Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2022-12-02-083740

Team Approvals:

No tests for this release

---

Loading changelog, this may take a while ...

Changes from 4.12.0-0.okd-scos-2022-10-25-053756

Created: 2022-12-02 15:56:29 +0000 UTC

Image Digest: sha256:3cdff7c4770488ca162b0099528ac6ab62c046d6c4a1d872ef30c0dd5bc9fcf6

Release 4.12.0-0.okd-scos-2022-12-02-083740 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2022-12-02-083740

Components

• Kubernetes 1.25.2
• CentOS Stream CoreOS upgraded from [37.20221005.10]() to 412.9.202211241749-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

Removed images

• contour
• contour-operator
• external-dns
• ironic-hardware-inventory-recorder
• local-storage-static-provisioner

Rebuilt images without code change

• azure-cloud-controller-manager git 6ff1c8e5 sha256:14848c15f7807105a692244c69e6f2dadf41ccd05a10a322479f8c9b79ef66a9
• azure-cloud-node-manager git 6ff1c8e5 sha256:72129e2d5d052e35c2f754a591f3930f16c0d56242f937d0f66dc19a07b838e1
• centos-stream-coreos-9 sha256:ad863c1f987985e47887388acfe801d7f4dc3aaa768244e5d9e12a8989a8f13b
• cluster-update-keys git 2796e173 sha256:19f191903123806d0c17bb5b928269edb9770d81c4cf8746f92cbd953e505cbd
• csi-driver-shared-resource git 20cffc04 sha256:873469a0819995fb1bc349d22c09a2b423e47c13b71c447b3114a2a77a7a774e
• csi-driver-shared-resource-webhook git 20cffc04 sha256:20ff3f6602e22c2f42bbeb54cc000c0c2feb0e6510285f2a107639215bebb02a
• ironic-static-ip-manager git 0c7fbba9 sha256:bb827920307b202569663acac6a79515255d61536fe1e9b4648a3be44223a697
• olm-rukpak git 1b52bfeb sha256:e9d27d450c96178fa63c950806b095aa9d84bfd4f67f17e2d0a3c9608258305b

agent-installer-api-server

• OCPBUGS-2635: Patch the Scheduler manifest for schedulable masters (#4653) #4653
• MGMT-12361: Sync install-config structure with upstream (#4551) #4551
• Default to using converged flow for 4.12 hub versions (#4481) #4481
• MGMT-9984: Support iPXE in converged ZTP flow (#4439) #4439
• NO-ISSUE: annotate lso namespace instead of project (#4545) #4545
• MGMT-12318: fix conditions update on ASC (#4544) #4544
• Bump OCP versions: 4.10 (#4542) #4542
• MGMT-8578: Framework for day2 master CI ZTP jobs (#4437) #4437
• MGMT-11799: change all ‘go get’ commands (#4538) #4538
• Add some time to the cluster delete test to avoid flakes (#4539) #4539
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Updating ose-agent-installer-csr-approver images to be consistent with ART (#535) #535
• Full changelog

agent-installer-node-agent

• Updating ose-agent-installer-node-agent images to be consistent with ART (#440) #440
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #38
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-1904: Don’t deploy VolumeSnapshotClass in static controller #166
• STOR-1040: port to hypershift #159
• Full changelog

aws-machine-controllers

• OCPCLOUD-1131: Implement fetching instance types from API #53
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-3425: Only deploy VolumeSnapshotClass if CRD exists #59
• Full changelog

