4.16.0-0.nightly-2025-05-12-120839

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2025-05-12-120839

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- aws-ovn-serial Succeeded (3 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- install-analysis-all Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.16-install-analysis-all
- metal-ipi-ovn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6
- overall-analysis-all Succeeded periodic-ci-openshift-release-master-nightly-4.16-overall-analysis-all
Informing jobs
- agent-compact-ipv4 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-agent-compact-fips
- agent-ha-dualstack Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-agent-ha-dualstack-conformance
- agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-agent-single-node-ipv6
- aws-console Failed periodic-ci-openshift-release-master-nightly-4.16-console-aws
- aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.16-periodics-e2e-aws
- aws-csi Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-csi
- aws-ovn Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn
- aws-ovn-fips Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-fips
- aws-ovn-single-node Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node
- aws-ovn-single-node-serial Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-serial
- aws-ovn-single-node-techpreview Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-techpreview
- aws-ovn-single-node-techpreview-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-single-node-techpreview-serial
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade-out-of-change
- aws-sdn Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn
- aws-sdn-cgroupsv2 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-sdn-cgroupsv2
- aws-sdn-upgrade-out-of-change Failed periodic-ci-openshift-release-master-ci-4.16-e2e-aws-sdn-upgrade-out-of-change
- aws-upi Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-upi
- azure-control-plane-machine-set-operator Failed periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.16-periodics-e2e-azure
- azure-csi Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-azure-csi
- azure-ovn Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn
- azure-ovn-serial Failed periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-serial
- azure-ovn-techpreview Failed periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-techpreview
- azure-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-techpreview-serial
- azure-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-azure-ovn-upgrade-out-of-change
- azure-sdn Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-azure-sdn
- azure-sdn-upgrade-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.16-e2e-azure-sdn-upgrade
- azure-sdn-upgrade-out-of-change Failed periodic-ci-openshift-release-master-ci-4.16-e2e-azure-sdn-upgrade-out-of-change
- driver-toolkit Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-driver-toolkit
- gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.16-periodics-e2e-gcp
- gcp-ovn Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-gcp-ovn
- gcp-ovn-csi Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-gcp-ovn-csi
- gcp-ovn-rt Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-gcp-ovn-rt
- gcp-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-gcp-ovn-techpreview
- gcp-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.16-e2e-gcp-ovn-techpreview-serial
- gcp-ovn-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-upgrade
- gcp-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-gcp-sdn
- gcp-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-gcp-sdn-serial
- gcp-sdn-upgrade-micro Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-gcp-sdn-upgrade
- gcp-sdn-upgrade-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-bm-upgrade Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm-upgrade
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-serial Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-serial-ipv4
- metal-ipi-ovn-serial-virtualmedia Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-serial-virtualmedia
- metal-ipi-sdn-upgrade-minor Failed periodic-ci-openshift-release-master-nightly-4.16-upgrade-from-stable-4.15-e2e-metal-ipi-sdn-upgrade
- metal-ipi-serial-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-serial-ovn-ipv6
- metal-ipi-serial-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-serial-ovn-dualstack
- metal-ipi-upgrade-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ipi-upgrade-ovn-ipv6-minor Failed periodic-ci-openshift-release-master-nightly-4.16-upgrade-from-stable-4.15-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ovn-single-node-recert-cluster-rename Succeeded periodic-ci-openshift-release-master-nightly-4.16-metal-ovn-single-node-recert-cluster-rename
- openshift-dedicated-aws Failed periodic-ci-openshift-osde2e-main-nightly-4.16-osd-aws
- openshift-dedicated-gcp Failed periodic-ci-openshift-osde2e-main-nightly-4.16-osd-gcp
- ovn-proxy Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-proxy
- ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ovn-single-node-live-iso
- qe-perfscale Succeeded periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.16-nightly-x86-payload-control-plane-6nodes
- rosa-classic-sts Failed periodic-ci-openshift-osde2e-main-nightly-4.16-rosa-classic-sts
- telco5g Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-telco5g
- upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.16-upgrade-analysis-all
- upgrade-minor-sdn Failed periodic-ci-openshift-release-master-nightly-4.16-upgrade-from-stable-4.15-e2e-aws-sdn-upgrade
- vsphere-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-ovn-csi
- vsphere-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-ovn-serial
- vsphere-ovn-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-ovn-techpreview
- vsphere-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-ovn-techpreview-serial
- vsphere-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-ci-4.16-upgrade-from-stable-4.15-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upi Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-ovn-upi
- vsphere-ovn-upi-serial Failed periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-ovn-upi-serial
- vsphere-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-sdn
- vsphere-static-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-vsphere-static-ovn

Upgrades from:

4.16.0-0.nightly-2025-05-07-122308 (changes) - S S F S S F F F F S S S S
4.15.0-0.nightly-2025-05-08-151402 (changes) - S S S S F F F
4.14.0-0.nightly-2025-05-12-104903 - Success Success

Upgrades to:

4.17.0-0.nightly-2025-05-14-141753 (changes) - S S S S S F S
4.17.0-0.nightly-2025-05-14-063327 (changes) - S S S S S F F
4.17.0-0.nightly-2025-05-13-233446 (changes) - S S S S F S F
4.16.0-0.nightly-2025-05-14-084101 (changes) - S S S S S F S S S S S
4.16.0-0.nightly-2025-05-14-003121 (changes) - S S F S S S S S S S S
4.16.0-0.nightly-2025-05-13-051954 (changes) - S S S F F S S S S S F S S

Loading changelog, this may take a while ...

Changes from 4.14.0-0.nightly-2025-05-12-104903

Created: 2025-05-12 12:11:04 +0000 UTC

Image Digest: sha256:a8a3ffb4310cf07265ecc4057e5b077aa4b1af6a99ffc48201222f82bb6c00a9

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.27.16 to 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202505110307-0 to 416.94.202505051351-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdmissionWebhookMatchConditions (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RetroactiveDefaultStorageClass (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
ExternalCloudProvider (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
ExternalCloudProviderGCP (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
VSphereStaticIPs (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
BareMetalLoadBalancer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallNutanix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallOpenStack (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallVSphere (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DisableKubeletCloudCredentialProviders (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
HardwareSpeed (3 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
KMSv1 (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MetricsServer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NetworkDiagnosticsConfig (6 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NetworkLiveMigration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereControlPlaneMachineSet (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereDriverConfiguration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPI (0 tests)	Disabled	Disabled	Enabled (New)	Enabled (New)	Disabled (Changed)	Disabled (Changed)
ValidatingAdmissionPolicy (4 tests)	Disabled	Disabled	Enabled (New)	Enabled (New)	Enabled (Changed)	Enabled (Changed)
ExternalOIDC (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ChunkSizeMiB (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstall (0 tests)
ClusterAPIInstallAzure (0 tests)
ClusterAPIInstallGCP (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallIBMCloud (0 tests)
ClusterAPIInstallPowerVS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DNSNameResolver (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
EtcdBackendQuota (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
Example (1 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPClusterHostedDNS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImagePolicy (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InsightsConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InsightsOnDemandDataGather (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InstallAlternateInfrastructureAWS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MachineConfigNodes (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImages (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MetricsCollectionProfiles (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MixedCPUsAllocation (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLM (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NodeDisruptionPolicy (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OnClusterBuild (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PinnedImages (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PlatformOperators (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ServiceAccountTokenNodeBinding (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ServiceAccountTokenNodeBindingValidation (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ServiceAccountTokenPodNodeInfo (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SignatureStores (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
TranslateStreamCloseWebsocketRequests (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UpgradeStatus (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMultiVCenters (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VolumeGroupSnapshot (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-kms-encryption-provider git c66065de sha256:8874a2399a1dcf050d18f07558dace49782f068a55e6e40dd105b36f9cf133df
azure-kms-encryption-provider git af633e05 sha256:72e82af1ebb6110f637423f4ae5941314d48d82b72013fe73cc044b1711164a8
cluster-config-api git b7d0481c sha256:4d04c93c18d82eef4a6a4a310b4b1b02a3410ec47af57f910efa435774dcd3e6
containernetworking-plugins-microshift git 5f9ee066 sha256:c59f874fe2e02cc1c033976c5eae4ce94d8abaea3ff79549998b807e2d165cbc
installer-altinfra git 91f0e415 sha256:5a1d57e1e1e358ef1178ba590ad6a9743108bf2302c9aa0dfee80335b21404bd
kube-metrics-server git 9116b918 sha256:2e990448cfcc3d806c1c4c8b79c6b11c5f1e121b1bb9011128264dc6b236ac87
multus-cni-microshift git c4aa21b9 sha256:4d637aaa1efcce08907702105a8937bab24dea7f8c2ec5ec20963369dcc2efbd
openstack-cluster-api-controllers git bafa26de sha256:a865f8b6076b99c7231f5b7d7a0bb1ab566685d3ab6bc00f6097cc28f74976b7
operator-framework-tools git 174007cb sha256:95630e7ebc5dfc5a8759f18759ad7f9bac4bcdaa5ae2991659ad34d5dbb92a1a

Removed images

alibaba-cloud-csi-driver
alibaba-disk-csi-driver-operator
cluster-platform-operators-manager
ibm-vpc-node-label-updater
kuryr-cni
kuryr-controller
machine-os-content
ovirt-machine-controllers

Rebuilt images without code change

rhel-coreos sha256:dc4d1de09587879f83359f3bd78f86ceac0ac3aacce4f0b0c0814d0baf5e2143
rhel-coreos-extensions sha256:658fd159c21abb2e6c0f573a1c687565b45858a3122a56769a95e3378642f278

agent-installer-api-server

OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7486) #7486
OCPBUGS-45244: Bump moby from v26.0.0 to v27.2.1 (#7189) #7189
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7130) #7130
OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
OCPBUGS-31727: Invalid Pull-Secret when using password which contains a colon character (#6362) #6362
MGMT-17850: Bump k8s.io modules to v0.29 (#6345) (#6372) #6345
OCPBUGS-34278: Don’t use the statically linked installer if FIPS is enabled (#6357) #6357
Use openshift-install binary for releases >= 4.16 (#6304) #6304
MGMT-17775: Ensure that patch manifest filenames are consistent and correct (#6289) #6289
MGMT-17194: Ensure that we improve error messages for mirror registry tagged images (#6266) #6266
MGMT-17764: Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) #6276
NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) #6255
Revert “MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260)” (#6268) #6260
MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260) #6260
MGMT-17523: Fail when OS images CPU architecture is missing instead of giving it default value (#6256) #6256
NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6259) #6259
OCPBUGS-31733: Remove CPMS manifest for vsphere platform (#6239) #6239
NO-ISSUE: Bump OCP versions: 4.16 (#6254) #6254
MGMT-17697: Change L3 connectivity to use connected addresses instead of majority groups (#6252) #6252
NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14, 4.15 (#6250) #6250
NO-ISSUE: Fix hypershift destroy in CI test script (#6246) #6246
Move to rhel9, decouple from cli image (#5792) #5792
MGMT-17413: Change pull secret validation on register/update cluster/infraenv to run only against the required images (#6158) #6158
NO-ISSUE: Update OKD images to 4.16 (#6231) #6231
Update RHTAP references (#6181) #6181
MGMT-17620: Change the way release images are handled in RestAPI flow to retrieve multiarch release image in case a multi-arch OpenShift version, single-arch requested and it exist. (#6227) #6227
OCPBUGS: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (api go.mod) (#6212) #6212
NO-ISSUE: Change only-latest api response to compare versions according to pre-release suffix as well instead of just base version (#6209) #6209
MGMT-17558: Allow installation on iSCSI volume (#6218) #6218
MGMT-17412: Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) (#6186) #6145
MGMT-17503: Fix the cpu architectures retrieved in ../openshift-versions endpoint (#6184) #6184
MGMT-17365: Add support for setting agent labels in BMH as annotations (#6124) #6124
MGMT-17313: Create day 2 BMH and Machine for control plane nodes (#6142) #6142
MGMT-17513: Change the latest release image retrieved in GetReleaseImage using major.minor OpenShift version to latest non-beta release image if exists, or latest beta release image otherwise (#6185) #6185
MGMT-17468: Use x86_64 over amd64 and arm64 over aarch64 for CPU architecture of both release and OS images to comply with ABI current behavior (#6190) #6190
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#6176) #6176
NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.12, 4.14, 4.13 (#6199) #6199
MGMT-17414: Adding new requirements for LVM on 4.16 (#6165) #6165
MGMT-17181: Add a LocalClusterImportController (#6079) #6079
NO-ISSUE: Prevent false positive host connectivity (#6162) #6162
MGMT-17489: Fix disconnected capi tests (#6163) #6163
Update RHTAP references (#6148) #6148
MGMT-17412: Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) #6145
NO-ISSUE: Bump OCP versions: 4.15, 4.14, 4.12 (#6157) #6157
MGMT-17438: bugfix, make sure ODF and LVM requirements do not change if MCE is not selected (#6150) #6150
NO-ISSUE: replace minio quay.io image repository (#6151) #6151
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6149) #6149
NO-ISSUE: Add doc for iPXE HTTP (#6146) #6146
Revert “MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011)” (#6139) #6011
MGMT-17369: Add multi-arch release images to as well when setting only_latest=true in …/openshift-versions (#6119) #6119
MGMT-17361: Changing the addition of configuration release images to run when the instance becomes leader instead of skipping if it not (#6115) #6115
MGMT-17367: Use ICSP in install-config for older OCP releases (#6125) #6125
Update RHTAP references (#6117) #6117
NO-ISSUE: Bump OCP versions: 4.15, 4.11 (#6118) #6118
MGMT-17354: Update CBO to support dual stack SNO hub deploying an IPv6 spoke (#6113) #6113
NO-ISSUE: rename docker image for postgres 12 as latest tag disappeared (#6116) #6116
NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#6114) #6114
NO-ISSUE: Bump the go-major-dependencies group with 1 update (#6111) #6111
MGMT-17328: OCI should be tech preview for OCP 4.14 (#6104) #6104
OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 (#6054) #6054
MGMT-16587: Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 (#6109) #6109
NO-ISSUE: disable dynamic release images collection until UI will merge its changes adjusting itself to larger amount of versions (#6110) #6110
MGMT-16263: Enable usage of custom OCP release images when we create cluster (#6025) #6025
MGMT-17241: [soft-timeout] Installation not timeout /aborted after 24Hours (#6092) #6092
Update RHTAP references (#6103) #6103
MGMT-16002: Accept yml.patch and yaml.patch extensions (#6070) #6070
MGMT-17080: enable infrastructure operator when MCE and storage operators are selected (#6037) #6037
MGMT-17308: Offboard osherdp from maintainers list (#6099) #6099
NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.14, 4.12 (#6098) #6098
Update RHTAP references (#6086) #6086
Allow in-progress clusters to be deleted in more cases (#6061) #6061
MGMT-17266: Add OCP 4.16 images (#6091) #6091
MGMT-16587: Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#6090) #6090
MGMT-17196: Fix none existens of static MAC adr. in case of (#6087) #6087
AGENT-860: Update configure command to handle multiple HostConfigs (#6062) #6062
NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6085) #6085
MGMT-16813: Prioritize finding release image with exact CPU architecture (#6066) #6066
NO-ISSUE: Add environment variable ENABLE_SOFT_TIMEOUTS to openshift/template.yaml (#6083) #6083
Update RHTAP references (#6020) #6020
Use client_id instead of clientId (#6076) #6076
Protect must gather versions cache with mutex (#6078) #6078
NO-ISSUE: Docs - clarifying consequences of capabilities override (#6060) #6060
MGMT-16759: Copy cluster proxy settings toi imported local-cluster AgentClusterInstall (#6051) #6051
use multi payload with ABI (#6000) #6000
MGMT-14380: ODF explicit type of disk error (#6072) #6072
NO-ISSUE: Bump OCP versions: 4.14 (#6069) #6069
NO-ISSUE: Bump OCP versions: 4.13 (#6063) #6063
MGMT-17106: Disable ironic vlan creation when static networking config is present (#6055) #6055
NO-ISSUE: Bump OCP versions: 4.12 (#6056) #6056
Use all cluster networks to determine IP family for ironic (#6048) #6048
NO-ISSUE: Bump OCP versions: 4.14 (#6050) #6050
NO-ISSUE: Bump OCP versions: 4.15 (#6043) #6043
MGMT-17095: Disable local cluster import (#6040) #6040
MGMT-16620: Update OCP 4.15 release images to GA (#6035) #6035
NO-ISSUE: Bump OCP versions: 4.15, 4.13 (#6038) #6038
MGMT-17008: fix lvm host requirement (#6021) #6021
NO-ISSUE: Bump OCP versions: 4.14 (#6032) #6032
MGMT-16882: Update operator bundle channel to 2.11 (#6023) #6023
NO-ISSUE: Halt OpenShift release syncer in SaaS until actual usage of this release images will be merged (#6027) #6027
MGMT-16262: Create a utility that fetches current OCP releases from OpenShift API and updates DB (#5916) #5916
NO-ISSUE: Bump OCP versions: 4.15 (#6019) #6019
OCPBUGS-29772: All nodes fail to become managed when installConfigOverrides defined (#6010) #6010
NO-ISSUE: fixing lvm requirement message (#6009) #6009
MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011) #6011
Update RHTAP references (#6014) #6014
Update RHTAP references (#6012) #6012
NO-ISSUE: Add environment variable ENABLE_SKIP_MCO_REBOOT to openshift/template.yaml (#6013) #6013
AGENT-860: Add command to import cluster for agent-based-installer (#6004) #6004
Update RHTAP references (#5999) #5999
NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14 (#6006) #6006
MGMT-16926: fix validation bug + allow CNV and LVM multi node (#5998) #5998
MGMT-4458: Remove status change from old CompleteInstallation API (#5981) #5981
MGMT-16716: (Also MGMT-16737), Operators CNV, MCE should be disabled when platform Nutanix is selected, operator CNV should be disabled when platform VSphere is selected (#5991) #5991
NO-ISSUE: Bump OCP versions: 4.15 (#5995) #5995
Update RHTAP references (#5993) #5993
NO-ISSUE: Bump OCP versions: 4.14, 4.13 (#5990) #5990
NO-ISSUE: Fix subsystem test for invalid nmstate config error message (#5988) #5988
Update RHTAP references (#5980) #5980
MGMT-16332: fix validation for LVM multinode (#5898) #5898
MGMT-16690: Add API to AgentServiceConfig CRD to allow pass of headers and query params to image service (#5933) #5933
MGMT-16588: Adding host with incompatible platform to day2 cluster should fail (#5946) #5946
MGMT-16625: Make host connection timeout soft (#5911) #5911
MGMT-16649: Use new ignition endpoint HTTP headers when requesting Ignition (#5934) #5934
NO-ISSUE: Bump OCP versions: 4.12, 4.11 (#5971) #5971
MGMT-16523: Set ABI deployment type for on-prem data collection (#5967) #5967
NO-ISSUE: Change bare metal host CRD name to a non-uuid format as it is forbidden (#5972) #5972
MGMT-16704: Add organization capability to control soft timeouts (#5935) #5935
MGMT-16684: Make OLM finalizing stages behave as soft timeouts even if soft timeouts are not enabled (#5928) #5928
MGMT-16791: disable VipAUtoAllocation for 4.15 and above (#5959) #5959
Update RHTAP references (#5965) #5965
NO-ISSUE: fix for subsystem HTTP registry (#5964) #5964
NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5963) #5963
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#5951) #5951
MGMT-16721: Handle luks == nil and luks.Clevis == nil (#5940) #5940
Update RHTAP references (#5956) #5956
Update RHTAP references (#5950) #5950
MGMT-16649: Add Ignition Endpoint Headers to Host and Agent APIs (#5931) #5931
NO-ISSUE: Bump gorm.io/gorm from 1.25.5 to 1.25.7 (#5954) #5954
Update RHTAP references (#5949) #5949
NO-ISSUE: Bump OCP versions: 4.15 (#5947) #5947
MGMT-16757: CNV should be disabled when select platform vSphere (#5945) #5945
NO-ISSUE: Fix CI gather script for baremetal operator (#5932) #5932
NO-ISSUE: Bump OCP versions: 4.13 (#5944) #5944
MGMT-16739: CNV and MCE should be disabled when select platform Nutanix (#5941) #5941
Update RHTAP references (#5943) #5943
NO-ISSUE: Bump OCP versions: 4.12 (#5939) #5939
MGMT-16603: Allow setting agent cluster reference via BHM (#5893) #5893
MGMT-16612: notify when host updates status (#5930) #5930
MGMT-16521: Identify Operator-based Deployment Data (#5906) #5906
MGMT-16517: Add Env Var for On-Prem Data Deployment Type (#5874) #5874
MGMT-16508: Add API to AgentServiceConfig CRD to allow pass of CA certificates for image pull. (#5884) #5884
NO-ISSUE: Bump OCP versions: 4.15 (#5929) #5929
ACM-9504: Remove unecessary dependency on go-git (#5913) #5913
NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) #5919
MGMT-16660: OCI is tech-preview from OCP 4.15 (#5920) #5920
OCPBUGS-27376: Allow domain names starting with a number (#5914) #5914
NO-ISSUE: Bump OCP versions: 4.14 (#5915) #5915
Update RHTAP references (#5899) #5899
NO-ISSUE: migrate rhtap init step to v0.2 (#5908) #5908
MGMT-16208: Add controller stages to assisted service (#5880) #5880
NO-ISSUE: Bump OCP versions: 4.15 (#5907) #5907
NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) #5903
NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) #5902
NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) #5904
NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) #5901
NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) #5897
OCPBUGS-24428: Redact passwords logged in installConfigOverrides (#5868) #5868
NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) #5896
NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) #5895
MGMT-16501: Add request headers to api_vip_connectivity check request (#5870) #5870
NO-ISSUE: Use latest hypershift image in CI gather (#5886) #5886
NO-ISSUE remove filanov from approves (#5888) #5888
NO-ISSUE: Bump OCP versions: 4.15 (#5887) #5887
MGMT-16332: allow lvms on multi node (#5871) #5871
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) #5875
NO-ISSUE: testing go1.20 in all packages (#5850) #5850
MGMT-16371: Fix additionial kargs in case of DHCP (#5818) #5818
Removes unused assistedservice CRD (#5830) #5830
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5861) #5861
MGMT-16505: Huge amount of “Cluster was updated with api-vip <IP ADDRESS>, ingress-vip <IP ADDRESS>” in cluster events (#5872) #5872
MGMT-16330: disable SDN for 4.15 and above (#5833) #5833
NO-ISSUE: Bump OCP versions: 4.15, 4.12, 4.13 (#5867) #5867
NO-ISSUE: Bump OCP versions: 4.14 (#5863) #5863
MGMT-16241: Ensure that LastInstallationPreparationStatus is reset on cluster install. (#5811) #5811
wqNO-ISSUE: Fix for subsystem test that fails locally. (#5859) #5859
MGMT-16452: Change MCE subscription to use the default channel (#5843) #5843
OCPBUGS-25434: handle NMStateConfig deletion (#5844) #5844
MGMT-16404: Add soft timeouts capability to host stage timeouts (#5817) #5817
MGMT-16216: Bump requests package (#5836) #5836
HOSTEDCP-999: Fix images used for disconnected CAPI test (#5832) #5832
MGMT-16332: fix issue validating pre-release versions were failing (#5837) #5837
MGMT-16414: When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5822) #5822
MGMT-16373: KubeAPI - Ensure that ISO type is full-iso when cpuarchitecture is S390x (#5825) #5825
chore(deps): update rhtap references (#5782) #5782
MGMT-16428: create migration from oci to external platform type (#5829) #5829
NO-ISSUE: enable lateset lso for 4.15 ztp (#5805) #5805
NO-ISSUE: Bump OCP versions: 4.15 (#5824) #5824
Compare normalized infraenv and preprov image architectures (#5816) #5816
MGMT-15886: Fix domain validation (#5801) #5801
MGMT-15691: Remove platform type oci (#5787) #5787
MGMT-14633: Include manifest information in the log download (#5777) #5777
MGMT-16355: API changes for soft timeouts (#5780) #5780
NO-ISSUE: Bump OCP versions: 4.11 (#5813) #5813
NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5808) #5808
MGMT-14159: Use imageDigestSources in install-config instead of imageContentSources (#5799) #5799
MGMT-16157 move db transactions to new format (#5806) #5806
MGMT-16157 Remove recover usage from DB transactions (#5795) #5795
NO-ISSUE: Bump OCP versions: 4.15 (#5796) #5796
NO-ISSUE: fix golangci-lint failing to be pulled (#5790) #5790
NO-ISSUE: Bump OCP versions: 4.12 (#5783) #5783
MGMT-16289: Add configuration variable and cluster attribute defining if soft timeouts feature is enabled (#5740) #5740
NO-ISSUE: Bump OCP versions: 4.14, 4.11, 4.13, 4.15 (#5779) #5779
fix: allow LVMS for MultiNode >=4.15.0 (#5757) #5757
Update RHTAP references (#5776) #5776
NO-ISSUE: add build tags option to enable FIPS build (#5768) #5768
Update RHTAP references (#5774) #5774
NO-ISSUE: update OS_IMAGES filter to 4.11 (#5773) #5773
MGMT-16303: Disable skip MCO reboot for architecture s390x (#5765) #5765
Propagate OS_IMAGES var in deploy operator (#5762) #5762
Update RHTAP references (#5767) #5767
MGMT-15425: Change chosen mce release to match openshift version (#5716) #5716
MGMT-14605: Gather more data for hypershift tests (#5344) #5344
MGMT-16320: Agent should connect to iBFT iSCSI targets (#5753) #5753
MGMT-16312 fix update host ignition for unbound host (#5751) #5751
NO-ISSUE: Inventory code cleanup - unused params (#5755) #5755
HOSTEDCP-999: Fix incorrect ICSP for CAPI CI (#5747) #5747
MGMT-15690: Add support for external platform (#5738) #5738
MGMT-16235: Ensure that agent controller will watch for changes to ignition endpoint token. (#5736) #5736
MGMT-13461: Fix Tang validation when day2 host join an imported cluster (#5700) #5700
MGMT-15972: Remove Swagger definition for api_vip and ingress_vip (#5734) #5734
HOSTEDCP-999: Fix incorrect check for CAPI image in ci (#5741) #5741
Update RHTAP references (#5733) #5733
MGMT-16273: Allow installing on iSCSI disks on OCI (#5728) #5728
MGMT-16291: revert default faulty OCP images (#5737) #5737
MGMT-14810: Remove API and Ingress VIP (#5501) #5501
HOSTEDCP-999: Missed service-cidr for capi ipv6 CI test (#5721) #5721
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#5726) #5726
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.12 (#5722) #5722
Update baremetal operator (#5698) #5698
MGMT-16001: Sanitize reclaim agent daemonset name (#5699) #5699
HOSTEDCP-999: Minor fixes for disconnected CAPI CI (#5713) #5713
AGENT-740: Include baremetal host BMC fields in install-config override (#5675) #5675
NO-ISSUE: adding me to owners (#5709) #5709
NO-ISSUE: Cluster code cleanups (#5715) #5715
NO-ISSUE: Bump OCP versions: 4.12 (#5714) #5714
MGMT-16236: remove elastic APM (#5702) #5702
NO-ISSUE: Upgrade debug image to latest delve (#5711) #5711
Update RHTAP references (#5688) #5688
HOSTEDCP-999: Setup CI for disconnected ipv6 CAPI (#5536) #5536
NO-ISSUE: Inventory code cleanups (#5695) #5695
NO-ISSUE: dependabot optimize (#5697) #5697
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.15 (#5701) #5701
NO-ISSUE: Remove unused functions (#5696) #5696
NO-ISSUE: BMH and Agent controllers code cleanup (#5693) #5693
NO-ISSUE: Remove unused functions from ctrl event wrapper (#5694) #5694
NO-ISSUE: Bump github.com/Azure/go-autorest/autorest/adal (#5604) #5604
NO-ISSUE: ClusterDeployments controller code cleanup (#5689) #5689
NO-ISSUE: InfraEnv controller code cleanup (#5690) #5690
MGMT-15271: Append kargs to installer for s390x (#5665) #5665
Add missing scheme to ServiceMonitor (#5672) #5672
Updating ose-agent-installer-api-server-container image to be consistent with ART (#5495) #5495
MGMT-15971: Create ManagedCluster CR so that the hub will show up as “Ready” in MCE (#5575) #5575
Update RHTAP references (#5682) #5682
NO-JIRA: Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) #5680
NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) #5681
MGMT-16151: allow CORS OPTIONS for s3 presigned url (#5674) #5674
Update RHTAP references (#5654) #5654
MGMT-16151: allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) #5671
MGMT-16061: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) #5658
MGMT-16077: Add 4.15 release and OS images (#5673) #5673
AGENT-723: Use json.Marshal to correctly process vSphere credentials (#5592) #5592
NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) #5670
MGMT-15902: Trigger reboots for node event when day2 node moves to done (#5648) #5648
NO-JIRA: Allow the command in wait_for_cmd_amount to receive arguments (#5668) #5668
MGMT-16164: Install 4.14 redhat-operators catalog for LSO (#5669) #5669
MGMT-15878: Ensure that hosts emit event showing why preparation failed. (#5521) #5521
MGMT-15878: Add a condition to show the last preparation failure (#5524) #5524
MGMT-16151: change default envoy sidecar timeout value (#5667) #5667
MGMT-16114: Update 4.14 release image to use GA version (#5651) #5651
MGMT-16052: Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) #5659
Bump OCP versions: 4.14, 4.12 (#5661) #5661
MGMT-15405: Add a URL to infraenv to show download link from static network config (#5638) #5638
OCPBUGS-19823: Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) #5565
MGMT-15271: Add the boot command line to the host inventory (#5649) #5649
MGMT-15680: Adds InfraEnv ctrl watch for pull secret changes (#5589) #5589
NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) #5653
MGMT-16061: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) #5613
NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) #5647
Update RHTAP references (#5637) #5637
Bump OCP versions: 4.13 (#5645) #5645
NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) #5644
MGMT-15683: Ensure that manifest filename has valid name part (#5635) #5635
NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) #5641
NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) #5619
Update RHTAP references (#5624) #5624
MGMT-15684: Return appropriate HTTP error code for invalid manifest file path (#5634) #5634
Bump OCP versions: 4.14 (#5633) #5633
NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) #5632
MGMT-16037: fix messaging errors on big clusters (#5628) #5628
MGMT-16039: upgrade to golang 1.20 (#5616) #5616
NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) #5622
Revert “NO-ISSUE: use kubectl 1.28.2 (#5572)” (#5618) #5572
Bump OCP versions: 4.12 (#5615) #5615
MGMT-16045: mitigate CVE-2023-44487 (#5614) #5614
MGMT-15902: Add event that shows the number of reboots for a node before completing installation (#5591) #5591
Add skopeo to OCP build (#5558) #5558
NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) #5601
NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) #5600
NO-ISSUE: vendor current master (#5594) #5594
NO-ISSUE: fixing dependabot issues (#5595) #5595
Bump OCP versions: 4.13, 4.14 (#5593) #5593
Update RHTAP references (#5590) #5590
MGMT-16001: Sanitize reclaim daemonset name (#5579) #5579
Bump OCP versions: 4.11, 4.12, 4.13 (#5586) #5586
MGMT-13198: Add API endpoint to create assisted installer event (#5578) #5578
MGMT-15980: added missing Create op to infraenvs Webhook (#5569) #5569
Update RHTAP references (#5573) #5573
NO-ISSUE: use kubectl 1.28.2 (#5572) #5572
Update RHTAP references (#5570) #5570
MGMT-15949: fix missing ImageSetRef validation (#5552) #5552
Revert “NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)” (#5566) #5560
MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) #5549
NO-ISSUE: Fix console output in ZTP jobs (#5562) #5562
NO-ISSUE: add console output for ztp (#5550) #5550
Bump OCP versions: 4.14 (#5559) #5559
MGMT-15796: set CloudControllerManager to External for OCI (#5548) #5548
NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560) #5560
Bump OCP versions: 4.12, 4.14, 4.13 (#5546) #5546
Update RHTAP references (#5539) #5539
MGMT-15950: Fix DNS wilcard domain validation (#5544) #5544
WIP: Add assisted images service short URL routes (#5543) #5543
Update RHTAP references (#5538) #5538
MGMT-15738: Support for E2E test, make sure we have an infraenv for adding a node to the local cluster. (#5477) #5477
Bump OCP versions: 4.13, 4.11 (#5537) #5537
MGMT-14409: generate short image URL (#5523) #5523
MGMT-15762: fix odf validation failing where is one small disk (#5529) #5529
Update RHTAP references (#5520) #5520
Bump OCP versions: 4.12, 4.14 (#5528) #5528
NO-ISSUE: fail upload if response is not 2XX (#5522) #5522
Bump OCP versions: 4.14 (#5525) #5525
NO-ISSUE: fix docker-ce-cli package missing (#5499) #5499
NO-ISSUE: Add versions file to onprem event upload (#5514) #5514
MGMT-15699: Service changes for avoiding MCO reboot (#5453) #5453
Update RHTAP references (#5517) #5517
MGMT-15598: Add a parameter to manifest list to disable filter (#5498) #5498
Bump OCP versions: 4.12 (#5515) #5515
Update RHTAP references (#5513) #5513
Bump OCP versions: 4.14 (#5512) #5512
NO-ISSUE: Fix email domain for event uploader (#5511) #5511
Update RHTAP references (#5510) #5510
Update RHTAP references (#5508) #5508
Bump OCP versions: 4.12, 4.13 (#5506) #5506
MGMT-15808: change base image to stream9 (#5497) #5497
MGMT-15559: Change detached annotation condition in non-converged flow (#5445) #5445
MGMT-15732: Fix unbound variable (#5493) #5493
Update RHTAP references (#5492) #5492
Bump OCP versions: 4.14, 4.11 (#5496) #5496
Update RHTAP references (#5470) #5470
MGMT-15715: Allow handling multi-document YAML custom manifests (#5480) #5480
MGMT-15732: Add extra flag var for hypershift install (#5469) #5469
XMGMT-15704: Bugfix for local cluster import (#5484) #5484
NO-ISSUE: update RHTAP deprecated image check (#5488) #5488
Bump OCP versions: 4.12, 4.13 (#5483) #5483
MGMT-15653: Fix DNS regex validation (#5482) #5482
MGMT-15716: notify events when updating cluster status (#5476) #5476
MGMT-15503: Update operator bundle channel (#5474) #5474
Bump OCP versions: 4.14 (#5472) #5472
MGMT-15306: Fix UpdateCluster for requests that include VIPS and UMA (#5462) #5462
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53718: Bump jwt to 4.5.2 in release-4.16 (#1091) #1091
abi: let the bootstrap waiting for workers before rebooting (#1047) #1047
OCPBUGS-47494: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) #990
OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
OCPBUGS-36779: Reload host inventory on conflict (#881) #881
MGMT-16843: Use hostnamectl to replace illegal hostname (#850) #850
OCPBUGS-32105: Fix race to mark node Joined (#823) #823
NO-ISSUE: Bump github.com/onsi/gomega (#841) #841
MGMT-17305: Moving disk operations to new repo (#840) #840
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) #818
Move to rhel9, decouple from cli image (#760) #760
NO-ISSUE: Decouple inventoryClient from ops (#811) #811
NO-ISSUE: Decouple inventoryClient from ops (#810) #810
NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) #809
MGMT-16587: Update to mitigate CVE-2024-21626 (#806) #806
MGMT-17305: Wipe installation disk on IBI (#808) #808
MGMT-17384: Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) #807
NO-ISSUE: Bump the go-dependencies group with 1 update (#803) #803
MGMT-17308: Offboard osherdp from maintainers list (#802) #802
MGMT-16587: Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) #801
OCPBUGS-30056: RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) #800
MGMT-16993: [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) #798
NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) #799
NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) #797
MGMT-16843: Ensure valid hostname during install (#788) #788
MGMT-16966: Problem creating extra partition on main disk in 4.15+ (#787) #787
NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) #786
MGMT-16211: Remove all timeouts from controller (#779) #779
OCPBUGS-25718: Do not remove uninitialized taints if vSphere credentials are provided. (#778) #778
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) #781
NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) #780
NO-ISSUE: Bump the go-dependencies group with 1 update (#776) #776
NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) #772
NO-ISSUE remove filanov from approves (#773) #773
NO-ISSUE: Bump the go-dependencies group with 1 update (#770) #770
NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) #769
NO-ISSUE: Bump the go-dependencies group with 1 update (#768) #768
NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) #766
NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) #762
MGMT-16266: Indication event showing how often host has been rebooted missing on some nodes (#757) #757
NO-ISSUE: fix golangci-lint failing to be pulled (#758) #758
NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) #756
NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) #755
OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#739) #739
MGMT-16258: Partitions naming convetion is different for various disk types (#752) #752
NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) #751
Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) #719
MGMT-15926: Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) #748
NO-ISSUE: Add my github account as an OWNER for this repository (#749) #749
NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) #747
MGMT-15902: Trigger event that notifies the number of reboots once the node installation is completed (#744) #744
NO-ISSUE: Bump the go-dependencies group with 1 update (#745) #745
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) #743
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) #742
MGMT-16039: upgrade to golang 1.20 (#741) #741
NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) #738
OCPBUGS-16482: Update dependencies to remove goproxy dependency (#701) #701
MGMT-15984: Assisted installer doesn’t freeze and unmount file systems used for overwriting os image (#737) #737
NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) #731
Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) #718
MGMT-15710: Assisted installer changes for avoiding MCO reboot (#713) #713
MGMT-15810: fix image missing nsenter executable (#729) #729
MGMT-15810: change base image to stream9 (#725) #725
NO-ISSUE: fix dependabot ingored packages (#724) #724
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#986) (#996) #986
OCPBUGS-53710: Bump jwt to 4.5.2 in release-4.16 (#971) #971
NO-ISSUE: Increase image pull timeout during install (#923) #923
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#874) #874
OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
OCPBUGS-42300: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) #785
OCPBUGS-33404: Make removable disks eligible (#717) #717
Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) #637
NO-ISSUE: Bump the go-dependencies group across 1 directory with 2 updates (#710) #710
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#690) #690
OCPBUGS-31423: Try to pull installer image before installing (#679) #679
NO-ISSUE: Bump the go-dependencies group with 2 updates (#683) #683
MGMT-16587: Update to mitigate CVE-2024-21626 (#676) #676
NO-ISSUE: Bump the go-dependencies group with 2 updates (#678) #678
NO-ISSUE: subsystem test failing due image format version (#677) #677
NO-ISSUE: Bump the go-dependencies group with 2 updates (#672) #672
MGMT-17308: Offboard osherdp from maintainers list (#673) #673
NO-ISSUE: Bump the go-dependencies group with 7 updates (#670) #670
MGMT-16459: [STG] Cluster 4.15.0-rc.0 with HTTP Proxy failed on timeout due the failed to StartContainer for etcd with CrashLoopBackOff (#664) #664
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#656) #656
CVE-2023: 49568 and CVE-2023-49569 both detail vulnerabilities in versions of https://github.com/go-git/go-git less than version v5.11 Presently assisted-installer depends on this library due to the following dependency chain. (#655) #655
MULTIARCH-4089: Fix LPAR handling (#649) #649
NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) #653
ACM-9504: Remove unecessary dependency on go-git (#652) #652
MGMT-16501: Use updated api_vip connectivity check API (#648) #648
NO-ISSUE remove filanov from approves (#647) #647
NO-ISSUE: Bump the go-dependencies group with 2 updates (#644) #644
NO-ISSUE: Bump the go-dependencies group with 1 update (#643) #643
NO-ISSUE: Bump the go-dependencies group with 3 updates (#642) #642
NO-ISSUE: Bump the go-dependencies group with 2 updates (#638) #638
NO-ISSUE: fix golangci-lint failing to be pulled (#636) #636
MGMT-16335: set HasUUID on appliance mock disk (#634) #634
NO-ISSUE: Bump the go-dependencies group with 3 updates (#635) #635
NO-ISSUE: Add Eran Ifrach account and mine as owners (#633) #633
NO-ISSUE: Bump the go-dependencies group with 2 updates (#630) #630
MGMT-15860: add strictfipsruntime to build (#629) #629
NO-ISSUE: Bump the go-dependencies group with 1 update (#626) #626
OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#590) #590
MGMT-15271: Get cmdline and set IBM in vendor (#624) #624
NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) #623
NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) #621
MGMT-16039: upgrade to golang 1.20 (#619) #619
MGMT-16011: Reduce agent image size (#617) #617
NO-ISSUE: Bump the go-dependencies group with 1 update (#618) #618
MGMT-15900: Add enable-skip-mco-reboot flag to assisted installer install command (#614) #614
NO-ISSUE: Bump the go-dependencies group with 3 updates (#612) #612
NO-ISSUE: add adriengentil as approver (#611) #611
NO-ISSUE: Bump the go-dependencies group with 2 updates (#608) #608
MGMT-15809: change base image to stream9 (#604) #604
Updating ose-agent-installer-node-agent images to be consistent with ART (#603) #603
OCPBUGS-16482: bump golangci-lint to v1.53.1 (#591) #591
NO-ISSUE: fix lint target and code (#605) #605
MGMT-15653: Update domain validation from assisted-service changes (#599) #599
Full changelog

agent-installer-utils

OCPBUGS-24960: Updating ose-agent-installer-utils-container image to be consistent with ART #32
NO-ISSUE: Tidy up Dockerfiles #33
OCPBUGS-21874: Update 4.15 ose-agent-installer-utils-container image to be consistent with ART #31
Bump golang builder to rhel9 #30
OCPBUGS-19219: Updating ose-agent-installer-utils images to be consistent with ART #29
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
Update OWNERS #36
Rebase onto latest upstream version #35
Full changelog

alibaba-machine-controllers

OCPBUGS-44242: change the VERSION makefile variable to use OS_GIT_VERSION #58
AUTH-482: set required-scc for openshift workloads #50
OCPBUGS-25571: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #49
OCPBUGS-24945: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #48
OCPBUGS-24124: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #46
NO-JIRA: Update OWNERS #45
OCPBUGS-19201: Updating ose-alibaba-machine-controllers images to be consistent with ART #44
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
OCPBUGS-31716: Bump golang.org/x/net to v0.23.0 #50
OCPBUGS-27932: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 #47
OCPBUGS-25004: Updating ose-apiserver-network-proxy-container image to be consistent with ART #46
Full changelog

aws-cloud-controller-manager

OCPBUGS-31968: update for CVE-2023-45288 [release-4.16] #82
OCPBUGS-34046: Ensure that addresses are added in network device index order #88
OCPBUGS-8213: Ensure removal of security group rules on deleting load balancers #57
OCPBUGS-30466: Update google.golang.org/protobuf to v1.33.0 #79
OCPBUGS-27879: Add snyk exclusion file #78
OCPBUGS-28548: Updates build-rpm.sh to set release to build time #75
OCPBUGS-28548: spec: add Provides: ose-aws-ecr-image-credential-provider #74
OCPBUGS-25662: UPSTREAM: <carry>: Removes escaping from pwd in rpm build script #69
OCPBUGS-25662: Updates rpm build script #68
OCPBUGS-25662: ecr-credential-provider RPM CI builds #65
OCPBUGS-25662: Installs ecr-credential-provider to /usr/libexec #66
OCPBUGS-25662: Adds ecr-credential-provider specfile #63
OCPBUGS-22542, OCPBUGS-26061, OCPCLOUD-2423: Merge https://github.com/kubernetes/cloud-provider-aws:master (65e4f1a) into master #53
OCPBUGS-24959: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART #59
OCPBUGS-24135: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART #58
OCPBUGS-21839: Upgrade x/net to v0.17.0 #51
Update OWNERS #52
OCPCLOUD-2187: Merge https://github.com/kubernetes/cloud-provider-aws:master (43b808d) into master #47
OCPBUGS-19218: Updating ose-aws-cloud-controller-manager images to be consistent with ART #48
Full changelog

aws-cluster-api-controllers

OCPBUGS-53726: Update golang-jwt to v4.5.2 #547
OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
OCPBUGS-33170: All containers must fallback to logs on error #510
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master #507
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.1 (cbf5317) into master #502
OCPBUGS-30586: fix e2e tests on release branches #503
OCPBUGS-25565, OCPCLOUD-2441: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.0 (25a0086) into master #499
OCPBUGS-27871: Update snyk exclusion file #498
OCPBUGS-26181: Add Snyk file to exclude vendor directory on scan #495
OCPBUGS-24928: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART #488
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.3.0 (2562a8b) into master #487
OCPBUGS-24113: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART #485
OCPCLOUD-2255: Update manifests-gen tool #486
OCPCLOUD-2257: Use manifests generation tool from provider repo #471
Update OWNERS #480
OCPBUGS-21649: Bump golang.org/x/net to v0.17.0 #479
OCPBUGS-17279, OCPCLOUD-2216: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master #478
OCPBUGS-19185: Updating ose-aws-cluster-api-controllers images to be consistent with ART #477
Full changelog

aws-ebs-csi-driver

OCPBUGS-31101: UPSTREAM: 1966: Add missing instances to instance store volumes table #261
OCPBUGS-30468: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #259
OCPBUGS-23260: UPSTREAM: 1919: Add reserved-volume-attachments #260
STOR-1575: Rebase to v1.26.1 for OCP 4.16 #257
OCPBUGS-25500: UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #252
STOR-1688: Chore: add .snyk file to ignore false positives #248
OCPBUGS-25549: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #250
OCPBUGS-25197: UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 #249
OCPBUGS-25126: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #247
OCPBUGS-24867: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #246
OCPBUGS-24072: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #245
STOR-1400: Rebase to v1.25.0 for OCP 4.15 #244
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net@v0.17.0 #237
OCPBUGS-19101: Updating ose-aws-ebs-csi-driver images to be consistent with ART #235
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
STOR-1726: auto-generate assets for CIFS/Samba driver #217
OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Bump google.golang.org/grpc from 1.61.0 to 1.62.1 #190
Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 #198
Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 #203
Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 #185
STOR-1794: add location for azcopy logs #200
OCPBUGS-23260: Explicitly reserve 1 attachment for the root disk #199
Bump go.uber.org/zap from 1.26.0 to 1.27.0 #173
Bump the opentelemetry-dependencies group with 8 updates #177
Bump the golang-dependencies group with 6 updates #191
OCPBUGS-30620: remove legacy directory and duplicate Dockerfile.*.test files #196
OCPBUGS-30469: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #197
NO-JIRA: Configure dependabot for security updates only #174
OCPBUGS-30620: move test manifests to top-level directory #194
STOR-1464: Enable RWOP tests in CI #187
STOR-1762: Add azure file hypershift #163
Bump the k8s-dependencies group with 6 updates #172
STOR-1726: Bump openshift/api dependency #169
STOR-1750: Build image from legacy folder #162
Bump the opentelemetry-dependencies group with 8 updates #161
STOR-1574: Bump all deps #156
OCPBUGS-26924: Add healthcheck for node-driver-registrar container #155
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 #149
STOR-1750: Add legacy azure file driver #154
Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 #150
Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible #148
Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 #147
Bump github.com/google/uuid from 1.5.0 to 1.6.0 #144
Bump google.golang.org/grpc from 1.60.1 to 1.61.0 #145
Bump the k8s-dependencies group with 3 updates #146
STOR-1574: Bump library-go #137
Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 #142
Bump github.com/pkg/profile from 1.3.0 to 1.7.0 #138
Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #141
Bump go.uber.org/zap from 1.24.0 to 1.26.0 #139
Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 #140
Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 #136
Bump github.com/prometheus/common from 0.45.0 to 0.46.0 #135
Bump the opentelemetry-dependencies group with 4 updates #134
Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 #128
Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible #125
Bump the k8s-dependencies group with 5 updates #133
Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 #124
STOR-1722: Add support hypershift for azure-disk #73
Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #129
OCPBUGS-27267: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #132
Bump the opentelemetry-dependencies group with 2 updates #122
Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 #123
Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 #119
Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 #120
NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #106
NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 #104
NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #103
NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 #101
OCPBUGS-27056: Update to RHEL9 and go 1.21 #117
NO-JIRA: Bump the golang-dependencies group with 5 updates #109
NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #108
STOR-1714: AWS EBS operator: Release leadership on SIGTERM #94
NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #107
NO-JIRA: Add valid-reference label to dependabot PRs #116
OCPBUGS-27050: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #114
STOR-1713: Don’t ignore azure-disk-csi-driver-operator #110
NO-JIRA: Add dependabot configuration #97
STOR-1696: Add legacy azure disk #88
OCPBUGS-24245: Add selinux #89
OCPBUGS-25125: Add test AssetOrderer #86
OCPBUGS-25557: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #87
OCPBUGS-25125: Create RBAC objects first #84
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #76
NO-JIRA: Add “Quick start” section to README.md #80
STOR-1688: Chore: add .snyk file to ignore false positives #85
OCPBUGS-25147: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #81
OCPBUGS-23827: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #77
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #79
OCPBUGS-24905: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #78
STOR-1500: Switch to the new operator #69
Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #75
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

aws-machine-controllers

OCPBUGS-46508: fix Associate*IpAddress flag on launch EC2 #121
OCPBUGS-28325: add an extra vendor exclude to snyk config #100
OCPCLOUD-2429: Rebase k8s to 1.29 and update dependencies #99
OCPBUGS-26187: Add Snyk file to exclude vendor directory on scan #98
OCPBUGS-24934: Updating ose-machine-api-provider-aws-container image to be consistent with ART #94
OCPBUGS-24116: Updating ose-machine-api-provider-aws-container image to be consistent with ART #93
SPLAT-1220: Assign Carrier IP to launch EC2 in AWS Wavelength Zones #78
OCPCLOUD-2193: Update k8s to 1.28 #87
Update OWNERS #86
OCPBUGS-21640: Update golang.org/x/net to v0.17.0 #85
OCPBUGS-20266: update bad url endpoint termination handler test #84
OCPBUGS-19190: Updating ose-machine-api-provider-aws images to be consistent with ART #82
Full changelog

aws-pod-identity-webhook

OCPBUGS-52513: github.com/go-jose/go-jose/v4 v4.0.5 #203
OCPBUGS-30711: Upgrade go-jose module to 4.0.1 #187
OCPBUGS-25588: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #183
OCPBUGS-25002: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #181
OCPBUGS-25002: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #180
NO-ISSUE: Sync OWNERS with team members #173
snyk: exclude vendor/ #170
Bump k8s deps for CVE-2023-39325 #169
OCPBUGS-19264: Updating ose-aws-pod-identity-webhook images to be consistent with ART #167
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-47645: Prevent panic when informer receives cache.DeletedFinalStateUnknown #133
OCPBUGS-29012: Improvements to client timeouts to prevent hangs #116
OCPBUGS-28244: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (de765cc) into master #104
OCPBUGS-26124, OCPBUGS-27861: update snyk file #107
OCPBUGS-29012: Remove concurrent-service-syncs limitation #106
OCPCLOUD-2460: Adds acr-credential-provider spec file and build script #105
OCPBUGS-26115: Add Snyk file to exclude vendor directory on scan #103
OCPBUGS-22556, OCPCLOUD-2422: Update to kubernetes v1.29 #88
OCPBUGS-25590: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART #102
OCPBUGS-25589: Updating ose-azure-cloud-node-manager-container image to be consistent with ART #101
OCPBUGS-25005: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART #100
OCPBUGS-25003: Updating ose-azure-cloud-node-manager-container image to be consistent with ART #99
OCPBUGS-24166: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART #98
OCPBUGS-24164: Updating ose-azure-cloud-node-manager-container image to be consistent with ART #97
OCPBUGS-22265: Bump x/net package to v0.17.0 #90
Update OWNERS #87
OCPBUGS-17282: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (55d9043) into master #84
OCPBUGS-19267: Updating ose-azure-cloud-controller-manager images to be consistent with ART #86
OCPBUGS-19265: Updating ose-azure-cloud-node-manager images to be consistent with ART #85
Full changelog

azure-cluster-api-controllers

OCPBUGS-36025: Update go-retryablehttp to v0.7.7 #310
OCPBUGS-33083: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.5 (1f08b9d) into master #302
OCPBUGS-27450: add a snyk configuration file #299
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.0 (7ee3a6a) into master #298
OCPCLOUD-2443: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.12.1 (f32b78b) into master #297
OCPBUGS-25626: Add Snyk file to exclude vendor directory on scan #295
OCPBUGS-24896: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART #293
OCPBUGS-24091: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART #291
Update OWNERS #287
OCPBUGS-21648: Bump golang.org/x/net to v0.17.0 #285
OCPCLOUD-2217: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.11.2 (fa947c4) into master #284
OCPBUGS-19147: Updating ose-azure-cluster-api-controllers images to be consistent with ART #282
Full changelog

azure-disk-csi-driver

OCPBUGS-30475: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #78
STOR-1579: Rebase v1.29.3 #75
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #74
OCPBUGS-25503: UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #71
OCPBUGS-18701: UPSTREAM: 1904, UPSTREAM: 1917, UPSTREAM: 1955: Update disk number table #49
OCPBUGS-25569: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #70
STOR-1688: Chore: add .snyk file to ignore false positives #69
OCPBUGS-22559: OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs #66
OCPBUGS-25050: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #67
OCPBUGS-24938: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #65
OCPBUGS-24120: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #64
OCPBUGS-17542: allow resizing to min required size for performance plus disks #52
STOR-1394: Rebase v1.29.0 for OCP 4.15 #51
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
OCPBUGS-19172: Updating ose-azure-disk-csi-driver images to be consistent with ART #50
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
STOR-1726: auto-generate assets for CIFS/Samba driver #217
OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Bump google.golang.org/grpc from 1.61.0 to 1.62.1 #190
Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 #198
Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 #203
Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 #185
STOR-1794: add location for azcopy logs #200
OCPBUGS-23260: Explicitly reserve 1 attachment for the root disk #199
Bump go.uber.org/zap from 1.26.0 to 1.27.0 #173
Bump the opentelemetry-dependencies group with 8 updates #177
Bump the golang-dependencies group with 6 updates #191
OCPBUGS-30620: remove legacy directory and duplicate Dockerfile.*.test files #196
OCPBUGS-30469: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #197
NO-JIRA: Configure dependabot for security updates only #174
OCPBUGS-30620: move test manifests to top-level directory #194
STOR-1464: Enable RWOP tests in CI #187
STOR-1762: Add azure file hypershift #163
Bump the k8s-dependencies group with 6 updates #172
STOR-1726: Bump openshift/api dependency #169
STOR-1750: Build image from legacy folder #162
Bump the opentelemetry-dependencies group with 8 updates #161
STOR-1574: Bump all deps #156
OCPBUGS-26924: Add healthcheck for node-driver-registrar container #155
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 #149
STOR-1750: Add legacy azure file driver #154
Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 #150
Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible #148
Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 #147
Bump github.com/google/uuid from 1.5.0 to 1.6.0 #144
Bump google.golang.org/grpc from 1.60.1 to 1.61.0 #145
Bump the k8s-dependencies group with 3 updates #146
STOR-1574: Bump library-go #137
Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 #142
Bump github.com/pkg/profile from 1.3.0 to 1.7.0 #138
Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #141
Bump go.uber.org/zap from 1.24.0 to 1.26.0 #139
Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 #140
Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 #136
Bump github.com/prometheus/common from 0.45.0 to 0.46.0 #135
Bump the opentelemetry-dependencies group with 4 updates #134
Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 #128
Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible #125
Bump the k8s-dependencies group with 5 updates #133
Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 #124
STOR-1722: Add support hypershift for azure-disk #73
Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #129
OCPBUGS-27267: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #132
Bump the opentelemetry-dependencies group with 2 updates #122
Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 #123
Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 #119
Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 #120
NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #106
NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 #104
NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #103
NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 #101
OCPBUGS-27056: Update to RHEL9 and go 1.21 #117
NO-JIRA: Bump the golang-dependencies group with 5 updates #109
NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #108
STOR-1714: AWS EBS operator: Release leadership on SIGTERM #94
NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #107
NO-JIRA: Add valid-reference label to dependabot PRs #116
OCPBUGS-27050: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #114
STOR-1713: Don’t ignore azure-disk-csi-driver-operator #110
NO-JIRA: Add dependabot configuration #97
STOR-1696: Add legacy azure disk #88
OCPBUGS-24245: Add selinux #89
OCPBUGS-25125: Add test AssetOrderer #86
OCPBUGS-25557: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #87
OCPBUGS-25125: Create RBAC objects first #84
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #76
NO-JIRA: Add “Quick start” section to README.md #80
STOR-1688: Chore: add .snyk file to ignore false positives #85
OCPBUGS-25147: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #81
OCPBUGS-23827: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #77
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #79
OCPBUGS-24905: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #78
STOR-1500: Switch to the new operator #69
Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #75
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

