Back to index 
Download the installer  for your operating system or run 
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.47-x86_64 Team Approvals: 
Tests:
Blocking jobs Informing jobs Upgrades from:
Untested upgrades: 
4.11.14 , 
4.11.16 , 
4.11.17 , 
4.11.18 , 
4.11.19 , 
4.11.20 , 
4.11.21 , 
4.11.22 , 
4.11.23 , 
4.11.24 , 
4.11.25 , 
4.11.26 , 
4.11.27 , 
4.11.29 , 
4.11.30 , 
4.11.31 , 
4.11.33 , 
4.11.34 , 
4.11.35 , 
4.11.36 , 
4.11.37 , 
4.11.38 , 
4.11.39 , 
4.11.40 , 
4.11.42 , 
4.11.43 , 
4.11.44 , 
4.11.45 , 
4.11.46 , 
4.11.47 , 
4.11.48 , 
4.11.49 , 
4.11.50 , 
4.11.51 , 
4.11.52 , 
4.11.53 , 
4.12.10 , 
4.12.11 , 
4.12.12 , 
4.12.13 , 
4.12.14 , 
4.12.15 , 
4.12.16 , 
4.12.17 , 
4.12.18 , 
4.12.19 , 
4.12.20 , 
4.12.21 , 
4.12.22 , 
4.12.23 , 
4.12.24 , 
4.12.25 , 
4.12.26 , 
4.12.28 , 
4.12.29 , 
4.12.3 , 
4.12.30 , 
4.12.31 , 
4.12.33 , 
4.12.34 , 
4.12.35 , 
4.12.36 , 
4.12.37 , 
4.12.38 , 
4.12.39 , 
4.12.4 , 
4.12.40 , 
4.12.41 , 
4.12.42 , 
4.12.43 , 
4.12.5 , 
4.12.6 , 
4.12.8 , 
4.12.9 Upgrades to:
 
Loading changelog, this may take a while ...
Created: 2024-01-11 19:16:08 +0000 UTC
Image Digest: sha256:fcc9920ba10ebb02c69bdd9cd597273260eeec1b22e9ef9986a47f4874a21253
Release 4.12.47 was created from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2024-01-11-070858 
Components 
New images 
Rebuilt images without code change 
MGMT-11753 : moving CI Dockerfiles to the repo #4386  
Bump mockgen to prevent dependencies removal #4321  
NO-ISSUE: do not print error message when docker doesn’t exist #4129  
And 365 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
MGMT-13586 : Wait for ETCD Bootstrap to complete (#670) (#726) #670  
OCPBUGS-7149 : IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) #631  
Remove jira tickets prefix requirements (#595) #595  
Updating ose-agent-installer-csr-approver images to be consistent with ART (#535) #535  
MGMT-12305 : Fix a vulnerability which could cause a denial of service on version v0.3.7 of golang.org/x/text/language. (#565) #565  
Updating ose-agent-installer-orchestrator images to be consistent with ART (#557) #557  
NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.1 to 0.24.2 (#564) #564  
NO-ISSUE: Bump github.com/onsi/gomega from 1.21.1 to 1.22.1 (#561) #561  
NO-ISSUE: Bump github.com/onsi/gomega from 1.20.2 to 1.21.1 (#559) #559  
MGMT-12077 : Assisted Installer doesn’t remove a PV if it’s not attached to a volume group (#558) #558  
MGMT-12115 : Fix wrong formatting in Controller Pod definition (#553) #553  
NO-ISSUE: Remove unused function RemoveLV (#552) #552  
MGMT-12115 : assisted-installer-controller Job does not apply Additional Root CA Trust Bundle (#551) #551  
Update approvers and reviewers lists (#550) #550  
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.0 to 0.17.1 (#546) #546  
MGMT-12055 : Assisted controller should log if one of the nodes changed it’s ip after reboot (#545) #545  
MGMT-12070 : Assisted controller should not set status done on host more than once (#543) #543  
NO-ISSUE: add Adrien as a maintainer (#544) #544  
MGMT-12057 : Remove enablement of router access logs in controller, not needed anymore (#542) #542  
MGMT-12038 : Controller should upload logs from file on summary logs (#540) #540  
NO-ISSUE: print boot order after setting it (#539) #539  
Updating ose-agent-installer-orchestrator images to be consistent with ART (#496) #496  
MGMT-11348 : Changes for upstream multi-arch support (#536) #536  
NO-ISSUE: Bump github.com/onsi/gomega from 1.20.1 to 1.20.2 (#538) #538  
MGMT-11565 : Add handleOLMEarlySetupBug when waiting for CSV (#531) #531  
NO-ISSUE: Bump github.com/operator-framework/api from 0.16.0 to 0.17.0 (#534) #534  
NO-ISSUE: Bump github.com/onsi/gomega from 1.20.0 to 1.20.1 (#533) #533  
NO-ISSUE: Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 (#509) #509  
MGMT-11695 : Disk cleanup does not clean all volume groups in a physical volume. (#518) #518  
MGMT-11170 : Report the caller in the log. (#527) #527  
NO-ISSUE: Bump k8s.io/client-go from 0.24.2 to 0.24.4 (#523) #523  
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager (#525) #525  
NO-ISSUE: Bump github.com/go-openapi/swag from 0.22.0 to 0.22.3 (#521) #521  
MGMT-10085 : Get real filepath of RAID device (#517) #517  
NO-ISSUE: Bump github.com/go-openapi/swag from 0.21.1 to 0.22.0 (#515) #515  
MGMT-11100 : changing url for router status check from console to canary (#512) #512  
MGMT-11365 : fix flaky installation of golangci-lint (#510) #510  
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#508) #508  
NO-ISSUE: Add jhernand to OWNERS_ALIASES (#507) #507  
MGMT-11106 : Writing controller logs to file in order to be able to send (#506) #506  
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.2 to 0.21.3 (#504) #504  
NO-ISSUE: Bump k8s.io/apimachinery from 0.24.2 to 0.24.3 (#502) #502  
BZ-2107887 : misleading configuring state when installing with assisted-installer (#501) #501  
MGMT-8855 : repeated event messages in wait for olm operators due to (#499) #499  
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.2 to 0.12.3 (#498) #498  
MGMT-11100 : Adding get router status logic in case of sno failure. (#497) #497  
MGMT-11063 : assisted-installer isn’t sending the host logs in case the installation was successful and cacert was  added (#495) #495  
NO-ISSUE: add stage info in case converged flow is enabled (#493) #493  
NO-ISSUE: Add @rccrdpccl as approver (#492) #492  
NO-ISSUE: Bump github.com/hashicorp/go-version from 1.5.0 to 1.6.0 (#491) #491  
MGMT-10660 : Refactor assisted-installer ops code to allow writing unitests (#488) #488  
NO-ISSUE: In case must-gather upload failed but logs were gathered (#487) #487  
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.1 to 0.12.2 (#489) #489  
Full changelog  
 
Update README.md #395  
And 51 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-21313 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38  
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #17  
OCPBUGS-6493 : UPSTREAM: 682: fix gofmt #22  
UPSTREAM: <carry>: Remove .github files #16  
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #15  
Full changelog  
 
OCPBUGS-21404 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #66  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #58  
OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #38  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #36  
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #37  
Bug 2114009 : Add VolumeSnapshotClassController #35  
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #34  
Full changelog  
 
OCPBUGS-20919 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #241  
OCPBUGS-14281 : Volume unmount repeats after successful unmount, preventing pod delete #226  
UPSTREAM: <carry>: Remove .github files #212  
STOR-860 : Rebase to v1.11.4 for OCP 4.12 #206  
OCPBUGS-1574 : UPSTREAM: 1398: Add resolver to handle custom endpoints #208  
Fix older dockerfile #207  
Updating ose-aws-ebs-csi-driver images to be consistent with ART #202  
Full changelog  
 
OCPBUGS-21018 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #282  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #265  
OCPBUGS-13721 : assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #230  
4.12: OCPBUGS-10646: 4.12 hypershift set control plane #208  
OCPBUGS-7892 : do not inject-proxy when deploying in hypershift control plane #187  
OCPBUGS-4251 : Add HyperShift specific priorityClass #170  
OCPBUGS-4527 : hypershift: use correct kubeconfig secret #171  
OCPBUGS-1904 : Don’t deploy VolumeSnapshotClass in static controller #166  
STOR-1040 : port to hypershift #159  
OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #164  
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #162  
Reformat for go 1.19 #163  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #161  
STOR-764 : Change the default StorageClass to the CSI one (AWS) #160  
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #158  
Full changelog  
 
OCPBUGS-21562 : Update golang.org/x/net to v0.17.0 #90  
OCPCLOUD-1131 : Implement fetching instance types from API #53  
Updating ose-machine-api-provider-aws images to be consistent with ART #45  
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #52  
Update Machine API Operator dependency #51  
Update Machine API operator dependency #49  
pkg/actuators/machineset/controller: Fix %s in scale-from-zero logging #43  
Bug 2106733 : Fix panic when accessing nil machine annotations map #46  
Bug 2060068 : check securityGroupIDs for emptiness #44  
Full changelog  
 
OCPBUGS-21312 : Upgrade golang/x/net for CVE-2023-39325 (4.12) #185  
NO-ISSUE: Sync OWNERS with team members #178  
NO-ISSUE: snyk: exclude vendor/ #174  
Update OWNERS #157  
Updating ose-aws-pod-identity-webhook images to be consistent with ART #156  
Updating ose-aws-pod-identity-webhook images to be consistent with ART #155  
Full changelog  
 
OCPBUGS-21401 : Bump golang.org/x/net to v0.18.0 #95  
OCPBUGS-22832 : UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #91  
OCPBUGS-17159 : Increase service idle max timeout to 100 minutes #82  
OCPBUGS-2076 : Replace k8s.io/cloud-provider with openshift’s version #44  
Updating ose-azure-cloud-controller-manager images to be consistent with ART #41  
Updating ose-azure-cloud-node-manager images to be consistent with ART #40  
OCPBUGS-1413 : Rebase cloud-provider-azure 29.09.2022 #39  
fix .dockerignore to satisfy OCP specific requirements #37  
Replace .dockerignore file with the OCP specific one #36  
Updating ose-azure-cloud-node-manager images to be consistent with ART #34  
Updating ose-azure-cloud-controller-manager images to be consistent with ART #35  
Full changelog  
 
OCPBUGS-22941 : UPSTREAM: 1755: fix: detach disk failure when there is throttling #62  
OCPBUGS-22832 : UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition #60  
OCPBUGS-20675 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #56  
Updating ose-azure-disk-csi-driver images to be consistent with ART #34  
UPSTREAM: <carry>: Remove .github files #33  
STOR-864 : Rebase to v1.22.0 #32  
Bug 2111811 : UPSTREAM 1367, 1409: Update max data disk count table #29  
Updating ose-azure-disk-csi-driver images to be consistent with ART #28  
Full changelog  
 
OCPBUGS-20749 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #103  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #95  
OCPBUGS-7885 : Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70  
OCPBUGS-3425 : Only deploy VolumeSnapshotClass if CRD exists #59  
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #55  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #53  
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #51  
Full changelog  
 
OCPBUGS-20842 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39  
STOR-865 : Rebase to v1.21.0 for OCP 4.12 #17  
Updating azure-file-csi-driver images to be consistent with ART #19  
UPSTREAM: <carry>: Remove .github files #18  
Updating azure-file-csi-driver images to be consistent with ART #16  
Full changelog  
 
OCPBUGS-20946 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #78  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #71  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #37  
Updating azure-file-csi-driver-operator images to be consistent with ART #38  
Bug 2080449 : disable VHD disk feature #33  
Updating azure-file-csi-driver-operator images to be consistent with ART #34  
Full changelog  
 
