4.16.0-rc.4

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.0-rc.4-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.0-rc.0

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.16.0-rc.1

Created: 2024-06-07 14:09:04 +0000 UTC

Image Digest: sha256:6c236c400d3bad9b2b54d8a3b247c508f6f13511d37666de1eecca8e43bce0f6

Release 4.16.0-rc.4 was created from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-06-07-024651

Components

Kubectl 1.29.1
Kubernetes upgraded from 1.29.4 to 1.29.5
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202405062146-0 to 416.94.202406052309-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ClusterAPIInstallAWS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallNutanix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallOpenStack (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallVSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
HardwareSpeed (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsServer (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NetworkDiagnosticsConfig (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereDriverConfiguration (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallGCP (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ClusterAPIInstallPowerVS (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
GatewayAPI (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
VSphereMultiVCenters (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-kms-encryption-provider git da90fb7c sha256:d0529a2375a5b7fbafe66b81012cdabbc3f4bd1797ec3dfbd744969e7d3e16f2
azure-kms-encryption-provider git bc92347b sha256:6ea4ac3d2611bfb97809da6116a0be110f81c88254f8fab6aa1650c411762f44
containernetworking-plugins-microshift git f5039976 sha256:e2cb7c2941af8e470d324306783e3e349c4c3bd89444b1406a150ab65c23aaf4
multus-cni-microshift git 317208e7 sha256:378117f719fe417ab26fa0482afd3f8b682e94d318700b60ce86ea4838c54d0c

