Back to index
4.12.0-0.nightly-2025-03-31-082843 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2025-03-31-082843 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2025-03-31 08:33:08 +0000 UTC
Image Digest: sha256:d51a58c4d898d7abc1156716270f97d90b6f3ac761497543c82d536bfc9c7604
Components
New images
Removed images
grafana
image-customization-controller
ironic-hardware-inventory-recorder
jenkins
jenkins-agent-base
jenkins-agent-maven
jenkins-agent-nodejs
Rebuilt images without code change
machine-os-content sha256:7ea97d2c6c007ee84bfb1d0778ad672413fe8e4da0f38548bf4ead0ae11e2f42
OCPBUGS-21313 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38 Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #17
OCPBUGS-6493 : UPSTREAM: 682: fix gofmt #22 UPSTREAM: <carry>: Remove .github files #16
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #15
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #13
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #10
Bug 2057495 : Add a parameter to the schema to automatically increase volume sizes … #12 Bug 2069075 : Add explicit pciutils package #11 Full changelog
OCPBUGS-21404 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #66 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #58 OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #38 STOR-858 : Bump github.com/openshift/* and k8s.io/* #36 Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #37
Bug 2114009 : Add VolumeSnapshotClassController #35 Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #34
Bug 2096691 : Fix typo in resourceGroupId param #33 Bug 2096691 : Add resourceGroupID to StorageClass parameters #32 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #29 Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #30
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #27
Bug 2057495 : Auto increase volume size to 20 GiB in the default storage class #25 Set fsGroupPolicy in CSIDriver #23
Disable snapshot tests #21
Add e2e test manifest #20
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #17
Add Dockerfile.test #18
Full changelog
OCPBUGS-33457 : UPSTREAM: 1919: Add reserved-volume-attachments #267 OCPBUGS-20919 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #241 OCPBUGS-14281 : Volume unmount repeats after successful unmount, preventing pod delete #226 UPSTREAM: <carry>: Remove .github files #212
STOR-860 : Rebase to v1.11.4 for OCP 4.12 #206 OCPBUGS-1574 : UPSTREAM: 1398: Add resolver to handle custom endpoints #208 Fix older dockerfile #207
Updating ose-aws-ebs-csi-driver images to be consistent with ART #202
Updating ose-aws-ebs-csi-driver images to be consistent with ART #201
Bug 2074279 : UPSTREAM: 1210: Update golang.org/x/crypto for CVE-2022-27191 #200 Bug 2050173 : Fix build on ARM after rebase #198 Updating ose-aws-ebs-csi-driver images to be consistent with ART #197
Rebase v1.5.1 #195
Full changelog
OCPBUGS-33457 : Explicitly reserve 1 attachment for the root disk #308 OCPBUGS-21018 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #282 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #265 OCPBUGS-13721 : assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #230 4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208
OCPBUGS-7892 : do not inject-proxy when deploying in hypershift control plane #187 OCPBUGS-4251 : Add HyperShift specific priorityClass #170 OCPBUGS-4527 : hypershift: use correct kubeconfig secret #171 OCPBUGS-1904 : Don’t deploy VolumeSnapshotClass in static controller #166 STOR-1040 : port to hypershift #159 OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #164 Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #162
Reformat for go 1.19 #163
STOR-858 : Bump github.com/openshift/* and k8s.io/* #161 STOR-764 : Change the default StorageClass to the CSI one (AWS) #160 Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #158
Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #156 Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #157
Bug 2074706 : Set custom endpoint environment variable if available #153 Bug 2049671 : avoid excessive GET and DELETE in ResourcesSync controller #151 Set CSIDriver fsGroupPolicy #150
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #148
Full changelog
OCPBUGS-24564 : Reduce metrics cardinality #97 OCPBUGS-21562 : Update golang.org/x/net to v0.17.0 #90 OCPCLOUD-1131 : Implement fetching instance types from API #53 Updating ose-machine-api-provider-aws images to be consistent with ART #45
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #52 Update Machine API Operator dependency #51
Update Machine API operator dependency #49
pkg/actuators/machineset/controller: Fix %s in scale-from-zero logging #43
Bug 2106733 : Fix panic when accessing nil machine annotations map #46 Bug 2060068 : check securityGroupIDs for emptiness #44 Bug 2060068 : return error when no security group found #41 Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #42 Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #40 Bug 2091433 : Update EC2 instance types #39 Bump machine-api-operator to 25e61c2 #38
Validate unknown regions using AWS API #32
AWS Placement Group controller logic #33
Bug 2072195 : Custom DHCP Option Set: empty domain-name is a valid custom domain #36 Remove unreleased AWS Placement Groups support #35
AWS IMDSv2 support #34
Refactor provider status to use metav1.Condition #31
Bug 2067791 : Bump prometheus/client_golang #30 Add AWSPlacementGroup controller #25
Bug 2065510 : Update AWS SDK to 1.43.20 #29 Bug 2065160 : Ensure IP based NLB targets are deregistered before Machines are removed #28 Bug 2060697 : Update openshift/api dependency #27 Leverage basic AWSPlacementGroup for AWS PG membership #23
Ensure Machine level tags have precedence over infrastructure level tags #24
Allow Machines to select EFA network interfaces #8
CFE-68 : user defined resource tags on EC2 instances updatable #15 Full changelog
OCPBUGS-32880 : Upgrade go-jose module to 2.6.3 #191 OCPBUGS-21312 : Upgrade golang/x/net for CVE-2023-39325 (4.12) #185 NO-ISSUE: Sync OWNERS with team members #178
NO-ISSUE: snyk: exclude vendor/ #174
Update OWNERS #157
Updating ose-aws-pod-identity-webhook images to be consistent with ART #156
Updating ose-aws-pod-identity-webhook images to be consistent with ART #155
Updating ose-aws-pod-identity-webhook images to be consistent with ART #153
Bug 2093986 : Comply to restricted pod security level #154 Bug 2067792 : upgrade prometheus/client_golang to v1.12.1 #152 Updating ose-aws-pod-identity-webhook images to be consistent with ART #151
Full changelog
OCPBUGS-21401 : Bump golang.org/x/net to v0.18.0 #95 OCPBUGS-22832 : UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #91 OCPBUGS-17159 : Increase service idle max timeout to 100 minutes #82 OCPBUGS-2076 : Replace k8s.io/cloud-provider with openshift’s version #44 Updating ose-azure-cloud-controller-manager images to be consistent with ART #41
Updating ose-azure-cloud-node-manager images to be consistent with ART #40
OCPBUGS-1413 : Rebase cloud-provider-azure 29.09.2022 #39 fix .dockerignore to satisfy OCP specific requirements #37
Replace .dockerignore file with the OCP specific one #36
Updating ose-azure-cloud-node-manager images to be consistent with ART #34
Updating ose-azure-cloud-controller-manager images to be consistent with ART #35
Updating ose-azure-cloud-controller-manager images to be consistent with ART #29
Bug 2087042 : Rebase cloud-provider-azure 22.06.2022 #32 Bug 2087042 : Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master into master #31 UPSTREAM: <carry>: set GOARCH appropriately #30
Full changelog
OCPBUGS-22941 : UPSTREAM: 1755: fix: detach disk failure when there is throttling #62 OCPBUGS-22832 : UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #60 OCPBUGS-20675 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #56 Updating ose-azure-disk-csi-driver images to be consistent with ART #34
UPSTREAM: <carry>: Remove .github files #33
STOR-864 : Rebase to v1.22.0 #32 Bug 2111811 : UPSTREAM 1367, 1409: Update max data disk count table #29 Updating ose-azure-disk-csi-driver images to be consistent with ART #28
Updating ose-azure-disk-csi-driver images to be consistent with ART #27
Bug 2073373 : Rebase to v1.16.0 #24 Dockerfile should copy binary for the correct ARCH #23
build: set GOARCH appropriately #22
Updating ose-azure-disk-csi-driver images to be consistent with ART #21
Full changelog
OCPBUGS-20749 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #103 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #95 OCPBUGS-7885 : Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70 OCPBUGS-3425 : Only deploy VolumeSnapshotClass if CRD exists #59 Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #55
STOR-858 : Bump github.com/openshift/* and k8s.io/* #53 Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #51
Bug 2095049 : Only use credentials that are provided by the azure-inject-credential… #49 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #48 Mark CSI StorageClass as the default one #47
Bug 2062152 : Increase pod startup timeout in e2e tests #45 Bug 2073373 : Sync cmdline arguments with upstream #46 Fix CSIDriver fsGroupPolicy #44
Full changelog
OCPBUGS-20842 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39 STOR-865 : Rebase to v1.21.0 for OCP 4.12 #17 Updating azure-file-csi-driver images to be consistent with ART #19
UPSTREAM: <carry>: Remove .github files #18
Updating azure-file-csi-driver images to be consistent with ART #16
Bug 2080449 : UPSTREAM: 1023: add new option to allow VHD feature opt-out #15 Updating azure-file-csi-driver images to be consistent with ART #14
Bug 2074282 : UPSTREAM: 978: chore: Update golang.org/x/crypto for CVE-2022-27191 #13 Bug 2073436 : Update to v1.14.0 #12 Dockerfile should copy binary for the correct ARCH #10
build: set GOARCH appropriately #9
Updating azure-file-csi-driver images to be consistent with ART #8
Full changelog
OCPBUGS-20946 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #78 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #71 STOR-858 : Bump github.com/openshift/* and k8s.io/* #37 Updating azure-file-csi-driver-operator images to be consistent with ART #38
Bug 2080449 : disable VHD disk feature #33 Updating azure-file-csi-driver-operator images to be consistent with ART #34
Bug 2099968 : Only use credentials that are provided by the azure-inject-credentials container #32 Bug 2092502 : Don’t ship a StorageClass backed by NFS by default #30 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #27 Fix driver definition manifest: fsGroup is supported, snapshots are not #28
Updating azure-file-csi-driver-operator images to be consistent with ART #29
disable snapshots #26
Updating azure-file-csi-driver-operator images to be consistent with ART #25
Full changelog
OCPBUGS-36148 : Fix mapi_instance_create_failed metric with accelerated networking #115 OCPBUGS-30809 : Don’t create availability set when using spot instances #105 OCPBUGS-24564 : Reduce cardinality #97 OCPBUGS-20741 : Bump x/net package to v0.18.0 #84 OCPBUGS-19549 , OCPBUGS-22247 : Fix empty clusterName references for GenerateMachinePublicIPName #82 OCPBUGS-17960 : Machine Actuator should not set metadata.name #71 OCPBUGS-17221 : Add user defined Tags to NIC Azure resources #69 OCPBUGS-1871 : Fix machine not going failed with invalid vmsize #36 OCPBUGS-1411 : Bump k8s dependencies to 1.25 #35 Update Machine API Operator dependency to fix phase transition metric #33
Bug 2108647 : Implement fetching SKUs information from Azure #32 Bug 2117439 : Populate internalLoadBalancer for Control Plane Machines when not set #31 Update Machine API Operator to bring in drain controller update #30
Bug 2085390 : make Azure instance types case-insensitive #27 Enable configuration of boot diagnostics when creating VMs #24
Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #26 Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #21 Bug 2093044 : update getAvailabilitySetName function #22 Updating ose-machine-api-provider-azure images to be consistent with ART #19
Bug 2085336 : Ignore unknown Instance types in accelerated networking check #20 Bump machine-api-operator to 25e61c2 #18
update azure instance types #17
Refactor provider status to use metav1.Condition #16
Bug 2067798 : Bump prometheus/client_golang #15 Data Disks: add deletionPolicy logic #14
Implement Azure Ultra Disk (UltraSSD) support #13
Updating ose-machine-api-provider-azure images to be consistent with ART #12
Full changelog
OTA-1310 : data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373 OCPBUGS-36087 : [release-4.12]: bump go-retryablehttp for CVE fix #8660 OCPBUGS-39290 : Add yq v4 to ci image #8929 OCPBUGS-36179 : [release-4.12]: bump github.com/container/images for CVE fix #8663 OCPBUGS-22981 : IBMCloud: Add eu-es region #7686 OCPBUGS-30630 : baremetal: populate customDeploy in advance #8144 OCPBUGS-32449 : Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8290 OCPBUGS-30768 : update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 #8140 OCPBUGS-30134 : [release-4.12] bump containerd for vulnerability fix #8091 OCPBUGS-27454 : baremetal: correct external_http_url for v6-only BMCs #7900 OCPBUGS-25593 : [release-4.12] OCPBUGS-16640: Update azure cli version to 2.49.0 #7849 OCPBUGS-23184 : azure: validation: validate defaultMachinePlatform #7709 OCPBUGS-25476 : destroy: gcp: fix destroying regional disks #7845 OCPBUGS-23302 : images: installer: add xz to the container #7726 OCPBUGS-23379 : images: update govc image in upi-installer #7739 OCPBUGS-22116 : Add KMS encryption keys if provided #7769 OCPBUGS-23329 : Specify google cloud CLI to version 447.0.0 #7731 OCPBUGS-22933 : [release-4.12]: vsphere: fix validation of CPUS and CoresPerSocket #7677 OCPBUGS-13288 : use python3 for cloud sdk #7170 OCPBUGS-18645 : new Aws secret regions support #7473 OCPBUGS-22288 : Don’t log password values #7627 OCPBUGS-18644 : terraform: aws: secret regions now support ALIAS record #7472 OCPBUGS-17651 : Validate that the rendevousIP is assigned to a master #7416 OCPBUGS-20145 : [release-4.12] Use updated ansible-core for Openstack image #7560 OCPBUGS-18646 : Allow destroy for C2S isolated (us-iso and us-isob) partitions #7474 OCPBUGS-10992 : bootstrap-pivot: skip pivot in SCOS Live ISO #7035 CORS-2792 : AWS Shared VPC Backport [release-4.12] #7435 OCPBUGS-18320 : CORS-2445: GCP: Add osImage to the install config #7454 OCPBUGS-17404 : backport openstack UPI for ansible 2.10 #7399 OCPBUGS-16778 : bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 #7420 OCPBUGS-17467 : Allow override of networkType #7406 OCPBUGS-17174 : Set AdditionalTrustBundle in override when mirroring not enabled #7386 OCPBUGS-16382 : azure: skip LB creation when not needed #7342 OCPBUGS-14868 : Shorten SNO installation duration by releasing CPC lease #7242 OCPBUGS-14495 : Support /dev/disk/by-path root device hints #7227 OCPBUGS-16151 : ic: azure: validate diskTypes in AzureStack #7331 OCPBUGS-11199 : azure: upi: use Image Gallery in ARM templates #7054 OCPBUGS-13940 : bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249 OCPBUGS-14664 : Shorten SNO installation duration by releasing CVO lease #7235 OCPBUGS-7400 : Check for AWS STS installation before trying to get all IAM Roles #7175 OCPBUGS-13819 : Bootstrap on aws should have same metadata service type as on other nodes #7196 OCPBUGS-12202 : Relax vsphere, nutanix VIP validation #7116 OCPBUGS-7551 : vSphere - ignore all bootstrap disk changes #6860 OCPBUGS-14014 : Do not always output warning msg when releaseImage is digest #7202 OCPBUGS-13052 : bump RHCOS 4.12 bootimage metadata #7164 OCPBUGS-12956 : openstack: Add netcat to the Installer image #7148 OCPBUGS-12749 : [Alibaba] update the bandwidth value of EIP #7131 OCPBUGS-7400 : Check for AWS STS installation before trying to get all IAM Roles #7141 OCPBUGS-11360 : Use 100 GB as minimum disk size in validations #7065 OCPBUGS-11662 : AWS - Remove ACLs from s3 ign #7084 OCPBUGS-11208 : GCP: add europe-west12 region to the survey as supported region #7055 OCPBUGS-11108 : Kubelet Client Cert should include system:serviceaccounts group #7050 OCPBUGS-8384 : Specify filename for default registries.conf #6941 OCPBUGS-10904 : IBMCloud: Fix SSH Private bootstrap #7028 OCPBUGS-10905 : IBMCloud set dnsrecords offset #7029 OCPBUGS-10740 : bump RHCOS 4.12 bootimage metadata #7019 OCPBUGS-7481 : Fix file check for loading openshift manifests #6907 OCPBUGS-10497 : [release-4.12] aws: bump aws-sdk-go version #6985 OCPBUGS-10439 : Sort userTags in Machine and Machineset manifests #6984 OCPBUGS-7469 : [release-4.12] GCP XPN Featuregates #6851 OCPBUGS-7063 : vSphere - Remove regexs in terraform ova import #6868 OCPBUGS-8658 : Pass Capabilites from install-config to cluster #6947 OCPBUGS-7594 : fully qualified username must be provided #6864 OCPBUGS-7746 : Convert platform type for AgentClusterInstall #6878 OCPBUGS-8015 : make VIP 168.63.129.16 noProxy in all clouds except Public #6909 OCPBUGS-6087 : Warn if agent assets detected when using non-agent waitfor #6788 OCPBUGS-7607 : IBMCloud: Handle COS reclamations #6867 OCPBUGS-7529 : bump RHCOS 4.12 bootimage metadata #6873 OCPBUGS-7521 : Update AgentConfig template #6857 OCPBUGS-5992 : azure: validate Windows-only VM types #6780 OCPBUGS-6991 : Don’t require vSphere details for agent installer #6826 OCPBUGS-6807 : Check platform baremetal settings against default values #6815 OCPBUGS-7103 : Set the configured proxy settings for agent installer #6830 OCPBUGS-7131 : bootstrap: set 0644 mode for registries.conf #6804 OCPBUGS-5960 : bump RHCOS 4.12 bootimage metadata #6791 OCPBUGS-5996 : vsphere: set default resource pool when missing failure domain topology #6781 OCPBUGS-5667 : CVE-2021-4238: goutils: update for randomness fix #6764 OCPBUGS-5782 : CVE-2021-4235: Denial of Service in go-yaml #6769 OCPBUGS-6052 : validate additional confidential VM types #6785 OCPBUGS-4895 : Set ip=dhcp,dhcp6 for master nodes on dualstack #6706 OCPBUGS-6015 : fail to create install-config.yaml as apiVIP and ingress VIP are not in machine networks #6783 OCPBUGS-5844 : Update FCOS to latest 37.20221127.3.0 stable #6773 OCPBUGS-5764 : Expose Azure useImageGallery parameter in the MachineSets() call #6753 OCPBUGS-4460 : hold bootkube service until bootstrap has pivoted #6661 OCPBUGS-5513 : Update Azure SDK to v63.1.0+incompatible [release-4.12] #6751 OCPBUGS-4649 : Report agent installation problems on the console #6680 OCPBUGS-5455 : Remove order dependency for agent CLI string #6748 OCPBUGS-4962 : Improve error reporting from agent wait-for install-complete #6742 OCPBUGS-4886 : Switch back to gp2 ebs volume type for bootstrap instance #6705 OCPBUGS-5190 : baremetal: Extra time for provisioning interface #6732 OCPBUGS-4943 : Wait longer for VM to obtain IP from DHCP in PowerVS #6709 OCPBUGS-3899 : [Alibaba] fix the creation of public record #6605 OCPBUGS-4962 : Wait longer for baremetal #6713 OCPBUGS-5035 : ose-installer-container: vault: insufficient certificate revocation list checking #6722 OCPBUGS-4869 : aws: destroy: delete ELB listeners #6702 OCPBUGS-5019 : OpenStack: Force JSON content-type in Swift object listing #6718 OCPBUGS-2997 : bump RHCOS 4.12 bootimage metadata #6704 OCPBUGS-3890 : IBMCloud: Confirm Zones and BYON Subnets #6603 OCPBUGS-3639 : Azure: Set appropriate architecture for gen v1 image #6588 OCPBUGS-4698 : Check nmstateconfig content in agent-config.yaml #6687 OCPBUGS-4547 : out-of-bounds read in golang.org/x/text/language leads to DoS #6650 OCPBUGS-4660 : Fix missing debug messages when getting baseISO #6682 Alibaba: add the tags of the machine nodes #6667
image: Updating installer images to be consistent with ART #6658
OCPBUGS-4506 : Enable CVO unmanage overrides in bootstrap-in-place installations #6664 OCPBUGS-4457 : Fix return value from execute() #6659 OCPBUGS-4342 : data: azurerm: restore RHCOS SA access configuration #6645 OCPBUGS-3249 : update golang.org/x/crypto to address security vulnerabilities #6631 OCPBUGS-4267 : Azure Stack: use managed images for compute nodes #6639 OCPBUGS-4308 : Redact pull secret from agent-gather #6640 OCPBUGS-4068 : (Agent) Do not require host data in platform baremetal section in installconfig #6623 OCPBUGS-4064 : Restart create-cluster-and-infraenv.service if it fails #6622 OCPBUGS-3657 : Uplift terraform-provider-ironic to 0.3.0 #6592 OCPBUGS-4063 : OpenStack: Force JSON content-type in Swift #6621 OCPBUGS-3055 : add bootstrap configmap during the SNO reboot #6555 OCPBUGS-3523 : Pass FeatureSet to cluster config render #6590 OCPBUGS-3406 : Use project after creation #6575 OCPBUGS-3307 : gcp: fail during validation if service usage is not enabled #6565 OCPBUGS-3515 : (AGENT) only support amd64 archs #6580 OCPBUGS-3520 : Automatically retry install #6582 OCPBUGS-3519 : Always use first matching mirror in assisted-service #6581 OCPBUGS-3459 : Always add router CAs to kubeconfig, even if console is not available #6578 OCPBUGS-3250 : azure: Fix client certs authentication #6561 OCPBUGS-3398 : Fix cluster wide proxy #6587 OCPBUGS-3366 : Set PublicContainerRegistries for entries in mirror #6568 OCPBUGS-3306 : agent ased installation fix for dual stack vips #6564 OCPBUGS-3095 : Power VS Check for existing DNS permitted network and public gateway #6550 OCPBUGS-3035 : support multiple documents in the same extra manifest file #6549 OCPBUGS-3343 : [vsphere-zones] Fix user folders #6566 OCPBUGS-3263 : Static linking the terraform and providers binaries #6562 OCPBUGS-2984 : Azure: Fix DiskEncryptionSet regex validation #6538 OCPBUGS-3028 : Use result from List function after checking error #6543 AGENT-348 : Warn when information in install-config is ignored #6523 OCPBUGS-2837 : Reduce debug logs in agent wait-for commands #6520 Fix unexpected behavior from merging #6470 and #6500 #6526
AGENT-390 : Include CPU Architecture in ISO filename #6485 docs: feature sets #6506
Agent-321: Cluster and Host validations rework #6500
OCPBUGS-2327 : Add validation for releaseImage and registry.conf #6423 OCPBUGS-2086 : Detect failure in wait-for on transition back to ready #6470 OCPBUGS-2627 : agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495 OCPBUGS-2338 : Don’t use error messages as default values #6486 OCPBUGS-1824 : enhance agent systemd service dependency #6408 OCPBUGS-1704 : Service Usage API is required, not optional #6504 Revert “create: add check for cluster operator stability” #6503
OCPBUGS-2301 : Search Network Project For resources #6499 OCPBUGS-2436 : Revert “Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml”” and fix OCPBUGS-2436 #6491 OCPBUGS-2174 : fix metadata tags not supported in certain regions #6475 Add initial support for OKD/SCOS #6443
Updating golang version to fix gofmt issues #6484
Bug 2117537 : validation rule for invalid rendezvousIP in AgentConfig #6474 create: add check for cluster operator stability #6124
Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml” #6490
Add LB Type in the infrastructure cluster object via install-config yaml #6478
Bug 2059491 : [Alibaba] fix the format of Name #5668 AGENT-284 : Allow user to choose platform type #6438 OCPBUGS-2262 : Update gcp explain for DNS zones #6483 OCPBUGS-1941 : bump RHCOS 4.12 bootimage metadata #6452 Bug 2072202 : Check for api and api-int resolution during cluster install #5816 OCPBUGS-2259 : Fix soft-anti-affinity known issue #6479 Removing jstuever from OWNERS #6480
OCPBUGS-1881 : vsphere/destroy: improve logs when folder is not empty #6456 Adding “syd05” as a choice for zones in PowerVS #6468
OCPBUGS-1856 : IBMCloud: Allow traffic to kube-api-lb #6458 update to release.openshift.io/feature-set to match OCP 4.12 #6476
AGENT-347 : generate OS_IMAGES dynamically #6441 OCPBUGS-1900 : Avoid SNO bootstrap jsonpath error #6463 OCPBUGS-1698 : multi-zone network slice validation #6422 OCPBUGSM-47893 : added validation rule for invalid mac address in AgentConfig #6473 populate vSphere infrastructure spec #6457
OCPBUGS-1896 : Validate Credentials Mode After Install Config step #6453 OCPBUGS-2029 : Fix agent installation InstallConfig proxy processing #6461 Add docs about IPv6 on the additional Networks #6435
AGENT-375 : generate FIPS annotation for ACI #6467 AGENT-349 : Allow console login to Agent ISO #6464 OCPBUGS-1913 : Agent Installer: Do not fail on deprecated apiVip and ingressVip values #6462 Power VS: Disconnected cluster support #6347
azure: create bootimages using image gallery #6304
CORS 2046: GCP Add base domain validation when DNS zone is specified #6300
Fixes tested_instance_types_aarch64.md #6451
pkg/types: add feature set support #6336
pkg/asset/releaseimage/pullspec: Include override pullspec in log message #6460
Bug 2104997 : Add additional fields to proxy manifest #6374 OCPBUGS-527 : Improve error message in case of failure during the agent image generation #6436 AGENT-271 : Generate kubeadmin-password with ISO #6313 AWS: destroy: move helper functions to their own file #6131
AGENT-369 : SNO validation #6444 Add host-config status to agent-gather #6442
AGENT-321 : Move validation failures to debug log level #6446 CORS-2073 : Remove terraform provider “random” #6387 Increase start timeouts for assisted services #6445
OCPBUGS-891 : aws: add explicit EIP dependency for nat gw #6379 images: UPI: update gcloud install on rhel8 container #6158
OCPBUGS-1490 : [vsphere-zones] Handle no set zones #6390 powervs: introduce manifest for OVNKubernetes configuration #6405
Power VS: Enable IBM DNS service for private cluster support #6228
AGENT-264 : validate agent-config macs #6434 Ensure installer created ControlPlaneMachineSets are active on install #6425
AGENT-330 : Add disconnected instructions to MCE integration doc #6424 OCPBUGS-561 : bump RHCOS 4.12 bootimage metadata #6403 Remove extra blank line in DHCP debugging #6439
Change PowerVS default machine CIDR #6428
Change error on execute() to a debug message #6427
fix agent-config-template emitted by agent create #6306
CORS 2040: [gcp] Adding Public and Private Managed zones #6288
Bug 2116904 : Base generated NMStateConfig on InstallConfig name #6244 AGENT-354 : script for gathering install data #6402 AGENT-364 : Validate network type for SNO clusters #6419 cleanup unused types and constants after platform spec refactor #6370
AGENT-351 : Add MachineNetwork to agent-cluster-install for dual stack #6364 AGENT-319 : Set agent-config version to v1beta1 #6416 OCPBUGS-816 : Check that cached base ISP matches hash in release payload #6318 AGENT-365 : Set install invoker to “agent-installer” #6418 Bug 2055247 : pkg/asset/installconfig/azure: standardDDv5Family is not currently supported #6203 Verifying yq is installed properly in libvirt installer containers #6319
Agent installer: try to make systemd services more robust #6312
OCPBUGSM-47737 : Do not enable pre-network-manager-config.service #6323 Add documentation for agent networking #6400
vsphere: prevent duplicate validation check in multi-zone #6398
AGENT-288 Log rendezvous host IP when creating agent ISO #6393
AGENT-309 Display the rendezvous IP in motd and issue #6386
Agent: Don’t pass AdminKubeConfigClientCertKey #6373
hack: Use golang-1.16 image of origin-release #6367
OCPBUGS-1231 : disconnected machine-os-images info #6339 AGENT-325 Set NetworkType in AgentClusterInstall #6287
Bug 2094716 : docs: fully air-gapped AWS IPI install #6076 OCPBUGS-1489 : [vsphere] Loop over all folders for destroy #6378 AWS: resolve subnet-related FIXMEs #6140
go getter update for terraform & terraform providers #6352
GCP: Add me-west1 region #6359
aws: replace deprecated object in terraform config #6383
powervs-delete-named-dhcp #6365
azure: validation: avoid specifying capabilities twice #5952
CORS-2280 : IBMCloud: Add DNS Record for internal public traffic #6375 OCPBUGS-729 : vSphere 6.7u3 failing privilege validation #6293 Agent: Increase bootstrap-complete timeout #6384
aws user tags: set limit == openshift/api #6368
OCPBUGS-927 : azure: add sleep between zone and link creation #6349 Update power-go-client #6229
Fix generating Machine objects for PowerVS #6366
AGENT-328 : Add documentation for agent mce integration #6358 aws: allow clusters with public only subnets #6342
AWS UPI docs: remove control plane machineset #6346
OCPBUGS-705 : vSphere privilege checking failing when providing user-defined folder and/or resource pool #6281 GCP: allow environmental authentication #6330
AGENT: add ipv6 support #6328
OCPBUGS-1234 : [CFE-580] Fixed error condition for user tag validation #6356 OCPBUGS-717 : Upgrade python3.7 to 3.8 for AWS UPI #6270 OCPBUGS-963 : OpenStack: Lift validation for 14 chars cluster names #6309 OCPBUGS-1234 : [CFE-580] Extend user tags limit to 40 based on AWS limits #6345 OCPBUGS-1226 : OpenStack UPI: Create server group for Computes #6340 Power VS: use the new name field for the dhcp nw #6294
Add AWS r6i into tested instance types table #6337
vsphere zonal: platform spec and terraform updates #6329
CORS-2280 : IBMCloud: Add DNS Service permitted VPC #6325 CORS-2280 : IBMCloud: Add DNS Service destroy #6321 OCPBUGSM-47740 : No networkconfig needed with DHCP agent config #6317 azure: add support for arm64 instances (Dps_v5 instances) #6298
azure: Add client certification to terraform #6250
pkg/asset/ignition/bootstrap/cvoignore: Add group/kind/name(space) collision detection #6247
Add additionalTrustBundlePolicy field to allow CA bundle propagation #6232
OCPBUGS-1247 : Restrict CPMS from being created with single node clusters #6331 GCP: Add createFirewallRules parameter to installconfig. #6338
CORS-2043 : GCP: Passsthrough installer service account to Terraform r… #6326 Bump Nutanix Prism Go Client dep to c8a2536 to include refactors. #6308
OCPBUGS-927 : Add depends to enforce order for azure terraform dependencies #6311 vSphere: Zonal Terraform #6064
Terraform go 1.18 #6257
Revert “AWS: Create ControlPlaneMachineSet CRDs” #6324
OCPBUGS-302 : bootstrap gather: fix panic when platform is “none” #6243 Add bind-utils in upi installer image #6277
download ‘aliyun’ #6265
AGENT-308 : Add 4.12 to OS_IMAGES #6315 OCPBUGS-889 : bump default channel to stable-4.12 #6302 vSphere: Add the ability to attach a tag to a mob #5357
Power VS: Machine CIDR #6264
AGENT-318 : Merge agent-based installer #6263 CORS-2280 : IBMCloud: Add TF support for private DNS #6282 vsphere: error checking while creating vsphere clients #6305
Correct the GCP machine series name #6296
add bind config for PowerVS publish==internal IPI #6227
Bug 2084471 : validate baremetal hosts names are lowercase RFC 1123 #6112 terraform: azurerm bump provider to v3.19.1 #6262
Power VS: Enable global routing for cloud connection and specify dns #6289
fix check for control plane suitability for default zones #6295
Bug 2070744 : Fix infinite loop when failing to untag resources #5995 AWS: Create ControlPlaneMachineSet CRDs #6172
Add dual stack API & Ingress VIP support for on-prem platforms #5798
OWNER_ALIASES: remove Saqib Ali from the coreos approvers and reviewers #6291
gcp: machines to use networkProjectID when defined #6284
Bump FCOS to latest stable #6290
Switch delete ordering of CloudConnect and VPCs #6280
gcp: specify network_project_id for network and subnets #6283
Bug 2117439 : Azure masters should publish on an internal load balancer #6230 Bug OCPBUGS-164: OpenStack: Update Kuryr storage requirements #6286
CORS-2271 : IBMCloud: Add DNS Service support - installconfig #6255 Bug OCPBUGS-164: OpenStack: Set minimum disk of a flavor to 100 GB #6268
validate vSphere privileges #5741
Add support for private DNS server to PowerVS #6157
GCP: Remove firewall rules when providing network project id #6219
GCP: Add missing regions #6259
manifests: Pass the NetworkProjectID to manifests #6242
support for multi-zone/region installation #5911
cmd/openshift-install/create: One shot console access #5336
IBMCloud: Pull in latest openshift/api changes #6056
OCPBUGS-268 : vSphere - enable steal time accounting #6215 Bug 2028474 : oVirt: Removed cluster name length limitation #6206 gcp: Add validation for Network Project Data #6207
Bug 2098072 : vsphere: fix default disk type when not speficied #6233 Bug 2061947 : IBMCloud: Handle missing RG #6152 CORS-1994 : Update Installer Dependencies #6175 Bug 2109538 : nutanix: allow creating manifests without Prism Central connection #6149 IBMCloud: Use unique mutex for Client retrieval #6241
OCPBUGS-262 : UPI image download govc rate limit failure #6047 Extract the image-references file from the release, pass it to machine-config-operator #6234
powervs: allow VPC, Cloud connection, and NW re-use #6217
Bug 2109800 : IBMCloud: Allow metrics traffic #6208 IBMCloud: BYON Enablement #6183
IBMCLOUD Power VS: Updated Max and Min machinepool resource limits #6147
GCP: Added user specified tags on control plane instances #6199
Azure Stack UPI Docs: Remove Feature Gate CRs #5657
Bug 2115790 : bump RHCOS 4.12 bootimage metadata #6212 terraform: ibmcloud: bump provider version #6210
Revendor with golang 1.18 #6077
Update installer images to use golang 1.18 #6163
GCP: Add networkProjectID parameter to install-config. #6166
powervs: default to tier1 storage #6211
Download yq in upi installer containers #6008
Remove LoadBalancer settings from cloud provider config #5834
Add SPLAT members to platform reviewer/approver aliases #6202
Alibaba: Use a static region list #6178
Power VS: Add Montreal as a supported region #6209
OWNERS_ALIASES: Add Adam Piasecki (c4rt0) #6181
Switch libvirt VM’s to vnc graphic mode #6062
GCP: Added user specified tags on compute instances in installconfig #6185
CORS-2009 : Update default release image #6180 Fix ineffassign #4866
Bug 2105933 : data/data/coreos: update FCOS to 36.20220716.3.1 #6108 Bug 2114754 : gather: properly delete serial log dir #6197 tls: only report error if one happened #6195
Updating ose-installer-artifacts images to be consistent with ART #6096
Revert “GCP: Revert Instance Type from N2 to N1” #6058
CORS-2167 : Remove UPI Metal TF references #6174 Change defaultNetworkType to ovn-kubernetes #6014
PowerVS: Add 60 sec wait time after VPC creation. #6162
updated terraform-provider-ovirt #6169
Update vsphere permissions file #5387
Update kube components to v0.24.0 #6165
IBMCloud: BYON Enablement - SG Rule Cleanup #6143
BUG 2105341: Remove required check for control planes in boostrap gather #6168
BUG 2109388: Add AWS S3 Bucket Permissions #6150
added soundcard_enabled field to tf resources for master vms #6148
Update Installer approvers list #6151
IBMCloud: Update RHCOS image for VSI #6142
Bug 2102324 : Fix validation errors for instance type #6127 Updating ose-baremetal-installer images to be consistent with ART #6085
As a developer I want to update installer to use propagateUserFlags for GA #5994
terraform: update azure provider to v3 #6000
Azure console logs gathering #5904
OWNERS_ALIASES: drop miabbott from coreos aliases #6123
Gcp console logs gathering #5902
IBMCloud: BYON Enablement - Terraform #6051
Bug 2095323 : Create security group rules for each MachineNetwork CIDR #6125 Bug 2106061 : bump RHCOS 4.12 bootimage metadata #6129 test: use T.TempDir to create temporary test directory #5730
IBMCloud: BYON Enablement - InstallConfig #6050
Bug 2097691 : vsphere installconfig: use full dc path in network validation #6105 Terraform: Remove azureprivatedns provider #5983
Update OWENRS-ALIASES after changes in the team #6113
Bug 2106667 : OpenStack UPI: Allow setting external DNS #6116 Bug 2061947 : IBMCloud: Skip DNS Record delete #6013 Bug 2102228 : rhcos: Move to rhcos.mirror.openshift.com #6109 Bug 2082395 : Make azure baseDomainResoureGroup optional for private c… #6049 cmd/openshift-install/gather: Errorf for Available=False #5985
Bug 2070318 : Allow setting bootstrap kubelet ip #6042 Updating ose-installer images to be consistent with ART #6083
Bug 2098299 : Switch to perform normal marshalling with unknown fields #6039 openstack: Update base images #6082
AWS Destroy: Clean up endpoint services #6089
openstack UPI: Remove Swift example, use Glance #6091
Bug 2104578 : Remove unnecessary SG rule #6086 Bug 2090836 : Fixes CFE-489 - AWS installer should go through proxy for s3 bootstrap ignition call #5973 OpenStack: prompt FIP description #6075
Bug 1944365 : openstack: validate that VIPs are outside DHCP pools #6069 openstack UPI: clarify naming of RHCOS image #6081
Bug 2102324 : Fix panic when unknown region is provided. #6065 Bug 2103144 : openstack: validate apiVIP and ingressVIP to be semantically different #6067 Bug 2103236 : Provide proper error message for empty projects list #6071 BUG 2102632: destroy/gcp: Use min length for destroying disks #6068
Bug 2099401 : IBMCloud: Set regional URL for ibmcloud client #6046 openstack: Prepare for a UPI CI job #6055
Bug 2100841 : Print the “export KUBECONFIG=…” command on its own line for easier cut-and-paste #6018 Bug 1997704 : [OpenStack] Document in-tree limitation for external LBs #6033 Bug 2100496 : oVirt VM creation fails on empty affinity group description #6044 Bug 2064693 : Restore ability to use local clouds.yaml #5947 Bug 2047732 : [IBM]Volume is not deleted after destroy cluster #5962 Bug 2076646 : destroy/gcp: Disk names are filtered using kubernetes name format #5976 Bug 2095226 : Added changes to verify cloud connection and dhcp serviceinstance details of a powervs instance #5899 Bug 2097940 : PowerVS: Handle optional VPCRegion #6020 Bug 2082283 : Transition to the oVirt Terraform provider v2 #5867 Bug 2096905 : Swap Nutanix Prism Client #6002 Bug 2094694 : Nutanix cluster name validation #5991 Bug 2098243 : Adding error handling to powervs platform #5958 Bug 2096605 : vsphere: validate diskType if supplied #6019 Bug 2049108 : Fix network interface not found error #6016 Bug 2097260 : Fixes openshift-install create manifest failure of Power VS Platform #6007 Bug 2092107 : Re-add Power VS install-config DNS validation tests #5938 Bug 2092296 : Changed DefaultMachineCIDR of PowerVS to 192.168.0.0/16 #5940 Bug 2097239 : Changed Lower limits of CPU for PowerVS Cloud #5929 Bug 2090816 : Increase bootstrap timeout, not k8s API timeout #6010 Bug 2095917 : Nutanix set osDisk with diskSizeGB rather than diskSizeMiB #5998 Bug 1859153 : IAM instance profile race condition #5982 OWNERS_ALIASES: update coreos aliases #5989
Bug 2096352 : Collect whole journal and netstat data #5988 Bug 2090816 : baremetal: wait longer for bootstrap to complete #5981 baremetal: static IP for bootstrap node #5787
Bug 2068180 : update doc for DNS and disconnected clusters #5974 Bug 2090049 : GCP Destroy resources that are owned by cluster #5965 Bug 2094902 : Simplify cross-compiling #5905 Bug 2085336 : based on 4.11 CORS-1916 add the vm family #5913 Bug 2089563 : Use Power VS machine provider spec from openshift/api #5873 Bug 2093368 : OpenStack: Fix LoadBalancer FIP deletion on destroy #5964 Bug 2057582 : Remove all occurances of packet_device from upi/metal #5969 Bug 2057582 : For metal upi update source and versions of terraform providers #5941 BUG 2075459: IOPS was not being set even when manually configured #5925
Bug 2084280 : Remove optional services from permissions check #5915 Bug 2085380 : azure: validate VM image and instance HyperV gen match #5918 Bug 2084580 : Add check to validate cluster name for dots #5931 Bug 2086791 : Azure: validate ultrassd instance types in multi-zone regions #5937 Bug 2090487 : SNO network type update #5927 Updating ose-installer images to be consistent with ART #5950
Updating ose-installer-artifacts images to be consistent with ART #5908
Bug 2085187 : terraform: revendor golang.org/x/sys #5896 Bug 2088660 : Fix for absence folder for bootstrap ignition iso #5935 Bug 2089682 : Ensure Presence of Overlay networks in cluster is handled gracefully #5939 Bug 1965468 : Revert “Bug 1909136: OpenStack: delete volume snapshots” #5923 Bug 1969794 : Correct typo #5922 Bug 2084441 : azure: proper premiumIO validation message #5924 Bug 2078431 : Set TF_DATA_DIR to the Terraform Dir. #5864 Bug 2086718 : Add destroy cluster support for PowerVS #5737 Bug 2086936 : vSphere: change socket back to cores #5914 Bug 2086056 : openstack: add doc for OVS HW offload #5886 Bug 2065893 : bump RHCOS 4.11 bootimage metadata #5887 Bug 2085721 : Fix name for customization controller image #5909 Power VS: Use bucket name from coreos stream rather than inferring it #5782
Increase Unit Testing Coverage of AWS Install Config to Include ValidateForProvisioning #5791
Added changes for validating the IBM Account Type for Provisioning Power VS resources #5734
Updating ose-installer images to be consistent with ART #5895
AGENT-40 : allow reading cert keys #5872 Power VS: Separating bootstrap resources to own stage for clean destroy #5901
Aws console logs #5807
GCP: Revert Instance Type from N2 to N1 #5898
Dynamic retrieval of GCP Regions for a Project #5815
Update to Golang v1.17 #5870
azure: move zones functionality to the client API #5844
azure: validation: dedup getting the capabilities #5893
update azure arm templates to support customer provided vnet #5880
machines: Set defaults for machine instance types #5841
Azure Provider: fix vmNetworkType defaults by checking vm capabilities #5846
OpenStack: fix SR-IOV documentation TOC #5881
Bug 2078875 : Delete all the ports from tagged Neutron networks. #5838 Bug 2082604 : Revert “image: set os name to red-coreos-stable-amd64” #5869 openstack: Add the Kuryr squad as approvers #5866
Update template for CloudProviderConfig #5875
Bump Azure Stack Terraform Provider for Go 1.18 #5865
Add -n argument to copy network config from install environment to install-to-disk.sh.template #5795
Update SR-IOV & DPDK doc for OpenStack #5712
Bug 2080054 : Add ‘ARG TAGS=“”’ line for each build step #5794 Pull the OS Image for Nutanix via URL #5868
Power VS: fix terraform vars #5863
Update TF Provider Version to 1.40.1 #5862
Use neutral pronoun in doc. #5384
Change the default machine pool config for Nutanix #5857
Bug 2074210 : Add new Regions to the GCP Installer configuration list #5811 Update os name to correct value #5860
Update the comment explaining vCPUs on Nutanix #5859
Bug 2064170 : Fixed duplicate strings in explain #5836 Bug 2077662 : Fix AWS Platform Provisioning Check #5831 Support RAID and BIOS configuration for master nodes of baremetal IPI deployments #5196
Power VS: Create Remaining TF Resources #5780
Handle the mapi-provider-nutanix types moving to openshift/api #5812
vsphere: upi ignition leak #5850
vSphere: ignore bootstrap eagerly scrub changes #5848
Bug 2078895 : ovirt: fixing incorrect ‘format’ value validation #5847 vsphere upi: missing etc resolv #5842
vsphere: remove unused namer interface #5824
Bug 2029438 : Set rc-manager=unmanaged on baremetal bootstrap #5482 Unpack to install dir #5825
baremetal: remove redundant proxy setting #5598
Determine Nic name in Bootstrap VM for ARM and x86 #5698
Add bootstrap directory for Nutanix platform #5828
