4.20.0-0.konflux-nightly-2025-05-12-170257

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/konflux-release:4.20.0-0.konflux-nightly-2025-05-12-170257

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.20-micro Failed (2 retries) periodic-ci-openshift-release-master-konflux-nightly-4.20-e2e-aws-ovn-upgrade
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-konflux-nightly-4.20-e2e-aws-ovn-serial
- fips-scan Succeeded periodic-ci-openshift-release-master-konflux-nightly-4.20-fips-payload-scan
Informing jobs
- gcp-ovn-upgrade-micro Failed (2 retries) periodic-ci-openshift-release-master-konflux-nightly-4.20-e2e-gcp-ovn-upgrade

Upgrades from:

4.20.0-0.konflux-nightly-2025-04-17-181101 - F F F F F F

Loading changelog, this may take a while ...

Changes from 4.20.0-0.konflux-nightly-2025-04-17-181101

Created: 2025-05-12 17:04:54 +0000 UTC

Image Digest: sha256:9bd5e1c72f53d8d715def23ea9751a355d3b72a3cbad71184a889d04f4e252e9

Components

Kubectl 1.32.1
Kubernetes 1.32.4
Kubernetes Tests upgraded from 1.32.3 to 1.32.4
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202504022024-0 to 9.6.20250512-0

