4.14.37

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.37-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.37, 4.13.39, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.25, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.31, 4.14.32, 4.14.33, 4.14.4, 4.14.5, 4.14.6, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

4.15.33 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.14.26

Created: 2024-09-16 17:48:10 +0000 UTC

Image Digest: sha256:14e6ba3975e6c73b659fa55af25084b20ab38a543772ca70e184b903db73092b

Components

Kubernetes upgraded from 1.27.13 to 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202405132100-0 to 414.92.202409041930-0 (diff)

Rebuilt images without code change

agent-installer-csr-approver git 5d64ad00 sha256:454fc9bb27d066fcb0f663b97a5f6cc90e09a9afde6a6b1397f05e01ae9fabcb
agent-installer-orchestrator git 5d64ad00 sha256:4fd45a8906c485ceeb56967327f70d0e9a128e37b48b57ad8d2d4bf5db29f938
agent-installer-utils git ad853769 sha256:b594c2175f09d6a58188f5e924deebafee76683bbd17422352cb87a3b32cebc2
alibaba-cloud-controller-manager git 8ba0b37a sha256:8a84cd05e78388cb32d6fab30a14a3736e8f23cff9c9e8e438ed6c448fec026c
alibaba-cloud-csi-driver git 3dc363d3 sha256:d507cf4dde410e911959651f97a0eacda1a2af332c81eb6f72785311a7218d27
alibaba-disk-csi-driver-operator git 8853e6ef sha256:50981da83a3fbb8585ee7137ab2851e1324f21b8fc18429149cd09adc1de83c2
alibaba-machine-controllers git 27f105d3 sha256:86f2a7ebd426d1bc3547ae2305115705937b95165b1ca0aa61f96edc522b396f
apiserver-network-proxy git a3c0e6b7 sha256:8413a927a0dfd1417a76c6ce8a8158ae21a36dad076261465668f3a41ffd0446
aws-ebs-csi-driver-operator git 609879c3 sha256:7280ddff2170bfbadf95b385f386f3a2c5f728632e21c35a1e2437971066d1b8
aws-machine-controllers git e292817c sha256:0feae1d0bb3be4ee95905aebf6cdfd418912e3757d3533ebca233c5a67b9d0c2
aws-pod-identity-webhook git 2c864ca0 sha256:5faba80971b57770bca45a545081dc12da5915883b8eca6a00e7553b432ab893
azure-disk-csi-driver-operator git 91893576 sha256:6fecab0d7605cfb0bc32adc76a75ec610cec705c16f7f1d9ba211fb79875c472
azure-file-csi-driver git f28a5072 sha256:3da7f2a7261720499bdd45e5fc451bfb546fc46b91c53f49c85a3a611179a9e7
azure-file-csi-driver-operator git 4469d805 sha256:ac556f254053b68b4b24595a3ad55d6be144e4b2a1084f29abbb160fc6465c56
azure-workload-identity-webhook git bcb88d94 sha256:553e3f3871976c142c1eba1bd435dec280bcb779b211a2eee25ac5bf6322998e
baremetal-machine-controllers git fb20cdac sha256:11c01f06a2867ff772bd75204be772b6ebff4a990f12b69b5c97de71bccad0d2
cluster-authentication-operator git 9203d4d5 sha256:908a790492f66597b462fe8d9309bab83e5dc3a9ff7c03fe0bf998526b20628d
cluster-autoscaler git 9d87281f sha256:e3bab8c77c859a96049dc55f1aabec8fb2d85f05a76f2c80594e751f2b7d4f7a
cluster-bootstrap git 93fba13f sha256:4ca39bc6c27abf145a9be328ad329d506b55926aa594e0191ba6fbcb33dc463f
cluster-capi-controllers git ae83c553 sha256:c82feb7990a9bc9ae5718c8ea3bc67da71050909e12ec29634ab63ea9e2bf1da
cluster-config-operator git 91fa980a sha256:97f1d2ced4788f0c6c0707f3a52fd25f75fb9708d3a43a85bfafcf272234dd6d
cluster-csi-snapshot-controller-operator git d4a11625 sha256:b593f26c9d4a5d156474f35b4a24631b3a2d0e607afdd5726c24ff06a77d057f
cluster-kube-cluster-api-operator git b287d08b sha256:ee1c1e67b8df1882a9015b96039f6f00aa3184753bed80c7fcc448553545b97f
