4.12.74

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.74-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-minor Pending (1 retries) periodic-ci-openshift-release-master-nightly-4.12-upgrade-from-stable-4.11-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.8, 4.12.9

4.12.73 (changes) - S S S S
4.12.72 (changes) - Success
4.12.71 (changes) - Failed
4.12.67 (changes) - Failed
4.12.58 (changes) - Failed
4.12.46 - Success
4.12.2 (changes) - Success
4.12.1 (changes) - Failed
4.12.0 (changes) - Failed
4.12.0-0.nightly-2025-03-06-021552 (changes) - Failed
4.11.59 (changes) - F F S F F F S F F F F F
4.11.58 (changes) - Failed
4.11.57 (changes) - Failed
4.11.52 (changes) - Failed
4.11.40 (changes) - Failed
4.11.27 (changes) - Failed
4.11.13 (changes) - Failed
4.11.12 (changes) - Failed
4.11.11 (changes) - Failed

Upgrades to:

4.13.0-0.nightly-2025-03-12-020933 (changes) - F F S S F S S
4.13.0-0.nightly-2025-03-09-221049 (changes) - S F F S S
4.13.0-0.nightly-2025-03-08-031507 (changes) - F F F F F F S
4.13.0-0.ci-2025-03-12-063959 (changes) - F S F F F F F
4.13.0-0.ci-2025-03-11-192833 (changes) - F F S S F F F S
4.13.0-0.ci-2025-03-10-231244 (changes) - F F F F F F F F
4.13.0-0.ci-2025-03-09-221058 (changes) - S F F F F F
4.13.0-0.ci-2025-03-08-070431 (changes) - F F F F F F F F F
4.13.0-0.ci-2025-03-07-170832 (changes) - F F F F F F F F F
4.13.0-0.ci-2025-03-07-034748 (changes) - F F F F F F F F F
4.13.0-0.ci-2025-03-06-145533 (changes) - F F F F F F

Loading changelog, this may take a while ...

Changes from 4.12.46

Created: 2025-03-06 12:06:15 +0000 UTC

Image Digest: sha256:7257adeedec4ace7a71d419c154855773219af4183eff625c716d0923230220f

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202312121613-0 to 412.86.202503052321-0 (diff)

