Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.14.0-0.okd-2023-12-01-225814

No tests for this release

Upgrades from:

• 4.14.0-0.okd-2023-12-01-134446 (changes) - F F S
• 4.14.0-0.okd-2023-11-14-101924 - Success Success
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Failed Success
• 4.14.0-0.okd-2023-10-28-073550 (changes) - Success Success

Upgrades to:

• 4.15.0-0.okd-2024-02-10-035534 (changes) - Failed Failed
• 4.14.0-0.okd-2024-01-26-175629 (changes) - Success Success
• 4.14.0-0.okd-2024-01-06-084517 (changes) - Success Success
• 4.14.0-0.okd-2023-12-02-080712 (changes) - Failed

---

Loading changelog, this may take a while ...

Changes from 4.14.0-0.okd-2023-11-14-101924

Created: 2023-12-02 08:09:19 +0000 UTC

Image Digest: sha256:4510c50834c07e71521a68c021320b5e44978245c8031a858f74328e54e89e1c

Release 4.14.0-0.okd-2023-12-01-225814 was created from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2023-12-01-225814

Components

• Kubernetes upgraded from 1.27.6 to 1.27.8
• Fedora CoreOS 38.20231027.3

Rebuilt images without code change

• agent-installer-api-server git 4e1a1e59 sha256:2877e3d7bce9296c4c1ddbf0566eea11fd66afde76afe650137c5c1b0c7146c8
• agent-installer-node-agent git e438a5e9 sha256:85c91f106917d5b81514f5bffc604ff42d38a75c70dc3f2e621b3177d73828ef
• agent-installer-utils git ad853769 sha256:489284071d0c2589438a8ac95f59d0c771036e9b568d53bccc67429f6b3e74f2
• cluster-kube-apiserver-operator git d52dbad1 sha256:1ac6f833450ec97e93a9fb67b2068c91606a0221f24eea7812ed449e8fe860ce

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#753) #753
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #71
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #296
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-21761: Backport the recent rebase to 4.14 #168
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-21439: Bump golang.org/x/net to v0.18.0 #93
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-22688: Bump Fedora CoreOS to latest stable #7647
• OCPBUGS-22774: Add KMS encryption keys if provided #7659
• Full changelog

baremetal-runtimecfg

• OCPBUGS-23474: Use shorter IP label for keepalived VIP #288
• Full changelog

cloud-credential-operator

• OCPBUGS-23986: Use per-project custom roles instead of per-cluster custom roles #631
• OCPBUGS-23426: Explicitly set the vsphere secret credential data on sync. #629
• OCPBUGS-21388: Upgrade golang/x/net for CVE-2023-39325 #622
• Full changelog

cluster-baremetal-operator

• OCPBUGS-23392, OCPBUGS-23393: fix IRONIC_EXTERNAL_URL_V6 #384
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-21189: Bump golang.org/x/net to v0.18.0 #295
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #174
• Full changelog

cluster-etcd-operator

• Revert “[release-4.14] OCPBUGS-21802: remove revision stability check from bootstrap complet…” #1168
• Full changelog

cluster-machine-approver

• OCPBUGS-23150: Filter non node CSRs in metrics #209
• Full changelog

cluster-monitoring-operator

• OCPBUGS-21473: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2147
• Full changelog

cluster-network-operator

• OCPBUGS-22363: Added HCP label to CNO pods #2081
• OCPBUGS-22286: hypershift: adjust backoff on infrastructure name retry #2078
• OCPBUGS-23011: Block upgrades to 4.15 with Kuryr #2096
• OCPBUGS-23315: set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2107
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-21845: e2e:rps: improve logging (#831) #831
• render: change dir path (#826) #826
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-23490: Remove blockage of ConfigObserver by build informer has synced flag #318
• Full changelog

cluster-storage-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #416
• OCPBUGS-23210: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #419
• Full changelog

cluster-update-keys

• OCPBUGS-10126: Updating ose-agent-installer-orchestrator images to be consistent with ART #48
• Full changelog

console

• OCPBUGS-23423: Cannot Edit Shipwright Build #13343
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Dockerfile: use previous machine-os-content as a base #703
• Unpin kernel #699
• Bump FCOS version #695
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-21321: Bump golang.org/x/net to v0.18.0 #42
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #96
• Full changelog

