Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.11.0-0.okd-2023-01-14-152430

Team Approvals:

No tests for this release

Upgrades from:

• 4.11.0-0.okd-2023-01-14-075321 (changes) - Success
• 4.11.0-0.okd-2022-12-02-145640 (changes) - Failed Success
• 4.11.0-0.okd-2022-11-19-050030 - Success
• 4.10.0-0.okd-2022-07-09-073606 (changes) - Success

Upgrades to:

• 4.12.0-0.okd-2023-04-16-041331 (changes) - Success
• 4.12.0-0.okd-2023-04-01-051724 (changes) - Success Failed
• 4.12.0-0.okd-2023-03-18-084815 (changes) - F S F
• 4.12.0-0.okd-2023-03-05-022504 (changes) - F F S
• 4.12.0-0.okd-2023-02-18-033438 (changes) - F F F S
• 4.12.0-0.okd-2023-02-04-212953 (changes) - Success
• 4.12.0-0.okd-2023-01-21-055900 (changes) - F F F S F F F F

---

Loading changelog, this may take a while ...

Changes from 4.11.0-0.okd-2022-11-19-050030

Created: 2023-01-15 10:06:34 +0000 UTC

Image Digest: sha256:27c99f5b7734f773a7981b9e527417edcda0eee217117632198d64aa33e95c46

Release 4.11.0-0.okd-2023-01-14-152430 was created from registry.ci.openshift.org/origin/release:4.11.0-0.okd-2023-01-14-152430

Components

• Kubernetes 1.24.6
• Fedora CoreOS upgraded from 411.36.4 to 411.36.5

Rebuilt images without code change

• csi-driver-manila git 246ae15e sha256:b17b97aeb7f240fe40e174c53da1d5a175b196806e5a5ab196d6b1f58a879a27
• openstack-cinder-csi-driver git 246ae15e sha256:f0ac1f7e774af1aefd9c05e1e8db1e6dfd9f056d060a0e440a21e59e2bc33685
• openstack-cloud-controller-manager git 246ae15e sha256:1aefc2d07a613087d258ee40970924b2cc0f3ef34347ea99062ff9090dfb92e0
• openstack-machine-controllers git 38f15dbc sha256:45667e7332260d0f99a2eafaec2454cf10f7cd8b9d582d36d33d23299043eb34

agent-installer-api-server

• Updating ose-agent-installer-api-server images to be consistent with ART (#3980) #3980
• MGMT-11799: change all ‘go get’ commands (#4887) #4887
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Remove jira tickets prefix requirements (#596) #596
• Full changelog

agent-installer-node-agent

• Updating ose-agent-installer-node-agent images to be consistent with ART (#381) #381
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-4185: Fix nodeService.getVolumesLimit() adding more instance #213
• Full changelog

aws-machine-controllers

• Updating ose-machine-api-provider-aws images to be consistent with ART #57
• Full changelog

azure-machine-controllers

• OCPBUGS-2123: Fix availability sets unwanted creation for unknown vmSizes #41
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-5422: Switch back to gp2 ebs volume type for bootstrap instance #6743
• OCPBUGS-4685: out-of-bounds read in golang.org/x/text/language leads to DoS #6685
• OCPBUGS-3193: [release-4.11] [AWS] Add AWS r6i into tested instance types table #6350
• OCPBUGS-3362: bump RHCOS 4.11 bootimage metadata #6720
• OCPBUGS-4720: GCP: Add me-west1 region #6690
• OCPBUGS-5078: OpenStack: Force JSON content-type in Swift object listing #6725
• OCPBUGS-4405: UPI: Azure: create HyperV2 rhcos image #6681
• OCPBUGS-4530: Enable CVO unmanage overrides in bootstrap-in-place installations #6668
• OCPBUGS-4398: update golang.org/x/crypto #6652
• OCPBUGS-3023: GCP: Add missing regions #6542
• OCPBUGS-4325: gcp: fail during validation if service usage is not enabled #6647
• OCPBUGS-4325: Service Usage API is required, not optional #6642
• OCPBUGS-4081: OpenStack: Force JSON content-type in Swift #6625
• Full changelog

