# 4.17.0-rc.5

Created: 2024-09-20 03:40:13 +0000 UTC

Image Digest: `sha256:5b1399dc8175d7d26611c2541962d101948cba6a951ed3dd51cddf75afbab303`


## Changes from 4.17.0-rc.4

### Components

* Kubectl 1.30.2
* Kubernetes 1.30.4
* Kubernetes Tests 1.30.0
* Red Hat Enterprise Linux CoreOS 417.94.202409120353-0


### [docker-builder](https://github.com/openshift/builder/tree/cfcf3bdf23c5e589b18577f038e4e2d6267e9409)

* [OCPBUGS-41225](https://issues.redhat.com/browse/OCPBUGS-41225): Prevent Build Inputs "Zip-Slip" [#2](https://github.com/openshift/builder/pull/2)
* [OCPBUGS-33215](https://issues.redhat.com/browse/OCPBUGS-33215): Bumps openshift/api & related dependencies [#394](https://github.com/openshift/builder/pull/394)
* [OCPBUGS-25495](https://issues.redhat.com/browse/OCPBUGS-25495): Upgrade s2i and buildah [#392](https://github.com/openshift/builder/pull/392)
* [OCPBUGS-30672](https://issues.redhat.com/browse/OCPBUGS-30672): bump go-jose to fix CVE-2024-28176 [#386](https://github.com/openshift/builder/pull/386)
* [OCPBUGS-31930](https://issues.redhat.com/browse/OCPBUGS-31930): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#385](https://github.com/openshift/builder/pull/385)
* [OCPBUGS-24746](https://issues.redhat.com/browse/OCPBUGS-24746): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 [#382](https://github.com/openshift/builder/pull/382)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#380](https://github.com/openshift/builder/pull/380)
* [OCPBUGS-28661](https://issues.redhat.com/browse/OCPBUGS-28661): Replace 'coreydaley' with 'sayan-biswas' [#377](https://github.com/openshift/builder/pull/377)
* [OCPBUGS-23128](https://issues.redhat.com/browse/OCPBUGS-23128): bump github.com/containers/buildah to fix transient mounting in chroot isolation [#358](https://github.com/openshift/builder/pull/358)
* [OCPBUGS-22497](https://issues.redhat.com/browse/OCPBUGS-22497): Add -p flag to cp command to preserve timestamps [#369](https://github.com/openshift/builder/pull/369)
* [OCPBUGS-21969](https://issues.redhat.com/browse/OCPBUGS-21969): Mitigate CVE-2023-39325 [#361](https://github.com/openshift/builder/pull/361)
* [OCPBUGS-20407](https://issues.redhat.com/browse/OCPBUGS-20407): drop the Overlay setting from transient mounts [#359](https://github.com/openshift/builder/pull/359)
* [OCPBUGS-18855](https://issues.redhat.com/browse/OCPBUGS-18855): Updating openshift-enterprise-builder images to be consistent with ART [#357](https://github.com/openshift/builder/pull/357)
* [BUILD-432](https://issues.redhat.com/browse/BUILD-432): mount secrets as "overlay" mounts [#349](https://github.com/openshift/builder/pull/349)
* [OCPBUGS-16070](https://issues.redhat.com/browse/OCPBUGS-16070): Updating Kubernetes and other associated dependencies [#356](https://github.com/openshift/builder/pull/356)
* [OCPBUGS-15497](https://issues.redhat.com/browse/OCPBUGS-15497): Add the git-lfs package [#350](https://github.com/openshift/builder/pull/350)
* [OCPBUGS-14798](https://issues.redhat.com/browse/OCPBUGS-14798): Adds reference to contributing.md [#346](https://github.com/openshift/builder/pull/346)
* [OCPBUGS-14484](https://issues.redhat.com/browse/OCPBUGS-14484): Kubernetes 0.27 [#347](https://github.com/openshift/builder/pull/347)
* [OCPBUGS-1973](https://issues.redhat.com/browse/OCPBUGS-1973): pass CPU limits for Docker strategy builds [#341](https://github.com/openshift/builder/pull/341)
* Updating openshift-enterprise-builder images to be consistent with ART [#345](https://github.com/openshift/builder/pull/345)
* Updating openshift-enterprise-builder images to be consistent with ART [#344](https://github.com/openshift/builder/pull/344)
* Updating openshift-enterprise-builder images to be consistent with ART [#343](https://github.com/openshift/builder/pull/343)