hyperkube, pod

• OCPBUGS-23566: Update to kubernetes 1.27.8 #1808
• OCPBUGS-23286: UPSTREAM: 121881: Use golang library instead of mklink #1801
• Full changelog

hypershift

• HOSTEDCP-1318: external OIDC enablement #3261
• OCPBUGS-23747: Added brackets to IPv6 KAS address on kubeconfig #3228
• OCPBUGS-24063: fix(cpo): Set restart annotation on network-node-identity #3248
• release-4.14, HOSTEDCP-1315: Improve NodePool CPU arch & platform check #3236
• OCPBUGS-22676: Make the OLMCatalogPlacement field immutable #3143
• OCPBUGS-23558: Let router use svc ips 4.14 #3221
• OCPBUGS-19678: Remove cluster name validation from HCC #3040
• ”[release-4.14] CNV-35326: unsupported escape hatch mechanism custom HS/KV vms” #3202
• OCPBUGS-23027: Configure HSTS for kube-apiserver #3169
• NO-JIRA: chore(deps): update rhtap references (release-4.14) #3085
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-21436: Bump golang.org/x/net to v0.18.0 #63
• Full changelog

insights-operator

• OCPBUGS-22958: adds cluster storageclasses gather (#858) (#865) #858
• Full changelog

ironic

• OCPBUGS-23505: Uplift eventlet version #426
• OCPBUGS-23354: Upgrade markupsafe and werkzeug dependencies #421
• Full changelog

ironic-agent

• OCPBUGS-23751: Update packages with latest fixes #96
• Full changelog

kube-proxy, sdn

• OCPBUGS-20790: update x/net to v0.17.0 #587
• Full changelog

machine-api-operator

• OCPBUGS-24047: Use docs URL instead of KCS article #1180
• Full changelog

machine-config-operator

• OCPBUGS-23474: Use shorter IP label for keepalived VIP #4041
• OCPBUGS-23208: workaround nmstate bug by configuring ipv{4,6} addresses #4031
• Full changelog

multus-networkpolicy

• Update vendor package (#40) #40
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-21518: update golang.org/x/net to v0.17.0 #207
• Full changelog

oauth-proxy

• OCPBUGS-20980: go.mod: bump golang.org/x/net to v0.17.0 #267
• Full changelog

oc-mirror

• skipping prune failure if manifest not found (#735) #735
• Full changelog

olm-rukpak

• OCPBUGS-23358: [release-4.14] Address http2 vulnerability #53
• Full changelog

openshift-apiserver

• : OCPBUGS-21464: Enable HTTP/2 CVE mitigation #397
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-20829: [releaser-4.14] Fix apiserver vulnerability #608
• OCPBUGS-23212: Do not derive installplan.spec.clusterServiceNames from bundle IDs #607
• OCPBUGS-18904: [release-4.14] Improve Leader Election Hand Off #605
• OCPBUGS-23508: [release-4.14] Use generated namespaces in e2e tests #614
• Full changelog

tests

• Revert “[release-4.14] OCPBUGS-22720: Use Centos 8 Stream mysql image in tests” #28368
• OCPBUGS-23042: tolerate AWS edge nodes on monitor tests #28387
• Full changelog

thanos

• OCPBUGS-22636: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 #130
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-21520: Bump golang.org/x/net to v0.18.0 #54
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-22430: disable http/2 server support in webhook #182
• Full changelog

