4.16.0-rc.5

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.0-rc.5-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.16-e2e-aws-ovn-upgrade
- metal-ipi-ovn-bm Pending (1 retries) periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.16.0-ec.6, 4.16.0-rc.0

Upgrades to:

4.16.0 (changes) - Success
4.16.0-rc.9 (changes) - Success
4.16.0-rc.8 (changes) - Success
4.16.0-rc.7 (changes) - Success
4.16.0-rc.6 (changes) - F F S S S S S S F S S S S S

Loading changelog, this may take a while ...

Changes from 4.14.30

Created: 2024-06-14 20:51:49 +0000 UTC

Image Digest: sha256:19f29913bacdebaad17dea58a617141c3f6c3a072d0e00a35473943993c78d2d

Release 4.16.0-rc.5 was created from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-06-14-130320

Components

Kubectl 1.29.1
Kubernetes upgraded from 1.27.14 to 1.29.5
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202406111017-0 to 416.94.202406140350-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdmissionWebhookMatchConditions (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (New)	Unconditional (New)	Unconditional (Changed)	Unconditional (Changed)
RetroactiveDefaultStorageClass (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (New)	Unconditional (New)	Unconditional (Changed)	Unconditional (Changed)
AdminNetworkPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
ExternalCloudProvider (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
ExternalCloudProviderGCP (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
VSphereStaticIPs (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
BareMetalLoadBalancer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallNutanix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallOpenStack (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallVSphere (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DisableKubeletCloudCredentialProviders (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
HardwareSpeed (1 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
KMSv1 (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MetricsServer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NetworkDiagnosticsConfig (6 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NetworkLiveMigration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereControlPlaneMachineSet (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereDriverConfiguration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPI (0 tests)	Disabled	Disabled	Enabled (New)	Enabled (New)	Disabled (Changed)	Disabled (Changed)
ValidatingAdmissionPolicy (4 tests)	Disabled	Disabled	Enabled (New)	Enabled (New)	Enabled (Changed)	Enabled (Changed)
ExternalOIDC (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ChunkSizeMiB (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstall (0 tests)
ClusterAPIInstallAzure (0 tests)
ClusterAPIInstallGCP (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIInstallIBMCloud (0 tests)
ClusterAPIInstallPowerVS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DNSNameResolver (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
EtcdBackendQuota (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
Example (1 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ExternalRouteCertificate (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPClusterHostedDNS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImagePolicy (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InsightsConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InsightsOnDemandDataGather (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
InstallAlternateInfrastructureAWS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MachineConfigNodes (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImages (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MetricsCollectionProfiles (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MixedCPUsAllocation (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLM (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NodeDisruptionPolicy (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OnClusterBuild (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PinnedImages (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PlatformOperators (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ServiceAccountTokenNodeBinding (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ServiceAccountTokenNodeBindingValidation (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ServiceAccountTokenPodNodeInfo (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SignatureStores (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
TranslateStreamCloseWebsocketRequests (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UpgradeStatus (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMultiVCenters (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VolumeGroupSnapshot (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-kms-encryption-provider git da90fb7c sha256:5668f00f71bfceb7bb7966d7a9f432f2193436bbfa1ebcefaadfe2f48a2be55b
azure-kms-encryption-provider git bc92347b sha256:e29c1cf827ee8834c8d87d5661b70b7331a5d78456440478e4a31314ae96433a
cluster-config-api git 636e2c17 sha256:efca7bd9e5538986c516ff2b3d4ce412a3e86dbee59321920bfba41c3c114351
containernetworking-plugins-microshift git f5039976 sha256:f1776c5c20353bd9ed42b8c118271d4652cd8e2e84b80aeb1896a763ea24c2fe
installer-altinfra git 363f5bec sha256:1461a2bccc82482919fc73758ea9e750293bff5317bd265a35ba3308bac270ce
kube-metrics-server git 7938f253 sha256:8c1f690970ce6e1457238c76bcee59f83c50c02a9b07b2ee9baca4fcee819fb0
multus-cni-microshift git c4aa21b9 sha256:454fcc7d474271d13b864fda2e7ae7b7b5235799f1423ba79cb3f2b52c05ba57
openstack-cluster-api-controllers git be72b754 sha256:6e33b672f1e77e9287c986355f81dc278736974239f5624d5cdb252db7ec9d34

Removed images

alibaba-cloud-csi-driver
alibaba-disk-csi-driver-operator
cluster-platform-operators-manager
ibm-vpc-node-label-updater
kuryr-cni
kuryr-controller
machine-os-content

Rebuilt images without code change

rhel-coreos sha256:1fa47d95afc9170901bedb92d43a28caf805e102d67a6f5426e4fac5bd7fa9a2
rhel-coreos-extensions sha256:18029728f15124da250a8ba249643decfd8197dcd5202e207710913ee6bede61

