4.19.0-rc.1

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-rc.1-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-serial
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview-serial
- driver-toolkit Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.19-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance-serial
- rosa-classic-sts-conformance Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-rosa-sts-ovn

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.1

Created: 2025-05-14 15:35:37 +0000 UTC

Image Digest: sha256:5d3a4b9203759cf8ae97546f35128decca063e83181c2ba4407177db252e919c

Components

Kubectl upgraded from 1.31.1 to 1.32.1
Kubernetes upgraded from 1.31.3 to 1.32.4
Kubernetes Tests upgraded from 1.31.1 to 1.32.4
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202501201426-0 to 9.6.20250512-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NetworkSegmentation (56 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ServiceAccountTokenNodeBinding (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallIBMCloud (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DualReplica (0 tests)			Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
Example2 (0 tests)			Enabled (New)	Enabled (New)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpoints (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMCatalogdAPIV1Metas (4 tests)				Enabled (New)		Enabled (New)
NewOLMOwnSingleNamespace (0 tests)				Enabled (New)		Enabled (New)
NewOLMPreflightPermissionChecks (6 tests)				Enabled (New)		Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)
SELinuxMount (6 tests)			Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)
SigstoreImageVerificationPKI (0 tests)			Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-karpenter-provider-aws git 68ae0c26 sha256:83e911e8873719a592ddd724aa591b66a265ce8278001e442ca914038644d195
openstack-resource-controller git d00bab2b sha256:8a526bb444732d369e7ef87105302056449cc35e2b596da55ef3a01f2b1735cb

Removed images

csi-snapshot-validation-webhook
installer-altinfra
ovirt-machine-controllers

Rebuilt images without code change

aws-kms-encryption-provider git 088dcaf7 sha256:48e1e5c68c8277a03a8aa18b8845113f43412cd0eb55f00f309f68ed2db8fbd7
cluster-kube-cluster-api-operator git 3ec30377 sha256:ff09e1e1d9e12ec22f5798f98c6ea987578c1ce60f5067bea30e6a9fd0edb394
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:a4ecad98100bd89beff89b5fd5631f4caecb3261f919d1386dba8bbdece9acb9
configmap-reloader git 9bfbde86 sha256:bf963b396ad85633d482dc00f03dcefa584fab2b55aedafa246226c191d8ed7a
coredns git 7a1451db sha256:09212648c75b0bdff049de3aadc1bdfd66aa2da2c79cbc05af16d0c323d942a9
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:9953004ff1c59ed3af06bd83d4bd030aa74a379f98fd933618e9123073f16e90
ironic-machine-os-downloader git dbe19772 sha256:ccfd42c03b996a9704ddb680f24eeec5cf612330b00726279ec49bdaeb6140cd
ironic-static-ip-manager git fcd9564e sha256:871467cdce2d5b29b7c446ff60f8445aa1639e6a1f8e5cdd49daba6b7bbb3e44
kube-metrics-server git 037a0e7e sha256:796439fbd95b9ffc304de41bed546cd0e0abc92280ad906fe6a8d8dc7e32330c
kube-storage-version-migrator git 4c521b09 sha256:1276ceaedecdabb547238e706a79d90a0cb2ca8c5ee67279214f4678ee4817ff
kubevirt-cloud-controller-manager git 3f4542ec sha256:1d2323358dfbf43fe37a50a4f6efeba04ceebef5ae99b3c354f211b07230c311
libvirt-machine-controllers git a336f0b5 sha256:c7faf558380d0ddd7b02c5842b6fd53ac0f49ae8ef12bc2fd25b351182c00b03
multus-admission-controller git 0b1b812e sha256:df4d4eceb95d4623cb2a2a16f374642363f20aa46194085b7e21bf9ab03d7696
multus-route-override-cni git 391c1b03 sha256:b457537ab5556c8c915e1f3d50ad66e6b034ad4e1119823fc54f54dbc875ab99
network-interface-bond-cni git f575d888 sha256:8c7d59186811e879348add65fba683c02fd00bcee5b10db746cd64a93aa2e876
network-metrics-daemon git 5ec8c6bd sha256:febf71dd104c6c402d33a3119f652ff688c12ba0b3ca3f76de257dd6376ed75c
openshift-state-metrics git 3106bcc3 sha256:a8cbbb016cf2e5ef54ddc80f45a103767f6bc9173e8a0b97b4efc442bb8e0286
ovirt-csi-driver git 1db726a9 sha256:0b645493a5d5fd3ccf92ccad7e356624472c6bcdb742503be0024d2bd77069d2
prom-label-proxy git 7184f58d sha256:6bec49ceced3194cf445a66b01ddc0c9f3de6501e265512bedb632ac29b7f95f
rhel-coreos sha256:2c4251c7e1373c0dc3eb4e2cce0c71e39ef88cc0746d7a6d0d25c7b962decbcf
rhel-coreos-extensions sha256:3e19137525e8d69e41d59575f03b240f403bca2104ebab0e65caf40f83b38173
route-controller-manager git bc97534a sha256:a1b0df5089604f23e1232d8cdcd60e3a819fdd1db942cefa5f186921d27a484d

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
MGMT-20153: Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076
OCPBUGS-53720: Bump jwt to 4.5.2 (#1080) #1080
NO-ISSUE: Update Konflux references (#1082) #1082
MGMT-19421: remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081
MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
NO-ISSUE: Update Konflux references (#1048) #1048
NO-ISSUE: Update Konflux references (#1042) #1042
MGMT-19421: phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#1034) #1034
NO-ISSUE: Update Konflux references (#1031) #1031
NO-ISSUE: Update Konflux references (#1025) #1025
MGMT-19819: Add the commit reference from which the image is built to the image (#1024) #1024
MGMT-19815: Update tekton pipelines to point to new components (#1023) #1023
MGMT-19101: Respect installer args (#1018) #1018
NO-ISSUE: Update Konflux references (#1017) #1017
MGMT-19621: Fix Race condition between the OLM operators monitor to the cluster installation monitor (#1014) #1014
MGMT-19100: Install to the current boot device when CoreosImage is set (#1003) #1003
COS-3013: overlay node image before bootstrapping if necessary (#899) #899
NO-ISSUE: Update buildah image to fix a bug with SBOM (#1013) #1013
Full changelog

agent-installer-node-agent

NO-ISSUE: Update assisted-service’s version (#997) #997
MGMT-20296: Modify RegisterHostConflict log (#990) #990
NO-ISSUE: Update Konflux references (#976) #976
OCPBUGS-53712: golang-jwt/jwt/v4 to 4.5.2 (#956) #956
NO-ISSUE: Update Konflux references (#959) #959
OCPBUGS-52994: Update to latest ghw version (#936) #936
MGMT-20227: Skip Motherboard serial if set to “-” (#955) #955
MGMT-20149: Add required sast tasks for Konflux (#942) #942
NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
NO-ISSUE: Update Konflux references (#924) #924
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) (#911) #912
NO-ISSUE: Update Konflux references (#921) #921
MGMT-19927: Modify MTU Check to Only MTUs != 1500 (#910) #910
MGMT-19588: Also use bond interface for hostname workaround (#920) #920
MGMT-19819: Add the commit reference from which the image is built to the image (#914) #914
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) #912
NO-ISSUE: Update Konflux references (#903) #903
NO-ISSUE: Increase image pull timeout during install (#904) #904
MGMT-19815: Update tekton pipelines to point to new components (#902) #902
MGMT-19102: Add boot device info to inventory (#899) #899
NO-ISSUE: Update Konflux references (#900) #900
MGMT-19100: Allow install to the existing root filesystem (#897) #897
NO-ISSUE: Update docker pkg to fix cves CVE-2024-41110 and CVE-2023-2253 (#895) #895
NO-ISSUE: Update buildah image to fix a bug with SBOM (#898) #898
Full changelog

agent-installer-utils

OCPBUGS-55793: Use internal image registry #87
OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
NO-ISSUE: Update ISOBuilder appliance image SHA #83
NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
OCPBUGS-55515: Include cnv operator in ISO builder script #80
OCPBUGS-55623: update to go.mod #81
NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
NO-ISSUE: ISOBuilder- Update README.md #76
NO-ISSUE: ISOBuilder: Add Clean targets. #69
AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
NO-ISSUE: ISOBuilder: Make sudo optional #63
NO-ISSUE: ISOBuilder: Restructured to resolve right image ref #62
AGENT-1150: Move setup-agent-tui.sh into ignition file #59
NO-ISSUE: iso_builder: add ssh key file flag #53
AGENT-1151: Use internal appliance registry #58
NO-ISSUE: iso_builder: Remove support for rendezvousIP #61
NO-ISSUE: iso_builder: Revert “Merge pull request #54 from pawanpinjarkar/run-appliance-with… #60
NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

apiserver-network-proxy

OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
Full changelog

aws-cloud-controller-manager

OCPCLOUD-2843: Update cloud-provider-aws to K8s 1.32, attempt 3 #104
TRT-2005: Revert #102 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master” #103
OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master #102
TRT-2003: Revert #98 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master” #100
OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master #98
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
OCPCLOUD-2855: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master #542
NO-JIRA: Update manifests generator tooling #538
OCPBUGS-49400: UPSTREAM: 5339: Bump glog for recent fixes #536
Full changelog

aws-ebs-csi-driver

STOR-2253: Rebase to upstream v1.39.0 for OCP 4.19 #283
OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-50493: Use 127.0.0.1 for healtz http-endpoints #364
NO-JIRA: build only needed cmd in container image #329
OCPBUGS-54382: Correct ASH driver inject env config #376
OSASINFRA-3652: openstack-cinder: Use new –with-topology flag #345
STOR-2126: Enable readOnlyFileSystem #370
OCPBUGS-54447: Enable required driver services #369
OCPBUGS-54180: Disable remove-not-ready-taint for azure disk csi driver #371
OCPBUGS-54230: Bump library-go #372
STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
STOR-2263: correct smb csi driver test manifest #360
NO-JIRA: Remove inject-proxy annotations for aws-ebs, aws-efs node daemonsets #308
Full changelog

aws-machine-controllers

OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
OCPCLOUD-2780: select instance ‘MarketType’ option #125
OCPCLOUD-2836: Update dependencies to k8s 1.32 #123
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
CNTRLPLANE-106: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (78638bd) into main #136
OCPCLOUD-2844: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (dfca04a) into master #127
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
OCPCLOUD-2854: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.18.0 (1957fc6) into master #332
NO-JIRA: Update manifests generator tooling #331
Full changelog

azure-disk-csi-driver

OCPBUGS-55494: Correct max data disk count table for L family v4 #105
OCPBUGS-54382, OCPBUGS-55162: Fix ASH azure disk regression issues #104
OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
OCPBUGS-51169: UPSTREAM: 2900: chore: update max data disk count table for D family v6 #100
STOR-2256: Rebase v1.314 upstream #99
OCPBUGS-47036: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #91
OCPBUGS-46575: Rebase to upstream v1.31.1 for OCP 4.19 #94
Full changelog

