Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.14.0-0.okd-2024-01-06-084517

Team Approvals:

No tests for this release

Upgrades from:

• 4.14.0-0.okd-2024-01-05-084517 (changes) - Success
• 4.14.0-0.okd-2023-12-01-225814 - Success Success
• 4.14.0-0.okd-2023-11-14-101924 (changes) - Success Success
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Success Success
• 4.14.0-0.okd-2023-10-28-073550 (changes) - Success Success
• 4.13.0-0.okd-2023-10-28-065448 (changes) - Failed Success

Upgrades to:

• 4.15.0-0.okd-2024-02-10-035534 (changes) - Success Success
• 4.15.0-0.okd-2024-01-27-070424 (changes) - Failed Success
• 4.14.0-0.okd-2024-01-26-175629 (changes) - F S S S

---

Changes from 4.14.0-0.okd-2023-12-01-225814

Created: 2024-01-07 09:26:56 +0000 UTC

Image Digest: sha256:c4a6b6850701202f629c0e451de784b02f0de079650a1b9ccbf610448ebc9227

Release 4.14.0-0.okd-2024-01-06-084517 was created from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2024-01-06-084517

Components

• Kubernetes upgraded from 1.27.8 to 1.27.9
• Fedora CoreOS 38.20231027.3

Rebuilt images without code change

• agent-installer-csr-approver git 02dc1175 sha256:3babd9c93adda52bf881aefdf46db8a8bfcfbf1837e9132037e02fe21546a20a
• agent-installer-orchestrator git 02dc1175 sha256:4f43fe2cc3d57b7bb7cec9a52a1ca033a1f4547b52dba6c14fee02d8b87acf21
• aws-pod-identity-webhook git ad7aa0ae sha256:6395e6ff6e910a066dbd4efe71074cc552e3f412f2837a4a49ffb362ef9a75a2
• cluster-monitoring-operator git 94ddd62d sha256:4380bdc87c53d00e4ae00ec44db8d76812053f92fdf4da1907704dc728773ff7
• kube-proxy git 1a9befcb sha256:c3baee4d3e085ec946f18965bda87e1f73205de9642aa64a8b61e89912971c8d
• sdn git 1a9befcb sha256:9fc803d3e46ce9d88e5c58de2e88ca32479f8e85931434645853e72e6e45be18

agent-installer-api-server

• OCPBUGS-23069: Ignore hostPrefix validation for plugins other than OVN/SDN (#5676) #5676
• Full changelog

alibaba-cloud-controller-manager

• OCPBUGS-21255: Bump golang.org/x/net to v0.18.0 #38
• Full changelog

apiserver-network-proxy

• HOSTEDCP-1323: Merge latest code into 4.14 branch #45
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #109
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #83
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-22771: aws: use security groups from defaultMachinePlatform #7658
• OCPBUGS-24489: baremetal: populate customDeploy in advance #7802
• OCPBUGS-22770: destroy: gcp: fix destroying regional disks #7657
• Bug OCPBUGS-22776: OpenStack: Fix IPv6 address configuration for bootstrap #7660
• OCPBUGS-22978: IBMCloud: Add eu-es region #7684
• OCPBUGS-23399: Check if PER is enabled in the target PowerVS workspace #7736
• Full changelog

baremetal-operator

• OCPBUGS-24489: Do not update instance_info and deploy_interface for active nodes #325
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-25983: Remove deprecated password defaulting in default config flag #1646
• OCPBUGS-24197: Add client version in must-gather summary #1607
• OCPBUGS-24460: Overwrite template’s namespace with the explicit one #1616
• Full changelog

cloud-credential-operator

• OCPBUGS-25275: Azure Workload Identity info in CredsRequests creates a Secret #643
• OCPBUGS-24346: Discover AWS dns suffix from partition and region. #635
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-25384: psa cluster fleet evaluation #1600
• : OCPBUGS-24022: Add workload partitioning annotation #1590
• Full changelog

cluster-network-operator

• OCPBUGS-24320: Add apbroute/status patch rights for ovnkube-node to update status #2143
• OCPBUGS-22787, OCPBUGS-22788, OCPBUGS-22789: ovnkube: container scripts cleanup #2090
• OCPBUGS-23371: hypershift, hosted clusters: enable multi-homing and multi-net features #2117
• OCPBUGS-21717: Bump golang.org/x/net and github.com/openshift/library-go #2122
• OCPBUGS-24633: ipsec add pluto restart #2152
• Full changelog

cluster-node-tuning-operator

• Make MC names deterministic (#903) #903
• OCPBUGS-25671: rps: fix mask update for SR-IOV devices (#891) #891
• OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) (#871) #854
• OCPBUGS-24638: Do not set default RPS sysctl twice (#880) #880
• OCPBUGS-21845: rps: trigger udev event per queue #832 (#832) #832
• Full changelog

cluster-olm-operator

• OCPBUGS-25481: NO-ISSUE: Bump k8s.io/apiextensions-apiserver #41
• OCPBUGS-22581: [release-4.14] OCPBUGS-24652: Bump k8s dependencies #38
• Full changelog

