Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2023-03-23-213604

Team Approvals:

No tests for this release

Upgrades from:

• 4.12.0-0.okd-scos-2023-03-23-160125 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.12.0-0.okd-scos-2023-02-14-060109

Created: 2023-03-24 10:13:30 +0000 UTC

Image Digest: sha256:dccb04bec6bfb4a5eef60ea2375c66428c06ccf5f893c32f425c73e05256bad4

Release 4.12.0-0.okd-scos-2023-03-23-213604 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2023-03-23-213604

Components

• Kubernetes upgraded from 1.25.4 to 1.25.7
• CentOS Stream CoreOS upgraded from 412.9.202302091303-0 to 412.9.202303210437-0 (diff)

Rebuilt images without code change

• azure-machine-controllers git cfb76acd sha256:fd114ce5547460ee4c7d587317661a7c69e545cefe2a060f6ba50d94e36cfb74
• centos-stream-coreos-9 sha256:adf137acab1aaa52dde2e13d66f357da92f30b6d36de69e5b5ad02189c068ec5
• cluster-capi-operator git 3bfe36aa sha256:2c9c2d17ac800ba92f769c1be1023ac7077ffef254f46560cf99dfb9927b9500
• cluster-dns-operator git 1c136fe3 sha256:863cc4e4eefcb7821db6933cb4906b65f946a33ae02ea363f1289fb6df00d2c2
• cluster-image-registry-operator git e9a895af sha256:063055f9086236c87964aaa01fb76ddccfe9780a9578da2719269de4c2c18dab
• cluster-kube-apiserver-operator git 2076f3d0 sha256:aca1a08dcc591f6bf95dc270315e84e8477ee75973fd3863b119adfbaf3075a7
• gcp-machine-controllers git ada83dc6 sha256:a098684f8165249bb7898d67483adb91a0305b5b06a11b5e51ec7ae1fd1dc5e1
• kuryr-cni git 92b9be25 sha256:5cda4cd8c1e6bab1fab6ed319b6206d2d6e3d4d2e2054acb4b944446d6049a13
• kuryr-controller git 92b9be25 sha256:4bbd64a481cd6105db3da0c255b4c6302a8ff01f2d2cb888cb6703144bb7dfdc
• machine-os-content sha256:adf137acab1aaa52dde2e13d66f357da92f30b6d36de69e5b5ad02189c068ec5
• machine-os-images git 566bf595 sha256:175753f9f974346b15372577ab6e9c070a95f621a5ef92f1779ab16672487aab

