Back to index
4.10.0-fc.4
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.0-fc.4-x86_64
Tests:
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.6.54
Created: 2022-01-28 20:54:54 +0000 UTC
Image Digest: sha256:664ad79f4a5f321c4acd51c737dfce9363e48470dc35732be4b7d156aa7b3936
Release 4.10.0-fc.4 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2022-01-28-125342
Components
New images
Removed images
- ironic-inspector
- ironic-ipa-downloader
- mdns-publisher
Rebuilt images without code change
- machine-os-content
sha256:010697733208d3d5daedf9b36216177a4956d246ab3ecb6380baf10b8b693792
- Updating ose-aws-ebs-csi-driver images to be consistent with ART #192
- Bug 1988371: Rebase to v1.2.0 for OCP 4.9 #190
- release v1.2.0 - part 1 #999
- add ecr images to readme #998
- utilize latest go sdk to ensure createVolume idempotency #982
- Release 1.1.3 #992
- Update base images: yum update al2, bump debian tag #986
- Increased the helm chart version #980
- Updated default setting of windows daemon set #978
- Updated README.md and changed the version in snapshot example #976
- Add how to consume new hack/e2e scripts in other repos (efs/fsx) #972
- Update to csi-proxy v1 APIs #966
- Several breaking changes to the helm chart #965
- Feature/allow add debug args #970
- Nit: Fix typo in the CHANGELOG #971
- Install snapshot controller independently of helm for e2e tests #968
- Release v1.1.1 and chart v1.2.4 #959
- Download fixed version of eksctl to avoid bugs #967
- csi-snapshotter in ebs-csi-controller now checks for enableVolumeSnapshot before including it in containers #960
- Stop pushing latest tag and remove all references to it #949
- Add migration upgrade/downgrade test #927
- Clarify that using instance profile for permission requires instance metadata access on #952
- Adding CRDs VolumeSnapshotClass, VolumeSnapshotContent, VolumeSnapshot for snapshot.storage.k8s.io/v1 #938
- Revert “Fix kustomize RBAC bindings to have namespace kube-system” #947
- Implement Windows NodePublish/Unpublish #823
- Update example policy, use it in tests, and document it #940
- Default controller.extra-create-metadata true so that volumes get created with pvc/pv tags #941
- Grant EKSCTL_ADMIN_ROLE admin access to eksctl clusters #933
- Add KubernetesCluster tag to provisioned volumes when cluster-id set #932
- Default extra-create-metadata true so that volumes get created with pvc/pv tags #937
- Add test-e2e-external-eks make rule that tests EKS with pod instance metadata disabled. Remove hostNetwork from DaemonSet #907
- Disable uuid checks on XFS #913
- Update driver capabilities #922
- helm chart configurable log verbosity #908
- update inFlight cache to avoid race condition on volume operation #924
- Fix podLabels case in Helm chart #925
- merge v1.1.0 release commits back to master #921
- Updating ose-aws-ebs-csi-driver images to be consistent with ART #189
- Updating .ci-operator.yaml
build_root_image from openshift/release #188
- Bug 1962415: Rebase v1.1.0 #187
- release v1.1.0 #917
- remove WellKnownTopologyKey from PV Topology #912
- Bump chart-releaser-action to v1.2.1 #914
- Skip volume expansion if block node #916
- add custom useragent suffix #910
- Add podAnnotations to snapshotController StatefulSet #884
- Support custom pod labels in Helm chart #905
- Add pod disruption budgets that got missed in a rebase #906
- Reduce default log level to 2 #903
- Cleanup helm chart #856
- remove hardcoded namespace for pod disruption budget #895
- Only initialize the in-cluster kube client when metadata service is actually unavailable #897
- rename node clusterrolebinding to make auto upgrade work #894
- bump helm chart version #881
- fix naming mistake in clusterrolebinding, expose env var to controller via downward api #874
- Fix kustomize RBAC bindings to have namespace kube-system #878
- add self as owner #866
- release v1.0.0 #865
- Add eksctl support to e2e scripts #852
- Bug 1955474: Rebase v1.0.0 #185
- release v1.0.0 #862
- instance metadata issue fix #855
- add pod disruption budget for csi controller #857
- Add empty StorageClasses to static example #850
- Add additional logging for outpost arn handling #851
- Resize filesystem when restore a snapshot to larger size volume #753
- Fix missing import #849
- Emit AWS API operation duration/error/throttle metrics #842
- Update readme file to provide more info on driver options and tagging #844
- Bump/reconcile sidecar versions in helm/kustomize #834
- Fix broken gomocks #843
- [helm/CSIDriver] Switch to non-deprecated apiVersion #836
- handling describe instances consistency issue #801
- update IAM policy sample and add new driver level tag #835
- add options to enable aws sdk debug log and add more logs when driver… #830
- Rebase 1.21 #828
- update installation command to use latest stable version #832
- Cap IOPS when calculating from iopsPerGB #809
- release v0.10.1 #827
- support volume partition #824
- Warn users of migrating without draining #822
- release v0.10.0 #820
- AWS EBS CSI Driver Helm chart to inject environment variables #817
- release v0.9.1 #813
- Track driver deploy time in e2e test pipeline #815
- Bug 1932152: UPSTREAM: 809: Cap IOPS when calculating from iopsPerGB #184
- Bug 1942883: Rebase to v0.10.1 #183
- Release 0.10.1 #826
- Release 0.10 #811
- fix deploy stable ecr error kustomization file #808
- Use the old topology key for e2e tests #814
- csi.storage.k8s.io/fstype is case sensitive #807
- Don’t exit script prematurely if test fails #802
- Update snapshot controller resources #791
- Add well-known topology label #773
- Remove storageclass from static example #794
- Print csi plugin logs at end of e2e test #789
- Prep for Windows support: Copy pkg/mounter and refactor to use k8s.io/mount-utils #786
- hack/e2e: Support passing helm values as values.yaml and make other similar files optional #787
- add toleration time to NoExecute effect — Enable in next release #776
- Removing prestop hook for node-driver-registrar #778
- go mod tidy #777
- Add self as reviewer #774
- Add readiness probe so controller does not report “Ready” prematurely #751
- removed harcoded NAMESPACE from helm chart #768
- Update chart version #772
- Add ability to specify topologySpreadConstraints #770
- Allow setting http proxy and no proxy environment values #765
- add a document separator for storageclass template file #762
- delete leaked volume if driver don’t know the volume status #771
- Update livenessprobe image version from 2.1.0 to 2.2.0 #756
- Fix error message when IOPSPerGB is missing in io1 volumes #767
- Aws client config: increase MaxRetries #769
- Sets the imagePullSecrets if the value is set in the chart #755
- Update test k8s version to 1.18.16 #759
- Set enableVolumeScheduling to true by default in the helm chart #752
- Refactor inFlight key to add lock per volumeId #702
- Add storage class annotation and label handling #734
- Make CreateVolume idempotent #744
- Remove hardcoded snapshot controller image references #711
- Update ECR overlay #745
- correct kustomization gcr image repo #742
- patch stable release to use gcr image #740
- Updated installation to use latest 0.9 release #735
- Allow resources override for node DaemonSet + priorityClassName #732
- Allow all fields to be set on StorageClasses #730
- Add support for node existing service accounts #704
- modify error message when request volume is in use with other node #698
- Integrate external e2e test in the testsuits #726
- More controll over snapshot-controller scheduling #708
- Bump chart version #724
- feat: Add option to provision StorageClasses #697
- Add documentation for release process #610
- release 0.9.0 #718
- Move cr.yaml out of github workflows #720
- Remove arm overlay #719
- Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #182
- Add BZ component to OWNERS #181
- Bug 1932229: Rebase to v0.9.0 #180
- Increase timout for cloudbuild #715
- Bump cloudbuild timeout to 1800s #713
- release v0.9.0 #710
- Allow specifying –volume-attach-limit in the helm chart #700
- add e2e test for volume resizing #705
- Update sidecars to newer version #707
- Update to golang@1.15.6 #699
- NodeExpandVolume no-op for raw block #695
- Adds patch for ebs-csi-controller-sa to volumeattachments/status #690
- Refactor e2e testing scripts to be more reusable and use them instead… #694
- Add support for existing service accounts #688
- Add a prerequisite to dynamic provisioning #691
- add volume stats metrics - #677
- Push debian target to Docker Hub #686
- add import snapshot e2e test #678
- Release 0.8.1 #683
- Prefix helm chart releases with “helm-chart-” #682
- Fix outdated ecr login command #680
- cloudbuild: Set _STAGING_PROJECT #668
- Call hack/prow.sh from cloudbuild #666
- Add note for gp3 on outposts #665
- Fix stray argument in cloudbuild.yaml #661
- (Try to) fix cloudbuild #659
- Feature: Add ability to customize node daemonset nodeselector #647
- Update README.md #607
- Use buildx in cloudbuild #658
- Add self to OWNERS #638
- Arm overlay #653
- Bring Go to 1.15.6 in Travis #648
- Fix overlays not being updated for gcr migration #649
- Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #179
- Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #178
- Bug 1913289: Rebase to v0.8.0 for OCP 4.7 #176
- Remove helm chart step from release github workflow and github registry step from container images workflow #644
- Release v0.8.0 #642
- Set up QEMU to build for arm64 #641
- Suffix amazonlinux image with -amazonlinux and push debian image to GitHub #639
- Apply resource constraints to all sidecar containers #640
- Move chart to charts directory and add workflow to publish new chart versions #624
- Add EBS gp3 support #633
- Fix target name in cloudbuild.yaml from amazon to amazonlinux #636
- Fix the name of the snapshot controller leader election RoleBinding #601
- docs(readme): update link to developer documentation #629
- Add latest tags to cloudbuild #634
- Update hack/run-e2e-test to be more idempotent and pleasant to use #616
- Add cloudbuild.yaml for image pushing to gcr #632
- Update ecr overlay image tag #630
- Chart option to disable default toleration of all taints #526
- Post-release v0.7.1 #619
- vendor: bump aws sdk for AssumeRoleWithWebIdentity support #614
- Bump migration kops and k8s version #602
- Set CSIMigrationAWSComplete for migration tests #593
- add tag options and update csi-provisioner #577
- Apply extra volume tags to EBS snapshots #568
- Document behavior wrt minimum and maximum iops #582
- Fix markdown issue in README.md #579
- Fixing Helm install command #578
- Post-release v0.7.0 #576
- Push amazonlinux target to Docker Hub #573
- Release v0.7.0 #574
- Add overlay for ECR images #570
- Create volumes in outpost for outpost instances #561
- Bump all e2e test clusters to latest version 1.18.9 #567
- Make EBS controllerexpansion idempotent #552
- Double iops/gb for io1 and io2 e2e tests #563
- Clarify error message when unsupported volume capabilities are provided #550
- Remove migration go.mod #562
- Add EBS IO2 support #558
- Skip sc1 and st1 tests, only test xfs #559
- Vendor deps #555
- aws-ebs-csi-driver/templates/controller.yaml: fix rendered emptyline #549
- Change the base image to debian-base #551
- Add arm support #527
- Nit: improve flag description #546
- Post release update #544
- Bug 1872251: Upstream: 555: Vendor deps #172
- vendor: bump aws sdk for sts webhook authentication #175
- Bug 1876935: UPSTREAM: 568: Apply extra volume tags to EBS snapshots #174
- Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART #173
- Full changelog
- Bug 2043130: aws-ebs: Add external-snapshotter permissions to patch snapshots #147
- Bug 2038934: Add custom CA bundle support #146
- Bug 2028484: AWS EBS CSI driver’s livenessprobe does not respect operator’s loglevel #144
- Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #143
- Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #141
- Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #139
- Bug 1998174: Add StorageClass for gp3 #140
- Bug 1993931: Storage operators use older kubernetes client #138
- Bug 1990146: some controllers missing livenessProbe #134
- Use generic deployment controller with additional manifest hooks #128
- Start using “embed” module for static assets #131
- Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #132
- Updating .ci-operator.yaml
build_root_image from openshift/release #130
- Bug 1969538: Include default VolumeSnapshotClass #129
- Bug 1960732: update manifest and readme #127
- Bug 1947402: Deploy multiple replicas of CSI Controller Service #122
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #126
- Bug 1951952: Metrics for cloudprovider error requests are lost #125
- Bug 1956411: Add custom tags from Infrastructure #116
- Bug 1947774: fix imagePullPolicy to ifNotPresent #120
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #121
- Bug 1924470: Bump Kubernetes to 1.21 #119
- Fix kube-rbac-proxy image reference #118
- Add metrics scraping #117
- Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #115
- Bug 1933184: Add maxUnavailable to DaemonSets #114
- Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #112
- Cleanup: Remove serviceName from controller manifest #113
- Bug 1905119: dynamically update controller asset for custom CA bundle #111
- Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #109
- Bug 1912945: Set proxy config in Deployment containers #106
- Bug 1898045: redeploy CSI Controller Deployment when secret changes #107
- Bug 1898045: redeploy CSI Controller Deployment when secret changes #104
- support custom CA bundle for AWS API #102
- assets/controller.yaml: support using aws config for credentials #99
- Bug 1898851: Add multipods tests #100
- Bug 1898851: Enable topology tests for the driver #98
- Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #96
- Bug 1840759: Pass cluster ID to CSI driver #83
- Full changelog
- Bug 2040376: Update map of supported aws instance types #19
- Bug 2040504: Ensure IOPS setting is honoured on all supported block device types #18
- Bug 2032926: Update dependencies to K8s 1.23 #14
- Update README #10
- Bug 2025767: Prevent Machine from being considered provisioned until it exists in AWS #11
- Label aws provider image #12
- Update MAO and openshift/api dependency #9
- Rename package to machine-api-provider-aws #3
- Cherry pick from old repo #5
- Remove all old unused files #4
- Migrate from cluster-api-provider-aws #2
- Migrate to API definitions to openshift/api #427
- Bug 2007802: do not requeue if the machine has been updated #424
- Upgrade to use golang 1.16 #423
- Updating ose-aws-machine-controllers images to be consistent with ART #421
- Bug 1994480: Update dependencies to K8s 1.22 #417
- Updating ose-aws-machine-controllers images to be consistent with ART #412
- Bug 1925276: Fix eventual consistency logic to be consistent #406
- Bug 1965080: Reduce frequency of calls to register targets with load balancers #410
- Updating .ci-operator.yaml
build_root_image from openshift/release #411
- add in-container vendor #394
- Bug 1948719: update controller-runtime dependency #408
- Bug 1954177: Update mao dependency for webhook v1 changes #407
- Bug 1949626: update aws-sdk-go to v1.38.25 #403
- Bug 1952611: [OCPCLOUD-1115] Get instance tags from infrastructure object #402
- Bug 1948719: update makefile to ensure that CGO_ENABLE is set properly #401
- Bug 1948719: update dependencies to 1.21 #399
- Updating ose-aws-machine-controllers builder & base images to be consistent with ART #385
- Bug 1918910: Only log error on wrong instance type for scale from zero #397
- Bug 1880757: Unset target groups from LB on deletion #389
- Bug 1910318: Ensure original conditions aren’t mutated during reconcile #396
- Update EC2 instance types #393
- Bug 1910318: Add condition to show actuator exists condition on machine #392
- Makefile fix #386
- Bug 1934021: Ensure response body is closed when we are finished with the request #390
- Bug 1915114: use separate client for accessing openshift-config-managed namespace #382
- Bug 1909108: Bump K8s dependencies to 1.20 #381
- Bug 1906740: Ensure the region is valid when creating AWS client #380
- Bug 1907286: Ensure Machine is marked interruptible as well as Node #379
- Bug 1903424: Ensure MAO dependency is up to date to include newest metrics #378
- support custom CA bundle for AWS API #372
- use shared credentials file for session creation #374
- Bug 1902157: Mark node with condition when due for termination #332
- Bump scripts to Go 1.15 #375
- Move instance tenancy under placement field #370
- Add verify-diff check in generate task and enable in CI #368
- add elmiko to OWNERS file #366
- bump AWS SDK to v1.35.20 #365
- Add support for dedicated instance tenancy #360
- add bugzilla component and subcomponent to OWNERS #359
- Full changelog
- move go.mod to 1.17 #146
- Updating ose-aws-pod-identity-webhook images to be consistent with ART #142
- update OWNERS to reflect current reality #143
- Updating ose-aws-pod-identity-webhook images to be consistent with ART #140
- Updating .ci-operator.yaml
build_root_image from openshift/release #139
- Bug 1958492: UPSTREAM: 115: certificatesigningrequests/v1beta1 to v1 #138
- Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #132
- Bug 1924472: UPSTREAM: 106: vendor bump to gogo/protobuf 1.3.2 #136
- Rebase master #135
- Add additional log statements and update client-go #92
- Add a debug handler to list cache contents and log mutation decision #90
- README: add documentation for running containers as non-root #88
- patch pod spec even if it’s already been patched #62
- Fix panic in cache informer #70
- Change master branch image tag and update README #81
- Add github worflow to automate docker image creation #80
- deploy: add sideEffects to webhook #79
- Add attribution document to container #76
- Update Makefile to delete created tls cert #60
- Update ecr login command for both aws-cli v1 and v2 #53
- Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #129
- Full changelog
- Bug 2030488: Requeue create on invalid credentials errors #11
- Bug 2032926: Update dependencies to K8s 1.23 #9
- Add ephemeral storage support #8
- Updating ose-machine-api-provider-azure images to be consistent with ART #7
- Label azure provider image #6
- Cherry-pick from old repo #5
- Rename module to machine-api-provider-azure #2
- Remove unused files #3
- Migrate from cluster-api-provider-azure #1
- Full changelog
- Bug 2041750: [Alibaba] fix endpoint error in some regions #5571
- Bug 2047258: Read GovCloud from RHCOS stream #5585
- Bug 2045927: Add proxy for ironic-agent.service #5569
- Bug 2041694: [Alibaba] fix system disk category of bootstrap #5564
- Bug 2042655: revert delay of bootstrap control plane teardown for alibaba #5550
- Bug 2041319: [Alibaba] fix VSwitch subnets overlap #5566
- Bug 2041926: [Alibaba] fix creating public record being skipped #5565
- Bug 2023839: Bump Fedora CoreOS to 35.20220116.2.0 #5567
- Bug 2038166: openstack: Fix invalid-https-certificate detection #5576
- Bug 2037209: update alibaba for provider spec api changes #5562
- Bug 2037209: vendor: update openshift/api to latest in preparation for alibaba machine provider changes #5563
- Bug 2043731: Add IP outputs for IBM terraform instances #5538
- Bug 2037813: [baremetal] networkConfig field now accepts yaml instead of string value #5545
- Bug 2042315: Fallback to External IP_OPTIONS when ProvisioningNetwork is Disabled #5548
- Bug 2040160: [Alibaba] fix EIP metering method #5547
- Bug 2026321: Remove allowed values for nodeVMsize #5532
- Bug 2042438: openstack/Dockerfile: add make and gettext #5546
- Bug 2033271: [Alibaba] fix deletion of resource group #5536
- Bug 2041598: Azure Stack remove CA bundle from CPC #5543
- Bug 2017874: Check quota for G and VT instances #5510
- Bug 2038166: openstack: Document legacy HTTPS cert validation #5544
- Bug 2041361: [Alibaba] fix load balance listener strategy #5540
- Bug 2033524: [Alibaba] support for list existing domains #5533
- Bug 2035705: Azure: Only attempt to destroy resourcegroups if present #5516
- Bug 2039241: [baremetal] use podman secret for image-customization server #5525
- Bug 2035454: [alibaba] fix deletion of the OSS bucket #5530
- Bug 2039109: Fix image-customization-controller image pull failure #5513
- Bug 2039408: Add northamerica-northeast-2 region to GCP validation #5531
- Bug 2034527: Pass different IP options to installed CoreOS image and IPA #5521
- Bug 2039689: Alibaba: fix payment method for NAT gateway #5529
- Bug 1965969: aws: Fix dns destroy logs #5494
- Bug 2038384: Azure: Update Default Instance Types #5519
- Bug 2020480: [vsphere] installation failure sometimes with error: the object ‘vim.Folder:group-v******’ has already been deleted or has not been completely created #5495
- Bug 2033239: Alibaba: fix the wrong default region #5490
- Bug 2034537: openstack: Update OWNERS #5503
- Bug 2025788: Check vCPUsAvailable for given instance type #5505
- Bug 2019977: Validate region provided in install config #5432
- Bug 2028695: Delete bootstrap profiles during cluster destroy #5506
- Bug 2034245: terraform: use the correct os for terraform providers #5501
- Bug 2033749: Azure Stack: Terraform Local Provider #5497
- Baremetal: Deploy using CoreOS ISO from the release payload #5473
- azurestack: Add a custom rhcos image field for ASH #5468
- tf/stages: delete unused code around compat and gather, and improve comments #5476
- Terraform: Unset TRACE-level debugging #5493
- Azure Stack: fix versions for Terraform Upgrade #5492
- Alibaba: fix: add the availability zone of worker #5438
- AWS: Remove unused Instance Class Function #5335
- tf/alibaba: fix name of alibaba tf provider #5489
- azurestack upi : get VHD_URL with openshift-install coreos print-stream-json #5470
- ibmcloud: remove resource group question from survey #5462
- Remove GCP cluster api provider #5437
- Bug 2032521: vendor: address eventually consistency creating aws dhcp options associations #5488
- machineconfig: Use KernelArguments field instead of kernel-args file #5439
- asset/tfvars: use generic name for platform tfvars file #5477
- Bug 1981941: Upgrade terraform to 0.14.6 #4729
- Azure Stack: add CA support in bootstrap ign stub #5430
- pkg/asset/installconfig/aws: public DNS validation #5189
- owners: refresh baremetal-approvers/reviewers #5485
- tf/stages: add resolution to stages for openstack and ovirt #5484
- Alibaba: support existing VPC, VSwitchs and PrivateZone #5379
- images/libvirt: provide specific version of google cloud sdk #5486
- aws: Update our local zone filtering code #5483
- OpenStack: Instruction on how to deploy on ovs-dpk #5390
- Bug 1921627: Shorten instance group suffix to ig #4828
- azurestack: Fix cluster tag check for A record destroy #5362
- Openstack: Split terraform into stages #5078
- Alibaba: fix the validation of instance type #5480
- Baremetal: Split terraform into stages #5064
- ovirt: split terraform into stages #5034
- aws: changing default EBS type on masters to gp3. #5239
- openstack: Document Control plane node migration #5475
- Alibaba: refactor validation of machine pool #5426
- Alibaba: format the log of the destroyer #5435
- Cleanup machine references to ibmcloud SG #5472
- Azure Stack Bootstrap Destroy Bug #5443
- Bug 2025464: aws: get ips for all control plane instances for bootstrap gather #5465
- openstack: Document credential rotation #5471
- Azure Stack availability set #5442
- aws-gp3 support: update vendor aws-sdk-go and terraform-provider-aws #5373
- Alibaba: fix: destroy the records of the current cluster #5421
- azure upi: get VHD_URL with openshift-install coreos print-stream-json #5469
- rhcos: ami regions from rhcos stream at runtime #5466
- Alibaba: fix: replace the ic.ClusterName in the validateClusterName #5461
- Bug 2025093: Remove The Default Value For The Disk Provisioning Type of Vsphere #5416
- close a verify-codegen ci failure loophole #5447
- azure: Fix terraform cluster IP output #5448
- Bug 1964380: remove privateDNSZoneName #5459
- Bug 2027501: bump RHCOS 4.10 bootimage metadata #5452
- bootstrap: remove support for certs lacking SAN #5464
- Alibaba: fix: rename the bootstrap output variable #5460
- docs/dev/pinned-coreos.md: update rhcos-stream.json example #5453
- Bug 2020216: replace public-access with sas token in bootstrap deployment #5457
- pkg/types: Correct docs for deprecated options #5444
- Revert “open cluster-policy-controller ports for metrics” #5451
- Bug 1997059: aws: Filter out local zones when generating a default list of zones #5392
- Condense IBM Cloud SG names #5455
- Bug 1968364: azure: Update upi docs to remove mentions of sshKeyData #5456
- Generate network config secrets for baremetal platform #5247
- machines: Extract root disk sizes to constants #5169
- Update URL from cloud.redhat.com to console.redhat.com #5137
- azurestack: Fix gather bootstrap for azurestack #5382
- installer-artifacts: add darwin/arm64 binary #5418
- Alibaba: fix kubebuilder validation #5406
- Bug 1999668: Azure: Ensure destroy doesn’t panic when invalid credent… #5314
- Bug 1964380: azure upi: do not create etcd DNS records #5394
- Alibaba: fix: remove the default value #5410
- libvirt: add doc on a default load balancer configuration for libvirt #4930
- vendor: update terraform-provider-google for rate limit fix #5417
- Alibaba: fix: remove unused ResourceGroupID #5431
- Bug 2027387: fix(ibmcloud): Do not compute image file checksum #5436
- Alibaba: fix: remove the master node records #5422
- OpenStack: Parallelize port deletion #5429
- Bug 1968364: azure: fix upi bug preventing using ed25519 keys #5407
- Add Kiran and Caleb into Installer reviewers #5433
- Alibaba: fix: use EXACT search mode #5411
- baremetal: add NetworkConfig field #5207
- Alibaba: fix: update comment on ResourceGroupID #5415
- fix/alibaba-slb: remove unused listeners, and set kube-apiserver to HTTP/6080 #5427
- Alibaba: Update tag and API types to mirror other providers #5381
- Alibaba: update tags for cloud resources #5385
- Alibaba: fix: use the max function #5414
- Revert “Workaround golang linux/arm64 link error” #5402
- remove MCO manifests #5383
- feat(ibmcloud): Support VPC dedicated hosts #5295
- Alibaba: support to create a resource group #5378
- Use openshift/api instead of machine-api-operator #5350
- Bug 2015837: openstack: unset OS_CLOUD for running Terraform #5398
- Vendor: Bump API for Azure Marketplace Images #5393
- alibaba: implement cluster destroy #5348
- upi/aws/cloudformation: make bootstrap instance type configurable #5400
- Alibaba Cloud Provider: remove the ingress record. #5396
- vSphere: Set default disktype to thick not eager #5395
- Update code and Dockerfiles for golang 1.17 #5397
- update registry.ci.openshift.org/ocp and origin images to 4.10 #5358
- Bug 1960378: Relax the imageContentSource validation #5346
- IPI for vSphere w/ existing resource pool #5136
- Bug 2016008: aws: add newly supported regions for arm64 #5377
- Alibaba: add metadata server IP validation #5360
- Update registry.ci.openshift.org/origin image to 4.9 #5237
- Bug 2021607: Relax vcenter hostname check #5367
- update Packet UPI for Equinix Metal rename #5014
- Bug 1965969: aws: Output public zone id correctly when deleting hosted dns records #5343
- docs: correct spelling in docs #5165
- Bug 2003113: Improve host role management during assets creation #5205
- openstack: Add stephenfin to owners #5354
- vSphere IPI: Enable thin provisioning via the OVA import #4664
- OWNERS_ALIASES: Removing Etienne #5363
- Bug 2021364: aws: remove invalid s3 permission #5232
- Bug 1956776: Fix network validation for UPI #5340
- validation: Enforce strict unmarshalling of config #5307
- Implement WithCustomExtractHostAddresses to gather bootstrap in stages #5355
- openstack: Fix install config for openstack manifests #5349
- azurestack: Fix destroyer to delete A records #5351
- Alibabacloud recommitted and fixed #5333
- Use Openshift Cluster API instead of MachineAPIOperator #5331
- Bug 2004313: azure: Skip making azure bootstrap ignition temp file #5296
- Remove old RHCOS metadata (not stream metadata) #5252
- Removes mjudeikis from OWNERS_ALIASES #5345
- Bug 2016955: Set AWS Bootstrap Type == Master #5334
- Bug 1960378: Relax the imageContentSource validation #5297
- Fix broken data/unpack_test.go #5332
- aws-ec2: add m6i as preferred instance type #5327
- baremetal: fail if apiVIP and ingressVIP are set to the same value #5186
- Bug 2013877: Validate OpenStack supports resource tagging #5323
- Vendor: Unpin kube-openapi #5324
- Update OWNERS #5326
- Bug 1956776: Fix network validation #5317
- Bug 2009253: Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5284
- Bug 2006291: baremetal: Prevent ProvisioningNetworkCIDR with host bits set #5233
- Bug 2004596: bump RHCOS 4.10 boot image metadata #5280
- Bug 1917893: bump oVirt terraform provider version which fix “Disk is locked” bug #5313
- Remove kubevirt platform #5301
- Bug 2012326: gather-bootstrap: execute dbginfo script to collect debugging info on IBM Z systems #5281
- Bug 2010921: Azure Stack: add trust bundle to cloud config #5248
- data/manifests/bootkube/cvo-overrides: Default to stable-4.10 #5312
- vSphere: Split terraform into stages #5094
- Bug 1956776: Check if network is valid in install-config #4906
- Bug 2012235: IBM Cloud: Add RG to CP config #5294
- baremetal: Move Dockerfile.ci to 4.10 images #5290
- docs/dev/pinned-coreos: pass
--no-signatures to plume cosa2stream #5268
- Bug 2011893: baremetal: check that driver supports secure boot #5285
- Bug 2012233: IBMCloud: Handle 5 rule SG limit #5289
- ovirt: update of upi playbook files #5222
- aws: Remove shared tags from user specified IAM roles #5286
- feat(VSphere): validation of cpus/coresPerSocket in config #5217
- IBM Cloud: provider config zones #5275
- ovirt: remove dougsland from OWNERS_ALIASES #5282
- Bug 1999734: fix(ibmcloud): Add CIS CRN to infrastructure manifest #5182
- azurestack: Add subnet nsg group association in terraform #5150
- openstack: Update affinity docs #5274
- ibmcloud: fix terraform formatting error from #5147 #5273
- Bug 2010665: do not modify cvo ignores for bootstrap-in-place #5271
- Remove instanceType option
m4 from AWS IPI default deployment #5162
- Record rpm-ostree status and history in log-bundle #5130
- Bug 1949672: Update UPI ignition version to 3.2.0 #5164
- Bug 1992777: ibmcloud: Possible fix for “ibm_iam_authorization_policy” error #5147
- libvirt: split up tf files into stages #5119
- Bug 2009791: Fix IBM Cloud config usage #5263
- Make bootstrap image asset depend on rhcos image. #5267
- Updating ose-installer-artifacts images to be consistent with ART #5221
- openstack: Expose worker server group policy #5071
- Bug 1955544: Add ingress rules to master SG for compact clusters #5236
- openstack: Move TFVars logic to own package #5264
- Bug 2009699: Fix RAM validation for openstack flavors #5260
- Bug 2008119: force cvo to ignore installer-provided resources #5258
- Inject subnet names into IBM Cloud provider config #5234
- open cluster-policy-controller ports for metrics #5105
- vendor: Bump OpenShift API to Add Alibaba Platform #5216
- Bug 2008599: Azure Stack: Add Internal Load Balancer #5249
- docs: libvirt: fix typo #5246
- Bug 2000430: bump cluster-api-provider-ovirt #5184
- Block
create cluster if bootstrapInPlace is set in install-config #5218
- images: Fix jq not found error #5235
- terraform/openstack: remove unused extra_tags #5226
- pkg/destroy: log when writing quota for visibility #5204
- Bug 2004600: Remove duplicate ramdisk log container #5219
- Updating ose-installer images to be consistent with ART #5194
- fix(ibmcloud): Delete COS in recursive mode #5211
- OWNERS: Prune crawford #5214
- fix(ibmcloud): Allow NodePort access from all subnets #5188
- Update baremetal approvers/reviewers #5213
- Bug 2002567: OpenStack: Fix links in SR-IOV workers doc #5201
- baremetal: Specify entrypoint when starting inspector #5208
- Typo fixing from Github to GitHub #5206
- pkg/destroy/gcp: report cluster footprint in quota #5158
- Bug 1994142: fix(ibmcloud): Add more cloud config fields #5152
- Bug 2001317: openstack: Inaccurate MissingQuota error #5197
- Bug 1993364: Consider all Networks on Router clean up #5193
- Bug 1993364: openstack/destroy: fix Kuryr/BYON #5191
- bring example in line with the default value #4971
- Update OWNERS #5172
- gcp upi: clarify ROUTER_IP needs to be set #5167
- UPI: Add yq to images for ASH CI #5160
- docs: fix broken link to CVO/operators.md in operators.md #5141
- libvirt docs update when systemd-resolved is in use #5132
- Add SRIOV Support for Kubevirt Provider #5088
- Bug 1996501: Remove worker disk types below 8GB #5166
- Bug 2000352: [CORS-1716] vsphere: set the imported ova hardware version #5163
- Bug 1999421: Fedora CoreOS: revert to 34.20210626.3.1 #5174
- Bug 1998643: Revert “bump RHCOS boot images for 4.9” #5180
- Bug 1993207: fix(ibmcloud): Set account ID for rg on destroy #5181
- Bug 1999119: bump to golang-1.16 #5120
- Bug 1993207: fix(ibmcloud): Set account ID for resource group look up #5177
- Bug 1997790: Azure Stack Hub UPI README & Templates #5135
- Bug 1998311: Azure Stack Hub Manual Credentials #5138
- Bug 1969371: Fix AWS destroy to not check us-east-1 #5170
- Bug 1981999: bump RHCOS boot images for 4.9 #5168
- Bug 1972524: baremetal: Ensure ipv6 bootstrap VM client-id is predictable #5110
- Bug 1969371: Stop searching other China regions for resources #5156
- Bug 1996124: version: display release architecture #5107
- Bug 1976016: Display proper error message on failure to delete #5157
- Bug 1974640: Write user credentials to specified env location #5155
- Bug 1995655: bump default channel to stable-4.9 #5159
- Bug 1958154: Restrict number of AWS user tags #5154
- Bug 1978213: openstack/quota: relax min ports #5153
- Bug 1994103: ibmcloud: Support Terraform stages #5116
- Bug 1989973: Fix Azure typo #5144
- Bug 1992463: libvirt: bump default memory and cpus #5069
- Bug 1992876: gather: Add OKD specific journal logs #5127
- Bug 1987845: openstack: relax port constrain by one #5145
- Bug 1990206: Fix invalid UPI AWS instance type #5139
- Bug 1989917: openstack: relax Security Group quotas #5140
- Bug 1990617: Update fedora-coreos stream to 34.20210725.2.0 #5117
- Bug 1987845: openstack: relax quotas with Kuryr #5133
- Bug 1989604: ibmcloud: GetVSIProfiles error handling #5129
- Bug 1977129: Remove runlevel label from openshift-kubevirt-infra #5106
- Bug 1963132: Fix us-east4 Ashburn description #5097
- Bug 1978213: openstack - relax value for minNetworkConstraint #5121
- Bug 1987845: openstack: relax quota checks in BYON #5113
- Bug 1987279: Delete AWS EFS AccessPoints with owner tags #5112
- Bug 1987083: Azure: cloud provider config excludeMastersFromStandardLB -> false #5111
- Bug 1972776: improve dual-stack install-config validation #5005
- Bug 1986420: GCP: make cluster_ip_address optional post-bootstrap #5108
- Bug 1882490: data/azure/master: Add dash to nic name #5082
- Bug: 1947293 Baremetal: Validate provisioning network size #4950
- Azure Stack IPI Support #5084
- ibmcloud: Destroy cluster #5099
- pkg/asset/manifests/dns: don’t create private zone in Azure Stack #5104
- azurestack: Modify destroy code to handle public dns record deletion #5095
- Destroy AWS EFS volumes #5092
- Azure: Split terraform into stages #5032
- Azure Stack cloud provider config #5042
- Bug 1984576: baremetal: reinstate provisioningInterface for provisioning CR #5100
- ibmcloud: Update cloud provider config #5096
- ibmcloud: Remove quota check placeholders #5072
- Bug 1970179: update boot images for RHCOS 4.9 #5049
- vendor: update baremetal-operator v0.0.0-20210706141527-5240e42f012a #5061
- baremetal: make provisioningNetworkInterface optional #5015
- Delete storage policy ids when cluser is deleted #5075
- Add documentation on setting cloud provider opts #5090
- oVirt: must gather fix nil pointer panic #5080
- Add OKD installer images #4453
- baremetal: set default boot mode explicitly #4680
- ibmcloud: Add Platform Provisioning Check #5063
- ibmcloud: Update security groups and rules #5059
- Fix build with multiple GOFLAGS #5062
- verify-vendor: add go mod tidy #5076
- vSphere: Add datastore and storagepod to category #5074
- Bug 1969794: Document how to use image registry with a custom PVC backend #4985
- Bug 1969374: document how to update domain for image registry in versions <4.8 #4979
- Updated owner aliases because of GitHub account change #5058
- OpenStack: explicitly disable octavia when using kuryr #5047
- OpenStack: Open 0.0.0.0/0 on NodePorts #5052
- bootstrap: add –infra-config-file to kube-api render #5057
- Bug 1980029: Pin openstacksdk #5066
- Bug 1925203: add auto pin and hugepages support #4873
- Bug 1979038: oVirt: include master IPs when running must gather #5039
- Bug 1972582: Installing with an oVirt network with 2 vnics on the same network causes the installer to not create tfvars and fail with terraform error #5002
- azure: Updates cluster-api-provider-azure package #5044
- baremetal: Update IPI docs for latest version #5054
- Ibm cluster creation #5023
- OpenStack: Remove FIPs of LBs created by cloud-provider #5050
- openstack: Expose master server group policy #5003
- Bug 1962414: FIPS: validate ssh public key type compatibility #5029
- aws: move elastic ip permissions to create networking category #5045
- Bug 1978213: Run kuryr-specific quota checks for kuryr envs #5048
- baremetal: Always use image cache #5008
- Fix sanity check image metadata arches match error #5033
- baremetal: add PlatformProvisionCheck dependency for TerraformVariables asset #5041
