# 4.15.34 Created: 2024-09-19 12:25:12 +0000 UTC Image Digest: `sha256:f2e0c593f6ed81250c11d0bac94dbaf63656223477b7e8693a652f933056af6e` Promoted from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-09-18-131853 ## Changes from 4.14.28 ### Components * Kubernetes upgraded from 1.27.14 to 1.28.13 * Red Hat Enterprise Linux CoreOS upgraded from 414.92.202405282322-0 to 415.92.202409162258-0 ### New images * [cluster-config-api](https://github.com/openshift/api) git [0a58f8c3](https://github.com/openshift/api/commit/0a58f8c30a8c309baaa4aecd05580039b4d3888b) `sha256:ffc74f37c54682c65587a65e96c1096d82b0c4e65f1652d0ef388456591b1f5b` * [installer-altinfra](https://github.com/openshift/installer) git [12ef92cb](https://github.com/openshift/installer/commit/12ef92cb5ee16b4d4f3d8dff30eb06ca51805f17) `sha256:d633482578d6f07c38f33406d0729dd15988c964ee26d56c285c7c923f03e0de` * [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [bcbf241c](https://github.com/openshift/kubernetes-metrics-server/commit/bcbf241cece8ef455be32a910f1570bae827b4a1) `sha256:aa6f9daef7994f22493b9faa3ee8d4c0de40addddac1cb836db471a4ad25c5c2` * [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [232472ea](https://github.com/openshift/cluster-api-provider-openstack/commit/232472ea527aa86764d93e77dc67b0c7db9cc050) `sha256:470eeab8e7a80f675c8530ac5b7fb26cc5bd5cfa85338bd570fcf8de27eca69f` ### Removed images * kuryr-cni * kuryr-controller ### Rebuilt images without code change * machine-os-content `sha256:4811a13837ba6f5d2bfd0a765bbb622b14f5e64826a1feb14aa28c4a73a86e75` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:31f7e9e482a07fa5e33aad0c7b59604b74ad7a6584e29a9c66a8f5044acb32f3` * rhel-coreos `sha256:0a741a514c6305b88d61f90e2af7664cc14692b448e11fd3015b7264bdbf698a` * rhel-coreos-extensions `sha256:a60e5ebbaa8013d3a5f3e6192d8327e5e03c355e735c7d4e07ccc95f5e26260e` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/ed4651a56f40952e2ee104b7a08d70afbd4dc781) * [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) [#6753](https://github.com/openshift/assisted-service/pull/6753) * [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6381) [#6381](https://github.com/openshift/assisted-service/pull/6381) * [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) [#6245](https://github.com/openshift/assisted-service/pull/6245) * [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) [#6217](https://github.com/openshift/assisted-service/pull/6217) * 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) [#6211](https://github.com/openshift/assisted-service/pull/6211) * Revert "MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)" (#6208) [#6194](https://github.com/openshift/assisted-service/pull/6194) * [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) [#6194](https://github.com/openshift/assisted-service/pull/6194) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6191) [#6191](https://github.com/openshift/assisted-service/pull/6191) * [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) [#6137](https://github.com/openshift/assisted-service/pull/6137) * NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) [#6135](https://github.com/openshift/assisted-service/pull/6135) * [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016) * [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005) * [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926) * [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905) * [MGMT-16414](https://issues.redhat.com/browse/MGMT-16414): When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5876) [#5876](https://github.com/openshift/assisted-service/pull/5876) * NO-ISSUE: Bump OCP versions: 4.12 (#5783) [#5783](https://github.com/openshift/assisted-service/pull/5783) * [MGMT-16289](https://issues.redhat.com/browse/MGMT-16289): Add configuration variable and cluster attribute defining if soft timeouts feature is enabled (#5740) [#5740](https://github.com/openshift/assisted-service/pull/5740) * NO-ISSUE: Bump OCP versions: 4.14, 4.11, 4.13, 4.15 (#5779) [#5779](https://github.com/openshift/assisted-service/pull/5779) * fix: allow LVMS for MultiNode >=4.15.0 (#5757) [#5757](https://github.com/openshift/assisted-service/pull/5757) * Update RHTAP references (#5776) [#5776](https://github.com/openshift/assisted-service/pull/5776) * NO-ISSUE: add build tags option to enable FIPS build (#5768) [#5768](https://github.com/openshift/assisted-service/pull/5768) * Update RHTAP references (#5774) [#5774](https://github.com/openshift/assisted-service/pull/5774) * NO-ISSUE: update OS_IMAGES filter to 4.11 (#5773) [#5773](https://github.com/openshift/assisted-service/pull/5773) * [MGMT-16303](https://issues.redhat.com/browse/MGMT-16303): Disable skip MCO reboot for architecture s390x (#5765) [#5765](https://github.com/openshift/assisted-service/pull/5765) * Propagate OS_IMAGES var in deploy operator (#5762) [#5762](https://github.com/openshift/assisted-service/pull/5762) * Update RHTAP references (#5767) [#5767](https://github.com/openshift/assisted-service/pull/5767) * [MGMT-15425](https://issues.redhat.com/browse/MGMT-15425): Change chosen mce release to match openshift version (#5716) [#5716](https://github.com/openshift/assisted-service/pull/5716) * [MGMT-14605](https://issues.redhat.com/browse/MGMT-14605): Gather more data for hypershift tests (#5344) [#5344](https://github.com/openshift/assisted-service/pull/5344) * [MGMT-16320](https://issues.redhat.com/browse/MGMT-16320): Agent should connect to iBFT iSCSI targets (#5753) [#5753](https://github.com/openshift/assisted-service/pull/5753) * MGMT-16312 fix update host ignition for unbound host (#5751) [#5751](https://github.com/openshift/assisted-service/pull/5751) * NO-ISSUE: Inventory code cleanup - unused params (#5755) [#5755](https://github.com/openshift/assisted-service/pull/5755) * [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix incorrect ICSP for CAPI CI (#5747) [#5747](https://github.com/openshift/assisted-service/pull/5747) * [MGMT-15690](https://issues.redhat.com/browse/MGMT-15690): Add support for external platform (#5738) [#5738](https://github.com/openshift/assisted-service/pull/5738) * [MGMT-16235](https://issues.redhat.com/browse/MGMT-16235): Ensure that agent controller will watch for changes to ignition endpoint token. (#5736) [#5736](https://github.com/openshift/assisted-service/pull/5736) * [MGMT-13461](https://issues.redhat.com/browse/MGMT-13461): Fix Tang validation when day2 host join an imported cluster (#5700) [#5700](https://github.com/openshift/assisted-service/pull/5700) * [MGMT-15972](https://issues.redhat.com/browse/MGMT-15972): Remove Swagger definition for api_vip and ingress_vip (#5734) [#5734](https://github.com/openshift/assisted-service/pull/5734) * [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Fix incorrect check for CAPI image in ci (#5741) [#5741](https://github.com/openshift/assisted-service/pull/5741) * Update RHTAP references (#5733) [#5733](https://github.com/openshift/assisted-service/pull/5733) * [MGMT-16273](https://issues.redhat.com/browse/MGMT-16273): Allow installing on iSCSI disks on OCI (#5728) [#5728](https://github.com/openshift/assisted-service/pull/5728) * [MGMT-16291](https://issues.redhat.com/browse/MGMT-16291): revert default faulty OCP images (#5737) [#5737](https://github.com/openshift/assisted-service/pull/5737) * [MGMT-14810](https://issues.redhat.com/browse/MGMT-14810): Remove API and Ingress VIP (#5501) [#5501](https://github.com/openshift/assisted-service/pull/5501) * [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Missed service-cidr for capi ipv6 CI test (#5721) [#5721](https://github.com/openshift/assisted-service/pull/5721) * NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#5726) [#5726](https://github.com/openshift/assisted-service/pull/5726) * NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.12 (#5722) [#5722](https://github.com/openshift/assisted-service/pull/5722) * Update baremetal operator (#5698) [#5698](https://github.com/openshift/assisted-service/pull/5698) * [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim agent daemonset name (#5699) [#5699](https://github.com/openshift/assisted-service/pull/5699) * [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Minor fixes for disconnected CAPI CI (#5713) [#5713](https://github.com/openshift/assisted-service/pull/5713) * [AGENT-740](https://issues.redhat.com/browse/AGENT-740): Include baremetal host BMC fields in install-config override (#5675) [#5675](https://github.com/openshift/assisted-service/pull/5675) * NO-ISSUE: adding me to owners (#5709) [#5709](https://github.com/openshift/assisted-service/pull/5709) * NO-ISSUE: Cluster code cleanups (#5715) [#5715](https://github.com/openshift/assisted-service/pull/5715) * NO-ISSUE: Bump OCP versions: 4.12 (#5714) [#5714](https://github.com/openshift/assisted-service/pull/5714) * [MGMT-16236](https://issues.redhat.com/browse/MGMT-16236): remove elastic APM (#5702) [#5702](https://github.com/openshift/assisted-service/pull/5702) * NO-ISSUE: Upgrade debug image to latest delve (#5711) [#5711](https://github.com/openshift/assisted-service/pull/5711) * Update RHTAP references (#5688) [#5688](https://github.com/openshift/assisted-service/pull/5688) * [HOSTEDCP-999](https://issues.redhat.com/browse/HOSTEDCP-999): Setup CI for disconnected ipv6 CAPI (#5536) [#5536](https://github.com/openshift/assisted-service/pull/5536) * NO-ISSUE: Inventory code cleanups (#5695) [#5695](https://github.com/openshift/assisted-service/pull/5695) * NO-ISSUE: dependabot optimize (#5697) [#5697](https://github.com/openshift/assisted-service/pull/5697) * NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.15 (#5701) [#5701](https://github.com/openshift/assisted-service/pull/5701) * NO-ISSUE: Remove unused functions (#5696) [#5696](https://github.com/openshift/assisted-service/pull/5696) * NO-ISSUE: BMH and Agent controllers code cleanup (#5693) [#5693](https://github.com/openshift/assisted-service/pull/5693) * NO-ISSUE: Remove unused functions from ctrl event wrapper (#5694) [#5694](https://github.com/openshift/assisted-service/pull/5694) * NO-ISSUE: Bump github.com/Azure/go-autorest/autorest/adal (#5604) [#5604](https://github.com/openshift/assisted-service/pull/5604) * NO-ISSUE: ClusterDeployments controller code cleanup (#5689) [#5689](https://github.com/openshift/assisted-service/pull/5689) * NO-ISSUE: InfraEnv controller code cleanup (#5690) [#5690](https://github.com/openshift/assisted-service/pull/5690) * [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Append kargs to installer for s390x (#5665) [#5665](https://github.com/openshift/assisted-service/pull/5665) * Add missing scheme to `ServiceMonitor` (#5672) [#5672](https://github.com/openshift/assisted-service/pull/5672) * Updating ose-agent-installer-api-server-container image to be consistent with ART (#5495) [#5495](https://github.com/openshift/assisted-service/pull/5495) * [MGMT-15971](https://issues.redhat.com/browse/MGMT-15971): Create ManagedCluster CR so that the hub will show up as "Ready" in MCE (#5575) [#5575](https://github.com/openshift/assisted-service/pull/5575) * Update RHTAP references (#5682) [#5682](https://github.com/openshift/assisted-service/pull/5682) * NO-JIRA: Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) [#5680](https://github.com/openshift/assisted-service/pull/5680) * NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) [#5681](https://github.com/openshift/assisted-service/pull/5681) * [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS OPTIONS for s3 presigned url (#5674) [#5674](https://github.com/openshift/assisted-service/pull/5674) * Update RHTAP references (#5654) [#5654](https://github.com/openshift/assisted-service/pull/5654) * [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) [#5671](https://github.com/openshift/assisted-service/pull/5671) * [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) [#5658](https://github.com/openshift/assisted-service/pull/5658) * [MGMT-16077](https://issues.redhat.com/browse/MGMT-16077): Add 4.15 release and OS images (#5673) [#5673](https://github.com/openshift/assisted-service/pull/5673) * [AGENT-723](https://issues.redhat.com/browse/AGENT-723): Use json.Marshal to correctly process vSphere credentials (#5592) [#5592](https://github.com/openshift/assisted-service/pull/5592) * NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) [#5670](https://github.com/openshift/assisted-service/pull/5670) * [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger reboots for node event when day2 node moves to done (#5648) [#5648](https://github.com/openshift/assisted-service/pull/5648) * NO-JIRA: Allow the command in wait_for_cmd_amount to receive arguments (#5668) [#5668](https://github.com/openshift/assisted-service/pull/5668) * [MGMT-16164](https://issues.redhat.com/browse/MGMT-16164): Install 4.14 redhat-operators catalog for LSO (#5669) [#5669](https://github.com/openshift/assisted-service/pull/5669) * [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Ensure that hosts emit event showing why preparation failed. (#5521) [#5521](https://github.com/openshift/assisted-service/pull/5521) * [MGMT-15878](https://issues.redhat.com/browse/MGMT-15878): Add a condition to show the last preparation failure (#5524) [#5524](https://github.com/openshift/assisted-service/pull/5524) * [MGMT-16151](https://issues.redhat.com/browse/MGMT-16151): change default envoy sidecar timeout value (#5667) [#5667](https://github.com/openshift/assisted-service/pull/5667) * [MGMT-16114](https://issues.redhat.com/browse/MGMT-16114): Update 4.14 release image to use GA version (#5651) [#5651](https://github.com/openshift/assisted-service/pull/5651) * [MGMT-16052](https://issues.redhat.com/browse/MGMT-16052): Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) [#5659](https://github.com/openshift/assisted-service/pull/5659) * Bump OCP versions: 4.14, 4.12 (#5661) [#5661](https://github.com/openshift/assisted-service/pull/5661) * [MGMT-15405](https://issues.redhat.com/browse/MGMT-15405): Add a URL to infraenv to show download link from static network config (#5638) [#5638](https://github.com/openshift/assisted-service/pull/5638) * [OCPBUGS-19823](https://issues.redhat.com/browse/OCPBUGS-19823): Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) [#5565](https://github.com/openshift/assisted-service/pull/5565) * [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Add the boot command line to the host inventory (#5649) [#5649](https://github.com/openshift/assisted-service/pull/5649) * [MGMT-15680](https://issues.redhat.com/browse/MGMT-15680): Adds InfraEnv ctrl watch for pull secret changes (#5589) [#5589](https://github.com/openshift/assisted-service/pull/5589) * NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) [#5653](https://github.com/openshift/assisted-service/pull/5653) * [MGMT-16061](https://issues.redhat.com/browse/MGMT-16061): changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) [#5613](https://github.com/openshift/assisted-service/pull/5613) * NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) [#5647](https://github.com/openshift/assisted-service/pull/5647) * Update RHTAP references (#5637) [#5637](https://github.com/openshift/assisted-service/pull/5637) * Bump OCP versions: 4.13 (#5645) [#5645](https://github.com/openshift/assisted-service/pull/5645) * NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) [#5644](https://github.com/openshift/assisted-service/pull/5644) * [MGMT-15683](https://issues.redhat.com/browse/MGMT-15683): Ensure that manifest filename has valid name part (#5635) [#5635](https://github.com/openshift/assisted-service/pull/5635) * NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) [#5641](https://github.com/openshift/assisted-service/pull/5641) * NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) [#5619](https://github.com/openshift/assisted-service/pull/5619) * Update RHTAP references (#5624) [#5624](https://github.com/openshift/assisted-service/pull/5624) * [MGMT-15684](https://issues.redhat.com/browse/MGMT-15684): Return appropriate HTTP error code for invalid manifest file path (#5634) [#5634](https://github.com/openshift/assisted-service/pull/5634) * Bump OCP versions: 4.14 (#5633) [#5633](https://github.com/openshift/assisted-service/pull/5633) * NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) [#5632](https://github.com/openshift/assisted-service/pull/5632) * [MGMT-16037](https://issues.redhat.com/browse/MGMT-16037): fix messaging errors on big clusters (#5628) [#5628](https://github.com/openshift/assisted-service/pull/5628) * [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#5616) [#5616](https://github.com/openshift/assisted-service/pull/5616) * NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) [#5622](https://github.com/openshift/assisted-service/pull/5622) * Revert "NO-ISSUE: use kubectl 1.28.2 (#5572)" (#5618) [#5572](https://github.com/openshift/assisted-service/pull/5572) * Bump OCP versions: 4.12 (#5615) [#5615](https://github.com/openshift/assisted-service/pull/5615) * [MGMT-16045](https://issues.redhat.com/browse/MGMT-16045): mitigate CVE-2023-44487 (#5614) [#5614](https://github.com/openshift/assisted-service/pull/5614) * [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Add event that shows the number of reboots for a node before completing installation (#5591) [#5591](https://github.com/openshift/assisted-service/pull/5591) * Add skopeo to OCP build (#5558) [#5558](https://github.com/openshift/assisted-service/pull/5558) * NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) [#5601](https://github.com/openshift/assisted-service/pull/5601) * NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) [#5600](https://github.com/openshift/assisted-service/pull/5600) * NO-ISSUE: vendor current master (#5594) [#5594](https://github.com/openshift/assisted-service/pull/5594) * NO-ISSUE: fixing dependabot issues (#5595) [#5595](https://github.com/openshift/assisted-service/pull/5595) * Bump OCP versions: 4.13, 4.14 (#5593) [#5593](https://github.com/openshift/assisted-service/pull/5593) * Update RHTAP references (#5590) [#5590](https://github.com/openshift/assisted-service/pull/5590) * [MGMT-16001](https://issues.redhat.com/browse/MGMT-16001): Sanitize reclaim daemonset name (#5579) [#5579](https://github.com/openshift/assisted-service/pull/5579) * Bump OCP versions: 4.11, 4.12, 4.13 (#5586) [#5586](https://github.com/openshift/assisted-service/pull/5586) * [MGMT-13198](https://issues.redhat.com/browse/MGMT-13198): Add API endpoint to create assisted installer event (#5578) [#5578](https://github.com/openshift/assisted-service/pull/5578) * [MGMT-15980](https://issues.redhat.com/browse/MGMT-15980): added missing Create op to infraenvs Webhook (#5569) [#5569](https://github.com/openshift/assisted-service/pull/5569) * Update RHTAP references (#5573) [#5573](https://github.com/openshift/assisted-service/pull/5573) * NO-ISSUE: use kubectl 1.28.2 (#5572) [#5572](https://github.com/openshift/assisted-service/pull/5572) * Update RHTAP references (#5570) [#5570](https://github.com/openshift/assisted-service/pull/5570) * [MGMT-15949](https://issues.redhat.com/browse/MGMT-15949): fix missing ImageSetRef validation (#5552) [#5552](https://github.com/openshift/assisted-service/pull/5552) * Revert "NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)" (#5566) [#5560](https://github.com/openshift/assisted-service/pull/5560) * MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) [#5549](https://github.com/openshift/assisted-service/pull/5549) * NO-ISSUE: Fix console output in ZTP jobs (#5562) [#5562](https://github.com/openshift/assisted-service/pull/5562) * NO-ISSUE: add console output for ztp (#5550) [#5550](https://github.com/openshift/assisted-service/pull/5550) * Bump OCP versions: 4.14 (#5559) [#5559](https://github.com/openshift/assisted-service/pull/5559) * [MGMT-15796](https://issues.redhat.com/browse/MGMT-15796): set CloudControllerManager to External for OCI (#5548) [#5548](https://github.com/openshift/assisted-service/pull/5548) * NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560) [#5560](https://github.com/openshift/assisted-service/pull/5560) * Bump OCP versions: 4.12, 4.14, 4.13 (#5546) [#5546](https://github.com/openshift/assisted-service/pull/5546) * Update RHTAP references (#5539) [#5539](https://github.com/openshift/assisted-service/pull/5539) * [MGMT-15950](https://issues.redhat.com/browse/MGMT-15950): Fix DNS wilcard domain validation (#5544) [#5544](https://github.com/openshift/assisted-service/pull/5544) * WIP: Add assisted images service short URL routes (#5543) [#5543](https://github.com/openshift/assisted-service/pull/5543) * Update RHTAP references (#5538) [#5538](https://github.com/openshift/assisted-service/pull/5538) * [MGMT-15738](https://issues.redhat.com/browse/MGMT-15738): Support for E2E test, make sure we have an infraenv for adding a node to the local cluster. (#5477) [#5477](https://github.com/openshift/assisted-service/pull/5477) * Bump OCP versions: 4.13, 4.11 (#5537) [#5537](https://github.com/openshift/assisted-service/pull/5537) * [MGMT-14409](https://issues.redhat.com/browse/MGMT-14409): generate short image URL (#5523) [#5523](https://github.com/openshift/assisted-service/pull/5523) * [MGMT-15762](https://issues.redhat.com/browse/MGMT-15762): fix odf validation failing where is one small disk (#5529) [#5529](https://github.com/openshift/assisted-service/pull/5529) * Update RHTAP references (#5520) [#5520](https://github.com/openshift/assisted-service/pull/5520) * Bump OCP versions: 4.12, 4.14 (#5528) [#5528](https://github.com/openshift/assisted-service/pull/5528) * NO-ISSUE: fail upload if response is not 2XX (#5522) [#5522](https://github.com/openshift/assisted-service/pull/5522) * Bump OCP versions: 4.14 (#5525) [#5525](https://github.com/openshift/assisted-service/pull/5525) * NO-ISSUE: fix docker-ce-cli package missing (#5499) [#5499](https://github.com/openshift/assisted-service/pull/5499) * NO-ISSUE: Add versions file to onprem event upload (#5514) [#5514](https://github.com/openshift/assisted-service/pull/5514) * [MGMT-15699](https://issues.redhat.com/browse/MGMT-15699): Service changes for avoiding MCO reboot (#5453) [#5453](https://github.com/openshift/assisted-service/pull/5453) * Update RHTAP references (#5517) [#5517](https://github.com/openshift/assisted-service/pull/5517) * [MGMT-15598](https://issues.redhat.com/browse/MGMT-15598): Add a parameter to manifest list to disable filter (#5498) [#5498](https://github.com/openshift/assisted-service/pull/5498) * Bump OCP versions: 4.12 (#5515) [#5515](https://github.com/openshift/assisted-service/pull/5515) * Update RHTAP references (#5513) [#5513](https://github.com/openshift/assisted-service/pull/5513) * Bump OCP versions: 4.14 (#5512) [#5512](https://github.com/openshift/assisted-service/pull/5512) * NO-ISSUE: Fix email domain for event uploader (#5511) [#5511](https://github.com/openshift/assisted-service/pull/5511) * Update RHTAP references (#5510) [#5510](https://github.com/openshift/assisted-service/pull/5510) * Update RHTAP references (#5508) [#5508](https://github.com/openshift/assisted-service/pull/5508) * Bump OCP versions: 4.12, 4.13 (#5506) [#5506](https://github.com/openshift/assisted-service/pull/5506) * [MGMT-15808](https://issues.redhat.com/browse/MGMT-15808): change base image to stream9 (#5497) [#5497](https://github.com/openshift/assisted-service/pull/5497) * [MGMT-15559](https://issues.redhat.com/browse/MGMT-15559): Change detached annotation condition in non-converged flow (#5445) [#5445](https://github.com/openshift/assisted-service/pull/5445) * [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Fix unbound variable (#5493) [#5493](https://github.com/openshift/assisted-service/pull/5493) * Update RHTAP references (#5492) [#5492](https://github.com/openshift/assisted-service/pull/5492) * Bump OCP versions: 4.14, 4.11 (#5496) [#5496](https://github.com/openshift/assisted-service/pull/5496) * Update RHTAP references (#5470) [#5470](https://github.com/openshift/assisted-service/pull/5470) * [MGMT-15715](https://issues.redhat.com/browse/MGMT-15715): Allow handling multi-document YAML custom manifests (#5480) [#5480](https://github.com/openshift/assisted-service/pull/5480) * [MGMT-15732](https://issues.redhat.com/browse/MGMT-15732): Add extra flag var for hypershift install (#5469) [#5469](https://github.com/openshift/assisted-service/pull/5469) * [XMGMT-15704](https://issues.redhat.com/browse/XMGMT-15704): Bugfix for local cluster import (#5484) [#5484](https://github.com/openshift/assisted-service/pull/5484) * NO-ISSUE: update RHTAP deprecated image check (#5488) [#5488](https://github.com/openshift/assisted-service/pull/5488) * Bump OCP versions: 4.12, 4.13 (#5483) [#5483](https://github.com/openshift/assisted-service/pull/5483) * [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Fix DNS regex validation (#5482) [#5482](https://github.com/openshift/assisted-service/pull/5482) * [MGMT-15716](https://issues.redhat.com/browse/MGMT-15716): notify events when updating cluster status (#5476) [#5476](https://github.com/openshift/assisted-service/pull/5476) * [MGMT-15503](https://issues.redhat.com/browse/MGMT-15503): Update operator bundle channel (#5474) [#5474](https://github.com/openshift/assisted-service/pull/5474) * Bump OCP versions: 4.14 (#5472) [#5472](https://github.com/openshift/assisted-service/pull/5472) * [MGMT-15306](https://issues.redhat.com/browse/MGMT-15306): Fix UpdateCluster for requests that include VIPS and UMA (#5462) [#5462](https://github.com/openshift/assisted-service/pull/5462) * [Full changelog](https://github.com/openshift/assisted-service/compare/5861f066a15f89356d7cf6b3c340f56ae6119d19...ed4651a56f40952e2ee104b7a08d70afbd4dc781) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/1b61dd77ff111b546f786365dccb70d1714cb9b5) * [OCPBUGS-35894](https://issues.redhat.com/browse/OCPBUGS-35894): Fix race to mark node Joined (#859) [#859](https://github.com/openshift/assisted-installer/pull/859) * [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#851) [#851](https://github.com/openshift/assisted-installer/pull/851) * [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) [#833](https://github.com/openshift/assisted-installer/pull/833) * [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) [#827](https://github.com/openshift/assisted-installer/pull/827) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#824) [#824](https://github.com/openshift/assisted-installer/pull/824) * [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791) * [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) [#756](https://github.com/openshift/assisted-installer/pull/756) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) [#755](https://github.com/openshift/assisted-installer/pull/755) * [OCPBUGS-20049](https://issues.redhat.com/browse/OCPBUGS-20049): Remove uninitialized taint for agent-based installs (#739) [#739](https://github.com/openshift/assisted-installer/pull/739) * [MGMT-16258](https://issues.redhat.com/browse/MGMT-16258): Partitions naming convetion is different for various disk types (#752) [#752](https://github.com/openshift/assisted-installer/pull/752) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) [#751](https://github.com/openshift/assisted-installer/pull/751) * Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) [#719](https://github.com/openshift/assisted-installer/pull/719) * [MGMT-15926](https://issues.redhat.com/browse/MGMT-15926): Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) [#748](https://github.com/openshift/assisted-installer/pull/748) * NO-ISSUE: Add my github account as an OWNER for this repository (#749) [#749](https://github.com/openshift/assisted-installer/pull/749) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) [#747](https://github.com/openshift/assisted-installer/pull/747) * [MGMT-15902](https://issues.redhat.com/browse/MGMT-15902): Trigger event that notifies the number of reboots once the node installation is completed (#744) [#744](https://github.com/openshift/assisted-installer/pull/744) * NO-ISSUE: Bump the go-dependencies group with 1 update (#745) [#745](https://github.com/openshift/assisted-installer/pull/745) * NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) [#743](https://github.com/openshift/assisted-installer/pull/743) * NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) [#742](https://github.com/openshift/assisted-installer/pull/742) * [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#741) [#741](https://github.com/openshift/assisted-installer/pull/741) * NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) [#738](https://github.com/openshift/assisted-installer/pull/738) * [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): Update dependencies to remove goproxy dependency (#701) [#701](https://github.com/openshift/assisted-installer/pull/701) * [MGMT-15984](https://issues.redhat.com/browse/MGMT-15984): Assisted installer doesn't freeze and unmount file systems used for overwriting os image (#737) [#737](https://github.com/openshift/assisted-installer/pull/737) * NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) [#731](https://github.com/openshift/assisted-installer/pull/731) * Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) [#718](https://github.com/openshift/assisted-installer/pull/718) * [MGMT-15710](https://issues.redhat.com/browse/MGMT-15710): Assisted installer changes for avoiding MCO reboot (#713) [#713](https://github.com/openshift/assisted-installer/pull/713) * [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): fix image missing nsenter executable (#729) [#729](https://github.com/openshift/assisted-installer/pull/729) * [MGMT-15810](https://issues.redhat.com/browse/MGMT-15810): change base image to stream9 (#725) [#725](https://github.com/openshift/assisted-installer/pull/725) * NO-ISSUE: fix dependabot ingored packages (#724) [#724](https://github.com/openshift/assisted-installer/pull/724) * [Full changelog](https://github.com/openshift/assisted-installer/compare/5d64ad00cc9a2f045895dfccc43fe8d81027e745...1b61dd77ff111b546f786365dccb70d1714cb9b5) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af) * [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#718) [#718](https://github.com/openshift/assisted-installer-agent/pull/718) * [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) [#704](https://github.com/openshift/assisted-installer-agent/pull/704) * [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) [#699](https://github.com/openshift/assisted-installer-agent/pull/699) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#695) [#695](https://github.com/openshift/assisted-installer-agent/pull/695) * [MGMT-16335](https://issues.redhat.com/browse/MGMT-16335): set HasUUID on appliance mock disk (#634) [#634](https://github.com/openshift/assisted-installer-agent/pull/634) * NO-ISSUE: Bump the go-dependencies group with 3 updates (#635) [#635](https://github.com/openshift/assisted-installer-agent/pull/635) * NO-ISSUE: Add Eran Ifrach account and mine as owners (#633) [#633](https://github.com/openshift/assisted-installer-agent/pull/633) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#630) [#630](https://github.com/openshift/assisted-installer-agent/pull/630) * [MGMT-15860](https://issues.redhat.com/browse/MGMT-15860): add strictfipsruntime to build (#629) [#629](https://github.com/openshift/assisted-installer-agent/pull/629) * NO-ISSUE: Bump the go-dependencies group with 1 update (#626) [#626](https://github.com/openshift/assisted-installer-agent/pull/626) * [OCPBUGS-16483](https://issues.redhat.com/browse/OCPBUGS-16483): Update apimachinery dependency to remove goproxy dep (#590) [#590](https://github.com/openshift/assisted-installer-agent/pull/590) * [MGMT-15271](https://issues.redhat.com/browse/MGMT-15271): Get cmdline and set IBM in vendor (#624) [#624](https://github.com/openshift/assisted-installer-agent/pull/624) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) [#623](https://github.com/openshift/assisted-installer-agent/pull/623) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) [#621](https://github.com/openshift/assisted-installer-agent/pull/621) * [MGMT-16039](https://issues.redhat.com/browse/MGMT-16039): upgrade to golang 1.20 (#619) [#619](https://github.com/openshift/assisted-installer-agent/pull/619) * [MGMT-16011](https://issues.redhat.com/browse/MGMT-16011): Reduce agent image size (#617) [#617](https://github.com/openshift/assisted-installer-agent/pull/617) * NO-ISSUE: Bump the go-dependencies group with 1 update (#618) [#618](https://github.com/openshift/assisted-installer-agent/pull/618) * [MGMT-15900](https://issues.redhat.com/browse/MGMT-15900): Add enable-skip-mco-reboot flag to assisted installer install command (#614) [#614](https://github.com/openshift/assisted-installer-agent/pull/614) * NO-ISSUE: Bump the go-dependencies group with 3 updates (#612) [#612](https://github.com/openshift/assisted-installer-agent/pull/612) * NO-ISSUE: add adriengentil as approver (#611) [#611](https://github.com/openshift/assisted-installer-agent/pull/611) * NO-ISSUE: Bump the go-dependencies group with 2 updates (#608) [#608](https://github.com/openshift/assisted-installer-agent/pull/608) * [MGMT-15809](https://issues.redhat.com/browse/MGMT-15809): change base image to stream9 (#604) [#604](https://github.com/openshift/assisted-installer-agent/pull/604) * Updating ose-agent-installer-node-agent images to be consistent with ART (#603) [#603](https://github.com/openshift/assisted-installer-agent/pull/603) * [OCPBUGS-16482](https://issues.redhat.com/browse/OCPBUGS-16482): bump golangci-lint to v1.53.1 (#591) [#591](https://github.com/openshift/assisted-installer-agent/pull/591) * NO-ISSUE: fix lint target and code (#605) [#605](https://github.com/openshift/assisted-installer-agent/pull/605) * [MGMT-15653](https://issues.redhat.com/browse/MGMT-15653): Update domain validation from assisted-service changes (#599) [#599](https://github.com/openshift/assisted-installer-agent/pull/599) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/1ef82f3a3397c0f5b3864c37bf8dcba4235e84fc...1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af) ### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/33b7d855fdebd24a972f32dafafd29e40b117e46) * [OCPBUGS-21874](https://issues.redhat.com/browse/OCPBUGS-21874): Update 4.15 ose-agent-installer-utils-container image to be consistent with ART [#31](https://github.com/openshift/agent-installer-utils/pull/31) * Bump golang builder to rhel9 [#30](https://github.com/openshift/agent-installer-utils/pull/30) * [OCPBUGS-19219](https://issues.redhat.com/browse/OCPBUGS-19219): Updating ose-agent-installer-utils images to be consistent with ART [#29](https://github.com/openshift/agent-installer-utils/pull/29) * [Full changelog](https://github.com/openshift/agent-installer-utils/compare/ad8537697818870b53b6262041f0dfa78a3b41c2...33b7d855fdebd24a972f32dafafd29e40b117e46) ### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/abf4fa96550caf09e788b66fc06f1df802768397) * [OCPBUGS-23697](https://issues.redhat.com/browse/OCPBUGS-23697): Add Snyk file to exclude vendor directory on scan [#48](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/48) * [OCPBUGS-21984](https://issues.redhat.com/browse/OCPBUGS-21984): Bump golang.org/x/net to v0.19.0 [#41](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/41) * [OCPBUGS-24111](https://issues.redhat.com/browse/OCPBUGS-24111): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#39](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/39) * Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36) * Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35) * [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/8ba0b37a45510404a842d6dbd84d40a18008e81d...abf4fa96550caf09e788b66fc06f1df802768397) ### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/be4888d3dc176b9801364981fbb34d831f6d6ffe) * [OCPBUGS-24122](https://issues.redhat.com/browse/OCPBUGS-24122): Updating ose-alibaba-cloud-csi-driver-container image to be consistent with ART [#42](https://github.com/openshift/alibaba-cloud-csi-driver/pull/42) * [STOR-1389](https://issues.redhat.com/browse/STOR-1389): Rebase to v1.2.1 for OCP 4.15 [#41](https://github.com/openshift/alibaba-cloud-csi-driver/pull/41) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#34](https://github.com/openshift/alibaba-cloud-csi-driver/pull/34) * [OCPBUGS-19199](https://issues.redhat.com/browse/OCPBUGS-19199): Updating ose-alibaba-cloud-csi-driver images to be consistent with ART [#33](https://github.com/openshift/alibaba-cloud-csi-driver/pull/33) * [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/3dc363d364c43c1fb03e223147e25d9057273428...be4888d3dc176b9801364981fbb34d831f6d6ffe) ### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/41b367ae3bb6de9292539c0ecd98c81c5edc8294) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#82](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/82) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#76](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/76) * [OCPBUGS-25233](https://issues.redhat.com/browse/OCPBUGS-25233): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/77) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#72](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/72) * [OCPBUGS-22541](https://issues.redhat.com/browse/OCPBUGS-22541): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#70](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/70) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#69](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/69) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/62) * [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#57](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/57) * [OCPBUGS-19111](https://issues.redhat.com/browse/OCPBUGS-19111): Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#61](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/61) * [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/8853e6ef4966018b96f9d8bfbf99df3a984bb454...41b367ae3bb6de9292539c0ecd98c81c5edc8294) ### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/f7f5eed811b33b9beee1ed6a34f956449fbf7fc7) * [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#57](https://github.com/openshift/cluster-api-provider-alibaba/pull/57) * [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#47](https://github.com/openshift/cluster-api-provider-alibaba/pull/47) * NO-JIRA: Update OWNERS [#45](https://github.com/openshift/cluster-api-provider-alibaba/pull/45) * [OCPBUGS-19201](https://issues.redhat.com/browse/OCPBUGS-19201): Updating ose-alibaba-machine-controllers images to be consistent with ART [#44](https://github.com/openshift/cluster-api-provider-alibaba/pull/44) * [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/27f105d3b722e19f76b72588d36eeae9dac0a444...f7f5eed811b33b9beee1ed6a34f956449fbf7fc7) ### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/adccbd5c16daecfe861fa530acdcbba5ec682a3a) * [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#60](https://github.com/openshift/apiserver-network-proxy/pull/60) * Update golang Docker tag to v1.23.1 [#58](https://github.com/openshift/apiserver-network-proxy/pull/58) * [OCPBUGS-31953](https://issues.redhat.com/browse/OCPBUGS-31953): Bump golang.org/x/net to v0.23.0 [#51](https://github.com/openshift/apiserver-network-proxy/pull/51) * [OCPBUGS-24165](https://issues.redhat.com/browse/OCPBUGS-24165): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#44](https://github.com/openshift/apiserver-network-proxy/pull/44) * [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/a3c0e6b7016017e26603f9990bce2891374f3ca1...adccbd5c16daecfe861fa530acdcbba5ec682a3a) ### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fd77d92ced47559dadf53fb8c97d1cbeb64dde8c) * [OCPBUGS-38577](https://issues.redhat.com/browse/OCPBUGS-38577): Ensure that addresses are added in network device index order [#92](https://github.com/openshift/cloud-provider-aws/pull/92) * [OCPBUGS-31954](https://issues.redhat.com/browse/OCPBUGS-31954): update for CVE-2023-45288 [release-4.15] [#81](https://github.com/openshift/cloud-provider-aws/pull/81) * [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Updates build-rpm.sh to set release to build time [#76](https://github.com/openshift/cloud-provider-aws/pull/76) * [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#77](https://github.com/openshift/cloud-provider-aws/pull/77) * [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Adds ecr-credential-plugin .spec [#70](https://github.com/openshift/cloud-provider-aws/pull/70) * [OCPBUGS-26060](https://issues.redhat.com/browse/OCPBUGS-26060): bump go.opentelemetry.io [#64](https://github.com/openshift/cloud-provider-aws/pull/64) * [OCPBUGS-24135](https://issues.redhat.com/browse/OCPBUGS-24135): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-aws/pull/58) * [OCPBUGS-21839](https://issues.redhat.com/browse/OCPBUGS-21839): Upgrade x/net to v0.17.0 [#51](https://github.com/openshift/cloud-provider-aws/pull/51) * Update OWNERS [#52](https://github.com/openshift/cloud-provider-aws/pull/52) * [OCPCLOUD-2187](https://issues.redhat.com/browse/OCPCLOUD-2187): Merge https://github.com/kubernetes/cloud-provider-aws:master (43b808d) into master [#47](https://github.com/openshift/cloud-provider-aws/pull/47) * [OCPBUGS-19218](https://issues.redhat.com/browse/OCPBUGS-19218): Updating ose-aws-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-aws/pull/48) * [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/607e2dde6cde137b5c14d5f7687847f6df4cae94...fd77d92ced47559dadf53fb8c97d1cbeb64dde8c) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/51e7a81c40ab6d384e9b643dd6d2c97a417d1634) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#511](https://github.com/openshift/cluster-api-provider-aws/pull/511) * [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#508](https://github.com/openshift/cluster-api-provider-aws/pull/508) * [OCPBUGS-31036](https://issues.redhat.com/browse/OCPBUGS-31036): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#501](https://github.com/openshift/cluster-api-provider-aws/pull/501) * [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#504](https://github.com/openshift/cluster-api-provider-aws/pull/504) * [OCPBUGS-24113](https://issues.redhat.com/browse/OCPBUGS-24113): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART [#485](https://github.com/openshift/cluster-api-provider-aws/pull/485) * [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#486](https://github.com/openshift/cluster-api-provider-aws/pull/486) * [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#471](https://github.com/openshift/cluster-api-provider-aws/pull/471) * Update OWNERS [#480](https://github.com/openshift/cluster-api-provider-aws/pull/480) * [OCPBUGS-21649](https://issues.redhat.com/browse/OCPBUGS-21649): Bump golang.org/x/net to v0.17.0 [#479](https://github.com/openshift/cluster-api-provider-aws/pull/479) * [OCPBUGS-17279](https://issues.redhat.com/browse/OCPBUGS-17279), [OCPCLOUD-2216](https://issues.redhat.com/browse/OCPCLOUD-2216): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master [#478](https://github.com/openshift/cluster-api-provider-aws/pull/478) * [OCPBUGS-19185](https://issues.redhat.com/browse/OCPBUGS-19185): Updating ose-aws-cluster-api-controllers images to be consistent with ART [#477](https://github.com/openshift/cluster-api-provider-aws/pull/477) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/54a95bd18a84153e23430476fc218035255e3a0e...51e7a81c40ab6d384e9b643dd6d2c97a417d1634) ### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/7043c1cca6e17dd3c90006140f6361cf0e776d69) * [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): UPSTREAM: 1919: Add reserved-volume-attachments [#263](https://github.com/openshift/aws-ebs-csi-driver/pull/263) * [OCPBUGS-25824](https://issues.redhat.com/browse/OCPBUGS-25824): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#253](https://github.com/openshift/aws-ebs-csi-driver/pull/253) * [OCPBUGS-25601](https://issues.redhat.com/browse/OCPBUGS-25601): UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 [#251](https://github.com/openshift/aws-ebs-csi-driver/pull/251) * [OCPBUGS-24072](https://issues.redhat.com/browse/OCPBUGS-24072): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART [#245](https://github.com/openshift/aws-ebs-csi-driver/pull/245) * [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Rebase to v1.25.0 for OCP 4.15 [#244](https://github.com/openshift/aws-ebs-csi-driver/pull/244) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net@v0.17.0 [#237](https://github.com/openshift/aws-ebs-csi-driver/pull/237) * [OCPBUGS-19101](https://issues.redhat.com/browse/OCPBUGS-19101): Updating ose-aws-ebs-csi-driver images to be consistent with ART [#235](https://github.com/openshift/aws-ebs-csi-driver/pull/235) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/918bb4e9106bbd7498d0d5b3b44ec6df392789b5...7043c1cca6e17dd3c90006140f6361cf0e776d69) ### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2a2b9dd109ba9d4abce11411c96787b21887f929) * [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): Explicitly reserve 1 attachment for the root disk [#222](https://github.com/openshift/csi-operator/pull/222) * [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): remove legacy directory and duplicate Dockerfile.*.test files [#201](https://github.com/openshift/csi-operator/pull/201) * [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): move test manifest to top-level directory [#195](https://github.com/openshift/csi-operator/pull/195) * [OCPBUGS-26195](https://issues.redhat.com/browse/OCPBUGS-26195): Create RBAC objects first [#93](https://github.com/openshift/csi-operator/pull/93) * [OCPBUGS-25995](https://issues.redhat.com/browse/OCPBUGS-25995): Add selinux [#91](https://github.com/openshift/csi-operator/pull/91) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#90](https://github.com/openshift/csi-operator/pull/90) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#82](https://github.com/openshift/csi-operator/pull/82) * [OCPBUGS-25234](https://issues.redhat.com/browse/OCPBUGS-25234): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#83](https://github.com/openshift/csi-operator/pull/83) * [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69) * Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71) * [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74) * [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72) * [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70) * Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67) * Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68) * hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65) * Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64) * Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63) * Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62) * Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61) * Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59) * [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53) * Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57) * Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56) * Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54) * Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52) * Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51) * Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47) * Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44) * Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45) * Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46) * Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43) * Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41) * Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40) * Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39) * Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38) * Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37) * Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36) * Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35) * Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34) * Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33) * Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32) * Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31) * Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30) * Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29) * Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28) * Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27) * ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26) * Documentation update [#23](https://github.com/openshift/csi-operator/pull/23) * Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14) * Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11) * Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12) * Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9) * Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10) * Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8) * Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7) * Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6) * Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5) * Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4) * Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3) * Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2) * Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1) * [Full changelog](https://github.com/openshift/csi-operator/compare/609879c3f1b9a65936e385f798398a2d1673aacd...2a2b9dd109ba9d4abce11411c96787b21887f929) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382) * [OCPBUGS-24116](https://issues.redhat.com/browse/OCPBUGS-24116): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#93](https://github.com/openshift/machine-api-provider-aws/pull/93) * [SPLAT-1220](https://issues.redhat.com/browse/SPLAT-1220): Assign Carrier IP to launch EC2 in AWS Wavelength Zones [#78](https://github.com/openshift/machine-api-provider-aws/pull/78) * [OCPCLOUD-2193](https://issues.redhat.com/browse/OCPCLOUD-2193): Update k8s to 1.28 [#87](https://github.com/openshift/machine-api-provider-aws/pull/87) * Update OWNERS [#86](https://github.com/openshift/machine-api-provider-aws/pull/86) * [OCPBUGS-21640](https://issues.redhat.com/browse/OCPBUGS-21640): Update golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/machine-api-provider-aws/pull/85) * [OCPBUGS-20266](https://issues.redhat.com/browse/OCPBUGS-20266): update bad url endpoint termination handler test [#84](https://github.com/openshift/machine-api-provider-aws/pull/84) * [OCPBUGS-19190](https://issues.redhat.com/browse/OCPBUGS-19190): Updating ose-machine-api-provider-aws images to be consistent with ART [#82](https://github.com/openshift/machine-api-provider-aws/pull/82) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e292817c27d83d6cba27def4461a9795bd3a68a7...0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382) ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/13385034ec9a843a6b40f8b3aec9966ada785115) * [OCPBUGS-32886](https://issues.redhat.com/browse/OCPBUGS-32886): Upgrade go-jose module to 2.6.3 [#188](https://github.com/openshift/aws-pod-identity-webhook/pull/188) * [OCPBUGS-24163](https://issues.redhat.com/browse/OCPBUGS-24163): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART [#179](https://github.com/openshift/aws-pod-identity-webhook/pull/179) * NO-ISSUE: Sync OWNERS with team members [#173](https://github.com/openshift/aws-pod-identity-webhook/pull/173) * snyk: exclude vendor/ [#170](https://github.com/openshift/aws-pod-identity-webhook/pull/170) * Bump k8s deps for CVE-2023-39325 [#169](https://github.com/openshift/aws-pod-identity-webhook/pull/169) * [OCPBUGS-19264](https://issues.redhat.com/browse/OCPBUGS-19264): Updating ose-aws-pod-identity-webhook images to be consistent with ART [#167](https://github.com/openshift/aws-pod-identity-webhook/pull/167) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63...13385034ec9a843a6b40f8b3aec9966ada785115) ### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d799a261f70bbdf546d911f5f8b59e2c324bd16) * [OCPBUGS-33127](https://issues.redhat.com/browse/OCPBUGS-33127): Improvements to client timeouts to prevent hangs [#118](https://github.com/openshift/cloud-provider-azure/pull/118) * [OCPBUGS-33092](https://issues.redhat.com/browse/OCPBUGS-33092): Bump otelgrpc [#117](https://github.com/openshift/cloud-provider-azure/pull/117) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update acr-credential-provider.spec [#115](https://github.com/openshift/cloud-provider-azure/pull/115) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds acr-credential-provider spec file and build script [#114](https://github.com/openshift/cloud-provider-azure/pull/114) * [OCPBUGS-24166](https://issues.redhat.com/browse/OCPBUGS-24166): Updating ose-azure-cloud-controller-manager-container image to be consistent with ART [#98](https://github.com/openshift/cloud-provider-azure/pull/98) * [OCPBUGS-24164](https://issues.redhat.com/browse/OCPBUGS-24164): Updating ose-azure-cloud-node-manager-container image to be consistent with ART [#97](https://github.com/openshift/cloud-provider-azure/pull/97) * [OCPBUGS-22265](https://issues.redhat.com/browse/OCPBUGS-22265): Bump x/net package to v0.17.0 [#90](https://github.com/openshift/cloud-provider-azure/pull/90) * Update OWNERS [#87](https://github.com/openshift/cloud-provider-azure/pull/87) * [OCPBUGS-17282](https://issues.redhat.com/browse/OCPBUGS-17282): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (55d9043) into master [#84](https://github.com/openshift/cloud-provider-azure/pull/84) * [OCPBUGS-19267](https://issues.redhat.com/browse/OCPBUGS-19267): Updating ose-azure-cloud-controller-manager images to be consistent with ART [#86](https://github.com/openshift/cloud-provider-azure/pull/86) * [OCPBUGS-19265](https://issues.redhat.com/browse/OCPBUGS-19265): Updating ose-azure-cloud-node-manager images to be consistent with ART [#85](https://github.com/openshift/cloud-provider-azure/pull/85) * [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/f0e7cbbcf37fb44c34a192ecffaf40a6639c8bea...0d799a261f70bbdf546d911f5f8b59e2c324bd16) ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/44832d2da09778d7ff4d2413c9e10852f330a55d) * [OCPBUGS-36024](https://issues.redhat.com/browse/OCPBUGS-36024): Update go-retryablehttp to v0.7.7 [#311](https://github.com/openshift/cluster-api-provider-azure/pull/311) * [OCPBUGS-29502](https://issues.redhat.com/browse/OCPBUGS-29502): Bump helm to v3.14.4 [#303](https://github.com/openshift/cluster-api-provider-azure/pull/303) * [OCPBUGS-24091](https://issues.redhat.com/browse/OCPBUGS-24091): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART [#291](https://github.com/openshift/cluster-api-provider-azure/pull/291) * Update OWNERS [#287](https://github.com/openshift/cluster-api-provider-azure/pull/287) * [OCPBUGS-21648](https://issues.redhat.com/browse/OCPBUGS-21648): Bump golang.org/x/net to v0.17.0 [#285](https://github.com/openshift/cluster-api-provider-azure/pull/285) * [OCPCLOUD-2217](https://issues.redhat.com/browse/OCPCLOUD-2217): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.11.2 (fa947c4) into master [#284](https://github.com/openshift/cluster-api-provider-azure/pull/284) * [OCPBUGS-19147](https://issues.redhat.com/browse/OCPBUGS-19147): Updating ose-azure-cluster-api-controllers images to be consistent with ART [#282](https://github.com/openshift/cluster-api-provider-azure/pull/282) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/7ad2773c64f0757ea92a18594f0aad59c6a55cde...44832d2da09778d7ff4d2413c9e10852f330a55d) ### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) * [OCPBUGS-25768](https://issues.redhat.com/browse/OCPBUGS-25768): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#72](https://github.com/openshift/azure-disk-csi-driver/pull/72) * [OCPBUGS-25236](https://issues.redhat.com/browse/OCPBUGS-25236): OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs [#68](https://github.com/openshift/azure-disk-csi-driver/pull/68) * [OCPBUGS-24120](https://issues.redhat.com/browse/OCPBUGS-24120): Updating ose-azure-disk-csi-driver-container image to be consistent with ART [#64](https://github.com/openshift/azure-disk-csi-driver/pull/64) * [OCPBUGS-17542](https://issues.redhat.com/browse/OCPBUGS-17542): allow resizing to min required size for performance plus disks [#52](https://github.com/openshift/azure-disk-csi-driver/pull/52) * [STOR-1394](https://issues.redhat.com/browse/STOR-1394): Rebase v1.29.0 for OCP 4.15 [#51](https://github.com/openshift/azure-disk-csi-driver/pull/51) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#53](https://github.com/openshift/azure-disk-csi-driver/pull/53) * [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver images to be consistent with ART [#50](https://github.com/openshift/azure-disk-csi-driver/pull/50) * [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/b19eec11854e89a3e45f27455ce54d19c25f375b...dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) ### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/160cf624a88f500de7a1f79e6dd9384bb7d17842) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#121](https://github.com/openshift/azure-disk-csi-driver-operator/pull/121) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#114](https://github.com/openshift/azure-disk-csi-driver-operator/pull/114) * [OCPBUGS-25237](https://issues.redhat.com/browse/OCPBUGS-25237): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#115](https://github.com/openshift/azure-disk-csi-driver-operator/pull/115) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#110](https://github.com/openshift/azure-disk-csi-driver-operator/pull/110) * [OCPBUGS-22560](https://issues.redhat.com/browse/OCPBUGS-22560): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#107](https://github.com/openshift/azure-disk-csi-driver-operator/pull/107) * [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#93](https://github.com/openshift/azure-disk-csi-driver-operator/pull/93) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#106](https://github.com/openshift/azure-disk-csi-driver-operator/pull/106) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#100](https://github.com/openshift/azure-disk-csi-driver-operator/pull/100) * update readme [#99](https://github.com/openshift/azure-disk-csi-driver-operator/pull/99) * simplify workload identity feature enablement [#92](https://github.com/openshift/azure-disk-csi-driver-operator/pull/92) * update readme [#94](https://github.com/openshift/azure-disk-csi-driver-operator/pull/94) * [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#98](https://github.com/openshift/azure-disk-csi-driver-operator/pull/98) * [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/918935767350f9f330b9d6a9c3ee03e9869e7828...160cf624a88f500de7a1f79e6dd9384bb7d17842) ### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/bcf919dc0467f84192758155aac4976df5054da6) * [OCPBUGS-39444](https://issues.redhat.com/browse/OCPBUGS-39444): bump mount-utils to treat ENODEV error as corrupted mount [#78](https://github.com/openshift/azure-file-csi-driver/pull/78) * [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): Rebase v1.29.5 for OCP 4.15 [#65](https://github.com/openshift/azure-file-csi-driver/pull/65) * [OCPBUGS-25697](https://issues.redhat.com/browse/OCPBUGS-25697): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#50](https://github.com/openshift/azure-file-csi-driver/pull/50) * [STOR-1390](https://issues.redhat.com/browse/STOR-1390): Rebase v1.29.2 for OCP 4.15 [#43](https://github.com/openshift/azure-file-csi-driver/pull/43) * [OCPBUGS-24075](https://issues.redhat.com/browse/OCPBUGS-24075): Updating ose-azure-file-csi-driver-container image to be consistent with ART [#44](https://github.com/openshift/azure-file-csi-driver/pull/44) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#36](https://github.com/openshift/azure-file-csi-driver/pull/36) * [OCPBUGS-19110](https://issues.redhat.com/browse/OCPBUGS-19110): Updating azure-file-csi-driver images to be consistent with ART [#34](https://github.com/openshift/azure-file-csi-driver/pull/34) * [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f28a507244d4629404365c89b422f04b9d8d7943...bcf919dc0467f84192758155aac4976df5054da6) ### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/367c4e45899033f7fb7494c0004b83157b6723aa) * [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): add token audience for Azure File [#103](https://github.com/openshift/azure-file-csi-driver-operator/pull/103) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#95](https://github.com/openshift/azure-file-csi-driver-operator/pull/95) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#89](https://github.com/openshift/azure-file-csi-driver-operator/pull/89) * [OCPBUGS-25238](https://issues.redhat.com/browse/OCPBUGS-25238): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#90](https://github.com/openshift/azure-file-csi-driver-operator/pull/90) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#84](https://github.com/openshift/azure-file-csi-driver-operator/pull/84) * [OCPBUGS-22562](https://issues.redhat.com/browse/OCPBUGS-22562): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#82](https://github.com/openshift/azure-file-csi-driver-operator/pull/82) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#81](https://github.com/openshift/azure-file-csi-driver-operator/pull/81) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#75](https://github.com/openshift/azure-file-csi-driver-operator/pull/75) * update readme [#70](https://github.com/openshift/azure-file-csi-driver-operator/pull/70) * simplify workload identity feature enablement [#69](https://github.com/openshift/azure-file-csi-driver-operator/pull/69) * [OCPBUGS-19170](https://issues.redhat.com/browse/OCPBUGS-19170): Updating azure-file-csi-driver-operator images to be consistent with ART [#74](https://github.com/openshift/azure-file-csi-driver-operator/pull/74) * [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/4469d80589595dd5d05f0f0f296505800e3ad527...367c4e45899033f7fb7494c0004b83157b6723aa) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/615b457bcfa1a40e7900585154952aac8194bed4) * [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Added support of capacity reservation group [#110](https://github.com/openshift/machine-api-provider-azure/pull/110) * [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Remove startupScript vmextension lookup [#103](https://github.com/openshift/machine-api-provider-azure/pull/103) * [OCPBUGS-25510](https://issues.redhat.com/browse/OCPBUGS-25510): bump x/crypto [#100](https://github.com/openshift/machine-api-provider-azure/pull/100) * [OCPBUGS-29007](https://issues.redhat.com/browse/OCPBUGS-29007): Don't create availability set when using spot instances [#95](https://github.com/openshift/machine-api-provider-azure/pull/95) * [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Improving performance of VMs created in Azure [#93](https://github.com/openshift/machine-api-provider-azure/pull/93) * [OCPBUGS-24168](https://issues.redhat.com/browse/OCPBUGS-24168): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#86](https://github.com/openshift/machine-api-provider-azure/pull/86) * Update OWNERS [#79](https://github.com/openshift/machine-api-provider-azure/pull/79) * [OCPBUGS-21790](https://issues.redhat.com/browse/OCPBUGS-21790): Bump x/net package to v0.17.0 [#78](https://github.com/openshift/machine-api-provider-azure/pull/78) * [OCPBUGS-20268](https://issues.redhat.com/browse/OCPBUGS-20268): update bad url endpoint termination handler test [#77](https://github.com/openshift/machine-api-provider-azure/pull/77) * [OCPCLOUD-2192](https://issues.redhat.com/browse/OCPCLOUD-2192): Bump k8s packages to v1.28 [#76](https://github.com/openshift/machine-api-provider-azure/pull/76) * [OCPBUGS-19269](https://issues.redhat.com/browse/OCPBUGS-19269): Updating ose-machine-api-provider-azure images to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-azure/pull/75) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/8666a367160c23175f97c5df9db7c1844405865e...615b457bcfa1a40e7900585154952aac8194bed4) ### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1) * [OCPBUGS-32895](https://issues.redhat.com/browse/OCPBUGS-32895): Upgrade go-jose module to 2.6.3 [#17](https://github.com/openshift/azure-workload-identity/pull/17) * [OCPBUGS-22003](https://issues.redhat.com/browse/OCPBUGS-22003): Upgrade golang/x/net for CVE-2023-39325 (4.15) [#13](https://github.com/openshift/azure-workload-identity/pull/13) * [OCPBUGS-19244](https://issues.redhat.com/browse/OCPBUGS-19244): Updating ose-azure-workload-identity-webhook images to be consistent with ART [#6](https://github.com/openshift/azure-workload-identity/pull/6) * [Full changelog](https://github.com/openshift/azure-workload-identity/compare/bcb88d949151223362ecefc12f4e90566599e0e7...2333b7fae0592ae26d77cbac49ce23e7fbaa00b1) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/12ef92cb5ee16b4d4f3d8dff30eb06ca51805f17) * [OCPBUGS-38198](https://issues.redhat.com/browse/OCPBUGS-38198): Remove timed context for gcp client [#8824](https://github.com/openshift/installer/pull/8824) * [OCPBUGS-29591](https://issues.redhat.com/browse/OCPBUGS-29591): vsphere-fix convert if only provided name [#8034](https://github.com/openshift/installer/pull/8034) * [OCPBUGS-32179](https://issues.redhat.com/browse/OCPBUGS-32179): Fix task for attaching IPv6 subnet to router. [#8262](https://github.com/openshift/installer/pull/8262) * [OCPBUGS-34721](https://issues.redhat.com/browse/OCPBUGS-34721): fix usage of host and user CA bundle in the agent ignition [#8512](https://github.com/openshift/installer/pull/8512) * [OCPBUGS-36090](https://issues.redhat.com/browse/OCPBUGS-36090): [release-4.15]: bump go-retryablehttp for CVE fix [#8655](https://github.com/openshift/installer/pull/8655) * [OCPBUGS-37064](https://issues.redhat.com/browse/OCPBUGS-37064): Changed vsphere CPMS to not include fields controlled by failure domains. [#8735](https://github.com/openshift/installer/pull/8735) * [OCPBUGS-37182](https://issues.redhat.com/browse/OCPBUGS-37182): ic: fix typo in warning message [#8770](https://github.com/openshift/installer/pull/8770) * [OCPBUGS-37067](https://issues.redhat.com/browse/OCPBUGS-37067): update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 [#8746](https://github.com/openshift/installer/pull/8746) * [OCPBUGS-33354](https://issues.redhat.com/browse/OCPBUGS-33354), [OCPBUGS-33402](https://issues.redhat.com/browse/OCPBUGS-33402): Use assisted-image-service for ignition editing [#8635](https://github.com/openshift/installer/pull/8635) * : OCPBUGS-36400: PowerVS: add ibmcloud plugins [#8687](https://github.com/openshift/installer/pull/8687) * [OCPBUGS-36225](https://issues.redhat.com/browse/OCPBUGS-36225): Make vSphere default ResourcePool formatting not contain double slash. [#8664](https://github.com/openshift/installer/pull/8664) * [OCPBUGS-35131](https://issues.redhat.com/browse/OCPBUGS-35131), [OCPBUGS-35141](https://issues.redhat.com/browse/OCPBUGS-35141), [OCPBUGS-35144](https://issues.redhat.com/browse/OCPBUGS-35144): [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 [#8646](https://github.com/openshift/installer/pull/8646) * [OCPBUGS-35359](https://issues.redhat.com/browse/OCPBUGS-35359): GCP: Prevent cluster installation with mismatched worker assets and worker replicas [#8581](https://github.com/openshift/installer/pull/8581) * [OCPBUGS-35502](https://issues.redhat.com/browse/OCPBUGS-35502): [release-4.15] azure: bump profile used for network [#8607](https://github.com/openshift/installer/pull/8607) * [OCPBUGS-35586](https://issues.redhat.com/browse/OCPBUGS-35586): [release-4.15] bump github.com/containers/image for CVE fix [#8621](https://github.com/openshift/installer/pull/8621) * [OCPBUGS-31387](https://issues.redhat.com/browse/OCPBUGS-31387): If host is offline or disconnected don't check ver [#8208](https://github.com/openshift/installer/pull/8208) * [OCPBUGS-35355](https://issues.redhat.com/browse/OCPBUGS-35355): baremetal: Don't always enable provisioning-interface.service [#8580](https://github.com/openshift/installer/pull/8580) * [OCPBUGS-35032](https://issues.redhat.com/browse/OCPBUGS-35032): [release-4.15] aws: terraform: add spot instance support for masters [#8540](https://github.com/openshift/installer/pull/8540) * [OCPBUGS-35059](https://issues.redhat.com/browse/OCPBUGS-35059): images: change libvirt-installer base [#8550](https://github.com/openshift/installer/pull/8550) * [OCPBUGS-33672](https://issues.redhat.com/browse/OCPBUGS-33672): add quota support to ca-west-1 [#8412](https://github.com/openshift/installer/pull/8412) * [OCPBUGS-33454](https://issues.redhat.com/browse/OCPBUGS-33454): go.mod: bump aws-sdk-go for ca-west-1 support [#8381](https://github.com/openshift/installer/pull/8381) * [OCPBUGS-33205](https://issues.redhat.com/browse/OCPBUGS-33205): Gcp bootstraping release 4.15 [#8339](https://github.com/openshift/installer/pull/8339) * [OCPBUGS-33542](https://issues.redhat.com/browse/OCPBUGS-33542): images: do not force terraform-providers to be statically linked [#8392](https://github.com/openshift/installer/pull/8392) * [OCPBUGS-29929](https://issues.redhat.com/browse/OCPBUGS-29929): GCP Destroy cleanup correct zones/records [#8062](https://github.com/openshift/installer/pull/8062) * [OCPBUGS-32383](https://issues.redhat.com/browse/OCPBUGS-32383): sdk/aws: add ssh security group rule for compute [#8282](https://github.com/openshift/installer/pull/8282) * [OCPBUGS-32690](https://issues.redhat.com/browse/OCPBUGS-32690): AWS: bump CCO for permission fix [#8302](https://github.com/openshift/installer/pull/8302) * [OCPBUGS-32264](https://issues.redhat.com/browse/OCPBUGS-32264): always save serial logs if they were gathered [#8274](https://github.com/openshift/installer/pull/8274) * [OCPBUGS-30944](https://issues.redhat.com/browse/OCPBUGS-30944): Don't run libvirt validations in agent installer [#8167](https://github.com/openshift/installer/pull/8167) * NO-ISSUE: test fix to support slightly different nmstate error messages [#8285](https://github.com/openshift/installer/pull/8285) * [OCPBUGS-32259](https://issues.redhat.com/browse/OCPBUGS-32259): escape '%' in proxy settings [#8272](https://github.com/openshift/installer/pull/8272) * [OCPBUGS-32355](https://issues.redhat.com/browse/OCPBUGS-32355): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8277](https://github.com/openshift/installer/pull/8277) * [OCPBUGS-31335](https://issues.redhat.com/browse/OCPBUGS-31335): openstack: Honour worker server group policy [#8202](https://github.com/openshift/installer/pull/8202) * : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest [#8220](https://github.com/openshift/installer/pull/8220) * [OCPBUGS-30922](https://issues.redhat.com/browse/OCPBUGS-30922): coreos-installer iso kargs show broken on Agent ISO [#8163](https://github.com/openshift/installer/pull/8163) * [OCPBUGS-30822](https://issues.redhat.com/browse/OCPBUGS-30822): Validate control plane replicas [#8143](https://github.com/openshift/installer/pull/8143) * [OCPBUGS-31274](https://issues.redhat.com/browse/OCPBUGS-31274): IBMCloud: Restrict CIS and DNS Service lookup [#8197](https://github.com/openshift/installer/pull/8197) * [OCPBUGS-30605](https://issues.redhat.com/browse/OCPBUGS-30605): upi: aws: fix typo in worker templates [#8125](https://github.com/openshift/installer/pull/8125) * Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8199](https://github.com/openshift/installer/pull/8199) * [OCPBUGS-31087](https://issues.redhat.com/browse/OCPBUGS-31087): Fix vsi image missing [#8186](https://github.com/openshift/installer/pull/8186) * [OCPBUGS-30098](https://issues.redhat.com/browse/OCPBUGS-30098): feat: add check for SNO bootstrap condition [#8089](https://github.com/openshift/installer/pull/8089) * [OCPBUGS-30601](https://issues.redhat.com/browse/OCPBUGS-30601): update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 [#8122](https://github.com/openshift/installer/pull/8122) * [OCPBUGS-30854](https://issues.redhat.com/browse/OCPBUGS-30854): Power VS: Fix wait_for_workspace [#8159](https://github.com/openshift/installer/pull/8159) * [OCPBUGS-29964](https://issues.redhat.com/browse/OCPBUGS-29964): fix Azure API SKU calls timing out [#8086](https://github.com/openshift/installer/pull/8086) * [OCPBUGS-30792](https://issues.redhat.com/browse/OCPBUGS-30792): Enable deploy by Service ID on PowerVS [#8138](https://github.com/openshift/installer/pull/8138) * [OCPBUGS-30577](https://issues.redhat.com/browse/OCPBUGS-30577): Authn with platform-services-go-sdk for PowerVS [#8118](https://github.com/openshift/installer/pull/8118) * [OCPBUGS-30148](https://issues.redhat.com/browse/OCPBUGS-30148): fix "OpenShiftSDN deprecated" error message [#8094](https://github.com/openshift/installer/pull/8094) * [OCPBUGS-30011](https://issues.redhat.com/browse/OCPBUGS-30011): PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 [#8076](https://github.com/openshift/installer/pull/8076) * [OCPBUGS-29768](https://issues.redhat.com/browse/OCPBUGS-29768): Power VS: Add sleep to allow workspace to configure PER [#8052](https://github.com/openshift/installer/pull/8052) * Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer [#8050](https://github.com/openshift/installer/pull/8050) * [OCPBUGS-29495](https://issues.redhat.com/browse/OCPBUGS-29495): gcp: better error msg when service accnt missing [#8024](https://github.com/openshift/installer/pull/8024) * Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation [#8019](https://github.com/openshift/installer/pull/8019) * [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7996](https://github.com/openshift/installer/pull/7996) * [OCPBUGS-28841](https://issues.redhat.com/browse/OCPBUGS-28841): PowerVS: Add dal12 region [#7977](https://github.com/openshift/installer/pull/7977) * [OCPBUGS-29955](https://issues.redhat.com/browse/OCPBUGS-29955): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8065](https://github.com/openshift/installer/pull/8065) * [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032) * [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035) * [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026) * [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013) * [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016) * [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994) * [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993) * [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973) * [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984) * [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866) * [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971) * [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957) * [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922) * [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928) * [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955) * [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951) * [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921) * [OCPBUGS-27850](https://issues.redhat.com/browse/OCPBUGS-27850): PowerVS: COS region configurable [#7948](https://github.com/openshift/installer/pull/7948) * [OCPBUGS-27814](https://issues.redhat.com/browse/OCPBUGS-27814): [release-4.15] CORS-2950: Remove openshift-sdn as an install-time option [#7935](https://github.com/openshift/installer/pull/7935) * [OCPBUGS-25251](https://issues.redhat.com/browse/OCPBUGS-25251): Changed OKD/FCOS workaround to also support Agent-based Installer [#7830](https://github.com/openshift/installer/pull/7830) * [OCPBUGS-27299](https://issues.redhat.com/browse/OCPBUGS-27299): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7913](https://github.com/openshift/installer/pull/7913) * [OCPBUGS-26515](https://issues.redhat.com/browse/OCPBUGS-26515): preserve category name when trying to find tag category [#7885](https://github.com/openshift/installer/pull/7885) * [OCPBUGS-27311](https://issues.redhat.com/browse/OCPBUGS-27311): Fix depreciated typo [#7912](https://github.com/openshift/installer/pull/7912) * [OCPBUGS-26495](https://issues.redhat.com/browse/OCPBUGS-26495): Fix typo in CloudCredential validation [#7916](https://github.com/openshift/installer/pull/7916) * [CORS-3166](https://issues.redhat.com/browse/CORS-3166): GCP: Add load balancer info to cluster infra [#7903](https://github.com/openshift/installer/pull/7903) * [OCPBUGS-27188](https://issues.redhat.com/browse/OCPBUGS-27188): Redact platform passwords in agent-gather output [#7910](https://github.com/openshift/installer/pull/7910) * [CORS-3168](https://issues.redhat.com/browse/CORS-3168): build: only rebuild terraform providers if needed [#7853](https://github.com/openshift/installer/pull/7853) * [OCPBUGS-27148](https://issues.redhat.com/browse/OCPBUGS-27148): baremetal: correct external_http_url for v6-only BMCs [#7906](https://github.com/openshift/installer/pull/7906) * [CORS-3166](https://issues.redhat.com/browse/CORS-3166): GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS [#7882](https://github.com/openshift/installer/pull/7882) * [OCPBUGS-26495](https://issues.redhat.com/browse/OCPBUGS-26495): Add cloud credential capability validation [#7890](https://github.com/openshift/installer/pull/7890) * [OCPBUGS-26511](https://issues.redhat.com/browse/OCPBUGS-26511): Bump default channel to 4.15 [#7883](https://github.com/openshift/installer/pull/7883) * [OCPBUGS-26051](https://issues.redhat.com/browse/OCPBUGS-26051): aws: validate instance arch [#7868](https://github.com/openshift/installer/pull/7868) * [OCPBUGS-25990](https://issues.redhat.com/browse/OCPBUGS-25990): Fixes for the OpensStack UPI playbooks. [#7863](https://github.com/openshift/installer/pull/7863) * [OCPBUGS-24679](https://issues.redhat.com/browse/OCPBUGS-24679): Modify the terraform variables to support Nutanix Failure Domains [#7813](https://github.com/openshift/installer/pull/7813) * [OCPBUGS-25463](https://issues.redhat.com/browse/OCPBUGS-25463): IBMCloud: Set IBM TF visibility based on URLs [#7844](https://github.com/openshift/installer/pull/7844) * [OCPBUGS-25216](https://issues.redhat.com/browse/OCPBUGS-25216): ic: azure: fix retrieving marketplace image [#7829](https://github.com/openshift/installer/pull/7829) * [OCPBUGS-25192](https://issues.redhat.com/browse/OCPBUGS-25192): Revert "Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… [#7827](https://github.com/openshift/installer/pull/7827) * [CORS-2934](https://issues.redhat.com/browse/CORS-2934): IBMCloud: Update MAPI for BYOK [#7812](https://github.com/openshift/installer/pull/7812) * [METAL-803](https://issues.redhat.com/browse/METAL-803): Update vendoring for baremetal-operator [#7809](https://github.com/openshift/installer/pull/7809) * no-jira: Fix base image reference [#7810](https://github.com/openshift/installer/pull/7810) * [CORS-2952](https://issues.redhat.com/browse/CORS-2952): GCP Set "ClusterHostedDNS" in the Infra CR based on the value of userProvisionedDNS [#7796](https://github.com/openshift/installer/pull/7796) * [CORS-2813](https://issues.redhat.com/browse/CORS-2813): Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap [#7662](https://github.com/openshift/installer/pull/7662) * [OCPBUGS-23140](https://issues.redhat.com/browse/OCPBUGS-23140), [OCPBUGS-23305](https://issues.redhat.com/browse/OCPBUGS-23305): Soften VIP validations for external load-balancer [#7803](https://github.com/openshift/installer/pull/7803) * [AGENT-739](https://issues.redhat.com/browse/AGENT-739): Support for install-config baremetal host BMC fields [#7645](https://github.com/openshift/installer/pull/7645) * [AGENT-729](https://issues.redhat.com/browse/AGENT-729): Support generic platform name for external platform [#7585](https://github.com/openshift/installer/pull/7585) * [MULTIARCH-4042](https://issues.redhat.com/browse/MULTIARCH-4042): Reuse existing Transit Gateway in target Workspace, or create anew [#7592](https://github.com/openshift/installer/pull/7592) * [OCPBUGS-23473](https://issues.redhat.com/browse/OCPBUGS-23473): update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 [#7770](https://github.com/openshift/installer/pull/7770) * [AGENT-615](https://issues.redhat.com/browse/AGENT-615): Split create-cluster-and-infraenv.service [#7364](https://github.com/openshift/installer/pull/7364) * no-jira: image: infra-providers: use base image instead of builder [#7800](https://github.com/openshift/installer/pull/7800) * no-jira: hack: drop hardcoded -j8 in make invocations. [#7799](https://github.com/openshift/installer/pull/7799) * [OCPBUGS-23458](https://issues.redhat.com/browse/OCPBUGS-23458): force destroy bootstrap ign [#7791](https://github.com/openshift/installer/pull/7791) * [OSASINFRA-3261](https://issues.redhat.com/browse/OSASINFRA-3261): OpenStack: support dualstack in UPI [#7727](https://github.com/openshift/installer/pull/7727) * [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678): Patch for Agent Based Installer to support s390x as supported architecture. [#7712](https://github.com/openshift/installer/pull/7712) * [SPLAT-1218](https://issues.redhat.com/browse/SPLAT-1218): AWS BYO VPC support for Wavelength Zones [#7652](https://github.com/openshift/installer/pull/7652) * [CORS-2525](https://issues.redhat.com/browse/CORS-2525): Azure: remove storage account with bootstrap destroy [#7642](https://github.com/openshift/installer/pull/7642) * [AGENT-337](https://issues.redhat.com/browse/AGENT-337): Set VIPs directly in api, instead of install-config override [#7574](https://github.com/openshift/installer/pull/7574) * [OCPVE-648](https://issues.redhat.com/browse/OCPVE-648): gomod: bump api version with CloudCredential cap [#7466](https://github.com/openshift/installer/pull/7466) * [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: ensure proper cleanup on exit [#7693](https://github.com/openshift/installer/pull/7693) * [OCPBUGS-9066](https://issues.redhat.com/browse/OCPBUGS-9066): Retry image download on failure [#7106](https://github.com/openshift/installer/pull/7106) * NO-ISSUE: Remove dead code from 'networking' asset [#7798](https://github.com/openshift/installer/pull/7798) * PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option [#7795](https://github.com/openshift/installer/pull/7795) * [OCPBUGS-24191](https://issues.redhat.com/browse/OCPBUGS-24191): set vmType in azure cloud config [#7793](https://github.com/openshift/installer/pull/7793) * no-jira: pkg/asset: safety nets to keep installer from crashing [#7792](https://github.com/openshift/installer/pull/7792) * [CORS-2934](https://issues.redhat.com/browse/CORS-2934): IBMCloud: Add support for BYOK [#7738](https://github.com/openshift/installer/pull/7738) * [OCPBUGS-23539](https://issues.redhat.com/browse/OCPBUGS-23539): Keep Machine manifests out of OpenShift Manifests asset [#7753](https://github.com/openshift/installer/pull/7753) * [CORS-3020](https://issues.redhat.com/browse/CORS-3020): IBMCloud: Bump IBM TF provider [#7784](https://github.com/openshift/installer/pull/7784) * [MIXEDARCH-310](https://issues.redhat.com/browse/MIXEDARCH-310): Enable the use of the multi payload for agent installer [#7595](https://github.com/openshift/installer/pull/7595) * [CORS-2775](https://issues.redhat.com/browse/CORS-2775): ic: azure: remove deprecated `errors` package [#7778](https://github.com/openshift/installer/pull/7778) * [SPLAT-1126](https://issues.redhat.com/browse/SPLAT-1126): aws/clusterNetworkMTU config to change the MTU for overlay network [#7765](https://github.com/openshift/installer/pull/7765) * [CORS-2785](https://issues.redhat.com/browse/CORS-2785): images: decouple installer and installer-artifacts [#7782](https://github.com/openshift/installer/pull/7782) * [MULTIARCH-3793](https://issues.redhat.com/browse/MULTIARCH-3793): Power VS: Add mad and wdc assupported region [#7773](https://github.com/openshift/installer/pull/7773) * [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Generate Cluster API Machine Manifests [#7771](https://github.com/openshift/installer/pull/7771) * [CORS-2854](https://issues.redhat.com/browse/CORS-2854): azure: Allow users to set visibility to components [#7547](https://github.com/openshift/installer/pull/7547) * [OCPBUGS-24008](https://issues.redhat.com/browse/OCPBUGS-24008): Remove sno_arm.txt integration test [#7718](https://github.com/openshift/installer/pull/7718) * [OCPBUGS-23947](https://issues.redhat.com/browse/OCPBUGS-23947): set client options when interacting with azure api [#7768](https://github.com/openshift/installer/pull/7768) * [CORS-2978](https://issues.redhat.com/browse/CORS-2978): enable AWS SDK Installation through feature gates [#7715](https://github.com/openshift/installer/pull/7715) * [CORS-2798](https://issues.redhat.com/browse/CORS-2798): GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information [#7631](https://github.com/openshift/installer/pull/7631) * [CORS-2845](https://issues.redhat.com/browse/CORS-2845): azure: Enable storage account encryption [#7520](https://github.com/openshift/installer/pull/7520) * [SPLAT-1277](https://issues.redhat.com/browse/SPLAT-1277): unrevert PR 7418; implement vSphere control plane machinesets [#7780](https://github.com/openshift/installer/pull/7780) * [OSASINFRA-3303](https://issues.redhat.com/browse/OSASINFRA-3303): OpenStack: remove generation of trunks name [#7772](https://github.com/openshift/installer/pull/7772) * [AGENT-670](https://issues.redhat.com/browse/AGENT-670): Add assisted-db data to agent-gather [#7719](https://github.com/openshift/installer/pull/7719) * [SPLAT-1160](https://issues.redhat.com/browse/SPLAT-1160): AWS - Support Wavelength Zones with edge pool [#7369](https://github.com/openshift/installer/pull/7369) * Skip cluster config [#7666](https://github.com/openshift/installer/pull/7666) * [OCPBUGS-24031](https://issues.redhat.com/browse/OCPBUGS-24031): Bump Fedora CoreOS to latest stable [#7779](https://github.com/openshift/installer/pull/7779) * no-jira: destroy: azure: store session in the destroy object [#7777](https://github.com/openshift/installer/pull/7777) * [CORS-2975](https://issues.redhat.com/browse/CORS-2975): Add support for il-central-1 in AWS [#7740](https://github.com/openshift/installer/pull/7740) * [CORS-2428](https://issues.redhat.com/browse/CORS-2428): terraform: add build information to binaries [#7763](https://github.com/openshift/installer/pull/7763) * [OCPBUGS-24026](https://issues.redhat.com/browse/OCPBUGS-24026): Add owner for user provided client CA bundle [#7749](https://github.com/openshift/installer/pull/7749) * [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Support Nutanix Failure Domains [#7730](https://github.com/openshift/installer/pull/7730) * [CORS-2775](https://issues.redhat.com/browse/CORS-2775): destroy: azure: remove deprecated `errors` package [#7761](https://github.com/openshift/installer/pull/7761) * no-jira: cmd/openshift-install: Remove "migrate" command [#7601](https://github.com/openshift/installer/pull/7601) * no-jira: go.mod: remove unused terraform-providers-nutanix import [#7762](https://github.com/openshift/installer/pull/7762) * [CORS-2835](https://issues.redhat.com/browse/CORS-2835): pkg/infrastructure: remove ARO build tag [#7745](https://github.com/openshift/installer/pull/7745) * [OCPBUGS-21777](https://issues.redhat.com/browse/OCPBUGS-21777): baremetal: populate customDeploy in advance [#7674](https://github.com/openshift/installer/pull/7674) * [CORS-2933](https://issues.redhat.com/browse/CORS-2933): IBMCloud: Basic service endpoint override [#7632](https://github.com/openshift/installer/pull/7632) * [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce Cluster API Infrastructure manifest generation [#7672](https://github.com/openshift/installer/pull/7672) * [OCPBUGS-22840](https://issues.redhat.com/browse/OCPBUGS-22840): ic/azure: validate field Plan when for marketplace images [#7721](https://github.com/openshift/installer/pull/7721) * [CORS-2604](https://issues.redhat.com/browse/CORS-2604): tag user-provided azure vnet [#7611](https://github.com/openshift/installer/pull/7611) * [MULTIARCH-3964](https://issues.redhat.com/browse/MULTIARCH-3964): Power VS: Control SMT level with machineconfig [#7704](https://github.com/openshift/installer/pull/7704) * no-jira: destroy/azure: fix dropped negation from error comparison [#7758](https://github.com/openshift/installer/pull/7758) * no-jira: destroy/azure: avoid cancelling main context [#7750](https://github.com/openshift/installer/pull/7750) * [OCPCLOUD-2130](https://issues.redhat.com/browse/OCPCLOUD-2130): Fix Failuredomains check on manifests test [#7617](https://github.com/openshift/installer/pull/7617) * [OSASINFRA-3295](https://issues.redhat.com/browse/OSASINFRA-3295): OpenStack: fix client used to list flavors [#7723](https://github.com/openshift/installer/pull/7723) * [OSASINFRA-3294](https://issues.redhat.com/browse/OSASINFRA-3294): OpenStack: fix script to update bootstrap ignition shim [#7743](https://github.com/openshift/installer/pull/7743) * no-jira: images: rename terraform- > infrastructure-providers [#7716](https://github.com/openshift/installer/pull/7716) * [OCPBUGS-23376](https://issues.redhat.com/browse/OCPBUGS-23376): vSphere - when using RP network path is incorrect [#7737](https://github.com/openshift/installer/pull/7737) * no-jira: Stop rendering networks.config CRD [#7732](https://github.com/openshift/installer/pull/7732) * [OCPBUGS-22453](https://issues.redhat.com/browse/OCPBUGS-22453): Fixed systemd-resolved's split dns config in OKD/FCOS [#7634](https://github.com/openshift/installer/pull/7634) * [SPLAT-1218](https://issues.redhat.com/browse/SPLAT-1218): upi/AWS: Templates to provision resources in Wavelength [#7722](https://github.com/openshift/installer/pull/7722) * [AGENT-337](https://issues.redhat.com/browse/AGENT-337): Support both VIP and VIPs in AgentClusterInstall [#7724](https://github.com/openshift/installer/pull/7724) * [OSASINFRA-3229](https://issues.redhat.com/browse/OSASINFRA-3229): Remove support for Kuryr [#7675](https://github.com/openshift/installer/pull/7675) * [CORS-2830](https://issues.redhat.com/browse/CORS-2830): Provision AWS Infrastructure with SDK [#7676](https://github.com/openshift/installer/pull/7676) * [MULTIARCH-4009](https://issues.redhat.com/browse/MULTIARCH-4009): Prepare for varying SysTypes for new datacenters [#7717](https://github.com/openshift/installer/pull/7717) * [MULTIARCH-3789](https://issues.redhat.com/browse/MULTIARCH-3789): Power VS: Remove cloud connection support [#7696](https://github.com/openshift/installer/pull/7696) * [CORS-2876](https://issues.redhat.com/browse/CORS-2876): images/installer-altinfra: initial Dockerfile [#7711](https://github.com/openshift/installer/pull/7711) * Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network [#7694](https://github.com/openshift/installer/pull/7694) * [MULTIARCH-3965](https://issues.redhat.com/browse/MULTIARCH-3965): Check if PER is enabled in the target PowerVS workspace [#7683](https://github.com/openshift/installer/pull/7683) * [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): openstack: document etcd on local disk [#7664](https://github.com/openshift/installer/pull/7664) * [OCPBUGS-23170](https://issues.redhat.com/browse/OCPBUGS-23170): Revert #7418 "SPLAT-1141: implement vSphere control plane machinesets" [#7708](https://github.com/openshift/installer/pull/7708) * [MULTIARCH-2590](https://issues.redhat.com/browse/MULTIARCH-2590): PowerVS create service instance [#7695](https://github.com/openshift/installer/pull/7695) * [SPLAT-1141](https://issues.redhat.com/browse/SPLAT-1141): implement vSphere control plane machinesets [#7418](https://github.com/openshift/installer/pull/7418) * [CORS-2428](https://issues.redhat.com/browse/CORS-2428): images: add Dockerfile for a terraform-providers image [#7687](https://github.com/openshift/installer/pull/7687) * [OSASINFRA-3237](https://issues.redhat.com/browse/OSASINFRA-3237): move controlPlanePort API to GA [#7570](https://github.com/openshift/installer/pull/7570) * [CORS-2835](https://issues.redhat.com/browse/CORS-2835): use build tags to produce installer with alternate infrastructure providers [#7656](https://github.com/openshift/installer/pull/7656) * [CORS-2877](https://issues.redhat.com/browse/CORS-2877): Install Config Feature Gate Validation [#7413](https://github.com/openshift/installer/pull/7413) * [OCPBUGS-22772](https://issues.redhat.com/browse/OCPBUGS-22772): return Terraform statefile on error [#7671](https://github.com/openshift/installer/pull/7671) * NO-JIRA: destroy/aws: replaced deprecated sets syntax [#7680](https://github.com/openshift/installer/pull/7680) * [OCPBUGS-19398](https://issues.redhat.com/browse/OCPBUGS-19398): IBMCloud: Add eu-es region [#7668](https://github.com/openshift/installer/pull/7668) * [OCPBUGS-22830](https://issues.redhat.com/browse/OCPBUGS-22830): fix google cli verson to 447.0.0 [#7663](https://github.com/openshift/installer/pull/7663) * [OCPBUGS-22113](https://issues.redhat.com/browse/OCPBUGS-22113): Do not generate azure-cloud-provider in manual mode for aro builds [#7608](https://github.com/openshift/installer/pull/7608) * [OCPBUGS-22757](https://issues.redhat.com/browse/OCPBUGS-22757): update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 [#7654](https://github.com/openshift/installer/pull/7654) * [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Introduce pkg/clusterapi, system, and local control plane [#7630](https://github.com/openshift/installer/pull/7630) * [OCPBUGS-20403](https://issues.redhat.com/browse/OCPBUGS-20403): OpenStack: add SG rules for compact clusters on UPI [#7576](https://github.com/openshift/installer/pull/7576) * [OCPBUGS-17866](https://issues.redhat.com/browse/OCPBUGS-17866): check GOOGLE_APPLICATION_CREDENTIALS env var [#6863](https://github.com/openshift/installer/pull/6863) * [OCPBUGS-22773](https://issues.redhat.com/browse/OCPBUGS-22773): PowerVS: fix removeFromLoadBalancers [#7653](https://github.com/openshift/installer/pull/7653) * [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7650](https://github.com/openshift/installer/pull/7650) * Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap [#7638](https://github.com/openshift/installer/pull/7638) * [OCPBUGS-18387](https://issues.redhat.com/browse/OCPBUGS-18387): Add Azure ConfidentialVM capability and DiskEncryptionSet validations [#7469](https://github.com/openshift/installer/pull/7469) * [OCPBUGS-22489](https://issues.redhat.com/browse/OCPBUGS-22489): destroy: gcp: fix destroying regional disks [#7643](https://github.com/openshift/installer/pull/7643) * [OCPBUGS-22058](https://issues.redhat.com/browse/OCPBUGS-22058): Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 [#7590](https://github.com/openshift/installer/pull/7590) * [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Skip the deletion of instance profiles marked shared [#7537](https://github.com/openshift/installer/pull/7537) * hack/go-lint: update golanci-lint to v1.53.1 [#7635](https://github.com/openshift/installer/pull/7635) * [OCPBUGS-22655](https://issues.redhat.com/browse/OCPBUGS-22655): Bump Fedora CoreOS to latest stable [#7644](https://github.com/openshift/installer/pull/7644) * bootkube.sh: drop final mention of `machine-os-content` [#7636](https://github.com/openshift/installer/pull/7636) * update tested x86 instance type on 4.14 [#7639](https://github.com/openshift/installer/pull/7639) * [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Skip gatewayd units only on OKD agent-installer [#7629](https://github.com/openshift/installer/pull/7629) * [CORS-2852](https://issues.redhat.com/browse/CORS-2852): Build and package Cluster API and providers [#7620](https://github.com/openshift/installer/pull/7620) * [AGENT-713](https://issues.redhat.com/browse/AGENT-713): Use BM hosts in install-config if not defined in agent-config [#7531](https://github.com/openshift/installer/pull/7531) * [MIXEDARCH-353](https://issues.redhat.com/browse/MIXEDARCH-353): Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage's manifest-list image [#7567](https://github.com/openshift/installer/pull/7567) * openstack: dual stack UPI - create security group rules for IPv6 [#7552](https://github.com/openshift/installer/pull/7552) * [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): bump openshift/api [#7613](https://github.com/openshift/installer/pull/7613) * [AGENT-718](https://issues.redhat.com/browse/AGENT-718): Add vSphere credentials to install-config overrides [#7593](https://github.com/openshift/installer/pull/7593) * Revert #7428 "OCPBUGS-13664: Add KMS encryption keys if provided" [#7625](https://github.com/openshift/installer/pull/7625) * [OCPBUGS-10906](https://issues.redhat.com/browse/OCPBUGS-10906): check extracted base iso coreos version is in sync [#7030](https://github.com/openshift/installer/pull/7030) * [OCPBUGS-4038](https://issues.redhat.com/browse/OCPBUGS-4038): bootstrap: Enable gatewayd units only on RHCOS [#7580](https://github.com/openshift/installer/pull/7580) * [OCPBUGS-21720](https://issues.redhat.com/browse/OCPBUGS-21720): images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 [#6813](https://github.com/openshift/installer/pull/6813) * [CORS-2836](https://issues.redhat.com/browse/CORS-2836): Refactor Stages, encapsulate terraform [#7488](https://github.com/openshift/installer/pull/7488) * [OCPBUGS-20356](https://issues.redhat.com/browse/OCPBUGS-20356): update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 [#7616](https://github.com/openshift/installer/pull/7616) * [OCPBUGS-20364](https://issues.redhat.com/browse/OCPBUGS-20364): azure: validation: validate defaultMachinePlatform [#7584](https://github.com/openshift/installer/pull/7584) * [OCPBUGS-20525](https://issues.redhat.com/browse/OCPBUGS-20525): aws: use security groups from defaultMachinePlatform [#7589](https://github.com/openshift/installer/pull/7589) * [OCPBUGS-13664](https://issues.redhat.com/browse/OCPBUGS-13664): Add KMS encryption keys if provided [#7428](https://github.com/openshift/installer/pull/7428) * [OCPBUGS-5471](https://issues.redhat.com/browse/OCPBUGS-5471): Try to select rendezvousIP among non-worker hosts [#7443](https://github.com/openshift/installer/pull/7443) * [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Rectify GCP label key validation check [#7596](https://github.com/openshift/installer/pull/7596) * Revert skipping integration test agent sno arm [#7561](https://github.com/openshift/installer/pull/7561) * [OCPBUGS-20350](https://issues.redhat.com/browse/OCPBUGS-20350): vSphere,segfault on version check [#7575](https://github.com/openshift/installer/pull/7575) * [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093): skip agent-tui on OCI [#7512](https://github.com/openshift/installer/pull/7512) * [OCPVE-675](https://issues.redhat.com/browse/OCPVE-675): feat: bump api to add OLM capability [#7495](https://github.com/openshift/installer/pull/7495) * Enforcing the serial execution of the integration tests [#7591](https://github.com/openshift/installer/pull/7591) * images: Cleanup CI Dockerfiles [#7507](https://github.com/openshift/installer/pull/7507) * [OCPBUGS-20440](https://issues.redhat.com/browse/OCPBUGS-20440): Warn about host and target compatibility [#7582](https://github.com/openshift/installer/pull/7582) * [OCPBUGS-19444](https://issues.redhat.com/browse/OCPBUGS-19444): Use changes to AgentClusterInstall during loading [#7506](https://github.com/openshift/installer/pull/7506) * OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules [#7577](https://github.com/openshift/installer/pull/7577) * Remove unused method [#7438](https://github.com/openshift/installer/pull/7438) * PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality [#7564](https://github.com/openshift/installer/pull/7564) * [OCPBUGS-19552](https://issues.redhat.com/browse/OCPBUGS-19552): Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved [#7516](https://github.com/openshift/installer/pull/7516) * docs: Described process of adding vGPU capable nodes. [#6606](https://github.com/openshift/installer/pull/6606) * [OCPBUGS-19086](https://issues.redhat.com/browse/OCPBUGS-19086): Check if nmstatectl executable exists in the system [#7492](https://github.com/openshift/installer/pull/7492) * [OCPBUGS-16666](https://issues.redhat.com/browse/OCPBUGS-16666): Change where AdditionalTrustBundle is set [#7485](https://github.com/openshift/installer/pull/7485) * [OCPBUGS-18455](https://issues.redhat.com/browse/OCPBUGS-18455): Unable to disable external CCM for platform external [#7533](https://github.com/openshift/installer/pull/7533) * [OCPBUGS-18552](https://issues.redhat.com/browse/OCPBUGS-18552): Truncate vlan names defined in nmstate if > 15 chars [#7486](https://github.com/openshift/installer/pull/7486) * OpenStack: enable IPv6 primary dual-stack cluster [#7259](https://github.com/openshift/installer/pull/7259) * [OCPBUGS-20110](https://issues.redhat.com/browse/OCPBUGS-20110): Add an unit test - at least one interface must be defined for each node [#7555](https://github.com/openshift/installer/pull/7555) * [OSASINFRA-3199](https://issues.redhat.com/browse/OSASINFRA-3199): Configure User-Agent for OpenStack API calls [#7548](https://github.com/openshift/installer/pull/7548) * [OCPBUGS-17757](https://issues.redhat.com/browse/OCPBUGS-17757): check credentials type to handle different gcp authentication methods [#7422](https://github.com/openshift/installer/pull/7422) * Docs: Fix openstack command for image update in upi installation [#7556](https://github.com/openshift/installer/pull/7556) * PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions [#7563](https://github.com/openshift/installer/pull/7563) * PowerVS: Remove deprecated errors package [#7544](https://github.com/openshift/installer/pull/7544) * Disable pxe sno arm integration test [#7557](https://github.com/openshift/installer/pull/7557) * Inefficient wait for all clusteroperators [#7535](https://github.com/openshift/installer/pull/7535) * [OCPBUGS-15844](https://issues.redhat.com/browse/OCPBUGS-15844): Enable FIPS in agent ISO [#7540](https://github.com/openshift/installer/pull/7540) * [OCPBUGS-20058](https://issues.redhat.com/browse/OCPBUGS-20058): Use updated ansible-core for Openstack image [#7549](https://github.com/openshift/installer/pull/7549) * OWNERS: Remove obsolete agent reviewers [#7545](https://github.com/openshift/installer/pull/7545) * [OCPBUGS-5728](https://issues.redhat.com/browse/OCPBUGS-5728): Log "agent wait-for" commands to .openshift_install.log [#7452](https://github.com/openshift/installer/pull/7452) * [OCPBUGS-19092](https://issues.redhat.com/browse/OCPBUGS-19092): Enable serial console for external OCI platform [#7511](https://github.com/openshift/installer/pull/7511) * [OCPBUGS-18690](https://issues.redhat.com/browse/OCPBUGS-18690): ic: azure: validate NVMe-only family types [#7500](https://github.com/openshift/installer/pull/7500) * [CORS-2479](https://issues.redhat.com/browse/CORS-2479): agent: Ensure registries.conf is world readable [#6745](https://github.com/openshift/installer/pull/6745) * add jbtrystram to coreOS approvers and reviewers [#7464](https://github.com/openshift/installer/pull/7464) * [OCPBUGS-19093](https://issues.redhat.com/browse/OCPBUGS-19093), [OCPBUGS-19688](https://issues.redhat.com/browse/OCPBUGS-19688): Allow agent-tui to use serial console [#7526](https://github.com/openshift/installer/pull/7526) * Tweaks to validateRendezvousIPNotWorker [#7437](https://github.com/openshift/installer/pull/7437) * [OCPBUGS-18986](https://issues.redhat.com/browse/OCPBUGS-18986): Tag aws instance profiles. [#7510](https://github.com/openshift/installer/pull/7510) * [OCPBUGS-19376](https://issues.redhat.com/browse/OCPBUGS-19376): GCP default value for service account [#7519](https://github.com/openshift/installer/pull/7519) * [MULTIARCH-3701](https://issues.redhat.com/browse/MULTIARCH-3701): Enable ppc64le for agent installer [#7366](https://github.com/openshift/installer/pull/7366) * pkg/asset/installconfig/powervs: fix dropped error [#7419](https://github.com/openshift/installer/pull/7419) * [OCPBUGS-19699](https://issues.redhat.com/browse/OCPBUGS-19699): Remove warning about CPUPartitioning [#7527](https://github.com/openshift/installer/pull/7527) * [OCPBUGS-18187](https://issues.redhat.com/browse/OCPBUGS-18187): Increase bootstrap timeout for vSphere platform by 30 mins [#7518](https://github.com/openshift/installer/pull/7518) * [OCPBUGS-18830](https://issues.redhat.com/browse/OCPBUGS-18830): AWS terraform bootstrap destroy will not refresh state [#7491](https://github.com/openshift/installer/pull/7491) * [OCPBUGS-12707](https://issues.redhat.com/browse/OCPBUGS-12707): always write AWS cloud.conf [#7514](https://github.com/openshift/installer/pull/7514) * [AGENT-710](https://issues.redhat.com/browse/AGENT-710): Use invoker for bootstrap template generation [#7508](https://github.com/openshift/installer/pull/7508) * [OCPBUGS-18876](https://issues.redhat.com/browse/OCPBUGS-18876): Pass CPUPartitioning via install-config overrides if set [#7513](https://github.com/openshift/installer/pull/7513) * OpenStack: fix IPv6 docs [#7482](https://github.com/openshift/installer/pull/7482) * [OCPBUGS-18945](https://issues.redhat.com/browse/OCPBUGS-18945): update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 [#7499](https://github.com/openshift/installer/pull/7499) * LICENSE: Update [#7502](https://github.com/openshift/installer/pull/7502) * [OCPBUGS-19286](https://issues.redhat.com/browse/OCPBUGS-19286): Updating ose-installer-artifacts images to be consistent with ART [#7496](https://github.com/openshift/installer/pull/7496) * [SPLAT-1170](https://issues.redhat.com/browse/SPLAT-1170): enable cloud controller manager type to be defined [#7457](https://github.com/openshift/installer/pull/7457) * OpenStack: Set external network for cloud-provider [#7411](https://github.com/openshift/installer/pull/7411) * [OCPBUGS-17724](https://issues.redhat.com/browse/OCPBUGS-17724): Graceful fail for AWS getUser on destroy [#7429](https://github.com/openshift/installer/pull/7429) * AGENT: publish services diagrams [#7323](https://github.com/openshift/installer/pull/7323) * [OCPBUGS-19149](https://issues.redhat.com/browse/OCPBUGS-19149): Updating ose-baremetal-installer images to be consistent with ART [#7494](https://github.com/openshift/installer/pull/7494) * [OCPBUGS-19130](https://issues.redhat.com/browse/OCPBUGS-19130): Updating ose-installer images to be consistent with ART [#7493](https://github.com/openshift/installer/pull/7493) * [OCPBUGS-17218](https://issues.redhat.com/browse/OCPBUGS-17218): Warn when firewall rull missing. [#7417](https://github.com/openshift/installer/pull/7417) * [OSASINFRA-3236](https://issues.redhat.com/browse/OSASINFRA-3236): deps: Bump gophercloud to v1.6.0 [#7208](https://github.com/openshift/installer/pull/7208) * [OCPBUGS-19037](https://issues.redhat.com/browse/OCPBUGS-19037): Handle agent tui failure gracefully [#7490](https://github.com/openshift/installer/pull/7490) * [OCPBUGS-19017](https://issues.redhat.com/browse/OCPBUGS-19017): Add Net capabilities to dnsmasq container [#7487](https://github.com/openshift/installer/pull/7487) * [OCPBUGS-18113](https://issues.redhat.com/browse/OCPBUGS-18113): Do not set FailureDomains on CPMS when in a single zone Azure region [#7448](https://github.com/openshift/installer/pull/7448) * [AGENT-702](https://issues.redhat.com/browse/AGENT-702): Generate minimal ISO for external platform [#7450](https://github.com/openshift/installer/pull/7450) * [OCPBUGS-18304](https://issues.redhat.com/browse/OCPBUGS-18304): for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7451](https://github.com/openshift/installer/pull/7451) * Implement workaround to allow SNO installations for OKD/FCOS [#7445](https://github.com/openshift/installer/pull/7445) * [Full changelog](https://github.com/openshift/installer/compare/3343d79fafcc7582e02d08dcba17744f15106afe...12ef92cb5ee16b4d4f3d8dff30eb06ca51805f17) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/73a72cc821224eb7ad0fad25d3bcc8272658238b) * [OCPBUGS-30876](https://issues.redhat.com/browse/OCPBUGS-30876): Bump golang-protobuf version [#214](https://github.com/openshift/cluster-api-provider-baremetal/pull/214) * [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210) * [OCPBUGS-24108](https://issues.redhat.com/browse/OCPBUGS-24108): Updating baremetal-machine-controller-container image to be consistent with ART [#205](https://github.com/openshift/cluster-api-provider-baremetal/pull/205) * NO-ISSUE: Log when applying updates to BareMetalHost [#203](https://github.com/openshift/cluster-api-provider-baremetal/pull/203) * [OCPBUGS-21794](https://issues.redhat.com/browse/OCPBUGS-21794): Uplift x/net to v0.17.0 [#197](https://github.com/openshift/cluster-api-provider-baremetal/pull/197) * [OCPBUGS-19178](https://issues.redhat.com/browse/OCPBUGS-19178): Updating baremetal-machine-controller images to be consistent with ART [#196](https://github.com/openshift/cluster-api-provider-baremetal/pull/196) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb20cdac93ab9647e9c9cabafb45c7811789b477...73a72cc821224eb7ad0fad25d3bcc8272658238b) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/62a7d56e20785c3f4cf02cb2511270a7aa32deea) * [OCPBUGS-38939](https://issues.redhat.com/browse/OCPBUGS-38939): [OCP] Ability to disable agent power off after deployment [#373](https://github.com/openshift/baremetal-operator/pull/373) * [OCPBUGS-34682](https://issues.redhat.com/browse/OCPBUGS-34682): PreprovisioningImage should not be created on poweroff [#358](https://github.com/openshift/baremetal-operator/pull/358) * [OCPBUGS-24117](https://issues.redhat.com/browse/OCPBUGS-24117): Updating ose-baremetal-operator-container image to be consistent with ART [#323](https://github.com/openshift/baremetal-operator/pull/323) * [METAL-376](https://issues.redhat.com/browse/METAL-376): Merge upstream [#322](https://github.com/openshift/baremetal-operator/pull/322) * [METAL-376](https://issues.redhat.com/browse/METAL-376): Re-enable RAID interfaces [#319](https://github.com/openshift/baremetal-operator/pull/319) * [OCPBUGS-21777](https://issues.redhat.com/browse/OCPBUGS-21777): Do not update instance_info and deploy_interface for active nodes [#316](https://github.com/openshift/baremetal-operator/pull/316) * [OCPBUGS-8764](https://issues.redhat.com/browse/OCPBUGS-8764): Merge upstream [#315](https://github.com/openshift/baremetal-operator/pull/315) * Merge upstream [#314](https://github.com/openshift/baremetal-operator/pull/314) * [OCPBUGS-21736](https://issues.redhat.com/browse/OCPBUGS-21736): Uplift x/net to v0.17.0 [#313](https://github.com/openshift/baremetal-operator/pull/313) * Merge upstream [#303](https://github.com/openshift/baremetal-operator/pull/303) * [OCPBUGS-19191](https://issues.redhat.com/browse/OCPBUGS-19191): Updating ose-baremetal-operator images to be consistent with ART [#302](https://github.com/openshift/baremetal-operator/pull/302) * Merge upstream [#301](https://github.com/openshift/baremetal-operator/pull/301) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/937b5fd7a151920c48f2d9588911e66b903a6e38...62a7d56e20785c3f4cf02cb2511270a7aa32deea) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c) * [OCPBUGS-37704](https://issues.redhat.com/browse/OCPBUGS-37704): Change mechanism of debug flag [#325](https://github.com/openshift/baremetal-runtimecfg/pull/325) * [OCPBUGS-36278](https://issues.redhat.com/browse/OCPBUGS-36278): Fix handling of ELB Node IP detection [#322](https://github.com/openshift/baremetal-runtimecfg/pull/322) * [OCPBUGS-35543](https://issues.redhat.com/browse/OCPBUGS-35543): Add support for OVN HostCidrs annotation [#319](https://github.com/openshift/baremetal-runtimecfg/pull/319) * [OCPBUGS-32024](https://issues.redhat.com/browse/OCPBUGS-32024): Decrease log level when detecting node IP [#304](https://github.com/openshift/baremetal-runtimecfg/pull/304) * [OCPBUGS-29338](https://issues.redhat.com/browse/OCPBUGS-29338): Ignore egress IP when selecting Node IP [#299](https://github.com/openshift/baremetal-runtimecfg/pull/299) * [OCPBUGS-24070](https://issues.redhat.com/browse/OCPBUGS-24070): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#289](https://github.com/openshift/baremetal-runtimecfg/pull/289) * [OCPBUGS-26927](https://issues.redhat.com/browse/OCPBUGS-26927): Add .snyk file to ignore vendor and test files [#293](https://github.com/openshift/baremetal-runtimecfg/pull/293) * [CORS-2818](https://issues.redhat.com/browse/CORS-2818): Adding ability to render Cloud LB IPs [#286](https://github.com/openshift/baremetal-runtimecfg/pull/286) * [OCPBUGS-23432](https://issues.redhat.com/browse/OCPBUGS-23432): Use shorter IP label for keepalived VIP [#287](https://github.com/openshift/baremetal-runtimecfg/pull/287) * [OCPBUGS-22204](https://issues.redhat.com/browse/OCPBUGS-22204): deps: upgrade x/sys [#280](https://github.com/openshift/baremetal-runtimecfg/pull/280) * [OCPBUGS-19492](https://issues.redhat.com/browse/OCPBUGS-19492): Increase timeout for bootstrap kubeapi [#276](https://github.com/openshift/baremetal-runtimecfg/pull/276) * [OCPBUGS-19098](https://issues.redhat.com/browse/OCPBUGS-19098): Updating baremetal-runtimecfg images to be consistent with ART [#274](https://github.com/openshift/baremetal-runtimecfg/pull/274) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/393a268d0ae6e8cacc75d0b60b91bf6105fb9360...1fbb2c0c1e6af304a673d5ac43803d4bb5dca95c) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4e8d6894744986c8765f1856137103f5ef6b903d) * [OCPBUGS-39426](https://issues.redhat.com/browse/OCPBUGS-39426): Ignore pruning when deployment points to replicationcontroller [#1865](https://github.com/openshift/oc/pull/1865) * [OCPBUGS-36329](https://issues.redhat.com/browse/OCPBUGS-36329): Set required-scc annotation to privileged for node debug pods [#1818](https://github.com/openshift/oc/pull/1818) * [OCPBUGS-35201](https://issues.redhat.com/browse/OCPBUGS-35201): Bump joelanford/ignore to bump go-git to 5.11.0 [#1798](https://github.com/openshift/oc/pull/1798) * [OCPBUGS-32840](https://issues.redhat.com/browse/OCPBUGS-32840): Bump go-jose indirect reference to 2.6.3 [#1749](https://github.com/openshift/oc/pull/1749) * [OCPBUGS-31879](https://issues.redhat.com/browse/OCPBUGS-31879): Add OIDC specific certificate authority bundle flag [#1730](https://github.com/openshift/oc/pull/1730) * [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Remove some of newapp unit tests relying on external deprecated images [#1726](https://github.com/openshift/oc/pull/1726) * [OCPBUGS-30286](https://issues.redhat.com/browse/OCPBUGS-30286): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1698](https://github.com/openshift/oc/pull/1698) * [OCPBUGS-30270](https://issues.redhat.com/browse/OCPBUGS-30270): Introduce --issuer-url flag in oc login [#1696](https://github.com/openshift/oc/pull/1696) * [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672) * [WRKLDS-1041](https://issues.redhat.com/browse/WRKLDS-1041): oc login: Built-in cred exec plugin implementation and wiring [#1658](https://github.com/openshift/oc/pull/1658) * [OCPBUGS-24695](https://issues.redhat.com/browse/OCPBUGS-24695): Remove deprecated password defaulting in default config flag [#1620](https://github.com/openshift/oc/pull/1620) * [OCPBUGS-25016](https://issues.redhat.com/browse/OCPBUGS-25016): Bump api to include the new CloudCredential cap [#1623](https://github.com/openshift/oc/pull/1623) * [OCPBUGS-24375](https://issues.redhat.com/browse/OCPBUGS-24375): Overwrite template's namespace with the explicit one [#1612](https://github.com/openshift/oc/pull/1612) * [OCPBUGS-23723](https://issues.redhat.com/browse/OCPBUGS-23723): Add .snyk file to exclude vendor and ignore unit tests [#1604](https://github.com/openshift/oc/pull/1604) * [ACM-7713](https://issues.redhat.com/browse/ACM-7713): Skip related objects which are invalid [#1550](https://github.com/openshift/oc/pull/1550) * [OTA-1035](https://issues.redhat.com/browse/OTA-1035): `adm upgrade status` Add control plane update status [#1597](https://github.com/openshift/oc/pull/1597) * [OCPBUGS-23071](https://issues.redhat.com/browse/OCPBUGS-23071): Mention inspection completion in the error message [#1601](https://github.com/openshift/oc/pull/1601) * NO-JIRA: Add client version in must-gather summary [#1603](https://github.com/openshift/oc/pull/1603) * [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): Promote some experimental commands, deprecate others [#1596](https://github.com/openshift/oc/pull/1596) * [WRKLDS-860](https://issues.redhat.com/browse/WRKLDS-860): Add volume usage percentage checker script in must-gather's gather container [#1533](https://github.com/openshift/oc/pull/1533) * [OTA-1035](https://issues.redhat.com/browse/OTA-1035): Allow testing `adm upgrade status` on mock data [#1595](https://github.com/openshift/oc/pull/1595) * NO-JIRA: Drop the experimental info for registry login and must-gather commands [#1594](https://github.com/openshift/oc/pull/1594) * Updating content type variable name for CLI docs generation [#1591](https://github.com/openshift/oc/pull/1591) * [WRKLDS-874](https://issues.redhat.com/browse/WRKLDS-874): oc whoami: Ask from selfsubjectreview and fallback to internal oauth [#1588](https://github.com/openshift/oc/pull/1588) * moved cert sharing library [#1532](https://github.com/openshift/oc/pull/1532) * [OCPBUGS-21612](https://issues.redhat.com/browse/OCPBUGS-21612): Use mutex to prevent concurrent writes [#1589](https://github.com/openshift/oc/pull/1589) * [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Add directive example to kubelet-restart command [#1586](https://github.com/openshift/oc/pull/1586) * pkg/cli/admin/upgrade/status: Add update duration [#1583](https://github.com/openshift/oc/pull/1583) * oc/*: gracefully fail when user group is not configured [#1585](https://github.com/openshift/oc/pull/1585) * create/identity: fail gracefully when no user API exists [#1582](https://github.com/openshift/oc/pull/1582) * pkg/cli/admin/update: Add tech-preview 'oc adm upgrade status' [#1554](https://github.com/openshift/oc/pull/1554) * [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Fix some commands incorrect examples [#1581](https://github.com/openshift/oc/pull/1581) * [OCPBUGS-9340](https://issues.redhat.com/browse/OCPBUGS-9340): pkg/cli/admin/upgrade: Warn on unrecognized subcommands [#1557](https://github.com/openshift/oc/pull/1557) * [OCPBUGS-20381](https://issues.redhat.com/browse/OCPBUGS-20381): Bump golang.org/x/net to v0.17.0 [#1578](https://github.com/openshift/oc/pull/1578) * [OCPBUGS-20528](https://issues.redhat.com/browse/OCPBUGS-20528): Revert "OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror" [#1575](https://github.com/openshift/oc/pull/1575) * [OCPBUGS-20474](https://issues.redhat.com/browse/OCPBUGS-20474): Set ImportPolicy to PreserveOriginal to honor --keep-manifest-list when mirroring a payload to an image stream [#1572](https://github.com/openshift/oc/pull/1572) * [OCPBUGS-20342](https://issues.redhat.com/browse/OCPBUGS-20342): Reflect container's exit code for long running tasks not attached to terminal [#1571](https://github.com/openshift/oc/pull/1571) * [OCPBUGS-20063](https://issues.redhat.com/browse/OCPBUGS-20063): regeneratemco: explicitly check for PlatformStatus field [#1555](https://github.com/openshift/oc/pull/1555) * [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Bump distribution/v3 to sync with oc-mirror [#1556](https://github.com/openshift/oc/pull/1556) * [OCPBUGS-20181](https://issues.redhat.com/browse/OCPBUGS-20181): Use quay redis image instead docker mysql [#1559](https://github.com/openshift/oc/pull/1559) * [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Introduce refreshable dynamic credential store for image manifests [#1540](https://github.com/openshift/oc/pull/1540) * Updating excluded list of unsupported oc adm commands in MicroShift [#1558](https://github.com/openshift/oc/pull/1558) * [WINC-692](https://issues.redhat.com/browse/WINC-692): Add Windows node functionality to debug command [#1524](https://github.com/openshift/oc/pull/1524) * [WRKLDS-537](https://issues.redhat.com/browse/WRKLDS-537): oc adm release info: Add --first-parent to git log for simplification [#1552](https://github.com/openshift/oc/pull/1552) * [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#1547](https://github.com/openshift/oc/pull/1547) * [OCPBUGS-19282](https://issues.redhat.com/browse/OCPBUGS-19282): Updating ose-tools images to be consistent with ART [#1545](https://github.com/openshift/oc/pull/1545) * [OCPBUGS-19281](https://issues.redhat.com/browse/OCPBUGS-19281): Updating openshift-enterprise-deployer images to be consistent with ART [#1544](https://github.com/openshift/oc/pull/1544) * [OCPBUGS-19517](https://issues.redhat.com/browse/OCPBUGS-19517): remove unsupported commands from microshift docs [#1548](https://github.com/openshift/oc/pull/1548) * [OCPBUGS-19283](https://issues.redhat.com/browse/OCPBUGS-19283): Updating ose-cli-artifacts images to be consistent with ART [#1546](https://github.com/openshift/oc/pull/1546) * [OCPBUGS-19129](https://issues.redhat.com/browse/OCPBUGS-19129): Updating openshift-enterprise-cli images to be consistent with ART [#1542](https://github.com/openshift/oc/pull/1542) * [Full changelog](https://github.com/openshift/oc/compare/f7b14a92857ad1f28be2e2eaec3ae8229d4c2761...4e8d6894744986c8765f1856137103f5ef6b903d) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/41fd0b37e100a337e5424f3dd14951020febb724) * [OCPBUGS-41235](https://issues.redhat.com/browse/OCPBUGS-41235): List secrets in batches to avoid api timeout [#754](https://github.com/openshift/cloud-credential-operator/pull/754) * [OCPBUGS-38377](https://issues.redhat.com/browse/OCPBUGS-38377): Update google.golang.org/grpc v1.65.0 [#749](https://github.com/openshift/cloud-credential-operator/pull/749) * [OCPBUGS-37461](https://issues.redhat.com/browse/OCPBUGS-37461): Set required-scc for openshift workloads [#736](https://github.com/openshift/cloud-credential-operator/pull/736) * [OCPBUGS-37277](https://issues.redhat.com/browse/OCPBUGS-37277): Update to cloud.google.com/go/storage v1.43.0 [#729](https://github.com/openshift/cloud-credential-operator/pull/729) * [OCPBUGS-37288](https://issues.redhat.com/browse/OCPBUGS-37288): GCP passthrough permissions check to ignore problematic permissions. [#730](https://github.com/openshift/cloud-credential-operator/pull/730) * [OCPBUGS-37419](https://issues.redhat.com/browse/OCPBUGS-37419): SNYK ignore go-client misreporting [#738](https://github.com/openshift/cloud-credential-operator/pull/738) * [OCPBUGS-37061](https://issues.redhat.com/browse/OCPBUGS-37061): Update to azidentity v1.7.0 [#728](https://github.com/openshift/cloud-credential-operator/pull/728) * [OCPBUGS-36030](https://issues.redhat.com/browse/OCPBUGS-36030): IBM/go-sdk-core update to v5.17.4 [#720](https://github.com/openshift/cloud-credential-operator/pull/720) * [OCPBUGS-36291](https://issues.redhat.com/browse/OCPBUGS-36291): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#709](https://github.com/openshift/cloud-credential-operator/pull/709) * [OCPBUGS-32900](https://issues.redhat.com/browse/OCPBUGS-32900): Upgrade go-jose module to 2.6.3 [#696](https://github.com/openshift/cloud-credential-operator/pull/696) * [OCPBUGS-31924](https://issues.redhat.com/browse/OCPBUGS-31924): aws: remove non-existent permission [#691](https://github.com/openshift/cloud-credential-operator/pull/691) * [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686) * [OCPBUGS-29155](https://issues.redhat.com/browse/OCPBUGS-29155): Fix the ClusterOperator watch of the status controller [#675](https://github.com/openshift/cloud-credential-operator/pull/675) * [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674) * [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649) * [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660) * [OCPBUGS-27919](https://issues.redhat.com/browse/OCPBUGS-27919): Report manualpodidentity mode in metrics when using Azure Workload Identity [#661](https://github.com/openshift/cloud-credential-operator/pull/661) * [OCPBUGS-27117](https://issues.redhat.com/browse/OCPBUGS-27117): Write manifests when AWS IAM roles already exist. [#653](https://github.com/openshift/cloud-credential-operator/pull/653) * [OCPBUGS-26510](https://issues.redhat.com/browse/OCPBUGS-26510): Use live client for metrics [#646](https://github.com/openshift/cloud-credential-operator/pull/646) * [OCPVE-647](https://issues.redhat.com/browse/OCPVE-647): annotate manifests with capability name [#594](https://github.com/openshift/cloud-credential-operator/pull/594) * [CCO-338](https://issues.redhat.com/browse/CCO-338): cmd/operator: use correct kubeconfig for all clients [#638](https://github.com/openshift/cloud-credential-operator/pull/638) * [CCO-244](https://issues.redhat.com/browse/CCO-244): gcp-ro-credentialrequest to use granular permissions [#626](https://github.com/openshift/cloud-credential-operator/pull/626) * [OCPBUGS-23178](https://issues.redhat.com/browse/OCPBUGS-23178): Enable GCP sync to undelete custom roles [#637](https://github.com/openshift/cloud-credential-operator/pull/637) * [OCPBUGS-13597](https://issues.redhat.com/browse/OCPBUGS-13597): Discover AWS dns suffix from partition and region. [#596](https://github.com/openshift/cloud-credential-operator/pull/596) * [CCO-372](https://issues.redhat.com/browse/CCO-372): Azure Workload Identity info in CredsRequests creates a Secret [#587](https://github.com/openshift/cloud-credential-operator/pull/587) * [OCPBUGS-20478](https://issues.redhat.com/browse/OCPBUGS-20478): Explicitly set the vsphere secret credential data on sync. [#628](https://github.com/openshift/cloud-credential-operator/pull/628) * [CCO-440](https://issues.redhat.com/browse/CCO-440): Bump k8s deps to 0.28.3 [#614](https://github.com/openshift/cloud-credential-operator/pull/614) * [CCO-192](https://issues.redhat.com/browse/CCO-192): Use Leases for leader election [#627](https://github.com/openshift/cloud-credential-operator/pull/627) * [CCO-430](https://issues.redhat.com/browse/CCO-430): Use per-project custom roles instead of per-cluster custom roles [#611](https://github.com/openshift/cloud-credential-operator/pull/611) * snyk: exclude vendor/ [#613](https://github.com/openshift/cloud-credential-operator/pull/613) * [OCPBUGS-22369](https://issues.redhat.com/browse/OCPBUGS-22369): explicitly set azure oidc bucket to allow public blob access [#610](https://github.com/openshift/cloud-credential-operator/pull/610) * Upgrade golang/x/net for CVE-2023-39325 [#609](https://github.com/openshift/cloud-credential-operator/pull/609) * [OCPBUGS-21745](https://issues.redhat.com/browse/OCPBUGS-21745): azure create-managed-identites to add cloud controller manager to network resource group [#607](https://github.com/openshift/cloud-credential-operator/pull/607) * Removing andrew from OWNERS [#606](https://github.com/openshift/cloud-credential-operator/pull/606) * Revert #592 "CCO-421: *: split pod identity webhooks from core controller" [#604](https://github.com/openshift/cloud-credential-operator/pull/604) * [CCO-421](https://issues.redhat.com/browse/CCO-421): *: split pod identity webhooks from core controller [#592](https://github.com/openshift/cloud-credential-operator/pull/592) * Docs: azure workload identity no longer requires TechPreviewNoUpgrade [#603](https://github.com/openshift/cloud-credential-operator/pull/603) * [CCO-437](https://issues.redhat.com/browse/CCO-437): Document steps for in-place migration to Azure AD Workload Identity. [#598](https://github.com/openshift/cloud-credential-operator/pull/598) * [OCPBUGS-19123](https://issues.redhat.com/browse/OCPBUGS-19123): Updating ose-cloud-credential-operator images to be consistent with ART [#600](https://github.com/openshift/cloud-credential-operator/pull/600) * [OCPBUGS-18246](https://issues.redhat.com/browse/OCPBUGS-18246): Add networkResourceGroupName parameter for Azure [#597](https://github.com/openshift/cloud-credential-operator/pull/597) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/67fe51ea7cc53e73aba861d75696fc051b404d4d...41fd0b37e100a337e5424f3dd14951020febb724) ### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/6864da0642026d6004df171539fa9fd5bcb6c2df) * [OCPBUGS-33780](https://issues.redhat.com/browse/OCPBUGS-33780): Avoid panic when looking up attachedOutboundRule.ID in azure [#145](https://github.com/openshift/cloud-network-config-controller/pull/145) * [OCPBUGS-31754](https://issues.redhat.com/browse/OCPBUGS-31754): Avoid nil pointer panic while assigning private IP on Azure [#137](https://github.com/openshift/cloud-network-config-controller/pull/137) * Kube 1.28 rebase for cloud-network-config-controller [#124](https://github.com/openshift/cloud-network-config-controller/pull/124) * Bump CI image [#123](https://github.com/openshift/cloud-network-config-controller/pull/123) * [OCPBUGS-5491](https://issues.redhat.com/browse/OCPBUGS-5491): Azure: skip backend pool if attached to an outbound rule [#121](https://github.com/openshift/cloud-network-config-controller/pull/121) * [OCPBUGS-19163](https://issues.redhat.com/browse/OCPBUGS-19163): Updating ose-cloud-network-config-controller images to be consistent with ART [#122](https://github.com/openshift/cloud-network-config-controller/pull/122) * [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/1bd04641f210d19370f782086949f827bfb7a264...6864da0642026d6004df171539fa9fd5bcb6c2df) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1) * [OCPBUGS-34795](https://issues.redhat.com/browse/OCPBUGS-34795): set required-scc for openshift workloads [#675](https://github.com/openshift/cluster-authentication-operator/pull/675) * NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652) * [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647) * [OCPBUGS-24081](https://issues.redhat.com/browse/OCPBUGS-24081): Updating ose-cluster-authentication-operator-container image to be consistent with ART [#643](https://github.com/openshift/cluster-authentication-operator/pull/643) * [OCPBUGS-24217](https://issues.redhat.com/browse/OCPBUGS-24217): Annotate certs with ownership information [#642](https://github.com/openshift/cluster-authentication-operator/pull/642) * [OCPBUGS-21719](https://issues.redhat.com/browse/OCPBUGS-21719): go.mod: bump golang.org/x/net to v0.17.0 [#635](https://github.com/openshift/cluster-authentication-operator/pull/635) * [OCPBUGS-17987](https://issues.redhat.com/browse/OCPBUGS-17987): generate only >=0 number of random bits [#629](https://github.com/openshift/cluster-authentication-operator/pull/629) * [OCPBUGS-19125](https://issues.redhat.com/browse/OCPBUGS-19125): Updating ose-cluster-authentication-operator images to be consistent with ART [#634](https://github.com/openshift/cluster-authentication-operator/pull/634) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e...7aaa40eb28afdae8c5994b672b33cd4be31cc7d1) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/e78ea20540f3f445f7417cf4fe138738f3a4143a) * [OCPBUGS-40930](https://issues.redhat.com/browse/OCPBUGS-40930): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#315](https://github.com/openshift/kubernetes-autoscaler/pull/315) * [OCPBUGS-33885](https://issues.redhat.com/browse/OCPBUGS-33885): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#301](https://github.com/openshift/kubernetes-autoscaler/pull/301) * [OCPBUGS-31464](https://issues.redhat.com/browse/OCPBUGS-31464): add check for taint.value == nil [#293](https://github.com/openshift/kubernetes-autoscaler/pull/293) * [OCPBUGS-27750](https://issues.redhat.com/browse/OCPBUGS-27750): Fix unstructured taint parsing in Cluster API provider [#282](https://github.com/openshift/kubernetes-autoscaler/pull/282) * [OCPBUGS-23576](https://issues.redhat.com/browse/OCPBUGS-23576): Add Snyk file to exclude vendor directory on scan [#275](https://github.com/openshift/kubernetes-autoscaler/pull/275) * [OCPBUGS-24066](https://issues.redhat.com/browse/OCPBUGS-24066): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART [#270](https://github.com/openshift/kubernetes-autoscaler/pull/270) * [OCPBUGS-24146](https://issues.redhat.com/browse/OCPBUGS-24146): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART [#269](https://github.com/openshift/kubernetes-autoscaler/pull/269) * [OCPCLOUD-2195](https://issues.redhat.com/browse/OCPCLOUD-2195): rebase on upstream 1.28.0 release [#265](https://github.com/openshift/kubernetes-autoscaler/pull/265) * Update OWNERS [#264](https://github.com/openshift/kubernetes-autoscaler/pull/264) * [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg [#261](https://github.com/openshift/kubernetes-autoscaler/pull/261) * [OCPBUGS-19232](https://issues.redhat.com/browse/OCPBUGS-19232): Updating vertical-pod-autoscaler images to be consistent with ART [#262](https://github.com/openshift/kubernetes-autoscaler/pull/262) * [OCPBUGS-18852](https://issues.redhat.com/browse/OCPBUGS-18852): Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#260](https://github.com/openshift/kubernetes-autoscaler/pull/260) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/9d87281f73fc26a5fac17c50dcf63c2de17f619a...e78ea20540f3f445f7417cf4fe138738f3a4143a) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8425d88b5bedd5d22acfb0f6c0edf929ec401288) * [OCPBUGS-41798](https://issues.redhat.com/browse/OCPBUGS-41798): set required-scc for openshift workloads [#332](https://github.com/openshift/cluster-autoscaler-operator/pull/332) * [OCPBUGS-31947](https://issues.redhat.com/browse/OCPBUGS-31947): Update x/net to v0.24.0 [#319](https://github.com/openshift/cluster-autoscaler-operator/pull/319) * [OCPBUGS-23706](https://issues.redhat.com/browse/OCPBUGS-23706): Add Snyk file to exclude vendor directory on scan [#307](https://github.com/openshift/cluster-autoscaler-operator/pull/307) * [OCPBUGS-24102](https://issues.redhat.com/browse/OCPBUGS-24102): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART [#302](https://github.com/openshift/cluster-autoscaler-operator/pull/302) * [OCPCLOUD-2137](https://issues.redhat.com/browse/OCPCLOUD-2137): Check scale from zero annotations on MachineSets [#294](https://github.com/openshift/cluster-autoscaler-operator/pull/294) * [OCPBUGS-21791](https://issues.redhat.com/browse/OCPBUGS-21791): Bump x/net package to v0.17.0 [#295](https://github.com/openshift/cluster-autoscaler-operator/pull/295) * Update OWNERS [#296](https://github.com/openshift/cluster-autoscaler-operator/pull/296) * [OCPCLOUD-2196](https://issues.redhat.com/browse/OCPCLOUD-2196): Update dependencies k8s 1.28 [#293](https://github.com/openshift/cluster-autoscaler-operator/pull/293) * [OCPBUGS-18137](https://issues.redhat.com/browse/OCPBUGS-18137): Provide the architecture of the control plane as argument to --scale-up-from-zero-default-arch [#284](https://github.com/openshift/cluster-autoscaler-operator/pull/284) * [OCPBUGS-18954](https://issues.redhat.com/browse/OCPBUGS-18954): Ensure status reporter caches exit if they don't sync [#285](https://github.com/openshift/cluster-autoscaler-operator/pull/285) * [OCPBUGS-19411](https://issues.redhat.com/browse/OCPBUGS-19411): cluster-autoscaler-operator: clusterrole add clusteroperators watch [#287](https://github.com/openshift/cluster-autoscaler-operator/pull/287) * [OCPBUGS-19169](https://issues.redhat.com/browse/OCPBUGS-19169): Updating ose-cluster-autoscaler-operator images to be consistent with ART [#286](https://github.com/openshift/cluster-autoscaler-operator/pull/286) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/32854baae386c4d6854d7fd8658fdff75588e919...8425d88b5bedd5d22acfb0f6c0edf929ec401288) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/8fb839973d44ff978aaa25201008de7228908e52) * [OCPBUGS-31948](https://issues.redhat.com/browse/OCPBUGS-31948): bump x/net to 0.23.0 [#437](https://github.com/openshift/cluster-baremetal-operator/pull/437) * [OCPBUGS-29787](https://issues.redhat.com/browse/OCPBUGS-29787): Update the leader election durations to be tolerant [#405](https://github.com/openshift/cluster-baremetal-operator/pull/405) * [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402) * [OCPBUGS-20572](https://issues.redhat.com/browse/OCPBUGS-20572): Obsolete protocols for webhook [#375](https://github.com/openshift/cluster-baremetal-operator/pull/375) * [OCPBUGS-24125](https://issues.redhat.com/browse/OCPBUGS-24125): Updating ose-cluster-baremetal-operator-container image to be consistent with ART [#392](https://github.com/openshift/cluster-baremetal-operator/pull/392) * NO-ISSUE: Fix ordering problem in the unit tests [#390](https://github.com/openshift/cluster-baremetal-operator/pull/390) * [OCPBUGS-23131](https://issues.redhat.com/browse/OCPBUGS-23131), [OCPBUGS-23149](https://issues.redhat.com/browse/OCPBUGS-23149): fix IRONIC_EXTERNAL_URL_V6 [#380](https://github.com/openshift/cluster-baremetal-operator/pull/380) * [MGMT-16047](https://issues.redhat.com/browse/MGMT-16047): update dependencies [#383](https://github.com/openshift/cluster-baremetal-operator/pull/383) * NO-ISSUE: Stop linting when building the image [#343](https://github.com/openshift/cluster-baremetal-operator/pull/343) * [OCPBUGS-20563](https://issues.redhat.com/browse/OCPBUGS-20563): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#374](https://github.com/openshift/cluster-baremetal-operator/pull/374) * [OCPBUGS-17003](https://issues.redhat.com/browse/OCPBUGS-17003): Trigger reconcile on service-ca CO [#365](https://github.com/openshift/cluster-baremetal-operator/pull/365) * [OCPBUGS-21741](https://issues.redhat.com/browse/OCPBUGS-21741): Uplift x/net to v0.17.0 [#368](https://github.com/openshift/cluster-baremetal-operator/pull/368) * Jira OCPBUGS-16919: Trigger reconcile if Secret openshift-config/pull-secret changes [#352](https://github.com/openshift/cluster-baremetal-operator/pull/352) * [OCPBUGS-18788](https://issues.redhat.com/browse/OCPBUGS-18788): Remove metrics port from baremetal-operator [#361](https://github.com/openshift/cluster-baremetal-operator/pull/361) * [OCPBUGS-19203](https://issues.redhat.com/browse/OCPBUGS-19203): Updating ose-cluster-baremetal-operator images to be consistent with ART [#362](https://github.com/openshift/cluster-baremetal-operator/pull/362) * [OCPBUGS-17589](https://issues.redhat.com/browse/OCPBUGS-17589): Guard against nil PlatformStatus [#359](https://github.com/openshift/cluster-baremetal-operator/pull/359) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/270579c644f97dd9f2e8e771c939833ffee1dd3e...8fb839973d44ff978aaa25201008de7228908e52) ### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/0849c462de13b9a5765b9a8c882acb9e6e8bf39e) * [OCPBUGS-24147](https://issues.redhat.com/browse/OCPBUGS-24147): Updating ose-cluster-bootstrap-container image to be consistent with ART [#101](https://github.com/openshift/cluster-bootstrap/pull/101) * [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100) * [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/93fba13f576831ba0953190663ab26aaf5766984...0849c462de13b9a5765b9a8c882acb9e6e8bf39e) ### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/2053e13cb0fda9188e9b685db83c1e1f492e6efa) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#206](https://github.com/openshift/cluster-api/pull/206) * [OCPBUGS-33200](https://issues.redhat.com/browse/OCPBUGS-33200): Bump protobuf to v1.33.0 [#204](https://github.com/openshift/cluster-api/pull/204) * [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#201](https://github.com/openshift/cluster-api/pull/201) * [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): openshift: generate separate manifest for core CAPI CRDs [#198](https://github.com/openshift/cluster-api/pull/198) * [OCPBUGS-24311](https://issues.redhat.com/browse/OCPBUGS-24311): Updating ose-cluster-api-container image to be consistent with ART [#188](https://github.com/openshift/cluster-api/pull/188) * [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#189](https://github.com/openshift/cluster-api/pull/189) * [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#179](https://github.com/openshift/cluster-api/pull/179) * Update OWNERS [#183](https://github.com/openshift/cluster-api/pull/183) * [OCPBUGS-21645](https://issues.redhat.com/browse/OCPBUGS-21645): Bump golang.org/x/net to v0.17.0 [#182](https://github.com/openshift/cluster-api/pull/182) * [OCPBUGS-17286](https://issues.redhat.com/browse/OCPBUGS-17286), [OCPCLOUD-2222](https://issues.redhat.com/browse/OCPCLOUD-2222): Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master [#181](https://github.com/openshift/cluster-api/pull/181) * [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-cluster-api images to be consistent with ART [#180](https://github.com/openshift/cluster-api/pull/180) * [Full changelog](https://github.com/openshift/cluster-api/compare/ae83c5533706d539dc492229eebd67533468e48b...2053e13cb0fda9188e9b685db83c1e1f492e6efa) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/203435ef87a2bed13fc43db893deb8bee1dff97f) * [OCPBUGS-37849](https://issues.redhat.com/browse/OCPBUGS-37849): fix: sort CredentialsRequest manifests after namespace [#193](https://github.com/openshift/cluster-capi-operator/pull/193) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests-gen: also add CustomNoUpgrade annotation value [#166](https://github.com/openshift/cluster-capi-operator/pull/166) * [OCPBUGS-30118](https://issues.redhat.com/browse/OCPBUGS-30118): create openshift-cluster-api namespace in CustomNoUpgrade [#167](https://github.com/openshift/cluster-capi-operator/pull/167) * [OCPBUGS-25505](https://issues.redhat.com/browse/OCPBUGS-25505): UPSTREAM: <carry>: bump x/crypto [#165](https://github.com/openshift/cluster-capi-operator/pull/165) * [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): manifests-gen: store core capi crds also in their own manifest [#160](https://github.com/openshift/cluster-capi-operator/pull/160) * [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158) * [OCPBUGS-26413](https://issues.redhat.com/browse/OCPBUGS-26413), [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#155](https://github.com/openshift/cluster-capi-operator/pull/155) * [OCPBUGS-24150](https://issues.redhat.com/browse/OCPBUGS-24150): Updating ose-cluster-capi-operator-container image to be consistent with ART [#147](https://github.com/openshift/cluster-capi-operator/pull/147) * [OCPVE-787](https://issues.redhat.com/browse/OCPVE-787): annotate credentials request manifests [#143](https://github.com/openshift/cluster-capi-operator/pull/143) * [OCPBUGS-24301](https://issues.redhat.com/browse/OCPBUGS-24301): openstack: Don't substitute manager container command [#148](https://github.com/openshift/cluster-capi-operator/pull/148) * [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255), [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): refactor: remove cluster-api-operator, rework assets/manifests [#121](https://github.com/openshift/cluster-capi-operator/pull/121) * [OCPCLOUD-2012](https://issues.redhat.com/browse/OCPCLOUD-2012): Add granular permissions for Azure [#124](https://github.com/openshift/cluster-capi-operator/pull/124) * [OCPBUGS-19842](https://issues.redhat.com/browse/OCPBUGS-19842): Limit deletion webhook to openshift namespace [#135](https://github.com/openshift/cluster-capi-operator/pull/135) * [OCPBUGS-23467](https://issues.redhat.com/browse/OCPBUGS-23467): manifests/0000_30_cluster-api_10_webhooks: Deletion manifest for validating-webhook-configuration [#145](https://github.com/openshift/cluster-capi-operator/pull/145) * [OCPBUGS-19841](https://issues.redhat.com/browse/OCPBUGS-19841): Add format key into the worker-user-data secret [#140](https://github.com/openshift/cluster-capi-operator/pull/140) * [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Bump CAPG to v1.5.0 [#142](https://github.com/openshift/cluster-capi-operator/pull/142) * [OCPBUGS-22403](https://issues.redhat.com/browse/OCPBUGS-22403): Disable CAPI Azure Infrastructure Provider [#141](https://github.com/openshift/cluster-capi-operator/pull/141) * Update OWNERS [#133](https://github.com/openshift/cluster-capi-operator/pull/133) * [OCPBUGS-17287](https://issues.redhat.com/browse/OCPBUGS-17287), [OCPBUGS-21642](https://issues.redhat.com/browse/OCPBUGS-21642), [OCPCLOUD-2214](https://issues.redhat.com/browse/OCPCLOUD-2214): Bump capi/capi providers/k8s 1.27 [#132](https://github.com/openshift/cluster-capi-operator/pull/132) * [OCPBUGS-19240](https://issues.redhat.com/browse/OCPBUGS-19240): Updating ose-cluster-capi-operator images to be consistent with ART [#129](https://github.com/openshift/cluster-capi-operator/pull/129) * [MULTIARCH-3761](https://issues.redhat.com/browse/MULTIARCH-3761): Power VS CAPI Remove deprecated flag [#128](https://github.com/openshift/cluster-capi-operator/pull/128) * [OCPBUGS-18504](https://issues.redhat.com/browse/OCPBUGS-18504): e2e: set ControlPlaneEndpoint in AWSCluster [#126](https://github.com/openshift/cluster-capi-operator/pull/126) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b4c4fb13a40c2c71b8f21fe379befad95e341a77...203435ef87a2bed13fc43db893deb8bee1dff97f) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/56181136d91dff7bac4aa5acb2c1461381ac6e34) * [OCPBUGS-36821](https://issues.redhat.com/browse/OCPBUGS-36821): Increase GCP Concurrent Service Syncs to 10 [#359](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/359) * [OCPBUGS-33547](https://issues.redhat.com/browse/OCPBUGS-33547): update azure and ash tolerations on node manager [#343](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/343) * Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC [#339](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/339) * [OCPBUGS-25751](https://issues.redhat.com/browse/OCPBUGS-25751): Add Snyk file to exclude vendor directory on scan [#314](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/314) * [OCPBUGS-26480](https://issues.redhat.com/browse/OCPBUGS-26480), [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#320](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/320) * [OCPBUGS-26210](https://issues.redhat.com/browse/OCPBUGS-26210): Adds CloudConfigTransformer for Azure [#319](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/319) * [OCPVE-788](https://issues.redhat.com/browse/OCPVE-788): annotate credentials request manifests [#293](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/293) * Undo TRT-1378: Revert for "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#306](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/306) * [TRT-1378](https://issues.redhat.com/browse/TRT-1378): Revert #304 "Undo TRT-1374: Revert for \"OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS\"" [#305](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/305) * Undo TRT-1374: Revert for "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#304](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/304) * [OCPBUGS-24127](https://issues.redhat.com/browse/OCPBUGS-24127): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART [#302](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/302) * [TRT-1374](https://issues.redhat.com/browse/TRT-1374): Revert #301 "OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS" [#303](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/303) * [OCPCLOUD-2278](https://issues.redhat.com/browse/OCPCLOUD-2278): Add kube-rbac-proxy container & ensure metrics are only available via HTTPS [#301](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/301) * [OCPBUGS-23996](https://issues.redhat.com/browse/OCPBUGS-23996): trust bundle CA controller: add owner annotation for ccm-trusted-ca configmap [#300](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/300) * [OCPBUGS-23308](https://issues.redhat.com/browse/OCPBUGS-23308): Set IPFamilyPriority and ExcludeNetworkSubnetCIDR for vSphere IPv6-only [#299](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/299) * [OSASINFRA-3289](https://issues.redhat.com/browse/OSASINFRA-3289): OpenStack: Remove Kuryr bits [#294](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/294) * [OSASINFRA-3284](https://issues.redhat.com/browse/OSASINFRA-3284): Add Events to OpenStack's RBAC [#292](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/292) * [OCPBUGS-20213](https://issues.redhat.com/browse/OCPBUGS-20213): Add azure cloud config transformer [#291](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/291) * Update OWNERS [#290](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/290) * [OCPBUGS-17652](https://issues.redhat.com/browse/OCPBUGS-17652): apply necessary RBAC for the alibaba cloud controller manager [#276](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/276) * [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Additional permissions for internal load balancer on STS [#287](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/287) * [OCPCLOUD-2188](https://issues.redhat.com/browse/OCPCLOUD-2188): Bump k8s packages to v1.28 [#285](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/285) * update readme to stable status [#286](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/286) * [OCPBUGS-19205](https://issues.redhat.com/browse/OCPBUGS-19205): Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART [#278](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/278) * [OCPBUGS-18641](https://issues.redhat.com/browse/OCPBUGS-18641): Set dual-stack IPFamilyPriority for vSphere [#279](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/279) * [OCPBUGS-18841](https://issues.redhat.com/browse/OCPBUGS-18841): Ensure subnets read permission for granular roles [#281](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/281) * [OCPBUGS-14718](https://issues.redhat.com/browse/OCPBUGS-14718): Add message for CABundleControllerDegradedCondition error [#275](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/275) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33a706e8a2430fa67f4472dbd0f61cea8de6bd6f...56181136d91dff7bac4aa5acb2c1461381ac6e34) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818) * [OCPBUGS-36151](https://issues.redhat.com/browse/OCPBUGS-36151): Set required-scc for openshift workloads [#420](https://github.com/openshift/cluster-config-operator/pull/420) * [OCPBUGS-26542](https://issues.redhat.com/browse/OCPBUGS-26542): remove duplicate manifests in image [#395](https://github.com/openshift/cluster-config-operator/pull/395) * [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402) * Revert "OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART" [#388](https://github.com/openshift/cluster-config-operator/pull/388) * [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator-container image to be consistent with ART [#385](https://github.com/openshift/cluster-config-operator/pull/385) * read featuregates from openshift/api [#349](https://github.com/openshift/cluster-config-operator/pull/349) * yield CRDs and empty resource rendering to api imge [#379](https://github.com/openshift/cluster-config-operator/pull/379) * [CNF-10479](https://issues.redhat.com/browse/CNF-10479): Bump up api to pull mixed cpu allocation feature gate [#386](https://github.com/openshift/cluster-config-operator/pull/386) * [NP-793](https://issues.redhat.com/browse/NP-793): Bump github.com/openshift/api [#375](https://github.com/openshift/cluster-config-operator/pull/375) * create manifest directory during rendering [#382](https://github.com/openshift/cluster-config-operator/pull/382) * [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Update for Nutanix failure domains api changes [#378](https://github.com/openshift/cluster-config-operator/pull/378) * create parent dir for output [#381](https://github.com/openshift/cluster-config-operator/pull/381) * Allow split rendering between cluster-config and openshift/api [#380](https://github.com/openshift/cluster-config-operator/pull/380) * [MON-3480](https://issues.redhat.com/browse/MON-3480): Add MetricsServer FeatureGate [#377](https://github.com/openshift/cluster-config-operator/pull/377) * NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie [#361](https://github.com/openshift/cluster-config-operator/pull/361) * [MCO-813](https://issues.redhat.com/browse/MCO-813): add MCN featuregate [#368](https://github.com/openshift/cluster-config-operator/pull/368) * [SPLAT-1127](https://issues.redhat.com/browse/SPLAT-1127): bring in vSphere CPMSO API updates [#342](https://github.com/openshift/cluster-config-operator/pull/342) * [OCPBUGS-21781](https://issues.redhat.com/browse/OCPBUGS-21781): Update openshift/api package to latest version [#365](https://github.com/openshift/cluster-config-operator/pull/365) * [OCPBUGS-21744](https://issues.redhat.com/browse/OCPBUGS-21744): bump library-go to include switch to HTTP/1.1 [#366](https://github.com/openshift/cluster-config-operator/pull/366) * [CFE-887](https://issues.redhat.com/browse/CFE-887): Bump openshift/api to add DNSNameResolver. [#364](https://github.com/openshift/cluster-config-operator/pull/364) * Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. [#358](https://github.com/openshift/cluster-config-operator/pull/358) * [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Remove Build CRD [#360](https://github.com/openshift/cluster-config-operator/pull/360) * Remove AdmissionWebhookMatchConditions feature gate [#359](https://github.com/openshift/cluster-config-operator/pull/359) * [OCPVE-708](https://issues.redhat.com/browse/OCPVE-708): feat: bump(api) [#357](https://github.com/openshift/cluster-config-operator/pull/357) * [OCPCLOUD-1989](https://issues.redhat.com/browse/OCPCLOUD-1989): Promote GCP CCM from TPNU to default [#319](https://github.com/openshift/cluster-config-operator/pull/319) * [OCPBUGS-19106](https://issues.redhat.com/browse/OCPBUGS-19106): Updating ose-cluster-config-operator images to be consistent with ART [#353](https://github.com/openshift/cluster-config-operator/pull/353) * [CCO-412](https://issues.redhat.com/browse/CCO-412): Bump API to promote azureWorkloadIdentity to defaultFeatures [#351](https://github.com/openshift/cluster-config-operator/pull/351) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/91fa980a5be1d3c91786ff41a0a9394adb75671f...0b4c69fd7e282b9037cbb2b6e2d09c96bcc29818) ### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c03231f93a4630b94d86dde98688f357777c14b6) * [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#326](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/326) * [OCPBUGS-24632](https://issues.redhat.com/browse/OCPBUGS-24632): Prevent rollout due to irrelevant path artifacts [#317](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/317) * [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#318](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/318) * [OCPBUGS-34971](https://issues.redhat.com/browse/OCPBUGS-34971): Add unreadyNodeGracePeriod for allowing brief node hiccups [#299](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/299) * [OCPBUGS-35496](https://issues.redhat.com/browse/OCPBUGS-35496): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#308](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/308) * [OCPBUGS-35255](https://issues.redhat.com/browse/OCPBUGS-35255): Improved debugging of API listing errors [#301](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/301) * [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec [#290](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/290) * [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. [#289](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/289) * [OCPBUGS-29419](https://issues.redhat.com/browse/OCPBUGS-29419): Never delete a Machine when there's a single Machine in an index [#280](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/280) * [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#279](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/279) * [OCPBUGS-24140](https://issues.redhat.com/browse/OCPBUGS-24140): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART [#266](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/266) * [SPLAT-1280](https://issues.redhat.com/browse/SPLAT-1280): update documentation for vSphere [#267](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/267) * [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Add support for Nutanix failure domains [#258](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/258) * [SPLAT-1129](https://issues.redhat.com/browse/SPLAT-1129): adding failure domain awareness for vSphere [#228](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/228) * [OCPCLOUD-2297](https://issues.redhat.com/browse/OCPCLOUD-2297): webhook/openstack: validate etcd block device size [#264](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/264) * Revert #239 "OCPCLOUD-2167: Test unhealthy node cases" [#262](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/262) * OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices [#255](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/255) * [OCPCLOUD-2167](https://issues.redhat.com/browse/OCPCLOUD-2167): Test unhealthy node cases [#239](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/239) * [OCPBUGS-17851](https://issues.redhat.com/browse/OCPBUGS-17851): Reimplement "OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD" [#234](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/234) * [SPLAT-1211](https://issues.redhat.com/browse/SPLAT-1211): recognize topology and failure domains represented by the infrastructure resource [#250](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/250) * Update OWNERS [#253](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/253) * [OCPBUGS-21863](https://issues.redhat.com/browse/OCPBUGS-21863): webhooks: set min version TLS 1.2 [#252](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/252) * [OCPBUGS-21641](https://issues.redhat.com/browse/OCPBUGS-21641): Bump golang.org/x/net to v0.17.0 [#251](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/251) * [OCPBUGS-17288](https://issues.redhat.com/browse/OCPBUGS-17288), [OCPCLOUD-2179](https://issues.redhat.com/browse/OCPCLOUD-2179): Update dependencies to k8s 1.28 [#248](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/248) * [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): e2e: gcp e2-custom increase memory [#246](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/246) * [OCPBUGS-20070](https://issues.redhat.com/browse/OCPBUGS-20070): fix: e2e: add gcp custom type to test framework [#244](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/244) * [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Check CPMS events are not present when we expect error [#243](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/243) * [OCPCLOUD-2169](https://issues.redhat.com/browse/OCPCLOUD-2169): Add events for machine creation/deletion [#242](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/242) * [OCPBUGS-19226](https://issues.redhat.com/browse/OCPBUGS-19226): Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART [#241](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/241) * [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/074a22ce411beae063af06423ecf3458c67e9cc3...c03231f93a4630b94d86dde98688f357777c14b6) ### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/65dbb12b710b7126f662f5f7f2d8272f9f6868cc) * [OCPBUGS-36377](https://issues.redhat.com/browse/OCPBUGS-36377): Set required-scc for openshift workloads [#211](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/211) * [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): create suitable role and roleBinding for csi-snapshot-webhook [#203](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/203) * [OCPBUGS-25240](https://issues.redhat.com/browse/OCPBUGS-25240): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#180](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/180) * [OCPBUGS-24099](https://issues.redhat.com/browse/OCPBUGS-24099): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART [#176](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/176) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#175](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/175) * [OCPBUGS-22569](https://issues.redhat.com/browse/OCPBUGS-22569): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#173](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/173) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#172](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/172) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#166](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/166) * [STOR-1443](https://issues.redhat.com/browse/STOR-1443): Restart webhook Pods if `csi-snapshot-webhook-secret` changed [#157](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/157) * [OCPBUGS-19162](https://issues.redhat.com/browse/OCPBUGS-19162): Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#160](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/160) * [OCPBUGS-3680](https://issues.redhat.com/browse/OCPBUGS-3680): Move readonlyRootFilesystem to the right place [#159](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/159) * [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/d4a1162514ecbf248b04e6e8625d17bc2b775ccd...65dbb12b710b7126f662f5f7f2d8272f9f6868cc) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/49290d7db2194df73dfaeb1e719580dabf166690) * [OCPBUGS-32093](https://issues.redhat.com/browse/OCPBUGS-32093): Add RBAC related to featuregates to fix hypershift upgrade [#407](https://github.com/openshift/cluster-dns-operator/pull/407) * [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Enable topology-aware hints iff nodes in >=2 zones [#399](https://github.com/openshift/cluster-dns-operator/pull/399) * [OCPBUGS-24082](https://issues.redhat.com/browse/OCPBUGS-24082): Updating ose-cluster-dns-operator-container image to be consistent with ART [#396](https://github.com/openshift/cluster-dns-operator/pull/396) * [OCPBUGS-23741](https://issues.redhat.com/browse/OCPBUGS-23741): Bump to k8s.io v0.28.3, controller-runtime v0.16.3 [#395](https://github.com/openshift/cluster-dns-operator/pull/395) * [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Ignore max unavailable for status [#386](https://github.com/openshift/cluster-dns-operator/pull/386) * [OCPBUGS-22018](https://issues.redhat.com/browse/OCPBUGS-22018): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#387](https://github.com/openshift/cluster-dns-operator/pull/387) * [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "Revert "Set DNS DaemonSet's maxSurge value to 10%"" [#384](https://github.com/openshift/cluster-dns-operator/pull/384) * [OCPBUGS-19510](https://issues.redhat.com/browse/OCPBUGS-19510): test/e2e: Set controller-runtime logger [#381](https://github.com/openshift/cluster-dns-operator/pull/381) * [OCPBUGS-19126](https://issues.redhat.com/browse/OCPBUGS-19126): Updating ose-cluster-dns-operator images to be consistent with ART [#380](https://github.com/openshift/cluster-dns-operator/pull/380) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/5553a22698ac7fce2cc401ed5884eb1bdb36a02d...49290d7db2194df73dfaeb1e719580dabf166690) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b72a596d1f588da8eca821f28f286dfd609691d1) * [OCPBUGS-33564](https://issues.redhat.com/browse/OCPBUGS-33564): return errors in wait-for-ceo [#1261](https://github.com/openshift/cluster-etcd-operator/pull/1261) * [OCPBUGS-32952](https://issues.redhat.com/browse/OCPBUGS-32952): remove etcd-health-probe log [#1257](https://github.com/openshift/cluster-etcd-operator/pull/1257) * [OCPBUGS-31942](https://issues.redhat.com/browse/OCPBUGS-31942): update golang x net [#1253](https://github.com/openshift/cluster-etcd-operator/pull/1253) * [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#1220](https://github.com/openshift/cluster-etcd-operator/pull/1220) * [OCPBUGS-30915](https://issues.redhat.com/browse/OCPBUGS-30915): CEO aliveness check should only detect deadlocks [#1225](https://github.com/openshift/cluster-etcd-operator/pull/1225) * [OCPBUGS-30042](https://issues.redhat.com/browse/OCPBUGS-30042): fix condition name type [#1212](https://github.com/openshift/cluster-etcd-operator/pull/1212) * [OCPBUGS-28628](https://issues.redhat.com/browse/OCPBUGS-28628): fix panic in health check timeouts [#1191](https://github.com/openshift/cluster-etcd-operator/pull/1191) * [OCPBUGS-29717](https://issues.redhat.com/browse/OCPBUGS-29717): [4.15] Replace nodelister with master nodelister everywhere [#1206](https://github.com/openshift/cluster-etcd-operator/pull/1206) * [OCPBUGS-24087](https://issues.redhat.com/browse/OCPBUGS-24087): Updating cluster-etcd-operator-container image to be consistent with ART [#1169](https://github.com/openshift/cluster-etcd-operator/pull/1169) * [MON-3287](https://issues.redhat.com/browse/MON-3287): manage RBAC resources for prometheus to scrape openshift-etcd [#1164](https://github.com/openshift/cluster-etcd-operator/pull/1164) * Revert "OCPBUGS-17199: remove revision stability check from bootstrap complet…" [#1167](https://github.com/openshift/cluster-etcd-operator/pull/1167) * [OCPBUGS-23461](https://issues.redhat.com/browse/OCPBUGS-23461): Add annotation in the etcd-guard static pod for worklo… [#1161](https://github.com/openshift/cluster-etcd-operator/pull/1161) * [OCPBUGS-21922](https://issues.redhat.com/browse/OCPBUGS-21922): fixing CVE-2023-39325 by updating dependencies [#1141](https://github.com/openshift/cluster-etcd-operator/pull/1141) * [OCPBUGS-17199](https://issues.redhat.com/browse/OCPBUGS-17199): remove revision stability check from bootstrap complet… [#1087](https://github.com/openshift/cluster-etcd-operator/pull/1087) * [ETCD-478](https://issues.redhat.com/browse/ETCD-478): Use golang etcd client for auto backups [#1099](https://github.com/openshift/cluster-etcd-operator/pull/1099) * [OCPBUGS-19987](https://issues.redhat.com/browse/OCPBUGS-19987): relax readiness to local serializable requests [#1134](https://github.com/openshift/cluster-etcd-operator/pull/1134) * [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): prioritize podman pull in etcdctl dl [#1132](https://github.com/openshift/cluster-etcd-operator/pull/1132) * [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): remove UpgradeBackupController [#1129](https://github.com/openshift/cluster-etcd-operator/pull/1129) * [ETCD-187](https://issues.redhat.com/browse/ETCD-187): add dashboards CPU iotwait on master nodes [#1119](https://github.com/openshift/cluster-etcd-operator/pull/1119) * [OCPBUGS-19528](https://issues.redhat.com/browse/OCPBUGS-19528): introduce backup removal controller [#1126](https://github.com/openshift/cluster-etcd-operator/pull/1126) * [OCPBUGS-19137](https://issues.redhat.com/browse/OCPBUGS-19137): Updating cluster-etcd-operator images to be consistent with ART [#1115](https://github.com/openshift/cluster-etcd-operator/pull/1115) * [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1123](https://github.com/openshift/cluster-etcd-operator/pull/1123) * [OCPBUGS-19052](https://issues.redhat.com/browse/OCPBUGS-19052): Avoid caching etcdctl on cluster-backup.sh [#1113](https://github.com/openshift/cluster-etcd-operator/pull/1113) * indicate ownership of etcd certificates [#1110](https://github.com/openshift/cluster-etcd-operator/pull/1110) * [OCPBUGS-18990](https://issues.redhat.com/browse/OCPBUGS-18990): restore the correct static pod list [#1111](https://github.com/openshift/cluster-etcd-operator/pull/1111) * [OCPBUGS-18357](https://issues.redhat.com/browse/OCPBUGS-18357): prepend authfile to podman create [#1105](https://github.com/openshift/cluster-etcd-operator/pull/1105) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/42629b1d6b82c006d01af486e9939fe46756b1ac...b72a596d1f588da8eca821f28f286dfd609691d1) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/43f90e101ebf8f7bfb5ac7043fe1067876d25e8c) * [OCPBUGS-39099](https://issues.redhat.com/browse/OCPBUGS-39099): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1111](https://github.com/openshift/cluster-image-registry-operator/pull/1111) * [OCPBUGS-38895](https://issues.redhat.com/browse/OCPBUGS-38895): pkg/resource: invoke update-ca-trust extract with --output [#1105](https://github.com/openshift/cluster-image-registry-operator/pull/1105) * [OCPBUGS-36325](https://issues.redhat.com/browse/OCPBUGS-36325): Set required-scc for openshift workloads [#1067](https://github.com/openshift/cluster-image-registry-operator/pull/1067) * [OCPBUGS-36036](https://issues.redhat.com/browse/OCPBUGS-36036): go.*,vendor: bump go-retryablehttp [#1068](https://github.com/openshift/cluster-image-registry-operator/pull/1068) * [OCPBUGS-34571](https://issues.redhat.com/browse/OCPBUGS-34571): azure-path-fix: get client secret from k8s secret [#1049](https://github.com/openshift/cluster-image-registry-operator/pull/1049) * [OCPBUGS-34539](https://issues.redhat.com/browse/OCPBUGS-34539): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1048](https://github.com/openshift/cluster-image-registry-operator/pull/1048) * [OCPBUGS-33208](https://issues.redhat.com/browse/OCPBUGS-33208): azurepathfix: check if platform status is nil before accessing it [#1031](https://github.com/openshift/cluster-image-registry-operator/pull/1031) * [OCPBUGS-32396](https://issues.redhat.com/browse/OCPBUGS-32396): azure-path-fix: support auth via account key (without clientID) [#1022](https://github.com/openshift/cluster-image-registry-operator/pull/1022) * [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): bump aws-sdk-go from v1.44 to v1.50 [#1014](https://github.com/openshift/cluster-image-registry-operator/pull/1014) * [OCPBUGS-29983](https://issues.redhat.com/browse/OCPBUGS-29983): cmd/move-blobs: log and exit 1 on error instead of panic [#1009](https://github.com/openshift/cluster-image-registry-operator/pull/1009) * [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004) * [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000) * [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994) * [OCPBUGS-26936](https://issues.redhat.com/browse/OCPBUGS-26936): MULTIARCH-4074: PowerVS: update supported regions [#988](https://github.com/openshift/cluster-image-registry-operator/pull/988) * [OCPBUGS-26063](https://issues.redhat.com/browse/OCPBUGS-26063): IBMCloud - Add support for endpoint overrides [#984](https://github.com/openshift/cluster-image-registry-operator/pull/984) * [OCPBUGS-25460](https://issues.redhat.com/browse/OCPBUGS-25460): add private endpoint permissions to Azure credentials request [#978](https://github.com/openshift/cluster-image-registry-operator/pull/978) * [OCPBUGS-24684](https://issues.redhat.com/browse/OCPBUGS-24684): Revert "Merge pull request #965 from jstuever/TRT-1368" [#972](https://github.com/openshift/cluster-image-registry-operator/pull/972) * [OCPVE-790](https://issues.redhat.com/browse/OCPVE-790): annotate credentials request manifests [#959](https://github.com/openshift/cluster-image-registry-operator/pull/959) * [OCPBUGS-24161](https://issues.redhat.com/browse/OCPBUGS-24161): Updating ose-cluster-image-registry-operator-container image to be consistent with ART [#966](https://github.com/openshift/cluster-image-registry-operator/pull/966) * [TRT-1368](https://issues.redhat.com/browse/TRT-1368): Revert "Merge pull request #935 from flavianmissi/CCO-248" [#965](https://github.com/openshift/cluster-image-registry-operator/pull/965) * [IR-366](https://issues.redhat.com/browse/IR-366), [IR-367](https://issues.redhat.com/browse/IR-367), [IR-411](https://issues.redhat.com/browse/IR-411): allow users to configure private storage accounts in Azure [#930](https://github.com/openshift/cluster-image-registry-operator/pull/930) * [IR-408](https://issues.redhat.com/browse/IR-408): request individual permissions for gcs [#935](https://github.com/openshift/cluster-image-registry-operator/pull/935) * [OCPBUGS-2889](https://issues.redhat.com/browse/OCPBUGS-2889): accept user/pass OR application credentials on Swift UPI secret [#924](https://github.com/openshift/cluster-image-registry-operator/pull/924) * [IR-406](https://issues.redhat.com/browse/IR-406), [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): bump k8s and openshift packages [#936](https://github.com/openshift/cluster-image-registry-operator/pull/936) * [OCPBUGS-21853](https://issues.redhat.com/browse/OCPBUGS-21853): disable http2 for metrics endpoint [#938](https://github.com/openshift/cluster-image-registry-operator/pull/938) * [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): move pruner role creation from openshift-apiserver [#925](https://github.com/openshift/cluster-image-registry-operator/pull/925) * [OCPBUGS-19262](https://issues.redhat.com/browse/OCPBUGS-19262): Updating ose-cluster-image-registry-operator images to be consistent with ART [#918](https://github.com/openshift/cluster-image-registry-operator/pull/918) * [OCPBUGS-18469](https://issues.redhat.com/browse/OCPBUGS-18469): increase storage account key cache expiration [#912](https://github.com/openshift/cluster-image-registry-operator/pull/912) * [OCPBUGS-17060](https://issues.redhat.com/browse/OCPBUGS-17060): use Recreate on operator deployment [#908](https://github.com/openshift/cluster-image-registry-operator/pull/908) * [OCPBUGS-18103](https://issues.redhat.com/browse/OCPBUGS-18103): check if response is nil before using it [#909](https://github.com/openshift/cluster-image-registry-operator/pull/909) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/9043a978971211db732ceb78f55f84b8143c6a17...43f90e101ebf8f7bfb5ac7043fe1067876d25e8c) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b73e37f432228be8d29249480fa1fa8b7b4526f4) * [OCPBUGS-41635](https://issues.redhat.com/browse/OCPBUGS-41635): Refine logging for accurate infra CR status updates [#1141](https://github.com/openshift/cluster-ingress-operator/pull/1141) * [OCPBUGS-36466](https://issues.redhat.com/browse/OCPBUGS-36466): Allow operator to update Route spec.subdomain [#1100](https://github.com/openshift/cluster-ingress-operator/pull/1100) * [OCPBUGS-36208](https://issues.redhat.com/browse/OCPBUGS-36208): Implement connect timeout tuning option [#1097](https://github.com/openshift/cluster-ingress-operator/pull/1097) * [OCPBUGS-36279](https://issues.redhat.com/browse/OCPBUGS-36279): Add Regexp Anchor to TestAll [#1096](https://github.com/openshift/cluster-ingress-operator/pull/1096) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Prevent upgrades for SHA1 default cert and SHA1 route certs [#1014](https://github.com/openshift/cluster-ingress-operator/pull/1014) * [OCPBUGS-35028](https://issues.redhat.com/browse/OCPBUGS-35028): internalServiceChanged: Fix target port logic [#1081](https://github.com/openshift/cluster-ingress-operator/pull/1081) * [OCPBUGS-34887](https://issues.redhat.com/browse/OCPBUGS-34887): TestHostNetworkPortBinding: Delete t.Parallel() [#1075](https://github.com/openshift/cluster-ingress-operator/pull/1075) * [OCPBUGS-34252](https://issues.redhat.com/browse/OCPBUGS-34252): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1058](https://github.com/openshift/cluster-ingress-operator/pull/1058) * [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022) * [OCPBUGS-26544](https://issues.redhat.com/browse/OCPBUGS-26544): Replace GCP role with explicit permissions [#1015](https://github.com/openshift/cluster-ingress-operator/pull/1015) * [OCPBUGS-24167](https://issues.redhat.com/browse/OCPBUGS-24167): Updating ose-cluster-ingress-operator-container image to be consistent with ART [#1002](https://github.com/openshift/cluster-ingress-operator/pull/1002) * [OCPBUGS-25227](https://issues.redhat.com/browse/OCPBUGS-25227): annotate credentials request manifests [#1005](https://github.com/openshift/cluster-ingress-operator/pull/1005) * [OCPBUGS-23742](https://issues.redhat.com/browse/OCPBUGS-23742): Bump controller-runtime to v0.16.3 [#1001](https://github.com/openshift/cluster-ingress-operator/pull/1001) * [NE-1402](https://issues.redhat.com/browse/NE-1402): Add service endpoint override capability to IBM DNS provider [#990](https://github.com/openshift/cluster-ingress-operator/pull/990) * [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Revert "OCPBUGS-16762: Bump openshift/api for container.maxLength fix" [#982](https://github.com/openshift/cluster-ingress-operator/pull/982) * [OCPBUGS-14994](https://issues.redhat.com/browse/OCPBUGS-14994): Don't add clientca-configmap finalizer if deleting [#948](https://github.com/openshift/cluster-ingress-operator/pull/948) * [OCPBUGS-22020](https://issues.redhat.com/browse/OCPBUGS-22020): Bump golang.org/x/net for CVE-2023-44487 [#985](https://github.com/openshift/cluster-ingress-operator/pull/985) * [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): test/e2e: Add test case for 2000000 maxConnections [#983](https://github.com/openshift/cluster-ingress-operator/pull/983) * [OCPBUGS-20192](https://issues.redhat.com/browse/OCPBUGS-20192): Require non-readonly filesystem in router container [#981](https://github.com/openshift/cluster-ingress-operator/pull/981) * [OCPBUGS-16762](https://issues.redhat.com/browse/OCPBUGS-16762): Bump openshift/api for container.maxLength fix [#979](https://github.com/openshift/cluster-ingress-operator/pull/979) * [OCPBUGS-3541](https://issues.redhat.com/browse/OCPBUGS-3541): Don't create route metrics for ingress controllers that are not admitted [#869](https://github.com/openshift/cluster-ingress-operator/pull/869) * [OCPBUGS-18248](https://issues.redhat.com/browse/OCPBUGS-18248): Prevent GatewayClass from getting recreated [#975](https://github.com/openshift/cluster-ingress-operator/pull/975) * [OCPBUGS-19268](https://issues.redhat.com/browse/OCPBUGS-19268): Updating ose-cluster-ingress-operator images to be consistent with ART [#977](https://github.com/openshift/cluster-ingress-operator/pull/977) * [OCPBUGS-15900](https://issues.redhat.com/browse/OCPBUGS-15900): TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. [#973](https://github.com/openshift/cluster-ingress-operator/pull/973) * [OCPBUGS-3356](https://issues.redhat.com/browse/OCPBUGS-3356): E2E test for cookie length truncation [#871](https://github.com/openshift/cluster-ingress-operator/pull/871) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fc4cab0d129151b919ac09b495c33d627ef55915...b73e37f432228be8d29249480fa1fa8b7b4526f4) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/aabc7863cdbd76f8909a10fbc1be53b032e4ec31) * [OCPBUGS-37566](https://issues.redhat.com/browse/OCPBUGS-37566): add disabled syncer as reason to CFE for PSA [#1716](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1716) * [OCPBUGS-35832](https://issues.redhat.com/browse/OCPBUGS-35832): add SNO control plane high cpu usage alert [#1706](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1706) * [OCPBUGS-29361](https://issues.redhat.com/browse/OCPBUGS-29361): operator: stop removing kube-apiserver-slos asset [#1643](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1643) * [OCPBUGS-34492](https://issues.redhat.com/browse/OCPBUGS-34492): Create one-shot migrations for the flowcontrol group. [#1692](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1692) * [OCPBUGS-33697](https://issues.redhat.com/browse/OCPBUGS-33697): add a controller that reconciles SCCs' volumes [#1679](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1679) * [OCPBUGS-33277](https://issues.redhat.com/browse/OCPBUGS-33277): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1672](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1672) * [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): Use RotatedSigningCASecret in update only mode [#1662](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1662) * [OCPBUGS-30304](https://issues.redhat.com/browse/OCPBUGS-30304): cert rotation: Bump library-go to latest master [#1653](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1653) * [OCPBUGS-29775](https://issues.redhat.com/browse/OCPBUGS-29775): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1647) * [OCPBUGS-30180](https://issues.redhat.com/browse/OCPBUGS-30180): add provider name to cluster_infrastructure_provider when external platform [#1639](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1639) * [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636) * [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628) * [OCPBUGS-24098](https://issues.redhat.com/browse/OCPBUGS-24098): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART [#1589](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1589) * [OCPBUGS-18761](https://issues.redhat.com/browse/OCPBUGS-18761): revert dev cert rotation in 4.15 [#1598](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1598) * [AUTH-442](https://issues.redhat.com/browse/AUTH-442): psa cluster fleet evaluation [#1588](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1588) * [OCPBUGS-24213](https://issues.redhat.com/browse/OCPBUGS-24213): Annotate managed certs [#1568](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1568) * [OCPBUGS-23796](https://issues.redhat.com/browse/OCPBUGS-23796): use AlwaysAllow UnhealthyPodEvictionPolicy option [#1579](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1579) * [OCPBUGS-21836](https://issues.redhat.com/browse/OCPBUGS-21836): use external load balancer url for jwks-uri [#1578](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1578) * manifests: set owning component for TLS artifacts [#1583](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1583) * [OCPBUGS-19160](https://issues.redhat.com/browse/OCPBUGS-19160): Updating ose-cluster-kube-apiserver-operator images to be consistent with ART [#1550](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1550) * [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules [#1566](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1566) * [OCPBUGS-20331](https://issues.redhat.com/browse/OCPBUGS-20331): manifests: rename API performance dashboard [#1565](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1565) * [OCPBUGS-21729](https://issues.redhat.com/browse/OCPBUGS-21729): bump library-go to include switch to HTTP/1.1 [#1567](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1567) * Update required GV for ValidatingAdmissionPolicy gate. [#1561](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1561) * Update "deprecated API in use" alert expressions for 1.28. [#1562](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1562) * bump(openshift/client-go,library-go) [#1560](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1560) * [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#1557](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1557) * [OCPBUGS-19024](https://issues.redhat.com/browse/OCPBUGS-19024): remove featuregate upgradeable controller that moved to cluster-config-operator [#1547](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1547) * [OCPBUGS-18247](https://issues.redhat.com/browse/OCPBUGS-18247): manifests: don't include recording rules when Console capability is not enabled [#1542](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1542) * [OCPBUGS-15504](https://issues.redhat.com/browse/OCPBUGS-15504): manifest: remove kube-apiserver PrometheusRule [#1543](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1543) * Bump openshift/* libs [#1549](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1549) * Update to Kubernetes 1.28.2 [#1548](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1548) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1534](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1534) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4302637f4d521bd9880de93df6bc41d44a4b0756...aabc7863cdbd76f8909a10fbc1be53b032e4ec31) ### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e) * [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34) * [OCPBUGS-24085](https://issues.redhat.com/browse/OCPBUGS-24085): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#31](https://github.com/openshift/cluster-api-operator/pull/31) * Update OWNERS [#26](https://github.com/openshift/cluster-api-operator/pull/26) * [OCPBUGS-17289](https://issues.redhat.com/browse/OCPBUGS-17289), [OCPBUGS-21650](https://issues.redhat.com/browse/OCPBUGS-21650), [OCPCLOUD-2215](https://issues.redhat.com/browse/OCPCLOUD-2215): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main [#25](https://github.com/openshift/cluster-api-operator/pull/25) * [OCPBUGS-19135](https://issues.redhat.com/browse/OCPBUGS-19135): Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#24](https://github.com/openshift/cluster-api-operator/pull/24) * [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b287d08b3dabe6b3b67b87a8a284f19ed12a165e...128d8e08c48e2002c416e84d0dec816bf5999c7e) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f) * [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#801](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/801) * [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#797](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/797) * [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#790](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/790) * [OCPBUGS-24162](https://issues.redhat.com/browse/OCPBUGS-24162): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART [#772](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/772) * [OCPBUGS-24215](https://issues.redhat.com/browse/OCPBUGS-24215): Annotate rotated certificates [#769](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/769) * [OCPBUGS-23462](https://issues.redhat.com/browse/OCPBUGS-23462): bump(library-go) [#771](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/771) * bump(k8s) [#763](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/763) * [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): bump(openshift/api|client-go|library-go) to pick up http2 disablement [#762](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/762) * [OCPBUGS-21722](https://issues.redhat.com/browse/OCPBUGS-21722): Bump deps to address CVE-2023-44487 [#755](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/755) * bump(openshift/client-go,library-go) [#753](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/753) * [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#750](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/750) * [OCPBUGS-19263](https://issues.redhat.com/browse/OCPBUGS-19263): Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#747](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/747) * Bump openshift/* libs [#746](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/746) * Update to Kubernetes 1.28.2 [#744](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/744) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#742](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/742) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/4e059638c2cbf003551ee699106dc024760eece3...ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/f054dfaf189b43b262c11ef7f97038c79592c796) * [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#537](https://github.com/openshift/cluster-kube-scheduler-operator/pull/537) * [OCPBUGS-24106](https://issues.redhat.com/browse/OCPBUGS-24106): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART [#513](https://github.com/openshift/cluster-kube-scheduler-operator/pull/513) * [OCPBUGS-24218](https://issues.redhat.com/browse/OCPBUGS-24218): Annotate serviceaccount-ca with ownership information [#511](https://github.com/openshift/cluster-kube-scheduler-operator/pull/511) * [OCPBUGS-23463](https://issues.redhat.com/browse/OCPBUGS-23463): bump(library-go) [#512](https://github.com/openshift/cluster-kube-scheduler-operator/pull/512) * NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof [#507](https://github.com/openshift/cluster-kube-scheduler-operator/pull/507) * [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 [#508](https://github.com/openshift/cluster-kube-scheduler-operator/pull/508) * [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump openshift/library-go to disable http/2 by default [#503](https://github.com/openshift/cluster-kube-scheduler-operator/pull/503) * [OCPBUGS-21734](https://issues.redhat.com/browse/OCPBUGS-21734): Bump deps to address CVE-2023-44487 [#500](https://github.com/openshift/cluster-kube-scheduler-operator/pull/500) * bump(openshift/client-go,library-go) [#498](https://github.com/openshift/cluster-kube-scheduler-operator/pull/498) * [OCPBUGS-16794](https://issues.redhat.com/browse/OCPBUGS-16794): installerpod: change pod manifest mode to 0600 [#496](https://github.com/openshift/cluster-kube-scheduler-operator/pull/496) * [OCPBUGS-19175](https://issues.redhat.com/browse/OCPBUGS-19175): Updating ose-cluster-kube-scheduler-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-kube-scheduler-operator/pull/493) * Bump openshift/* libs [#492](https://github.com/openshift/cluster-kube-scheduler-operator/pull/492) * Update to Kubernetes 1.28.2 [#491](https://github.com/openshift/cluster-kube-scheduler-operator/pull/491) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#490](https://github.com/openshift/cluster-kube-scheduler-operator/pull/490) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4...f054dfaf189b43b262c11ef7f97038c79592c796) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e76cea5f52bd5a125d051c6a0da4127a4dae6700) * [OCPBUGS-36322](https://issues.redhat.com/browse/OCPBUGS-36322): Set required-scc for openshift workloads [#112](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/112) * [OCPBUGS-24156](https://issues.redhat.com/browse/OCPBUGS-24156): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#100](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/100) * [OCPBUGS-21738](https://issues.redhat.com/browse/OCPBUGS-21738): bump library-go to include switch to HTTP/1.1 [#95](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/95) * [OCPBUGS-19253](https://issues.redhat.com/browse/OCPBUGS-19253): Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#94](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/94) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9cd9922a42a64fe058718f10e3b4123b943bb55f...e76cea5f52bd5a125d051c6a0da4127a4dae6700) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba) * [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226) * [OCPBUGS-24154](https://issues.redhat.com/browse/OCPBUGS-24154): Updating ose-cluster-machine-approver-container image to be consistent with ART [#217](https://github.com/openshift/cluster-machine-approver/pull/217) * [OCPCLOUD-2277](https://issues.redhat.com/browse/OCPCLOUD-2277): Ensure Cluster Machine Approver metrics are only available via HTTPS [#211](https://github.com/openshift/cluster-machine-approver/pull/211) * [OCPBUGS-21594](https://issues.redhat.com/browse/OCPBUGS-21594): Filter non node CSRs in metrics [#208](https://github.com/openshift/cluster-machine-approver/pull/208) * [OCPBUGS-21793](https://issues.redhat.com/browse/OCPBUGS-21793): Bump x/net package to v0.17.0 [#204](https://github.com/openshift/cluster-machine-approver/pull/204) * Update OWNERS [#205](https://github.com/openshift/cluster-machine-approver/pull/205) * [OCPBUGS-19250](https://issues.redhat.com/browse/OCPBUGS-19250): Updating ose-cluster-machine-approver images to be consistent with ART [#201](https://github.com/openshift/cluster-machine-approver/pull/201) * [OCPCLOUD-2181](https://issues.redhat.com/browse/OCPCLOUD-2181): Update K8s dependencies to 1.28 [#203](https://github.com/openshift/cluster-machine-approver/pull/203) * [OCPBUGS-17090](https://issues.redhat.com/browse/OCPBUGS-17090): Set logger for controller runtime [#200](https://github.com/openshift/cluster-machine-approver/pull/200) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/711b4f6eeb038f8c7bd88db3ea51ebad350a116d...3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/59b7b8692200ee7b16ae8a549ac968b7a7560d28) * [OCPBUGS-39172](https://issues.redhat.com/browse/OCPBUGS-39172): Backport #2441 for 4.15 [#2448](https://github.com/openshift/cluster-monitoring-operator/pull/2448) * [OCPBUGS-37608](https://issues.redhat.com/browse/OCPBUGS-37608): set required-scc for openshift workloads [#2420](https://github.com/openshift/cluster-monitoring-operator/pull/2420) * [OCPBUGS-36563](https://issues.redhat.com/browse/OCPBUGS-36563): add runbook_url annotations [#2406](https://github.com/openshift/cluster-monitoring-operator/pull/2406) * [OCPBUGS-37194](https://issues.redhat.com/browse/OCPBUGS-37194): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2413](https://github.com/openshift/cluster-monitoring-operator/pull/2413) * [OCPBUGS-36312](https://issues.redhat.com/browse/OCPBUGS-36312): inject trusted CA bundle into UWM Alertmanager [#2400](https://github.com/openshift/cluster-monitoring-operator/pull/2400) * [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Ipsec state backport [#2384](https://github.com/openshift/cluster-monitoring-operator/pull/2384) * [OCPBUGS-33512](https://issues.redhat.com/browse/OCPBUGS-33512): fix Thanos ruler alert generator url [#2343](https://github.com/openshift/cluster-monitoring-operator/pull/2343) * [OCPBUGS-32055](https://issues.redhat.com/browse/OCPBUGS-32055): backport ols metric allowlist to 4.15 [#2313](https://github.com/openshift/cluster-monitoring-operator/pull/2313) * [OCPBUGS-28769](https://issues.redhat.com/browse/OCPBUGS-28769): fix generation of telemeter token hash [#2303](https://github.com/openshift/cluster-monitoring-operator/pull/2303) * [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249) * [OCPBUGS-25322](https://issues.redhat.com/browse/OCPBUGS-25322): go.mod: bump prometheus-operator to v0.70.0 [#2201](https://github.com/openshift/cluster-monitoring-operator/pull/2201) * [OCPBUGS-25309](https://issues.redhat.com/browse/OCPBUGS-25309): additionalArgs: list items must have named fields [#2197](https://github.com/openshift/cluster-monitoring-operator/pull/2197) * [OCPBUGS-24149](https://issues.redhat.com/browse/OCPBUGS-24149): Updating cluster-monitoring-operator-container image to be consistent with ART [#2170](https://github.com/openshift/cluster-monitoring-operator/pull/2170) * [MON-3553](https://issues.redhat.com/browse/MON-3553): Set scrape.timestamp tolerance [#2187](https://github.com/openshift/cluster-monitoring-operator/pull/2187) * [OCPBUGS-23516](https://issues.redhat.com/browse/OCPBUGS-23516): prevent plugin entry assets from caching [#2186](https://github.com/openshift/cluster-monitoring-operator/pull/2186) * [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): Detect ipv4/ipv6 socket in pod ip for nginx conf [#2173](https://github.com/openshift/cluster-monitoring-operator/pull/2173) * [MON-3134](https://issues.redhat.com/browse/MON-3134): allow to query alerts from thanos-querier tenancy port [#2184](https://github.com/openshift/cluster-monitoring-operator/pull/2184) * [MON-3551](https://issues.redhat.com/browse/MON-3551): fix: simplify jq script avoids error with jq1.7 [#2180](https://github.com/openshift/cluster-monitoring-operator/pull/2180) * [MON-3454](https://issues.redhat.com/browse/MON-3454): Add track timestamps staleness [#2160](https://github.com/openshift/cluster-monitoring-operator/pull/2160) * [OCPBUGS-24212](https://issues.redhat.com/browse/OCPBUGS-24212): Add ownership annotation for certificates [#2158](https://github.com/openshift/cluster-monitoring-operator/pull/2158) * [MON-3379](https://issues.redhat.com/browse/MON-3379): Replace the oauth-proxy before thanos-querier with kube-rbac-proxy [#2136](https://github.com/openshift/cluster-monitoring-operator/pull/2136) * [MON-3544](https://issues.redhat.com/browse/MON-3544): Adjust NodeClock* alerting rules to work with PTP operator [#2182](https://github.com/openshift/cluster-monitoring-operator/pull/2182) * [OCPBUGS-23745](https://issues.redhat.com/browse/OCPBUGS-23745): Wait for 3 (instead of 2) consecutive failing reconcil… [#2179](https://github.com/openshift/cluster-monitoring-operator/pull/2179) * [MON-3548](https://issues.redhat.com/browse/MON-3548): [bot] Synchronize versions of the downstream components [#2183](https://github.com/openshift/cluster-monitoring-operator/pull/2183) * [MON-3543](https://issues.redhat.com/browse/MON-3543): Update API docs for Metrics Server [#2181](https://github.com/openshift/cluster-monitoring-operator/pull/2181) * [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): synchronize versions of the downstream components [#2174](https://github.com/openshift/cluster-monitoring-operator/pull/2174) * [OCPBUGS-24340](https://issues.redhat.com/browse/OCPBUGS-24340): patch securityContext for Thanos querier [#2178](https://github.com/openshift/cluster-monitoring-operator/pull/2178) * [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): update prometheus-operator jsonnet to v0.70.0 [#2177](https://github.com/openshift/cluster-monitoring-operator/pull/2177) * [MON-3287](https://issues.redhat.com/browse/MON-3287): Remove openshift-etcd related RBAC as they will be manager by [#2165](https://github.com/openshift/cluster-monitoring-operator/pull/2165) * [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): revert #2166 [#2172](https://github.com/openshift/cluster-monitoring-operator/pull/2172) * [MON-3524](https://issues.redhat.com/browse/MON-3524): Update metrics-server in CHANGELOG and README [#2169](https://github.com/openshift/cluster-monitoring-operator/pull/2169) * [MON-3533](https://issues.redhat.com/browse/MON-3533): Update cluster:kube_persistentvolume_plugin_type_counts:sum [#2171](https://github.com/openshift/cluster-monitoring-operator/pull/2171) * [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add SELinux metrics to telemetry [#2155](https://github.com/openshift/cluster-monitoring-operator/pull/2155) * [MON-3500](https://issues.redhat.com/browse/MON-3500): Enable sending exemplars over RW in UWM [#2161](https://github.com/openshift/cluster-monitoring-operator/pull/2161) * [OCPBUGS-21610](https://issues.redhat.com/browse/OCPBUGS-21610): Change config to allow ipv6/4 [#2166](https://github.com/openshift/cluster-monitoring-operator/pull/2166) * [MON-3511](https://issues.redhat.com/browse/MON-3511): hack/local-cmo.sh: pass desired version in cmo run command [#2168](https://github.com/openshift/cluster-monitoring-operator/pull/2168) * [MON-3211](https://issues.redhat.com/browse/MON-3211): Implement switching to metrics-server [#2022](https://github.com/openshift/cluster-monitoring-operator/pull/2022) * [MON-3505](https://issues.redhat.com/browse/MON-3505): move aggregated-metrics-reader role to cmo jsonnet [#2163](https://github.com/openshift/cluster-monitoring-operator/pull/2163) * [MON-3503](https://issues.redhat.com/browse/MON-3503): Synchronize versions of the downstream components [#2162](https://github.com/openshift/cluster-monitoring-operator/pull/2162) * [OCPBUGS-23495](https://issues.redhat.com/browse/OCPBUGS-23495): Change UWM Prometheus' kube-rbac-proxy-thanos port num… [#2164](https://github.com/openshift/cluster-monitoring-operator/pull/2164) * [MON-3479](https://issues.redhat.com/browse/MON-3479): update Prometheus operator assets to v0.69.1 [#2152](https://github.com/openshift/cluster-monitoring-operator/pull/2152) * [MON-3503](https://issues.redhat.com/browse/MON-3503): Synchronize versions of the downstream components [#2150](https://github.com/openshift/cluster-monitoring-operator/pull/2150) * [MON-3421](https://issues.redhat.com/browse/MON-3421): improve the detection of CMO unavailability/degradation due to U… [#2129](https://github.com/openshift/cluster-monitoring-operator/pull/2129) * [MON-3476](https://issues.redhat.com/browse/MON-3476): Add code block to check FeatureGate status [#2151](https://github.com/openshift/cluster-monitoring-operator/pull/2151) * [OCPBUGS-17035](https://issues.redhat.com/browse/OCPBUGS-17035): fix KRP permissions for Thanos Querier [#2057](https://github.com/openshift/cluster-monitoring-operator/pull/2057) * [OCPBUGS-22742](https://issues.redhat.com/browse/OCPBUGS-22742): go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#2138](https://github.com/openshift/cluster-monitoring-operator/pull/2138) * [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2145](https://github.com/openshift/cluster-monitoring-operator/pull/2145) * [MON-3398](https://issues.redhat.com/browse/MON-3398): Add RHACM telemetry metric [#2100](https://github.com/openshift/cluster-monitoring-operator/pull/2100) * Synchronize versions of the downstream components [#2135](https://github.com/openshift/cluster-monitoring-operator/pull/2135) * Fix UWM alert access permissions [#2131](https://github.com/openshift/cluster-monitoring-operator/pull/2131) * Synchronize versions of the downstream components [#2133](https://github.com/openshift/cluster-monitoring-operator/pull/2133) * [OCPBUGS-4069](https://issues.redhat.com/browse/OCPBUGS-4069): Prometheus Adatper takes metrics from kubelet job only. [#2117](https://github.com/openshift/cluster-monitoring-operator/pull/2117) * [MON-3422](https://issues.redhat.com/browse/MON-3422): Remove temporary no more needed code [#2132](https://github.com/openshift/cluster-monitoring-operator/pull/2132) * fix: force HTTP/1.1 connections [#2128](https://github.com/openshift/cluster-monitoring-operator/pull/2128) * [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2105](https://github.com/openshift/cluster-monitoring-operator/pull/2105) * [OCPBUGS-21631](https://issues.redhat.com/browse/OCPBUGS-21631): upgrade golang.org/x/net to v0.17.0 [#2120](https://github.com/openshift/cluster-monitoring-operator/pull/2120) * [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): revert previous fix to avoid activating console capability during update [#2118](https://github.com/openshift/cluster-monitoring-operator/pull/2118) * [MON-3286](https://issues.redhat.com/browse/MON-3286): Remove no longer needed code. [#2116](https://github.com/openshift/cluster-monitoring-operator/pull/2116) * [OCPBUGS-17850](https://issues.redhat.com/browse/OCPBUGS-17850): replace nonResourceURLs permissions by subresource [#2099](https://github.com/openshift/cluster-monitoring-operator/pull/2099) * Synchronize versions of the downstream components [#2115](https://github.com/openshift/cluster-monitoring-operator/pull/2115) * Update jsonnet dependencies [#2076](https://github.com/openshift/cluster-monitoring-operator/pull/2076) * OWNERS: remove sthaha [#2114](https://github.com/openshift/cluster-monitoring-operator/pull/2114) * build: add `-e` to `go list` command to install tools [#2112](https://github.com/openshift/cluster-monitoring-operator/pull/2112) * Change kube-rbac-proxy-thanos port [#2113](https://github.com/openshift/cluster-monitoring-operator/pull/2113) * [OCPBUGS-11344](https://issues.redhat.com/browse/OCPBUGS-11344): alertmanager: use alertmanager CRD's automountServiceAccountToken option [#2111](https://github.com/openshift/cluster-monitoring-operator/pull/2111) * Remove deprecated ioutil [#2108](https://github.com/openshift/cluster-monitoring-operator/pull/2108) * [OCPBUGS-18326](https://issues.redhat.com/browse/OCPBUGS-18326): add console capability annotation to dashboards and monitoring-plugin. [#2101](https://github.com/openshift/cluster-monitoring-operator/pull/2101) * [MON-3302](https://issues.redhat.com/browse/MON-3302): add RHACS telemetry metrics [#2062](https://github.com/openshift/cluster-monitoring-operator/pull/2062) * add `machine424` and `rexagod` to OWNERS [#2083](https://github.com/openshift/cluster-monitoring-operator/pull/2083) * Remove bparees from approvers [#2104](https://github.com/openshift/cluster-monitoring-operator/pull/2104) * Revert "feat: add olm capability annotation" [#2103](https://github.com/openshift/cluster-monitoring-operator/pull/2103) * [MON-3270](https://issues.redhat.com/browse/MON-3270): Add kube-metrics-server to image-references [#2102](https://github.com/openshift/cluster-monitoring-operator/pull/2102) * [OCPVE-711](https://issues.redhat.com/browse/OCPVE-711): feat: add olm capability annotation [#2095](https://github.com/openshift/cluster-monitoring-operator/pull/2095) * chore: fix imports order [#2098](https://github.com/openshift/cluster-monitoring-operator/pull/2098) * Set Thanos version in the Thanos Ruler spec [#2094](https://github.com/openshift/cluster-monitoring-operator/pull/2094) * [OCPBUGS-19237](https://issues.redhat.com/browse/OCPBUGS-19237): Updating cluster-monitoring-operator images to be consistent with ART [#2084](https://github.com/openshift/cluster-monitoring-operator/pull/2084) * Synchronize versions of the downstream components [#2093](https://github.com/openshift/cluster-monitoring-operator/pull/2093) * Synchronize versions of the downstream components [#2089](https://github.com/openshift/cluster-monitoring-operator/pull/2089) * [MON-3383](https://issues.redhat.com/browse/MON-3383): Remove weak cryptograhic primitive usage [#2086](https://github.com/openshift/cluster-monitoring-operator/pull/2086) * [OCPBUGS-18390](https://issues.redhat.com/browse/OCPBUGS-18390): jsonnet/rules: exclude -1 from etcd objects count [#2081](https://github.com/openshift/cluster-monitoring-operator/pull/2081) * [OCPBUGS-19059](https://issues.redhat.com/browse/OCPBUGS-19059): Enable ipv6 on monitoring-plugin nginx [#2090](https://github.com/openshift/cluster-monitoring-operator/pull/2090) * [MON-3376](https://issues.redhat.com/browse/MON-3376): Remove deprecated --logtostderr argument [#2077](https://github.com/openshift/cluster-monitoring-operator/pull/2077) * [OCPBUGS-19356](https://issues.redhat.com/browse/OCPBUGS-19356): Topology spread constraints admission webhook [#2073](https://github.com/openshift/cluster-monitoring-operator/pull/2073) * [OCPBUGS-17682](https://issues.redhat.com/browse/OCPBUGS-17682): add topologySpreadConstraints to UWM prometheus operator [#2072](https://github.com/openshift/cluster-monitoring-operator/pull/2072) * Synchronize versions of the downstream components [#2082](https://github.com/openshift/cluster-monitoring-operator/pull/2082) * [MON-2642](https://issues.redhat.com/browse/MON-2642): Improve e2e tests for alertrelabelconfigs CRD [#2080](https://github.com/openshift/cluster-monitoring-operator/pull/2080) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/618dee4f3101ce9468e55c51ad3c436e8367ae41...59b7b8692200ee7b16ae8a549ac968b7a7560d28) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/092d15be0b1d2b0bffe96bad25a719c27444afda) * [OCPBUGS-41947](https://issues.redhat.com/browse/OCPBUGS-41947): Add proxy env vars to onvkube-node [#2503](https://github.com/openshift/cluster-network-operator/pull/2503) * [OCPBUGS-31447](https://issues.redhat.com/browse/OCPBUGS-31447): Tighten the permissions on whereabouts.conf [#2324](https://github.com/openshift/cluster-network-operator/pull/2324) * [NP-1064](https://issues.redhat.com/browse/NP-1064), [OCPBUGS-39336](https://issues.redhat.com/browse/OCPBUGS-39336): Remove managed cluster checking for live migration [#2485](https://github.com/openshift/cluster-network-operator/pull/2485) * [OCPBUGS-34613](https://issues.redhat.com/browse/OCPBUGS-34613), [OCPBUGS-34726](https://issues.redhat.com/browse/OCPBUGS-34726), [OCPBUGS-34727](https://issues.redhat.com/browse/OCPBUGS-34727): Live migration backports [#2393](https://github.com/openshift/cluster-network-operator/pull/2393) * [OCPBUGS-37962](https://issues.redhat.com/browse/OCPBUGS-37962): Fix IC distributed control plane alerts [#2459](https://github.com/openshift/cluster-network-operator/pull/2459) * [OCPBUGS-35837](https://issues.redhat.com/browse/OCPBUGS-35837): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2420](https://github.com/openshift/cluster-network-operator/pull/2420) * [OCPBUGS-37205](https://issues.redhat.com/browse/OCPBUGS-37205): Check every MachineConfigPool for IPsec plugin existence [#2439](https://github.com/openshift/cluster-network-operator/pull/2439) * [OCPBUGS-34809](https://issues.redhat.com/browse/OCPBUGS-34809): Ensure that the node-identity webhook address contains colons for IPv6 [#2396](https://github.com/openshift/cluster-network-operator/pull/2396) * [OCPBUGS-36347](https://issues.redhat.com/browse/OCPBUGS-36347): Create the configmap mtu if not found [#2426](https://github.com/openshift/cluster-network-operator/pull/2426) * [OCPBUGS-36499](https://issues.redhat.com/browse/OCPBUGS-36499): [release-4.15] Bump Openshift API and backport configurable subnet knobs (transit / join / masquerade) [#2375](https://github.com/openshift/cluster-network-operator/pull/2375) * [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): update whereabouts crd [#2427](https://github.com/openshift/cluster-network-operator/pull/2427) * [OCPBUGS-32989](https://issues.redhat.com/browse/OCPBUGS-32989): Add conditions for ignored-namespaces [#2379](https://github.com/openshift/cluster-network-operator/pull/2379) * [OCPBUGS-29739](https://issues.redhat.com/browse/OCPBUGS-29739): Run dhcp-daemon pods as system-node-critical priority [#2283](https://github.com/openshift/cluster-network-operator/pull/2283) * [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Add ipsec state metric [#2389](https://github.com/openshift/cluster-network-operator/pull/2389) * [OCPBUGS-32515](https://issues.redhat.com/browse/OCPBUGS-32515): Fix wait logic for IPsec certificate signing request [#2348](https://github.com/openshift/cluster-network-operator/pull/2348) * [OCPBUGS-29092](https://issues.redhat.com/browse/OCPBUGS-29092): Add probes to node-network-identity [#2253](https://github.com/openshift/cluster-network-operator/pull/2253) * [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): Fully disable network-node-identity on ROKS [#2314](https://github.com/openshift/cluster-network-operator/pull/2314) * [OCPBUGS-30927](https://issues.redhat.com/browse/OCPBUGS-30927): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2310](https://github.com/openshift/cluster-network-operator/pull/2310) * [OCPBUGS-30615](https://issues.redhat.com/browse/OCPBUGS-30615): Fix managed cluster detection on ARO [#2304](https://github.com/openshift/cluster-network-operator/pull/2304) * [OCPBUGS-29090](https://issues.redhat.com/browse/OCPBUGS-29090): network-node-identity mounts secrets with mode 0640 [#2251](https://github.com/openshift/cluster-network-operator/pull/2251) * [OCPBUGS-29390](https://issues.redhat.com/browse/OCPBUGS-29390): ipsec: fix openssl typo [#2272](https://github.com/openshift/cluster-network-operator/pull/2272) * [OCPBUGS-29522](https://issues.redhat.com/browse/OCPBUGS-29522): Not set CNO to degraded if API server returns conflict error [#2275](https://github.com/openshift/cluster-network-operator/pull/2275) * [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): [release-4.15] Disable network-node-identity on ROKS [#2278](https://github.com/openshift/cluster-network-operator/pull/2278) * [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265) * [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263) * [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255) * [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242) * [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212) * [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203) * [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202) * [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247) * [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243) * NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227) * [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223) * [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215) * [OCPBUGS-25652](https://issues.redhat.com/browse/OCPBUGS-25652): fix whereabouts conformance test failures [#2168](https://github.com/openshift/cluster-network-operator/pull/2168) * [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): [release-4.15] Add ConfigMap mount to the whereabouts-reconciler [#2214](https://github.com/openshift/cluster-network-operator/pull/2214) * [OCPBUGS-27198](https://issues.redhat.com/browse/OCPBUGS-27198): [release-4.15] Update ovn-k managed control-plane RBAC [#2204](https://github.com/openshift/cluster-network-operator/pull/2204) * [OCPBUGS-27286](https://issues.redhat.com/browse/OCPBUGS-27286): Use specific permissions for CNCC in GCP [#2190](https://github.com/openshift/cluster-network-operator/pull/2190) * [OCPBUGS-27001](https://issues.redhat.com/browse/OCPBUGS-27001): Keep the live migration annotation consistant with the enhancement doc [#2194](https://github.com/openshift/cluster-network-operator/pull/2194) * [OCPBUGS-27186](https://issues.redhat.com/browse/OCPBUGS-27186): Ns ipsec 4.15 [#2200](https://github.com/openshift/cluster-network-operator/pull/2200) * [OCPBUGS-25864](https://issues.redhat.com/browse/OCPBUGS-25864): HyperShift, network-node-identity: Check the deployment in the management cluster [#2180](https://github.com/openshift/cluster-network-operator/pull/2180) * [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2167](https://github.com/openshift/cluster-network-operator/pull/2167) * [OCPBUGS-25312](https://issues.redhat.com/browse/OCPBUGS-25312), [OCPBUGS-25921](https://issues.redhat.com/browse/OCPBUGS-25921): Avoid removal of ipsec-host daemonset when node is NotReady [#2181](https://github.com/openshift/cluster-network-operator/pull/2181) * [OCPBUGS-24148](https://issues.redhat.com/browse/OCPBUGS-24148): Updating cluster-network-operator-container image to be consistent with ART [#2133](https://github.com/openshift/cluster-network-operator/pull/2133) * [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Set enable-multi-external-gateway flag in ovnkube.conf [#2158](https://github.com/openshift/cluster-network-operator/pull/2158) * [OCPBUGS-19817](https://issues.redhat.com/browse/OCPBUGS-19817), [SDN-4162](https://issues.redhat.com/browse/SDN-4162): Upgrade IPsec with single daemonset pod [#2087](https://github.com/openshift/cluster-network-operator/pull/2087) * [NP-615](https://issues.redhat.com/browse/NP-615): Live migration [#2091](https://github.com/openshift/cluster-network-operator/pull/2091) * [OCPBUGS-23161](https://issues.redhat.com/browse/OCPBUGS-23161): Set logging for controller-runtime [#2129](https://github.com/openshift/cluster-network-operator/pull/2129) * [SDN-4061](https://issues.redhat.com/browse/SDN-4061): Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture [#2101](https://github.com/openshift/cluster-network-operator/pull/2101) * [OCPVE-779](https://issues.redhat.com/browse/OCPVE-779): Annotate credentials request manifests [#2105](https://github.com/openshift/cluster-network-operator/pull/2105) * [NP-615](https://issues.redhat.com/browse/NP-615): Bump github.com/openshift/api [#2138](https://github.com/openshift/cluster-network-operator/pull/2138) * [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Update status merge for APBRoute and EgressFirewall. [#2132](https://github.com/openshift/cluster-network-operator/pull/2132) * [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Add apbroute/status patch rights for ovnkube-node to update status [#2139](https://github.com/openshift/cluster-network-operator/pull/2139) * [NETOBSERV-1047](https://issues.redhat.com/browse/NETOBSERV-1047): Add a cluster monitoring dashboard for ovn [#1871](https://github.com/openshift/cluster-network-operator/pull/1871) * [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump library-go [#2082](https://github.com/openshift/cluster-network-operator/pull/2082) * [SDN-4101](https://issues.redhat.com/browse/SDN-4101): Remove HyperShift API dependency, Bump kubernetes dependencies [#2128](https://github.com/openshift/cluster-network-operator/pull/2128) * NO ISSUE: add ownership of the proxy-ca [#2111](https://github.com/openshift/cluster-network-operator/pull/2111) * [OCPBUGS-22869](https://issues.redhat.com/browse/OCPBUGS-22869): hypershift, hosted clusters: enable multi-homing and multi-net features [#2113](https://github.com/openshift/cluster-network-operator/pull/2113) * [OCPBUGS-23082](https://issues.redhat.com/browse/OCPBUGS-23082): set automountServiceAccountToken to false for hypershift managed network-node-identity deploy [#2100](https://github.com/openshift/cluster-network-operator/pull/2100) * [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068) * [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060) * [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084) * two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052) * [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077) * [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047) * [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048) * [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795) * multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010) * [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986) * [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074) * [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819) * Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929) * [OCPBUGS-20519](https://issues.redhat.com/browse/OCPBUGS-20519): hosted cluster upgrade failure from 4.13 stable to 4.14 [#2065](https://github.com/openshift/cluster-network-operator/pull/2065) * Revert "Merge pull request #2037 from dcbw/db-script-cleanup" [#2058](https://github.com/openshift/cluster-network-operator/pull/2058) * [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): notify when /etc/openvswitch path changes [#1989](https://github.com/openshift/cluster-network-operator/pull/1989) * [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [#2037](https://github.com/openshift/cluster-network-operator/pull/2037) * Remove ability to deploy with Kuryr [#2056](https://github.com/openshift/cluster-network-operator/pull/2056) * [OCPBUGS-20104](https://issues.redhat.com/browse/OCPBUGS-20104): Don't run network node identity as root [#2051](https://github.com/openshift/cluster-network-operator/pull/2051) * [OCPBUGS-20076](https://issues.redhat.com/browse/OCPBUGS-20076): Multus should determine kubeconfig path [#2049](https://github.com/openshift/cluster-network-operator/pull/2049) * Revert Kuryr MTU fixes [#2038](https://github.com/openshift/cluster-network-operator/pull/2038) * Fix MTU miscalculation [#1778](https://github.com/openshift/cluster-network-operator/pull/1778) * [OCPBUGS-19918](https://issues.redhat.com/browse/OCPBUGS-19918): get ipsecStatus from host daemonset [#2042](https://github.com/openshift/cluster-network-operator/pull/2042) * Network metrics daemon: change priority class to openshift-user-critical [#2044](https://github.com/openshift/cluster-network-operator/pull/2044) * [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#1985](https://github.com/openshift/cluster-network-operator/pull/1985) * [OCPBUGS-19861](https://issues.redhat.com/browse/OCPBUGS-19861): Multus per-node certificates should have 24h duration [#2039](https://github.com/openshift/cluster-network-operator/pull/2039) * [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018) * [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021) * [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031) * [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030) * [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978) * [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009) * [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007) * [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983) * [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020) * [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003) * [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015) * [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845) * Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982) * [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999) * [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006) * separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938) * [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981) * [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990) * [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996) * [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/796bf8f5d5268e1123f033a644b7c7abf3bec823...092d15be0b1d2b0bffe96bad25a719c27444afda) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/1fdd5b0c30d71f4d478e473d08b7cb08019291e8) * TuneD prior to kubelet in one-shot mode (#1125) [#1125](https://github.com/openshift/cluster-node-tuning-operator/pull/1125) * set required-scc for openshift workloads (#1117) [#1117](https://github.com/openshift/cluster-node-tuning-operator/pull/1117) * [OCPBUGS-36870](https://issues.redhat.com/browse/OCPBUGS-36870): Remove tuned/rendered object (#1110) [#1110](https://github.com/openshift/cluster-node-tuning-operator/pull/1110) * [OCPBUGS-36355](https://issues.redhat.com/browse/OCPBUGS-36355): Backport fix for OCPBUGS-30647 (#1095) [#1095](https://github.com/openshift/cluster-node-tuning-operator/pull/1095) * [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1066) [#1066](https://github.com/openshift/cluster-node-tuning-operator/pull/1066) * Add a '.snyk' to silence static code analysis warnings (#1001) [#1001](https://github.com/openshift/cluster-node-tuning-operator/pull/1001) * fix extra-reboot on upgrade with paused mcp worker (#1049) [#1049](https://github.com/openshift/cluster-node-tuning-operator/pull/1049) * fix rendering extra ctrcfgs (#975) [#975](https://github.com/openshift/cluster-node-tuning-operator/pull/975) * [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) (#1043) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012) * Reduce number of reboots in offline tests (#1014) [#1014](https://github.com/openshift/cluster-node-tuning-operator/pull/1014) * Systemd processes not being moved to cpuset/systemd.slice fix (#1016) [#1016](https://github.com/openshift/cluster-node-tuning-operator/pull/1016) * Scheduler plugin: ignore IRQs (#983) [#983](https://github.com/openshift/cluster-node-tuning-operator/pull/983) * e2e: when crun is enabled by default skip checking runc config (#1013) [#1013](https://github.com/openshift/cluster-node-tuning-operator/pull/1013) * [OCPBUGS-30507](https://issues.redhat.com/browse/OCPBUGS-30507): Add performance real time tuned template (#984) [#984](https://github.com/openshift/cluster-node-tuning-operator/pull/984) * Report duplicate priority only for multiple matching profiles (#965) [#965](https://github.com/openshift/cluster-node-tuning-operator/pull/965) * hack: fix backport of render-sync.sh (#996) [#996](https://github.com/openshift/cluster-node-tuning-operator/pull/996) * [OCPBUGS-29752](https://issues.redhat.com/browse/OCPBUGS-29752): [release-4.15][manual] backport performance profile owner reference ehnancements (#963) [#963](https://github.com/openshift/cluster-node-tuning-operator/pull/963) * Render: Add MCSelector to missing default MCPs (#959) [#959](https://github.com/openshift/cluster-node-tuning-operator/pull/959) * Add support to inject owner-ref argument to render command (#966) [#966](https://github.com/openshift/cluster-node-tuning-operator/pull/966) * [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952) * [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953) * [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949) * [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942) * makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941) * [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928) * [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904) * rps: fail silently when rps application failed (#897) [#897](https://github.com/openshift/cluster-node-tuning-operator/pull/897) * [OCPBUGS-25596](https://issues.redhat.com/browse/OCPBUGS-25596): Make MC names deterministic (#888) [#888](https://github.com/openshift/cluster-node-tuning-operator/pull/888) * [OCPBUGS-25552](https://issues.redhat.com/browse/OCPBUGS-25552): rps: fix mask update for SR-IOV devices (#886) [#886](https://github.com/openshift/cluster-node-tuning-operator/pull/886) * [OCPBUGS-24638](https://issues.redhat.com/browse/OCPBUGS-24638): Do not set default RPS sysctl twice (#869) [#869](https://github.com/openshift/cluster-node-tuning-operator/pull/869) * cpuset-configure: exit gracefully on cgroup v2 (#866) [#866](https://github.com/openshift/cluster-node-tuning-operator/pull/866) * [CNF-7610](https://issues.redhat.com/browse/CNF-7610): Mixed CPUs plugin deployment support (#853) [#853](https://github.com/openshift/cluster-node-tuning-operator/pull/853) * New MachineConfig render command (#844) [#844](https://github.com/openshift/cluster-node-tuning-operator/pull/844) * Report duplicate profiles as ERRORs (#864) [#864](https://github.com/openshift/cluster-node-tuning-operator/pull/864) * [CNF-10473](https://issues.redhat.com/browse/CNF-10473): featuregates: main: add feature gates support for PAO controller (#858) [#858](https://github.com/openshift/cluster-node-tuning-operator/pull/858) * e2e:latency: omit LatencyTestRun env variable (#857) [#857](https://github.com/openshift/cluster-node-tuning-operator/pull/857) * [OCPBUGS-18649](https://issues.redhat.com/browse/OCPBUGS-18649): E2E: PPC Test cases (#708) [#708](https://github.com/openshift/cluster-node-tuning-operator/pull/708) * [OCPBUGS-18640](https://issues.redhat.com/browse/OCPBUGS-18640): Fix Racing Machine Configs and add Day 0 Support (#854) [#854](https://github.com/openshift/cluster-node-tuning-operator/pull/854) * Avoid k8s.io/kubernetes as dep (#848) [#848](https://github.com/openshift/cluster-node-tuning-operator/pull/848) * Remove most //nolint:* overrides (#837) [#837](https://github.com/openshift/cluster-node-tuning-operator/pull/837) * [CNF-10294](https://issues.redhat.com/browse/CNF-10294): main: remove deprecated multi ns function (#770) [#770](https://github.com/openshift/cluster-node-tuning-operator/pull/770) * [OCPBUGS-22519](https://issues.redhat.com/browse/OCPBUGS-22519): bump opentelemetry package (#840) [#840](https://github.com/openshift/cluster-node-tuning-operator/pull/840) * Disable HTTP/2 for webhook and metrics servers (#834) [#834](https://github.com/openshift/cluster-node-tuning-operator/pull/834) * Remove obsolete protocols and weak ciphers (#827) [#827](https://github.com/openshift/cluster-node-tuning-operator/pull/827) * [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): rps: trigger udev even per queue (#816) [#816](https://github.com/openshift/cluster-node-tuning-operator/pull/816) * render: change dir path (#824) [#824](https://github.com/openshift/cluster-node-tuning-operator/pull/824) * Makefile: remote tmp folder on clean target (#823) [#823](https://github.com/openshift/cluster-node-tuning-operator/pull/823) * Add golangci-lint (#793) [#793](https://github.com/openshift/cluster-node-tuning-operator/pull/793) * Updating cluster-node-tuning-operator images to be consistent with ART (#795) [#795](https://github.com/openshift/cluster-node-tuning-operator/pull/795) * fix: add if check for no resource match error (#801) [#801](https://github.com/openshift/cluster-node-tuning-operator/pull/801) * nto: avoid timeout when there are too many CSV (#731) [#731](https://github.com/openshift/cluster-node-tuning-operator/pull/731) * Set non-default UserAgent for easier debugging (#807) [#807](https://github.com/openshift/cluster-node-tuning-operator/pull/807) * Improve co/node-tuning operand version reporting (#792) [#792](https://github.com/openshift/cluster-node-tuning-operator/pull/792) * Add the k8s reporter to the configuration suite (#815) [#815](https://github.com/openshift/cluster-node-tuning-operator/pull/815) * [OCPBUGS-18783](https://issues.redhat.com/browse/OCPBUGS-18783): e2e: perfprof: enhance the scheduling domain tests (#791) [#791](https://github.com/openshift/cluster-node-tuning-operator/pull/791) * Add kubeconfig path for IBM Managed OpenShift (#810) [#810](https://github.com/openshift/cluster-node-tuning-operator/pull/810) * Add k8s reporter to e2e tests (#666) [#666](https://github.com/openshift/cluster-node-tuning-operator/pull/666) * [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#804) [#804](https://github.com/openshift/cluster-node-tuning-operator/pull/804) * Memory manager E2E test fixes (#784) [#784](https://github.com/openshift/cluster-node-tuning-operator/pull/784) * Some unit tests fail with go1.19 as some modules require 1.20 (#794) [#794](https://github.com/openshift/cluster-node-tuning-operator/pull/794) * e2e: add expected max latancy to hwlatdetec test & rename constant (#719) [#719](https://github.com/openshift/cluster-node-tuning-operator/pull/719) * [OCPBUGS-18662](https://issues.redhat.com/browse/OCPBUGS-18662): e2e:rps: improve logging (#787) [#787](https://github.com/openshift/cluster-node-tuning-operator/pull/787) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ce4b975b395cae629f120934326d9b1a9a75d0a3...1fdd5b0c30d71f4d478e473d08b7cb08019291e8) ### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a7ba89874970cd10765e1d0753405e32fb357d84) * [OCPBUGS-25399](https://issues.redhat.com/browse/OCPBUGS-25399): [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver [#40](https://github.com/openshift/cluster-olm-operator/pull/40) * [OCPBUGS-24451](https://issues.redhat.com/browse/OCPBUGS-24451): Bump k8s dependencies [#36](https://github.com/openshift/cluster-olm-operator/pull/36) * [OCPBUGS-24068](https://issues.redhat.com/browse/OCPBUGS-24068): Updating ose-cluster-olm-operator-container image to be consistent with ART [#35](https://github.com/openshift/cluster-olm-operator/pull/35) * NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART [#34](https://github.com/openshift/cluster-olm-operator/pull/34) * [OCPBUGS-21670](https://issues.redhat.com/browse/OCPBUGS-21670): Bump golang.org/x/net to v0.17.0 [#32](https://github.com/openshift/cluster-olm-operator/pull/32) * [OCPBUGS-19095](https://issues.redhat.com/browse/OCPBUGS-19095): Updating ose-cluster-olm-operator images to be consistent with ART [#31](https://github.com/openshift/cluster-olm-operator/pull/31) * [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/0dbbb6132ced379602040731ff889eebb4202e73...a7ba89874970cd10765e1d0753405e32fb357d84) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/078c81f6e3e39675e8b1edd864e1ddf72472bb73) * [OCPBUGS-36150](https://issues.redhat.com/browse/OCPBUGS-36150): Set required-scc for openshift workloads [#581](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/581) * [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#567](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/567) * [OCPBUGS-24145](https://issues.redhat.com/browse/OCPBUGS-24145): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#560](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/560) * [OCPBUGS-18115](https://issues.redhat.com/browse/OCPBUGS-18115): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#551](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/551) * [OCPBUGS-19231](https://issues.redhat.com/browse/OCPBUGS-19231): Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART [#548](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/548) * [OCPBUGS-21733](https://issues.redhat.com/browse/OCPBUGS-21733): bump library-go to include switch to HTTP/1.1 [#552](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/552) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/700dc111fd98c315648a78371b11be34fa4dbba3...078c81f6e3e39675e8b1edd864e1ddf72472bb73) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/68e8bcd5c5df5072d5eefb8abd9c9ecab289adf4) * [OCPBUGS-35922](https://issues.redhat.com/browse/OCPBUGS-35922): lots of churn during image registry managed/removed transition [#358](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/358) * [OCPBUGS-35869](https://issues.redhat.com/browse/OCPBUGS-35869): nil pointer reference in ocm-operator [#357](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/357) * [OCPBUGS-36152](https://issues.redhat.com/browse/OCPBUGS-36152): Set required-scc for openshift workloads [#361](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/361) * [OCPBUGS-31708](https://issues.redhat.com/browse/OCPBUGS-31708): Update opentelemetry dependency 415 [#342](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/342) * [OCPBUGS-25985](https://issues.redhat.com/browse/OCPBUGS-25985): Disable deployer-controller when deploymentconfig is disabled [#322](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/322) * [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#319](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/319) * [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327) * [OCPBUGS-22956](https://issues.redhat.com/browse/OCPBUGS-22956): Remove blockage of ConfigObserver by build informer HasSynced flag [#315](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/315) * Revert "Revert #300 "API-1666: add image pull secret cleanup controller"" [#314](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/314) * Revert #300 "API-1666: add image pull secret cleanup controller" [#313](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/313) * [API-1642](https://issues.redhat.com/browse/API-1642): add image pull secret cleanup controller [#300](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/300) * [API-1642](https://issues.redhat.com/browse/API-1642): Do not generate image pull secrets for internal registry when internal registry is disabled. [#298](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/298) * [OCPBUGS-21830](https://issues.redhat.com/browse/OCPBUGS-21830): bump(k8s,openshift) to address CVE-2023-44487 [#308](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/308) * [OCPBUGS-20164](https://issues.redhat.com/browse/OCPBUGS-20164): Include Build CRD in manifests [#306](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/306) * [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#305](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/305) * [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#304](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/304) * [OCPBUGS-18932](https://issues.redhat.com/browse/OCPBUGS-18932): Always sort disabled controller list [#302](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/302) * [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable BuildConfigChange controller when Build cap is disabled [#299](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/299) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/3985c55f99e1ea013be2db096059c09b2ed98118...68e8bcd5c5df5072d5eefb8abd9c9ecab289adf4) ### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/37a0a919b1032f7affa49b756eda4762d77751d5) * [OCPBUGS-24077](https://issues.redhat.com/browse/OCPBUGS-24077): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#104](https://github.com/openshift/platform-operators/pull/104) * manifests: Simplify filenames for default runlevel [#101](https://github.com/openshift/platform-operators/pull/101) * Makefile: Drop yq prerequisite from 'manifests' target [#103](https://github.com/openshift/platform-operators/pull/103) * [OCPBUGS-22457](https://issues.redhat.com/browse/OCPBUGS-22457): manifests/0000_50_cluster-platform-operator-manager_07-aggregated-clusteroperator: Drop namespace [#100](https://github.com/openshift/platform-operators/pull/100) * switch to bingo for dependency management (and bump golangci-lint@v1.51.0) [#95](https://github.com/openshift/platform-operators/pull/95) * [OCPBUGS-20511](https://issues.redhat.com/browse/OCPBUGS-20511): Bump golang.org/x/net to v0.17.0 [#92](https://github.com/openshift/platform-operators/pull/92) * [OCPBUGS-19118](https://issues.redhat.com/browse/OCPBUGS-19118): Updating ose-cluster-platform-operators-manager images to be consistent with ART [#91](https://github.com/openshift/platform-operators/pull/91) * [Full changelog](https://github.com/openshift/platform-operators/compare/08fb27e72e32ea0a06ab02b3b746114148d96c25...37a0a919b1032f7affa49b756eda4762d77751d5) ### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/cc48f3152213bfe6e42fdd82f760246e862d208f) * [OCPBUGS-24078](https://issues.redhat.com/browse/OCPBUGS-24078): Updating ose-cluster-policy-controller-container image to be consistent with ART [#143](https://github.com/openshift/cluster-policy-controller/pull/143) * go.mod: remove replaces [#138](https://github.com/openshift/cluster-policy-controller/pull/138) * [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): bump(k8s,openshift) to address CVE-2023-44487 [#137](https://github.com/openshift/cluster-policy-controller/pull/137) * [OCPBUGS-21638](https://issues.redhat.com/browse/OCPBUGS-21638): Bump deps to address CVE-2023-44487 [#133](https://github.com/openshift/cluster-policy-controller/pull/133) * [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#132](https://github.com/openshift/cluster-policy-controller/pull/132) * [OCPBUGS-19119](https://issues.redhat.com/browse/OCPBUGS-19119): Updating cluster-policy-controller images to be consistent with ART [#131](https://github.com/openshift/cluster-policy-controller/pull/131) * [OCPBUGS-17458](https://issues.redhat.com/browse/OCPBUGS-17458): ps syncer: don't hotloop on a missing namespace [#130](https://github.com/openshift/cluster-policy-controller/pull/130) * [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/219f6f6f072d867201d4923d39fd8bcaecbe7c59...cc48f3152213bfe6e42fdd82f760246e862d208f) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/dac17316605b5dbdc0b12f84af7ff3aa41e8f577) * [OCPBUGS-37464](https://issues.redhat.com/browse/OCPBUGS-37464): Set required-scc for openshift workloads [#548](https://github.com/openshift/cluster-samples-operator/pull/548) * [OCPBUGS-38157](https://issues.redhat.com/browse/OCPBUGS-38157): add mfrancisc and metlos as owners add owners 4.15 [#550](https://github.com/openshift/cluster-samples-operator/pull/550) * [OCPBUGS-22034](https://issues.redhat.com/browse/OCPBUGS-22034): bump K8s version to 29.2 [#538](https://github.com/openshift/cluster-samples-operator/pull/538) * [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator-container image to be consistent with ART [#523](https://github.com/openshift/cluster-samples-operator/pull/523) * [SO-119](https://issues.redhat.com/browse/SO-119): Fix mariadb import url in OKD [#525](https://github.com/openshift/cluster-samples-operator/pull/525) * [SO-118](https://issues.redhat.com/browse/SO-118): Bumping the K8s to 28.2 and golang to 1.20 [#524](https://github.com/openshift/cluster-samples-operator/pull/524) * [SO-117](https://issues.redhat.com/browse/SO-117): Library Sync for OCP release 4.15 [#522](https://github.com/openshift/cluster-samples-operator/pull/522) * [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519) * Use latest tag for network-tools imagestream [#518](https://github.com/openshift/cluster-samples-operator/pull/518) * [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/61a34659e4499188ab6f790e3a07aba8be9e9bdd...dac17316605b5dbdc0b12f84af7ff3aa41e8f577) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/4c2b89d6a00e5a0c300b61dbad2a9e289c404e98) * [OCPBUGS-36374](https://issues.redhat.com/browse/OCPBUGS-36374): Set required-scc for openshift workloads [#484](https://github.com/openshift/cluster-storage-operator/pull/484) * [OCPBUGS-33466](https://issues.redhat.com/browse/OCPBUGS-33466): Fix problem-detector proxy setting [#471](https://github.com/openshift/cluster-storage-operator/pull/471) * [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#461](https://github.com/openshift/cluster-storage-operator/pull/461) * [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446) * [OCPBUGS-27017](https://issues.redhat.com/browse/OCPBUGS-27017): replace instanceAdmin role with specific compute permissions [#439](https://github.com/openshift/cluster-storage-operator/pull/439) * [OCPBUGS-25241](https://issues.redhat.com/browse/OCPBUGS-25241): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#433](https://github.com/openshift/cluster-storage-operator/pull/433) * [OCPVE-789](https://issues.redhat.com/browse/OCPVE-789): annotate credentials request manifests [#418](https://github.com/openshift/cluster-storage-operator/pull/418) * [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add Prometheus rules for SELinux telemetry [#422](https://github.com/openshift/cluster-storage-operator/pull/422) * [TRT-1376](https://issues.redhat.com/browse/TRT-1376): Revert #410 "CCO-251: use granular permissions for gcp credentails request" [#426](https://github.com/openshift/cluster-storage-operator/pull/426) * [CCO-251](https://issues.redhat.com/browse/CCO-251): use granular permissions for gcp credentails request [#410](https://github.com/openshift/cluster-storage-operator/pull/410) * [OCPBUGS-24112](https://issues.redhat.com/browse/OCPBUGS-24112): Updating ose-cluster-storage-operator-container image to be consistent with ART [#424](https://github.com/openshift/cluster-storage-operator/pull/424) * [STOR-1487](https://issues.redhat.com/browse/STOR-1487): bump openshift/api to get IBMCloudCSIDriverConfigSpec [#423](https://github.com/openshift/cluster-storage-operator/pull/423) * [OCPBUGS-24027](https://issues.redhat.com/browse/OCPBUGS-24027): forbidden access to resource on shared-resource-csi-driver-operator [#425](https://github.com/openshift/cluster-storage-operator/pull/425) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#421](https://github.com/openshift/cluster-storage-operator/pull/421) * [OCPBUGS-23120](https://issues.redhat.com/browse/OCPBUGS-23120): [IBM ROKS] cluster-storage-operator does not set upgradeable=True [#417](https://github.com/openshift/cluster-storage-operator/pull/417) * [STOR-1453](https://issues.redhat.com/browse/STOR-1453): Grant permissions to access `apiserver` to CSI driver operators [#415](https://github.com/openshift/cluster-storage-operator/pull/415) * [OCPBUGS-22594](https://issues.redhat.com/browse/OCPBUGS-22594): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#414](https://github.com/openshift/cluster-storage-operator/pull/414) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#411](https://github.com/openshift/cluster-storage-operator/pull/411) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#404](https://github.com/openshift/cluster-storage-operator/pull/404) * [OCPBUGS-13669](https://issues.redhat.com/browse/OCPBUGS-13669): skip Azure File installation on Azure StackHub [#395](https://github.com/openshift/cluster-storage-operator/pull/395) * [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Move KAS access label to right place [#403](https://github.com/openshift/cluster-storage-operator/pull/403) * update readme [#400](https://github.com/openshift/cluster-storage-operator/pull/400) * [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Add KAS label to aws-ebs-operator [#399](https://github.com/openshift/cluster-storage-operator/pull/399) * [OCPBUGS-19184](https://issues.redhat.com/browse/OCPBUGS-19184): Updating cluster-storage-operator images to be consistent with ART [#398](https://github.com/openshift/cluster-storage-operator/pull/398) * [STOR-1446](https://issues.redhat.com/browse/STOR-1446): Restart `vsphere-problem-detector-operator` Pods if `serving-cert` changed [#394](https://github.com/openshift/cluster-storage-operator/pull/394) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192...4c2b89d6a00e5a0c300b61dbad2a9e289c404e98) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/be6ba5b0acee8970345b5259025506a04562ad37) * [OCPBUGS-24115](https://issues.redhat.com/browse/OCPBUGS-24115): Updating ose-cluster-update-keys-container image to be consistent with ART [#52](https://github.com/openshift/cluster-update-keys/pull/52) * [OCPBUGS-19189](https://issues.redhat.com/browse/OCPBUGS-19189): Updating ose-cluster-update-keys images to be consistent with ART [#51](https://github.com/openshift/cluster-update-keys/pull/51) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/e0c26a084139906e866d9eec89f05d2d3211b334...be6ba5b0acee8970345b5259025506a04562ad37) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/cb586f43f568a6d156933fcda4486fc310a25806) * [OCPBUGS-36817](https://issues.redhat.com/browse/OCPBUGS-36817): Set required-scc for openshift workloads [#1068](https://github.com/openshift/cluster-version-operator/pull/1068) * [OCPBUGS-33984](https://issues.redhat.com/browse/OCPBUGS-33984): Add admin-gate for OCP 4.16 [#1049](https://github.com/openshift/cluster-version-operator/pull/1049) * [OCPBUGS-27359](https://issues.redhat.com/browse/OCPBUGS-27359): CO health: only track current in-progress upgrade start [#1023](https://github.com/openshift/cluster-version-operator/pull/1023) * [OCPBUGS-26607](https://issues.redhat.com/browse/OCPBUGS-26607): clusterOperatorBuilder: Reconcile metadata on COs [#1017](https://github.com/openshift/cluster-version-operator/pull/1017) * [OCPBUGS-25949](https://issues.redhat.com/browse/OCPBUGS-25949): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1013](https://github.com/openshift/cluster-version-operator/pull/1013) * [OCPBUGS-25664](https://issues.redhat.com/browse/OCPBUGS-25664): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1007](https://github.com/openshift/cluster-version-operator/pull/1007) * [OCPBUGS-25690](https://issues.redhat.com/browse/OCPBUGS-25690): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#1008](https://github.com/openshift/cluster-version-operator/pull/1008) * [OTA-917](https://issues.redhat.com/browse/OTA-917): pkg/customsignaturestore: Implement signatureStores customization [#994](https://github.com/openshift/cluster-version-operator/pull/994) * [OCPVE-646](https://issues.redhat.com/browse/OCPVE-646): add cloud credential capability [#963](https://github.com/openshift/cluster-version-operator/pull/963) * [OTA-855](https://issues.redhat.com/browse/OTA-855): Create GET requests to the Prometheus API server [#999](https://github.com/openshift/cluster-version-operator/pull/999) * [OCPBUGS-23290](https://issues.redhat.com/browse/OCPBUGS-23290): install/0000_90_cluster-version-operator_02_servicemonitor: 'oc get …' for CannotRetrieveUpdates [#995](https://github.com/openshift/cluster-version-operator/pull/995) * [OCPBUGS-24138](https://issues.redhat.com/browse/OCPBUGS-24138): NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART [#1000](https://github.com/openshift/cluster-version-operator/pull/1000) * [OCPBUGS-23377](https://issues.redhat.com/browse/OCPBUGS-23377): to reduce log noise, only log sync_worker messages on retry or payload change [#997](https://github.com/openshift/cluster-version-operator/pull/997) * [OCPBUGS-19391](https://issues.redhat.com/browse/OCPBUGS-19391): do not reconcile rules if aggregationRule is set [#993](https://github.com/openshift/cluster-version-operator/pull/993) * [OCPBUGS-8079](https://issues.redhat.com/browse/OCPBUGS-8079): install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ [#992](https://github.com/openshift/cluster-version-operator/pull/992) * [OCPVE-740](https://issues.redhat.com/browse/OCPVE-740): vendor: bump openshift/api [#984](https://github.com/openshift/cluster-version-operator/pull/984) * [OCPBUGS-21933](https://issues.redhat.com/browse/OCPBUGS-21933): Bump http-related deps [#983](https://github.com/openshift/cluster-version-operator/pull/983) * [OCPVE-673](https://issues.redhat.com/browse/OCPVE-673): Bump API to Add OLM Capability [#971](https://github.com/openshift/cluster-version-operator/pull/971) * Revert openshift/api bump PR merged by mistake (977) [#978](https://github.com/openshift/cluster-version-operator/pull/978) * [OCPVE-659](https://issues.redhat.com/browse/OCPVE-659): bump openshift/api [#977](https://github.com/openshift/cluster-version-operator/pull/977) * [OCPBUGS-19868](https://issues.redhat.com/browse/OCPBUGS-19868): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#975](https://github.com/openshift/cluster-version-operator/pull/975) * [OCPBUGS-19512](https://issues.redhat.com/browse/OCPBUGS-19512): pkg/clusterconditions/promql: Warm cache with 1s delay [#939](https://github.com/openshift/cluster-version-operator/pull/939) * [OCPBUGS-18386](https://issues.redhat.com/browse/OCPBUGS-18386): Properly reconcile SCC resources [#966](https://github.com/openshift/cluster-version-operator/pull/966) * [OTA-854](https://issues.redhat.com/browse/OTA-854): Add configurable CVO knobs for risk-evaluation PromQL target [#926](https://github.com/openshift/cluster-version-operator/pull/926) * [OCPBUGS-18984](https://issues.redhat.com/browse/OCPBUGS-18984): pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition [#968](https://github.com/openshift/cluster-version-operator/pull/968) * [OCPBUGS-19222](https://issues.redhat.com/browse/OCPBUGS-19222): Updating cluster-version-operator images to be consistent with ART [#970](https://github.com/openshift/cluster-version-operator/pull/970) * [OCPBUGS-18567](https://issues.redhat.com/browse/OCPBUGS-18567): lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment [#965](https://github.com/openshift/cluster-version-operator/pull/965) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/af210dc66d38bce5793155aac8bfb6220a7085d9...cb586f43f568a6d156933fcda4486fc310a25806) ### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/617398f581faadbad2c7ded993bfa3169a87b6ab) * Updating configmap-reload-container image to be consistent with ART [#57](https://github.com/openshift/configmap-reload/pull/57) * [OCPBUGS-19171](https://issues.redhat.com/browse/OCPBUGS-19171): Updating configmap-reload images to be consistent with ART [#56](https://github.com/openshift/configmap-reload/pull/56) * [Full changelog](https://github.com/openshift/configmap-reload/compare/716a0c33bb693127fba3b3512622710785a59e8e...617398f581faadbad2c7ded993bfa3169a87b6ab) ### [console](https://github.com/openshift/console/tree/f6f61ca06f008ead018f37668f9fa391e668e703) * [OCPBUGS-38108](https://issues.redhat.com/browse/OCPBUGS-38108): Revert - terminal: use username if uid is not present [#14114](https://github.com/openshift/console/pull/14114) * [OCPBUGS-32793](https://issues.redhat.com/browse/OCPBUGS-32793): Fix that telemetry events didn't incl. an userId anymore [#13792](https://github.com/openshift/console/pull/13792) * [OCPBUGS-38970](https://issues.redhat.com/browse/OCPBUGS-38970): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14195](https://github.com/openshift/console/pull/14195) * [OCPBUGS-38969](https://issues.redhat.com/browse/OCPBUGS-38969): Tooltip on Pipeline when expression is not shows [#14194](https://github.com/openshift/console/pull/14194) * [OCPBUGS-39085](https://issues.redhat.com/browse/OCPBUGS-39085): Fix utilization card limits/total display [#14209](https://github.com/openshift/console/pull/14209) * [OCPBUGS-33938](https://issues.redhat.com/browse/OCPBUGS-33938): Add validation for vSphere fields Handle submit errors correctly [#14210](https://github.com/openshift/console/pull/14210) * [OCPBUGS-39112](https://issues.redhat.com/browse/OCPBUGS-39112): Disable Knative e2e tests [#14197](https://github.com/openshift/console/pull/14197) * [OCPBUGS-33076](https://issues.redhat.com/browse/OCPBUGS-33076): Remove deprecated resources from spec of the Pipeline [#13801](https://github.com/openshift/console/pull/13801) * [OCPBUGS-35495](https://issues.redhat.com/browse/OCPBUGS-35495): fix crash if helm chart metadata is nil [#13977](https://github.com/openshift/console/pull/13977) * [OCPBUGS-37452](https://issues.redhat.com/browse/OCPBUGS-37452): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14083](https://github.com/openshift/console/pull/14083) * [OCPBUGS-38496](https://issues.redhat.com/browse/OCPBUGS-38496): Fix password set to Secret created through Start Pipeline form [#14152](https://github.com/openshift/console/pull/14152) * [OCPBUGS-37399](https://issues.redhat.com/browse/OCPBUGS-37399): Add default sorting column for VirtualizedTable component of dynamic plugin sdk [#14079](https://github.com/openshift/console/pull/14079) * [OCPBUGS-37099](https://issues.redhat.com/browse/OCPBUGS-37099): fix BMH restart annotation [#14071](https://github.com/openshift/console/pull/14071) * [OCPBUGS-37458](https://issues.redhat.com/browse/OCPBUGS-37458): one OAuth.config.openshift.io item on Global Configuration page links to non-existing resource [#14085](https://github.com/openshift/console/pull/14085) * [OCPBUGS-34477](https://issues.redhat.com/browse/OCPBUGS-34477): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13897](https://github.com/openshift/console/pull/13897) * [OCPBUGS-36971](https://issues.redhat.com/browse/OCPBUGS-36971): ensure correct API version for OperandDetails [#14058](https://github.com/openshift/console/pull/14058) * [OCPBUGS-34912](https://issues.redhat.com/browse/OCPBUGS-34912): Improve Pipeline list page performance [#13929](https://github.com/openshift/console/pull/13929) * [OCPBUGS-33642](https://issues.redhat.com/browse/OCPBUGS-33642): Patch PF dynamic module parser to exclude 'next' modules [#13849](https://github.com/openshift/console/pull/13849) * [OCPBUGS-32501](https://issues.redhat.com/browse/OCPBUGS-32501): Pipeline details page Metrics tab crashed due to no custom data [#13781](https://github.com/openshift/console/pull/13781) * [OCPBUGS-34478](https://issues.redhat.com/browse/OCPBUGS-34478): UI inconsistency in topology when application grouping is collapsed [#13898](https://github.com/openshift/console/pull/13898) * [OCPBUGS-34350](https://issues.redhat.com/browse/OCPBUGS-34350): Create Serverless form does not create BuildConfig [#13891](https://github.com/openshift/console/pull/13891) * [OCPBUGS-32029](https://issues.redhat.com/browse/OCPBUGS-32029): Use UserInfo username field when logging out as kubeadmin [#13748](https://github.com/openshift/console/pull/13748) * [OCPBUGS-30208](https://issues.redhat.com/browse/OCPBUGS-30208): Fix asynccache bugs [#13807](https://github.com/openshift/console/pull/13807) * [OCPBUGS-33838](https://issues.redhat.com/browse/OCPBUGS-33838): TaskRuns should not be fetched for Failed PLR's [#13863](https://github.com/openshift/console/pull/13863) * [OCPBUGS-34703](https://issues.redhat.com/browse/OCPBUGS-34703): fix bug where textarea is not resizable [#13913](https://github.com/openshift/console/pull/13913) * Revert "OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters" [#13905](https://github.com/openshift/console/pull/13905) * [OCPBUGS-33263](https://issues.redhat.com/browse/OCPBUGS-33263): Pipeline list page is crashed when navigating from Search page [#13819](https://github.com/openshift/console/pull/13819) * [OCPBUGS-33166](https://issues.redhat.com/browse/OCPBUGS-33166): Fix NAD always on default namespace [#13865](https://github.com/openshift/console/pull/13865) * [OCPBUGS-31863](https://issues.redhat.com/browse/OCPBUGS-31863): make sure folder is encapsulated with quotas [#13737](https://github.com/openshift/console/pull/13737) * [OCPBUGS-33506](https://issues.redhat.com/browse/OCPBUGS-33506): Fix Pipeline details page with when expression using CEL expression [#13835](https://github.com/openshift/console/pull/13835) * [OCPBUGS-32505](https://issues.redhat.com/browse/OCPBUGS-32505): Add visual connector between VMs and non VMs workloads [#13782](https://github.com/openshift/console/pull/13782) * [OCPBUGS-33548](https://issues.redhat.com/browse/OCPBUGS-33548): restrict Masthead logo to max-height [#13839](https://github.com/openshift/console/pull/13839) * [OCPBUGS-32497](https://issues.redhat.com/browse/OCPBUGS-32497): Improve Create serverless function error message [#13778](https://github.com/openshift/console/pull/13778) * [OCPBUGS-33191](https://issues.redhat.com/browse/OCPBUGS-33191): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13810](https://github.com/openshift/console/pull/13810) * [OCPBUGS-33058](https://issues.redhat.com/browse/OCPBUGS-33058): fix issues with Edit Route form [#13800](https://github.com/openshift/console/pull/13800) * [OCPBUGS-32187](https://issues.redhat.com/browse/OCPBUGS-32187): Add flag to hide Output tab contributed by pipelines-plugin [#13756](https://github.com/openshift/console/pull/13756) * [OCPBUGS-32716](https://issues.redhat.com/browse/OCPBUGS-32716): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13788](https://github.com/openshift/console/pull/13788) * [OCPBUGS-32506](https://issues.redhat.com/browse/OCPBUGS-32506): setting correct image trigger annotation [#13783](https://github.com/openshift/console/pull/13783) * [OCPBUGS-32933](https://issues.redhat.com/browse/OCPBUGS-32933): change OperatorHub filter FIPS Mode to Designed for FIPS [#13796](https://github.com/openshift/console/pull/13796) * [OCPBUGS-31799](https://issues.redhat.com/browse/OCPBUGS-31799): Improve PipelineRun list view performance [#13731](https://github.com/openshift/console/pull/13731) * [OCPBUGS-32796](https://issues.redhat.com/browse/OCPBUGS-32796): auth: fix OIDC logging out [#13793](https://github.com/openshift/console/pull/13793) * [OCPBUGS-31445](https://issues.redhat.com/browse/OCPBUGS-31445): Upgrade Pipeline trigger resources to v1beta1 [#13704](https://github.com/openshift/console/pull/13704) * [OCPBUGS-31045](https://issues.redhat.com/browse/OCPBUGS-31045): fix for execute inline markdown syntax issue [#13681](https://github.com/openshift/console/pull/13681) * [OCPBUGS-32518](https://issues.redhat.com/browse/OCPBUGS-32518): Add warning about service binding operator will not be supported from 4.15 [#13784](https://github.com/openshift/console/pull/13784) * [OCPBUGS-32391](https://issues.redhat.com/browse/OCPBUGS-32391): Routes created by devfiles do not always use HTTPS [#13771](https://github.com/openshift/console/pull/13771) * [OCPBUGS-32340](https://issues.redhat.com/browse/OCPBUGS-32340): Increased max nodes limit to 200 in topology page [#13767](https://github.com/openshift/console/pull/13767) * [OCPBUGS-32399](https://issues.redhat.com/browse/OCPBUGS-32399): Update devfile library to v2.2.2 [#13762](https://github.com/openshift/console/pull/13762) * [OCPBUGS-32156](https://issues.redhat.com/browse/OCPBUGS-32156): TaskRun status is not displayed near the name [#13752](https://github.com/openshift/console/pull/13752) * [OCPBUGS-31806](https://issues.redhat.com/browse/OCPBUGS-31806): Use bearer-token for local dev with auth [#13732](https://github.com/openshift/console/pull/13732) * [OCPBUGS-31839](https://issues.redhat.com/browse/OCPBUGS-31839): fix bug where paused MCPs were incorrectly unpausing w… [#13735](https://github.com/openshift/console/pull/13735) * [OCPBUGS-31105](https://issues.redhat.com/browse/OCPBUGS-31105): Update to pf5.2 to fix quick starts [#13686](https://github.com/openshift/console/pull/13686) * [OCPBUGS-31476](https://issues.redhat.com/browse/OCPBUGS-31476): Requesting for country codes in localization of openshift - webconsole [#13707](https://github.com/openshift/console/pull/13707) * [OCPBUGS-31046](https://issues.redhat.com/browse/OCPBUGS-31046): Application creation fail when manually entering input scaling value in local setup [#13682](https://github.com/openshift/console/pull/13682) * [OCPBUGS-30916](https://issues.redhat.com/browse/OCPBUGS-30916), [OCPBUGS-30917](https://issues.redhat.com/browse/OCPBUGS-30917): PipelineRuns in Console show wrong status or load indefinitely [#13672](https://github.com/openshift/console/pull/13672) * [OCPBUGS-30869](https://issues.redhat.com/browse/OCPBUGS-30869): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13668](https://github.com/openshift/console/pull/13668) * [OCPBUGS-31107](https://issues.redhat.com/browse/OCPBUGS-31107): Upload Jar form's Clear button is not functioning [#13688](https://github.com/openshift/console/pull/13688) * [OCPBUGS-30759](https://issues.redhat.com/browse/OCPBUGS-30759): Fix bugs in Console dynamic plugin SDK webpack code [#13678](https://github.com/openshift/console/pull/13678) * [OCPBUGS-30871](https://issues.redhat.com/browse/OCPBUGS-30871): fix Configure link in AlertmanagerReceiversNotConfigur… [#13669](https://github.com/openshift/console/pull/13669) * [OCPBUGS-29963](https://issues.redhat.com/browse/OCPBUGS-29963): i18n upload/download routine task - chore(i18n): update translations [#13670](https://github.com/openshift/console/pull/13670) * [OCPBUGS-30801](https://issues.redhat.com/browse/OCPBUGS-30801): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13663](https://github.com/openshift/console/pull/13663) * [OCPBUGS-30275](https://issues.redhat.com/browse/OCPBUGS-30275): adjusting documentation links for 4.15 [#13648](https://github.com/openshift/console/pull/13648) * [OCPBUGS-30870](https://issues.redhat.com/browse/OCPBUGS-30870): chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13641](https://github.com/openshift/console/pull/13641) * [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467) * [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582) * [OCPBUGS-29781](https://issues.redhat.com/browse/OCPBUGS-29781): Fix operands list endpoint. [#13633](https://github.com/openshift/console/pull/13633) * [OCPBUGS-29812](https://issues.redhat.com/browse/OCPBUGS-29812): Changes to prevent yaml editor crash in version 4.15 [#13638](https://github.com/openshift/console/pull/13638) * [OCPBUGS-29842](https://issues.redhat.com/browse/OCPBUGS-29842): Switch to service from external result route endpoint [#13627](https://github.com/openshift/console/pull/13627) * [OCPBUGS-28889](https://issues.redhat.com/browse/OCPBUGS-28889): VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab [#13570](https://github.com/openshift/console/pull/13570) * [OCPBUGS-27431](https://issues.redhat.com/browse/OCPBUGS-27431): Add source maps to production builds [#13526](https://github.com/openshift/console/pull/13526) * [OCPBUGS-26481](https://issues.redhat.com/browse/OCPBUGS-26481): Tab VolumeSnapshots crashed on PVC page [#13490](https://github.com/openshift/console/pull/13490) * [OCPBUGS-25984](https://issues.redhat.com/browse/OCPBUGS-25984): Fix config ini format [#13475](https://github.com/openshift/console/pull/13475) * [OCPBUGS-29844](https://issues.redhat.com/browse/OCPBUGS-29844): Enable catalog source badge to truncate for long names [#13629](https://github.com/openshift/console/pull/13629) * [OCPBUGS-29846](https://issues.redhat.com/browse/OCPBUGS-29846): Prevent complete page reload when changing perspective [#13631](https://github.com/openshift/console/pull/13631) * [OCPBUGS-29845](https://issues.redhat.com/browse/OCPBUGS-29845): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13630](https://github.com/openshift/console/pull/13630) * [OCPBUGS-29843](https://issues.redhat.com/browse/OCPBUGS-29843): improve empty state message for Machines and MachineSets page [#13628](https://github.com/openshift/console/pull/13628) * [OCPBUGS-29679](https://issues.redhat.com/browse/OCPBUGS-29679): TaskRuns list page is loading constantly for all projects [#13618](https://github.com/openshift/console/pull/13618) * [OCPBUGS-29640](https://issues.redhat.com/browse/OCPBUGS-29640): Output image url link leads to 404 for Shipwright Builds [#13615](https://github.com/openshift/console/pull/13615) * [OCPBUGS-28232](https://issues.redhat.com/browse/OCPBUGS-28232): do not deduplicate ImageManifestVulns in Overview popover [#13545](https://github.com/openshift/console/pull/13545) * chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13594](https://github.com/openshift/console/pull/13594) * [OCPBUGS-26567](https://issues.redhat.com/browse/OCPBUGS-26567): Fixed some problems in topology Chinese translation text [#13498](https://github.com/openshift/console/pull/13498) * [OCPBUGS-29914](https://issues.redhat.com/browse/OCPBUGS-29914): [release-4.15] Use selfsubjectreview API from frontend [#13636](https://github.com/openshift/console/pull/13636) * [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599) * [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584) * [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590) * [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486) * [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548) * [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595) * [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566) * [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575) * [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571) * [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501) * [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563) * [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551) * [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514) * [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536) * [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509) * [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542) * [OCPBUGS-26439](https://issues.redhat.com/browse/OCPBUGS-26439): Add support for custom segment domains (to load JS and make API calls) [#13489](https://github.com/openshift/console/pull/13489) * [OCPBUGS-27177](https://issues.redhat.com/browse/OCPBUGS-27177): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13508](https://github.com/openshift/console/pull/13508) * [OCPBUGS-27306](https://issues.redhat.com/browse/OCPBUGS-27306): Copy response code from proxied plugin requests [#13518](https://github.com/openshift/console/pull/13518) * [OCPBUGS-26591](https://issues.redhat.com/browse/OCPBUGS-26591): add additional check to determine if file is binary [#13499](https://github.com/openshift/console/pull/13499) * [OCPBUGS-24812](https://issues.redhat.com/browse/OCPBUGS-24812): Add missing https:// check for an external link [#13433](https://github.com/openshift/console/pull/13433) * [OCPBUGS-26516](https://issues.redhat.com/browse/OCPBUGS-26516): bump helm version to 3.13.2 for OCP 4.15 [#13465](https://github.com/openshift/console/pull/13465) * [OCPBUGS-26041](https://issues.redhat.com/browse/OCPBUGS-26041): fix bug where Update cluster modal will not open [#13479](https://github.com/openshift/console/pull/13479) * [OCPBUGS-26209](https://issues.redhat.com/browse/OCPBUGS-26209): Fix PipelineRun Logs tab navigation [#13484](https://github.com/openshift/console/pull/13484) * [OCPBUGS-25726](https://issues.redhat.com/browse/OCPBUGS-25726): Re-enable and fix pipelines e2e tests [#13463](https://github.com/openshift/console/pull/13463) * [OCPBUGS-25706](https://issues.redhat.com/browse/OCPBUGS-25706): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13461](https://github.com/openshift/console/pull/13461) * [OCPBUGS-25707](https://issues.redhat.com/browse/OCPBUGS-25707): fix Observe tab in Topology overview [#13462](https://github.com/openshift/console/pull/13462) * [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Follow on logic for only showing VPAs associated with a deployment for a specific project [#13447](https://github.com/openshift/console/pull/13447) * [OCPBUGS-24668](https://issues.redhat.com/browse/OCPBUGS-24668): Only show VPAs that are associated with the selected namespace [#13426](https://github.com/openshift/console/pull/13426) * [OCPBUGS-25324](https://issues.redhat.com/browse/OCPBUGS-25324): fix preferredTab selection on Pipelines page [#13443](https://github.com/openshift/console/pull/13443) * [OCPBUGS-24680](https://issues.redhat.com/browse/OCPBUGS-24680): Backport Add support for Azure Workload Identity / Federated Identity [#13428](https://github.com/openshift/console/pull/13428) * [OCPBUGS-25140](https://issues.redhat.com/browse/OCPBUGS-25140): fix runtime error on Node details Overview when Machin… [#13435](https://github.com/openshift/console/pull/13435) * [OCPBUGS-24678](https://issues.redhat.com/browse/OCPBUGS-24678): Strip 'Server' header from proxy response [#13427](https://github.com/openshift/console/pull/13427) * [OCPBUGS-25210](https://issues.redhat.com/browse/OCPBUGS-25210), [OCPBUGS-25211](https://issues.redhat.com/browse/OCPBUGS-25211): Fix pipelineRuns loading on repository details page [#13439](https://github.com/openshift/console/pull/13439) * [ODC-7389](https://issues.redhat.com/browse/ODC-7389): Update OpenShift favicons as well [#13420](https://github.com/openshift/console/pull/13420) * [OCPBUGS-24582](https://issues.redhat.com/browse/OCPBUGS-24582): Updated functions list page to use new hook useParams [#13419](https://github.com/openshift/console/pull/13419) * [OCPBUGS-18401](https://issues.redhat.com/browse/OCPBUGS-18401): add type and text filters to Events integration test [#13407](https://github.com/openshift/console/pull/13407) * [OCPBUGS-13206](https://issues.redhat.com/browse/OCPBUGS-13206): Fix customPythonDeploymentConfig YAML script to create a Pipeline wasn't working [#13149](https://github.com/openshift/console/pull/13149) * [OCPBUGS-13204](https://issues.redhat.com/browse/OCPBUGS-13204): Fix that customNodeDeployment pipeline YAML script wasn't working [#13148](https://github.com/openshift/console/pull/13148) * [OCPBUGS-24252](https://issues.redhat.com/browse/OCPBUGS-24252): fix subscription page fields [#13416](https://github.com/openshift/console/pull/13416) * [OCPBUGS-23764](https://issues.redhat.com/browse/OCPBUGS-23764): bump PF dependencies to the latest patch fix [#13380](https://github.com/openshift/console/pull/13380) * [OU-286](https://issues.redhat.com/browse/OU-286): add test-id to panel charts to ease e2e tests when titles change [#13340](https://github.com/openshift/console/pull/13340) * [OCPBUGS-23554](https://issues.redhat.com/browse/OCPBUGS-23554): Fix for monaco editor that happens with yaml is being edited [#13414](https://github.com/openshift/console/pull/13414) * [OCPBUGS-23378](https://issues.redhat.com/browse/OCPBUGS-23378): Set min-width for PF popovers that are being overridden by an inline style [#13390](https://github.com/openshift/console/pull/13390) * [OCPBUGS-23347](https://issues.redhat.com/browse/OCPBUGS-23347): fix vCenter cluster being empty [#13209](https://github.com/openshift/console/pull/13209) * [OCPBUGS-24339](https://issues.redhat.com/browse/OCPBUGS-24339): Do not depend on a global installed lint-staged [#13409](https://github.com/openshift/console/pull/13409) * [OCPBUGS-24399](https://issues.redhat.com/browse/OCPBUGS-24399): Update our overrides css rule to remove list bullet from PF4 ui elements [#13406](https://github.com/openshift/console/pull/13406) * [OCPBUGS-23761](https://issues.redhat.com/browse/OCPBUGS-23761): PatternFly5 update: Fix quick search input background color in dark mode [#13398](https://github.com/openshift/console/pull/13398) * [OCPBUGS-18401](https://issues.redhat.com/browse/OCPBUGS-18401): fix filtering issues on Events [#13395](https://github.com/openshift/console/pull/13395) * [OCPBUGS-23263](https://issues.redhat.com/browse/OCPBUGS-23263): Update i18next-parser dev dependency in console [#13330](https://github.com/openshift/console/pull/13330) * [OCPBUGS-24267](https://issues.redhat.com/browse/OCPBUGS-24267): Cluster configuration fields are not visible [#13386](https://github.com/openshift/console/pull/13386) * [OCPBUGS-22976](https://issues.redhat.com/browse/OCPBUGS-22976): S2I Build Wizard should check for Containerfile in addition to Dockerfile [#13378](https://github.com/openshift/console/pull/13378) * [OCPBUGS-24001](https://issues.redhat.com/browse/OCPBUGS-24001): Fix crash when ArtifactHub Task has no version [#13379](https://github.com/openshift/console/pull/13379) * [OCPBUGS-18371](https://issues.redhat.com/browse/OCPBUGS-18371): Searching for items in quick search is confusing [#13381](https://github.com/openshift/console/pull/13381) * [OCPBUGS-24280](https://issues.redhat.com/browse/OCPBUGS-24280): view sbom link redirection should be based on taskrun annotation [#13387](https://github.com/openshift/console/pull/13387) * [OCPBUGS-24339](https://issues.redhat.com/browse/OCPBUGS-24339): Add note about git hooks and PATH env var to README [#13396](https://github.com/openshift/console/pull/13396) * [OCPBUGS-18542](https://issues.redhat.com/browse/OCPBUGS-18542): Fixed topology package e2e tests [#13136](https://github.com/openshift/console/pull/13136) * [CONSOLE-3852](https://issues.redhat.com/browse/CONSOLE-3852): remove PatternFly classnames from integration tests [#13337](https://github.com/openshift/console/pull/13337) * [OCPBUGS-24203](https://issues.redhat.com/browse/OCPBUGS-24203): ConsolePlugin metrics must no longer be grouped by the vendor [#13383](https://github.com/openshift/console/pull/13383) * [CONSOLE-3732](https://issues.redhat.com/browse/CONSOLE-3732): Add option to enable/disable tailing to Pod log viewer [#13298](https://github.com/openshift/console/pull/13298) * [CONSOLE-3705](https://issues.redhat.com/browse/CONSOLE-3705): Phase 1 of using OpenShift Dynamic Plugin SDK [#13188](https://github.com/openshift/console/pull/13188) * [OCPBUGS-23779](https://issues.redhat.com/browse/OCPBUGS-23779): Fix crash when user clicks on Show tooltips [#13382](https://github.com/openshift/console/pull/13382) * [OCPBUGS-19426](https://issues.redhat.com/browse/OCPBUGS-19426): Edit the secret and add the Chinese in the web-console, garbled characters will be displayed [#13333](https://github.com/openshift/console/pull/13333) * [CONSOLE-3764](https://issues.redhat.com/browse/CONSOLE-3764): Update husky to v8.0.3 [#13320](https://github.com/openshift/console/pull/13320) * [OCPBUGS-23125](https://issues.redhat.com/browse/OCPBUGS-23125): add access review for impersonate [#13345](https://github.com/openshift/console/pull/13345) * [OCPBUGS-23780](https://issues.redhat.com/browse/OCPBUGS-23780), [OCPBUGS-23783](https://issues.redhat.com/browse/OCPBUGS-23783), [OCPBUGS-23794](https://issues.redhat.com/browse/OCPBUGS-23794), [OCPBUGS-23977](https://issues.redhat.com/browse/OCPBUGS-23977): Bring back the Decorators and Pod Rings around resources in Topology [#13376](https://github.com/openshift/console/pull/13376) * [OCPBUGS-23956](https://issues.redhat.com/browse/OCPBUGS-23956): PatternFly5 update: Remove text decoration for task node on hover [#13371](https://github.com/openshift/console/pull/13371) * [OCPBUGS-23786](https://issues.redhat.com/browse/OCPBUGS-23786): PatternFly5 update: fix code snippet color in quick start in dark mode [#13366](https://github.com/openshift/console/pull/13366) * [OCPBUGS-23770](https://issues.redhat.com/browse/OCPBUGS-23770): After PatternFly5 update: Typology sidebar layout issue [#13363](https://github.com/openshift/console/pull/13363) * [OCPBUGS-23248](https://issues.redhat.com/browse/OCPBUGS-23248): change Alertmanager form to create using matchers inst… [#13358](https://github.com/openshift/console/pull/13358) * [OCPBUGS-23980](https://issues.redhat.com/browse/OCPBUGS-23980): Fix logs streaming auto scroll issue [#13377](https://github.com/openshift/console/pull/13377) * [OCPBUGS-23778](https://issues.redhat.com/browse/OCPBUGS-23778): Apply the correct font-family for the page header action button and menu items. [#13375](https://github.com/openshift/console/pull/13375) * [OCPBUGS-23756](https://issues.redhat.com/browse/OCPBUGS-23756): fix layout of Show tooltips in YAML editor [#13374](https://github.com/openshift/console/pull/13374) * [OCPBUGS-23971](https://issues.redhat.com/browse/OCPBUGS-23971): remove pf-m-grid-md from tables so table headers appea… [#13373](https://github.com/openshift/console/pull/13373) * [OCPBUGS-23927](https://issues.redhat.com/browse/OCPBUGS-23927): fix table layout issue with Identity providers table [#13372](https://github.com/openshift/console/pull/13372) * [OCPBUGS-23769](https://issues.redhat.com/browse/OCPBUGS-23769): PatternFly5 update: fix Topologylist view hover effect [#13368](https://github.com/openshift/console/pull/13368) * [CONSOLE-3793](https://issues.redhat.com/browse/CONSOLE-3793): add uptime to Node pages [#13312](https://github.com/openshift/console/pull/13312) * [OCPBUGS-23559](https://issues.redhat.com/browse/OCPBUGS-23559): Styling issue in functions list page after PatternFly upgrade [#13356](https://github.com/openshift/console/pull/13356) * chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 243 [#13253](https://github.com/openshift/console/pull/13253) * [OCPBUGS-23923](https://issues.redhat.com/browse/OCPBUGS-23923): fix PipelineRun task logs switcher [#13369](https://github.com/openshift/console/pull/13369) * [OCPBUGS-23775](https://issues.redhat.com/browse/OCPBUGS-23775): After PatternFly5 update: Form error is missing when import a container image [#13365](https://github.com/openshift/console/pull/13365) * [OCPBUGS-23765](https://issues.redhat.com/browse/OCPBUGS-23765): fix dark theme issue for helm release readme modal [#13370](https://github.com/openshift/console/pull/13370) * [ODC-7359](https://issues.redhat.com/browse/ODC-7359): Fix shipwright build e2e tests [#13296](https://github.com/openshift/console/pull/13296) * [OCPBUGS-23787](https://issues.redhat.com/browse/OCPBUGS-23787): PatternFly5 update: fix Quickstarts catalog item count alignment [#13367](https://github.com/openshift/console/pull/13367) * [OCPBUGS-23776](https://issues.redhat.com/browse/OCPBUGS-23776): After PatternFly5 update: Add page > more button dropdown is too wide [#13361](https://github.com/openshift/console/pull/13361) * [OCPBUGS-23768](https://issues.redhat.com/browse/OCPBUGS-23768): After PatternFly5 update: Navigation: Extra space after divider [#13362](https://github.com/openshift/console/pull/13362) * [OCPBUGS-23912](https://issues.redhat.com/browse/OCPBUGS-23912), [OCPBUGS-23918](https://issues.redhat.com/browse/OCPBUGS-23918): Add Vulnerabilities column and signed icon in PAC repository PLR list [#13364](https://github.com/openshift/console/pull/13364) * [ODC-7426](https://issues.redhat.com/browse/ODC-7426): Deletion of pipeline run after tekton result installation should be user-friendly [#13353](https://github.com/openshift/console/pull/13353) * [OCPBUGS-23388](https://issues.redhat.com/browse/OCPBUGS-23388): Pipeline Name gets changed to "new-pipeline" on the Edit Pipeline YAML/Builder [#13344](https://github.com/openshift/console/pull/13344) * [ODC-7389](https://issues.redhat.com/browse/ODC-7389): Replace topology graphic with new version for openshift v4.15 [#13350](https://github.com/openshift/console/pull/13350) * [OCPBUGS-23543](https://issues.redhat.com/browse/OCPBUGS-23543): Deployment option is missing in 'Deploy Image' [#13354](https://github.com/openshift/console/pull/13354) * [ODC-7428](https://issues.redhat.com/browse/ODC-7428): Update quick start name and document links for getting started section [#13348](https://github.com/openshift/console/pull/13348) * [OCPBUGS-22778](https://issues.redhat.com/browse/OCPBUGS-22778): Fix for yaml editor that crashes with MCE and ACM plugins enabled [#13346](https://github.com/openshift/console/pull/13346) * [GITOPS-3575](https://issues.redhat.com/browse/GITOPS-3575): Added disallowed flag to gitops static plugin [#13307](https://github.com/openshift/console/pull/13307) * [ODC-7419](https://issues.redhat.com/browse/ODC-7419): Feature new Quickstarts (RHDH on the admin dashboard and Pipelines/Serverless on the dev add page) [#13303](https://github.com/openshift/console/pull/13303) * [CONSOLE-3693](https://issues.redhat.com/browse/CONSOLE-3693): Upgrade to PFv5 versions [#12983](https://github.com/openshift/console/pull/12983) * [ODC-7425](https://issues.redhat.com/browse/ODC-7425): Add serverless function icon in Add page group header [#13338](https://github.com/openshift/console/pull/13338) * [OCPBUGS-20016](https://issues.redhat.com/browse/OCPBUGS-20016): account for `useK8sWatchResource` returning `{}` like it does f… [#13347](https://github.com/openshift/console/pull/13347) * [ODC-7383](https://issues.redhat.com/browse/ODC-7383), [ODC-7384](https://issues.redhat.com/browse/ODC-7384), [ODC-7385](https://issues.redhat.com/browse/ODC-7385): Update the PipelineRun and TaskRun details page to use Tekton Results API to load all the info [#13328](https://github.com/openshift/console/pull/13328) * [ODC-7424](https://issues.redhat.com/browse/ODC-7424): Add