New images

aws-cloud-controller-manager git 425c1c5b sha256:4182ec3b53cd8fbc2b6c0581d26aab8186272ac518f8086bfa4b1dac2b593dde
aws-ebs-csi-driver git d686e7d1 sha256:4a0825b27b20c7a0bf736c21f6e963e62f2824470ca5f9d839a468c95d7e06dc
aws-ebs-csi-driver-operator git ee4f432c sha256:d0b56a2f45459b46874482586f1df00ba326cb857e909ac42aca32529c00afef
aws-karpenter-provider-aws git 68ae0c26 sha256:0bd091c0c28f4fc93d74eeed5da14e85b6bda48aa44321483749b02c43ddbd3c
aws-pod-identity-webhook git b0a16d53 sha256:3a5158912f85cbcfac2ee05314973ab887f9d258a4d9ab40f3273f0368b3cf2b
azure-cloud-controller-manager git 7109d6b4 sha256:2f3c9b710dec7dc3782594e619d49ba8021123ffa775e2839d217cd28c65caad
azure-cloud-node-manager git 7109d6b4 sha256:cc5c1b382a1ea4a139d75a0904bdb38bf2ed2ca096bc41123e0824a0dbe3e7ee
azure-disk-csi-driver git 41226812 sha256:8e7db7179dbc8bceb62682b593074a5fa097b4e88c59a013d516aa37cace6b59
azure-disk-csi-driver-operator git ee4f432c sha256:532807edf7e0c302d2cd8415f6f210958a8d3ca00a6723103907dbb842d56723
azure-file-csi-driver git 0c0bab7a sha256:d2ae4f8b4023441cc5ef4690f4902565c70b352d4b6517ff8ce3f88effaedda1
azure-file-csi-driver-operator git ee4f432c sha256:431be600de5640bee42103c8fa9aab0bbc76cdd819c8fea162d3c2909c71de3c
azure-service-operator git 0ae129b4 sha256:92ef6269e8de3251ab749612de872272647b4ce328274ea562092a49fdc56b5e
azure-workload-identity-webhook git 892d3c4d sha256:e37e40998f812ad3d42e889302c15b0cc4c518d1bdbc1701234755e9f47014bd
baremetal-runtimecfg git 1331e6d7 sha256:76d5aa16b904977eec98dcca00afbdabb946ae4411eea238c0f0a5af6d2adc82
cli git 39a937f1 sha256:cd34a68fdae051eaddc554930d192aee15fb84627bd90a199f69148502599894
cloud-network-config-controller git 98ae311b sha256:96b2c2f230737d583f694606d10b7ab82a76a347090d5bc8bcba2f326642dbf8
cluster-autoscaler git f746d442 sha256:c5a14128ff35b9a5afc95b680c521553ab2db1768f9e07a6af0191f6c28db5bb
cluster-policy-controller git 74852478 sha256:5fe068009ea4f5ab7fb3afd1c92fc792f3a9beeb5a9f7b3da85650230e013828
configmap-reloader git 9bfbde86 sha256:654dcbaff966903a902362dc511a7562688463f417697430ab3bee16a32d4bff
container-networking-plugins git b09f487c sha256:e980fe54dfab7086ae76574023fa5fbda1da30625a7425dd45c4e034e899d424
containernetworking-plugins-microshift git b09f487c sha256:a7ba8e6159ac1dac3ce155cb33adceca66ca4f83c17896d796d030ca2be51a48
coredns git 7a1451db sha256:516d01746f19fd6c2db87083ebd42d965dd10fd9b3b319cd83d1931a812bfde4
csi-driver-manila git 68986f5b sha256:01cba2aae715ddcceb443ba9ccc7a7fe4c95637a294cb2d039b3d894626614fa
csi-driver-manila-operator git ee4f432c sha256:e20bef2bffdec7099a4a49cfd0444f0d3e3b5f3aa38d7f0918af6c7897848e0a
csi-driver-nfs git 2eb5c109 sha256:d5cdc7e943d13c9406cd2750665a6c96620c1602fe8d79b6007210172c1a0f16
csi-external-attacher git a8175e39 sha256:80056802442088e71b2480c6238c8e0eac4eddb479912a5f296670ede7b6d980
csi-external-provisioner git 9db1cdb1 sha256:9e3ef7b78fc9964d8c3812b06703465d53a33a69a66caa4bf8d3993729726798
csi-external-resizer git cca04e39 sha256:dde227fdf953fa05901c9fd784acc4a1683dae6678441a686c9f78a23dcf8f6c
csi-external-snapshotter git ac82cafc sha256:a01c6d8b117fafc11ce70164aaebb045e27e86e2978210b03dbd58af8e35b9fd
csi-livenessprobe git ca514478 sha256:f4cd95542a366d53d2907782f37ff90ad00856874b65273b571456c7709c9175
csi-node-driver-registrar git d18edb3a sha256:18227b3a9573cdde4baf5362583fd1866b643af01218db41616f01e706a8b63e
csi-snapshot-controller git ac82cafc sha256:ed1df958c6389e73edf70221ad13d6f0a5dab29e2a3ea0a30529a0e8a05e4974
deployer git 39a937f1 sha256:87256acfcdde1a870091761d6a3a5edd09f9185c6678039b865bbef6739ea35e
docker-builder git f2e5d601 sha256:8d4f82da34b5cfd9eeb2ddae188ed7904a5ac428f4133efcf50595423988ab3a
docker-registry git 59376a75 sha256:f2aa3c6b2b7b080d06ea0b6f277176d5c0aa70816fc6c239cbcffa07914f702d