- OWNERS: update vSphere-approvers #5038
- azure: changes the way we get credentials #4789
- kubevirt: removes dependency on a deprecated package #4953
- Updating ose-installer images to be consistent with ART #5006
- azure: don’t require BaseDomainResourceGroupName on ARO #4879
- Azure Stack: type, validation, & infrastructure manifest #5024
- Bug 1975475: aws: block creation of bootstrap instance until ignition config is uploaded #5028
- .yamllint: ignore cluster-networkconfig-crd.yaml #5030
- doc/gcp: remove no-longer-needed etcd records #4849
- Updating ose-installer-artifacts images to be consistent with ART #5009
- Updating ose-baremetal-installer images to be consistent with ART #5007
- azure: removes dummy outbound service #4880
- vSphere: Switch from sockets to cores by default #5001
- split infrastructure creation into multiple terraform stages #5010
- ibmcloud: fix struct field json #5020
- Bug 1974598: OpenStack: Optimize cluster deletion #5004
- OpenStack: Add Unit Tests for validation of platform.openstack.machineSubnet #4937
- Add arm64 support #4870
- azure: don’t use managed identity on ARO #4843
- azure: divide machine CIDR into 2 networks for subnets #4748
- pkg/asset/installconfig/kubevirt: fix dropped error #4856
- Add linux-amd64 binary to installer-artifacts #4891
- Bug 1971518: Try deleting associated trunk after port delete failure #5000
- IBM Cloud Provider Scaffolding #4923
- Bug 1929136: OpenStack: document Manila share mounting #4803
- Openstack IPI: Validate API and Ingress VIPs are not the same #4946
- OWNERS: add more core team members as approvers #4997
- Remove Fedosin from Owners #4996
- Updating .ci-operator.yaml
build_root_image from openshift/release #4999
- docs/user/aws/install: Update cloud install links #4934
- fixing a link #4899
- doc/openstack: add a note about image registry in AZ #4833
- Bug 1971068: Updating AWS instance types #4990
- Bug 1946079: baremetal: pass IP_OPTIONS to os downloader #4989
- Bug 1955697: Revert “tfvars/vsphere: use explicit path for datacenter.” #4978
- Bug 1925343: upi/metal: add more configuration options for bare metal #4938
- Bug 1970415: Document SR-IOV use case: using network with port security disabled #4958
- Bug 1969601: manifests: link networking CRD from API #4984
- Bug 1969578: manifests: don’t use deprecated api in role-cloud-creds-secret-reader #4982
- /pkg/tfvars/vsphere: add OWNERS #4980
- Bug 1952604: [baremetal] Fix port in external loadbalancer example config #4867
- Bug 1963205: rhcos: Use ART redirector #4928
- Bug 1967623: oVirt: Fix password input #4976
- Bug 1820238: delete manila shares and snapshots along with the cluster #4952
- Bug 1965182: update baremetal-operator to fix miss IPMI credentials #4965
- Bug 1966862: pattern removed from sed to prevent expansion #4973
- Bug 1949859: baremetal: stop provisioning services once control plane is deployed #4900
- Bug 1965921: [oVirt] High performance VMs shouldn’t be created with Existing policy #4969
- Bug 1909136: OpenStack: delete volume snapshots #4962
- Updates azure-reviewers #4878
- Bug 1946506: Bootstrap no longer relies on mdns #4821
- Bug 1951713: docs/openstack/known-issues: add section for machine spec edits #4959
- Bug 1962274: oVirt move affinity groups validations to ValidateForProvisioning #4944
- Bug 1957260: gcp: add new region europe-central2 #4901
- Bug 1956480: Boot image bump for RHEL 8.4 GA #4942
- Bug 1959920: baremetal: Do not use ironic allocation #4941
- Bug 1926547: pkg/destroy/aws: Log errors untagging shared resources #4913
- Bug 1959981: oVirt: fix empty AffinityGroupsNames handling #4935
- Bug 1954873: CoreOS only supports three dns namservers #4939
- Bug 1957597: aws: using dotted domain when looking for public hosted zone #4933
- Bug 1955697: tfvars/vsphere: use explicit path for datacenter. #4894
- Bug 1959703: Avoid scp wildcard recursion with installer-masters-gather.sh #4896
- Bug 1955336: Check cluster name for similarities with word ‘google’ #4925
- Bug 1960323: Address issues raised by coverity security scan #4932
- Bug 1940159: Fix Routers destroy with BYO #4919
- Bug 1947067: vendor/AlecAivazis/survey: Bump API to v2 #4895
- Bug 1953019: Baremetal: While deleting cluster, warn instead of exiting #4897
- Bug 1953035: Disallow publish internal for non-cloud installations #4905
- Bug 1940337: openstack: Report missing flavor #4924
- Bug 1957809: Validation of platform.openstack.machineSubnet #4917
- Bug 1958884: openstack: Fix error message typo when getting volume availability zones #4911
- Bug 1957869: vendor: update baremetal-operator to align irmc PowerInterface #4908
- Bug 1953551: Revert “Link ppc64le binary dynamically” #4890
- Bug 1958420: aws: restore setting aws platform spec in infra resource #4916
- Bug 1956208: openstack: add validation for volume types #4904
- Bug 1948563: Handle instance_info capabilities and update ironic-terraform #4903
- Bug 1958216: libvirt: Allow duplicate dnsmasq options #4852
- Bug 1957951: AWS: Periodically send shut down requests for stuck EC2 instances #4848
- Bug 1956281: crio: fix bootstrap given new crio config behavior #4898
- Bug 1943175: azure: set storage account tls default to 1.2 #4883
- Bug 1931217: add affinity groups to oVirt installer #4674
- Bug 1956978: install-gather: use names in pod logs too #4902
- Bug 1956496: Openstack SRIOV docs #4718
- Bug 1949923: apply defaults for root volume AZs if they aren’t set #4860
- Bug 1951670: Error gathering bootstrap log after pivot: The bootstrap… #4872
- Bug 1956079: gather: collect networking information in log bundle #4892
- Bug 1953803: aws: validate byo hostedzone is parent of cluster domain #4886
- Bug 1955701: Bump boot images for RHEL 8.4 Beta #4861
- Bug 1878655: aws installconfig: endpoint validation should be before others #4805
- Bug 1943219: azure: remove bootstrap ssh rule on private clusters #4864
- Bug 1948359: destroy: remove shared tag from byo aws iam role #4881
- Bug 1953551: Link ppc64le binary dynamically #4875
- Bug 1952632: data/manifests/bootkube/cvo-overrides: Bump default to stable-4.8 #4868
- Bug 1950113: manifests: populate aws user tags in infrastructure #4755
- Bug 1948359: aws: add permissions for untagging shared byo instance roles #4859
- Bug 1948923: aws: improve ami validation #4846
- Bug 1951174: Dockerfile: repin libvirt #4854
- Bug 1909136: destroy volumes and snapshots created by Cinder CSI driver #4858
- Bug 1931974: Prefer IPv6 hostIP on bootstrap IPv6 deployments #4756
- Bug 1923786: UPI oVirt - replace word in docs #4855
- Bug 1949923: OpenStack: validate root volume availability zones #4851
- Bug 1936223: [ovirt] Fix typo in connect to Engine #4719
- Bug 1950007: UPI image: use get-pip instead of easy_install #4850
- Bug 1941759: Make failure to fetch cloud info non-fatal #4733
- aws: support for bring-your-own hosted zone #4772
- update terraform-provider-ironic to v0.2.5 to get better error handling #4835
- pkg/destroy/gcp: fix dropped error #4836
- Revert “Dockerfile.upi.ci: Drop pip+pyopenssl installs” #4831
- Bug 1945659: remove ovirt_cafile from ovirt-credentials secret #4809
- OpenStack: Availability zones for root volumes #4707
- Bug 1945236: add proxy params to bootstrap ignition #4804
- Bug 1938131: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4825
- Bug 1946307: gcp: install google cloud sdk with yum the recommended way #4819
- cmd: diagnose problems downloading release image #4751
- Bug 1937722: OCP 4.8: Passing oVirt certificate information to Terraform #4737
- Bug 1946119: aws: support setting IAM role in the default AWS machine platform #4818
- hack: use yaml for coreos manifest #4814
- Updating ose-baremetal-installer builder & base images to be consistent with ART #4781
- pkg/destroy/aws: fix dropped error #4815
- Baremetal: Remove the -openstack rename in the os image. #4725
- Byo IAM roles for IPI install #4790
- Test GCP versioned binary #4811
- Bug 1944268: aws: allow use of unknown regions in known partitions #4801
- Fix ipv6/dual-stack validation with Azure #4766
- installer-create: Provide user friendly error messages during failures #4800
- data/bootstrap: Check if release image architecture matches host architecture #4592
- installer/pkg/asset/installconfig/azure: fix dropped error #4793
- Bug 1925216: Bump gophercloud utils #4786
- Inject CoreOS stream metadata as configmap via CVO manifest #4760
- pkg/asset/cluster: fix dropped error #4770
- Add and use stream metadata for RHCOS, add openshift-install coreos print-stream-json #4582
- Bug 1931115: Azure: Check Azure disk Instance Type for PremiumIO Capabilities #4726
- Validate HotplugVolumes feature gate in Kubevirt #4650
- Bug 1934557: RHCOS boot image bump for LUKS fixes #4778
- images: Add Dockerfile.upi.ci.rhel8 #4785
- gather-bootstrap: Gather logs before bootstrap shuts down #4693
- Revert “Check if VIP IPs overlap with machine CIDR provided during vsphere installation” #4779
- Dockerfile.upi.ci: Drop pip+pyopenssl installs #4784
- Add resource filter that matches Label or ClusterID #4717
- Update cluster-api-provider-ovirt, cluster-api-provider-aws and baremetal-operator #4700
- Enable forward compatibility with kcmo rendering of signing keypair #4771
- Bug 1939513: KubeVirt platform: Add the immediate request annotation to the source PVC #4759
- Bug 1918469: Check if VIP IPs overlap with machine CIDR provided during vsphere installation #4754
- Update owners with new Installer Team members #4774
- asset/tls: fixes certkey unit test for Go >= 1.15 #4769
- Baremetal: Explicitly set watchAllNamespaces #4709
- README: change install to create #4747
- gcp: add kubernetes owned label to master machines #4752
- bootstrap: record progress of services #4742
- gcp: divide machine CIDR into 2 networks for subnets #4749
- Support configurable libvirt disk size #4757
- IPI-BAREMETAL: document how to use external LB for api/ingress traffic #4765
- Bug 1804230: fix broken ETCD link in user docs #4764
- docs/user/aws/customization: Fix KMS-key link format #4762
- Bug 1933414: openstack: Consistent port names #4734
- Bug 1934557: bump RHCOS image for LUKS fix #4745
- Bug 1934123: generate glance url considering the region #4740
- installconfig/aws: validate connectivity to service endpoints. #4699
- Bug 1937460: Update gophercloud module from master #4741
- pkg/asset/cluster/aws: fix dropped error #4727
- Bug 1903055: Set default values to machine pools before validation #4695
- Add docs about issues on UPI with Kuryr #4649
- Bug 1936443: Revert “baremetal: send full ignition to masters” #4722
- kubevirt platfrom validate permissions #4720
- Transition responsibility for CEO asset creation and placement #4691
- Bug 1930240: baremetal: Set missing IP in clouds.yaml #4702
- openstack: add networking quota checks #4481
- docs/user/azure: add resourceGroupName customization #4728
- cmd/openshift-install: fix dropped error #4681
- : Removed ‘0’ from machineset name #4723
- vsphere: Validate vcenter user input to match RFC standards #4708
- Bug 1926364: baremetal: update terraform diagnosis for API timeout #4715
- Adjust master-update.fcc to the new ceo render secret structure #4712
- Bug 1924474: upgrade gogo/protobuf to v1.3.2 and k8s.io/api to v0.20.1 #4716
- Bug 1923038: OpenStack: cache cloud info #4606
- Bug 1894774: openstack: Document setting affinity for workers #4687
- Bug 1932799: baremetal: always use API VIP for installer communication #4692
- Bug 1880758: Replace description to a more meaningful one #4636
- doc: openstack/IPI - Provider Networks #4646
- Bug 1868755: vsphereprivate: tf plugin to no longer error if no network found. #4678
- Bug 1932789: Fix proxy validation when specified with port. #4694
- Bug 1873079: openstack: restrict SSH to machineNetwork CIDR #4659
- Enable bootkube compatibility for ceo rendering improvements #4686
- OpenStack: Stop using deprecated interpolation syntax #4679
- baremetal: automatic UEFI secure boot configuration #4675
- use vendored mockgen for generating mock clients #4662
- docs/aws-iam: improving the concepts for Account root user and IAM user #4556
- Make copies of machine pools in machines asset #4666
- docs: fix small typo in ignition url #4685
- pkg/metrics/builder: fix test errors #4028
- Bug 1925291: baremetal: include netmask in DNSMasq dhcp range #4639
- baremetal: pass an sshKey to ironic #4677
- openstack: Test AZ Machines generation #4473
- Bug 1910067: openstack UPI: Set the API microversion when operating openstack server groups #4375
- baremetal: sync baremetal-operator #4669
- Bug 1917931: Fix GCP openssl not found error #4656
- openstack: allow for fewer than 3 masters #4672
- proxy: Check if proxies are in cluster and service networks #4670
- update ci image references #4661
- Bump bootstrap in place MCS master ignition to v3_2 #4668
- bootstrap: Ensure temp compat for old and new ceo secret structure #4667
- Stream metadata prep #4576
- vSphere: mark imported virtual machines as template #4660
- vendor/hashicorp: Bump terraform-provider-vsphere #4644
- openstack: refactor getZones() to use gophercloud/utils #4462
- Bug 1786314: openstack: cacert does not require system trust #4647
- Bug 1786314: Bump dependencies #4561
- upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #3533
- Bug 1928537: bump ignition to v3_2 #4653
- update iptables call with sudo #4623
- Updating ose-installer-artifacts builder & base images to be consistent with ART #4631
- Cleanup argument usage in bootkube.sh for ceo #4609
- Updating ose-baremetal-installer builder & base images to be consistent with ART #4630
- Bug 1924701: Fix FIP detach from Router #4637
- Updating ose-installer builder & base images to be consistent with ART #4629
- aws/session.go: include another internal provider name for static creds #4655
- Bug 1873649: Validate noProxy input and add prefix for proxy urls #4632
- asset: move common bootstrap ignition code into a helper type #4652
- Add bootstrap-in-place files to bootstrap-in-place-for-live-iso.ign #4651
- Workaround golang linux/arm64 link error #4243
- OWNERS: Remove ehashman and asalkeld from azure reviewers #4531
- vSphere: Updating Privileges, roles and permissions #4466
- aws: support more auth options in manual mode #4596
- Single Node deployment with bootstrap-in-place #4482
- Bug 1916593: OpenStack UPI: Tag all resources with clusterID #4622
- Bug 1912571: libvirt: support setting network dnsmasq options through the install config #4494
- Bug 1924140: fix a typo in an env variable name #4608
- machines/openstack: re-enable external clientOpts #4638
- vSphere: add missing destroy OWNERS & update OWNERS_ALIASES #4581
- Fix OWNERS for openstack #4641
- data/rhcos.json: Update boot images #4633
- Add controlPlaneTopology to infrastructure manifest #4497
- Bug 1924701: Fix cluster destroy when byo is used with Kuryr #4616
- Bug 1909978: update ignore-volume-az documentation #4617
- Bug 1916692: OpenStack: Delete leftover LBs when destroying cluster #4563
- Bug 1919407: openstack/validation: enforce control plane size #4585
- Bug 1909978: update documentation for ignore-volume-az usage #4603
- Bug 1896218: remove GCP role bindings before service accounts #4602
- Bug 1921911: Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600
- Bug 1921655: OpenStack: fix error handling for cloudinfo #4599
- Bug 1896218: remove GCP role bindings before service accounts #4589
- Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
- maintenance: remove pools and volumes #3620
- Bug 1810438: oVirt: Add missing piece for gathering bootstrap IP info #4524
- Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
- Updating ose-installer builder & base images to be consistent with ART #4543
- Bug 1920243: disable anonymous auth on bootstrap nodes #4590
- Bug 1917101: UPI ovirt - remove RHCOS image from Network req #4577
- Bug 1893117: terraform/vsphereprivate: ignore hosts in maintenance mode #4566
- Bug 1919072: AWS cloudformation change protocol from ESP to 50 #4583
- Bug 1916938: tolerate equal APIFloatingIP and LbFloatingIP #4575
- Bug 1907822: Don’t panic on bad data in quota validations #4483
- Bug 1912828: Rebase on the latest terraform provider/go-ovirt #4562
- Bug 1916373: upi: allow IPsec ports #4552
- Bug 1915460: ovirt: validate cluster name during install #4537
- Bug 1910244: Go mod update for golang crypto #4569
- Bug 1915617: update boot images for various fixes #4540
- Bug 1909502: pkg/asset/manifests: remove etcd records from proxy config #4518
- Bug 1915998: Set Additional Control Plane Security Groups on Bootstrap Node #4551
- Bug 1916271: openstack known issues: ControlPlane anti-affinity #4548
- Bug 1813949: ignore local env variables when we create a service client #4426
- Bug 1916505: AWS IPI: Add IPsec master-to-worker flows #4554
- Bug 1908468: azure/validation: some memory values are float and not int #4530
- Bug 1908583: Set same additional networks on Bootstrap as Control Plane #4528
- Bug 1914439: OpenStack Port Create Typo in SRIOV Docs #4529
- Bug 1909587: openstack: Create Control plane nodes sequentially #4522
- Bug 1910127: ovirt: UPI doc improvements #4498
- Bug 1913151: KubeVirt user docs: change role example - add “update” verb to VM #4521
- Bug 1910070: Set termination_grace_period_seconds to 10 minutes #4511
- Bug 1786314: bump gophercloud/utils #4486
- Bug 1911819: Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519
- Bug 1911819: Add kubevirt user documentation #4516
- Bug 1908743: Add validation that the KubeMacPool component is enabled for the namespace #4509
- Bug 1910049: Revert “openstack UPI: Use ansible-galaxy” #4506
- Bug 1882022: installconfig: enable vsphere folders for datacenters and clusters. #4493
- Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491
- Bug 1908171: fix Terraform issue with GCP custom machine types #4496
- Bug 1907947: cloud-creds-secret creation with current context info only #4484
- Bug 1907628: OpenStack Documentation for MachineSets with Multiple Networks #4463
- Bug 1906517: OpenStack: Skip collecting info for empty subnet IDs #4474
- Bug 1908280: update docs for Cinder AZs #4487
- Bug 1907621: Bump cluster-api-provider-kubevirt version #4479
- Bug 1890228: pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477
- Bug 1906459: openstack: fix quota checks when they’re unlimited #4470
- Update GCP Customization doc to reflect CMEK additions #4468
- Openstack: describes how to enable qemu agent for UPI. #4441
- oVirt: update team members #4464
- Bug 1904663: Fix comparison in pointer ignition customization asset #4455
- openstack: Test Nova AZ manifest generation #4459
- do not generate the cloud cred secret when credentialsMode is Manual #4416
- update gophercloud/utils & terraform/provider-openstack #4457
- hack/verify-vendor.sh: Fail early if error #4421
- Bug 1899175: data/rhcos.json: Update boot images for RHEL 8.3 #4414
- Openstack primary subnet using machine spec #4346
- Deprecate computeFlavor in OpenStack platform #4321
- openstack: Test manifest creation #4431
- openstack: Allow to skip pre-flight validations #4452
- Bug 1900138: Removed support for insecure mode for oVirt/RHV installation #4404
- openstack: check quotas before creating cluster #4432
- OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
- Bug 1904125: Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448
- Bug 1868748: baremetal: rename JSON field for ClusterProvisioningIP #4053
- Add KubeVirt platform as infrastructure for Openshift installation #4350
- cloudproviderconfig: Refactor openstack #4447
- Pass CLUSTER_PROFILE env var to CVO render #4444
- vSphere Destroy: add log messages for tag destruction #4407
- baremetal: send full ignition to masters #4427
- asset/installconfig/Azure: Validate install-config instance types #4419
- Update MCO doc references #4445
- baremetal: Add ironic logwatch containers #4437
- Create SR-IOV UPI Docs #4439
- docs: update docs/design/resource_dep.svg #4443
- Bug 1903277: destroy/aws: remove rules from default security group #4440
- Set default release image to 4.7 #4409
- baremetal: make cluster provisioning IP optional #4429
- pkg/asset/quota: Typo in warning message presented to user #4430
- Create a machineconfig for IPI pointer ignition customizations #4413
- vSphere Docs: Update to include Permissions #4393
- OSASINFRA-902: Update OpenStack Custom External LB and DNS Docs #4389
- baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
- Bug 1895874: Use oVirt Engine certificate verified by the user for installation #4387
- Bug 1899853: openstack: CP nodes port to use addtional SGs #4411
- baremetal: Handle xz filenames for OKD #4392
- Support user provided service-account-signing-key and issuer #4373
- pkg: validation for previously existing ovirt configuration #4354
- Bug 1898194: installconfig/gcp/validation: handle custom machine types #4386
- baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
- Bug 1898238: Validate the the API and Ingress FIPs are not the same #4385
- Bug 1848945: OpenStack - Documentation for adding worker nodes using ansible #4205
- Bug 1813012: Remove unused etcd discovery domain #4067
- Bug 1894432: oVirt, add timeout to tmp_import_vm #4341
- baremetal: validate that macs are EUI-48 and unicast #4378
- Bug 1855351: standardize interrupt error messages #4360
- Stop validating DefaultMachinePlatform #4391
- Bug 1889779: vSphere destroy: handle failed clusters #4388
- openstack UPI: Use ansible-galaxy #4379
- Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
- Correcting normal typos #4363
- Bug 1891543: openstack: remove platform flavor validation #4383
- baremetal: remove root_gb from tfvars #4319
- Cleanup: make conversion functions private #4376
- Bug 1888464: add tag:UnTagResource perm for aws shared networks #4371
- Remove the secrets directory recursively #4369
- doc/openstack: update quota reqs for kuryr #4362
- Fix ‘troubleshooting’ typo #4365
- libvirt: Bump bootstrap size (primarily for OKD) #4364
- data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
- Bug 1886435: Fix azure UPI az group deployment deprecation #4366
- asset/installconfig/gcp: Validate install-config instance types #4329
- Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
- aws: support custom trust bundle for c2s regions #4335
- pkg/asset/cluster/aws: switch to ec2 tagging API #4356
- Bug 1867165: baremetal: allow configuring bootstrap mac addresses #4052
- doc/openstack/UPI: improvements #4355
- Small corrections in ovirt/install_ipi.md #4353
- data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
- data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
- owners: Add mdbooth to openstack-approvers #4348
- owners: add dhellmann to baremetal-approvers/reviewers #4343
- data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
- Bug 1891543: openstack: consider volumes for storage requirements checks #4323
- Document how to deploy cluster with BM and VM workers #4336
- Wrap errors after OpenStack creds validation #4338
- Bug 1855351: Handle CTRL+C in GCP survey #4334
- Bug 1894144: baremetal: pin libvirt to 4.5.0 #4339
- cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
- Bug 1888378: Ignore error if resource group already deleted #4325
- Bug 1887863: Patch Flavor Not Found validation for OpenStack Install Config #4289
- Use authentication for Ironic on baremetal bootstrap host #4256
- Bug 1841381: oVirt, add memoryMB validation #4309
- Bug 1878374: Adding more nitro and the AMD instance types (AWS, UPI) #4327
- Bug 1866925: display Azure destroy auth error #4331
- openstack: fixup markdown #4328
- Revert “[Azure][Destroy] Check if resource group exists” #4322
- Add Encryption Key reference to GCP MachinePool API #4318
- aws: block cluster destroy in c2s region #4316
- aws: ensure users set ami id for c2s regions #4315
- Bug 1891702: pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317
- Bug 1888378: [Azure][Destroy] Check if resource group exists #4320
- oVirt: change owners #4311
- Code cleanup and optimizations #4272
- Bug 1889267: oVirt, increase terraform template and release image timeout to 20m #4285
- install-approvers: add staebler #4297
- Bug 1880443: allow providing client options when generating OpenStack MachineSets #4196
- openstack: Update CI base image #4291
- pkg/asset/installconfig/aws: Validate install-config instance type #4258
- go.mod Update #4294
- Bug 1836017: Configure haproxy to check /readyz #4012
- Bug 1870728: pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287
- Bug 1889852: add new AWS regions #4288
- Bug 1877116: aws: use file for bootstrap ign when uploading to s3 #4281
- Bug 1886553: GCP - Increase worker NAT min ports #4273
- cmd: split newlines in logrus stderr output to new entry #4282
- openstack: Add a new team member #4290
- Bug 1882649: Determine Glance disk format based on file extension #4279
- vSphere: Update dockerfile removing certificate #4274
- Update README.md - Broken Link - Spelling #4278
- OpenStack: remove legacy image validation #4277
- Bug 1882844: vsphere destroy: delete tag category created by installer #4265
- Bug 1878900: openstack: Fix error messages in flavor validation #4269
- OpenStack UPI: Custom API and Ingress vip addresses #4092
- Bug 1888671: openstack: Document Cinder’s ignore-volume-az #4271
- Bump K8s.io version to v0.19.0 #4266
- destroy: return aws resources that could not be deleted #4270
- install-complete: provide troubleshooting info when operators fail #4259
- OpenStack: add clusterOSImage validations #3964
- Bug 1887525: baremetal: Wait for master-bmh-update script to succeed #4262
- openstack: Bump Ansible to 2.9 in UPI #4261
- Bug 1874248: types/vsphere/validation: ensure vcenter is all lower case #4254
- Bug 1884691: types: allow manual cred mode for gcp and azure #4238
- Updating ose-installer builder & base images to be consistent with ART #4250
- Remove dead code #4252
- Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
- openstack privileges documented #4214
- OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
- Bug 1882191: Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248
- Bug 1884435: vsphere - add delay if resolv.conf is not available; wait for dhcp #4237
- Bug 1777224: pkg/asset: metadata to depend on ignition #4223
- Bump RHCOS images for Ignition entropy fix #4241
- Bug 1859174: Upgrade Terraform provider OpenStack #4216
- Fix json tag for GCP auth service account #4166
- installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
- IP address should be specified without underscore. #3204
- Docs: OpenStack: Remove mention of cluster failing to destroy #4208
- Bug 1876815: OpenStack: unset OS_CLOUD #4231
- Full changelog
- Bug 2036993: update repo for golang 1.17 #164
- Updating baremetal-machine-controller images to be consistent with ART #160
- Bug 1994480: Update dependencies to K8s 1.22 #158
- Fix BMO reboot api broken link #150
- remove dhellmann from owners file #154
- Custom deploy procedure support #156
- Updating .ci-operator.yaml
build_root_image from openshift/release #152
- Bug 1954177: Update mao dependency for webhook v1 changes #151
- Bug 1949316: Update BMO vendor to v0.0.0-20210303141721-86a42dcb0150 #149
- Bug 1857008: Set the machine instance state annotation #142
- Updating baremetal-machine-controller builder & base images to be consistent with ART #135
- Updating baremetal-machine-controller builder & base images to be consistent with ART #121
- Changing the default behaviour of the CAPBM to request hard reboot #138
- add stbenjam to owners file #141
- stop generating CRDs for provider spec and status #140
- Bug 1907614: Update kubernetes deps to 1.20 #132
- Allow actuator.Exists() to find a host in the unmanaged state #130
- Bug 1868104: Make use of errors and Failed phase to handle failed machines #113
- Bug 1903424: Ensure MAO dependency is up to date to include newest metrics #129
- Fall back to deleting Machine if remediation fails #119
- Updating baremetal-machine-controller builder & base images to be consistent with ART #126
- Fix typo in readme - annotation should exist on CR, not CRD #125
- Don’t add a finalizer to the Node #124
- Bug 1886028: Remove Node finalizer first on delete #122
- Full changelog
- Bug 2044496: Make bmc subscription validator less aggressive #201
- Bug 2041765: irmc: change BootInterface to ipxe #200
- Bug 2036006: Use integer value in clean steps for HostFirmwareSettings Integer type #199
- Bug 2035882: Publish events for all invalid HostFirmwareSettings #198
- Updating ose-baremetal-operator images to be consistent with ART #188
- Merge upstream #197
- Add BMC subscription CRD and reconciler #1014
- Use a separate mariadb-image instead of one in ironic-image #1052
- Do not add secret finalizer while deleting a host #1054
- Remove reset_required from FirmwareSchema #1049
- Merge upstream #196
- Handle HostFirmwareSettings non-numeric string set for Integer type #1051
- Add validations for bmo resource name #991
- Remove BIOS config password related settings from schema #1050
- Merge upstream #195
- Add an interface for the image builder to report a failure #1047
- Uplift mongo-driver@v1.5.1 & ulikunitz/xz@v0.5.8 #1044
- Change hfs controller to be level-triggered when handling bmh updates #995
- Fix kustomize binary path in Tiltfile #1046
- Uplift to go1.17 #1048
- irmc: change the return value of NeedsMAC() to true #1033
- Update ocp_kustomization.yaml #194
- Merge upstream #193
- Create new BMC module and revert ironic packages to main module #1017
- Add UT for stringlist #1028
- Support ilo4 virtual media #1041
- Fix golint issue #1031
- Merge image controller updates from upstream #192
- Remove stbenjam from OWNERS #1035
- Make PreprovisioningImage controller more generic #1036
- Merge upstream #191
- Replace deprecated linter & fix lint issues #990
- Fixes CentOS build failure on CentOS master #1037
- Add ardaguclu and bfournie to reviewers #1042
- :bug: Remove provisioning IP from ironic-dnsmasq checks #1030
- Uplift to kubebuilder v3 #1011
- Use PreprovisioningImage to build PXE images #1019
- Add ironic package to mod Makefile target #1018
- Fix outdated URL in run_local_ironic #1023
- Add readiness and liveness probes #975
- Use finalizer for BMC secret. #1008
- Remove stbenjam from OWNERS #190
- Merge upstream #189
- 📖 Update old branch name mention in docs #1020
- Remove bmc package dependency on API #1007
- Add RequiresProvisioningNetwork check into AccessDetails #994
- Merge upstream 2021-11-01 #187
- Add bootMode/bootMACAddress to API docs #1010
- gitignore: Get rid of rules not associated with the project #1004
- Rename Ready state to Available #340
- Add PreprovisioningImage API and integration #936
- Add s3rj1k to reviewers #1006
- Rename ironic go module to correct path for go get can find #998
- Create new ironic go module #989
- Add cert-manager installation in the dev-setup doc #993
- Merge upstream 2021-10-08 #185
- Create and manage hostFirmwareSettings and firmwareSchema resources #938
- Fix non-existing fmt target usage #987
- Merge upstream 2021-10-01 #180
- Remove ironic-inspector-log-watch #988
- Fix fallback for ironic drivers that don’t support soft power off #985
- Drop the duplicating logwatch #945
- Add AGE column to BMH CRDs #973
- Create namespace for ironic and ignore any errors #944
- Honor DefaultDeployInterface value from Ironic config #953
- Avoid logging BMC password when creds change #981
- Remove travis ci config file #982
- Add @andfasano and @fmuyassarov as approvers #986
- Add more context to node lookup logging #974
- Do not disable iDRAC Redfish vendor interfaces #933
- Create a SecretManager type to manage Secrets #935
- Updating ose-baremetal-operator images to be consistent with ART #179
- Merge upstream 2021-09-10 #175
- Stop relying on -modfile to allow vendorization #968
- 📖 Update CI status badges in Readme #971
- 🌱 Uplift go modules (under root/apis/hack folders) #970
- 📖 Update docs and add more context concerning new deployment folders #972
- 🌱 Remove deprecated ioutil usage #969
- Fix comment for detached annotation and add StateAvailable #967
- Allow writing ‘null’ for HardwareRAIDVolumes and SoftwareRAIDVolumes. #966
- Enable detach annotation for ready nodes #965
- Add automation support for locally supplied IPA #957
- Add kashifest and fmuyassarov as approvers #963
- Fix auto clean failure in preparing state #929
- Enable BareMetalHost validation webhook #865
- Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #949
- unittests: Add a mechanism for simulating a lost ironic db #723
- Explicitly set node bios_interface #946
- Update rbac api version to v1 #955
- Add CommonName to Ironic and Mariadb certificates #951
- Always build a configdrive except for live ISO #909
- Don’t use soon removed APIs #948
- Move tools modules under hack/tools #937
- Fix missing case of BuildRAIDCleanSteps #942
- upgrade k8s/api to v0.21.1 (in apis/go.mod) and controller-tools to v0.6.0 #917
- Updating ose-baremetal-operator images to be consistent with ART #176
- Bug 1986654: Auto cleaning step in Prepare stage failed #166
- Bug 1983190: Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable #173
- Bug 1928816: Explicitly set node bios_interface #172
- Bug 1986656: Fix missing case of BuildRAIDCleanSteps #170
- Merge upstream 2021-07-22 #169
- Avoid always do delete_configuration clean step #908
- Merge upstream 2021-07-16 #168
- Modify namespace prefix in ironic deployment to support TLS #934
- Remove duplicate if statement #939
- Add new CRDs for BIOS configuration #901
- Better handling of power management errors #841
- Simplify build in Dockerfile.ocp #167
- Merge upstream 2021-07-09 #164
- BIOS Configurations for iDRAC #928
- Cache only required secrets #903
- Custom deploy: fix insufficient condition #932
- Add TLS check before generating the secret for ironic-cacert secret. #924
- Custom deploy procedure #884
- Merge upstream 2021-07-02 #163
- Correctly deprovision nodes in DeployWait and Deploying #902
- Eliminate global variables in ironic provisioner #914
- remove dhellmann from owners #927
- Use recreate strategy for ironic deployment #918
- Use mock BMC for testing RAID #921
- baremetal: Add privLevel to bmc data #853
- Vendor the apis submodule #162
- Merge upstream 2021-06-25 #161
- Fix some typos in comments #922
- Adding BIOS Parameters in api.md #920
- Fix configdrive handling #900
- Don’t deprovision provisioned host due to error #916
- Merge upstream 2021-06-15 #156
- Extend docs for “baremetalhost.metal3.io/detached” annotation #913
- Support deploy_iso in addition to deploy_kernel/ramdisk #907
- Also run controller-gen on the controller directory to get rbac #892
- Unify
kubectl apply -f format #885
- Disable raid feature for iRMC server #911
- Increase the default $BMO_CONCURRENCY for scale #906
- Extend BaremetalHost CRD to support BIOS configuration in baremetal server #302
- Uplift kube-rbac-proxy to v0.8.0 #891
- Add disk type field to BMH HardwareDetails #850
- Document re-inspection API #890
- Point ironic-inspector to the ironic image in quay #886
- Add cert-manager setup for TLS in ironic deployment. #859
- fix comment #894
- Restart Ironic containers when certificates are changed #854
- Correctly run controller-gen for new apis module #888
- Fix bug with re-inspection due to Node in “available” state #889
- Document parameter to set boot iso source #870
- Do automated cleaning in Prepare state #882
- Fix error: missing the following IPMI credentials in node’s driver_info: [‘ipmi_address’] #880
- strip whitespace after decoding secret values #881
- Run apis/ tests in make unit #871
- Revert: Point ironic-inspector to the ironic image in quay #873
- Adding RAID Parameters in api.md #858
- Allocate Ironic port when node exists and has no port allocated. #817
- Enable Client certificate authorization for Ironic TLS client. #864
- Point ironic-inspector to the ironic image in quay #861
- Define command for ironic-inspector run #851
- Fix some typos #866
- Revert “Add unit and lint test in travis” #869
- Remove govet script and test #856
- Fix travis lint test #863
- Propagate IPA_BASEURI env var to local ironic containers #860
- Add unit and lint test in travis #862
- Always lazily update Node options in Ironic #852
- Add go.mod for BMH api #857
- modify power_interface for irmc #848
- Enable golint with golangci-lint #825
- Fix adoption in ExternallyProvisioned state #849
- Updating ose-baremetal-operator images to be consistent with ART #160
- Bug 1972374: Don’t deprovision provisioned host due to error #157
- Updating .ci-operator.yaml
build_root_image from openshift/release #155
- Bug 1969487: Disable RAID for all drivers #153
- Bug 1969487: Disable raid feature for iRMC server #152
- Bug 1969903: Increase the default $BMO_CONCURRENCY for scale #151
- Bug 1965182: IRMC fix missing IPMI credentials in node driver_info #149
- Bug 1960554: config: use rbacv1 instead of rbacv1beta1 #147
- Bug 1956607: Fix resources added to 0000_30_baremetal-operator_01_baremetalhost.crd.yaml #146
- Bug 1951671: Lazily update Node image options in Ironic #145
- Bug 1949898: modify power_interface for irmc #144
- Merge upstream 2021-04-06 #142
- Use PROVISIONING_LIMIT also for deprovisioning. #807
- Add support for detached annotation #827
- Fix error reporting when creating an host with invalid BMC url #838
- Extend RAID configuration for iDRAC BMC type #847
- Always update image details #845
- dev env setup steps missed metal3 ns creation #846
- Stop passing entire BareMetalHost to Provisioner #837
- Define vlan interfaces to be included in introspection report #821
- Inspection API implementation #607