Rebuilt images without code change

alibaba-cloud-csi-driver git 4d3b1125 sha256:de74f3959725d382844137e0ba2d96946b320c9e004beca8b52062ac474610e8
alibaba-disk-csi-driver-operator git 99bcda8d sha256:25feb0af735cc1cadf9b9bcdd7de681322b57dc86b1c1f0b5a7fb9f1306cfd33
alibaba-machine-controllers git b9287c05 sha256:a75e6755b1dbc73939d3a8c1d780e5fff973439aea95b34c061ae2389e34f183
aws-cluster-api-controllers git 16156acc sha256:b72a5ff26d5faceec72096f7a035551eef22ebfb0d0867ec81470e6cfb44b84f
azure-cloud-controller-manager git 2193ccfa sha256:792cdfa47c580c591fbd8ffe02e9c9006efa4e7f717a880be384c69c51de9ee6
azure-cloud-node-manager git 2193ccfa sha256:d0f5e6da51eddbef8ed30a85e7e5cfcc45183ce1944cc76cbb7bc73c8a7fb777
azure-disk-csi-driver git a930c89b sha256:d7a89febfff4c924576b70d048c9ea86520d791ba119d98fc2c133c81b1b5a41
azure-disk-csi-driver-operator git 988b8cc8 sha256:374ed138a1b03d1bae18e1009615e88d53ad59af291289cfed16b1f8803605c3
azure-file-csi-driver git 15aade4d sha256:6f1ba0be464ae57bc0b9c72ae13c72b13ccdd495eadb973e1b491d8bda6b6cc9
azure-file-csi-driver-operator git 060ba825 sha256:620d2ac24e1dd7f569096f7a4025e5d4d1e286e00a200de441a1c76ae4dbde52
cluster-bootstrap git 138a1cf2 sha256:8a98c47c3d019e9ec327923cf902b0347ff6aa475cb036ed6cc6d701f7e57da0
cluster-capi-controllers git 03d89f21 sha256:748e97a5c8e899e554856485f724b426d07e7f1de3bbf9202f650d8e30c82dca
cluster-capi-operator git 60a36d83 sha256:2ea73331424986a99e0e430063de4be47c5976532f9b60ecf57b9c74fc38b53e
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:43970967877c6106b4fc7504d6ee1a1cd4a32525fd1dfc63ad16f9223fc8983c
cluster-dns-operator git e9555341 sha256:48730d4a4fd1718312e4b49fb9443789014b884b3f297a0c1a280760c67d4218
cluster-kube-cluster-api-operator git d50f7322 sha256:3204f72a37bc68120c6b19b8bad207dd43e13de5e50743875fc620f90199a937
cluster-kube-storage-version-migrator-operator git 1a251f4d sha256:bf8a4f31e41c5d3694378c62fdc00d1f5a29bf724e016e8a424c07aa78f4352f
cluster-openshift-controller-manager-operator git ab963d8a sha256:ff6997c5f8b9f1e4d315bc812e40ff29948ed6fa9122b249ae5d8bdae6ca6a27
cluster-platform-operators-manager git c930dc74 sha256:bb2b97342f1105f9ded8b818a9483148fe12002111e9924022515e142522148d
cluster-policy-controller git cb8862b0 sha256:4adc330b3f7c1642bf6734d632bc8244a8aad6401ae6fc71fdf508931baa8164
cluster-storage-operator git 21ebf328 sha256:1f9ae3996c12cf9e33aa7bfe876e4aa1b5963f9de991659b48049ab2d25827a4
cluster-update-keys git 2796e173 sha256:8ca1725aecd09493375a5d7e1f30afbd3023ea680feacbe354ba324e070ba115
configmap-reloader git e4d9170e sha256:1776d33890dd0373d3e0bc0e387238e53e455d9bb899928e807343b23ca3d256
container-networking-plugins git 1b339719 sha256:94288fbe4bc79925c62c7460201ca7b76325268f259581c57711009ff4fed523
coredns git cc1194ea sha256:6e7906612b00f5c04f69a4b4dc3c321a21ef859be8bb06055b83e5a320f04fd2
csi-driver-nfs git d9099257 sha256:eb446d2c36f063881b5d9fbacf566b2272cd9ac8f25513aa9bd7353a3e88f841
csi-external-attacher git fac7b8fd sha256:d66d7b56394c79104ab7b3cbe02e98f0f64286fa7040561ac7497dd731c7dca2
csi-external-provisioner git 3aa7c527 sha256:1a37804e5189938980f95eaf65929458f3ffce1fcde244501294bc4f03f69185
