# 4.14.0-0.okd-scos-2024-01-10-151818

Created: 2024-01-11 09:24:27 +0000 UTC

Image Digest: `sha256:b9449e9ac143e66d54a61d4beec012edd0a5b36133ff49c3f88c9e3e29513898`

Promoted from registry.ci.openshift.org/origin/release-scos:4.14.0-0.okd-scos-2024-01-10-151818


## Changes from 4.14.0-0.okd-scos-2023-12-21-073212

### Components

* Kubernetes upgraded from 1.27.8 to 1.27.9
* CentOS Stream CoreOS upgraded from 414.9.202312201452-0 to 414.9.202401091452-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [02dc1175](https://github.com/openshift/assisted-installer/commit/02dc1175d8d1278f94287d14899c66344cef9174) `sha256:3babd9c93adda52bf881aefdf46db8a8bfcfbf1837e9132037e02fe21546a20a`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [02dc1175](https://github.com/openshift/assisted-installer/commit/02dc1175d8d1278f94287d14899c66344cef9174) `sha256:4f43fe2cc3d57b7bb7cec9a52a1ca033a1f4547b52dba6c14fee02d8b87acf21`
* centos-stream-coreos-9 `sha256:0794b198ec79935f052884a3759bc09cde27d31fde6531cc5d4b1ea52cda43b2`
* centos-stream-coreos-9-extensions `sha256:d7a0b108bb64605be7ef84b018f62c2eaa0259746ac9ef6cd5947d331ee9907b`
* [kube-proxy](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:c3baee4d3e085ec946f18965bda87e1f73205de9642aa64a8b61e89912971c8d`
* machine-os-content `sha256:0794b198ec79935f052884a3759bc09cde27d31fde6531cc5d4b1ea52cda43b2`
* [sdn](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:9fc803d3e46ce9d88e5c58de2e88ca32479f8e85931434645853e72e6e45be18`


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/8ba0b37a45510404a842d6dbd84d40a18008e81d)

* [OCPBUGS-21255](https://issues.redhat.com/browse/OCPBUGS-21255): Bump golang.org/x/net to v0.18.0 [#38](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/38)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8c532d2e64aa0f2fc30e49d658a47426fab38cb3...8ba0b37a45510404a842d6dbd84d40a18008e81d)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/557c4f4617d45e50127363e34d4512b59e8c8bb6)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#109](https://github.com/openshift/azure-disk-csi-driver-operator/pull/109)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/3e2ddb326b30b0a4bf482b2869beee2ffdf8695b...557c4f4617d45e50127363e34d4512b59e8c8bb6)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/96fab8160e575991c1f50101bf1ec8bb0259165e)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#83](https://github.com/openshift/azure-file-csi-driver-operator/pull/83)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/43838ae6c329e7d818c19ec59dfba5abde7535f6...96fab8160e575991c1f50101bf1ec8bb0259165e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/dfafb5ca972a6ed4677257aebfe4f284ac020830)

* [OCPBUGS-22895](https://issues.redhat.com/browse/OCPBUGS-22895): Do not generate azure-cloud-provider in manual mode for aro builds [#7670](https://github.com/openshift/installer/pull/7670)
* [Full changelog](https://github.com/openshift/installer/compare/a3cbb199faaa440a9d7e130f35b6be83f912aef9...dfafb5ca972a6ed4677257aebfe4f284ac020830)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/286cfa5f978c4a89c776347c82fa09a232eef144)

* [OCPBUGS-25983](https://issues.redhat.com/browse/OCPBUGS-25983): Remove deprecated password defaulting in default config flag [#1646](https://github.com/openshift/oc/pull/1646)
* [Full changelog](https://github.com/openshift/oc/compare/33a7a8bcccdd1c7c0e2f51609d832d31232d2f26...286cfa5f978c4a89c776347c82fa09a232eef144)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ed0244ea6b4fbf92cae4ed22e9c4902fa1f2f18d)

* [OCPBUGS-26214](https://issues.redhat.com/browse/OCPBUGS-26214): fix device busy errors [#1176](https://github.com/openshift/cluster-etcd-operator/pull/1176)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/e29f97d93ca1c4fa423b871ad7f1b73bd64ed1d0...ed0244ea6b4fbf92cae4ed22e9c4902fa1f2f18d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8cf22aa40d9ac748da5c486c500ea341c9a49c5d)

* [OCPBUGS-24037](https://issues.redhat.com/browse/OCPBUGS-24037): remove all managed fields used by old manager [#2112](https://github.com/openshift/cluster-network-operator/pull/2112)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2d7ced4536c90a4c848ae9a67caf4c0766cfde78...8cf22aa40d9ac748da5c486c500ea341c9a49c5d)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/6d4553bf9d039a47abbf7929e29e906f89da0e36)

