4.14.20

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.20-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.25, 4.13.27, 4.13.28, 4.13.29, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.14.10, 4.14.11, 4.14.12, 4.14.14, 4.14.16, 4.14.3, 4.14.4, 4.14.5, 4.14.6, 4.14.8, 4.14.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.7

Created: 2024-04-04 20:03:07 +0000 UTC

Image Digest: sha256:e64464879cd1acdfa7112c1ac1d90039e1689189e0af197f34881c79decda933

Components

Kubernetes upgraded from 1.27.8 to 1.27.11
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202312132152-0 to 414.92.202403270157-0 (diff)

Rebuilt images without code change

agent-installer-node-agent git e438a5e9 sha256:91626df2ac8266f7c8e15f435f77933b79adfcff31b7184961db97f3654c004d
agent-installer-utils git ad853769 sha256:3116ede71c70e9a9ef31511fa6e73d5ab73edca690dfde19ca43c105c56e90b1
alibaba-cloud-csi-driver git 3dc363d3 sha256:1e40a7e8b281a16e4e33caaac6ce559156655af45761f736a3d5293d862786c8
alibaba-machine-controllers git 27f105d3 sha256:613c142df420ef54ecae823911f165a36b7c6990e3c40db3d767e35a56f11e77
apiserver-network-proxy git 3362d673 sha256:7509d5de3d0714b1dbd991a5ede031533f411602ab5c17b6b872b03c06ede4f7
aws-ebs-csi-driver git 2e2e2774 sha256:bf052c870e9a905332eb0f45fa9a314665d4de5fbf0fd099024af7d38c5a7931
aws-machine-controllers git e292817c sha256:1c2a54c1038a498212e1cc394bf54a14174ca4ca94ffae169fcb868deb6dd6a2
aws-pod-identity-webhook git ad7aa0ae sha256:d1d0f381b950049e92f5b49afd9e74ee7578d7ac445e2326633f0489e7ae457f
azure-cloud-controller-manager git f0e7cbbc sha256:f7db0c648a74d05e1cc54efe564ce4c8e0e8040c65b2c46bb716ceaa6868f5ba
azure-cloud-node-manager git f0e7cbbc sha256:517b927dd62c7d1075f470d96e4df69b0ba2d18bde861cd0e0fe9b814666b0d9
azure-cluster-api-controllers git 7ad2773c sha256:b3465cbca97a0dc9fc24a9432ebca64116ed557b474364d87376ba1a421ad643
azure-disk-csi-driver git b19eec11 sha256:5ea097adbcf1cc4829fce518b1e8dfee1bc749d5f98e8d972a5898f7a10cf173
azure-file-csi-driver git f401f536 sha256:d8854990c5b2a3c470fcd4c4928a446efae24b520f7abd85d1449bd95b7154c8
cloud-network-config-controller git 9cb1bbd8 sha256:5c913972d8201a0e490d832a1651b30b2343caf43e259e606434eb8c44624e77
cluster-baremetal-operator git 270579c6 sha256:ca330a1ea546e5577c21e7d222bb2749a04c1ae870aba07eb719af8eb190a5ca
cluster-bootstrap git 93fba13f sha256:5bad0633a17d316b778141bf5d101e846b0ff87769701f5da47192a15b3b31d2
cluster-capi-controllers git ae83c553 sha256:0aa0bb8c632ef6a7f43f826dee6b8f03911f6bcc747a253070e8be3a1b09e266
cluster-capi-operator git b4c4fb13 sha256:7ed10ce9dd21211ba9a040824978514552eb4332567013293cccca3319f07c28
cluster-csi-snapshot-controller-operator git 73dc400f sha256:010f65cc051f88f1bf25c278492ef97d532641fccc49ad07c245c2c03f0fc30f
cluster-dns-operator git 5553a226 sha256:4eb2ef2557df75275026c3457523f68c79b4b8177f5c72c7aa51cd9a49433861
cluster-ingress-operator git d876f5ab sha256:d0a68806f4f8d8725459b6459342222065771fb719cb22f869441b0545c7030c
cluster-kube-cluster-api-operator git b287d08b sha256:b84277a7b9341216ace9e77c50b861cf27ff8c8647e478c9ed5c70fba128d722
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:8b0b71b7c99f0d63de5a8e865c71460e7cc64d5e54f049ca7f32135700b9230b
cluster-openshift-apiserver-operator git 8bd86026 sha256:8dfafd7fb3ae6e035b2cd2defc9c2f9220a5805766325f812a897b0e7ca9606b
cluster-platform-operators-manager git 08fb27e7 sha256:ebbb2dad5bb65568604390b163500fb22b5a10debd8d8cf10ff0c00af97aef60
cluster-policy-controller git 219f6f6f sha256:258c1f8ed41904af2bd63231bd83a4ab1a9bdf47e51a40ce07ffb955375d1534