* [OCPBUGS-3064](https://issues.redhat.com/browse/OCPBUGS-3064): normalize locations in pull/push secrets which might look like URLs [#330](https://github.com/openshift/builder/pull/330)
* Bump golang.org/x/net from 0.5.0 to 0.7.0 [#338](https://github.com/openshift/builder/pull/338)
* Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 [#337](https://github.com/openshift/builder/pull/337)
* [OCPBUGS-7782](https://issues.redhat.com/browse/OCPBUGS-7782): bump(github.com/containers/common) to v0.51.2 [#335](https://github.com/openshift/builder/pull/335)
* Adding Divyanshu Agrawal as a reviewer [#334](https://github.com/openshift/builder/pull/334)
* Replacing openshift-goimports with goio [#333](https://github.com/openshift/builder/pull/333)
* Updating development setup steps [#331](https://github.com/openshift/builder/pull/331)
* Updating openshift-enterprise-builder images to be consistent with ART [#332](https://github.com/openshift/builder/pull/332)
* Update CONTRIBUTING.md [#329](https://github.com/openshift/builder/pull/329)
* [OCPBUGS-7412](https://issues.redhat.com/browse/OCPBUGS-7412): Fix k8s.io/dynamic-resource-allocation error [#328](https://github.com/openshift/builder/pull/328)
* Modified clusterversion patch command [#327](https://github.com/openshift/builder/pull/327)
* [BUILD-549](https://issues.redhat.com/browse/BUILD-549): bump(*) kubernetes-1.26 [#326](https://github.com/openshift/builder/pull/326)
* [OCPBUGS-597](https://issues.redhat.com/browse/OCPBUGS-597): bump(github.com/containers/buildah) to v1.29.0 [#307](https://github.com/openshift/builder/pull/307)
* [OCPBUGS-6014](https://issues.redhat.com/browse/OCPBUGS-6014): manage-dockerfile: use the original form of HEALTHCHECK [#323](https://github.com/openshift/builder/pull/323)
* Updating openshift-enterprise-builder images to be consistent with ART [#319](https://github.com/openshift/builder/pull/319)
* Update to go1.19 [#320](https://github.com/openshift/builder/pull/320)
* [BUILD-530](https://issues.redhat.com/browse/BUILD-530): Rebase to k8s.io 1.25 [#316](https://github.com/openshift/builder/pull/316)
* bump(github.com/containers/buildah) to v1.26.4 [#306](https://github.com/openshift/builder/pull/306)
* bump github.com/containers/buildah to v1.26.2 [#304](https://github.com/openshift/builder/pull/304)
* Attempt to create /dev/fuse at startup [#305](https://github.com/openshift/builder/pull/305)
* [Bug 2099991](https://bugzilla.redhat.com/show_bug.cgi?id=2099991): Add support for BUILDAH_QUIET environment variable [#303](https://github.com/openshift/builder/pull/303)
* Set _CONTAINERS_USERNS_CONFIGURED if we create a user namespace [#301](https://github.com/openshift/builder/pull/301)
* Updating openshift-enterprise-builder images to be consistent with ART [#302](https://github.com/openshift/builder/pull/302)
* [BUILD-416](https://issues.redhat.com/browse/BUILD-416): Rebase k8s 1.24 [#299](https://github.com/openshift/builder/pull/299)
* Update OWNERS file [#298](https://github.com/openshift/builder/pull/298)
* Updating openshift-enterprise-builder images to be consistent with ART [#297](https://github.com/openshift/builder/pull/297)
* [Bug 2075145](https://bugzilla.redhat.com/show_bug.cgi?id=2075145): Revert using --quiet with log levels below 2 [#296](https://github.com/openshift/builder/pull/296)
* [Bug 2067775](https://bugzilla.redhat.com/show_bug.cgi?id=2067775): Update prometheus client_golang from 1.11.0 => 1.11.1 [#294](https://github.com/openshift/builder/pull/294)
* main(): accept --loglevel as an alias for -v [#283](https://github.com/openshift/builder/pull/283)
* [Bug 2071364](https://bugzilla.redhat.com/show_bug.cgi?id=2071364): invalid syntax when parsing empty BUILD_LOGLEVEL [#293](https://github.com/openshift/builder/pull/293)