OCPBUGS-23184 : azure: validation: validate defaultMachinePlatform #7709  
OCPBUGS-25476 : destroy: gcp: fix destroying regional disks #7845  
OCPBUGS-23302 : images: installer: add xz to the container #7726  
OCPBUGS-23379 : images: update govc image in upi-installer #7739  
OCPBUGS-22116 : Add KMS encryption keys if provided #7769  
OCPBUGS-23329 : Specify google cloud CLI to version 447.0.0 #7731  
OCPBUGS-22933 : [release-4.12]: vsphere: fix validation of CPUS and CoresPerSocket #7677  
OCPBUGS-13288 : use python3 for cloud sdk #7170  
OCPBUGS-18645 : new Aws secret regions support #7473  
OCPBUGS-22288 : Don’t log password values #7627  
OCPBUGS-18644 : terraform: aws: secret regions now support ALIAS record #7472  
OCPBUGS-17651 : Validate that the rendevousIP is assigned to a master #7416  
OCPBUGS-20145 : [release-4.12] Use updated ansible-core for Openstack image #7560  
OCPBUGS-18646 : Allow destroy for C2S isolated (us-iso and us-isob) partitions #7474  
OCPBUGS-10992 : bootstrap-pivot: skip pivot in SCOS Live ISO #7035  
CORS-2792 : AWS Shared VPC Backport [release-4.12] #7435  
OCPBUGS-18320 : CORS-2445: GCP: Add osImage to the install config #7454  
OCPBUGS-17404 : backport openstack UPI for ansible 2.10 #7399  
OCPBUGS-16778 : bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 #7420  
OCPBUGS-17467 : Allow override of networkType #7406  
OCPBUGS-17174 : Set AdditionalTrustBundle in override when mirroring not enabled #7386  
OCPBUGS-16382 : azure: skip LB creation when not needed #7342  
OCPBUGS-14868 : Shorten SNO installation duration by releasing CPC lease #7242  
OCPBUGS-14495 : Support /dev/disk/by-path root device hints #7227  
OCPBUGS-16151 : ic: azure: validate diskTypes in AzureStack #7331  
OCPBUGS-11199 : azure: upi: use Image Gallery in ARM templates #7054  
OCPBUGS-13940 : bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 #7249  
OCPBUGS-14664 : Shorten SNO installation duration by releasing CVO lease #7235  
OCPBUGS-7400 : Check for AWS STS installation before trying to get all IAM Roles #7175  
OCPBUGS-13819 : Bootstrap on aws should have same metadata service type as on other nodes #7196  
OCPBUGS-12202 : Relax vsphere, nutanix VIP validation #7116  
OCPBUGS-7551 : vSphere - ignore all bootstrap disk changes #6860  
OCPBUGS-14014 : Do not always output warning msg when releaseImage is digest #7202  
OCPBUGS-13052 : bump RHCOS 4.12 bootimage metadata #7164  
OCPBUGS-12956 : openstack: Add netcat to the Installer image #7148  
OCPBUGS-12749 : [Alibaba] update the bandwidth value of EIP #7131  
OCPBUGS-7400 : Check for AWS STS installation before trying to get all IAM Roles #7141  
OCPBUGS-11360 : Use 100 GB as minimum disk size in validations #7065  
OCPBUGS-11662 : AWS - Remove ACLs from s3 ign #7084  
OCPBUGS-11208 : GCP: add europe-west12 region to the survey as supported region #7055  
OCPBUGS-11108 : Kubelet Client Cert should include system:serviceaccounts group #7050  
OCPBUGS-8384 : Specify filename for default registries.conf #6941  
OCPBUGS-10904 : IBMCloud: Fix SSH Private bootstrap #7028  
OCPBUGS-10905 : IBMCloud set dnsrecords offset #7029  
OCPBUGS-10740 : bump RHCOS 4.12 bootimage metadata #7019  
OCPBUGS-7481 : Fix file check for loading openshift manifests #6907  
OCPBUGS-10497 : [release-4.12] aws: bump aws-sdk-go version #6985  
OCPBUGS-10439 : Sort userTags in Machine and Machineset manifests #6984  
OCPBUGS-7469 : [release-4.12] GCP XPN Featuregates #6851  
OCPBUGS-7063 : vSphere - Remove regexs in terraform ova import #6868  
OCPBUGS-8658 : Pass Capabilites from install-config to cluster #6947  
OCPBUGS-7594 : fully qualified username must be provided #6864  
OCPBUGS-7746 : Convert platform type for AgentClusterInstall #6878  
OCPBUGS-8015 : make VIP 168.63.129.16 noProxy in all clouds except Public #6909  
OCPBUGS-6087 : Warn if agent assets detected when using non-agent waitfor #6788  
OCPBUGS-7607 : IBMCloud: Handle COS reclamations #6867  
OCPBUGS-7529 : bump RHCOS 4.12 bootimage metadata #6873  
OCPBUGS-7521 : Update AgentConfig template #6857  
OCPBUGS-5992 : azure: validate Windows-only VM types #6780  
OCPBUGS-6991 : Don’t require vSphere details for agent installer #6826  
OCPBUGS-6807 : Check platform baremetal settings against default values #6815  
OCPBUGS-7103 : Set the configured proxy settings for agent installer #6830  
OCPBUGS-7131 : bootstrap: set 0644 mode for registries.conf #6804  
OCPBUGS-5960 : bump RHCOS 4.12 bootimage metadata #6791  
OCPBUGS-5996 : vsphere: set default resource pool when missing failure domain topology #6781  
OCPBUGS-5667 : CVE-2021-4238: goutils: update for randomness fix #6764  
OCPBUGS-5782 : CVE-2021-4235: Denial of Service in go-yaml #6769  
OCPBUGS-6052 : validate additional confidential VM types #6785  
OCPBUGS-4895 : Set ip=dhcp,dhcp6 for master nodes on dualstack #6706  
OCPBUGS-6015 : fail to create install-config.yaml as apiVIP and ingress VIP are not in machine networks #6783  
OCPBUGS-5844 : Update FCOS to latest 37.20221127.3.0 stable #6773  
OCPBUGS-5764 : Expose Azure useImageGallery parameter in the MachineSets() call #6753  
OCPBUGS-4460 : hold bootkube service until bootstrap has pivoted #6661  
OCPBUGS-5513 : Update Azure SDK to v63.1.0+incompatible [release-4.12] #6751  
OCPBUGS-4649 : Report agent installation problems on the console #6680  
OCPBUGS-5455 : Remove order dependency for agent CLI string #6748  
OCPBUGS-4962 : Improve error reporting from agent wait-for install-complete #6742  
OCPBUGS-4886 : Switch back to gp2 ebs volume type for bootstrap instance #6705  
OCPBUGS-5190 : baremetal: Extra time for provisioning interface #6732  
OCPBUGS-4943 : Wait longer for VM to obtain IP from DHCP in PowerVS #6709  
OCPBUGS-3899 : [Alibaba] fix the creation of public record #6605  
OCPBUGS-4962 : Wait longer for baremetal #6713  
OCPBUGS-5035 : ose-installer-container: vault: insufficient certificate revocation list checking #6722  
OCPBUGS-4869 : aws: destroy: delete ELB listeners #6702  
OCPBUGS-5019 : OpenStack: Force JSON content-type in Swift object listing #6718  
OCPBUGS-2997 : bump RHCOS 4.12 bootimage metadata #6704  
OCPBUGS-3890 : IBMCloud: Confirm Zones and BYON Subnets #6603  
OCPBUGS-3639 : Azure: Set appropriate architecture for gen v1 image #6588  
OCPBUGS-4698 : Check nmstateconfig content in agent-config.yaml #6687  
OCPBUGS-4547 : out-of-bounds read in golang.org/x/text/language leads to DoS #6650  
OCPBUGS-4660 : Fix missing debug messages when getting baseISO #6682  
Alibaba: add the tags of the machine nodes #6667  
image: Updating installer images to be consistent with ART #6658  
OCPBUGS-4506 : Enable CVO unmanage overrides in bootstrap-in-place installations #6664  
OCPBUGS-4457 : Fix return value from execute() #6659  
OCPBUGS-4342 : data: azurerm: restore RHCOS SA access configuration #6645  
OCPBUGS-3249 : update golang.org/x/crypto to address security vulnerabilities #6631  
OCPBUGS-4267 : Azure Stack: use managed images for compute nodes #6639  
OCPBUGS-4308 : Redact pull secret from agent-gather #6640  
OCPBUGS-4068 : (Agent) Do not require host data in platform baremetal section in installconfig #6623  
OCPBUGS-4064 : Restart create-cluster-and-infraenv.service if it fails #6622  
OCPBUGS-3657 : Uplift terraform-provider-ironic to 0.3.0 #6592  
OCPBUGS-4063 : OpenStack: Force JSON content-type in Swift #6621  
OCPBUGS-3055 : add bootstrap configmap during the SNO reboot #6555  
OCPBUGS-3523 : Pass FeatureSet to cluster config render #6590  
OCPBUGS-3406 : Use project after creation #6575  
OCPBUGS-3307 : gcp: fail during validation if service usage is not enabled #6565  
OCPBUGS-3515 : (AGENT) only support amd64 archs #6580  
OCPBUGS-3520 : Automatically retry install #6582  
OCPBUGS-3519 : Always use first matching mirror in assisted-service #6581  
OCPBUGS-3459 : Always add router CAs to kubeconfig, even if console is not available #6578  
OCPBUGS-3250 : azure: Fix client certs authentication #6561  
OCPBUGS-3398 : Fix cluster wide proxy #6587  
OCPBUGS-3366 : Set PublicContainerRegistries for entries in mirror #6568  
OCPBUGS-3306 : agent ased installation fix for dual stack vips #6564  
OCPBUGS-3095 : Power VS Check for existing DNS permitted network and public gateway #6550  
OCPBUGS-3035 : support multiple documents in the same extra manifest file #6549  
OCPBUGS-3343 : [vsphere-zones] Fix user folders #6566  
OCPBUGS-3263 : Static linking the terraform and providers binaries #6562  
OCPBUGS-2984 : Azure: Fix DiskEncryptionSet regex validation #6538  
OCPBUGS-3028 : Use result from List function after checking error #6543  
AGENT-348 : Warn when information in install-config is ignored #6523  
OCPBUGS-2837 : Reduce debug logs in agent wait-for commands #6520  
Fix unexpected behavior from merging #6470 and #6500 #6526  
AGENT-390 : Include CPU Architecture in ISO filename #6485  
docs: feature sets #6506  
Agent-321: Cluster and Host validations rework #6500  
OCPBUGS-2327 : Add validation for releaseImage and registry.conf #6423  
OCPBUGS-2086 : Detect failure in wait-for on transition back to ready #6470  
OCPBUGS-2627 : agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495  
OCPBUGS-2338 : Don’t use error messages as default values #6486  
OCPBUGS-1824 : enhance agent systemd service dependency #6408  
OCPBUGS-1704 : Service Usage API is required, not optional #6504  
Revert “create: add check for cluster operator stability” #6503  
OCPBUGS-2301 : Search Network Project For resources #6499  
OCPBUGS-2436 : Revert “Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml”” and fix OCPBUGS-2436 #6491  
OCPBUGS-2174 : fix metadata tags not supported in certain regions #6475  
Add initial support for OKD/SCOS #6443  
Updating golang version to fix gofmt issues #6484  
Bug 2117537 : validation rule for invalid rendezvousIP in AgentConfig #6474  
create: add check for cluster operator stability #6124  
Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml” #6490  
Add LB Type in the infrastructure cluster object via install-config yaml #6478  
Bug 2059491 : [Alibaba] fix the format of Name #5668  
AGENT-284 : Allow user to choose platform type #6438  
OCPBUGS-2262 : Update gcp explain for DNS zones #6483  
OCPBUGS-1941 : bump RHCOS 4.12 bootimage metadata #6452  
Bug 2072202 : Check for api and api-int resolution during cluster install #5816  
OCPBUGS-2259 : Fix soft-anti-affinity known issue #6479  
Removing jstuever from OWNERS #6480  
OCPBUGS-1881 : vsphere/destroy: improve logs when folder is not empty #6456  
Adding “syd05” as a choice for zones in PowerVS #6468  
OCPBUGS-1856 : IBMCloud: Allow traffic to kube-api-lb #6458  
update to release.openshift.io/feature-set to match OCP 4.12 #6476  
AGENT-347 : generate OS_IMAGES dynamically #6441  
OCPBUGS-1900 : Avoid SNO bootstrap jsonpath error #6463  
OCPBUGS-1698 : multi-zone network slice validation #6422  
OCPBUGSM-47893 : added validation rule for invalid mac address in AgentConfig #6473  
populate vSphere infrastructure spec #6457  
OCPBUGS-1896 : Validate Credentials Mode After Install Config step #6453  
OCPBUGS-2029 : Fix agent installation InstallConfig proxy processing #6461  
Add docs about IPv6 on the additional Networks #6435  
AGENT-375 : generate FIPS annotation for ACI #6467  
AGENT-349 : Allow console login to Agent ISO #6464  
OCPBUGS-1913 : Agent Installer: Do not fail on deprecated apiVip and ingressVip values #6462  
Power VS: Disconnected cluster support #6347  
azure: create bootimages using image gallery #6304  
CORS 2046: GCP Add base domain validation when DNS zone is specified #6300  
Fixes tested_instance_types_aarch64.md #6451  
pkg/types: add feature set support #6336  
pkg/asset/releaseimage/pullspec: Include override pullspec in log message #6460  
Bug 2104997 : Add additional fields to proxy manifest #6374  
OCPBUGS-527 : Improve error message in case of failure during the agent image generation #6436  
AGENT-271 : Generate kubeadmin-password with ISO #6313  
AWS: destroy: move helper functions to their own file #6131  
AGENT-369 : SNO validation #6444  
Add host-config status to agent-gather #6442  
AGENT-321 : Move validation failures to debug log level #6446  
CORS-2073 : Remove terraform provider “random” #6387  
Increase start timeouts for assisted services #6445  
OCPBUGS-891 : aws: add explicit EIP dependency for nat gw #6379  
images: UPI: update gcloud install on rhel8 container #6158  
OCPBUGS-1490 : [vsphere-zones] Handle no set zones #6390  
powervs: introduce manifest for OVNKubernetes configuration #6405  
Power VS: Enable IBM DNS service for private cluster support #6228  
AGENT-264 : validate agent-config macs #6434  
Ensure installer created ControlPlaneMachineSets are active on install #6425  
AGENT-330 : Add disconnected instructions to MCE integration doc #6424  
OCPBUGS-561 : bump RHCOS 4.12 bootimage metadata #6403  
Remove extra blank line in DHCP debugging #6439  
Change PowerVS default machine CIDR #6428  
Change error on execute() to a debug message #6427  
fix agent-config-template emitted by agent create #6306  
CORS 2040: [gcp] Adding Public and Private Managed zones #6288  
Bug 2116904 : Base generated NMStateConfig on InstallConfig name #6244  
AGENT-354 : script for gathering install data #6402  
AGENT-364 : Validate  network type for SNO clusters #6419  
cleanup unused types and constants after platform spec refactor #6370  
AGENT-351 : Add MachineNetwork to agent-cluster-install for dual stack #6364  
AGENT-319 : Set agent-config version to v1beta1 #6416  
OCPBUGS-816 : Check that cached base ISP matches hash in release payload #6318  
AGENT-365 : Set install invoker to “agent-installer” #6418  
Bug 2055247 : pkg/asset/installconfig/azure: standardDDv5Family is not currently supported #6203  
Verifying yq is installed properly in libvirt installer containers #6319  
Agent installer: try to make systemd services more robust #6312  
OCPBUGSM-47737 : Do not enable pre-network-manager-config.service #6323  
Add documentation for agent networking #6400  
vsphere: prevent duplicate validation check in multi-zone #6398  
AGENT-288 Log rendezvous host IP when creating agent ISO #6393  
AGENT-309 Display the rendezvous IP in motd and issue #6386  
Agent: Don’t pass AdminKubeConfigClientCertKey #6373  
hack: Use golang-1.16 image of origin-release #6367  
OCPBUGS-1231 : disconnected machine-os-images info #6339  
AGENT-325 Set NetworkType in AgentClusterInstall #6287  
Bug 2094716 : docs: fully air-gapped AWS IPI install #6076  
OCPBUGS-1489 : [vsphere] Loop over all folders for destroy #6378  
AWS: resolve subnet-related FIXMEs #6140  
go getter update for terraform & terraform providers #6352  
GCP: Add me-west1 region #6359  
aws: replace deprecated object in terraform config #6383  
powervs-delete-named-dhcp #6365  
azure: validation: avoid specifying capabilities twice #5952  
CORS-2280 : IBMCloud: Add DNS Record for internal public traffic #6375  
OCPBUGS-729 : vSphere 6.7u3 failing privilege validation #6293  
Agent: Increase bootstrap-complete timeout #6384  
aws user tags: set limit == openshift/api #6368  
OCPBUGS-927 : azure: add sleep between zone and link creation #6349  
Update power-go-client #6229  
Fix generating Machine objects for PowerVS #6366  
AGENT-328 : Add documentation for agent mce integration #6358  
aws: allow clusters with public only subnets #6342  
AWS UPI docs: remove control plane machineset #6346  
OCPBUGS-705 : vSphere privilege checking failing when providing user-defined folder and/or resource pool #6281  
GCP: allow environmental authentication #6330  
AGENT: add ipv6 support #6328  
OCPBUGS-1234 : [CFE-580] Fixed error condition for user tag validation #6356  
OCPBUGS-717 : Upgrade python3.7 to 3.8 for AWS UPI #6270  
OCPBUGS-963 : OpenStack: Lift validation for 14 chars cluster names #6309  
OCPBUGS-1234 : [CFE-580] Extend user tags limit to 40 based on AWS limits #6345  
OCPBUGS-1226 : OpenStack UPI: Create server group for Computes #6340  
Power VS: use the new name field for the dhcp nw #6294  
Add AWS r6i into tested instance types table #6337  
vsphere zonal: platform spec and terraform updates #6329  
CORS-2280 : IBMCloud: Add DNS Service permitted VPC #6325  
CORS-2280 : IBMCloud: Add DNS Service destroy #6321  
OCPBUGSM-47740 : No networkconfig needed with DHCP agent config #6317  
azure: add support for arm64 instances (Dps_v5 instances) #6298  
azure: Add client certification to terraform #6250  
pkg/asset/ignition/bootstrap/cvoignore: Add group/kind/name(space) collision detection #6247  
Add additionalTrustBundlePolicy field to allow CA bundle propagation #6232  
OCPBUGS-1247 : Restrict CPMS from being created with single node clusters #6331  
GCP: Add createFirewallRules parameter to installconfig. #6338  
CORS-2043 : GCP: Passsthrough installer service account to Terraform r… #6326  
Bump Nutanix Prism Go Client dep to c8a2536 to include refactors. #6308  
OCPBUGS-927 : Add depends to enforce order for azure terraform dependencies #6311  
vSphere: Zonal Terraform #6064  
Terraform go 1.18 #6257  
Revert “AWS: Create ControlPlaneMachineSet CRDs” #6324  
OCPBUGS-302 : bootstrap gather: fix panic when platform is “none” #6243  
Add bind-utils in upi installer image #6277  
download ‘aliyun’ #6265  
AGENT-308 : Add 4.12 to OS_IMAGES #6315  
OCPBUGS-889 : bump default channel to stable-4.12 #6302  
vSphere: Add the ability to attach a tag to a mob #5357  
Power VS: Machine CIDR #6264  
AGENT-318 : Merge agent-based installer #6263  
CORS-2280 : IBMCloud: Add TF support for private DNS #6282  
vsphere: error checking while creating vsphere clients #6305  
Correct the GCP machine series name #6296  
add bind config for PowerVS publish==internal IPI #6227  
Bug 2084471 : validate baremetal hosts names are lowercase RFC 1123 #6112  
terraform: azurerm bump provider to v3.19.1 #6262  
Power VS: Enable global routing for cloud connection and specify dns #6289  
fix check for control plane suitability for default zones #6295  
Bug 2070744 : Fix infinite loop when failing to untag resources #5995  
AWS: Create ControlPlaneMachineSet CRDs #6172  
Add dual stack API & Ingress VIP support for on-prem platforms #5798  
OWNER_ALIASES: remove Saqib Ali from the coreos approvers and reviewers #6291  
gcp: machines to use networkProjectID when defined #6284  
Bump FCOS to latest stable #6290  
Switch delete ordering of CloudConnect and VPCs #6280  
gcp: specify network_project_id for network and subnets #6283  
Bug 2117439 : Azure masters should publish on an internal load balancer #6230  
Bug OCPBUGS-164: OpenStack: Update Kuryr storage requirements #6286  
CORS-2271 : IBMCloud: Add DNS Service support - installconfig #6255  
Bug OCPBUGS-164: OpenStack: Set minimum disk of a flavor to 100 GB #6268  
validate vSphere privileges #5741  
Add support for private DNS server to PowerVS #6157  
GCP: Remove firewall rules when providing network project id #6219  
GCP: Add missing regions #6259  
manifests: Pass the NetworkProjectID to manifests #6242  
support for multi-zone/region installation #5911  
cmd/openshift-install/create: One shot console access #5336  
IBMCloud: Pull in latest openshift/api changes #6056  
OCPBUGS-268 : vSphere - enable steal time accounting #6215  
Bug 2028474 : oVirt: Removed cluster name length limitation #6206  
gcp: Add validation for Network Project Data #6207  
Bug 2098072 : vsphere: fix default disk type when not speficied #6233  
Bug 2061947 : IBMCloud: Handle missing RG #6152  
CORS-1994 : Update Installer Dependencies #6175  
Bug 2109538 : nutanix: allow creating manifests without Prism Central connection #6149  
IBMCloud: Use unique mutex for Client retrieval #6241  
OCPBUGS-262 : UPI image download govc rate limit failure #6047  
Extract the image-references file from the release, pass it to machine-config-operator #6234  
powervs: allow VPC, Cloud connection, and NW re-use #6217  
Bug 2109800 : IBMCloud: Allow metrics traffic #6208  
IBMCloud: BYON Enablement #6183  
IBMCLOUD Power VS: Updated Max and Min machinepool resource limits #6147  
GCP: Added user specified tags on control plane instances #6199  
Azure Stack UPI Docs: Remove Feature Gate CRs #5657  
Bug 2115790 : bump RHCOS 4.12 bootimage metadata #6212  
terraform: ibmcloud: bump provider version #6210  
Revendor with golang 1.18 #6077  
Update installer images to use golang 1.18 #6163  
GCP: Add networkProjectID parameter to install-config. #6166  
powervs: default to tier1 storage #6211  
Download yq in upi installer containers #6008  
Remove LoadBalancer settings from cloud provider config #5834  
Add SPLAT members to platform reviewer/approver aliases #6202  
Alibaba: Use a static region list #6178  
Power VS: Add Montreal as a supported region #6209  
OWNERS_ALIASES: Add Adam Piasecki (c4rt0) #6181  
Switch libvirt VM’s to vnc graphic mode #6062  
GCP: Added user specified tags on compute instances in installconfig #6185  
CORS-2009 : Update default release image #6180  
Fix ineffassign #4866  
Bug 2105933 : data/data/coreos: update FCOS to 36.20220716.3.1 #6108  
Bug 2114754 : gather: properly delete serial log dir #6197  
tls: only report error if one happened #6195  
Updating ose-installer-artifacts images to be consistent with ART #6096  
Revert “GCP: Revert Instance Type from N2 to N1” #6058  
CORS-2167 : Remove UPI Metal TF references #6174  
Change defaultNetworkType to ovn-kubernetes #6014  
PowerVS: Add 60 sec wait time after VPC creation. #6162  
updated terraform-provider-ovirt #6169  
Update vsphere permissions file #5387  
Update kube components to v0.24.0 #6165  
IBMCloud: BYON Enablement - SG Rule Cleanup #6143  
BUG 2105341: Remove required check for control planes in boostrap gather #6168  
BUG 2109388: Add AWS S3 Bucket Permissions #6150  
added soundcard_enabled field to tf resources for master vms #6148  
Update Installer approvers list #6151  
IBMCloud: Update RHCOS image for VSI #6142  
Bug 2102324 : Fix validation errors for instance type #6127  
Updating ose-baremetal-installer images to be consistent with ART #6085  
As a developer I want to update installer to use propagateUserFlags for GA #5994  
terraform: update azure provider to v3 #6000  
Azure console logs gathering #5904  
OWNERS_ALIASES: drop miabbott from coreos aliases #6123  
Gcp console logs gathering #5902  
IBMCloud: BYON Enablement - Terraform #6051  
Bug 2095323 : Create security group rules for each MachineNetwork CIDR #6125  
Bug 2106061 : bump RHCOS 4.12 bootimage metadata #6129  
test: use T.TempDir to create temporary test directory #5730  
IBMCloud: BYON Enablement - InstallConfig #6050  
Bug 2097691 : vsphere installconfig: use full dc path in network validation #6105  
Terraform: Remove azureprivatedns provider #5983  
Update OWENRS-ALIASES after changes in the team #6113  
Bug 2106667 : OpenStack UPI: Allow setting external DNS #6116  
Bug 2061947 : IBMCloud: Skip DNS Record delete #6013  
Bug 2102228 : rhcos: Move to rhcos.mirror.openshift.com #6109  
Bug 2082395 : Make azure baseDomainResoureGroup optional for private c… #6049  
cmd/openshift-install/gather: Errorf for Available=False #5985  
Bug 2070318 : Allow setting bootstrap kubelet ip #6042  
Updating ose-installer images to be consistent with ART #6083  
Bug 2098299 : Switch to perform normal marshalling with unknown fields #6039  
openstack: Update base images #6082  
AWS Destroy: Clean up endpoint services #6089  
openstack UPI: Remove Swift example, use Glance #6091  
Bug 2104578 : Remove unnecessary SG rule #6086  
Bug 2090836 : Fixes CFE-489 - AWS installer should go through proxy for s3 bootstrap ignition call #5973  
OpenStack: prompt FIP description #6075  
Bug 1944365 : openstack: validate that VIPs are outside DHCP pools #6069  
openstack UPI: clarify naming of RHCOS image #6081  
Bug 2102324 : Fix panic when unknown region is provided. #6065  
Bug 2103144 : openstack: validate apiVIP and ingressVIP to be semantically different #6067  
Bug 2103236 : Provide proper error message for empty projects list #6071  
BUG 2102632: destroy/gcp: Use min length for destroying disks #6068  
Bug 2099401 : IBMCloud: Set regional URL for ibmcloud client #6046  
openstack: Prepare for a UPI CI job #6055  
And 2 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-21700 : Uplift x/net to v0.17.0 #200  
Updating baremetal-machine-controller images to be consistent with ART #182  
Updating baremetal-machine-controller images to be consistent with ART #173  
Update OWNERS file #175  
Full changelog  
 
OCPBUGS-25642 : Add client version in must-gather summary #1639  
OCPBUGS-24462 : Overwrite template’s namespace with the explicit one #1618  
OCPBUGS-23222 : regeneratemco: explicitly check for PlatformStatus field #1598  
OCPBUGS-20248 : oc process: Set original namespace if it differs #1560  
OCPBUGS-20291 : Truncate existing files when writing from inspect #1563  
OCPBUGS-20299 : Use quay redis image instead docker mysql #1567  
OCPBUGS-16173 : Add tls-server-name when property exists in kubeconfig #1507  
OCPBUGS-1283 : Bump golang.org/x dependencies #1421  
OCPBUGS-16056 : mcs cert: account for environments that use IP directly #1501  
OCPBUGS-16194 : reboot: set ignition version to 3.1 #1509  
handle the error case of node retrieval while waiting for reboot #1485  
bring some cert rotation helpers back into 4.12 [fix unit-tests] #1478  
OCPBUGS-14647 : [release-4.12] Do not set master node selector if there’s no masters #1366  
OCPBUGS-14236 : Remove closed centos7 registry from newapp unit tests #1434  
OCPBUGS-10774 : bump repo sclorg/s2i-ruby-container location for newapp test #1382  
OCPBUGS-7960 : pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354  
OCPBUGS-6600 : Fix kube version from 1.24.1 to 1.25.2 #1327  
remove support for empty files and stdout in oc registry login #1277  
Bump go to 1.19 in go.mod #1262  
Bug 2093046 : oc debug: Add priorityClassName into node debugging pod template #1263  
use correct namespace with sample templates #1272  
Do not try to load plugins for cobra commands #1267  
Bug 2078694 : New-App Using Git via SSH #1269  
OCPBUGS-2495 : pkg/cli/login: Warn, but do not fail, on surprise project-list errors #1268  
IR-262 : Keep manifest list children #1229  
oc debug,version: minor todo improvements #1265  
pkg/cli/admin/release/extract: Don’t print image metadata verification messages when extracting to stdout #1264  
pkg/cli/admin/release/extract: Unify extraction cases #1237  
OWNERS_ALIASES: Freshen update-approvers #1260  
Bug 2059125 : release extract: Add binary re-signing for macos arm64 #1242  
Bug 2000554 : oc inspect: Also gather namespaces in which webhook services are running #1258  
add support for –next flag in oc adm release new #1243  
oc 4.12 kubernetes 1.25.2 bump #1250  
Bug 2033167 : oc extract: Create target directory if not exist #1248  
Update login.go #1188  
Add –overwrite flag into pod security violation error message #1234  
OCPBUGS-613 : oc adm logs: generate proper path for static pods #1231  
OCPBUGS-852 : cli/debug: Create temporary namespace for node debugging #1236  
Bug 1879980 : Bump go-ldap module to v3 #1226  
Updating openshift-enterprise-deployer images to be consistent with ART #1200  
Updating ose-cli-artifacts images to be consistent with ART #1202  
Updating openshift-enterprise-cli images to be consistent with ART #1195  
Bug 2087679 : [inspect] Add EgressQoS to inspect #1148  
Updating ose-tools images to be consistent with ART #1201  
Give a complete oc label command in pod security error message #1228  
Bug 2112934 : Add servicemonitors into common namespaces for inspection #1224  
Bug 2108307 : Set HostIPC to true when debugging node #1218  
Bug 2111537 : (image info): Introduce show-multiarch flag #1217  
Bug 2095708 : oc adm inspect: check a resource exists before its inspection #1215  
Bug 2092731 : Change error message to signal passing keep-manifest-list flag #1213  
Bug 1880865 : Avoid TLS cert checking when login with –insecure-skip-tls-verify=true #1161  
Bug 2105325 : Add ManifestListDigest field to release info struct #1203  
Add unit tests for release new package #1197  
Support for identity token #1199  
release info bug printing: enable --skip-bug-check for --output=json #1204  
release: extract ccoctl #1194  
Bug 2103126 : set proper pod security ns labels #1187  
Bug 2100702 : Set hasMedataOverrides to true when ToImageBase is set #1192  
Bug 2100166 : Add new IsManifestList flag into ReleaseInfo struct #1185  
Bug 2101885 : Set completion function for get command #1186  
Bug 2100702 : Use from-release as based image when base digest is invalid #1183  
Bug 2100708 : Lower chosen platform architecture/OS log level #1184  
Full changelog  
 
OCPBUGS-21348 : Upgrade golang/x/net for CVE-2023-39325 #624  
NO-ISSUE: snyk: exclude vendor/ #619  
NO-ISSUE: Removing andrew from OWNERS #618  
OCPBUGS-13739 : Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #539  
OCPBUGS-11707 : ccoctl: Enable public anon read access to default OIDC S3 bucket #529  
Bump to k8s 1.25 #505  
Make ccoctl use regional STS endpoint by default #491  
Changes generated from make update-gofmt with go-1.19. #495  
Update OWNERS to reflect reality. #494  
Add support for granular GCP permissions using custom roles #489  
update to release.openshift.io/feature-set to match OCP 4.12 #490  
Add ccoctl support to create OIDC endpoint with private S3 bucket #486  
TRT-481 : fix: order conditions by type to limit un-needed updates #488  
Bug 2118625 : Refactor Nutanix plugin to use external credentials structs #485  
Bug 2117474 : Fix panic when the Provider spec is empty in credential request #484  
Rename azure-mind-mod-removal to fix typo #481  
Bug 2100964 : Make ccoctl work with credentials fetched from gcloud cli defaults #475  
Updating ose-cloud-credential-operator images to be consistent with ART #474  
Bug 2101880 : manifests/00-namespace: Set empty openshift.io/run-level #472  
[Issue #452] Improving documentation #465  
doc(aws-sts): add alternative to host OIDC configuration in a private bucket using CloudFront #468  
Full changelog  
 
OCPBUGS-22949 : Azure: skip backend pool if attached to an outbound rule #128  
OCPBUGS-16325 : Azure: Handle already existing IP configurations #117  
OCPBUGS-14717 : increase GCP egress ip capacity to 100 from 10 #114  
OCPBUGS-13802 : sync CloudPrivateIpConfig when node is missing #112  
OCPBUGS-13183 : pull project name from subnet uri #108  
Bug OCPBUGS-5156: Add ApplicationSecurityGroups to InterfaceIPConfiguration #92  
OCPBUGS-4783 : OpenStack: Support multi AZ environments #88  
OCPBUGS-4784 : OpenStack: Only return egressIPConfiguration for first InternalIP #89  
OCPBUGS-4230 : Fix azure log message for assigning and releasing an IP #80  
OCPBUGS-3552 : Add assigned egress ips into capacity #73  
OCPBUGS-1736 : use proxy vars when available #62  
OCPBUGS-1417 : AWS: build temp credentials file from AWS key and secret #68  
Update .ci-operator.yaml to use go 1.19 #65  
Updating ose-cloud-network-config-controller images to be consistent with ART #64  
OCPBUGS-1629 : Add resolver to handle custom endpoints #61  
SDN-3203 : 1.25 rebase #58  
OCPBUGS-683 : Node controller: Skip uninitialized nodes #57  
Jira OCPBUGS-208: OpenStack: Avoid concurrent port updates for attach/detach operations #54  
Jira OCPBUGS-247: OpenStack Return UnexpectedURIError when URI cannot be parsed #55  
Bug 2118563 : Adjust OpenStack port capacity to default max_allowed_address_pair #53  
Bug 2111878 : Make azure operations to be in sequence #52  
Bug 2104784 : AWS: Fix race in IP address assignment code #50  
Update OWNERS #51  
Add OpenStack cloud provider #47  
Updating ose-cloud-network-config-controller images to be consistent with ART #49  
Bug 2105996 : Fix assign error display for cloudprivateipconfig #48  
Full changelog  
 
OCPBUGS-22689 : increase timeout for probes #639  
OCPBUGS-13346 : dont log jwt tokens #622  
OCPBUGS-3841 : update apf configuration to use v1beta2 #591  
OCPBUGS-4040 : Restart authentication operator if console capability is enabled #593  
OCPBUGS-3510 : Update cluster-authentication-operator not to go degraded without console #590  
make the custom route controller use server-side-apply to avoid stomping unknown fields #582  
e2e: address PSa failures #581  
Bug 2111842 : v/o/library-go - version-bump #576  
Updating ose-cluster-authentication-operator images to be consistent with ART #575  
Updating ose-cluster-authentication-operator images to be consistent with ART #571  
Bug 2078287 : only ever include certificates in the oauth-serving-cert CM #573  
Full changelog  
 
OCPBUGS-23274 : Rebase 4.12 branch onto cluster autoscaler 1.25.3 #267  
Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #242  
Updating vertical-pod-autoscaler images to be consistent with ART #243  
rebase on upstream 1.25.0 #241  
Bug 2001027 : update clusterapi nodegroups processor #240  
Updating vertical-pod-autoscaler images to be consistent with ART #235  
Bug 1944065 : Have VPA ignore phantom containers named “POD” #233  
Full changelog  
 
