Back to index
4.14.0-0.okd-scos-2023-10-11-044258 Download installer and client with:
oc adm release extract --tools quay.io/okd/scos-release:4.14.0-0.okd-scos-2023-10-11-044258 No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-10-11 11:58:16 +0000 UTC
Image Digest: sha256:924c1b5d938ae936dd0703bdd6787b8db1cbba949b4bcb1f547d0e0ca39e0f37
Release 4.14.0-0.okd-scos-2023-10-11-044258 was created from registry.ci.openshift.org/origin/release-scos:4.14.0-0.okd-scos-2023-10-11-044258
Components
Rebuilt images without code change
MGMT-15704 : One typo and one missing piece of config, discovered after MGMT-15704 merged (#5465) #5465 Bump OCP versions: 4.12 (#5467) #5467
MGMT-15653 : Validate domain in one place (#5451) #5451 MGMT-15704 : Assisted service should create Day2 import CR for hub cluster. (#5459) #5459 MGMT-15340 : Ensure vlan interface names will be <= 15 characters (#5389) #5389 NO-ISSUE: Add subsystem tests to platform support level (#5460) #5460
Bump OCP versions: 4.10 (#5463) #5463
Bump OCP versions: 4.13 (#5457) #5457
Bump OCP versions: 4.13, 4.11, 4.12 (#5454) #5454
MGMT-11456 : Bugfix - remove redundant code (#5372) #5372 Bump OCP versions: 4.11, 4.12, 4.13 (#5452) #5452
AGENT-694 : Support external platform type for agent installer (#5438) #5438 MGMT-15100 : Remove unused feature-support-levels API endpoint (#5450) #5450 Update RHTAP references (#5410) #5410
Fix setup_env.sh failure handling (#5442) #5442
Add BMH annotation keys to docs (#5444) #5444
OCPBUGS-17992 day2 skip install config overrides (#5439) #5439
Bump OCP versions: 4.12, 4.10 (#5441) #5441
MGMT-14881 : return a valid error when no disks has been found (#5430) #5430 MGMT-15595 : Make client a separate go module (#5434) #5434 MGMT-15177 : Align feature support level to support platform as filterable feature (#5424) #5424 Bump OCP versions: 4.12 (#5432) #5432
Bump OCP versions: 4.11, 4.13 (#5431) #5431
Use go 1.18 when setting up environment (#5422) #5422
Full changelog
NO-ISSUE: Bump the go-dependencies group with 1 update (#597) #597
NO-ISSUE: Bump the go-dependencies group with 5 updates (#595) #595
MGMT-15661 : Update to latest ghw version (#594) #594 Full changelog
OCPBUGS-18026 : Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (ff9e8d8) into master #75 [aks pipeline] Refactor run-e2e.sh #4268
Fix updateServicePIPNames #4281
Add etag policy #4278
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.6.1 to 1.7.0 in /pkg/azclient #4287
chore(deps): bump sigs.k8s.io/controller-tools from 0.12.0 to 0.12.1 in /pkg/azclient/client-gen #4286
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.6.1 to 1.7.0 in /kubetest2-aks #4285
Issue 4230: remove readiness check for cache exclusion #4234
feat: support node selection for multiple standard load balancers #4201
chore(deps): bump golang from d9f7519 to 851af0a #4269
feat: support sharing IP address acorss services by public IP name #4257
Adjust exclude-from-lb test for basic-lb pipeline #4261
Changes by create-pull-request action #4264
chore(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 #4263
chore(deps): bump golang from 041c0ba to d9f7519 #4244
Changes by create-pull-request action #4259
chore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 #4248
Fix standalone VM EnsureBackendPoolDeleted #4217
[AKS pipeline] Use new customconfig file for autoscaling-multipool #4253
chore(deps): bump golang.org/x/text from 0.10.0 to 0.11.0 #4218
chore(deps): bump golang from 4c94dfe to 041c0ba #4235
Changes by create-pull-request action #4239
chore(deps): bump google.golang.org/grpc from 1.51.0 to 1.53.0 #4238
chore(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 in /pkg/azclient #4236
[AKS pipeline] Add a slb VMAS pipeline #4228
Support customization of numOfProbe and probeInterval when externaltrafficpolicy is local #4207
feat: make vmType optional #4214
doc: update README for document links #4216
Delete Service if WaitServiceExposureAndValidateConnectivity() fails #4199
fix: fixing kubetest autoscaling configs as well #4184
fix: storage account search default values #4203
Refactor: Split azure_backoff and azure_wrap in provider package #4198
track2 sdk: add config loader #4180
