4.19.0-rc.1

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-rc.1-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-serial
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview-serial
- driver-toolkit Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.19-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance-serial
- rosa-classic-sts-conformance Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-rosa-sts-ovn

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.3

Created: 2025-05-14 15:35:37 +0000 UTC

Image Digest: sha256:5d3a4b9203759cf8ae97546f35128decca063e83181c2ba4407177db252e919c

Components

Kubectl 1.32.1
Kubernetes upgraded from 1.32.2 to 1.32.4
Kubernetes Tests upgraded from 1.32.2 to 1.32.4
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503032242-0 to 9.6.20250512-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ServiceAccountTokenNodeBinding (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallIBMCloud (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DualReplica (0 tests)			Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMOwnSingleNamespace (0 tests)				Enabled (New)		Enabled (New)
NewOLMPreflightPermissionChecks (6 tests)				Enabled (New)		Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)
SELinuxMount (6 tests)			Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-karpenter-provider-aws git 68ae0c26 sha256:83e911e8873719a592ddd724aa591b66a265ce8278001e442ca914038644d195

Removed images

csi-snapshot-validation-webhook
installer-altinfra

Rebuilt images without code change

aws-cloud-controller-manager git 425c1c5b sha256:9d5a4de740b9d05ddcd746a574eeab5ce6a124d89eb393b0bc091fbeec755fab
aws-kms-encryption-provider git 088dcaf7 sha256:48e1e5c68c8277a03a8aa18b8845113f43412cd0eb55f00f309f68ed2db8fbd7
cluster-autoscaler-operator git 227f7537 sha256:fc0a83b9276dca19e6d36a27c2a50b3f1db71590568f8467f9e6d7557949c974
cluster-kube-cluster-api-operator git 3ec30377 sha256:ff09e1e1d9e12ec22f5798f98c6ea987578c1ce60f5067bea30e6a9fd0edb394
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:a4ecad98100bd89beff89b5fd5631f4caecb3261f919d1386dba8bbdece9acb9
cluster-machine-approver git a52da47f sha256:96e896cf528816a0481bda6ce1a227ad67cff5d125c446a06e4d99674414ad85
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:25c233d64e3dd6ba6df246dd3f88eff961eb3fbe6de04c82a685cc46ad2d79d4
cluster-openshift-controller-manager-operator git 0ab30996 sha256:0cba0fde0bd5126ee9460d0c03ed72f8c6cb5c692d6cf9faa53972d7bde877c1
configmap-reloader git 9bfbde86 sha256:bf963b396ad85633d482dc00f03dcefa584fab2b55aedafa246226c191d8ed7a
coredns git 7a1451db sha256:09212648c75b0bdff049de3aadc1bdfd66aa2da2c79cbc05af16d0c323d942a9
gcp-cloud-controller-manager git d8d3aeba sha256:cbd6c526227428121deaf01d29dde488e7558cd0d2854fc1f693e8996e5e0232
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:9953004ff1c59ed3af06bd83d4bd030aa74a379f98fd933618e9123073f16e90