agent-installer-api-server

• NO-ISSUE: fixing late binding #7070
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-19381: Change downstream base images to rhel9.4 instead of ubi9 (#1002) #1002
• MGMT-19595: Push latest tag for downstream images after merge to konflux int repo (#1001) #1001
• Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) #956
• OCPBUGS-13612: update gin version (#997) #997
• MGMT-19537: Bump golang.org/x/net to 0.33.0 (#981) #981
• MGMT-19506: Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) #976
• chore(deps): update konflux references (#972) #972
• MGMT-19507: Stop using multi-arch builds in konflux (#971) #971
• chore(deps): update konflux references (#958) #958
• NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) #965
• NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) #966
• MGMT-19453: Add downstream dockerfile (#960) #960
• MGMT-19408: Create tekton pipelines for acm 2.13 (#954) #954
• MGMT-19390: Update mce’s tekton pipelines to be multi-arch (#948) #948
• OCPBUGS-45116: Add retry to mount efi device (#947) #947
• Red Hat Konflux update assisted-installer-controller-mce-downstream-main (#946) #946
• Red Hat Konflux update assisted-installer-mce-downstream-main (#945) #945
• MGMT-19371: Add downstream dockerfiles for mce (#943) #943
• NO-ISSUE: Add giladravid16 and pastequo to approvers list (#944) #944
• OCPBUGS-42553: Rhcos fails to reboot for skip mco reboot on s390x (#941) #941
• NO-ISSUE: Update Dockerfile to use go.uber.org/mock (#911) #911
• MGMT-19148: Update assisted-service dependencies. (#936) #936
• Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.18 (#917) #917
• Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.18 (#898) #898
• NO-ISSUE: Bump PGX version (#932) #932
• NO-ISSUE: Pin gocov version (#924) #924
• OCPBUGS-38466: Allow controller to continue when assisted-service (#896) #896
• abi: let the bootstrap waiting for workers before rebooting (#910) #910
• OCPBUGS-42149: Libraries bump to mitigate CVE-2024-27289 (#903) #903
• OCPBUGS-36577: Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#902) #902
• MGMT-18550: bump golang 1.21 (#894) #894
• OCPBUGS-31570: Bump to latest preinstall utils for disk cleanup fixes (#886) #886
• NO-ISSUE: fixing ARM images builds (#885) #885
• OCPBUGS-36779: Reload host inventory on conflict (#877) #877
• MGMT-18332: Use centos stream 9 as the base image for test container (#876) #876
• NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can’t reach its repositories (#862) #862
• MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#852) #852
• MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#817) #817
• MGMT-16843: Use hostnamectl to replace illegal hostname (#839) #839
• OCPBUGS-32105: Fix race to mark node Joined (#823) #823
• NO-ISSUE: Bump github.com/onsi/gomega (#841) #841
• MGMT-17305: Moving disk operations to new repo (#840) #840
• MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) #818
• Move to rhel9, decouple from cli image (#760) #760
• NO-ISSUE: Decouple inventoryClient from ops (#811) #811
• NO-ISSUE: Decouple inventoryClient from ops (#810) #810
• NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) #809
• MGMT-16587: Update to mitigate CVE-2024-21626 (#806) #806
• MGMT-17305: Wipe installation disk on IBI (#808) #808
• MGMT-17384: Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) #807
• NO-ISSUE: Bump the go-dependencies group with 1 update (#803) #803
• MGMT-17308: Offboard osherdp from maintainers list (#802) #802
• MGMT-16587: Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) #801
• OCPBUGS-30056: RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) #800
• MGMT-16993: [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) #798
• NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) #799
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) #797
• MGMT-16843: Ensure valid hostname during install (#788) #788
• MGMT-16966: Problem creating extra partition on main disk in 4.15+ (#787) #787
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) #786
• MGMT-16211: Remove all timeouts from controller (#779) #779
• OCPBUGS-25718: Do not remove uninitialized taints if vSphere credentials are provided. (#778) #778
• MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) #781
• NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) #780
• NO-ISSUE: Bump the go-dependencies group with 1 update (#776) #776
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) #772
• NO-ISSUE remove filanov from approves (#773) #773
• NO-ISSUE: Bump the go-dependencies group with 1 update (#770) #770
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) #769
• NO-ISSUE: Bump the go-dependencies group with 1 update (#768) #768
• NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) #766
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) #762
• MGMT-16266: Indication event showing how often host has been rebooted missing on some nodes (#757) #757
• NO-ISSUE: fix golangci-lint failing to be pulled (#758) #758
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) #756
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) #755
• OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#739) #739
• MGMT-16258: Partitions naming convetion is different for various disk types (#752) #752
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) #751
• Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) #719
• MGMT-15926: Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) #748
• NO-ISSUE: Add my github account as an OWNER for this repository (#749) #749
• NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) #747
• MGMT-15902: Trigger event that notifies the number of reboots once the node installation is completed (#744) #744
