# 4.12.0-0.okd-2023-04-01-051724

Created: 2023-04-01 07:14:05 +0000 UTC

Image Digest: `sha256:a8272e9992eee6b9c9dfa1b44e7348e5f979c0de96ad60d6235477a1aa0d7897`

Promoted from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-04-01-051724


## Changes from 4.12.0-0.okd-2023-03-18-084815

### Components

* Kubernetes 1.25.7
* Fedora CoreOS upgraded from 37.20230218.3 to 37.20230303.3


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [bb9c2fee](https://github.com/openshift/assisted-installer/commit/bb9c2fee04cd5bd1736fb1590db728643ba27ea1) `sha256:898737c40d0a828dbed75782673e6531e42840cce67bdc7bbc53ec292374cc57`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [bb9c2fee](https://github.com/openshift/assisted-installer/commit/bb9c2fee04cd5bd1736fb1590db728643ba27ea1) `sha256:9d17d62627426bf314692fc4add66b6cdf1876f422971937d82c5b9bfe63f3ed`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [845ae423](https://github.com/openshift/cluster-kube-scheduler-operator/commit/845ae423e831b1cacf0bcae5e6528f1d21b5ddf2) `sha256:c027525c7b208f5e6a253c6ee2328f175171f707d0e7a44d076262e98f170d41`
* [console-operator](https://github.com/openshift/console-operator) git [bb87c592](https://github.com/openshift/console-operator/commit/bb87c5921246a64a59c1c09336c2ab0423330b4d) `sha256:b38efec351f79595f21f2dfeb448b9dc646d55f413f70f29841810cd59c3721c`
* [coredns](https://github.com/openshift/coredns) git [9aaa7e0a](https://github.com/openshift/coredns/commit/9aaa7e0a86b69bafb9f544a0e5cb1873535a8f6b) `sha256:07111ef8b11cab545d571ca3f416e35c860e25dcee4f7737729de8a80ec104c2`


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/a7aa60002fc11c7320dd17c1681feb9956dd288f)

* [MGMT-13946](https://issues.redhat.com/browse/MGMT-13946): Ignore Proliant Gen 11 serial (#524) [#524](https://github.com/openshift/assisted-installer-agent/pull/524)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/d0c1b7dc02a288b7ed9a8a31ed4a04f6dbbda8ce...a7aa60002fc11c7320dd17c1681feb9956dd288f)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/c4e4dc8621610a11795bc120956e89440f9fc477)

* [OCPBUGS-8384](https://issues.redhat.com/browse/OCPBUGS-8384): Specify filename for default registries.conf [#6941](https://github.com/openshift/installer/pull/6941)
* [OCPBUGS-10904](https://issues.redhat.com/browse/OCPBUGS-10904): IBMCloud: Fix SSH Private bootstrap [#7028](https://github.com/openshift/installer/pull/7028)
* [OCPBUGS-10905](https://issues.redhat.com/browse/OCPBUGS-10905): IBMCloud set dnsrecords offset [#7029](https://github.com/openshift/installer/pull/7029)
* [OCPBUGS-10740](https://issues.redhat.com/browse/OCPBUGS-10740): bump RHCOS 4.12 bootimage metadata [#7019](https://github.com/openshift/installer/pull/7019)
* [OCPBUGS-7481](https://issues.redhat.com/browse/OCPBUGS-7481): Fix file check for loading openshift manifests [#6907](https://github.com/openshift/installer/pull/6907)
* [OCPBUGS-10497](https://issues.redhat.com/browse/OCPBUGS-10497): [release-4.12] aws: bump aws-sdk-go version [#6985](https://github.com/openshift/installer/pull/6985)
* [Full changelog](https://github.com/openshift/installer/compare/4688870d3a709eea34fe2bb5d1c62dea2cfd7e91...c4e4dc8621610a11795bc120956e89440f9fc477)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/5f47d131a86964aa53f3b6a46a1c49e44e2ac9c0)

* [OCPBUGS-9955](https://issues.redhat.com/browse/OCPBUGS-9955): allow namespace to continue with terminating when deprovisioning a bmh [#258](https://github.com/openshift/baremetal-operator/pull/258)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a5af4fc968cbfb7702c1422950c00168bd8d2564...5f47d131a86964aa53f3b6a46a1c49e44e2ac9c0)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/31aa3e89a926f81aa0af30320ffcb71acadf3015)

* [OCPBUGS-10774](https://issues.redhat.com/browse/OCPBUGS-10774): bump repo sclorg/s2i-ruby-container location for newapp test [#1382](https://github.com/openshift/oc/pull/1382)
* [Full changelog](https://github.com/openshift/oc/compare/846602e50eb29ecdc7441ebed2fc846048959eaa...31aa3e89a926f81aa0af30320ffcb71acadf3015)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/87f8994bfb151b74274363a3daacc5c2ae3880b7)