azure-file-csi-driver

OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
OCPBUGS-52654: Rebase to v1.32.0 #90
OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
OCPBUGS-47043: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #85
Full changelog

azure-kms-encryption-provider

NO-JIRA: Add OCP engineers to OWNERS for KMS #15
CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
OCPBUGS-53496: bump golang-jwt v4 #10
Full changelog

azure-machine-controllers

OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
OCPBUGS-31515: Re-reconcile machine on NIC provisioning failure #132
CORS-3883: Allow managed identity from other resource groups #133
OCPCLOUD-2839: Bump k8s 1.32 #128
OCPBUGS-38570: Fallback to PlatformFaultDomain when Zones is otherwise unset #126
Full changelog

azure-service-operator

OCPBUGS-55334: Updating ose-azure-service-operator-container image to be consistent with ART for 4.19 #8
Full changelog

azure-workload-identity-webhook

OCPBUGS-53800: github.com/golang-jwt/jwt/v4 v4.5.2 #30
OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
downstream: regenerate manifests #37
Merge upstream #36
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55957: Remove Terraform & Altinfra Build Artifacts #9698
OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
no-jira: Relax serviceEndpoint URL validation for IBMCloud platform #9416
OCPBUGS-50004: Add cluster:master_nodes metric retrieval in docs #9447
CORS-3825: pkg/infrastructure/azure: support nvme #9232
OCPBUGS-49737: Custom-DNS: GCP, AWS: Update worker pointer Ignition #9431
OCPBUGS-46656: validate configured networks to not overlap with OVNKubernetes default subnets #9428
MGMT-19545: add optional release registry field to the IBI installation config #9394
OCPBUGS-48044: [Nutanix] Install multi-NICs cluster failed with failureDomains #9376
OCPBUGS-49784: handle runtime panic when validating ovnKubernetesConfig #9432
OCPBUGS-48827: aws/edge/byovpc: subnets tag kube cluster tag to shared #9413
OCPBUGS-49594: aws/byo-ip added required permission ec2:ReleaseAddress #9420
OCPBUGS-46549: Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 #9392
OCPBUGS-48089: validate hostPrefix to be the same when multiple clusternetwork CIDRs are present #9398
SPLAT-1809: Added vSphere multi disk support #9035
OSASINFRA-2571: Add quota validation for server group #9326
OCPBUGS-48228: Envtest: Configure IPv6 service network for API Service #9361
CORS-3724: bump go v1.23 and k8s dependencies #9396
CORS-3637: OWNERS files for platform provider subdirectories #9407
OCPBUGS-47489: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9384
MGMT-19771: Convert IDS to proper IDMS manifest #9391
OCPBUGS-47477: aws: skip dead zones on us-east-1 when discovering AZs #9333
OCPBUGS-48570: [Nutanix] Installation failed with timeout when uploading images to PC #9377
OCPBUGS-45551: Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 #9275
no-jira: docs(user): fix grammer in upi install step #9292
OCPBUGS-48719: Add new tested azure arm instance type to doc #9387
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
NO-ISSUE: Update OWNERS #233
NO-ISSUE: Update BMO and MAO #232
Full changelog

baremetal-operator

METAL-998: Merge upstream #413
OCPBUGS-54582: Sync apr 2 #410
OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
OCPBUGS-51294: Merge upstream #398
OCPBUGS-45252: Merge upstream #397
OCPBUGS-44949: Merge upstream #394
NO-ISSUE: Merge upstream #392
Full changelog

baremetal-runtimecfg

OPNET-629: Use HAProxy monitor endpoint instead of API #343
OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Revert “OPNET-629: Use HAProxy monitor endpoint instead of API” #342
OPNET-629: Use HAProxy monitor endpoint instead of API #336
OCPBUGS-48194: Bump logrus version #338
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-53106: Get installer image from configMap for node-image command #2005
OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
NO-JIRA: adm release new: simplify writePayload #2008
COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
NO-JIRA: adm release new: simplify writePayload #1997
NO-JIRA: adm release new: simplify no operator error condition #1999
OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
NO-JIRA: Bump x/oauth2 and x/crypto #1984
OCPBUGS-51254: Bump indirect dependency go-jose to 4.0.5 version #1983
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures #1981
NO-ISSUE: Test case for lowercase Jira ticket names #1964
NO-ISSUE: pkg/cli/admin/upgrade/recommend: “Upstream” -> “Upstream update service” #1980
trt-1995: Update Unconditional Feature Gate Notation #1979
OCPBUGS-50682: OCPBUGS-50683: Correct oc adm top pvc messages #1974
WRKLDS-1653: Update k8s dependencies to 1.32 #1971
OTA-1426: pkg/cli/admin/upgrade: Check and display interesting alerts #1970
NO-JIRA: Sanitize tar header name as it is used in path #1969
OCPBUGS-49450: Address github.com/docker/docker CVE #1960
NO-ISSUE: admin/upgrade/status/examples/README: Document *-alerts.json #1959
Full changelog

cloud-credential-operator

OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
OCPBUGS-53824: update github.com/golang-jwt/jwt #836
NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
CCO-629: Update modules to latest #817
Full changelog

cloud-network-config-controller

OCPBUGS-45891: Increase API call timeout to 30 second #168
CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
OSASINFRA-3755: Prefer CA cert from credentials secret #167
OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
OCPBUGS-45631: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 #160
Full changelog

cluster-authentication-operator

OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
OCPBUGS-48176: Avoid duplicate OAuth client creation #757
OCPEDGE-1510: feat: add minimum count for DualReplica #761
OCPEDGE-1610: bump(kube,library-go,ocp/api): #759
NO-JIRA: Keycloak e2e test improvements #714
OCPBUGS-51981: fix: update starter path to account for mom integration #760
CNTRLPLANE-71: update cao to manage rolebindingrestriction crd #748
AUTH-541: OIDC structured auth config #713
CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #751
NO-JIRA: OWNERS: update approvers #756
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #752
OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #753
Full changelog

cluster-autoscaler

OCPBUGS-54231: Fix cool down status condition to trigger scale down #355
OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
NO-JIRA: improve nodes listing in ClusterAPI provider #354
OCPBUGS-11115: refactor findScalableResourceProviderIDs #349
OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
OCPCLOUD-2500: Update to recognize both upstream and openshift ScaleFromZero annotations #335
Full changelog

cluster-autoscaler-operator

OCPCLOUD-2829: Bump k8s 1.32 #339
Full changelog

cluster-baremetal-operator

OCPBUGS-53330: Update BMO to latest #468
OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
OCPBUGS-51275: add missing relatedObjects #461
METAL-1286: Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted #462
OCPEDGE-1607: feat: add arbiter node selector #460
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
OCPBUGS-48821: bootstrap API server should terminate only after API is HA #111
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
NO-JIRA: Update manifests generator tooling #232
OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
Full changelog

cluster-capi-operator

OCPBUGS-55998: Should not use v1beta1 of the AdmissionRegistration API group #291
OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
NO-JIRA: Prevent caching CAPI objects across namespaces #285
METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
OCPCLOUD-2648: Machine sync controller deletion logic #278
OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
OCPCLOUD-2712: Update comments based on Security Group Investigation #279
OCPCLOUD-2716: Handle Machine owner references translation between MAPI and CAPI #271
NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 #275
OCPCLOUD-2647: CAPI to MAPI Machine Synchronisation #265
NO-JIRA: Update version variable in generate-ocp-manifests hook script #277
NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
OCPCLOUD-2645: MAPI to CAPI Machine synchronization #258
NO-JIRA: Add lifecyclehook script that updates manifests-gen #264
NO-JIRA: Remove unused Dockerfile #255
OCPCLOUD-2824: Add manifest generation script for rebasebot #257
OCPCLOUD-2792: Repurpose unsupported controller to a broader clusteroperator one #254
MULTIARCH-5043: Add Powervs support for CAPI-MAPI conversion #216
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
OCPBUGS-41827: update injector to support secret as well #385
OCPBUGS-48481: annotation validation policy #379
OCPCLOUD-2843: AWS CCM should be configured with the AWS cloud provider config #384
OCPCLOUD-2831: Bump k8s 1.32 #382
OCPCLOUD-2843: Add AWS Cloud Config Transformer to set Shared config for AWS LB health probes #383
OCPCLOUD-2844: Add role/binding for new Azure AKS lease #381
Full changelog

cluster-config-api

Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
Fix broken ControlPlaneMachineSet integration tests #2296
OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
MON-4071: GA MetricsCollectionProfiles #2286
CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
Promote OnClusterBuild featuregate to default #2192
trt-2080: check devlopment start date for latest release #2285
NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
NO ISSUE: Tombstone Spec.PinnedImageSets in MCN v1alpha1 API #2256
OCPNODE-2877: Remove support to configure cgroupsv1 in OCP #2181
Ignore partial manifests when running schemacheck #2251
MCO-1543: Update v1alpha1 MCN API #2201
Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
security: add annotation for validated SCC type #2211
NO-JIRA: Add example of excluding subnets pattern #2213
OCPNODE-2339: Add PKI field to (cluster)imagepolicy #2088
OCPBUGS-50587, OCPBUGS-51272: Reject new NodeStatus with revision set #2208
Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error #2214
OCPBUGS-32158: Add CEL validation for RegistrySources in Image API #1859
no-jira: correct default CIDR for ipv6 join subnet in API descriptors #2184
featuregate for catalogd metas web api #2202
CORS-3842: Add API Updates for GCP Custom API Endpoints #2150
NO-JIRA: bump controller-tools dependency to latest downstream commit #2207
SPLAT-2000: Add configuration for vSphere multi disk thinProvisioned #2154
NE-1871: Promote GatewayAPI to Tech Preview #2081
OCPBUGS-44199: Allow spaces in AWS tags #2124
OCPBUGS-48542: Remove Never option from IPsec Encapsulation #2199
OCPBUGS-42701: api: Updated the disableMultiNetwork parameter description #2143
ClusterOperator Conditions should be a listType=map #2194
Add the field “MarketType” to “AwsMachineProviderConfig” #2172
SDN-4930: Graduate UserDefinedNetworks to GA #1997
OCPBUGS-49779: Use BASE_REF env var to pull the release version for sippy data #2187
OCPBUGS-48078: Add ratcheting tests for PowerVS service endpoints #2142
NO-JIRA: upkeep: update component name for arbiter feature #2182
NO-JIRA: Add envtest archives for K8s 1.32.1 #2185
OTA-209: operator/v1alpha1: Add the ClusterVersionOperator to scheme #2162
OCPBUGS-45689: Updating ose-cluster-config-api-container image to be consistent with ART for 4.19 #2118
OCPBUGS-48740: Remove unnecessary object-src directive #2176
OSASINFRA-3690: Fix typo #2168
OAPE-94: Update API doc for route externalCertificate #2159
Fix race in tests using CRD patches for ratcheting #2175
OCPBUGS-39148: Add Feature Gate AND on NetworkLoadBalancer CEL #2131
Drop feature promotion from main verify check #2174
Add separate Make target for feature promotion #2173
Change OCL CRD deployment to v1 from v1alpha1 #2134
OCPBUGS-48260: Update dns1123Subdomain validation message for machineNamePrefix #2147
CNTRLPLANE-2: Update kubernetes to 1.32 #2096
Fix handling of validations that require multiple feature gates #2133
Update KAL to introduce statussubresource and maxlength linters #2160
OCPBUGS-48740: Add missing CSP directives #2163
SPLAT-2008: Update vSphere multi disk api size limit doc #2161
Monitoring Config should start life as v1alpha1 #2155
Full changelog