• NO-ISSUE: Bump the go-dependencies group with 1 update (#745) #745
• NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) #743
• NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) #742
• MGMT-16039: upgrade to golang 1.20 (#741) #741
• NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) #738
• OCPBUGS-16482: Update dependencies to remove goproxy dependency (#701) #701
• MGMT-15984: Assisted installer doesn’t freeze and unmount file systems used for overwriting os image (#737) #737
• NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) #731
• Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) #718
• MGMT-15710: Assisted installer changes for avoiding MCO reboot (#713) #713
• MGMT-15810: fix image missing nsenter executable (#729) #729
• MGMT-15810: change base image to stream9 (#725) #725
• NO-ISSUE: fix dependabot ingored packages (#724) #724
• NO-ISSUE: dependabot exclude k8s (#706) #706
• OCPBUGS-16482: bump golangci-lint to 1.53.1 (#702) #702
• OCPBUGS-4240: allow controller to complete for agent-based installs (#700) #700
• MGMT-15235: Compile with CGO_ENABLED=1 for amd64 (#699) #699
• Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)” (#693) #683
• OCPBUGS-17252: Bump golang.org/x/net/html (#695) #695
• Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) #652
• MGMT-15343: dependabot group updates (#692) #692
• MGMT-15344: Assisted-controller should not timeout on waiting cvo by itself (#688) #688
• MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683) #683
• MGMT-13586: Wait for ETCD Bootstrap to complete (#670) #670
• NO-ISSUE: Remove slaviered from project OWNERS (#669) #669
• NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.7 (#663) #663
• Updating ose-agent-installer-csr-approver images to be consistent with ART (#651) #651
• MGMT-14299: Limit untaint nodes to vsphere/nutanix (#660) #660
• NO-ISSUE: Add javipolo to approvers (#659) #659
• MGMT-12967: Create network policy in assisted-installer namespace (#658) #658
• NO-ISSUE: Bump github.com/onsi/gomega from 1.24.2 to 1.27.5 (#656) #656
• MGMT-14114: Nutanix - uninitialized set on nodes (#653) #653
• NO-ISSUE: controller logs optimizations (#646) #646
• NO-ISSUE: Bump golang.org/x/sync (#644) #644
• MULTIARCH-3387: Set boot device to target disk for powervm (#626) #626
• MGMT-13710: assisted-installer-controller hangs for 2 minutes before uploading the ingress CA (#638) #638
• NO-ISSUE: Bump golang.org/x/net from 0.5.0 to 0.7.0 (#640) #640
• NO-ISSUE: Replace iotil by os and io in order to fix lint issues (#642) #642
• NO-ISSUE: Bump openshift/release from golang-1.18 to golang-1.19 (#612) #612
• MGMT-13568: Add pause mcp while setting new role labels (#623) #623
• MGMT-13292: Add the installed version of the OLM operators in the monitor operators response (#622) #622
• Remove uninitialized taint from vSphere nodes (#629) #629
• OCPBUGS-7149: IPv6 multinode spoke no moving from rebooting/configuring stage (#627) #627
• MGMT-13507: Apply node labels only when node is Ready (#620) #620
• MGMT-13463: Assisted-controller can fail to send summary logs and we will not have any logs (#619) #619
• MGMT-10785: report failing cluster operators controller -> service (#617) #617
• MGMT-13229: SNO: Start controller when node is not ready, right after joined (#613) #613
• MGMT-13385: Installation fail due to race condition in etcd bootstrap strategy (#618) #618
• MGMT-13131: shorten SNO installation duration (#615) #615
• NO-ISSUE: Bump golang.org/x/net from 0.4.0 to 0.5.0 (#611) #611
• MGMT-13141: assisted-installer-controller shouldn’t try to update BMH if (#610) #610
• Updating ose-agent-installer-orchestrator images to be consistent with ART (#588) #588
• NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.3 (#609) #609
• MGMT-12908: Labeling nodes as quick as possible and fixing hostname possible issue (#601) #601
• NO-ISSUE: Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#608) #608
• Bump assisted-service to v1.0.10-0.20221222230528-2b0f66c4cdcd (#604) #604
• NO-ISSUE: Bump github.com/operator-framework/api from 0.17.2 to 0.17.3 (#603) #603
• MGMT-12339: Update host install progress on cleanup error (#597) #597
• MGMT-12984: Add more logs to LVM cleanup (#600) #600
• NO-ISSUE: Bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#599) #599
• MGMT-12339: Add extra step to force clean disks with LVM volumes (#583) #583
• Remove jira tickets prefix requirements (#594) #594
• NO-ISSUE: Bump golang.org/x/net from 0.2.0 to 0.4.0 (#593) #593
• MGMT-12471: Don’t crash if operator isn’t monitored by service (#589) #589
• NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#585) #585
• NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.2 (#584) #584
• NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#569) #569
• NO-ISSUE: Bump github.com/onsi/gomega from 1.22.1 to 1.24.1 (#577) #577
• NO-ISSUE: Bump k8s.io/client-go from 0.24.4 to 0.25.4 (#576) #576
• OCPBUGSM-46219: OCPBUGSM-46220: Update golang version to 1.18.1. (#581) #581
• MGMT-12471: Don’t wait for console if it is disabled (#574) #574
• NO-ISSUE: change all ‘go get’ commands to ‘go install’ (#580) #580
• NO-ISSUE: Log informative error in case subscription doesn’t have CSV (#573) #573
• MGMT-12467: Remove special handling for installing OCP < 4.7 (#571) #571
• MGMT-12469: Add resolv.conf content to controller logs in order to improve dns issue visibility (#572) #572
• OCPBUGS-3166: assisted-installer: pod creation fails due to violations of security policies in 4.12 (#568) #568
• NO-ISSUE: improvement on gathering controller logs, validating that buffer is not empty (#567) #567
• Full changelog