baremetal-installer

• OCPBUGS-3249: update golang.org/x/crypto to address security vulnerabilities #6631
• OCPBUGS-4267: Azure Stack: use managed images for compute nodes #6639
• OCPBUGS-4308: Redact pull secret from agent-gather #6640
• OCPBUGS-4068: (Agent) Do not require host data in platform baremetal section in installconfig #6623
• OCPBUGS-4064: Restart create-cluster-and-infraenv.service if it fails #6622
• OCPBUGS-3657: Uplift terraform-provider-ironic to 0.3.0 #6592
• OCPBUGS-4063: OpenStack: Force JSON content-type in Swift #6621
• OCPBUGS-3055: add bootstrap configmap during the SNO reboot #6555
• OCPBUGS-3523: Pass FeatureSet to cluster config render #6590
• OCPBUGS-3406: Use project after creation #6575
• OCPBUGS-3307: gcp: fail during validation if service usage is not enabled #6565
• OCPBUGS-3515: (AGENT) only support amd64 archs #6580
• OCPBUGS-3520: Automatically retry install #6582
• OCPBUGS-3519: Always use first matching mirror in assisted-service #6581
• OCPBUGS-3459: Always add router CAs to kubeconfig, even if console is not available #6578
• OCPBUGS-3250: azure: Fix client certs authentication #6561
• OCPBUGS-3398: Fix cluster wide proxy #6587
• OCPBUGS-3366: Set PublicContainerRegistries for entries in mirror #6568
• OCPBUGS-3306: agent ased installation fix for dual stack vips #6564
• OCPBUGS-3095: Power VS Check for existing DNS permitted network and public gateway #6550
• OCPBUGS-3035: support multiple documents in the same extra manifest file #6549
• OCPBUGS-3343: [vsphere-zones] Fix user folders #6566
• OCPBUGS-3263: Static linking the terraform and providers binaries #6562
• OCPBUGS-2984: Azure: Fix DiskEncryptionSet regex validation #6538
• OCPBUGS-3028: Use result from List function after checking error #6543
• AGENT-348: Warn when information in install-config is ignored #6523
• OCPBUGS-2837: Reduce debug logs in agent wait-for commands #6520
• Fix unexpected behavior from merging #6470 and #6500 #6526
• AGENT-390: Include CPU Architecture in ISO filename #6485
• docs: feature sets #6506
• Agent-321: Cluster and Host validations rework #6500
• OCPBUGS-2327: Add validation for releaseImage and registry.conf #6423
• OCPBUGS-2086: Detect failure in wait-for on transition back to ready #6470
• OCPBUGS-2627: agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495
• OCPBUGS-2338: Don’t use error messages as default values #6486
• OCPBUGS-1824: enhance agent systemd service dependency #6408
• OCPBUGS-1704: Service Usage API is required, not optional #6504
• Revert “create: add check for cluster operator stability” #6503
• OCPBUGS-2301: Search Network Project For resources #6499
• OCPBUGS-2436: Revert “Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml”” and fix OCPBUGS-2436 #6491
• OCPBUGS-2174: fix metadata tags not supported in certain regions #6475
• Add initial support for OKD/SCOS #6443
• Updating golang version to fix gofmt issues #6484
• Bug 2117537: validation rule for invalid rendezvousIP in AgentConfig #6474
• create: add check for cluster operator stability #6124
• Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml” #6490
• Add LB Type in the infrastructure cluster object via install-config yaml #6478
• Bug 2059491: [Alibaba] fix the format of Name #5668
• AGENT-284: Allow user to choose platform type #6438
• OCPBUGS-2262: Update gcp explain for DNS zones #6483
• OCPBUGS-1941: bump RHCOS 4.12 bootimage metadata #6452
• Bug 2072202: Check for api and api-int resolution during cluster install #5816
• OCPBUGS-2259: Fix soft-anti-affinity known issue #6479
• Removing jstuever from OWNERS #6480
• OCPBUGS-1881: vsphere/destroy: improve logs when folder is not empty #6456
• Adding “syd05” as a choice for zones in PowerVS #6468
• OCPBUGS-1856: IBMCloud: Allow traffic to kube-api-lb #6458
• update to release.openshift.io/feature-set to match OCP 4.12 #6476
• AGENT-347: generate OS_IMAGES dynamically #6441
• OCPBUGS-1900: Avoid SNO bootstrap jsonpath error #6463
• OCPBUGS-1698: multi-zone network slice validation #6422
• OCPBUGSM-47893: added validation rule for invalid mac address in AgentConfig #6473
• populate vSphere infrastructure spec #6457
• OCPBUGS-1896: Validate Credentials Mode After Install Config step #6453
• OCPBUGS-2029: Fix agent installation InstallConfig proxy processing #6461
• Add docs about IPv6 on the additional Networks #6435
• AGENT-375: generate FIPS annotation for ACI #6467
• Full changelog

baremetal-operator

• Updating ose-baremetal-operator images to be consistent with ART #243
• Full changelog

baremetal-runtimecfg

• OCPBUGS-2512: Improve IP address sort order for interface selection #199
• Full changelog