fix: PerformancePlus setting issue #4193
Move aks-preview extension addition order #4192
Fix get_k8s_version failure #4185
Add an option to disable API call cache #4135
chore(deps): bump go.opentelemetry.io/otel from 1.10.0 to 1.16.0 in /pkg/azclient #4182
Changes by create-pull-request action #4178
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 #4160
chores: add vendor update job #4172
Revert “chore(deps): bump go.opentelemetry.io/otel/trace from 1.10.0 to 1.16.0 in /pkg/azclient” #4165
chores: move docs to documentation branch #4167
chore(deps): bump go.opentelemetry.io/otel/trace from 1.10.0 to 1.16.0 in /pkg/azclient #4164
track2 sdk: downgrade otel library to 1.10.0 to resolve dependency conflict #4163
chore(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 #4162
chore: pkg imported more than once #4161
Limit max node count to 100 #4159
bump k8s.io to 0.27.3 #4156
track2 sdk: move sub to config struct in client factory #4155
chore(deps): bump golang from a3598b9 to 4c94dfe #4157
Support NSG and clean LBs #3898
Chroes: fix go build version in codeql job #4152
track2 sdk:add mock for client factory #4145
track2 sdk:add GetVirtualMachineScaleSetNetworkInterface for interface client #4144
track2 sdk:generate client factory #4141
chore(deps): bump step-security/harden-runner from 2.4.0 to 2.4.1 #4138
fix: remove deleted node IP address from IP-based LB backend pools #4136
track2 sdk:add ut for azclient #4109
Update go.sum with go v1.20.5 #4134
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 in /pkg/azclient #4128
chore(deps): bump stefanprodan/kustomizer from 8009953f93c2cf2ecbaff70be321d15e921ad591 to d5f7cea0a21fd41c44c6a0b808a436b9a66fa8d6 #4126
chore(deps): bump actions/upload-pages-artifact from 1.0.8 to 1.0.9 #4125
helm: add logVerbosity to cloud-node-manager #4111
chore(deps): bump golang from e88f338 to a3598b9 #4113
chore(deps): bump k8s.io/apimachinery from 0.27.2 to 0.27.3 in /kubetest2-aks #4115
update to debian bullseye, buster EOL soon #4066
chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 #4107
chore(deps): bump golang from b0f97bf to eb3f9ac #4106
chore(deps): bump peter-evans/create-pull-request from 5.0.1 to 5.0.2 #4105
chore(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 #4099
feat: support load balancer choosing logic for multi-slb #4075
chore(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 in /pkg/azclient #4103
chore(deps): bump actions/deploy-pages from 2.0.1 to 2.0.2 #4098
track2 sdk: only set go-armbalancer for resource client #4097
chore(deps): bump golang.org/x/text from 0.9.0 to 0.10.0 #4092
chore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 #4087
chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 #4086
update workflow config #4084
chore: bump docsy to 0.7.0 #4079
track2 sdk: reuse cred object in auth provider #4083
chore: skip exclude node label e2e test on aks as it is only supporte… #4076
Fix vmssflex ensureBackendPoolDeletedFromNode #4074
chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 #4082
chore(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 #4081
chore(deps): bump github/codeql-action from 2.3.6 to 2.13.4 #4080
chore(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 in /pkg/azclient #4078
track2 sdk: add config parser for track2 client #4077
feat: add GetLatestAccountKey in account key fetch #4067
chore(deps): bump golang from 1.20.4-buster to 1.20.5-buster #4057
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 #4071
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 in /pkg/azclient #4073
track2 sdk: Apply dependency injection pattern to auth provider #4069
chore(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 #4058
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.6.0 to 1.6.1 in /pkg/azclient #4064
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.6.0 to 1.6.1 in /kubetest2-aks #4062
chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 #4056
Remove MachinePool in dualstack-md template #4055
fix: replace deprecated labels with new labels in nodeCache update #4047
doc: update image versions in the doc #4053
Update release notes for v1.24.21 #4052