* [Bug 1996883](https://bugzilla.redhat.com/show_bug.cgi?id=1996883): Add --quiet option to buildah if log level is less than 2 [#288](https://github.com/openshift/builder/pull/288)
* [BUILD-433](https://issues.redhat.com/browse/BUILD-433): use the right mappings when we don't need to set any [#291](https://github.com/openshift/builder/pull/291)
* Updating openshift-enterprise-builder images to be consistent with ART [#284](https://github.com/openshift/builder/pull/284)
* [Bug 2026063](https://bugzilla.redhat.com/show_bug.cgi?id=2026063): Update buildah to v1.24.2 [#282](https://github.com/openshift/builder/pull/282)
* Add openshift goimports [#287](https://github.com/openshift/builder/pull/287)
* [Bug 2044244](https://bugzilla.redhat.com/show_bug.cgi?id=2044244): bump(github.com/containers/buildah) to v1.22.4 [#281](https://github.com/openshift/builder/pull/281)
* [Bug 2037638](https://bugzilla.redhat.com/show_bug.cgi?id=2037638): Add support for build csi volume source [#273](https://github.com/openshift/builder/pull/273)
* [Bug 2034650](https://bugzilla.redhat.com/show_bug.cgi?id=2034650): Rebase to k8s 1.23.0 [#277](https://github.com/openshift/builder/pull/277)
* Report User/Group ID when they cannot be parsed [#276](https://github.com/openshift/builder/pull/276)
* [Bug 1979966](https://bugzilla.redhat.com/show_bug.cgi?id=1979966): Update containers/storage to address incorrect overlay options being set on rhel7 nodes [#275](https://github.com/openshift/builder/pull/275)
* [Bug 2021551](https://bugzilla.redhat.com/show_bug.cgi?id=2021551): getAssembleUser(): strip the group part out before checking the UID [#270](https://github.com/openshift/builder/pull/270)
* [Bug 2011293](https://bugzilla.redhat.com/show_bug.cgi?id=2011293): add Red Hat registries to the default registries.conf included in the builder image [#266](https://github.com/openshift/builder/pull/266)
* Updating openshift-enterprise-builder images to be consistent with ART [#264](https://github.com/openshift/builder/pull/264)
* [Bug 1964327](https://bugzilla.redhat.com/show_bug.cgi?id=1964327): bump github.com/containers/buildah to v1.22.3 [#265](https://github.com/openshift/builder/pull/265)
* Dockerfiles: run `rpm --setcaps shadow-utils` during build [#256](https://github.com/openshift/builder/pull/256)
* Update OWNERS file [#260](https://github.com/openshift/builder/pull/260)
* [BUILD-278](https://issues.redhat.com/browse/BUILD-278): fix cgroupv2 memory max defaulting [#252](https://github.com/openshift/builder/pull/252)
* [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Rebase to Kubernetes 1.22 [#262](https://github.com/openshift/builder/pull/262)
* [Bug 1971332](https://bugzilla.redhat.com/show_bug.cgi?id=1971332): bump(s2i): revert incorrect ssh scp fix [#257](https://github.com/openshift/builder/pull/257)
* Let the serviceability package determine how to tie logrus to klog [#255](https://github.com/openshift/builder/pull/255)
* unprivileged: don't try to set up user namespaces for manage-dockerfile/git-clone [#254](https://github.com/openshift/builder/pull/254)
* [Bug 1964327](https://bugzilla.redhat.com/show_bug.cgi?id=1964327): bump github.com/containers/common to v0.40.0 [#253](https://github.com/openshift/builder/pull/253)
* unprivileged: add CLI options for isolation and storage [#220](https://github.com/openshift/builder/pull/220)
* Updating openshift-enterprise-builder images to be consistent with ART [#248](https://github.com/openshift/builder/pull/248)
* [BUILD-278](https://issues.redhat.com/browse/BUILD-278): Check cgroup v1 and cgroup v2 Files for Quota [#246](https://github.com/openshift/builder/pull/246)
* bump(*) to get updates from openshift/api#954 [#250](https://github.com/openshift/builder/pull/250)