azure-file-csi-driver

OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
OCPBUGS-32785: Rebase v1.29.5 for OCP 4.16 #64
OCPBUGS-32046: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 #60
OCPBUGS-31869: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 #59
STOR-1794: use azcopy base image to build driver #56
OCPBUGS-30476: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #57
STOR-1586: Rebase v1.29.3 #54
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #52
OCPBUGS-25550: Updating ose-azure-file-csi-driver-container image to be consistent with ART #47
OCPBUGS-25504: UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #49
OCPBUGS-25550: UPSTREAM: <drop>: Regenerate go.mod with go 1.21 #48
STOR-1688: Chore: add .snyk file to ignore false positives #46
OCPBUGS-24874: Updating ose-azure-file-csi-driver-container image to be consistent with ART #45
STOR-1390: Rebase v1.29.2 for OCP 4.15 #43
OCPBUGS-24075: Updating ose-azure-file-csi-driver-container image to be consistent with ART #44
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #36
OCPBUGS-19110: Updating azure-file-csi-driver images to be consistent with ART #34
Full changelog

azure-file-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
STOR-1726: auto-generate assets for CIFS/Samba driver #217
OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Bump google.golang.org/grpc from 1.61.0 to 1.62.1 #190
Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 #198
Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 #203
Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 #185
STOR-1794: add location for azcopy logs #200
OCPBUGS-23260: Explicitly reserve 1 attachment for the root disk #199
Bump go.uber.org/zap from 1.26.0 to 1.27.0 #173
Bump the opentelemetry-dependencies group with 8 updates #177
Bump the golang-dependencies group with 6 updates #191
OCPBUGS-30620: remove legacy directory and duplicate Dockerfile.*.test files #196
OCPBUGS-30469: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #197
NO-JIRA: Configure dependabot for security updates only #174
OCPBUGS-30620: move test manifests to top-level directory #194
STOR-1464: Enable RWOP tests in CI #187
STOR-1762: Add azure file hypershift #163
Bump the k8s-dependencies group with 6 updates #172
STOR-1726: Bump openshift/api dependency #169
STOR-1750: Build image from legacy folder #162
Bump the opentelemetry-dependencies group with 8 updates #161
STOR-1574: Bump all deps #156
OCPBUGS-26924: Add healthcheck for node-driver-registrar container #155
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 #149
STOR-1750: Add legacy azure file driver #154
Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 #150
Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible #148
Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 #147
Bump github.com/google/uuid from 1.5.0 to 1.6.0 #144
Bump google.golang.org/grpc from 1.60.1 to 1.61.0 #145
Bump the k8s-dependencies group with 3 updates #146
STOR-1574: Bump library-go #137
Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 #142
Bump github.com/pkg/profile from 1.3.0 to 1.7.0 #138
Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #141
Bump go.uber.org/zap from 1.24.0 to 1.26.0 #139
Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 #140
Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 #136
Bump github.com/prometheus/common from 0.45.0 to 0.46.0 #135
Bump the opentelemetry-dependencies group with 4 updates #134
Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 #128
Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible #125
Bump the k8s-dependencies group with 5 updates #133
Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 #124
STOR-1722: Add support hypershift for azure-disk #73
Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #129
OCPBUGS-27267: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #132
Bump the opentelemetry-dependencies group with 2 updates #122
Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 #123
Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 #119
Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 #120
NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #106
NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 #104
NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #103
NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 #101
OCPBUGS-27056: Update to RHEL9 and go 1.21 #117
NO-JIRA: Bump the golang-dependencies group with 5 updates #109
NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #108
STOR-1714: AWS EBS operator: Release leadership on SIGTERM #94
NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #107
NO-JIRA: Add valid-reference label to dependabot PRs #116
OCPBUGS-27050: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #114
STOR-1713: Don’t ignore azure-disk-csi-driver-operator #110
NO-JIRA: Add dependabot configuration #97
STOR-1696: Add legacy azure disk #88
OCPBUGS-24245: Add selinux #89
OCPBUGS-25125: Add test AssetOrderer #86
OCPBUGS-25557: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #87
OCPBUGS-25125: Create RBAC objects first #84
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #76
NO-JIRA: Add “Quick start” section to README.md #80
STOR-1688: Chore: add .snyk file to ignore false positives #85
OCPBUGS-25147: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #81
OCPBUGS-23827: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #77
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #79
OCPBUGS-24905: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #78
STOR-1500: Switch to the new operator #69
Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #75
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

azure-machine-controllers

OCPBUGS-54990: Re-reconcile machine on NIC provisioning failure #137
OCPBUGS-50966: dynamically setting the amount of fault domains #129
CFE-1050: Added support of capacity reservation group #111
OCPBUGS-29956: Remove startupScript vmextension lookup #102
OCPBUGS-28309: add an extra vendor exclude to snyk config #99
OCPBUGS-25940: Don’t create availability set when using spot instances #91
OCPCLOUD-2428: Rebase k8s to 1.29 and update dependencies #94
OCPBUGS-26122: Add Snyk file to exclude vendor directory on scan #92
OCPBUGS-23544: Improving performance of creating VMs in Azure #87
OCPBUGS-25591: Updating ose-machine-api-provider-azure-container image to be consistent with ART #90
OCPBUGS-25008: Updating ose-machine-api-provider-azure-container image to be consistent with ART #88
OCPBUGS-24168: Updating ose-machine-api-provider-azure-container image to be consistent with ART #86
Update OWNERS #79
OCPBUGS-21790: Bump x/net package to v0.17.0 #78
OCPBUGS-20268: update bad url endpoint termination handler test #77
OCPCLOUD-2192: Bump k8s packages to v1.28 #76
OCPBUGS-19269: Updating ose-machine-api-provider-azure images to be consistent with ART #75
Full changelog

azure-workload-identity-webhook

OCPBUGS-53798: github.com/golang-jwt/jwt/v4 v4.5.2 #33
OCPBUGS-52510: github.com/go-jose/go-jose/v4 v4.0.5 #29
OCPBUGS-31283: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 #16
OCPBUGS-30712: Update to go-jose v4.0.1 #15
OCPBUGS-26203: Upgrade golang/x/net for CVE-2023-39325 (main) #12
OCPBUGS-25777: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 #11
OCPBUGS-25543: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART #10
OCPBUGS-24854: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART #8
NO-JIRA: UPSTREAM: <carry> Update OWNERS #9
OCPBUGS-19244: Updating ose-azure-workload-identity-webhook images to be consistent with ART #6
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-35040: Power VS: Add ports needed for private clusters to security group #8546
OCPBUGS-54327: Remove error logging when determining image arch #9610
OCPBUGS-54345: Remove tmp directory used for agent pxe files #9611
OCPBUGS-54263: IBMCloud: Move to IBM TF openshift fork #9604
OCPBUGS-50547: aws/edge/byovpc: tag edge subnets with shared value #9482
OCPBUGS-52191: [release-4.16] capi/aws: bump provider for LB DNS lookup fix #9547
OCPBUGS-51207: Log correct hostname for validation status #9511
OCPBUGS-51111: PowerVS: destroy dhcp hack #9502
OCPBUGS-48762: Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 #9478
OCPBUGS-43469: pkg/asset/installconfig/azure: send full certifcate chain #9467
OCPBUGS-49416: [Nutanix] Installation failed with timeout when uploading images to PC #9412
OCPBUGS-47663: [release-4.16] Power VS: Create region-zone-sysType hierarchy #9338
OCPBUGS-48442: Ensure rendezvousIP is checked against host IP #9369
OCPBUGS-45999: Always set cross_tenant_replication_enabled parameter to false #9321
OCPBUGS-45669: aws: fix Node Port Service rule removal #9312
OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
OCPBUGS-39087: aws: validate public-only subnets configs #8913
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity #8855
OCPBUGS-38302: upi/aws: update lambda runtime python version #8897
OCPBUGS-38826: aws: add support for clusters with public-only subnets #8892
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix #8848
OCPBUGS-38196: Remove timed context for gcp client #8818
OCPBUGS-38502: PowerVS: Fix mad system pool #8846
OCPBUGS-37838: fix bogus analyze message when gather fails #8794
OCPBUGS-37492: openstack: Fix security group tagging #8767
OCPBUGS-37607: bootstrap gather fails in vsphere, only ipv6 address used #8778
OCPBUGS-37494: aws: do not require create permissions when BYO IAM role #8768
OCPBUGS-37510: [release-4.16] aws: bump CAPA for subnet tagging fix #8772
OCPBUGS-37180: ic: fix typo in warning message #8769
OCPBUGS-36968: [release-4.16]: capi/aws: bump provider for ingress rules fix #8734
OCPBUGS-36965: destroy/gcp: set value for DiscardLocalSsd #8733
OCPBUGS-36720: CORS-3582: capi: remove unused feature gates #8716
OCPBUGS-36890: [release-4.16] capi: start controllers after WaitGroup is created #8726
OCPBUGS-36091: [release-4.16] bump go-retryablehttp for CVE fix #8654
OCPBUGS-36777: Cleanup capi artifacts #8719
OCPBUGS-36607: aws: remove terraform configs #8705
OCPBUGS-36324: update RHCOS 4.16 bootimage metadata to 416.94.202406282145-0 #8692
OCPBUGS-36447: capi/aws: disable EKS controller in CAPA #8694
OCPBUGS-36351: vSphere - If the folder pre-exists do not tag #8683
OCPBUGS-36286: PowerVS: Add ibmcloud plugins #8672
OCPBUGS-35818: baremetal: bootstrap: bind icc to localhost #8632
OCPBUGS-34457: [release-4.16] bump envtest binaries version #8470
OCPBUGS-35718: Fix ethertype for masters service router SG creation #8623
OCPBUGS-36156: Configured logger for controller-runtime #8657
OCPBUGS-36249: capi: shutdown local controlplane as the last step #8670
OCPBUGS-35470: add machine series ‘A3’ and ‘C3D’ to ‘Tested instance types for GCP’ #8614
OCPBUGS-35722: Support CAPI provider custom timeouts #8624
OCPBUGS-35733: [release-4.16] remove terraform libvirt from the installer #8626
OCPBUGS-35531: For GCP, only configure kmsKeyServiceAccount if set #8613
OCPBUGS-35529: capi aws: append random string in caller ref #8612
OCPBUGS-35706: capi/aws: allow 6443 for private cluster NLB #8622
OCPBUGS-35570: capi/aws: retry SSH ingress rule removal #8618
OCPBUGS-35515: SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool #8608
OCPBUGS-35493: Validate OnHostMaintenance and ConfidentialCompute #8606
OCPBUGS-35435: vsphere - allow network selection on cluster name #8595
OCPBUGS-35527: [release-4.16] bump github.com/container/images for CVE fix #8611
OCPBUGS-35471: capi/aws: disable CAPA’s TagUnmanagedNetworkResources feature gate #8604
OCPBUGS-35023: azure: bump profile used for network #8537
OCPBUGS-35448: [release-4.16] capi/aws: bump provider for fixes #8598
OCPBUGS-35460: save etcd data to its own directory #8600
OCPBUGS-35384: Add ELB V2 permission to set security groups on API server load balancer #8589
OCPBUGS-35344: baremetal: check if HardwareDetails is nil #8579
OCPBUGS-35392: aws: delete ignition bucket on bootstrap destroy #8590
OCPBUGS-35383: capi: use polling instead of exponential backoff #8588
OCPBUGS-35372: openstack: Attach a bootstrap FIP to the cluster network port #8585
OCPBUGS-35323: Add S3 permission to allow attaching S3 bucket policy #8576
OCPBUGS-35379: capi/aws: do not set proxy for masters #8586
OCPBUGS-35253: AWS remove extra tags from awsmachines for security groups and subnets #8569
OCPBUGS-35235: baremetal: Don’t always enable provisioning-interface.service #8563
OCPBUGS-35302: Prevent multiple invocations on CAPI #8571
OCPBUGS-35101: [release-4.16] Add 4 new regions for PowerVS #8533
OCPBUGS-35312: capi/aws: rename preserveBootstrapIgnition #8574
OCPBUGS-35192: write etcd and kube-apiserver logs #8558
OCPBUGS-34760: capi/aws: fix setting custom AMI #8520
OCPBUGS-35243: capi: do not override KUBECONFIG #8566
OCPBUGS-35224: PowerVS: Destroy DHCP in ERROR state #8561
OCPBUGS-35151: wait for ip addresses to be present on machines #8554
OCPBUGS-34499: unique AWS HostedZone Caller Ref #8476
OCPBUGS-35103: OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8553
OCPBUGS-35098: capi/aws: add BootstrapDestroyer guard #8552
OCPBUGS-35088: PowerVS: fix AddIPToLoadBalancerPool #8551
OCPBUGS-35030: Increase timeout for bootstrap complete #8539
OCPBUGS-35049: capi/aws: don’t use S3 stub for masters #8548
OCPBUGS-35044: aws: don’t always require s3:Delete* permissions #8547
OCPBUGS-34620: Use infrastructure API to detect cluster topology #8499
OCPBUGS-34822: [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8524
OCPBUGS-34976: [release-4.16] aws: terraform: add spot instance support for masters #8526
OCPBUGS-34707: attach tag to folder,fix folder destroy #8509
OCPBUGS-33794: Make Ingress capability required for standalone OpenShift #8528
OCPBUGS-34628: tfvars: change asset’s name #8501
OCPBUGS-34388: Add –dir /tmp to node-joiner-monitor.sh #8461
OCPBUGS-34728: [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix #8506
OCPBUGS-34693: update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 #8517
OCPBUGS-34419: PowerVS: update capi ibmcloud to release 0 8 0 #8465
OCPBUGS-34623, OCPBUGS-34625: capv - missing cores/socket,disk type #8500
OCPBUGS-34427: aws/cluster: restrict SSH on private clusters #8467
OCPBUGS-34528: Nutanix IPI install with capi failed to set bootType #8481
OCPBUGS-31845: Detect Release Image Arch in a Disconnected Env #8490
OCPBUGS-33962: [release-4.16] Remove vSphere Terraform #8431
OCPBUGS-34506: [release-4.16] bump golang-protobuf for CVE fix #8478
OCPBUGS-34417: capi/aws: don’t modify BYO role’s policy #8463
OCPBUGS-34220: Reintroduce CAPI-installer to 4.16 #8451
OCPBUGS-33976: Enable leader election for baremetal operator #8435
Trt-1674: 4.16 capi revert 1 #8434
CORS-2840: [release-4.16] GA CAPI Installer #8428
OCPBUGS-33668: Changed folder name to match cluster name instead of infra-id. #8414
AGENT-903: monitor-add-nodes should only show CSRs matching node #8376
CORS-3480: aws/sdk: remove sdk provisioner #8358
CORS-3460: Always collect clusterapi manifests #8411
OCPBUGS-33709: GCP mixup when using the ignition shim vs the signed url #8342
CORS-3297: Add GCP firewall rule to access bootstrap node via ssh #8374
CORS-2905: capi-aws delete bootstrap ssh rule #8359
OCPBUGS-33370: baremetal: always write masters file #8365
OCPBUGS-33531: update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 #8409
no-jira: Vendor api changes for tech preview with capg #8407
CORS-3269: Azure ignite control plane machines #8126
OCPBUGS-31017: aws: add missing permission for IPv4 pools #8408
OCPBUGS-33649: add quota support to ca-west-1 #8406
CORS-3460: capi: collect generated assets in hidden dir and save into log bundle #8387
OCPBUGS-33006: baremetal: aarch64-related fixes #8385
OCPBUGS-33610: fix API detection, azure bootstrap disk size, and use get to verify endpoint #8371
no-jira: Removing unused terraform variables #8360
OCPBUGS-33502: capi/aws: fix setting IMDSv2 value #8399
CORS-3516: hack: do not execute cross-compiled binaries #8397
OCPBUGS-33578: capi/aws: fix HostedZone ID lookup #8396
OCPBUGS-30860: improve bootstrap logic to wait for at least 2 apiserver instances #8394
OKD-213: Reference stream-coreos instead of centos-stream-coreos-9 #8356
OCPBUGS-33470: use read/write cache on azure masters #8380
no-jira: AzureMachines: set disk caching to ReadWrite #8390
AGENT-863: Change $@ to “$*” to fix shellcheck #8402
OCPBUGS-33481: set the node tag used by CAPG for CloudProviderConfig #8386
OCPBUGS-23022: Installer should not complain when API and API-INT are resolved. #7701
no-jira: vendor: capi-installer in tech preview #8372
CORS-2895: capa/machines: fix zone placement for control planes #8347
OCPBUGS-32947: Changed vsphere CPMS to not include fields controlled by failure domains. #8354
AGENT-872: Generate JWT token #8110
no-jira: vSphere - update owners aliases #8384
AGENT-906: Script to run monitor-add-nodes in cluster #8294
OCPBUGS-33430: Fix CAPI installation typo #8375
CORS-3471: standalone destroy bootstrap support with capi #8350
CORS-3477: hack: build capi + providers by default #8357
OCPBUGS-33189: OCPBUGS-33006: baremetal: correct libvirt defaults #8366
OCPBUGS-33157: baremetal: pause provisioning #8346
NO-ISSUE: baremetal: disable bmo webhook on bootstrap #8340
OCPBUGS-33240: avoid FAT32 error messages when generating the agent ISO #8353
no-jira: Private domains in survey for PowerVS #8303
CORS-3250: images: use pre-built KAS/etcd binaries #8343
SPLAT-1599: Convert storage policy id to SpbmStoragePolicy. #8352
no-jira: Power VS: Refactor InfraReady to use metadata client #8337
CORS-3466: CAPG set instance group name #8314
MULTIARCH-4633: Power VS: Configure load balancers for the private scenario #8331
OCPBUGS-26216: Fix parameter used to disable smt for ppc64 systems #8178
COS-2744: update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 #8335
METAL-872: baremetal: write masters.json file #8336
no-jira: azure: Add securityProfile to control plane machines #8334
no-jira: CAPI-Install Feature Gates per Platform #8311
SPLAT-1599: Added support for secure boot and storage policies to UPI pwsh. #8328
CORS-2797: images: move container images to RHEL 9 #8196
AGENT-864: cleanup dnf cache after installing node-joiner reqs #8329
OCPBUGS-32981: baremetal: use ControlPlane.Replicas #8322
AGENT-863: docs fix #8325
OCPBUGS-33006: baremetal: set bootstrap domain arch #8317
OCPBUGS-33024: agent: escape ‘%’ in proxy settings #8320
AGENT-863: fix oc dependency in installer images #8326
OCPBUGS-29968: Generate ZTP manifests with correct Group/Version/Kind metadata #8068
CORS-3437: infra/capi: add provisioning timeout #8307
SPLAT-1596: Created new function to workaround issue with Set-HardDisk. #8315
CORS-3214: capi-aws - Wavelength Zones network provisioning #8174
AGENT-863: node-joiner cluster script #8242
OSASINFRA-3434: Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests #8021
CORS-2893: capi-aws: implement preserveBootstrapIgnition #8313
OCPBUGS-4466: Add check for compact-cluster install on GCP, AWS & Azure #8226
CORS-3250: images/altinfra: add etcd/kas binaries from containers #8309
CORS-2899: AWS/CAPI Local Zones network provisioning #8173
OCPBUGS-32981: baremetal: template the number of master nodes #8316
OCPBUGS-32519: Fix appliance CI jobs #8297
OCPBUGS-31017: fix ec2:DisassociateAddress requirement #8296
OCPBUGS-32292: Remove deprecated replace directives #8271
no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 #8310
CORS-3076: azure: Add additional tags to AzureCluster #8301
CORS-3294: CAPA health check configuration for control plane ELBv2 #8223
CORS-3470: capi/aws: add custom endpoint support. #8306
MULTIARCH-4111: Updating CI image to include qemu-kvm #8312
MULTIARCH-4616: Power VS: Add ServiceEndpoints for endpoint overrides #8292
no-jira: cluster-api/aws: bump capa to latest version #8288
OCPBUGS-32306: GCP Destroy find regional and global addresses #8275
OCPBUGS-32517: Ensure worker BMH’s get unpaused #8299
OCPBUGS-32591: GCP Destroy target pools fix misleading log #8298
CORS-3260: CAPI: Create GCP Internal LB #8151
OCPBUGS-15845: Check host for compatibility with target cluster config #7566
no-jira: bump golangci lint to 1.54.2 #8291
OCPBUGS-32425: Test for the presence of “provisioned” server #8289
SPLAT-1585: capv - allow no auth to vcenter #8276
SPLAT-1208: replace UPI terraform with powercli #7699
OCPBUGS-29765: Fills CIS or DNS CRN in Metadata, never both #8057
OCPBUGS-32042: fix usage of addtionalTrustBundle field #8253
METAL-872: Remove terraform libvirt provider #8160
MULTIARCH-4549: Logic for creating private DNS records for PowerVS CAPI #8246
OCPSTRAT-915: Nutanix capi support #8211
OCPBUGS-32133: GCP: Fixing GCP Bootstraping #8248
METAL-939: baremetal: monitor bootstrap process #8181
no-jira: gather: replace deprecated errors package #8280
no-jira: azure: Update capz version to 1.14.2 #8268
OCPBUGS-31017: aws: add ec2:DisassociateAddress permission #8247
OCPBUGS-31563: sdk/aws: add ssh security group rule for compute #8229
MULTIARCH-4550: Power VS: Use a custom resolver when publish strategy is Internal #8243
MULTIARCH-2678, OCPBUGS-14478: Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x #8205
CORS-3050: capi/aws: copy AMI to target region, if needed #8157
SPLAT-1592: bump capv to v1.9.3 #8267
OCPBUGS-30774: always save serial logs if they were gathered #8263
CORS-3261: GCP cluster api add disk encryption #8222
CORS-3419, OCPBUGS-30941: Include baremetal IPI in openshift-installer #8161
no-jira: PowerVS: Open port 10258 #8261
OCPBUGS-31711: AWS update explain docs #8258
OCPBUGS-27965: escape ‘%’ in proxy settings #8265
OCPBUGS-32174: save correct bootstrap public IP #8264
CORS-3420: Remove libvirt platform from openshift-baremetal-install #8244
no-jira: capi: replace deprecated --metrics-bind-addr arg #8251
CORS-3436: capi: save log output to file #8218
no-jira: PowerVS: Add destroy Power Server subnets #8260
OCPBUGS-32091: Add Top-level Context for Create Commands #8063
CORS-3063: Support control plane disk encryption #8124
CORS-3269: Azure CAPI Ignite Bootstrap #8255
no-jira: PowerVS: add AddIPToLoadBalancerPool #8257
SPLAT-1293: Bump API version to promote vSphereStaticIPs from TechPreview. #7943
no-jira: capi/aws: bump controller log level to debug #8252
CORS-3254: Update google.golang.org/api/cloudresourcemanager library version #8213
MULTIARCH-4111: Update the CI image with virt-install #8259
CORS-3218: GCP Remove the use case of users passing contents for json secret data #8234
OCPBUGS-27844: Fix task for attaching IPv6 subnet to router. #8087
CORS-3270: azure: tag installer-created LB resources #8236
OCPBUGS-31813: AWS: bump CCO for permission fix #8233
CORS-3289, CORS-3308, CORS-3426: Bump CAPA provider for various fixes #8232
OCPBUGS-32041: update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 #8256
no-jira: docs: Fix typos #8245
no-jira:PowerVS: Wait for IPs #8239
CORS-3075: Allow for installation in existing resource group #8123
CORS-3446: Add instructions for obtaining correct binary #8230
AGENT-858: Agent day2 ignition services #8093
CORS-3418: images: move installer images to static builds #8215
CORS-3417: capi/aws: support ignition proxy and CA bundle #8170
OSASINFRA-3365: clusterapi: Add worker asset to PreProvision #8237
HIVE-2476: OpenStack.MachineSets(): Allow nil Replicas #8227
CORS-3195: Azure CAPI Supplemental Load Balancers #8115
no-jira: PowerVS: Set VPC service region #8217
OCPBUGS-12890: Create bucket, signed url and use proxy info for installs #8056
no-jira: PowerVS: Fix COS region and VPC subnets #8219
OCPBUGS-31546: azure: use filter when listing SKUs #8134
CORS-3245: Azure CAPI rhcos image #8018
AGENT-874: use AddNodesConfig asset #8080
no-jira: this clusterprofile isn’t actually used #8214
no-jira: pkg/asset/machines: remove static ip log lines #8190
CORS-2895: aws/capi: setting zones to when creating cluster #8156
CORS-3071: Create DNS entries for CAPZ implementation #8045
no-jira: PowerVS: Fix CAPI created service instance case #8212
AGENT-857: Agent day2 use clusterinfo #8009
CORS-3431: CAPI: Add firewall rule for worker nodes #8200
OSASINFRA-3421: OpenStack: Customizable clientOpts for CheckNetworkEx… #8209
no-jira: infra: aws: move SDK provisioner to its own dir #8194
AGENT-868: Generate ECDSA public private keys and pass it to assisted service #8105
MULTIARCH-4096: PowerVS: Generate the cluster assets #8116
CORS-2901, CORS-3428: pkg/types/aws: limit additionalSecurityGroups to 10 #8184
OCPBUGS-27848: If host is offline or disconnected don’t check ver #8206
METAL-855: baremetal: remove ironic-inspector #8128
CORS-3280: Bump cluster-api-provider-gcp to v1.6.0 #8153
OSASINFRA-3420: openstack: Decouple OpenStack API calls from Machine generation #8187
CORS-2898: capi/aws: configure IMDS #8152
CORS-2905: capi/aws: destroy CAPA resources #8179
no-jira: capi/aws: reuse GenerateMachines for bootstrap #8193
OCPBUGS-31209: CAPG - Fix setting ServiceAccount role bindings for GCP #8192
OCPBUGS-31050: openstack: Honour worker server group policy #8180
OCPBUGS-26052: aws: altinfra: fix role creation in C2S #7871
OCPBUGS-15941: ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES #7349
CORS-3256: GCP destroy updates for CAPG #8113
Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8195
OCPBUGS-30882: GCP capg distribute instances across zones #8176
CORS-3142: capi: write manifests to disk during create manifests #8166
OCPBUGS-28870: IBMCloud: Restrict CIS and DNS Service lookup #7987
OCPBUGS-31013: Fix vsi image missing #8177
CNF-10170: bootkube.sh: Render kernel boot arguments for SNO #8099
CORS-2894, CORS-3051: Create DNS resources and PHZ for CAPI/aws #8142
CORS-3417: capa bump fallout #8169
CORS-3307: add ‘A2’ as tested machine types on GCP #8148
CORS-2902: capi/aws: add ext-LB as CAPA secondary LB #8149
CORS-3213: Tweak GCPCluster Failure Domain Logic #8017
CORS-3215: capi: implement bootstrap gather #8036
NO-JIRA: OWNERS: pkg/infrastructure/openstack #8165
OPNET-476: GA Load balancer feature for vSphere and Baremetal #8101
no-jira: Power VS: Fix comment on default for wait_for_workspace #8158
OPNET-476: GA Load balancer feature for Nutanix #8102
CORS-3303: GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region #8132
SPLAT-1390: remove feature gate for vSphere control plane machinesets #7908
CORS-2892: capi/aws: add user tags to CAPA cluster #8150
OCPBUGS-30836: Power VS: Fix wait_for_workspace #8145
OCPBUGS-25462: Validate control plane replicas #8082
OCPBUGS-30642: pin google oauth2 version #8133
OCPBUGS-30600: update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 #8121
CORS-3257: Create GCP ServiceAccounts and assign to machines #8066
OCPBUGS-15861: Use a static pure-go libvirt library #7252
OCPBUGS-29437, OCPBUGS-30547: Run kubelet directly #8131
METAL-871: baremetal: remove ironic tf files #8117
OCPBUGS-30641: Enable deploy by Service ID on PowerVS #8111
CORS-3288: bump CAPA for LB scheme fix #8114
no-jira: machines/aws: fix subnet filter comment #8120
METAL-871: baremetal: bootstrap: rename master label #8107
OCPBUGS-29388: upi: aws: fix typo in worker templates #8112
OSASINFRA-3362: Fix CAPI bootstrap deletion #8104
OCPBUGS-24415, OCPVE-661: bump openshift/api version #7546
MULTIARCH-4095: Generate PowerVS machine manifests for CAPI #8020
CORS-2900: CAPI AWS IAM #8031
OCPBUGS-30200: Authn with platform-services-go-sdk for PowerVS #8025
CORS-3281: IBMCloud: initial CAPI infrastructure #8090
CORS-2890: Bump CAPA Dependencies for Secondary Load Balancers #8088
SPLAT-1460: Make vSphere default ResourcePool formatting not contain double slash. #8044
CORS-3212: CAPG Add ignition for CAPG machines #8027
METAL-871: Remove terraform-provider-ironic #7649
SPLAT-1468: Added log message for import vsphere ova progress during CAPI install. #8097
no-jira: capi: aws: report all conflicting user tags at once #8085
OCPBUGS-29469: fix Azure API SKU calls timing out - part 2 #8070
SPLAT-1423: Added static ip support to CAPI installer. #8081
MULTIARCH-4159: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8098
OCPBUGS-30058: GCP: The CAPG bootstrap machine IP should be set according to the publish strategy #8079
OCPBUGS-30057: Don’t auto create subnets for CAPG #8083
MULTIARCH-4153: Incorporating Eltorito Boot Loader fix for Agent #8069
no-jira: Missing permission from vsphere docs #7789
OCPBUGS-30135: fix “OpenShiftSDN deprecated” error message #8092
CORS-3274: GCP: add africa-south1 region to the survey as supported region #8055
CORS-3251: Create capz machine manifests #7969
CORS-3259: GCP CAPI Infra: auth with service account #8077
CFE-857: Apply user defined tags on created gcp resources #7279
AGENT-853: Add ClusterInfo asset #7997
SPLAT-1173: Enhance vSphere Installer to use IPAddressClaims for static IP #7501
CORS-3273: capi system: don’t log env vars #8084
OCPBUGS-29860: double looping of failuredomains breaks zonal #8059
no-jira: Remove v1alpha3 #8061
OCPBUGS-30005: remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 #8072
OSASINFRA-3363: ShiftStack CAPO integration #7939
MULTIARCH-4158: pkg/infrastructure/powervs: add initial CAPI provider #8060
OCPBUGS-29469: fix Azure API SKU calls timing out #8046
SPLAT-1459: capv machines only full clone #8042
OCPBUGS-29895: PowerVS: Add debugging to ServiceInstanceNameToGUID #8058
SPLAT-1434: aws: add support of BYO public ipv4 pool #7983
no-jira: images: libvirt: add oc to libvirt CI image #8008
SPLAT-1465: capv - add additional extra configs #8054
SPLAT-1462: capv - Remove unneeded auth env vars #8053
OCPBUGS-29429: feat: add check for SNO bootstrap condition #8004
Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer #8028
CORS-3259: GCP: Create DNS records and internal load balancer for CAPG Install #8014
SPLAT-1198: migrate vSphere installation to CAPV #7962
OCPBUGS-29587: Power VS: Fix service instance list #8033
OCPBUGS-22410: vsphere-fix convert if only provided name #7931
OCPBUGS-29584: PowerVS: handle composite_instance #8029
OCPBUGS-29482: Bump terraform-provider-ibm to v1.61.0 #8023
CORS-2890: pkg/infrastructure/aws: add initial CAPI provider #8012
CORS-3185: update default release image #7874
OCPBUGS-28590: gcp: better error msg when service accnt missing #8002
OCPBUGS-28203: Power VS: Add sleep to allow workspace to configure PER #7889
CORS-3220: Initiate CAPG installation #8011
CORS-3213: Create the GCP cluster manifest #7917
OCPBUGS-29441: update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 #8015
OCPBUGS-29425: PowerVS Fix next start search #8010
Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation #7998
SPLAT-1447: Move MCO imports to API; update library-go, api #8000
NO-ISSUE: integrationt tests support for env vars substitution #7992
OCPBUGS-29114: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7985
OCPBUGS-29068: GCP: Skip validation of public and private zones for terraform vars #7986
OCPBUGS-29067: Copy GCP manifests within MCO bootstrap to the correct location #7991
OCPBUGS-20085: IBMCloud: Handle disk delete errors #7515
OCPBUGS-28827: do not rename boot.catalog for arm64 iso #7972
OSASINFRA-3371: Pass rhcosImage and manifests to the PreProvision hook #7967
SPLAT-1387: enable additional tags to be associated with vsphere machines #7905
CORS-3242: PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item #7861
OPNET-357: Populate network configuration at install-time #7604
CORS-3240: add OWNERS_ALIASES madhu-pillai #7733
CNF-10170: Revert “bootkube.sh: Render kernel boot arguments for SNO” #7979
CORS-3188: Bump k8s deps #7970
OCPBUGS-2135: Include CAPG objects in uninstall filter #7907
AGENT-848: add node-joiner cli tool main #7958
CORS-3207: Generate GCP machine manifests for CAPI #7944
OCPBUGS-24575: ic: gcp: validate instance architecture #7850
CORS-3196: capg: add infrastructure components #7968
CORS-3208: Create the GCP infrastructure controller #7940
OCPBUGS-27156: GCP Destroy cleanup correct zones/records #7932
OCPBUGS-27737: aws-edge-zones preventing err before discovering #7945
OCPBUGS-28708: update tested Azure Arm64 instance type on 4.15 #7965
OCPBUGS-28643: PowerVS: Add dal12 region #7956
OCPBUGS-27263: Bump golang 1.21 #7925
CNF-10170: bootkube.sh: Render kernel boot arguments for SNO #7692
OCPBUGS-28705: [azure] update tested x86 instance type on 4.15 #7961
CORS-3139: Move CAPI behind infrastructure provider interface #7824
OCPBUGS-27507: bump containerd for vulnerability fix #7942
NO-ISSUE: test fix to support slightly different nmstate error messages #7954
NO-JIRA: Minor fixes #7947
no-jira: azure: add metadata info to resource group tags #7725
OCPBUGS-25453: duplicate failure domains in CMPS #7860
OCPBUGS-27788: PowerVS: COS region configurable #7941
SPLAT-1345: Remove alibaba #7832
OCPBUGS-27366: set the –cluster-profile flag for openshift/api rendering #7924
OCPBUGS-27192: remove retired serial NCv2 from azure tested instance type list on x86 #7911
no-jira: images/altinfra: allow CAPI ARG #7891
OCPBUGS-25835: Validate baremetal capability is set for baremetal platform #7901
no-jira: Add AWS m6a to tested instance types #7851
OCPBUGS-24956: Fix typo in CloudCredential validation #7915
OCPBUGS-24303: Check provided sha for agent ISO download #7893
CORS-3203: Fix depreciated typo #7834
OCPBUGS-14257: normalize ISO files extensions to three chars #7896
OCPBUGS-26434: Redact platform passwords in agent-gather output #7873
OCPBUGS-27092: baremetal: gather all recently refactored services #7854
OCPBUGS-25996: baremetal: correct external_http_url for v6-only BMCs #7898
CORS-2950: Remove openshift-sdn as an install-time option #7720
OPNET-415: Upgrade o/api to include extended network config #7869
METAL-829: Set node cpu_arch from bmh #7814
OCPBUGS-26399: Support singular VIP in ACI for BareMetal #7859
CORS-3190: GCP: Add load balancer info to cluster infra #7888
MULTIARCH-4072: Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7870
OCPBUGS-24956: Add cloud credential capability validation #7884
OCPBUGS-25841: preserve category name when trying to find tag category #7876
ARO-4744: Do not run platform validation on ARO #7865
OCPBUGS-24956: Add cloud credential capability validation #7875
OSASINFRA-3280: OpenStack: clarify root volume size requirements #7698
OCPBUGS-26048: Bump default channel to stable-4.16 #7867
OCPBUGS-24862: Updating ose-installer-altinfra-container image to be … #7872
CORS-2852: cmd/create: allow clean shutdown of resources #7864
OCPBUGS-24820: Updating ose-baremetal-installer-container image to be consistent with ART #7817
OCPBUGS-24814: Updating ose-installer-container image to be consistent with ART #7816
OCPBUGS-25600: aws: validate instance arch #7835
OCPBUGS-25440: ic: aws: add iam:TagInstanceProfile permission requirement #7843
OCPBUGS-25132: Fixes for the OpensStack UPI playbooks. #7833
OCPBUGS-24853: Updating ose-installer-artifacts-container image to be consistent with ART #7818
OCPBUGS-19054: Warn that FeatureSet is not supported #7825
CORS-2315: GCP: Skip populating Private/Public Zones within DNS manifest #7846
no-jira: build: drop vsphereprivate build workaround #7847
CORS-2870: build: only rebuild terraform providers if needed #7688
OCPBUGS-24473: IBMCloud: Set IBM TF visibility based on URLs #7805
CORS-3029: GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS #7837
OCPBUGS-24241: Pin openstack.cloud version. #7821
Revert “OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer” #7651
no-jira: Revert “Merge pull request #7823 from patrickdillon/build-capi-altinfra” #7828
OCPBUGS-19303: Changed OKD/FCOS workaround to also support Agent-based Installer #7484
OCPBUGS-25191: ic: azure: fix retrieving marketplace image #7826
OCPBUGS-24995: Revert “Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… #7822
CORS-2840: images/altinfra: enable CAPI builds #7823
CORS-3003: [ibmcloud] add key-protect plugin in ibmcloud cli #7811
CORS-2852: Support installing OpenShift via Cluster API #7807
SPLAT-1272: Modify the terraform variables to support Nutanix Failure Domains #7806
CORS-2934: IBMCloud: Update MAPI for BYOK #7812
METAL-803: Update vendoring for baremetal-operator #7809
no-jira: Fix base image reference #7810
CORS-2952: GCP Set “ClusterHostedDNS” in the Infra CR based on the value of userProvisionedDNS #7796
CORS-2813: Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap #7662
OCPBUGS-23140, OCPBUGS-23305: Soften VIP validations for external load-balancer #7803
AGENT-739: Support for install-config baremetal host BMC fields #7645
AGENT-729: Support generic platform name for external platform #7585
MULTIARCH-4042: Reuse existing Transit Gateway in target Workspace, or create anew #7592
OCPBUGS-23473: update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 #7770
AGENT-615: Split create-cluster-and-infraenv.service #7364
no-jira: image: infra-providers: use base image instead of builder #7800
no-jira: hack: drop hardcoded -j8 in make invocations. #7799
OCPBUGS-23458: force destroy bootstrap ign #7791
OSASINFRA-3261: OpenStack: support dualstack in UPI #7727
MULTIARCH-2678: Patch for Agent Based Installer to support s390x as supported architecture. #7712
SPLAT-1218: AWS BYO VPC support for Wavelength Zones #7652
CORS-2525: Azure: remove storage account with bootstrap destroy #7642
AGENT-337: Set VIPs directly in api, instead of install-config override #7574
OCPVE-648: gomod: bump api version with CloudCredential cap #7466
CORS-2852: cmd/create: ensure proper cleanup on exit #7693
OCPBUGS-9066: Retry image download on failure #7106
NO-ISSUE: Remove dead code from ‘networking’ asset #7798
PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option #7795
OCPBUGS-24191: set vmType in azure cloud config #7793
no-jira: pkg/asset: safety nets to keep installer from crashing #7792
CORS-2934: IBMCloud: Add support for BYOK #7738
OCPBUGS-23539: Keep Machine manifests out of OpenShift Manifests asset #7753
CORS-3020: IBMCloud: Bump IBM TF provider #7784
MIXEDARCH-310: Enable the use of the multi payload for agent installer #7595
CORS-2775: ic: azure: remove deprecated errors package #7778
SPLAT-1126: aws/clusterNetworkMTU config to change the MTU for overlay network #7765
CORS-2785: images: decouple installer and installer-artifacts #7782
MULTIARCH-3793: Power VS: Add mad and wdc assupported region #7773
CORS-2852: Generate Cluster API Machine Manifests #7771
CORS-2854: azure: Allow users to set visibility to components #7547
OCPBUGS-24008: Remove sno_arm.txt integration test #7718
OCPBUGS-23947: set client options when interacting with azure api #7768
CORS-2978: enable AWS SDK Installation through feature gates #7715
CORS-2798: GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information #7631
CORS-2845: azure: Enable storage account encryption #7520
SPLAT-1277: unrevert PR 7418; implement vSphere control plane machinesets #7780
OSASINFRA-3303: OpenStack: remove generation of trunks name #7772
AGENT-670: Add assisted-db data to agent-gather #7719
SPLAT-1160: AWS - Support Wavelength Zones with edge pool #7369
Skip cluster config #7666
OCPBUGS-24031: Bump Fedora CoreOS to latest stable #7779
no-jira: destroy: azure: store session in the destroy object #7777
CORS-2975: Add support for il-central-1 in AWS #7740
CORS-2428: terraform: add build information to binaries #7763
OCPBUGS-24026: Add owner for user provided client CA bundle #7749
SPLAT-1272: Support Nutanix Failure Domains #7730
CORS-2775: destroy: azure: remove deprecated errors package #7761
no-jira: cmd/openshift-install: Remove “migrate” command #7601
no-jira: go.mod: remove unused terraform-providers-nutanix import #7762
CORS-2835: pkg/infrastructure: remove ARO build tag #7745
OCPBUGS-21777: baremetal: populate customDeploy in advance #7674
CORS-2933: IBMCloud: Basic service endpoint override #7632
CORS-2852: Introduce Cluster API Infrastructure manifest generation #7672
OCPBUGS-22840: ic/azure: validate field Plan when for marketplace images #7721
CORS-2604: tag user-provided azure vnet #7611
MULTIARCH-3964: Power VS: Control SMT level with machineconfig #7704
no-jira: destroy/azure: fix dropped negation from error comparison #7758
no-jira: destroy/azure: avoid cancelling main context #7750
OCPCLOUD-2130: Fix Failuredomains check on manifests test #7617
OSASINFRA-3295: OpenStack: fix client used to list flavors #7723
OSASINFRA-3294: OpenStack: fix script to update bootstrap ignition shim #7743
no-jira: images: rename terraform- > infrastructure-providers #7716
OCPBUGS-23376: vSphere - when using RP network path is incorrect #7737
no-jira: Stop rendering networks.config CRD #7732
OCPBUGS-22453: Fixed systemd-resolved’s split dns config in OKD/FCOS #7634
SPLAT-1218: upi/AWS: Templates to provision resources in Wavelength #7722
AGENT-337: Support both VIP and VIPs in AgentClusterInstall #7724
OSASINFRA-3229: Remove support for Kuryr #7675
CORS-2830: Provision AWS Infrastructure with SDK #7676
MULTIARCH-4009: Prepare for varying SysTypes for new datacenters #7717
MULTIARCH-3789: Power VS: Remove cloud connection support #7696
CORS-2876: images/installer-altinfra: initial Dockerfile #7711
Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network #7694
MULTIARCH-3965: Check if PER is enabled in the target PowerVS workspace #7683
OSASINFRA-3280: openstack: document etcd on local disk #7664
OCPBUGS-23170: Revert #7418 “SPLAT-1141: implement vSphere control plane machinesets” #7708
MULTIARCH-2590: PowerVS create service instance #7695
SPLAT-1141: implement vSphere control plane machinesets #7418
CORS-2428: images: add Dockerfile for a terraform-providers image #7687
OSASINFRA-3237: move controlPlanePort API to GA #7570
CORS-2835: use build tags to produce installer with alternate infrastructure providers #7656
CORS-2877: Install Config Feature Gate Validation #7413
OCPBUGS-22772: return Terraform statefile on error #7671
NO-JIRA: destroy/aws: replaced deprecated sets syntax #7680
OCPBUGS-19398: IBMCloud: Add eu-es region #7668
OCPBUGS-22830: fix google cli verson to 447.0.0 #7663
OCPBUGS-22113: Do not generate azure-cloud-provider in manual mode for aro builds #7608
OCPBUGS-22757: update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 #7654
CORS-2852: Introduce pkg/clusterapi, system, and local control plane #7630
OCPBUGS-20403: OpenStack: add SG rules for compact clusters on UPI #7576
OCPBUGS-17866: check GOOGLE_APPLICATION_CREDENTIALS env var #6863
OCPBUGS-22773: PowerVS: fix removeFromLoadBalancers #7653
OCPBUGS-13664: Add KMS encryption keys if provided #7650
Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap #7638
OCPBUGS-18387: Add Azure ConfidentialVM capability and DiskEncryptionSet validations #7469
OCPBUGS-22489: destroy: gcp: fix destroying regional disks #7643
OCPBUGS-22058: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7590
OCPBUGS-18986: Skip the deletion of instance profiles marked shared #7537
hack/go-lint: update golanci-lint to v1.53.1 #7635
OCPBUGS-22655: Bump Fedora CoreOS to latest stable #7644
bootkube.sh: drop final mention of machine-os-content #7636
update tested x86 instance type on 4.14 #7639
OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer #7629
CORS-2852: Build and package Cluster API and providers #7620
AGENT-713: Use BM hosts in install-config if not defined in agent-config #7531
MIXEDARCH-353: Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage’s manifest-list image #7567
openstack: dual stack UPI - create security group rules for IPv6 #7552
OCPVE-740: bump openshift/api #7613
AGENT-718: Add vSphere credentials to install-config overrides #7593
Revert #7428 “OCPBUGS-13664: Add KMS encryption keys if provided” #7625
OCPBUGS-10906: check extracted base iso coreos version is in sync #7030
OCPBUGS-4038: bootstrap: Enable gatewayd units only on RHCOS #7580
OCPBUGS-21720: images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 #6813
CORS-2836: Refactor Stages, encapsulate terraform #7488
OCPBUGS-20356: update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 #7616
OCPBUGS-20364: azure: validation: validate defaultMachinePlatform #7584
OCPBUGS-20525: aws: use security groups from defaultMachinePlatform #7589
OCPBUGS-13664: Add KMS encryption keys if provided #7428
OCPBUGS-5471: Try to select rendezvousIP among non-worker hosts #7443
OCPBUGS-21781: Rectify GCP label key validation check #7596
Revert skipping integration test agent sno arm #7561
OCPBUGS-20350: vSphere,segfault on version check #7575
OCPBUGS-19093: skip agent-tui on OCI #7512
OCPVE-675: feat: bump api to add OLM capability #7495
Enforcing the serial execution of the integration tests #7591
images: Cleanup CI Dockerfiles #7507
OCPBUGS-20440: Warn about host and target compatibility #7582
OCPBUGS-19444: Use changes to AgentClusterInstall during loading #7506
OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules #7577
Remove unused method #7438
PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality #7564
OCPBUGS-19552: Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved #7516
docs: Described process of adding vGPU capable nodes. #6606
OCPBUGS-19086: Check if nmstatectl executable exists in the system #7492
OCPBUGS-16666: Change where AdditionalTrustBundle is set #7485
OCPBUGS-18455: Unable to disable external CCM for platform external #7533
OCPBUGS-18552: Truncate vlan names defined in nmstate if > 15 chars #7486
OpenStack: enable IPv6 primary dual-stack cluster #7259
OCPBUGS-20110: Add an unit test - at least one interface must be defined for each node #7555
OSASINFRA-3199: Configure User-Agent for OpenStack API calls #7548
OCPBUGS-17757: check credentials type to handle different gcp authentication methods #7422
Docs: Fix openstack command for image update in upi installation #7556
PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions #7563
PowerVS: Remove deprecated errors package #7544
Disable pxe sno arm integration test #7557
Inefficient wait for all clusteroperators #7535
OCPBUGS-15844: Enable FIPS in agent ISO #7540
OCPBUGS-20058: Use updated ansible-core for Openstack image #7549
OWNERS: Remove obsolete agent reviewers #7545
OCPBUGS-5728: Log “agent wait-for” commands to .openshift_install.log #7452
OCPBUGS-19092: Enable serial console for external OCI platform #7511
OCPBUGS-18690: ic: azure: validate NVMe-only family types #7500
CORS-2479: agent: Ensure registries.conf is world readable #6745
add jbtrystram to coreOS approvers and reviewers #7464
OCPBUGS-19093, OCPBUGS-19688: Allow agent-tui to use serial console #7526
Tweaks to validateRendezvousIPNotWorker #7437
OCPBUGS-18986: Tag aws instance profiles. #7510
OCPBUGS-19376: GCP default value for service account #7519
MULTIARCH-3701: Enable ppc64le for agent installer #7366
pkg/asset/installconfig/powervs: fix dropped error #7419
OCPBUGS-19699: Remove warning about CPUPartitioning #7527
OCPBUGS-18187: Increase bootstrap timeout for vSphere platform by 30 mins #7518
OCPBUGS-18830: AWS terraform bootstrap destroy will not refresh state #7491
OCPBUGS-12707: always write AWS cloud.conf #7514
AGENT-710: Use invoker for bootstrap template generation #7508
OCPBUGS-18876: Pass CPUPartitioning via install-config overrides if set #7513
OpenStack: fix IPv6 docs #7482
OCPBUGS-18945: update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 #7499
LICENSE: Update #7502
OCPBUGS-19286: Updating ose-installer-artifacts images to be consistent with ART #7496
SPLAT-1170: enable cloud controller manager type to be defined #7457
OpenStack: Set external network for cloud-provider #7411
OCPBUGS-17724: Graceful fail for AWS getUser on destroy #7429
AGENT: publish services diagrams #7323
OCPBUGS-19149: Updating ose-baremetal-installer images to be consistent with ART #7494
OCPBUGS-19130: Updating ose-installer images to be consistent with ART #7493
OCPBUGS-17218: Warn when firewall rull missing. #7417
OSASINFRA-3236: deps: Bump gophercloud to v1.6.0 #7208
OCPBUGS-19037: Handle agent tui failure gracefully #7490
OCPBUGS-19017: Add Net capabilities to dnsmasq container #7487
OCPBUGS-18113: Do not set FailureDomains on CPMS when in a single zone Azure region #7448
AGENT-702: Generate minimal ISO for external platform #7450
OCPBUGS-18304: for vsphere ipi add cluster domain to the uploaded vm configs so that… #7451
Implement workaround to allow SNO installations for OKD/FCOS #7445
Full changelog

baremetal-machine-controllers

OCPBUGS-46645: Bump x/net to 0.33.0 #226
OCPBUGS-30477: Bump golang-protobuf version #213
OCPBUGS-28835: Extend metal3remediation aggregation role #209
OCPBUGS-25561: Updating baremetal-machine-controller-container image to be consistent with ART #208
OCPBUGS-25159: Updating baremetal-machine-controller-container image to be consistent with ART #207
OCPBUGS-24919: Updating baremetal-machine-controller-container image to be consistent with ART #206
OCPBUGS-24108: Updating baremetal-machine-controller-container image to be consistent with ART #205
NO-ISSUE: Log when applying updates to BareMetalHost #203
OCPBUGS-21794: Uplift x/net to v0.17.0 #197
OCPBUGS-19178: Updating baremetal-machine-controller images to be consistent with ART #196
Full changelog

baremetal-operator

OCPBUGS-53322: BMO can expose any secret via BMCEventSubscription CRD #407
OCPBUGS-49703: Handle HFC for non-redfish HW #396
OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
OCPBUGS-37765: HostFirmwareComponents doesn’t show the new firmware information in Status Components #355
OCPBUGS-37262: fix(redfish): set correct idrac-redfish management interface #366
OCPBUGS-36673: [4.16] Firmware Update causes BMH to get stuck in Preparing #363
OCPBUGS-33254: Merge upstream #354
NO-ISSUE: Revert “downstream-only: Disable webhooks” #335
OCPBUGS-33048: PreprovisioningImage should not be created on poweroff #349
NO-ISSUE: Sync upstream April 29 #348
NO-ISSUE: Merge upstream #347
NO-ISSUE: Sync with upstream #344
NO-ISSUE: Merge upstream #340
NO-ISSUE: Update OWNERS #339
METAL-866: Merge upstream #336
NO-ISSUE: Merge upstream (2024.02.02) #330
OCPBUGS-27825: Merge upstream #329
OCPBUGS-25567: Updating ose-baremetal-operator-container image to be consistent with ART #328
OCPBUGS-24935: Updating ose-baremetal-operator-container image to be consistent with ART #327
OCPBUGS-24117: Updating ose-baremetal-operator-container image to be consistent with ART #323
METAL-376: Merge upstream #322
METAL-376: Re-enable RAID interfaces #319
OCPBUGS-21777: Do not update instance_info and deploy_interface for active nodes #316
OCPBUGS-8764: Merge upstream #315
Merge upstream #314
OCPBUGS-21736: Uplift x/net to v0.17.0 #313
Merge upstream #303
OCPBUGS-19191: Updating ose-baremetal-operator images to be consistent with ART #302
Merge upstream #301
Full changelog

