# 4.11.28

Created: 2023-02-15 12:37:35 +0000 UTC

Image Digest: `sha256:a5c6196590d47b5ca8578e35c23da47cb103947271ab5deb21c8d258de62a777`

Promoted from registry.ci.openshift.org/ocp-arm64/release-arm64:4.11.0-0.nightly-arm64-2023-02-14-163920


## Changes from 4.11.27

### Components

* Kubernetes 1.24.6
* Red Hat Enterprise Linux CoreOS upgraded from 411.86.202302021552-0 to 411.86.202302091729-0


### Rebuilt images without code change

* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [28589b0a](https://github.com/openshift/driver-toolkit/commit/28589b0a149df1fa10b2759fff13b1885d0dfa14) `sha256:73d8bb4814c06c1c47fba6b4fc7b808477c9015739f7aaf198b6aac66e1808a4`
* [haproxy-router](https://github.com/openshift/router) git [601ba575](https://github.com/openshift/router/commit/601ba575b7fadc1e05e7b4e2f35a660859db9788) `sha256:604e988fe6e4cff2a9d68d7219263ad09866404d191b57742e4a7761fad2dec7`
* machine-os-content `sha256:41bb84fcc27cef4050ed75d54ced5b4d9069813290aedbd307141da7d2ffd482`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b1580a29](https://github.com/openshift/machine-os-images/commit/b1580a29e6bc76598c2d408c0e27460bc6b638be) `sha256:b185103f6c26117bb30e8573a6462ee9a7822030dc5e1ff00fe3a1b5d49b46f2`
* [network-tools](https://github.com/openshift/network-tools) git [4e87286c](https://github.com/openshift/network-tools/commit/4e87286cff4d645777cf2632a0671eed0d82270c) `sha256:920c4d641e4e0964137163a3c5b5f75312078526b52b9f81f564cdac86d285c6`
* [sdn](https://github.com/openshift/sdn) git [6d45763d](https://github.com/openshift/sdn/commit/6d45763d37a3146637d6a655a183ad9941b66b36) `sha256:bc64c3c1c1f5f0c8f470cd6510da40cf497bb0b2a6c8d8248ab16dd425bf0912`


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-machine-controllers, kuryr-cni, kuryr-controller, nutanix-machine-controllers, pod, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/deccab3b24a30df438d48826eea1fb64db14e7d8)

* [OCPBUGS-6683](https://issues.redhat.com/browse/OCPBUGS-6683): add message about possibly working with restricted SCC [#1459](https://github.com/openshift/kubernetes/pull/1459)
* [Full changelog](https://github.com/openshift/kubernetes/compare/263df153c0874fd11ba1f43ed22d13ca40cb91e8...deccab3b24a30df438d48826eea1fb64db14e7d8)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/59d11963b3cde06a6c4fc75844e83df5cec1faf0)

* [OCPBUGS-5665](https://issues.redhat.com/browse/OCPBUGS-5665): CVE-2021-4238: goutils: update for randomness fix [#6765](https://github.com/openshift/installer/pull/6765)
* [Full changelog](https://github.com/openshift/installer/compare/b1b244444835f9a3fd2c5e6717db9ba6d18607be...59d11963b3cde06a6c4fc75844e83df5cec1faf0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d27a36e0ca534467d5e0c18351cfbfb42da58617)

* Run node selector tests only if we 2 non Performanceworker nodes (#563) [#563](https://github.com/openshift/cluster-node-tuning-operator/pull/563)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/83d123eebd8cce393eeb9fd7b7b52a37ba88b8d3...d27a36e0ca534467d5e0c18351cfbfb42da58617)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/645e5ff555aa5219bb3235c5037264991d509c8e)

* [OCPBUGS-7330](https://issues.redhat.com/browse/OCPBUGS-7330): When setting allowedRegistries urls the openshift-samples operator is degraded [#490](https://github.com/openshift/cluster-samples-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/99469697ca5df630e42a65f7258b76e206fdbfc9...645e5ff555aa5219bb3235c5037264991d509c8e)


### [console](https://github.com/openshift/console/tree/adb1684e6260b1d20103f8d4545e91f330ddb451)

* [OCPBUGS-6492](https://issues.redhat.com/browse/OCPBUGS-6492): Add RBAC check on Create a Project link in all-namespaces pages [#12514](https://github.com/openshift/console/pull/12514)
* [Full changelog](https://github.com/openshift/console/compare/f354c932979a8ce0e30adefe4982ffdbe85a6e9f...adb1684e6260b1d20103f8d4545e91f330ddb451)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/08a91f1f1022015b2c7335cbf0f7c6267fa110e4)

* [OCPBUGS-3942](https://issues.redhat.com/browse/OCPBUGS-3942): Excluded ranges bug (#282) [#104](https://github.com/openshift/whereabouts-cni/pull/104)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/bdc15c08a928ca7ff9fa5640a0fdc2adf8c28034...08a91f1f1022015b2c7335cbf0f7c6267fa110e4)


### [openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/587614588aa6de7fd4a9a7d0e5e482ef2366d6af)

* [OCPBUGS-6684](https://issues.redhat.com/browse/OCPBUGS-6684): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 [#176](https://github.com/openshift/cloud-provider-openstack/pull/176)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/8a437640c2fab4bceaf09758bcc1152cb58b8573...587614588aa6de7fd4a9a7d0e5e482ef2366d6af)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/f8ea13a29099134f6b193a8527feb3c3d5ee65e9)

* [OCPBUGS-7322](https://issues.redhat.com/browse/OCPBUGS-7322): Address CVE-2022-41717 [#57](https://github.com/openshift/machine-api-provider-openstack/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/eb7e497ff47739d9289063cb864436277c6f7bc0...f8ea13a29099134f6b193a8527feb3c3d5ee65e9)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/8e52d6337948510946e788e30048cb94a6f0e1cc)

* [OCPBUGS-7319](https://issues.redhat.com/browse/OCPBUGS-7319): Bump OVN to 22.09, enable session affinity timeout [#1522](https://github.com/openshift/ovn-kubernetes/pull/1522)
* [OCPBUGS-5245](https://issues.redhat.com/browse/OCPBUGS-5245): Move check_pkt_larger to gateway router ports [#1505](https://github.com/openshift/ovn-kubernetes/pull/1505)
* [OCPBUGS-7010](https://issues.redhat.com/browse/OCPBUGS-7010): [release-4.11] Fix Egress FW ACL rules in dualstack mode [#1507](https://github.com/openshift/ovn-kubernetes/pull/1507)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1075c31c41cc4df59e83bae98fa23013e2512e0a...8e52d6337948510946e788e30048cb94a6f0e1cc)


### [tests](https://github.com/openshift/origin/tree/ac2791c48010de6eade67e38bf5f1e6d3aaf874d)

* [OCPBUGS-6851](https://issues.redhat.com/browse/OCPBUGS-6851): [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade [#27685](https://github.com/openshift/origin/pull/27685)
* [Full changelog](https://github.com/openshift/origin/compare/48b167669bb913d817f8a3270b0b30619ba42800...ac2791c48010de6eade67e38bf5f1e6d3aaf874d)