cluster-kube-controller-manager-operator git 4e059638 sha256:2d4d587e68cd7053d8ae67232ca18c6830caf26e2809218744ddf507ef5f2505
cluster-kube-scheduler-operator git 33f630dc sha256:b5e0205cd7fdb943d695d8dab9e36f3eada1f17ac7b51c082202dc6b2a29015a
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:aeaa6e37fc81ed83bc40d911159608fe267f0d53bdf61192888240be0e4c373c
cluster-machine-approver git 711b4f6e sha256:eed8435b25a5ea03ca829b573b94211bf021c9109e9592857aaa1ec49d98ed3b
cluster-olm-operator git 0dbbb613 sha256:1dd311d9806b1d46c47383659d2f435a5f47190df155793ff4f402db7777784c
cluster-openshift-apiserver-operator git 700dc111 sha256:7dfb8e4de6a38b2e9433c82038b0b6c788e056c913de47c8d2498b2a423d08dd
cluster-platform-operators-manager git 08fb27e7 sha256:7b115ce31ac50c2ef29fedf73b7e505c61764b18caa765b560e409c0cba59468
cluster-policy-controller git 219f6f6f sha256:80f0655a2af0bf779eebf21a23c73d856cf354103266c7529f7385a8bcaa8a20
cluster-samples-operator git 61a34659 sha256:3768a056d0cc62928fbb3583e474ffba590596e4deb9eddc2eac636b0ef67eea
cluster-storage-operator git 6c652a5e sha256:ad70993f0c2d82b4fb76bd771e1944a644c93c2739de5aeeadcd3b093e900d9c
cluster-update-keys git e0c26a08 sha256:e35e18dae33f9e5992c9b54d0bfbc0b24e754f1a7c003ccee1b4488c0f9cabef
cluster-version-operator git af210dc6 sha256:dc3debfd952d0758d709a873dc5072f39d6f38299d153816eed8752a6bf6ea9f
configmap-reloader git 716a0c33 sha256:050ddd463bf282bf3689b6da98838e2dd65e85040265c82aea50c4f261ee49fd
container-networking-plugins git bab8a4f7 sha256:ddba97a22e5572c083a1f04d548e9c6d1431eda17441582c45f6c626ef825fa5
csi-driver-manila git 697083a8 sha256:c59557131583b8ba46fde388a3910544b2038ee5a6016bcbae492b4efc38d3e6
csi-driver-manila-operator git d93a218f sha256:9a44bdaf9a79786e6fa300cad636d36cb674f54c940b7b1cfea85ae4b79dd3b9
csi-driver-nfs git e1dd4537 sha256:5e6e3ab51dc2a6ee46794885678f300c485c27f9859b79649c971d4a96a1b1f9
csi-driver-shared-resource git 9232c1ff sha256:b483e7d1dc6901a22c611449fe5912bd1b8053c4d004bc3259dc22802e782c91
csi-driver-shared-resource-operator git c273cd52 sha256:8544028f89cef8f05d47684cdc8be2dba877994673cd619049d66f2af3643295
csi-driver-shared-resource-webhook git 9232c1ff sha256:452ae58bb7839d6c0b67b8a0d4711c9a736685ea47fc1e37ad350f8462a0ea90
csi-external-attacher git 06e8ce0d sha256:abb50ef9f2674ed92bab341b61c45e3e99253dfa362a2f8b3a818a40790ab23c
csi-external-resizer git 59a701a4 sha256:a8a389eaf4861b9b9076833866fbde39b6dac0c5cba9420941763eaaef0c3e52
csi-external-snapshotter git a6834536 sha256:2c335b41723a104ab8a5100159850ad4c7bd4f47ffb44082ccb572cfb3cfba27
csi-livenessprobe git a9bcbde1 sha256:f4e82176de3dd6a1abeb8e88de337b8aebde7f7f1c70da5616ce5004c1fddbee
csi-node-driver-registrar git 9dcaa7f5 sha256:6b049fdc599e8d046f7db72a08ae98420322ae9bd1375b51e12e0c85f86e41c4
csi-snapshot-controller git a6834536 sha256:d911be33e5b46cef81341b7bbc662e13dcf7f52ea45e57b73e5ebeee7e98b70a
csi-snapshot-validation-webhook git a6834536 sha256:225563d0993bb141ace74a659b84531be8b73f5ccbb2c39eee3d865d0f6960d4
docker-registry git f03c2404 sha256:6eb7500a3e1d14234562e395762eb368123882dd8418cef5cb3df2a54f7c8dd7
driver-toolkit git cafed17b sha256:0f2c1a3a6c23f27a9aed6c66a7360ad6ab7295d3b83eb2b8642600a8c54337f8