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:de89cfb56dbe79bb2ccbc43ee91496503c56460537f029ef81da551335f7a22d
alibaba-cloud-controller-manager git 97e8335e sha256:f5930e39ca2b5bd5c21fb8f8e70d571872bc019af861e76b141fb76d5db7c582
apiserver-network-proxy git 9a6028c4 sha256:847f79ca9f15e8d57886ea3bd697422ba63ae82b377e292975519c24d477217c
aws-ebs-csi-driver git 1d29a74a sha256:dae3c77a81ff54295e267f52fab7adf9bdb856e902772d82be57f1297c1ed393
aws-machine-controllers git 61d60f6c sha256:8d409882e770e3395517f02c7dc2f09e1d363afb8b73e09a32c21773125ad166
aws-pod-identity-webhook git 746491a6 sha256:30367d8a6bd313c316d736f72da586e1c2c403a78f5f5eebf20eaa771ed92bfb
azure-cloud-controller-manager git 0e955329 sha256:0ce4fcfefebbc59a93cb599fbecd9dfdc61aca056610ba34247b5c8e1934dfaa
azure-cloud-node-manager git 0e955329 sha256:fadc119bc4c8e630b76b0df84e31adb20b5484dcaf8495d0edcfe4288f414546
azure-cluster-api-controllers git face7da9 sha256:f522bd5b32997cff39d9e6b3d0ffd96ed717c1a114ab8aa5e54996932fda32f1
azure-disk-csi-driver git 6b55f6fb sha256:0b19f2d14cd886282f9e0307d8d6332af732ffab98ac5322a35a918121f2fad4
azure-file-csi-driver git 5ceb190a sha256:70fe518883175c417f736849278c0b614ba907ce768d4f069f9ff16bdcf4b2b7
azure-machine-controllers git d6be293a sha256:f96580d79cef3954a20bcbe62a91f0cafbb3d90ece402e9dc77f02bd013c9bd1
azure-workload-identity-webhook git 4aca092a sha256:5084c911e4bfad754b8a212885990742da96ffa00819c51076f43694a4958a16
baremetal-machine-controllers git 11ba601f sha256:39a292986902cfd6f5543fa9b73d892e87f0379dd1f6156ea3b2283407f6087f
cluster-authentication-operator git b415439e sha256:21b6392aef797fc81a43507586d4924fb2f4eca833e6b01bb431df4d70849284
cluster-bootstrap git 27bfb59f sha256:c7a7b890e48db564daac18984f85d061b19433a1263de3d32d1a5da49124a948
cluster-capi-operator git a24f1aeb sha256:c42cb532fabf07fcba3017eab65337d03bf4811005fd9c1dd247c53a3bd0dd95
cluster-kube-cluster-api-operator git 95ceaa9e sha256:c238e4efc26aa5b0bff051a864ffed7e3311d64d771e5a6a651e931734e7b74a
cluster-kube-scheduler-operator git 630f63bc sha256:68ae5e595cb6b6ffa3f6861f7a41a92f5db8e9cd77fabb216dd7a96b9c1b4cf5
cluster-kube-storage-version-migrator-operator git bf6afbb8 sha256:2217f372554ab69fda40095c92140fd60b05035749446270d5acabc18b956a9b
cluster-openshift-apiserver-operator git d26f3002 sha256:191ff3bb0eed21729ce43c31634050ee410b4db69b64664701cf399f747d150c
cluster-policy-controller git eaea543f sha256:89206cb191ea89871d18b482edd9417d13327fab7091ed43293046345c80c3d7
cluster-samples-operator git d4dd8439 sha256:a221a4b48a517ad29dce2fd98a900a21503bb1157bd43949d9698dd372ee7f5e
cluster-update-keys git c0641e08 sha256:d75c881104c8f88b64ad306a63296784845a3ee370b234a52e2e4422d06f5020
configmap-reloader git dc91ddc4 sha256:f3902416479cefeb73ede1ead32b35bb91d0c54eb9ec0dd7c0181c82e7764d27
container-networking-plugins git f5039976 sha256:443e172a5bba1222249dea114b13e2df0d1b0f7992ef3b774723c8aec78bb522
csi-driver-manila git 5340eaab sha256:f7d92c60ffcc5ee6a9efc8badba3c4a4f0bd3ed32ba9f2b8948f3fbaad71e17c
csi-driver-manila-operator git 6de0dc79 sha256:c929ad890e53b2749372f94fb338a32c855bb4ac7b6055169ba59b2a5f05d946
csi-driver-nfs git 406cec72 sha256:bc26483bae9b004293fcf627e8c1634054aeae781c721e2f152040e0962fdf0f
csi-driver-shared-resource-operator git 1e1194bc sha256:673b4928576d0f2450325ad47e06b62ddd92a29047b3c02d325227ae26e1263c
csi-external-attacher git 7da80aab sha256:faee251eeaea85be146c2f8c0d3c1ab21611fc16e36f00b82906954bcaf30d26
csi-external-provisioner git 9e8af011 sha256:418951fd0c8cc12783cc24b2f9c487b6bd277aee2cf182578bfca497a167063f
csi-external-resizer git bdf5bfb4 sha256:6a3bd19b870f9551af296dce9d947bc273832d50ab86757035355993f59a347c
csi-external-snapshotter git 5315d37a sha256:6db88450d13dc077711534a005852b06eaa6ff38c7fa366f99c53556c42697a1
csi-livenessprobe git f5e3ff55 sha256:c8e78d4df6fa60f107524286e6b4ad9f5682dd7fc844f98414bdcf73138a75c3
csi-node-driver-registrar git 8930c368 sha256:5d830c52b43c856c7c028326d64168ace2b44f8864f626cf15036118fdcc446c
csi-snapshot-controller git 5315d37a sha256:0d14e1f2e418e264cd5e0ac7f27dc41a10afbe1d8ccde91062f1db6a82007f02
csi-snapshot-validation-webhook git 5315d37a sha256:1f1332e8473ee587a634b23e555a97a472180466f100f68512d95bde33ad3a22
docker-builder git ca2b36ac sha256:cee9993b6fc030e73c326a8561c9cc53b357e626552ecde2bca239d92963c136
docker-registry git 4462ddcd sha256:f52b3b97a6efeaa28a70030fa91a25af115baebf177488750df1e94e11423c77
egress-router-cni git 7534ab90 sha256:b09fd8c20080a440e2fb91e64deed04b5a8678296f0376dfa2f2908941b5309a
gcp-cloud-controller-manager git 26b43dfc sha256:ab00725d7e8718b1346a713bfb71a43913d8e0449d04b86ce055464e2d4f83cc
gcp-pd-csi-driver git 5ed71c64 sha256:261110a76f987e7689286c5c1f696bcfe58a93ce15648e8f468553c318ed1a6a
gcp-pd-csi-driver-operator git 799327f7 sha256:2a1253e128ed574a7ae9b751c3ee850f354744c52b1cf8d36ffd22a18a53091d
ibm-cloud-controller-manager git f961f16d sha256:58bdeee8472dd7156b3933de99018f7876cae7c625e70a2de1c3bc86f5e31833
ibm-vpc-block-csi-driver git 32b4c005 sha256:a8f986640f0b2824cdef9678ff69b8fb83c1537a0d56dfe28b6ee4caed4d63fc
ibmcloud-machine-controllers git 1a3a3030 sha256:b281400eafecab72f945ae8c64f4632d219a2dda2c104556cffc5fb3311a674b