agent-installer-node-agent

• MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
• Add sg3_utils package (#497) (#500) #497
• Full changelog

alibaba-cloud-controller-manager

• NO-JIRA: Update OWNERS #53
• OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
• OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
• OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
• OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
• OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
• OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
• Update OWNERS #36
• Rebase onto latest upstream version #35
• OCPBUGS-10120: Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #30
• Update OWNERS #29
• Update OWNERS #27
• Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #26
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-7481: Fix file check for loading openshift manifests #6907
• OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
• OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
• OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
• OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
• OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
• OCPBUGS-7594: fully qualified username must be provided #6864
• OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
• OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
• OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
• OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
• OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
• OCPBUGS-7521: Update AgentConfig template #6857
• OCPBUGS-5992: azure: validate Windows-only VM types #6780
• OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
• Full changelog

baremetal-operator

• OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
• OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
• Full changelog

cluster-baremetal-operator

• OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-7884: Restart pods if related configuration was changed #228
• Full changelog

cluster-etcd-operator

• OCPBUGS-7830: increase live/ready timeout and failure thresholds #1011
• Update reviewers and approvers #987
• OCPBUGS-7409: set default timeouts in etcdcli #1005
• OCPBUGS-6935: add dedicated success status for bootstrap removal #999
• OCPBUGS-7373: [release-4.12] fail early on missing node status envs #1004
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-6789: honor feature gates during bootstrapping #695
• OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #699
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-7369: Guard controller: set the readiness probe endpoint explicitly #462
• Full changelog

cluster-monitoring-operator

• OCPBUGS-2439: set the argument path.udev.data in node exporter #1800
• Full changelog

cluster-network-operator

• OCPBUGS-10319: HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738
• OCPBUGS-8014: add default noProxy config for Azure #1722
• OCPBUGS-9927: Enable configuration of node healthz server on ovnkube #1731
• OCPBUGS-5953: Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685
• OCPBUGS-7044: HyperShift: Add .hypershift.local to no proxy list #1706
• OCPBUGS-7044: HyperShift: Do not use proxy for internal routes #1704
• Full changelog