agent-installer-api-server

OCPBUGS-31727: Invalid Pull-Secret when using password which contains a colon character (#6362) #6362
MGMT-17850: Bump k8s.io modules to v0.29 (#6345) (#6372) #6345
OCPBUGS-34278: Don’t use the statically linked installer if FIPS is enabled (#6357) #6357
Use openshift-install binary for releases >= 4.16 (#6304) #6304
MGMT-17775: Ensure that patch manifest filenames are consistent and correct (#6289) #6289
MGMT-17194: Ensure that we improve error messages for mirror registry tagged images (#6266) #6266
MGMT-17764: Update the latest image search functionality in the RestAPI flow to correctly compare pre-release versions (#6276) #6276
NO-ISSUE: Add openshift-edge-bot as an OWNER in order to run konflux pipelines on its PRs (#6255) #6255
Revert “MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260)” (#6268) #6260
MGMT-17194: Ensure releaseImage is not tag based when mirror registry enabled. (#6260) #6260
MGMT-17523: Fail when OS images CPU architecture is missing instead of giving it default value (#6256) #6256
NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6259) #6259
OCPBUGS-31733: Remove CPMS manifest for vsphere platform (#6239) #6239
NO-ISSUE: Bump OCP versions: 4.16 (#6254) #6254
MGMT-17697: Change L3 connectivity to use connected addresses instead of majority groups (#6252) #6252
NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14, 4.15 (#6250) #6250
NO-ISSUE: Fix hypershift destroy in CI test script (#6246) #6246
Move to rhel9, decouple from cli image (#5792) #5792
MGMT-17413: Change pull secret validation on register/update cluster/infraenv to run only against the required images (#6158) #6158
NO-ISSUE: Update OKD images to 4.16 (#6231) #6231
Update RHTAP references (#6181) #6181
MGMT-17620: Change the way release images are handled in RestAPI flow to retrieve multiarch release image in case a multi-arch OpenShift version, single-arch requested and it exist. (#6227) #6227
OCPBUGS: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (api go.mod) (#6212) #6212
NO-ISSUE: Change only-latest api response to compare versions according to pre-release suffix as well instead of just base version (#6209) #6209
MGMT-17558: Allow installation on iSCSI volume (#6218) #6218
MGMT-17412: Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) (#6186) #6145
MGMT-17503: Fix the cpu architectures retrieved in ../openshift-versions endpoint (#6184) #6184
MGMT-17365: Add support for setting agent labels in BMH as annotations (#6124) #6124
MGMT-17313: Create day 2 BMH and Machine for control plane nodes (#6142) #6142
MGMT-17513: Change the latest release image retrieved in GetReleaseImage using major.minor OpenShift version to latest non-beta release image if exists, or latest beta release image otherwise (#6185) #6185
MGMT-17468: Use x86_64 over amd64 and arm64 over aarch64 for CPU architecture of both release and OS images to comply with ABI current behavior (#6190) #6190
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#6176) #6176
NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.12, 4.14, 4.13 (#6199) #6199
MGMT-17414: Adding new requirements for LVM on 4.16 (#6165) #6165
MGMT-17181: Add a LocalClusterImportController (#6079) #6079
NO-ISSUE: Prevent false positive host connectivity (#6162) #6162
MGMT-17489: Fix disconnected capi tests (#6163) #6163
Update RHTAP references (#6148) #6148
MGMT-17412: Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) #6145
NO-ISSUE: Bump OCP versions: 4.15, 4.14, 4.12 (#6157) #6157
MGMT-17438: bugfix, make sure ODF and LVM requirements do not change if MCE is not selected (#6150) #6150
NO-ISSUE: replace minio quay.io image repository (#6151) #6151
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6149) #6149
NO-ISSUE: Add doc for iPXE HTTP (#6146) #6146
Revert “MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011)” (#6139) #6011
MGMT-17369: Add multi-arch release images to as well when setting only_latest=true in …/openshift-versions (#6119) #6119
MGMT-17361: Changing the addition of configuration release images to run when the instance becomes leader instead of skipping if it not (#6115) #6115
MGMT-17367: Use ICSP in install-config for older OCP releases (#6125) #6125
Update RHTAP references (#6117) #6117
NO-ISSUE: Bump OCP versions: 4.15, 4.11 (#6118) #6118
MGMT-17354: Update CBO to support dual stack SNO hub deploying an IPv6 spoke (#6113) #6113
NO-ISSUE: rename docker image for postgres 12 as latest tag disappeared (#6116) #6116
NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#6114) #6114
NO-ISSUE: Bump the go-major-dependencies group with 1 update (#6111) #6111
MGMT-17328: OCI should be tech preview for OCP 4.14 (#6104) #6104
OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 (#6054) #6054
MGMT-16587: Migrate from dockertest to testcontainers to mitigate CVE-2024-21626 (#6109) #6109
NO-ISSUE: disable dynamic release images collection until UI will merge its changes adjusting itself to larger amount of versions (#6110) #6110
MGMT-16263: Enable usage of custom OCP release images when we create cluster (#6025) #6025
MGMT-17241: [soft-timeout] Installation not timeout /aborted after 24Hours (#6092) #6092
Update RHTAP references (#6103) #6103
MGMT-16002: Accept yml.patch and yaml.patch extensions (#6070) #6070
MGMT-17080: enable infrastructure operator when MCE and storage operators are selected (#6037) #6037
MGMT-17308: Offboard osherdp from maintainers list (#6099) #6099
NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.14, 4.12 (#6098) #6098
Update RHTAP references (#6086) #6086
Allow in-progress clusters to be deleted in more cases (#6061) #6061
MGMT-17266: Add OCP 4.16 images (#6091) #6091
MGMT-16587: Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#6090) #6090
MGMT-17196: Fix none existens of static MAC adr. in case of (#6087) #6087
AGENT-860: Update configure command to handle multiple HostConfigs (#6062) #6062
NO-ISSUE: Bump OCP versions: 4.13, 4.15, 4.14 (#6085) #6085
MGMT-16813: Prioritize finding release image with exact CPU architecture (#6066) #6066
NO-ISSUE: Add environment variable ENABLE_SOFT_TIMEOUTS to openshift/template.yaml (#6083) #6083
Update RHTAP references (#6020) #6020
Use client_id instead of clientId (#6076) #6076
Protect must gather versions cache with mutex (#6078) #6078
NO-ISSUE: Docs - clarifying consequences of capabilities override (#6060) #6060
MGMT-16759: Copy cluster proxy settings toi imported local-cluster AgentClusterInstall (#6051) #6051
use multi payload with ABI (#6000) #6000
MGMT-14380: ODF explicit type of disk error (#6072) #6072
NO-ISSUE: Bump OCP versions: 4.14 (#6069) #6069
NO-ISSUE: Bump OCP versions: 4.13 (#6063) #6063
MGMT-17106: Disable ironic vlan creation when static networking config is present (#6055) #6055
NO-ISSUE: Bump OCP versions: 4.12 (#6056) #6056
Use all cluster networks to determine IP family for ironic (#6048) #6048
NO-ISSUE: Bump OCP versions: 4.14 (#6050) #6050
NO-ISSUE: Bump OCP versions: 4.15 (#6043) #6043
MGMT-17095: Disable local cluster import (#6040) #6040
MGMT-16620: Update OCP 4.15 release images to GA (#6035) #6035
NO-ISSUE: Bump OCP versions: 4.15, 4.13 (#6038) #6038
MGMT-17008: fix lvm host requirement (#6021) #6021
NO-ISSUE: Bump OCP versions: 4.14 (#6032) #6032
MGMT-16882: Update operator bundle channel to 2.11 (#6023) #6023
NO-ISSUE: Halt OpenShift release syncer in SaaS until actual usage of this release images will be merged (#6027) #6027
MGMT-16262: Create a utility that fetches current OCP releases from OpenShift API and updates DB (#5916) #5916
NO-ISSUE: Bump OCP versions: 4.15 (#6019) #6019
OCPBUGS-29772: All nodes fail to become managed when installConfigOverrides defined (#6010) #6010
NO-ISSUE: fixing lvm requirement message (#6009) #6009
MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6011) #6011
Update RHTAP references (#6014) #6014
Update RHTAP references (#6012) #6012
NO-ISSUE: Add environment variable ENABLE_SKIP_MCO_REBOOT to openshift/template.yaml (#6013) #6013
AGENT-860: Add command to import cluster for agent-based-installer (#6004) #6004
Update RHTAP references (#5999) #5999
NO-ISSUE: Bump OCP versions: 4.13, 4.12, 4.14 (#6006) #6006
MGMT-16926: fix validation bug + allow CNV and LVM multi node (#5998) #5998
MGMT-4458: Remove status change from old CompleteInstallation API (#5981) #5981
MGMT-16716: (Also MGMT-16737), Operators CNV, MCE should be disabled when platform Nutanix is selected, operator CNV should be disabled when platform VSphere is selected (#5991) #5991
NO-ISSUE: Bump OCP versions: 4.15 (#5995) #5995
Update RHTAP references (#5993) #5993
NO-ISSUE: Bump OCP versions: 4.14, 4.13 (#5990) #5990
NO-ISSUE: Fix subsystem test for invalid nmstate config error message (#5988) #5988
Update RHTAP references (#5980) #5980
MGMT-16332: fix validation for LVM multinode (#5898) #5898
MGMT-16690: Add API to AgentServiceConfig CRD to allow pass of headers and query params to image service (#5933) #5933
MGMT-16588: Adding host with incompatible platform to day2 cluster should fail (#5946) #5946
MGMT-16625: Make host connection timeout soft (#5911) #5911
MGMT-16649: Use new ignition endpoint HTTP headers when requesting Ignition (#5934) #5934
NO-ISSUE: Bump OCP versions: 4.12, 4.11 (#5971) #5971
MGMT-16523: Set ABI deployment type for on-prem data collection (#5967) #5967
NO-ISSUE: Change bare metal host CRD name to a non-uuid format as it is forbidden (#5972) #5972
MGMT-16704: Add organization capability to control soft timeouts (#5935) #5935
MGMT-16684: Make OLM finalizing stages behave as soft timeouts even if soft timeouts are not enabled (#5928) #5928
MGMT-16791: disable VipAUtoAllocation for 4.15 and above (#5959) #5959
Update RHTAP references (#5965) #5965
NO-ISSUE: fix for subsystem HTTP registry (#5964) #5964
NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5963) #5963
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#5951) #5951
MGMT-16721: Handle luks == nil and luks.Clevis == nil (#5940) #5940
Update RHTAP references (#5956) #5956
Update RHTAP references (#5950) #5950
MGMT-16649: Add Ignition Endpoint Headers to Host and Agent APIs (#5931) #5931
NO-ISSUE: Bump gorm.io/gorm from 1.25.5 to 1.25.7 (#5954) #5954
Update RHTAP references (#5949) #5949
NO-ISSUE: Bump OCP versions: 4.15 (#5947) #5947
MGMT-16757: CNV should be disabled when select platform vSphere (#5945) #5945
NO-ISSUE: Fix CI gather script for baremetal operator (#5932) #5932
NO-ISSUE: Bump OCP versions: 4.13 (#5944) #5944
MGMT-16739: CNV and MCE should be disabled when select platform Nutanix (#5941) #5941
Update RHTAP references (#5943) #5943
NO-ISSUE: Bump OCP versions: 4.12 (#5939) #5939
MGMT-16603: Allow setting agent cluster reference via BHM (#5893) #5893
MGMT-16612: notify when host updates status (#5930) #5930
MGMT-16521: Identify Operator-based Deployment Data (#5906) #5906
MGMT-16517: Add Env Var for On-Prem Data Deployment Type (#5874) #5874
MGMT-16508: Add API to AgentServiceConfig CRD to allow pass of CA certificates for image pull. (#5884) #5884
NO-ISSUE: Bump OCP versions: 4.15 (#5929) #5929
ACM-9504: Remove unecessary dependency on go-git (#5913) #5913
NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) #5919
MGMT-16660: OCI is tech-preview from OCP 4.15 (#5920) #5920
OCPBUGS-27376: Allow domain names starting with a number (#5914) #5914
NO-ISSUE: Bump OCP versions: 4.14 (#5915) #5915
Update RHTAP references (#5899) #5899
NO-ISSUE: migrate rhtap init step to v0.2 (#5908) #5908
MGMT-16208: Add controller stages to assisted service (#5880) #5880
NO-ISSUE: Bump OCP versions: 4.15 (#5907) #5907
NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) #5903
NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) #5902
NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) #5904
NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) #5901
NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) #5897
OCPBUGS-24428: Redact passwords logged in installConfigOverrides (#5868) #5868
NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) #5896
NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) #5895
MGMT-16501: Add request headers to api_vip_connectivity check request (#5870) #5870
NO-ISSUE: Use latest hypershift image in CI gather (#5886) #5886
NO-ISSUE remove filanov from approves (#5888) #5888
NO-ISSUE: Bump OCP versions: 4.15 (#5887) #5887
MGMT-16332: allow lvms on multi node (#5871) #5871
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) #5875
NO-ISSUE: testing go1.20 in all packages (#5850) #5850
MGMT-16371: Fix additionial kargs in case of DHCP (#5818) #5818
Removes unused assistedservice CRD (#5830) #5830
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5861) #5861
MGMT-16505: Huge amount of “Cluster was updated with api-vip <IP ADDRESS>, ingress-vip <IP ADDRESS>” in cluster events (#5872) #5872
MGMT-16330: disable SDN for 4.15 and above (#5833) #5833
NO-ISSUE: Bump OCP versions: 4.15, 4.12, 4.13 (#5867) #5867
NO-ISSUE: Bump OCP versions: 4.14 (#5863) #5863
MGMT-16241: Ensure that LastInstallationPreparationStatus is reset on cluster install. (#5811) #5811
wqNO-ISSUE: Fix for subsystem test that fails locally. (#5859) #5859
MGMT-16452: Change MCE subscription to use the default channel (#5843) #5843
OCPBUGS-25434: handle NMStateConfig deletion (#5844) #5844
MGMT-16404: Add soft timeouts capability to host stage timeouts (#5817) #5817
MGMT-16216: Bump requests package (#5836) #5836
HOSTEDCP-999: Fix images used for disconnected CAPI test (#5832) #5832
MGMT-16332: fix issue validating pre-release versions were failing (#5837) #5837
MGMT-16414: When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5822) #5822
MGMT-16373: KubeAPI - Ensure that ISO type is full-iso when cpuarchitecture is S390x (#5825) #5825
chore(deps): update rhtap references (#5782) #5782
MGMT-16428: create migration from oci to external platform type (#5829) #5829
NO-ISSUE: enable lateset lso for 4.15 ztp (#5805) #5805
NO-ISSUE: Bump OCP versions: 4.15 (#5824) #5824
Compare normalized infraenv and preprov image architectures (#5816) #5816
MGMT-15886: Fix domain validation (#5801) #5801
MGMT-15691: Remove platform type oci (#5787) #5787
MGMT-14633: Include manifest information in the log download (#5777) #5777
MGMT-16355: API changes for soft timeouts (#5780) #5780
NO-ISSUE: Bump OCP versions: 4.11 (#5813) #5813
NO-ISSUE: Bump OCP versions: 4.13, 4.14 (#5808) #5808
MGMT-14159: Use imageDigestSources in install-config instead of imageContentSources (#5799) #5799
MGMT-16157 move db transactions to new format (#5806) #5806
MGMT-16157 Remove recover usage from DB transactions (#5795) #5795
NO-ISSUE: Bump OCP versions: 4.15 (#5796) #5796
NO-ISSUE: fix golangci-lint failing to be pulled (#5790) #5790
NO-ISSUE: Bump OCP versions: 4.12 (#5783) #5783
MGMT-16289: Add configuration variable and cluster attribute defining if soft timeouts feature is enabled (#5740) #5740
NO-ISSUE: Bump OCP versions: 4.14, 4.11, 4.13, 4.15 (#5779) #5779
fix: allow LVMS for MultiNode >=4.15.0 (#5757) #5757
Update RHTAP references (#5776) #5776
NO-ISSUE: add build tags option to enable FIPS build (#5768) #5768
Update RHTAP references (#5774) #5774
NO-ISSUE: update OS_IMAGES filter to 4.11 (#5773) #5773
MGMT-16303: Disable skip MCO reboot for architecture s390x (#5765) #5765
Propagate OS_IMAGES var in deploy operator (#5762) #5762
Update RHTAP references (#5767) #5767
MGMT-15425: Change chosen mce release to match openshift version (#5716) #5716
MGMT-14605: Gather more data for hypershift tests (#5344) #5344
MGMT-16320: Agent should connect to iBFT iSCSI targets (#5753) #5753
MGMT-16312 fix update host ignition for unbound host (#5751) #5751
NO-ISSUE: Inventory code cleanup - unused params (#5755) #5755
HOSTEDCP-999: Fix incorrect ICSP for CAPI CI (#5747) #5747
MGMT-15690: Add support for external platform (#5738) #5738
MGMT-16235: Ensure that agent controller will watch for changes to ignition endpoint token. (#5736) #5736
MGMT-13461: Fix Tang validation when day2 host join an imported cluster (#5700) #5700
MGMT-15972: Remove Swagger definition for api_vip and ingress_vip (#5734) #5734
HOSTEDCP-999: Fix incorrect check for CAPI image in ci (#5741) #5741
Update RHTAP references (#5733) #5733
MGMT-16273: Allow installing on iSCSI disks on OCI (#5728) #5728
MGMT-16291: revert default faulty OCP images (#5737) #5737
MGMT-14810: Remove API and Ingress VIP (#5501) #5501
HOSTEDCP-999: Missed service-cidr for capi ipv6 CI test (#5721) #5721
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#5726) #5726
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.12 (#5722) #5722
Update baremetal operator (#5698) #5698
MGMT-16001: Sanitize reclaim agent daemonset name (#5699) #5699
HOSTEDCP-999: Minor fixes for disconnected CAPI CI (#5713) #5713
AGENT-740: Include baremetal host BMC fields in install-config override (#5675) #5675
NO-ISSUE: adding me to owners (#5709) #5709
NO-ISSUE: Cluster code cleanups (#5715) #5715
NO-ISSUE: Bump OCP versions: 4.12 (#5714) #5714
MGMT-16236: remove elastic APM (#5702) #5702
NO-ISSUE: Upgrade debug image to latest delve (#5711) #5711
Update RHTAP references (#5688) #5688
HOSTEDCP-999: Setup CI for disconnected ipv6 CAPI (#5536) #5536
NO-ISSUE: Inventory code cleanups (#5695) #5695
NO-ISSUE: dependabot optimize (#5697) #5697
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.15 (#5701) #5701
NO-ISSUE: Remove unused functions (#5696) #5696
NO-ISSUE: BMH and Agent controllers code cleanup (#5693) #5693
NO-ISSUE: Remove unused functions from ctrl event wrapper (#5694) #5694
NO-ISSUE: Bump github.com/Azure/go-autorest/autorest/adal (#5604) #5604
NO-ISSUE: ClusterDeployments controller code cleanup (#5689) #5689
NO-ISSUE: InfraEnv controller code cleanup (#5690) #5690
MGMT-15271: Append kargs to installer for s390x (#5665) #5665
Add missing scheme to ServiceMonitor (#5672) #5672
Updating ose-agent-installer-api-server-container image to be consistent with ART (#5495) #5495
MGMT-15971: Create ManagedCluster CR so that the hub will show up as “Ready” in MCE (#5575) #5575
Update RHTAP references (#5682) #5682
NO-JIRA: Enable skip mco reboot functionality only if openshift version is 4.15 and higher (#5680) #5680
NO-ISSUE: Bump OCP versions: 4.11, 4.12, 4.13 (#5681) #5681
MGMT-16151: allow CORS OPTIONS for s3 presigned url (#5674) #5674
Update RHTAP references (#5654) #5654
MGMT-16151: allow CORS HEAD for s3 presigned url, as UI uses preflight checks (#5671) #5671
MGMT-16061: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5658) #5658
MGMT-16077: Add 4.15 release and OS images (#5673) #5673
AGENT-723: Use json.Marshal to correctly process vSphere credentials (#5592) #5592
NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) #5670
MGMT-15902: Trigger reboots for node event when day2 node moves to done (#5648) #5648
NO-JIRA: Allow the command in wait_for_cmd_amount to receive arguments (#5668) #5668
MGMT-16164: Install 4.14 redhat-operators catalog for LSO (#5669) #5669
MGMT-15878: Ensure that hosts emit event showing why preparation failed. (#5521) #5521
MGMT-15878: Add a condition to show the last preparation failure (#5524) #5524
MGMT-16151: change default envoy sidecar timeout value (#5667) #5667
MGMT-16114: Update 4.14 release image to use GA version (#5651) #5651
MGMT-16052: Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) #5659
Bump OCP versions: 4.14, 4.12 (#5661) #5661
MGMT-15405: Add a URL to infraenv to show download link from static network config (#5638) #5638
OCPBUGS-19823: Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) #5565
MGMT-15271: Add the boot command line to the host inventory (#5649) #5649
MGMT-15680: Adds InfraEnv ctrl watch for pull secret changes (#5589) #5589
NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) #5653
MGMT-16061: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) #5613
NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) #5647
Update RHTAP references (#5637) #5637
Bump OCP versions: 4.13 (#5645) #5645
NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) #5644
MGMT-15683: Ensure that manifest filename has valid name part (#5635) #5635
NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) #5641
NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) #5619
Update RHTAP references (#5624) #5624
MGMT-15684: Return appropriate HTTP error code for invalid manifest file path (#5634) #5634
Bump OCP versions: 4.14 (#5633) #5633
NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) #5632
MGMT-16037: fix messaging errors on big clusters (#5628) #5628
MGMT-16039: upgrade to golang 1.20 (#5616) #5616
NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) #5622
Revert “NO-ISSUE: use kubectl 1.28.2 (#5572)” (#5618) #5572
Bump OCP versions: 4.12 (#5615) #5615
MGMT-16045: mitigate CVE-2023-44487 (#5614) #5614
MGMT-15902: Add event that shows the number of reboots for a node before completing installation (#5591) #5591
Add skopeo to OCP build (#5558) #5558
NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) #5601
NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) #5600
NO-ISSUE: vendor current master (#5594) #5594
NO-ISSUE: fixing dependabot issues (#5595) #5595
Bump OCP versions: 4.13, 4.14 (#5593) #5593
Update RHTAP references (#5590) #5590
MGMT-16001: Sanitize reclaim daemonset name (#5579) #5579
Bump OCP versions: 4.11, 4.12, 4.13 (#5586) #5586
MGMT-13198: Add API endpoint to create assisted installer event (#5578) #5578
MGMT-15980: added missing Create op to infraenvs Webhook (#5569) #5569
Update RHTAP references (#5573) #5573
NO-ISSUE: use kubectl 1.28.2 (#5572) #5572
Update RHTAP references (#5570) #5570
MGMT-15949: fix missing ImageSetRef validation (#5552) #5552
Revert “NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)” (#5566) #5560
MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) #5549
NO-ISSUE: Fix console output in ZTP jobs (#5562) #5562
NO-ISSUE: add console output for ztp (#5550) #5550
Bump OCP versions: 4.14 (#5559) #5559
MGMT-15796: set CloudControllerManager to External for OCI (#5548) #5548
NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560) #5560
Bump OCP versions: 4.12, 4.14, 4.13 (#5546) #5546
Update RHTAP references (#5539) #5539
MGMT-15950: Fix DNS wilcard domain validation (#5544) #5544
WIP: Add assisted images service short URL routes (#5543) #5543
Update RHTAP references (#5538) #5538
MGMT-15738: Support for E2E test, make sure we have an infraenv for adding a node to the local cluster. (#5477) #5477
Bump OCP versions: 4.13, 4.11 (#5537) #5537
MGMT-14409: generate short image URL (#5523) #5523
MGMT-15762: fix odf validation failing where is one small disk (#5529) #5529
Update RHTAP references (#5520) #5520
Bump OCP versions: 4.12, 4.14 (#5528) #5528
NO-ISSUE: fail upload if response is not 2XX (#5522) #5522
Bump OCP versions: 4.14 (#5525) #5525
NO-ISSUE: fix docker-ce-cli package missing (#5499) #5499
NO-ISSUE: Add versions file to onprem event upload (#5514) #5514
MGMT-15699: Service changes for avoiding MCO reboot (#5453) #5453
Update RHTAP references (#5517) #5517
MGMT-15598: Add a parameter to manifest list to disable filter (#5498) #5498
Bump OCP versions: 4.12 (#5515) #5515
Update RHTAP references (#5513) #5513
Bump OCP versions: 4.14 (#5512) #5512
NO-ISSUE: Fix email domain for event uploader (#5511) #5511
Update RHTAP references (#5510) #5510
Update RHTAP references (#5508) #5508
Bump OCP versions: 4.12, 4.13 (#5506) #5506
MGMT-15808: change base image to stream9 (#5497) #5497
MGMT-15559: Change detached annotation condition in non-converged flow (#5445) #5445
MGMT-15732: Fix unbound variable (#5493) #5493
Update RHTAP references (#5492) #5492
Bump OCP versions: 4.14, 4.11 (#5496) #5496
Update RHTAP references (#5470) #5470
MGMT-15715: Allow handling multi-document YAML custom manifests (#5480) #5480
MGMT-15732: Add extra flag var for hypershift install (#5469) #5469
XMGMT-15704: Bugfix for local cluster import (#5484) #5484
NO-ISSUE: update RHTAP deprecated image check (#5488) #5488
Bump OCP versions: 4.12, 4.13 (#5483) #5483
MGMT-15653: Fix DNS regex validation (#5482) #5482
MGMT-15716: notify events when updating cluster status (#5476) #5476
MGMT-15503: Update operator bundle channel (#5474) #5474
Bump OCP versions: 4.14 (#5472) #5472
MGMT-15306: Fix UpdateCluster for requests that include VIPS and UMA (#5462) #5462
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-16843: Use hostnamectl to replace illegal hostname (#850) #850
OCPBUGS-32105: Fix race to mark node Joined (#823) #823
NO-ISSUE: Bump github.com/onsi/gomega (#841) #841
MGMT-17305: Moving disk operations to new repo (#840) #840
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) #818
Move to rhel9, decouple from cli image (#760) #760
NO-ISSUE: Decouple inventoryClient from ops (#811) #811
NO-ISSUE: Decouple inventoryClient from ops (#810) #810
NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) #809
MGMT-16587: Update to mitigate CVE-2024-21626 (#806) #806
MGMT-17305: Wipe installation disk on IBI (#808) #808
MGMT-17384: Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) #807
NO-ISSUE: Bump the go-dependencies group with 1 update (#803) #803
MGMT-17308: Offboard osherdp from maintainers list (#802) #802
MGMT-16587: Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) #801
OCPBUGS-30056: RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) #800
MGMT-16993: [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) #798
NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) #799
NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) #797
MGMT-16843: Ensure valid hostname during install (#788) #788
MGMT-16966: Problem creating extra partition on main disk in 4.15+ (#787) #787
NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) #786
MGMT-16211: Remove all timeouts from controller (#779) #779
OCPBUGS-25718: Do not remove uninitialized taints if vSphere credentials are provided. (#778) #778
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) #781
NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) #780
NO-ISSUE: Bump the go-dependencies group with 1 update (#776) #776
NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) #772
NO-ISSUE remove filanov from approves (#773) #773
NO-ISSUE: Bump the go-dependencies group with 1 update (#770) #770
NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) #769
NO-ISSUE: Bump the go-dependencies group with 1 update (#768) #768
NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) #766
NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) #762
MGMT-16266: Indication event showing how often host has been rebooted missing on some nodes (#757) #757
NO-ISSUE: fix golangci-lint failing to be pulled (#758) #758
NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) #756
NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) #755
OCPBUGS-20049: Remove uninitialized taint for agent-based installs (#739) #739
MGMT-16258: Partitions naming convetion is different for various disk types (#752) #752
NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) #751
Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) #719
MGMT-15926: Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) #748
NO-ISSUE: Add my github account as an OWNER for this repository (#749) #749
NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) #747
MGMT-15902: Trigger event that notifies the number of reboots once the node installation is completed (#744) #744
NO-ISSUE: Bump the go-dependencies group with 1 update (#745) #745
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) #743
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) #742
MGMT-16039: upgrade to golang 1.20 (#741) #741
NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) #738
OCPBUGS-16482: Update dependencies to remove goproxy dependency (#701) #701
MGMT-15984: Assisted installer doesn’t freeze and unmount file systems used for overwriting os image (#737) #737
NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) #731
Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) #718
MGMT-15710: Assisted installer changes for avoiding MCO reboot (#713) #713
MGMT-15810: fix image missing nsenter executable (#729) #729
MGMT-15810: change base image to stream9 (#725) #725
NO-ISSUE: fix dependabot ingored packages (#724) #724
Full changelog

agent-installer-node-agent

OCPBUGS-33404: Make removable disks eligible (#717) #717
Updating ose-agent-installer-node-agent-container image to be consistent with ART (#637) #637
NO-ISSUE: Bump the go-dependencies group across 1 directory with 2 updates (#710) #710
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#690) #690
OCPBUGS-31423: Try to pull installer image before installing (#679) #679
NO-ISSUE: Bump the go-dependencies group with 2 updates (#683) #683
MGMT-16587: Update to mitigate CVE-2024-21626 (#676) #676
NO-ISSUE: Bump the go-dependencies group with 2 updates (#678) #678
NO-ISSUE: subsystem test failing due image format version (#677) #677
NO-ISSUE: Bump the go-dependencies group with 2 updates (#672) #672
MGMT-17308: Offboard osherdp from maintainers list (#673) #673
NO-ISSUE: Bump the go-dependencies group with 7 updates (#670) #670
MGMT-16459: [STG] Cluster 4.15.0-rc.0 with HTTP Proxy failed on timeout due the failed to StartContainer for etcd with CrashLoopBackOff (#664) #664
MGMT-14226: Upgrade docker to 20.10.24 for CVE-2023-28842 (#656) #656
CVE-2023: 49568 and CVE-2023-49569 both detail vulnerabilities in versions of https://github.com/go-git/go-git less than version v5.11 Presently assisted-installer depends on this library due to the following dependency chain. (#655) #655
MULTIARCH-4089: Fix LPAR handling (#649) #649
NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) #653
ACM-9504: Remove unecessary dependency on go-git (#652) #652
MGMT-16501: Use updated api_vip connectivity check API (#648) #648
NO-ISSUE remove filanov from approves (#647) #647
NO-ISSUE: Bump the go-dependencies group with 2 updates (#644) #644
NO-ISSUE: Bump the go-dependencies group with 1 update (#643) #643
NO-ISSUE: Bump the go-dependencies group with 3 updates (#642) #642
NO-ISSUE: Bump the go-dependencies group with 2 updates (#638) #638
NO-ISSUE: fix golangci-lint failing to be pulled (#636) #636
MGMT-16335: set HasUUID on appliance mock disk (#634) #634
NO-ISSUE: Bump the go-dependencies group with 3 updates (#635) #635
NO-ISSUE: Add Eran Ifrach account and mine as owners (#633) #633
NO-ISSUE: Bump the go-dependencies group with 2 updates (#630) #630
MGMT-15860: add strictfipsruntime to build (#629) #629
NO-ISSUE: Bump the go-dependencies group with 1 update (#626) #626
OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#590) #590
MGMT-15271: Get cmdline and set IBM in vendor (#624) #624
NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) #623
NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) #621
MGMT-16039: upgrade to golang 1.20 (#619) #619
MGMT-16011: Reduce agent image size (#617) #617
NO-ISSUE: Bump the go-dependencies group with 1 update (#618) #618
MGMT-15900: Add enable-skip-mco-reboot flag to assisted installer install command (#614) #614
NO-ISSUE: Bump the go-dependencies group with 3 updates (#612) #612
NO-ISSUE: add adriengentil as approver (#611) #611
NO-ISSUE: Bump the go-dependencies group with 2 updates (#608) #608
MGMT-15809: change base image to stream9 (#604) #604
Updating ose-agent-installer-node-agent images to be consistent with ART (#603) #603
OCPBUGS-16482: bump golangci-lint to v1.53.1 (#591) #591
NO-ISSUE: fix lint target and code (#605) #605
MGMT-15653: Update domain validation from assisted-service changes (#599) #599
Full changelog

agent-installer-utils

OCPBUGS-24960: Updating ose-agent-installer-utils-container image to be consistent with ART #32
NO-ISSUE: Tidy up Dockerfiles #33
OCPBUGS-21874: Update 4.15 ose-agent-installer-utils-container image to be consistent with ART #31
Bump golang builder to rhel9 #30
OCPBUGS-19219: Updating ose-agent-installer-utils images to be consistent with ART #29
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
Update OWNERS #36
Rebase onto latest upstream version #35
Full changelog

