.6-4.el8 → 1.45.6-6.el8_6
expat 2.2.5-8.el8_6.3 → 2.2.5-8.el8_6.4
freetype 2.9.1-4.el8_3.1 → 2.9.1-5.el8_6.3
fwupd 1.7.4-2.el8 → 1.7.4-3.el8_6
git-core 2.31.1-3.el8_6 → 2.31.8-2.el8_6
glibc 2.28-189.5.el8_6 → 2.28-189.8.el8_6
glibc-all-langpacks 2.28-189.5.el8_6 → 2.28-189.8.el8_6
glibc-common 2.28-189.5.el8_6 → 2.28-189.8.el8_6
glibc-gconv-extra 2.28-189.5.el8_6 → 2.28-189.8.el8_6
gmp 1:6.1.2-10.el8 → 1:6.1.2-11.el8_6.1
gnutls 3.6.16-5.el8_6 → 3.6.16-5.el8_6.3
grub2-common 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
grub2-efi-x64 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
grub2-pc 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
grub2-pc-modules 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
grub2-tools 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
grub2-tools-extra 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
grub2-tools-minimal 1:2.02-123.el8_6.14 → 1:2.02-123.el8_6.16
hwdata 0.314-8.12.el8 → 0.314-8.12.1.el8_6
ignition 2.14.0-6.rhaos4.12.el8 → 2.14.0-7.1.rhaos4.12.el8
kernel 4.18.0-372.46.1.el8_6 → 4.18.0-372.98.1.el8_6
kernel-core 4.18.0-372.46.1.el8_6 → 4.18.0-372.98.1.el8_6
kernel-modules 4.18.0-372.46.1.el8_6 → 4.18.0-372.98.1.el8_6
kernel-modules-extra 4.18.0-372.46.1.el8_6 → 4.18.0-372.98.1.el8_6
kexec-tools 2.0.20-69.el8_6 → 2.0.20-69.el8_6.2
kpartx 0.8.4-22.el8_6.2 → 0.8.4-22.el8_6.5
krb5-libs 1.18.2-15.el8_6 → 1.18.2-16.el8_6
libarchive 3.3.3-3.el8_5 → 3.3.3-4.el8_6
libcap 2.48-2.el8 → 2.48-4.el8_6
libcom_err 1.45.6-4.el8 → 1.45.6-6.el8_6
libcurl 7.61.1-22.el8_6.4 → 7.61.1-22.el8_6.12
libgcc 8.5.0-10.1.el8_6 → 8.5.0-10.3.el8_6
libgomp 8.5.0-10.1.el8_6 → 8.5.0-10.3.el8_6
libibverbs 37.2-1.el8 → 37.2-1.el8_6.1
libipa_hbac 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
libmaxminddb 1.2.0-10.el8 → 1.2.0-10.el8_6.1
libmicrohttpd 1:0.9.59-2.el8 → 1:0.9.59-2.el8_6.1
libnfsidmap 1:2.3.3-51.el8 → 1:2.3.3-51.el8_6.1
libnghttp2 1.33.0-3.el8_2.1 → 1.33.0-4.el8_6.1
libslirp 4.4.0-2.rhaos4.11.el8 → 4.4.0-4.rhaos4.12.el8
libsmbclient 4.15.5-10.el8_6 → 4.15.5-15.el8_6
libss 1.45.6-4.el8 → 1.45.6-6.el8_6
libssh 0.9.6-3.el8 → 0.9.6-4.el8_6
libssh-config 0.9.6-3.el8 → 0.9.6-4.el8_6
libsss_autofs 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
libsss_certmap 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
libsss_idmap 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
libsss_nss_idmap 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
libsss_sudo 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
libstdc++ 8.5.0-10.1.el8_6 → 8.5.0-10.3.el8_6
libtasn1 4.13-3.el8 → 4.13-3.el8_6.1
libwbclient 4.15.5-10.el8_6 → 4.15.5-15.el8_6
libxml2 2.9.7-13.el8_6.1 → 2.9.7-13.el8_6.4
linux-firmware 20220210-108.git6342082c.el8_6 → 20220210-114.git6342082c.el8_6
microcode_ctl 4:20220207-1.20220809.1.el8_6 → 4:20220207-1.20231009.1.el8_6
ncurses 6.1-9.20180224.el8 → 6.1-9.20180224.el8_6.1
ncurses-base 6.1-9.20180224.el8 → 6.1-9.20180224.el8_6.1
ncurses-libs 6.1-9.20180224.el8 → 6.1-9.20180224.el8_6.1
nfs-utils 1:2.3.3-51.el8 → 1:2.3.3-51.el8_6.1
oniguruma 6.8.2-2.el8 → 6.8.2-2.1.el8_6
open-vm-tools 11.3.5-1.el8_6.1 → 11.3.5-1.el8_6.5
openshift-clients 4.12.0-202303010941.p0.g846602e.assembly.stream.el8 → 4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8
openshift-hyperkube 4.12.0-202302211516.p0.g18eadca.assembly.stream.el8 → 4.12.0-202403251017.p0.g9946c63.assembly.stream.el8
openssh 8.0p1-13.el8 → 8.0p1-15.el8_6.3
openssh-clients 8.0p1-13.el8 → 8.0p1-15.el8_6.3
openssh-server 8.0p1-13.el8 → 8.0p1-15.el8_6.3