cli, cli-artifacts, deployer, tools

• remove support for empty files and stdout in oc registry login #1277
• Bump go to 1.19 in go.mod #1262
• Full changelog

cloud-credential-operator

• Bump to k8s 1.25 #505
• Make ccoctl use regional STS endpoint by default #491
• Full changelog

cloud-network-config-controller

• OCPBUGS-4230: Fix azure log message for assigning and releasing an IP #80
• OCPBUGS-3552: Add assigned egress ips into capacity #73
• Full changelog

cluster-authentication-operator

• OCPBUGS-4040: Restart authentication operator if console capability is enabled #593
• OCPBUGS-3510: Update cluster-authentication-operator not to go degraded without console #590
• Full changelog

cluster-autoscaler

• Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #242
• Full changelog

cluster-baremetal-operator

• Updating ose-cluster-baremetal-operator images to be consistent with ART #300
• Full changelog

cluster-capi-operator

• Add PowerVS platform to webhooks #81
• Full changelog

cluster-config-operator

• OCPBUGS-3523: add –feature-set option to render options #272
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-1674: Update installation docs to account for generation/activation #123
• OCPBUGS-2854: Ensure generated CPMS includes any failure domain already present in control plane machines #125
• OCPBUGS-2741: Deduplicate failure domains when generating a ControlPlaneMachineSet #124
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-4121: Don’t remove PDB on SNO clusters #134
• Full changelog

cluster-etcd-operator

• OCPBUGS-4193: later bootstrap removal in delayed scaling #967
• OCPBUGS-2918: update prometheus alerts #958
• Full changelog

cluster-image-registry-operator

• OCPBUGS-3175: Bump gophercloud #812
• add myself to OWNERS #813
• IR-295: upgrade to Go 1.19 #805
• IR-298: Bump k8s to 1.25.2 #803
• Full changelog

cluster-ingress-operator

• OCPBUGS-2775: Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851
• OCPBUGS-2848: Support matchExpressions selectors with route metrics #850
• Bug 2117524: Update CRLs when they expire #828
• OCPBUGS-853: certificate-publisher: Don’t publish extraneous certificates #824
• Bug 1962502: Add alerts for unmanaged Routes and Ingresses without IngressClassName #823
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-3663: Revert “turn PodSecurity admission to enforce restricted globally” #1405
• OCPBUGS-2071: revert dev cert rotation #1401
• Bug 2094362: Duplicate prometheus rules for API SLOs after upgrade #1376
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-4303: bootstrap-kube-controller-manager: specify resources.requests #666
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-4292: bootstrap-kube-scheduler: specify resources.requests #448
• Full changelog

cluster-machine-approver

• OCPBUGS-2621: Update capi related CMA deployment ports #173
• Full changelog

cluster-monitoring-operator

• OCPBUGS-3276: Pin Down Dependencies on Release 4.12 #1819
• OCPBUGS-4029: test: increase timeout when checking remote write metrics #1820
• MON-2727: Adds telemeter alert TelemeterClientFailures #1803
• *: don’t expose Prometheus operator’s port #1806
• Full changelog

cluster-network-operator

• OCPBUGS-3956: HyperShift: Do not accept empty infrastructure name #1634
• OCPBUGS-4183: Disable UDP aggregation on s390x #1643
• OCPBUGS-3824: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1621
• Jira OCPBUGS-3851: IPsec: Fix broken counter++ expression #1636
• OCPBUGS-3944: Remove references to the hosts kubeconfig #1632
• OCPBUGS-3437: HyperShift: Render cncc with proxy settings of the management cluster #1613
• OCPBUGS-3889: SDN: /var/run mount cleanup #1628
• OCPBUGS-3184: update microshift ovnk manifests #1610
• OCPBUGS-2362: Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info #1579
• fixed typo in comment #1597
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-4215: e2e: performance profile: add logs and minor fixes (#516) #516
• E2E: Automation offline CPUs test (#514) #514
• Configure ktimers scheduler prio same as ksoftirqs (#511) #511
• Set RPS for all rx queues (#503) #503
• E2E fix: Make Nodeselector tests independent (#422) #422
• Full changelog

cluster-policy-controller

• OCPBUGS-3663: Revert “Revert “Revert “psalabelsyncer: synchronize the enforcement l… #90
• Full changelog