* [BUILD-87](https://issues.redhat.com/browse/BUILD-87): secret configmap volume mounts in builds [#245](https://github.com/openshift/builder/pull/245)
* Updating .ci-operator.yaml `build_root_image` from openshift/release [#247](https://github.com/openshift/builder/pull/247)
* [Bug 1925412](https://bugzilla.redhat.com/show_bug.cgi?id=1925412): update dependencies affected by CVE-2021-3121 [#244](https://github.com/openshift/builder/pull/244)
* [Bug 1951084](https://bugzilla.redhat.com/show_bug.cgi?id=1951084): remove mounts.conf again, but patch buildah change needed to make transient mounts work for us [#239](https://github.com/openshift/builder/pull/239)
* [Bug 1940479](https://bugzilla.redhat.com/show_bug.cgi?id=1940479): bump(containers/buildah) 1.20.0 [#243](https://github.com/openshift/builder/pull/243)
* [Bug 1947164](https://bugzilla.redhat.com/show_bug.cgi?id=1947164): Print "Successfully pushed" only if push succeeded [#232](https://github.com/openshift/builder/pull/232)
* [Bug 1940488](https://bugzilla.redhat.com/show_bug.cgi?id=1940488): move entitlement related secrets back to mounts.conf [#238](https://github.com/openshift/builder/pull/238)
* [Bug 1943614](https://bugzilla.redhat.com/show_bug.cgi?id=1943614): add explict exit log after buildah pull image; tweak existing start log priot to buildah pull image call [#236](https://github.com/openshift/builder/pull/236)
* [Bug 1943614](https://bugzilla.redhat.com/show_bug.cgi?id=1943614): add enter/exit logging around buildah pull image [#233](https://github.com/openshift/builder/pull/233)
* [Bug 1940488](https://bugzilla.redhat.com/show_bug.cgi?id=1940488): add etc-pki-entitlements from pod secrets if available to build container [#228](https://github.com/openshift/builder/pull/228)
* [Bug 1926021](https://bugzilla.redhat.com/show_bug.cgi?id=1926021): Update buildah to v1.19.8, containernetworking/cni to v0.8.1 [#229](https://github.com/openshift/builder/pull/229)
* Updating openshift-enterprise-builder builder & base images to be consistent with ART [#217](https://github.com/openshift/builder/pull/217)
* [Bug 1905095](https://bugzilla.redhat.com/show_bug.cgi?id=1905095): bump github.com/containers/image [#221](https://github.com/openshift/builder/pull/221)
* [Bug 1937535](https://bugzilla.redhat.com/show_bug.cgi?id=1937535): retry image pulls during builds [#222](https://github.com/openshift/builder/pull/222)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Mount CA trust store in builds [#218](https://github.com/openshift/builder/pull/218)
* [Bug 1918153](https://bugzilla.redhat.com/show_bug.cgi?id=1918153): incorrect escaping of HTML symbols in envars [#215](https://github.com/openshift/builder/pull/215)
* [Bug 1905095](https://bugzilla.redhat.com/show_bug.cgi?id=1905095): bump github.com/containers/image to v5.10.1 [#213](https://github.com/openshift/builder/pull/213)
* [Bug 1916897](https://bugzilla.redhat.com/show_bug.cgi?id=1916897): narrow scope of rhsm transient bind mount [#206](https://github.com/openshift/builder/pull/206)
* [Bug 1918879](https://bugzilla.redhat.com/show_bug.cgi?id=1918879): better surface dockerconfigjson errors causing image pull errors [#200](https://github.com/openshift/builder/pull/200)
* Force use of runc, since we know we're privileged, and customize our seccomp filter [#202](https://github.com/openshift/builder/pull/202)
* [Bug 1916897](https://bugzilla.redhat.com/show_bug.cgi?id=1916897): more automount of cluster trust bundle reverts; no longer automount /run/secrets [#204](https://github.com/openshift/builder/pull/204)
* [Bug 1908361](https://bugzilla.redhat.com/show_bug.cgi?id=1908361): BUILD-150: bump(*): k8s 1.20.0 [#197](https://github.com/openshift/builder/pull/197)
