4.14.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.53-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-master-ci-4.14-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Succeeded periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.49, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.55, 4.14.10, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.4, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.48, 4.14.49, 4.14.5, 4.14.7, 4.14.8, 4.14.9

Loading changelog, this may take a while ...

Changes from 4.14.33

Created: 2025-06-26 10:09:06 +0000 UTC

Image Digest: sha256:c71d99a4996a4d09e5005a0045a7de7b3fe316080e5fc3a26619f7010dd70d0e

Components

Kubernetes upgraded from 1.27.15 to 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202407091253-0 to 414.92.202506201415-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 8ba0b37a sha256:0c0d88475a2d26416257a4bce48dfd4e40686e884c9811e7cf81e1ebd6dcf689
alibaba-cloud-csi-driver git 3dc363d3 sha256:ddb588c2e8cf447261b531dae88dd12a8bcf7b4e75dfa35dc643baf4ed9c26a8
alibaba-disk-csi-driver-operator git 8853e6ef sha256:5e88440e86af0cfa2905b8574a0cbb601972dc4ef5085b0480b32b0ae1bb03b6
alibaba-machine-controllers git 27f105d3 sha256:c9e55a90def35b03c7e6cc154746fdd2f6583f05a3f154a3bd93275ef733f749
aws-ebs-csi-driver-operator git 609879c3 sha256:1de2115729b1697755ff766074be0263462849e410fa535b281a31c780cc187a
aws-machine-controllers git e292817c sha256:578a2cea8e43da80bbfd5d3178f81530755f25caeb5b21ab2c3f3ca9d167d7db
aws-pod-identity-webhook git 2c864ca0 sha256:ba1a93ca1f6c5d1fade923f0c3aae64293ee2fc1413669b8a2aa7dc4d5ea7061
azure-disk-csi-driver git 6d3558a3 sha256:076358d4ecb5e1b3a97118a309f13c6af3d909c2941e54df8480a0a34950a411
azure-disk-csi-driver-operator git 91893576 sha256:9fb77f57874ff2c771731b02aa19d61272b6e24b2369ed75f73fe9e6b313e8d7
azure-file-csi-driver-operator git 4469d805 sha256:0a10e245e22ce7a136400f817bd4a5da77a5abd2136da57e0699d6e32e9791a0
cloud-network-config-controller git 1bd04641 sha256:daa79d07801022a1305efe54bc4cfffc82c37484e8934d5bf3123b0b43ab73c3
cluster-authentication-operator git 9203d4d5 sha256:7e6cb84038e7b530402850533d60a22cec475b00aa28571842a980c3439eb425
cluster-autoscaler-operator git 32854baa sha256:3201d25e27cbdfff865306de347b322081861c3143a363148d959b11f75f815c
cluster-bootstrap git 93fba13f sha256:20df445c1370161c2d6c2331d46300d235242929381c4cce45f7f535c73e8f1b
cluster-capi-controllers git ae83c553 sha256:545f0b9a8267abee2ab95d3d35ed0cf1f0a694f1a8fd7cb842019fbbcc7059f5
cluster-cloud-controller-manager-operator git a0b9c0d7 sha256:9c15b2c10ca116050295069cfcbf061dd23f25e542a7be98a108e2329d7abc53
cluster-csi-snapshot-controller-operator git d4a11625 sha256:d0ae445146f05f35e4d3e691349bfb8c5e486bc5154940f838d9b3f50b269b1f
cluster-kube-cluster-api-operator git b287d08b sha256:c3270f3cba51fe77b763943b61d950b651ca3f064bf7f846497f3f89a083af4e
cluster-kube-controller-manager-operator git 4e059638 sha256:1ae0b007f4849c9af0f900c7573d90b9c6bf6a5012e7b92b3a29580fecf91543
cluster-kube-scheduler-operator git 33f630dc sha256:203e4def1b3e5e336d5a65d3669978ba1ca97d4ac3a51ebc958278ff4cb781dd
cluster-kube-storage-version-migrator-operator git 9cd9922a sha256:511292c4693d753ccf77c6ccf45318e11eb8fe3d414befbaffe38ecfbec76ed9
cluster-olm-operator git 0dbbb613 sha256:a90143f057ac01301fe07e3bf77f3c2c1a27c4579515d4710c2c186dbbe48557
cluster-openshift-apiserver-operator git 700dc111 sha256:f9d45d823c28061aae53f3628d718e2bc5b3fc5b06e9b2de045ed956970b1118
cluster-platform-operators-manager git 08fb27e7 sha256:a0eaf686c2afbd44d1ff0e36b24b33fb7df06fb178f12f26d23165bc347b093e
cluster-policy-controller git 219f6f6f sha256:f32b23ee3667effde0487f3a8c7d66d8fdc78ee14dad5df21d2d7638fd6063d2
cluster-storage-operator git 6c652a5e sha256:4193c7d07ee60678bf91e628d87697bc349c5eab6f464259d2de7059334e9e76
configmap-reloader git 716a0c33 sha256:5a9ed0f3db64a3535e1dee43e336c21f22e80dd9ad7a92c359c94169b4f01342
console-operator git e5d3f291 sha256:fa879b2f5a463452facdafb4cb47b5589bcf1cfed0f3af9d126be09009ba569c
csi-driver-manila-operator git d93a218f sha256:92c32888c9f54f90361eafdc5299cbd7bd486d2cf2c7d95a2784228644e9741a
csi-driver-nfs git e1dd4537 sha256:8514db63ea5c803fdf5f61b0a5cc319144655d55119bb394f7ff7fa28deb7fd2
csi-driver-shared-resource git 9232c1ff sha256:77eac357ec90882810e75bb35ce6e3b6d95ad6b8f3ba5042698c6e6fd570f49c
csi-driver-shared-resource-operator git c273cd52 sha256:aebe07f9dc54a95ce06213d1df6edae4e0a8ec08e97659720a14b15374f27006
csi-driver-shared-resource-webhook git 9232c1ff sha256:e206df2764bf311ecc622b1de4f1d567655c23fb8e34c1bcf86ae40f93c0b28f
csi-external-attacher git 06e8ce0d sha256:77ebd3774dac4e35487ef2c436e9ff51751ce0036bd66d8abd8cc35efdb5f03a
csi-external-provisioner git e18ed7f0 sha256:429b57a859bf00ce5845576d0ad37e06e6f3a4a16ca935047ecce2b0c6407a91
csi-external-resizer git 59a701a4 sha256:486f112c962568d5e547ca6537c52c7e20150e1b5da9cddefaf09cd0faf710a7
csi-external-snapshotter git a6834536 sha256:9f325f7371d79667abca0c7a06bb6acee1b3cf1a4e08357c0adccfaa489775d9
csi-livenessprobe git a9bcbde1 sha256:cd2294cad9d50adc470a125501713f80e20bb830483b8868e3ee739f71a0732b
csi-node-driver-registrar git 9dcaa7f5 sha256:5ac3beddb21dd73429e48981f9c7d9738187669e4ff084feb8ce2e6d74320e54