insights-operator git 82e7c86a sha256:fdab70387e290b37356c43b0777c2dc89db5c379cb6947ed13b193427c5154e3
ironic-agent git 63681a46 sha256:96df7f81d3678c45d9553cf0c359005aff1926bdb59b88bf8ccabcfab4d752df
ironic-machine-os-downloader git 93b8b5fa sha256:39887a72b501e04d13d72d0e5d663153a50d4b2184210c6c23750ef9dfa38695
ironic-static-ip-manager git e78e4c3e sha256:9b1fbb80ae8ec71ec35c510455cee481cf6e0efe1a08b051166bf5a83594671f
k8s-prometheus-adapter git e4f859be sha256:18941a8f54b1f356a1baa4435259ccdb9d7606da0cec401858050c0d70816697
kube-metrics-server git 7938f253 sha256:c6a174cf59840331f2295deb5660fa1b584671c086c1ad64ce572cc5aad54c50
kube-proxy git 5b658c43 sha256:d3b1f3a5ec5d152c7416613fe9696011e59ee6918a6358ddfeb9f62bed288523
kube-state-metrics git 9b67b8d1 sha256:6b9279ce7b6bdf993e9b37924ece65982b806475f0a633ef2eae1c5c960e5e1d
kube-storage-version-migrator git 969a60e9 sha256:e287ab32d1cbe1209ccedc3a31649d2a75d5a4a8097590d600e0f3f7db99fc5c
kubevirt-cloud-controller-manager git 3db76104 sha256:7a0d8cfa7fbb1829f899dfd328eeb8bf6484cff4bd51476c38f81f780157f390
libvirt-machine-controllers git a336f0b5 sha256:b880608f5b66d9db0f8cef8234d0bed27e5d297584a7e199030a1aa2e3cce96f
machine-image-customization-controller git 39480963 sha256:82ab59869f2f3258d6b7b5ddbb50fdfff5a2e7988d2255efe0867900b9f19cf3
machine-os-images git 3cc97098 sha256:ce77d4d33f98ba7f0a92d1d29779cc8618ba8ff1384e134a093a30ac463ed7d8
monitoring-plugin git f1fc4315 sha256:f9b89852af8e15ea647161b36f7764f1b62136616d1d923c006e854757020a83
multus-admission-controller git 2591682f sha256:bcd2eac2f4a4060a04319748ae6123c9e8fa96dfd8e16c530be345b3434cc6e9
multus-networkpolicy git c9a6ba24 sha256:93dfc4c0041a8749179a3db70ca35762a5fb1b048b7d1162a393c5ddb1a1cf88
multus-route-override-cni git 6a04feea sha256:68a95a354a5bb6c5312ebd4670ae305b8bf0123ed426048ed5befcbfeeff3fda
must-gather git 7d5f7894 sha256:ccdc0abcf68b276b781a774d7630503a6b323c7cedea8e5636b09dd759dd226a
network-interface-bond-cni git bb911451 sha256:492aea82e8accb6e690e9251e98bf5592433f92ca4d3df9bcad7af44a482559d
network-metrics-daemon git 710bd872 sha256:20e7cc0c70dfe15e9bffb19cd84ad691a2f536c75032e323be137e932e06021a
nutanix-cloud-controller-manager git c9bbc44c sha256:5e019202b25a360625fbbae339fe9bf3aac764160547c76efe15f54f91dbfeee
oauth-apiserver git fa1f097c sha256:ca16980fc0e2808b2bab35cc848ad16da6f79e43fd4cacf17d77d98c0d581d02
oauth-proxy git 30f80124 sha256:655046e97dccfb3b436e38f55601c0ac038cba8ee5036c91b38b63c21a5b6750
oauth-server git 5597860a sha256:7788c3460beebdd7e720c71ec3eca004cdfe2003b051103d3fccc7ef087f6eb3
openshift-state-metrics git 59b8a0ff sha256:fa7ef88f868ac71e4ef7fddd109c920efaece57f089e237830b24b9c256c8ba4
openstack-cinder-csi-driver git 5340eaab sha256:c0a74124a690f4255eae13c4f441cf6e294ed4ab5f2ea98bb5b7b7a565371a3c
openstack-cinder-csi-driver-operator git 6b5a59b3 sha256:42c819eec0e79b381b41f308bbf9fc12c255a462acc21e1fc32fb0b33831b53a
openstack-cloud-controller-manager git 5340eaab sha256:af48c9c4f0d89a448490b095c1f53053c007337b958cdcabc85b53a2ee068e63
operator-lifecycle-manager git 56b7b9d5 sha256:0c98f79ab486ea5a1d832c1393ca7da8a3131096a54ea4a1779a8a57f7025fdb
operator-registry git 56b7b9d5 sha256:cc2ac5039a8d9bfb21593e4ee42c94bd445efa8d7be13fd63cd00049ce5db1de
ovirt-csi-driver git 1db726a9 sha256:91207bb3aab175c422f40f2abe5ff491aafbec94ab8d9b194a917f1998d590c6
ovirt-csi-driver-operator git ac852f3e sha256:c7b0c5751464d88169c81de1a6c181e779f4cd06139e362613b30ca173aa710b
powervs-block-csi-driver git 730a473c sha256:588caee9a593941a51830f86881ceda1cb606de14242191cb27e334dc2779a54
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:dcb04825bb757705e030cefdd1d7ad46511a8a3090ba9f3855418ac6c5ea0285
powervs-cloud-controller-manager git 87386cd4 sha256:c1a4611cdde1a89dd3da1fbe61c9ebfbaa455193f974603d9920f86198884b30
powervs-machine-controllers git 6b57e6c1 sha256:072dc7924cb12df7c3d4314dcee6e21ebd96791293b03cfe3db8a9b67ec7d6bc
prom-label-proxy git 5e14722e sha256:f925bb31c2c18c74b574e35352286036c72fcbb4ed95331ea4d1ba5d5b58f173
prometheus-config-reloader git 8bf4750a sha256:cfc189a1a1eae1859c452714b8bbc6c66fa5b837717f7da83631ee8de437fc63
prometheus-node-exporter git 29ba26d1 sha256:b9eba2f769468893fb6bd7407847653fca7153da88e00ef8d68af2dd5a3d28e7
prometheus-operator git 8bf4750a sha256:fcb3b0af68cb042fa56c1eac2be34b4ff2d766e2c8e4d769349b5a8b4bfff37e
prometheus-operator-admission-webhook git 8bf4750a sha256:c9cb2094942cf6eba4ae69c856e11222e922ad4d839506d3e95913b068ec88c3
rhel-coreos sha256:94928241dda9513ee247266c799478397060c998bef83c6e0824d1580fee1f22
rhel-coreos-extensions sha256:d8d28df8d90f623ab802904ba1175bab4089f2378b49e3f0d31be00cf351e8cf
route-controller-manager git 3112b458 sha256:f5484eee39d22c97ef8b258c63a00940d97593abc951acad7aec3117e1d65019
sdn git 5b658c43 sha256:94ee204681fcd49f3abd94b8ce0aeaccacd8b3c22e9b9405fd622b90d60d75fd
telemeter git 6ab43e48 sha256:5cf343fbff230391d5154834041903600727dc2c63d0af07f766528647950410
vsphere-cluster-api-controllers git be22f10a sha256:9dd94615cbbd117d9a82a66ebece980cb17ae3925f1b1a291e0d553cdb12cd5b
vsphere-problem-detector git d674e6d8 sha256:330dfc7ed0617992df7fb448a9e8dc398889b78edc7ee44e3528e268051b9b38