csi-external-resizer git 5b066ba4 sha256:756e07fc170854fdd75f309661abeb3d47bb2e0fb86250b4fb3a45a60213aa8a
csi-livenessprobe git e6545e71 sha256:07d75d146dca7c3d3354a2a760360a4116bd4d6695d40c7151f9c10d604c5177
csi-node-driver-registrar git c316b896 sha256:f9b8071dfa08cd454e2be8dd56d4b3c86bcb5b40031405ff905560831d8b5066
docker-registry git 9e75355c sha256:a931d8eae1b9520ace25037566eb05292b20ea519d8cddd719511c45ac41892e
driver-toolkit git 6e5c04c0 sha256:98bed3c2cf40d105df2d2ad7b419afa95ff513fa26292a47d15eb95713c72c18
egress-router-cni git a92e4157 sha256:15147b23e2ed12026c164f42b3b2e1326c8c613d0535c700a15f6c37afd604c1
gcp-cloud-controller-manager git 8a84952e sha256:a8a8996551378c9c9f59d5e8a8417c118fbdad898f1f17e7165a985d354d04ca
gcp-cluster-api-controllers git e00019fa sha256:c6686ebd398046e50b39bf7e32dfcc791b01940f86aae72d6a114fdc659d350a
gcp-pd-csi-driver git 5dcfd675 sha256:9e99462b9e7bbf2a71abfbeccf699ecdb038318ad952c691b74b33f3e6765411
gcp-pd-csi-driver-operator git 30e97ba5 sha256:be558822bc5a37e0dc55deb629b2ecc8863bd091e4fb08981bc9c414813bf2c3
ibm-vpc-node-label-updater git f9da23ac sha256:84cb45b8e54bd806975cb337f86deb80e40c092a69053bf6f1d37067428466a5
ibmcloud-cluster-api-controllers git 0fe74f67 sha256:d974db40e2c3e15aeb4c52e134d333d3327de74817307cd018fa1a5508526c25
ibmcloud-machine-controllers git 31a67dac sha256:8b64861c0d96c8fa8b44c2053ea923a1f8207762f15b274270a62ca251b13bf1
ironic-machine-os-downloader git c65c1f1c sha256:a949a0277379feed527207535d9e1db8f2fe8616ca23d9556d0ce19ec23b5cbe
ironic-static-ip-manager git a8ade8fe sha256:6644368328de039fb3c893d85059f11f1cc56100ab05cdc69fb12f288b537120
k8s-prometheus-adapter git 36c06694 sha256:079f0cb0dfcb958c7acf79ad1480188824480df44d506b4adbc075db0b9fafe1
keepalived-ipfailover git 7e8a0105 sha256:7a491c9e4e574a794e65acecb4cdfd0f0c609fe2b054d36385e91d211e35c202
kube-state-metrics git 748f7131 sha256:9c2b040490420455c3473b70ed5eb94c3cb192e104b54692632b35b9a4cfd9ea
kube-storage-version-migrator git 596745ce sha256:bd035292c7423339aebc70fc1016da83fb97ebfcc147c6d42176a11fa96c4b62
kubevirt-cloud-controller-manager git a19615cd sha256:0d9fbbad9f1126dc358eac31bd0c3f292bb57c86398f2f50aae5e7ae3791ba8b
kubevirt-csi-driver git f407c8a7 sha256:e71003fdfda74aff4aa5f053eb8d8832a3f0751d6429852b7fd73e24de4a1204
kuryr-cni git 8fd2f8b0 sha256:6bfe2a323a59d23f06babc89cf63d6834edbacb1ccd67b9e937b92f5e5207021
kuryr-controller git 8fd2f8b0 sha256:8a98cde73234a5a13659f182841703906f78d21809fc92eeb2456903f14b7f79
libvirt-machine-controllers git a2882f7a sha256:9d418080ef856950921b0a10ded12d7292db1a60dd1451cb8c166669499cf01f
machine-os-content sha256:af4913f613b846202af7165d60c896fdf57466675168e2c4b3809335f2b3c2b5
machine-os-images git 566bf595 sha256:e58ea3c04f45a5a290b7c20a44863647ff90e3abb7a12bb86e25124223db8b9a
multus-admission-controller git e27952fc sha256:f4e780ec3365e7552b90d197b80566490c5631433e2a8aeb141eaada98a6f81b
multus-networkpolicy git 644461f2 sha256:5715c4e42d9d96b1aaa81f00e225ab38446c55a18b1f8a04deda1bef91c30119
