Back to index
4.12.0-0.okd-scos-2023-02-14-060109 Download installer and client with:
oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2023-02-14-060109 No tests for this release
Loading changelog, this may take a while ...
Created: 2023-02-14 10:29:38 +0000 UTC
Image Digest: sha256:968a5b06be2095ef337aaf4f5d951292875dd538b6e76d5cee826f3a6cd307d1
Release 4.12.0-0.okd-scos-2023-02-14-060109 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2023-02-14-060109
Components
Kubernetes upgraded from 1.25.2 to 1.25.4
CentOS Stream CoreOS upgraded from 412.9.202211241749-0 to 412.9.202302091303-0
Rebuilt images without code change
MGMT-13192 : dualstack SNO cluster fails to complete - getting error In dual stack installation we should set dhcp,dhcp6 kargs in order to wait for ipv6 address when node comes after reboot (#4914) #4914 MGMT-12863 : Assisted Spoke install-config does not generate icsp with multiple mirror to entries (#4748) #4748 MGMT-12635 : Add icsp-file support for all oc commands (#4684) (#4700) #4684 Full changelog
Bug OCPBUGS-5156: Add ApplicationSecurityGroups to InterfaceIPConfiguration #92
OCPBUGS-4783 : OpenStack: Support multi AZ environments #88 OCPBUGS-4784 : OpenStack: Only return egressIPConfiguration for first InternalIP #89 Full changelog
E2E: Network stack Pinning tests (#533) #533
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543
pao: latency-tests: read test log directly from pod (#547) #547
Add authentication to the /metrics endpoint (#553) #553
Update NTO images to be consistent with ART (#557) #557
OCPBUGS-5021 : [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) #530 Remove trailing space from test name (#546) #546
Fix default hard eviction threshold when PCC is applied (#520) #520
Full changelog
OCPBUGS-5761 : UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #176 OCPBUGS-3100 : Rebase openshift/etcd 4.12 onto v3.5.6 #169 trim build path #14816
client/pkg/fileutil: add missing logger to {Create,Touch}DirAll #14799
clientv3: do not refresh token when users use CommonName based authentication #14790
etcdserver: call the OnPreCommitUnsafe in unsafeCommit #14733
add warning message when delete to release-3.5 #13748
clientv3: fix the implementation of double barrier #14658
server: add more context to panic message #14676
fix: close maintenance conn #14662
test: added e2e test case for issue 14571: etcd doesn’t load auth info when recovering from a snapshot #14656
server: refresh auth info when etcd recovers from a snapshot #14648
Backport #14591 to 3.5. #14593
Release-3.5: server/etcdmain: add configurable cipher list to gRPC proxy listener #14500
client/v3: Add backoff before retry when watch stream returns unavailable #14582
Makefile: additional logic fix / Update Ubuntu base #13861
etcdserver: added more debug log for the purgeFile goroutine #14578
Automated cherry pick of #13224 #14572 #14573
*: avoid closing a watch with ID 0 incorrectly #14563
Backport PR 14322 to release-3.5 #14547
Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt #14489
Full changelog
OCPBUGS-5490 : remove in-tree volume limits test now that CSIMigration is GA #1449 OCPBUGS-4808 : Apply shared defaulters to CRD-based routes. #1441 OCPBUGS-4366 : Update to 1.25.4 #1434 Automated cherry pick of #113681: fix node address validation #113689
Fix etcd path construction #113684
Update images, dependencies and version to Go 1.19.3 #113592
Automated cherry pick of #113481: kubelet: fix pod log line corruption when using timestamps #113515
Automated cherry pick of #112913: fix GetAllocatableCPUs in cpumanager #113420
Automated cherry pick of #113133: Fix DeleteCollection API decode DeleteOptions fail #113286
Automated cherry pick of #113136: NodeLifecycleController: Remove race condition #113330
Automated cherry pick of #113409: Disable expansion in SC, if driver does not support it #113432