e2e tests for vulnerabilities column in pipelinerun list and details page [#13335](https://github.com/openshift/console/pull/13335) * [OCPBUGS-23164](https://issues.redhat.com/browse/OCPBUGS-23164): Cannot Edit Shipwright Build [#13341](https://github.com/openshift/console/pull/13341) * [ODC-7382](https://issues.redhat.com/browse/ODC-7382), [ODC-7395](https://issues.redhat.com/browse/ODC-7395): add support for tektonresult api to load PipelineRuns [#13311](https://github.com/openshift/console/pull/13311) * [ODC-7421](https://issues.redhat.com/browse/ODC-7421): Show vulnerability column in the pipelinerun list page [#13329](https://github.com/openshift/console/pull/13329) * [ODC-7424](https://issues.redhat.com/browse/ODC-7424): add e2e tests for SBOM section and output tab [#13325](https://github.com/openshift/console/pull/13325) * [OCPBUGS-23292](https://issues.redhat.com/browse/OCPBUGS-23292): Webpack-DevServer Hot-Reload Not Working [#13331](https://github.com/openshift/console/pull/13331) * [CONSOLE-3823](https://issues.redhat.com/browse/CONSOLE-3823): Split auth config to its own module [#13261](https://github.com/openshift/console/pull/13261) * [ODC-7423](https://issues.redhat.com/browse/ODC-7423): move pipelinerun results to output tab [#13323](https://github.com/openshift/console/pull/13323) * [ODC-7399](https://issues.redhat.com/browse/ODC-7399): Create getting started content in functions list page [#13289](https://github.com/openshift/console/pull/13289) * [ODC-7422](https://issues.redhat.com/browse/ODC-7422): Add SBOM link and signed badge in PLR details page [#13314](https://github.com/openshift/console/pull/13314) * [CONSOLE-3618](https://issues.redhat.com/browse/CONSOLE-3618): Remove frontend multicluster code [#13245](https://github.com/openshift/console/pull/13245) * [CONSOLE-3777](https://issues.redhat.com/browse/CONSOLE-3777): Update NodeJS v14 to v18 [#13213](https://github.com/openshift/console/pull/13213) * [ODC-7414](https://issues.redhat.com/browse/ODC-7414): Update Shipwright API from v1alpha1 to v1beta1 [#13304](https://github.com/openshift/console/pull/13304) * [OCPBUGS-20016](https://issues.redhat.com/browse/OCPBUGS-20016): improve labels and annotations modal display and editi… [#13295](https://github.com/openshift/console/pull/13295) * [CONSOLE-3695](https://issues.redhat.com/browse/CONSOLE-3695): Add details item extension to console dynamic plugin SDK [#13240](https://github.com/openshift/console/pull/13240) * [CONSOLE-3814](https://issues.redhat.com/browse/CONSOLE-3814): Conditionally render "Users" and "Groups" nav items [#13287](https://github.com/openshift/console/pull/13287) * [OCPBUGS-23110](https://issues.redhat.com/browse/OCPBUGS-23110): Disable Pipelines E2E Tests [#13318](https://github.com/openshift/console/pull/13318) * [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Address memory issues in CI [#13309](https://github.com/openshift/console/pull/13309) * [CONSOLE-3614](https://issues.redhat.com/browse/CONSOLE-3614): Remove multicluster code from Bridge [#13244](https://github.com/openshift/console/pull/13244) * [CONSOLE-3822](https://issues.redhat.com/browse/CONSOLE-3822): Update obsolete deps [#13294](https://github.com/openshift/console/pull/13294) * [OCPBUGS-22930](https://issues.redhat.com/browse/OCPBUGS-22930): remove expandable toggle for conditional update risk d… [#13306](https://github.com/openshift/console/pull/13306) * [OCPBUGS-22749](https://issues.redhat.com/browse/OCPBUGS-22749): Adjust NAD name by using unique-names-generator [#13263](https://github.com/openshift/console/pull/13263) * [CONSOLE-3781](https://issues.redhat.com/browse/CONSOLE-3781): remove cypress.config comments [#13301](https://github.com/openshift/console/pull/13301) * [CONSOLE-3819](https://issues.redhat.com/browse/CONSOLE-3819): change Cypress' default browser to Electron [#13300](https://github.com/openshift/console/pull/13300) * [OCPBUGS-19916](https://issues.redhat.com/browse/OCPBUGS-19916): Fix MachineSetList capacity logic [#13259](https://github.com/openshift/console/pull/13259) * [CNV-30298](https://issues.redhat.com/browse/CNV-30298): Add UI for OVN Secondary Localnet Network [#13293](https://github.com/openshift/console/pull/13293) * [OCPBUGS-19875](https://issues.redhat.com/browse/OCPBUGS-19875): Fix plugin proxy handler [#13272](https://github.com/openshift/console/pull/13272) * [CONSOLE-3808](https://issues.redhat.com/browse/CONSOLE-3808): Remove Protactor from console-plugin-sdk [#13283](https://github.com/openshift/console/pull/13283) * [OCPBUGS-22747](https://issues.redhat.com/browse/OCPBUGS-22747): Display "With Data upload form" in Create PVC drop down once [#13292](https://github.com/openshift/console/pull/13292) * [CONSOLE-3811](https://issues.redhat.com/browse/CONSOLE-3811): remove shared Protractor files [#13282](https://github.com/openshift/console/pull/13282) * [ODC-7409](https://issues.redhat.com/browse/ODC-7409): Use @kubernetes-models/shipwright types in shipwright-plugin [#13267](https://github.com/openshift/console/pull/13267) * [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove local-storage-operator-plugin Protractor tests [#13291](https://github.com/openshift/console/pull/13291) * [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove network-attachment-definition-plugin Protractor … [#13286](https://github.com/openshift/console/pull/13286) * [ODC-7386](https://issues.redhat.com/browse/ODC-7386): Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed [#13145](https://github.com/openshift/console/pull/13145) * [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): migrate console Protractor tests to Cypress [#13257](https://github.com/openshift/console/pull/13257) * [OCPBUGS-22419](https://issues.redhat.com/browse/OCPBUGS-22419): Fix the forms when BC is not installed in the cluster [#13241](https://github.com/openshift/console/pull/13241) * [CONSOLE-3788](https://issues.redhat.com/browse/CONSOLE-3788): remove cnv console tests [#13280](https://github.com/openshift/console/pull/13280) * [OCPBUGS-10562](https://issues.redhat.com/browse/OCPBUGS-10562): fix operator uninstall test [#13214](https://github.com/openshift/console/pull/13214) * [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): remove references to removed packages [#13281](https://github.com/openshift/console/pull/13281) * [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13274](https://github.com/openshift/console/pull/13274) * [CONSOLE-3816](https://issues.redhat.com/browse/CONSOLE-3816): Goodbye! [#13255](https://github.com/openshift/console/pull/13255) * [OCPBUGS-19458](https://issues.redhat.com/browse/OCPBUGS-19458), [OU-241](https://issues.redhat.com/browse/OU-241): Remove unused Observe > Metrics page code [#13114](https://github.com/openshift/console/pull/13114) * [OCPBUGS-20295](https://issues.redhat.com/browse/OCPBUGS-20295): clarify Operator installMode error message [#13232](https://github.com/openshift/console/pull/13232) * [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): fix bug where renamed tests weren't updated [#13275](https://github.com/openshift/console/pull/13275) * [OCPBUGS-22284](https://issues.redhat.com/browse/OCPBUGS-22284): updating doc links for 4.14 GA [#13266](https://github.com/openshift/console/pull/13266) * [OCPBUGS-22199](https://issues.redhat.com/browse/OCPBUGS-22199): Save also the location.search and .hash values in localStorage to restore them after login [#13268](https://github.com/openshift/console/pull/13268) * [OCPBUGS-22213](https://issues.redhat.com/browse/OCPBUGS-22213): Fix links for CodeEditor component [#13265](https://github.com/openshift/console/pull/13265) * [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Workloads-AddPage: upload JAR file's i18n misses [#13264](https://github.com/openshift/console/pull/13264) * [OCPBUGS-16756](https://issues.redhat.com/browse/OCPBUGS-16756): Cluster dropdown items are not marked for i18n when ACM/MCE installed [#13238](https://github.com/openshift/console/pull/13238) * [OCPBUGS-20362](https://issues.redhat.com/browse/OCPBUGS-20362): Delete results.tekton.dev annotations before rerun the pipelineRun [#13230](https://github.com/openshift/console/pull/13230) * [OCPBUGS-9422](https://issues.redhat.com/browse/OCPBUGS-9422): Telemetry- Current page was sometimes not tracked when reloading the current page [#13088](https://github.com/openshift/console/pull/13088) * [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): check that user dropdown is present to verify logged in [#13260](https://github.com/openshift/console/pull/13260) * [CONSOLE-3812](https://issues.redhat.com/browse/CONSOLE-3812): remove packages/ceph-storage-plugin/integration-tests [#13249](https://github.com/openshift/console/pull/13249) * [CONSOLE-3809](https://issues.redhat.com/browse/CONSOLE-3809): remove orphaned OLM Protractor views [#13248](https://github.com/openshift/console/pull/13248) * [OCPBUGS-19783](https://issues.redhat.com/browse/OCPBUGS-19783): Channel page shows "Required" message for the default name when navigate to create channel page [#13222](https://github.com/openshift/console/pull/13222) * [OCPBUGS-20229](https://issues.redhat.com/browse/OCPBUGS-20229): Service details page shows revisions and routes from other service also [#13221](https://github.com/openshift/console/pull/13221) * [CONSOLE-3766](https://issues.redhat.com/browse/CONSOLE-3766): Update i18next-parser dev dependency in console [#13197](https://github.com/openshift/console/pull/13197) * [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): follow-on fixes and cleanup for Cypress upgrade [#13242](https://github.com/openshift/console/pull/13242) * [OCPBUGS-20305](https://issues.redhat.com/browse/OCPBUGS-20305): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13236](https://github.com/openshift/console/pull/13236) * [OCPBUGS-19714](https://issues.redhat.com/browse/OCPBUGS-19714): hide page-specific doc links for ROSA and OSD [#13229](https://github.com/openshift/console/pull/13229) * chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 [#13201](https://github.com/openshift/console/pull/13201) * [OCPBUGS-21616](https://issues.redhat.com/browse/OCPBUGS-21616): Fix empty editor error [#13176](https://github.com/openshift/console/pull/13176) * [ODC-7401](https://issues.redhat.com/browse/ODC-7401): Remove protractor from dev-console and knative plugins [#13247](https://github.com/openshift/console/pull/13247) * [ODC-7400](https://issues.redhat.com/browse/ODC-7400): Fix e2e for dev-console, knative, topology, helm and pipeline packages [#13231](https://github.com/openshift/console/pull/13231) * [CONSOLE-3740](https://issues.redhat.com/browse/CONSOLE-3740): Upgrade Cypress [#13070](https://github.com/openshift/console/pull/13070) * [CONSOLE-3758](https://issues.redhat.com/browse/CONSOLE-3758): add support for new features annotations while preserv… [#13183](https://github.com/openshift/console/pull/13183) * [ODC-7396](https://issues.redhat.com/browse/ODC-7396): Add Pipeline metrics tab using plugin [#13225](https://github.com/openshift/console/pull/13225) * [CONSOLE-3084](https://issues.redhat.com/browse/CONSOLE-3084): frontend/packages/console-shared/src/hooks/useCanClusterUpgrade: Not ROSA [#13184](https://github.com/openshift/console/pull/13184) * [CONSOLE-3675](https://issues.redhat.com/browse/CONSOLE-3675): Dynamic Demo Plugin: Add dashboard card with chart using QueryBrowser component [#13105](https://github.com/openshift/console/pull/13105) * [OCPBUGS-20270](https://issues.redhat.com/browse/OCPBUGS-20270): Add instructions to the README for running the monitoring plugin locally [#13226](https://github.com/openshift/console/pull/13226) * [OCPBUGS-16736](https://issues.redhat.com/browse/OCPBUGS-16736): use setTimeout to allow model to be created [#13195](https://github.com/openshift/console/pull/13195) * [OCPBUGS-4242](https://issues.redhat.com/browse/OCPBUGS-4242): Fix CSV list and details page managed namespaces for copied CSVs. [#13194](https://github.com/openshift/console/pull/13194) * [OCPBUGS-19970](https://issues.redhat.com/browse/OCPBUGS-19970): Home-Projects-Default-workloads-AddPage: upload JAR file's i18n misses [#13208](https://github.com/openshift/console/pull/13208) * [OCPBUGS-19966](https://issues.redhat.com/browse/OCPBUGS-19966): Builds - BuildConfigs : i18n misses [#13211](https://github.com/openshift/console/pull/13211) * [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue (additional fixes) [#13198](https://github.com/openshift/console/pull/13198) * [ODC-7377](https://issues.redhat.com/browse/ODC-7377), [ODC-7378](https://issues.redhat.com/browse/ODC-7378): Add Revisions, Routes and Pods tab for service details page [#13174](https://github.com/openshift/console/pull/13174) * [CONSOLE-3763](https://issues.redhat.com/browse/CONSOLE-3763): Update null-loader dev dependency in console [#13154](https://github.com/openshift/console/pull/13154) * [OCPBUGS-7893](https://issues.redhat.com/browse/OCPBUGS-7893): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13077](https://github.com/openshift/console/pull/13077) * [OCPBUGS-14322](https://issues.redhat.com/browse/OCPBUGS-14322): fix ResourceLog permissions when impersonating [#13196](https://github.com/openshift/console/pull/13196) * [ODC-7391](https://issues.redhat.com/browse/ODC-7391): Add a new allowInsecure option to the internet proxy API [#13175](https://github.com/openshift/console/pull/13175) * [OCPBUGS-19743](https://issues.redhat.com/browse/OCPBUGS-19743): Fix Invalid URL crash [#13192](https://github.com/openshift/console/pull/13192) * [OCPBUGS-18267](https://issues.redhat.com/browse/OCPBUGS-18267): 404 - not found will show on Knative-serving Details page [#13156](https://github.com/openshift/console/pull/13156) * [OCPBUGS-17676](https://issues.redhat.com/browse/OCPBUGS-17676): Enable white space retain in resource logs [#13101](https://github.com/openshift/console/pull/13101) * [OCPBUGS-4426](https://issues.redhat.com/browse/OCPBUGS-4426): All Projects' dropdown": Roles and RoleBindings "before all" hook for "test Roles detail page breadcrumbs to list page restores [#13190](https://github.com/openshift/console/pull/13190) * [OCPBUGS-8777](https://issues.redhat.com/browse/OCPBUGS-8777): Don't redirect after logout from login error route [#13102](https://github.com/openshift/console/pull/13102) * [OCPBUGS-9157](https://issues.redhat.com/browse/OCPBUGS-9157): ‘Create Pod’ button should be disabled for normal user … [#13040](https://github.com/openshift/console/pull/13040) * [OCPBUGS-19640](https://issues.redhat.com/browse/OCPBUGS-19640): Dont render ARN mode role field and warning for HyperShift clusters [#13191](https://github.com/openshift/console/pull/13191) * [OCPBUGS-19437](https://issues.redhat.com/browse/OCPBUGS-19437): API docs content issue [#13180](https://github.com/openshift/console/pull/13180) * [OCPBUGS-19546](https://issues.redhat.com/browse/OCPBUGS-19546): Set unlimited line width in YAML editor [#13182](https://github.com/openshift/console/pull/13182) * [OCPBUGS-19413](https://issues.redhat.com/browse/OCPBUGS-19413): Fix demo dynamic plugin dev mode cypress tests [#13172](https://github.com/openshift/console/pull/13172) * [OCPBUGS-19367](https://issues.redhat.com/browse/OCPBUGS-19367): Console should not panic when no response is retrieved for plugin assets [#13166](https://github.com/openshift/console/pull/13166) * [OCPBUGS-19394](https://issues.redhat.com/browse/OCPBUGS-19394): document kebab menu cell props [#13177](https://github.com/openshift/console/pull/13177) * [OCPBUGS-13152](https://issues.redhat.com/browse/OCPBUGS-13152): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13065](https://github.com/openshift/console/pull/13065) * [OCPBUGS-9719](https://issues.redhat.com/browse/OCPBUGS-9719): Correct logout process [#10177](https://github.com/openshift/console/pull/10177) * [OCPBUGS-18832](https://issues.redhat.com/browse/OCPBUGS-18832): change resource icon for FenceAgentRemediationTemplate… [#13162](https://github.com/openshift/console/pull/13162) * [OCPBUGS-18996](https://issues.redhat.com/browse/OCPBUGS-18996): fix issues with refactored "Create StorageClass" form [#13153](https://github.com/openshift/console/pull/13153) * [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console images to be consistent with ART [#13157](https://github.com/openshift/console/pull/13157) * [OCPBUGS-11286](https://issues.redhat.com/browse/OCPBUGS-11286): Check if filtered object contains name property [#12810](https://github.com/openshift/console/pull/12810) * [OCPBUGS-18464](https://issues.redhat.com/browse/OCPBUGS-18464): Hide the Builds NavItem if BuildConfig is not installed in the cluster [#13141](https://github.com/openshift/console/pull/13141) * [OCPBUGS-18494](https://issues.redhat.com/browse/OCPBUGS-18494): Upgrade DomainMapping apiVersion to v1beta1 [#13133](https://github.com/openshift/console/pull/13133) * [OCPBUGS-19314](https://issues.redhat.com/browse/OCPBUGS-19314): Hide the DeploymentConfig option in the User Preferences if that resource type isn't available [#13130](https://github.com/openshift/console/pull/13130) * [OCPBUGS-6515](https://issues.redhat.com/browse/OCPBUGS-6515): address ConsoleExternalLogLink test flake [#13110](https://github.com/openshift/console/pull/13110) * [OCPBUGS-9285](https://issues.redhat.com/browse/OCPBUGS-9285): Remove redundant break line [#13109](https://github.com/openshift/console/pull/13109) * [OCPBUGS-5571](https://issues.redhat.com/browse/OCPBUGS-5571): Update API docs content based on docs review [#13108](https://github.com/openshift/console/pull/13108) * [OCPBUGS-3403](https://issues.redhat.com/browse/OCPBUGS-3403): Fix resource table sorting crash [#13103](https://github.com/openshift/console/pull/13103) * [OCPBUGS-17203](https://issues.redhat.com/browse/OCPBUGS-17203): mock apis for git repo in test serverless function tests [#13064](https://github.com/openshift/console/pull/13064) * [OCPBUGS-19313](https://issues.redhat.com/browse/OCPBUGS-19313): Hide DeploymentConfig option from forms when it's not installed in the cluster [#13129](https://github.com/openshift/console/pull/13129) * [OCPBUGS-19311](https://issues.redhat.com/browse/OCPBUGS-19311): Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster [#13128](https://github.com/openshift/console/pull/13128) * [OCPBUGS-18188](https://issues.redhat.com/browse/OCPBUGS-18188): Added React Icon [#13111](https://github.com/openshift/console/pull/13111) * [OCPBUGS-18485](https://issues.redhat.com/browse/OCPBUGS-18485): Monitoring: Fix display of silenced alerts in dev console [#13151](https://github.com/openshift/console/pull/13151) * [OCPBUGS-6513](https://issues.redhat.com/browse/OCPBUGS-6513): Fixed Edit Application form for Knative Services [#12832](https://github.com/openshift/console/pull/12832) * [OCPBUGS-129](https://issues.redhat.com/browse/OCPBUGS-129): bump @patternfly/react-core to v4.276.11 to pick up Sele… [#13092](https://github.com/openshift/console/pull/13092) * [OCPBUGS-18439](https://issues.redhat.com/browse/OCPBUGS-18439): use active namespace in Create cta href of create action for operator backed [#13132](https://github.com/openshift/console/pull/13132) * [Full changelog](https://github.com/openshift/console/compare/c802a329ebd8bc5d153ad39c24ff04f63a0cdc09...f6f61ca06f008ead018f37668f9fa391e668e703) ### [console-operator](https://github.com/openshift/console-operator/tree/5d7ebcddf5a58d44ba37d63b149b06d6fc5ae1d8) * [OCPBUGS-37408](https://issues.redhat.com/browse/OCPBUGS-37408): set required-scc for openshift workloads [#924](https://github.com/openshift/console-operator/pull/924) * [OCPBUGS-31520](https://issues.redhat.com/browse/OCPBUGS-31520): oidc: synchronize the CM with a CA to trust the issuer, if configured [#881](https://github.com/openshift/console-operator/pull/881) * [OCPBUGS-33720](https://issues.redhat.com/browse/OCPBUGS-33720): Add missing return statement to fix crash in healthcheck controller [#903](https://github.com/openshift/console-operator/pull/903) * [OCPBUGS-31499](https://issues.redhat.com/browse/OCPBUGS-31499): Update RHDH QuickStarts and add CR examples [#880](https://github.com/openshift/console-operator/pull/880) * [OCPBUGS-31619](https://issues.redhat.com/browse/OCPBUGS-31619): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#882](https://github.com/openshift/console-operator/pull/882) * [OCPBUGS-29332](https://issues.redhat.com/browse/OCPBUGS-29332): Remove Janus IDP and update RHDH quickstarts [#863](https://github.com/openshift/console-operator/pull/863) * [OCPBUGS-27113](https://issues.redhat.com/browse/OCPBUGS-27113): Prevent healthcheck controller from Available=False blipping [#835](https://github.com/openshift/console-operator/pull/835) * [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870) * always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859) * [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856) * [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854) * [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853) * [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807) * [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852) * pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851) * [OCPBUGS-27221](https://issues.redhat.com/browse/OCPBUGS-27221): Bump library-go to deal with GET conflict [#837](https://github.com/openshift/console-operator/pull/837) * [OCPBUGS-24104](https://issues.redhat.com/browse/OCPBUGS-24104): Updating openshift-enterprise-console-operator-container image to be consistent with ART [#818](https://github.com/openshift/console-operator/pull/818) * [CONSOLE-3804](https://issues.redhat.com/browse/CONSOLE-3804): Reapply separation of the oauthclients controller [#814](https://github.com/openshift/console-operator/pull/814) * [CONSOLE-3652](https://issues.redhat.com/browse/CONSOLE-3652): Create StorageVersionMigration for ConsolePlugin CRD v1 migration [#816](https://github.com/openshift/console-operator/pull/816) * [OCPBUGS-24203](https://issues.redhat.com/browse/OCPBUGS-24203): ConsolePlugin metrics must no longer be grouped by the vendor [#819](https://github.com/openshift/console-operator/pull/819) * [CONSOLE-3791](https://issues.redhat.com/browse/CONSOLE-3791): Add "readOnlyRootFilesystem" to all console conta… [#809](https://github.com/openshift/console-operator/pull/809) * [OCPBUGS-23300](https://issues.redhat.com/browse/OCPBUGS-23300): Disable route controller health check for NLB setup [#815](https://github.com/openshift/console-operator/pull/815) * [ODC-7418](https://issues.redhat.com/browse/ODC-7418): Add Janus IDP and RHDH Quick starts [#806](https://github.com/openshift/console-operator/pull/806) * [TRT-1361](https://issues.redhat.com/browse/TRT-1361): Revert #808 "CONSOLE-3804: split oauthclient controller from the common logic" [#813](https://github.com/openshift/console-operator/pull/813) * [CONSOLE-3804](https://issues.redhat.com/browse/CONSOLE-3804): split oauthclient controller from the common logic [#808](https://github.com/openshift/console-operator/pull/808) * [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Update vendor bundle after removing multicluster code [#810](https://github.com/openshift/console-operator/pull/810) * [CONSOLE-3613](https://issues.redhat.com/browse/CONSOLE-3613): Remove multicluster code from console operator [#799](https://github.com/openshift/console-operator/pull/799) * [OCPBUGS-21972](https://issues.redhat.com/browse/OCPBUGS-21972): Disable HTTP/2 for webhook [#802](https://github.com/openshift/console-operator/pull/802) * [OCPVE-719](https://issues.redhat.com/browse/OCPVE-719): feat: add support for olm capability [#795](https://github.com/openshift/console-operator/pull/795) * [HOSTEDCP-1250](https://issues.redhat.com/browse/HOSTEDCP-1250): remove redundant cert check [#801](https://github.com/openshift/console-operator/pull/801) * [CONSOLE-3717](https://issues.redhat.com/browse/CONSOLE-3717): Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests [#782](https://github.com/openshift/console-operator/pull/782) * [OCPBUGS-19173](https://issues.redhat.com/browse/OCPBUGS-19173): Updating openshift-enterprise-console-operator images to be consistent with ART [#794](https://github.com/openshift/console-operator/pull/794) * [OCPBUGS-19080](https://issues.redhat.com/browse/OCPBUGS-19080): Reset console operator's conditions [#796](https://github.com/openshift/console-operator/pull/796) * [Full changelog](https://github.com/openshift/console-operator/compare/855f3fcebb968880eca12713f01157aedee98d64...5d7ebcddf5a58d44ba37d63b149b06d6fc5ae1d8) ### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/401d35070f2d1d4db3f08ffe183b8262754b7287) * [OCPBUGS-30045](https://issues.redhat.com/browse/OCPBUGS-30045): [4.15] cherry-pick containernetworking/plugins#997 [#155](https://github.com/openshift/containernetworking-plugins/pull/155) * [NP-807](https://issues.redhat.com/browse/NP-807): Upstream sync Nov 2023 [#139](https://github.com/openshift/containernetworking-plugins/pull/139) * [OCPBUGS-21906](https://issues.redhat.com/browse/OCPBUGS-21906): Bumps x/net + upstream sync november 2023 [#128](https://github.com/openshift/containernetworking-plugins/pull/128) * [OCPBUGS-19127](https://issues.redhat.com/browse/OCPBUGS-19127): Updating ose-containernetworking-plugins images to be consistent with ART [#122](https://github.com/openshift/containernetworking-plugins/pull/122) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407...401d35070f2d1d4db3f08ffe183b8262754b7287) ### [coredns](https://github.com/openshift/coredns/tree/1326282c9e158078634be4261b75ded247d233d7) * [OCPBUGS-37158](https://issues.redhat.com/browse/OCPBUGS-37158): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#125](https://github.com/openshift/coredns/pull/125) * [OCPBUGS-27904](https://issues.redhat.com/browse/OCPBUGS-27904): UPSTREAM: 6277: openshift: Fix OCPBUGS-27904 [#110](https://github.com/openshift/coredns/pull/110) * [OCPBUGS-24133](https://issues.redhat.com/browse/OCPBUGS-24133): Updating coredns-container image to be consistent with ART [#106](https://github.com/openshift/coredns/pull/106) * [OCPBUGS-21936](https://issues.redhat.com/browse/OCPBUGS-21936): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#101](https://github.com/openshift/coredns/pull/101) * [OCPBUGS-13968](https://issues.redhat.com/browse/OCPBUGS-13968): Merge 1.11.1 [#94](https://github.com/openshift/coredns/pull/94) * [OCPBUGS-19216](https://issues.redhat.com/browse/OCPBUGS-19216): Updating coredns images to be consistent with ART [#95](https://github.com/openshift/coredns/pull/95) * [Full changelog](https://github.com/openshift/coredns/compare/7d3fa777871ed2e5a70715e7f3e71d3f01785330...1326282c9e158078634be4261b75ded247d233d7) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/6ab1226a552376801e1f5712e3189a27729a23ed) * [OCPBUGS-38170](https://issues.redhat.com/browse/OCPBUGS-38170): rebase CPO on 4.15 [#274](https://github.com/openshift/cloud-provider-openstack/pull/274) * [OCPBUGS-32246](https://issues.redhat.com/browse/OCPBUGS-32246): Remove enforcement of IPv6 LB as internal [#277](https://github.com/openshift/cloud-provider-openstack/pull/277) * update tags [#2204](https://github.com/openshift/cloud-provider-openstack/pull/2204) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/697083a8e5e1f68978458a0a00c426e094665271...6ab1226a552376801e1f5712e3189a27729a23ed) ### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/9bcf382eb68d3dd13a553dce41822d24da3870d0) * [OCPBUGS-38023](https://issues.redhat.com/browse/OCPBUGS-38023): Set required-scc for openshift workloads [#236](https://github.com/openshift/csi-driver-manila-operator/pull/236) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#221](https://github.com/openshift/csi-driver-manila-operator/pull/221) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#216](https://github.com/openshift/csi-driver-manila-operator/pull/216) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#212](https://github.com/openshift/csi-driver-manila-operator/pull/212) * [OCPBUGS-9331](https://issues.redhat.com/browse/OCPBUGS-9331): Fix selector for manila-csi-driver-controller-metrics service [#210](https://github.com/openshift/csi-driver-manila-operator/pull/210) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#207](https://github.com/openshift/csi-driver-manila-operator/pull/207) * [OCPBUGS-21940](https://issues.redhat.com/browse/OCPBUGS-21940): Update k8s.io/apimachinery and k8s.io/apiserver [#206](https://github.com/openshift/csi-driver-manila-operator/pull/206) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#205](https://github.com/openshift/csi-driver-manila-operator/pull/205) * [OCPBUGS-19166](https://issues.redhat.com/browse/OCPBUGS-19166): Updating csi-driver-manila-operator images to be consistent with ART [#204](https://github.com/openshift/csi-driver-manila-operator/pull/204) * [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/d93a218ff323960eb1dea529f0173f069ccfab42...9bcf382eb68d3dd13a553dce41822d24da3870d0) ### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/d032dc1050b58a965e6bb9f923baef6d3c95538e) * [OCPBUGS-24131](https://issues.redhat.com/browse/OCPBUGS-24131): Updating csi-driver-nfs-container image to be consistent with ART [#135](https://github.com/openshift/csi-driver-nfs/pull/135) * [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): Merge upstream [#133](https://github.com/openshift/csi-driver-nfs/pull/133) * [OCPBUGS-21829](https://issues.redhat.com/browse/OCPBUGS-21829): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#131](https://github.com/openshift/csi-driver-nfs/pull/131) * [OCPBUGS-19212](https://issues.redhat.com/browse/OCPBUGS-19212): Updating csi-driver-nfs images to be consistent with ART [#129](https://github.com/openshift/csi-driver-nfs/pull/129) * Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#128](https://github.com/openshift/csi-driver-nfs/pull/128) * [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e1dd45373456cf8e47a58d6764212317fb2f8a97...d032dc1050b58a965e6bb9f923baef6d3c95538e) ### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9) * [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166) * [OCPBUGS-26758](https://issues.redhat.com/browse/OCPBUGS-26758), [OCPBUGS-26759](https://issues.redhat.com/browse/OCPBUGS-26759): add snyk config file for SAST scan [#162](https://github.com/openshift/csi-driver-shared-resource/pull/162) * [OCPBUGS-24310](https://issues.redhat.com/browse/OCPBUGS-24310): Updating ose-csi-driver-shared-resource-container image to be consistent with ART [#157](https://github.com/openshift/csi-driver-shared-resource/pull/157) * [OCPBUGS-24096](https://issues.redhat.com/browse/OCPBUGS-24096): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART [#156](https://github.com/openshift/csi-driver-shared-resource/pull/156) * [OCPBUGS-23108](https://issues.redhat.com/browse/OCPBUGS-23108): Should reference configmaps instead of secrets [#151](https://github.com/openshift/csi-driver-shared-resource/pull/151) * [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource images to be consistent with ART [#143](https://github.com/openshift/csi-driver-shared-resource/pull/143) * [OCPBUGS-21730](https://issues.redhat.com/browse/OCPBUGS-21730): bump golang.org/x/net to v0.17.0 [#145](https://github.com/openshift/csi-driver-shared-resource/pull/145) * [OCPBUGS-19291](https://issues.redhat.com/browse/OCPBUGS-19291): Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#144](https://github.com/openshift/csi-driver-shared-resource/pull/144) * [OCPBUGS-19155](https://issues.redhat.com/browse/OCPBUGS-19155): Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#142](https://github.com/openshift/csi-driver-shared-resource/pull/142) * [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/9232c1ff48df333dadc9f7dc275649866e55ced0...260a085ae25606bba7a94cdfed88f67265905ba9) ### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f) * [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102) * [OCPBUGS-27035](https://issues.redhat.com/browse/OCPBUGS-27035): add snyk config file for SAST scan [#96](https://github.com/openshift/csi-driver-shared-resource-operator/pull/96) * [OCPBUGS-23855](https://issues.redhat.com/browse/OCPBUGS-23855): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#93](https://github.com/openshift/csi-driver-shared-resource-operator/pull/93) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/csi-driver-shared-resource-operator/pull/92) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#90](https://github.com/openshift/csi-driver-shared-resource-operator/pull/90) * [OCPBUGS-21724](https://issues.redhat.com/browse/OCPBUGS-21724): bump golang.org/x/net to v0.17.0 [#85](https://github.com/openshift/csi-driver-shared-resource-operator/pull/85) * [OCPBUGS-19246](https://issues.redhat.com/browse/OCPBUGS-19246): Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#84](https://github.com/openshift/csi-driver-shared-resource-operator/pull/84) * [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/c273cd52b791e69da41ac23fafb6d926c0530276...8d017b7f19f0226dfd4fc7933271939c550d180f) ### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/f806f266600fbc0db4d072e4d041fc80e28deee7) * [OCPBUGS-24139](https://issues.redhat.com/browse/OCPBUGS-24139): Updating csi-attacher-container image to be consistent with ART [#65](https://github.com/openshift/csi-external-attacher/pull/65) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-external-attacher/pull/59) * [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-attacher` to v4.4.0 for OCP 4.15 [#58](https://github.com/openshift/csi-external-attacher/pull/58) * [OCPBUGS-19225](https://issues.redhat.com/browse/OCPBUGS-19225): Updating csi-attacher images to be consistent with ART [#57](https://github.com/openshift/csi-external-attacher/pull/57) * [Full changelog](https://github.com/openshift/csi-external-attacher/compare/06e8ce0d36f7c23f0906327cd66ec6bd15165366...f806f266600fbc0db4d072e4d041fc80e28deee7) ### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ce5a1a33fadf10bba0c90510c09dfc879dcfec87) * [OCPBUGS-25698](https://issues.redhat.com/browse/OCPBUGS-25698): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#86](https://github.com/openshift/csi-external-provisioner/pull/86) * [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528), [OCPBUGS-25232](https://issues.redhat.com/browse/OCPBUGS-25232): UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs [#82](https://github.com/openshift/csi-external-provisioner/pull/82) * [OCPBUGS-23062](https://issues.redhat.com/browse/OCPBUGS-23062): UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#78](https://github.com/openshift/csi-external-provisioner/pull/78) * [OCPBUGS-22528](https://issues.redhat.com/browse/OCPBUGS-22528): UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 [#77](https://github.com/openshift/csi-external-provisioner/pull/77) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#71](https://github.com/openshift/csi-external-provisioner/pull/71) * [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-provisioner` to v3.6.0 for OCP 4.15 [#70](https://github.com/openshift/csi-external-provisioner/pull/70) * [OCPBUGS-19114](https://issues.redhat.com/browse/OCPBUGS-19114): Updating csi-provisioner images to be consistent with ART [#69](https://github.com/openshift/csi-external-provisioner/pull/69) * [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/78a710fd2ccd6f87f7789c314349192d063f9f37...ce5a1a33fadf10bba0c90510c09dfc879dcfec87) ### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/3b4236d382e4593ca41ecc6f394775be467b1a0d) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#146](https://github.com/openshift/csi-external-resizer/pull/146) * [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-resizer` to v1.9.0 for OCP 4.15 [#145](https://github.com/openshift/csi-external-resizer/pull/145) * [OCPBUGS-19224](https://issues.redhat.com/browse/OCPBUGS-19224): Updating ose-csi-external-resizer images to be consistent with ART [#144](https://github.com/openshift/csi-external-resizer/pull/144) * [Full changelog](https://github.com/openshift/csi-external-resizer/compare/59a701a4c8cd3105e272b12afdb1e62e411b2772...3b4236d382e4593ca41ecc6f394775be467b1a0d) ### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/4f2955c7c90cd150f9dfae782148d0fa8eba7342) * [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): add cmdline args to enable group snapshot webhooks [#147](https://github.com/openshift/csi-external-snapshotter/pull/147) * [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143) * [OCPBUGS-25521](https://issues.redhat.com/browse/OCPBUGS-25521): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#134](https://github.com/openshift/csi-external-snapshotter/pull/134) * [OCPBUGS-24330](https://issues.redhat.com/browse/OCPBUGS-24330): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#124](https://github.com/openshift/csi-external-snapshotter/pull/124) * [OCPBUGS-24338](https://issues.redhat.com/browse/OCPBUGS-24338): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#123](https://github.com/openshift/csi-external-snapshotter/pull/123) * [OCPBUGS-24329](https://issues.redhat.com/browse/OCPBUGS-24329): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#121](https://github.com/openshift/csi-external-snapshotter/pull/121) * [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#118](https://github.com/openshift/csi-external-snapshotter/pull/118) * [OCPBUGS-24160](https://issues.redhat.com/browse/OCPBUGS-24160): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART [#116](https://github.com/openshift/csi-external-snapshotter/pull/116) * [OCPBUGS-24244](https://issues.redhat.com/browse/OCPBUGS-24244): Updating ose-csi-external-snapshotter-container image to be consistent with ART [#117](https://github.com/openshift/csi-external-snapshotter/pull/117) * [OCPBUGS-24071](https://issues.redhat.com/browse/OCPBUGS-24071): Updating ose-csi-snapshot-controller-container image to be consistent with ART [#115](https://github.com/openshift/csi-external-snapshotter/pull/115) * [OCPBUGS-23010](https://issues.redhat.com/browse/OCPBUGS-23010): UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false [#114](https://github.com/openshift/csi-external-snapshotter/pull/114) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#108](https://github.com/openshift/csi-external-snapshotter/pull/108) * [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `external-snapshotter` to v6.3.0 for OCP 4.15 [#107](https://github.com/openshift/csi-external-snapshotter/pull/107) * [OCPBUGS-19260](https://issues.redhat.com/browse/OCPBUGS-19260): Updating csi-snapshot-validation-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-external-snapshotter/pull/106) * [OCPBUGS-19223](https://issues.redhat.com/browse/OCPBUGS-19223): Updating ose-csi-external-snapshotter images to be consistent with ART [#105](https://github.com/openshift/csi-external-snapshotter/pull/105) * [OCPBUGS-19100](https://issues.redhat.com/browse/OCPBUGS-19100): Updating ose-csi-snapshot-controller images to be consistent with ART [#104](https://github.com/openshift/csi-external-snapshotter/pull/104) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/a6834536936b16dcd9ee81a8753a2ef6dc208541...4f2955c7c90cd150f9dfae782148d0fa8eba7342) ### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/csi-livenessprobe/pull/49) * [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `livenessprobe` to v2.11.0 for OCP 4.15 [#48](https://github.com/openshift/csi-livenessprobe/pull/48) * [OCPBUGS-19132](https://issues.redhat.com/browse/OCPBUGS-19132): Updating csi-livenessprobe images to be consistent with ART [#47](https://github.com/openshift/csi-livenessprobe/pull/47) * [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/a9bcbde134a17d3335f68a49aaad4befa8d7cc08...240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) ### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/9005584ee45c4d3158e383870aafa5d78a03b141) * [OCPBUGS-25231](https://issues.redhat.com/browse/OCPBUGS-25231): UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs [#60](https://github.com/openshift/csi-node-driver-registrar/pull/60) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-node-driver-registrar/pull/51) * [STOR-1404](https://issues.redhat.com/browse/STOR-1404): Rebase `node-driver-registrar` to v2.9.0 for OCP 4.15 [#50](https://github.com/openshift/csi-node-driver-registrar/pull/50) * [OCPBUGS-19247](https://issues.redhat.com/browse/OCPBUGS-19247): Updating csi-node-driver-registrar images to be consistent with ART [#49](https://github.com/openshift/csi-node-driver-registrar/pull/49) * [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/9dcaa7f5b7573e7ef9dbec1439abc32171003799...9005584ee45c4d3158e383870aafa5d78a03b141) ### [docker-builder](https://github.com/openshift/builder/tree/160e7cacc7ab7a6664e4c574b78139a29ace9cd3) * [OCPBUGS-32845](https://issues.redhat.com/browse/OCPBUGS-32845): bump go-jose to fix CVE-2024-28180 [#396](https://github.com/openshift/builder/pull/396) * [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#381](https://github.com/openshift/builder/pull/381) * [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378) * [OCPBUGS-23128](https://issues.redhat.com/browse/OCPBUGS-23128): bump github.com/containers/buildah to fix transient mounting in chroot isolation [#358](https://github.com/openshift/builder/pull/358) * [OCPBUGS-22497](https://issues.redhat.com/browse/OCPBUGS-22497): Add -p flag to cp command to preserve timestamps [#369](https://github.com/openshift/builder/pull/369) * [OCPBUGS-21969](https://issues.redhat.com/browse/OCPBUGS-21969): Mitigate CVE-2023-39325 [#361](https://github.com/openshift/builder/pull/361) * [OCPBUGS-20407](https://issues.redhat.com/browse/OCPBUGS-20407): drop the Overlay setting from transient mounts [#359](https://github.com/openshift/builder/pull/359) * [OCPBUGS-18855](https://issues.redhat.com/browse/OCPBUGS-18855): Updating openshift-enterprise-builder images to be consistent with ART [#357](https://github.com/openshift/builder/pull/357) * [Full changelog](https://github.com/openshift/builder/compare/9c104de024e5c52e224ffedfbab0e9053fb1efd6...160e7cacc7ab7a6664e4c574b78139a29ace9cd3) ### [docker-registry](https://github.com/openshift/image-registry/tree/b9de67d83c9f850ed42317495b7b340109b3c9ac) * [OCPBUGS-36287](https://issues.redhat.com/browse/OCPBUGS-36287): use SelfSubjectReview to obtain user info #406 [#406](https://github.com/openshift/image-registry/pull/406) * [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): vendor: bump aws-sdk-go to support ca-west-1 [#396](https://github.com/openshift/image-registry/pull/396) * [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393) * [OCPBUGS-24095](https://issues.redhat.com/browse/OCPBUGS-24095): Updating openshift-enterprise-registry-container image to be consistent with ART [#387](https://github.com/openshift/image-registry/pull/387) * [CORS-2985](https://issues.redhat.com/browse/CORS-2985): Add support for il-central-1 region in AWS [#386](https://github.com/openshift/image-registry/pull/386) * [IR-401](https://issues.redhat.com/browse/IR-401): pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support [#378](https://github.com/openshift/image-registry/pull/378) * [OCPNODE-1800](https://issues.redhat.com/browse/OCPNODE-1800): Allow ICSP IDMS coexisting [#377](https://github.com/openshift/image-registry/pull/377) * [OCPBUGS-19154](https://issues.redhat.com/browse/OCPBUGS-19154): Updating openshift-enterprise-registry images to be consistent with ART [#379](https://github.com/openshift/image-registry/pull/379) * [OCPBUGS-18999](https://issues.redhat.com/browse/OCPBUGS-18999): increase rest.Config QPS and Burst [#380](https://github.com/openshift/image-registry/pull/380) * [Full changelog](https://github.com/openshift/image-registry/compare/f03c24040cea924f846aca8b4e02bf802159a238...b9de67d83c9f850ed42317495b7b340109b3c9ac) ### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/7a448c2ee026c772e293dd344da587493c859f82) * Add support for 64k pages with ARM64 (#141) [#141](https://github.com/openshift/driver-toolkit/pull/141) * [MGMT-16313](https://issues.redhat.com/browse/MGMT-16313): Add support for C++ build (#137) [#137](https://github.com/openshift/driver-toolkit/pull/137) * Revert "Start using `rhel-coreos` image rather than `machine-os-content` (#135)" (#136) [#135](https://github.com/openshift/driver-toolkit/pull/135) * Start using `rhel-coreos` image rather than `machine-os-content` (#135) [#135](https://github.com/openshift/driver-toolkit/pull/135) * Updating driver-toolkit images to be consistent with ART (#134) [#134](https://github.com/openshift/driver-toolkit/pull/134) * [Full changelog](https://github.com/openshift/driver-toolkit/compare/cafed17b0c2b4cf8d8310304888787ed7adf7474...7a448c2ee026c772e293dd344da587493c859f82) ### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/f8ec690bc12a13ec7c9c45f0e3696ad02e143581) * [OCPBUGS-35524](https://issues.redhat.com/browse/OCPBUGS-35524): update to go 1.20 and k8s.io mods to v0.28.3 [#86](https://github.com/openshift/egress-router-cni/pull/86) * [OCPBUGS-18003](https://issues.redhat.com/browse/OCPBUGS-18003): Ensure that IP forwarding is enabled [#77](https://github.com/openshift/egress-router-cni/pull/77) * [OCPBUGS-19258](https://issues.redhat.com/browse/OCPBUGS-19258): Updating egress-router-cni images to be consistent with ART [#76](https://github.com/openshift/egress-router-cni/pull/76) * [Full changelog](https://github.com/openshift/egress-router-cni/compare/afffdd455b65a944751f9155852781f9ddce0f5d...f8ec690bc12a13ec7c9c45f0e3696ad02e143581) ### [etcd](https://github.com/openshift/etcd/tree/a7005ef1eae85eec6c59411860538169cea182fd) * [OCPBUGS-32768](https://issues.redhat.com/browse/OCPBUGS-32768): Revert "OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15" [#264](https://github.com/openshift/etcd/pull/264) * [OCPBUGS-31644](https://issues.redhat.com/browse/OCPBUGS-31644): Rebase etcd 3.5.13 openshift 4.15 [#260](https://github.com/openshift/etcd/pull/260) * [OCPBUGS-28731](https://issues.redhat.com/browse/OCPBUGS-28731): Rebase etcd 3.5.12 openshift 4.15 [#243](https://github.com/openshift/etcd/pull/243) * [OCPBUGS-24933](https://issues.redhat.com/browse/OCPBUGS-24933): Rebase etcd 3.5.11 openshift 4.15 [#232](https://github.com/openshift/etcd/pull/232) * [OCPBUGS-19279](https://issues.redhat.com/browse/OCPBUGS-19279): Updating ose-etcd images to be consistent with ART [#215](https://github.com/openshift/etcd/pull/215) * [OCPBUGS-20560](https://issues.redhat.com/browse/OCPBUGS-20560): [4.15] Rebase openshift/etcd to 3.5.10 [#224](https://github.com/openshift/etcd/pull/224) * [Full changelog](https://github.com/openshift/etcd/compare/5ed5044c5661c55d297ab0348056b50969af9627...a7005ef1eae85eec6c59411860538169cea182fd) ### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/fc50272ac32348a96455688c470bf256b1042825) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update gcr-credential-provider.spec [#60](https://github.com/openshift/cloud-provider-gcp/pull/60) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds auth-provider-gcp .spec file and build script [#59](https://github.com/openshift/cloud-provider-gcp/pull/59) * [OCPBUGS-25947](https://issues.redhat.com/browse/OCPBUGS-25947): Fix changing load balancer scope [#56](https://github.com/openshift/cloud-provider-gcp/pull/56) * [OCPBUGS-25808](https://issues.redhat.com/browse/OCPBUGS-25808): Add Snyk file to exclude vendor directory on scan [#55](https://github.com/openshift/cloud-provider-gcp/pull/55) * [OCPBUGS-24152](https://issues.redhat.com/browse/OCPBUGS-24152): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART [#47](https://github.com/openshift/cloud-provider-gcp/pull/47) * [OCPBUGS-22043](https://issues.redhat.com/browse/OCPBUGS-22043): Bump golang.org/x/net to v0.18.0 [#46](https://github.com/openshift/cloud-provider-gcp/pull/46) * [OCPBUGS-23094](https://issues.redhat.com/browse/OCPBUGS-23094): Fix commit label for commits [#41](https://github.com/openshift/cloud-provider-gcp/pull/41) * [OCPCLOUD-2185](https://issues.redhat.com/browse/OCPCLOUD-2185): Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master [#36](https://github.com/openshift/cloud-provider-gcp/pull/36) * Update OWNERS [#39](https://github.com/openshift/cloud-provider-gcp/pull/39) * [OCPBUGS-19243](https://issues.redhat.com/browse/OCPBUGS-19243): Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#38](https://github.com/openshift/cloud-provider-gcp/pull/38) * [OCPBUGS-5755](https://issues.redhat.com/browse/OCPBUGS-5755): Reuse instance-groups for internal load balancers [#35](https://github.com/openshift/cloud-provider-gcp/pull/35) * [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c...fc50272ac32348a96455688c470bf256b1042825) ### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/bad54034ed075b24ee8962661e78cfbd84a7dd0a) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#225](https://github.com/openshift/cluster-api-provider-gcp/pull/225) * [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#223](https://github.com/openshift/cluster-api-provider-gcp/pull/223) * [OCPBUGS-23650](https://issues.redhat.com/browse/OCPBUGS-23650): Add Snyk file to exclude vendor directory on scan [#217](https://github.com/openshift/cluster-api-provider-gcp/pull/217) * [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#214](https://github.com/openshift/cluster-api-provider-gcp/pull/214) * [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): No-op change to trigger image rebuild [#211](https://github.com/openshift/cluster-api-provider-gcp/pull/211) * Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART [#210](https://github.com/openshift/cluster-api-provider-gcp/pull/210) * [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#209](https://github.com/openshift/cluster-api-provider-gcp/pull/209) * [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases [#208](https://github.com/openshift/cluster-api-provider-gcp/pull/208) * [OCPCLOUD-2218](https://issues.redhat.com/browse/OCPCLOUD-2218): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master [#207](https://github.com/openshift/cluster-api-provider-gcp/pull/207) * Update OWNERS [#201](https://github.com/openshift/cluster-api-provider-gcp/pull/201) * [OCPBUGS-19116](https://issues.redhat.com/browse/OCPBUGS-19116): Updating ose-gcp-cluster-api-controllers images to be consistent with ART [#200](https://github.com/openshift/cluster-api-provider-gcp/pull/200) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/d99fb31aa7280f6b5da00880a64b4774600817a2...bad54034ed075b24ee8962661e78cfbd84a7dd0a) ### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b15daaf5836910277b7154a006800505f018aa5a) * [OCPBUGS-24143](https://issues.redhat.com/browse/OCPBUGS-24143): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#72](https://github.com/openshift/machine-api-provider-gcp/pull/72) * [OCPBUGS-2117](https://issues.redhat.com/browse/OCPBUGS-2117): Add extra check to termination handler [#71](https://github.com/openshift/machine-api-provider-gcp/pull/71) * [MIXEDARCH-258](https://issues.redhat.com/browse/MIXEDARCH-258): Set the capacity annotation for arch-aware autoscale from zero [#60](https://github.com/openshift/machine-api-provider-gcp/pull/60) * Update OWNERS [#63](https://github.com/openshift/machine-api-provider-gcp/pull/63) * [OCPBUGS-21792](https://issues.redhat.com/browse/OCPBUGS-21792): Bump x/net package to v0.17.0 [#62](https://github.com/openshift/machine-api-provider-gcp/pull/62) * [OCPCLOUD-2191](https://issues.redhat.com/browse/OCPCLOUD-2191): Update to Kube 1.28 [#59](https://github.com/openshift/machine-api-provider-gcp/pull/59) * [OCPBUGS-20267](https://issues.redhat.com/browse/OCPBUGS-20267): update bad url endpoint termination handler test [#61](https://github.com/openshift/machine-api-provider-gcp/pull/61) * [OCPBUGS-19228](https://issues.redhat.com/browse/OCPBUGS-19228): Updating ose-machine-api-provider-gcp images to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-gcp/pull/58) * [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125...b15daaf5836910277b7154a006800505f018aa5a) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/856ee3e23802cd341619cc4fc3181cf6ebbbd548) * [OCPBUGS-24084](https://issues.redhat.com/browse/OCPBUGS-24084): Move builder and base image to RHEL 9 [#52](https://github.com/openshift/gcp-pd-csi-driver/pull/52) * [STOR-1392](https://issues.redhat.com/browse/STOR-1392): Rebase to v1.12.2 for OCP 4.15 [#50](https://github.com/openshift/gcp-pd-csi-driver/pull/50) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#43](https://github.com/openshift/gcp-pd-csi-driver/pull/43) * [OCPBUGS-19134](https://issues.redhat.com/browse/OCPBUGS-19134): Updating ose-gcp-pd-csi-driver images to be consistent with ART [#42](https://github.com/openshift/gcp-pd-csi-driver/pull/42) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03...856ee3e23802cd341619cc4fc3181cf6ebbbd548) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3b91ee310c8a7394ceb2d4de6a51dd18a3800312) * [OCPBUGS-26993](https://issues.redhat.com/browse/OCPBUGS-26993): Increase data source provision timeout [#114](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/114) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#108](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/108) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#102](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/102) * [OCPBUGS-25242](https://issues.redhat.com/browse/OCPBUGS-25242): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#103](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/103) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#97](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/97) * [OCPBUGS-22600](https://issues.redhat.com/browse/OCPBUGS-22600): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#94](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/94) * [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#81](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/81) * Add clone test for gcp-pd-csi-driver [#92](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/92) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#93](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/93) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#86](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/86) * [OCPBUGS-19229](https://issues.redhat.com/browse/OCPBUGS-19229): Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART [#85](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/85) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/95d55a043a60b584a9fe28d37825761282305840...3b91ee310c8a7394ceb2d4de6a51dd18a3800312) ### [haproxy-router](https://github.com/openshift/router/tree/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Upgrade Validation plugin for SHA1 certs [#585](https://github.com/openshift/router/pull/585) * [OCPBUGS-32977](https://issues.redhat.com/browse/OCPBUGS-32977): Count active services before setting weight to 1 [#586](https://github.com/openshift/router/pull/586) * [OCPBUGS-32693](https://issues.redhat.com/browse/OCPBUGS-32693): Reject routes with MD5 certs [#584](https://github.com/openshift/router/pull/584) * [OCPBUGS-32435](https://issues.redhat.com/browse/OCPBUGS-32435): Introduce 'idle-close-on-response' option for frontends [#579](https://github.com/openshift/router/pull/579) * [OCPBUGS-31544](https://issues.redhat.com/browse/OCPBUGS-31544): Properly handle rewrite-target annotation [#569](https://github.com/openshift/router/pull/569) * [OCPBUGS-23743](https://issues.redhat.com/browse/OCPBUGS-23743): Bump k8s.io/* packages to v0.28.3 [#542](https://github.com/openshift/router/pull/542) * [OCPBUGS-21973](https://issues.redhat.com/browse/OCPBUGS-21973): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#529](https://github.com/openshift/router/pull/529) * [OCPBUGS-21803](https://issues.redhat.com/browse/OCPBUGS-21803): haproxy-template: Add 'no strict-limits' to address HAProxy 2.6 issue [#527](https://github.com/openshift/router/pull/527) * [OCPBUGS-19287](https://issues.redhat.com/browse/OCPBUGS-19287): Updating openshift-enterprise-haproxy-router images to be consistent with ART [#513](https://github.com/openshift/router/pull/513) * [OCPBUGS-19249](https://issues.redhat.com/browse/OCPBUGS-19249): Updating ose-haproxy-router-base images to be consistent with ART [#512](https://github.com/openshift/router/pull/512) * [OCPBUGS-16707](https://issues.redhat.com/browse/OCPBUGS-16707): UniqueHost: Fix incorrect identification of conflicting route [#508](https://github.com/openshift/router/pull/508) * [Full changelog](https://github.com/openshift/router/compare/c3a2430c09ccea623bb8a599ce56a6e267009620...dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/2ca1a23b5e18bc7bb55798dbc15c195f51e941e0) * [OCPBUGS-39016](https://issues.redhat.com/browse/OCPBUGS-39016): Update to Kubernetes v1.28.13 [#2063](https://github.com/openshift/kubernetes/pull/2063) * [OCPBUGS-31467](https://issues.redhat.com/browse/OCPBUGS-31467): Return from EnsureHostInPool on all NIC errors [#1964](https://github.com/openshift/kubernetes/pull/1964) * : OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated [#2058](https://github.com/openshift/kubernetes/pull/2058) * NO-JIRA: update downstream owners [#2050](https://github.com/openshift/kubernetes/pull/2050) * [OCPBUGS-37622](https://issues.redhat.com/browse/OCPBUGS-37622): Bump to Kubernetes v1.28.12 [#2037](https://github.com/openshift/kubernetes/pull/2037) * [OCPBUGS-35552](https://issues.redhat.com/browse/OCPBUGS-35552): Bump to Kubernetes v1.28.11 [#1994](https://github.com/openshift/kubernetes/pull/1994) * [OCPBUGS-33711](https://issues.redhat.com/browse/OCPBUGS-33711): Bump to Kubernetes v1.28.10 [#1969](https://github.com/openshift/kubernetes/pull/1969) * [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#1962](https://github.com/openshift/kubernetes/pull/1962) * [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): UPSTREAM: <carry>: bump structured-merge-diff [#1893](https://github.com/openshift/kubernetes/pull/1893) * [OCPBUGS-32299](https://issues.redhat.com/browse/OCPBUGS-32299): Bump to k8s 1.28.9 [#1946](https://github.com/openshift/kubernetes/pull/1946) * [OCPBUGS-29922](https://issues.redhat.com/browse/OCPBUGS-29922): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1897](https://github.com/openshift/kubernetes/pull/1897) * [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): UPSTREAM: <carry>: allow type mutation for specific secrets [#1939](https://github.com/openshift/kubernetes/pull/1939) * UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check [#1915](https://github.com/openshift/kubernetes/pull/1915) * [OCPBUGS-31740](https://issues.redhat.com/browse/OCPBUGS-31740): 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes [#1935](https://github.com/openshift/kubernetes/pull/1935) * [OCPBUGS-31503](https://issues.redhat.com/browse/OCPBUGS-31503): Bump to 1.28.8 [#1926](https://github.com/openshift/kubernetes/pull/1926) * Address CVE [#11](https://github.com/openshift/kubernetes/pull/11) * [OCPBUGS-30963](https://issues.redhat.com/browse/OCPBUGS-30963): Set up CEL IP/CIDR library from 4.14 onwards [#1912](https://github.com/openshift/kubernetes/pull/1912) * [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884) * [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854) * [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873) * [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878) * [OCPBUGS-27368](https://issues.redhat.com/browse/OCPBUGS-27368): Update to kubernetes 1.28.6 [#1857](https://github.com/openshift/kubernetes/pull/1857) * [OCPBUGS-25812](https://issues.redhat.com/browse/OCPBUGS-25812): Fix device uncertain errors on reboot - 4.15 [#1832](https://github.com/openshift/kubernetes/pull/1832) * [OCPBUGS-26068](https://issues.redhat.com/browse/OCPBUGS-26068): Backport CEL IP and CIDR validations [#1843](https://github.com/openshift/kubernetes/pull/1843) * [OCPBUGS-26005](https://issues.redhat.com/browse/OCPBUGS-26005): Update to Kubernetes 1.28.5 [#1837](https://github.com/openshift/kubernetes/pull/1837) * [CNF-8809](https://issues.redhat.com/browse/CNF-8809): admission: add new admission for handling shared cpus request [#1799](https://github.com/openshift/kubernetes/pull/1799) * [CNF-8326](https://issues.redhat.com/browse/CNF-8326): advertise shared cpus for mixed cpus feature [#1795](https://github.com/openshift/kubernetes/pull/1795) * [OCPBUGS-23565](https://issues.redhat.com/browse/OCPBUGS-23565): Update to kubernetes 1.28.4 [#1806](https://github.com/openshift/kubernetes/pull/1806) * [OCPBUGS-23073](https://issues.redhat.com/browse/OCPBUGS-23073): .spec.numberOfUsersToReport is not correctly applied in some circumstances [#1794](https://github.com/openshift/kubernetes/pull/1794) * [OCPBUGS-22724](https://issues.redhat.com/browse/OCPBUGS-22724): UPSTREAM: 121881: Use golang library instead of mklink [#1800](https://github.com/openshift/kubernetes/pull/1800) * [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790) * Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788) * [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771) * Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776) * openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769) * UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685) * [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757) * Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735) * [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734) * Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732) * Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731) * Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703) * UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726) * [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724) * [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711) * UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714) * [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716) * Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646) * [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638) * UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698) * <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686) * [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665) * [Full changelog](https://github.com/openshift/kubernetes/compare/95b99eeaeda05f23b12c0f50276b84a3f4d7176f...2ca1a23b5e18bc7bb55798dbc15c195f51e941e0) ### [hypershift](https://github.com/openshift/hypershift/tree/b7c1d6a412bbc87a9eb2773da4a7a5ebb39dd24b) * [HOSTEDCP-1956](https://issues.redhat.com/browse/HOSTEDCP-1956): bump CCO and go-jose version [#4697](https://github.com/openshift/hypershift/pull/4697) * NO-JIRA: chore(deps): update konflux references (release-4.15) [#4719](https://github.com/openshift/hypershift/pull/4719) * [OCPBUGS-41701](https://issues.redhat.com/browse/OCPBUGS-41701): cmd: report server version, supported OCP [#4702](https://github.com/openshift/hypershift/pull/4702) * [OCPBUGS-38065](https://issues.redhat.com/browse/OCPBUGS-38065): [release-4.15] Use HTTP proxy for ingress controller [#4699](https://github.com/openshift/hypershift/pull/4699) * [OCPBUGS-41809](https://issues.redhat.com/browse/OCPBUGS-41809): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4706](https://github.com/openshift/hypershift/pull/4706) * [HOSTEDCP-1896](https://issues.redhat.com/browse/HOSTEDCP-1896): [release-4.15] Allow setting Kube APIServer maximum requests in flight [#4552](https://github.com/openshift/hypershift/pull/4552) * [OCPBUGS-39463](https://issues.redhat.com/browse/OCPBUGS-39463): handle version skewed NodePools that do not have rhel9 binaries [#4666](https://github.com/openshift/hypershift/pull/4666) * [OCPBUGS-39077](https://issues.redhat.com/browse/OCPBUGS-39077): Set KCM node monitor grace period [#4628](https://github.com/openshift/hypershift/pull/4628) * [OCPBUGS-30465](https://issues.redhat.com/browse/OCPBUGS-30465): fix: bump google.golang.org/protobuf [#4616](https://github.com/openshift/hypershift/pull/4616) * [OCPBUGS-39171](https://issues.redhat.com/browse/OCPBUGS-39171): fix: bump github.com/IBM/go-sdk-core/v5 [#4625](https://github.com/openshift/hypershift/pull/4625) * [OCPBUGS-35815](https://issues.redhat.com/browse/OCPBUGS-35815): Add hypershift-cluster-version-operator image to release providers [#4243](https://github.com/openshift/hypershift/pull/4243) * NO-JIRA: test: relax mgmt KAS egress check [#4631](https://github.com/openshift/hypershift/pull/4631) * NO-JIRA: Tolerate restarts for kubevirt external infra [#4200](https://github.com/openshift/hypershift/pull/4200) * NO-JIRA: Flaky cert validation test [#4630](https://github.com/openshift/hypershift/pull/4630) * [OCPBUGS-38943](https://issues.redhat.com/browse/OCPBUGS-38943): copy oapi ca-trust recursively when building trust anchor [#4613](https://github.com/openshift/hypershift/pull/4613) * [OCPBUGS-39041](https://issues.redhat.com/browse/OCPBUGS-39041): set proxy envvars on aws and azure CCMs [#4624](https://github.com/openshift/hypershift/pull/4624) * [OCPBUGS-38613](https://issues.redhat.com/browse/OCPBUGS-38613): hcco: reconcile apiserver config into hosted cluster [#4567](https://github.com/openshift/hypershift/pull/4567) * [OCPBUGS-38561](https://issues.redhat.com/browse/OCPBUGS-38561): Let the CPO oidc check resolve through data plane [#4564](https://github.com/openshift/hypershift/pull/4564) * [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak ciphers from security profile [#4547](https://github.com/openshift/hypershift/pull/4547) * [OCPBUGS-37171](https://issues.redhat.com/browse/OCPBUGS-37171): OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None [#4489](https://github.com/openshift/hypershift/pull/4489) * NO-JIRA: Update Konflux 4.15 and perform migration [#4487](https://github.com/openshift/hypershift/pull/4487) * NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 [#4469](https://github.com/openshift/hypershift/pull/4469) * [OCPBUGS-36938](https://issues.redhat.com/browse/OCPBUGS-36938): [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer [#4358](https://github.com/openshift/hypershift/pull/4358) * [OCPBUGS-37174](https://issues.redhat.com/browse/OCPBUGS-37174): Delete IDMS in dataplane once HCP ICS field is removed [#4457](https://github.com/openshift/hypershift/pull/4457) * NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4279](https://github.com/openshift/hypershift/pull/4279) * [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4444](https://github.com/openshift/hypershift/pull/4444) * [OCPBUGS-36916](https://issues.redhat.com/browse/OCPBUGS-36916): Add newline after TLS certs referenced by image.config [#4443](https://github.com/openshift/hypershift/pull/4443) * [OCPBUGS-37695](https://issues.redhat.com/browse/OCPBUGS-37695): Set right endpointSlice port [#4441](https://github.com/openshift/hypershift/pull/4441) * NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#4433](https://github.com/openshift/hypershift/pull/4433) * NO-JIRA: [release-4.15] test/e2e: remove api budget checks [#4413](https://github.com/openshift/hypershift/pull/4413) * [OCPBUGS-37266](https://issues.redhat.com/browse/OCPBUGS-37266): extract rhel9 MCO binaries for rhel8 based MCO images [#4385](https://github.com/openshift/hypershift/pull/4385) * [OCPBUGS-36606](https://issues.redhat.com/browse/OCPBUGS-36606): enable audit log for oauth-openshift [#4320](https://github.com/openshift/hypershift/pull/4320) * [HOSTEDCP-1714](https://issues.redhat.com/browse/HOSTEDCP-1714): Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 [#4178](https://github.com/openshift/hypershift/pull/4178) * [OCPBUGS-35736](https://issues.redhat.com/browse/OCPBUGS-35736): Complete KAS migration to none endpoint reconciler type [#4228](https://github.com/openshift/hypershift/pull/4228) * [OCPBUGS-35935](https://issues.redhat.com/browse/OCPBUGS-35935): check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route [#4265](https://github.com/openshift/hypershift/pull/4265) * NO-JIRA: chore(deps): update konflux references (release-4.15) [#4259](https://github.com/openshift/hypershift/pull/4259) * [OCPBUGS-35714](https://issues.redhat.com/browse/OCPBUGS-35714): Generate default worker security group rules based on machineCIDR [#4266](https://github.com/openshift/hypershift/pull/4266) * NO-JIRA: chore(deps): update konflux references (release-4.15) [#4252](https://github.com/openshift/hypershift/pull/4252) * [OCPBUGS-32404](https://issues.redhat.com/browse/OCPBUGS-32404): Fix failure to create a second hostedcluster in the same namespace [#3907](https://github.com/openshift/hypershift/pull/3907) * NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) [#4246](https://github.com/openshift/hypershift/pull/4246) * NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4231](https://github.com/openshift/hypershift/pull/4231) * chore(deps): update konflux references to 2be7c9c (release-4.15) [#4224](https://github.com/openshift/hypershift/pull/4224) * [OCPBUGS-34580](https://issues.redhat.com/browse/OCPBUGS-34580): Add TrustedBundles to OAS container [#4211](https://github.com/openshift/hypershift/pull/4211) * NO-JIRA: hack: make the e2e script generic [#4199](https://github.com/openshift/hypershift/pull/4199) * [OCPBUGS-33627](https://issues.redhat.com/browse/OCPBUGS-33627): Restrict image registry overrides to control plane components [#4131](https://github.com/openshift/hypershift/pull/4131) * [OCPBUGS-34156](https://issues.redhat.com/browse/OCPBUGS-34156): fix router on 4.14 y-stream upgrade [#4077](https://github.com/openshift/hypershift/pull/4077) * [OCPBUGS-35002](https://issues.redhat.com/browse/OCPBUGS-35002): [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller [#4162](https://github.com/openshift/hypershift/pull/4162) * NO-JIRA: