Back to index
4.12.0-0.okd-scos-2023-03-23-213604
Download installer and client with:
oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2023-03-23-213604
Team Approvals:
No tests for this release
Upgrades from:
Created: 2023-03-24 10:13:30 +0000 UTC
Image Digest: sha256:dccb04bec6bfb4a5eef60ea2375c66428c06ccf5f893c32f425c73e05256bad4
Release 4.12.0-0.okd-scos-2023-03-23-213604 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2023-03-23-213604
Components
Rebuilt images without code change
- NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
- NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
- NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
- MGMT-20192: add possibility to disable image service #7955
- MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
- MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
- MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
- MGMT-20009: Change OCP 4.19 to the default version #7506
- NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
- NO-ISSUE: fixing late binding #7070
- And 1647 elided commits (e.g. from squash or rebase merges)
- Full changelog
- NO-ISSUE: Update Konflux references #1283
- NO-ISSUE: Update Konflux references #1265
- And 237 elided commits (e.g. from squash or rebase merges)
- Full changelog
- OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
- NO-JIRA: Bump library go rm co dep #625
- CNTRLPLANE-1257: Add README to test extension #624
- CNTRLPLANE-1257: set up openshift-tests-extension and add a sanity test #623
- : NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
- NO-JIRA: operator: annotate image-import-ca configmap with owner #616
- OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612
- MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611
- OCPBUGS-45701: Updating ose-cluster-openshift-apiserver-operator-cont… #607
- NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
- OCPBUGS-44693: Disable ResilientWatchCacheInitialization #603
- OCPBUGS-23435: bump library-go to bring in workload-conditions fix #600
- NO-JIRA: bump dependencies #598
- API-1835: update to use the latest API #597
- API-1835: switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595
- API-1835: update for more apply loops #592
- MULTIARCH-4557: Sync import mode image config status field in the observed config #582
- NO-JIRA: remove unused OperatorClient #594
- API-1835: last transition time update #593
- API-1835: update library-go to use new operator client #584
- create CRDs from openshift/api #591
- OCPBUGS-41617: increase openshift-apiserver failureThreshold #588
- OCPBUGS-41232: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586
- NO-JIRA: Bump library-go to add audit logs about events #587
- OCPBUGS-39589: Rebase 1.30 #585
- OCPBUGS-30492: bump google.golang.org/protobuf #583
- OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
- OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579
- AUTH-482: Set required-scc for openshift workloads #573
- WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
- OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
- OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
- NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
- NO-ISSUE: fix: TestRedeployOnConfigChange #576
- OCPBUGS-22969: Use v1 for flowcontrol API #559
- OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
- OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
- WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
- OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
- OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
- OCPBUGS-19231: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
- OCPBUGS-21733: bump library-go to include switch to HTTP/1.1 #552
- WRKLDS-728: Capabilities: drop build/apps APIService when capabilities are not enabled #532
- switch image-registry cert CM #545
- OCPBUGS-16554: update dependencies to get rid of goproxy #546
- AUTH-408: bindata: set required-scc #544
- Plumb featuregates to the openshift-apiserver #542
- allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
- Add AES-GCM encryption tests #539
- OCPBUGS-14010: increase timeout for probes #536
- OCPBUGS-2765: Library go bump #538
- OCPBUGS-12813: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534
- Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
- OCPBUGS-10040: update openshift/api to include aesgcm provider in the default apiserver schema #526
- API-1509: Enable AESGCM encryption #521
- OCPBUGS-4343: update apf configuration to use v1beta3 #509
- OCPBUGS-6233: Bump dependencies and images #517
- OCPBUGS-5300: routes/status resources can leak sensitive data, exclude it from audit #511
- make api team approver #506
- OCPBUGS-3929: update apf configuration to use v1beta2 #508
- Full changelog
- CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
- CNTRLPLANE-926: Add readonlyRootFilesystem #392
- CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
- WRKLDS-844: sync: Use more descriptive variable name #390
- WRKLDS-844: pkg/operator: Split OCM/RCM status conditions #387
- WRKLDS-954: pkg/operator: Remove expired conditional resources #388