* [OCPBUGS-26003](https://issues.redhat.com/browse/OCPBUGS-26003): E2E: PPC Test cases (#905) [#905](https://github.com/openshift/cluster-node-tuning-operator/pull/905)
* Make MC names deterministic (#903) [#903](https://github.com/openshift/cluster-node-tuning-operator/pull/903)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7387b0e125b76ac8ddf1f4e94035b8f313972e0d...6d4553bf9d039a47abbf7929e29e906f89da0e36)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7c6021d68846a2e2d8c9cca99156310a7b5c5670)

* [OCPBUGS-26207](https://issues.redhat.com/browse/OCPBUGS-26207): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1016](https://github.com/openshift/cluster-version-operator/pull/1016)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2a48f5e228f27a26383f1a613fa328c1ffba7977...7c6021d68846a2e2d8c9cca99156310a7b5c5670)


### [console](https://github.com/openshift/console/tree/3aa34f59f76cc499eae8ecf2dd4cfe2641318cee)

* [OCPBUGS-26171](https://issues.redhat.com/browse/OCPBUGS-26171): Set unlimited line width in YAML editor [#13482](https://github.com/openshift/console/pull/13482)
* [OCPBUGS-24640](https://issues.redhat.com/browse/OCPBUGS-24640): Strip 'Server' header from proxy response [#13423](https://github.com/openshift/console/pull/13423)
* [OCPBUGS-25997](https://issues.redhat.com/browse/OCPBUGS-25997): change Alertmanager form to create using matchers inst… [#13478](https://github.com/openshift/console/pull/13478)
* [OCPBUGS-24349](https://issues.redhat.com/browse/OCPBUGS-24349): Fix crash when ArtifactHub Task has no version [#13399](https://github.com/openshift/console/pull/13399)
* [Full changelog](https://github.com/openshift/console/compare/3ea98d9009c8a2f5d4f0d01bbe2792a40b0bda40...3aa34f59f76cc499eae8ecf2dd4cfe2641318cee)


### [console-operator](https://github.com/openshift/console-operator/tree/a5176b4e8454e5d1d28023d77ddbad880db99168)

* [OCPBUGS-23968](https://issues.redhat.com/browse/OCPBUGS-23968): Disable route controller health check for NLB setup [#817](https://github.com/openshift/console-operator/pull/817)
* [Full changelog](https://github.com/openshift/console-operator/compare/b421447a2d64d1978d3029896fc39c96ea774385...a5176b4e8454e5d1d28023d77ddbad880db99168)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/da69ca4786ca424228e28f223568c7340b1de99e)

* [OCPBUGS-23443](https://issues.redhat.com/browse/OCPBUGS-23443): Fix selector for manila-csi-driver-controller-metrics service [#211](https://github.com/openshift/csi-driver-manila-operator/pull/211)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/ac1cd219045feb2d4008e9fd0e85ce56e67153bf...da69ca4786ca424228e28f223568c7340b1de99e)


### [etcd](https://github.com/openshift/etcd/tree/77303c479ae9cb45b5a1b481f54ec5b62d89246f)

* [OCPBUGS-24939](https://issues.redhat.com/browse/OCPBUGS-24939): Rebase etcd 3.5.11 openshift 4.14 [#235](https://github.com/openshift/etcd/pull/235)
* [Full changelog](https://github.com/openshift/etcd/compare/ba21c5bca59afce3800577c1cbb073c5556ca990...77303c479ae9cb45b5a1b481f54ec5b62d89246f)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/5c56cc35e3edc1f34290e7aaaec57e9c88c91859)

* UPSTREAM: 117349: OCPBUGS-19431: Bump lumberjack.v2 v2.0.0 -> v2.2.1 [#1552](https://github.com/openshift/kubernetes/pull/1552)
* [OCPBUGS-26006](https://issues.redhat.com/browse/OCPBUGS-26006): Update to Kubernetes 1.27.9 [#1838](https://github.com/openshift/kubernetes/pull/1838)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4fab27b79307fcf0c6301964f3212d7d101f48cc...5c56cc35e3edc1f34290e7aaaec57e9c88c91859)


### [hypershift](https://github.com/openshift/hypershift/tree/f81daca5cc931a4c44c784854bee3877ba1f4a06)

* Update RHTAP references (release-4.14) [#3383](https://github.com/openshift/hypershift/pull/3383)
* [OCPBUGS-22360](https://issues.redhat.com/browse/OCPBUGS-22360): Validate accessTokenInactivityTimeout >= 300s [#3175](https://github.com/openshift/hypershift/pull/3175)
* [OCPBUGS-23936](https://issues.redhat.com/browse/OCPBUGS-23936): Use correct kubeconfig in CCM and remove CCMs access t… [#3232](https://github.com/openshift/hypershift/pull/3232)
* [Full changelog](https://github.com/openshift/hypershift/compare/9d4f634ad9edfcc529e6c8daa270d713059e55da...f81daca5cc931a4c44c784854bee3877ba1f4a06)