OCPBUGS-23291 : hack for deploying V6-only clusters from dualstack hubs #389  
OCPBUGS-20845 : Uplift x/net to v0.17.0 #371  
OCPBUGS-19557 : Guard against nil PlatformStatus #367  
OCPBUGS-16169 : use proxying for inspector in addition to ironic #349  
OCPBUGS-15715 : Limit role binding to openshift-machine-api namespace #347  
OCPBUGS-7585 : also use BMH.ConsumerRef for linking to master Machines #326  
OCPBUGS-5072 : delete ironic-proxy/image-cache when not needed #317  
OCPBUGS-4696 : Do not fail the reconciler when no master Machines exist #314  
Updating ose-cluster-baremetal-operator images to be consistent with ART #300  
Golang 1.19 #306  
Handle AWS platform #304  
OCPBUGS-1806 : Use machines instead of nodes to detect masters #299  
Add port to IRONIC_EXTERNAL_URL_V6 #302  
Enable running CBO from AWS #301  
OCPBUGS-872 : add a workaround for a NetworkManager issue #286  
Pass IRONIC_EXTERNAL_URL_V6 to baremetal-operator #288  
OCPBUGS-651 : ignore metal3 pods that are terminating #284  
Added handling PlatformStatus.Type other than Baremetal #285  
OCPBUGS-421 : do not rely on string “master” to be in BMH names #282  
Updating ose-cluster-baremetal-operator images to be consistent with ART #273  
Run a proxy for ironic when provisioning network is disabled #279  
Use platformStatus.type to determine type of platform #280  
METAL-157 : Don’t run image cache unless required #275  
Stop passing HTPASSWD variables to services #278  
Add RBAC for metal3.io/hardwaredata #277  
Fix a few papercuts #263  
Update to golang 1.18 and regenerate CRDs #265  
Drop the IRONIC_HTTPD compatibility option #245  
Full changelog  
 
OCPBUGS-21055 : Bump golang.org/x/net to v0.17.0 #138  
Bug 2116686 : OCPBUGS-5155: Add provider webhook #96  
Add PowerVS platform to webhooks #81  
Add Power VS cluster api support #79  
Bug 2116686, Bug OCPBUGS-1493: Initial implementation of validation webhooks #76  
Update CI to use tools from vendor folder #80  
Updating ose-cluster-capi-operator images to be consistent with ART #78  
Update openshift/api and k8s to 1.25 #77  
Add tests that compare MAPI and CAPI created instances #72  
Bug 2118550 : Momentarily disable Azure platform support #75  
Update manifests to use release.openshift.io/feature-set #74  
Set privileged pod security for openshift-cluster-api namespace #73  
Add webhooks for providers #68  
Update docs #69  
Bug 2100852 : Improve log message for secret syncer #71  
Add option to choose a provider to update #67  
Updating ose-cluster-capi-operator images to be consistent with ART #65  
Bug 2100822 : Add E2E for GCP #64  
Full changelog  
 
: OCPBUGS-21245: bump library-go to include switch to HTTP/1.1 #373  
CORS-2794 : AWS Shared VPC API Bump [release-4.12] #344  
OCPBUGS-4544 : Revert “Increase verbosity level to track probe timeouts” #275  
OCPBUGS-3523 : add –feature-set option to render options #272  
NE-975 : Update openshift/api for updated ingress config loadBalancer fields #268  
Increase verbosity level to track probe timeouts #267  
Bug 1843043 : Update openshift/api for modified config resource description #264  
update openshift/api for new ingress manifest #263  
Update go.mod api,client-go to register crd #262  
This is not the repo you’re looking for. #261  
Bump k8s dependencies #260  
Full changelog  
 
OCPBUGS-21525 : Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #391  
OCPBUGS-19933 : update-node-resolver.sh: Check for errors from >> #385  
OCPBUGS-19933 : ensure original hosts file contents are preserved #383  
OCPBUGS-15251 : Add support for protocolStrategy API field to enable force_tcp configuration #378  
Updating ose-cluster-dns-operator images to be consistent with ART, and generate bindata #344  
OCPBUGS-753 : keep dns-default annotations intact #340  
NE-929 : CoreDNS Cache Tuning - Functional Implementation #335  
OCPBUGS-1439 : Fix TestDNSLogging race condition #341  
OCPBUGS-1549 : Reconcile the DNS namespace #343  
OCPBUGS-1558 : Bump vendored k8s libraries to 1.25 #342  
NE-1066 : Enable the chaos plugin for CoreDNS in order to expose CoreDNS metadata #337  
DPP-10859 : Update Bugzilla links to “Networking” component #333  
And 2 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-20765 : Bump golang.org/x/net for CVE-2023-44487 #988  
OCPBUGS-22432 : test/e2e: Don’t use openshift/origin-node #992  
NE-1372 : Add support for AWS shared VPC in another account #966 #971  
OCPBUGS-13049 : bump controller-runtime to fix the multi namespace cache indexing #922  
OCPBUGS-15467 : Add missing AWS permission for ListTagsForResources #954  
OCPBUGS-16620 : Deflake TestRouterCompressionOperation #963  
OCPBUGS-16621 : Fix TestClientTLS flakes #964  
OCPBUGS-15644 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #959  
OCPBUGS-14454 , OCPBUGS-14455 : Handle mTLS CRLs, and fix accidental CRL duplication #941  
OCPBUGS-12464 : Target metrics port by name in internal service #910  
OCPBUGS-3517 : Ingress controller should not have affinity policy in single-replica clusters #857  
OCPBUGS-2775 : Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851  
OCPBUGS-2848 : Support matchExpressions selectors with route metrics #850  
Bug 2117524 : Update CRLs when they expire #828  
OCPBUGS-853 : certificate-publisher: Don’t publish extraneous certificates #824  
Bug 1962502 : Add alerts for unmanaged Routes and Ingresses without IngressClassName #823  
NE-1071 : Default HAProxy maxconn value to 50000 for OCP 4.12) #836  
Updating ose-cluster-ingress-operator images to be consistent with ART #834  
OCPBUGS-2435 : TestRouterCompressionOperation: Nil-pointer fix #843  
OCPBUGS-2493 : Fix TestUnmanagedDNSToManagedDNSInternal E2E test race conditions #845  
CFE-478 : Added support for exporting Route type and Routes per Shard metrics #779  
NE-975 : Use ingress config to set default LB type on AWS #837  
OCPBUGS-2429 : Fix TestReloadInterval min value test cases and race conditions #842  
OCPBUGS-2334 : Added nil check for service object on load balancer scope change #839  
NE-956 : Configurable LB Source Ranges - Functional Implementation #817  
Bug 2107462 : Update CGO_ENABLED=1 #833  
OCPBUGS-236 : Bump openshift/api for reloadInterval fix #830  
OCPBUGS-1554 : Bump vendored k8s libraries to 1.25 #829  
Enable switching of AWS CLB to NLB without deletion of IngressController object. #790  
Bug 2066560 : Make ingress clusteroperator progressing=true when router deployment is rolling out #769  
Add IBM Cloud DNS support for Power VS #819  
OCPBUGS-1049 : test/e2e: Fix TestCanaryRoute security context #826  
Bug 2089482 : Do not use deprecated API field InfrastructureStatus.Platform #814  
NE-969 : Add IBM DNS Services provider support for private clusters #796  
DPP-10860 : Update Bugzilla links to “Networking” component #815  
OCPBUGS-368 : Fix e2e tests for pod security violations #818  
NE-979 : add ReloadInterval TuningOption #805  
Bug 2101878 : Fix another issue with route status clearing race condition caused by not validating generation id #811  
Bug 2108708 : Disable auto creation of default ingress contoller for hypershift #797  
Bug 2101878 : Fix route status clearing race condition caused by using the cache #794  
Bug 2106086 : Bump openshift/api for healthCheckInterval fix #804  
Bug 2104481 : Allow PROXY protocol for the “Private” endpoint publishing strategy #803  
add Ethany-RH to OWNERS #800  
Bug 2086887 : Add better debug logging to TestIngressOperatorCacheIsNotGlobal to help debug flakes #793  
And 1 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
: OCPBUGS-20855: bump library-go to include switch to HTTP/1.1 #1574  
OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #1559  
OCPBUGS-17139 : make webhook connection failure a warning in log #1533  
OCPBUGS-13346 : dont log jwt tokens #1524  
OCPBUGS-6789 : enable pod security admission for techpreview #1440  
OCPBUGS-6789 : make the bootstrap kube-apiserver honor cluster-wide featuregates #1439  
OCPBUGS-7369 : Guard pod set readiness probe endpoint explicitly #1445  
OCPBUGS-4478 : guard controller: set an explicit hostname to avoid name collisions #1416  
OCPBUGS-3056 : CVE-2022-3259: enable HSTS for kube-apiserver #1400  
OCPBUGS-3037 : Allow ephemeral volumes in all SCCs #1399  
OCPBUGS-4299 : bootstrap-kube-apiserver: specify resources.requests #1411  
OCPBUGS-3841 : update apf configuration to use v1beta2 #1407  
OCPBUGS-3663 : Revert “turn PodSecurity admission to enforce restricted globally” #1405  
OCPBUGS-2071 : revert dev cert rotation #1401  
Bug 2094362 : Duplicate prometheus rules for API SLOs after upgrade #1376  
library-go vendoring for installer cmd timeout #1395  
serviceaccountissuer: fix case when default value is being used and not trusted after change #1393  
bindata/assets/alerts/api-usage: Include removed_release in APIRemovedInNext*ReleaseInUse labels #1367  
Fix typo in operator status serviceAccountIssuer name field #1390  
OCPBUGS-2198 : AUTH-309: Wire support for trusted service account issuers #1381  
Update API alerts after recent bump to k8s 1.25 #1382  
trt-589 bump library-go #1383  
Bug 2073220 : routes/status resources can leak sensitive data #1375  
k8s 1.25.0 #1374  
make PodSecurity admission enforce restricted globally #1369  
Update library-go to enable external provider for OpenStack by default #1370  
enable dev cert rotation #1364  
Bug 2101444 : specify resource=pod for PSa violation alerts #1363  
Full changelog  
 
OCPBUGS-20962 : bump golang.org/x/net to v0.17.0 #29  
Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #8  
Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #7  
Full changelog  
 
OCPBUGS-21048 : Bump deps to address CVE-2023-44487 [4.12] #759  
OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #754  
OCPBUGS-6789 : Enforce PSA when techpreview is enabled #694  
OCPBUGS-6789 : honor feature gates during bootstrapping #695  
OCPBUGS-7369 : Guard pod set readiness probe endpoint explicitly #699  
OCPBUGS-4478 : Sync library go 4.12 #676  
OCPBUGS-4766 : limit cluster-policy-controller RBAC permissions #675  
OCPBUGS-4681 : remove unnecessary RBAC #674  
OCPBUGS-4303 : bootstrap-kube-controller-manager: specify resources.requests #666  
library-go vendoring for installer cmd timeout #659  
trt-589 bump library-go #658  
Update go mod go version #657  
add nodes.config.openshift.io to resource-graph #655  
Bug 2101843 : Label openshift-infra namespace as privileged #647  
k8s 1.25.0 #652  
Bug 2118286 : always report and reconcile GarbageCollectorDegraded condition #650  
OCPBUGS-212 : gc watcher should close connections after throwing away a client #649  
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #638  
Bug 2001409 : add runbook urls to KCM-o alerts #635  
Reset Go mod after openstack library-go bump #642  
fix TestPodDisruptionBudgetAtLimitAlert by adding SecurityContext to a pod #643  
Update library-go to set OpenStack provider to external #641  
Make KCM-O conditionally dependent on monitoring stack availability #639  
Bug 2103940 : Decouple KCM-O’s status from monitoring stack #636  
Full changelog  
 
OCPBUGS-21239 : Sync deps CVE 2023 39325 4.12 #505  
OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #499  
OCPBUGS-14652 : disable debug pporf with unauthenticated port for 4.12 #481  
OCPBUGS-7369 : Guard controller: set the readiness probe endpoint explicitly #462  
OCPBUGS-4478 : Sync library go 4.12 #452  
OCPBUGS-4292 : bootstrap-kube-scheduler: specify resources.requests #448  
library-go vendoring for installer cmd timeout #444  
Bump openshift/api to bring the MatchLabelKeysInPodTopologySpread enabled in TPNoUpgrade #442  
trt-589 bump library-go #441  
Bump go.mod golang version to 1.19 #440  
k8s 1.25.0 #438  
Describe how to increase log level of kube-scheduler instances #436  
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #433  
Update owners #432  
Full changelog  
 
OCPBUGS-21441 : Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2148  
OCPBUGS-22843 : [release-4.12] add RHACS telemetry metrics #2140  
OCPBUGS-21234 : upgrade golang.org/x/net to v0.17.0 #2123  
OCPBUGS-17125 : backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 #2047  
OCPBUGS-16028 : Add the trusted CA bundle in UWM Prometheus pods #2042  
OCPBUGS-15473 : Limit the value of GOMAXPROCS on node-exporter to 4 #2023  
OCPBUGS-13008 : Add build number to vcenter version information #1965  
OCPBUGS-12727 : backport OCPBUGS-5353 to 4.12 #1955  
OCPBUGS-11508 : add startup probe for prometheus-adapter #1940  
OCPBUGS-11623 : node-exporter: disable btrfs collector #1944  
OCPBUGS-11404 : jsonnet: Add prometheus container in UWM #1935  
OCPBUGS-2439 : set the argument path.udev.data in node exporter #1800  
OCPBUGS-4363 : Fixed TargetDown expression to join on the proper label #1833  
OCPBUGS-4488 : Fixes externalURL field for Prometheus and Alertmanager #1840  
OCPBUGS-4627 : compute doc link in PVC not configured message #1844  
OCPBUGS-4489 : Increase startupProbe for prometheus #1841  
OCPBUGS-4431 : add alert KubePodNotScheduled to group openshift-kubernetes.rules #1837  
OCPBUGS-3276 : Pin Down Dependencies on Release 4.12 #1819  
OCPBUGS-4029 : test: increase timeout when checking remote write metrics #1820  
MON-2727 : Adds telemeter alert TelemeterClientFailures #1803  
*: don’t expose Prometheus operator’s port #1806  
Documentation: fix TelemeterClientConfig #1801  
Synchronize versions of the downstream components #1797  
jsonnet/components: remove PDB patches #1799  
OCPBUGS-1321 : Node Exporter - ignore virtual NICs from OVNK cluster #1780  
RHDEVDOCS-3165 : updates to config map code comments and docgen utility #1773  
CFE-551 : Allowlist metrics related to Routes to be sent via telemetry #1776  
test/e2e: improve getActiveTarget() #1796  
Synchronize versions of the downstream components #1793  
update to release.openshift.io/feature-set to match OCP 4.12 #1794  
update to release.openshift.io/feature-set to match OCP 4.12 #1764  
OCPBUGS-2138 : Add os_image_url_override metric from MCO to telemetry #1784  
Bug 2043518 : set degraded and available status based on Prometheus resource status #1558  
Updating cluster-monitoring-operator images to be consistent with ART #1787  
Revert “[bot] Update jsonnet dependencies” #1788  
Update jsonnet dependencies #1770  
Synchronize versions of the downstream components #1782  
Makefile: add docgen tool dependency to the docs target #1772  
Synchronize versions of the downstream components #1779  
Bug 2114721 : Adds telemeter token hash to Deployment annotation #1747  
Bug 2100860 : Pass user-defined Alertmanager service in shared configmap #1690  
OCPBUGS-1364 : Dedicated kubelet ServiceMonitor for prometheus-adapter #1752  
Bug 1933144 : Extend KubeAggregatedAPIDown alert “for” to 15m #1639  
Adds documentation about how to configure CMO #1696  
Rename kube_pv to odf_system_pvs #1756  
Synchronize versions of the downstream components #1768  
go.{mod,sum}: require Go 1.18 #1769  
Use odf metrics instead of ceph #1718  
Add client certificate and key to service monitor #1738  
Update jsonnet dependencies #1766  
Add odf_system_objects_total and odf_system_bucket_count #1763  
MON-2654 : Add a cluster advance feature usage metric #1750  
Synchronize versions of the downstream components #1761  
Update jsonnet dependencies #1758  
Synchronize versions of the downstream components #1759  
OCPBUGS-864 : sorted condition and update on change #1746  
MON-2646 : Remove grafana related code #1731  
Bug 2099939 : Sets status when UserAlertmanagerConfig is missconfigured #1724  
Update jsonnet dependencies #1741  
Whitelist metrics for MCG addon #1721  
Bug 2116382 : Give precedence to CMO config map proxy config #1737  
OWNERS: Add myself, and move former team members to emeritus #1739  
Bug 2100312 : go.mod: update openshift-api to current release-4.12 tip #1740  
Update jsonnet dependencies #1735  
Bug 2115527 : reverts #1704 #1734  
MON-1261 : exposing topology spread constraints through config #1624  
Update jsonnet dependencies #1730  
pkg/manifests/amcfg.go: reorder declarations #1728  
Unpin Jsonnet dependencies. #1725  
Synchronize versions of the downstream components #1727  
Bug 2083226 : increase alertmanager startupProbe failure threshold #1720  
Synchronize versions of the downstream components #1722  
MON-2658 : Add security context to additional containers in e2e tests #1714  
Bug 2089199 : Removes etcd related dashboards from CMO #1674  
Bug 2090988 : Set HA convention on admission-webhook #1716  
Synchronize versions of the downstream components #1713  
Add telemetry metrics for HyperShift #1710  
Updating cluster-monitoring-operator images to be consistent with ART #1711  
Bug 2095719 : Updates CreateOrUpdateServiceAccounts #1704  
Bug 2100472 : fix alert controllers when not in techpreview #1707  
Synchronize versions of the downstream components #1705  
Revert “Bug 2100472: start alert controllers only when techpreview” #1706  
Bug 2100472 : start alert controllers only when techpreview #1701  
Full changelog  
 
OCPBUGS-24571 : Disable weak SSH cipher suites #2164  
OCPBUGS-25128 : Update to go 1.19 and x/net 0.8.0 #2157  
OCPBUGS-23293 : IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #2108  
OCPBUGS-20277 : Edited multus-admission-controller deployment config to not add autoount a service account token #1884  
OCPBUGS-20197 : remove prestop hooks for northd, sbdbd and nbdb #2055  
OCPBUGS-17656 : prevent creation of multiple cni-sysctl-allowlist-ds pods #1948  
OCPBUGS-11547 : Hypershift: Add RollingUpdate parameters to multus-admission-controller #1775  
OCPBUGS-16142 : fix reconciliation process of the allowlist controller #1891  
[release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay #1764  
OCPBUGS-15588 : Add release version annotation to whereabouts-reconciler #1856  
OCPBUGS-13891 : [release-4.12] HyperShift: Support HostedControlPlane node selector #1816  
OCPBUGS-13067 : Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] #1829  
OCPBUGS-6061 : Update github.com/Masterminds/sprig to v3 #1689  
OCPBUGS-13013 : AUTH: update cluster-reader to include k8s.ovn.org #1799  
OCPBUGS-13067 : Whereabouts should implement the reconciliation controller [backport 4.12] #1801  
OCPBUGS-11559 : multus-admission-controller should not run as root under Hypershift #1777  
Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net #1671  
OCPBUGS-10977 : HyperShift: Add POD_NAME env to ovnkube-node #1753  
OCPBUGS-11461 : Split out konnectivity certs #1771  
OCPBUGS-11178 : remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1759  
OCPBUGS-11059 : Fix info log formatting #1659  
OCPBUGS-10319 : HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1738  
OCPBUGS-8014 : add default noProxy config for Azure #1722  
OCPBUGS-9927 : Enable configuration of node healthz server on ovnkube #1731  
OCPBUGS-5953 : Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685  
OCPBUGS-7044 : HyperShift: Add .hypershift.local to no proxy list #1706  
OCPBUGS-7044 : HyperShift: Do not use proxy for internal routes #1704  
OCPBUGS-4778 : Fix handling of deployment and statefulset updates #1663  
OCPBUGS-4238 : HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1645  
OCPBUGS-6494 : OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB #1691  
OCPBUGS-3461 : CNI binary copy should account for the possibility of symlinks [backport 4.12] #1615  
OCPBUGS-4856 : Disable the drop-icmp container ‘oc’ pprof webserver on Azure #1666  
OCPBUGS-4686 : Revert “Remove references to the hosts kubeconfig” #1660  
OCPBUGS-4183 : Fix default disable-udp-aggregation value on s390x #1661  
OCPBUGS-4637 : Support RHOBS monitoring for HyperShift #1652  
OCPBUGS-3956 : HyperShift: Do not accept empty infrastructure name #1634  
OCPBUGS-4183 : Disable UDP aggregation on s390x #1643  
OCPBUGS-3824 : ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1621  
Jira OCPBUGS-3851: IPsec: Fix broken counter++ expression #1636  
OCPBUGS-3944 : Remove references to the hosts kubeconfig #1632  
OCPBUGS-3437 : HyperShift: Render cncc with proxy settings of the management cluster #1613  
OCPBUGS-3889 : SDN: /var/run mount cleanup #1628  
OCPBUGS-3184 : update microshift ovnk manifests #1610  
OCPBUGS-2362 : Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info #1579  
fixed typo in comment #1597  
Jira OCPBUGS-1736: Always set PROXY variables for CNCC #1576  
Remove the allow_ra sysctl for ipv4 from default systl whitelist #1590  
SDN-2591 : allow hybrid overlay to be enabled post install #1584  
SDN-3515 : HyperShift: multus admission controller: expose metrics over HTTPs #1583  
rebase to k8s v1.25.0 #1571  
Bug OCPBUGS-2328: Fix for index out of range error #1588  
Add sysctl whitelist controller #1573  
Kuryr: Add missing keystoneauth options #1581  
OCPBUGS-1341 : Set owner reference for pod network connectivity check #1566  
ovn-k, managed: pass join-subnet to control-plane #1582  
OCPBUGS-1083 : Move OVNK alert level to info #1564  
Pass enable-udp-aggregation=true to ovn-kubernetes #1533  
OCPBUGS-1038 : Multus IPAM detection should honor conflists #1570  
egress_ip: remove redundant config #1568  
OCPBUGS-1515 : Use custom uint128 type when validating v6InternalSubnet #1561  
SDN-3283 : HyperShift: Use a socks-proxy in ovnkube-master to allow for node heath checks #1539  
Bug: OCPBUGS-736: Kuryr: Use machine net MTU to create service net #1545  
Migrate Egress IP configuration during SDN migration and rollback #1536  
Allow empty vSphere status field in VIP sync #1558  
microshift: update ovnk manifests #1552  
Add ovn-kubernetes-microshift to image-stream #1556  
Migrate Multicast configuration during SDN migration and rollback #1543  
OVN-K: add patch/update service permissions to controller #1554  
Add controller to synchronize the API and Ingress VIP fields #1519  
Bug SDN-3458: HyperShift: Differentiate resources deployed by different CNO instances in status manager #1541  
OVN-K alerts: first tranche #1526  
SDN-3432 : Add alert for OVNKubernetesControllerDisconnectedSouthboundDatabase #1548  
Add vSphere platform to allow dual-stack cluster #1518  
OKD-49 : Adds support for scos to multus #1544  
Bug 1894268 : Allow users to specify ovnkube join subnet #1508  
Bug OCPBUGS-917: Add EgressQoS DstCIDR format validation #1492  
Multus admission controller: Wait for token in Hypershift #1546  
Use fixed name for creating EgressFirewall CRs #1540  
Migrate Egress Firewall Configuration during SDN migration and Rollback #1534  
hypershift: set multus controller priority appropriate for hosted clusters #1538  
Bug 2094068 : Add northboundstale alert runbook #1482  
microshift: compact ovn databases periodically #1537  
Hypershift: Allow configuring hostname and labels on the route #1531  
Multus admission controller changes for hypershift #1516  
HyperShift: Move CNCC to the controll-plane namespace #1525  
Bug OCPBUGS-216: Kuryr: Bump timeoutSeconds for livenessProbe #1528  
Add missing runbook links for OVN-kubernetes alerts #1523  
Bug 2103680 : avoid overrriding disableNetworkDiagnostics on reconciliation #1527  
Render CRDs for both OSDN and OVNK during migration #1521  
Configure ignored namespaces into multus-admission-controller #1515  
Add microshift ovnk manifests #1517  
Bug 2116982 : multus-admission-controller SNO number of replicas #1524  
Enable the cloud-network-config-controller for OpenStack #1505  
multi-networkpolicy: Enable on SR-IOV networks #1443  
Updating cluster-network-operator images to be consistent with ART #1507  
Add configmap list/watch rights to cloud-network-config-controller #1511  
The Multus admission controller should run as a deployment #1514  
Bug 2108232 : Revert “Bug 2085089: Pass enable-udp-aggregation=true to ovn-kubernetes” #1510  
Bug 2100601 : Update CNO to config EgressIP timeout for ovnk #1498  
Bug 2060079 : Enhance sensitivity of SDN alert NodeProxyApplySlow #1491  
Bug 2103590 : Add init container to ensure that Status.podIP is set before postStart hooks run #1503  
remove @squeed from owners #1497  
Full changelog  
 
