4.19.0-rc.0

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-rc.0-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-serial
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview-serial
- driver-toolkit Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.19-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance-serial
- rosa-classic-sts-conformance Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-rosa-sts-ovn

Upgrades from:

Upgrades to:

4.19.0-rc.1 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.2

Created: 2025-05-12 15:53:56 +0000 UTC

Image Digest: sha256:86ef3b06739c0fbcc2bd36c85e2685d19b38f7c776601a8389759648abc8e32b

Components

Kubectl upgraded from 1.31.1 to 1.32.1
Kubernetes upgraded from 1.32.1 to 1.32.4
Kubernetes Tests upgraded from 1.31.1 to 1.32.4
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202502102012-0 to 9.6.20250502-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ServiceAccountTokenNodeBinding (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallIBMCloud (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DualReplica (0 tests)			Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpoints (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMCatalogdAPIV1Metas (4 tests)				Enabled (New)		Enabled (New)
NewOLMOwnSingleNamespace (0 tests)				Enabled (New)		Enabled (New)
NewOLMPreflightPermissionChecks (6 tests)				Enabled (New)		Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)
SELinuxMount (6 tests)			Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)
SigstoreImageVerificationPKI (0 tests)			Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-karpenter-provider-aws git 68ae0c26 sha256:c7552822b32360148126a2976424553c0a7c3ed00798832bedfffb464cbf6ec0
openstack-resource-controller git d00bab2b sha256:f6b05c78a3b048c0da1fc35bf71ebf66e176f469e486db5f51290096491f763f

Removed images

csi-snapshot-validation-webhook
installer-altinfra
ovirt-machine-controllers

Rebuilt images without code change

aws-kms-encryption-provider git 088dcaf7 sha256:efc0d2418291c2095283dce08dd2e80e6d43665adc9f1c1ae4009cd9b178506b
cluster-kube-cluster-api-operator git 3ec30377 sha256:b1dfd068817262b62b6f28673eaaaab599d3f6ed5a54a3f16e1860318d31fe98
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:05f77d79f8f8d61ac561e214b7b6d62a4347316624ff58205c332e57c9d40719
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:264423e817ebff4430b18442ff05b72bcf642b59ace403fb74747d114f65c878
configmap-reloader git 9bfbde86 sha256:34ba8fe177576f8dfcdbb98c0d8e1ccfe9b0bcdbf7f030733d4954b35ae0f87c
coredns git 7a1451db sha256:b0f4e0293f973ad9adad7410740fd95eaf842d07376876f07a5d45be0a1ee088
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:af502b14674ee5053f4c9d010336eebe91581caf74fa6f17172c98f1db7891ec
ibm-cloud-controller-manager git 7422aab2 sha256:74540db2d39ea3e965cae236ed47a39702f8d255d78763504d1b9dd25492bc89
ironic-machine-os-downloader git dbe19772 sha256:1eb866b9b35f37f4f62db5a0cfe1918f5ac76733a5347c858b7bcda0f437e564
ironic-static-ip-manager git fcd9564e sha256:de9ddef092050313ffcadd080635fe9540cce8470c4e9daecda716d486813e48
kube-metrics-server git 037a0e7e sha256:9c0292a832e64b9e7f6b9fabfabab6b103bcaa365a5454cb540eed91270b98d1
kube-storage-version-migrator git 4c521b09 sha256:36f3fa9c2c0d3b7e01e1a572044d4c73a142836b23bc10937002f198b11819a7
kubevirt-cloud-controller-manager git 3f4542ec sha256:22721e6150dc3afa48aaafac8829d8c157a86a4d7e1ffa387d860892f3fa870f
libvirt-machine-controllers git a336f0b5 sha256:ecc7023c51c3d2a6abbcd9383278cdad3befe4dae14c13111aac3f4b063023eb
multus-admission-controller git 0b1b812e sha256:32b71c86612562fa6365abc5bbd0788b5e71dda5bd549ca152050b3a3f846bfc
multus-route-override-cni git 391c1b03 sha256:b9ba61aa3cc5b3769f3e88ef0cd7fe85762fc1019ae0315ad9f5eb4b8f7551ca
network-interface-bond-cni git f575d888 sha256:157b018554a5d1a4be9814ea2668c1702894963eb751cef8a85e494116ab0c98
network-metrics-daemon git 5ec8c6bd sha256:9c9907f4fe5b387c0b11886bbb84029998bf3978bc05129ce97d0aac624eb967
oauth-apiserver git 75914068 sha256:3338da01f26665c753ac728c1573d195174383c55788967bef745ee7e9a04309
openshift-state-metrics git 3106bcc3 sha256:04753ddc4be12827cbbdcb456992e27f1e42639b4ba4c0dccb88b9db24ca6e65
ovirt-csi-driver git 1db726a9 sha256:df9908fec56c069f998b71e336b1ee55cd7237e581cc0dd8ece9d0d6cdada49e
prom-label-proxy git 7184f58d sha256:210e80297ed28a304d51414df645098e7835c30717a57674f10462f66aadfa46
rhel-coreos sha256:7b1686d15112612ff42eb1d75cf486e9da45036eb4dfb8f0f62456b774810235
rhel-coreos-extensions sha256:541d92dcc8d36c39c197bf6ce490af718d91f83ee072e5d9e631a6ab81bc6015
route-controller-manager git bc97534a sha256:4f8b28f09aca684316388fad48d52ba5466a913017f6a84d5583c2334b1ebede