cluster-samples-operator git b5396eb1 sha256:837ea217bb601b0005a03b750db9be823a3d159a39fc81126edb51209a271dd9
cluster-update-keys git e0c26a08 sha256:50df5460784d8ee730c1a79a70f962796a7d010588bf233883dd265466cbdeec
configmap-reloader git 716a0c33 sha256:4890a7c70aa6ebd79a1e25d1df59c0624fdf6e169ba76290d577e71d5c54d1c7
container-networking-plugins git 7295a5e0 sha256:352b7a8c8201bec9f2f758c9b7ad5bac45fe2a6c4c9de10ed9925e19b6586995
csi-driver-nfs git e1dd4537 sha256:c027aef0e188482be6eaaa114d48b3a4564c54aa3bdd832a7e0710f0fe2b3d8d
csi-external-attacher git 06e8ce0d sha256:8371341ddd810dfcdbf4421b5346fc41997eb23e1a59b9dfd8c179b2e4b478cc
csi-external-provisioner git 78a710fd sha256:62ab3de6fd8f8fedc12c01ed75f315a5816e38996ea41745146509f49e6a9648
csi-external-resizer git 59a701a4 sha256:cc61a6051b95e537cecf80887a9a014d82705c7cc732ee429f1a2ef61517c8ba
csi-livenessprobe git a9bcbde1 sha256:b5d90899e246cd2cf7f945a4937abd33598a8ead71da787bec7f2008b359ea48
csi-node-driver-registrar git 9dcaa7f5 sha256:2198e6f2166968b0d0d6698a5661070827cbb450995923784c25e3ed27d1a9f2
driver-toolkit git cafed17b sha256:747dfd6559cd52771532d901b0a33bb464d287dd9c2ab876b386e4f3a1424396
egress-router-cni git afffdd45 sha256:cbf9986a0fe2adb09cb31240adc4a7af61d8220de847c4ac14052c80ad3d9895
gcp-cloud-controller-manager git 09e96a91 sha256:6e0bf7315c0a9e54b9ff0a035d916f3cccca0fcd2e14ff7dc0a52ff8bff9a7f8
gcp-cluster-api-controllers git d99fb31a sha256:4e9be2da3ec9d2f2fb2375bbe88fa82e779d696010b18e36917deae054f5113c
gcp-machine-controllers git a676e6b6 sha256:16dca104438025c6c2fcd49f24c533f46f94beb47c71e9ee95f0a23fae25cf0f
gcp-pd-csi-driver git 8a626fe5 sha256:c4c261472fdf51438efcd8d70b06c2e2969cb65fc411f66206c4329eca185be0
haproxy-router git b3af193f sha256:14187baa4493f3f28d8c535ff24db7d34095dba56756d80f78e76431c35d0f3a
ibm-vpc-block-csi-driver git 02471d96 sha256:fdb2826cf741dea172790faf0bbfe71ec908a91d64fbefd29f5dff9edb223f68
ibm-vpc-node-label-updater git 44a2b943 sha256:9b4891a270f58292ffca3f78d7a37e1b7eb59fc241810201c18054a68efa6310
ibmcloud-machine-controllers git c28b2232 sha256:4eab99e11651209ee4377044bb3c9103dbf81a4dfbf59ba61923da3f8911d16c
ironic-machine-os-downloader git 7b56c306 sha256:cad1314cfcdd7097ccfb64d46e243113e2e48d8f0bd3dc825d798b3bafcc53f0
ironic-static-ip-manager git c038d5a4 sha256:047f22503ec75bfed9177ca3f1d1e10947beebdbf93dd15b3319e9d41a9d7249
k8s-prometheus-adapter git 801a912b sha256:2507ee967f87483a2f3cfc7a9909dbc83b62ae8dc53610a285956db177c610bc
keepalived-ipfailover git f08cee33 sha256:33d087c7a657881333ee4a9bbda51d4fa501efe716fa551e4d30ccd8c412b2b5
kube-proxy git 1a9befcb sha256:0812538c60aff6865d6f892552e5d920b98009cd26c8ade88ce316346695237c
kube-rbac-proxy git 1a646b98 sha256:20ed327b89dd0c1713419c451ff6f1bb00fd4ea25c137baf828fae824b10c72b
kube-state-metrics git db0c5499 sha256:fde9b4ae3b7434272c17ab95326110349108a7e55f513522ae5c03e5fea37a46
kube-storage-version-migrator git 8558e14a sha256:747f93c301bacd186da45befefeb6eb6ea1c82cbb4c8d2627870cb3188bd3b27
kubevirt-csi-driver git 831ff3eb sha256:e673962c6ecd38bf30db4ce49176f2222531e47f10112645b7d2a9fb51476da0
kuryr-cni git 8926a294 sha256:c4a545426fda99e44494da839daf731a63083361d6054d6d8a40f46153cab16e
kuryr-controller git 8926a294 sha256:cc34e254dd6c6631309bfb3e513993b84e5e67a486c94f3a22b60080bf6cc859
libvirt-machine-controllers git 34dfccba sha256:d32ace22da0c1d31f16c7df5f03a20d854f6a6102c60bc42e0a42e8004458993
machine-os-content sha256:532a856e93486742bff24331b690b017716ec9e9e3fcb04854fb4e236d588da4
machine-os-images git d3a4a6c3 sha256:bb90f3729b1e82d4e2d7d78030d667d0682708990b56fee3a90202a06951c2fb
multus-admission-controller git 5e74b0fa sha256:b820c235d0b8cf7cc22bc5299f69170d76f5ae4d467bc140bdd046339118f0e8