cluster-node-tuning-operator

• E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-45701: Updating ose-cluster-openshift-apiserver-operator-cont… #607
• NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
• OCPBUGS-44693: Disable ResilientWatchCacheInitialization #603
• OCPBUGS-23435: bump library-go to bring in workload-conditions fix #600
• NO-JIRA: bump dependencies #598
• API-1835: update to use the latest API #597
• API-1835: switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595
• API-1835: update for more apply loops #592
• MULTIARCH-4557: Sync import mode image config status field in the observed config #582
• NO-JIRA: remove unused OperatorClient #594
• API-1835: last transition time update #593
• API-1835: update library-go to use new operator client #584
• create CRDs from openshift/api #591
• OCPBUGS-41617: increase openshift-apiserver failureThreshold #588
• OCPBUGS-41232: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586
• NO-JIRA: Bump library-go to add audit logs about events #587
• OCPBUGS-39589: Rebase 1.30 #585
• OCPBUGS-30492: bump google.golang.org/protobuf #583
• OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
• OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579
• AUTH-482: Set required-scc for openshift workloads #573
• WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
• OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
• OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
• NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
• NO-ISSUE: fix: TestRedeployOnConfigChange #576
• OCPBUGS-22969: Use v1 for flowcontrol API #559
• OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
• OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
• WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
• OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
• OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
• OCPBUGS-19231: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
• OCPBUGS-21733: bump library-go to include switch to HTTP/1.1 #552
• WRKLDS-728: Capabilities: drop build/apps APIService when capabilities are not enabled #532
• switch image-registry cert CM #545
• OCPBUGS-16554: update dependencies to get rid of goproxy #546
• AUTH-408: bindata: set required-scc #544
• Plumb featuregates to the openshift-apiserver #542
• allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
• Add AES-GCM encryption tests #539
• OCPBUGS-14010: increase timeout for probes #536
• OCPBUGS-2765: Library go bump #538
• OCPBUGS-12813: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534
• Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
• OCPBUGS-10040: update openshift/api to include aesgcm provider in the default apiserver schema #526
• API-1509: Enable AESGCM encryption #521
• OCPBUGS-4343: update apf configuration to use v1beta3 #509
• OCPBUGS-6233: Bump dependencies and images #517
• OCPBUGS-5300: routes/status resources can leak sensitive data, exclude it from audit #511
• make api team approver #506
• OCPBUGS-3929: update apf configuration to use v1beta2 #508
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-47528: Add team members to the OWNERS file #373
• OCPBUGS-45698: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372
• API-1835: bump library-go #370
• WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
• OCPBUGS-41227: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364
• create CRDs from openshift/api #367
• no-jira: OWNERS: remove former employees #354
• OCPBUGS-35801: nil pointer reference in ocm-operator #355
• WRKLDS-1327: Replace wildcards by explicit list of verbs #353
• WRKLDS-1292: Bump k8s dependencies to 1.30.1 #352
• OCPBUGS-34395: Move cluster Build CR to runlevel 10 to match CRD #351
• OCPBUGS-34077: Always Disable Default Rolebindings Controller #346
• OCPBUGS-34054: lots of churn during image registry managed/removed transition #347
• OCPBUILD-9: Adds capabilities for builder & deployer rolebindings controller #335
• AUTH-482: set required-scc for openshift workloads #336
• OCPBUGS-23848: Bumps opentelemetry dependencies #341
• OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
• OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
• OCPBUGS-22969: Use v1 for flowcontrol API #316
• BUILD-854: Add adambkaplan as approver #338
• OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
• OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
• OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
• WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
• OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
• OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
• Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
• Revert #300 “API-1666: add image pull secret cleanup controller” #313
• API-1642: add image pull secret cleanup controller #300
• API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
• OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
• OCPBUGS-20164: Include Build CRD in manifests #306
• WRKLDS-806: Bump kube dependencies to 1.28.2 #305
• OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
• OCPBUGS-18932: Always sort disabled controller list #302
• OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
• route-controller-manager deployment updates #295
• OCPBUGS-16072: Updating Kubernetes and other associated dependencies #296
• OCPBUGS-13926: change the operator log level to default normal in the deployment #289
• BUILD-582, OCPBUGS-14638: bump(k8s): 1.27.1 #294
• OCPBUGS-13926: add loglevel controller for OCM-o #292
• Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
• OCPBUGS-13895: [WRKLDS-730] route-controller-manager deployment updates #288
• Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
• Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
• Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
• Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
• Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
• OCPBUGS-10568: migrate to using lease objects for leader election #282
• Add Divyanshu Agrawal as a reviewer #283
• OCPBUGS-4343: update apf configuration to use v1beta3 #273
• Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
• WRKLDS-594: bump(k8s): 1.26.1 #277
• OCPBUGS-5275: remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276
• OCPBUGS-3929: update apf configuration to use v1beta2 #272
• let deployer pods patch/apply replication controllers #270
• Bug 2111979: Set openshift.io/run-level to nil in openshift-controller-manager nam… #269
• Full changelog

cluster-policy-controller

• OCPBUGS-6789: backport feature gate honoring for PSa label syncer #98
• OCPBUGS-7705: [release-4.12] update dependencies to point to v0.25.0 #102
• Full changelog

cluster-storage-operator

• OCPBUGS-8374: Add UID to CSO Pod to be able to run with custom SCCs #347
• OCPBUGS-7331: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337
• Full changelog

cluster-version-operator

• OCPBUGS-10514: pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913
• OCPBUGS-8304: Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908
• Full changelog

