Back to index
4.10.0-0.ci-2024-03-15-073603 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.10.0-0.ci-2024-03-15-073603 Tests:
Blocking jobs Informing jobs Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2024-03-15 07:42:10 +0000 UTC
Image Digest: sha256:b675293fb826a869986a72628d9cf00cbda9833842bdaaf4feefb15737141245
Components
New images
Rebuilt images without code change
OCPBUGS-28325 : add an extra vendor exclude to snyk config #100 OCPCLOUD-2429 : Rebase k8s to 1.29 and update dependencies #99 OCPBUGS-26187 : Add Snyk file to exclude vendor directory on scan #98 OCPBUGS-24934 : Updating ose-machine-api-provider-aws-container image to be consistent with ART #94 OCPBUGS-24116 : Updating ose-machine-api-provider-aws-container image to be consistent with ART #93 SPLAT-1220 : Assign Carrier IP to launch EC2 in AWS Wavelength Zones #78 OCPCLOUD-2193 : Update k8s to 1.28 #87 Update OWNERS #86
OCPBUGS-21640 : Update golang.org/x/net to v0.17.0 #85 OCPBUGS-20266 : update bad url endpoint termination handler test #84 OCPBUGS-19190 : Updating ose-machine-api-provider-aws images to be consistent with ART #82 OCPBUGS-18338 : Fix CI by running tests natively by default #81 OCPBUGS-11524 : Add test for multi security groups per machine #80 OCPCLOUD-2113 : Add support for PlacementGroupName in instances #77 Fixes for the labels capacity annotation #76
MIXEDARCH-256 : Handle the kubernetes.io/architecture label based on the AWS instance type #71 OCPCLOUD-2058 : Update k8s to 1.27 #72 OCPBUGS-6882 : Fix getting AZ from subnet id to check mismatch #73 OCPBUGS-12082 : Updating ose-machine-api-provider-aws images to be consistent with ART #67 OCPBUGS-12554 : Bump x/net package to v0.9.0 #69 OCPBUGS-6882 : Log to user that the subnet id and zone fields are mismatched #63 OCPBUGS-11223 : Reduce metrics cardinality #65 OCPBUGS-10127 : Updating ose-machine-api-provider-aws images to be consistent with ART #62 Update OWNERS #61
: Update tooling #58
Updating ose-machine-api-provider-aws images to be consistent with ART #54
OCPCLOUD-1802 : Port to ginkgo v2 #55 Update OWNERS #56
OCPCLOUD-1131 : Implement fetching instance types from API #53 Updating ose-machine-api-provider-aws images to be consistent with ART #45
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #52 Update Machine API Operator dependency #51
Update Machine API operator dependency #49
pkg/actuators/machineset/controller: Fix %s in scale-from-zero logging #43
Bug 2106733 : Fix panic when accessing nil machine annotations map #46 Bug 2060068 : check securityGroupIDs for emptiness #44 Bug 2060068 : return error when no security group found #41 Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #42 Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #40 Bug 2091433 : Update EC2 instance types #39 Bump machine-api-operator to 25e61c2 #38
Validate unknown regions using AWS API #32
AWS Placement Group controller logic #33
Bug 2072195 : Custom DHCP Option Set: empty domain-name is a valid custom domain #36 Remove unreleased AWS Placement Groups support #35
AWS IMDSv2 support #34
Refactor provider status to use metav1.Condition #31
Bug 2067791 : Bump prometheus/client_golang #30 Add AWSPlacementGroup controller #25
Bug 2065510 : Update AWS SDK to 1.43.20 #29 Bug 2065160 : Ensure IP based NLB targets are deregistered before Machines are removed #28 Bug 2060697 : Update openshift/api dependency #27 Leverage basic AWSPlacementGroup for AWS PG membership #23
Ensure Machine level tags have precedence over infrastructure level tags #24
Allow Machines to select EFA network interfaces #8
CFE-68 : user defined resource tags on EC2 instances updatable #15 Full changelog
OCPBUGS-30711 : Upgrade go-jose module to 4.0.1 #187 OCPBUGS-25588 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #183 OCPBUGS-25002 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #181 OCPBUGS-25002 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #180 NO-ISSUE: Sync OWNERS with team members #173
snyk: exclude vendor/ #170
Bump k8s deps for CVE-2023-39325 #169
OCPBUGS-19264 : Updating ose-aws-pod-identity-webhook images to be consistent with ART #167 CCO-429 : Rebase master #166 Bump to go 1.20 in go.mod #163
Updating ose-aws-pod-identity-webhook images to be consistent with ART #162
Updating ose-aws-pod-identity-webhook images to be consistent with ART #159
Updating ose-aws-pod-identity-webhook images to be consistent with ART #158
