# 4.12.0-rc.5 Created: 2022-12-19 03:40:57 +0000 UTC Image Digest: `sha256:5884546198d819d848a8650323ec8997f291bf7e50df5f48c8b52afe28394dba` Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.12.0-0.nightly-s390x-2022-12-17-123609 ## Changes from 4.12.0-rc.4 ### Components * Kubernetes 1.25.4 * Red Hat Enterprise Linux CoreOS upgraded from 412.86.202212081411-0 to 412.86.202212170457-0 ### Rebuilt images without code change * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [b4e363fc](https://github.com/openshift/cluster-node-tuning-operator/commit/b4e363fcebf55d9d57e1147ddd21c7a5204895b1) `sha256:f61f6b562d39f68a1b0fc2a2b12e9f7da82559666289be202e937ee55100cd36` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [e31abf2c](https://github.com/openshift/driver-toolkit/commit/e31abf2cf547f172da7d51b998ff5b58c05a7a6a) `sha256:c0dbaa7257a1bba23fa1c94b23ebd272d4371c55dde061168d400652506d4cc7` * machine-os-content `sha256:0f2e905da7ef8d89f9aa93dfea505e1e8ad6b05dd8e4c240e595a9c02774f57d` * [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:39904bc251edead31ac2895832e3273f7e948b54344734ed24f93a830a1e6a51` * rhel-coreos-8 `sha256:293ff258b02914ac77b7e520b569321d6a1584fa35c33d86be1233179e9323ff` * rhel-coreos-8-extensions `sha256:8b3266239439952747b3c9731dd10f89e0091c1a6292f87ab4307d7422289661` * [tools](https://github.com/openshift/oc) git [854f807d](https://github.com/openshift/oc/commit/854f807d8a84dde710c062a5281bca5bc07cb562) `sha256:d7efe20a055b07fadf2e83763e1a1f61e641cb7ecbebe697e63af784fa7efe39` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/40936e7a9159189889c637fa1631f8cbdd5c3c4f) * [MGMT-12863](https://issues.redhat.com/browse/MGMT-12863): Assisted Spoke install-config does not generate icsp with multiple mirror to entries (#4748) [#4748](https://github.com/openshift/assisted-service/pull/4748) * [Full changelog](https://github.com/openshift/assisted-service/compare/fff0369b439732e17be833ecbf84897386518e57...40936e7a9159189889c637fa1631f8cbdd5c3c4f) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/0f14c3d16cb089b55ca3658038e83bc0bcd01f47) * Remove jira tickets prefix requirements (#595) [#595](https://github.com/openshift/assisted-installer/pull/595) * [Full changelog](https://github.com/openshift/assisted-installer/compare/0a7dc62aa8e6931d941eaec4001bb4fa59f710fe...0f14c3d16cb089b55ca3658038e83bc0bcd01f47) ### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kuryr-cni, kuryr-controller, machine-image-customization-controller, machine-os-images, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/77bec7ab3573494f228fbaa4967c76e3d2df0fb3) * [OCPBUGS-4808](https://issues.redhat.com/browse/OCPBUGS-4808): Apply shared defaulters to CRD-based routes. [#1441](https://github.com/openshift/kubernetes/pull/1441) * [Full changelog](https://github.com/openshift/kubernetes/compare/86bd4ff6092e5dd9cb77d498833d9bae3cf1fe4a...77bec7ab3573494f228fbaa4967c76e3d2df0fb3) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/66cadb2741207f78c18a9fd36dc94966ae0eef26) * [OCPBUGS-3890](https://issues.redhat.com/browse/OCPBUGS-3890): IBMCloud: Confirm Zones and BYON Subnets [#6603](https://github.com/openshift/installer/pull/6603) * [OCPBUGS-3639](https://issues.redhat.com/browse/OCPBUGS-3639): Azure: Set appropriate architecture for gen v1 image [#6588](https://github.com/openshift/installer/pull/6588) * [OCPBUGS-4698](https://issues.redhat.com/browse/OCPBUGS-4698): Check nmstateconfig content in agent-config.yaml [#6687](https://github.com/openshift/installer/pull/6687) * [OCPBUGS-4547](https://issues.redhat.com/browse/OCPBUGS-4547): out-of-bounds read in golang.org/x/text/language leads to DoS [#6650](https://github.com/openshift/installer/pull/6650) * [Full changelog](https://github.com/openshift/installer/compare/429168aad4b60036a8cd6f5b35fb6e7b2c10c395...66cadb2741207f78c18a9fd36dc94966ae0eef26) ### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/26d96d126bfbf268b96eed1bb494165dd314554c) * [OCPBUGS-4783](https://issues.redhat.com/browse/OCPBUGS-4783): OpenStack: Support multi AZ environments [#88](https://github.com/openshift/cloud-network-config-controller/pull/88) * [OCPBUGS-4784](https://issues.redhat.com/browse/OCPBUGS-4784): OpenStack: Only return egressIPConfiguration