multus-route-override-cni git efd6ffbb sha256:457b2f88dc9da94cdec31c97d87b877dd79a318ec0320caa4355ab5a543c75f8
network-interface-bond-cni git 30386d6b sha256:8f8ad7a6bbe10401168e0a726854788b2406737e7914d001e47c040469d6a9e6
network-tools git c76613c7 sha256:126b7d53de17fc07c4fc015ec1eb509ceeee7fb9f01174e9fba34a066b055332
oauth-proxy git 03e5b13b sha256:78bdc690a012f67b2e0938ba9a4a80ec58960a36af0e2c7276f2e76b128a1997
openshift-state-metrics git 3d5dc18d sha256:bc1732a7a4c004166f5477cdbf7ea0b76cecd5c0723efc1e508ee2607f7b4ae6
openstack-cinder-csi-driver-operator git d09e51ae sha256:8c9d7d39dae826bd37e3f4c13f7a1012998bf58a5c7706404ec91616539e18b0
openstack-machine-api-provider git 05657663 sha256:1128cf883ecb2fca56829732e717adf76cec584743d9d8823422b23e5bc6e914
openstack-machine-controllers git f13e381e sha256:3314065d27f69d13b4b114d01d8dba10dda4839e7eeea961cbf45fd0bfa7622e
ovirt-csi-driver git 87ab3789 sha256:86f7ba2330dac87243a079f4b54e10bec7a383c5255df3cc830aba9c0cbb1d66
ovirt-csi-driver-operator git e5e02335 sha256:2a6d774cc3d84578143945172970841fc7c40e5ad9afc9d48b87a5320869b698
ovirt-machine-controllers git 03e8cb50 sha256:4f5c877f00ab44f73f5e7626a126678735fbf0eaa3413a4ec21023b4088766db
powervs-block-csi-driver git b78e8e78 sha256:938670037dd085b8e56025758183708452bc8e9208cfa004cfaff2c893a54475
powervs-cloud-controller-manager git 4fb4334c sha256:3ba6d39f83a1bbc1d869a3afc37a6562d84bfe3960f145537f5d66d896ba1f53
prom-label-proxy git b1907888 sha256:6ffb7d1e7e5820226c8f5407af8338980d8cd401a8be6266260a2f47305442c2
prometheus git 72ceaef4 sha256:3f227d542ff070460f060b2e390b1199aaa87b548c5eff3e1da64ddec82f83ab
prometheus-alertmanager git 914cad82 sha256:00b503b8aa54b70e4edfef9688445afab1bfb01754b6e59314d437a286f712ab
prometheus-config-reloader git d1e399d5 sha256:f746333ef1b69e1be2d0be40fdf68458c026bf35e6dfaa69798ee7326cd2cdd4
prometheus-node-exporter git 99077a3c sha256:a1efbbb21ed02117c5d56619238dc5533ad6fa946df7f96c0ca0f738200072d7
prometheus-operator git d1e399d5 sha256:4c55efb2f2a0e98cac3c2a8888c21debaac670e86cf329d4d07612aa9302f430
prometheus-operator-admission-webhook git d1e399d5 sha256:8942d7755ad30c255300099cdbe5640d1ecda18a0a9af1b1db5d427da9f9fe16
rhel-coreos-8 sha256:1253460a1f9fcd370eb1e20344a202d6bc6748dc60a57621a0acd7f5939868e4
rhel-coreos-8-extensions sha256:145f4bdf90b3e8359d4be0c6f78ee3c37080b586be44a6b3edf4071a2365e7ec
route-controller-manager git 0f141ce9 sha256:22712bcaa472687484ac1cf5e63f35c3860f986efae1fb797b83702071b3a7ca
vsphere-cloud-controller-manager git e170dce5 sha256:2373b56fe0e62a41c9287b1923864c2805941ee6df8156c9b5a0cce99ba4821a
vsphere-cluster-api-controllers git a61d43b7 sha256:3663ea3d16c79e3c8c1a454a37b4dcb92cf7ddc2ca17679d7937b70d6156c4e1
vsphere-csi-driver git e4c0e103 sha256:32a815142df0c5259ed4df91969bb85c5fa051e7f877361b455d137d805d176e
vsphere-csi-driver-operator git d7cca470 sha256:9813dd5ce73b1330761cce15292825d6cb122e0783d0962cae27114840e6e16c
vsphere-csi-driver-syncer git e4c0e103 sha256:efbf44d1fe343fc69838ea0209933b92b68f7a0d97e1921f633232c7155a1b77
vsphere-problem-detector git f25ae2ad sha256:fca3faa129ab1d9598751c69884e3db6ce15a170c19a80cc6c16fd0a93298c24