gcp-cloud-controller-manager git 09e96a91 sha256:df8186c3f18760aef04d2ca947b7be1f5e26e9ab82273cd402b0573ba1abd090
gcp-cluster-api-controllers git d99fb31a sha256:9a3946a442dd7d3085a15dc7be3d0d8c2182db4512e4618b1f2de067f7552cf5
gcp-machine-controllers git a676e6b6 sha256:9834bc5b8b84585709371ec8f9dbc96278637ab6725a2bf198af93e5811f88b4
gcp-pd-csi-driver git 8a626fe5 sha256:1a6c6dd15064194986bd26b88aba77f3a464bfbf57f06c6fa723246ccd8ae1ef
gcp-pd-csi-driver-operator git 95d55a04 sha256:bce090d8e9ca3a9559c5c431a27c9615d0be199ca9a7f42ac7750f62cbabdb12
ibm-cloud-controller-manager git 446871ff sha256:98fc7cd9ed8b32dfb29f3c6fb5d126be9429568afd5d20e1b03749fc58d30753
ibmcloud-cluster-api-controllers git 004ecde5 sha256:6768e5158da3f477451b44ef45f2db7480b15b97193c9b788e6af853e84b5b98
ibmcloud-machine-controllers git c28b2232 sha256:cbd0b53a126721a43af0cf228df2bc502b62a09658b7c59900aa9b5d6ecf94dd
ironic-agent git 7e82a52f sha256:191221e6282ac55a4ea2190bb8b3881920754e6c40ce9bac9248991be5e0a714
ironic-machine-os-downloader git 7b56c306 sha256:a4772f6fdcea1b6d524087e82caffc6ca70e1295f3f68120106ebb54734c93fd
ironic-static-ip-manager git c038d5a4 sha256:655a2b8f1e6cb80edb81ecaa79f66be169282e0cba35132b058221eb694f3cd1
k8s-prometheus-adapter git 801a912b sha256:46cc3b658880f160b5e5bd7f3fb51360998c82cd9ceaa413b600ccb8611b5137
kube-proxy git 1a9befcb sha256:3863fa7dcd481c4f7c81f0aa90a6aaa68eb3b3fc4ffa14e55f6072a358bcf52e
kube-rbac-proxy git 1a646b98 sha256:7cb7a07aeaa4fbe45e528818dadaee589f3c0fb01644bb8187aba6b565bc90a0
kube-state-metrics git db0c5499 sha256:808c7e0e892fdfa93c7e40a91d422997e16ab5a0a32faa3ce025174d90942a57
kube-storage-version-migrator git 8558e14a sha256:b55360a77894febdbec519b0e579bda6e70a2bdd2b8ad1e94b87ab560dd67e63
kubevirt-cloud-controller-manager git 7d96f56d sha256:0caa3067c7d8ca34ca30c3bcf695066a68d331f9c9336c5eb158d2a29adad7d7
kubevirt-csi-driver git 48fafc4a sha256:70512c910e4aec149ee5085c1a34c2eede3171b3167afc4b4caf23661490ea76
kuryr-cni git 8926a294 sha256:1d69b118ab5c25298e3fa774292647f9b4df4a567b282ddab619b7433c327b09
kuryr-controller git 8926a294 sha256:5a3b6ce9c26dff957fb2677ced1794d8e48e06e16e513d70a060242a4f8539c6
libvirt-machine-controllers git 34dfccba sha256:3f349a8be29c217b389553699aa75b26aafbd6a83bade2179d6fe5378667aaa2
machine-image-customization-controller git 2a6627ba sha256:e8f4de05891cb8a4df5b8985a2a15f9893463e03c154df72c55d25f2efe5ef2d
machine-os-content sha256:514995f55831d625f19cc5d188eb29419a0a49c98273e301c40e67e74dc33470
machine-os-images git d3a4a6c3 sha256:7823117ee6ac74a0fe012e70cabe06ebce9ef1ecd91f02a54a166a63952dacd5
monitoring-plugin git 6fb20810 sha256:78ebad5f78c34540edf40fbbdfaa3efe846b4dd77b26d1964909584815c86586
multus-admission-controller git 5e74b0fa sha256:d18741dcda81568a1c6b4508f8f0d4a4fcc2947f1c6abcf76abbd921102206b1
multus-networkpolicy git cd6eae10 sha256:30af804c0e2c9d6a7a3470477eb86a52c192c80a401ce4898d9c7a8a7f402900
multus-route-override-cni git 078aee5c sha256:b10821f5adfeadce3ba9bdbfe5e8de22eb0860d6439af867c2f8318119c20f0e
must-gather git 833e1de9 sha256:2ae072de711dec29d9a8568e8e31f4fccdd64512737ee5baff636d7da5a1f4f3
network-interface-bond-cni git 29f61f6b sha256:8b645350f02c0edd2b2e23dc2b9459a622f1dfe960a9cfb55519c8dec7e24bba
network-tools git e79d8173 sha256:42e7ccc74a314182dc274d886d7942e77c7013839e665a646a8b2fa743b73750