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
MGMT-20153: Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076
OCPBUGS-53720: Bump jwt to 4.5.2 (#1080) #1080
NO-ISSUE: Update Konflux references (#1082) #1082
MGMT-19421: remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081
MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
NO-ISSUE: Update Konflux references (#1048) #1048
NO-ISSUE: Update Konflux references (#1042) #1042
MGMT-19421: phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#1034) #1034
NO-ISSUE: Update Konflux references (#1031) #1031
Full changelog

agent-installer-node-agent

NO-ISSUE: Update assisted-service’s version (#997) #997
MGMT-20296: Modify RegisterHostConflict log (#990) #990
NO-ISSUE: Update Konflux references (#976) #976
OCPBUGS-53712: golang-jwt/jwt/v4 to 4.5.2 (#956) #956
NO-ISSUE: Update Konflux references (#959) #959
OCPBUGS-52994: Update to latest ghw version (#936) #936
MGMT-20227: Skip Motherboard serial if set to “-” (#955) #955
MGMT-20149: Add required sast tasks for Konflux (#942) #942
NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
NO-ISSUE: Update Konflux references (#924) #924
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) (#911) #912
NO-ISSUE: Update Konflux references (#921) #921
MGMT-19927: Modify MTU Check to Only MTUs != 1500 (#910) #910
MGMT-19588: Also use bond interface for hostname workaround (#920) #920
MGMT-19819: Add the commit reference from which the image is built to the image (#914) #914
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) #912
Full changelog

agent-installer-utils

OCPBUGS-55793: Use internal image registry #87
OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
NO-ISSUE: Update ISOBuilder appliance image SHA #83
NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
OCPBUGS-55515: Include cnv operator in ISO builder script #80
OCPBUGS-55623: update to go.mod #81
NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
NO-ISSUE: ISOBuilder- Update README.md #76
NO-ISSUE: ISOBuilder: Add Clean targets. #69
AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
NO-ISSUE: ISOBuilder: Make sudo optional #63
NO-ISSUE: ISOBuilder: Restructured to resolve right image ref #62
AGENT-1150: Move setup-agent-tui.sh into ignition file #59
NO-ISSUE: iso_builder: add ssh key file flag #53
AGENT-1151: Use internal appliance registry #58
NO-ISSUE: iso_builder: Remove support for rendezvousIP #61
NO-ISSUE: iso_builder: Revert “Merge pull request #54 from pawanpinjarkar/run-appliance-with… #60
NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

apiserver-network-proxy

OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
Full changelog

aws-cloud-controller-manager

OCPCLOUD-2843: Update cloud-provider-aws to K8s 1.32, attempt 3 #104
TRT-2005: Revert #102 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master” #103
OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master #102
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
OCPCLOUD-2855: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master #542
NO-JIRA: Update manifests generator tooling #538
OCPBUGS-49400: UPSTREAM: 5339: Bump glog for recent fixes #536
Full changelog

aws-ebs-csi-driver

STOR-2253: Rebase to upstream v1.39.0 for OCP 4.19 #283
OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-50493: Use 127.0.0.1 for healtz http-endpoints #364
NO-JIRA: build only needed cmd in container image #329
OCPBUGS-54382: Correct ASH driver inject env config #376
OSASINFRA-3652: openstack-cinder: Use new –with-topology flag #345
STOR-2126: Enable readOnlyFileSystem #370
OCPBUGS-54447: Enable required driver services #369
OCPBUGS-54180: Disable remove-not-ready-taint for azure disk csi driver #371
OCPBUGS-54230: Bump library-go #372
STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
STOR-2263: correct smb csi driver test manifest #360
NO-JIRA: Remove inject-proxy annotations for aws-ebs, aws-efs node daemonsets #308
Full changelog

aws-machine-controllers

OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
OCPCLOUD-2780: select instance ‘MarketType’ option #125
OCPCLOUD-2836: Update dependencies to k8s 1.32 #123
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
CNTRLPLANE-106: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (78638bd) into main #136
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
OCPCLOUD-2854: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.18.0 (1957fc6) into master #332
NO-JIRA: Update manifests generator tooling #331
Full changelog

azure-disk-csi-driver

OCPBUGS-55494: Correct max data disk count table for L family v4 #105
OCPBUGS-54382, OCPBUGS-55162: Fix ASH azure disk regression issues #104
OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
OCPBUGS-51169: UPSTREAM: 2900: chore: update max data disk count table for D family v6 #100
STOR-2256: Rebase v1.314 upstream #99
OCPBUGS-47036: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #91
Full changelog

azure-file-csi-driver

OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
OCPBUGS-52654: Rebase to v1.32.0 #90
OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
OCPBUGS-47043: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #85
Full changelog

azure-kms-encryption-provider

NO-JIRA: Add OCP engineers to OWNERS for KMS #15
CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
OCPBUGS-53496: bump golang-jwt v4 #10
Full changelog

azure-machine-controllers

OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
OCPBUGS-31515: Re-reconcile machine on NIC provisioning failure #132
CORS-3883: Allow managed identity from other resource groups #133
OCPCLOUD-2839: Bump k8s 1.32 #128
Full changelog

azure-service-operator

OCPBUGS-55334: Updating ose-azure-service-operator-container image to be consistent with ART for 4.19 #8
Full changelog

azure-workload-identity-webhook

OCPBUGS-53800: github.com/golang-jwt/jwt/v4 v4.5.2 #30
OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
downstream: regenerate manifests #37
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
NO-ISSUE: Update OWNERS #233
NO-ISSUE: Update BMO and MAO #232
Full changelog

baremetal-operator

METAL-998: Merge upstream #413
OCPBUGS-54582: Sync apr 2 #410
OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
OCPBUGS-51294: Merge upstream #398
Full changelog

baremetal-runtimecfg

OPNET-629: Use HAProxy monitor endpoint instead of API #343
OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Revert “OPNET-629: Use HAProxy monitor endpoint instead of API” #342
OPNET-629: Use HAProxy monitor endpoint instead of API #336
OCPBUGS-48194: Bump logrus version #338
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-53106: Get installer image from configMap for node-image command #2005
OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
NO-JIRA: adm release new: simplify writePayload #2008
COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
NO-JIRA: adm release new: simplify writePayload #1997
NO-JIRA: adm release new: simplify no operator error condition #1999
OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
NO-JIRA: Bump x/oauth2 and x/crypto #1984
OCPBUGS-51254: Bump indirect dependency go-jose to 4.0.5 version #1983
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures #1981
NO-ISSUE: Test case for lowercase Jira ticket names #1964
NO-ISSUE: pkg/cli/admin/upgrade/recommend: “Upstream” -> “Upstream update service” #1980
trt-1995: Update Unconditional Feature Gate Notation #1979
OCPBUGS-50682: OCPBUGS-50683: Correct oc adm top pvc messages #1974
WRKLDS-1653: Update k8s dependencies to 1.32 #1971
OTA-1426: pkg/cli/admin/upgrade: Check and display interesting alerts #1970
NO-JIRA: Sanitize tar header name as it is used in path #1969
Full changelog