for first InternalIP [#89](https://github.com/openshift/cloud-network-config-controller/pull/89) * [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/61b2d8a7550c8aa27b00366a3868922db4a6edfd...26d96d126bfbf268b96eed1bb494165dd314554c) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f24e5abcc646116cadf72a08b3387bb1b9540a4b) * [OCPBUGS-4743](https://issues.redhat.com/browse/OCPBUGS-4743): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#971](https://github.com/openshift/cluster-etcd-operator/pull/971) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/55a3e37e11588666ad9a28566439a56e928406b4...f24e5abcc646116cadf72a08b3387bb1b9540a4b) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/334c0febdb33c8f89d289bfb9a8580694ffb6803) * [OCPBUGS-3037](https://issues.redhat.com/browse/OCPBUGS-3037): Allow ephemeral volumes in all SCCs [#1399](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1399) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/30f2afec77fa089b49cc325be58870562bf2675e...334c0febdb33c8f89d289bfb9a8580694ffb6803) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/509b7a83c0f95d3c3369e08ffa822c311b42972a) * [OCPBUGS-4766](https://issues.redhat.com/browse/OCPBUGS-4766): limit cluster-policy-controller RBAC permissions [#675](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/675) * [OCPBUGS-4681](https://issues.redhat.com/browse/OCPBUGS-4681): remove unnecessary RBAC [#674](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/674) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/02fbdd194f75cd8e4fb1a6afc40e515a73dc450e...509b7a83c0f95d3c3369e08ffa822c311b42972a) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/867b93fbad15ff1e3b282c66b154fa6ad1959bdb) * [OCPBUGS-4183](https://issues.redhat.com/browse/OCPBUGS-4183): Fix default disable-udp-aggregation value on s390x [#1661](https://github.com/openshift/cluster-network-operator/pull/1661) * [OCPBUGS-4637](https://issues.redhat.com/browse/OCPBUGS-4637): Support RHOBS monitoring for HyperShift [#1652](https://github.com/openshift/cluster-network-operator/pull/1652) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/766b7b632bc012f17f88e277d1c3fd7db96dc2aa...867b93fbad15ff1e3b282c66b154fa6ad1959bdb) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/d1915d130481541b8bacb5b98eddbc1541809d0a) * [OCPBUGS-4803](https://issues.redhat.com/browse/OCPBUGS-4803): [release-4.12] Correct go file formatting for go1.19 with gofmt [#275](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/275) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e51d7b606b22fa83e0db02ee70544f438fd0d064...d1915d130481541b8bacb5b98eddbc1541809d0a) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/212a4553b3bf87d56f2f360b562187a685099c3e) * [OCPBUGS-4599](https://issues.redhat.com/browse/OCPBUGS-4599): Bump k8s master [#479](https://github.com/openshift/cluster-samples-operator/pull/479) * [OCPBUGS-4407](https://issues.redhat.com/browse/OCPBUGS-4407): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#478](https://github.com/openshift/cluster-samples-operator/pull/478) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/83968a4b7cea7aa51e4431c00714b5cf610abfed...212a4553b3bf87d56f2f360b562187a685099c3e) ### [console](https://github.com/openshift/console/tree/002363445469ce227eda7173f1c001d14792bec5) * "OCPBUGS-4512: Fix navsection bug" [#12340](https://github.com/openshift/console/pull/12340) * [Full changelog](https://github.com/openshift/console/compare/cf5fb0184088048108deb4761e0680df2d2beb41...002363445469ce227eda7173f1c001d14792bec5) ### [docker-builder](https://github.com/openshift/builder/tree/e76828eb29e8afefc639706a7ead4e4584d4eb0a) * Updating openshift-enterprise-builder images to be consistent with ART [#315](https://github.com/openshift/builder/pull/315) * [OCPBUGS-4779](https://issues.redhat.com/browse/OCPBUGS-4779): [release-4.12] Update to go1.19 [#321](https://github.com/openshift/builder/pull/321) * [Full changelog](https://github.com/openshift/builder/compare/973602e0e576d7eccef4fc5810ba511405cd3064...e76828eb29e8afefc639706a7ead4e4584d4eb0a) ### [etcd](https://github.com/openshift/etcd/tree/89a451c499e06b3e9f8072c7cd70b86d78f597bf) * [OCPBUGS-3100](https://issues.redhat.com/browse/OCPBUGS-3100): Rebase