multus-cni git 599223b8 sha256:932c345d65cd42a1dde9d184a95fc8dc82645f0d8843e2d164adf40e3150b3ff
multus-networkpolicy git cd6eae10 sha256:0dc9e61b5f8eece822759e4a938fd5b38fccbb939fb21ffc8d59b22ca693292a
multus-route-override-cni git 078aee5c sha256:88d6466dba5b421a426ea2bd9226ddb5ff84b1744959c3690ca66e89e888f830
must-gather git 833e1de9 sha256:f287ae485a1a14c33ebbdd7d5159245b98e384ed33df7c78a2f6581f3afb4e58
network-interface-bond-cni git 29f61f6b sha256:769dcc18d6c12354c4ad41801ee763ae3189a4efd3ea39dad9d10b04fc1c531d
network-metrics-daemon git 69d0021a sha256:d4df01468726c107241fa1b0066ec2c1b7f1ad3a6bc7f14b3de48f55db47e7ad
network-tools git a1dc6afd sha256:ff0dc579843aeddf8f2ec9ec5baaebe851a7f9b6b6482294f066a9eb9b70170c
nutanix-cloud-controller-manager git bc568865 sha256:62d5a783285869c453714cdf795fa5ac7d11d714e3356e419f9b417cbb1e9759
nutanix-machine-controllers git 6f50b1ac sha256:b59e6ff4fac8eb4a1383be299da9030ce53cca26099ef445688b1fa9c553b8e2
oauth-proxy git a4a2f270 sha256:9a3127112af24a1252c223b8218313cc6f56faa46c4d8362d72890537e502894
oauth-server git 35f4739f sha256:297523bdfb5c7f5302dc805320dbfed81142d204443483c242ca2ad240e0f111
openshift-state-metrics git dff4b0f4 sha256:ee6c641f51c727aaeb015df8d96cdd63bbb2a3cd5b07657853594def968b21a9
openstack-machine-api-provider git 89858767 sha256:def19eec88a823b63dd3b375d99a634fca7945199bf3295030e6b60c5135882c
operator-marketplace git a367cea6 sha256:764cdc6c8cd899739ceecc58de7635876b25cba377eb4b3d8126c69db645de5b
ovirt-csi-driver git f21b470f sha256:c83889471ddc433e4502850b2f9c1534b73f3298c071da2c24ae52d81d6bf973
ovirt-csi-driver-operator git 2fa33aa7 sha256:b11f23589bd2ab6e9fb81c09a2a4bef3d84a7ed2ed647b6c7e46d183d63e4fba
ovirt-machine-controllers git 5d708631 sha256:41a7f1909b808a60cec665d092e1f223ee8aa5cb0899e29a4e4dacf830df0e24
powervs-cloud-controller-manager git 32c1028e sha256:c7953d41f864b468fba42175bb613a8d39a7f2ac6ed494bdb8191e0e1853db80
powervs-machine-controllers git 1a957dae sha256:563a3323c80735e78ff92e7f502905a3ffaa22bbd7708b814edfba1e58b50cea
prom-label-proxy git af40ed09 sha256:31c50952b8bb0608975b15fee59373b372b58b334362939dee344f89caca4c85
prometheus git b7c61bcb sha256:087a92a5b6290d80a12b8f7ecf198e2833f5ac593af268c5455ea63631062ccf
prometheus-alertmanager git e3725166 sha256:da07a4de9d295d0dae0a780ae053a8d9e92eda3af87ccbcffdeb96a74e7a07ed
prometheus-node-exporter git 5ee0a9d9 sha256:1ca1cab24282dc2eab11f336691ef6fee52dafccb9adb8f8b2d98e9219cac915
rhel-coreos sha256:ecd3edf8950419504c44cbbd665a9c0b6aad04e483662c13bf685100b7a73483
rhel-coreos-extensions sha256:ce3578414e52031637f8ada593bb81ff0c9bfd1953016f1cb6aef1fed40d8357
route-controller-manager git 1a5e72f4 sha256:71114de9ab27f0125ce07a5644b3d22d7f9ee7cfb387fd83d05fcff9bc4d7788
sdn git 1a9befcb sha256:d9339c0332927d0dd4cec2607b34436ba3ae816a670f4e5c7a81cb76aed87265
service-ca-operator git 3c3f82f7 sha256:fe2291b542f983ba1c66b60c0c5e8ddb47a221ed550f6551efacb6c5f466120e
telemeter git c683f657 sha256:99854b37a9b31851dc5b41bc51add3a537bc9a2497dc82949d7c5152b8a11aeb
thanos git a2671250 sha256:7cba162144e488f5316fcec6b2daaa0574759cc6deeb6e10fa58147a6ebecb5d
vsphere-cloud-controller-manager git b04567f7 sha256:931610b8a719fb6a42d1c0c33616e06166a50621440bfe5b3a55ed8c9fd6f190
vsphere-cluster-api-controllers git 72e998c3 sha256:65ef9927f484a37e6e01e8b2f1dc76e12a005816823b727b2adedddd1917a1f2
vsphere-csi-driver git a5ed57f5 sha256:ffa6628b07a0300de2229db5d2ccb11cfa75f7128d3e64c36a97ceb6cbdf6937
vsphere-csi-driver-syncer git a5ed57f5 sha256:3bdf7685518274edc660337270279063b3a69e24ab7c062f264d052cf12d333d