alibaba-machine-controllers

AUTH-482: set required-scc for openshift workloads #50
OCPBUGS-25571: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #49
OCPBUGS-24945: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #48
OCPBUGS-24124: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #46
NO-JIRA: Update OWNERS #45
OCPBUGS-19201: Updating ose-alibaba-machine-controllers images to be consistent with ART #44
Full changelog

apiserver-network-proxy

OCPBUGS-31716: Bump golang.org/x/net to v0.23.0 #50
OCPBUGS-27932: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 #47
OCPBUGS-25004: Updating ose-apiserver-network-proxy-container image to be consistent with ART #46
Full changelog

aws-cloud-controller-manager

OCPBUGS-31968: update for CVE-2023-45288 [release-4.16] #82
OCPBUGS-34046: Ensure that addresses are added in network device index order #88
OCPBUGS-8213: Ensure removal of security group rules on deleting load balancers #57
OCPBUGS-30466: Update google.golang.org/protobuf to v1.33.0 #79
OCPBUGS-27879: Add snyk exclusion file #78
OCPBUGS-28548: Updates build-rpm.sh to set release to build time #75
OCPBUGS-28548: spec: add Provides: ose-aws-ecr-image-credential-provider #74
OCPBUGS-25662: UPSTREAM: <carry>: Removes escaping from pwd in rpm build script #69
OCPBUGS-25662: Updates rpm build script #68
OCPBUGS-25662: ecr-credential-provider RPM CI builds #65
OCPBUGS-25662: Installs ecr-credential-provider to /usr/libexec #66
OCPBUGS-25662: Adds ecr-credential-provider specfile #63
OCPBUGS-22542, OCPBUGS-26061, OCPCLOUD-2423: Merge https://github.com/kubernetes/cloud-provider-aws:master (65e4f1a) into master #53
OCPBUGS-24959: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART #59
OCPBUGS-24135: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART #58
OCPBUGS-21839: Upgrade x/net to v0.17.0 #51
Update OWNERS #52
OCPCLOUD-2187: Merge https://github.com/kubernetes/cloud-provider-aws:master (43b808d) into master #47
OCPBUGS-19218: Updating ose-aws-cloud-controller-manager images to be consistent with ART #48
Full changelog

aws-cluster-api-controllers

OCPBUGS-33170: All containers must fallback to logs on error #510
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master #507
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.1 (cbf5317) into master #502
OCPBUGS-30586: fix e2e tests on release branches #503
OCPBUGS-25565, OCPCLOUD-2441: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.0 (25a0086) into master #499
OCPBUGS-27871: Update snyk exclusion file #498
OCPBUGS-26181: Add Snyk file to exclude vendor directory on scan #495
OCPBUGS-24928: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART #488
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.3.0 (2562a8b) into master #487
OCPBUGS-24113: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART #485
OCPCLOUD-2255: Update manifests-gen tool #486
OCPCLOUD-2257: Use manifests generation tool from provider repo #471
Update OWNERS #480
OCPBUGS-21649: Bump golang.org/x/net to v0.17.0 #479
OCPBUGS-17279, OCPCLOUD-2216: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.2.4 (56c9a39) into master #478
OCPBUGS-19185: Updating ose-aws-cluster-api-controllers images to be consistent with ART #477
Full changelog

aws-ebs-csi-driver

OCPBUGS-31101: UPSTREAM: 1966: Add missing instances to instance store volumes table #261
OCPBUGS-30468: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #259
OCPBUGS-23260: UPSTREAM: 1919: Add reserved-volume-attachments #260
STOR-1575: Rebase to v1.26.1 for OCP 4.16 #257
OCPBUGS-25500: UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #252
STOR-1688: Chore: add .snyk file to ignore false positives #248
OCPBUGS-25549: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #250
OCPBUGS-25197: UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 #249
OCPBUGS-25126: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #247
OCPBUGS-24867: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #246
OCPBUGS-24072: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #245
STOR-1400: Rebase to v1.25.0 for OCP 4.15 #244
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net@v0.17.0 #237
OCPBUGS-19101: Updating ose-aws-ebs-csi-driver images to be consistent with ART #235
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
STOR-1726: auto-generate assets for CIFS/Samba driver #217
OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Bump google.golang.org/grpc from 1.61.0 to 1.62.1 #190
Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 #198
Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 #203
Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 #185
STOR-1794: add location for azcopy logs #200
OCPBUGS-23260: Explicitly reserve 1 attachment for the root disk #199
Bump go.uber.org/zap from 1.26.0 to 1.27.0 #173
Bump the opentelemetry-dependencies group with 8 updates #177
Bump the golang-dependencies group with 6 updates #191
OCPBUGS-30620: remove legacy directory and duplicate Dockerfile.*.test files #196
OCPBUGS-30469: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #197
NO-JIRA: Configure dependabot for security updates only #174
OCPBUGS-30620: move test manifests to top-level directory #194
STOR-1464: Enable RWOP tests in CI #187
STOR-1762: Add azure file hypershift #163
Bump the k8s-dependencies group with 6 updates #172
STOR-1726: Bump openshift/api dependency #169
STOR-1750: Build image from legacy folder #162
Bump the opentelemetry-dependencies group with 8 updates #161
STOR-1574: Bump all deps #156
OCPBUGS-26924: Add healthcheck for node-driver-registrar container #155
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 #149
STOR-1750: Add legacy azure file driver #154
Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 #150
Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible #148
Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 #147
Bump github.com/google/uuid from 1.5.0 to 1.6.0 #144
Bump google.golang.org/grpc from 1.60.1 to 1.61.0 #145
Bump the k8s-dependencies group with 3 updates #146
STOR-1574: Bump library-go #137
Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 #142
Bump github.com/pkg/profile from 1.3.0 to 1.7.0 #138
Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #141
Bump go.uber.org/zap from 1.24.0 to 1.26.0 #139
Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 #140
Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 #136
Bump github.com/prometheus/common from 0.45.0 to 0.46.0 #135
Bump the opentelemetry-dependencies group with 4 updates #134
Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 #128
Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible #125
Bump the k8s-dependencies group with 5 updates #133
Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 #124
STOR-1722: Add support hypershift for azure-disk #73
Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #129
OCPBUGS-27267: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #132
Bump the opentelemetry-dependencies group with 2 updates #122
Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 #123
Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 #119
Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 #120
NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #106
NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 #104
NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #103
NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 #101
OCPBUGS-27056: Update to RHEL9 and go 1.21 #117
NO-JIRA: Bump the golang-dependencies group with 5 updates #109
NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #108
STOR-1714: AWS EBS operator: Release leadership on SIGTERM #94
NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #107
NO-JIRA: Add valid-reference label to dependabot PRs #116
OCPBUGS-27050: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #114
STOR-1713: Don’t ignore azure-disk-csi-driver-operator #110
NO-JIRA: Add dependabot configuration #97
STOR-1696: Add legacy azure disk #88
OCPBUGS-24245: Add selinux #89
OCPBUGS-25125: Add test AssetOrderer #86
OCPBUGS-25557: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #87
OCPBUGS-25125: Create RBAC objects first #84
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #76
NO-JIRA: Add “Quick start” section to README.md #80
STOR-1688: Chore: add .snyk file to ignore false positives #85
OCPBUGS-25147: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #81
OCPBUGS-23827: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #77
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #79
OCPBUGS-24905: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #78
STOR-1500: Switch to the new operator #69
Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #75
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

aws-machine-controllers

OCPBUGS-28325: add an extra vendor exclude to snyk config #100
OCPCLOUD-2429: Rebase k8s to 1.29 and update dependencies #99
OCPBUGS-26187: Add Snyk file to exclude vendor directory on scan #98
OCPBUGS-24934: Updating ose-machine-api-provider-aws-container image to be consistent with ART #94
OCPBUGS-24116: Updating ose-machine-api-provider-aws-container image to be consistent with ART #93
SPLAT-1220: Assign Carrier IP to launch EC2 in AWS Wavelength Zones #78
OCPCLOUD-2193: Update k8s to 1.28 #87
Update OWNERS #86
OCPBUGS-21640: Update golang.org/x/net to v0.17.0 #85
OCPBUGS-20266: update bad url endpoint termination handler test #84
OCPBUGS-19190: Updating ose-machine-api-provider-aws images to be consistent with ART #82
Full changelog

aws-pod-identity-webhook

OCPBUGS-30711: Upgrade go-jose module to 4.0.1 #187
OCPBUGS-25588: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #183
OCPBUGS-25002: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #181
OCPBUGS-25002: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #180
NO-ISSUE: Sync OWNERS with team members #173
snyk: exclude vendor/ #170
Bump k8s deps for CVE-2023-39325 #169
OCPBUGS-19264: Updating ose-aws-pod-identity-webhook images to be consistent with ART #167
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-29012: Improvements to client timeouts to prevent hangs #116
OCPBUGS-28244: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (de765cc) into master #104
OCPBUGS-26124, OCPBUGS-27861: update snyk file #107
OCPBUGS-29012: Remove concurrent-service-syncs limitation #106
OCPCLOUD-2460: Adds acr-credential-provider spec file and build script #105
OCPBUGS-26115: Add Snyk file to exclude vendor directory on scan #103
OCPBUGS-22556, OCPCLOUD-2422: Update to kubernetes v1.29 #88
OCPBUGS-25590: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART #102
OCPBUGS-25589: Updating ose-azure-cloud-node-manager-container image to be consistent with ART #101
OCPBUGS-25005: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART #100
OCPBUGS-25003: Updating ose-azure-cloud-node-manager-container image to be consistent with ART #99
OCPBUGS-24166: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART #98
OCPBUGS-24164: Updating ose-azure-cloud-node-manager-container image to be consistent with ART #97
OCPBUGS-22265: Bump x/net package to v0.17.0 #90
Update OWNERS #87
OCPBUGS-17282: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (55d9043) into master #84
OCPBUGS-19267: Updating ose-azure-cloud-controller-manager images to be consistent with ART #86
OCPBUGS-19265: Updating ose-azure-cloud-node-manager images to be consistent with ART #85
Full changelog

azure-cluster-api-controllers

OCPBUGS-33083: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.5 (1f08b9d) into master #302
OCPBUGS-27450: add a snyk configuration file #299
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.13.0 (7ee3a6a) into master #298
OCPCLOUD-2443: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.12.1 (f32b78b) into master #297
OCPBUGS-25626: Add Snyk file to exclude vendor directory on scan #295
OCPBUGS-24896: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART #293
OCPBUGS-24091: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART #291
Update OWNERS #287
OCPBUGS-21648: Bump golang.org/x/net to v0.17.0 #285
OCPCLOUD-2217: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.11.2 (fa947c4) into master #284
OCPBUGS-19147: Updating ose-azure-cluster-api-controllers images to be consistent with ART #282
Full changelog

azure-disk-csi-driver

OCPBUGS-30475: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #78
STOR-1579: Rebase v1.29.3 #75
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #74
OCPBUGS-25503: UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #71
OCPBUGS-18701: UPSTREAM: 1904, UPSTREAM: 1917, UPSTREAM: 1955: Update disk number table #49
OCPBUGS-25569: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #70
STOR-1688: Chore: add .snyk file to ignore false positives #69
OCPBUGS-22559: OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs #66
OCPBUGS-25050: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #67
OCPBUGS-24938: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #65
OCPBUGS-24120: Updating ose-azure-disk-csi-driver-container image to be consistent with ART #64
OCPBUGS-17542: allow resizing to min required size for performance plus disks #52
STOR-1394: Rebase v1.29.0 for OCP 4.15 #51
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
OCPBUGS-19172: Updating ose-azure-disk-csi-driver images to be consistent with ART #50
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
STOR-1726: auto-generate assets for CIFS/Samba driver #217
OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Bump google.golang.org/grpc from 1.61.0 to 1.62.1 #190
Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 #198
Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 #203
Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 #185
STOR-1794: add location for azcopy logs #200
OCPBUGS-23260: Explicitly reserve 1 attachment for the root disk #199
Bump go.uber.org/zap from 1.26.0 to 1.27.0 #173
Bump the opentelemetry-dependencies group with 8 updates #177
Bump the golang-dependencies group with 6 updates #191
OCPBUGS-30620: remove legacy directory and duplicate Dockerfile.*.test files #196
OCPBUGS-30469: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #197
NO-JIRA: Configure dependabot for security updates only #174
OCPBUGS-30620: move test manifests to top-level directory #194
STOR-1464: Enable RWOP tests in CI #187
STOR-1762: Add azure file hypershift #163
Bump the k8s-dependencies group with 6 updates #172
STOR-1726: Bump openshift/api dependency #169
STOR-1750: Build image from legacy folder #162
Bump the opentelemetry-dependencies group with 8 updates #161
STOR-1574: Bump all deps #156
OCPBUGS-26924: Add healthcheck for node-driver-registrar container #155
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 #149
STOR-1750: Add legacy azure file driver #154
Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 #150
Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible #148
Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 #147
Bump github.com/google/uuid from 1.5.0 to 1.6.0 #144
Bump google.golang.org/grpc from 1.60.1 to 1.61.0 #145
Bump the k8s-dependencies group with 3 updates #146
STOR-1574: Bump library-go #137
Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 #142
Bump github.com/pkg/profile from 1.3.0 to 1.7.0 #138
Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #141
Bump go.uber.org/zap from 1.24.0 to 1.26.0 #139
Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 #140
Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 #136
Bump github.com/prometheus/common from 0.45.0 to 0.46.0 #135
Bump the opentelemetry-dependencies group with 4 updates #134
Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 #128
Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible #125
Bump the k8s-dependencies group with 5 updates #133
Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 #124
STOR-1722: Add support hypershift for azure-disk #73
Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #129
OCPBUGS-27267: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #132
Bump the opentelemetry-dependencies group with 2 updates #122
Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 #123
Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 #119
Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 #120
NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #106
NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 #104
NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #103
NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 #101
OCPBUGS-27056: Update to RHEL9 and go 1.21 #117
NO-JIRA: Bump the golang-dependencies group with 5 updates #109
NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #108
STOR-1714: AWS EBS operator: Release leadership on SIGTERM #94
NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #107
NO-JIRA: Add valid-reference label to dependabot PRs #116
OCPBUGS-27050: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #114
STOR-1713: Don’t ignore azure-disk-csi-driver-operator #110
NO-JIRA: Add dependabot configuration #97
STOR-1696: Add legacy azure disk #88
OCPBUGS-24245: Add selinux #89
OCPBUGS-25125: Add test AssetOrderer #86
OCPBUGS-25557: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #87
OCPBUGS-25125: Create RBAC objects first #84
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #76
NO-JIRA: Add “Quick start” section to README.md #80
STOR-1688: Chore: add .snyk file to ignore false positives #85
OCPBUGS-25147: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #81
OCPBUGS-23827: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #77
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #79
OCPBUGS-24905: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #78
STOR-1500: Switch to the new operator #69
Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #75
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

azure-file-csi-driver

OCPBUGS-32785: Rebase v1.29.5 for OCP 4.16 #64
OCPBUGS-32046: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 #60
OCPBUGS-31869: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 #59
STOR-1794: use azcopy base image to build driver #56
OCPBUGS-30476: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #57
STOR-1586: Rebase v1.29.3 #54
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #52
OCPBUGS-25550: Updating ose-azure-file-csi-driver-container image to be consistent with ART #47
OCPBUGS-25504: UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #49
OCPBUGS-25550: UPSTREAM: <drop>: Regenerate go.mod with go 1.21 #48
STOR-1688: Chore: add .snyk file to ignore false positives #46
OCPBUGS-24874: Updating ose-azure-file-csi-driver-container image to be consistent with ART #45
STOR-1390: Rebase v1.29.2 for OCP 4.15 #43
OCPBUGS-24075: Updating ose-azure-file-csi-driver-container image to be consistent with ART #44
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #36
OCPBUGS-19110: Updating azure-file-csi-driver images to be consistent with ART #34
Full changelog

azure-file-csi-driver-operator

OCPBUGS-34392: Adjust port for registrar sidecar in aws-ebs csi driver container #230
OCPBUGS-32785: add token audience for Azure File #224
STOR-1726: auto-generate assets for CIFS/Samba driver #217
OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Bump google.golang.org/grpc from 1.61.0 to 1.62.1 #190
Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 #198
Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 #203
Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 #185
STOR-1794: add location for azcopy logs #200
OCPBUGS-23260: Explicitly reserve 1 attachment for the root disk #199
Bump go.uber.org/zap from 1.26.0 to 1.27.0 #173
Bump the opentelemetry-dependencies group with 8 updates #177
Bump the golang-dependencies group with 6 updates #191
OCPBUGS-30620: remove legacy directory and duplicate Dockerfile.*.test files #196
OCPBUGS-30469: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #197
NO-JIRA: Configure dependabot for security updates only #174
OCPBUGS-30620: move test manifests to top-level directory #194
STOR-1464: Enable RWOP tests in CI #187
STOR-1762: Add azure file hypershift #163
Bump the k8s-dependencies group with 6 updates #172
STOR-1726: Bump openshift/api dependency #169
STOR-1750: Build image from legacy folder #162
Bump the opentelemetry-dependencies group with 8 updates #161
STOR-1574: Bump all deps #156
OCPBUGS-26924: Add healthcheck for node-driver-registrar container #155
Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 #149
STOR-1750: Add legacy azure file driver #154
Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 #150
Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible #148
Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 #147
Bump github.com/google/uuid from 1.5.0 to 1.6.0 #144
Bump google.golang.org/grpc from 1.60.1 to 1.61.0 #145
Bump the k8s-dependencies group with 3 updates #146
STOR-1574: Bump library-go #137
Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 #142
Bump github.com/pkg/profile from 1.3.0 to 1.7.0 #138
Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 #141
Bump go.uber.org/zap from 1.24.0 to 1.26.0 #139
Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 #140
Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 #136
Bump github.com/prometheus/common from 0.45.0 to 0.46.0 #135
Bump the opentelemetry-dependencies group with 4 updates #134
Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 #128
Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible #125
Bump the k8s-dependencies group with 5 updates #133
Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 #124
STOR-1722: Add support hypershift for azure-disk #73
Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 #129
OCPBUGS-27267: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #132
Bump the opentelemetry-dependencies group with 2 updates #122
Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 #123
Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 #119
Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 #120
NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #106
NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 #104
NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #103
NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 #101
OCPBUGS-27056: Update to RHEL9 and go 1.21 #117
NO-JIRA: Bump the golang-dependencies group with 5 updates #109
NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 #108
STOR-1714: AWS EBS operator: Release leadership on SIGTERM #94
NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 #107
NO-JIRA: Add valid-reference label to dependabot PRs #116
OCPBUGS-27050: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 #114
STOR-1713: Don’t ignore azure-disk-csi-driver-operator #110
NO-JIRA: Add dependabot configuration #97
STOR-1696: Add legacy azure disk #88
OCPBUGS-24245: Add selinux #89
OCPBUGS-25125: Add test AssetOrderer #86
OCPBUGS-25557: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #87
OCPBUGS-25125: Create RBAC objects first #84
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #76
NO-JIRA: Add “Quick start” section to README.md #80
STOR-1688: Chore: add .snyk file to ignore false positives #85
OCPBUGS-25147: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #81
OCPBUGS-23827: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #77
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #79
OCPBUGS-24905: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #78
STOR-1500: Switch to the new operator #69
Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART #75
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #71
STOR-1400: Add support for Batch DescribeVolume #74
STOR-1400: Sync sidecar arguments with upstream #72
STOR-1500: Add log for the new operator #70
Pull the latest AWS EBS operator #67
Fix vendoring of golang.org/x/net #68
hack: remove existing path from .gitignore #65
Drop Guest prefix from client names #64
Update all generated assets in a single run #63
Verify generated assets in make verify #62
Move operator config into pkg/drivers #61
Add AWS EBS CSI driver operator starter #58
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1455: Add asset generator #53
Delegate to aws-ebs-csi-driver-operator for tests and verify #57
Add aws ebs operator legacy #56
Add ci-operator config #54
Clean the repository, it will be reused for all CSI driver operators #52
Obsolete the operator #51
Fix hostpath image sample to support dynamic registration #47
Add kubelet-registration-path flag to csi-driver-registrar #44
Fix golint error #45
Output error message when failed to get CSIDriverDeployment and requeued #46
Add -nometadata to go-bindata to stop updating generated files by every build #43
Disable automatic installation of the operator in OpenShift #41
Pass SecurityContext to sidecar containers #40
Move EBS deployment sample to the right place #39
Use correct context timeouts #38
Add EBS sample deployment file #37
Add leader election to the operator #36
Embed git version into the operator binary #35
Generate bindata during build #34
Add more unit tests #33
Add controller unit tests #32
Fix deletion of non-namespaced objects #31
Fix e2e test #30
Add e2e test #29
Update to operator-sdk 0.1.1 #28
Fix liveness probe version #27
ADd a RHEL7 dockerfile and standardize format #26
Documentation update #23
Add unit test for validation #14
Fix status.conditions json name #11
Add CRD printer columns #12
Add configuration of liveness probe. #9
Increase resync period #10
Add /var/lib/kubelet HostPath directory to node drivers #8
Fix role bindings #7
Add liveness probe. #6
Fix operator images #5
Add OpenShift manifests to operator image #4
Use label selector for informers. #3
Use constants where appropriate #2
Add initial operator #1
Full changelog