egress-router-cni git 85353bb9 sha256:d4070fb59d63154efa50c6b2d9a3776dd9bb93fe24c3ab99d781b75ec0b72232
etcd git a5421dfe sha256:a9184b9c744ec8b0c5733a35e24eecf108b6d903aadd131aece9080020751bf1
gcp-cloud-controller-manager git d8d3aeba sha256:a80c36793e07366a94b1a89c81aa6f368a68448f5fc3f2a51839872593d2e036
gcp-machine-controllers git 55edb1bc sha256:408385a774d14d2501289f0ad712bfc68c903a5b139849978c3201c06fa2de50
gcp-pd-csi-driver git 3aeac35b sha256:436a2d7f6543484e043d4db8eba27226f4aefafa6036584433775792ba420226
gcp-pd-csi-driver-operator git 44c74f24 sha256:c9354f877ed98f06b208d1bc7ffa8c4e91e3110c2d960b832ba75114ac16920e
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:b64474a88a5b29cd1964d278821b3f9187bc1a98e797fe88aa59f882f45deb84
haproxy-router git b41f9d05 sha256:fdd04b2036907dd2117607d8d2161dc7ad8f3f37d2609585ed89e8e6371318ef
hyperkube git 18f7f4cb sha256:65322e1426c4ffff14be00e70273f5da4c121102a5bfbc2ba744922d3fe5eb5c
ibm-cloud-controller-manager git 7422aab2 sha256:57dfb327895b0ad01bd958804fb781ac6101787fb48ac82593e9c7adb83bf218
ibm-vpc-block-csi-driver git 176b6ef1 sha256:98ef23fbeb30a1178b59d2b2d947582cc5902f50796b4b06a01817f68e45c796
ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:23de93618726677267806c9533b16530a2468f22cbba78818c658e71a9ab4f46
ibmcloud-machine-controllers git 989bd874 sha256:55d304f1a28455dcf51fb2dbb5126cff407fa2f04bb569d2138630564b9e7d84
keepalived-ipfailover git 3321f1a1 sha256:5642df39128ae65ca4a71d33cc22416cbc1b9270e5ad3426266bdf142fa1f068
kube-metrics-server git 037a0e7e sha256:ea657544a805487cba7259c223dbdbeba47e056d4c059a018cf37a9221e85cba
kube-proxy git 18f7f4cb sha256:b3c1c9147c89cad9fa52416c34c38aae082d4bae4db434d826220d115116da4b
kube-state-metrics git c3da3b5f sha256:543e9fe75527ef64d97c3349d8ba8231e5a08999f70b8be99c8291931805c4b5
kube-storage-version-migrator git 4c521b09 sha256:b2043770810989fba623577d5d5e93175bb98f6364580cf5d3d7d3c9d26a6a20
libvirt-machine-controllers git a336f0b5 sha256:dd4c5d4584f23c76f67d435120df1a226c675e1dd5d6ecdb5796eba20be02d4f
metallb-frr git 5076dbc4 sha256:0eb9ae570d53f40412e6c50d4cb1d55f8d635a782684a3f33396790920ac07f8
monitoring-plugin git 13c02d49 sha256:e16d90ee0fcdc4940c615dad08099404f36b95bf742f009061e1adcce446b40e
multus-admission-controller git 0b1b812e sha256:b051a6f7e09062098f928f79b0f40d1b70641385261d0ff7dc471c9f5695095c
multus-cni git cf0f68ec sha256:ecee03c0ecb94064a2a2647ab47acd138831adfd55e663d5bcb1cadb1406c9d7
multus-cni-microshift git cf0f68ec sha256:b952267d9fe7143611d0ddd6c81ed55c03874c36c9e842b41c4a9f6e7b24b5bc
multus-networkpolicy git 6fffe5d7 sha256:6b2bbfc0cde86b7ce7514b6239f73ac4b959dcbcad3c93a5a323ce6444084118
multus-route-override-cni git 391c1b03 sha256:135191f5b1b42f23f57997927d11f602d3539778400d244cd0fa5a7e819fa46d
multus-whereabouts-ipam-cni git 45624b63 sha256:17d4aad0a8a92e67fe864d8cbc8a5e55cf34302b845caa8a038c8f61b5b04a3b
must-gather git 463c03ca sha256:4b46a91884c9bad6715ca845451af3d048f289fd0eccc8d60e221a8bb7fd009b
network-interface-bond-cni git 94b71fef sha256:1d441175193455953cbba2b0a0fdc5e182e9bf879146befd929e44aed042c3ed
network-metrics-daemon git 5ec8c6bd sha256:7c3352c424db55b4111a068943741baf4e5608f31f01b67751287e67fcb3a673
network-tools git ebd18d14 sha256:c63220d22ccaa94333b441b7e3eeb90fd9fb223ba170570761410f1391aeb0e7
networking-console-plugin git 581812ac sha256:91a3520df32a7dc8e7ecaa12c0a1343c900b4dcda00cc5ba993f16ca252eadeb
nutanix-cloud-controller-manager git db1f264a sha256:5c472b396444b93a5a324e0d2546828b7df18ad5eab545b037d85c77b297ae76
nutanix-machine-controllers git a26db5a0 sha256:cae558954d74c02bf0339072441f7aec6fef5d5d0c523b6c82e446a227f3a75b
oauth-apiserver git 75914068 sha256:e915b5120336a3bccf06a2cb2dfdfb00bcdcb97a807eb128a9b08a92d86878ee
oauth-proxy git 3d12ccbe sha256:5bc24b38b6a4c37a8f74b6eceb17724cc05adbd5603214b0cdf2cfb453f4c6e9
