Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.11.0-0.okd-2023-01-14-152430

No tests for this release

Upgrades from:

• 4.11.0-0.okd-2023-01-14-075321 (changes) - Success
• 4.11.0-0.okd-2022-12-02-145640 - Failed Success
• 4.11.0-0.okd-2022-11-19-050030 (changes) - Success
• 4.10.0-0.okd-2022-07-09-073606 (changes) - Success

Upgrades to:

• 4.12.0-0.okd-2023-04-16-041331 (changes) - Success
• 4.12.0-0.okd-2023-04-01-051724 (changes) - Success Failed
• 4.12.0-0.okd-2023-03-18-084815 (changes) - F S F
• 4.12.0-0.okd-2023-03-05-022504 (changes) - F F S
• 4.12.0-0.okd-2023-02-18-033438 (changes) - F F F S
• 4.12.0-0.okd-2023-02-04-212953 (changes) - Success
• 4.12.0-0.okd-2023-01-21-055900 (changes) - F F F S F F F F

---

Loading changelog, this may take a while ...

Changes from 4.11.0-0.okd-2022-12-02-145640

Created: 2023-01-15 10:06:34 +0000 UTC

Image Digest: sha256:27c99f5b7734f773a7981b9e527417edcda0eee217117632198d64aa33e95c46

Release 4.11.0-0.okd-2023-01-14-152430 was created from registry.ci.openshift.org/origin/release:4.11.0-0.okd-2023-01-14-152430

Components

• Kubernetes 1.24.6
• Fedora CoreOS upgraded from 411.36.4 to 411.36.5

Rebuilt images without code change

• cli git 1928ac42 sha256:d3b899f88d8d1899b18778084cee87f26d97ee4d95eec58299a5ba11ce5e7949
• cli-artifacts git 1928ac42 sha256:b96296b3e443c755287a5945c13d6cc66e6cb848dcf7b46385148dfbecd75c20
• csi-driver-manila git 246ae15e sha256:b17b97aeb7f240fe40e174c53da1d5a175b196806e5a5ab196d6b1f58a879a27
• deployer git 1928ac42 sha256:2a419f6b5bd2dc3fd649cbe5b0f95c5318b68a2baa56a5559add872ad0e4616b
• openstack-cinder-csi-driver git 246ae15e sha256:f0ac1f7e774af1aefd9c05e1e8db1e6dfd9f056d060a0e440a21e59e2bc33685
• openstack-cloud-controller-manager git 246ae15e sha256:1aefc2d07a613087d258ee40970924b2cc0f3ef34347ea99062ff9090dfb92e0
• openstack-machine-controllers git 38f15dbc sha256:45667e7332260d0f99a2eafaec2454cf10f7cd8b9d582d36d33d23299043eb34
• tools git 1928ac42 sha256:9fe149c584c5a5eb615a30d3ee3e56b1f7e563b8d307d82ee96938abbe0bf2ab

agent-installer-api-server

• Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
• MGMT-11799: change all ‘go get’ commands (#4887) #4887
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Remove jira tickets prefix requirements (#596) #596
• Full changelog

aws-machine-controllers

• Updating ose-machine-api-provider-aws images to be consistent with ART #57
• Full changelog

azure-machine-controllers

• OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
• OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
• OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
• OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
• OCPBUGS-4720: GCP: Add me-west1 region #6690
• OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
• OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
• OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
• OCPBUGS-4398: update golang.org/x/crypto #6652
• OCPBUGS-3023: GCP: Add missing regions #6542
• OCPBUGS-4325: gcp: fail during validation if service usage is not enabled #6647
• Full changelog

cloud-network-config-controller

• Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
• OCPBUGS-3932: Add assigned egress ips into capacity #78
• OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
• OCPBUGS-4528: AWS: build temp credentials file from AWS key and secret #84
• OCPBUGS-4167: Run azure operations in sequence #79
• OCPBUGS-4163: AWS: Fix race in IP address assignment code #83
• Full changelog