- Set bmh ‘name’ in metadata as hostname #842
- Handle hardwaredetails annotation value error #826
- Allow disable automated cleaning #784
- Don’t immediately retry on Inspect fail #840
- Fix the bug that the inspector reverse proxy still runs even when Ironic TLS is disabled #830
- Merge upstream 2021-03-30 #139
- Prepend the namespace to ironic nodenames to avoid conflicts #797
- Pass go tests flags via env. #833
- Eliminate need for “empty” provisioner #820
- Add a unit test for unsupported secure boot #831
- Change default of RAIDInterface #829
- Review registration log traces for Provisioner #757
- Fix some lint errors #823
- Decouple Unmanaged state from externallyProvisioned #824
- Bug: fix missing Inspecting state #822
- Apache webserver handles TLS on Ironic #728
- Use the correct version of tools (from go.mod) #813
- Add idrac-redfish url type (continue) #633
- upgrade k8s/api to v0.2.1 #808
- Use separate methods for setting update node options. #794
- Upgrade CRD & Webhook to v1 #805
- add dmitry tantsur as approver #815
- Updating ose-baremetal-operator builder & base images to be consistent with ART #136
- Bug 1941636: BM worker nodes deployment with virtual media failed while trying to clean raid #138
- Copy generated BMH CRD to /manifests directory for CVO to install it #135
- Generate BMH CRD with annotations needed for OpenShift #134
- Merge upstream 20210311 #133
- Add fmuyassarov in the reviewers list #812
- update controller-runtime to v0.7 #806
- Add inspect.metal3.io/hardwaredetails annotation #796
- Fix some typos in PR292 #809
- Development: account for unset GOPATH #800
- Support RAID configuration for baremetal server #292
- Make BMH HardwareDetails fields optional #803
- Bump the Golang version to 1.16 #799
- Implement explicit reboot mode options #795
- docs: clarifies power management for externally managed hosts #801
- Bug 1927678: Backporting BMO extensions to support different reboot modes #128
- Remove yum install genisoimage from Dockerfile.ocp #126
- Merge upstream 2021-02-11 #125
- Automatic setting of UEFI secure boot #786
- Bump controller-tools to v0.4.1 #766
- Add inspect.metal3.io=disabled annotation #787
- Fix the CPU clock rate unit in the API description #788
- Wait for inspection completion #785
- Refactor capabilities parsing #783
- Make operationHistory none-required field #777
- Add Preparing state to do manual clean #763
- Add BuildTime to manager binary. #773
- Add “NET_RAW” to ironic-endpoint-keepalived #782
- Limit the number of hosts simultaneously provisioned #725
- Fail registration when boot MAC conflicts #780
- Ask Ironic to include NodeUUID when querying ports #776
- Ironic: Don’t adopt after clean failure during deprovisioning #772
- Add missing newline in console log #778
- Use errorType intead of errorMessage #774
- Add test coverage of Spec vs Status Image #770
- Force retry when adoption fails #762
- Add live-iso support #759
- A typo in the comment for WithNodeStatesProvisionUpdate #727
- Fix issues with deprovisioning after an error/failover #745
- Remove root_gb workaround #771
- Get correct image checksum in getImageUpdateOptsForNode() #768
- Improve communications between controller and provisioner #761
- Rename column of ‘get bmh’ short #760
- Add andfasano to reviewers list #764
- ironic provisioner de-duplicate image options #750
- Do retries with backoff in ValidateManagementAccess, Inspect, and Deprovision #749
- remove convenience methods from BareMetalHost #741
- Fix manager namespace in docs #756
- Handle dual-stack configuration in inspection data #758
- Allow BMC details to be omitted for Hosts in Unmanaged state #748
- Fix a typo in doc/dev-setup.md #752
- Bug 1907612: Update kubernetes deps to 1.20 #751
- Add console=ttyS0 to kernel params #736
- Filter out status updates from the reconcile loop #747
- Add kubebuilder validation for ClockSpeed #738
- Handle cleaning failures during provisioning #735
- Updating ose-baremetal-operator builder & base images to be consistent with ART #124
- Bug 1917484: Don’t adopt after clean failure during deprovisioning #122
- Updating ose-baremetal-operator builder & base images to be consistent with ART #120
- Bug 1912701: Handle dual-stack configuration in inspection data #118
- Bug 1913112: Allow BMC details to be omitted for Hosts in Unmanaged state #117
- Merge upstream 2020-12-04 #114
- Avoid getting stuck in ValidateManagementAccess due to node state #737
- Look up existing nodes by MAC address #715
- Add a Makefile target for running manifest validation #734
- Merge upstream 2020-12-03 #113
- Handle re-registration in all states #716
- Make ‘get bmh’ output concise and column one-word #732
- Add manifest linting script #733
- Add remove local ironic script #729
- Remove provisioning CIDR from ironicendpoint VIP #661
- Add default value for BMH errorCount field #722
- Add log watch entry points #719
- Enable TLS between Ironic and MariaDB #689
- start adding unit tests for Ironic.Delete #711
- extend tests for ValidateManagementAccess #690
- cache the ironic api clients #712
- Handle different responses by method on MockServer #705
- Fix livenessProve for BMO #700
- Update local ironic documentation with TLS information #706
- Remove limits and requests from manager manifest #704
- Add furkatgofurov7 in reviewers list #701
- Remove main.go path in tilt-provider.json file #699
- Add info about ‘config/render/capm3.yaml in README #702
- Handle registration independently of provisioning state #388
- add health check endpoint #695
- Merge upstream 2020-10-26 #111
- Add golangci-lint to go.mod #696
- start adding unit tests for Ironic.UpdateHardwareState #673
- Disable unnecessary Travis tests #694
- Change kustomize path from tools/bin/ to bin/ #693
- make logger names more consistent #685
- Unit tests for ironic.{Adopt,PowerOn,PowerOff,Provision,Deprovision} #653
- Merge upstream 2020-10-22 #110
- Add kustomize tool to go.mod #691
- Merge upstream #109
- Add contoller-gen to go.mod #688
- Re-enable FAST_TRACK and set Online to true when rendering BMH CRs #684
- start adding unit tests for ironic.ValidateManagementAccess #647
- Update golang to latest to match version across all repos #686
- Fix path in install kustomize #687
- 📖 Update deploying document to reflect recent changes #682
- remove test dependency from docker build #683
- Correct the description of HardwareDetails fields #657
- Remove old deploy directory #678
- start adding unit tests for Ironic.InspectHardware #649
- Add missing RBAC for secrets and events #680
- Fix image name in manager + other small nits #679
- Fix tls kustomization path #677
- Fix kustomization path #676
- Fix tls certificate fetch path #671
- Add missing ironic bmo configmap in config/default #675
- Add capm3 specific configurations in config/ dir #674
- Render BMO deployment #672
- Downstream dockerfile #108
- Merge upstream 2020-10-08 #103
- restore WATCH_NAMESPACE variable #669
- Move from /deploy to /config #668
- Bug 1859999: Expand API documentation #659
- Update run_local_ironic.sh to support HTTP basic auth #643
- Remove operator-sdk leftovers #663
- Split Ironic API and Conductor containers in run_local_ironic.sh #644
- always install our desired version of controller-gen #664
- Add basic golangci-lint target to replace “make lint” #662
- migrate to kubebuilder 2.3.1 #655
- Add gomod script #648
- Bring back missing dependencies #646
- ensure the boot mode is set in ironic before starting inspection #645
- more unit test work for ironic provisioner #623
- Fix environment variables in Makefile #641
- Adding support for hardware type iLO #595
- Add Tilt setup #628
- Always retry provisioning operations on failure (continue) #610
- Handle StateAvailable when we see it #636
- Make ironic environment variables configurable #629
- Disable Ironic fasttrack #632
- allow mock ironic/inspector service to run without specifying a port #619
- Rename NeedsDeprovisioning() method #397
- Re-enable Ironic Fast Track #430
- Update go dependencies #630
- Add Tilt provider file for integration with CAPM3 Tilt setup #627
- reformat api documentation to make linking to field definitions easier #622
- docs/dev-setup: fix error link #621
- Change base image to distroless #620
- keep boot mode updated #612
- Always delete found host from Ironic on deletion #614
- Added encoding of credentials using base64 #616
- Fix Keepalived container to stop cleanly #615
- Add support for http_basic auth for ironic and inspector #601
- Add more approvers and reviewers #107
- Updating ose-baremetal-operator builder & base images to be consistent with ART #106
- Bug 1884824: Update to k8s 1.19 #105
- Full changelog
- Bug 2000236: Disable printing usage help on error #165
- Bug 1995021: upgrade k8s.io/client-go #164
- Fix docker_test run #159
- Bug 2021544: Ignore VIPs in node-ip show #157
- Bug 2022050: Add delay after sending bootstrap stop and start messages #158
- Updating baremetal-runtimecfg images to be consistent with ART #156
- Bug 2012780: Avoid dynamically allocated port range for haproxy #155
- Bug 1998951: retrieve only single type addresses for Keepalived ingress #154
- Updating baremetal-runtimecfg images to be consistent with ART #153
- Updating baremetal-runtimecfg images to be consistent with ART #152
- Bug 1995468: CoreDNS Corefile hosts - add support for dual-stack #148
- Revert “Merge pull request #141 from yboaron/get_endpoints” #146
- Updating baremetal-runtimecfg images to be consistent with ART #144
- Bug 1974350: HAProxy-monitor: send reload only if cfg file changed #145
- Updating .ci-operator.yaml
build_root_image from openshift/release #143
- Bug 1886572: Calculate keepalived priority for ingress #141
- Bug 1924476: handle CVE-2021-3121 #139
- Remove Brad from OWNERS #142
- Bug 1949859: Add Ironic healthcheck to bootstrap keepalived checks #135
- Bug 1960716: Log the output of render operations #138
- Bug 1957708: Keepalived- verify that unicast peers list isn’t empty on master nodes #137
- Remove etcd name logic #134
- Updating baremetal-runtimecfg builder & base images to be consistent with ART #131
- Add node resolution to corednsmonitor #129
- Bug 1939740: sort AddressesDefault by ifindex and IPv4/IPv6 preference #130
- Build all commands at once in Dockerfiles #127
- Sort node-ip addresses based on default route priority #125
- Delete DNS-VIP and DNSVirtualRouterID #124
- Switch Dockerfile to new image registry #126
- Add dnsmasqmonitor #118
- Updating baremetal-runtimecfg builder & base images to be consistent with ART #120
- Move to quay.io dhcp image to avoid Dockerhub limits #113
- Bug 1915080: add CloseIdleConnections for HTTP K8S API healthcheck #117
- Updating baremetal-runtimecfg builder & base images to be consistent with ART #115
- Bug 1905233: get the correct VRRP interface in case of IPV6 overlapping subnets #112
- Bug 1894539: Allow node-ip to function without attachment to VIP network #111
- Update “runtimecfg node-ip” for dual-stack #110
- Set mac address as prefix for unique hostname #109
- Bug 1894539: Allow baremetal-runtimecfg to function when the node isn’t attached to the VIP network #108
- Remove get boostrap IP code #107
- Add image build and push to the Makefile #97
- Bug 1885867: Flip to unicast only when MCO set to desired version in all nodes #103
- Add bz component information #106
- Updating baremetal-runtimecfg builder & base images to be consistent with ART #104
- Change local Dockerfile to use CentOS 8 #95
- Full changelog
- Bug 2039359: Fix adm prune rs orphans #1030
- Bug 1972962: Add validation for max-icsp-size flag #851
- Bug 1999246: adm catalog mirror should ignore .indexignore files #918
- Bug 2042059: bump discovery burst and qps #1033
- Bug 2038160: Inform user about inability to schedule a debug pod #1029
- Bug 1990014: Throw error when debugging Windows nodes #1028
- Bug 2039311: Add support for build csi volume source #994
- Bug 2039491: Remove
git:// from new-app tests #1020
- Bug 2036826: Improved prune deployments #1019
- Ignore VSCode files #1018
- Bug 2036826: Fix prune deploy resolver #1015
- Bug 2036940: allow empty files and stdout in oc registry login #1011
- Bug 1992596: Remove admin bashcomp func #1014
- Bug 2035393: properly handle –dry-run=server #1010
- Bug 2034889: Fix another prune panic #1008
- Bug 2034889: Fix prune deployment panic #1005
- Bug 2033751: Revert “Modified MG pod tolerations” #1003
- Bug 2033751: pkg/cli/admin/inspect: Fix “ocurred” -> “occurred” typos #1002
- Bug 2033751: Bump k8s.io to v0.23.0 #1001
- Bug 2032111: requestproject: use agnhost serve-hostname #995
- Modified MG pod tolerations #942
- Adding the flag –allow-not-recommended to oc adm upgrade #986
- release: extract darwin/arm64 openshift-install #1000
- Add darwin/arm64 oc #990
- oc adm prune deployments for ReplicaSets #987
- Fix documentation issue #937 #944
- feat/oc-release-extract-cco: add support for alibabacloud #978
- fix registry-config messages and imports #983
- Bug 1982498: default to podman credential configs #893
- Bug 1858760: allow Authorization Service URL to differ from Registry URL when retrieving tokens #924
- Adding an example for oc adm upgrade #977
- Bug 2020377: add linux capability for host network packet captures #962
- Fix docs for oc adm policy add-role-to-user vs oc policy add-role-to-user #973
- Drop patches for apimachinery and client-go forks #976
- mustgather: add NodeName to destDir folder name #965
- Bump go.mod for go1.17 #974
- Updating ose-tools images to be consistent with ART #932
- Display conditional and not-recommended versions #961
- Introduce an option to retrieve rotated log files for a pod #958
- Updating ose-cli-artifacts-alt images to be consistent with ART #933
- GitHub-38217: Removing old example that mentions limitSecretReferences #967
- pkg/cli/admin/upgrade: Indent multi-line messages #952
- Bug 1952230: pkg/cli/admin/upgrade: Always run all client-side checks #812
- Bug 1878925: pkg/cli/admin/upgrade: Remove help text around history lookups #566
- bump openshift/library-go #949
- fix update-generated-completions.sh #948
- Bug 1987257: Always set User-Agent header for registries #915
- PowerVS support #955
- Bug 1970805: Replace slashes in suggested ImageStream name #922
- Re-use DialContext and Proxy configuration from original http.Transport #837
- runAsNonRoot in Pod SCC should be nil when oc debug run with
--as-root #880
- Adjust oc with kubectl and several cleaning items #946
- Bug 1926522: oc adm catalog mirror tmp directory cleanup #935
- Drop policy mentions in oc adm policy help #943
- Add MacOS local building instructions to README #936
- Bug 1977414: check BuildConfig Secrets and ConfigMaps before start-build creates a build #919
- OWNERS: Prune crawford #930
- Bug 2002950: Define a Command instead of Arguments for Container #925
- Bug 1992680: pkg/cli/admin/upgrade: Changing “Updates” string to “Available Updates” #903
- Bug 1992591: ensure the same oc is used everywhere in cli-artifacts #904
- Bug 1990014: Use cmd for Windows pods #907
- Bug 1996881: adm catalog mirror: log deprecation message when sqlite-based catalog is in use #908
- Bug 1994872: Fix manifest path regression #906
- Bug 1989504: The code logic of channel clear is ambiguous, as well as the help info and output messages #891
- Bug 1989505: bump kubernetes-client-go library #909
- Bug 1999159: Update the catalog-related owner alias’ #910
- Bug 1995291: Remove docker adjective whenever possible. #767
- Bug 1995573: Replacing kubectl with oc adm in help for certificate ap… #905
- Bug 1989391: Revert to UnstructuredList to fix yaml output #895
- Bug 1992680: pkg/cli/admin/upgrade/upgrade: Copy edits, including “assists with cluster upgrades” #899
- Bug 1786835: Check for out of range condition #894
- Bug 1903545: Replace colons with dashes in Windows file paths #897
- Bug 1986003: Bump k8s.io to 1.22.0-rc.0 #890
- Bug 1971332: revert incorrect allowance of ssh:// prefix with scp styled URLs #875
- Add support for declarative configs to “adm catalog mirror” #868
- Support ibmcloud provider in release extract #852
- Bug 1980118: Keep workload annotations during the
oc debug call. #887
- Bug 1978629: Add oc describe output for build volumes #874
- Bug 1955292: show consistent unit format in cluster resource quota describe #882
- contrib/completions/OWNERS: Delegate to all approver aliases #878
- pkg/cli/admin/upgrade/channel: Add ‘oc adm upgrade channel …’ #576
- Bug 1976112: Fixed warnings about deprecated CronJob in image-pruner pods #876
- release: extract Linux binaries for multiple architectures #816
- BUILD-87: bumping openshift/api with new fields for build volumes #843
- Bug 1925534: Add proxy to oc #751
- Updating openshift-enterprise-cli-alt images to be consistent with ART #855
- Updating openshift-enterprise-deployer images to be consistent with ART #856
- Updating ose-cli-artifacts-alt images to be consistent with ART #858
- Updating ose-tools images to be consistent with ART #857
- fix typo in examples template #739
- Bug 1973643: make oc logs work with BuildConfig’s JenkinsPipeline strategy #863
- Update ruby-hello-world images #860
- Add json.Valid check before trying to read docker config #747
- Bug 1954124: deprecate storage-class annotation in favor of spec.StorageClassName #840
- Bug 1951203: Allow users to set a limit on ICSP file size #818
- Bug 1968515: set User-Agent when talking with registries #841
- Bug 1965330: exclude security during exctraction #835
- Bug 1893999: guide user to provide username with basic auth error/only password IDP and no username provided #834
- Bug 1936904: Insert apiVersion and Kind into
oc adm groups sync list output #759
- Bug 1953563: Makefile: add verify-golang-versions #814
- Bug 1964936: fix error log for “oc adm catalog mirror” #836
- Bug 1960758: use recent pull spec for must-gather and debug #833
- Bug 1942915: pkg/…/create_error_template: fix error page template #828
- Bug 1949050: Bump k8s to 1.21 #831
- Generate docs separately for admin and non-admin users #827
- Bug 1944581: Preserve AuthInfo when switching projects #692
- Transfer root-image configuration to this repository #823
- Fix unit test failure #821
- Bug 1957295: Must gather pod should have priority class #820
- Bug 1937020: Releases from image streams must prefer status tag #815
- Add stress and fio packages to tools image #771
- Bug 1949820: Add an alias to imagestreams in top command #810
- Bug 1937020:
oc adm release new should look at image stream status tags #797
- Bug 1949050: Update containers/image #737
- Remove tnozicka from OWNERS and clean those files too #726
- Remove
oc adm catalog build #787
- Bug 1890828: Skip images that has already been deleted #805
- Bug 1925148: ImageRef Stream name priority increased #768
- Bug 1946839: Revert: Split work of oc image mirror #780
- OSDOCS-2033: Adding examples for some CLI commands #801
- Updating generate docs output for product docs #798
- Updating oc-specific descriptions #800
- Bump 4.8 kubernetes 1 21 0 beta 1 #773
- Updating openshift-enterprise-cli builder & base images to be consistent with ART #799
- Fix usage error print #788
- Fixing oc status help example message #791
- Fix govet error after golang 1.16 bump #796
- Updating ose-cli-artifacts builder & base images to be consistent with ART #794
- Updating openshift-enterprise-cli builder & base images to be consistent with ART #793
- Bug 1919168: when mirroring to a file destination, mount images under the index location #772
- prevent inspect from panic-ing if pods are missing #762
- stop trying to gather metrics and other endpoints directly from pods #763
- Bug 1874106: Split work of oc image mirror to avoid AuthHeaderTooLong error from registry #761
- Fix unit test to use new IS #765
- Bug 1935102: Revert Avoid TLS cert checking when login with –insecure-skip-tls-verify=true #757
- inspect clusteroperators as a backup to must-gather if it fails #749
- pkg/cli/admin/inspect/namespace: Gather PDBs too #750
- Bug 1880865: Avoid TLS cert checking when login with –insecure-skip-tls-verify=true #746
- indicate how many bytes the hidden secret key was #752
- Remove old dependencies on dockerv1client and replace with newer equivalents #745
- Bug 1928850: update new-app help to avoid image references without registry/repository (docker.io throttling related) #742
- Bug 1920024: Allow debug to start with a single
--image argument #399
- Add summary to oc must-gather #738
- Bug 1925236: RouteDescriber: Filter endpoints on route.Spec.Port #730
- Updating ose-cli-artifacts builder & base images to be consistent with ART #735
- Bug 1904006: update and clarify –dir –from-dir flags with ‘oc image’ #729
- Updating ose-tools builder & base images to be consistent with ART #734
- Updating openshift-enterprise-deployer builder & base images to be consistent with ART #733
- Updating openshift-enterprise-cli builder & base images to be consistent with ART #732
- upate registry.svc.ci->registry.ci #731
- add simple debug for image serve #690
- Add help text to ‘oc registry login’ when using –registry flag #721
- Bug 1919032: Fix image extract from Root Directory #713
- Add missing docs generation tools #725
- Bug 1914894: warn users about using non-groupified resources #693
- Bug 1900989: idle: also annotate the service #720
- Bug 1888192: add rsync & log re-tries #631
- Bug 1907421: Implementing retries during for image mirror #706
- Bug 1920024: debug: Allow pods to keep labels during debugging #613
- Bug 1919862: fix message after oc new-project #715
- Bug 1920427: drop information about prompt for oc login #717
- Bug 1878022: Improving import-image help messages #712
- Bug 1917522: Mark filter-by-os deprecated in oc adm catalog mirror #710
- Bug 1902299: catalog mirror improvements #673
- Updating openshift-enterprise-deployer builder & base images to be consistent with ART #700
- Updating ose-cli-artifacts builder & base images to be consistent with ART #702
- Updating ose-tools builder & base images to be consistent with ART #701
- Updating openshift-enterprise-cli builder & base images to be consistent with ART #699
- Bug 1916621: fix oc adm node-logs examples #708
- Bug 1906276: oc image append|extract: clarify help for –filter-by-os #707
- Bug 1890677: oc image: Include error msg when image not found and register oci schema for mediatypes #697
- Bug 1899575: bump discovery burst to 250 #696
- Bug 1890995: oc new-app: provide message for unauthorized error with image lookup #691
- Bug 1911487: make deployment config explicit for prune deployments #683
- Bug 1908697: use wrapper for diff command #682
- Bug 1914452: Fix the manifest list warning when choosing an os/arch digest from list #688
- Bug 1908484: credentials-requests extract only write creds requests not all manifests #687
- Bug 1910840: fix help for rollback #684
- Bug 1880068: Take StatefulSets, Jobs and CronJobs into account during image prune #671
- Bug 1907375: bump deps #689
- Bug 1909289: Should be able to debug an init container #676
- Bug 1878972: pkg/cli/admin/release: Use ‘-’, not ‘=’, for untranslated arches #680
- REVERT: Bug 1812813: oc debug node: create debug namespace with empty node-selector annotation #550 #668
- Bug 1905404: fix append example #664
- Bug 1890951: Improve output of ‘oc image mirror’ with multi-arch images #642
- Bug 1890671: use proper username for image verification #637
- Bug 1906121: Remove duplicates and use k8s methods #649
- Bug 1878972: adm release mirror: add architecture information #646
- Oc 4.7 kubernetes 1.20.0 beta.2 #660
- Bug 1903033: deduplicate imageContentSources printed when mirroring release #661
- observe: support CRDs #650
- Bug 1878823: ‘oc adm release mirror’ add –to-release mirrors to generated ICSP #640
- IR-112: Pruner should be aware of OCI image configs #617
- Bug 1891555: Accept OS_GIT_VERSION to set version information #635
- Bug 1893645: account for nil in LastTransitionTime in route status #632
- Bug 1891555: BuildRequires goversioninfo #629
- Bug 1888738: fall-back must-gather to official RH supported image #627
- show proper wildcard for ‘oc image mirror –help example’ #625
- Bug 1853116: write to files instead of stdout #482
- inspect: add example how to use multiple resources #621
- fix help for ‘oc adm release extract’ #622
- Bug 1891555: Create Windows version information #623
- Bug 1888657: set command name for LoginOptions #616
- Bug 1841885: Support airgapped mirroring with
oc adm catalog mirror #611
- Updating ose-tools builder & base images to be consistent with ART #607
- Updating openshift-enterprise-cli builder & base images to be consistent with ART #606
- Updating openshift-enterprise-deployer builder & base images to be consistent with ART #608
- Updating ose-cli-artifacts builder & base images to be consistent with ART #609
- Bug 1868384: Login: Avoid overwriting same user from different cluster #537
- Bug 1885179: Avoid deadlock by closing pipe reader end #604
- oc login: Show tokenURL message if only IDP is basic and user has not provided username #553
- release: Fix typo in cli argument for release mirror #612
- Bug 1884270: bypass golang url parsing with scp styled ssh git URLs; refactor URL for older git clients #610
- Bug 1885170: fix nil pointer in release code #603
- Refactor deletion of hashed session token on user logout #534
- must-gather: fixed typo when using a plug-in image #481
- cli/admin/release/new: typo fix #558
- Full changelog
- Bug 2045591: Fix reconciliation of aws pod identity webhook configuration #447
- Bug 2035903: handle resources with feature-gate annotation #444
- add unsupported docs for migrating to STS #442
- pkg/operator/status: Set an explicit happy reason/message #416
- Bug 2037331: Make ccoctl gracefully handle existing gcp workload identity resources #441
- update sts docs to reference ccoctl where appropriate #418
- Bug 2034484: Library go bump #434
- Azure passthrough docs #435
- Bug 2039085: Exclude operator config from ibm-cloud-managed profile #398
- Bug 2037903: Alibaba Cloud not required credReqDir in command delete-ram-users #439
- Bug 2036827: ensure GCP CredsReq has a list of ServiceAccounts #440
- Bug 2035315: fix passthrough test cases #438
- Bug 2035328: Make ccoctl ignore cred requests marked for deletion #436
- Azure passthrough #433
- Azure vendoring update #426
- Support alibaba cloud manual mode #412
- Add doc for ibmcloud #422
- upgrade to controller-runtime 0.7.2 #409
- Bug 2024613: pod-identity-webhook starts without tls #421
- Bug 2023832: pkg/operator/status: Only bump lastTransitionTime on status changes #417
- Minor corrections to gcp workload identity docs #419
- Add usage docs for ccoctl gcp #375
- Add documentation for gcp workload identity #376
- internalcontroller not needed since controller-runtime 0.6.2 #407
- go 1.17 changes #414
- Fix small log typo for upgradable check #415
- Add ccoctl gcp command to create all the required credentials infra #408
- add alternative to disabling CVO entirely #406
- Add ccoctl gcp command to delete credentials infra #372
- Add ccoctl gcp command to create service accounts #371
- unit test cases for the refresh-keys #403
- Bug 2015133: populate accountID when listing resource groups #402
- Make ccoctl tool fetch default gcp creds in the same way as installer #393
- Defensive nil check in gcp actuator #392
- require spec.serviceAccountNames #386
- Group nil checks in AWS client creation #391
- Add ccoctl command to create workload identity provider for google cloud #369
- ccoctl ibmcloud refresh-keys command #396
- unit testcase for IBMCloudPowerVSProvider #400
- Bug 1996624: Check for aws status in infra platform status field before client setup #399
- Bug 1977319: cleanup orphaned Service ‘controller-manager-service’ #388
- Add PowerVS support #389
- Bug 2010341: update alerts with summary and descriptions #395
- Bug 2002152: Stop putting CCO in degraded state when stale credentials are found #383
- update OWNERS list #394
- Add UT for the delete-service-id command #390
- Add ccoctl command to create workload identity pool in GCP #368
- ibmcloud delete-service-id command #380
- Bug 1976674: make azure and ovirt consistent when in manual mode #387
- Bug 2006364: fix(ibmcloud): Set policy attribute name properly for RG access #385
- Updating ose-cloud-credential-operator images to be consistent with ART #384
- Bug 1991770: The logLevel and operatorLogLevel values do not work with Cloud Credential Operator #379
- Update CI build root image to golang-1.16 #373
- Add ccoctl create key pair command for google cloud #367
- Updating ose-cloud-credential-operator images to be consistent with ART #381
- update manual mode docs to cover new upgrade behavior #378
- Enhance ccoctl ibmcloud command to create policies #374
- Bug 1990975: Enhance mechanism of reading ibm cloud apikey #365
- Bug 1990970: Remove debug test binary #366
- ccoctl create-iam-roles should update policies for existing roles #364
- Ignore ccoctl binary #363
- Support gcp workload identity federation #359
- Bump go.mod to 1.16 #362
- Update build-machinery-go #361
- Rename ibmcloud command to create-shared-secrets #360
- Add permissions boundary support to ccoctl when creating AWS IAM Roles #346
- Add code coverage script & make target #358
- Documentation to add a new cloud provider #326
- Updating ose-cloud-credential-operator images to be consistent with ART #357
- Add IBMCloud manual mode #356
- Remove checks inside conditional and use require.NotNil instead #348
- Updating .ci-operator.yaml
build_root_image from openshift/release #355
- Bug 1970062: use shared session setup in ccoctl create-all #354
- Bug 1967531: Fix ccoctl delete not removing iam roles #351
- Bug 1970062: delete client should also use shared session function #353
- Bug 1970062: enable shared config files for AWS SDK #352
- Bug 1960176: Make sure credentials have newly generated azure client secret #349
- Bug 1957165: Use gofrs/uuid for uuid generation #350
- Bug 1957446: v1beta to v1 for the CredentialsRequest CRD #336
- Bug 1960176: Recreate user when deleted in cloud providers #345
- Bug 1962602: Remove log statement in frequently called function. #343
- Bug 1910396: Add ErrorScrub utility to prevent infinite update/reconc… #342
- Bug 1864116: Fix “unsupported platform type” log spamming on BareMetal. #341
- Bug 1958861: back to no CSR permissions for pod-id-webhook #340
- Bug 1953077: rework GCP passthrough permissions checking #330
- Bug 1954765: v1beta1 to v1 mutatingwebhookconfiguration #333
- Bug 1949862: avoid referencing object after error #328
- Bug 1954615: do not assume result is valid after error #335
- Bug 1954865: add priorityClass to pod-identity Deployment #334
- Bug 1952891: Fix OpenStack clouds.yaml updating in secretannotator #332
- Bug 1949866: use initialization structure for ID provider #327
- Rename workload annotations #329
- Bug 1949218: build and include ccoctl into image #323
- Bug 1927017: Use file observer for Proxy CA changes #320
- Bug 1948628: Fix ccoctl create aws iam-roles command and docs #325
- Bug 1948628: Add aws subcommand to ccoctl and additional UX changes #321
- Bug 1946097: oVirt credentials secret contains unnecessary “ovirt_cafile” #317
- Add management workload annotations #319
- Bug 1940142: Correct incorrect CACert in secrets created prior to 4.6 #314
- installer manifests and ‘all’ subcommand #311
- CCO-73: Add command to delete resources created by ccoctl #312
- make docs reflect reality of parameter names #316
- Ccoctl docs #307
- iam-roles subcommand #306
- add generate-only mode for ccoctl create identity-provider #304
- Updating ose-cloud-credential-operator builder & base images to be consistent with ART #313
- Bug 1927017: Context cancel on stopped leading #310
- manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #308
- no error when SecretRef does not exist #305
- require annotation before upgrade when in manual mode #286
- report STS as a submode of Manual #303
- CCO-67: Add command to setup OpenID Connect provider #302
- Add service account names to credentials request manifest #298
- Add a CredentialsRequest field to store service account names #299
- new binary for setting up credentials outside of cluster #296
- Bug 1927925: spell fix user-visible string #300
- Bug 1924477: Tag gogo/protobuf to v1.3.2 #297
- Updating ose-cloud-credential-operator builder & base images to be consistent with ART #295
- Add controller to cleanup stale credentials requests #285
- specify Azure and GCP as supporting Manual mode #291
- Add initial documentation for using AWS Security Token Service #290
- Bug 1916081: MissingTargetNamespace message fix #293
- Bug 1920695: Update OpenShift CI registry in Makefile #288
- Bug 1916454: checking 4.7 creds #280
- Updating ose-cloud-credential-operator builder & base images to be consistent with ART #282
- Bug 1908747: remove stale S3 CredentialsRequest manifests #278
- Bug 1906880: operator: remove odicdiscoveryendpoint controller #276
- Bug 1903226: exclude run-level 0 namespaces from MutatingWebhook for Pods #275
- Add IBM Cloud managed annotations to CVO manifests #274
- add current profile annotations to CVO manifests #272
- Bug 1880785: Fix CredentialsRequest missing description in ‘oc explain’ #270
- add new credentials field for AWS Secrets #264
- aws: support custom CA bundle for AWS API #266
- Bug 1889540: manifests: Allow ‘for: 20m’ for CloudCredentialOperatorDown #262
- Revert “Fix /etc/pki/ca-trust/extracted/pem permissions issue” #265
- Add kubevirt platform #260
- Fix /etc/pki/ca-trust/extracted/pem permissions issue #263
- Redistribute new root creds in passthrough mode #242
- move status calculation into its own controller #255
- enable GCP read only creds to be used when root creds missing #259
- Updating ose-cloud-credential-operator builder & base images to be consistent with ART #258
- allow skipping leader election #257
- Stop reporting mode metrics for unused modes. #256
- Fix formatting in README #243
- Full changelog
- Bug 2040521: routeName used as customSecretName #533
- Bug 2039670: Sync the library-go #538
- Bug 2042038: bump library go #537
- Bug 2024841: use latest keycloak for testing #534
- Bug 2039670: Create the PDB dynamically so it does not get created on the SNO topology #514
- Bug 2034484: fix:library-go nil pointer issue #525
- Bug 2030961: endpoints checker: check only the custom hostname if configured #528
- e2e tests for keycloak #520
- Golang bump 1.17 #515
- Bug 1982726: encryption-controller: sync secrets conditionally #506
- test/library: Pin keycloak contianer label to 15.0.1 #512
- test/lib: Set
PROXY_ADDRESS_FORWARDING for keycloak #508
- Bug 1996647: endpointsaccessible: clarify degraded message when DNS is broken #473
- pkg/operator: set high inertia for all topologies except SingleReplica #504
- Bug 2019832: pkg/operator: configure high inertia for apiserver and OAuthServer #503
- typo fix: enpoints -> endpoints #502
- Exclude operator config for ibm-cloud-managed profile #496
- pkg/*: wire context in newest library-go #501
- AUTH-8: sync group claims for OIDC IdPs #495
- Bug 2013222: pkg/operator: configure PDB high inertia #499
- rm dead code: deployment readiness and route canonical host #493
- podsecurity: enforce privileged for openshift-oauth-apiserver namespace #492
- Bug 1948080: bump(library-go): add shutdown detection during apiservice discovery #481
- Update Go version in the images #480
- Bug 1998031: Deploy PDB to prevent more than one replica going unavailable #476
- Bug 1996620: manifests, bindata: explicitely set runAsUser for oauth-apiserver #474
- Bug 1973005: manifests, bindata: explicitely set runAsUser for operator and operand #472
- Bug 1988576: pkg/operator: Add deprecated stale status #470
- Bug 1986829: metrics: use client cert auth for metrics scraping #469
- Bug 1978193: csr request: use generate names to prevent getting stuck waiting for a cert #468
- distribute oauth-server trust via a openshift-config-managed configmap #464
- Bug 1977027: Remove not needed Prometheus Rule #461
- encryption condition controller doesn’t reset previously set condition #466
- clear encryption conditions when there is no work to be done #462
- Custom Certs for OAuth Route #430
- add dynamic audit policy controller #460
- Bug 1977054: observe api-audiences for the oauth-apiserver #458
- bump library-go to get context fixes #457
- Updating .ci-operator.yaml
build_root_image from openshift/release #454
- readme: update references to developer guide #448
- Bug 1969631: encryption controllers wait for all informers before running the sync loops #453
- Bug 1879182: oauth-apiserver: audit policies now use ‘secure-’ by default #451
- Bug 1965929: bump lib-go to get improved performance for the CSR approver #450
- Bug 1965929: wire certs as the authentication means to openshift webhook authenticator #416
- Bug 1967398: operator: add OAuthServiceEndpointsCheckEndpointAccessibleControllerDegraded to stale conditions #449
- Bug 1943804: splits the encryption tests #447
- Bug 1943804: stub for splitting encryption tests #446
- Bug 1950379: routersecret: sync only the cert/key pair for the default domain #438
- Bug 1953563: Add .ci-operator.yaml with build_root_image #439
- Bug 1953041: manifests/deployment: bump cpu and memory resource requests #444
- Bug 1955749: OCP oauth translations for login pages #428
- Bug 1939580: wellknownready: delay going degraded on oauthmetadata changes #442
- Bug 1954544: endpoints controller: actually use the context-constrained request #441
- Rename workload annotations #434
- Bug 1946540: fix configuring webhook authenticators on upgrade #435