cli, cli-artifacts, deployer, tools

• Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect #1230
• Full changelog

cloud-network-config-controller

• Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration #93
• OCPBUGS-3932: Add assigned egress ips into capacity #78
• OCPBUGS-4529: Node controller: Skip uninitialized nodes #85
• OCPBUGS-4528: AWS: build temp credentials file from AWS key and secret #84
• OCPBUGS-4167: Run azure operations in sequence #79
• OCPBUGS-4163: AWS: Fix race in IP address assignment code #83
• Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig #75
• OCPBUGS-4233: Updating ose-cloud-network-config-controller images to be consistent with ART #81
• Full changelog

cluster-autoscaler

• Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #221
• Full changelog

cluster-baremetal-operator

• Updating ose-cluster-baremetal-operator images to be consistent with ART #264
• OCPBUGS-5075: Do not fail the reconciler when no master Machines exist #318
• OCPBUGS-1762: add a workaround for a NetworkManager issue #298
• Full changelog

cluster-etcd-operator

• OCPBUGS-4785: only allow TLS1.²⁄₁.3 ciphersuites in etcd and CEO #973
• Full changelog

cluster-ingress-operator

• OCPBUGS-3049: Update CRLs when they expire #853
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #1429
• OCPBUGS-4301: bootstrap-kube-apiserver: specify resources.requests #1412
• OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #1422
• Full changelog

cluster-kube-cluster-api-operator

• Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #6
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #690
• OCPBUGS-4304: resources.requests for operator pod #667
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-4551: guard controller: set an explicit hostname to avoid name collisions #458
• OCPBUGS-4294: bootstrap-kube-scheduler: specify resources.requests #449
• Full changelog

cluster-monitoring-operator

• Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift #1749
• OCPBUGS-4640: Increase startupProbe for prometheus #1845
• OCPBUGS-4030: test: increase timeout when checking remote write metrics #1821
• Full changelog

cluster-network-operator

• OCPBUGS-3971: HyperShift: Do not accept empty infrastructure name #1635
• OCPBUGS-3490: OVN-Kubernetes: Prefer oldest nodes #1641
• OCPBUGS-4137: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1640
• Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression #1638
• Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation #1551
• OCPBUGS-3911: SDN: /var/run mount cleanup #1631
• Full changelog

cluster-node-tuning-operator

• pao: latency-tests: read test log directly from pod (#531) #531
• E2E: Automate Offline CPUs feature (#523) #523
• OCPBUGS-4216: e2e: performance profile: add logs and minor fixes (#515) #515
• E2E fix: Make Nodeselector tests independent (#502) #502
• e2e: perfprof: remove broken test (#497) #497
• Add ktimer to PAO tuned profile (#510) #510
• set RPS for veth on host level only (#508) #508
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-3290: routes/status resources can leak sensitive data, exclude it from audit #513
• Full changelog

console

• OCPBUGS-1727: Allow regular users to access debug pods #12100
• OCPBUGS-5258: add support for version v1beta1 for knativeServing and knativeEventing #12403
• OCPBUGS-5418: Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12413
• OCPBUGS-4786: Fix for initial showing of topology contents #12311
• OCPBUGS-5206: Pan nodes into view if all nodes are not visible on load #12398
• OCPBUGS-2443: Monitoring: Fix help popovers #12173
• Full changelog

coredns

• OCPBUGS-2901: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #79
• Full changelog

etcd

• OCPBUGS-3101: Rebase openshift/etcd 4.11 onto v3.5.6 #170
• Full changelog

gcp-machine-controllers

• OCPBUGS-4579: refactor restartPolicyToBool function #30
• OCPBUGS-4532: Set sync period for Machine controller #27
• Full changelog