* [Bug 1907407](https://bugzilla.redhat.com/show_bug.cgi?id=1907407): Use -mod=vendor to determine buildah version [#199](https://github.com/openshift/builder/pull/199)
* [Bug 1907407](https://bugzilla.redhat.com/show_bug.cgi?id=1907407): Print buildah version [#196](https://github.com/openshift/builder/pull/196)
* [Bug 1896446](https://bugzilla.redhat.com/show_bug.cgi?id=1896446): Fix private git clones behind a proxy [#189](https://github.com/openshift/builder/pull/189)
* Move dev Dockerfile to Fedora 33 [#191](https://github.com/openshift/builder/pull/191)
* [Bug 1891759](https://bugzilla.redhat.com/show_bug.cgi?id=1891759): Do not mount /etc/pki/ca-trust in builds [#185](https://github.com/openshift/builder/pull/185)
* [Bug 1889957](https://bugzilla.redhat.com/show_bug.cgi?id=1889957): Bump dependencies to mitigate CVE-2020-8564 [#182](https://github.com/openshift/builder/pull/182)
* [Bug 1883803](https://bugzilla.redhat.com/show_bug.cgi?id=1883803): Fixes to merging node credentials [#180](https://github.com/openshift/builder/pull/180)
* [Bug 1884270](https://bugzilla.redhat.com/show_bug.cgi?id=1884270): bump(*): s2i, klog [#179](https://github.com/openshift/builder/pull/179)
* [Bug 1884610](https://bugzilla.redhat.com/show_bug.cgi?id=1884610): Upgrade buildah to v1.16.4 [#177](https://github.com/openshift/builder/pull/177)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating Dockerfile.rhel8 baseimages to mach ocp-build-data config [#176](https://github.com/openshift/builder/pull/176)
* [Bug 1843727](https://bugzilla.redhat.com/show_bug.cgi?id=1843727): bump github.com/openshift/imagebuilder to v1.1.7 [#175](https://github.com/openshift/builder/pull/175)
* [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating Dockerfile.rhel8 baseimages to mach ocp-build-data config [#171](https://github.com/openshift/builder/pull/171)
* [Bug 1833328](https://bugzilla.redhat.com/show_bug.cgi?id=1833328): bump buildah to v1.16.0 [#172](https://github.com/openshift/builder/pull/172)
* [Bug 1876913](https://bugzilla.redhat.com/show_bug.cgi?id=1876913): Configure proxy via git config [#174](https://github.com/openshift/builder/pull/174)
* [Bug 1720730](https://bugzilla.redhat.com/show_bug.cgi?id=1720730): bump github.com/containers/buildah to v1.14.11 [#168](https://github.com/openshift/builder/pull/168)
* Kubernetes v0.19.0 [#167](https://github.com/openshift/builder/pull/167)
* Add Dockerfile.rhel8 [#165](https://github.com/openshift/builder/pull/165)
* Bump containers/storage to v1.20.2 [#164](https://github.com/openshift/builder/pull/164)
* [Bug 1826183](https://bugzilla.redhat.com/show_bug.cgi?id=1826183): Run update-ca-trust if CA is non-empty [#163](https://github.com/openshift/builder/pull/163)
* [Bug 1839683](https://bugzilla.redhat.com/show_bug.cgi?id=1839683): bump github.com/openshift/imagebuilder to v1.1.6 [#162](https://github.com/openshift/builder/pull/162)
* [Bug 1844596](https://bugzilla.redhat.com/show_bug.cgi?id=1844596): Bump buildah to v1.14.10 [#160](https://github.com/openshift/builder/pull/160)
* builder/common.replaceLastFrom: Remove always-nil error return [#161](https://github.com/openshift/builder/pull/161)
* [Bug 1826183](https://bugzilla.redhat.com/show_bug.cgi?id=1826183): Generate trust bundle for builds [#158](https://github.com/openshift/builder/pull/158)
* [Bug 1816578](https://bugzilla.redhat.com/show_bug.cgi?id=1816578): upgrade buildah to v1.14.9 [#157](https://github.com/openshift/builder/pull/157)
* Clean up imports [#155](https://github.com/openshift/builder/pull/155)
* Add component to OWNERS [#147](https://github.com/openshift/builder/pull/147)
* [Bug 1842982](https://bugzilla.redhat.com/show_bug.cgi?id=1842982): preserve ARG values that come before the first FROM [#132](https://github.com/openshift/builder/pull/132)