csi-snapshot-controller git a6834536 sha256:d1ee270d71857c5e934022fd86421892f2ae1c25cbcfe65b290fb3bab54b5fed
csi-snapshot-validation-webhook git a6834536 sha256:aaa08ef2ba726d990803984a9c5c65b48e1f0e29ce8a283b17762c2fb93da534
docker-registry git f03c2404 sha256:29d0baeb9403da3591bee276af7aa425f1d028a6af2a2523e04a2f885238093b
driver-toolkit git cafed17b sha256:8ca5192d10b438e42102219cc54611fa39b11708948826f523db054c57a2e758
etcd git 5ed5044c sha256:8efbe92b2da814febf26aebed0539f138708391e1c790a1fcc4f0d15ed628c4a
gcp-cloud-controller-manager git 09e96a91 sha256:0d4d2f3dc0a4026b29cf28804cebe50e96ffb04ddbf76c30eacf93d4b295c2c0
gcp-cluster-api-controllers git d99fb31a sha256:c053d608b0fa29b892d5c49a88f54055b46ec84c554d700063bdcb0a6ab6bd20
gcp-pd-csi-driver git 8a626fe5 sha256:aa209002bfda9e88da4695b69a88163ecf46bdfd1495e0a59e1424ce21ddb701
gcp-pd-csi-driver-operator git 95d55a04 sha256:114f237b729638b4f5ac6cfee454af8096d695ea1e1095daf3830c99dc0e10a2
haproxy-router git c3a2430c sha256:8e6ffa011d11dcafd1f87858ec69e2694fe663ffb403a815ae946a2b96f704b3
ironic-machine-os-downloader git 7b56c306 sha256:cccee44edc795c1b8481b75d68a3f0c8e164ae2f785ef4c831cdc1d2215d670c
k8s-prometheus-adapter git 801a912b sha256:d40c8158f84b61c8d545e766f769c35e4adb1324d6644f2c635b60699d829222
kube-state-metrics git db0c5499 sha256:b503a4e2d32b7174e5690a36676b4e1c52d4a3d23dd66810968e81d99a73f974
kube-storage-version-migrator git 8558e14a sha256:8618864b98618d00e479b2ad514afb564a1c87479aa90152dac66f7a833a540d
kubevirt-cloud-controller-manager git 7d96f56d sha256:a1e5319f7f63a11207c826fce9b54a30ba4d89544df02c9fb13df7da69915143
kubevirt-csi-driver git 48fafc4a sha256:bfeec5802eb2264b256aa96c1e4590465e2aeda8efb0b29d0e6bbdc7f16d6b1e
kuryr-cni git 8926a294 sha256:c4ae4c0a34a4e06f82e3d34bad4ee9d95dc996df4046f393e403348d17b4955a
kuryr-controller git 8926a294 sha256:a3fe580313aae4e151812ae816dce59b2680ce382c80541808107fdd36aad8a0
libvirt-machine-controllers git 34dfccba sha256:1749b2d10a86124951ba71c839ec69ff456ab8b6ea479b48357999c66d3c7456
machine-image-customization-controller git 2a6627ba sha256:7843452949004bcdf4db65da8cb3cfb813778b751712b46b2e9b25fddb4146dd
machine-os-content sha256:b40fe2e78b6098e66b59695f8e9b4b8fb48f3acdf4b68bfcc5042cfbbb93780a
network-interface-bond-cni git 29f61f6b sha256:46f1d5d64cf98fff87b465de7e7e0cf22765eaaeccdd38ebd33da48cd5fd526c
network-tools git e79d8173 sha256:3ebb54caf6e4222d1d7950bd8fc5ea6b4d785c83e360764405d62603dce88c69
oauth-proxy git a4a2f270 sha256:ee546508dba3e4a084662e985f3ee7d64c990c5aee7fd0c4e6859fa86d7e5435
oauth-server git 35f4739f sha256:d82b6b939c8a032f0e1d6da6463dd1e3aa2aea61c85add6b0011d73543060e46
olm-catalogd git a333cb0b sha256:b014ee432e388cc12293f5dbc7896d05b0516e46fb2d1fbc03ee184134c81d84
olm-operator-controller git fb6fb278 sha256:5e8eea619870427ecb96d48e7028647e36d079087913578788f55c38c99ee70f
olm-rukpak git c9409c62 sha256:f2442e36170f724a3a0b7d8870edf6c7010d98fa7317894f6164851f9605e2f4
openshift-state-metrics git dff4b0f4 sha256:0b4d38bebabd982fea8ffbae8ed05f213ec9dfe7c38f3fb8e1f2d9cfd4aaf24c
openstack-cinder-csi-driver-operator git 1713e971 sha256:175720b58706d47c609f028df670a0ca954be4b99b531696fb1d7fe1d249021c
openstack-machine-api-provider git 51f8e4d6 sha256:47375713fe84d83f8e265f5f3ec5c96085cb536837d5cd74c9c80539cb3afe75
ovirt-csi-driver git f21b470f sha256:94e17af6c9c5a4aa56ab612003686ddf572f79567fec4f5a9dbeb65017cb7f58
ovirt-csi-driver-operator git 2fa33aa7 sha256:b996892dafce83ad189a7af5d0fd09b77a01cf0da34a69bfd72f8756c8f1d7c1
ovirt-machine-controllers git 5d708631 sha256:c377e9fcee5e2c4fe843571b0df66e04b8220188fff4063c4364337c3d5b6291
powervs-block-csi-driver-operator git 7436369a sha256:71ead2c21bc828ebb2ee42cb609910a3d6d2c8754c514d36dd801ffa6d13a7be
prom-label-proxy git af40ed09 sha256:5147a4b1a7eeff02b12fac0fa074867a727391cbaf87a78d706c6faccd6413d7
prometheus-alertmanager git e3725166 sha256:760f432dce0728dd0655bf5b8c0aa20b767d6d1432f93dc03999dbaabcfb4e04
prometheus-config-reloader git a4b845a7 sha256:3032a0c75906d4e9c60c9ca64180d338a597cb25e7a6fcbe054369cb63c4d6c2
prometheus-node-exporter git 5ee0a9d9 sha256:47abaafd253256a4ea2e444c6c6ec0b2ae56d4751aa18041e76c912bcd4f6443
prometheus-operator git a4b845a7 sha256:7369b36fab28f734fde6b8c7cbefdb08c00a70a4b0e97480339a6a3f6aad3a43
prometheus-operator-admission-webhook git a4b845a7 sha256:721ed1da01d79c7973648714b8955a9d048d372a4930a57ba35ddb8047106346
rhel-coreos sha256:e0b5cb32b8cf01a1f7aaa74c2e877feb1a830708fd6c92f1ebf14db6398503e3
rhel-coreos-extensions sha256:f9adf90036c4e67b7109e2db634ec5d169db287bdcfee4a1e6ee488d2c9fc552
route-controller-manager git 1a5e72f4 sha256:e8800421f25f68cfe9aab7c3e6a6fe670b5322070bdbedc4f5db8074a817bbeb
service-ca-operator git 3c3f82f7 sha256:765ba6c2e48ac90855931f5bc48eaee523e7d6dba328f052233435c88cf420b2
telemeter git 1f726816 sha256:29a85a0f2a1fe34aa8cd6bceab9c22fc3c40344ed7069ca54b1d5371efdd45d8
thanos git a2671250 sha256:bf4c858e17dd70843fcadd6ce84bfd30a3fbb69d8ec1fb6c7bb1bdbfc54f3114
vsphere-cluster-api-controllers git b5346ad9 sha256:94019579a438713388031479f2f79b0787e91d30250f1c21278182b5003cc20a
vsphere-csi-driver-operator git 5d5105f9 sha256:72dc1fb5161e67764e6827a48d08497b351225a3e66f9e527fcddfc82e1aecda

