Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.69-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Untested upgrades:
4.11.11 ,
4.11.12 ,
4.11.13 ,
4.11.14 ,
4.11.16 ,
4.11.17 ,
4.11.18 ,
4.11.19 ,
4.11.20 ,
4.11.21 ,
4.11.22 ,
4.11.23 ,
4.11.24 ,
4.11.25 ,
4.11.26 ,
4.11.27 ,
4.11.28 ,
4.11.29 ,
4.11.30 ,
4.11.31 ,
4.11.32 ,
4.11.33 ,
4.11.34 ,
4.11.35 ,
4.11.36 ,
4.11.37 ,
4.11.38 ,
4.11.39 ,
4.11.40 ,
4.11.41 ,
4.11.42 ,
4.11.43 ,
4.11.44 ,
4.11.45 ,
4.11.46 ,
4.11.47 ,
4.11.48 ,
4.11.49 ,
4.11.50 ,
4.11.51 ,
4.11.52 ,
4.11.53 ,
4.11.54 ,
4.11.55 ,
4.11.56 ,
4.11.57 ,
4.11.58 ,
4.12.1 ,
4.12.10 ,
4.12.11 ,
4.12.12 ,
4.12.13 ,
4.12.14 ,
4.12.15 ,
4.12.16 ,
4.12.17 ,
4.12.18 ,
4.12.19 ,
4.12.2 ,
4.12.20 ,
4.12.21 ,
4.12.22 ,
4.12.23 ,
4.12.24 ,
4.12.25 ,
4.12.26 ,
4.12.27 ,
4.12.28 ,
4.12.29 ,
4.12.3 ,
4.12.30 ,
4.12.31 ,
4.12.32 ,
4.12.33 ,
4.12.34 ,
4.12.35 ,
4.12.36 ,
4.12.37 ,
4.12.38 ,
4.12.39 ,
4.12.4 ,
4.12.40 ,
4.12.41 ,
4.12.42 ,
4.12.43 ,
4.12.44 ,
4.12.45 ,
4.12.46 ,
4.12.47 ,
4.12.48 ,
4.12.49 ,
4.12.5 ,
4.12.50 ,
4.12.51 ,
4.12.53 ,
4.12.54 ,
4.12.55 ,
4.12.56 ,
4.12.57 ,
4.12.58 ,
4.12.59 ,
4.12.6 ,
4.12.60 ,
4.12.61 ,
4.12.63 ,
4.12.64 ,
4.12.65 ,
4.12.66 ,
4.12.67 ,
4.12.68 ,
4.12.7 ,
4.12.8 ,
4.12.9 Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.12.0
Created: 2024-11-07 15:41:53 +0000 UTC
Image Digest: sha256:fb83e9b3a600fc810f8b78544a3622bb6d1f5c8de007e64f5bda581626cfb31e
Release 4.12.69 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2024-11-06-192309
Components
Rebuilt images without code change
MGMT-17596 : Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) #6214 MGMT-17590 : Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) #6207 MGMT-17541 : Replace broken golangci reference (#6195) #6195 NO-ISSUE: replace postgres images as current one disappeared from quay (#6132) #6132
MGMT-15150 : Use same installer binary for all platform types (#5347) #5347 OCPBUGS-13356 : Fix ‘vendor’ root device hint evaluation (#5206) #5206 OCPBUGS-13529 : Support by-path root device hints (#5214) #5214 MGMT-13192 : dualstack SNO cluster fails to complete - getting error In dual stack installation we should set dhcp,dhcp6 kargs in order to wait for ipv6 address when node comes after reboot (#4914) #4914 Full changelog
irqbalance: set banned cpus list to 0 (#1006) #1006
Refactor IRQ load balancing enable/disable test (#1038) #1038
Scheduler plugin: ignore IRQs (#1034) #1034
Disable HTTP/2 for webhook and metrics servers (#849) #849
Remove obsolete protocols and weak ciphers (#847) #847
OCPBUGS-21837 : nto: pao avoid timeout when there are too many CSV (#838) #838 Tighten the rules for modifying Tuned Profiles (#790) #790
OCPBUGS-19459 : check for object being nil (#821) #821 OCPBUGS-18868 : [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) #788 Release leader election on manager exit (#789) #789
Fix a race in e2e test rollback.go code (#742) #742
pao: e2e: Make script executable (#734) #734
pao e2e: Split gcp-pao lane (#728) #728
Do not rollback settings on TuneD exit (#711) #711
OCPBUGS-15800 : e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710 Revert “Remove optimization to allow full resync (#569)” (#688) #569
update owners 20230109 (#549) #549
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667
OCPBUGS-14472 : Fix updating numa core siblings map in GetCpuSiblings function (#675) #675 Remove trailing spaces from test names (#572) #572
Remove optimization to allow full resync (#569) #569
e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) #539
e2e: add missing test id (#630) #630
Remove subPaths, they are broken (#627) #627
Remove the preStop hook for openshift-tuned (#621) #621
E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
E2E: Network stack Pinning tests (#533) #533
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543
pao: latency-tests: read test log directly from pod (#547) #547
Add authentication to the /metrics endpoint (#553) #553
Update NTO images to be consistent with ART (#557) #557
OCPBUGS-5021 : [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) #530 Remove trailing space from test name (#546) #546
Full changelog
OCPBUGS-41516 : set Konnectivity cipher suites #4283 MULTIARCH-3709 : PowerVS - Add reuse resource flags to e2e test #2994 MULTIARCH-3732 : PowerVS - Fix cluster deletion when existing resources passed #2993 MULTIARCH-3733 : Add dev flags in destroy cluster powervs command #2998 Updated secret permissions for openshift-route-controller-manager #2924