azure-machine-controllers

OCPBUGS-29956: Remove startupScript vmextension lookup #102
OCPBUGS-28309: add an extra vendor exclude to snyk config #99
OCPBUGS-25940: Don’t create availability set when using spot instances #91
OCPCLOUD-2428: Rebase k8s to 1.29 and update dependencies #94
OCPBUGS-26122: Add Snyk file to exclude vendor directory on scan #92
OCPBUGS-23544: Improving performance of creating VMs in Azure #87
OCPBUGS-25591: Updating ose-machine-api-provider-azure-container image to be consistent with ART #90
OCPBUGS-25008: Updating ose-machine-api-provider-azure-container image to be consistent with ART #88
OCPBUGS-24168: Updating ose-machine-api-provider-azure-container image to be consistent with ART #86
Update OWNERS #79
OCPBUGS-21790: Bump x/net package to v0.17.0 #78
OCPBUGS-20268: update bad url endpoint termination handler test #77
OCPCLOUD-2192: Bump k8s packages to v1.28 #76
OCPBUGS-19269: Updating ose-machine-api-provider-azure images to be consistent with ART #75
Full changelog

azure-workload-identity-webhook

OCPBUGS-31283: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 #16
OCPBUGS-30712: Update to go-jose v4.0.1 #15
OCPBUGS-26203: Upgrade golang/x/net for CVE-2023-39325 (main) #12
OCPBUGS-25777: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 #11
OCPBUGS-25543: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART #10
OCPBUGS-24854: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART #8
NO-JIRA: UPSTREAM: <carry> Update OWNERS #9
OCPBUGS-19244: Updating ose-azure-workload-identity-webhook images to be consistent with ART #6
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-35448: [release-4.16] capi/aws: bump provider for fixes #8598
OCPBUGS-35460: save etcd data to its own directory #8600
OCPBUGS-35384: Add ELB V2 permission to set security groups on API server load balancer #8589
OCPBUGS-35344: baremetal: check if HardwareDetails is nil #8579
OCPBUGS-35392: aws: delete ignition bucket on bootstrap destroy #8590
OCPBUGS-35383: capi: use polling instead of exponential backoff #8588
OCPBUGS-35372: openstack: Attach a bootstrap FIP to the cluster network port #8585
OCPBUGS-35323: Add S3 permission to allow attaching S3 bucket policy #8576
OCPBUGS-35379: capi/aws: do not set proxy for masters #8586
OCPBUGS-35253: AWS remove extra tags from awsmachines for security groups and subnets #8569
OCPBUGS-35235: baremetal: Don’t always enable provisioning-interface.service #8563
OCPBUGS-35302: Prevent multiple invocations on CAPI #8571
OCPBUGS-35101: [release-4.16] Add 4 new regions for PowerVS #8533
OCPBUGS-35312: capi/aws: rename preserveBootstrapIgnition #8574
OCPBUGS-35192: write etcd and kube-apiserver logs #8558
OCPBUGS-34760: capi/aws: fix setting custom AMI #8520
OCPBUGS-35243: capi: do not override KUBECONFIG #8566
OCPBUGS-35224: PowerVS: Destroy DHCP in ERROR state #8561
OCPBUGS-35151: wait for ip addresses to be present on machines #8554
OCPBUGS-34499: unique AWS HostedZone Caller Ref #8476
OCPBUGS-35103: OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8553
OCPBUGS-35098: capi/aws: add BootstrapDestroyer guard #8552
OCPBUGS-35088: PowerVS: fix AddIPToLoadBalancerPool #8551
OCPBUGS-35030: Increase timeout for bootstrap complete #8539
OCPBUGS-35049: capi/aws: don’t use S3 stub for masters #8548
OCPBUGS-35044: aws: don’t always require s3:Delete* permissions #8547
OCPBUGS-34620: Use infrastructure API to detect cluster topology #8499
OCPBUGS-34822: [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8524
OCPBUGS-34976: [release-4.16] aws: terraform: add spot instance support for masters #8526
OCPBUGS-34707: attach tag to folder,fix folder destroy #8509
OCPBUGS-33794: Make Ingress capability required for standalone OpenShift #8528
OCPBUGS-34628: tfvars: change asset’s name #8501
OCPBUGS-34388: Add –dir /tmp to node-joiner-monitor.sh #8461
OCPBUGS-34728: [release-4.16] MULTIARCH-4076: PowerVS: Default region bug fix #8506
OCPBUGS-34693: update RHCOS 4.16 bootimage metadata to 416.94.202405291527-0 #8517
OCPBUGS-34419: PowerVS: update capi ibmcloud to release 0 8 0 #8465
OCPBUGS-34623, OCPBUGS-34625: capv - missing cores/socket,disk type #8500
OCPBUGS-34427: aws/cluster: restrict SSH on private clusters #8467
OCPBUGS-34528: Nutanix IPI install with capi failed to set bootType #8481
OCPBUGS-31845: Detect Release Image Arch in a Disconnected Env #8490
OCPBUGS-33962: [release-4.16] Remove vSphere Terraform #8431
OCPBUGS-34506: [release-4.16] bump golang-protobuf for CVE fix #8478
OCPBUGS-34417: capi/aws: don’t modify BYO role’s policy #8463
OCPBUGS-34220: Reintroduce CAPI-installer to 4.16 #8451
OCPBUGS-33976: Enable leader election for baremetal operator #8435
Trt-1674: 4.16 capi revert 1 #8434
CORS-2840: [release-4.16] GA CAPI Installer #8428
OCPBUGS-33668: Changed folder name to match cluster name instead of infra-id. #8414
AGENT-903: monitor-add-nodes should only show CSRs matching node #8376
CORS-3480: aws/sdk: remove sdk provisioner #8358
CORS-3460: Always collect clusterapi manifests #8411
OCPBUGS-33709: GCP mixup when using the ignition shim vs the signed url #8342
CORS-3297: Add GCP firewall rule to access bootstrap node via ssh #8374
CORS-2905: capi-aws delete bootstrap ssh rule #8359
OCPBUGS-33370: baremetal: always write masters file #8365
OCPBUGS-33531: update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 #8409
no-jira: Vendor api changes for tech preview with capg #8407
CORS-3269: Azure ignite control plane machines #8126
OCPBUGS-31017: aws: add missing permission for IPv4 pools #8408
OCPBUGS-33649: add quota support to ca-west-1 #8406
CORS-3460: capi: collect generated assets in hidden dir and save into log bundle #8387
OCPBUGS-33006: baremetal: aarch64-related fixes #8385
OCPBUGS-33610: fix API detection, azure bootstrap disk size, and use get to verify endpoint #8371
no-jira: Removing unused terraform variables #8360
OCPBUGS-33502: capi/aws: fix setting IMDSv2 value #8399
CORS-3516: hack: do not execute cross-compiled binaries #8397
OCPBUGS-33578: capi/aws: fix HostedZone ID lookup #8396
OCPBUGS-30860: improve bootstrap logic to wait for at least 2 apiserver instances #8394
OKD-213: Reference stream-coreos instead of centos-stream-coreos-9 #8356
OCPBUGS-33470: use read/write cache on azure masters #8380
no-jira: AzureMachines: set disk caching to ReadWrite #8390
AGENT-863: Change $@ to “$*” to fix shellcheck #8402
OCPBUGS-33481: set the node tag used by CAPG for CloudProviderConfig #8386
OCPBUGS-23022: Installer should not complain when API and API-INT are resolved. #7701
no-jira: vendor: capi-installer in tech preview #8372
CORS-2895: capa/machines: fix zone placement for control planes #8347
OCPBUGS-32947: Changed vsphere CPMS to not include fields controlled by failure domains. #8354
AGENT-872: Generate JWT token #8110
no-jira: vSphere - update owners aliases #8384
AGENT-906: Script to run monitor-add-nodes in cluster #8294
OCPBUGS-33430: Fix CAPI installation typo #8375
CORS-3471: standalone destroy bootstrap support with capi #8350
CORS-3477: hack: build capi + providers by default #8357
OCPBUGS-33189: OCPBUGS-33006: baremetal: correct libvirt defaults #8366
OCPBUGS-33157: baremetal: pause provisioning #8346
NO-ISSUE: baremetal: disable bmo webhook on bootstrap #8340
OCPBUGS-33240: avoid FAT32 error messages when generating the agent ISO #8353
no-jira: Private domains in survey for PowerVS #8303
CORS-3250: images: use pre-built KAS/etcd binaries #8343
SPLAT-1599: Convert storage policy id to SpbmStoragePolicy. #8352
no-jira: Power VS: Refactor InfraReady to use metadata client #8337
CORS-3466: CAPG set instance group name #8314
MULTIARCH-4633: Power VS: Configure load balancers for the private scenario #8331
OCPBUGS-26216: Fix parameter used to disable smt for ppc64 systems #8178
COS-2744: update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 #8335
METAL-872: baremetal: write masters.json file #8336
no-jira: azure: Add securityProfile to control plane machines #8334
no-jira: CAPI-Install Feature Gates per Platform #8311
SPLAT-1599: Added support for secure boot and storage policies to UPI pwsh. #8328
CORS-2797: images: move container images to RHEL 9 #8196
AGENT-864: cleanup dnf cache after installing node-joiner reqs #8329
OCPBUGS-32981: baremetal: use ControlPlane.Replicas #8322
AGENT-863: docs fix #8325
OCPBUGS-33006: baremetal: set bootstrap domain arch #8317
OCPBUGS-33024: agent: escape ‘%’ in proxy settings #8320
AGENT-863: fix oc dependency in installer images #8326
OCPBUGS-29968: Generate ZTP manifests with correct Group/Version/Kind metadata #8068
CORS-3437: infra/capi: add provisioning timeout #8307
SPLAT-1596: Created new function to workaround issue with Set-HardDisk. #8315
CORS-3214: capi-aws - Wavelength Zones network provisioning #8174
AGENT-863: node-joiner cluster script #8242
OSASINFRA-3434: Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests #8021
CORS-2893: capi-aws: implement preserveBootstrapIgnition #8313
OCPBUGS-4466: Add check for compact-cluster install on GCP, AWS & Azure #8226
CORS-3250: images/altinfra: add etcd/kas binaries from containers #8309
CORS-2899: AWS/CAPI Local Zones network provisioning #8173
OCPBUGS-32981: baremetal: template the number of master nodes #8316
OCPBUGS-32519: Fix appliance CI jobs #8297
OCPBUGS-31017: fix ec2:DisassociateAddress requirement #8296
OCPBUGS-32292: Remove deprecated replace directives #8271
no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 #8310
CORS-3076: azure: Add additional tags to AzureCluster #8301
CORS-3294: CAPA health check configuration for control plane ELBv2 #8223
CORS-3470: capi/aws: add custom endpoint support. #8306
MULTIARCH-4111: Updating CI image to include qemu-kvm #8312
MULTIARCH-4616: Power VS: Add ServiceEndpoints for endpoint overrides #8292
no-jira: cluster-api/aws: bump capa to latest version #8288
OCPBUGS-32306: GCP Destroy find regional and global addresses #8275
OCPBUGS-32517: Ensure worker BMH’s get unpaused #8299
OCPBUGS-32591: GCP Destroy target pools fix misleading log #8298
CORS-3260: CAPI: Create GCP Internal LB #8151
OCPBUGS-15845: Check host for compatibility with target cluster config #7566
no-jira: bump golangci lint to 1.54.2 #8291
OCPBUGS-32425: Test for the presence of “provisioned” server #8289
SPLAT-1585: capv - allow no auth to vcenter #8276
SPLAT-1208: replace UPI terraform with powercli #7699
OCPBUGS-29765: Fills CIS or DNS CRN in Metadata, never both #8057
OCPBUGS-32042: fix usage of addtionalTrustBundle field #8253
METAL-872: Remove terraform libvirt provider #8160
MULTIARCH-4549: Logic for creating private DNS records for PowerVS CAPI #8246
OCPSTRAT-915: Nutanix capi support #8211
OCPBUGS-32133: GCP: Fixing GCP Bootstraping #8248
METAL-939: baremetal: monitor bootstrap process #8181
no-jira: gather: replace deprecated errors package #8280
no-jira: azure: Update capz version to 1.14.2 #8268
OCPBUGS-31017: aws: add ec2:DisassociateAddress permission #8247
OCPBUGS-31563: sdk/aws: add ssh security group rule for compute #8229
MULTIARCH-4550: Power VS: Use a custom resolver when publish strategy is Internal #8243
MULTIARCH-2678, OCPBUGS-14478: Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x #8205
CORS-3050: capi/aws: copy AMI to target region, if needed #8157
SPLAT-1592: bump capv to v1.9.3 #8267
OCPBUGS-30774: always save serial logs if they were gathered #8263
CORS-3261: GCP cluster api add disk encryption #8222
CORS-3419, OCPBUGS-30941: Include baremetal IPI in openshift-installer #8161
no-jira: PowerVS: Open port 10258 #8261
OCPBUGS-31711: AWS update explain docs #8258
OCPBUGS-27965: escape ‘%’ in proxy settings #8265
OCPBUGS-32174: save correct bootstrap public IP #8264
CORS-3420: Remove libvirt platform from openshift-baremetal-install #8244
no-jira: capi: replace deprecated --metrics-bind-addr arg #8251
CORS-3436: capi: save log output to file #8218
no-jira: PowerVS: Add destroy Power Server subnets #8260
OCPBUGS-32091: Add Top-level Context for Create Commands #8063
CORS-3063: Support control plane disk encryption #8124
CORS-3269: Azure CAPI Ignite Bootstrap #8255
no-jira: PowerVS: add AddIPToLoadBalancerPool #8257
SPLAT-1293: Bump API version to promote vSphereStaticIPs from TechPreview. #7943
no-jira: capi/aws: bump controller log level to debug #8252
CORS-3254: Update google.golang.org/api/cloudresourcemanager library version #8213
MULTIARCH-4111: Update the CI image with virt-install #8259
CORS-3218: GCP Remove the use case of users passing contents for json secret data #8234
OCPBUGS-27844: Fix task for attaching IPv6 subnet to router. #8087
CORS-3270: azure: tag installer-created LB resources #8236
OCPBUGS-31813: AWS: bump CCO for permission fix #8233
CORS-3289, CORS-3308, CORS-3426: Bump CAPA provider for various fixes #8232
OCPBUGS-32041: update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 #8256
no-jira: docs: Fix typos #8245
no-jira:PowerVS: Wait for IPs #8239
CORS-3075: Allow for installation in existing resource group #8123
CORS-3446: Add instructions for obtaining correct binary #8230
AGENT-858: Agent day2 ignition services #8093
CORS-3418: images: move installer images to static builds #8215
CORS-3417: capi/aws: support ignition proxy and CA bundle #8170
OSASINFRA-3365: clusterapi: Add worker asset to PreProvision #8237
HIVE-2476: OpenStack.MachineSets(): Allow nil Replicas #8227
CORS-3195: Azure CAPI Supplemental Load Balancers #8115
no-jira: PowerVS: Set VPC service region #8217
OCPBUGS-12890: Create bucket, signed url and use proxy info for installs #8056
no-jira: PowerVS: Fix COS region and VPC subnets #8219
OCPBUGS-31546: azure: use filter when listing SKUs #8134
CORS-3245: Azure CAPI rhcos image #8018
AGENT-874: use AddNodesConfig asset #8080
no-jira: this clusterprofile isn’t actually used #8214
no-jira: pkg/asset/machines: remove static ip log lines #8190
CORS-2895: aws/capi: setting zones to when creating cluster #8156
CORS-3071: Create DNS entries for CAPZ implementation #8045
no-jira: PowerVS: Fix CAPI created service instance case #8212
AGENT-857: Agent day2 use clusterinfo #8009
CORS-3431: CAPI: Add firewall rule for worker nodes #8200
OSASINFRA-3421: OpenStack: Customizable clientOpts for CheckNetworkEx… #8209
no-jira: infra: aws: move SDK provisioner to its own dir #8194
AGENT-868: Generate ECDSA public private keys and pass it to assisted service #8105
MULTIARCH-4096: PowerVS: Generate the cluster assets #8116
CORS-2901, CORS-3428: pkg/types/aws: limit additionalSecurityGroups to 10 #8184
OCPBUGS-27848: If host is offline or disconnected don’t check ver #8206
METAL-855: baremetal: remove ironic-inspector #8128
CORS-3280: Bump cluster-api-provider-gcp to v1.6.0 #8153
OSASINFRA-3420: openstack: Decouple OpenStack API calls from Machine generation #8187
CORS-2898: capi/aws: configure IMDS #8152
CORS-2905: capi/aws: destroy CAPA resources #8179
no-jira: capi/aws: reuse GenerateMachines for bootstrap #8193
OCPBUGS-31209: CAPG - Fix setting ServiceAccount role bindings for GCP #8192
OCPBUGS-31050: openstack: Honour worker server group policy #8180
OCPBUGS-26052: aws: altinfra: fix role creation in C2S #7871
OCPBUGS-15941: ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES #7349
CORS-3256: GCP destroy updates for CAPG #8113
Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8195
OCPBUGS-30882: GCP capg distribute instances across zones #8176
CORS-3142: capi: write manifests to disk during create manifests #8166
OCPBUGS-28870: IBMCloud: Restrict CIS and DNS Service lookup #7987
OCPBUGS-31013: Fix vsi image missing #8177
CNF-10170: bootkube.sh: Render kernel boot arguments for SNO #8099
CORS-2894, CORS-3051: Create DNS resources and PHZ for CAPI/aws #8142
CORS-3417: capa bump fallout #8169
CORS-3307: add ‘A2’ as tested machine types on GCP #8148
CORS-2902: capi/aws: add ext-LB as CAPA secondary LB #8149
CORS-3213: Tweak GCPCluster Failure Domain Logic #8017
CORS-3215: capi: implement bootstrap gather #8036
NO-JIRA: OWNERS: pkg/infrastructure/openstack #8165
OPNET-476: GA Load balancer feature for vSphere and Baremetal #8101
no-jira: Power VS: Fix comment on default for wait_for_workspace #8158
OPNET-476: GA Load balancer feature for Nutanix #8102
CORS-3303: GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region #8132
SPLAT-1390: remove feature gate for vSphere control plane machinesets #7908
CORS-2892: capi/aws: add user tags to CAPA cluster #8150
OCPBUGS-30836: Power VS: Fix wait_for_workspace #8145
OCPBUGS-25462: Validate control plane replicas #8082
OCPBUGS-30642: pin google oauth2 version #8133
OCPBUGS-30600: update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 #8121
CORS-3257: Create GCP ServiceAccounts and assign to machines #8066
OCPBUGS-15861: Use a static pure-go libvirt library #7252
OCPBUGS-29437, OCPBUGS-30547: Run kubelet directly #8131
METAL-871: baremetal: remove ironic tf files #8117
OCPBUGS-30641: Enable deploy by Service ID on PowerVS #8111
CORS-3288: bump CAPA for LB scheme fix #8114
no-jira: machines/aws: fix subnet filter comment #8120
METAL-871: baremetal: bootstrap: rename master label #8107
OCPBUGS-29388: upi: aws: fix typo in worker templates #8112
OSASINFRA-3362: Fix CAPI bootstrap deletion #8104
OCPBUGS-24415, OCPVE-661: bump openshift/api version #7546
MULTIARCH-4095: Generate PowerVS machine manifests for CAPI #8020
CORS-2900: CAPI AWS IAM #8031
OCPBUGS-30200: Authn with platform-services-go-sdk for PowerVS #8025
CORS-3281: IBMCloud: initial CAPI infrastructure #8090
CORS-2890: Bump CAPA Dependencies for Secondary Load Balancers #8088
SPLAT-1460: Make vSphere default ResourcePool formatting not contain double slash. #8044
CORS-3212: CAPG Add ignition for CAPG machines #8027
METAL-871: Remove terraform-provider-ironic #7649
SPLAT-1468: Added log message for import vsphere ova progress during CAPI install. #8097
no-jira: capi: aws: report all conflicting user tags at once #8085
OCPBUGS-29469: fix Azure API SKU calls timing out - part 2 #8070
SPLAT-1423: Added static ip support to CAPI installer. #8081
MULTIARCH-4159: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8098
OCPBUGS-30058: GCP: The CAPG bootstrap machine IP should be set according to the publish strategy #8079
OCPBUGS-30057: Don’t auto create subnets for CAPG #8083
MULTIARCH-4153: Incorporating Eltorito Boot Loader fix for Agent #8069
no-jira: Missing permission from vsphere docs #7789
OCPBUGS-30135: fix “OpenShiftSDN deprecated” error message #8092
CORS-3274: GCP: add africa-south1 region to the survey as supported region #8055
CORS-3251: Create capz machine manifests #7969
CORS-3259: GCP CAPI Infra: auth with service account #8077
CFE-857: Apply user defined tags on created gcp resources #7279
AGENT-853: Add ClusterInfo asset #7997
SPLAT-1173: Enhance vSphere Installer to use IPAddressClaims for static IP #7501
CORS-3273: capi system: don’t log env vars #8084
OCPBUGS-29860: double looping of failuredomains breaks zonal #8059
no-jira: Remove v1alpha3 #8061
OCPBUGS-30005: remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 #8072
OSASINFRA-3363: ShiftStack CAPO integration #7939
MULTIARCH-4158: pkg/infrastructure/powervs: add initial CAPI provider #8060