* [DEVEXP-423](https://issues.redhat.com/browse/DEVEXP-423): Leveraging node pull credentials. [#143](https://github.com/openshift/builder/pull/143)
* [DEVEXP-558](https://issues.redhat.com/browse/DEVEXP-558): bldr k8s 118, openshif/api,*-go bump [#146](https://github.com/openshift/builder/pull/146)
* [Bug 1810174](https://bugzilla.redhat.com/show_bug.cgi?id=1810174): bump github.com/containers/buildah and dependencies [#141](https://github.com/openshift/builder/pull/141)
* [Bug 1809861](https://bugzilla.redhat.com/show_bug.cgi?id=1809861): leverage new failed build status reasons/messages [#142](https://github.com/openshift/builder/pull/142)
* hack/lib/build/version: Use BUILD_VERSION and SOURCE_GIT_COMMIT if non-empty [#133](https://github.com/openshift/builder/pull/133)
* [Bug 1802868](https://bugzilla.redhat.com/show_bug.cgi?id=1802868): bump(github.com/mtrmac/gpgme): v0.1.2 [#135](https://github.com/openshift/builder/pull/135)
* manage-dockerfile: use the original form of ENV/LABEL [#134](https://github.com/openshift/builder/pull/134)
* [Bug 1801388](https://bugzilla.redhat.com/show_bug.cgi?id=1801388): use of ARG step in Dockerfile causes panic in imagebuilder (openshift… [#130](https://github.com/openshift/builder/pull/130)
* [Bug 1788982](https://bugzilla.redhat.com/show_bug.cgi?id=1788982): bump github.com/containers/{storage,image,buildah} [#126](https://github.com/openshift/builder/pull/126)
* [Bug 1774492](https://bugzilla.redhat.com/show_bug.cgi?id=1774492): turn off forcepull after the special incremental/forcepull pre-build … [#116](https://github.com/openshift/builder/pull/116)
* bump github.com/containers/storage and dependencies for go 1.13 [#123](https://github.com/openshift/builder/pull/123)
* [Bug 1781793](https://bugzilla.redhat.com/show_bug.cgi?id=1781793): bump revert s2i bump for 1758305 [#120](https://github.com/openshift/builder/pull/120)
* [Bug 1772179](https://bugzilla.redhat.com/show_bug.cgi?id=1772179): bump github.com/containers/{storage,buildah} [#119](https://github.com/openshift/builder/pull/119)
* [DEVEXP-488](https://issues.redhat.com/browse/DEVEXP-488): bump k8s 1.17.0-rc.1 [#118](https://github.com/openshift/builder/pull/118)
* [Bug 1771335](https://bugzilla.redhat.com/show_bug.cgi?id=1771335): set .dockerconfigjson into containers/image auth file path instead of… [#115](https://github.com/openshift/builder/pull/115)
* [Bug 1755140](https://bugzilla.redhat.com/show_bug.cgi?id=1755140): do not force skip tls verify to true on image source injection [#110](https://github.com/openshift/builder/pull/110)
* Bump docker/swarmkit and remove logrus [#109](https://github.com/openshift/builder/pull/109)
* move to containers/image v5, buildah v1.11.4 [#108](https://github.com/openshift/builder/pull/108)
* [Bug 1758305](https://bugzilla.redhat.com/show_bug.cgi?id=1758305): Bump s2i [#106](https://github.com/openshift/builder/pull/106)
* Bump k8s 1.16.2 [#105](https://github.com/openshift/builder/pull/105)
* Bump golang version to 1.12 [#104](https://github.com/openshift/builder/pull/104)
* [Bug 1745192](https://bugzilla.redhat.com/show_bug.cgi?id=1745192): seed containers/image with entire dockerconfig for authentication in … [#102](https://github.com/openshift/builder/pull/102)
* [Bug 1753247](https://bugzilla.redhat.com/show_bug.cgi?id=1753247): listen for sigterm and terminate [#101](https://github.com/openshift/builder/pull/101)
* [Bug 1745789](https://bugzilla.redhat.com/show_bug.cgi?id=1745789): toggle ssh parameters if ssh-auth source secret includes a known_host… [#96](https://github.com/openshift/builder/pull/96)
* [Bug 1747937](https://bugzilla.redhat.com/show_bug.cgi?id=1747937): Forwarding HTTPProxy environment variables. [#95](https://github.com/openshift/builder/pull/95)