Update release notes for v1.25.15 #4051
Update release notes for v1.26.11 #4050
Update release notes for v1.27.5 #4049
chore(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 #4048
Add CAPZ templates #4043
Add CCM_E2E_TIMEOUT option for ginkgo running ccm e2e tests #2677
Fix reconcileFrontendIPConfigs() #3914
track2 sdk:add clientFactory and parse config from file #4033
Full changelog
OCPBUGS-16726 : psa - move into tech preview for 4.14 #354 Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Full changelog
OCPBUGS-19459 : check for object being nil (#805) #805 OCPBUGS-19821 : e2e: perfprof: enhance the scheduling domain tests (#813) #813 nto: avoid timeout when there are too many CSV (#817) #817
Add kubeconfig path for IBM Managed OpenShift (#812) #812
OCPBUGS-18868 : [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) #788 Sync DaemonSet if operand image changes (#785) #785
OCPBUGS-18392 : Change the OVN trigger file name to adapt to OVN IC (#777) #777 OCPBUGS-15044 : e2e:irqloadbalance: wait for profile revert (#768) #768 Add SetLogger() prior to controller-runtime start (#779) #779
OCPBUGS-18052 : feat: added logic to handle legacy sno install (#778) #778 OCPBUGS-17943 : Add rtentsk plugin to pp tuned profile (#767) #767 Tighten the rules for modifying Tuned Profiles (#775) #775
Revert “Tighten the rules for modifying Tuned Profiles (#765)” (#771) #765
Tighten the rules for modifying Tuned Profiles (#765) #765
OCPBUGS-14026 : cgroup: Match the name of the cgroup to what is expected by kubelet (#758) #758 Full changelog
OCPBUGS-18249 : <carry>: Export cpu stats of ovs.slice via prometheus #1699 OCPBUGS-20115 : Do not allow nodes to set forbidden openshift labels #1736 Update builder & base hyperkube image to RHEL 9 #1727
OCPBUGS-19401 : UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 #1713 OCPBUGS-19952 : UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1728 OCPBUGS-15531 : UPSTREAM: 120786: change rolling update logic to exclude sunsetting nodes #1717 OCPBUGS-18285 , OCPBUGS-19479 : Update to Kubernetes 1.27.6 #1709 Bump images, versions and deps to use Go 1.20.8 #120494
Automated cherry pick of #118189: TopologyAwareHints: Take lock in HasPopulatedHints #120323
Automated cherry pick of #118879: expose apiregistration.k8s.io into OpenAPIV3 #119841
Automated cherry pick of #120177: apiextensions-apiserver: generate applyconfigurations #120357
Automated cherry pick of #120108: Fix OpenAPI aggregation cleanup #120362
Automated cherry pick of #118881: fix openapi/v3 non local apiservices aggregation #119839
Manual cherry pick of #119800: Fixes CEL estimated cost to propagate result sizes correctly #119809
Automated cherry pick of #119027: prep for go1.21: use -e in go list #120036
Automated cherry pick of #119778: fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap #119952
Automated cherry pick of #119769: Fix a bug that PostFilter plugin may not function if previous #119943
Automated cherry pick of #119128: Issue 4230: remove readiness check for cache exclusion #119931
Automated cherry pick of #119753: kubeadm: fix nil pointer when etcd member is already removed #120011
Automated cherry pick of #119860: update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 #119997
Automated cherry pick of #120101: fix: concurrent map writes in e2e test #120436
Automated cherry pick of #119870: Fallback to legacy discovery on a wider range of conditions #120360
Automated cherry pick of #119986: Pass Pinned field to kubecontainer.Image #120054
kubelet: devices: skip allocation for running pods #118635 #119432
Automated cherry pick of #120204: Mark Job onPodConditions as optional in pod failure policy #120209
Automated cherry pick of #116506: generate ReportingInstance and ReportingController in Event #120067
Automated cherry pick of #119341: Ignore context canceled from validate and mutate webhook #120020
Cherry pick of #120128 Use environment variables for parameters in Powershell #120135
Cherry pick of #120127 Use env variables for passing path and subpath to Powershell #120130
Automated cherry pick of #119835: Avoid returning nil responseKind in v1beta1 aggregated #119868