kube-proxy react on Node PodCIDR changes #113247
Automated cherry pick of #111936: Marshal MicroTime to json and proto at the same precision #112218
Automated cherry pick of #112489: etcd: Updated to v3.5.5 #113197
Automated cherry pick of #112785: service update event should be triggered when appProtocol in #113031
Cherry pick #112607 Make mount ref search more robust #112887
Update images, dependencies and version to Go 1.19.2 #112902
Bump konnectivity-client to v0.0.33 #112808
Automated cherry pick of #112837: Fix winkernel proxier setting the wrong HNS loadbalancer ID #112840
Automated cherry pick of #112357: kube-scheduler: add taints filtering logic consistent with #112533
Revert 109706 + 111691 #112807
Automated cherry pick of #112610: Fix flaky TestStalePodDisruption #112611
Automated cherry pick of #112557: Fix list estimator for lists that are executed as gets #112632
Automated cherry pick of #112205: Ensure metric ‘running_managed_controllers’ is registered #112447
Automated cherry pick of #112403: Call SetupDevice only if Volume is not globally Mounted #112493
CHANGELOG-1.25: Add missing changes for 1.25.2 #112667
Full changelog
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156 fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Re-revert KAS egress policy #2090
Switch API documentation to v1beta1 #2056
fix kas ServiceMonitor to TargetPort 6443 #2086
fix etcd ServiceMonitor CA #2085
Add logs for when hc decide to not honour intent to clean up cloud resources #2084
Skip destroying cloud resources when cloud creds lost #2083
kas token-minter should use localhost kubeconfig #2082
Fix infrastructure.status.apiServerInternalURI for PublicAndPrivate #2081
Remove unused kubevirt test functions #2078
Propagate Pull Secret Changes to NodePool Nodes #1977
OTA-852 : api/v1beta1/hostedcluster_types: Add channel, availableUpdates, and conditionalUpdates #1954 Fix typo in cli create command usage #1943
workaround bad SAR check in deploymentconfigs conformance test #2080
HOSTEDCP-603 : move CI manifests to core repo #2073 Update internal capk image to match current devel branch #2076
hcco: fix deployer role to include patch for replicationcontrollers #2075
add system:deployer ClusterRole to HCCO #2064
HOSTEDCP-676 CAPI AWS provider pod from latest 4.13 release payload crashloops continuously #2000
Add missing image trigger controller RBAC #1945
kubevirt: Install virt-launcher networkpolicy #1872
Additional memory request adjustments #2063
test/e2e/util: Explain incomplete reasons in WaitForImageRollout* #2062
Use context func for PowerVS SDKs #2060
Use asExpected reason for ReconciliationActive=true #2046
Updatd development contribution docs #2044
Requeue hostedcontrolplane when waiting for deletion #2058
fix(hcco): Clean up resources intended to be removed by CVO #2031
Add autoscaler balancing ignore labels args #2041
Add imagev1 to scheme used by dump command #2054
api/v1beta1/hosted_controlplane: Godocs for ReleaseImage and IssuerURL #2048
adjust memory requests for HCP components #2055
policy-controller: add missing rbac #1921
Kube API server panic: Fix podsecurity annotations on kube-system #2057
Merge main into release-4.12 branch #2053
Default Ingress Passthrough for KubeVirt provider #1787
Release 4.12 rebase latest #2047
switch OLM catalogs to imagestream #2032
fix cluster csi driver reconcile #2043
Add ref for SLOs #2040
Add support to propagate labels from NodePools to Nodes #2026
Add value to hosted control plane namespace label #2036
Expose proxy, identityProviders and limited support metrics #2015
Updated secret permissions to 0640 #1818
adjust rate interval on hypershift:controlplane:component_cpu_usage_s… #2035
fix(cpo): Remove storage from mgmt cluster for IBM Cloud #2007
Add support for additional allowed principals for AWS hosted cluster VPC Endpoint Services #2021