agent-installer-api-server

OCPBUGS-31727: Invalid Pull-Secret when using password which contains a colon character (#6362) #6362
MGMT-17850: Bump k8s.io modules to v0.29 (#6345) (#6372) #6345
OCPBUGS-34278: Don’t use the statically linked installer if FIPS is enabled (#6357) #6357
Use openshift-install binary for releases >= 4.16 (#6304) #6304
MGMT-17775: Ensure that patch manifest filenames are consistent and correct (#6289) #6289
MGMT-17194: Ensure that we improve error messages for mirror registry tagged images (#6266) #6266
MGMT-17764: Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) #6276
NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) #6255
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Use hostnamectl to replace illegal hostname (#850) #850
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#717) #717
Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) #637
Full changelog

alibaba-machine-controllers

AUTH-482: set required-scc for openshift workloads #50
Full changelog

aws-cloud-controller-manager

OCPBUGS-31968: update for CVE-2023-45288 [release-4.16] #82
OCPBUGS-34046: Ensure that addresses are added in network device index order #88
OCPBUGS-8213: Ensure removal of security group rules on deleting load balancers #57
Full changelog

aws-cluster-api-controllers

OCPBUGS-33170: All containers must fallback to logs on error #510
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-34822: [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8524
OCPBUGS-34976: [release-4.16] aws: terraform: add spot instance support for masters #8526
OCPBUGS-34707: attach tag to folder,fix folder destroy #8509
OCPBUGS-33794: Make Ingress capability required for standalone OpenShift #8528
OCPBUGS-34628: tfvars: change asset’s name #8501
OCPBUGS-34388: Add –dir /tmp to node-joiner-monitor.sh #8461
OCPBUGS-34728: [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix #8506
OCPBUGS-34693: update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 #8517
OCPBUGS-34419: PowerVS: update capi ibmcloud to release 0 8 0 #8465
OCPBUGS-34623, OCPBUGS-34625: capv - missing cores/socket,disk type #8500
OCPBUGS-34427: aws/cluster: restrict SSH on private clusters #8467
OCPBUGS-34528: Nutanix IPI install with capi failed to set bootType #8481
OCPBUGS-31845: Detect Release Image Arch in a Disconnected Env #8490
OCPBUGS-33962: [release-4.16] Remove vSphere Terraform #8431
OCPBUGS-34506: [release-4.16] bump golang-protobuf for CVE fix #8478
OCPBUGS-34417: capi/aws: don’t modify BYO role’s policy #8463
OCPBUGS-34220: Reintroduce CAPI-installer to 4.16 #8451
OCPBUGS-33976: Enable leader election for baremetal operator #8435
Trt-1674: 4.16 capi revert 1 #8434
CORS-2840: [release-4.16] GA CAPI Installer #8428
OCPBUGS-33668: Changed folder name to match cluster name instead of infra-id. #8414
AGENT-903: monitor-add-nodes should only show CSRs matching node #8376
CORS-3480: aws/sdk: remove sdk provisioner #8358
CORS-3460: Always collect clusterapi manifests #8411
OCPBUGS-33709: GCP mixup when using the ignition shim vs the signed url #8342
CORS-3297: Add GCP firewall rule to access bootstrap node via ssh #8374
CORS-2905: capi-aws delete bootstrap ssh rule #8359
OCPBUGS-33370: baremetal: always write masters file #8365
OCPBUGS-33531: update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 #8409
no-jira: Vendor api changes for tech preview with capg #8407
CORS-3269: Azure ignite control plane machines #8126
OCPBUGS-31017: aws: add missing permission for IPv4 pools #8408
OCPBUGS-33649: add quota support to ca-west-1 #8406
CORS-3460: capi: collect generated assets in hidden dir and save into log bundle #8387
OCPBUGS-33006: baremetal: aarch64-related fixes #8385
OCPBUGS-33610: fix API detection, azure bootstrap disk size, and use get to verify endpoint #8371
no-jira: Removing unused terraform variables #8360
OCPBUGS-33502: capi/aws: fix setting IMDSv2 value #8399
CORS-3516: hack: do not execute cross-compiled binaries #8397
OCPBUGS-33578: capi/aws: fix HostedZone ID lookup #8396
OCPBUGS-30860: improve bootstrap logic to wait for at least 2 apiserver instances #8394
OKD-213: Reference stream-coreos instead of centos-stream-coreos-9 #8356
OCPBUGS-33470: use read/write cache on azure masters #8380
no-jira: AzureMachines: set disk caching to ReadWrite #8390
AGENT-863: Change $@ to “$*” to fix shellcheck #8402
OCPBUGS-33481: set the node tag used by CAPG for CloudProviderConfig #8386
OCPBUGS-23022: Installer should not complain when API and API-INT are resolved. #7701
no-jira: vendor: capi-installer in tech preview #8372
CORS-2895: capa/machines: fix zone placement for control planes #8347
OCPBUGS-32947: Changed vsphere CPMS to not include fields controlled by failure domains. #8354
AGENT-872: Generate JWT token #8110
no-jira: vSphere - update owners aliases #8384
AGENT-906: Script to run monitor-add-nodes in cluster #8294
OCPBUGS-33430: Fix CAPI installation typo #8375
CORS-3471: standalone destroy bootstrap support with capi #8350
CORS-3477: hack: build capi + providers by default #8357
OCPBUGS-33189: OCPBUGS-33006: baremetal: correct libvirt defaults #8366
OCPBUGS-33157: baremetal: pause provisioning #8346
NO-ISSUE: baremetal: disable bmo webhook on bootstrap #8340
OCPBUGS-33240: avoid FAT32 error messages when generating the agent ISO #8353
no-jira: Private domains in survey for PowerVS #8303
CORS-3250: images: use pre-built KAS/etcd binaries #8343
Full changelog

baremetal-operator

OCPBUGS-33254: Merge upstream #354
NO-ISSUE: Revert “downstream-only: Disable webhooks” #335
Full changelog