cluster-samples-operator

• OCPBUGS-4369: Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #477
• Full changelog

cluster-storage-operator

• STOR-1039: Make changes into CSO for hypershift #318
• OCPBUGS-2880: Fix panic on empty featureGate.spec.customNoUpgrade #325
• Full changelog

cluster-version-operator

• OCPBUGS-3770: Allow CVO to update KUBERNETES_SERVICE_HOST with LB address #866
• OCPBUGS-3352: Do not fail precondition check for UnknownUpdate #861
• Full changelog

console

• OCPBUGS-3333: Promote ConsolePlugins API version to v1 in console repository #12248
• OCPBUGS-4035: Fix for initial showing of topology contents #12299
• OCPBUGS-4117: Re-enable serverless e2e tests #12308
• OCPBUGS-4116: Re-enable pipelines e2e tests #12307
• OCPBUGS-4004: migrate Events integration test to Cypress to mitigate … #12291
• OCPBUGS-3927: show 403 error when normal user check operands on All … #12284
• OCPBUGS-3786: add Release not accepted to Update status on Cluster Se… #12273
• OCPBUGS-3754: Monitoring: Add popover help text for silence form’s negative matchers #12271
• OCPBUGS-3696: improve display of RetrievedUpdate condition in Update status #12270
• OCPBUGS-2874: add capacity action for SS CSV list page [OCP 4.12 & ODF 4.11] #12233
• OCPBUGS-2974: Monitoring: Fix permission check for Prometheus & Alertmanager pollers #12225
• OCPBUGS-3265: check that user can patch console operator config in s… #12239
• Create-Knative-Workload | Knative Serverless #12165
• add tab extension to dev console #12109
• OCPBUGS-2651: Show focus border on pipeline run nodes #12157
• OCPBUGS-2909: Fix documentation link which leads to 404 #12181
• OCPBUGS-2478: Fix i18n issue in Remove component node from application modal #12180
• Bug 2110256: Storage -> PVC -> upload data, does not support source reference #12213
• OCPBUGS-1950: Devfile samples (in Developer Catalog) link doesn’t include the current selected namespace #12193
• CONSOLE-3164: Move main nav components #12123
• CONSOLE-3224: Expose errorMessage and errorCause for failed plugins #12151
• CONSOLE-3336: Make dynamic plugin dependencies optional #12078
• Bug 2115347: Monitoring: Add support for Alertmanager negative matchers #12139
• Full changelog

console-operator

• CONSOLE-3252: Create a ConsoleNotification when cluster is performing an upgrade #687
• OCPBUGS-2219: Empty string should be valid for i18n loadType #689
• CONSOLE-3337: Dynamic plugin proxy reference issue #691
• Full changelog

container-networking-plugins

• OCPBUGS-4223: Fix path substitution to enable setting sysctls on vlan interfaces #68
• Full changelog

coredns

• OCPBUGS-240: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #78
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• Bug OCPBUGS-4083: Allow deleting LBs in ERROR status #151
• Bug OCPBUGS-3700: Protect from AllocateLoadBalancerNodePorts=false (#1988) #148
• Bug OCPBUGS-3081: Do not create HTTP monitors for UDP on old Octavia #146
• Merge https://github.com/kubernetes/cloud-provider-openstack:master into master #143
• Full changelog

csi-driver-manila-operator

• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #159
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-3359: Revert “[build-407] Mount shared secret and configmap list config path into shared driver node” #62
• Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #58
• Full changelog

csi-external-attacher

• UPSTREAM: 379: Fix gofmt for go 1.19 #47
• Full changelog

docker-registry

• IR-299: bump go to 1.19 and k8s to 1.25.2 #351
• Full changelog

driver-toolkit

• Adding kernel-rpm-macros to the Dockerfile. (#107) #107
• Full changelog

etcd

• UPSTREAM: <carry>: rebase script #159
• Full changelog

gcp-cluster-api-controllers

• Updating ose-gcp-cluster-api-controllers images to be consistent with ART #186
• Full changelog

haproxy-router

• Updating ose-haproxy-router-base images to be consistent with ART #424
• Full changelog