oauth-server git c4dd5465 sha256:428ce25965e4bbf86cb44a71109c5b57d26c7c3f1749f3adb57dbc0a4b099bbe
olm-catalogd git 61c8feed sha256:75370e5fe3b06b956ba8d5c30c4cb0e1fa23521d8e10d62262a67ce8754168bc
olm-operator-controller git 61c8feed sha256:e8aed18bb8df2e7fea774560f4859642416ba7bc34b7decdd8216d478172c2a0
openshift-apiserver git 85f6eb27 sha256:cb6f446fb0e5355daf38977b3bb492c2c13105f249f1fc93fcc41d8015eed904
openshift-controller-manager git 39ebafcc sha256:cae41e7fff9cbb192bc05a4594a48510c94ec93821bd113738ee318b2a66514a
openshift-state-metrics git 3106bcc3 sha256:7822220a95fda94ae15218fb4aadc8ba165e49b3f37e493b5023a74279ce47d1
openstack-cinder-csi-driver git 68986f5b sha256:053a4955939b3c589d593a39da2ed76f03d8d7e227a11514475bf8ae4871e687
openstack-cinder-csi-driver-operator git ee4f432c sha256:442745fdcb6d1b1c5572b9d9f9fab02f1da6a1b8be36c32eab24428b36dc9bbf
openstack-cloud-controller-manager git 68986f5b sha256:ef701933337427418c2bd0b2e59cf19c8bf6943e26a4a084aa3b2c91940bc123
openstack-machine-api-provider git 848bf658 sha256:e8fe0bd37d6d147ff14ce57fcc5586ffa8a62505f1ceb26f460c69cb7bf3a6a7
operator-registry git 7fae0cbf sha256:94d7937a0d60d2d597538d906a5be87995052094b5eded2a2fbc35fb957c774d
ovirt-csi-driver git 1db726a9 sha256:d1bf10647bc62e915d7bf8f8640246f71f478a3fb138fd1eb1e1a1a286100a35
ovirt-csi-driver-operator git 76db379d sha256:a4dc5d8c922e39d0a6915df49fe1e8f97660048d6d0593c3eefd3b78533207b1
ovn-kubernetes git f9ab1db8 sha256:e5d3b63bba8d00527ab5a55d8e8400e055dcf2d24f489955ba9ecb3d3cb8b99f
ovn-kubernetes-microshift git f9ab1db8 sha256:8492486c0ce65ef8f24ea567a48f251d5a7fe1515b2b2bb475b7f2e242adcc05
pod git 18f7f4cb sha256:3e806175decf19c6ed3d9c07f95898315c763ecb7a2263ad6dd2db1cc119b90f
powervs-block-csi-driver git f681413d sha256:e3552de1de2ba943483393edd7bbe9951352d41ced37f99eb6cce7e3df85cebb
powervs-block-csi-driver-operator git 059d95c2 sha256:7fc1fa0f594d32b5ee3731016aa0795aa9c0dcdfd5b1d4c676daa81223bb3e56
powervs-cloud-controller-manager git ef83f3f5 sha256:011cee5b2aa3647c3bb6dc01096227a9a69a2af54c68fd9bd8739bc7c50778a0
powervs-machine-controllers git 87f8e306 sha256:5b4d4145eecb9fad5b6fd6893975111c522158a1993cd1552e412cca07ab6ee8
prom-label-proxy git 7184f58d sha256:404396970d30939ac3b2bc2578affab50386fac82676aab9371eb4bcce9dde50
prometheus git 7935baed sha256:60f922be8b2b4c53c854d518e512b7cdd98f83c870ef6285002568dfe0c37243
prometheus-alertmanager git a2346ca5 sha256:13f0615e3f0c989a87f3e7cbf65aa35b396c3c77b43326eb8e02f135ca9800b6
prometheus-config-reloader git b8debb4c sha256:3be85658688e504d9bff65f94d982728a80f7041f5ff0e9422b9374c17db8a75
prometheus-node-exporter git c90542d8 sha256:b4f8d52af89e82c827bac65af90fd3e04f3579223045f51853bad7b7ff3c918a
prometheus-operator git b8debb4c sha256:010725dfe4985a5524fb1c07642b34dac3025e036841ef3ebac79dc155596de0
prometheus-operator-admission-webhook git b8debb4c sha256:5c0d1ea979f249a2ae91b2b6fbde71b4e785f165f797a67fe36dff4d22fd0d51
rhel-coreos-extensions sha256:90dcc17e5cd89940e1465a5dfa52b45bffe5fa44dc167b030c138a207b665716
route-controller-manager git bc97534a sha256:bb974b26efa5b1c20d0b5ec0702dd1c6e1cb7c9ce53948b48c2bc7c04298d314
telemeter git cffdabd4 sha256:fe002a5b1efbf64844cd95dcad43e3edf7e4033b913bf4492bd3bc514bdbc88c
thanos git 95f7bb21 sha256:d3d1a8ee871426e9b3c53c56b20b143c244eaf980333651db3bc5d4fc7d601d1
tools git 39a937f1 sha256:b19801738907ecebaa20ac11cae0ee9ea1c88d05797f88263ce15ac5eeb15b22
vsphere-cloud-controller-manager git 2c21c8ce sha256:c047fe3dfd708106acd5fbf65fd790eb4e1891994143abd8a269779b5fb15352
vsphere-csi-driver git 01302477 sha256:1a2af2603cfd38c185f030dc7015cfe9a25dd28d2f17061f3e72bc8ee4d4775a
vsphere-csi-driver-operator git c2b41c36 sha256:2528319af60122f660f9eee90a92718364081bfb4161a55257cd5d1b8e453d74
vsphere-csi-driver-syncer git 01302477 sha256:b40786cb25132583475d0682b01a05519579a12be717b083d425634669ed7bed