Disable HTTP/2 for webhook and metrics servers (#849) #849  
Remove obsolete protocols and weak ciphers (#847) #847  
OCPBUGS-21837 : nto: pao avoid timeout when there are too many CSV (#838) #838  
Tighten the rules for modifying Tuned Profiles (#790) #790  
OCPBUGS-19459 : check for object being nil (#821) #821  
OCPBUGS-18868 : [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) #788  
Release leader election on manager exit (#789) #789  
Fix a race in e2e test rollback.go code (#742) #742  
pao: e2e: Make script executable (#734) #734  
pao e2e: Split gcp-pao lane (#728) #728  
Do not rollback settings on TuneD exit (#711) #711  
OCPBUGS-15800 : e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710  
Revert “Remove optimization to allow full resync (#569)” (#688) #569  
update owners 20230109 (#549) #549  
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667  
OCPBUGS-14472 : Fix updating numa core siblings map in GetCpuSiblings function (#675) #675  
Remove trailing spaces from test names (#572) #572  
Remove optimization to allow full resync (#569) #569  
e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) #539  
e2e: add missing test id (#630) #630  
Remove subPaths, they are broken (#627) #627  
Remove the preStop hook for openshift-tuned (#621) #621  
E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509  
E2E: Network stack Pinning tests (#533) #533  
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554  
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543  
pao: latency-tests: read test log directly from pod (#547) #547  
Add authentication to the /metrics endpoint (#553) #553  
Update NTO images to be consistent with ART (#557) #557  
OCPBUGS-5021 : [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) #530  
Remove trailing space from test name (#546) #546  
Fix default hard eviction threshold when PCC is applied (#520) #520  
OCPBUGS-4215 : e2e: performance profile: add logs and minor fixes (#516) #516  
E2E: Automation offline CPUs test (#514) #514  
Configure ktimers scheduler prio same as ksoftirqs (#511) #511  
Set RPS for all rx queues (#503) #503  
E2E fix: Make Nodeselector tests independent (#422) #422  
Filter out copied csvs when removing pao CSV (#492) #492  
e2e: perfprof: remove broken test (#494) #494  
udev-rule: rationale for applying the rule on virtual interfaces (#482) #482  
HyperShift: rename Tuned ConfigMap key from tuned to tuning (#491) #491  
HyperShift: avoid unnecessary mcfg creation (#481) #481  
e2e: perfprof: get cpus from node capacity (#486) #486  
Add intel_pstate=disable to default configuration with no hints (#480) #480  
OCPBUGSM-47141 : set RPS for veth only at host level  (#479) #479  
Adjust nto_custom_profiles:count metric to count by _id (#476) #476  
Set default RealTime hint to true (#475) #475  
Clean output of kernel args if no hugepages or add args are present (#474) #474  
workloadHints not included in validateFields() (#468) #468  
Add perPodPowerManagement workloadHint to PPC (#430) #430  
previously know as Performance Addon Operator (#473) #473  
Create HACKING.md file (#449) #449  
Add API workloadHint perPodPowerManagement (#415) #415  
Skip should set offline cpus after deploy PAO test (#470) #470  
Add verification on kernel param rcutree.kthread (#464) #464  
e2e: Fix metrics_cert_rotation.go (#471) #471  
Performance profile Annotation to enable RPS (#462) #462  
HyperShift: Create ConfigMaps for NTO-generated MachineConfigs (#456) #456  
Toggle RPS configuration with realtime hint (#460) #460  
Refactor WorkloadHints  (#418) #418  
Enable e2e tests for SNO (#459) #459  
Improve tuned test (#426) #426  
hack: performance: skip tests under 5_latency_testing (#448) #448  
hypershift: Remove dynamic client and simplify getNodePoolNameFromNode (#452) #452  
irqbalance: add unit to clear the cpu ban list #413  (#444) #444  
Enable basic sysctl tuning of HyperShift hosted cluster nodes (#390) #390  
e2e: performance: update path of latency binary (#443) #443  
latency-tests: improve logs clarity (#393) #393  
e2e: performance: Update PP isolated cpus (#429) #429  
Allow new cri-o annotations for power management config (#383) #383  
leader.go: remove unused file (#441) #441  
convert core and cpu strings to integer (#432) #432  
stalld: remove support for built-in stalld (#433) #433  
e2e: fix a race in [reboots] tests (#439) #439  
e2e: perfprof: unbreak the e2e-gcp PAO lane (#438) #438  
Bug 2105123 : tuned: disable irqbalance (#396) #396  
Add function to node utils to fetch Core Siblings (#403) #403  
Add client certificate and key to service monitor (#427) #427  
openshift-tuned: remember recommended profile (#421) #421  
Add offlined to v1 api (#417) #417  
add +optional and +default=true to workloadHints API (#416) #416  
TuneD: use the same FDP version for upstream (#412) #412  
Fix cpu overlap error output (#409) #409  
Bug 2102450 : set rcutree.kthread_prio to ksoftirqd prio (#408) #408  
e2e: add podsecurity labels (#405) #405  
doc: fix description of the PERFORMANCE_PROFILE_INPUT_FILES env var (#399) #399  
e2e: check for tsc=reliable instead of tsc=nowatchdog (#410) #410  
test: utils: use updated profile, not original (#404) #404  
Dockerfile: provide full URL to CentOS stream image (#406) #406  
Bug 2105967 : E2E test case Telco friendly workload hints (#374) #374  
Rename Performance Addon Controller to Performance Profile Controller (#373) #373  
makefile: enable running pao latency testing suite (#376) #376  
Clean up file and fix API docs (#391) #391  
Add clientset.go missing pkg/generated file (#397) #397  
Fix typo realTime Hint in PerformanceProfile.yaml (#389) #389  
Fix wrong kubelet test (#394) #394  
Bump vendor dependencies to k8s 1.24.2 (#386) #386  
must-gather e2e test (#365) #365  
Switch to CentOS Stream for upstream Containerfile (#385) #385  
Remove stale Profiles. (#381) #381  
PAO: update README.txt (#369) #369  
e2e: performance profile: Latency tests stabilization (#368) #368  
Updating cluster-node-tuning-operator images to be consistent with ART (#382) #382  
Full changelog  
 
OCPBUGS-20777 : bump(k8s,openshift) to address CVE-2023-44487 #311  
OCPBUGS-4803 : [release-4.12] Correct go file formatting for go1.19 with gofmt #275  
OCPBUGS-3841 : update apf configuration to use v1beta2 #271  
BUILD-534 : Rebase to k8s 1.25 #268  
manage openshift-controller-manager as a Deployment #264  
Bug 2055620 : Add permissions for image trigger controller #244  
switch to route-controller-manager image and use ApplyDeployment no. 2 #267  
Revert “switch to route-controller-manager image and use ApplyDeployment” #265  
switch to route-controller-manager image and use ApplyDeployment #258  
rename operator queue to OpenshiftControllerManagerOperator #257  
fix README links #263  
OCPBUGS-722 : handle errors during operand creation and update #262  
OCPBUGS-722 : Fix NPD when accessing rote controller spec.deployment.replicas #259  
Manage route controllers in separate ns #255  
Adding leader election leases permissions for openshift-controller-manager-sa #253  
BUILD-417 : Adding leader election leases #250  
Bug 2110629 : Set openshift.io/run-level to nil in openshift-controller-manager namespace #248  
Bug 2110617 : Add namespace and RBAC needed for ingress-to-route #247  
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #245  
Full changelog  
 
OCPBUGS-21080 : Bump deps to address CVE-2023-44487 [4.12] #136  
OCPBUGS-12442 : psalabelsyncer: handle empty namespace of a rolebinding subject #111  
OCPBUGS-14092 : [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources #117  
OCPBUGS-13889 : external template and route Informer #114  
OCPBUGS-6789 : backport feature gate honoring for PSa label syncer #98  
OCPBUGS-7705 : [release-4.12] update dependencies to point to v0.25.0 #102  
OCPBUGS-5786 : clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #95  
OCPBUGS-3663 : Revert “Revert “Revert “psalabelsyncer: synchronize the enforcement l… #90  
Bump go to 1.19 in go.mod #88  
Bump Kubernetes module dependencies to 1.25. #87  
Factor our ns exemptions to make them consumable by other components #85  
pkg/psalabelsyncer: rm unused, simple bool return #86  
Revert “Revert “psalabelsyncer: synchronize the enforcement label”” #84  
Revert “psalabelsyncer: synchronize the enforcement label” #82  
psalabelsyncer: synchronize the enforcement label #81  
Full changelog  
 
OCPBUGS-15757 : Update Jenkins and Jenkins Agent Base image versions #506  
OCPBUGS-10918 : update Jenkins to v4.12 #492  
OCPBUGS-7208 : When setting allowedRegistries urls the openshift-samples operator is degraded #489  
OCPBUGS-4599 : Bump k8s master #479  
OCPBUGS-4407 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #478  
OCPBUGS-4369 : Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #477  
Updating ose-cluster-samples-operator images to be consistent with ART #465  
Add client certificate and key to service monitor #464  
Updating ose-cluster-samples-operator images to be consistent with ART #435  
Full changelog  
 
OCPBUGS-21266 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #407  
OCPBUGS-18131 : Add patch for allowing configmap updates via clusterrole #402  
OCPBUGS-14307 : User real node name in failing mount alerts #377  
OCPBUGS-13719 : assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount #370  
OCPBUGS-10646 : Hypershift: set control plane operand properties #355  
OCPBUGS-8374 : Add UID to CSO Pod to be able to run with custom SCCs #347  
OCPBUGS-7331 : hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337  
STOR-1039 : Make changes into CSO for hypershift #318  
OCPBUGS-2880 : Fix panic on empty featureGate.spec.customNoUpgrade #325  
Bug 2093016 : Add alert about attach / mount failing #324  
OCPBUGS-1361 : Reword vSphere problem detector check alerts #322  
Remove specific UID from cluster-storage-operator #316  
OCPBUGS-1904 : Allow CSI operator to get CRDs #323  
add storage capability annotation #303  
Bump go to 1.19 #321  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #317  
STOR-1050 : bump openshift/api to latest master #319  
Remove in-tree AWS EBS and GCP PD storage classes #312  
TRT-534 : Add client certificate and key to service monitor #306  
OCPBUGS-946 : Resource csi.storage.k8s.io/csinodeinfos added to powervs-block-csi-d river-operator-clusterrole #315  
Updating cluster-storage-operator images to be consistent with ART #296  
Bug 2112237 : correct sc error messages for ibm and alibaba platforms #310  
Add PowerVS Block CSI Driver Operator #304  
Bug 2108054 : Allow Prometheus to scan openshift-cluster-csi-drivers namespace #308  
STOR-956 : Bump(openshift/api): to get CSI changes #307  
Bug 2108054 : Add alert about unsupported CSI driver #305  
Bug 2107043 : HTTPS_PROXY ENV missing in some CSI driver operators #301  
Bug 2101645 : DefaultStorageClassController reports fake message on azure and openstack #292  
Full changelog  
 
Clean up owners file as part of DPP-10343 #46  
Updating ose-cluster-update-keys images to be consistent with ART #45  
Full changelog  
 
OCPBUGS-20729 : [4.12] Bump http-related deps #990  
OCPBUGS-22408 : pkg/clusterconditions/promql: Warm cache with 1s delay #988  
OCPBUGS-22198 : Reconcile Volumes in SCCs #985  
OCPBUGS-14096 : Trigger new sync round on ClusterOperator Available changes #938  
OCPBUGS-12182 : Update dnsPolicy to allow consistent resolution of the internal LB #931  
OCPBUGS-10565 : RetrievePayload: Improve timeouts and cover behavior with tests #914  
OCPBUGS-10514 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #913  
OCPBUGS-8304 : Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 #908  
OCPBUGS-5879 : Set upgradeability check throttling period to 2m #884  
OCPBUGS-5083 : pkg/payload/precondition: Do not claim warnings would have blocked #878  
OCPBUGS-3770 : Allow CVO to update KUBERNETES_SERVICE_HOST with LB address #866  
OCPBUGS-3352 : Do not fail precondition check for UnknownUpdate #861  
Bug 2033499 : Don’t overwrite accepted risks if local payload #852  
OCPBUGS-2125 : Allow unknown capabilities during payload load and implicitl enablement checking #850  
bump api version to add new capability #835  
Bug 2033499 : Populate acceptedRisks in ClusterVersion History #841  
Dockerfile: Bump to Go 1.18 #845  
Fix ups from gofmt 1.19 #849  
Revert “Fix ups from gofmt 1.19 and yamllint” #848  
Fix ups from gofmt 1.19 and yamllint #844  
Updating cluster-version-operator images to be consistent with ART #842  
OCPBUGS-1636 : pkg/cvo/sync_worker: Pre-create ClusterOperator in reconciling-mode too #840  
Bug 1951835 : Handle report only sync errors #837  
OCPBUGS-1402 : pkg/cvo/sync_worker.go: remove Lock/Unlock #832  
OWNERS: Prune vrutkovs #838  
pkg/cvo: add test utility functions #833  
allow more than one featureset #821  
OCPBUGS-575 : lib/resourcemerge/core: Reconcile seccompProfile in ensurePodSecurityContext #830  
Bug 2006611 : Upgrade takes too much time when upgrading via –to-image #808  
OCPBUGS-569 : CVO History Pruner return not assigned to config.Status.History #828  
bump api version to add new capability #801  
lib/capability: Sort all slices after building them #827  
Bug 1951835 : Propagate Degraded to update status #662  
Bug 2010365 : OpenShift Alerting Rules Style-Guide Compliance #800  
Restore ‘Pull arch from payload’ and fix #813  
/pkg/cvo: improve CV history pruning #805  
Bug 2117033 : pkg/cvo/sync_worker: Trigger new sync round on ClusterOperator versions[name=operator] changes #818  
pkg/cvo/status.go: sort implicitly enabled caps #814  
pkg/cvo/sync_worker: Consolidate all ClusterOperator errors by reason #577  
Revert “Pull arch from payload” #810  
Pull arch from payload #796  
Bug 2110590 : pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #807  
Bug 2109374 : pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #806  
Bug 2094174 : pkg/cvo: reset payload load status #788  
Bug 2108858 : lib/resourcemerge: change SecurityContext reconcile #804  
Updating cluster-version-operator images to be consistent with ART #797  
And 1 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
Updating configmap-reload images to be consistent with ART #47  
OWNERS: Add Joao and myself, and move former team members to emeritus #46  
Updating configmap-reload images to be consistent with ART #45  
Full changelog  
 