haproxy-router git b41f9d05 sha256:74b6dfcbc76809ef6859567ceee7861fc3b696cb47c2053c85cbb54360eb47bd
ibm-cloud-controller-manager git 7422aab2 sha256:f92f262bb84d7fbf8769c24d3ad9332391f7ef2c56533c6c4bf2c8987a53a9cf
ibmcloud-cluster-api-controllers git 0453d282 sha256:de2005b9f569d6f586f380c0ae2755a2d0f76739e73a979e3e945b22f84b6916
ironic-machine-os-downloader git dbe19772 sha256:ccfd42c03b996a9704ddb680f24eeec5cf612330b00726279ec49bdaeb6140cd
ironic-static-ip-manager git fcd9564e sha256:871467cdce2d5b29b7c446ff60f8445aa1639e6a1f8e5cdd49daba6b7bbb3e44
kube-metrics-server git 037a0e7e sha256:796439fbd95b9ffc304de41bed546cd0e0abc92280ad906fe6a8d8dc7e32330c
kube-rbac-proxy git 59127756 sha256:6d2be2dee342848845a02462e5e1b9b2354ae6f96e15a60e0a154105fc159e5b
kube-state-metrics git c3da3b5f sha256:b9cd5c7b8ddcbaec16878d8134b61e56bba71dc843fb4b648d39c350891dd79b
kube-storage-version-migrator git 4c521b09 sha256:1276ceaedecdabb547238e706a79d90a0cb2ca8c5ee67279214f4678ee4817ff
kubevirt-cloud-controller-manager git 3f4542ec sha256:1d2323358dfbf43fe37a50a4f6efeba04ceebef5ae99b3c354f211b07230c311
libvirt-machine-controllers git a336f0b5 sha256:c7faf558380d0ddd7b02c5842b6fd53ac0f49ae8ef12bc2fd25b351182c00b03
multus-admission-controller git 0b1b812e sha256:df4d4eceb95d4623cb2a2a16f374642363f20aa46194085b7e21bf9ab03d7696
multus-route-override-cni git 391c1b03 sha256:b457537ab5556c8c915e1f3d50ad66e6b034ad4e1119823fc54f54dbc875ab99
network-interface-bond-cni git f575d888 sha256:8c7d59186811e879348add65fba683c02fd00bcee5b10db746cd64a93aa2e876
network-metrics-daemon git 5ec8c6bd sha256:febf71dd104c6c402d33a3119f652ff688c12ba0b3ca3f76de257dd6376ed75c
oauth-apiserver git 75914068 sha256:057d655b617d5ab669faf37d7bfc8ac256a2f6ce99c62e2e0fffdabfacea8bfd
oauth-proxy git 3d12ccbe sha256:92a5b06ed984de095810ee26568e080087c80443a4c505210834e0161bca4826
openshift-apiserver git 85f6eb27 sha256:4f92fb48caf154f1cc7232b3e6f95e97e0296ec01d1aa07e0ef3f4660afeb6a9
openshift-state-metrics git 3106bcc3 sha256:a8cbbb016cf2e5ef54ddc80f45a103767f6bc9173e8a0b97b4efc442bb8e0286
openstack-resource-controller git d00bab2b sha256:8a526bb444732d369e7ef87105302056449cc35e2b596da55ef3a01f2b1735cb
ovirt-csi-driver git 1db726a9 sha256:0b645493a5d5fd3ccf92ccad7e356624472c6bcdb742503be0024d2bd77069d2
prom-label-proxy git 7184f58d sha256:6bec49ceced3194cf445a66b01ddc0c9f3de6501e265512bedb632ac29b7f95f
rhel-coreos sha256:2c4251c7e1373c0dc3eb4e2cce0c71e39ef88cc0746d7a6d0d25c7b962decbcf
rhel-coreos-extensions sha256:3e19137525e8d69e41d59575f03b240f403bca2104ebab0e65caf40f83b38173
route-controller-manager git bc97534a sha256:a1b0df5089604f23e1232d8cdcd60e3a819fdd1db942cefa5f186921d27a484d
vsphere-cloud-controller-manager git 2c21c8ce sha256:e826c1da15f9eeec419b0c2db9625cc0d6330f04bd367bef4106f2bac1d248a0
vsphere-cluster-api-controllers git 8c61ba3d sha256:c54a3b0f80412c95296891c5204ab3486a63a0c9cc023b72f697c8a57b5bef13