baremetal-runtimecfg

OCPBUGS-35891: Change mechanism of debug flag #323
OCPBUGS-35743: Fix handling of ELB Node IP detection #320
OCPBUGS-35486: Add support for OVN HostCidrs annotation #318
OCPBUGS-29067: Fix generation of DNSUpstreams on cloud platforms #308
NO-ISSUE: Fix wrong golang version, bump to 1.21 #311
Revert “OCPBUGS-32348: Make log level configurable” #310
OCPBUGS-32348: Make log level configurable #305
OCPBUGS-29067: Do not add VRRP config to Node on Cloud Platforms #303
OCPBUGS-29931: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.16 #300
OCPBUGS-29919: Decrease log level when detecting node IP #301
OCPBUGS-29095: Ignore egress IP when selecting Node IP #298
OCPBUGS-24865: Updating ose-baremetal-runtimecfg-container image to be consistent with ART #291
NO-ISSUE: Upgrade k8s api and client-go deps #297
OCPBUGS-26765: Add .snyk file to ignore vendor and test files #292
CORS-2818: Adding ability to render Cloud LB IPs #286
OCPBUGS-23432: Use shorter IP label for keepalived VIP #287
OCPBUGS-22204: deps: upgrade x/sys #280
OCPBUGS-19492: Increase timeout for bootstrap kubeapi #276
OCPBUGS-19098: Updating baremetal-runtimecfg images to be consistent with ART #274
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-51043: Add HOST env var in oc debug for sos report collects more #1977
OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
OCPBUGS-37853: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1839
OCPBUGS-31639: Bump k8s dependencies to 1.29.7 #1824
OCPBUGS-36764: pkg/cli/admin/upgrade/rollback: Drop this command #1820
OCPBUGS-36328: Set required-scc annotation to privileged for node debug pods #1816
OCPBUGS-36379: bump(k8s)=1.29.6 #1810
OCPBUGS-35924: upgrade status: control plane completion estimate #1804
OCPBUGS-34886: Hardcode resource groups/kinds for now #1796
OCPBUGS-33917: add alert data to upgrade health in oc adm upgrade status #1794
OCPBUGS-33975: pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK #1776
OCPBUGS-34406: Simplify output when not updating #1781
OCPBUGS-33918: adm update status: Show information about the upgrade target version #1772
OCPBUGS-33916: Add s390x based oc into extraction target #1770
OCPNODE-2281: Support multiple icsps in migrate icsp #1751
OCPNODE-2282: Support multiple ImageDigestMirrorSet objects in the th… #1756
OTA-1275: cli/admin/release/git: use optimized git flags #1754
WRKLDS-1251: Switch cli image to RHEL9 base image #1752
OTA-1154: pkg/cli/admin/upgrade/status: Drop free-form Progressing output line #1753
OTA-1279: pkg/cli/admin/upgrade/status: Move Failing from free-form to updateInsight #1744
OCPBUGS-32841: Bump go-jose indirect reference to 2.6.3 #1747
OTA-1174: update status: unify on --details #1748
OCPBUGS-32786: Improve error message when binary is not in target list #1746
OCPBUGS-32080: release: extract ccoctl.rhel8 and ccoctl.rhel9 #1734
OTA-1174: upgrade status: Show resources in --details=health #1737
OTA-1155: update status: Simplify CO status line #1741
OCPBUGS-20097: Migrate tools image to RHEL9 #1652
NO-JIRA: Print an error msg instead of panicking when all image manifests are filtered out #1729
WRKLDS-1190: oc adm must-gather: print timestamp when logging in fallback mode #1738
OTA-1202: Changing the conditional risk to known issues #1739
OTA-1174: upgrade status: Expand health insights with --detailed=health #1736
OTA-1174: upgrade status: add --detailed=nodes that shows all nodes #1735
MCO-1056: MCO-1057: Implement oc adm prune machineconfigs command #1723
NO-JIRA: Report tests for feature #1728
OTA-1036: adm update status: Refactor node status #1732
OTA-1036: adm upgrade status: Add control plane nodes status #1731
OCPBUGS-31498: Add OIDC specific certificate authority bundle flag #1720
WRKLDS-1171: Add openshift-install-fips target to oc release extract #1725
OCPBUGS-31615: Add help text the behavior of filter-by-os against single image #1721
make output table slightly easier to read #1719
NO-JIRA: update featuregate diff for clusterprofiles #1714
WRKLDS-1128: revert cli/admin/release/git: use optimized git flags #1718
OCPBUGS-31484: Remove some of newapp unit tests relying on external deprecated images #1717
WRKLDS-1128: cli/admin/release/git: use optimized git flags #1708
WRKLDS-1076: oc idle: Remove redundant endpoint resource modification #1692
OCPBUGS-30703: Bump coreos/go-oidc to 3.10.0 #1713
WRKLDS-1103: tools: extend the image with sosreport #1704
OTA-1165: adm upgrade status: Add Worker Node Status #1689
OCPBUGS-29623: Introduce certificate-authority flag for image related commands #1693
OCPBUGS-30212: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1680
OCPBUGS-30244: Add images mismatching kubectl version into warning to track #1695
OCPBUGS-30162: Introduce –issuer-url flag in oc login #1694
NO-JIRA: Bump k8s dependencies to 1.29.1 #1684
OCPBUGS-23386: Extract oc also for linux/ppc64le #1691
OTA-1080: pkg/cli/admin/inspectalerts: New tech-preview inspect-alerts subcommand #1674
OCPBUGS-29210: Update some commands incorrect examples #1686
NO-JIRA: Print log rather than returning an error when kubectl version mistmaches #1685
Do not force the ancient OS version dist tag. #1536
TRT-1503: Tools image no longer has python;adding #1682
Revert “NO-JIRA: Bump k8s dependencies to 1.29.1” #1683
NO-JIRA: Bump k8s dependencies to 1.29.1 #1681
OCPBUGS-29039: fix copy-to-node #1679
OCPBUGS-28540: Copy oc.rhel8 instead of symlink #1669
OCPBUGS-27732: Bump joelanford/ignore to bump go-git to 5.11.0 #1671
WRKLDS-1016: Bump kube dependencies to 1.29.0 #1661
OCPBUGS-27957: pkg/cli/admin/inspect: use since/since-time for previous container logs #1666
NO-JIRA: Fix –parallelism flag formatting in help #1664
NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error #1663
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1667
OCPBUGS-27489: Use correct hash sum of extracted tarball after re-signing with codesign #1659
NO-JIRA: Simplified kubectl component version check #1662
CNV-37284: Add –all-images flag to must-gather #1633
Revert “WRKLDS-1016: Bump kube dependencies to 1.29.0” #1660
WRKLDS-1016: Bump kube dependencies to 1.29.0 #1655
NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images #1656
WRKLDS-998: oc login: Built-in cred exec plugin implementation and wiring #1640
NO-JIRA: adm update status: add TODOs to remind us to revise early decisions #1654
WRKLDS-1012: oc adm must-gather: pull gather container logs #1641
WRKLDS-950: add since and since-time flags to limit log collection on must-gather #1648
WRKLDS-1010: pkg/cli/admin/inspect: use since/since-time for rotated logs #1653
NO-ISSUE: add information about featuregate diff in a particular release #1650
NO-JIRA: report kubectl version to the release controller #1651
OCPBUGS-25461: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1647
OTA-1087: Add upgade health section to adm update status #1636
OCPBUGS-19807: pkg/cli/admin/release/extract: Log a warning on –credentials-requests without –included #1551
NO-JIRA: Sanitize path using filepath Clean #1645
OTA-492: pkg/cli/admin/upgrade/rollback: New rollback command #1642
NO-JIRA: oc adm prune images: fix –certificate-authority flag name in validation code #1644
OCPBUGS-25703: validate tag name on creation #1643
NO-JIRA: Migrate from deprecated ioutils to relevant libraries #1602
OCPBUGS-23386: Generate FIPS compatible RHEL9 oc binary #1632
OCPBUGS-25021: Bump ocp images to 4.16 in addition to go 1.21 #1628
OCPNODE-1656: oc release extract: Introduce –idms-file and deprecate icsp-file #1624
OCPBUGS-24834: Bump api to include the new CloudCredential cap #1622
OCPBUGS-24225: Remove deprecated password defaulting in default config flag #1619
OCPBUGS-24375: Overwrite template’s namespace with the explicit one #1612
OCPBUGS-23723: Add .snyk file to exclude vendor and ignore unit tests #1604
ACM-7713: Skip related objects which are invalid #1550
OTA-1035: adm upgrade status Add control plane update status #1597
OCPBUGS-23071: Mention inspection completion in the error message #1601
NO-JIRA: Add client version in must-gather summary #1603
WRKLDS-908: Promote some experimental commands, deprecate others #1596
WRKLDS-860: Add volume usage percentage checker script in must-gather’s gather container #1533
OTA-1035: Allow testing adm upgrade status on mock data #1595
NO-JIRA: Drop the experimental info for registry login and must-gather commands #1594
Updating content type variable name for CLI docs generation #1591
WRKLDS-874: oc whoami: Ask from selfsubjectreview and fallback to internal oauth #1588
moved cert sharing library #1532
OCPBUGS-21612: Use mutex to prevent concurrent writes #1589
OCPBUGS-20500: Add directive example to kubelet-restart command #1586
pkg/cli/admin/upgrade/status: Add update duration #1583
oc/*: gracefully fail when user group is not configured #1585
create/identity: fail gracefully when no user API exists #1582
pkg/cli/admin/update: Add tech-preview ‘oc adm upgrade status’ #1554
OCPBUGS-20500: Fix some commands incorrect examples #1581
OCPBUGS-9340: pkg/cli/admin/upgrade: Warn on unrecognized subcommands #1557
OCPBUGS-20381: Bump golang.org/x/net to v0.17.0 #1578
OCPBUGS-20528: Revert “OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror” #1575
OCPBUGS-20474: Set ImportPolicy to PreserveOriginal to honor –keep-manifest-list when mirroring a payload to an image stream #1572
OCPBUGS-20342: Reflect container’s exit code for long running tasks not attached to terminal #1571
OCPBUGS-20063: regeneratemco: explicitly check for PlatformStatus field #1555
OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror #1556
OCPBUGS-20181: Use quay redis image instead docker mysql #1559
OCPBUGS-7465: Introduce refreshable dynamic credential store for image manifests #1540
Updating excluded list of unsupported oc adm commands in MicroShift #1558
WINC-692: Add Windows node functionality to debug command #1524
WRKLDS-537: oc adm release info: Add –first-parent to git log for simplification #1552
WRKLDS-806: Bump kube dependencies to 1.28.2 #1547
OCPBUGS-19282: Updating ose-tools images to be consistent with ART #1545
OCPBUGS-19281: Updating openshift-enterprise-deployer images to be consistent with ART #1544
OCPBUGS-19517: remove unsupported commands from microshift docs #1548
OCPBUGS-19283: Updating ose-cli-artifacts images to be consistent with ART #1546
OCPBUGS-19129: Updating openshift-enterprise-cli images to be consistent with ART #1542
Full changelog

cloud-credential-operator

OCPBUGS-53416: github.com/golang/glog v1.2.4 #843
OCPBUGS-53822: update github.com/golang-jwt/jwt #839
OCPBUGS-51544: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #829
OCPBUGS-52512: github.com/go-jose/go-jose/v4 v4.0.5 #826
OCPBUGS-47070: golang.org/x/net v0.33.0 #805
OCPBUGS-45939: Add AWS region to aws-pod-identity-webhook #800
OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
OCPBUGS-41234: List secrets in batches to avoid api timeout #757
OCPBUGS-38376: Update google.golang.org/grpc v1.65.0 #748
OCPBUGS-37418: SNYK ignore go-client misreporting #735
OCPBUGS-36834: GCP passthrough permissions check to ignore problematic permissions. #714
OCPBUGS-36954: Update to azidentity v1.7.0 #727
OCPBUGS-36031: IBM/go-sdk-core update to v5.6.3 #718
OCPBUGS-34117: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #704
OCPBUGS-32948: Update documentation to restart pods when enabling workload identity #701
OCPBUGS-32026: Docs: Fix migration to azure workload identy to apply the webhook config #695
OCPBUGS-31290: Dockerfile should keep prior rhel8 behavior for ccoctl default #694
OCPBUGS-31290: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 #693
OCPBUGS-31290: Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 #692
OCPBUGS-31678: aws: remove non-existent permission #690
AUTH-482: set required-scc for openshift workloads #681
OCPBUGS-30713: update go-jose module to v4.0.1 #687
OCPBUGS-30478: Update to cloud.google.com/go/storage v1.39.1 #688
OCPBUGS-25193: Scope networkResourceGroup permissions to more operators #682
OCPBUGS-28787: gcp actuator update check to consider custom roles #685
CCO-525: Azure workload identity doc updates #680
NO-JIRA:docu change: fix find command #677
NO-JIRA: Fix update-codegen.sh #669
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #672
OCPBUGS-28388: Fix the ClusterOperator watch of the status controller #665
OCPBUGS-27214: ccoctl - use proxy when validating CloudFront URL #654
OCPBUGS-28535: stop LoadInfrastructureRegion from panicking when being called on a non-AWS cluster #667
NO-JIRA: Fix user-facing typos #668
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #663
NO-JIRA: Keep metrics.md up-to-date #664
OCPBUGS-27446: Report manualpodidentity mode in metrics when using Azure Workload Identity #657
OCPBUGS-27445: Use cached clients to avoid client side throttling #656
NO-JIRA: azwi doc: apply webhook manifest to cluster #652
CCO-454: Bump go.mod k8s deps to 0.29.1 #655
OCPBUGS-16181: Write manifests when AWS IAM roles already exist. #514
CCO-519: Resolve all outstanding snyk vulnerabilities #648
OCPBUGS-26488: Use live client for metrics #645
OCPBUGS-25533: Updating ose-cloud-credential-operator-container image to be consistent with ART #642
NO-JIRA: Update docs/sts.md #634
OCPBUGS-24807: Updating ose-cloud-credential-operator-container image to be consistent with ART #639
NO-JIRA: Fixed typos #633
OCPVE-647: annotate manifests with capability name #594
CCO-338: cmd/operator: use correct kubeconfig for all clients #638
CCO-244: gcp-ro-credentialrequest to use granular permissions #626
OCPBUGS-23178: Enable GCP sync to undelete custom roles #637
OCPBUGS-13597: Discover AWS dns suffix from partition and region. #596
CCO-372: Azure Workload Identity info in CredsRequests creates a Secret #587
OCPBUGS-20478: Explicitly set the vsphere secret credential data on sync. #628
CCO-440: Bump k8s deps to 0.28.3 #614
CCO-192: Use Leases for leader election #627
CCO-430: Use per-project custom roles instead of per-cluster custom roles #611
snyk: exclude vendor/ #613
OCPBUGS-22369: explicitly set azure oidc bucket to allow public blob access #610
Upgrade golang/x/net for CVE-2023-39325 #609
OCPBUGS-21745: azure create-managed-identites to add cloud controller manager to network resource group #607
Removing andrew from OWNERS #606
Revert #592 “CCO-421: *: split pod identity webhooks from core controller” #604
CCO-421: *: split pod identity webhooks from core controller #592
Docs: azure workload identity no longer requires TechPreviewNoUpgrade #603
CCO-437: Document steps for in-place migration to Azure AD Workload Identity. #598
OCPBUGS-19123: Updating ose-cloud-credential-operator images to be consistent with ART #600
OCPBUGS-18246: Add networkResourceGroupName parameter for Azure #597
Full changelog

cloud-network-config-controller

OCPBUGS-33617: Avoid panic when looking up attachedOutboundRule.ID in azure #144
NO-JIRA: Update dependency google.golang.org/api #143
OCPBUGS-33154: Incorrect use of go wait groups #140
OCPBUGS-29915: GCP: Explicitly set UniverseDomain to the default universe domain #136
OCPBUGS-27422: Avoid nil pointer panic while assigning private IP on Azure #133
OCPBUGS-30146: Serialize scheme construction to prevent panic #134
OCPBUGS-31289: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.16 #135
OCPBUGS-29915: GCP: Explicitly set UniverseDomain to the default universe domain #132
SDN-4405: 1.29_rebase: #131
OCPBUGS-28282: Add Snyk file to exclude vendor dependent libraries on scan #130
OCPBUGS-24823: Updating ose-cloud-network-config-controller-container image to be consistent with ART #129
Kube 1.28 rebase for cloud-network-config-controller #124
Bump CI image #123
OCPBUGS-5491: Azure: skip backend pool if attached to an outbound rule #121
OCPBUGS-19163: Updating ose-cloud-network-config-controller images to be consistent with ART #122
Full changelog

cluster-authentication-operator

OCPBUGS-54655: Avoid duplicate OAuth client creation #766
OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
OCPBUGS-34790: update OpenShift favicon to new brand standard #676
NO-JIRA: Fixes for Keycloack IDP test and unit tests #683
NO-JIRA: remove go-jose not to get flagged with its CVEs #668
AUTH-482: set required-scc for openshift workloads #656
OCPBUGS-24195: the apiservice controller waits until bootstrap complete #662
OCPBUGS-22969: Use v1 for flowcontrol API #640
NO-JIRA: e2e Keycloak: retry logging in as admin #666
OCPBUGS-32089: wellknown-readiness: perform several attempts to connect before going unavailable #664
NO-ISSUE: bump to the latest version of openshift/api #663
NO-ISSUE: bump dependencies #659
NO-JIRA: test/lib: create SA on deploy #660
NO-ISSUE: oauth-apiserver: disable priority and fairness #658
NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after #657
NO-JIRA: _output - remove dir #651
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #632
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #646
OCPBUGS-24883: Updating ose-cluster-authentication-operator-container image to be consistent with ART #644
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #636
OCPBUGS-24217: Annotate certs with ownership information #642
OCPBUGS-21719: go.mod: bump golang.org/x/net to v0.17.0 #635
OCPBUGS-17987: generate only >=0 number of random bits #629
OCPBUGS-19125: Updating ose-cluster-authentication-operator images to be consistent with ART #634
Full changelog

cluster-autoscaler

OCPBUGS-54326: improve replica counting and decrease target size behavior #353
OCPBUGS-48732: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #339
OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
OCPBUGS-33932: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #303
NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup #298
OCPBUGS-31421: add check for taint.value == nil #292
OCPBUGS-28334: update snyk file #287
PODAUTO-99: Fix VPA e2e test failures #286
OCPCLOUD-2431: rebase on upstream 1.29.0 release #285
PODAUTO-104: Add downstream pod autoscaling team member jkyros to VPA OWNERS #283
OCPBUGS-27509: Fix unstructured taint parsing in Cluster API provider #281
OCPBUGS-26504: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 #279
OCPBUGS-25855: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 #277
OCPBUGS-25625: Add Snyk file to exclude vendor directory on scan #276
OCPBUGS-24783: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART #271
OCPBUGS-25579: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #274
PODAUTO-91: Add joelsmith to OWNERS for approving of VPA-only PRs #273
OCPBUGS-24974: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #272
OCPBUGS-24146: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #269
OCPCLOUD-2195: rebase on upstream 1.28.0 release #265
Update OWNERS #264
OCPBUGS-18137: UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg #261
OCPBUGS-19232: Updating vertical-pod-autoscaler images to be consistent with ART #262
OCPBUGS-18852: Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #260
Full changelog

cluster-autoscaler-operator

OCPBUGS-52329: set max soft bulk taint count to zero #341
AUTH-482: set required-scc for openshift workloads #315
OCPBUGS-20565: Set webhook minimum TLS version to 1.3 #320
OCPCLOUD-2493: Add empty string as value for GpuType if GpuCount is empty 0 #317
OCPBUGS-31960: Bump x/net to v.0.24.0 #318
OCPCLOUD-2493: Update CAO to add upstream annotations #316
OCPCLOUD-2523: add ExpanderOrderList api option #304
OCPBUGS-29863: Apply hypershift cluster-profile for ibm-cloud-managed #314
OCPBUGS-28207: update min/max memory limit documentation #313
MIXEDARCH-429: Revert “OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch” #311
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #312
MIXEDARCH-429: Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297
OCPCLOUD-2432: Bump k8s packages to v1.29 #310
OCPBUGS-25559: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #305
OCPBUGS-25633: Add Snyk file to exclude vendor directory on scan #306
OCPBUGS-24911: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #303
OCPBUGS-24102: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #302
OCPCLOUD-2137: Check scale from zero annotations on MachineSets #294
OCPBUGS-21791: Bump x/net package to v0.17.0 #295
Update OWNERS #296
OCPCLOUD-2196: Update dependencies k8s 1.28 #293
OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch #284
OCPBUGS-18954: Ensure status reporter caches exit if they don’t sync #285
OCPBUGS-19411: cluster-autoscaler-operator: clusterrole add clusteroperators watch #287
OCPBUGS-19169: Updating ose-cluster-autoscaler-operator images to be consistent with ART #286
Full changelog

cluster-baremetal-operator

OCPBUGS-54546: Add missing relatedObjects #470
OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
OCPBUGS-31961: bump x/net to 0.23.0 #431
OCPBUGS-36415: set required-scc for openshift workloads #433
OCPBUGS-36285: Move pull secret from env var to VolumeMount in metal3-image-customization container #436
OCPBUGS-36285: Mount htpasswds as volumeMounts in metal3-httpd container #434
OCPBUGS-35381: provisioning: add ownership for tls secret #425
OCPBUGS-35503: Add capability to metal3-ramdisk-logs container #426
OCPBUGS-34041: Run metal3 containers as specific users and groups #418
OCPBUGS-33493: Enable leader election for baremetal-operator #416
OCPBUGS-27145: Drop unneccessary capabilities #401
OCPBUGS-33254: Wait for bootstrapping to finish before starting #415
OCPBUGS-28230: enforce termination message policy on all platform pods #413
METAL-979: Add RBAC for newer CRDs hostfirmwarecomponents and dataimages #412
METAL-904: Move parts of ICC config to a new secret #406
OCPBUGS-31341: Refactor Pull Secret application #409
OCPBUGS-27760: Update the leader election durations to be tolerant #403
OCPBUGS-24579: pass all IPs to image-customization-controller #400
OCPBUGS-27145: Reduce container privileges #396
OCPBUGS-28230: add terminationmessagepolicy to show last of error log in API #399
METAL-856: set USE_IRONIC_INSPECTOR explicitly #398
OCPBUGS-25766: manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election #395
OCPBUGS-25572: Updating ose-cluster-baremetal-operator-container image to be consistent with ART #394
OCPBUGS-24946: Updating ose-cluster-baremetal-operator-container image to be consistent with ART #393
OCPBUGS-20572: Obsolete protocols for webhook #375
OCPBUGS-24125: Updating ose-cluster-baremetal-operator-container image to be consistent with ART #392
NO-ISSUE: Fix ordering problem in the unit tests #390
OCPBUGS-23131, OCPBUGS-23149: fix IRONIC_EXTERNAL_URL_V6 #380
MGMT-16047: update dependencies #383
NO-ISSUE: Stop linting when building the image #343
OCPBUGS-20563: Add tls-cipher-suites to baremetal-kube-rbac-proxy #374
OCPBUGS-17003: Trigger reconcile on service-ca CO #365
OCPBUGS-21741: Uplift x/net to v0.17.0 #368
Jira OCPBUGS-16919: Trigger reconcile if Secret openshift-config/pull-secret changes #352
OCPBUGS-18788: Remove metrics port from baremetal-operator #361
OCPBUGS-19203: Updating ose-cluster-baremetal-operator images to be consistent with ART #362
OCPBUGS-17589: Guard against nil PlatformStatus #359
Full changelog

cluster-bootstrap

OCPBUGS-24975: Updating ose-cluster-bootstrap-container image to be consistent with ART #103
OCPBUGS-24975: Updating ose-cluster-bootstrap-container image to be consistent with ART #102
OCPBUGS-19235: Updating ose-cluster-bootstrap images to be consistent with ART #100
Full changelog

cluster-capi-controllers

OCPBUGS-33170: All containers must fallback to logs on error #207
OCPBUGS-30480: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master #203
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master #199
OCPBUGS-30586: fix e2e tests on release branches #200
OCPCLOUD-2517: openshift: promote core CAPI IPAM CRDs to GA #197
OCPBUGS-29519: openshift: add CustomNoUpgrade annotation value to feature-set #196
OCPBUGS-29476: openshift: generate separate manifest for core CAPI CRDs #195
OCPBUGS-26111: add snyk file #194
OCPCLOUD-2449: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master #192
NO-JIRA: e2e: add openstack testing script #193
OCPBUGS-25586: Updating ose-cluster-api-container image to be consistent with ART #191
OCPBUGS-25000: Updating ose-cluster-api-container image to be consistent with ART #190
OCPCLOUD-2255: Update manifests-gen tool #189
OCPCLOUD-2257: Use manifests generation tool from provider repo #179
Update OWNERS #183
OCPBUGS-21645: Bump golang.org/x/net to v0.17.0 #182
OCPBUGS-17286, OCPCLOUD-2222: Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master #181
OCPBUGS-19109: Updating ose-cluster-api images to be consistent with ART #180
Full changelog

cluster-capi-operator

OCPBUGS-49603: fix: always update clusteroperator status versions when differing #253
OCPBUGS-37441: fix: sort CredentialsRequest manifests after namespace #190
OCPBUGS-37795: fix: align openstack e2e branch #192
OCPBUGS-33170: All containers must fallback to logs on error #172
OCPBUGS-28230: enforce termination message policy on all platform pods #171
OCPCLOUD-1609, OCPCLOUD-1610: Add Support for VSphere #149
NO-JIRA: CAPA: use v1beta2 #151
NO-JIRA: Fix manifests-gen tool + testing #168
OCPBUGS-29832, OCPCLOUD-2451: Bump CAPI 1.6 and k8s 1.28 #164
OCPBUGS-29676: create openshift-cluster-api namespace in CustomNoUpgrade #163
OCPCLOUD-2517: manifests-gen: promote Core CAPI IPAM CRDs to GA #162
OCPBUGS-29519: manifests-gen: also add CustomNoUpgrade annotation value #161
OCPBUGS-29476: manifests-gen: store core capi crds also in their own manifest #159
OCPBUGS-28539: Start operator controllers only on supported platforms, add unsupported controller #157
OCPBUGS-26121: Add Snyk file to exclude vendor directory on scan #156
OCPCLOUD-1726: GCP Credential Req. manifest for CAPI to use new API field #87
NO-JIRA: e2e: add openstack testing script #154
OCPBUGS-25778: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.16 #153
OCPBUGS-24979: Updating ose-cluster-capi-operator-container image to be consistent with ART #150
OCPVE-787: annotate credentials request manifests #143
OCPBUGS-24301: openstack: Don’t substitute manager container command #148
OCPCLOUD-2255, OCPCLOUD-2256: refactor: remove cluster-api-operator, rework assets/manifests #121
OCPCLOUD-2012: Add granular permissions for Azure #124
OCPBUGS-19842: Limit deletion webhook to openshift namespace #135
OCPBUGS-23467: manifests/0000_30_cluster-api_10_webhooks: Deletion manifest for validating-webhook-configuration #145
OCPBUGS-19841: Add format key into the worker-user-data secret #140
OCPCLOUD-2218: Bump CAPG to v1.5.0 #142
OCPBUGS-22403: Disable CAPI Azure Infrastructure Provider #141
Update OWNERS #133
OCPBUGS-17287, OCPBUGS-21642, OCPCLOUD-2214: Bump capi/capi providers/k8s 1.27 #132
OCPBUGS-19240: Updating ose-cluster-capi-operator images to be consistent with ART #129
MULTIARCH-3761: Power VS CAPI Remove deprecated flag #128
OCPBUGS-18504: e2e: set ControlPlaneEndpoint in AWSCluster #126
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
OCPBUGS-36317: PowerVS: Remove bind address #358
OCPBUGS-34826: Nutanix CCM pods Cipher Suites vulnerability issue #350
NO-JIRA: Ensure termination message policy in tests #344
OCPBUGS-33405: update azure and ash tolerations on node manager #342
OCPBUGS-13680: Pass –cluster-name to OpenStack CCM #337
OCPCLOUD-2515: remove CloudControllerOwner condition logic #335
Bug OCPBUGS-29605: Allow to patch events in OpenStack RBAC #336
OCPVE-660: add CloudController capability annotation #284
OCPCLOUD-2514: Remove reliance on feature gates for whether to deploy CCMs #334
OCPBUGS-29012: Increase Azure Concurrent Service Syncs to 10 #328
OCPBUGS-29220: Set AZURE_FEDERATED_TOKEN_FILE on CCM container #332
OCPBUGS-29012: Add EndpointSlices permissions for Azure #331
OCPBUGS-13106: Increase GCP Concurrent Service Syncs to 10 #329
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #330
NO-JIRA:Use expressive Gomega matchers with Eventually #327
OCPBUGS-24486: Enforce the use of shared health checks #326
OCPCLOUD-2424: Bump k8s packages to v1.29 #325
OCPBUGS-25887: IBMCloud: Patch CCM for 4.16 #323
OCPBUGS-26494: PowerVS: handle 4.16 changes #322
OCPBUGS-25483: Adds CloudConfigTransformer for Azure #316
OCPBUGS-24948: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART #308
OCPBUGS-25750: Add Snyk file to exclude vendor directory on scan #313
OCPBUGS-5825: Adds GCP ClusterRole and ClusterRoleBinding #310
OCPCLOUD-1724: GCP Credentials req. manifest of CCMO to use new API field #205
trt-1382: reorder flag initialization #309
trt-1382: test add space #307
OCPVE-788: annotate credentials request manifests #293
Undo TRT-1378: Revert for “OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS” #306
TRT-1378: Revert #304 “Undo TRT-1374: Revert for \“OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS\”” #305
Undo TRT-1374: Revert for “OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS” #304
OCPBUGS-24127: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART #302
TRT-1374: Revert #301 “OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS” #303
OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS #301
OCPBUGS-23996: trust bundle CA controller: add owner annotation for ccm-trusted-ca configmap #300
OCPBUGS-23308: Set IPFamilyPriority and ExcludeNetworkSubnetCIDR for vSphere IPv6-only #299
OSASINFRA-3289: OpenStack: Remove Kuryr bits #294
OSASINFRA-3284: Add Events to OpenStack’s RBAC #292
OCPBUGS-20213: Add azure cloud config transformer #291
Update OWNERS #290
OCPBUGS-17652: apply necessary RBAC for the alibaba cloud controller manager #276
OCPBUGS-18841: Additional permissions for internal load balancer on STS #287
OCPCLOUD-2188: Bump k8s packages to v1.28 #285
update readme to stable status #286
OCPBUGS-19205: Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART #278
OCPBUGS-18641: Set dual-stack IPFamilyPriority for vSphere #279
OCPBUGS-18841: Ensure subnets read permission for granular roles #281
OCPBUGS-14718: Add message for CABundleControllerDegradedCondition error #275
Full changelog

cluster-config-operator

SPLAT-1630: Bump API version to get new VSphereMultiVCenters featuregate. #418
AUTH-482: set required-scc for openshift workloads #410
OCPBUGS-24871: Updating ose-cluster-config-operator-container image to be consistent with ART #390
TRT-1581: default to self-managed clusterprofile #414
NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable #412
OCPBUGS-29576: Apply hypershift cluster-profile for ibm-cloud-managed #408
NO-JIRA: add check to ensure clusterprofile matches for featuregates #411
OCPBUGS-28621: Fix PSa labels #406
STOR-1700: Bump(openshift/api): to get new VolumeGroupSnapshot API #405
OCPBUGS-28621: Add required PSa labels #401
SPLAT-1400: promote vSphere control plane machinesets from tech preview #400
OCPBUGS-26541: remove duplicate manifests in image #399
Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541: remove duplicate manifests in image #392
OCPNODE-1671: Update api,client-go to add imagepolicy api #376
Revert “OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART” #388
OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART #385
read featuregates from openshift/api #349
yield CRDs and empty resource rendering to api imge #379
CNF-10479: Bump up api to pull mixed cpu allocation feature gate #386
NP-793: Bump github.com/openshift/api #375
create manifest directory during rendering #382
SPLAT-1272: Update for Nutanix failure domains api changes #378
create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480: Add MetricsServer FeatureGate #377
NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813: add MCN featuregate #368
SPLAT-1127: bring in vSphere CPMSO API updates #342
OCPBUGS-21781: Update openshift/api package to latest version #365
OCPBUGS-21744: bump library-go to include switch to HTTP/1.1 #366
CFE-887: Bump openshift/api to add DNSNameResolver. #364
Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. #358
OCPBUGS-20164: Remove Build CRD #360
Remove AdmissionWebhookMatchConditions feature gate #359
OCPVE-708: feat: bump(api) #357
OCPCLOUD-1989: Promote GCP CCM from TPNU to default #319
OCPBUGS-19106: Updating ose-cluster-config-operator images to be consistent with ART #353
CCO-412: Bump API to promote azureWorkloadIdentity to defaultFeatures #351
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
CFE-1087: API Bump for capacity Reservation #314
OCPBUGS-35476: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #307
OCPBUGS-34970: Add unreadyNodeGracePeriod for allowing brief node hiccups #298
OCPBUGS-35227: Improved debugging of API listing errors #300
OCPBUGS-32947: Modified webhook to reject changes to vsphere fields coming from failure domains. #291
AUTH-482: set required-scc for openshift workloads #282
Drop CRDs for CPMS #292
OCPBUGS-31808: Fix ExportFailureDomain to handle empty platform spec #287
OCPBUGS-32295: Modified webhook to allow templates by name instead of just by path. #288
SPLAT-1440: prevent rollout due to irrelevant path artifacts #275
OCPBUGS-26127: add snyk configuration file #277
SPLAT-1410: Fix vSphere machineprovider InjectFailureDomain to handle empty network device list. #281
SPLAT-1410: Modified vSphere config provider to not lose AddressesFromPools when applying Failure Domains #273
OCPBUGS-29249: Never delete a Machine when there’s a single Machine in an index #278
OCPBUGS-29114: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #276
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #274
SPLAT-1391: promote vSphere from tech preview #272
OCPCLOUD-2415: Update K8s deps to 1.29 #271
OCPBUGS-25577: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART #270
OCPCLOUD-1894: Implement admission warning for missing target pools #269
OCPBUGS-24967: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART #268
OCPBUGS-24140: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART #266
SPLAT-1280: update documentation for vSphere #267
SPLAT-1272: Add support for Nutanix failure domains #258
SPLAT-1129: adding failure domain awareness for vSphere #228
OCPCLOUD-2297: webhook/openstack: validate etcd block device size #264
Revert #239 “OCPCLOUD-2167: Test unhealthy node cases” #262
OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices #255
OCPCLOUD-2167: Test unhealthy node cases #239
OCPBUGS-17851: Reimplement “OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD” #234
SPLAT-1211: recognize topology and failure domains represented by the infrastructure resource #250
Update OWNERS #253
OCPBUGS-21863: webhooks: set min version TLS 1.2 #252
OCPBUGS-21641: Bump golang.org/x/net to v0.17.0 #251
OCPBUGS-17288, OCPCLOUD-2179: Update dependencies to k8s 1.28 #248
OCPBUGS-20070: e2e: gcp e2-custom increase memory #246
OCPBUGS-20070: fix: e2e: add gcp custom type to test framework #244
OCPCLOUD-2169: Check CPMS events are not present when we expect error #243
OCPCLOUD-2169: Add events for machine creation/deletion #242
OCPBUGS-19226: Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART #241
Full changelog

cluster-csi-snapshot-controller-operator

AUTH-482: set required-scc for openshift workloads #196
STOR-1817: Avoid deleting VolumeGroupSnapshot resources #200
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #193
STOR-1573: Update manifests to v7.0.0 #201
OCPBUGS-31497: create suitable role and roleBinding for csi-snapshot-webhook #202
STOR-1805: Set SecurityContext for HyperShift #197
OCPBUGS-30483: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #198
OCPBUGS-29577: Apply hypershift cluster-profile for ibm-cloud-managed #194
STOR-1700: Fix: typo of volumegroupsnapshots #195
STOR-1700: Pass VolumeGroupSnapshot argument if feature is enabled #191
STOR-1574: Bump all deps #192
STOR-1574: Bump library-go #190
STOR-1714: Release leadership on SIGTERM #187
HOSTEDCP-1308: Revert “HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook” #188
HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook #182
OCPBUGS-25558: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #183
STOR-1688: Chore: add .snyk file to ignore false positives #181
OCPBUGS-25149: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #179
OCPBUGS-23838: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #177
OCPBUGS-24908: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #178
OCPBUGS-24099: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #176
STOR-1402: Chore: update libraries in all operators [4.15] #175
OCPBUGS-22569: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #173
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #172
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #166
STOR-1443: Restart webhook Pods if csi-snapshot-webhook-secret changed #157
OCPBUGS-19162: Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #160
OCPBUGS-3680: Move readonlyRootFilesystem to the right place #159
Full changelog

cluster-dns-operator

OCPBUGS-52498: [release-4.16] Add runbook_url for CoreDNSErrorsHigh #431
OCPBUGS-37078: Bump version of DNSNameResolver controller #419
CFE-964: Add DNSNameResolver controller #394
OCPBUGS-32941: Bump to Kubernetes 1.29 and controller-runtime 0.17.3 #408
OCPBUGS-27924: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 #402
CFE-852: Enable ocp_dnsnameresolver CoreDNS plugin #393
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #403
OCPBUGS-24884: Updating ose-cluster-dns-operator-container image to be consistent with ART #397
OCPBUGS-24602: Enable topology-aware hints iff nodes in >=2 zones #398
OCPBUGS-23741: Bump to k8s.io v0.28.3, controller-runtime v0.16.3 #395
OCPBUGS-20024: Ignore max unavailable for status #386
OCPBUGS-22018: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #387
OCPBUGS-20024: Revert “Revert “Set DNS DaemonSet’s maxSurge value to 10%”” #384
OCPBUGS-19510: test/e2e: Set controller-runtime logger #381
OCPBUGS-19126: Updating ose-cluster-dns-operator images to be consistent with ART #380
Full changelog

cluster-etcd-operator

OCPBUGS-53510: fix CVE-2025-30204 #1403
OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
OCPBUGS-37820: ensure ordering in member health checks #1311
OCPBUGS-36489: parallelize member health checks #1290
OCPBUGS-35500: Update etcd-tls-assets.md #1276
ETCD-621: Update api vendor libraries to get GA’ed tuning profiles #1265
OCPBUGS-33495: return errors in wait-for-ceo #1260
OCPBUGS-31849: check the quorum in case the cluster is healthy or not after generating certs #1239
NO-JIRA: remove cluster-backup pod #1182
OCPBUGS-31956: update golang x net #1252
OCPBUGS-31249: remove etcd-health-probe log #1230
ETCD-583: add signer expiration metric and alert #1249
API-1800: manifests: convert SecretTypeTLS secrets to kubernetes.io/tls #1247
NO-ISSUE: use IsBootstrapComplete from library-go #1244
OCPBUGS-32217: avoid race conditions during render cert creation #1246
OCPBUGS-32176: immediately return on dynamic certs errors #1245
Revert “ETCD-579: store revision at which signers are rotated” #1243
ETCD-579: store revision at which signers are rotated #1235
ETCD-580: Decrease validity period to prevent cert expiry for offline clusters #1238
OCPBUGS-31658: Fix feature set custom no upgrade #1233
NO-JIRA: fail certsignercontroller sync when secret can not be applied #1226
ETCD-535: Manual CA rotation should rotate all leaf certs #1200
Revert “OCPBUGS-30169: add timeout to etcd client.New config” #1222
OCPBUGS-30873: CEO aliveness check should only detect deadlocks #1223
WRKLDS-1071: bump(library-go)=master #1219
ETCD-518: garbage collect unused dynamic certs #1209
OCPBUGS-30169: add timeout to etcd client.New config #1215
NO-JIRA: replace nodelister with master nodelister #1205
ETCD-517: run certsignercontroller for bootstrap render #1186
ETCD-516: CEO needs to react on changing CA cert bundle and client certs #1202
NO-JIRA: increase client pool size #1203
OCPBUGS-29417: Sno fix bootstrap race #1201
OCPBUGS-27926: Updating cluster-etcd-operator-container image to be c… #1189
Revert “Revert “OCPBUGS-22969: Use v1 for flowcontrol API”” #1199
ETCD-512: refactoring the cert signer controller #1194
AUTH-481: Add PSa labels to openshift-etcd-operator namespace #1198
Revert “OCPBUGS-22969: Use v1 for flowcontrol API” #1197
TRT-1485: Revert #1177 “ETCD-512: refactoring the cert signer controller” #1193
ETCD-512: refactoring the cert signer controller #1177
OCPBUGS-27959: fix panic in health check timeouts #1190
OCPBUGS-22969: Use v1 for flowcontrol API #1149
OCPBUGS-21846: update library-go to latest commit #1180
OCPBUGS-24889: Updating cluster-etcd-operator-container image to be consistent with ART #1175
NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy #1171
add ownership for etcd-ca-bundle that I don’t think is updated #1159
MON-3287: manage RBAC resources for prometheus to scrape openshift-etcd #1164
Revert “OCPBUGS-17199: remove revision stability check from bootstrap complet…” #1167
OCPBUGS-23461: Add annotation in the etcd-guard static pod for worklo… #1161
OCPBUGS-21922: fixing CVE-2023-39325 by updating dependencies #1141
OCPBUGS-17199: remove revision stability check from bootstrap complet… #1087
ETCD-478: Use golang etcd client for auto backups #1099
OCPBUGS-19987: relax readiness to local serializable requests #1134
OCPBUGS-19052: prioritize podman pull in etcdctl dl #1132
OCPBUGS-18984: remove UpgradeBackupController #1129
ETCD-187: add dashboards CPU iotwait on master nodes #1119
OCPBUGS-19528: introduce backup removal controller #1126
OCPBUGS-19137: Updating cluster-etcd-operator images to be consistent with ART #1115
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #1123
OCPBUGS-19052: Avoid caching etcdctl on cluster-backup.sh #1113
indicate ownership of etcd certificates #1110
OCPBUGS-18990: restore the correct static pod list #1111
OCPBUGS-18357: prepend authfile to podman create #1105
Full changelog

cluster-image-registry-operator

OCPBUGS-51167: ensure that storage names don’t end in dashes #1181
OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
OCPBUGS-39098: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1104
OCPBUGS-38894: pkg/resource/azurepathfixjob: invoke update-ca-trust extract with –output #1102
OCPBUGS-38894: pkg/resource: invoke update-ca-trust extract with –output #1098
OCPBUGS-36037: go.*,vendor: bump go-retryablehttp #1064 #1064
OCPBUGS-34779: add SAR capability to image-registry #1054
OCPBUGS-34165: azure-path-fix: get client secret from k8s secret #1041
OCPBUGS-34166: pkg/storage/s3: use force path style in favour of virtual hosted style config #1042
OCPBUGS-34069: Bump openshift api, client-go & library-go #1039
OCPBUGS-33172: azurepathfix: check if platform status is nil before accessing it #1030
OCPBUGS-32491: Power VS: Add support for Power VS endpoint overrides #1024
OCPBUGS-29559: Apply hypershift cluster-profile for ibm-cloud-managed #999
OCPBUGS-32328: azure-path-fix: support auth via account key (without clientID) #1021
OCPBUGS-30484: bump indirect google protobuf dependency #1015
NO-JIRA: remove bparees from owners #1019
OCPBUGS-29233: bump aws-sdk-go from v1.44 to v1.50 #1012
AUTH-482: set required-scc for openshift workloads #1008
NO-JIRA: bump golangci-lint to v1.56.2 #1013
OCPBUGS-29932: cmd/move-blobs: log and exit 1 on error instead of panic #1006
OCPBUGS-29637: azurepathfix: fix stack hub, government and workload identity setup #1003
OCPBUGS-29003: move azure storage blobs from docker back into /docker #998
NO-JIRA: Add hack/local-dev.sh #996
OCPBUGS-28225: pkg/storage/s3: enable bucket key on encryption settings #993
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #992
NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 #989
OCPBUGS-26767: MULTIARCH-4074: PowerVS: update supported regions #987
IR-409: build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 #974
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #979
IR-410: build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 #980
OCPBUGS-11624: manifests/02-rbac.yaml: stop using wild cards #964
OCPBUGS-24649: add private endpoint permissions to Azure credentials request #971
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #975
IR-412: IBMCloud: Add support for endpoint overrides #955
CCO-248: Revert “Merge pull request #965 from jstuever/TRT-1368” #967
OCPVE-790: annotate credentials request manifests #959
OCPBUGS-24161: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #966
TRT-1368: Revert “Merge pull request #935 from flavianmissi/CCO-248” #965
IR-366, IR-367, IR-411: allow users to configure private storage accounts in Azure #930
IR-408: request individual permissions for gcs #935
OCPBUGS-2889: accept user/pass OR application credentials on Swift UPI secret #924
IR-406, OCPBUGS-21853: bump k8s and openshift packages #936
OCPBUGS-21853: disable http2 for metrics endpoint #938
OCPBUGS-18969: move pruner role creation from openshift-apiserver #925
OCPBUGS-19262: Updating ose-cluster-image-registry-operator images to be consistent with ART #918
OCPBUGS-18469: increase storage account key cache expiration #912
OCPBUGS-17060: use Recreate on operator deployment #908
OCPBUGS-18103: check if response is nil before using it #909
Full changelog

cluster-ingress-operator

OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
OCPBUGS-32887: Delete and recreate canary route to clear spec.host #1099
OCPBUGS-36184: Add e2e test for connect timeout #1094
OCPBUGS-35883: Add Regexp Anchor to TestAll #1093
OCPBUGS-34835: internalServiceChanged: Fix target port logic #1072
OCPBUGS-34837: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1074
OCPBUGS-32887: Allow operator to update Route spec.subdomain #1047
OCPBUGS-32942: Bump controller-runtime to v0.17.3 #1050
OCPBUGS-28673: implement connect timeout tuning option #1035
NE-1317: manifests - add ingress capability annotation #950
OCPBUGS-32371: Bump openshift/api, and update CRD generation #1045
OCPBUGS-25193: Add vnet subnet read and join permission for azure #1029
OCPBUGS-30834: Update to go 1.21 #1040
OCPBUGS-31722: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037
OCPBUGS-3522: Include recent errors in canary checks fail #865
OCPBUGS-30091: TestHostNetworkPortBinding: Delete t.Parallel() #1032
CFE-987: Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017
CORS-2317: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016
OCPBUGS-28596: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1019
NE-1490: update to go v1.20 #1012
OCPBUGS-15253: Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980
CCO-249: Replace GCP role with explicit permissions #844
OCPBUGS-25006: Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006
OCPBUGS-24531: Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011
OCPBUGS-24531: Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008
OCPBUGS-24531: Skip CI for scope change until OCPBUGS-24044 is resolved #1007
OCPVE-780: annotate credentials request manifests #995
OCPBUGS-23742: Bump controller-runtime to v0.16.3 #1001
NE-1402: Add service endpoint override capability to IBM DNS provider #990
OCPBUGS-16762: Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982
OCPBUGS-14994: Don’t add clientca-configmap finalizer if deleting #948
OCPBUGS-22020: Bump golang.org/x/net for CVE-2023-44487 #985
OCPBUGS-21803: test/e2e: Add test case for 2000000 maxConnections #983
OCPBUGS-20192: Require non-readonly filesystem in router container #981
OCPBUGS-16762: Bump openshift/api for container.maxLength fix #979
OCPBUGS-3541: Don’t create route metrics for ingress controllers that are not admitted #869
OCPBUGS-18248: Prevent GatewayClass from getting recreated #975
OCPBUGS-19268: Updating ose-cluster-ingress-operator images to be consistent with ART #977
OCPBUGS-15900: TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973
OCPBUGS-3356: E2E test for cookie length truncation #871
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50575: Increase waitForFallbackDegradedConditionTimeout #1805
OCPBUGS-37563: add disabled syncer as reason to CFE for PSA #1714
OCPBUGS-35303: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1701
OCPBUGS-35831: add SNO control plane high cpu usage alert #1705
OCPBUGS-25104: revert dev cert rotation 4.16 #1695
OCPBUGS-34408: Create one-shot migrations for the flowcontrol group. #1690
OCPBUGS-33522: add a controller that reconciles SCCs’ volumes #1675
NO-ISSUE: Revert “add SNO control plane high cpu usage alert” #1674
OCPBUGS-33184: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1671
OCPEDGE-902: add SNO control plane high cpu usage alert #1660
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #1664
OCPBUGS-22969: Use v1 for flowcontrol API #1577
OCPBUGS-31384: use RotatedSigningCASecret controller in update only mode #1659
NO-ISSUE: Revert “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates #1661
NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry #1652
OCPBUGS-30119: certrotation: Bump library-go to latest master #1651
OCPCLOUD-2514: External CCM should no longer rely on feature gate access #1649
OCPBUGS-25894: operator: stop removing kube-apiserver-slos asset #1642
NO-JIRA: extend node-system-admin-client validity to 2 years #1618
OBSDA-553: add provider name to cluster_infrastructure_provider when external platform #1638
AUTH-481: Add PSa labels to openshift-kube-apiserver-operator namespace #1637
OCPBUGS-27842: Add sno section to alert description #1633
NO-JIRA: Add Vu and Vadim to OWNERS #1634
OCPBUGS-24005: when skipping a webhook check because of missing CA log the name of the webhook #1632
NO-JIRA: Add ownership for the admin kubeconfig #1584
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #1546
NO-ISSUE: prevent update status conflicts #1621
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #1619
OCPBUGS-14496: manifests: fix the scope of the TechPreviewNoUpgrade alert #1512
OCPBUGS-24907: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART #1606
OCPNODE-1892: Rebase 1.29.0 #1608
OCPBUGS-24005: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1587
TRT-1420: revert #1586 #1596 #1607
OCPNODE-1890: Bump k8s api to v0.29.0 #1586
OCPNODE-1892: Set flag to skip setting cloud-provider=external #1596
OCPBUGS-24701: ignore vendor folder in SAST scan #1599
AUTH-442: psa cluster fleet evaluation #1588
OCPBUGS-24213: Annotate managed certs #1568
OCPBUGS-23796: use AlwaysAllow UnhealthyPodEvictionPolicy option #1579
OCPBUGS-21836: use external load balancer url for jwks-uri #1578
manifests: set owning component for TLS artifacts #1583
OCPBUGS-19160: Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1550
OCPBUGS-20331: manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules #1566
OCPBUGS-20331: manifests: rename API performance dashboard #1565
OCPBUGS-21729: bump library-go to include switch to HTTP/1.1 #1567
Update required GV for ValidatingAdmissionPolicy gate. #1561
Update “deprecated API in use” alert expressions for 1.28. #1562
bump(openshift/client-go,library-go) #1560
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #1557
OCPBUGS-19024: remove featuregate upgradeable controller that moved to cluster-config-operator #1547
OCPBUGS-18247: manifests: don’t include recording rules when Console capability is not enabled #1542
OCPBUGS-15504: manifest: remove kube-apiserver PrometheusRule #1543
Bump openshift/* libs #1549
Update to Kubernetes 1.28.2 #1548
STOR-1425: Update to Kubernetes 1.28.1 #1534
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-28592: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.16 #37
OCPBUGS-26140: Fix formatting in snyk vendor exclusions #36
OCPBUGS-25634: Add Snyk file to exclude vendor directory on scan #33
OCPBUGS-24887: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART #32
Update OWNERS #26
OCPBUGS-17289, OCPBUGS-21650, OCPCLOUD-2215: Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main #25
OCPBUGS-19135: Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #24
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-33933: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #808
API-1800: bindata: convert SecretTypeTLS secrets #804
WRKLDS-1169: tolerate node-role.kubernetes.io/control-plane:NoExecute #802
OCPBUGS-31384: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #800
WRKLDS-1071: revision_controller: do not create a new revision when a required object is missing #796
OCPCLOUD-2515: remove CloudControllerOwner condition #795
OCPBUGS-30488: bump(google.golang.org/protobuf)=v1.33.0 #798
OCPCLOUD-2514: Remove reliance on Cloud Provider feature gates for determining if CCM should be deployed. #794
OCPBUGS-29565: Apply hypershift cluster-profile for ibm-cloud-managed #793
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #786
OCPBUGS-26117: Add .snyk file to exclude vendor and ignore unit tests #784
OCPBUGS-25587: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #780
NO-JIRA: Make render unit pass consistently #782
TRT-1420: Bump openshift/library-go to pick up revision_controller revert #781
OCPNODE-1890: Bump k8s api to v0.29.0 #770
OCPBUGS-5825: Removes legacy cloud-provider resources #778
OCPBUGS-25001: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #777
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #757
OCPBUGS-25001: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #775
OCPBUGS-24162: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #772
OCPBUGS-24215: Annotate rotated certificates #769
OCPBUGS-23462: bump(library-go) #771
bump(k8s) #763
OCPBUGS-21722: bump(openshift/api|client-go|library-go) to pick up http2 disablement #762
OCPBUGS-21722: Bump deps to address CVE-2023-44487 #755
bump(openshift/client-go,library-go) #753
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #750
OCPBUGS-19263: Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #747
Bump openshift/* libs #746
Update to Kubernetes 1.28.2 #744
STOR-1425: Update to Kubernetes 1.28.1 #742
Full changelog

cluster-kube-scheduler-operator

WRKLDS-1168: tolerate node-role.kubernetes.io/control-plane:NoExecute #539
OCPBUGS-30489: bump(google.golang.org/protobuf)=v1.33.0 #538
WRKLDS-1071: bump(library-go)=release-4.16 #536
OCPBUGS-29566: Apply hypershift cluster-profile for ibm-cloud-managed #535
OCPBUGS-23900: README: fix dynamicResourceAllocation field name #534
OCPBUGS-23900: Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate #532
AUTH-481: add PSa labels to openshift-kube-scheduler-operator namespace #533
NO-JIRA: readme: describe mapping between logLevel and log level #531
NO-JIRA: README: add notes about dumping KS’s node cache #530
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #526
OCPBUGS-23631: Add .snyk file to exclude vendor and ignore unit tests #524
OCPBUGS-24915: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #522
TRT-1420: Bump openshift/library-go to pick up revision_controller revert #521
OCPNODE-1890: Bump k8s api to v0.29.0 #510
OCPBUGS-24915: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #519
OCPBUGS-24915: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #517
OCPBUGS-24106: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #513
OCPBUGS-24218: Annotate serviceaccount-ca with ownership information #511
OCPBUGS-23463: bump(library-go) #512
NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof #507
OCPNODE-1886: Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 #508
OCPBUGS-21734: Bump openshift/library-go to disable http/2 by default #503
OCPBUGS-21734: Bump deps to address CVE-2023-44487 #500
bump(openshift/client-go,library-go) #498
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #496
OCPBUGS-19175: Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #493
Bump openshift/* libs #492
Update to Kubernetes 1.28.2 #491
STOR-1425: Update to Kubernetes 1.28.1 #490
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-38269: bump protobuf #115
AUTH-482: set required-scc for openshift workloads #107
OCPBUGS-29567: Apply hypershift cluster-profile for ibm-cloud-managed #106
OCPBUGS-27930: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103
OCPBUGS-24989: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101
OCPBUGS-21738: bump library-go to include switch to HTTP/1.1 #95
OCPBUGS-19253: Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94
Full changelog

cluster-machine-approver

OCPBUGS-48258: Fix race condition in CO status controller test #267
OCPBUGS-47704: Filter CSRs by signerName #263
OCPBUGS-45974: Ensure trailing dots on DNS names do not block serving cert auth #257
OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
OCPBUGS-34161: check for machine crd before listing machines #233
OCPBUGS-29568: Apply hypershift cluster-profile for ibm-cloud-managed #229
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #227
OCPBUGS-26116: Add Snyk file to exclude vendor directory on scan #225
OCPCLOUD-2417: Update to kube 1.29 and controller-runtime 0.17.0 #224
OCPBUGS-23544: Increase concurrent reconciles to 10 #222
OCPBUGS-25582: Updating ose-cluster-machine-approver-container image to be consistent with ART #223
OCPBUGS-24985: Updating ose-cluster-machine-approver-container image to be consistent with ART #218
OCPBUGS-24154: Updating ose-cluster-machine-approver-container image to be consistent with ART #217
OCPCLOUD-2277: Ensure Cluster Machine Approver metrics are only available via HTTPS #211
OCPBUGS-21594: Filter non node CSRs in metrics #208
OCPBUGS-21793: Bump x/net package to v0.17.0 #204
Update OWNERS #205
OCPBUGS-19250: Updating ose-cluster-machine-approver images to be consistent with ART #201
OCPCLOUD-2181: Update K8s dependencies to 1.28 #203
OCPBUGS-17090: Set logger for controller runtime #200
Full changelog