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #436
- Add management workload annotations #431
- Bug 1946540: only configure webhook authenticators when oauth-apiservers are ready during upgrade #433
- e2e: fix the token names in tokentimeout test to match the new format #432
- extends shutdown delay duration to 10 seconds #429
- move the oauth-server deployment into a generic workloads controller #414
- oauth-apiserver: add access token inactivity timeout observer #422
- Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #421
- follow up changes to clean up endpoint accessible controller #404
- Bug 1934107: webhook authentication: fix oauth-apiserver IP for IPv6 environments #415
- switch to v1beta1 for the p&f APIs #393
- wire openshift authentication as a webhook authenticator #304
- removes the encryption provider #409
- e2e: Pin gitlab docker image to 13.8.4-ce.0 #413
- Remove the ‘authentication.operator.openshift.io/managed’ annotation from user,oauth apiservices #407
- Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #406
- Support non-HA mode #391
- Bug 1841039: e2e: add a test for password grant checking with keycloak #401
- Bug 1921275: deploymentController: treat error retrieving authentication.operator/cluster #402
- Bug 1917114: proxyconfig controller: match URL to noproxy correctly #400
- Bug 1916949: manifests: exclude rbac resources in openshift-oauth-apiserver namespace from hosted profile #399
- Bug 1905329: oauth-apiserver deployment: add cpu and memory requests #395
- Bug 1901774: manifests: add liveness probe to the operator’s deployment #394
- Bug 1887392: bump kube to 0.20.1 and lib-go to master to pick up authn/z caching #392
- Bug 1901057: proxyconfig controller: add router CA to the trusted pool #387
- Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #377
- oauth-apiserver:workload: wait for storage urls before installing the api server #386
- Annotate manifests for single-node-developer cluster profile #383
- starts to manage the encryption configuration #379
- always claim control over oauth and user APIs #380
- add RBAC for the new useroauthaccesstokens #381
- pkg/controllers/common: Fix “successfull” -> “successful” typos #382
- Add IBM Cloud managed annotations to CVO manifests #378
- oauthserver: grab unsupported overrides from a prefixed tree #319
- Add a controller to report misconfigured proxy #355
- picks up setting
TCP_USER_TIMEOUT socket option #372
- Bug 1893386: Fix wrong operator config informer #373
- Restrict log permissions #366
- Bug 1893386: update ingress node available to handle custom placement #370
- add current profile annotations to CVO manifests #369
- Bug 1891758: deployment: update event spam #365
- Bug 1887428: add ServiceMonitor for the oauth apiserver #361
- BUG 1888311: p&f: make oauth SAR/TokenReview traffic exempt #363
- Bug 1888028: bump library-go to stop waiting on kube-apiserver availability #362
- pkg/controllers: Use library-go’s IngressURI helper #358
- BUG 1886449: p&f: assign oauth server traffic to workload-high #359
- remove unused vbom.ml/util dependency #357
- ingressnodesavailable: fix typo in message #348
- flowschema for oauth server and its operator #356
- Full changelog
- Bug 2045561: revert defaultCAPIGroup constant #220
- Bug 2043675: UPSTREAM: <drop>: Ensure ClusterAPI DeleteNodes accounts for out of band changes scale #219
- Bug 2043043: Rebase Autoscaler onto upstream release-1.23 branch #218
- Cluster Autoscaler 1.23.0 #4568
- Update dependencies to kubernetes 1.23 #4567
- fix pod equivalency checks for pods with projected volumes #4441
- ignore azure csi topology label for similarity checks and populate it for scale from zero #4550
- fix: avoid double wrapping scale up error #4559
- Fix admission controller #4561
- Change the behaviour of Garbage Collector of AggregateCollectionStates #4488
- Switch VPA OOM E2E tests from custom image to upstream image #4556
- Increase server create timeout #4345
- Charts - CA - Default to system-cluster-critical priority class #4524
- CA - AWS - Update Static Instance List #4520
- fix scale set log formatter #4548
- Add MigLister interface with default no-op implementation #4544
- Cache Mig instances in GceCache #4543
- improve logging for scale set size changes #4541
- Add
--feature-gates flag to support scale up on volume limits (CSI migration enabled) #4539
- Switch AdmissionReview from v1beta1 to v1 #4537
- Send UID too in AdmissionReview response #4538
- Use node version in gce os reserved #4542
- Add PULL_REQUEST_TEMPLATE.md #4534
- Refresh instances to mig cache in MigInfoProvider #4512
- Issue 4340 – Update the klog version to v2 in e2e –last part #4536
- cluster-autoscaler: Update READMe.md #4533
- Add version to gceMig and BuildCapacity() #4528
- fix answer about troubleshooting that why cluster not scale down #4510
- Rely on replica count found in unstructuredScalableResource #4443
- Fix missing yaml conversion for expander priorities #4321
- Re-add default expander #4513
- Cluster-Autoscaler update AWS EC2 instance types with g5, m6 and r6 - master branch #4481
- Move gce reserved to interface #4511
- Use DescribeInstanceTypes API to get EC2 instance type details #4468
- switch azure clients to non-legacy repo #4494
- Issue#4340 – Update klog version to v2 –part3 #4500
- add more azure instance types #4497
- add a100 gpu type #4495
- Cluster Autoscaler: GCE: update pricing for Spot N2D and Tesla K80 #4493
- Update cluster-autoscaler FAQ to define correct resource-lock options #4487
- [AWS EKS - Scale-to-0] Add EKS service and DescribeNodegroup API call #4444
- Changed the logging level in gce cloud provider #4486
- add configuration diagrams to clusterapi readme #4474
- Fix typo in FAQ #4477
- Improve ScaledUpGroup event info to include current & max nodes #4014
- Separate limits scaling between CPU & memory #4113
- Increase upper bound for expected VPA CPU recommendations #4469
- Register packet provider in all builder #4448
- implement GetOptions for AWS #4238
- Added changes to support alternative recommender #4131
- CA - AWS - Update StaticListLastUpdateTime on re-generating instance … #4411
- CA - Update gofmt of CAPI_nodegroup.go #4466
- Allow AWS and ClusterAPI providers to ignore topology.ebs.csi.aws.com/zone label #4458
- Fixes issue #4453 Removes Deprecated CAPI Annotations #4463
- update readme and examples to keep it consistent with the community v… #4461
- Add gjtempleton to top level OWNERS #4457
- expand CAPI_GROUP usage to cover other capi group variables #4451
- Mention Packet for supporting price expander #4447
- Make GCE instance template labels & taints getters public #4445
- Refactor MIG info providers in GCE cloud provider #4423
- Issue#4340-Migrate vertical-pod-autoscaler to k8s.io/klog/v2 –Part2 #4419
- Upgrade image tag version for helm chart #4417
- Cluster-Autoscaler update AWS EC2 instance types with c6i.* and dl1.* #4428
- cache ASG InstanceTypes for AWS #4073
- Support nvidia-tesla-a100 GPUs for aws cloud provider #4414
- Cluster Autoscaler: GCE: add pricing info for C2D #4420
- add recent AKS agentpool label to ignore for similarity checks #4421
- [AWS EKS - Scale-to-0] Update conditional to check cluster-name as well #4398
- Brightbox cluster autoscaler provider #4413
- Revert “Brightbox cluster autoscaler provider” #4410
- Brightbox cluster autoscaler provider #4019
- Update resizer README with latest image versions #4377
- addon-resizer: Restrict example RBAC to minimum #4352
- Use path/filepath instead of path #4386
- exported const LocalSSDDiskSizeInGiB should have comment #4405
- GCE ephemeral storage on local SSDs #4318
- CA - AWS - Instance Type Regeneration #4378
- Set PodsTriggeredScaleUp field for failed scale ups. #4395
- #4340-Migrate vertical-pod-autoscaler to k8s.io/klog/v2-Part1 #4361
- Introduce Empty Cluster Processor #4391
- Extend ScaleUpStatus with node groups that failed scale up. #4392
- Add descriptive log for pre_filtering_processor #4390
- Issue#4358 - Add fsGroup to security context of autoscaler pod #4359
- [AWS EKS - Scale-to-0] Update README to include warning about eks:nodegroup-name tag #4387
- [AWS EKS - Scale-to-0] Add check for the AWS EKS tags on the ASG #4304
- Adjust KEP for customized recommender #4329
- fix expanders unit tests #4354
- Allow specification of multiple expanders #4233
- Cluster Autoscaler: GCE: add pricing info for T2D #4347
- Update image for cloudstack cluster-autoscaler #4330
- azure: support CLI credentials instead of service principal #4295
- Add Standard_ND96asr_v4 #4338
- [AWS examples] Add priorityClassName & securityContext & upgrade image #4303
- Fix cluster feeder test #4341
- Rate limit garbage collection inside
ClusterState #4302
- Make logs about managing cache less verbose #4335
- Use custom spam filtering function in event recorder. #4328
- Update k8s dependencies to 1.23.0-alpha.1 in CA. #4327
- Change parameter order of TemplateNodeInfoProvider #4324
- Cluster Autoscaler: GCE: Add support for Spot VMs #4322
- Move GetNodeInfosForGroups to it’s own processor #4191
- Update AWS docs for ASG tags #4229
- fix not being able to set args without value #4298
- Update VPA e2e dependencies #4308
- Cluster-Autoscaler - Update hardcoded AWS instance list #4299
- Add a test for clusterStateFeeder.InitFromHistoryProvider #4296
- fix: add missing RBAC permissions to example spec #4273
- CA - Cloud Provider Examples - add ability to list/watch/get namespaces #4280
- fix(leader-elect-resource-lock-role): Add permissions to role if leader election is based off configmaps #4276
- add init container when vpa recommender init from history provider #4102
- implement GetOptions for Azure #4237
- fix 4256 autoscaler permit #4277
- implement GetOptions for GCE #4236
- presources → resources #4278
- Cloud provider[Packet] fixes #4274
- Fix markdown code not showing correctly #4234
- fixed flag usages #4210
- Fill in the LastUpdateTime Field of VpaCheckpoint Status with Correct Time. #4250
- Use highest available magnum microversion #4261
- Optimise generate ec2 #4199
- Fix: Adding additional storage APIs discovered but unable to be watched on EKS #4246
- aws: Set maxAsgNamesPerDescribe to the new maximum value #3999
- Add NAMESPACE as an environment variable to the updater deployment config #4243
- Make CA version on HEAD match k8s version in go.mod #4257
- Extend ScaleUpStatus structure with ScaleUpError field. #4253
- Update Cluster Autoscaler version with vendor #4245
- Metrics for AWS API calls #4179
- allow adding annotations for priority-expander configmap #4222
- Add example to AWS readme if taint has value #4050
- Improve misleading log #4046
- GCE: add pricing info for new N2 instance types #4241
- Updating vertical-pod-autoscaler images to be consistent with ART #216
- Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #215
- UPSTREAM: <carry>: Fallback to CAPI annotations #214
- Bug 1991496: add clusterapi build tags to dockerfiles #213
- Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #212
- Updating vertical-pod-autoscaler images to be consistent with ART #211
- Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #210
- Bug 1992823: rebase on top of kubernetes/autoscaler 1.22 #209
- Update dependencies to k8s 1.22.0 #4244
- Move UpdateDeprecatedTemplateLabels function #4239
- cluster-autoscaler: fix unit tests #4235
- Also set new (non-beta/non-deprecated) labels in buildGenericLabels #4053
- GCE: CreateInstances() should use BaseInstanceName #4225
- Add multi string arg support #4226
- Update dependencies to k8s 1.23.0-alpha-0 #4215
- Update go version to 1.16 in Dockerfile and Github Tests #4216
- Fix: CA does not work properly while using AWS EC2 IMDSv2 #4127
- Update the AWS examples to have 600Mi of memory #4207
- docs: Install parameters #4106
- update cluster-autoscaler CAPI provider owners #4200
- Cluster-autoscaler-FAQ: Updating link addresses for MinAvailable and Cloud-controller-manager #4193
- docs: replaces Travis CI badge with GitHub Actions badges #4195
- Update dependencies to k8s 1.22.0-beta.1 #4187
- Skipping metrics tests added in #4022 #4184
- Bump version to valid semver #4183
- fix: add missing RBAC permissions to autoscaler chart #4154
- Publish node group min/max metrics #4022
- update cluster-autoscaler chart to 1.21.0 #4175
- Document DaemonSet eviction opt in/out behavior #4173
- Add support for AWS Osaka region #4169
- Allow DaemonSet pods to opt in/out from eviction #4172
- add Standard_HB120rs_v3 #4166
- Add a flag to control DaemonSet eviction on non-empty nodes #4162
- Use CreateInstances() API when scaling up in GCE cloud provider #4158
- Add the ability to spin up Hetzner servers from custom snapshots #4153
- Watch Action instead of polling Server Status #4151
- Allow overriding userAgent in Custom GCE client in gce cloud provider. #4149
- digitalocean: support reading access token from file #4147
- Skip iteration loop if node creation failed #4143
- digitalocean: remove tag references from README #4145
- digitalocean: do not Refresh() on startup #4144
- improve addon-resizer deployment example #4146
- Adding support for PERMISSIONS_ERROR in gce cloud provider #4137
- dont proactively decrement azure cache for unregistered nodes #4130
- feat(ovh): enable OVHcloud provider for US side #4109
- Updated vendor to v1.22.0-alpha.3 #4132
- Changing injection test webhook API from V1Beta1 to V1 #4124
- annotate fakeNodes so that cloudprovider implementations can identify them #4119
- Metric for CloudProvider.Refresh() duration #4108
- Don’t start CA in cooldown mode. #4104
- add field keys to cluster autoscaler unit test structs #4101
- Print out error when unable to download module #4085
- Fix templated nodeinfo names collisions in BinpackingNodeEstimator #4089
- aws: support arm64 instances #3848
- Add patch deployment permission to example addon resizer deployment #4091
- gce: concurrent zonal List()s + opportunistic basename fill #4058
- Update vendor to v1.22.0-alpha.1 #4094
- Document that CA is not responsible for registering new nodes #4092
- update storage API version #4090
- Replace package satori/go.uuid for cloudprovider ionoscloud #4070
- add required api resources to hetzner cluster-autoscaler example #4020
- Cluster resource consumption metrics #3983
- Log names of longUnregistered Nodes #4060
- BizFly: remove go.mod from the inlined “gobizfly” client #4077
- Enable custom k8s fork in update-vendor.sh #4023
- Document that TLS bootstrapping may be necessary for scale-up #4067
- add stable zone labels in azure template generation #4061
- support “/“separators in custom allocatable overrides via vmss tags #4056
- Release leader election lock on shutdown #3940
- aws: Don’t pile up successive full refreshes during AWS scaledowns #3797
- Enable magnum provider scale to zero #3995
- Remove vivekbagade, add towca as an approver in cluster-autoscaler/OWNERS #4040
- cloudprovider: add Bizflycloud provider #4009
- Cluster Autoscaler GCE: change the format of MIG id #4047
- Updating vertical-pod-autoscaler images to be consistent with ART #207
- Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #206
- Updating .ci-operator.yaml
build_root_image from openshift/release #205
- Bug 1948719: updating CA version to 1.21.0 #203
- Bug 1948719: rebase on top of kubernetes/autoscaler 1.21 #201
- updating vendor to 1.21.0 #4042
- additional memory reservation for gce cloud provider for low memory m… #4028
- Add enhancement proposal for feature request #3913 #3914
- Fix CAPI example #4018
- Make addon-resizer example deployment use k8s.gcr.io #4003
- cloudprovider: ClusterAPIProviderName spelling #4015
- CAPI Management cluster informer to watch single namespce #4012
- Proposal to circumvent 50 tag ASG limit for EKS ManagedNodegroups #3968
- Set cluster autoscaler-specific user agent. #3989
- Separate and refactor custom resources logic #3971
- Allow users to change thresholds for evicting pods in VPA #3962
- fix: add missing call to fetch autodiscovered nodegroups #3972
- Add A2 machine family pricing for GCE #3974
- Fix typo in values.yaml example for extraVolumeMounts #3960
- Log failed scale up metric based on string value of AutoscalerErrorType. #3969
- adds status-config-map-name to values.yaml of helm chart #3954
- Update VPA README with current default version #3952
- Update description of CA in main README #3951
- Support for reporting authorization errors during scale up #3950
- Fix GCE where no cloud-config-path is required #3907
- expose IP_SPACE_EXHAUSTED #3945
- Do not set limits when recommendation is 0 #3903
- Allow generic labels to be overwritten by tags coming from the ASG #3926
- Fix bug where a node that becomes ready after 2 #3924
- Cloudprovider hetzner #3838
- remove extra build command from cluster-autoscaler #3863
- feat(ovhcloud): add node group autoscaling options #3866
- Support AWS new GPU type - T4 #3872
- Allow name of cluster-autoscaler status ConfigMap to be specificed #3888
- Bugfix: Expander Priority warns misleading log. #3758
- updating the vendor for new release tag
v1.21.0-beta.1 #3933
- CA-Chart Readme Updates & Fix Chart Lint and Test Actions #3932
- Fixing Kernel Memory Usage estimation for GCE cloud provider #3929
- Add Fetch Error Output to Warning Log #3893
- Allow for specifying automountServiceAccountToken on cluster-autoscaler service account #3912
- add a metric for unregistered nodes removed by cluster autoscaler #3922
- Support additional-print-columns for VPA CR #3918
- Simplify update-vendor script #3915
- add cluster-api to provider list on cluster-autoscaler readme #3920
- add arch specific cluster-autoscaler targets to gitignore #3921
- feat: add prometheus rule support #3900
- distinguishing another 404 error in autoscaling_gce_client.go #3904
- Add e2-highcpu-32 price info #3898
- Helm Chart Image Update (v1.18.1 → v1.20.0) #3880
- Enhancements directory for VPA #3895
- Add gjtempleton to CA AWS cloud provider OWNERS approvers #3896
- Allow out-of-cluster operation of VPA #3769
- Reduce logging when creating placeholder instances #3757
- Add comment for exported type InstanceType in gen template #3751
- Add unremovable_nodes_count metric #3690
- Set different hostname label for upcoming nodes #3883
- Final removal of ca-chart chart post deprecation #3885
- CA-Chart - Mark Cluster-Autoscaler-Chart as Deprecated #3719
- Minor fix for timeout test #3882
- Remove .travis.yml #3878
- Test and verify using Git Actions #3860
- Add clusterapi into frontpage #3859
- Azure: Cleanup test #3864
- bump clusterapi sample suggested version from 1.18.1 to 1.20.0 #3855
- Allow for the leader election resourcelock to have a configurable name #3630
- implement new GetOptions method for linode provider #3850
- cloudprovider: linode cloud provider #3790
- doc: proposal custom cloud provider over gRPC #3140
- Per nodegroup scale-down config #3789
- Fix cluster-autoscaler chart to match with the examples #3725
- Add services into role of example file #3842
- Change VPA storage version from v1beta2 to v1 #3810
- Follow WG Naming Recommendations on Master -> Control Plane #3803
- Minor fixes. DaemonSet eviction for empty nodes #3837
- add DaemonSet eviction option for empty nodes #3824
- Implement round-robin for SchedulerBasedPredicateChecker #3817
- Add new aws instance types: r5b, m5zn, d3, d3en #3746
- Change VPA default version to 0.9.2 #3827
- Update values.yaml defaults to match real default values #3777
- Update pr.yaml #3793
- gcp: faster startup and refreshes with many MIGs #3704
- Switch from v1beta1 to v1 for rbac #3820
- Define clusterapi in cloudprovider layer #3801
- Adding functionality to cordon the node before destroying it. #3649
- added additional os-distributions #3815
- Revert 3744 #3806
- Wait with jitter between attempts to start watching pod evictions #3807
- Fix cluster-autoscaler clusterapi sample manifest #3805
- Regenerate Azure instances list #3794
- adding support to block ephemeral storage from boot disk #3783
- chart: fix reference to additionalLabels in deployment template #3782
- ignoring terminated pods in scaledown #3545
- feature(provider): Add OVHcloud provider #3773
- Make arch-specific releases use separate images instead of tags on the same image #3768
- Add towca to cluster-autoscaler Reviewers #3774
- subtract mirror pod utilization with ds utilization from node allocatable #3749
- Ephemeral Storage support for BuildNodeFromTemplate in GCE #3763
- cleanup: refactor Azure cache and remove redundant API calls #3717
- cleanup huaweicloud unused sdk #3759
- Add max pods per node config to build node #3755
- Initial Issue Templates #3750
- Do not panic on api errors #3483
- Generate VPA CRD v1 from types.go #3606
- Watch only pods in state Running and Unknown #3744
- Fixes copy / past error in comment #3745
- Add additionalLabels chart value #3687
- Add extraVolumeSecrets chart value #3692
- Bug 1955324: update testing scripts to use go 1.16 #202
- Fix build with Go 1.16 #200
- Updating vertical-pod-autoscaler builder & base images to be consistent with ART #199
- Housekeeping: add Chen to approvers, update to ci registry #197
- Updating vertical-pod-autoscaler builder & base images to be consistent with ART #193
- Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #192
- add component and subcomponent to OWNERS #191
- Bug 1913960: rebase on top of kubernetes/autoscaler 1.20 #185
- Cluster Autoscaler 1.20.0 #3734
- Add build support for ARM64 #3714
- add daemonset eviction for non-empty nodes #3701
- Update vendor dependencies #3730
- Add Ionos Cloud cloudprovider #3727
- Improve error message: Not all error are due to “it wouldn’t fit if a new node is added” #3723
- Gce pricing fixes #3321
- update generic labels for GCE #3722
- Cache controllers #3589
- Update vertical-pod-autoscaler containerPorts to reflect default ports #3677
- Add
extraEnvConfigMaps and document some values #3691
- Return cluster-autoscaler-chart Chart name to cluster-autoscaler #3679
- update readme file #3707
- Fixes for update-vendor.sh on OSX and zsh #3694
- Fix an out-of-bound array access in simulator.TestClear() #3702
- cleanup unnneeded files #3689
- added cache for instances #3685
- Adding support for Apache CloudStack as a cloudprovider #3629
- delete nodes from cluster after scale down #3682
- fixed scaledown issue #3676
- charts/cluster-autoscaler-chart: fix typos #3672
- Update Cluster Autoscaler (CA) volume mount path to /etc/ssl/certs/ca-bundle.crt #3646
- implemented TemplateNodeInfo function #3671
- refactor CAPI controller unit test to use PollImmediate #3652
- update sdk version to fix scaling policy cannot create issue #3667
- implements node group increase size #3658
- Include taints by condition when determining if a node is unready/still starting #3653
- Implementes get desire instance number of node group. #3657
- change how DaemonSet utilization is calculated #3641
- Configurable –network and –rm flags for docker #3637
- Reduce logging in scale calculation #3642
- Exclude the virtual node from nodes not created by auto scaling group #3152
- Revert base price changes from PR #3603 #3636
- Remove redundant log lines and reduce severity around parsing kubeEnv #3635
- Add minimum k8s version for VPA 0.9.0 #3632
- Azure: keep refreshes spread over time #3631
- CA huaweicloud: implements node group by AS #3621
- proactively set instance status to deleting on deletions #3624
- Provider/Packet: Allow empty nodepool, Add support for multiple nodepools, Add price support #3094
- Ensure CA simulator takes existing nodes into account #3622
- CA: upload huaweicloud new sdk #3620
- Remove obsolete comments #3618
- CA: Skip huaweicloud sdk from verify scripts #3619
- Add magnum support in cluster autoscaler helm chart #3424
- vpa/hack/vpa-process-yamls.sh add print action #3586
- Change VPA default version to 0.9.0 #3594
- add Packet provider links to the root README.md #3610
- Add documentation for balancing-ignore-label flag #3596
- Fix VerticalPodAutoscaler version of hamster-vpa sample #3607
- Ignore topology.gke.io/zone when comparing groups #3604
- add volume mount label option to cluster-autoscaler makefile #3595
- GCE: base pricing of custom instances on their instance family type #3603
- simplify DeleteNode logic by removing an extra Mutex #3573
- [Helm chart] Update helm-docs version and add PR action to ensure docs are updated #3587
- Cherry pick 3308 onto 1.19 - Fix priority expander falling back to random although higher priority matches #3582
- Vertical Pod Autoscaler release 0.9.0 #3590
- Only release one arch for tests #3588
- Add openssl version requirement #3585
- [Helm Chart] Add support to configure custom service labels #3575
- added a new NodeGroupDoesNotExistError in errors.go #3572
- Allow custom timeout value for webhook calls #3549
- Remove ScaleDownNodeDeleted status since we no longer delete nodes synchronously #3570
- Swith back to k8s.gcr.io vanity domain #3564
- Add auto scaling group support for huaweicloud #3565
- Change VPA default version to 0.8.1 #3548
- Add missing stable labels in the azure template #3558
- Add huaweicloud autoscaler owners file. #3555
- Extend GetContainersResources with an option to emit all containers. #3546
- Fix typo in patch yaml example #3544
- Update group identifier to use for Cluster API annotations #3161
- Fix pricing endpoint in AWS China Region #3528
- Azure: support allocatable resources overrides via VMSS tags #3532
- Add Exoscale provider Cluster Autoscaler #3470
- Fix limit rounding #3463
- Don’t fetch nodes #3498
- Support using –cloud-config for clusterapi provider #3203
- correctly label failed scale ups error #3509
- Fix typo in scale_down.go #3525
- Fix typo in chart README #3524
- Update vendor & fix breaking changes #3526
- dont update capacity if VMSS provisioning state is updating #3510
- Decrease the number of GCE Read Requests when node deletion. #3500
- Fix markdown style link in README #3492
- Azure: serve stale on ongoing throttling #3484
- Add HuaweiCloud info link to FAQ/Documentation section in CA main readme #3491
- add Packet cloudprovider owners #3480
- remove duplicated values #3487
- Add support for node autodiscovery to clusterapi provider #3314
- Make output of recommender tests easier to read #3485
- Use FitsAny in drain simulation #3482
- CA: fix integer to string conversion #3473
- Break up the logic in azure_manager #3460
- Call nodeGroup API to avoid type assertion errors #3459
- CA - Update Helm chart instructions #3455
- VPA: Ignore admission hook failures #3456
- Azure cloud provider: backoff needs retries #3449
- vpa: add multiarch builds #3123
- Azure: optional jitter on initial VMSS VM cache refresh #3440
- Improve Cluster API tests to work better with constrained resources #3441
- Add missing daemonsets and replicasets to ALI example cluster role #3086
- Expose max-nodes-total as a metric #3435
- chore: add kustomize support #3434
- Update README.md #3295
- Descriptive error on failed cert generation #3390
- fix typos #3385
- Use shallow clone in update-vendor.sh #3420
- Fix YAML indents in FAQ document #3432
- Remove internal types in favor of unstructured #3312
- Avoid unwanted VMSS VMs caches invalidations #3437
- Regenerate list of EC2 instances #3431
- Use FitsAnyNode in binpacking #3429
- Added ellistarn to Kubemark Cloud Provider owners #3364
- Add link to AWS IAM OIDC example in README.md #3421
- Add unit tests for azure aks node pool #3418
- Remove go.mod from local copy of gophercloud #3416
- Fix module path in local gophercloud copy #3415
- Fix label selector in chart post-install notes #3411
- Fix priority expander falling back to random although higher priority matches #3308
- Upgrade images in aws examples to v1.17.3 #3408
- Update OWNERS #3405
- update README file #3406
- Fix wrong default value for expendable-pods-priority-cutoff in FAQ #3404
- Skip nodes that are not Kubemark nodes #3373
- Azure: Add test cases for azure_agent_pool.go. #3223
- Add c5a EC2 instance type for AWS #3259
- fix(charts): Renaming chart to avoid tag name conflict #3393
- Add myself to owners #3358
- Adopt Cluster Autoscaler chart #3341
- VPA Add controlledValues to CRD #3391
- Add -addext error to VPA readme #3389
- VPA v1beta2 tests use v1beta2 client #3382
- Bug 1906933: Add upstream patch for update group identifier #184
- Add upstream patch for –cloud-config option #180
- Add upstream patch for node group autodiscovery #179
- BUG 1854256: Bump github.com/heketi/heketi to v10.1.0 #183
- Add upstream patch to remove internal types in favor of unstructured #177
- Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #181
- Updating vertical-pod-autoscaler builder & base images to be consistent with ART #182
- Bug 1891551: Ensure the node template include up to date and informative labels #178
- Full changelog
- Bug 2034484: fix: missed rbac and latest library-go #236
- Bug 2026178: update alerts to match style guidance #233
- Library go bump #235
- Update makefile to support podman #234
- OCPCLOUD-1278 - add scale-down-utilization-threshold to CAO #226
- update to Golang1.17 #227
- update owners file #231
- Bug 2025230: Change ClusterAutoscalerUnschedulablePods severity to info #228
- Bug 1943194: add logic to detect GPU capacity and update accordingly #223
- Updating ose-cluster-autoscaler-operator images to be consistent with ART #222
- Bug 1994480: Update dependencies to K8s 1.22 #218
- Bug 1988032: add cvo ha annotation to tombstones #216
- Bug 1986090: Do not recreate CA deployment when CA CR is being deleted #215
- add alerts for memory and cpu core limits #213
- add a tombstones manifest to the install directory #214
- Bug 1973567: add csistoragecapacities to cluster-autoscaler cluster role #212
- Add related objects to ClusterOperator #211
- Bug 1973567: add csidrivers to the cluster-autoscaler cluster role #210
- Updating ose-cluster-autoscaler-operator images to be consistent with ART #209
- Updating .ci-operator.yaml
build_root_image from openshift/release #208
- Bug 1947785: Move all webhooks to v1 #202
- Bug 1960554: manifests: use v1 for RBAC #205
- Bug 1948719: update controller-runtime dependency #204
- Bug 1948719: update dependencies to 1.21 #200
- Add management workload annotations #198
- Bug 1948706: Add IBM Cloud managed annotations to CVO manifests #183
- Bug 1938467: Fix cluster autoscaler pod requests #201
- Bug 1938467: The default cluster-autoscaler should get default cpu and memory requests if user omits them #197
- Bug 1947785: Move webhook to v1 #199
- install/90_alertrules: Drop ClusterAutoscalerOperatorDown #196
- Bug 1923823: Improve TLS configuration for Kube RBAC Proxy #194
- Add dgrigore to owners #182
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #188
- Bug 1907380: Reduce verbosity of kube-rbac-proxy logging #189
- Bug 1909108: Bump K8s dependencies to 1.20 #190
- Bump scripts to Go 1.15 #186
- Bug 1879777: Remove namespace manifest #185
- add machineset/scale resource to the cluster-autoscaler role #177
- add current profile annotations to CVO manifests #179
- Add verify-diff check in generate task and enable in CI #181
- update go mod vendor #180
- Bug 1876469: Update generated CRDs #178
- add current profile annotations to CVO manifests #176
- add bugzilla component to OWNERS #172
- Full changelog
- Bug 2006945: extend hardcoded restmapper for cluster-bootstrap to avoid crashlooping bootstrap kube-apiserver #64
- update golang version #65
- Bug 1953563: Add .ci-operator.yaml with build_root_image #60
- Bug 1951639: Add –tear-down-delay and –tear-down-termination-timeout #58
- Updating ose-cluster-bootstrap builder & base images to be consistent with ART #54
- Bug 1933263: bump(library-go) #56
- allow bootstrapping to create SCCs #55
- Single Node deployment with bootstrap-in-place #51
- Bug 1855628: bump golang.com/x/text and switch to go-mod and build-machinery #37
- Use new context when sending event bootstrap events #1
- Updating ose-cluster-bootstrap builder & base images to be consistent with ART #43
- Full changelog
- Bug 2043709: fix component-base logging flags #230
- Bug 2034484: feat: bumped library-go version #227
- Bug 2033536: vendor: update openshift/api to include alibaba CRD update #229
- bump openshift/api #228
- Bump golang to 1.17 #225
- Bug 1986504: bump openshift/api #223
- OWNERS: add Abu as approver #221
- Bug 1992592: bump api #219
- Bump openshift/api, openshit/client-go #220
- Updating openshift/api, openshift/client-go, and openshift/library-go #218
- Bug 1993002: Bump API to fix kubebuilder directives #214
- Bug 1984635: use new default leader election values to handle SNO environments #213
- Bug 1984635: use new default leader election values to handle apiserver rollout on SNO #211
- Bug 1986148: Bump API for Ingress RequiredHSTSPolicies #212
- Add missing include annotation for ibm-cloud-managed #210
- bump: get updated operator API content #209
- bump(openshift/api): to get latest CRDs #208
- Add AzureStack support #186
- Bug 1957822: bump o/api to get the apiserver.TLSProfile doc update #206
- Bug 1960339: openshift-user-critical: unset globalDefault #205
- bump(*): openshift/api to pickup updated CRD’s #203
- Bug 1953563: Add .ci-operator.yaml with build_root_image #198
- Bug 1960339: manifests: add preemptionPolicy for openshift-user-critical #202
- Bug 1947803: quota: switch to v1 crd #201
- Rename workload annotations #194
- Bug 1950113: vendor: bump to the latest openshift/api #199
- Bug 1878199: remove log level normalizer #197
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #195
- Bug 1947800: Bump openshift/api (and Kube 1.21 release) #192
- Add management workload annotations #190
- Bug 1949145: Add missing annotations to upc #193
- Bug 1949145: Add user facing priority class #191
- Add IBM Cloud managed annotations to CVO manifests #166
- pkg/operator/kube_cloud_config: Fix “kuberneted” -> “Kubernetes” doc typo #172
- Bug 1901535: Update openshift/api dependency #187
- Mark operator pod as system-cluster-critical #184
- Updating ose-cluster-config-operator builder & base images to be consistent with ART #188
- Updating ose-cluster-config-operator builder & base images to be consistent with ART #182
- bump openshift/api to support new field controlPlaneToplogy in #175
- Bug 1920619: bump(openshift): remove scheduler default profile from config #181
- Updating ose-cluster-config-operator builder & base images to be consistent with ART #178
- Bug 1890038: update AWS platform status migration controller for all platforms #174
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #169
- Bug 1905328: Add warning of the consequences of changing bound token issuer #173
- Updating ose-cluster-config-operator builder & base images to be consistent with ART #165
- Bump openshift/api #168
- Bug 1891952: Bump API For Ingress AppsDomain Field #167
- add current profile annotations to CVO manifests #164
- Add component to OWNERS #163
- bump(github.com/openshift/api): support KubeVirt platform #160
- Full changelog
- Bug 2037856: Fix typo in VolumeSnapshotContents RBAC #112
- Bug 2039670: Skip deployment of PDBs on the SNO topology #109
- Bug 2037856: Update library-go to get leader election updates #110
- Bug 2043130: Bump snapshot CRDs #111
- Bug 2034484: Library go bump #107
- Bug 2036951: Don’t inject proxy in operator pod #108
- Update to go 1.17 #105
- Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #103
- Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #102
- Bug 1993931: Storage operators use older kubernetes client #100
- Bug 1992255: Fix leader election defaults in snapshot-controller #99
- Bug 1986215: Bump library-go #98
- Add ibm-cloud-managed profile patch for operator deployment #96
- Support External control plane topology #97
- Use go:embed for static yaml files #95
- Bug 1965263: VolumeSnapshotContents listing should print also namespace of the VolumeSnapshot ref. #93
- Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #94
- readme: update references to developer guide #90
- Updating .ci-operator.yaml
build_root_image from openshift/release #92
- ‘manages’ #76
- Bug 1940940: Deploy multiple operand replicas #88
- Bug 1961538: manifests/05_operator_rbac: Drop the unused namespace property #87
- Bug 1951066: Remove exclude annotation from manifests to include in ROKS #81
- Add management workload annotations #84
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #86
- Bug 1924483: Bump Kubernetes to 1.21 #85
- Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART #83
- Bug 1926444: Fix installation on ROKS #79
- Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART #77
- Bug 1914451: Don’t run the operator as root UID #74
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #65
- Bug 1916221: Bump dependencies #72
- Bug 1907287: Use webhook for v1 snapshot API #71
- Bug 1908347: Apply ValidatingWebhookConfiguration correctly #68
- Bug 1908349: Don’t validate v1 objects #70
- Bug 1906518: Update Snapshot CRDs to v1 #69
- Bug 1905320: Add memory limit for webhook container. #67
- Add validation webhook deployment #62
- Add IBM Cloud managed annotations to CVO manifests #64
- add current profile annotations to CVO manifests #61
- Change to “component” for BZ component #60
- Bug 1839239: Update version only after having rolled out the new operand #57
- Add BZ component to OWNERS #59
- Bug 1879365: Remove namespace creation #49
- Full changelog
- Bug 2043787: Bump to Kubernetes 1.23 and Go 1.17 #311
- Bug 2031685: Fix duplicate /etc/resolv.conf in configmap #310
- Bug 2031685: Duplicated forward upstreams should be removed from the dns operator #308
- Bug 2031699: Fix CoreDNS config ipv6 addresses should be always upper… #309