OCPBUGS-29469: fix Azure API SKU calls timing out #8046
SPLAT-1459: capv machines only full clone #8042
OCPBUGS-29895: PowerVS: Add debugging to ServiceInstanceNameToGUID #8058
SPLAT-1434: aws: add support of BYO public ipv4 pool #7983
no-jira: images: libvirt: add oc to libvirt CI image #8008
SPLAT-1465: capv - add additional extra configs #8054
SPLAT-1462: capv - Remove unneeded auth env vars #8053
OCPBUGS-29429: feat: add check for SNO bootstrap condition #8004
Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer #8028
CORS-3259: GCP: Create DNS records and internal load balancer for CAPG Install #8014
SPLAT-1198: migrate vSphere installation to CAPV #7962
OCPBUGS-29587: Power VS: Fix service instance list #8033
OCPBUGS-22410: vsphere-fix convert if only provided name #7931
OCPBUGS-29584: PowerVS: handle composite_instance #8029
OCPBUGS-29482: Bump terraform-provider-ibm to v1.61.0 #8023
CORS-2890: pkg/infrastructure/aws: add initial CAPI provider #8012
CORS-3185: update default release image #7874
OCPBUGS-28590: gcp: better error msg when service accnt missing #8002
OCPBUGS-28203: Power VS: Add sleep to allow workspace to configure PER #7889
CORS-3220: Initiate CAPG installation #8011
CORS-3213: Create the GCP cluster manifest #7917
OCPBUGS-29441: update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 #8015
OCPBUGS-29425: PowerVS Fix next start search #8010
Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation #7998
SPLAT-1447: Move MCO imports to API; update library-go, api #8000
NO-ISSUE: integrationt tests support for env vars substitution #7992
OCPBUGS-29114: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7985
OCPBUGS-29068: GCP: Skip validation of public and private zones for terraform vars #7986
OCPBUGS-29067: Copy GCP manifests within MCO bootstrap to the correct location #7991
OCPBUGS-20085: IBMCloud: Handle disk delete errors #7515
OCPBUGS-28827: do not rename boot.catalog for arm64 iso #7972
OSASINFRA-3371: Pass rhcosImage and manifests to the PreProvision hook #7967
SPLAT-1387: enable additional tags to be associated with vsphere machines #7905
CORS-3242: PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item #7861
OPNET-357: Populate network configuration at install-time #7604
CORS-3240: add OWNERS_ALIASES madhu-pillai #7733
CNF-10170: Revert “bootkube.sh: Render kernel boot arguments for SNO” #7979
CORS-3188: Bump k8s deps #7970
OCPBUGS-2135: Include CAPG objects in uninstall filter #7907
AGENT-848: add node-joiner cli tool main #7958
CORS-3207: Generate GCP machine manifests for CAPI #7944
OCPBUGS-24575: ic: gcp: validate instance architecture #7850
CORS-3196: capg: add infrastructure components #7968
CORS-3208: Create the GCP infrastructure controller #7940
OCPBUGS-27156: GCP Destroy cleanup correct zones/records #7932
OCPBUGS-27737: aws-edge-zones preventing err before discovering #7945
OCPBUGS-28708: update tested Azure Arm64 instance type on 4.15 #7965
OCPBUGS-28643: PowerVS: Add dal12 region #7956
OCPBUGS-27263: Bump golang 1.21 #7925
CNF-10170: bootkube.sh: Render kernel boot arguments for SNO #7692
OCPBUGS-28705: [azure] update tested x86 instance type on 4.15 #7961
CORS-3139: Move CAPI behind infrastructure provider interface #7824
OCPBUGS-27507: bump containerd for vulnerability fix #7942
NO-ISSUE: test fix to support slightly different nmstate error messages #7954
NO-JIRA: Minor fixes #7947
no-jira: azure: add metadata info to resource group tags #7725
OCPBUGS-25453: duplicate failure domains in CMPS #7860
OCPBUGS-27788: PowerVS: COS region configurable #7941
SPLAT-1345: Remove alibaba #7832
OCPBUGS-27366: set the –cluster-profile flag for openshift/api rendering #7924
OCPBUGS-27192: remove retired serial NCv2 from azure tested instance type list on x86 #7911
no-jira: images/altinfra: allow CAPI ARG #7891
OCPBUGS-25835: Validate baremetal capability is set for baremetal platform #7901
no-jira: Add AWS m6a to tested instance types #7851
OCPBUGS-24956: Fix typo in CloudCredential validation #7915
OCPBUGS-24303: Check provided sha for agent ISO download #7893
CORS-3203: Fix depreciated typo #7834
OCPBUGS-14257: normalize ISO files extensions to three chars #7896
OCPBUGS-26434: Redact platform passwords in agent-gather output #7873
OCPBUGS-27092: baremetal: gather all recently refactored services #7854
OCPBUGS-25996: baremetal: correct external_http_url for v6-only BMCs #7898
CORS-2950: Remove openshift-sdn as an install-time option #7720
OPNET-415: Upgrade o/api to include extended network config #7869
METAL-829: Set node cpu_arch from bmh #7814
OCPBUGS-26399: Support singular VIP in ACI for BareMetal #7859
CORS-3190: GCP: Add load balancer info to cluster infra #7888
MULTIARCH-4072: Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7870
OCPBUGS-24956: Add cloud credential capability validation #7884
OCPBUGS-25841: preserve category name when trying to find tag category #7876
ARO-4744: Do not run platform validation on ARO #7865
OCPBUGS-24956: Add cloud credential capability validation #7875
OSASINFRA-3280: OpenStack: clarify root volume size requirements #7698
OCPBUGS-26048: Bump default channel to stable-4.16 #7867
OCPBUGS-24862: Updating ose-installer-altinfra-container image to be … #7872
CORS-2852: cmd/create: allow clean shutdown of resources #7864
OCPBUGS-24820: Updating ose-baremetal-installer-container image to be consistent with ART #7817
OCPBUGS-24814: Updating ose-installer-container image to be consistent with ART #7816
OCPBUGS-25600: aws: validate instance arch #7835
OCPBUGS-25440: ic: aws: add iam:TagInstanceProfile permission requirement #7843
OCPBUGS-25132: Fixes for the OpensStack UPI playbooks. #7833
OCPBUGS-24853: Updating ose-installer-artifacts-container image to be consistent with ART #7818
OCPBUGS-19054: Warn that FeatureSet is not supported #7825
CORS-2315: GCP: Skip populating Private/Public Zones within DNS manifest #7846
no-jira: build: drop vsphereprivate build workaround #7847
CORS-2870: build: only rebuild terraform providers if needed #7688
OCPBUGS-24473: IBMCloud: Set IBM TF visibility based on URLs #7805
CORS-3029: GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS #7837
OCPBUGS-24241: Pin openstack.cloud version. #7821
Revert “OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer” #7651
no-jira: Revert “Merge pull request #7823 from patrickdillon/build-capi-altinfra” #7828
OCPBUGS-19303: Changed OKD/FCOS workaround to also support Agent-based Installer #7484
OCPBUGS-25191: ic: azure: fix retrieving marketplace image #7826
OCPBUGS-24995: Revert “Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… #7822
CORS-2840: images/altinfra: enable CAPI builds #7823
CORS-3003: [ibmcloud] add key-protect plugin in ibmcloud cli #7811
CORS-2852: Support installing OpenShift via Cluster API #7807
SPLAT-1272: Modify the terraform variables to support Nutanix Failure Domains #7806
CORS-2934: IBMCloud: Update MAPI for BYOK #7812
METAL-803: Update vendoring for baremetal-operator #7809
no-jira: Fix base image reference #7810
CORS-2952: GCP Set “ClusterHostedDNS” in the Infra CR based on the value of userProvisionedDNS #7796
CORS-2813: Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap #7662
OCPBUGS-23140, OCPBUGS-23305: Soften VIP validations for external load-balancer #7803
AGENT-739: Support for install-config baremetal host BMC fields #7645
AGENT-729: Support generic platform name for external platform #7585
MULTIARCH-4042: Reuse existing Transit Gateway in target Workspace, or create anew #7592
OCPBUGS-23473: update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 #7770
AGENT-615: Split create-cluster-and-infraenv.service #7364
no-jira: image: infra-providers: use base image instead of builder #7800
no-jira: hack: drop hardcoded -j8 in make invocations. #7799
OCPBUGS-23458: force destroy bootstrap ign #7791
OSASINFRA-3261: OpenStack: support dualstack in UPI #7727
MULTIARCH-2678: Patch for Agent Based Installer to support s390x as supported architecture. #7712
SPLAT-1218: AWS BYO VPC support for Wavelength Zones #7652
CORS-2525: Azure: remove storage account with bootstrap destroy #7642
AGENT-337: Set VIPs directly in api, instead of install-config override #7574
OCPVE-648: gomod: bump api version with CloudCredential cap #7466
CORS-2852: cmd/create: ensure proper cleanup on exit #7693
OCPBUGS-9066: Retry image download on failure #7106
NO-ISSUE: Remove dead code from ‘networking’ asset #7798
PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option #7795
OCPBUGS-24191: set vmType in azure cloud config #7793
no-jira: pkg/asset: safety nets to keep installer from crashing #7792
CORS-2934: IBMCloud: Add support for BYOK #7738
OCPBUGS-23539: Keep Machine manifests out of OpenShift Manifests asset #7753
CORS-3020: IBMCloud: Bump IBM TF provider #7784
MIXEDARCH-310: Enable the use of the multi payload for agent installer #7595
CORS-2775: ic: azure: remove deprecated errors package #7778
SPLAT-1126: aws/clusterNetworkMTU config to change the MTU for overlay network #7765
CORS-2785: images: decouple installer and installer-artifacts #7782
MULTIARCH-3793: Power VS: Add mad and wdc assupported region #7773
CORS-2852: Generate Cluster API Machine Manifests #7771
CORS-2854: azure: Allow users to set visibility to components #7547
OCPBUGS-24008: Remove sno_arm.txt integration test #7718
OCPBUGS-23947: set client options when interacting with azure api #7768
CORS-2978: enable AWS SDK Installation through feature gates #7715
CORS-2798: GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information #7631
CORS-2845: azure: Enable storage account encryption #7520
SPLAT-1277: unrevert PR 7418; implement vSphere control plane machinesets #7780
OSASINFRA-3303: OpenStack: remove generation of trunks name #7772
AGENT-670: Add assisted-db data to agent-gather #7719
SPLAT-1160: AWS - Support Wavelength Zones with edge pool #7369
Skip cluster config #7666
OCPBUGS-24031: Bump Fedora CoreOS to latest stable #7779
no-jira: destroy: azure: store session in the destroy object #7777
CORS-2975: Add support for il-central-1 in AWS #7740
CORS-2428: terraform: add build information to binaries #7763
OCPBUGS-24026: Add owner for user provided client CA bundle #7749
SPLAT-1272: Support Nutanix Failure Domains #7730
CORS-2775: destroy: azure: remove deprecated errors package #7761
no-jira: cmd/openshift-install: Remove “migrate” command #7601
no-jira: go.mod: remove unused terraform-providers-nutanix import #7762
CORS-2835: pkg/infrastructure: remove ARO build tag #7745
OCPBUGS-21777: baremetal: populate customDeploy in advance #7674
CORS-2933: IBMCloud: Basic service endpoint override #7632
CORS-2852: Introduce Cluster API Infrastructure manifest generation #7672
OCPBUGS-22840: ic/azure: validate field Plan when for marketplace images #7721
CORS-2604: tag user-provided azure vnet #7611
MULTIARCH-3964: Power VS: Control SMT level with machineconfig #7704
no-jira: destroy/azure: fix dropped negation from error comparison #7758
no-jira: destroy/azure: avoid cancelling main context #7750
OCPCLOUD-2130: Fix Failuredomains check on manifests test #7617
OSASINFRA-3295: OpenStack: fix client used to list flavors #7723
OSASINFRA-3294: OpenStack: fix script to update bootstrap ignition shim #7743
no-jira: images: rename terraform- > infrastructure-providers #7716
OCPBUGS-23376: vSphere - when using RP network path is incorrect #7737
no-jira: Stop rendering networks.config CRD #7732
OCPBUGS-22453: Fixed systemd-resolved’s split dns config in OKD/FCOS #7634
SPLAT-1218: upi/AWS: Templates to provision resources in Wavelength #7722
AGENT-337: Support both VIP and VIPs in AgentClusterInstall #7724
OSASINFRA-3229: Remove support for Kuryr #7675
CORS-2830: Provision AWS Infrastructure with SDK #7676
MULTIARCH-4009: Prepare for varying SysTypes for new datacenters #7717
MULTIARCH-3789: Power VS: Remove cloud connection support #7696
CORS-2876: images/installer-altinfra: initial Dockerfile #7711
Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network #7694
MULTIARCH-3965: Check if PER is enabled in the target PowerVS workspace #7683
OSASINFRA-3280: openstack: document etcd on local disk #7664
OCPBUGS-23170: Revert #7418 “SPLAT-1141: implement vSphere control plane machinesets” #7708
MULTIARCH-2590: PowerVS create service instance #7695
SPLAT-1141: implement vSphere control plane machinesets #7418
CORS-2428: images: add Dockerfile for a terraform-providers image #7687
OSASINFRA-3237: move controlPlanePort API to GA #7570
CORS-2835: use build tags to produce installer with alternate infrastructure providers #7656
CORS-2877: Install Config Feature Gate Validation #7413
OCPBUGS-22772: return Terraform statefile on error #7671
NO-JIRA: destroy/aws: replaced deprecated sets syntax #7680
OCPBUGS-19398: IBMCloud: Add eu-es region #7668
OCPBUGS-22830: fix google cli verson to 447.0.0 #7663
OCPBUGS-22113: Do not generate azure-cloud-provider in manual mode for aro builds #7608
OCPBUGS-22757: update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 #7654
CORS-2852: Introduce pkg/clusterapi, system, and local control plane #7630
OCPBUGS-20403: OpenStack: add SG rules for compact clusters on UPI #7576
OCPBUGS-17866: check GOOGLE_APPLICATION_CREDENTIALS env var #6863
OCPBUGS-22773: PowerVS: fix removeFromLoadBalancers #7653
OCPBUGS-13664: Add KMS encryption keys if provided #7650
Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap #7638
OCPBUGS-18387: Add Azure ConfidentialVM capability and DiskEncryptionSet validations #7469
OCPBUGS-22489: destroy: gcp: fix destroying regional disks #7643
OCPBUGS-22058: Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7590
OCPBUGS-18986: Skip the deletion of instance profiles marked shared #7537
hack/go-lint: update golanci-lint to v1.53.1 #7635
OCPBUGS-22655: Bump Fedora CoreOS to latest stable #7644
bootkube.sh: drop final mention of machine-os-content #7636
update tested x86 instance type on 4.14 #7639
OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer #7629
CORS-2852: Build and package Cluster API and providers #7620
AGENT-713: Use BM hosts in install-config if not defined in agent-config #7531
MIXEDARCH-353: Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage’s manifest-list image #7567
openstack: dual stack UPI - create security group rules for IPv6 #7552
OCPVE-740: bump openshift/api #7613
AGENT-718: Add vSphere credentials to install-config overrides #7593
Revert #7428 “OCPBUGS-13664: Add KMS encryption keys if provided” #7625
OCPBUGS-10906: check extracted base iso coreos version is in sync #7030
OCPBUGS-4038: bootstrap: Enable gatewayd units only on RHCOS #7580
OCPBUGS-21720: images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 #6813
CORS-2836: Refactor Stages, encapsulate terraform #7488
OCPBUGS-20356: update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 #7616
OCPBUGS-20364: azure: validation: validate defaultMachinePlatform #7584
OCPBUGS-20525: aws: use security groups from defaultMachinePlatform #7589
OCPBUGS-13664: Add KMS encryption keys if provided #7428
OCPBUGS-5471: Try to select rendezvousIP among non-worker hosts #7443
OCPBUGS-21781: Rectify GCP label key validation check #7596
Revert skipping integration test agent sno arm #7561
OCPBUGS-20350: vSphere,segfault on version check #7575
OCPBUGS-19093: skip agent-tui on OCI #7512
OCPVE-675: feat: bump api to add OLM capability #7495
Enforcing the serial execution of the integration tests #7591
images: Cleanup CI Dockerfiles #7507
OCPBUGS-20440: Warn about host and target compatibility #7582
OCPBUGS-19444: Use changes to AgentClusterInstall during loading #7506
OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules #7577
Remove unused method #7438
PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality #7564
OCPBUGS-19552: Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved #7516
docs: Described process of adding vGPU capable nodes. #6606
OCPBUGS-19086: Check if nmstatectl executable exists in the system #7492
OCPBUGS-16666: Change where AdditionalTrustBundle is set #7485
OCPBUGS-18455: Unable to disable external CCM for platform external #7533
OCPBUGS-18552: Truncate vlan names defined in nmstate if > 15 chars #7486
OpenStack: enable IPv6 primary dual-stack cluster #7259
OCPBUGS-20110: Add an unit test - at least one interface must be defined for each node #7555
OSASINFRA-3199: Configure User-Agent for OpenStack API calls #7548
OCPBUGS-17757: check credentials type to handle different gcp authentication methods #7422
Docs: Fix openstack command for image update in upi installation #7556
PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions #7563
PowerVS: Remove deprecated errors package #7544
Disable pxe sno arm integration test #7557
Inefficient wait for all clusteroperators #7535
OCPBUGS-15844: Enable FIPS in agent ISO #7540
OCPBUGS-20058: Use updated ansible-core for Openstack image #7549
OWNERS: Remove obsolete agent reviewers #7545
OCPBUGS-5728: Log “agent wait-for” commands to .openshift_install.log #7452
OCPBUGS-19092: Enable serial console for external OCI platform #7511
OCPBUGS-18690: ic: azure: validate NVMe-only family types #7500
CORS-2479: agent: Ensure registries.conf is world readable #6745
add jbtrystram to coreOS approvers and reviewers #7464
OCPBUGS-19093, OCPBUGS-19688: Allow agent-tui to use serial console #7526
Tweaks to validateRendezvousIPNotWorker #7437
OCPBUGS-18986: Tag aws instance profiles. #7510
OCPBUGS-19376: GCP default value for service account #7519
MULTIARCH-3701: Enable ppc64le for agent installer #7366
pkg/asset/installconfig/powervs: fix dropped error #7419
OCPBUGS-19699: Remove warning about CPUPartitioning #7527
OCPBUGS-18187: Increase bootstrap timeout for vSphere platform by 30 mins #7518
OCPBUGS-18830: AWS terraform bootstrap destroy will not refresh state #7491
OCPBUGS-12707: always write AWS cloud.conf #7514
AGENT-710: Use invoker for bootstrap template generation #7508
OCPBUGS-18876: Pass CPUPartitioning via install-config overrides if set #7513
OpenStack: fix IPv6 docs #7482
OCPBUGS-18945: update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 #7499
LICENSE: Update #7502
OCPBUGS-19286: Updating ose-installer-artifacts images to be consistent with ART #7496
SPLAT-1170: enable cloud controller manager type to be defined #7457
OpenStack: Set external network for cloud-provider #7411
OCPBUGS-17724: Graceful fail for AWS getUser on destroy #7429
AGENT: publish services diagrams #7323
OCPBUGS-19149: Updating ose-baremetal-installer images to be consistent with ART #7494
OCPBUGS-19130: Updating ose-installer images to be consistent with ART #7493
OCPBUGS-17218: Warn when firewall rull missing. #7417
OSASINFRA-3236: deps: Bump gophercloud to v1.6.0 #7208
OCPBUGS-19037: Handle agent tui failure gracefully #7490
OCPBUGS-19017: Add Net capabilities to dnsmasq container #7487
OCPBUGS-18113: Do not set FailureDomains on CPMS when in a single zone Azure region #7448
AGENT-702: Generate minimal ISO for external platform #7450
OCPBUGS-18304: for vsphere ipi add cluster domain to the uploaded vm configs so that… #7451
Implement workaround to allow SNO installations for OKD/FCOS #7445
Full changelog