nutanix-cloud-controller-manager git bc568865 sha256:1287a68c6919708be887c480c110822d5d1d5483decee650c7dd02f179ea84c5
oauth-proxy git a4a2f270 sha256:105307b602ac74649f868e1ea0aab7b8621ea1ecfd58ceca669dcf32f538798e
oauth-server git 35f4739f sha256:c22dec50f2cad85ab26dea95b246324cac20e95bf67bcf74d06144b84251227e
oc-mirror git a0733c17 sha256:11992befd56e4e4d061948caf27b16db38f7d818158a538833edb80cbdb00573
olm-catalogd git a333cb0b sha256:1d83612563cc877ced4b4e262a9dcb832b0f2cc08457604251256c77874ba522
olm-operator-controller git fb6fb278 sha256:2a0e0841734373599a62ddd3a4f408e1c6c66e9825eb0a42b39e152c4f627b02
openshift-state-metrics git dff4b0f4 sha256:82554e959ac8047ef0a93c31282bd68dde1a8f6c663372e08c7ea8d038453ad8
openstack-cinder-csi-driver git 697083a8 sha256:66233c016b78599dc6a26864000fd14aec58748f91444ea9a131f2f1d6d859eb
openstack-cloud-controller-manager git 697083a8 sha256:5e3eb54bbe47c2fdea0c376b4877cab7e9eb260553a84cd5bb979cceca5017c2
openstack-machine-api-provider git 51f8e4d6 sha256:ab004d346b8222cd41e1e6bfee1303753abc0ea2fbdebcfd4249ee80e119f113
ovirt-csi-driver git f21b470f sha256:0c20d679680c18423f310563633a3c382dfad6a5eb6e6933f9c75569c5170cb5
ovirt-csi-driver-operator git 2fa33aa7 sha256:4cacd9c34a143bc0bca7f66e17989a8ace04c6fafd9fe8d41b11359128ca9519
ovirt-machine-controllers git 5d708631 sha256:1354e446ebd2598852f1b2e76bbbb23bf22cef6403fc9d36dd390eef85abd129
powervs-block-csi-driver-operator git 7436369a sha256:6d68a77662d068a16ca19f905152551cc6b7242c22e1255860d7fffdacdabb9f
powervs-cloud-controller-manager git 32c1028e sha256:6266ffccee637e8f72210a771ae289058eb5037bb3e05b4b53ad5c51eab3078a
powervs-machine-controllers git 1a957dae sha256:1cdd1814dc6edc9b7d6f1b1d102995b823a3150b94eab14063c0e35e72f39c2d
prom-label-proxy git af40ed09 sha256:1bfc97902fb043350ae68dc06bbcf0c416af647c8ba424b0b1e4832b8fa8e719
prometheus git b7c61bcb sha256:044daf61b3df0592dfa8115c664410301d3ffe4bdd1d4b53cb6d9faffba8ddae
prometheus-alertmanager git e3725166 sha256:f742c204b5345f11254ec6e78903913a8f90370c04916594a6e2df02478e222e
prometheus-config-reloader git a4b845a7 sha256:e8af3aa1cc7b97d0e53075ed6fb15035a60fcb284b15b9f48d23c22b60001284
prometheus-node-exporter git 5ee0a9d9 sha256:e8d7455046b58dcf817c68cc9eec449d2095b62258c6ab64f7303f133f847702
prometheus-operator git a4b845a7 sha256:f30cb467e1541241b8ae177941f60d0298728ddfc694f1f1f6957ff072487bf8
prometheus-operator-admission-webhook git a4b845a7 sha256:8409297012b22358d163aaa617f35750568b05c45dc5bd57bfa398e2a56d71d7
rhel-coreos sha256:d8bfae1166e8556d3f4e83fb934fef8b41107afccb66f748cd0b6eab806031f3
rhel-coreos-extensions sha256:1e49b4c76c255f76365b8695cca2f1afca25ca3f3fbd2bf3ed5fad57affaebb7
route-controller-manager git 1a5e72f4 sha256:f0d1681049d7ab768447ab83e69654dce8a3ee20ae465e1507a70831a9936fd3
sdn git 1a9befcb sha256:55226a14fab1c834b0f8fca7db7f8d7388c593330e55b99dcb7c0aec72b3b6c9
service-ca-operator git 3c3f82f7 sha256:c4a9b68e8d0a63f38958ce58943f91af02da63fc6d9517f483775815d87238ee
thanos git a2671250 sha256:f5f89dcf205d6f3feacfb7843d28ffb3de895d45a998d9b9672ec123abcb6f5a
vsphere-cloud-controller-manager git b04567f7 sha256:d8fe47470e08dc90867922d8924c7df5afcaa11041d3b58cde438e21c527e880
vsphere-csi-driver-operator git 5d5105f9 sha256:b5cfa99798b7e72cc2cbd0fc865fc8d50d40c85f72cd8ccfa51e74e6f4626284