baremetal-runtimecfg

OCPBUGS-29067: Fix generation of DNSUpstreams on cloud platforms #308
NO-ISSUE: Fix wrong golang version, bump to 1.21 #311
Revert “OCPBUGS-32348: Make log level configurable” #310
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-34886: Hardcode resource groups/kinds for now #1796
OCPBUGS-33917: add alert data to upgrade health in oc adm upgrade status #1794
OCPBUGS-33975: pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK #1776
OCPBUGS-34406: Simplify output when not updating #1781
OCPBUGS-33918: adm update status: Show information about the upgrade target version #1772
OCPBUGS-33916: Add s390x based oc into extraction target #1770
OCPNODE-2281: Support multiple icsps in migrate icsp #1751
OCPNODE-2282: Support multiple ImageDigestMirrorSet objects in the th… #1756
OTA-1275: cli/admin/release/git: use optimized git flags #1754
Full changelog

cloud-credential-operator

OCPBUGS-32948: Update documentation to restart pods when enabling workload identity #701
Full changelog

cloud-network-config-controller

OCPBUGS-33617: Avoid panic when looking up attachedOutboundRule.ID in azure #144
NO-JIRA: Update dependency google.golang.org/api #143
Full changelog

cluster-autoscaler

NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup #298
Full changelog

cluster-autoscaler-operator

AUTH-482: set required-scc for openshift workloads #315
OCPBUGS-20565: Set webhook minimum TLS version to 1.3 #320
Full changelog

cluster-baremetal-operator

OCPBUGS-34041: Run metal3 containers as specific users and groups #418
OCPBUGS-33493: Enable leader election for baremetal-operator #416
OCPBUGS-27145: Drop unneccessary capabilities #401
Full changelog

cluster-capi-controllers

OCPBUGS-33170: All containers must fallback to logs on error #207
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: Ensure termination message policy in tests #344
OCPBUGS-33405: update azure and ash tolerations on node manager #342
Full changelog

cluster-config-api

OCPBUGS-26466: Disable PSA in non-previews 4.16 #1912
STOR-1839: promote VSphereDriverConfiguration feature to Accessible-by-default #1904
temporarily break the featuregate check to show we can get results #1911
Feature gates for platforms, architecture, and installs #1910
OCPBUGS-34398: Streamline bootstrap crds #1905
ETCD-602: Move etcd hardware speed feature to GA #1901
Move CAPI install platforms to default feature set #1892
OCPBUGS-33727: Fix Gateway API Feature Gate #1894
NO-JIRA: Set listType for .status.serviceNetwork and .status.clusterNetwork in networks.config #1890
SDN-4600: Add NetworkDiagnosticsConfig to the default featureset #1886
Revert “Revert “Merge pull request #1851 from slashpai/metrics-server”” #1865
CORS-3488: Add GCP CAPI installer to tech preview feature set. #1889
Add eligible CAPI-install platforms to TechPreview #1880
NO-JIRA: Update runtime image and drop color in CI #1885
add MachineConfiguration conditions for boot image updates #1882
SPLAT-1452: Changed vcenter MaxItems to be 3 for TechPreview. #1842
ETCD-520: add BackendQuotaGiB example #1874
Update SSA tag markers #1881
Full changelog

cluster-config-operator

SPLAT-1630: Bump API version to get new VSphereMultiVCenters featuregate. #418
AUTH-482: set required-scc for openshift workloads #410
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-32947: Modified webhook to reject changes to vsphere fields coming from failure domains. #291
AUTH-482: set required-scc for openshift workloads #282
Full changelog

cluster-csi-snapshot-controller-operator

AUTH-482: set required-scc for openshift workloads #196
Full changelog

cluster-dns-operator

CFE-964: Add DNSNameResolver controller #394
OCPBUGS-32941: Bump to Kubernetes 1.29 and controller-runtime 0.17.3 #408
OCPBUGS-27924: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 #402
Full changelog

cluster-etcd-operator

ETCD-621: Update api vendor libraries to get GA’ed tuning profiles #1265
OCPBUGS-33495: return errors in wait-for-ceo #1260
OCPBUGS-31849: check the quorum in case the cluster is healthy or not after generating certs #1239
Full changelog

cluster-image-registry-operator

OCPBUGS-34165: azure-path-fix: get client secret from k8s secret #1041
OCPBUGS-34166: pkg/storage/s3: use force path style in favour of virtual hosted style config #1042
OCPBUGS-34069: Bump openshift api, client-go & library-go #1039
Full changelog

cluster-ingress-operator

OCPBUGS-34835: internalServiceChanged: Fix target port logic #1072
OCPBUGS-34837: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1074
OCPBUGS-32887: Allow operator to update Route spec.subdomain #1047
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-25104: revert dev cert rotation 4.16 #1695
OCPBUGS-34408: Create one-shot migrations for the flowcontrol group. #1690
OCPBUGS-33522: add a controller that reconciles SCCs’ volumes #1675
NO-ISSUE: Revert “add SNO control plane high cpu usage alert” #1674
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-33933: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #808
Full changelog

cluster-machine-approver

OCPBUGS-34161: check for machine crd before listing machines #233
Full changelog

cluster-monitoring-operator

OCPBUGS-34806: send cnv_abnormal metric via telemetry #2364
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
OCPBUGS-32510: change metrics-server probes for SNO #2337
MON-3851: Bump openshift/thanos to v0.35.0 #2338
Full changelog

