4.12.0-0.okd-2023-03-18-084815

New features since version 4.11.0-0.okd-2023-12-20-003021

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.12.0-0.okd-2023-03-18-084815

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.12.0-0.okd-2023-03-05-022504

Created: 2023-03-18 11:16:01 +0000 UTC

Image Digest: sha256:7153ed89133eeaca94b5fda702c5709b9ad199ce4ff9ad1a0f01678d6ecc720f

Release 4.12.0-0.okd-2023-03-18-084815 was created from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-03-18-084815

Components

Kubernetes upgraded from 1.25.4 to 1.25.7
Fedora CoreOS upgraded from 37.20230205.3 to 37.20230218.3

Rebuilt images without code change

azure-machine-controllers git cfb76acd sha256:fd114ce5547460ee4c7d587317661a7c69e545cefe2a060f6ba50d94e36cfb74
cluster-capi-operator git 3bfe36aa sha256:2c9c2d17ac800ba92f769c1be1023ac7077ffef254f46560cf99dfb9927b9500
cluster-image-registry-operator git e9a895af sha256:063055f9086236c87964aaa01fb76ddccfe9780a9578da2719269de4c2c18dab
cluster-monitoring-operator git 5a154c3d sha256:666912a6e244cb78fcd4c3f5ca7650f57dc0c03d75096329173fdbbe8e4e05a7
cluster-storage-operator git b29bac7a sha256:55b9f549a0b635e92e7fce3f5bd7585cf1b6e95f94d06a83d76f843f7a29a888
gcp-machine-controllers git ada83dc6 sha256:a098684f8165249bb7898d67483adb91a0305b5b06a11b5e51ec7ae1fd1dc5e1
kuryr-cni git 92b9be25 sha256:5cda4cd8c1e6bab1fab6ed319b6206d2d6e3d4d2e2054acb4b944446d6049a13
kuryr-controller git 92b9be25 sha256:4bbd64a481cd6105db3da0c255b4c6302a8ff01f2d2cb888cb6703144bb7dfdc