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
MGMT-20153: Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076
OCPBUGS-53720: Bump jwt to 4.5.2 (#1080) #1080
NO-ISSUE: Update Konflux references (#1082) #1082
MGMT-19421: remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081
MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
Full changelog

agent-installer-node-agent

NO-ISSUE: Update assisted-service’s version (#997) #997
MGMT-20296: Modify RegisterHostConflict log (#990) #990
NO-ISSUE: Update Konflux references (#976) #976
OCPBUGS-53712: golang-jwt/jwt/v4 to 4.5.2 (#956) #956
NO-ISSUE: Update Konflux references (#959) #959
OCPBUGS-52994: Update to latest ghw version (#936) #936
MGMT-20227: Skip Motherboard serial if set to “-” (#955) #955
MGMT-20149: Add required sast tasks for Konflux (#942) #942
NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
Full changelog

agent-installer-utils

OCPBUGS-55793: Use internal image registry #87
OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
NO-ISSUE: Update ISOBuilder appliance image SHA #83
NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
OCPBUGS-55515: Include cnv operator in ISO builder script #80
OCPBUGS-55623: update to go.mod #81
NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
NO-ISSUE: ISOBuilder- Update README.md #76
NO-ISSUE: ISOBuilder: Add Clean targets. #69
AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
NO-ISSUE: ISOBuilder: Make sudo optional #63
NO-ISSUE: ISOBuilder: Restructured to resolve right image ref #62
AGENT-1150: Move setup-agent-tui.sh into ignition file #59
NO-ISSUE: iso_builder: add ssh key file flag #53
AGENT-1151: Use internal appliance registry #58
NO-ISSUE: iso_builder: Remove support for rendezvousIP #61
NO-ISSUE: iso_builder: Revert “Merge pull request #54 from pawanpinjarkar/run-appliance-with… #60
NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

apiserver-network-proxy

OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
OCPCLOUD-2855: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master #542
Full changelog

aws-ebs-csi-driver

STOR-2253: Rebase to upstream v1.39.0 for OCP 4.19 #283
OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-50493: Use 127.0.0.1 for healtz http-endpoints #364
NO-JIRA: build only needed cmd in container image #329
OCPBUGS-54382: Correct ASH driver inject env config #376
OSASINFRA-3652: openstack-cinder: Use new –with-topology flag #345
STOR-2126: Enable readOnlyFileSystem #370
OCPBUGS-54447: Enable required driver services #369
OCPBUGS-54180: Disable remove-not-ready-taint for azure disk csi driver #371
OCPBUGS-54230: Bump library-go #372
STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
Full changelog

aws-machine-controllers

OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
Full changelog

azure-disk-csi-driver

OCPBUGS-55494: Correct max data disk count table for L family v4 #105
OCPBUGS-54382, OCPBUGS-55162: Fix ASH azure disk regression issues #104
OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
Full changelog

azure-file-csi-driver

OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
OCPBUGS-52654: Rebase to v1.32.0 #90
OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
Full changelog

azure-kms-encryption-provider

NO-JIRA: Add OCP engineers to OWNERS for KMS #15
CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
OCPBUGS-53496: bump golang-jwt v4 #10
Full changelog

azure-machine-controllers

OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
OCPBUGS-31515: Re-reconcile machine on NIC provisioning failure #132
CORS-3883: Allow managed identity from other resource groups #133
Full changelog

azure-service-operator

OCPBUGS-55334: Updating ose-azure-service-operator-container image to be consistent with ART for 4.19 #8
Full changelog

azure-workload-identity-webhook

OCPBUGS-53800: github.com/golang-jwt/jwt/v4 v4.5.2 #30
OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55957: Remove Terraform & Altinfra Build Artifacts #9698
OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
NO-ISSUE: Update OWNERS #233
NO-ISSUE: Update BMO and MAO #232
Full changelog

baremetal-operator

METAL-998: Merge upstream #413
OCPBUGS-54582: Sync apr 2 #410
OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
Full changelog

baremetal-runtimecfg

OPNET-629: Use HAProxy monitor endpoint instead of API #343
OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-53106: Get installer image from configMap for node-image command #2005
OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
NO-JIRA: adm release new: simplify writePayload #2008
COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
NO-JIRA: adm release new: simplify writePayload #1997
NO-JIRA: adm release new: simplify no operator error condition #1999
OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
Full changelog

cloud-credential-operator

OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
OCPBUGS-53824: update github.com/golang-jwt/jwt #836
NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
Full changelog

cloud-network-config-controller

OCPBUGS-45891: Increase API call timeout to 30 second #168
CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
OSASINFRA-3755: Prefer CA cert from credentials secret #167
OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
Full changelog

cluster-authentication-operator

OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
OCPBUGS-48176: Avoid duplicate OAuth client creation #757
OCPEDGE-1510: feat: add minimum count for DualReplica #761
OCPEDGE-1610: bump(kube,library-go,ocp/api): #759
Full changelog

cluster-autoscaler

OCPBUGS-54231: Fix cool down status condition to trigger scale down #355
OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
NO-JIRA: improve nodes listing in ClusterAPI provider #354
OCPBUGS-11115: refactor findScalableResourceProviderIDs #349
OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
Full changelog

cluster-baremetal-operator

OCPBUGS-53330: Update BMO to latest #468
OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
Full changelog