Provider Azure: Enable accelerated networking on control plane nodes #5309
Ensure that the /bin/terraform-provider-matchbox binary is present #5829
Bug 2074659 : Fix empty string usage in ValidateForProvisioning #5801 vsphere: upi, use community ignition provider #5808
Bug 2076393 : vsphere: no longer logout of platform client before finished #5818 Bug 2076880 : for vsphere ipi add cluster domain to the uploaded vm configs so that 30-local-dns-prepender can use it #5788 Ensure Nutanix API VIP is populated in the SAN for the MCS Cert #5821
Bug 2048451 : Fix proxy dial to pick all proxies #5743 update the vm types OCPQE-8674 #5704
data/bootstrap/files/usr/local/bin/bootkube: –rm all Podman containers #5803
libvirt: use el8 repo for Google Cloud SDK #5467
AWS IMDSv2 support #5793
Bug 2075873 : data/data/coreos/fcos.json: update initial FCOS to 35.20220327.3.0 #5817 Changing the machine-config service name #5707
Ensure ignition host is set to API VIP for Nutanix platform #5813
Add Power VS-specific fields to cloud-provider config #5809
Check for CVO failing condition before exiting as success #5745
Add in-repo documentation for user-selectable capabilities #5732
vSphere session cleanup #5796
Power VS: Add basic install-config validation #5779
Adding public&private zones to DNS config on PowerVS #5749
Revert “cluster: unpack terraform binaries into install directory” #5810
Bug 2064170 : Fixed Azure punctuation installconfig.controlPlane.platf… #5802 Repin libvirt-version #5797
Add IBM Power VS: tf data #5614
cluster: unpack terraform binaries into install directory #5715
azure: Enable HyperVGeneration setting for Azure disks #5721
pkg/destroy/aws: Log unfiltered pagination #5775
terraform: fix module name of terraform providers #5727
remove platform.azure.osDisk #5785
Lower severity of ListAWSDefaultServiceQuotas warning msg #5747
images: Update terraform version in UPI image #5762
Bug 2033482 : vsphere: ensure terraform variables are defined #5778 Add VolumeID testscases for Power VS machinepool #5742
Power VS quota asset #5748
MGMT-9797 : Set single-node none-platform clusters Ingress DefaultPlacement to ControlPlane #5746 Added platform validation testcases for IBM PowerVS platform #5708
Add cluster destroy logic for Nutanix clusters #5638
Add IBM Power VS: tfvars #5615
pkg/asset/manifests/operators: Set kubernetes.io/description for cluster-config-v1 #5783
Updating ose-baremetal-installer images to be consistent with ART #5590
Add exit code for infra, bootstrip and install failures #5702
Bootstrap-in-place ignition creation should also create a worker.ign file #5786
Remove defaultStorageContainer from nutanix platform installconfig #5784
Update installconfig validation for Nutanix #5781
Re-update BMO vendor to use ipxe for iRMC #5662
Bug 2038774 : [IBM] add IPsec IKE UDP ports 500, 4500 to security group #5539 Update declarative assets for Nutanix #5636
Bug 2056460 : Preallocated disks for OCP nodes on oVirt #5594 gather: collect sssd journal logs #5771
Add nutanix-specific terraform variables #5637
Removing no-longer-needed DNS etcd stuff #5764
Add nutanix-specific customizations to installconfig #5633
Update default releaseimage to 4.11 #5774
collect machine state in bootstrap gather #5770
Refactor UltraSSD tfvars #5757
Bug 1918005 : vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5673 Azure: validate UltraSSD instance types #5759
OWNERS_ALIASES: Update current installer team #5766
Validate disk encryption sets #5692
vendor: update api to latest version to use AzureUltraSSDCapabilityEnabled #5756
vsphere: make cluster destroy more resilient to api failures #5556
Bug 2061891 : IBMCloud: Add br-sao region to static list #5760 Add Nutanix-specific customizations to manifests #5631
terraform: add terraform verification to ./hack/verify-vendor.sh #5675
Add nutanix-specific customizaitons to machines #5632
Bug 2047935 : bump RHCOS 4.11 bootimage metadata #5729 Bug 2066463 : IBMCloud: Patch IBM client auth #5736 Bug 2062998 : Update region check for coreos AMIs #5731 terraform: compress provider binaries faster #5739
Add nutanix-specific customizations for assorted assets #5634
Bug 2048067 : [Alibaba] fix location service endpoint #5664 Bug 2060687 : terraform: fix setting of zone in load balancers for non-zonal azure regions #5684 Doc: Update VIP number to 2 #5599
Updating ose-installer-artifacts images to be consistent with ART #5591
Add the terraform plugin for Nutanix #5635
Add IBM Power VS: cluster assets #5651
AlibabaCloud: fix for bootstrap teardown removing slb backends #5682
Use powervs NewClient in GetDNSZone #5723
vsphereprivate: update to v2 terraform sdk #5716
Bug 2064969 : terraform: upgrade aws provider to v4.5.0 #5719 Revert “Merge pull request #5665 from r4f4/azure-azid-adapter” #5722
vendor: upgrade aws sdk to v1.43.19 #5710
Azure: Add ultraSSDCapability to control plane instances. #5701
Bug 2061549 : azurestack: create the api DNS record when publishing internally #5691 Set ignition string to sensitive #5720
Bug 2047670 : aws: remove validation check for internal publish strategy #5695 baremetal: refresh owners list #5713
include conn timed out err for bootstrap collection #5677
Bump gophercloud #5686
Add Nutanix-specific platform types #5603
vSphere: Update terraform provider to current upstream #5694
Add IBM Power VS: machine assets #5611
Bug 2060617 : fix(ibmcloud): Properly match regex for DNS destroy #5679 Add IBM Power VS: manifest assets #5610
Azure azidentity adapter #5665
Validate BMC driver supported and requires provisioning network #5458
terraform: build binaries on go.mod changes #5672
Add IBM Power VS: installconfig assets #5612
Add VPCRegionForPowerVSRegion function #5700
Azure disk encryption support #5641
Bug 2060508 : azurestack: fix backend address pools for internal publishing #5678 azure/validation: Skip “resource group empty” check for ARO #5330
Bug 2061527 : IBMCloud: Missing infra providertype #5687 Bug 2061544 : azurestack: stop pinning to Standard_LRS for disk type #5688 Bug 2060970 : data/data/coreos/fcos.json: update initial FCOS to 35.20220213.3.0 #5680 doc: terraform maintenance document #5670
Updating ose-installer images to be consistent with ART #5589
remove stray tmp/simple_log.log file #5606
GCP may also return Forbidden status when trying to check quotas #5649
Bug 2026356 : Fix bootstrap disk instance type #5515 Bug 2034147 : Validate num cores with vcpus #5656 Bug 2059213 : build all terraform providers and terraform binary locally #5666 Add IBM Power VS: types #5609
point 06_workers.json to azurestack version #5661
Bug 2021041 : vsphere: Not found TagCategory when destroying ipi cluster #5558 Render the CVO manifest with user-specified capabilities from the install-config #5645
isolate terraform #5507
Bug 2046181 : baremetal: reduce API timeout to 15 minutes #5639 Check for DeletePlacementGroup permission before destroying cluster #5655
OWNERS_ALIASES: Drop wking from approvers #5644
data/manifests/bootkube/cvo-overrides: Default to stable-4.11 #5621
Updated owners to current OCP on RHV members #5654
baremetal: use combined Ironic, drop MariaDB #5553
Update OWNERS_ALIASES #5640
Bug 2047257 : openstack: Migration script should –force drain #5618 Tested instance type lists for AWS/Azure/GCP #5517
Bug 2047925 : Update BMO vendor #5588 cmd/openshift-install/create: Do not attempt analysis when we fail to gather logs #5582
Bug 2046181 : baremetal: wait for image-customization to come up #5579 aws: support the entirety of the secret partitions #5597
Bug 2050767 : vsphere: check that network exist in provisioning validation #5607 Bug 2048451 : Use proxy dial to validate endpoints #5600 Bug 2050146 : Don’t shortcut OpenStack scraping if quota is unavailable #5601 Bug 2048222 : Remove non-public AWS regions from list of regions #5595 Azure Stack: Add UPI Instructions for internal CA #5573
Remove Caleb Boylan from core installer reviewers #5593
Ensure removal of placement-groups during cluster destroy on AWS #5528
Full changelog
OCPBUGS-26930 : Add .snyk file to ignore vendor and test files #296 OCPBUGS-20127 : Increase timeout for bootstrap kubeapi #279 OCPBUGS-18606 : Move haproxy firewall rule check earlier in loop #272 OCPBUGS-17715 : Don’t render config with incomplete unicast peer list #268 OCPBUGS-15315 : Use machine-config state instead of comparing roles #262 OCPBUGS-12805 : Make nested dual stack VIP configs respect EnableUnicast #240 OCPBUGS-13405 : Verify kubelet version in upgrade check #249 OCPBUGS-11145 : fix isUpgradeStillRunning() #232 OCPBUGS-5743 : If primary ip address was already created no need to choose new ip #214 OCPBUGS-2512 : Improve IP address sort order for interface selection #199 Updating baremetal-runtimecfg images to be consistent with ART #196
Run go fmt #197
Adding node ip hint for all who want to use it #185
OCPBUGS-669 : Empty chosen list when retrying ip selection #191 Add list of Node configs to handle multiple VIPs #176
OCPBUGS-669 : Apply ipv6 bind check to non-VIP case too #188 Updating baremetal-runtimecfg images to be consistent with ART #184
Bug 2096226 : Check chosen node-ip can be used #181 Bug 2086483 : Update k8s dependencies to 1.24 #180 Updating baremetal-runtimecfg images to be consistent with ART #179
Bug 2069740 : Avoid kubernetes node port range #175 node: update IsUpgradeStillRunning() logic #173
Update OWNERS to reflect current team #177
Dockerfile: migrate repo to CentOS 8 Stream #174
Updating baremetal-runtimecfg images to be consistent with ART #168
Full changelog
OCPBUGS-30289 : oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1701 OCPBUGS-25642 : Add client version in must-gather summary #1639 OCPBUGS-24462 : Overwrite template’s namespace with the explicit one #1618 OCPBUGS-23222 : regeneratemco: explicitly check for PlatformStatus field #1598 OCPBUGS-20248 : oc process: Set original namespace if it differs #1560 OCPBUGS-20291 : Truncate existing files when writing from inspect #1563 OCPBUGS-20299 : Use quay redis image instead docker mysql #1567 OCPBUGS-16173 : Add tls-server-name when property exists in kubeconfig #1507 OCPBUGS-1283 : Bump golang.org/x dependencies #1421 OCPBUGS-16056 : mcs cert: account for environments that use IP directly #1501 OCPBUGS-16194 : reboot: set ignition version to 3.1 #1509 handle the error case of node retrieval while waiting for reboot #1485
bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478
OCPBUGS-14647 : [release-4.12] Do not set master node selector if there’s no masters #1366 OCPBUGS-14236 : Remove closed centos7 registry from newapp unit tests #1434 OCPBUGS-10774 : bump repo sclorg/s2i-ruby-container location for newapp test #1382 OCPBUGS-7960 : pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354 OCPBUGS-6600 : Fix kube version from 1.24.1 to 1.25.2 #1327 remove support for empty files and stdout in oc registry login #1277
Bump go to 1.19 in go.mod #1262
Bug 2093046 : oc debug: Add priorityClassName into node debugging pod template #1263 use correct namespace with sample templates #1272
Do not try to load plugins for cobra commands #1267
Bug 2078694 : New-App Using Git via SSH #1269 OCPBUGS-2495 : pkg/cli/login: Warn, but do not fail, on surprise project-list errors #1268 IR-262 : Keep manifest list children #1229 oc debug,version: minor todo improvements #1265
pkg/cli/admin/release/extract: Don’t print image metadata verification messages when extracting to stdout #1264
pkg/cli/admin/release/extract: Unify extraction cases #1237
OWNERS_ALIASES: Freshen update-approvers #1260
Bug 2059125 : release extract: Add binary re-signing for macos arm64 #1242 Bug 2000554 : oc inspect: Also gather namespaces in which webhook services are running #1258 add support for –next flag in oc adm release new #1243
oc 4.12 kubernetes 1.25.2 bump #1250
Bug 2033167 : oc extract: Create target directory if not exist #1248 Update login.go #1188
Add –overwrite flag into pod security violation error message #1234
OCPBUGS-613 : oc adm logs: generate proper path for static pods #1231 OCPBUGS-852 : cli/debug: Create temporary namespace for node debugging #1236 Bug 1879980 : Bump go-ldap module to v3 #1226 Updating openshift-enterprise-deployer images to be consistent with ART #1200
Updating ose-cli-artifacts images to be consistent with ART #1202
Updating openshift-enterprise-cli images to be consistent with ART #1195
Bug 2087679 : [inspect] Add EgressQoS to inspect #1148 Updating ose-tools images to be consistent with ART #1201
Give a complete oc label command in pod security error message #1228
Bug 2112934 : Add servicemonitors into common namespaces for inspection #1224 Bug 2108307 : Set HostIPC to true when debugging node #1218 Bug 2111537 : (image info): Introduce show-multiarch flag #1217 Bug 2095708 : oc adm inspect: check a resource exists before its inspection #1215 Bug 2092731 : Change error message to signal passing keep-manifest-list flag #1213 Bug 1880865 : Avoid TLS cert checking when login with –insecure-skip-tls-verify=true #1161 Bug 2105325 : Add ManifestListDigest field to release info struct #1203 Add unit tests for release new package #1197
Support for identity token #1199
release info bug printing: enable --skip-bug-check for --output=json #1204
release: extract ccoctl #1194
Bug 2103126 : set proper pod security ns labels #1187 Bug 2100702 : Set hasMedataOverrides to true when ToImageBase is set #1192 Bug 2100166 : Add new IsManifestList flag into ReleaseInfo struct #1185 Bug 2101885 : Set completion function for get command #1186 Bug 2100702 : Use from-release as based image when base digest is invalid #1183 Bug 2100708 : Lower chosen platform architecture/OS log level #1184 Bug 1905850 : add a new option for checking a subresource to oc adm policy who-can #1179 Bug 2015321 : Add destdir special character validation in must-gather #1178 Bug 2100138 : Add json support for release info bug printing #1177 Bug 2099637 : Use filter options only when keep-manifest-list is true #1176 Bug 2096855 : extract linux/amd64 to read release metadata #1174 Bug 2057633 : add validations for a pod & container to rsync #1087 Bug 1957668 : show console URL when asking for Authentication #883 Bug 2097334 : ensure kubectl name is replaced in plugin cmd #1173 Bug 1823143 : add –icsp-file option to adm release subcommands #1169 Bug 2090692 : fix version from 1.24.0 beta to 1.24.1 #1168 Bug 1999891 : bubble errors which happen prior to collection to BackupGathering #1093 Bug 2090266 : add –filter-by-os support in oc adm release extract and linux/amd64 for getting IS during mirror #1167 Bug 2093797 : deprecate –service-account flag for oc registry login #1166 Bug 2088483 : update ‘oc adm catalog mirror’ command to accept –continue-on-error flag #1152 *: add relevant code owners for catalog alias #1159
Bug 2087103 : pkg/cli/admin/upgrade: “Updating to” -> “Requesting update to” #1156 Bug 2090692 : Beautify help and align with kubectl output #1121 Bug 2086519 : pkg/cli/debug: suggest pod security labels on violations #1155 Add user coreydaley as an approver #1144
Bug 2090751 : Correcting skipMissing flag usage when a manifest cannot be found #1105 Bug 2083770 : Change release signature file extension to json #1151 Bug 2040654 : Pass pod exit error codes to user #1150 Bug 2083999 : Delete recently created images when –prune-over-size-limit is used #1143 Bug 2086459 : Continue inspection when some resources are not found #1137 Bug 2065507 : Add the ReleaseAccepted condition to the oc adm upgrade command #1113 Update images to be consistent with ART #1132
release: update oc source URL in client READMEs #1129
WRKLDS-370 : copy manifests from linux/amd64 to all manifests in a list #1120 Enable using existing namespace for must-gather operations #1080
Bug 2023295 : [inspect] Add namespace-scoped networking resources to inspect #1128 Bug 2074237 : clarify use of –image-stream for oc new-app #1119 Deprecate oc serviceaccounts command #1126
Replace temporary show-managed fields hack with a proper solution #1127
Bug 2080416 : Fix project command auto completion #1125 Remove long-deprecated commands oc adm migrate etcd-ttl|image-references|legacy-hpa|storage #1124
Fix squash merge regex #1118
Bug 2007647 : Add squash-merge support into oc adm release info #1116 Bug 2071614 : Remove network CRDs scheme registration #1110 Bug 2074902 : Pass non-zero exit code to debug command #1115 adm inspect: delete unused pod URL getting code #1032
Bug 2073113 : do not report docker conf deprecation warning when the docker is not available #1106 Drop k8s carries and bump to kubectl v0.24.0-beta-0 #1092
Bug 2075647 : pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates #1111 Add –keep-manifest-list support to oc adm release * commands #1109
Bug 2041454 : Validate reference-policy for import-image command #1108 Bug 1823143 : wire ICSP lookups to oc image info #829 Use ServerGroupResources instead deprecated ServerResources #1101
Introduce Jira defects into release info #1100
Fix component name for oc #1102
pkg/cli/admin/mustgather: label must-gather ns as privileged #1099
Obtain OpenShift version from ClusterVersion resource #1091
Allow triggers on batch/v1 CronJobs #1077
pkg/cli/admin/upgrade: Mention channel choices #1088
Add Nutanix platform #1046
Bug 2057101 : remove klog format and update messages for docker config deprecation #1082 Bug 2056893 : pkg/cli/admin/upgrade: Drop –to-image help warning #1078 Bug 2049889 : logging / help improvements around ‘oc new-app –search’ #1086 Bug 2056122 : expose –keep-startup flag for oc debug #1085 Bug 2052578 : reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories #1059 Add support for batch/v1 CronJob #1081
OSDOCS-3257 : Adding in new metadata requirement for docs #1072 Update all images to be consistent with ART #1071
Updating openshift-enterprise-cli images to be consistent with ART #1039
Bug 2049234 : Fix mirroring images that have dots in their namespace #1063 Bug 2052034 : make sure that we check for resorces and files before picking the simplest path #1062 Bug 2049133 : Fix catalog mirror from files #1058 Comment tolerations used in must-gather #1004
Remove unused methods and re-use pre-existing ones where needed #951
Show managedFields in inspect #1051
Bug 2046319 : improve error message for debug #1053 Bug 2047895 : release: handle aarch64/arm64 naming disparity in mirror #1038 Bug 2044140 : pkg/cli/admin/upgrade: Fix nextStep option sense #1050 Add TMOUT env to debug node pod #1048
Bug 2044140 : Updated the error message to include the suggestion #1041 Bug 2035717 : Enhancing the output provided when backup collections are attempted #1013 Full changelog
OCPBUGS-51538 : Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #832 OCPBUGS-37322 : update modules: grpc, protobuf, logrus #764 OCPBUGS-42166 : Resolve SNYK errors in security job. #760 OCPBUGS-37422 : SNYK ignore go-client misreporting #744 NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027 : IBM/go-sdk-core update to v5.17.4 #723 OCPBUGS-32897 : Upgrade go-jose module to 2.6.3 #699 OCPBUGS-21348 : Upgrade golang/x/net for CVE-2023-39325 #624 NO-ISSUE: snyk: exclude vendor/ #619
NO-ISSUE: Removing andrew from OWNERS #618
OCPBUGS-13739 : Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #539 OCPBUGS-11707 : ccoctl: Enable public anon read access to default OIDC S3 bucket #529 Bump to k8s 1.25 #505
Make ccoctl use regional STS endpoint by default #491
Changes generated from make update-gofmt with go-1.19. #495
Update OWNERS to reflect reality. #494
Add support for granular GCP permissions using custom roles #489
update to release.openshift.io/feature-set to match OCP 4.12 #490
Add ccoctl support to create OIDC endpoint with private S3 bucket #486
TRT-481 : fix: order conditions by type to limit un-needed updates #488 Bug 2118625 : Refactor Nutanix plugin to use external credentials structs #485 Bug 2117474 : Fix panic when the Provider spec is empty in credential request #484 Rename azure-mind-mod-removal to fix typo #481
Bug 2100964 : Make ccoctl work with credentials fetched from gcloud cli defaults #475 Updating ose-cloud-credential-operator images to be consistent with ART #474
Bug 2101880 : manifests/00-namespace: Set empty openshift.io/run-level #472 [Issue #452] Improving documentation #465
doc(aws-sts): add alternative to host OIDC configuration in a private bucket using CloudFront #468
Bug 2093986 : Make pod identity webhook comply to restricted pod security level #469 Updating ose-cloud-credential-operator images to be consistent with ART #466
manifests/deployment: comply to restricted pod security level #463
Add a check for no CredentialsRequest manifest in directory #462
Bug 2067800 : upgrade prometheus/client_golang to v1.12.1 #464 Minor doc updates #461
Update OWNERS file to reflect reality #460
Change the ccoctl generated nutanix-credentials secret data format #457
Skip directories when reading credentials requests #459
Add nutanix credentials handling with manual mode #450
Leader election migration 1: ConfigMap & Lease #446
Updating ose-cloud-credential-operator images to be consistent with ART #449
Full changelog
OCPBUGS-33198 : Avoid nil pointer panic while assigning private IP on Azure #141 OCPBUGS-22949 : Azure: skip backend pool if attached to an outbound rule #128 OCPBUGS-16325 : Azure: Handle already existing IP configurations #117 OCPBUGS-14717 : increase GCP egress ip capacity to 100 from 10 #114 OCPBUGS-13802 : sync CloudPrivateIpConfig when node is missing #112 OCPBUGS-13183 : pull project name from subnet uri #108 Bug OCPBUGS-5156: Add ApplicationSecurityGroups to InterfaceIPConfiguration #92
OCPBUGS-4783 : OpenStack: Support multi AZ environments #88 OCPBUGS-4784 : OpenStack: Only return egressIPConfiguration for first InternalIP #89 OCPBUGS-4230 : Fix azure log message for assigning and releasing an IP #80 OCPBUGS-3552 : Add assigned egress ips into capacity #73 OCPBUGS-1736 : use proxy vars when available #62 OCPBUGS-1417 : AWS: build temp credentials file from AWS key and secret #68 Update .ci-operator.yaml to use go 1.19 #65
Updating ose-cloud-network-config-controller images to be consistent with ART #64
OCPBUGS-1629 : Add resolver to handle custom endpoints #61 SDN-3203 : 1.25 rebase #58 OCPBUGS-683 : Node controller: Skip uninitialized nodes #57 Jira OCPBUGS-208: OpenStack: Avoid concurrent port updates for attach/detach operations #54
Jira OCPBUGS-247: OpenStack Return UnexpectedURIError when URI cannot be parsed #55
Bug 2118563 : Adjust OpenStack port capacity to default max_allowed_address_pair #53 Bug 2111878 : Make azure operations to be in sequence #52 Bug 2104784 : AWS: Fix race in IP address assignment code #50 Update OWNERS #51
Add OpenStack cloud provider #47
Updating ose-cloud-network-config-controller images to be consistent with ART #49
Bug 2105996 : Fix assign error display for cloudprivateipconfig #48 Bug 2094438 : Make AWS URL parsing more lenient for GetNodeEgressIPConfiguration #45 Bug 2092047 : 1.24 rebase #44 Bug 2071914 : azure: default empty environment to AzurePublicCloud #36 Add instructions for how to run image in cloud #31
Bug 2072439 : Get subnet information from subnet instead of from network addresses #32 Bug 2060334 : Fix Azure VNET lookup when the NIC’s subnet is in a different resource group #26 Bug 2060361 : Fix Unable to enumerate NICs due to a missing ‘primary’ field due to security restrictions #27 Fix run_locally.sh #21
Updating ose-cloud-network-config-controller images to be consistent with ART #25
README.md #22
Full changelog
OCPBUGS-20683 : CVE 2023 39325 [4.12] #653 OCPBUGS-22689 : increase timeout for probes #639 OCPBUGS-13346 : dont log jwt tokens #622 OCPBUGS-3841 : update apf configuration to use v1beta2 #591 OCPBUGS-4040 : Restart authentication operator if console capability is enabled #593 OCPBUGS-3510 : Update cluster-authentication-operator not to go degraded without console #590 make the custom route controller use server-side-apply to avoid stomping unknown fields #582
e2e: address PSa failures #581
Bug 2111842 : v/o/library-go - version-bump #576 Updating ose-cluster-authentication-operator images to be consistent with ART #575
Updating ose-cluster-authentication-operator images to be consistent with ART #571
Bug 2078287 : only ever include certificates in the oauth-serving-cert CM #573 AUTH-133 : bindata/oauth-openshift: specify pod security level #570 Update Links #568
Bug 1958198 : Avoid zero or low resync intervals #491 manifests: specify pod security level #565
e2e: Use Keycloak v18.0.0 #567
AUTH-89 : add audit options to oauth-server on oauth-audit-profile Variant03 #563 MGMT-9797 : Bump openshift/api dependency to 04e1813ebb11 #564 make apiserver readiness probe honor readyz #561
Bug 2063342 : vendor: bump library-go #558 Bug 2059515 : e2e: Use Keycloak v17.0.0 #554 Update OCP branding within oauth-templates #540
Full changelog
OCPBUGS-45152 : [release-4.12] VPA: Update OWNERS file #329 OCPBUGS-40928 : update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318 OCPBUGS-30911 : Fix unstructured taint parsing in Cluster API provider #291 OCPBUGS-23274 : Rebase 4.12 branch onto cluster autoscaler 1.25.3 #267 Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #242
Updating vertical-pod-autoscaler images to be consistent with ART #243
rebase on upstream 1.25.0 #241
Bug 2001027 : update clusterapi nodegroups processor #240 Updating vertical-pod-autoscaler images to be consistent with ART #235
Bug 1944065 : Have VPA ignore phantom containers named “POD” #233 Bug 2087037 : Rebase onto latest master from upstream #231 Bug 2087037 : Rebase Autoscaler onto upstream release-1.24 branch #227 added bindata.go in e2e/vendor to fix the e2e test failures #225
add user configurable cluster api version #223
Full changelog
OCPBUGS-32006 : bump x/net to 0.23.0 #440 OCPBUGS-23291 : hack for deploying V6-only clusters from dualstack hubs #389 OCPBUGS-20845 : Uplift x/net to v0.17.0 #371 OCPBUGS-19557 : Guard against nil PlatformStatus #367 OCPBUGS-16169 : use proxying for inspector in addition to ironic #349 OCPBUGS-15715 : Limit role binding to openshift-machine-api namespace #347 OCPBUGS-7585 : also use BMH.ConsumerRef for linking to master Machines #326 OCPBUGS-5072 : delete ironic-proxy/image-cache when not needed #317 OCPBUGS-4696 : Do not fail the reconciler when no master Machines exist #314 Updating ose-cluster-baremetal-operator images to be consistent with ART #300
Golang 1.19 #306
Handle AWS platform #304
OCPBUGS-1806 : Use machines instead of nodes to detect masters #299 Add port to IRONIC_EXTERNAL_URL_V6 #302
Enable running CBO from AWS #301
OCPBUGS-872 : add a workaround for a NetworkManager issue #286 Pass IRONIC_EXTERNAL_URL_V6 to baremetal-operator #288
OCPBUGS-651 : ignore metal3 pods that are terminating #284 Added handling PlatformStatus.Type other than Baremetal #285
OCPBUGS-421 : do not rely on string “master” to be in BMH names #282 Updating ose-cluster-baremetal-operator images to be consistent with ART #273
Run a proxy for ironic when provisioning network is disabled #279
Use platformStatus.type to determine type of platform #280
METAL-157 : Don’t run image cache unless required #275 Stop passing HTPASSWD variables to services #278
Add RBAC for metal3.io/hardwaredata #277
Fix a few papercuts #263
Update to golang 1.18 and regenerate CRDs #265
Drop the IRONIC_HTTPD compatibility option #245
Bug 2084215 : Add baremetal prefix to kube-rbac-proxy #272 Bug 2099928 : Add UT for image_customization_test #243 Bug 2088428 : Fix interpretation of Deployment Status Conditions #266 Bug 2080306 : Uplift kustomize and BMO to remove go-getter dependency #262 Change registry reference for image customization controller image, p… #260
Revert “Allow access to InfraEnv resources from assisted service” #254
Extract functions for ZTP integration #261
bump golangci #257
Change registry reference for image customization controller image #258
Bug 1961844 : Adding baremetal ClusterOperator relatedObjects directly to its manifest #255 Add baremetal capability annotations #249
Allow access to InfraEnv resources from assisted service #251
More updates to the OWNERS file #253
Update the OWNERS file based on new contributors #252
Updating ose-cluster-baremetal-operator images to be consistent with ART #242
Use combined Ironic process, drop RPC and MariaDB #234
Remove asalkeld and kirankt from Owners #228
Full changelog
OCPBUGS-21148 : Bump golang.org/x/net to v0.18.0 #297 OCPBUGS-13862 : add separate upgradeable condition for the sync controller #254 OCPBUGS-13188 : update config sync controller to add upgrade status #251 OCPBUGS-7898 : add a check for nutanix cloud conf map #239 OCPBUGS-7884 : Restart pods if related configuration was changed #228 OCPBUGS-5142 : Try to limit groups for the REST mapper discovery #212 OCPBUGS-1411 : Bump dependencies to k8s 1.25 #203 CCM namespace should be labelled as privileged #202
Reset Go mod after openstack library-go bump #200
Update library-go to set OpenStack provider to external #199
Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART #196
Bug 2104373 : Improve decision logic around syncing cloud config #197 Bug 2089334 : Use service account credentials for all providers #193 Bug 2067806 : Bump dependencies to K8s 1.24 #192 Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART #191
Bug 2082687 : IBMCloud: Remove CCM port argument #189 Remove port argument and update enivronment variable name from powervs cloud provider deployment #188
Bug 2074471 : update enabled and use-octavia options in cloud-conf config-map #183 Bug 2074606 : Allow OpenStack CCM to annotate Service objects #184 OpenStack: ensure config-map is updated only when needed #185
Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART #166
Bug 2051457 : CCM PodDisruptionBudgets #174 Add a troubleshooting doc #177
Add generation of config for OpenStack CCM #178
Add PowerVS cloud controller manager #179
Use “go install” to fetch binaries #161
Bug 2059716 : Ensure release version is set on config sync controller #176 Bug 2059716 : Ensure release version is injected into all controller status clients #175 Bug 2055723 : start watching KubeControllerManager resource #173 Changes to support config map sych for Power VS Platform #172
Added credential request file for Power VS #171
Update OWNERS #170
Fix a typo in watch predicates #169
Bug 2047998 : Alibaba should deploy image from release payload #167 Full changelog
OCPBUGS-16243 : retire LatencySensitive featureset #336 : OCPBUGS-21245: bump library-go to include switch to HTTP/1.1 #373
CORS-2794 : AWS Shared VPC API Bump [release-4.12] #344 OCPBUGS-4544 : Revert “Increase verbosity level to track probe timeouts” #275 OCPBUGS-3523 : add –feature-set option to render options #272 NE-975 : Update openshift/api for updated ingress config loadBalancer fields #268 Increase verbosity level to track probe timeouts #267
Bug 1843043 : Update openshift/api for modified config resource description #264 update openshift/api for new ingress manifest #263
Update go.mod api,client-go to register crd #262
This is not the repo you’re looking for. #261
Bump k8s dependencies #260
Update images to be consistent with ART #253
Bug 2082763 : Drop the OperatorHub CR instance #245 bump openshift/api, client-go #251
manifests/deployment: comply to restricted pod security level #248
Reorder the empty Node CR resource to ensure it is applied after the Node CRD #244
Bump(o/client-go); Add empty config/v1/node/cluster object #238
Bug 2074243 : Bump openshift/api to c3bb724c28 #243 Revert config/v1/Node crd.yaml #242
Bump openshift/api, openshit/client-go to add ImageMirrorSet CRDs #236
bumped openshift API to have node object related changes #233
Full changelog
OCPBUGS-32429 : create suitable role and roleBinding for csi-snapshot-webhook #207 OCPBUGS-21442 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #169 OCPBUGS-10646 : Hypershift: set Deployment properties #148 OCPBUGS-8374 : [4.12] remove cluster-admin role. #143 OCPBUGS-4526 : hypershift: use correct kubeconfig secret for csi-snapshot-controller #138 OCPBUGS-4251 : Add HyperShift specific priorityClass #135 OCPBUGS-4121 : Don’t remove PDB on SNO clusters #134 STOR-971 : Update for HyperShift #125 Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #130
add capability annotation #126
Bug 2101520 : bump library-go to get a that prevents watchers leaks #129 STOR-858 : Bump github.com/openshift/* and k8s.io/* #128 OCPBUGS-990 : Add RBAC to read extension-apiserver-authentication in kube-system #127 STOR-970 : Refactoring the oprator for newer library-go #124 Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #122
Bug 2097283 : Update manifests to v6.0.1 #121 Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #119
Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #118 AUTH-133 : assets: comply to restricted pod security level #120 manifests/deployment: comply to restricted pod security level #116
Bug 2057079 : Fix race when setting Progressing condition #114 Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #113
Full changelog
OCPBUGS-52502 : [release-4.12] Add runbook_url for CoreDNSErrorsHigh #435 OCPBUGS-21525 : Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #391 OCPBUGS-19933 : update-node-resolver.sh: Check for errors from >> #385 OCPBUGS-19933 : ensure original hosts file contents are preserved #383 OCPBUGS-15251 : Add support for protocolStrategy API field to enable force_tcp configuration #378 Updating ose-cluster-dns-operator images to be consistent with ART, and generate bindata #344
OCPBUGS-753 : keep dns-default annotations intact #340 NE-929 : CoreDNS Cache Tuning - Functional Implementation #335 OCPBUGS-1439 : Fix TestDNSLogging race condition #341 OCPBUGS-1549 : Reconcile the DNS namespace #343 OCPBUGS-1558 : Bump vendored k8s libraries to 1.25 #342 NE-1066 : Enable the chaos plugin for CoreDNS in order to expose CoreDNS metadata #337 DPP-10859 : Update Bugzilla links to “Networking” component #333 Bug 2092041 : Bump k8s to 1.24 and Golang to 1.18 #328 Bug 2095941 : topology aware hints to prefer to keep dns traffic within a zone #322 Bug 2093236 : propagate retry request for progressing updates #325 Bug 2061244 : desiredDNSDaemonSet: Allow autoscaler to evict #320 Bug 2037190 : Skip frequent updates to progressing and degraded conditions to prevent status flaps #318 NE-755 : Support CoreDNS forwarding DNS requests over TLS #314 AUTH-182 : manifests/deployment: comply to restricted pod security level #319 NE-815 Extract test Corefiles inside DNS ConfigMap test to individual files #315
Added gcs278 to OWNERS #312
Full changelog
OCPBUGS-35501 : return errors in wait-for-ceo #1277 OCPBUGS-32001 : update golang x net #1256 OCPBUGS-30914 : Replace nodelister with master nodelister everywhere #1224 OCPBUGS-30938 : fix panic in health check timeouts #1228 OCPBUGS-27776 : [4.13] Remove z-upgrades from UpgradeBackupController #1185 OCPBUGS-23151 : relax readiness to local serializable requests #1156 OCPBUGS-21127 : fixing CVE-2023-39325 by updating dependencies #1148 OCPBUGS-20100 : [4.12] Backports of backup/restore fixes #1137 OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #1128 OCPBUGS-17808 : reset snapshot default counts to avoid file already lo… #1100 OCPBUGS-12473 : Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time #1046 OCPBUGS-7830 : increase live/ready timeout and failure thresholds #1011 Update reviewers and approvers #987
OCPBUGS-7409 : set default timeouts in etcdcli #1005 OCPBUGS-6935 : add dedicated success status for bootstrap removal #999 OCPBUGS-7373 : [release-4.12] fail early on missing node status envs #1004 OCPBUGS-6898 : updating library-go for CVE-2022-41717 #998 OCPBUGS-5762 : should not scale-down when all members are healthy #984 OCPBUGS-4743 : only allow TLS1.2 ⁄1 .3 ciphersuites in etcd and CEO #971 OCPBUGS-3841 : update apf configuration to use v1beta2 #965 OCPBUGS-4193 : later bootstrap removal in delayed scaling #967 OCPBUGS-2918 : update prometheus alerts #958 library-go vendoring for installer cmd timeout #950
doc access clusterbot resources #948
doc fixes for prometheus metrics #933
Hypershift: Stop trying to apply etcd prometheusrule #917
trt-589 library-go bump #941
OCPBUGS-1329 : Add niceness to important etcd processes #938 OCPBUGS-1130 : increase etcdGRPCRequestsSlow thresholds #932 Remove quorum guard pod after the pod is removed from the cluster #923
Bug 2046335 : fix cert rotation on IP changes #921 OCPBUGS-675 : preserve log message on failures #922 OCPBUGS-675 : add nil check in checkSingleMemberHealth() #918 Revert “Adding cluster-etcd-operator sub command: ensure-env” #914
Set default container in etcd #910
Adding cluster-etcd-operator sub command: ensure-env #726
Bug 2089199 : Remove etcd dashboards from Hypershift #897 vendor upstream alerts #894
Exits with a non-zero code in case Etcd backup fails #871
Bug 2106044 : Fix etcd minor upgrade backup #884 Bug 2097073 : vendor upstream alerts #890 fixing metrics proxy log spam #883
Updating cluster-etcd-operator images to be consistent with ART #875
remove etcd-health-monitor sidecar from pod manifest #873
fixing unit test health flakes with tolerance #874
Bug 1884568 : Add etcd pod liveness probe #869 Add documentation for profiling CEO #868
Bug 2097431 : fix degraded missing cluster version #857 Bug 2093819 : add timeout to health checks #862 Bug 2095703 : fix multi-address member removal #858 Bug 2092880 : avoid extrapolation in leaderhip alert #851 Bug 2092395 : etcdHighNumberOfFailedGRPCRequests alerts with wrong results #843 Bug 2064024 : Update library-go to 80f9619c2 #816 Bug 2090929 : cluster-backup.sh script has a conflict to use the ‘/etc/kubernetes/static-pod-certs’ folder if a custom API certificate is defined #845 Bug 2085997 : defines a startupProbe for etcd container #840 Bug 2085997 : brings back initial delay seconds to the previous value #839 Bug 2085997 : increase initial delay seconds to match the discovery timeout #838 Bug 2085997 : removes TestScalingUpAndDownSingleNode #813 Bug 2073901 : revisit defrag controller degradation #812 Bug 2087983 : remove etcd_perf before restore #823 Updating cluster-etcd-operator images to be consistent with ART #831
Bug 2012065 : Add summary to etcd alert rules #822 Bug 2067738 : update prometheus client #821 Bug 2061496 : Adding message to ControllerStarted:RecentBackup condition #760 Bug 2063183 : Upping defrag timeout to 1 minute #762 manifests/deployment: comply to restricted pod security level #802
test utils changes the way endpoints data key is calculated #814
Bug 2077160 : Adding Thomas to reviewers and me to approvers #815 Bug 2079724 : manually disable defrag #798 fire an event on successfull member removal #808
Scale up new members as learners #758
clustermemberremovalcontroller must examine cluster health before removing a member #805
Bug 2077833 : add more logging #800 Bug 2076793 : pkg/operator/upgradebackupcontroller: Pivot from Failing to ReleaseAccepted #799 Bug 2076831 : fixing client readyz leak #796 exports common functions used by the scaling controllers #795
introduces MachineDeletionHooksController #781
ClusterMemberController adds members whose machines are not pending deletion #790
Update owners with new team members #792
member removal part two #779
adds attemptToRemoveLearningMember to the cluster member removal controller #791
Bug 2063831 : Replace quorumguard and add readyz server #789 Bug 2074544 : revert #784 and #780 to fix ipv6 #786 Bug 2075015 : Revert “replace quorumguard and add readyz server” #787 no pending on etcdHighNumberOfLeaderChanges 1st 1h #783
Bug 2063831 : replace quorumguard and add readyz server #763 adds attemptToRemoveLearningMember to the cluster member removal controller #784
Bug 2053596 : Increase IBMCloud VPC heartbeat timeout to 500ms and leader election timeout to 2500ms #759 ClusterMemberController adds members whose machines are not pending deletion #780
refactors the member removal controller #782
Revert “Merge pull request #768 from p0lyn0mial/member-removal-part-two” #778
member removal part two #768
turn on initial corruption check #770
adds helpers functions used by the vertical scaling controllers #769
introduces ReadDesiredControlPlaneReplicasCount #767
Bug 2057642 : Change fsync degraded reason to CamelCase #756 Bug 2057644 : Fix FSyncController degraded latch #754 an e2e test for checking scaling up and down by one master node #740
adds member removal controller #737
Bug 2053596 : Increasing election timeout for IBMCloud VPC #746 Bug 2053582 : Track static pod lifecycle #750 Bug 2053582 : Track static pod lifecycle #748 changes the signature of the MemberRemove method to accept a memberID (uint64) not a Name (string) #741
Bug 2052270 : pkg/operator/metriccontroller/fsync_controller: Fix “treshold” -> “thresholds” typos #743 an e2e test for checking scaling up by one master node #732
wait for other installers to finish #736
Bug 2042501 : bump library-go #729 Full changelog
OCPBUGS-43703 : Add e2e test for duplicate Transfer-Encoding headers #1158 OCPBUGS-43703 : Add alert for RFC 7230 violation in Transfer-Encoding headers #1162 OCPBUGS-35454 : internal service changed fix target port logic #1092 OCPBUGS-35304 : TestHostNetworkPortBinding: Delete t.Parallel() #1083 OCPBUGS-35027 : Don’t add clientca-configmap finalizer if deleting #1080 OCPBUGS-34888 : desiredRouterDeployment: Set HostPort if needed #1076 OCPBUGS-34757 : Avoid spurious updates for internalTrafficPolicy #1070 OCPBUGS-34110 : Avoid spurious updates for scope in IngressClass #1056 OCPBUGS-34548 : Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068 OCPBUGS-20765 : Bump golang.org/x/net for CVE-2023-44487 #988 OCPBUGS-22432 : test/e2e: Don’t use openshift/origin-node #992 NE-1372 : Add support for AWS shared VPC in another account #966 #971 OCPBUGS-13049 : bump controller-runtime to fix the multi namespace cache indexing #922 OCPBUGS-15467 : Add missing AWS permission for ListTagsForResources #954 OCPBUGS-16620 : Deflake TestRouterCompressionOperation #963 OCPBUGS-16621 : Fix TestClientTLS flakes #964 OCPBUGS-15644 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #959 OCPBUGS-14454 , OCPBUGS-14455 : Handle mTLS CRLs, and fix accidental CRL duplication #941 OCPBUGS-12464 : Target metrics port by name in internal service #910 OCPBUGS-3517 : Ingress controller should not have affinity policy in single-replica clusters #857 OCPBUGS-2775 : Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851 OCPBUGS-2848 : Support matchExpressions selectors with route metrics #850 Bug 2117524 : Update CRLs when they expire #828 OCPBUGS-853 : certificate-publisher: Don’t publish extraneous certificates #824 Bug 1962502 : Add alerts for unmanaged Routes and Ingresses without IngressClassName #823 NE-1071 : Default HAProxy maxconn value to 50000 for OCP 4.12) #836 Updating ose-cluster-ingress-operator images to be consistent with ART #834