cluster-monitoring-operator

OCPBUGS-46066: Add new metrics for OpenShift logging telemetry #2537
OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
OCPBUGS-39170: Backport #2441 for 4.16 #2447
OCPBUGS-36907: Add deprecated config runbook #2411
OCPBUGS-36717: Exclude windows nodes from kubelet servicemonitor #2408
OCPBUGS-36482: add runbook_url annotations #2404
OCPBUGS-36206: Add deprecation for prometheus adapter #2396
OCPBUGS-34530: inject trusted CA bundle into UWM Alertmanager #2373
OCPBUGS-35904: opt-out of multi-cluster Prometheus dashboard #2391
OCPBUGS-34383: remove deprecated logtostderr argument #2370
OCPBUGS-35884: attach runbook to the PrometheusDuplicateTimestamps alert #2389
MON-3795, OCPBUGS-35061: Backport anp telemetry #2379
OCPBUGS-34806: send cnv_abnormal metric via telemetry #2364
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
OCPBUGS-32510: change metrics-server probes for SNO #2337
MON-3851: Bump openshift/thanos to v0.35.0 #2338
MON-3847: Bump openshift/node_exporter to v1.8.0 #2336
OCPBUGS-32510: tweak Prometheus RBAC setup as a temp fix. #2334
AUTH-482: set required-scc for openshift workloads #2335
MON-3163: support VPAs #2078
OCPBUGS-23801: update OTEL google.golang.org/grpc/otelgrpc #2321
NO-JIRA: Increase checkAlertmanagerAPIVerbs timeout #2330
MON-3487: base CP enablement on dedicated feature gate #2153
OCPBUGS-32177: fix wrong dir hack/tools of tools.go #2327
MON-3707: Add ipsec state metric into telemetry #2326
MON-3701: clean-up injection of trusted CA bundle for k8s Prometheus #2323
MON-3839: test: add skip tests for prometheus adapter tests #2328
MON-3820: allow read-only access for Alertmanager API #2319
MON-3701: remove trusted CA bundle from Thanos Querier #2325
MON-3701: follow-up of PR #2308 #2324
MON-3825: Synchronize versions of the downstream components #2322
OCPBUGS-30430: update google.golang.org/protobuf #2320
MON-3701: clean-up injection of trusted CA bundle for main Alertmanager #2310
MON-3783: add controller-id annotation to pods deployments and operator #2309
OCPBUGS-18643: address lint warnings #2284
WINC-1180: assets, jsonnet: Add container_network openshift-kubernetes.rules #2314
OCPBUGS-31847: Synchronize versions of the downstream components #2318
MON-3701: remove references to OAuth proxy #2308
MON-3706: chore: simplify GetServiceAccountToken() #2272
MON-3621: Enable extra-scrape-metrics feature in PrometheusUWM #2302
OCPBUGS-31411: add runbook link for KubeAggregatedAPIErrors alert #2316
OCPBUGS-29531: Add include.release.openshift.io/hypershift label #2264
MON-3778, OLS-117: Add OLS metrics to telemetry whitelist #2300
OCPBUGS-31920: go.mod: bump openshift/api #2290
MON-3700: replace OAuth proxy for Thanos Ruler #2294
MON-3799: Synchronize versions of the downstream components #2301
MON-3749: enable request headers flags for metrics server #2293
OCPBUGS-28650: fix generation of telemeter token hash #2298
MON-3801: remove oauth-redirectreference annotations #2299
MON-3793: Synchronize versions of the downstream components #2295
MON-3793: jsonnet: Bump jsonnet deps for prometheus-operator #2296
MON-3792: fix metrics-server path for /test versions #2286
MON-3789: add a golangci-lint-fix makefile target to fix golangci-lint errros when possible #2275
MON-3771: update Prometheus operator to v0.72.0 #2288
MON-3498: Modify prometheus-adapter e2e tests to compact with metrics server #2196
OCPBUGS-30257: Making sure proxy settings are correctly forwarded in the generated remote write configs #2269
OCPNODE-2100: jsonnet: update crio port to TLS port 9637 #2257
MON-3694: chore: encourage the use of the new ‘slices’ package instead of ‘golang.org/x/exp/slices’ #2243
MON-3748: Enable audit logs by default for metrics-server #2280
MON-3380: adjust prometheus-k8s service openshift.io/description #2279
MON-3747: Increase e2e test timeout to 150 min #2278
MON-3381: replace OAuth proxy for Alertmanager #2260
OCPBUGS-28246: fix Thanos ruler alert generator url #2267
MON-3706: Revert “chore: poll immediately in the e2e tests” #2271
MON-3717: pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. #2226
MON-3717: update library-go to get https://github.com/openshift/libra… #2266
MON-3380: re-add kube-rbac-proxy for /metrics and /federate #2261
MON-3172: describe monitoring services #2188
MON-3706: chore: poll immediately in the e2e tests #2258
MON-3380: replace OAuth proxy for prometheus-k8s #2246
OCPBUGS-18326: add Console cap annotation to dashboards #2254
TRT-1489: Revert “jsonnet: update crio port to TLS port 9637” #2255
OCPNODE-2022: jsonnet: update crio port to TLS port 9637 #2229
MON-3705: [bot] Update jsonnet dependencies #2208
MON-3699: chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc #2247
MON-3697: use maximumStartupDurationSeconds instead of container patch #2251
OCPBUGS-28246: fix: set externalURL in UWM Prometheus #2250
MON-3689: Synchronize versions of the downstream components #2245
OCPBUGS-27289: followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 #2244
STOR-1289: Move vSphere prometheus rules to cluster-storage-operator #2235
OCPBUGS-27289: rollout metrics-server on cert rotations #2242
OCPBUGS-27213: Adjust lastError injection to wait.PollUntilContextTimeout’s final error #2234
MON-3676: move raptorsun out of reviewer list #2240
MON-3673: [bot] Synchronize versions of the downstream components #2238
MON-2853: add runbook link to TargetDown alert #2237
MON-3661: [bot] Synchronize versions of the downstream components #2236
OCPBUGS-26983: rollout monitoring plugin on TLS rotation #2233
MON-3661: chore: update Prometheus operator to v0.71.0 #2230
MON-3667: remove outdated documentation #2232
OCPBUGS-25849: make PrometheusAdapter and MetricsServer tasks less conflict prone #2218
OCPBUGS-25378: drop InfoInhibitor from default Alertmanager config #2225
MON-3664: chore: avoid issues with std.set* functions #2231
MON-3654: use Go standard errors package instead of github.com/pkg/errors #2224
MON-1047: fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… #2228
MON-3552: remove temporary cleanup code and no longer needed tests #2210
MON-3650: Synchronize versions of the downstream components #2222
MON-3649: Synchronize versions of the downstream components #2221
MON-3644: Ease the tracking of monitoring components versions. #2220
OCPBUGS-25803: make CMO ConsolePluginComponents task resilient to dependencies #2193
OCPBUGS-25676: fix(tasks): adjust ‘trusted CA bundle ConfigMap’ related logs for alertmanagers. #2219
MON-3633: Synchronize versions of the downstream components #2214
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2211
OCPBUGS-25403: go.mod update k8s.io/api* to v0.29.0 #2205
MON-3589: Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for –scrape.timestamp-tolerance on Platform Prometheus #2194
OCPBUGS-24977: use 1.20 in go.mod #2199
MON-3592: Use strict yaml unmarshaling #2195
OCPBUGS-25025: go.mod: bump prometheus-operator to v0.70.0 #2191
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2190
OCPBUGS-24630: additionalArgs: list items must have named fields #2189
MON-3553: Set scrape.timestamp tolerance #2187
OCPBUGS-23516: prevent plugin entry assets from caching #2186
OCPBUGS-21610: Detect ipv4/ipv6 socket in pod ip for nginx conf #2173
MON-3134: allow to query alerts from thanos-querier tenancy port #2184
MON-3551: fix: simplify jq script avoids error with jq1.7 #2180
MON-3454: Add track timestamps staleness #2160
OCPBUGS-24212: Add ownership annotation for certificates #2158
MON-3379: Replace the oauth-proxy before thanos-querier with kube-rbac-proxy #2136
MON-3544: Adjust NodeClock* alerting rules to work with PTP operator #2182
OCPBUGS-23745: Wait for 3 (instead of 2) consecutive failing reconcil… #2179
MON-3548: [bot] Synchronize versions of the downstream components #2183
MON-3543: Update API docs for Metrics Server #2181
OCPBUGS-24323: synchronize versions of the downstream components #2174
OCPBUGS-24340: patch securityContext for Thanos querier #2178
OCPBUGS-24323: update prometheus-operator jsonnet to v0.70.0 #2177
MON-3287: Remove openshift-etcd related RBAC as they will be manager by #2165
OCPBUGS-21610: revert #2166 #2172
MON-3524: Update metrics-server in CHANGELOG and README #2169
MON-3533: Update cluster:kube_persistentvolume_plugin_type_counts:sum #2171
STOR-1277: Add SELinux metrics to telemetry #2155
MON-3500: Enable sending exemplars over RW in UWM #2161
OCPBUGS-21610: Change config to allow ipv6/4 #2166
MON-3511: hack/local-cmo.sh: pass desired version in cmo run command #2168
MON-3211: Implement switching to metrics-server #2022
MON-3505: move aggregated-metrics-reader role to cmo jsonnet #2163
MON-3503: Synchronize versions of the downstream components #2162
OCPBUGS-23495: Change UWM Prometheus’ kube-rbac-proxy-thanos port num… #2164
MON-3479: update Prometheus operator assets to v0.69.1 #2152
MON-3503: Synchronize versions of the downstream components #2150
MON-3421: improve the detection of CMO unavailability/degradation due to U… #2129
MON-3476: Add code block to check FeatureGate status #2151
OCPBUGS-17035: fix KRP permissions for Thanos Querier #2057
OCPBUGS-22742: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2138
OCPBUGS-21621: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2145
MON-3398: Add RHACM telemetry metric #2100
Synchronize versions of the downstream components #2135
Fix UWM alert access permissions #2131
Synchronize versions of the downstream components #2133
OCPBUGS-4069: Prometheus Adatper takes metrics from kubelet job only. #2117
MON-3422: Remove temporary no more needed code #2132
fix: force HTTP/1.1 connections #2128
OCPVE-711: feat: add olm capability annotation #2105
OCPBUGS-21631: upgrade golang.org/x/net to v0.17.0 #2120
OCPBUGS-18326: revert previous fix to avoid activating console capability during update #2118
MON-3286: Remove no longer needed code. #2116
OCPBUGS-17850: replace nonResourceURLs permissions by subresource #2099
Synchronize versions of the downstream components #2115
Update jsonnet dependencies #2076
OWNERS: remove sthaha #2114
build: add -e to go list command to install tools #2112
Change kube-rbac-proxy-thanos port #2113
OCPBUGS-11344: alertmanager: use alertmanager CRD’s automountServiceAccountToken option #2111
Remove deprecated ioutil #2108
OCPBUGS-18326: add console capability annotation to dashboards and monitoring-plugin. #2101
MON-3302: add RHACS telemetry metrics #2062
add machine424 and rexagod to OWNERS #2083
Remove bparees from approvers #2104
Revert “feat: add olm capability annotation” #2103
MON-3270: Add kube-metrics-server to image-references #2102
OCPVE-711: feat: add olm capability annotation #2095
chore: fix imports order #2098
Set Thanos version in the Thanos Ruler spec #2094
OCPBUGS-19237: Updating cluster-monitoring-operator images to be consistent with ART #2084
Synchronize versions of the downstream components #2093
Synchronize versions of the downstream components #2089
MON-3383: Remove weak cryptograhic primitive usage #2086
OCPBUGS-18390: jsonnet/rules: exclude -1 from etcd objects count #2081
OCPBUGS-19059: Enable ipv6 on monitoring-plugin nginx #2090
MON-3376: Remove deprecated –logtostderr argument #2077
OCPBUGS-19356: Topology spread constraints admission webhook #2073
OCPBUGS-17682: add topologySpreadConstraints to UWM prometheus operator #2072
Synchronize versions of the downstream components #2082
MON-2642: Improve e2e tests for alertrelabelconfigs CRD #2080
Full changelog

cluster-network-operator

OCPBUGS-53317: Fix feature migration for EgressIP #2673
OCPBUGS-52952: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2663
[Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty #2651
OCPBUGS-51074: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2650
OCPBUGS-43803: Start feature migration when the cluster CNI is changed to the target type #2552
OCPBUGS-43715: Skip including default crypto policies to avoid authby issue #2598
OCPBUGS-44338: Prevent live migration process from flapping between step-2 and step-3 #2565
OCPBUGS-46148: Remove ip xfrm state when IPsec is disabled #2595
OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
OCPBUGS-35407: Use applyconfigurations for updating network.oprerator status #2413
OCPBUGS-37362: Fix IC distributed control plane alerts #2445
OCPBUGS-35836: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2417
OCPBUGS-35829: Create the configmap mtu if not found #2416
OCPBUGS-35923: update whereabouts crd #2419
OCPBUGS-34736: Limit iptables-alerter’s cpu #2407
OCPBUGS-34736: Handle pod exiting race conditions in iptables-alerter #2394
MON-3795, OCPBUGS-35061: Add ANP metric rule expressions for telemetry exposure #2398
OCPBUGS-34612, OCPBUGS-34660, OCPBUGS-34663: Live migration backports #2392
OCPBUGS-34964: Fix DNSResolver feature gate enablement #2402
OCPBUGS-34770: Ensure that the node-identity webhook address contains colons for IPv6 #2395
OCPBUGS-34214: Add conditions for ignored-namespaces #2378
OCPBUGS-34013: Add custom masquerade subnet against right key at ovnkube-config CM #2374
CFE-888: Enable DNSNameResolver feature-gate #2131
OCPBUGS-32979: Update network operator status for IPsec #2360
USHIFT-2912: Add ref to MicroShift’s Multus and CNI Plugins #2365
OCPBUGS-29403: add more safe sysctls #2273
OCPBUGS-32525: Check every MachineConfigPool for IPsec plugin existence #2349
OCPBUGS-28230: enforce termination message policy on all platform pods #2364
OCPBUGS-33080: Update EQoS CRD to latest #2362
SDN-4726: Reapply “Merge pull request #2330 from pperiyasamy/block-sdn-upgrade” #2361
OCPBUGS-28230: enforce termination message policy on all platform pods #2354
Revert #2330 “SDN-4726: Block upgrade for openshift-sdn” #2356
SDN-4434: Network diagnostics scheduling #2339
SDN-4726: Block upgrade for openshift-sdn #2330
SDN-4114: Add iptables-alerter daemonset #2329
OCPBUGS-31528: infraconfig: handle vSphere UPI by not updating any fields #2327
SDN-4163: Improved prometheus rule for ipsec metric #2346
OCPBUGS-32402: Fix wait logic for IPsec certificate signing request #2342
SDN-4688: ANP: Add RBAC for cluster-manager #2338
OCPBUGS-32347: Improve IPsec MachineConfig readiness check #2341
SDN-4163: Add ipsec state to telemetry #2270
OCPBUGS-22969: Use v1 for flowcontrol API #2095
OCPBUGS-28230: enforce termination message policy on all platform pods #2340
SDN-4519: Configure CNO as per new API changes for join and transit switch subnet #2318
OCPBUGS-28230: enforce termination message policy on all platform pods #2334
NP-956: Remove managed cluster checking for live migration #2321
OCPBUGS-26408: automountServiceAccountToken:false hosted CP pods #2306
SDN-4596: Update (B)ANP CRDs; prepare for GA #2328
SDN-4500: Add write permission for EgressQoS status #2319
SDN-4607: Allow HyperShift ability to set ConfigMap through env var #2309
OCPBUGS-22995: Tighten the permissions on whereabouts.conf #2106
OCPBUGS-24690: Fully disable network-node-identity on ROKS #2313
SDN-4598: Set runAsUser to env variable if it is set #2307
OCPBUGS-30103: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2288
OCPBUGS-30831: Updating cluster-network-operator-container image to be consistent with ART for 4.16 #2308
OCPBUGS-30299: Fix managed cluster detection on ARO #2299
OPNET-358, OPNET-360: Allow VIP mutation in Infra CR #2130
OCPBUGS-29288: Ensure proper deprecation for the default field manager #2274
OCPBUGS-24380, OCPBUGS-24381, OCPBUGS-24382: Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods #2262
OCPBUGS-25764: memory-trim-on-compaction is enabled by default #2260
OCPBUGS-23788: Only allow valid values for gatewayConfig.ipForwarding #2127
OCPBUGS-29341: Run dhcp-daemon pods as system-node-critical priority #2280
OCPBUGS-24690: Disable network-node-identity on ROKS #2197
OCPBUGS-26492: Not set CNO to degraded if API server returns conflict error #2192
OCPBUGS-24214: Add ownership annotations #2120
OCPBUGS-24601: Add minReadySeconds to network-node-identity #2151
OCPBUGS-29305: ipsec: fix openssl typo #2269
OCPBUGS-28920: Update ingressconfig_controller to use field Manager #2259
NO-JIRA: Remove ILB from CNCC #2182
OCPBUGS-27222: Fix CloudPrivateIPConfig CRD in common #2249
OCPBUGS-24976: Updating cluster-network-operator-container image to be consistent with ART for 4.16 #2233
OCPBUGS-28676: Remove libreswan rpm existence checks #2238
OCPBUGS-29099: Add hostNetwork:true to cni-sysctl-allowlist ds #2237
OCPBUGS-24436: Add probes to node-network-identity #2148
OCPBUGS-24299: network-node-identity mounts secrets with mode 0640 #2142
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #2224
NP-874, OCPBUGS-27222: Bump openshift API #2246
OCPBUGS-24383: Limit write permissions for egressservices #2171
NP-903: Only allows live migration on standalone managed clusters #2236
OCPBUGS-19551: ovnkube: simplify northd threading and SNO templating #2234
OCPBUGS-24976: Updating cluster-network-operator-container image to be consistent with ART #2156
OCPBUGS-25079: Prevent NoRunningOvnControlPlane alert getting fired continuously #2208
NO-JIRA: add kyrtapz as reviewer and approver #2226
OCPBUGS-27823: Not update migration conditions when any MCP is updating #2213
OCPBUGS-26986: Add ConfigMap mount to the whereabouts-reconciler #2209
SDN-3708: Support configurable masquerade subnet in ovn-k #1807
OCPBUGS-26952: Deploy CNO IPsec MC even if user already have one #2201
OCPBUGS-27264: Only reconcile on Node updates with Label changes #2206
NO-JIRA: Fix jira component info #2199
SDN-4166: Enable N-S IPsec #2191
OCPBUGS-24379: Remove egressip write permissions from ovn-kubernetes-node #2170
OCPBUGS-24635: network node identity: tolarate all taints #2153
OCPBUGS-25207: Render IPsec MachineConfig after cluster settles with MachineConfigs #2187
OCPBUGS-25688: remove microshift folder, since CNO doesn’t manage it #2173
OCPBUGS-25669: Update ovn-k managed control-plane RBAC #2169
OCPBUGS-25760: Keep the live migration annotation consistant with the enhancement doc #2179
OCPBUGS-19635: OVN-K in SNO deployment mode: fix Lease override for CM #2070
SDN-4227: Use specific permissions for CNCC in GCP #2069
OCPBUGS-24693: HyperShift, network-node-identity: Check the deployment in the management cluster #2166
OCPBUGS-24176: Ignore invalid PEM blocks #2178
OCPBUGS-25337: Avoid removal of ipsec-host daemonset when node is NotReady #2161
HOSTEDCP-1308: remove service account token mount in cloud-network-con… #2165
OCPBUGS-23729: Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy #2159
OCPBUGS-24036: remove all managed fields used by old manager #2114
OCPBUGS-23199: add env var in whereabouts-reconciler daemonset #2160
OCPBUGS-19830: fix whereabouts conformance test failures #2103
OCPBUGS-24650, SDN-4308: Set enable-multi-external-gateway flag in ovnkube.conf #2149
OCPBUGS-19817, SDN-4162: Upgrade IPsec with single daemonset pod #2087
NP-615: Live migration #2091
OCPBUGS-23161: Set logging for controller-runtime #2129
SDN-4061: Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture #2101
OCPVE-779: Annotate credentials request manifests #2105
NP-615: Bump github.com/openshift/api #2138
SDN-4308: Update status merge for APBRoute and EgressFirewall. #2132
OCPBUGS-22710: Add apbroute/status patch rights for ovnkube-node to update status #2139
NETOBSERV-1047: Add a cluster monitoring dashboard for ovn #1871
OCPBUGS-21924: Bump library-go #2082
SDN-4101: Remove HyperShift API dependency, Bump kubernetes dependencies #2128
NO ISSUE: add ownership of the proxy-ca #2111
OCPBUGS-22869: hypershift, hosted clusters: enable multi-homing and multi-net features #2113
OCPBUGS-23082: set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2100
OCPBUGS-21924: Bump golang.org/x/net to v0.17.0 #2068
OCPBUGS-18088, OCPBUGS-18089: ovnkube: container scripts cleanup [v2] #2060
OCPBUGS-11179: change CNO to use custom ServiceAccount #2084
two replicas for CM instead of 3 #2052
OCPBUGS-15817: Egress router: request at least 100 milliCPU #2077
OCPBUGS-18785: SDN controller manifest: add node name from downward kapi to sdn controller #2047
OCPBUGS-19370: Added HCP label to CNO pods #2048
OCPBUGS-15220: Add zone node preference to multus-admission-controller #1795
multinetworkpolicy: allow Neighbor Discovery Protocol traffic #2010
OCPBUGS-18569: hypershift: adjust backoff on infrastructure name retry #1986
OCPBUGS-20533: Revisit cipher suits for multus-admission-controller’s rbac-proxy #2074
OCPBUGS-10652: ovnkube: disable conntrack on hybrid overlay VXLAN ports #1819
Make APB External Route namespace selector mandatory for a dynamic hop #1929
OCPBUGS-20519: hosted cluster upgrade failure from 4.13 stable to 4.14 #2065
Revert “Merge pull request #2037 from dcbw/db-script-cleanup” #2058
OCPBUGS-18392: notify when /etc/openvswitch path changes #1989
OCPBUGS-18088, OCPBUGS-18089: ovnkube: container scripts cleanup #2037
Remove ability to deploy with Kuryr #2056
OCPBUGS-20104: Don’t run network node identity as root #2051
OCPBUGS-20076: Multus should determine kubeconfig path #2049
Revert Kuryr MTU fixes #2038
Fix MTU miscalculation #1778
OCPBUGS-19918: get ipsecStatus from host daemonset #2042
Network metrics daemon: change priority class to openshift-user-critical #2044
OCPBUGS-14819: HyperShift: Use the local konnectivity proxy when checking proxy readiness #1985
OCPBUGS-19861: Multus per-node certificates should have 24h duration #2039
OCPBUGS-19418: Relax conditions to get IC upgrade started #2018
OCPBUGS-18396: Fix config status MTU migration not being updated #2021
OCPBUGS-19705: Use port 9108 for ovnkube-control-plane metrics #2031
OCPBUGS-19715: Do not enable node admission webhook if the CNI is not OVN-Kubernetes #2030
OCPBUGS-17391: remove prestop hooks for northd, sbdbd and nbdb #1978
OCPBUGS-19625: Multus per-node certificate request #2009
OCPBUGS-19377: Kuryr: Fix deriving MTU from previous config #2007
OCPBUGS-19648: Network identity: node-specific certificate in ovnkube-node, admission webhook #1983
OCPBUGS-19550: multus: set MULTUS_NODE_NAME to filter pods to local node #2020
OCPBUGS-19018: use $CPE_NAME to find the OS major version #2003
OCPBUGS-19494: ipsec: remove preStop from host #2015
OCPBUGS-18114: Update node selector in various YAMLs #1845
Limit OVN-Kubernetes permissions #1982
OCPBUGS-18892: make ipsec.service required #1999
OCPBUGS-19236: Updating cluster-network-operator images to be consistent with ART #2006
separate libovsdblogs from main ovnkube-master logs #1938
OCPBUGS-15201: Disable weak SSH cipher suites #1981
OCPBUGS-18676: ovnkube: set northd backoff-interval and use a single thread to save CPU #1990
OCPBUGS-17380: ipsec: fix oopsy from 2e3fc8e7a0 #1996
OCPBUGS-18517: Kuryr: Set MTU on Bootstrap, not Render phase #1988
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) #1292
e2e: tuned degraded test fix (#1282) #1282
Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) #1277
e2e:performance: decode to valid kubeletconfig object (#1273) #1273
cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) #1252
e2e: add irdma to module_blacklist kernel args (#1267) #1267
OCPBUGS-47678: performanceprofile cpuset input validation (#1264) #1264
Fix context deadlines in ExecCommandOnPod() (#1263) #1263
OCPBUGS-46496: [release-4.16] Add vendor and architecture specific tuning options (#1254) #1254
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) #1238
E2E: fix modify node selector to use lowercase (#1209) #1209
Fixing empty tuned submodule when using Dockerfile (#1212) #1212
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1203) #1203
Make ocp-tuned-one-shot.service restart on-failure (#1202) #1202
Unblock 4.16 CI (#1204) #1204
e2e: performance: verify tuned one-shot service vs kubelet (#1192) #1192
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) #1153
OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
E2E: Remove checking of reserved cpus in irqbalance file (#1156) #1156
Fix the destination of asset’s copy (#1134) #1134
OCPBUGS-33682: right-hand-side profile_dirs take precedence (#1080) #1080
NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817: e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
OCPBUGS-33460: E2E: change tuned profile path (#1055) #1055
E2E: modify test use HaveKey matchter instead of ContainElement (#1056) #1056
E2E: Add automation to check default cpuset from cpu manager state file (#1050) #1050
perfprof: latency e2e: adjust failure message (#1044) #1044
set required-scc for openshift workloads (#968) #968
OCPBUGS-26401: TuneD prior to kubelet in one-shot mode (#1045) #1045
perfprof: e2e: account for node base load (#1047) #1047
CNF-6517: [Part 2] Hypershift PAO adoption (#1037) #1037
CNF-11099: set intel_pstate driver to automatic as default (#950) #950
OCPBUGS-32469: Remove tuned/rendered object (#1036) #1036
NO-JIRA: 4.16 go deps (#1042) #1042
CNF-6517: [Part 1] Hypershift PAO adoption (#1032) #1032
PSAP-1354: Updated a script for deploying a custom NTO image to a cluster (#1030) #1030
OCPBUGS-30111: Negative net interface name does not reduce queues (#973) #973
Enhance latency cnf-tests UX (#1041) #1041
pao:controller: remove depracated function (#1039) #1039
Replaced tuned hard-included repo with a git submodule (#1029) #1029
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) #1012
OCPBUGS-30647: NTO operand (openshift-tuned) fixes (#1024) #1024
NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) #1031
NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) #1022
Update the awk print field to fetch rhcos-image (#1033) #1033
set Cgroups V2 as default (#1010) #1010
E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) #1011
NO-JIRA: deps: Bump to K8s 1.29.2 (#990) #990
Delete duplicate mixedcpus e2e test (#1015) #1015
e2e: Enhance tests related to crio annotations (#955) #955
NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) #993
OCPBUGS-30569: Systemd processes not being moved to cpuset/systemd.slice fix (#992) #992
NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) #991
e2e: when crun is enabled by default skip checking runc config (#948) #948
NO-JIRA: Update tuned profile degraded test (#1005) #1005
Change .snyk format (#1000) #1000
Remove removePerformanceOLMOperator() (#997) #997
CNF-11213: added mixedCpus e2e test (#967) #967
NO-JIRA: Add positive tests with ginkgo timeout (#964) #964
OCPBUGS-30647: Remove TuneD timeout code and reload on ERRORs (#998) #998
Add sync for rendering extra ctrcfgs (#980) #980
OCPBUGS-29594: Reduce number of reboots in offline tests (#940) #940
makefile:hypershift: initial make target (#995) #995
e2e:mixedcpus: check env variables of init process (#961) #961
CVE-2024: 24786: update protobuf (#985) #985
Ignore scheduler plugin IRQs when globally enabled (#987) #987
E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) #988
Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) #969
Update OWNERS file (#872) #872
e2e: perf-prof: increase logging for debugging (#974) #974
OCPBUGS-26400: scheduler plugin: ignore IRQs (#976) #976
e2e: testdata: remove the annotated profile (#962) #962
OCPBUGS-29641: fix rendering extra ctrcfgs (#972) #972
NTO operand cleanup (#970) #970
Render: Don’t fail if there is no recommended profile. (#935) #935
OCPBUGS-23167: Add performance real time tuned template (#954) #954
Add support to inject owner-ref argument to render command (#960) #960
OCPBUGS-29546: Apply hypershift cluster-profile for ibm-cloud-managed (#958) #958
OCPBUGS-29594: e2e: fix comparing incompatible types (#957) #957
Render: Add MCSelector to missing default MCPs (#956) #956
e2e: check if shared CPUs survive Kubelet restart (#912) #912
render: perfprofile: don’t annotate perfprof (#951) #951
CNF-9173: e2e: mixedcpus test (#892) #892
e2e: fix typo in label name (#947) #947
skip realtime disabled tests due to OCPBUGS-28828 (#944) #944
OCPBUGS-29183: Enable crun as runtime only if missing (#937) #937
Fix e2e tests on SNO (#939) #939
e2e: classifying tests using labels (#936) #936
Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) #938
CNF-9173: e2e: cgroups: introduce cgroup package (#906) #906
New flags in Performance profile creator (#908) #908
NO-JIRA: e2e: set performance profile cpus using env vars (#909) #909
CNF-11091: Change webhook failure policy to ignore (#933) #933
CNF-11145: Enhance render sync to include bootstrap rendering tests (#932) #932
NO-JIRA: perfprof: render: make ownerReference optional (#907) #907
Revert “NO-JIRA: skip crun configuration test” (#918) #918
Render MC without additional PP (#924) #924
Report duplicate priority only for multiple matching profiles (#890) #890
e2e: UpdateWithRetry only update spec (#914) #914
Skip PerformanceProfile update test (#929) #929
Export ValidateBasicFields for Hypershift (#916) #916
e2e: log: set ctrl-runtime logger (#911) #911
OCPBUGS-22095: Add default MCP objects for rendering (#833) #833
README Doc Typo Fix (#920) #920
HyperShift code linter PR837 followup (#910) #910
CNF-10786: e2e: general improvements and cleanup (#898) #898
dnm: skip crun configuration test (#917) #917
Add .snyk file for static code analysis (#902) #902
OCPBUGS-25699: irqbalance: set banned cpus list to ‘0’ (#899) #899
rps: fail silently when rps application failed (#895) #895
OCPBUGS-20368: E2E: Add tests for Dynamic ovs pinning (#746) #746
NTO: Add MCP name to filter PP (#878) #878
OCPBUGS-24581: rps: fix mask update for SR-IOV devices (#877) #877
OCPBUGS-24792: Make MC names deterministic (#875) #875
makefile: add target to trigger mixedcpus e2e test (#883) #883
Fix error logging in metrics server.go (#882) #882
e2e-test: Call SetLogger (#881) #881
Use go 1.21 (#879) #879
OCPBUGS-24638: Do not set default RPS sysctl twice (#868) #868
Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) #867
e2e: images: bump default test image to 4.14 (#856) #856
cpuset-configure: exit gracefully on cgroup v2 (#866) #866
CNF-7610: Mixed CPUs plugin deployment support (#853) #853
New MachineConfig render command (#844) #844
Report duplicate profiles as ERRORs (#864) #864
CNF-10473: featuregates: main: add feature gates support for PAO controller (#858) #858
e2e:latency: omit LatencyTestRun env variable (#857) #857
OCPBUGS-18649: E2E: PPC Test cases (#708) #708
OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) #854
Avoid k8s.io/kubernetes as dep (#848) #848
Remove most //nolint:* overrides (#837) #837
CNF-10294: main: remove deprecated multi ns function (#770) #770
OCPBUGS-22519: bump opentelemetry package (#840) #840
Disable HTTP/2 for webhook and metrics servers (#834) #834
Remove obsolete protocols and weak ciphers (#827) #827
OCPBUGS-18662: rps: trigger udev even per queue (#816) #816
render: change dir path (#824) #824
Makefile: remote tmp folder on clean target (#823) #823
Add golangci-lint (#793) #793
Updating cluster-node-tuning-operator images to be consistent with ART (#795) #795
fix: add if check for no resource match error (#801) #801
nto: avoid timeout when there are too many CSV (#731) #731
Set non-default UserAgent for easier debugging (#807) #807
Improve co/node-tuning operand version reporting (#792) #792
Add the k8s reporter to the configuration suite (#815) #815
OCPBUGS-18783: e2e: perfprof: enhance the scheduling domain tests (#791) #791
Add kubeconfig path for IBM Managed OpenShift (#810) #810
Add k8s reporter to e2e tests (#666) #666
OCPBUGS-19459: check for object being nil (#804) #804
Memory manager E2E test fixes (#784) #784
Some unit tests fail with go1.19 as some modules require 1.20 (#794) #794
e2e: add expected max latancy to hwlatdetec test & rename constant (#719) #719
OCPBUGS-18662: e2e:rps: improve logging (#787) #787
Full changelog

cluster-olm-operator

AUTH-482: set required-scc for openshift workloads #54
OPRUN-3291: Add roles for clusterextensions #53
OPRUN-3291: Add roles for validating admission policy APIs #52
OPRUN-3291: Update dependencies #51
OCPBUGS-31280: manual art compliance #50
OCPBUGS-32188: Update README.md #49
OCPBUGS-30491: Update kube dep to 1.27.12 #48
OCPBUGS-29553: Apply hypershift cluster-profile for ibm-cloud-managed #46
NO-ISSUE: Remove ncdc from OWNERS #45
OCPBUGS-28597: Reenable cluster-olm-operator #44
OCPBUGS-28597: Disable cluster-olm-operator #43
OCPBUGS-25542: Updating ose-cluster-olm-operator-container image to be consistent with ART #42
OCPBUGS-24794: Updating ose-cluster-olm-operator-container image to be consistent with ART #39
NO-ISSUE: Bump k8s.io/apiextensions-apiserver #37
OCPBUGS-24451: Bump k8s dependencies #36
OCPBUGS-24068: Updating ose-cluster-olm-operator-container image to be consistent with ART #35
NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART #34
OCPBUGS-21670: Bump golang.org/x/net to v0.17.0 #32
OCPBUGS-19095: Updating ose-cluster-olm-operator images to be consistent with ART #31
Full changelog

cluster-openshift-apiserver-operator

AUTH-482: Set required-scc for openshift workloads #573
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969: Use v1 for flowcontrol API #559
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
OCPBUGS-19231: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
OCPBUGS-21733: bump library-go to include switch to HTTP/1.1 #552
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48657: Add new team members to owners file #378
OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
OCPBUGS-34213: lots of churn during image registry managed/removed transition #348
OCPBUGS-35822: nil pointer reference in ocm-operator #356
OCPBUGS-34384: [release-4.16] Disable Rolebindings for Capabilities #350
AUTH-482: set required-scc for openshift workloads #336
OCPBUGS-23848: Bumps opentelemetry dependencies #341
OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
OCPBUGS-22969: Use v1 for flowcontrol API #316
BUILD-854: Add adambkaplan as approver #338
OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642: add image pull secret cleanup controller #300
API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
OCPBUGS-20164: Include Build CRD in manifests #306
WRKLDS-806: Bump kube dependencies to 1.28.2 #305
OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
OCPBUGS-18932: Always sort disabled controller list #302
OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
Full changelog

cluster-policy-controller

OCPBUGS-30496: bump(google.golang.org/protobuf)=v1.33.0 #147
WRKLDS-1016: bump k8s to 1.29.1 #146
OCPBUGS-24877: Updating ose-cluster-policy-controller-container image to be consistent with ART #144
OCPBUGS-26190: Add .snyk file to exclude vendor and ignore unit tests #145
OCPBUGS-24078: Updating ose-cluster-policy-controller-container image to be consistent with ART #143
go.mod: remove replaces #138
OCPBUGS-21638: bump(k8s,openshift) to address CVE-2023-44487 #137
OCPBUGS-21638: Bump deps to address CVE-2023-44487 #133
WRKLDS-806: bump k8s to 1.28 #132
OCPBUGS-19119: Updating cluster-policy-controller images to be consistent with ART #131
OCPBUGS-17458: ps syncer: don’t hotloop on a missing namespace #130
Full changelog

cluster-samples-operator

OCPBUGS-55457: Adding mutex to func createSamples on handler.go #633
OCPBUGS-54420: add rhdmalone to owners #620
OCPBUGS-48848: add shannon and aroyoredhat as owners #596
OKD-225: remove only the EOL CentOS 7 images #576
OCPBUGS-38159: add owners #555
SO-121: Syncing the library for only S2i Samples for OCP 4.16 #543
Revert “SO-121: Resync Libray for 4.16” #542
SO-121: Resync Libray for 4.16 #540
OCPBUGS-31303: bump K8s version to 29.2 #536
AUTH-482: set required-scc for openshift workloads #535
OCPBUGS-26992: Align builder and base for Dockerfile.okd with Dockerfile #531
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #532
OCPBUGS-24787: Updating ose-cluster-samples-operator-container image to be consistent with ART #530
OCPBUGS-24787: Updating ose-cluster-samples-operator-container image to be consistent with ART #527
SO-119: Fix mariadb import url in OKD #525
SO-118: Bumping the K8s to 28.2 and golang to 1.20 #524
SO-117: Library Sync for OCP release 4.15 #522
OCPBUGS-22225: Sync library to remove invalid dockerhub references for OKD #519
Use latest tag for network-tools imagestream #518
OCPBUGS-18857: Updating ose-cluster-samples-operator images to be consistent with ART #517
Full changelog

cluster-storage-operator

OCPBUGS-52353: fix Vsphere cluster Storage operator in Unavailable state #563
OCPBUGS-46077: Fix PodStartupStorageOperationsFailing alert #548
OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
NO-JIRA: release-4.16: Run make update #512
OCPBUGS-36969: STOR-1839: VSphereDriverConfiguration feature Accessible-by-default #491
OCPBUGS-35298: revert vsphere problem detector controller name change #481
OCPBUGS-28230: enforce termination message policy on all platform pods #470
OCPBUGS-29126: vsphere-problem-detector: don’t set Available condition #456
OCPBUGS-28230: enforce termination message policy on all platform pods #467
STOR-1804: update ClusterCSIDriver CRDs #464
AUTH-482: set required-scc for openshift workloads #459
OCPBUGS-28748: log default storage class names when collector is triggered #460
OCPBUGS-30498: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #463
STOR-1758: Add azure file hypershift #454
OCPBUGS-28879: Fix problem-detector proxy setting #457
OCPBUGS-29573: Apply hypershift cluster-profile for ibm-cloud-managed #458
OCPBUGS-28765: Remove master node selector from azure-csi-driver-operator deployment #448
OCPBUGS-29196: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #455
STOR-1574: Bump all deps #447
STOR-1611: remove ibm-vpc-node-label-updater #445
OCPBUGS-27159: Allow vSphere CSI driver to be disabled #444
STOR-1289: Move vSphere prometheus rules to CSO #442
STOR-1354: Remove Alibaba Disk CSI Driver #440
STOR-1574: Bump library-go #443
STOR-1722: Azure disk hypershift #420
STOR-1714: Release leadership on SIGTERM #437
OCPBUGS-22994: Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert #430
OCPBUGS-22422: Fix PodStartupStorageOperationsFailing alert #436
STOR-1688: Chore: add .snyk file to ignore false positives #434
OCPBUGS-25564: Updating ose-cluster-storage-operator-container image to be consistent with ART #435
CCO-251: replace instanceAdmin role with specific compute permissions #429
OCPBUGS-24927: Updating ose-cluster-storage-operator-container image to be consistent with ART #432
OCPBUGS-23852: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #431
OCPVE-789: annotate credentials request manifests #418
STOR-1277: Add Prometheus rules for SELinux telemetry #422
TRT-1376: Revert #410 “CCO-251: use granular permissions for gcp credentails request” #426
CCO-251: use granular permissions for gcp credentails request #410
OCPBUGS-24112: Updating ose-cluster-storage-operator-container image to be consistent with ART #424
STOR-1487: bump openshift/api to get IBMCloudCSIDriverConfigSpec #423
OCPBUGS-24027: forbidden access to resource on shared-resource-csi-driver-operator #425
STOR-1402: Chore: update libraries in all operators [4.15] #421
OCPBUGS-23120: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #417
STOR-1453: Grant permissions to access apiserver to CSI driver operators #415
OCPBUGS-22594: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #414
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #411
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #404
OCPBUGS-13669: skip Azure File installation on Azure StackHub #395
OCPBUGS-19073: Move KAS access label to right place #403
update readme #400
OCPBUGS-19073: Add KAS label to aws-ebs-operator #399
OCPBUGS-19184: Updating cluster-storage-operator images to be consistent with ART #398
STOR-1446: Restart vsphere-problem-detector-operator Pods if serving-cert changed #394
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
OCPBUGS-29570: Apply hypershift cluster-profile for ibm-cloud-managed #54
OCPBUGS-24932: Updating ose-cluster-update-keys-container image to be consistent with ART #53
OCPBUGS-24115: Updating ose-cluster-update-keys-container image to be consistent with ART #52
OCPBUGS-19189: Updating ose-cluster-update-keys images to be consistent with ART #51
Full changelog

cluster-version-operator

OCPBUGS-55156: Fix a panic caused by a data race #1178
OCPBUGS-50590: Set openshift.io/required-scc: privileged annotation in version pods #1153
OCPBUGS-46408: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1128
OCPBUGS-45329: deps: bump golang.org/x/net to 0.31.0 #1118
OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
OCPBUGS-37853: Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1077
OCPBUGS-36898: vendor: Update openshift/api to pick up zz_generated.crd-manifests #1069
OCPBUGS-36764: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1065
OCPBUGS-35249: Revert: Add support for Custom Certificate Authorities for custom signature stores” #1053
OCPBUGS-24700: Add support for Custom Certificate Authorities for custom signature stores #1030
OTA-1160: pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart #1044
NO-ISSUE: pkg/payload/task: Drop unused Requeued property #1043
NE-1318: Add always-enable-capabilities flag and set Ingress as always enabled #946
OCPBUGS-9133: pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded #746
AUTH-482: set required-scc for openshift workloads #1038
NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 #1042
OTA-1159: pkg/cvo: Render status.Failure in ReconciliationIssues #1041
OTA-1210: *: Add –update-service command-line option #1035
OTA-1159: [²⁄₃] Maintain ReconciliationIssues condition #1032
OCPBUGS-29868: Apply hypershift cluster-profile for ibm-cloud-managed #1037
NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded #1036
OCPVE-659: bump openshift/api with new capability #979
OTA-1159: [1/x] Refactor syncStatus for testability #1031
OCPBUGS-18454: Avoid using risk names as condition reasons when invalid #962
OCPBUGS-7714: yield lock while retrieving payload #1005
NO-JIRA: manifests: fix service manifest filename #1027
OCPBUGS-27468: bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features #1026
OCPBUGS-7714: Refactor & improve SyncWorker lock code #1020
OTA-1169: deps: bump openshift/api and k8s.io/client.go #1022
OCPBUGS-25862: CO health: only track current in-progress upgrade start #1011
OCPBUGS-26014: clusterOperatorBuilder: Reconcile metadata on COs #1012
OCPBUGS-25708: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1009
OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #996
OCPBUGS-24963: Updating cluster-version-operator-container image to be consistent with ART #1006
OCPBUGS-25055: pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1003
OCPBUGS-24963: Updating cluster-version-operator-container image to be consistent with ART #1004
OTA-917: pkg/customsignaturestore: Implement signatureStores customization #994
OCPVE-646: add cloud credential capability #963
OTA-855: Create GET requests to the Prometheus API server #999
OCPBUGS-23290: install/0000_90_cluster-version-operator_02_servicemonitor: ‘oc get …’ for CannotRetrieveUpdates #995
OCPBUGS-24138: NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART #1000
OCPBUGS-23377: to reduce log noise, only log sync_worker messages on retry or payload change #997
OCPBUGS-19391: do not reconcile rules if aggregationRule is set #993
OCPBUGS-8079: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #992
OCPVE-740: vendor: bump openshift/api #984
OCPBUGS-21933: Bump http-related deps #983
OCPVE-673: Bump API to Add OLM Capability #971
Revert openshift/api bump PR merged by mistake (977) #978
OCPVE-659: bump openshift/api #977
OCPBUGS-19868: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #975
OCPBUGS-19512: pkg/clusterconditions/promql: Warm cache with 1s delay #939
OCPBUGS-18386: Properly reconcile SCC resources #966
OTA-854: Add configurable CVO knobs for risk-evaluation PromQL target #926
OCPBUGS-18984: pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition #968
OCPBUGS-19222: Updating cluster-version-operator images to be consistent with ART #970
OCPBUGS-18567: lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment #965
Full changelog

configmap-reloader

MON-3671: add machine424 and rexagod to OWNERS #55
OCPBUGS-24912: Updating configmap-reload-container image to be consistent with ART #58
Updating configmap-reload-container image to be consistent with ART #57
OCPBUGS-19171: Updating configmap-reload images to be consistent with ART #56
Full changelog