agent-installer-api-server

OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6416) #6416
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) #6322
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#725) #725
Full changelog

aws-cloud-controller-manager

OCPBUGS-38786: Ensure that addresses are added in network device index order #93
OCPBUGS-32066: update for CVE-2023-45288 [release-4.14] #83
Full changelog

aws-cluster-api-controllers

OCPBUGS-34856: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #516
Full changelog

aws-ebs-csi-driver

OCPBUGS-35123: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #271
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-23829: Bump otelgrpc to v0.49.0 #124
Full changelog

azure-cluster-api-controllers

OCPBUGS-36023: Update go-retryablehttp to v0.7.7 #313
OCPBUGS-35125: Bump x/crypto to v0.24.0 #307
Full changelog

azure-disk-csi-driver

OCPBUGS-35126: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #82
Full changelog

azure-machine-controllers

CFE-1050: Added support of capacity reservation group #109
OCPBUGS-35133: Bump x/crypto to v0.24.0 #112
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-39411: Added yq to ci image #8943
OCPBUGS-36180: baremetal IPI without provisioning network failing on provisioning-interface.service #8712
OCPBUGS-36089: [release-4.14] bump go-retryablehttp for CVE fix #8658
OCPBUGS-37183: ic: fix typo in warning message #8771
OCPBUGS-37068: update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 #8748
OCPBUGS-36748: Add yq-v4 to the upi-installer image for CI #8684
OCPBUGS-35827: If host is offline or disconnected don’t check ver #8634
OCPBUGS-35826: [release-4.14] bump github.com/containers/image for CVE fix #8633
OCPBUGS-35485: [release-4.14] aws: terraform: add spot instance support for masters #8605
OCPBUGS-34024: go.mod: bump aws-sdk-go for ca-west-1 support #8440
OCPBUGS-33401: PowerVS: Add composite_instance to listServiceInstances #8479
CORS-2951: Add deprecation notice for OpenShiftSDN for 4.14 users #8518
OCPBUGS-28611: remove retired serial NCv2 from azure tested instance type list on x86 #7960
OCPBUGS-27394: preserve category name when trying to find tag category #7926
Full changelog

baremetal-operator

OCPBUGS-38940: [OCP] Ability to disable agent power off after deployment #374
OCPBUGS-34814: PreprovisioningImage should not be created on poweroff #359
Full changelog

baremetal-runtimecfg

OCPBUGS-37502: Fix handling of ELB Node IP detection #324
OCPBUGS-35846: Add support for OVN HostCidrs annotation #321
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-35475: Remove some of newapp unit tests relying on external deprecated images #1802
OCPBUGS-35447: bump go-git to 5.11.0 #1799
Full changelog

cloud-credential-operator

OCPBUGS-38378: Update google.golang.org/grpc v1.65.0 #750
OCPBUGS-37823: GCP passthrough permissions check to ignore problematic permissions. #741
OCPBUGS-37062: Update cloud.google.com/go/storage v1.43.0 #742
OCPBUGS-37420: SNYK ignore go-client misreporting #739
OCPBUGS-37276: Update to azidentity v1.7.0 #732
OCPBUGS-36029: IBM/go-sdk-core update to v5.17.4 #721
OCPBUGS-36716: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #713
Full changelog

cloud-network-config-controller

OCPBUGS-34197: Avoid panic when looking up attachedOutboundRule.ID in azure #147
Full changelog

cluster-autoscaler-operator

OCPBUGS-31976: Update x/net to v0.25.0 #322
Full changelog

cluster-baremetal-operator

OCPBUGS-22943: Add tls-cipher-suites to baremetal-kube-rbac-proxy #379
Full changelog

cluster-capi-operator

OCPBUGS-37974: fix: sort CredentialsRequest manifests after namespace #194
OCPBUGS-36369: Revert cluster-api-operator go.sum hash #184
OCPBUGS-35128: Bump x/crypto to v0.24.0 #177
OCPBUGS-35957: Fix gcp providers-list.yaml branch #178
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34556: update azure and ash tolerations on node manager #347
Full changelog