OCPBUGS-2435 : TestRouterCompressionOperation: Nil-pointer fix #843 OCPBUGS-2493 : Fix TestUnmanagedDNSToManagedDNSInternal E2E test race conditions #845 CFE-478 : Added support for exporting Route type and Routes per Shard metrics #779 NE-975 : Use ingress config to set default LB type on AWS #837 OCPBUGS-2429 : Fix TestReloadInterval min value test cases and race conditions #842 OCPBUGS-2334 : Added nil check for service object on load balancer scope change #839 NE-956 : Configurable LB Source Ranges - Functional Implementation #817 Bug 2107462 : Update CGO_ENABLED=1 #833 OCPBUGS-236 : Bump openshift/api for reloadInterval fix #830 OCPBUGS-1554 : Bump vendored k8s libraries to 1.25 #829 Enable switching of AWS CLB to NLB without deletion of IngressController object. #790
Bug 2066560 : Make ingress clusteroperator progressing=true when router deployment is rolling out #769 Add IBM Cloud DNS support for Power VS #819
OCPBUGS-1049 : test/e2e: Fix TestCanaryRoute security context #826 Bug 2089482 : Do not use deprecated API field InfrastructureStatus.Platform #814 NE-969 : Add IBM DNS Services provider support for private clusters #796 DPP-10860 : Update Bugzilla links to “Networking” component #815 OCPBUGS-368 : Fix e2e tests for pod security violations #818 NE-979 : add ReloadInterval TuningOption #805 Bug 2101878 : Fix another issue with route status clearing race condition caused by not validating generation id #811 Bug 2108708 : Disable auto creation of default ingress contoller for hypershift #797 Bug 2101878 : Fix route status clearing race condition caused by using the cache #794 Bug 2106086 : Bump openshift/api for healthCheckInterval fix #804 Bug 2104481 : Allow PROXY protocol for the “Private” endpoint publishing strategy #803 add Ethany-RH to OWNERS #800
Bug 2086887 : Add better debug logging to TestIngressOperatorCacheIsNotGlobal to help debug flakes #793 Bug 2093462 : status: Watch clusteroperators #714 Bug 2092042 : Bump vendored k8s libraries to 1.24 #768 Bug 1944851 : Clear route status when an ingress controller is deleted or a route is un-admitted #724 Bug 2094932 : Patching config.ingresses status requires patch permissions #788 Bug 2097555 : Fix loadBalancerServiceAnnotationsChanged check and update #783 Bug 2094932 : Ingress operator needs permission to list nodes #785 Bug 2095229 : desiredRouterDeployment: Check for nil hostNetwork #780 Bug 2094962 : Fix flakey logic in haproxy timeout tests #775 Bug 2094932 : MGMT-10403: Set the defaultPlacement for none-platform SNO clusters installed before 4.11 #767 Bug 2075671 : Add a e2e test that verifies the ingress operator’s cache doesn’t include everything #764 Bug 2055601 : Add cluster tag to *.apps domain record #737 Bug 2080379 : Group all e2e tests as parallel or serial #756 Bug 2082428 : Add MicroSecond processing #762 NE-408 : Allow configuring ELB connection idle timeout #451 NE-825 : Update router to use random balancing algorithm once again #727 Bug 2084433 : AUTH-133: assets: comply to pod security #760 NE-577 : Support a Configurable ROUTER_MAX_CONNECTIONS in HAproxy #735 Add support for route53 in the us-isob-east-1 region + fix #754
AUTH-184 : manifests/deployment: comply to restricted pod security level #749 Bug 2081447 : desiredRouterDeployment: Fix for port defaulting #753 Bug 2079468 : Enhance the waitForIngressControllerCondition for better CI results #745 NE-882 : Set ROUTER_DOMAIN to enable route subdomain field #674 Specify host port for host networking strategy #694
Bug 2007246 : Add allowPrivilegeEscalation to the router container #743 MGMT-9797 : Determine number of replicas according to DefaultPlacement #728 Bug 2076193 : Remove special-casing for default ingresscontroller probe parameters #742 NE-585 : Make ROUTER_BACKEND_CHECK_INTERVAL configurable #712 BUG 2076984: test/e2e: add resilience to RBAC test teardown #744
BUG 2054200: Fix removing custom created service in openshift-ingress with same name #707
Add Nutanix platform #730
Revert “Bug 2007246: Ingress Controller does not set allowPrivilegeEscalation in the router deployment” #741
Bug 2075671 : Fix k8s client cache object global inclusion and duplication. #740 NE-781 : Allow users to tune kubelet probe timeouts #736 Bug 2072106 : Fix test Errorf limitation in go 1.18 #733 Bug 2071139 : add pod eviction permission #734 Bug 2071139 : delete default ingress pod if it is scheduled where another router pod already is #720 Bug 2069457 : Delete LoadBalancer-type service finalizer logic #729 Bug 2021446 : Set canary status as unknown if not admitted to default ingress controller #723 Bug 2066444 : update relatedObjects for clusteroperator status #721 Bug 2007246 : Ingress Controller does not set allowPrivilegeEscalation in the router deployment #718 Bug 1995953 : Add unit test for verifying router deployment env is always sorted #715 Bug 2057762 : Set Upgradeable=False if default cert has no SAN #708 Bug 2055470 : Normalize the AWS internal LB annotation value #704 BUG 2037447: Disable keepalive for canary probe #701
pkg/operator/controller/ingress/status_test: Fix ...-tag -> ...-tags test-case description #700
Added gcs278 to OWNERS #698
Full changelog
OCPBUGS-50880 : Increase waitForFallbackDegradedConditionTimeout #1811 OCPBUGS-22736 : pkg/operator/configobserver: check that the serving certificate refer… #1571 : OCPBUGS-20855: bump library-go to include switch to HTTP/1.1 #1574
OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #1559 OCPBUGS-17139 : make webhook connection failure a warning in log #1533 OCPBUGS-13346 : dont log jwt tokens #1524 OCPBUGS-6789 : enable pod security admission for techpreview #1440 OCPBUGS-6789 : make the bootstrap kube-apiserver honor cluster-wide featuregates #1439 OCPBUGS-7369 : Guard pod set readiness probe endpoint explicitly #1445 OCPBUGS-4478 : guard controller: set an explicit hostname to avoid name collisions #1416 OCPBUGS-3056 : CVE-2022-3259: enable HSTS for kube-apiserver #1400 OCPBUGS-3037 : Allow ephemeral volumes in all SCCs #1399 OCPBUGS-4299 : bootstrap-kube-apiserver: specify resources.requests #1411 OCPBUGS-3841 : update apf configuration to use v1beta2 #1407 OCPBUGS-3663 : Revert “turn PodSecurity admission to enforce restricted globally” #1405 OCPBUGS-2071 : revert dev cert rotation #1401 Bug 2094362 : Duplicate prometheus rules for API SLOs after upgrade #1376 library-go vendoring for installer cmd timeout #1395
serviceaccountissuer: fix case when default value is being used and not trusted after change #1393
bindata/assets/alerts/api-usage: Include removed_release in APIRemovedInNext*ReleaseInUse labels #1367
Fix typo in operator status serviceAccountIssuer name field #1390
OCPBUGS-2198 : AUTH-309: Wire support for trusted service account issuers #1381 Update API alerts after recent bump to k8s 1.25 #1382
trt-589 bump library-go #1383
Bug 2073220 : routes/status resources can leak sensitive data #1375 k8s 1.25.0 #1374
make PodSecurity admission enforce restricted globally #1369
Update library-go to enable external provider for OpenStack by default #1370
enable dev cert rotation #1364
Bug 2101444 : specify resource=pod for PSa violation alerts #1363 Bug 2100155 : Add new alert on Pod Security violations #1361 Bug 2050407 : revert dev cert rotation #1307 Bug 2100347 : Bump(openshift/library-go) latency profile observer, controller #1360 Bug 2074031 : Support tuning GOGC within a limited range. #1359 Bug 2086519 : exempt build controller SA from PodSecurity admission #1358 Bug 2067456 : OCP 4.11 should be firing APIRemovedInNextEUSReleaseInUse and APIRemovedInNextReleaseInUse for APIs removed in 1.25 #1332 Bug 2086092 : bump to k8s v0.24.0 #1341 Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1356
Config Observer and Latency Controller for nodes.config.openshift.io WorkerLatencyProfile #1328
Update library-go to 80f9619c2 #1354
Fix debugging information #1353
Revert “Revert “Merge pull request #1338 from stlaz/more_restrictive_sccs”” #1351
Revert “Merge pull request #1338 from stlaz/more_restrictive_sccs” #1350
manifests/deployment: comply to restricted pod security level #1348
add more restrictive SCCs to the platform #1338
[rebase v1.24]: remove insecure-port from kas args #1347
remove enable-swagger-ui from default config #1343
AUTH-2 : reenable PodSecurity on privileged level #1308 render apirequest count to reduce startup errors #1336
Bump(openshift/api): to get CSI changes #1310
Revert pull request 1309 #1316
fix label for max-in-flight-recorder #1333
Bug 2063342 : vendor: bump library-go #1330 Bug 2067384 : OCP 4.10 should be firing APIRemovedInNextEUSReleaseInUse for APIs removed in 1.25 #1331 Bug 2053582 : Track static pod lifecycle #1323 Bug 2053582 : Track static pod lifecycle #1321 Bug 2052513 : degraded webhook conditions to errors #1313 Bug 2052513 : disable webhook supportability during upgrade #1309 update library-go to get rapid installer pod fixes #1300
Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1299
Full changelog
OCPBUGS-27068 : bump(library-go)=release-4.12 #789 OCPBUGS-21048 : Bump deps to address CVE-2023-44487 [4.12] #759 OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #754 OCPBUGS-6789 : Enforce PSA when techpreview is enabled #694 OCPBUGS-6789 : honor feature gates during bootstrapping #695 OCPBUGS-7369 : Guard pod set readiness probe endpoint explicitly #699 OCPBUGS-4478 : Sync library go 4.12 #676 OCPBUGS-4766 : limit cluster-policy-controller RBAC permissions #675 OCPBUGS-4681 : remove unnecessary RBAC #674 OCPBUGS-4303 : bootstrap-kube-controller-manager: specify resources.requests #666 library-go vendoring for installer cmd timeout #659
trt-589 bump library-go #658
Update go mod go version #657
add nodes.config.openshift.io to resource-graph #655
Bug 2101843 : Label openshift-infra namespace as privileged #647 k8s 1.25.0 #652
Bug 2118286 : always report and reconcile GarbageCollectorDegraded condition #650 OCPBUGS-212 : gc watcher should close connections after throwing away a client #649 Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #638
Bug 2001409 : add runbook urls to KCM-o alerts #635 Reset Go mod after openstack library-go bump #642
fix TestPodDisruptionBudgetAtLimitAlert by adding SecurityContext to a pod #643
Update library-go to set OpenStack provider to external #641
Make KCM-O conditionally dependent on monitoring stack availability #639
Bug 2103940 : Decouple KCM-O’s status from monitoring stack #636 Bug 2099668 : introduce GC Watcher controller and add alerts for GarbageCollector #623 Bug 2087684 : Reject transition from/to extreme latency profiles (default<->low) #629 Bug 1902307 : Let vsphere-legacy-cloud-provider update node objects #631 Bug 2097186 : add rbac roles for the podsecuritylabelsyncer even outside bootkube #632 Bug 2053622 : PodDisruptionBudgetAtLimit should not alert when no app/pods exist #630 Bug 2086092 : bump to k8s v0.24.0 #614 Bug 2086519 : bindata/../namespace-openshift-infra: label namespace as privileged #628 Bug 2086958 : e2e: Fix test pod disruption budget at limit alert #627 Bug 2086959 : e2e: fix flaky TestLogLevel #626 Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #624
Config Observer and Latency Controller for nodes.config.openshift.io WorkerLatencyProfile #611
add RBAC for PSa label syncing controller #616
Fix debugging information #621
manifests/deployment: comply to restricted pod security level #619
policy-controller RBAC: use the new leases API #618
Bug 1918690 : update resource-graph to include current resources #613 Update OWNERS #612
Bump(openshift/api): to get CSI changes #601
Bug 2053582 : Track static pod lifecycle #608 Bug 2053582 : Track static pod lifecycle #606 Update to use configmapleases #602
Bug 2029470 : update library-go to get rapid installer pod fixes #597 Bug 2045872 : allow cluster-policy-controller to fallback to default cert #594 Full changelog
OCPBUGS-27067 : bump(library-go)=release-4.12 #529 OCPBUGS-21239 : Sync deps CVE 2023 39325 4.12 #505 OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #499 OCPBUGS-14652 : disable debug pporf with unauthenticated port for 4.12 #481 OCPBUGS-7369 : Guard controller: set the readiness probe endpoint explicitly #462 OCPBUGS-4478 : Sync library go 4.12 #452 OCPBUGS-4292 : bootstrap-kube-scheduler: specify resources.requests #448 library-go vendoring for installer cmd timeout #444
Bump openshift/api to bring the MatchLabelKeysInPodTopologySpread enabled in TPNoUpgrade #442
trt-589 bump library-go #441
Bump go.mod golang version to 1.19 #440
k8s 1.25.0 #438
Describe how to increase log level of kube-scheduler instances #436
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #433
Update owners #432
Bug 2062459 : Introduce sync unit test #430 Bug 2086092 : bump to k8s v0.24.0 #420 Bug 2062459 : Fix bootstrap leader election config #428 Bug 2064024 : README: fix scheduler configuration formatting #427 Bug 2064024 : Update library-go to 80f9619c2 #425 Fix debugging information #424
manifests/deployment: comply to restricted pod security level #421
[rebase v1.24] remove –port flag from bootstrap #422
Update OWNERS #419
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #406
Bug 2053582 : Track static pod lifecycle #417 Bug 2053582 : Track static pod lifecycle #415 Update resourcelock to configmapleases #412
Bump(openshift/api): to get CSI changes #411
Do not wait for a port which is no longer used by the scheduler #410
update cert injection annotations to beta #409
Bug 2029470 : update library-go to get rapid installer pod fixes #407 Full changelog
: OCPBUGS-21336: bump library-go to include switch to HTTP/1.1 #98
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #82
bindata: comply to restricted pod security level #85
manifests/deployment: comply to restricted pod security level #83
Full changelog
OCPBUGS-23486 : Filter non node CSRs in metrics #220 OCPBUGS-21430 : Bump x/net package to v0.18.0 #214 OCPBUGS-2621 : Update capi related CMA deployment ports #173 OCPBUGS-1411 : Bump k8s dependencies to 1.25 #171 update to release.openshift.io/feature-set to match OCP 4.12 #172
ignore case when checking csr hostnames #170
Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #165 Set default container for log retrieval #163
Define all flags before parsing flags #161
Bug 2047702 : Reconcile CSRs approved by other controllers #160 Add techpreview manifests for CAPI machines #159
Bug 1978303 : update approve condition logic #158 Allow to define several API groups #157
Shrink csr_check_test.go size #155
Make ‘reject_expired’ tests works in any time zone #154
README.md: Elaborate a bit more on node join #150
Updating ose-cluster-machine-approver images to be consistent with ART #153
Full changelog
OCPBUGS-35558 : label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383 OCPBUGS-28766 : fix generation of telemeter token hash #2306 OCPBUGS-25389 : Add RHACM telemetry metric for 4.12 #2204 OCPBUGS-21441 : Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2148 OCPBUGS-22843 : [release-4.12] add RHACS telemetry metrics #2140 OCPBUGS-21234 : upgrade golang.org/x/net to v0.17.0 #2123 OCPBUGS-17125 : backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 #2047 OCPBUGS-16028 : Add the trusted CA bundle in UWM Prometheus pods #2042 OCPBUGS-15473 : Limit the value of GOMAXPROCS on node-exporter to 4 #2023 OCPBUGS-13008 : Add build number to vcenter version information #1965 OCPBUGS-12727 : backport OCPBUGS-5353 to 4.12 #1955 OCPBUGS-11508 : add startup probe for prometheus-adapter #1940 OCPBUGS-11623 : node-exporter: disable btrfs collector #1944 OCPBUGS-11404 : jsonnet: Add prometheus container in UWM #1935 OCPBUGS-2439 : set the argument path.udev.data in node exporter #1800 OCPBUGS-4363 : Fixed TargetDown expression to join on the proper label #1833 OCPBUGS-4488 : Fixes externalURL field for Prometheus and Alertmanager #1840 OCPBUGS-4627 : compute doc link in PVC not configured message #1844 OCPBUGS-4489 : Increase startupProbe for prometheus #1841 OCPBUGS-4431 : add alert KubePodNotScheduled to group openshift-kubernetes.rules #1837 OCPBUGS-3276 : Pin Down Dependencies on Release 4.12 #1819 OCPBUGS-4029 : test: increase timeout when checking remote write metrics #1820 MON-2727 : Adds telemeter alert TelemeterClientFailures #1803 *: don’t expose Prometheus operator’s port #1806
Documentation: fix TelemeterClientConfig #1801
Synchronize versions of the downstream components #1797
jsonnet/components: remove PDB patches #1799
OCPBUGS-1321 : Node Exporter - ignore virtual NICs from OVNK cluster #1780 RHDEVDOCS-3165 : updates to config map code comments and docgen utility #1773 CFE-551 : Allowlist metrics related to Routes to be sent via telemetry #1776 test/e2e: improve getActiveTarget() #1796
Synchronize versions of the downstream components #1793
update to release.openshift.io/feature-set to match OCP 4.12 #1794
update to release.openshift.io/feature-set to match OCP 4.12 #1764
OCPBUGS-2138 : Add os_image_url_override metric from MCO to telemetry #1784 Bug 2043518 : set degraded and available status based on Prometheus resource status #1558 Updating cluster-monitoring-operator images to be consistent with ART #1787
Revert “[bot] Update jsonnet dependencies” #1788
Update jsonnet dependencies #1770
Synchronize versions of the downstream components #1782
Makefile: add docgen tool dependency to the docs target #1772
Synchronize versions of the downstream components #1779
Bug 2114721 : Adds telemeter token hash to Deployment annotation #1747 Bug 2100860 : Pass user-defined Alertmanager service in shared configmap #1690 OCPBUGS-1364 : Dedicated kubelet ServiceMonitor for prometheus-adapter #1752 Bug 1933144 : Extend KubeAggregatedAPIDown alert “for” to 15m #1639 Adds documentation about how to configure CMO #1696
Rename kube_pv to odf_system_pvs #1756
Synchronize versions of the downstream components #1768
go.{mod,sum}: require Go 1.18 #1769
Use odf metrics instead of ceph #1718
Add client certificate and key to service monitor #1738
Update jsonnet dependencies #1766
Add odf_system_objects_total and odf_system_bucket_count #1763
MON-2654 : Add a cluster advance feature usage metric #1750 Synchronize versions of the downstream components #1761
Update jsonnet dependencies #1758
Synchronize versions of the downstream components #1759
OCPBUGS-864 : sorted condition and update on change #1746 MON-2646 : Remove grafana related code #1731 Bug 2099939 : Sets status when UserAlertmanagerConfig is missconfigured #1724 Update jsonnet dependencies #1741
Whitelist metrics for MCG addon #1721
Bug 2116382 : Give precedence to CMO config map proxy config #1737 OWNERS: Add myself, and move former team members to emeritus #1739
Bug 2100312 : go.mod: update openshift-api to current release-4.12 tip #1740 Update jsonnet dependencies #1735
Bug 2115527 : reverts #1704 #1734 MON-1261 : exposing topology spread constraints through config #1624 Update jsonnet dependencies #1730
pkg/manifests/amcfg.go: reorder declarations #1728
Unpin Jsonnet dependencies. #1725
Synchronize versions of the downstream components #1727
Bug 2083226 : increase alertmanager startupProbe failure threshold #1720 Synchronize versions of the downstream components #1722
MON-2658 : Add security context to additional containers in e2e tests #1714 Bug 2089199 : Removes etcd related dashboards from CMO #1674 Bug 2090988 : Set HA convention on admission-webhook #1716 Synchronize versions of the downstream components #1713
Add telemetry metrics for HyperShift #1710
Updating cluster-monitoring-operator images to be consistent with ART #1711
Bug 2095719 : Updates CreateOrUpdateServiceAccounts #1704 Bug 2100472 : fix alert controllers when not in techpreview #1707 Synchronize versions of the downstream components #1705
Revert “Bug 2100472: start alert controllers only when techpreview” #1706
Bug 2100472 : start alert controllers only when techpreview #1701 Synchronize versions of the downstream components #1698
MON-2091 : Add support for user-defined alert relabel configs #1676 Bug 2037513 : Fix dashboards having container_fs* metrices in queries #1554 MON-2552 : Add support for user-defined alerting rules #1675 Pin Jsonnet versions for release 4.11 #1693
Bug 2091902 : Improve performance of Prometheus Adapter #1692 Adding a usage metric for Openshift Sandboxed Containers #1662
MON-2567 : enable AlertmanagerConfig v1beta1 #1682 Synchronize versions of the downstream components #1689
Bug 2096315 : Create a patch im CMO for NodeClockNotSynchronising #1604 *: bump Go dependencies #1688
Bug 2057832 : Updates recording rule cluster:telemetry_selected_series:count #1646 Bug 2094704 : remove verbose output from kube-rbac-proxy in Prometheus-k8s pod #1684 Allow deployment of dedicated Alertmanager for user-defined alerts #1661
MON-2480 : Double the ServiceMonitor intervals for SNO #1652 Synchronize versions of the downstream components #1666
whitelist cluster-logging-operator metrics for telemetry #1546
Bug 2090838 : ignore flapping host interface ‘tunbr’ #1681 Bug 2089574 : Removes master node selector from PO when running with HostedControlPlane external #1679 Bug 2009352 : IR-254: Collecting registry and image stream usage #1668 Bug 2079292 : Adds necessary SecurityContext settings to UWM deployments #1660 eo metrics for Telemetry #1559
Bug 2084079 : Refactors CreateRouteIfNotExists to CreateOrUpdateRoute #1671 Add bodysize limit for metric scraping. #1467
OWNERS: move @fpetkovski, @PhilipGough and @bison to emeritus section #1670
Updating cluster-monitoring-operator images to be consistent with ART #1667
Bug 2069068 : Refactors DeleteDeployment to wait for deletion of the deployment #1655 Expose ovnkube_master_egress_routing_via_host via telemetry #1635
Add runbook for kube persistent volume inodes filling up #1663
Synchronize versions of the downstream components #1658
MON-1913 : pkg/manifest: Allow retention to be configurable for Thanos-Ruler in UWM #1651 *: add standalone admission webhook #1640
Synchronize versions of the downstream components #1650
Bug 2064705 : [bot] Synchronize versions of the downstream components #1648 MON-2213 : Expose the /federate endpoint of UWM Prometheus as a route #1633 Bug 2074807 : [bot] Update jsonnet dependencies #1643 Bug 2073112 : Adds UWM extrenalLabels from Prometheus to ThanosRuler labels #1645 Extend e2e metric test #1642
MON-2193 : pkg/manifests: Expose retention size settings for UWM Prometheus #1630 MON-2193 : pkg/manifests: Expose retention size settings for Platform Prometheus #1579 MON-2206 : Adds sigv4 settings for remote write #1638 Bug 2074084 : CMO metrics not visible in the OCP webconsole UI #1634 Bug 2033575 : use bearer token as fall-back authn method #1637 Bug 2067740 : update prometheus/client_golang version #1636 MON-2207 : Expose Authorization settings for remote write in the CMO configuration #1598 Bug 2057967 : [bot] Update jsonnet dependencies #1628 Add Oauth2 settings to prometheusK8s.remoteWrite config #1617
MON-2212 : Expose the /federate endpoint of UWM Prometheus as a service #1601 Bug 2067005 : Remove Grafana from Prometheus rules added by CMO #1629 MON-1708 : Enforce label scrape limits in UWM #1350 CHANGELOG: add entry for https://issues.redhat.com/browse/MON-2245 #1623
Bug 2048333 : [bot] Update jsonnet dependencies #1621 doc: add Testing section to CONTRIBUTING.md #1620
pkg/manifest: remove unused function AlertmanagerExternalURL #1622
Bug 2063047 : Add condition to check for relative paths in query log file path #1608 Synchronize versions of the downstream components #1616
Update jsonnet dependencies #1615
Documentation/data-collection: Collect cluster_version_capability #1607
MON-2269 : test: deploy prometheus as remote_write receiver #1602 Synchronize versions of the downstream components #1614
Documentation/data-collection: Assign cluster-version metrics to Cincinnati team #1606
Bug 2067004 : manifests: Remove Grafana image references #1612 Bug 2063905 : [bot] Update jsonnet dependencies #1610 Bug 2067062 : [bot] Synchronize versions of the downstream components #1609 Bug 2065577 : CMO now creates by default an empty CM for UWM #1603 Automated jsonnet dependencies update #1600
Bug 2065682 : manifest: explicitly drop the temporary cluster id label #1597 Bug 2065076 : manifests: advertise public urls without path component #1595 MON-1632 Removing grafana from monitoring stack #1557
Makefile: add tools to path for run-local target #1592
MON-2245 : manifest: Add cluster_id label to remote_write configurations #1578 OADP-22 : Send Telemetry metrics on OADP #1536 Bug 2063047 : Added support for full-path query log file #1587 MON-2222 : Enable validating webhook for AlertmanagerConfig custom resources #1567 Automated dependencies version update #1591
Automated jsonnet dependencies update #1583
Bug 2060083 : React to changes in clusteroperators #1575 Automated dependencies version update #1540
Bug 2050120 : Sanitize all regex allow/denylist used in KSM component #1574 Bug 2060091 : Properly deal with an empty console URL #1576 Bug 2051470 : Update prometheus-operator and sync jsonnet #1571 manifest: use path module to construct externalURL #1562
Bug 2057403 : jsonnet: Give CMO explicit get permissions for ReplicaSets #1564 Bug 2037513 : Update jsonnet dependencies and prometheus-operator version #1556 Bug 2057025 : fix init-config-reloader resource requests #1563 go.mod: switch to go 1.17 #1561
Use service ca beta annotation #1560
: Add runbooks for FailedToSendAlerts #1530
pkg: drop code removing the legacy Alertmanager service monitor #1551
Bug 2050707 : test: account for pdb and Prometheus’ staleness period #1553 MON-1631 : prometheus: remove ui access #1532 Updating cluster-monitoring-operator images to be consistent with ART #1550
Full changelog
OCPBUGS-43872 : manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548 OCPBUGS-38905 : Add missing runbook for OVNKubernetesNorthdInactive #2479 OCPBUGS-37942 : [release-4.12] update whereabouts crd #2461 OCPBUGS-29167 : fix whereabouts conformance test failures #2256 OCPBUGS-29884 : add env var in whereabouts-reconciler daemonset #2284 OCPBUGS-29302 : Update ingressconfig_controller to use field Manager #2268 OCPBUGS-28801 : [release-4.12] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2244 NO-JIRA: add kyrtapz as reviewer and approver for release 4.12 #2230
[release 4.12] OCPBUGS-23025: Add maxLogFiles config for OVN-K Audit Logging #2188
OCPBUGS-24039 : remove all managed fields used by old manager #2099 OCPBUGS-21715 : Bump golang.org/x/net and github.com/openshift/library-go #2124 OCPBUGS-24571 : Disable weak SSH cipher suites #2164 OCPBUGS-25128 : Update to go 1.19 and x/net 0.8.0 #2157 OCPBUGS-23293 : IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #2108 OCPBUGS-20277 : Edited multus-admission-controller deployment config to not add autoount a service account token #1884 OCPBUGS-20197 : remove prestop hooks for northd, sbdbd and nbdb #2055 OCPBUGS-17656 : prevent creation of multiple cni-sysctl-allowlist-ds pods #1948 OCPBUGS-11547 : Hypershift: Add RollingUpdate parameters to multus-admission-controller #1775 OCPBUGS-16142 : fix reconciliation process of the allowlist controller #1891 [release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay #1764
OCPBUGS-15588 : Add release version annotation to whereabouts-reconciler #1856 OCPBUGS-13891 : [release-4.12] HyperShift: Support HostedControlPlane node selector #1816 OCPBUGS-13067 : Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] #1829 OCPBUGS-6061 : Update github.com/Masterminds/sprig to v3 #1689 OCPBUGS-13013 : AUTH: update cluster-reader to include k8s.ovn.org #1799 OCPBUGS-13067 : Whereabouts should implement the reconciliation controller [backport 4.12] #1801 OCPBUGS-11559 : multus-admission-controller should not run as root under Hypershift #1777 Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net #1671
OCPBUGS-10977 : HyperShift: Add POD_NAME env to ovnkube-node #1753 OCPBUGS-11461 : Split out konnectivity certs #1771 OCPBUGS-11178 : remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759 OCPBUGS-11059 : Fix info log formatting #1659 OCPBUGS-10319 : HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738 OCPBUGS-8014 : add default noProxy config for Azure #1722 OCPBUGS-9927 : Enable configuration of node healthz server on ovnkube #1731 OCPBUGS-5953 : Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685 OCPBUGS-7044 : HyperShift: Add .hypershift.local to no proxy list #1706 OCPBUGS-7044 : HyperShift: Do not use proxy for internal routes #1704 OCPBUGS-4778 : Fix handling of deployment and statefulset updates #1663 OCPBUGS-4238 : HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1645 OCPBUGS-6494 : OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB #1691 OCPBUGS-3461 : CNI binary copy should account for the possibility of symlinks [backport 4.12] #1615 OCPBUGS-4856 : Disable the drop-icmp container ‘oc’ pprof webserver on Azure #1666 OCPBUGS-4686 : Revert “Remove references to the hosts kubeconfig” #1660 OCPBUGS-4183 : Fix default disable-udp-aggregation value on s390x #1661 OCPBUGS-4637 : Support RHOBS monitoring for HyperShift #1652 OCPBUGS-3956 : HyperShift: Do not accept empty infrastructure name #1634 OCPBUGS-4183 : Disable UDP aggregation on s390x #1643 OCPBUGS-3824 : ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1621 Jira OCPBUGS-3851: IPsec: Fix broken counter++ expression #1636
OCPBUGS-3944 : Remove references to the hosts kubeconfig #1632 OCPBUGS-3437 : HyperShift: Render cncc with proxy settings of the management cluster #1613 OCPBUGS-3889 : SDN: /var/run mount cleanup #1628 OCPBUGS-3184 : update microshift ovnk manifests #1610 OCPBUGS-2362 : Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info #1579 fixed typo in comment #1597
Jira OCPBUGS-1736: Always set PROXY variables for CNCC #1576
Remove the allow_ra sysctl for ipv4 from default systl whitelist #1590
SDN-2591 : allow hybrid overlay to be enabled post install #1584 SDN-3515 : HyperShift: multus admission controller: expose metrics over HTTPs #1583 rebase to k8s v1.25.0 #1571
Bug OCPBUGS-2328: Fix for index out of range error #1588
Add sysctl whitelist controller #1573
Kuryr: Add missing keystoneauth options #1581
OCPBUGS-1341 : Set owner reference for pod network connectivity check #1566 ovn-k, managed: pass join-subnet to control-plane #1582
OCPBUGS-1083 : Move OVNK alert level to info #1564 Pass enable-udp-aggregation=true to ovn-kubernetes #1533
OCPBUGS-1038 : Multus IPAM detection should honor conflists #1570 egress_ip: remove redundant config #1568
OCPBUGS-1515 : Use custom uint128 type when validating v6InternalSubnet #1561 SDN-3283 : HyperShift: Use a socks-proxy in ovnkube-master to allow for node heath checks #1539 Bug: OCPBUGS-736: Kuryr: Use machine net MTU to create service net #1545
Migrate Egress IP configuration during SDN migration and rollback #1536
Allow empty vSphere status field in VIP sync #1558
microshift: update ovnk manifests #1552
Add ovn-kubernetes-microshift to image-stream #1556
Migrate Multicast configuration during SDN migration and rollback #1543
OVN-K: add patch/update service permissions to controller #1554
Add controller to synchronize the API and Ingress VIP fields #1519
Bug SDN-3458: HyperShift: Differentiate resources deployed by different CNO instances in status manager #1541
OVN-K alerts: first tranche #1526
SDN-3432 : Add alert for OVNKubernetesControllerDisconnectedSouthboundDatabase #1548 Add vSphere platform to allow dual-stack cluster #1518
OKD-49 : Adds support for scos to multus #1544 Bug 1894268 : Allow users to specify ovnkube join subnet #1508 Bug OCPBUGS-917: Add EgressQoS DstCIDR format validation #1492
Multus admission controller: Wait for token in Hypershift #1546
Use fixed name for creating EgressFirewall CRs #1540
Migrate Egress Firewall Configuration during SDN migration and Rollback #1534
hypershift: set multus controller priority appropriate for hosted clusters #1538
Bug 2094068 : Add northboundstale alert runbook #1482 microshift: compact ovn databases periodically #1537
Hypershift: Allow configuring hostname and labels on the route #1531
Multus admission controller changes for hypershift #1516
HyperShift: Move CNCC to the controll-plane namespace #1525
Bug OCPBUGS-216: Kuryr: Bump timeoutSeconds for livenessProbe #1528
Add missing runbook links for OVN-kubernetes alerts #1523
Bug 2103680 : avoid overrriding disableNetworkDiagnostics on reconciliation #1527 Render CRDs for both OSDN and OVNK during migration #1521
Configure ignored namespaces into multus-admission-controller #1515
Add microshift ovnk manifests #1517
Bug 2116982 : multus-admission-controller SNO number of replicas #1524 Enable the cloud-network-config-controller for OpenStack #1505
multi-networkpolicy: Enable on SR-IOV networks #1443
Updating cluster-network-operator images to be consistent with ART #1507
Add configmap list/watch rights to cloud-network-config-controller #1511
The Multus admission controller should run as a deployment #1514
Bug 2108232 : Revert “Bug 2085089: Pass enable-udp-aggregation=true to ovn-kubernetes” #1510 Bug 2100601 : Update CNO to config EgressIP timeout for ovnk #1498 Bug 2060079 : Enhance sensitivity of SDN alert NodeProxyApplySlow #1491 Bug 2103590 : Add init container to ensure that Status.podIP is set before postStart hooks run #1503 remove @squeed from owners #1497
Bug 2085089 : Pass enable-udp-aggregation=true to ovn-kubernetes #1489 Bug 2089681 : Disable EgressIP reachability check in hypershift deployments #1485 Bug 2084062 : Make northd probe interval default to 10 seconds #1494 Bug 2100079 : Update sdn-controller perms for “configmapsleases” leaderelection #1496 Bug 2099357 : k8s 1.24 bump: add RBAC coordination leases for ovn-k master #1490 Bug 2094071 : Add southboundStale alert runbook #1481 Bug 2095772 : bindata: managed: reduce memory requests to align with observed usage #1479 Bug 2095756 : client: register types during init, not later #1483 Bug 2090336 : Multus should log at a verbose log level (without a logfile) #1474 Bug 2092047 : cncc: add RBAC coordination.k8s.io leases #1461 Bug 2089805 : Enable config duration for OVN-Kubernetes #1455 Bug 2090437 : Bump CNO to k8s 1.24 #1459 Bug 2073452 : Copying CNI binaries should be an atomic operation. #1472 Bug 2092495 : ovn: use up to 4 northd threads in non-SNO clusters #1471 Bug 2091167 : incorrectly setting rbac role for certificatesigningrequests #1463 Revert “Copying CNI binaries should be an atomic operation.” #1466
Bug 2073452 : Copying CNI binaries should be an atomic operation. #1462 Bug 2076776 : remove patch permissions from ovnkube-node service account #1450 Bug 2089968 : ensures type: Directory for multus host paths #1453 Bug 2090343 : [temporary] Adds multus debug logging #1456 Bug 2087942 : bump to go 1.18, lint improvements #1451 Bug 2086461 : Hypershift: Also add default for Azure mtu #1454 Bug 2086461 : AWS: Use hardcoded MTU to speed up cluster creation #1441 Bug 2087556 : Fix rendering DPU manifests #1448 Bug 2086506 : hypershift: respect statefulset when upgrading ovnk #1447 Bug 2087135 : Fixing Hypershift nodeport flow #1440 Bug 2086544 : Stop passing hosted cluster token as a parameter to ovnkube-master #1446 Bug 2086437 : Enable EgressQoS controller #1430 Bug 2086143 : Status controller: use a label, rather than watching all objects #1431 Bug 2082235 : manifests: Add in service, service-cert, and ServiceMonitor #1433 Bug 2023295 : Cleanup CNO relatedObjects #1432 Bug 2079422 : Bump PodDisruptionBudget to v1 #1427 Re-reconcile network on configmap, stop watching all configmaps in proxy controllers #1416
hypershift: add ovnkube-node-proxy container in ovnkube-node ds #1408
Hypershift: enable TLS for ovnkube-master metrics #1423
Add gm metric record to use for telemetry exposure #1425
Revert “ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds” #1428
Bug 2082611 : Limit Kuryr pods permissions #1367 Bug 2076877 : Bump FlowScema apiVersion to v1beta2 #1419 bindata/network-diagnostics, cloud-network-config-controller: comply to restricted pod security level #1406
Remove ObjectMeta.ClusterName usage #1421
Hypershift: Fix ovnkube-master priority class and set resource requests on token-minter #1420
add more sysctls to the multus allowlist #1411
ovn: fix northd preStop command handling #1414
Add control-plane-component label to ovnkube-master for hypershift #1422
Add link to runbook urls #1417
Hypershift: Copy all CNO conditions to HostedControlPlane status #1415
ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds #1412
Bug 2075475 : Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1390 OCPVE-106 Customize rollout strategy to fix SNO upgrade #1392
Bug 2080255 : SDN: Re-add list/watch/get permissions for nodes needed for EgressIP #1409 Bug 2071859 : Switch dnsPolicy to Default for OVN hostNetwork pods #1395 Revert “Revert ipsec: Allow enablement/disablement at runtime” #1384
ovnkube: export OVS metrics along with OVN metrics #1393
Bug 2078910 : Correct runbook_url field location within schema #1396 Adds dougbtv to owners as approver and reviewer #1397
Bug 2072215 : Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage #1369 ovn-kube hypershift: fix pipefailure that prevents HA startup #1394
Bug 2063123 : Drop Node update permission for sdn-node #1350 OVN-K alert: Increase severity and add runbook_url for NoRunningOvnMa… #1327
Remove Kuryr mutating DNS webhook #1363
raise the alert NoOvnMasterLeader to critical and add the runbook url #1328
Bug 2072710 : Make northd probe interval default to 10 seconds #1386 hypershift: get control plane replicas from hcp #1385
Bug 2072766 : Reserve port TCP/9104 for cluster-network-operator #1378 Multus: split pod/status rbac #1340
add runbook link for NodeWithoutOVNKubeNodePodRunning and V4SubnetAll… #1366
OVN: remove detecing db_ip via kapi #1368
Hypershift: Respect publishing strategy of OVN southbound database service #1349
Proxyconfig: Add a knob for Hypershift to enable proxying internal apiserver address #1381
Bug 1983056 : Kuryr: Update CRD from upstream #1360 hypershift: disable TLS for ovnk master metrics #1382
hypershift: enable publishNotReadyAddress explicitly for ovnk-master service #1372
Bug 2070047 : Bump max value of hist quantile for kuryr_cni_request_duration #1359 Don’t return err with empty relatedClusterObject annotation #1379
hypershift: enable ovnk-master metrics in management cluster #1374
Use (un)setProgressing for pod status update #1376
Use the hosted cluster token explicitly #1370
HyperShift: Watch StatefulSets in the management cluster #1364
Exclude openshift-kube-apiserver and openshift-apiserver service/endpoints from connectivity checks in hypershift #1375
Run ovnkube-master statefulset pods in parallel #1361
Add ibm-cloud-managed annotations to 02-cncc-credentials.yaml, this is required in HyperShift #1358
Add ipsec daemonset for hypershift managed cluster #1356
Add statefulset in status manager #1345
hypershift ovnk route status #1341
Add tuning cni sysctl allowlist to nodes #1347
Bug 2058368 : move enable memory trimming to readiness prob #1365 Add ovnkube-node initContainer to make sure sbdb is up before running other containers #1354
Vendor: pull in hypershift #1346
Hypershift: Use token minter instead of a kubeconfig in ovn-kubernetes master #1344
Add an option to define the client name for in-cluster config #1342
Add ovnkube manifests for hypershift #1329
network, bootstrap: don’t get apiserver from the environment #1339
Fix MTU detection for multi path default routes #1338
Multi cluster support in CNO #1319
Fix golang image version in Dockerfile #1330
Remove empty selector from the mtu prober job. #1331
Switch to server-side apply #1304
Probe MTU from a Job, rather than directly in the CNO #1313
Bug 2058368 : Move memory-trimming-on-compaction out of dbchecker to nbdb/sbdb #1320 Fix group for CVO override used for running CNO locally #1314
Bug 2058671 : ip reconciler: auto clean failed jobs #1318 Bug 2037721 : Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1307 ovn: stop spawning the ovn-nbctl daemon #1315
Bug 1944264 : ovnkube: gracefully terminate databases from preStop #1312 Bug 2044227 : Add rolling update strategy for Kuryr-CNI. #1311 Bug 2032559 : Block DualStack migration for unsupported cluster types #1257 Bug 2010361 : SDN alerts: conform to monitoring team style guide #1248 Update project owners #1309
Bug 2048575 : The Whereabouts ip-reconciler should use api-int load balancer #1302 Bug 2048793 : Kuryr: Decrease vif_annotation_timeout #1293 Bug 2049613 : Use a separate configmap for mtu migration config to avoid pod restart #1299 Fix bond cni source directory path #1295
Updating cluster-network-operator images to be consistent with ART #1294
Full changelog
OCPBUGS-20777 : bump(k8s,openshift) to address CVE-2023-44487 #311 OCPBUGS-4803 : [release-4.12] Correct go file formatting for go1.19 with gofmt #275 OCPBUGS-3841 : update apf configuration to use v1beta2 #271 BUILD-534 : Rebase to k8s 1.25 #268 manage openshift-controller-manager as a Deployment #264
Bug 2055620 : Add permissions for image trigger controller #244 switch to route-controller-manager image and use ApplyDeployment no. 2 #267
Revert “switch to route-controller-manager image and use ApplyDeployment” #265
switch to route-controller-manager image and use ApplyDeployment #258
rename operator queue to OpenshiftControllerManagerOperator #257
fix README links #263
OCPBUGS-722 : handle errors during operand creation and update #262 OCPBUGS-722 : Fix NPD when accessing rote controller spec.deployment.replicas #259 Manage route controllers in separate ns #255
Adding leader election leases permissions for openshift-controller-manager-sa #253
BUILD-417 : Adding leader election leases #250 Bug 2110629 : Set openshift.io/run-level to nil in openshift-controller-manager namespace #248 Bug 2110617 : Add namespace and RBAC needed for ingress-to-route #247 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #245
BUILD-418 : Rebase to k8s 1.24 #242 Add user coreydaley as an approver #241
Bug 2086519 : AUTH-133: bindata: comply to restricted pod security level #240 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #236
manifests/deployment: comply to restricted pod security level #239
Bug 2067820 : Update prometheus client_golang from 1.11.0 => 1.11.1 #238 Bug 2042587 : Simplify Sync of Global CA ConfigMap #233 update cert injection annotations to beta #237
Full changelog
OCPBUGS-21080 : Bump deps to address CVE-2023-44487 [4.12] #136 OCPBUGS-12442 : psalabelsyncer: handle empty namespace of a rolebinding subject #111 OCPBUGS-14092 : [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources #117 OCPBUGS-13889 : external template and route Informer #114 OCPBUGS-6789 : backport feature gate honoring for PSa label syncer #98 OCPBUGS-7705 : [release-4.12] update dependencies to point to v0.25.0 #102 OCPBUGS-5786 : clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #95 OCPBUGS-3663 : Revert “Revert “Revert “psalabelsyncer: synchronize the enforcement l… #90 Bump go to 1.19 in go.mod #88