Update Konflux references to 1025001 (release-4.15) [#4180](https://github.com/openshift/hypershift/pull/4180) * NO-JIRA: chore(deps): update konflux references (release-4.15) [#4167](https://github.com/openshift/hypershift/pull/4167) * [OCPBUGS-34997](https://issues.redhat.com/browse/OCPBUGS-34997): add AWS STS URL to OIDC provider audiences [#4157](https://github.com/openshift/hypershift/pull/4157) * [OCPBUGS-35074](https://issues.redhat.com/browse/OCPBUGS-35074): Fix disconnected metadata inspection for nodepool [#4175](https://github.com/openshift/hypershift/pull/4175) * [HOSTEDCP-1708](https://issues.redhat.com/browse/HOSTEDCP-1708): remove liveness and readiness probes that use the metrics [#4128](https://github.com/openshift/hypershift/pull/4128) * [OCPBUGS-34423](https://issues.redhat.com/browse/OCPBUGS-34423): Fixed audit-logs sigterm failing to terminate gracefully [#4089](https://github.com/openshift/hypershift/pull/4089) * [OCPBUGS-33526](https://issues.redhat.com/browse/OCPBUGS-33526): Disable DNS resolving for CNO [#4148](https://github.com/openshift/hypershift/pull/4148) * [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak cipher [#4156](https://github.com/openshift/hypershift/pull/4156) * [OCPBUGS-34510](https://issues.redhat.com/browse/OCPBUGS-34510): Reconcile KAS endpoints and endpoint slice [#4097](https://github.com/openshift/hypershift/pull/4097) * NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4151](https://github.com/openshift/hypershift/pull/4151) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4120](https://github.com/openshift/hypershift/pull/4120) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4072](https://github.com/openshift/hypershift/pull/4072) * [OCPBUGS-33510](https://issues.redhat.com/browse/OCPBUGS-33510): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4014](https://github.com/openshift/hypershift/pull/4014) * NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) [#4064](https://github.com/openshift/hypershift/pull/4064) * NO-JIRA: Remove CLI inspection of release image [#4056](https://github.com/openshift/hypershift/pull/4056) * [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#4032](https://github.com/openshift/hypershift/pull/4032) * NO-JIRA: Update RHTAP references (release-4.15) [#4041](https://github.com/openshift/hypershift/pull/4041) * [OCPBUGS-33118](https://issues.redhat.com/browse/OCPBUGS-33118): Recycler-pod image now points to the OCP Payload reference [#3963](https://github.com/openshift/hypershift/pull/3963) * [OCPBUGS-32220](https://issues.redhat.com/browse/OCPBUGS-32220): Fix disconnected metadata inspection [#3881](https://github.com/openshift/hypershift/pull/3881) * NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) [#4030](https://github.com/openshift/hypershift/pull/4030) * [OCPBUGS-33117](https://issues.redhat.com/browse/OCPBUGS-33117): Reconcile over ICSP/IDMS [#3962](https://github.com/openshift/hypershift/pull/3962) * NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) [#4022](https://github.com/openshift/hypershift/pull/4022) * [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4017](https://github.com/openshift/hypershift/pull/4017) * [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support hypershift-operator scoping for hostedclusters [#3998](https://github.com/openshift/hypershift/pull/3998) * Revert "[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable" [#3939](https://github.com/openshift/hypershift/pull/3939) * [OCPBUGS-33207](https://issues.redhat.com/browse/OCPBUGS-33207): Remove kube-scheduler readiness probe [#3955](https://github.com/openshift/hypershift/pull/3955) * NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) [#3989](https://github.com/openshift/hypershift/pull/3989) * [OCPBUGS-25858](https://issues.redhat.com/browse/OCPBUGS-25858): Improve description for agent APIServerAddress CLI flag [#3977](https://github.com/openshift/hypershift/pull/3977) * [OCPBUGS-33224](https://issues.redhat.com/browse/OCPBUGS-33224): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3976](https://github.com/openshift/hypershift/pull/3976) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3982](https://github.com/openshift/hypershift/pull/3982) * [OCPBUGS-31747](https://issues.redhat.com/browse/OCPBUGS-31747): update desired image even when HCP doesn't exist yet [#3839](https://github.com/openshift/hypershift/pull/3839) * NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) [#3974](https://github.com/openshift/hypershift/pull/3974) * [OCPBUGS-32229](https://issues.redhat.com/browse/OCPBUGS-32229): disable autoscaler when no nodepool require it [#3884](https://github.com/openshift/hypershift/pull/3884) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3967](https://github.com/openshift/hypershift/pull/3967) * [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3957](https://github.com/openshift/hypershift/pull/3957) * [OCPBUGS-31826](https://issues.redhat.com/browse/OCPBUGS-31826): use dnsPolicy: Default for konnectivity-agent in data plane [#3845](https://github.com/openshift/hypershift/pull/3845) * NO-JIRA: Update RHTAP references (release-4.15) [#3935](https://github.com/openshift/hypershift/pull/3935) * [OCPBUGS-32715](https://issues.redhat.com/browse/OCPBUGS-32715): Fix OLM intilization args [#3923](https://github.com/openshift/hypershift/pull/3923) * [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation [#3908](https://github.com/openshift/hypershift/pull/3908) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3921](https://github.com/openshift/hypershift/pull/3921) * [OCPBUGS-32164](https://issues.redhat.com/browse/OCPBUGS-32164): Fix ICSP and IDMS inclusion as registriesOverrides [#3870](https://github.com/openshift/hypershift/pull/3870) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3904](https://github.com/openshift/hypershift/pull/3904) * [OCPBUGS-30280](https://issues.redhat.com/browse/OCPBUGS-30280): Switch to use service endpoint for Konnectivity [#3692](https://github.com/openshift/hypershift/pull/3692) * [OCPBUGS-32191](https://issues.redhat.com/browse/OCPBUGS-32191): Kas disable audit cherry pick release 4.15 [#3875](https://github.com/openshift/hypershift/pull/3875) * [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): Add new permission required in CAPA [#3861](https://github.com/openshift/hypershift/pull/3861) * NO-JIRA: Update RHTAP references (release-4.15) [#3887](https://github.com/openshift/hypershift/pull/3887) * NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster [#3893](https://github.com/openshift/hypershift/pull/3893) * [HOSTEDCP-1524](https://issues.redhat.com/browse/HOSTEDCP-1524): [release-4.15] Support additional node selectors for request serving nodes [#3883](https://github.com/openshift/hypershift/pull/3883) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3873](https://github.com/openshift/hypershift/pull/3873) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3868](https://github.com/openshift/hypershift/pull/3868) * [OCPBUGS-32013](https://issues.redhat.com/browse/OCPBUGS-32013): Set OPERATOR_IMAGE environment variable [#3853](https://github.com/openshift/hypershift/pull/3853) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3857](https://github.com/openshift/hypershift/pull/3857) * NO-JIRA: Update RHTAP references (release-4.15) [#3835](https://github.com/openshift/hypershift/pull/3835) * [OCPBUGS-31766](https://issues.redhat.com/browse/OCPBUGS-31766): include hostnetwork SCC CPO role for 4.13 and earlier [#3840](https://github.com/openshift/hypershift/pull/3840) * [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): [release-4.15] Preserve container resources for more hosted control plane components [#3828](https://github.com/openshift/hypershift/pull/3828) * [OCPBUGS-31324](https://issues.redhat.com/browse/OCPBUGS-31324): Add missing PodSecurityViolation alert [#3798](https://github.com/openshift/hypershift/pull/3798) * NO-JIRA: Increase stability in autoscaled environments [#3777](https://github.com/openshift/hypershift/pull/3777) * [OCPBUGS-31471](https://issues.redhat.com/browse/OCPBUGS-31471): Reduce log file size for hypershift apiservers [#3816](https://github.com/openshift/hypershift/pull/3816) * [OCPBUGS-31604](https://issues.redhat.com/browse/OCPBUGS-31604): disable http2 for ignition server and proxy [#3825](https://github.com/openshift/hypershift/pull/3825) * [OCPBUGS-31426](https://issues.redhat.com/browse/OCPBUGS-31426): copy issuerCertificateAuthority configmap into HC openshift-config [#3808](https://github.com/openshift/hypershift/pull/3808) * [OCPBUGS-31265](https://issues.redhat.com/browse/OCPBUGS-31265): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3802](https://github.com/openshift/hypershift/pull/3802) * NO-JIRA: Update RHTAP references (release-4.15) [#3812](https://github.com/openshift/hypershift/pull/3812) * NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3796](https://github.com/openshift/hypershift/pull/3796) * [OCPBUGS-31064](https://issues.redhat.com/browse/OCPBUGS-31064): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3774](https://github.com/openshift/hypershift/pull/3774) * [OCPBUGS-31377](https://issues.redhat.com/browse/OCPBUGS-31377): Manually cherry pick #3782 to 4.15 [#3803](https://github.com/openshift/hypershift/pull/3803) * [OCPBUGS-31326](https://issues.redhat.com/browse/OCPBUGS-31326): fix(ignition): Fix priority class override [#3800](https://github.com/openshift/hypershift/pull/3800) * [OCPBUGS-30804](https://issues.redhat.com/browse/OCPBUGS-30804): honor HC image configuration [#3730](https://github.com/openshift/hypershift/pull/3730) * "[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used" [#3677](https://github.com/openshift/hypershift/pull/3677) * [OCPBUGS-31116](https://issues.redhat.com/browse/OCPBUGS-31116): external OIDC: fix certificateAuthority field in structured auth config [#3783](https://github.com/openshift/hypershift/pull/3783) * [OCPBUGS-30862](https://issues.redhat.com/browse/OCPBUGS-30862): Manual cherry pick 3685&3727 to release 4.15 [#3740](https://github.com/openshift/hypershift/pull/3740) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3791](https://github.com/openshift/hypershift/pull/3791) * NO-JIRA: Update RHTAP references (release-4.15) [#3785](https://github.com/openshift/hypershift/pull/3785) * [OCPBUGS-29881](https://issues.redhat.com/browse/OCPBUGS-29881): feat(ho): Add flag for dedicated request serving isolation [#3633](https://github.com/openshift/hypershift/pull/3633) * [OCPBUGS-30742](https://issues.redhat.com/browse/OCPBUGS-30742): [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group [#3726](https://github.com/openshift/hypershift/pull/3726) * [OCPBUGS-30650](https://issues.redhat.com/browse/OCPBUGS-30650): Set KAS config pod security Enforce to privileged [#3719](https://github.com/openshift/hypershift/pull/3719) * NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget [#3741](https://github.com/openshift/hypershift/pull/3741) * [OCPBUGS-30651](https://issues.redhat.com/browse/OCPBUGS-30651): Remove EnsurePSANotPrivileged [#3744](https://github.com/openshift/hypershift/pull/3744) * NO-JIRA: Update RHTAP references (release-4.15) [#3754](https://github.com/openshift/hypershift/pull/3754) * [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3747](https://github.com/openshift/hypershift/pull/3747) * NO-JIRA: Update RHTAP references (release-4.15) [#3738](https://github.com/openshift/hypershift/pull/3738) * [OCPBUGS-30581](https://issues.redhat.com/browse/OCPBUGS-30581): [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP [#3684](https://github.com/openshift/hypershift/pull/3684) * [OCPBUGS-30572](https://issues.redhat.com/browse/OCPBUGS-30572): [release-4.15] Update OLM Default Catalog Sources to 4.15 [#3696](https://github.com/openshift/hypershift/pull/3696) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705) * [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673) * "[release-4.15] OCPBUGS-27500: Fix default release image lookup" [#3549](https://github.com/openshift/hypershift/pull/3549) * [OCPBUGS-30284](https://issues.redhat.com/browse/OCPBUGS-30284): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3694](https://github.com/openshift/hypershift/pull/3694) * [OCPBUGS-30281](https://issues.redhat.com/browse/OCPBUGS-30281): [release-4.15] OCPBUGS-30102: Support to disable machine management components [#3670](https://github.com/openshift/hypershift/pull/3670) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3675](https://github.com/openshift/hypershift/pull/3675) * Update RHTAP references (release-4.15) [#3645](https://github.com/openshift/hypershift/pull/3645) * [HOSTEDCP-1405](https://issues.redhat.com/browse/HOSTEDCP-1405): Remove files not needed [#3669](https://github.com/openshift/hypershift/pull/3669) * [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3648](https://github.com/openshift/hypershift/pull/3648) * [OCPBUGS-30088](https://issues.redhat.com/browse/OCPBUGS-30088): rollout kas on auth config change [#3653](https://github.com/openshift/hypershift/pull/3653) * NO-JIRA: remove PrivateIngressController cleanup [#3646](https://github.com/openshift/hypershift/pull/3646) * [OCPBUGS-29880](https://issues.redhat.com/browse/OCPBUGS-29880): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3632](https://github.com/openshift/hypershift/pull/3632) * [OCPBUGS-29025](https://issues.redhat.com/browse/OCPBUGS-29025): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3522](https://github.com/openshift/hypershift/pull/3522) * [OCPBUGS-30029](https://issues.redhat.com/browse/OCPBUGS-30029): sync AuthenticationConfiguration type with o/k 1.28 carry [#3644](https://github.com/openshift/hypershift/pull/3644) * NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#3643](https://github.com/openshift/hypershift/pull/3643) * NO-JIRA: Remove specific pull secret watch in HCCO [#3606](https://github.com/openshift/hypershift/pull/3606) * [OCPBUGS-29850](https://issues.redhat.com/browse/OCPBUGS-29850): control-plane-pki-operator: fix CA used for SRE client credentials [#3626](https://github.com/openshift/hypershift/pull/3626) * NO-JIRA: PDB backports [#3628](https://github.com/openshift/hypershift/pull/3628) * [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607) * [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480) * [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582) * [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529) * NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579) * [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421) * [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565) * [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566) * [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533) * [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558) * [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532) * [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521) * [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473) * NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537) * [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523) * [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495) * [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515) * [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482) * [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502) * [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457) * [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420) * NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499) * [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500) * [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465) * [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467) * [OCPBUGS-27432](https://issues.redhat.com/browse/OCPBUGS-27432): consider HCP upgradeable if CVO has no upgradable condition [#3444](https://github.com/openshift/hypershift/pull/3444) * [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3393](https://github.com/openshift/hypershift/pull/3393) * [OCPBUGS-27076](https://issues.redhat.com/browse/OCPBUGS-27076): availability-prober: wait for infrastructure name to be set [#3419](https://github.com/openshift/hypershift/pull/3419) * [OCPBUGS-27155](https://issues.redhat.com/browse/OCPBUGS-27155): Change KAS bootstrap image to cluster-config-api [#3423](https://github.com/openshift/hypershift/pull/3423) * [OCPBUGS-27071](https://issues.redhat.com/browse/OCPBUGS-27071): Apply Scheduling Configuration for kCCM [#3417](https://github.com/openshift/hypershift/pull/3417) * [OCPBUGS-26600](https://issues.redhat.com/browse/OCPBUGS-26600): set KAS runtime-config in alignment with feature gates [#3399](https://github.com/openshift/hypershift/pull/3399) * [OCPBUGS-26412](https://issues.redhat.com/browse/OCPBUGS-26412): Set new condition on SG deletion. [#3381](https://github.com/openshift/hypershift/pull/3381) * [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3380](https://github.com/openshift/hypershift/pull/3380) * [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry writer when telemeter-client cm not exists [#3379](https://github.com/openshift/hypershift/pull/3379) * [OCPBUGS-26223](https://issues.redhat.com/browse/OCPBUGS-26223): hostedcontrolplane: don't start pki operator when disabled [#3376](https://github.com/openshift/hypershift/pull/3376) * [OCPBUGS-25782](https://issues.redhat.com/browse/OCPBUGS-25782): Added support for OLM Disable default sources on HC creation [#3321](https://github.com/openshift/hypershift/pull/3321) * [CCO-511](https://issues.redhat.com/browse/CCO-511): control-plane-operator: reconcile the CCO [#3336](https://github.com/openshift/hypershift/pull/3336) * NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 [#3338](https://github.com/openshift/hypershift/pull/3338) * [HOSTEDCP-1257](https://issues.redhat.com/browse/HOSTEDCP-1257): control-plane-pki-operator: add a CSR flow for break-glass creds [#3324](https://github.com/openshift/hypershift/pull/3324) * [ACM-8466](https://issues.redhat.com/browse/ACM-8466): Add Kubernetes SCC V2 options to HO containers [#3311](https://github.com/openshift/hypershift/pull/3311) * [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating ose-hypershift-container image to be consistent with ART [#3247](https://github.com/openshift/hypershift/pull/3247) * [HOSTEDCP-1336](https://issues.redhat.com/browse/HOSTEDCP-1336): bump openshift/api [#3282](https://github.com/openshift/hypershift/pull/3282) * NO-JIRA: Fix wrong annotation on cluster deletion [#3289](https://github.com/openshift/hypershift/pull/3289) * [OTA-855](https://issues.redhat.com/browse/OTA-855): Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift [#2807](https://github.com/openshift/hypershift/pull/2807) * [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): correct typo for OAS internal-oauth-disabled flag [#3278](https://github.com/openshift/hypershift/pull/3278) * NO-JIRA: Bump the golang-dependencies group with 3 updates [#3254](https://github.com/openshift/hypershift/pull/3254) * [OCPBUGS-23126](https://issues.redhat.com/browse/OCPBUGS-23126): Fix a bug on deletion of a hostedcluster [#3234](https://github.com/openshift/hypershift/pull/3234) * [CNV-35774](https://issues.redhat.com/browse/CNV-35774): Improve CRD defaulting for HostedCluster and NodePool [#3116](https://github.com/openshift/hypershift/pull/3116) * [HOSTEDCP-1322](https://issues.redhat.com/browse/HOSTEDCP-1322): NodeUpgradeType defaulted by provider via CLI [#3273](https://github.com/openshift/hypershift/pull/3273) * NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too [#3263](https://github.com/openshift/hypershift/pull/3263) * [CNV-34093](https://issues.redhat.com/browse/CNV-34093): kubevirt: verify release image falls within supported release window [#3184](https://github.com/openshift/hypershift/pull/3184) * [CNV-29003](https://issues.redhat.com/browse/CNV-29003): Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) [#3189](https://github.com/openshift/hypershift/pull/3189) * [OCPBUGS-22459](https://issues.redhat.com/browse/OCPBUGS-22459): Add prestop to konnectiviy server [#3250](https://github.com/openshift/hypershift/pull/3250) * [HOSTEDCP-1318](https://issues.redhat.com/browse/HOSTEDCP-1318): pass internal-oauth-disable flag to openshift-apiserver when Auth type is OIDC [#3244](https://github.com/openshift/hypershift/pull/3244) * [OCPBUGS-23397](https://issues.redhat.com/browse/OCPBUGS-23397): Set shutdown-delay-duration to 15s [#3204](https://github.com/openshift/hypershift/pull/3204) * [HOSTEDCP-1234](https://issues.redhat.com/browse/HOSTEDCP-1234): Add KMS support on Azure clusters using Azure Key Vault [#3183](https://github.com/openshift/hypershift/pull/3183) * [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): set respondWithChallenges false on CLI OAuth client [#3249](https://github.com/openshift/hypershift/pull/3249) * [WRKLDS-925](https://issues.redhat.com/browse/WRKLDS-925): remove duplicate passing of kubeconfig into route-controller-manager [#3220](https://github.com/openshift/hypershift/pull/3220) * [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): control-plane-pki-operator: add an operator for managing PKI [#3193](https://github.com/openshift/hypershift/pull/3193) * [HOSTEDCP-1319](https://issues.redhat.com/browse/HOSTEDCP-1319): Fix Dependabot & Group Dependency Updates [#3246](https://github.com/openshift/hypershift/pull/3246) * [OCPBUGS-24062](https://issues.redhat.com/browse/OCPBUGS-24062): fix(cpo): Set restart annotation on network-node-identity [#3245](https://github.com/openshift/hypershift/pull/3245) * kubevirt, hcp, HOSTEDCP-1311: Add multinet knobs [#3235](https://github.com/openshift/hypershift/pull/3235) * [HOSTEDCP-1312](https://issues.redhat.com/browse/HOSTEDCP-1312): Fixed update-codegen.sh to work locally [#3214](https://github.com/openshift/hypershift/pull/3214) * [OCPBUGS-23555](https://issues.redhat.com/browse/OCPBUGS-23555): add CLI oauthclient [#3238](https://github.com/openshift/hypershift/pull/3238) * [HOSTEDCP-1300](https://issues.redhat.com/browse/HOSTEDCP-1300): Bump k8s.io/client-go to v0.28.3 [#3191](https://github.com/openshift/hypershift/pull/3191) * [OCPBUGS-19834](https://issues.redhat.com/browse/OCPBUGS-19834): add watch for HCP pullsecret to HCCO [#3237](https://github.com/openshift/hypershift/pull/3237) * Update RHTAP references (main) [#3230](https://github.com/openshift/hypershift/pull/3230) * [HOSTEDCP-1236](https://issues.redhat.com/browse/HOSTEDCP-1236): Enable public router+external DNS for azure [#3233](https://github.com/openshift/hypershift/pull/3233) * [OCPBUGS-23921](https://issues.redhat.com/browse/OCPBUGS-23921): Use correct kubeconfig in CCM and remove CCMs access t… [#3222](https://github.com/openshift/hypershift/pull/3222) * [OCPBUGS-22473](https://issues.redhat.com/browse/OCPBUGS-22473): Added OLMCatalogPlacement option to the CLI [#3206](https://github.com/openshift/hypershift/pull/3206) * [OSD-19085](https://issues.redhat.com/browse/OSD-19085): New hypershift_cluster_cores metric giving the total number of worker cores [#3089](https://github.com/openshift/hypershift/pull/3089) * [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to IPv6 KAS address on kubeconfig [#3207](https://github.com/openshift/hypershift/pull/3207) * [OCPBUGS-23737](https://issues.redhat.com/browse/OCPBUGS-23737): remove machine-approver probes [#3227](https://github.com/openshift/hypershift/pull/3227) * [OCPBUGS-23350](https://issues.redhat.com/browse/OCPBUGS-23350): Added IPFamilyPolicy to services exposed at the HCP in DualStack mode [#3210](https://github.com/openshift/hypershift/pull/3210) * [OCPBUGS-23466](https://issues.redhat.com/browse/OCPBUGS-23466): Let router use svc ips [#3218](https://github.com/openshift/hypershift/pull/3218) * [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/hypershift: mark more conditions with list key types [#3212](https://github.com/openshift/hypershift/pull/3212) * [OCPBUGS-23472](https://issues.redhat.com/browse/OCPBUGS-23472): unset ServiceAccount on ignition-server-proxy [#3209](https://github.com/openshift/hypershift/pull/3209) * [OCPBUGS-23528](https://issues.redhat.com/browse/OCPBUGS-23528): Fix error when removing finalizer on cluster destroy [#3219](https://github.com/openshift/hypershift/pull/3219) * [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): api/v1beta1: annotate hostedcontrolplane conditions [#3211](https://github.com/openshift/hypershift/pull/3211) * [OCPBUGS-23398](https://issues.redhat.com/browse/OCPBUGS-23398): Fixed AWS KMS Backup container args [#3216](https://github.com/openshift/hypershift/pull/3216) * [HOSTEDCP-1311](https://issues.redhat.com/browse/HOSTEDCP-1311): kubevirt, Add support for secondary networks [#3066](https://github.com/openshift/hypershift/pull/3066) * [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): expose cert rotation scale parameter [#3208](https://github.com/openshift/hypershift/pull/3208) * [OCPBUGS-23314](https://issues.redhat.com/browse/OCPBUGS-23314): SetLogger for CLI [#3199](https://github.com/openshift/hypershift/pull/3199) * [HOSTEDCP-1237](https://issues.redhat.com/browse/HOSTEDCP-1237): Retrieve RHCOS VHD image from release image [#3177](https://github.com/openshift/hypershift/pull/3177) * [HOSTEDCP-1284](https://issues.redhat.com/browse/HOSTEDCP-1284): Bumps k8s.io/pod-security-admission to v0.28.3 [#3181](https://github.com/openshift/hypershift/pull/3181) * [CNV-23418](https://issues.redhat.com/browse/CNV-23418): Validate jsonpatch annotation + add condition on wrong patch [#3197](https://github.com/openshift/hypershift/pull/3197) * [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Kas port svc cleanup [#3186](https://github.com/openshift/hypershift/pull/3186) * [HOSTEDCP-1254](https://issues.redhat.com/browse/HOSTEDCP-1254): disable deployment of integrated oauth when authentication type is OIDC and set KAS flags [#3151](https://github.com/openshift/hypershift/pull/3151) * [CNV-23418](https://issues.redhat.com/browse/CNV-23418): fix the jsonpath annotation implemetation [#3201](https://github.com/openshift/hypershift/pull/3201) * [HOSTEDCP-1305](https://issues.redhat.com/browse/HOSTEDCP-1305): Simplify HostedControlPlaneNamespace().Name [#2619](https://github.com/openshift/hypershift/pull/2619) * [OCPBUGS-22912](https://issues.redhat.com/browse/OCPBUGS-22912): Set value of elb tag to 1 instead of true [#3198](https://github.com/openshift/hypershift/pull/3198) * [CNV-30444](https://issues.redhat.com/browse/CNV-30444): Document recommended MTU settings for KubeVirt HCP [#3129](https://github.com/openshift/hypershift/pull/3129) * [HOSTEDCP-1306](https://issues.redhat.com/browse/HOSTEDCP-1306): Bump Golang builder to 1.20 for RHTAP dockerfile [#3196](https://github.com/openshift/hypershift/pull/3196) * NO-JIRA: chore(deps): update rhtap references [#3192](https://github.com/openshift/hypershift/pull/3192) * [CNV-23418](https://issues.redhat.com/browse/CNV-23418): unsupported escape hatch mechanism custom HS/KV vms [#3187](https://github.com/openshift/hypershift/pull/3187) * [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): generate typed clients for apis [#3179](https://github.com/openshift/hypershift/pull/3179) * NO-JIRA: *: Fix "succesfully" -> "successfully" typos [#3188](https://github.com/openshift/hypershift/pull/3188) * [OCPBUGS-20179](https://issues.redhat.com/browse/OCPBUGS-20179): Stop defining time series for hosted clusters or node pools which do not exist anymore. [#2671](https://github.com/openshift/hypershift/pull/2671) * [HOSTEDCP-1285](https://issues.redhat.com/browse/HOSTEDCP-1285): Consume kas Pod port by name [#3185](https://github.com/openshift/hypershift/pull/3185) * [OCPBUGS-23083](https://issues.redhat.com/browse/OCPBUGS-23083): adding permission to CNO RBAC Calico path for network-node-identity deploy [#3172](https://github.com/openshift/hypershift/pull/3172) * [HOSTEDCP-1256](https://issues.redhat.com/browse/HOSTEDCP-1256): Update Dependencies [#3154](https://github.com/openshift/hypershift/pull/3154) * [HOSTEDCP-1283](https://issues.redhat.com/browse/HOSTEDCP-1283): Fixed Azure nodes not joining [#3174](https://github.com/openshift/hypershift/pull/3174) * [HOSTEDCP-1227](https://issues.redhat.com/browse/HOSTEDCP-1227): Retrieve CAPZ image from OCP release image [#3074](https://github.com/openshift/hypershift/pull/3074) * NO-JIRA: fix formatting for releaseImage log [#3156](https://github.com/openshift/hypershift/pull/3156) * [HOSTEDCP-1206](https://issues.redhat.com/browse/HOSTEDCP-1206): Req serving isolation e2e enxebre [#3150](https://github.com/openshift/hypershift/pull/3150) * [OCPBUGS-23015](https://issues.redhat.com/browse/OCPBUGS-23015): Configure HSTS for kube-apiserver [#3088](https://github.com/openshift/hypershift/pull/3088) * [HOSTEDCP-1281](https://issues.redhat.com/browse/HOSTEDCP-1281): Fix a bug in the validating webhook [#3164](https://github.com/openshift/hypershift/pull/3164) * [CNV-33847](https://issues.redhat.com/browse/CNV-33847): KubeVirt: create the etcd encryption key secret, if missing [#3148](https://github.com/openshift/hypershift/pull/3148) * [HOSTEDCP-1278](https://issues.redhat.com/browse/HOSTEDCP-1278): Adjustment cluster-cidr,service-cidr to support dualstack [#3161](https://github.com/openshift/hypershift/pull/3161) * [OCPBUGS-10423](https://issues.redhat.com/browse/OCPBUGS-10423): Update regex validation for nodepool.spec.taints.value [#3141](https://github.com/openshift/hypershift/pull/3141) * [OCPBUGS-20161](https://issues.redhat.com/browse/OCPBUGS-20161): Stop exposing kas on 6443 private route service load balancer [#3149](https://github.com/openshift/hypershift/pull/3149) * [OCPBUGS-16079](https://issues.redhat.com/browse/OCPBUGS-16079): No error for overlapping service network and API IP [#3067](https://github.com/openshift/hypershift/pull/3067) * [OCPBUGS-22868](https://issues.redhat.com/browse/OCPBUGS-22868): Fixed accessTokenInactivityTimeout validation [#3157](https://github.com/openshift/hypershift/pull/3157) * [CNV-34094](https://issues.redhat.com/browse/CNV-34094): Add validating webhook [#3132](https://github.com/openshift/hypershift/pull/3132) * Stop defaulting aws private haproxy external port to 6443 [#3147](https://github.com/openshift/hypershift/pull/3147) * Remove GITHUB_ACCESS_TOKEN requirement from release notes script [#3134](https://github.com/openshift/hypershift/pull/3134) * [HOSTEDCP-1215](https://issues.redhat.com/browse/HOSTEDCP-1215): Use the same etcd snapshot for all replicas during etcd restore [#3081](https://github.com/openshift/hypershift/pull/3081) * Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools [#3136](https://github.com/openshift/hypershift/pull/3136) * [OCPBUGS-20033](https://issues.redhat.com/browse/OCPBUGS-20033): Make the OLMCatalogPlacement field immutable [#3113](https://github.com/openshift/hypershift/pull/3113) * [HOSTEDCP-1113](https://issues.redhat.com/browse/HOSTEDCP-1113): Improve NodePool CPU arch & platform check [#3072](https://github.com/openshift/hypershift/pull/3072) * [HOSTEDCP-1253](https://issues.redhat.com/browse/HOSTEDCP-1253): bump openshift/api for new authentication config [#3135](https://github.com/openshift/hypershift/pull/3135) * [HOSTEDCP-1229](https://issues.redhat.com/browse/HOSTEDCP-1229): Move azure cloud provider to out of tree [#3086](https://github.com/openshift/hypershift/pull/3086) * contrib: increase HC quota to 40 [#3140](https://github.com/openshift/hypershift/pull/3140) * [HOSTEDCP-1200](https://issues.redhat.com/browse/HOSTEDCP-1200): Remove pod exceptions from EnsureNoCrashingPods [#3138](https://github.com/openshift/hypershift/pull/3138) * run EnsurePSANotPrivileged for TestCreateCluster only [#3137](https://github.com/openshift/hypershift/pull/3137) * [OCPBUGS-21776](https://issues.redhat.com/browse/OCPBUGS-21776): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3115](https://github.com/openshift/hypershift/pull/3115) * [OCPBUGS-21626](https://issues.redhat.com/browse/OCPBUGS-21626): Validate accessTokenInactivityTimeout >= 300s [#3110](https://github.com/openshift/hypershift/pull/3110) * [OCPBUGS-20246](https://issues.redhat.com/browse/OCPBUGS-20246): Added brackets to the kubeconfig server address when IPv6 [#3097](https://github.com/openshift/hypershift/pull/3097) * Bump golang.org/x/net from 0.13.0 to 0.17.0 [#3092](https://github.com/openshift/hypershift/pull/3092) * [OCPBUGS-22195](https://issues.redhat.com/browse/OCPBUGS-22195): Fix label selector check for CAPI provider [#3108](https://github.com/openshift/hypershift/pull/3108) * Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools [#3093](https://github.com/openshift/hypershift/pull/3093) * Update RHTAP references [#3062](https://github.com/openshift/hypershift/pull/3062) * [OCPBUGS-21822](https://issues.redhat.com/browse/OCPBUGS-21822): Add ign proxy label selector for LabelTopologyZone PodAntiAffinity [#3103](https://github.com/openshift/hypershift/pull/3103) * OCPBUGS-19419 change trusted bundle volume mount for CPO [#3099](https://github.com/openshift/hypershift/pull/3099) * Disabling unused monitoring services [#2730](https://github.com/openshift/hypershift/pull/2730) * [OCPBUGS-18341](https://issues.redhat.com/browse/OCPBUGS-18341): change required pod anti-affinity rule to preferred rule [#3095](https://github.com/openshift/hypershift/pull/3095) * [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase upgrade rollout timers" [#3090](https://github.com/openshift/hypershift/pull/3090) * [CNV-31891](https://issues.redhat.com/browse/CNV-31891): Document port 80 is not supported with default ingress for KubeVirt [#3079](https://github.com/openshift/hypershift/pull/3079) * [MULTIARCH-3760](https://issues.redhat.com/browse/MULTIARCH-3760): Rename depricated flag for PowerVS capi deployment [#3028](https://github.com/openshift/hypershift/pull/3028) * HOSTEDCP-1051 addition of grace period for aws infra destruction [#2967](https://github.com/openshift/hypershift/pull/2967) * [HOSTEDCP-1232](https://issues.redhat.com/browse/HOSTEDCP-1232): Add clusterName label to CAPI kubeconfig secret [#3087](https://github.com/openshift/hypershift/pull/3087) * [OCPBUGS-19957](https://issues.redhat.com/browse/OCPBUGS-19957): Reconcile CNCC secret to CPO namespace [#3065](https://github.com/openshift/hypershift/pull/3065) * [OCPBUGS-20105](https://issues.redhat.com/browse/OCPBUGS-20105): OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes [#3077](https://github.com/openshift/hypershift/pull/3077) * [OCPBUGS-16189](https://issues.redhat.com/browse/OCPBUGS-16189), [OCPBUGS-19746](https://issues.redhat.com/browse/OCPBUGS-19746): Added network validations [#3047](https://github.com/openshift/hypershift/pull/3047) * [CNV-30697](https://issues.redhat.com/browse/CNV-30697): Dedicated CPU for KubeVirt node pool [#3048](https://github.com/openshift/hypershift/pull/3048) * Add record rules for kas qps [#2858](https://github.com/openshift/hypershift/pull/2858) * Fix a typo in KubeVirt troubleshooting script [#3073](https://github.com/openshift/hypershift/pull/3073) * [HOSTEDCP-1184](https://issues.redhat.com/browse/HOSTEDCP-1184): Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal [#3008](https://github.com/openshift/hypershift/pull/3008) * Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… [#3076](https://github.com/openshift/hypershift/pull/3076) * Upate azure docs [#3075](https://github.com/openshift/hypershift/pull/3075) * [OCPBUGS-13348](https://issues.redhat.com/browse/OCPBUGS-13348): Hypershift Audit configuration not working (part2). [#3014](https://github.com/openshift/hypershift/pull/3014) * [OCPBUGS-11939](https://issues.redhat.com/browse/OCPBUGS-11939), [OCPBUGS-18128](https://issues.redhat.com/browse/OCPBUGS-18128), [OCPBUGS-18460](https://issues.redhat.com/browse/OCPBUGS-18460), [OCPBUGS-18602](https://issues.redhat.com/browse/OCPBUGS-18602), [OCPBUGS-18879](https://issues.redhat.com/browse/OCPBUGS-18879): Support Disconnected HCP [#2950](https://github.com/openshift/hypershift/pull/2950) * Add private link perms to docs and clarify log message [#3063](https://github.com/openshift/hypershift/pull/3063) * [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): Add konnectivity-proxy container to CNO [#2974](https://github.com/openshift/hypershift/pull/2974) * [OCPBUGS-19784](https://issues.redhat.com/browse/OCPBUGS-19784): Update capi agent version for CRD label [#3050](https://github.com/openshift/hypershift/pull/3050) * KubeVirt platform troubleshooting documentation [#3055](https://github.com/openshift/hypershift/pull/3055) * Remove EgressFirewall Creation in HCP namespace [#3049](https://github.com/openshift/hypershift/pull/3049) * [HOSTEDCP-1212](https://issues.redhat.com/browse/HOSTEDCP-1212): Bump Golang to v1.20 [#3038](https://github.com/openshift/hypershift/pull/3038) * Update RHTAP references (main) [#3054](https://github.com/openshift/hypershift/pull/3054) * [OCPBUGS-15215](https://issues.redhat.com/browse/OCPBUGS-15215): OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift [#3041](https://github.com/openshift/hypershift/pull/3041) * Update RHTAP references (main) [#3042](https://github.com/openshift/hypershift/pull/3042) * [OCPBUGS-19271](https://issues.redhat.com/browse/OCPBUGS-19271): Updating hypershift images to be consistent with ART [#3017](https://github.com/openshift/hypershift/pull/3017) * Update kubevirt csi driver deployment with proper timeouts [#3044](https://github.com/openshift/hypershift/pull/3044) * [OCPBUGS-19516](https://issues.redhat.com/browse/OCPBUGS-19516): Upgrade agent APIs to v1beta1 [#3022](https://github.com/openshift/hypershift/pull/3022) * [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly [#2976](https://github.com/openshift/hypershift/pull/2976) * [OCPBUGS-19674](https://issues.redhat.com/browse/OCPBUGS-19674): Report correct port when API exposed via route [#3037](https://github.com/openshift/hypershift/pull/3037) * [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver [#3025](https://github.com/openshift/hypershift/pull/3025) * [HOSTEDCP-1209](https://issues.redhat.com/browse/HOSTEDCP-1209): set ubi Containerfile labels [#3039](https://github.com/openshift/hypershift/pull/3039) * Use example versions for KubeVirt platform that are supported [#3027](https://github.com/openshift/hypershift/pull/3027) * [OCPBUGS-17669](https://issues.redhat.com/browse/OCPBUGS-17669): Remove cluster name validation from HCC [#3036](https://github.com/openshift/hypershift/pull/3036) * KubeVirt: document VMs logs collection [#3031](https://github.com/openshift/hypershift/pull/3031) * Update RHTAP references (main) [#3033](https://github.com/openshift/hypershift/pull/3033) * [OCPBUGS-19381](https://issues.redhat.com/browse/OCPBUGS-19381): Let NodePools skip min version when SkipReleaseImageValidation is in HC [#3024](https://github.com/openshift/hypershift/pull/3024) * [OCPBUGS-19346](https://issues.redhat.com/browse/OCPBUGS-19346): set default deploymentconfig params on AWS CCM [#3021](https://github.com/openshift/hypershift/pull/3021) * [ACM-7278](https://issues.redhat.com/browse/ACM-7278): Remove marking pull secret as required in hcp cli [#3013](https://github.com/openshift/hypershift/pull/3013) * [OCPBUGS-19332](https://issues.redhat.com/browse/OCPBUGS-19332): Use impersonated client for fetching the localhost-kubeconfig from ma… [#3011](https://github.com/openshift/hypershift/pull/3011) * Relax network policy e2e for private [#3020](https://github.com/openshift/hypershift/pull/3020) * Dump KubeVirt pod logs [#3000](https://github.com/openshift/hypershift/pull/3000) * Update RHTAP references [#2995](https://github.com/openshift/hypershift/pull/2995) * [OCPBUGS-19014](https://issues.redhat.com/browse/OCPBUGS-19014): Apply private-router network policy only if running OCP 4.14 [#3012](https://github.com/openshift/hypershift/pull/3012) * Validate KubeVirt platform required versioning [#2948](https://github.com/openshift/hypershift/pull/2948) * [OCPBUGS-18720](https://issues.redhat.com/browse/OCPBUGS-18720): amend OLM catalogs ImageStream according to annotation [#3001](https://github.com/openshift/hypershift/pull/3001) * [OCPBUGS-17906](https://issues.redhat.com/browse/OCPBUGS-17906): reconcile Authentication global config [#3009](https://github.com/openshift/hypershift/pull/3009) * feat: add _id label to all hypershift operator metrics [#2991](https://github.com/openshift/hypershift/pull/2991) * [OCPBUGS-18122](https://issues.redhat.com/browse/OCPBUGS-18122): Rename isUpgradeable to isUpgrading according to its return value [#2955](https://github.com/openshift/hypershift/pull/2955) * [OCPBUGS-18762](https://issues.redhat.com/browse/OCPBUGS-18762): unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC [#3004](https://github.com/openshift/hypershift/pull/3004) * [OCPBUGS-18754](https://issues.redhat.com/browse/OCPBUGS-18754): tuned DS should not use controlPlaneReleaseImage [#3003](https://github.com/openshift/hypershift/pull/3003) * [HYPBLD-99](https://issues.redhat.com/browse/HYPBLD-99): enable CGO_ENABLED for building FIPS compliant images [#2997](https://github.com/openshift/hypershift/pull/2997) * e2e: fixed gomega created from parent test context [#2987](https://github.com/openshift/hypershift/pull/2987) * bump HO supported version for 4.15 [#2927](https://github.com/openshift/hypershift/pull/2927) * [HOSTEDCP-1075](https://issues.redhat.com/browse/HOSTEDCP-1075): Document instructions for recovering etcd cluster from lost quorum [#2952](https://github.com/openshift/hypershift/pull/2952) * [Full changelog](https://github.com/openshift/hypershift/compare/bcdc4a0f9662eb890c7cbe49a818b0764142930a...b7c1d6a412bbc87a9eb2773da4a7a5ebb39dd24b) ### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/cc0d54159c5d626aaa91eef94a92a80b3d1a3870) * : OCPBUGS-37311: Bump otelgrpc to v0.49.0 [#74](https://github.com/openshift/cloud-provider-ibm/pull/74) * [OCPBUGS-23610](https://issues.redhat.com/browse/OCPBUGS-23610): Add Snyk file to exclude vendor directory on scan [#64](https://github.com/openshift/cloud-provider-ibm/pull/64) * [OCPBUGS-24109](https://issues.redhat.com/browse/OCPBUGS-24109): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART [#60](https://github.com/openshift/cloud-provider-ibm/pull/60) * [OCPCLOUD-2183](https://issues.redhat.com/browse/OCPCLOUD-2183): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.28 (1584359) into master [#47](https://github.com/openshift/cloud-provider-ibm/pull/47) * Update OWNERS [#54](https://github.com/openshift/cloud-provider-ibm/pull/54) * [OCPBUGS-19180](https://issues.redhat.com/browse/OCPBUGS-19180): Updating ose-ibm-cloud-controller-manager images to be consistent with ART [#53](https://github.com/openshift/cloud-provider-ibm/pull/53) * [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/446871ff7626c4199836929f5bc777aba2a5f001...cc0d54159c5d626aaa91eef94a92a80b3d1a3870) ### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d) * [OCPBUGS-36066](https://issues.redhat.com/browse/OCPBUGS-36066): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#72](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/72) * [STOR-1408](https://issues.redhat.com/browse/STOR-1408): Chore: Update OWNERS_ALIASES [#59](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/59) * Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART [#58](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/58) * [STOR-1408](https://issues.redhat.com/browse/STOR-1408): Chore: Update ibm-vpc-block-csi-driver to the latest release [#55](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/55) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#48](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/48) * [OCPBUGS-18105](https://issues.redhat.com/browse/OCPBUGS-18105): [IBM VPC] failed provisioning volume in proxy cluster [#43](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/43) * [OCPBUGS-16920](https://issues.redhat.com/browse/OCPBUGS-16920): UPSTREAM: 164: Disable UUID check on xfs (#164) [#45](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/45) * [OCPBUGS-19188](https://issues.redhat.com/browse/OCPBUGS-19188): Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#44](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/44) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/02471d9625339b1cd6d638e358a10c88b223d30e...81877ac81f4c59eebcfaa1653ef2bb6ed2283d1d) ### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/df0f1f6443e23009afbafe88b22d9b3440dff4b8) * [OCPBUGS-36072](https://issues.redhat.com/browse/OCPBUGS-36072): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#121](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/121) * [OCPBUGS-33641](https://issues.redhat.com/browse/OCPBUGS-33641): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#116](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/116) * [OCPBUGS-25604](https://issues.redhat.com/browse/OCPBUGS-25604): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 [#103](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/103) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#99](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/99) * [STOR-1487](https://issues.redhat.com/browse/STOR-1487): Provide BYOK encryption support for OpenShift on IBM Cloud VPC [#93](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/93) * [OCPBUGS-23862](https://issues.redhat.com/browse/OCPBUGS-23862): OCPBUGS-22603: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#88](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/88) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#92](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/92) * [STOR-1485](https://issues.redhat.com/browse/STOR-1485): Support for endpoint override from config [#89](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/89) * [OCPBUGS-22924](https://issues.redhat.com/browse/OCPBUGS-22924): Removing unncessary imagePullSecrets [#87](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/87) * [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#77](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/77) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#86](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/86) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#80](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/80) * [OCPBUGS-19215](https://issues.redhat.com/browse/OCPBUGS-19215): Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART [#78](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/78) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/7fd94aa73f7e61cba93657cc2411e04e1b40e87b...df0f1f6443e23009afbafe88b22d9b3440dff4b8) ### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/5d72ced58e4ff3c4d4ad02f181578755dfa0312a) * [OCPBUGS-36012](https://issues.redhat.com/browse/OCPBUGS-36012): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#41](https://github.com/openshift/ibm-vpc-node-label-updater/pull/41) * Updating ibm-vpc-node-label-updater-container image to be consistent with ART [#33](https://github.com/openshift/ibm-vpc-node-label-updater/pull/33) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#26](https://github.com/openshift/ibm-vpc-node-label-updater/pull/26) * [OCPBUGS-19217](https://issues.redhat.com/browse/OCPBUGS-19217): Updating ibm-vpc-node-label-updater images to be consistent with ART [#25](https://github.com/openshift/ibm-vpc-node-label-updater/pull/25) * [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/44a2b9430e38e4dc0fe6ef0c08cd759ed97fd43f...5d72ced58e4ff3c4d4ad02f181578755dfa0312a) ### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/34fb625247f6743637b0ef0c5767e000e0ec1e65) * [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78) * [OCPBUGS-23685](https://issues.redhat.com/browse/OCPBUGS-23685): Add Snyk file to exclude vendor directory on scan [#72](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/72) * [OCPCLOUD-2255](https://issues.redhat.com/browse/OCPCLOUD-2255): Update manifests-gen tool [#68](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/68) * Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART [#65](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/65) * [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#64](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/64) * [OCPBUGS-22054](https://issues.redhat.com/browse/OCPBUGS-22054): Bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/62) * [OCPBUGS-22107](https://issues.redhat.com/browse/OCPBUGS-22107): Bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/61) * Update OWNERS [#60](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/60) * [OCPCLOUD-2220](https://issues.redhat.com/browse/OCPCLOUD-2220): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.6.0 (02aa85f) into main [#59](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/59) * [OCPBUGS-19181](https://issues.redhat.com/browse/OCPBUGS-19181): Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART [#58](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/58) * [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/004ecde5e7e5394abdb9fe62b3063fd20300bb9c...34fb625247f6743637b0ef0c5767e000e0ec1e65) ### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1) * [OCPCLOUD-2264](https://issues.redhat.com/browse/OCPCLOUD-2264): IBMCloud: Add boot volume key support [#27](https://github.com/openshift/machine-api-provider-ibmcloud/pull/27) * Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#30](https://github.com/openshift/machine-api-provider-ibmcloud/pull/30) * [OCPCLOUD-2227](https://issues.redhat.com/browse/OCPCLOUD-2227): IBMCloud: Fix version for binary [#29](https://github.com/openshift/machine-api-provider-ibmcloud/pull/29) * [OCPCLOUD-2266](https://issues.redhat.com/browse/OCPCLOUD-2266): IBMCloud: MAPI Service Endpoint overrides [#28](https://github.com/openshift/machine-api-provider-ibmcloud/pull/28) * Update OWNERS [#26](https://github.com/openshift/machine-api-provider-ibmcloud/pull/26) * [OCPBUGS-17293](https://issues.redhat.com/browse/OCPBUGS-17293), [OCPCLOUD-2190](https://issues.redhat.com/browse/OCPCLOUD-2190): update k8s dependencies to release 1.28 [#25](https://github.com/openshift/machine-api-provider-ibmcloud/pull/25) * [OCPBUGS-19221](https://issues.redhat.com/browse/OCPBUGS-19221): Updating ose-ibmcloud-machine-controllers images to be consistent with ART [#24](https://github.com/openshift/machine-api-provider-ibmcloud/pull/24) * [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c28b2232ab1c0dcd951a23b324506eaab510389c...6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1) ### [insights-operator](https://github.com/openshift/insights-operator/tree/f0c44f64d5a357026e90a359ed26abfb88e4150c) * Fix typo in link to gathers.json [#876](https://github.com/openshift/insights-operator/pull/876) * [Full changelog](https://github.com/openshift/insights-operator/compare/50e132e0a016272f32f950fdb7fe45fc30526590...f0c44f64d5a357026e90a359ed26abfb88e4150c) ### [ironic](https://github.com/openshift/ironic-image/tree/ecfc66474fcbc8fb0d2809b75c50e267d89953e1) * [OCPBUGS-33332](https://issues.redhat.com/browse/OCPBUGS-33332): bump werkzeug [#536](https://github.com/openshift/ironic-image/pull/536) * [OCPBUGS-37407](https://issues.redhat.com/browse/OCPBUGS-37407): bump jinja2 [#529](https://github.com/openshift/ironic-image/pull/529) * [OCPBUGS-37113](https://issues.redhat.com/browse/OCPBUGS-37113): Update eventlet version [#523](https://github.com/openshift/ironic-image/pull/523) * Bug OCPBUGS-33736: Disable installation of .pyc files through pip [#511](https://github.com/openshift/ironic-image/pull/511) * [OCPBUGS-32365](https://issues.redhat.com/browse/OCPBUGS-32365): [4.15] Remove unused prometheus exporter [#485](https://github.com/openshift/ironic-image/pull/485) * [OCPBUGS-32351](https://issues.redhat.com/browse/OCPBUGS-32351): [4.15] Update to include fixes for ironic servicing feature [#479](https://github.com/openshift/ironic-image/pull/479) * [OCPBUGS-32389](https://issues.redhat.com/browse/OCPBUGS-32389): Use unix sockets by default for reverse proxy communication [#474](https://github.com/openshift/ironic-image/pull/474) * [OCPBUGS-31686](https://issues.redhat.com/browse/OCPBUGS-31686), [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802), [OCPBUGS-31830](https://issues.redhat.com/browse/OCPBUGS-31830): [4.15] install ironic projects from source [#470](https://github.com/openshift/ironic-image/pull/470) * [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802): [4.15] Add requirements placeholders for cachito [#467](https://github.com/openshift/ironic-image/pull/467) * [OCPBUGS-27772](https://issues.redhat.com/browse/OCPBUGS-27772): Update packages to include most recent bug fixes [#450](https://github.com/openshift/ironic-image/pull/450) * [OCPBUGS-27060](https://issues.redhat.com/browse/OCPBUGS-27060): Fix Inspector iPXE config for IPv6 addresses [#447](https://github.com/openshift/ironic-image/pull/447) * [OCPBUGS-24648](https://issues.redhat.com/browse/OCPBUGS-24648): Stuck deployment [#439](https://github.com/openshift/ironic-image/pull/439) * [OCPBUGS-25606](https://issues.redhat.com/browse/OCPBUGS-25606): Relax packages requirements [#442](https://github.com/openshift/ironic-image/pull/442) * [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): include the secure boot retry [#435](https://github.com/openshift/ironic-image/pull/435) * NO-ISSUE: Update ironic packages version [#434](https://github.com/openshift/ironic-image/pull/434) * [OCPBUGS-23759](https://issues.redhat.com/browse/OCPBUGS-23759): Ironic side of external_http_url (METAL-163) is not wired in correctly [#432](https://github.com/openshift/ironic-image/pull/432) * [OCPBUGS-23939](https://issues.redhat.com/browse/OCPBUGS-23939): Firmware interface [#428](https://github.com/openshift/ironic-image/pull/428) * [OCPBUGS-23485](https://issues.redhat.com/browse/OCPBUGS-23485): Uplift eventlet version [#425](https://github.com/openshift/ironic-image/pull/425) * [OCPBUGS-22425](https://issues.redhat.com/browse/OCPBUGS-22425): Upgrade markupsafe and werkzeug dependencies [#420](https://github.com/openshift/ironic-image/pull/420) * [METAL-726](https://issues.redhat.com/browse/METAL-726): Update packages for OCP 4.15 and pin ironic versions [#412](https://github.com/openshift/ironic-image/pull/412) * [METAL-730](https://issues.redhat.com/browse/METAL-730): Sync202310 [#407](https://github.com/openshift/ironic-image/pull/407) * [OCPBUGS-21876](https://issues.redhat.com/browse/OCPBUGS-21876): Use bash process substitution instead of pipe [#408](https://github.com/openshift/ironic-image/pull/408) * Revert #395 "Sync20230829" [#405](https://github.com/openshift/ironic-image/pull/405) * Sync20230829 [#395](https://github.com/openshift/ironic-image/pull/395) * [OCPBUGS-9303](https://issues.redhat.com/browse/OCPBUGS-9303): update Ironic to include secure boot fixes [#403](https://github.com/openshift/ironic-image/pull/403) * [OCPBUGS-18963](https://issues.redhat.com/browse/OCPBUGS-18963): update ironic to include SQLite fixes [#401](https://github.com/openshift/ironic-image/pull/401) * [OCPBUGS-18859](https://issues.redhat.com/browse/OCPBUGS-18859): Updating ironic images to be consistent with ART [#397](https://github.com/openshift/ironic-image/pull/397) * [OCPBUGS-19019](https://issues.redhat.com/browse/OCPBUGS-19019): Switch from current-tripleo to puppet-passed-ci [#398](https://github.com/openshift/ironic-image/pull/398) * [Full changelog](https://github.com/openshift/ironic-image/compare/62ee6d02ad9c35861fec43a5d635ca3df7a98976...ecfc66474fcbc8fb0d2809b75c50e267d89953e1) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/4f8c828af122ab56ba97ba02467e3c306e8bfd1d) * [OCPBUGS-33133](https://issues.redhat.com/browse/OCPBUGS-33133): update ironic-lib with latest fixes [#131](https://github.com/openshift/ironic-agent-image/pull/131) * [OCPBUGS-32173](https://issues.redhat.com/browse/OCPBUGS-32173): [4.15] Fix name in setup.cfg [#123](https://github.com/openshift/ironic-agent-image/pull/123) * [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add makefile [#126](https://github.com/openshift/ironic-agent-image/pull/126) * [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Install ironic-python-agent from source [#125](https://github.com/openshift/ironic-agent-image/pull/125) * [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add requirements placeholders for cachito [#121](https://github.com/openshift/ironic-agent-image/pull/121) * [OCPBUGS-30078](https://issues.redhat.com/browse/OCPBUGS-30078): [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config [#115](https://github.com/openshift/ironic-agent-image/pull/115) * [OCPBUGS-28756](https://issues.redhat.com/browse/OCPBUGS-28756): Always add ignition to set hostname on /etc/hostname [#108](https://github.com/openshift/ironic-agent-image/pull/108) * [OCPBUGS-27781](https://issues.redhat.com/browse/OCPBUGS-27781): Update ironic-python-agent with latest bug fixes [#105](https://github.com/openshift/ironic-agent-image/pull/105) * [OCPBUGS-25351](https://issues.redhat.com/browse/OCPBUGS-25351): 502 proxy error [#99](https://github.com/openshift/ironic-agent-image/pull/99) * [OCPBUGS-25684](https://issues.redhat.com/browse/OCPBUGS-25684): Relax packages requirements [#102](https://github.com/openshift/ironic-agent-image/pull/102) * [OCPBUGS-23553](https://issues.redhat.com/browse/OCPBUGS-23553): Update packages with latest fixes [#95](https://github.com/openshift/ironic-agent-image/pull/95) * [OCPBUGS-23553](https://issues.redhat.com/browse/OCPBUGS-23553): Update packages with latest fixes [#94](https://github.com/openshift/ironic-agent-image/pull/94) * [OCPBUGS-18862](https://issues.redhat.com/browse/OCPBUGS-18862): Updating ironic-agent images to be consistent with ART [#88](https://github.com/openshift/ironic-agent-image/pull/88) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/7e82a52f0406df18362d4bdc7c5cc95a376be587...4f8c828af122ab56ba97ba02467e3c306e8bfd1d) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/bcbcd95b6209afc8248b34c55294686dbd3831a3) * [OCPBUGS-18863](https://issues.redhat.com/browse/OCPBUGS-18863): Updating ironic-rhcos-downloader images to be consistent with ART [#93](https://github.com/openshift/ironic-rhcos-downloader/pull/93) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/7b56c30661e39b212fc632e8e184c70b14dcf3a2...bcbcd95b6209afc8248b34c55294686dbd3831a3) ### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/472000211344be4a5e9581820e94895144cf2bfc) * [OCPBUGS-18864](https://issues.redhat.com/browse/OCPBUGS-18864): Updating ironic-static-ip-manager images to be consistent with ART [#40](https://github.com/openshift/ironic-static-ip-manager/pull/40) * [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/c038d5a43e7355099d8f9845a8b14052437b787e...472000211344be4a5e9581820e94895144cf2bfc) ### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/da16e56001ae274021794aef7926d77ccd96dab5) * [OCPBUGS-32214](https://issues.redhat.com/browse/OCPBUGS-32214), [OCPBUGS-32215](https://issues.redhat.com/browse/OCPBUGS-32215): upgrade deps [#102](https://github.com/openshift/k8s-prometheus-adapter/pull/102) * [OCPBUGS-24155](https://issues.redhat.com/browse/OCPBUGS-24155): Updating ose-prometheus-adapter-container image to be consistent with ART [#95](https://github.com/openshift/k8s-prometheus-adapter/pull/95) * [MON-3489](https://issues.redhat.com/browse/MON-3489): Bump openshift/k8s-prometheus-adapter to v0.11.2 [#94](https://github.com/openshift/k8s-prometheus-adapter/pull/94) * [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#88](https://github.com/openshift/k8s-prometheus-adapter/pull/88) * add `machine424` and `rexagod` to OWNERS [#73](https://github.com/openshift/k8s-prometheus-adapter/pull/73) * [OCPBUGS-21621](https://issues.redhat.com/browse/OCPBUGS-21621): upgrade golang.org/x/net to 0.17.0 to address CVE-2023… [#80](https://github.com/openshift/k8s-prometheus-adapter/pull/80) * [OCPBUGS-18971](https://issues.redhat.com/browse/OCPBUGS-18971): limit number of simultaneous client requests [#76](https://github.com/openshift/k8s-prometheus-adapter/pull/76) * [OCPBUGS-19251](https://issues.redhat.com/browse/OCPBUGS-19251): Updating ose-prometheus-adapter images to be consistent with ART [#74](https://github.com/openshift/k8s-prometheus-adapter/pull/74) * Bump openshift/k8s-prometheus-adapter to v0.11.0 [#72](https://github.com/openshift/k8s-prometheus-adapter/pull/72) * [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/801a912b3a60d7e840fb1ff38b5ca992f47327fd...da16e56001ae274021794aef7926d77ccd96dab5) ### [keepalived-ipfailover](https://github.com/openshift/images/tree/27f169500584b0909270d1775f5da295bc212e3e) * [OCPBUGS-30413](https://issues.redhat.com/browse/OCPBUGS-30413): update unit tests in egress/dns-proxy [#168](https://github.com/openshift/images/pull/168) * [OCPBUGS-19261](https://issues.redhat.com/browse/OCPBUGS-19261): Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#153](https://github.com/openshift/images/pull/153) * [OCPBUGS-19107](https://issues.redhat.com/browse/OCPBUGS-19107): Updating ose-egress-http-proxy images to be consistent with ART [#150](https://github.com/openshift/images/pull/150) * [OCPBUGS-19239](https://issues.redhat.com/browse/OCPBUGS-19239): Updating openshift-enterprise-egress-router images to be consistent with ART [#151](https://github.com/openshift/images/pull/151) * [OCPBUGS-18860](https://issues.redhat.com/browse/OCPBUGS-18860): Updating openshift-enterprise-base-rhel9 images to be consistent with ART [#149](https://github.com/openshift/images/pull/149) * [OCPBUGS-18853](https://issues.redhat.com/browse/OCPBUGS-18853): Updating openshift-enterprise-base images to be consistent with ART [#148](https://github.com/openshift/images/pull/148) * [Full changelog](https://github.com/openshift/images/compare/f08cee3389569256aa288c33bad701a2704ce9db...27f169500584b0909270d1775f5da295bc212e3e) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/71a6f28d69f77953d104219cee344a70f7cbede1) * [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617) * [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616) * [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613) * [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614) * [OCPBUGS-27459](https://issues.redhat.com/browse/OCPBUGS-27459): Metrics: Add metric for multicast enabled netnamespaces [#606](https://github.com/openshift/sdn/pull/606) * [OCPBUGS-24172](https://issues.redhat.com/browse/OCPBUGS-24172): Updating kube-proxy-container image to be consistent with ART [#592](https://github.com/openshift/sdn/pull/592) * [OCPBUGS-22077](https://issues.redhat.com/browse/OCPBUGS-22077): update x/net to v0.17.0 [#585](https://github.com/openshift/sdn/pull/585) * [OCPBUGS-16788](https://issues.redhat.com/browse/OCPBUGS-16788): Create IPAM files with 0600 permissions [#584](https://github.com/openshift/sdn/pull/584) * [SDN-4123](https://issues.redhat.com/browse/SDN-4123): rebase sdn to kube 1.28.3 [#580](https://github.com/openshift/sdn/pull/580) * [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): Controller: add flag for node name [#578](https://github.com/openshift/sdn/pull/578) * [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-proxy images to be consistent with ART [#575](https://github.com/openshift/sdn/pull/575) * [OCPBUGS-19103](https://issues.redhat.com/browse/OCPBUGS-19103): Updating ose-sdn images to be consistent with ART [#574](https://github.com/openshift/sdn/pull/574) * Collect pod operation latency metrics properly [#576](https://github.com/openshift/sdn/pull/576) * Live migration: Add flows that allow openshift-sdn to connect to ovnkube [#569](https://github.com/openshift/sdn/pull/569) * [Full changelog](https://github.com/openshift/sdn/compare/1a9befcb519d0b6c6a0907d514493f1d88aacf45...71a6f28d69f77953d104219cee344a70f7cbede1) ### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/e8e8c84bcc6d4419970726f3028df4b178c0b1c9) * [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): http2: trim connetions and buffers [#80](https://github.com/openshift/kube-rbac-proxy/pull/80) * [OCPBUGS-21672](https://issues.redhat.com/browse/OCPBUGS-21672): go.mod: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/kube-rbac-proxy/pull/73) * [OCPBUGS-19143](https://issues.redhat.com/browse/OCPBUGS-19143): Updating kube-rbac-proxy images to be consistent with ART [#72](https://github.com/openshift/kube-rbac-proxy/pull/72) * [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/1a646b98d8864e53accb726531d86f084ab13977...e8e8c84bcc6d4419970726f3028df4b178c0b1c9) ### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/037b59c265454c599dfb0829a856e14b1ab07896) * [OCPBUGS-24158](https://issues.redhat.com/browse/OCPBUGS-24158): Updating kube-state-metrics-container image to be consistent with ART [#105](https://github.com/openshift/kube-state-metrics/pull/105) * [MON-3548](https://issues.redhat.com/browse/MON-3548): Bump openshift/kube-state-metrics to v2.10.1 [#107](https://github.com/openshift/kube-state-metrics/pull/107) * [MON-3548](https://issues.redhat.com/browse/MON-3548): Merge tag v2.10.1 [#106](https://github.com/openshift/kube-state-metrics/pull/106) * [OCPBUGS-21760](https://issues.redhat.com/browse/OCPBUGS-21760): bump x/net to v0.17.0 [#100](https://github.com/openshift/kube-state-metrics/pull/100) * add `machine424` and `rexagod` to OWNERS [#96](https://github.com/openshift/kube-state-metrics/pull/96) * [OCPBUGS-19256](https://issues.redhat.com/browse/OCPBUGS-19256): Updating kube-state-metrics images to be consistent with ART [#97](https://github.com/openshift/kube-state-metrics/pull/97) * [Full changelog](https://github.com/openshift/kube-state-metrics/compare/db0c54994a6aad9155a94513eaa3480c1812f45e...037b59c265454c599dfb0829a856e14b1ab07896) ### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/e8749689edb8e7fea42eca5f2b67c3187192cdeb) * [OCPBUGS-24142](https://issues.redhat.com/browse/OCPBUGS-24142): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#201](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/201) * [OCPBUGS-19227](https://issues.redhat.com/browse/OCPBUGS-19227): Updating ose-kube-storage-version-migrator images to be consistent with ART [#199](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/199) * [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/8558e14a116804168506d06e96eac5a79913a6eb...e8749689edb8e7fea42eca5f2b67c3187192cdeb) ### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/dbaf9ea1edd5a953606a80cb45f723c934a73ded) * [OCPBUGS-31801](https://issues.redhat.com/browse/OCPBUGS-31801): Bump opentelemetry [#39](https://github.com/openshift/cloud-provider-kubevirt/pull/39) * [OCPBUGS-24118](https://issues.redhat.com/browse/OCPBUGS-24118): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#28](https://github.com/openshift/cloud-provider-kubevirt/pull/28) * [OCPBUGS-22061](https://issues.redhat.com/browse/OCPBUGS-22061): Bump golang.org/x/net to v0.18.0 [#34](https://github.com/openshift/cloud-provider-kubevirt/pull/34) * [OCPBUGS-19193](https://issues.redhat.com/browse/OCPBUGS-19193): Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-kubevirt/pull/25) * Auto sync upstream 2023 09 15 20 36 [#24](https://github.com/openshift/cloud-provider-kubevirt/pull/24) * [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/7d96f56d4bbc8449fdddbdbc630d9337097f0030...dbaf9ea1edd5a953606a80cb45f723c934a73ded) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3) * [OCPBUGS-29793](https://issues.redhat.com/browse/OCPBUGS-29793): [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#33](https://github.com/openshift/kubevirt-csi-driver/pull/33) * [OCPBUGS-19115](https://issues.redhat.com/browse/OCPBUGS-19115): Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#23](https://github.com/openshift/kubevirt-csi-driver/pull/23) * Ensure volume is removed before returning success (#90) [#22](https://github.com/openshift/kubevirt-csi-driver/pull/22) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/48fafc4a9edc202c5ff674b5f631568b4d62f7f5...d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a) * [OCPBUGS-26045](https://issues.redhat.com/browse/OCPBUGS-26045): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#272](https://github.com/openshift/cluster-api-provider-libvirt/pull/272) * [OCPBUGS-25772](https://issues.redhat.com/browse/OCPBUGS-25772): Add Snyk file to exclude vendor directory on scan [#278](https://github.com/openshift/cluster-api-provider-libvirt/pull/278) * Add workaround for SLOF regression [#263](https://github.com/openshift/cluster-api-provider-libvirt/pull/263) * client/domain: Remove spice as domain grahics [#260](https://github.com/openshift/cluster-api-provider-libvirt/pull/260) * [OCPBUGS-19187](https://issues.redhat.com/browse/OCPBUGS-19187): Updating ose-libvirt-machine-controllers images to be consistent with ART [#262](https://github.com/openshift/cluster-api-provider-libvirt/pull/262) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/34dfccba84a23b871d4f29dcec55929c11696e91...1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/3ab953de1bdc5c1977222011ebc31254d06c98d2) * [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#1288](https://github.com/openshift/machine-api-operator/pull/1288) * [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding web-hook validation for capacityReservationGroupID [#1261](https://github.com/openshift/machine-api-operator/pull/1261) * [OCPBUGS-31949](https://issues.redhat.com/browse/OCPBUGS-31949): Update x/net to v0.24.0 [#1231](https://github.com/openshift/machine-api-operator/pull/1231) * [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1222](https://github.com/openshift/machine-api-operator/pull/1222) * [OCPBUGS-28762](https://issues.redhat.com/browse/OCPBUGS-28762): Add additional vnet join permission for Azure [#1216](https://github.com/openshift/machine-api-operator/pull/1216) * [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Set --max-concurrent-reconciles=10 for Azure machine controller [#1210](https://github.com/openshift/machine-api-operator/pull/1210) * [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Add AddWithActuatorOpts to allow overriding Machine controller options [#1209](https://github.com/openshift/machine-api-operator/pull/1209) * [OCPBUGS-27405](https://issues.redhat.com/browse/OCPBUGS-27405): Add useExternalIp gcp permission [#1207](https://github.com/openshift/machine-api-operator/pull/1207) * [OCPBUGS-26406](https://issues.redhat.com/browse/OCPBUGS-26406), [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1196](https://github.com/openshift/machine-api-operator/pull/1196) * [OCPBUGS-25734](https://issues.redhat.com/browse/OCPBUGS-25734): Add Snyk file to exclude vendor directory on scan [#1193](https://github.com/openshift/machine-api-operator/pull/1193) * [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Update reference URL [#1184](https://github.com/openshift/machine-api-operator/pull/1184) * [OCPVE-778](https://issues.redhat.com/browse/OCPVE-778): annotate cloud credentials request [#1174](https://github.com/openshift/machine-api-operator/pull/1174) * [OCPBUGS-24151](https://issues.redhat.com/browse/OCPBUGS-24151): Updating ose-machine-api-operator-container image to be consistent with ART [#1179](https://github.com/openshift/machine-api-operator/pull/1179) * NO-JIRA: Update OWNERS [#1183](https://github.com/openshift/machine-api-operator/pull/1183) * [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Update for Nutanix failure domains api changes [#1171](https://github.com/openshift/machine-api-operator/pull/1171) * [OCPCLOUD-2138](https://issues.redhat.com/browse/OCPCLOUD-2138): Add module to work with scale from zero annotations for MachineSet [#1169](https://github.com/openshift/machine-api-operator/pull/1169) * [OCPBUGS-18339](https://issues.redhat.com/browse/OCPBUGS-18339): Use docs URL instead of KCS article [#1172](https://github.com/openshift/machine-api-operator/pull/1172) * [OCPBUGS-21815](https://issues.redhat.com/browse/OCPBUGS-21815): Bump golang.org/x/net to v0.17.0 [#1170](https://github.com/openshift/machine-api-operator/pull/1170) * [OCPCLOUD-2194](https://issues.redhat.com/browse/OCPCLOUD-2194): Update k8s dependencies 1.28 [#1168](https://github.com/openshift/machine-api-operator/pull/1168) * [MGMT-13425](https://issues.redhat.com/browse/MGMT-13425): Don't fail when workers not needed [#1165](https://github.com/openshift/machine-api-operator/pull/1165) * [SPLAT-1172](https://issues.redhat.com/browse/SPLAT-1172): Enhance machine status relating to IPAddressClaimed [#1166](https://github.com/openshift/machine-api-operator/pull/1166) * [OCPBUGS-19241](https://issues.redhat.com/browse/OCPBUGS-19241): Updating ose-machine-api-operator images to be consistent with ART [#1167](https://github.com/openshift/machine-api-operator/pull/1167) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/73f2a1f3f772b86bff3755bb444cfa7e182775f9...3ab953de1bdc5c1977222011ebc31254d06c98d2) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bb5ac68843493c4adbfd52b2d008e78654f26912) * [OCPBUGS-37551](https://issues.redhat.com/browse/OCPBUGS-37551): On-Prem resolv prepender to watch for NM changes [#4499](https://github.com/openshift/machine-config-operator/pull/4499) * [OCPBUGS-38712](https://issues.redhat.com/browse/OCPBUGS-38712): SCC-pinning for openshift workloads [#4540](https://github.com/openshift/machine-config-operator/pull/4540) * [OCPBUGS-38370](https://issues.redhat.com/browse/OCPBUGS-38370): Revert "MCD-pull: run after network-online.target in Azure" [#4525](https://github.com/openshift/machine-config-operator/pull/4525) * [OCPBUGS-37768](https://issues.redhat.com/browse/OCPBUGS-37768): Move StartLimitIntervalSec to Unit section [#4506](https://github.com/openshift/machine-config-operator/pull/4506) * [OCPBUGS-37629](https://issues.redhat.com/browse/OCPBUGS-37629): Openshift uncordoned compute-node that was intentionally cordoned [#4495](https://github.com/openshift/machine-config-operator/pull/4495) * [OCPBUGS-36863](https://issues.redhat.com/browse/OCPBUGS-36863): Copy RHEL9 binaries used in HCP [#4476](https://github.com/openshift/machine-config-operator/pull/4476) * [OCPBUGS-35220](https://issues.redhat.com/browse/OCPBUGS-35220): Check both ready and health ingress endpoints [#4398](https://github.com/openshift/machine-config-operator/pull/4398) * [OCPBUGS-30139](https://issues.redhat.com/browse/OCPBUGS-30139): [release-4.15] Use NM's dns-change event for resolv.conf [#4220](https://github.com/openshift/machine-config-operator/pull/4220) * [OCPBUGS-36769](https://issues.redhat.com/browse/OCPBUGS-36769): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4461](https://github.com/openshift/machine-config-operator/pull/4461) * [OCPBUGS-36550](https://issues.redhat.com/browse/OCPBUGS-36550): MCD-pull: run after network-online.target in Azure [#4454](https://github.com/openshift/machine-config-operator/pull/4454) * [OCPBUGS-27436](https://issues.redhat.com/browse/OCPBUGS-27436): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4431](https://github.com/openshift/machine-config-operator/pull/4431) * [OCPBUGS-36258](https://issues.redhat.com/browse/OCPBUGS-36258): daemon/update: disable systemd unit before overwriting [#4441](https://github.com/openshift/machine-config-operator/pull/4441) * [OCPBUGS-32092](https://issues.redhat.com/browse/OCPBUGS-32092): Decrease logs of haproxy [#4313](https://github.com/openshift/machine-config-operator/pull/4313) * [OCPBUGS-35010](https://issues.redhat.com/browse/OCPBUGS-35010): set required-scc for openshift workloads [#4393](https://github.com/openshift/machine-config-operator/pull/4393) * [OCPBUGS-31461](https://issues.redhat.com/browse/OCPBUGS-31461): Remove weights from ingress check script [#4290](https://github.com/openshift/machine-config-operator/pull/4290) * [OCPBUGS-33847](https://issues.redhat.com/browse/OCPBUGS-33847): If multiple hostnames are returned, use the first one for the Node name [#4373](https://github.com/openshift/machine-config-operator/pull/4373) * [OCPBUGS-20152](https://issues.redhat.com/browse/OCPBUGS-20152): Don't error if the certs.d dir doesn't exist yet [#4358](https://github.com/openshift/machine-config-operator/pull/4358) * [OCPBUGS-32922](https://issues.redhat.com/browse/OCPBUGS-32922): [release-4.15] add cluster fleet evaluation support to mco [#4334](https://github.com/openshift/machine-config-operator/pull/4334) * [OCPBUGS-28926](https://issues.redhat.com/browse/OCPBUGS-28926): [4.15] crio: update pids limit to be -1 [#4163](https://github.com/openshift/machine-config-operator/pull/4163) * [OCPBUGS-28545](https://issues.redhat.com/browse/OCPBUGS-28545): Delete state files on reboot only [#4311](https://github.com/openshift/machine-config-operator/pull/4311) * [OCPBUGS-31820](https://issues.redhat.com/browse/OCPBUGS-31820): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4309](https://github.com/openshift/machine-config-operator/pull/4309) * [OCPBUGS-27029](https://issues.redhat.com/browse/OCPBUGS-27029): Log network service output to console [#4113](https://github.com/openshift/machine-config-operator/pull/4113) * [OCPBUGS-31646](https://issues.redhat.com/browse/OCPBUGS-31646): fix: resources were in the wrong indentation level [#4301](https://github.com/openshift/machine-config-operator/pull/4301) * : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet's prestart [#4297](https://github.com/openshift/machine-config-operator/pull/4297) * [OCPBUGS-30884](https://issues.redhat.com/browse/OCPBUGS-30884): Prevent OVS-configuration to run before kdump [#4259](https://github.com/openshift/machine-config-operator/pull/4259) * [OCPBUGS-31383](https://issues.redhat.com/browse/OCPBUGS-31383): make verify should use MCO's kube version [#4282](https://github.com/openshift/machine-config-operator/pull/4282) * [OCPBUGS-30971](https://issues.redhat.com/browse/OCPBUGS-30971): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4264](https://github.com/openshift/machine-config-operator/pull/4264) * [OCPBUGS-29731](https://issues.redhat.com/browse/OCPBUGS-29731): Delete image openshift/openshift-proxy-pull-test [#4199](https://github.com/openshift/machine-config-operator/pull/4199) * [OCPBUGS-30093](https://issues.redhat.com/browse/OCPBUGS-30093): Mount /run/nodeip-configuration into coredns containers [#4229](https://github.com/openshift/machine-config-operator/pull/4229) * [OCPBUGS-30761](https://issues.redhat.com/browse/OCPBUGS-30761): add static pods for rbacproxy [#4252](https://github.com/openshift/machine-config-operator/pull/4252) * [OCPBUGS-30017](https://issues.redhat.com/browse/OCPBUGS-30017): CRI-O: Add missing Devices annotation to CRI-O configuration [#4227](https://github.com/openshift/machine-config-operator/pull/4227) * [OCPBUGS-29339](https://issues.redhat.com/browse/OCPBUGS-29339): annotate on-prem static pods for workload partitioning [#4179](https://github.com/openshift/machine-config-operator/pull/4179) * [OCPBUGS-29797](https://issues.redhat.com/browse/OCPBUGS-29797): set nodeStatusReportFrequency [#4211](https://github.com/openshift/machine-config-operator/pull/4211) * [OCPBUGS-29166](https://issues.redhat.com/browse/OCPBUGS-29166): ovs-configure: fix `vlan_parent` calculation [#4171](https://github.com/openshift/machine-config-operator/pull/4171) * [OCPBUGS-29651](https://issues.redhat.com/browse/OCPBUGS-29651): nmstate, configure nmstate to keep service yamls [#4192](https://github.com/openshift/machine-config-operator/pull/4192) * [OCPBUGS-29038](https://issues.redhat.com/browse/OCPBUGS-29038): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4166](https://github.com/openshift/machine-config-operator/pull/4166) * [OCPSTRAT-1062](https://issues.redhat.com/browse/OCPSTRAT-1062): [4.15] crio: enable log linking by default in 4.15 [#4174](https://github.com/openshift/machine-config-operator/pull/4174) * [OCPBUGS-29105](https://issues.redhat.com/browse/OCPBUGS-29105): On-prem coredns manifests should not be generated for GCP [#4169](https://github.com/openshift/machine-config-operator/pull/4169) * [OCPBUGS-28909](https://issues.redhat.com/browse/OCPBUGS-28909), [OCPBUGS-28910](https://issues.redhat.com/browse/OCPBUGS-28910): Run resolv-prepender entirely async [#4161](https://github.com/openshift/machine-config-operator/pull/4161) * [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4155](https://github.com/openshift/machine-config-operator/pull/4155) * [OCPBUGS-28237](https://issues.redhat.com/browse/OCPBUGS-28237): daemon: allow the user to override drains on IR changes [#4148](https://github.com/openshift/machine-config-operator/pull/4148) * [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Add Image Credential Provider flags for Kubelet on AWS [#4134](https://github.com/openshift/machine-config-operator/pull/4134) * [OCPBUGS-27307](https://issues.redhat.com/browse/OCPBUGS-27307): Fix typo in AWS node env unit [#4130](https://github.com/openshift/machine-config-operator/pull/4130) * [OCPBUGS-25424](https://issues.redhat.com/browse/OCPBUGS-25424): Add \n in cert_writer for old cert methods and skip cloudCA validation [#4077](https://github.com/openshift/machine-config-operator/pull/4077) * [OCPBUGS-26240](https://issues.redhat.com/browse/OCPBUGS-26240): Azure Run ovs-configuration.service before dnsmasq.service [#4101](https://github.com/openshift/machine-config-operator/pull/4101) * [OCPBUGS-25948](https://issues.redhat.com/browse/OCPBUGS-25948): kubelet: fix kubelet labels [#4090](https://github.com/openshift/machine-config-operator/pull/4090) * [OCPBUGS-25228](https://issues.redhat.com/browse/OCPBUGS-25228): crio: drop automatic image cleanup on upgrades [#4072](https://github.com/openshift/machine-config-operator/pull/4072) * [OCPBUGS-17877](https://issues.redhat.com/browse/OCPBUGS-17877): daemon: Add support for new nmstate logic [#4020](https://github.com/openshift/machine-config-operator/pull/4020) * [OCPBUGS-21597](https://issues.redhat.com/browse/OCPBUGS-21597): Alleviate confusion over mco_state [#4000](https://github.com/openshift/machine-config-operator/pull/4000) * [OCPBUGS-24012](https://issues.redhat.com/browse/OCPBUGS-24012): Add templates for gc_thresh sysctls [#4048](https://github.com/openshift/machine-config-operator/pull/4048) * [OCPBUGS-24035](https://issues.redhat.com/browse/OCPBUGS-24035): execute cert related processes to ensure proper rotation [#4050](https://github.com/openshift/machine-config-operator/pull/4050) * [MCO-681](https://issues.redhat.com/browse/MCO-681), [OCPBUGS-20427](https://issues.redhat.com/browse/OCPBUGS-20427): Add Key State Metrics, No datapoint found when querying up certain registered metrics [#4052](https://github.com/openshift/machine-config-operator/pull/4052) * [OCPBUGS-19352](https://issues.redhat.com/browse/OCPBUGS-19352): Fix bootstrap with NTO Operator and duplicate MachineConfigs [#3972](https://github.com/openshift/machine-config-operator/pull/3972) * [COS-2526](https://issues.redhat.com/browse/COS-2526): CoreOS: Remove `imgid` field in coreos aleph [#4034](https://github.com/openshift/machine-config-operator/pull/4034) * [TRT-1377](https://issues.redhat.com/browse/TRT-1377): Revert #4028 "OCPBUGS-22324: Wait for br-ex up event before node-valid-hostname" [#4053](https://github.com/openshift/machine-config-operator/pull/4053) * [TRT-1375](https://issues.redhat.com/browse/TRT-1375): Revert #3965 "MCO-681, OCPBUGS-20427: Add Key State Metrics, No datapoint found when querying up certain registered metrics" [#4051](https://github.com/openshift/machine-config-operator/pull/4051) * [MCO-664](https://issues.redhat.com/browse/MCO-664): adds on-cluster build dev preview docs [#3885](https://github.com/openshift/machine-config-operator/pull/3885) * [OCPBUGS-24177](https://issues.redhat.com/browse/OCPBUGS-24177): fix race for MCN creation [#4049](https://github.com/openshift/machine-config-operator/pull/4049) * [OCPBUGS-15934](https://issues.redhat.com/browse/OCPBUGS-15934): unit test ctrrcfg uses *resource.Quantity to use *resource.Quantity [#4044](https://github.com/openshift/machine-config-operator/pull/4044) * [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Wait for br-ex up event before node-valid-hostname [#4028](https://github.com/openshift/machine-config-operator/pull/4028) * [MCO-681](https://issues.redhat.com/browse/MCO-681), [OCPBUGS-20427](https://issues.redhat.com/browse/OCPBUGS-20427): Add Key State Metrics, No datapoint found when querying up certain registered metrics [#3965](https://github.com/openshift/machine-config-operator/pull/3965) * [OCPBUGS-24019](https://issues.redhat.com/browse/OCPBUGS-24019): Add ownership annotations to TLS artifacts [#4045](https://github.com/openshift/machine-config-operator/pull/4045) * [MCO-795](https://issues.redhat.com/browse/MCO-795): MCO-813: MCO-473: Implement Upgrade-Monitor, FeatureGate, and MachineConfigNode types [#4012](https://github.com/openshift/machine-config-operator/pull/4012) * [OCPBUGS-23255](https://issues.redhat.com/browse/OCPBUGS-23255): Add FIPS information to oldconfig when checking if reboot is needed [#4033](https://github.com/openshift/machine-config-operator/pull/4033) * [OCPBUGS-23484](https://issues.redhat.com/browse/OCPBUGS-23484): kubevirt, Activate nodeip-configuration.service [#4039](https://github.com/openshift/machine-config-operator/pull/4039) * [OCPBUGS-23432](https://issues.redhat.com/browse/OCPBUGS-23432): Use shorter IP label for keepalived VIP [#4040](https://github.com/openshift/machine-config-operator/pull/4040) * [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Fix syntax in vsphere-hostname.yaml for CAPI machines [#4037](https://github.com/openshift/machine-config-operator/pull/4037) * [OCPBUGS-23209](https://issues.redhat.com/browse/OCPBUGS-23209): workaround nmstate bug by configuring ipv{4,6} addresses [#4026](https://github.com/openshift/machine-config-operator/pull/4026) * [OCPBUGS-22200](https://issues.redhat.com/browse/OCPBUGS-22200): Retry fetching OpenStack hostname if it fails [#3990](https://github.com/openshift/machine-config-operator/pull/3990) * [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721): Don't retry node-ip show in resolv-prepender [#4017](https://github.com/openshift/machine-config-operator/pull/4017) * [MCO-772](https://issues.redhat.com/browse/MCO-772): controller: allow custom pool configs to take priority [#4015](https://github.com/openshift/machine-config-operator/pull/4015) * [OCPBUGS-18414](https://issues.redhat.com/browse/OCPBUGS-18414), [OCPBUGS-18456](https://issues.redhat.com/browse/OCPBUGS-18456), [OCPBUGS-18458](https://issues.redhat.com/browse/OCPBUGS-18458): Configures SSH Keys and Password for core, fixes config drift degradation [#3946](https://github.com/openshift/machine-config-operator/pull/3946) * Use the bridge interface name for ofport request [#3998](https://github.com/openshift/machine-config-operator/pull/3998) * [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): typo s/iface_default_hint_file/default_bridge_file/ [#4004](https://github.com/openshift/machine-config-operator/pull/4004) * [OCPBUGS-16871](https://issues.redhat.com/browse/OCPBUGS-16871): MCO - currentConfig missing on the filesystem [#3963](https://github.com/openshift/machine-config-operator/pull/3963) * [OCPBUGS-20369](https://issues.redhat.com/browse/OCPBUGS-20369): Require a hostname override for AWS [#3979](https://github.com/openshift/machine-config-operator/pull/3979) * [OCPBUGS-21814](https://issues.redhat.com/browse/OCPBUGS-21814): bump library-go and k8s dependencies to most recent version [#3988](https://github.com/openshift/machine-config-operator/pull/3988) * [OCPBUGS-19736](https://issues.redhat.com/browse/OCPBUGS-19736): configure-ovs: handle SIGINT and SIGTERM [#3982](https://github.com/openshift/machine-config-operator/pull/3982) * Add kernel-64k kernelType [#3903](https://github.com/openshift/machine-config-operator/pull/3903) * [MCO-593](https://issues.redhat.com/browse/MCO-593): Consume MCO API and CRDs from openshift/api [#3747](https://github.com/openshift/machine-config-operator/pull/3747) * Get the nmstate pinned package from kojihub when building on top of a CentOS base image [#3954](https://github.com/openshift/machine-config-operator/pull/3954) * CRI-O: Use `127.0.0.1` for stream server with random port [#3853](https://github.com/openshift/machine-config-operator/pull/3853) * [OCPBUGS-20499](https://issues.redhat.com/browse/OCPBUGS-20499): gcp-routes: don't exit on crictl failures [#3977](https://github.com/openshift/machine-config-operator/pull/3977) * [OCPBUGS-7638](https://issues.redhat.com/browse/OCPBUGS-7638): Allow specifying the interface for br-ex [#3696](https://github.com/openshift/machine-config-operator/pull/3696) * [OCPBUGS-20338](https://issues.redhat.com/browse/OCPBUGS-20338): dashboard should detect unknown and not ready for not ready dashboard [#3964](https://github.com/openshift/machine-config-operator/pull/3964) * [OCPBUGS-19722](https://issues.redhat.com/browse/OCPBUGS-19722): Informers are setup with incorrect namespace [#3955](https://github.com/openshift/machine-config-operator/pull/3955) * [OCPBUGS-15087](https://issues.redhat.com/browse/OCPBUGS-15087): templates: Introduce kubelet-dependencies.target [#3865](https://github.com/openshift/machine-config-operator/pull/3865) * [OCPBUGS-17841](https://issues.redhat.com/browse/OCPBUGS-17841): Ensure gcp-routes hack for internalLB hairpin traffic works for SGW [#3953](https://github.com/openshift/machine-config-operator/pull/3953) * [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Set guestinfo.hostname for CAPI VMs on vSphere [#3949](https://github.com/openshift/machine-config-operator/pull/3949) * [OCPBUGS-19708](https://issues.redhat.com/browse/OCPBUGS-19708): Support to append the duplicate kernel arguments to the rendered MC [#3947](https://github.com/openshift/machine-config-operator/pull/3947) * [OCPBUGS-18771](https://issues.redhat.com/browse/OCPBUGS-18771): Consider ingress VIPs when selecting node IP [#3943](https://github.com/openshift/machine-config-operator/pull/3943) * [MCO-424](https://issues.redhat.com/browse/MCO-424): Drop `machine-os-content` references [#3364](https://github.com/openshift/machine-config-operator/pull/3364) * [OCPBUGS-19992](https://issues.redhat.com/browse/OCPBUGS-19992): Add v6-primary dual stack support to VSphere UPI [#3670](https://github.com/openshift/machine-config-operator/pull/3670) * [OCPNODE-1799](https://issues.redhat.com/browse/OCPNODE-1799): support icsp and idms objects [#3898](https://github.com/openshift/machine-config-operator/pull/3898) * Improve kubelet error log [#3914](https://github.com/openshift/machine-config-operator/pull/3914) * [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): Use image exists in resolv-prepender instead of wc -l [#3910](https://github.com/openshift/machine-config-operator/pull/3910) * [MCO-707](https://issues.redhat.com/browse/MCO-707): Strip registry transport from os image URL for comparison [#3857](https://github.com/openshift/machine-config-operator/pull/3857) * [OCPBUGS-15583](https://issues.redhat.com/browse/OCPBUGS-15583): Revert "Revert "fix nodeStatusUpdateFrequency"" [#3890](https://github.com/openshift/machine-config-operator/pull/3890) * [OCPBUGS-17811](https://issues.redhat.com/browse/OCPBUGS-17811): add certificate input to bootstrap mcs [#3876](https://github.com/openshift/machine-config-operator/pull/3876) * [MCO-746](https://issues.redhat.com/browse/MCO-746): make buildcontroller tests less flaky [#3905](https://github.com/openshift/machine-config-operator/pull/3905) * [OCPBUGS-18902](https://issues.redhat.com/browse/OCPBUGS-18902): Internal Registry Secrets merge causing excessive API calls [#3912](https://github.com/openshift/machine-config-operator/pull/3912) * [MCO-664](https://issues.redhat.com/browse/MCO-664): adds e2e for on-cluster build dev preview [#3807](https://github.com/openshift/machine-config-operator/pull/3807) * Dockerfile: update local copy to OCP 4.15 image [#3922](https://github.com/openshift/machine-config-operator/pull/3922) * [OCPBUGS-19365](https://issues.redhat.com/browse/OCPBUGS-19365): Ignore invoking nbctl calls if its SDN [#3926](https://github.com/openshift/machine-config-operator/pull/3926) * [OCPBUGS-15910](https://issues.redhat.com/browse/OCPBUGS-15910): After dual-stack conversion reconcile IPFamilies [#3909](https://github.com/openshift/machine-config-operator/pull/3909) * [OCPBUGS-18800](https://issues.redhat.com/browse/OCPBUGS-18800): fix merged image registry CA behavior [#3851](https://github.com/openshift/machine-config-operator/pull/3851) * mod: Update rpmostree-client-go [#3916](https://github.com/openshift/machine-config-operator/pull/3916) * [OCPBUGS-13044](https://issues.redhat.com/browse/OCPBUGS-13044): daemon: always use `podman cp` to copy extensions container content [#3921](https://github.com/openshift/machine-config-operator/pull/3921) * [OCPBUGS-18906](https://issues.redhat.com/browse/OCPBUGS-18906): Remove dependency on k8s.io/kubernetes packages [#3913](https://github.com/openshift/machine-config-operator/pull/3913) * [OCPBUGS-19097](https://issues.redhat.com/browse/OCPBUGS-19097): Updating openshift-proxy-pull-test images to be consistent with ART [#3918](https://github.com/openshift/machine-config-operator/pull/3918) * [OCPBUGS-18772](https://issues.redhat.com/browse/OCPBUGS-18772): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again [#3907](https://github.com/openshift/machine-config-operator/pull/3907) * [OCPBUGS-19179](https://issues.redhat.com/browse/OCPBUGS-19179): Updating ose-machine-config-operator images to be consistent with ART [#3919](https://github.com/openshift/machine-config-operator/pull/3919) * [OCPBUGS-16905](https://issues.redhat.com/browse/OCPBUGS-16905): install: Recreate and delayed default ServiceAccount deletion [#3895](https://github.com/openshift/machine-config-operator/pull/3895) * [MCO-765](https://issues.redhat.com/browse/MCO-765): Examine/Remove memory limits on MCO pods [#3915](https://github.com/openshift/machine-config-operator/pull/3915) * [MCO-731](https://issues.redhat.com/browse/MCO-731): Move services machine-config-daemon-pull.service and machine-config-daemon-firstboot.service before ovs-configuration.service [#3858](https://github.com/openshift/machine-config-operator/pull/3858) * [MCO-708](https://issues.redhat.com/browse/MCO-708): Extract and merge kernel arguments from /proc/cmdline [#3856](https://github.com/openshift/machine-config-operator/pull/3856) * configure-ovs-network: Add tun device support [#3618](https://github.com/openshift/machine-config-operator/pull/3618) * [OCPBUGS-11437](https://issues.redhat.com/browse/OCPBUGS-11437): MCO keeps the pull secret to .orig file once it replaced [#3759](https://github.com/openshift/machine-config-operator/pull/3759) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/0eac83ac1e841b60677c1ae3f7f3ce07abff8d3a...bb5ac68843493c4adbfd52b2d008e78654f26912) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/97d87657caab4323f82f9d0958e6d30fc8fd1846) * [OCPBUGS-15599](https://issues.redhat.com/browse/OCPBUGS-15599): configurable ironic agent vlan creation [#109](https://github.com/openshift/image-customization-controller/pull/109) * [OCPBUGS-21789](https://issues.redhat.com/browse/OCPBUGS-21789): Uplift x/net to v0.17.0 [#103](https://github.com/openshift/image-customization-controller/pull/103) * [OCPBUGS-19186](https://issues.redhat.com/browse/OCPBUGS-19186): Updating ose-image-customization-controller images to be consistent with ART [#99](https://github.com/openshift/image-customization-controller/pull/99) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/2a6627bafcbb00437ab97308fe1d7df9039104ad...97d87657caab4323f82f9d0958e6d30fc8fd1846) ### [machine-os-images](https://github.com/openshift/machine-os-images/tree/9e9c920f985a375536e8d4caafd2d7ed579e27f3) * NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 [#33](https://github.com/openshift/machine-os-images/pull/33) * NO-ISSUE: Force updating 4.15 CI images [#32](https://github.com/openshift/machine-os-images/pull/32) * [OCPBUGS-19133](https://issues.redhat.com/browse/OCPBUGS-19133): Updating ose-machine-os-images images to be consistent with ART [#30](https://github.com/openshift/machine-os-images/pull/30) * [Full changelog](https://github.com/openshift/machine-os-images/compare/d3a4a6c3b46e26fa260de80465b45879311e23c4...9e9c920f985a375536e8d4caafd2d7ed579e27f3) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/53c186206d94508b2aec4c5af5e112b79d5f67d1) * [OU-417](https://issues.redhat.com/browse/OU-417): throw an error when a custom datasource is not found [#118](https://github.com/openshift/monitoring-plugin/pull/118) * [OU-415](https://issues.redhat.com/browse/OU-415): Add datasource parameter to handle metrics from custom datasources [#116](https://github.com/openshift/monitoring-plugin/pull/116) * [OCPBUGS-32097](https://issues.redhat.com/browse/OCPBUGS-32097): make createdBy mandatory and auto fill with the current user [#115](https://github.com/openshift/monitoring-plugin/pull/115) * [OCPBUGS-31310](https://issues.redhat.com/browse/OCPBUGS-31310): upgrade sanitize-html vulnerable dependency [#107](https://github.com/openshift/monitoring-plugin/pull/107) * [OCPBUGS-27202](https://issues.redhat.com/browse/OCPBUGS-27202): upgrade follow-redirects parent dependency [#94](https://github.com/openshift/monitoring-plugin/pull/94) * [OU-318](https://issues.redhat.com/browse/OU-318): consider all metric keys to display all results on dashboards tables [#97](https://github.com/openshift/monitoring-plugin/pull/97) * [OU-312](https://issues.redhat.com/browse/OU-312): Revert "fix default nginx path to look for static files" [#93](https://github.com/openshift/monitoring-plugin/pull/93) * [OCPBUGS-25643](https://issues.redhat.com/browse/OCPBUGS-25643): On the alert details page, don't require all alert labels in URL [#89](https://github.com/openshift/monitoring-plugin/pull/89) * [OCPBUGS-24658](https://issues.redhat.com/browse/OCPBUGS-24658): remove regex from console page route path so plugin pages are found [#85](https://github.com/openshift/monitoring-plugin/pull/85) * [OU-298](https://issues.redhat.com/browse/OU-298): fix default nginx path to look for static files [#83](https://github.com/openshift/monitoring-plugin/pull/83) * [OCPBUGS-22104](https://issues.redhat.com/browse/OCPBUGS-22104): disable query link for non metric-based alerts [#78](https://github.com/openshift/monitoring-plugin/pull/78) * [OU-285](https://issues.redhat.com/browse/OU-285): add test-id to panel charts to ease e2e tests when titles change [#80](https://github.com/openshift/monitoring-plugin/pull/80) * Upgrade Node.js from v16 to v18 in images [#79](https://github.com/openshift/monitoring-plugin/pull/79) * [OU-261](https://issues.redhat.com/browse/OU-261): Fix "Overwriting current silence" info alert to have padding [#74](https://github.com/openshift/monitoring-plugin/pull/74) * [OU-179](https://issues.redhat.com/browse/OU-179): Fix the root cause of externalLabels not present on alerts [#53](https://github.com/openshift/monitoring-plugin/pull/53) * Revert "Fix i18n namespace for navigation menu entries" [#77](https://github.com/openshift/monitoring-plugin/pull/77) * Fix i18n namespace for navigation menu entries [#73](https://github.com/openshift/monitoring-plugin/pull/73) * add ipv6 nginx configuration [#76](https://github.com/openshift/monitoring-plugin/pull/76) * [OCPBUGS-19233](https://issues.redhat.com/browse/OCPBUGS-19233): Updating monitoring-plugin images to be consistent with ART [#75](https://github.com/openshift/monitoring-plugin/pull/75) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/6fb208108720b9a35782f7d4f6738010ec97ba85...53c186206d94508b2aec4c5af5e112b79d5f67d1) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/9ea52de962dd644573c99b2f9554a6c4dfaacf62) * [OCPBUGS-37727](https://issues.redhat.com/browse/OCPBUGS-37727): Update owners [#88](https://github.com/openshift/multus-admission-controller/pull/88) * [OCPBUGS-24069](https://issues.redhat.com/browse/OCPBUGS-24069): Updating ose-multus-admission-controller-container image to be consistent with ART [#77](https://github.com/openshift/multus-admission-controller/pull/77) * [OCPBUGS-20531](https://issues.redhat.com/browse/OCPBUGS-20531): Update cipher for security hardenings [#76](https://github.com/openshift/multus-admission-controller/pull/76) * [OCPBUGS-21775](https://issues.redhat.com/browse/OCPBUGS-21775): Update master (with CVE fix) [#70](https://github.com/openshift/multus-admission-controller/pull/70) * [OCPBUGS-19094](https://issues.redhat.com/browse/OCPBUGS-19094): Updating ose-multus-admission-controller images to be consistent with ART [#69](https://github.com/openshift/multus-admission-controller/pull/69) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/5e74b0fa273076f4a73db00dd0081032f0325405...9ea52de962dd644573c99b2f9554a6c4dfaacf62) ### [multus-cni](https://github.com/openshift/multus-cni/tree/05497ad135c629de9b4ffb0a13fb91d58a335d25) * [OCPBUGS-35047](https://issues.redhat.com/browse/OCPBUGS-35047): Update owners file [#240](https://github.com/openshift/multus-cni/pull/240) * [OCPBUGS-35258](https://issues.redhat.com/browse/OCPBUGS-35258): Thick plugin should not wait for API readiness on CNI DEL [#242](https://github.com/openshift/multus-cni/pull/242) * [OCPBUGS-33477](https://issues.redhat.com/browse/OCPBUGS-33477): Fix CNI cache update function to prevent nil access [#234](https://github.com/openshift/multus-cni/pull/234) * [OCPBUGS-30237](https://issues.redhat.com/browse/OCPBUGS-30237): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#223](https://github.com/openshift/multus-cni/pull/223) * [OCPBUGS-28271](https://issues.redhat.com/browse/OCPBUGS-28271): Fix SAST scan issues for multus-cni-container [4.15] [#219](https://github.com/openshift/multus-cni/pull/219) * [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#210](https://github.com/openshift/multus-cni/pull/210) * [OCPBUGS-26535](https://issues.redhat.com/browse/OCPBUGS-26535): Revert #206 "Adds a wait on unix socket readiness [backport 4.15]" [#209](https://github.com/openshift/multus-cni/pull/209) * [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#206](https://github.com/openshift/multus-cni/pull/206) * [OCPBUGS-23475](https://issues.redhat.com/browse/OCPBUGS-23475): Fix to use lumberjack only for logging files [#201](https://github.com/openshift/multus-cni/pull/201) * [OCPBUGS-21915](https://issues.redhat.com/browse/OCPBUGS-21915): Upstream sync with go.mod update [#193](https://github.com/openshift/multus-cni/pull/193) * [OCPBUGS-19859](https://issues.redhat.com/browse/OCPBUGS-19859): Multus annotation permissions: Certificate duration should be configurable [#191](https://github.com/openshift/multus-cni/pull/191) * [OCPBUGS-18995](https://issues.redhat.com/browse/OCPBUGS-18995): Move chroot from multus main process to its child processes (#1161) [#186](https://github.com/openshift/multus-cni/pull/186) * [OCPBUGS-19364](https://issues.redhat.com/browse/OCPBUGS-19364): Updating multus-cni images to be consistent with ART [#183](https://github.com/openshift/multus-cni/pull/183) * Per node cert [#184](https://github.com/openshift/multus-cni/pull/184) * [OCPBUGS-18307](https://issues.redhat.com/browse/OCPBUGS-18307): Performance and efficiency improvements in daemon/server mode [#180](https://github.com/openshift/multus-cni/pull/180) * [Full changelog](https://github.com/openshift/multus-cni/compare/4ed99c3a8b0aff168f50d166e82bce2a371c2dbb...05497ad135c629de9b4ffb0a13fb91d58a335d25) ### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/b377b4b5fd3029cd5cabc773ca6223cabd6b2af7) * Revert art-bot PR#42 [#43](https://github.com/openshift/multus-networkpolicy/pull/43) * [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/cd6eae10a368d23b94530cdc2a2c2f2356d8cc02...b377b4b5fd3029cd5cabc773ca6223cabd6b2af7) ### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee) * [OCPBUGS-41804](https://issues.redhat.com/browse/OCPBUGS-41804): [release-4.15]Update owners [#59](https://github.com/openshift/route-override-cni/pull/59) * [OCPBUGS-18848](https://issues.redhat.com/browse/OCPBUGS-18848): Updating ose-multus-route-override-cni images to be consistent with ART [#48](https://github.com/openshift/route-override-cni/pull/48) * [Full changelog](https://github.com/openshift/route-override-cni/compare/078aee5c466ffc79126a34b85953534c6674f28c...1ccafc340ca1147abb42c7ad8dda1f23ba4eb1ee) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/d80fe46e1895698f3d1073ab965c859a89be2a47) * [OCPBUGS-37729](https://issues.redhat.com/browse/OCPBUGS-37729): Update owners [#305](https://github.com/openshift/whereabouts-cni/pull/305) * [OCPBUGS-37813](https://issues.redhat.com/browse/OCPBUGS-37813), [OCPBUGS-37816](https://issues.redhat.com/browse/OCPBUGS-37816): [release-4.15] align api calls timeout and skip pods marked for deletion [#308](https://github.com/openshift/whereabouts-cni/pull/308) * [OCPBUGS-36367](https://issues.redhat.com/browse/OCPBUGS-36367): [release-4.15] Return previous IP allocation for add cmd [#295](https://github.com/openshift/whereabouts-cni/pull/295) * [OCPBUGS-35081](https://issues.redhat.com/browse/OCPBUGS-35081): [release-4.15] Use IP to identify orphaned allocation to be deleted [#288](https://github.com/openshift/whereabouts-cni/pull/288) * [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): Enable whereabouts-reconciler configuration 4.15 [#239](https://github.com/openshift/whereabouts-cni/pull/239) * [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Assignment error fix [#228](https://github.com/openshift/whereabouts-cni/pull/228) * [OCPBUGS-22075](https://issues.redhat.com/browse/OCPBUGS-22075): update golang.org/x/net to v0.17.0 [#206](https://github.com/openshift/whereabouts-cni/pull/206) * [OCPBUGS-18893](https://issues.redhat.com/browse/OCPBUGS-18893): Rechecking pending Pods (conflict resolved) [#196](https://github.com/openshift/whereabouts-cni/pull/196) * [OCPBUGS-18847](https://issues.redhat.com/browse/OCPBUGS-18847): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#192](https://github.com/openshift/whereabouts-cni/pull/192) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/13aebf7480b626f199cb5dbce3f37405dfd486e1...d80fe46e1895698f3d1073ab965c859a89be2a47) ### [must-gather](https://github.com/openshift/must-gather/tree/47335065cc7137ec098567b06d21f742669b4200) * [OSASINFRA-3290](https://issues.redhat.com/browse/OSASINFRA-3290): Remove Kuryr info gathering [#393](https://github.com/openshift/must-gather/pull/393) * machineconfig: always gather MCS-served config [#380](https://github.com/openshift/must-gather/pull/380) * [OCPBUGS-20391](https://issues.redhat.com/browse/OCPBUGS-20391): Revert "Add must gather script for network observability" [#390](https://github.com/openshift/must-gather/pull/390) * gather_sriov: Fix typos and collect SRIOV cache at /var/lib/cni/sriov [#369](https://github.com/openshift/must-gather/pull/369) * sriov: Clean up `ip netns` output [#387](https://github.com/openshift/must-gather/pull/387) * [OCPBUGS-19280](https://issues.redhat.com/browse/OCPBUGS-19280): Updating ose-must-gather images to be consistent with ART [#381](https://github.com/openshift/must-gather/pull/381) * ppc: explicitly add RuntimeClass to gathered resources [#386](https://github.com/openshift/must-gather/pull/386) * [OCPBUGS-19761](https://issues.redhat.com/browse/OCPBUGS-19761): Removed workload partitioning annotation from ppc script [#385](https://github.com/openshift/must-gather/pull/385) * [Full changelog](https://github.com/openshift/must-gather/compare/833e1de991e2319439fb48550c86d2d44d412501...47335065cc7137ec098567b06d21f742669b4200) ### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/f91decaa10cfa233c9e680c96ec7ae642e30a03c) * [OCPBUGS-19192](https://issues.redhat.com/browse/OCPBUGS-19192): Updating ose-network-interface-bond-cni images to be consistent with ART [#59](https://github.com/openshift/bond-cni/pull/59) * [Full changelog](https://github.com/openshift/bond-cni/compare/29f61f6b05d958c40e7213937064f26a63a8e6d9...f91decaa10cfa233c9e680c96ec7ae642e30a03c) ### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/9e21740225af47318a9ed6d03c2eb9ee2aaea883) * Correct 4.16 owners file (#99) [#99](https://github.com/openshift/network-metrics-daemon/pull/99) * Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) [#87](https://github.com/openshift/network-metrics-daemon/pull/87) * Added METRIC_TEST_IMAGE var (#86) [#86](https://github.com/openshift/network-metrics-daemon/pull/86) * Update the k8s dependencies to 1.28.3 (#81) [#81](https://github.com/openshift/network-metrics-daemon/pull/81) * Updating ose-network-metrics-daemon images to be consistent with ART (#80) [#80](https://github.com/openshift/network-metrics-daemon/pull/80) * [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/69d0021a4b60db315f47d83bde1c455362a03808...9e21740225af47318a9ed6d03c2eb9ee2aaea883) ### [network-tools](https://github.com/openshift/network-tools/tree/17536c8dff76d50efb604187ba763020bd084771) * [OCPBUGS-31764](https://issues.redhat.com/browse/OCPBUGS-31764): replace wireshark with wireshark-cli [#118](https://github.com/openshift/network-tools/pull/118) * NO-JIRA: Adding bcc to the container [#104](https://github.com/openshift/network-tools/pull/104) * [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Update OVS flows counter to work for cookies with leading 0. [#103](https://github.com/openshift/network-tools/pull/103) * [OCPBUGS-24385](https://issues.redhat.com/browse/OCPBUGS-24385): Align status and assignee between jira and github [#100](https://github.com/openshift/network-tools/pull/100) * [OCPBUGS-24276](https://issues.redhat.com/browse/OCPBUGS-24276): Add "networking / network-tools" to list of components [#102](https://github.com/openshift/network-tools/pull/102) * [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Fix error when nbdb and sbdb leader are located on different nodes [#99](https://github.com/openshift/network-tools/pull/99) * [SDN-4189](https://issues.redhat.com/browse/SDN-4189): Add flow counter script for ACLs [#98](https://github.com/openshift/network-tools/pull/98) * [SDN-4182](https://issues.redhat.com/browse/SDN-4182): Script cleanup + track ovnk upstream issues in jira [#97](https://github.com/openshift/network-tools/pull/97) * [OCPBUGS-22166](https://issues.redhat.com/browse/OCPBUGS-22166): Move commands to the function to avoid them being executed on -h. [#93](https://github.com/openshift/network-tools/pull/93) * Update docs to use image-streams instead of quay image [#91](https://github.com/openshift/network-tools/pull/91) * jira-scripts: Add Zenghui, remove Vic [#90](https://github.com/openshift/network-tools/pull/90) * Add Flavio as approver [#89](https://github.com/openshift/network-tools/pull/89) * [SDN-3904](https://issues.redhat.com/browse/SDN-3904): Update scripts in network-tools to reflect the changes in IC model [#86](https://github.com/openshift/network-tools/pull/86) * [SDN-4047](https://issues.redhat.com/browse/SDN-4047): Migrate bug-dispath query scripts [#88](https://github.com/openshift/network-tools/pull/88) * [OCPBUGS-19292](https://issues.redhat.com/browse/OCPBUGS-19292): Updating ose-network-tools images to be consistent with ART [#87](https://github.com/openshift/network-tools/pull/87) * [Full changelog](https://github.com/openshift/network-tools/compare/e79d8173c5628065da85425bc7e4cb1d94f3c919...17536c8dff76d50efb604187ba763020bd084771) ### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/33fb22c182fa86d5de5bdc5c1b08a39b1278be3d) * [OCPBUGS-23652](https://issues.redhat.com/browse/OCPBUGS-23652): Add Snyk file to exclude vendor directory on scan [#27](https://github.com/openshift/cloud-provider-nutanix/pull/27) * [OCPBUGS-24101](https://issues.redhat.com/browse/OCPBUGS-24101): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART [#23](https://github.com/openshift/cloud-provider-nutanix/pull/23) * NO-JIRA: Add .ci-operator.yaml file [#24](https://github.com/openshift/cloud-provider-nutanix/pull/24) * Update OWNERS [#22](https://github.com/openshift/cloud-provider-nutanix/pull/22) * [OCPCLOUD-2182](https://issues.redhat.com/browse/OCPCLOUD-2182): Update to match K8s v1.28 dependencies [#20](https://github.com/openshift/cloud-provider-nutanix/pull/20) * [OCPBUGS-19165](https://issues.redhat.com/browse/OCPBUGS-19165): Updating ose-nutanix-cloud-controller-manager images to be consistent with ART [#19](https://github.com/openshift/cloud-provider-nutanix/pull/19) * [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/bc568865fe7d5cd598c89e7f189de9e07150f29a...33fb22c182fa86d5de5bdc5c1b08a39b1278be3d) ### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/8de6f944d35b2fefaf926006aecf8445be4e6149) * [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads [#81](https://github.com/openshift/machine-api-provider-nutanix/pull/81) * [OCPBUGS-29548](https://issues.redhat.com/browse/OCPBUGS-29548): IPI install fails on Nutanix when using DHCP [#69](https://github.com/openshift/machine-api-provider-nutanix/pull/69) * Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#57](https://github.com/openshift/machine-api-provider-nutanix/pull/57) * [SPLAT-1272](https://issues.redhat.com/browse/SPLAT-1272): Add support for Nutanix failure domains. [#56](https://github.com/openshift/machine-api-provider-nutanix/pull/56) * Update OWNERS [#55](https://github.com/openshift/machine-api-provider-nutanix/pull/55) * [OCPCLOUD-2189](https://issues.redhat.com/browse/OCPCLOUD-2189): Update to match K8s v1.28 dependencies [#54](https://github.com/openshift/machine-api-provider-nutanix/pull/54) * [OCPBUGS-19208](https://issues.redhat.com/browse/OCPBUGS-19208): Updating ose-nutanix-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-nutanix/pull/51) * [OCPBUGS-5969](https://issues.redhat.com/browse/OCPBUGS-5969): machine stuck in Provisioning and machineset scale/delete not work [#52](https://github.com/openshift/machine-api-provider-nutanix/pull/52) * [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/6f50b1ac83fa493cdaa38fb0a05804882333172b...8de6f944d35b2fefaf926006aecf8445be4e6149) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb) * [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#114](https://github.com/openshift/oauth-apiserver/pull/114) * [OCPBUGS-31951](https://issues.redhat.com/browse/OCPBUGS-31951): bump x/net to 0.24.0 [#109](https://github.com/openshift/oauth-apiserver/pull/109) * [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99) * [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93) * [OCPBUGS-27101](https://issues.redhat.com/browse/OCPBUGS-27101): UPSTREAM: <carry>: retry etcd Unavailable errors [#96](https://github.com/openshift/oauth-apiserver/pull/96) * [OCPBUGS-19214](https://issues.redhat.com/browse/OCPBUGS-19214): Updating ose-oauth-apiserver images to be consistent with ART [#90](https://github.com/openshift/oauth-apiserver/pull/90) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/8f5c90c74205a45787960a3bec1f12929a391471...0e158441dbfdf232d7fea50b7c4eae3023d2cdbb) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e) * [OCPBUGS-24067](https://issues.redhat.com/browse/OCPBUGS-24067): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#269](https://github.com/openshift/oauth-proxy/pull/269) * [OCPBUGS-21718](https://issues.redhat.com/browse/OCPBUGS-21718): go.mod: bump golang.org/x/net to v0.17.0 [#266](https://github.com/openshift/oauth-proxy/pull/266) * [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/a4a2f270a57af830508e8cef52d4c8d4f4dfba76...241a88c47cb01d0e61ff105ceff81ad14fd9ea6e) ### [oauth-server](https://github.com/openshift/oauth-server/tree/c055dbb9a84e04575ade106e9a43cc638a8aeaef) * [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#148](https://github.com/openshift/oauth-server/pull/148) * [OCPBUGS-21671](https://issues.redhat.com/browse/OCPBUGS-21671): go.mod: bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/oauth-server/pull/137) * [Full changelog](https://github.com/openshift/oauth-server/compare/35f4739f342a5838fe6ceaf7a459c78f3777166d...c055dbb9a84e04575ade106e9a43cc638a8aeaef) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e91f573c771182f7fd4a2d3513ed49562dee6b38) * [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#866) [#866](https://github.com/openshift/oc-mirror/pull/866) * [OCPBUGS-33575](https://issues.redhat.com/browse/OCPBUGS-33575): Change default behavior to not rebuild catalogs for V1 (#849) [#849](https://github.com/openshift/oc-mirror/pull/849) * [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#846) [#846](https://github.com/openshift/oc-mirror/pull/846) * Bump version to include v5.11.0 of go-git (#819) [#819](https://github.com/openshift/oc-mirror/pull/819) * [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both oc-mirror binaries for rhel9 and rhel8 (#804) [#804](https://github.com/openshift/oc-mirror/pull/804) * Fix to ensure operator not found error exits with correct status (#794) [#794](https://github.com/openshift/oc-mirror/pull/794) * [OCPBUGS-27946](https://issues.redhat.com/browse/OCPBUGS-27946): Capability to override default channel (#786) [#786](https://github.com/openshift/oc-mirror/pull/786) * [OCPBUGS-27252](https://issues.redhat.com/browse/OCPBUGS-27252): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#780) [#780](https://github.com/openshift/oc-mirror/pull/780) * [OCPBUGS-16801](https://issues.redhat.com/browse/OCPBUGS-16801): fix: fixes the bug on catalog when using field archiveSize: 1 (#774) [#774](https://github.com/openshift/oc-mirror/pull/774) * Updating oc-mirror-plugin-container image to be consistent with ART for 4.15 (#776) [#776](https://github.com/openshift/oc-mirror/pull/776) * [OCPBUGS-25346](https://issues.redhat.com/browse/OCPBUGS-25346): - oc-mirror on RHEL9 Host with FIPS enabled (#764) [#764](https://github.com/openshift/oc-mirror/pull/764) * [OCPBUGS-24359](https://issues.redhat.com/browse/OCPBUGS-24359): Fix including duplicate blobs in archive (#762) [#762](https://github.com/openshift/oc-mirror/pull/762) * Add generation of updateService.yaml (#759) [#759](https://github.com/openshift/oc-mirror/pull/759) * [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#757) [#757](https://github.com/openshift/oc-mirror/pull/757) * [OCPBUGS-23327](https://issues.redhat.com/browse/OCPBUGS-23327): Fix MirrorToDisk of oci catalogs in hidden folders (#756) [#756](https://github.com/openshift/oc-mirror/pull/756) * Fix default port for V2 'prepare' subcommand (#747) [#747](https://github.com/openshift/oc-mirror/pull/747) * Adding release payload signatures to graph-data container (#742) [#742](https://github.com/openshift/oc-mirror/pull/742) * [OCPBUGS-23339](https://issues.redhat.com/browse/OCPBUGS-23339): fix IDMS custom resource name (#743) [#743](https://github.com/openshift/oc-mirror/pull/743) * remove unnecessary print statement (#745) [#745](https://github.com/openshift/oc-mirror/pull/745) * [OCPBUGS-23309](https://issues.redhat.com/browse/OCPBUGS-23309): Do not panic if port chosen to run local cache is already bound (#744) [#744](https://github.com/openshift/oc-mirror/pull/744) * [CFE-994](https://issues.redhat.com/browse/CFE-994): cache location separate of working-dir (#741) [#741](https://github.com/openshift/oc-mirror/pull/741) * Integrate Unarchive process to DiskToMirror workflow (#740) [#740](https://github.com/openshift/oc-mirror/pull/740) * [CFE-977](https://issues.redhat.com/browse/CFE-977), [CFE-991](https://issues.redhat.com/browse/CFE-991): archive generation at the end of MirrorToDisk workflow (#739) [#739](https://github.com/openshift/oc-mirror/pull/739) * [CFE-981](https://issues.redhat.com/browse/CFE-981): Create UnArchiver interface and implementation (#738) [#738](https://github.com/openshift/oc-mirror/pull/738) * [CFE-977](https://issues.redhat.com/browse/CFE-977), [CFE-980](https://issues.redhat.com/browse/CFE-980): Introduce Archiver interface and its implementation MirrorArchiver (#734) [#734](https://github.com/openshift/oc-mirror/pull/734) * feat: history file reader and writer (#736) [#736](https://github.com/openshift/oc-mirror/pull/736) * skipping prune failure if manifest not found (#733) [#733](https://github.com/openshift/oc-mirror/pull/733) * Package ioutil is deprecated as of Go 1.16 (#731) [#731](https://github.com/openshift/oc-mirror/pull/731) * [CFE-977](https://issues.redhat.com/browse/CFE-977): Implementation of a blob gatherer for images in the local cache (#732) [#732](https://github.com/openshift/oc-mirror/pull/732) * refactorings (#728) [#728](https://github.com/openshift/oc-mirror/pull/728) * Fix --from being set to default value in mirrorToDisk workflow (#727) [#727](https://github.com/openshift/oc-mirror/pull/727) * [OCPBUGS-22947](https://issues.redhat.com/browse/OCPBUGS-22947): Should not generate graph with prepare subcommand (#725) [#725](https://github.com/openshift/oc-mirror/pull/725) * Cancel community office hours: none for the moment (#726) [#726](https://github.com/openshift/oc-mirror/pull/726) * [CFE-965](https://issues.redhat.com/browse/CFE-965): [V2] Enable signature verification (#709) [#709](https://github.com/openshift/oc-mirror/pull/709) * [CFE-971](https://issues.redhat.com/browse/CFE-971): Generate OSUS graph image - uses go-containerregistry implementation (#722) [#722](https://github.com/openshift/oc-mirror/pull/722) * Pr template change (#719) [#719](https://github.com/openshift/oc-mirror/pull/719) * [CFE-899](https://issues.redhat.com/browse/CFE-899), [CFE-958](https://issues.redhat.com/browse/CFE-958): feat: removes the registry dns (#718) [#718](https://github.com/openshift/oc-mirror/pull/718) * Remove Dockerfile.integration - not used - reduce confusion (#716) [#716](https://github.com/openshift/oc-mirror/pull/716) * [OCPBUGS-21864](https://issues.redhat.com/browse/OCPBUGS-21864): fix: CVE-2023-39325 and CVE-2023-44487 (#712) [#712](https://github.com/openshift/oc-mirror/pull/712) * Introduce subcommand `prepare` (#702) [#702](https://github.com/openshift/oc-mirror/pull/702) * Initial implementation of IDMS generation (#707) [#707](https://github.com/openshift/oc-mirror/pull/707) * Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) [#704](https://github.com/openshift/oc-mirror/pull/704) * [CFE-935](https://issues.redhat.com/browse/CFE-935): [V2] Implement a release collector relying on local registry as storage (#690) [#690](https://github.com/openshift/oc-mirror/pull/690) * Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#697) [#697](https://github.com/openshift/oc-mirror/pull/697) * [CFE-956](https://issues.redhat.com/browse/CFE-956): feat: adds tags on the related images (#695) [#695](https://github.com/openshift/oc-mirror/pull/695) * Updating oc-mirror-plugin images to be consistent with ART (#698) [#698](https://github.com/openshift/oc-mirror/pull/698) * Update list updates CLI documentation (#687) [#687](https://github.com/openshift/oc-mirror/pull/687) * [CFE-906](https://issues.redhat.com/browse/CFE-906): [V2]Enclave support - Separate log file for local storage (#686) [#686](https://github.com/openshift/oc-mirror/pull/686) * [CFE-955](https://issues.redhat.com/browse/CFE-955): changes owner file (#694) [#694](https://github.com/openshift/oc-mirror/pull/694) * [CFE-897](https://issues.redhat.com/browse/CFE-897), [CFE-907](https://issues.redhat.com/browse/CFE-907): feat: add code to call v2 from v1 (#692) [#692](https://github.com/openshift/oc-mirror/pull/692) * [Full changelog](https://github.com/openshift/oc-mirror/compare/a0733c17322f96d14f9158604fe74f1bfecc4a53...e91f573c771182f7fd4a2d3513ed49562dee6b38) ### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/035d3835e581bee8ba59ec8919b43c8d7ce4ecfd) * [OCPBUGS-29796](https://issues.redhat.com/browse/OCPBUGS-29796): UPSTREAM: 231: make garbage collection a runnable [#44](https://github.com/openshift/operator-framework-catalogd/pull/44) * [OCPBUGS-27586](https://issues.redhat.com/browse/OCPBUGS-27586), [OCPBUGS-27671](https://issues.redhat.com/browse/OCPBUGS-27671): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#39](https://github.com/openshift/operator-framework-catalogd/pull/39) * NO-ISSUE: Synchronize From Upstream Repositories [#33](https://github.com/openshift/operator-framework-catalogd/pull/33) * NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#35](https://github.com/openshift/operator-framework-catalogd/pull/35) * [OPRUN-3079](https://issues.redhat.com/browse/OPRUN-3079): UPSTREAM: <carry>: Drop commitchecker [#32](https://github.com/openshift/operator-framework-catalogd/pull/32) * Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-catalogd/pull/31) * [OCPBUGS-20517](https://issues.redhat.com/browse/OCPBUGS-20517): UPSTREAM: <drop>: Bump golang.org/x/net from 0.10.0 to 0.17.0 (#197) [#29](https://github.com/openshift/operator-framework-catalogd/pull/29) * [OCPBUGS-19117](https://issues.redhat.com/browse/OCPBUGS-19117): UPSTREAM: <carry>: Updating ose-olm-catalogd images to be consistent with ART [#28](https://github.com/openshift/operator-framework-catalogd/pull/28) * [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/a333cb0b558abf8d9f8da0eccd5618d767629050...035d3835e581bee8ba59ec8919b43c8d7ce4ecfd) ### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/303b954fa5a92e810aebbe55ab8fafe8dbc06c58) * [OCPBUGS-27591](https://issues.redhat.com/browse/OCPBUGS-27591), [OCPBUGS-27676](https://issues.redhat.com/browse/OCPBUGS-27676): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#68](https://github.com/openshift/operator-framework-operator-controller/pull/68) * NO-ISSUE: Synchronize From Upstream Repositories [#50](https://github.com/openshift/operator-framework-operator-controller/pull/50) * NO-ISSUE: Synchronize From Upstream Repositories [#49](https://github.com/openshift/operator-framework-operator-controller/pull/49) * NO-ISSUE: Synchronize From Upstream Repositories [#48](https://github.com/openshift/operator-framework-operator-controller/pull/48) * NO-ISSUE: Synchronize From Upstream Repositories [#47](https://github.com/openshift/operator-framework-operator-controller/pull/47) * NO-ISSUE: Synchronize From Upstream Repositories [#46](https://github.com/openshift/operator-framework-operator-controller/pull/46) * NO-ISSUE: Synchronize From Upstream Repositories [#41](https://github.com/openshift/operator-framework-operator-controller/pull/41) * NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#44](https://github.com/openshift/operator-framework-operator-controller/pull/44) * [OPRUN-3081](https://issues.redhat.com/browse/OPRUN-3081): UPSTREAM: <carry>: Drop commitchecker [#37](https://github.com/openshift/operator-framework-operator-controller/pull/37) * [OPRUN-3075](https://issues.redhat.com/browse/OPRUN-3075): Update to Upstream v0.7.0 [#31](https://github.com/openshift/operator-framework-operator-controller/pull/31) * [OCPBUGS-20505](https://issues.redhat.com/browse/OCPBUGS-20505): Bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/operator-framework-operator-controller/pull/28) * [OCPBUGS-19096](https://issues.redhat.com/browse/OCPBUGS-19096): UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART [#27](https://github.com/openshift/operator-framework-operator-controller/pull/27) * [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/fb6fb278d987faacb4da17b96a109da261fbb962...303b954fa5a92e810aebbe55ab8fafe8dbc06c58) ### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) * : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79) * [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72) * NO-ISSUE: Synchronize From Upstream Repositories [#66](https://github.com/openshift/operator-framework-rukpak/pull/66) * NO-ISSUE: UPSTREAM: <drop>: Remove GH activities [#57](https://github.com/openshift/operator-framework-rukpak/pull/57) * [OPRUN-3080](https://issues.redhat.com/browse/OPRUN-3080): UPSTREAM: <carry>: Drop commitchecker [#51](https://github.com/openshift/operator-framework-rukpak/pull/51) * [OPRUN-3078](https://issues.redhat.com/browse/OPRUN-3078): Update to Upstream v0.15.0 [#50](https://github.com/openshift/operator-framework-rukpak/pull/50) * Update to Upstream v0.14.0 [#44](https://github.com/openshift/operator-framework-rukpak/pull/44) * [OCPBUGS-20506](https://issues.redhat.com/browse/OCPBUGS-20506): Bump golang.org/x/net from 0.15.0 to 0.17.0 [#36](https://github.com/openshift/operator-framework-rukpak/pull/36) * [OCPBUGS-19167](https://issues.redhat.com/browse/OCPBUGS-19167): UPSTREAM: <carry>: Updating ose-olm-rukpak images to be consistent with ART [#35](https://github.com/openshift/operator-framework-rukpak/pull/35) * [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/2287fb27f4e930e84e83f3c915fa605e8e653c4b...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/08f4c422eed5d9584799244c0d9755708686c0c8) * [OCPBUGS-32444](https://issues.redhat.com/browse/OCPBUGS-32444): Bump golang/x/net to v0.23.0 [#428](https://github.com/openshift/openshift-apiserver/pull/428) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Bump openshift/api to get updated docs for UnservableInFutureVersions [#436](https://github.com/openshift/openshift-apiserver/pull/436) * [OCPBUGS-31469](https://issues.redhat.com/browse/OCPBUGS-31469): vendor upgrade runtime-utils [#422](https://github.com/openshift/openshift-apiserver/pull/422) * [OCPBUGS-27101](https://issues.redhat.com/browse/OCPBUGS-27101): UPSTREAM: <carry>: retry etcd Unavailable errors [#413](https://github.com/openshift/openshift-apiserver/pull/413) * [OCPBUGS-24090](https://issues.redhat.com/browse/OCPBUGS-24090): Updating ose-openshift-apiserver-container image to be consistent with ART [#406](https://github.com/openshift/openshift-apiserver/pull/406) * [API-1644](https://issues.redhat.com/browse/API-1644): add serviceaccount/patch to pull secret controller role [#408](https://github.com/openshift/openshift-apiserver/pull/408) * [OCPBUGS-21735](https://issues.redhat.com/browse/OCPBUGS-21735): Enable HTTP/2 CVE mitigation [#396](https://github.com/openshift/openshift-apiserver/pull/396) * [OCPBUGS-19145](https://issues.redhat.com/browse/OCPBUGS-19145): Updating ose-openshift-apiserver images to be consistent with ART [#390](https://github.com/openshift/openshift-apiserver/pull/390) * [API-1644](https://issues.redhat.com/browse/API-1644): add TokenRequest to pull-secret controller's cluster role [#403](https://github.com/openshift/openshift-apiserver/pull/403) * Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled [#395](https://github.com/openshift/openshift-apiserver/pull/395) * [OCPBUGS-18969](https://issues.redhat.com/browse/OCPBUGS-18969): remove image pruner cluster role creation [#391](https://github.com/openshift/openshift-apiserver/pull/391) * [OCPBUGS-16514](https://issues.redhat.com/browse/OCPBUGS-16514): use import mode to manifest cache key [#386](https://github.com/openshift/openshift-apiserver/pull/386) * [OCPBUGS-17674](https://issues.redhat.com/browse/OCPBUGS-17674): pkg/image: avoid unnecessary service lookups when registry is removed [#387](https://github.com/openshift/openshift-apiserver/pull/387) * [OCPBUGS-5823](https://issues.redhat.com/browse/OCPBUGS-5823): remove unused service-ca roles [#388](https://github.com/openshift/openshift-apiserver/pull/388) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f41d636587a25e25f397c3af8322dd3babf2dd9a...08f4c422eed5d9584799244c0d9755708686c0c8) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5d529ddb5398dc84023227780ae6c4e678d942dd) * [OCPBUGS-41949](https://issues.redhat.com/browse/OCPBUGS-41949): Add adambkaplan as approver [#291](https://github.com/openshift/openshift-controller-manager/pull/291) * [OCPBUGS-32807](https://issues.redhat.com/browse/OCPBUGS-32807), [OCPBUGS-33371](https://issues.redhat.com/browse/OCPBUGS-33371): Rollback state of managed image pull secrets after downgrade [#303](https://github.com/openshift/openshift-controller-manager/pull/303) * [OCPBUGS-31490](https://issues.redhat.com/browse/OCPBUGS-31490): Bumps opentelemetry dependencies [#294](https://github.com/openshift/openshift-controller-manager/pull/294) * [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281) * [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285) * [OCPBUGS-22471](https://issues.redhat.com/browse/OCPBUGS-22471): Mitigate CVE-2023-30551 (rekor) [#280](https://github.com/openshift/openshift-controller-manager/pull/280) * [API-1651](https://issues.redhat.com/browse/API-1651): Create separate controllers for default service accounts [#272](https://github.com/openshift/openshift-controller-manager/pull/272) * [API-1652](https://issues.redhat.com/browse/API-1652): bump go.mod go to 1.20 [#267](https://github.com/openshift/openshift-controller-manager/pull/267) * [OCPBUGS-19136](https://issues.redhat.com/browse/OCPBUGS-19136): Updating ose-openshift-controller-manager images to be consistent with ART [#273](https://github.com/openshift/openshift-controller-manager/pull/273) * [OCPBUGS-18498](https://issues.redhat.com/browse/OCPBUGS-18498): Disable Build and DeploymentConfig Informers if their caps are disabled [#270](https://github.com/openshift/openshift-controller-manager/pull/270) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/27209ef14fcfca236ddba24ac7289bb3d01be8e6...5d529ddb5398dc84023227780ae6c4e678d942dd) ### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/1915f64591a18c11138d10c00c50b3f5cff632ce) * [OCPBUGS-24079](https://issues.redhat.com/browse/OCPBUGS-24079): Updating openshift-state-metrics-container image to be consistent with ART [#111](https://github.com/openshift/openshift-state-metrics/pull/111) * [MON-3530](https://issues.redhat.com/browse/MON-3530): Update OWNERS [#110](https://github.com/openshift/openshift-state-metrics/pull/110) * [OCPBUGS-23649](https://issues.redhat.com/browse/OCPBUGS-23649): bump dependencies [#109](https://github.com/openshift/openshift-state-metrics/pull/109) * [OCPBUGS-21754](https://issues.redhat.com/browse/OCPBUGS-21754): bump `x/net` to v0.17.0 [#103](https://github.com/openshift/openshift-state-metrics/pull/103) * Update Dockerfile to remove the maintainer tag [#98](https://github.com/openshift/openshift-state-metrics/pull/98) * [OCPBUGS-19120](https://issues.redhat.com/browse/OCPBUGS-19120): Updating openshift-state-metrics images to be consistent with ART [#102](https://github.com/openshift/openshift-state-metrics/pull/102) * [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf...1915f64591a18c11138d10c00c50b3f5cff632ce) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d0c24077b4e4ac1e00a6a529a814066cd9b5521c) * [OCPBUGS-36586](https://issues.redhat.com/browse/OCPBUGS-36586): Add config map hooks [#175](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/175) * [OCPBUGS-34927](https://issues.redhat.com/browse/OCPBUGS-34927): Correct out-of-bounds check [#172](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/172) * [OCPBUGS-32744](https://issues.redhat.com/browse/OCPBUGS-32744): Relax requirement to enable topology [#165](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/165) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#154](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/154) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#148](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/148) * [STOR-1281](https://issues.redhat.com/browse/STOR-1281): Make Cinder CSI Driver Topology feature configurable [#127](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/127) * [OCPBUGS-23878](https://issues.redhat.com/browse/OCPBUGS-23878): OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 [#141](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/141) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#143](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/143) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#140](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/140) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#134](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/134) * [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#129](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/129) * [OCPBUGS-19213](https://issues.redhat.com/browse/OCPBUGS-19213): Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#133](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/133) * [OSASINFRA-2139](https://issues.redhat.com/browse/OSASINFRA-2139): Document how we manage configuration [#110](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/110) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/3a74316128f526245959b33958aac5bcb68bce99...d0c24077b4e4ac1e00a6a529a814066cd9b5521c) ### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/396a09fffe401679f18e8a7db56c77bbf2dee246) * [OCPBUGS-34665](https://issues.redhat.com/browse/OCPBUGS-34665): Failure to get bootstrap is non-fatal [#120](https://github.com/openshift/machine-api-provider-openstack/pull/120) * [OCPBUGS-30857](https://issues.redhat.com/browse/OCPBUGS-30857): Ensure portSecurity is correctly set in the Port [#108](https://github.com/openshift/machine-api-provider-openstack/pull/108) * [OCPBUGS-28326](https://issues.redhat.com/browse/OCPBUGS-28326): Add snyk configuration file [#105](https://github.com/openshift/machine-api-provider-openstack/pull/105) * [OCPBUGS-24097](https://issues.redhat.com/browse/OCPBUGS-24097): Updating ose-machine-api-provider-openstack-container image to be consistent with ART [#99](https://github.com/openshift/machine-api-provider-openstack/pull/99) * [OCPBUGS-23668](https://issues.redhat.com/browse/OCPBUGS-23668): Bump Kubernetes dependencies [#97](https://github.com/openshift/machine-api-provider-openstack/pull/97) * [OCPBUGS-23913](https://issues.redhat.com/browse/OCPBUGS-23913): Fix nil pointer exception when deleting machines without a root volume [#98](https://github.com/openshift/machine-api-provider-openstack/pull/98) * [OSASINFRA-3297](https://issues.redhat.com/browse/OSASINFRA-3297): Remove unnecessary retrieval of Network ID [#96](https://github.com/openshift/machine-api-provider-openstack/pull/96) * [OCPBUGS-16597](https://issues.redhat.com/browse/OCPBUGS-16597): Don't build InstanceSpec during delete operations [#90](https://github.com/openshift/machine-api-provider-openstack/pull/90) * NO-JIRA: Misc linter fixes [#94](https://github.com/openshift/machine-api-provider-openstack/pull/94) * [OSASINFRA-3283](https://issues.redhat.com/browse/OSASINFRA-3283): convert: add missing port profile [#93](https://github.com/openshift/machine-api-provider-openstack/pull/93) * [OSASINFRA-3243](https://issues.redhat.com/browse/OSASINFRA-3243): add ephemeral storage support [#88](https://github.com/openshift/machine-api-provider-openstack/pull/88) * [OCPBUGS-22319](https://issues.redhat.com/browse/OCPBUGS-22319): fix MachineToInstanceSpec when SG are nil [#91](https://github.com/openshift/machine-api-provider-openstack/pull/91) * [OSASINFRA-3272](https://issues.redhat.com/browse/OSASINFRA-3272): Move to CAPO v1alpha7 [#87](https://github.com/openshift/machine-api-provider-openstack/pull/87) * [OCPBUGS-22069](https://issues.redhat.com/browse/OCPBUGS-22069): Update dependencies [#89](https://github.com/openshift/machine-api-provider-openstack/pull/89) * [OCPBUGS-19156](https://issues.redhat.com/browse/OCPBUGS-19156): Updating ose-machine-api-provider-openstack images to be consistent with ART [#84](https://github.com/openshift/machine-api-provider-openstack/pull/84) * Remove unnecessary print [#79](https://github.com/openshift/machine-api-provider-openstack/pull/79) * Update OWNERS [#83](https://github.com/openshift/machine-api-provider-openstack/pull/83) * make: Remove irrelevant/broken targets [#82](https://github.com/openshift/machine-api-provider-openstack/pull/82) * Bug OCPBUGS-4629: Set controller's SyncPeriod to 1 hour [#59](https://github.com/openshift/machine-api-provider-openstack/pull/59) * [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/51f8e4d69014bfa7a8815662ab0117b6505a6e29...396a09fffe401679f18e8a7db56c77bbf2dee246) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1da79fef878fb4b89ffd10cab6e1f1c0e0d32867) * [OCPBUGS-41981](https://issues.redhat.com/browse/OCPBUGS-41981): (fix) registry pods do not come up again after node failure (#3366) [#868](https://github.com/openshift/operator-framework-olm/pull/868) * [OCPBUGS-41819](https://issues.redhat.com/browse/OCPBUGS-41819): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#864](https://github.com/openshift/operator-framework-olm/pull/864) * [OCPBUGS-41598](https://issues.redhat.com/browse/OCPBUGS-41598): Fix e2e flake: upgrade CRD with deprecated version [#862](https://github.com/openshift/operator-framework-olm/pull/862) * [OCPBUGS-38383](https://issues.redhat.com/browse/OCPBUGS-38383): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache [#840](https://github.com/openshift/operator-framework-olm/pull/840) * [OCPBUGS-38323](https://issues.redhat.com/browse/OCPBUGS-38323): Update junit report file name to show spec results on Test Grid [#839](https://github.com/openshift/operator-framework-olm/pull/839) * [OCPBUGS-37677](https://issues.redhat.com/browse/OCPBUGS-37677): [release-4.15] Update e2e config and backport list of flakes [#829](https://github.com/openshift/operator-framework-olm/pull/829) * [OCPBUGS-37554](https://issues.redhat.com/browse/OCPBUGS-37554): Set required-scc for openshift workloads [#828](https://github.com/openshift/operator-framework-olm/pull/828) * [OCPBUGS-37017](https://issues.redhat.com/browse/OCPBUGS-37017): Bump github.com/containers/image/v5 [#823](https://github.com/openshift/operator-framework-olm/pull/823) * [OCPBUGS-36812](https://issues.redhat.com/browse/OCPBUGS-36812): fix sorting unpack jobs [#817](https://github.com/openshift/operator-framework-olm/pull/817) * [OCPBUGS-36451](https://issues.redhat.com/browse/OCPBUGS-36451): Can't install operator on 4.15 after uninstalling it on a prior version [#810](https://github.com/openshift/operator-framework-olm/pull/810) * [OCPBUGS-36813](https://issues.redhat.com/browse/OCPBUGS-36813): [CARRY] perform operator apiService certificate validity checks directly [#819](https://github.com/openshift/operator-framework-olm/pull/819) * [OCPBUGS-35305](https://issues.redhat.com/browse/OCPBUGS-35305): [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node [#779](https://github.com/openshift/operator-framework-olm/pull/779) * [OCPBUGS-35720](https://issues.redhat.com/browse/OCPBUGS-35720): Warn and allow CRD upgrade if validation fails but webhook is specified [#789](https://github.com/openshift/operator-framework-olm/pull/789) * [OCPBUGS-31939](https://issues.redhat.com/browse/OCPBUGS-31939), [OCPBUGS-31940](https://issues.redhat.com/browse/OCPBUGS-31940): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#747](https://github.com/openshift/operator-framework-olm/pull/747) * [OCPBUGS-35229](https://issues.redhat.com/browse/OCPBUGS-35229): Unblock CI [#768](https://github.com/openshift/operator-framework-olm/pull/768) * [OCPBUGS-32860](https://issues.redhat.com/browse/OCPBUGS-32860): UPSTREAM: <carry>: bump go-jose [#740](https://github.com/openshift/operator-framework-olm/pull/740) * [OCPBUGS-32311](https://issues.redhat.com/browse/OCPBUGS-32311): [release-4.15]: Update if AlreadyExists [#736](https://github.com/openshift/operator-framework-olm/pull/736) * [OCPBUGS-31842](https://issues.redhat.com/browse/OCPBUGS-31842): copy-content: delete destination dirs before copying (#3197) [#728](https://github.com/openshift/operator-framework-olm/pull/728) * [OCPBUGS-31651](https://issues.redhat.com/browse/OCPBUGS-31651): [release-4.15] Correctly detect catalog image ID for extractContent catalog pods [#726](https://github.com/openshift/operator-framework-olm/pull/726) * [OCPBUGS-30219](https://issues.redhat.com/browse/OCPBUGS-30219): bump otelgrpc to 0.46.0 [#712](https://github.com/openshift/operator-framework-olm/pull/712) * [OCPBUGS-30193](https://issues.redhat.com/browse/OCPBUGS-30193): Synchronize From Upstream Repositories [#711](https://github.com/openshift/operator-framework-olm/pull/711) * [OCPBUGS-30141](https://issues.redhat.com/browse/OCPBUGS-30141): ClusterRoleBinding + Service SSA cherry-pick [#707](https://github.com/openshift/operator-framework-olm/pull/707) * [OCPBUGS-30147](https://issues.redhat.com/browse/OCPBUGS-30147): Wait for required RBAC before creating packageserver CSV [#710](https://github.com/openshift/operator-framework-olm/pull/710) * NO-ISSUE: [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694) * [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623) * [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683) * [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684) * [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668) * [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798): Fix snapshot failure, backport e2es [#670](https://github.com/openshift/operator-framework-olm/pull/670) * [OCPBUGS-27435](https://issues.redhat.com/browse/OCPBUGS-27435): OCPBUGS-25989: operators/olm: filter RBAC lists by namespace [#664](https://github.com/openshift/operator-framework-olm/pull/664) * [OCPBUGS-26066](https://issues.redhat.com/browse/OCPBUGS-26066): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-olm/pull/648) * [OCPBUGS-25818](https://issues.redhat.com/browse/OCPBUGS-25818): NO-ISSUE: Synchronize From Upstream Repositories [#644](https://github.com/openshift/operator-framework-olm/pull/644) * [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798), [OCPBUGS-25802](https://issues.redhat.com/browse/OCPBUGS-25802): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-olm/pull/643) * NO-ISSUE: Update verified directories for microshift-manifests [#642](https://github.com/openshift/operator-framework-olm/pull/642) * [OCPBUGS-25367](https://issues.redhat.com/browse/OCPBUGS-25367): [CARRY] Fix panic issue when annotations map is nil [#636](https://github.com/openshift/operator-framework-olm/pull/636) * [OCPBUGS-24121](https://issues.redhat.com/browse/OCPBUGS-24121): Updating operator-registry-container image to be consistent with ART [#621](https://github.com/openshift/operator-framework-olm/pull/621) * [API-1674](https://issues.redhat.com/browse/API-1674): Add ownership annotations to new and existing olm-managed secrets [#626](https://github.com/openshift/operator-framework-olm/pull/626) * NO-ISSUE: Synchronize From Upstream Repositories [#625](https://github.com/openshift/operator-framework-olm/pull/625) * [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests fixes [#622](https://github.com/openshift/operator-framework-olm/pull/622) * NO-ISSUE: scripts: remove legacy bumping implementations [#613](https://github.com/openshift/operator-framework-olm/pull/613) * [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests remove collection-profiles cronjob from kustomization [#615](https://github.com/openshift/operator-framework-olm/pull/615) * [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Microshift manifests: Ignore "*.removed.yaml" files in kustomization.yaml [#610](https://github.com/openshift/operator-framework-olm/pull/610) * [OPECO-3066](https://issues.redhat.com/browse/OPECO-3066): Synchronize From Upstream Repositories [#612](https://github.com/openshift/operator-framework-olm/pull/612) * NO-ISSUE: Synchronize From Upstream Repositories [#609](https://github.com/openshift/operator-framework-olm/pull/609) * Synchronize From Upstream Repositories [#606](https://github.com/openshift/operator-framework-olm/pull/606) * [OPRUN-3063](https://issues.redhat.com/browse/OPRUN-3063): Generate OLM microshift manifests [#604](https://github.com/openshift/operator-framework-olm/pull/604) * [OCPBUGS-17041](https://issues.redhat.com/browse/OCPBUGS-17041): Release Leader Election on Manager Exit [#556](https://github.com/openshift/operator-framework-olm/pull/556) * [OPRUN-3106](https://issues.redhat.com/browse/OPRUN-3106): skuznets/bump vendor ii [#600](https://github.com/openshift/operator-framework-olm/pull/600) * NO-ISSUE: Update downstreaming documentation. [#602](https://github.com/openshift/operator-framework-olm/pull/602) * Skuznets/bump vendor [#581](https://github.com/openshift/operator-framework-olm/pull/581) * scripts/bumper: only marshal missing commits [#599](https://github.com/openshift/operator-framework-olm/pull/599) * Small sync [#597](https://github.com/openshift/operator-framework-olm/pull/597) * [OCPBUGS-17408](https://issues.redhat.com/browse/OCPBUGS-17408): Do not derive installplan.spec.clusterServiceNames from bundle IDs [#596](https://github.com/openshift/operator-framework-olm/pull/596) * [OCPBUGS-22217](https://issues.redhat.com/browse/OCPBUGS-22217): Fixing flake tests so they don't fail 100% of the time. [#595](https://github.com/openshift/operator-framework-olm/pull/595) * [OCPBUGS-18948](https://issues.redhat.com/browse/OCPBUGS-18948): CRD Compatibility Validation [#592](https://github.com/openshift/operator-framework-olm/pull/592) * [OCPVE-674](https://issues.redhat.com/browse/OCPVE-674): feat: add annotations for capabilities feature [#565](https://github.com/openshift/operator-framework-olm/pull/565) * Remove 5m package-server-manager default [#588](https://github.com/openshift/operator-framework-olm/pull/588) * [OCPBUGS-20503](https://issues.redhat.com/browse/OCPBUGS-20503): Bump golang.org/x/net from 0.10.0 to 0.17.0 [#585](https://github.com/openshift/operator-framework-olm/pull/585) * scripts/bumper: also run `go mod` in nested vendor [#593](https://github.com/openshift/operator-framework-olm/pull/593) * scripts/bumper: improve sort order [#580](https://github.com/openshift/operator-framework-olm/pull/580) * Sync script: handle multi commit merges [#578](https://github.com/openshift/operator-framework-olm/pull/578) * Sync 2023 10 05 no steve [#579](https://github.com/openshift/operator-framework-olm/pull/579) * scripts/bumper: exit when there's nothing to do [#569](https://github.com/openshift/operator-framework-olm/pull/569) * [OCPBUGS-17157](https://issues.redhat.com/browse/OCPBUGS-17157): manifests: add $GOMEMLIMIT to PSM [#551](https://github.com/openshift/operator-framework-olm/pull/551) * [OCPBUGS-19196](https://issues.redhat.com/browse/OCPBUGS-19196): Updating operator-registry images to be consistent with ART [#563](https://github.com/openshift/operator-framework-olm/pull/563) * Skuznets/bump all [#567](https://github.com/openshift/operator-framework-olm/pull/567) * [OCPBUGS-19257](https://issues.redhat.com/browse/OCPBUGS-19257): Updating operator-lifecycle-manager images to be consistent with ART [#564](https://github.com/openshift/operator-framework-olm/pull/564) * [OPRUN-1873](https://issues.redhat.com/browse/OPRUN-1873): scripts/bumper: allow fetching using https [#561](https://github.com/openshift/operator-framework-olm/pull/561) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/5e8dd9210f931530eda2651a49ad15ceb97c9f21...1da79fef878fb4b89ffd10cab6e1f1c0e0d32867) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/1f1bc1988527f01b7326f63953aacbd400fd8426) * [OCPBUGS-24144](https://issues.redhat.com/browse/OCPBUGS-24144): Updating marketplace-operator-container image to be consistent with ART [4.15] [#553](https://github.com/operator-framework/operator-marketplace/pull/553) * [OCPBUGS-37524](https://issues.redhat.com/browse/OCPBUGS-37524): Set required-scc for openshift workloads [#570](https://github.com/operator-framework/operator-marketplace/pull/570) * [OCPBUGS-32060](https://issues.redhat.com/browse/OCPBUGS-32060): update golang.org/x/net for CVE-2023-45288 [#564](https://github.com/operator-framework/operator-marketplace/pull/564) * [OPRUN-3130](https://issues.redhat.com/browse/OPRUN-3130): use content extraction in default catalog sources [#540](https://github.com/operator-framework/operator-marketplace/pull/540) * [OCPBUGS-19710](https://issues.redhat.com/browse/OCPBUGS-19710): Update image tag to 4.15 for all but community operators [#541](https://github.com/operator-framework/operator-marketplace/pull/541) * [OCPBUGS-21592](https://issues.redhat.com/browse/OCPBUGS-21592): [release-4.15] bump golang.org/x/net to 0.17.0 [#546](https://github.com/operator-framework/operator-marketplace/pull/546) * Update image tag to 4.15 for community operators [#534](https://github.com/operator-framework/operator-marketplace/pull/534) * [OCPBUGS-19230](https://issues.redhat.com/browse/OCPBUGS-19230): Updating marketplace-operator images to be consistent with ART [#539](https://github.com/operator-framework/operator-marketplace/pull/539) * Dockerfile: Align OKD and OCP [#531](https://github.com/operator-framework/operator-marketplace/pull/531) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/a367cea6e2371a0db2957403de40958852f817b3...1f1bc1988527f01b7326f63953aacbd400fd8426) ### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/b8d25ad6d140a198e96527b46a9dbde65aae41ce) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver/pull/128) * [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/f21b470f4927f97eca93a0a390cffccd7d724043...b8d25ad6d140a198e96527b46a9dbde65aae41ce) ### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e9b0fa233d75a97e6d29106265938b42bc16d677) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/ovirt-csi-driver-operator/pull/125) * [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/2fa33aa7f05da8640a8695372364f2367febd12a...e9b0fa233d75a97e6d29106265938b42bc16d677) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5af0be89d7a13e44ba9d7129164e18b09afd54d8) * [OCPBUGS-41340](https://issues.redhat.com/browse/OCPBUGS-41340): Delete EgressIP LRP stale nexthops when node is not found [#2288](https://github.com/openshift/ovn-kubernetes/pull/2288) * [OCPBUGS-38262](https://issues.redhat.com/browse/OCPBUGS-38262): [release-4.15] Bump OVSDBTimeout and make it configurable. [#2252](https://github.com/openshift/ovn-kubernetes/pull/2252) * [OCPBUGS-37962](https://issues.redhat.com/browse/OCPBUGS-37962): Fix registering northd metrics on appropriate nodes [#2246](https://github.com/openshift/ovn-kubernetes/pull/2246) * [OCPBUGS-37196](https://issues.redhat.com/browse/OCPBUGS-37196): [release-4.15] ovspinning: Set affinity of each thread [#2235](https://github.com/openshift/ovn-kubernetes/pull/2235) * [OCPBUGS-35902](https://issues.redhat.com/browse/OCPBUGS-35902): Bump ovn to 23.09.4-16 [#2216](https://github.com/openshift/ovn-kubernetes/pull/2216) * [OCPBUGS-36382](https://issues.redhat.com/browse/OCPBUGS-36382): Handle IP fragments in SGW mode [#2215](https://github.com/openshift/ovn-kubernetes/pull/2215) * [OCPBUGS-33619](https://issues.redhat.com/browse/OCPBUGS-33619): EgressIP: Reload certificates for the grpc heatlhcheck server [#2167](https://github.com/openshift/ovn-kubernetes/pull/2167) * [OCPBUGS-33623](https://issues.redhat.com/browse/OCPBUGS-33623), [OCPBUGS-33624](https://issues.redhat.com/browse/OCPBUGS-33624): Improve CI signal by removing/suppressing signals [#2168](https://github.com/openshift/ovn-kubernetes/pull/2168) * [OCPBUGS-31814](https://issues.redhat.com/browse/OCPBUGS-31814): ipv6+all protocols conntrack flush [#2131](https://github.com/openshift/ovn-kubernetes/pull/2131) * [OCPBUGS-34404](https://issues.redhat.com/browse/OCPBUGS-34404): [release-4.15] dns: fix deadlock in case of error [#2182](https://github.com/openshift/ovn-kubernetes/pull/2182) * [OCPBUGS-33294](https://issues.redhat.com/browse/OCPBUGS-33294): Reuse node-subnet from cache if exists [#2163](https://github.com/openshift/ovn-kubernetes/pull/2163) * [OCPBUGS-33960](https://issues.redhat.com/browse/OCPBUGS-33960): Egressip garp fix 4.15 [#2175](https://github.com/openshift/ovn-kubernetes/pull/2175) * [OCPBUGS-30899](https://issues.redhat.com/browse/OCPBUGS-30899): use a forked version of j-keck/arping that fixes a threading issue [#2105](https://github.com/openshift/ovn-kubernetes/pull/2105) * [OCPBUGS-32426](https://issues.redhat.com/browse/OCPBUGS-32426): [release-4.15] Improves service iptables efficiency on start up [#2156](https://github.com/openshift/ovn-kubernetes/pull/2156) * [Release 4.15] OCPBUGS-32986: Bump OVS [#2147](https://github.com/openshift/ovn-kubernetes/pull/2147) * [OCPBUGS-27852](https://issues.redhat.com/browse/OCPBUGS-27852): [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2025](https://github.com/openshift/ovn-kubernetes/pull/2025) * [OCPBUGS-29316](https://issues.redhat.com/browse/OCPBUGS-29316): [release-4.15] Ignore missing live migratable pod annotation on AddNode [#2065](https://github.com/openshift/ovn-kubernetes/pull/2065) * [OCPBUGS-32202](https://issues.redhat.com/browse/OCPBUGS-32202): [release-4.15] Bump OVN to 23.09.0-139 [#2121](https://github.com/openshift/ovn-kubernetes/pull/2121) * [OCPBUGS-33020](https://issues.redhat.com/browse/OCPBUGS-33020): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2141](https://github.com/openshift/ovn-kubernetes/pull/2141) * [OCPBUGS-32154](https://issues.redhat.com/browse/OCPBUGS-32154): Custom v4 and v6 transit switch subnets while creating kind cluster [#2094](https://github.com/openshift/ovn-kubernetes/pull/2094) * [OCPBUGS-31081](https://issues.redhat.com/browse/OCPBUGS-31081): Periodically check the ovnkube-node certificate is not expired [#2099](https://github.com/openshift/ovn-kubernetes/pull/2099) * [OCPBUGS-31033](https://issues.redhat.com/browse/OCPBUGS-31033): Remove OVN topology version reporting/detection [#2098](https://github.com/openshift/ovn-kubernetes/pull/2098) * [OCPBUGS-31500](https://issues.redhat.com/browse/OCPBUGS-31500), [OCPBUGS-31501](https://issues.redhat.com/browse/OCPBUGS-31501): EIP multi NIC IPv6 support and default route with next hop [#2103](https://github.com/openshift/ovn-kubernetes/pull/2103) * [OCPBUGS-29599](https://issues.redhat.com/browse/OCPBUGS-29599): Update HostNetworkNamespace address_set for remote zone nodes [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074) * [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064) * [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050) * [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060) * [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045) * [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040) * [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052) * [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028) * [OCPBUGS-27255](https://issues.redhat.com/browse/OCPBUGS-27255): Ensure session affinity cleanup on backend removal [#2020](https://github.com/openshift/ovn-kubernetes/pull/2020) * [OCPBUGS-25938](https://issues.redhat.com/browse/OCPBUGS-25938): CARRY: Updates owners and adds Surya [#2005](https://github.com/openshift/ovn-kubernetes/pull/2005) * [OCPBUGS-25395](https://issues.redhat.com/browse/OCPBUGS-25395): [release-4.15] Update namespace-owned port group (that used to be managed by multicast) [#1998](https://github.com/openshift/ovn-kubernetes/pull/1998) * [OCPBUGS-25486](https://issues.redhat.com/browse/OCPBUGS-25486): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999) * [OCPBUGS-25700](https://issues.redhat.com/browse/OCPBUGS-25700), [OCPBUGS-25701](https://issues.redhat.com/browse/OCPBUGS-25701): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1994](https://github.com/openshift/ovn-kubernetes/pull/1994) * [OCPBUGS-24610](https://issues.redhat.com/browse/OCPBUGS-24610): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1963](https://github.com/openshift/ovn-kubernetes/pull/1963) * [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847): Downstream merge 12-7-23 [#1976](https://github.com/openshift/ovn-kubernetes/pull/1976) * [NP-618](https://issues.redhat.com/browse/NP-618), [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847), [SDN-4124](https://issues.redhat.com/browse/SDN-4124), [SDN-4149](https://issues.redhat.com/browse/SDN-4149), [SDN-4150](https://issues.redhat.com/browse/SDN-4150): [DownstreamMerge] 1 Dec 2023 [#1965](https://github.com/openshift/ovn-kubernetes/pull/1965) * [OCPBUGS-24014](https://issues.redhat.com/browse/OCPBUGS-24014): Downstream merge 28th November 2023 [#1962](https://github.com/openshift/ovn-kubernetes/pull/1962) * [OCPBUGS-21773](https://issues.redhat.com/browse/OCPBUGS-21773): Downstream Merge 22nd November 2023 [#1958](https://github.com/openshift/ovn-kubernetes/pull/1958) * [NHE-805](https://issues.redhat.com/browse/NHE-805), [OCPBUGS-19050](https://issues.redhat.com/browse/OCPBUGS-19050), [OCPBUGS-22691](https://issues.redhat.com/browse/OCPBUGS-22691), [OCPBUGS-22767](https://issues.redhat.com/browse/OCPBUGS-22767), [SDN-4173](https://issues.redhat.com/browse/SDN-4173): [DownstreamMerge] 11 November 2023 [#1952](https://github.com/openshift/ovn-kubernetes/pull/1952) * [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942) * [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939) * [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935) * [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702) * [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884) * [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931) * [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923) * [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919) * [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917) * [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911) * [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907) * [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887) * [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895) * Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897) * [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883) * [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/fcb4f2505821b0eddf003a226606045d79b37f21...5af0be89d7a13e44ba9d7129164e18b09afd54d8) ### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/38bee567a703d3d5ab2ca6e1e047eea8e799c3c5) * [OCPBUGS-36096](https://issues.redhat.com/browse/OCPBUGS-36096): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#89](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/89) * [OCPBUGS-33622](https://issues.redhat.com/browse/OCPBUGS-33622): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 [#80](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/80) * [OCPBUGS-25978](https://issues.redhat.com/browse/OCPBUGS-25978): Rebase with upstream: Fix snyk code issue: Path Traversal [#71](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/71) * Updating ose-powervs-block-csi-driver-container image to be consistent with ART [#66](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/66) * [MULTIARCH-4027](https://issues.redhat.com/browse/MULTIARCH-4027): Rebase with upstream: Kubernetes Improper Input Validation vulnerability [#65](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/65) * [MULTIARCH-4022](https://issues.redhat.com/browse/MULTIARCH-4022): Rebase with upstream: v0.5.1 changes [#63](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/63) * [MULTIARCH-3987](https://issues.redhat.com/browse/MULTIARCH-3987): synk: ignore vendor dir [#57](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/57) * Rebase with upstream: v0.5.0 changes [#56](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/56) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/49) * Updating ose-powervs-block-csi-driver images to be consistent with ART [#47](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/47) * cherry-pick: Improve delete device failure logs in driver node [#46](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/46) * [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/ceacf8b4308cf0c00c18952f7dbcdc112efdbb46...38bee567a703d3d5ab2ca6e1e047eea8e799c3c5) ### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951) * [OCPBUGS-25714](https://issues.redhat.com/browse/OCPBUGS-25714): snyk: ignore vendor dir [#59](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/59) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#56](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/56) * UPSTREAM <drop>: OCPBUGS-23628: SAST Scan detected vulnerability in go.uber.org/zap [#52](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/52) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#51](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/51) * [OCPBUGS-22628](https://issues.redhat.com/browse/OCPBUGS-22628): Bump otelhttp to >= v0.44.0 [#49](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/49) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#47](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/47) * Update OWNERS add yussufsh [#43](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/43) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/39) * Updating ose-powervs-block-csi-driver-operator images to be consistent with ART [#38](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/38) * Update the powervs-csi-node to use nodeSelector for ppc64le [#37](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/37) * [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7436369afce33811e543b13fcbea8d1e1ff65502...a3729dcb75a7da8c9ee7466da5de07e2f1fe5951) ### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/1d6a7ed991427b1c8048b0b44b706228e5c2a001) * [OCPBUGS-36106](https://issues.redhat.com/browse/OCPBUGS-36106): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 [#74](https://github.com/openshift/cloud-provider-powervs/pull/74) * [OCPBUGS-22629](https://issues.redhat.com/browse/OCPBUGS-22629): Bump otelhttp to >= v0.44.0 [#58](https://github.com/openshift/cloud-provider-powervs/pull/58) * [OCPBUGS-24170](https://issues.redhat.com/browse/OCPBUGS-24170): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART [#61](https://github.com/openshift/cloud-provider-powervs/pull/61) * [MULTIARCH-4036](https://issues.redhat.com/browse/MULTIARCH-4036): Manual rebase of upstream release 1.28 on 28-11-2023 [#60](https://github.com/openshift/cloud-provider-powervs/pull/60) * [MULTIARCH-3989](https://issues.redhat.com/browse/MULTIARCH-3989): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#50](https://github.com/openshift/cloud-provider-powervs/pull/50) * [MULTIARCH-3997](https://issues.redhat.com/browse/MULTIARCH-3997): Support to use service instance name in config [#49](https://github.com/openshift/cloud-provider-powervs/pull/49) * [OCPBUGS-21763](https://issues.redhat.com/browse/OCPBUGS-21763): CVE-2023-39325 - Update net dependencies - 4.15 [#44](https://github.com/openshift/cloud-provider-powervs/pull/44) * [OCPBUGS-19272](https://issues.redhat.com/browse/OCPBUGS-19272): Updating ose-powervs-cloud-controller-manager images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-powervs/pull/43) * [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/32c1028ecf58851eb1270f47351a4423ba081c3b...1d6a7ed991427b1c8048b0b44b706228e5c2a001) ### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/4121cfc4304dcbb698993a388368f4025ab9c24a) * [OCPBUGS-41977](https://issues.redhat.com/browse/OCPBUGS-41977): Update go.mod to fix CVE - 4.15 [#85](https://github.com/openshift/machine-api-provider-powervs/pull/85) * [OCPBUGS-26555](https://issues.redhat.com/browse/OCPBUGS-26555): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#72](https://github.com/openshift/machine-api-provider-powervs/pull/72) * [OCPBUGS-24089](https://issues.redhat.com/browse/OCPBUGS-24089): Updating ose-powervs-machine-controllers-container image to be consistent with ART [#66](https://github.com/openshift/machine-api-provider-powervs/pull/66) * NO-ISSUE: snyk code scan exclude vendor directory [#60](https://github.com/openshift/machine-api-provider-powervs/pull/60) * Fix nil nextURL [#59](https://github.com/openshift/machine-api-provider-powervs/pull/59) * [OCPBUGS-21878](https://issues.redhat.com/browse/OCPBUGS-21878): CVE-2023-44487 - Bump golang.org/x/net to v0.17.0 - 4.15 [#53](https://github.com/openshift/machine-api-provider-powervs/pull/53) * Update dependencies and use k8 1.28 [#52](https://github.com/openshift/machine-api-provider-powervs/pull/52) * [OCPBUGS-19144](https://issues.redhat.com/browse/OCPBUGS-19144): Updating ose-powervs-machine-controllers images to be consistent with ART [#51](https://github.com/openshift/machine-api-provider-powervs/pull/51) * [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/1a957dae3a7c9c36752b4869854a90e6b88eaf7e...4121cfc4304dcbb698993a388368f4025ab9c24a) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) * [OCPBUGS-18854](https://issues.redhat.com/browse/OCPBUGS-18854): Updating prom-label-proxy images to be consistent with ART [#357](https://github.com/openshift/prom-label-proxy/pull/357) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af40ed09f69fab6c4bf054436f537a3e569d5f02...f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) ### [prometheus](https://github.com/openshift/prometheus/tree/6828e4464c45f239a89c7965233c2fef49c6b1fb) * [MON-3528](https://issues.redhat.com/browse/MON-3528): [bot] Bump openshift/prometheus to v2.48.0 [#186](https://github.com/openshift/prometheus/pull/186) * [OCPBUGS-22743](https://issues.redhat.com/browse/OCPBUGS-22743): bump Prometheus to 2.48.0 (manual) [#185](https://github.com/openshift/prometheus/pull/185) * Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181) * Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180) * Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179) * [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173) * update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172) * Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168) * [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169) * [Full changelog](https://github.com/openshift/prometheus/compare/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd...6828e4464c45f239a89c7965233c2fef49c6b1fb) ### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/870ade52a6097bc55cec29c1a9cc028967c5d23c) * [OCPBUGS-21771](https://issues.redhat.com/browse/OCPBUGS-21771): Bump golang.org/x/net to v0.17.0 [#79](https://github.com/openshift/prometheus-alertmanager/pull/79) * Bump openshift/prometheus-alertmanager to v0.26.0 [#78](https://github.com/openshift/prometheus-alertmanager/pull/78) * update OWNERS file [#77](https://github.com/openshift/prometheus-alertmanager/pull/77) * Bump v0.26.0 [#76](https://github.com/openshift/prometheus-alertmanager/pull/76) * [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-alertmanager images to be consistent with ART [#75](https://github.com/openshift/prometheus-alertmanager/pull/75) * [OCPBUGS-18250](https://issues.redhat.com/browse/OCPBUGS-18250): Update alertmanager to 0.25.1 [#74](https://github.com/openshift/prometheus-alertmanager/pull/74) * [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e3725166cf8ef228f1672b00d063c488b69687aa...870ade52a6097bc55cec29c1a9cc028967c5d23c) ### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/902436ac6a8eec8f2f3f8b91f519a3d319924833) * [OCPBUGS-38400](https://issues.redhat.com/browse/OCPBUGS-38400): feat: sync proxy settings in Alertmanager configuration [#300](https://github.com/openshift/prometheus-operator/pull/300) * [OCPBUGS-36719](https://issues.redhat.com/browse/OCPBUGS-36719): add proxyURL validation for smon,pmon and probe [#298](https://github.com/openshift/prometheus-operator/pull/298) * [OCPBUGS-29180](https://issues.redhat.com/browse/OCPBUGS-29180): fix: convert `continue` field between v1beta1 and v1alpha1 [#276](https://github.com/openshift/prometheus-operator/pull/276) * [OCPBUGS-29509](https://issues.redhat.com/browse/OCPBUGS-29509): fix: don't fail metadata transform on unknown types (#6298) [#278](https://github.com/openshift/prometheus-operator/pull/278) * [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): Bump openshift/prometheus-operator to v0.70.0 [#263](https://github.com/openshift/prometheus-operator/pull/263) * [OCPBUGS-24126](https://issues.redhat.com/browse/OCPBUGS-24126): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#260](https://github.com/openshift/prometheus-operator/pull/260) * [OCPBUGS-24073](https://issues.redhat.com/browse/OCPBUGS-24073): Updating prometheus-operator-container image to be consistent with ART [#258](https://github.com/openshift/prometheus-operator/pull/258) * [OCPBUGS-24105](https://issues.redhat.com/browse/OCPBUGS-24105): Updating prometheus-config-reloader-container image to be consistent with ART [#259](https://github.com/openshift/prometheus-operator/pull/259) * [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256) * [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255) * [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254) * [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252) * [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246) * update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245) * [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242) * [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244) * [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243) * : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/a4b845a7ae4e1ffb62eae963406481f1c3456bfe...902436ac6a8eec8f2f3f8b91f519a3d319924833) ### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/aed837c322b6eb54d88956acada07b5b390b5c25) * [MON-3502](https://issues.redhat.com/browse/MON-3502): [bot] Bump openshift/node_exporter to v1.7.0 [#139](https://github.com/openshift/node_exporter/pull/139) * [OCPBUGS-21635](https://issues.redhat.com/browse/OCPBUGS-21635): upgrade golang.org/x/net v0.17.0 [#133](https://github.com/openshift/node_exporter/pull/133) * update OWNERS file [#132](https://github.com/openshift/node_exporter/pull/132) * [OCPBUGS-18850](https://issues.redhat.com/browse/OCPBUGS-18850): Updating golang-github-prometheus-node_exporter images to be consistent with ART [#131](https://github.com/openshift/node_exporter/pull/131) * [Full changelog](https://github.com/openshift/node_exporter/compare/5ee0a9d957a04756ba76623a8bbc12be9949109f...aed837c322b6eb54d88956acada07b5b390b5c25) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/c5cc7a73705e4086759e2a36811b055b7716def4) * [OCPBUGS-15253](https://issues.redhat.com/browse/OCPBUGS-15253): Include ingress's namespace in ingress without class metric [#35](https://github.com/openshift/route-controller-manager/pull/35) * go.mod: remove replaces [#33](https://github.com/openshift/route-controller-manager/pull/33) * [OCPBUGS-21823](https://issues.redhat.com/browse/OCPBUGS-21823): bump(k8s,openshift) to address CVE-2023-44487 [#32](https://github.com/openshift/route-controller-manager/pull/32) * [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): bump k8s to 1.28 [#31](https://github.com/openshift/route-controller-manager/pull/31) * [OCPBUGS-19202](https://issues.redhat.com/browse/OCPBUGS-19202): Updating ose-route-controller-manager images to be consistent with ART [#30](https://github.com/openshift/route-controller-manager/pull/30) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e...c5cc7a73705e4086759e2a36811b055b7716def4) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/19f312e96bb4e5b7da9f61ea4cab202b227a60c6) * [OCPBUGS-34797](https://issues.redhat.com/browse/OCPBUGS-34797): set required-scc for openshift workloads [#243](https://github.com/openshift/service-ca-operator/pull/243) * [OCPBUGS-24107](https://issues.redhat.com/browse/OCPBUGS-24107): Updating ose-service-ca-operator-container image to be consistent with ART [#226](https://github.com/openshift/service-ca-operator/pull/226) * [API-1673](https://issues.redhat.com/browse/API-1673): Add description annotations to service CA secret and configmap [#225](https://github.com/openshift/service-ca-operator/pull/225) * add ownership for unshared secrets and configmaps [#220](https://github.com/openshift/service-ca-operator/pull/220) * [OCPBUGS-21798](https://issues.redhat.com/browse/OCPBUGS-21798): go.mod: bump golang.org/x/net to v0.17.0 [#223](https://github.com/openshift/service-ca-operator/pull/223) * [OCPBUGS-19176](https://issues.redhat.com/browse/OCPBUGS-19176): Updating ose-service-ca-operator images to be consistent with ART [#221](https://github.com/openshift/service-ca-operator/pull/221) * [OCPBUGS-8512](https://issues.redhat.com/browse/OCPBUGS-8512): fix admission webhook CA injection [#219](https://github.com/openshift/service-ca-operator/pull/219) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/3c3f82f7112ee4b5656e5c554f9887acdf881175...19f312e96bb4e5b7da9f61ea4cab202b227a60c6) ### [telemeter](https://github.com/openshift/telemeter/tree/14489f7dc656175e11a3ef962fcbcd113b3651a9) * [OCPBUGS-34831](https://issues.redhat.com/browse/OCPBUGS-34831): fix issuer check during JWT authentication for 4.15 [#538](https://github.com/openshift/telemeter/pull/538) * : OCPBUGS-35076: Release Fix CVE go-jose [#542](https://github.com/openshift/telemeter/pull/542) * [OCPBUGS-32890](https://issues.redhat.com/browse/OCPBUGS-32890): CVE-2024-28180 bump go-jose to v3.0.3 [#531](https://github.com/openshift/telemeter/pull/531) * [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Updating telemeter-container image to be consistent with ART [#496](https://github.com/openshift/telemeter/pull/496) * [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515) * [RHOBS-956](https://issues.redhat.com/browse/RHOBS-956): Rename subscription_labels to ocm_subscription [#495](https://github.com/openshift/telemeter/pull/495) * [OCPBUGS-22744](https://issues.redhat.com/browse/OCPBUGS-22744): go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… [#493](https://github.com/openshift/telemeter/pull/493) * rhelemeter: Parse org and cn with regex [#492](https://github.com/openshift/telemeter/pull/492) * rhelemeter: Validation of incoming metrics [#491](https://github.com/openshift/telemeter/pull/491) * add `machine424` and `rexagod` to OWNERS [#478](https://github.com/openshift/telemeter/pull/478) * Bump golang 1.20 [#490](https://github.com/openshift/telemeter/pull/490) * [OCPBUGS-21636](https://issues.redhat.com/browse/OCPBUGS-21636): Bump golang.org/x/net to v0.17.0 [#483](https://github.com/openshift/telemeter/pull/483) * Server: Add support for shipping traces to an otel collector [#482](https://github.com/openshift/telemeter/pull/482) * rhelemeter: support client info file in jsonnet [#481](https://github.com/openshift/telemeter/pull/481) * [OCPBUGS-19248](https://issues.redhat.com/browse/OCPBUGS-19248): Updating telemeter images to be consistent with ART [#480](https://github.com/openshift/telemeter/pull/480) * Fix: handle authorization server 403 responses [#479](https://github.com/openshift/telemeter/pull/479) * [RHOBS-870](https://issues.redhat.com/browse/RHOBS-870): Improve logging [#477](https://github.com/openshift/telemeter/pull/477) * [RHOBS-855](https://issues.redhat.com/browse/RHOBS-855): rhelemeter: Read client info/data from request [#476](https://github.com/openshift/telemeter/pull/476) * [Full changelog](https://github.com/openshift/telemeter/compare/c683f6571479cdb0e7577a22e9cf0f64d9ed77f9...14489f7dc656175e11a3ef962fcbcd113b3651a9) ### [tests](https://github.com/openshift/origin/tree/95ee44e02b9980e3d1e875b9eb367b19a1536d4d) * [OCPBUGS-39136](https://issues.redhat.com/browse/OCPBUGS-39136): Bump timeout for the pod-network-service endpoints check [#29053](https://github.com/openshift/origin/pull/29053) * [OCPBUGS-38787](https://issues.redhat.com/browse/OCPBUGS-38787): [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28994](https://github.com/openshift/origin/pull/28994) * [OCPBUGS-36264](https://issues.redhat.com/browse/OCPBUGS-36264): add Proxy config [#28912](https://github.com/openshift/origin/pull/28912) * [OCPBUGS-37630](https://issues.redhat.com/browse/OCPBUGS-37630): remove unused in-cluster monitoring code [#28956](https://github.com/openshift/origin/pull/28956) * #28746 FIX [release-4.15] OCPBUGS-33023: update egressFWTestE2E image which contains ping binary [#28898](https://github.com/openshift/origin/pull/28898) * [OCPBUGS-36724](https://issues.redhat.com/browse/OCPBUGS-36724): Removes dependency on samples operator images [#28927](https://github.com/openshift/origin/pull/28927) * [OCPBUGS-36319](https://issues.redhat.com/browse/OCPBUGS-36319): Only look for thanos connections to platform monitoring stack [#28915](https://github.com/openshift/origin/pull/28915) * [OCPBUGS-34949](https://issues.redhat.com/browse/OCPBUGS-34949): test/extended: skip etcd leader change check on hypershift [#28919](https://github.com/openshift/origin/pull/28919) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add test for UpgradeValidation contention [#28820](https://github.com/openshift/origin/pull/28820) * [OCPBUGS-33368](https://issues.redhat.com/browse/OCPBUGS-33368): [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs [#28821](https://github.com/openshift/origin/pull/28821) * #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28791](https://github.com/openshift/origin/pull/28791) * [OCPBUGS-26520](https://issues.redhat.com/browse/OCPBUGS-26520): Kuryr: Ignore Upgradeable=False on operators tests [#28512](https://github.com/openshift/origin/pull/28512) * [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#28780](https://github.com/openshift/origin/pull/28780) * [OCPBUGS-33541](https://issues.redhat.com/browse/OCPBUGS-33541): Adjust the method of get the apiServer (release-4.15) [#28762](https://github.com/openshift/origin/pull/28762) * [OCPBUGS-33473](https://issues.redhat.com/browse/OCPBUGS-33473): [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs [#28666](https://github.com/openshift/origin/pull/28666) * : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test [#28724](https://github.com/openshift/origin/pull/28724) * [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Use centos7 tag instead of latest for cmd images tests [#28688](https://github.com/openshift/origin/pull/28688) * [OCPBUGS-30892](https://issues.redhat.com/browse/OCPBUGS-30892): fix panic on non-standard node-role labels [#28656](https://github.com/openshift/origin/pull/28656) * [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637) * [OCPBUGS-30161](https://issues.redhat.com/browse/OCPBUGS-30161): Skip tests for image-registry operator with single replica [#28633](https://github.com/openshift/origin/pull/28633) * [OCPBUGS-29927](https://issues.redhat.com/browse/OCPBUGS-29927): Only extract node role from properly formatted node-role label [#28615](https://github.com/openshift/origin/pull/28615) * [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610) * [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545) * [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573) * [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508) * [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550) * [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519) * [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28549](https://github.com/openshift/origin/pull/28549) * [OCPBUGS-27348](https://issues.redhat.com/browse/OCPBUGS-27348): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28531](https://github.com/openshift/origin/pull/28531) * fix jira components to match actual jira components [#28455](https://github.com/openshift/origin/pull/28455) * [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28533](https://github.com/openshift/origin/pull/28533) * [OCPBUGS-27217](https://issues.redhat.com/browse/OCPBUGS-27217): [4.15] Live migration suite e2e [#28524](https://github.com/openshift/origin/pull/28524) * [OCPBUGS-26043](https://issues.redhat.com/browse/OCPBUGS-26043): Adding test case for when exceed openshift.io/image-tags will ban to … [#28492](https://github.com/openshift/origin/pull/28492) * [OCPBUGS-25724](https://issues.redhat.com/browse/OCPBUGS-25724): Cherrypick Ruby 3.0 ImageStream Fix [#28483](https://github.com/openshift/origin/pull/28483) * [TRT-1408](https://issues.redhat.com/browse/TRT-1408): Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… [#28520](https://github.com/openshift/origin/pull/28520) * [OCPBUGS-26239](https://issues.redhat.com/browse/OCPBUGS-26239): Properly ignore kube guard probe events [#28504](https://github.com/openshift/origin/pull/28504) * [OCPBUGS-26206](https://issues.redhat.com/browse/OCPBUGS-26206): Update cluster-monitoring-operator request limits [#28506](https://github.com/openshift/origin/pull/28506) * [OCPBUGS-24583](https://issues.redhat.com/browse/OCPBUGS-24583): push violation regression check into the default requirement result [#28433](https://github.com/openshift/origin/pull/28433) * OWNER_ALIASES: update CoreOS team leads [#28447](https://github.com/openshift/origin/pull/28447) * NOJIRA: collect certificate data: use SkipHashed option [#28443](https://github.com/openshift/origin/pull/28443) * NO-JIRA: Increase cluster-capi-operator watch count take2 [#28424](https://github.com/openshift/origin/pull/28424) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Conditionally skip tests to help with k8s 1.29 [#28436](https://github.com/openshift/origin/pull/28436) * NO-JIRA: Add test case for namespaced filename in oc process [#28440](https://github.com/openshift/origin/pull/28440) * [API-1524](https://issues.redhat.com/browse/API-1524): ignore stale condition challenge events [#28438](https://github.com/openshift/origin/pull/28438) * [TRT-1359](https://issues.redhat.com/browse/TRT-1359): Ignore azure interaction errors since they are not fatal for our usage [#28420](https://github.com/openshift/origin/pull/28420) * [TRT-1347](https://issues.redhat.com/browse/TRT-1347): Add ability to indicate a monitor test was skipped [#28425](https://github.com/openshift/origin/pull/28425) * NO JIRA: update cert data [#28437](https://github.com/openshift/origin/pull/28437) * [OTA-362](https://issues.redhat.com/browse/OTA-362): pkg/monitortests/clusterversionoperator: Fatal unless Available=False in allow-list [#27231](https://github.com/openshift/origin/pull/27231) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Update ETCD storage data for k8s 1.29 [#28435](https://github.com/openshift/origin/pull/28435) * [OCPBUGS-24290](https://issues.redhat.com/browse/OCPBUGS-24290): cert metadata: generate jsons and markdown for missing metadata viola [#28432](https://github.com/openshift/origin/pull/28432) * NO-JIRA: test/e2e/upgrade/monitor: --abort-at=100 requires a complete update [#28402](https://github.com/openshift/origin/pull/28402) * eliminate the closed channel race in pod_log_streamer [#28426](https://github.com/openshift/origin/pull/28426) * [OSASINFRA-3291](https://issues.redhat.com/browse/OSASINFRA-3291): Remove Kuryr bits [#28397](https://github.com/openshift/origin/pull/28397) * [OCPCLOUD-2256](https://issues.redhat.com/browse/OCPCLOUD-2256): Increase cluster-capi-operator watch count [#28422](https://github.com/openshift/origin/pull/28422) * [TRT-1329](https://issues.redhat.com/browse/TRT-1329): Refactor pathological events framework [#28399](https://github.com/openshift/origin/pull/28399) * [SO-117](https://issues.redhat.com/browse/SO-117): Removing Ruby 2.7 UBI7-8 tests [#28418](https://github.com/openshift/origin/pull/28418) * trt-1367: Get JobType After Collection Ends [#28415](https://github.com/openshift/origin/pull/28415) * [TRT-1235](https://issues.redhat.com/browse/TRT-1235): Add ability to specify alerts that should never fire [#28411](https://github.com/openshift/origin/pull/28411) * [TRT-1362](https://issues.redhat.com/browse/TRT-1362): Update disruption/alert test data and fix unit test [#28409](https://github.com/openshift/origin/pull/28409) * make it slightly easy to produce markdown with table of contents [#28407](https://github.com/openshift/origin/pull/28407) * update the TLS ownership files [#28394](https://github.com/openshift/origin/pull/28394) * update cert inspect to skip the rest of proxy-CAs [#28406](https://github.com/openshift/origin/pull/28406) * [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): test: ignore deprecation warnings in command outputs [#28404](https://github.com/openshift/origin/pull/28404) * collect certificate data: rewrite configmap/secret names [#28405](https://github.com/openshift/origin/pull/28405) * Certs 11 fix certs after break [#28395](https://github.com/openshift/origin/pull/28395) * ignore stale condition challenge events [#28204](https://github.com/openshift/origin/pull/28204) * [TRT-1274](https://issues.redhat.com/browse/TRT-1274): get azure disk metrics and create relevant intervals [#28375](https://github.com/openshift/origin/pull/28375) * Revert "TRT-1339: Revert #28233 "ignore repeated TopologyAwareHintsDisabled events"" [#28386](https://github.com/openshift/origin/pull/28386) * [OCPBUGS-23079](https://issues.redhat.com/browse/OCPBUGS-23079): fix: increase watch count for KubeControllerManagerOperator [#28388](https://github.com/openshift/origin/pull/28388) * [OCPBUGS-23102](https://issues.redhat.com/browse/OCPBUGS-23102): Revert "[sig-instrumentation] tests fail due to JSON parsing error." [#28389](https://github.com/openshift/origin/pull/28389) * [OCPBUGS-23084](https://issues.redhat.com/browse/OCPBUGS-23084): expect to not see "git clone" and not just "clone" during a test [#28352](https://github.com/openshift/origin/pull/28352) * [TRT-1354](https://issues.redhat.com/browse/TRT-1354): Add support for intervals to have row differentiators [#28376](https://github.com/openshift/origin/pull/28376) * [OCPBUGS-18776](https://issues.redhat.com/browse/OCPBUGS-18776): [sig-instrumentation] tests fail due to JSON parsing error. [#28320](https://github.com/openshift/origin/pull/28320) * "TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest" [#28372](https://github.com/openshift/origin/pull/28372) * trt-1340: update run-upgrade to use ginkgorunsuiteoptions [#28380](https://github.com/openshift/origin/pull/28380) * [TRT-1339](https://issues.redhat.com/browse/TRT-1339): Revert #28233 "ignore repeated TopologyAwareHintsDisabled events" [#28381](https://github.com/openshift/origin/pull/28381) * trt-1344: remove msg assertion [#28379](https://github.com/openshift/origin/pull/28379) * Add test which verifies every certificate has necessary annotations [#28305](https://github.com/openshift/origin/pull/28305) * [OCPBUGS-19527](https://issues.redhat.com/browse/OCPBUGS-19527): retry Prometheus client creation [#28323](https://github.com/openshift/origin/pull/28323) * [OCPBUGS-20479](https://issues.redhat.com/browse/OCPBUGS-20479): Add pod sandbox failures to e2e charts [#28366](https://github.com/openshift/origin/pull/28366) * skip revisioned certificates in raw info [#28370](https://github.com/openshift/origin/pull/28370) * [TRT-1340](https://issues.redhat.com/browse/TRT-1340): Increase cmd support for ExactMonitorTests and DisableMonitorTests [#28371](https://github.com/openshift/origin/pull/28371) * [OCPBUGS-22703](https://issues.redhat.com/browse/OCPBUGS-22703): tolerate AWS edge nodes on monitor tests [#28363](https://github.com/openshift/origin/pull/28363) * Revert "OCPBUGS-22413: Use Centos 8 Stream mysql image in tests" [#28367](https://github.com/openshift/origin/pull/28367) * Skip FailedScheduling intervals when masters are in NodeUpdate [#28358](https://github.com/openshift/origin/pull/28358) * [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Use Centos 8 Stream mysql image in tests [#28357](https://github.com/openshift/origin/pull/28357) * Allow the unknown alerts test to fail as it looks stable [#28345](https://github.com/openshift/origin/pull/28345) * add hack/update-tls-ownership.sh [#28359](https://github.com/openshift/origin/pull/28359) * Drop not-used pulledInvalidImages method [#28330](https://github.com/openshift/origin/pull/28330) * start adding raw tls info [#28334](https://github.com/openshift/origin/pull/28334) * Restore APIServer graceful shutdown windows [#28354](https://github.com/openshift/origin/pull/28354) * Fix intervals mistakenly showing mass node NotReady [#28351](https://github.com/openshift/origin/pull/28351) * Remove timelines command reprocessing intervals [#28348](https://github.com/openshift/origin/pull/28348) * [OCPBUGS-22358](https://issues.redhat.com/browse/OCPBUGS-22358): fix: increase upper bounds for samples operator [#28353](https://github.com/openshift/origin/pull/28353) * put back previous Interval Slice algorithm [#28344](https://github.com/openshift/origin/pull/28344) * [OCPBUGS-22276](https://issues.redhat.com/browse/OCPBUGS-22276): Remove all docker.io images due to access denied [#28347](https://github.com/openshift/origin/pull/28347) * Restore Node NotReady intervals [#28349](https://github.com/openshift/origin/pull/28349) * trt-1320: update trt approvers [#28343](https://github.com/openshift/origin/pull/28343) * Port remaining clusteroperator monitor intervals to structured [#28341](https://github.com/openshift/origin/pull/28341) * Improvements and Additions to Alert Testing Stack [#28332](https://github.com/openshift/origin/pull/28332) * Automated - Update synthetic test data [#28237](https://github.com/openshift/origin/pull/28237) * prune the system CAs from proxy-ca in rawTLSInfo json [#28336](https://github.com/openshift/origin/pull/28336) * add test tracking raw cert data [#28321](https://github.com/openshift/origin/pull/28321) * [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Require http 1.1 or earlier when using curl [#28301](https://github.com/openshift/origin/pull/28301) * Port Node and Pod State to Structured Intervals [#28299](https://github.com/openshift/origin/pull/28299) * Extract the cluster operator name from Down/Degraded Alerts [#28331](https://github.com/openshift/origin/pull/28331) * fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities [#28329](https://github.com/openshift/origin/pull/28329) * Remove some redundant monitor tests [#28326](https://github.com/openshift/origin/pull/28326) * [OCPVE-723](https://issues.redhat.com/browse/OCPVE-723): Add optional olm fixes [#28302](https://github.com/openshift/origin/pull/28302) * Add debug info for interval counts and times [#28311](https://github.com/openshift/origin/pull/28311) * [OCPBUGS-20205](https://issues.redhat.com/browse/OCPBUGS-20205): feat: added support for ImageRegistry capability [#28307](https://github.com/openshift/origin/pull/28307) * [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Revert "OCPBUGS-13366: ignore repeated TopologyAwareHintsDisabled events" [#28233](https://github.com/openshift/origin/pull/28233) * pkg/monitortests/clusterversionoperator/legacycvomonitortests: Structured condition types [#28306](https://github.com/openshift/origin/pull/28306) * Bump watch requests for cluster-baremetal-operator [#28324](https://github.com/openshift/origin/pull/28324) * test/extended/images: update OWNERS [#28322](https://github.com/openshift/origin/pull/28322) * hs, kubevirt: Wait node readiness before migration [#28312](https://github.com/openshift/origin/pull/28312) * fix for OCP-11594 to skipped on disconnected env [#28316](https://github.com/openshift/origin/pull/28316) * [SDN-4062](https://issues.redhat.com/browse/SDN-4062): Revert "SDN-4042: Increase total upgrade time on OVN platforms" [#28315](https://github.com/openshift/origin/pull/28315) * trt-1271: add risk analysis for monitor junit suites [#28309](https://github.com/openshift/origin/pull/28309) * Revert #28295 "Automating test \"check the quota after import-image with --all option\" in upstrem" [#28313](https://github.com/openshift/origin/pull/28313) * test/extended: Consolidate hard-coded local image registry dependencies [#28308](https://github.com/openshift/origin/pull/28308) * Limit intervals to the current phase (addresses loki upload problems) [#28294](https://github.com/openshift/origin/pull/28294) * Fix bug with disable-monitor [#28293](https://github.com/openshift/origin/pull/28293) * Remove bug-related annotations [#28298](https://github.com/openshift/origin/pull/28298) * [OPNET-330](https://issues.redhat.com/browse/OPNET-330): fix DualStackIPv6Primary [#28292](https://github.com/openshift/origin/pull/28292) * Automating test "check the quota after import-image with --all option" in upstrem [#28295](https://github.com/openshift/origin/pull/28295) * Properly default --from-repository in run-monitor [#28285](https://github.com/openshift/origin/pull/28285) * [OCPBUGS-19909](https://issues.redhat.com/browse/OCPBUGS-19909): Updating parameters for build timing PushImage test [#28288](https://github.com/openshift/origin/pull/28288) * make it possible to select which monitor tests to run [#28215](https://github.com/openshift/origin/pull/28215) * Revert "Disable EgressIP test temporarily due to OVN-K bug" [#28283](https://github.com/openshift/origin/pull/28283) * Port the clusteroperator intervals to new structured format [#28262](https://github.com/openshift/origin/pull/28262) * Revert "Force using mirrored images in disruption tests" [#28286](https://github.com/openshift/origin/pull/28286) * Bump openshift/kubernetes to get vSphere fix [#28278](https://github.com/openshift/origin/pull/28278) * Force using mirrored images in disruption tests [#28258](https://github.com/openshift/origin/pull/28258) * kubevirt: Add live migration tests [#27980](https://github.com/openshift/origin/pull/27980) * some monitor tests only function on disruptive tests [#28251](https://github.com/openshift/origin/pull/28251) * wait for the service to have endpoints before starting pollers [#28242](https://github.com/openshift/origin/pull/28242) * fix PR 28224 [#28238](https://github.com/openshift/origin/pull/28238) * [OCPBUGS-18141](https://issues.redhat.com/browse/OCPBUGS-18141): retry query on MetricsAvailableAfterUpgradeTest setup [#28228](https://github.com/openshift/origin/pull/28228) * Revert "OCPBUGS-18865: add monitortest: in-cluster disruption monitors" [#28274](https://github.com/openshift/origin/pull/28274) * [OCPBUGS-19293](https://issues.redhat.com/browse/OCPBUGS-19293): Updating openshift-enterprise-tests images to be consistent with ART [#28264](https://github.com/openshift/origin/pull/28264) * [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): rteval [#28261](https://github.com/openshift/origin/pull/28261) * add pod log streaming to monitor for etcd so we see all intervals [#28243](https://github.com/openshift/origin/pull/28243) * [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): add monitortest: in-cluster disruption monitors [#28231](https://github.com/openshift/origin/pull/28231) * [AUTH-365](https://issues.redhat.com/browse/AUTH-365): add PodSecurityViolation to watched alerts [#28226](https://github.com/openshift/origin/pull/28226) * [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): remove exception for MultipleDefaultStorageClasses [#28042](https://github.com/openshift/origin/pull/28042) * remove unnecessary file from cmd folder [#27979](https://github.com/openshift/origin/pull/27979) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28 [#28097](https://github.com/openshift/origin/pull/28097) * Revert "Improvements and fixes for Loki intervals uploader" [#28268](https://github.com/openshift/origin/pull/28268) * Adding leader election information to timeline [#28225](https://github.com/openshift/origin/pull/28225) * Improvements and fixes for Loki intervals uploader [#28053](https://github.com/openshift/origin/pull/28053) * Bring in updates k8s to disable networking test [#28256](https://github.com/openshift/origin/pull/28256) * When --from-repository use built-in tests only [#28253](https://github.com/openshift/origin/pull/28253) * [HyperShift/KubeVirt] Raise wait time between pod exec attempts [#28249](https://github.com/openshift/origin/pull/28249) * Revert fake image injections for k8s 1.28 [#28250](https://github.com/openshift/origin/pull/28250) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28248](https://github.com/openshift/origin/pull/28248) * [OCP-66086](https://issues.redhat.com/browse/OCP-66086): Automate PSAP NTO Prevent from stalld continually restarting [#28157](https://github.com/openshift/origin/pull/28157) * Bug OCPBUGS-18718 Remove duplicate connection type from disruption name [#28245](https://github.com/openshift/origin/pull/28245) * [OCPVE-295](https://issues.redhat.com/browse/OCPVE-295): fix: add rteval to the test image [#28220](https://github.com/openshift/origin/pull/28220) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Add images coming in k8s 1.28 [#28200](https://github.com/openshift/origin/pull/28200) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Disable NetworkPolicyStatus tests [#28177](https://github.com/openshift/origin/pull/28177) * [Full changelog](https://github.com/openshift/origin/compare/d44a62a72c314a3711a4389c9b989bb707ae2161...95ee44e02b9980e3d1e875b9eb367b19a1536d4d) ### [thanos](https://github.com/openshift/thanos/tree/66161ad4e03e5593f5a3a33aaaffbcd41555d62a) * [OCPBUGS-22741](https://issues.redhat.com/browse/OCPBUGS-22741): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 [#131](https://github.com/openshift/thanos/pull/131) * Bump openshift/thanos to v0.32.5 [#129](https://github.com/openshift/thanos/pull/129) * [OCPBUGS-21630](https://issues.redhat.com/browse/OCPBUGS-21630): Bump golang.org/x/net to v0.17.0 [#123](https://github.com/openshift/thanos/pull/123) * Bump openshift/thanos to v0.32.4 [#121](https://github.com/openshift/thanos/pull/121) * [OCPBUGS-19406](https://issues.redhat.com/browse/OCPBUGS-19406): Fix rh-manifest.txt generation [#120](https://github.com/openshift/thanos/pull/120) * [OCPBUGS-19206](https://issues.redhat.com/browse/OCPBUGS-19206): Updating thanos images to be consistent with ART [#117](https://github.com/openshift/thanos/pull/117) * Bump openshift/thanos to v0.32.3 [#118](https://github.com/openshift/thanos/pull/118) * update OWNERS file [#119](https://github.com/openshift/thanos/pull/119) * Bump Thanos v0.32.2 [#115](https://github.com/openshift/thanos/pull/115) * [Full changelog](https://github.com/openshift/thanos/compare/a26712509e3f9c511926ca9d8bba3e3ea8e95ada...66161ad4e03e5593f5a3a33aaaffbcd41555d62a) ### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/81ad52ad7bcf37b225bc50a6e6150ca0572057b7) * [OCPBUGS-37659](https://issues.redhat.com/browse/OCPBUGS-37659): Bump otelgrpc to v0.49.0 [#71](https://github.com/openshift/cloud-provider-vsphere/pull/71) * [OCPBUGS-24157](https://issues.redhat.com/browse/OCPBUGS-24157): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART [#58](https://github.com/openshift/cloud-provider-vsphere/pull/58) * [OCPCLOUD-2184](https://issues.redhat.com/browse/OCPCLOUD-2184): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ff83354) into master [#42](https://github.com/openshift/cloud-provider-vsphere/pull/42) * Update OWNERS [#51](https://github.com/openshift/cloud-provider-vsphere/pull/51) * [OCPBUGS-19255](https://issues.redhat.com/browse/OCPBUGS-19255): Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#48](https://github.com/openshift/cloud-provider-vsphere/pull/48) * [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/b04567f77273f6c338ece9fda29c0a65297130d5...81ad52ad7bcf37b225bc50a6e6150ca0572057b7) ### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/5611168658586d68b5a92c77c07304694fc2cc64) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#38](https://github.com/openshift/cluster-api-provider-vsphere/pull/38) * [OCPBUGS-26476](https://issues.redhat.com/browse/OCPBUGS-26476): UPSTREAM: <carry>: bump x/crypto [#35](https://github.com/openshift/cluster-api-provider-vsphere/pull/35) * [OCPBUGS-24074](https://issues.redhat.com/browse/OCPBUGS-24074): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART [#26](https://github.com/openshift/cluster-api-provider-vsphere/pull/26) * [OCPCLOUD-2257](https://issues.redhat.com/browse/OCPCLOUD-2257): Use manifests generation tool from provider repo [#27](https://github.com/openshift/cluster-api-provider-vsphere/pull/27) * [OCPCLOUD-1609](https://issues.redhat.com/browse/OCPCLOUD-1609): Add InternalDNS address to vSphereVM [#19](https://github.com/openshift/cluster-api-provider-vsphere/pull/19) * [OCPBUGS-22152](https://issues.redhat.com/browse/OCPBUGS-22152): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.3 (ef8d014) into master [#22](https://github.com/openshift/cluster-api-provider-vsphere/pull/22) * Update OWNERS [#21](https://github.com/openshift/cluster-api-provider-vsphere/pull/21) * [OCPCLOUD-2219](https://issues.redhat.com/browse/OCPCLOUD-2219): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.1 (2b22dd7) into master [#18](https://github.com/openshift/cluster-api-provider-vsphere/pull/18) * [OCPBUGS-19109](https://issues.redhat.com/browse/OCPBUGS-19109): Updating ose-vsphere-cluster-api-controllers images to be consistent with ART [#17](https://github.com/openshift/cluster-api-provider-vsphere/pull/17) * [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/72e998c300e17a7ba81d4a5a7624d69b0a104603...5611168658586d68b5a92c77c07304694fc2cc64) ### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4b15e93bd578484c4bfb1c124fa655c451bbd1ca) * [OCPBUGS-33604](https://issues.redhat.com/browse/OCPBUGS-33604): FailedPrecondition volume does not appear staged [#118](https://github.com/openshift/vmware-vsphere-csi-driver/pull/118) * [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110) * [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109) * [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107) * [OCPBUGS-24136](https://issues.redhat.com/browse/OCPBUGS-24136): Updating vmware-vsphere-syncer-container image to be consistent with ART [#99](https://github.com/openshift/vmware-vsphere-csi-driver/pull/99) * [OCPBUGS-24141](https://issues.redhat.com/browse/OCPBUGS-24141): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART [#100](https://github.com/openshift/vmware-vsphere-csi-driver/pull/100) * [STOR-1396](https://issues.redhat.com/browse/STOR-1396): Rebase to v3.1.1 for OCP 4.15 [#97](https://github.com/openshift/vmware-vsphere-csi-driver/pull/97) * [OCPBUGS-16550](https://issues.redhat.com/browse/OCPBUGS-16550): UPSTREAM: 2511: Bump github.com/elazarl/goproxy to fix CVE-2023-37788 [#95](https://github.com/openshift/vmware-vsphere-csi-driver/pull/95) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/vmware-vsphere-csi-driver/pull/89) * [OCPBUGS-19220](https://issues.redhat.com/browse/OCPBUGS-19220): Updating vmware-vsphere-syncer images to be consistent with ART [#86](https://github.com/openshift/vmware-vsphere-csi-driver/pull/86) * [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver images to be consistent with ART [#87](https://github.com/openshift/vmware-vsphere-csi-driver/pull/87) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/4598e1709f3e28f2fcd5c890df33e16ff81b7c8f...4b15e93bd578484c4bfb1c124fa655c451bbd1ca) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e0d46570a06caff3439b410b9c9f75cb383a3d2d) * [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219) * [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216) * [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207) * [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205) * [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204) * [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200) * [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192) * [OCPBUGS-23342](https://issues.redhat.com/browse/OCPBUGS-23342): Add dummy Progressing condition on blocked driver install [#191](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/191) * [OCPBUGS-22476](https://issues.redhat.com/browse/OCPBUGS-22476): Explicitly degrade the cluster when conditions are not met [#183](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/183) * [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#190](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/190) * [OCPBUGS-20481](https://issues.redhat.com/browse/OCPBUGS-20481): Implement fallback to configmap when Infra object does not have vCenter [#189](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/189) * [OCPBUGS-20481](https://issues.redhat.com/browse/OCPBUGS-20481): Fix vsphere csi controller pods from getting constantly restarted [#187](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/187) * [OCPBUGS-22639](https://issues.redhat.com/browse/OCPBUGS-22639): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#185](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/185) * [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#165](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/165) * [OCPBUGS-22385](https://issues.redhat.com/browse/OCPBUGS-22385): disable http/2 server support in webhook [#179](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/179) * [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#181](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/181) * [OCPBUGS-21826](https://issues.redhat.com/browse/OCPBUGS-21826): Warn when managment state is set to values other than Managed [#178](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/178) * [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#172](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/172) * [OCPBUGS-19198](https://issues.redhat.com/browse/OCPBUGS-19198): Updating ose-vmware-vsphere-csi-driver-operator images to be consistent with ART [#170](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/170) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5d5105f93e02ba0c4c07890b3db630b11d839abf...e0d46570a06caff3439b410b9c9f75cb383a3d2d) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be) * [OCPBUGS-37760](https://issues.redhat.com/browse/OCPBUGS-37760): Drop event when CheckDefaultDatastore fails [#170](https://github.com/openshift/vsphere-problem-detector/pull/170) * [OCPBUGS-35732](https://issues.redhat.com/browse/OCPBUGS-35732): Fix missing failure-domains [#161](https://github.com/openshift/vsphere-problem-detector/pull/161) * [OCPBUGS-25648](https://issues.redhat.com/browse/OCPBUGS-25648): Fix VPD crash when vm is not found [#149](https://github.com/openshift/vsphere-problem-detector/pull/149) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/ece171d2d5b5fa417d1aece9aa80714841c35cec...15ed0ae1d7bcfc9fd24e32bf3650e0e960c115be)