cluster-capi-operator

OCPBUGS-55998: Should not use v1beta1 of the AdmissionRegistration API group #291
OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
NO-JIRA: Prevent caching CAPI objects across namespaces #285
METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
OCPCLOUD-2648: Machine sync controller deletion logic #278
OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
OCPCLOUD-2712: Update comments based on Security Group Investigation #279
OCPCLOUD-2716: Handle Machine owner references translation between MAPI and CAPI #271
NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 #275
OCPCLOUD-2647: CAPI to MAPI Machine Synchronisation #265
NO-JIRA: Update version variable in generate-ocp-manifests hook script #277
NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
Full changelog

cluster-config-api

Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
Fix broken ControlPlaneMachineSet integration tests #2296
OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
MON-4071: GA MetricsCollectionProfiles #2286
CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
Promote OnClusterBuild featuregate to default #2192
trt-2080: check devlopment start date for latest release #2285
NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
NO ISSUE: Tombstone Spec.PinnedImageSets in MCN v1alpha1 API #2256
OCPNODE-2877: Remove support to configure cgroupsv1 in OCP #2181
Ignore partial manifests when running schemacheck #2251
MCO-1543: Update v1alpha1 MCN API #2201
Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
Full changelog

cluster-config-operator

OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
SPLAT-2079: Removed VSphereControlPlaneMachineset feature gate #354
OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #234
STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
Full changelog

cluster-etcd-operator

OCPEDGE-1773: Fix arbiter field in install-config #1409
OCPBUGS-53512: fix CVE-2025-30204 #1412
OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
OCPEDGE-1498: support updates to external etcd #1399
OCPEDGE-1500: Added scaling strategies for TNF #1396
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
Full changelog

cluster-ingress-operator

CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
NE-1277: status: Add Gateway API objects to relatedObjects #933
NE-1994: Add E2E test for Istio manual deployment #1204
NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-45911: revert dev cert rotation #1835
Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
MON-4160: operator: add topology metrics #1827
OCPBUGS-35102: Bump library-go #1824
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
STOR-2267: Run SELinux warning controller #834
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-54945: Bump library-go #560
Full changelog

cluster-monitoring-operator

OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207: Bump prometheus-operator to v0.81.0 #2593
NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
Full changelog

cluster-network-operator

OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
OCPBUGS-54238: Update CSR status condition appropriately #2674
CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
CORENET-5856: Update RouteAdvertisements schema #2685
OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
SDN-5689: Rebase k8s v1.32 #2656
OCPBUGS-54159: frr-k8s: tolerate all taints #2677
OCPBUGS-5241: Auto opt in for whereabouts-controller #2670
OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
Full changelog

cluster-node-tuning-operator

Fixed rcu_nocbs cpu parsing (#1317) #1317
Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
Make the e2e/basic/modules.go test reentrant (#1322) #1322
Enhance hugepages validation error message (#1320) #1320
Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
Full changelog

cluster-olm-operator

OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
OCPBUGS-54179: Add openshift node selector annotation #109
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
OCPBUGS-54349: cluster-samples-operator - fix failing unit tests MacBook (ARM chip) #618
OCPBUGS-54216: Update the k8s API version #614
OCPBUGS-54347: add rhdmalone to owners #616
OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
Full changelog

cluster-storage-operator

NO-JIRA: correct cinder operator CredentialsRequest name #577
OCPBUGS-54491: sync Azure File permissions with upstream docs #576
STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
STOR-1878: Run operators without root user control #570
STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Add an always passing test case #1172
NO-JIRA: make verify #1177
OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
NO-JIRA: manifests: make template manifests valid YAML #1171
OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
OTA-1403: Create minimal openshift tests extension #1168
NO-JIRA: Add unit test for renderManifest #1173
OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
Full changelog

