# 4.11.0-0.okd-2022-12-02-145640 Created: 2022-12-03 09:58:55 +0000 UTC Image Digest: `sha256:924958ed5ba93ea9d72e4b5a319d0d4df220edbb891816c106215cbf318a0a40` Promoted from registry.ci.openshift.org/origin/release:4.11.0-0.okd-2022-12-02-145640 ## Changes from 4.11.0-0.okd-2022-10-28-153352 ### Components * Kubernetes 1.24.6 * Fedora CoreOS 411.36.4 ### Rebuilt images without code change * [hypershift](https://github.com/openshift/hypershift) git [73cc743c](https://github.com/openshift/hypershift/commit/73cc743cb787747f75c80db2c287afc8b9d239ac) `sha256:d58de5cf71f4b07e13ac25c65d4b4eecc8eb34670b5b36737dc865c418c9cd5c` ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/e74ffbf509d382c42891884b90a8a9fb82922f5e) * Updating ose-agent-installer-node-agent images to be consistent with ART (#381) [#381](https://github.com/openshift/assisted-installer-agent/pull/381) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b17b06bc7747db4869e53a0e785229278a81dd1e...e74ffbf509d382c42891884b90a8a9fb82922f5e) ### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/ba03552281a83293b5a1020012165db49a5b4fd2) * [OCPBUGS-4185](https://issues.redhat.com/browse/OCPBUGS-4185): Fix nodeService.getVolumesLimit() adding more instance [#213](https://github.com/openshift/aws-ebs-csi-driver/pull/213) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/550e22cf414194c9be7345e9c9e478091fdb602d...ba03552281a83293b5a1020012165db49a5b4fd2) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/25eb7e1c09bf263fd10e538f9272add49be58772) * [OCPBUGS-2501](https://issues.redhat.com/browse/OCPBUGS-2501): Update azure instance types cache [#37](https://github.com/openshift/machine-api-provider-azure/pull/37) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/5fb9ef15d9fbb0d6e58cea5cfcfd92b94d21db68...25eb7e1c09bf263fd10e538f9272add49be58772) ### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/c258fd3a0027ef3fa4ed685e093e044b1d4014cd) * [OCPBUGS-4325](https://issues.redhat.com/browse/OCPBUGS-4325): Service Usage API is required, not optional [#6642](https://github.com/openshift/installer/pull/6642) * [OCPBUGS-4081](https://issues.redhat.com/browse/OCPBUGS-4081): OpenStack: Force JSON content-type in Swift [#6625](https://github.com/openshift/installer/pull/6625) * [Bug 2105331](https://bugzilla.redhat.com/show_bug.cgi?id=2105331): Switch to perform normal marshalling with unknown fields [#6102](https://github.com/openshift/installer/pull/6102) * [OCPBUGS-378](https://issues.redhat.com/browse/OCPBUGS-378): UPI image download govc rate limit failure [#6246](https://github.com/openshift/installer/pull/6246) * [OCPBUGS-2983](https://issues.redhat.com/browse/OCPBUGS-2983): Azure: Fix DiskEncryptionSet regex validation [#6537](https://github.com/openshift/installer/pull/6537) * [Full changelog](https://github.com/openshift/installer/compare/9d1e216a2ac5fede74450d1383c990ecc97c59da...c258fd3a0027ef3fa4ed685e093e044b1d4014cd) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1928ac4250660378a7d8c3430478dfe77977cb2a) * Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect [#1230](https://github.com/openshift/oc/pull/1230) * [Full changelog](https://github.com/openshift/oc/compare/142cb4431e96f510b4ed4c61a13d68cb13a76c3c...1928ac4250660378a7d8c3430478dfe77977cb2a) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a36704a02f087478e726d5ee7fe55ea81625c10b) * [OCPBUGS-2801](https://issues.redhat.com/browse/OCPBUGS-2801): Backport --credentials-requests-dir for ccoctl gcp delete. [#506](https://github.com/openshift/cloud-credential-operator/pull/506) * [OCPBUGS-2883](https://issues.redhat.com/browse/OCPBUGS-2883): Make ccoctl use regional STS endpoint by default [#503](https://github.com/openshift/cloud-credential-operator/pull/503) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/092dab3582026d90cbc46a8334fb2af9d9c22c68...a36704a02f087478e726d5ee7fe55ea81625c10b) ### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/4e1455fd7efeda040065d3aeefb6316b0b308e85) * Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig [#75](https://github.com/openshift/cloud-network-config-controller/pull/75) * [OCPBUGS-4233](https://issues.redhat.com/browse/OCPBUGS-4233): Updating ose-cloud-network-config-controller images to be consistent with ART [#81](https://github.com/openshift/cloud-network-config-controller/pull/81) * [OCPBUGS-3089](https://issues.redhat.com/browse/OCPBUGS-3089): Update