- WRKLDS-1676: ocm deployment: Add POD_NAME #386
- WRKLDS-1676: controller manager config: Set leaderElection.name #385
- WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
- OCPBUGS-47528: Add team members to the OWNERS file #373
- OCPBUGS-45698: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372
- API-1835: bump library-go #370
- WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
- OCPBUGS-41227: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364
- create CRDs from openshift/api #367
- no-jira: OWNERS: remove former employees #354
- OCPBUGS-35801: nil pointer reference in ocm-operator #355
- WRKLDS-1327: Replace wildcards by explicit list of verbs #353
- WRKLDS-1292: Bump k8s dependencies to 1.30.1 #352
- OCPBUGS-34395: Move
cluster Build CR to runlevel 10 to match CRD #351
- OCPBUGS-34077: Always Disable Default Rolebindings Controller #346
- OCPBUGS-34054: lots of churn during image registry managed/removed transition #347
- OCPBUILD-9: Adds capabilities for builder & deployer rolebindings controller #335
- AUTH-482: set required-scc for openshift workloads #336
- OCPBUGS-23848: Bumps opentelemetry dependencies #341
- OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
- OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
- OCPBUGS-22969: Use v1 for flowcontrol API #316
- BUILD-854: Add adambkaplan as approver #338
- OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
- OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
- OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
- WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
- OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
- OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
- Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
- Revert #300 “API-1666: add image pull secret cleanup controller” #313
- API-1642: add image pull secret cleanup controller #300
- API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
- OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
- OCPBUGS-20164: Include Build CRD in manifests #306
- WRKLDS-806: Bump kube dependencies to 1.28.2 #305
- OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
- OCPBUGS-18932: Always sort disabled controller list #302
- OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
- route-controller-manager deployment updates #295
- OCPBUGS-16072: Updating Kubernetes and other associated dependencies #296
- OCPBUGS-13926: change the operator log level to default normal in the deployment #289
- BUILD-582, OCPBUGS-14638: bump(k8s): 1.27.1 #294
- OCPBUGS-13926: add loglevel controller for OCM-o #292
- Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
- OCPBUGS-13895: [WRKLDS-730] route-controller-manager deployment updates #288
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
- Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
- OCPBUGS-10568: migrate to using lease objects for leader election #282
- Add Divyanshu Agrawal as a reviewer #283
- OCPBUGS-4343: update apf configuration to use v1beta3 #273
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
- WRKLDS-594: bump(k8s): 1.26.1 #277
- OCPBUGS-5275: remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276
- OCPBUGS-3929: update apf configuration to use v1beta2 #272
- let deployer pods patch/apply replication controllers #270
- Bug 2111979: Set openshift.io/run-level to nil in openshift-controller-manager nam… #269
- And 1 elided commits (e.g. from squash or rebase merges)
- Full changelog
- HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
- HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
- OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
- OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
- Add PodMonitor for ingress-operator pods in HCP namespaces #2275
- OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
- Force controleplane upgrade always #2289
- OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
- OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
- HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
- Add configuration for automatic labeling and label commands #2255
- fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
- feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
- kms addition for pod identity workflow #2247
- Add e2e test for hosted cluster behind a proxy #2199
- Add e2e test for cluster creation with AWS KMS #2201
- HOSTEDCP-826: Customize DNS base domain prefix #2235
- feat: Add pod gone check to prober + DNS operator leader elect #2209
- fix(ibmcloud): Explicitly set HCCO controllers #2208
- ensure reconcilation of apiserver port is in 4.12 #2195
- Cleanup default security group only if authorized #2212
- fix(cpo): Set restart annotation on multus-admission-controller #2190
- fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
- fix(cpo): Reduce CNO access if Calico used as network provider #2184
- Full changelog
- Updating ose-network-interface-bond-cni images to be consistent with ART #37
- Full changelog
- Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
- Fix gofmt check issue (#68) #68
- Update golang.org/x/text to 0.7.0 (#66) #66
- Full changelog
Source code for this page located on github