vsphere-problem-detector

• OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #138
• Full changelog

---

View changelog in Markdown or change previous release: 4.14.0-0.okd-2023-11-14-1019244.14.0-0.okd-2023-11-12-0427034.14.0-0.okd-2023-10-28-0735504.13.0-0.okd-2023-10-28-0654484.13.0-0.okd-2023-09-30-0849374.13.0-0.okd-2023-09-03-0824264.13.0-0.okd-2023-08-18-1358054.13.0-0.okd-2023-08-04-1647264.13.0-0.okd-2023-07-23-0512084.13.0-0.okd-2023-07-09-0620294.13.0-0.okd-2023-06-24-1457504.13.0-0.okd-2023-06-04-0803004.13.0-0.okd-2023-05-22-052007───4.17.0-0.okd-2024-04-22-104002───4.16.0-0.okd-scos-2024-04-28-0701424.16.0-0.okd-scos-2024-04-27-1840054.16.0-0.okd-scos-2024-04-27-0640054.16.0-0.okd-scos-2024-04-26-1840054.16.0-0.okd-scos-2024-04-26-0640054.16.0-0.okd-scos-2024-04-25-1840054.16.0-0.okd-scos-2024-04-25-0519224.16.0-0.okd-scos-2024-04-24-171922───4.16.0-0.okd-2024-04-28-0824264.16.0-0.okd-2024-04-27-2006114.16.0-0.okd-2024-04-27-0806114.16.0-0.okd-2024-04-26-2006114.16.0-0.okd-2024-04-26-0806114.16.0-0.okd-2024-04-25-0806114.16.0-0.okd-2024-03-27-0155364.16.0-0.okd-2024-03-26-1355364.16.0-0.okd-2024-03-26-0155364.16.0-0.okd-2024-03-25-1355364.16.0-0.okd-2024-03-23-225022───4.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-04-23-1633134.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-04-27-0853234.15.0-0.okd-2024-04-26-2053234.15.0-0.okd-2024-04-26-0853234.15.0-0.okd-2024-04-25-2053234.15.0-0.okd-2024-04-23-2015564.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.14.0-0.okd-scos-2024-04-27-1336094.14.0-0.okd-scos-2024-04-26-1336094.14.0-0.okd-scos-2024-04-24-0815334.14.0-0.okd-scos-2024-04-23-0815334.14.0-0.okd-scos-2024-04-20-1242414.14.0-0.okd-scos-2024-01-27-0937454.14.0-0.okd-scos-2024-01-26-0937454.14.0-0.okd-scos-2024-01-25-0937454.14.0-0.okd-scos-2024-01-24-093745───4.14.0-0.okd-2024-04-27-1335174.14.0-0.okd-2024-04-26-1335174.14.0-0.okd-2024-04-24-0817244.14.0-0.okd-2024-04-23-0817244.14.0-0.okd-2024-04-20-1254414.14.0-0.okd-2024-03-18-1648434.14.0-0.okd-2024-03-14-1137094.14.0-0.okd-2024-03-13-1137094.14.0-0.okd-2024-03-12-1137094.14.0-0.okd-2024-03-11-113709───4.13.0-0.okd-scos-2024-04-09-1520214.13.0-0.okd-scos-2024-03-12-1520214.13.0-0.okd-scos-2024-02-13-1520214.13.0-0.okd-scos-2024-01-16-1520214.13.0-0.okd-scos-2023-12-19-1520214.13.0-0.okd-scos-2023-12-19-0942084.13.0-0.okd-scos-2023-12-19-054611───4.13.0-0.okd-2024-04-09-1520224.13.0-0.okd-2024-03-12-1520224.13.0-0.okd-2024-02-13-1520224.13.0-0.okd-2024-01-16-1520224.13.0-0.okd-2023-12-19-152022───4.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-11-0323574.15.0-0.okd-scos-2023-12-21-0614374.15.0-0.okd-scos-2023-11-29-1143554.15.0-0.okd-scos-2023-11-10-1924314.14.0-0.okd-scos-2023-10-19-1232264.14.0-0.okd-scos-2023-10-11-0442584.14.0-0.okd-scos-2023-08-17-0220294.14.0-0.okd-scos-2023-05-23-2245404.13.0-0.okd-scos-2023-05-04-1922524.13.0-0.okd-scos-2023-03-29-1248244.13.0-0.okd-scos-2023-02-13-084859───4.14.0-0.okd-scos-2024-01-30-0325254.14.0-0.okd-scos-2024-01-10-1518184.14.0-0.okd-scos-2023-12-21-0732124.14.0-0.okd-scos-2023-11-10-0508464.13.0-0.okd-scos-2023-10-19-1112564.13.0-0.okd-scos-2023-10-11-0632524.13.0-0.okd-scos-2023-07-07-0434174.13.0-0.okd-scos-2023-06-23-0414574.13.0-0.okd-scos-2023-06-22-0028524.13.0-0.okd-scos-2023-05-25-085822

Source code for this page located on github