OCPBUGS-22431 : Check if filtered object contains name property #13285  
OCPBUGS-25213 : add access review for impersonate #13440  
OCPBUGS-18116 : Bump helm version #13104  
OCPBUGS-24236 : Remove tech preview badge from Pipeline repository pages #13384  
OCPBUGS-23413 : Correct logout process #13342  
OCPBUGS-24364 : Subsequent PipelineRuns take initial PipelineRun name into account #13401  
OCPBUGS-13357 : add multipath device type to LocalVolumeSet #12805  
OCPBUGS-23346 : update the KnativeServing API version to v1beta1 for global-config extension #13334  
OCPBUGS-23154 : remove expandable toggle for conditional update risk d… #13322  
OCPBUGS-22964 : add support for new features annotations while preservi… #13305  
OCPBUGS-19382 : Could not import multiple resources via JSON (while YAML supports this) #13168  
OCPBUGS-20071 : Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13212  
OCPBUGS-21727 : fetch TaskRuns without selector and reduces the get TaskRuns requests #13251  
OCPBUGS-21731 : show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13252  
OCPBUGS-13580 : Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12747  
OCPBUGS-19907 : Fixed Edit Application form for Knative Services #13205  
OCPBUGS-19045 : Web console slowness on Project>Project access page #13155  
OCPBUGS-18273 : Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13113  
OCPBUGS-18563 : OLM Pages work when copied CSVs are disabled #13055  
OCPBUGS-17530 : fix bug where binary secret values are corrupted on edit and add test coverage #13087  
OCPBUGS-18366 : Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13122  
OCPBUGS-16660 : Manual cherry-pick of #12978 #13039  
OCPBUGS-17192 : “Duplicate RoleBinding” leads to “Unsupported value” error #13063  
OCPBUGS-16846 : Fix stop PLR option #13051  
OCPBUGS-2182 : re-enable operator-install-single-namespace.spec.ts test #13013  
OCPBUGS-16732 : When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047  
OCPBUGS-16046 , OCPBUGS-16047 , OCPBUGS-16048 : Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997  
OCPBUGS-15898 : account for single object in status.conditions instead… #12982  
OCPBUGS-16139 : The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004  
OCPBUGS-15710 : Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962  
OCPBUGS-15849 : Add Pipeline metrics unsupported empty page #12977  
OCPBUGS-9405 : [OSD] There is no error message shown on node label edi… #12965  
OCPBUGS-15798 : Remove access review check for PipelineResource from Pipeline section #12969  
OCPBUGS-13643 : Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813  
OCPBUGS-15569 : use service port name instead targetPort in the Pipeline Event listener route #12958  
OCPBUGS-15535 : Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955  
OCPBUGS-15404 : Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935  
OCPBUGS-15057 : only copy workload annotations to debug pod #12903  
OCPBUGS-15099 : visiting Configurations page returns error Cannot read… #12906  
OCPBUGS-15482 : Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948  
OCPBUGS-14190 : When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859  
OCPBUGS-11989 : Modified git import flow module to handle create button enable-disable issue #12775  
OCPBUGS-6848 : Service name search ability while creating the Route from console #12505  
OCPBUGS-7619 : Search page: LazyActionMenus are shown below Add/Remove from navigation button #12575  
OCPBUGS-7924 : Developer - Topology : ‘Filter by resource’ drop-down i18n misses #12598  
OCPBUGS-13803 : add support for minimal status of tekton #12831  
OCPBUGS-13750 : use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12829  
OCPBUGS-12839 : Show type of sample on the samples view #12783  
OCPBUGS-12992 : Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12791  
OCPBUGS-9336 : use buildconfig form also for create #12770  
OCPBUGS-11601 : Move operator install status to it’s own … #12715  
OCPBUGS-12232 : Fix for broken Create key/value secrets e2e tests #12750  
OCPBUGS-11844 : delete associated pipeline, triggertemplate and eventlistener when deleting app #12727  
OCPBUGS-11972 : update the default pipelineRun template name #12687  
OCPBUGS-6888 : Show Git icon and repo link as per the Git provider #12511  
OCPBUGS-12476 : Pipelines repository list and creation form doesn’t show Tech Preview status #12763  
OCPBUGS-1753 : Fix OLM descriptor components deletes operand e2e test failing #12573  
OCPBUGS-12477 : Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765  
OCPBUGS-11998 : Do not show builder ImageStreams without sampleRepo as samples #12740  
OCPBUGS-5009 : Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382  
OCPBUGS-7953 : fix devfile error #12605  
OCPBUGS-6672 : In DeploymentConfig both the Form view and Yaml view are not in sync #12475  
OCPBUGS-8016 : PipelineRun templates must be fetched from OpenShift namespace #12614  
OCPBUGS-10225 : Get the Event type value from the latest PLR of the Repository #12643  
OCPBUGS-7333 : Add missing SDK extensions descriptions #12556  
OCPBUGS-7951 : delete application should delete all part-of resources #12604  
OCPBUGS-6036 : Project dropdown order is not as smart as project list page order #12447  
OCPBUGS-7800 : add subject kind dropdown in the project access form #12586  
OCPBUGS-8339 : disable operator-install-single-namespace.spec.ts until… #12624  
OCPBUGS-3892 : Add cluster to query params of websocket requests #12282  
OCPBUGS-5092 : Fix to use and set correct secretReference for build-config triggers #12388  
OCPBUGS-7895 : Bump helm version to 3.10.1 #12579  
OCPBUGS-6873 : The dropdown list component will be covered by deployment details page on Topology page #12507  
OCPBUGS-6831 : Fix crash when pinnedResources is null #12503  
OCPBUGS-7471 : Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565  
OCPBUGS-7506 : Fix different CI issues #12555  
OCPBUGS-6966 : Remove description field from the PLR parameters page #12519  
OCPBUGS-7437 : Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560  
OCPBUGS-6887 : Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510  
OCPBUGS-6816 : Repositories list does not show the running pipelinerun as last pipelinerun #12500  
OCPBUGS-4072 : Fix rerender loop/crash when bindable-kinds is found but has no status #12304  
OCPBUGS-6671 : fix broken pipeline secret #12474  
OCPBUGS-6913 : PipelineRun task status overlaps status text #12516  
OCPBUGS-6766 : Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12491  
OCPBUGS-6969 : Added translation to Last used in resource type dropdown #12521  
OCPBUGS-6764 : Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12490  
OCPBUGS-4281 : Do not disable metrics when auth is disabled #12323  
OCPBUGS-6669 : Do not show UpdateInProgress when status is Failing #12473  
OCPBUGS-5093 : Fix to show correct help texts for each git repo status error code #12389  
OCPBUGS-6085 : Editing Pipeline in the ocp console should show correct information #12452  
OCPBUGS-6758 : Add RBAC check on Create a Project link in all-namespaces pages #12489  
OCPBUGS-6755 : Remove refs-heads from the branch name for Repository pipelineRun row #12487  
OCPBUGS-6743 : Fix react warning when open console, add missing keys in navigation #12484  
OCPBUGS-5875 : Don’t proxy CORS response headers #12276  
OCPBUGS-6678 : fix run-time error on Cluster Settings when availableUp… #12476  
OCPBUGS-4633 : Monitoring: Fix alert descriptions with duplicate resources #12352  
OCPBUGS-5303 : display ‘Control plane is hosted’ alert only when isCl… #12409  
OCPBUGS-5263 : only show upgrade details if cluster not externally man… #12404  
OCPBUGS-5444 : Change vSphere connection health status icon #12415  
OCPBUGS-4960 : Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) #12378  
OCPBUGS-5003 : fixed node maintenance plugin route configuration for BareMetalNodesPage #12381  
OCPBUGS-5185 : Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) #12393  
OCPBUGS-5191 : add support for version v1beta1 for knativeServing and knativeEventing #12395  
OCPBUGS-4897 : Pan nodes into view if all nodes are not visible on load #12370  
OCPBUGS-4013 : fix number spinner input #12288  
“OCPBUGS-4512: Fix navsection bug” #12340  
OCPBUGS-4458 : fix issue where node debug terminal doesn’t load #12338  
OCPBUGS-3333 : Promote ConsolePlugins API version to v1 in console repository #12248  
OCPBUGS-4035 : Fix for initial showing of topology contents #12299  
OCPBUGS-4117 : Re-enable serverless e2e tests #12308  
OCPBUGS-4116 : Re-enable pipelines e2e tests #12307  
OCPBUGS-4004 : migrate Events integration test to Cypress to mitigate … #12291  
OCPBUGS-3927 : show 403 error when normal user check operands on All … #12284  
OCPBUGS-3786 : add Release not accepted to Update status on Cluster Se… #12273  
OCPBUGS-3754 : Monitoring: Add popover help text for silence form’s negative matchers #12271  
OCPBUGS-3696 : improve display of RetrievedUpdate condition in Update status #12270  
OCPBUGS-2874 : add capacity action for SS CSV list page [OCP 4.12 & ODF 4.11] #12233  
OCPBUGS-2974 : Monitoring: Fix permission check for Prometheus & Alertmanager pollers #12225  
OCPBUGS-3265 : check that user can patch console operator config in s… #12239  
Create-Knative-Workload | Knative Serverless #12165  
add tab extension to dev console #12109  
OCPBUGS-2651 : Show focus border on pipeline run nodes #12157  
OCPBUGS-2909 : Fix documentation link which leads to 404 #12181  
OCPBUGS-2478 : Fix i18n issue in Remove component node from application modal #12180  
Bug 2110256 : Storage -> PVC -> upload data, does not support source reference #12213  
OCPBUGS-1950 : Devfile samples (in Developer Catalog) link doesn’t include the current selected namespace #12193  
CONSOLE-3164 : Move main nav components #12123  
CONSOLE-3224 : Expose errorMessage and errorCause for failed plugins #12151  
CONSOLE-3336 : Make dynamic plugin dependencies optional #12078  
Bug 2115347 : Monitoring: Add support for Alertmanager negative matchers #12139  
CONSOLE 3250: Configure default behavior for “Wrap lines” in log viewers #12015  
chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 224 #12185  
CONSOLE-3276 : Expose ErrorBoundary capabilities in the SDK #12170  
Replace resource URI with inline yaml in devfile #12168  
Bug 2110321 : Workloads list page has different PDB action items from details page when All Projects selected #12117  
Update Devfile Import to use Kubernetes YAML definitions #12000  
OCPBUGS-2654 : Update OperatorHub tests #12198  
ODC-6786 : Add cluster configuration extension, page, and options for console customization #12159  
MGMT-9085 Add vSphere Connection plugin #12068  
OCPBUGS-505 : Input box aria-label and name wrong for editing PDB inside Deployments #12064  
OCPBUGS-2455 : Pods and PDBs list page just reports ‘Not found’ when no Pod/PDB #12178  
OCPBUGS-2100 : Fix warning icon color #12177  
OCPBUGS-1916 : Workloads list page has different HPA action items from details page when All Projects selected #12120  
OCPBUGS-548 : Tweaks to make the “Favorites” section heading consistent with project menu section heading #12119  
OCPBUGS-1470 : i18n Incorrect plural for maxUnavailable pod count #12065  
OCPBUGS-1776 : Remove duplicate start guide alert from devconsole Search page #12158  
OCPBUGS-2430 : Add missing Quick Start translation #12171  
ODC-6779 : Hide sub-catalog(s) in the developer catalog or the entire dev catalog based on customization #12067  
OCPBUGS-800 : Name of workload get changed, when project and image stream gets changed on reloading the form on the edit deployment page of the workload #12024  
OCPBUGS-1017 : Persist last cluster dropdown selection in session storage only #12179  
OCPBUGS-2344 : Change annotation to be used for fake helm repositories #12141  
OCPBUGS-1416 : Fix outdated, broken ODC add-page e2e test #12055  
OCPBUGS-2438 : Monitoring: Fix help popovers #12166  
OCPBUGS-1746 : Update the Github App events and permissions #12162  
OCPBUGS-193 : Corrected kebab action overlapping issue in Helm page #11980  
OCPBUGS-2369 : adds check for metadata as metadata is not required in template spec #12169  
OCPBUGS-2075 : Hide silent switch for alerting rule if no associated alerts are present in devconsole #12152  
Bug 2100334 : separate fetching of serving and eventing as they can be enabled independently #12080  
OCPBUGS-2195 : fixes npe on topology #12156  
Cards-display-on-serverless-operator-installation | Knative-serverless #12089  
Updates flags and blocks migrated extensions #11992  
Add resource quota alert to topology list view node #12143  
OCPBUGS-1040 : Add checks for pods in hpaPodRingLabel #12118  
OCPBUGS-2181 : updates test id for 3scale #12167  
OCPBUGS-1105 : OCPBUGS-1106: Update dependencies to the registry library and devfile parser #12043  
OCPBUGS-2265 : Allow passing documentation links for alerts #12059  
CONSOLE-3190 : update OperatorHub filter to use nodeArchitectures instead of GOARCH #12072  
ODC7127: Change node background color to yellow on zoom out #12142  
Bug 2100843 : Fix selection on add connector context menu option opens the side panel of the node #12069  
OCPBUGS-2102 : updates e2e to call resource type selection in advance option #12147  
ODC-6771 : Add telemetry support #12140  
ODC-6785 : Enable/Disable perspective(s) based on customization #12025  
Refactor ResourceSection and move it under Advanced options #12052  
ODC-6772 : Show resource quota alert in deployment side-panel #12029  
OCPBUGS-194 : Switch api explorer filters to use PF toolbar component for structure and adjustments. #12111  
Bug 2115522 : Strange padding in new Helm Chart Repository table row #12102  
OCPBUGS-1678 : Use local test data to mock a devfile registry #12088  
Updating openshift-enterprise-console images to be consistent with ART #12121  
OU-38 : Monitoring: Refactor silence duration dropdown to use PatternFly #12101  
Action on Knative-Service | Knative Serverless #12081  
OU-56 : Query browser: Refactor timespan dropdown to use PatternFly components #12076  
Bug 2079249 : Find latest pipeline run without firehose selector #12071  
OCPBUGS-1479 : PDB list page should only show Create Pod button to user has sufficient permission #12066  
Update PL/PLR visualization to use new PF pipeline package #12046  
Bug 2057972 : Remove space in Chinese translation for Duplicate {{kindLabel}} #12099  
HELM 386:Chart Verifier api integration #11964  
OCPBUGS-1827 : disable e2e for knative #12114  
OCPBUGS-184 : Fix OperatorHub “View it here” link for installed operators #12105  
Move some datetime functions to @openshift-console/plugin-shared #12037  
OCPBUGS-183 : fix bug where line numbers greater than 5 digits overlay… #12093  
OCPBUGS-803 : Handle fake helm chart repository #12096  
Bug 1904106 : Fix Y-axis labels for minimal / no data #12087  
Monitoring: Clean up use of ISO datetime helpers #12053  
OU-66 Add a ‘Select/Unselect All’ button to Observe > Metrics Page > … #12033  
ODC-6778 : add list of disabled dev catalog types to server flags #11984  
OCPBUGS-1522 : Allow regular users to access debug pods #12098  
add list of enabled/disabled perspectives to server flags #11993  
chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 223 #12083  
Bug 2100860 : Use Alertmanager services for user-defined alerts from config #11712  
YAML Editor with forwardRef #11997  
OCPBUGS-1677 : Fix devfile registry assertion #12085  
PF-2022 : 12 package updates #12063  
OCPBUGS-1569 : add admin flag to disabled extensions #12027  
ODC-6784 : Added Code Snippets for Hiding Perspectives in Dev Console #12075  
Bug 2030406 : Remove nav override for fixed demo plugin nav component dom structure #12079  
OCPBUGS-1570 : fixes issue with eventsources vis on topology #12074  
CONSOLE-3183 : Improve console.dashboards/overview/detail/item extension #12058  
Action on Knative-Revision | Knative Serverless #12034  
Bug 2057972 : Switch to “verb kind” phrase so that Chinese translations do not have spaces between. #12039  
Bug 2077138 : update version of quick-start library to latest #12038  
ODC-6780 : Provide a code snippet for the console CRD for adding Subcatalogs in Dev Catalog #12047  
OCPBUGS-1268 : Remove required flags from helm actions to show the HCR actions also if no helm repo is enabled #12042  
Expose the NamespaceBar component in the dynamic plugin SDK API #12001  
OCPBUGS-1141 : fetch shared resource imagestreams based on labels instance and name #12035  
OCPBUGS-943 : Use the Deployment as resource kind and label also when importing a Devfile #12022  
OCPBUGS-1256 : Improve OLM descriptors e2e tests #12044  
OCPBUGS-1290 : updates description for kafkaSink #12048  
OU-68 Add PodMonitors to Metrics targets Page #12008  
Added resource quota warning message in topology and add page #11962  
OCPBUGS-270 : Show already loaded catalog items after a timeout (3sec) #12019  
OU-85 : Monitoring: Add runbook URLs to alert and rule details pages #12026  
Automate DevConsole Interop WTO Scenarios #8814  
Bug 2115899 : BuildConfig form: Change image repository to image registry #11938  
OCPBUGS-548 : Changes to the application menu with search and favorite options so it is consistent with PatternFly menu and aligns with Project selection menu #11985  
OCPBUGS-939 : Fix flaky CI and usability issue: Disable create button until Devfile is parsed #12023  
Monitoring: Clean up and make more use of the dynamic plugin SDK #12009  
OCPBUGS-238 : enable knative e2e in ci #12021  
OCPBUGS-896 : Allows launching of modals from alert actions #12018  
Pass className to HealthItem popup top-level component #11952  
chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 222 #11989  
Update pf packages to pf-2022-10 #11981  
OCPBUGS-869 : correct Azure product name for support link #12016  
Migrates StorageClass Provisioner to dynamic-plugin-sdk #11931  
Disable all OCS tests #12013  
kafka-event-source & kafka-source-connection feature | Knative #11957  
Bug 2112812 : Update registry library dependency to pick up proxy support #12011  
Gherkin for “Cancelled” and “Stopped” status of pipeline run #11868  
CONSOLE-3179 : Improve control over shared modules provided by Console to dynamic plugins #11700  
OCPBUGS-704 : Disable knative test suite #12006  
Bug 2109854 : Fix description for Max unavailable and Max surge #11867  
Add support for param of array type when starting a Pipeline #11953  
OCPBUGS-451 : show git icon in repository details page based on git provider #12003  
OWNERS: add jerolimov to approvers #11998  
OU-59 : Query browser: Remove the metrics list dropdown #11991  
HELM-342 : Add basic authentication support for Helm repositories #11782  
Add functionality to add kafka-sinks as subscriber, trigger and event-source sink target #11925  
OCPBUGS-435 : Dropdown items on storageclass creation page need i18n support #11988  
chore(i18n): update translations: Completed-7034-OCP 4.12 UI Localization- sprint 221 #11940  
Bug 2102681 : Fix zh locale (greater than pod) #11802  
Include ActionServiceProvider in dynamic-plugin-sdk #11923  
create kafkaSink support in catalog #11948  
ODC-6712 & ODC-6714: Add a build decorator for Shipwright Builds and builds section into topology sidebar for Shipwright Builds and BuildRuns #11853  
correcting nightly failures: pipelines #11891  
RHSTOR-3593 : Add basic support for Modals #11163  
Bug 2091573 : Input values in Instantiate Template are disappeared randomly in the developer console #11967  
Query browser: Use PatternFly components directly for Actions and kebab dropdown menus #11959  
Bug 2091102 : Name of workload get changed, when project and image stream gets changed on edit deployment page of the workload #11758  
correcting nightly failures: topology #11878  
Bug 2080260 : Update OLM pages to use details and list page extensions for operands when they exist #11883  
OCPBUGS-238 : enable knative e2e  in ci #11963  
OCPBUGS-180 : Change ‘Role’ title to ‘Roles’ #11960  
Bug 2071792 : Support namespace of choice for the user that wants to use TLS verification #11571  
Monitoring: Import enums from dynamic plugin SDK #11961  
Bug 2117738 : reset ErrorBoundary state on location change #11955  
CONSOLE-3179 : Add deprecation note for react-helmet #11876  
Bug 2094502 : Fix bug where the create required custom resource button points to the wrong namespace. #11949  
Bug 2091555 : - Sort function doesn’t work on “Namespaces” column on operator details page #11958  
Bug 2109502 : improve bug report links #11874  
Bug 2103090 : - Storage - StorageClasses - Create StorageClass - Provisioner: Upon selection of Provisoner i18n misses #11945  
OCPBUGS-169 : Fixes E2E test #11956  
Bug 2117367 : Include referenced .scss files when building core plugin SDK package #11951  
Bug 2115280 : kubevirt-e2e-aws see two duplicated navigation items #11943  
Monitoring: Clean up imports and types #11784  
Capture telemetry event for Export application action #11921  
Bug 2116415 : e2e: Disable Shipwright e2e tests #11947  
Updated dynamic demo plugin instructions #11904  
Allow editing of Repositories using the form-yaml experience #11866  
CONSOLE-3244 : Make status.HostIP for Pods visible in the OCP Web Console #11919  
Bug 2111686 : [OKD/nanokube] Fix NPE when project or build status is not defined #11791  
Bug 2109511 : fix failed PipelineRun log texts color in light mode #11859  
Bug 2102341 : Include min-width on operator icon img so that Firefox displays them correctly #11934  
Bug 2114488 : Fix Monitoring Alert decorator icon color in Topology #11928  
Bug 2110525 : Clear the error when switching between the Form and YAML editor #11871  
improve export application flow #11915  
Bug 2115799 : Fix Resource selection for import flow #11937  
Bug 2107469 : Fix service-binding modal sub-title text when the target is available #11898  
CONSOLE-3188 : Add alert with message for Console plugins page when console operator spec.managementState is Unmanaged #11897  
Add Resource type dropdown on the User preferences page #11833  
Gherkin for Builds v2 in Dev Console - Topology #11893  
Added Repositories tab in Helm Page #11844  
Add Cancel option and update the stop status for the PipelineRun #11920  
ODC-6740 : Move Build v2 e2e tests from dev-console to shipwright-plugin package #11889  
CONSOLE-3140 : Expose ResourceIcon to dynamic-plugin-sdk #11870  
Bug 2084504 : can not silence platform alert from developer console #11895  
Bug 2105918, Bug 2105303: specify namespace and index entry along with chart url to get the chart details #11838  
Bug 2112481 : Fix visual inconsistencies across synched editor forms #11903  
Bug 1951901 : incorrect Worker nodes number calculated when nodes have… #11896  
Bug 2001211 : Resource usage measurement data display the concatenati… #11805  
Bug 2099795 : README file for helm charts encoded in Chinese shows messy characters in the UI #11881  
Bug 2112862 : Fix broken Namespace CRUD e2e test #11908  
CONSOLE-3186 : Add shared-plugin to the SDK Packages tables docs #11882  
capture telemetry for helmChartRepo creation to detect scope #11872  
SDK - add plain yaml editor #11840  
Bug 2070562 : Base64 data value for java keystore secret changing auto… #11890  
Bug 2111205 : [CI Watcher] Add yarn config to dynamic-demo-plugin #11880  
Bug 2112146 : Update pod YAML sample for restricted pod security admission policy #11894  
Bug 2110927 : Remove zero from edit yaml page and clear errors when the user press the save button #11877  
Bug 2075107 : consistency in web terminal headers #11858  
bump codemirror and promql editor to the last version #11822  
Bug 2092319 : [Firefox] multi-line node status formatting issue #11638  
Bug 2089221 : Could not de-select a Git Secret in add and edit forms #11606  
Bug 2084453 : - Edit PodDisruptionBudget page sometimes takes user to not synced YAML view #11845  
Bug 2097026 : Administration - Cluster Settings - Cluster Operators : … #11742  
Bug 2094240 : Update workload-pause.tsx to fix inconsistency between buttons in the notification and kebab action dropdown. #11677  
Updates Ceph plugin OWNERS #11657  
Bug 2109673 : Align Console plugin SDK package dependencies with generated code #11625  
Bug 2106366, Bug 2106377: Use displayname for PHCR in the catalog page #11852  
Bug 2108551 : [CI Watcher] Bulk Import e2e test flaking at a high rate #11863  
CONSOLE-3181 : Deprecate useAccessReviewAllowed and useSafetyFirst #11851  
support creation of helm chart repo using the existing PHCR form #11821  
Bug 2037329 : remove redundant model check to prevent tab reloading #11862  
chore(i18n): update translations: Completed-7034-OCP 4.11 UI Localization- sprint 220 #11846  
Bump webpack dependency in plugin SDK and demo plugin #11771  
Bug 2109469 : Fix create-namespace e2e test: cleanup useServiceLevelTitle hook usage #11855  
Bug 2108638 : SDK - expose useLastNamespace #11828  
Bug 2106805 : Enable running specific spec files with headless test-cypress #11818  
add parameters tab on PipelineRun details page #11767  
Bug 2079690 : Fix operand affinity form field #11834  
Bug 2094558 : MetalLB: Creating ip address pool and community CR throu… #11728  
Bug 2105344 : correct usePodActionsProvider and apply it #11816  
Bug 2100640 : Adjust font size and alignment for show operands radio toggle #11850  
Bug 2106866 : Fix flaky OLM descriptor test #11856  
Bug 2092137 : Search doesn’t show all entries when name filter is cleared #11665  
CONSOLE-3091 : Remove orphaned code along with consolidating some code to use PF instead of Bootstrap #11744  
Bug 2090457 : openshift-debug-node- namespaces do not get deleted for … #11824  
Bug 2102098 : There is no error message shown on node label edi… #11817  
Bug 2106803 : mock call to /api/devfile in e2e #11831  
Bug 2093597 : Added the spacing between advanced options #11739  
Bug 2079214 : Switch default modal scroll behavior from inner modal body scroll to entire modal scroll to prevent bug and have consistent display of dropdown menus. #11835  
Bug 2081674 : Added onSubmit for create a project function for Dev perspective #11781  
Bug 2089773 : Added separate reducers for status and title for pipeline status #11678  
Bug 2106866 : Fix flaky OLM test #11832  
CONSOLE-3167 : Remove  static plugin nav extensions #11825  
Bug 2103981 : show last 3 build with option to view all in case of more then 3 builds #11837  
Bug 2103224 : Update the side nav perspective selection so it has the correct background and border color when in dark mode #11790  
Bug 2103972 : fix MultiColumnField header alignment used for Pipeline parameters #11799  
Bug 2078769 : Added translations for filter group names #11594  
CONSOLE-3067 : Adding Rollout Restart function to the OpenShift Console #11725  
Bug 2091542 : - Error Loading/404 not found page shown after clicking “Current namespace only” #11743  
Bug 2021297 : Implement dynamic plugin dependency resolution #11626  
CONSOLE-3204 : Add missing api docs for *Icon and *Status components #11808  
Bug 2098234 : fix broken update server link #11768  
Bug 2105909, Bug 2105328: Fix create-namespace e2e test, ESOCKET timeout issue, and a11y violations to unblock CI #11809  
Bug 2052662 : Fix null reference #11780  
Updating openshift-enterprise-console images to be consistent with ART #11789  
Bug 2093593 : Updated selected strategy file as devfile when devfile is selected #11719  
Bug 2100774 : add error color to required help text for image search field #11776  
Update PF packages to pf-2022-8 #11766  
CONSOLE-3083 : Update API docs for dynamic plugin sdk #11639  
Update ODC owner files #11760  
Bug 2096350 : fix bug where Cluster update modal errors weren’t displa… #11762  
And 9 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-20593 : build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.12] #131  
OCPBUGS-5289 : Adds vlan path substitution fix to address tuning regression for runtime config #71  
OCPBUGS-4223 : Fix path substitution to enable setting sysctls on vlan interfaces #68  
Updating ose-containernetworking-plugins images to be consistent with ART #66  
Updating ose-containernetworking-plugins images to be consistent with ART #65  
Full changelog  
 
OCPBUGS-23118 : Should reference configmaps instead of secrets #154  
OCPBUGS-20703 : bump golang.org/x/net to v0.17.0 #148  
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #112  
Updating ose-csi-driver-shared-resource images to be consistent with ART #113  
csi topology is only PV relatead, do not need #111  
Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #108  
Updating ose-csi-driver-shared-resource images to be consistent with ART #107  
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #106  
Full changelog  
 
OCPBUGS-20787 : bump golang.org/x/net to v0.17.0 #88  
OCPBUGS-3359 : Revert “[build-407] Mount shared secret and configmap list config path into shared driver node” #62  
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #58  
Mount shared secret and configmap list config path into shared driver node #56  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #57  
: Authorize shared secrets and configmaps with openshift- prefix #53  
Bug 2081557 : Run at least one replica of Webhook #51  
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #52  
Full changelog  
 
OCPBUGS-21139 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #62  
UPSTREAM: 379: Fix gofmt for go 1.19 #47  
UPSTREAM: <carry>: Remove .github files #43  
Updating csi-attacher images to be consistent with ART #42  
STOR-859 : Rebase to v4.0.0 for OCP 4.12 #41  
Updating csi-attacher images to be consistent with ART #40  
Full changelog  
 
OCPBUGS-20743 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #74  
Updating csi-provisioner images to be consistent with ART #58  
UPSTREAM: <carry>: Remove .github files #57  
STOR-859 : Rebase to v3.3.0 for OCP 4.12 #55  
Updating csi-provisioner images to be consistent with ART #54  
Bug 2101343 : UPSTREAM: 2101343: fix: changed the csistoragecapacity check namespace #52  
Full changelog  
 
OCPBUGS-20885 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #149  
Updating ose-csi-external-resizer images to be consistent with ART #134  
UPSTREAM: <carry>: Remove .github files #133  
STOR-859 : Rebase to v1.6.0 for OCP 4.12 #132  
Updating ose-csi-external-resizer images to be consistent with ART #131  
Full changelog  
 
OCPBUGS-20991 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #111  
Updating csi-snapshot-validation-webhook images to be consistent with ART #84  
Updating ose-csi-external-snapshotter images to be consistent with ART #83  
Updating ose-csi-snapshot-controller images to be consistent with ART #82  
UPSTREAM: <carry>: Remove .github files #81  
Updating csi-snapshot-validation-webhook images to be consistent with ART #80  
Updating ose-csi-external-snapshotter images to be consistent with ART #79  
Updating ose-csi-snapshot-controller images to be consistent with ART #78  
STOR-859 : Rebase to v6.1.0 for OCP 4.12 #77  
Updating csi-snapshot-validation-webhook images to be consistent with ART #76  
Updating ose-csi-external-snapshotter images to be consistent with ART #75  
Updating ose-csi-snapshot-controller images to be consistent with ART #74  
Full changelog  
 
OCPBUGS-20629 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52  
OCPBUGS-13821 : Bump gRPC from 1.38.0 to 1.49.0 #43  
Updating csi-livenessprobe images to be consistent with ART #35  
UPSTREAM: <carry>: Remove .github files #34  
Updating csi-livenessprobe images to be consistent with ART #33  
Full changelog  
 
OCPBUGS-20674 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #54  
Updating csi-node-driver-registrar images to be consistent with ART #39  
UPSTREAM: <carry>: Remove .github files #38  
Updating csi-node-driver-registrar images to be consistent with ART #37  
Full changelog  
 
OCPBUGS-23037 : Add -p flag to cp command to preserve timestamps #372  
OCPBUGS-20695 : [release-4.12]Bump golang.org/x/net #364  
OCPBUGS-17228 : bump github.com/containers/buildah to v1.26.6 #325  
OCPBUGS-15643 : Add the git-lfs package #353  
OCPBUGS-6753 : manage-dockerfile: use the original form of HEALTHCHECK #324  
Updating openshift-enterprise-builder images to be consistent with ART #315  
OCPBUGS-4779 : [release-4.12] Update to go1.19 #321  
BUILD-530 : Rebase to k8s.io 1.25 #316  
bump(github.com/containers/buildah) to v1.26.4 #306  
bump github.com/containers/buildah to v1.26.2 #304  
Attempt to create /dev/fuse at startup #305  
Bug 2099991 : Add support for BUILDAH_QUIET environment variable #303  
Set _CONTAINERS_USERNS_CONFIGURED if we create a user namespace #301  
Updating openshift-enterprise-builder images to be consistent with ART #302  
Full changelog  
 