console

OCPBUGS-55378: Do not load CSRs if user does not have permissions #15000
OCPBUGS-55644: fix bug where operator appears twice #15016
OCPBUGS-45142: Add missing pipelines plugin name to known plugins #14550
OCPBUGS-48628: Added token to proxy header #14693
OCPBUGS-54174: Update the monitoring topic used by the console team #14900
OCPBUGS-52450: fix run time error when no completed version exists #14840
OCPBUGS-52851: Show Observe section without PROMETHEUS and MONITORING flags #14849
OCPBUGS-52288: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14821
OCPBUGS-49409: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14703
OCPBUGS-52418: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14837
OCPBUGS-49979: Set default build option as BUILDS for Builder Image sample #14730
OCPBUGS-49800: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14715
OCPBUGS-49801: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14716
OCPBUGS-46388: fix alert rule link #14808
OCPBUGS-52252: Fix alert rule link to alert in dev perspective #14817
OCPBUGS-46441: Do not pass CSV name to operand list page when an exen… #14627
OCPBUGS-36963: Manually create an API token for a ServiceAccount #14057
OCPBUGS-35394: sessions: fix sessions pruning #13969
OCPBUGS-46602: ReRun of Resolver based PipelineRuns fails from UI #14641
OCPBUGS-46567: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14636
OCPBUGS-48162: OCP web console show pod status as Init:0/1 after using Native sidecars #14668
OCPBUGS-43672: Disable GQL introspection #14638
OCPBUGS-45334: fix table combination #14576
OCPBUGS-41342: fix namespace for networkpolicy #14244
OCPBUGS-46022: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14612
OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
OCPBUGS-38464: correct casing in “Lightspeed” #14148
OCPBUGS-37430: Fix utilization card limits/total display #14082
OCPBUGS-36510: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14031
OCPBUGS-37954: No access to list pipelines.tekton.dev prevents from using Delete application form #14107
OCPBUGS-36601: Tooltip on Pipeline when expression is not shows #14033
OCPBUGS-38803: CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub #14095
OCPBUGS-37048: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14060
OCPBUGS-35839: Fix placement of icons on WebKit #13988
OCPBUGS-35271: Fix password set to Secret created through Start Pipeline form #13954
OCPBUGS-38093: correct link for Lightspeed operator #14112
OCPBUGS-36484: Revert - terminal: use username if uid is not present #14027
OCPBUGS-37097: Add useQuickStartContext hook and expose it via dynamic plugin API #14070
OCPBUGS-36864: maintain session across tabs #14051
OCPBUGS-36620: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14035
OCPBUGS-36759: RWOP accessMode is not available on OpenShift console UI #14040
OCPBUGS-37063: hide ‘View all steps in documentation’ for ROSA and OSD #14069
OCPBUGS-36411: fix BMH restart annotation #14022
OCPBUGS-36841: ensure correct API version for OperandDetails #14049
OCPBUGS-36186: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #14008
OCPBUGS-36002: fix flaking crd-extension tests #14003
OCPBUGS-35565: remove duplicate OAuth config #13982
OCPBUGS-35571: Update Go prereq in README.md #13981
OCPBUGS-35465: ManagedField in YAML editor is not collapsed by default which is incorrect #13974
OCPBUGS-35408: fix pseudolocalization #13972
OCPBUGS-35280: Ensure requiredVersion is set for Console provided shared modules #13956
OCPBUGS-34011: Use bridge instead of cnv-bridge #13875
OCPBUGS-35946: Fix invalid node filesystem query #13999
OCPBUGS-34717: The s2i build strategy is not assumed for Serverless Functions #13915
OCPBUGS-34968: Update plugin docs regarding Console 4.16 shared module changes #13933
OCPBUGS-35281: Display of “Auth Token GCP” filter in OperatorHub should be conditioned #13955
OCPBUGS-35472: bump helm to 3.14 #13971
OCPBUGS-35481: fix crash if helm chart metadata is nil #13975
OCPBUGS-35395: Keep useUserSettings hook in the internal api #13970
OCPBUGS-35152: restore missing CloseButton styles #13947
OCPBUGS-35318, OCPBUGS-35319, OCPBUGS-35320: disabling add-flow A-04-TC01 test and knative tests due to flakes #13962
(chore) Update tectonic builder image to use golang-1.21 #13944
OCPBUGS-34139: Improve Pipeline list page performance #13882
OCPBUGS-34002: Fix console crash-loop with OIDC auth config #13874
OCPBUGS-34711: show “Debug container” link for pods with status.phase… #13914
OCPBUGS-33965: i18n - Download and merge French and Spanish languages translations in the OCP Console #13870
OCPBUGS-34393: fix bug where textarea is not resizable #13894
OCPBUGS-33989: Updating the secrets using Form editor displays an unknown warning message #13873
OCPBUGS-34112: Fix Admission webhook warning for Route and BuildConfig creation via import flow #13881
OCPBUGS-34141: UI inconsistency in topology when application grouping is collapsed #13883
OCPBUGS-34142: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13884
OCPBUGS-34143: Create Serverless form does not create BuildConfig #13885
OCPBUGS-33872: add user-impersonation to QuickStartGettingStartedCard,… #13864
OCPBUGS-32631: TaskRuns should not be fetched for Failed PLR’s #13806
OCPBUGS-33567: Expose useUserSettings hooks in dynamic plugin sdk #13843
ODC-7576: Pipelines plugin test fixes #13841
OCPBUGS-31901: Patch PF dynamic module parser to exclude ‘next’ modules #13832
ODC-7574: Add e2e tests for QuickStart from Masthead in CI #13837
OCPBUGS-33523: restrict Masthead logo to max-height #13838
OCPBUGS-29745: Fix Pipeline details page with when expression using CEL expression #13834
CONSOLE-4019: Display a warning message from kube-apiserver when creating resource integration tests #13814
CONSOLE-3943: Backup to segment public api key #13821
OCPBUGS-33352: Fix PatternFly modules check #13817
OCPBUGS-33345: Disable create button on NAD empty state for regular user #13805
CNV-36170: Multi NetworkPolicies #13772
OCPBUGS-33219: Fix StatusItem layout when no timestamp is present #13815
OCPBUGS-31558: Fix NAD creation defaulting to the default namespace #13822
OCPBUGS-33222: List DeploymentConfig triggers a warning notification which is not required for Display warning policy feature #13818
OCPBUGS-33199: The filepath including leading slash makes error during parsing devfile using Gitlab #13812
OCPBUGS-33202: Pipeline list page is crashed when navigating from Search page #13813
CONSOLE-3939: Display a warning message from kube-apiserver when creating / updating workloads resource #13763
OCPBUGS-32707: Fix React Router useParams in dynamic demo plugin #13803
CONSOLE-1756: replace PodIP with PodIPs or HostIP with HostIPs if mor… #13774
ODC-7437: Remove pf classes in topology package #13710
OCPBUGS-33011: fix issues with Edit Route form #13799
CONSOLE-4014, OCPBUGS-32791: Consume telemetry CLUSTER_ID and use it together with orgId as segment identifier #13786
ODC-7435: Remove pf classes in pipelines package #13739
ODC-7569: Automation of the Recently Used Resources Section in the Search Resource page Dropdown #13791
ODC-7566: Remove the Approvals Feature from the Console Repository #13789
ODC-7547: Add e2e tests for QuickStarts in CI #13764
ODC-7438, ODC-7535: web-terminal automation improvement #13749
OCPBUGS-32741: change OperatorHub filter FIPS Mode to Designed for FIPS #13790
WINC-1180: Use record created for container_network metrics #13759
OBSDOCS-986: Update the Monitoring topic used by the console team #13765
ODC-7433: Remove PatternFly classes from helm integration tests #13777
CONSOLE-4020: i18n upload/download routine task - Sprint 252 #13760
OCPBUGS-32725: fix OIDC logging out #13755
OCPBUGS-32059: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13776
OCPBUGS-32222: Add warning about service binding operator will not be supported from 4.15 #13766
ODC-7554: Update the UI according to the recent changes from UX #13723
ODC-7565: Update owners files (remove reviewers and add Avik and Prabhu as approvers for ODC) #13773
OCPBUGS-13114: Add visual connector between VMs and non VMs workloads #13617
OCPBUGS-31809: Pipeline details page Metrics tab crashed due to no custom data #13733
OCPBUGS-30426: Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 #13661
OCPBUGS-28723: Improve Create serverless function error message #13591
OCPBUGS-32218: fix runtime error on Pending pod details page #13768
ODC-7479: automation of quick-starts-cluster-overview.feature #13715
OCPBUGS-12857: Add NaN handling for Stacked Graphs #13712
OCPBUGS-26073: setting correct image trigger annotation #13492
CONSOLE-3944: Disable segment analytics when cluster telemetry is disabled #13677
OCPBUGS-32019: Handle loading issue for PLR status in PLR list page #13747
OCPBUGS-29377: Routes created by devfiles do not always use HTTPS #13725
OCPBUGS-32307: Increase Max node limit for topology page to 300 #13761
OCPBUGS-22405: Add a button to enable autoscaling for a deployment that is scaled to 0 #13711
OCPBUGS-32189: Fix PatternFly version resolution check script for MacOS #13757
CONSOLE-3759: Update file-loader pkg #13743
OCPBUGS-31430: Re-enable Pipelines e2e tests #13700
OCPBUGS-32175: Update i18n docs : Change “traditional Chinese” to “simplified Chinese” #13754
OCPBUGS-32117: Add flag to hide Output tab contributed by pipelines-plugin #13751
CONSOLE-3997: Bump Yarn to v1 latest & add script to check PatternFly modules #13706
OCPBUGS-31745: TaskRun status is not displayed near the name #13746
CONSOLE-3916: Direct OIDC tech debt #13647
OCPBUGS-31082: Remove deprecated resources from spec of the Pipeline #13741
OCPBUGS-31759: Update i18n docs on how to update Phrase Project Template #13730
OCPBUGS-31843: Use UserInfo username field when logging out as kubeadmin #13740
OCPBUGS-31680: Correct the button text for VolumeSnapshotContent #13742
WINC-1182: [node] Modify filesystem queries to include Windows metrics #13662
OCPBUGS-31703: Resource yaml with create #13722
CONSOLE-4014: Consume the telemetry parameter ORGANIZATION_ID and pass it as organizationId parameter to segment #13728
OCPBUGS-23319: fix bug where paused MCPs were incorrectly unpausing w… #13717
OCPBUGS-31744: Add fr and es languages to i18n script for Memsource upload #13729
OCPBUGS-29616, OCPBUGS-29823, OCPBUGS-31613: Add validation for vSphere fields #13726
OCPBUGS-23480: Improve PipelineRun list view performance #13676
OCPBUGS-31732: Hide the cluster configuration for analytics #13727
OCPBUGS-31482: oidc: use our own pre-configured client for token refreshes #13716
OCPBUGS-31695: Use bearer-token for local dev with auth #13720
OCPBUGS-31355: add readOnly option to ResourceYAMLEditor #13694
ODC-7436: shipwright test package update concerning pf5 update #13660
OCPBUGS-31431: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13701
ODC-7431: dev-console test package update concerning pf5 update #13685
OCPBUGS-31315: i18n upload/download routine task - Sprint 249 #13692
OCPBUGS-29479: fix asynccache improper initialization #13703
OCPBUGS-24830: Updating openshift-enterprise-console-container image to be consistent with ART #13454
Revert “OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters” #13705
CONSOLE-3883: Improve local plugin development docs #13679
OCPBUGS-30958: Upgrade Pipeline trigger resources to v1beta1 #13702
OCPBUGS-30824: Remove react-helmet from Console provided shared modules #13687
CONSOLE-3971: add impersonate action to Group list and details pages #13671
OCPBUGS-28585: remove generics from use*Modal docs #13689
OCPBUGS-24637: Fix storage request unit dropdown to display any valid unit #13620
OCPBUGS-29992, OCPBUGS-30584: PatternFly upgrade to 5.2.1 followup to… #13693
CONSOLE-3972: add Last Status to Pod details Container list and Conta… #13674
ODC-7531: Added the ApprovalTask List Tabbed Page #13651
ODC-7546: Fix that the UI doesn’t load on non-openshift clusters #13408
ODC-7498: Show an opt-in / opt-out option to the user depending on the cluster configuration #13587
ODC-7434: Knative test package update concerning pf5 update #13562
OCPBUGS-24049: Add option to enable/disable tailing to Pod log viewer mobile screen issues #13394
CONSOLE-3949: Add support for returning response.header in consoleFetchCommon function #13623
CONSOLE-3969: Enable French and Spanish in the OCP Console #13665
ODC-7519: Update the Pipeline Topology to adjust the new node design for the CustomRun #13613
CONSOLE-3922: Convert legacy ListPage to dynamic-plugin-sdk ListPage- components in Console VolumeSnapshots Storage #13560
ODC-7489: automation for getting-started-tour-dev-perspective feature file #13531
OCPBUGS-30052, OCPBUGS-30575: PipelineRuns in Console show wrong status or load indefinitely #13659
CONSOLE-3965: i18n upload/download routine task for version-4.16/ sprint-248 #13652
ODC-7492: automation for sample-card-add-page feature file #13589
OCPBUGS-30567: Remove wrong arguments in K8sCreate method instance for Create YAML editor #13658
OCPBUGS-30297: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13650
CONSOLE-3931: replace existing CloseButton with one from @patternfly/… #13588
OCPBUGS-30805: fix Configure link in AlertmanagerReceiversNotConfigur… #13666
OCPBUGS-30762: Fix bugs in Console dynamic plugin SDK webpack code #13657
ODC-7539: Update devfile library to v2.2.2 #13045
OCPBUGS-26415: Application creation fail when manually entering input scaling value in local setup #13487
OCPBUGS-30551: Switch to service to get the PLR and TR logs from the Tekton results summary API #13654
OCPBUGS-29513: Update the Pipeline List and Details Pages to acknowledge Custom Task #13614
OCPBUGS-29365: Requesting for country codes in localization of openshift - webconsole #13612
OCPBUGS-25931: fix for execute inline markdown syntax issue #13580
RHSTOR-4130: Cross storage class clone /restore #13549
OCPBUGS-27469: “Deploy Image” with “Serverless Deployment”, Scaling “Min Pods”/“Max Pods” should set “autoscaling.knative.dev/min-scale”/max-scale not minScale/maxScale #13534
OCPBUGS-30073: Upload Jar form’s Clear button is not functioning #13644
OCPBUGS-21800: Dev console buildconfig got [the server does not allow this method on the requested resource] error when not setting metadate.namespace #13544
OCPBUGS-30046: Missing dependency warning error in console UI dev env #13640
OCPBUGS-22894: adjusting documentation links for 4.15 #13634
OCPBUGS-30077: Add additional search filters in the toolbar #13233
ODC-7480: Recently Searched Section in Search Resource Page Dropdown #13389
CONSOLE-3907: add actions extension point to Events #13554
OCPBUGS-22487: Fix operands list endpoint. #13632
CONSOLE-3948: rename ‘supported but not recommended’ to ‘known issues… #13622
OCPBUGS-29701: Use selfsubjectreview API from frontend #13605
ODC-7478: Gherkin and automation of “Install Red Hat Developer Hub with a Helm Chart” guided tour #13511
CONSOLE-3924: i18n upload/download routine task - version4.16/sprint247 #13608
CONSOLE-3776: Add GCP token auth to Infrastructure features filter section in OpertorHub #13559
OCPBUGS-29816: Switch to service from external result route endpoint #13624
OCPBUGS-29757: Use HTTP proxy configuration from environment variables in dev-console proxies, so that our backend proxies works fine on airgapped clusters #13619
OCPBUGS-28967: ‘Oh no somthing went wrong’ shown on Image Manifest Vulnerability page after create IMV via CL #13578
CONSOLE-3921: Remove Disks/NICs page from Node details #13552
CONSOLE-3883: Update dynamic plugins README #13598
OCPBUGS-29760: Dev console: Observe > Dashboard page should be called “Dashboards” (OU-260) #13597
CONSOLE-3774: Enable OperatorHub filter by TLSProfiles annotation #13555
ODC-7477: automation of quick-start-access-code-snippet.feature #13494
OCPBUGS-29423: update TableData doc to use PatternFly 5 classname #13606
OCPBUGS-29363: TaskRuns list page is loading constantly for all projects #13604
OCPBUGS-29355: Output image url link leads to 404 for Shipwright Builds #13602
OCPBUGS-29601: Disabling pipeline tests to restore CI health #13611
ODC-7476: automation for getting-started-serverless gherkin #13476
OCPBUGS-27473: Error in displaying BuildRun logs in Console #13583
CONSOLE-3883: Update Console vs. dynamic plugin SDK package compat table #13586
OCPBUGS-9714: Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown #13411
OCPBUGS-28718: Revision tab and routes tab in serving details page showing no resource found #13556
OCPBUGS-26566: Page fails to return to the Secrets list after clicking ‘Cancel’ on any Secret creation page #13504
OCPBUGS-28383: Activity card event has expanded content that is not correctly left aligned with the rest of the card content #13547
OCPBUGS-27247: improve empty state message for Machines and MachineSets page #13577
OCPBUGS-25942: make sure folder is encapsulated with quotas #13477
OCPBUGS-27246: Unhealthy conditions table should put Type as first column on MachineHealthCheck details page #13576
OCPBUGS-22749: Adjust NAD name to “network-xxx-xxx” when creating #13568
ODC-7490: Add TaskRun tab in PLR details page using plugin #13527
OCPBUGS-28856: make getGroupVersionKindForResource null safe #13574
OCPBUGS-27908: fix i18n for Remove volume modal #13550
CONSOLE-3377: Add Cypress integration tests for ConsoleYAMLSample CRDs #13567
OCPBUGS-28836: AUTH-440: fix usersettings identifier creation #13557
OCPBUGS-27310: Source column header not displayed in PVC > VolumeSnapshots tab #13565
CONSOLE-3853: Optimize module federation of PatternFly packages #13521
CONSOLE-3909: i18n upload/download routine task - chore(i18n): update translations #13519
CONSOLE-3818: Remove Chrome from the console builder image #13539
OCPBUGS-28216: Adjust width and spacing so that warning icons are not clipped. #13546
OCPBUGS-26236: VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab #13485
OCPBUGS-25936: fix copy-execute-demo.yaml inline syntax #13471
AUTH-440: OIDC: refresh sessions with a refresh token if present #13513
OCPBUGS-25843: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13483
OCPBUGS-25881: remove “openshift-storage” namespace usage from the console #13418
OCPBUGS-27455: do not deduplicate ImageManifestVulns in Overview popover #13529
OCPBUGS-27016: fix resizeObserver limit exceed for dev-console #13502
OCPBUGS-27152: Fix popover jump in Tables #13524
OCPBUGS-25788: Add Node Maintenance menu actions to Node list/details #13506
OCPBUGS-27779: fix bug where Expand PVC modal assumes pvc.spec.resou… #13532
CONSOLE-3430: add Cluster Settings > Details integration tests #13515
ODC-7482: Add flags checks to hide Pipeline static plugin List and details pages #13512
OCPBUGS-27498: Update get method so it can display zero value when set #13533
OCPBUGS-16736: Addition of optional chaining to prevent yaml crash #13510
OCPBUGS-27399: Filter out Client CSRs for nodes which already exist #13522
CONSOLE-3829, OCPBUGS-16814: backend: use the k8s SelfSubjectReview API to get info about a user #13321
AUTH-440: expand options for the OIDC authenticator #13276
OCPBUGS-26772: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13503
OCPBUGS-26039: Make editor sidebar width consistent #13495
OCPBUGS-10851: Add source maps to production builds #13497
OCPBUGS-25890: Prevent complete page reload when changing perspective #13500
OCPBUGS-14481: update check for the ‘provider’ label on the PackageMa… #13491
OCPBUGS-26554: Fixed some problems in topology Chinese translation text #13458
OCPBUGS-18699: add additional check to determine if file is binary #13496
ODC-7465: Update Getting started section in Openshift UI to use expandable section #13466
chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13441
OCPBUGS-25722: Add support for custom segment domains (to load JS and make API calls) #13459
OCPBUGS-26049: Tab VolumeSnapshots crashed on PVC page #13481
OCPBUGS-25780: add integration test to check that Update cluster moda… #13480
OCPBUGS-25898: Fix PipelineRun Logs tab navigation #13470
OCPBUGS-25840: make Azure warning title consistent #13472
OCPBUGS-25771: Enable catalog source badge to truncate for long names #13474
OCPBUGS-25780: fix bug where Update cluster modal will not open #13473
OCPBUGS-25934: clean up icon color and sizes #13460
OCPBUGS-25927: Fix config ini format #13210
OCPBUGS-25612: Logs for PipelineRuns fetched from the Tekton Results API is not loading #13455
OCPBUGS-24592: Fix CI tests in helm and devconsole packages #13464
OCPBUGS-25206: Re-enable and fix pipelines e2e tests #13438
OCPBUGS-18844: Replace the old sr-only class to the patternfly pf-v5-u-screen-reader class #13453
HELM-522: bump helm version to 3.13.2 for OCP 4.15 #13410
OCPBUGS-25441: fix Observe tab in Topology overview #13451
OCPBUGS-25530: fix bug where filter at mobile could be empty on Searc… #13456
OCPBUGS-25396: update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page #13450
CONSOLE-3874: Refactor EventStream #13431
OCPBUGS-23299: Replace checkbox with PF checkbox component to correct alignment #13397
OCPBUGS-23925: Follow on logic for only showing VPAs associated with a deployment for a specific project #13445
OCPBUGS-24711: fix preferredTab selection on Pipelines page #13430
OCPBUGS-24715, OCPBUGS-25018: Fix pipelineRuns loading on repository details page #13432
OCPBUGS-24830: Updating openshift-enterprise-console-container image to be consistent with ART #13434
OCPBUGS-24408: fix runtime error on Node details Overview when Machin… #13422
OCPBUGS-23378: Prevent text overlap with popover close button on Create NetworkPolicy form #13429
CONSOLE-3853: Prevent PatternFly styles from being included in plugin compilation #13388
OCPBUGS-24280: Add missing https:// check for an external link #13421
chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 244 #13403
OCPBUGS-5113: Date&Time values are not showing as per browser default language #12506
OCPBUGS-23925: Only show VPAs that are associated with the selected namespace #13417
OCPBUGS-24186: Strip ‘Server’ header from proxy response #13404
Console-3733: Add support for Azure Workload Identity / Federated Identity based installs in OperatorHub #13082
ODC-7389: Update OpenShift favicons as well #13420
OCPBUGS-24582: Updated functions list page to use new hook useParams #13419
OCPBUGS-18401: add type and text filters to Events integration test #13407
OCPBUGS-13206: Fix customPythonDeploymentConfig YAML script to create a Pipeline wasn’t working #13149
OCPBUGS-13204: Fix that customNodeDeployment pipeline YAML script wasn’t working #13148
OCPBUGS-24252: fix subscription page fields #13416
OCPBUGS-23764: bump PF dependencies to the latest patch fix #13380
OU-286: add test-id to panel charts to ease e2e tests when titles change #13340
OCPBUGS-23554: Fix for monaco editor that happens with yaml is being edited #13414
OCPBUGS-23378: Set min-width for PF popovers that are being overridden by an inline style #13390
OCPBUGS-23347: fix vCenter cluster being empty #13209
OCPBUGS-24339: Do not depend on a global installed lint-staged #13409
OCPBUGS-24399: Update our overrides css rule to remove list bullet from PF4 ui elements #13406
OCPBUGS-23761: PatternFly5 update: Fix quick search input background color in dark mode #13398
OCPBUGS-18401: fix filtering issues on Events #13395
OCPBUGS-23263: Update i18next-parser dev dependency in console #13330
OCPBUGS-24267: Cluster configuration fields are not visible #13386
OCPBUGS-22976: S2I Build Wizard should check for Containerfile in addition to Dockerfile #13378
OCPBUGS-24001: Fix crash when ArtifactHub Task has no version #13379
OCPBUGS-18371: Searching for items in quick search is confusing #13381
OCPBUGS-24280: view sbom link redirection should be based on taskrun annotation #13387
OCPBUGS-24339: Add note about git hooks and PATH env var to README #13396
OCPBUGS-18542: Fixed topology package e2e tests #13136
CONSOLE-3852: remove PatternFly classnames from integration tests #13337
OCPBUGS-24203: ConsolePlugin metrics must no longer be grouped by the vendor #13383
CONSOLE-3732: Add option to enable/disable tailing to Pod log viewer #13298
CONSOLE-3705: Phase 1 of using OpenShift Dynamic Plugin SDK #13188
OCPBUGS-23779: Fix crash when user clicks on Show tooltips #13382
OCPBUGS-19426: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #13333
CONSOLE-3764: Update husky to v8.0.3 #13320
OCPBUGS-23125: add access review for impersonate #13345
OCPBUGS-23780, OCPBUGS-23783, OCPBUGS-23794, OCPBUGS-23977: Bring back the Decorators and Pod Rings around resources in Topology #13376
OCPBUGS-23956: PatternFly5 update: Remove text decoration for task node on hover #13371
OCPBUGS-23786: PatternFly5 update: fix code snippet color in quick start in dark mode #13366
OCPBUGS-23770: After PatternFly5 update: Typology sidebar layout issue #13363
OCPBUGS-23248: change Alertmanager form to create using matchers inst… #13358
OCPBUGS-23980: Fix logs streaming auto scroll issue #13377
OCPBUGS-23778: Apply the correct font-family for the page header action button and menu items. #13375
OCPBUGS-23756: fix layout of Show tooltips in YAML editor #13374
OCPBUGS-23971: remove pf-m-grid-md from tables so table headers appea… #13373
OCPBUGS-23927: fix table layout issue with Identity providers table #13372
OCPBUGS-23769: PatternFly5 update: fix Topologylist view hover effect #13368
CONSOLE-3793: add uptime to Node pages #13312
OCPBUGS-23559: Styling issue in functions list page after PatternFly upgrade #13356
chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 243 #13253
OCPBUGS-23923: fix PipelineRun task logs switcher #13369
OCPBUGS-23775: After PatternFly5 update: Form error is missing when import a container image #13365
OCPBUGS-23765: fix dark theme issue for helm release readme modal #13370
ODC-7359: Fix shipwright build e2e tests #13296
OCPBUGS-23787: PatternFly5 update: fix Quickstarts catalog item count alignment #13367
OCPBUGS-23776: After PatternFly5 update: Add page > more button dropdown is too wide #13361
OCPBUGS-23768: After PatternFly5 update: Navigation: Extra space after divider #13362
OCPBUGS-23912, OCPBUGS-23918: Add Vulnerabilities column and signed icon in PAC repository PLR list #13364
ODC-7426: Deletion of pipeline run after tekton result installation should be user-friendly #13353
OCPBUGS-23388: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13344
ODC-7389: Replace topology graphic with new version for openshift v4.15 #13350
OCPBUGS-23543: Deployment option is missing in ‘Deploy Image’ #13354
ODC-7428: Update quick start name and document links for getting started section #13348
OCPBUGS-22778: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13346
GITOPS-3575: Added disallowed flag to gitops static plugin #13307
ODC-7419: Feature new Quickstarts (RHDH on the admin dashboard and Pipelines/Serverless on the dev add page) #13303
CONSOLE-3693: Upgrade to PFv5 versions #12983
ODC-7425: Add serverless function icon in Add page group header #13338
OCPBUGS-20016: account for useK8sWatchResource returning {} like it does f… #13347
ODC-7383, ODC-7384, ODC-7385: Update the PipelineRun and TaskRun details page to use Tekton Results API to load all the info #13328
ODC-7424: Add e2e tests for vulnerabilities column in pipelinerun list and details page #13335
OCPBUGS-23164: Cannot Edit Shipwright Build #13341
ODC-7382, ODC-7395: add support for tektonresult api to load PipelineRuns #13311
ODC-7421: Show vulnerability column in the pipelinerun list page #13329
ODC-7424: add e2e tests for SBOM section and output tab #13325
OCPBUGS-23292: Webpack-DevServer Hot-Reload Not Working #13331
CONSOLE-3823: Split auth config to its own module #13261
ODC-7423: move pipelinerun results to output tab #13323
ODC-7399: Create getting started content in functions list page #13289
ODC-7422: Add SBOM link and signed badge in PLR details page #13314
CONSOLE-3618: Remove frontend multicluster code #13245
CONSOLE-3777: Update NodeJS v14 to v18 #13213
ODC-7414: Update Shipwright API from v1alpha1 to v1beta1 #13304
OCPBUGS-20016: improve labels and annotations modal display and editi… #13295
CONSOLE-3695: Add details item extension to console dynamic plugin SDK #13240
CONSOLE-3814: Conditionally render “Users” and “Groups” nav items #13287
OCPBUGS-23110: Disable Pipelines E2E Tests #13318
CONSOLE-3740: Address memory issues in CI #13309
CONSOLE-3614: Remove multicluster code from Bridge #13244
CONSOLE-3822: Update obsolete deps #13294
OCPBUGS-22930: remove expandable toggle for conditional update risk d… #13306
OCPBUGS-22749: Adjust NAD name by using unique-names-generator #13263
CONSOLE-3781: remove cypress.config comments #13301
CONSOLE-3819: change Cypress’ default browser to Electron #13300
OCPBUGS-19916: Fix MachineSetList capacity logic #13259
CNV-30298: Add UI for OVN Secondary Localnet Network #13293
OCPBUGS-19875: Fix plugin proxy handler #13272
CONSOLE-3808: Remove Protactor from console-plugin-sdk #13283
OCPBUGS-22747: Display “With Data upload form” in Create PVC drop down once #13292
CONSOLE-3811: remove shared Protractor files #13282
ODC-7409: Use @kubernetes-models/shipwright types in shipwright-plugin #13267
CONSOLE-3788: remove local-storage-operator-plugin Protractor tests #13291
CONSOLE-3788: remove network-attachment-definition-plugin Protractor … #13286
ODC-7386: Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed #13145
CONSOLE-3788: migrate console Protractor tests to Cypress #13257
OCPBUGS-22419: Fix the forms when BC is not installed in the cluster #13241
CONSOLE-3788: remove cnv console tests #13280
OCPBUGS-10562: fix operator uninstall test #13214
CONSOLE-3740: remove references to removed packages #13281
OCPBUGS-22213: Fix links for CodeEditor component #13274
CONSOLE-3816: Goodbye! #13255
OCPBUGS-19458, OU-241: Remove unused Observe > Metrics page code #13114
OCPBUGS-20295: clarify Operator installMode error message #13232
CONSOLE-3740: fix bug where renamed tests weren’t updated #13275
OCPBUGS-22284: updating doc links for 4.14 GA #13266
OCPBUGS-22199: Save also the location.search and .hash values in localStorage to restore them after login #13268
OCPBUGS-22213: Fix links for CodeEditor component #13265
OCPBUGS-19970: Workloads-AddPage: upload JAR file’s i18n misses #13264
OCPBUGS-16756: Cluster dropdown items are not marked for i18n when ACM/MCE installed #13238
OCPBUGS-20362: Delete results.tekton.dev annotations before rerun the pipelineRun #13230
OCPBUGS-9422: Telemetry- Current page was sometimes not tracked when reloading the current page #13088
CONSOLE-3740: check that user dropdown is present to verify logged in #13260
CONSOLE-3812: remove packages/ceph-storage-plugin/integration-tests #13249
CONSOLE-3809: remove orphaned OLM Protractor views #13248
OCPBUGS-19783: Channel page shows “Required” message for the default name when navigate to create channel page #13222
OCPBUGS-20229: Service details page shows revisions and routes from other service also #13221
CONSOLE-3766: Update i18next-parser dev dependency in console #13197
CONSOLE-3740: follow-on fixes and cleanup for Cypress upgrade #13242
OCPBUGS-20305: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13236
OCPBUGS-19714: hide page-specific doc links for ROSA and OSD #13229
chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 #13201
OCPBUGS-21616: Fix empty editor error #13176
ODC-7401: Remove protractor from dev-console and knative plugins #13247
ODC-7400: Fix e2e for dev-console, knative, topology, helm and pipeline packages #13231
CONSOLE-3740: Upgrade Cypress #13070
CONSOLE-3758: add support for new features annotations while preserv… #13183
ODC-7396: Add Pipeline metrics tab using plugin #13225
CONSOLE-3084: frontend/packages/console-shared/src/hooks/useCanClusterUpgrade: Not ROSA #13184
CONSOLE-3675: Dynamic Demo Plugin: Add dashboard card with chart using QueryBrowser component #13105
OCPBUGS-20270: Add instructions to the README for running the monitoring plugin locally #13226
OCPBUGS-16736: use setTimeout to allow model to be created #13195
OCPBUGS-4242: Fix CSV list and details page managed namespaces for copied CSVs. #13194
OCPBUGS-19970: Home-Projects-Default-workloads-AddPage: upload JAR file’s i18n misses #13208
OCPBUGS-19966: Builds - BuildConfigs : i18n misses #13211
OCPBUGS-19437: API docs content issue (additional fixes) #13198
ODC-7377, ODC-7378: Add Revisions, Routes and Pods tab for service details page #13174
CONSOLE-3763: Update null-loader dev dependency in console #13154
OCPBUGS-7893: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13077
OCPBUGS-14322: fix ResourceLog permissions when impersonating #13196
ODC-7391: Add a new allowInsecure option to the internet proxy API #13175
OCPBUGS-19743: Fix Invalid URL crash #13192
OCPBUGS-18267: 404 - not found will show on Knative-serving Details page #13156
OCPBUGS-17676: Enable white space retain in resource logs #13101
OCPBUGS-4426: All Projects’ dropdown”: Roles and RoleBindings “before all” hook for “test Roles detail page breadcrumbs to list page restores #13190
OCPBUGS-8777: Don’t redirect after logout from login error route #13102
OCPBUGS-9157: ‘Create Pod’ button should be disabled for normal user … #13040
OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters #13191
OCPBUGS-19437: API docs content issue #13180
OCPBUGS-19546: Set unlimited line width in YAML editor #13182
OCPBUGS-19413: Fix demo dynamic plugin dev mode cypress tests #13172
OCPBUGS-19367: Console should not panic when no response is retrieved for plugin assets #13166
OCPBUGS-19394: document kebab menu cell props #13177
OCPBUGS-13152: fetch TaskRuns without selector and reduces the get TaskRuns requests #13065
OCPBUGS-9719: Correct logout process #10177
OCPBUGS-18832: change resource icon for FenceAgentRemediationTemplate… #13162
OCPBUGS-18996: fix issues with refactored “Create StorageClass” form #13153
OCPBUGS-19173: Updating openshift-enterprise-console images to be consistent with ART #13157
OCPBUGS-11286: Check if filtered object contains name property #12810
OCPBUGS-18464: Hide the Builds NavItem if BuildConfig is not installed in the cluster #13141
OCPBUGS-18494: Upgrade DomainMapping apiVersion to v1beta1 #13133
OCPBUGS-19314: Hide the DeploymentConfig option in the User Preferences if that resource type isn’t available #13130
OCPBUGS-6515: address ConsoleExternalLogLink test flake #13110
OCPBUGS-9285: Remove redundant break line #13109
OCPBUGS-5571: Update API docs content based on docs review #13108
OCPBUGS-3403: Fix resource table sorting crash #13103
OCPBUGS-17203: mock apis for git repo in test serverless function tests #13064
OCPBUGS-19313: Hide DeploymentConfig option from forms when it’s not installed in the cluster #13129
OCPBUGS-19311: Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster #13128
OCPBUGS-18188: Added React Icon #13111
OCPBUGS-18485: Monitoring: Fix display of silenced alerts in dev console #13151
OCPBUGS-6513: Fixed Edit Application form for Knative Services #12832
OCPBUGS-129: bump @patternfly/react-core to v4.276.11 to pick up Sele… #13092
OCPBUGS-18439: use active namespace in Create cta href of create action for operator backed #13132
Full changelog

console-operator

OCPBUGS-46481: Dont disable console when authConfig type is set to None #952
OCPBUGS-34783: set required-scc for openshift workloads #908
OCPBUGS-34012: Cache organization ID #916
OCPBUGS-33788: Tolerate the absence of ingress capability on HyperShift clusters #910
CONSOLE-4047: Console-operator should be internally using listers for fetching data #901
OCPBUGS-33505: Add missing return statement to fix crash in healthcheck controller #900
OKD-214: Dockerfile: Add ARG TAGS=ocp #896
TRT-1664: Revert #895 “CONSOLE-4047: Console-operator should be internally using listers for fetching data” #899
CONSOLE-4047: Console-operator should be internally using listers for fetching data #895
CONSOLE-3943: Default telemetry values #890
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #893
TRT-1623: Revert “Merge pull request #889 from jhadvig/CONSOLE-4014” #892
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #889
OCPBUGS-20129: Fix triggering upgradenotification in the cluster installation time #790
OCPBUGS-20466: Tighten console operator permissions for cluster operators #873
OCPBUGS-32400: base OIDC status updates on the ExternalOIDC feature gate #887
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #868
OCPBUGS-30458: Bump k8s.io/component-base to latest #884
CONSOLE-3944, OCPBUGS-31020: Disable segment analytics when cluster telemetry is disabled #877
CONSOLE-3910: Add quickstart to impersonate a system:admin user #865
OCPBUGS-31482: oidc: synchronize the CM with a CA to trust the issuer, if configured #879
OCPBUGS-29331: Update RHDH QuickStarts and add CR examples #878
OCPBUGS-24913: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.16 #827
OCPBUGS-28541: Remove Janus IDP and update RHDH quickstarts #862
OCPBUGS-29479: Add startupProbe to console container. #869
OCPBUGS-29532: ouathclients: further split oidc and integrated oauth handling #861
CONSOLE-3912: always sync oidcClients in authn status if the field is present #857
OCPBUGS-28982: oauthclients: fix oauthclients degraded condition that never gets removed #855
CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #847
CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #849
OCPBUGS-27335: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #841
CONSOLE-3912: Merge auth cert configmap deployment annotations into one #842
OCPBUGS-25484: make it impossible double set conditions in a single loop #848
CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #839
OCPBUGS-27335: The console-deployment should set the number of replicas based on the ControlPlaneTopology #838
NO-JIRA:(chore) remove unused loglevel #830
OCPBUGS-25484: Bump library-go to deal with GET conflict #836
OCPBUGS-24041: Prevent healthcheck controller from Available=False blipping #834
OCPBUGS-7656: Remove service ca controller annotation from console-redirect service. #826
OCPBUGS-15827: Revert #831 and fix cluster proxy annotation on console conversion webhook deployment #833
Revert #822 “OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher” #831
OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher #822
OCPBUGS-25618: Bump documentationBaseURL to 4.16 #824
OCPBUGS-24913: Updating openshift-enterprise-console-operator-container image to be consistent with ART #823
CONSOLE-3804: Reapply separation of the oauthclients controller #814
CONSOLE-3652: Create StorageVersionMigration for ConsolePlugin CRD v1 migration #816
OCPBUGS-24203: ConsolePlugin metrics must no longer be grouped by the vendor #819
CONSOLE-3791: Add “readOnlyRootFilesystem” to all console conta… #809
OCPBUGS-23300: Disable route controller health check for NLB setup #815
ODC-7418: Add Janus IDP and RHDH Quick starts #806
TRT-1361: Revert #808 “CONSOLE-3804: split oauthclient controller from the common logic” #813
CONSOLE-3804: split oauthclient controller from the common logic #808
CONSOLE-3613: Update vendor bundle after removing multicluster code #810
CONSOLE-3613: Remove multicluster code from console operator #799
OCPBUGS-21972: Disable HTTP/2 for webhook #802
OCPVE-719: feat: add support for olm capability #795
HOSTEDCP-1250: remove redundant cert check #801
CONSOLE-3717: Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests #782
OCPBUGS-19173: Updating openshift-enterprise-console-operator images to be consistent with ART #794
OCPBUGS-19080: Reset console operator’s conditions #796
Full changelog

container-networking-plugins

OCPBUGS-55648: Check error returned by ipv6 SettleAddresses #188
OCPBUGS-37725: Update owners #166
OCPBUGS-32212: modify to invoke SAST test #159
OCPBUGS-28559: Updating ose-containernetworking-plugins-container image to be consistent with ART for 4.16 #150
USHIFT-2219: Dockerfile for MicroShift #153
OCPBUGS-29888: cherry-pick containernetworking/plugins#997 #154
OCPBUGS-24810: Updating ose-containernetworking-plugins-container image to be consistent with ART #146
OCPBUGS-24810: Updating ose-containernetworking-plugins-container image to be consistent with ART #145
OCPBUGS-24810: Updating ose-containernetworking-plugins-container image to be consistent with ART #142
NP-807: Upstream sync Nov 2023 #139
OCPBUGS-21906: Bumps x/net + upstream sync november 2023 #128
OCPBUGS-19127: Updating ose-containernetworking-plugins images to be consistent with ART #122
Full changelog

coredns

OCPBUGS-37078: UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin #127
OCPBUGS-35296: UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 #123
CFE-963: UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order #116
OCPBUGS-31768: UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 #108
CFE-963: UPSTREAM: <carry>: openshift: Add ocp_dnsnameresolver external plugin #115
OCPBUGS-27928: Updating coredns-container image to be consistent with ART for 4.16 #111
OCPBUGS-27397: UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 #109
OCPBUGS-24957: Updating coredns-container image to be consistent with ART #107
OCPBUGS-15755: UPSTREAM: <carry>: openshift: Fix OCPBUGS-15755 #105
OCPBUGS-21936: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #101
OCPBUGS-13968: Merge 1.11.1 #94
OCPBUGS-19216: Updating coredns images to be consistent with ART #95
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43426: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 #303
OCPBUGS-38167: rebase CPO on 4.16 #291
OCPBUGS-13680: Allow changing cluster-name on existing deployments #276
OCPBUGS-29605: Remove enforcement of IPv6 LB as internal #275
NO-JIRA: More snyk ignores #265
don’t use static version in sed replacement rules #2510
bump k8s e2e test to 1.29 #2509
update docs in order to reflect the current state of the ovn lb-provider support #2489
update CSI version #2478
update tags #2204
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
OCPBUGS-30438: Bump protobuf dependency #237
OCPBUGS-38013: Set required-scc for openshift workloads #235
OCPBUGS-28230: enforce termination message policy on all platform pods #229
STOR-1574: Bump all deps #226
OCPBUGS-28934: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 #227
NO-ISSUE: Remove local manifests #208
STOR-1574: Bump library-go #225
OCPBUGS-23809: Bump opentelemetry libs #220
STOR-1714: Release leadership on SIGTERM #223
STOR-1688: Chore: add .snyk file to ignore false positives #218
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #217
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #214
OCPBUGS-24824: Updating csi-driver-manila-operator-container image to be consistent with ART #213
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #212
OCPBUGS-9331: Fix selector for manila-csi-driver-controller-metrics service #210
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #207
OCPBUGS-21940: Update k8s.io/apimachinery and k8s.io/apiserver #206
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #205
OCPBUGS-19166: Updating csi-driver-manila-operator images to be consistent with ART #204
Full changelog

csi-driver-nfs

OCPBUGS-30439: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #139
NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #138
NO-JIRA: Add snyk configuration file #137
OCPBUGS-24952: Updating csi-driver-nfs-container image to be consistent with ART #136
OCPBUGS-24131: Updating csi-driver-nfs-container image to be consistent with ART #135
OCPBUGS-21829: Merge upstream #133
OCPBUGS-21829: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
OCPBUGS-19212: Updating csi-driver-nfs images to be consistent with ART #129
Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #128
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

BUILD-877: BUILD-887: Add konflux config for push and pull request #183
BUILD-961: use separate dockerfile for using catalog images #180
OCPBUGS-33513: Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 #178
OCPBUGS-33511: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 #177
BUILD-957: Update Images with Red Hat Catalog Images #173
BUILD-953: Compare to Other Secret Stores #176
BUILD-953: Simplify README #174
OCPBUGS-30501: bump google.golang.org/grpc to 1.63.0 #172
OCPBUGS-29871: Apply hypershift cluster-profile for ibm-cloud-managed #171
OCPBUGS-28663: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #165
OCPBUGS-27860, OCPBUGS-28261: address SAST/SNYK findings #164
OCPBUGS-26081, OCPBUGS-26114, OCPBUGS-26145: add snyk config file for SAST scan #161
OCPBUGS-24984: Updating ose-csi-driver-shared-resource-container image to be consistent with ART #159
OCPBUGS-25035: Updating ose-csi-driver-shared-resource-mustgather-container image to be consistent with ART #160
OCPBUGS-24903: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART #158
OCPBUGS-24310: Updating ose-csi-driver-shared-resource-container image to be consistent with ART #157
OCPBUGS-24096: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART #156
OCPBUGS-23108: Should reference configmaps instead of secrets #151
OCPBUGS-19155: Updating ose-csi-driver-shared-resource images to be consistent with ART #143
OCPBUGS-21730: bump golang.org/x/net to v0.17.0 #145
OCPBUGS-19291: Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #144
OCPBUGS-19155: Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #142
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #107
STOR-1574: Bump all deps #100
OCPBUGS-28941: Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART for 4.16 #101
OCPBUGS-28664: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #99
STOR-1574: Bump library-go #98
OCPBUGS-26087: add snyk config file for SAST scan #95
OCPBUGS-24855: Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART #94
OCPBUGS-23855: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #93
STOR-1402: Chore: update libraries in all operators [4.15] #92
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #90
OCPBUGS-21724: bump golang.org/x/net to v0.17.0 #85
OCPBUGS-19246: Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #84
Full changelog

csi-external-attacher

STOR-1573: Rebase external-attacher to v4.5.1 for OCP 4.16 #72
OCPBUGS-30437: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #71
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #70
OCPBUGS-25576: Updating csi-attacher-container image to be consistent with ART #69
STOR-1688: Chore: add .snyk file to ignore false positives #68
OCPBUGS-25053: Updating csi-attacher-container image to be consistent with ART #67
OCPBUGS-24966: Updating csi-attacher-container image to be consistent with ART #66
OCPBUGS-24139: Updating csi-attacher-container image to be consistent with ART #65
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1404: Rebase external-attacher to v4.4.0 for OCP 4.15 #58
OCPBUGS-19225: Updating csi-attacher images to be consistent with ART #57
Full changelog

csi-external-provisioner

STOR-1573: Rebase external-provisioner to v4.0.1 for OCP 4.16 #95
OCPBUGS-30442: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #94
OCPBUGS-29971: Updating csi-provisioner-container image to be consistent with ART for 4.16 #93
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #88
OCPBUGS-25492: UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #85
OCPBUGS-25532: Updating csi-provisioner-container image to be consistent with ART #84
STOR-1688: Chore: add .snyk file to ignore false positives #83
OCPBUGS-22528, OCPBUGS-23812: UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs #81
OCPBUGS-25082: Updating csi-provisioner-container image to be consistent with ART #80
OCPBUGS-24804: Updating csi-provisioner-container image to be consistent with ART #79
OCPBUGS-23062: UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #78
OCPBUGS-22528: UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #77
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #71
STOR-1404: Rebase external-provisioner to v3.6.0 for OCP 4.15 #70
OCPBUGS-19114: Updating csi-provisioner images to be consistent with ART #69
Full changelog

csi-external-resizer

STOR-1573: Rebase external-resizer to v1.10.0 for OCP 4.16 #160
OCPBUGS-30502: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #159
OCPBUGS-29984: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 #158
OCPBUGS-25540: Updating ose-csi-external-resizer-container image to be consistent with ART #154
STOR-1688: Chore: add .snyk file to ignore false positives #153
OCPBUGS-24846: Updating ose-csi-external-resizer-container image to be consistent with ART #152
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #146
STOR-1404: Rebase external-resizer to v1.9.0 for OCP 4.15 #145
OCPBUGS-19224: Updating ose-csi-external-resizer images to be consistent with ART #144
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-31746: Backport volumegroupsnapshot fixes to OCP 4.16 #148
OCPBUGS-31439: Backport volumegroupsnapshot fixes to OCP 4.16 #146
STOR-1573: Rebase external-snapshotter to v7.0.1 for OCP 4.16 #145
OCPBUGS-30503: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #144
STOR-1700: Rebase external-snapshotter to v7.0.0 to get VolumeGroupSnapshot #139
OCPBUGS-24996: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #137
STOR-1688: Chore: add .snyk file to ignore false positives #133
OCPBUGS-25548: Updating ose-csi-snapshot-controller-container image to be consistent with ART #135
OCPBUGS-25575: Updating ose-csi-external-snapshotter-container image to be consistent with ART #136
OCPBUGS-24996: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #132
OCPBUGS-25052: Updating ose-csi-external-snapshotter-container image to be consistent with ART #131
OCPBUGS-25124: Updating ose-csi-snapshot-controller-container image to be consistent with ART #130
OCPBUGS-24996: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #129
OCPBUGS-24964: Updating ose-csi-external-snapshotter-container image to be consistent with ART #128
OCPBUGS-24866: Updating ose-csi-snapshot-controller-container image to be consistent with ART #127
OCPBUGS-24330: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #124
OCPBUGS-24338: Updating ose-csi-external-snapshotter-container image to be consistent with ART #123
OCPBUGS-24329: Updating ose-csi-snapshot-controller-container image to be consistent with ART #121
OCPBUGS-24244: Updating ose-csi-external-snapshotter-container image to be consistent with ART #118
OCPBUGS-24160: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #116
OCPBUGS-24244: Updating ose-csi-external-snapshotter-container image to be consistent with ART #117
OCPBUGS-24071: Updating ose-csi-snapshot-controller-container image to be consistent with ART #115
OCPBUGS-23010: UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false #114
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #108
STOR-1404: Rebase external-snapshotter to v6.3.0 for OCP 4.15 #107
OCPBUGS-19260: Updating csi-snapshot-validation-webhook images to be consistent with ART #106
OCPBUGS-19223: Updating ose-csi-external-snapshotter images to be consistent with ART #105
OCPBUGS-19100: Updating ose-csi-snapshot-controller images to be consistent with ART #104
Full changelog

csi-livenessprobe

STOR-1573: Rebase livenessprobe to v2.12.0 for OCP 4.16 #64
OCPBUGS-30440: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #63
OCPBUGS-29972: Updating csi-livenessprobe-container image to be consistent with ART for 4.16 #62
OCPBUGS-25534: Updating csi-livenessprobe-container image to be consistent with ART #58
STOR-1688: Chore: add .snyk file to ignore false positives #57
OCPBUGS-25093: Updating csi-livenessprobe-container image to be consistent with ART #56
OCPBUGS-24815: Updating csi-livenessprobe-container image to be consistent with ART #55
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #49
STOR-1404: Rebase livenessprobe to v2.11.0 for OCP 4.15 #48
OCPBUGS-19132: Updating csi-livenessprobe images to be consistent with ART #47
Full changelog

csi-node-driver-registrar

STOR-1573: Rebase node-driver-registrar to v2.10.0 for OCP 4.16 #70
OCPBUGS-30441: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #69
OCPBUGS-29987: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 #68
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #64
OCPBUGS-25544: Updating csi-node-driver-registrar-container image to be consistent with ART #62
STOR-1688: Chore: add .snyk file to ignore false positives #61
OCPBUGS-25117: Updating csi-node-driver-registrar-container image to be consistent with ART #59
OCPBUGS-23811: UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs #58
OCPBUGS-24856: Updating csi-node-driver-registrar-container image to be consistent with ART #57
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
STOR-1404: Rebase node-driver-registrar to v2.9.0 for OCP 4.15 #50
OCPBUGS-19247: Updating csi-node-driver-registrar images to be consistent with ART #49
Full changelog

docker-builder

OCPBUGS-53076: Upgraded Kubernetes dependency from 1.28.2 to 1.29.0 #468
OCPBUGS-42893, OCPBUGS-42914: buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library #450
OCPBUGS-43186: runc library bump to 1.1.12 #420
OCPBUGS-47775: skipping some unit tests to avoid failures as they are duplicate #424
OCPBUGS-48159: Add team members to the OWNERS file #426
OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
OCPBUGS-35283: Bumps openshift/api & related dependencies #397
OCPBUGS-30672: bump go-jose to fix CVE-2024-28176 #386
OCPBUGS-31930: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #385
OCPBUGS-24746: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #382
BUILD-854: Add adambkaplan as approver #380
OCPBUGS-28661: Replace ‘coreydaley’ with ‘sayan-biswas’ #377
OCPBUGS-23128: bump github.com/containers/buildah to fix transient mounting in chroot isolation #358
OCPBUGS-22497: Add -p flag to cp command to preserve timestamps #369
OCPBUGS-21969: Mitigate CVE-2023-39325 #361
OCPBUGS-20407: drop the Overlay setting from transient mounts #359
OCPBUGS-18855: Updating openshift-enterprise-builder images to be consistent with ART #357
Full changelog

docker-registry

OCPBUGS-49696: bump docker distribution #423
OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
OCPBUGS-35567: use SelfSubjectReview to obtain user info #405
OCPBUGS-34779: Use SAR instead of SSAR #403
OCPBUGS-29233: vendor: bump aws-sdk-go to support ca-west-1 #395
OCPBUGS-29003: update distribution with bugfix #392
OCPBUGS-26173: Updating openshift-enterprise-registry-container image to be consistent with ART #390
OCPBUGS-24902: Updating openshift-enterprise-registry-container image to be consistent with ART #389
OCPBUGS-24902: Updating openshift-enterprise-registry-container image to be consistent with ART #388
OCPBUGS-24095: Updating openshift-enterprise-registry-container image to be consistent with ART #387
CORS-2985: Add support for il-central-1 region in AWS #386
IR-401: pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support #378
OCPNODE-1800: Allow ICSP IDMS coexisting #377
OCPBUGS-19154: Updating openshift-enterprise-registry images to be consistent with ART #379
OCPBUGS-18999: increase rest.Config QPS and Burst #380
Full changelog

driver-toolkit

Adding the + char to the RT kernel version. (#156) #156
ART bash parser is failing on [[…]] syntax Replace with sh compatible syntax. (#152) #152
Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) #150
Use a default RHEL_VERSION when the build argument is not specified (#148) #148
Add importMode and set it to PreserveOriginal to import (#144) #144
MCO-392: Start using rhel-coreos image rather than machine-os-content. (#142) #142
apply hypershift cluster-profile (#143) #143
Add support for 64k pages with ARM64 (#140) #140
Updating driver-toolkit-container image to be consistent with ART (#139) #139
MGMT-16313: Add support for C++ build (#137) #137
Revert “Start using rhel-coreos image rather than machine-os-content (#135)” (#136) #135
Start using rhel-coreos image rather than machine-os-content (#135) #135
Updating driver-toolkit images to be consistent with ART (#134) #134
Full changelog

egress-router-cni

OCPBUGS-35525: update to go 1.21 and k8s.io mods to v0.29.2 #85
OCPBUGS-28581: Updating ose-egress-router-cni-container image to be consistent with ART for 4.16 #80
OCPBUGS-24860: Updating ose-egress-router-cni-container image to be consistent with ART #79
OCPBUGS-18003: Ensure that IP forwarding is enabled #77
OCPBUGS-19258: Updating egress-router-cni images to be consistent with ART #76
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #298
OCPBUGS-34690: Rebase etcd 3.5.14 openshift 4.16 #274
CORS-3191: DOWNSTREAM <carry>: add native binary to installer images #269
CORS-3249: DOWNSTREAM <carry>: installer: make etcd binaries static #268
CORS-3249: DOWNSTREAM <carry>: add installer Dockerfile for ART builds #267
OCPBUGS-31624: Rebase etcd 3.5.13 openshift 4.16 #259
no-issue: Update Installer dockerfile to use golang-1.20 #251
OCPBUGS-28730: Rebase etcd 3.5.12 openshift 4.16 #242
CORS-3191: Add Dockerfile to build etcd for openshift-installer #249
OCPBUGS-24988: Updating ose-etcd-container image to be consistent with ART #236
OCPBUGS-24931: Rebase etcd 3.5.11 openshift 4.16 #237
OCPBUGS-19279: Updating ose-etcd images to be consistent with ART #215
OCPBUGS-20560: [4.15] Rebase openshift/etcd to 3.5.10 #224
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-2463: Adds auth-provider-gcp .spec file and build script #58
OCPBUGS-22598: Merge https://github.com/kubernetes/cloud-provider-gcp:master (58ec6ae) into master #53
OCPBUGS-25754: Add Snyk file to exclude vendor directory on scan #54
OCPBUGS-24044: Merge https://github.com/kubernetes/cloud-provider-gcp:master (522e293) into master #40
OCPBUGS-25581: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART #52
OCPBUGS-24981: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART #48
OCPBUGS-24152: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART #47
OCPBUGS-22043: Bump golang.org/x/net to v0.18.0 #46
OCPBUGS-23094: Fix commit label for commits #41
OCPCLOUD-2185: Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master #36
Update OWNERS #39
OCPBUGS-19243: Updating ose-gcp-cloud-controller-manager images to be consistent with ART #38
OCPBUGS-5755: Reuse instance-groups for internal load balancers #35
Full changelog

gcp-cluster-api-controllers

OCPBUGS-33170: Container fallback to logs on error #224
OCPBUGS-28331: add test directory to snyk excludes #220
OCPBUGS-30586: fix e2e tests on release branches #222
OCPCLOUD-2445: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.6.0 (be17146) into master #221
OCPBUGS-26143: Fix formatting in snyk vendor exclusions #219
OCPBUGS-24875: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART #215
OCPBUGS-25628: Add Snyk file to exclude vendor directory on scan #216
OCPCLOUD-2255: Update manifests-gen tool #214
OCPCLOUD-2256: No-op change to trigger image rebuild #211
Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART #210
OCPCLOUD-2257: Use manifests generation tool from provider repo #209
OCPCLOUD-2218: UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases #208
OCPCLOUD-2218: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master #207
Update OWNERS #201
OCPBUGS-19116: Updating ose-gcp-cluster-api-controllers images to be consistent with ART #200
Full changelog

gcp-machine-controllers

OCPBUGS-55249: Disable shielded VMs for non-UEFI disks #116
OCPBUGS-48484: Refactor exists() to handle gcp API change #106
OCPBUGS-30520: Bump protobuf to v1.34.0 #82
CFE-684: Add user defined tags to the created gcp resource #54
OCPBUGS-27866: Update Snyk file to exclude other vendor folders #81
OCPCLOUD-2427: Rebase k8s to 1.29 and update dependencies #78
OCPBUGS-26128: Add Snyk file to exclude vendor directory on scan #77
OCPBUGS-25578: Updating ose-machine-api-provider-gcp-container image to be consistent with ART #75
OCPBUGS-24970: Updating ose-machine-api-provider-gcp-container image to be consistent with ART #73
OCPBUGS-24143: Updating ose-machine-api-provider-gcp-container image to be consistent with ART #72
OCPBUGS-2117: Add extra check to termination handler #71
MIXEDARCH-258: Set the capacity annotation for arch-aware autoscale from zero #60
Update OWNERS #63
OCPBUGS-21792: Bump x/net package to v0.17.0 #62
OCPCLOUD-2191: Update to Kube 1.28 #59
OCPBUGS-20267: update bad url endpoint termination handler test #61
OCPBUGS-19228: Updating ose-machine-api-provider-gcp images to be consistent with ART #58
Full changelog

gcp-pd-csi-driver

OCPBUGS-30511: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #60
STOR-1581: Rebase to new upstream version 1.13.0 #59
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #58
OCPBUGS-25553: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART #56
STOR-1688: Chore: add .snyk file to ignore false positives #55
OCPBUGS-25138: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART #54
OCPBUGS-24886: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART #53
OCPBUGS-24084: Move builder and base image to RHEL 9 #52
STOR-1392: Rebase to v1.12.2 for OCP 4.15 #50
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #43
OCPBUGS-19134: Updating ose-gcp-pd-csi-driver images to be consistent with ART #42
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #119
OCPBUGS-26924: Add node registrat healthcheck #118
STOR-1574: Bump all deps #116
OCPBUGS-28939: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.16 #117
STOR-1574: Bump library-go #115
OCPBUGS-26486: Increase data source provision timeout #112
STOR-1714: Release leadership on SIGTERM #110
STOR-1688: Chore: add .snyk file to ignore false positives #105
OCPBUGS-25541: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART #106
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #104
OCPBUGS-25113: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART #101
OCPBUGS-23859: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #98
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #100
OCPBUGS-24847: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART #99
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #97
OCPBUGS-22600: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #94
STOR-1276: Enable support for mounting volumes with SELinux context #81
Add clone test for gcp-pd-csi-driver #92
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #93
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #86
OCPBUGS-19229: Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #85
Full changelog

haproxy-router

CFE-1020: feature:route external certificate reference #565
OCPBUGS-29373: generateHAProxyCertConfigMap: No H2 with dup certs #589
OCPBUGS-26498: Optimize Upgrade Validation plugin by skipping unnecessary changes #587
OCPBUGS-26498: Make ingressConditionsEqual more efficient #588
OCPBUGS-29690: Count active services before setting weight to 1 #576
“OCPBUGS-26498: Add Upgrade Validation force arguments for running E2E tests” #575
OCPBUGS-26498: Reject routes with SHA1 certs #552
OCPBUGS-26498: Upgrade Validation plugin for SHA1 certs #555
OCPBUGS-32044: Introduce ‘idle-close-on-response’ option for frontends #573
OCPBUGS-22739: Properly handle rewrite-target annotation #534
NO-JIRA: hack/Dockerfile.debug: use ubi9 for base image #567
OCPBUGS-30314: Refactor logging in DoHTTPProbe to avoid serialisation errors #566
NE-1444: Bump HaProxy to the latest version 2.8 #563
TRT-1507: Revert #551 “NE-1444: Upgrade OpenShift Router to HAProxy 2.8” #561
NE-1444: Upgrade OpenShift Router to HAProxy 2.8 #551
OCPBUGS-26539: Reject routes with MD5 certs #553
OCPBUGS-25546: Updating ose-haproxy-router-base-container image to be consistent with ART #550
NO-JIRA: hack - fix broken RPM link and use UBI image in Dockerfile.debug, use podman in Makefile.debug #544
OCPBUGS-25029: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART #547
NE-1446: Update to RHEL9 base image #548
OCPBUGS-24859: Updating ose-haproxy-router-base-container image to be consistent with ART #546
OCPBUGS-23743: Bump k8s.io/* packages to v0.28.3 #542
OCPBUGS-21973: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #529
OCPBUGS-21803: haproxy-template: Add ‘no strict-limits’ to address HAProxy 2.6 issue #527
OCPBUGS-19287: Updating openshift-enterprise-haproxy-router images to be consistent with ART #513
OCPBUGS-19249: Updating ose-haproxy-router-base images to be consistent with ART #512
OCPBUGS-16707: UniqueHost: Fix incorrect identification of conflicting route #508
Full changelog

hyperkube, pod

OCPBUGS-49906: Bump k8s api to 1.29.14 #2211
OCPBUGS-45931: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 #2200
OCPBUGS-46003: Bump k8s api to 1.29.11 #2161
OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
NO-JIRA: update downstream owners #2049
OCPBUGS-37621: Bump k8s api to 1.29.7 #2039
OCPBUGS-19802: Bump 4.16 runc #2032
OCPBUGS-35551: Bump k8s 1.29.6 #1990
OCPBUGS-34545: UPSTREAM: <carry>: Disable PersistentVolumeLabel by default #1993
OCPBUGS-35291: Backport 125337 #1989
OCPBUGS-27074: UPSTREAM: <carry>: extend termination events #1980
OCPBUGS-34545: UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel #1985
OCPBUGS-33710: Bump k8s API to 1.29.5 #1972
UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries #1978
OCPBUGS-33574: bump openshift/library-go@e22d25a #1967
OCPBUGS-32934: UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods #1966
no-jira: UPSTREAM <carry>: add native build to installer image #1961
API-1809: Provide SCC access via RBAC #1959
NO-JIRA: UPSTREAM: <carry>: Revert create readyz event for kubeapi server #1957
OCPBUGS-20097: Migrate tools image to RHEL9 #1954
OCPBUGS-32296: Bump K8s api to 1.29.4 #1947
OCPBUGS-22301: UPSTREAM: <carry>: Fix garbage-collection for CRDs. #1811
OCPBUGS-26440: UPSTREAM: <carry>: create readyz event for kubeapi server #1914
UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads #1902
CFE-910: RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator #1904
NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL #1944
CFE-910: bump library-go #1941
OCPBUGS-11933: UPSTREAM: <drop>: bump apiserver-library-go #1910
OCPBUGS-31663: UPSTREAM: <carry>: add management workload check for guaranteed qos #1928
OCPBUGS-30957: Use the right feature gate when updating uncertain … #1919
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1932
OCPNODE-1886: Bump k8s 1.29.3 #1925
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1929
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1924
OCPBUGS-30767: UPSTREAM: 124110: retry policy creation for CRD type checking E2E test #1922
OCPBUILD-13: UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated #1909
CFE-910: [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver #1852
UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check #1892
OCPBUGS-30954: Set up CEL IP/CIDR library from 4.14 onwards #1911
OCPBUGS-24481: Enable SELinux tests #1908
MCO-392: openshift-hack/images/os: delete #1805
OCPBUGS-23900: UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers #1900
OCPBUGS-10996: Fix race condition between resizer and kubelet #1899
OCPBUGS-29437: Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages #1882
OCPNODE-1892: Bump k8s to 1.29.2 #1888
NO-JIRA: Clean carry patches #1880
OCPBUGS-29435: UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… #1881
CORS-3191: Add Dockerfile to buld kube-apiserver for openshift-install architectures #1872
NO-JIRA: Revert “OCPBUGS-24404: add ignore for SAST scan” #1870
OCPBUGS-24404: UPSTREAM <carry>: use snyk file #1871
OCPBUGS-26058: UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions #1841
OCPBUGS-16760: permanently disable NodeLogQuery e2e test #1792
OCPNODE-1892: Bump k8s to 1.29.1 #1858
OCPNODE-1892: Switch to golang 1.21 #1845
OCPBUGS-24606: UPSTREAM: <carry>: Update management webhook pod admission logic #1821
OCPNODE-1892: UPSTREAM: <carry>: update test rules #1849
OCPBUGS-17249: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1787
OCPNODE-1892: UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies #1848
OCPBUGS-23896: Fix device uncertain errors on reboot #1829
OCPBUGS-24404: add ignore for SAST scan #1824
AUTH-439: loosen authentication.spec.type validation #1770
OCPNODE-1892: UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade #1846
OCPBUGS-26067: Backport CEL IP and CIDR validations #1828
OCPNODE-1892: Bump k8s api to 1.29.0 #1840
OCPNODE-1895: temporarily disable reporting e2e text bugs #1836
OCPNODE-1892: Rebase 1.29.0 #1815
CNF-8809: admission: add new admission for handling shared cpus request #1799
CNF-8326: advertise shared cpus for mixed cpus feature #1795
OCPBUGS-23565: Update to kubernetes 1.28.4 #1806
OCPBUGS-23073: .spec.numberOfUsersToReport is not correctly applied in some circumstances #1794
OCPBUGS-22724: UPSTREAM: 121881: Use golang library instead of mklink #1800
OCPBUGS-16922: Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions #1790
Update REBASE.openshift.md #1788
STOR-1278: Fixes for SELinux mount context metrics #1771
Update to Kubernetes v1.28.3 #1776
openshift-hack: Fix sporadic 141 errors in build-rpms #1769
UPSTREAM: <carry>: support for both icsp and idms objects #1685
OCPBUGS-21584: UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1757
Do not allow nodes to set forbidden openshift labels #1735
OCPBUGS-20096: bump pause image to RHEL9 #1734
Revert #1731 “Revert #1703 “Update builder & base images”” #1732
Revert #1703 “Update builder & base images” #1731
Update builder & base images #1703
UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) #1726
OCPBUGS-19666: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1724
OCPBUGS-17534: UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 #1711
UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier #1714
OCPBUGS-19452: UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes #1716
Update to new openshift/* dependencies #1704
STOR-1425: Update to Kubernetes 1.28.1 #1646
OCPBUGS-16080: UPSTREAM: <carry>: watch-termination: termination.log file #1638
UPSTREAM: <carry>: disable test removed in 1.28 #1698
<carry>: Export cpu stats of ovs.slice via prometheus #1686
OCPBUGS-17654: cm: reorder setting of sched_load_balance for sandbox slice #1665
Full changelog