agent-installer-api-server

OCPBUGS-53691: Bump jwt to 4.5.2 in release-4.14 (#7499) #7499
OCPBUGS-46941: OCPBUGS-46184: Bump golang.org/x/net to 0.33.0 (#7200) #7200
OCPBUGS-15346, OCPBUGS-15347: Update version go-http-metrics and gin-gonic/gin (#6899) #6899
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53715: Bump jwt to 4.5.2 in release-4.14 (#1093) #1093
Bump golang.org/x/net to v0.33.0 (#1012) #1012
OCPBUGS-15347: Update version go-http-metrics/gin (#933) #933
Full changelog

agent-installer-node-agent

OCPBUGS-53707: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) #973
OCPBUGS-46955: Bump golang.org/x/net to 0.33.0 (#885) #885
OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#709) #709
Full changelog

agent-installer-utils

OCPBUGS-25727: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.14 #34
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
Full changelog

aws-cloud-controller-manager

OCPBUGS-38786: Ensure that addresses are added in network device index order #93
Full changelog

aws-cluster-api-controllers

OCPBUGS-44295: [release-4.14] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #533
Full changelog

aws-ebs-csi-driver

OCPBUGS-35123: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #271
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-57111: Adds acr-credential-provider spec file and build script #144
OCPBUGS-23829: Bump otelgrpc to v0.49.0 #124
Full changelog

azure-cluster-api-controllers

OCPBUGS-36023: Update go-retryablehttp to v0.7.7 #313
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failures #95
OCPBUGS-41164: bump mount-utils to treat ENODEV error as corrupted mount #79
Full changelog