fix(hcco): Add HCP label to HCCO by default #2972
fix(ignition): Add HCP label to ignition-server by default #2949
OCPBUGS-16847 : use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855 [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803
OCPBUGS-16411 : fix deletion bug when hostedzone is already deleted #2835 Kas policy 4.12 #2826
Leader election config update. #2800
OCPBUGS-15614 : Check OwningIngressController also in Labels #2759 OCPBUGS-16086 : autoscaling balance similar groups #2806 HOSTEDCP-1060 : refactor ignition-server reconcilation and add ignition-server proxy #2749 OCPBUGS-14873 : Update vendored openshift API for 4.12 #2734 HOSTEDCP-1073 : enforce blocked rollout of HCP #2745 properly handle user CA bundle not existing #2711
OCPBUGS-15304 : [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695 OCPBUGS-14873 : Honor global ingress configuration LoadBalancer type on AWS #2678 OCPBUGS-14803 : Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667 [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
OCPBUGS-14156 : Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614 OCPBUGS-14031 : Include default ingress CA in root CA bundle #2600 OCPBUGS-13626 : Sync proxy TrustedCA to guest cluster #2557 OCPBUGS-13639 : Cherry pick aws endpoint sg #2579 OCPBUGS-12787 : fix(hcco): Get OLM CatalogSource images from defined map #2485 ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials #2486
Configurable SRE MetricsSet #2545
OCPBUGS-13077 : Ensure ingress controllers are removed before load balancers #2515 OCPBUGS-11544 : Pass runAsUser to CNO so it can run its managed services with proper security context #2391 OCPBUGS-12845 : Delete kubeadmin secret when an idp is defined #2492 OCPBUGS-12738 : Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2473 OCPBUGS-12199 : remove ACL for aws bucket #2458 OCPBUGS-11607 : properly reconcile with user specified changes for in proxy configuration #2395 OCPBUGS-11726 : Update HostedCluster oauthCallbackURLTemplate #2410 e2e: Cleanup shared OIDC provider on SIGTERM #2449
HOSTEDCP-568 : Update Konnectiviy socks5 proxy for IBM exception #2406 OCPBUGS-10584 : Switch NTO metrics auth to certs generated by HCP controller #2293 OCPBUGS-11014 : Do not proxy when guest cluster resolution fails #2340 OCPBUGS-11654 : [release-4.12] Create new EC2 client for AWS identity provider health check #2403 OCPBUGS-10646 : Add storage operators perms. to watch HostedControlPlane #2306 HOSTEDCP-939 : [release-4.12] Setup shared OIDC provider for e2e clusters #2365 HOSTEDCP-806 : Fix ValidAWSKMSConfig condition #2362 OCPBUGS-11056 : fix external APIServer address selection based on endpointAccess #2350 OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707 : No more specifying the scrape interval at servicemonitors & podmonitors level #2356 HOSTEDCP-900 : Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285 OCPBUGS-10504 : Deletion of the VPCEnpoint on conflicting service names #2310 HOSTEDCP-806 : [release-4.12] Validate etcd KMS config #2273 HOSTEDCP-801 : [release-4.12] Expose external DNS for private cluster endpoints #2314 HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297 OCPBUGS-10587 : Use appropriate serving certificate for OAuth #2295 OSD-15099 : Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274 Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334 : [release-4.12] Update the pull secret source for ignition payload #2268 Force controleplane upgrade always #2289
OCPBUGS-8370 : Fix cleanup of volumes on cluster deletion #2253 OCPBUGS-8241 : Add external DNS health condition / release-4.12 #2206 HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2263 Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826 : Customize DNS base domain prefix #2235 feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156 fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Merge main into release-4.12 branch #2053
Release 4.12 rebase latest #2047
Fix OpenID OAuth config parsing #2029
Full changelog
Updating ose-multus-route-override-cni images to be consistent with ART #27
Full changelog
Added METRIC_TEST_IMAGE var (#92) #92
Update the k8s dependencies to 1.25.15 (#84) #84
Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Remove e2e tests that consistently fail in 4.12 (#74) #74
Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog
Source code for this page located on github