releng/go: Bump images, versions and deps to use Go 1.… #119828
Automated cherry pick of #117245: Fix TopologyAwareHint not working when zone label is added #117269
Automated cherry pick of #117804: Refactor FindAttachablePluginBySpec out of CSI code path #119363
Automated cherry pick of #117710: e2e_node: move getSampleDevicePluginPod to #119620
Automated cherry pick of #117449: e2e: fix flaky test ‘should contain OpenAPI V3 for Aggregated #117486
Automated cherry pick of #116134: fix: After a Node is down and take some time to get back to up again, the mount point of the evicted Pods cannot be cleaned up successfully. #117235
Automated cherry pick of #119434: Include ignored pods when computing backoff delay for Job pod #119466
Automated cherry pick of #118922: kubeadm: backdate generated CAs #119113
Automated cherry pick of #118549: fix ‘pod’ in kubelet prober metrics #119604
Automated cherry pick of #118601: priority & fairness: support dynamic max seats #119572
Add mininumKubelet tag into ReadWriteOncePod test #119519
OCPBUGS-18724 : cm: reorder setting of sched_load_balance for sandbox slice #1693 OCPBUGS-18608 : UPSTREAM: <carry>: Force using host go always and use host libriaries #1688 OCPBUGS-18149 : UPSTREAM: <carry>: retry etcd Unavailable errors #1681 OCPBUGS-18149 : UPSTREAM: <carry>: retry etcd Unavailable errors #1676 OCPBUGS-14301 : UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation #1673 OCPBUGS-14301 : UPSTREAM: 117249,118189: fix TopologyCache crashes #1668 OCPBUGS-7415 : grant user:full scope to self-SARs #1493 Full changelog
Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) (#706) #704
Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#699) #699
OCPBUGS-17545 : Improve extracting opm binary from catalogs (#676) #676 OCPBUGS-7465 : Fix 401 Unauthorized due to stale auth token (#678) #678 Fix OCPBUGS-14402 - case where catalog is on a mirror from registries.conf (#682) #682
OCPBUGS-17998 : fix: ICSP with incorrect mirror path (#681) #681 OCPBUGS-17714 : Ensure errors are nil before closing registry to avoid… (#680) #680 Full changelog
Bug OCPBUGS-18806: Set controller’s SyncPeriod to 1 hour #81
Bump CAPO to match branch release-0.7 #80
Full changelog
OCPBUGS-19932 : OCPBUGS-19931: DownStream Batch Merge Blocker Bug 29th september 2023 #1920 OCPBUGS-19886 , OCPBUGS-19887 , OCPBUGS-19888 , OCPBUGS-19889 : EIP fixes, remove ippool dupe call, allow gw mtu in webhook and ovnkube node can set mgt port for dpu #1915 OCPBUGS-19812 , OCPBUGS-19813 , OCPBUGS-19814 , OCPBUGS-19815 : release 4.14 blocker fixes #1909 OCPBUGS-18427 , OCPBUGS-19507 , OCPBUGS-19538 , OCPBUGS-19568 : merging from master to release-4.14 #1889 OCPBUGS-16641 , OCPBUGS-18572 , OCPBUGS-19331 : [DownstreamMerge] 9-18-23 #1885 Node specific certificate in ovnkube node, admission webhook #3830
EIP: fix entry of EIP into validated EIP set #3903
clearInitialNodeNetworkUnavailableCondition() called on node update #3905
Watch nodes for localnet secondary networks #3820
EIP: fix how we detect primary interface EIP configuration #3893
Update bridge flow cache when the host address changes #3901
OCPBUGS-19004 , OCPBUGS-19010 : Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp #1875 OCPBUGS-18895,OCPBUGS-14549,OCPBUGS-18402 [DownstreamMerge] 9-11-23 #1868
Check libovsdbclient.ErrNotFound on wrapped errors #3891
Make ovnkube-trace to work for ovnkube-controller #3889
Enable gateway_mtu on rtoe port of GR #3886
Forward ICMP packets to OVN loadbalancer #3762
NIT: Rename annoation to annotation on the filename #3849
Rename GetDbObjsForAS to GetTestDbAddrSets #3869
Add COPP for Service Monitor to prevent CVE-2023-3153 #3879
fix: build-go.sh capture k8s.io/client-go version to use in build tag #3883
Do not set vlanID when its zero #3888
Fix pod delete perf #3878
Correct the operation of the hybrid overlay #3871
Change APB unit test to use multus annotation instead of hostnetwork #3841
move clearInitialNodeNetworkUnavailableCondition to clustermanager #3856
Fix encap port configuration for remote chassis #3851