azure-machine-controllers

CFE-1050: Added support of capacity reservation group #109
Full changelog

azure-workload-identity-webhook

OCPBUGS-53795: github.com/golang-jwt/jwt/v4 v4.5.2 #35
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55193: data/manifests/bootkube/cvo-overrides: Default to eus-4.14 #9643
OCPBUGS-54323: Update upi references to api-internal #9609
OCPBUGS-54264: IBMCloud: Move to IBM TF openshift fork #9605
OCPBUGS-54260: vsphere-fix convert if only provided name #9602
OCPBUGS-52996: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9587
OCPBUGS-53210: PowerVS: remove system pools #9572
OCPBUGS-46606: Power VS: Create region-zone-sysType hierarchy #9331
OCPBUGS-48196: IBMCloud: Ignore failed VPC regions #9350
OCPBUGS-45464: add chrony.conf file when additional NTP sources are configured #9269
OCPBUGS-43505: Stop rendering networks.config CRD #9105
OCPBUGS-42285: Add AWS r8g to arm tested instance types #9050
OCPBUGS-42848: add tested instance type for IBMCloud #9082
OCPBUGS-25508: Update Golang SSH package version update to 0.17.0 #8992
OCPBUGS-39411: Added yq to ci image #8943
OCPBUGS-36180: baremetal IPI without provisioning network failing on provisioning-interface.service #8712
OCPBUGS-36089: [release-4.14] bump go-retryablehttp for CVE fix #8658
OCPBUGS-37183: ic: fix typo in warning message #8771
OCPBUGS-37068: update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 #8748
OCPBUGS-36748: Add yq-v4 to the upi-installer image for CI #8684
Full changelog

baremetal-machine-controllers

OCPBUGS-46643: Bump x/net to 0.33.0 #228
Full changelog

baremetal-operator

OCPBUGS-53337: BMO can expose any secret via BMCEventSubscription CRD #409
OCPBUGS-38940: [OCP] Ability to disable agent power off after deployment #374
Full changelog

baremetal-runtimecfg

OCPBUGS-37502: Fix handling of ELB Node IP detection #324
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-35475: Remove some of newapp unit tests relying on external deprecated images #1802
Full changelog

cloud-credential-operator

OCPBUGS-53418: github.com/golang/glog v1.2.4 #845
OCPBUGS-53819: update github.com/golang-jwt/jwt #841
OCPBUGS-51542: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #830
OCPBUGS-47069: golang.org/x/net v0.33.0 #810
OCPBUGS-46487: Add AWS region to aws-pod-identity-webhook #801
OCPBUGS-45009: Add retry to ccoctl gcp create functions #791
OCPBUGS-45004: github.com/golang-jwt/jwt/v4 v4.5.1 #785
OCPBUGS-43647: Only attempt timed token credentials on supported platforms. #775
OCPBUGS-43339: Update github.com/sirupsen/logrus v1.9.3 #769
OCPBUGS-41236: List secrets in batches to avoid api timeout #755
OCPBUGS-38378: Update google.golang.org/grpc v1.65.0 #750
OCPBUGS-37823: GCP passthrough permissions check to ignore problematic permissions. #741
OCPBUGS-37062: Update cloud.google.com/go/storage v1.43.0 #742
OCPBUGS-37420: SNYK ignore go-client misreporting #739
OCPBUGS-37276: Update to azidentity v1.7.0 #732
OCPBUGS-36029: IBM/go-sdk-core update to v5.17.4 #721
OCPBUGS-36716: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #713
Full changelog

cluster-autoscaler

OCPBUGS-45150: [release-4.14] VPA: Update OWNERS file #327
OCPBUGS-40925: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #316
Full changelog

cluster-baremetal-operator

OCPBUGS-31977: bump x/net to 0.23.0 #438
OCPBUGS-22943: Add tls-cipher-suites to baremetal-kube-rbac-proxy #379
Full changelog

cluster-capi-operator

OCPBUGS-37974: fix: sort CredentialsRequest manifests after namespace #194
Full changelog

cluster-config-operator

OCPBUGS-44095: Backport SDN live migration #425
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48211: Add unreadyNodeGracePeriod for allowing brief node hiccups #340
CFE-1087: API Bump for capacity Reservation #319
Full changelog

cluster-dns-operator

OCPBUGS-52500: [release-4.14] Add runbook_url for CoreDNSErrorsHigh #433
Full changelog

cluster-etcd-operator

OCPBUGS-53507: fix CVE-2025-30204 #1405
Full changelog

cluster-image-registry-operator

OCPBUGS-51598: bump golang.org/x/oauth2 #1213
OCPBUGS-51312: ensure that storage names don’t end in dashes #1185
OCPBUGS-44048: fix proxy config and leader election test flakes #1153
OCPBUGS-44002: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1152
OCPBUGS-42935: azureclient: stop validating credentials when creating the client #1137
OCPBUGS-39100: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1114
Full changelog

cluster-ingress-operator

OCPBUGS-36467: Allow operator to update Route spec.subdomain #1101
OCPBUGS-36555: Implement connect timeout tuning option #1105
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50662: Increase waitForFallbackDegradedConditionTimeout #1807
Full changelog

cluster-machine-approver

OCPBUGS-46057: Ensure trailing dots on DNS names do not block serving cert auth #259
OCPBUGS-46057: Client internal DNS checks should ignore trailing dot #255
OCPBUGS-44774: Client internal DNS checks should be case insensitive #246
Full changelog