agent-installer-api-server

MGMT-17596: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) #6214
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) #6207
MGMT-17541: Replace broken golangci reference (#6195) #6195
NO-ISSUE: replace postgres images as current one disappeared from quay (#6132) #6132
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Bump golang.org/x/net to 0.33.0 (#1026) #1026
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) #836
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) #828
MGMT-17541: Replace broken golangci reference (#825) #825
Full changelog

agent-installer-node-agent

MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#707) #707
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#701) #701
MGMT-17541: Replace broken golangci reference (#696) #696
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21218: Bump golang.org/x/net to v0.19.0 #45
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32079: update for CVE-2023-45288 [release-4.12] #85
Full changelog

aws-ebs-csi-driver

OCPBUGS-33457: UPSTREAM: 1919: Add reserved-volume-attachments #267
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33457: Explicitly reserve 1 attachment for the root disk #308
Full changelog

aws-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #97
OCPBUGS-21562: Update golang.org/x/net to v0.17.0 #90
Full changelog

aws-pod-identity-webhook

OCPBUGS-32880: Upgrade go-jose module to 2.6.3 #191
OCPBUGS-21312: Upgrade golang/x/net for CVE-2023-39325 (4.12) #185
Full changelog

azure-cluster-api-controllers

OCPBUGS-36021: Update go-retryablehttp to v0.7.7 #315
Full changelog

azure-machine-controllers

OCPBUGS-36148: Fix mapi_instance_create_failed metric with accelerated networking #115
OCPBUGS-30809: Don’t create availability set when using spot instances #105
OCPBUGS-24564: Reduce cardinality #97
Full changelog

baremetal-installer, installer, installer-artifacts

OTA-1310: data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373
OCPBUGS-36087: [release-4.12]: bump go-retryablehttp for CVE fix #8660
OCPBUGS-39290: Add yq v4 to ci image #8929
OCPBUGS-36179: [release-4.12]: bump github.com/container/images for CVE fix #8663
OCPBUGS-22981: IBMCloud: Add eu-es region #7686
OCPBUGS-30630: baremetal: populate customDeploy in advance #8144
OCPBUGS-32449: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8290
OCPBUGS-30768: update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 #8140
OCPBUGS-30134: [release-4.12] bump containerd for vulnerability fix #8091
OCPBUGS-27454: baremetal: correct external_http_url for v6-only BMCs #7900
OCPBUGS-25593: [release-4.12] OCPBUGS-16640: Update azure cli version to 2.49.0 #7849
OCPBUGS-23184: azure: validation: validate defaultMachinePlatform #7709
OCPBUGS-25476: destroy: gcp: fix destroying regional disks #7845
OCPBUGS-23302: images: installer: add xz to the container #7726
Full changelog

baremetal-machine-controllers

OCPBUGS-46642: Bump x/net to 0.33.0 #230
Full changelog

baremetal-operator

OCPBUGS-30630: Do not update instance_info and deploy_interface for active nodes #338
Full changelog

baremetal-runtimecfg

OCPBUGS-26930: Add .snyk file to ignore vendor and test files #296
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30289: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1701
OCPBUGS-25642: Add client version in must-gather summary #1639
Full changelog

cloud-credential-operator

OCPBUGS-37322: update modules: grpc, protobuf, logrus #764
OCPBUGS-42166: Resolve SNYK errors in security job. #760
OCPBUGS-37422: SNYK ignore go-client misreporting #744
NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027: IBM/go-sdk-core update to v5.17.4 #723
OCPBUGS-32897: Upgrade go-jose module to 2.6.3 #699
Full changelog

cloud-network-config-controller

OCPBUGS-33198: Avoid nil pointer panic while assigning private IP on Azure #141
Full changelog

cluster-authentication-operator

OCPBUGS-20683: CVE 2023 39325 [4.12] #653
Full changelog

cluster-autoscaler

OCPBUGS-45152: [release-4.12] VPA: Update OWNERS file #329
OCPBUGS-40928: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318
OCPBUGS-30911: Fix unstructured taint parsing in Cluster API provider #291
Full changelog

cluster-autoscaler-operator

OCPBUGS-32005: Update x/net to v0.25.0 #325
Full changelog

cluster-baremetal-operator

OCPBUGS-32006: bump x/net to 0.23.0 #440
Full changelog

cluster-config-operator

OCPBUGS-16243: retire LatencySensitive featureset #336
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48325: Add unreadyNodeGracePeriod for allowing brief node hiccups #344
OCPBUGS-35421: Improved debugging of API listing errors #306
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32429: create suitable role and roleBinding for csi-snapshot-webhook #207
Full changelog

cluster-etcd-operator

OCPBUGS-35501: return errors in wait-for-ceo #1277
OCPBUGS-32001: update golang x net #1256
OCPBUGS-30914: Replace nodelister with master nodelister everywhere #1224
OCPBUGS-30938: fix panic in health check timeouts #1228
OCPBUGS-27776: [4.13] Remove z-upgrades from UpgradeBackupController #1185
OCPBUGS-23151: relax readiness to local serializable requests #1156
Full changelog