cluster-network-operator

OCPBUGS-34964: Fix DNSResolver feature gate enablement #2402
OCPBUGS-34770: Ensure that the node-identity webhook address contains colons for IPv6 #2395
OCPBUGS-34214: Add conditions for ignored-namespaces #2378
OCPBUGS-34013: Add custom masquerade subnet against right key at ovnkube-config CM #2374
CFE-888: Enable DNSNameResolver feature-gate #2131
OCPBUGS-32979: Update network operator status for IPsec #2360
USHIFT-2912: Add ref to MicroShift’s Multus and CNI Plugins #2365
OCPBUGS-29403: add more safe sysctls #2273
Full changelog

cluster-node-tuning-operator

NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817: e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
OCPBUGS-33460: E2E: change tuned profile path (#1055) #1055
E2E: modify test use HaveKey matchter instead of ContainElement (#1056) #1056
E2E: Add automation to check default cpuset from cpu manager state file (#1050) #1050
perfprof: latency e2e: adjust failure message (#1044) #1044
Full changelog

cluster-olm-operator

AUTH-482: set required-scc for openshift workloads #54
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-34384: [release-4.16] Disable Rolebindings for Capabilities #350
AUTH-482: set required-scc for openshift workloads #336
Full changelog

cluster-storage-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #470
OCPBUGS-29126: vsphere-problem-detector: don’t set Available condition #456
Full changelog

cluster-version-operator

OCPBUGS-24700: Add support for Custom Certificate Authorities for custom signature stores #1030
Full changelog

console

OCPBUGS-34139: Improve Pipeline list page performance #13882
OCPBUGS-34002: Fix console crash-loop with OIDC auth config #13874
OCPBUGS-34711: show “Debug container” link for pods with status.phase… #13914
OCPBUGS-33965: i18n - Download and merge French and Spanish languages translations in the OCP Console #13870
OCPBUGS-34393: fix bug where textarea is not resizable #13894
OCPBUGS-33989: Updating the secrets using Form editor displays an unknown warning message #13873
OCPBUGS-34112: Fix Admission webhook warning for Route and BuildConfig creation via import flow #13881
OCPBUGS-34141: UI inconsistency in topology when application grouping is collapsed #13883
OCPBUGS-34142: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13884
OCPBUGS-34143: Create Serverless form does not create BuildConfig #13885
OCPBUGS-33872: add user-impersonation to QuickStartGettingStartedCard,… #13864
OCPBUGS-32631: TaskRuns should not be fetched for Failed PLR’s #13806
OCPBUGS-33567: Expose useUserSettings hooks in dynamic plugin sdk #13843
ODC-7576: Pipelines plugin test fixes #13841
OCPBUGS-31901: Patch PF dynamic module parser to exclude ‘next’ modules #13832
ODC-7574: Add e2e tests for QuickStart from Masthead in CI #13837
OCPBUGS-33523: restrict Masthead logo to max-height #13838
OCPBUGS-29745: Fix Pipeline details page with when expression using CEL expression #13834
CONSOLE-4019: Display a warning message from kube-apiserver when creating resource integration tests #13814
CONSOLE-3943: Backup to segment public api key #13821
OCPBUGS-33352: Fix PatternFly modules check #13817
OCPBUGS-33345: Disable create button on NAD empty state for regular user #13805
CNV-36170: Multi NetworkPolicies #13772
OCPBUGS-33219: Fix StatusItem layout when no timestamp is present #13815
Full changelog

console-operator

CONSOLE-4047: Console-operator should be internally using listers for fetching data #901
OCPBUGS-33505: Add missing return statement to fix crash in healthcheck controller #900
OKD-214: Dockerfile: Add ARG TAGS=ocp #896
TRT-1664: Revert #895 “CONSOLE-4047: Console-operator should be internally using listers for fetching data” #899
CONSOLE-4047: Console-operator should be internally using listers for fetching data #895
Full changelog

coredns

CFE-963: UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order #116
OCPBUGS-31768: UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 #108
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

BUILD-877: BUILD-887: Add konflux config for push and pull request #183
BUILD-961: use separate dockerfile for using catalog images #180
OCPBUGS-33513: Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 #178
OCPBUGS-33511: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 #177
BUILD-957: Update Images with Red Hat Catalog Images #173
BUILD-953: Compare to Other Secret Stores #176
BUILD-953: Simplify README #174
Full changelog

driver-toolkit

Adding the + char to the RT kernel version. (#156) #156
ART bash parser is failing on [[…]] syntax Replace with sh compatible syntax. (#152) #152
Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) #150
Use a default RHEL_VERSION when the build argument is not specified (#148) #148
Full changelog

etcd

CORS-3191: DOWNSTREAM <carry>: add native binary to installer images #269
Full changelog

gcp-cluster-api-controllers

OCPBUGS-33170: Container fallback to logs on error #224
Full changelog

gcp-machine-controllers

OCPBUGS-30520: Bump protobuf to v1.34.0 #82
Full changelog

haproxy-router

CFE-1020: feature:route external certificate reference #565
Full changelog

hyperkube, pod

OCPBUGS-34545: UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel #1985
OCPBUGS-33710: Bump k8s API to 1.29.5 #1972
UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries #1978
OCPBUGS-33574: bump openshift/library-go@e22d25a #1967
OCPBUGS-32934: UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods #1966
no-jira: UPSTREAM <carry>: add native build to installer image #1961
Full changelog