cluster-config-operator

OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
SPLAT-2079: Removed VSphereControlPlaneMachineset feature gate #354
OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
OAPE-126: Include CPMSMachineNamePrefix feature-gate name in e2e tests #351
OCPBUGS-50580: Fix MachineNamePrefix periodic on OpenStack #349
OCPCLOUD-2834: Update dependencies to K8s 1.32 #345
SPLAT-1817: Bump openshift/api to get vSphere multi disk support #335
SPLAT-1799: Add support for vSphere host and vm group based zonal #325
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #234
STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
Full changelog

cluster-etcd-operator

OCPEDGE-1773: Fix arbiter field in install-config #1409
OCPBUGS-53512: fix CVE-2025-30204 #1412
OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
OCPEDGE-1498: support updates to external etcd #1399
OCPEDGE-1500: Added scaling strategies for TNF #1396
OCPBUGS-48523: Bump to Kubernetes 1.32 and latest library-go. #1392
OCPBUGS-48400: generate event upon successfull bootstrap member removal #1391
NO-JIRA: fix schedule backup test #1393
OCPBUGS-48523: Bump library-go for static pod controller apply migration fixes. #1387
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
NO-JIRA: update owners #1178
OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
Full changelog

cluster-ingress-operator

CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
NE-1277: status: Add Gateway API objects to relatedObjects #933
NE-1994: Add E2E test for Istio manual deployment #1204
NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
OCPBUGS-32776: Fix IBM Public Cloud DNS Provider Update Logic #1133
OCPBUGS-48780: Fix IBMCloud DNS Propagation Issues in E2E #1164
OCPBUGS-43745: Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186
NE-1260: Add Makefile target to run Gateway API conformance tests #1176
OCPBUGS-43745: Add support for IdleCloseTerminationPolicy (Go http.Client) #1182
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-45911: revert dev cert rotation #1835
Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
MON-4160: operator: add topology metrics #1827
OCPBUGS-35102: Bump library-go #1824
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #1820
AUTH-541: OIDC structured auth config #1760
OCPNODE-2940: add support for minimumKubeletVersion #1754
MON-4129: slos: accomodate for Prometheus v3 “le” normalization #1815
MON-4129: revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 #1817
NO-ISSUE: Bump TraceAll log level to v=10 #1814
OCPBUGS-48673: targetconfigcontroller: check live etcd endpoints #1792
API-1689: TLS registry: add description #1763
OCPBUGS-49980: change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h #1804
OCPBUGS-49763: Disregard health endpoints in the burn rate alerts #1742
OCPQE-28167: Increase waitForFallbackDegradedConditionTimeout #1789
OCPBUGS-49764: bindata/alerts/slo: improve burnrate calculation #1744
OCPBUGS-48686: bump(library-go) #1795
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in rules defs and relabel config to accommodate the update to Prometheus v3 #1784
NO-JIRA: alerts: update APIRemovedInNextEUSReleaseInUse for 1.32 #1794
CNTRLPLANE-20: Update to Kubernetes 1.32.1 #1791
OCPBUGS-45654: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.19 #1786
OCPBUGS-48686: Bump library-go for static pod controller apply fixes. #1787
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
STOR-2267: Run SELinux warning controller #834
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
NO-JIRA: readme: describe mapping between logLevel and log level #833
NO-ISSUE: Bump TraceAll log level to v=10 #828
OCPBUGS-48701: Bump to latest library-go #831
CNTRLPLANE-21: Update to Kubernetes 1.32.1 #830
OCPBUGS-48701: Bump library-go for static pod controller apply fixes. #829
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-54945: Bump library-go #560
OCPBUGS-48700: Bump to latest library-go #558
CNTRLPLANE-22: Update to Kubernetes 1.32.1 #557
OCPBUGS-48700: Bump library-go for static pod controller apply fixes. #556
Full changelog

cluster-machine-approver

OCPCLOUD-2832: Bump k8s 1.32 #268
Full changelog

cluster-monitoring-operator

OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207: Bump prometheus-operator to v0.81.0 #2593
NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
OCPBUGS-50703: Add incidents metric to telemetry #2569
NO-JIRA: Bump prometheus-operator to v0.80.0 #2565
MON-3866: create separate metrics client cert for metrics server #2536
NO-JIRA: tweak asciiDocs formatting to ease the mapping into the monitoring Docs #2563
OCPBUGS-48381: jsonnet: switch telemeter to main #2560
OCPBUGS-48376: jsonnet: switch openshift-state-metrics to main branch #2559
OCPBUGS-48370: chore: rename default branch in various places #2561
Full changelog

cluster-network-operator

OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
OCPBUGS-54238: Update CSR status condition appropriately #2674
CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
CORENET-5856: Update RouteAdvertisements schema #2685
OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
SDN-5689: Rebase k8s v1.32 #2656
OCPBUGS-54159: frr-k8s: tolerate all taints #2677
OCPBUGS-5241: Auto opt in for whereabouts-controller #2670
OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
SDN-4829: Add machine config watchers to report IPsec status #2383
NP-1100: Enable fast ranges #2648
NO-JIRA: Add “centos” to supported OS ids #2652
SDN-5330: Keep rendering OVN IPsec when its daemonset not available #2628
OCPBUGS-49746: ovn-k,cudn crd: Ensure matching toplogy and topology-config #2638
OCPBUGS-48312: frr-k8s: align manifests with operator #2615
OCPBUGS-49621: Fix UDN and CUDN hostSubnet validation #2636
OCPBUGS-49667: OVNK should be able to annotate network ID on NADs #2634
OCPBUGS-46564: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2610
SDN-5426: ©UDN CRD: add IPAM section and IPAM.Mode field. #2623
SDN-5330: Keep IPsec in OVN enabled during the upgrade #2621
OCPBUGS-48425: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2619
Full changelog

cluster-node-tuning-operator

Fixed rcu_nocbs cpu parsing (#1317) #1317
Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
Make the e2e/basic/modules.go test reentrant (#1322) #1322
Enhance hugepages validation error message (#1320) #1320
Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
CNF-16742: kernelPageSize + hugepages combinations validation (#1296) #1296
machineconfig: add support for various hugepage sizes. (#1295) #1295
E2E: Add test to verify runc uses valid cpus (#1088) #1088
OCPBUGS-49823: Support hugepage size selection for ARM-based clusters (#1294) #1294
OCPBUGS-49403: E2E: Add configuration tests related to align cpus by uncorecache feature (#1291) #1291
OCPBUGS-48530: E2E: Add test cases to verify PerPodPowerManagement with PPC (#1284) #1284
Fix hack/test-tuned-fdp.sh (#1285) #1285
Full changelog

cluster-olm-operator

OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
OCPBUGS-54179: Add openshift node selector annotation #109
OPRUN-3690: Watch for new upstream feature gate APIV1MetasHandler #104
NO-ISSUE: Update to k8s v0.32.2/v1.32.2 #108
OCPBUGS-51357: Revert “(vendor) Bump openshift/api” #106
NO-ISSUE: Bump kubernetes and openshift/api dependencies #105
OPRUN-3663: Watch and reconcile feature gates changes #102
OCPBUGS-49410: extend clusterrole with permissions for OCP observability #103
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #160
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
OCPBUGS-54349: cluster-samples-operator - fix failing unit tests MacBook (ARM chip) #618
OCPBUGS-54216: Update the k8s API version #614
OCPBUGS-54347: add rhdmalone to owners #616
OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
OCPBUGS-30313: Removing reference of registry.access.redhat.com #592
Full changelog

cluster-storage-operator

NO-JIRA: correct cinder operator CredentialsRequest name #577
OCPBUGS-54491: sync Azure File permissions with upstream docs #576
STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
STOR-1878: Run operators without root user control #570
STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
OCPBUGS-50668: fix Vsphere cluster Storage operator in Unavailable state #556
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Add an always passing test case #1172
NO-JIRA: make verify #1177
OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
NO-JIRA: manifests: make template manifests valid YAML #1171
OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
OTA-1403: Create minimal openshift tests extension #1168
NO-JIRA: Add unit test for renderManifest #1173
OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
OTA-1427: Recompute node insights when MC/MCP changes #1144
OTA-209: Add ClusterVersionOperator manifests #1161
OTA-1418: Decribe informer->usc communication #1162
NO-JIRA: Rename fields in ClusterCapabilities for readability #1157
OTA-1427: Polish reason and message in Node’s status insight #1145
NO-JIRA: Refactor for readability #1131
OCPBUGS-50498: cvo: improve error handling on port collision #1160
NO-JIRA: Update ClusterOperator Status Conditions to listType=map #1149
OTA-861: Generate an accepted risk for Y-then-Z upgrade #1093
NO-JIRA: Fix a few AMD64-oriented tests on Non-AMD64 machines #1156
OTA-1418: USC: Drop unknown insights after grace period #1150
NO-JIRA: status: extract API types to a package #1155
OTA-209: Bump github.com/openshift/client-go #1147
OTA-209: Resolve lint issues #1148
OTA-1418: Allow forcing health insights on CV #1141
OTA-1339: USC: Pull latest UpdateStatus API code #1138
OTA-1427: USC: Maintain status insights for Nodes #1136
OTA-1427: Add hack/test-usc-integration.sh to start testing USC in CI #1142
Full changelog