agent-installer-api-server

NO-ISSUE: fixing late binding #7070
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-19381: Change downstream base images to rhel9.4 instead of ubi9 (#1002) #1002
MGMT-19595: Push latest tag for downstream images after merge to konflux int repo (#1001) #1001
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) #956
OCPBUGS-13612: update gin version (#997) #997
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#981) #981
MGMT-19506: Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) #976
chore(deps): update konflux references (#972) #972
MGMT-19507: Stop using multi-arch builds in konflux (#971) #971
chore(deps): update konflux references (#958) #958
NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) #965
NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) #966
MGMT-19453: Add downstream dockerfile (#960) #960
MGMT-19408: Create tekton pipelines for acm 2.13 (#954) #954
MGMT-19390: Update mce’s tekton pipelines to be multi-arch (#948) #948
OCPBUGS-45116: Add retry to mount efi device (#947) #947
Red Hat Konflux update assisted-installer-controller-mce-downstream-main (#946) #946
Red Hat Konflux update assisted-installer-mce-downstream-main (#945) #945
MGMT-19371: Add downstream dockerfiles for mce (#943) #943
NO-ISSUE: Add giladravid16 and pastequo to approvers list (#944) #944
OCPBUGS-42553: Rhcos fails to reboot for skip mco reboot on s390x (#941) #941
NO-ISSUE: Update Dockerfile to use go.uber.org/mock (#911) #911
MGMT-19148: Update assisted-service dependencies. (#936) #936
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.18 (#917) #917
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.18 (#898) #898
NO-ISSUE: Bump PGX version (#932) #932
NO-ISSUE: Pin gocov version (#924) #924
OCPBUGS-38466: Allow controller to continue when assisted-service (#896) #896
abi: let the bootstrap waiting for workers before rebooting (#910) #910
OCPBUGS-42149: Libraries bump to mitigate CVE-2024-27289 (#903) #903
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#902) #902
MGMT-18550: bump golang 1.21 (#894) #894
OCPBUGS-31570: Bump to latest preinstall utils for disk cleanup fixes (#886) #886
NO-ISSUE: fixing ARM images builds (#885) #885
OCPBUGS-36779: Reload host inventory on conflict (#877) #877
MGMT-18332: Use centos stream 9 as the base image for test container (#876) #876
NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can’t reach its repositories (#862) #862
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#852) #852
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#817) #817
MGMT-16843: Use hostnamectl to replace illegal hostname (#839) #839
OCPBUGS-32105: Fix race to mark node Joined (#823) #823
NO-ISSUE: Bump github.com/onsi/gomega (#841) #841
MGMT-17305: Moving disk operations to new repo (#840) #840
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) #818
Move to rhel9, decouple from cli image (#760) #760
NO-ISSUE: Decouple inventoryClient from ops (#811) #811
NO-ISSUE: Decouple inventoryClient from ops (#810) #810
NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) #809
MGMT-16587: Update to mitigate CVE-2024-21626 (#806) #806
MGMT-17305: Wipe installation disk on IBI (#808) #808
MGMT-17384: Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) #807
NO-ISSUE: Bump the go-dependencies group with 1 update (#803) #803
MGMT-17308: Offboard osherdp from maintainers list (#802) #802
MGMT-16587: Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) #801
OCPBUGS-30056: RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) #800
MGMT-16993: [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) #798
NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) #799
NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) #797
MGMT-16843: Ensure valid hostname during install (#788) #788
MGMT-16966: Problem creating extra partition on main disk in 4.15+ (#787) #787
NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) #786
MGMT-16211: Remove all timeouts from controller (#779) #779
OCPBUGS-25718: Do not remove uninitialized taints if vSphere credentials are provided. (#778) #778
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) #781
NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) #780
NO-ISSUE: Bump the go-dependencies group with 1 update (#776) #776
NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) #772
NO-ISSUE remove filanov from approves (#773) #773
NO-ISSUE: Bump the go-dependencies group with 1 update (#770) #770
NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) #769
NO-ISSUE: Bump the go-dependencies group with 1 update (#768) #768
NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) #766
NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) #762
MGMT-16266: Indication event showing how often host has been rebooted missing on some nodes (#757) #757
NO-ISSUE: fix golangci-lint failing to be pulled (#758) #758
NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) #756
NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) #755
OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#739) #739
MGMT-16258: Partitions naming convetion is different for various disk types (#752) #752
NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) #751
Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) #719
MGMT-15926: Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) #748
NO-ISSUE: Add my github account as an OWNER for this repository (#749) #749
NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) #747
MGMT-15902: Trigger event that notifies the number of reboots once the node installation is completed (#744) #744
NO-ISSUE: Bump the go-dependencies group with 1 update (#745) #745
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) #743
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) #742
MGMT-16039: upgrade to golang 1.20 (#741) #741
NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) #738
OCPBUGS-16482: Update dependencies to remove goproxy dependency (#701) #701
MGMT-15984: Assisted installer doesn’t freeze and unmount file systems used for overwriting os image (#737) #737
NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) #731
Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) #718
MGMT-15710: Assisted installer changes for avoiding MCO reboot (#713) #713
MGMT-15810: fix image missing nsenter executable (#729) #729
MGMT-15810: change base image to stream9 (#725) #725
NO-ISSUE: fix dependabot ingored packages (#724) #724
NO-ISSUE: dependabot exclude k8s (#706) #706
OCPBUGS-16482: bump golangci-lint to 1.53.1 (#702) #702
OCPBUGS-4240: allow controller to complete for agent-based installs (#700) #700
MGMT-15235: Compile with CGO_ENABLED=1 for amd64 (#699) #699
Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)” (#693) #683
OCPBUGS-17252: Bump golang.org/x/net/html (#695) #695
Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) #652
MGMT-15343: dependabot group updates (#692) #692
MGMT-15344: Assisted-controller should not timeout on waiting cvo by itself (#688) #688
MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683) #683
MGMT-13586: Wait for ETCD Bootstrap to complete (#670) #670
NO-ISSUE: Remove slaviered from project OWNERS (#669) #669
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.7 (#663) #663
Updating ose-agent-installer-csr-approver images to be consistent with ART (#651) #651
MGMT-14299: Limit untaint nodes to vsphere/nutanix (#660) #660
NO-ISSUE: Add javipolo to approvers (#659) #659
MGMT-12967: Create network policy in assisted-installer namespace (#658) #658
NO-ISSUE: Bump github.com/onsi/gomega from 1.24.2 to 1.27.5 (#656) #656
MGMT-14114: Nutanix - uninitialized set on nodes (#653) #653
NO-ISSUE: controller logs optimizations (#646) #646
NO-ISSUE: Bump golang.org/x/sync (#644) #644
MULTIARCH-3387: Set boot device to target disk for powervm (#626) #626
MGMT-13710: assisted-installer-controller hangs for 2 minutes before uploading the ingress CA (#638) #638
NO-ISSUE: Bump golang.org/x/net from 0.5.0 to 0.7.0 (#640) #640
NO-ISSUE: Replace iotil by os and io in order to fix lint issues (#642) #642
NO-ISSUE: Bump openshift/release from golang-1.18 to golang-1.19 (#612) #612
MGMT-13568: Add pause mcp while setting new role labels (#623) #623
MGMT-13292: Add the installed version of the OLM operators in the monitor operators response (#622) #622
Remove uninitialized taint from vSphere nodes (#629) #629
OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage (#627) #627
MGMT-13507: Apply node labels only when node is Ready (#620) #620
MGMT-13463: Assisted-controller can fail to send summary logs and we will not have any logs (#619) #619
MGMT-10785: report failing cluster operators controller -> service (#617) #617
MGMT-13229: SNO: Start controller when node is not ready, right after joined (#613) #613
MGMT-13385: Installation fail due to race condition in etcd bootstrap strategy (#618) #618
MGMT-13131: shorten SNO installation duration (#615) #615
NO-ISSUE: Bump golang.org/x/net from 0.4.0 to 0.5.0 (#611) #611
MGMT-13141: assisted-installer-controller shouldn’t try to update BMH if (#610) #610
Updating ose-agent-installer-orchestrator images to be consistent with ART (#588) #588
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.3 (#609) #609
MGMT-12908: Labeling nodes as quick as possible and fixing hostname possible issue (#601) #601
NO-ISSUE: Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#608) #608
Bump assisted-service to v1.0.10-0.20221222230528-2b0f66c4cdcd (#604) #604
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.2 to 0.17.3 (#603) #603
MGMT-12339: Update host install progress on cleanup error (#597) #597
MGMT-12984: Add more logs to LVM cleanup (#600) #600
NO-ISSUE: Bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#599) #599
MGMT-12339: Add extra step to force clean disks with LVM volumes (#583) #583
Remove jira tickets prefix requirements (#594) #594
NO-ISSUE: Bump golang.org/x/net from 0.2.0 to 0.4.0 (#593) #593
MGMT-12471: Don’t crash if operator isn’t monitored by service (#589) #589
NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#585) #585
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.2 (#584) #584
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#569) #569
NO-ISSUE: Bump github.com/onsi/gomega from 1.22.1 to 1.24.1 (#577) #577
NO-ISSUE: Bump k8s.io/client-go from 0.24.4 to 0.25.4 (#576) #576
OCPBUGSM-46219: OCPBUGSM-46220: Update golang version to 1.18.1. (#581) #581
MGMT-12471: Don’t wait for console if it is disabled (#574) #574
NO-ISSUE: change all ‘go get’ commands to ‘go install’ (#580) #580
NO-ISSUE: Log informative error in case subscription doesn’t have CSV (#573) #573
MGMT-12467: Remove special handling for installing OCP < 4.7 (#571) #571
MGMT-12469: Add resolv.conf content to controller logs in order to improve dns issue visibility (#572) #572
OCPBUGS-3166: assisted-installer: pod creation fails due to violations of security policies in 4.12 (#568) #568
NO-ISSUE: improvement on gathering controller logs, validating that buffer is not empty (#567) #567
Full changelog

