4.14.3

New features since version 4.13.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.3-aarch64

Team Approvals:

Tests:

Informing jobs
- aws-sdn-serial-arm64 Succeeded periodic-ci-openshift-multiarch-master-nightly-4.14-ocp-e2e-sdn-serial-aws-arm64
- ovn-upgrade Succeeded periodic-ci-openshift-multiarch-master-nightly-4.14-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

Untested upgrades: 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.14.0, 4.14.1

4.14.2 - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.14.2

Created: 2023-11-16 13:54:50 +0000 UTC

Image Digest: sha256:8a1d195efbc3caf07a47b4d285166cd7c73337c90f191986bec8beb6ee27b4f4

Release 4.14.3 was created from registry.ci.openshift.org/ocp-arm64/release-arm64:4.14.0-0.nightly-arm64-2023-11-15-111507

Components

Kubernetes 1.27.6
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202311061957-0 to 414.92.202311150705-0 (diff)

Rebuilt images without code change

driver-toolkit git cafed17b sha256:5d8f215f79ae57a23d2627062e6ee08c48bf77ae17e1ac969d5cc0b6ce5295a4
ironic-machine-os-downloader git 7b56c306 sha256:2a764e7c35d27cdd87479326ffbc2eaa85f8d81256fcc1415684d38e22a723c1
machine-os-content sha256:13ea0be8c7a75acb98f5b4a0e776581626aa42219162f10243a399d0e14dae0c
machine-os-images git d3a4a6c3 sha256:c5d1c78280f88bd8989dace00be9b0b4cdf0c03f6159b7e367241afc6e6f2be9
rhel-coreos sha256:88b781046c1b66630f2f603b68d53449e6b9a30f287008b495bf02eb430780be
rhel-coreos-extensions sha256:a61058ebef9afda3cfd3cd7290690d60055ef7d393cc061128cf29cb3d08c116

alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kuryr-cni, kuryr-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-22861: UPSTREAM: <carry>: support for both icsp and idms objects #1780
Full changelog

aws-pod-identity-webhook

NO-ISSUE: Sync OWNERS with team members #176
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-21868: vSphere,segfault on version check #7605
OCPBUGS-22945: Update gcloud version to 447.0.0 #7681
Full changelog

cluster-etcd-operator

OCPBUGS-22477: Remove z-upgrades from UpgradeBackupController #1140
OCPBUGS-21802: remove revision stability check from bootstrap complet… #1138
Full changelog

cluster-monitoring-operator

OCPBUGS-21473: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2147
OCPBUGS-22917: jsonnet: pin commits #2143
Full changelog

cluster-node-tuning-operator

render: change dir path (#826) #826
Full changelog

console

OCPBUGS-22980: remove expandable toggle for conditional update risk d… #13308
Full changelog

container-networking-plugins

OCPBUGS-20374: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-23111: Should reference configmaps instead of secrets #152
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-23078: CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
Full changelog

docker-registry

OCPBUGS-22826: Allow ICSP IDMS coexisting #385
Full changelog

gcp-cluster-api-controllers

OCPBUGS-17290, OCPBUGS-21417: Bump golang.org/x/net to v0.17.0 #203
Full changelog

hypershift

OCPBUGS-23027: Configure HSTS for kube-apiserver #3169
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3085
OCPBUGS-23142: adding permission to CNO RBAC Calico path for network-node-identity deploy #3182
OCPBUGS-22295: Added brackets to the kubeconfig server address when IPv6 #3117
Full changelog

ironic

OCPBUGS-14926: Handle Eject DVD 4.14 #415
OCPBUGS-22253: Use bash process substitution instead of pipe #411
Full changelog

k8s-prometheus-adapter

OCPBUGS-21473: Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #89
Full changelog

machine-api-operator

OCPBUGS-17297: [release-4.14] Update x/net to fix CVE #1173
Full changelog

multus-networkpolicy

OCPBUGS-21454: Update go.mod for CVE-2023-39325 (#33) #33
Full changelog

network-metrics-daemon

Update the k8s dependencies to 1.27.7 (#82) #82
Full changelog

openshift-apiserver

OCPBUGS-20150: pkg/image: avoid unnecessary service lookups when registry is removed #393
Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-22974: [release-4.14] manage-security-groups: Only add SGs to LB members (#2455) #244
Full changelog

service-ca-operator

OCPBUGS-21066: go.mod: bump golang.org/x/net to v0.17.0 #224
Full changelog

tests

OCPBUGS-23042: tolerate AWS edge nodes on monitor tests #28387
OCPBUGS-23145: Bump watch requests for cluster-baremetal-operator #28385
trt-1340: backport exact and disable monitor tests options to 4.14 #28391
OCPBUGS-19923: Updating parameters for build timing PushImage test #28291
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github