console

OCPBUGS-55972: Wrap ListPageHeader action with a div #15038
OCPBUGS-55961: resolve http Context and Client handling #15036
OCPBUGS-55959: add data-quickstart-id to quick create button #15034
OCPBUGS-55702: fix bug where Critical Alerts section cannot be collapsed #15018
OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
OCPBUGS-55448: Fix +Add details switch animation regression #15011
OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
OCPBUGS-53443: Check for ACM when hiding switcher #14988
ODC-7727: Change favourites button defaultName #14996
CONSOLE-4492: fix: do not render if listpageheader has no props #14995
OCPBUGS-55252: fix bug where tab underline is missing #14991
NO-JIRA: Deprecate react-router-dom-v5-compat #14994
OCPBUGS-54670: Use PF component group for PageHeading #14965
OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
OCPBUGS-54656: Add space between quick start action list items #14940
OCPBUGS-54601: fix bug where operator appears twice #14983
OCPBUGS-45514: Add account email to the telemetry #14978
CONSOLE-4464: Update PatternFly to latest #14979
OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
OCPBUGS-55018: fix web terminal initialize form style #14974
CONSOLE-4505: Update i18next package #14881
OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
CONSOLE-4542: Remove base dl dd dt CSS #14966
CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
OCPBUGS-54477: Remove char limit for favourite names #14924
OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
OCPBUGS-54485: Add dark theme feedback graphic #14925
CONSOLE-4484: Fix Skip to content regression #14918
OCPBUGS-54436: Warning: React.useMemo has a missing dependency #14913
OCPBUGS-54430: Fix shifting play/pause button when loading #14916
OCPBUGS-46404: i18n translations for Export as CSV button #14651
OCPBUGS-52479: Fix OLM e2e tests #14851
OCPBUGS-20230: Prevent yaml editor crash #14676
CONSOLE-4464, ODC-7756: Bump PF6 to latest prereleases #14783
CONSOLE-4501: Add unit test for Timestamp component #14799
CONSOLE-4521: Remove old polyfills #14880
OCPBUGS-52948: Multiple favorite icon on same page #14863
OCPBUGS-53065: Debug pod logs are not accessible when debugging a node via OpenShift Console #14898
CONSOLE-4462: Remove two more overrides #14891
OCPBUGS-53227: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14901
ODC-7770: Remove perspective switcher if only one perspective is present #14762
OCPBUGS-52938: ‘Helm Chart Repository’ name is used in breadcrumb link, details page heading and action names #14890
(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
CONSOLE-4484: follow on fix to ensure Bottom ConsoleNotification are … #14806
NO-JIRA: Apply plugin-api-changed label on changes to the api package #14804
OCPBUGS-52180: Fix notification drawer close button error #14809
ODC-7724: Add guided tour in Admin perspective #14776
ODC-7769: Add Getting started section in project Overview page #14792
OCPBUGS-30973: Update @types/react-redux #14680
ODC-7725: Show perspective preferences option if more than one perspective are available #14644
OCPBUGS-51202: Fix Timestamp component #14793
OCPBUGS-46050: Determine if disabled a11y rules can be re-enabled #14643
CONSOLE-4484: Replace custom tabs with PF6 Tabs component #14760
OCPBUGS-48642: Check for unused modules in static plugins #14695
CONSOLE-4486: decrease TertiaryHeading margins in Edit resource limit… #14782
OCPBUGS-50546: Do not load CSRs if user does not have permissions #14771
OCPBUGS-36786: Force async package upgrade. #14775
OCPBUGS-50670: fix bold text issues and missing underline on inline link buttons on safari and firefox. #14766
NO-JIRA: Small demo plugin and plugin doc improvements #14779
CONSOLE-4489: fix bug where dropdown menu can overflow #14780
OCPBUGS-49996: add missing contextId to be able to inject tabs from plugins #14732
OCPBUGS-49778: Linkify OLM operator uninstall message #14713
OCPBUGS-50693: Show Observe section without PROMETHEUS and MONITORING flags #14697
CONSOLE-4467: replace html heading elements with PatternFly components #14767
OCPBUGS-50847: fix but where textarea can be expanded horizontally #14773
CONSOLE-4476: Remove various upstream workarounds #14756
OCPBUGS-45141: Store Topology sidebar alert in the localStorage #14700
NO-JIRA: Update Console dynamic plugin SDK doc and changelogs #14768
ODC-7735: Edit ci tests to have step to enable developer perspective #14684
OCPBUGS-50665: fix bug where Demo Plugin tab url is always appended #14764
CONSOLE-4079, CONSOLE-4080: Address tech debt in GenericSecretForm and KeyValueEntryForm components #14520
OCPBUGS-49381: Workloads-DeploymentConfigs-Add storage: i18n misses #14747
CONSOLE-4480: fix background color of Command Line Terminal tab #14759
OCPBUGS-48548: The secret created with Basic authentication has an incorrect type #14691
CONSOLE-4464: bump PatternFly 6 to latest available versions #14750
CONSOLE-4443: Upgrade dynamic-demo-plugin to PatternFly 6 #14682
OCPBUGS-48637: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14709
OCPBUGS-46088: [Hypershift] Filter by Node type list is empty #14704
CONSOLE-4477: more token updates #14752
OCPBUGS-49839: fix run time error when no completed version exists #14742
CONSOLE-4475: fix QueryBrowser tooltip styles #14751
CONSOLE-4469: improve layout and functionality of Edit upstream confi… #14734
OCPBUGS-43061: update the Deployment pod on change in imageStream #14523
CONSOLE-4474: Unbold pf-v6 labels by default #14748
CONSOLE-4465: add workaround for menu scroll #14745
CONSOLE-4473: fix alignment issues with Bootstrap radio and checkbox … #14739
CONSOLE-4472: fix QuickStart layout issues #14738
CONSOLE-4471: fix bug where close button can overlap guided tour popo… #14737
CONSOLE-4470: fix bug where Edit button is bold inside DetailsItem dt #14736
CONSOLE-4467: replace html heading elements with PatternFly components #14726
OCPBUGS-49988: Updating cypress config to have video enabled for the CI results #14731
OCPBUGS-46513: Fix issue with bridge flag for conditional CSP features #14727
OCPBUGS-47722: always show associated plugin name on CSV details page #14656
OCPBUGS-49718: Fix Pipeline Repository overview page close button #14708
ODC-7726, ODC-7767: Expose Topology components and utils to openshift-console/dynamic-plugin-sdk #14705
OCPBUGS-49919: Catalog card label should be right aligned #14722
NO-JIRA: Consolidate YAMLs Directory into yamls to Resolve macOS Case-Sensitivity Conflicts #14712
CONSOLE-4381: PatternFly 6 README updates #14729
OCPBUGS-49839: fix run time error when no completed version exists #14719
OCPBUGS-49366: fix bug where Search filter dropdown label isn’t i18n #14706
OCPBUGS-48635: fix/remove broken codeRefs #14694
OCPBUGS-46513: Add support for conditional CSP headers #14710
OCPBUGS-48608: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14692
OCPBUGS-45029: dev-console cypress feature file test update #14685
NO-JIRA: update github username #14679
OCPBUGS-46438: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14628
OCPEDGE-1346: feat: bump api to pull in arbiter node infra #14469
OCPBUGS-45103: update variable name for plugin name parsing #14650
Full changelog

console-operator

ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
OCPBUGS-45514: Report email_domain to telemetry #950
OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
OCPBUGS-48740: Vendor the missing CSP directives #960
OCPBUGS-46513: Add ConsolePluginContentSecurityPolicy feature gate to… #957
OCPEDGE-1345: feat: add arbiter node support for HA #939
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-37212: Upstream sync 15042025 #183
OCPBUGS-53198: Upstream sync 01-04-2025 #180
OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

ART-12521: update go mod dependency for konflux #320
NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
Full changelog

csi-external-attacher

STOR-2251: Rebase external-attacher to v4.8.1 for OCP 4.19 #83
OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
Full changelog

csi-external-provisioner

STOR-2251: Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 #111
OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
OCPBUGS-46727: CVE-2024-45338: bump golang.org/x/net to v0.34.0 #109
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
STOR-2281: Remove csi-snapshot-validation-webhook #175
Full changelog

csi-livenessprobe

STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
Full changelog

csi-node-driver-registrar

STOR-2251: Rebase node-driver-registrat to v2.13.0 for OCP 4.19 #78
Full changelog

docker-builder

OCPBUGS-45492: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 #467
OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
OCPBUGS-48741: Buildah dependency bump to v1.39.0 #455
OCPBUGS-48667: Bump golang.org/x/crypto dependency to 0.31.0 #432
Full changelog

docker-registry

IR-522: disable aws region check #425
NO-JIRA: chore: update owners file #424
OCPBUGS-25981, OCPBUGS-38874: bump docker-distribution to add new regions #419
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd

ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (1316392) into master #74
OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (54cd0bb) into master #69
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
NO-JIRA: Update manifests generator tooling #238
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.8.1 (737b737) into master #237
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
OCPBUGS-46387: add a3 instance types to gpu quota validation logic #102
OCPBUGS-17079, OCPBUGS-44671: Disable shielded VMs for non-UEFI disks #108
OCPCLOUD-2840: Bump k8s 1.32 #109
Full changelog

gcp-pd-csi-driver

OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-53451: enable VolumeAttributesClass #145
OCPBUGS-54336: Bump library-go #144
CORS-3911: Add custom endpoint args from infrastructure #141
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
OCPBUGS-48100: Rename master branch to main #138
Full changelog

haproxy-router

OCPBUGS-45759: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.19 #644
OCPBUGS-45702: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.19 #643
OCPBUGS-39403: Fix parseIPList to Continue Processing After Invalid IPs and Return Valid IPs #621
OCPBUGS-45290: Reject All CA-Signed Certs Using SHA1 #642
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-55265: Bump 1.32.4 #2275
OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
OCPBUGS-53249: skip UDP LoadBalancer on external #2247
OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
TRT-1854: fix OVNKubernetes network skips #2256
STOR-2285: Update group snapshot test rules #2254
OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
TRT-1836: UPSTREAM: <carry>: remove old k8s-tests external binary #2178
OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
OCPBUGS-45214: Add groupsnapshot tests #2155
OCPNODE-2940: add minimumkubeletversion admission package #2201
TRT-1854: Update openshift-tests-extension version #2214
OCPBUGS-45359: Unskip recover volume expansion failure tests #2218
OCPBUGS-45241: UPSTREAM: <carry>: Re-enable temporarily disabled port-forward test #2213
OAPE-96: UPSTREAM: <drop>: bump openshift/api@107848b719c5 #2217
OCPNODE-2940: add minimumkubeletversion package #2104
CNTRLPLANE-1: Bump 1.32.2 #2209
NO-JIRA: UPSTREAM: fix request Host storing in openshift.io/during-graceful audit log annotation #2119
OCPBUGS-41533: UPSTREAM: <carry>: util: inform the kubelet it has a new enough kernel for idmapped mounts #2168
TRT-1286: List images from external test binary #2177
OCPBUGS-46477: Disable ServiceAccountNodeAudienceRestriction feature gate and reenable Azure file tests #2202
TRT-1854: UPSTREAM: <drop>: ./hack/update-vendor.sh for openshift-tests-extension #2194
OCPBUGS-46038: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2171
OCPBUGS-48694: Don’t retry storage calls with side effects. #2191
NO-JIRA: Add benluddy to DOWNSTREAM_OWNERS. #2182
OCPBUGS-38121: OCPBUGS-39305: UPSTREAM: <carry>: log only deprecated api requests #2113
OCPBUGS-48177: UPSTREAM: <carry>: disable etcd readiness checks by default #2174
OCPEDGE-1314: feat: add arbiter node role #2109
CNTRLPLANE-1: downgrade grpc library to 1.65.0 #2190
OCPBUGS-48077, OCPBUGS-48078: Fix status ratcheting 4.19 #2167
OCPBUGS-48819: Fix Portworx plugin’s CSI translation to copy secret name & namespace #2185
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #2147
OCPBUGS-48364: Update to Kubernetes 1.31.4 #2179
Full changelog