cloud-credential-operator

OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
OCPBUGS-53824: update github.com/golang-jwt/jwt #836
NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
CCO-629: Update modules to latest #817
Full changelog

cloud-network-config-controller

OCPBUGS-45891: Increase API call timeout to 30 second #168
CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
OSASINFRA-3755: Prefer CA cert from credentials secret #167
OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
OCPBUGS-45631: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 #160
Full changelog

cluster-authentication-operator

OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
OCPBUGS-48176: Avoid duplicate OAuth client creation #757
OCPEDGE-1510: feat: add minimum count for DualReplica #761
OCPEDGE-1610: bump(kube,library-go,ocp/api): #759
NO-JIRA: Keycloak e2e test improvements #714
OCPBUGS-51981: fix: update starter path to account for mom integration #760
CNTRLPLANE-71: update cao to manage rolebindingrestriction crd #748
AUTH-541: OIDC structured auth config #713
CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #751
NO-JIRA: OWNERS: update approvers #756
Full changelog

cluster-autoscaler

OCPBUGS-54231: Fix cool down status condition to trigger scale down #355
OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
NO-JIRA: improve nodes listing in ClusterAPI provider #354
OCPBUGS-11115: refactor findScalableResourceProviderIDs #349
OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
OCPCLOUD-2500: Update to recognize both upstream and openshift ScaleFromZero annotations #335
Full changelog

cluster-autoscaler-operator

OCPCLOUD-2829: Bump k8s 1.32 #339
Full changelog

cluster-baremetal-operator

OCPBUGS-53330: Update BMO to latest #468
OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
OCPBUGS-51275: add missing relatedObjects #461
METAL-1286: Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted #462
OCPEDGE-1607: feat: add arbiter node selector #460
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
NO-JIRA: Update manifests generator tooling #232
OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
Full changelog

cluster-capi-operator

OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
NO-JIRA: Prevent caching CAPI objects across namespaces #285
METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
OCPCLOUD-2648: Machine sync controller deletion logic #278
OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
OCPCLOUD-2712: Update comments based on Security Group Investigation #279
OCPCLOUD-2716: Handle Machine owner references translation between MAPI and CAPI #271
NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 #275
OCPCLOUD-2647: CAPI to MAPI Machine Synchronisation #265
NO-JIRA: Update version variable in generate-ocp-manifests hook script #277
NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
OCPCLOUD-2645: MAPI to CAPI Machine synchronization #258
NO-JIRA: Add lifecyclehook script that updates manifests-gen #264
NO-JIRA: Remove unused Dockerfile #255
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
OCPBUGS-41827: update injector to support secret as well #385
OCPBUGS-48481: annotation validation policy #379
OCPCLOUD-2843: AWS CCM should be configured with the AWS cloud provider config #384
Full changelog

cluster-config-api

Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
Fix broken ControlPlaneMachineSet integration tests #2296
OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
MON-4071: GA MetricsCollectionProfiles #2286
CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
Promote OnClusterBuild featuregate to default #2192
trt-2080: check devlopment start date for latest release #2285
NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
NO ISSUE: Tombstone Spec.PinnedImageSets in MCN v1alpha1 API #2256
OCPNODE-2877: Remove support to configure cgroupsv1 in OCP #2181
Ignore partial manifests when running schemacheck #2251
MCO-1543: Update v1alpha1 MCN API #2201
Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
security: add annotation for validated SCC type #2211
NO-JIRA: Add example of excluding subnets pattern #2213
OCPNODE-2339: Add PKI field to (cluster)imagepolicy #2088
OCPBUGS-50587, OCPBUGS-51272: Reject new NodeStatus with revision set #2208
Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error #2214
OCPBUGS-32158: Add CEL validation for RegistrySources in Image API #1859
no-jira: correct default CIDR for ipv6 join subnet in API descriptors #2184
featuregate for catalogd metas web api #2202
CORS-3842: Add API Updates for GCP Custom API Endpoints #2150
NO-JIRA: bump controller-tools dependency to latest downstream commit #2207
SPLAT-2000: Add configuration for vSphere multi disk thinProvisioned #2154
NE-1871: Promote GatewayAPI to Tech Preview #2081
OCPBUGS-44199: Allow spaces in AWS tags #2124
OCPBUGS-48542: Remove Never option from IPsec Encapsulation #2199
OCPBUGS-42701: api: Updated the disableMultiNetwork parameter description #2143
Full changelog

cluster-config-operator

OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
SPLAT-2079: Removed VSphereControlPlaneMachineset feature gate #354
OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
OAPE-126: Include CPMSMachineNamePrefix feature-gate name in e2e tests #351
OCPBUGS-50580: Fix MachineNamePrefix periodic on OpenStack #349
OCPCLOUD-2834: Update dependencies to K8s 1.32 #345
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #234
STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
Full changelog

cluster-etcd-operator

OCPEDGE-1773: Fix arbiter field in install-config #1409
OCPBUGS-53512: fix CVE-2025-30204 #1412
OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
OCPEDGE-1498: support updates to external etcd #1399
OCPEDGE-1500: Added scaling strategies for TNF #1396
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
NO-JIRA: update owners #1178
OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
Full changelog

cluster-ingress-operator

CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
NE-1277: status: Add Gateway API objects to relatedObjects #933
NE-1994: Add E2E test for Istio manual deployment #1204
NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-45911: revert dev cert rotation #1835
Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
MON-4160: operator: add topology metrics #1827
OCPBUGS-35102: Bump library-go #1824
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #1820
AUTH-541: OIDC structured auth config #1760
OCPNODE-2940: add support for minimumKubeletVersion #1754
MON-4129: slos: accomodate for Prometheus v3 “le” normalization #1815
MON-4129: revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 #1817
NO-ISSUE: Bump TraceAll log level to v=10 #1814
OCPBUGS-48673: targetconfigcontroller: check live etcd endpoints #1792
API-1689: TLS registry: add description #1763
OCPBUGS-49980: change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h #1804
OCPBUGS-49763: Disregard health endpoints in the burn rate alerts #1742
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
STOR-2267: Run SELinux warning controller #834
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
NO-JIRA: readme: describe mapping between logLevel and log level #833
NO-ISSUE: Bump TraceAll log level to v=10 #828
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-54945: Bump library-go #560
Full changelog