Bump Kubernetes module dependencies to 1.25. #87
Factor our ns exemptions to make them consumable by other components #85
pkg/psalabelsyncer: rm unused, simple bool return #86
Revert “Revert “psalabelsyncer: synchronize the enforcement label”” #84
Revert “psalabelsyncer: synchronize the enforcement label” #82
psalabelsyncer: synchronize the enforcement label #81
Bug 2095716 : [psalabelsyncer] - remove openshift-operator from the refused list to sync since it is used by OPC/OLM users to install Operator solutions #79 Bug 2086519 : Introduce Pod Security Admission Label Synchronization controller #75 Bug 2067822 : Update deps #78 Updating cluster-policy-controller images to be consistent with ART #74
Update OWNERS #76
Full changelog
OCPBUGS-49664 : add shannon and aroyoredhat as owners #600 OCPBUGS-21179 : update k8s.io/apiserver version #590 OCPBUGS-15757 : Update Jenkins and Jenkins Agent Base image versions #506 OCPBUGS-10918 : update Jenkins to v4.12 #492 OCPBUGS-7208 : When setting allowedRegistries urls the openshift-samples operator is degraded #489 OCPBUGS-4599 : Bump k8s master #479 OCPBUGS-4407 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #478 OCPBUGS-4369 : Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #477 Updating ose-cluster-samples-operator images to be consistent with ART #465
Add client certificate and key to service monitor #464
Updating ose-cluster-samples-operator images to be consistent with ART #435
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #433 update jenkins CPaaS image refs prior to 4.11 GA #432
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #431 Bug 2095256 : Samples Owner needs to be Updated #429 Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #428 AUTH-133 : manifests/deployment: comply to restricted pod security level #425 Updating ose-cluster-samples-operator images to be consistent with ART #426
JNKS-289 : pull in jenkins imagestream updates (add back maven/nodejs streams) #422 Jira SO-19: Make sure template and imagestream api version is groupified #420
JNKS-287 : remove imagestream manifest refs; remove override of jenkins images with payload images #416 Bug 2010364 : OpenShift Alerting Rules Style-Guide Compliance #419 Bug 2067823 : Taking care of CVE-2022-21698 #418 Bug 2064610 : Remove duplicate v1 from cakephp-mysql templates #417 manifests: Add capability.openshift.io/name #414
Updating ose-cluster-samples-operator images to be consistent with ART #412
Full changelog
OCPBUGS-21266 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #407 OCPBUGS-18131 : Add patch for allowing configmap updates via clusterrole #402 OCPBUGS-14307 : User real node name in failing mount alerts #377 OCPBUGS-13719 : assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #370 OCPBUGS-10646 : Hypershift: set control plane operand properties #355 OCPBUGS-8374 : Add UID to CSO Pod to be able to run with custom SCCs #347 OCPBUGS-7331 : hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337 STOR-1039 : Make changes into CSO for hypershift #318 OCPBUGS-2880 : Fix panic on empty featureGate.spec.customNoUpgrade #325 Bug 2093016 : Add alert about attach / mount failing #324 OCPBUGS-1361 : Reword vSphere problem detector check alerts #322 Remove specific UID from cluster-storage-operator #316
OCPBUGS-1904 : Allow CSI operator to get CRDs #323 add storage capability annotation #303
Bump go to 1.19 #321
STOR-858 : Bump github.com/openshift/* and k8s.io/* #317 STOR-1050 : bump openshift/api to latest master #319 Remove in-tree AWS EBS and GCP PD storage classes #312
TRT-534 : Add client certificate and key to service monitor #306 OCPBUGS-946 : Resource csi.storage.k8s.io/csinodeinfos added to powervs-block-csi-d river-operator-clusterrole #315 Updating cluster-storage-operator images to be consistent with ART #296
Bug 2112237 : correct sc error messages for ibm and alibaba platforms #310 Add PowerVS Block CSI Driver Operator #304
Bug 2108054 : Allow Prometheus to scan openshift-cluster-csi-drivers namespace #308 STOR-956 : Bump(openshift/api): to get CSI changes #307 Bug 2108054 : Add alert about unsupported CSI driver #305 Bug 2107043 : HTTPS_PROXY ENV missing in some CSI driver operators #301 Bug 2101645 : DefaultStorageClassController reports fake message on azure and openstack #292 Bug 2077599 : Fix vCenter / ESXi version alerts #290 Bug 2097400 : Allow Shared Resource Driver to operate validating webhook #288 Bug 2077050 : Un-Revert “OCP should default to pd-ssd disk type on GCP” #284 Bug 2081557 : Fix DefaultStorageClassController getting Available=False on error #277 Bug 2088533 : remove unused ‘-v’ for shared resource operator as part of klogv2/openshift api/ k8s bump #287 Bug 2086231 : BUILD-405: Install the Shared Resource CSI Driver WebHook #278 Updating cluster-storage-operator images to be consistent with ART #282
Bug 2077050 : Revert “OCP should default to pd-ssd disk type on GCP” #283 Bug 2077599 : Alert on vCenter < 7.0.2 #279 Bug 2077050 : OCP should default to pd-ssd disk type on GCP #273 Bug 2079197 : alert when more than one default storage class is detected #276 manifests/deployment: comply to restricted pod security level #274
remove openstack in-tree storage class #271
remove azure in-tree storage class #272
Azure File CSI Driver Operator is GA in OCP 4.11 #266
Add missing ibm cloud annotations to prometheus rbac #267
no CredentialsRequests in ibm-cloud-managed #253
Bug 2060509 : Incorrect installation of ibmcloud vpc csi driver in IBM… #264 Bug 2049872 : cluster storage operator AWS credentialsrequest lacks KMS privileges #263 Bug 2043132 : Add metrics for vsphere operator #262 Bug 2050300 : Don’t set generation in object comming from cache #261 Updating cluster-storage-operator images to be consistent with ART #260
Full changelog
Clean up owners file as part of DPP-10343 #46
Updating ose-cluster-update-keys images to be consistent with ART #45
Updating ose-cluster-update-keys images to be consistent with ART #43
Update OWNERS #44
Full changelog
OCPBUGS-45333 : deps: bump golang.org/x/net to 0.31.0 #1122 OCPBUGS-27443 : pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1024 OCPBUGS-20729 : [4.12] Bump http-related deps #990 OCPBUGS-22408 : pkg/clusterconditions/promql: Warm cache with 1s delay #988 OCPBUGS-22198 : Reconcile Volumes in SCCs #985 OCPBUGS-14096 : Trigger new sync round on ClusterOperator Available changes #938 OCPBUGS-12182 : Update dnsPolicy to allow consistent resolution of the internal LB #931 OCPBUGS-10565 : RetrievePayload: Improve timeouts and cover behavior with tests #914 OCPBUGS-10514 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913 OCPBUGS-8304 : Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908 OCPBUGS-5879 : Set upgradeability check throttling period to 2m #884 OCPBUGS-5083 : pkg/payload/precondition: Do not claim warnings would have blocked #878 OCPBUGS-3770 : Allow CVO to update KUBERNETES_SERVICE_HOST with LB address #866 OCPBUGS-3352 : Do not fail precondition check for UnknownUpdate #861 Bug 2033499 : Don’t overwrite accepted risks if local payload #852 OCPBUGS-2125 : Allow unknown capabilities during payload load and implicitl enablement checking #850 bump api version to add new capability #835
Bug 2033499 : Populate acceptedRisks in ClusterVersion History #841 Dockerfile: Bump to Go 1.18 #845
Fix ups from gofmt 1.19 #849
Revert “Fix ups from gofmt 1.19 and yamllint” #848
Fix ups from gofmt 1.19 and yamllint #844
Updating cluster-version-operator images to be consistent with ART #842
OCPBUGS-1636 : pkg/cvo/sync_worker: Pre-create ClusterOperator in reconciling-mode too #840 Bug 1951835 : Handle report only sync errors #837 OCPBUGS-1402 : pkg/cvo/sync_worker.go: remove Lock/Unlock #832 OWNERS: Prune vrutkovs #838
pkg/cvo: add test utility functions #833
allow more than one featureset #821
OCPBUGS-575 : lib/resourcemerge/core: Reconcile seccompProfile in ensurePodSecurityContext #830 Bug 2006611 : Upgrade takes too much time when upgrading via –to-image #808 OCPBUGS-569 : CVO History Pruner return not assigned to config.Status.History #828 bump api version to add new capability #801
lib/capability: Sort all slices after building them #827
Bug 1951835 : Propagate Degraded to update status #662 Bug 2010365 : OpenShift Alerting Rules Style-Guide Compliance #800 Restore ‘Pull arch from payload’ and fix #813
/pkg/cvo: improve CV history pruning #805
Bug 2117033 : pkg/cvo/sync_worker: Trigger new sync round on ClusterOperator versions[name=operator] changes #818 pkg/cvo/status.go: sort implicitly enabled caps #814
pkg/cvo/sync_worker: Consolidate all ClusterOperator errors by reason #577
Revert “Pull arch from payload” #810
Pull arch from payload #796
Bug 2110590 : pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #807 Bug 2109374 : pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #806 Bug 2094174 : pkg/cvo: reset payload load status #788 Bug 2108858 : lib/resourcemerge: change SecurityContext reconcile #804 Updating cluster-version-operator images to be consistent with ART #797
Bug 2100533 : remove local golang lint #792 Bug 2097067 : pkg/cvo: retain initial completed update history entry #791 Updating cluster-version-operator images to be consistent with ART #779
Bug 2091770 : pkg/cvo/updatepayload: Guard against ‘rm -fR -whatever’ with ./* #783 Bug 2071998 : pkg/cvo/updatepayload: Event when forcing through a sig-verification failure #763 Bug 2081895 : lib/resourcebuilder: Drop Get from check*Health functions #780 Bug 2079789 : capability: Init prior known from CV status #773 Bug 2084331 : vendor: Bump library-go to pick up manifest checkResourceEnablement fix #781 Bug 2081895 : lib/resourcebuilder/apiext: Restore check for Established=True CRDs #771 Revert “admin-gates: Add ack-4.11-kube-1.25-api-removals-in-4.12 gate” #775
Bug 2080429 : pkg/cvo/sync_worker.go: Save overrides and capabilities #770 admin-gates: Add ack-4.11-kube-1.25-api-removals-in-4.12 gate #772
Bug 2079789 : pkg/cvo/sync_worker.go: Initialize implicitlyEnabledCaps #768 Bug 2072389 : Do not save desired update on load failures #766 Bug 2070805 : pkg/cvo/updatepayload: Restore shell for rm globbing #767 Bug 2070805 : pkg/cvo/updatepayload: Shift previous-download removal into the job #765 Bug 2070854 : syncWorkerStatus: Avoid saving stale status values #759 Implicitly enable capabilities on updates #758
Bug 2070887 : pkg/cvo/sync_worker.go: set implicitly enabled caps earlier #761 pkg/cvo/sync_worker: Log only changed enabled capabilities #762
Bug 2070805 : pkg/cvo/updatepayload: Prune previous payload downloads #760 capability: disallow disabling, add enabling capabilities #754
Bump openshift/api to include new marketplace capability #757
pkg/cvo/metrics: Add a cluster_version_capability metric #755
vendor: update openshift/api #751
lib/capability: Sort status.capabilities arrays #752
pkg/cvo/sync_worker.go: ensure all of SyncWorkerStatus copied #750
pkg/payload: Log load-time manifest exclusion at V(2) #749
Consume post install static spec capabilities #744
Bug 2062568 : lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #748 Get cluster version object earlier in startup #741
Bug 1822752 : pkg/cvo: Fix ups from separating load from apply #683 #745 Bug 1822752 : pkg/cvo: Separate payload load from payload apply #683 Bug 2050946 : Fix wrong informer for feature-gate-stopper #739 pkg/payload: Log manifest exclusion #712
vendor: Bump openshift/api to pick up capabilities #737
Updating cluster-version-operator images to be consistent with ART #732
Bug 2050946 : pkg/featurechangestopper: Seed queue to guard against incorrect startingTechPreviewState #736 Bug 2009845 : pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating #733 pkg/cvo: Drop unused ‘workers’ argument from Operator.Run #719
Full changelog
Updating configmap-reload images to be consistent with ART #47
OWNERS: Add Joao and myself, and move former team members to emeritus #46
Updating configmap-reload images to be consistent with ART #45
Bug 2067745 : Merge Upstream Master Branch #44 Updating configmap-reload images to be consistent with ART #42
Updating configmap-reload images to be consistent with ART #41
Full changelog
Dockerfile yarn line update #14838
OCPBUGS-45291 : Application creation fail when manually entering input scaling value in local setup #14572 OCPBUGS-45235 : Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561 OCPBUGS-36561 : Increase login flow state paramater length/entropy #14539 OCPBUGS-43639 : Copy response code from proxied plugin requests #14423 OCPBUGS-33519 : Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334 OCPBUGS-41600 : Fix plugin proxy handler #14266 OCPBUGS-41854 : Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283 OCPBUGS-34564 : Routes created by devfiles do not always use HTTPS #13907 OCPBUGS-34933 : Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930 OCPBUGS-32146 : Bump graphql-go to v1.3.0 #13923 OCPBUGS-34845 : Fix PipelineRun Logs tab navigation #13920 OCPBUGS-33778 : fix issues with Edit Route form #13859 OCPBUGS-27479 : Bump helm pkg #13528 OCPBUGS-29746 : Add Pipeline metrics tab using plugin #13621 OCPBUGS-29348 : Added Proxy to non k8s endpoints #13600 OCPBUGS-22431 : Check if filtered object contains name property #13285 OCPBUGS-25213 : add access review for impersonate #13440 OCPBUGS-18116 : Bump helm version #13104 OCPBUGS-24236 : Remove tech preview badge from Pipeline repository pages #13384 OCPBUGS-23413 : Correct logout process #13342 OCPBUGS-24364 : Subsequent PipelineRuns take initial PipelineRun name into account #13401 OCPBUGS-13357 : add multipath device type to LocalVolumeSet #12805 OCPBUGS-23346 : update the KnativeServing API version to v1beta1 for global-config extension #13334 OCPBUGS-23154 : remove expandable toggle for conditional update risk d… #13322 OCPBUGS-22964 : add support for new features annotations while preservi… #13305 OCPBUGS-19382 : Could not import multiple resources via JSON (while YAML supports this) #13168 OCPBUGS-20071 : Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13212 OCPBUGS-21727 : fetch TaskRuns without selector and reduces the get TaskRuns requests #13251 OCPBUGS-21731 : show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13252 OCPBUGS-13580 : Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12747 OCPBUGS-19907 : Fixed Edit Application form for Knative Services #13205 OCPBUGS-19045 : Web console slowness on Project>Project access page #13155 OCPBUGS-18273 : Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13113 OCPBUGS-18563 : OLM Pages work when copied CSVs are disabled #13055 OCPBUGS-17530 : fix bug where binary secret values are corrupted on edit and add test coverage #13087 OCPBUGS-18366 : Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13122 OCPBUGS-16660 : Manual cherry-pick of #12978 #13039 OCPBUGS-17192 : “Duplicate RoleBinding” leads to “Unsupported value” error #13063 OCPBUGS-16846 : Fix stop PLR option #13051 OCPBUGS-2182 : re-enable operator-install-single-namespace.spec.ts test #13013 OCPBUGS-16732 : When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047 OCPBUGS-16046 , OCPBUGS-16047 , OCPBUGS-16048 : Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997 OCPBUGS-15898 : account for single object in status.conditions instead… #12982 OCPBUGS-16139 : The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004 OCPBUGS-15710 : Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962 OCPBUGS-15849 : Add Pipeline metrics unsupported empty page #12977 OCPBUGS-9405 : [OSD] There is no error message shown on node label edi… #12965 OCPBUGS-15798 : Remove access review check for PipelineResource from Pipeline section #12969 OCPBUGS-13643 : Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813 OCPBUGS-15569 : use service port name instead targetPort in the Pipeline Event listener route #12958 OCPBUGS-15535 : Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955 OCPBUGS-15404 : Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935 OCPBUGS-15057 : only copy workload annotations to debug pod #12903 OCPBUGS-15099 : visiting Configurations page returns error Cannot read… #12906 OCPBUGS-15482 : Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948 OCPBUGS-14190 : When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859 OCPBUGS-11989 : Modified git import flow module to handle create button enable-disable issue #12775 OCPBUGS-6848 : Service name search ability while creating the Route from console #12505 OCPBUGS-7619 : Search page: LazyActionMenus are shown below Add/Remove from navigation button #12575 OCPBUGS-7924 : Developer - Topology : ‘Filter by resource’ drop-down i18n misses #12598 OCPBUGS-13803 : add support for minimal status of tekton #12831 OCPBUGS-13750 : use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12829 OCPBUGS-12839 : Show type of sample on the samples view #12783 OCPBUGS-12992 : Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12791 OCPBUGS-9336 : use buildconfig form also for create #12770 OCPBUGS-11601 : Move operator install status to it’s own … #12715 OCPBUGS-12232 : Fix for broken Create key/value secrets e2e tests #12750 OCPBUGS-11844 : delete associated pipeline, triggertemplate and eventlistener when deleting app #12727 OCPBUGS-11972 : update the default pipelineRun template name #12687 OCPBUGS-6888 : Show Git icon and repo link as per the Git provider #12511 OCPBUGS-12476 : Pipelines repository list and creation form doesn’t show Tech Preview status #12763 OCPBUGS-1753 : Fix OLM descriptor components deletes operand e2e test failing #12573 OCPBUGS-12477 : Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765 OCPBUGS-11998 : Do not show builder ImageStreams without sampleRepo as samples #12740 OCPBUGS-5009 : Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382 OCPBUGS-7953 : fix devfile error #12605 OCPBUGS-6672 : In DeploymentConfig both the Form view and Yaml view are not in sync #12475 OCPBUGS-8016 : PipelineRun templates must be fetched from OpenShift namespace #12614 OCPBUGS-10225 : Get the Event type value from the latest PLR of the Repository #12643 OCPBUGS-7333 : Add missing SDK extensions descriptions #12556 OCPBUGS-7951 : delete application should delete all part-of resources #12604 OCPBUGS-6036 : Project dropdown order is not as smart as project list page order #12447 OCPBUGS-7800 : add subject kind dropdown in the project access form #12586 OCPBUGS-8339 : disable operator-install-single-namespace.spec.ts until… #12624 OCPBUGS-3892 : Add cluster to query params of websocket requests #12282 OCPBUGS-5092 : Fix to use and set correct secretReference for build-config triggers #12388 OCPBUGS-7895 : Bump helm version to 3.10.1 #12579 OCPBUGS-6873 : The dropdown list component will be covered by deployment details page on Topology page #12507 OCPBUGS-6831 : Fix crash when pinnedResources is null #12503 OCPBUGS-7471 : Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565 OCPBUGS-7506 : Fix different CI issues #12555 OCPBUGS-6966 : Remove description field from the PLR parameters page #12519 OCPBUGS-7437 : Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560 OCPBUGS-6887 : Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510 OCPBUGS-6816 : Repositories list does not show the running pipelinerun as last pipelinerun #12500 OCPBUGS-4072 : Fix rerender loop/crash when bindable-kinds is found but has no status #12304 OCPBUGS-6671 : fix broken pipeline secret #12474 OCPBUGS-6913 : PipelineRun task status overlaps status text #12516 OCPBUGS-6766 : Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12491 OCPBUGS-6969 : Added translation to Last used in resource type dropdown #12521 OCPBUGS-6764 : Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12490 OCPBUGS-4281 : Do not disable metrics when auth is disabled #12323 OCPBUGS-6669 : Do not show UpdateInProgress when status is Failing #12473 OCPBUGS-5093 : Fix to show correct help texts for each git repo status error code #12389 OCPBUGS-6085 : Editing Pipeline in the ocp console should show correct information #12452 OCPBUGS-6758 : Add RBAC check on Create a Project link in all-namespaces pages #12489 OCPBUGS-6755 : Remove refs-heads from the branch name for Repository pipelineRun row #12487 OCPBUGS-6743 : Fix react warning when open console, add missing keys in navigation #12484 OCPBUGS-5875 : Don’t proxy CORS response headers #12276 OCPBUGS-6678 : fix run-time error on Cluster Settings when availableUp… #12476 OCPBUGS-4633 : Monitoring: Fix alert descriptions with duplicate resources #12352 OCPBUGS-5303 : display ‘Control plane is hosted’ alert only when isCl… #12409 OCPBUGS-5263 : only show upgrade details if cluster not externally man… #12404 OCPBUGS-5444 : Change vSphere connection health status icon #12415 OCPBUGS-4960 : Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12378 OCPBUGS-5003 : fixed node maintenance plugin route configuration for BareMetalNodesPage #12381 OCPBUGS-5185 : Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12393 OCPBUGS-5191 : add support for version v1beta1 for knativeServing and knativeEventing #12395 OCPBUGS-4897 : Pan nodes into view if all nodes are not visible on load #12370 OCPBUGS-4013 : fix number spinner input #12288 “OCPBUGS-4512: Fix navsection bug” #12340
OCPBUGS-4458 : fix issue where node debug terminal doesn’t load #12338 OCPBUGS-3333 : Promote ConsolePlugins API version to v1 in console repository #12248 OCPBUGS-4035 : Fix for initial showing of topology contents #12299 OCPBUGS-4117 : Re-enable serverless e2e tests #12308 OCPBUGS-4116 : Re-enable pipelines e2e tests #12307 OCPBUGS-4004 : migrate Events integration test to Cypress to mitigate … #12291 OCPBUGS-3927 : show 403 error when normal user check operands on All … #12284 OCPBUGS-3786 : add Release not accepted to Update status on Cluster Se… #12273 OCPBUGS-3754 : Monitoring: Add popover help text for silence form’s negative matchers #12271 OCPBUGS-3696 : improve display of RetrievedUpdate condition in Update status #12270 OCPBUGS-2874 : add capacity action for SS CSV list page [OCP 4.12 & ODF 4.11] #12233 OCPBUGS-2974 : Monitoring: Fix permission check for Prometheus & Alertmanager pollers #12225 OCPBUGS-3265 : check that user can patch console operator config in s… #12239 Create-Knative-Workload | Knative Serverless #12165
add tab extension to dev console #12109
OCPBUGS-2651 : Show focus border on pipeline run nodes #12157 OCPBUGS-2909 : Fix documentation link which leads to 404 #12181 OCPBUGS-2478 : Fix i18n issue in Remove component node from application modal #12180 Bug 2110256 : Storage -> PVC -> upload data, does not support source reference #12213 OCPBUGS-1950 : Devfile samples (in Developer Catalog) link doesn’t include the current selected namespace #12193 CONSOLE-3164 : Move main nav components #12123 CONSOLE-3224 : Expose errorMessage and errorCause for failed plugins #12151 CONSOLE-3336 : Make dynamic plugin dependencies optional #12078 Bug 2115347 : Monitoring: Add support for Alertmanager negative matchers #12139 CONSOLE 3250: Configure default behavior for “Wrap lines” in log viewers #12015
chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 224 #12185
CONSOLE-3276 : Expose ErrorBoundary capabilities in the SDK #12170 Replace resource URI with inline yaml in devfile #12168
Bug 2110321 : Workloads list page has different PDB action items from details page when All Projects selected #12117 Update Devfile Import to use Kubernetes YAML definitions #12000
OCPBUGS-2654 : Update OperatorHub tests #12198 ODC-6786 : Add cluster configuration extension, page, and options for console customization #12159 MGMT-9085 Add vSphere Connection plugin #12068
OCPBUGS-505 : Input box aria-label and name wrong for editing PDB inside Deployments #12064 OCPBUGS-2455 : Pods and PDBs list page just reports ‘Not found’ when no Pod/PDB #12178 OCPBUGS-2100 : Fix warning icon color #12177 OCPBUGS-1916 : Workloads list page has different HPA action items from details page when All Projects selected #12120 OCPBUGS-548 : Tweaks to make the “Favorites” section heading consistent with project menu section heading #12119 OCPBUGS-1470 : i18n Incorrect plural for maxUnavailable pod count #12065 OCPBUGS-1776 : Remove duplicate start guide alert from devconsole Search page #12158 OCPBUGS-2430 : Add missing Quick Start translation #12171 ODC-6779 : Hide sub-catalog(s) in the developer catalog or the entire dev catalog based on customization #12067 OCPBUGS-800 : Name of workload get changed, when project and image stream gets changed on reloading the form on the edit deployment page of the workload #12024 OCPBUGS-1017 : Persist last cluster dropdown selection in session storage only #12179 OCPBUGS-2344 : Change annotation to be used for fake helm repositories #12141 OCPBUGS-1416 : Fix outdated, broken ODC add-page e2e test #12055 OCPBUGS-2438 : Monitoring: Fix help popovers #12166 OCPBUGS-1746 : Update the Github App events and permissions #12162 OCPBUGS-193 : Corrected kebab action overlapping issue in Helm page #11980 OCPBUGS-2369 : adds check for metadata as metadata is not required in template spec #12169 OCPBUGS-2075 : Hide silent switch for alerting rule if no associated alerts are present in devconsole #12152 Bug 2100334 : separate fetching of serving and eventing as they can be enabled independently #12080 OCPBUGS-2195 : fixes npe on topology #12156 Cards-display-on-serverless-operator-installation | Knative-serverless #12089
Updates flags and blocks migrated extensions #11992
Add resource quota alert to topology list view node #12143
OCPBUGS-1040 : Add checks for pods in hpaPodRingLabel #12118 OCPBUGS-2181 : updates test id for 3scale #12167 OCPBUGS-1105 : OCPBUGS-1106: Update dependencies to the registry library and devfile parser #12043 OCPBUGS-2265 : Allow passing documentation links for alerts #12059 CONSOLE-3190 : update OperatorHub filter to use nodeArchitectures instead of GOARCH #12072 ODC7127: Change node background color to yellow on zoom out #12142
Bug 2100843 : Fix selection on add connector context menu option opens the side panel of the node #12069 OCPBUGS-2102 : updates e2e to call resource type selection in advance option #12147 ODC-6771 : Add telemetry support #12140 ODC-6785 : Enable/Disable perspective(s) based on customization #12025 Refactor ResourceSection and move it under Advanced options #12052
ODC-6772 : Show resource quota alert in deployment side-panel #12029 OCPBUGS-194 : Switch api explorer filters to use PF toolbar component for structure and adjustments. #12111 Bug 2115522 : Strange padding in new Helm Chart Repository table row #12102 OCPBUGS-1678 : Use local test data to mock a devfile registry #12088 Updating openshift-enterprise-console images to be consistent with ART #12121
OU-38 : Monitoring: Refactor silence duration dropdown to use PatternFly #12101 Action on Knative-Service | Knative Serverless #12081
OU-56 : Query browser: Refactor timespan dropdown to use PatternFly components #12076 Bug 2079249 : Find latest pipeline run without firehose selector #12071 OCPBUGS-1479 : PDB list page should only show Create Pod button to user has sufficient permission #12066 Update PL/PLR visualization to use new PF pipeline package #12046
Bug 2057972 : Remove space in Chinese translation for Duplicate {{kindLabel}} #12099 HELM 386:Chart Verifier api integration #11964
OCPBUGS-1827 : disable e2e for knative #12114 OCPBUGS-184 : Fix OperatorHub “View it here” link for installed operators #12105 Move some datetime functions to @openshift-console/plugin-shared #12037
OCPBUGS-183 : fix bug where line numbers greater than 5 digits overlay… #12093 OCPBUGS-803 : Handle fake helm chart repository #12096 Bug 1904106 : Fix Y-axis labels for minimal / no data #12087 Monitoring: Clean up use of ISO datetime helpers #12053
OU-66 Add a ‘Select/Unselect All’ button to Observe > Metrics Page > … #12033
ODC-6778 : add list of disabled dev catalog types to server flags #11984 OCPBUGS-1522 : Allow regular users to access debug pods #12098 add list of enabled/disabled perspectives to server flags #11993
chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 223 #12083
Bug 2100860 : Use Alertmanager services for user-defined alerts from config #11712 YAML Editor with forwardRef #11997
OCPBUGS-1677 : Fix devfile registry assertion #12085 PF-2022 : 12 package updates #12063 OCPBUGS-1569 : add admin flag to disabled extensions #12027 ODC-6784 : Added Code Snippets for Hiding Perspectives in Dev Console #12075 Bug 2030406 : Remove nav override for fixed demo plugin nav component dom structure #12079 OCPBUGS-1570 : fixes issue with eventsources vis on topology #12074 CONSOLE-3183 : Improve console.dashboards/overview/detail/item extension #12058 Action on Knative-Revision | Knative Serverless #12034
Bug 2057972 : Switch to “verb kind” phrase so that Chinese translations do not have spaces between. #12039 Bug 2077138 : update version of quick-start library to latest #12038 ODC-6780 : Provide a code snippet for the console CRD for adding Subcatalogs in Dev Catalog #12047 OCPBUGS-1268 : Remove required flags from helm actions to show the HCR actions also if no helm repo is enabled #12042 Expose the NamespaceBar component in the dynamic plugin SDK API #12001
OCPBUGS-1141 : fetch shared resource imagestreams based on labels instance and name #12035 OCPBUGS-943 : Use the Deployment as resource kind and label also when importing a Devfile #12022 OCPBUGS-1256 : Improve OLM descriptors e2e tests #12044 OCPBUGS-1290 : updates description for kafkaSink #12048 OU-68 Add PodMonitors to Metrics targets Page #12008
Added resource quota warning message in topology and add page #11962
OCPBUGS-270 : Show already loaded catalog items after a timeout (3sec) #12019 OU-85 : Monitoring: Add runbook URLs to alert and rule details pages #12026 Automate DevConsole Interop WTO Scenarios #8814
Bug 2115899 : BuildConfig form: Change image repository to image registry #11938 OCPBUGS-548 : Changes to the application menu with search and favorite options so it is consistent with PatternFly menu and aligns with Project selection menu #11985 OCPBUGS-939 : Fix flaky CI and usability issue: Disable create button until Devfile is parsed #12023 Monitoring: Clean up and make more use of the dynamic plugin SDK #12009
OCPBUGS-238 : enable knative e2e in ci #12021 OCPBUGS-896 : Allows launching of modals from alert actions #12018 Pass className to HealthItem popup top-level component #11952
chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 222 #11989
Update pf packages to pf-2022-10 #11981
OCPBUGS-869 : correct Azure product name for support link #12016 Migrates StorageClass Provisioner to dynamic-plugin-sdk #11931
Disable all OCS tests #12013
kafka-event-source & kafka-source-connection feature | Knative #11957
Bug 2112812 : Update registry library dependency to pick up proxy support #12011 Gherkin for “Cancelled” and “Stopped” status of pipeline run #11868
CONSOLE-3179 : Improve control over shared modules provided by Console to dynamic plugins #11700 OCPBUGS-704 : Disable knative test suite #12006 Bug 2109854 : Fix description for Max unavailable and Max surge #11867 Add support for param of array type when starting a Pipeline #11953
OCPBUGS-451 : show git icon in repository details page based on git provider #12003 OWNERS: add jerolimov to approvers #11998
OU-59 : Query browser: Remove the metrics list dropdown #11991 HELM-342 : Add basic authentication support for Helm repositories #11782 Add functionality to add kafka-sinks as subscriber, trigger and event-source sink target #11925
OCPBUGS-435 : Dropdown items on storageclass creation page need i18n support #11988 chore(i18n): update translations: Completed-7034-OCP 4.12 UI Localization- sprint 221 #11940
Bug 2102681 : Fix zh locale (greater than pod) #11802 Include ActionServiceProvider in dynamic-plugin-sdk #11923
create kafkaSink support in catalog #11948
ODC-6712 & ODC-6714: Add a build decorator for Shipwright Builds and builds section into topology sidebar for Shipwright Builds and BuildRuns #11853
correcting nightly failures: pipelines #11891
RHSTOR-3593 : Add basic support for Modals #11163 Bug 2091573 : Input values in Instantiate Template are disappeared randomly in the developer console #11967 Query browser: Use PatternFly components directly for Actions and kebab dropdown menus #11959
Bug 2091102 : Name of workload get changed, when project and image stream gets changed on edit deployment page of the workload #11758 correcting nightly failures: topology #11878
Bug 2080260 : Update OLM pages to use details and list page extensions for operands when they exist #11883 OCPBUGS-238 : enable knative e2e in ci #11963 OCPBUGS-180 : Change ‘Role’ title to ‘Roles’ #11960 Bug 2071792 : Support namespace of choice for the user that wants to use TLS verification #11571 Monitoring: Import enums from dynamic plugin SDK #11961
Bug 2117738 : reset ErrorBoundary state on location change #11955 CONSOLE-3179 : Add deprecation note for react-helmet #11876 Bug 2094502 : Fix bug where the create required custom resource button points to the wrong namespace. #11949 Bug 2091555 : - Sort function doesn’t work on “Namespaces” column on operator details page #11958 Bug 2109502 : improve bug report links #11874 Bug 2103090 : - Storage - StorageClasses - Create StorageClass - Provisioner: Upon selection of Provisoner i18n misses #11945 OCPBUGS-169 : Fixes E2E test #11956 Bug 2117367 : Include referenced .scss files when building core plugin SDK package #11951 Bug 2115280 : kubevirt-e2e-aws see two duplicated navigation items #11943 Monitoring: Clean up imports and types #11784
Capture telemetry event for Export application action #11921
Bug 2116415 : e2e: Disable Shipwright e2e tests #11947 Updated dynamic demo plugin instructions #11904
Allow editing of Repositories using the form-yaml experience #11866
CONSOLE-3244 : Make status.HostIP for Pods visible in the OCP Web Console #11919 Bug 2111686 : [OKD/nanokube] Fix NPE when project or build status is not defined #11791 Bug 2109511 : fix failed PipelineRun log texts color in light mode #11859 Bug 2102341 : Include min-width on operator icon img so that Firefox displays them correctly #11934 Bug 2114488 : Fix Monitoring Alert decorator icon color in Topology #11928 Bug 2110525 : Clear the error when switching between the Form and YAML editor #11871 improve export application flow #11915
Bug 2115799 : Fix Resource selection for import flow #11937 Bug 2107469 : Fix service-binding modal sub-title text when the target is available #11898 CONSOLE-3188 : Add alert with message for Console plugins page when console operator spec.managementState is Unmanaged #11897 Add Resource type dropdown on the User preferences page #11833
Gherkin for Builds v2 in Dev Console - Topology #11893
Added Repositories tab in Helm Page #11844
Add Cancel option and update the stop status for the PipelineRun #11920
ODC-6740 : Move Build v2 e2e tests from dev-console to shipwright-plugin package #11889 CONSOLE-3140 : Expose ResourceIcon to dynamic-plugin-sdk #11870 Bug 2084504 : can not silence platform alert from developer console #11895 Bug 2105918, Bug 2105303: specify namespace and index entry along with chart url to get the chart details #11838
Bug 2112481 : Fix visual inconsistencies across synched editor forms #11903 Bug 1951901 : incorrect Worker nodes number calculated when nodes have… #11896 Bug 2001211 : Resource usage measurement data display the concatenati… #11805 Bug 2099795 : README file for helm charts encoded in Chinese shows messy characters in the UI #11881 Bug 2112862 : Fix broken Namespace CRUD e2e test #11908 CONSOLE-3186 : Add shared-plugin to the SDK Packages tables docs #11882 capture telemetry for helmChartRepo creation to detect scope #11872
SDK - add plain yaml editor #11840
Bug 2070562 : Base64 data value for java keystore secret changing auto… #11890 Bug 2111205 : [CI Watcher] Add yarn config to dynamic-demo-plugin #11880 Bug 2112146 : Update pod YAML sample for restricted pod security admission policy #11894 Bug 2110927 : Remove zero from edit yaml page and clear errors when the user press the save button #11877 Bug 2075107 : consistency in web terminal headers #11858 bump codemirror and promql editor to the last version #11822
Bug 2092319 : [Firefox] multi-line node status formatting issue #11638 Bug 2089221 : Could not de-select a Git Secret in add and edit forms #11606 Bug 2084453 : - Edit PodDisruptionBudget page sometimes takes user to not synced YAML view #11845 Bug 2097026 : Administration - Cluster Settings - Cluster Operators : … #11742 Bug 2094240 : Update workload-pause.tsx to fix inconsistency between buttons in the notification and kebab action dropdown. #11677 Updates Ceph plugin OWNERS #11657
Bug 2109673 : Align Console plugin SDK package dependencies with generated code #11625 Bug 2106366, Bug 2106377: Use displayname for PHCR in the catalog page #11852
Bug 2108551 : [CI Watcher] Bulk Import e2e test flaking at a high rate #11863 CONSOLE-3181 : Deprecate useAccessReviewAllowed and useSafetyFirst #11851 support creation of helm chart repo using the existing PHCR form #11821
Bug 2037329 : remove redundant model check to prevent tab reloading #11862 chore(i18n): update translations: Completed-7034-OCP 4.11 UI Localization- sprint 220 #11846
Bump webpack dependency in plugin SDK and demo plugin #11771
Bug 2109469 : Fix create-namespace e2e test: cleanup useServiceLevelTitle hook usage #11855 Bug 2108638 : SDK - expose useLastNamespace #11828 Bug 2106805 : Enable running specific spec files with headless test-cypress #11818 add parameters tab on PipelineRun details page #11767
Bug 2079690 : Fix operand affinity form field #11834 Bug 2094558 : MetalLB: Creating ip address pool and community CR throu… #11728 Bug 2105344 : correct usePodActionsProvider and apply it #11816 Bug 2100640 : Adjust font size and alignment for show operands radio toggle #11850 Bug 2106866 : Fix flaky OLM descriptor test #11856 Bug 2092137 : Search doesn’t show all entries when name filter is cleared #11665 CONSOLE-3091 : Remove orphaned code along with consolidating some code to use PF instead of Bootstrap #11744 Bug 2090457 : openshift-debug-node- namespaces do not get deleted for … #11824 Bug 2102098 : There is no error message shown on node label edi… #11817 Bug 2106803 : mock call to /api/devfile in e2e #11831 Bug 2093597 : Added the spacing between advanced options #11739 Bug 2079214 : Switch default modal scroll behavior from inner modal body scroll to entire modal scroll to prevent bug and have consistent display of dropdown menus. #11835 Bug 2081674 : Added onSubmit for create a project function for Dev perspective #11781 Bug 2089773 : Added separate reducers for status and title for pipeline status #11678 Bug 2106866 : Fix flaky OLM test #11832 CONSOLE-3167 : Remove static plugin nav extensions #11825 Bug 2103981 : show last 3 build with option to view all in case of more then 3 builds #11837 Bug 2103224 : Update the side nav perspective selection so it has the correct background and border color when in dark mode #11790 Bug 2103972 : fix MultiColumnField header alignment used for Pipeline parameters #11799 Bug 2078769 : Added translations for filter group names #11594 CONSOLE-3067 : Adding Rollout Restart function to the OpenShift Console #11725 Bug 2091542 : - Error Loading/404 not found page shown after clicking “Current namespace only” #11743 Bug 2021297 : Implement dynamic plugin dependency resolution #11626 CONSOLE-3204 : Add missing api docs for *Icon and *Status components #11808 Bug 2098234 : fix broken update server link #11768 Bug 2105909, Bug 2105328: Fix create-namespace e2e test, ESOCKET timeout issue, and a11y violations to unblock CI #11809
Bug 2052662 : Fix null reference #11780 Updating openshift-enterprise-console images to be consistent with ART #11789
Bug 2093593 : Updated selected strategy file as devfile when devfile is selected #11719 Bug 2100774 : add error color to required help text for image search field #11776 Update PF packages to pf-2022-8 #11766
CONSOLE-3083 : Update API docs for dynamic plugin sdk #11639 Update ODC owner files #11760
Bug 2096350 : fix bug where Cluster update modal errors weren’t displa… #11762 Automation of Eventing-broker-actions | knative - eventing #11503
Bug 2100669 : Don’t log usernames with the telemetry plugin #11759 Bug 2100159 : [dark theme] Fix build pending icon color in topology sidebar #11756 Bug 2099528 : Restore spacing between/below modal body content #11755 Bug 2099358 : Fix application group background colors #11752 Bug 2100356 : remove Condition tab and create option if the crd is not available #11750 eventing-channel feature | knative-plugin #11634
Bug 1948556 : Add check if model is defined to prevent RTE #11224 Bug 2099330 : Add accessReview to Edit application grouping option #11745 Bug 2094023 : Add correct pod template labels via add flows #11740 CONSOLE-3061 : Add failed plugins into the notification drawer #11732 CONSOLE-3062 : add Dynamic Plugins to Cluster Overview Status card #11664 Actions on Horizontal-pod-autoscaler | Topology #11642
Quota charts now show all resource types #11596
Bug 2099654 : Fix endless re-render loop when associatedDeployment is not defined #11749 Bug 2029797 : if linkTo is false, do not attempt to get path #11696 Bug 2062920 : Remove the namespace dropdown set menu height to prevent unneccessary… #11748 Bug 2087772 : Fix layout issue caused by badges in header of catalog details panel #11711 CONSOLE-3153 : Expose timestamp component as part of the dynamic plugin sdk API #11693 Bug 2093586 : Close quick-search modal on ctrl+space #11741 Bug 2072883 : Fix dashboard graph width tracking #11730 Bug 2094227 : Added Create Service Binding to the top of the action list #11702 Bug 2071747 : Fix the machine configuration docs link #11668 Bug 2096392 : [Dark Theme]: Add white background to node icons in Topology in dark mode #11699 Bug 2022611 : Remove BlockPools tab in external mode #11727 Bug 2015042 : Adding a template from the catalog creates a secret that is not owned by the TemplateInstance #11649 Bug 2077373 : fix dev perspective accessibility issue #11738 Bug 2099763 : update icons for eventSource and eventSink #11731 ODC-6660 : Render topology differently based on zoom level #11698 chore(i18n): update translations: Completed-7034-OCP 4.11 UI Localization- print 219 #11695
Bug 2099582 : Format and update the repository overview page #11737 Console 3155: Display Operator logos on a white background on dark them to prevent visual issues and consistency #11491
Bug 2096908 : [Dark Theme]: fix several issues in the dark mode. #11706 Bug 2093601 : allow project access page to update the settings twice #11713 eventing-create-sink-broker feature | knative-plugin #11717