Updating egress-router-cni images to be consistent with ART #64  
Updating egress-router-cni images to be consistent with ART #63  
Full changelog  
 
OCPBUGS-21282 : Bump golang.org/x/net to v0.18.0 #44  
Updating ose-gcp-cloud-controller-manager images to be consistent with ART #22  
OCPBUGS-2076 : Replace k8s.io/cloud-provider with openshift’s version #23  
OCPBUGS-1413 : Rebase 29.09.2022 k8s 1.25 #21  
Updating ose-gcp-cloud-controller-manager images to be consistent with ART #19  
Full changelog  
 
OCPBUGS-20833 : Bump x/net package to v0.18.0 #69  
OCPBUGS-14120 : Register control plane machines to instance group #52  
OCPBUGS-4504 : refactor restartPolicyToBool function #28  
OCPBUGS-4499 : Set sync period for Machine controller #25  
Updating ose-machine-api-provider-gcp images to be consistent with ART #19  
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #17  
update windows script handling #16  
Update windows detection #15  
Add windows machine support #14  
Updating ose-machine-api-provider-gcp images to be consistent with ART #13  
Full changelog  
 
OCPBUGS-20718 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #47  
Updating ose-gcp-pd-csi-driver images to be consistent with ART #29  
UPSTREAM: <carry>: Remove .github files #28  
STOR-862 : Rebase to v1.7.3 for OCP 4.12 #27  
Updating ose-gcp-pd-csi-driver images to be consistent with ART #26  
Full changelog  
 
OCPBUGS-20807 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #89  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #82  
OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #55  
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #53  
Remove unused bindata from the operator #54  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #52  
STOR-752 : Change the default StorageClass to the CSI one (GCE) #51  
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #50  
Full changelog  
 
OCPBUGS-25214 : legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1835  
OCPBUGS-23568 : Update to kubernetes 1.25.16 #1807  
OCPBUGS-23288 : UPSTREAM: 121881: Use golang library instead of mklink #1803  
OCPBUGS-20113 : UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1747  
openshift-hack: Fix sporadic 141 errors in build-rpms #1774  
OCPBUGS-21435 : [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1760  
OCPBUGS-18288 , OCPBUGS-19483 : Update to kubernetes 1.25.14 #1719  
OCPBUGS-18768 : UPSTREAM: <carry>: Force using host go always and use host libriaries #1694  
OCPBUGS-17188 : Update to Kubernetes 1.25.12 #1669  
OCPBUGS-17159 : Increase service idle max timeout to 100 minutes #1662  
OCPBUGS-8737 : UPSTREAM: <drop>: bump apiserver-library-go for scc fix #1619  
OCPBUGS-15309 : Bump to k8s 1.25.11 #1615  
OCPBUGS-14745 : [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1600  
OCPBUGS-13173 : Bump to k8s 1.25.10 #1582  
OCPBUGS-7589 : UPSTREAM: <carry>: add default kubelet sysctls within rpm #1478  
OCPBUGS-11166 : UPSTREAM: <carry>: Force using the go tooling from the system #1531  
OCPBUGS-11166 : Bump to k8s 1.25.8 #1527  
OCPBUGS-8705 : Fix mounted volume expansion tests #1503  
OCPBUGS-7078 : Bump to k8s 1.25.7 #1496  
OCPBUGS-5769 : scc admission - seccomp profiles fix #1471  
OCPBUGS-5490 : remove in-tree volume limits test now that CSIMigration is GA #1449  
OCPBUGS-4808 : Apply shared defaulters to CRD-based routes. #1441  
OCPBUGS-4366 : Update to 1.25.4 #1434  
OCPBUGS-3878 : UPSTREAM: <drop>: Bump openshift/api. #1425  
OCPBUGS-3875 : UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. #1427  
OCPBUGS-3780 : UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. #1422  
OCPBUGS-3503 : UPSTREAM: <drop>: Bump library-go. #1423  
Bug OCPBUGS-2927: Disable expansion in SC, if driver does not support it #1403  
OCPBUGS-3503 : UPSTREAM: : Bump library-go. #1414  
OCPBUGS-3094 : Tag AWS security groups at creation #1412  
OCPBUGS-3071 : 4.12: revert: 1340: tag AWS security group at creation #1405  
OCPBUGS-3117 : UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1407  
OCPBUGS-2774 : UPSTREAM: 112807 Fix Load balancer services with xTP local #1400  
UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones #1396  
UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation #1340  
UPSTREAM: 113135: Wait for pod not running or gone in storage tests #1394  
Bump to k8s 1.25.2 #1380  
Bug 2041317 : Fix replica calculation at start of HPA scaling policy period #1391  
UPSTREAM: <carry>: allow annotating with a specific suite #1388  
k8s 1.25.0 #1360  
UPSTREAM: <carry>: Dockerfile: use centos:stream9 #1366  
OCPBUGS-718 : UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1358  
UPSTREAM: <carry>: optionally enable retry after until apiserver is ready #1346  
UPSTREAM: 110639: endpointslices: node missing on Pod scenario #1359  
UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess #1350  
UPSTREAM: 110039: Add readinessProbe to aggregated api service test #1307  
Bug 2118318 : UPSTREAM: 110939: don’t quota events.k8s.io events by default #1344  
UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… #1349  
UPSTREAM: <carry>: Skip session affinity timeout tests #1339  
Bug 2117569 : UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1338  
Add kubensenter to the openshift RPM #1327  
UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods #1333  
trt-393: add plugin name to caches not synchronized error #1330  
Bug 2102383 : UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() #1315  
Bug 2088606 : Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin #1247  
Bug 2081194 : UPSTREAM: <carry>: update list of deprecated apis #1091  
Bug 2082773 : Fix resizing of ephemeral volumes #1296  
UPSTREAM: <carry>: Remove reserved CPUs from default set #1295  
Bug 2094012 : UPSTREAM: 110652: fix: –chunk-size with selector returns missing result #1303  
Full changelog  
 
MULTIARCH-3709 : PowerVS - Add reuse resource flags to e2e test #2994  
MULTIARCH-3732 : PowerVS - Fix cluster deletion when existing resources passed #2993  
MULTIARCH-3733 : Add dev flags in destroy cluster powervs command #2998  
Updated secret permissions for openshift-route-controller-manager #2924  
fix(hcco): Add HCP label to HCCO by default #2972  
fix(ignition): Add HCP label to ignition-server by default #2949  
OCPBUGS-16847 : use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2855  
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 #2803  
OCPBUGS-16411 : fix deletion bug when hostedzone is already deleted #2835  
Kas policy 4.12 #2826  
Leader election config update. #2800  
OCPBUGS-15614 : Check OwningIngressController also in Labels #2759  
OCPBUGS-16086 : autoscaling balance similar groups #2806  
HOSTEDCP-1060 : refactor ignition-server reconcilation and add ignition-server proxy #2749  
OCPBUGS-14873 : Update vendored openshift API for 4.12 #2734  
HOSTEDCP-1073 : enforce blocked rollout of HCP #2745  
properly handle user CA bundle not existing #2711  
OCPBUGS-15304 : [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2695  
OCPBUGS-14873 : Honor global ingress configuration LoadBalancer type on AWS #2678  
OCPBUGS-14803 : Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2667  
[release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount #2512  
OCPBUGS-14156 : Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2614  
OCPBUGS-14031 : Include default ingress CA in root CA bundle #2600  
OCPBUGS-13626 : Sync proxy TrustedCA to guest cluster #2557  
OCPBUGS-13639 : Cherry pick aws endpoint sg #2579  
OCPBUGS-12787 : fix(hcco): Get OLM CatalogSource images from defined map #2485  
ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials #2486  
Configurable SRE MetricsSet #2545  
OCPBUGS-13077 : Ensure ingress controllers are removed before load balancers #2515  
OCPBUGS-11544 : Pass runAsUser to CNO so it can run its managed services with proper security context #2391  
OCPBUGS-12845 : Delete kubeadmin secret when an idp is defined #2492  
OCPBUGS-12738 : Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2473  
OCPBUGS-12199 : remove ACL for aws bucket #2458  
OCPBUGS-11607 : properly reconcile with user specified changes for in proxy configuration #2395  
OCPBUGS-11726 : Update HostedCluster oauthCallbackURLTemplate #2410  
e2e: Cleanup shared OIDC provider on SIGTERM #2449  
HOSTEDCP-568 : Update Konnectiviy socks5 proxy for IBM exception #2406  
OCPBUGS-10584 : Switch NTO metrics auth to certs generated by HCP controller #2293  
OCPBUGS-11014 : Do not proxy when guest cluster resolution fails #2340  
OCPBUGS-11654 : [release-4.12] Create new EC2 client for AWS identity provider health check #2403  
OCPBUGS-10646 : Add storage operators perms. to watch HostedControlPlane #2306  
HOSTEDCP-939 : [release-4.12] Setup shared OIDC provider for e2e clusters #2365  
HOSTEDCP-806 : Fix ValidAWSKMSConfig condition #2362  
OCPBUGS-11056 : fix external APIServer address selection based on endpointAccess #2350  
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2351  
SDA-8707 : No more specifying the scrape interval at servicemonitors & podmonitors level #2356  
HOSTEDCP-900 : Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2285  
OCPBUGS-10504 : Deletion of the VPCEnpoint on conflicting service names #2310  
HOSTEDCP-806 : [release-4.12] Validate etcd KMS config #2273  
HOSTEDCP-801 : [release-4.12] Expose external DNS for private cluster endpoints #2314  
HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297  
OCPBUGS-10587 : Use appropriate serving certificate for OAuth #2295  
OSD-15099 : Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274  
Add PodMonitor for ingress-operator pods in HCP namespaces #2275  
OCPBUGS-8334 : [release-4.12] Update the pull secret source for ignition payload #2268  
Force controleplane upgrade always #2289  
OCPBUGS-8370 : Fix cleanup of volumes on cluster deletion #2253  
OCPBUGS-8241 : Add external DNS health condition / release-4.12 #2206  
HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2263  
Add configuration for automatic labeling and label commands #2255  
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251  
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242  
kms addition for pod identity workflow #2247  
Add e2e test for hosted cluster behind a proxy #2199  
Add e2e test for cluster creation with AWS KMS #2201  
HOSTEDCP-826 : Customize DNS base domain prefix #2235  
feat: Add pod gone check to prober + DNS operator leader elect #2209  
fix(ibmcloud): Explicitly set HCCO controllers #2208  
ensure reconcilation of apiserver port is in 4.12 #2195  
Cleanup default security group only if authorized #2212  
fix(cpo): Set restart annotation on multus-admission-controller #2190  
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189  
fix(cpo): Reduce CNO access if Calico used as network provider #2184  
Skip destroyAWSDefaultSecurityGroup if not AWS #2168  
Create default security group for AWS clusters #2162  
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156  
fix(ibmcloud): Initialize image registry config on creates and bad config #2104  
fix(cpo): Allow KAS profiling disablement #2122  
reduce ignition server scope #2140  
OpenID add support for groups claim in the config #2129  
fix(cpo): Restart registry operator on annotation #2121  
Fix CAPA crd generation #2120  
Set k8s.io/kubernetes dependency to v0.23.3 #2118  
fix(cpo): Separate RBAC for NTO + CNO #2112  
Merge main up to db7c22ae into ‘release-4.12’ #2101  
Merge main into release-4.12 branch #2053  
Release 4.12 rebase latest #2047  
Fix OpenID OAuth config parsing #2029  
Fast foward release-4.12 to main #2003  
OCPBUGS-5133 : Reinstate hosted cluster configuration propagation #1981  
Remove CAPA command from deployment #1970  
Fast forward release-4.12 to main #1964  
Remove CAPI manager container command path #1969  
v1beta1: add missing S3 publishing strategy type #1968  
Fast forward ‘release-4.12’ branch to ‘main’ #1932  
SDN-3508 : Add proxy env variables to CNO deployment #1845  
MCO-258 : inplaceupgrader: handle multiple upgrade versions #1810  
PowerVS Refactor docs - bug fixes #1825  
Docs: add nodes for InPlace Upgrade NodePools #1805  
network: Use non default ovn-k V4InternalSubnet at tenant #1783  
Adds davidvossel as approver #1833  
NodePool API: rename spec.tunedConfig to spec.tuningConfig #1802  
reduce konnectivity-agent log verbosity #1828  
add HC available duration metric #1829  
aws: use gp3-csi storage class by default #1830  
add note for public zone creation doc #1827  
PowerVS: Bug fix on flags usage #1812  
Clean up AWS endpointAccess + servicePublishingStrategy logic #1803  
Ensure kubevirt-csi containers all have resource.Requests and PullPolicy set #1816  
Add custom types for enum fields in PowerVSNodePoolPlatform #1809  
Updated Agent provider docs #1814  
Add KubeVirt Platform Owners #1817  
Add comments to clarify aws endpoints controllers #1808  
Fixing some doc typos and issues #1742  
KubeVirt CSI Driver Integration #1733  
feat: Added “Scale dataplane to zero” workflow to the documentation #1804  
STOR-1040 : Render AWS CSI Driver credentials in the mgmt cluster #1751  
bug: Fixes HOSTEDCP-528, OIDCConfigurationInvalidReason should be always present #1743  
Extracts correct mco image based on managed cluster’s arch #1716  
Fix image registry reconcile loop #1794  
Add CAPI provider image override for PowerVS #1800  
bug: HOSTEDCP-587 explain more in detail Public and PublicAndPrivate endpoint-access #1788  
Enable NodePool controller to apply generated MachineConfigs #1729  
Allow certain EndpointAccess transitions #1761  
increase loop detector threshold to 10 #1801  
Remove KubeletConfig & ContainerRuntimeConfig CRDs #1775  
HCCO: inplace upgrade: do not reconcile bare upgrade pod #1799  
Fix recreate issue on serviceID - MULTIARCH-2895 #1753  
Add compute and memory args for powervs e2e #1797  
test: e2e: exclude catalog pods from restart check #1798  
Update Dockerfiles for consistency #1795  
Make NodePool platform condition types generic #1792  
Ensure existing DHCP server is in ACTIVE state #1784  
Update Dockerfile with same labels as Dockerfile.control-plane #1791  
Expose HC NodeSelector in the cli #1759  
Add recording rule for NTO metric needed in telemetry #1763  
Use separate image for route controller manager #1790  
How to Migrate a HostedClusters among the same AWS Region #1780  
Update index.md. #1535  
Decompress and decode config if supported by current CPO #1758  
update OLM catalogs to 4.11 #1746  
Add image overrides #1785  
Specify ca for gitlab oauth only when passed as input #1772  
STOR-1053 : Add storage objects to guest cluster dump #1770  
Add cloud.ibm.com into konnectivity cloudAPI #1741  
Add fallback for mco flags #1781  
Pass imagerefs to mco #1773  
install: add flag to wait for HyperShift operator rollout #1760  
gzip and base64-encode ignition configs #1671  
Add separate deployment for openshift route controller manager #1756  
Add release image validation for NodePools #1709  
Fix cmd.Context() usage in PowerVS #1754  
Refactor how-to docs #1740  
Increase DHCP service polling interval #1739  
Add Kubevirt Cloud Controller Manager #1725  
Ensure generated junit.xml has a defined suite name #1712  
Add cluster name prefix before secrets #1730  
SDN-3283 : CNO: Add an environment variable with socks5-proxy image #1731  
Revert “Make zone spread only apply within a given revision” #1744  
remove alvaroaleman and ironcladlou from OWNERS #1745  
Make zone spread only apply within a given revision #1724  
Route LDAP IDPs in the oauth server through guest VPC #1680  
Add missing rbac for authentication reader #1734  
Add nodepool create cmd for PowerVS #1726  
Add PowerVS OVN Kube routing config #1718  
Add granular access for PowerVS using cloud credential operator and add storage operator creds #1612  
Enable Node Tuning Operator in HyperShift #1651  
Refactor PowerVS changes #1682  
fix(oauth): Do not proxy IBM Cloud IAM endpoints #1722  
Bug SDN-3459: Handle long OVN SBDB route hostname #1711  
fix(pki): Allow BYO PKI for ignition server #1721  
Set DNS server explicitly while creating DHCP #1720  
Fix CLI panic when status.version is nil #1715  
OVN SBDB: Use private router when possible #1689  
Registry operator: Avoid restarts when token file changes #1713  
HO: Ignore NoSuchBucket error when deleting OIDC docs #1714  
Add a drain controller for inplace upgrades #1691  
Reconcile default ingress controller on creation only #1710  
NE-1043 : Move the DNS operator into the management cluster #1537  
Add node controller to HCCO Manager #1702  
Add recording rules for telemetry #1690  
Destroy: Don’t fail if finalizer can not be added #1707  
Upgrade AWS SDK #1701  
Use kubeconfig port for worker haproxy #1708  
Set right API group #1706  
AWS infra destroy: Handle bucket not found during batch delete #1700  
Cleanup etcd rule manifest in CVO #1699  
Oauth: Fix hostname when using DNS indirection and no public router LB #1705  
Fix clusters where apiserver is exposed through LB and DNS indirection is used #1696  
Update external-dns image #1694  
Move Cloud network config controller to the management cluster #1679  
Allow OpenShiftSDN CNI for PowerVS platform #1693  
Add CIDR checks to webhook on create #1688  
Fix clusters that use LB expose strategy with a custom port #1683  
Validate OCP release version and SDN on initial install #1686  
Reconcile spec of clusterversion resource #1687  
APIServer route expose strategy: Fix with private clusters #1685  
remove external-dns provider variable from openshift template parameters #1684  
E2E: Fix flakes due to inability of finding matching nodepools #1681  
Enable cleaning up of hosted cluster cloud resources on destroy #1672  
ClusterID and infraID should be immutable. #1660  
Correctly manage infra status condition when there is no LB controller #1678  
Fix Switch to library-go to compute audit profile audit policy #1677  
Add IBMPowerVSCluster to status subresource set #1676  
OAuth: do not reference paths for empty optional secrets or configmaps #1674  
Honor the debug-deployments annotation #1673  
Ignition server: Use common pki code #1657  
Fix router reconciliation when apiserver is exposed through LB #1669  
E2E: Consistently use Patch to avoid conflict failures #1664  
Fix e2e powervs destroy opts #1650  
Drop insecure port on router to save rules #1668  
external-dns settings for operator install template rendering #1666  
PowerVS: Add provider id fmt for capi deployment #1665  
Registry operator: Set proxy vars #1663  
A few simple kubebuilder validations. #1658  
Ingress endpoint #1597  
Add rbac so route-to-ingress controller can do its leader election #1662  
Move image registry operator to control plane #1643  
CI script to install hypershift from pre-release MCE catalog source #1648  
Add a helper to create SA kubeconfigs #1654  
HCCO: Use cpo manifests for references #1645  
Increase the unittest timeout to 20m from the default 10m #1653  
Add unittests for haproxy config generation #1652  
Drop hypershift-operator util and consolidate with support #1647  
HO: Fix haproxy to have apiserver external address for public clusters #1649  
Self image lookup: Retry on empty string #1628  
private aws cluster guide - update IAM policy example #1641  
And 3 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-21113 : Bump golang.org/x/net to v0.18.0 #57  
Updating ose-ibm-cloud-controller-manager images to be consistent with ART #42  
OCPBUGS-1413 : Rebase 30.09.2022 k8s 1.25 #41  
Updating ose-ibm-cloud-controller-manager images to be consistent with ART #40  
Full changelog  
 
OCPBUGS-20583 : [IBM VPC] failed provisioning volume in proxy cluster #56  
OCPBUGS-21206 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52  
OCPBUGS-8451 : Rebase to v5.1.2 for OCP 4.12 #32  
STOR-1060 : Update ibm-vpc-block-csi-driver to v5.0.0 #26  
UPSTREAM: 99: Update golint to 1.50 #25  
UPSTREAM: 98: Reformat code with go 1.19 again #24  
UPSTREAM: 98: Reformat code with go 1.19 (#98) #23  
UPSTREAM: <carry>: Remove .github files #21  
STOR-867 : Update ibm-vpc-block-csi-driver to the latest release #18  
OCPBUGS-416 : Add udev #17  
Rebase: ibm-vpc-block-csi-driver v4.4.4 #14  
Full changelog  
 
OCPBUGS-20583 : [IBM VPC] failed provisioning volume in proxy cluster #79  
OCPBUGS-21302 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #83  
OCPBUGS-3464 : Update deployment files for snapshot support #46  
OCPBUGS-2354 : Inject proxy settings and custom CA bundle into vpc-node-label-updater container #44  
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #43  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #42  
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #41  
Bug 2047732 : [IBM]Volume is not deleted after destroy cluster #40  
Full changelog  
 
OCPBUGS-21415 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #29  
Updating ibm-vpc-node-label-updater images to be consistent with ART #15  
STOR-867 : Update ibm-vpc-block-csi-driver to the latest release #14  
Updating ibm-vpc-node-label-updater images to be consistent with ART #13  
Rebase: ibm-vpc-node-label-updater v4.1.6 #11  
Full changelog  
 
OCPBUGS-3289 : IBMCloud: Replace stuck machine #11  
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #7  
Fix version #5  
Bug 2062579 : IBMCloud: Verify machine profile #4  
Default version when one isn’t available #3  
Synch repo cluster-api-provider-ibmcloud with machine-api-provider-ibmcloud #1  
And 1 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
adds helm information gather (#890) #890  
OCPBUGS-23439 : remove username & password config options (#869) #869  
OCPBUGS-22922 : create Prometheus rules programmatically according the… (#860) (#862) #860  
OCPBUGS-20731 : update dependencies (#841) #841  
Add cherry-pick from 4.13 (#853) #853  
OCPBUGS-19476 : update Insights report config logging (#831) #831  
OCPBUGS-19405 : workload info gatherer, add external image repo (#823) #823  
OCPBUGS-15031 : fix the config serialization & add test (#794) (#800) #794  
OCPBUGS-15459 : gather PDBs only from openshift namespaces (#804) #804  
OCPBUGS-15414 : extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) #788  
OCPBUGS-7871 : Collect info about monitoring pods pv  (#769) #769  
OCPBUGS-11008 : update the cluster transfer interval to 12h (#765) #765  
OCPBUGS-10531 : service_accounts.go Marshal fix (#754) #754  
OCPBUGS-6732 : Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727  
OCPBUGS-6833 : feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) #736  
OCPBUGS-6782 : Create gatherer for gathering machines. (#734) #734  
OCPBUGS-5976 : operators gatherer - handle ingresscontroller relatedObject & simplify (#714) (#719) #714  
OCPBUGS-5348 : do not periodically update Available clusteroperator co… (#710) #710  
do not get disabled rules (#706) (#713) #706  
OCPBUGS-3377 : fix: storage/ceph path structure (#691) (#697) #691  
OCPBUGS-2915 : Updated info link in insights recommendations (#683) #683  
refactor(workloads_info): improving code reability (#650) #650  
OCPBUGS-2249 : fix the schema checking conditional gathering rules (#687) #687  
Improve GatherNodeLogs docs (#690) #690  
Update owners list (#688) #688  
OCPBUGS-2346 : refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) #685  
limit the size of logs loaded into memory (#681) #681  
Updating ose-insights-operator images to be consistent with ART (#682) #682  
read DataPolicy attribute from the config API (#680) #680  
Update PNCC gatherer (#679) #679  
OCPBUGS-1351 : do not include disabled rules in the total metric (#678) #678  
updated conditional gathering rules checking (#670) #670  
read new config API and disable gatherers based on the API values (#673) #673  
OCPBUGS-1068 : fix alert namespace label (#674) #674  
Implement insights report updating in the insightsoperators.operator.openshift.io resource (#669) #669  
K8s & OpenShift version updates (#671) #671  
manifests/02-namespace: Explicitly clear run-level label (#672) #672  
openshift-machine-api warning events gatherer (#658) #658  
Introduce insightsoperators.openshift.io CR & implement its gather st… (#666) #666  
OCPBUGS-439 : update the DVO metrics gatherer (#664) #664  
fix: order conditions by type to limit un-needed updates (#667) #667  
chore(manifests): adding insights capability annotations (#646) #646  
Update K8s & OpenShift versions + vendoring (#661) #661  
helm upgrade and uninstall metric gathering (#657) #657  
Remove Bugzilla references (#660) #660  
Extend the conditional gatherer docs (#656) #656  
Gather status of the cephclusters.ceph.rook.io resources (#654) #654  
Enable Insights recommendations as alerts by default (#653) #653  
Gather & store firing alerts in JSON too (#652) #652  
Updating ose-insights-operator images to be consistent with ART (#649) #649  
Expose Insights recommendations as alerts (#644) #644  
Minor gatherer’s docs & OWNERS update (#647) #647  
chore(docs): adding list of insights generated metrics (#645) #645  
Full changelog  
 