hyperkube, pod

• OCPBUGS-3878: UPSTREAM: <drop>: Bump openshift/api. #1425
• OCPBUGS-3875: UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. #1427
• OCPBUGS-3780: UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. #1422
• OCPBUGS-3503: UPSTREAM: <drop>: Bump library-go. #1423
• Bug OCPBUGS-2927: Disable expansion in SC, if driver does not support it #1403
• OCPBUGS-3503: UPSTREAM: : Bump library-go. #1414
• OCPBUGS-3094: Tag AWS security groups at creation #1412
• OCPBUGS-3071: 4.12: revert: 1340: tag AWS security group at creation #1405
• OCPBUGS-3117: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1407
• OCPBUGS-2774: UPSTREAM: 112807 Fix Load balancer services with xTP local #1400
• Full changelog

hypershift

• SDN-3508: Add proxy env variables to CNO deployment #1845
• MCO-258: inplaceupgrader: handle multiple upgrade versions #1810
• PowerVS Refactor docs - bug fixes #1825
• Docs: add nodes for InPlace Upgrade NodePools #1805
• network: Use non default ovn-k V4InternalSubnet at tenant #1783
• Adds davidvossel as approver #1833
• NodePool API: rename spec.tunedConfig to spec.tuningConfig #1802
• reduce konnectivity-agent log verbosity #1828
• add HC available duration metric #1829
• aws: use gp3-csi storage class by default #1830
• Full changelog

ibm-cloud-controller-manager

• Updating ose-ibm-cloud-controller-manager images to be consistent with ART #42
• Full changelog

ibm-vpc-block-csi-driver

• STOR-1060: Update ibm-vpc-block-csi-driver to v5.0.0 #26
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-3464: Update deployment files for snapshot support #46
• Full changelog

ibmcloud-cluster-api-controllers

• Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART #43
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-3289: IBMCloud: Replace stuck machine #11
• Full changelog

insights-operator

• OCPBUGS-2915: Updated info link in insights recommendations (#683) #683
• Full changelog

installer, installer-artifacts

• OCPBUGS-3249: update golang.org/x/crypto to address security vulnerabilities #6631
• OCPBUGS-4267: Azure Stack: use managed images for compute nodes #6639
• OCPBUGS-4308: Redact pull secret from agent-gather #6640
• OCPBUGS-4068: (Agent) Do not require host data in platform baremetal section in installconfig #6623
• OCPBUGS-4064: Restart create-cluster-and-infraenv.service if it fails #6622
• OCPBUGS-3657: Uplift terraform-provider-ironic to 0.3.0 #6592
• OCPBUGS-4063: OpenStack: Force JSON content-type in Swift #6621
• OCPBUGS-3055: add bootstrap configmap during the SNO reboot #6555
• OCPBUGS-3523: Pass FeatureSet to cluster config render #6590
• OCPBUGS-3406: Use project after creation #6575
• OCPBUGS-3307: gcp: fail during validation if service usage is not enabled #6565
• OCPBUGS-3515: (AGENT) only support amd64 archs #6580
• OCPBUGS-3520: Automatically retry install #6582
• OCPBUGS-3519: Always use first matching mirror in assisted-service #6581
• OCPBUGS-3459: Always add router CAs to kubeconfig, even if console is not available #6578
• OCPBUGS-3250: azure: Fix client certs authentication #6561
• OCPBUGS-3398: Fix cluster wide proxy #6587
• OCPBUGS-3366: Set PublicContainerRegistries for entries in mirror #6568
• OCPBUGS-3306: agent ased installation fix for dual stack vips #6564
• OCPBUGS-3095: Power VS Check for existing DNS permitted network and public gateway #6550
• OCPBUGS-3035: support multiple documents in the same extra manifest file #6549
• OCPBUGS-3343: [vsphere-zones] Fix user folders #6566
• OCPBUGS-3263: Static linking the terraform and providers binaries #6562
• OCPBUGS-2984: Azure: Fix DiskEncryptionSet regex validation #6538
• OCPBUGS-3028: Use result from List function after checking error #6543
• AGENT-348: Warn when information in install-config is ignored #6523
• OCPBUGS-2837: Reduce debug logs in agent wait-for commands #6520
• Fix unexpected behavior from merging #6470 and #6500 #6526
• AGENT-390: Include CPU Architecture in ISO filename #6485
• docs: feature sets #6506
• Agent-321: Cluster and Host validations rework #6500
• OCPBUGS-2327: Add validation for releaseImage and registry.conf #6423
• OCPBUGS-2086: Detect failure in wait-for on transition back to ready #6470
• OCPBUGS-2627: agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495
• OCPBUGS-2338: Don’t use error messages as default values #6486
• Full changelog

