Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.14.0-0.okd-2023-11-14-101924

No tests for this release

Upgrades from:

• 4.14.0-0.okd-2023-11-13-192150 (changes) - Success
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Success Success
• 4.14.0-0.okd-2023-10-28-073550 - Success Success
• 4.13.0-0.okd-2023-10-28-065448 (changes) - F S F

Upgrades to:

• 4.15.0-0.okd-2024-02-10-035534 (changes) - Success Success
• 4.14.0-0.okd-2024-01-26-175629 (changes) - Success Success
• 4.14.0-0.okd-2024-01-06-084517 (changes) - Success Success
• 4.14.0-0.okd-2023-12-01-225814 (changes) - Success Success

---

Loading changelog, this may take a while ...

Changes from 4.14.0-0.okd-2023-10-28-073550

Created: 2023-11-14 10:24:38 +0000 UTC

Image Digest: sha256:72d40c51e7c4d1b9c31e9b0d276d045f1b2b93def5ecee49186df856d40bcb5c

Release 4.14.0-0.okd-2023-11-14-101924 was created from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2023-11-14-101924

Components

• Kubernetes 1.27.6
• Fedora CoreOS upgraded from 38.20231002.3 to 38.20231027.3

Rebuilt images without code change

• multus-cni git 599223b8 sha256:3b4016c2feaddb883b851df19fbbc0bb7d3d00ea976152de32612b5ebac9dc91
• olm-catalogd git aa44c026 sha256:67308408fa9d18bc605be7cb6b58c3080a4ba828c8481f6571368b893d583363
• olm-operator-controller git 17343293 sha256:b7cca14f5780432803ac68df060c80d04831f2abeccb39d6186779a1ad7bde90
• olm-rukpak git daa50736 sha256:e5163830173df7afb64b084cd3ecc486613f66450f5782f2711e2e2199c06766
• openstack-machine-api-provider git 47ad2845 sha256:fdd3e31cbe84c08f4a3cc555daae665d68319a24ad07766c974921003d472675
• ovn-kubernetes git 7a232386 sha256:f8617174ea963f654f714939d14a5129f1abe4327b4de93161e8a8671f6abb28
• ovn-kubernetes-microshift git 7a232386 sha256:95bff568d7f7f249a4b591c7b0f51ddfe3409dd7cee4d1f15931ba13969e6c2f

aws-pod-identity-webhook

• NO-ISSUE: Sync OWNERS with team members #176
• snyk: exclude vendor/ #171
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-21868: vSphere,segfault on version check #7605
• OCPBUGS-22945: Update gcloud version to 447.0.0 #7681
• OCPBUGS-22187: azure: validation: validate defaultMachinePlatform #7615
• OCPBUGS-22758: update RHCOS 4.14 bootimage metadata to 414.92.202310210434-0 #7655
• OCPBUGS-19922: Release 4.14 skip agent tui on external oci platform #7599
• OCPBUGS-21653: Rectify GCP label key validation check #7606
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-22702: Reflect container’s exit code for long running tasks not attached to terminal #1592
• OCPBUGS-20508: regeneratemco: explicitly check for PlatformStatus field #1573
• Full changelog

cloud-credential-operator

• NO-ISSUE: Removing andrew from OWNERS #617
• snyk: exclude vendor/ #615
• OCPBUGS-22651: explicitly set azure oidc bucket to allow public blob access #612
• Full changelog

cluster-authentication-operator

• OCPBUGS-20705: go.mod: bump golang.org/x/net to v0.17.0 #637
• Full changelog

cluster-baremetal-operator

• Jira OCPBUGS-22208: Trigger reconcile if Secret openshift-config/pull-secret changes #376
• Full changelog

cluster-capi-operator

• OCPBUGS-22314: fix: add missing azure identity diff #136
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-20552: apply necessary RBAC for the alibaba cloud controller manager #289
• Full changelog

cluster-config-operator

• OCPBUGS-21653: Update openshift/api package to latest version #371
• : OCPBUGS-21286: bump library-go to include switch to HTTP/1.1 #369
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-20566: webhooks: set min version TLS 1.2 + exclude weak ciphersuites #254
• Full changelog