console

• OCPBUGS-7951: delete application should delete all part-of resources #12604
• OCPBUGS-6036: Project dropdown order is not as smart as project list page order #12447
• OCPBUGS-7800: add subject kind dropdown in the project access form #12586
• OCPBUGS-8339: disable operator-install-single-namespace.spec.ts until… #12624
• OCPBUGS-3892: Add cluster to query params of websocket requests #12282
• OCPBUGS-5092: Fix to use and set correct secretReference for build-config triggers #12388
• OCPBUGS-7895: Bump helm version to 3.10.1 #12579
• OCPBUGS-6873: The dropdown list component will be covered by deployment details page on Topology page #12507
• OCPBUGS-6831: Fix crash when pinnedResources is null #12503
• OCPBUGS-7471: Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565
• OCPBUGS-7506: Fix different CI issues #12555
• OCPBUGS-6966: Remove description field from the PLR parameters page #12519
• OCPBUGS-7437: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560
• OCPBUGS-6887: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510
• OCPBUGS-6816: Repositories list does not show the running pipelinerun as last pipelinerun #12500
• OCPBUGS-4072: Fix rerender loop/crash when bindable-kinds is found but has no status #12304
• OCPBUGS-6671: fix broken pipeline secret #12474
• Full changelog

csi-driver-manila-operator

• OCPBUGS-10556: Bump go.mongodb.org/mongo-driver to v1.5.1 #176
• Full changelog

docker-registry

• OCPBUGS-10496: bump docker-distribution #365
• OCPBUGS-8491: bump aws-sdk-go #362
• Full changelog

etcd

• Update owners #185
• Updating ose-etcd images to be consistent with ART #153
• Full changelog

hyperkube, pod

• OCPBUGS-8705: Fix mounted volume expansion tests #1503
• OCPBUGS-7078: Bump to k8s 1.25.7 #1496
• OCPBUGS-5769: scc admission - seccomp profiles fix #1471
• Full changelog

hypershift

• HOSTEDCP-801: [release-4.12] Expose external DNS for private cluster endpoints #2314
• HOSTEDCP-839: Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297
• OCPBUGS-10587: Use appropriate serving certificate for OAuth #2295
• OSD-15099: Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274
• Add PodMonitor for ingress-operator pods in HCP namespaces #2275
• OCPBUGS-8334: [release-4.12] Update the pull secret source for ignition payload #2268
• Force controleplane upgrade always #2289
• OCPBUGS-8370: Fix cleanup of volumes on cluster deletion #2253
• OCPBUGS-8241: Add external DNS health condition / release-4.12 #2206
• HOSTEDCP-809: Clone CA key/cert to TLS key/cert #2263
• Add configuration for automatic labeling and label commands #2255
• fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
• feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
• kms addition for pod identity workflow #2247
• Add e2e test for hosted cluster behind a proxy #2199
• Add e2e test for cluster creation with AWS KMS #2201
• HOSTEDCP-826: Customize DNS base domain prefix #2235
• feat: Add pod gone check to prober + DNS operator leader elect #2209
• fix(ibmcloud): Explicitly set HCCO controllers #2208
• ensure reconcilation of apiserver port is in 4.12 #2195
• Cleanup default security group only if authorized #2212
• fix(cpo): Set restart annotation on multus-admission-controller #2190
• fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
• fix(cpo): Reduce CNO access if Calico used as network provider #2184
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-8451: Rebase to v5.1.2 for OCP 4.12 #32
• Full changelog

insights-operator

• OCPBUGS-6732: Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727
• OCPBUGS-6833: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) #736
• OCPBUGS-6782: Create gatherer for gathering machines. (#734) #734
• Full changelog

kube-proxy, sdn

• OCPBUGS-7474: Initialize egress node monitoring struct with previous reachability status #505
• OCPBUGS-6842: Handle race condition to setup default vnid flows #497
• Full changelog

machine-api-operator

• OCPBUGS-7882: Block machine deletion if extra disks are attached #1120
• OCPBUGS-8286: Short circuit misfiring #1109
• Full changelog

machine-config-operator

• OCPBUGS-10505: daemon: Drop duplicate --authfile used in run #3617
• OCPBUGS-10372: Remove hard requirement for the afterburn from early-running aws-related services #3613
• OCPBUGS-9993: Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608
• OCPBUGS-7445: configure-ovs: fix mtu-migration cleanup #3555
• OCPBUGS-8261: [release-4.12] backport cleanupDuplicateMC #3578
• OCPBUGS-6943: Improvements for configure-ovs.sh #3528
• Full changelog

multus-cni

• OCPBUGS-10535: Multus sync Mar-20-2023 to OCP 4.12 #149
• OCPBUGS-7792: Multus sync v3.9.3 to OCP 4.12 #145
• Full changelog