* [OCPBUGS-2439](https://issues.redhat.com/browse/OCPBUGS-2439): set the argument path.udev.data in node exporter [#1800](https://github.com/openshift/cluster-monitoring-operator/pull/1800)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/5a154c3dd01544adc280691be54fec94a5dc8d67...87f8994bfb151b74274363a3daacc5c2ae3880b7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6878a2cec16309dcd96aaf03ae0d7db8f37d3cde)

* [OCPBUGS-11059](https://issues.redhat.com/browse/OCPBUGS-11059): Fix info log formatting [#1659](https://github.com/openshift/cluster-network-operator/pull/1659)
* [OCPBUGS-10319](https://issues.redhat.com/browse/OCPBUGS-10319): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1738](https://github.com/openshift/cluster-network-operator/pull/1738)
* [OCPBUGS-8014](https://issues.redhat.com/browse/OCPBUGS-8014): add default noProxy config for Azure [#1722](https://github.com/openshift/cluster-network-operator/pull/1722)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5ee19a7685b07a595ca62741fdf316d15117c9ef...6878a2cec16309dcd96aaf03ae0d7db8f37d3cde)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6a815f9b4bcb50e01c1bed2ec945553d7e033a3f)

* [OCPBUGS-10918](https://issues.redhat.com/browse/OCPBUGS-10918): update Jenkins to v4.12 [#492](https://github.com/openshift/cluster-samples-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/ab23d0e04237ffc8cf69cbf9b73f8bc2eee190bb...6a815f9b4bcb50e01c1bed2ec945553d7e033a3f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/2d374a11249588e92be7e46406240cf45b55e07a)

* [OCPBUGS-8374](https://issues.redhat.com/browse/OCPBUGS-8374): Add UID to CSO Pod to be able to run with custom SCCs [#347](https://github.com/openshift/cluster-storage-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b29bac7a510082ffd99534ba84bcd035079741ba...2d374a11249588e92be7e46406240cf45b55e07a)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/a5c40317056e4419193f04962c9ca3273eb2408b)

* [OCPBUGS-10565](https://issues.redhat.com/browse/OCPBUGS-10565): RetrievePayload: Improve timeouts and cover behavior with tests [#914](https://github.com/openshift/cluster-version-operator/pull/914)
* [OCPBUGS-10514](https://issues.redhat.com/browse/OCPBUGS-10514): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#913](https://github.com/openshift/cluster-version-operator/pull/913)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f30edfbebea335f42c1c3e6b49fab06fa0ea028a...a5c40317056e4419193f04962c9ca3273eb2408b)


### [console](https://github.com/openshift/console/tree/72e9e3df9cb8890d2800330d545df756f61f9597)

* [OCPBUGS-7333](https://issues.redhat.com/browse/OCPBUGS-7333): Add missing SDK extensions descriptions [#12556](https://github.com/openshift/console/pull/12556)
* [OCPBUGS-7951](https://issues.redhat.com/browse/OCPBUGS-7951): delete application should delete all part-of resources [#12604](https://github.com/openshift/console/pull/12604)
* [OCPBUGS-6036](https://issues.redhat.com/browse/OCPBUGS-6036): Project dropdown order is not as smart as project list page order [#12447](https://github.com/openshift/console/pull/12447)
* [OCPBUGS-7800](https://issues.redhat.com/browse/OCPBUGS-7800): add subject kind dropdown in the project access form [#12586](https://github.com/openshift/console/pull/12586)
* [OCPBUGS-8339](https://issues.redhat.com/browse/OCPBUGS-8339): disable operator-install-single-namespace.spec.ts until… [#12624](https://github.com/openshift/console/pull/12624)
* [Full changelog](https://github.com/openshift/console/compare/59931924fbaa391ee6d517b2f7574c69760d9f9d...72e9e3df9cb8890d2800330d545df756f61f9597)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/af25a1f4319ee69d0852f10ecbd330450609f514)

* [OCPBUGS-10556](https://issues.redhat.com/browse/OCPBUGS-10556): Bump go.mongodb.org/mongo-driver to v1.5.1 [#176](https://github.com/openshift/csi-driver-manila-operator/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/2c0d3b1c56f485cf6f4ad2787753545975326e6d...af25a1f4319ee69d0852f10ecbd330450609f514)


### [docker-registry](https://github.com/openshift/image-registry/tree/95e39bf0e31a5af9ebcee698a69a4996a39e221a)

* [OCPBUGS-10496](https://issues.redhat.com/browse/OCPBUGS-10496): bump docker-distribution [#365](https://github.com/openshift/image-registry/pull/365)
* [Full changelog](https://github.com/openshift/image-registry/compare/8e7cde5d6f78d83a5aebe664c93ae927e5cc83ab...95e39bf0e31a5af9ebcee698a69a4996a39e221a)