Bug 2089405 : fix topology build decorator color #11722 Bug 1993916 : Visual feedback on OBC deletion #11415 Bug 2072793 : Update top consumer metrics #11721 Gherkin and automation of topology usability improvements #11566
Bug 2089675 : Fix for setting position of topology groups with no children #11723 Bug 2096394 : Switch from overriding dark theme pf-c-card background to increasing its boxshadow. #11707 Bug 2091029 : - Cancel rollout action only appears when rollout is completed #11648 Bug 2097000 : fix visualisation of kafka connection along with kafka sink #11718 Bug 2027603 : Fix arbiter zone selection issue #11692 Bug 2090895 : Support startsWith Nav Extension property #11660 Gherkin and automation of support builds v2 in Dev Console #11709
Bug 2043068 : <x> available of <y> text disappears in Utilization item if x is 0 #11617 Topology-workload-sidebar feature #11605
CONSOLE-3162 : Implement check for the new i18n annotation for dynamic plugins #11586 Topology-connecting-workloads and editing app | Topology Automation #11452
Bug 2036629 : Remove NooBaa Management UI link #11680 Bug 2093600 : Added create call before delete call #11704 Gherkin for add git repository in pipeline as code #11681
Gherkin and automation of dev usability improvements #11601
Bug 2097163 : Expose useURLPoll hook in internal SDK #11708 Add extensions for project overview inventory and utilization cards #11620
Bug 2093047 : Clean up duplicate entries in api.md #11705 Bug 2090457 : openshift-debug-node- namespaces do not get deleted for… #11674 Automation of eventing-broker-trigger | knative-eventing #11576
Bug 2057251 : promql: Improve a few cluster-dashboard queries #11265 CONSOLE-3081 : Adjust darkest purple resource color to one PF shade lighter for better contrast on dark theme. #11685 Automation of event-sources-sink-to-uri | knative-plugin #11450
Bug 2084453 : - Edit PodDisruptionBudget page sometimes takes user to not synced YAML view #11494 Bug 2094239 : do not show NodesUpdateGroup if there are 0 nodes #11694 Bug 2095687 : fix issue with debugcontainer for build logs #11687 Bug 2095083 : Monitoring dashboards: Increase default graph samples from 30 to 60 #11667 Bug 2096053 : [Dark Theme]: Add white background to Builder Image icons in Git import flow #11689 Bug 2086521 : [Dark Theme]: fix Topology context menu icon to support dark theme #11688 Bug 2094152 : Filter alerts in virtualization overview status card #11653 Remove now unused function getPrometheusExpressionBrowserURL #11609
CONSOLE-3081 : Adjust pf-c-card background color, when on dark theme, so that it is discernible. #11684 Bug 2095247 : update fetch for dynamic channels in sink as done for source #11682 Bug 2091603 : move terminal tick & add phase handlers #11650 ODC-6694 : New service binding plugin with a list and detail page, updated topology package #11671 Bug 2094833 : Fix empty pipeline run template section for non-admin users #11670 Render icon as a svg instead of img tag to support dark theme #11663
Gherkin for console dark theme #11643
Bug 2095231 : Fix default sidebar for resources like Kafka sink, Kafka connection #11683 Bug 2095071 : Fix failing backend test after devfile registry update #11675 ODC-4981 : Add new plugin to support Shipwright Builds and BuildRuns #11641 CONSOLE-2321 : Allow operators installed globally to display operand instances for all managed namespaces in their details #8930 Bug 2094104 : Demo dynamic plugin image tests should be skipped when testing console-operator #11652 Bug 2085407 : Update Node details page to include inline edit labels button #11563 Bug 2065840 : redirect v1beta1 CronJobs #11662 Bug 2092414 : Display only running VMs in Virtualization Overview chart #11651 Bug 2091901 : fix bug where log stream pauses in Chrome #11646 ODC-6670 : Add –telemetry support to console backend (bridge) #11531 Topology-Toolbar Filter Group Gherkin Design and Automation #11610
Update pf packages to pf-2022-7 #11632
captures telemetry events for userPreferences, SBO, WTO and getting started #11579
Add pipelines as code Repository form #11627
Bug 2077138 : fix {{execute}} regex for multiline executables in QuickStart #11572 CONSOLE-3163 : kubeadmin notifier changes #11578 Bug 2063764 : Operators - OperatorHub : i18n misses #11583 Bug 2092408 : Change icon in virtualization overview permissions card #11623 CONSOLE-2977 : update MCP list page for control plane only updates #11502 Bug 2091746 : Check if spec is available in MCP details page #11613 Bug 2086546 : [Dark Theme]: update Service binding connector color to support dark mode #11600 Bug 2091218 : Update helm to 3.9.0 #11590 Bug 2088489 : fix app selection in list view #11608 Add console-telemetry-plugin #11549
Bug 2080387 : Pass contextSource to TopologyApplicationActionProvider #11615 Bug 2070000 : Add high priority alerts to overview #11614 Bug 2074635 : fix web terminal start #11597 Bug 2084438 : Change Ping source spec.jsonData (deprecated) field to spec.data #11548 Bug 2089996 : Don’t rerun yarn install when running tests #11517 Bug 2084615 : Fix Add to navigation alignment on search page #11516 Bug 2079685 : Kms details enabled in the StorageClass creation page #11498 [Dark Theme]: fix dark theme issues in pipeline task visualization #11575
Bug 2077386 : Replaced enum type with const to add translation #11419 Bug 2091854 : Add ‘Unavailable’ status to clusteroperator status filter #11612 Bug 2079818 : Remove duplicate padding from catalog side panel #11602 Bug 2063732 : Workloads - StatefulSets : I18n misses #11589 Prometheus hook returns loaded instead of loading - same as k8s watch… #11568
Bug 2084635 : Avoid using ‘gp2’ hardcoded storage class #11603 Fix Multiple instances of Object Bucket, Object Bucket Claims under storage section #11540
Bug 2087546 : Expose getting started card resources #11569 Topology-toolbar-filter feature #11529
ODC-6497 : Restore checks in environment e2e test #11598 Automation of eventing-camelk | knative-eventing #11577
e2e: Add package parameter to nightly cypress script #11507
Bug 2071617 : remove Kubevirt extensions in favour of dynamic plugin #11557 Bug 2090178 : Fix SSH command string #11599 Bug 2081201 : cloud-init User check for Windows VM refuses to accept capitalized #11591 Bug 2074767 : change metrics queries based on metrics level configurations #11449 Bug 2091030 : Expose boot mode field in BMH wizard #11585 Ocp 4.11 UI localization sprint 218 #11582
update helm catalog description #11562
Bug 2083154 : Fix missing params and formatting issues in dynamic plug in generated API docs #11501 Bug 2091087 : Adding new team members and removing users not in team #11587 Bug 2090993 : Handle missing BMH for Node gracefully #11492 Add React-Router Docs to our Extension docs #11570
Form based experience for creating Deployments #11262
Bug 2090621 : Handle medik8s node maintenance #11504 Bug 2090178 : Fix SSH command string #11567 Bug 2084459 : fixes topology list URI flow #11542 Change metrics autocomplete filter #11555
Prometheus poll hook can return undefined #11543
CONSOLE-3081 : swapped labels out for details view and modal #11376 Reposition low resolution alert #11468
Bug 2084287 : Fix NPE when consuming CSVs with missing informations #11544 chore(i18n): update translations : Completed-7034-OCP 4.11 UI Localization- print 217 #11462
CONSOLE-3081 : Include pf charts dark theme css file in app.jsx to ensure they are loaded last #11535 Bug 2088304 : Eliminate use of lookaside cache and move to Cachito #11497 Bug 2089271 : Virtualization appears twice in sidebar #11546 Bug 2064256 : Fix topology sidebar update issues #11420 Bug 2088248 : Create HANA VM does not use values from customized HANA templates #11534 Bug 2087944 : fixes kafka sink visualisation #11536 Bug 2079845 : fix catalog filter group getting removed on keyword change #11481 In-context-add-options feature | Topology #11496
Bug 2088161 : Match dockerfile image name with the name used in the release repo for demo plugin #11524 adds hint and updates helptext for PAC #11520
Bug 2020483 : Monitoring dashboards: Improve display text for interval variables #10472 Bug 2066782 : Attached disk keeps in loading status when add disk to a power off VM by non-privileged user #11521 Bug 2064239 : Overview page crash if no labels available #11514 Bug 2015356 : Different status shows on VM list page and details page #11512 Bug 2086542 : Fix that Service Binding could not be created via drag and drop #11511 Send activity tick by polling #11390
Bug 2069654 : Adding missing annotations to create VM from YAML #11518 Improve cross portfolio consistency #11470
Bug 2081377 : Remove pf-c-code-block__pre since pf updated allows classnames #11431 Bug 2086469 : Monitoring: Fix first panel sometimes not rendered #11505 Updating openshift-enterprise-console images to be consistent with ART #10974
Bug 2067246 : Removing SSH service selectors to minimum required #11508 Gherkin for pipeline builder to support local tektonhub instances #11448
Bug 2076553 : fix rolebinding in DevConsole dropping all subjects when updating #11292 Bug 2054735 : Change learn more link in virtualization -> migration tool #11499 Monitoring: Add “fade out” horizontal gradient to Metrics page table #11474
Bug 2077943 : If there is a service with multiple ports, and the route uses 8080, when editing the 8080 port isn’t replaced, but a random port gets replaced and 8080 still stays #11464 Bug 2086417 : Fix start pipeline default value for GIT REVISION field #11495 change Event Sink and Event Source icons #11437
Gherkin and automation for PAC bootstrap form #11478
Bug 2055492 : The default YAML on vm wizard is not latest #11500 Bug 2082566 : Set dashboards timeout based on selected timespan #11477 ODC-6645 : Convert the ProjectHelmChartRepository create form into a form-yaml switcher #11440 Bug 2070457 : and PF-2022-6 PF update to fix Image vulnerability Popover #11489 CCXDEV-7974 : show error message when Insights Operator cannot process results #11399 Bug 2083756 : enable simplifiedAutoLink for ClusterNotUpgradeableAlert #11490 Chart-Area-Visual feature | Topology #11453
Gherkin Scripts and Automation for Web-Terminal | Dev Console #11378
CONSOLE-3136 : add conditional updates to Cluster Settings #11445 CONSOLE-3138 : add conditional updates to cluster update modal #11424 Bug 2084124 : fix upstream “Learn more” link in Update cluster modal #11480 Bug 2083641 : fixes apiversion for k8s svc and resource selection for sink for form yaml switcher #11475 Bug 2084292 : Add useDashboardResources hook #11467 Bug 2081067 : add help text indicating Cluster history may be excerpted #11472 feat: Add Deployment History Tab (#1950) #11439
Bug 2079062 : Update user from node to 1001 similar to console docker file user id #11473 E2E tests: wait for project list to load before creating #11443
Bug 2068181 : Fix Event source powered with kamelet type source to show associated resources in the sidepanel #11301 Bug 2075592 : add z-index to ocs-drawer to make box-shadow visible #11369 Bug 2078375 : Create VM from template that has sourceRef - will now reflect sourceRed at yaml #11457 Bug 2078769 : Added language translation on filter items #11435 Update QE OWNERS roles for integration tests #11455
[Dark Theme]: fix quick search bar and project selector in User Preferences page #11447
Bug 2076527 : Fix multiple Tektonhub Versions API call #11438 Bug 2070720 : Fix Filter Dropdown & Label Selection State Management #11428 Bug 2076544 : Added margin-bottom for the paragraph component #11404 Bug 2083149 : fix bug where “Update blocked” label incorrectly displa… #11459 GitOps-1941 fixed dark theme color issue #11426
Bug 2082380 : customize wizard is crashed #11458 CONSOLE-3081 : updated skeleton color definitions, updated sidebar shadow #11408 Bug 2060329 : show Limit exceeded state for large number of nodes in topology #11334 CONSOLE-2936 : Add support for PDB #10445 Bug 2013461 : Import deployment from Git with s2i expose always port 8080 (Service and Pod template, not Route) if another Route port is selected by the user #11355 MGMT-9862 : Add extension for dashboard’s Details card #11272 Automation of event-sources-installation | knative-plugin #11444
Bug 2072999 : Add params prop to HorizontalNav component #11343 Bug 2079961 : Fix bug where the search results accordion section has no spacing between sidebar. #11446 Document Console to SDK versions #11429
Bug 2074585 : fix kms issue for mcg standalone #11410 Bug 1990384 : Improve Alertmanager unavailable message #11397 CONSOLE-3090 : [Dark Theme] Convert custom row-filter to use PatternFly ToggleGroup component for styling that is dark theme enabled. #11384 Update topology to Patternfly topology package containing updates and styles. #11166
Expose UsePrometheusPoll in console-dynamic-plugin-sdk #11295
Bug 2081743 : disable kubevirt flaky tests #11436 Automation for quick-search-topology | Topology #11396
Bug 2080873 : Fix crash when stored topology layout isn’t supported anymore #11427 Automation for application and resource grouping | Topology #11395
Automation of knative-plugin | admin-perspective #11389
Monitoring: Add duplicate query option to kebab menu #11004
CONSOLE-3141 : Hide ‘Control Plane’ section in the status card for External controlPlaneTopology #11398 CCXDEV-5788 : render the “last refresh” timestamp in the Insights Advisor widget #11391 CONSOLE 3132: Introduce new console-plugin-shared npm package #11360
Bug 2071747 : Fix the machine configuration docs link #11417 Bug 2079062 : use xl timeout to verify the demo pull spec is accurate #11416 CONSOLE-3072 : Cluster overview page changes for HyperShift provisioned clusters #11366 Bug 2079673 : disable migrated components #11205 KafkaSink Visualization #11333
Gherkin and Automation of e2e support for event sinks #11276
Bug 2027613 : use the correct Alertmanager tenancy proxy #10818 Bug 2039161 : text visibility fixed #10978 Bug 2079663 : change default image features in RBD storageclass #11070 Bug 2079062 : Update the wait time for demo plugin to 60s #11414 Bug 2079216 : Update cluster update reference doc link #11407 CONSOLE-3081 : moved imports #11370 Bug 1994117 : remove orphaned Service Catalog and Chargeback code #11400 Monitoring: Integrate PromQL codemirror for better autocomplete UX #11143
Bug 2079062 : increase timeout to render toast notification for demo plugin test #11402 Bug 2075189 : Fix failed module resoltion errors in console sdk #11381 Filter out global configs when cluster is externally managed #11383
Bug 2077150 : Required parent class added so that margin spacing for breadcrumbs is applied. #11394 Bug 2042852 : Topology toolbars are unaligned to other toolbars #11160 [Dark Theme]: fix Topology empty state to support dark theme #11393
Gherkin and automation for project vulnerability #11325
Bug 2075117 : Added inline-flex styling for searchbar filter div #11379 CONSOLE-3074 : update notifications for HyperShift Provisioned Clusters #11375 Bug 2024708 : Don’t use lodash startCase on default operand field labels #11346 CONSOLE-3090 : [Dark Theme] This is to reassign the correct blue and orange heading colors that are used in the getting started sections on both Admin and Dev console #11385 Bug 1965934 : Fix Run queries button UX #11388 Update pf packages to pf-2022-5 #11372
Bug 2061918 : Fixed side-bar scrolling issue #11386 Automation of Service bindings | dev-console #11352
[Dark Theme]: fix mutilStream logs and pod logs viewer and console header to support dark theme #11357
Bug 2070731 : details switch label is not clickable on add page #11311 Make project access form discoverable #11349
CONSOLE-3071 : update Cluster Settings and ClusterVersion Details page… #11363 adds support for Pipelines as code #11336
Add Helm Chart repositories add action on Add page #11345
Bug 2075575 : Align url polling interval for Overview pages with other pages #11380 Automation of pipeline-runs | pipelines-plugin #11324
Epic Automation for ODC-4315 #11203
Bug 2073437 : Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls #11307 Bug 2039477 : Add a workaround to show the PF validation status also when the input field is autofilled. #11201 CONSOLE-3090 : [Dark Theme] Several dark theme fixes. Includes borders, hr, disabled form element, row hover, hint blocks #11303 Bug 2007340 : fix accessibility issues in topology list view #11251 Bug 2015555 : keep query table and chart in sync #11359 Bug 2073176 : Fix key/value pair removal issue in configmap form yaml switcher #11328 Bug 2065804 : Fix Web Terminal availability check to verify operator is installed #11202 CONSOLE-2925 : Add initial dynamic demo plugin tests #10644 Bug 2076614 : Expose ResourceEventStream Component as part of the Core SDK #11274 Gherkin for service binding enhancement- discoverability #11326
Add infotip and remove not bindable filter #11313
Bug 2071715 : fix 404 on Environments nav #11337 Bug 2074756 : fix bug where ClusterRole > RoleBindings did not display… #11353 Bug 2074100 : fix CRD name filter #11347 Bug 2074465 : Fix default branch param in pipeline import from git flow #11323 Bug 2061918 : Topology sidebar broken issue is fixed #11299 Update links to examples - descriptors reference.md #11342
use incluster tekton hub Api endpoint in pipeline builder #11335
Bug 2071578 : Add new MONITORING flag to hide dev perspective nav item and topology sidebar observe section if not available #11190 Bug 2071617 : remove Kubevirt extensions in favour of dynamic plugin #11273 Bug 2071617 : Stop disabling extensions with non-existing disallowed flags #11344 Hide Upgrade Cluster Alert in About Modal When Externally Managed #11339
Bug 2075778 : Fix failing TestGetRegistrySamples test #11350 Bug 2073329 : fix pipelineruns name in repository details page #11338 [Dark theme]: fix Observe dashboard, Topology list page and web terminal tab view #11231
CONSOLE-3124 : migrate Cluster Dashboard test to Cypress #11332 [Dark Theme]: fixes quick starts, user preferences project selector, quick search, and help text color #11331
Automation of create-from-add-options feature file | pipelines-plugin #11291
add visual effects on dragging the pinned resource #11266
Bug 2065513 : Fix ResourceQuota dashboard card and ACRQ donut label #11340 Bug 2040180 : handle dashboards single column case #11327 Bug 2071691 : Update and scope our breadcrumb padding rule so it doesn’t effect a pure implementation #11321 Bug 2075149 : Fix translation of flag-enabled extensions #11305 add data test ids for MultiTabTerminal #11330
Automation of Pipeline-Workspaces | Pipeline-Plugin #11322
Bug 2074447 : cluster-dashboard: exclude iowait and steal from CPU Utilisation #10450 Bug 2071761 : - Translation Keys Are Not Namespaced #11284 Bug 2072805 : Monitoring dashboards: Add support for __range* variables #11289 Bug 2070160 : Remove custom classes pre and code element and apply using a custom class. #11263 Add form for PAC repository #11264
Update OWNERS for promql/ directory #11317
Bug 2074475 : fix kubevirt gating #11314 Automation of Pipelines-as-code(PAC) #11298
fix(modal): removed drop shadow, updated colors #11148
CONSOLE-2976 : add update mode to Update cluster #11053 chore(i18n): update translations - Completed-7034-OCP 4.11 UI Localization- Sprint 216 #11280
Update pf packages to pf-2022-4 #11261
Bug 2071719 : remove .pf-c-button.pf-m-link override #11306 Automation of event-tab-in-pipeline-run | pipelines-plugin #11230
Automation of pipeline-task-runs-display | pipelines-plugin #11294
Bug 2015375 : Add IBM Flashsystem volume types #10285 Bug 2038244 : Use hostname from provided git url when making git api calls #10827 Bug 2056841 : Improve handling of /api/check-updates request failure in PollConsoleUpdates #11304 Bug 2068594 : disable Details Card test since it was flaking at a high… #11296 Bug 2058051 : Expose YAMLEditor to Core SDK #11244 Bug 2072570 : test: use stable test titles #11257 Bug 2072807 : Monitoring dashboards: Handle tables without panel.styles attribute #11293 Bug 2071599 : fix bug where RoleBindings are not displaying in ClusterRole > RoleBindings #11285 Bug 2069760 : Added divider to developer console navigation #11283 Bug 2069914 : fix casing of ‘Red Hat Applications’ so all links appear… #11268 chore(OWNERS): remove rebeccaalpert #11188
Bug 2058282 : Fix WebSockets not reconnecting during upgrade #11288 Bug 2057183 : Only show operator detail page “Valid Subscriptions” item when it’s not empty #11287 create form for adding project helm chart repo #11227
Bug 2065840 : Fix CronJob resource version to batch/v1 #11216 Bug 2069577 : Update dynamic-demo-plugin readme #11286 Bug 2070020 : create correct apiversion: group/version for creating custom resource key for Resource Dropdown #11260 Bug 2046435 : improve import error message #10983 Bug 2071700 : Use ‘reportingComponent’ field for v1 Events #11277 Bug 2063753 : Translate Extensions On Each Language Change #11278 Bug 2069632 : fix ‘linkURL’ for ‘previous’ logs #11275 Bug 2069685 : Fix UI crash when pinned resource model does not exist #11249 Bug 2068594 : follow on fix to remove timeout value #11248 Automation of Pipeline Metrics #11220
Add synced form-yaml editor for routes #11156
CONSOLE-3081 : updated –pf-global–BorderColor—100 to –pf-global–BorderColor–100 #11234 add Event Sink option to broker and channel connector and context menu #11259
Add and Edit configmap form #11150
Add multitabbed terminal for cloudshell #11191
fix the quick search style to support dark theme #11254
Automation of Builder Page Pipelines #11258
Automation of Pipeline Actions #11238
update and add image vulnerability toggle group in IMV details page #11222
Bug 1997142 : improve performance of OperatorHub text input filter #11252 Bug 2067298 : Remove modelsLoaded conditional rendering from ModelStatusBox #11245 updates text description for Event sinks #11214
Bug 2069577 : Update ConsolePlugin manifest #11247 Bug 2068538 : Visual formatting adjustments to popover. #11236 CONSOLE-3081 : [Dark theme] Update pages to use PageHeading where possible #11183 Bug 2069181 : Fix disabling community tasks in pipeline builder issue #11241 Bug 2068908 : Update getting started blog link #11239 support visualisation of internal deployment in topology view and sidepanel for event sink #11223
Bug 2069198 : Use pre-installed pipeline task in e2e test #11240 Bug 2068490 : change ‘kubectl’ to ‘oc’ to fix descriptors test #11233 Bug 2068594 : fix Cluster Dashboard Details Card test #11235 Updates and fixes for pipelines-plugin cypress tests #11172
Bug 2067180 : Completed-7034-OCP 4.11 UI Localization- Sprint 215 #11169 Bug 2068115 : Fixed the rendering of a Tab Extension when there is a version present #11228 Bug 2067776 : Update prometheus/client_golang to 1.11.1 #11232 Bug 2064744 : Remove duplicate app label on debug terminal #11229 Bug 2017001 : Bug fix context menu position on topology #11152 Console3080 - Add Control Plane Topology flag to console UI #11170
Update pf packages to pf 2022-3 #11158
Allow user to re-arrange the resources added to nav #11142
CONSOLE-3081 : [Dark theme] Additional skeleton updates for dark theme #11177 Add theme switcher in user preferences page #11115
Bug 2064607 : avoid pre-fetching tekton hub task versions in pipeline builder #11195 Bug 2063708 : correct JA translation for ‘Expand’ #11221 feat(theme): added theme file #11151
Bug 2066418 : correct ChannelDocLink url #11217 Bug 2041769 : Pipeline metrics: use prometheus-tenancy API to get data #10870 Bug 2057183 : Add validSubscription filter to OperatorHub #11219 Bug 2064553 : Remove reference to deprecated v2v-vmware ConfigMap #11207 CONSOLE-3081 : [Dark theme] Changes to support the events and project select bar when in dark theme mode #11136 Bug 2058051 : Exposing service list table #11178 Bug 2066754 : Don’t delete core Cypress reports #11215 Bug 2063756 : - User Preferences - Applications - Insecure traffic : i18n misses #11213 Bug 2019564 : attach owner reference to resources created on creating a user to allow garbage collection #11130 Bug 2063699 : - Builds - Builds - Logs: i18n misses. #11211 Bug 2061755 : remove Breadcrumbs from Create Operand pages #11174 Bug 2063957 : fix bug where impersonating message was not translated #11212 CONSOLE-3081 : Integrate dark theme - fix(background-color): updated to –pf-global–BackgroundColor—100 #11167 Bug 2060583 : Remove internal-kubevirt Console plugin SDK package #11091 Bug 2060924 : Fix alert from showing an object #11185 Bug 2065338 : Fix VolumeSnapshot creation sort #11194 CONSOLE-3081 : [Dark theme] Updates hint block element #11155 Fix namespace and backing store table to show pre selected values. #11180
Bug 2064596 : [Tekton Hub] show read more link in the task quick search details pane #11187 Bug 2063897 : Change the tekton hub api endpoint to use v1 api #11179 Bug 2050637 : add a hardcoded blog link as fallback in guided tours #11120 Sort catalog filters and other enhancements #11161
CONSOLE-3081 : [Dark theme] Changes to horizontal-nav to enable dark theme support #11139 CONSOLE-3081 : Integrate dark theme - fix(background-color): updates to –pf-global–BackgroundColor—200 #11168 Replace GitTypes with the GitProvider type #11165
CONSOLE-3081 : Integrate dark theme - fix(borders): convert #ccc, #ddd, $pf-color-black-300, $color-row-filter-border to var(–pf-global–BorderColor–100) #11154 end to end flow for event sink #11138
CONSOLE-3081 : Integrate dark theme - fix borders updates #eee, #ededed, $table-border-color to var(--pf-global--BorderColor--300) #11157 ODC-6495 Remove layout2 topology #11145
Bug 2062524 : fixes uri case for event sink #11171 fix(skeleton): updated sass var #11147
chore(vscode config): disabling the organizeImports functionality of … #11037
[Dark theme]Fix namespaced pages, add page and catalogs page #11144
Bug 2013144 : catalog category filters can be opened via ctrl+click now #11029 Bug 2009345 : Fix potential issues with namespaces that contains just numbers (crashes on 4.7) #11126 Bug 2061333 : Add optional chaining to avoid npe #11146 Bug 2061301 : Add tooltips why add and delete buttons in knative traffic splitting modal are disabled #11106 Bug 2060894 : Preceding/Trailing Whitespaces In Form Elements on the add page #11075 Bug 2059674 : Adjusts the Dynamic Demo Plugin and the SDK to meet on the usecases #11116 Fix CSS for edit bucket class modal #11046
Bug 2055702 : enable Serverless e2e tests #11124 Bug 2046156 : fix showing error in netpol affected pods #10934 Bug 2056496 : update upload jar flow for no builder image #11099 service binding discoverability labels in dev catalog #11035
CONSOLE-3087 : Fix ActionContext type warning in components/actions/types.ts #11128 Update PF Packages to 2022-2: Dark theme stylesheet #11083
Bug 2058623 : updates versions for kafka and kafkaTopic #11111 Bug 2002602 : remove returning of err if json fails to parse #11017 Bug 2054630 : Fix history stack handling when opening the silence alerts form #11107 Bug 2042838 : the status of container is not consistent on Container details and pod details page #11031 Bug 2052986 : fix console crashing in the edit deployment form #11052 Bug 2059654 : update ConsolePlugin proxy settings #10893 Bug 2044207 : Clear text on switching auth method #10995 Bug 2052956 : fix duplicate edit app action on installing virtualization operator #11076 Remove Mode from Topology view #11088
Bug 2058424 : Don’t pass Authorization header when not needed #11102 Bug 2054950 : Display correct disk size in Edit disk modal #11105 Bug 2046598 : Display disk size in correct units #11104 Bug 2057054 : Improves K8s Utils Return Type #11103 Clean up of CronJobSource code references #11086
Trim trailing whitespace in test names. #11100
Bug 2054285 : Show standalone resources as sink and not the one’s owned by other resource #11085 Bug 2042710 : Custom imagepullsecret reference information not found when creating pod using console in openshift #11058 Bug 2050005 : Fix webpack module federation runtime chunk ID clashes #11062 Bug 2046531 : Remove schema subdir from dynamic plugin sdk #11089 Bug 2048059 : fix proxy so requests to account management service work #11090 Bug 2014161 : Fix pipeline run logs autoscrolling issue #11056 Migrate ListPageBody to the SDK #10938
Bug 2052953 : clear dashboard variables for dev perspective on unmount #11066 Bug 2053501 : Decode secrets before authorizing repository #11071 Monitoring: Redirect Prometheus UI format URLs to query browser page #10963
Bug 2055980 : Expose more components/hooks/etc. needed by KubeVirt dynamic plugin #11074 Bug 2055814 : Support custom extensions in console-extensions.json files #11051 Bug 2053304 : Fix debug route and add testcases #11040 Bug 2046598 : Display disk size in GiB in VM customize wizard #11024 Bug 2037625 : Always show ResourceQuota charts #11022 Bug 2037542 : Fix sticky footer in pipeline builder’s form yaml switcher #10783 Bug 2046496 : Update the list Toolbar to use ToolbarToggleGroup when less than 769px width #11063 Bug 1934304 : Sum total memory of unnamed container only #11067 Bug 2051578 : fix ClusterOperator Status, Version col sorts #11061 Remove unnecessary polyfills #10016
Bug 2053168 : Fix dynamic plugin SDK typescript IDE errors #11034 Bug 2048442 : Disabling Vault SA based auth for storage class encryption #10998 Bug 2050902 : Fix to add labels to webhook secrets created during import #11032 Bug 2051775 : Allow custom template namespace #11054 Bug 2028821 : Misspelled label in ODF management UI #11047 Remove Console plugin SDK host-app package #11043
Bug 2050698 : fix bug where Cluster Settings shows 0 of N, 0% progres… #11038 Migrate checkAccess & useAccessReview to the SDK #10847
Bug 2039647 : Use namespaced links for dev perspective nav items #11007 Bug 2051657 : removed Tech preview badge #11016 Bug 2051642 : Remove tech preview badge for web terminal #11012 Bug 2053685 : (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11001 Bug 2054238 : Update E2E to use 3scale operator #11044 Bug 2052595 : Revert “Add Dev Preview tag for IBM FlashSystem” #11033 Bug 2051558 : omit rolebindings with no subjects #11013 Bug 2049483 : Revert “fix annotations on updating workload” #11002 Bug 2052674 : Remove a couple of extra spaces #11021 Migrate impersonateStateToProps #10953
Bug 2052671 : chore(i18n): update translations #11020 Bug 2052095 : Fix auth redirect loop caused by duplicate state-token cookie #11014 Bug 2046498 : fix casing of project and application #10999 valut typo fixed #11009 Bug 2046618 : Add started-by annotation to pipelines created with “Start last run” #11005 Bug 2037628 : added test-id to kms flows #11003 createProject for non-admin users #11000
Expose useFlag as part of the Dynamic SDK #10872
Bug 2050011 : Query Browser: Fix widths of timespan text input #10996 Monitoring: Comment to explain how Alertmanager links are handled #10997
default apiDiscovery in SDK #10903
Bug 2046596 : Customized wizard PVC name #10977 Bug 2014640 : Cannot change storage class of boot disk when creating VM #10992 Bug 2041774 : defaulting to s2i if git type can’t be figured out #10966 Bug 2044421 : Allow topology list to select application group #10988 Migrate Status component to the SDK #10805
docs/helm: update documentation according reviews #10889
Bug 2030530 : Remove quotation marks surrounding VM pwd #10930 Bug 2007141 : pipeline-plugin scripts are updated #10329 Bug 2048221 : Capitalization of titles first-word-only rule #10980 Bug 2046601 : Dont assume its a pvc #10949 Bug 2014420 : Remove depracated v2v resources from plugin config #10954 Bug 2047277 : Add storage status to status card #10951 Bug 2046591 : Added support for customized wizard - new templates #10945 Bug 2006067 : Handle blank usernames in error message #10782 Bug 2047310 : Add empty state to running VMs card #10957 Bug 2046594 : “Requested template could not be found” while creating VM from user-created template #10952 Bug 2033492 : Highlight moves from Template to VirtualMachines while open template wizard #10941 CONSOLE-2999 : Switch the OCP branding logo and title to Red Hat OpenShift logo and title #10940 Bug 2044803 : buttons styles aligned #10935 Bug 2048276 : test-cypress.sh script: Add curly brackets around nightly var #10976 Bug 2022253 : fix web terminal resize layout issue #10948 Uncomment and edit the automation code for ODC-6361 #10967
Bug 2039462 : fix width of dropdowns in the userpreferences applications tab #10960 Bug 2038115 : Make namespace bar full width and sticky in console #10856 Bug 2047320 : Fix that new route annotations doesn’t work on Knative Services #10955 Bug 2039277 : fix topology list view #10883 ODC-5671 : Setup for nightly CI cypress runs #10927 Automation for Observe page features #10566
Add support for doc generation for Core API #10431
Full changelog
OCPBUGS-20593 : build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.12] #131 OCPBUGS-5289 : Adds vlan path substitution fix to address tuning regression for runtime config #71 OCPBUGS-4223 : Fix path substitution to enable setting sysctls on vlan interfaces #68 Updating ose-containernetworking-plugins images to be consistent with ART #66
Updating ose-containernetworking-plugins images to be consistent with ART #65
Updating ose-containernetworking-plugins images to be consistent with ART #62
Check for duplicated sysctl keys #61
Sync with upstream for win-overlay V2 support #59
Updating ose-containernetworking-plugins images to be consistent with ART #55
WIP: Tuning cni: adding interface level sysctls and sysctl whitelist #56
Sync downstream with upstream v1.1.1 #57
Full changelog
OCPBUGS-30295 : Fix selector for manila-csi-driver-controller-metrics service #228 OCPBUGS-18475 : Don’t cache OpenStack client #202 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #199 OCPBUGS-10556 : Bump go.mongodb.org/mongo-driver to v1.5.1 #176 OCPBUGS-6599 : Address CVE-2022-41717 #166 OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #159 Updating csi-driver-manila-operator images to be consistent with ART #157
Ensure files follow go 1.19 formatting #158
Bug 2057637 : Include secrets to VolumeSnapshotClass #156 STOR-858 : Bump github.com/openshift/* and k8s.io/* #155 Bug OCPBUGS-944: Fix RBAC race during initial deployment #154
Expose CSI_FSGROUP_POLICY as an operator option #142
Updating csi-driver-manila-operator images to be consistent with ART #151
Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #149 Bug 2083153 : Fetch application credentials #148 Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy #145 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #144 Updating csi-driver-manila-operator images to be consistent with ART #143
Bug 2074274 : Address CVE-2022-27191 #141 Bug 2067749 : Address CVE-2022-21698 #140 ci: enable more tests #138
Updating csi-driver-manila-operator images to be consistent with ART #137
shiftstack: Update OWNERS #135
Full changelog
OCPBUGS-28953 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #169 OCPBUGS-23118 : Should reference configmaps instead of secrets #154 OCPBUGS-20703 : bump golang.org/x/net to v0.17.0 #148 Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #112
Updating ose-csi-driver-shared-resource images to be consistent with ART #113
csi topology is only PV relatead, do not need #111
Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #108
Updating ose-csi-driver-shared-resource images to be consistent with ART #107
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #106
BUILD-478 : Validate resource admission smoke test #105 BUILD-392 : Shared Resources: Validate Resource Admission #103 BUILD-504 : Rebase k8s 1.24 #104 change entrypoint for the webhook #102
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #99
BUILD-469 : change cmd webhook package to cmd main package #101 Add user coreydaley to approvers list #100
more atomic writer related doc updates #98
Updating ose-csi-driver-shared-resource images to be consistent with ART #97
add Tekton example, update/correction to README and existing example docs #96
Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #95
BUILD-469 : add webhook main entrypoint and dockerfile #92 update test pod to alleviate PodSecurity warnings #94
use k8s atomic writer for storage of secrets / configmaps #93
Bug 2067829 : bump(*): prometheus/client_golang #91 remove use of ‘hostpath’ in names #90
Data removed when permission removed #89
Updating ose-csi-driver-shared-resource images to be consistent with ART #88
Simplify the must-gather dockerfile #87
Full changelog
OCPBUGS-28959 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #105 OCPBUGS-20787 : bump golang.org/x/net to v0.17.0 #88 OCPBUGS-3359 : Revert “[build-407] Mount shared secret and configmap list config path into shared driver node” #62 Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #58
Mount shared secret and configmap list config path into shared driver node #56
STOR-858 : Bump github.com/openshift/* and k8s.io/* #57 : Authorize shared secrets and configmaps with openshift- prefix #53
Bug 2081557 : Run at least one replica of Webhook #51 Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #52
BUILD-392 : webhook validation resource admission #49 BUILD-505 : Rebase k8s 1.24 #50 BUILD-405 : Install shared resource csi driver webhook alongside the s… #45 Bug 2088533 : update openshift/api to master to pick up status subresource #48 Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #46
Add user coreydaley to approvers list #47
Bug 2067830 : bump(*): prometheus/client_golang #43 Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #40
update registrar kubelet socket location to mirror what other CSI drivers do #42
Start using embed module for static assets #41
Full changelog
OCPBUGS-21139 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #62 UPSTREAM: 379: Fix gofmt for go 1.19 #47
UPSTREAM: <carry>: Remove .github files #43
Updating csi-attacher images to be consistent with ART #42
STOR-859 : Rebase to v4.0.0 for OCP 4.12 #41 Updating csi-attacher images to be consistent with ART #40
Bug 2097284 : Rebase to v3.5.0 for OCP 4.11 #39 Updating csi-attacher images to be consistent with ART #38
Full changelog
OCPBUGS-20743 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #74 Updating csi-provisioner images to be consistent with ART #58
UPSTREAM: <carry>: Remove .github files #57
STOR-859 : Rebase to v3.3.0 for OCP 4.12 #55 Updating csi-provisioner images to be consistent with ART #54
Bug 2101343 : UPSTREAM: 2101343: fix: changed the csistoragecapacity check namespace #52 Bug 2097282 : Rebase to v3.2.0 for OCP 4.11 #51 Updating csi-provisioner images to be consistent with ART #50
Full changelog
OCPBUGS-20885 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #149 Updating ose-csi-external-resizer images to be consistent with ART #134
UPSTREAM: <carry>: Remove .github files #133
STOR-859 : Rebase to v1.6.0 for OCP 4.12 #132 Updating ose-csi-external-resizer images to be consistent with ART #131
Bug 2097503 : Rebase external-resizer against v1.5 #130 Updating ose-csi-external-resizer images to be consistent with ART #129
Updating ose-csi-external-resizer images to be consistent with ART #128
Full changelog
OCPBUGS-29244 : cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #140 OCPBUGS-20991 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #111 Updating csi-snapshot-validation-webhook images to be consistent with ART #84
Updating ose-csi-external-snapshotter images to be consistent with ART #83
Updating ose-csi-snapshot-controller images to be consistent with ART #82
UPSTREAM: <carry>: Remove .github files #81
Updating csi-snapshot-validation-webhook images to be consistent with ART #80
Updating ose-csi-external-snapshotter images to be consistent with ART #79
Updating ose-csi-snapshot-controller images to be consistent with ART #78
STOR-859 : Rebase to v6.1.0 for OCP 4.12 #77 Updating csi-snapshot-validation-webhook images to be consistent with ART #76
Updating ose-csi-external-snapshotter images to be consistent with ART #75
Updating ose-csi-snapshot-controller images to be consistent with ART #74
Bug 2097283 : Rebase to v6.0.1 for OCP 4.11 #73 Updating ose-csi-snapshot-controller images to be consistent with ART #70
Updating csi-snapshot-validation-webhook images to be consistent with ART #72
Updating ose-csi-external-snapshotter images to be consistent with ART #71
Updating ose-csi-external-snapshotter images to be consistent with ART #68
Updating csi-snapshot-validation-webhook images to be consistent with ART #69
Updating ose-csi-snapshot-controller images to be consistent with ART #67
Full changelog
OCPBUGS-20629 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52 OCPBUGS-13821 : Bump gRPC from 1.38.0 to 1.49.0 #43 Updating csi-livenessprobe images to be consistent with ART #35
UPSTREAM: <carry>: Remove .github files #34
Updating csi-livenessprobe images to be consistent with ART #33
Updating csi-livenessprobe images to be consistent with ART #32
Updating csi-livenessprobe images to be consistent with ART #31
Full changelog
OCPBUGS-20674 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #54 Updating csi-node-driver-registrar images to be consistent with ART #39
UPSTREAM: <carry>: Remove .github files #38
Updating csi-node-driver-registrar images to be consistent with ART #37
Bug 2097286 : Rebase to v2.5.1 for OCP 4.12 #36 Updating csi-node-driver-registrar images to be consistent with ART #35
Updating csi-node-driver-registrar images to be consistent with ART #34
Full changelog
OCPBUGS-1 : Jira integration test PR 3 #92 Updating the documentation on how to use DTK as a multi-stage image. #80
Remove all kmods-via-containers references and dependencies #79
Removing the ‘make buildprep’ from README.md. #78
OCPBUGS-1 : Jira integration test PR 2 #77 Updating README.md. #76
OCPBUGS-1 Jira integration test PR #75
Updating driver-toolkit images to be consistent with ART #73
Bumping KVC to the last available commit. #74
Full changelog
Updating egress-router-cni images to be consistent with ART #64
Updating egress-router-cni images to be consistent with ART #63
Bug 2034411 : Call ip6tables for v6 mode #60 Updating egress-router-cni images to be consistent with ART #59
Updating egress-router-cni images to be consistent with ART #56
Full changelog
OCPBUGS-24564 : Reduce metrics cardinality. #76 OCPBUGS-20833 : Bump x/net package to v0.18.0 #69 OCPBUGS-14120 : Register control plane machines to instance group #52 OCPBUGS-4504 : refactor restartPolicyToBool function #28 OCPBUGS-4499 : Set sync period for Machine controller #25 Updating ose-machine-api-provider-gcp images to be consistent with ART #19
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #17 update windows script handling #16
Update windows detection #15
Add windows machine support #14
Updating ose-machine-api-provider-gcp images to be consistent with ART #13
Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #12 Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #11 Bump machine-api-operator to 25e61c2 #10