Update OWNERS #157
Updating ose-aws-pod-identity-webhook images to be consistent with ART #156
Updating ose-aws-pod-identity-webhook images to be consistent with ART #155
Updating ose-aws-pod-identity-webhook images to be consistent with ART #153
Bug 2093986 : Comply to restricted pod security level #154 Bug 2067792 : upgrade prometheus/client_golang to v1.12.1 #152 Updating ose-aws-pod-identity-webhook images to be consistent with ART #151
Full changelog
OCPBUGS-24195 : the apiservice controller waits until bootstrap complete #662 OCPBUGS-22969 : Use v1 for flowcontrol API #640 NO-JIRA: e2e Keycloak: retry logging in as admin #666
OCPBUGS-32089 : wellknown-readiness: perform several attempts to connect before going unavailable #664 NO-ISSUE: bump to the latest version of openshift/api #663
NO-ISSUE: bump dependencies #659
NO-JIRA: test/lib: create SA on deploy #660
NO-ISSUE: oauth-apiserver: disable priority and fairness #658
NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after #657
NO-JIRA: _output - remove dir #651
OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #632 WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #646 OCPBUGS-24883 : Updating ose-cluster-authentication-operator-container image to be consistent with ART #644 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #636 OCPBUGS-24217 : Annotate certs with ownership information #642 OCPBUGS-21719 : go.mod: bump golang.org/x/net to v0.17.0 #635 OCPBUGS-17987 : generate only >=0 number of random bits #629 OCPBUGS-19125 : Updating ose-cluster-authentication-operator images to be consistent with ART #634 OCPBUGS-8093 : properly set the pod name and namespace in graceful termination lifecycle events #628 Add openshift-cli-client in NamesFilter #625
OCPBUGS-16501 : bump PSa, lib-go and storage-version-migrator to get rid of goproxy dep #624 AUTH-356 : Add openshift-cli-client OAuth Client #606 Correctly link oauth apiserver ServiceMonitor with its Service #616
OCPBUGS-2765 : Library go bump #613 OCPBUGS-14010 : increase timeout for probes #612 AUTH-363 : make proxy config check less obtrusive #608 OCPBUGS-10577 : update apf configuration to use v1beta3 #594 OCPBUGS-10041 : update openshift/api to include aesgcm provider in the default apiserver schema #601 API-1509 : Enable AESGCM encryption #598 OCPBUGS-6189 : art image update #596 OCPBUGS-3929 : update apf configuration to use v1beta2 #592 OCPBUGS-3440 : Restart authentication operator if console capability is enabled #589 OCPBUGS-3441 : Update cluster-authentication-operator not to go degraded without console [4.13] #587 make the custom route controller use server-side-apply to avoid stomping unknown fields #582
e2e: address PSa failures #581
Bug 2111842 : v/o/library-go - version-bump #576 Updating ose-cluster-authentication-operator images to be consistent with ART #575
Updating ose-cluster-authentication-operator images to be consistent with ART #571
Bug 2078287 : only ever include certificates in the oauth-serving-cert CM #573 AUTH-133 : bindata/oauth-openshift: specify pod security level #570 Update Links #568
Bug 1958198 : Avoid zero or low resync intervals #491 manifests: specify pod security level #565
e2e: Use Keycloak v18.0.0 #567
AUTH-89 : add audit options to oauth-server on oauth-audit-profile Variant03 #563 MGMT-9797 : Bump openshift/api dependency to 04e1813ebb11 #564 make apiserver readiness probe honor readyz #561
Bug 2063342 : vendor: bump library-go #558 Bug 2059515 : e2e: Use Keycloak v17.0.0 #554 Update OCP branding within oauth-templates #540
Full changelog
OCPBUGS-31421 : add check for taint.value == nil #292 OCPBUGS-28334 : update snyk file #287 PODAUTO-99 : Fix VPA e2e test failures #286 OCPCLOUD-2431 : rebase on upstream 1.29.0 release #285 PODAUTO-104 : Add downstream pod autoscaling team member jkyros to VPA OWNERS #283 OCPBUGS-27509 : Fix unstructured taint parsing in Cluster API provider #281 OCPBUGS-26504 : Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 #279 OCPBUGS-25855 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 #277 OCPBUGS-25625 : Add Snyk file to exclude vendor directory on scan #276 OCPBUGS-24783 : Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART #271 OCPBUGS-25579 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #274 PODAUTO-91 : Add joelsmith to OWNERS for approving of VPA-only PRs #273 OCPBUGS-24974 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #272 OCPBUGS-24146 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #269 OCPCLOUD-2195 : rebase on upstream 1.28.0 release #265 Update OWNERS #264