- Update Corefile in configmap based on upstreamResolvers in DNS spec #306
- NE-367: Add logLevel for CoreDNS #307
- Bug 2020489: Enable metrics for custom upstream resolvers #305
- Support forwarding policy in the CoreDNS configuration #301
- Update openshift/api for DNS forwarding policy #303
- Remove service topology field which is deprecated. #302
- Bug 2010345: Add namespace to the promql for the CoreDNSErrorsHigh alert #299
- podsecurity: enforce privileged for openshift-dns namespace #298
- Bug 2006803: Set CoreDNS cache entries for forwarded zones #296
- Updating ose-cluster-dns-operator images to be consistent with ART #297
- Bug 2002461: serviceChanged: Fix internalTrafficPolicy #294
- Updating ose-cluster-dns-operator images to be consistent with ART #293
- Bug 1992555: Comply with Openshift alerting guidelines #288
- Allow dns operator to be disabled with managementState field #260
- status: Watch clusteroperators #261
- Bug 1973482: status: Watch daemonsets #283
- Bump for controller-runtime v0.9.0 #282
- Updating ose-cluster-dns-operator images to be consistent with ART #281
- Updating .ci-operator.yaml
build_root_image from openshift/release #280
- Add alebedev87 to OWNERS #275
- Bug 1951853: Bump openshift/api for node placement API godoc fix #278
- Bug 1939723: Don’t check node-resolver status for DNS Degraded condition #273
- Bug 1966116: Corefile: Set bufsize to 512 bytes for all servers #276
- Bug 1952174: status: Report old versions while rolling out new #274
- Bug 1952174: status: Report old versions while progressing #269
- Rename workload annotations #264
- Bug 1948232: Fix for daemonset’s maxSurge and service’s ipFamilies and ipFamilyPolicy defaulting #263
- Bug 1950270: go.mod: Update openshift/api & go version #265
- Bug 1953280: node-resolver: Set owner reference on the dns #270
- Bug 1946929: Fix status reporting for default node placement #262
- Bug 1949361: Corefile: Enable bufsize plugin for all servers #266
- Add management workload annotations #259
- Bug 1946893: update inconsistent error message for AvailableCondition #258
- Bug 1948708: IBM Cloud manifest profile patch #215
- Bump openshift/api, controller runtime, and kube component versions #257
- node-resolver: Use “kubernetes.io/os” node label #255
- Updating ose-cluster-dns-operator builder & base images to be consistent with ART #249
- Add node-resolver daemonset #209
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #216
- Bug 1943578: Corefile: Use 30 second max TTL for caching of negative responses #253
- Bug 1936022: Fix spurious reconciliation of DNS daemonset and service #243
- NE-515: Alerts: Update prometheus alert rules for CoreDNS v1.8.z #239
- Bug 1884053: Configure CoreDNS to shut down gracefully #237
- Give CoreDNS access to endpointslices #244
- Bug 1934905: Enable errors plugin for custom upstream resolvers #241
- Bug 1933761: Set CoreDNS’s cache’s maximum TTL to 900 seconds #240
- NE-514: Corefile: Drop deprecated kubernetes
upstream option #238
- Bug 1919737: Set CoreDNS readiness probe period and timeout each to 3 seconds #234
- Updating ose-cluster-dns-operator builder & base images to be consistent with ART #233
- Add rfredette to OWNERS #224
- Bug 1912522: test/e2e: Re-enable TestCoreDNSImageUprade #230
- Updating ose-cluster-dns-operator builder & base images to be consistent with ART #229
- Bug 1905323: Request appropriate memory for dns-node-resolver container #225
- Bug 1908891: test/e2e: Block on TestCoreDNSImageUpgrade image revert #226
- Bug 1906860: Bump for kube 1.20 #222
- Bug 1882485: Prevent dig errors from corrupting host’s /etc/hosts #223
- Bug 1880148: Fix DNS DaemonSet’s updateStrategy stanza #221
- Bug 1880148: Set DNS DaemonSet’s maxUnavailable value to 10% #217
- Revert “Configure CoreDNS to shut down gracefully” #213
- Add IBM Cloud managed annotations to CVO manifests #214
- Bug 1896923: Configure CoreDNS metrics plugin to use localhost #210
- addOwners-candita #212
- Bug 1895147: Remove memory limit on the CoreDNS container #207
- add current profile annotations to CVO manifests #206
- Bug 1884053: Configure CoreDNS to shut down gracefully #205
- Updating ose-cluster-dns-operator builder & base images to be consistent with ART #203
- Full changelog
- Bug 2043683: Revert “Merge pull request #727 from mfojtik/fix-dual-ip” #730
- Bug 2039344: Do not include ipv6 node address in cert #727
- Bug 2034484: fix:library-go nil pointer issue #725
- Bump library-go #719
- update OWNERS #720
- bump(openshift+k8s): kubernetes 1.23 #718
- bump(library-go): to gather a fix for static pod UID version #713
- pkg/etcdenvvar: set max learners based on desired control plane replicas #708
- pkg/operator/defragcontroller: ensure defrag controller is disabled for non HA tolopogy #711
- pkg/cmd/monitor: handle error on failed monitor #710
- pkg/operator/quorumguardcontroller: set pod affinity for topology mode HA only #709
- *: Improve observability of etcd client metrics and defrag controller #707
- pkg/operator/quorumguardcontroller: add pod affinity #706
- pkg/operator/etcdendpointscontroller: use etcd membership to populate endpoints #701
- OWNERS: welcome Allen #703
- Bump go version to 1.17 #702
- bump(*): vendor update #700
- README.md: Add some initial telemetry query examples #693
- vendor: Bump OpenShift API #674
- pkg/operator/defragcontroller: ensure defrag has clear signal. #688
- manifests: set the same upgrade level as kube-api #689
- pkg: Go degraded if disk metrics are above a threshold #687
- jsonnet: bump and regenerate #690
- podsecurity: enforce privileged for openshift-etcd namespace #681
- pkg/operator/metriccontroller: Fix query #684
- Bug 2004451: pkg/operator/upgradebackupcontroller: fix backup dir name in status condition #676
- pkg: Pass context through to functions #680
- bindata/bootkube/bootstrap-manifests: add etcdctl container to bootstrap-etcd #678
- Bug 2006975: Suppress noisy logs and improve client errors #660
- Bug 1990489: Reintroduce etcdHighNumberOfFailedGRPCRequests alert for non metal ipi clusters #654
- pkg/operator: remove stale condition controller #672
- OWNERS: add hasbro17 to reviewers #670
- pkg/cmd/render: disallow placeholder IPs #664
- Updating cluster-etcd-operator images to be consistent with ART #662
- Bug 2001856: bump library-go and dependencies #661
- Updating cluster-etcd-operator images to be consistent with ART #658
- Bug 1997347: pkg/cmd/verify: bug fixes and improvements #657
- OWNERS: add lilic as approver. #655
- Bug 1997347: pkg/operator/upgradebackupcontroller: update cluster operator status #653
- Bug 1997347: ETCD-223: pkg/operator: add cluster backup upgrade controller #647
- Bug 1956879: pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus #650
- Bug 1994857: Revert pkg/operator/targetconfigcontroller: wait for kcm-o to generate certs before rollout #651
- Bug 1997207: Pass context into clientv3.Config to use same context #645
- Bug 1994986: test/e2e/etcdctl_test.go: Skip check perf test as we disabled it #646
- Bug 1994707: pkg/etcdcli: provide clear error on status check for unstarted etcd member #644
- Bug 1980465: pkg/etcdenvvar: warn on apply duration over 200ms #639
- Bug 1957498: Clean up tech debt #631
- Bug 1993757: bindata/etcd: remove unix socket from advertised list #640
- Bug 1991068: Allow only supported cipher suites #638
- Bug 1989335: pkg/operator/targetconfigcontroller: block rollout and report on missing external resource #635
- Revert “Bug 1701154: Enable etcdHighNumberOfFailedGRPCRequests alerts” #637
- Bug 1701154: Enable etcdHighNumberOfFailedGRPCRequests alerts #626
- Bug 1986829: metrics: use client cert auth for metrics scraping #634
- Bug 1988491: bindata/etcd/quorumguard-deployment: simplify health true matching #636
- Adjust runbooks url to new path #632
- pkg/operator/defragcontroller: reduce RPC calls after defragmentation #630
- Inject runbook url into alerts #628
- OWNERS: goodbye Suresh #629
- ETCD-58: add support for defrag controller #625
- Replace message with description field #627
- ETCD-204: Add an observer for TLS Security Profile #616
- bindata/etcd: Enable gRPC time histograms #566
- Migrate alerting mixin from cluster-monitoring-operator #613
- bump library-go to get context fixes #622
- Bug 1969633: pkg/operator/targetconfigcontroller: wait for kcm-o to generate certs before rollout #619
- pkg/etcdenvvar: bump ETCD_QUOTA_BACKEND_BYTES to 8GB #597
- Updating cluster-etcd-operator images to be consistent with ART #612
- Rotate serving certs when duration less than minimum percent #606
- Bug 1963730: kube-apiserver failed to load SNI cert and key #610
- Bug 1958405: Improve etcd service observability and health checks #596
- Bug 1965024: Validate the status of the etcd snapshot during backup and restore #603
- Bug 1966813: Update the flowchart to accommodate modified logic #601
- Bug 1924422: go.mod, go.sum: Replace gogo/protobuf with v1.3.2 #608
- Bug 1963871: bump(*): Update the go version to 1.16 #602
- Bug 1963871: .ci-operator.yaml: Use golang-1.15 tag #607
- Bug 1963871: Move back to Golang 1.15 as in o/release #599
- Revert “Bug 1957498: Update policy.v1beta1 to v1 as it is deprecated in v1.21” #592
- Bug 1902247: pkg/dnshelpers: cleanup dead code #591
- Bug 1958245: etcd/pod: print static pod revision in logs #586
- Bug 1957498: Update policy.v1beta1 to v1 as it is deprecated in v1.21 #589
- Bug 1902247: pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #587
- docs: Initial documentation for discover init cluster along with a flowchart #585
- Bug 1946607: bindata/etcd: improve readinessProbe checks by dialing unix socket target #580
- Bug 1952268: Increase inertia duration for the EtcdMembersDegraded condition #579
- Bug 1952684: pkg/operator/metriccontroller: check vector length #584
- OWNERS: add lilic as reviewer #583
- Bug 1952684: pkg/operator/metriccontroller: dont panic on invalid response from prom client #573
- Bug 1952266: Don’t set operator version before operands update #576
- Rename workload annotations #569
- Bug 1953563: Add .ci-operator.yaml with build_root_image #574
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #570
- Bug 1950934: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #567
- Add management workload annotations #560
- Bug 1949418: bump(*): vendor update #564
- Bug 1948553: bindata, pkg: Propagate operator log level to etcd itself #561
- vendor: bump k8s v0.21.0-rc.0 #563
- Bug 1948040: *: enable zap as default logger #562
- Bug 1927942: pkg/etcdenvvar: enable SO_REUSEADDR #553
- Updating cluster-etcd-operator builder & base images to be consistent with ART #557
- update library-go to fix tight loops #558
- Bug 1931658: render: refactor scaling strategies #547
- Remove deprecated render options and remove default #552
- Remove unused render command options and configuration #549
- Migrate tls bootstrap from the installer #546
- pkg/etcdenvvar: set periodical watch progress notification to 5s #548
- Manage one aggregated cert secret rather than one per cert type #544
- switch to v1beta1 for the p&f APIs #516
- Refactor creation of aggregated cert secrets #542
- Bug 1929359: pkg/operator/quorumguardcontroller: use cli image from release payload #543
- Improve cert controller detection and correction of invalid certs #540
- Adding single node ocp cluster support #527
- Updating cluster-etcd-operator builder & base images to be consistent with ART #538
- Bug 1925586: pkg/operator/metriccontroller: cleanup transports #534
- Bug 1920159: CPU requests overstate actual needs #535
- Add summary tables to tls asset docs #529
- Bug 1871170: test/e2e: add etcdctl sanity test #456
- Bug 1907872: Make dual stack bootstrapping more reliable #532
- docs: add maintenance section #519
- Bug 1916853: pkg/operator: ensure etcd endpoints cm #525
- OWNERS: add marun #524
- Bug 1882176: Validate certs for the current IP address of the node #461
- Bug 1851810: *: ensure etcd listens on strong ciphers #523
- Updating cluster-etcd-operator builder & base images to be consistent with ART #522
- Bug 1851351: Remove stale EtcdMemberIPMigratorDegraded condition #517
- Bug 1913747: bump(*): kubernetes 1.20.1 #518
- Bug 1906875: Provide an option force backup even when API is not available to check the health. #509
- Bug 1898954: Backup script should get the latest revision of static-pod-resources … #504
- Introduce bootstrap scaling strategies #449
- Annotate manifests for single-node-developer cluster profile #505
- Bug 1844727: Use socket readiness probe to avoid generating zombies #502
- Remove unused cruft #501
- Revert “Use etcd’s /health endpoint for readiness checking” #500
- Add IBM Cloud managed annotations to CVO manifests #498
- Bug 1895509: Revert “Bug 1837540: Use restore pod yaml from the backup when restoring” #495
- * remove 4.3 tolerations #469
- Bug 1892288: pkg/etcdcli: add IsQuorumFaultTolerant #485
- *: remove all MCO tolerations #482
- picks up setting
TCP_USER_TIMEOUT socket option #486
- add current profile annotations to CVO manifests #484
- pkg/operator: remove legacy api #481
- bump library-go for static pod uid #477
- *:bump library-go #476
- Use etcd’s /health endpoint for readiness checking #474
- OWNERS: change component to Etcd #467
- Bug 1888015: bump library-go to pick up static pod graceful timeout workaround #464
- Updating cluster-etcd-operator builder & base images to be consistent with ART #463
- *: enable pprof profiler for operator #459
- flowschema for etcd operator traffic #462
- Full changelog
- Bug 2034484: Library go bump #736
- Bug 2039170: Change log level for debug messages #743
- IR-227: Remove fallback from platformStatus to installer config #739
- Cleanup go.mod #738
- support alibabacloud oss for image registry #724
- Verify go.mod and vendor #737
- Bug 2028030: Do not mutate objects from informers #735
- IR-224: Bump openshift/api #728
- Use go 1.17 #734
- e2e: Dump build information on failure #711
- hack: fix CVO overrides #733
- Bug 2010662: Wait until cluster operators recover before proceeding #726
- Makefile: remove unused ‘update-deps’ target #727
- feat(ibmcos): Define IAM policies for CredentialsRequest #716
- Add documentation for developers #713
- Bug 2008096: Fix race in TestAWSFinalizerDeleteS3Bucket #722
- podsecurity: enforce privileged for openshift-image-registry namespace #723
- Bug 1998432: Support Swift authentication using application credentials #686
- Bug 1907433: Decrease severity for event queue messages #721
- Updating ose-cluster-image-registry-operator images to be consistent with ART #718
- Bug 1972827: Avoid disruptions #715
- Updating ose-cluster-image-registry-operator images to be consistent with ART #712
- IR-207: Get endpoints for Azure Stack Cloud #710
- Bug 1981639: Update rolling update parameters #709
- Bug 1958376: Disallow blob public access for Azure storage account and require TLS1.2+ #705
- CCO-105: Support gcp workload identity federation #702
- Start using embed for assets #703
- feat: Support IBMCloud and add IBM COS storage driver #698
- Bug 1939842: Get AWS STS endpoint from serviceEndpoints #699
- Bug 1974651: Remove :apiserver_v1_image_imports:sum #700
- Bug 1973318: Properly set custom tolerations #694
- Updating .ci-operator.yaml
build_root_image from openshift/release #693
- Bug 1918376: Allowing system:registry to list ICSP rules #668
- Bug 1966459: Use batch/v1 and policy/v1 #691
- Bug 1937464: Swift: Do not modify driver config #674
- Bug 1952610: Bump dependencies #685
- Bug 1960330: manifests: fix selector in image-registry-operator #688
- Bug 1954891: Setting PriorityClassName for pruner cronjob #687
- IR-181: Use only one replica on single node clusters #670
- Bug 1945387: Setting required pod anti-affinity rules #681
- Bug 1955879: Setting user tags always when Storage is Managed #683
- Add management workload annotations #677
- Bug 1954095: Setting user provided tags on bucket creation #679
- Bug 1948714: IBM Cloud manifest profile patch #643
- Bug 1923811: Report ready replicas #669
- Bug 1944762: Allow disruptions when operand has only one replica #676
- Bug 1939731: Add PodDisruptionBudget for image-registry #671
- Add service account names to credentials request manifest #664
- Bug 1933180: Allow more node-ca unavailable replicas during upgrade #667
- Bug 1929654: Creating StorageAccount V2 instead of V1 #665
- Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #663
- Bug 1902076: Checking for route status #660
- Bug 1921909: build and use AWS config file for operator and operand #640
- Bug 1914407: Explicitly set node-ca runAsUser and runAsGroup #658
- Bug 1915041: add ListMultipartUploadParts permission #650
- Bug 1907202: Sync status to spec with regards to Swift config #653
- Bug 1902091: Using http.DefaultTransport timeouts #648
- CORS-1584: support custom CA bundle for AWS API #638
- Bug 1889921: Reporting degraded if not available #644
- Annotate manifests for single-node-developer cluster profile #645
- Add IBM Cloud managed annotations to CVO manifests #642
- Bug 1897520: Use mkdir -p to create ca-trust directories #639
- Bug 1894677: Reduce default log level for pruner #637
- Bug 1893956: Make /etc/pki/ca-trust/extracted writable #634
- Bug 1892799: Operator should use entrypoint script #631
- Bug 1887010: Make pruner always aware of registry name #627
- add current profile annotations to CVO manifests #629
- Bug 1887737: Skip TestImageRegistryRemovedWithImages on vSphere #608
- Bug 1850465: Keep node-ca daemonset in-sync with reference version #625
- Bug 1888118: Add memory request for operator #628
- Bug 1885856: Creating prometheus record rule for v1 imports #626
- Bug 1883502: Migrating to k8s.io/klog/v2 #619
- Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #621
- Cleanup: Use constants if possible #622
- Full changelog
- Bug 2043759: Bump to Kubernetes 1.23 #696
- Bug 2039339: Upgradeable Condition in Operator and IC status #693
- Bug 2039919: NE-542 Router compression E2E test #679
- Bug 1997226: setDefaultPublishingStrategy: Deep copy, tests #691
- Bug 1997226: Fix enabling PROXY protocol on an upgraded cluster #681
- Fix update retry logic in TestConfigurableRoute* #689
- Code improvements and unit tests for Alibaba DNS #683
- NE-621: Support changing ingresscontroller load balancer scope #582
- Bug 2032566: Azure: Add Support for Azure Stack Hub #686
- Drop build-machinery-go for patching manifests #687
- TestIngressControllerScale: Use a private ingresscontroller #684
- Add miheer to reviewers and approvers #682
- add service LoadBalancer support for AlibabaCloud platform #636
- Update dns controller with Power VS platform #678
- Bug 2014710: test/e2e: updateDNSConfig: Replace integer literals #672
- Support for a configurable syslog maximum message size for HAProxy #669
- Power VS platform support #658
- NE-542 expose router compression #661
- Bug 2010376: Update the alerts to conform to the style guide #660
- Bug 2007581: Change default balancing algorithm to “leastconn” #663
- Bug 2011972: Use fake dns provider with external cp topology only in IBM Cloud case #659
- Fix for Azure dns privateZone degrade e2e test #662
- Minimize IBM Cloud IAM credentials scope #653
- Updating ose-cluster-ingress-operator images to be consistent with ART #656
- Updating ose-cluster-ingress-operator images to be consistent with ART #655
- Support gcp workload identity federation #631
- Bug 2001479: Fix IBM Cloud DNS bugs #652
- tlsVersion13Ciphers: Delete duplicates #648
- Bug 1997407: Configure router to use “source” for passthrough #650
- Bug 1986575: Add e2e test cases for haproxy timeout api fields, and reject negative timeout values #644
- Bug 1989058: Watch CRL configmaps #642
- Bug 1989005: Validate spec.clientTLS.allowedSubjectPatterns[*] #643
- Bug 1972977: cleanup condition metrics for deleted ingress controllers #640
- Bug 1942657: Ingress operator stays degraded after privateZone fixed in DNS #641
- Bug 1986228: NE-310 E2E test for HSTS #639
- Add unsupported config override for maxconn #638
- NE-412: Add options for tuning connection timeouts in openshift ingress controller #635
- Implement configuration for handling empty requests #452
- Implement client certificate parameters #450
- Add unsupported config override for reload interval #619
- ensureRsyslogConfigMap: Remove ingressConfig param #573
- Add unsupported config override for config manager #628
- Add IBMCloud DNS support #630
- go.mod: Bump openshift/api to latest for DNSRecord typo #629
- NE-472:Add tlsv1.3 support #617
- Ability to Customize HAProxy 2.x Error Page #588
- Bump for controller-runtime v0.9.0 #626
- Updating ose-cluster-ingress-operator images to be consistent with ART #625
- Updating .ci-operator.yaml
build_root_image from openshift/release #624
- Add alebedev87 to OWNERS #618
- Bug 1935058: Set AWS session region #623
- Bug 1960284: Set the “local-with-fallback” service annotation #622
- Bug 1955822: Ingress: Mount router stats secret as a volume #621
- Bug 1881210: desiredNodePortService: Add port 1936 #466
- Bug 1901648: Canonical router hostname not correct #610
- Bug 1954892: canary: Add priority class to canary daemonset #620
- Bug 1959194: Ingress rollouts should specify minReadySeconds #569
- Bug 1949799: Set maximum for ingresscontroller spec.tuningOptions.threadCount to 64 #612
- Bug 1954330: ingress: Fix up openshift-ingress namespace reconciliation #611
- Bug 1955854: Compute Available and Degraded from default ingress #607
- Bug 1900819: Specify topology spread constraints #577
- Bug 1954330: Reconcile openshift-ingress namespace on upgrade #608
- Rename workload annotations #603
- Bug 1950270: go.mod: Update openshift/api & go version #604
- Bug 1950978: ingressclass: Handle ingresscontroller deletion #605
- Bug 1950284: Annotate services of type LoadBalancer with user tags (AWS only) #578
- Bug 1941592: Alerts: Fix up HAProxyDown Alert Message #597
- Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #579
- Bug 1947498: policy v1 beta1 PodDisruptionBudget is deprecated #602
- Bug 1949435: ingressclass: Fix API group name in watch predicate #600
- Bug 1949880: ingress: Propagate GCP ProviderParameters to Status #599
- Bug 1919151: Azure: Log when using domain not in zone #537
- Bug 1948716: IBM cloud managed profile patch #587
- Bug 1948626: test/e2e: Make
TestRouteAdmissionPolicy deterministic. #598
- Add management workload annotations #595
- NE-302: Add field for configuring number of HAProxy threads in router #580
- Add h2spec client subcommand #590
- configurable_route_test: Preserve ingress spec #593
- Bug 1946788: ingressclass: Don’t set default annotation #592
- ingressclass: New controller. #574
- NE-551: Configure router to use Power of Two Random Choices with Override #589
- Bug 1943845: Add startup probe to the router deployment #583
- Add http/2 and gRPC test server code as new subcommands #585
- Add the new NetworkPolicy-matching label to the namespace #586
- Introduce ingress controller #552
- NE-553: Implement the PROXY protocol API #581
- Add service account names to credentials request manifest #548
- NE-354: Implement Tunable router header buffers #576
- Bug 1907315: Change AWS interal LB annotation to match documentation #543
- Bug 1928931: Update DNSRecord CRD from v1beta1 to v1 #575
- NE 484: Use ingress-operator subcommand instead of hello-openshift #561
- Use HAProxy log level “info” to enable access logs #572
- Bug 1936030: Fix spurious reconciliation of NodePort services #567
- NE-518 GCP: Implement GCP Internal LB Global Access option #550
- Bug 1935528: Canary: Use cluster-wide proxy for canary client #565
- Bug 1934773: Canary: Perform canary test probes over https #562
- Bug 1933102: Canary: Schedule canary server pods to worker and infra nodes #560
- Bug 1932401: Canary: Add edge termination to canary route #556
- Bug 1914127: Delete the ingress.openshift.io/operator finalizer #549
- Bug 1925245: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #542
- Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #544
- Add rfredette to OWNERS #513
- NE-508 Support cluster HA mode #519
- Bug 1917942: canary: Fail on all errors in
Reconcile(...) #540
- Bug 1917614: get hostedzone tags from route53 on AWS C2S #530
- Bug 1899941: Override termination grace period for the router deployment #534
- Bug 1905778: Fix inconsistent ingress operator status after upgrade #526
- Bug 1917942: canary: Check canary service for nil elements #533
- Bug 1916401: DNS: Skip deleting records that were not published. #529
- Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #527
- Bug 1915079: Disable canary route churn by default #525
- Bug 1905100: Add “ingress.operator.openshift.io/hard-stop-after” annotation #522
- Bug 1898417: GCP the dns targets in Google Cloud DNS is not updated after recreating loadbalancer service #500
- Bug 1912922: default_cert.go: Handle redundantly specified default certificate #521
- Bug 1905324: Request appropriate memory for ingress-operator container #515
- Bug 1912916: Set traffic policy to cluster for IBM platform #516
- Bug 1887441: Conditionally delete generated default cert #505
- Bug 1906860: Bump for kube 1.20 #511
- Bug 1906508: test/e2e: Don’t clobber err in TestHeaderNameCaseAdjust #512
- Bug 1908758: Update AWS LB health check interval annotation #518
- Bug 1906560: Revert “Support changing ingresscontroller load balancer scope” #514
- Bug 1906032: Canary: Set daemonset MaxUnavailable to 10% #509
- Bug 1903165: NE-199 Follow Up Fixes. #501
- Bug 1904582: Assume ingresscontroller is external absent status #502
- Implement HTTP header case adjustment API #496
- Bug 1870373: Ingress Operator reports available when DNS fails to provision #495
- NE-199 Phase 2: Add periodic canary route HTTP checks w/ metrics & basic status reporting #493
- hack: verify-generated-crd.sh should fail on diffs #499
- Annotate manifests for single-node-developer cluster profile #498
- Bug 1880902: automatically set the dnsPolicy with ClusterFirstWithHostNet when endpoint publishing strategy type is set to hostnetwork #492
- Add IBM Cloud managed annotations to CVO manifests #494
- dns: Don’t hotloop on updates to DNSRecord status #484
- aws: use shared credentials file instead of static only #485
- Bug 1877693: dnsrecords specify recordTTL as 30 but the value is nul… #491
- NE-199 Phase 1: Add initial Canary Controller and Canary Resources #476
- Bug 1896923: Configure operator metrics handler to use localhost #490
- addowner-candita #489
- Bug 1892338: Fix HAProxyReloadFail alert #481
- Bug 1891625: Support changing ingresscontroller load balancer scope #472
- Fix up ingress controller deployment godocs #418
- add current profile annotations to CVO manifests #478
- Add run-local steps to hacking doc #406
- NE-425: Add hello openshift to CI #477
- Updating ose-cluster-ingress-operator builder & base images to be consistent with ART #471
- TestForwardedHeaderPolicy*: Make case-insensitive #474
- deps: Bump Azure/go-autorest #470
- Bug 1881155: Improve status reporting when pods cannot be scheduled #465
- Full changelog
- Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #1298
- Bug 2034559: alerts: update latency thresholds #1284
- Bug 2005901: Sync the library-go #1295
- Bug 2037856: bump library go #1294
- Bug 2005901: Guard controller pdb #1275
- Bug 2038968: bump(openshift/api): to get CSI migration gates switched off #1291
- Bug 2033784: set kube-apiserver degraded=true if webhook matches a virtual resource #1249
- Bug 2035986: Replace deprecated annotation #1288
- Bug 2034484: library-go bump #1276
- Upgrade library-go version #1273
- Bug 2008462: config: disable pod security admission #1262
- set kube-apiserver degraded=true if a webhook service is missing or down #1265
- reduce alert severity to warning where appropriate #1267
- bump(openshift/build-machinery-go) #1270
- bump k8s to 1.23 #1269
- Bump golang to 1.17 #1258
- bump(library-go): to gather a fix for static pod UID version #1264
- test/e2e/TestNamedCertificates: sign using root CA #1263
- Bug 2026352: Sync with library-go to pick fixes for pruner panic #1260
- remove unnecessary service annotations #1257
- Revert “Merge pull request #1245 from sanchezl/webhook-degraded-service” #1256
- set kube-apiserver degraded=true if a webhook service is missing or down #1245
- Bug 1982726: encryption-controller: sync secrets conditionally #1255
- bump(*): vendor update #1252
- bump(openshift/api): to get fix for typo in feature gate #1251
- pkg/operator/configobservation/etcdendpoints: bump owners #1246
- OWNERS: add Abu and Lukasz #1248
- Exempt metrics scrapes from APF. #1239
- remove unncessary config #1229
- decrease the graceful shutdown delay timeout on AWS to 129s #1240
- Bug 2004585: prometheus-k8s-0 cpu usage keeps increasing for the first 3 days #1238
- Bump library-go for support GCP and vSphere out-of-tree cloud providers #1236
- uses the etcd observers provided by library-go #1233
- podsecurity: enforce privileged for kube-apiserver #1234
- Bug 1992541: all the alert rules’ annotations “summary” and “description” should comply with the OpenShift alerting guidelines #1215
- Enable PodSecurity admission by default #1231
- Bug 2001856: bump library-go to latest #1228
- bindata: enable podsecurity plugin #1217
- 4.10: Revert “remove override for fast cert rotation” #1222
- Bug 1998552: Enforce OpenShift’s defined kubelet version skew policies #1199
- Bug 2000608: static pod startup monitor should log to a log file in addition to stderr #1219
- Bug 1985447: Add namespace label to remaining apiserver alerts #1220
- Bug 1969404: remove override for fast cert rotation #1221
- Bug 1994643: remove startup-send-retry-after-until-ready option #1211
- Bug 1994857: Revert “Bug 1969633: pkg/operator/targetconfigcontroller: wait for kcm-o to generate certs before rollout” #1209
- Bug 1997420: revert wrong change on the api-usage rules #1204
- Bug 1996032: Bump kube libraries to 1.22.1 GA version #1210
- Bug 1994643: enable shutdown-send-retry-after and startup-send-retry-after-until-ready #1207
- Bug 1994257: Actually create prometheus rule for audit error alert #1206
- Bug 1985447: Add namespace labels to kube-apiserver-operator alerts #1185
- Bug 1991357: bump library.go #1203
- Bug 1985073: use 1m resolution for control plane cpu alerts #1201
- Bug 1990610: prevent panic in startup monitor enablement check #1202
- Bug 1985997: Enable static pod fallback logic for SNO, with disruptive e2e test #1198
- Bug 1986829: metrics: use client cert auth for metrics scraping #1190
- Bug 1989633: bump(library-go): staticpod/installer: skip backoff if lastAvailableRevision > targetRevision #1200
- Bug 1989461: kube-apiserver: make flock wait for release and remove port wait #1191
- Bug 1985997: readiness checks handle network errors better #1196
- Bug 1985997: scaffolding for e2e tests for the static pod monitor #1197
- Bug 1985997: staticpod/startupmonitor: shorten and unify reason strings #1194
- Bug 1985997: wires startup monitor related controllers #1189
- Bug 1986003: Bump k8s.io to 1.22.0-rc.0 #1181
- Bug 1985997: wires the startup monitor #1177
- staticpod/installer: get rid of sleep in sync loop #1183
- Drop kubelet-https removed in 1.22 #1184
- introduces KubeAPIReadinessChecker used by startup monitor to assess Kube API server readiness/health condition #1180
- encryption condition controller doesn’t reset previously set condition #1178
- Create alert for API Server audit log errors #1166
- Start using embed module for assets #1174
- bump(library-go + api): get audit.customRules support #1173
- clear encryption conditions when there is no work to be done #1172
- Switch to auditpolicy controller #1155
- bootstrap: add –infra-config-file to render with SNO settings #1171
- alerts: give exact
oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert #1167
- remove observing token timeouts #1161
- disable apiextensions.k8s.io/v1beta1 and admissionregistration.k8s.io/v1beta1 #1162
- Set –cloud-provider=external for supported platforms #953
- Bug 1969633: pkg/operator/targetconfigcontroller: wait for kcm-o to generate certs before rollout #1169
- graceful-termination-duration: reduce to 15s for SNO #1168
- reduces shutdown-delay-duration to 0s for SNO #1164
- bump library-go to get context fixes #1163
- Bug 1964231: Ensure kubelet client cert change does not require a restart #1151
- Bug 1974716: SA token issuer observer: fix observing api-audiences #1158
- Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1150
- Bug 1956081: add sigterm handler to insecurereadyz #1149
- kube-apiserver failed to load SNI cert and key #1145
- Bug 1921139: Revert “remove override for fast cert rotation for release” #1147
- Bug 1921139: remove override for fast cert rotation for release #1143
- Bug 1946479: inject SA tokens as projected volumes to KAS install and prune pods #1142
- Bug 1953798: Fix incorrect ‘scope’ label in SLO recording rules #1144
- Bug 1907309: Add APF StorageVersionMigration manifest #1139
- Bug 1966410: alert: exclude kcm samples from removed API alerts #1141
- Bug 1967090: Revert webhookauth observer: set cache TTL to 30s #1140
- Bug 1967090: webhookauth observer: set cache TTL to 30s #1129
- Bug 1956606: Revert “Merge pull request #1060” (Use the flow schema introduced in upstream) #1099
- Bug 1953798: Add apiserver burn rate SLO alerts #1126
- Bug 1963730: Bump library-go for unrevisioned resourcs #1136
- Bug 1943804: increases termination timeouts for AWS #1079
- Bug 1957645: avoid warm loop for writing prometheus rules #1127
- Bug 1961173: bump(*): library-go update #1132
- Set proper root image in .ci-operator.yaml #1134
- Bug 1943804: split encryption tests #1131
- fixup ci-operator.yaml #1133
- Bug 1959513: add default policy, use lib go audit #1089
- Bug 1958094: Add flock to kube-apiserver startup #1128
- Add a nominal request to the kube-apiserver init container #1124
- Bug 1954937: update printer columns for apirequestcounts #1123
- Bug 1956081: Update bootstrap manifest namespace for SNO compatibility #1125
- Bug 1955226: update library-go to avoid CRD update loop #1121
- Bug 1955256: stop collecting deprecateapicount #1122
- Bug 1953798: stop doing live gets for optional cert syncer files that don’t exist on disk yet #1120
- Rename workload annotations #1111
- Bug 1949306: stop created deprecateapirequests #1115
- Bug 1953563: Add .ci-operator.yaml with build_root_image #1116
- Bug 1951637: don’t roll a new revision on tokentimeout changes #1109
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #1110
- Bug 1949956: add minreadyseconds to ensure we don’t have an LB outage on kas #1091
- Bug 1949306: collect new style counts #1107
- Bug 1949306: switch APIRequestCount from DeprecatedAPIRequest #1106
- Bug 1949591: tweak removed api in use alert expression #1044
- Add management workload annotations #1095
- Bug 1932165: variables in DeprecatedAPIInUse alert’s annotations.message are not parsed to existing values #1055
- Bug 1949418: bump(*): vendor update #1103
- Bug 1949593: rename DeprecatedAPIInUse alert to APIRemovedInNextReleaseInUse #1045
- Bug 1949306: add deprecated CRD manifest #1102
- Bug 1948431: Bump openshift/api to get the necessary CSIMigration feature gates #1098
- Update DeprecatedAPIInUse alert for new release. #1092
- bump(k8s.io/*): 1.21 #1080
- Bug 1909600: static-pods: retry failed installers #1035
- Bug 1939226: make kube-apiserver readiness checks, check readyz #1065
- Updating ose-cluster-kube-apiserver-operator builder & base images to be consistent with ART #1039
- Bug 1937916: add a flowschema to ensure that probes never get 429s #1060
- e2e token timeouts: remove the test that moved to CAO #1076
- config api-audiences along with SA issuer #1050
- Bug 1939227: make liveness hit livez #1066
- switch to v1beta1 for the p&f APIs #1028
- make KAS-o upgradable even when webhook authenticators are set #1052
- token inactivity e2e: wait for KAS to stop progressing #1047
- render initial SCC in addition to having the CVO reconcile #1049
- bump to get latest openshift api #1048
- clean up: uses a static encryption provider form the library-go #1043
- add DeprecatedAPIInUse alert #1018
- Speed up port reuse via SO_REUSEADDR #1046
- add rolebinding for delegated in-cluster authentication #1038
- Bug 1926465: bootstrap: add –advertise-address=pod.status.hostIP #1040
- Bug 1926867: competing connectivitycheckcontrollers cause pod restarts during upgrades #1036
- Bug 1920159: kube-apiservers overstate steady-state CPU needs slightly #1032
- Remove tnozicka and add soltysh to OWNERS #1034
- Bug 1910140: fix the api dashboard with changes in upstream kube 1.20 #1024
- Bug 1914287: bring selflinks back for 4.7, they will be removed in 4.8 #1023
- Bug 1906808: follow-up fixes to SA-issuer observer #1025
- Bug 1887392: bump kube to 0.20.1 and lib-go to master to pick up authn/z caching #1027
- Bug 1906808: configobservation: override service-account-jwks-uri to use LB address #1020
- Bug 1902059: bootstrap: always wire bound SA keys #1019
- Bug 1907951: connectivitycheckcontroller: bump #1016
- add api performance dashbord to openshift console #1005
- remove priority config openshift-aggregated-api-delegated-auth #1007
- clean up: use WaitForAPIServerToStabilizeOnTheSameRevision from library-go #1014
- Annotate manifests for single-node-developer cluster profile #1015
- Always set service-account-issuer flag #1013
- Support user provided service-account-signing-key and issuer #1012
- Bug 1900635: Revert “Merge pull request #1006 from abhinavdahiya/user-provided-sa-signing-key” #1011