ironic-machine-os-downloader

• Updating ironic-rhcos-downloader images to be consistent with ART #83
• Full changelog

k8s-prometheus-adapter

• Updating ose-prometheus-adapter images to be consistent with ART #65
• Full changelog

keepalived-ipfailover

• Updating openshift-enterprise-egress-router images to be consistent with ART #115
• Updating ose-egress-http-proxy images to be consistent with ART #114
• Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
• Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
• Full changelog

kube-state-metrics

• OCPBUGS-4118: cherry-pick, do not expose ingress path metric when service is nil #84
• OCPBUGS-4112: cherry-pick, autoscaling/v2beta2 HorizontalPodAutoscaler is deprecated in v1.23+ #83
• Full changelog

kuryr-cni, kuryr-controller

• Merge https://opendev.org/openstack/kuryr-kubernetes:master into master #707
• Full changelog

machine-api-operator

• Show warnings if provider specs have invalid GroupVersionKind #1018
• Update envtest #1071
• Full changelog

machine-config-operator

• OCPBUGS-4091: NM resolve prepender: remove extra quotes in OKD flow #3433
• OCPBUGS-3955: daemon: gate done state on uncordon completion #3425
• OCPBUGS-3750: daemon: Stop setting I/O scheduler to bfq #3417
• OCPBUGS-3874: Don’t make https call to http endpoint #3420
• OCPBUGS-3504: On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3410
• OCPBUGS-3650: Revert “Substitute skopeo inspect for imageInspect/podman” #3414
• OCPBUGS-3001: Substitute skopeo inspect for imageInspect/podman, drop podman inspect fallback #3396
• Force string format when logging rpm-ostree status #3393
• controller: Don’t allow creating the force file via MachineConfig #3391
• Bug 2034883: Sync controllerconfig anyway if daemon sync fails #3388
• Fix machine-config-operator logspam when extensions container is not present #3387
• Full changelog

machine-image-customization-controller

• Updating ose-image-customization-controller images to be consistent with ART #65
• OCPBUGS-3557: use host IPC for the agent container #69
• Full changelog

multus-networkpolicy

• OCPBUGS-977: Sync k8snetworkplumbingwg/multi-networkpolicy-iptables 2022_10 (#20) #20
• Full changelog

must-gather

• OCPBUGS-4250: [release-4.12] backport PodNetworkConnectivityCheck gather script #334 #334
• Updating ose-must-gather images to be consistent with ART #330
• Full changelog

oc-mirror

• docs: adds grammar fixes to metadata-management.md (#521) #521
• WRKLDS-547 (#519) #519
• Full changelog

openshift-apiserver

• OCPBUGS-4339: fix printer panic #335
• IR-259: changing image stream importMode increments its generation #329
• IR-258: ImageStreamImport manifest list support #290
• bump to kube 1.25.2 #320
• Full changelog

openshift-controller-manager

• Updating ose-openshift-controller-manager images to be consistent with ART #241
• Full changelog

openshift-state-metrics

• Updating openshift-state-metrics images to be consistent with ART #91
• Full changelog

openstack-cinder-csi-driver-operator

• Bug OCPBUGS-3774: Add SecretHashAnnotation to node service #98
• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #94
• Full changelog