agent-installer-api-server

MGMT-16950: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) #5973
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5974) #5974
MGMT-16517: Add Env Var Deployment Type & Set ABI (#5987) #5987
MGMT-15796: set CloudControllerManager to External for OCI (#5877) #5877
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Ensure valid hostname during install (#794) #794
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21255: Bump golang.org/x/net to v0.18.0 #38
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
Full changelog

aws-cloud-controller-manager

OCPBUGS-23826: bump go.opentelemetry.io #67
OCPBUGS-27759: Adds ecr-credential-plugin .spec #71
Full changelog

aws-cluster-api-controllers

OCPBUGS-31332: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #506
OCPBUGS-31251: fix e2e tests on release branches #505
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #109
Full changelog

azure-file-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #83
Full changelog

azure-machine-controllers

OCPBUGS-29152: Don’t create availability set when using spot instances #98
OCPBUGS-28745: Improving performance of VMs created in Azure #96
Full changelog

azure-workload-identity-webhook

OCPBUGS-21093: Upgrade golang/x/net for CVE-2023-39325 (4.14) #14
Full changelog

baremetal-installer, installer, installer-artifacts

Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027: gcp: better error msg when service accnt missing #8078
OCPBUGS-30259: PowerVS remove ibm cloud/bluemix go 4.14 #8103
OCPBUGS-29123: IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626: update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
OCPBUGS-28929: [release-4.14] Bump containerd for vulnerability fix #7981
OCPBUGS-27419: Fix depreciated typo #7929
OCPBUGS-24521: set vmType in azure cloud config [release-4.14] #7804
OCPBUGS-23738: vSphere - when using RP network path is incorrect #7759
OCPBUGS-27241: baremetal: correct external_http_url for v6-only BMCs #7914
OCPBUGS-22315: bootstrap: Enable gatewayd units only on RHCOS #7628
OCPBUGS-23498: update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
OCPBUGS-20860: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887
OCPBUGS-22895: Do not generate azure-cloud-provider in manual mode for aro builds #7670
OCPBUGS-22771: aws: use security groups from defaultMachinePlatform #7658
OCPBUGS-24489: baremetal: populate customDeploy in advance #7802
OCPBUGS-22770: destroy: gcp: fix destroying regional disks #7657
Full changelog

baremetal-machine-controllers

OCPBUGS-29177: Extend metal3remediation aggregation role #211
Full changelog

baremetal-operator

OCPBUGS-23324: Backport node poweroff fixes #318
OCPBUGS-24409: Don’t munge timestamp in structured logs, again #324
Full changelog

baremetal-runtimecfg

OCPBUGS-26928: Add .snyk file to ignore vendor and test files #294
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30287: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699
OCPBUGS-25983: Remove deprecated password defaulting in default config flag #1646
Full changelog