console

OCPBUGS-55972: Wrap ListPageHeader action with a div #15038
OCPBUGS-55961: resolve http Context and Client handling #15036
OCPBUGS-55959: add data-quickstart-id to quick create button #15034
OCPBUGS-55702: fix bug where Critical Alerts section cannot be collapsed #15018
OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
OCPBUGS-55448: Fix +Add details switch animation regression #15011
OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
OCPBUGS-53443: Check for ACM when hiding switcher #14988
ODC-7727: Change favourites button defaultName #14996
CONSOLE-4492: fix: do not render if listpageheader has no props #14995
OCPBUGS-55252: fix bug where tab underline is missing #14991
NO-JIRA: Deprecate react-router-dom-v5-compat #14994
OCPBUGS-54670: Use PF component group for PageHeading #14965
OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
OCPBUGS-54656: Add space between quick start action list items #14940
OCPBUGS-54601: fix bug where operator appears twice #14983
OCPBUGS-45514: Add account email to the telemetry #14978
CONSOLE-4464: Update PatternFly to latest #14979
OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
OCPBUGS-55018: fix web terminal initialize form style #14974
CONSOLE-4505: Update i18next package #14881
OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
CONSOLE-4542: Remove base dl dd dt CSS #14966
CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
OCPBUGS-54477: Remove char limit for favourite names #14924
OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
OCPBUGS-54485: Add dark theme feedback graphic #14925
CONSOLE-4484: Fix Skip to content regression #14918
OCPBUGS-54436: Warning: React.useMemo has a missing dependency #14913
OCPBUGS-54430: Fix shifting play/pause button when loading #14916
OCPBUGS-46404: i18n translations for Export as CSV button #14651
OCPBUGS-52479: Fix OLM e2e tests #14851
OCPBUGS-20230: Prevent yaml editor crash #14676
CONSOLE-4464, ODC-7756: Bump PF6 to latest prereleases #14783
CONSOLE-4501: Add unit test for Timestamp component #14799
CONSOLE-4521: Remove old polyfills #14880
OCPBUGS-52948: Multiple favorite icon on same page #14863
OCPBUGS-53065: Debug pod logs are not accessible when debugging a node via OpenShift Console #14898
CONSOLE-4462: Remove two more overrides #14891
OCPBUGS-53227: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14901
ODC-7770: Remove perspective switcher if only one perspective is present #14762
OCPBUGS-52938: ‘Helm Chart Repository’ name is used in breadcrumb link, details page heading and action names #14890
(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
Full changelog

console-operator

ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-37212: Upstream sync 15042025 #183
OCPBUGS-53198: Upstream sync 01-04-2025 #180
OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

ART-12521: update go mod dependency for konflux #320
NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
Full changelog

csi-external-attacher

STOR-2251: Rebase external-attacher to v4.8.1 for OCP 4.19 #83
OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
Full changelog

csi-external-provisioner

STOR-2251: Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 #111
OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
STOR-2281: Remove csi-snapshot-validation-webhook #175
Full changelog

csi-livenessprobe

STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
Full changelog

csi-node-driver-registrar

STOR-2251: Rebase node-driver-registrat to v2.13.0 for OCP 4.19 #78
Full changelog

docker-builder

OCPBUGS-45492: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 #467
OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
Full changelog

docker-registry

IR-522: disable aws region check #425
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd

ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
Full changelog

gcp-pd-csi-driver

OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-53451: enable VolumeAttributesClass #145
OCPBUGS-54336: Bump library-go #144
CORS-3911: Add custom endpoint args from infrastructure #141
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-55265: Bump 1.32.4 #2275
OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
OCPBUGS-53249: skip UDP LoadBalancer on external #2247
OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
TRT-1854: fix OVNKubernetes network skips #2256
STOR-2285: Update group snapshot test rules #2254
OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
TRT-1836: UPSTREAM: <carry>: remove old k8s-tests external binary #2178
OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
Full changelog

hypershift

OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
Red Hat Konflux update hypershift-cli-mce-29 #6104
HYPBLD-642: konflux build hcp cli #6072
OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
AUTOSCALE-127: fix e2e autonode drift test #6062
CNTRLPLANE-112: Enable MIv3 for Ingress #6058
NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
NO-JIRA: Add version check for CAPI flag #5911
ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
CNTRLPLANE-350: add NodePool minor version compatibility check #5873
NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792: update go mod dependency for konflux #5918
CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379: Kas bootstrap bin #5871
CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
ARO-15229: add e2e tests for image registry capability #5810
CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
OCPBUGS-50915: Disable capi machineset preflights #5653
CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
OCPBUGS-54482: Bump library-go #142
STOR-2252: Bump all deps for 4.19 #141
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
STOR-2252: Bump all deps #137
Full changelog

ibmcloud-machine-controllers

OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
Full changelog

insights-operator

CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
chore: add BaiyangZhou to OWNERS file (#1080) #1080
NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Enable FIPS #41
New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Full changelog

ironic

OCPBUGS-55743: Extract files one-by-one in logwatch #656
METAL-1327: Update pkgs ocp419 take2 #651
NO-ISSUE: Update dependencies for OCP 4.19, part 1 #649
NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
Full changelog