OWNERS [#71](https://github.com/openshift/cloud-network-config-controller/pull/71) * [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/fc460d399c370fc15e0a693738674412c923b214...4e1455fd7efeda040065d3aeefb6316b0b308e85) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/bf6c1c328ac39a367417e93c74fcbb3fe8628825) * Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#221](https://github.com/openshift/kubernetes-autoscaler/pull/221) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a25f930393e13789f5ada3933faf09377b53beb4...bf6c1c328ac39a367417e93c74fcbb3fe8628825) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/c5fa43802a55f60843eded25969fb0e3270dd68b) * [OCPBUGS-1762](https://issues.redhat.com/browse/OCPBUGS-1762): add a workaround for a NetworkManager issue [#298](https://github.com/openshift/cluster-baremetal-operator/pull/298) * [OCPBUGS-747](https://issues.redhat.com/browse/OCPBUGS-747): Use machines instead of nodes to detect masters [#307](https://github.com/openshift/cluster-baremetal-operator/pull/307) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2c270a54f68c1622b216ce0cb2ebe7d5f59a63ed...c5fa43802a55f60843eded25969fb0e3270dd68b) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c831f3c2ee3ff0b1d43930d901708f373733a3a1) * [OCPBUGS-2919](https://issues.redhat.com/browse/OCPBUGS-2919): update prometheus alerts [#957](https://github.com/openshift/cluster-etcd-operator/pull/957) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/cfd72128cb0fb90011b325e558592b7555c87eec...c831f3c2ee3ff0b1d43930d901708f373733a3a1) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/6e62cdf082840c085d8305efb205a74cac2c59a0) * [OCPBUGS-1847](https://issues.redhat.com/browse/OCPBUGS-1847): bump aws-go-sdk, adding support for me-central-1 [#801](https://github.com/openshift/cluster-image-registry-operator/pull/801) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/8e2d96fe6105e8681ab6956bf9ad2b74623f8695...6e62cdf082840c085d8305efb205a74cac2c59a0) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f0ed74846785b1c0e6d98d58c245506ac18578d4) * [OCPBUGS-3049](https://issues.redhat.com/browse/OCPBUGS-3049): Update CRLs when they expire [#853](https://github.com/openshift/cluster-ingress-operator/pull/853) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/13f1087adff68067c887f054cb45e182411e232a...f0ed74846785b1c0e6d98d58c245506ac18578d4) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a397875156b940051f9a46be450ac62182512849) * [OCPBUGS-4030](https://issues.redhat.com/browse/OCPBUGS-4030): test: increase timeout when checking remote write metrics [#1821](https://github.com/openshift/cluster-monitoring-operator/pull/1821) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/58d1e5ad06f6a110437f7a19c2f6fa025175453c...a397875156b940051f9a46be450ac62182512849) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4cbcf0da9cb85e79d79136dcb1a00b8e4bd3e359) * Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression [#1638](https://github.com/openshift/cluster-network-operator/pull/1638) * Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation [#1551](https://github.com/openshift/cluster-network-operator/pull/1551) * [OCPBUGS-3911](https://issues.redhat.com/browse/OCPBUGS-3911): SDN: /var/run mount cleanup [#1631](https://github.com/openshift/cluster-network-operator/pull/1631) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/adf2253692d5dd8cc0f3bce8db6397105c08bbcb...4cbcf0da9cb85e79d79136dcb1a00b8e4bd3e359) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/6f3d8ecd2f1fac30ff072d5abe5ec64f3288722d) * E2E fix: Make Nodeselector tests independent (#502) [#502](https://github.com/openshift/cluster-node-tuning-operator/pull/502) * e2e: perfprof: remove broken test (#497) [#497](https://github.com/openshift/cluster-node-tuning-operator/pull/497) * Add ktimer to PAO tuned profile (#510) [#510](https://github.com/openshift/cluster-node-tuning-operator/pull/510) * set RPS for veth on host level only (#508) [#508](https://github.com/openshift/cluster-node-tuning-operator/pull/508) * Filter out copied csvs when removing pao CSV (#496) [#496](https://github.com/openshift/cluster-node-tuning-operator/pull/496) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/cdee3468a2ba0ac8d489c90f3f09299ad24fb2a9...6f3d8ecd2f1fac30ff072d5abe5ec64f3288722d) ### [console](https://github.com/openshift/console/tree/695cf01abe0c6935958ad1f1108eb8146316dc61) * [OCPBUGS-2716](https://issues.redhat.com/browse/OCPBUGS-2716): Update