Rebuilt images without code change

aws-kms-encryption-provider git 088dcaf7 sha256:dead7ac612708048d93de2b308d4d0691c573a049626d50542a50b229c09360d
cluster-autoscaler-operator git 227f7537 sha256:8d9bb3cdba5d5022b535ad7faafc7599d9bc4a00fbeb2ec6febf8546ed0705a9
cluster-baremetal-operator git f64a5c1d sha256:2e5497b5f533721925954a2f32ac58cbef226e430aa52fc6d78d58eb5dff1d30
cluster-bootstrap git 8fde9c52 sha256:c5fcf7261b8221125cd1297a78d3263ec24c998a365a36ab4004b9c79c9def7c
cluster-capi-controllers git 7e2de8d3 sha256:5b18514b31593c57d147f46f5d29ba26c06b7bd994f06e0138a75c4023b8dbd6
cluster-dns-operator git 65981306 sha256:15d0c6ae415e210c8bd7c5ce44e8223d63f6fb478b663e7361378615ba527a0f
cluster-kube-cluster-api-operator git 3ec30377 sha256:60ec7595840cbd7ce7d065158f0a8c439baeb124447f8bff4b80b2fc2d314a9b
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:f766da192fbe99f8019245989e54460c2207ddaabdedf46b7f0a640f24be22ba
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:42176c0989dd409c5ad8df26166449ba7eb5afd3ae142801d53eab6e47d6f821
cluster-openshift-controller-manager-operator git 0ab30996 sha256:4178117c9844709a02daf7979c9e6925cbc9b8dea03884ae21b5f8d7bb9a6b3b
cluster-update-keys git c1c56b4c sha256:d2873eb989377291d6929ff44954fb060a5baf04eca98b8d0160cafcfaa44d47
driver-toolkit git 686fdac5 sha256:d8a091b93477ac902a799fa304a1180f4de2caea2d5d5efcb1c471dbf4414003
ibmcloud-cluster-api-controllers git 0453d282 sha256:99e9fd5bbf2fc6ba76dcf5fb6821399150e0b645a8cfda90dc172b722eddce12
ironic-machine-os-downloader git dbe19772 sha256:d19137714a2540e9a66c8807cf1429ee0854096668349508336ed0d358e4812a
ironic-static-ip-manager git fcd9564e sha256:7619c894c1718f558981c88ab2385f98fdd99dd3e69d731bc3a0097bbd45649d
kube-rbac-proxy git 59127756 sha256:373b0f12d8f1f628b4f4d761f59d615df7988a55b6c7b9857cc3307d2da90f2b
kubevirt-cloud-controller-manager git 3f4542ec sha256:412b959b89d8a14e2c0ce89a570d7e065e53ea70b11585c9486e57cccaf2868a
openstack-cluster-api-controllers git cc76099b sha256:690eaf68e5df8caee34915d0e2961b48e73d813eb1babad79c179f22ab5ad983
openstack-resource-controller git d00bab2b sha256:edfbb025a7eb568058a954bc820e04f0460c5df33ba877f9ed9d2751a314cddf
rhel-coreos sha256:2ef9243c29f1bd87cd752e2204c7dbca83ee03e0825589c456eb7e9831d87ce7
vsphere-cluster-api-controllers git 8c61ba3d sha256:d15ff131ecf33fdc332b8d0b9fa68e79b860845b1c3bc7db0895e65898f03993