cluster-machine-approver

OCPCLOUD-2832: Bump k8s 1.32 #268
Full changelog

cluster-monitoring-operator

OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207: Bump prometheus-operator to v0.81.0 #2593
NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
OCPBUGS-50703: Add incidents metric to telemetry #2569
Full changelog

cluster-network-operator

OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
OCPBUGS-54238: Update CSR status condition appropriately #2674
CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
CORENET-5856: Update RouteAdvertisements schema #2685
OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
SDN-5689: Rebase k8s v1.32 #2656
OCPBUGS-54159: frr-k8s: tolerate all taints #2677
OCPBUGS-5241: Auto opt in for whereabouts-controller #2670
OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
SDN-4829: Add machine config watchers to report IPsec status #2383
NP-1100: Enable fast ranges #2648
NO-JIRA: Add “centos” to supported OS ids #2652
Full changelog

cluster-node-tuning-operator

Fixed rcu_nocbs cpu parsing (#1317) #1317
Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
Make the e2e/basic/modules.go test reentrant (#1322) #1322
Enhance hugepages validation error message (#1320) #1320
Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
CNF-16742: kernelPageSize + hugepages combinations validation (#1296) #1296
machineconfig: add support for various hugepage sizes. (#1295) #1295
E2E: Add test to verify runc uses valid cpus (#1088) #1088
OCPBUGS-49823: Support hugepage size selection for ARM-based clusters (#1294) #1294
OCPBUGS-49403: E2E: Add configuration tests related to align cpus by uncorecache feature (#1291) #1291
Full changelog

cluster-olm-operator

OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
OCPBUGS-54179: Add openshift node selector annotation #109
OPRUN-3690: Watch for new upstream feature gate APIV1MetasHandler #104
NO-ISSUE: Update to k8s v0.32.2/v1.32.2 #108
OCPBUGS-51357: Revert “(vendor) Bump openshift/api” #106
NO-ISSUE: Bump kubernetes and openshift/api dependencies #105
OPRUN-3663: Watch and reconcile feature gates changes #102
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #160
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
OCPBUGS-54349: cluster-samples-operator - fix failing unit tests MacBook (ARM chip) #618
OCPBUGS-54216: Update the k8s API version #614
OCPBUGS-54347: add rhdmalone to owners #616
OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
Full changelog

cluster-storage-operator

NO-JIRA: correct cinder operator CredentialsRequest name #577
OCPBUGS-54491: sync Azure File permissions with upstream docs #576
STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
STOR-1878: Run operators without root user control #570
STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
OCPBUGS-50668: fix Vsphere cluster Storage operator in Unavailable state #556
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Add an always passing test case #1172
NO-JIRA: make verify #1177
OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
NO-JIRA: manifests: make template manifests valid YAML #1171
OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
OTA-1403: Create minimal openshift tests extension #1168
NO-JIRA: Add unit test for renderManifest #1173
OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
OTA-1427: Recompute node insights when MC/MCP changes #1144
OTA-209: Add ClusterVersionOperator manifests #1161
OTA-1418: Decribe informer->usc communication #1162
NO-JIRA: Rename fields in ClusterCapabilities for readability #1157
OTA-1427: Polish reason and message in Node’s status insight #1145
NO-JIRA: Refactor for readability #1131
OCPBUGS-50498: cvo: improve error handling on port collision #1160
NO-JIRA: Update ClusterOperator Status Conditions to listType=map #1149
OTA-861: Generate an accepted risk for Y-then-Z upgrade #1093
NO-JIRA: Fix a few AMD64-oriented tests on Non-AMD64 machines #1156
OTA-1418: USC: Drop unknown insights after grace period #1150
NO-JIRA: status: extract API types to a package #1155
Full changelog