hypershift

• cherry-pick #2006 #2028
• Bug HOSTEDCP-604: Don’t store machine payload in token secret for replace node pools (#1873) #1880
• Full changelog

ironic

• Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image #344
• OCPBUGS-4908: Update packages versions with latest available #336
• OCPBUGS-5145: Configure Ironic iLO driver to use web server #342
• OCPBUGS-3674: Don’t save OS_ prefixed variables #318
• Bug OCPBUGS-3478: Improve resiliency of eTag handling #314
• OCPBUGS-4410: Remove RDO distribution configuration (finally fixes #46) #328
• Full changelog

ironic-agent

• OCPBUGS-5099: make coreos-installer output available in the logs #67
• Full changelog

kube-proxy, sdn

• OCPBUGS-998: [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade #488
• OCPBUGS-2105: fix network policy egress #464
• Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 #477
• Full changelog

kube-state-metrics

• OCPBUGS-4087: cherry-pick, do not expose ingress path metric when service is nil #85
• Full changelog

machine-config-operator

• OCPBUGS-4945: Do not allow empty system reserved values #3459
• OCPBUGS-4099: daemon: gate done state on uncordon completion #3434
• OCPBUGS-3882: Sync controllerconfig anyway if daemon sync fails #3421
• OCPBUGS-3807: configure-ovs: auto-connect ovs-if-phys0 with br-ex #3419
• OCPBUGS-3756: daemon: Stop setting I/O scheduler to bfq #3418
• Full changelog

machine-image-customization-controller

• OCPBUGS-3687: use host IPC for the agent container #70
• Full changelog

machine-os-content

• Bump fedora-coreos to latest stable #509
• Bump OKD OS version #494
• Bump fedora-coreos-config to latest stable #487
• Full changelog

must-gather

• OCPBUGS-4324: backport PodNetworkConnectivityCheck gather script #334 #338
• Full changelog

openstack-cinder-csi-driver-operator

• Bug OCPBUGS-4103: Add SecretHashAnnotation to node service #99
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-4446: fix service account token secret reference (#2862) #416
• Full changelog

ovn-kubernetes

• OCPBUGS-4761: [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1438
• OCPBUGS-1720: Backport changes to ovnkube-trace #1436
• OCPBUGS-4829: Set the node as reachable only when it is being added as an egressip node #1445
• OCPBUGS-4655: [release-4.11] Don’t delete equivalent ACLs by predicate, since it will fail if #1444
• OCPBUGS-4992: [release-4.11] fixing hybrid subnet allocator #1459
• OCPBUGS-4863: [release-4.11] Fix address set cleanup: only delete address sets owned by given object #1448
• OCPBUGS-4887: [release-4.11] Fixes scenario where deleted + completed pods may leak #1455
• OCPBUGS-4838, OCPBUGS-4860: [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors #1447
• OCPBUGS-3614: [4.11] CARRY: client: don’t construct transaction log string when it’s not needed #1374
• OCPBUGS-3116: append instead of overwrite logicalSwitch other-config #1350
• OCPBUGS-4475: Handle expired entry while handling dns update #1417
• OCPBUGS-4564: pods: deleteLogicalPort should not fail when node is gone #1422
• OCPBUGS-4408: Validate node subnet annotations against cluster networks #1415
• OCPBUGS-4167: EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add #1404
• OCPBUGS-3908: [release-4.11] Support proper parsing of IPs with leading zeros #1393
• OCPBUGS-2554: Fix UpdateService healthport checks #1389
• Bug OCPBUGS-3077: [release-4.11] Fix netpol races #1353
• Full changelog

tests

• SPLAT-856: [release-4.11] include storage and must-gather tests in expectedTestCount #27494
• OCPBUGS-3819: Add bond cni test #27554
• Full changelog

thanos

• Updating thanos images to be consistent with ART #99
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-5472: Fix sc creation on resync #127
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github