- Bug 1895959: don’t allow upgrades when webhooktokenauthenticators are set #1009
- Support user provided service-account-signing-key and issuer #1006
- Add IBM Cloud managed annotations to CVO manifests #1008
- token webhook auth: set tokenreview API to v1 #1004
- picks up setting
TCP_USER_TIMEOUT socket option #1001
- Revert “Set dnsPolicy ClusterFirstWithHostNet to match hostNetwork” #1002
- Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #1000
- Restrict log permissions #995
- bump library-go for static pod uid #993
- Bug 1888861: set servicesSubnet correctly in dual-stack clusters #986
- connectivitycheckcontroller: disable by default #989
- add current profile annotations to CVO manifests #983
- Bug 1889308: Set dnsPolicy ClusterFirstWithHostNet to match hostNetwork #987
- Revert “connectivitycheckcontroller: disable by default” #971
- Bug 1888015: bump library-go to pick up static pod graceful timeout workaround #981
- Bug 1876166: need to be able to disable kube-apiserver connectivity checks #978
- operator: add kube-system to informers for namespaces #977
- Updating ose-cluster-kube-apiserver-operator builder & base images to be consistent with ART #970
- watch-termination: set graceful termination period explicitly #965
- protect openshift traffic by using dedicated flowschema #966
- Full changelog
- Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #592
- Bug 2005901: Sync library go #591
- Bug 2037856: bump library go #590
- Bug 2040132: drop –port flag #589
- Bug 2005901: Bump library-go #588
- Bug 2038968: bump(openshift/api): to get CSI migration gates switched off #587
- Bug 2035986: Replace deprecated annotation #586
- Bug 2005901: Guard controller pdb #568
- Bug 2034484: fix:library-go nil pointer issue #585
- bump k8s to 1.23 #581
- bump(library-go): to gather a fix for static pod UID version #579
- Bug 2026352: Sync with the latest openshift/library-go@master to pick pruner cert dir check #578
- Collect kube-system namespace as a related resource to kube-controller-manager operator #577
- update KCM metrics service selector #575
- Revert “Merge pull request #554 from atiratree/cpc-metrics” #574
- Bug 2010352: add summary, description and namespace to prometheus alerts #573
- introduce creation of openshift-infra ns and recycler SA #570
- collect metrics for cluster-policy-controller #554
- Fix gomod #572
- Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #563
- bump(*): vendor update #571
- bump(openshift/api): to get fix for typo in feature gate #569
- Set operator condition that it doesn’t own cloud provider #558
- Switch from experimental-cluster-signing-duration to cluster-signing-duration #567
- Bump library go for enabling gcp and vsphere platforms ccm #566
- podsecurity: enforce privileged for openshift-kube-controller-manager namespace #565
- Bug 2001856: bump library-go and dependencies #562
- Bug 1986829: metrics: use client cert auth for metrics scraping #556
- Bug 1989073: Exclude openshift only CloudProvider feature gate from KCM config #555
- Bug 1986003: Bump k8s.io to 1.22.0-rc.0 #550
- Bug 1986437: Bump github.com/openshift/api #551
- Cloud Volume Observer: Extended arguments must be a slice #552
- remove unused cluster-policy-controller configuration #553
- Add ObserveCloudVolumePlugin config observer for KCM config #525
- update cluster-policy-controller configuration #545
- fix clusterroles for the CSR approver #548
- allow upgraded clusters to use the vulnerable service-ca.crt #546
- Start using embed module for assets #547
- Bump openshift/api #542
- Set –cloud-provider=external for supported platforms #450
- Refactor remaining controllers to factory #541
- Bug 1965562: recycler-for-nfs-… does not set requests or priorityClassName #538
- bump library-go to get context fixes #540
- Update OWNERS #539
- AUTH-26: CSR Approver manifests #535
- Bug 1963730: kube-apiserver failed to load SNI cert and key #532
- Bug 1938636: Set logLevel for policy and recovery controllers #511
- Bug 1954790: pdb: Increase PDBAtLimit timeout #534
- Bug 1946479: manifests: use manual service account mounts #531
- Bug 1954790: Use appropriate metric for PDB alerts #527
- Bug 1966126: manifests: drop root_ca_cert_publisher_sync_duration_seconds metric #526
- Bug 1963079: a smoke test for preferred host for KCM #510
- Bug 1961173: bump(*): vendor update #524
- Rename workload annotations #521
- Bug 1953563: Makefile: add verify-golang-versions #523
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #522
- Add management workload annotations #516
- Bug 1949418: bump(*): vendor update #519
- Remove tnozicka from OWNERS #502
- Bug 1948431: Bump openshift api version to get CSIMigrationXXX feature gates #518
- bump(k8s.io/*): 1.21 #515
- update library-go to fix tight loops #514
- Migrate to using keypair generation and validation from library-go #512
- Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #513
- defines test-e2e-preferred-host job for running smoke tests to check if KCM talks to Kube over a preferred host #509
- Bug 1934132: Bump github.com/gogo/protobuf to v1.3.2 #507
- Bug 1844989: Allow to set –tls-cipher-suites and –tls-min-version of KCM instances through observed config #506
- Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #504
- Bug 1911211: Update build-machinery-go to the latest master HEAD #505
- fixes Developing and debugging the operator section in the readme file. #503
- Bug 1920159: Adjust CPU request for controller manager more precisely #500
- Extend OWNERS #499
- Bug 1915304: Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #495
- Bug 1911211: Fix version reporting for recovery-controller #497
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #487
- Bug 1915500: support custom CA bundle for AWS C2S #494
- Bug 1841119: apply extendedArguments directly to kcm in bootstrap #492
- Bug 1887392: bump lib-go to master to pick up authn/z caching #491
- Bug 1907375: bump(*): k8s 1.20 #489
- Bug 1912888: Add recycler pod template as a ConfigMap #488
- sets cluster-policy-controller log level to Normal (-v=2) #485
- Bug 1898159: do not set allocate-node-cidrs, which is handled by ovn and sdn #480
- bump(k8s.io): to 1.20.0-beta.2 #483
- Add IBM Cloud managed annotations to CVO manifests #481
- Bug 1841119: Apply extendedArguments directly to kcm #471
- picks up setting
TCP_USER_TIMEOUT socket option #478
- Revert “Set dnsPolicy ClusterFirstWithHostNet to match hostNetwork” #479
- add current profile annotations to CVO manifests #477
- Bug 1890724: Reduce OperatorStatusChanged event noise for staticpod controller #472
- Bug 1889308: Set dnsPolicy ClusterFirstWithHostNet to match hostNetwork #469
- Bug 1888015: bump library-go to pick up static pod graceful timeout workaround #467
- Transfer build-root control to the repository #466
- Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #463
- Bug 1886022: add new apigroup to rendered clusterrole copy #462
- Full changelog
- Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #401
- Bug 2039414: Update KubeSchedulerConfig to v1beta3(default in 1.23) #395
- Bug 2005901: Sync the library-go #397
- Bug 2033751: Return Error when trying to use Scheduler Policy #390
- Bug 2040132: drop –port flag #398
- Bug 2035927: Replace NodeResourcesLeastAllocated/NodeResourcesMostAllocated plugins with NodeResourcesFit #392
- Bug 2005901: Bump library-go #396
- Bug 2038968: bump(openshift/api): to get CSI migration gates switched off #394
- Bug 2005901: Guard controller pdb #373
- Bug 2034515: bump library-go #388
- Upgrade library-go version #387
- Bump to k8s 1.23 #386
- bump(library-go): to gather a fix for static pod UID version #384
- Bug 2026352: Sync with library-go to pick fixes for pruner panic #383
- Bug 2002300: Disable balancedAllocation and add weight for HighNodeUtilization profile #378
- update scheduler metrics service selector #382
- Fix gomod #377
- Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #375
- bump(*): library-go #376
- bump(openshift/api): to get fix for typo in feature gate #374
- Bug 2010354: Make alert consistent with the alerting-consistency guidelines #372
- podsecurity: enforce privileged for openshift-kube-scheduler namespace #371
- Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #369
- Bug 2001856: bump libgo and related deps #368
- Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #367
- Bug 1984608: Set kube-scheduler leader election defaults #365
- Bug 1986829: metrics: use client cert auth for metrics scraping #364
- Bug 1986003: Bump k8s.io to 1.22.0-rc.0 #362
- SchedulerLegacyPolicySet: add 60 min wait #363
- Fire SchedulerLegacyPolicySet alert when the legacy scheduler policy API is set #361
- Start using embed module for assets #360
- Bump openshift/api #359
- operator: move target config controller to factory #358
- bump library-go to get context fixes #357
- Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #356
- Bug 1963730: kube-apiserver failed to load SNI cert and key #354
- Bug 1946479: use manual service account tokens #355
- Added more complete unit tests #352
- Bug 1963079: Add e2e test for preferred host #351
- Bug 1953563: Enable golang version verify target #349
- Transfer root-image configuration to this repository #350
- Bug 1954087: added test for manage config maps in targetconfigcontroller #346
- Rename workload annotations #347
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #348
- Add management workload annotations #343
- Bug 1949364: Mention scheduling profiles #345
- Bug 1948431: Bump openshift/api to get the necessary CSIMigration feature gates #344
- passing additional args to kubernetes-scheduler #336
- servicemonitor: Relabel kube_podresource* pod/namespace labels #340
- bump(k8s.io/*): 1.21 #342
- Fix development readme to refer to actual pod/container #339
- update library-go to fix tight loops #341
- defines test-e2e-preferred-host job for running smoke tests to check if KS talks to Kube over a preferred host #338
- Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART #337
- Bug 1938468: Specify cpu resource request for kube-scheduler-operator-container container #335
- Bug 1934154: Bump github.com/gogo/protobuf to v1.3.2 #333
- Bug 1844989: Set –tls-cipher-suites, resp. –tls-min-version only when the fields under servingInfo observedConfig are found #332
- Bug 1844989: Allow to set –tls-cipher-suites and –tls-min-version of KS instances through observed config #331
- Bug 1926579: Move warning about deprecated spec.policy field #330
- Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART #329
- Remove tnozicka and ravi from OWNERS #328
- Bug 1920619: bump(*): remove default scheduler profile #326
- Bug 1920509: Use ss instead of lsof when waiting for ports #324
- Bug 1915304: Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART #321
- Bug 1889488: Have probes listen to secure ports #316
- Bug 1891068: manifests: add missing profile annotations #319
- Bug 1887392: bump kube to 1.201 and lib-go to master to pick up authn/z caching #313
- Bug 1908145: Change recovery-controller port to avoid conflicts #311
- Bug 1907998: Collect /metrics/resources from scheduler #283
- Bug 1905327: specify cpu and memory resources for initContainers #310
- Annotate manifests for single-node-developer cluster profile #309
- Switch to profiles #307
- Bug 1881322: Sync new kube-scheduler-client-cert-key on recovery #288
- bump(k8s.io): to 1.20.0-beta.2 #305
- Add IBM Cloud managed annotations to CVO manifests #304
- Revert “Set dnsPolicy ClusterFirstWithHostNet to match hostNetwork” #303
- picks up setting
TCP_USER_TIMEOUT socket option #302
- add current profile annotations to CVO manifests #301
- bump library-go for static pod uid #295
- Bug 1890724: Reduce OperatorStatusChanged event noise for staticpod controller #294
- Bug 1889308: Set dnsPolicy ClusterFirstWithHostNet to match hostNetwork #293
- Bug 1888015: bump library-go to pick up static pod graceful timeout workaround #291
- Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART #289
- Full changelog
- Bug 2034484: fix: library-go nil pointer issue #81
- Upgrade library-go version #80
- OWNERS: add sanchezl #75
- cleanup kube-storage-version-migrator-operator #73
- OWNERS: add Abu and Lukasz as approver #74
- manifests: remove special runlevel #70
- Bug 1928141: kube-storage-version-migrator constantly reporting type “Upgradeable” status Unknown #71
- Bug 1928141: kube-storage-version-migrator constantly reporting type “Upgradeable” status Unknown #64
- Bug 1986418: bump library-go dependency to use SNO leader election defaults #63
- pkg/operator: fix typo starter clusteroperator #62
- Updating .ci-operator.yaml
build_root_image from openshift/release #60
- README: Stub in brief purpose docs #44
- Bug 1962687: manifests,assets: set runAsUser to not run as root #58
- Bug 1957908: stop reporting empty version #57
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #56
- Bug 1947801: Switch to v1 upstream CRDs #55
- Add management workload annotations #52
- Bug 1953539: Set priorityClassName: system-cluster-critical #54
- Add IBM cloud managed profile manifest patch #51
- add storageversionmigrations to related objects #42
- Bug 1881938: migrator deployment doesn’t tolerate masters #31
- Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #43
- Bug 1920159: CPU request for migrator should not be higher than average use #41
- Add IBM Cloud managed annotations to CVO manifests #35
- picks up setting
TCP_USER_TIMEOUT socket option #34
- add current profile annotations to CVO manifests #33
- Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #32
- Full changelog
- Bug 2028019: Account for large scale simultaneous renewal on UPI clusters #152
- Bug 2032926: Update dependencies to K8s 1.23 #149
- update to golang 1.17 #140
- OWNERS: remove old team members, add new ones #145
- Replace certificates with generated certificactes #144
- Bug 2010359: add summary and description to alerts #138
- Bug 1860774: Allow fallback to serving cert renewal accounting for egress IPs on SDN #137
- Bug 2013528: Ensure pending CSR count is valid post approval #135
- add leader election options #133
- add commandline flag for status controller #132
- podsecurity: enforce privileged for openshift-cluster-machine-approver namespace #134
- add machine-namespace #131
- Bug 2003788: Prevent error loop when a CSR is queued and then approved externally #129
- Add support for unstructured machines #114
- Bug 1994480: Update dependencies to K8s 1.22 #128
- Ensure must-gather tracks related objects on failures #126
- manifests/0000_90_cluster-machine-approver_04_alertrules: Drop ClusterMachineApproverDown #112
- Updating ose-cluster-machine-approver images to be consistent with ART #125
- Updating .ci-operator.yaml
build_root_image from openshift/release #124
- fixing the link in the README.md of csr_check.go #109
- Bug 1956609: Use a direct client for uncached reads #123
- Bug 1956609: Bypass cache when reading Node and Machine objects #121
- Bug 1948719: update controller-runtime dependency #119
- Add management workload annotations #110
- Bug 1952282: Ensure serving certs requeued #118
- Bug 1940972: Increase cache resync period to 10 min instead of 10 hours #117
- Bug 1948719: update dependencies to 1.21 #115
- Bug 1949741: bump golang versions #113
- Bug 1947785: Move certificates to v1 #111
- Add IBM Cloud managed annotations to CVO manifests #93
- Enable running make targets inside container #107
- Refactor logging and error handling #108
- Bug 1923823: Improve TLS configuration for Kube RBAC Proxy #105
- Refactor csr approver to use controller runtime #101
- Bug 1909108: Bump K8s dependencies to 1.20 #100
- Bug 1907380: Reduce verbosity of kube-rbac-proxy logging #98
- Increase test coverage in CSR approval #95
- Annotate manifests for single-node-developer cluster profile #97
- Bump scripts to Go 1.15 #96
- Updating ose-cluster-machine-approver builder & base images to be consistent with ART #94
- add current profile annotations to CVO manifests #92
- Full changelog
- Mon 2172: Add clusterrole for editing alertmanagerconfigs #1545
- Remove UI access to AlertManager #1529
- Remove UI access from the Thanos routes #1512
- Bug 2038419: Bump Grafana to 8.3.4 and handle datasource migration #1543
- Bug 2030347: kube-state-metrics exposes metrics about resource annotations #1544
- Bug 2026489: Add runbook url for ThanosRuleRuleEvaluationLatencyHigh alert #1542
- Bug 2037891: Reverting the secureJsonData change for the grafana password #1539
- Bug 2039119: assets: let CVO manage the CMO Service resource #1537
- Reconcile AlertManagerConfig in UWM from platform Prometheus #1527
- manifests: Support thanos query requst logging via CM #1513
- Bug 2037073: pkg/manifests: account for slow DNS resolutions #1531
- Bug 2037891: Changing the grafana data source secret to be updatable. #1533
- BUILD-345: Added csi shared resource metrics to telemetry #1477
- Bug 2036717: [bot] Automated dependencies version update #1526
- Bug 2036717: [bot] Automated jsonnet dependencies update #1525
- Bug 2012426: Add namespace label for all thanos alerts #1524
- Mon 1858: Enable silence KubePersistentVolumeFillingUp via PVC label #1493
- Enable the /api/v1/series endpoint on the Thanos tenancy port #1519
- Bug 2033751: Bump go dependencies to latest version #1523
- Bug 2034192: [bot] Automated dependencies version update #1522
- jsonnet: pin dependencies to their latest release branches #1518
- MON-2089: Ensure we can identify the source of alerts from Platform Prometheus #1508
- Bug 2008540: remove alert HighlyAvailableWorkloadIncorrectlySpread #1488
- Bug 2015386: Enable PDB label metric #1516
- Automated dependencies version update #1517
- Automated dependencies version update #1515
- Automated dependencies version update #1511
- Bug 2027272: Humanize bytes value for KubeMemoryOvercommit #1506
- test/e2e/framework: retry configmap actions #1507
- upgrade unused rule checking script #1354
- fix test go-fmt for go 1.17 #1497
- Automated dependencies version update #1504
- MON-1656: removing all the check tasks from other targets #1499
- hack/local-cmo.sh: fix CVO override #1498
- client: check all OwnerRefs on a service #1496
- Bug 2018880: Bug 2021021 Bug 2022612 [bot] Automated jsonnet dependencies update #1491
- Document Prometheus Adapter audit log configuration #1490
- Bug 1953264: client: don’t update resource fields that are managed externally #1495
- fix generate-versions.sh to fetch version from packages.json #1485
- pkg/operator: move config sharing task at the end #1494
- MON-1656: adding new target to makefile for verification #1492
- Support enabling the
query_log_file config for Prometheus #1373
- Update list of metrics used by openshift-team-cluster-manager #1487
- MON-1872: Use kube-thanos jsonnet libs for thanos ruler #1478
- Upgrade Prometheus-Operator to 0.52 #1468
- Bug 1933847: enable hard affinity + PodDisruptionBudget for Prometheus and Thanos Ruler pods #1341
- Add metrics for Node Tuning Operator to telemetry #1484
- MON-1659: adding relatedObjects to cluster operator manifest #1483
- test/e2e: fix assertTenancyForLabels test #1480
- Fix TestUserWorkloadMonitoringAlerting for Prometheus Operator v0.52 #1479
- Update make target name for Documentation/telemetry/telemeter_query #1482
- Bug 2016435: Removing one of the AlertmanagerClusterFailedToSendAlerts alerts #1481
- Updating cluster-monitoring-operator images to be consistent with ART #1475
- pkg: Implements tlsSecurityProfile to remaining components using kube-rbac-proxy #1474
- Bug 2019992: Bump jsonnet dependencies to latest #1455
- Enable audit logs by default for Prometheus Adapter #1377
- pkg: add tlsSecurityProfile to kube-rbac-proxy in node-exporter #1470
- pkg: add tlsSecurityProfile to kube-rbac-proxy in prometheus-operator #1466
- add E2E test checking image registry is well replaced for containers. #1430
- run-local: harden -images switch retrieval #1465
- pkg: add tlsSecurityProfile to kube-rbac-proxy in OSM #1464
- Bug 2015386: jsonnet: Add PodDisruptionBudget to KSM metric allow list #1439
- pkg: add tlsSecurityProfile to kube-rbac-proxy in KSM #1454
- Bug 2015418: Keep container_fs_usage_bytes metric #1460
- Bug 1939401: Add app.kubernetes.io/managed-by label for pods #1442
- Bug 2016352: Fix cert injection #1451
- changes for prometheus-adapter to honor global tlsSecurityProfile #1453
- OWNERS: cleanup #1456
- Switch hosted control plane check to controlPlaneTopology #1445
- Bug 2012915: Bump kube-state-metrics to v2.2.3 #1452
- static auth changes for uwm prometheus operator #1450
- static auth changes for prometheus operator #1447
- Replace “app” selector with “app.kubernetes.io/name” for Prometheus Operator #1388
- Bug 2016235: upgrading grafana version to 7.5.11 #1446
- Bug 1808240: prom-label-proxy: set –error-on-replace #1400
- pkg/client/client.go: Remove dead code #1443
- Replace bearer token by client TLS certificate for metrics scraping #1392
- pkg: remove dead code #1438
- Change kube-rbac-proxy authentication for UWM Prometheus #1411
- MON-1949: changes for prometheus adapter to use thanos-querier instead of prome… #1417
- Remove prom-label-proxy from Prometheus #1406
- Bump prometheus v2.30.3 #1434
- Bump prometheus operator to v0.51.2 #1432
- manifest: add tls cross-signing test #1347
- BUG 2006767: Updates KubePodCrashLooping expression #1423
- Bug 2012915: add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels #1424
- KSM: add kube_*_annotations to –metric-denylist arg #1426
- Bug 1995924: Revert “Merge pull request #1330 from dgrisonnet/ha-upgradeable” #1425
- Bug 1995924: Set
Upgradeable: false when HA workloads are incorrectly spread #1330
- MON-1873: Tag e2e test resources #1397
- Bug 2011698: Allow namespace label in metric allow list #1421
- Add aliases for doc, qe, px approvers #1412
- Bug 2005971: Add metrics for Application Services metering #1390
- Bug 2006561: Prometheus when installed on the cluster shouldn’t have failing rules evaluation #1401
- Bug 1942913: Make ThanosSidecarNoConnectionToStartedPrometheus resilient to WAL replays #1399
- static auth changes for telemeter client #1405
- podsecurity: enforce privileged for openshift-monitoring namespace #1413
- Bug 2008911: Revert “Configure prometheus operator TLS based on the cluster APIServer config” #1407
- docs: new development doc for new comers #1369
- chore: update versions according to downstream latest #1396
- Add cluster:vmi_request_cpu_cores:sum into Telemetry #1384
- Bug 2007677: Adjust dropped cAdvisor metrics #1402
- MON-975: Descope possible RBAC rules to monitoring namespaces #1338
- Cleanup of e2e tests for consistency #1378
- expose /api/v1/labels end point for Thanos query. #1299
- Bug 2007677: Reinstate dropped metrics #1395
- Bug 2004051: changing the condition for error in daemon set creation #1385
- static auth changes for node-exporter #1393
- Bug 1989438: changing error message to indicate deployment status #1322
- static auth changes for osm #1389
- Updating cluster-monitoring-operator images to be consistent with ART #1386
- Remove extraneous file commited during rebase #1383
- Bug 1939401: [4.9] Add Labels to telemeter, openshift-state-metrics, thanos-querier #1205
- issue template kube-prometheus location: coreos -> prometheus-operator #1332
- Bug 2001566: enabling alerts for prometheus operator in uwm #1370
- Updating cluster-monitoring-operator images to be consistent with ART #1381
- MON-1218: adding owners file for telemetry query #1379
- MON-1679: adding static auth to KSM #1318
- Update dependencies to pull prometheus-operator 0.50 changes #1374
- fix typo Wether–>Whether #1335
- OWNERS: move @paulfantom to emeritus section #1358
- Format the codebase and fix shellcheck #1368
- Bug 2000490: jsonnet: Drop unnecessary kube-state-metrics alerts #1366
- test:e2e: Split UWM tests and cleanup duplicated tests across e2e config #1280
- Bug 1997028: drop [$(POD_IP)] from –grpc-address argument for thanos sidecar #1367
- Bug 1987263: fsSpaceFillingUpWarningThreshold not aligned to Kubernetes Garbage Collection Threshold #1364
- Bug 1999521: Use secureJsonData.basicAuthPassword field for Grafana authentication #1363
- test/e2e: add remote_write http e2e test #1328
- Bug 2000490: Add runbooks for all critical alerts #1356
- Bug 1996785: [MON-1536]Remove unused rules. #1316
- Bug 1999397: Bump prom 2.29.2 #1353
- Bug 1991504: changes for moving from sha1 to bcrypt #1336
- Bug 1995614: Fix beta.kubernetes.io/os deprecated warning #1348
- MON-1688: Expose remote write #1308
- Bug 1995695: Get insights on series churn during upgrades #1313
- Bug 1997972: pin dependencies for upcoming relase #1340
- Bug 1997528: remove use of etcd_object_counts metric #1345
- Bug 1996941: adding label check for node when creating daemon set #1339
- Bug 1997475: Makefile: increase timeout for e2e tests #1343
- jsonnet: Add missing namespace labels to alerting rules #1319
- Bug 1996718: Fix ksm metric label allowlist flag #1337
- jsonnet: Support exluding namespaces from user-workload monitoring #1312
- Bug 1986981: Alert Config update - Patch to PR#1310 #1317
- Bug 1984365: Dashboard Prometheus/Overview can’t filter instance by job #1324
- Bug 1956830: Update prometheus-adapter to v0.9.0 #1325
- Bug 1992493: jsonnet:rules: Adds missing summary and description to rules. #1327
- Bug 1994222: Add metrics for jaeger-operator #1306
- Bug 1993055: Fix node_exporter task error message #1321
- Bug 1992567: jsonnet: cleanup jsonnet codebase and align with kube-prometheus #1315
- MON-1099 Improving error reporting to show all task failures #1238
- Bug 1986981: Update Alert Configs #1310
- MON-1749: Allow users to disable the local Alertmanager #1293
- Bug 1990258: cleaning up Makefile #1311
- Bug 1987197: hack,jsonnet: Better version checker #1298
- Bug 1988291: pkg/client/client.go: Add retry logic for daemonset create #1307
- Bug 1973491: jsonnet: update deps #1302
- Bug 1987143: Update prometheus resources label to 2.28.1 #1303
- Bug 1986840: track number of active alertmanager receivers via telemetry #1209
- Bug 1986375: adding check for node exporter daemon set #1279
- Bug 1973576: Bump thanos to v0.22.0 #1297
- Remove context field from structs #1290
- Bug 1978091: fix node_exporter recording rules for cluster network dashboards #1296
- Remove manual CRI-O metrics modification #1287
- Allow configuring additional alertmanagers for UWM Prometheus and Thanos #1271
- Documentation: fix a typo #1295
- Add new label to show grafana dashboards in ODC #1294
- generate client key and certificates #1282
- No apiserver rules #1292
- Send etcd telemetry rules #1281
- jsonnet: Sync with kube-prometheus #1291
- Bug 1978662: Set a degraded message when persistent storage is not configured #1270
- Remove use of deprecated APIs being removed in Kubernetes v1.22 #1286
- Fix shellcheck errors #1284
- Cleanup telemetry owners #1273
- BUG 1980888: jsonnet: Favour http probes for thanos querier #1277
- Remove context.TODO() and propagate real context #1254
- pkg/manifests: Add EnforcedTargetLimit for user-workload monitoring #1278
- Bug 1956308: Fix deployment update with retry option #1257
- client: Always set OperatorUpgradeable reason to AsExpected #1275
- jsonnet: Enable federated targets in thanos-querier #1274
- Bug 1947005: changing alert manager access rules #1217
- Bug 1974832: Improve HighlyAvailableWorkloadIncorrectlySpread to detect single point of failure #1262
- Bug 1949840: Improve update and status reporting #1193
- jsonnet: pull latest deps #1269
- Bug 1978829: alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… #1268
- Remove logging from the mixins namespace selectors #1266
- Bug 1977435: jsonnet: bump prometheus-operator to v0.49.0 #1267
- Bug 1974830: Update KubeDeploymentReplicasMismatch alert #1261
- operator: Allow disabling Grafana deployment #1241
- Bug 1972076: jsonnet: Disable cpufreq collector in node_exporter #1229
- Bug 1974832: Add HighlyAvailableWorkloadIncorrectlySpread alert #1242
- Revert “Bug 1974830: Update KubeDeploymentReplicasMismatch alert” #1259
- Improve monitoring telemetry rules #1227
- Extend E2E tests to cover user facing config #1218
- *: improve discovery of currently used component versions #1235
- Bug 1974830: Update KubeDeploymentReplicasMismatch alert #1253
- Allow configuration of the log level for Alertmanager in the CMO configmap #1256
- Bug 1974651: Remove :apiserver_v1_image_imports:sum #1239
- AggregatedAPIDown alert threshold set back to 85% #1237
- Makefile: add check to verify runbook urls #1246
- Remove context.TODO() from client_go method calls #1240
- Revert “alert:KubeDeploymentReplicasMismatch: only fire if cluster is in ready state” #1249
- hack: Remove python script that diffs jsonnet #1247
- Makefile: update $(JSONNET_VENDOR) dependencies #1248
- alert:KubeDeploymentReplicasMismatch: only fire if cluster is in read… #1245
- jsonnet: pull latest deps #1244
- jsonnet: remove unused remove-runbook script #1243
- jsonnet/control-plane.libsonnet: Remove etcd rules #1233
- Sync with kube-prometheus #1236
- Add RHODS Usage and Availability metrics #1232
- jsonnet: Generate CMO ClusterRole with jsonnet #1230
- Bug 1970147: jsonnet: disable insecure cypher suites for prometheus-adapter #1234
- Makefile: drop test-rules from test-unit target #1137
- Correct serverName json tag #1226
- test/e2e: make tests more resilient to hiccups #1231
- Updating cluster-monitoring-operator images to be consistent with ART #1225
- jsonnet: unlock dependencies for 4.9 development cycle #1214
- Update OWNERS file to reflect new maintainers #1215
- pkg/client: Retry on API errors in polling methods #1194
- jsonnet: Run jb rewrite to convert to absolute paths #1224
- hack: do not use shellcheck container #1196
- Updating .ci-operator.yaml
build_root_image from openshift/release #1216
- hack,test: Use new ghcr.io images for prometheus-example-app #1188
- More robust local CMO script #1181
- Bug 1967803: update Grafana version to 7.5.5 #1210
- Bug 1970624: jsonnet: reduce threshold of AggregatedAPIDown #1211
- Extended PrometheusK8sConfig and PrometheusRestrictedConfig with AdditionalAlertManagerConfigs #1132
- Bug 1949711: Ignore failures from prometheusrules.openshift.io webhook #1203
- Bug 1955589: add PodDisruptionBudget to ThanosQuerier to meet HA requ… #1202
- Bug 1964332: upgrade prometheus to version 2.26.1 #1208
- Bug 1967614: Remove PDB for prometheus and alertmanager #1204
- Bug 1967614: Revert anti-affinity to soft #1198
- Bug 1879495: jsonnet: update prometheus-operator to 0.48 #1187
- Bug 1933708: Add deployment config in recording rule #1192
- Bug 1945500: Bump thanos version to v0.20.2 #1190
- Bug 1966654: pkg/tasks: fix creation of alertmanager PDB #1189
- Bug 1958367: Add recording rule for builds by strategy #1136
- Bug 1964334: guard monitoring related /metrics endpoint from unauthorised access #1183
- Bug 1957190: use NamespaceSelector instead of explicit allow/deny list #1168
- Bug 1965367: pkg/operator: Fix typo in etcd-metric-serving-ca resource name #1185
- Bug 1958016: should update to 0.47.1 for prometheus-operator resources label #1182
- Bug 1961081: update pdb apiversion to v1 #1184
- Bug 1961081: update PodDisruptionBudget api version to policy/v1 #1179
- Bug 1953798: Remove the upstream KubeAPIErrorBudgetBurn alerts #1164
- Bug 1962172: increase scrape timeouts for kubelet endpoints #1175
- Bug 1963833: don’t attempt to delete nil PodDisruptionBudget object #1176
- Bug 1960767: Protect Grafana metrics endpoint #1165
- Bug 1962261: further adjust memory usage #1172
- Bug 1955478: fix regex patterns in kube-state-metrics deny list #1173
- Bug 1933847: Manage PodDisruptionBudget objects #1151
- Bug 1959278: Remove obsolete user-workload ServiceMonitor #1166
- Bug 1962261: jsonnet: consolidate memory requests for all resources #1158
- Bug 1952744: Remove obsolete prometheus service monitor #1146
- Bug 1953647: Add prometheus-adapter PodDisruptionBudget #1149
- Bug 1958015: jsonnet: fix setting resource limits on config-reloader containers #1152
- Bug 1955445: drop more CRI-O metrics #1148
- Bug 1957832: remove dependency of e2e tests on AWS #1143
- Bug 1950908: Allow all pod labels in metric labels #1145
- Bug 1955478: drop high-cardinality metrics from kube-state-metrics which aren’t used #1142
- Bug 1955051: Update kube node status capacity metric #1140
- Bug 1955467: remove node_mountstatsnfs* metrics #1139
- Bug 1940933: Revert “jsonnet: make AggregatedAPIDown more resilient” #1120
- Bug 1946865: Update kube prometheus and related assets #1127
- Bug 1955445: fix dropped crio metrics #1133
- Bug 1955457: drop container_memory_failures_total metric #1131
- Bug 1949262: jsonnet: add hard anti-affinity to Prometheuses #1135
- Rename workload annotations #1123
- Bug 1948711: Apply HA conventions to prometheus-adapter and thanos-ruler #1124
- Bug 1952032: jsonnet: add format changes made by make jsonnet-fmt #1129
- Bug 1951052: drop CRI-O image metrics #1125
- Bug 1951505: Remove deprecated techPreviewUserWorkload #1126
- Bug 1950761: Revert: jsonnet: apply HA conventions #1122
- Bug 1945677: manifest allowlist: add acm_managed_cluster_info #1102
- BUG 1949145: Delete 0000_50_cluster-monitoring-operator_00_0user-priority-class.yaml #1115
- Bug 1948711: jsonnet: apply HA conventions #1119
- Bug 1948082: Set unavailable message #1112
- Add management workload annotations #1109
- Bug 1940933: jsonnet: make AggregatedAPIDown more resilient to OCP upgrades #1117
- Bug 1920700: Bump prometheus-adapter to v0.8.4 #1113
- Refactor proxy config #1108
- Update denied metrics for kube-state-metrics #1104
- IBM Cloud manifest profile patch #986
- Bug 1934516: Change prometheus priority class to system-cluster-critical again #1110
- Bug 1938465: increase CPU requests for Thanos querier #1106
- Bug 1943667: fix alert description #1100
- Bug 1944974: remove KubeControllerManagerDown and KubeSchedulerDown alerts #1098
- Bump kube-state-metrics to v2.0.0-rc.1 #1099
- jsonnet: replace external commit import #1092
- Bug 1943667: increase for duration of KubeDaemonSetRolloutStuck #1094
- Remove kube-state-metrics flag temporary #1095
- Bug 1932624: jsonnet/rules,pkg/operator: use gauge based reconcilation state metrics and alerting #1078
- Bug 1934163: adjust Thanos querier alerting rules #1087
- OWNERS: add Jan #1089
- Updating cluster-monitoring-operator builder & base images to be consistent with ART #1088
- Bug 1921335: Fix and adjust ThanosSidecarUnhealthy alert #1090
- Adapt deployment mode based on the infrastructure topology #1077
- hack: add check script for unused rules #1082
- Add jsonnet function to patch upstream rules #1073
- jsonnet: fix etcd mixin import #1084
- Bug 1933805: TargetDown should exclude unschedulable nodes #1072
- *: include all groups when testing prometheus rules #1081
- Run jsonnet-fmt #1079
- Bug 1925061: Remove the “instance” and “pod” labels for kube-state-metrics metrics #1052
- Bug 1923984: Refactor jsonnet to include latest kube-prometheus #1044
- Bug 1929056: Remove kube-apiserver-availability.rules #1068
- pkg/manifests: fix data race when accessing assets #1054
- jsonnet/rules: Mask KubeDeploymentReplicasMismatch alert for upgrade #1065
- Bug 1929944: etcdInsufficientMembers is wrong when etcd is in a pod #1064
- Bug 1929277: [master] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus #1063
- Updating cluster-monitoring-operator builder & base images to be consistent with ART #1050
- Bug 1920901: pkg/manifests: fix prometheus-proxy trustedCA #1047
- docs(data-collection): add newlines for visibility #1031
- Bug 1913386: allow only /metrics for kube-rbac-proxy in front of UWM prometheu #1046
- Bug 1913006: Removing etcd v2 specific alerts #1029
- jsonnet: remove ksonnet #1042
- Bug 1905330: Add missing CPU and memory requests #1041
- Bug 1905141: Add vsphere-problem-detector to telemetry #1037
- Bug 1914090: jsonnet: remove Ceph block devices in rules #1039
- Bug 1915003: Add a rule for calculating rolling node readiness #1032
- Updating cluster-monitoring-operator builder & base images to be consistent with ART #1038
- Bug 1916056: manifest allowlist: add ACM metric #1035
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #1003
- Bug 1905393: manifests: use rbac.authorization.k8s.io/v1 #1033
- Bug 1913554: Ingress recording rule for error fraction is incorrect #1030
- Bug 1907475: Add recording rules for ingress traffic and error rate #1019
- Bug 1908342: Add pv_collector_total_pv_count storage metric #994
- Bug 1905647: Calculate physical CPU core seconds used for consumption and report via telemetry #1004
- Bug 1899839: jsonnet/thanos-ruler.jsonnet: Set resources to the native spec field #1023
- Bug 1908562: Add a recording rule measuring pod readiness #1020
- MON-1302: hack/tools/go.mod: bump prometheus #1021
- Update release checklist template #1011
- Bug 1906570: Mount /var/log/wtmp into node_exporter init container #1017
- Bug 1829723: Update and pin jsonnet dependencies for release 4.7 #1018
- MON-1302: Bump prometheus-operator and k8s golang dependencies #1009
- jsonnet: bump prometheus-operator to v0.44.0 #1013
- Bug 1903464: jsonnet: fix recording rules with many-to-many matching errors #965
- Bug 1904161: Use alertmanager_integrations metric instead of alertmanager_notifications_total for AlertmanagerReceiversNotConfigured #992
- Bug 1872786: jsonnet: remove apiserver_request:availability30d #980
- Bug 1904985: fix TLS secrets for Thanos sidecars #1008
- test/e2e: fix port-forward command #1010
- Add Thanos sidecar metrics + alerts #993
- test/e2e: Add Thanos Query Watchdog Alert test #996
- Bug 1899582: Increase rest config burst and QPS rate limits #999