hypershift

OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
Red Hat Konflux update hypershift-cli-mce-29 #6104
HYPBLD-642: konflux build hcp cli #6072
OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
AUTOSCALE-127: fix e2e autonode drift test #6062
CNTRLPLANE-112: Enable MIv3 for Ingress #6058
NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
NO-JIRA: Add version check for CAPI flag #5911
ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
CNTRLPLANE-350: add NodePool minor version compatibility check #5873
NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792: update go mod dependency for konflux #5918
CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379: Kas bootstrap bin #5871
CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
ARO-15229: add e2e tests for image registry capability #5810
CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
OCPBUGS-50915: Disable capi machineset preflights #5653
CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
HOSTEDCP-2262: Karpenter openshift ec2class #5600
NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719: openstack: ORC deployed out of tree #5584
CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606: Fix kubeadmin login failure #5631
NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
OCPBUGS-50014: Restart HCP on stale serving certs #5601
NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171: add e2e test for aro scheduler #5568
NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
PODAUTO-318: Implement HCP karpenter deletion #5540
NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
PODAUTO-302: Relax cel rule for karpenter role to be required in an ec2NodeClass #5581
NO-JIRA: Remove haproxy generation error for normal flow #5583
OCPBUGS-49913: Honor proxy vars in the util insecure http client #5572
CNTRLPLANE-221: specify region in AWS credentials for operator-roles #5571
NO-JIRA: e2e: combine OpenStack advanced tests within one Nodepool #5579
OCPBUGS-49609: Split binary builds #5499
NO-JIRA: Apply additional labels to CollectProfilesCronJob #5580
HOSTEDCP-2231: Remove cloud connection, Set Transit Gateway as default #5293
CNTRLPLANE-209: Add shared-ingress docs #5564
HOSTEDCP-2257: Vendor karpenter CRDs #5522
ARO-14442: introduce capabilities api #5554
NO-JIRA: add optional step for creating release image using cluster b… #5578
CNTRLPLANE-109: Update Azure API for Phase 3 Managed Identity Work #5556
NO-JIRA: add watch permission to SecretProviderClass in ARO #5565
NO-JIRA: Update cpov2 docs #5560
NO-JIRA: e2e: don’t skip mirrorconfigs on OSP #5441
OCPBUGS-49791: Use /livez for kubernetes scheduler liveness probe #5546
CNTRLPLANE-111: Move secretproviderclass.go to support folder #5559
OCPBUGS-49838: Watch NodePools in HostedCluster controller #5553
HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5549
OCPBUGS-49724: remove passed in image matching desired image check fr… #5524
OCPBUGS-48619: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5525
HOSTEDCP-2040: Add TestCreateClusterCustomConfigV2 #5401
OCPBUGS-49748: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5535
OCPBUGS-49804: Revert “HOSTEDCP-2120: Enable EnsureCustomLabels e2e test” #5547
HOSTEDCP-2259: CLI: enable secure proxy creation #5526
CNTRLPLANE-172: cli: azure: allow assigning custom HCP roles #5541
OCPBUGS-49686: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5505
NO-JIRA: Bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 in the azure-github-dependencies group #5518
HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5511
OCPBUGS-48688: Remove Credentials from the Azure API #5510
HOSTEDCP-2249: Reconcile karpenter user-data secret programmatically instead of creating a mock nodePool #5439
NO-JIRA: Bump the misc-dependencies group with 6 updates #5519
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #5508
OCPBUGS-49611: Konnectivity: add agent readiness #4829
NO-JIRA: cpov2: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5514
HOSTEDCP-2226: Add ValidatingAdmissionPolicy for karpenter EC2NodeClass CRD #5395
HOSTEDCP-2256: [CPO Refactor] Delete component and its resources when predicate changes to false #5509
HOSTEDCP-2245: [CPO Refactor] Refactor cluster-node-tuning-operator #5473
NO-JIRA: add assignServicePrincipal check before assignign roles to WI #5498
HOSTEDCP-1706: feat: add a metric for cluster size override annotation #4825
NO-JIRA: Add instructions for ccoctl and fix minor issues #5490
OCPBUGS-48688: Add Tenant ID to Azure API & Remove Credentials from CPO #5495
OCPBUGS-48519: fix overwriting PKI operator HCP conditions #5493
HOSTEDCP-2169: Add aro scheduler #5417
OCPBUGS-48532: Fix IsProgressing condition in HostedClusters #5487
NO-JIRA: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5496
CNTRLPLANE-187: Remove MachineIdentityID from Azure HyperShift API #5488
OCPBUGS-49370: openstack: update CAPI provider deployment spec #5483
NO-JIRA: Fix a few bugs in Azure Upstream Docs #5489
NO-JIRA: chore(deps): update konflux references (main) #5476
NO-JIRA: Update managed Azure/ARO HCP contrib and upstream documents #5474
HOSTEDCP-2061: [CPO Refactor] Refactor cluster-network-operator #5460
OCPBUGS-48626: openstack: add DNS option to CLI #5446
NO-JIRA: Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in the misc-dependencies group #5472
NO-JIRA: Sync v2 code #5467
CNTRLPLANE-173: Assign known ARO roles for CP IDs for ARO HCP #5469
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.5.0 to 1.6.0 in the azure-github-dependencies group #5471
PODAUTO-303: Re enable karpenter e2e #5462
OCPBUGS-48688: Remove client secret references now Workload Identity is supported #5455
OCPBUGS-48794: Adds contributor role over VNET for Cloud Provider #5468
HOSTEDCP-2232: Destroy DHCP Server before PowerVS Cloud Instance deletion #5227
NO-JIRA: [kubevirt] Skip KubeVirtAdvancedMultinetTest for v4.14 and below #5449
NO-JIRA: Remove OpenStack workaround for Ingress Floating IP #5176
OCPBUGS-48758: Revert #5404 “PODAUTO-303: Add the most basic e2e for autoNode via Karpenter” #5461
HOSTEDCP-2176: Enable unused & ineffassign linters in golangci-lint #5418
OCPBUGS-48708: correct aro azureFile config and permissions #5453
NO-JIRA: add command for retrieving user account id for AKS dev env s… #5436
PODAUTO-303: Add the most basic e2e for autoNode via Karpenter #5404
NO-JIRA: Bump the misc-dependencies group with 8 updates #5450
HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 4 #5361
HOSTEDCP-2062: [CPO Refactor] Refactor kubevirt csi driver #5447
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity #5440
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-2846: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.32 (f326c83) into master #76
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
STOR-2249: Rebase to upstream 5.2.14 for OCP 4.19 #79
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
OCPBUGS-54482: Bump library-go #142
STOR-2252: Bump all deps for 4.19 #141
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
STOR-2252: Bump all deps #137
OCPBUGS-47121: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #136
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2852: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.10.0 (0c35eac) into main #107
NO-JIRA: Update manifests generator tooling #106
OCPBUGS-50674: Fix for CVE-2024-45338 in golang.org/x/net/html in main #99
Full changelog

ibmcloud-machine-controllers

OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
OCPCLOUD-2841: Update K8s to 1.32 #60
Full changelog

insights-operator

CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
chore: add BaiyangZhou to OWNERS file (#1080) #1080
NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Fix bad IPv6 address (#1073) #1073
OCPBUGS-35196: update the duration validation pattern according to the OpenShift API (#1072) #1072
CCXDEV-12875: Enable Insight Operator entitlements for multi arch clusters (#1066) #1066
CCXDEV-14824: Upgrade Golang to 1.23 (#1071) #1071
OCPBUGS-48154: Add a liveness probe to the extractor container (#1067) #1067
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Enable FIPS #41
New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Full changelog

ironic

OCPBUGS-55743: Extract files one-by-one in logwatch #656
METAL-1327: Update pkgs ocp419 take2 #651
NO-ISSUE: Update dependencies for OCP 4.19, part 1 #649
NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
OCPBUGS-51310: Fix runlogwatch script #641
OCPBUGS-50613: Install python3-inotify pkg explicitly #638
OCPBUGS-49829: Fix runlogwatch failure if LOG_DIR does not exist #635
OCPBUGS-48737: Sync with upstream metal3 ironic-image 2025-01-30 #629
METAL-1266: Switch master branch to main in check-requirements #628
METAL-1253: Remove dependency from sushy package #621
Full changelog

ironic-agent

OCPBUGS-55315: Delay determining the hostname to put into ignition #182
NO-ISSUE: Update dependencies for OCP 4.19 #181
METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
METAL-1266: Switch master branch to main in check-requirements #175
OCPBUGS-45259: METAL-1251: Update commit hash of ironic-python-agent #174
Full changelog

keepalived-ipfailover

OCPBUGS-45700: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205
OCPBUGS-45831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204
OCPBUGS-45405: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201
NE-1908: Add instructions for keepalived-ipfailover image testing #198
Full changelog

kube-rbac-proxy

CNTRLPLANE-248: Merge upstream v0.19.0 release #116
OCPBUGS-45765: Updating kube-rbac-proxy-container image to be consistent with ART for 4.19 #115
Full changelog

kube-state-metrics

OCPBUGS-52192: [bot] Bump openshift/kube-state-metrics to v2.15.0 #119
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
OCPBUGS-55706: fix: use patch for machine/machineset status #1367
OCPBUGS-55424: Added skip for when config not multi nic #1358
OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
Revert “SPLAT-2180: Added conformance label” #1359
OCPBUGS-55417: Resync CRDs #1357
OCPBUGS-55083: Updates GCP CredentialsRequest #1353
SPLAT-2180: Added conformance label #1354
OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
OCPBUGS-52464: webhook to validate marketType field #1339
SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
OCPCLOUD-2780: Validate aws marketType webhook #1329
OCPBUGS-44671, OCPBUGS-51373: Updates GCP credentials request #1335
SPLAT-2000: Added vSphere provisioning mode to data disks #1328
OCPBUGS-49413: add image/read permissions #1330
OCPBUGS-51042: Drop oVirt support #1331
OCPBUGS-49351: Added vSphere check for max networks #1327
OCPCLOUD-2830: Update dependencies to K8s 1.32 #1325
SPLAT-1800: vSphere host zonal missing operator feature #1323
Full changelog