Bump google.golang.org/api #9
Bug 2067836 : Bump prometheus/client_golang #7 Refactor provider status to use metav1.Condition #8
Full changelog
OCPBUGS-20718 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #47 Updating ose-gcp-pd-csi-driver images to be consistent with ART #29
UPSTREAM: <carry>: Remove .github files #28
STOR-862 : Rebase to v1.7.3 for OCP 4.12 #27 Updating ose-gcp-pd-csi-driver images to be consistent with ART #26
Updating ose-gcp-pd-csi-driver images to be consistent with ART #25
Bug 2072891 : Update to v1.5.1 #24 Updating ose-gcp-pd-csi-driver images to be consistent with ART #22
Full changelog
OCPBUGS-20807 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #89 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #82 OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #55 Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #53
Remove unused bindata from the operator #54
STOR-858 : Bump github.com/openshift/* and k8s.io/* #52 STOR-752 : Change the default StorageClass to the CSI one (GCE) #51 Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #50
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #45
Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #48 Bug 2077050 : OCP should default to pd-ssd disk type on GCP #47 Set fsGroupPolicy in CSIDriver #46
Full changelog
OCPBUGS-37282 : UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046 OCPBUGS-30454 : CVE 2024-24786 #1974 UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1940
Address CVE #13
OCPBUGS-15527 : Prevent partially filled HPA behaviors from crashing kube-controller-manager #1887 OCPBUGS-25815 : Fix device uncertain errors on reboot 4.12 #1833 OCPBUGS-25214 : legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1835 OCPBUGS-23568 : Update to kubernetes 1.25.16 #1807 OCPBUGS-23288 : UPSTREAM: 121881: Use golang library instead of mklink #1803 OCPBUGS-20113 : UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1747 openshift-hack: Fix sporadic 141 errors in build-rpms #1774
OCPBUGS-21435 : [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1760 OCPBUGS-18288 , OCPBUGS-19483 : Update to kubernetes 1.25.14 #1719 OCPBUGS-18768 : UPSTREAM: <carry>: Force using host go always and use host libriaries #1694 OCPBUGS-17188 : Update to Kubernetes 1.25.12 #1669 OCPBUGS-17159 : Increase service idle max timeout to 100 minutes #1662 OCPBUGS-8737 : UPSTREAM: <drop>: bump apiserver-library-go for scc fix #1619 OCPBUGS-15309 : Bump to k8s 1.25.11 #1615 OCPBUGS-14745 : [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600 OCPBUGS-13173 : Bump to k8s 1.25.10 #1582 OCPBUGS-7589 : UPSTREAM: <carry>: add default kubelet sysctls within rpm #1478 OCPBUGS-11166 : UPSTREAM: <carry>: Force using the go tooling from the system #1531 OCPBUGS-11166 : Bump to k8s 1.25.8 #1527 OCPBUGS-8705 : Fix mounted volume expansion tests #1503 OCPBUGS-7078 : Bump to k8s 1.25.7 #1496 OCPBUGS-5769 : scc admission - seccomp profiles fix #1471 OCPBUGS-5490 : remove in-tree volume limits test now that CSIMigration is GA #1449 OCPBUGS-4808 : Apply shared defaulters to CRD-based routes. #1441 OCPBUGS-4366 : Update to 1.25.4 #1434 OCPBUGS-3878 : UPSTREAM: <drop>: Bump openshift/api. #1425 OCPBUGS-3875 : UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. #1427 OCPBUGS-3780 : UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. #1422 OCPBUGS-3503 : UPSTREAM: <drop>: Bump library-go. #1423 Bug OCPBUGS-2927: Disable expansion in SC, if driver does not support it #1403
OCPBUGS-3503 : UPSTREAM: : Bump library-go. #1414 OCPBUGS-3094 : Tag AWS security groups at creation #1412 OCPBUGS-3071 : 4.12: revert: 1340: tag AWS security group at creation #1405 OCPBUGS-3117 : UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1407 OCPBUGS-2774 : UPSTREAM: 112807 Fix Load balancer services with xTP local #1400 UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones #1396
UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation #1340
UPSTREAM: 113135: Wait for pod not running or gone in storage tests #1394
Bump to k8s 1.25.2 #1380
Bug 2041317 : Fix replica calculation at start of HPA scaling policy period #1391 UPSTREAM: <carry>: allow annotating with a specific suite #1388
k8s 1.25.0 #1360
UPSTREAM: <carry>: Dockerfile: use centos:stream9 #1366
OCPBUGS-718 : UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1358 UPSTREAM: <carry>: optionally enable retry after until apiserver is ready #1346
UPSTREAM: 110639: endpointslices: node missing on Pod scenario #1359
UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess #1350
UPSTREAM: 110039: Add readinessProbe to aggregated api service test #1307
Bug 2118318 : UPSTREAM: 110939: don’t quota events.k8s.io events by default #1344 UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… #1349
UPSTREAM: <carry>: Skip session affinity timeout tests #1339
Bug 2117569 : UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1338 Add kubensenter to the openshift RPM #1327
UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods #1333
trt-393: add plugin name to caches not synchronized error #1330
Bug 2102383 : UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() #1315 Bug 2088606 : Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin #1247 Bug 2081194 : UPSTREAM: <carry>: update list of deprecated apis #1091 Bug 2082773 : Fix resizing of ephemeral volumes #1296 UPSTREAM: <carry>: Remove reserved CPUs from default set #1295
Bug 2094012 : UPSTREAM: 110652: fix: –chunk-size with selector returns missing result #1303 Bug 2063414 : UPSTREAM: 109441: kubelet: parseResolvConf: Handle “search .” #1283 Bug 2086519 : get SCC admission default securityContext.runAsNonRoot to true on positive UIDs #1290 Bug 2078778 : UPSTREAM: 110408: apiserver: printers should use int64 #1288 Bug 2089933 : Backport 110191 Re-enable Kubelet Pod Readiness Probes on Termination and Pod probes should be handled by pod worker #1285 Bug 2087685 : Worker Latency Profiles: Config node object validation for extreme profile transition #1287 Bug 2065749 : UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1229 Bug 2094954 : UPSTREAM: 110258: Fix pod eviction ip #1282 UPSTREAM: <carry>: provide unique reason for pod probe event during t… #1281
Bug 2086092 : UPSTREAM: 108284: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1261 Fixes probe readiness shutdowns #1269
Bug 2086092 : update kube to v1.24.0 #1252 Bug 2086519 : UPSTREAM: <carry>: e2e-framework: don’t autosync PodSecurity labels #1268 Bug 2062459 : Identify if there are multiple schedulers running #1251 Bug 2075621 : UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved bug #1243 Bug 1999325 : Backport 107821 and 107831 #1225 UPSTREAM: 109283: test/e2e/*: use restricted policy by default, default existing tests to privileged #1238
Bug 2051985 : UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic #1172 Bug 2066865 : Skip azure topology tests #1230 UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy #1227
Revert “UPSTREAM: <carry>: Unskip OCP SDN related tests” #1228
bump apiserver-library-go #1218
UPSTREAM: <carry>: update list of deprecated apis #1204
UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy #1226
Bug 1957668 : UPSTREAM: <carry>: use console-public config map for console redirect #1110 UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy #1212
Bug 2022507 : Backport 108366: OutofCpu Fixes #1199 Bug 1945329 : enable should drop INVALID conntrack entries test #897 Bug 2063938 : UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1215 Bug 2062459 : Generate event when cache update is failed #1210 UPSTREAM:<carry>:Unskip OCP SDN related tests #1201
Bug 2034958 : enable “Conntrack should be able to preserve UDP traffic when initial… #1197 UPSTREAM: 106454: SQUASH: test/e2e: let e2e tests specify pod security admiss… #1128
Bug 2040715 : UPSTREAM: 108284: fix: exclude non-ready nodes from azure load balancer #1190 UPSTREAM: <drop>: zero-diff to pick up tags for versions #1193
Bug 2040715 : upstream 108149: do not return early in the node informer when there is no change #1184 Bug 2040533 : UPSTREAM: <drop>: Ignore container notfound error while getPodstatuses #1176 Bug 2040533 : UPSTREAM: 107900: Pods that have terminated before starting should not block startup #1157 UPSTREAM: 107847: service REST: Call Decorator(old) on update path #1156
Bug 1979671 : UPSTREAM <carry>: Remove pod warning annotation when workload partitioning is disabled #977 Bug 2044824 : UPSTREAM: 107786: Ensure the execHostnameTest() compares hostnames #1153 Full changelog
OCPBUGS-41516 : set Konnectivity cipher suites #4283 MULTIARCH-3709 : PowerVS - Add reuse resource flags to e2e test #2994 MULTIARCH-3732 : PowerVS - Fix cluster deletion when existing resources passed #2993 MULTIARCH-3733 : Add dev flags in destroy cluster powervs command #2998 Updated secret permissions for openshift-route-controller-manager #2924
fix(hcco): Add HCP label to HCCO by default #2972
fix(ignition): Add HCP label to ignition-server by default #2949
OCPBUGS-16847 : use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855 [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803
OCPBUGS-16411 : fix deletion bug when hostedzone is already deleted #2835 Kas policy 4.12 #2826
Leader election config update. #2800
OCPBUGS-15614 : Check OwningIngressController also in Labels #2759 OCPBUGS-16086 : autoscaling balance similar groups #2806 HOSTEDCP-1060 : refactor ignition-server reconcilation and add ignition-server proxy #2749 OCPBUGS-14873 : Update vendored openshift API for 4.12 #2734 HOSTEDCP-1073 : enforce blocked rollout of HCP #2745 properly handle user CA bundle not existing #2711
OCPBUGS-15304 : [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695 OCPBUGS-14873 : Honor global ingress configuration LoadBalancer type on AWS #2678 OCPBUGS-14803 : Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667 [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512
OCPBUGS-14156 : Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614 OCPBUGS-14031 : Include default ingress CA in root CA bundle #2600 OCPBUGS-13626 : Sync proxy TrustedCA to guest cluster #2557 OCPBUGS-13639 : Cherry pick aws endpoint sg #2579 OCPBUGS-12787 : fix(hcco): Get OLM CatalogSource images from defined map #2485 ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials #2486
Configurable SRE MetricsSet #2545
OCPBUGS-13077 : Ensure ingress controllers are removed before load balancers #2515 OCPBUGS-11544 : Pass runAsUser to CNO so it can run its managed services with proper security context #2391 OCPBUGS-12845 : Delete kubeadmin secret when an idp is defined #2492 OCPBUGS-12738 : Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2473 OCPBUGS-12199 : remove ACL for aws bucket #2458 OCPBUGS-11607 : properly reconcile with user specified changes for in proxy configuration #2395 OCPBUGS-11726 : Update HostedCluster oauthCallbackURLTemplate #2410 e2e: Cleanup shared OIDC provider on SIGTERM #2449
HOSTEDCP-568 : Update Konnectiviy socks5 proxy for IBM exception #2406 OCPBUGS-10584 : Switch NTO metrics auth to certs generated by HCP controller #2293 OCPBUGS-11014 : Do not proxy when guest cluster resolution fails #2340 OCPBUGS-11654 : [release-4.12] Create new EC2 client for AWS identity provider health check #2403 OCPBUGS-10646 : Add storage operators perms. to watch HostedControlPlane #2306 HOSTEDCP-939 : [release-4.12] Setup shared OIDC provider for e2e clusters #2365 HOSTEDCP-806 : Fix ValidAWSKMSConfig condition #2362 OCPBUGS-11056 : fix external APIServer address selection based on endpointAccess #2350 OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351
SDA-8707 : No more specifying the scrape interval at servicemonitors & podmonitors level #2356 HOSTEDCP-900 : Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285 OCPBUGS-10504 : Deletion of the VPCEnpoint on conflicting service names #2310 HOSTEDCP-806 : [release-4.12] Validate etcd KMS config #2273 HOSTEDCP-801 : [release-4.12] Expose external DNS for private cluster endpoints #2314 HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297 OCPBUGS-10587 : Use appropriate serving certificate for OAuth #2295 OSD-15099 : Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274 Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334 : [release-4.12] Update the pull secret source for ignition payload #2268 Force controleplane upgrade always #2289
OCPBUGS-8370 : Fix cleanup of volumes on cluster deletion #2253 OCPBUGS-8241 : Add external DNS health condition / release-4.12 #2206 HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2263 Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826 : Customize DNS base domain prefix #2235 feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156 fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Merge main into release-4.12 branch #2053
Release 4.12 rebase latest #2047
Fix OpenID OAuth config parsing #2029
Fast foward release-4.12 to main #2003
OCPBUGS-5133 : Reinstate hosted cluster configuration propagation #1981 Remove CAPA command from deployment #1970
Fast forward release-4.12 to main #1964
Remove CAPI manager container command path #1969
v1beta1: add missing S3 publishing strategy type #1968
Fast forward ‘release-4.12’ branch to ‘main’ #1932
SDN-3508 : Add proxy env variables to CNO deployment #1845 MCO-258 : inplaceupgrader: handle multiple upgrade versions #1810 PowerVS Refactor docs - bug fixes #1825
Docs: add nodes for InPlace Upgrade NodePools #1805
network: Use non default ovn-k V4InternalSubnet at tenant #1783
Adds davidvossel as approver #1833
NodePool API: rename spec.tunedConfig to spec.tuningConfig #1802
reduce konnectivity-agent log verbosity #1828
add HC available duration metric #1829
aws: use gp3-csi storage class by default #1830
add note for public zone creation doc #1827
PowerVS: Bug fix on flags usage #1812
Clean up AWS endpointAccess + servicePublishingStrategy logic #1803
Ensure kubevirt-csi containers all have resource.Requests and PullPolicy set #1816
Add custom types for enum fields in PowerVSNodePoolPlatform #1809
Updated Agent provider docs #1814
Add KubeVirt Platform Owners #1817
Add comments to clarify aws endpoints controllers #1808
Fixing some doc typos and issues #1742
KubeVirt CSI Driver Integration #1733
feat: Added “Scale dataplane to zero” workflow to the documentation #1804
STOR-1040 : Render AWS CSI Driver credentials in the mgmt cluster #1751 bug: Fixes HOSTEDCP-528, OIDCConfigurationInvalidReason should be always present #1743
Extracts correct mco image based on managed cluster’s arch #1716
Fix image registry reconcile loop #1794
Add CAPI provider image override for PowerVS #1800
bug: HOSTEDCP-587 explain more in detail Public and PublicAndPrivate endpoint-access #1788
Enable NodePool controller to apply generated MachineConfigs #1729
Allow certain EndpointAccess transitions #1761
increase loop detector threshold to 10 #1801
Remove KubeletConfig & ContainerRuntimeConfig CRDs #1775
HCCO: inplace upgrade: do not reconcile bare upgrade pod #1799
Fix recreate issue on serviceID - MULTIARCH-2895 #1753
Add compute and memory args for powervs e2e #1797
test: e2e: exclude catalog pods from restart check #1798
Update Dockerfiles for consistency #1795
Make NodePool platform condition types generic #1792
Ensure existing DHCP server is in ACTIVE state #1784
Update Dockerfile with same labels as Dockerfile.control-plane #1791
Expose HC NodeSelector in the cli #1759
Add recording rule for NTO metric needed in telemetry #1763
Use separate image for route controller manager #1790
How to Migrate a HostedClusters among the same AWS Region #1780
Update index.md. #1535
Decompress and decode config if supported by current CPO #1758
update OLM catalogs to 4.11 #1746
Add image overrides #1785
Specify ca for gitlab oauth only when passed as input #1772
STOR-1053 : Add storage objects to guest cluster dump #1770 Add cloud.ibm.com into konnectivity cloudAPI #1741
Add fallback for mco flags #1781
Pass imagerefs to mco #1773
install: add flag to wait for HyperShift operator rollout #1760
gzip and base64-encode ignition configs #1671
Add separate deployment for openshift route controller manager #1756
Add release image validation for NodePools #1709
Fix cmd.Context() usage in PowerVS #1754
Refactor how-to docs #1740
Increase DHCP service polling interval #1739
Add Kubevirt Cloud Controller Manager #1725
Ensure generated junit.xml has a defined suite name #1712
Add cluster name prefix before secrets #1730
SDN-3283 : CNO: Add an environment variable with socks5-proxy image #1731 Revert “Make zone spread only apply within a given revision” #1744
remove alvaroaleman and ironcladlou from OWNERS #1745
Make zone spread only apply within a given revision #1724
Route LDAP IDPs in the oauth server through guest VPC #1680
Add missing rbac for authentication reader #1734
Add nodepool create cmd for PowerVS #1726
Add PowerVS OVN Kube routing config #1718
Add granular access for PowerVS using cloud credential operator and add storage operator creds #1612
Enable Node Tuning Operator in HyperShift #1651
Refactor PowerVS changes #1682
fix(oauth): Do not proxy IBM Cloud IAM endpoints #1722
Bug SDN-3459: Handle long OVN SBDB route hostname #1711
fix(pki): Allow BYO PKI for ignition server #1721
Set DNS server explicitly while creating DHCP #1720
Fix CLI panic when status.version is nil #1715
OVN SBDB: Use private router when possible #1689
Registry operator: Avoid restarts when token file changes #1713
HO: Ignore NoSuchBucket error when deleting OIDC docs #1714
Add a drain controller for inplace upgrades #1691
Reconcile default ingress controller on creation only #1710
NE-1043 : Move the DNS operator into the management cluster #1537 Add node controller to HCCO Manager #1702
Add recording rules for telemetry #1690
Destroy: Don’t fail if finalizer can not be added #1707
Upgrade AWS SDK #1701
Use kubeconfig port for worker haproxy #1708
Set right API group #1706
AWS infra destroy: Handle bucket not found during batch delete #1700
Cleanup etcd rule manifest in CVO #1699
Oauth: Fix hostname when using DNS indirection and no public router LB #1705
Fix clusters where apiserver is exposed through LB and DNS indirection is used #1696
Update external-dns image #1694
Move Cloud network config controller to the management cluster #1679
Allow OpenShiftSDN CNI for PowerVS platform #1693
Add CIDR checks to webhook on create #1688
Fix clusters that use LB expose strategy with a custom port #1683
Validate OCP release version and SDN on initial install #1686
Reconcile spec of clusterversion resource #1687
APIServer route expose strategy: Fix with private clusters #1685
remove external-dns provider variable from openshift template parameters #1684
E2E: Fix flakes due to inability of finding matching nodepools #1681
Enable cleaning up of hosted cluster cloud resources on destroy #1672
ClusterID and infraID should be immutable. #1660
Correctly manage infra status condition when there is no LB controller #1678
Fix Switch to library-go to compute audit profile audit policy #1677
Add IBMPowerVSCluster to status subresource set #1676
OAuth: do not reference paths for empty optional secrets or configmaps #1674
Honor the debug-deployments annotation #1673
Ignition server: Use common pki code #1657
Fix router reconciliation when apiserver is exposed through LB #1669
E2E: Consistently use Patch to avoid conflict failures #1664
Fix e2e powervs destroy opts #1650
Drop insecure port on router to save rules #1668
external-dns settings for operator install template rendering #1666
PowerVS: Add provider id fmt for capi deployment #1665
Registry operator: Set proxy vars #1663
A few simple kubebuilder validations. #1658
Ingress endpoint #1597
Add rbac so route-to-ingress controller can do its leader election #1662
Move image registry operator to control plane #1643
CI script to install hypershift from pre-release MCE catalog source #1648
Add a helper to create SA kubeconfigs #1654
HCCO: Use cpo manifests for references #1645
Increase the unittest timeout to 20m from the default 10m #1653
Add unittests for haproxy config generation #1652
Drop hypershift-operator util and consolidate with support #1647
HO: Fix haproxy to have apiserver external address for public clusters #1649
Self image lookup: Retry on empty string #1628
private aws cluster guide - update IAM policy example #1641
Introduce node selector support for HostedClusters #1592
Fix nil pointer dereference for hostedControlPlane.Spec.Etcd.Managed #1638
doc(aws): markdown formatting updates #1637
additional trust bundle into vm #1633
doc(how-to/aws/create-aws-multi-az): fix getting started path #1636
fix(ho): honor deprecated global config fields #1631
Add Handling Ingress to Agent docs #1635
E2E etcd tests: Always run on none platform #1629
Wait for LB even when hostname is specified #1632
Add tuning option of AccessModes for Kubevirt NodePool root volume #1583
Enforce aws cluster cloud provider tag in NodePool controller #1625
Add ovn-k specific collection commands #1604
set condition messsage when waiting for kas readiness #1627
CPO: Unittest and fix eventhandling of HCP controller #1605
Fix additionalTrustBundle with local ignition provider #1626
ensure optional mount always added to ibmcloud kms pod for appropriate container build #1621
fix(api): make HCP networking optional for backward compatibility #1624
Add flags for destroy cluster powervs command #1613
PowerVS: upgrade capi image #1618
Remove .status from serialized configuration on HCP #1617
stop clearing configMapRef and secretRef since it breaks reconciliation of existing production workload using these fields #1610
ensure 4.9 openshift clusters can be managed by hypershift #1608
ensure release image annotation set on control-plane-operator #1607
Use non-strict mode when parsing global config #1616
Rename PowerVS CCM public endpoint env variable #1611
Create kubeconfig: Respect namespace #1562
Add dual-stack support to HostedCluster #1533
fix(ho): detect capabilities on API resource availability #1600
Update Agent docs on setting hostname and disk #1606
Add HC condition message in non-error states #1602
Add min supported version check for isValidReleaseVersion #1591
Socks 5 proxy: Only use mgmt cluster for cloud apis for ingress operator #1601
Docs: develop-in-cluster.md minor fix #1603
Use non-default path for user CA certs #1593
Fix comments/docs in AWSRoleRefs #1588
Add e2e changes for PowerVS #1590
PowerVS: Add DNS record check in base-domain #1587
Sort deployments for Degraded condition check #1595
Add controller that installs UWM and configures it for telemetry #1584
Add latest version check and unit test isValidReleaseVersion #1582
Add control plane operator component template label to components missing it #1579
PowerVS: Add DNS Record and VPC LB deletion #1521
Add check for AWS ARNs #1581
TestOLM: Don’t hardcode to AWS #1574
E2E: Don’t retry destroy if it failed due to NoCredentialProviders #1572
Add label to supported versions configmap #1580
Add priority classes for autoscaler and mapprover #1578
add Degraded condition to HostedCluster #1569
Add configmap containing supported versions to hypershift namespace #1575
Destroy: Use patch for modifying finalizer to not get conflicts #1573
TestAutoscaling: Fix to work on Azure #1551
PowerVS Infra bug fix on DHCP error return and removed a debug log #1548
Drop unsued domain in ReconcilePrivateRouterDeployment signature #1556
Add link to CloudProviderConfig code #1555
install: add operator-only option for OCP metrics #1476
E2E: Stop retrying destroy if inputs are missing #1564
add Degraded condition to HCP #1560
E2E: Use zaptest logger for dumping and AWS/Azure destroy #1559
Azure: Make disk type configurable and default to SSD instead of HDD #1565
Align api/fixtures code platform wise #1558
Add field reporting of immutable errors. #1508
add label to all CPO managed deployments in the HCP #1554
Remove unused return value #1557
E2E: Use zaptest logger for cluster creation #1553
Add Progressing condition to HostedCluster #1546
Fix ManagedCAObserver racing with CPO #1547
Fail gracefully if s3 bucket is already deleted. #1552
Azure: Tolerate 404 when destroying infra #1545
Rename OpenshiftSDN to OpenShiftSDN #1549
Add rules for telemetry metrics #1544
Added changes for serviceID API Key to access resources #1529
HO: Add a reconciliation success condition #1527
Fix logging arguments to not be odd #1530
Add fallback set cache value from old token #1523
Ensure that we always create a tar archive of the dump. #1528
Oauth server: Route external traffic through guest cluster #1522
Fix typo in namespace #1526
Etcd backup/restore (manual process) #1239
Updating hypershift images to be consistent with ART #1525
invert conditions that are false in expected state #1520
feat(oauth): allow challenge override for OpenID #1513
Move TestReconcileDeprecatedGlobalConfig to proper file #1519
Run reconcileDeprecated* earlier #1518
Update IBM Cloud SDK packages & capiIBM image #1504
Align aws creds backward compatible #1516
E2E dump: Do not require platform opt-in for dump to work #1515
Add PlatformCredentialsFound condition to report missing platform creds #1512
kube-apiserver-proxy use privatelink for private clusters #1509
Move reconciliation #1234
PowerVS : CIS Domain nextUrl usage fixed #1505
Add ClusterVersionUpgradeable condition, upgrade block, and override annotation #1498
Set Recommended Leader Election Values #1465
Use Patch instead of Update to prevent error. #1499
Get rid of hostedapicache by using HCCO #1496
feat(cpo): Support disable profiling annotation #1481
powervs: Added inbound access rules for VPC security group to allow http & https #1491
Rename hypershift operator metrics #1492
nodepool controller: remove right condition type #1493
HO: Fix raw extension generation for hcp configuration #1487
Excempt build controller SA from PodSecurity admission #1488
Update controller-runtime to get fix for global log override bug #1485
docs: agent: AgentServiceConfig script used fixed version instead of latest #1484
Add PowerVS Ingress Operator Changes #1458
Improve user experience of HostedCluster configuration API #1463
Updated secret permissions to conform to kubernetes CIS benchmark #1477
The ValidateReleaseImage was returning an error stating it could not find the pull-secret and blocked HC #1472
Reduce HyperShift operator metrics cardinality #1467
docs: refactor agent documentation #1466
inplaceupgrader: switch to using payload MCO image #1459
Drop kas call in agent ReconcileCAPIInfraCR and fail if no ign #1469
Add ValidReleaseImage condition to HostedCluster #1296
Add missing control plane prometheus rules #1406
Use right conditions reason for inplace upgrade #1464
Ensure cache is set during token rotation before reconciling #1460
Bug 2089224 : Remove monitoring config reconciliation #1420 add allowed CIDR blocks to HostedCluster API #1429
nat gateway: check for invalid eip #1457
Add PowerVS Cloud Controller Manager #1422
Fix the private router to work on a 4.11 mgmt cluster #1453
E2E: Add TestNodepoolMachineconfigGetsRolledout #1339
e2e: notice FailedScheduling or Preempted events #1332
Trim docker-pullable:// prefix when reading imageID from container status #1449
Set snapshot-count on etcd to limit memory usage variability #1448
Add memory rss recording rule #1447
Manage ignition server from CPO #1446
Add recording rule for cpu requests #1445
Adjust memory requests to align with PerfScale recommendations #1444
Enable passing -run parameter in ci-test-e2e #1441
Add recording rule for component memory requests #1442
add api-server-address flags to kubevirt and agent cluster create #1440
CNO operands use private APIServer address when HCP is private #1433
Remove unused kubevirt specific e2e test #1436
Fix the e2e-kubevirt-gcp-ovn CI lane #1434
Increase MHC nodeStartupTimeout #1435
aws private link controller: improve error messages #1432
Use git commit as version in HyperShift binaries #1431
Scrape all KAS metrics inside guest cluster #1421
Nodepool: Insert the worker role label #1428
KCM: Set leader election args #1427
Tests: Enable junit #1411
Set autoscaler CAPI group explicitely #1425
Add local timeouts for e2e tests #1424
hack/publish-ocp.sh fix cut syntax #1417
KAS: Stop setting removed –enable-swagger-ui flag #1418
Added PowerVS Cluster Create & Destroy #1381
Ensure that the private router pod uses the HC’s pull secret #1413
Loopdetector: Give some more leeway #1412
adopt existing immutable selectors to prevent errors reconciling components from roks toolkit clusters #1403
Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler #1388
Allow nodepool deletion when hcluster is gone #1408
Operator image lookup: Use sha256 rather than tag #1303
e2e: increase budget to only catch extreme situations #1407
Change infrastructureAvailabilityPolicy default to single replica #1405
feat(cpo): adhere to upgrade order from kube version skew policy #1322
Make kubevirt compatible with generic e2e tests #1377
Add allowed principals to service endpoints #1402
Ignition server: Use https health check if possible #1392
Nodepool render: Avoid including a logline #1401
Replace router shard with private router in control plane namespace #1398
Add inplace upgrader controller to hcco #1382
Expose HostedCluster and NodePool metrics in HyperShift operator #1376
HAProxy ignition config: Use nodepool release image #1394
Change ignition server http code if token not found. #1399
AWS: Deploy Pod Identity Webhook #1351
Add docs section for goals and design invariants #1396
Add sane defaults for InfrastructureAvailabilityPolicy and ControllerAvailabilityPolicy #1395
Bump kube depedencies and controller-runtime to 1.24 level #1393
Delete endpoint connections before deleting endpoint services #1390
Add more resources to hypershift dump cmd #1389
test: adjust HO mutate budget #1385
e2e: Increase parallel test limit #1384
Update KubeVirt Doc to indicate RHCOS is no longer a required cli arg #1374
Tag endpoint services with the mgmt cluster infra ID #1380
fix Makefile #1375
Add IBMCloud PowerVS infra create & destroy #1280
Prevent update of a MachineDeployment after it is initially created #1373
Make the binaries contain the commit version #1324
Make CI master nodes schedulable for cnv VMs #1369
test: update API budget #1372
Update loopdetector to not get tripped by inplace upgrade #1370
add ci-test-e2e target to Makefile #1368
Add resource requests to cluster-api-provider-kubevirt container #1366
fix(cpo): Scope down secrets access for olm collect profiles cj #1349
Add image-content-sources option to create cluster CLI #1355
Add a sidecar to the KAS that tails the audit log #1308
Autodetect KubeVirt disk image using release payload #1352
Refactor e2e test common cleanup #1345
Upgrade test: Stop verifying the nodecount #1367
Set shutdown params to improve graceful shutdown #1365
Nodepool in-place upgrade: Reduce api requests #1358
Etcd: Keep etcd_server_leader_changes_seen_total metric #1363
Add hostedClusterAvailable check for in place upgrades #1340
move to ga apis for all components now that management clusters at minimum release boundary #1350
E2E: Stop hardcoding network type #1331
configure cipher suites to prevent using medium strength ssl ciphers #1357
fix the region parameter in app-sre templates #1356
Revise and simplify NodePool’s KubeVirt platform API #1314
fix panic due to race on hosted API cache start #1348
Change webhook to implement webhook.CustomValidator #1346
Add Metrics Set for Telemetry metrics #1294
Cancel context to kill watch guest cluster subroutines #1341
Add docs for versioning support #1343
Dump: Dump namespaces, rbac and SCCs of hosted cluster #1336
create infra aws: set minimum on private zone SOA records #1337
Enforce pull policy for all capi providers #1334
Add test for NodePools in place upgrades #1290
adjust CPO resource requests #1330
Fix webhook to allow apiserver port defaulting and add tests #1313
Add OAuthURL to HostedCluster status #1320
e2e: log the error when failing to connect to the guest KAS #1318
Export ign_server_payload_generation_seconds metric and add e2e budget #1316
Rename nodepool.spec.nodeCount to replicas #1205
E2E: Allow configuring a SSH key #1329
Reduce KubeVirt e2e test flakiness #1321
Omit MachineConfig and MachineConfigPool CRDs from release payload #1295
Retry NAT Gateway creation #1328
Add retries and debug output to journal dump #1327
Use apiserver host/port from InfraStatus in reconciling Kube API Server #1319
Ensure that everything uses imagePullPolicy IfNotPresent for resiliency #1304
Ignition server: Actually use workdir #1312
disable reconcile of registry config in IBMCloud deployments #1305
e2e: report elapsed time for each test step #1307
Use forked processes instead of pods to generate ignition payload #1214
Updating hypershift images to be consistent with ART #1288
Update KubeVirt platform to work with OVNKubernetes #1277
Azure: Add missing csi driver secret #1302
Add missing resource requests for Azure CAPI provider #1300
Allow running e2e tests for azure #1299
Sync KAS PSP configuration with what kas operator does #1292
feat(cpo): Disable PodSecurity for 4.10 #1287
Installer assets for CAPIBM used by PowerVS #1279
Use go 1.18 for CI builds #1244
Drop outdated TODO for machine configs #1285
Configure the CNO to proxy the apiserver for public clusters #1283
contrib: admission-tracer for API call tracing #1281
avoid no-op status updates to AWSEndpointServices #1276
inplace upgrade: add initial upgrade logic #1258
Begin using KubeVirt as the infrastructure platform instead of None #1282
Add cleanup manifest for existing CNO #1278
Introduce IBMPowerVS platform #1255
e2e: update HO budgets #1274
konnectivity ds: Tolerate all taints #1272
Add tests for network defaulting #1273
Use ‘–’ for flags in kms token minter container #1270
Default network to SDN if minor < 11 #1271
Konnektivity: Set proxy env vars #1267
Use OVNKubernetes as default network type #1268
e2e: fix early exit on destroy infra aws #1269
Move CNO into management cluster / add OVN to types #1253
e2e: add AWS cluster create test #1260
Set network status if empty #1266
exclude InfraID from immutability check #1264
e2e: Add a nodepool upgrade test #1257
Expose a service account signing key in the API #1259
destroy infra aws: delete network LBs and reduce dependency error noise #1263
add update validation logic to HostedCluster webhook #1262
reconcile oauth serving cert rbac to allow oauth proxies in the openshift-monitoring namespace to work #1256
Add validating webhook for HostedClusters #1241
ensure release image annotation added to deployment template metadata to enable proper detection in IBM Cloud deployment process #1251
Fix kubernetes.default for public clusters with proxy #1249
continue to allow support for specification of clusterAutoscalerImage… #1250
Make HyperShift operator compatible with previous CPOs without utilities #1245
AWS infra destroy, handle empty instanceIDs #1246
ensure imagePullPolicies are IfNotPresent for some deployments #1242
Disable PodSecurity admission in 4.11 as it breaks conformance #1243
Signal parsing config failure in a condition #1240
Enforce hostedcluster service route immutability constraints #1238
Create valid route names with long namespace names #1220
Add support to set up a http proxy for guest clusters #1236
Do not wait on capi clusterrolebinding delete #1237
Introduce logic to accommodate in place upgrades. #1227
Add node troubleshooting documentation #1232
Remove ValidAMI AWS NodePool condition when AMI is user-defined #1235
Full changelog
OCPBUGS-36063 : CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75 OCPBUGS-20583 : [IBM VPC] failed provisioning volume in proxy cluster #56 OCPBUGS-21206 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52 OCPBUGS-8451 : Rebase to v5.1.2 for OCP 4.12 #32 STOR-1060 : Update ibm-vpc-block-csi-driver to v5.0.0 #26 UPSTREAM: 99: Update golint to 1.50 #25
UPSTREAM: 98: Reformat code with go 1.19 again #24
UPSTREAM: 98: Reformat code with go 1.19 (#98) #23
UPSTREAM: <carry>: Remove .github files #21
STOR-867 : Update ibm-vpc-block-csi-driver to the latest release #18 OCPBUGS-416 : Add udev #17 Rebase: ibm-vpc-block-csi-driver v4.4.4 #14
Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART #13
Bug 2073522 : Update ibm-vpc-block-csi-driver to v4.2.0 #12 Bug 2042348 : Rebase to v4.1.3 for OCP 4.11 #11 Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART #10
Full changelog
OCPBUGS-36069 : CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124 OCPBUGS-20583 : [IBM VPC] failed provisioning volume in proxy cluster #79 OCPBUGS-21302 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #83 OCPBUGS-3464 : Update deployment files for snapshot support #46 OCPBUGS-2354 : Inject proxy settings and custom CA bundle into vpc-node-label-updater container #44 Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #43
STOR-858 : Bump github.com/openshift/* and k8s.io/* #42 Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #41
Bug 2047732 : [IBM]Volume is not deleted after destroy cluster #40 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #38 Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #39
Changes to fetch region from node #37
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #36
Bug 2066665 : [ibm-vpc-block] Unable to change default storage class #34 Bug 2067843 : Bump prometheus/client_golang to v1.11.1 #31 Disable topology tests until bz2035027 is fixed #30
Update CSIDriver instance #29
Bug 2053006 : Resource id fetch optimised #26 Bug 2052309 : IBMCloud: Add critical spec to ctlr #24 Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #21
Bug 2048824 : IBMCloud: Add critical spec to driver daemonset #22 Full changelog
OCPBUGS-21415 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #29 Updating ibm-vpc-node-label-updater images to be consistent with ART #15
STOR-867 : Update ibm-vpc-block-csi-driver to the latest release #14 Updating ibm-vpc-node-label-updater images to be consistent with ART #13
Rebase: ibm-vpc-node-label-updater v4.1.6 #11
Updating ibm-vpc-node-label-updater images to be consistent with ART #12
Bug 2073525 : Update vpc-node-label-updater to v4.1.2 #9 Updating ibm-vpc-node-label-updater images to be consistent with ART #10
Updating ibm-vpc-node-label-updater images to be consistent with ART #8
Full changelog
Revert “Set default messages & reconcile clusteroperator status conditions (#584) #586
Full changelog
OCPBUGS-15735 : Binary should be compiled on rhel9 #92 Updating ironic-rhcos-downloader images to be consistent with ART #83
OCPBUGS-478 : Install libguestfs-tools-c instead of libguestfs-tools #82 Updating ironic-rhcos-downloader images to be consistent with ART #79
Full changelog
OCPBUGS-14415 : Flush addresses on provisioning interface with global scope only #37 Updating ironic-static-ip-manager images to be consistent with ART #31
Bug 2054770 : Do case-insensitive comparison of MACs #29 Updating ironic-static-ip-manager images to be consistent with ART #28
Full changelog
OCPBUGS-21441 : upgrade golang.org/x/net to 0.17.0 to address CVE #91 OCPBUGS-20580 : limit number of simultaneous client requests #79 Updating ose-prometheus-adapter images to be consistent with ART #65
Bump openshift/k8s-prometheus-adapter to v0.10.0 #64
OWNERS: Add Joao and myself, and move former team members to emeritus #63
Updating ose-prometheus-adapter images to be consistent with ART #62
Updating ose-prometheus-adapter images to be consistent with ART #61
Updating ose-prometheus-adapter images to be consistent with ART #60
Full changelog
Updating openshift-enterprise-egress-router images to be consistent with ART #115
Updating ose-egress-http-proxy images to be consistent with ART #114
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126 : ipfailover: Autodetect the “ens3” NIC #111 Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188 : VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104 Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
Full changelog
OCPBUGS-20764 : bump x/net to v0.17.0 #103 OCPBUGS-4118 : cherry-pick, do not expose ingress path metric when service is nil #84 OCPBUGS-4112 : cherry-pick, autoscaling/v2beta2 HorizontalPodAutoscaler is deprecated in v1.23+ #83 Updating kube-state-metrics images to be consistent with ART #78
Bump openshift/kube-state-metrics to v2.6.0 #77
OWNERS: Add Joao and myself, and move former team members to emeritus #76
Updating kube-state-metrics images to be consistent with ART #75
Bug 2075091 : Bump to KSM 2.5.0 #74 Updating kube-state-metrics images to be consistent with ART #73
Bug 2075091 : internal/store: fix metrics slice length #71 Bug 2075091 : internal/store: fix potential panic in pod store #69 Bump openshift/kube-state-metrics to v2.4.2 #68
Bump openshift/kube-state-metrics to v2.4.1 #67
Updating kube-state-metrics images to be consistent with ART #66
Full changelog
Updating ose-libvirt-machine-controllers images to be consistent with ART #240
Updating ose-libvirt-machine-controllers images to be consistent with ART #239
Updating ose-libvirt-machine-controllers images to be consistent with ART #236
Bug 2018517 : fix the check that machine has been modified #235 Full changelog
OCPBUGS-43872 : install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305 OCPBUGS-32007 : Update x/net to v0.25.0 #1257 OCPBUGS-25303 : Update reference URL #1189 OCPBUGS-21501 : Bump golang.org/x/net to v0.18.0 #1176 OCPBUGS-10943 : Fix empty component version #1132 OCPBUGS-7882 : Block machine deletion if extra disks are attached #1120 OCPBUGS-8286 : Short circuit misfiring #1109 OCPBUGS-5413 : Append annotations from machine template spec to the node #1104 OCPBUGS-5117 : [release-4.12] Allow to use machine.openshift.io API in provider specs #1086 OCPBUGS-5417 : machine-api-termination-handler: run DaemonSet only on Linux #1105 Show warnings if provider specs have invalid GroupVersionKind #1018
Update envtest #1071
OCPCLOUD-1131 : Add DescribeInstanceTypes permission for AWS provider #1062 OCPBUGS-2151 : Don’t degrade when workers not expected #1074 Updating ose-machine-api-operator images to be consistent with ART #1073
Update default Azure image to use image galleries #1076
OCPBUGS-1274 : add tolerations to termination handler #1072 Restrict creating Power VS machine with negative processor and memory #1067
OCPBUGS-519 : update error message for disconnected installation validation #1068 Update dependencies to K8s 1.25 #1070
Only drain a single control plane machine at once #1066
Add tag and category id to the caching client log messages #1063
Bug 2101736 : Ignore managed fields during finalizer removal #1061 Ensure the phase transition metric only updates when the phase changes #1059
Release leader election lease when shutting down #1060
Tags/categories ids cache implementation #1057