cluster-etcd-operator

• OCPBUGS-22477: Remove z-upgrades from UpgradeBackupController #1140
• OCPBUGS-21802: remove revision stability check from bootstrap complet… #1138
• OCPBUGS-21175: fixing CVE-2023-39325 by updating dependencies #1142
• Full changelog

cluster-image-registry-operator

• OCPBUGS-22127: increase storage account key cache expiration #941
• OCPBUGS-20710: mitigate effects of rapid reset #942
• Full changelog

cluster-kube-apiserver-operator

• : OCPBUGS-20898: bump library-go to include switch to HTTP/1.1 #1569
• OCPBUGS-22718: [release-4.14] OCPBUGS-20331: manifests: rename API performance dashboard #1570
• Full changelog

cluster-kube-storage-version-migrator-operator

• : OCPBUGS-21371: bump library-go to include switch to HTTP/1.1 #96
• Full changelog

cluster-machine-approver

• OCPBUGS-21468: Bump x/net package to v0.17.0 #206
• Full changelog

cluster-monitoring-operator

• OCPBUGS-22917: jsonnet: pin commits #2143
• OCPBUGS-22734: [release-4.14] add RHACS telemetry metrics #2137
• Full changelog

cluster-network-operator

• OCPBUGS-19897: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2043
• Full changelog

cluster-node-tuning-operator

• Disable HTTP/2 for webhook and metrics servers (#841) #841
• Remove obsolete protocols and weak ciphers (#835) #835
• Full changelog

cluster-openshift-apiserver-operator

• : OCPBUGS-20724: bump library-go to include switch to HTTP/1.1 #554
• Full changelog

cluster-version-operator

• OCPBUGS-20762: [4.14] Bump http-related deps #986
• Full changelog

console

• OCPBUGS-22980: remove expandable toggle for conditional update risk d… #13308
• OCPBUGS-22374: Telemetry- Current page was sometimes not tracked when reloading the current page #13277
• OCPBUGS-22177: Channel page shows “Required” message for the default name when navigate to create channel page #13262
• OCPBUGS-19371: Upgrade DomainMapping apiVersion to v1beta1 #13165
• OCPBUGS-19416: Correct logout process #13173
• OCPBUGS-22285: updating doc links for 4.14 GA #13273
• OCPBUGS-19845: mock apis for git repo in test serverless function tests #13199
• OCPBUGS-22460: Fix the forms when BC is not installed in the cluster #13288
• OCPBUGS-21877: add support for new features annotations while preserv… #13258
• OCPBUGS-22377: Fixed Edit Application form for Knative Services #13279
• Full changelog

console-operator

• OCPBUGS-22274: Disable HTTP/2 for webhook #803
• OCPBUGS-20480: Reset console operator’s conditions #797
• Full changelog

container-networking-plugins

• OCPBUGS-20374: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129
• Full changelog

csi-driver-manila-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #209
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-23111: Should reference configmaps instead of secrets #152
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
• Full changelog

docker-builder

• OCPBUGS-23006: Add -p flag to cp command to preserve timestamps #370
• Full changelog

docker-registry

• OCPBUGS-22826: Allow ICSP IDMS coexisting #385
• Full changelog

etcd

• OCPBUGS-22727: [4.14] Rebase openshift/etcd to 3.5.10 #226
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Fix pinned kernel and CRI-O version #690
• Bump fedora-coreos to latest stable #689
• Bump Fedora CoreOS to latest stable #686
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-17290, OCPBUGS-21417: Bump golang.org/x/net to v0.17.0 #203
• Full changelog

hyperkube, pod

• OCPBUGS-22861: UPSTREAM: <carry>: support for both icsp and idms objects #1780
• Full changelog