- Add missing default cluster profile annotation #998
- jsonnet: remove unused file #1000
- removal of bindata #985
- Bug 1885856: Exporting registry v1 protocol usage metric #949
- Switch dns resolver to miekgdns #997
- Bug 1897252: Add Thanos query log level #995
- Create pod priority class for user workload monitoring #987
- Bug 1868976: jsonnet: configure SCCs #981
- pkg/operator/operator.go: Adjust log format of resyncPeriod #984
- Remove deprecated user workload configuration #983
- test/rules: remove commented lines #979
- enable hwmon for sensor collection for bare metal clusters #971
- Add IBM Cloud managed annotations to CVO manifests #982
- jsonnet/prometheus-operator-user-workload.jsonnet: Remove as per TODO #974
- Bug 1878772: jsonnet/thanos-querier: exec probes, use correct endpoint for readiness #977
- Fix admission reviews versions #958
- Bug 1885244: fix cluster role for prometheus operator #976
- Bug 1885244: bump prometheus operator to v0.43.0 #970
- make role manifest sort stable #973
- Bug 1883765: Bump Thanos v0.16.0 #969
- jsonnet/jsonnetfile.json: Switch to master #960
- OWNERS: add dgrisonnet #972
- Bug 1882730: fix cluster:cpu_core_hyperthreading rule for s390x #953
- add current profile annotations to CVO manifests #967
- Bug 1885246: pkg/*: use k8s.io/klog/v2 #968
- Bug 1890808: bump mixins to include new etcd alerts #963
- Allowlist cco_credentials_mode metric from cloud credential operator. #947
- Bug 1812085: restore pod networking dashboards #962
- Bug 1887799: Unset memory limits on config reloader container #959
- jsonnet: Cap total resources:sum series #957
- update go-jsonnet to faster version #924
- Bug 1879930: Preserve labels and annotations during reconciliation #942
- Updating cluster-monitoring-operator builder & base images to be consistent with ART #950
- jsonnet: Collect all resource counts for telemetry #951
- pkg/operator: fix log msg about reconciliation interval #948
- Full changelog
- Bug 2041546: ovn-kubernetes: set RAFT election timer at RAFT cluster creation time #1282
- Bug 2034484: Upgrade library-go version #1247
- Bug 2042796: whereabouts, reconciler: disable retries on failure #1290
- Bug 2039345: Verify against mininimal IPv6 MTU value for clusters with IPv6 networks #1276
- Bug 2034155: Adds back –disable-snat-multiple-gws #1254
- Bug 2039321: SDN: Expose controller metrics for collection #1250
- clean up OWNERS #1287
- Bug 2041989: no CredentialsRequests in ibm-cloud-managed #1280
- Bug 2035459: modify cluster-network-features for OpenshiftSDN #1251
- Bug 1896533: Nonexistent Namespaces Degradation logging message #1128
- Bug 2038732: Add egress* patch credentials for ovnkube-master #1285
- Bug 2041329: cncc: add serviceAccountNames to CredentialsRequests #1283
- Bug 2010663: OVN-K alerts: conform to monitoring team style guide #1246
- Bug 2021191: Project admins should be able to list net-attach-defs in their namespaces #1226
- BUG 2034413: cncc: create Cloud CredentialsRequest in /manifests #1277
- Bug 2034460: cncc: handle advanced AWS and Azure configurations #1275
- Bug 2034153: Fix MTU migration verification for OpenShiftSDN #1259
- Bug 1943363: ovn: try to gracefully terminate ovn-northd #1221
- Bug 2018093: Kuryr: Add resource requests for pods #1269
- Bug 2036861: multitenant - Add openshift-kube-apiserver-operator to global namespaces #1272
- Bug 2035093: Cloud network config controller: Fix for Hypershift #1268
- Bug 2034398: Whereabouts CRD should include a “podref” field. #1262
- Bug 2034517: watch and apply changes of the ovs-flows-config configmap #1231
- Bug 2034322: Move infrastructure bootstrap to its own package #1261
- Bug 2033422: bootstrapOVNGatewayConfig should only be called once #1258
- Add MTU migration support for OVNKubernetes and OpenshiftSDN #1241
- Cloud network config controller - CNO deployment #1112
- Bug 2022144: sbdb and nbdb containers leave pid around if they restarted or crashed #1256
- OVN-K alerts: Fix incorrect metric name reference #1237
- Pod networking on DPU host in Infra and Tenant clusters #1249
- OVN-K: Enable OVN metrics to be consumed by ServiceMonitor #1236
- Bump openshift/build-machinery-go #1253
- SDN 2316: Use GatewayConfig in OVN-K to set gateway modes #1209
- Add CNI to DPU and enable Kube-Proxy on DPU #1220
- NETOBSERV-31: Expose CNI type features as a config-map #1204
- Bump openshift/api module #1242
- The ip-reconciler should not restart on failures. #1238
- SDN: Do not tolerate a controller failure during upgrade #1213
- Set upgrade strategy on kube-proxy #1214
- openshift-sdn/daemonset: Mount /host/opt/cni/bin at /host-cni-bin #1172
- Specific SDN controller alert #1206
- update for ART #1233
- bindata/network: specify pod-security levels via labels not annotations #1224
- Add bond-cni #1205
- Bug 1961509: DHCP Daemon should have memory and CPU limits set #1218
- Add ip6tables NOTRACK rules for udp/6081 #1222
- Bug 1962206: DHCP daemon should have maxunavailable for upgrade strategy #1219
- Bug 1976399: Raft election timer: move the logic to ovndbchecker #1161
- Bug 2009078: Remove NetworkPodsCrashLooping alert for ovn-kubernetes #1212
- Bug 1914053: whereabouts: add ip-reconciler cronjob #1207
- Add Kuryr to be able to create events objects. #1210
- fix a typo in a field name #1208
- podsecurity: enforce privileged for network namespaces #1203
- Bug 1988483: OVN drop icmp frag from other nodes on Azure cluster #1132
- Bug 1985486: Use proxy to connect to OSP cloud #1173
- Updating cluster-network-operator images to be consistent with ART #1198
- Bug 2003676: Restrict serving SDN metrics to loopback only #1197
- Bug 2002713: Add millisecond resolution to OVN logs #1196
- Bug 1939435: proxyconfig - accept IPv6 address literals for noProxy #1191
- Bug 1986061: Monitor openshift-network-diagnostics namespace #1190
- Bug 1960101: Fix update-codegen hack, pull in changes from openshift/api, bump k8.io deps to v0.22.1 #1140
- Bug 1997050: Fix panic with unknown networks #1188
- Bug 1998508: Fix the install-time “waiting for other operators” statuses #1192
- Bug 1990631: ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1182
- Bug 1914398: Changed pod user to non-root #1124
- Bug 1991551: allow sdn (and others) to use new events.k8s.io API #1177
- Bug 1989246: use new default leader election values to handle apiserver rollout on SNO #1175
- Bug 1992507: Use prometheus rule annotations comply with the OpenShift alerting guidelines #1181
- Bug 1989734: Whereabouts should have RBAC for leases #1174
- Bug 1984049: Slow OVN Recovery on SNO #1159
- Bug 1990725: Add missing node name into KuryrSDNPodNotReady Alert #1176
- Bug 1987019: Support external control plane topology #1158
- Docs: add architecture overview, remove outdated HACKING guide. #1078
- Remove valadas from owners #1081
- Bug 1989122: let openshift-sdn use EndpointSliceProxying #1166
- Updating cluster-network-operator images to be consistent with ART #1136
- Bug 1981055: ovnkube-master handle 60 seconds downtime of API server gracefully in SNO #1154
- Bug 1985033: Make inactivity_probe configurable #1165
- Bug 1984449: Change to use mountPath: /host #1160
- Bug 1961757: ovnkube: set ovn-controller lflow cache limit to 1GB #1147
- Revert: Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level #1163
- Bug 1981975: Update service network status to reflect dual stack entries #1155
- Bug 1970985: SDN-1955: Add pre-puller ds to reduce upgrade downtime #1141
- Bug 1961811: Add a newline between user CAs and system CAs #1156
- OVNKube: check if br-ex1 is available and pass it as a parameter #1152
- Make egress IP and ICNI mutually exclusive when bootstrapping OVN-kube #1145
- Bug 1970129: Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level #1142
- Add alerts for issues with load balancers/ports. #1148
- Include alerts for critical lbs #1146
- Removing old kuryr-kubernetes CRDs #989
- Bug 1962951: enable ovs column diffs feature #1101
- Bug 1975016: Kuryr: Store OpenStack credentials in a secret #1139
- Add JacobTanenbaum to list of approvers #1099
- Updating .ci-operator.yaml
build_root_image from openshift/release #1130
- Bug 1967933: Add network-tools to image-stream #1126
- Bug 1963964: Escape characters on ini file #1115
- Bug 1968567: egress router CNI command is missing #1125
- Bug 1955548: Kuryr: Do not expand services subnet with OVN #1100
- Bug 1954870: Add priorityClass to allow user load to preempt tests #1110
- Bug 1951158: Fix generated JSON format #1117
- Bug 1825219: Fix nil checks in bootstrapSDN #1107
- Bug 1965834: add management annotation to multus-additional-cni-plugins pods #1114
- Bug 1951158: Update egress router CRD from vendor to manifests #1116
- Bug 1954773: update the cno to use the egressfirewall flag #1095
- Bug 1960711: Revert “ipsec: Allow enablement/disablement at runtime” #1108
- Bug 1951158: Addressing original PR 1064 review comments. #1094
- Bug 1949677: The Multus daemonset should be separate other CNI binary installation #1058
- Bug 1825219: drop icmp frag needed received from other nodes in the cluster #1059
- Bug 1959406: ovn-kube: enable pprof on the metrics endpoint #1091
- Bug 1958126: Remove OVN “–disable-snat-multiple-gws” parameter #1090
- Bug 1952001: Updating api to reduce the number of watch requests #1077
- Bug 1954755: Multus configuration should allow for net-attach-defs in certain namespaces to be used across namespaces #956
- Bug 1952665: Update multi-networkpolicy memory limits/requests #1072
- Bug 1951891: Allow changing cluster network cidr during a migration #1067
- Bug 1939726: Enclose ApplyObject on RetryOnConflict #1056
- Bug 1947795: Remove reference to v1beta1 API #1083
- Bug 1948582: Allow for local gateway mode to be configured #1066
- Bug 1954187: The multus admission controller admissionReviewVersions should be v1 #1079
- Rename workload annotations #1065
- Bug 1948718: IBM Cloud manifest profile patch #884
- Bug 1907353: Remove OVS daemonsets #1028
- Bug 1950935: Updating cluster-network-operator builder & base images to be consistent with ART #974
- Bug 1942555: Rely on status for ingress controller for endpointPublishingStrategy #1062
- Bug 1950590: Bump openshift/api and update-codegen for netflow maxitems #1068
- Bug 1952079: Don’t try to disable the EndpointSlice feature gate #1069
- Bug 1937594: Update the codegen with the latest API #1063
- Bug 1937594: Split SDN migration into 2 phase #763
- Add management workload annotations #1051
- Bug 1937594: Bump openshift/api #1057
- Bug 1948592: Add Egress Router Controller #887
- Bug 1949099: Fix up network-check-target #1049
- Set the host-network-namespace parameter for ovn-kubernetes #1033
- Add capabilities in simpleMacvlan’s staticIPAM config #353
- Fix run_locally namespace #1054
- Minor cleanups #1053
- automatic dual-stack conversion #1034
- Remove LB management #1014
- Bug 1936515: Use the election mechanism provided by library-go #1052
- Allow Pods Network MTU to be configurable #1043
- Bug 1944160: ovn: log more info about nbctl daemon database reconnections #1040
- copy the service network slice #1048
- Bug 1943649: Add command for network-check-target instead of hello-openshift #1046
- Kuryr: Update OWNERS #1044
- Update CNO for OVN acl audit logging #993
- Kuryr: Update CRDs from upstream #1045
- Add support for exporting network flows #1021
- Allow from router support in CNO #981
- Bug 1905331: Set requests on multus components #1038
- SDN-1249: Bump openshift/api vendoring to pull egressrouter CRD #1037
- Bug 1916809: mount node ovs db for multi-gather gather_network_logs #1025
- Re-enable shared gateway mode #897
- MultiNetworkPolicy integration #923
- Update remaining CRDs and webhooks to v1 #968
- Bug 1931997: mark network-check-target non critical #1004
- ovnkube: better logging for upgrades/downgrades #1023
- Bug 1939060: OVN Upgrade: fix upgrade order of node and master #1027
- ovn/ipsec: set maxUnavailable to 10% #1024
- Bug 1939752: ovnkube: add missing resource requests for SBDB #1026
- Bug 1933159: The Multus daemonset should handle 10% maxUnavailable #992
- Bug 1938920: Set maxUnavailable for ovs-node daemonset #1020
- Bug 1937452: Fix golangci-lint violations #1013
- Allow dual stack migration #959
- sdn: Add list/watch RBAC for endpointslices to openshift-sdn #1003
- Fix possible name patterns on regex #1015
- SDN-1571 ipsec: Allow enablement/disablement at runtime #975
- Bug 1937005: kuryr/alerts: change the rule for free count #1009
- Bug 1933174: Use 10% for ovs maxUnavailable for rolling update #996
- config: Set enable-profiling true by default and allow
enable-profiling as a proxy argument #988
- OSD-6600 network-metrics missing priorityClass #994
- Bug 1934711: Use 10% for ovnkube-node for maxUnavailable #1000
- Bug 1933173: Use 10% for sdn maxUnavailable for rolling update #995
- Bug 1933179: Use 10% for nw-check-target maxUnavailable #997
- bump api version to get multiNetworkPolicy changes #1005
- Bug 1933269: Include LB members for Machines created on day-2 operation #999
- cmd: stop using URL_ONLY_KUBECONFIG #976
- Bug 1908916: disable ovsdb column diffs if supported #964
- Enable golangci-lint; fix up lint issues #984
- Bug 1924425: Update protobuf version to address CVE-2021-3121 #985
- Bug 1920209: The pods in the Multus daemonset should exit in a reasonable time during an upgrade. #962
- Bug 1927244: Kuryr: Always set worker_nodes_subnets #980
- Bug 1928157: Don’t set ClusterOperator Version until rollout is complete #979
- : Bug 1913399: Bump flow control apiVersion to beta #937
- Suppress sleep message in ovn-ipsec container #971
- Bug 1921184: Kuryr: Let Kuryr autodetect primary CNI interface #969
- Bug 1838343: Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable. #655
- Bug 1912820: competing connectivitycheckcontrollers cause pod restarts during upgrades #970
- Bug 1918375: Add tokenreviews permissions for kube-proxy #960
- Bug 1924383: update the resource requests made by pods in openshift-network-diagnostics namespace #973
- Bug 1920769: Fix the spacing for the node-selector override annotation #972
- Bug 1905730: ipsec: Suppress benign error messages on startup of ovs-monitor-ipsec #966
- Bug 1920769: override the default node-selector for network-connectivity check #965
- Bug 1920159: Reduce CPU requests of ovs daemonset #963
- Bug 1908914: OVN-Kubernetes: upgrade node before master, downgrade master before node Upgrade ovn node first #961
- Bug 1903660: Don’t error when expected master node amount is not met #954
- Bug 1915885: Kuryr: Support multiple nodes subnets #949
- Minor fixups to docs/operands.md #958
- Updating cluster-network-operator builder & base images to be consistent with ART #951
- Bug 1914402: ipsec: Add liveness probe #952
- Bug 1909502: pkg/util/proxyconfig: remove unused etcd records from proxy config #930
- Bug 1914932: Put correct resource name in relatedObjects #945
- Bug 1915312: Schedule network diagnostics pods on Linux nodes #947
- Bug 1908775: ovn-ipsec: Adjust MTU to account for additional ESP overhead #928
- Bug 1910111: order startup of IPsec components #929
- Bug 1912577: get rid of support for running OVS in a container #932
- Bug 1909791: Fix EndpointSlice addition to standalone kube-proxy RBAC role #931
- Bug 1910097: ovn-ipsec: Add resource limits #927
- Bug 1907644: fix up non-critical / Progressing status handling #911
- Bug 1906650: Add NetworkPolicy, EgressIP, and EgressFirewall to related-objects #919
- Bug 1912409: Fix flow schema deployment #920
- Bug 1909791: Standlone kube-proxy needs to list EndpointSlices now #926
- Bug 1908889: Bump CNO to k8s 1.20 #917
- Bug 1874638: Add -F flag for ovn-nbctl logging #914
- Bug 1907454: install podnetworkconnectivitycheck crd #898
- Bug 1777038: Add alerting rules for subnet allocations #889
- Bug 1906844: Disable EndpointSlice and EndpointSliceProxying feature gates and update to k8s 1.19.4. #905
- Bug 1905792: changes to egressfirewall CRD to accommodate DNS names #908
- hack: fix run-locally #903
- Add connectivity checker controller #856
- Fix IPsec CI #900
- Assign openshift sdn traffic to system priority level #880
- Bug 1890630: Ensure LimitedPortsOnNetwork is only triggered when needed #895
- Enable IPsec #886
- increasing logging when waiting for Masters during bootstrap for OVN #894
- ovn rbac for endpoint slices #891
- Start to move to a library-go style operator #863
- Annotate manifests for single-node-developer cluster profile #892
- Kuryr: Allow changes to KuryrConfig #883
- Simplify kube-rbac-proxy startup script #879
- Add IBM Cloud managed annotations to CVO manifests #874
- Build check-endpoints in Dockerfile #881
- Add egress-router-cni init container #815
- Add check-endpoints command #872
- fix CRD / Codegen #865
- Add operator.openshift.io/v1/network to relatedObjects for must-gather #873
- Bug 1891716: Remove spurious label in the pod selector of the master daemonset. #867
- Detect Nodes Network MTU on Installations with Kuryr #853
- Bug 1893362: Ensure tail processes exit with parent #859
- Bug 1874638: Fixes missing nbctl daemon logging #772
- Validate poolBatchPorts number against min and max in configuration. #809
- Simplify CA Bundle injection for multus admission webhook #761
- add current profile annotations to CVO manifests #846
- Bug 1890130: openshift-sdn: multitenant: join openshift-etcd-operator to etcd #844
- Bug 1891023: Fix ovn rbac proxy init script secret name #841
- Use kube-rbac-proxy for standalone kube-proxy metrics #839
- Bump dependencies of k8s to 0.19.2 #840
- Set image versions of CNO deployment to latest #813
- Updating cluster-network-operator builder & base images to be consistent with ART #829
- README: document verbosity overrides #838
- Remove operator-sdk dependencies #827
- Bug 1886834: Make ovn-cert secret mandatory for both master and node #834
- Add ovn-db-pod label on the master pods #828
- Allow running openshift-sdn with standalone kube-proxy #820
- Bug 1885002: Fix kube-rbac-proxy startup scripts #822
- Bug 1885165: Fix ovnkube metrics #824
- Full changelog
- Bug 2017427: tuned: add timeout and restarts #282
- Makefile cleanup, replace yq with yaml-patch from openshift/build-machinery-go #274
- Bug 2016988: openshift profile: fix malformed patch #283
- Bug 2013321: TuneD: workaround for high CPU utilization of [scheduler] plug-in. #278
- RBAC: tighten the rules and remove unnecessary listers. #276
- podsecurity: enforce privileged for openshift-cluster-node-tuning-operator namespace #275
- Updating cluster-node-tuning-operator images to be consistent with ART #273
- Bug 2004508: TuneD: Revert the ConfigParser changes. #271
- Updating cluster-node-tuning-operator images to be consistent with ART #270
- OWNERS: updating based on team changes. #269
- e2e tests: s/plugin/plug-in/ and TuneD renaming #253
- Bug 1998247: Reload when deps of recommended profile change. #267
- Bug 1997486: Ship the latest TuneD and stalld. #265
- Bug 1994891: Fix e2e tests after the recent 1.22.0 bump #264
- Bug 1992560: monitoring: comply with OpenShift alerting guidelines #263
- Bug 1994891: Bump vendor dependencies to k8s 1.22.0 #261
- Bug 1985739: Move OpenShift profile to TuneD. #258
- Bug 1986477: Handle kube-apiserver disruption more gracefully. #256
- scheduler: new option cgroup_ps_blacklist #250
- Address a race in the stalld e2e test. #249
- IBM Cloud manifest profile patch for operator deployment #252
- Ship the latest TuneD, adjust default Tuned CR. #245
- Updating to the latest stalld v1.13.0. #246
- openshift-tuned event-driven change processing #243
- Adjusting the OWNERS file due to team changes. #244
- Updating to the latest stalld v1.12.0. #242
- Bug 1974277: Fix conditional order for setting net device param. #239
- Bug 1973154: Switch back to NTO-shipped stalld. #236
- Updating cluster-node-tuning-operator images to be consistent with ART #235
- More precise description of MCP matching. #219
- Updating .ci-operator.yaml
build_root_image from openshift/release #234
- Bug 1969832: TuneD: fix multiple inheritance where parents include common ancestor #233
- Bug 1966294: Address CVE-2021-33194 in golang.org/x/net #232
- Bug 1963848: Use OS-shipped stalld vs. the NTO-shipped one. #226
- Bug 1963866: Bump vendor dependencies to k8s 1.21.1 #231
- Bug 1962219: Switch to client-go leader-with-lease election. #229
- Bug 1962630: Update to the current upstream TuneD. #230
- Bug 1960337: manifests: fix selector in node-tuning-operator ServiceMonitor #227
- Rename workload annotations #225
- Bug 1948782: Revert “add ‘single-node-production-edge’ annotations to CVO manifests.” #224
- Bump to golang 1.16 and various vendor deps. #222
- Add management workload annotations #223
- TuneD: udev: explicitly sort udev properties #221
- Add additionalPrinterColumns to profiles CRD. #220
- Updating cluster-node-tuning-operator builder & base images to be consistent with ART #218
- Add “core” e2e tests. #217
- Bump to the latest ignition 3.2 #216
- Add e2e test for adjusting netdev queue count. #214
- Updating to the latest stalld v1.9.0. #213
- Do not manupulate BLS entries and grub config #212
- Bug 1926903: Keep ignition units in sync with [service] plugin. #211
- Bug 1926903: Instantiate the stalld systemd unit as disabled. #207
- stalld: Remove another architecture specific gcc flag #209
- Do not include *-patch files in /manifests. #208
- Remove Dockerfile.rhel7 no longer needed #203
- Updating cluster-node-tuning-operator images to be consistent with new ART images #194
- Support for adjusting netdev queue count. #205
- Add more related objects to ClusterOperator. #206
- Updating cluster-node-tuning-operator builder & base images to be consistent with ART #204
- Add status conditions and profile applied to Profile(s) #188
- Bug 1925072: Remove architecture specific gcc flags. #202
- Bug 1925072: Updating to the latest stalld v1.7.0. #201
- Bug 1923674: Bump vendor dependencies to k8s 1.20.2 #199
- Bug 1924081: Ship the latest tuned-2.15.0 #200
- Bug 1920438: Fix openshift-tuned panic on turning debugging on/off. #195
- Bug 1919970: Recover gracefully after Tuned errors. #196
- Bug 1906228: openshift-tuned and Tuned daemon signal handling fixes. #192
- Bug 1917327: Fix annotation message for NTOPodsNotReady message. #193
- Updating cluster-node-tuning-operator builder & base images to be consistent with ART #191
- Bug 1907936: Switch to nto_profile_calculated_total. #189
- add ‘single-node-production-edge’ annotations to CVO manifests. #187
- Adjusting annotation. #186
- Updating OWNERS file #184
- Annotate manifests for single-node-developer cluster profile #185
- E2e test cleanup. #183
- Allow selective debugging of the Tuned daemon. #174
- Bug 1900196: Automatically restart stalld after exit. #181
- Switch the upstream Dockerfile to CentOS 8. #180
- Switch to the latest Tuned daemon. #179
- NTO Metrics #158
- Updating cluster-node-tuning-operator builder & base images to be consistent with ART #178
- Add IBM Cloud managed annotations to CVO manifests #177
- Bug 1895919: Add a weak dependency on kmod to tuned. #175
- Change the priorities of example and e2e test profiles. #173
- Generating tuned CRD without any manual intervention. #172
- Set scheduling policy to SCHED_FIFO to stalld and lower threshold. #169
- Ship the latest version of stalld. #168
- add current profile annotations to CVO manifests #167
- Bug 1887088: image-references: no longer require cluster-node-tuned #165
- Update to the latest version of stalld, lowering starving threshold to 30s. #162
- Updating cluster-node-tuning-operator builder & base images to be consistent with ART #163
- Remove traces of unsigned RPMs from the image. #160
- Remove Docker as image build engine #114
- Full changelog
- Bug 2039670: Create the PDB dynamically so it does not get created on the SNO topology #489
- Bug 2041541: bump library go #490
- Bug 1984592: global pull secret not working in OCP4.7.4+ for additio… #485
- Bug 2034484: feat: library-go bump #488
- update apiserver and check-endpoints service selectors #484
- Bug 1982726: encryption-controller: sync secrets conditionally #483
- pkg/operator: set high inertia for all topologies except SingleReplica #481
- OWNERS: add Abu and Lukasz as approver #480
- manifests: update upgrade level to match kube-apiserver #477
- Bug 2013222: wire apiservercontrollerset.WithStatusControllerPdbCompatibleHighInertia #479
- podsecurity: enforce privileged for openshift-apiserver namespace #476
- Bug 1998031: Deploy PDB to prevent more than one replica going unavailable #472
- Bug 1948089: openshift-apiserver should not set Available=False APIServicesAvailable on update #471
- Bug 1959290: bump to library-go and kube libraries #466
- Bug 1960680: bindata: run openshift-apiserver as root explicitly. #465
- Bug 1986829: metrics: use client cert auth for metrics scraping #464
- encryption condition controller doesn’t reset previously set conditon #462
- bump(library-go + api): get audit.customRules support #461
- clear encryption conditions when there is no work to be done #460
- audit: wire auditpolicy controller #459
- Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #457
- Bug 1969631: encryption controllers wait for all informers before running the sync loops #456
- Bug 1879182: audit policies now use ‘secure-’ by default, remove custom getter #455
- Bug 1943804: splits the encryption tests #454
- Bug 1943804: stub for splitting encryption tests #453
- Bug 1961561: pick up the precondition checker for reducing encryption QPS #451
- Bug 1953563: Switch to Golang 1.16 for build-root #448
- Bug 1953563: Add .ci-operator.yaml with build_root_image #452
- Rename workload annotations #446
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #447
- Add management workload annotations #443
- Bug 1942725: explicitly allow apiserver pods to write to their root FS #437
- extends shutdown delay duration to 10 seconds #442
- expose pod information to oas container via env variables #440
- bump lib-go to pick up workload progressing changes #439
- update library-go to fix tight loops #438
- Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #436
- bump lib-go ti pick up latest audit config and workload controller changes #435
- removes the encryption provider #432
- Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #431
- switch to v1beta1 for the p&f APIs #425
- Bug 1912820: competing connectivitycheckcontrollers cause pod restarts during upgrades #430
- Bug 1905298: openshift-apiserver initContainer fix-audit-permissions is not requesting required resources: cpu, memory #428
- Remove tnozicka and add soltysh to OWNERS #429
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #420
- Bug 1887392: bump kube to 0.20.1 and lib-go to master to pick up authn/z caching #424
- Bug 1907956: connectivitycheckcontroller: bump #421
- Bug 1806918: remove run-level=1 from openshift-apiserver-operator NS #330
- Bug 1806918: remove run-level=1 from openshift-apiserver NS #323
- wait for storage urls before installing the api server #422
- updates encryption related components so that CAO can start manage its own encryption configuration #416
- improve e2e tests #419
- don’t claim control over the oauth and user API #417
- Add IBM Cloud managed annotations to CVO manifests #415
- Use more restrictive defaultMode for secret mounts #413
- picks up setting
TCP_USER_TIMEOUT socket option #412
- add current profile annotations to CVO manifests #411
- Restrict log permissions #397
- Observe Ingress AppsDomain For Routing Domain Override #409
- enable etcd latency metric #408
- connectivitycheckcontroller: disable by default #407
- BUG 1888311: p&f: make oas SAR/TokenReview traffic exempt #406
- Bug 1888028: bump library-go to stop waiting on kube-apiserver availability #404
- Revert “connectivitycheckcontroller: disable by default” #400
- Bug 1876166: need to be able to disable kube-apiserver connectivity checks #402
- Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #399
- flowschema for openshift apiserver and its operator #398
- Full changelog
- Bug 2042587: Fix Conflict Error in Operator Tests #235
- Bug 2034484: feat: library-go bump #232
- update controller-manager service selectors #231
- Bug 2012770: honor labels in openshift-controller-manager metrics #230
- BUILD-281: add library-go watch/update of new OCM feature gate field #227
- Bug 2004127: bump library-go and dependencies #228
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #226
- Bug 1986003: Rebase to Kubernetes 1.22 #225
- Bug 1986829: metrics: use client cert auth for metrics scraping #223
- Fix config merge order #221
- Update OWNERS #220
- Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #219
- Updating .ci-operator.yaml
build_root_image from openshift/release #217
- Bug 1965283: Static Resources Controller for Sync #216
- Bug 1925409: Let openshift-controller-manager create service account tokens #213
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #212
- Bug 1948011: seed upgradeable condition in ocm-o cluster operator status so library-go union code can find it #210
- Add management workload annotations #206
- Bug 1947793: Deprecated API in use #208
- Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #202
- Bug 1941526: Bump kubernetes to 0.20.5 #203
- BUILD-186: add buildconfig/status permissions to ocm #201
- switch to v1beta1 for the p&f APIs #192
- Bug 1911470: Set registry routes in operand config #197
- Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #198
- Remove tnozicka from OWNERS #196
- Extend OWNERS #195
- Bug 1915304: Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #194
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #187
- Bug 1907948: BUILD-149: bump(*): k8s 1.20.1-rc.0 #189
- Add IBM Cloud managed annotations to CVO manifests #186
- picks up setting
TCP_USER_TIMEOUT socket option #184
- add current profile annotations to CVO manifests #183
- Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #182
- flowschema for openshift controller manager #181
- Full changelog
- Bug 2034484: feat: updated library-go and related deps #73
- Fix gomod #72
- Updating cluster-policy-controller images to be consistent with ART #71
- Updating cluster-policy-controller images to be consistent with ART #70
- use correct eventRecorder in CSRApproverController #68
- refactor cluster policy controller and NamespaceSCCAllocationController #65
- add dummy namespace arg to support config update #67
- CSR: fix the subject for monitoring CSRs approval #66
- log namespace in NamespaceSCCAllocationController error #64
- AUTH-26 CSR approving mechanism #61
- Updating cluster-policy-controller images to be consistent with ART #63
- Updating .ci-operator.yaml
build_root_image from openshift/release #62
- readme: update references to developer guide #60
- Updating cluster-policy-controller builder & base images to be consistent with ART #59
- Bug 1934164: Bump github.com/gogo/protobuf to v1.3.2 #57
- Sync with the latest library-go to pull new crypto ciphers #56
- Updating cluster-policy-controller builder & base images to be consistent with ART #55
- Updating cluster-policy-controller builder & base images to be consistent with ART #54
- the quota controllers should resync on new resources and make progress #48
- runs OpenShift specific ResourceQuota monitors #44
- Bug 1890530: release lock on graceful shutdown #42
- Updating cluster-policy-controller builder & base images to be consistent with ART #41
- add event when SCC ranges are created for namespace #40
- Full changelog
- Bug 2027745: Allowing ImageStream creation when config registry empty #406
- Bug 2033720: Synching SSO library #411
- upd rhel7 Dockerfile in case still used for rhel7 worker nodes #410
- Bug 2033720: Bump k8 dependencies to v0.23.1 #409
- Bug 2033720: Library synchronization for OCP 4.10 #408
- Bug 2027745: Move openshift build-machinery-go dependency #407
- Update OWNERS #402
- Remove single node prod cluster profile annotation as it is not used #405
- Bug 2007757: Including Template in must-gather related objects. #399
- Bug 2006947: fix proxy portion of tbr inaccessible check #397
- Updating ose-cluster-samples-operator images to be consistent with ART #396
- Bug 2002368: acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #394
- Bug 2003683: fix recently introduced panic when conflict errors occur #395
- Bug 1993840: more avoiding immediate degraded on intermittent API errors #391
- Updating ose-cluster-samples-operator images to be consistent with ART #390
- add david peraza as approver, clean up reviewers #389
- BUILD-298: Bump k8s to 1.22.1 #388
- Bug 1993840: avoid immediate degraded on intermittent API errors; set reason/message when Available=false #387
- Bug 1995386: don’t return err in wait.Poll on net.DialTimeout err; tweak time intervals #386
- Bug 1990140: add connection with timeout in TBR accessibility check to expedite ‘disconnected’ mode #384
- Bug 1990988: Refreshing samples for OCP 4.9 #381
- Bug 1975539: delete hello-openshift in payload imagestream via CVO annotation #380
- Updating ose-cluster-samples-operator images to be consistent with ART #378
- Updating .ci-operator.yaml
build_root_image from openshift/release #377
- seed relatedObjects in manifest yaml #376
- Bug 1960334: manifests: fix selector in ServiceMonitor #374
- Bug 1955100: Fixing Deprecated API in use #373
- Rename workload annotations #372
- Bug 1949481: add DeepCopy to avoid SharedInformer cache mutation #369
- Bug 1950236: OKD: replace some docker.io images with quay.io #360
- BUILD-249: openshift/library sync for 4.8 #367
- Bug 1948782: revert single-node-production-edge annotation #368
- bump(k8s) 1.21.0 #365
- Add management workload annotations #366
- Fix Typo #364
- Add IBM cloud managed profile manifest patch #363
- Remove hello-openshift imagestream #362
- Updating ose-cluster-samples-operator builder & base images to be consistent with ART #361
- Updating ose-cluster-samples-operator builder & base images to be consistent with ART #355
- Bug 1930570: Update Jenkins monitored templates names #357
- Updating ose-cluster-samples-operator builder & base images to be consistent with ART #352
- Bug 1914723: SamplesTBRInaccessibleOnBoot Alert has a misspelling #351
- Bug 1766287: Improve usability of hello-openshift imagestream #350
- Bug 1907952: BUILD-147: bump(*): k8s 1.20.1-rc.0 #349
- Bug 1905319: request required minimal mem resource per openshift conventions #348
- pull latest openshift/library for updating samples for 4.7 #344
- more readme corrections stemming from skills transfer work #347
- more README updates/fixes #345
- Annotate manifests for single-node-developer cluster profile #343
- add ‘single-node-production-edge’ annotations to CVO manifests #342
- Bug 1898745: deprecate ImageChangesInProgress, make sure it stays false #341
- Add IBM Cloud managed annotations to CVO manifests #339
- Updating ose-cluster-samples-operator builder & base images to be consistent with ART #337
- Bug 1898745: actually set imagestreams in progress to false in imagestream event path #340
- set progressing false on imagestream events as well if no active streams #338
- BUILD-125: move imagestream tracking out of operator config object #313
- Add aarch64 support #335
- add current profile annotations to CVO manifests #334
- Add hello-openshift imagestream #332
- Bug 1886890: Override jenkins-agent-base imagestream #331
- BUILD-145: store imagestreamtag to image mappings in configmap #321
- Updating ose-cluster-samples-operator builder & base images to be consistent with ART #330
- Sync w/ library for updating jenkins nodejs agent image #329
- Full changelog
- Bug 2044481: update ClusterOperator relatedObjects to collect sharedresource CRD instances #257
- Bug 2047025: Add “patch” permissions to Alibaba CSI driver operator #259
- Bug 2045112: Add leases rbac for vsphere-problem-detector #258
- Bug 2043130: Update CSI sidecars to the latest release for 4.10 #256
- Bug 2037856: Update library-go to get leader election updates #255
- Bug 2040880: Do not replace unknown condition with true when we union conditions #254
- Bug 1961317: Add operator’s ClusterRoleBinding to RelatedObjects #251
- Bug 2038389: Union upgradeable conditions as well from ClusterCSIDriver objects #252
- Bug 2033111: IBM VPC operator library bump removed global CLI args #250
- Bug 2034515: fix: pull in latest library-go #247
- feat: library-go bump #244
- Remove invalid -v argument from IBM VPC operator deployment #246
- Bug 2030364: Setup port, mount TLS cert into CSI shared resource operator #243
- Add IBM VPC Block CSI Driver Operator #242
- Updating cluster-storage-operator images to be consistent with ART #236
- Bug 2027363: Fix reference to Azure File images #241
- Add Alibaba Disk CSI driver #239
- Replace registry.ci images with quay #240
- Add CredentialsRequest for Alibaba Disk CSI driver #238
- Secure metrics for Shared Resource Operator #237
- Bug 2001761: Fix RelatedObjects when RBAC API is missing #215
- Migrate additional yaml files from SRO repository #231
- Credential Request added #230
- Update Shared Resource Operator permissions #229
- BUILD-284: integrate shared resources operator #198
- Bug 2015635: Remove Azure Stack Hub detection. #228
- Add missing RBAC rule for Azure File #227
- Add missing env var for Azure File #226
- Bump openshift/api #225
- bump openshift/api to get csi.sharedresource.openshift.io #224
- Add Azure File CSI Driver installation (TP) #223
- Bug 2010310: [vsphere] set summary and description for alerts #220
- Bug 2009859: Install vSphere CSI Driver by default (again) #221