cluster-monitoring-operator

OCPBUGS-48368: Add new metrics for OpenShift logging telemetry #2556
OCPBUGS-44007: fix(monitoring-plugin): disable emitting nginx version on error pages #2520
OCPBUGS-43916: Add runbook url for TelemeterClientFail… #2510
OCPBUGS-43678: Remove temporary no more needed code #2496
OCPBUGS-42603: Exclude windows nodes from kubelet servicemonitor #2489
OCPBUGS-41916: filter alerts sent to Telemeter #2473
OCPBUGS-39176: Backport #2441 for 4.14 #2449
OCPBUGS-37468: Backport of PR #2384 #2433
OCPBUGS-36565: add runbook_url annotations #2407
OCPBUGS-37296: Making sure proxy settings are correctly forwarded in the generated remote write configs #2415
Full changelog

cluster-network-operator

OCPBUGS-51170: Use applyconfigurations for updating network.oprerator status #2660
OCPBUGS-48323: Pass transit_switch_subnet options in ovnkube-node pod for single-zone #2617
OCPBUGS-42754: Set mount propagation to HostToContainer for /var/lib/kubelet #2521
OCPBUGS-47320: Pass transit_switch_subnet options in ovnkube-node pod #2607
OCPBUGS-43821: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2546
OCPBUGS-39086: Fix wait logic for IPsec certificate signing request #2481
OCPBUGS-41508: Tighten the permissions on whereabouts.conf #2493
OCPBUGS-42021: Add proxy env vars to onvkube-node #2505
OCPBUGS-38440: [release-4.14] 4.14 subnet config #2473
OCPBUGS-37221: Ensure that the node-identity webhook address contains colons for IPv6 #2440
OCPBUGS-38073: Fix IC distributed control plane alerts #2463
OCPBUGS-37468: Backport ipsec state metric #2444
OCPBUGS-32706: Add conditions for ignored-namespaces #2380
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1276) #1276
Fix context deadlines in ExecCommandOnPod() (#1272) #1272
OCPBUGS-44506: Drop sched_migration_cost_ns setting (#1215) #1215
OCPBUGS-44283: right-hand-side profile_dirs take precedence (#1210) #1210
OCPBUGS-42567: Add cluster-wide proxy env file (#1176) #1176
TuneD prior to kubelet in one-shot mode (#1137) #1137
OCPBUGS-37754: Remove tuned/rendered object (#1133) #1133
OCPBUGS-37734: Backport fix for OCPBUGS-36355 (#1126) #1126
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48841: Add new team members to the OWNERS file #380
OCPBUGS-33295: Update opentelemetry to mitigate CVE-2023-47108 #344
Full changelog

cluster-samples-operator

OCPBUGS-55655: Adding mutex to func createSamples on handler.go #635
OCPBUGS-54537: add rhdmalone to owners #624
OCPBUGS-49421: add shannon and aroyoredhat as owners #598
Full changelog

cluster-update-keys

OCPBUGS-43628: keys: Update Red Hat keys to use SHA256 signatures #66
Full changelog

cluster-version-operator

OCPBUGS-50592: Set openshift.io/required-scc: privileged annotation in version pods #1151
OCPBUGS-45331: deps: bump golang.org/x/net to 0.31.0 #1120
OCPBUGS-44704: Fix desired before sync_worker’s work is initialized #1109
Full changelog

console

OCPBUGS-57099: Add all files to vendor regardless of gitignore #15135
OCPBUGS-55942: fix bug where operator appears twice #15033
OCPBUGS-55427: Add missing pipelines plugin name to known plugins #15005
OCPBUGS-39010: fix crash if helm chart metadata is nil #14198
OCPBUGS-53437: Show Observe section without PROMETHEUS and MONITORING flags #14892
OCPBUGS-54404: Update the monitoring topic used by the console team #14910
OCPBUGS-54167: fix run time error when no completed version exists #14899
OCPBUGS-51118: redirect to correct alert #14823
OCPBUGS-49753: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14711
OCPBUGS-46603: Unable to remove finally tasks in pipeline builder mode #14642
OCPBUGS-33145: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14370
OCPBUGS-45323: Use vCenterCluster value from CM as primary resource #14574
OCPBUGS-39368: Remove deprecated resources from spec of the Pipeline #14230
OCPBUGS-45283: Add IBM Block Storage CSI driver support for RWX #14569
OCPBUGS-44791: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14518
OCPBUGS-42962: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14386
OCPBUGS-43000: List of default Camel K event sources disappears when adding a custom event source #14388
OCPBUGS-36558: Increase login flow state paramater length/entropy #14439
OCPBUGS-10337: Updating openshift-enterprise-console images to be consistent with ART #12760
OCPBUGS-42518: The filepath including leading slash makes error during parsing devfile using Gitlab #14342
OCPBUGS-42517: Values entered into the Instantiate Template form are automatically cleared #14341
OCPBUGS-42757: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14369
OCPBUGS-38883: Fix password set to Secret created through Start Pipeline form #14184
OCPBUGS-37353: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #14108
OCPBUGS-41836: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14281
OCPBUGS-39389: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14231
OCPBUGS-41581: Increased max nodes limit to 200 in topology page #14262
OCPBUGS-38972: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14234
OCPBUGS-38053: fix BMH restart annotation #14109
OCPBUGS-33748: Fix Pipeline details page with when expression using CEL expression #13856
Full changelog

container-networking-plugins

OCPBUGS-56046: Check error returned by ipv6 SettleAddresses #193
OCPBUGS-46121: [4.14] cherry-pick containernetworking/plugins#997 #168
Full changelog

coredns

OCPBUGS-37467: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #126
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-52413: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #315
Full changelog