OCPBUGS-19008 : better compatibility with old hostnamectl #92  
OCPBUGS-19008 : backport hostname fixes #90  
“Bug OCPBUGS-15831: Switch to udevadm command install instead of package” #82  
OCPBUGS-9934 : Adding dep on python3-werkzeug >= 2.0.3-4 #72  
OCPBUGS-5067 : make coreos-installer output available in the logs #66  
OCPBUGS-456 : Update ironic-python-agent for OCP 4.12 #61  
Update dependencies for OCP 4.12 #60  
Updating ironic-agent images to be consistent with ART #57  
Install iproute explicitely #59  
Full changelog  
 
OCPBUGS-15735 : Binary should be compiled on rhel9 #92  
Updating ironic-rhcos-downloader images to be consistent with ART #83  
OCPBUGS-478 : Install libguestfs-tools-c instead of libguestfs-tools #82  
Updating ironic-rhcos-downloader images to be consistent with ART #79  
And 1 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-14415 : Flush addresses on provisioning interface with global scope only #37  
Updating ironic-static-ip-manager images to be consistent with ART #31  
Full changelog  
 
OCPBUGS-21441 : upgrade golang.org/x/net to 0.17.0 to address CVE #91  
OCPBUGS-20580 : limit number of simultaneous client requests #79  
Updating ose-prometheus-adapter images to be consistent with ART #65  
Bump openshift/k8s-prometheus-adapter to v0.10.0 #64  
OWNERS: Add Joao and myself, and move former team members to emeritus #63  
Updating ose-prometheus-adapter images to be consistent with ART #62  
Full changelog  
 
Updating openshift-enterprise-egress-router images to be consistent with ART #115  
Updating ose-egress-http-proxy images to be consistent with ART #114  
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117  
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116  
Add bparees as approver #118  
Updating openshift-enterprise-base images to be consistent with ART #113  
Full changelog  
 
OCPBUGS-20764 : bump x/net to v0.17.0 #103  
OCPBUGS-4118 : cherry-pick, do not expose ingress path metric when service is nil #84  
OCPBUGS-4112 : cherry-pick, autoscaling/v2beta2 HorizontalPodAutoscaler is deprecated in v1.23+ #83  
Updating kube-state-metrics images to be consistent with ART #78  
Bump openshift/kube-state-metrics to v2.6.0 #77  
OWNERS: Add Joao and myself, and move former team members to emeritus #76  
Updating kube-state-metrics images to be consistent with ART #75  
Full changelog  
 
Updating ose-libvirt-machine-controllers images to be consistent with ART #240  
Full changelog  
 
OCPBUGS-25303 : Update reference URL #1189  
OCPBUGS-21501 : Bump golang.org/x/net to v0.18.0 #1176  
OCPBUGS-10943 : Fix empty component version #1132  
OCPBUGS-7882 : Block machine deletion if extra disks are attached #1120  
OCPBUGS-8286 : Short circuit misfiring #1109  
OCPBUGS-5413 : Append annotations from machine template spec to the node #1104  
OCPBUGS-5117 : [release-4.12] Allow to use machine.openshift.io API in provider specs #1086  
OCPBUGS-5417 : machine-api-termination-handler: run DaemonSet only on Linux #1105  
Show warnings if provider specs have invalid GroupVersionKind #1018  
Update envtest #1071  
OCPCLOUD-1131 : Add DescribeInstanceTypes permission for AWS provider #1062  
OCPBUGS-2151 : Don’t degrade when workers not expected #1074  
Updating ose-machine-api-operator images to be consistent with ART #1073  
Update default Azure image to use image galleries #1076  
OCPBUGS-1274 : add tolerations to termination handler #1072  
Restrict creating Power VS machine with negative processor and memory #1067  
OCPBUGS-519 : update error message for disconnected installation validation #1068  
Update dependencies to K8s 1.25 #1070  
Only drain a single control plane machine at once #1066  
Add tag and category id to the caching client log messages #1063  
Bug 2101736 : Ignore managed fields during finalizer removal #1061  
Ensure the phase transition metric only updates when the phase changes #1059  
Release leader election lease when shutting down #1060  
Tags/categories ids cache implementation #1057  
OCPBUGS-268 : vSphere - enable steal time accounting #1056  
Bug 2111972 : operator NS manifest: Set empty openshift.io/run-level #1053  
Change the git command #1050  
add a helper function to detect windows os #1055  
Bug 2115308 : Ensure failed drains are subject to exponential backoff #1051  
Bug 2087981 : Change “create” sequence with powering on the vm after clone #1047  
update windows helper functions #1049  
Bug 2110501 : Revert “Bug 2101880: operator NS manifest: Set empty openshift.io/run-level” #1045  
Bug 2109258 : add more support for old delete annotation #1042  
Bug 2101736 : allow to remove finalizers #1037  
Bug 2107578 : Fix while setting default processor value for Power VS platform #1040  
Bug 2104642 : fix the Machine validation webhook for nutanix providerSpec #1038  
Bug 2104642 : Add a validation webhook for Nutanix MachineProviderConfig #1034  
Bug 2097153 : change ListTags call to ListTagsForCategory #1027  
Bug 1994820 : Degrade operator on cluster bootstrap if not all Machines are Running #1019  
Migrate delete annotation to match upstream CAPI annotation #1024  
add utility functions for windows powershell tags #1030  
Bug 2101880 : operator NS manifest: Set empty openshift.io/run-level #1031  
Add webhook validations for Azure boot diagnostics #1029  
Update revendoring tool #1028  
Full changelog  
 
OCPBUGS-21038 : update library-go and kube deps to latest version #4013  
OCPBUGS-22719 : Backport logspam PRs #4008  
OCPBUGS-21723 : keepalived/ingress: change healthcheck script #3985  
OCPBUGS-18433 : Prevent NM from unsetting the hostname #3900  
OCPBUGS-20509 : resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3969  
OCPBUGS-19779 : daemon: always use podman cp to copy extensions container content #3944  
OCPBUGS-19515 : The kubeconfig copied on to each node has 644 permissions #3931  
OCPBUGS-17862 : Agent-based install process the container machine-config-controller will be oom #3875  
OCPBUGS-17461 : The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3844  
OCPBUGS-15570 : configure-ovs: support UUID in vlan.parent #3768  
OCPBUGS-16754 : daemon: Don’t traverse /run/ostree/auth.json symlink #3818  
OCPBUGS-11303 : Fix regex dot in coredns config file #3660  
OCPBUGS-13757 : The MCD has a non-functional pivot command that should be removed #3710  
OCPBUGS-7718 : Prevent possible split-brain scenario with keepalived unicast #3562  
OCPBUGS-7945 : [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd #3573  
OCPBUGS-5935 : Wrap podman commands in a while loop #3495  
OCPBUGS-7167 : Avoid ‘too restrictive’ SCC problems by being more explicit #3542  
OCPBUGS-10505 : daemon: Drop duplicate --authfile used in run #3617  
OCPBUGS-10372 : Remove hard requirement for the afterburn from early-running aws-related services #3613  
OCPBUGS-9993 : Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3608  
OCPBUGS-7445 : configure-ovs: fix mtu-migration cleanup #3555  
OCPBUGS-8261 : [release-4.12] backport cleanupDuplicateMC #3578  
OCPBUGS-6943 : Improvements for configure-ovs.sh #3528  
OCPBUGS-6045 : There are not enough logs in case “oc extract” is stuck in mco first boot #3503  
OCPBUGS-6973 : configure-ovs: optionally generate configuration in /run #3532  
OCPBUGS-6779 : baremetal: clean state generated by NM when run by dracut #3521  
OCPBUGS-7241 : controller: default overwrite to true for files #3546  
OCPBUGS-6997 : Fix 4.12 art images #3535  
OCPBUGS-6805 : Only check image type if we are sure there is work that needs to be done #3526  
OCPBUGS-5999 : 4.12 - remove goutils from dependency tree #3496  
OCPBUGS-6179 : controller: don’t render new MC until base MCs update #3506  
OCPBUGS-5743 : Mount /run/nodeip-configuration into keepalived containers #3479  
OCPBUGS-5384 : daemon: Explicitly pull image before running #3475  
OCPBUGS-3311 : [alicloud] provider ID not being set for kubelet #3457  
OCPBUGS-4805 : Do not allow empty system reserved values #3453  
OCPBUGS-4667 : vsphere: check that /etc/hostname is not empty #3452  
OCPBUGS-4091 : NM resolv prepender: correct permissions for systemd resolved config #3442  
OCPBUGS-4091 : NM resolve prepender: remove extra quotes in OKD flow #3433  
OCPBUGS-3955 : daemon: gate done state on uncordon completion #3425  
OCPBUGS-3750 : daemon: Stop setting I/O scheduler to bfq #3417  
OCPBUGS-3874 : Don’t make https call to http endpoint #3420  
OCPBUGS-3504 : On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3410  
OCPBUGS-3650 : Revert “Substitute skopeo inspect for imageInspect/podman” #3414  
OCPBUGS-3001 : Substitute skopeo inspect for imageInspect/podman, drop podman inspect fallback #3396  
Force string format when logging rpm-ostree status #3393  
controller: Don’t allow creating the force file via MachineConfig #3391  
Bug 2034883 : Sync controllerconfig anyway if daemon sync fails #3388  
Fix machine-config-operator logspam when extensions container is not present #3387  
OCPBUGS-2757 : Reconcile successfully if already booted into target #3383  
OCPBUGS-1257 : Have keepalived check for haproxy status for API VIP #3339  
daemon: Only try to apply layered changes if BaseOSExtensionsContainerImage is not empty #3382  
OCPBUGS-89 : configure-ovs: auto-connect ovs-if-phys0 with br-ex #3312  
Bug 2107090 : Machine config server hangs on handling large number of requests in parallel #3262  
OCPBUGS-2079 : Add ephemeral storage to kubelet system reserved args #3375  
MCO-400 : helpers: Do synchronize condition if message changes #3369  
OCPBUGS-2197 : update: Set proxy for inplace container update too #3377  
OCPBUGS-2197 : OCPBUGS-2122: update: Inject proxy data for firstboot #3370  
OCPBUGS-2269 : Upgrade failures and MCDPivotError Alert Firing on GCP realtime kernel #3373  
daemon: Temporarily copy auth file with more open perms on SCOS too #3372  
: Add missing bits for dual-stack ingress VIPs #3341  
Jira OCPBUGS-1503: configure-ovs.sh: Do not fail bond with invalid slave device names #3345  
MCO-396 : daemon: FCOS workaround, plus SELinux workaround #3358  
Switch to https://github.com/coreos/rpmostree-client-go  #3302  
RFE-2962 : configure ovs should use node-ip-hint set by nodeip-configuration #3362  
MCO-371 : metrics: aggregate os_image_url_override metric to avoid unbounded cardinality #3363  
Rename KUBELET_NODEIP_HINT to just NODEIP_HINT #3353  
Revert “RFE-2962: configure ovs should use node-ip-hint set by nodeip-configuration service” #3360  
Bug 2056387 : fix alibaba kubelet node name unit #3338  
Dockerfile: Remove SCOS extensions image references #3356  
bootstrap: Add CLI arguments for new format oscontainer #3354  
RFE-2962 : configure ovs should use node-ip-hint set by nodeip-configuration service #3233  
Add cgroupv2 configuration support in MCO #3349  
MCO-289 : Teach the MCO to use new format image #3317  
MCO-371 : metrics: Add metric for OS image override #3343  
OCPBUGS-1616 : Revert “Merge pull request #3311 from sairameshv/cgroupv2” #3348  
OCPNODE-1146 Add cgroup confiuration support in MCO #3311  
Bump openshift/api #3336  
Dual stack vips #3269  
TRT-540 : Add privileged label to infra namespaces #3328  
update to release.openshift.io/feature-set to match OCP 4.12 #3329  
added @engelmi, @eslutsky, @Darth-Mera to ovirt-approvers #3332  
OCPBUGS-825 : Provide a reason if operator is unavailable #3324  
MCO-256 : hypershift: add disruptionless updates to MCD #3320  
OCPBUGS-224 : Make sure there is a search domain in resolv.conf #3306  
Hypershift: remove error message on return #3326  
daemon: Drop mock node updater client #3325  
OCPBUGS-631 : Pull container image as a separate step #3318  
Add kubens.service, drop-ins, and kubensenter prefix to kubelet.service #3274  
Add RuntimeDefault to ctrcfg #3295  
daemon: Use just one NodeUpdaterClient instance #3304  
vendor: Bump containers/image #3303  
OKD: Add build args for FCOS and SCOS #3294  
Bug 2107113 : Fix .ssh directory not owned by core when created by Machine Config D… #3250  
fixes config decompression lint issue #3301  
Round off SYSTEM_RESERVED_MEMORY if value is in decimal #3299  
Remove onPremPlatformKeepalivedEnableUnicast function #3174  
MCD: Add support for RHCOS9 and SCOS9 #3179  
Bug-2051533: Adding day2 remote worker node requires manually approving CSRs #3276  
Decompress and decode Ignition configs from ConfigMap #3280  
Bug 2111817 : daemon: Add a workaround for bug 2111817 #3291  
Don’t reference rhel-coreos-8-extensions yet #3290  
Accept new image format, consume in controllerconfig, but stop there #3286  
Allow overriding OSImageURL with a layered image #3272  
daemon: drop systemctl stop kubelet during node reboot #2509  
Bug 2105003 : on-prem: improvements on resolv-prepender #3271  
Fix typo #3279  
Update library-go to set OpenStack provider to external #3270  
add control-plane label #3273  
Prep patches for bumping openshift/client-go #3251  
Update approvers and reviewers list with current active members #3266  
ctrcfg controller remove cleanupmc() #3149  
Bug 2109963 : Master node in SchedulingDisabled after upgrade from 4.10.24 -> 4.11.0-rc.4 #3264  
daemon: Drop tuneableFCOSArgsAllowlist #3248  
daemon: Drop workarounds for rpm-ostree bugs #3239  
Bug 2104619 : Remove rollback deployment #3243  
on-prem: render-config-coredns from /var/run/NetworkManager/resolv.conf #3237  
Bug 2101157 : configure-ovs: fix handling of connection names with spaces and checking the connection name suffix #3242  
Bug 2104503 : Updating ose-machine-config-operator images to be consistent with ART #3228  
Bug 2103786 : drain controller: don’t skip the MCC pod drain #3212  
Bug 2102004 : pkg/controller/common/helpers: Explicitly set mode 0644 #3226  
Bug 2099945 : configure-ovs: clone inactive autoconnect slaves #3203  
Bug 2101157 : configure-ovs: fix handling of connection names with spaces and checking the connection name suffix #3214  
Bug 2097785 : Send out OSUpdateStaged event directly #3189  
Bug 2101880 : NS manifest: Set empty openshift.io/run-level #3217  
Update block payload test with vendored runtime-utils #3148  
Bug 2099664 : daemon: initialize nodewriter before login monitor #3211  
Bug 2096413 : configure-ovs: set mac only for non fail_over_mac bonds #3202  
README: Link to the product documentation for example MachineConfigs #3150  
Full changelog  
 
OCPBUGS-21543 : Uplift x/net to v0.17.0 #106  
OCPBUGS-19008 : Pass BareMetalHost name to IPA (take 2) #101  
OCPBUGS-18687 : Watch networkData Secrets for changes #96  
OCPBUGS-5655 : Update dependencies #76  
Updating ose-image-customization-controller images to be consistent with ART #65  
OCPBUGS-3557 : use host IPC for the agent container #69  
Use GO 1.19 #66  
OCPBUGS-389 : mount /run/udev into the agent container #61  
Support different IP addresses for Inspector and Ironic #60  
Updating ose-image-customization-controller images to be consistent with ART #57  
Upgrade golangci linter to 1.47.3 #58  
Remove IPA settings that match the defaults in ironic-agent-image #38  
Full changelog  
 
OCPBUGS-21420 : Update go.mod for CVE-2023-39325 (#36) #36  
OCPBUGS-977 : Sync k8snetworkplumbingwg/multi-networkpolicy-iptables 2022_10 (#20) #20  
Updating multus-networkpolicy images to be consistent with ART (#19) #19  
Upstream rebase (#18) #18  
Updating multus-networkpolicy images to be consistent with ART (#17) #17  
Full changelog  
 
Updating ose-multus-route-override-cni images to be consistent with ART #27  
Full changelog  
 
OCPBUGS-21499 : update golang.org/x/net to v0.17.0 #209  
OCPBUGS-5953 : Denormalize IP name before checking if pod is alive [Backport 4.12] #178  
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #134  
OCPBUGS-8673 : Dual stack support #131  
OCPBUGS-7429 : Invalid ipv6 backport 4.12 #109  
OCPBUGS-11321 : respect requested allocation range when exluding ranges [Backport 4.12] #123  
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #93  
OCPBUGS-3941 : Backport Excluded ranges bug (#282) #103  
Fix commitish for non-default interfaces fix #96  
ip-reconciler: Add all non default interfaces to Pod IP list #95  
Full changelog  
 
OCPBUGS-4250 : [release-4.12] backport PodNetworkConnectivityCheck gather script #334 #334  
Updating ose-must-gather images to be consistent with ART #330  
Bug 2000552 : Add apiservices logs gathering by default #332  
OCPBUGS-1810 : fix ingress node firewall script permission #329  
Add ingress node firewall must-gather collection script #328  
Updating ose-must-gather images to be consistent with ART #320  
Bug 2103283 : Add timeout to oc cp command to fix must-gather delays when routers are terminating #317  
Stop collecting Docker logs on Windows instances #315  
Full changelog  
 
OCPBUGS-13836 : Ignore missing links during delete command #53  
Updating ose-network-interface-bond-cni images to be consistent with ART #37  
ds merges: mac duplicates #40  
Add mtu verification for nics that are not sriov (#40) #38  
ds merges: github ci #33  
Full changelog  
 
Update the k8s dependencies to 1.25.15 (#84) #84  
Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74  
Remove e2e tests that consistently fail in 4.12 (#74) #74  
Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60  
Fix gofmt check issue (#68) #68  
Update golang.org/x/text to 0.7.0 (#66) #66  
Adjusted test ns for the new ocp security model (#61) #61  
Updating ose-network-metrics-daemon images to be consistent with ART (#59) #59  
Full changelog  
 
OCPBUGS-1831 : Improve error propagation #70  
Updating ose-network-tools images to be consistent with ART #71  
Minor fixed found during demo preparation #68  
Add pod-run-netns-command script to run command from network-tools #67  
Implement new scripts to interact with ovn cluster #66  
Migrate existing scripts to network-tools #65  
Rework network-tools to #64  
update owners #62  
Updating ose-network-tools images to be consistent with ART #63  
Full changelog  
 
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #27  
Add .ci-operator.yaml config file to specify build image for OCP ci #28  
Updating ose-nutanix-machine-controllers images to be consistent with ART #26  
OCPBUGS-766 : Add warning message when the region/zone label value is ‘Unnamed’ #25  
Upgrade dependency prism-go-library version to v0.2.0 #24  
OCPBUGS-766 : Missing the instance-type/region/zone labels in Machine CRs #23  
Updating ose-nutanix-machine-controllers images to be consistent with ART #20  
Full changelog  
 
Updating ose-oauth-apiserver images to be consistent with ART #80  
bump kube to 1.24.4 #81  
Full changelog  
 
OCPBUGS-13906 : don’t log request query and fragment on failed authn request #129  
OCPBUGS-12757 : bump lib-go for group cache fix, kube 1.24->1.25 #127  
Updating oauth-server images to be consistent with ART #109  
Bump library-go to b2073c41366aae78868b24e86d99021b79d754cb #112  
fix linter findings #98  
Full changelog  
 
OCPBUGS-21440 : fix: CVE-2023-39325 and CVE-2023-44487 (#713) #713  
OCPBUGS-14065 : Fix destination image reference (#650) #650  
OCPBUGS-11908 : Fix (#607) (#641) #607  
OCPBUGS-14065 : fix: Limit the nested repository path while mirroring the images (#642) #642  
updates the OWNERS file (#646) #646  
OCPBUGS-12261 : fix: skips bundles with ‘skips’ field on head bundle (#618) #618  
OCPBUGS-863 : Add skip pruning flag and logic  (#591) #591  
Bugfix for destination registry nested paths length (#590) #590  
OCPBUGS-6703 : fix: adds logic that searches for the correct name when using a heads… (#554) #554  
Updating oc-mirror-plugin images to be consistent with ART (#515) #515  
OCPBUGS-5253 : Fix: fixes issues encountered by QE (#543) #543  
OCPBUGS-5253 : fix: Missing ‘ImageContentSourcePolicy’ and ‘CatalogSou… (#542) #542  
OCPBUGS-4516 : fix: oc-mirror does not work as expected relative path for OCI format copy (#532) #532  
OCPBUGS-4365 : Fix cases where namespace or subnamespace may be empty (#530) #530  
OCPBUGS-4414 : fix (#528) #528  
docs: adds grammar fixes to metadata-management.md (#521) #521  
WRKLDS-547 (#519) #519  
remove afflom (#520) #520  
Add feature to mirror to alternative registry (#518) #518  
Pr 512 follow (#517) #517  
CFE-538 : WRKLDS-456 - WRKLDS-457: copy images from and to remote registry using local directory (oci format) (#512) #512  
Fix –ignore-hisotry description and some format adjustment (#495) #495  
updateURL: Allow overriding for CI builds (#514) #514  
Migration of the diff logic from operator-registry + setting of defaultChannel fix by adding channel’s Priority property (#497) #497  
Create ParseReference function in the image package, that wraps around imagesource.ParseReference, adding support for “oci:” prefix (#503) #503  
chore: remove jpower432 as approver (#505) #505  
fix: remove release architecture validation at the config level (#501) #501  
Updating oc-mirror-plugin images to be consistent with ART (#496) #496  
Full changelog  
 
OCPBUGS-8717 : Clear metadata.namespace on projects before write. #358  
OCPBUGS-4339 : fix printer panic #335  
IR-259 : changing image stream importMode increments its generation #329  
IR-258 : ImageStreamImport manifest list support #290  
bump to kube 1.25.2 #320  
OCPBUGS-2803 : Revert “projects: add rw mutex to auth cache” #326  
Perform route host defaulting and update authz using v1 types. #321  
Drop AllocateRouterShard from hostname allocation interface. #322  
Use route/v1 types for route warnings. #317  
Remove k8s.io/kubernetes deps from route validation/defaulting. #319  
Condense the route host allocator abstraction. #313  
Move route host assignment code out of the route REST strategy. #315  
Make route validation operate on v1 types. #312  
make api team approver #316  
Remove use of %w formatting directive from t.Errorf call. #293  
add retry on imagestreamtag update #304  
Add coreydaley as reviewer/approver for pkg/build #294  
Stop unnecessary project auth cache invalidations. #295  
Bug 2089402 : Validate Image labels correctly #292  
Full changelog  
 