ironic-agent

OCPBUGS-55315: Delay determining the hostname to put into ignition #182
NO-ISSUE: Update dependencies for OCP 4.19 #181
METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
Full changelog

keepalived-ipfailover

OCPBUGS-45700: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205
OCPBUGS-45831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204
OCPBUGS-45405: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
OCPBUGS-55706: fix: use patch for machine/machineset status #1367
OCPBUGS-55424: Added skip for when config not multi nic #1358
OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
Revert “SPLAT-2180: Added conformance label” #1359
OCPBUGS-55417: Resync CRDs #1357
OCPBUGS-55083: Updates GCP CredentialsRequest #1353
SPLAT-2180: Added conformance label #1354
OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
OCPBUGS-52464: webhook to validate marketType field #1339
SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
Full changelog

machine-config-operator

OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
Revert “NO-ISSUE: debug podman on PIS” #5013
OCPBUGS-44757: decrease leases for kubelet on azure #5010
NO-ISSUE: debug podman on PIS #5003
MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
OCPBUGS-55388: MSBIC should not update windows machinesets #5009
MCO-1645: API & client-go bumps for MCN V1 API updates #5011
MCO-1519: Adapt MCO code to use V1 MCN API #4992
OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
NO-JIRA: Update Envtest assets to 1.32.1 #5002
OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
MCO-1615: MCN status update degraded #4977
MCO-1509: Enable OCL for disconnected workflow #4971
MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
OCPEDGE-1690: add dual-replica templates #4938
OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
OCPBUGS-54161: use the same success criteria for OCL e2e tests #4941
MCO-1579: Bump ignition to 3.5 #4903
NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
Full changelog

machine-image-customization-controller

OCPBUGS-44031: Verify tls while pulling down IPA #131
Full changelog

machine-os-images

OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
NO-JIRA: Change to new host #54
Full changelog

metallb-frr

OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
Syncmetallb 04042025 #81
Align to upstream #79
Syncoperator03032025 #78
Full changelog

monitoring-plugin

NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
: NO-JIRA: bound table scroll and column alignment #409 #409
NO-JIRA: feature: upgrade react router to v5 compat #406
NO-JIRA: fix(incidents): performance improvements for incidents page #398
OCPBUGS-48533: Reset variables when making orthongonal selections #394
OU-765: Don’t break if cluster doesn’t exist #399
OU-767: Allow filtering by cluster name #396
OU-750: update the metrics typeahead to look pf-6 native #395
OCPBUGS-54292: Show column headings on metrics page #397
OU-760: Requests UX changes post PF-6 #390
OU-723, OU-729: Add label typeahead #392
OU-757: Show cluster column heading on acm silences page #393
OU-703: fix states filter in aggregated row #389
OU-752: Clear out old queries when loading queries from URL #391
RHINENG-16773: fixed silence alerts data form not filled with alert details #384
OU-702: re-add csv button for aggregated alert list #383
OU-659: PF-6 Migration #380
OU-678: fix: allow to set refresh interval to off #379
OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
OCPBUGS-52592: Fix “Export as CSV” #369
OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
Full changelog

multus-cni, multus-cni-microshift

: OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-54422: Ds merge ⁴⁄₃ #356
OCPBUGS-53397: Upstream sync 20-03-2025 #353
OCPBUGS-52415: replace entrypoint #349
Full changelog

must-gather

MCO-1648: MCO-1649: Add machineconfignodes and pinnedimagesets to must-gather #487
Full changelog

network-tools

NO-JIRA: Fix JIRA queries #141
NO-JIRA: Add Peng #138
Full changelog

networking-console-plugin

CNV-57493: Validate if the namespace is configured for a primary UDN #237
CNV-60065: fix cudn input name #233
OCPBUGS-49395: adding translations #236
Upload i18n translations scripts #229
CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
CNV-58647: update PatternFly Modal to new version #228
CNV-58320: remove console classes which changed styling #227
add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
Full changelog

nutanix-machine-controllers

OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
OCPBUGS-54317: fixing CVE-2025-22868 #97
OCPBUGS-53245: Fix link-local addresses being added to machine #100
Full changelog