baremetal-machine-controllers

OCPBUGS-30477: Bump golang-protobuf version #213
OCPBUGS-28835: Extend metal3remediation aggregation role #209
OCPBUGS-25561: Updating baremetal-machine-controller-container image to be consistent with ART #208
OCPBUGS-25159: Updating baremetal-machine-controller-container image to be consistent with ART #207
OCPBUGS-24919: Updating baremetal-machine-controller-container image to be consistent with ART #206
OCPBUGS-24108: Updating baremetal-machine-controller-container image to be consistent with ART #205
NO-ISSUE: Log when applying updates to BareMetalHost #203
OCPBUGS-21794: Uplift x/net to v0.17.0 #197
OCPBUGS-19178: Updating baremetal-machine-controller images to be consistent with ART #196
Full changelog

baremetal-operator

OCPBUGS-33254: Merge upstream #354
NO-ISSUE: Revert “downstream-only: Disable webhooks” #335
OCPBUGS-33048: PreprovisioningImage should not be created on poweroff #349
NO-ISSUE: Sync upstream April 29 #348
NO-ISSUE: Merge upstream #347
NO-ISSUE: Sync with upstream #344
NO-ISSUE: Merge upstream #340
NO-ISSUE: Update OWNERS #339
METAL-866: Merge upstream #336
NO-ISSUE: Merge upstream (2024.02.02) #330
OCPBUGS-27825: Merge upstream #329
OCPBUGS-25567: Updating ose-baremetal-operator-container image to be consistent with ART #328
OCPBUGS-24935: Updating ose-baremetal-operator-container image to be consistent with ART #327
OCPBUGS-24117: Updating ose-baremetal-operator-container image to be consistent with ART #323
METAL-376: Merge upstream #322
METAL-376: Re-enable RAID interfaces #319
OCPBUGS-21777: Do not update instance_info and deploy_interface for active nodes #316
OCPBUGS-8764: Merge upstream #315
Merge upstream #314
OCPBUGS-21736: Uplift x/net to v0.17.0 #313
Merge upstream #303
OCPBUGS-19191: Updating ose-baremetal-operator images to be consistent with ART #302
Merge upstream #301
Full changelog

baremetal-runtimecfg

OCPBUGS-29067: Fix generation of DNSUpstreams on cloud platforms #308
NO-ISSUE: Fix wrong golang version, bump to 1.21 #311
Revert “OCPBUGS-32348: Make log level configurable” #310
OCPBUGS-32348: Make log level configurable #305
OCPBUGS-29067: Do not add VRRP config to Node on Cloud Platforms #303
OCPBUGS-29931: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.16 #300
OCPBUGS-29919: Decrease log level when detecting node IP #301
OCPBUGS-29095: Ignore egress IP when selecting Node IP #298
OCPBUGS-24865: Updating ose-baremetal-runtimecfg-container image to be consistent with ART #291
NO-ISSUE: Upgrade k8s api and client-go deps #297
OCPBUGS-26765: Add .snyk file to ignore vendor and test files #292
CORS-2818: Adding ability to render Cloud LB IPs #286
OCPBUGS-23432: Use shorter IP label for keepalived VIP #287
OCPBUGS-22204: deps: upgrade x/sys #280
OCPBUGS-19492: Increase timeout for bootstrap kubeapi #276
OCPBUGS-19098: Updating baremetal-runtimecfg images to be consistent with ART #274
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-34886: Hardcode resource groups/kinds for now #1796
OCPBUGS-33917: add alert data to upgrade health in oc adm upgrade status #1794
OCPBUGS-33975: pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK #1776
OCPBUGS-34406: Simplify output when not updating #1781
OCPBUGS-33918: adm update status: Show information about the upgrade target version #1772
OCPBUGS-33916: Add s390x based oc into extraction target #1770
OCPNODE-2281: Support multiple icsps in migrate icsp #1751
OCPNODE-2282: Support multiple ImageDigestMirrorSet objects in the th… #1756
OTA-1275: cli/admin/release/git: use optimized git flags #1754
WRKLDS-1251: Switch cli image to RHEL9 base image #1752
OTA-1154: pkg/cli/admin/upgrade/status: Drop free-form Progressing output line #1753
OTA-1279: pkg/cli/admin/upgrade/status: Move Failing from free-form to updateInsight #1744
OCPBUGS-32841: Bump go-jose indirect reference to 2.6.3 #1747
OTA-1174: update status: unify on --details #1748
OCPBUGS-32786: Improve error message when binary is not in target list #1746
OCPBUGS-32080: release: extract ccoctl.rhel8 and ccoctl.rhel9 #1734
OTA-1174: upgrade status: Show resources in --details=health #1737
OTA-1155: update status: Simplify CO status line #1741
OCPBUGS-20097: Migrate tools image to RHEL9 #1652
NO-JIRA: Print an error msg instead of panicking when all image manifests are filtered out #1729
WRKLDS-1190: oc adm must-gather: print timestamp when logging in fallback mode #1738
OTA-1202: Changing the conditional risk to known issues #1739
OTA-1174: upgrade status: Expand health insights with --detailed=health #1736
OTA-1174: upgrade status: add --detailed=nodes that shows all nodes #1735
MCO-1056: MCO-1057: Implement oc adm prune machineconfigs command #1723
NO-JIRA: Report tests for feature #1728
OTA-1036: adm update status: Refactor node status #1732
OTA-1036: adm upgrade status: Add control plane nodes status #1731
OCPBUGS-31498: Add OIDC specific certificate authority bundle flag #1720
WRKLDS-1171: Add openshift-install-fips target to oc release extract #1725
OCPBUGS-31615: Add help text the behavior of filter-by-os against single image #1721
make output table slightly easier to read #1719
NO-JIRA: update featuregate diff for clusterprofiles #1714
WRKLDS-1128: revert cli/admin/release/git: use optimized git flags #1718
OCPBUGS-31484: Remove some of newapp unit tests relying on external deprecated images #1717
WRKLDS-1128: cli/admin/release/git: use optimized git flags #1708
WRKLDS-1076: oc idle: Remove redundant endpoint resource modification #1692
OCPBUGS-30703: Bump coreos/go-oidc to 3.10.0 #1713
WRKLDS-1103: tools: extend the image with sosreport #1704
OTA-1165: adm upgrade status: Add Worker Node Status #1689
OCPBUGS-29623: Introduce certificate-authority flag for image related commands #1693
OCPBUGS-30212: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1680
OCPBUGS-30244: Add images mismatching kubectl version into warning to track #1695
OCPBUGS-30162: Introduce –issuer-url flag in oc login #1694
NO-JIRA: Bump k8s dependencies to 1.29.1 #1684
OCPBUGS-23386: Extract oc also for linux/ppc64le #1691
OTA-1080: pkg/cli/admin/inspectalerts: New tech-preview inspect-alerts subcommand #1674
OCPBUGS-29210: Update some commands incorrect examples #1686
NO-JIRA: Print log rather than returning an error when kubectl version mistmaches #1685
Do not force the ancient OS version dist tag. #1536
TRT-1503: Tools image no longer has python;adding #1682
Revert “NO-JIRA: Bump k8s dependencies to 1.29.1” #1683
NO-JIRA: Bump k8s dependencies to 1.29.1 #1681
OCPBUGS-29039: fix copy-to-node #1679
OCPBUGS-28540: Copy oc.rhel8 instead of symlink #1669
OCPBUGS-27732: Bump joelanford/ignore to bump go-git to 5.11.0 #1671
WRKLDS-1016: Bump kube dependencies to 1.29.0 #1661
OCPBUGS-27957: pkg/cli/admin/inspect: use since/since-time for previous container logs #1666
NO-JIRA: Fix –parallelism flag formatting in help #1664
NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error #1663
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1667
OCPBUGS-27489: Use correct hash sum of extracted tarball after re-signing with codesign #1659
NO-JIRA: Simplified kubectl component version check #1662
CNV-37284: Add –all-images flag to must-gather #1633
Revert “WRKLDS-1016: Bump kube dependencies to 1.29.0” #1660
WRKLDS-1016: Bump kube dependencies to 1.29.0 #1655
NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images #1656
WRKLDS-998: oc login: Built-in cred exec plugin implementation and wiring #1640
NO-JIRA: adm update status: add TODOs to remind us to revise early decisions #1654
WRKLDS-1012: oc adm must-gather: pull gather container logs #1641
WRKLDS-950: add since and since-time flags to limit log collection on must-gather #1648
WRKLDS-1010: pkg/cli/admin/inspect: use since/since-time for rotated logs #1653
NO-ISSUE: add information about featuregate diff in a particular release #1650
NO-JIRA: report kubectl version to the release controller #1651
OCPBUGS-25461: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1647
OTA-1087: Add upgade health section to adm update status #1636
OCPBUGS-19807: pkg/cli/admin/release/extract: Log a warning on –credentials-requests without –included #1551
NO-JIRA: Sanitize path using filepath Clean #1645
OTA-492: pkg/cli/admin/upgrade/rollback: New rollback command #1642
NO-JIRA: oc adm prune images: fix –certificate-authority flag name in validation code #1644
OCPBUGS-25703: validate tag name on creation #1643
NO-JIRA: Migrate from deprecated ioutils to relevant libraries #1602
OCPBUGS-23386: Generate FIPS compatible RHEL9 oc binary #1632
OCPBUGS-25021: Bump ocp images to 4.16 in addition to go 1.21 #1628
OCPNODE-1656: oc release extract: Introduce –idms-file and deprecate icsp-file #1624
OCPBUGS-24834: Bump api to include the new CloudCredential cap #1622
OCPBUGS-24225: Remove deprecated password defaulting in default config flag #1619
OCPBUGS-24375: Overwrite template’s namespace with the explicit one #1612
OCPBUGS-23723: Add .snyk file to exclude vendor and ignore unit tests #1604
ACM-7713: Skip related objects which are invalid #1550
OTA-1035: adm upgrade status Add control plane update status #1597
OCPBUGS-23071: Mention inspection completion in the error message #1601
NO-JIRA: Add client version in must-gather summary #1603
WRKLDS-908: Promote some experimental commands, deprecate others #1596
WRKLDS-860: Add volume usage percentage checker script in must-gather’s gather container #1533
OTA-1035: Allow testing adm upgrade status on mock data #1595
NO-JIRA: Drop the experimental info for registry login and must-gather commands #1594
Updating content type variable name for CLI docs generation #1591
WRKLDS-874: oc whoami: Ask from selfsubjectreview and fallback to internal oauth #1588
moved cert sharing library #1532
OCPBUGS-21612: Use mutex to prevent concurrent writes #1589
OCPBUGS-20500: Add directive example to kubelet-restart command #1586
pkg/cli/admin/upgrade/status: Add update duration #1583
oc/*: gracefully fail when user group is not configured #1585
create/identity: fail gracefully when no user API exists #1582
pkg/cli/admin/update: Add tech-preview ‘oc adm upgrade status’ #1554
OCPBUGS-20500: Fix some commands incorrect examples #1581
OCPBUGS-9340: pkg/cli/admin/upgrade: Warn on unrecognized subcommands #1557
OCPBUGS-20381: Bump golang.org/x/net to v0.17.0 #1578
OCPBUGS-20528: Revert “OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror” #1575
OCPBUGS-20474: Set ImportPolicy to PreserveOriginal to honor –keep-manifest-list when mirroring a payload to an image stream #1572
OCPBUGS-20342: Reflect container’s exit code for long running tasks not attached to terminal #1571
OCPBUGS-20063: regeneratemco: explicitly check for PlatformStatus field #1555
OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror #1556
OCPBUGS-20181: Use quay redis image instead docker mysql #1559
OCPBUGS-7465: Introduce refreshable dynamic credential store for image manifests #1540
Updating excluded list of unsupported oc adm commands in MicroShift #1558
WINC-692: Add Windows node functionality to debug command #1524
WRKLDS-537: oc adm release info: Add –first-parent to git log for simplification #1552
WRKLDS-806: Bump kube dependencies to 1.28.2 #1547
OCPBUGS-19282: Updating ose-tools images to be consistent with ART #1545
OCPBUGS-19281: Updating openshift-enterprise-deployer images to be consistent with ART #1544
OCPBUGS-19517: remove unsupported commands from microshift docs #1548
OCPBUGS-19283: Updating ose-cli-artifacts images to be consistent with ART #1546
OCPBUGS-19129: Updating openshift-enterprise-cli images to be consistent with ART #1542
Full changelog