console

OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
OCPBUGS-55448: Fix +Add details switch animation regression #15011
OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
OCPBUGS-53443: Check for ACM when hiding switcher #14988
ODC-7727: Change favourites button defaultName #14996
CONSOLE-4492: fix: do not render if listpageheader has no props #14995
OCPBUGS-55252: fix bug where tab underline is missing #14991
NO-JIRA: Deprecate react-router-dom-v5-compat #14994
OCPBUGS-54670: Use PF component group for PageHeading #14965
OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
OCPBUGS-54656: Add space between quick start action list items #14940
OCPBUGS-54601: fix bug where operator appears twice #14983
OCPBUGS-45514: Add account email to the telemetry #14978
CONSOLE-4464: Update PatternFly to latest #14979
OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
OCPBUGS-55018: fix web terminal initialize form style #14974
CONSOLE-4505: Update i18next package #14881
OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
CONSOLE-4542: Remove base dl dd dt CSS #14966
CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
OCPBUGS-54477: Remove char limit for favourite names #14924
OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
OCPBUGS-54485: Add dark theme feedback graphic #14925
CONSOLE-4484: Fix Skip to content regression #14918
OCPBUGS-54436: Warning: React.useMemo has a missing dependency #14913
OCPBUGS-54430: Fix shifting play/pause button when loading #14916
OCPBUGS-46404: i18n translations for Export as CSV button #14651
OCPBUGS-52479: Fix OLM e2e tests #14851
OCPBUGS-20230: Prevent yaml editor crash #14676
CONSOLE-4464, ODC-7756: Bump PF6 to latest prereleases #14783
CONSOLE-4501: Add unit test for Timestamp component #14799
CONSOLE-4521: Remove old polyfills #14880
OCPBUGS-52948: Multiple favorite icon on same page #14863
OCPBUGS-53065: Debug pod logs are not accessible when debugging a node via OpenShift Console #14898
CONSOLE-4462: Remove two more overrides #14891
OCPBUGS-53227: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14901
ODC-7770: Remove perspective switcher if only one perspective is present #14762
OCPBUGS-52938: ‘Helm Chart Repository’ name is used in breadcrumb link, details page heading and action names #14890
(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
CONSOLE-4484: follow on fix to ensure Bottom ConsoleNotification are … #14806
NO-JIRA: Apply plugin-api-changed label on changes to the api package #14804
OCPBUGS-52180: Fix notification drawer close button error #14809
ODC-7724: Add guided tour in Admin perspective #14776
ODC-7769: Add Getting started section in project Overview page #14792
OCPBUGS-30973: Update @types/react-redux #14680
ODC-7725: Show perspective preferences option if more than one perspective are available #14644
OCPBUGS-51202: Fix Timestamp component #14793
OCPBUGS-46050: Determine if disabled a11y rules can be re-enabled #14643
CONSOLE-4484: Replace custom tabs with PF6 Tabs component #14760
OCPBUGS-48642: Check for unused modules in static plugins #14695
CONSOLE-4486: decrease TertiaryHeading margins in Edit resource limit… #14782
OCPBUGS-50546: Do not load CSRs if user does not have permissions #14771
OCPBUGS-36786: Force async package upgrade. #14775
OCPBUGS-50670: fix bold text issues and missing underline on inline link buttons on safari and firefox. #14766
NO-JIRA: Small demo plugin and plugin doc improvements #14779
CONSOLE-4489: fix bug where dropdown menu can overflow #14780
OCPBUGS-49996: add missing contextId to be able to inject tabs from plugins #14732
OCPBUGS-49778: Linkify OLM operator uninstall message #14713
OCPBUGS-50693: Show Observe section without PROMETHEUS and MONITORING flags #14697
CONSOLE-4467: replace html heading elements with PatternFly components #14767
OCPBUGS-50847: fix but where textarea can be expanded horizontally #14773
CONSOLE-4476: Remove various upstream workarounds #14756
OCPBUGS-45141: Store Topology sidebar alert in the localStorage #14700
NO-JIRA: Update Console dynamic plugin SDK doc and changelogs #14768
ODC-7735: Edit ci tests to have step to enable developer perspective #14684
OCPBUGS-50665: fix bug where Demo Plugin tab url is always appended #14764
CONSOLE-4079, CONSOLE-4080: Address tech debt in GenericSecretForm and KeyValueEntryForm components #14520
OCPBUGS-49381: Workloads-DeploymentConfigs-Add storage: i18n misses #14747
CONSOLE-4480: fix background color of Command Line Terminal tab #14759
OCPBUGS-48548: The secret created with Basic authentication has an incorrect type #14691
CONSOLE-4464: bump PatternFly 6 to latest available versions #14750
CONSOLE-4443: Upgrade dynamic-demo-plugin to PatternFly 6 #14682
OCPBUGS-48637: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14709
OCPBUGS-46088: [Hypershift] Filter by Node type list is empty #14704
CONSOLE-4477: more token updates #14752
OCPBUGS-49839: fix run time error when no completed version exists #14742
CONSOLE-4475: fix QueryBrowser tooltip styles #14751
CONSOLE-4469: improve layout and functionality of Edit upstream confi… #14734
OCPBUGS-43061: update the Deployment pod on change in imageStream #14523
CONSOLE-4474: Unbold pf-v6 labels by default #14748
CONSOLE-4465: add workaround for menu scroll #14745
CONSOLE-4473: fix alignment issues with Bootstrap radio and checkbox … #14739
CONSOLE-4472: fix QuickStart layout issues #14738
CONSOLE-4471: fix bug where close button can overlap guided tour popo… #14737
CONSOLE-4470: fix bug where Edit button is bold inside DetailsItem dt #14736
CONSOLE-4467: replace html heading elements with PatternFly components #14726
Full changelog

console-operator

ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
OCPBUGS-45514: Report email_domain to telemetry #950
OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
OCPBUGS-48740: Vendor the missing CSP directives #960
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-37212: Upstream sync 15042025 #183
OCPBUGS-53198: Upstream sync 01-04-2025 #180
OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

ART-12521: update go mod dependency for konflux #320
NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
Full changelog

csi-external-attacher

STOR-2251: Rebase external-attacher to v4.8.1 for OCP 4.19 #83
OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
Full changelog

csi-external-provisioner

STOR-2251: Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 #111
OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
OCPBUGS-46727: CVE-2024-45338: bump golang.org/x/net to v0.34.0 #109
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
STOR-2281: Remove csi-snapshot-validation-webhook #175
Full changelog

csi-livenessprobe

STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
Full changelog

csi-node-driver-registrar

STOR-2251: Rebase node-driver-registrat to v2.13.0 for OCP 4.19 #78
Full changelog

docker-builder

OCPBUGS-45492: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 #467
OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
OCPBUGS-48741: Buildah dependency bump to v1.39.0 #455
Full changelog

docker-registry

IR-522: disable aws region check #425
NO-JIRA: chore: update owners file #424
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd

ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (1316392) into master #74
OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (54cd0bb) into master #69
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
NO-JIRA: Update manifests generator tooling #238
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.8.1 (737b737) into master #237
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
OCPBUGS-46387: add a3 instance types to gpu quota validation logic #102
OCPBUGS-17079, OCPBUGS-44671: Disable shielded VMs for non-UEFI disks #108
Full changelog

gcp-pd-csi-driver

OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-53451: enable VolumeAttributesClass #145
OCPBUGS-54336: Bump library-go #144
CORS-3911: Add custom endpoint args from infrastructure #141
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
Full changelog

haproxy-router

OCPBUGS-45759: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.19 #644
OCPBUGS-45702: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.19 #643
OCPBUGS-39403: Fix parseIPList to Continue Processing After Invalid IPs and Return Valid IPs #621
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-55265: Bump 1.32.4 #2275
OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
OCPBUGS-53249: skip UDP LoadBalancer on external #2247
OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
TRT-1854: fix OVNKubernetes network skips #2256
STOR-2285: Update group snapshot test rules #2254
OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
TRT-1836: UPSTREAM: <carry>: remove old k8s-tests external binary #2178
OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
OCPBUGS-45214: Add groupsnapshot tests #2155
OCPNODE-2940: add minimumkubeletversion admission package #2201
TRT-1854: Update openshift-tests-extension version #2214
OCPBUGS-45359: Unskip recover volume expansion failure tests #2218
OCPBUGS-45241: UPSTREAM: <carry>: Re-enable temporarily disabled port-forward test #2213
OAPE-96: UPSTREAM: <drop>: bump openshift/api@107848b719c5 #2217
OCPNODE-2940: add minimumkubeletversion package #2104
CNTRLPLANE-1: Bump 1.32.2 #2209
NO-JIRA: UPSTREAM: fix request Host storing in openshift.io/during-graceful audit log annotation #2119
OCPBUGS-41533: UPSTREAM: <carry>: util: inform the kubelet it has a new enough kernel for idmapped mounts #2168
TRT-1286: List images from external test binary #2177
OCPBUGS-46477: Disable ServiceAccountNodeAudienceRestriction feature gate and reenable Azure file tests #2202
Full changelog