docker-builder

OCPBUGS-42915, OCPBUGS-43297: Bump buildah to 1.33.12 #447
OCPBUGS-43190: runc library bump to 1.1.12 #438
OCPBUGS-48495: skipping some unit tests to avoid failures as they are duplicate #430
OCPBUGS-48477: Add team members to the OWNERS file #429
BUILD-854: Add adambkaplan as approver #404
Full changelog

egress-router-cni

OCPBUGS-35143: update to go 1.19 and k8s.io mods to v0.27.4 #87
Full changelog

gcp-machine-controllers

OCPBUGS-56194: Disable shielded VMs for non-UEFI disks #118
Full changelog

hyperkube, pod

OCPBUGS-39413: Return from EnsureHostInPool on all NIC errors #2073
: OCPBUGS-38959: Upstream: 115702 kubelet: output log even file is rotated #2060
NO-JIRA: update downstream owners #2051
OCPBUGS-37623: Bump to Kubernetes v1.27.16 #2043
Full changelog

hypershift

OCPBUGS-57321: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 #6252
OCPBUGS-55936: [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… #6129
CNTRLPLANE-921: Konflux build pipeline service account migration #6080
CNTRLPLANE-921: Konflux build pipeline service account migration #6085
OCPBUGS-51802: Fix golang crypto dependency go.mod replacement #5996
OCPBUGS-53899: bump golang-jwt v4 #5909
OCPBUGS-53433: Prevent IgnitionServer from flooding the API server with patch requests #5878
OCPBUGS-51731, OCPBUGS-51802: Bump dependencies to OCP fork in backports #5899
Red Hat Konflux update control-plane-operator-4-14 #5953
ART-11792: update go mod dependency for konflux #5921
OCPBUGS-53314: Fix IsIPv4 function identifying also addresses instead of CIDRs #5867
OCPBUGS-45559: Add Network Policies for Konnectivity server and Ignition server proxy #5816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 #5730
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5725
chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5687
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 #5681
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5688
OCPBUGS-50700: add region to AWS creds passed to operators managed by CPO #5668
NO-JIRA: Red Hat Konflux update control-plane-operator-4-14 #5339
OCPBUGS-47630: Separate CPO containerfiles #5619
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 #5538
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 #5537
OCPBUGS-49405: add ValidIDPConfiguration condition to report IDP config issues #5520
NO-JIRA: chore: update konflux references & bump up go version to 1.20 #5517
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) #5444
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) #5430
NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net #5372
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) #5331
NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) #5330
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned #5308
OCPBUGS-44279: Configure OAuth https proxy to dial cloud endpoints directly #5067
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) #5162
NO-JIRA: chore(deps): update konflux references (release-4.14) #5145
NO-JIRA: chore(deps): update konflux references (release-4.14) #5121
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) #5105
NO-JIRA: Update Konflux references (release-4.14) #5100
chore(deps): update konflux references (release-4.14) #5076
NO-JIRA: chore(deps): update konflux references (release-4.14) #5055
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.14) #5056
NO-JIRA: Update Konflux references to fedcfe0 (release-4.14) #5043
chore(deps): update konflux references (release-4.14) #5026
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.43 (release-4.14) #5021
chore(deps): update konflux references to f53fe54 (release-4.14) #5020
NO-JIRA: Update Konflux references (release-4.14) #5011
OCPBUGS-41701: cmd: report server version, supported OCP #4718
NO-JIRA: chore(deps): update konflux references (release-4.14) #4975
OCPBUGS-43688: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4964
chore(deps): update konflux references (release-4.14) #4953
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.14) #4948
OCPBUGS-43368: Let payload generation pick the release for the NodePool #4913
NO-JIRA: chore(deps): update konflux references (release-4.14) #4934
NO-JIRA: chore(deps): update konflux references to 66f551f (release-4.14) #4924
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.14) #4917
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.14) #4910
NO-JIRA: chore(deps): update konflux references (release-4.14) #4898
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.14) #4879
NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.14 #4851
OCPBUGS-42533: enable audit log for oauth-openshift #4822
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.13 (release-4.14) #4794
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.14) #4828
NO-JIRA: chore(deps): update konflux references (release-4.14) #4813
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.14) #4805
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.14) #4788
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.14) #4758
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.14) #4784
OCPBUGS-41374: CPO oauth idp converter: resolve names before dialing #4763
NO-JIRA: chore(deps): update konflux references to 5ac9b24 (release-4.14) #4783
chore(deps): update konflux references to 2c3426a (release-4.14) #4773
NO-JIRA: chore(deps): update konflux references (release-4.14) #4757
OCPBUGS-42221: Make guest cluster components use the correct KAS port #4753
OCPBUGS-38060: Add HTTP konnectivity proxy to OAuth server #4498
OCPBUGS-38066: [release-4.14] Use HTTP proxy for ingress controller #4724
NO-JIRA: Security fixes for openshift-ci-security job #4752
OCPBUGS-42184: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4747
OCPBUGS-41506: fix: bump google.golang.org/protobuf #4687
HOSTEDCP-1957: bump go-jose version #4698
OCPBUGS-39378: Set KCM node monitor grace period #4659
chore(deps): update konflux references (release-4.14) #4683
OCPBUGS-39183: fix: bump github.com/IBM/go-sdk-core/v5 #4626
NO-JIRA: Add PodDisruptionBudget for router deployment #4692
NO-JIRA: Revert “Merge pull request #4661 from jparrill/bp-4.14/OCPBUGS-24308” #4667
NO-JIRA: PDB backports #4661
NO-JIRA: Konflux migration 4.14 #4648
OCPBUGS-39230: set proxy envvars on aws CCM #4638
OCPBUGS-38791: Let the CPO oidc check resolve through data plane #4617
NO-JIRA: Flaky cert validation test #4633
HOSTEDCP-1897: [release-4.14] Allow setting Kube APIServer maximum requests in flight #4553
OCPBUGS-37076: Fixed audit-logs sigterm failing to terminate gracefully #4369
OCPBUGS-38624: remove weak ciphers from security profile #4575
OCPBUGS-37173: Add newline after TLS certs referenced by image.config #4471
OCPBUGS-37172: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4490
OCPBUGS-36944: [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4360
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4473
OCPBUGS-37175: Delete IDMS in dataplane once HCP ICS field is removed #4472
NO-JIRA: Konflux mce-2.4 pipeline fixes #4464
NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4288
NO-JIRA: [release-4.14] test/e2e: remove api budget checks #4438
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned #4363
Full changelog