### [etcd](https://github.com/openshift/etcd/tree/c1d76ffd4b4cf0a0d2a6056a505fbef0b187c027)

* Update owners [#185](https://github.com/openshift/etcd/pull/185)
* Updating ose-etcd images to be consistent with ART [#153](https://github.com/openshift/etcd/pull/153)
* [Full changelog](https://github.com/openshift/etcd/compare/978cfefd2f21c4ec1ac84ed95130cbff510fbe1b...c1d76ffd4b4cf0a0d2a6056a505fbef0b187c027)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/1de40e554a52787e52e4416fd423660b9d709980)

* Bump fedora-coreos to latest stable [#569](https://github.com/openshift/okd-machine-os/pull/569)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/33af6aa19cab187fd99d832a20f31a572f57a09f...1de40e554a52787e52e4416fd423660b9d709980)


### [hypershift](https://github.com/openshift/hypershift/tree/d7a9bda8bb954a91ab877e7edc6be31f9eeb351b)

* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): Fix ValidAWSKMSConfig condition [#2362](https://github.com/openshift/hypershift/pull/2362)
* [OCPBUGS-11056](https://issues.redhat.com/browse/OCPBUGS-11056): fix external APIServer address selection based on endpointAccess [#2350](https://github.com/openshift/hypershift/pull/2350)
* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2351](https://github.com/openshift/hypershift/pull/2351)
* [SDA-8707](https://issues.redhat.com/browse/SDA-8707): No more specifying the scrape interval at servicemonitors & podmonitors level [#2356](https://github.com/openshift/hypershift/pull/2356)
* [HOSTEDCP-900](https://issues.redhat.com/browse/HOSTEDCP-900): Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field [#2285](https://github.com/openshift/hypershift/pull/2285)
* [OCPBUGS-10504](https://issues.redhat.com/browse/OCPBUGS-10504): Deletion of the VPCEnpoint on conflicting service names [#2310](https://github.com/openshift/hypershift/pull/2310)
* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): [release-4.12] Validate etcd KMS config [#2273](https://github.com/openshift/hypershift/pull/2273)
* [HOSTEDCP-801](https://issues.redhat.com/browse/HOSTEDCP-801): [release-4.12] Expose external DNS for private cluster endpoints [#2314](https://github.com/openshift/hypershift/pull/2314)
* [HOSTEDCP-839](https://issues.redhat.com/browse/HOSTEDCP-839): Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver [#2297](https://github.com/openshift/hypershift/pull/2297)
* [OCPBUGS-10587](https://issues.redhat.com/browse/OCPBUGS-10587): Use appropriate serving certificate for OAuth [#2295](https://github.com/openshift/hypershift/pull/2295)
* [OSD-15099](https://issues.redhat.com/browse/OSD-15099): Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed [#2274](https://github.com/openshift/hypershift/pull/2274)
* Add PodMonitor for ingress-operator pods in HCP namespaces [#2275](https://github.com/openshift/hypershift/pull/2275)
* [OCPBUGS-8334](https://issues.redhat.com/browse/OCPBUGS-8334): [release-4.12] Update the pull secret source for ignition payload [#2268](https://github.com/openshift/hypershift/pull/2268)
* [Full changelog](https://github.com/openshift/hypershift/compare/84a0ee12e608b70b4dae884da098c056274b498a...d7a9bda8bb954a91ab877e7edc6be31f9eeb351b)


### [insights-operator](https://github.com/openshift/insights-operator/tree/4429a619890f9852e902a337dd571fe8a41f9d20)

* [OCPBUGS-10531](https://issues.redhat.com/browse/OCPBUGS-10531): service_accounts.go Marshal fix (#754) [#754](https://github.com/openshift/insights-operator/pull/754)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c57da131e725a9b08ea4e8e90e7c3b1696524b2a...4429a619890f9852e902a337dd571fe8a41f9d20)


### [ironic](https://github.com/openshift/ironic-image/tree/5da16428e35519afe7fd68111474cd579ac66392)

* [OCPBUGS-7566](https://issues.redhat.com/browse/OCPBUGS-7566): Bump werkzeug 4.12 [#352](https://github.com/openshift/ironic-image/pull/352)
* [Full changelog](https://github.com/openshift/ironic-image/compare/27695b69851b0687e17b4325e364792026282d9f...5da16428e35519afe7fd68111474cd579ac66392)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/fb8e06532ecff1b15d19b33e0783001e5488025d)

* [OCPBUGS-10805](https://issues.redhat.com/browse/OCPBUGS-10805): Fix race in Egress IP Tracker start [#521](https://github.com/openshift/sdn/pull/521)
* [Full changelog](https://github.com/openshift/sdn/compare/64b64f9bf0f8f0ab9c5ce98cb49ddacdf0d39ffc...fb8e06532ecff1b15d19b33e0783001e5488025d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/52fe26136643a946ff1dd1307012cbdef31ebf97)