hypershift

OCPBUGS-51804: Fix golang crypto dependency go.mod replacement #5994
OCPBUGS-54914: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6026
OCPBUGS-54632: Sync RBAC for attaching volumes on VM level #5998
OCPBUGS-49914: Reconcile proxy CA bundle into hosted cluster #5983
OCPBUGS-53902: bump golang-jwt v4 and v5 #5907
Red Hat Konflux update control-plane-operator-4-16 #5957
ART-11792: update go mod dependency for konflux #5922
OCPBUGS-51733, OCPBUGS-51804: Bump dependencies to OCP fork in backports #5901
OCPBUGS-53308: fix(deps): bump go-jose #5866
OCPBUGS-52506: refactor aws identity health check into new controller #5781
OCPBUGS-52857: Make managed-trust-bundle optional #5809
OCPBUGS-52426: change plaform to platform #5773
OCPBUGS-50993: Honor proxy vars in the util insecure http client #5662
OCPBUGS-46466: Consistently look up and dial cloud API hostnames #5301
OCPBUGS-50698: add region to AWS creds passed to operators managed by CPO #5670
OCPBUGS-51296: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5707
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5686
OCPBUGS-50694: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5620
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5635
OCPBUGS-50557: Prevent IgnitionServer from flooding the API server with patch requests #5599
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 #5597
NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 #5591
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5587
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 #5574
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5575
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 #5531
NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 #5532
OCPBUGS-49640: fix overwriting PKI operator HCP conditions #5506
NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned #5484
NO-JIRA: chore(deps): update konflux references (release-4.16) #5477
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) #5437
NO-JIRA: Update Konflux references (release-4.16) #5431
NO-JIRA: chore(deps): update konflux references (release-4.16) #5384
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) #5298
NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net #5370
NO-JIRA: Update Konflux references (release-4.16) #5328
NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 #5337
OCPBUGS-47539: Separate CPO containerfiles #5333
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) #5295
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) #5297
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) #5294
NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) #4600
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) #4602
chore(deps): update konflux references (release-4.16) #4599
OCPBUGS-38942: copy oapi ca-trust recursively when building trust anchor #4615
NO-JIRA: Flaky cert validation test #4622
OCPBUGS-38259: Set KCM node monitor grace period #4520
OCPBUGS-38726: fix: bump github.com/IBM/go-sdk-core/v5 #4611
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4541
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) #4525
OCPBUGS-36781: Set Azure VM identity if user assigned identity set #4341
OCPBUGS-37936: set proxy envvars on aws and azure CCMs #4476
OCPBUGS-38486: hcco: reconcile apiserver config into hosted cluster #4559
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4534
OCPBUGS-38131: Let the CPO oidc check resolve through data plane #4505
NO-JIRA: test: relax mgmt KAS egress check #4561
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) #4528
chore(deps): update golang docker tag to v1.22 (release-4.16) #4527
NO-JIRA: Update Konflux references (release-4.16) #4524
OCPBUGS-34801: remove weak ciphers from security profile #4518
OCPBUGS-37060: OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates #4366
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.16) #4482
NO-JIRA: chore(deps): update konflux references (release-4.16) #4481
OCPBUGS-37065: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4367
OCPBUGS-30282: Multiple MachineConfigs in one CM #4398
OCPBUGS-36937: [release-4.16] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4357
OCPBUGS-36766: Delete IDMS in dataplane once HCP ICS field is removed #4434
NO-JIRA: Konflux migration for release-4.16 #4436
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.16) #4430
HOSTEDCP-1569: test: e2e: skip unknown conditions instead of erroring #4440
OCPBUGS-37645: Set right endpointSlice port #4431
OCPBUGS-37214: Separate ibmcloud kms encryption configuration types #4380
OCPBUGS-37302: fix(api): Nodepool CEL validation fix #4395
NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 #4392
OCPBUGS-37241: extract rhel9 MCO binaries for rhel8 based MCO images #4383
NO-JIRA: [release-4.16] test/e2e: remove api budget checks #4368
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned #4364
NO-JIRA: trivial typo fixes to configuring-storage.md #4353
OCPBUGS-36849: Add newline after TLS certs referenced by image.config #4352
OCPBUGS-36589: Fix Hypershift dump for non-OpenShift Management Clusters #4317
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.10-1.1719562237 (release-4.16) - abandoned #4328
OCPBUGS-36358: enable audit log for oauth-openshift #4302
OCPBUGS-35522: Copy infra-volumesnapshot-class-mapping to core binding #4291
NO-JIRA: chore(deps): update konflux references (release-4.16) #4299
OCPBUGS-36227: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4276
OCPBUGS-35341: [release-4.16] Fixed ValidReleaseInfo condition #4204
OCPBUGS-36220: Make guest cluster components use the correct KAS port #4275
OCPBUGS-35934: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4264
NO-JIRA: chore(deps): update konflux references (release-4.16) #4260
OCPBUGS-34545: Disable PersistentVolumeLabel admission plugin #4241
OCPBUGS-35838: Remove KMS V1 provider support for IBM Cloud #4250
NO-JIRA: chore(deps): update konflux references (release-4.16) #4251
OCPBUGS-35369: OCPBUGS-35252: Enforce Privileged Instead of Restricted PSA in 4.16 #4193
NO-JIRA: chore(deps): update konflux references (release-4.16) #4245
OCPBUGS-35557: Complete KAS migration to none endpoint reconciler type #4227
NO-JIRA: chore(deps): update konflux references (release-4.16) #4238
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4230
OCPBUGS-35268: Add hypershift-cluster-version-operator image to release providers #4185
NO-JIRA: chore(deps): update konflux references (release-4.16) #4235
NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 #4233
OCPBUGS-35056: Generate default worker security group rules based on machineCIDR #4174
OCPBUGS-35369: OCPBUGS-35252: vendor: bump openshift/api #4197
NO-JIRA: hack: make the e2e script generic #4198
OCPBUGS-35308: fix router on 4.14 y-stream upgrade #4194
HOSTEDCP-1715: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 #4177
HOSTEDCP-1570: remove liveness and readiness probes using metrics endpoint #4116
OCPBUGS-35052: Add missing Tag permissions to cli role #4173
OCPBUGS-34903: Allow access to root-ca configmap in cluster-network-operator role #4155
OCPBUGS-34575: Rename machine-config operator CRD references #4105
OCPBUGS-34759: add AWS STS URL to OIDC provider audiences #4134
HOSTEDCP-1688: Use operator namespace for openshift-config-managed-trusted-ca-bundle #4117
OCPBUGS-34801: remove weak cipher #4139
OCPBUGS-34773: Fix disconnected metadata inspection for nodepool #4137
OCPBUGS-34569, OCPBUGS-34602: Backports that should go in together #4114
OCPBUGS-34542: Reconcile KAS endpoints and endpoint slice #4096
OCPBUGS-34554: Fixed audit-logs sigterm failing to terminate gracefully #4090
OCPBUGS-34390: Add TrustedBundles to OAS container #4087
HOSTEDCP-1561: Move HCP Product CLI to STS #4092
HOSTEDCP-1556: Support Priority based expander for cluster-autoscaler #4068
OCPBUGS-34171: Make active & backup Azure KMS containers use different –metrics-addr #4079
NO-JIRA: Bump library-go dependency #4069
TRT-1672: e2e: proceed with teardown even if dump fails #4052
NO-JIRA: Update RHTAP references #4042
OCPBUGS-33729: Do not ignore single placeholder pods for a specific hosted cluster #4037
HOSTEDCP-1668: remove dns-operator leader-elect flags #4038
OCPBUGS-33595: Cluster sizing controller: do not error on not found HC #4023
HOSTEDCP-1655: Don’t Ignore SubnetID and Network Security Group ID flags when values are passed through #4021
HOSTEDCP-1518: Preserve container resource requests and limits #3864
HOSTEDCP-1310: use kms images from payload #3996
OCPBUGS-32257: Restrict image registry overrides to control plane components #3952
HOSTEDCP-1560: Create AWS STS Role for the hypershift/hcp cli #4003
HOSTEDCP-1566: Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies #4012
HOSTEDCP-1566: Bump CAPI dependencies #4011
OCPBUGS-33320: Fix nil dereference in clustersizingconfig validation #4016
HOSTEDCP-1525: Fixed azure using incorrect kms socket #3981
HOSTEDCP-1563: Refine the Azure API in the NodePool Spec #4004
OCPBUGS-33320: Autoscaler for non request serving nodes #4007
HOSTEDCP-1557: Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config #4006
NO-JIRA: Remove CLI inspection of release image #3548
OCPBUGS-33237: Run haproxy to connect to kas from data plane if noproxy settings contain kas #3999
OCPBUGS-26762: Disable DNS resolving for CNO #3986
MULTIARCH-4637: Set arch to ppc64le within PowerVS platform func #4002
MULTIARCH-4637: Support ppc64le arch for Agent and PowerVS platform #3979
HOSTEDCP-1544: Allow user to specify subnet ID for Hosted Cluster & NodePool Creation #3945
CNV-36073: Set time out for external snapshotter on kubevirt csi driver #3968
HOSTEDCP-1523: Bump k8s to v0.29.3 #3878
OCPBUGS-25012: Updating ose-hypershift-container image to be consistent with ART #3303
OCPBUGS-33203, OCPBUGS-33274: Autoscaler: scale down unused machinesets #3988
NO-JIRA: chore(deps): update rhtap references #3973
HOSTEDCP-1513: Add operator scoping support to nodepool controller #3928
OCPBUGS-33132: Restore ingresscontroller rbac #3965
NO-JIRA: sizing: add logging for what we’re doing #3961
chore(deps): update rhtap references #3966
NO-JIRA: Minor doc updates to creating Azure HC on AKS #3964
OCPBUGS-29110: Reconcile over ICSP/IDMS #3933
OCPBUGS-33101: Fix nil pointer deref when effects not specified in CSC #3959
OCPBUGS-32110: disable OCM pull secret controller when imageregistry config managementstate is Removed #3906
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3956
OCPBUGS-31398: Recycler-pod image now points to the OCP Payload reference #3901
HOSTEDCP-1525: Support Azure KMS key rotation #3940
CNV-40687: Detect machine and cluster-network cidr collision #3880
OCPBUGS-32930: Allow specifying resource requests per cluster size #3941
OCPBUGS-32760: Request serving scheduler: omit deleting nodes #3929
OCPBUGS-14383: fix setting replicas on autoscaler #3947
OCPBUGS-32378: Ensure placeholder deployments are deleted #3931
OCPBUGS-32255: Remove kube-scheduler readiness probe #3889
HOSTEDCP-1484: Disaster recovery documentation with OADP #3950
OCPBUGS-32492: Set ImportMode for catalog #3937
HOSTEDCP-1522: Add API definitions and CEL for AzurePlatformSpec vars #3879
NO-JIRA: Kubevirt on Azure: Change KAS LB Port to 7443 #3821
chore(deps): update rhtap references (main) #3943
OCPBUGS-30260: Ignore subnet annotations for control plane load balancers #3944
OCPBUGS-32759: Fix invalid node selector in autosizing placeholder #3930
HOSTEDCP-1044: Add NodePool Size/Replicas to Telemetry #3593
NO-JIRA: remove obsolete konnectivity image code #3932
HOSTEDCP-1219: Add arch & multi-arch flags to HCP CLI #3926
NO-JIRA: reduce autoscaling test memory requests #3938
NO-JIRA: chore(deps): update rhtap references #3934
ACM-11259: Add mapping documentation for KubeVirt CSI driver snaphotting #3925
OCPBUGS-32496: Controller to assist autoscaling for placeholder nodes #3922
Revert “Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters”” #3895
chore(deps): update rhtap references #3919
OCPBUGS-32487: Fix OLM intilization args #3918
OCPNODE-2096: Add ClusterImagePolicy to the list of valid config manifests #3894
CNV-36073: KubeVirt, Add snapshot side car and volumesnapshot class #3640
NO-ISSUE: placeholders: ignore auto-sizer placeholders #3877
OCPBUGS-32228: Fix failure to create a second hostedcluster in the same namespace #3900
OCPBUGS-32248: Replace periods with commas in subnet label value #3885
chore(deps): update rhtap references #3886
HOSTEDCP-1462: set HostPath.Type on volumesource in CloudNodeManagerD… #3892
NO-JIRA: fixed e2e teardown failing the outer test instead of subtest #3891
HOSTEDCP-1519: feat(api): Add ingress-controller-load-balancer-scope annotation #3848
NO-JIRA: remove ovnkube-control-plane from expected component token m… #3850
CNV-40622: Docs: Avoid cidr Collisions b/w Infra &Guest cluster #3863
NO-JIRA: Disable kubevirt-csi crash detection in e2e #3896
Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters” #3890
HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters #3688
chore(deps): update rhtap references #3872
OSD-19085: Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric #3697
NO-ISSUE: *: use the api package constant for the size label #3876
NO-JIRA: bump capk ci image #3830
NO-JIRA: chore(deps): update rhtap references (main) #3867
OCPBUGS-29466: Fix ICSP and IDMS inclusion as registriesOverrides #3862
STOR-1805: Set RUN_AS_USER if mgmt cluster doesn’t have SCC #3819
OCPBUGS-29494: Fix disconnected metadata inspection #3860
OCPBUGS-31012: Disable audit-log container in kas when profile is None #3765
NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster #3854
NO-JIRA: update private cluster IAM policy doc #3851
NO-JIRA: chore(deps): update rhtap references (main) #3856
OCPBUGS-14383: disable autoscaler when no nodepool requires it #3846
NO-JIRA: Document additional known issues for the disconnected scenario #3611
NO-JIRA: Update RHTAP references (main) #3834
OCPBUGS-29391: Add new permission required in CAPA #3779
CNF-11885: nto: add events resources under operator Role #3827
OCPBUGS-31444: use dnsPolicy: Default for konnectivity-agent in data plane #3810
NO-JIRA: docs: fixing wrong key name #3833
NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… #3837
OCPBUGS-31725: include hostnetwork SCC CPO role for 4.13 and earlier #3838
HOSTEDCP-1511: enable and document kubevirt custom default network #3832
HOSTEDCP-1513: Support annotation scoping for hostedcluster resources #3702
OCPBUGS-31415: update desired image even when HCP doesn’t exist yet #3829
NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. #2707
OCPBUGS-31585: disable http2 for ignition server and proxy #3817
OTA-1211: api/v1beta1/hostedcluster_types: Add spec.updateService #3576
HOSTEDCP-1365: kubevirt, Generate kccm lb endpointslices #3528
NO-JIRA: Add –auto-repair flag to hcp create nodepool #3163
NO-JIRA: Set control plane to HA by default #3788
NO-JIRA: Fix docs commands related to Azure ephemeral OS disks #3809
Update RHTAP references #3814
NO-JIRA: Documentation overview of HCP KubeVirt Storage #3763
OCPBUGS-31465: remove max function usage from deicated request serving nodes #3815
OCPBUGS-31106: Reduce log file size for hypershift apiservers #3781
HOSTEDCP-1462: Enable TestNodePool and CreateCluster tests on Azure #3732
OCPBUGS-31319: copy issuerCertificateAuthority configmap into HC openshift-config #3799
HOSTEDCP-1478: Request serving node scheduler that uses HC size label #3776
OCPBUGS-31076: Support other azure clouds #3804
OCPBUGS-31110: Fix empty RHCOSImage error when creating Azure Infrastructure #3782
HOSTEDCP-1104: Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server #3797
OCPBUGS-13726: fix race between ignition payload generation and MCS configmap update #3795
NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools #3752
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 #3710
OCPBUGS-31089: Fix empty resourceGroupName error when deleting Azure infra #3775
OCPBUGS-31090: Fix empty subnet name error when creating Azure infrastructure #3778
OCPBUGS-31263: Add missing PodSecurityViolation alert #3733
OCPBUGS-31118: fix(ignition): Fix priority class override #3784
OCPBUGS-31088: Fix loopvar issue #3770
Update RHTAP references #3790
HOSTEDCP-1104, HOSTEDCP-1105: Validate multi-arch aspects in an AWS Hosted Cluster #3769
HOSTEDCP-1501: Create default ClusterSizingConfig CR on start #3787
NO-JIRA: Remove unused ref to hostnetwork in cpo role #3789
OCPBUGS-30930: Add CEL validation for NodePool autoScaling / replicas #3786
OCPBUGS-31102: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3780
NO-JIRA: Adding Disable PKI Reconciliation annotation as an option #2989
OCPBUGS-30991: external OIDC: fix certificateAuthority field in structured auth config #3773
HOSTEDCP-1429: Add install flag to enable/disable size tagging #3766
OCPBUGS-30968: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3760
HOSTEDCP-1487: Add managed service constants to HyperShift API #3762
OCPBUGS-30260: Support subnet labels separated by periods #3767
HOSTEDCP-1429: hypershift-operator: wire up placeholder pods for sizes #3749
NO-JIRA: Increase stability in autoscaled environments #3757
NO-JIRA: Bump HO read budget in e2e to 6000 #3761
HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation #3743
HOSTEDCP-1467: ARO HCP - Add ability to specify subnet at nodepool level #3748
NO-JIRA: Update RHTAP references #3753
OCPBUGS-30260: Support specifying AWS LB subnets #3746
HOSTEDCP-1487: Add ability to set managed service type in HO #3736
NO-ISSUE: hypershift-operator: react to hosted cluster changes #3735
HOSTEDCP-1429: hypershift-operator: add a controller for t-shirt sizing #3686
HOSTEDCP-929: Add nodepool annotation to allow requesting IMDSv2 #3584
NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget #3745
OCPBUGS-30320: speed up HCP rollout durations #3734
STOR-1805: Set env var when the mgmt cluster supports SCC #3701
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3742
NO-JIRA: Update RHTAP references #3737
OCPBUGS-30242: consider nigthly images in payoad version check #3727
OCPBUGS-28634: Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES #3687
HOSTEDCP-1478: Support additional node selectors for request serving nodes #3729
Revert “HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation” #3731
OCPBUGS-13726: honor HC image configuration #3714
HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation #3689
OCPBUGS-30769: include node local client loadbalancer address in kube-apiserver signing ips #3699
NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline #3728
HOSTEDCP-1460: Remove resource limits on azure-cloud-node-manager #3725
HOSTEDCP-1479: Update IBM/networking-go-sdk package #3722
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #3718
NO-JIRA: Fixes Dependabot PR #3712 #3716
HOSTEDCP-1466: support/metrics: don’t filter HCCO metrics #3715
MCO-392: ignition-server/controllers: drop MCSIgnitionProvider #3709
HOSTEDCP-1469: Set GOMEMLIMIT annotation based on request serving node label #3708
OCPBUGS-30574: Update OLM Default Catalog Sources to 4.16 on main #3707
chore(deps): update rhtap references #3704
OCPBUGS-30242: Use cluster-config-operator for 4.14 payload #3685
NO-JIRA: Dependabot#3659 #3665
Revert “NO-JIRA: test/e2e: temporarily skip NTO machineconfig test” #3700
NO-JIRA: cleanup: nilness check failures #3698
HOSTEDCP-1464: Add pull secret to install CLI & create k8s secret #3682
OCPBUGS-30060: Set OPERATOR_IMAGE environment variable #3667
OCPBUGS-28370: Use correct return error when destroying AWS SG #3661
OCPBUGS-30301: [kubevirt] Fix virt-launcher netpol to allow missing access #3680
OCPBUGS-30124: do not set KAS OAuthMetadataFile with Authentication type OIDC #3678
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update #3658
NO-JIRA: Bump the golang-dependencies group with 1 update #3657
chore(deps): update rhtap references #3674
NO-JIRA: test/e2e: temporarily skip NTO machineconfig test #3683
NO-JIRA: chore(deps): update rhtap references #3671
NO-JIRA: Remove specific pull secret watch in HCCO #3605
OCPBUGS-30102: Support to disable machine management components #3570
NO-JIRA: Minor cleanup of Azure create cluster document #3663
NO-JIRA: chore(deps): update rhtap references #3650
OCPBUGS-29613: test: add a test for invalid CSRs #3612
NO-JIRA: test: skip CCO in pod crash check #3652
OCPBUGS-29773: set Konnectivity cipher suites #3618
OCPBUGS-30030: rollout kas on auth config change #3647
NO-JIRA: test: increase CPO mutate budget #3649
NO-JIRA: test: debug certificates on unauthz error #3642
NO-JIRA: Remove replace statements #3631
NO-JIRA: DEPENDABOT#3613 #3617
NO-JIRA: chore(deps): update rhtap references #3638
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates #3636
NO-JIRA: Bump the misc-dependencies group with 5 updates #3634
OCPBUGS-28370: Skip SG deletion if it has dependancy violation #3622
NO-JIRA: Update RHTAP references #3621
NO-JIRA: Update RHTAP references (main) #3623
OCPBUGS-23457: Switch to use service endpoint for Konnectivity #3627
OCPBUGS-27180: Update the oauth API server’s shutdown delay duration #3608
NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) #3600
OCPBUGS-29855: feat(ho): Add flag for dedicated request serving isolation #3601
OCPBUGS-28607: feat(config): Default RevisionHistoryLimit to 2 for deployments #3477
NO-JIRA: adjust pdb for oauth-apiserver #3619
OCPBUGS-29645: control-plane-pki-operator: fix CA used for SRE client credentials #3615
HOSTEDCP-1424: ARO HCP Support Disabling Outbound SNAT #3583
NO-JIRA: always set minAvailable on PDBs to 1 #3616
OCPBUGS-29723: CLI: create nodepool aws - remove sg requirement #3614
NO-JIRA: Bump the misc-dependencies group with 15 updates #3609
NO-JIRA: Ignore kubectl version mistmaches in Component Versions #3575
NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates #3598
OCPBUGS-28538: Add an SCC for validation pods with Cilium SDN #3602
NO-JIRA: chore(deps): update rhtap references #3603
HOSTEDCP-1411: Add capability to specify additional tags to azure resource… #3490
NO-JIRA: chore(deps): update rhtap references #3590
OCPBUGS-29435: Use structured authentication config #3574
HOSTEDCP-1428: hcco: report node count on HCPs #3557
HOSTEDCP-1436: Make nodepool.spec.aws.subnet required #3581
OCPBUGS-29586: use 2040 for apiserver svc in IBM provider #3569
HOSTEDCP-1438: Preserve container resources for more hosted control plane components #3120
NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements #3585
NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector #3464
NO-JIRA: remove dead code from kas config #3578
OCPBUGS-29115: Default NodeUpgradeType on day2 nodepool creation #3572
Revert “CNV-36608: Enable InPlace NodePool upgrade test for kubevirt” #3547
NO-JIRA: Update RHTAP references #3577
OCPBUGS-28538: Added docs to get other sdn providers deployed with agent provider #3405
Update RHTAP references #3568
CNF-6516: NTO: Enable PerformanceProfile #1782
OCPBUGS-29209: hypershift-operator: don’t create PKI rbac when disabled #3544
OCPBUGS-29104: control-plane-pki-operator: add a signer for SRE break-glass #3542
NO-ISSUE: test: wait longer for certificate signing, revocation #3560
NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues #3562
NO-JIRA: Developer namespace template for CI clusters #3561
HOSTEDCP-1419: Always include AWS default security group in worker security groups #3527
HOSTEDCP-1407: Add steps for seting up azure CI cluster #3545
Update RHTAP references (main) #3546
HOSTEDCP-1420: Set a fixed minimum supported version #3525
NO-JIRA: Update RHTAP references #3518
OCPBUGS-29103: control-plane-pki-operator: validate CN for CSR #3538
NO-JIRA: stevekuznetsov approver on CPPO and integration tests #3540
NO-JIRA: Fix issue with release note tool #3429
HOSTEDCP-336: Hypershift API separation #3390
HOSTEDCP-1344: control-plane-pki-operator: add a revocation controller #3339
CNV-36608: Enable InPlace NodePool upgrade test for kubevirt #3517
OCPBUGS-27282: Make ControllerAvailabilityPolicy immutable #3513
NO-JIRA: remove unneeded code to copy Authentication refs #3512
OCPBUGS-28659: Add ValidatingAdmissionPolicy to KAS config #3488
OCPBUGS-28741: Fix default release image lookup #3450
NO-JIRA: Add app labels to KubeVirt CCM component #3510
MULTIARCH-4084: Reduce the policy access scope to specific instance #3491
NO-JIRA: Bump the misc-dependencies group with 5 updates #3503
OCPBUGS-28625: cpo: honor user provided oauthmetadata configmap passed in Authentication config #3511
NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools #3505
Update RHTAP references (main) #3508
OCPBUGS-28763: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used #3494
OCPBUGS-28601: Remove webhook validations that introduce resource ordering #3484
NO-JIRA: manifests: Skip pod anti affinity for nil labels #3507
MULTIARCH-3882: Support PER solution for powervs platform via transit gateway #3277
HOSTEDCP-1408: Update CAPZ Identity Type to Service Principal #3501
OCPBUGS-27161: reflect NodePool replica count nil in status #3472
NO-JIRA: Fix dependabot pr 3414 #3453
NO-JIRA: kubevirt, e2e, Add additional network test #3449
NO-JIRA: remove PrivateIngressController cleanup #3489
HOSTEDCP-1373: ARO HCP - Add capability for Azure VMs to be created with ephemeral disks #3483
NO-JIRA: contrib: add code for aws-tag-lb-service-webhook #3493
NO-JIRA: Bump the misc-dependencies group with 3 updates #3486
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update #3469
HOSTEDCP-1364: kubevirt, use selector less services for ingress #3343
OCPBUGS-22899: node spread anti-affinity for HA HCP #3286
NO-JIRA: Bump the misc-dependencies group with 17 updates #3476
HOSTEDCP-1401: Enable BYO NSG #3455
NO-JIRA: Update go-jose to the latest version to fix CVE #3475
HOSTEDCP-1344: re-revert api stuff #3463
OCPBUGS-26940: Include OperatorHubSpec sync with HC when Config is empty #3454
NO-JIRA: Simplified kubectl component version check #3458
NO-JIRA: Remove ‘–attach-default-network’ from productized cli #3462
NO-JIRA: Tolerate restarts for kubevirt external infra #3451
NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 #3466
OCPBUGS-27366: indicate cluster profile to render the correct manifests #3443
OCPBUGS-26977: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3403
TRT-1456: Revert #3448 “api: move CSRA to a new group” #3460
HOSTEDCP-1344: api: move CSRA to a new group #3448
HOSTEDCP-1397: Add documentation on how to debug Azure nodes #3452
NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images #3426
HOSTEDCP-1308: Add e2e to ensure SA token not mounted on mgmt workloa… #3301
NO-JIRA: Fix promql testdata missing issue #3438
NO-JIRA: Update RHTAP references (main) #3446
HOSTEDCP-1188: Add docs for control plane scheduling topologies #3434
HOSTEDCP-1283: Set outbound LoadBalancer name on AzureCluster #3445
NO-JIRA: Bump misc dependencies 21f825371d #3433
HOSTEDCP-1207: Automated etcd backup #3034
NO-JIRA: Document machine configuration in HyperShift #3331
HOSTEDCP-1382: [Subtask] Restore Ability to Create HCPs on Azure #3404
HOSTEDCP-1314: Ensure all e2e HCs use NLB for ingress controller #3293
OCPBUGS-26757: Change KAS bootstrap image to cluster-config-api #3400
NO-JIRA: Improve nodepool’s machine condition message #3354
OCPBUGS-23228: Add storage, csisnapshotcontroller and clustercsidrive… #3396
OCPBUGS-27027: availability-prober: wait for infrastructure name to be set #3409
NO-JIRA: remove non-existent v1beta2 from webhook #3407
HOSTEDCP-1376: Bump the sigs.k8s-dependencies group and update dependabot groupings #3392
OCPBUGS-25696: Apply Scheduling Configuration for kCCM #3382
OCPBUGS-26547: remove LoadBalancer filter from external-dns #3410
OCPBUGS-26547: fix up external-dns flags #3408
OCPBUGS-26547: reduce external-dns route53 call volume #3394
Update RHTAP references (main) #3401
OCPBUGS-25897: hcco: use manual mode for CCO #3375
HOSTEDCP-1309: Add GC knobs for KAS #3384
NO-JIRA: [KubeVirt] Fix external infra permissions documentation #3391
HOSTEDCP-1374: external OIDC: copy Authentication OIDC client secrets through to guest #3373
OCPBUGS-25974: Do not use CPO image from status if it’s not a valid image reference #3361
OCPBUGS-23518: consider HCP upgradeable if CVO has no upgradable condition #3239
OCPBUGS-26232: set KAS runtime-config in alignment with feature gates #3377
HOSTEDCP-1372: Bumps k8s to v0.29 #3360
OCPBUGS-25342: Add extra resources to be encrypted. #3341
OCPBUGS-26197: hostedcontrolplane: don’t start pki operator when disabled #3368
CNV-36656: Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider #3364
NO-JIRA: Update RHTAP references (main) #3365
HOSTEDCP-1371: Bump Golang to v1.21 #3359
HOSTEDCP-1328: Add Ability to Encrypt VM OS Disks #3281
HOSTEDCP-1122: Etcd defrag controller #2869
NO-JIRA: Update RHTAP references (main) #3275
HOSTEDCP-336: Move fixtures out of API #3342
OCPBUGS-23362: Set new condition on SG deletion. #3307
NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update #3251
NO-JIRA: Add rbac permission for kubevirt capi #3344
OCPBUGS-22399: Disable UWM Telemetry writer when telemeter-client cm not exists #3348
NO-JIRA: Approvers update #3347
HOSTEDCP-1262: Add additional CEL to Arch in NodePoolSpec #3333
NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools #3334
NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #3335
OCPBUGS-22399: Disable UWM Telemetry remote writer when MGMT cluster is disconnected #3332
HOSTEDCP-336: Move CAPI imports from /api package into support/api #3270
OCPBUGS-24308: Add PodDisruptionBudget for router deployment #3337
HOSTEDCP-1355: Remove unused functions from repo #3325
NO-JIRA: RHTAP Multi-Arch PipelineSpec #3340
HOSTEDCP-1329: Allow user to specify resource group for NodePool resources #3279
HOSTEDCP-1353: Improve description for agent APIServerAddress CLI flag #3314
ACM-8917: Add agentLabelSelector to nodepool agent create to CLI #3285
CCO-388: control-plane-operator: reconcile the CCO #2794
NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools #3045
NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools #3145
HOSTEDCP-1344: use library-go crypto where we can #3326
OCPBUGS-25332: Force KMSv1 on #3318
HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation #3320
HOSTEDCP-1327: Remove Old Azure SDKs from Azure Infra #3274
OCPBUGS-25306: Use k8s.io/kube-scheduler/config/v1 #3313
TRT-1406: Revert #3283 “HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation” #3306
OCPBUGS-25103: Remove reference to v1alpha1 flowcontrol #3304
HOSTEDCP-1257: control-plane-pki-operator: add a CSR flow for break-glass creds #3267
NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) #3305
OCPBUGS-24261: Konnectivity agent update strategy #3294
CNV-36056: Expose NodeSelector for KubeVirt VMs in NodePool #3280
ACM-8466: Add Kubernetes SCC V2 options to HO containers #3284
OCPBUGS-23511: Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals #3215
NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out #3302
HOSTEDCP-1343: docs(ibmcloud): Add HC/HCP yamls for IBM Cloud #3287
HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation #3283
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3276
OCPBUGS-20035: Add HostedCluster false conditions sumamry when cluste… #3190
HOSTEDCP-1336: bump openshift/api #3282
NO-JIRA: Fix wrong annotation on cluster deletion #3289
OTA-855: Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift #2807
HOSTEDCP-1318: correct typo for OAS internal-oauth-disabled flag #3278
NO-JIRA: Bump the golang-dependencies group with 3 updates #3254
OCPBUGS-23126: Fix a bug on deletion of a hostedcluster #3234
CNV-35774: Improve CRD defaulting for HostedCluster and NodePool #3116
HOSTEDCP-1322: NodeUpgradeType defaulted by provider via CLI #3273
NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too #3263
CNV-34093: kubevirt: verify release image falls within supported release window #3184
CNV-29003: Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) #3189
OCPBUGS-22459: Add prestop to konnectiviy server #3250
HOSTEDCP-1318: pass internal-oauth-disable flag to openshift-apiserver when Auth type is OIDC #3244
OCPBUGS-23397: Set shutdown-delay-duration to 15s #3204
HOSTEDCP-1234: Add KMS support on Azure clusters using Azure Key Vault #3183
OCPBUGS-23555: set respondWithChallenges false on CLI OAuth client #3249
WRKLDS-925: remove duplicate passing of kubeconfig into route-controller-manager #3220
HOSTEDCP-1256: control-plane-pki-operator: add an operator for managing PKI #3193
HOSTEDCP-1319: Fix Dependabot & Group Dependency Updates #3246
OCPBUGS-24062: fix(cpo): Set restart annotation on network-node-identity #3245
kubevirt, hcp, HOSTEDCP-1311: Add multinet knobs #3235
HOSTEDCP-1312: Fixed update-codegen.sh to work locally #3214
OCPBUGS-23555: add CLI oauthclient #3238
HOSTEDCP-1300: Bump k8s.io/client-go to v0.28.3 #3191
OCPBUGS-19834: add watch for HCP pullsecret to HCCO #3237
Update RHTAP references (main) #3230
HOSTEDCP-1236: Enable public router+external DNS for azure #3233
OCPBUGS-23921: Use correct kubeconfig in CCM and remove CCMs access t… #3222
OCPBUGS-22473: Added OLMCatalogPlacement option to the CLI #3206
OSD-19085: New hypershift_cluster_cores metric giving the total number of worker cores #3089
OCPBUGS-20246: Added brackets to IPv6 KAS address on kubeconfig #3207
OCPBUGS-23737: remove machine-approver probes #3227
OCPBUGS-23350: Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3210
OCPBUGS-23466: Let router use svc ips #3218
HOSTEDCP-1256: api/hypershift: mark more conditions with list key types #3212
OCPBUGS-23472: unset ServiceAccount on ignition-server-proxy #3209
OCPBUGS-23528: Fix error when removing finalizer on cluster destroy #3219
HOSTEDCP-1256: api/v1beta1: annotate hostedcontrolplane conditions #3211
OCPBUGS-23398: Fixed AWS KMS Backup container args #3216
HOSTEDCP-1311: kubevirt, Add support for secondary networks #3066
HOSTEDCP-1256: expose cert rotation scale parameter #3208
OCPBUGS-23314: SetLogger for CLI #3199
HOSTEDCP-1237: Retrieve RHCOS VHD image from release image #3177
HOSTEDCP-1284: Bumps k8s.io/pod-security-admission to v0.28.3 #3181
CNV-23418: Validate jsonpatch annotation + add condition on wrong patch #3197
HOSTEDCP-1285: Kas port svc cleanup #3186
HOSTEDCP-1254: disable deployment of integrated oauth when authentication type is OIDC and set KAS flags #3151
CNV-23418: fix the jsonpath annotation implemetation #3201
HOSTEDCP-1305: Simplify HostedControlPlaneNamespace().Name #2619
OCPBUGS-22912: Set value of elb tag to 1 instead of true #3198
CNV-30444: Document recommended MTU settings for KubeVirt HCP #3129
HOSTEDCP-1306: Bump Golang builder to 1.20 for RHTAP dockerfile #3196
NO-JIRA: chore(deps): update rhtap references #3192
CNV-23418: unsupported escape hatch mechanism custom HS/KV vms #3187
HOSTEDCP-1256: generate typed clients for apis #3179
NO-JIRA: *: Fix “succesfully” -> “successfully” typos #3188
OCPBUGS-20179: Stop defining time series for hosted clusters or node pools which do not exist anymore. #2671
HOSTEDCP-1285: Consume kas Pod port by name #3185
OCPBUGS-23083: adding permission to CNO RBAC Calico path for network-node-identity deploy #3172
HOSTEDCP-1256: Update Dependencies #3154
HOSTEDCP-1283: Fixed Azure nodes not joining #3174
HOSTEDCP-1227: Retrieve CAPZ image from OCP release image #3074
NO-JIRA: fix formatting for releaseImage log #3156
HOSTEDCP-1206: Req serving isolation e2e enxebre #3150
OCPBUGS-23015: Configure HSTS for kube-apiserver #3088
HOSTEDCP-1281: Fix a bug in the validating webhook #3164
CNV-33847: KubeVirt: create the etcd encryption key secret, if missing #3148
HOSTEDCP-1278: Adjustment cluster-cidr,service-cidr to support dualstack #3161
OCPBUGS-10423: Update regex validation for nodepool.spec.taints.value #3141
OCPBUGS-20161: Stop exposing kas on 6443 private route service load balancer #3149
OCPBUGS-16079: No error for overlapping service network and API IP #3067
OCPBUGS-22868: Fixed accessTokenInactivityTimeout validation #3157
CNV-34094: Add validating webhook #3132
Stop defaulting aws private haproxy external port to 6443 #3147
Remove GITHUB_ACCESS_TOKEN requirement from release notes script #3134
HOSTEDCP-1215: Use the same etcd snapshot for all replicas during etcd restore #3081
Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools #3136
OCPBUGS-20033: Make the OLMCatalogPlacement field immutable #3113
HOSTEDCP-1113: Improve NodePool CPU arch & platform check #3072
HOSTEDCP-1253: bump openshift/api for new authentication config #3135
HOSTEDCP-1229: Move azure cloud provider to out of tree #3086
contrib: increase HC quota to 40 #3140
HOSTEDCP-1200: Remove pod exceptions from EnsureNoCrashingPods #3138
run EnsurePSANotPrivileged for TestCreateCluster only #3137
OCPBUGS-21776: Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller #3115
OCPBUGS-21626: Validate accessTokenInactivityTimeout >= 300s #3110
OCPBUGS-20246: Added brackets to the kubeconfig server address when IPv6 #3097
Bump golang.org/x/net from 0.13.0 to 0.17.0 #3092
OCPBUGS-22195: Fix label selector check for CAPI provider #3108
Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools #3093
Update RHTAP references #3062
OCPBUGS-21822: Add ign proxy label selector for LabelTopologyZone PodAntiAffinity #3103
OCPBUGS-19419 change trusted bundle volume mount for CPO #3099
Disabling unused monitoring services #2730
OCPBUGS-18341: change required pod anti-affinity rule to preferred rule #3095
SDN-4062: Revert “SDN-4042: Increase upgrade rollout timers” #3090
CNV-31891: Document port 80 is not supported with default ingress for KubeVirt #3079
MULTIARCH-3760: Rename depricated flag for PowerVS capi deployment #3028
HOSTEDCP-1051 addition of grace period for aws infra destruction #2967
HOSTEDCP-1232: Add clusterName label to CAPI kubeconfig secret #3087
OCPBUGS-19957: Reconcile CNCC secret to CPO namespace #3065
OCPBUGS-20105: OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes #3077
OCPBUGS-16189, OCPBUGS-19746: Added network validations #3047
CNV-30697: Dedicated CPU for KubeVirt node pool #3048
Add record rules for kas qps #2858
Fix a typo in KubeVirt troubleshooting script #3073
HOSTEDCP-1184: Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal #3008
Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… #3076
Upate azure docs #3075
OCPBUGS-13348: Hypershift Audit configuration not working (part2). #3014
OCPBUGS-11939, OCPBUGS-18128, OCPBUGS-18460, OCPBUGS-18602, OCPBUGS-18879: Support Disconnected HCP #2950
Add private link perms to docs and clarify log message #3063
OCPBUGS-14819: Add konnectivity-proxy container to CNO #2974
OCPBUGS-19784: Update capi agent version for CRD label #3050
KubeVirt platform troubleshooting documentation #3055
Remove EgressFirewall Creation in HCP namespace #3049
HOSTEDCP-1212: Bump Golang to v1.20 #3038
Update RHTAP references (main) #3054
OCPBUGS-15215: OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift #3041
Update RHTAP references (main) #3042
OCPBUGS-19271: Updating hypershift images to be consistent with ART #3017
Update kubevirt csi driver deployment with proper timeouts #3044
OCPBUGS-19516: Upgrade agent APIs to v1beta1 #3022
[kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly #2976
OCPBUGS-19674: Report correct port when API exposed via route #3037
OCPBUGS-13829: set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver #3025
HOSTEDCP-1209: set ubi Containerfile labels #3039
Use example versions for KubeVirt platform that are supported #3027
OCPBUGS-17669: Remove cluster name validation from HCC #3036
KubeVirt: document VMs logs collection #3031
Update RHTAP references (main) #3033
OCPBUGS-19381: Let NodePools skip min version when SkipReleaseImageValidation is in HC #3024
OCPBUGS-19346: set default deploymentconfig params on AWS CCM #3021
ACM-7278: Remove marking pull secret as required in hcp cli #3013
OCPBUGS-19332: Use impersonated client for fetching the localhost-kubeconfig from ma… #3011
Relax network policy e2e for private #3020
Dump KubeVirt pod logs #3000
Update RHTAP references #2995
OCPBUGS-19014: Apply private-router network policy only if running OCP 4.14 #3012
Validate KubeVirt platform required versioning #2948
OCPBUGS-18720: amend OLM catalogs ImageStream according to annotation #3001
OCPBUGS-17906: reconcile Authentication global config #3009
feat: add _id label to all hypershift operator metrics #2991
OCPBUGS-18122: Rename isUpgradeable to isUpgrading according to its return value #2955
OCPBUGS-18762: unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC #3004
OCPBUGS-18754: tuned DS should not use controlPlaneReleaseImage #3003
HYPBLD-99: enable CGO_ENABLED for building FIPS compliant images #2997
e2e: fixed gomega created from parent test context #2987
bump HO supported version for 4.15 #2927
HOSTEDCP-1075: Document instructions for recovering etcd cluster from lost quorum #2952
Full changelog

ibm-cloud-controller-manager

OCPBUGS-22602, OCPCLOUD-2419: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (d1ca4a9) into master #59
OCPBUGS-25562: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART #62
OCPBUGS-25638: Add Snyk file to exclude vendor directory on scan #63
OCPBUGS-24921: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART #61
OCPBUGS-24109: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART #60
OCPCLOUD-2183: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.28 (1584359) into master #47
Update OWNERS #54
OCPBUGS-19180: Updating ose-ibm-cloud-controller-manager images to be consistent with ART #53
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53910: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #84
OCPBUGS-36067: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #71
OCPBUGS-30514: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #65
STOR-1571: Chore: Update ibm-vpc-block-csi-driver to the latest release #64
OCPBUGS-25566: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART #63
STOR-1688: Chore: add .snyk file to ignore false positives #62
OCPBUGS-25049: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART #61
OCPBUGS-24930: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART #60
STOR-1408: Chore: Update OWNERS_ALIASES #59
Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART #58
STOR-1408: Chore: Update ibm-vpc-block-csi-driver to the latest release #55
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #48
OCPBUGS-18105: [IBM VPC] failed provisioning volume in proxy cluster #43
OCPBUGS-16920: UPSTREAM: 164: Disable UUID check on xfs (#164) #45
OCPBUGS-19188: Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART #44
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
OCPBUGS-36073: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #120
OCPBUGS-33329: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #115
OCPBUGS-28230: enforce termination message policy on all platform pods #114
OCPBUGS-29247: ibm-vpc-block-csi-driver is missing sidecar metrics #112
OCPBUGS-26924: Add healthcheck for node registrar #110
OCPBUGS-29578: Apply hypershift cluster-profile for ibm-cloud-managed #111
STOR-1574: Bump all deps #108
OCPBUGS-28938: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.16 #109
STOR-1574: Bump library-go #107
STOR-1714: Release leadership on SIGTERM #105
OCPBUGS-25539: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART #102
STOR-1688: Chore: add .snyk file to ignore false positives #101
OCPBUGS-23862: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 #100
OCPBUGS-25105: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART #98
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #97
OCPBUGS-24845: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART #96
STOR-1487: Provide BYOK encryption support for OpenShift on IBM Cloud VPC #93
OCPBUGS-23862: OCPBUGS-22603: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 #88
STOR-1402: Chore: update libraries in all operators [4.15] #92
STOR-1485: Support for endpoint override from config #89
OCPBUGS-22924: Removing unncessary imagePullSecrets #87
STOR-1276: Enable support for mounting volumes with SELinux context #77
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #86
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #80
OCPBUGS-19215: Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #78
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
OCPBUGS-33170: All containers must fallback to logs on error #80
OCPBUGS-29590: Update golang.org/x/crypto module #77
OCPBUGS-24924: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART #70
OCPBUGS-22604, OCPCLOUD-2454: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.7.0 (e51c61e) into main #74
OCPBUGS-26135: Fix formatting in snyk vendor exclusions #75
OCPBUGS-25631: Add Snyk file to exclude vendor directory on scan #71
OCPCLOUD-2255: Update manifests-gen tool #68
Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART #65
OCPCLOUD-2257: Use manifests generation tool from provider repo #64
OCPBUGS-22054: Bump golang.org/x/net to v0.17.0 #62
OCPBUGS-22107: Bump golang.org/x/net to v0.17.0 #61
Update OWNERS #60
OCPCLOUD-2220: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.6.0 (02aa85f) into main #59
OCPBUGS-19181: Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART #58
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
OCPBUGS-27872: add an extra vendor exclude to snyk config #36
OCPBUGS-28965: update textlogger usage #35
OCPCLOUD-2426: Update to k8s 1.29 #34
OCPBUGS-26134: Add Snyk file to exclude vendor directory on scan #33
OCPBUGS-25574: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART #32
OCPBUGS-24962: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART #31
OCPCLOUD-2264: IBMCloud: Add boot volume key support #27
Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART #30
OCPCLOUD-2227: IBMCloud: Fix version for binary #29
OCPCLOUD-2266: IBMCloud: MAPI Service Endpoint overrides #28
Update OWNERS #26
OCPBUGS-17293, OCPCLOUD-2190: update k8s dependencies to release 1.28 #25
OCPBUGS-19221: Updating ose-ibmcloud-machine-controllers images to be consistent with ART #24
Full changelog

insights-operator

Fix typo in link to gathers.json #876
Full changelog

ironic

METAL-1306: Do not use openstack packages #648
OCPBUGS-49895: Drop quiet option of grep to avoid race condition with pipefail #634
OCPBUGS-48151, OCPBUGS-48598: Bump jinja2 to 3.0.1-6.el9.2 #623
OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
OCPBUGS-33376: bump werkzeug #534
OCPBUGS-36838: Update Jinja2 #521
OCPBUGS-36285: Read ironic and inspector htpasswds from files #517
Bug OCPBUGS-34985: Disable installation of .pyc files through pip #509
OCPBUGS-32304: Fix ironic-inspector permissions for creating /certs/ca directory #500
METAL-1005: [4.16] Update ironic projects and remove cinder and glance clients #493
NO-ISSUE: Merge from metal3-io/ironic-image #473
OCPBUGS-32366: [4.16] remove unused prometheus-exporter from OKD too #486
OCPBUGS-32366: [4.16] Remove unused prometheus exporter #484
OCPBUGS-32366: [4.16] Bump gunicorn version #480
NO-ISSUE: Use microversion-parse package #481
OCPBUGS-32350: Update to include fixes for ironic servicing feature #478
OCPBUGS-32390: Use unix sockets by default for reverse proxy communication #472
OCPBUGS-32162: Bump eventlet version #471
METAL-949: Force pysnmp-lextudio and pyasn1 min version #464
METAL-952: Install sushy from source #466
METAL-804: Bump ironic hash to include recent fixes and features #465
METAL-944: Install ironic-lib from source #463
METAL-923: pick-up non-bootable ISO fix #462
METAL-922: Add check requirements script #461
METAL-901: Update ironic dependencies for OCP 4.16 #457
NO-ISSUE: Merge from upstream metal3-io/ironic-image #459
METAL-909: Avoid context copy in CI or local builds #458
METAL-849: Install ironic and ironic-inspector from source #444
METAL-902: Split OKD and OCP packages list #456
NO-ISSUE: Updating openstack-ironic version #455
OCPBUGS-27967: Update packages for OCP 4.16 #451
METAL-850: Update packages for OCP 4.16 #449
OCPBUGS-22699: Fix Inspector iPXE config for IPv6 addresses #446
OCPBUGS-25605: Relax packages requirements #441
NO-ISSUE: Merge from metal3-io/ironic-image (33275f5) #443
NO-ISSUE: Add requirements placeholders for cachito #437
OCPBUGS-25392: Stuck deployment #440
OCPBUGS-24747: Updating ironic-container image to be consistent with ART #438
OCPBUGS-9303: include the secure boot retry #435
NO-ISSUE: Update ironic packages version #434
OCPBUGS-23759: Ironic side of external_http_url (METAL-163) is not wired in correctly #432
OCPBUGS-23939: Firmware interface #428
OCPBUGS-23485: Uplift eventlet version #425
OCPBUGS-22425: Upgrade markupsafe and werkzeug dependencies #420
METAL-726: Update packages for OCP 4.15 and pin ironic versions #412
METAL-730: Sync202310 #407
OCPBUGS-21876: Use bash process substitution instead of pipe #408
Revert #395 “Sync20230829” #405
Sync20230829 #395
OCPBUGS-9303: update Ironic to include secure boot fixes #403
OCPBUGS-18963: update ironic to include SQLite fixes #401
OCPBUGS-18859: Updating ironic images to be consistent with ART #397
OCPBUGS-19019: Switch from current-tripleo to puppet-passed-ci #398
Full changelog

ironic-agent

METAL-1306: Do not use openstack packages #180
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
OCPBUGS-31549: update ironic-python-agent with latest fixes #128
OCPBUGS-32172: Fix name in setup.cfg #122
METAL-925: Fix permission of check reqs script #120
METAL-925: Add makefile with build and check reqs #119
METAL-925: Install ironic-python-agent from source #118
METAL-925: Add requirements placeholders for cachito #117
NO-ISSUE: Update openstack-ironic-python-agent version #110
METAL-913: drop dependency on python-hardware #113
OCPBUGS-30075: Fix tripleo url with commit hash for openstack repos config #114
OCPBUGS-19008: Always add ignition to set hostname on /etc/hostname #106
METAL-850: Update packages for OCP 4.16 #104
OCPBUGS-19950: pick up the heartbeat retry fix #101
OCPBUGS-16607: 502 Proxy Error #100
OCPBUGS-24781: Updating ironic-agent-container image to be consistent with ART #97
OCPBUGS-23553: Update packages with latest fixes #95
OCPBUGS-23553: Update packages with latest fixes #94
OCPBUGS-18862: Updating ironic-agent images to be consistent with ART #88
Full changelog

ironic-machine-os-downloader

OCPBUGS-25775: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.16 #96
OCPBUGS-25526: Updating ironic-rhcos-downloader-container image to be consistent with ART #95
OCPBUGS-24788: Updating ironic-rhcos-downloader-container image to be consistent with ART #94
OCPBUGS-18863: Updating ironic-rhcos-downloader images to be consistent with ART #93
Full changelog

ironic-static-ip-manager

OCPBUGS-49595: Fix subnet validation #48
OCPBUGS-24790: Updating ironic-static-ip-manager-container image to be consistent with ART #41
OCPBUGS-18864: Updating ironic-static-ip-manager images to be consistent with ART #40
Full changelog

k8s-prometheus-adapter

OCPBUGS-30532: upgrade github.com/golang/protobuf to v1.5.4 for bette… #101
OCPBUGS-25583: Updating ose-prometheus-adapter-container image to be consistent with ART #100
OCPBUGS-24986: Updating ose-prometheus-adapter-container image to be consistent with ART #99
OCPBUGS-24986: Updating ose-prometheus-adapter-container image to be consistent with ART #98
MON-3584: Remove trailing spaces from Dockerfile.ocp #97
OCPBUGS-24155: Updating ose-prometheus-adapter-container image to be consistent with ART #95
MON-3489: Bump openshift/k8s-prometheus-adapter to v0.11.2 #94
OCPBUGS-21621: Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #88
add machine424 and rexagod to OWNERS #73
OCPBUGS-21621: upgrade golang.org/x/net to 0.17.0 to address CVE-2023… #80
OCPBUGS-18971: limit number of simultaneous client requests #76
OCPBUGS-19251: Updating ose-prometheus-adapter images to be consistent with ART #74
Bump openshift/k8s-prometheus-adapter to v0.11.0 #72
Full changelog

keepalived-ipfailover

OKD-219: add util-linux to base image #188
OKD-40: Revert #179 #180
OKD-40: Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179
Add dnf-plugins-core in scos to help with OCP image compat #178
OKD-210: Add sig-cloud repository and enable rt repository #177
OKD-210: Add the sig-nfv repo in the CS9 base #176
OCPBUGS-24850: Bump OpenShift 4.16, RHEL9, and iptables package #175
OCPBUGS-24990: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART #159
OCPBUGS-24800: Updating ose-egress-http-proxy-container image to be consistent with ART #156
NO-ISSUE: Add Scott and Mrunal as image approvers #170
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484: update unit tests in egress/dns-proxy #165
NE-1444: egress/dns-proxy: switch to haproxy28 RPM package #160
OCPBUGS-24861: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158
OCPBUGS-24751: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155
OCPBUGS-24723: Updating openshift-enterprise-base-container image to be consistent with ART #154
OCPBUGS-19261: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153
OCPBUGS-19107: Updating ose-egress-http-proxy images to be consistent with ART #150
OCPBUGS-19239: Updating openshift-enterprise-egress-router images to be consistent with ART #151
OCPBUGS-18860: Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149
OCPBUGS-18853: Updating openshift-enterprise-base images to be consistent with ART #148
Full changelog

kube-proxy, sdn

OCPBUGS-44674: Handle openshift-host-network namespace as special when it modifies #648
OCPBUGS-46493: Raise the minSyncPeriod for NetworkPolicies to 10s during migration #649
OCPBUGS-46048: clean up containernetworking/plugins vendoring in sdn #645
OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
OCPBUGS-30431: CVE-2024-24786: bump pkg golang protobuf #620
SDN-4404: Kube 1.29 bump #618
SDN-4114: Do per-pod MCS/metadata blocking with nftables rather than iptables #581
NO-JIRA: Update README to note that openshift-sdn is deprecated #611
NO-JIRA: Move sdn to RHEL9 base image #598
OCPBUGS-25740: Updating ose-node-container image to be consistent with ART for 4.16 #599
OCPBUGS-23666: Add Snyk file to exclude directories on scan #604
OCPBUGS-25779: Updating kube-proxy-container image to be consistent with ART for 4.16 #600
SDN-4179: Metrics: Add metric for multicast enabled netnamespaces #603
OCPBUGS-25015: Updating kube-proxy-container image to be consistent with ART #596
OCPBUGS-25036: Use openshift-clients rpm rather than cli image #593
OCPBUGS-22077: update x/net to v0.17.0 #585
OCPBUGS-16788: Create IPAM files with 0600 permissions #584
SDN-4123: rebase sdn to kube 1.28.3 #580
OCPBUGS-18785: Controller: add flag for node name #578
OCPBUGS-19143: Updating kube-proxy images to be consistent with ART #575
OCPBUGS-19103: Updating ose-sdn images to be consistent with ART #574
Collect pod operation latency metrics properly #576
Live migration: Add flows that allow openshift-sdn to connect to ovnkube #569
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
OCPBUGS-31955: Merge upstream v0.17.1 release #98
AUTH-486: Add tests for the hardcoded-authorizer feature #90
OCPBUGS-29974: Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 #91
OCPBUGS-24818: Updating kube-rbac-proxy-container image to be consistent with ART #88
OCPBUGS-21672: http2: trim connetions and buffers #80
OCPBUGS-21672: go.mod: bump golang.org/x/net to v0.17.0 #73
OCPBUGS-19143: Updating kube-rbac-proxy images to be consistent with ART #72
Full changelog

kube-state-metrics

NO-JIRA: Merge v2.11.0 and v2.12.0 tags #110
OCPBUGS-25585: Updating kube-state-metrics-container image to be consistent with ART #109
OCPBUGS-24993: Updating kube-state-metrics-container image to be consistent with ART #108
MON-3548: Bump openshift/kube-state-metrics to v2.10.1 #107
MON-3548: Merge tag v2.10.1 #106
OCPBUGS-21760: bump x/net to v0.17.0 #100
add machine424 and rexagod to OWNERS #96
OCPBUGS-19256: Updating kube-state-metrics images to be consistent with ART #97
Full changelog

kube-storage-version-migrator

OCPBUGS-27929: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.16 #203
OCPBUGS-24969: Updating ose-kube-storage-version-migrator-container image to be consistent with ART #202
OCPBUGS-19227: Updating ose-kube-storage-version-migrator images to be consistent with ART #199
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-30518: Upstream rebase 18 04 2024 #41
OCPBUGS-24936: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #30
OCPBUGS-26182: Upstream rebease 4 5 2024 #40
OCPBUGS-30303: Merge github.com/kubevirt 03 06 2024 #35
OCPBUGS-19193: Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #25
Auto sync upstream 2023 09 15 20 36 #24
Full changelog

kubevirt-csi-driver

OCPBUGS-54632: Ensure volume stays attached through reboots #57
OCPBUGS-44622: During detach don’t return error if VM is not found #49
CNV-36073: Enable snapshot tests #40
CNV-36073: Sync upstream kubevirt-csi 2024-04-19 #39
“NO-JIRA: Sync upstream kubevirt-csi 2024-04-08” #38
OCPBUGS-31276: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 #37
CNV-32073: Sync upstream 2024-03-15 #36
NO-JIRA: Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #32
NO-JIRA: Snapshot backport #31
NO-JIRA: Auto sync upstream 2024 01 05 18 36 #27
OCPBUGS-24805: Updating ose-kubevirt-csi-driver-container image to be consistent with ART #26
OCPBUGS-19115: Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART #23
Ensure volume is removed before returning success (#90) #22
Full changelog

libvirt-machine-controllers

OCPBUGS-26046: Replace genisoimage with xorriso in 4.15 to allow rhel9 bump #281
OCPBUGS-25630: Add Snyk file to exclude vendor directory on scan #276
OCPBUGS-25173: Updating ose-libvirt-machine-controllers-container image to be consistent with ART #275
OCPBUGS-25101: Updating ose-libvirt-machine-controllers-container image to be consistent with ART #274
OCPBUGS-24833: Updating ose-libvirt-machine-controllers-container image to be consistent with ART #273
Add workaround for SLOF regression #263
client/domain: Remove spice as domain grahics #260
OCPBUGS-19187: Updating ose-libvirt-machine-controllers images to be consistent with ART #262
Full changelog

machine-api-operator

OCPBUGS-55248, OCPBUGS-55249: Updates GCP credentials request #1355
OCPBUGS-53045: add image/read permissions #1348
OCPBUGS-52342: Drop oVirt support #1336
OCPBUGS-45947: vSphere klog initialization preventing verbose log messages #1312
OCPBUGS-45998: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1313
OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
CORS-3648: Add the hyperdisk-balanced disk type #1279
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1263
AUTH-482: set required-scc for openshift workloads #1220
OCPCLOUD-2501: Update to set GpuType annotation to remove hardcoded value #1226
OCPCLOUD-2493: Bug fix in unit test #1232
OCPCLOUD-2493: Add unit tests for the functions handling ScaleFromZero annotations #1227
OCPBUGS-31962: Bump x/net to v.0.24.0 #1228
OCPBUGS-29956: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1219
OCPBUGS-29874: Apply hypershift cluster-profile for ibm-cloud-managed #1218
SPLAT-1293: Bump IPAM types to v1beta1. #1205
OCPBUGS-26119: Add build tags to tools.go file to solve linting issues when running Snyk scans #1215
OCPBUGS-25193: Add additional vnet join permission for Azure #1212
SPLAT-1386: reconcile additional tags assigned to machine #1204
OCPBUGS-26119: Fix formatting in snyk vendor exclusions #1201
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1211
CFE-684, OCPCLOUD-2430: Rebase k8s 1.29 and update dependencies #1208
CFE-684: Update GCPCloudCredentials with TagUser role #1158
OCPBUGS-27385: Add useExternalIp gcp permission #1206
OCPBUGS-23544: Set –max-concurrent-reconciles=10 for Azure machine controller #1203
OCPBUGS-23544: Add AddWithActuatorOpts to allow overriding Machine controller options #1202
OCPCLOUD-1725: Add GCP custom roles #1178
OCPBUGS-25580: Updating ose-machine-api-operator-container image to be consistent with ART #1190
OCPBUGS-25735: Add Snyk file to exclude vendor directory on scan #1192
OCPBUGS-24980: Updating ose-machine-api-operator-container image to be consistent with ART #1187
OCPBUGS-18339: Update reference URL #1184
OCPVE-778: annotate cloud credentials request #1174
OCPBUGS-24151: Updating ose-machine-api-operator-container image to be consistent with ART #1179
NO-JIRA: Update OWNERS #1183
SPLAT-1272: Update for Nutanix failure domains api changes #1171
OCPCLOUD-2138: Add module to work with scale from zero annotations for MachineSet #1169
OCPBUGS-18339: Use docs URL instead of KCS article #1172
OCPBUGS-21815: Bump golang.org/x/net to v0.17.0 #1170
OCPCLOUD-2194: Update k8s dependencies 1.28 #1168
MGMT-13425: Don’t fail when workers not needed #1165
SPLAT-1172: Enhance machine status relating to IPAddressClaimed #1166
OCPBUGS-19241: Updating ose-machine-api-operator images to be consistent with ART #1167
Full changelog