hypershift

• OCPBUGS-23142: adding permission to CNO RBAC Calico path for network-node-identity deploy #3182
• OCPBUGS-22295: Added brackets to the kubeconfig server address when IPv6 #3117
• OCPBUGS-22690: Use the same etcd snapshot for all replicas during etcd restore #3146
• OCPBUGS-22959: Update regex validation for nodepool.spec.taints.value #3165
• HOSTEDCP-1280: Adjustment cluster-cidr,service-cidr to support dualstack #3162
• OCPBUGS-22898: Stop exposing kas on 6443 private route service load balancer #3159
• OCPBUGS-22898: Stop defaulting aws private haproxy external port to 6443 #3160
• OCPBUGS-19897: Add konnectivity-proxy container to CNO #3058
• OCPBUGS-22379: Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller #3131
• Full changelog

insights-operator

• OCPBUGS-21859: remove username & password config options (#843) #843
• Full changelog

ironic

• OCPBUGS-14926: Handle Eject DVD 4.14 #415
• OCPBUGS-22253: Use bash process substitution instead of pipe #411
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-21473: Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #89
• Full changelog

machine-api-operator

• OCPBUGS-17297: [release-4.14] Update x/net to fix CVE #1173
• Full changelog

machine-config-operator

• OCPBUGS-22275: support icsp and idms objects #3995
• OCPBUGS-22391: Require a hostname override for AWS #4001
• OCPBUGS-20418: Introduce kubelet-dependencies.target and firstboot-osupdate.target #3967
• OCPBUGS-20051: Support to append the duplicate kernel arguments to the rendered MC #3957
• OCPBUGS-21065: Update library-go and k8s dependencies to latest version #3994
• Full changelog

multus-admission-controller

• OCPBUGS-21372: Update go.mod for CVE-2023-39325 [Release-4.14] #71
• Full changelog

multus-networkpolicy

• OCPBUGS-21454: Update go.mod for CVE-2023-39325 (#33) #33
• Full changelog

network-metrics-daemon

• Update the k8s dependencies to 1.27.7 (#82) #82
• Full changelog

oc-mirror

• OCPBUGS-21472: fix: CVE-2023-39325 (#711) #711
• Full changelog

openshift-apiserver

• OCPBUGS-20150: pkg/image: avoid unnecessary service lookups when registry is removed #393
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-20400: Add OLMConfig API to control package server sync interval [release-4.14] #582
• OCPBUGS-19789: Backport OCPBUGS-14698: Rename ClusterRoles created by OperatorGroups [release-4.14] #566
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-20881: fix: disable HTTP2 connections by default #253
• Full changelog

service-ca-operator

• OCPBUGS-21066: go.mod: bump golang.org/x/net to v0.17.0 #224
• Full changelog

tests

• OCPBUGS-23145: Bump watch requests for cluster-baremetal-operator #28385
• trt-1340: backport exact and disable monitor tests options to 4.14 #28391
• OCPBUGS-19923: Updating parameters for build timing PushImage test #28291
• OCPBUGS-22411: fix: increase upper bounds for samples operator #28356
• OCPBUGS-22720: Use Centos 8 Stream mysql image in tests #28365
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-17312, OCPBUGS-21558: [release-4.14] bump golang.org/x/net to v0.17.0 #20
• Full changelog