* [OCPBUGS-7167](https://issues.redhat.com/browse/OCPBUGS-7167): Avoid 'too restrictive' SCC problems by being more explicit [#3542](https://github.com/openshift/machine-config-operator/pull/3542)
* [OCPBUGS-10505](https://issues.redhat.com/browse/OCPBUGS-10505): daemon: Drop duplicate `--authfile` used in `run` [#3617](https://github.com/openshift/machine-config-operator/pull/3617)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/e7a5af3faec663f877cc39b582f7ad38120ebd1e...52fe26136643a946ff1dd1307012cbdef31ebf97)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc)

* Updating ose-multus-admission-controller images to be consistent with ART [#61](https://github.com/openshift/multus-admission-controller/pull/61)
* [OCPBUGS-10506](https://issues.redhat.com/browse/OCPBUGS-10506): Client golang [backport 4.12] [#59](https://github.com/openshift/multus-admission-controller/pull/59)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d9b6b11b817058b84056c93d5089f55ff815f271...5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc)


### [multus-cni](https://github.com/openshift/multus-cni/tree/d59f94da5e080177e3a3f8c98045fd03cd74ed8d)

* [OCPBUGS-10535](https://issues.redhat.com/browse/OCPBUGS-10535): Multus sync Mar-20-2023 to OCP 4.12 [#149](https://github.com/openshift/multus-cni/pull/149)
* [Full changelog](https://github.com/openshift/multus-cni/compare/4819cb9f3a20dacda6069fb9cab82fbe05821dde...d59f94da5e080177e3a3f8c98045fd03cd74ed8d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/7635353ed12fdcb725855b1d4165cfec8dc10e16)

* [OCPBUGS-863](https://issues.redhat.com/browse/OCPBUGS-863): Add skip pruning flag and logic  (#591) [#591](https://github.com/openshift/oc-mirror/pull/591)
* Bugfix for destination registry nested paths length (#590) [#590](https://github.com/openshift/oc-mirror/pull/590)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/3d517407dcbc46ededd7323c7e8f6d6a45efc649...7635353ed12fdcb725855b1d4165cfec8dc10e16)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c6d1737cc8b0cc3e27823691d5cc26b1478b9169)

* [OCPBUGS-10603](https://issues.redhat.com/browse/OCPBUGS-10603): machineset_controller: Stop caching clouds credentials [#65](https://github.com/openshift/machine-api-provider-openstack/pull/65)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/9176d8600a10d34527992d462f4006178d4bfcf7...c6d1737cc8b0cc3e27823691d5cc26b1478b9169)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/dd3cc9cbf5ccc16441f427b2d1386d6ca430f82f)

* [OCPBUGS-7650](https://issues.redhat.com/browse/OCPBUGS-7650): Catalog Pod Startup Probe Timeout [#450](https://github.com/openshift/operator-framework-olm/pull/450)
* Updating operator-registry images to be consistent with ART [#397](https://github.com/openshift/operator-framework-olm/pull/397)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/581908833514ca61153dfbe7b5d29be4fb8d8f8c...dd3cc9cbf5ccc16441f427b2d1386d6ca430f82f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ffce71cb9cc045517288ed0f28a5d25c059d2438)

* [OCPBUGS-10947](https://issues.redhat.com/browse/OCPBUGS-10947): [release-4.12] Egress firewall fix retry [#1610](https://github.com/openshift/ovn-kubernetes/pull/1610)
* [OCPBUGS-10314](https://issues.redhat.com/browse/OCPBUGS-10314): [release-4.12] Handle Completed pods deletion [#1581](https://github.com/openshift/ovn-kubernetes/pull/1581)
* Updating ovn-kubernetes-microshift images to be consistent with ART [#1288](https://github.com/openshift/ovn-kubernetes/pull/1288)
* [OCPBUGS-10632](https://issues.redhat.com/browse/OCPBUGS-10632): Check the "Serving" field for endpoints [#1569](https://github.com/openshift/ovn-kubernetes/pull/1569)
* [OCPBUGS-6034](https://issues.redhat.com/browse/OCPBUGS-6034): Update egress node assignability on every egress node update [#1483](https://github.com/openshift/ovn-kubernetes/pull/1483)
* [OCPBUGS-7732](https://issues.redhat.com/browse/OCPBUGS-7732): Fix leak in service controller cache [#1545](https://github.com/openshift/ovn-kubernetes/pull/1545)
* [OCPBUGS-10490](https://issues.redhat.com/browse/OCPBUGS-10490): [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go [#1595](https://github.com/openshift/ovn-kubernetes/pull/1595)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/da42356e194579af8be4c7367ebf250d6e97d78c...ffce71cb9cc045517288ed0f28a5d25c059d2438)