hypershift

OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
Red Hat Konflux update hypershift-cli-mce-29 #6104
HYPBLD-642: konflux build hcp cli #6072
OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
AUTOSCALE-127: fix e2e autonode drift test #6062
CNTRLPLANE-112: Enable MIv3 for Ingress #6058
NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
NO-JIRA: Add version check for CAPI flag #5911
ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
CNTRLPLANE-350: add NodePool minor version compatibility check #5873
NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792: update go mod dependency for konflux #5918
CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379: Kas bootstrap bin #5871
CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
ARO-15229: add e2e tests for image registry capability #5810
CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
OCPBUGS-50915: Disable capi machineset preflights #5653
CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
HOSTEDCP-2262: Karpenter openshift ec2class #5600
NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719: openstack: ORC deployed out of tree #5584
CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606: Fix kubeadmin login failure #5631
NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
OCPBUGS-50014: Restart HCP on stale serving certs #5601
NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171: add e2e test for aro scheduler #5568
NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
PODAUTO-318: Implement HCP karpenter deletion #5540
NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
STOR-2249: Rebase to upstream 5.2.14 for OCP 4.19 #79
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
OCPBUGS-54482: Bump library-go #142
STOR-2252: Bump all deps for 4.19 #141
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
STOR-2252: Bump all deps #137
OCPBUGS-47121: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #136
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2852: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.10.0 (0c35eac) into main #107
NO-JIRA: Update manifests generator tooling #106
OCPBUGS-50674: Fix for CVE-2024-45338 in golang.org/x/net/html in main #99
Full changelog

ibmcloud-machine-controllers

OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
OCPCLOUD-2841: Update K8s to 1.32 #60
Full changelog

insights-operator

CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
chore: add BaiyangZhou to OWNERS file (#1080) #1080
NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Fix bad IPv6 address (#1073) #1073
OCPBUGS-35196: update the duration validation pattern according to the OpenShift API (#1072) #1072
CCXDEV-12875: Enable Insight Operator entitlements for multi arch clusters (#1066) #1066
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Enable FIPS #41
New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Full changelog

ironic

OCPBUGS-55743: Extract files one-by-one in logwatch #656
METAL-1327: Update pkgs ocp419 take2 #651
NO-ISSUE: Update dependencies for OCP 4.19, part 1 #649
NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
OCPBUGS-51310: Fix runlogwatch script #641
OCPBUGS-50613: Install python3-inotify pkg explicitly #638
Full changelog

ironic-agent

OCPBUGS-55315: Delay determining the hostname to put into ignition #182
NO-ISSUE: Update dependencies for OCP 4.19 #181
METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
Full changelog

keepalived-ipfailover

OCPBUGS-45700: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205
OCPBUGS-45831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204
OCPBUGS-45405: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201
Full changelog

kube-rbac-proxy

CNTRLPLANE-248: Merge upstream v0.19.0 release #116
OCPBUGS-45765: Updating kube-rbac-proxy-container image to be consistent with ART for 4.19 #115
Full changelog

kube-state-metrics

OCPBUGS-52192: [bot] Bump openshift/kube-state-metrics to v2.15.0 #119
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
OCPBUGS-55706: fix: use patch for machine/machineset status #1367
OCPBUGS-55424: Added skip for when config not multi nic #1358
OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
Revert “SPLAT-2180: Added conformance label” #1359
OCPBUGS-55417: Resync CRDs #1357
OCPBUGS-55083: Updates GCP CredentialsRequest #1353
SPLAT-2180: Added conformance label #1354
OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
OCPBUGS-52464: webhook to validate marketType field #1339
SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
OCPCLOUD-2780: Validate aws marketType webhook #1329
OCPBUGS-44671, OCPBUGS-51373: Updates GCP credentials request #1335
SPLAT-2000: Added vSphere provisioning mode to data disks #1328
OCPBUGS-49413: add image/read permissions #1330
OCPBUGS-51042: Drop oVirt support #1331
OCPBUGS-49351: Added vSphere check for max networks #1327
Full changelog

machine-config-operator

OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
Revert “NO-ISSUE: debug podman on PIS” #5013
OCPBUGS-44757: decrease leases for kubelet on azure #5010
NO-ISSUE: debug podman on PIS #5003
MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
OCPBUGS-55388: MSBIC should not update windows machinesets #5009
MCO-1645: API & client-go bumps for MCN V1 API updates #5011
MCO-1519: Adapt MCO code to use V1 MCN API #4992
OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
NO-JIRA: Update Envtest assets to 1.32.1 #5002
OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
MCO-1615: MCN status update degraded #4977
MCO-1509: Enable OCL for disconnected workflow #4971
MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
OCPEDGE-1690: add dual-replica templates #4938
OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
OCPBUGS-54161: use the same success criteria for OCL e2e tests #4941
MCO-1579: Bump ignition to 3.5 #4903
NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
OPNET-629: Mark haproxy unhealthy if no healthy backends #4767
OCPBUGS-44602: Set ownerReference for OCL build objects #4861
OCPBUGS-41489: configure-ovs workaround for ovs-if-br-ex bug #4877
OCPBUGS-48810: Ensure that build jobs are always reconciled #4811
No-Issue: Remove OCL Extensions test #4868
OCPEDGE-1493: Add 2no-ha extension support required by Two Node OpenShift #4843
OCPBUGS-50849: add RHEL variant to IsEL() check #4856
NO-ISSUE: increase WaitForPoolComplete() timeout #4873
OCPBUGS-51009: OSUpdateStarted event should only be emitted on actual OS updates #4864
OCPBUGS-47743: Update cluster-reader ClusterRole permissions #4823
OCPBUGS-45459: Remove trailing period from Openstack provided hostnames #4778
OCPBUGS-47629: /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4850
OCPBUGS-49394: Fix SELinux failures running afterburn-hostname #4863
OCPBUGS-50599: Enforce VIPs to be collocated at the same host #4844
OCPBUGS-49347: Degraded machine-config CO due to ManagedBootImages update when upgrading an OCL cluster #4810
OCPBUGS-33894: Avoid dumping Go struct in potentially user-facing reason annotation #4814
OCPBUGS-44618: In OCL, MCPs are reporting Updating=false while the image is being built #4710
OCPBUGS-49959: Panic in the MCC when using OCL v1 GA #4834
NO-ISSUE: Add isabella-janssen to OWNERS as approver & reviewer #4846
OCPBUGS-31778: Update format verbs for alert logs #4839
Full changelog