OCPBUGS-18137 : UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg #261 OCPBUGS-19232 : Updating vertical-pod-autoscaler images to be consistent with ART #262 OCPBUGS-18852 : Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #260 Updating vertical-pod-autoscaler images to be consistent with ART #253
OCPCLOUD-2060 Merge https://github.com/kubernetes/autoscaler:master (d3ec0c4) into master #256
OCPBUGS-13228 : Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #255 Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #252
OCPCLOUD-1851 : Upstream rebase to CA 1.26.1 and VPA 0.13 #250 Update OWNERS #251
Updating vertical-pod-autoscaler images to be consistent with ART #248
Update OWNERS #249
Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #246
Updating vertical-pod-autoscaler images to be consistent with ART #243
rebase on upstream 1.25.0 #241
Bug 2001027 : update clusterapi nodegroups processor #240 Updating vertical-pod-autoscaler images to be consistent with ART #235
Bug 1944065 : Have VPA ignore phantom containers named “POD” #233 Bug 2087037 : Rebase onto latest master from upstream #231 Bug 2087037 : Rebase Autoscaler onto upstream release-1.24 branch #227 added bindata.go in e2e/vendor to fix the e2e test failures #225
add user configurable cluster api version #223
Full changelog
OCPBUGS-31960 : Bump x/net to v.0.24.0 #318 OCPCLOUD-2493 : Update CAO to add upstream annotations #316 OCPCLOUD-2523 : add ExpanderOrderList api option #304 OCPBUGS-29863 : Apply hypershift cluster-profile for ibm-cloud-managed #314 OCPBUGS-28207 : update min/max memory limit documentation #313 MIXEDARCH-429 : Revert “OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch” #311 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #312 MIXEDARCH-429 : Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297 OCPCLOUD-2432 : Bump k8s packages to v1.29 #310 OCPBUGS-25559 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #305 OCPBUGS-25633 : Add Snyk file to exclude vendor directory on scan #306 OCPBUGS-24911 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #303 OCPBUGS-24102 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #302 OCPCLOUD-2137 : Check scale from zero annotations on MachineSets #294 OCPBUGS-21791 : Bump x/net package to v0.17.0 #295 Update OWNERS #296
OCPCLOUD-2196 : Update dependencies k8s 1.28 #293 OCPBUGS-18137 : Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch #284 OCPBUGS-18954 : Ensure status reporter caches exit if they don’t sync #285 OCPBUGS-19411 : cluster-autoscaler-operator: clusterrole add clusteroperators watch #287 OCPBUGS-19169 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #286 OCPBUGS-18278 : Address long acquire times during upgrade #281 OCPBUGS-18338 : Fix CI by running tests natively by default #282 Reconcile when external process change the clusteroperator status #279
OCPBUGS-14356 : add nutanix labels that should be ignored #275 CNF-5642 make operator optional #269
OCPCLOUD-2061 : Rebase dependencies to k8s 1.27 #274 Updating ose-cluster-autoscaler-operator images to be consistent with ART #273
OCPBUGS-10105 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #271 Bug 1943194 : update GPU resource limits type to have validation #268 Update OWNERS #270
revert GPU label changes from pr 223 #267
: Update tooling in Cluster Autoscaler Operator #266
Add infrastructures resource to config.openshift.io #265
Allow infrastructures.config.openshift.io to be listed #264
Register configv1 types to schemes #262
Updating ose-cluster-autoscaler-operator images to be consistent with ART #259
: Update CAO to ignore platform related zone labels #260
Update OWNERS #261
: Set default container for operator #258
Add client certificate and key to service monitor #249
Updating ose-cluster-autoscaler-operator images to be consistent with ART #248
OCPCLOUD-1677 : add flag for duplicated events #253 Bug 1997396 : fix an error with autoscaler alert rules #254 OCPBUGS-1411 : Bump k8s deps to 1.25 #252 Bug 1997396 : update alerts for resource limits #250 OCPCLOUD-1427 : Expose autoscaler “–balancing-ignore-label” flag through CRD #251 Add verbosity option to ClusterAutoscaler object #247
Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #246 Bug 2067803 : Bump prometheus/client_golang #242 Bug 2063194 : add leader election flags to autoscaler deployment #241 add capi version to autoscaler deployment #240