machine-config-operator

OCPBUGS-54831: Make mtu-migration run after wait-for-primary-ip #4990
OCPBUGS-55684: MSBIC should not update windows machinesets #5028
OCPBUGS-35921: userCA and cloudCA certfiicates are not removed from nodes and ignition config #4419
OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4923
OCPBUGS-53043: Enable nmstate-configuration on all platforms #4910
OCPBUGS-52952: Add ipsec connect wait service #4931
OCPBUGS-54163: Fixing typos for MachineConfigNode #4942
OCPBUGS-53434: Update ObservedGeneration in KubeletConfig #4935
OCPBUGS-53313: daemon: ensure ostree-finalize-staged is started before rebooting #4928
OCPBUGS-52421: Update format verbs for alert logs #4901
OCPBUGS-51347: Update the storage.conf configuration file template #4881
OCPBUGS-52593: Update cluster-reader ClusterRole permissions #4905
OCPBUGS-52404: create /run/nodeip-configuration before use #4897
OCPBUGS-52310: configure-ovs workaround for ovs-if-br-ex bug #4892
OCPBUGS-50862: Auto-recover from MC with invalid extension #4853
OCPBUGS-43680: Regenerate the rendered MC in use when deleted #4655
OCPBUGS-49976: Add clarification to invalid maxUnavailable alert #4837
OCPBUGS-39224: Do not enable on-prem-resolv-prepender.path for UPI #4573
OCPBUGS-48290: Pausing Master MCP results in Alerts #4786
OCPBUGS-43765: openstack: fix non-old systemd compatible unit #4660
OCPBUGS-43741: Soften haproxy timeout for kubeapi probe #4662
OCPBUGS-48116: OCPBUGS-47801: trying to wait for sub-controllers #4777
OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
OCPBUGS-38711: SCC-pinning for openshift workloads #4539
OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
OCPBUGS-38373: Revert “MCD-pull: run after network-online.target in Azure” #4528
OCPBUGS-36171, OCPBUGS-36172: fix secret canonicalization #4432
OCPBUGS-37759: Guard MachineOSBuild & MachineOSConfig informers with feature gates #4505
OCPBUGS-37550: On-Prem resolv prepender to watch for NM changes #4498
OCPBUGS-37485: kubelet: boot without PSI for performance concerns #4486
OCPBUGS-37840: [release-4.16] Introduce versioning for Auto Node Sizing feature #4382
OCPBUGS-35891: Make logging configurable for on-prem components #4418
OCPBUGS-37470: Nodes are drained twice when an OCB image is applied #4484
OCPBUGS-37460: Openshift uncordoned compute-node that was intentionally cordoned #4483
OCPBUGS-37428: Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events #4482
OCPBUGS-36775: templates: run disable-mglru conditionally #4462
OCPBUGS-36330: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4445
OCPBUGS-36536: MCD-pull: run after network-online.target in Azure #4453
OCPBUGS-35929: The MCD can override a restart crio action with a reload crio action #4420
OCPBUGS-36165, OCPBUGS-36166: CurrentImagePullSecret should be consumed by the MCD #4430
OCPBUGS-35753: Fix reference to $host_file #4413
OCPBUGS-36198: daemon/update: disable systemd unit before overwriting #4436
OCPBUGS-35806: Revert “Azure: add Azure specific dnsmasq ordering” #4414
OCPBUGS-35992: disable mglru service #4427
OCPBUGS-35291: Default ipv4 NODE_IP to 0.0.0.0 #4409
OCPBUGS-35364: Azure: add Azure specific dnsmasq ordering #4406
OCPBUGS-35299: Panic when we remove an OCB infra MCP and we try to create new ones with different names #4403
OCPBUGS-35042: ensure event handlers are registered after queue is configured #4394
OCPBUGS-34799: set required-scc for openshift workloads #4384
OCPBUGS-33901: machine-os-puller SA refreshes every hour, causing machine config regeneration #4374
OCPBUGS-10498: If multiple hostnames are returned, use the first one for the Node name #4368
OKD-212: Reference stream-coreos instead of centos-stream-coreos-9 #4349
OCPBUGS-25821, OCPBUGS-31381: certificate_writer: clean up disk-write logic #4343
MCO-1131: Merge implementation machineOSBuild and machineOSConfig in MCO #4327
OCPBUGS-33357: Check both ready and health ingress endpoints #4356
OCPBUGS-32583: daemon/pinned-image-set: refactor mirrored registry auth #4345
OCPBUGS-33046: improve status reporting for pinned image sets #4339
OPNET-282: Configure-ovs alternative implementation #4249
OCPBUGS-33018: pkg/daemon: Only re-bootstrap kubelet on X.509 errors #4351
OCPBUGS-33018: pkg/daemon: logSystem the Kube API errors that trigger a re-bootstrap #4342
OCPBUGS-29067: Fix CoreDNS pod definition on bootstrap nodes on cloud platforms #4238
OCPBUGS-11936: Wait for OpenStack Metadata service #4092
NO-ISSUE: API bump & reconcile feature gates move #4335
NO-ISSUE: Add NodeDisruptionPolicy docs #4336
OCPBUGS-32739: MachineConfigurations is only effective with name <cluster> #4332
MCO-1017: MCO-1018 MCO-1019: MCO-1020: MCO-1021: OCPBUGS-32583: OCPBUGS-32679: Implement PinnedImageSets #4303
OCPBUGS-33018: pkg/daemon: Ignore watch failure unless kubelet needs a rebootstrap #4337
MCO-1009: MCO-1008: MCO-905: Implement NodeDisruptionPolicy API #4267
OCPBUGS-32138: add cluster fleet evaluation support to mco #4316
MCO-424: cleanup: update references in docs from machine-os-contenet to rhel-coreos #4329
MCO-1029: MCO-678: Implement Boot Image update opt-in API #4281
MCO-1117: Make local MCO image builds faster #4296
OCPBUGS-32278: Fix configure-ip-forwarding.sh #4323
MCO-1102: OCPBUGS-32277: Add a ValidatingAdmissionPolicy for the boot images update opt-in API #4285
OCPBUGS-28230: enforce termination message policy on all platform pods #4318
MCO-1129: Re-land Adapting the MCO featuregate usage to new API #4315
OCPBUGS-28230: enforce termination message policy on all platform pods #4319
OCPNODE-1632: Support Cluster ImagePolicy CRD #4160
OCPBUGS-32028: Decrease logs of haproxy #4245
OCPBUGS-30192: Move StartLimitIntervalSec to Unit section #4304
OCPBUGS-28577: MCO-1030, MCO-910: Updating MCO base image to RHEL9 #4241
OCPBUGS-22910: Remove the condition for checking the multiple ovs-if-br-ex profiles #4016
OCPBUGS-18955: make sure CO degrades if OCL config is invalid #4294
OCPBUGS-31630: fix: resources were in the wrong indentation level #4299
TRT-1587: Revert #4275 “MCO-1092: Adapt the MCO’s featuregate usage to new API” #4295
OCPBUGS-31376: kubelet: restorecon necessary files on kubelet’s prestart #4287
MCO-1092: Adapt the MCO’s featuregate usage to new API #4275
OCPBUGS-31067: server: still serve kubeconfig with node-bootstrapper-token #4276
OCPBUGS-9108: OCPBUGS-24228: Make MCO operator always Available, add retry to applyManifests before degrading #4240
OCPBUGS-27316: configure-ovs: generate profiles directly in /run #4042
OCPBUGS-25744, OPNET-303: Remove weights from ingress check script #3698
OCPBUGS-31365: make verify should use MCO’s kube version #4280
MCO-760: add rebuild mechanism to ocb #4189
OCPCLOUD-2465: Updates GCR CredentialProviderConfig #4260
OCPBUGS-30852: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4261
MCO-909: Openshift/Kubernetes 1.29 Rebase Updates #4256
OCPBUGS-30239: Prevent OVS-configuration to run before kdump #4213
OCPCLOUD-2514, OCPCLOUD-2516: Remove reliance on feature gates for cloud provider flags #4228
NO-JIRA: Sync CRI-O owners #4234
OCPNODE-2098: Add static pod for kube-rbac-proxy-crio #4175
OCPCLOUD-2462: Add Image Credential Provider flags for Kubelet on Azure #4222
OCPBUGS-25821: backportable version of api-int cert work #4106
MCO-898: OCPBUGS-29857: OCPBUGS-29819: Implement an alerting mechanism for boot image update failures #4194
OCPCLOUD-2465: Add Image Credential Provider flags for Kubelet on GCP #4224
OCPBUGS-30136: APIVersion and Kind sometimes are empty when listing objects #4231
OCPBUGS-29946: Prevent pull images in podmanCopy if they are present #4216
OCPBUGS-18670: OCPBUGS-18535: MCO-809: rendercontroller should also reconcile machineconfigs #4158
OCPBUGS-30090: add node owner to MCN #4223
OCPBUGS-29067: Add HostToContainer propogataion for coreDNS pods on cloud platforms #4218
NO-JIRA: ovs-configfuration, run after nmstate.service #4212
OCPBUGS-29713: set nodeStatusReportFrequency #4204
MCO-998: sets up MCO repository for Snyk CI scans #4197
OCPBUGS-29732: Always touch resolv-prepender file at end of script #4207
OCPBUGS-29659: Apply new DNS configuration only if changed #4196
OCPBUGS-29624: Restart resolv-prepender on failure #4201
OCPNODE-1877: Delete image openshift/openshift-proxy-pull-test #4047
NO-JIRA: nmstate, configure nmstate to keep service yamls #4190
NO-ISSUE: OWNERS: Remove myself from reviewers #3628
NO-ISSUE: add e2e-techpreview-shared, remove layering test target #4183
OCPBUGS-27162: Add dependency on crio-wipe to resolv-prepender #4146
OCPBUGS-22324: Revert “Revert “Merge pull request #4028 from cybertron/wait-for-br-ex”” #4079
OPNET-355: Use NM’s dns-change event for resolv.conf #4133
OCPBUGS-18940: Add keepalived healthcheck for machine-config-server #4129
MCO-774: Write e2e tests for bootimage management #4177
NO-JIRA: remove kube-rbac-proxy for crio port #4181
OCPBUGS-26951: annotate on-prem static pods for workload partitioning #4143
NO-JIRA: Fix patch comparison bug in test #4176
docs/HACKING: Update command for building customize OCP release #4023
OCPBUGS-18955, OCPBUGS-18989, OCPBUGS-18991: add capability to react to OCB ImageBuilderType changes #4127
OCPBUGS-29098: Revert “OCPNODE-2024: crio: migrate metrics port to localhost only” #4168
OCPBUGS-28969: On-prem coredns manifests should not be generated for GCP #4165
OCPBUGS-26557: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4111
OCPNODE-2024: crio: migrate metrics port to localhost only #4164
OCPBUGS-24356: ovs-configure: fix vlan_parent calculation #4055
OCPBUGS-24705: consider currentImage and desiredImage annotations #4135
CORS-2814: Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used #4018
OCPBUGS-22721, OCPBUGS-25753: Run resolv-prepender entirely async #4102
OCPBUGS-26489: feat: enable nodeip service for single node #4142
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #4147
OCPBUGS-24366: Delete state files on reboot only #4124
OCPBUGS-17788: Improved error handling for missing MC #4096
OCPBUGS-27508: daemon: allow the user to override drains on IR changes #4139
MCO-831: added feature gate to mco for on cluster builds #4060
OCPNODE-2005: crio: add support for LinkLogs annotation by default #4116
OCPNODE-1632: Bump k8s api to v0.29.0 #4119
OCPBUGS-27190: Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies #4125
OCPBUGS-25662: Add Image Credential Provider flags for Kubelet on AWS #4103
OCPNODE-2021: add crio-kube-rbac-proxy #4108
OCPBUGS-24831: Updating ose-machine-config-operator-container image to be consistent with ART #4070
OCPBUGS-22664: Mount /run/nodeip-configuration into coredns containers #4058
OCPBUGS-27261: Fix typo in AWS node env unit #4126
NO-ISSUE: Update the design doc dual support icsp and idms #4085
NO-ISSUE: pkg/operator/sync: Set ownerReferences on *-user-data-managed Secrets #4089
OCPBUGS-25725: ManagedBootImages: failed to fetch architecture type of machineset no linked machine found #4088
OCPBUGS-26605: use machine client instead of oc for teardown #4110
OCPBUGS-5452: If node is not in pool, error #4097
OCPBUGS-24416: Sync MCN with node creation and deletion #4062
NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports #4091
MCO-679: MCO-830: Managed boot images MVP #4083
OCPBUGS-25406: Azure Run ovs-configuration.service before dnsmasq.service #4087
OCPBUGS-19628: Log network service output to console #3927
OCPBUGS-25362: kubelet: fix kubelet labels #4074
OCPBUGS-19427: Add source and mirror format regex validation #4064
docs/MachineOSBuilderDesign: ‘Known Limitations’ links #4086
OCPBUGS-25412: APIServer URL env should exist on all nodes #4076
OCPBUGS-25245: Add \n in cert_writer for old cert methods and skip cloudCA validation #4073
OCPBUGS-24030: add uncordon to mcn #4065
OCPBUGS-23085: MCO duplicates kernel arguments during firstboot #4046
OCPBUGS-25144: Remove MCN lister and informer from MCO struct #4071
OCPBUGS-24743: crio: drop automatic image cleanup on upgrades #4068
OCPNODE-1943: crio: add crun handler to template #4054
OCPBUGS-17877: daemon: Add support for new nmstate logic #4020
OCPBUGS-21597: Alleviate confusion over mco_state #4000
OCPBUGS-24012: Add templates for gc_thresh sysctls #4048
OCPBUGS-24035: execute cert related processes to ensure proper rotation #4050
MCO-681, OCPBUGS-20427: Add Key State Metrics, No datapoint found when querying up certain registered metrics #4052
OCPBUGS-19352: Fix bootstrap with NTO Operator and duplicate MachineConfigs #3972
COS-2526: CoreOS: Remove imgid field in coreos aleph #4034
TRT-1377: Revert #4028 “OCPBUGS-22324: Wait for br-ex up event before node-valid-hostname” #4053
TRT-1375: Revert #3965 “MCO-681, OCPBUGS-20427: Add Key State Metrics, No datapoint found when querying up certain registered metrics” #4051
MCO-664: adds on-cluster build dev preview docs #3885
OCPBUGS-24177: fix race for MCN creation #4049
OCPBUGS-15934: unit test ctrrcfg uses *resource.Quantity to use *resource.Quantity #4044
OCPBUGS-22324: Wait for br-ex up event before node-valid-hostname #4028
MCO-681, OCPBUGS-20427: Add Key State Metrics, No datapoint found when querying up certain registered metrics #3965
OCPBUGS-24019: Add ownership annotations to TLS artifacts #4045
MCO-795: MCO-813: MCO-473: Implement Upgrade-Monitor, FeatureGate, and MachineConfigNode types #4012
OCPBUGS-23255: Add FIPS information to oldconfig when checking if reboot is needed #4033
OCPBUGS-23484: kubevirt, Activate nodeip-configuration.service #4039
OCPBUGS-23432: Use shorter IP label for keepalived VIP #4040
OCPCLOUD-1609: Fix syntax in vsphere-hostname.yaml for CAPI machines #4037
OCPBUGS-23209: workaround nmstate bug by configuring ipv{4,6} addresses #4026
OCPBUGS-22200: Retry fetching OpenStack hostname if it fails #3990
OCPBUGS-22721: Don’t retry node-ip show in resolv-prepender #4017
MCO-772: controller: allow custom pool configs to take priority #4015
OCPBUGS-18414, OCPBUGS-18456, OCPBUGS-18458: Configures SSH Keys and Password for core, fixes config drift degradation #3946
Use the bridge interface name for ofport request #3998
OCPBUGS-7638: typo s/iface_default_hint_file/default_bridge_file/ #4004
OCPBUGS-16871: MCO - currentConfig missing on the filesystem #3963
OCPBUGS-20369: Require a hostname override for AWS #3979
OCPBUGS-21814: bump library-go and k8s dependencies to most recent version #3988
OCPBUGS-19736: configure-ovs: handle SIGINT and SIGTERM #3982
Add kernel-64k kernelType #3903
MCO-593: Consume MCO API and CRDs from openshift/api #3747
Get the nmstate pinned package from kojihub when building on top of a CentOS base image #3954
CRI-O: Use 127.0.0.1 for stream server with random port #3853
OCPBUGS-20499: gcp-routes: don’t exit on crictl failures #3977
OCPBUGS-7638: Allow specifying the interface for br-ex #3696
OCPBUGS-20338: dashboard should detect unknown and not ready for not ready dashboard #3964
OCPBUGS-19722: Informers are setup with incorrect namespace #3955
OCPBUGS-15087: templates: Introduce kubelet-dependencies.target #3865
OCPBUGS-17841: Ensure gcp-routes hack for internalLB hairpin traffic works for SGW #3953
OCPCLOUD-1609: Set guestinfo.hostname for CAPI VMs on vSphere #3949
OCPBUGS-19708: Support to append the duplicate kernel arguments to the rendered MC #3947
OCPBUGS-18771: Consider ingress VIPs when selecting node IP #3943
MCO-424: Drop machine-os-content references #3364
OCPBUGS-19992: Add v6-primary dual stack support to VSphere UPI #3670
OCPNODE-1799: support icsp and idms objects #3898
Improve kubelet error log #3914
OCPBUGS-18772: Use image exists in resolv-prepender instead of wc -l #3910
MCO-707: Strip registry transport from os image URL for comparison #3857
OCPBUGS-15583: Revert “Revert “fix nodeStatusUpdateFrequency”” #3890
OCPBUGS-17811: add certificate input to bootstrap mcs #3876
MCO-746: make buildcontroller tests less flaky #3905
OCPBUGS-18902: Internal Registry Secrets merge causing excessive API calls #3912
MCO-664: adds e2e for on-cluster build dev preview #3807
Dockerfile: update local copy to OCP 4.15 image #3922
OCPBUGS-19365: Ignore invoking nbctl calls if its SDN #3926
OCPBUGS-15910: After dual-stack conversion reconcile IPFamilies #3909
OCPBUGS-18800: fix merged image registry CA behavior #3851
mod: Update rpmostree-client-go #3916
OCPBUGS-13044: daemon: always use podman cp to copy extensions container content #3921
OCPBUGS-18906: Remove dependency on k8s.io/kubernetes packages #3913
OCPBUGS-19097: Updating openshift-proxy-pull-test images to be consistent with ART #3918
OCPBUGS-18772: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again #3907
OCPBUGS-19179: Updating ose-machine-config-operator images to be consistent with ART #3919
OCPBUGS-16905: install: Recreate and delayed default ServiceAccount deletion #3895
MCO-765: Examine/Remove memory limits on MCO pods #3915
MCO-731: Move services machine-config-daemon-pull.service and machine-config-daemon-firstboot.service before ovs-configuration.service #3858
MCO-708: Extract and merge kernel arguments from /proc/cmdline #3856
configure-ovs-network: Add tun device support #3618
OCPBUGS-11437: MCO keeps the pull secret to .orig file once it replaced #3759
Full changelog

machine-image-customization-controller

METAL-855: drop the default for inspector URL #124
OCPBUGS-28728: Updating ose-image-customization-controller-container image to be consistent with ART for 4.16 #122
OCPBUGS-24579: account for more cases when handling base URLs #120
METAL-834: Add –metrics-addr argument to controller #110
OCPBUGS-25538: Updating ose-image-customization-controller-container image to be consistent with ART #116
METAL-835: Get secret from mounted file when envvar empty #115
OCPBUGS-25099: Updating ose-image-customization-controller-container image to be consistent with ART #114
OCPBUGS-24832: Updating ose-image-customization-controller-container image to be consistent with ART #113
OCPBUGS-15599: configurable ironic agent vlan creation #109
OCPBUGS-21789: Uplift x/net to v0.17.0 #103
OCPBUGS-19186: Updating ose-image-customization-controller images to be consistent with ART #99
Full changelog

machine-os-images

OCPBUGS-54169: Change rhcos release browser url #57
CORS-2797: Image to rhel9 #36
OCPBUGS-24816: Updating ose-machine-os-images-container image to be consistent with ART #34
NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 #33
NO-ISSUE: Force updating 4.15 CI images #32
OCPBUGS-19133: Updating ose-machine-os-images images to be consistent with ART #30
Full changelog

monitoring-plugin

OU-559: fix log based alerts namespace for dev console #320
OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
OCPBUGS-42424: fix path-to-regexp dependency #197
NO-JIRA: Use rhel9 base image in Dockerfile #122
OU-416: throw an error when a custom datasource is not found #117
OCPBUGS-12857: Gracefully Handle NaN values in stacked graphs #111
OU-395: Alert detail page renders buttons and links from the plugin extension #114
OCPBUGS-31931: make createdBy mandatory and auto fill with the current user #113
OU-379: Add datasource parameter to handle metrics from custom datasources #112
OU-370: Split Dashboard Label and Line Chart Queries #109
OCPBUGS-31111: Disable nginx module for rhel9 #110
OCPBUGS-31111: Updating monitoring-plugin-container image to be consistent with ART for 4.16 #108
OCPBUGS-31111: Updating monitoring-plugin-container image to be consistent with ART for 4.16 #103
OCPBUGS-29947: upgrade sanitize-html vulnerable dependency #105
OCPBUGS-31291: Upgrade Webpack dev server #104
NO-ISSUE: Add peteryurkovich to OWNERS #102
OU-321: Fix monitoring-alert-list-item extension action to pass alert object #101
NO-ISSUE: Update README.md #100
OU-236: Add CSV export option to dashboards and metrics tables #98
OU-310: Add an extension point for alerts, to be able to add an inspect link #95
OU-309: consider all metric keys to display all results on dashboards tables #96
OCPBUGS-27201: upgrade follow-redirects parent dependency #92
OU-311: Add Dockerfile for local testing #91
OU-308: Revert “fix default nginx path to look for static files” #90
OCPBUGS-25313: On the alert details page, don’t require all alert labels in URL #88
OCPBUGS-24848: Updating monitoring-plugin-container image to be consistent with ART #86
OCPBUGS-24515: remove regex from console page route path so plugin pages are found #84
OU-298: fix default nginx path to look for static files #83
OCPBUGS-22104: disable query link for non metric-based alerts #78
OU-285: add test-id to panel charts to ease e2e tests when titles change #80
Upgrade Node.js from v16 to v18 in images #79
OU-261: Fix “Overwriting current silence” info alert to have padding #74
OU-179: Fix the root cause of externalLabels not present on alerts #53
Revert “Fix i18n namespace for navigation menu entries” #77
Fix i18n namespace for navigation menu entries #73
add ipv6 nginx configuration #76
OCPBUGS-19233: Updating monitoring-plugin images to be consistent with ART #75
Full changelog

multus-admission-controller

OCPBUGS-36341: Update owners #87
OCPBUGS-32303: Add .snyk file to fix SAST warning messages #84
OCPBUGS-32219: Upstream sync 2024 04 #83
OCPBUGS-24864: Updating ose-multus-admission-controller-container image to be consistent with ART #80
OCPBUGS-24864: Updating ose-multus-admission-controller-container image to be consistent with ART #79
OCPBUGS-24864: Updating ose-multus-admission-controller-container image to be consistent with ART #78
OCPBUGS-20531: Update cipher for security hardenings #76
OCPBUGS-21775: Update master (with CVE fix) #70
OCPBUGS-19094: Updating ose-multus-admission-controller images to be consistent with ART #69
Full changelog

multus-cni

OCPBUGS-34910: Thick plugin should not wait for API readiness on CNI DEL #238
OCPBUGS-34924: Update owners file #239
OCPBUGS-33256: Fix CNI cache update function to prevent nil access #230
OCPBUGS-32440: Update snyk file to add exclude vendor #229
OCPBUGS-32393: April 2024 #228
OCPBUGS-30449: Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 #226
USHIFT-2218: Dockerfile for MicroShift #222
OCPBUGS-29856: Upstream sync to 2024 02 22 #221
OCPBUGS-28270: Fix SAST scan issues for multus-cni-container #217
OCPBUGS-27429: Reload bootstrap kubeconfig if cert mgr failed to load valid certs #216
OCPBUGS-29162: Upstream sync to 20240207 #214
OCPBUGS-28270: Remove unused webhook related yamls #213
OCPBUGS-28583: Updating multus-cni-container image to be consistent with ART for 4.16 #212
OCPBUGS-26222: Adds a wait to account for the possiblity of a not ready unix socket #208
OCPBUGS-24863: Updating multus-cni-container image to be consistent with ART #204
OCPBUGS-26397: Revert #205 “Adds a wait on unix socket readiness” #207
OCPBUGS-26222: Adds a wait on unix socket readiness #205
OCPBUGS-24863: Updating multus-cni-container image to be consistent with ART #203
OCPBUGS-24863: Updating multus-cni-container image to be consistent with ART #202
OCPBUGS-23475: Fix to use lumberjack only for logging files #201
OCPBUGS-21915: Upstream sync with go.mod update #193
OCPBUGS-19859: Multus annotation permissions: Certificate duration should be configurable #191
OCPBUGS-18995: Move chroot from multus main process to its child processes (#1161) #186
OCPBUGS-19364: Updating multus-cni images to be consistent with ART #183
Per node cert #184
OCPBUGS-18307: Performance and efficiency improvements in daemon/server mode #180
Full changelog

multus-networkpolicy

Revert art-bot PR#42 #43
Full changelog

multus-route-override-cni

OCPBUGS-37726: Update owners #58
OCPBUGS-28557: Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 #54
OCPBUGS-24721: Updating ose-multus-route-override-cni-container image to be consistent with ART #53
OCPBUGS-24721: Updating ose-multus-route-override-cni-container image to be consistent with ART #52
OCPBUGS-24721: Updating ose-multus-route-override-cni-container image to be consistent with ART #51
OCPBUGS-18848: Updating ose-multus-route-override-cni images to be consistent with ART #48
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55618: Fixes leftover podref issue #365
OCPBUGS-50005: [Release-4.17]Kubeconfig loop #340
OCPBUGS-37707, OCPBUGS-37708: [release-4.16] align api calls timeout and skip pods marked for deletion #304
OCPBUGS-37723: Update owners #294
OCPBUGS-35923: [release-4.16] Return previous IP allocation for add cmd #293
OCPBUGS-34929: [release-4.16] Use IP to identify orphaned allocation to be deleted #286
OCPBUGS-33565: Upstream sync may24 #278
OCPBUGS-32931: Add .snyk file #254
OCPBUGS-28556: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART for 4.16 #242
OCPBUGS-26986: Downstream sync - includes configurable schedule for reconciler #227
OCPBUGS-26017: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #223
OCPBUGS-24608: Downstream sync - includes assignment error fix #211
OCPBUGS-24720: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #213
OCPBUGS-24720: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #212
OCPBUGS-22075: update golang.org/x/net to v0.17.0 #206
OCPBUGS-18893: Rechecking pending Pods (conflict resolved) #196
OCPBUGS-18847: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #192
Full changelog

must-gather

OCPBUGS-42960: Gather OSUS data #455
OCPBUGS-48082: Update owners #473
OCPBUGS-46407: Support gathering IPsec data #469
OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
OCPBUGS-35357: Run ppc node collection in parallel #426
WRKLDS-1257: Switch must-gather to RHEL9 as base image #421
WRKLDS-1251: Use oc.rhel8 based on the target arch of image #420
NO-JIRA: Use oc rhel8 binary explicitly until base image is rhel9 #418
MON-3754: Enable metrics-server audit log collection #413
OCPBUGS-32210: Collect Assisted Installer Namespace Logs #417
CNF-9168: MetalLB: adjust to support frrk8s and small fix #412
OCPBUGS-31900: Updating ose-must-gather-container image to be consistent with ART for 4.16 #409
SDN-4597: Add cluster scoped ANP resource to collection #411
NO-JIRA: Add ARO support to must-gather client #392
OCPBUGS-30349: Updating ose-must-gather-container image to be consistent with ART for 4.16 #406
WRKLDS-950: use must-gather since and since time env vars on inspect cmds #400
OCPBUGS-25054: Updating ose-must-gather-container image to be consistent with ART #395
OSASINFRA-3290: Remove Kuryr info gathering #393
machineconfig: always gather MCS-served config #380
OCPBUGS-20391: Revert “Add must gather script for network observability” #390
gather_sriov: Fix typos and collect SRIOV cache at /var/lib/cni/sriov #369
sriov: Clean up ip netns output #387
OCPBUGS-19280: Updating ose-must-gather images to be consistent with ART #381
ppc: explicitly add RuntimeClass to gathered resources #386
OCPBUGS-19761: Removed workload partitioning annotation from ppc script #385
Full changelog

network-interface-bond-cni

OCPBUGS-28578: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 #62
OCPBUGS-24835: Updating ose-network-interface-bond-cni-container image to be consistent with ART #60
OCPBUGS-19192: Updating ose-network-interface-bond-cni images to be consistent with ART #59
Full changelog

network-metrics-daemon

Correct 4.16 owners file (#98) #98
Updating ose-network-metrics-daemon-container image to be consistent with ART (#91) #91
Updating ose-network-metrics-daemon-container image to be consistent with ART (#89) #89
Added METRIC_TEST_IMAGE var (#86) #86
Update the k8s dependencies to 1.28.3 (#81) #81
Updating ose-network-metrics-daemon images to be consistent with ART (#80) #80
Full changelog

network-tools

add missing go vendors #140
OCPBUGS-33388: Updating ose-network-tools-container image to be consistent with ART for 4.16 #125
NO-JIRA: New label for CI flakes #124
NO-JIRA: Fix alphabetical ordering of packages in Dockerfiles #123
OCPBUGS-31699: replace wireshark with wireshark-cli #116
NO-JIRA:Add sdn-team-bot #115
NO-JIRA:Fix bug list formatting in verbose mode and remove metal lb component #114
NO-JIRA: add total and external rows + misc fixes #113
NO-JIRA: Remove SAST,ART,backport bugs from bug count & show them separately #112
NO-JIRA: ovn-db-run-locally: Make DB Type Param Optional #101
OCPBUGS-26490: Updating ose-network-tools-container image to be consistent with ART #108
NO-JIRA: jira-scripts: disable flavio #111
NO-JIRA: Update docs after adding a new command. #110
SDN-4194: Add a script to find OVN perf problems #107
OCPBUGS-25040: Updating ose-network-tools-container image to be consistent with ART #105
NO-JIRA: Adding bcc to the container #104
SDN-4189: Update OVS flows counter to work for cookies with leading 0. #103
OCPBUGS-24385: Align status and assignee between jira and github #100
OCPBUGS-24276: Add “networking / network-tools” to list of components #102
SDN-4189: Fix error when nbdb and sbdb leader are located on different nodes #99
SDN-4189: Add flow counter script for ACLs #98
SDN-4182: Script cleanup + track ovnk upstream issues in jira #97
OCPBUGS-22166: Move commands to the function to avoid them being executed on -h. #93
Update docs to use image-streams instead of quay image #91
jira-scripts: Add Zenghui, remove Vic #90
Add Flavio as approver #89
SDN-3904: Update scripts in network-tools to reflect the changes in IC model #86
SDN-4047: Migrate bug-dispath query scripts #88
OCPBUGS-19292: Updating ose-network-tools images to be consistent with ART #87
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
OCPCLOUD-2418: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (b009266) into main #21
OCPBUGS-22623: Bumps otehttp to v0.44.0 #29
OCPBUGS-25629: Add Snyk file to exclude vendor directory on scan #26
OCPBUGS-24101: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART #23
NO-JIRA: Add .ci-operator.yaml file #24
Update OWNERS #22
OCPCLOUD-2182: Update to match K8s v1.28 dependencies #20
OCPBUGS-19165: Updating ose-nutanix-cloud-controller-manager images to be consistent with ART #19
Full changelog

nutanix-machine-controllers

AUTH-482: set required-scc for openshift workloads #73
OCPBUGS-27390: IPI install fails on Nutanix when using DHCP #66
OCPBUGS-27874: Update Snyk file to exclude other vendor folders #65
OCPCLOUD-2425: Rebase to k8s 129 #64
OCPBUGS-26184: Add Snyk file to exclude vendor directory on scan #63
OCPBUGS-24949: Updating ose-nutanix-machine-controllers-container image to be consistent with ART #58
Updating ose-nutanix-machine-controllers-container image to be consistent with ART #57
SPLAT-1272: Add support for Nutanix failure domains. #56
Update OWNERS #55
OCPCLOUD-2189: Update to match K8s v1.28 dependencies #54
OCPBUGS-19208: Updating ose-nutanix-machine-controllers images to be consistent with ART #51
OCPBUGS-5969: machine stuck in Provisioning and machineset scale/delete not work #52
Full changelog

oauth-apiserver

OCPBUGS-30525: Update dependencies to address CVE-2024-24786 #124
NO-ISSUE: openapiconfig: generate base config using DefaultOpenAPIConfig #111
OCPBUGS-30319: bump lib-go to fix SAs acting as OAuth2 clients #108
NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness #106
NO-ISSUE: oauth-apiserver: apply GenericServerRunOptions to the server configuration #105
OCPBUGS-29176: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.16 #101
OCPBUGS-28658: bump k8s.io and others (master) #98
OCPBUGS-24954: Updating ose-oauth-apiserver-container image to be consistent with ART #94
OCPBUGS-27094: UPSTREAM: <carry>: retry etcd Unavailable errors #95
OCPBUGS-19214: Updating ose-oauth-apiserver images to be consistent with ART #90
Full changelog

oauth-proxy

OCPBUGS-24791: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART #270
OCPBUGS-21718: go.mod: bump golang.org/x/net to v0.17.0 #266
OCPBUGS-18858: Updating golang-github-openshift-oauth-proxy images to be consistent with ART #265
Full changelog

oauth-server

OCPBUGS-35374: p/o/handlers - fix nil-pointer, if ResStatus is nil #152
NO-JIRA: bump go-jose to a newer version #147
OCPBUGS-32331: Updating oauth-server-container image to be consistent with ART for 4.16 #145
OCPBUGS-24987, OCPBUGS-30319: bump lib-go to fix SAs acting as OAuth2 clients #142
OCPBUGS-21671: go.mod: bump golang.org/x/net to v0.17.0 #137
Full changelog

oc-mirror

changes the owners file (#1015) #1015
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1021) #1021
OCPBUGS-38035: Rebuild catalogs – without cache generation (#905) #905
OCPBUGS-36410: fix: creates tags for release images (#901) #901
OCPBUGS-37055: Use proxy for HTTP request release signatures (#893) #893
OCPBUGS-37040: use current working-dir for fetching release content for disk to mirror (#892) #892
OCPBUGS-36498: Fix to ensure invalid catalogs are skipped (#889) #889
OCPBUGS-362214: Fix V2 DiskToMirror should not require internet access (#884) #884
OCPBUGS-35279: Fix spelling error in delete console message (#881) #881
OCPBUGS-35409: Implement fail safe / fail fast in workers (#879) #879
OCPBUGS-33775: Do not generate idms & itms if nothing has been mirrored (#871) #871
CLID-122: upgrades distribution/distribution for a released version (#864) (#868) #864
OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#863) #863
OCPBUGS-33081: Skip images that don’t follow standards, semver and naming (#861) #861
OCPBUGS-33196: skip images with both tag and digest (#853) #853
OCPBUGS-31608: Fix IDMS/ITMS generated source repository in case of empty namespace (#850) #850
OCPBUGS-31858: CLID-97: Provide a way to skip failing images (#854) #854
OCPBUGS-31622: Fix operator related image has empty reference (#851) #851
OCPBUGS-31536: OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) #852
OCPBUGS-32547: Fix delete generation for mirror to mirror flow (#848) #848
OCPBUGS-31536: Change default behavior to not rebuild catalogs for V1 - 2 (#847) #847
Fix golint errors (#845) #845
OCPBUGS-31536: Change default behavior to not rebuild catalogs for V1 (#844) #844
OCPBUGS-33098: feat: generates a file with errors during mirroring (#843) #843
OCPBUGS-31092: Fix archive tar file size to respect the archiveSize setting when mirror with V2 format (#842) #842
OCPBUGS-31083: Fix help for –strict-archive flag (#841) #841
CLID-101: Fix graph image mirroring during MirrorToDisk (#840) #840
CLID-63: moves pkg dir to internal dir (#839) #839
CLID-101: Fix TlsVerify always set to false (#838) #838
CLID-80: changes README.md (#837) #837
Exit if release is unsigned (#834) #834
OCPBUGS-23479 (#835) #835
CLID-81: refines v2 –help (#836) #836
CLID5: Create API v2alpha1 for oc-mirror v2 TP (#830) #830
CLID-19: Replace the prepare subcommand by dry-run flag (#829) #829
CLID-95 removes the concurrency and adds a progress bar on batch pkg (#832) #832
CLID-53: Introduce env var to provide OCP release signature verification key (#831) #831
CLID-35: introduce filtering operators by selecting specific bundles (#824) #824
OCPBUGS-31024, OCPBUGS-31529, OCPBUGS-31530: Remove creationTimestamp from the generated yaml catalogSource (#826) #826
CLID-46, CLID-47: Use of TargetCatalog and TargetTag on all catalogs (#827) #827
CLID-20: feat: Delete functionality for v2 enclave support (#812) #812
CLID-85: Change string replacement in registry config to use templates (#828) #828
OCPBUGS-31466: Fix for oc-mirror new defaultChannel override (#815) #815
Bump version to include v5.11.0 of go-git (#821) #821
CLID-54: Mirror to mirror workflow (#811) #811
OCPBUGS-31024: Ommit icon from catalogSource if empty (#816) #816
OCPBUGS-31344: fix: issue when different versions of the same operator catalog (#820) #820
OCPBUGS-31084: feat: changes the code to have retro-compatible version command with v1 (#817) #817
CLID-8: Initial E2E test (#798) #798
OCPBUGS-19853: improve support for multiarch (#813) #813
CLID-17: feat: docker v2s2 manifest list (fat manifest) / oci image index implementation (#810) #810
CLID-70: fix: issue when mirroring multiple catalogs (#807) #807
CLID-67: feat: adds –v1 flag to redirect to legacy code (#806) #806
CLID-27: Update to include oci (disk based layout) for v2 (#800) #800
changes to support pulling charts from URL (#723) #723
CLID-9: feat: hide unnecessary flags (#801) #801
CLID-7: feat: load operator catalog using LoadFS (#799) #799
CLID-24, CLID-9: Support incremental mirroring using archives by date (#795) #795
CLID-21, CLID-22, CLID-9: Respect archive max size (#789) #789
Fix documentation diagram (#792) #792
CLID-14: feat: operator catalog filtering on v2 (#787) #787
CLID-10: Generate CatalogSource files (#784) #784
CLID-10: Generate ITMS along with IDMS (#781) #781
CLID-30: Update overall code coverage in v2 (#783) #783
Make EnclaveSupport a DevPreview (#788) #788
CLID-14: docs: adds 2 new scenarios (#785) #785
CLID-14: docs: add 3 new scenarios for catalog filtering (#782) #782
OCPBUGS-26513: Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#772) #772
CLID-14: Add study results in docs (#778) #778
OCPBUGS-23550: Generate both binaries for rhel8 and rhel9 (#767) #767
Add documentation for enclave support (#771) #771
OCPBUGS-16801: fix: fixes the bug on catalog when using field archiveSize: 1 (#773) #773
Fix to ensure operator not found error exits with correct status (#770) #770
Fix to ensure tar sequence is ignored using –skip-pruning (#760) #760
Updating oc-mirror-plugin-container image to be consistent with ART (#763) #763
OCPBUGS-385: Capability to override default channel (#749) #749
OCPBUGS-21865: Honor IncludeChannel.MaxVersion when mirroring differentially (#761) #761
OCPBUGS-24357: Move logs folder under workingDir (#750) #750
OCPBUGS-24359: Fix including duplicate blobs in archive (#753) #753
OCPBUGS-23550: - oc-mirror on RHEL9 Host with FIPS enabled (#751) #751
Add generation of updateService.yaml (#746) #746
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#752) #752
OCPBUGS-23327: Fix MirrorToDisk of oci catalogs in hidden folders (#748) #748
Make A.Guidi approver on oc-mirror (#755) #755
Fix default port for V2 ‘prepare’ subcommand (#747) #747
Adding release payload signatures to graph-data container (#742) #742
OCPBUGS-23339: fix IDMS custom resource name (#743) #743
remove unnecessary print statement (#745) #745
OCPBUGS-23309: Do not panic if port chosen to run local cache is already bound (#744) #744
CFE-994: cache location separate of working-dir (#741) #741
Integrate Unarchive process to DiskToMirror workflow (#740) #740
CFE-977, CFE-991: archive generation at the end of MirrorToDisk workflow (#739) #739
CFE-981: Create UnArchiver interface and implementation (#738) #738
CFE-977, CFE-980: Introduce Archiver interface and its implementation MirrorArchiver (#734) #734
feat: history file reader and writer (#736) #736
skipping prune failure if manifest not found (#733) #733
Package ioutil is deprecated as of Go 1.16 (#731) #731
CFE-977: Implementation of a blob gatherer for images in the local cache (#732) #732
refactorings (#728) #728
Fix –from being set to default value in mirrorToDisk workflow (#727) #727
OCPBUGS-22947: Should not generate graph with prepare subcommand (#725) #725
Cancel community office hours: none for the moment (#726) #726
CFE-965: [V2] Enable signature verification (#709) #709
CFE-971: Generate OSUS graph image - uses go-containerregistry implementation (#722) #722
Pr template change (#719) #719
CFE-899, CFE-958: feat: removes the registry dns (#718) #718
Remove Dockerfile.integration - not used - reduce confusion (#716) #716
OCPBUGS-21864: fix: CVE-2023-39325 and CVE-2023-44487 (#712) #712
Introduce subcommand prepare (#702) #702
Initial implementation of IDMS generation (#707) #707
Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) #704
CFE-935: [V2] Implement a release collector relying on local registry as storage (#690) #690
Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#697) #697
CFE-956: feat: adds tags on the related images (#695) #695
Updating oc-mirror-plugin images to be consistent with ART (#698) #698
Update list updates CLI documentation (#687) #687
CFE-906: [V2]Enclave support - Separate log file for local storage (#686) #686
CFE-955: changes owner file (#694) #694
CFE-897, CFE-907: feat: add code to call v2 from v1 (#692) #692
Full changelog

olm-catalogd

OCPBUGS-31286: Updating ose-olm-catalogd-container image to be consistent with ART for 4.16 #48
NO-ISSUE: UPSTREAM: <carry>: update owners #47
NO-ISSUE: Synchronize From Upstream Repositories #46
OCPBUGS-29453: UPSTREAM: 231: make garbage collection a runnable #42
NO-ISSUE: Remove ncdc from OWNERS #41
NO-ISSUE: Synchronize From Upstream Repositories #38
OCPBUGS-25172: Updating ose-olm-catalogd-container image to be consistent with ART #37
NO-JIRA: add tmshort to approvers #34
OCPBUGS-24806: Updating ose-olm-catalogd-container image to be consistent with ART #36
NO-ISSUE: Synchronize From Upstream Repositories #33
NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #35
OPRUN-3079: UPSTREAM: <carry>: Drop commitchecker #32
Update to Upstream v0.7.0 #31
OCPBUGS-20517: UPSTREAM: <drop>: Bump golang.org/x/net from 0.10.0 to 0.17.0 (#197) #29
OCPBUGS-19117: UPSTREAM: <carry>: Updating ose-olm-catalogd images to be consistent with ART #28
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #102
NO-ISSUE: Synchronize From Upstream Repositories #101
NO-ISSUE: Synchronize From Upstream Repositories #99
OCPBUGS-31459: Synchronize From Upstream Repositories #97
OPRUN-3268: Add pointer to tooling README for downstreaming info #94
OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #89
NO-ISSUE: Synchronize From Upstream Repositories #92
NO-ISSUE: UPSTREAM: <carry>: update owners #91
NO-ISSUE: Synchronize From Upstream Repositories #90
NO-ISSUE: Synchronize From Upstream Repositories #88
OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #86
NO-ISSUE: Synchronize From Upstream Repositories #87
NO-ISSUE: Synchronize From Upstream Repositories #84
NO-ISSUE: Synchronize From Upstream Repositories #83
NO-ISSUE: Synchronize From Upstream Repositories #82
NO-ISSUE: Synchronize From Upstream Repositories #81
NO-ISSUE: Synchronize From Upstream Repositories #80
NO-ISSUE: Synchronize From Upstream Repositories #79
NO-ISSUE: Synchronize From Upstream Repositories #78
NO-ISSUE: Synchronize From Upstream Repositories #77
NO-ISSUE: Synchronize From Upstream Repositories #76
NO-ISSUE: Synchronize From Upstream Repositories #75
NO-ISSUE: Synchronize From Upstream Repositories #74
NO-ISSUE: Synchronize From Upstream Repositories #73
NO-ISSUE: Synchronize From Upstream Repositories #72
NO-ISSUE: Synchronize From Upstream Repositories #70
NO-ISSUE: Synchronize From Upstream Repositories #67
NO-ISSUE: Synchronize From Upstream Repositories #66
NO-ISSUE: Synchronize From Upstream Repositories #65
NO-ISSUE: Synchronize From Upstream Repositories #64
NO-ISSUE: Synchronize From Upstream Repositories #63
NO-ISSUE: Synchronize From Upstream Repositories #62
NO-ISSUE: Synchronize From Upstream Repositories #61
NO-ISSUE: Synchronize From Upstream Repositories #60
NO-ISSUE: Synchronize From Upstream Repositories #59
OCPBUGS-24795: Updating ose-olm-operator-controller-container image to be consistent with ART #51
NO-ISSUE: Synchronize From Upstream Repositories #56
NO-ISSUE: Synchronize From Upstream Repositories #55
NO-ISSUE: Synchronize From Upstream Repositories #54
NO-ISSUE: Synchronize From Upstream Repositories #53
NO-ISSUE: Synchronize From Upstream Repositories #50
NO-ISSUE: Synchronize From Upstream Repositories #49
NO-ISSUE: Synchronize From Upstream Repositories #48
NO-ISSUE: Synchronize From Upstream Repositories #47
NO-ISSUE: Synchronize From Upstream Repositories #46
NO-ISSUE: Synchronize From Upstream Repositories #41
NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #44
OPRUN-3081: UPSTREAM: <carry>: Drop commitchecker #37
OPRUN-3075: Update to Upstream v0.7.0 #31
OCPBUGS-20505: Bump golang.org/x/net to v0.17.0 #28
OCPBUGS-19096: UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART #27
Full changelog

olm-rukpak

NO-ISSUE: Synchronize From Upstream Repositories #84
NO-ISSUE: Synchronize From Upstream Repositories #83
NO-ISSUE: UPSTREAM: <carry>: update owners #82
OCPBUGS-31278: Updating ose-olm-rukpak-container image to be consistent with ART for 4.16 #81
NO-ISSUE: Synchronize From Upstream Repositories #80
NO-ISSUE: Synchronize From Upstream Repositories #78
NO-ISSUE: UPSTREAM: <carry>: Remove ncdc from OWNERS #74
OCPBUGS-27792, OCPBUGS-27796: Synchronize From Upstream Repositories #69
OCPBUGS-27792, OCPBUGS-27796: UPSTREAM: revert “UPSTREAM: <carry>: Update go-git to v5.11.0” #71
OCPBUGS-27792, OCPBUGS-27796: [Upstream]: <carry>: Update go-git to v5.11.0 #70
OCPBUGS-25535: Updating ose-olm-rukpak-container image to be consistent with ART #68
OCPBUGS-24825: Updating ose-olm-rukpak-container image to be consistent with ART #67
NO-ISSUE: Synchronize From Upstream Repositories #66
NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #57
OPRUN-3080: UPSTREAM: <carry>: Drop commitchecker #51
OPRUN-3078: Update to Upstream v0.15.0 #50
Update to Upstream v0.14.0 #44
OCPBUGS-20506: Bump golang.org/x/net from 0.15.0 to 0.17.0 #36
OCPBUGS-19167: UPSTREAM: <carry>: Updating ose-olm-rukpak images to be consistent with ART #35
Full changelog

openshift-apiserver

OCPBUGS-49656: prevent panic when no image and error are set #494
OCPBUGS-49656: validate image property isn’t nil before using #493
OCPBUGS-49656: move on to the next digest/tag during failures #492
OCPBUGS-45010: Pass expected type to deploymentconfig/scale object validation. #461
OCPBUGS-42724: fail image import when both image and error are nil #455
OCPBUGS-33574: Bump library-go #434
OCPBUGS-31666: Bump openshift/api for Route API godoc fix #433
CFE-885: Feature route external certificate validation #407
AUTH-509: remove unauthenticated group from any cluster role binding #423
OCPBUGS-31957: Bump golang/x/net to v0.23.0 #427
OCPBUGS-22301: make GarbageCollection supported for ClusterResourceQuotas as it is backed by a CRD #405
CFE-1048: Bump Kubernetes to 1.29.2 #425
NO-ISSUE: go mod tidy && go mod vendor #420
OCPBUGS-30279: vendor upgrade runtime-utils #419
OCPBUGS-27927: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.16 #415
OCPBUGS-27094: UPSTREAM: <carry>: retry etcd Unavailable errors #410
OCPBUGS-24895: Updating ose-openshift-apiserver-container image to be consistent with ART #409
API-1644: add serviceaccount/patch to pull secret controller role #408
OCPBUGS-21735: Enable HTTP/2 CVE mitigation #396
OCPBUGS-19145: Updating ose-openshift-apiserver images to be consistent with ART #390
API-1644: add TokenRequest to pull-secret controller’s cluster role #403
Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled #395
OCPBUGS-18969: remove image pruner cluster role creation #391
OCPBUGS-16514: use import mode to manifest cache key #386
OCPBUGS-17674: pkg/image: avoid unnecessary service lookups when registry is removed #387
OCPBUGS-5823: remove unused service-ca roles #388
Full changelog

openshift-controller-manager

OCPBUGS-44186: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #351
OCPBUGS-48202: Add team members to the OWNERS file #358
NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
OCPBUGS-37526: Race condition when deleting ServiceAccount #324
OCPBUGS-36862: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #323
OCPBUGS-34825: Whitelists lower-case proxy envs to pod proxydefaults #314
OCPBUGS-33893: openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets #309
OCPBUGS-33876: filter delete events #308
OCPBUGS-33600: revert revert and fix for hypershift #305
Revert #288 “API-1644: Use bound service account tokens when generating pull secrets” #304
API-1644: Use bound service account tokens when generating pull secrets #288
OCPBUGS-33241: panic in image trigger controller #302
OCPBUGS-30688: bump go-jose to fix CVE-2024-28176 #297
OCPBUILD-9: Adds roleBinding controllers to the controllerInitializers #296
OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade #300
TRT-1632: Revert #298 “OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade.” #301
OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade. #298
OCPBUGS-31213: Unable to look up the service account secrets for build #292
BUILD-725: Adds build & deployer controller #289
OCPBUGS-23848: Bumps otelgrpc version & dependencies #293
BUILD-854: Add adambkaplan as approver #290
WRKLDS-1016: bump k8s to 1.29.1 #283
OCPBUGS-28665: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #284
OCPBUGS-22471: Mitigate CVE-2023-30551 (rekor) #280
API-1651: Create separate controllers for default service accounts #272
API-1652: bump go.mod go to 1.20 #267
OCPBUGS-19136: Updating ose-openshift-controller-manager images to be consistent with ART #273
OCPBUGS-18498: Disable Build and DeploymentConfig Informers if their caps are disabled #270
Full changelog

openshift-state-metrics

OCPBUGS-24878: Updating openshift-state-metrics-container image to be consistent with ART #112
MON-3530: Update OWNERS #110
OCPBUGS-23649: bump dependencies #109
OCPBUGS-21754: bump x/net to v0.17.0 #103
Update Dockerfile to remove the maintainer tag #98
OCPBUGS-19120: Updating openshift-state-metrics images to be consistent with ART #102
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-35730: Add config map hooks #174
OCPBUGS-34882: Correct out-of-bounds check #171
OCPBUGS-28230: enforce termination message policy on all platform pods #166
OCPBUGS-26924: Add healtcheck for node-registrar #161
OCPBUGS-30951: Relax requirement to enable topology #164
STOR-1574: Bump all deps #159
OCPBUGS-28937: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 #160
STOR-1574: Bump library-go #158
STOR-1714: Release leadership on SIGTERM #155
OCPBUGS-25340: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #152
STOR-1688: Chore: add .snyk file to ignore false positives #151
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #150
OCPBUGS-25340: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #149
OCPBUGS-24844: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #145
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #146
STOR-1281: Make Cinder CSI Driver Topology feature configurable #127
OCPBUGS-23878: OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 #141
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #143
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #140
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #134
STOR-1276: Enable support for mounting volumes with SELinux context #129
OCPBUGS-19213: Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #133
OSASINFRA-2139: Document how we manage configuration #110
Full changelog