hypershift

OCPBUGS-34903: Allow access to root-ca configmap in cluster-network-operator role #4155
OCPBUGS-34575: Rename machine-config operator CRD references #4105
OCPBUGS-34759: add AWS STS URL to OIDC provider audiences #4134
HOSTEDCP-1688: Use operator namespace for openshift-config-managed-trusted-ca-bundle #4117
OCPBUGS-34801: remove weak cipher #4139
OCPBUGS-34773: Fix disconnected metadata inspection for nodepool #4137
OCPBUGS-34569, OCPBUGS-34602: Backports that should go in together #4114
OCPBUGS-34542: Reconcile KAS endpoints and endpoint slice #4096
OCPBUGS-34554: Fixed audit-logs sigterm failing to terminate gracefully #4090
OCPBUGS-34390: Add TrustedBundles to OAS container #4087
HOSTEDCP-1561: Move HCP Product CLI to STS #4092
HOSTEDCP-1556: Support Priority based expander for cluster-autoscaler #4068
OCPBUGS-34171: Make active & backup Azure KMS containers use different –metrics-addr #4079
NO-JIRA: Bump library-go dependency #4069
TRT-1672: e2e: proceed with teardown even if dump fails #4052
NO-JIRA: Update RHTAP references #4042
OCPBUGS-33729: Do not ignore single placeholder pods for a specific hosted cluster #4037
HOSTEDCP-1668: remove dns-operator leader-elect flags #4038
OCPBUGS-33595: Cluster sizing controller: do not error on not found HC #4023
HOSTEDCP-1655: Don’t Ignore SubnetID and Network Security Group ID flags when values are passed through #4021
HOSTEDCP-1518: Preserve container resource requests and limits #3864
HOSTEDCP-1310: use kms images from payload #3996
OCPBUGS-32257: Restrict image registry overrides to control plane components #3952
HOSTEDCP-1560: Create AWS STS Role for the hypershift/hcp cli #4003
HOSTEDCP-1566: Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies #4012
HOSTEDCP-1566: Bump CAPI dependencies #4011
OCPBUGS-33320: Fix nil dereference in clustersizingconfig validation #4016
HOSTEDCP-1525: Fixed azure using incorrect kms socket #3981
HOSTEDCP-1563: Refine the Azure API in the NodePool Spec #4004
OCPBUGS-33320: Autoscaler for non request serving nodes #4007
HOSTEDCP-1557: Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config #4006
NO-JIRA: Remove CLI inspection of release image #3548
OCPBUGS-33237: Run haproxy to connect to kas from data plane if noproxy settings contain kas #3999
OCPBUGS-26762: Disable DNS resolving for CNO #3986
MULTIARCH-4637: Set arch to ppc64le within PowerVS platform func #4002
MULTIARCH-4637: Support ppc64le arch for Agent and PowerVS platform #3979
HOSTEDCP-1544: Allow user to specify subnet ID for Hosted Cluster & NodePool Creation #3945
CNV-36073: Set time out for external snapshotter on kubevirt csi driver #3968
HOSTEDCP-1523: Bump k8s to v0.29.3 #3878
OCPBUGS-25012: Updating ose-hypershift-container image to be consistent with ART #3303
OCPBUGS-33203, OCPBUGS-33274: Autoscaler: scale down unused machinesets #3988
NO-JIRA: chore(deps): update rhtap references #3973
HOSTEDCP-1513: Add operator scoping support to nodepool controller #3928
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-33329: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #115
OCPBUGS-28230: enforce termination message policy on all platform pods #114
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-33170: All containers must fallback to logs on error #80
Full changelog

ironic

Bug OCPBUGS-34985: Disable installation of .pyc files through pip #509
OCPBUGS-32304: Fix ironic-inspector permissions for creating /certs/ca directory #500
Full changelog

keepalived-ipfailover

OKD-40: Revert #179 #180
OKD-40: Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179
Add dnf-plugins-core in scos to help with OCP image compat #178
OKD-210: Add sig-cloud repository and enable rt repository #177
OKD-210: Add the sig-nfv repo in the CS9 base #176
OCPBUGS-24850: Bump OpenShift 4.16, RHEL9, and iptables package #175
Full changelog

kube-rbac-proxy

OCPBUGS-31955: Merge upstream v0.17.1 release #98
Full changelog

kubevirt-csi-driver

CNV-36073: Enable snapshot tests #40
Full changelog

machine-api-operator

AUTH-482: set required-scc for openshift workloads #1220
Full changelog

machine-config-operator

OCPBUGS-34799: set required-scc for openshift workloads #4384
OCPBUGS-33901: machine-os-puller SA refreshes every hour, causing machine config regeneration #4374
OCPBUGS-10498: If multiple hostnames are returned, use the first one for the Node name #4368
OKD-212: Reference stream-coreos instead of centos-stream-coreos-9 #4349
OCPBUGS-25821, OCPBUGS-31381: certificate_writer: clean up disk-write logic #4343
MCO-1131: Merge implementation machineOSBuild and machineOSConfig in MCO #4327
OCPBUGS-33357: Check both ready and health ingress endpoints #4356
OCPBUGS-32583: daemon/pinned-image-set: refactor mirrored registry auth #4345
OCPBUGS-33046: improve status reporting for pinned image sets #4339
OPNET-282: Configure-ovs alternative implementation #4249
OCPBUGS-33018: pkg/daemon: Only re-bootstrap kubelet on X.509 errors #4351
Full changelog

multus-cni

OCPBUGS-33256: Fix CNI cache update function to prevent nil access #230
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-34929: [release-4.16] Use IP to identify orphaned allocation to be deleted #286
OCPBUGS-33565: Upstream sync may24 #278
Full changelog

network-tools

OCPBUGS-33388: Updating ose-network-tools-container image to be consistent with ART for 4.16 #125
Full changelog