OCPBUGS-18977 : Update bridge flow cache when the host address changes #1874 OCPBUGS-19503 , OCPBUGS-19649 : Use status subresource, Introduce per-node certs with webhook #1898 OCPBUGS-18584 : Check libovsdbclient.ErrNotFound on wrapped errors #1863 OCPBUGS-19087 : Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp #1879 OCPBUGS-12146 : Updating ovn-kubernetes-microshift images to be consistent with ART #1656 OCPBUGS-18467 : Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1854 OCPBUGS-14709 , OCPBUGS-16617 , OCPBUGS-18603 : Bump to OVN 23.09 #1842 OCPBUGS-18378 : LGW: Fix the precedence of rules in FORWARD chain #1851 OCPBUGS-17773 : Perf increases to pod deletion #1847 OCPBUGS-17731 : move clearInitialNodeNetworkUnavailableCondition to clustermanager #1839 OCPBUGS-18110 : Fix encap port configuration for remote chassis #1836 OCPBUGS-17406 , OCPBUGS-17844 , OCPBUGS-17970 : [DownstreamMerge] 24 Aug 2023 #1833 Run ovnkube-node and ovnkube-controller in the same container #3807
Revert “kubevirt: pre pull fedora coreos image” #3864
Create egress firewall with one db transaction #3847
OCPBUGS-17867 : CARRY: Removes restriction for ip scope universe on node ips #1822 8-16-23 #1820
Egress IP for non-OVN managed networks #3749
Fix BANP unit test flake #3829
Fix duplicate routes after HO route sync #3828
OCPBUGS-17666 : Downstream Merge august 15th 2023 #1817 Fix encap port deadlock #3833
Full changelog
cherry-pick: Improve delete device failure logs in driver node #48
OCPBUGS-17309 : Updated golang.org/x/net/html dependency. #43 Rebase with upstream: v0.4.0 changes #42
Add yussufsh as owner #448
fix: do not fatal on failure to create cloud object #443
use instance storage type instead of querying for image #440
Full changelog
OCPBUGS-20308 : Backport PR 28295 and 28238 #28304 OCPBUGS-19903 : kubevirt: add live migration tests #28281 wait for the service to have endpoints before starting pollers #28279
some monitor tests only function on disruptive tests #28287
OCPBUGS-19718 : rteval #28276 OCPBUGS-19547 : fix: add rteval to the test image #28269 TRT-1244 : Bump aws-ovn upgradeDurationLimits to 130 #28265 OCPBUGS-19061 : Remove duplicate connection type from disruption name #28260 USHIFT-1590 : skip failing invariants in MicroShift #28193 Revert “created persistent volume claims can not exceed the limitation” #28232
Revert “in-cluster disruption: ensure that only one monitor is started in cluster” #28230
created persistent volume claims can not exceed the limitation #28224
Revert “Fail on APIs removed in the next release” #28227
OCPBUGS-13158 : in-cluster disruption: ensure that only one monitor is started in cluster #28081 Fail on APIs removed in the next release #27561
Service invariant #28202
prevent secondary errors reported in prior steps #28221
OCPBUGS-17477 : requestheader: wait for only 3 oauth-servers to be available #28161 [test/extended/networking] Rename ovnkube containers #28219
Reduce usage of dcs #28212
Do not fail etcd storage path test for GVRs that are not served. #28214
move graceful shutdown to monitor test #28201
move PDBUnhealthyPodEvictionPolicy from TP to beta #28206
if no openshift-tests image can be auto-detected or specified, skip it #28207
allow failures for tests intentionally producing failures #28211
fix *-to-host sampler failure calculation #28209
skip test with intermittent serial problems #28208
point host network, network disruption at the kubelet #28191
migrate some watching code to monitortests #28188
fail if no sampler output is found for the poller #28198
Fix possibility of intervals without from/to by requiring when we Build() #28182
OCPBUGS-17497 : Skip invariant load balancer test for None platform #28180 tolerate cluster without clusterversion #28197
select poller image from payload #28194
AUTH-409 : bump o/k for the updated PSa labels #28192 Fixes openshift-tests dry-run failure asking for KUBERNETES_MASTER #28165
TRT-930 : Update test to support 2 release query_results.json #28149 add e2e non-functional test for required-scc SCCs #28142
Add a test to flake if we see NetworkManager log “too many netlink events” #28098
OCPBUGS-16615 : Making prometheus telemetry test flake #28181 update watch-endpoint-slices to usable shape #28184
Full changelog
Source code for this page located on github