ibm-cloud-controller-manager

OCPBUGS-23861: Bump otelgrpc to v0.49.0 #73
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53907: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #86
OCPBUGS-36065: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #73
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36071: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #122
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-53539: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #46
OCPBUGS-36011: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #42
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36077: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.14 #88
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36083: Bump dependency for CVE #57
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1059) #1059
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1058) #1058
Add haproxy metric (#999) #999
Add missing permission for GatherClusterIngressCertificates (#984) #984
OCPBUGS-37673: Ingress controller related certificates’ validate dates gathering (#976) #976
Full changelog

ironic

OCPBUGS-48147, OCPBUGS-48594: Bump jinja2 to 3.0.1-6.el9.2 #625
OCPBUGS-43954, OCPBUGS-43962: Bump python-waitress [4.14] #607
OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #571
OCPBUGS-32266: redfish-virtualmedia fails on XFusion nodes #548
OCPBUGS-37762, OCPBUGS-39382: Include fixes for CVE-2024-44082 #584
OCPBUGS-38508: set min version for python3-webob #555
OCPBUGS-33375: bump werkzeug #537
OCPBUGS-37410: bump jinja2 #530
OCPBUGS-37115: Update eventlet version #524
Full changelog

ironic-agent

OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #158
OCPBUGS-39382: Include fixes for CVE-2024-44082 #163
OCPBUGS-33375: set webob and bump werkzeug #151
Full changelog

ironic-static-ip-manager

OCPBUGS-49890: Fix subnet validation #50
Full changelog

keepalived-ipfailover

OCPBUGS-30414: update unit tests in egress/dns-proxy #173
Full changelog

kube-proxy, sdn

OCPBUGS-54991: Handle openshift-host-network namespace as special when it modifies #655
OCPBUGS-46536: Bump openvswitch #647
[Release 4.14] OCPBUGS-43484: NP-1092: backport SDN live migration #631
Full changelog

kube-rbac-proxy

OCPBUGS-31971: bump golang.org/x/net [4.14] #108
Full changelog

machine-api-operator

OCPBUGS-53296: add image/read permissions #1350
OCPBUGS-48245: VSphere: Handle cloned instance with lost taskID #1322
OCPBUGS-47659: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1318
OCPBUGS-43821: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1303
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1260
Full changelog

machine-config-operator

OCPBUGS-57341: Do not enable on-prem-resolv-prepender.path for UPI #5114
OCPBUGS-43743: Soften haproxy timeout for kubeapi probe #4664
OCPBUGS-54228: Update ObservedGeneration in KubeletConfig #4950
OCPBUGS-50631: Add clarification to invalid maxUnavailable alert #4848
OCPBUGS-48801: Wait for all subcontrollers #4808
OCPBUGS-46057: Remove trailing periods from AWS provided hostnames #4747
OCPBUGS-45271: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4725
OCPBUGS-42111: Do not use ‘restart’ for ‘oneshot’ service #4622
MCO-1278: Backport Telemetry to 4.14 #4672
OCPBUGS-43981: Panic seen in CI job for MCC pod #4671
OCPBUGS-43980: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4673
OCPBUGS-37552: On-Prem resolv prepender to watch for NM changes #4500
OCPBUGS-35322: Decrease logs of haproxy #4405
OCPBUGS-32258: Log network service output to console #4320
OCPBUGS-38371: Revert “MCD-pull: run after network-online.target in Azure” #4526
OCPBUGS-37769: Move StartLimitIntervalSec to Unit section #4521
OCPBUGS-30794: Mount /run/nodeip-configuration into coredns containers #4253
OCPBUGS-37483: Remove weights from ingress check script #4485
OCPBUGS-37738: Openshift uncordoned compute-node that was intentionally cordoned #4502
OCPBUGS-36915: Use NM’s dns-change event for resolv.conf #4473
OCPBUGS-37223: Copy RHEL9 binaries used in HCP #4479
Full changelog

machine-os-images

OCPBUGS-54171: Change rhcos release browser url #59
Full changelog

monitoring-plugin

OCPBUGS-44392: fix cross-spawn vulnerable dependency #278
NO-JIRA: [release-4.14] OU-179: Fix the root cause of externalLabels not present on alerts #244
OCPBUGS-44137: upgrade dompurify dependency #243
OCPBUGS-43243: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.14 #219
Full changelog

multus-admission-controller

OCPBUGS-42048: Update owners #91
Full changelog

multus-cni

OCPBUGS-48160: [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket #262
OCPBUGS-35578: Update owners file #243
Full changelog