Updating ose-cluster-autoscaler-operator images to be consistent with ART #238
Full changelog
OCPBUGS-24871 : Updating ose-cluster-config-operator-container image to be consistent with ART #390 TRT-1581 : default to self-managed clusterprofile #414 NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable #412
OCPBUGS-29576 : Apply hypershift cluster-profile for ibm-cloud-managed #408 NO-JIRA: add check to ensure clusterprofile matches for featuregates #411
OCPBUGS-28621 : Fix PSa labels #406 STOR-1700 : Bump(openshift/api): to get new VolumeGroupSnapshot API #405 OCPBUGS-28621 : Add required PSa labels #401 SPLAT-1400 : promote vSphere control plane machinesets from tech preview #400 OCPBUGS-26541 : remove duplicate manifests in image #399 Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541 : remove duplicate manifests in image #392 OCPNODE-1671 : Update api,client-go to add imagepolicy api #376 Revert “OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART” #388
OCPBUGS-19106 : Updating ose-cluster-config-operator-container image to be consistent with ART #385 read featuregates from openshift/api #349
yield CRDs and empty resource rendering to api imge #379
CNF-10479 : Bump up api to pull mixed cpu allocation feature gate #386 NP-793 : Bump github.com/openshift/api #375 create manifest directory during rendering #382
SPLAT-1272 : Update for Nutanix failure domains api changes #378 create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480 : Add MetricsServer FeatureGate #377 NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813 : add MCN featuregate #368 SPLAT-1127 : bring in vSphere CPMSO API updates #342 OCPBUGS-21781 : Update openshift/api package to latest version #365 OCPBUGS-21744 : bump library-go to include switch to HTTP/1.1 #366 CFE-887 : Bump openshift/api to add DNSNameResolver. #364 Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. #358
OCPBUGS-20164 : Remove Build CRD #360 Remove AdmissionWebhookMatchConditions feature gate #359
OCPVE-708 : feat: bump(api) #357 OCPCLOUD-1989 : Promote GCP CCM from TPNU to default #319 OCPBUGS-19106 : Updating ose-cluster-config-operator images to be consistent with ART #353 CCO-412 : Bump API to promote azureWorkloadIdentity to defaultFeatures #351 Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Bump openshift/api to add ValidatingAdmissionPolicy feature gate. #340
OCPVE-626 : bump(openshift/api@master) #341 CFE-689 : Update openshift/api package to latest version #335 OCPBUGS-16614 : go.mod: bump openshift/api #338 OCPBUGS-16614 : go.mod: update openshift/api #334 OCPBUGS-16507 : bump sigs.k8s.io/kube-storage-version-migrator #333 OCPCLOUD-2010 : Remove feature gate for external platform #331 SDN-4024 : Vendor openshift/api to get ANP feature-gate changes #330 Promote privateHostedZoneAWS from Tech Preview to Default #328
Update openshift/api #327
OCPBUGS-13547 : Promote Azure CCM from TPNU to default #307 OCPBUGS-15877 : go upgradeable=false when latencysensitive is used and not corrected #325 Enable feature gate for externalCertificate on Route API #326
stomp the latencysensitive featureset for equivalent default #324
WRKLDS-757 : Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade #322 SPLAT-1099 : bump openshift/api for vSphere static IP feature gate and platform spec #323 remove dead flag for file #309
Changes to move to api@2d36f53 #321
OCPBUGS-12767 : Add CustomNoUpgrade CRD versions to payload #320 OCPCLOUD-2010 : Re-vendor api to support external platform #306 Update openshift/api to disable EventedPLEG featuregate in techpreview #317
update openshift/api for types and gates #316
Update github.com/openshift/api to pull in evented pleg and sigstore feature flags #312
Update github.com/openshift/api to pull in feature gates #311
OCPBUGS-6266 : Rename config-operator_00_namespace run level to 00 #303 Update library-go dependency #305
Add JoelSpeed to owners #302
Update API and library-go #301
Require consistency in rendered artifacts #299
specify all known featureGates in disabled #297
update render to handle directories of manifests #295
adjust to refined openshift/api types #296
update ordering and featuregates #294
add featuregate status #288
Updating ose-cluster-config-operator images to be consistent with ART #287
OCPBUGS-10037 : update openshift/api to get new apiserver schema #289 update openshift/api to get new techprevew apiserver schema #286