console

• OCPBUGS-24349: Fix crash when ArtifactHub Task has no version #13399
• OCPBUGS-25397: fix runtime error on Node details Overview when Machin… #13446
• OCPBUGS-23771: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13360
• OCPBUGS-24667: Fix plugin proxy handler #13425
• OCPBUGS-24474: S2I Build Wizard should check for Containerfile in addition to Dockerfile #13415
• OCPBUGS-24432: fix filtering issues on Events #13413
• OCPBUGS-24352: add access review for impersonate #13400
• OCPBUGS-22240: Save also the location.search and .hash values in localStorage to restore them after login #13270
• OCPBUGS-24293: ConsolePlugin metrics must no longer be grouped by the vendor #13391
• OCPBUGS-24423: Searching for items in quick search is confusing #13412
• OCPBUGS-22375: Delete results.tekton.dev annotations before rerun the pipelineRun #13278
• OCPBUGS-22478: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13290
• OCPBUGS-24196: ApiVersion displayed on console is v1alpha1 whereas we support v1beta1 #13402
• Full changelog

console-operator

• OCPBUGS-23968: Disable route controller health check for NLB setup #817
• OCPBUGS-24293: ConsolePlugin metrics must no longer be grouped by the vendor #820
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-25804: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #247
• Full changelog

csi-driver-manila-operator

• OCPBUGS-23443: Fix selector for manila-csi-driver-controller-metrics service #211
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump fedora-coreos to latest stable #718
• Bump machine OS version #711
• Bump fedora-coreos to latest stable #707
• Full changelog

hyperkube, pod

• UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 #1552
• OCPBUGS-26006: Update to Kubernetes 1.27.9 #1838
• OCPBUGS-23566: followup to #1808 #1813
• Full changelog

hypershift

• OCPBUGS-23936: Use correct kubeconfig in CCM and remove CCMs access t… #3232
• OCPBUGS-12720: Updating hypershift images to be consistent with ART #2467
• OCPBUGS-24627: unset ServiceAccount on ignition-server-proxy #3295
• [Release 4.14] OCPBUGS-24556: Fix a bug on deletion of a hostedcluster #3290
• OCPBUGS-24269: add CLI oauthclient #3272
• OCPBUGS-23569: Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3224
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-21149: Bump golang.org/x/net to v0.18.0 #55
• Full changelog

insights-operator

• OCPBUGS-23962: adds helm information gather (#868) (#877) #868
• OCPBUGS-23445: DVO gatherer - add retry logic (#861) (#870) #861
• Full changelog

ironic

• OCPBUGS-19884: update Ironic to include secure boot fixes #445
• OCPBUGS-23903: Ironic side of external_http_url (METAL-163) is not wired in correctly #429
• Full changelog

ironic-agent

• OCPBUGS-25685: Relax packages requirements #103
• Full changelog

machine-api-operator

• OCPBUGS-24047: Update reference URL #1186
• Full changelog

machine-config-operator

• OCPBUGS-24596: [release-4.14] execute cert related processes to ensure proper rotation #4063
• OCPBUGS-24397: gcp-routes: don’t exit on crictl failures #4056
• OCPBUGS-20554: Ensure gcp-routes hack for internalLB hairpin traffic works for SGW #3973
• Full changelog

monitoring-plugin

• OCPBUGS-24664: disable query link for non metric-based alerts #82
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#88) #88
• Full changelog

oc-mirror

• OCPBUGS-23327: Fix MirrorToDisk of oci catalogs in hidden folders (#766) #766
• Full changelog

olm-operator-controller

• OCPBUGS-22616: [release-4.14] Bump go.opentelemetry.io dependencies #58
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #142
• Full changelog

openstack-machine-api-provider

• OCPBUGS-23202: Don’t build InstanceSpec during delete operations #95
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-22538: bump otelhttp to 44.0 for api #647
• OCPBUGS-22538: otelhttp bump [release-4.14] #632
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-25903: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2003
• OCPBUGS-25746, OCPBUGS-25747: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1996
• OCPBUGS-24320: APB status not updated when fails to process during the first reconciliations #1968
• OCPBUGS-23257: Update leaderelection config to allow retries #1955
• OCPBUGS-23387: Ignore completed virt-launcher pods #1954
• OCPBUGS-25087: Fragment oversized reply packets in LGW mode #1982
• OCPBUGS-22735: OVNK/GW: Ignore headless services in syncServices #1970
• OCPBUGS-24350: [release-4.14] fixes MTU configuration on gateway router #1969
• OCPBUGS-24209: Significantly reduce shared informer memory usage #1964
• Full changelog

powervs-block-csi-driver

• OCPBUGS-25980: Rebase with upstream: Fix snyk code issue: Path Traversal #72
• OCPBUGS-24713: synk: ignore vendor dir #60
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-25715: snyk: ignore vendor dir #60
• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #48
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-24727: UPSTREAM: <carry>: snyk code scan exclude vendor directory #54
• Full changelog

powervs-machine-controllers

• OCPBUGS-24730: snyk code scan exclude vendor directory #65
• Full changelog

prometheus

• OCPBUGS-22531: bump otel dependencies #183
• Full changelog

telemeter

• OCPBUGS-22647: go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #494
• Full changelog

tests

• OCPBUGS-26044: Adding test case for when exceed openshift.io/image-tags will ban to … #28493
• OCPBUGS-21774: backport #28316 to 4.14 release #28335
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #186
• OCPBUGS-23169: Fix vsphere csi controller pods from getting constantly restarted #193
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github