openstack-machine-api-provider

OCPBUGS-34931: bump CAPO to v0.9.2 #124
OCPBUGS-34158: Failure to get bootstrap is non-fatal #115
OCPBUGS-34155: Fix panic deleting Machine in ERROR state #114
OCPBUGS-30855: Ensure portSecurity is correctly set in the Port #107
OCPBUGS-24904: Updating ose-machine-api-provider-openstack-container image to be consistent with ART #100
OSASINFRA-3368: Revendor CAPO #103
NO-JIRA: Stop setting logtostderr flag and rely on defaults #102
NO-JIRA: Add snyk configuration file #101
OCPBUGS-24097: Updating ose-machine-api-provider-openstack-container image to be consistent with ART #99
OCPBUGS-23668: Bump Kubernetes dependencies #97
OCPBUGS-23913: Fix nil pointer exception when deleting machines without a root volume #98
OSASINFRA-3297: Remove unnecessary retrieval of Network ID #96
OCPBUGS-16597: Don’t build InstanceSpec during delete operations #90
NO-JIRA: Misc linter fixes #94
OSASINFRA-3283: convert: add missing port profile #93
OSASINFRA-3243: add ephemeral storage support #88
OCPBUGS-22319: fix MachineToInstanceSpec when SG are nil #91
OSASINFRA-3272: Move to CAPO v1alpha7 #87
OCPBUGS-22069: Update dependencies #89
OCPBUGS-19156: Updating ose-machine-api-provider-openstack images to be consistent with ART #84
Remove unnecessary print #79
Update OWNERS #83
make: Remove irrelevant/broken targets #82
Bug OCPBUGS-4629: Set controller’s SyncPeriod to 1 hour #59
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-53395: Ensure that PSA label is latest instead of pinning versions #987
OCPBUGS-48696: Fix excessive catalog source snapshots cause severe performance regression #957
OCPBUGS-48661: Fix concurrent namespace resolution #947
OCPBUGS-46928, OCPBUGS-46935, OCPBUGS-47315: x/net bump to v0.34.0 [release-4.16] #939
OCPBUGS-47738: catalog-operator: Delete Pods that were evicted (#3459) #925
OCPBUGS-46434: CRD upgrade existing CR validation fix #916
OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
OCPBUGS-38290: release-4.16 Resolver: list CatSrc using client, instead of referring to registry-server cache #838
OCPBUGS-38129: [release-4.16] Update junit report file name to show spec results on Test Grid #833
OCPBUGS-37456: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.16 #826
OCPBUGS-37559: [release-4.16] Update e2e config and backport list of flakes #814
OCPBUGS-37018: Bump github.com/containers/image/v5 #822
OCPBUGS-36450: Can’t install operator on 4.15 after uninstalling it on a prior version #809
OCPBUGS-25019: fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image #793
OCPBUGS-36137: fix sorting unpack jobs #799
OCPBUGS-34979: Updates default security context behavior for catalog source pods #788
OCPBUGS-36138: perform operator apiService certificate validity checks directly #798
OCPBUGS-35373: [release-4.16] Warn and allow CRD upgrade if validation fails but webhook is specified #781
OCPBUGS-35219: Unblock CI #767
NO-ISSUE: Synchronize From Upstream Repositories #741
NO-ISSUE: Synchronize From Upstream Repositories #739
AUTH-482: set required-scc for openshift workloads #703
OCPBUGS-31073: Synchronize From Upstream Repositories #737
NO-ISSUE: Synchronize From Upstream Repositories #735
OCPBUGS-28230: enforce termination message policy on all platform pods #733
NO-ISSUE: Synchronize From Upstream Repositories #734
NO-ISSUE: Synchronize From Upstream Repositories #732
NO-ISSUE: Synchronize From Upstream Repositories #729
NO-ISSUE: Synchronize From Upstream Repositories #727
NO-ISSUE: Synchronize From Upstream Repositories #723
NO-ISSUE: Synchronize From Upstream Repositories #722
OCPBUGS-31080, OCPBUGS-31438: Manual downstream sync #719
NO-ISSUE: UPSTREAM: <carry>: update owners #720
OPRUN-3221: rename from ‘clis’ to ‘tools’ #718
OCPBUGS-29553: Apply hypershift cluster-profile for ibm-cloud-managed #700
NO-ISSUE: Synchronize From Upstream Repositories #717
NO-ISSUE: Synchronize From Upstream Repositories #716
OPRUN-3221: image just as a cli source for mirror publishing #713
NO-ISSUE: Semver lastedge error (#1169) [sync] #714
OCPBUGS-25019: building rhel8/rhel9/static clis in payload image #704
OCPBUGS-30132: Synchronize From Upstream Repositories #709
OCPBUGS-23744: Wait for required RBAC before creating packageserver CSV #708
NO-ISSUE: Synchronize From Upstream Repositories #706
NO-ISSUE: Synchronize From Upstream Repositories #702
NO-ISSUE: Synchronize From Upstream Repositories #701
NO-ISSUE: Synchronize From Upstream Repositories #695
OCPBUGS-29553: Apply hypershift cluster-profile for ibm-cloud-managed #697
NO-ISSUE: Synchronize From Upstream Repositories #693
NO-ISSUE: Synchronize From Upstream Repositories #687
NO-ISSUE: Remove ncdc from OWNERS #68 #681
OCPBUGS-24587, OCPBUGS-28744: Synchronize From Upstream Repositories #679
NO-ISSUE: Synchronize From Upstream Repositories #678
NO-ISSUE: Synchronize From Upstream Repositories #676
NO-ISSUE: Synchronize From Upstream Repositories #667
OCPBUGS-27140: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 #658
OCPBUGS-25989: Synchronize From Upstream Repositories #663
NO-ISSUE: Synchronize From Upstream Repositories #659
OCPBUGS-25262: Updating operator-registry-container image to be consistent with ART for 4.16 #657
OCPBUGS-24526, OPRUN-3182: Sync with upstream #654
OCPBUGS-24994: Updating operator-lifecycle-manager-container image to be consistent with ART #631
NO-ISSUE: Synchronize From Upstream Repositories #650
NO-ISSUE: Synchronize From Upstream Repositories #646
OCPBUGS-25673: NO-ISSUE: Synchronize From Upstream Repositories #641
NO-ISSUE: Synchronize From Upstream Repositories #627
NO-ISSUE: Update verified directories for microshift-manifests #638
OCPBUGS-25339: [CARRY] Fix panic issue when annotations map is nil #634
OCPBUGS-24942: Updating operator-registry-container image to be consistent with ART #630
API-1674: Add ownership annotations to new and existing olm-managed secrets #626
NO-ISSUE: Synchronize From Upstream Repositories #625
OPRUN-3063: Microshift manifests fixes #622
NO-ISSUE: scripts: remove legacy bumping implementations #613
OPRUN-3063: Microshift manifests remove collection-profiles cronjob from kustomization #615
OPRUN-3063: Microshift manifests: Ignore “*.removed.yaml” files in kustomization.yaml #610
OPECO-3066: Synchronize From Upstream Repositories #612
NO-ISSUE: Synchronize From Upstream Repositories #609
Synchronize From Upstream Repositories #606
OPRUN-3063: Generate OLM microshift manifests #604
OCPBUGS-17041: Release Leader Election on Manager Exit #556
OPRUN-3106: skuznets/bump vendor ii #600
NO-ISSUE: Update downstreaming documentation. #602
Skuznets/bump vendor #581
scripts/bumper: only marshal missing commits #599
Small sync #597
OCPBUGS-17408: Do not derive installplan.spec.clusterServiceNames from bundle IDs #596
OCPBUGS-22217: Fixing flake tests so they don’t fail 100% of the time. #595
OCPBUGS-18948: CRD Compatibility Validation #592
OCPVE-674: feat: add annotations for capabilities feature #565
Remove 5m package-server-manager default #588
OCPBUGS-20503: Bump golang.org/x/net from 0.10.0 to 0.17.0 #585
scripts/bumper: also run go mod in nested vendor #593
scripts/bumper: improve sort order #580
Sync script: handle multi commit merges #578
Sync 2023 10 05 no steve #579
scripts/bumper: exit when there’s nothing to do #569
OCPBUGS-17157: manifests: add $GOMEMLIMIT to PSM #551
OCPBUGS-19196: Updating operator-registry images to be consistent with ART #563
Skuznets/bump all #567
OCPBUGS-19257: Updating operator-lifecycle-manager images to be consistent with ART #564
OPRUN-1873: scripts/bumper: allow fetching using https #561
Full changelog

operator-marketplace

OCPBUGS-49429: Upgrade golang.org/x/net [release-4.16] #587
OCPBUGS-24971: bump golang to 1.21 #560
AUTH-482: set required-scc for openshift workloads #561
OCPBUGS-28230: enforce termination message policy on all platform pods #559
OCPBUGS-29575: Apply hypershift cluster-profile for ibm-cloud-managed #556
OPECO-3031: Update community index to 4.16 #558
synching dco policy across v0 repos #557
OPECO-3029: Update image tag to 4.16 for all indexes except community-operators #555
Delete deploy dir #529
OPRUN-3130: use content extraction in default catalog sources #540
OCPBUGS-19710: Update image tag to 4.15 for all but community operators #541
OCPBUGS-21592: [release-4.15] bump golang.org/x/net to 0.17.0 #546
Update image tag to 4.15 for community operators #534
OCPBUGS-19230: Updating marketplace-operator images to be consistent with ART #539
Dockerfile: Align OKD and OCP #531
Full changelog

ovirt-csi-driver

OCPBUGS-24868: Updating ose-ovirt-csi-driver-container image to be consistent with ART #132
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #128
Full changelog

ovirt-csi-driver-operator

OCPBUGS-24852: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.16 #130
OCPBUGS-24852: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART #129
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #125
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-54204: Update OVN to FDP25.A.1 24.03.5-40. #2497
OCPBUGS-50595: kubevirt, localnet: Reduce live migration downtime #2469
OCPBUGS-50594: fixes overzealous deletion of SNAT in egressIP #2456
OCPBUGS-47634: Let OVN-northd bind remote ports #2406
OCPBUGS-45958: bump OVS to 3.3.0-62.el9fdp for OCP 4.16 #2388
OCPBUGS-44457: Add static route to the hairpin masquerade IPs to pod #2346
OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
OCPBUGS-38054: Fix per-pod MCS/metadata blocking #2248
OCPBUGS-38699, OCPBUGS-38704: EgressIP VRF support & ignore localnet patch ports when bootstrapping #2267
OCPBUGS-37939: [release-4.16] Bump OVSDBTimeout and make it configurable. #2244
OCPBUGS-37362: Fix registering northd metrics on appropriate nodes #2232
OCPBUGS-36608: [release-4.16] ovspinning: Set affinity of each thread #2220
OCPBUGS-36486: Fix race condition when creating/deleting namespace address set #2218
OCPBUGS-35061: Allow ANPs at same priority #2205
OCPBUGS-35835: [release-4.16] bump OVN to ovn24.03-24.03.2-19.el9fdp #2209
OCPBUGS-34402: [release-4.16] dns: fix deadlock in case of error #2181
OKD-40: Add ovnver_okd and ovsver_okd to Dockerfile.base #2174
SDN-4157, SDN-4436: Downstream Merge 16th May 2024 #2171
OCPBUGS-30224, OCPBUGS-33328, SDN-4388: [DownstreamMerge] 10 may 2024 #2162
OCPBUGS-33080: Downstream Merge May 2nd 2024 #2152
OCPBUGS-32925, OCPBUGS-32985: Dockerfile: Bump OVS to 3.3.0-2 #2142
OCPBUGS-32985, SDN-4436: Dockerfile.base: Bump OVN to ovn24.03-24.03.1-36.el9fdp #2126
OCPBUGS-31419, OCPBUGS-32461, SDN-4243: Downstream Merge 22nd April 2024 #2136
SDN-4458: Do per-pod MCS/metadata blocking with nftables rather than iptables #1946
SDN-4606, SDN-4688: Downstream Merge April 18th 2024 #2132
OCPBUGS-31419: [DownstreamMerge] 4-16-24 #2129
SDN-4403: Downstream merge 20240415 #2124
OCPBUGS-25889, OCPBUGS-29952, SDN-3931: Downstream merge 12 04 24 #2120
OCPBUGS-27093, OCPBUGS-29511, SDN-4157: [DownstreamMerge] 4 April 2024 #2110
SDN-4157: DownstreamMerge 25th march 2024 #2100
OCPBUGS-31557: Revert “Remove unnecessary rhel8 build layer” #2104
OCPBUGS-24007: Remove unnecessary rhel8 build layer #2083
OCPBUGS-27821: [DownstreamMerge] 3-8-24 #2093
OCPBUGS-29350, OCPBUGS-29389, SDN-4542: Downstream Merge 29th Feb 2024 #2089
OCPBUGS-17207, OCPBUGS-28742: Downstream Merge 22nd Feb 2024 #2081
OCPBUGS-12876, OCPBUGS-13665, OCPBUGS-23519, OCPBUGS-28724: Downstream Merge 15th Feb 2024 #2073
OCPBUGS-27093: Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp #2066
OCPBUGS-27853: [DownstreamMerge] 9 Feb 2024 #2063
OCPBUGS-20336, OCPBUGS-28558: [DownstreamMerge] 7 Feb 2024 #2057
USHIFT-2256: updating ovn kubernetes microshift image to golang-1.21 #2051
OCPBUGS-20209, OCPBUGS-20220, OCPBUGS-22923, OCPBUGS-24271, OCPBUGS-26979, OCPBUGS-27215: Downstream Merge 2nd Feb 2024 #2048
OCPBUGS-22221, OCPBUGS-24219, OCPBUGS-25670: Downstream Merge 31st Jan 2024 #2038
OCPBUGS-27933: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 #2027
OCPBUGS-23430, OCPBUGS-24363, OCPBUGS-26023, OCPBUGS-27211: [DownstreamMerge] Merge 1-16-24 #2018
OCPBUGS-27285: Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp #1995
OCPBUGS-25030: Updating ovn-kubernetes-microshift-container image to be consistent with ART #1979
OCPBUGS-18716: [DownstreamMerge] 1-5-24 #2010
OCPBUGS-24965: Updating ose-ovn-kubernetes-base-container image to be consistent with ART #1978
OCPBUGS-25810: CARRY: Updates owners and adds Surya #2000
OCPBUGS-25032: Updating ose-ovn-kubernetes-container image to be consistent with ART #1980
OCPBUGS-24055, OCPBUGS-25394, SDN-4194: [DownstreamMerge] 14 Dec 2023 #1990
OCPBUGS-24322, OCPBUGS-25357: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1986
OCPBUGS-22847: Downstream merge 12-7-23 #1976
NP-618, OCPBUGS-22847, SDN-4124, SDN-4149, SDN-4150: [DownstreamMerge] 1 Dec 2023 #1965
OCPBUGS-24014: Downstream merge 28th November 2023 #1962
OCPBUGS-21773: Downstream Merge 22nd November 2023 #1958
NHE-805, OCPBUGS-19050, OCPBUGS-22691, OCPBUGS-22767, SDN-4173: [DownstreamMerge] 11 November 2023 #1952
OCPBUGS-16634, OCPBUGS-19635, OCPBUGS-20210: Downstream Merge 24th October 2023 #1942
OCPBUGS-11710: Downstream Merge 18th Oct 2023 #1939
OCPBUGS-15538, OCPBUGS-19961: Downstream merge 2023-10-10 #1935
OCPBUGS-14787: Dockerfile: stop installing CNI plugins RPM #1702
OCPBUGS-19289: Updating ose-ovn-kubernetes images to be consistent with ART #1884
OCPBUGS-20178, OCPBUGS-20238: Downstream merge 2023-10-09 #1931
OCPBUGS-16217, OCPBUGS-18071, OCPBUGS-18598, OCPBUGS-19698: DownStream Merge 4th October 2023 #1923
OCPBUGS-19900: DownStream Merge: 29th-September-2023 #1919
OCPBUGS-18317: DownStream Merge: 28th-September-2023 #1917
OCPBUGS-18162, OCPBUGS-19792, OCPBUGS-19836: [DownstreamMerge] 9-27-23 #1911
OCPBUGS-17455, OCPBUGS-17641, OCPBUGS-18352, OCPBUGS-18549, OCPBUGS-19456: [DownstreamMerge] 9-26-23 #1907
OCPBUGS-19013: Dockerfile: Copy ovnkube-trace file for RHEL8 platform #1887
OCPBUGS-19501: Add additonal certificate acceptance condition feature in ovnkube-ide… #1895
Add ovnkube-identity binary to the downstream image #1897
OCPBUGS-19288: Updating ovn-kubernetes-microshift images to be consistent with ART #1883
OCPBUGS-19278: Updating ovn-kubernetes-base images to be consistent with ART #1882
Full changelog

powervs-block-csi-driver

OCPBUGS-36097: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #88
MULTIARCH-4631: Rebase with upstream: go modules updates #78
MULTIARCH-4581: Rebase with upstream: go modules updates #77
OCPBUGS-30530: fix govul with protobuf #76
MULTIARCH-4363: Rebase with upstream: go modules updates #75
MULTIARCH-4092: Rebase with upstream: v0.6.0 release #74
OCPBUGS-25513: CVE-2023-48795 Update crypto lib #73
MULTIARCH-4059: Rebase with upstream: Fix snyk code issue: Path Traversal #69
MULTIARCH-4058: Rebase with upstream: go modules updates #67
OCPBUGS-24950: Updating ose-powervs-block-csi-driver-container image to be consistent with ART #68
Updating ose-powervs-block-csi-driver-container image to be consistent with ART #66
MULTIARCH-4027: Rebase with upstream: Kubernetes Improper Input Validation vulnerability #65
MULTIARCH-4022: Rebase with upstream: v0.5.1 changes #63
MULTIARCH-3987: synk: ignore vendor dir #57
Rebase with upstream: v0.5.0 changes #56
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #49
Updating ose-powervs-block-csi-driver images to be consistent with ART #47
cherry-pick: Improve delete device failure logs in driver node #46
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #70
OCPBUGS-28738: Fix 4.16 SAST scan issues for ose-powervs-block-csi-driver-operator-container #68
OCPBUGS-26924: Add node-registrar healtcheck #67
STOR-1574: Bump all deps #65
OCPBUGS-28933: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.16 #66
STOR-1574: Bump library-go #64
STOR-1714: Release leadership on SIGTERM #63
OCPBUGS-24819: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART #57
OCPBUGS-25710: snyk: ignore vendor dir #50
OCPBUGS-24819: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART #55
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #54
OCPBUGS-24819: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART #53
UPSTREAM <drop>: OCPBUGS-23628: SAST Scan detected vulnerability in go.uber.org/zap #52
STOR-1402: Chore: update libraries in all operators [4.15] #51
OCPBUGS-22628: Bump otelhttp to >= v0.44.0 #49
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #47
Update OWNERS add yussufsh #43
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #38
Update the powervs-csi-node to use nodeSelector for ppc64le #37
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36107: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.16 #73
MULTIARCH-4610: UPSTREAM: <carry>: Override service endpoints #65
OCPBUGS-30531: fix govul with protobuf #64
OCPBUGS-25013: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART #62
OCPBUGS-22629: Bump otelhttp to >= v0.44.0 #58
OCPBUGS-24170: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART #61
MULTIARCH-4036: Manual rebase of upstream release 1.28 on 28-11-2023 #60
MULTIARCH-3989: UPSTREAM: <carry>: snyk code scan exclude vendor directory #50
MULTIARCH-3997: Support to use service instance name in config #49
OCPBUGS-21763: CVE-2023-39325 - Update net dependencies - 4.15 #44
OCPBUGS-19272: Updating ose-powervs-cloud-controller-manager images to be consistent with ART #43
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
OCPBUGS-27881: Update Snyk file to exclude other vendor folders #74
MULTIARCH-4104: Update go and k8s versions #73
MULTIARCH-4066: PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 #71
OCPBUGS-25555: Updating ose-powervs-machine-controllers-container image to be consistent with ART #70
OCPBUGS-25047: Updating ose-powervs-machine-controllers-container image to be consistent with ART #68
OCPBUGS-24894: Updating ose-powervs-machine-controllers-container image to be consistent with ART #67
OCPBUGS-24089: Updating ose-powervs-machine-controllers-container image to be consistent with ART #66
NO-ISSUE: snyk code scan exclude vendor directory #60
Fix nil nextURL #59
OCPBUGS-21878: CVE-2023-44487 - Bump golang.org/x/net to v0.17.0 - 4.15 #53
Update dependencies and use k8 1.28 #52
OCPBUGS-19144: Updating ose-powervs-machine-controllers images to be consistent with ART #51
Full changelog

prom-label-proxy

OCPBUGS-29980: Updating prom-label-proxy-container image to be consistent with ART for 4.16 #365
MON-3725: add machine424 and rexagod to OWNERS #358
MON-3698: Update to upstream prom-label-proxy 0.8.1 #363
MON-3649: Bump openshift/prom-label-proxy to v0.8.0 #362
OCPBUGS-24742: Updating prom-label-proxy-container image to be consistent with ART #361
OCPBUGS-24742: Updating prom-label-proxy-container image to be consistent with ART #360
OCPBUGS-24742: Updating prom-label-proxy-container image to be consistent with ART #359
OCPBUGS-18854: Updating prom-label-proxy images to be consistent with ART #357
Full changelog

prometheus

OCPBUGS-54942: Scraping: Bump cache iteration after error to avoid false duplicate detection. #250
OCPBUGS-43668: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #231
OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
OCPBUGS-36918: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #214
OCPBUGS-37446: backport of upstream fix #217
OCPBUGS-36854: cherry-pick upstream remote-write fix #212
MON-3856: Bump openshift/prometheus to v2.52.0 #202
MON-3856: Bump openshift/prometheus to v2.52.0 #201
MON-3825: Bump openshift/prometheus to v2.51.2 #200
MON-3825: Bump openshift/prometheus to v2.51.2 #199
MON-3794: Bump openshift/prometheus to v2.51.1 #198
MON-3794: Bump openshift/prometheus to v2.50.1 #196
OCPBUGS-29981: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 #197
MON-3673: [bot] Bump openshift/prometheus to v2.49.1 #193
MON-3676: move raptorsun out of reviewer list #194
MON-3673: Bump Prometheus to v2.49.1 #192
MON-3633: Bump openshift/prometheus to v2.48.1 #188
OCPBUGS-24745: Updating golang-github-prometheus-prometheus-container image to be consistent with ART #187
MON-3528: [bot] Bump openshift/prometheus to v2.48.0 #186
OCPBUGS-22743: bump Prometheus to 2.48.0 (manual) #185
Bump openshift/prometheus to v2.47.2 #181
Bump openshift/prometheus to v2.47.2 #180
Bump openshift/prometheus to v2.47.2 #179
OCPBUGS-21633: update golang.org/x/net to v0.17.0 #173
update OWNERS file #172
Bump openshift/prometheus to v2.47.0 #168
OCPBUGS-18846: Updating golang-github-prometheus-prometheus images to be consistent with ART #169
Full changelog

prometheus-alertmanager

OCPBUGS-33686: Dockerfile.ocp: use common-build target #91
OCPBUGS-29969: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.16 #88
OCPBUGS-24718: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART #86
OCPBUGS-24718: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART #85
OCPBUGS-21771: Bump golang.org/x/net to v0.17.0 #79
Bump openshift/prometheus-alertmanager to v0.26.0 #78
update OWNERS file #77
Bump v0.26.0 #76
OCPBUGS-18846: Updating golang-github-prometheus-alertmanager images to be consistent with ART #75
OCPBUGS-18250: Update alertmanager to 0.25.1 #74
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38399: feat: sync proxy settings in Alertmanager configuration #299
MON-3838: Bump openshift/prometheus-operator to v0.73.2 #286
OCPBUGS-31847: Bump openshift/prometheus-operator to v0.73.1 #285
MON-3793: Bump openshift/prometheus-operator to v0.73.0 #284
MON-3771: Bump openshift/prometheus-operator to v0.72.0 #281
OCPBUGS-29304: fix: don’t fail metadata transform on unknown types (#6298) #277
OCPBUGS-28251: fix: convert continue field between v1beta1 and v1alpha1 #275
MON-3689: Bump openshift/prometheus-operator to v0.71.2 #274
MON-3689: Bump openshift/prometheus-operator to v0.71.1 #273
MON-3676: move raptorsun out of reviewer list #272
MON-3661: Bump openshift/prometheus-operator to v0.71.0 #271
OCPBUGS-26147: configure Snyk scanner #269
OCPBUGS-25560: Updating prometheus-config-reloader-container image to be consistent with ART #270
OCPBUGS-24947: Updating prometheus-operator-admission-webhook-container image to be consistent with ART #266
OCPBUGS-24914: Updating prometheus-config-reloader-container image to be consistent with ART #268
OCPBUGS-24914: Updating prometheus-config-reloader-container image to be consistent with ART #265
OCPBUGS-24872: Updating prometheus-operator-container image to be consistent with ART #264
OCPBUGS-24323: Bump openshift/prometheus-operator to v0.70.0 #263
OCPBUGS-24126: Updating prometheus-operator-admission-webhook-container image to be consistent with ART #260
OCPBUGS-24073: Updating prometheus-operator-container image to be consistent with ART #258
OCPBUGS-24105: Updating prometheus-config-reloader-container image to be consistent with ART #259
MON-3479: [bot] Bump openshift/prometheus-operator to v0.69.1 #256
OCPBUGS-18707: [bot] Bump openshift/prometheus-operator to v0.69.0 #255
OCPBUGS-22946: fix: remove verbose logging admission-webhook #254
OCPBUGS-21637: fix: disable HTTP2 connections by default #252
OCPBUGS-21637: Bump golang.org/x/net to v0.17.0 #246
update OWNERS file #245
OCPBUGS-19108: Updating prometheus-operator images to be consistent with ART #242
OCPBUGS-19204: Updating prometheus-operator-admission-webhook images to be consistent with ART #244
OCPBUGS-19174: Updating prometheus-config-reloader images to be consistent with ART #243
: Bump openshift/prometheus-operator to v0.68.0 #241
Full changelog

prometheus-node-exporter

MON-3847: Bump openshift/node_exporter to v1.8.0 #145
OCPBUGS-20151: [CHERRY PICK FROM UPSTREAM]: Take optional attributes into account for fibre_channel metrics #144
OCPBUGS-29976: golang-github-prometheus-node_exporter-container image… #142
OCPBUGS-24722: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART #140
MON-3502: [bot] Bump openshift/node_exporter to v1.7.0 #139
OCPBUGS-21635: upgrade golang.org/x/net v0.17.0 #133
update OWNERS file #132
OCPBUGS-18850: Updating golang-github-prometheus-node_exporter images to be consistent with ART #131
Full changelog

route-controller-manager

OCPBUGS-55201: ingress: Reset metrics when ingress is deleted #58
OCPBUGS-30048: Fix OWNERS file to reflect the correct team #41
WRKLDS-1016: bump k8s to 1.29.1 #38
OCPBUGS-26088: Add .snyk file to exclude vendor and ignore unit tests #37
OCPBUGS-24839: Updating ose-route-controller-manager-container image to be consistent with ART #36
OCPBUGS-15253: Include ingress’s namespace in ingress without class metric #35
go.mod: remove replaces #33
OCPBUGS-21823: bump(k8s,openshift) to address CVE-2023-44487 #32
WRKLDS-806: bump k8s to 1.28 #31
OCPBUGS-19202: Updating ose-route-controller-manager images to be consistent with ART #30
Full changelog

service-ca-operator

OCPBUGS-24916: Bump to rhel9 #240
OCPBUGS-29583: Apply hypershift cluster-profile for ibm-cloud-managed #234
AUTH-482: set required-scc for openshift workloads #235
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #230
API-1673: Add description annotations to service CA secret and configmap #225
add ownership for unshared secrets and configmaps #220
OCPBUGS-21798: go.mod: bump golang.org/x/net to v0.17.0 #223
OCPBUGS-19176: Updating ose-service-ca-operator images to be consistent with ART #221
OCPBUGS-8512: fix admission webhook CA injection #219
Full changelog

telemeter

OCPBUGS-31552: fix issuer check during JWT authentication 4.16 #537
RHOBS-1036: Harden integration tests #529
MON-3819: Update tools go 1.21 #526
MON-3737: Update binaries to new version #525
OCPBUGS-30724: CVE-2024-28180 bump go-jose to v3.0.3 #524
OCPBUGS-30832: bump Go 1.21 #521
OCPBUGS-30544: CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 #516
MON-3175: README.md: update deprecated link #512
MON-3715: remove obsolete targets from Makefile #513
OCPBUGS-24983: Updating telemeter-container image to be consistent with ART #497
OCPBUGS-24983: Force kill jobs after integration v2 test finish #514
MON-3715: chore: bump dependencies #511
RHOBS-995: Simplify cluster:capacity_effective_cpu_cores, add tests #506
MON-3708: fix test/integration.sh #509
MON-3669: fix join issue in cluster:capacity_effective_cpu_cores #505
OCPBUGS-16397: update nutanix filter #504
MON-3669: Removing newlines from the jsonnet configuration for the recording rules.libsonnet #503
MON-3669: Add rule for effective CPU cores for subscription usage purposes #501
RHOBS-956: Rename subscription_labels to ocm_subscription #495
OCPBUGS-22744: go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #493
rhelemeter: Parse org and cn with regex #492
rhelemeter: Validation of incoming metrics #491
add machine424 and rexagod to OWNERS #478
Bump golang 1.20 #490
OCPBUGS-21636: Bump golang.org/x/net to v0.17.0 #483
Server: Add support for shipping traces to an otel collector #482
rhelemeter: support client info file in jsonnet #481
OCPBUGS-19248: Updating telemeter images to be consistent with ART #480
Fix: handle authorization server 403 responses #479
RHOBS-870: Improve logging #477
RHOBS-855: rhelemeter: Read client info/data from request #476
Full changelog

tests

OCPBUGS-55636: [build] Ensure Git Clone Does Not Run Privileged #29746
OCPBUGS-54768: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29663
OCPBUGS-52581: Use payload pullspec for image info test #29589
OCPBUGS-52343: Try also user CA for getting openshift-tests image #29578
OCPBUGS-44119: Ignore infra nodes on tap cni tests #29261
OCPBUGS-48448: Add team members to the OWNERS file for PR approvals #29443
OCPBUGS-48348: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29431
OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
OCPBUGS-38707: run vsphere driver config test on non techpreview clusters #28992
OCPBUGS-38788: [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28938
OCPBUGS-38015: vertical scaling test should not rely on CPMS replicas #28981
OCPBUGS-37771: fix pod not returning success on ‘Managed cluster should verify that nodes have no unexpected reboots #28959
OCPBUGS-36744: Expand allowance for kubelet metrics api endpoint outages during node upgrades #28928
OCPBUGS-36182: Removes dependency on samples operator images #28904
OCPBUGS-36241: remove unused in-cluster monitoring code #28909
OCPBUGS-35842: add Proxy config #28894
TRT-1721: Add new intervals for kubelet metrics endpoints down #28901
TRT-1720: Filter must-gather and truncate system node users #28883
ETCD-578: remove Tech Preview check from etcd profiles e2e test #28819
OCPBUGS-35755: Fix etcd profiles e2e test to check returned status for updated values #28885
bump 4.16 to latest o/k 4.16 release branch #28888
OCPBUGS-34736: Add a “limit” exception for iptables-alerter #28859
OCPBUGS-34500: add manual etcd signer cert rotation e2e test #28830
OCPBUGS-33710: Bump k8s API to 1.29.5 #28831
NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens #28810
STOR-1838: add test for vsphere driver snapshot configuration #28717
OCPEDGE-1101: skip etcd test for hardware speed on sno #28800
SPLAT-1439: Ignore edge workers when listing nodes #28584
NO-ISSUE: Automated - Update synthetic test data #28795
NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) #28803
USHIFT-3143: Skip metrics and adjust termination message policy monitor tests #28799
OCPBUGS-18534: Pass namespace in function checkHostnameReady for monitortest #28794
ETCD-488: Fix feature gate for etcd profiles e2e test #28782
OCPBUGS-31919: Use proper pull-secret for getting openshift-tests image #28764
OCPBUGS-33378: Verify Build Webhooks on Upgrade #28783
SDN-4168: Increase IPsec timeout parameters #28779
USHIFT-3142: Automatically exclude FeatureGate tagged tests #28786
USHIFT-3133: Skip cloud provider disruption monitors for MicroShift #28767
NO-JIRA: enforce termination policy #28777
TRT-1656: Revert #28750 “OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks” #28781
SDN-4783: Add e2e tests for NetworkDiagnosticsConfig featuregate #28719
API-1783: Update etcd test data for 1.30 release #28770
NO-JIRA: verify tls artifacts #28772
API-1809: Provide SCC access via RBAC #28771
OCPEDGE-812: feat: add tests for cpu limits on workload partitioning #28752
OCPBUGS-18534: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28739
MON-3513: Add availability test for Metrics API #28737
SDN-4168: Add IPsec e2e tests #28658
OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks #28750
OCPBUGS-33317: use tokenrequest api #28769
OCPBUGS-31868: allow for some errors checking namespace delete #28761
OCPBUGS-26498: Add test for UpgradeValidation contention #28710
OCPBUGS-29373: test/extended/router/http2: Use unique certs #28757
OCPBUGS-33125: Allow flexible rhel in tests #28755
OCPBUGS-26440: feat: add buffer interval for SNO pathological events #28709
NO-JIRA: Adjust the method of get the apiServer #28756
NO-ISSUE: Automated - Update synthetic test data #28744
TRT-1610: Intervals, move over to new schema, finally… #28727
Revert “TRT-1625: Revert #28741 “OCPBUGS-32923: Fix allowed firing alerts not triggering”” #28748
NO-JIRA: bump library-go #28711
NO-JIRA: Use bound prometheus-k8s API tokens #28655
TRT-1625: Revert #28741 “OCPBUGS-32923: Fix allowed firing alerts not triggering” #28747
OCPBUGS-32923: Fix allowed firing alerts not triggering #28741
TRT-1618: Allow Upgradeable:False with OpenShiftSDN #28738
ETCD-588: Add e2e test for hardware speed profiles feature #28726
OCPBUGS-32477: Also rely on oomkilled exit code 137 in build test #28725
OCPBUGS-32293: Use In-Tree Template for Jenkins #28732
OCPBUGS-31589: e2e: use bound API token for prometheus-k8s SA #28679
AUTH-509: Remove system:anonymous test cases #28686
NO-JIRA: Drop unused images and OWNERS files #28736
OCPBUGS-20097: Migrate tools image to RHEL9 #28733
NO-JIRA: bump openshift/kubernetes #28712
NO-JIRA: Create autodl file for per user resource request audit entries #28715
OCPBUGS-28230: enforce termination message policy on all platform pods #28728
NO-JIRA: Record Kube event first/last timestamp in the resulting intervals #28722
OCPBUGS-32484: chart template: limit tooltip width to first word #27965
OCPBUGS-31030, OCPBUGS-31032: Reduce deploymentconfig test 3GBi memory size to reasonable #28680
NO-ISSUE: Automated - Update synthetic test data #28723
OCPBUGS-32485: upkeep: update test pinned workloads #28704
OCPBUGS-20097: Switch to use cli image, as the scratch image #28695
TRT-1545: Complete removal of non-structured locator/message use #28663
OCPBUGS-32320: revert: removing static pod skip for crio check #28708
Revert “OCPBUGS-28230: enforce termination message policy on all platform pods” #28721
OCPBUGS-31860: ppc64le without python-cinder #28692
OCPBUGS-28230: enforce termination message policy on all platform pods #28547
NO-JIRA: Unskip volume populator tests that were disabled in the test suite #28475
USHIFT-2985: Fix MicroShift crash and router tests skipping #28716
NO-JIRA: Remove test dir OWNERS file, rely on top-level instead #28714
NO-JIRA: split the per-user summary to include verbs for resources #28705
NO-JIRA: add to the operator list #28703
NO-ISSUE: Automated - Update synthetic test data #28701
NO-JIRA: need to make manifest dir to place content #28700
NO-JIRA: Record tests by feature #28694
OCPBUGS-31868: Add debug logging for SLB monitortest cleanup #28697
SO-121: Samples Release, fix test cases #28685
AUTH-483: Reapply #28589 #28660
no-jira: Ignore alerts on CustomNoUpgrade clusters #28678
NO-JIRA: bump golang to 1.21 and to latest o/k master #28672
NO-ISSUE: automated update synthetic test data #28693
NO-JIRA: add service accounts to resourcewatcher #28689
OCPBUGS-20097: Switch to use must-gather image in build multi-stage #28687
TRT-1545: Begin removing use of the legacy locator on intervals #28597
OCPBUGS-31513: feat: update regex for rt kernel version match #28665
OCPBUGS-31492: Add a test that will fail on over 10k etcd took too long messages #28674
OCPBUGS-31484: Use centos7 tag instead of latest for cmd images tests #28675
OCPBUGS-30267: Clarify a misleading message in patho event failures #28667
NO-JIRA: add conditional execution of featuregated tests #28670
TRT-1494: Add monitortest for cloud function on azure #28582
OSD-21709: Add temporary exceptions for managed services alerts #28669
TRT-1559: Remove two sets of logs to bring build-log.txt size down #28654
NO-JIRA: Add skip condition for Cluster-CSI-Snapshot-Controller-Operator feature #28635
TRT-1493: Add monitortest for cloud function on aws #28581
NO-JIRA: add simple test for server side apply to demonstrate field clearing #28491
OCPBUGS-31074: fix: add check for static container #28662
TRT-1567: Revert #28589 “AUTH-483: Add a monitor test to check the existence of required-scc annotation in platform workloads” #28659
AUTH-483: Add a monitor test to check the existence of required-scc annotation in platform workloads #28589
WRKLDS-1076: oc idle: Check idling annotation in services not endpoints #28619
OCPBUGS-30604: fix panic on non-standard node-role labels #28650
TRT-1557: Align three unknown tests to kube-apiserver #28649
MULTIARCH-4352: Censor private key from pod dump logs #28638
trt-1538: additional timeout bumps #28644
OCPBUGS-29614: update skipUnlessMachineAPIOperator function #28625
trt-1538: Bump context timeout to 20 minutes #28641
trt-1538: Wait for monitor resources cleanup #28626
OCPNODE-2099: add kube-rbac-proxy-crio toleration change #28636
OCPBUGS-29028: Add function back to execute commands via pod #28621
NO-ISSUE: Automated - Update synthetic test data #28600
OCPBUGS-27323: Skip tests for image-registry operator with single replica #28605
NO-JIRA: Handle release info output streams separately #28631
TRT-1539: Do not let loki alerts fail tests #28627
Delete unneeded stale owners file, defer to top level owners #28624
MULTIARCH-4160: Stop using the DetermineFromRelease function #28598
trt-1530: specify deployment id for unique log names #28613
TRT-1506: Restore the tests looking for excess single-second disruptions #28592
OCPBUGS-29858: Only extract node role from properly formatted node-role label #28585
OCPBUGS-29614: update control plane machine set test #28602
TRT-1476: Re-introduce the GCP liveness endpoint test #28608
TRT-1512: Add debug messages to debug openshift-tests hang #28604
NO-JIRA: Pass tail flag in adm node-logs to reduce log size #28607
NO-JIRA: Remove bare node-logs test to reduce logs size #28606
TRT-1522: Revert #28594 “TRT-1476: Re-introduce the GCP liveness endpoint test” #28603
TRT-1501: Add debug logging for decoding cluster provider #28593
TRT-1515: Revert #28587 “NO-JIRA: bump golang to 1.21 and to latest o/k master ” #28601
TRT-1493: Re-introduce the GCP liveness endpoint test #28594
OCPBUGS-29493: fix: updated unit test to look for topology not node count #28595
NO-JIRA: bump golang to 1.21 and to latest o/k master #28587
TRT-1499: Revert #28571 gcp-network-liveness until gcp resources are whitelisted #28586
TRT-1477: update IP for new gcp LB #28583
NE-1444: test/extended/router: HAProxy 2.8 Compatibility Enhancements for h2spec tests #28514
TRT-1445: Monitor test hangs during interrupt handling #28580
TRT-1491: Reorder interval groups to place most important/brief info higher up #28576
NO-JIRA: enforce only stable CRD versions accessible by default #28570
SPLAT-1427: fix/sig-net: ignoring edge when listing worker nodes #28486
TRT-1476: Add monitortest for cloud function on gcp #28571
OCPBUGS-28662: Replace ‘coreydaley’ with ‘sayan-biswas’ #28564
OCPBUGS-23115: Test builds with subscription content #28560
TRT-1452: Separate excessive Back-off restarting tests via namespace #28543
NO-JIRA: fix the static pod lifecycle failure test for more revisions #28553
OCPNODE-2029: migrate crio metrics to https #28536
TRT-1480: Fix disruption analysis on /payload jobs #28568
TRT-965: Add disruption to the risk analysis spyglass panel #28558
NO-JIRA: Skip external cloud provider test for HyperShift clusters #28562
MON-3449: Ensure monitoring statefulsets are not recreated after upgr… #28361
NO-JIRA: techpreview can install unstable CRDs #28532
OCPBUGS-18776: replace curl calls by net/http #28546
MON-3693: Adding slashpai and machine424 to Prometheus owners #28552
OCPBUGS-27892: fix panic in service-poller #28544
OCPBUGS-26594: pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test #28538
NO-JIRA: remove unnecessary setup code from monitor #28534
trt-1141: bump timeout values #28527
NO-JIRA: collect certs on disk: rename prefix to rootfsmount, use new skip/rew… #28542
OCPBUGS-27465: Do not assume there is just a single kubelet systemd service #28529
OCPBUGS-27502: collect certs on disk: set pause image #28541
NO-ISSUE: Automated - Update synthetic test data #28537
OCPBUGS-27210: Restore HTTP/2 tests in test/extended/router #28540
OCPBUGS-20487: update egressFWTestE2E image which contains ping binary #28408
NO-JIRA: Update Omer to be the SNO lead #28451
TRT-1440: Automated - Update synthetic test data #28484
NO-JIRA: Update WinC team lead #28472
OCPBUGS-26594: pathologicalevents: Ignore leaky RecreatingTerminatedP… #28530
OCPBUGS-27341: pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable #28480
NE-1444: test/extended/router/http2: delete skipped tests #28522
NO-JIRA: Collect certs from disk #28444
TRT-1370: Track etcd leadership changes in etcd-leaders section of spyglass chart #28441
TRT-1440: Allow BestMatchDuration to pass even on fallback #28526
NO-JIRA: add kubernetes level to openshift tests image for payload #28521
TRT-1441: Stop uploading intervals to loki #28525
NP-877: Live migration suite e2e #28462
OCPNODE-1895: Bump k8s api to v1.29.0 #28473
trt-1430: Pass watchdog InvariantCheck when cluster stability is disruptive #28518
add test to ensure all accessible-by-default apis are stable #28467
TRT-1408: Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… #28517
OCPBUGS-18577: updated timeout to 3 seconds to account for network timing issues #28300
“NO-JIRA: Reduce top level origin approvers to TRT members only” #28439
watch the operator resources during resource watch #28513
add featureset into the raw-tls artifact names #28509
OCPBUGS-25730: Kuryr: Ignore Upgradeable=False on operators tests #28478
OCPBUGS-26025: Do not apply master label to make sure SNO jobs pass #28499
OCPBUGS-25142: Retry with different node port to make oc service test stable #28495
Refine explanation of meeting regenerate after expiry requirement #28502
Add README.md clarifying TLS registry purpose and processes #28434
OCPBUGS-26069: Update cluster-monitoring-operator request limits #28498
use the same collection options for tests so the certificate names wi… #28497
Update certs again #28489
e2e node label test to verify blocking forbidden labels #28296
OCPBUGS-25943: Adding test case for when exceed openshift.io/image-tags will ban to … #28464
OCPNODE-1895: Update etcd test data for 1.29 release #28485
OCPBUGS-25687: Increase timeout for pod-network-service #28474
PSAP-1210: Update code for automate OCPBUGS-18052 #28382
NO-JIRA: images: don’t log entire image status on failure #28469
OCPBUGS-25610: fix: update missing ruby 3.0 ref #28481
OCPBUGS-22438: feat: add extra check for ready state on resiliency test #28421
TRT-1403: Finish porting ALL intervals to structured #28463
OCPBUGS-25610: fix: lane e2e-gcp-ovn-builds perma fail #28471
NE-1477: Regenerate cert in 1024 key FIPs test to use SHA256 #28457
TRT-1359: Add mechanism for creating flake junit for a monitor test #28459
NO-JIRA: Fix issue 28445 #28446
OCPNODE-1892: Conditionally skip tests to help with k8s 1.29 #28465
Show how we can add new annotations using descriptions #28461
OCPNODE-1892: Update etcd test data for 1.29 release #28458
update-tls-artifacts: add AnnotationRequirement #28460
OCPBUGS-25045: Updating openshift-enterprise-tests-container image to be consistent with ART #28452
trt-1042: collect watch request counts #28431
TRT-786: Relax the per-job disruption tests and fix bugs/improve consistency #28453
fix jira components to match actual jira components #28454
OCPBUGS-24537: Properly ignore kube guard probe events #28448
add pacevedom to the team-leads alias #28449
TRT-1400: Automated - Update synthetic test data #28416
OCPBUGS-24583: push violation regression check into the default requirement result #28433
OWNER_ALIASES: update CoreOS team leads #28447
NOJIRA: collect certificate data: use SkipHashed option #28443
NO-JIRA: Increase cluster-capi-operator watch count take2 #28424
OCPNODE-1892: Conditionally skip tests to help with k8s 1.29 #28436
NO-JIRA: Add test case for namespaced filename in oc process #28440
API-1524: ignore stale condition challenge events #28438
TRT-1359: Ignore azure interaction errors since they are not fatal for our usage #28420
TRT-1347: Add ability to indicate a monitor test was skipped #28425
NO JIRA: update cert data #28437
OTA-362: pkg/monitortests/clusterversionoperator: Fatal unless Available=False in allow-list #27231
OCPNODE-1892: Update ETCD storage data for k8s 1.29 #28435
OCPBUGS-24290: cert metadata: generate jsons and markdown for missing metadata viola #28432
NO-JIRA: test/e2e/upgrade/monitor: –abort-at=100 requires a complete update #28402
eliminate the closed channel race in pod_log_streamer #28426
OSASINFRA-3291: Remove Kuryr bits #28397
OCPCLOUD-2256: Increase cluster-capi-operator watch count #28422
TRT-1329: Refactor pathological events framework #28399
SO-117: Removing Ruby 2.7 UBI7-8 tests #28418
trt-1367: Get JobType After Collection Ends #28415
TRT-1235: Add ability to specify alerts that should never fire #28411
TRT-1362: Update disruption/alert test data and fix unit test #28409
make it slightly easy to produce markdown with table of contents #28407
update the TLS ownership files #28394
update cert inspect to skip the rest of proxy-CAs #28406
WRKLDS-908: test: ignore deprecation warnings in command outputs #28404
collect certificate data: rewrite configmap/secret names #28405
Certs 11 fix certs after break #28395
ignore stale condition challenge events #28204
TRT-1274: get azure disk metrics and create relevant intervals #28375
Revert “TRT-1339: Revert #28233 “ignore repeated TopologyAwareHintsDisabled events”” #28386
OCPBUGS-23079: fix: increase watch count for KubeControllerManagerOperator #28388
OCPBUGS-23102: Revert “[sig-instrumentation] tests fail due to JSON parsing error.” #28389
OCPBUGS-23084: expect to not see “git clone” and not just “clone” during a test #28352
TRT-1354: Add support for intervals to have row differentiators #28376
OCPBUGS-18776: [sig-instrumentation] tests fail due to JSON parsing error. #28320
“TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest” #28372
trt-1340: update run-upgrade to use ginkgorunsuiteoptions #28380
TRT-1339: Revert #28233 “ignore repeated TopologyAwareHintsDisabled events” #28381
trt-1344: remove msg assertion #28379
Add test which verifies every certificate has necessary annotations #28305
OCPBUGS-19527: retry Prometheus client creation #28323
OCPBUGS-20479: Add pod sandbox failures to e2e charts #28366
skip revisioned certificates in raw info #28370
TRT-1340: Increase cmd support for ExactMonitorTests and DisableMonitorTests #28371
OCPBUGS-22703: tolerate AWS edge nodes on monitor tests #28363
Revert “OCPBUGS-22413: Use Centos 8 Stream mysql image in tests” #28367
Skip FailedScheduling intervals when masters are in NodeUpdate #28358
OCPBUGS-22413: Use Centos 8 Stream mysql image in tests #28357
Allow the unknown alerts test to fail as it looks stable #28345
add hack/update-tls-ownership.sh #28359
Drop not-used pulledInvalidImages method #28330
start adding raw tls info #28334
Restore APIServer graceful shutdown windows #28354
Fix intervals mistakenly showing mass node NotReady #28351
Remove timelines command reprocessing intervals #28348
OCPBUGS-22358: fix: increase upper bounds for samples operator #28353
put back previous Interval Slice algorithm #28344
OCPBUGS-22276: Remove all docker.io images due to access denied #28347
Restore Node NotReady intervals #28349
trt-1320: update trt approvers #28343
Port remaining clusteroperator monitor intervals to structured #28341
Improvements and Additions to Alert Testing Stack #28332
Automated - Update synthetic test data #28237
prune the system CAs from proxy-ca in rawTLSInfo json #28336
add test tracking raw cert data #28321
OCPBUGS-9037: Require http 1.1 or earlier when using curl #28301
Port Node and Pod State to Structured Intervals #28299
Extract the cluster operator name from Down/Degraded Alerts #28331
fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities #28329
Remove some redundant monitor tests #28326
OCPVE-723: Add optional olm fixes #28302
Add debug info for interval counts and times #28311
OCPBUGS-20205: feat: added support for ImageRegistry capability #28307
OCPBUGS-20024: Revert “OCPBUGS-13366: ignore repeated TopologyAwareHintsDisabled events” #28233
pkg/monitortests/clusterversionoperator/legacycvomonitortests: Structured condition types #28306
Bump watch requests for cluster-baremetal-operator #28324
test/extended/images: update OWNERS #28322
hs, kubevirt: Wait node readiness before migration #28312
fix for OCP-11594 to skipped on disconnected env #28316
SDN-4062: Revert “SDN-4042: Increase total upgrade time on OVN platforms” #28315
trt-1271: add risk analysis for monitor junit suites #28309
Revert #28295 “Automating test \“check the quota after import-image with –all option\” in upstrem” #28313
test/extended: Consolidate hard-coded local image registry dependencies #28308
Limit intervals to the current phase (addresses loki upload problems) #28294
Fix bug with disable-monitor #28293
Remove bug-related annotations #28298
OPNET-330: fix DualStackIPv6Primary #28292
Automating test “check the quota after import-image with –all option” in upstrem #28295
Properly default –from-repository in run-monitor #28285
OCPBUGS-19909: Updating parameters for build timing PushImage test #28288
make it possible to select which monitor tests to run #28215
Revert “Disable EgressIP test temporarily due to OVN-K bug” #28283
Port the clusteroperator intervals to new structured format #28262
Revert “Force using mirrored images in disruption tests” #28286
Bump openshift/kubernetes to get vSphere fix #28278
Force using mirrored images in disruption tests #28258
kubevirt: Add live migration tests #27980
some monitor tests only function on disruptive tests #28251
wait for the service to have endpoints before starting pollers #28242
fix PR 28224 #28238
OCPBUGS-18141: retry query on MetricsAvailableAfterUpgradeTest setup #28228
Revert “OCPBUGS-18865: add monitortest: in-cluster disruption monitors” #28274
OCPBUGS-19293: Updating openshift-enterprise-tests images to be consistent with ART #28264
OCPVE-295: rteval #28261
add pod log streaming to monitor for etcd so we see all intervals #28243
OCPBUGS-18865: add monitortest: in-cluster disruption monitors #28231
AUTH-365: add PodSecurityViolation to watched alerts #28226
OCPBUGS-14053: remove exception for MultipleDefaultStorageClasses #28042
remove unnecessary file from cmd folder #27979
STOR-1425: Update to Kubernetes 1.28 #28097
Revert “Improvements and fixes for Loki intervals uploader” #28268
Adding leader election information to timeline #28225
Improvements and fixes for Loki intervals uploader #28053
Bring in updates k8s to disable networking test #28256
When –from-repository use built-in tests only #28253
[HyperShift/KubeVirt] Raise wait time between pod exec attempts #28249
Revert fake image injections for k8s 1.28 #28250
STOR-1425: Add images coming in k8s 1.28 #28248
OCP-66086: Automate PSAP NTO Prevent from stalld continually restarting #28157
Bug OCPBUGS-18718 Remove duplicate connection type from disruption name #28245
OCPVE-295: fix: add rteval to the test image #28220
STOR-1425: Add images coming in k8s 1.28 #28200
STOR-1425: Disable NetworkPolicyStatus tests #28177
Full changelog

thanos

MON-3851: Bump openshift/thanos to v0.35.0 #145
MON-3799: Bump openshift/thanos to v0.34.1 #141
OCPBUGS-30537: CVE-2024-24786 Bump google.golang.org/protobuf to v1.33.0 #143
MON-3725: Update OWNERS: move raptorsun out of reviewer #140
MON-3753: Increase thanos tests timeout #144
OCPBUGS-29982: Updating ose-thanos-container image to be consistent with ART for 4.16 #142
MON-3703: Bump openshift/thanos to v0.34.0 #139
MON-3650: Bump openshift/thanos to v0.33.0 #136
OCPBUGS-24840: Updating ose-thanos-container image to be consistent with ART #135
OCPBUGS-24840: Updating ose-thanos-container image to be consistent with ART #134
OCPBUGS-22741: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.42.0 to 0.44.0 #131
Bump openshift/thanos to v0.32.5 #129
OCPBUGS-21630: Bump golang.org/x/net to v0.17.0 #123
Bump openshift/thanos to v0.32.4 #121
OCPBUGS-19406: Fix rh-manifest.txt generation #120
OCPBUGS-19206: Updating thanos images to be consistent with ART #117
Bump openshift/thanos to v0.32.3 #118
update OWNERS file #119
Bump Thanos v0.32.2 #115
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-46341: update check-fmt goimports command #83
OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
OCPBUGS-30538: Bump protobuf to v1.33.0 #67
OCPBUGS-27865: Add snyk exclusion file #63
OCPCLOUD-2420: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (46a5796) into master #53
OCPBUGS-26125: Add Snyk file to exclude vendor directory on scan #61
OCPBUGS-25584: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART #60
OCPBUGS-24991: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART #59
OCPBUGS-24157: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART #58
OCPCLOUD-2184: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ff83354) into master #42
Update OWNERS #51
OCPBUGS-19255: Updating ose-vsphere-cloud-controller-manager images to be consistent with ART #48
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-33170: Container fallback to logs on error #37
OCPBUGS-30539: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.3 (e50b9e2) into master #36
OCPCLOUD-1609: Update manager binary path #28
OCPBUGS-25627: Add Snyk file to exclude vendor directory on scan #31
OCPCLOUD-2447: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.9.0 (ea2dd15) into master #34
OCPBUGS-25514: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.7 (ba72420) into master #33
OCPBUGS-24873: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART #29
OCPBUGS-24074: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART #26
OCPCLOUD-2257: Use manifests generation tool from provider repo #27
OCPCLOUD-1609: Add InternalDNS address to vSphereVM #19
OCPBUGS-22152: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.3 (ef8d014) into master #22
Update OWNERS #21
OCPCLOUD-2219: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.8.1 (2b22dd7) into master #18
OCPBUGS-19109: Updating ose-vsphere-cluster-api-controllers images to be consistent with ART #17
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
OCPBUGS-13551: FailedPrecondition volume does not appear staged #88
STOR-1698: Fix volume provisioning when duplicate region or zone tags exist #114
OCPBUGS-30545: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #115
STOR-1578: Rebase v3.1.2 #113
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #112
OCPBUGS-24716: Revert “STOR-1396: Rebase to v3.1.1 for OCP 4.15” #101
OCPBUGS-22637, OCPBUGS-22648, OCPBUGS-23891: Fix CVE-2023-45142 and CVE-2023-47108 #108
OCPBUGS-24961: Updating vmware-vsphere-syncer-container image to be consistent with ART #105
OCPBUGS-25516: UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #106
STOR-1688: Chore: add .snyk file to ignore false positives #104
OCPBUGS-24968: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART #103
OCPBUGS-24961: Updating vmware-vsphere-syncer-container image to be consistent with ART #102
OCPBUGS-24136: Updating vmware-vsphere-syncer-container image to be consistent with ART #99
OCPBUGS-24141: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART #100
STOR-1396: Rebase to v3.1.1 for OCP 4.15 #97
OCPBUGS-16550: UPSTREAM: 2511: Bump github.com/elazarl/goproxy to fix CVE-2023-37788 #95
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #89
OCPBUGS-19220: Updating vmware-vsphere-syncer images to be consistent with ART #86
OCPBUGS-19198: Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #87
Full changelog

vsphere-csi-driver-operator

OCPBUGS-51206: Set reconcile-sync to 10 minute for ListVolume #294
OCPBUGS-49862: List only linux nodes #289
OCPBUGS-24061: Keep CSI operators progressing=true during DaemonSet rollout #230
OCPBUGS-28230: enforce termination message policy on all platform pods #231
OCPBUGS-28230: enforce termination message policy on all platform pods #229
STOR-1804: use new snapshot options from ClusterCSIDriver #226
OCPBUGS-26924: Enable healthcheck for node-registrar containerPort #220
STOR-1574: Bump all deps #221
OCPBUGS-28936: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.16 #222
OCPBUGS-27159: Mark the operator as Disabled on connection error #218
STOR-1578: Revert “Merge pull request #195 from gnufied/revert-192-enable-new-fe… #212
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #213
STOR-1574: Bump library-go #217
OCPBUGS-24421: Rerun checks on reconnect #215
STOR-1714: Release leadership on SIGTERM #206
OCPBUGS-24716: Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) #195
OCPBUGS-24838: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART #197
STOR-1688: Chore: add .snyk file to ignore false positives #202
OCPBUGS-23888: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #196
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #201
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #198
OCPBUGS-23970: Enable new features to prevent CSI driver from crash looping #192
OCPBUGS-23342: Add dummy Progressing condition on blocked driver install #191
OCPBUGS-22476: Explicitly degrade the cluster when conditions are not met #183
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #190
OCPBUGS-20481: Implement fallback to configmap when Infra object does not have vCenter #189
OCPBUGS-20481: Fix vsphere csi controller pods from getting constantly restarted #187
OCPBUGS-22639: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #185
STOR-1276: Enable support for mounting volumes with SELinux context #165
OCPBUGS-22385: disable http/2 server support in webhook #179
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #181
OCPBUGS-21826: Warn when managment state is set to values other than Managed #178
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #172
OCPBUGS-19198: Updating ose-vmware-vsphere-csi-driver-operator images to be consistent with ART #170
Full changelog

vsphere-problem-detector

OCPBUGS-37735: Drop event when CheckDefaultDatastore fails #168
OCPBUGS-35446: Fix missing failure-domains #160
OCPBUGS-30540: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #156
SPLAT-1209: Enhance datacenter not found to contain list of known datacenters #154
STOR-1574: Bump all deps #153
STOR-1574: Bump library-go #152
STOR-1714: Release leadership on SIGTERM #150
OCPBUGS-22994: Check if username contains a fully qualified domain name #143
OCPBUGS-25011: Updating ose-vsphere-problem-detector-container image to be consistent with ART #147
OCPBUGS-25372: Fix VPD crash when vm is not found #148
STOR-1688: Chore: add .snyk file to ignore false positives #146
OCPBUGS-25011: Updating ose-vsphere-problem-detector-container image to be consistent with ART #145
OCPBUGS-25011: Updating ose-vsphere-problem-detector-container image to be consistent with ART #144
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github