### [ironic](https://github.com/openshift/ironic-image/tree/bd013d93f9e968f7893665644415c4e67b7a2a1a)

* [OCPBUGS-19884](https://issues.redhat.com/browse/OCPBUGS-19884): update Ironic to include secure boot fixes [#445](https://github.com/openshift/ironic-image/pull/445)
* [Full changelog](https://github.com/openshift/ironic-image/compare/30c987f1f1ab7683202cd365d75c7a50d456e773...bd013d93f9e968f7893665644415c4e67b7a2a1a)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a0a1b5a635edc33eba73ada9a9a74a9bdc79711b)

* [OCPBUGS-24664](https://issues.redhat.com/browse/OCPBUGS-24664): disable query link for non metric-based alerts [#82](https://github.com/openshift/monitoring-plugin/pull/82)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/87571978825e63392a56f6920e068af3a71cda6e...a0a1b5a635edc33eba73ada9a9a74a9bdc79711b)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/7691686f8670c0d52ce9d903689f572f8dd2b8d0)

* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#769) [#769](https://github.com/openshift/oc-mirror/pull/769)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/058c3324517b7a043a823e203bf6b282de5e3b8f...7691686f8670c0d52ce9d903689f572f8dd2b8d0)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/d714b463a400b2138af5d589a45bddca2404c298)

* [OCPBUGS-22616](https://issues.redhat.com/browse/OCPBUGS-22616): [release-4.14] Bump go.opentelemetry.io dependencies [#58](https://github.com/openshift/operator-framework-operator-controller/pull/58)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/17343293267cad10f074fbe155c7fa31ed6b9336...d714b463a400b2138af5d589a45bddca2404c298)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/6516b6e06e29971c2b876647ccfa0d9664ead7ba)

* [OCPBUGS-26460](https://issues.redhat.com/browse/OCPBUGS-26460), [OCPBUGS-26461](https://issues.redhat.com/browse/OCPBUGS-26461): [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 [#156](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/156)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d5770c29b0dad798ab77f3a76f78a78dbc721934...6516b6e06e29971c2b876647ccfa0d9664ead7ba)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f5327f08e8f332f036c4f46bc87e1195088717d6)

* [OCPBUGS-22538](https://issues.redhat.com/browse/OCPBUGS-22538): bump otelhttp to 44.0 for api [#647](https://github.com/openshift/operator-framework-olm/pull/647)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/3bb41f068d02010d3f0db46905fa0521b580c3d0...f5327f08e8f332f036c4f46bc87e1195088717d6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6f46a67b85333d8ff729ed0001685efdf15410f5)

* [OCPBUGS-24326](https://issues.redhat.com/browse/OCPBUGS-24326): APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field [#1967](https://github.com/openshift/ovn-kubernetes/pull/1967)
* [OCPBUGS-25903](https://issues.redhat.com/browse/OCPBUGS-25903): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#2003](https://github.com/openshift/ovn-kubernetes/pull/2003)
* [OCPBUGS-25746](https://issues.redhat.com/browse/OCPBUGS-25746), [OCPBUGS-25747](https://issues.redhat.com/browse/OCPBUGS-25747): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1996](https://github.com/openshift/ovn-kubernetes/pull/1996)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/95ae29d23194711297419fe43ff1c83fed3f9828...6f46a67b85333d8ff729ed0001685efdf15410f5)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/8ecfd7fd6a201844bb9a926146db70468345852b)

* [OCPBUGS-25980](https://issues.redhat.com/browse/OCPBUGS-25980): Rebase with upstream: Fix snyk code issue: Path Traversal [#72](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/90e87d7c6b2c5d05c005c40271f57443eee6269c...8ecfd7fd6a201844bb9a926146db70468345852b)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/5d2d9d65c6763829c92856cc9a0ed2ebecfc2c55)

* [OCPBUGS-25715](https://issues.redhat.com/browse/OCPBUGS-25715): snyk: ignore vendor dir [#60](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/60)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a33b6b1224ed41791d63cf34e17a33e916818cd7...5d2d9d65c6763829c92856cc9a0ed2ebecfc2c55)


### [tests](https://github.com/openshift/origin/tree/c35d76db9ee8a2f5b67f12fc708989b66015eab8)

* [OCPBUGS-26044](https://issues.redhat.com/browse/OCPBUGS-26044): Adding test case for when exceed openshift.io/image-tags will ban to … [#28493](https://github.com/openshift/origin/pull/28493)
* [Full changelog](https://github.com/openshift/origin/compare/e4f4fc154d3dbb8494d20c3d5ef0c4e478c0e50f...c35d76db9ee8a2f5b67f12fc708989b66015eab8)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/cbfec1135914340ef16c7dd109ac9271a2e5d2ee)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#186](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/186)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/063ef1ad49b6a09c06d3f49769366a590e314064...cbfec1135914340ef16c7dd109ac9271a2e5d2ee)