4.14.0-0.okd-2023-11-12-042703

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.14.0-0.okd-2023-11-12-042703

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

Changes from 4.14.0-0.okd-2023-10-28-073550

Created: 2023-11-12 07:58:37 +0000 UTC

Image Digest: sha256:2242d1df4e4cbcc0cd27191ab9ad5f55ac4f0c60c3cda2a186181a2435e3bd00

Release 4.14.0-0.okd-2023-11-12-042703 was created from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2023-11-12-042703

Components

Kubernetes 1.27.6
Fedora CoreOS upgraded from 38.20231002.3 to 38.20231027.3

Rebuilt images without code change

multus-cni git 599223b8 sha256:3b4016c2feaddb883b851df19fbbc0bb7d3d00ea976152de32612b5ebac9dc91
olm-catalogd git aa44c026 sha256:67308408fa9d18bc605be7cb6b58c3080a4ba828c8481f6571368b893d583363
olm-operator-controller git 17343293 sha256:b7cca14f5780432803ac68df060c80d04831f2abeccb39d6186779a1ad7bde90
olm-rukpak git daa50736 sha256:e5163830173df7afb64b084cd3ecc486613f66450f5782f2711e2e2199c06766
ovn-kubernetes git 7a232386 sha256:f8617174ea963f654f714939d14a5129f1abe4327b4de93161e8a8671f6abb28
ovn-kubernetes-microshift git 7a232386 sha256:95bff568d7f7f249a4b591c7b0f51ddfe3409dd7cee4d1f15931ba13969e6c2f

aws-pod-identity-webhook

snyk: exclude vendor/ #171
Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

OCPBUGS-21868: vSphere,segfault on version check #7605
OCPBUGS-22945: Update gcloud version to 447.0.0 #7681
OCPBUGS-22187: azure: validation: validate defaultMachinePlatform #7615
OCPBUGS-22758: update RHCOS 4.14 bootimage metadata to 414.92.202310210434-0 #7655
OCPBUGS-19922: Release 4.14 skip agent tui on external oci platform #7599
OCPBUGS-21653: Rectify GCP label key validation check #7606
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-22702: Reflect container’s exit code for long running tasks not attached to terminal #1592
OCPBUGS-20508: regeneratemco: explicitly check for PlatformStatus field #1573
Full changelog

cloud-credential-operator

NO-ISSUE: Removing andrew from OWNERS #617
snyk: exclude vendor/ #615
OCPBUGS-22651: explicitly set azure oidc bucket to allow public blob access #612
Full changelog

cluster-authentication-operator

OCPBUGS-20705: go.mod: bump golang.org/x/net to v0.17.0 #637
Full changelog

cluster-baremetal-operator

Jira OCPBUGS-22208: Trigger reconcile if Secret openshift-config/pull-secret changes #376
Full changelog

cluster-capi-operator

OCPBUGS-22314: fix: add missing azure identity diff #136
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-20552: apply necessary RBAC for the alibaba cloud controller manager #289
Full changelog

cluster-config-operator

OCPBUGS-21653: Update openshift/api package to latest version #371
: OCPBUGS-21286: bump library-go to include switch to HTTP/1.1 #369
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-20566: webhooks: set min version TLS 1.2 + exclude weak ciphersuites #254
Full changelog

cluster-etcd-operator

OCPBUGS-22477: Remove z-upgrades from UpgradeBackupController #1140
OCPBUGS-21802: remove revision stability check from bootstrap complet… #1138
OCPBUGS-21175: fixing CVE-2023-39325 by updating dependencies #1142
Full changelog

cluster-image-registry-operator

OCPBUGS-22127: increase storage account key cache expiration #941
OCPBUGS-20710: mitigate effects of rapid reset #942
Full changelog

cluster-kube-apiserver-operator

: OCPBUGS-20898: bump library-go to include switch to HTTP/1.1 #1569
OCPBUGS-22718: [release-4.14] OCPBUGS-20331: manifests: rename API performance dashboard #1570
Full changelog

cluster-kube-storage-version-migrator-operator

: OCPBUGS-21371: bump library-go to include switch to HTTP/1.1 #96
Full changelog

cluster-machine-approver

OCPBUGS-21468: Bump x/net package to v0.17.0 #206
Full changelog

cluster-monitoring-operator

OCPBUGS-22917: jsonnet: pin commits #2143
OCPBUGS-22734: [release-4.14] add RHACS telemetry metrics #2137
Full changelog

cluster-network-operator

OCPBUGS-19897: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2043
Full changelog

cluster-node-tuning-operator

Disable HTTP/2 for webhook and metrics servers (#841) #841
Remove obsolete protocols and weak ciphers (#835) #835
Full changelog

cluster-openshift-apiserver-operator

: OCPBUGS-20724: bump library-go to include switch to HTTP/1.1 #554
Full changelog