cloud-credential-operator

OCPBUGS-29156: Fix the ClusterOperator watch of the status controller #676
OCPBUGS-28231: Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670
OCPBUGS-29199: ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911: Resolve all outstanding snyk vulnerabilities #650
OCPBUGS-28382: Use cached clients to avoid client side throttling #666
OCPBUGS-27515: Write manifests when AWS IAM roles already exist. #659
OCPBUGS-26512: Use live client for metrics #647
OCPBUGS-25275: Azure Workload Identity info in CredsRequests creates a Secret #643
OCPBUGS-24346: Discover AWS dns suffix from partition and region. #635
Full changelog

cluster-authentication-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #649
Full changelog

cluster-autoscaler

OCPBUGS-30628: Fix unstructured taint parsing in Cluster API provider #288
Full changelog

cluster-autoscaler-operator

OCPBUGS-25749: Add Snyk file to exclude vendor directory on scan #308
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-26548: Adds CloudConfigTransformer for Azure #321
Full changelog

cluster-config-operator

OCPBUGS-28649: Add required PSa labels #403
NO-JIRA: add inert featuregate files to allow diff against later releases #398
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30014: Never delete a Machine when there’s a single Machine in an index #283
Full changelog

cluster-etcd-operator

OCPBUGS-30067: fix panic in health check timeouts #1213
OCPBUGS-30012: Replace nodelister with master nodelister everywhere #1211
OCPBUGS-23571: Add annotation in the etcd-guard static pod for worklo… #1162
OCPBUGS-26214: fix device busy errors #1176
Full changelog

cluster-image-registry-operator

OCPBUGS-28989: pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755: azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604: move azure storage blobs from docker back into /docker #1001
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650
OCPBUGS-29722: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646
OCPBUGS-25384: psa cluster fleet evaluation #1600
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-28247: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
OCPBUGS-27063: bump(library-go)=release-4.14 #787
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27022: bump(library-go)=release-4.14 #527
Full changelog

cluster-machine-approver

OCPBUGS-28745: Increase concurrent reconciles to 10 #228
Full changelog

cluster-monitoring-operator

OCPBUGS-27471: prevent plugin entry assets from caching #2241
OCPBUGS-25800: Wait for 3 (instead of 2) consecutive failing reconcil… #2216
OCPBUGS-27418: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2239
OCPBUGS-25799: Detect ipv4/ipv6 socket in pod ip for nginx conf #2215
OCPBUGS-25387: Add RHACM telemetry metric for 4.14 #2202
Full changelog

cluster-network-operator

OCPBUGS-30021: [release-4.14] Disable network-node-identity on ROKS #2286
OCPBUGS-30100: ipsec: fix openssl typo #2287
OCPBUGS-29168: add env var in whereabouts-reconciler daemonset #2257
OCPBUGS-26573: Improve troubleshooting IC upgrades #2076
OCPBUGS-29033: network node identity: tolarate all taints #2248
OCPBUGS-18281: only 2 master nodes are required for ovn-kubernetes #2154
OCPBUGS-29300: Update ingressconfig_controller to use field Manager #2266
OCPBUGS-28608: fix whereabouts conformance test failures #2235
NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858: [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
OCPBUGS-27013: HyperShift, network-node-identity: Check the deployment in the management cluster #2195
OCPBUGS-24326: adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
OCPBUGS-24037: remove all managed fields used by old manager #2112
OCPBUGS-24320: Add apbroute/status patch rights for ovnkube-node to update status #2143
Full changelog

cluster-node-tuning-operator

irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640: [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989
rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
OCPBUGS-26003: E2E: PPC Test cases (#905) #905
Make MC names deterministic (#903) #903
OCPBUGS-25671: rps: fix mask update for SR-IOV devices (#891) #891
OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) (#871) #854
Full changelog

cluster-olm-operator

OCPBUGS-25481: NO-ISSUE: Bump k8s.io/apiextensions-apiserver #41
OCPBUGS-22581: [release-4.14] OCPBUGS-24652: Bump k8s dependencies #38
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-28951: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
Full changelog

cluster-storage-operator

OCPBUGS-30054: Update AWSCSIDriverConfigSpec fields validation to accept all curren #462
OCPBUGS-28988: Allow vSphere CSI driver to be disabled #449
Full changelog

cluster-version-operator

OCPBUGS-30878: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040
OCPBUGS-27822: Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs #1021
OCPBUGS-27048: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
OCPBUGS-26207: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016
Full changelog