operator-lifecycle-manager, operator-registry

• Updating operator-lifecycle-manager images to be consistent with ART #398
• OCPBUGS-3837: fix service account token secret reference (#2862) #412
• OCPBUGS-3795: Order an operator CR’s status.Component.Refs array (#2880) #411
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-4356: Bump OVN to 22.09.0-22 #1407
• OCPBUGS-2896: Refactor retry into its own pkg #1376
• Updating ovn-kubernetes-base images to be consistent with ART #1287
• OCPBUGS-3798: [4.12] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1387
• OCPBUGS-3977: Handle expired entry while handling dns update #1392
• OCPBUGS-3871: Ignore addresses in masquerade subnet when retrieving gateway IPs #1386
• OCPBUGS-3348: Validate node subnet annotations against cluster networks #1351
• OCPBUGS-3658: [release-4.12] Support proper parsing of IPs with leading zeros #1379
• OCPBUGS-3773: Adjust ovs bundle timeout #1382
• OCPBUGS-3468: Disable packet MTU check when OVS HW Offload is enabled #1368
• OCPBUGS-298: Adapt ovnkube-trace to work with external controlplane #1363
• OCPBUGS-3075: [release-4.12] Fix netpol races #1347
• OCPBUGS-3346: vendor: bump libovsdb to 8f21d188c3a50d0ce378bd66ec68215967aaad77 #1348
• OCPBUGS-3369: Fix mac address not set in SRIOV container interface #1361
• OCPBUGS-3221: Allow empty nexthop in L3GatewayConfig node annotation #1356
• OCPBUGS-3003: Ignore non-ready endpoints when processing endpointslices #1344
• OCPBUGS-2826: ovnkube-trace: Fix ofproto/trace for IPv6 #1338
• OCPBUGS-1520: Fixes SNAT-ing Logic for EgressIPs #1331
• OCPBUGS-1520: Prioritize adding events to handlers for shared resources #1333
• Full changelog

powervs-block-csi-driver

• Updating ose-powervs-block-csi-driver images to be consistent with ART #15
• io/util removed as deprected #18
• Fix formatting issues #17
• Full changelog

prometheus

• OCPBUGS-4048: fix certificate reloads after rotation #149
• Revert unwanted downstream patch #144
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• Updating prometheus-operator images to be consistent with ART #204
• Full changelog

route-controller-manager

• OCPBUGS-4199: do not depend on the API defaulting when creating Routes #12
• Bug 1962502: Create custom metrics to list unmanaged Routes and Ingresses without IngressClassName #8
• Full changelog

service-ca-operator

• OCPBUGS-3279: Return nil from start funcs after context is cancelled. #203
• Full changelog

tests

• OCPBUGS-3649: : Fix flake reporting for certain tests. #27557
• OCPBUGS-3649: Revert “Merge pull request #27533 from dgoodwin/merge-alert-backstops” #27550
• Synchronize release-4.12 with master #27541
• OCPBUGS-3428: Skip broken [sig-devex][Feature:ImageEcosystem] tests #27537
• k8s 1.25.0 #27503
• Revert 1.25 again #27499
• Extend SCC tests with their corresponding service account variants #27491
• MicroShift: label e2es with more apigroup labels (squashing more PRs into a single one + fixes) #27498
• Skip resource growth checks in upgrade-rollback jobs #27450
• k8s 1.25.0 #27490
• Remove must-gather pod from lack priorityclass exception list #27469
• Ocpbugs 2275 remove templateservicebroker test #27484
• Support external topology for hypershift #27437
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-3281: set TLS cipher suites in Kube RBAC sidecars #118
• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #116
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: failed to query RPM extensions image for quay.io/okd/scos-release@sha256:3cdff7c4770488ca162b0099528ac6ab62c046d6c4a1d872ef30c0dd5bc9fcf6

View changelog in Markdown or change previous release: 4.20.0-0.okd-scos-2025-07-02-0523144.20.0-0.okd-scos-2025-07-01-1723144.20.0-0.okd-scos-2025-07-01-0523144.20.0-0.okd-scos-2025-06-30-1723144.20.0-0.okd-scos-2025-06-30-0523144.20.0-0.okd-scos-2025-06-28-225758───4.19.0-0.okd-scos-2025-07-02-1307034.19.0-0.okd-scos-2025-07-02-0107034.19.0-0.okd-scos-2025-07-01-1307034.19.0-0.okd-scos-2025-07-01-0107034.19.0-0.okd-scos-2025-06-30-1307034.19.0-0.okd-scos-2025-06-28-012013───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.20.0-okd-scos.ec.64.20.0-okd-scos.ec.54.20.0-okd-scos.ec.44.20.0-okd-scos.ec.34.20.0-okd-scos.ec.24.20.0-okd-scos.ec.14.20.0-okd-scos.ec.04.19.0-okd-scos.ec.104.19.0-okd-scos.ec.84.19.0-okd-scos.ec.74.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github