CFE-601 : Update openshift/api package version #279 OSASINFRA-3097 : update openshift/api to get External LB fields #278 OCPBUGS-6185 : Update go version and ART images #280 OCPBUGS-4207 : Revert “Increase verbosity level to track probe timeouts” #274 Update go.mod api,client-go to register crd #270
OCPBUGS-3123 : add –feature-set option to render options #271 NE-975 : Update openshift/api for updated ingress config loadBalancer fields #268 Increase verbosity level to track probe timeouts #267
Bug 1843043 : Update openshift/api for modified config resource description #264 update openshift/api for new ingress manifest #263
Update go.mod api,client-go to register crd #262
This is not the repo you’re looking for. #261
Bump k8s dependencies #260
Update images to be consistent with ART #253
Bug 2082763 : Drop the OperatorHub CR instance #245 bump openshift/api, client-go #251
manifests/deployment: comply to restricted pod security level #248
Reorder the empty Node CR resource to ensure it is applied after the Node CRD #244
Bump(o/client-go); Add empty config/v1/node/cluster object #238
Bug 2074243 : Bump openshift/api to c3bb724c28 #243 Revert config/v1/Node crd.yaml #242
Bump openshift/api, openshit/client-go to add ImageMirrorSet CRDs #236
bumped openshift API to have node object related changes #233
Full changelog
OCPBUGS-28673 : implement connect timeout tuning option #1035 NE-1317 : manifests - add ingress capability annotation #950 OCPBUGS-32371 : Bump openshift/api, and update CRD generation #1045 OCPBUGS-25193 : Add vnet subnet read and join permission for azure #1029 OCPBUGS-30834 : Update to go 1.21 #1040 OCPBUGS-31722 : Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037 OCPBUGS-3522 : Include recent errors in canary checks fail #865 OCPBUGS-30091 : TestHostNetworkPortBinding: Delete t.Parallel() #1032 CFE-987 : Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017 CORS-2317 : Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016 OCPBUGS-28596 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #1019 NE-1490 : update to go v1.20 #1012 OCPBUGS-15253 : Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980 CCO-249 : Replace GCP role with explicit permissions #844 OCPBUGS-25006 : Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006 OCPBUGS-24531 : Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011 OCPBUGS-24531 : Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008 OCPBUGS-24531 : Skip CI for scope change until OCPBUGS-24044 is resolved #1007 OCPVE-780 : annotate credentials request manifests #995 OCPBUGS-23742 : Bump controller-runtime to v0.16.3 #1001 NE-1402 : Add service endpoint override capability to IBM DNS provider #990 OCPBUGS-16762 : Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982 OCPBUGS-14994 : Don’t add clientca-configmap finalizer if deleting #948 OCPBUGS-22020 : Bump golang.org/x/net for CVE-2023-44487 #985 OCPBUGS-21803 : test/e2e: Add test case for 2000000 maxConnections #983 OCPBUGS-20192 : Require non-readonly filesystem in router container #981 OCPBUGS-16762 : Bump openshift/api for container.maxLength fix #979 OCPBUGS-3541 : Don’t create route metrics for ingress controllers that are not admitted #869 OCPBUGS-18248 : Prevent GatewayClass from getting recreated #975 OCPBUGS-19268 : Updating ose-cluster-ingress-operator images to be consistent with ART #977 OCPBUGS-15900 : TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973 OCPBUGS-3356 : E2E test for cookie length truncation #871 OCPBUGS-15978 : Check public DNS zone when reporting status #967 OCPBUGS-17359 : test/e2e: Don’t use openshift/origin-node #970 NE-1140 , NE-1145 : Set/delete HTTP request/response headers via IngressController API #872 OCPBUGS-16089 : Set spec.subdomain on the canary route #965 OCPBUGS-14995 : desiredRouterDeployment: Set HostPort if needed #947 OCPBUGS-10875 : gateway-service-dns: Set DNS policy appropriately #934 NE-1244 : Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929 OCPBUGS-12790 : README: Fix Bugzilla link #968 RFE-3007 : Expose option-contstats as an unsupported option #887 NE-1189 : Refactor Test_desiredLoadBalancerService #886 NE-1187 : Use t.Run for table-driven tests #884 NE-1183 : Rename unit tests for specific functions #880 NE-1269 : Replace bindata using embed #905 RFE-3765 : Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900 OCPBUGS-9274 : canary: Tolerate infra node NoExecute taint #932 OCPBUGS-7546 : Allow only 1 disruption with 3 replicas #931 OCPBUGS-15100 : Fix previous attempt of adding a missing trailing dot to hostname #956 OCPBUGS-14396 : Set controller-runtime logger to a null logger for E2E #946 OCPBUGS-14998 : Only use RoleARN for Route53 API #951 OCPBUGS-15100 : Create valid DNS names for Gateway API on GCP #949 OCPBUGS-13106 : Add ingress controller status logging on waitForIngressControllerCondition #924 OCPBUGS-13190 : Avoid spurious updates for internalTrafficPolicy #927 OCPBUGS-13810 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944 NE-1294 : Add support for AWS shared VPC in another account #928 CCO-318 : Enable Azure Workload Identity authentication. #906 OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939 OCPBUGS-13963 : Bump vendors k8s libraries to 0.27.2 #936 Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930 OCPBUGS-5478 : add UBI based Dockerfile #925 CCO-318 : Read feature gates for future usage #908 OCPBUGS-12913 : Deflake TestRouterCompressionOperation #920 OCPBUGS-6784 : bump controller-runtime to fix the multi namespace cache indexing #913 OCPBUGS-12579 : Address CVE-2022-41723 #915 OCPBUGS-12790 : Replace Bugzilla link with Red Hat Issue Tracker #916 OCPBUGS-10714 : gatewayclass: Update for OSSM 2.4 API change #901 OCPBUGS-10189 : Updating ose-cluster-ingress-operator images to be consistent with ART #898 OCPBUGS-10846 : Fix TestClientTLS flakes #904 NE-1184 : Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881 OCPBUGS-4054 : configurable-route: Don’t use NewKindWithCache #860 NE-1186 : Test_getRR: Fix typo: “excepted” → “expected” #883 CORS-2467 : dns: azure: use azidentity with an adapter #846 NE-1105 : Add support for Gateway API #890 OCPBUGS-7424 : Bump vendored k8s libraries to 1.26.1 #888 CFE-679 : Add user defined tags to the created DNS resources #874 OCPBUGS-6247 : Updating ose-cluster-ingress-operator images to be consistent with ART #862 CORS-2072 : GCP - Parse Zone ID with a project ID embedded #855 NE-1092 : Add proxy protocol support for IBMCloud loadbalancers #812 OCPBUGS-6384 : Address CVE-2022-41717 #876 OCPBUGS-4827 : Add missing AWS permission for ListTagsForResources #868 OCPBUGS-6701 : Avoid spurious updates for scope in IngressClass #879 OCPBUGS-6698 : Fix conflict error message in ensureNodePortService #877 OCPBUGS-6700 : updateIngressClass: Fix log message #878 NE-1124 : Add support for External platform to CIO #873 OCPBUGS-4573 : Target metrics port by name in internal service #864 OCPBUGS-434 : Absorb PodsScheduled condition into MinAvailable #854 OCPBUGS-4759 : Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866 OCPBUGS-4703 : Replace liveness-grace-period-seconds annotation #863 OCPBUGS-3404 : Bump openshift/api for matchExpressions doc fix #856 OPNET-133 : Support remote worker #858 OCPBUGS-1725 : Ingress controller should not have affinity policy in single-replica clusters #810 OCPBUGS-1807 : Fix bad handleSingleNode4Dot11Upgrade log message #808 OCPBUGS-2775 : Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851 OCPBUGS-2848 : Support matchExpressions selectors with route metrics #850 Bug 2117524 : Update CRLs when they expire #828 OCPBUGS-853 : certificate-publisher: Don’t publish extraneous certificates #824 Bug 1962502 : Add alerts for unmanaged Routes and Ingresses without IngressClassName #823 NE-1071 : Default HAProxy maxconn value to 50000 for OCP 4.12) #836 Updating ose-cluster-ingress-operator images to be consistent with ART #834
OCPBUGS-2435 : TestRouterCompressionOperation: Nil-pointer fix #843 OCPBUGS-2493 : Fix TestUnmanagedDNSToManagedDNSInternal E2E test race conditions #845 CFE-478 : Added support for exporting Route type and Routes per Shard metrics #779 NE-975 : Use ingress config to set default LB type on AWS #837 OCPBUGS-2429 : Fix TestReloadInterval min value test cases and race conditions #842 OCPBUGS-2334 : Added nil check for service object on load balancer scope change #839 NE-956 : Configurable LB Source Ranges - Functional Implementation #817 Bug 2107462 : Update CGO_ENABLED=1 #833 OCPBUGS-236 : Bump openshift/api for reloadInterval fix #830 OCPBUGS-1554 : Bump vendored k8s libraries to 1.25 #829 Enable switching of AWS CLB to NLB without deletion of IngressController object. #790
Bug 2066560 : Make ingress clusteroperator progressing=true when router deployment is rolling out #769 Add IBM Cloud DNS support for Power VS #819