cluster-baremetal-operator

• Updating ose-cluster-baremetal-operator images to be consistent with ART #264
• OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
• Full changelog

cluster-etcd-operator

• OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
• OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
• OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
• Full changelog

cluster-kube-cluster-api-operator

• Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
• OCPBUGS-4304: resources.requests for operator pod #667
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
• OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
• Full changelog

cluster-monitoring-operator

• Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
• OCPBUGS-4640: Increase startupProbe for prometheus #1845
• Full changelog

cluster-network-operator

• OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
• OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
• OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
• Full changelog

cluster-node-tuning-operator

• pao: latency-tests: read test log directly from pod (#531) #531
• E2E: Automate Offline CPUs feature (#523) #523
• OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
• Full changelog

console

• OCPBUGS-1727: Allow regular users to access debug pods #12100
• OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
• OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
• OCPBUGS-4786: Fix for initial showing of topology contents #12311
• OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
• OCPBUGS-2443: Monitoring: Fix help popovers #12173
• Full changelog

coredns

• OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
• Full changelog

etcd

• OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
• trim build path #14816
• client/pkg/fileutil: add missing logger to {Create,Touch}DirAll #14799
• clientv3: do not refresh token when users use CommonName based authentication #14790
• etcdserver: call the OnPreCommitUnsafe in unsafeCommit #14733
• add warning message when delete to release-3.5 #13748
• clientv3: fix the implementation of double barrier #14658
• server: add more context to panic message #14676
• fix: close maintenance conn #14662
• test: added e2e test case for issue 14571: etcd doesn’t load auth info when recovering from a snapshot #14656
• server: refresh auth info when etcd recovers from a snapshot #14648
• Backport #14591 to 3.5. #14593
• Release-3.5: server/etcdmain: add configurable cipher list to gRPC proxy listener #14500
• client/v3: Add backoff before retry when watch stream returns unavailable #14582
• Makefile: additional logic fix / Update Ubuntu base #13861
• etcdserver: added more debug log for the purgeFile goroutine #14578
• Automated cherry pick of #13224 #14572 #14573
• *: avoid closing a watch with ID 0 incorrectly #14563
• Backport PR 14322 to release-3.5 #14547
• Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt #14489
• Full changelog

gcp-machine-controllers

• OCPBUGS-4579: refactor restartPolicyToBool function #30
• OCPBUGS-4532: Set sync period for Machine controller #27
• Full changelog

hypershift

• cherry-pick #2006 #2028
• Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
• Full changelog

ironic

• Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
• OCPBUGS-4908: Update packages versions with latest available #336
• OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
• OCPBUGS-3674: Don’t save OS_ prefixed variables #318
• Bug OCPBUGS-3478: Improve resiliency of eTag handling #314
• OCPBUGS-4410: Remove RDO distribution configuration (finally fixes #46) #328
• Full changelog

ironic-agent

• OCPBUGS-5099: make coreos-installer output available in the logs #67
• Full changelog

kube-proxy, sdn

• OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
• OCPBUGS-2105: fix network policy egress #464
• Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 #477
• Full changelog

machine-config-operator

• OCPBUGS-4945: Do not allow empty system reserved values #3459
• OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
• Full changelog

machine-os-content

• Bump fedora-coreos to latest stable #509
• Bump OKD OS version #494
• Full changelog

must-gather

• OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
• Full changelog

openstack-cinder-csi-driver-operator

• Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-4446: fix service account token secret reference (#2862) #416
• Full changelog

ovn-kubernetes

• OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
• OCPBUGS-1720: Backport changes to ovnkube-trace #1436
• OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
• OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
• OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
• OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
• OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
• OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
• OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
• OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
• OCPBUGS-4475: Handle expired entry while handling dns update #1417
• OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
• OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
• OCPBUGS-4167: EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add #1404
• Full changelog

tests

• SPLAT-856: [release-4.11] include storage and must-gather tests in expectedTestCount #27494
• Full changelog

thanos

• Updating thanos images to be consistent with ART #99
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-5472: Fix sc creation on resync #127
• Full changelog