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
Full changelog

agent-installer-node-agent

Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
NO-ISSUE: Update assisted-service’s version (#997) #997
MGMT-20296: Modify RegisterHostConflict log (#990) #990
NO-ISSUE: Update Konflux references (#976) #976
Full changelog

agent-installer-utils

OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
NO-ISSUE: Update ISOBuilder appliance image SHA #83
NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
OCPBUGS-55515: Include cnv operator in ISO builder script #80
OCPBUGS-55623: update to go.mod #81
NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
NO-ISSUE: ISOBuilder- Update README.md #76
NO-ISSUE: ISOBuilder: Add Clean targets. #69
AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
Full changelog

apiserver-network-proxy

OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
Full changelog

aws-cluster-api-controllers

OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
Full changelog

aws-machine-controllers

OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
Full changelog

azure-kms-encryption-provider

NO-JIRA: Add OCP engineers to OWNERS for KMS #15
CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
Full changelog

azure-machine-controllers

OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
Full changelog

baremetal-installer, installer, installer-artifacts

OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
Full changelog

baremetal-operator

OCPBUGS-55717: Merge upstream #414
METAL-998: Merge upstream #413
OCPBUGS-54582: Sync apr 2 #410
Full changelog

cli-artifacts

NO-JIRA: make ‘oc status’ compatible with bare kube #1947
OCPBUGS-53106: Get installer image from configMap for node-image command #2005
OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
NO-JIRA: adm release new: simplify writePayload #2008
COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
Full changelog

cloud-credential-operator

OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
Full changelog

cluster-authentication-operator

OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
Full changelog

cluster-capi-operator

OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
NO-JIRA: Prevent caching CAPI objects across namespaces #285
METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
OCPCLOUD-2648: Machine sync controller deletion logic #278
OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
Full changelog

cluster-config-api

Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
Fix broken ControlPlaneMachineSet integration tests #2296
OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
MON-4071: GA MetricsCollectionProfiles #2286
CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
Promote OnClusterBuild featuregate to default #2192
trt-2080: check devlopment start date for latest release #2285
NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
Full changelog

cluster-config-operator

OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
Full changelog

cluster-etcd-operator

OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
OCPEDGE-1773: Fix arbiter field in install-config #1409
OCPBUGS-53512: fix CVE-2025-30204 #1412
OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
Full changelog

cluster-ingress-operator

CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
Full changelog

cluster-kube-scheduler-operator

OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
OCPBUGS-54945: Bump library-go #560
Full changelog

cluster-machine-approver

No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207: Bump prometheus-operator to v0.81.0 #2593
NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
Full changelog

cluster-network-operator

OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
OCPBUGS-54238: Update CSR status condition appropriately #2674
CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
CORENET-5856: Update RouteAdvertisements schema #2685
OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
SDN-5689: Rebase k8s v1.32 #2656
Full changelog

cluster-node-tuning-operator

NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Fixed rcu_nocbs cpu parsing (#1317) #1317
Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
Make the e2e/basic/modules.go test reentrant (#1322) #1322
Enhance hugepages validation error message (#1320) #1320
Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
Full changelog

cluster-olm-operator

OPRUN-3883: Add network-policy support #117
OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
Full changelog

cluster-storage-operator

NO-JIRA: correct cinder operator CredentialsRequest name #577
OCPBUGS-54491: sync Azure File permissions with upstream docs #576
STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
Full changelog

cluster-version-operator

OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
OTA-1403: Add an always passing test case #1172
NO-JIRA: make verify #1177
OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
NO-JIRA: manifests: make template manifests valid YAML #1171
OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
Full changelog