alibaba-cloud-controller-manager

NO-JIRA: Update OWNERS #53
OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
Update OWNERS #36
Rebase onto latest upstream version #35
OCPBUGS-10120: Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #30
Update OWNERS #29
Update OWNERS #27
Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #26
Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
Full changelog

cluster-baremetal-operator

OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-7884: Restart pods if related configuration was changed #228
Full changelog

cluster-etcd-operator

OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-6789: enable pod security admission for techpreview #1440
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-6789: honor feature gates during bootstrapping #695
Full changelog

cluster-network-operator

OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
Full changelog

cluster-version-operator

OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
Full changelog

docker-registry

OCPBUGS-8491: bump aws-sdk-go #362
Full changelog

fedora-coreos, machine-os-content, okd-rpms

Dockerfile: symlink netcat to nc #565
Bump fedora-coreos-config to latest stable #560
Full changelog

hyperkube, pod

OCPBUGS-8705: Fix mounted volume expansion tests #1503
OCPBUGS-7078: Bump to k8s 1.25.7 #1496
Full changelog

hypershift

Force controleplane upgrade always #2289
OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
Full changelog

kube-proxy, sdn

OCPBUGS-7474: Initialize egress node monitoring struct with previous reachability status #505
Full changelog

machine-api-operator

OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
Full changelog

machine-config-operator

OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
Full changelog

multus-cni

OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
Full changelog

openshift-apiserver

OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
Full changelog

tests

OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github