cluster-control-plane-machine-set-operator

CFE-1087: API Bump for capacity Reservation #319
OCPBUGS-35520: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #309
OCPBUGS-35338: Improved debugging of API listing errors #303
Full changelog

cluster-dns-operator

OCPBUGS-5943: Enable topology-aware hints iff nodes in >=2 zones #416
OCPBUGS-5943: Ignore max unavailable for status #400
Full changelog

cluster-etcd-operator

OCPBUGS-34495: return errors in wait-for-ceo #1266
Full changelog

cluster-image-registry-operator

OCPBUGS-36035: go.*,vendor: bump go-retryablehttp #1069
OCPBUGS-33147: azure-path-fix: get client secret from k8s secret #1058
OCPBUGS-34668: pkg/storage/s3: use force path style in favour of virtual hosted style config #1051
OCPBUGS-33409: azurepathfix: check if platform status is nil before accessing it #1033
Full changelog

cluster-ingress-operator

OCPBUGS-36467: Allow operator to update Route spec.subdomain #1101
OCPBUGS-36555: Implement connect timeout tuning option #1105
OCPBUGS-36461: Add Regexp Anchor to TestAll #1098
OCPBUGS-35399: Internal service changed: fix target port logic #1086
OCPBUGS-34973: TestHostNetworkPortBinding: Delete t.Parallel() #1077
OCPBUGS-34410: Don’t add clientca-configmap finalizer if deleting #1063
OCPBUGS-34407: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1061
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-31354: add SNO control plane high cpu usage alert #1707
OCPBUGS-33930: add a controller that reconciles SCCs’ volumes #1681
Full changelog

cluster-monitoring-operator

OCPBUGS-39176: Backport #2441 for 4.14 #2449
OCPBUGS-37468: Backport of PR #2384 #2433
OCPBUGS-36565: add runbook_url annotations #2407
OCPBUGS-37296: Making sure proxy settings are correctly forwarded in the generated remote write configs #2415
OCPBUGS-36416: inject trusted CA bundle into UWM Alertmanager #2402
OCPBUGS-34023: fix KRP permissions for Thanos Querier #2374
OCPBUGS-33585: fix Thanos ruler alert generator url #2345
Full changelog

cluster-network-operator

OCPBUGS-37221: Ensure that the node-identity webhook address contains colons for IPv6 #2440
OCPBUGS-38073: Fix IC distributed control plane alerts #2463
OCPBUGS-37468: Backport ipsec state metric #2444
OCPBUGS-32706: Add conditions for ignored-namespaces #2380
OCPBUGS-36722: update whereabouts crd #2434
OCPBUGS-34885: [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled #2390
OCPBUGS-27925, OCPBUGS-30579: [release-4.14] tighten conditions for the state transitions in IC upgrade #2207
Full changelog

cluster-node-tuning-operator

TuneD prior to kubelet in one-shot mode (#1137) #1137
OCPBUGS-37754: Remove tuned/rendered object (#1133) #1133
OCPBUGS-37734: Backport fix for OCPBUGS-36355 (#1126) #1126
OCPBUGS-33929: Negative net interface name does not reduce queues (#1074) #1074
Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-33295: Update opentelemetry to mitigate CVE-2023-47108 #344
Full changelog

console

OCPBUGS-38972: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14234
OCPBUGS-38053: fix BMH restart annotation #14109
OCPBUGS-33748: Fix Pipeline details page with when expression using CEL expression #13856
OCPBUGS-32499: Fixed some problems in topology Chinese translation text #13779
OCPBUGS-33942: make sure folder is encapsulated with quotas #13869
OCPBUGS-35723: Upgrade Pipeline trigger resources to v1beta1 #13985
OCPBUGS-33558: Display “With Data upload form” in Create PVC drop down once #13840
OCPBUGS-33064: Fix PipelineRun Logs tab navigation #13673
OCPBUGS-33321: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824
OCPBUGS-33635: restrict Masthead logo to max-height to 60px #13847
OCPBUGS-33640: Add visual connector between VMs and non VMs workloads #13848
Full changelog

console-operator

OCPBUGS-31916: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #885
Full changelog

coredns

OCPBUGS-37467: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #126
Full changelog

csi-external-provisioner

OCPBUGS-35112: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #99
Full changelog

docker-builder

CVE-2024: 7387: Prevent Build Inputs “Zip-Slip” #7
Full changelog

egress-router-cni

OCPBUGS-35143: update to go 1.19 and k8s.io mods to v0.27.4 #87
Full changelog

etcd

OCPBUGS-32813: Revert “Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… #265
Full changelog