console

CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
OCPBUGS-54234: Fix impersonate group action #14915
OCPBUGS-46385: fix alignment of Getting Started item icons #15025
CONSOLE-4393: Update to Node.js® v22 #14841
OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
OCPBUGS-55448: Fix +Add details switch animation regression #15011
OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
OCPBUGS-53443: Check for ACM when hiding switcher #14988
ODC-7727: Change favourites button defaultName #14996
CONSOLE-4492: fix: do not render if listpageheader has no props #14995
OCPBUGS-55252: fix bug where tab underline is missing #14991
NO-JIRA: Deprecate react-router-dom-v5-compat #14994
OCPBUGS-54670: Use PF component group for PageHeading #14965
OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
OCPBUGS-54656: Add space between quick start action list items #14940
OCPBUGS-54601: fix bug where operator appears twice #14983
OCPBUGS-45514: Add account email to the telemetry #14978
CONSOLE-4464: Update PatternFly to latest #14979
OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
OCPBUGS-55018: fix web terminal initialize form style #14974
CONSOLE-4505: Update i18next package #14881
OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
CONSOLE-4542: Remove base dl dd dt CSS #14966
CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
Full changelog

console-operator

OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
Full changelog

hypershift

NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
OCPBUGS-55913: Fix Job status returning empty reason and message #6134
CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
HYPBLD-642: konflux build hcp cli #6072
OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
AUTOSCALE-127: fix e2e autonode drift test #6062
CNTRLPLANE-112: Enable MIv3 for Ingress #6058
NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
Full changelog

insights-operator

feat: add gatheringDisabled condition (#1078) #1078
CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Enable FIPS #41
Full changelog

ironic

METAL-1264: Update to latest upstream content #655
OCPBUGS-55381: Extract files one-by-one in logwatch #654
METAL-1327: Update pkgs ocp419 take2 #651
Full changelog

ironic-agent

OCPBUGS-55315: Delay determining the hostname to put into ignition #182
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

OCPBUGS-55461: Changed machineset tests to be serial #1365
OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
OCPBUGS-55424: Added skip for when config not multi nic #1358
OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
Revert “SPLAT-2180: Added conformance label” #1359
OCPBUGS-55417: Resync CRDs #1357
OCPBUGS-55083: Updates GCP CredentialsRequest #1353
SPLAT-2180: Added conformance label #1354
OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
Full changelog

machine-config-operator

OCPNODE-3173: Disable OCI artifact mount by default. #5016
OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Revert “NO-ISSUE: debug podman on PIS” #5013
OCPBUGS-44757: decrease leases for kubelet on azure #5010
NO-ISSUE: debug podman on PIS #5003
MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
OCPBUGS-55388: MSBIC should not update windows machinesets #5009
MCO-1645: API & client-go bumps for MCN V1 API updates #5011
MCO-1519: Adapt MCO code to use V1 MCN API #4992
OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
NO-JIRA: Update Envtest assets to 1.32.1 #5002
OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
MCO-1615: MCN status update degraded #4977
MCO-1509: Enable OCL for disconnected workflow #4971
MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
OCPEDGE-1690: add dual-replica templates #4938
OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
Full changelog

machine-image-customization-controller

OCPBUGS-44031: Verify tls while pulling down IPA #131
Full changelog

machine-os-images

OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

oc-mirror

OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
OCPBUGS-54653: delete: continue on errors (#1127) #1127
OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
Full changelog

operator-framework-tools, operator-lifecycle-manager

NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
NO-ISSUE: Synchronize From Upstream Repositories #994
OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
OPRUN-3835: Update to 4.19 community-operators catalog #621
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
Full changelog

service-ca-operator

OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
Full changelog

tests

Revert “OCPNODE-2315: Add nested container test” #29779
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
OCPBUGS-55945: Bump main 1.32.4 #29772
CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
OCPNODE-2315: Add nested container test #29594
NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
OCPBUGS-54869: bump limits #29722
OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
MCO-1646: API & client-go bumps for MCN V1 API updates #29717
NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
Revert “TRT-2049: check for any watch requests” #29719
MCO-1519: Adapt MCN tests to use V1 API #29701
OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
TRT-2049: check for any watch requests #29674
NO-ISSUE: Automated - Update synthetic test data #29677
OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
TRT-2043: look for high latency audit requests #29571
OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
OCPBUGS-54869: bump limits #29700
OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
OCPBUGS-55175: Add cleanup to MCN test #29695
OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
OCPBUGS-54869: bump limits #29688
NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
Full changelog

vsphere-problem-detector

OCPBUGS-52964: improve datastore check messages #181
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github