4.11.0-0.okd-2023-01-14-152430

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.11.0-0.okd-2023-01-14-152430

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

4.12.0-0.okd-2023-04-16-041331 (changes) - Success
4.12.0-0.okd-2023-04-01-051724 (changes) - Success Failed
4.12.0-0.okd-2023-03-18-084815 (changes) - F S F
4.12.0-0.okd-2023-03-05-022504 (changes) - F F S
4.12.0-0.okd-2023-02-18-033438 (changes) - F F F S
4.12.0-0.okd-2023-02-04-212953 (changes) - Success
4.12.0-0.okd-2023-01-21-055900 (changes) - F F F S F F F F

Loading changelog, this may take a while ...

Changes from 4.11.0-0.okd-2022-12-02-145640

Created: 2023-01-15 10:06:34 +0000 UTC

Image Digest: sha256:27c99f5b7734f773a7981b9e527417edcda0eee217117632198d64aa33e95c46

Release 4.11.0-0.okd-2023-01-14-152430 was created from registry.ci.openshift.org/origin/release:4.11.0-0.okd-2023-01-14-152430

Components

Kubernetes 1.24.6
Fedora CoreOS upgraded from 411.36.4 to 411.36.5

Rebuilt images without code change

cli git 1928ac42 sha256:d3b899f88d8d1899b18778084cee87f26d97ee4d95eec58299a5ba11ce5e7949
cli-artifacts git 1928ac42 sha256:b96296b3e443c755287a5945c13d6cc66e6cb848dcf7b46385148dfbecd75c20
csi-driver-manila git 246ae15e sha256:b17b97aeb7f240fe40e174c53da1d5a175b196806e5a5ab196d6b1f58a879a27
deployer git 1928ac42 sha256:2a419f6b5bd2dc3fd649cbe5b0f95c5318b68a2baa56a5559add872ad0e4616b
openstack-cinder-csi-driver git 246ae15e sha256:f0ac1f7e774af1aefd9c05e1e8db1e6dfd9f056d060a0e440a21e59e2bc33685
openstack-cloud-controller-manager git 246ae15e sha256:1aefc2d07a613087d258ee40970924b2cc0f3ef34347ea99062ff9090dfb92e0
openstack-machine-controllers git 38f15dbc sha256:45667e7332260d0f99a2eafaec2454cf10f7cd8b9d582d36d33d23299043eb34
tools git 1928ac42 sha256:9fe149c584c5a5eb615a30d3ee3e56b1f7e563b8d307d82ee96938abbe0bf2ab

agent-installer-api-server

Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
MGMT-11799: change all ‘go get’ commands (#4887) #4887
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Remove jira tickets prefix requirements (#596) #596
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #57
Full changelog

azure-machine-controllers

OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
OCPBUGS-4720: GCP: Add me-west1 region #6690
OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
OCPBUGS-4398: update golang.org/x/crypto #6652
OCPBUGS-3023: GCP: Add missing regions #6542
OCPBUGS-4325: gcp: fail during validation if service usage is not enabled #6647
Full changelog

cloud-network-config-controller

Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
OCPBUGS-3932: Add assigned egress ips into capacity #78
OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
OCPBUGS-4528: AWS: build temp credentials file from AWS key and secret #84
OCPBUGS-4167: Run azure operations in sequence #79
OCPBUGS-4163: AWS: Fix race in IP address assignment code #83
Full changelog

cluster-baremetal-operator

Updating ose-cluster-baremetal-operator images to be consistent with ART #264
OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
Full changelog

cluster-etcd-operator

OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
Full changelog

cluster-kube-cluster-api-operator

Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
OCPBUGS-4304: resources.requests for operator pod #667
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
Full changelog

cluster-monitoring-operator

Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
OCPBUGS-4640: Increase startupProbe for prometheus #1845
Full changelog

cluster-network-operator

OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
Full changelog

cluster-node-tuning-operator

pao: latency-tests: read test log directly from pod (#531) #531
E2E: Automate Offline CPUs feature (#523) #523
OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
Full changelog

console

OCPBUGS-1727: Allow regular users to access debug pods #12100
OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
OCPBUGS-4786: Fix for initial showing of topology contents #12311
OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
OCPBUGS-2443: Monitoring: Fix help popovers #12173
Full changelog

coredns

OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
Full changelog

etcd

OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
Full changelog

gcp-machine-controllers

OCPBUGS-4579: refactor restartPolicyToBool function #30
OCPBUGS-4532: Set sync period for Machine controller #27
Full changelog

hypershift

cherry-pick #2006 #2028
Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
Full changelog

ironic

Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
OCPBUGS-4908: Update packages versions with latest available #336
OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
OCPBUGS-3674: Don’t save OS_ prefixed variables #318
Bug OCPBUGS-3478: Improve resiliency of eTag handling #314
OCPBUGS-4410: Remove RDO distribution configuration (finally fixes #46) #328
Full changelog

ironic-agent

OCPBUGS-5099: make coreos-installer output available in the logs #67
Full changelog

kube-proxy, sdn

OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
OCPBUGS-2105: fix network policy egress #464
Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 #477
Full changelog

machine-config-operator

OCPBUGS-4945: Do not allow empty system reserved values #3459
OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
Full changelog

machine-os-content

Bump fedora-coreos to latest stable #509
Bump OKD OS version #494
Full changelog

must-gather

OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
Full changelog

openstack-cinder-csi-driver-operator

Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-4446: fix service account token secret reference (#2862) #416
Full changelog

ovn-kubernetes

OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
OCPBUGS-1720: Backport changes to ovnkube-trace #1436
OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
OCPBUGS-4475: Handle expired entry while handling dns update #1417
OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
OCPBUGS-4167: EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add #1404
Full changelog

tests

SPLAT-856: [release-4.11] include storage and must-gather tests in expectedTestCount #27494
Full changelog

thanos

Updating thanos images to be consistent with ART #99
Full changelog

vsphere-csi-driver-operator

OCPBUGS-5472: Fix sc creation on resync #127
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github