haproxy-router

OCPBUGS-32634: Properly handle rewrite-target annotation #583
OCPBUGS-33797: Reject routes with MD5 certs #598
Full changelog

hyperkube, pod

OCPBUGS-39413: Return from EnsureHostInPool on all NIC errors #2073
: OCPBUGS-38959: Upstream: 115702 kubelet: output log even file is rotated #2060
NO-JIRA: update downstream owners #2051
OCPBUGS-37623: Bump to Kubernetes v1.27.16 #2043
OCPBUGS-35553: Disable vulncheck #2010
OCPBUGS-35553: Bump k8s 1.27.15 #1992
OCPBUGS-33964: UPSTREAM: 123055: Fix race condition between resizer and kubelet #1973
UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check #1951
OCPBUGS-33712: Bump to Kubernetes v1.27.14 #1970
OCPBUGS-33417: Provide SCC access via RBAC #1965
Full changelog

hypershift

NO-JIRA: PDB backports #4661
NO-JIRA: Konflux migration 4.14 #4648
OCPBUGS-39230: set proxy envvars on aws CCM #4638
OCPBUGS-38791: Let the CPO oidc check resolve through data plane #4617
NO-JIRA: Flaky cert validation test #4633
HOSTEDCP-1897: [release-4.14] Allow setting Kube APIServer maximum requests in flight #4553
OCPBUGS-37076: Fixed audit-logs sigterm failing to terminate gracefully #4369
OCPBUGS-38624: remove weak ciphers from security profile #4575
OCPBUGS-37173: Add newline after TLS certs referenced by image.config #4471
OCPBUGS-37172: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4490
OCPBUGS-36944: [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4360
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4473
OCPBUGS-37175: Delete IDMS in dataplane once HCP ICS field is removed #4472
NO-JIRA: Konflux mce-2.4 pipeline fixes #4464
NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4288
NO-JIRA: [release-4.14] test/e2e: remove api budget checks #4438
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned #4363
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.21.10-1.1719562237 (release-4.14) - abandoned #4326
NO-JIRA: Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.4-1134 (release-4.14) - abandoned #4325
OCPBUGS-36518: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4315
OCPBUGS-36159: Generate default worker security group rules based on machineCIDR #4270
OCPBUGS-35549: Restrict image registry overrides to control plane component #4223
OCPBUGS-35365: fix router on 4.14 y-stream upgrade #4205
NO-JIRA: chore(deps): update konflux references (release-4.14) #4257
OCPBUGS-35401: Fix disconnected metadata inspection for nodepool #4208
OCPBUGS-35482: Add TrustedBundles to OAS container #4216
OCPBUGS-35290: [release-4.14] Backport etcd defrag #4189
NO-JIRA: chore(deps): update konflux references (release-4.14) #4248
OCPBUGS-35183: add AWS STS URL to OIDC provider audiences #4179
NO-JIRA: hack: make the e2e script generic #4201
chore(deps): update konflux references to 2be7c9c (release-4.14) #4225
NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
OCPBUGS-34856: [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
NO-JIRA: Remove CLI inspection of release image #4061
OCPBUGS-33713: Reconcile over ICSP/IDMS #4059
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
OCPBUGS-33844: Fix disconnected metadata inspection #4049
OCPBUGS-33843: Recycler-pod image now points to the OCP Payload reference #4048
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36065: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #73
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36071: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #122
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36011: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #42
Full changelog

insights-operator

Add missing permission for GatherClusterIngressCertificates (#984) #984
OCPBUGS-37673: Ingress controller related certificates’ validate dates gathering (#976) #976
OCPBUGS-36475: properly encode the URL for the advisor links (#962) #962
OCPBUGS-36380: Collect aggregated Prometheus Alertmanager instances (#960) #960
Full changelog

ironic

OCPBUGS-33375: bump werkzeug #537
OCPBUGS-37410: bump jinja2 #530
OCPBUGS-37115: Update eventlet version #524
Bug OCPBUGS-34657: Disable installation of .pyc files through pip #512
Full changelog

keepalived-ipfailover

OCPBUGS-30414: update unit tests in egress/dns-proxy #173
Full changelog

machine-api-operator

CFE-1051: Adding web-hook validation for capacityReservationGroupID #1260
OCPBUGS-31980: Update x/net to v0.25.0 #1236
Full changelog