cluster-version-operator

OCPBUGS-20762: [4.14] Bump http-related deps #986
Full changelog

console

OCPBUGS-22980: remove expandable toggle for conditional update risk d… #13308
OCPBUGS-22374: Telemetry- Current page was sometimes not tracked when reloading the current page #13277
OCPBUGS-22177: Channel page shows “Required” message for the default name when navigate to create channel page #13262
OCPBUGS-19371: Upgrade DomainMapping apiVersion to v1beta1 #13165
OCPBUGS-19416: Correct logout process #13173
OCPBUGS-22285: updating doc links for 4.14 GA #13273
OCPBUGS-19845: mock apis for git repo in test serverless function tests #13199
OCPBUGS-22460: Fix the forms when BC is not installed in the cluster #13288
OCPBUGS-21877: add support for new features annotations while preserv… #13258
OCPBUGS-22377: Fixed Edit Application form for Knative Services #13279
Full changelog

console-operator

OCPBUGS-22274: Disable HTTP/2 for webhook #803
OCPBUGS-20480: Reset console operator’s conditions #797
Full changelog

container-networking-plugins

OCPBUGS-20374: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-22974: [release-4.14] manage-security-groups: Only add SGs to LB members (#2455) #244
OCPBUGS-21271: Merge kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #237
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-23111: Should reference configmaps instead of secrets #152
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
Full changelog

docker-builder

OCPBUGS-23006: Add -p flag to cp command to preserve timestamps #370
Full changelog

docker-registry

OCPBUGS-22826: Allow ICSP IDMS coexisting #385
Full changelog

etcd

OCPBUGS-22727: [4.14] Rebase openshift/etcd to 3.5.10 #226
Full changelog

fedora-coreos, machine-os-content, okd-rpms

Bump fedora-coreos to latest stable #689
Bump Fedora CoreOS to latest stable #686
Full changelog

gcp-cluster-api-controllers

OCPBUGS-17290, OCPBUGS-21417: Bump golang.org/x/net to v0.17.0 #203
Full changelog

hyperkube, pod

OCPBUGS-22861: UPSTREAM: <carry>: support for both icsp and idms objects #1780
Full changelog

hypershift

OCPBUGS-23142: adding permission to CNO RBAC Calico path for network-node-identity deploy #3182
OCPBUGS-22295: Added brackets to the kubeconfig server address when IPv6 #3117
OCPBUGS-22690: Use the same etcd snapshot for all replicas during etcd restore #3146
OCPBUGS-22959: Update regex validation for nodepool.spec.taints.value #3165
HOSTEDCP-1280: Adjustment cluster-cidr,service-cidr to support dualstack #3162
OCPBUGS-22898: Stop exposing kas on 6443 private route service load balancer #3159
OCPBUGS-22898: Stop defaulting aws private haproxy external port to 6443 #3160
OCPBUGS-19897: Add konnectivity-proxy container to CNO #3058
OCPBUGS-22379: Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller #3131
Full changelog

insights-operator

OCPBUGS-21859: remove username & password config options (#843) #843
Full changelog

ironic

OCPBUGS-14926: Handle Eject DVD 4.14 #415
OCPBUGS-22253: Use bash process substitution instead of pipe #411
Full changelog

k8s-prometheus-adapter

OCPBUGS-21473: Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #89
Full changelog

machine-config-operator

OCPBUGS-22275: support icsp and idms objects #3995
OCPBUGS-22391: Require a hostname override for AWS #4001
OCPBUGS-20418: Introduce kubelet-dependencies.target and firstboot-osupdate.target #3967
OCPBUGS-20051: Support to append the duplicate kernel arguments to the rendered MC #3957
OCPBUGS-21065: Update library-go and k8s dependencies to latest version #3994
Full changelog

multus-admission-controller

OCPBUGS-21372: Update go.mod for CVE-2023-39325 [Release-4.14] #71
Full changelog

multus-networkpolicy

OCPBUGS-21454: Update go.mod for CVE-2023-39325 (#33) #33
Full changelog

network-metrics-daemon

Update the k8s dependencies to 1.27.7 (#82) #82
Full changelog

oc-mirror

OCPBUGS-21472: fix: CVE-2023-39325 (#711) #711
Full changelog

openshift-apiserver

OCPBUGS-20150: pkg/image: avoid unnecessary service lookups when registry is removed #393
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-20400: Add OLMConfig API to control package server sync interval [release-4.14] #582
OCPBUGS-19789: Backport OCPBUGS-14698: Rename ClusterRoles created by OperatorGroups [release-4.14] #566
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-20881: fix: disable HTTP2 connections by default #253
Full changelog

service-ca-operator

OCPBUGS-21066: go.mod: bump golang.org/x/net to v0.17.0 #224
Full changelog

tests

OCPBUGS-23145: Bump watch requests for cluster-baremetal-operator #28385
trt-1340: backport exact and disable monitor tests options to 4.14 #28391
OCPBUGS-19923: Updating parameters for build timing PushImage test #28291
OCPBUGS-22411: fix: increase upper bounds for samples operator #28356
OCPBUGS-22720: Use Centos 8 Stream mysql image in tests #28365
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-17312, OCPBUGS-21558: [release-4.14] bump golang.org/x/net to v0.17.0 #20
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github