multus-networkpolicy

Update owners (#62) #62
Full changelog

multus-route-override-cni

OCPBUGS-42049: [release-4.15]Update owners #60
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55620: Fixes leftover podref issue #367
OCPBUGS-42047: Update owners #311
OCPBUGS-37815, OCPBUGS-37817: [release-4.14] align api calls timeout and skip pods marked for deletion #309
OCPBUGS-36722: Return previous IP allocation for add cmd #296
Full changelog

must-gather

OCPBUGS-42971: Collect etcd object count #457
OCPBUGS-48084: Update owners #475
OCPBUGS-48058: Support gathering IPsec data #472
OCPBUGS-43058: [Backport 4.14] Multus is now a Pod and will be captured by normal #451
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#100) #100
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-23873: fix for CVE-2023-47108 #43
OCPBUGS-17304, OCPBUGS-20899: bump golang.org/x/net to v0.17.0 #39
Full changelog

nutanix-machine-controllers

OCPBUGS-17305: bump golang.org/x/net to 0.17.0 #85
OCPBUGS-29549: IPI install fails on Nutanix when using DHCP #70
Full changelog

oauth-apiserver

OCPBUGS-31982: bump x/net to 0.24.0 #110
Full changelog

oc-mirror

changes the owners file (#1013) #1013
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1023) #1023
Full changelog

openshift-apiserver

OCPBUGS-50477: Pass expected type to deploymentconfig/scale object validation. #497
OCPBUGS-32445: bump(x/net) to v0.23.0 #429
Full changelog

openshift-controller-manager

OCPBUGS-57940: Set node-pullsecrets volume to read-only to protect image pull credentials #398
OCPBUGS-56951: Empty proxy variables are causing issues during the build #386
OCPBUGS-48480: Add team members to the OWNERS file #360
NO-JIRA: cleanup root and app OWNERS #349
OCPBUGS-32869: replaces deprecated square/go-jose wtih go-jose/go-jose #342
OCPBUGS-41951: Add adambkaplan as approver #334
[release 4.14] OCPBUGS-33288: Update opentelemetry dependency #295
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46927, OCPBUGS-46934, OCPBUGS-47314: x/net bump to v0.34.0 [release-4.14] #941
OCPBUGS-46595: CRD upgrade existing CR validation fix (#3442) #921
OCPBUGS-45080: SSA for Services and ClusterRoleBindings #905
OCPBUGS-42828: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #878
OCPBUGS-41872: Fix e2e flake: upgrade CRD with deprecated version #865
OCPBUGS-42150: (fix) registry pods do not come up again after node failure (#3366) #872
OCPBUGS-42017: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #869
OCPBUGS-38544: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #842
OCPBUGS-36949: [CARRY] perform operator apiService certificate validity checks directly #821
OCPBUGS-37016: Bump github.com/containers/image/v5 #824
OCPBUGS-36452: Can’t install operator on 4.15 after uninstalling it on a prior version #811
Full changelog

operator-marketplace

OCPBUGS-49427: Upgrade golang.org/x/net [release-4.14] #589
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-57102: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 #2590
OCPBUGS-56420: Update to FDP25.A.1 24.03.5-40. #2574
OCPBUGS-48522: Let OVN-northd bind remote ports #2418
OCPBUGS-54732: Dockerfile.base: bump OVS version to 3.3 #2511
OCPBUGS-50584: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2455
OCPBUGS-45096: pin libreswan to 4.6-3.el9_0.3 #2368
OCPBUGS-44784: Bump ovs to 3.1.0-137 #2360
OCPBUGS-44793: Delete EgressIP LRP stale nexthops when node is not found #2361
OCPBUGS-42944: Fix egress gateway pod cleanup for remote zone pods. #2356
OCPBUGS-44379: Revert “Pin libreswan to the known working version 4.5” #2344
OCPBUGS-42952: pin libreswan to the known working version 4.5 #2323
OCPBUGS-42986: Add subnet overlap check for transit switch subnet #2317
OCPBUGS-38263: [release-4.14] Bump OVSDBTimeout and make it configurable #2275
OCPBUGS-38073: Fix registering northd metrics on appropriate nodes #2249
OCPBUGS-37197: [release-4.14] ovspinning: Set affinity of each thread #2236
OCPBUGS-36253: EgressIP: Reload certificates for the grpc heatlhcheck server #2213
OCPBUGS-36554: Handle IP fragments in SGW mode #2219
OCPBUGS-36703: Bump ovn to 23.09.4-16 #2222
Full changelog

powervs-block-csi-driver

OCPBUGS-36095: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #90
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36105: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.14 #75
Full changelog

powervs-machine-controllers

OCPBUGS-41978: Update go.mod to fix CVE - 4.14 #86
Full changelog

prometheus

OCPBUGS-43670: fix(discovery): Handle cache.DeletedFinalStateUnknown … #239
Full changelog

tests

OCPBUGS-55747: [build] Ensure Git Clone Does Not Run Privileged #29758
OCPBUGS-54770: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29665
OCPBUGS-52583: Use payload pullspec for image info test #29591
OCPBUGS-51363: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29567
OCPBUGS-51044: Add/remove team members to the OWNERS file for Builds #29554
OCPBUGS-44107: Adjust createDNSPod() to support hypershift dual-stack test #29256
OCPBUGS-39137: Bump timeout for the pod-network-service endpoints check #29062
OCPBUGS-38365: add Proxy config #28998
OCPBUGS-36800: Removes dependency on samples operator images #28952
#28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28792
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-23889: Bump otelgrpc to v0.49.0 #70
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-51045: Prevent node cache update during attach & detach #139
Full changelog

vsphere-problem-detector

OCPBUGS-38347: Drop event when CheckDefaultDatastore fails #171
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github