Updating ose-openshift-controller-manager images to be consistent with ART #241  
OCPBUGS-978 : gracefully release leases in OCM #239  
template namespace processing #242  
bump to kube 1.25.2 #244  
Remove route controllers #240  
remove route controllers from OCM process (openshift-controller-manager start) #238  
Updating ose-openshift-controller-manager images to be consistent with ART #236  
Bug 2117235 : separate route controllers to a new command #234  
Bug 2116715 : remove GenericResourceInformer code because it is not used anymore #235  
BUILD-417 : Rebase k8s 1.24 #226  
Bug 2110617 : Split route controller #230  
BUILD-433 : Run builds in user namespaces without seccomp if BUILD_PRIVILEGED=false #173  
Full changelog  
 
OCPBUGS-20706 : bump x/net to v0.17.0 #106  
Updating openshift-state-metrics images to be consistent with ART #91  
OWNERS: Add myself, and move former team members to emeritus #90  
Updating openshift-state-metrics images to be consistent with ART #89  
Updating openshift-state-metrics images to be consistent with ART #88  
Full changelog  
 
OCPBUGS-21557 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #137  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #130  
Bug OCPBUGS-3774: Add SecretHashAnnotation to node service #98  
OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #94  
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #93  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #92  
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #90  
Full changelog  
 
Bug OCPBUGS-19770: Set controller’s SyncPeriod to 1 hour #86  
OCPBUGS-10607 : Use TenantID if ProjectID is empty #66  
OCPBUGS-10603 : machineset_controller: Stop caching clouds credentials #65  
OCPBUGS-7155 : Address CVE-2022-41717 #55  
Updating ose-machine-api-provider-openstack images to be consistent with ART #47  
Depend on CAPO v0.6.3 #45  
gofmt with Go v1.19 #48  
Update dependencies #44  
Updating ose-machine-api-provider-openstack images to be consistent with ART #43  
Full changelog  
 
OCPBUGS-20780 : deps: Upgrade golang.org/x/net to v0.17.0 #277  
OCPBUGS-2508 : Ensure network defs without subnet follow noAllowedAddressPairs #247  
Updating ose-openstack-machine-controllers images to be consistent with ART #244  
gofmt with Go v1.19 #246  
OCPBUGS-1765 : Apply noAllowedAddressPairs on intended subnets only #242  
Updating ose-openstack-machine-controllers images to be consistent with ART #239  
Full changelog  
 
OCPBUGS-23162 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131  
Updating ose-ovirt-csi-driver images to be consistent with ART #122  
Bump go version #123  
improved logging if no storage domain is found by name #121  
updated go-ovirt-client #120  
Added @Darth-Mera as approver #119  
added k8s deployment files #114  
update go-ovirt-client #113  
Updating ose-ovirt-csi-driver images to be consistent with ART #112  
Full changelog  
 
OCPBUGS-23266 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #128  
OCPBUGS-18417 : set TLS cipher suites in Kube RBAC sidecars #121  
Updating ose-cluster-ovirt-csi-operator images to be consistent with ART #108  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #107  
updated go-ovirt-client #106  
OCPRHV-685 : added secret informer for daemonset #104  
Added @Darth-Mera as approver #105  
update go-ovirt-client #103  
Add client certificate and key to service monitor #102  
Bug 2088033 : Clear text password stored on disk #99  
Update credentials automatically #101  
Updating ose-cluster-ovirt-csi-operator images to be consistent with ART #100  
Full changelog  
 
OCPBUGS-6309 : Fix swapped CPU socket and thread mapping #173  
Updating ose-ovirt-machine-controllers images to be consistent with ART #170  
Improve logging #168  
update go-ovirt-client #167  
added wrapped klogr for unified logging #166  
Remove duplicate MemoryMB validation #165  
Ocprhv 681 automatic credentials update #161  
Added @Darth-Mera as approver #164  
Add validations tests #163  
updated readme and custom capo docs #162  
Refactor controller structure #160  
Disable memory ballooning in high perf workers #143  
Fix OCPRHV-789 #159  
OCPRHV-788 : added check for high_performance to set placement_policy_affinity #144  
added functional test for automatically updating credentials #158  
set serial console enabled for high performance VMs #157  
enable headless for high performance VMs #156  
disable soundcard for high performance VMs #155  
dedicated functional test run script #154  
update envtest setup for CI #153  
added generation of crds #150  
removed test stage in dockerfile #151  
OCPRHV-806 : added functional test for actuator #148  
added first set unit tests for machine validation #147  
Updating ose-ovirt-machine-controllers images to be consistent with ART #146  
Full changelog  
 
OCPBUGS-24740 : UPSTREAM: <carry>: snyk code scan exclude vendor directory #52  
OCPBUGS-21260 : CVE-2023-39325 - Update net dependencies - 4.12 #47  
Updated OWNERS component to Multi-Arch #29  
Rebase 30.09.2022 k8s 1.25 #23  
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #22  
Add JoelSpeed as approver #21  
Add Karthik-K-N as approver #20  
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #18  
And 1 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-24738 : snyk code scan exclude vendor directory #63  
OCPBUGS-21882 : CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.12 #57  
Update OWNERS #39  
Updating ose-powervs-machine-controllers images to be consistent with ART #34  
Update go versoin to 1.19 and gofmted file as per go 1.19 #35  
Updating ose-powervs-machine-controllers images to be consistent with ART #32  
Update k8s to 1.25 #33  
Add infrastructure sync controller for custom service endpoints #31  
Add JoelSpeed approver #30  
Add Karthik-K-N as approver #29  
Autoscaler support #25  
Set the node internal dns address for machine #27  
Updating ose-powervs-machine-controllers images to be consistent with ART #26  
Full changelog  
 
Updating prom-label-proxy images to be consistent with ART #350  
OWNERS: Add myself, and move former team members to emeritus #349  
Updating prom-label-proxy images to be consistent with ART #347  
Bump v0.5.0 #348  
Full changelog  
 
OCPBUGS-21219 : update golang.org/x/net to v0.17.0 [4.12] #175  
OCPBUGS-4048 : fix certificate reloads after rotation #149  
Revert unwanted downstream patch #144  
OCPBUGS-1718 : [bot] Bump openshift/prometheus to v2.39.1 #142  
Updating golang-github-prometheus-prometheus images to be consistent with ART #141  
Bump openshift/prometheus to v2.38.0 #140  
OWNERS: Add myself, and move former team members to emeritus #139  
Updating golang-github-prometheus-prometheus images to be consistent with ART #137  
Bump openshift/prometheus to v2.37.0 #138  
Full changelog  
 
OCPBUGS-21031 : Bump golang.org/x/net to v0.17.0 #82  
Updating golang-github-prometheus-alertmanager images to be consistent with ART #64  
Updating golang-github-prometheus-alertmanager images to be consistent with ART #61  
OWNERS: Add myself, and move former team members to emeritus #62  
Full changelog  
 
OCPBUGS-20843 : Bump golang.org/x/net to v0.17.0 #249  
OCPBUGS-7458 : Fixes ThanoRuler StatefulSet re-creation bug #217  
Updating prometheus-operator images to be consistent with ART #204  
Bump openshift/prometheus-operator to v0.60.1 #208  
Bump openshift/prometheus-operator to v0.60.0 #207  
Updating prometheus-operator-admission-webhook images to be consistent with ART #206  
Updating prometheus-config-reloader images to be consistent with ART #205  
Bump openshift/prometheus-operator to v0.59.2 #203  
Bump openshift/prometheus-operator to v0.59.1 #200  
OWNERS: Add myself, and move former team members to emeritus #198  
Bump openshift/prometheus-operator to v0.58.0 #197  
Updating prometheus-operator-admission-webhook images to be consistent with ART #195  
Updating prometheus-config-reloader images to be consistent with ART #194  
Updating prometheus-operator images to be consistent with ART #193  
Full changelog  
 
OCPBUGS-21123 : upgrade golang.org/x/net to v0.17.0 #136  
Updating golang-github-prometheus-node_exporter images to be consistent with ART #112  
Align to upstream v1.4.0 #109  
Fix a bug of metric format on AMD EPYC platforms #107  
Updating golang-github-prometheus-node_exporter images to be consistent with ART #104  
OWNERS: Add myself, and move former team members to emeritus #106  
Full changelog  
 
OCPBUGS-3279 : Return nil from start funcs after context is cancelled. #203  
Bug 2048349 : make the operator react to workload logLevel configuration #196  
Quality of life changes, fix e2e tests failing too often #197  
Updating ose-cluster-authentication-operator images to be consistent with ART #192  
Bug 2101880 : operator NS manifest: Set empty openshift.io/run-level #194  
Full changelog  
 
OCPBUGS-21310 : [release-4.12] fix: Bump golang.org/x/net to v0.17.0 #486  
OCPBUGS-7702 : Add ‘agent-installer’ value to ‘install_type’ label #451  
Fixes typo in telemeter/client/kubernetes.libsonnet #434  
Updating telemeter images to be consistent with ART #433  
Adds TemeterClientJobFailing alert #431  
Add rules for cluster CPU-hours and Instance-hours #418  
*: Update docs with latest Telemeter architecture #430  
Forward: Add logic to sanitize labels #429  
pkg/receive/handler: Add middleware to respect whitelist + elide #427  
OWNERS: Add myself to owners file #425  
pkg/receive/handler: Use OIDC client #426  
pkg/receive/handler: Propagate upstream error message #423  
OWNERS: Add myself, and move former team members to emeritus #424  
pkg/server: use v1 forward requests counter #422  
Bump Telemeter rules evaluation interval to 4m #420  
Bug 1924548 : go.mod: update github.com/gogo/protobuf to v1.3.2 #419  
Bump Telemeter rules evaluation interval to 3m #417  
Updating telemeter images to be consistent with ART #415  
pkg/forwarder: add counter for the total number of requests #416  
Updates version of golangci-lint to support GO1.18 #413  
Full changelog  
 
Bug OCPBUGS-20557: Correct condition for rejecting connection #28327  
OCPBUGS-18490 : bump monitoring SNO bounds #28239  
OCPBUGS-18527 : Ignore timeout and connection refused errors during upgrade tests for 4.12 #28270  
OCPBUGS-18309 : Add missing watch permission for console users #28234  
OCPBUGS-16696 : Wait for DNS DS pods to be ready #28083  
OCPBUGS-16243 : allow cluster-config-operator to manage featuregate upgrade block #28055  
OCPBUGS-15933 : remove references to registry.centos.org #28033  
CCO-367 : Allow CCO to be Upgradeable=False when credentialsMode=Manual #27941  
OCPBUGS-14152 : Move from registry.centos.org to quay.io #27949  
OCPBUGS-12914 : Add (optional) dual-stack tests to the CNI certification test suite #27903  
Updating openshift-enterprise-tests images to be consistent with ART #27293  
add specific test for failing cgroups path #27856  
OCPBUGS-8705 : Bump(openshift/kubernetes): to get fix for resizing flake #27794  
OCPBUGS-8024 : Backport fixes to resume gathering CI disruption data for SLB and image registry #27759  
OCPBUGS-7633 : remove reference to old guard pods #27732  
OCPBUGS-7285 : extended: security: do not explicitly set api audience on token request #27716  
OCPBUGS-6850 : [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade #27684  
OCPBUGS-5493 : Use cluster network MTU for bond interfaces #27637  
OCPBUGS-5490 : Fix intervalcreation incorrect year unit test bug #27668  
OCPBUGS-5130 : run resourcewatch fixes #27625  
OCPBUGS-4836 : 1sec #27610  
OCPBUGS-4503 : Unskip service session affinity tests #27598  
OCPBUGS-4851 : Add Kuryr exception to “pods should successfully create sandboxes” test #27611  
OCPBUGS-4407 : Nginx 1.18 images will reach EOL in November 2022 #27599  
OCPBUGS-2927 : [release-4.12] Bump kubernetes to latest release-4.12 #27588  
OCPBUGS-3649 : : Fix flake reporting for certain tests. #27557  
OCPBUGS-3649 : Revert “Merge pull request #27533 from dgoodwin/merge-alert-backstops” #27550  
Synchronize release-4.12 with master #27541  
OCPBUGS-3428 : Skip broken [sig-devex][Feature:ImageEcosystem] tests #27537  
k8s 1.25.0 #27503  
Revert 1.25 again #27499  
Extend SCC tests with their corresponding service account variants #27491  
MicroShift: label e2es with more apigroup labels (squashing more PRs into a single one + fixes) #27498  
Skip resource growth checks in upgrade-rollback jobs #27450  
k8s 1.25.0 #27490  
Remove must-gather pod from lack priorityclass exception list #27469  
Ocpbugs 2275 remove templateservicebroker test #27484  
Support external topology for hypershift #27437  
USHIFT-481 Get event intervals for alerts only if Prometheus route exists #27467  
Revert “k8s 1.25.0” #27489  
k8s 1.25.0 #27416  
Automated - Update synthetic test data #27475  
microshift: avoid oauth and console disruption monitoring #27462  
Migrate route.sh, run.sh, service.sh and status.sh tests to go #27455  
Add skips logic for tests that require optional capabilities #27481  
Fix flaky cli tests #27482  
Migrate idle.sh to go tests #27451  
Add dgoodwin as approver to origin #27477  
update skip openshift-controller-manager scaling events in build testsuite #27474  
Fix unit tests that have broken since we stopped running them 2 years ago #27460  
USHIFT-357 : MicroShift: skip sig-scheduling tests #27402  
USHIFT-356 : MicroShift: skip sig-node tests #27425  
OCPBUGS-2155 : Revert “Add etcd vertical scaling test suite” #27463  
USHIFT-358 : MicroShift: skip sig-storage tests #27438  
Check for console capability before launching it’s disruption monitoring. #27439  
Add Invariant test to look for probe errors for openshift-config-operator #27436  
Fix missing reporting of 0s disruptions. #27452  
Add etcd vertical scaling test suite #27444  
USHIFT-351 : Microshift: skip sig-devex tests #27392  
USHIFT-300 : microshift: skip sig-imageregistry tests #27367  
Drastically reduce the jobs we enforce disruption on. #27457  
USHIFT-354 : MicroShift: skip sig-instrumentation tests #27399  
USHIFT-350 : MicroShift: skip sig-coreos tests #27400  
egressip: avoid curl hanging when sending probes #27379  
OCPBUGS-1079 : Use kubeconfig from secret mount instead of /tmp #27443  
include storage and must-gather tests in expectedTestCount #27356  
feat: update query results #27448  
USHIFT-283 : microshift: skip sig-builds tests #27361  
Fix rare race condition in ImageStream admission tests. #27442  
remove test/extended OWNERS file #27408  
OCPBUGS-985 : Revert “Test Baremetal deployment without a provisoning network” #27441  
USHIFT-344 : MicroShift: fix sig-apps tests #27397  
USHIFT-301 : microshift: skip sig-operator tests #27369  
USHIFT-343 : MicroShift: skip sig-api-machinery tests #27410  
Remove test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #27391  
Bug 1933144 : Bump k8s to include c83b5d076f5 #27380  
Check version when discovery client #27432  
USHIFT-285 : MicroShift: allow CLI creation without OpenShift APIs #27358  
sig-api-machinery: remove project from authenticated browser APIServe… #27333  
Bump api-requests for console-operator on vsphere #27431  
USHIFT-353 : MicroShift: skip sig-installer tests #27409  
make runonce-ldapsearch pod name unique #27426  
OCPBUGS-1265 : test/extended/prometheus: Consider telemeterClient.enabled #27422  
Fix double disruption testing and values for most backends in intervals chart and bigquery. #27415  
add retry for checkLADPConn #27424  
e2e/cli: Migrate completions, whoami and projects tests to go #27371  
Enable ServiceInternalTrafficPolicy tests in OVNK #27043  
OCPBUGS-967 : temporarily disable IngressClass test, which is changed in upstream in 1.25 #27417  
Add a test case to find job name/cluster version mismatches #27413  
upkeep: updated data set for 4.12 #27420  
OCPBUGS-1237 : Fix s2i ruby test that relys on rack #27419  
Address exceeded maximum resolution of 11,000 points per timeseries #27384  
OCPBUGS-587 : Temporarily flake FailedToUpdateEndpointSlices #27418  
Ignore the “InsufficientInstanceCapacity” patholocial event #27385  
Automatically skip tests with apigroups which are not served #27406  
Label tests with openshift crafted API groups #27387  
skip route-controller-manager scaling events in build testsuite #27394  
Remove flake for 40% Secret/ConfigMap growth test. #27381  
Bug 2100091 : Ignore FailedCreatePodSandBox events for garbage collector tests #27270  
Fix upgrade dry-run. #27388  
Update etcd tests with k8s 1.25 data #27396  
Update etcd tests with k8s data #27393  
Instead of returning errors when there is no etcd operator, just return static values for etcd metadata #27342  
Test baremetal deployment without provisioning network #26676  
Ensures operators use external cloud provider #27349  
Bug 2098053 : Re-revert “Add networking test for invalid external gateway” #27277  
Separate out pathological event test for error updating endpoint slices #27377  
Revert “Label tests with openshift crafted API groups (round 3)” #27378  
Skip etcd scaling test for metal and vsphere platforms #27375  
Test we don’t see substantial Secret/ConfigMap growth during upgrade. #27354  
Add ovnkube-node pods in the interval chart for ingress #27372  
update service load balancer test to gracefully roll out #27180  
EgressIP: Enable EgressIP tests for OpenStack #27363  
Label tests with openshift crafted API groups (round 3) #27368  
Suppress failures if certain firing alerts happened with related event #27304  
Bug 2095623 : Revert “Disable azure-file tests” #27259  
job names: exclude text before e2e for both platform and network tests #27373  
upkeep: updated synthetic tests historical data for alerts and disruption #27364  
Update job name tests for hard failure cases #27362  
Label tests with openshift crafted API groups (round 1) #27355  
Add required pod security admission annotations into cmd/namespace #27357  
Bug 2110503 : EgressIP: Probes and check tcpdump logs should succeed eventually #27318  
test/extended/util/disruption: Remove stale p95 references #27351  
display UTC time for timeline charts #27348  
networking/acl: live-retrieve the NS instead of f.Namespace #27347  
Consider Prometheus maximum points in a time series for alert tests #27319  
Tune watch limits for operators #27281  
allow techpreviewnoupgrade alert when testing techpreview #27343  
Ignore repo name when looking for network type in job name #27339  
Use “plugin” for some nw isolation test case names #27330  
Revert “Revert ‘bump o/k for the fixed scheduling tests’”; layer fix on top #27332  
Update authenticated users RBAC e2e test #27326  
OWNERS_ALIASES: add me as a metal platform lead #27337  
Add Jan as image approver, remove Ravi and Clayton #27331  
Bug 2114506 : test/extended/olm: Handle unset enabledCapabilities in marketplaceEnabled #27336  
Convert kubelet logs into monitor events for timelines #27299  
Revert “bump o/k for the fixed scheduling tests” #27328  
etcd vertical scaling test: add verbose timeout error messages and bump machine provisioning timeout for Azure #27322  
remove CLI.SetupNamespace() in favour of CLI.SetupProject() #27325  
Increase API requests limit for monitoring operator on openstack #27324  
bump o/k for the fixed scheduling tests #27323  
Separate out test for SamplesImagestreamImportFailing alarm #27314  
Fix same test name being used twice for pods on different nodes check. #27315  
etcd storage tests: work with dynamic namespace names #27295  
Add etcd vertical scaling test.” #27294  
Add a new spyglass chart for image-registry, console, oauth #27297  
Bug 2098194 : set sampleErr to bodyReadErr #27260  
Fixes OVN ACL audit log parsing #27312  
Bug 2079679 : pkg/monitor: wait for Prometheus sidecars to be ready #27224  
Add test that checks CI job name matches platform and network type #27311  
examples: drop OCP 3 library paths #27266  
Revert “Enable EgressIP tests for internal targets” #27307  
fix(olm-test): skip test if marketplace is not enabled #27302  
Bug 2089966 : use multi-arch ldap and multicast test images #27169  
Revert “Bypass tests failing due to metal image rebuild on RHEL9” #27288  
Update to go 1.18 #27253  
separate interval gathering from interval calculation #27298  
Make margin wider to see more in spyglass charts #27061  
Bug 2098096 : Enable EgressIP tests for internal targets #27262  
test/extended/prometheus: clean alert exceptions #27211  
test: allow -f to match tests for any test suite (redux) #27096  
BUG 2067323: test/extended/router: Drop host lookup for gRPC HTTP/2 h2spec tests #27274  
Bug 2097297 : Show DNS lookup sampler problems on the disruption intervals chart. #27261  
Bug 2094342 : bump cluster-capi-operator apirequests upper bound to 50 #27225  
Add Ravi and Abu as image approvers #27282  
Remove etcd vertical scaling test. #27280  
make a new category of pod sandbox failure #27247  
Bug 2099698 : revert: no longer needed logic for rt kernel #27264  
Bypass tests failing due to metal image rebuild on RHEL9 #27283  
And 2 elided commits (e.g. from squash or rebase merges) 
Full changelog  
 
OCPBUGS-21135 : Bump golang.org/x/net to v0.17.0 #126  
OCPBUGS-4276 : Update exporter-toolkit to 0.7.3 #111  
Updating thanos images to be consistent with ART #101  
Bump openshift/thanos to v0.28.1 #91  
Bump openshift/thanos to v0.28.0 #90  
OWNERS: Add Joao and myself, and move former team members to emeritus #88  
Bump openshift/thanos to v0.27.0 #85  
Full changelog  
 
OCPBUGS-21493 : Bump golang.org/x/net to v0.18.0 #56  
OCPBUGS-1413 : Rebase 13.10.2022 k8s 1.25 #28  
Updating ose-vsphere-cloud-controller-manager images to be consistent with ART #25  
fix .dockerignore to satisfy OCP specific requirements #24  
Add OCP specific exclusion to the .dockerignore #23  
Updating ose-vsphere-cloud-controller-manager images to be consistent with ART #22  
Full changelog  
 
OCPBUGS-20417 : syncer: fix nil pointer dereference in log message #98  
OCPBUGS-21552 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #92  
OCPBUGS-14312 : Update 4.12 against v2.7.1 #81  
OCPBUGS-7426 : Add migrationDataStore field #59  
OCPBUGS-6936 : fix for nil user session (#1859) #57  
Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #48  
Updating vmware-vsphere-syncer images to be consistent with ART #47  
Rebase to v2.6.1 #45  
UPSTREAM: <carry>: Remove .github files #46  
STOR-863 : Rebase to v2.6.0 #44  
Updating ose-vmware-vsphere-csi-driver images to be consistent with ART #43  
Updating vmware-vsphere-syncer images to be consistent with ART #42  
Full changelog  
 
OCPBUGS-21574 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131  
OCPBUGS-10812 : Add build number to metrics #104  
OCPBUGS-6788 : Derive the fully qualified vSphere username when checking permissions #98  
OCPBUGS-5509 : Add a count of zonal volumes #97  
OCPBUGS-3442 : Lets remove datastore length checks for now #92  
OCPBUGS-1361 : Fix propagation of check errors to Available condition #90  
OCPBUGS-926 : Resolve situations when an existing folder or resource pool is used at install-time. #87  
STOR-858 : Bump github.com/openshift/* and k8s.io/* #88  
Updating vsphere-problem-detector images to be consistent with ART #89  
validate vmware user privileges #56  
Updating vsphere-problem-detector images to be consistent with ART #86  
Full changelog  
 
 
Source code for this page located on github