machine-config-operator

OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
Revert “NO-ISSUE: debug podman on PIS” #5013
OCPBUGS-44757: decrease leases for kubelet on azure #5010
NO-ISSUE: debug podman on PIS #5003
MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
OCPBUGS-55388: MSBIC should not update windows machinesets #5009
MCO-1645: API & client-go bumps for MCN V1 API updates #5011
MCO-1519: Adapt MCO code to use V1 MCN API #4992
OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
NO-JIRA: Update Envtest assets to 1.32.1 #5002
OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
MCO-1615: MCN status update degraded #4977
MCO-1509: Enable OCL for disconnected workflow #4971
MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
OCPEDGE-1690: add dual-replica templates #4938
OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
OCPBUGS-54161: use the same success criteria for OCL e2e tests #4941
MCO-1579: Bump ignition to 3.5 #4903
NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
OPNET-629: Mark haproxy unhealthy if no healthy backends #4767
OCPBUGS-44602: Set ownerReference for OCL build objects #4861
OCPBUGS-41489: configure-ovs workaround for ovs-if-br-ex bug #4877
OCPBUGS-48810: Ensure that build jobs are always reconciled #4811
No-Issue: Remove OCL Extensions test #4868
OCPEDGE-1493: Add 2no-ha extension support required by Two Node OpenShift #4843
OCPBUGS-50849: add RHEL variant to IsEL() check #4856
NO-ISSUE: increase WaitForPoolComplete() timeout #4873
OCPBUGS-51009: OSUpdateStarted event should only be emitted on actual OS updates #4864
OCPBUGS-47743: Update cluster-reader ClusterRole permissions #4823
OCPBUGS-45459: Remove trailing period from Openstack provided hostnames #4778
OCPBUGS-47629: /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4850
OCPBUGS-49394: Fix SELinux failures running afterburn-hostname #4863
OCPBUGS-50599: Enforce VIPs to be collocated at the same host #4844
OCPBUGS-49347: Degraded machine-config CO due to ManagedBootImages update when upgrading an OCL cluster #4810
OCPBUGS-33894: Avoid dumping Go struct in potentially user-facing reason annotation #4814
OCPBUGS-44618: In OCL, MCPs are reporting Updating=false while the image is being built #4710
OCPBUGS-49959: Panic in the MCC when using OCL v1 GA #4834
NO-ISSUE: Add isabella-janssen to OWNERS as approver & reviewer #4846
OCPBUGS-31778: Update format verbs for alert logs #4839
OCPBUGS-50002: MCC complains about v1 MachineOSConfig in default featureset #4838
MCO-1492: Add new runbook for SystemMemoryExceedsReservation to alert #4832
OCPBUGS-43552: maxUnavailable value is not honored when disabling OCL #4817
OCPBUGS-49731: Correct MachineConfig documentation on sysstat extension support #4828
OCPEDGE-1585: Revert “OCPEDGE-1419 Add ksan-storage extension” #4821
OCPBUGS-49436: Make resolv-prepender env file optional #4815
NO-ISSUE: Remove etc-pki-entitlement cruft #4812
OCPBUGS-48250: MCO CO degrades are stuck on until master pool updates complete #4791
OCPBUGS-46072: create /run/nodeip-configuration before use #4798
MCO-1437: MCO-1476: MCO-1477: MCO-1284: Adapt MCO to OCL v1 API #4756
MGMT-19337: enable injection of custom kubelet labels via env var in base template #4794
MCO-643: MCO-645: Reintroduce MCS CA rotation #4735
OCPBUGS-34586: Auto-recover from MC with invalid extension #4763
OCPBUGS-29067: GCP Custom-DNS: Update services that run on control plane nodes #4367
OCPBUGS-48566: Enable nmstate-configuration on all platforms #4795
MCO-466: Improve erroring where there is a bootstrap/in-cluster master config mismatch #4723
OCPEDGE-1313: feat: added assets for arbiter node role #4675
Full changelog

machine-image-customization-controller

OCPBUGS-44031: Verify tls while pulling down IPA #131
Full changelog

machine-os-images

OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
NO-JIRA: Change to new host #54
OCPBUGS-50910: Decompress pxe file only if it’s a valid compressed file #51
Full changelog

metallb-frr

OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
Syncmetallb 04042025 #81
Align to upstream #79
Syncoperator03032025 #78
OCPBUGS-45545: Updating ose-frr-container image to be consistent with ART for 4.19 #70
Sync OWNERS with MetalLB #75
Align upstream 13/1/25 #72
Full changelog

monitoring-plugin

NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
: NO-JIRA: bound table scroll and column alignment #409 #409
NO-JIRA: feature: upgrade react router to v5 compat #406
NO-JIRA: fix(incidents): performance improvements for incidents page #398
OCPBUGS-48533: Reset variables when making orthongonal selections #394
OU-765: Don’t break if cluster doesn’t exist #399
OU-767: Allow filtering by cluster name #396
OU-750: update the metrics typeahead to look pf-6 native #395
OCPBUGS-54292: Show column headings on metrics page #397
OU-760: Requests UX changes post PF-6 #390
OU-723, OU-729: Add label typeahead #392
OU-757: Show cluster column heading on acm silences page #393
OU-703: fix states filter in aggregated row #389
OU-752: Clear out old queries when loading queries from URL #391
RHINENG-16773: fixed silence alerts data form not filled with alert details #384
OU-702: re-add csv button for aggregated alert list #383
OU-659: PF-6 Migration #380
OU-678: fix: allow to set refresh interval to off #379
OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
OCPBUGS-52592: Fix “Export as CSV” #369
OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
NO-JIRA: fix virtualization persepective perses extension point #355
OU-618: Various Perses Updates #353
NO-JIRA: use ocp base images for ci #354
NO-JIRA: add incidents header #351
OU-618: Embed Perses Dashboards into Monitoring Plugin #350
OU-643: fix filter dropdpdowns to match patterfly correct use, remove deprecated dropdown components #347
rhineng-16008: add cutoff for alerts timestamps #349
RHINENG-10537: incidents page remove longstanding filter #343
RHINENG-10537: Voronoi container review branch #340
RHINENG-10537: fix incidents page loading state issue #341
NO-JIRA: Incidents page small fixes #336
OU-649: fix net/http vulnerable dependency #332
RHINENG-15594: fix tooltip in row details #334
RHINENG-15501: Fixing incidents filter issues with severeties and long standing #333
RHINENG-15582: Incidents dark theme support #331
RHINENG-15284: sync alert chart to main filter #330
RHINENG-15501: hotfix because filter requirement were updated #329
OU-644: Finish Alerting Refactor #306
OU-645: Fix virtualization perspective routes and routing #325
NO-JIRA: Don’t attempt to access potentially undefined variable #326
NO-JIRA: fixed function for incident chart colors #324
RHINENG-15501: Improve incidents filter logic and sync #323
RHINENG-15284: Sync alerts chart and incidents table with days filter #319
Full changelog

multus-cni, multus-cni-microshift

: OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-54422: Ds merge ⁴⁄₃ #356
OCPBUGS-53397: Upstream sync 20-03-2025 #353
OCPBUGS-52415: replace entrypoint #349
NP-1128: Ds merge 2/25/25 #346
NP-1100: Add nodeslicecontroller to dockerfile #341
OKD-232: fix entrypoint.sh for new SCOS builds #322
Full changelog

must-gather

MCO-1648: MCO-1649: Add machineconfignodes and pinnedimagesets to must-gather #487
CNF-16640: Changes for FRR-K8s Deployed via CNO #479
no-jira: Remove davemulford from collection-scripts/OWNERS file. #481
Full changelog

network-tools

NO-JIRA: Fix JIRA queries #141
NO-JIRA: Add Peng #138
Full changelog

networking-console-plugin

CNV-57493: Validate if the namespace is configured for a primary UDN #237
CNV-60065: fix cudn input name #233
OCPBUGS-49395: adding translations #236
Upload i18n translations scripts #229
CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
CNV-58647: update PatternFly Modal to new version #228
CNV-58320: remove console classes which changed styling #227
add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
CNV-56436: show ipam lifecycle correctly with new spec #218
OCPBUGS-41964: No default path in the route creation form #216
CNV-56236: fix cudn modal form titles #217
OCPBUGS-42135: Update documentation links #214
CNV-56336: fix ipam lifecycle with new spec #212
CNV-56076: create cudn from empty state #210
Fix nads with no label #206
OCPBUGS-45803: Fix weight width #203
CNV-55457: Remove project modal #202
CNV-55234: do not show all namesapces in cudn namespace column #197
CNV-55129: Disable udn button #178
CNV-54828: fix udn create button #190
OCPBUGS-48421: add CIRD subnmet description #183
OCPBUGS-48440: show MTU and sort on list #181
OCPBUGS-48677: fix nad misspelled #189
CNV-55085: remove layer configuration #180
CNV-55239: Cluster udn through matchlabel #179
CNV-54825: do not allow deleting udns #191
OCPBUGS-48676: replace edit with save #185
OCPBUGS-48665: fix service name #184
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
Full changelog

nutanix-machine-controllers

OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
OCPBUGS-54317: fixing CVE-2025-22868 #97
OCPBUGS-53245: Fix link-local addresses being added to machine #100
OCPBUGS-50710: fixing CVE-2024-45338 #89
Full changelog

oauth-apiserver

OCPBUGS-49845: Prevent storage layer retries for methods with side effects. #128
Full changelog

oauth-proxy

OCPBUGS-48333: Update dependencies to address CVE-2024-24786 #313
Full changelog

oauth-server

CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #169
OCPBUGS-35294: Add French and Spanish localization for login screen #154
Full changelog