openshift/etcd 4.12 onto v3.5.6 [#169](https://github.com/openshift/etcd/pull/169) * [Full changelog](https://github.com/openshift/etcd/compare/aa4a0cc432bf2385f924ff8e971bc609734565d8...89a451c499e06b3e9f8072c7cd70b86d78f597bf) ### [hypershift](https://github.com/openshift/hypershift/tree/ecf2a9724f1ed42d8ce1ba81d37d2093115e0112) * Fast forward 'release-4.12' branch to 'main' [#1932](https://github.com/openshift/hypershift/pull/1932) * [Full changelog](https://github.com/openshift/hypershift/compare/fb28fd19fbb25cc91e4b274e7acbb127d4c297ce...ecf2a9724f1ed42d8ce1ba81d37d2093115e0112) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) * Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#12](https://github.com/openshift/kubevirt-csi-driver/pull/12) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/cb83c7ce7bd07e1a1b7c0b5dc255dfb02bcc2760...f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/2f02dcc3b79c797eefb42766e631034a59926d3a) * [OCPBUGS-4805](https://issues.redhat.com/browse/OCPBUGS-4805): Do not allow empty system reserved values [#3453](https://github.com/openshift/machine-config-operator/pull/3453) * [OCPBUGS-4667](https://issues.redhat.com/browse/OCPBUGS-4667): vsphere: check that /etc/hostname is not empty [#3452](https://github.com/openshift/machine-config-operator/pull/3452) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/5bdb57489b720096ef912f738b46330a8f577803...2f02dcc3b79c797eefb42766e631034a59926d3a) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1344be448ab4b9bcbaf8ec0def2d9cf69eb1e321) * [OCPBUGS-4951](https://issues.redhat.com/browse/OCPBUGS-4951): Bump go and k8s [#424](https://github.com/openshift/operator-framework-olm/pull/424) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/cb68bcdc7dfba75b7f41bdddd6aad448e9110a98...1344be448ab4b9bcbaf8ec0def2d9cf69eb1e321) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/14630f1160a24b77c608fbdeb9b9ab3bd9fa388e) * [OCPBUGS-4884](https://issues.redhat.com/browse/OCPBUGS-4884): [release-4.12] Fixes scenario where deleted + completed pods may leak [#1451](https://github.com/openshift/ovn-kubernetes/pull/1451) * [OCPBUGS-4835](https://issues.redhat.com/browse/OCPBUGS-4835): [4.12] Fix address set cleanup: only delete address sets owned by given object. [#1446](https://github.com/openshift/ovn-kubernetes/pull/1446) * [OCPBUGS-4760](https://issues.redhat.com/browse/OCPBUGS-4760): [4.12] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1439](https://github.com/openshift/ovn-kubernetes/pull/1439) * [OCPBUGS-4286](https://issues.redhat.com/browse/OCPBUGS-4286): Fix delete equivalent acls [#1406](https://github.com/openshift/ovn-kubernetes/pull/1406) * [OCPBUGS-3378](https://issues.redhat.com/browse/OCPBUGS-3378): Set the node as reachable only when it is being added as an egressip node [#1402](https://github.com/openshift/ovn-kubernetes/pull/1402) * [OCPBUGS-4503](https://issues.redhat.com/browse/OCPBUGS-4503): Support LB Session Affinity TimeOut [#1427](https://github.com/openshift/ovn-kubernetes/pull/1427) * [OCPBUGS-4503](https://issues.redhat.com/browse/OCPBUGS-4503): [release-4.12] Dockerfile: bump OVN to 22.09.0-25 [#1425](https://github.com/openshift/ovn-kubernetes/pull/1425) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/63579445baacf81becb65d9ef1009aee4704ee43...14630f1160a24b77c608fbdeb9b9ab3bd9fa388e) ### [tests](https://github.com/openshift/origin/tree/33d0074ed8664fa3990f72b3f27ccb2a508b6caf) * [OCPBUGS-4836](https://issues.redhat.com/browse/OCPBUGS-4836): 1sec [#27610](https://github.com/openshift/origin/pull/27610) * [OCPBUGS-4503](https://issues.redhat.com/browse/OCPBUGS-4503): Unskip service session affinity tests [#27598](https://github.com/openshift/origin/pull/27598) * [OCPBUGS-4851](https://issues.redhat.com/browse/OCPBUGS-4851): Add Kuryr exception to "pods should successfully create sandboxes" test [#27611](https://github.com/openshift/origin/pull/27611) * [OCPBUGS-4407](https://issues.redhat.com/browse/OCPBUGS-4407): Nginx 1.18 images will reach EOL in November 2022 [#27599](https://github.com/openshift/origin/pull/27599) * [Full changelog](https://github.com/openshift/origin/compare/7c39a7d52e43c54a0cef2cf83900e48c9ab73009...33d0074ed8664fa3990f72b3f27ccb2a508b6caf)