---

View changelog in Markdown or change previous release: 4.11.0-0.okd-2022-12-02-1456404.11.0-0.okd-2022-11-19-0500304.11.0-0.okd-2022-11-05-0307114.11.0-0.okd-2022-10-28-1533524.11.0-0.okd-2022-10-15-0736514.11.0-0.okd-2022-08-20-0229194.11.0-0.okd-2022-07-29-1541524.10.0-0.okd-2022-07-09-0736064.10.0-0.okd-2022-06-24-2129054.10.0-0.okd-2022-06-10-1313274.10.0-0.okd-2022-05-28-0621484.10.0-0.okd-2022-05-07-0218334.10.0-0.okd-2022-04-23-1313574.10.0-0.okd-2022-03-07-1312134.9.0-0.okd-2022-02-12-1408514.9.0-0.okd-2022-01-29-0355364.9.0-0.okd-2022-01-14-2301134.9.0-0.okd-2021-12-12-0258474.9.0-0.okd-2021-11-28-0357104.8.0-0.okd-2021-11-14-0524184.8.0-0.okd-2021-10-24-0617364.8.0-0.okd-2021-10-10-0301174.8.0-0.okd-2021-10-01-2218354.7.0-0.okd-2021-09-19-0132474.7.0-0.okd-2021-08-22-1636184.7.0-0.okd-2021-08-07-0630454.7.0-0.okd-2021-07-03-1909014.7.0-0.okd-2021-06-19-1915474.7.0-0.okd-2021-06-13-0907454.7.0-0.okd-2021-06-04-1910314.7.0-0.okd-2021-05-22-0500084.7.0-0.okd-2021-04-24-1034384.7.0-0.okd-2021-04-11-1244334.7.0-0.okd-2021-03-28-1520094.7.0-0.okd-2021-03-21-0941464.7.0-0.okd-2021-03-07-0908214.7.0-0.okd-2021-03-06-1249084.7.0-0.okd-2021-02-25-1447004.6.0-0.okd-2021-02-14-2053054.6.0-0.okd-2021-01-23-1325114.6.0-0.okd-2021-01-17-1857034.6.0-0.okd-2020-12-12-1353544.6.0-0.okd-2020-11-27-2001264.5.0-0.okd-2020-10-15-2354284.5.0-0.okd-2020-10-03-0124324.5.0-0.okd-2020-09-18-2026314.5.0-0.okd-2020-09-04-1807564.5.0-0.okd-2020-08-12-0205414.5.0-0.okd-2020-07-29-0703164.5.0-0.okd-2020-07-14-153706-ga4.5.0-0.okd-2020-07-12-134038-rc4.5.0-0.okd-2020-06-29-110348-beta64.4.0-0.okd-2020-05-23-055148-beta54.4.0-0.okd-2020-04-21-163702-beta44.4.0-0.okd-2020-04-16-074048-beta34.4.0-0.okd-2020-04-07-175212-beta24.4.0-0.okd-2020-03-28-092308-beta1───4.16.0-0.okd-scos-2023-11-24-131142───4.16.0-0.okd-2023-12-03-0518044.16.0-0.okd-2023-12-02-2219154.16.0-0.okd-2023-12-02-1405264.16.0-0.okd-2023-12-02-0711084.16.0-0.okd-2023-12-02-0011044.16.0-0.okd-2023-12-01-1943164.16.0-0.okd-2023-11-29-0637264.16.0-0.okd-2023-11-28-1732284.16.0-0.okd-2023-11-28-0518584.16.0-0.okd-2023-11-27-2354194.16.0-0.okd-2023-11-27-152214───4.15.0-0.okd-scos-2023-12-03-0617594.15.0-0.okd-scos-2023-12-02-2318044.15.0-0.okd-scos-2023-12-02-1841084.15.0-0.okd-scos-2023-12-02-1147144.15