oc-mirror

OCPBUGS-55704: implements registries.d file as specified in containers/image docs (#1137) #1137
OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
OCPBUGS-54653: delete: continue on errors (#1127) #1127
OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
OCPBUGS-52471: Fix OOM at filtering catalogs (#1120) #1120
OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
CLID-203, OCPBUGS-26771: fixes CVE-2024-0406 mholt/archiver: path traversal vulnerability (#1092) #1092
Bump the pip group across 2 directories with 3 updates (#1054) #1054
v2: update golangci-lint config (#1083) #1083
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1087) #1087
v2/cli: always stop local registry and close registry.log (#1068) #1068
OCPBUGS-44103: bump oc fork version (#1080) #1080
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1070) #1070
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1077) #1077
v2: disable spinners when not running in a tty (#1049) #1049
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1072) #1072
OCPBUGS-49991: fixes bundle related images being skipped (#1071) #1071
NO-JIRA: only save graph data if it’s valid json (#1069) #1069
OCPBUGS-49803: v2/cli: share common flag options (#1043) #1043
OCPBUGS-49798: exposes the parallel-layers flag (#1063) #1063
OCPBUGS-49730: fixes the infinite loop when no images to mirror (#1060) #1060
no-jira: v2/local_stored_collector: fix missing log argument (#1061) #1061
OCPBUGS-49723: v2/clusterresources: remove ClusterCatalog namespace (#1058) #1058
CLID-300: Update catalog filtering doc (#1047) #1047
CLID-306: upgrades dependencies (#1053) #1053
CLID-306: upgrades dependencies (#1048) #1048
CLID-303: disables the selected bundle feature (#1045) #1045
CLID-301: add –cache-dir to delete command (#1041) #1041
OCPBUGS-45059: fixes the delete when catalog mirrored with v1 from disk (oci://) (#1036) #1036
CLID-301: add –cache-dir command line option (#1035) #1035
OCPBUGS-45161: Generate ClusterCatalog resources for operator catalogs (#1034) #1034
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #322
NO-ISSUE: Synchronize From Upstream Repositories #315
NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
NO-ISSUE: Manual Synchronize from upstream #224
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
NO-ISSUE: Synchronize From Upstream Repositories #212
NO-ISSUE: Synchronize From Upstream Repositories #210
NO-ISSUE: Synchronize From Upstream Repositories #209
NO-ISSUE: Synchronize From Upstream Repositories #207
NO-ISSUE: Synchronize From Upstream Repositories #205
NO-ISSUE: Synchronize From Upstream Repositories #204
NO-ISSUE: Synchronize From Upstream Repositories #203
NO-ISSUE: Synchronize From Upstream Repositories #202
NO-ISSUE: Synchronize From Upstream Repositories #199
NO-ISSUE: Synchronize From Upstream Repositories #195
NO-ISSUE: Synchronize From Upstream Repositories #193
NO-ISSUE: Synchronize From Upstream Repositories #189
NO-ISSUE: Synchronize From Upstream Repositories #190
NO-ISSUE: Synchronize From Upstream Repositories #188
NO-ISSUE: Synchronize From Upstream Repositories #187
NO-ISSUE: Synchronize From Upstream Repositories #184
NO-ISSUE: Synchronize From Upstream Repositories #183
NO-ISSUE: Synchronize From Upstream Repositories #182
NO-ISSUE: Synchronize From Upstream Repositories #181
NO-ISSUE: Synchronize From Upstream Repositories #179
NO-ISSUE: Synchronize From Upstream Repositories #178
NO-ISSUE: Synchronize From Upstream Repositories #177
NO-ISSUE: Synchronize From Upstream Repositories #176
NO-ISSUE: Synchronize From Upstream Repositories #175
NO-ISSUE: Synchronize From Upstream Repositories #174
NO-ISSUE: Synchronize From Upstream Repositories #173
NO-ISSUE: Synchronize From Upstream Repositories #172
NO-ISSUE: Synchronize From Upstream Repositories #171
NO-ISSUE: Synchronize From Upstream Repositories #170
NO-ISSUE: Synchronize From Upstream Repositories #169
NO-ISSUE: Synchronize From Upstream Repositories #168
NO-ISSUE: Synchronize From Upstream Repositories #167
NO-ISSUE: Synchronize From Upstream Repositories #165
NO-ISSUE: Synchronize From Upstream Repositories #164
NO-ISSUE: Synchronize From Upstream Repositories #163
NO-ISSUE: Synchronize From Upstream Repositories #162
NO-ISSUE: Synchronize From Upstream Repositories #161
NO-ISSUE: Synchronize From Upstream Repositories #160
NO-ISSUE: Synchronize From Upstream Repositories #158
NO-ISSUE: Synchronize From Upstream Repositories #153
NO-ISSUE: Synchronize From Upstream Repositories #150
NO-ISSUE: Synchronize From Upstream Repositories #149
NO-ISSUE: Synchronize From Upstream Repositories #147
NO-ISSUE: Synchronize From Upstream Repositories #145
NO-ISSUE: Synchronize From Upstream Repositories #144
NO-ISSUE: Synchronize From Upstream Repositories #143
NO-ISSUE: Synchronize From Upstream Repositories #141
NO-ISSUE: Synchronize From Upstream Repositories #140
NO-ISSUE: Synchronize From Upstream Repositories #139
NO-ISSUE: Synchronize From Upstream Repositories #138
NO-ISSUE: Synchronize From Upstream Repositories #137
NO-ISSUE: Synchronize From Upstream Repositories #135
NO-ISSUE: Synchronize From Upstream Repositories #133
NO-ISSUE: Synchronize From Upstream Repositories #132
NO-ISSUE: Synchronize From Upstream Repositories #131
NO-ISSUE: Synchronize From Upstream Repositories #130
NO-ISSUE: Synchronize From Upstream Repositories #129
NO-ISSUE: Synchronize From Upstream Repositories #128
NO-ISSUE: Synchronize From Upstream Repositories #127
NO-ISSUE: Synchronize From Upstream Repositories #126
NO-ISSUE: Synchronize From Upstream Repositories #125
NO-ISSUE: Synchronize From Upstream Repositories #124
NO-ISSUE: Synchronize From Upstream Repositories #123
NO-ISSUE: Synchronize From Upstream Repositories #121
NO-ISSUE: Synchronize From Upstream Repositories #119
NO-ISSUE: Synchronize From Upstream Repositories #118
NO-ISSUE: Synchronize From Upstream Repositories #117
NO-ISSUE: Synchronize From Upstream Repositories #115
OCPBUGS-36471: Synchronize From Upstream Repositories #114
NO-ISSUE: Synchronize From Upstream Repositories #111
NO-ISSUE: Synchronize From Upstream Repositories #110
NO-ISSUE: Synchronize From Upstream Repositories #109
NO-ISSUE: Synchronize From Upstream Repositories #108
NO-ISSUE: Synchronize From Upstream Repositories #107
NO-ISSUE: Synchronize From Upstream Repositories #106
NO-ISSUE: Synchronize From Upstream Repositories #104
NO-ISSUE: Synchronize From Upstream Repositories #103
NO-ISSUE: Synchronize From Upstream Repositories #102
NO-ISSUE: Synchronize From Upstream Repositories #101
NO-ISSUE: Synchronize From Upstream Repositories #99
OCPBUGS-31459: Synchronize From Upstream Repositories #97
OPRUN-3268: Add pointer to tooling README for downstreaming info #94
OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #89
NO-ISSUE: Synchronize From Upstream Repositories #92
NO-ISSUE: UPSTREAM: <carry>: update owners #91
NO-ISSUE: Synchronize From Upstream Repositories #90
NO-ISSUE: Synchronize From Upstream Repositories #88
OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #86
NO-ISSUE: Synchronize From Upstream Repositories #87
NO-ISSUE: Synchronize From Upstream Repositories #84
NO-ISSUE: Synchronize From Upstream Repositories #83
NO-ISSUE: Synchronize From Upstream Repositories #82
NO-ISSUE: Synchronize From Upstream Repositories #81
NO-ISSUE: Synchronize From Upstream Repositories #80
NO-ISSUE: Synchronize From Upstream Repositories #79
NO-ISSUE: Synchronize From Upstream Repositories #78
NO-ISSUE: Synchronize From Upstream Repositories #77
NO-ISSUE: Synchronize From Upstream Repositories #76
NO-ISSUE: Synchronize From Upstream Repositories #75
NO-ISSUE: Synchronize From Upstream Repositories #74
NO-ISSUE: Synchronize From Upstream Repositories #73
NO-ISSUE: Synchronize From Upstream Repositories #72
NO-ISSUE: Synchronize From Upstream Repositories #70
NO-ISSUE: Synchronize From Upstream Repositories #67
NO-ISSUE: Synchronize From Upstream Repositories #66
NO-ISSUE: Synchronize From Upstream Repositories #65
NO-ISSUE: Synchronize From Upstream Repositories #64
NO-ISSUE: Synchronize From Upstream Repositories #63
NO-ISSUE: Synchronize From Upstream Repositories #62
NO-ISSUE: Synchronize From Upstream Repositories #61
NO-ISSUE: Synchronize From Upstream Repositories #60
NO-ISSUE: Synchronize From Upstream Repositories #59
OCPBUGS-24795: Updating ose-olm-operator-controller-container image to be consistent with ART #51
NO-ISSUE: Synchronize From Upstream Repositories #56
NO-ISSUE: Synchronize From Upstream Repositories #55
NO-ISSUE: Synchronize From Upstream Repositories #54
NO-ISSUE: Synchronize From Upstream Repositories #53
NO-ISSUE: Synchronize From Upstream Repositories #50
NO-ISSUE: Synchronize From Upstream Repositories #49
NO-ISSUE: Synchronize From Upstream Repositories #48
NO-ISSUE: Synchronize From Upstream Repositories #47
NO-ISSUE: Synchronize From Upstream Repositories #46
NO-ISSUE: Synchronize From Upstream Repositories #41
NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #44
OPRUN-3081: UPSTREAM: <carry>: Drop commitchecker #37
OPRUN-3075: Update to Upstream v0.7.0 #31
OCPBUGS-20505: Bump golang.org/x/net to v0.17.0 #28
OCPBUGS-19096: UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART #27
Update to upstream v0.3.0 #25
Add commitchecker #24
UPSTREAM: <carry>: add manifests to image #23
UPSTREAM: <carry>: add namespace management annotation #22
UPSTREAM: 290: Remove Resource Limits (#290) #21
UPSTREAM: <carry>: add scheduling preference/priorityClass annotations #20
Update main to upstream commit 83d0403 #19
UPSTREAM: <carry>: add USER to openshift dockerfile #18
Updating ose-olm-operator-controller images to be consistent with ART #17
UPSTREAM: <carry>: use image placeholders #16
Update to upstream main commit 98b6a9e #15
UPSTREAM: <carry>: conditionally rename manifests #13
UPSTREAM: <carry>: align dockerfile and manifests for bin target #14
UPSTREAM: <carry>: precision target manifest verification #12
Update to upstream main commit 3d30ad0 #5
UPSTREAM: <carry>: ci-operator #1
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #322
NO-ISSUE: Synchronize From Upstream Repositories #315
NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
NO-ISSUE: Manual Synchronize from upstream #224
Full changelog

openshift-apiserver

OCPBUGS-44432: Skip blocked registry check for registries with mirrors #475
OCPBUGS-49844: Prevent storage layer retries for methods with side effects. #495
OCPBUGS-45861: validate image property isn’t nil before using #483
Full changelog

openshift-controller-manager

OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
OCPBUGS-50507: Intermittent authentication issues when accessing OpenShift registry #365
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #366
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
OCPCLOUD-2857: Set infrastructureRef.Namespace in Cluster object #357
OSASINFRA-3707: ⚠️ Manual sync from release-0.12 on main ⚠️ #352
OSASINFRA-3722: Deploy manifests for CustomNoUpgrade feature set also #356
Full changelog