console

OCPBUGS-29813: Release 4.14 backports #13646
OCPBUGS-29813: Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274: Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972: Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898: Add support for custom segment domains (to load JS and make API calls) #13540
OCPBUGS-29349: Error in displaying BuildRun logs in Console #13601
OCPBUGS-29100: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239: Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990: update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157: add additional check to determine if file is binary #13507
OCPBUGS-28635: Bump graphql-go to v1.3.0 #13553
OCPBUGS-27305: Copy response code from proxied plugin requests #13517
OCPBUGS-27851: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537
OCPBUGS-27350: Add Pipeline metrics tab using plugin #13520
OCPBUGS-26171: Set unlimited line width in YAML editor #13482
OCPBUGS-24640: Strip ‘Server’ header from proxy response #13423
OCPBUGS-25997: change Alertmanager form to create using matchers inst… #13478
OCPBUGS-24349: Fix crash when ArtifactHub Task has no version #13399
OCPBUGS-25397: fix runtime error on Node details Overview when Machin… #13446
OCPBUGS-23771: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13360
OCPBUGS-24667: Fix plugin proxy handler #13425
OCPBUGS-24474: S2I Build Wizard should check for Containerfile in addition to Dockerfile #13415
Full changelog

console-operator

OCPBUGS-21029: Bump library-go and golang.org/x/net #850
OCPBUGS-23968: Disable route controller health check for NLB setup #817
Full changelog

coredns

OCPBUGS-28200: UPSTREAM: 6277: openshift: Fix OCPBUGS-28200 #114
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

manage-security-groups: Only add SGs to LB members (#2455) #2455
Fix protocol case mismatch (tcp vs TCP) (#2320) #2320
Get IP addresses of neutron subports (#2306) #2306
Make manage-security-groups work with OVN (#2291) #2291
Delete sgs on reconfiguration (#2305) #2305
Optimize applyNodeSecurityGroupIDForLB() (#2293) #2293
Remove unused manila code (#2299) #2299
Use instanceIDFromProviderID() function (#2302) #2302
Remove filtering by device_owner. (#2304) #2304
Allocate array capacity in advance (#2297) #2297
Corrected the grammar (#2301) #2301
Delete unused SG rules with manage-security-groups (#2287) #2287
Improved the grammar in sidecarcompatibility.md (#2292) #2292
Added comments and arranged the variable names (#2290) #2290
occm cinder-csi securityContext (#2286) #2286
fixed Grammatical mistakes in barbican-kms-plugin (#2289) #2289
efactors and enhances the codebase of the cinder csi plugin (#2288) #2288
Wait for LB to be ACTIVE on HM update (#2280) #2280
(barbican-kms-plugin)Refactor and enhance Barbican KMS plugin codebase. (#2278) #2278
Fixed the typo in the load balancing section in the README (#2232) #2232
Fix image tag in manila csi e2e test (#2244) #2244
enable secret injection and common annotations (#2264) #2264
Update to gophercloud 1.4.0 (#2265) #2265
Replace call to Nova os-interfaces with direct Neutron call (#2250) #2250
add secret enabled option (#2239) #2239
Fix CSI spec versions (#2254) #2254
LoadBalancers: Remove dead SG code (#2248) #2248
Make ensureSecurityRule() safely idempotent (#2249) #2249
shrink image, remove unnecessary utils (#2233) (#2238) #2233
Doc: update statement about neutron lbaas removeal (#2236) #2236
add environment variable for timeout (#2235) #2235
Increase timeout for LB to get to ACTIVE state (#2223) #2223
Ignore proxies when calling Nova Metadata (#2218) #2218
add priorityClassName to openstack-cloud-controller-manager helm chart (#2210) #2210
Do not default Octavia provider to “octavia” (#2208) #2208
retry ubuntu image download on temp error (#2507) #2507
update k8s.io/kubernetes to v1.27.8 in go.mod (#2497) #2497
fix: octavia tlsContainerRef validation for barbican secrets (#2460) #2460
Full changelog

csi-driver-manila-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #219
OCPBUGS-23443: Fix selector for manila-csi-driver-controller-metrics service #211
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28952: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
OCPBUGS-25069, OCPBUGS-26309, OCPBUGS-26323: add snyk config file for SAST scan #163
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28957: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
OCPBUGS-26312: add snyk config file for SAST scank #97
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29433: cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142
Full changelog

docker-builder

OCPBUGS-28949: Replace ‘coreydaley’ with ‘sayan-biswas’ #379
Full changelog

docker-registry

OCPBUGS-29604: vendor: bump distribution to fix azure storage path bug #394
Full changelog

etcd

OCPBUGS-28733: Rebase etcd 3.5.12 openshift 4.14 #244
OCPBUGS-24939: Rebase etcd 3.5.11 openshift 4.14 #235
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
Full changelog