oauth-server

CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #169
Full changelog

oc-mirror

OCPBUGS-55704: implements registries.d file as specified in containers/image docs (#1137) #1137
OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
OCPBUGS-54653: delete: continue on errors (#1127) #1127
OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
OCPBUGS-52471: Fix OOM at filtering catalogs (#1120) #1120
OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #322
NO-ISSUE: Synchronize From Upstream Repositories #315
NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
Full changelog

openshift-controller-manager

OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
OCPBUGS-50507: Intermittent authentication issues when accessing OpenShift registry #365
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Full changelog

openstack-machine-api-provider

OSASINFRA-3746: Consume CA cert from CCO secret #131
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #994
OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
Full changelog

operator-marketplace

OPRUN-3835: Update to 4.19 community-operators catalog #621
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
Full changelog

ovirt-csi-driver-operator

NO-JIRA: Readme update #139
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-55825: Release 4.19 blocker bug ovs cpu backport: special cherry-pick #2551
OCPBUGS-51165, OCPBUGS-52278: Downstream Merge 28th april 2025 #2522
CORENET-5786: Downstream merge 2025-04-25 #2521
CORENET-5389, OCPBUGS-51040, OCPBUGS-54577: [DownstreamMerge] 2025-04-16 #2516
CORENET-5721, CORENET-5856, OCPBUGS-51317: [DownstreamMerge] 2025-04-14 #2513
CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
CORENET-5382: unpin libreswan version #2498
OCPBUGS-49994: [DownstreamMerge] 7th april #2509
CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
OCPBUGS-45410: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.19 #2379
OCPBUGS-45741: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 #2380
OCPBUGS-54245, SDN-5772: Downstream merge 2025-03-21 #2501
OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
Full changelog

powervs-block-csi-driver

MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
STOR-2252: Bump all deps #81
Full changelog

powervs-cloud-controller-manager

No-Jira: Update packages in go.mod #85
Full changelog

powervs-machine-controllers

OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
OCPBUGS-53309: Update dependencies to k8s 1.32 #110
Full changelog

prometheus

MON-4199: chore: update to v3.2.1 #246
OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
Full changelog

prometheus-alertmanager

NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
Full changelog

prometheus-node-exporter

MON-4204: Use slog for accelerators (and version bump) #164
Full changelog

service-ca-operator

OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
Full changelog

telemeter

OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
OCPBUGS-50837: Check nil metric in elide label #555
SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
Full changelog

tests

OCPBUGS-55969: (olmv1 tests) Increase timeout for verifyAPIEndpoints #29770
OCPBUGS-55897: bump limits #29767
OCPBUGS-55265: Bump 1.32.4 #29707
OKD-243: Skip GatewayAPIController tests for OKD #29749
OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
OCPBUGS-54869: bump limits #29722
OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
MCO-1646: API & client-go bumps for MCN V1 API updates #29717
NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
Revert “TRT-2049: check for any watch requests” #29719
MCO-1519: Adapt MCN tests to use V1 API #29701
OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
TRT-2049: check for any watch requests #29674
NO-ISSUE: Automated - Update synthetic test data #29677
OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
TRT-2043: look for high latency audit requests #29571
OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
OCPBUGS-54869: bump limits #29700
OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
OCPBUGS-55175: Add cleanup to MCN test #29695
OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
OCPBUGS-54869: bump limits #29688
NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
OCPBUGS-53249: feat: support platform type external #29623
MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
TRT-1854: add synthetic test to check for presence of “Skipped” annotations in OTE tests #29606
OCPBUGS-53014: Bump to kubernetes 1.32.3 #29612
NE-1968: add e2e tests for FeatureGate GatewayAPI #29597
NO-ISSUE: Clean up MachineConfiguration fixture apply #29626
NO-ISSUE: Wait for MachineConfiguration status to be upto date #29625
TRT-2052: Fix broken intervals charts #29616
NO-JIRA: Alert intervals should have the display flag for charting #29624
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
Full changelog

vsphere-csi-driver-operator

OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
STOR-2245: add manifest-topology.yaml for topology related feature and test #302
OCPBUGS-44374: Bump library-go #301
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
STOR-2252: Bump all deps #296
Full changelog

vsphere-problem-detector

OCPBUGS-52964: improve datastore check messages #181
SPLAT-1801: Add support for host groups #175
No-JIRA: Update owners #178
STOR-2252: Bump all deps #177
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github