machine-image-customization-controller

OCPBUGS-44031: Verify tls while pulling down IPA #131
Full changelog

machine-os-images

OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
NO-JIRA: Change to new host #54
OCPBUGS-50910: Decompress pxe file only if it’s a valid compressed file #51
Full changelog

metallb-frr

OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
Syncmetallb 04042025 #81
Align to upstream #79
Syncoperator03032025 #78
OCPBUGS-45545: Updating ose-frr-container image to be consistent with ART for 4.19 #70
Sync OWNERS with MetalLB #75
Align upstream 13/1/25 #72
Full changelog

monitoring-plugin

NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
: NO-JIRA: bound table scroll and column alignment #409 #409
NO-JIRA: feature: upgrade react router to v5 compat #406
NO-JIRA: fix(incidents): performance improvements for incidents page #398
OCPBUGS-48533: Reset variables when making orthongonal selections #394
OU-765: Don’t break if cluster doesn’t exist #399
OU-767: Allow filtering by cluster name #396
OU-750: update the metrics typeahead to look pf-6 native #395
OCPBUGS-54292: Show column headings on metrics page #397
OU-760: Requests UX changes post PF-6 #390
OU-723, OU-729: Add label typeahead #392
OU-757: Show cluster column heading on acm silences page #393
OU-703: fix states filter in aggregated row #389
OU-752: Clear out old queries when loading queries from URL #391
RHINENG-16773: fixed silence alerts data form not filled with alert details #384
OU-702: re-add csv button for aggregated alert list #383
OU-659: PF-6 Migration #380
OU-678: fix: allow to set refresh interval to off #379
OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
OCPBUGS-52592: Fix “Export as CSV” #369
OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
NO-JIRA: fix virtualization persepective perses extension point #355
OU-618: Various Perses Updates #353
NO-JIRA: use ocp base images for ci #354
NO-JIRA: add incidents header #351
OU-618: Embed Perses Dashboards into Monitoring Plugin #350
OU-643: fix filter dropdpdowns to match patterfly correct use, remove deprecated dropdown components #347
rhineng-16008: add cutoff for alerts timestamps #349
Full changelog

multus-cni, multus-cni-microshift

: OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-54422: Ds merge ⁴⁄₃ #356
OCPBUGS-53397: Upstream sync 20-03-2025 #353
OCPBUGS-52415: replace entrypoint #349
NP-1128: Ds merge 2/25/25 #346
NP-1100: Add nodeslicecontroller to dockerfile #341
Full changelog

must-gather

MCO-1648: MCO-1649: Add machineconfignodes and pinnedimagesets to must-gather #487
CNF-16640: Changes for FRR-K8s Deployed via CNO #479
no-jira: Remove davemulford from collection-scripts/OWNERS file. #481
Full changelog

network-tools

NO-JIRA: Fix JIRA queries #141
NO-JIRA: Add Peng #138
Full changelog

networking-console-plugin

CNV-57493: Validate if the namespace is configured for a primary UDN #237
CNV-60065: fix cudn input name #233
OCPBUGS-49395: adding translations #236
Upload i18n translations scripts #229
CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
CNV-58647: update PatternFly Modal to new version #228
CNV-58320: remove console classes which changed styling #227
add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
CNV-56436: show ipam lifecycle correctly with new spec #218
OCPBUGS-41964: No default path in the route creation form #216
CNV-56236: fix cudn modal form titles #217
OCPBUGS-42135: Update documentation links #214
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
Full changelog

nutanix-machine-controllers

OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
OCPBUGS-54317: fixing CVE-2025-22868 #97
OCPBUGS-53245: Fix link-local addresses being added to machine #100
OCPBUGS-50710: fixing CVE-2024-45338 #89
Full changelog

oauth-proxy

OCPBUGS-48333: Update dependencies to address CVE-2024-24786 #313
Full changelog

oauth-server

CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #169
OCPBUGS-35294: Add French and Spanish localization for login screen #154
Full changelog

oc-mirror

OCPBUGS-55704: implements registries.d file as specified in containers/image docs (#1137) #1137
OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
OCPBUGS-54653: delete: continue on errors (#1127) #1127
OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
OCPBUGS-52471: Fix OOM at filtering catalogs (#1120) #1120
OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
CLID-203, OCPBUGS-26771: fixes CVE-2024-0406 mholt/archiver: path traversal vulnerability (#1092) #1092
Bump the pip group across 2 directories with 3 updates (#1054) #1054
v2: update golangci-lint config (#1083) #1083
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1087) #1087
v2/cli: always stop local registry and close registry.log (#1068) #1068
OCPBUGS-44103: bump oc fork version (#1080) #1080
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1070) #1070
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1077) #1077
v2: disable spinners when not running in a tty (#1049) #1049
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1072) #1072
OCPBUGS-49991: fixes bundle related images being skipped (#1071) #1071
NO-JIRA: only save graph data if it’s valid json (#1069) #1069
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #322
NO-ISSUE: Synchronize From Upstream Repositories #315
NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
Full changelog

openshift-apiserver

OCPBUGS-44432: Skip blocked registry check for registries with mirrors #475
Full changelog

openshift-controller-manager

OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
OCPBUGS-50507: Intermittent authentication issues when accessing OpenShift registry #365
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #366
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
OCPCLOUD-2857: Set infrastructureRef.Namespace in Cluster object #357
OSASINFRA-3707: ⚠️ Manual sync from release-0.12 on main ⚠️ #352
OSASINFRA-3722: Deploy manifests for CustomNoUpgrade feature set also #356
Full changelog