.0-0.okd-scos-2023-12-02-0456354.15.0-0.okd-scos-2023-12-01-2146334.15.0-0.okd-scos-2023-11-29-1143554.15.0-0.okd-scos-2023-11-29-0729454.15.0-0.okd-scos-2023-11-29-0311114.15.0-0.okd-scos-2023-11-28-2157184.15.0-0.okd-scos-2023-11-28-165138───4.15.0-0.okd-2023-12-03-1055124.15.0-0.okd-2023-12-03-0309594.15.0-0.okd-2023-12-02-2237514.15.0-0.okd-2023-12-02-1528214.15.0-0.okd-2023-12-02-1035424.15.0-0.okd-2023-12-02-0339394.15.0-0.okd-2023-11-29-0842014.15.0-0.okd-2023-11-29-0312014.15.0-0.okd-2023-11-29-0015094.15.0-0.okd-2023-11-28-1910324.15.0-0.okd-2023-11-28-140755───4.14.0-0.okd-scos-2023-12-02-1828524.14.0-0.okd-scos-2023-12-02-0138394.14.0-0.okd-scos-2023-12-01-1828524.14.0-0.okd-scos-2023-12-01-0244554.14.0-0.okd-scos-2023-11-30-1832484.14.0-0.okd-scos-2023-11-30-062834───4.14.0-0.okd-2023-12-02-0807124.14.0-0.okd-2023-12-01-1344464.14.0-0.okd-2023-12-01-0244554.14.0-0.okd-2023-11-30-0921384.14.0-0.okd-2023-11-30-015154───4.13.0-0.okd-scos-2023-12-02-0328544.13.0-0.okd-scos-2023-12-01-1804404.13.0-0.okd-scos-2023-12-01-1034594.13.0-0.okd-scos-2023-12-01-0527334.13.0-0.okd-scos-2023-11-30-1714024.13.0-0.okd-scos-2023-11-30-092514───4.13.0-0.okd-2023-12-02-0328544.13.0-0.okd-2023-12-01-2230044.13.0-0.okd-2023-12-01-1401594.13.0-0.okd-2023-12-01-0527334.13.0-0.okd-2023-11-30-171403───4.12.0-0.okd-scos-2023-11-29-0224204.12.0-0.okd-scos-2023-11-28-1953434.12.0-0.okd-scos-2023-11-28-0113054.12.0-0.okd-scos-2023-11-27-1911574.12.0-0.okd-scos-2023-11-27-082403───4.12.0-0.okd-2023-11-29-0224204.12.0-0.okd-2023-11-28-1953434.12.0-0.okd-2023-11-28-0113054.12.0-0.okd-2023-11-27-1911574.12.0-0.okd-2023-11-27-082403───4.11.0-0.okd-2023-12-02-0512524.11.0-0.okd-2023-12-02-0144214.11.0-0.okd-2023-12-01-1707154.11.0-0.okd-2023-12-01-1254594.11.0-0.okd-2023-12-01-0802554.11.0-0.okd-2023-11-30-201406───4.10.0-0.okd-2023-12-01-0916304.10.0-0.okd-2023-11-30-1839144.10.0-0.okd-2023-11-28-1123484.10.0-0.okd-2023-11-22-2144174.10.0-0.okd-2023-10-30-1440324.10.0-0.okd-2023-10-03-1426294.10.0-0.okd-2023-10-03-1326294.10.0-0.okd-2023-09-30-1343174.10.0-0.okd-2023-09-26-1041584.10.0-0.okd-2023-09-22-163632───4.9.0-0.okd-2023-08-26-1230464.9.0-0.okd-2023-08-07-2357434.9.0-0.okd-2023-08-04-0546134.9.0-0.okd-2023-08-03-0142254.9.0-0.okd-2023-07-28-203600───4.8.0-0.okd-2