OCPBUGS-268 : vSphere - enable steal time accounting #1056 Bug 2111972 : operator NS manifest: Set empty openshift.io/run-level #1053 Change the git command #1050
add a helper function to detect windows os #1055
Bug 2115308 : Ensure failed drains are subject to exponential backoff #1051 Bug 2087981 : Change “create” sequence with powering on the vm after clone #1047 update windows helper functions #1049
Bug 2110501 : Revert “Bug 2101880: operator NS manifest: Set empty openshift.io/run-level” #1045 Bug 2109258 : add more support for old delete annotation #1042 Bug 2101736 : allow to remove finalizers #1037 Bug 2107578 : Fix while setting default processor value for Power VS platform #1040 Bug 2104642 : fix the Machine validation webhook for nutanix providerSpec #1038 Bug 2104642 : Add a validation webhook for Nutanix MachineProviderConfig #1034 Bug 2097153 : change ListTags call to ListTagsForCategory #1027 Bug 1994820 : Degrade operator on cluster bootstrap if not all Machines are Running #1019 Migrate delete annotation to match upstream CAPI annotation #1024
add utility functions for windows powershell tags #1030
Bug 2101880 : operator NS manifest: Set empty openshift.io/run-level #1031 Add webhook validations for Azure boot diagnostics #1029
Update revendoring tool #1028
Bug 2082667 : Separate controller for the node draining #1023 Bug 2094196 : Added webhook support for PowerVS platform #998 Bug 2087039 : Bump go to 1.18 #1022 Bug 2087039 : Update dependencies to K8s 1.24 #1021 Updating ose-machine-api-operator images to be consistent with ART #1015
Bug 2059338 : Add template HW version detection during clone #1016 Bug 2083237 : Set vCenter client request timeout #1013 Skip validation if we just remove the finalizer #996
Don’t force a requeue after updating Status.Phase #1012
Remove unreleased AWS Placement Groups support #1009
Fix broken link to CVO run levels #991
AWS IMDSv2 machine spec validation #1008
Add DescribeRegions permission for aws controller #1007
Add Nutanix Platform to Machine API Operator #988
Add pd-balanced disks support for GCP #1006
Adding cluster api provider url(ibm) #1005
Refactor provider status to use metav1.Condition #1004
webhook: machine: add Azure Data Disks deletionPolicy validation #1003
Remove 30s wait before creating a machine #999
Make MAPO the default for OpenStack deployments #1000
Bug 2067852 : Bump prometheus/client_golang #1002 Machine webhook validation for Azure Ultra Disks #1001
Update govmomi to 0.27.4 #995
Bug 2060697 : Update openshift/api dependency #994 Fix MAPO image #993
Update OpenShift API to include placement groups #992
Replace broken image references #881
modify prometheus alerts to ignore pod #986
Updating ose-machine-api-operator images to be consistent with ART #983
Allow to remove ec2 placement groups #990
Validate AWS NetworkInterfaceType in webhook #989
Add IAM permissions required for AWS Placement Group enhancement #976
fix readme after migrating from cluster-api-provider-* #982
Full changelog
OCPBUGS-44325 : Panic seen in CI job for MCC pod #4689 OCPBUGS-38382 : [release-4.12] daemon/update: disable systemd unit before overwriting #4530 OCPBUGS-33665 : Run resolv-prepender entirely async #4364 OCPBUGS-30829 : Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4257 OCPBUGS-30823 : Introduce kubelet-dependencies.target and firstboot-osupdate.target #4268 OCPBUGS-30329 : set nodeStatusReportFrequency #4246 OCPBUGS-19659 : After dual-stack conversion reconcile IPFamilies #3936 OCPBUGS-29366 : release-4.12: fix nodeStatusUpdateFrequency #4180 OCPBUGS-29278 : crio: drop automatic image cleanup on upgrades #4178 OCPBUGS-14071 : Imageinspect takes type of error into account, drop podman inspect fallback #3717 OCPBUGS-21038 : update library-go and kube deps to latest version #4013 OCPBUGS-22719 : Backport logspam PRs #4008 OCPBUGS-21723 : keepalived/ingress: change healthcheck script #3985 OCPBUGS-18433 : Prevent NM from unsetting the hostname #3900 OCPBUGS-20509 : resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3969 OCPBUGS-19779 : daemon: always use podman cp to copy extensions container content #3944 OCPBUGS-19515 : The kubeconfig copied on to each node has 644 permissions #3931 OCPBUGS-17862 : Agent-based install process the container machine-config-controller will be oom #3875 OCPBUGS-17461 : The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3844 OCPBUGS-15570 : configure-ovs: support UUID in vlan.parent #3768 OCPBUGS-16754 : daemon: Don’t traverse /run/ostree/auth.json symlink #3818 OCPBUGS-11303 : Fix regex dot in coredns config file #3660 OCPBUGS-13757 : The MCD has a non-functional pivot command that should be removed #3710 OCPBUGS-7718 : Prevent possible split-brain scenario with keepalived unicast #3562 OCPBUGS-7945 : [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573 OCPBUGS-5935 : Wrap podman commands in a while loop #3495 OCPBUGS-7167 : Avoid ‘too restrictive’ SCC problems by being more explicit #3542 OCPBUGS-10505 : daemon: Drop duplicate --authfile used in run #3617 OCPBUGS-10372 : Remove hard requirement for the afterburn from early-running aws-related services #3613 OCPBUGS-9993 : Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608 OCPBUGS-7445 : configure-ovs: fix mtu-migration cleanup #3555 OCPBUGS-8261 : [release-4.12] backport cleanupDuplicateMC #3578 OCPBUGS-6943 : Improvements for configure-ovs.sh #3528 OCPBUGS-6045 : There are not enough logs in case “oc extract” is stuck in mco first boot #3503 OCPBUGS-6973 : configure-ovs: optionally generate configuration in /run #3532 OCPBUGS-6779 : baremetal: clean state generated by NM when run by dracut #3521 OCPBUGS-7241 : controller: default overwrite to true for files #3546 OCPBUGS-6997 : Fix 4.12 art images #3535 OCPBUGS-6805 : Only check image type if we are sure there is work that needs to be done #3526 OCPBUGS-5999 : 4.12 - remove goutils from dependency tree #3496 OCPBUGS-6179 : controller: don’t render new MC until base MCs update #3506 OCPBUGS-5743 : Mount /run/nodeip-configuration into keepalived containers #3479 OCPBUGS-5384 : daemon: Explicitly pull image before running #3475 OCPBUGS-3311 : [alicloud] provider ID not being set for kubelet #3457 OCPBUGS-4805 : Do not allow empty system reserved values #3453 OCPBUGS-4667 : vsphere: check that /etc/hostname is not empty #3452 OCPBUGS-4091 : NM resolv prepender: correct permissions for systemd resolved config #3442 OCPBUGS-4091 : NM resolve prepender: remove extra quotes in OKD flow #3433 OCPBUGS-3955 : daemon: gate done state on uncordon completion #3425 OCPBUGS-3750 : daemon: Stop setting I/O scheduler to bfq #3417 OCPBUGS-3874 : Don’t make https call to http endpoint #3420 OCPBUGS-3504 : On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3410 OCPBUGS-3650 : Revert “Substitute skopeo inspect for imageInspect/podman” #3414 OCPBUGS-3001 : Substitute skopeo inspect for imageInspect/podman, drop podman inspect fallback #3396 Force string format when logging rpm-ostree status #3393
controller: Don’t allow creating the force file via MachineConfig #3391
Bug 2034883 : Sync controllerconfig anyway if daemon sync fails #3388 Fix machine-config-operator logspam when extensions container is not present #3387
OCPBUGS-2757 : Reconcile successfully if already booted into target #3383 OCPBUGS-1257 : Have keepalived check for haproxy status for API VIP #3339 daemon: Only try to apply layered changes if BaseOSExtensionsContainerImage is not empty #3382
OCPBUGS-89 : configure-ovs: auto-connect ovs-if-phys0 with br-ex #3312 Bug 2107090 : Machine config server hangs on handling large number of requests in parallel #3262 OCPBUGS-2079 : Add ephemeral storage to kubelet system reserved args #3375 MCO-400 : helpers: Do synchronize condition if message changes #3369 OCPBUGS-2197 : update: Set proxy for inplace container update too #3377 OCPBUGS-2197 : OCPBUGS-2122: update: Inject proxy data for firstboot #3370 OCPBUGS-2269 : Upgrade failures and MCDPivotError Alert Firing on GCP realtime kernel #3373 daemon: Temporarily copy auth file with more open perms on SCOS too #3372
: Add missing bits for dual-stack ingress VIPs #3341
Jira OCPBUGS-1503: configure-ovs.sh: Do not fail bond with invalid slave device names #3345
MCO-396 : daemon: FCOS workaround, plus SELinux workaround #3358 Switch to https://github.com/coreos/rpmostree-client-go #3302
RFE-2962 : configure ovs should use node-ip-hint set by nodeip-configuration #3362 MCO-371 : metrics: aggregate os_image_url_override metric to avoid unbounded cardinality #3363 Rename KUBELET_NODEIP_HINT to just NODEIP_HINT #3353
Revert “RFE-2962: configure ovs should use node-ip-hint set by nodeip-configuration service” #3360
Bug 2056387 : fix alibaba kubelet node name unit #3338 Dockerfile: Remove SCOS extensions image references #3356
bootstrap: Add CLI arguments for new format oscontainer #3354
RFE-2962 : configure ovs should use node-ip-hint set by nodeip-configuration service #3233 Add cgroupv2 configuration support in MCO #3349
MCO-289 : Teach the MCO to use new format image #3317 MCO-371 : metrics: Add metric for OS image override #3343 OCPBUGS-1616 : Revert “Merge pull request #3311 from sairameshv/cgroupv2” #3348 OCPNODE-1146 Add cgroup confiuration support in MCO #3311
Bump openshift/api #3336
Dual stack vips #3269
TRT-540 : Add privileged label to infra namespaces #3328 update to release.openshift.io/feature-set to match OCP 4.12 #3329
added @engelmi, @eslutsky, @Darth-Mera to ovirt-approvers #3332
OCPBUGS-825 : Provide a reason if operator is unavailable #3324 MCO-256 : hypershift: add disruptionless updates to MCD #3320 OCPBUGS-224 : Make sure there is a search domain in resolv.conf #3306 Hypershift: remove error message on return #3326
daemon: Drop mock node updater client #3325
OCPBUGS-631 : Pull container image as a separate step #3318 Add kubens.service, drop-ins, and kubensenter prefix to kubelet.service #3274
Add RuntimeDefault to ctrcfg #3295
daemon: Use just one NodeUpdaterClient instance #3304
vendor: Bump containers/image #3303
OKD: Add build args for FCOS and SCOS #3294
Bug 2107113 : Fix .ssh directory not owned by core when created by Machine Config D… #3250 fixes config decompression lint issue #3301
Round off SYSTEM_RESERVED_MEMORY if value is in decimal #3299
Remove onPremPlatformKeepalivedEnableUnicast function #3174
MCD: Add support for RHCOS9 and SCOS9 #3179
Bug-2051533: Adding day2 remote worker node requires manually approving CSRs #3276
Decompress and decode Ignition configs from ConfigMap #3280
Bug 2111817 : daemon: Add a workaround for bug 2111817 #3291 Don’t reference rhel-coreos-8-extensions yet #3290
Accept new image format, consume in controllerconfig, but stop there #3286
Allow overriding OSImageURL with a layered image #3272
daemon: drop systemctl stop kubelet during node reboot #2509
Bug 2105003 : on-prem: improvements on resolv-prepender #3271 Fix typo #3279
Update library-go to set OpenStack provider to external #3270
add control-plane label #3273
Prep patches for bumping openshift/client-go #3251
Update approvers and reviewers list with current active members #3266
ctrcfg controller remove cleanupmc() #3149
Bug 2109963 : Master node in SchedulingDisabled after upgrade from 4.10.24 -> 4.11.0-rc.4 #3264 daemon: Drop tuneableFCOSArgsAllowlist #3248
daemon: Drop workarounds for rpm-ostree bugs #3239
Bug 2104619 : Remove rollback deployment #3243 on-prem: render-config-coredns from /var/run/NetworkManager/resolv.conf #3237
Bug 2101157 : configure-ovs: fix handling of connection names with spaces and checking the connection name suffix #3242 Bug 2104503 : Updating ose-machine-config-operator images to be consistent with ART #3228 Bug 2103786 : drain controller: don’t skip the MCC pod drain #3212 Bug 2102004 : pkg/controller/common/helpers: Explicitly set mode 0644 #3226 Bug 2099945 : configure-ovs: clone inactive autoconnect slaves #3203 Bug 2101157 : configure-ovs: fix handling of connection names with spaces and checking the connection name suffix #3214 Bug 2097785 : Send out OSUpdateStaged event directly #3189 Bug 2101880 : NS manifest: Set empty openshift.io/run-level #3217 Update block payload test with vendored runtime-utils #3148
Bug 2099664 : daemon: initialize nodewriter before login monitor #3211 Bug 2096413 : configure-ovs: set mac only for non fail_over_mac bonds #3202 README: Link to the product documentation for example MachineConfigs #3150
Bug 1817075 : MCC & MCO don’t free leader leases during shut down -> 10 minutes of leader election timeouts #3185 Bug 2092442 : drain_controller: slow down retries for failing nodes #3178 Bug 2096496 : controller: de-couple FIPS and realtime detection #3200 Bug 2096413 : configure-ovs: improve handling of static ip and mac address configuration #3190 Bug 2005694 : Removing proxy object takes up to 10 minutes for the changes to propagate to the MCO #3166 Bug 2090794 : drain controller: continue retry after 1h timeout #3167 Bug 2092003 : Fixup of URL for AWS unit/file to compute instance provider-id #3170 Bug 2089775 : Fix regexp in keepalived script chk_default_ingress.sh #3156 Bug 2087687 : MCO does not generate event when user applies Default -> LowUpdateSlowReaction WorkerLatencyProfile #3163 Updating openshift-proxy-pull-test images to be consistent with ART #2935
Bug 2090358 : Move drain log message to when drain starts #3168 Bug 2089687 : Update alert message for drain failure #3169 Bug 2045559 : Increase keepalived API check fall value to 3 #3158 Bug 2090436 : It takes 30min-60min to update the machine count in custom MachineConfigPools (MCPs) when a node is removed from the pool #3165 Bug 2091730 : create openshift-monitoring token in e2e #3172 Revert “Merge pull request #3162 from damdo/BZ2084450-2” #3175
Bug 2084450 : Add unit/file for AWS to compute instance provider-id and pass it to the kubelet #3162 Bug 1948551 : apiserver-watcher should run in a privileged namespace #3107 Bug 2012969 : emit kube events for skipped and upgraded OSes #3153 Bug 2086728 : Move node draining to controller. Remove MCD privs #3135 Bug 2078866 : configure-ovs: avoid restarting NetworkManager #3120 Bug 2086728 : Improves Config Drift Monitor e2e tests #3146 Bug 2056442 : Bug fix for node drain caused by ICSP objects #3144 Allow blocking payload reg if it has mirrors configured #2819
daemon: Have nodeWriter maintain ref to lister and node name #3143
manifests: Lower daemon RBAC permissions on machineconfig objects #3140
RFE-2703 : add prometheus rules for master memory usage #3124 [low priority] test/helpers: fix typo hardcoded pool #3061
Use library-go resourcemerge helper functions #3078
Bug 2076355 : fix MCNameSuffix when kcfg ctrrcfg after bootstrap config #3093 OWNERS: remove mkenigs, add raisaat #3139
removed the workerlatencyprofile status related code #3129
Bug 2080267 : [vsphere] remove warning encountered on vSphere UPI cluster without API VIP #3132 colin’s small patches rollup #3108
Move Ignition file generation to controller/common, fix Compression #3128
Bug 2081119 : drop doc overlaysize default #3127 Bug 2076521 : mcc: update node sort to account for matching zones #3125 daemon: Validate kernel arguments #3105
Bug 2078945 : Ensure only one apiserver-watcher process is active on a node. #3106 Do not check for status of other operators for node config #3111
Bug 2072040 : Avoid NM managing patch port between br-int and br-ex #3059 nodecontroller: 3 logging patches #3104
kcfg controller remove cleanupmc #3096
Bug 2076975 : OVN Kubernetes configure-ovs-network set static if conversion metric #3100 daemon: Add some logging for state #3102
workerlatency profiles - updating the kubelet configuration based on the nodes.config.openshift.io resource #3015
Bug 2066605 : [on-prem] make Corefile api matching stricter #3033 Kubelet: apply default podPidsLimit #3085
Bug 2073021 : firstboot: Retry on failure #3070 Revise KubeVirt platform for hypershift usage #3084
Deprecate the use of pkg/errors #2868
Bug 2074613 : templates: Don’t use :z with podman on system directories #3079 Bug 2035005 : Move removeUpdateInProgressTaint functionality to mcc #3064 [low priority] kubelet controller: rm unused userDefinedSystemReserved #3054
mcc/node controller: order node updates by zone #3009
[low priority] update_test: remove redundant types #3082
updateKernelArgs: pass kargs instead of MCs #3055
daemon: add desiredConfigMap mode for Hypershift #3068
daemon: add a comment explaining CoreOSDaemon #3080
adds zacks hack scripts #2953
Bug 2069740 : Avoid kubernetes node port range #3044 Update github.com/containers/image #2695
Render Nutanix cloud provider as blank. #3051
Create MCONamespace constant #3025
Bug 2055433 : configure-ovs: set networking on before restarting NetworkManager #3006 Bug 1949827 : Add KUBELET_NODEIP_HINT to nodeip-configuration #2888 Bug 2058030 : configure-ovs: move dhcp config from br-ex to ovs-if-br-ex #3024 start.go: rm orphaned err check #3042
Bug 2067857 : prometheus/client_golang v1.11.0 -> v1.12.1 #3038 mcd: Remove redundant MkdirAll call in update.go #2895
Remove runtime request timeout restriction #3026
Bug 2068613 : ClusterRoleUpdated/ClusterRoleBindingUpdated Spamming Event Logs #3040 Bug 2057160 : configure-ovs.sh: Provide store hint for default route interface #2971 Move log statement to UpdateTuningArgs #3032
build-sys: Default to make binaries #3035
e2e: Use /proc/cmdline instead of rpm-ostree kargs #3034
Fix description typo in osImageURL CRD parameter #3029
Add Nutanix Platform to Machine Config Operator #2942
bootstrap_test.go: remove unused constants #3023
Make our resourcemerge fork update a container’s Resources.Requests, un-revert #2802 #3028
Revert “Send alert when MCO can’t safely apply updated Kubelet CA on nodes in paused pool” #3027
Send alert when MCO can’t safely apply updated Kubelet CA on nodes in paused pool #2802
server/api_test: Adjust expected error message for Go 1.18 #3019
Enable unicast keepalived for all on-prem platforms #3016
templates: Clean out filesystem properties #2894
Bug 2063324 : Ensure directories are created with usable permission bits #3011 enhance MCO test library #3000
Bump(openshift/api): to get CSI changes #3010
daemon: get the apiserver url from the kubelet’s kubeconfig #2978
Update vendored Ignition to v2.13 #2996
daemon.go/update.go: various cleanup surrounding OS updates #2973
Remove unused etcd images #3001
daemon: bootimage and ignition logging #2994
configure-ovs: reload NM only when necessary #2992
Add --templates flag to MCC bootstrap command #2995
Preparatory patches for bumping fcct -> butane #2980
Bug 2060133 : Explicitly set keyfile as the default plugin #2984 Use afterburn to collect instance metadata in order to populate nodename #2988
Remove bindata.go #2983
Add new extension for kerberos #2979
Bug 2048352 : ovn-kubernetes: Fixed ofport_request for physical ports #2941 Bug 2050466 : Not allow empty string in icsp&image CR #2969 Bug 2058626 : Revert “Bump(openshift/api): to get CSI changes” #2968 Bump(openshift/api): to get CSI changes #2949
Bug 2041814 : do not generate new KubeletConfigKey for the first kubel… #2936 OpenStack: set transient hostname in afterburn-hostname #2945
Bug 1929160 : Add NetworkManager reload to resolv-prepender #2488 test/helpers: use RetryOnConflict for node writes #2921
updates docs for config drift detection #2872
templates: Change default container-runtime config to enable all CRI-O metrics #2911
Revert “Remove sysctl-inotify.conf.yaml”
#2944
Remove sysctl-inotify.conf.yaml #2909
Bug 2047445 : Use ip command to check for ipv6 addresses #2934 Add Christoph as a baremetal owner #2920
docs: Update links from “Optimized Updates” to “Rebootless Updates” #2913
Full changelog
OCPBUGS-54173 : Change rhcos release browser url #61 Updating ose-machine-os-images images to be consistent with ART #20
OCPBUGS-884 : Update rhcos release browser url #21 Bug 2090017 : Get rid of lookaside cache in OCP build #15 Revert .ci-operator.yaml #16
Updating ose-machine-os-images images to be consistent with ART #11
Bug 2075024 : Remove destination coreos if it exists #13 uncompress arm64 vmlinuz for pxe booting #12
Full changelog
OCPBUGS-21330 : Update go.mod for CVE-2023-39325 [Release-4.12] #73 Updating ose-multus-admission-controller images to be consistent with ART #61
OCPBUGS-10506 : Client golang [backport 4.12] #59 SDN-3515 : Add the missing handler for tls metrics #52 SDN-3515 : Add an option to serve the metrics over HTTPS #51 Updating ose-multus-admission-controller images to be consistent with ART #50
Allows the optional use of a kubeconfig if the OS env var is set #49
Skip to add fieldSelector in case of empty namespace #48
Add flag for Ignore namespaces #46
Updating ose-multus-admission-controller images to be consistent with ART #45
Updating ose-multus-admission-controller images to be consistent with ART #44
Updating ose-multus-admission-controller images to be consistent with ART #42
Full changelog
OCPBUGS-21420 : Update go.mod for CVE-2023-39325 (#36) #36 OCPBUGS-977 : Sync k8snetworkplumbingwg/multi-networkpolicy-iptables 2022_10 (#20) #20 Updating multus-networkpolicy images to be consistent with ART (#19) #19
Upstream rebase (#18) #18
Updating multus-networkpolicy images to be consistent with ART (#17) #17
Updating multus-networkpolicy images to be consistent with ART (#16) #16
Updating multus-networkpolicy images to be consistent with ART (#15) #15
Full changelog
Updating ose-multus-route-override-cni images to be consistent with ART #27
Updating ose-multus-route-override-cni images to be consistent with ART #25
Updating ose-multus-route-override-cni images to be consistent with ART #21
Full changelog
OCPBUGS-48086 : Update owners #477 OCPBUGS-24523 : [release-4.12] Add csi-proxy logs collection in must-gather for Windows nodes #394 OCPBUGS-4250 : [release-4.12] backport PodNetworkConnectivityCheck gather script #334 #334 Updating ose-must-gather images to be consistent with ART #330
Bug 2000552 : Add apiservices logs gathering by default #332 OCPBUGS-1810 : fix ingress node firewall script permission #329 Add ingress node firewall must-gather collection script #328
Updating ose-must-gather images to be consistent with ART #320
Bug 2103283 : Add timeout to oc cp command to fix must-gather delays when routers are terminating #317 Stop collecting Docker logs on Windows instances #315
Bug 2097346 : Updates how gether_monitoring obtains SA token #313 Bug 2091658 : Improve the sriov gather script #305 Bug 2090730 : Adds collection of Multus log files #306 Bug 2023295 : fix getting deployment name #303 Bug 1999529 : Filter disabled resources in inspection to proceed others #296 fix gather_insights collection #301
Bug 2023295 : Add networking resources #300 Add SR-IOV gather script #297
gather_profiling_node: correctly manage NotReady Nodes #299
Add new metallb crds to the gather script #295
add capability for oauth-server audit logging #265
Simplify CRD collection #293
Bug 2062355 : Collect NMState resources when operator is installed #292 List the pods by label app=etcd to only list etcd pods #289
WINC-708 : Collect containerd logs on Windows instances #290 Bug 2054319 : Fix the namespace extract filter #286 RUNNING_ETCD_POD must not be a quorum pod for must-gather #276
collection-scripts: allow collection of CRI-O profiling data #285
Collect prometheus target details #277
Updating ose-must-gather images to be consistent with ART #281
Add script to collect kubelet profiling data #273
Full changelog
OCPBUGS-13836 : Ignore missing links during delete command #53 Updating ose-network-interface-bond-cni images to be consistent with ART #37
ds merges: mac duplicates #40
Add mtu verification for nics that are not sriov (#40) #38
ds merges: github ci #33
Updating ose-network-interface-bond-cni images to be consistent with ART #32
ds merges: IPAM fix, tests, bond interface name fix #31
Updating ose-network-interface-bond-cni images to be consistent with ART #30
Full changelog
Added METRIC_TEST_IMAGE var (#92) #92
Update the k8s dependencies to 1.25.15 (#84) #84
Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Remove e2e tests that consistently fail in 4.12 (#74) #74
Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Adjusted test ns for the new ocp security model (#61) #61
Updating ose-network-metrics-daemon images to be consistent with ART (#59) #59
Updating ose-network-metrics-daemon images to be consistent with ART (#46) #46
Updated prometheus client_golang version to v1.11.1 (#48) #48
Fix field selector (#49) #49
Full changelog
OCPBUGS-1831 : Improve error propagation #70 Updating ose-network-tools images to be consistent with ART #71
Minor fixed found during demo preparation #68
Add pod-run-netns-command script to run command from network-tools #67
Implement new scripts to interact with ovn cluster #66
Migrate existing scripts to network-tools #65
Rework network-tools to #64
update owners #62
Updating ose-network-tools images to be consistent with ART #63
Bug 2043094 : Add ovn clean conntrack functionality #55 Updating ose-network-tools images to be consistent with ART #54
Add docs for invoking ovnkube-trace #56
Full changelog
Update logo #245
fix json examples for –openshift-delegate-urls #203
Use resourceName in Openshift SAR rule #243
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #241
Full changelog
OCPBUGS-27478 : bump osin deps #144 OCPBUGS-13906 : don’t log request query and fragment on failed authn request #129 OCPBUGS-12757 : bump lib-go for group cache fix, kube 1.24->1.25 #127 Updating oauth-server images to be consistent with ART #109
Bump library-go to b2073c41366aae78868b24e86d99021b79d754cb #112
fix linter findings #98
Bug 2086505 : Updating oauth-server images to be consistent with ART #108 Bug 2086465 : External OAuth: create audit logs for auth events #103 AUTH-100 : Add request header authn auditing #106 Update external dependencies #105
osin: Import from the new openshift module path #104
AUTH-66 : turn on audit on oauth-server with PW-based flow #92 Full changelog
OCPBUGS-32447 : ose-openshift-apiserver-container: golang: net/http, x… #481 : OCPBUGS-21429: Enable HTTP/2 CVE mitigation #399
OCPBUGS-8717 : Clear metadata.namespace on projects before write. #358 OCPBUGS-4339 : fix printer panic #335 IR-259 : changing image stream importMode increments its generation #329 IR-258 : ImageStreamImport manifest list support #290 bump to kube 1.25.2 #320
OCPBUGS-2803 : Revert “projects: add rw mutex to auth cache” #326 Perform route host defaulting and update authz using v1 types. #321
Drop AllocateRouterShard from hostname allocation interface. #322
Use route/v1 types for route warnings. #317
Remove k8s.io/kubernetes deps from route validation/defaulting. #319
Condense the route host allocator abstraction. #313
Move route host assignment code out of the route REST strategy. #315
Make route validation operate on v1 types. #312
make api team approver #316
Remove use of %w formatting directive from t.Errorf call. #293
add retry on imagestreamtag update #304
Add coreydaley as reviewer/approver for pkg/build #294
Stop unnecessary project auth cache invalidations. #295
Bug 2089402 : Validate Image labels correctly #292 Use github.com/openshift/runtime-utils/pkg/registries #205
NE-882 : Allow route subdomains to be omitted #254 Bug 2041133 : Bump openshift/api to 271bd7e1834c62853f1646b1bcb29aa4ec79d7c1 #286 Bug 2049234 : Fix importing images that have dots in their namespace #279 Bug 2047335 : fix panic from printer #275 Bug 2047335 : fix panic from printer #272 projects: add rw mutex to auth cache #267
Full changelog
OCPBUGS-49644 : Add new team members to the OWNERS file #364 OCPBUGS-41953 : Add adambkaplan as approver #336 Updating ose-openshift-controller-manager images to be consistent with ART #241
OCPBUGS-978 : gracefully release leases in OCM #239 template namespace processing #242
bump to kube 1.25.2 #244
Remove route controllers #240
remove route controllers from OCM process (openshift-controller-manager start) #238
Updating ose-openshift-controller-manager images to be consistent with ART #236
Bug 2117235 : separate route controllers to a new command #234 Bug 2116715 : remove GenericResourceInformer code because it is not used anymore #235 BUILD-417 : Rebase k8s 1.24 #226 Bug 2110617 : Split route controller #230 BUILD-433 : Run builds in user namespaces without seccomp if BUILD_PRIVILEGED=false #173 Add user coreydaley as an approver #224
NE-860 : ingress-to-route: add support for destinationCACertificate #218 Image trigger handler: Include the object name on error #221
Bug 2075584 : Bubble actual error message up to the build #220 Bug 2067868 : Update prometheus client_golang from 1.11.0 => 1.11.1 #219 Accept stop signal #215
Full changelog
OCPBUGS-20706 : bump x/net to v0.17.0 #106 Updating openshift-state-metrics images to be consistent with ART #91
OWNERS: Add myself, and move former team members to emeritus #90
Updating openshift-state-metrics images to be consistent with ART #89
Updating openshift-state-metrics images to be consistent with ART #88
Updates OWNERS file #86
Bug 2067783 : Bump client_golang to v1.12.1 #85 Use service CA beta annotation #84
Updating openshift-state-metrics images to be consistent with ART #81
Adding the right build comment as per go 1.17 #82
Full changelog
OCPBUGS-21557 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #137 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #130 Bug OCPBUGS-3774: Add SecretHashAnnotation to node service #98
OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #94 Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #93
STOR-858 : Bump github.com/openshift/* and k8s.io/* #92 Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #90
Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #88 Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy #85 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #84 Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #83
Bug 2065597 : Add support for dynamic, user-managed config #78 Mark CSI StorageClass as the default one #80
Add OpenStack team to approvers #81
Bug 2074292 : Address CVE-2022-27191 #79 Bug 2067869 : Address CVE-2022-21698 #77 Remove Ephemeral mode from the CSI driver #76
Bug 2061732 : Fail gracefully on failure to populate cloud info #74 Set fsGroupPolicy in CSIDriver #75
Bump gophercloud #73
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #68
Full changelog
Bug OCPBUGS-19770: Set controller’s SyncPeriod to 1 hour #86
OCPBUGS-10607 : Use TenantID if ProjectID is empty #66 OCPBUGS-10603 : machineset_controller: Stop caching clouds credentials #65 OCPBUGS-7155 : Address CVE-2022-41717 #55 Updating ose-machine-api-provider-openstack images to be consistent with ART #47
Depend on CAPO v0.6.3 #45
gofmt with Go v1.19 #48
Update dependencies #44
Updating ose-machine-api-provider-openstack images to be consistent with ART #43
Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #42 Bug 2067844 : Update dependencies to K8s 1.24, go 1.18 #41 Updating ose-machine-api-provider-openstack images to be consistent with ART #40
Bump machine-api-operator to 25e61c2 #39
Update cluster-api-provider-openstack to v0.6 #38
Add Profile and Trunks to Ports and Networks #35
Bug 2054701 : Convert Machines directly to InstanceSpec #33 Bug 2070181 : Add support for ServerGroupName #34 Add OpenShift CAPO default tags #28
Bug 2067870 : Address CVE-2022-21698 #32 Upgrade external dependencies #31
Depend on the downstream CAPO #30
Bug 2046133 : Set proxy settings on the provider client #27 Bug 2036594 : Refactor MAPO to use a reconcile function for update and create #26 Bug 2043672 : Support root volumes #23 Updating ose-machine-api-provider-openstack images to be consistent with ART #22
shiftstack: Update OWNERS #21
Update Dockerfile to 4.10 #9
Full changelog
OCPBUGS-20780 : deps: Upgrade golang.org/x/net to v0.17.0 #277 OCPBUGS-2508 : Ensure network defs without subnet follow noAllowedAddressPairs #247 Updating ose-openstack-machine-controllers images to be consistent with ART #244
gofmt with Go v1.19 #246
OCPBUGS-1765 : Apply noAllowedAddressPairs on intended subnets only #242 Updating ose-openstack-machine-controllers images to be consistent with ART #239
Updating ose-openstack-machine-controllers images to be consistent with ART #237
Bug 2073398 : Fix InstanceCreate port & trunk cleanup #232 Bug 2067870 : Address CVE-2022-21698 #224 hack/e2e: cleanup tmp dir #221
Add target to run e2e tests #220
Bug 2033862 : Ensure subnets belong to the queried network #218 Updating ose-openstack-machine-controllers images to be consistent with ART #217
shiftstack: Update OWNERS #215
Full changelog
OCPBUGS-46925 , OCPBUGS-46932 , OCPBUGS-47312 : x/net bump to v0.34.0 [release-4.12] #943 NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610 : (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875 OCPBUGS-42161 : adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873 OCPBUGS-41881 : [CARRY] perform operator apiService certificate validity checks directly #866 OCPBUGS-32854 : bump go-jose to v2.6.3 #782 OCPBUGS-35242 : Unblock CI #773 OCPBUGS-27563 , OCPBUGS-27568 , OCPBUGS-27648 , OCPBUGS-27653 : bump go-git/v5 to 5.11.0 #688 OCPBUGS-27962 : [CARRY] SSC RBAC #671 OCPBUGS-28229 : Registry Pod Controller Flag #673 OCPBUGS-24619 : Update to latest k8s v0.25.15 API server and enable HTTP/2 DoS mitigations #660 OCPBUGS-22132 : [release-4.12] Bump golang.org/x/net to v0.17.0 #590 OCPBUGS-18512 , RHIBMCS-168 : Copied csv listing backport #559 Introduce DOWNSTREAM_OWNERS file #541
Allow cpb to be statically compiled / exempt from FIPS compliance #512
OCPBUGS-15858 : fix dynamic conversion webhook #503 OCPBUGS-15737 : Re-enable psa plugin #500 OCPBUGS-7650 : Catalog Pod Startup Probe Timeout #450 Updating operator-registry images to be consistent with ART #397
OCPBUGS-7825 : Set openshift.io/scc label to empty #456 OCPBUGS-7769 : [release-4.12] update cluster policy operator dependency #454 OCPBUGS-7556 : Defuse E2e timebomb #449 OCPBUGS-7086 : cherry-pick pull request refactor FBC caching (#1051) f… #441 OCPBUGS-6260 : Catalog, fatal error: concurrent map read and map write #440 OCPBUGS-7025 : Set ImagePullPolicy of bundle unpacker to “IfNotPresent” for image digests #439 OCPBUGS-3881 : Default to legacy psa settings #426 OCPBUGS-4951 : Bump go and k8s #424 Updating operator-lifecycle-manager images to be consistent with ART #398
OCPBUGS-3837 : fix service account token secret reference (#2862) #412 OCPBUGS-3795 : Order an operator CR’s status.Component.Refs array (#2880) #411 Update OWNERS file #402
test/e2e: Preserve the existing environment when using exec.Command #403
Attempt workaround for https://issues.redhat.com/browse/CLOUDBLD-11068 #399
OCPBUGS-1912 : Move opm diff to oc mirror #391 OCPBUGS-122 : Psa legacy catalog enablement #383 OLM-2695 : Adds downstream only CSV Namespace Labeler Plug-In #370 OCPBUGS-1004 : dump descriptive source info on error instead of the source data (#1021) #380 OCPBUGS-858 : Package Server Manager should enforce expected csv values #378 OCPBUGS-650 : fixing reliance on candidate channel containing all referenced bundle… #379 OLM-2690 : Subscription affinity #359 OLM-1803 channel upgrade graph visualization #377
OLM-2753 : Semver veneer pipe support #376 OCPBUGS-643 , OLM-2726 : downstreaming opm serve changes from operator-registry #374 OCPBUGS-78 : Cleanup conversion webhooks when an operator is uninstalled #360 OCPBUGS-440 : improve CA and certificate generation #361 noqe: script fixes #369
(psa) restrict olm namespace + remove labels from openshift-operators ns #367
noqe: operator-registry QoL improvements #362
noqe: Update magic catalog for psa changes (#2842) #365
Psa downstream #349
Add a more robust script for automating the upstream/downstream sync process #351
Support Global Operators in Console #326
Bug 2097557 : use env var for OCP version instead of clusterversion status #346 Explicitly override the global catalog namespace #345
Sync 07/26 #343
Bug 2105045 : Only update namespaces when OperatorGroup labels need to change. (#2809) #336 Sync 0707 #335
Bug 2101357 : concurrent write bug fix #337 Bug 2106449 : Update containerd version #338 Updating operator-lifecycle-manager images to be consistent with ART #334
Update makefile to default to gsed if present #313
Updating operator-registry images to be consistent with ART #333
Bug 2076323 : Exclude global catalogs from resolution #320 Bug 2100323 : Fix legacy registries no longer working (#974) #324 Bug 2088541 : Update unpack job pod security (#2793) #323 Bug 2088541 : Update catalog source pod security context #309 Bug 2093288 : fix(grpc): Add startupProbe to check for grpc health readiness (#2791) #314 Bug 2094303 : fix(vendor/scoped): bump k8s version to 1.24, go version to 1.18 and fix scoped client (#2794) #316 Bug 2020484 : Refactor installer to surface certificate rotation (#2775) #306 Bug 2039135 : add more descriptive error message to pruning of FBC #308 Bug 1982737 : Make malformed CSV fail nicely (#2673) #307 manifests/*: comply to restricted pod security level #299
Sync 05 03 #300
Fix currentServiceAccount debug message (#2765) #297
Bug 2074612 : Fix GRPC CheckRegistryServer function (#2756) #294 Sync OLM commits 04/25 #292
Identify fail forward in csvSources (#2743) #290
Downstream Sync 04.13 #289
Sync 04 11 #285
sync update staging directory 04-07 #279
sync: Update staging directories 04-05 #278
Bug 2055861 : Replace collect-profile jobs that haven’t completed #255 Adds CRC deployment automation and CI documentation #268
Update staging OLM 03-30 #274
go.*,vendor: Bump root module to go 1.17 #271
Makefile: Remove the duplicate unit/psm target #270
Sync upstream commits to the 4.11 release branch #269
Update PATH setting in base Dockerfile #261
Remove unsupported project_image from .ci-operator.yaml #262
Bug 1975543 : Use CVO to delete manifests removed from OLM #245 Fix install_kubebuilder.sh script #258
Update the build root Dockerfile base image #257
Updating operator-lifecycle-manager images to be consistent with ART #250
Updating operator-registry images to be consistent with ART #249
Bug 2048563 : feat added leader election conventions #228 clean up unused scripts #227
Full changelog
OCPBUGS-49426 : Upgrade golang.org/x/net [release-4.12] #591 NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081 : update golang.org/x/net for CVE-2023-45288 #567 OCPBUGS-20955 : [release-4.12] bump golang.org/x/net to 0.17.0 #550 OCPBUGS-18503 : remove a race condition #533 OCPBUGS-14109 : Revert default catsrc diff changes #519 OCPBUGS-7108 : Default CatalogSource aren’t always reverted to default settings #506 OCPBUGS-5468 : Remove PSA audit and warnings #503 OCPBUGS-5474 : Run Default CatalogSource in Restricted mode #500 OCPBUGS-4763 : Unenforce PSA Restrictions #494 OCPBUGS-2223 : Update Default CatalogSource Images to 4.12 tag #487 Updating marketplace-operator images to be consistent with ART #479
OCPBUGS-441 : Dockerfile.okd: include custom OperatorHub manifest #481 (psa) make marketplace namespace restricted #484
(namespace) remove PSA baseline enforcement #483
Add PSA enforcement label #480
Bug 2010375 : Clarify reason/steps to diagnose in *CatalogError prom alert #469 Bug 2088541 : Add psa anotations to namespace to suppress warnings #478 Updating marketplace-operator images to be consistent with ART #473
Bug 2092464 : Update default catalogsource to use 4.11 images #477 Bug 2079610 : Fix operatorHub status #470 Revert “Bug 2092464: shift marketplace operator catalogs default to v4.11” #476
Bug 2092464 : shift marketplace operator catalogs default to v4.11 #474 manifests/deployment: comply to restricted pod security level #471
chore(modules): bump openshift/api for new operatorhub crd #472
Bug 2057558 : increase polling time of status report to reduce log spam #461 fix(manifests): add singleton operatorhub cr #468
fix(capabilities): add operatorhub crd manifest #467
Bug 2070792 : chore(manifests): add missing capabilities annotation #465 manifests/10_clusteroperator: Drop the unused namespace property #401
chore(manifests): add openshift capability annotation #462
Bug 2067909 : Bump github.com/prometheus/client_golang to v0.12.1 #463 Update OWNERS #464
Bump repository to Go 1.17 and k8s v0.23.x #460
Updating marketplace-operator images to be consistent with ART #459
Full changelog
OCPBUGS-23162 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131 Updating ose-ovirt-csi-driver images to be consistent with ART #122
Bump go version #123
improved logging if no storage domain is found by name #121
updated go-ovirt-client #120
Added @Darth-Mera as approver #119
added k8s deployment files #114
update go-ovirt-client #113
Updating ose-ovirt-csi-driver images to be consistent with ART #112
Bug 2091567 : Upgrade go-ovirt-client to 1.0.0 #111 Added @engelmi as approver #109
Updating ose-ovirt-csi-driver images to be consistent with ART #110
Bug 2067871 : Bump prometheus/client_golang to v1.11.1 #108 Bug 2063795 : remove unused replace directive in go.mod #107 Updating OCP on RHV team members #103
Updating ose-ovirt-csi-driver images to be consistent with ART #102
Bug 2043035 : use proper error code #101 Full changelog
OCPBUGS-23266 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #128 OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #121 Updating ose-cluster-ovirt-csi-operator images to be consistent with ART #108
STOR-858 : Bump github.com/openshift/* and k8s.io/* #107 updated go-ovirt-client #106
OCPRHV-685 : added secret informer for daemonset #104 Added @Darth-Mera as approver #105
update go-ovirt-client #103
Add client certificate and key to service monitor #102
Bug 2088033 : Clear text password stored on disk #99 Update credentials automatically #101
Updating ose-cluster-ovirt-csi-operator images to be consistent with ART #100
Bug 2091567 : oVirt CSI driver operator should use latest go-ovirt-client #98 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #96 Updating ose-cluster-ovirt-csi-operator images to be consistent with ART #97
Added @engelmi as approver #95
Bug 2067821 : Bump prometheus/client_golang to v1.11.1 #93 Bug 2064613 : Recreate oVirt connection for every sync #92 Set fsGroupPolicy in CSIDriver #89
Bug 2006201 : Increase timeouts for CSI driver #86 Updated OCP on RHV team members #82
Bug 2049169 : Add custom CA bundle support #83 Updating ose-cluster-ovirt-csi-operator images to be consistent with ART #81
Full changelog
OCPBUGS-6309 : Fix swapped CPU socket and thread mapping #173 Updating ose-ovirt-machine-controllers images to be consistent with ART #170
Improve logging #168
update go-ovirt-client #167
added wrapped klogr for unified logging #166
Remove duplicate MemoryMB validation #165
Ocprhv 681 automatic credentials update #161
Added @Darth-Mera as approver #164
Add validations tests #163
updated readme and custom capo docs #162
Refactor controller structure #160
Disable memory ballooning in high perf workers #143
Fix OCPRHV-789 #159