OCPBUGS-1049 : test/e2e: Fix TestCanaryRoute security context #826 Bug 2089482 : Do not use deprecated API field InfrastructureStatus.Platform #814 NE-969 : Add IBM DNS Services provider support for private clusters #796 DPP-10860 : Update Bugzilla links to “Networking” component #815 OCPBUGS-368 : Fix e2e tests for pod security violations #818 NE-979 : add ReloadInterval TuningOption #805 Bug 2101878 : Fix another issue with route status clearing race condition caused by not validating generation id #811 Bug 2108708 : Disable auto creation of default ingress contoller for hypershift #797 Bug 2101878 : Fix route status clearing race condition caused by using the cache #794 Bug 2106086 : Bump openshift/api for healthCheckInterval fix #804 Bug 2104481 : Allow PROXY protocol for the “Private” endpoint publishing strategy #803 add Ethany-RH to OWNERS #800
Bug 2086887 : Add better debug logging to TestIngressOperatorCacheIsNotGlobal to help debug flakes #793 Bug 2093462 : status: Watch clusteroperators #714 Bug 2092042 : Bump vendored k8s libraries to 1.24 #768 Bug 1944851 : Clear route status when an ingress controller is deleted or a route is un-admitted #724 Bug 2094932 : Patching config.ingresses status requires patch permissions #788 Bug 2097555 : Fix loadBalancerServiceAnnotationsChanged check and update #783 Bug 2094932 : Ingress operator needs permission to list nodes #785 Bug 2095229 : desiredRouterDeployment: Check for nil hostNetwork #780 Bug 2094962 : Fix flakey logic in haproxy timeout tests #775 Bug 2094932 : MGMT-10403: Set the defaultPlacement for none-platform SNO clusters installed before 4.11 #767 Bug 2075671 : Add a e2e test that verifies the ingress operator’s cache doesn’t include everything #764 Bug 2055601 : Add cluster tag to *.apps domain record #737 Bug 2080379 : Group all e2e tests as parallel or serial #756 Bug 2082428 : Add MicroSecond processing #762 NE-408 : Allow configuring ELB connection idle timeout #451 NE-825 : Update router to use random balancing algorithm once again #727 Bug 2084433 : AUTH-133: assets: comply to pod security #760 NE-577 : Support a Configurable ROUTER_MAX_CONNECTIONS in HAproxy #735 Add support for route53 in the us-isob-east-1 region + fix #754
AUTH-184 : manifests/deployment: comply to restricted pod security level #749 Bug 2081447 : desiredRouterDeployment: Fix for port defaulting #753 Bug 2079468 : Enhance the waitForIngressControllerCondition for better CI results #745 NE-882 : Set ROUTER_DOMAIN to enable route subdomain field #674 Specify host port for host networking strategy #694
Bug 2007246 : Add allowPrivilegeEscalation to the router container #743 MGMT-9797 : Determine number of replicas according to DefaultPlacement #728 Bug 2076193 : Remove special-casing for default ingresscontroller probe parameters #742 NE-585 : Make ROUTER_BACKEND_CHECK_INTERVAL configurable #712 BUG 2076984: test/e2e: add resilience to RBAC test teardown #744
BUG 2054200: Fix removing custom created service in openshift-ingress with same name #707
Add Nutanix platform #730
Revert “Bug 2007246: Ingress Controller does not set allowPrivilegeEscalation in the router deployment” #741
Bug 2075671 : Fix k8s client cache object global inclusion and duplication. #740 NE-781 : Allow users to tune kubelet probe timeouts #736 Bug 2072106 : Fix test Errorf limitation in go 1.18 #733 Bug 2071139 : add pod eviction permission #734 Bug 2071139 : delete default ingress pod if it is scheduled where another router pod already is #720 Bug 2069457 : Delete LoadBalancer-type service finalizer logic #729 Bug 2021446 : Set canary status as unknown if not admitted to default ingress controller #723 Bug 2066444 : update relatedObjects for clusteroperator status #721 Bug 2007246 : Ingress Controller does not set allowPrivilegeEscalation in the router deployment #718 Bug 1995953 : Add unit test for verifying router deployment env is always sorted #715 Bug 2057762 : Set Upgradeable=False if default cert has no SAN #708 Bug 2055470 : Normalize the AWS internal LB annotation value #704 BUG 2037447: Disable keepalive for canary probe #701
pkg/operator/controller/ingress/status_test: Fix ...-tag -> ...-tags test-case description #700
Added gcs278 to OWNERS #698
Full changelog
OCPBUGS-1 : Jira integration test PR 3 #92 Updating the documentation on how to use DTK as a multi-stage image. #80