- podsecurity: enforce privileged for openshift-cluster-csi-drivers namespace #218
- Revert “Install vSphere CSI Driver by default” #219
- Install vSphere CSI Driver and Operator by default #217
- Install Azure Disk CSI Driver by default #214
- Updating cluster-storage-operator images to be consistent with ART #213
- Updating cluster-storage-operator images to be consistent with ART #212
- Bug 1999674: Update prometheus rule to alert about esxi host versions #209
- Bug 1992875: Add azure credentials #206
- Bug 1999853: ControlPlaneTopology: Fix node selector for CSI driver operator deployment #208
- Bug 1993931: Storage operators use older kubernetes client #207
- Bug 1991814: Create namespace for manila on all OpenStack installations #202
- Bug 1985391: Add proxy support to cinder CSI #204
- Bug 1992193: Fix race when starting controllers #201
- Bug 1948090: Remove CSIDriverOperatorDeploymentAvailable condition when deploying CSI operator #173
- Bug 1992857: allow Azure CSI driver operator to read configmaps globally #203
- Bug 1986557: Install CSI drivers on all platforms #197
- Bug 1990601: Always run CSI driver controller for Azure Stack Hub #200
- Bug 1948090: Fix poddisruptionbudget RBAC rule for Manila #199
- Bug 1986215: Bump library-go to get leader election fixes #196
- Bug 1982300: Unify alert times #195
- Bug 1972028: Add RBAC rules for CSI operators to handle poddisruptionbudgets #194
- Add service account names to gcp credentials request manifest #181
- Bug 1969719: Add trusted CA bundle to vsphere operators #178
- Add permissions to vSphere operator to create ValidatingWebhookConfiguration objects #190
- Add new driver permissions for vmware-vsphere-csi-operator #188
- Remove ibm-cloud-managed annotation from operator deployment #186
- Add alert about HW version < 15 #189
- Support external control plane topology #187
- Add permissions to get, list and watch pods for ovirt-csi-operator #185
- exclude default storage class on Azure StackHub #184
- Bug 1977389: Manila CSI driver is not in must-gather #183
- Use go:embed for static yaml files #179
- Updating cluster-storage-operator images to be consistent with ART #177
- Bug 1961317: Adding static assets to related objects #175
- Updating .ci-operator.yaml
build_root_image from openshift/release #176
- Remove unused variables #172
- Bug 1947402: Add permissions poddisruptionbudgets in AWS CSI operator’ #171
- Bug 1961120: added permissions to service monitoring #167
- Bug 1936871: Add volumes with credentials to Cinder operator deployment #141
- Bug 1961538: manifests: remove namespace from cluster-storage-operator-role binding #168
- Bug 1943719: Add alert about vsphere-problem-detector unable to connect #166
- Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #165
- Rename workload annotations #164
- Bug 1949357: Add missing RBAC rules to Manila operator #163
- Bug 1948505: Add missing RBAC rules for vSphere #156
- Bug 1948721: IBM Cloud manifest profile patch #146
- Bug 1947360: vSphere: set CPU/memory resource request #157
- Bug 1949357: Allow Manila operator to create ServiceMonitor in the driver namespace #162
- Bug 1947866: Add log level to Azure Disk CSI Operator #159
- Bug 1948448: Add log level to vSphere operator #158
- Bug 1949554: Pass KUBE_RBAC_PROXY to vSphere CSI driver operator #161
- Bug 1924500: Rebase to Kubernetes 1.21 libraries #160
- Bug 1949041: Update image-references for vsphere #155
- Remove “vmware” prefix from CSI operator and driver #149
- Add management workload annotations #150
- Add vsphere syncer deployment #153
- Degrade the cluster when an unsupported CSI driver is already installed #152
- Add TokenReview permissions to newly introduced operators #154
- Pass KUBE_RBAC_PROXY_IMAGE to CSI driver operators #151
- Add AzureDisk CSI driver installation #148
- Start tech-preview CSI driver operators when tech preview is enabled #144
- Prepare for metrics collection in CSI driver operators #145
- Add service account names to credentials request manifest #136
- Updating cluster-storage-operator builder & base images to be consistent with ART #143
- Allow log level to be replaced #142
- Prevent panic on webhook authenticator and authorizer timeout before response #139
- Propagate log level to GCE and Cinder CSI driver operators #138
- Updating cluster-storage-operator builder & base images to be consistent with ART #135
- Fix typo in README.md #116
- vsphere: don’t redeploy StorageClass in every sync #129
- Bug 1923098: Add replicasets to vsphere permissions #134
- Bug 1883538: Only include the relevant drivers in relatedObjects #133
- Bug 1910581: CSO shouldn’t overwrite clustercsidriver objects #131
- Bug 1917551: Change metric used in alerts for vsphere problem detector #128
- Bug 1912945: Add RBAC to allow operator to update CR’s spec #127
- Bug 1904503: Add prometheus alerts for vsphere #126
- Bug 1914451: Run CSO as non-root user #123
- Updating cluster-storage-operator builder & base images to be consistent with ART #125
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #106
- Bug 1912944: Set proxy env in vsphere-problem-detector, manila and oVirt deployment containers #122
- Bug 1912945: Add RBAC rules to read proxy resource #121
- Bug 1907812: Use separate RBAC objects for AWS CA bundle retrieval #118
- Bug 1914119: Add RBAC for status field #120
- Bug 1904497: Add vsphere problem detector deployment #111
- Bug 1907329: Add missing default cluster profile annotation #117
- Bug 1904578: Configure metrics scraping #107
- Add IBM Cloud managed annotations to CVO manifests #102
- Add YAMLs for starting vsphere-problem-detector as a deployment #110
- aws: grant ebs operator permission to read configmaps #112
- Bug 1902601: Fix resources in cinder csi deployment template #108
- Add missing default profile annotation #105
- Bug 1902552: Fix cinder-csi images #104
- Add OpenStack Cinder driver startup #103
- Add GCP-PD CSI Operator to CSO #101
- Bug 1894025: Add annotations to cluster-csi-drivers namespace #100
- Remove OpenStack Cinder operator startup #99
- Updating cluster-storage-operator builder & base images to be consistent with ART #95
- Add OpenStack Cinder driver startup #98
- add current profile annotations to CVO manifests #97
- Bump OpenShift API to include Cinder CSI driver #94
- Bug 1879365: Move CSO namespace to lower runlevel #89
- Full changelog
- OWNERS: Prune crawford #42
- Updating .ci-operator.yaml
build_root_image from openshift/release #37
- Pack both keys in one verifier-public-key-ci entry #35
- Adding the new Openshift CI Signer key #33
- Bug 1919356: Add IBM Cloud managed annotations to CVO manifests #24
- Updating ose-cluster-update-keys builder & base images to be consistent with ART #31
- Bug 1915473: Annotate manifests for single-node-developer cluster profile #26
- Updating ose-cluster-update-keys builder & base images to be consistent with ART #28
- Add Apache 2.0 License #20
- Bug 1915217: readme: specify which keys are used in nightlies/OKD/OCP builds #27
- Updating ose-cluster-update-keys builder & base images to be consistent with ART #25
- add current profile annotations to CVO manifests #23
- Full changelog
- Bug 2009845: pkg/cvo/sync_worker: Log transition to updating #730
- Bug 2027342: Add notification for certificate changes #726
- Bug 2009845: pkg/cvo/sync_worker: Do not cancel sync workers on install-time target-version change #729
- Bug 2009845: Respect overrides changes during install (second round) #728
- Revert “Bug 2009845: Respect overrides changes during install” #727
- Bug 2009845: Respect overrides changes during install #713
- Bug 2034484: Library go bump #716
- Bug 2000938: lib/resourcemerge/apps: Avoid hotlooping on implicit strategy #722
- Bug 2034493: *: Use –v=2 logging to drop client-side throttling noise #721
- Bug 2033745: pkg/cvo/availableupdates: Acount for default upstream in recent-change throttling #718
- pkg/payload/precondition: File shuffling, drop ClusterVersion argument, etc. #708
- Bug 2029785: pkg/cincinnati: Fix panic for conditional edges overlapping with unconditional edges #707
- pkg/start: Log and continue when we fail to retrieve the feature gate #706
- pkg/featurechangestopper: Refactor to allow declaring work completion #704
- Exclude featuregate.release.openshift/tech-preview=true manifests #694
- Bug 2026560: lib/resourcemerge/core: Merge volumeMounts by mountPath #703
- Bug 2020107: Remove run-level label #623
- Bug 2028217: lib/resourcemerge/apps: Default Deployment replicas to one #698
- Bug 2027585: pkg/cincinnati: Fix panic for conditional edges with risks after an invalid risk #697
- Bumping the GOLANGCI_LINT_VERSION to v1.43.0 #695
- Targeted edge blocking #663
- Bug 2005407: Changing the ClusterNotUpgradeable alert to info #659
- install: Add description annotations to manifests #686
- Bug 2022509: cvo: Compare manifest group in getOverrideForManifest #689
- Updating cluster-version-operator images to be consistent with ART #687
- Bug 1990635: Fixing the sync issue when desired version and channel changed at the same time #669
- install/0000_00_cluster-version-operator_03_deployment: Set dnsPolicy: ClusterFirstWithHostNet #646
- install: Drop single-node-developer profile #685
- Adding docs to test CVO with custom update graph #681
- Bug 1878925: pkg/cvo/updatepayload: Drop history from target pullspec lookup #684
- Adding seed to make rand.Float64() return random values #653
- vendor: Bump openshift/api for targeted edge blocking #680
- Bug 2014071: lib/resourcemerge/imagestream.go: remove TagReference field dependency #677
- Bug 2014071: lib/resourcemerge/imagestream.go: Copy all data for new tag reference #674
- Bug 2000938: Ensure CVO applies appropriate Deployment strategy on update #650
- podsecurity: enforce privileged for openshift-cluster-version namespace #668
- Bug 2011896: pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #670
- Unset listen option while running CVO locally [doc/dev] #667
- .ci-operator: Bump to Go 1.16 #665
- Bug 2005581: install/0000_00_cluster-version-operator_03_deployment: Explicit kube-api-access #660
- OWNERS: Prune crawford #656
- Bug 2002834: lib/resourcemerge/core: Remove unrecognized volumes and mounts #654
- Updating cluster-version-operator images to be consistent with ART #655
- pkg/cvo: Drop the explicit ‘upstream’ from our replacement ClusterVersion #640
- Bug 1978376: pkg/cvo/upgradeable: Enable admin-ack logic #645
- Bug 1986707: lib/resourcedelete/helper: Never-installed alternative in deletion log message #642
- Bug 1997596: install/0000_90_cluster-version-operator_02_servicemonitor: Trim labels for UpdateAvailable #643
- Bug 1997347: Ensure recent etcd backup before minor-version updates #637
- Bug 1978376: Add admin ack Upgradeable condition gate #633
- Bug 1985802: Updating the lease, renew, retry duration #634
- Move some approvers to emeritus_approvers #636
- Bug 1989496: Fix typo in ClusterOperatorDegraded alert #635
- Update the doc links in Readme #632
- Bug 1982046: lib/resourcedelete: Always check delete progress #629
- tombstone previous docs location with link to openshift/enhancements. #631
- Bug 1984414: Log resource diffs on update only in reconcile mode #628
- Bug 1970421: Do not check if Job has Failed count set #614
- Added waitgroups for autoupdate workers to complete before stopping #613
- Bug 1978749: pkg/cvo: Respect noProxy #622
- Bug 1978774: pkg/cvo/egress: Load HTTPS proxy from Proxy status #621
- Enable misspell linter #619
- Added ownerReference to all objects created and managed by CVO #617
- Bug 1976307: add ImageStreams manifest delete annotation logic #618
- Remove toleration of unschedulable #526
- Fix more golangci-lint issues #616
- Enable staticcheck #604
- Enable deadcode linter #599
- Enable gofmt #601
- Enable govet #603
- Enable unused #606
- Enable structcheck #605
- Enable errcheck linter #600
- Enable gosimple #602
- OTA-222: Add a manifest annotation to be used for object deletion #438
- Docs: Adding the update workflow #596
- pkg/cvo/upgradeable: Soften “cannot be upgraded” to “should not be upgraded” #611
- Updating cluster-version-operator images to be consistent with ART #610
- Fixed fake client for CVO scenarios test #597
- Added golangci-lint with most linters disabled #598
- pkg/cincinnati: Log the proxy/TLS settings used for upstream fetches #568
- install/0000_90_cluster-version-operator_02_servicemonitor: Alert summary/descriptions #547
- Bug 1960559: drop APIExtensions v1beta1 #566
- Revert “prevent pod deployment deadlock due to custom SA projected volume injection” #607
- Updating .ci-operator.yaml
build_root_image from openshift/release #608
- Simplify the comparison between SyncWork references #592
- README: Update the link to the rendering release image locally header #595
- Correctly initialize service host and port when environment is missing #590
- Bug 1879184: Fixing the log message in rbac.go for clusterrole #588
- Bug 1879184: Log object updates and show existing/required diff #561
- Bug 1946479: prevent pod deployment deadlock due to custom SA projected volume injection #585
- docs/dev: Fix code block brackets in run-cvo-locally.md #581
- Bug 1881484: Set defaults in deployment #559
- Bug 1941901: lib/resourcemerge/core: Fix toleration matching logic #578
- Bug 1881514: Prevent hotlooping in ImageStreams #579
- hack/generate-lib-resources: Use library-go manifests #552
- Bug 1947797: Bumping openshift/api to vendor apiextensions.k8s.io/v1 #567
- Update a doc example to match modern OCP #524
- Bug 1962882: pkg/cvo/updatepayload: Set priorityClassName for the version Job #571
- Bug 1927168: pkg/cvo/sync_worker: Increment Attempt on failed reconciliation #569
- Bug 1881481: TargetPort should default to port in ServicePort if unset #563
- Bug 1881520: avoid hotlooping on RoleBindings with empty APIGroup #562
- Dockerfile*: Bump to Go 1.16 #564
- Bug 1960554: Remove rbacv1beta1 support #565
- Bug 1927168: pkg/cvo/internal/operatorstatus: Replace wait-for with single-shot “is it alive now?” #560
- Bug 1881481: Only compare ServiceType when set in manifest #558
- Bug 1957991: install/0000_90_cluster-version-operator_02_servicemonitor: Update ClusterOperatorDegraded message to 30m #556
- Bug 1957775: pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #553
- Bug 1957991: install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded #554
- Bug 1834551: pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #550
- Rename workload annotations #548
- Bug 1951339: lib/resourcemerge/core: Clear env and envFrom if unset in manifest #549
- Bug 1950430: pkg/cvo/metrics: Drop HTTP, require HTTPS for metrics access #481
- Add management workload annotations #543
- docs/user/reconciliation: Add some English to the release image inspection #542
- pkg/cvo/internal/operatorstatus: Drop deprecated failing/progressing handling #527
- lib/resourcemerge/rbac: Reconcile ClusterRole.AggregationRule #544
- docs/user/status: Mention channel-clearing for VersionNotFound #541
- Bug 1938947: Ensure automountServiceAccountToken is synced on service account updates #537
- Document impact of upgradeable condition on the ability to begin an upgrade #538
- Updating cluster-version-operator builder & base images to be consistent with ART #515
- Bug 1871303: metrics: serve metrics after leader lock acquired #528
- pkg/cvo/metrics: Exclude unrecognized statuses from cluster_operator_conditions #530
- Bug 1929917: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #531
- pkg/cvo/internal/operatorstatus: Change nested message #514
- Use profile from the installer to render CVO manifests #522
- Revert “Merge pull request #523 from jottofar/cv-logging” #529
- pkg/cvo: Add logging to track ClusterVersion #523
- pkg/payload/task: Fix UpdateEffectType const comments #513
- Bug 1927944: pkg/start: Fix shutdown deadlock when die before getting a leader lock #519
- pkg/cvo/upgradeable: Fix “Upgradebale” -> “Upgradeable” #459
- pkg/cvo/metrics: Log metrics-server shutdown #453
- pkg/cvo/sync_worker: Make expected/actual version mismatch fatal #431
- Bug 1926310: install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #509
- pkg/cvo/updatepayload: Fix “verifcation” -> “verification” typo #511
- Bug 1921413: pkg/cvo/cvo: Guard Operator.Run goroutine handling from early cancels #508
- Bug 1916384: pkg/cvo: Use shutdownContext for final status synchronization #501
- Bug 1884334: UpdateError: enhance for ability to determine when upgrade failing #486
- Bug 1903382: pkg/payload/task_graph: Require firstIncompleteNode to have tasks #484
- Bug 1921277: pkg/cvo/sync_worker.go: Fix log statements to handle arguments #507
- Bug 1768255: replace Fraction with Done and Total #497
- Bug 1918085: Fixing the log message in WaitForJobCompletion() #503
- Bug 1905221: pkg/cvo/sync_worker.go: Ignore work changes during init #500
- Bug 1905221: pkg/cvo/sync_worker.go: log work change details #492
- *: Replace registry.svc.ci.openshift.org with registry.ci.openshift.org #496
- Bug 1906100: use child context to verify payload signature on forced update #493
- Bug 1907329: Add cluster profile support #404
- Bug 1879976: pkg/cvo: Compare Cincinnati data by digest when merging metadata #490
- Bug 1907313: Don’t create ClusterOperator during precreation step if it’s present in overrides #488
- Bug 1906916: bump k8s.io from v0.19.0 to v0.20.0 #489
- Add ClusterProfile template variable #483
- Modify to use library-go manifest and verify packages #443
- docs/dev/clusteroperator: Fix “he” -> “the” typo #479
- Doc fix for cluster operator creation step #478
- Bug 1891143: pkg/cvo/metrics: Abandon child goroutines after shutdownContext expires #477
- hack/log-explainer: Don’t crash if run on truncated logs #475
- Fixing go doc for equalUpdate() #474
- Bug 1886900: pkg/cvo/sync_worker: Demote “Status change: …” logging to v6 #472
- Bug 1886900: pkg/cvo/sync_worker: Drop “Manifest: …” logging #469
- Updating cluster-version-operator builder & base images to be consistent with ART #468
- Fix typo in goarch variable #466
- docs: update cluster_installer description #447
- Fixing spelling of notUpradeableCondition #454
- Full changelog
- Updating configmap-reload images to be consistent with ART #40
- OWNERS: cleanup #39
- Updating configmap-reload images to be consistent with ART #38
- Updating configmap-reload images to be consistent with ART #37
- OWNERS: update #36
- Updating configmap-reload images to be consistent with ART #35
- Updating .ci-operator.yaml
build_root_image from openshift/release #34
- Update OWNERS file to reflect new maintainers #33
- vendor: fix inconsistent vendoring #30
- Updating configmap-reload builder & base images to be consistent with ART #28
- vendor: regenerate #29
- Updating configmap-reload builder & base images to be consistent with ART #25
- Full changelog
- Add QuickStarts cta to create ProjectHelmChartRepository in the helm catalog description text #10904
- set helm feature flag for project helm repositories #10860
- Bug 2030305: Fix that primer export download toast was not shown #10800
- Bug 2009189: fix annotations on updating deployment #10573
- Bug 2047317: Update doc helm OWNERS #10852
- Bug 2039534: Migrate project dashboard tests to Cypress #10834
- Bug 2046517: Recommendations notification header shows when there isn’t any recommendations #10943
- Gherkin and automation for helm chart registry to be namespace scoped #10920
- Implement multicluster console tech preview #10900
- Add a new devfile telemetry event #10876
- Bug 2023675: Add warning alert when installing operator to non suggested namespace #10491
- CONSOLE-2964: Update ts-node to v10.2.1 #10014
- Bug 2037203: Add a scrollable legend to Running VMs graph #10928
- Bug 2042274: Storage API should be used when upload PVC #10939
- Bug 2044724: Remove namespace column on VM list page when a project is selected #10937
- Bug 2040535: Added support for customized wizard #10921
- Bug 2015356: Different status shows on VM #10922
- Bug 2035602: [e2e][automation] add tests for Virtualization Overview cards #10760
- Bug 2045849: chore(i18n): update translations #10887
- Bug 2039619: - [AWS] In tree provisioner storageclass aws disk type should contain ‘gp3’ and csi provisioner storageclass default aws disk type should be ‘gp3’ #10926
- Bug 2044201: Support for DATA_SOURCE_NAME and DATA_SOURCE_NAMESPACE fix #10924
- Bug 2025821: Make “Network Attachment Definitions” available to project-admin #10906
- Bug 2044717: improve test situation for upstream #10902
- Bug 2044704: Revert “Monitoring: Add runbook URLs to alert and rule details pages” #10919
- CONSOLE-2280: show support level #10551
- Bug 2044201: Support for DATA_SOURCE_NAME and DATA_SOURCE_NAMESPACE #10912
- Bug 2042851: Create template from SAP HANA template flow #10899
- Bug 2037237: Add “This is a CD-ROM boot source” checkbox to customize wizard #10896
- disable helm on multi cluster environment #10916
- Bug 2041671: Redirect to list after template deletion #10917
- Add user preferences to guided tour #10905
- Bug 2042619: Avoid runtime error when no CSVs #10884
- CCXDEV-7039: make severity links clickable in Insights Advisor widget #10875
- Bug 2037772: Use correct caps in ‘Service name’ & ‘System name ’ #10785
- Bug 1986819: fix string typos for hot-plug disks #9878
- CONSOLE-2360: Add debug terminal for pods #9578
- Bug 2041093: Changed validation of adding file content from not empty to not contain parsing errors #10895
- Add KamletBinding Visualization #10892
- update version of quick-start library to latest #10840
- Bug 2042395: Add prerequisites for active health checks test #10880
- Include the namespace-scoped Helm Chart Repositories in the dev catalog #10885
- Bug 2043117: Make recommended operator links internal #10898
- Bug 2026383: Monitoring: Fix JS error when dashboard JSON cannot be parsed #10890
- Bug 2030240: Hide virtualization overview for non-admin users #10881
- Bug 2043064: Update patternfly-topology to include latest changes and improve topology performance a bit #10879
- Bug 2039315: Filter superseded helm secrets and fix firehose to support partial metadata #10812
- Bug 2043068: Show total text even if current utilization is 0 #10897
- Bug 2042829: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10894
- Bug 2036989: Prevent route external link icon and copy-to-clipboard icon from wrapping separately from its associated inline text. #10865
- Bug 2039868: Enhance Insights widget empty states #10826
- Bug 2041475: Add function names to components which are wrapped in memo to get their name in the react dev tools #10858
- Bug 2033098: Conjunction in the ProgressiveListFooter is now translatable #10790
- Bug 2039618: Add validations to SAP HANA #10866
- Bug 2031797: Correct order and text of Boot source type input #10798
- Bug 2038772: Monitoring: Fix handling of ServiceMonitor’s matchExpressions #10877
- ODC-6455: Remove old labels from add page tests #10864
- Bug 2041492: Fix spacing between resource items in inventory card #10862
- ODC-6453: Allow multiple namespaces to be deleted as part of cleanup #10859
- Gherkin and automation for workload sidebar entry for pipeline triggers #10837
- Bug 2042567: elaborate on CodeReady in readme #10835
- Mock all the remaining github requests in e2e suite #10768
- Gherkin and automation for specifying a name for service binding connector #10723
- Bug 2042649: Bump helm to v3.7.1 #10469
- Bug 2042382: kubevirt: only run smoke tests in CI #10878
- Bug 2038879: Check if name label exists before comparing #10874
- Bug 2041763: Fix handling of the
defaultSortField prop for tables #10868
- adds support for host app to pass configurations for apiDiscovery , appInternalFetch #10707
- Bug 1986302: Check rbac before polling for rules silences #10725
- Bug 2040616: - rolebindings page doesn’t load for normal users #10867
- Bug 2040783: Show the new resource name, esp. when using generateName on the import status page #10850
- Bug 2040653: Fix topology sidebar warns that another component is updated while rendering #10842
- Bug 2015420: Add VMs resource to project’s intentory card #10839
- Integrate PatternFly log viewer extension into Pods and Nodes #10486
- Bug 2008235: Fix to fetch imageStreamTag on reload in edit-deployment form #10771
- Bug 2040782: Fix that import YAML page blocks input with more then one generateName attributes #10849
- Bug 2040655: Fix that user settings update fails when selecting application in topology sidebar #10843
- Bug 2013127: allow catalog categories and cards to open in new tab #10853
- Bug 2039798: contextual binding should create service binding connector #10832
- Bug 2039065: re-enable Bulk Import e2e test and increase wait #10814
- Bug 2037241: Default cache ns store ttl to 0 #10861
- Bug 2039743: Fix react “missing key” warning when open operator hub detail page (and maybe others as well) #10822
- Bug 2011368: fix PipelineRun visualization tooltip to show duration #10806
- Bug 1982662: Fix localization issues in Add Storage page #10054
- Bug 2040661: Fix different react warnings when leaving topology #10844
- Bug 2039619: - [AWS] In tree provisioner storageclass aws disk type should contain ‘gp3’ and csi provisioner storageclass default aws disk type should be ‘gp3’ #10845
- Bug 2038772: Monitoring: Handle service monitors with undefined matchLabels #10854
- Bug 2039776: Monitoring: show a error message if wrong dashboard name is passed to the URL #10851
- Bug 2039770: Monitoring: use namespace to detect the active perspective instead of useActivePerspective hook #10836
- Bug 2034362: Update description of disk interface #10825
- Bug 2041204: Fix templates link in inventory card #10848
- Bug 2038034: non-privileged user cannot see auto-update boot source #10803
- helm: support namespaced helm repository for helm API #10467
- Bug 2035703: - Roles -> RoleBindings tab doesn’t show RoleBindings correctly #10846
- Bug 2040150: Make changes to HPCS KMS component #10833
- Bug 2039057: Adjust kind column to target width in API explorer page #10811
- migrate knative plugin models to resource metadata dynamic plugin #10330
- Bug 2027563: e2e tests wait for add forms to load #10654
- Bug 2014420: dont crash topology page #10272
- Bug 2014464: Fix navigation spacing in dev (generic) perspective #10830
- Bug 2039781: OBC navItem hidden for non-cluster admin #10824
- Bug 2039678: Check if ‘auths’ key when switching between create image secret subforms #10821
- Bug 2039244: Add null checks in ActionMenu to fix helm history page crash #10813
- Bug 2027524: delete channel and broker when deleting an application #10787
- Bug 2034190: unable to add new VirtIO disks to VMs #10748
- Bug 2035146: Removed not useful error #10819
- Bug 2039056: Fix alignment of the schema breadcrumbs … #10831
- Bug 2037664: Override the PatternFly default vertical alignment value within tables to correctly align cell contents. #10829
- Bug 2037246: Cusotmize boot source was missing DataVolumes in order to use new DataSource #10817
- Bug 2015420: Update SupportedExtension to include all dashboard extensions #10797
- Bug 2039529: disable Project Dashboard Resource Quotas Card test #10816
- Bug 2039756: Fix react warning on operator hub description component, used for example on the KnativeServing detail page #10823
- Bug 2039586: update centos8 to centos stream8 #10809
- Bug 2038761: Monitoring: Handle case where
service.metadata.labels is undefined #10808
- Bug 2038832: Add registry URL suggestions for centos stream templates #10801
- HAC 374: Migrate last k8s reducer to SDK and revert sdkK8s back to k8s #10714
- Bug 2039064: Disable Bulk Import e2e test #10648
- Bug 2021205: fix git url change validation #10769
- Bug 2038465: Upgrade chromedriver to 90.x to support Mac M1 chips #10691
- Bug 1987044: [OCPV48] Shutoff VM is being shown as “Starting” in WebUI when using spec.runStrategy Manual/RerunOnFailure #10758
- Bug 2038663: Added Matan Schatzman and Aviv Turgeman to OWNERS file, removed some other inactive users #10778
- Bug 2025431: Provide specific windows source link #10796
- GitOps: Add error handling (#1278) #10468
- Bug 2035467: Query Browser: Fix
undefined error when sorting the results table #10789
- Bug 2035704: RoleBindings list page filter doesn’t apply #10773
- Bug 2018234: Fix that user settings ConfigMap is also created for users with restricted access #10705
- adds/updates jsdoc comments, expose useK8sWatchResource(s) hooks from SDK and adds typing #10779
- Bug 2009754: Fix sticky footer in the import forms #10776
- Bug 1999903: Changed This is cdrom boot source checkbox id #10775
- Bug 2037182: update the ping source apiVersion #10774
- Move ResourceStatus to dynamic-plugin-sdk #10770
- Bug 1957547: [RFE]VM name is not auto filled in dev console #10763
- Make ResourceIcon consume groupVersionKind #10762
- Bug 1999796: Add support for fetching partial metadata and fix helm list page crash #10754
- Bug 2035348: Fix two grammar issues in kubevirt-plugin #10727
- Bug 2035321: chore(i18n): update translations #10724
- Bug 2034068: updates tests for downstream #10685
- Monitoring: Add Prometheus Targets UI pages #10625
- Bug 2028170: Remove whitespaces around mirroring card popover #10601
- DevConsole refactor #10420
- Bug 2032415: Templates page - remove “support level” badge and add “support level” column which should not be hard coded #10706
- Bug 2037801: disabled serverless specs as serverless operator is not available in the operatorhub #10786
- Bug 2035910: Show manual approval options #10780
- Update Event Sources Visualization and SideBar #10721
- Bug 2010181: Environment variables not getting reset on reload on deployment edit form #10170
- Remove duplicate K8sKind type #10764
- Bug 2023865: Pull in css to support react-virtualized-extension and remove overrides. #10626
- Bug 2035409: Change catsrc name as the older is no longer published #10772
- Read from tektonconfig to enable/disable the hub tasks in pipeline builder #10767
- Bug 1994094: Added missing translations #10749
- Bug 2027132: Changed Fedora and Centos icons in template screen #10761
- Bug 2035772: AccessMode and VolumeMode is not reserved for customize wizard #10743
- Bug 2035141: [RFE] Show GPU/Host devices in template’s details tab #10745
- Bug 2035933: volume mode and access mode are empty in customize wizard review tab #10744
- Bug 2019645: Create button is not removed on “Virtual Machines” #10752
- Bug 2029579: Fix TypeError when application has HelmRelease #10742
- Bug 2033634: fix modal list style type #10740
- Bug 2034647: missing volumes list in snapshot modal #10733
- Bug 2019639: “Take snapshot” should be disabled #10751
- Bug 2034129: Fix guided-tour popover title #10736
- Bug 2029671: VM action “pause” and “clone” should be disabled #10747
- Bug 2033044: Shift invalid devfile alert down #10688
- Bug 1998241: Support OB/C pages for Ceph Standalone Mode if RGW is present #10108
- Bug 2034823: Added RHEL 9 as pinned template #10741
- Bug 2031057: Topology sidebar for Knative services shows a small pod ring with “0 undefined” as tooltip #10715
- Bug 2034248: GPU/Host device modal is too small #10731
- Bug 1992414: Removed the check for windows machines #10738
- Automation and gherkin for Serverless Usability Improvements #10702
- Bug 2035146: Missing T function for translation #10737
- Add ability to modify the URL of the URL decorator in Topology #10728
- Bug 2034170: add support for new labels for serverless function #10717
- Add webhook resources in git import pipeline flow #10709
- Bug 2035264: [RFE] Provide a proper message for nonpriv user who not able to add PCI devices #10732
- Bug 1992580: storageProfile should stay with the same value by check/uncheck the apply button #10720
- Bug 2025770: Added try and catch block to prevent crash #10734
- Bug 2015422: No conflict checking on snapshot name #10712
- Bug 2030534: Node selector/tolerations rules are evaluated too early #10735
- add pipeline task hubURL link #10703
- Show binding secret in service binding sidebar #10683
- Bug 2034621: show context menu for application group #10710
- Show Create Service Binding modal on dnd of binding connector in topology #10627
- Bug 2016296: Windows machine can be created with import URL #10632
- Bug 2019647: “Remove favorite” and “Create new Template” should be disabled #10730
- Re-enable test case which checks for “Import from Git” action #10700
- Disable Features based on CSV annotations #10666
- Add support to show platform supported tektonhub tasks in pipeline builder #10722
- Bug 2034647: missing volumes list in snapshot modal #10713
- Bug 2034474: Additional checks for PVC’s existence #10716
- Uncommented automation code for Export app enhancements #10708
- Bug 2025765: It should not try to load from storageProfile after unchecking”Apply optimized StorageProfile settings” #10701
- Bug 2018985: The rootdisk size is 15Gi of windows VM #10697
- Bug 2023090: [e2e][automation] Examples of Import URL for VM templates #10456
- Moving block pool cypress testcases to ODF console #9992
- Bug 1977929: Show NADs from openshift-multus #10676
- Bug 2034257: regular user
Create VM missing permissions alert #10699
- Bug 2019636: Actions in VM tabs should be disabled #10695
- Bug 2023560: “Network Attachment Definitions” has no project field on the top in the list view #10692
- Gherkin for disabling tektonhub integration in pipeline builder #10689
- Bug 2031006: Application name input field is not autofocused when user selects “Create new application” #10675
- Bug 2019360: Create the Virtualization Overview Top Consumers card #10615
- Bug 2034243: regular user cant load template list #10698
- Bug 2021632: Fix OLM breadcrumb link #10485
- Add new cluster utilization item extension #10523
- Bug 2019634: Pause and migration is enabled in action list #10696
- Bug 2025525: overview page consume high CPU #10693
- Add encrypted RBD storage class during deployment #10563
- Bug 2033693: Support VM Descheduler integration in the UI #10668
- Bug 2028885: Add a message to all console errors which just logs an error object #10494
- Bug 2033013: Fix user preferences project dropdown #10684
- Enable Secure Route option by default in Deploy Image & Import from git flow #10643
- Add K8sServices as a sinkable resource #10598
- migrate context menu actions of WorkloadNode and application group to use new action extn mechanism #10557
- Bug 1911173: Monitoring dashboards: Improve series titles when a label is missing #10655
- Bug 2033407: Fix secure route pre-filled issue in edit flow #10687
- Bug 2033587: Wait for the quota chart row to improve test stability #10686
- Bug 2033403: Show provider information for devfiles in catalog #10682
- Bug 2033290: Use TypeScript 4 when building SDK packages #10680
- ODC-6443: Add adv. option to customize route labels #10663
- Bug 2032547: hardware devices table have filter when table is empty #10661
- Bug 2032421: UI integration with new auto update images #10659
- Bug 2032407: UI will show the default openshift template wizard for HANA template #10617
- Automation enhance export app ux experience odc 6296 #10582
- Bug 2024262: Sample catalog is not displayed when one API call to the backend fails #10569
- Create new cluster inventory extension for custom components #10561
- Cluster wide encryption - Service Account for KMS authentication #10559
- Gherkin and Automation changes for topology usability improvements #10413
- Bug 2019360: Create Virtualization Overview Running VMs Per Template card #10311
- Bug 2019972: Update CSR model & fix approval/denial process #10624
- Bug 2032732: Fix styling conflicts stemming from console wide changes #10665
- Export Application view log #10591
- Bug 2033290: fix sdk build #10679
- Bug 2033215: Do not render an empty button if it has no content to fix a11y check #10674
- Bug 2032851: Fix networking status in Status card #10673
- Bug 2032516: Add support for checking .devfile.yaml during strategy detection #10670
- NETOBSERV-32 Use new CNO configmap to get network features #10640
- Gherkin and Automation for dev console usability improvements #10554
- GITOPS-1285 set equal width for details page card #10500
- Migrate contextmenu for VmNode, Service Binding #10179
- Bug 2031831: Scope toolbar for specific left alignment use on list pages and remove… #10649
- Bug 2033138: No model registered for Templates #10681
- Add Support information in the event source catalog side panel #10585
- Create Service Binding CTA to topology nodes actions menu #10550
- Remember the last selected node in topology #10547
- Bug 2032831: Fix an error to show Knative Services and Revisions also if the Service has no owner revision #10667
- Bug 2026209: Fix tektonhub task upgrading issue #10653
- Bug 2015472: Form and YAML view switch button should have distinguishable status #10671
- Bug 2005902: Add support for storage class selection for mcg standalone #10628
- Automation of toast notification and route label for epic ODC-6266 #10650
- Move kindToAbbr to the SDK #10622
- Bug 2018094: Monitoring dashboards: Allow tooltip width to extend further #10657
- Monitoring: Add runbook URLs to alert and rule details pages #9376
- Bug 2027311: Fix k8s watch hooks to work with core resources #10571
- Bug 2028160: Remove i18nKey in network-policy-peer-selectors.tsx #10642
- Add frontend OWNERS to demo plugin #10658
- Bug 2026383: Monitoring: Handle null ref.current in useIsVisible hook #10656
- Bug 2024932: Catch unhandled promises (to increase e2e stability) #10606
- Migrate usek8sWatchResource(s) #10595
- Bug 2009664: fix edit ksvc in git import flow #10255
- Bug 1992509: Could not customize boot source due to source PVC not found