openstack-machine-api-provider

OSASINFRA-3746: Consume CA cert from CCO secret #131
NO-JIRA: Update golang.org/x/net to v0.33.0 #128
NO-JIRA: Upgrade Gophercloud to v1.14.1 #129
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #994
OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
NO-ISSUE: Synchronize From Upstream Repositories #964
NO-ISSUE: Synchronize From Upstream Repositories #963
NO-ISSUE: Synchronize From Upstream Repositories #962
NO-ISSUE: Synchronize From Upstream Repositories #961
NO-ISSUE: Synchronize From Upstream Repositories #952
Full changelog

operator-marketplace

OPRUN-3835: Update to 4.19 community-operators catalog #621
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
NO-ISSUE: Upgrade controller-runtime from v0.17.2 to 0.20.2 and consequently k8s version from 1.29 to 1.32 #594
Full changelog

ovirt-csi-driver-operator

NO-JIRA: Readme update #139
OCPBUGS-45766: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.19 #138
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-51165, OCPBUGS-52278: Downstream Merge 28th april 2025 #2522
CORENET-5786: Downstream merge 2025-04-25 #2521
CORENET-5389, OCPBUGS-51040, OCPBUGS-54577: [DownstreamMerge] 2025-04-16 #2516
CORENET-5721, CORENET-5856, OCPBUGS-51317: [DownstreamMerge] 2025-04-14 #2513
CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
CORENET-5382: unpin libreswan version #2498
OCPBUGS-49994: [DownstreamMerge] 7th april #2509
CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
OCPBUGS-45410: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.19 #2379
OCPBUGS-45741: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 #2380
OCPBUGS-54245, SDN-5772: Downstream merge 2025-03-21 #2501
OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
OCPBUGS-48781: [DownstreamMerge] 2-27-25 #2474
OCPBUGS-49393, OCPBUGS-49598: [DownstreamMerge] 13 feb 2025 #2459
Full changelog

powervs-block-csi-driver

MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
STOR-2252: Bump all deps #81
Full changelog

powervs-cloud-controller-manager

No-Jira: Update packages in go.mod #85
Full changelog

powervs-machine-controllers

OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
OCPBUGS-53309: Update dependencies to k8s 1.32 #110
OCPBUGS-51276: Fix for CVE-2024-45338 in golang.org/x/net/html in main #100
Full changelog

prometheus

MON-4199: chore: update to v3.2.1 #246
OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
MON-4104: Update to 3.0 #227
Full changelog

prometheus-alertmanager

NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
MON-4155: Bump openshift/prometheus-alertmanager to v0.28.0 #98
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
NO-JIRA: Bump openshift/prometheus-operator to v0.80.1 #325
Full changelog

prometheus-node-exporter

MON-4204: Use slog for accelerators (and version bump) #164
Full changelog

service-ca-operator

OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
Full changelog

telemeter

OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
OCPBUGS-50837: Check nil metric in elide label #555
SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
Full changelog

tests

OCPBUGS-55897: bump limits #29767
OCPBUGS-55265: Bump 1.32.4 #29707
OKD-243: Skip GatewayAPIController tests for OKD #29749
OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
OCPBUGS-54869: bump limits #29722
OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
MCO-1646: API & client-go bumps for MCN V1 API updates #29717
NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
Revert “TRT-2049: check for any watch requests” #29719
MCO-1519: Adapt MCN tests to use V1 API #29701
OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
TRT-2049: check for any watch requests #29674
NO-ISSUE: Automated - Update synthetic test data #29677
OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
TRT-2043: look for high latency audit requests #29571
OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
OCPBUGS-54869: bump limits #29700
OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
OCPBUGS-55175: Add cleanup to MCN test #29695
OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
OCPBUGS-54869: bump limits #29688
NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
OCPBUGS-53249: feat: support platform type external #29623
MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
TRT-1854: add synthetic test to check for presence of “Skipped” annotations in OTE tests #29606
OCPBUGS-53014: Bump to kubernetes 1.32.3 #29612
NE-1968: add e2e tests for FeatureGate GatewayAPI #29597
NO-ISSUE: Clean up MachineConfiguration fixture apply #29626
NO-ISSUE: Wait for MachineConfiguration status to be upto date #29625
TRT-2052: Fix broken intervals charts #29616
NO-JIRA: Alert intervals should have the display flag for charting #29624
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
NO-JIRA: Support known namespaces for terminationMessagePolicy tests #29534
Revert “OCPNODE-2596: Add SigstoreImageVerification e2e tests” #29572
OCPNODE-2596: Add SigstoreImageVerification e2e tests #29530
NO-ISSUE: Automated - Update synthetic test data #29559
WRKLDS-1653: update pathological ScalingReplicaSet event exception #29569
TRT-1874: rename master->main #29565
OCPBUGS-50587: Rely on unstructured for update status instead of type conversion #29560
OCPQE-28543: Check load balancer healthcheck port and path on aws #29544
NO-JIRA: Allow overriding extension binary to local path #29557
CNTRLPLANE-1: Update to Kubernetes v1.32.2 #29549
OCPBUGS-26601: Re-enable AWS for router HTTP/2 test #29326
TRT-1286: List images from external binaries #29450
OCPBUGS-49600: Display etcd bootstrap event on timeline #29490
NO-ISSUE: Automated - Update synthetic test data #29531
Revert “NO-JIRA: use quay.io/openshift/origin-cli:latest directly” #29543
CNTRLPLANE-1: Bump to latest downstream version of ginkgo #29538
TRT-2006: Revert “NO-JIRA: Add test case for checking EgressFirewall DNS names in caps” #29540
NO-JIRA: Add test case for checking EgressFirewall DNS names in caps #29414
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #29493
MULTIARCH-5318: Add tests for ImageStreamImportMode feature gate #29524
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-2838: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed2b673) into master #75
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update manifests generator tooling #54
OCPCLOUD-2853: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.12.0 (8c1c84c) into master #53
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
Full changelog

vsphere-csi-driver-operator

OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
STOR-2245: add manifest-topology.yaml for topology related feature and test #302
OCPBUGS-44374: Bump library-go #301
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
STOR-2252: Bump all deps #296
OCPBUGS-43273: fix panic when vcenter address is incorrect #283
Full changelog

vsphere-problem-detector

OCPBUGS-52964: improve datastore check messages #181
SPLAT-1801: Add support for host groups #175
No-JIRA: Update owners #178
STOR-2252: Bump all deps #177
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github