* [Bug 1716697](https://bugzilla.redhat.com/show_bug.cgi?id=1716697): Strip the tag from the reference we print after pushing an image [#89](https://github.com/openshift/builder/pull/89)
* Bump github.com/containers/{storage,image,buildah} [#93](https://github.com/openshift/builder/pull/93)
* Adding LICENSE file to project [#85](https://github.com/openshift/builder/pull/85)
* [Bug 1746499](https://bugzilla.redhat.com/show_bug.cgi?id=1746499): Add ":latest" to push tag if none is specified [#92](https://github.com/openshift/builder/pull/92)
* Rebase k8s to 1.14 [#86](https://github.com/openshift/builder/pull/86)
* Remove fuse-overlayfs from Dockerfiles [#88](https://github.com/openshift/builder/pull/88)
* clean up of some CA mount logic that is now handled by the build controller [#87](https://github.com/openshift/builder/pull/87)
* Change containers to allow building without privilege. [#79](https://github.com/openshift/builder/pull/79)
* bump(*): Remove origin dependency [#82](https://github.com/openshift/builder/pull/82)
* Fixed small typo on documentation. [#81](https://github.com/openshift/builder/pull/81)
* Process $DROP_CAPS [#43](https://github.com/openshift/builder/pull/43)
* retryImageAction: strip error wrappings for MultiError members [#68](https://github.com/openshift/builder/pull/68)
* Parse $BUILD_STORAGE_OPTIONS to set storage options [#74](https://github.com/openshift/builder/pull/74)
* Start using Buildah versus Docker for building container images [#80](https://github.com/openshift/builder/pull/80)
* Bump github.com/containers/{storage,buildah} [#78](https://github.com/openshift/builder/pull/78)
* Heed the ImageOptimizationPolicy [#35](https://github.com/openshift/builder/pull/35)
* [Bug 1712245](https://bugzilla.redhat.com/show_bug.cgi?id=1712245): bump github.com/containers/buildah and github.com/openshift/source-to-image [#76](https://github.com/openshift/builder/pull/76)
* push: log the image's canonical reference [#75](https://github.com/openshift/builder/pull/75)
* [Bug 1707941](https://bugzilla.redhat.com/show_bug.cgi?id=1707941), [1709945](https://bugzilla.redhat.com/show_bug.cgi?id=1709945): bump github.com/containers/{storage,image,buildah} [#72](https://github.com/openshift/builder/pull/72)
* Contributing guide [#62](https://github.com/openshift/builder/pull/62)
* [Bug 1704767](https://bugzilla.redhat.com/show_bug.cgi?id=1704767): S2I incremental build not working [#70](https://github.com/openshift/builder/pull/70)
* [Bug 1695622](https://bugzilla.redhat.com/show_bug.cgi?id=1695622), [1699129](https://bugzilla.redhat.com/show_bug.cgi?id=1699129): bump buildah to v1.8.2, pin most dependencies [#67](https://github.com/openshift/builder/pull/67)
* Raise file and process limits before building an image [#69](https://github.com/openshift/builder/pull/69)
* retryImageAction: strip error wrappings for ErrUnauthorizedForCredentials [#66](https://github.com/openshift/builder/pull/66)
* [Bug 1698152](https://bugzilla.redhat.com/show_bug.cgi?id=1698152): fix image source extraction with trailing "/." [#59](https://github.com/openshift/builder/pull/59)
* [Bug 1696756](https://bugzilla.redhat.com/show_bug.cgi?id=1696756): Fix Assemble User in S2I builds [#61](https://github.com/openshift/builder/pull/61)
* Do not print credentials into build log [#60](https://github.com/openshift/builder/pull/60)
* bug: 1694871 bump(*): pin glog level [#58](https://github.com/openshift/builder/pull/58)
* bug: 1694864 - only log error if there is one [#57](https://github.com/openshift/builder/pull/57)
* Fix empty name in status update [#56](https://github.com/openshift/builder/pull/56)
* Add verbose output for bsdtar [#55](https://github.com/openshift/builder/pull/55)
* fix up owners files [#53](https://github.com/openshift/builder/pull/53)