cloud-credential-operator

OCPBUGS-32948: Update documentation to restart pods when enabling workload identity #701
OCPBUGS-32026: Docs: Fix migration to azure workload identy to apply the webhook config #695
OCPBUGS-31290: Dockerfile should keep prior rhel8 behavior for ccoctl default #694
OCPBUGS-31290: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 #693
OCPBUGS-31290: Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 #692
OCPBUGS-31678: aws: remove non-existent permission #690
AUTH-482: set required-scc for openshift workloads #681
OCPBUGS-30713: update go-jose module to v4.0.1 #687
OCPBUGS-30478: Update to cloud.google.com/go/storage v1.39.1 #688
OCPBUGS-25193: Scope networkResourceGroup permissions to more operators #682
OCPBUGS-28787: gcp actuator update check to consider custom roles #685
CCO-525: Azure workload identity doc updates #680
NO-JIRA:docu change: fix find command #677
NO-JIRA: Fix update-codegen.sh #669
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #672
OCPBUGS-28388: Fix the ClusterOperator watch of the status controller #665
OCPBUGS-27214: ccoctl - use proxy when validating CloudFront URL #654
OCPBUGS-28535: stop LoadInfrastructureRegion from panicking when being called on a non-AWS cluster #667
NO-JIRA: Fix user-facing typos #668
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #663
NO-JIRA: Keep metrics.md up-to-date #664
OCPBUGS-27446: Report manualpodidentity mode in metrics when using Azure Workload Identity #657
OCPBUGS-27445: Use cached clients to avoid client side throttling #656
NO-JIRA: azwi doc: apply webhook manifest to cluster #652
CCO-454: Bump go.mod k8s deps to 0.29.1 #655
OCPBUGS-16181: Write manifests when AWS IAM roles already exist. #514
CCO-519: Resolve all outstanding snyk vulnerabilities #648
OCPBUGS-26488: Use live client for metrics #645
OCPBUGS-25533: Updating ose-cloud-credential-operator-container image to be consistent with ART #642
NO-JIRA: Update docs/sts.md #634
OCPBUGS-24807: Updating ose-cloud-credential-operator-container image to be consistent with ART #639
NO-JIRA: Fixed typos #633
OCPVE-647: annotate manifests with capability name #594
CCO-338: cmd/operator: use correct kubeconfig for all clients #638
CCO-244: gcp-ro-credentialrequest to use granular permissions #626
OCPBUGS-23178: Enable GCP sync to undelete custom roles #637
OCPBUGS-13597: Discover AWS dns suffix from partition and region. #596
CCO-372: Azure Workload Identity info in CredsRequests creates a Secret #587
OCPBUGS-20478: Explicitly set the vsphere secret credential data on sync. #628
CCO-440: Bump k8s deps to 0.28.3 #614
CCO-192: Use Leases for leader election #627
CCO-430: Use per-project custom roles instead of per-cluster custom roles #611
snyk: exclude vendor/ #613
OCPBUGS-22369: explicitly set azure oidc bucket to allow public blob access #610
Upgrade golang/x/net for CVE-2023-39325 #609
OCPBUGS-21745: azure create-managed-identites to add cloud controller manager to network resource group #607
Removing andrew from OWNERS #606
Revert #592 “CCO-421: *: split pod identity webhooks from core controller” #604
CCO-421: *: split pod identity webhooks from core controller #592
Docs: azure workload identity no longer requires TechPreviewNoUpgrade #603
CCO-437: Document steps for in-place migration to Azure AD Workload Identity. #598
OCPBUGS-19123: Updating ose-cloud-credential-operator images to be consistent with ART #600
OCPBUGS-18246: Add networkResourceGroupName parameter for Azure #597
Full changelog

cloud-network-config-controller

OCPBUGS-33617: Avoid panic when looking up attachedOutboundRule.ID in azure #144
NO-JIRA: Update dependency google.golang.org/api #143
OCPBUGS-33154: Incorrect use of go wait groups #140
OCPBUGS-29915: GCP: Explicitly set UniverseDomain to the default universe domain #136
OCPBUGS-27422: Avoid nil pointer panic while assigning private IP on Azure #133
OCPBUGS-30146: Serialize scheme construction to prevent panic #134
OCPBUGS-31289: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.16 #135
OCPBUGS-29915: GCP: Explicitly set UniverseDomain to the default universe domain #132
SDN-4405: 1.29_rebase: #131
OCPBUGS-28282: Add Snyk file to exclude vendor dependent libraries on scan #130
OCPBUGS-24823: Updating ose-cloud-network-config-controller-container image to be consistent with ART #129
Kube 1.28 rebase for cloud-network-config-controller #124
Bump CI image #123
OCPBUGS-5491: Azure: skip backend pool if attached to an outbound rule #121
OCPBUGS-19163: Updating ose-cloud-network-config-controller images to be consistent with ART #122
Full changelog

cluster-authentication-operator

NO-JIRA: remove go-jose not to get flagged with its CVEs #668
AUTH-482: set required-scc for openshift workloads #656
OCPBUGS-24195: the apiservice controller waits until bootstrap complete #662
OCPBUGS-22969: Use v1 for flowcontrol API #640
NO-JIRA: e2e Keycloak: retry logging in as admin #666
OCPBUGS-32089: wellknown-readiness: perform several attempts to connect before going unavailable #664
NO-ISSUE: bump to the latest version of openshift/api #663
NO-ISSUE: bump dependencies #659
NO-JIRA: test/lib: create SA on deploy #660
NO-ISSUE: oauth-apiserver: disable priority and fairness #658
NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after #657
NO-JIRA: _output - remove dir #651
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #632
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #646
OCPBUGS-24883: Updating ose-cluster-authentication-operator-container image to be consistent with ART #644
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #636
OCPBUGS-24217: Annotate certs with ownership information #642
OCPBUGS-21719: go.mod: bump golang.org/x/net to v0.17.0 #635
OCPBUGS-17987: generate only >=0 number of random bits #629
OCPBUGS-19125: Updating ose-cluster-authentication-operator images to be consistent with ART #634
Full changelog

cluster-autoscaler

OCPBUGS-33932: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #303
NO-JIRA: UPSTREAM: 6796: Avoid expesive pointer copy in capi nodegroup #298
OCPBUGS-31421: add check for taint.value == nil #292
OCPBUGS-28334: update snyk file #287
PODAUTO-99: Fix VPA e2e test failures #286
OCPCLOUD-2431: rebase on upstream 1.29.0 release #285
PODAUTO-104: Add downstream pod autoscaling team member jkyros to VPA OWNERS #283
OCPBUGS-27509: Fix unstructured taint parsing in Cluster API provider #281
OCPBUGS-26504: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 #279
OCPBUGS-25855: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 #277
OCPBUGS-25625: Add Snyk file to exclude vendor directory on scan #276
OCPBUGS-24783: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART #271
OCPBUGS-25579: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #274
PODAUTO-91: Add joelsmith to OWNERS for approving of VPA-only PRs #273
OCPBUGS-24974: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #272
OCPBUGS-24146: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #269
OCPCLOUD-2195: rebase on upstream 1.28.0 release #265
Update OWNERS #264
OCPBUGS-18137: UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg #261
OCPBUGS-19232: Updating vertical-pod-autoscaler images to be consistent with ART #262
OCPBUGS-18852: Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #260
Full changelog

cluster-autoscaler-operator

AUTH-482: set required-scc for openshift workloads #315
OCPBUGS-20565: Set webhook minimum TLS version to 1.3 #320
OCPCLOUD-2493: Add empty string as value for GpuType if GpuCount is empty 0 #317
OCPBUGS-31960: Bump x/net to v.0.24.0 #318
OCPCLOUD-2493: Update CAO to add upstream annotations #316
OCPCLOUD-2523: add ExpanderOrderList api option #304
OCPBUGS-29863: Apply hypershift cluster-profile for ibm-cloud-managed #314
OCPBUGS-28207: update min/max memory limit documentation #313
MIXEDARCH-429: Revert “OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch” #311
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #312
MIXEDARCH-429: Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297
OCPCLOUD-2432: Bump k8s packages to v1.29 #310
OCPBUGS-25559: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #305
OCPBUGS-25633: Add Snyk file to exclude vendor directory on scan #306
OCPBUGS-24911: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #303
OCPBUGS-24102: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #302
OCPCLOUD-2137: Check scale from zero annotations on MachineSets #294
OCPBUGS-21791: Bump x/net package to v0.17.0 #295
Update OWNERS #296
OCPCLOUD-2196: Update dependencies k8s 1.28 #293
OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch #284
OCPBUGS-18954: Ensure status reporter caches exit if they don’t sync #285
OCPBUGS-19411: cluster-autoscaler-operator: clusterrole add clusteroperators watch #287
OCPBUGS-19169: Updating ose-cluster-autoscaler-operator images to be consistent with ART #286
Full changelog

cluster-baremetal-operator

OCPBUGS-34041: Run metal3 containers as specific users and groups #418
OCPBUGS-33493: Enable leader election for baremetal-operator #416
OCPBUGS-27145: Drop unneccessary capabilities #401
OCPBUGS-33254: Wait for bootstrapping to finish before starting #415
OCPBUGS-28230: enforce termination message policy on all platform pods #413
METAL-979: Add RBAC for newer CRDs hostfirmwarecomponents and dataimages #412
METAL-904: Move parts of ICC config to a new secret #406
OCPBUGS-31341: Refactor Pull Secret application #409
OCPBUGS-27760: Update the leader election durations to be tolerant #403
OCPBUGS-24579: pass all IPs to image-customization-controller #400
OCPBUGS-27145: Reduce container privileges #396
OCPBUGS-28230: add terminationmessagepolicy to show last of error log in API #399
METAL-856: set USE_IRONIC_INSPECTOR explicitly #398
OCPBUGS-25766: manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election #395
OCPBUGS-25572: Updating ose-cluster-baremetal-operator-container image to be consistent with ART #394
OCPBUGS-24946: Updating ose-cluster-baremetal-operator-container image to be consistent with ART #393
OCPBUGS-20572: Obsolete protocols for webhook #375
OCPBUGS-24125: Updating ose-cluster-baremetal-operator-container image to be consistent with ART #392
NO-ISSUE: Fix ordering problem in the unit tests #390
OCPBUGS-23131, OCPBUGS-23149: fix IRONIC_EXTERNAL_URL_V6 #380
MGMT-16047: update dependencies #383
NO-ISSUE: Stop linting when building the image #343
OCPBUGS-20563: Add tls-cipher-suites to baremetal-kube-rbac-proxy #374
OCPBUGS-17003: Trigger reconcile on service-ca CO #365
OCPBUGS-21741: Uplift x/net to v0.17.0 #368
Jira OCPBUGS-16919: Trigger reconcile if Secret openshift-config/pull-secret changes #352
OCPBUGS-18788: Remove metrics port from baremetal-operator #361
OCPBUGS-19203: Updating ose-cluster-baremetal-operator images to be consistent with ART #362
OCPBUGS-17589: Guard against nil PlatformStatus #359
Full changelog

cluster-bootstrap

OCPBUGS-24975: Updating ose-cluster-bootstrap-container image to be consistent with ART #103
OCPBUGS-24975: Updating ose-cluster-bootstrap-container image to be consistent with ART #102
OCPBUGS-19235: Updating ose-cluster-bootstrap images to be consistent with ART #100
Full changelog

cluster-capi-controllers

OCPBUGS-33170: All containers must fallback to logs on error #207
OCPBUGS-30480: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master #203
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master #199
OCPBUGS-30586: fix e2e tests on release branches #200
OCPCLOUD-2517: openshift: promote core CAPI IPAM CRDs to GA #197
OCPBUGS-29519: openshift: add CustomNoUpgrade annotation value to feature-set #196
OCPBUGS-29476: openshift: generate separate manifest for core CAPI CRDs #195
OCPBUGS-26111: add snyk file #194
OCPCLOUD-2449: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master #192
NO-JIRA: e2e: add openstack testing script #193
OCPBUGS-25586: Updating ose-cluster-api-container image to be consistent with ART #191
OCPBUGS-25000: Updating ose-cluster-api-container image to be consistent with ART #190
OCPCLOUD-2255: Update manifests-gen tool #189
OCPCLOUD-2257: Use manifests generation tool from provider repo #179
Update OWNERS #183
OCPBUGS-21645: Bump golang.org/x/net to v0.17.0 #182
OCPBUGS-17286, OCPCLOUD-2222: Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master #181
OCPBUGS-19109: Updating ose-cluster-api images to be consistent with ART #180
Full changelog

cluster-capi-operator

OCPBUGS-33170: All containers must fallback to logs on error #172
OCPBUGS-28230: enforce termination message policy on all platform pods #171
OCPCLOUD-1609, OCPCLOUD-1610: Add Support for VSphere #149
NO-JIRA: CAPA: use v1beta2 #151
NO-JIRA: Fix manifests-gen tool + testing #168
OCPBUGS-29832, OCPCLOUD-2451: Bump CAPI 1.6 and k8s 1.28 #164
OCPBUGS-29676: create openshift-cluster-api namespace in CustomNoUpgrade #163
OCPCLOUD-2517: manifests-gen: promote Core CAPI IPAM CRDs to GA #162
OCPBUGS-29519: manifests-gen: also add CustomNoUpgrade annotation value #161
OCPBUGS-29476: manifests-gen: store core capi crds also in their own manifest #159
OCPBUGS-28539: Start operator controllers only on supported platforms, add unsupported controller #157
OCPBUGS-26121: Add Snyk file to exclude vendor directory on scan #156
OCPCLOUD-1726: GCP Credential Req. manifest for CAPI to use new API field #87
NO-JIRA: e2e: add openstack testing script #154
OCPBUGS-25778: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.16 #153
OCPBUGS-24979: Updating ose-cluster-capi-operator-container image to be consistent with ART #150
OCPVE-787: annotate credentials request manifests #143
OCPBUGS-24301: openstack: Don’t substitute manager container command #148
OCPCLOUD-2255, OCPCLOUD-2256: refactor: remove cluster-api-operator, rework assets/manifests #121
OCPCLOUD-2012: Add granular permissions for Azure #124
OCPBUGS-19842: Limit deletion webhook to openshift namespace #135
OCPBUGS-23467: manifests/0000_30_cluster-api_10_webhooks: Deletion manifest for validating-webhook-configuration #145
OCPBUGS-19841: Add format key into the worker-user-data secret #140
OCPCLOUD-2218: Bump CAPG to v1.5.0 #142
OCPBUGS-22403: Disable CAPI Azure Infrastructure Provider #141
Update OWNERS #133
OCPBUGS-17287, OCPBUGS-21642, OCPCLOUD-2214: Bump capi/capi providers/k8s 1.27 #132
OCPBUGS-19240: Updating ose-cluster-capi-operator images to be consistent with ART #129
MULTIARCH-3761: Power VS CAPI Remove deprecated flag #128
OCPBUGS-18504: e2e: set ControlPlaneEndpoint in AWSCluster #126
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-34826: Nutanix CCM pods Cipher Suites vulnerability issue #350
NO-JIRA: Ensure termination message policy in tests #344
OCPBUGS-33405: update azure and ash tolerations on node manager #342
OCPBUGS-13680: Pass –cluster-name to OpenStack CCM #337
OCPCLOUD-2515: remove CloudControllerOwner condition logic #335
Bug OCPBUGS-29605: Allow to patch events in OpenStack RBAC #336
OCPVE-660: add CloudController capability annotation #284
OCPCLOUD-2514: Remove reliance on feature gates for whether to deploy CCMs #334
OCPBUGS-29012: Increase Azure Concurrent Service Syncs to 10 #328
OCPBUGS-29220: Set AZURE_FEDERATED_TOKEN_FILE on CCM container #332
OCPBUGS-29012: Add EndpointSlices permissions for Azure #331
OCPBUGS-13106: Increase GCP Concurrent Service Syncs to 10 #329
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #330
NO-JIRA:Use expressive Gomega matchers with Eventually #327
OCPBUGS-24486: Enforce the use of shared health checks #326
OCPCLOUD-2424: Bump k8s packages to v1.29 #325
OCPBUGS-25887: IBMCloud: Patch CCM for 4.16 #323
OCPBUGS-26494: PowerVS: handle 4.16 changes #322
OCPBUGS-25483: Adds CloudConfigTransformer for Azure #316
OCPBUGS-24948: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART #308
OCPBUGS-25750: Add Snyk file to exclude vendor directory on scan #313
OCPBUGS-5825: Adds GCP ClusterRole and ClusterRoleBinding #310
OCPCLOUD-1724: GCP Credentials req. manifest of CCMO to use new API field #205
trt-1382: reorder flag initialization #309
trt-1382: test add space #307
OCPVE-788: annotate credentials request manifests #293
Undo TRT-1378: Revert for “OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS” #306
TRT-1378: Revert #304 “Undo TRT-1374: Revert for \“OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS\”” #305
Undo TRT-1374: Revert for “OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS” #304
OCPBUGS-24127: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART #302
TRT-1374: Revert #301 “OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS” #303
OCPCLOUD-2278: Add kube-rbac-proxy container & ensure metrics are only available via HTTPS #301
OCPBUGS-23996: trust bundle CA controller: add owner annotation for ccm-trusted-ca configmap #300
OCPBUGS-23308: Set IPFamilyPriority and ExcludeNetworkSubnetCIDR for vSphere IPv6-only #299
OSASINFRA-3289: OpenStack: Remove Kuryr bits #294
OSASINFRA-3284: Add Events to OpenStack’s RBAC #292
OCPBUGS-20213: Add azure cloud config transformer #291
Update OWNERS #290
OCPBUGS-17652: apply necessary RBAC for the alibaba cloud controller manager #276
OCPBUGS-18841: Additional permissions for internal load balancer on STS #287
OCPCLOUD-2188: Bump k8s packages to v1.28 #285
update readme to stable status #286
OCPBUGS-19205: Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART #278
OCPBUGS-18641: Set dual-stack IPFamilyPriority for vSphere #279
OCPBUGS-18841: Ensure subnets read permission for granular roles #281
OCPBUGS-14718: Add message for CABundleControllerDegradedCondition error #275
Full changelog