023-07-28-0331014.8.0-0.okd-2023-07-15-0327544.8.0-0.okd-2023-04-19-2112164.8.0-0.okd-2023-02-23-1645104.8.0-0.okd-2023-02-11-1545274.8.0-0.okd-2021-06-19-2215444.8.0-0.okd-2021-05-22-0538244.8.0-0.okd-2021-05-04-030843───4.7.0-0.okd-2023-09-17-0430194.7.0-0.okd-2023-09-13-1747374.7.0-0.okd-2023-08-23-1349034.7.0-0.okd-2023-07-31-1831494.7.0-0.okd-2023-07-28-1136314.7.0-0.okd-2021-02-23-121606───4.6.0-0.okd-2023-10-03-1419354.6.0-0.okd-2023-10-03-1319354.6.0-0.okd-2023-08-02-1800324.6.0-0.okd-2023-07-28-0821524.6.0-0.okd-2023-07-28-043311───4.5.0-0.okd-2022-08-24-0734294.5.0-0.okd-2022-05-25-1630394.5.0-0.okd-2022-05-25-0220374.5.0-0.okd-2022-04-03-0734004.5.0-0.okd-2021-08-18-1452474.5.0-0.okd-2021-06-22-1813044.5.0-0.okd-2021-06-16-1401464.5.0-0.okd-2021-06-02-1817214.5.0-0.okd-2021-05-18-1748454.5.0-0.okd-2021-04-29-2056274.5.0-0.okd-2021-04-21-1810334.5.0-0.okd-2021-01-22-1200064.5.0-0.okd-2021-01-22-0900284.5.0-0.okd-2021-01-22-0725474.5.0-0.okd-2021-01-22-0443464.5.0-0.okd-2020-07-14-1537064.5.0-0.okd-2020-07-12-1340384.5.0-0.okd-2020-06-29-110348───4.4.0-0.okd-2023-10-01-0735124.4.0-0.okd-2023-06-01-0735124.4.0-0.okd-2023-05-19-0735454.4.0-0.okd-2023-04-01-0735244.4.0-0.okd-2022-10-15-0734334.4.0-0.okd-2021-03-10-0906554.4.0-0.okd-2021-02-22-0741034.4.0-0.okd-2021-02-11-2321594.4.0-0.okd-2021-02-04-0403384.4.0-0.okd-2021-02-04-0211284.4.0-0.okd-2020-05-23-0551484.4.0-0.okd-2020-04-21-1637024.4.0-0.okd-2020-04-16-0740484.4.0-0.okd-2020-04-07-1752124.4.0-0.okd-2020-03-28-0923084.4.0-0.okd-2020-01-28-022517───4.14.0-0.okd-scos-2023-11-10-0508464.13.0-0.okd-scos-2023-10-19-1112564.13.0-0.okd-scos-2023-10-11-0632524.13.0-0.okd-scos-2023-07-07-0434174.13.0-0.okd-scos-2023-06-23-0414574.13.0-0.okd-scos-2023-06-22-0028524.13.0-0.okd-scos-2023-05-25-0858224.12.0-0.okd-scos-2023-04-14-0529314.12.0-0.okd-scos-2023-03-23-2136044.12.0-0.okd-scos-2023-02-14-0601094.12.0-0.okd-scos-2022-12-02-0837404.12.0-0.okd-scos-2022-10-25-053756───4.15.0-0.okd-scos-2023-11-10-1924314.14.0-0.okd-scos-2023-10-19-1232264.14.0-0.okd-scos-2023-10-11-0442584.14.0-0.okd-scos-2023-08-17-0220294.14.0-0.okd-scos-2023-05-23-2245404.13.0-0.okd-scos-2023-05-04-1922524.13.0-0.okd-scos-2023-03-29-1248244.13.0-0.okd-scos-2023-02-13-084859

Source code for this page located on github