dependencies to the registry library and devfile parser [#12186](https://github.com/openshift/console/pull/12186) * [OCPBUGS-3300](https://issues.redhat.com/browse/OCPBUGS-3300): check that user can patch console operator config in s… [#12240](https://github.com/openshift/console/pull/12240) * [OCPBUGS-2447](https://issues.redhat.com/browse/OCPBUGS-2447): Add checks for pods in hpaPodRingLabel [#12174](https://github.com/openshift/console/pull/12174) * [OCPBUGS-1790](https://issues.redhat.com/browse/OCPBUGS-1790): Use Alertmanager services for user-defined alerts from config [#12104](https://github.com/openshift/console/pull/12104) * [Full changelog](https://github.com/openshift/console/compare/7c4bc36072568448bbf777fd839e942d950a7fa8...695cf01abe0c6935958ad1f1108eb8146316dc61) ### [console-operator](https://github.com/openshift/console-operator/tree/2161b0cfbb0ebf7b7b5f79d5a7fd9568c299612a) * [OCPBUGS-1790](https://issues.redhat.com/browse/OCPBUGS-1790): Retrieve user-defined Alertmanager services from shared configmap [#685](https://github.com/openshift/console-operator/pull/685) * [Full changelog](https://github.com/openshift/console-operator/compare/37891717014775f049d5bf8e2e9206c1ff5d0fa1...2161b0cfbb0ebf7b7b5f79d5a7fd9568c299612a) ### [docker-registry](https://github.com/openshift/image-registry/tree/247ec2e398763f2d95613f18666ad42a5b0f5e15) * [OCPBUGS-1847](https://issues.redhat.com/browse/OCPBUGS-1847): bump aws-go-sdk, adding support for me-central-1 [#349](https://github.com/openshift/image-registry/pull/349) * [Full changelog](https://github.com/openshift/image-registry/compare/33b6d8deec250dcbc1cd1faed11162c3dcd4a116...247ec2e398763f2d95613f18666ad42a5b0f5e15) ### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/13ccef8780beaa079803888088e77bed20898835) * Adding kernel-rpm-macros to the Dockerfile. (#108) [#108](https://github.com/openshift/driver-toolkit/pull/108) * [Full changelog](https://github.com/openshift/driver-toolkit/compare/4e799c0435be94caddd0f19b8cb331f336812a3d...13ccef8780beaa079803888088e77bed20898835) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/56584349e9412bc46cae8fe3107cae21eb7cb69a) * [OCPBUGS-3174](https://issues.redhat.com/browse/OCPBUGS-3174): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1408](https://github.com/openshift/kubernetes/pull/1408) * [Full changelog](https://github.com/openshift/kubernetes/compare/5157800f2a3bc3f81d386ada3e589b8bee25d19c...56584349e9412bc46cae8fe3107cae21eb7cb69a) ### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/65f0da2df14ac53b24145d1082b73fea7c0992cc) * Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#15](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/15) * UPSTREAM: 93: bump golint for go 1.18 [#28](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/28) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/7f8bfe603b003451e370e81502c508f382cf3f94...65f0da2df14ac53b24145d1082b73fea7c0992cc) ### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/8dc2dc0b897ff81a9dee8c1288c943dbb8ad5cce) * [OCPBUGS-4087](https://issues.redhat.com/browse/OCPBUGS-4087): cherry-pick, do not expose ingress path metric when service is nil [#85](https://github.com/openshift/kube-state-metrics/pull/85) * [Full changelog](https://github.com/openshift/kube-state-metrics/compare/896d0003be0a7875110021b2e0fb71d476901eec...8dc2dc0b897ff81a9dee8c1288c943dbb8ad5cce) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/f17d3d412280a9636bfc0e2ee4d611485f087522) * [OCPBUGS-536](https://issues.redhat.com/browse/OCPBUGS-536): vSphere - enable steal time accounting [#1081](https://github.com/openshift/machine-api-operator/pull/1081) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/5ff11276da0145e4d044b5b7746bdbe27c372d65...f17d3d412280a9636bfc0e2ee4d611485f087522) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/60746a843e7ef8855ae00f2ffcb655c53e0e8296) * [OCPBUGS-3882](https://issues.redhat.com/browse/OCPBUGS-3882): Sync controllerconfig anyway if daemon sync fails [#3421](https://github.com/openshift/machine-config-operator/pull/3421) * [OCPBUGS-3807](https://issues.redhat.com/browse/OCPBUGS-3807): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3419](https://github.com/openshift/machine-config-operator/pull/3419) * [OCPBUGS-3756](https://issues.redhat.com/browse/OCPBUGS-3756): daemon: Stop setting I/O scheduler to bfq [#3418](https://github.com/openshift/machine-config-operator/pull/3418) * [OCPBUGS-2730](https://issues.redhat.com/browse/OCPBUGS-2730): Add ephemeral storage to kubelet system reserved args [#3381](https://github.com/openshift/machine-config-operator/pull/3381) * [OCPBUGS-2091](https://issues.redhat.com/browse/OCPBUGS-2091): [release-4.11] TRT-540: Add privileged label to infra namespaces [#3346](https://github.com/openshift/machine-config-operator/pull/3346) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/0854b1512e8e445c235252a76e42043bbfa67512...60746a843e7ef8855ae00f2ffcb655c53e0e8296) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/1c9e8a1efc92ad6457e00b0262adecd93ed3961c) * [OCPBUGS-3687](https://issues.redhat.com/browse/OCPBUGS-3687): use host IPC for the agent container [#70](https://github.com/openshift/image-customization-controller/pull/70) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/9d0dcba72dc5027b4557220dc1ba4d1dc2bf926c...1c9e8a1efc92ad6457e00b0262adecd93ed3961c) ### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/4622af8967b11e31e185a43cefdb91e8b015b9b9) * Bump fedora-coreos-config to latest stable [#487](https://github.com/openshift/okd-machine-os/pull/487) * Bump fedora-coreos-config to latest stable [#477](https://github.com/openshift/okd-machine-os/pull/477) * Revert "manifest: Use cri-o module from Fedora" [#468](https://github.com/openshift/okd-machine-os/pull/468) * [Full changelog](https://github.com/openshift/okd-machine-os/compare/01b5eb62a57a59529d75b086b6bfcc95267192f0...4622af8967b11e31e185a43cefdb91e8b015b9b9) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/60c46df6ef2fd9f77e5d3cca4cbfd8e9986c5fd7) * [OCPBUGS-2809](https://issues.redhat.com/browse/OCPBUGS-2809): Revert "projects: add rw mutex to auth cache" [#327](https://github.com/openshift/openshift-apiserver/pull/327) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/4b6f8748ac98304a3fbe2a87f518d50d3927f15f...60c46df6ef2fd9f77e5d3cca4cbfd8e9986c5fd7) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/9c5f42cacd191f4ff8b911de8925b6f051eeeca1) * [OCPBUGS-3908](https://issues.redhat.com/browse/OCPBUGS-3908): [release-4.11] Support proper parsing of IPs with leading zeros [#1393](https://github.com/openshift/ovn-kubernetes/pull/1393) * [OCPBUGS-2554](https://issues.redhat.com/browse/OCPBUGS-2554): Fix UpdateService healthport checks [#1389](https://github.com/openshift/ovn-kubernetes/pull/1389) * Bug OCPBUGS-3077: [release-4.11] Fix netpol races [#1353](https://github.com/openshift/ovn-kubernetes/pull/1353) * [OCPBUGS-3830](https://issues.redhat.com/browse/OCPBUGS-3830): Adjust ovs bundle timeout [#1383](https://github.com/openshift/ovn-kubernetes/pull/1383) * [OCPBUGS-2222](https://issues.redhat.com/browse/OCPBUGS-2222): Don't add ITP specific gw setup for DPU mode [#1305](https://github.com/openshift/ovn-kubernetes/pull/1305) * Updating ose-ovn-kubernetes images to be consistent with ART [#937](https://github.com/openshift/ovn-kubernetes/pull/937) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bd4fe06a16b01507d069fc7008de822d575b41e8...9c5f42cacd191f4ff8b911de8925b6f051eeeca1) ### [tests](https://github.com/openshift/origin/tree/3538c62673f1f1fca84cbe8d8ef9a79787d2a503) * [OCPBUGS-3819](https://issues.redhat.com/browse/OCPBUGS-3819): Add bond cni test [#27554](https://github.com/openshift/origin/pull/27554) * [Full changelog](https://github.com/openshift/origin/compare/aa67fda60dcee9accf238b187d3e4676bb6795f4...3538c62673f1f1fca84cbe8d8ef9a79787d2a503) ### [thanos](https://github.com/openshift/thanos/tree/f769b174108d65f161e0563b05d65607ded161ae) * [OCPBUGS-3764](https://issues.redhat.com/browse/OCPBUGS-3764): Fix local-test for go 1.18 [#87](https://github.com/openshift/thanos/pull/87) * [Full changelog](https://github.com/openshift/thanos/compare/f08da2d77e40a0612587859f8e2660af712f9292...f769b174108d65f161e0563b05d65607ded161ae) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/85df37ee6c1b4ef7ce13e864df44b7b32639a168) * [OCPBUGS-3285](https://issues.redhat.com/browse/OCPBUGS-3285): set TLS cipher suites in Kube RBAC sidecars [#119](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/119) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/a4c00e6b25fd48bc9ef69e202e5bb01af63a0a37...85df37ee6c1b4ef7ce13e864df44b7b32639a168)