Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.14.0-0.okd-2024-01-26-175629

Team Approvals:

No tests for this release

Upgrades from:

• 4.14.0-0.okd-2024-01-25-175629 (changes) - F F F
• 4.14.0-0.okd-2024-01-06-084517 - F S S S
• 4.14.0-0.okd-2023-12-01-225814 (changes) - Success Success
• 4.14.0-0.okd-2023-11-14-101924 (changes) - Success Success
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Success Success

Upgrades to:

• 4.15.0-0.okd-2024-03-10-010116 (changes) - F F S
• 4.15.0-0.okd-2024-02-23-163410 (changes) - S S F F
• 4.15.0-0.okd-2024-02-10-035534 (changes) - Failed Success
• 4.15.0-0.okd-2024-01-27-070424 (changes) - Failed Success

---

Changes from 4.14.0-0.okd-2024-01-06-084517

Created: 2024-01-27 10:31:44 +0000 UTC

Image Digest: sha256:ae4f6a8bc6c5b2c8de3d9833d5addc2a69cbc73c8cbed5d9474dccdd5e5a700b

Release 4.14.0-0.okd-2024-01-26-175629 was created from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2024-01-26-175629

Components

• Kubernetes upgraded from 1.27.9 to 1.27.10
• Fedora CoreOS 38.20231027.3

agent-installer-api-server

• MGMT-15796: set CloudControllerManager to External for OCI (#5877) #5877
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-23826: bump go.opentelemetry.io #67
• OCPBUGS-27759: Adds ecr-credential-plugin .spec #71
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-21093: Upgrade golang/x/net for CVE-2023-39325 (4.14) #14
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-27241: baremetal: correct external_http_url for v6-only BMCs #7914
• OCPBUGS-22315: bootstrap: Enable gatewayd units only on RHCOS #7628
• OCPBUGS-23498: update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
• OCPBUGS-20860: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887
• OCPBUGS-22895: Do not generate azure-cloud-provider in manual mode for aro builds #7670
• Full changelog

baremetal-runtimecfg

• OCPBUGS-26928: Add .snyk file to ignore vendor and test files #294
• Full changelog

cloud-credential-operator

• OCPBUGS-27515: Write manifests when AWS IAM roles already exist. #659
• OCPBUGS-26512: Use live client for metrics #647
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-25749: Add Snyk file to exclude vendor directory on scan #308
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-26548: Adds CloudConfigTransformer for Azure #321
• Full changelog

cluster-config-operator

• NO-JIRA: add inert featuregate files to allow diff against later releases #398
• Full changelog

cluster-etcd-operator

• OCPBUGS-23571: Add annotation in the etcd-guard static pod for worklo… #1162
• OCPBUGS-26214: fix device busy errors #1176
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-27063: bump(library-go)=release-4.14 #787
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-27022: bump(library-go)=release-4.14 #527
• Full changelog

cluster-monitoring-operator

• OCPBUGS-27418: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2239
• OCPBUGS-25799: Detect ipv4/ipv6 socket in pod ip for nginx conf #2215
• OCPBUGS-25387: Add RHACM telemetry metric for 4.14 #2202
• Full changelog

cluster-network-operator

• OCPBUGS-27858: [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
• OCPBUGS-27013: HyperShift, network-node-identity: Check the deployment in the management cluster #2195
• OCPBUGS-24326: adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
• OCPBUGS-24037: remove all managed fields used by old manager #2112
• Full changelog

cluster-node-tuning-operator

• rps: fail silently when rps application failed (#901) #901
• OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
• OCPBUGS-26003: E2E: PPC Test cases (#905) #905
• Full changelog

cluster-version-operator

• OCPBUGS-27822: Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
• OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs #1021
• OCPBUGS-27048: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
• OCPBUGS-26207: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016
• Full changelog

console

• OCPBUGS-27350: Add Pipeline metrics tab using plugin #13520
• OCPBUGS-26171: Set unlimited line width in YAML editor #13482
• OCPBUGS-24640: Strip ‘Server’ header from proxy response #13423
• OCPBUGS-25997: change Alertmanager form to create using matchers inst… #13478
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-27026: [release-4.14] Add .snyk file #261
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-25069, OCPBUGS-26309, OCPBUGS-26323: add snyk config file for SAST scan #163
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-26312: add snyk config file for SAST scank #97
• Full changelog

etcd

• OCPBUGS-24939: Rebase etcd 3.5.11 openshift 4.14 #235
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump fedora-coreos to latest stable #726
• Bump fedora-coreos to latest stable #721
• Full changelog

hyperkube, pod

• OCPBUGS-27369: Update to kubernetes 1.27.10 #1860
• OCPBUGS-25813: Fix uncertain device in 4.14 #1830
• Full changelog

hypershift

• OCPBUGS-24315: Add prestop to konnectiviy server #3268
• OCPBUGS-24307: Set shutdown-delay-duration to 15s #3264
• OCPBUGS-21795: change trusted bundle volume mount for CPO #3102
• OCPBUGS-25217: Konnectivity agent update strategy #3308
• OCPBUGS-26574: Set new condition on SG deletion. #3398
• Update RHTAP references (release-4.14) #3402
• Update RHTAP references (release-4.14) #3383
• OCPBUGS-22360: Validate accessTokenInactivityTimeout >= 300s #3175
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-24665: Add Snyk file to exclude vendor directory on scan #65
• Full changelog

ironic

• OCPBUGS-27193: Fix Inspector iPXE config for IPv6 addresses #448
• Full changelog

machine-api-operator

• OCPBUGS-24998: Add Snyk file to exclude vendor directory on scan #1191
• Full changelog

machine-config-operator

• [OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
• OCPBUGS-27178: use *resource.Quantity to not automatically set 0 #4121
• OCPBUGS-23089: Don’t retry node-ip show in resolv-prepender #4022
• OCPBUGS-27362: Fix typo in AWS node env unit #4131
• OCPBUGS-26500: crio: drop automatic image cleanup on upgrades #4105
• OCPBUGS-26559: Azure Run ovs-configuration.service before dnsmasq.service #4109
• OCPBUGS-26551: kubelet: fix kubelet labels #4107
• Full changelog

machine-image-customization-controller

• OCPBUGS-24576: configurable ironic agent vlan creation #111
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-27858: Enable reconciler configuration 4.14 #240
• OCPBUGS-26553: Cherry pick fix assignment 4.14 #230
• Full changelog

oauth-apiserver

• OCPBUGS-27116: UPSTREAM: <carry>: retry etcd Unavailable errors #97
• Full changelog

oc-mirror

• OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#769) #769
• Full changelog

openshift-apiserver

• OCPBUGS-27104: UPSTREAM: <carry>: retry etcd Unavailable errors #412
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-26460, OCPBUGS-26461: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-27485: [CARRY] SSC RBAC #665
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-27243: CARRY: Updates owners and adds Surya #2019
• OCPBUGS-25081: Update ACL syncer: make default deny acls filter more strict, #1981
• OCPBUGS-26568: Synchronize node primary address update #2012
• OCPBUGS-24326: APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field #1967
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-24224: Explicitly degrade the cluster when conditions are not met #194
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github