hyperkube, pod

Address CVE #12
OCPBUGS-30964: Set up CEL IP/CIDR library from 4.14 onwards #1913
OCPBUGS-29662: Update to kubernetes 1.27.11 #1890
OCPBUGS-27347: UPSTREAM: <carry>: Update management webhook pod admission logic #1855
OCPBUGS-27369: Update to kubernetes 1.27.10 #1860
OCPBUGS-25813: Fix uncertain device in 4.14 #1830
UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 #1552
OCPBUGS-26006: Update to Kubernetes 1.27.9 #1838
Full changelog

hypershift

OCPBUGS-23914: Added OLMCatalogPlacement option to the CLI #3229
OCPBUGS-30211: set Konnectivity cipher suites #3679
chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3756
NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596: Bump golang.org/x/net to version v0.17.0 #3711
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782: use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094: Make ControllerAvailabilityPolicy immutable #3534
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084: Reduce the policy access scope to specific instance #3530
OCPBUGS-29206: Add GC knobs for KAS #3543
OCPBUGS-29187: node spread anti-affinity for HA HCP #3541
OCPBUGS-19956, OCPBUGS-28984, OCPBUGS-28985, OCPBUGS-28986, OCPBUGS-29000: Support Disconnected HCP #3520
OCPBUGS-29030: Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238: consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526: Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526: Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072: Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180, OCPBUGS-20547: Added network validations #3096
OCPBUGS-23997: add watch for HCP pullsecret to HCCO #3265
OCPBUGS-28249: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485
NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315: Add prestop to konnectiviy server #3268
OCPBUGS-24307: Set shutdown-delay-duration to 15s #3264
OCPBUGS-21795: change trusted bundle volume mount for CPO #3102
OCPBUGS-25217: Konnectivity agent update strategy #3308
OCPBUGS-26574: Set new condition on SG deletion. #3398
Update RHTAP references (release-4.14) #3402
Update RHTAP references (release-4.14) #3383
OCPBUGS-22360: Validate accessTokenInactivityTimeout >= 300s #3175
OCPBUGS-23936: Use correct kubeconfig in CCM and remove CCMs access t… #3232
OCPBUGS-12720: Updating hypershift images to be consistent with ART #2467
OCPBUGS-24627: unset ServiceAccount on ignition-server-proxy #3295
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24665: Add Snyk file to exclude vendor directory on scan #65
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-27279: Add Snyk file to exclude vendor directory on scan #76
Full changelog

insights-operator

Add linting recommendations (#904) #904
gather etcd_server_slow metrics (#902) #902
Full changelog

ironic

OCPBUGS-27773: Update inspector package to fix LLDP unicode error #452
OCPBUGS-27193: Fix Inspector iPXE config for IPv6 addresses #448
OCPBUGS-19884: update Ironic to include secure boot fixes #445
Full changelog

ironic-agent

OCPBUGS-29454: Always add ignition to set hostname on /etc/hostname #109
OCPBUGS-28554: Update to latest ironic-python-agent for bugfixes #107
OCPBUGS-25685: Relax packages requirements #103
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-30861: Bump golang.org/x/net to v0.18.0 #36
Full changelog

machine-api-operator

OCPBUGS-28745: Set –max-concurrent-reconciles=10 for Azure machine controller #1217
OCPBUGS-28745: Add AddWithActuatorOpts to allow overriding Machine controller options #1214
OCPBUGS-24998: Add Snyk file to exclude vendor directory on scan #1191
Full changelog

machine-config-operator

OCPBUGS-30992: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266
OCPBUGS-30872: add static pods for rbacproxy #4258
OCPBUGS-30107: annotate on-prem static pods for workload partitioning #4230
OCPBUGS-30225: set nodeStatusReportFrequency #4242
OCPBUGS-29290: AWS: Always persist the existing node name on 4.14 #4215
OCPBUGS-20039: Add v6-primary dual stack support to VSphere UPI #3956
OCPBUGS-29457: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187
OCPBUGS-26072: Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379: fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384: daemon: allow the user to override drains on IR changes #4150
OCPBUGS-27759: Add Image Credential Provider flags for Kubelet on AWS #4144
[OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178: use *resource.Quantity to not automatically set 0 #4121
OCPBUGS-23089: Don’t retry node-ip show in resolv-prepender #4022
OCPBUGS-27362: Fix typo in AWS node env unit #4131
OCPBUGS-26500: crio: drop automatic image cleanup on upgrades #4105
OCPBUGS-26559: Azure Run ovs-configuration.service before dnsmasq.service #4109
OCPBUGS-26551: kubelet: fix kubelet labels #4107
Full changelog