OCPRHV-788 : added check for high_performance to set placement_policy_affinity #144 added functional test for automatically updating credentials #158
set serial console enabled for high performance VMs #157
enable headless for high performance VMs #156
disable soundcard for high performance VMs #155
dedicated functional test run script #154
update envtest setup for CI #153
added generation of crds #150
removed test stage in dockerfile #151
OCPRHV-806 : added functional test for actuator #148 added first set unit tests for machine validation #147
Updating ose-ovirt-machine-controllers images to be consistent with ART #146
Bug 2100496 : VM creation fails w. AG without description #145 Bug 2099293 : cluster API provider should use latest go-ovirt-client #142 Bug 2094806 : Update dependencies to K8s 1.24, go 1.18 #141 Added @engelmi as approver #137
Updating ose-ovirt-machine-controllers images to be consistent with ART #139
Bug 2082535 : clone flag doesn’t work #138 Bug 2077597 : bump go-ovirt-client to v1.0.0-alpha4 #136 Bug:2076270 better VM deletion handling #134
Bug 2076277 : add Storage Domain Configuration to the machineset #133 Bug 2074710 : Transition to go ovirt client #131 Bug 2056454 : Preallocated disks for OCP nodes #129 Updated OCP on RHV team members #130
Updating ose-ovirt-machine-controllers images to be consistent with ART #128
Full changelog
OCPBUGS-24564 : Reduce metrics cardinality #75 OCPBUGS-24738 : snyk code scan exclude vendor directory #63 OCPBUGS-21882 : CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.12 #57 Update OWNERS #39
Updating ose-powervs-machine-controllers images to be consistent with ART #34
Update go versoin to 1.19 and gofmted file as per go 1.19 #35
Updating ose-powervs-machine-controllers images to be consistent with ART #32
Update k8s to 1.25 #33
Add infrastructure sync controller for custom service endpoints #31
Add JoelSpeed approver #30
Add Karthik-K-N as approver #29
Autoscaler support #25
Set the node internal dns address for machine #27
Updating ose-powervs-machine-controllers images to be consistent with ART #26
Bug 2100825 : Update go modules #24 Bug 2100033 : Fetch VM IP from DHCP server to set NodeInternalIP #22 Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #20 Bug 2089563 : Use PowerVS api types from openshift/api #17 Bug 2087039 : Update dependencies to K8s 1.24, go 1.18 #19 Updating ose-powervs-machine-controllers images to be consistent with ART #18
Fixed Provider ID format #16
Set zone, region labels to machines #13
Removed node update controller #8
allow user to pass in regex for resource lookup #9
Bump machine-api-operator #12
Updated Makefile #11
Updated power go client #7
Remove whitespace from the ip address #6
Updating ose-powervs-machine-controllers images to be consistent with ART #4
Full changelog
Updating prom-label-proxy images to be consistent with ART #350
OWNERS: Add myself, and move former team members to emeritus #349
Updating prom-label-proxy images to be consistent with ART #347
Bump v0.5.0 #348
Updating prom-label-proxy images to be consistent with ART #346
Updates OWNERS file #345
Updating prom-label-proxy images to be consistent with ART #343
Full changelog
OCPBUGS-21219 : update golang.org/x/net to v0.17.0 [4.12] #175 OCPBUGS-4048 : fix certificate reloads after rotation #149 Revert unwanted downstream patch #144
OCPBUGS-1718 : [bot] Bump openshift/prometheus to v2.39.1 #142 Updating golang-github-prometheus-prometheus images to be consistent with ART #141
Bump openshift/prometheus to v2.38.0 #140
OWNERS: Add myself, and move former team members to emeritus #139
Updating golang-github-prometheus-prometheus images to be consistent with ART #137
Bump openshift/prometheus to v2.37.0 #138
Bug 2099561 : Bump openshift/prometheus to v2.36.2 #136 Bug 2064984 : Update Prometheus to v2.36.1 #133 Updating golang-github-prometheus-prometheus images to be consistent with ART #132
web/ui/.gitignore: unignore generated assets for downstream build #130
Bump openshift/prometheus to v2.35.0 #128
Updates OWNERS file #124
Bump openshift/prometheus to v2.34.0 #123
Bump openshift/prometheus to v2.33.5 #122
Bug 2056802 : scrape: Fix label_limits cache usage #121 Bump openshift/prometheus to v2.33.4 #120
Updating golang-github-prometheus-prometheus images to be consistent with ART #119
Full changelog
OCPBUGS-21031 : Bump golang.org/x/net to v0.17.0 #82 Updating golang-github-prometheus-alertmanager images to be consistent with ART #64
Updating golang-github-prometheus-alertmanager images to be consistent with ART #61
OWNERS: Add myself, and move former team members to emeritus #62
Updating golang-github-prometheus-alertmanager images to be consistent with ART #60
Updates OWNERS file #59
Bump openshift/prometheus-alertmanager to v0.24.0 #58
Bump openshift/prometheus-alertmanager to v0.23.0 #55
Updating golang-github-prometheus-alertmanager images to be consistent with ART #57
Full changelog
OCPBUGS-20843 : Bump golang.org/x/net to v0.17.0 #249 OCPBUGS-7458 : Fixes ThanoRuler StatefulSet re-creation bug #217 Updating prometheus-operator images to be consistent with ART #204
Bump openshift/prometheus-operator to v0.60.1 #208
Bump openshift/prometheus-operator to v0.60.0 #207
Updating prometheus-operator-admission-webhook images to be consistent with ART #206
Updating prometheus-config-reloader images to be consistent with ART #205
Bump openshift/prometheus-operator to v0.59.2 #203
Bump openshift/prometheus-operator to v0.59.1 #200
OWNERS: Add myself, and move former team members to emeritus #198
Bump openshift/prometheus-operator to v0.58.0 #197
Updating prometheus-operator-admission-webhook images to be consistent with ART #195
Updating prometheus-config-reloader images to be consistent with ART #194
Updating prometheus-operator images to be consistent with ART #193
Bug 2097716 : pkg/apis/monitoring/v1beta1: fix httpConfig conversion #191 Bug 2091595 : bump to Prometheus operator v0.57.0 #190 Bug 2079679 : pkg/prometheus: fix curl exec probe #189 Revert “Bug 2091595: Bump openshift/prometheus-operator to v0.56.3” #188
Bug 2091595 : Bump openshift/prometheus-operator to v0.56.3 #185 Updating prometheus-operator-admission-webhook images to be consistent with ART #180
Updating prometheus-config-reloader images to be consistent with ART #178
Bug 2084288 : Revert “Bump openshift/prometheus-operator to v0.56.2” #177 Updating prometheus-operator images to be consistent with ART #176
Bump openshift/prometheus-operator to v0.56.2 #174
Revert “Bump openshift/prometheus-operator to v0.56.1” #171
Bump openshift/prometheus-operator to v0.56.1 #170
Add myself to OWNER file #166
Bug 2079679 : Revert “[bot] Bump openshift/prometheus-operator to v0.56.0” #168 Bump openshift/prometheus-operator to v0.56.0 #165
Bump openshift/prometheus-operator to v0.55.1 #164
Bump openshift/prometheus-operator to v0.55.0 #162
Fix typo in admission webhook bin output #163
Add Dockerfile and targets for standalone admission webhook image #160
Standalone webhook server #159
Bump openshift/prometheus-operator to v0.54.1 #158
Updating prometheus-config-reloader images to be consistent with ART #155
Bump openshift/prometheus-operator to v0.54.0 #151
Updating prometheus-operator images to be consistent with ART #154
Full changelog
OCPBUGS-21123 : upgrade golang.org/x/net to v0.17.0 #136 Updating golang-github-prometheus-node_exporter images to be consistent with ART #112
Align to upstream v1.4.0 #109
Fix a bug of metric format on AMD EPYC platforms #107
Updating golang-github-prometheus-node_exporter images to be consistent with ART #104
OWNERS: Add myself, and move former team members to emeritus #106
Updating golang-github-prometheus-node_exporter images to be consistent with ART #103
Updates OWNERS file #102
Updating golang-github-prometheus-node_exporter images to be consistent with ART #101
Full changelog
OCPBUGS-21026 : CVE 2023 39325 (4.12) #231 OCPBUGS-3279 : Return nil from start funcs after context is cancelled. #203 Bug 2048349 : make the operator react to workload logLevel configuration #196 Quality of life changes, fix e2e tests failing too often #197
Updating ose-cluster-authentication-operator images to be consistent with ART #192
Bug 2101880 : operator NS manifest: Set empty openshift.io/run-level #194 manifests/deployment: comply to restricted pod security level #190
Full changelog
OCPBUGS-34827 : fix issuer check during JWT authentication 4.12 #541 OCPBUGS-21310 : [release-4.12] fix: Bump golang.org/x/net to v0.17.0 #486 OCPBUGS-7702 : Add ‘agent-installer’ value to ‘install_type’ label #451 Fixes typo in telemeter/client/kubernetes.libsonnet #434
Updating telemeter images to be consistent with ART #433
Adds TemeterClientJobFailing alert #431
Add rules for cluster CPU-hours and Instance-hours #418
*: Update docs with latest Telemeter architecture #430
Forward: Add logic to sanitize labels #429
pkg/receive/handler: Add middleware to respect whitelist + elide #427
OWNERS: Add myself to owners file #425
pkg/receive/handler: Use OIDC client #426
pkg/receive/handler: Propagate upstream error message #423
OWNERS: Add myself, and move former team members to emeritus #424
pkg/server: use v1 forward requests counter #422
Bump Telemeter rules evaluation interval to 4m #420
Bug 1924548 : go.mod: update github.com/gogo/protobuf to v1.3.2 #419 Bump Telemeter rules evaluation interval to 3m #417
Updating telemeter images to be consistent with ART #415
pkg/forwarder: add counter for the total number of requests #416
Updates version of golangci-lint to support GO1.18 #413
Adds PrometheusRule telemetry that was previously hosted in cluster-monitoring-operator #411
Bug 2067888 : update prometheus/client_golang version #409 Use service CA beta annotation #408
Updating telemeter images to be consistent with ART #407
Full changelog
OCPBUGS-52585 : Use payload pullspec for image info test #29593 OCPBUGS-41585 : Removes dependency on samples operator images #29080 Bug OCPBUGS-20557: Correct condition for rejecting connection #28327
OCPBUGS-18490 : bump monitoring SNO bounds #28239 OCPBUGS-18527 : Ignore timeout and connection refused errors during upgrade tests for 4.12 #28270 OCPBUGS-18309 : Add missing watch permission for console users #28234 OCPBUGS-16696 : Wait for DNS DS pods to be ready #28083 OCPBUGS-16243 : allow cluster-config-operator to manage featuregate upgrade block #28055 OCPBUGS-15933 : remove references to registry.centos.org #28033 CCO-367 : Allow CCO to be Upgradeable=False when credentialsMode=Manual #27941 OCPBUGS-14152 : Move from registry.centos.org to quay.io #27949 OCPBUGS-12914 : Add (optional) dual-stack tests to the CNI certification test suite #27903 Updating openshift-enterprise-tests images to be consistent with ART #27293
add specific test for failing cgroups path #27856
OCPBUGS-8705 : Bump(openshift/kubernetes): to get fix for resizing flake #27794 OCPBUGS-8024 : Backport fixes to resume gathering CI disruption data for SLB and image registry #27759 OCPBUGS-7633 : remove reference to old guard pods #27732 OCPBUGS-7285 : extended: security: do not explicitly set api audience on token request #27716 OCPBUGS-6850 : [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade #27684 OCPBUGS-5493 : Use cluster network MTU for bond interfaces #27637 OCPBUGS-5490 : Fix intervalcreation incorrect year unit test bug #27668 OCPBUGS-5130 : run resourcewatch fixes #27625 OCPBUGS-4836 : 1sec #27610 OCPBUGS-4503 : Unskip service session affinity tests #27598 OCPBUGS-4851 : Add Kuryr exception to “pods should successfully create sandboxes” test #27611 OCPBUGS-4407 : Nginx 1.18 images will reach EOL in November 2022 #27599 OCPBUGS-2927 : [release-4.12] Bump kubernetes to latest release-4.12 #27588 OCPBUGS-3649 : : Fix flake reporting for certain tests. #27557 OCPBUGS-3649 : Revert “Merge pull request #27533 from dgoodwin/merge-alert-backstops” #27550 Synchronize release-4.12 with master #27541
OCPBUGS-3428 : Skip broken [sig-devex][Feature:ImageEcosystem] tests #27537 k8s 1.25.0 #27503
Revert 1.25 again #27499
Extend SCC tests with their corresponding service account variants #27491
MicroShift: label e2es with more apigroup labels (squashing more PRs into a single one + fixes) #27498
Skip resource growth checks in upgrade-rollback jobs #27450
k8s 1.25.0 #27490
Remove must-gather pod from lack priorityclass exception list #27469
Ocpbugs 2275 remove templateservicebroker test #27484
Support external topology for hypershift #27437
USHIFT-481 Get event intervals for alerts only if Prometheus route exists #27467
Revert “k8s 1.25.0” #27489
k8s 1.25.0 #27416
Automated - Update synthetic test data #27475
microshift: avoid oauth and console disruption monitoring #27462
Migrate route.sh, run.sh, service.sh and status.sh tests to go #27455
Add skips logic for tests that require optional capabilities #27481
Fix flaky cli tests #27482
Migrate idle.sh to go tests #27451
Add dgoodwin as approver to origin #27477
update skip openshift-controller-manager scaling events in build testsuite #27474
Fix unit tests that have broken since we stopped running them 2 years ago #27460
USHIFT-357 : MicroShift: skip sig-scheduling tests #27402 USHIFT-356 : MicroShift: skip sig-node tests #27425 OCPBUGS-2155 : Revert “Add etcd vertical scaling test suite” #27463 USHIFT-358 : MicroShift: skip sig-storage tests #27438 Check for console capability before launching it’s disruption monitoring. #27439
Add Invariant test to look for probe errors for openshift-config-operator #27436
Fix missing reporting of 0s disruptions. #27452
Add etcd vertical scaling test suite #27444
USHIFT-351 : Microshift: skip sig-devex tests #27392 USHIFT-300 : microshift: skip sig-imageregistry tests #27367 Drastically reduce the jobs we enforce disruption on. #27457
USHIFT-354 : MicroShift: skip sig-instrumentation tests #27399 USHIFT-350 : MicroShift: skip sig-coreos tests #27400 egressip: avoid curl hanging when sending probes #27379
OCPBUGS-1079 : Use kubeconfig from secret mount instead of /tmp #27443 include storage and must-gather tests in expectedTestCount #27356
feat: update query results #27448
USHIFT-283 : microshift: skip sig-builds tests #27361 Fix rare race condition in ImageStream admission tests. #27442
remove test/extended OWNERS file #27408
OCPBUGS-985 : Revert “Test Baremetal deployment without a provisoning network” #27441 USHIFT-344 : MicroShift: fix sig-apps tests #27397 USHIFT-301 : microshift: skip sig-operator tests #27369 USHIFT-343 : MicroShift: skip sig-api-machinery tests #27410 Remove test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #27391
Bug 1933144 : Bump k8s to include c83b5d076f5 #27380 Check version when discovery client #27432
USHIFT-285 : MicroShift: allow CLI creation without OpenShift APIs #27358 sig-api-machinery: remove project from authenticated browser APIServe… #27333
Bump api-requests for console-operator on vsphere #27431
USHIFT-353 : MicroShift: skip sig-installer tests #27409 make runonce-ldapsearch pod name unique #27426
OCPBUGS-1265 : test/extended/prometheus: Consider telemeterClient.enabled #27422 Fix double disruption testing and values for most backends in intervals chart and bigquery. #27415
add retry for checkLADPConn #27424
e2e/cli: Migrate completions, whoami and projects tests to go #27371
Enable ServiceInternalTrafficPolicy tests in OVNK #27043
OCPBUGS-967 : temporarily disable IngressClass test, which is changed in upstream in 1.25 #27417 Add a test case to find job name/cluster version mismatches #27413
upkeep: updated data set for 4.12 #27420
OCPBUGS-1237 : Fix s2i ruby test that relys on rack #27419 Address exceeded maximum resolution of 11,000 points per timeseries #27384
OCPBUGS-587 : Temporarily flake FailedToUpdateEndpointSlices #27418 Ignore the “InsufficientInstanceCapacity” patholocial event #27385
Automatically skip tests with apigroups which are not served #27406
Label tests with openshift crafted API groups #27387
skip route-controller-manager scaling events in build testsuite #27394
Remove flake for 40% Secret/ConfigMap growth test. #27381
Bug 2100091 : Ignore FailedCreatePodSandBox events for garbage collector tests #27270 Fix upgrade dry-run. #27388
Update etcd tests with k8s 1.25 data #27396
Update etcd tests with k8s data #27393
Instead of returning errors when there is no etcd operator, just return static values for etcd metadata #27342
Test baremetal deployment without provisioning network #26676
Ensures operators use external cloud provider #27349
Bug 2098053 : Re-revert “Add networking test for invalid external gateway” #27277 Separate out pathological event test for error updating endpoint slices #27377
Revert “Label tests with openshift crafted API groups (round 3)” #27378
Skip etcd scaling test for metal and vsphere platforms #27375
Test we don’t see substantial Secret/ConfigMap growth during upgrade. #27354
Add ovnkube-node pods in the interval chart for ingress #27372
update service load balancer test to gracefully roll out #27180
EgressIP: Enable EgressIP tests for OpenStack #27363
Label tests with openshift crafted API groups (round 3) #27368
Suppress failures if certain firing alerts happened with related event #27304
Bug 2095623 : Revert “Disable azure-file tests” #27259 job names: exclude text before e2e for both platform and network tests #27373
upkeep: updated synthetic tests historical data for alerts and disruption #27364
Update job name tests for hard failure cases #27362
Label tests with openshift crafted API groups (round 1) #27355
Add required pod security admission annotations into cmd/namespace #27357
Bug 2110503 : EgressIP: Probes and check tcpdump logs should succeed eventually #27318 test/extended/util/disruption: Remove stale p95 references #27351
display UTC time for timeline charts #27348
networking/acl: live-retrieve the NS instead of f.Namespace #27347
Consider Prometheus maximum points in a time series for alert tests #27319
Tune watch limits for operators #27281
allow techpreviewnoupgrade alert when testing techpreview #27343
Ignore repo name when looking for network type in job name #27339
Use “plugin” for some nw isolation test case names #27330
Revert “Revert ‘bump o/k for the fixed scheduling tests’”; layer fix on top #27332
Update authenticated users RBAC e2e test #27326
OWNERS_ALIASES: add me as a metal platform lead #27337
Add Jan as image approver, remove Ravi and Clayton #27331
Bug 2114506 : test/extended/olm: Handle unset enabledCapabilities in marketplaceEnabled #27336 Convert kubelet logs into monitor events for timelines #27299
Revert “bump o/k for the fixed scheduling tests” #27328
etcd vertical scaling test: add verbose timeout error messages and bump machine provisioning timeout for Azure #27322
remove CLI.SetupNamespace() in favour of CLI.SetupProject() #27325
Increase API requests limit for monitoring operator on openstack #27324
bump o/k for the fixed scheduling tests #27323
Separate out test for SamplesImagestreamImportFailing alarm #27314
Fix same test name being used twice for pods on different nodes check. #27315
etcd storage tests: work with dynamic namespace names #27295
Add etcd vertical scaling test.” #27294
Add a new spyglass chart for image-registry, console, oauth #27297
Bug 2098194 : set sampleErr to bodyReadErr #27260 Fixes OVN ACL audit log parsing #27312
Bug 2079679 : pkg/monitor: wait for Prometheus sidecars to be ready #27224 Add test that checks CI job name matches platform and network type #27311
examples: drop OCP 3 library paths #27266
Revert “Enable EgressIP tests for internal targets” #27307
fix(olm-test): skip test if marketplace is not enabled #27302
Bug 2089966 : use multi-arch ldap and multicast test images #27169 Revert “Bypass tests failing due to metal image rebuild on RHEL9” #27288
Update to go 1.18 #27253
separate interval gathering from interval calculation #27298
Make margin wider to see more in spyglass charts #27061
Bug 2098096 : Enable EgressIP tests for internal targets #27262 test/extended/prometheus: clean alert exceptions #27211
test: allow -f to match tests for any test suite (redux) #27096
BUG 2067323: test/extended/router: Drop host lookup for gRPC HTTP/2 h2spec tests #27274
Bug 2097297 : Show DNS lookup sampler problems on the disruption intervals chart. #27261 Bug 2094342 : bump cluster-capi-operator apirequests upper bound to 50 #27225 Add Ravi and Abu as image approvers #27282
Remove etcd vertical scaling test. #27280
make a new category of pod sandbox failure #27247
Bug 2099698 : revert: no longer needed logic for rt kernel #27264 Bypass tests failing due to metal image rebuild on RHEL9 #27283
Bug 2098053 : Re-revert “Add networking test for invalid external gateway” #27273 Bug 2098053 : Re-revert “Add networking test for invalid external gateway” #26985 Bug 2100439 : Enable GCP PD in-tree tests #27272 Bug 2086519 : AUTH-133: test/extended/security/scc: comply to pod security admission #27269 Bug 2093122 : synthetictests: Event struct’s Related field is optional #27208 Bug 2086519 : authorization: add a test checking that the restricted-v2 SCC mutates securityContext to match restricted PSa #27257 Bug 2098095 : EgressIP tests: Use OpenShift API to retrieve CloudPrivateIPConfigs and EgressIPs #27243 Bug 2099611 : Increase etcd-operator watch channels upperbound for BareMetal Platform #27263 Bug 2098094 : EgressIP test: Remove print statement on test failure #27191 Bug 2093339 : move provisioning test to permanent disablement, since this is not yet officially supported #27267 Bug 2086092 : Re-enable tests #27258 Bug 2097713 : Extend the allowance for etcdHighNumberOfLeaderChanges. #27238 Bug 2097684 : Nutanix provider for e2e testing #27102 Add David Peraza as approver on samples test content #27241
Bug 2093992 : Bump timeout for cvo ugprade check to 10 minutes for Baremetal jobs #27254 Bug 2086092 : update kube to v1.24.0 #27244 Bug 2097297 : Don’t consider DNS lookup failure disruption #27250 Bug 2093051 : use the node update finished as a backup completion time for OSStaged #27206 Bug 2086092 : Extend time for kube rebase #27252 Bug 2097009 : Run must-gather tests in later to reduce resource contention #27249 Bug 2086086 : update samples for 4.11 #27234 Bug 2085997 : Report late requests verification: Fix for Hypershift #27220 Bug 2094919 : Skip etcd vertical scaling test on vsphere #27236 Bug 2092961 : Use http for network endpoint test. #27217 Bug 2084361 : Print error msg before os.Exit() #27230 Bug 2093049 : test/extended/networking: fix [pod sysctls should not affect node] to use known host interfaces #27221 Bug 2085997 : explicit timeout for the etcd scaling test #27216 revert 1.24 tests to get back to work #27233
Bug 2086092 : update kube to v1.24.0 #27181 Revert “Bug 2079679: pkg/monitor: wait for Prometheus sidecars to be ready” #27223
Bug 2091110 : Skip ErrImagePull for expected failures #27202 allow terminating pods to be ready=false #27212
Revert “Bug 2093049: test/extended/networking: fix [pod sysctls should not affect node] to use host interfaces” #27219
Bug 2092961 : Flake almost all ci cluster to external svc disruption. #27210 Bug 2093049 : test/extended/networking: fix [pod sysctls should not affect node] to use host interfaces #27203 Bug 2093234 : Add regex filter and intervals duration to e2e-charts #27186 Bug 2093046 : priority class: add exception for must-gather pending bug fix #27204 Bug 2081732 : remove incorrect namespace check in static pod test #27195 Bug 2092961 : Add disruption test to an external service, not cluster under test. #27179 Bug 2091547 : Skip internet connection test if we use a proxy #27093 Bug 2079679 : pkg/monitor: wait for Prometheus sidecars to be ready #27201 Bug 2091067 : EgressIP: Make tests retry on API timeout errors #27185 Bug 2085997 : report late request (broken LB) for the external client #27129 Bug 2085997 : brings back the etcd scaling test #27176 Bug 2091086 : test/extended/cli/explain: Include OperatorHub CRD when ‘marketplace’ is enabled #27188 rename intervals to timelines to be self-explanatory #27182
Bug 2086519 : label project-created namespaces to not sync PodSecurity labels #27177 wait for kube-apiserver to settle after modifying network configuration #27193
Bug 1992596 : move help.sh to golang-based e2e #27190 Bug 2091086 : cli: don’t insist on metal3 CRDs being present when cluster capabilities are None #26998 restrict the per-namespace invariant alert check #27184
Bug 2090692 : slightly loosen oc exec help test #27183 Updating openshift-enterprise-tests images to be consistent with ART #27139
allow up to two DNS check pods to be waiting #27175
Bug 2086092 : skip tests to facilitate rebase #27178 Bug 2081732 : Static pod test error #27160 Revert “Bug 2089831: Temporarily disable telemetry token test.” #27168
add per-namespace tests for kubepodnotready alert failures #27151
remove the etcd vertical scaling test #27174
Bug 2089276 : Detect and use the packet capture interface for EgessIP tests. #27164 remove test: ‘etcd is able to vertically scale up and down with a single node’ #27170
Bug 2086519 : bump o/kube so that test namespaces aren’t PSa label synced #27173 Bug 2085997 : special configuration on barematal platform for the etcd vertical test is required #27140 don’t trigger single second disruption on contiguous disruption #27161
Bug 2089831 : Temporarily disable telemetry token test. #27165 BZ2088533: Add subresource.status check exceptions for techpreview jobs #27156
add pod graceful termination to pod lifecycle #27153
Bug 2081732 : Dump debug message whenever static pod test fails #27143 Bug 2086086 : image_ecosystem: remove deprecated imagestreams #27133 Bug 2086519 : Auth-133: test/extended/util: comply exec pod to restricted pod security profile #27152 Bug 2085997 : makes the etcd invariant test work on dualstack platform #27148 Bug 2085997 : ExternalControlPlaneTopology: Skip etcd master endpoint verification #27149 BZ2087992: Add regex matching, regex inverse matching, and default end date option for intervals #27117
BZ 2087504: Add Early test to check for CRD subresource.status #26954
Bug 2085997 : the machine API can be unavailable resulting in a 404 or an empty list #27147 EgressIP downstream tests for OVN Kubernetes #26999
Add user coreydaley as an approver #27144
handle cases where containers restart #27137
commenting ipv6 for sysctls #27142
Bug 2085997 : ensure number of voting members in the cm matches the number of master machines #27141 Bug 2085997 : the etcd vertical scaling feature misses e2e tests #27127 Bug 2084361 : Add some debugging information for mysterious exit 2 errors #27136 Bug 2085997 : adds new test to the API monitor #27118 update alert and disruption limits #27130
Bug 2085997 : gives the backend monitoring an identity #27134 always allow at least one second for disruption #27131
Bug 2080007 : unrevert external ip configuration e2e networking tests #27078 Bug 2083941 : feat: add fuzzy match on micro release #27123 add test to catch single second disruption patterns #27132
Bug 2082538 : bump cluster-capi-operator apirequests upper bound for GCP And Azure #27108 Revert “moves TestScalingUpAndDownSingleNode from cluster-etcd-operator” #27126
Add debugging message for static pod test #27111
Bump net.ipv6.neigh.IFNAME.retrans_time_ms for Multiarch #27119
Don’t hardcode the SA token audience when requesting one #27120
timeline command, container exit fix, key resources by uid, and use reflector #27114
NE-883 : test/extended/router: Add test for spec.subdomain #27030 moves TestScalingUpAndDownSingleNode from cluster-etcd-operator #26917
Add config for golangci-lint no-sprintf-host-port #27116
Correct pod timing #27112
Bug 2080687 : request prometheus service account token #27100 Fix request token ic cli/admin tests #27113
Bug 2081012 : Don’t wait for sa token #27104 prometheus helper: add helper to retrieve prometheus query token #27107
Bug 2080679 : fix oc related test to land k8s 1.24 #27099 [rebase 1.24] disable tests with time limit to facilitate rebase #27086
Bug 2082239 : Bump net.ipv6.neigh.IFNAME from 30005 to 30010 for Multiarch #27101 test/extended/util/openshift/clusterversionoperator/adminack: Accept MultipleReasons #27110
make it easy to create pod interval tests #27092
Bug 2080681 : Request new token instead of using node-bootstrapper token #27098 Revert “NE-626: Add DNS CI coverage for golang and glibc resolver libraries” #27103
make the pod ip check a controller #27097
NE-626 : Add DNS CI coverage for golang and glibc resolver libraries #26957 Revert “test: allow -f to match tests for any test suite” #27095
MON-2148 : Handle 401 code for prometheus api route #27031 test: allow -f to match tests for any test suite #27091
router: wait for “use scc restricted” SAR before pod creation #27084
Remove non-functional gu workload tests. #27044
test/extended/prometheus/image_pulls: New “should be fast” test-case #27067
give multi-arch more time to complete upgrades to clean up signal #27085
skip ‘should not see excessive Back-off restarting failed containers’ for e2e tests #27087
haproxy needs to request privilege escalation in order to work #27080
updates “managed cluster should report ready nodes the entire duration of the test run” #27077
skip etcd quorum probes failures when etcd revision changes #27072
don’t wait for SA token secrets #27081
Revert “Add e2e tests for ExternalIP Policy and AutoAssignCIDRs” #27075
Add restricted-v2 to the default RBAC rules for authenticated users #27071
Increase determinism when searching for prom service secret token #27073
improves etcdRevisionChangeAllowance calculates the number of etcd’s operator rollouts #27070
Include timestamp when reporting observed ReusedPodIP events. #27074
track pod IP re-use #27062
hack/verify-generated: Replace –quiet with –exit-code #27060
Bug 1992596 : e2e/cli: Migrate create.sh to Go tests #27049 force completes upgrade failure if operator failure #27058
Bug 2078528 : bump cluster-node-tuning-operator apirequests upper bound for OpenStack #27052 handle cases where the DNS querier pod isn’t yet running #27056
Add e2e tests for ExternalIP Policy and AutoAssignCIDRs #26894
tuning-cni: basic tests #26953
Sysctl: validate that setting a pod sysctl does not affect node and other pods #26940
the ‘should be scheduled on different nodes’ were only fixed in 4.11 and later #27053
Separate out ‘Back-off restarting failed container’ from pathological test #27047
Revert “Skip newly enabled networkpolicy tests on IPv6” #27045
Flake pod sandbox errors pinging container registry on azure. #26964
Ignore loki NetworkNotReady repeating events. #27051
Bug 2030972 : test/extended/util/openshift/clusterversionoperator: Survive API hiccups #27041 Bug 2077457 : Skip BeforeEach as well for the skipped HAProxy config manager test #27034 synthetic: cloud api quota synthetic test should always be present #27042
Remove fixed clusterIP service for ipv6 contexts #26895
loosen SCC capabilities check to allow stricter caps #27024
test/dns: add the bits to make the Restricted PodSecurityPolicy happy #27035
Disable FIPS disabled serving routes test on BM #27033
test/e2e/upgrade: Use PATCH instead of POST for ClusterVersion spec updates #27023
Sysctl tests: pod with sysctls not on whitelist should not start #26937
Bug 2075584 : Use substring match instead of exact match #27028 Switch to groupified APIs #27025
Dump imagestreams and buildconfigs on build imagechange trigger test failure #27019
Best matcher single node OVN #26929
: Separate pod network creation failure from others in sandbox creation… #27020
test/…/disruption: set pod security level centrally #27017
Switch to groupified APIs #27008
router: construct url with net.JoinHostPort #27015
Add exception for etcd guard pod readiness probe error events #27016
test/extended/*: set necessary pod security settings #27014
getArchitecture: Fix to work with Hypershift #27004
Bug 2072171 : Reenable the implementation for basic egressfw e2e CI test #26973 MGMT-9440 : Fix single node serial tests API crash #26904 skip tests for etcd leaders when etcd revisions change a lot #27009
Fix another issue with CVO upgrade ack timeout on metal. #27001
bump o/kube to get latest PSa test updates #27012
Bug 2031564 : Separate out test for ‘RequiredInstallerResourcesMissing secrets’ #26936 Bug 2060406 : bump apirequests upper bounds for GCP #27002 Bug 2072533 : synthetictests: skip “alert/Watchdog must have no gaps or changes” on SNO upgrades #26976 Bug 2074445 : exclude loki-promtail from duplicated events #27006 Fix up one more optional capabilities new-app test #27005
actually set default PSa labels if unset #27000
util/client.go: add method to specify pod security admission level #26938
Add test for validating related object references. #26921
correct pathological event detection #26994
prevent npe for old container status readiness #26996
Bug 2011895 : Add synthetic test for cloud API throttling #26559 router: fix all uses of Sprintf to build host:port for a URL #26983
prevent pending/firing alert overlap #26968
Skip newly enabled networkpolicy tests on IPv6 #26977
test: switch to testing CapBnd over CapInh #26960
remove wait for samples imagestreams, no longer needed #26992
Bug 2066865 : bump openshift/kubernetes #26969 test/extended: add/update OWNERS files for Prometheus #26910
test/extended/prometheus: Remove SDN/OVN-K alert rules #26687
Unrevert and fix for the HAProxy test #26980
Bump timeout for CVO to ack the upgrade generation. #26974
Bug 2066457 : don’t fail when a query returns warnings #26984 Bug 2072924 : increase the threshold on the number of telemetry series #26988 Update limits #26982
fix evaluation of deleted pods for pod sandbox test #26978
Revert “Fix HAProxy tests on FIPS properly” #26979
Revert “Add networking test for invalid external gateway” #26975
Revert “Implementation for basic egressfw e2e CI test” #26967
Bug 2067323 : extended/test/router: omit DNS managed conditions for shards #26949 Add networking test for invalid external gateway #26883
Bug 2060406 : test: bump apirequests upper bounds for VSphere and AWS single node #26962 test: update synthetic test node restart count #26948
bump: k8s.io/kubernetes #26955
Ignore FailedCreatePodSandBox event that is expected to happen #26966
add pod lifecycle intervals to separate pages #26908
Add missing operators from the known operators list #26963
Bug 2047913 : Fix HAProxy tests on FIPS properly #26803 Bump allowed watches for node-tuning-operator #26944
Migrate tests away from using samples-operator provided imagestreams #26913
Image registry redirect #26920
Bug 1996883 : increasing build config loglevel #26958 Use ServerGroupResources instead deprecated ServerResources #26956
Fix typo in OVN Kubernetes skipper #26950
Bug 1996883 : Increasing log level to support decrease in default buildah log level #26941 Implementation for basic egressfw e2e CI test #26934
Check token response error code #26926
Clarify that the image mirroring requirement applies to conformance tests only #26912
coarse serialization of storage tests #26933
Revert “bump: k8s.io/kubernetes” #26939
bump: k8s.io/kubernetes #26935
Flake on FailedCreatePodSandbox if missing ovn readiness file. #26932
Add pod securityContext sysctl whitelist tests #26809
Revert “Implementation for basic egressfw e2e CI test” #26931
Update where the canary test lists is retrieved from #26930
Implementation for basic egressfw e2e CI test #26865
Implementation for egress-router-cni e2e ci test #26875
Attempted fix for missing monitor events. #26862
JKNS-267 : minimize jenkins e2es (pipeline strategy verification only) #26914 Attempt multiple different token requests #26916
Simplify 26907 #26924
Bug 2034688 : allow Prometheus/Thanos to return 401 or 403 when the request isn’t authenticated #26695 Migrate builds tests away from using sample imagestreams since samples will be optional #26909
Update prometheus owners #26911
Pod scheduling tests improve pod deployment identification #26906
Add early test to check router pods are not on same node #26899
Give each interval chart a title #26896
Mark image pull from registry.redhat.io as flake to track but not fail #26897
Bug 1961233 : Add DNS availability upgrade test #26795 Revert “Disable intree vsphere tests” #26797
Bug 2026063 : build-quota test: fix cgroupv2 parsing holes exposed by buildah upgrade #26885 Bug 2057990 : Add debug info for signature test #26884 MGMT-9440 : Fix single node serial tests API crash. #26868 Bug 2060498 : only add failure when no event was found for the target revision #26880 Bug 2060406 : operators should not create watch channels very often: bump OpenStack monitoring operator #26877 Use common threshold constant as other event tests #26873
cleanup network policy ACL extended test #26876
add text to the timelines when you hover #26871
Make a test to specifically look for image pull backoff for registry.redhat.io #26858
Bug 2059299 : IBMCloud: Ignore CRB already exists #26864 Switch to batch/v1 CronJob #26867
Bug 2059277 : images/tests: yum update python3-six to workaround ART issue #26863 Increase scale test timeout to 30 minutes #26861
Fix ovnkube-node readiness test to include successes. #26860
Bz2054254 rearrange test cases #26857
Set ovnkube-node readiness failure to flake for now. #26855
Increase cluster-monitor-operator watch count threshold on single-node clusters #26685
allow slow kubelet updates for static pods, but still fail if they never succeed #26852
OWNERS: Declare Bugzilla component #26368
vsphere is firing this alert/VSphereOpenshiftNodeHealthFail and it is hiding other alerts #26850
Updating openshift-enterprise-tests images to be consistent with ART #26804
update alert thresholds after extending static pod install duration #26844
ip reconciler ignore #26842
Bug 2049117 : Reenable wait on worker deletion and increase serial test timeout #26810 Bug 2053582 : fail on static pod lifecycle failures #26837 Allow a single test to override suite timeout #26833
Bug 2053312 : requestheader test must wait for authentication operator to settle after config update #26834 Bug 2053143 : allow inexact matches for disruption data #26831 Break out test for OSUpdateStaged event with no OSUpdateStarted. #26824
add job type key to the error we track for statistical jobs #26823
baremetal: add test for preprovisioning images #26780
Bug 2045590 : Alibaba: enable init for alibabacloud provider #26818 Revert “Flake failed sandboxes from bug in new guard pods” #26817
Debug missing OSUpdateStarted events #26798
Delete extra workers before running metal high availability test #26813
images: update registry to 2.8.0-beta.1 #26811
Bug 2044824 : Update k8s vendoring #26805 Bug 2050345 : update p99 values for disruption and alerts #26815 Bug 2047911 : IBMCloud: Concurrent CRB create #26806 Only run parallel tests in the canary job since it runs in parallel #26812
Fix broken console disruption test. #26808
Add baremetal high availability tests #26569
Bug 2047362 : Prometheus check targets endpoint #26793 Verify Builds with CSI Volume Sources #26791
Bug 2047790 : Skip some HAProxy tests on FIPS #26800 don’t double report early alert failures #26796
Full changelog
OCPBUGS-27100 : Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #137 OCPBUGS-21135 : Bump golang.org/x/net to v0.17.0 #126 OCPBUGS-4276 : Update exporter-toolkit to 0.7.3 #111 Updating thanos images to be consistent with ART #101
Bump openshift/thanos to v0.28.1 #91
Bump openshift/thanos to v0.28.0 #90
OWNERS: Add Joao and myself, and move former team members to emeritus #88
Bump openshift/thanos to v0.27.0 #85
Bug 2067877 : [bot] Bump openshift/thanos to v0.26.0 #83 Bump openshift/thanos to v0.25.2 #80
Bump openshift/thanos to v0.25.1 #79
Bump openshift/thanos to v0.25.0 #78
Bump openshift/thanos to v0.24.0 #76
Updating thanos images to be consistent with ART #77
Full changelog
OCPBUGS-21493 : Bump golang.org/x/net to v0.18.0 #56 OCPBUGS-1413 : Rebase 13.10.2022 k8s 1.25 #28 Updating ose-vsphere-cloud-controller-manager images to be consistent with ART #25
fix .dockerignore to satisfy OCP specific requirements #24
Add OCP specific exclusion to the .dockerignore #23
Updating ose-vsphere-cloud-controller-manager images to be consistent with ART #22
Updating ose-vsphere-cloud-controller-manager images to be consistent with ART #18
Bug 2087042 : Rebase cloud-provider-vsphere 15.06.2022 #20 Full changelog
OCPBUGS-20417 : syncer: fix nil pointer dereference in log message #98 OCPBUGS-21552 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #92 OCPBUGS-14312 : Update 4.12 against v2.7.1 #81 OCPBUGS-7426 : Add migrationDataStore field #59 OCPBUGS-6936 : fix for nil user session (#1859) #57 Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #48
Updating vmware-vsphere-syncer images to be consistent with ART #47
Rebase to v2.6.1 #45
UPSTREAM: <carry>: Remove .github files #46
STOR-863 : Rebase to v2.6.0 #44 Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #43
Updating vmware-vsphere-syncer images to be consistent with ART #42
Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #41
Updating vmware-vsphere-syncer images to be consistent with ART #40
Bug 2074294 : UPSTREAM: 1706: Update golang.org/x/crypto for CVE-2022-27191 #39 Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #38
Updating vmware-vsphere-syncer images to be consistent with ART #37
Bug 2071019 : Rebase against v2.5.1 #36 Bug 2029835 : Revert “Merge pull request #30 from bertinatto/rebase-v2.4.1” #35 Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #33
Updating vmware-vsphere-syncer images to be consistent with ART #32
Bug 2029835 : UPSTREAM: 1468: Fixed parsing of /proc/self/mountinfo with spaces #34 Full changelog
OCPBUGS-21574 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131 OCPBUGS-10812 : Add build number to metrics #104 OCPBUGS-6788 : Derive the fully qualified vSphere username when checking permissions #98 OCPBUGS-5509 : Add a count of zonal volumes #97 OCPBUGS-3442 : Lets remove datastore length checks for now #92 OCPBUGS-1361 : Fix propagation of check errors to Available condition #90 OCPBUGS-926 : Resolve situations when an existing folder or resource pool is used at install-time. #87 STOR-858 : Bump github.com/openshift/* and k8s.io/* #88 Updating vsphere-problem-detector images to be consistent with ART #89
validate vmware user privileges #56
Updating vsphere-problem-detector images to be consistent with ART #86
Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #84 Updating vsphere-problem-detector images to be consistent with ART #85
Bug 2058217 : fix docs for rwx volumes #81 Bug 2042446 : Fix stale metrics by explicitly zeroed out old metrics #79 Bug 2042446 : Fix stale metric collection #77 Bug 2055729 : change NodePerfCheck criteria to be based on average latency #75 Bug 2051881 : Dont forget to register metrics before emitting #73 Updating vsphere-problem-detector images to be consistent with ART #72
Full changelog
Source code for this page located on github