machine-config-operator

OCPBUGS-32258: Log network service output to console #4320
OCPBUGS-38371: Revert “MCD-pull: run after network-online.target in Azure” #4526
OCPBUGS-37769: Move StartLimitIntervalSec to Unit section #4521
OCPBUGS-30794: Mount /run/nodeip-configuration into coredns containers #4253
OCPBUGS-37483: Remove weights from ingress check script #4485
OCPBUGS-37738: Openshift uncordoned compute-node that was intentionally cordoned #4502
OCPBUGS-36915: Use NM’s dns-change event for resolv.conf #4473
OCPBUGS-37223: Copy RHEL9 binaries used in HCP #4479
OCPBUGS-36776: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4463
OCPBUGS-36593: MCD-pull: run after network-online.target in Azure #4456
OCPBUGS-36356: daemon/update: disable systemd unit before overwriting #4447
OCPBUGS-32472: Delete state files on reboot only #4331
OCPBUGS-33590: ovs-configure: fix vlan_parent calculation #4361
OCPBUGS-34716: If multiple hostnames are returned, use the first one for the Node name #4385
OCPBUGS-17658: Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383
OCPBUGS-33643: Don’t error if the certs.d dir doesn’t exist yet #4362
Full changelog

multus-cni

OCPBUGS-33478: Fix CNI cache update function to prevent nil access #232
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37815, OCPBUGS-37817: [release-4.14] align api calls timeout and skip pods marked for deletion #309
OCPBUGS-36722: Return previous IP allocation for add cmd #296
OCPBUGS-35263: Use IP to identify orphaned allocation to be deleted #289
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#100) #100
Full changelog

nutanix-machine-controllers

OCPBUGS-29549: IPI install fails on Nutanix when using DHCP #70
Full changelog

oauth-apiserver

OCPBUGS-31982: bump x/net to 0.24.0 #110
Full changelog

openshift-apiserver

OCPBUGS-32445: bump(x/net) to v0.23.0 #429
Full changelog

openshift-controller-manager

CVE-2024: 45496: Reduce Capabilities for Non-Build Containers #7
[release 4.14] OCPBUGS-33288: Update opentelemetry dependency #295
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-35337: Correct out-of-bounds check #173
OCPBUGS-34792: Make Cinder CSI Driver Topology feature configurable #162
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-38544: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #842
OCPBUGS-36949: [CARRY] perform operator apiService certificate validity checks directly #821
OCPBUGS-37016: Bump github.com/containers/image/v5 #824
OCPBUGS-36452: Can’t install operator on 4.15 after uninstalling it on a prior version #811
OCPBUGS-31969, OCPBUGS-31970: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #787
OCPBUGS-35230: Unblock CI #771
OCPBUGS-33356: UPSTREAM: <carry>: bump go-jose #743
Full changelog

operator-marketplace

OCPBUGS-32067: update golang.org/x/net for CVE-2023-45288 #565
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-38263: [release-4.14] Bump OVSDBTimeout and make it configurable #2275
OCPBUGS-38073: Fix registering northd metrics on appropriate nodes #2249
OCPBUGS-37197: [release-4.14] ovspinning: Set affinity of each thread #2236
OCPBUGS-36253: EgressIP: Reload certificates for the grpc heatlhcheck server #2213
OCPBUGS-36554: Handle IP fragments in SGW mode #2219
OCPBUGS-36703: Bump ovn to 23.09.4-16 #2222
OCPBUGS-35009: ipv6+all protocols conntrack flush #2199
OCPBUGS-34570: Fix EIP GARP config overwritten by gateway update #2188
OCPBUGS-33721: use a forked version of j-keck/arping that fixes a threading issue #2170
OCPBUGS-34076: Reuse node-subnet from cache if exists #2177
OCPBUGS-34405: [release-4.14] dns: fix deadlock in case of error #2183
OCPBUGS-33469: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2160
Full changelog

powervs-block-csi-driver

OCPBUGS-36095: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #90
Full changelog

telemeter

OCPBUGS-34830: fix issuer check during JWT authentication 4.14 #539
OCPBUGS-32888: update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 #535
Full changelog

tests

OCPBUGS-36800: Removes dependency on samples operator images #28952
#28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28792
#28745 FIX [release-4.14] OCPBUGS-33022: update egressFWTestE2E image which contains ping binary #28899
OCPBUGS-36464: test/extended: skip etcd leader change check on hypershift #28921
OCPBUGS-35475: Use centos7 tag instead of latest for cmd images tests #28881
OCPBUGS-33417: Provide SCC access via RBAC #28806
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-35136: Bump x/crypto to v0.24.0 #46
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-35138: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #123
OCPBUGS-33798: FailedPrecondition volume does not appear staged #119
Full changelog

vsphere-problem-detector

OCPBUGS-38347: Drop event when CheckDefaultDatastore fails #171
OCPBUGS-35913: Fix missing failure-domains #162
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github