* [Bug 1688779](https://bugzilla.redhat.com/show_bug.cgi?id=1688779): Ensure image exists for incremental builds [#52](https://github.com/openshift/builder/pull/52)
* Switch back to the openshift docker fork [#51](https://github.com/openshift/builder/pull/51)
* Drop unused copyImageSource() function [#50](https://github.com/openshift/builder/pull/50)
* bump(*): bump buildah to v1.7.1 [#49](https://github.com/openshift/builder/pull/49)
* S2IBuilder.pullImage: retry pulls [#46](https://github.com/openshift/builder/pull/46)
* [Bug 1682978](https://bugzilla.redhat.com/show_bug.cgi?id=1682978): Report builder version [#47](https://github.com/openshift/builder/pull/47)
* Add adambkaplan as approver [#48](https://github.com/openshift/builder/pull/48)
* Workaround bug 1677818 in microdnf for new UBI base images [#44](https://github.com/openshift/builder/pull/44)
* bump(*) [#42](https://github.com/openshift/builder/pull/42)
* bump(*) - s2i fix for bad ScriptsURL [#37](https://github.com/openshift/builder/pull/37)
* Limit Default Search to docker.io [#36](https://github.com/openshift/builder/pull/36)
* Enable blob caching and blobInfo caching [#34](https://github.com/openshift/builder/pull/34)
* Restore "copy build certificates to /etc/docker/certs.d" [#31](https://github.com/openshift/builder/pull/31)
* Revert "copy build certificates to /etc/docker/certs.d" [#30](https://github.com/openshift/builder/pull/30)
* copy build certificates to /etc/docker/certs.d [#29](https://github.com/openshift/builder/pull/29)
* always retry up to twice [#28](https://github.com/openshift/builder/pull/28)
* add retry logic for s2i pushes [#27](https://github.com/openshift/builder/pull/27)
* bump(*) [#26](https://github.com/openshift/builder/pull/26)
* stop marking internal registry as insecure [#25](https://github.com/openshift/builder/pull/25)
* ADd a RHEL7 dockerfile and standardize format [#23](https://github.com/openshift/builder/pull/23)
* imagecontent/storage.conf: remove nodev from mountopt [#24](https://github.com/openshift/builder/pull/24)
* Renaming additional ca file [#21](https://github.com/openshift/builder/pull/21)
* remove vestiges of docker daemon codepaths [#20](https://github.com/openshift/builder/pull/20)
* Updating S2I to use Dockerfile postCommit hooks [#13](https://github.com/openshift/builder/pull/13)
* delete networking management code [#19](https://github.com/openshift/builder/pull/19)
* bump(*) [#17](https://github.com/openshift/builder/pull/17)
* Copy CAs mounted via ConfigMap [#15](https://github.com/openshift/builder/pull/15)
* add the new registry service to the insecure list [#16](https://github.com/openshift/builder/pull/16)
* only enable logrus debug at higher loglevels [#14](https://github.com/openshift/builder/pull/14)
* Retry pulling or pushing images, for certain errors [#12](https://github.com/openshift/builder/pull/12)
* callback-based retryImageAction + Don't ignore errors reported during Docker push/pull [#10](https://github.com/openshift/builder/pull/10)
* Add ability to set image tag from make command [#9](https://github.com/openshift/builder/pull/9)
* remove multistage logic since buildah supports it implicitly [#8](https://github.com/openshift/builder/pull/8)
* update deps to pick up buildah multistage fixes [#7](https://github.com/openshift/builder/pull/7)
* switch the builder image to use buildah instead of docker daemon [#5](https://github.com/openshift/builder/pull/5)
* add a verify target+test [#6](https://github.com/openshift/builder/pull/6)
* initial population of builder repo [#2](https://github.com/openshift/builder/pull/2)
* initial owners file [#1](https://github.com/openshift/builder/pull/1)
* [Full changelog](https://github.com/openshift/builder/compare/2b962c71d5b3ac179898dc1ece6a98de0b33cd70...cfcf3bdf23c5e589b18577f038e4e2d6267e9409)