cluster-image-registry-operator

OCPBUGS-36033: go.*,vendor: bump go-retryablehttp #1071
Full changelog

cluster-ingress-operator

OCPBUGS-43703: Add e2e test for duplicate Transfer-Encoding headers #1158
OCPBUGS-43703: Add alert for RFC 7230 violation in Transfer-Encoding headers #1162
OCPBUGS-35454: internal service changed fix target port logic #1092
OCPBUGS-35304: TestHostNetworkPortBinding: Delete t.Parallel() #1083
OCPBUGS-35027: Don’t add clientca-configmap finalizer if deleting #1080
OCPBUGS-34888: desiredRouterDeployment: Set HostPort if needed #1076
OCPBUGS-34757: Avoid spurious updates for internalTrafficPolicy #1070
OCPBUGS-34110: Avoid spurious updates for scope in IngressClass #1056
OCPBUGS-34548: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50880: Increase waitForFallbackDegradedConditionTimeout #1811
OCPBUGS-22736: pkg/operator/configobserver: check that the serving certificate refer… #1571
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-27068: bump(library-go)=release-4.12 #789
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27067: bump(library-go)=release-4.12 #529
Full changelog

cluster-machine-approver

OCPBUGS-23486: Filter non node CSRs in metrics #220
Full changelog

cluster-monitoring-operator

OCPBUGS-35558: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383
OCPBUGS-28766: fix generation of telemeter token hash #2306
OCPBUGS-25389: Add RHACM telemetry metric for 4.12 #2204
OCPBUGS-21441: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2148
Full changelog

cluster-network-operator

OCPBUGS-43872: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548
OCPBUGS-38905: Add missing runbook for OVNKubernetesNorthdInactive #2479
OCPBUGS-37942: [release-4.12] update whereabouts crd #2461
OCPBUGS-29167: fix whereabouts conformance test failures #2256
OCPBUGS-29884: add env var in whereabouts-reconciler daemonset #2284
OCPBUGS-29302: Update ingressconfig_controller to use field Manager #2268
OCPBUGS-28801: [release-4.12] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2244
NO-JIRA: add kyrtapz as reviewer and approver for release 4.12 #2230
[release 4.12] OCPBUGS-23025: Add maxLogFiles config for OVN-K Audit Logging #2188
OCPBUGS-24039: remove all managed fields used by old manager #2099
OCPBUGS-21715: Bump golang.org/x/net and github.com/openshift/library-go #2124
OCPBUGS-24571: Disable weak SSH cipher suites #2164
Full changelog

cluster-node-tuning-operator

irqbalance: set banned cpus list to 0 (#1006) #1006
Refactor IRQ load balancing enable/disable test (#1038) #1038
Scheduler plugin: ignore IRQs (#1034) #1034
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-22689: increase timeout for probes #558
Full changelog

cluster-samples-operator

OCPBUGS-49664: add shannon and aroyoredhat as owners #600
OCPBUGS-21179: update k8s.io/apiserver version #590
Full changelog

cluster-version-operator

OCPBUGS-45333: deps: bump golang.org/x/net to 0.31.0 #1122
OCPBUGS-27443: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1024
Full changelog

console

OCPBUGS-45291: Application creation fail when manually entering input scaling value in local setup #14572
OCPBUGS-45235: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561
OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
OCPBUGS-43639: Copy response code from proxied plugin requests #14423
OCPBUGS-33519: Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334
OCPBUGS-41600: Fix plugin proxy handler #14266
OCPBUGS-41854: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283
OCPBUGS-34564: Routes created by devfiles do not always use HTTPS #13907
OCPBUGS-34933: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930
OCPBUGS-32146: Bump graphql-go to v1.3.0 #13923
OCPBUGS-34845: Fix PipelineRun Logs tab navigation #13920
OCPBUGS-33778: fix issues with Edit Route form #13859
OCPBUGS-27479: Bump helm pkg #13528
OCPBUGS-29746: Add Pipeline metrics tab using plugin #13621
OCPBUGS-29348: Added Proxy to non k8s endpoints #13600
OCPBUGS-22431: Check if filtered object contains name property #13285
OCPBUGS-25213: add access review for impersonate #13440
Full changelog

console-operator

OCPBUGS-33386: Reset console operator’s conditions #898
OCPBUGS-20988: Disable HTTP/2 for webhook #876
OCPBUGS-30990: [release-4.12] Bump library-go and golang.org/x/net #867
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