Remove all kmods-via-containers references and dependencies #79
Removing the ‘make buildprep’ from README.md. #78
OCPBUGS-1 : Jira integration test PR 2 #77 Updating README.md. #76
OCPBUGS-1 Jira integration test PR #75
Updating driver-toolkit images to be consistent with ART #73
Bumping KVC to the last available commit. #74
Full changelog
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484 : update unit tests in egress/dns-proxy #165 NE-1444 : egress/dns-proxy: switch to haproxy28 RPM package #160 OCPBUGS-24861 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158 OCPBUGS-24751 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155 OCPBUGS-24723 : Updating openshift-enterprise-base-container image to be consistent with ART #154 OCPBUGS-19261 : Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153 OCPBUGS-19107 : Updating ose-egress-http-proxy images to be consistent with ART #150 OCPBUGS-19239 : Updating openshift-enterprise-egress-router images to be consistent with ART #151 OCPBUGS-18860 : Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149 OCPBUGS-18853 : Updating openshift-enterprise-base images to be consistent with ART #148 OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132 OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131 OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133 NE-1304 : container builds: switch to haproxy26 package #141 OCPBUGS-11385 : Removed chroot setting #137 egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138 egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134 Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
bump RHEL8 egress-dns-proxy image to haproxy26 #125
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
Updating ose-egress-http-proxy images to be consistent with ART #120
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
Updating openshift-enterprise-base images to be consistent with ART #119
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126 : ipfailover: Autodetect the “ens3” NIC #111 Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188 : VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104 Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
Full changelog
OCPBUGS-24816 : Updating ose-machine-os-images-container image to be consistent with ART #34 NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 #33
NO-ISSUE: Force updating 4.15 CI images #32
OCPBUGS-19133 : Updating ose-machine-os-images images to be consistent with ART #30 Fix condition check for logging #29
Force updating main rhcos image to version 414.92.202303281555-0 #28
Updating ose-machine-os-images images to be consistent with ART #26
Updating ose-machine-os-images images to be consistent with ART #25
Updating ose-machine-os-images images to be consistent with ART #20
OCPBUGS-884 : Update rhcos release browser url #21 Bug 2090017 : Get rid of lookaside cache in OCP build #15 Revert .ci-operator.yaml #16
Updating ose-machine-os-images images to be consistent with ART #11
Bug 2075024 : Remove destination coreos if it exists #13 uncompress arm64 vmlinuz for pxe booting #12
Full changelog
OCPBUGS-28557 : Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 #54 OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #53 OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #52 OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #51 OCPBUGS-18848 : Updating ose-multus-route-override-cni images to be consistent with ART #48 15393552: Updating ose-multus-route-override-cni images to be consistent with ART #47
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #45
Revert ART changes to fix rhel9 base binary #44
Updating ose-multus-route-override-cni images to be consistent with ART #43
Fix Dockerfile to use rhel9 #42
Updating ose-multus-route-override-cni images to be consistent with ART #41
Add rhel9 binary #40
Updating ose-multus-route-override-cni images to be consistent with ART #36
Updating ose-multus-route-override-cni images to be consistent with ART #35
Updating ose-multus-route-override-cni images to be consistent with ART #34
Updating ose-multus-route-override-cni images to be consistent with ART #33
Dev/sync upstream #30
Updating ose-multus-route-override-cni images to be consistent with ART #28
Updating ose-multus-route-override-cni images to be consistent with ART #25
Updating ose-multus-route-override-cni images to be consistent with ART #21
Full changelog
Source code for this page located on github