Fix OpenID OAuth config parsing #2027
Add TestReconcileHostedControlPlaneConfiguration unit test #2020
Makefile: Include full ‘git diff’ output #2024
Add CSR signer to Kubelet client CA #2025
remove control-plane-component label from kube-apiserver-proxy and konnectivity-agent pods #2012
Change aws kms input to require an arn string #1991
add node-drain-timeout flag to create cluster cmd #2023
fix panic in logger expected key-values #2019
test: dynamically assign single AWS zone to SingleReplica guest clusters #1951
workaround OpenShiftSDN network policy egress bug #2022
add KAS egress network policy #2005
avoid using route53 api for OIDC health check #2018
Add default kubevirt guest cluster storageclass #2014
fix(ho): Set restart date annotation back #1986
add missing app label to HCP components #2013
external-dns: set AWS batch internal to 10s #2010
Add clarifying comment #2008
Prevent cluster deletion hangs by using heartbeat condition #1947
Add annotation for cross zone lb #2004
cmd: dump: include networkpolicies #2002
Revert “add KAS egress network policy” #2001
add KAS egress network policy #1905
test: e2e: remove node checks during NodePool upgrade test #1997
fix(ho): Use v1alpha1 ownerRef for future CPO managed components #1959
Fix OpenID OAuth config parsing #2029
Fast foward release-4.12 to main #2003
Add init container to etcd pods to test DNS #1985
Set missing internal route label for ovnkube-sbdb and add e2e smoke test for private clusters #1994
test: add OLM test timeout #1992
test: disable OLM test until catalog pods are fixed #1993
autoscaler get/list for infrastructure.cluster.x-k8s.io api group #1984
Add pull secret to storage service accounts #1983
OCPBUGS-4973 : Reinstate hosted cluster configuration propagation #1980 Fix send clusterGuestCloudResourcesDeletionTime metric #1974
Remove CAPA command from deployment #1973
Add metrics for hostedCluster deletion SLIs #1956
add kubernetes.default to KAS certificate SAN #1952
fix wait-for-infrastructure-resource flag on CNO availablity prober #1972
Signal when ignition is reached via event, metric and condition and delay MHC creation #1966
fix nodepool name description error #1965
v1beta1: add missing S3 publishing strategy type #1967
Ignore CAPI/CAPA env var image overrides for 4.12 and later #1961
AUTH-323 : pki: remove root-ca from the client CA bundle #1884 Create openshift-install configmap in HyperShift clusters #1910
certs: fix SKID/AKID generation #1856
Added separation among UpdateVersion and UpdateConfig in NodePool Inplace Upgrade #1909
AUTH-323 : remove rootCA from CA bundle for etcd certs #1948 OCPBUGS-5133 : Reinstate hosted cluster configuration propagation #1981 Remove CAPA command from deployment #1970
Fast forward release-4.12 to main #1964
Remove CAPI manager container command path #1923
Storage: cleanup operand deployments on upgrade #1946
guest cleanup: ensure pods are force-deleted #1915
Add resolve-from-guest-cluster-dns flag to ingress socks-proxy #1937
Add CLI support for Multi-cluster engine secret: #1870
AUTH-323 : Add etcd and etcd metrics certs, add etcd metrics proxy #1858 Fetch PowerVS capi image from release payload #1912
Clarify aws private link service/endpoint requirement #1919
Refactor powervs infra for reusing fields in create cluster cmd #1824
Bug 2066664 : Sync manifests from cluster-csi-snapsht-controller-operator #1922 Update cnv ci script to make hpp optional #1942
STOR-1038 : Reconcile Storage and ClusterCSIDrivers in the guest clusters #1941 Enable HCCO to set owner references on configmaps it reconciles #1926
Remove CAPI manager container command path #1969
v1beta1: add missing S3 publishing strategy type #1968
Fast forward ‘release-4.12’ branch to ‘main’ #1932
Clarify CAPI in controller arch doc #1940
Add clusterID to ignition-server PodMonitor #1920