Make sure LB status is updated immediately (#2067) #2067
Allow deleting LBs in ERROR status (#2037) #2037
Protect from AllocateLoadBalancerNodePorts=false (#1988) #1988
Do not create HTTP monitors for UDP on old Octavia (#2000) #2000
fix CSI CI issue (#2020) #2020
tests: Replace use of deprecated ginkgo flag (#2007) #2007
Add docs on running tests (#2006) #2006
Remove duplicate errors (#2009) #2009
Manage Security Groups for Octavia (#1984) #1984
Full changelog

csi-driver-manila-operator

OCPBUGS-30295: Fix selector for manila-csi-driver-controller-metrics service #228
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28953: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #169
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28959: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #105
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29244: cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #140
Full changelog

docker-builder

OCPBUGS-43187: runc library bump to 1.1.12 #440
OCPBUGS-49345: skipping some unit tests to avoid failures as they are duplicate #437
OCPBUGS-48738: Add new team members to the OWNERS file #433
Replace ‘coreydaley’ with ‘sayan-biswas’ #408
BUILD-854: Add adambkaplan as approver #406
Full changelog

etcd

OCPBUGS-28736: Rebase etcd 3.5.12 openshift 4.12 #246
OCPBUGS-27102: Rebase etcd 3.5.11 openshift 4.12 #240
Full changelog

gcp-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality. #76
Full changelog

haproxy-router

OCPBUGS-43703: add duplicate_te_header_total metric #632
OCPBUGS-35875: Properly handle rewrite-target annotation #610
OCPBUGS-33432: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #593
OCPBUGS-34212: Reject routes with MD5 certs #601
OCPBUGS-33517: Count active services before setting weight to 1 #581
Full changelog

hyperkube, pod

OCPBUGS-37282: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046
OCPBUGS-30454: CVE 2024-24786 #1974
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1940
Address CVE #13
OCPBUGS-15527: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1887
OCPBUGS-25815: Fix device uncertain errors on reboot 4.12 #1833
OCPBUGS-25214: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1835
Full changelog

hypershift

OCPBUGS-41516: set Konnectivity cipher suites #4283
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24644: Add Snyk file to exclude vendor directory on scan #67
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36063: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36069: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124
Full changelog

insights-operator

OCPBUGS-32004: bump golang.org/x/net version (#932) #932
OCPBUGS-28519: Add extra check in ids to bypass validations (#906) #906
adds helm information gather (#890) #890
Full changelog

ironic

OCPBUGS-48145, OCPBUGS-48596: Bump jinja to 3.0.1-6.el9.2 #627
OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
OCPBUGS-37766, OCPBUGS-39385: Include fixes for CVE-2024-44082 #586
OCPBUGS-38513: set min version for python3-webob #558
OCPBUGS-33373: bump werkzeug #547
OCPBUGS-34897: bump jinja2 #541
OCPBUGS-32362: [4.12] remove unused prometheus-exporter #489
OCPBUGS-32386: Use unix sockets by default for reverse proxy communication #477
OCPBUGS-29229: Fix Inspector iPXE config for IPv6 addresses #454
Full changelog

ironic-agent

OCPBUGS-39385: Include fixes for CVE-2024-44082 #165
OCPBUGS-38513: set webob and bump werkzeug #153
OCPBUGS-29769: Always add ignition to set hostname on /etc/hostname #112
Full changelog

kube-proxy, sdn

OCPBUGS-20753: update x/net to v0.17.0 #615
Full changelog

kube-rbac-proxy

OCPBUGS-32000: CVE-2023-45288 [4.12] #106
Full changelog

machine-api-operator

OCPBUGS-43872: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305
OCPBUGS-32007: Update x/net to v0.25.0 #1257
OCPBUGS-25303: Update reference URL #1189
Full changelog

machine-config-operator

OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
OCPBUGS-38382: [release-4.12] daemon/update: disable systemd unit before overwriting #4530
OCPBUGS-33665: Run resolv-prepender entirely async #4364
OCPBUGS-30829: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4257
OCPBUGS-30823: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4268
OCPBUGS-30329: set nodeStatusReportFrequency #4246
OCPBUGS-19659: After dual-stack conversion reconcile IPFamilies #3936
OCPBUGS-29366: release-4.12: fix nodeStatusUpdateFrequency #4180
OCPBUGS-29278: crio: drop automatic image cleanup on upgrades #4178
OCPBUGS-14071: Imageinspect takes type of error into account, drop podman inspect fallback #3717
Full changelog