---

View changelog in Markdown or change previous release: 4.14.0-0.okd-2023-11-12-0427034.14.0-0.okd-2023-10-28-0735504.13.0-0.okd-2023-10-28-0654484.13.0-0.okd-2023-09-30-0849374.13.0-0.okd-2023-09-03-0824264.13.0-0.okd-2023-08-18-1358054.13.0-0.okd-2023-08-04-1647264.13.0-0.okd-2023-07-23-0512084.13.0-0.okd-2023-07-09-0620294.13.0-0.okd-2023-06-24-1457504.13.0-0.okd-2023-06-04-0803004.13.0-0.okd-2023-05-22-052007───4.17.0-0.okd-2024-04-22-104002───4.16.0-0.okd-scos-2024-05-09-1851144.16.0-0.okd-scos-2024-05-09-0651144.16.0-0.okd-scos-2024-05-08-1851144.16.0-0.okd-scos-2024-05-08-0651144.16.0-0.okd-scos-2024-05-07-1851144.16.0-0.okd-scos-2024-05-07-0651144.16.0-0.okd-scos-2024-05-02-0701424.16.0-0.okd-scos-2024-05-01-1901424.16.0-0.okd-scos-2024-05-01-0701424.16.0-0.okd-scos-2024-04-30-1901424.16.0-0.okd-scos-2024-04-30-070142───4.16.0-0.okd-2024-05-10-0526354.16.0-0.okd-2024-05-09-1726354.16.0-0.okd-2024-05-09-0526354.16.0-0.okd-2024-05-08-1726354.16.0-0.okd-2024-05-08-0526354.16.0-0.okd-2024-05-07-1726354.16.0-0.okd-2024-04-25-0806114.16.0-0.okd-2024-03-27-0155364.16.0-0.okd-2024-03-26-1355364.16.0-0.okd-2024-03-26-0155364.16.0-0.okd-2024-03-25-1355364.16.0-0.okd-2024-03-23-225022───4.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-04-23-1633134.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-05-07-1004564.15.0-0.okd-2024-05-02-1349254.15.0-0.okd-2024-05-02-0149254.15.0-0.okd-2024-05-01-0435044.15.0-0.okd-2024-04-30-1635044.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.14.0-0.okd-scos-2024-05-06-1244044.14.0-0.okd-scos-2024-05-02-1447384.14.0-0.okd-scos-2024-05-01-1425484.14.0-0.okd-scos-2024-04-30-1425484.14.0-0.okd-scos-2024-04-27-1336094.14.0-0.okd-scos-2024-01-27-0937454.14.0-0.okd-scos-2024-01-26-0937454.14.0-0.okd-scos-2024-01-25-0937454.14.0-0.okd-scos-2024-01-24-093745───4.14.0-0.okd-2024-05-06-1244124.14.0-0.okd-2024-05-02-1448534.14.0-0.okd-2024-05-01-1426234.14.0-0.okd-2024-04-30-1426234.14.0-0.okd-2024-04-27-1335174.14.0-0.okd-2024-03-18-1648434.14.0-0.okd-2024-03-14-1137094.14.0-0.okd-2024-03-13-1137094.14.0-0.okd-2024-03-12-1137094.14.0-0.okd-2024-03-11-113709───4.13.0-0.okd-scos-2024-05-07-1520214.13.0-0.okd-scos-2024-04-09-1520214.13.0-0.okd-scos-2024-03-12-1520214.13.0-0.okd-scos-2024-02-13-1520214.13.0-0.okd-scos-2024-01-16-1520214.13.0-0.okd-scos-2023-12-19-1520214.13.0-0.okd-scos-2023-12-19-0942084.13.0-0.okd-scos-2023-12-19-054611───4.13.0-0.okd-2024-05-07-1520224.13.0-0.okd-2024-04-09-1520224.13.0-0.okd-2024-03-12-1520224.13.0-0.okd-2024-02-13-1520224.13.0-0.okd-2024-01-16-152022───4.14.0-0.okd-scos-2024-01-30-0325254.14.0-0.okd-scos-2024-01-10-1518184.14.0-0.okd-scos-2023-12-21-0732124.14.0-0.okd-scos-2023-11-10-0508464.13.0-0.okd-scos-2023-10-19-1112564.13.0-0.okd-scos-2023-10-11-0632524.13.0-0.okd-scos-2023-07-07-0434174.13.0-0.okd-scos-2023-06-23-0414574.13.0-0.okd-scos-2023-06-22-0028524.13.0-0.okd-scos-2023-05-25-085822───4.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-11-0323574.15.0-0.okd-scos-2023-12-21-0614374.15.0-0.okd-scos-2023-11-29-1143554.15.0-0.okd-scos-2023-11-10-1924314.14.0-0.okd-scos-2023-10-19-1232264.14.0-0.okd-scos-2023-10-11-0442584.14.0-0.okd-scos-2023-08-17-0220294.14.0-0.okd-scos-2023-05-23-2245404.13.0-0.okd-scos-2023-05-04-1922524.13.0-0.okd-scos-2023-03-29-1248244.13.0-0.okd-scos-2023-02-13-084859

Source code for this page located on github