machine-image-customization-controller

OCPBUGS-24576: configurable ironic agent vlan creation #111
Full changelog

monitoring-plugin

OU-318: consider all metric keys to display all results on dashboards tables #99
OCPBUGS-24664: disable query link for non metric-based alerts #82
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27858: Enable reconciler configuration 4.14 #240
OCPBUGS-26553: Cherry pick fix assignment 4.14 #230
Full changelog

oauth-apiserver

OCPBUGS-21100: bump k8s.io (release-4.14) #100
OCPBUGS-27116: UPSTREAM: <carry>: retry etcd Unavailable errors #97
Full changelog

oc-mirror

Fix to ensure operator not found error exits with correct status (#797) #797
OCPBUGS-28871: Capability to override default channel (#749) (#790) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#769) #769
OCPBUGS-23327: Fix MirrorToDisk of oci catalogs in hidden folders (#766) #766
Full changelog

olm-catalogd

OCPBUGS-27585, OCPBUGS-27670: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #40
Full changelog

olm-operator-controller

OCPBUGS-27590, OCPBUGS-27675: [release-4.14] bump github.com/go-git/go-git/v5 to v5.11.0 #69
OCPBUGS-22616: [release-4.14] Bump go.opentelemetry.io dependencies #58
Full changelog

olm-rukpak

: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
Full changelog

openshift-apiserver

OCPBUGS-27104: UPSTREAM: <carry>: retry etcd Unavailable errors #412
Full changelog

openshift-controller-manager

OCPBUGS-28950: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
OCPBUGS-26460, OCPBUGS-26461: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-30775: [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) #715
OCPBUGS-29192: [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686
OCPBUGS-29194: Retry failing unpack jobs #689
NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 #674
OCPBUGS-27314: Don’t sync namespaces that have no subscriptions #675
OCPBUGS-27565, OCPBUGS-27570, OCPBUGS-27650, OCPBUGS-27655: bump go-git/v5 to 5.11.0 #677
OCPBUGS-27485: [CARRY] SSC RBAC #665
OCPBUGS-22538: bump otelhttp to 44.0 for api #647
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-29342: AdminPolicyBasedExternalRoute CRD failing to watch and reconcile routes for later pods #2076
OCPBUGS-29606: Update HostNetworkNamespace address_set for remote zone nodes #2091
OCPBUGS-28726: Update netpol namespace address sets usage to the old ways #2068
OCPBUGS-28819: Support Permanent Session Affinity #2046
OCPBUGS-29231: [release-4.14] Separate timeout for handler sync from informer sync & do not resync services during node tracker startup #2061
OCPBUGS-29186: Wait for ovnkube controller to start before checking result error. #2067
OCPBUGS-29207: Ignore hybrid-overlay nodes from EgressIP controller #2062
OCPBUGS-25999: Prevent multiple encap-ips per single chassis #2037
OCPBUGS-28789: Fix LGW ETP=Local on IPv6 #2042
OCPBUGS-27925: dont quit if node does not have subnet annotation #2026
OCPBUGS-27256: Ensure session affinity cleanup on backend removal #2021
OCPBUGS-23395: Egressfirewall use port groups #1956
OCPBUGS-27243: CARRY: Updates owners and adds Surya #2019
OCPBUGS-25081: Update ACL syncer: make default deny acls filter more strict, #1981
OCPBUGS-26568: Synchronize node primary address update #2012
OCPBUGS-24326: APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field #1967
OCPBUGS-25903: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2003
OCPBUGS-25746, OCPBUGS-25747: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1996
OCPBUGS-24320: APB status not updated when fails to process during the first reconciliations #1968
OCPBUGS-23257: Update leaderelection config to allow retries #1955
Full changelog

powervs-block-csi-driver

OCPBUGS-25980: Rebase with upstream: Fix snyk code issue: Path Traversal #72
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58
OCPBUGS-25715: snyk: ignore vendor dir #60
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-30015: fix: convert continue field between v1beta1 and v1alpha1 #279
Full changelog

tests

OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28647
OCPBUGS-29928: Only extract node role from properly formatted node-role label #28616
OCPBUGS-29182: updated timeout to 3 seconds to account for network timing issues #28578
OCPBUGS-29034: Replace ‘coreydaley’ with ‘sayan-biswas’ #28574
OCPBUGS-26044: Adding test case for when exceed openshift.io/image-tags will ban to … #28493
Full changelog

vsphere-csi-driver-operator

OCPBUGS-25657: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #203
OCPBUGS-24224: Explicitly degrade the cluster when conditions are not met #194
OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #186
Full changelog

vsphere-problem-detector

OCPBUGS-24401: Use failure-domains and other changes from master #142
OCPBUGS-21812: Warn usernames without domain name #134
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github