machine-image-customization-controller

OCPBUGS-27090: configurable ironic agent vlan creation #119
Full changelog

multus-cni

OCPBUGS-28520: Fix SAST scan issues for multus-cni-container [4.12] #225
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37942, OCPBUGS-38019: [release-4.12] Stateful fixes #310
OCPBUGS-28801: [release-4.12] Enable whereabouts config #244
OCPBUGS-16008: Cherry pick fix assignment 4.12 #238
Full changelog

must-gather

OCPBUGS-48086: Update owners #477
OCPBUGS-24523: [release-4.12] Add csi-proxy logs collection in must-gather for Windows nodes #394
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#92) #92
Full changelog

nutanix-machine-controllers

OCPBUGS-20956: bump golang.org/x/net to v0.17.0 #88
OCPBUGS-25675: Fix CI by running tests natively by default #62
Full changelog

oauth-apiserver

OCPBUGS-32010: bump x/net to 0.24.0 #113
OCPBUGS-21049: Bump K8s to v1.25 #104
Full changelog

oauth-server

OCPBUGS-27478: bump osin deps #144
Full changelog

oc-mirror

changes the owners file (#1011) #1011
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1027) #1027
Bump version to include v5.11.0 of go-git (#825) #825
OCPBUGS-385: Capability to override default channel (#749) (#796) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#779) #779
Full changelog

olm-rukpak

: OCPBUGS-27593,OCPBUGS-27678: Update go-git to v5.11.0 #76
Full changelog

openshift-apiserver

OCPBUGS-32447: ose-openshift-apiserver-container: golang: net/http, x… #481
: OCPBUGS-21429: Enable HTTP/2 CVE mitigation #399
Full changelog

openshift-controller-manager

OCPBUGS-49644: Add new team members to the OWNERS file #364
OCPBUGS-41953: Add adambkaplan as approver #336
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46925, OCPBUGS-46932, OCPBUGS-47312: x/net bump to v0.34.0 [release-4.12] #943
NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875
OCPBUGS-42161: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873
OCPBUGS-41881: [CARRY] perform operator apiService certificate validity checks directly #866
OCPBUGS-32854: bump go-jose to v2.6.3 #782
OCPBUGS-35242: Unblock CI #773
OCPBUGS-27563, OCPBUGS-27568, OCPBUGS-27648, OCPBUGS-27653: bump go-git/v5 to 5.11.0 #688
OCPBUGS-27962: [CARRY] SSC RBAC #671
OCPBUGS-28229: Registry Pod Controller Flag #673
OCPBUGS-24619: Update to latest k8s v0.25.15 API server and enable HTTP/2 DoS mitigations #660
Full changelog

operator-marketplace

OCPBUGS-49426: Upgrade golang.org/x/net [release-4.12] #591
NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081: update golang.org/x/net for CVE-2023-45288 #567
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-50502: EgressIP: Reload certificates for the grpc heatlhcheck server #2457
OCPBUGS-35876: [release-4.12] ipv6+all protocols conntrack flush #2214
OCPBUGS-29864: CVE-2022-41723: avoid quadratic complexity in HPACK decoding #2204
OCPBUGS-34273, OCPBUGS-34414: Improves service iptables efficiency on start up + ICMP error messages to pass through #2184
OCPBUGS-32990: Bump OVS #2144
OCPBUGS-33422: [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2135
OCPBUGS-25889: [release-4.12] OVN bump to 23.06.1-112 #2154
OCPBUGS-23259: [release-4.12] Update leaderelection config to allow retries #2017
OCPBUGS-28598: CARRY: Updates owners and adds Surya #2034
OCPBUGS-26700: [release-4.12] fixes MTU configuration on gateway router #2015
OCPBUGS-24420: OVNK/GW: Ignore headless services in syncServices #1972
OCPBUGS-23981: Netpol retryFramework cleanup #1977
OCPBUGS-26243: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2006
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25717: snyk: ignore vendor dir #62
Full changelog

powervs-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #75
Full changelog

service-ca-operator

OCPBUGS-21026: CVE 2023 39325 (4.12) #231
Full changelog

telemeter

OCPBUGS-34827: fix issuer check during JWT authentication 4.12 #541
Full changelog

tests

OCPBUGS-41585: Removes dependency on samples operator images #29080
Full changelog

thanos

OCPBUGS-27100: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #137
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github