openstack-machine-api-provider

OSASINFRA-3746: Consume CA cert from CCO secret #131
NO-JIRA: Update golang.org/x/net to v0.33.0 #128
NO-JIRA: Upgrade Gophercloud to v1.14.1 #129
OCPBUGS-48288: Stop ignoring port.tags field #130
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #994
OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
NO-ISSUE: Synchronize From Upstream Repositories #964
NO-ISSUE: Synchronize From Upstream Repositories #963
NO-ISSUE: Synchronize From Upstream Repositories #962
NO-ISSUE: Synchronize From Upstream Repositories #961
NO-ISSUE: Synchronize From Upstream Repositories #952
Full changelog

operator-marketplace

OPRUN-3835: Update to 4.19 community-operators catalog #621
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
NO-ISSUE: Upgrade controller-runtime from v0.17.2 to 0.20.2 and consequently k8s version from 1.29 to 1.32 #594
OCPBUGS-49378: Upgrade golang.org/x/net (CVE-2024-45338) #583
Full changelog

ovirt-csi-driver-operator

NO-JIRA: Readme update #139
OCPBUGS-45766: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.19 #138
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-55825: Release 4.19 blocker bug ovs cpu backport: special cherry-pick #2551
OCPBUGS-51165, OCPBUGS-52278: Downstream Merge 28th april 2025 #2522
CORENET-5786: Downstream merge 2025-04-25 #2521
CORENET-5389, OCPBUGS-51040, OCPBUGS-54577: [DownstreamMerge] 2025-04-16 #2516
CORENET-5721, CORENET-5856, OCPBUGS-51317: [DownstreamMerge] 2025-04-14 #2513
CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
CORENET-5382: unpin libreswan version #2498
OCPBUGS-49994: [DownstreamMerge] 7th april #2509
CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
OCPBUGS-45410: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.19 #2379
OCPBUGS-45741: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 #2380
OCPBUGS-54245, SDN-5772: Downstream merge 2025-03-21 #2501
OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
OCPBUGS-48781: [DownstreamMerge] 2-27-25 #2474
OCPBUGS-49393, OCPBUGS-49598: [DownstreamMerge] 13 feb 2025 #2459
OCPBUGS-49613, OCPBUGS-49933: Downstream Merge 7th Feb 2025 #2446
OCPBUGS-49840: Bump OVN to 24.09.2-14 for FDP-1131 #2435
OCPBUGS-45469, OCPBUGS-49337: [DownstreamMerge] 2-6-25 #2441
OCPBUGS-45745: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.19 #2381
OCPBUGS-45893: [DownstreamMerge] 2-4-25 #2434
OCPBUGS-49621, OCPBUGS-49727: [DownstreamMerge] 1-31-25 #2431
SDN-4930: [DownstreamMerge] 1-29-25 #2429
SDN-4930: Downstream Merge [01-28-2025] #2427
OCPBUGS-42609, OCPBUGS-46585, OCPBUGS-48330, SDN-4930: Downstream Merge [01-23-2025] #2420
OCPBUGS-42707: Bump OVN to ovn24.09-24.09.1-10.el9fdp #2390
OCPBUGS-48622, SDN-4930: Downstream Merge [01-15-2025] #2417
Full changelog

powervs-block-csi-driver

MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
STOR-2252: Bump all deps #81
Full changelog

powervs-cloud-controller-manager

No-Jira: Update packages in go.mod #85
No-Jira: Manual rebase of upstream release 1.32 #82
Full changelog

powervs-machine-controllers

OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
OCPBUGS-53309: Update dependencies to k8s 1.32 #110
OCPBUGS-51276: Fix for CVE-2024-45338 in golang.org/x/net/html in main #100
OCPBUGS-49733: Uses VPC endpoint override in Disconnected case #99
Full changelog

prometheus

MON-4199: chore: update to v3.2.1 #246
OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
MON-4104: Update to 3.0 #227
Full changelog

prometheus-alertmanager

NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
MON-4155: Bump openshift/prometheus-alertmanager to v0.28.0 #98
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
NO-JIRA: Bump openshift/prometheus-operator to v0.80.1 #325
MON-4126: [bot] Bump openshift/prometheus-operator to v0.80.0 #324
Full changelog

prometheus-node-exporter

MON-4204: Use slog for accelerators (and version bump) #164
Full changelog

service-ca-operator

OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
Full changelog

telemeter

OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
OCPBUGS-50837: Check nil metric in elide label #555
SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
Full changelog

tests

OCPBUGS-55969: (olmv1 tests) Increase timeout for verifyAPIEndpoints #29770
OCPBUGS-55897: bump limits #29767
OCPBUGS-55265: Bump 1.32.4 #29707
OKD-243: Skip GatewayAPIController tests for OKD #29749
OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
OCPBUGS-54869: bump limits #29722
OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
MCO-1646: API & client-go bumps for MCN V1 API updates #29717
NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
Revert “TRT-2049: check for any watch requests” #29719
MCO-1519: Adapt MCN tests to use V1 API #29701
OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
TRT-2049: check for any watch requests #29674
NO-ISSUE: Automated - Update synthetic test data #29677
OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
TRT-2043: look for high latency audit requests #29571
OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
OCPBUGS-54869: bump limits #29700
OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
OCPBUGS-55175: Add cleanup to MCN test #29695
OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
OCPBUGS-54869: bump limits #29688
NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
OCPBUGS-53249: feat: support platform type external #29623
MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
TRT-1854: add synthetic test to check for presence of “Skipped” annotations in OTE tests #29606
OCPBUGS-53014: Bump to kubernetes 1.32.3 #29612
NE-1968: add e2e tests for FeatureGate GatewayAPI #29597
NO-ISSUE: Clean up MachineConfiguration fixture apply #29626
NO-ISSUE: Wait for MachineConfiguration status to be upto date #29625
TRT-2052: Fix broken intervals charts #29616
NO-JIRA: Alert intervals should have the display flag for charting #29624
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
NO-JIRA: Support known namespaces for terminationMessagePolicy tests #29534
Revert “OCPNODE-2596: Add SigstoreImageVerification e2e tests” #29572
OCPNODE-2596: Add SigstoreImageVerification e2e tests #29530
NO-ISSUE: Automated - Update synthetic test data #29559
WRKLDS-1653: update pathological ScalingReplicaSet event exception #29569
TRT-1874: rename master->main #29565
OCPBUGS-50587: Rely on unstructured for update status instead of type conversion #29560
OCPQE-28543: Check load balancer healthcheck port and path on aws #29544
NO-JIRA: Allow overriding extension binary to local path #29557
CNTRLPLANE-1: Update to Kubernetes v1.32.2 #29549
OCPBUGS-26601: Re-enable AWS for router HTTP/2 test #29326
TRT-1286: List images from external binaries #29450
OCPBUGS-49600: Display etcd bootstrap event on timeline #29490
NO-ISSUE: Automated - Update synthetic test data #29531
Revert “NO-JIRA: use quay.io/openshift/origin-cli:latest directly” #29543
CNTRLPLANE-1: Bump to latest downstream version of ginkgo #29538
TRT-2006: Revert “NO-JIRA: Add test case for checking EgressFirewall DNS names in caps” #29540
NO-JIRA: Add test case for checking EgressFirewall DNS names in caps #29414
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #29493
MULTIARCH-5318: Add tests for ImageStreamImportMode feature gate #29524
OCPBUGS-45893: Allows for backwards compatibility with upcoming network name change #29525
NO-ISSUE: Automated - Update synthetic test data #29418
SDN-4930: Increases timeouts for live migration #29517
OCPBUGS-45153: address malformed configmap post-test #29333
SDN-4930: Bump wait for UDN CR ready timeout #29509
SDN-4930: increase probe initialDelaySeconds from 1 to 5 #29501
SDN-4930: Bump UDN pod ready timeout #29510
SDN-4930: Make CUDN ready timeout use constant #29511
TRT-1575: Add a few more exception outside of upgraded window #29485
OCPBUGS-44238: Add Readiness Probe to Router Status Tests #29395
NO-JIRA: upkeep: add err check for failed cleanup step #29505
TRT-1958: pass EXTENSION_ARTIFACT_DIR to binaries #29464
SDN-4930: UDN: wait for moar openshift #29494
OCPBUGS-48445: Ignore an error intentionally generated by a test case #28590
SDN-4930: Fix live migration test detecting dualstack #29482
OCPBUGS-43777: tests: extend kubeconfig tests #29335
SDN-4930: UDN tests wait for SCC annotation on namespace #29479
no-jira: add a monitor test to detect concurrent installer pod or static pod #29462
OCPBUGS-26603: e2e: Fix IPv6 handling in router tests. #29224
SDN-4930: Fix live migration tests #29477
OCPBUGS-48053: auditLogAnalyzer: fix flake error message #29402
NO-JIRA: managed services: add hcp crd to unstable list #29460
SDN-4168: Fix for nmstate deployment related failures #29452
OCPBUGS-48126: kubeapiserver auditloganalyzer: show resources updated too often #29397
OCPBUGS-48340: skip OperatorHubSourceError metric checking when disableAllDefaultSources is true #29435
Revert “Revert “TRT-1803: Wait for operators to become stable before test”” #29401
NO-JIRA: use quay.io/openshift/origin-cli:latest directly #29466
SDN-4930: Network segmentation add missing eventually #29468
OCPBUGS-48320, SDN-4930: Bump KAPI server timeout to be 5seconds #29469
OCPBUGS-48320, SDN-4930: Increase probe timeouts on UDN pod #29458
OCPBUGS-48629: Use max time for netpol pods curl requests #29457
OCPBUGS-48629: move initialization of OC to test instead of package level #29459
OCPBUGS-45607: network, net-seg use different http port per network #29415
SDN-4930: E2Es for net seg: increase server connect timeout to reduce flakes #29463
OCPBUGS-42609: Updates UDN tests with required NS label #29417
SDN-4930: virt, udn: read the primary UDN interface IPs from the vmi status (in an eventually block) #29429
SDN-4930: Refactor and fix UDN/CUDN readiness checks #29454
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
OCPBUGS-48730: Update golang.org/x/net to v0.33 #156
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-2838: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed2b673) into master #75
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update manifests generator tooling #54
OCPCLOUD-2853: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.12.0 (8c1c84c) into master #53
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
Full changelog

vsphere-csi-driver-operator

OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
STOR-2245: add manifest-topology.yaml for topology related feature and test #302
OCPBUGS-44374: Bump library-go #301
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
STOR-2252: Bump all deps #296
OCPBUGS-43273: fix panic when vcenter address is incorrect #283
STOR-2319: Remove code for CNS migration tool #286
OCPBUGS-48103: Update master to main #281
OCPBUGS-49406: Set reconcile-sync to 10 minute for ListVolume #284
Full changelog

vsphere-problem-detector

OCPBUGS-52964: improve datastore check messages #181
SPLAT-1801: Add support for host groups #175
No-JIRA: Update owners #178
STOR-2252: Bump all deps #177
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github