openssl 1:1.1.1k-7.el8_6 → 1:1.1.1k-12.el8_6
openssl-libs 1:1.1.1k-7.el8_6 → 1:1.1.1k-12.el8_6
openvswitch-selinux-extra-policy 1.0-29.el8fdp → 1.0-31.el8fdp
ostree 2022.2-5.el8 → 2022.2-8.el8
ostree-grub2 2022.2-5.el8 → 2022.2-8.el8
ostree-libs 2022.2-5.el8 → 2022.2-8.el8
perl-HTTP-Tiny 0.074-1.el8 → 0.074-1.el8_6.1
platform-python 3.6.8-47.el8_6 → 3.6.8-47.el8_6.5
platform-python-pip 9.0.3-22.el8 → 9.0.3-22.3.el8_6
platform-python-setuptools 39.2.0-6.el8 → 39.2.0-7.el8_6
podman 2:4.2.0-1.rhaos4.12.el8 → 3:4.4.1-2.1.rhaos4.12.el8
podman-catatonit 2:4.2.0-1.rhaos4.12.el8 → 3:4.4.1-2.1.rhaos4.12.el8
polkit 0.115-13.el8_5.2 → 0.115-14.el8_6.1
polkit-libs 0.115-13.el8_5.2 → 0.115-14.el8_6.1
protobuf-c 1.3.0-6.el8 → 1.3.0-8.el8_6
python3-bind 32:9.11.36-3.el8_6.1 → 32:9.11.36-3.el8_6.5
python3-libs 3.6.8-47.el8_6 → 3.6.8-47.el8_6.5
python3-pip-wheel 9.0.3-22.el8 → 9.0.3-22.3.el8_6
python3-setuptools-wheel 39.2.0-6.el8 → 39.2.0-7.el8_6
python3-sssdconfig 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
qemu-guest-agent 15:6.2.0-11.module+el8.6.0+17576+33ee06a8.7 → 15:6.2.0-11.module+el8.6.0+21121+f1d2ec3c.12
rdma-core 37.2-1.el8 → 37.2-1.el8_6.1
redhat-release 8.6-0.1.el8 → 8.6-0.2.el8
redhat-release-eula 8.6-0.1.el8 → 8.6-0.2.el8
rpm 4.14.3-24.el8_6 → 4.14.3-26.el8_6
rpm-libs 4.14.3-24.el8_6 → 4.14.3-26.el8_6
rpm-ostree 2022.10.112.g3d0ac35b-3.el8 → 2022.10.117.g52714b51-1.el8
rpm-ostree-libs 2022.10.112.g3d0ac35b-3.el8 → 2022.10.117.g52714b51-1.el8
rpm-plugin-selinux 4.14.3-24.el8_6 → 4.14.3-26.el8_6
rsync 3.1.3-14.el8_6.4 → 3.1.3-14.el8_6.5
runc 3:1.1.4-2.rhaos4.12.el8 → 3:1.1.6-5.2.rhaos4.12.el8
samba-client-libs 4.15.5-10.el8_6 → 4.15.5-15.el8_6
samba-common 4.15.5-10.el8_6 → 4.15.5-15.el8_6
samba-common-libs 4.15.5-10.el8_6 → 4.15.5-15.el8_6
selinux-policy 3.14.3-95.el8_6.5 → 3.14.3-95.el8_6.11
selinux-policy-targeted 3.14.3-95.el8_6.5 → 3.14.3-95.el8_6.11
shadow-utils 2:4.6-16.el8 → 2:4.6-17.el8_6
shadow-utils-subid 2:4.6-16.el8 → 2:4.6-17.el8_6
skopeo 2:1.9.4-2.rhaos4.12.el8 → 2:1.9.4-3.2.rhaos4.12.el8
sqlite-libs 3.26.0-16.el8_6 → 3.26.0-16.el8_6.2
sssd 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-ad 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-client 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-common 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-common-pac 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-ipa 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-krb5 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-krb5-common 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-ldap 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-nfs-idmap 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
sssd-proxy 2.6.2-4.el8_6.1 → 2.6.2-4.el8_6.2
subscription-manager-rhsm-certificates 1.28.29-3.el8 → 1.28.29.1-2.el8_6
sudo 1.8.29-8.el8_6.1 → 1.9.5p2-1.el8_6
systemd 239-58.el8_6.9 → 239-58.el8_6.13
systemd-journal-remote 239-58.el8_6.9 → 239-58.el8_6.13
systemd-libs 239-58.el8_6.9 → 239-58.el8_6.13
systemd-pam 239-58.el8_6.9 → 239-58.el8_6.13
systemd-udev 239-58.el8_6.9 → 239-58.el8_6.13
tar 2:1.30-5.el8 → 2:1.30-5.el8_6.1
tzdata 2022g-1.el8 → 2024a-1.el8
unbound-libs 1.7.3-17.el8 → 1.7.3-17.el8_6.1
xfsprogs 5.0.0-10.el8 → 5.0.0-11.el8_6

Removed:

compat-openssl10 1:1.0.2o-4.el8_6
make 1:4.2.1-11.el8
openvswitch2.17 2.17.0-71.el8fdp

Added:

openvswitch3.1 3.1.0-96.el8fdp

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 412.86.202403280709-0 (diff)

View changelog in Markdown or change previous release:

Source code for this page located on github