always set ROUTER_CANONICAL_HOSTNAME #1929
availability-prober: add wait for cluster infrastructure resource #1927
Destroy target groups explicitly #1931
fix nil deref in nodepool controller #1930
Temporarily override the CAPI AWS provider image #1933
Add ValidIdentityProvider condition #1913
Fix control plane upgrade test in e2e #1928
Add AllMachinesReady and AllNodesHealthy conditions to NodePool #1907
Fix snapshot-controller error message #1916
OCPBUGS-3900 : Fix CA passed to MCO for kubelet #1917 Refactoring the E2E test suite #1838
Change CAPI image initialization order #1914
Force delete pod stuck in terminating state during hosted cluster cleanup #1732
refactor route reconcilation #1861
STOR-968 : Move CSISnapshotController + operator to mgmt cluster #1698 Add better docs for conditions #1908
Update filter for listing ec2 private nodes #1906
AUTH-323 : cpo/ctrl/hostedcp: create etcd-signer,rootCA bundl #1892 Introduce v1beta1 API version #1703
Use the root CA bundle in ServiceMonitors/PodMonitors #1903
Bubble up control plane endpoint from hcp into hc #1899
AUTH-323 : pki: remove root-ca from the aggregator CA bundle #1883 Give some love to DNS docs and index #1898
Replace deprecated ioutil calls #1879
doc: OVN Pod restart needed after the HC migration #1897
Fix CA bundle in podmonitors/servicemonitors #1896
inplaceupgrade: add capacity check and tests #1860
inplaceupgrade: delete idle MCD pods #1859
Added new flag on E2E test to avoid send metrics from Local executions #1888
Use HPP with CSI Driver for kubevirt provider in CI #1893
Retrieve CAPI/CAPA from release image #1826
Always set TokenSecretReasonKey/TokenSecretMessageKey #1895
HOSTEDCP-582 : Add CEL immutability validations to nodepool. #1875 Move all HC conditions into its own file #1887
Optionally use rhobs.monitoring group for monitoring resources #1889
Add crashing pods exception for machine-approver #1894
Remove invalid expectation about cli #1890
Add wait for infra guest cluster deletion e2e #1885
Add annotation to allow resource requests overrides #1882
Update create nodepool command in getting-started.md #1876
Changing entrypoint to exec form to allow for argument to be passed to the hypeshift executable #1807
Don’t store machine payload in token secret for replace node pools #1873
doc: Added documentation and diagrams for HostedCluster and NodePool #1863
Conditions cvo #1852
Add HPP for HyperShift/Kubevirt deployments #1874
node tuning: Fix docs and improve logs #1849
Conditions etcd kas #1853
add apiserver_request_aborts_total to recording rules #1871
Defines resourceTags merge granularity #1866
Adding missing objects to the HC Migration #1867
Validate awsendpoint deletion #1813
test: e2e: skip certain pods for EnsureNoCrashingPods check #1868
PowerVS: Introduce retry on retryable errors on API call failure #1796
Bubble up infrastructure condition from HCP into HC #1851
e2e: validate resource cleanup #1855
Change domain reference #1857
Add omitempty for RestoreSnapshotURL #1854
[HyperShift/KubeVirt] Test on CNV 4.12 from nightly channel #1840
Signal ignition server payload generation in NodePool conditions #1850
Use default namespace filtering for events #1842
Add nodepool upgrades section to index #1848
fix nil deref in nodeToMachineSet #1846
bug: HOSTEDCP-569 HC controller blocked reconcile verifying releaseImage #1749
SDN-3508 : Add proxy env variables to CNO deployment #1774 Add retry for cloud connection and VPC LB deletion #1823
move LatestSupportedVersion to 4.13 #1839
Docs: Updated Handling Ingress section in create agent cluster to se updated metallb operator #1836
docs: fix getting-started.md typo #1534
nit: same tabulation across all the Getting Started #1835
Full changelog
Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART #12
Full changelog
Source code for this page located on github