network-interface-bond-cni

• Updating ose-network-interface-bond-cni images to be consistent with ART #37
• Full changelog

network-metrics-daemon

• Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
• Fix gofmt check issue (#68) #68
• Update golang.org/x/text to 0.7.0 (#66) #66
• Full changelog

oauth-apiserver

• Updating ose-oauth-apiserver images to be consistent with ART #80
• Full changelog

openshift-apiserver

• OCPBUGS-8717: Clear metadata.namespace on projects before write. #358
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-7650: Catalog Pod Startup Probe Timeout #450
• Updating operator-registry images to be consistent with ART #397
• OCPBUGS-7825: Set openshift.io/scc label to empty #456
• OCPBUGS-7769: [release-4.12] update cluster policy operator dependency #454
• OCPBUGS-7556: Defuse E2e timebomb #449
• OCPBUGS-7086: cherry-pick pull request refactor FBC caching (#1051) f… #441
• Full changelog

operator-marketplace

• OCPBUGS-7108: Default CatalogSource aren’t always reverted to default settings #506
• OCPBUGS-5468: Remove PSA audit and warnings #503
• OCPBUGS-5474: Run Default CatalogSource in Restricted mode #500
• OCPBUGS-4763: Unenforce PSA Restrictions #494
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-6034: Update egress node assignability on every egress node update #1483
• OCPBUGS-7732: Fix leak in service controller cache #1545
• OCPBUGS-10490: [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go #1595
• OCPBUGS-10318: [release-4.12] node: add node healthz server for cloud load balancers #1570
• OCPBUGS-7346: [release-4.12] Fully remove dependency on default gateway for services #1577
• OCPBUGS-6957: [release-4.12] Ensure routes are not duplicated #1503
• OCPBUGS-8501, OCPBUGS-8506, OCPBUGS-8508: [release-4.12] Fix EFW’s name truncation logic & make EFW ACLs unique using extIDs #1559
• OCPBUGS-7223: node: don’t consider internal masquerade addresses as node IP addresses #1528
• OCPBUGS-7317: [release-4.12] Delete stale egress ip snat entries by node #1520
• OCPBUGS-7026: Bump OVN to 22.12 and turn off neighbour response in router options. #1521
• OCPBUGS-6040: addMasqueradeRoute: fallback to gateway interface IPs #1484
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-7458: Fixes ThanoRuler StatefulSet re-creation bug #217
• Full changelog

telemeter

• OCPBUGS-7702: Add ‘agent-installer’ value to ‘install_type’ label #451
• Full changelog

tests

• OCPBUGS-8705: Bump(openshift/kubernetes): to get fix for resizing flake #27794
• OCPBUGS-8024: Backport fixes to resume gathering CI disruption data for SLB and image registry #27759
• OCPBUGS-7633: remove reference to old guard pods #27732
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-7426: Add migrationDataStore field #59
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-7901: Bump sidecar timeouts for vsphere #142
• OCPBUGS-7426: Fix datastore migration bug in 4.12 #139
• Full changelog

vsphere-problem-detector

• OCPBUGS-6788: Derive the fully qualified vSphere username when checking permissions #98
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-0.okd-scos-2025-01-18-0754244.19.0-0.okd-scos-2025-01-17-1954234.19.0-0.okd-scos-2025-01-17-0754234.19.0-0.okd-scos-2025-01-16-1954234.19.0-0.okd-scos-2025-01-16-0754234.19.0-0.okd-scos-2025-01-15-195423───4.18.0-0.okd-scos-2025-01-18-0412514.18.0-0.okd-scos-2025-01-17-1612514.18.0-0.okd-scos-2025-01-17-0412504.18.0-0.okd-scos-2025-01-16-1612494.18.0-0.okd-scos-2025-01-16-0412484.18.0-0.okd-scos-2025-01-15-161247───4.17.0-0.okd-scos-2025-01-17-2250544.17.0-0.okd-scos-2025-01-17-1050534.17.0-0.okd-scos-2025-01-16-2250524.17.0-0.okd-scos-2025-01-16-1050514.17.0-0.okd-scos-2025-01-15-2250504.17.0-0.okd-scos-2025-01-15-105050───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github