nutanix-machine-controllers

AUTH-482: set required-scc for openshift workloads #73
Full changelog

oc-mirror

CLID-122: upgrades distribution/distribution for a released version (#864) (#868) #864
OCPBUGS-34521: Fix DiskToMirror without internet connection without rebuild catalog (#863) #863
OCPBUGS-33081: Skip images that don’t follow standards, semver and naming (#861) #861
OCPBUGS-33196: skip images with both tag and digest (#853) #853
OCPBUGS-31608: Fix IDMS/ITMS generated source repository in case of empty namespace (#850) #850
OCPBUGS-31858: CLID-97: Provide a way to skip failing images (#854) #854
OCPBUGS-31622: Fix operator related image has empty reference (#851) #851
OCPBUGS-31536: OCPBUGS-33554: Fix mirroring operators on fedora systems - no sig verification (#852) #852
OCPBUGS-32547: Fix delete generation for mirror to mirror flow (#848) #848
OCPBUGS-31536: Change default behavior to not rebuild catalogs for V1 - 2 (#847) #847
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #102
NO-ISSUE: Synchronize From Upstream Repositories #101
Full changelog

olm-rukpak

NO-ISSUE: Synchronize From Upstream Repositories #84
Full changelog

openshift-apiserver

OCPBUGS-33574: Bump library-go #434
OCPBUGS-31666: Bump openshift/api for Route API godoc fix #433
Full changelog

openshift-controller-manager

OCPBUGS-33893: openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets #309
OCPBUGS-33876: filter delete events #308
OCPBUGS-33600: revert revert and fix for hypershift #305
Revert #288 “API-1644: Use bound service account tokens when generating pull secrets” #304
API-1644: Use bound service account tokens when generating pull secrets #288
OCPBUGS-33241: panic in image trigger controller #302
OCPBUGS-30688: bump go-jose to fix CVE-2024-28176 #297
OCPBUILD-9: Adds roleBinding controllers to the controllerInitializers #296
OCPBUGS-32729: Rollback state of managed image pull secrets after downgrade #300
Full changelog

openstack-cluster-api-controllers

NO-JIRA: Bump to latest CAPO v0.10 #312
OCPBUGS-33170: openshift: Set FallbackToLogsOnError on infra-cluster controller #311
Full changelog

openstack-machine-api-provider

OCPBUGS-34158: Failure to get bootstrap is non-fatal #115
OCPBUGS-34155: Fix panic deleting Machine in ERROR state #114
Full changelog

operator-marketplace

OCPBUGS-24971: bump golang to 1.21 #560
Full changelog

ovirt-machine-controllers

OCPBUGS-24925: Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 #177
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-34402: [release-4.16] dns: fix deadlock in case of error #2181
OKD-40: Add ovnver_okd and ovsver_okd to Dockerfile.base #2174
SDN-4157, SDN-4436: Downstream Merge 16th May 2024 #2171
OCPBUGS-30224, OCPBUGS-33328, SDN-4388: [DownstreamMerge] 10 may 2024 #2162
Full changelog

prometheus

MON-3856: Bump openshift/prometheus to v2.52.0 #202
MON-3856: Bump openshift/prometheus to v2.52.0 #201
Full changelog

prometheus-alertmanager

OCPBUGS-33686: Dockerfile.ocp: use common-build target #91
Full changelog

service-ca-operator

OCPBUGS-24916: Bump to rhel9 #240
OCPBUGS-29583: Apply hypershift cluster-profile for ibm-cloud-managed #234
Full changelog

tests

OCPBUGS-34500: add manual etcd signer cert rotation e2e test #28830
OCPBUGS-33710: Bump k8s API to 1.29.5 #28831
NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens #28810
STOR-1838: add test for vsphere driver snapshot configuration #28717
OCPEDGE-1101: skip etcd test for hardware speed on sno #28800
SPLAT-1439: Ignore edge workers when listing nodes #28584
NO-ISSUE: Automated - Update synthetic test data #28795
NO-JIRA: oc template - set NS PSP level=privileged (hostPorts) #28803
USHIFT-3143: Skip metrics and adjust termination message policy monitor tests #28799
OCPBUGS-18534: Pass namespace in function checkHostnameReady for monitortest #28794
ETCD-488: Fix feature gate for etcd profiles e2e test #28782
OCPBUGS-31919: Use proper pull-secret for getting openshift-tests image #28764
OCPBUGS-33378: Verify Build Webhooks on Upgrade #28783
SDN-4168: Increase IPsec timeout parameters #28779
USHIFT-3142: Automatically exclude FeatureGate tagged tests #28786
USHIFT-3133: Skip cloud provider disruption monitors for MicroShift #28767
NO-JIRA: enforce termination policy #28777
TRT-1656: Revert #28750 “OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks” #28781
SDN-4783: Add e2e tests for NetworkDiagnosticsConfig featuregate #28719
API-1783: Update etcd test data for 1.30 release #28770
NO-JIRA: verify tls artifacts #28772
API-1809: Provide SCC access via RBAC #28771
OCPEDGE-812: feat: add tests for cpu limits on workload partitioning #28752
OCPBUGS-18534: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28739
MON-3513: Add availability test for Metrics API #28737
SDN-4168: Add IPsec e2e tests #28658
OCPBUGS-33041: Add RoleBinding for BuildConfig Webhooks #28750
Full changelog

thanos

MON-3851: Bump openshift/thanos to v0.35.0 #145
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-30538: Bump protobuf to v1.33.0 #67
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-13551: FailedPrecondition volume does not appear staged #88
Full changelog

vsphere-csi-driver-operator

OCPBUGS-24061: Keep CSI operators progressing=true during DaemonSet rollout #230
OCPBUGS-28230: enforce termination message policy on all platform pods #231
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github