cluster-config-operator

SPLAT-1630: Bump API version to get new VSphereMultiVCenters featuregate. #418
AUTH-482: set required-scc for openshift workloads #410
OCPBUGS-24871: Updating ose-cluster-config-operator-container image to be consistent with ART #390
TRT-1581: default to self-managed clusterprofile #414
NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable #412
OCPBUGS-29576: Apply hypershift cluster-profile for ibm-cloud-managed #408
NO-JIRA: add check to ensure clusterprofile matches for featuregates #411
OCPBUGS-28621: Fix PSa labels #406
STOR-1700: Bump(openshift/api): to get new VolumeGroupSnapshot API #405
OCPBUGS-28621: Add required PSa labels #401
SPLAT-1400: promote vSphere control plane machinesets from tech preview #400
OCPBUGS-26541: remove duplicate manifests in image #399
Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541: remove duplicate manifests in image #392
OCPNODE-1671: Update api,client-go to add imagepolicy api #376
Revert “OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART” #388
OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART #385
read featuregates from openshift/api #349
yield CRDs and empty resource rendering to api imge #379
CNF-10479: Bump up api to pull mixed cpu allocation feature gate #386
NP-793: Bump github.com/openshift/api #375
create manifest directory during rendering #382
SPLAT-1272: Update for Nutanix failure domains api changes #378
create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480: Add MetricsServer FeatureGate #377
NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813: add MCN featuregate #368
SPLAT-1127: bring in vSphere CPMSO API updates #342
OCPBUGS-21781: Update openshift/api package to latest version #365
OCPBUGS-21744: bump library-go to include switch to HTTP/1.1 #366
CFE-887: Bump openshift/api to add DNSNameResolver. #364
Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. #358
OCPBUGS-20164: Remove Build CRD #360
Remove AdmissionWebhookMatchConditions feature gate #359
OCPVE-708: feat: bump(api) #357
OCPCLOUD-1989: Promote GCP CCM from TPNU to default #319
OCPBUGS-19106: Updating ose-cluster-config-operator images to be consistent with ART #353
CCO-412: Bump API to promote azureWorkloadIdentity to defaultFeatures #351
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-34970: Add unreadyNodeGracePeriod for allowing brief node hiccups #298
OCPBUGS-35227: Improved debugging of API listing errors #300
OCPBUGS-32947: Modified webhook to reject changes to vsphere fields coming from failure domains. #291
AUTH-482: set required-scc for openshift workloads #282
Drop CRDs for CPMS #292
OCPBUGS-31808: Fix ExportFailureDomain to handle empty platform spec #287
OCPBUGS-32295: Modified webhook to allow templates by name instead of just by path. #288
SPLAT-1440: prevent rollout due to irrelevant path artifacts #275
OCPBUGS-26127: add snyk configuration file #277
SPLAT-1410: Fix vSphere machineprovider InjectFailureDomain to handle empty network device list. #281
SPLAT-1410: Modified vSphere config provider to not lose AddressesFromPools when applying Failure Domains #273
OCPBUGS-29249: Never delete a Machine when there’s a single Machine in an index #278
OCPBUGS-29114: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #276
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #274
SPLAT-1391: promote vSphere from tech preview #272
OCPCLOUD-2415: Update K8s deps to 1.29 #271
OCPBUGS-25577: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART #270
OCPCLOUD-1894: Implement admission warning for missing target pools #269
OCPBUGS-24967: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART #268
OCPBUGS-24140: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART #266
SPLAT-1280: update documentation for vSphere #267
SPLAT-1272: Add support for Nutanix failure domains #258
SPLAT-1129: adding failure domain awareness for vSphere #228
OCPCLOUD-2297: webhook/openstack: validate etcd block device size #264
Revert #239 “OCPCLOUD-2167: Test unhealthy node cases” #262
OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices #255
OCPCLOUD-2167: Test unhealthy node cases #239
OCPBUGS-17851: Reimplement “OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD” #234
SPLAT-1211: recognize topology and failure domains represented by the infrastructure resource #250
Update OWNERS #253
OCPBUGS-21863: webhooks: set min version TLS 1.2 #252
OCPBUGS-21641: Bump golang.org/x/net to v0.17.0 #251
OCPBUGS-17288, OCPCLOUD-2179: Update dependencies to k8s 1.28 #248
OCPBUGS-20070: e2e: gcp e2-custom increase memory #246
OCPBUGS-20070: fix: e2e: add gcp custom type to test framework #244
OCPCLOUD-2169: Check CPMS events are not present when we expect error #243
OCPCLOUD-2169: Add events for machine creation/deletion #242
OCPBUGS-19226: Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART #241
Full changelog

cluster-csi-snapshot-controller-operator

AUTH-482: set required-scc for openshift workloads #196
STOR-1817: Avoid deleting VolumeGroupSnapshot resources #200
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #193
STOR-1573: Update manifests to v7.0.0 #201
OCPBUGS-31497: create suitable role and roleBinding for csi-snapshot-webhook #202
STOR-1805: Set SecurityContext for HyperShift #197
OCPBUGS-30483: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #198
OCPBUGS-29577: Apply hypershift cluster-profile for ibm-cloud-managed #194
STOR-1700: Fix: typo of volumegroupsnapshots #195
STOR-1700: Pass VolumeGroupSnapshot argument if feature is enabled #191
STOR-1574: Bump all deps #192
STOR-1574: Bump library-go #190
STOR-1714: Release leadership on SIGTERM #187
HOSTEDCP-1308: Revert “HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook” #188
HOSTEDCP-1308: add KAS access label to csi-snapshot-controller and csi-snapshot-webhook #182
OCPBUGS-25558: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #183
STOR-1688: Chore: add .snyk file to ignore false positives #181
OCPBUGS-25149: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #179
OCPBUGS-23838: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #177
OCPBUGS-24908: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #178
OCPBUGS-24099: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART #176
STOR-1402: Chore: update libraries in all operators [4.15] #175
OCPBUGS-22569: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #173
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #172
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #166
STOR-1443: Restart webhook Pods if csi-snapshot-webhook-secret changed #157
OCPBUGS-19162: Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART #160
OCPBUGS-3680: Move readonlyRootFilesystem to the right place #159
Full changelog

cluster-dns-operator

CFE-964: Add DNSNameResolver controller #394
OCPBUGS-32941: Bump to Kubernetes 1.29 and controller-runtime 0.17.3 #408
OCPBUGS-27924: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 #402
CFE-852: Enable ocp_dnsnameresolver CoreDNS plugin #393
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #403
OCPBUGS-24884: Updating ose-cluster-dns-operator-container image to be consistent with ART #397
OCPBUGS-24602: Enable topology-aware hints iff nodes in >=2 zones #398
OCPBUGS-23741: Bump to k8s.io v0.28.3, controller-runtime v0.16.3 #395
OCPBUGS-20024: Ignore max unavailable for status #386
OCPBUGS-22018: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #387
OCPBUGS-20024: Revert “Revert “Set DNS DaemonSet’s maxSurge value to 10%”” #384
OCPBUGS-19510: test/e2e: Set controller-runtime logger #381
OCPBUGS-19126: Updating ose-cluster-dns-operator images to be consistent with ART #380
Full changelog

cluster-etcd-operator

ETCD-621: Update api vendor libraries to get GA’ed tuning profiles #1265
OCPBUGS-33495: return errors in wait-for-ceo #1260
OCPBUGS-31849: check the quorum in case the cluster is healthy or not after generating certs #1239
NO-JIRA: remove cluster-backup pod #1182
OCPBUGS-31956: update golang x net #1252
OCPBUGS-31249: remove etcd-health-probe log #1230
ETCD-583: add signer expiration metric and alert #1249
API-1800: manifests: convert SecretTypeTLS secrets to kubernetes.io/tls #1247
NO-ISSUE: use IsBootstrapComplete from library-go #1244
OCPBUGS-32217: avoid race conditions during render cert creation #1246
OCPBUGS-32176: immediately return on dynamic certs errors #1245
Revert “ETCD-579: store revision at which signers are rotated” #1243
ETCD-579: store revision at which signers are rotated #1235
ETCD-580: Decrease validity period to prevent cert expiry for offline clusters #1238
OCPBUGS-31658: Fix feature set custom no upgrade #1233
NO-JIRA: fail certsignercontroller sync when secret can not be applied #1226
ETCD-535: Manual CA rotation should rotate all leaf certs #1200
Revert “OCPBUGS-30169: add timeout to etcd client.New config” #1222
OCPBUGS-30873: CEO aliveness check should only detect deadlocks #1223
WRKLDS-1071: bump(library-go)=master #1219
ETCD-518: garbage collect unused dynamic certs #1209
OCPBUGS-30169: add timeout to etcd client.New config #1215
NO-JIRA: replace nodelister with master nodelister #1205
ETCD-517: run certsignercontroller for bootstrap render #1186
ETCD-516: CEO needs to react on changing CA cert bundle and client certs #1202
NO-JIRA: increase client pool size #1203
OCPBUGS-29417: Sno fix bootstrap race #1201
OCPBUGS-27926: Updating cluster-etcd-operator-container image to be c… #1189
Revert “Revert “OCPBUGS-22969: Use v1 for flowcontrol API”” #1199
ETCD-512: refactoring the cert signer controller #1194
AUTH-481: Add PSa labels to openshift-etcd-operator namespace #1198
Revert “OCPBUGS-22969: Use v1 for flowcontrol API” #1197
TRT-1485: Revert #1177 “ETCD-512: refactoring the cert signer controller” #1193
ETCD-512: refactoring the cert signer controller #1177
OCPBUGS-27959: fix panic in health check timeouts #1190
OCPBUGS-22969: Use v1 for flowcontrol API #1149
OCPBUGS-21846: update library-go to latest commit #1180
OCPBUGS-24889: Updating cluster-etcd-operator-container image to be consistent with ART #1175
NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy #1171
add ownership for etcd-ca-bundle that I don’t think is updated #1159
MON-3287: manage RBAC resources for prometheus to scrape openshift-etcd #1164
Revert “OCPBUGS-17199: remove revision stability check from bootstrap complet…” #1167
OCPBUGS-23461: Add annotation in the etcd-guard static pod for worklo… #1161
OCPBUGS-21922: fixing CVE-2023-39325 by updating dependencies #1141
OCPBUGS-17199: remove revision stability check from bootstrap complet… #1087
ETCD-478: Use golang etcd client for auto backups #1099
OCPBUGS-19987: relax readiness to local serializable requests #1134
OCPBUGS-19052: prioritize podman pull in etcdctl dl #1132
OCPBUGS-18984: remove UpgradeBackupController #1129
ETCD-187: add dashboards CPU iotwait on master nodes #1119
OCPBUGS-19528: introduce backup removal controller #1126
OCPBUGS-19137: Updating cluster-etcd-operator images to be consistent with ART #1115
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #1123
OCPBUGS-19052: Avoid caching etcdctl on cluster-backup.sh #1113
indicate ownership of etcd certificates #1110
OCPBUGS-18990: restore the correct static pod list #1111
OCPBUGS-18357: prepend authfile to podman create #1105
Full changelog

cluster-image-registry-operator

OCPBUGS-34779: add SAR capability to image-registry #1054
OCPBUGS-34165: azure-path-fix: get client secret from k8s secret #1041
OCPBUGS-34166: pkg/storage/s3: use force path style in favour of virtual hosted style config #1042
OCPBUGS-34069: Bump openshift api, client-go & library-go #1039
OCPBUGS-33172: azurepathfix: check if platform status is nil before accessing it #1030
OCPBUGS-32491: Power VS: Add support for Power VS endpoint overrides #1024
OCPBUGS-29559: Apply hypershift cluster-profile for ibm-cloud-managed #999
OCPBUGS-32328: azure-path-fix: support auth via account key (without clientID) #1021
OCPBUGS-30484: bump indirect google protobuf dependency #1015
NO-JIRA: remove bparees from owners #1019
OCPBUGS-29233: bump aws-sdk-go from v1.44 to v1.50 #1012
AUTH-482: set required-scc for openshift workloads #1008
NO-JIRA: bump golangci-lint to v1.56.2 #1013
OCPBUGS-29932: cmd/move-blobs: log and exit 1 on error instead of panic #1006
OCPBUGS-29637: azurepathfix: fix stack hub, government and workload identity setup #1003
OCPBUGS-29003: move azure storage blobs from docker back into /docker #998
NO-JIRA: Add hack/local-dev.sh #996
OCPBUGS-28225: pkg/storage/s3: enable bucket key on encryption settings #993
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #992
NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 #989
OCPBUGS-26767: MULTIARCH-4074: PowerVS: update supported regions #987
IR-409: build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 #974
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #979
IR-410: build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 #980
OCPBUGS-11624: manifests/02-rbac.yaml: stop using wild cards #964
OCPBUGS-24649: add private endpoint permissions to Azure credentials request #971
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #975
IR-412: IBMCloud: Add support for endpoint overrides #955
CCO-248: Revert “Merge pull request #965 from jstuever/TRT-1368” #967
OCPVE-790: annotate credentials request manifests #959
OCPBUGS-24161: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #966
TRT-1368: Revert “Merge pull request #935 from flavianmissi/CCO-248” #965
IR-366, IR-367, IR-411: allow users to configure private storage accounts in Azure #930
IR-408: request individual permissions for gcs #935
OCPBUGS-2889: accept user/pass OR application credentials on Swift UPI secret #924
IR-406, OCPBUGS-21853: bump k8s and openshift packages #936
OCPBUGS-21853: disable http2 for metrics endpoint #938
OCPBUGS-18969: move pruner role creation from openshift-apiserver #925
OCPBUGS-19262: Updating ose-cluster-image-registry-operator images to be consistent with ART #918
OCPBUGS-18469: increase storage account key cache expiration #912
OCPBUGS-17060: use Recreate on operator deployment #908
OCPBUGS-18103: check if response is nil before using it #909
Full changelog

cluster-ingress-operator

OCPBUGS-34835: internalServiceChanged: Fix target port logic #1072
OCPBUGS-34837: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1074
OCPBUGS-32887: Allow operator to update Route spec.subdomain #1047
OCPBUGS-32942: Bump controller-runtime to v0.17.3 #1050
OCPBUGS-28673: implement connect timeout tuning option #1035
NE-1317: manifests - add ingress capability annotation #950
OCPBUGS-32371: Bump openshift/api, and update CRD generation #1045
OCPBUGS-25193: Add vnet subnet read and join permission for azure #1029
OCPBUGS-30834: Update to go 1.21 #1040
OCPBUGS-31722: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037
OCPBUGS-3522: Include recent errors in canary checks fail #865
OCPBUGS-30091: TestHostNetworkPortBinding: Delete t.Parallel() #1032
CFE-987: Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017
CORS-2317: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016
OCPBUGS-28596: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1019
NE-1490: update to go v1.20 #1012
OCPBUGS-15253: Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980
CCO-249: Replace GCP role with explicit permissions #844
OCPBUGS-25006: Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006
OCPBUGS-24531: Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011
OCPBUGS-24531: Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008
OCPBUGS-24531: Skip CI for scope change until OCPBUGS-24044 is resolved #1007
OCPVE-780: annotate credentials request manifests #995
OCPBUGS-23742: Bump controller-runtime to v0.16.3 #1001
NE-1402: Add service endpoint override capability to IBM DNS provider #990
OCPBUGS-16762: Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982
OCPBUGS-14994: Don’t add clientca-configmap finalizer if deleting #948
OCPBUGS-22020: Bump golang.org/x/net for CVE-2023-44487 #985
OCPBUGS-21803: test/e2e: Add test case for 2000000 maxConnections #983
OCPBUGS-20192: Require non-readonly filesystem in router container #981
OCPBUGS-16762: Bump openshift/api for container.maxLength fix #979
OCPBUGS-3541: Don’t create route metrics for ingress controllers that are not admitted #869
OCPBUGS-18248: Prevent GatewayClass from getting recreated #975
OCPBUGS-19268: Updating ose-cluster-ingress-operator images to be consistent with ART #977
OCPBUGS-15900: TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973
OCPBUGS-3356: E2E test for cookie length truncation #871
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-25104: revert dev cert rotation 4.16 #1695
OCPBUGS-34408: Create one-shot migrations for the flowcontrol group. #1690
OCPBUGS-33522: add a controller that reconciles SCCs’ volumes #1675
NO-ISSUE: Revert “add SNO control plane high cpu usage alert” #1674
OCPBUGS-33184: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1671
OCPEDGE-902: add SNO control plane high cpu usage alert #1660
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #1664
OCPBUGS-22969: Use v1 for flowcontrol API #1577
OCPBUGS-31384: use RotatedSigningCASecret controller in update only mode #1659
NO-ISSUE: Revert “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates #1661
NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry #1652
OCPBUGS-30119: certrotation: Bump library-go to latest master #1651
OCPCLOUD-2514: External CCM should no longer rely on feature gate access #1649
OCPBUGS-25894: operator: stop removing kube-apiserver-slos asset #1642
NO-JIRA: extend node-system-admin-client validity to 2 years #1618
OBSDA-553: add provider name to cluster_infrastructure_provider when external platform #1638
AUTH-481: Add PSa labels to openshift-kube-apiserver-operator namespace #1637
OCPBUGS-27842: Add sno section to alert description #1633
NO-JIRA: Add Vu and Vadim to OWNERS #1634
OCPBUGS-24005: when skipping a webhook check because of missing CA log the name of the webhook #1632
NO-JIRA: Add ownership for the admin kubeconfig #1584
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #1546
NO-ISSUE: prevent update status conflicts #1621
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #1619
OCPBUGS-14496: manifests: fix the scope of the TechPreviewNoUpgrade alert #1512
OCPBUGS-24907: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART #1606
OCPNODE-1892: Rebase 1.29.0 #1608
OCPBUGS-24005: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1587
TRT-1420: revert #1586 #1596 #1607
OCPNODE-1890: Bump k8s api to v0.29.0 #1586
OCPNODE-1892: Set flag to skip setting cloud-provider=external #1596
OCPBUGS-24701: ignore vendor folder in SAST scan #1599
AUTH-442: psa cluster fleet evaluation #1588
OCPBUGS-24213: Annotate managed certs #1568
OCPBUGS-23796: use AlwaysAllow UnhealthyPodEvictionPolicy option #1579
OCPBUGS-21836: use external load balancer url for jwks-uri #1578
manifests: set owning component for TLS artifacts #1583
OCPBUGS-19160: Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1550
OCPBUGS-20331: manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules #1566
OCPBUGS-20331: manifests: rename API performance dashboard #1565
OCPBUGS-21729: bump library-go to include switch to HTTP/1.1 #1567
Update required GV for ValidatingAdmissionPolicy gate. #1561
Update “deprecated API in use” alert expressions for 1.28. #1562
bump(openshift/client-go,library-go) #1560
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #1557
OCPBUGS-19024: remove featuregate upgradeable controller that moved to cluster-config-operator #1547
OCPBUGS-18247: manifests: don’t include recording rules when Console capability is not enabled #1542
OCPBUGS-15504: manifest: remove kube-apiserver PrometheusRule #1543
Bump openshift/* libs #1549
Update to Kubernetes 1.28.2 #1548
STOR-1425: Update to Kubernetes 1.28.1 #1534
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-28592: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.16 #37
OCPBUGS-26140: Fix formatting in snyk vendor exclusions #36
OCPBUGS-25634: Add Snyk file to exclude vendor directory on scan #33
OCPBUGS-24887: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART #32
Update OWNERS #26
OCPBUGS-17289, OCPBUGS-21650, OCPCLOUD-2215: Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main #25
OCPBUGS-19135: Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART #24
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-33933: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #808
API-1800: bindata: convert SecretTypeTLS secrets #804
WRKLDS-1169: tolerate node-role.kubernetes.io/control-plane:NoExecute #802
OCPBUGS-31384: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #800
WRKLDS-1071: revision_controller: do not create a new revision when a required object is missing #796
OCPCLOUD-2515: remove CloudControllerOwner condition #795
OCPBUGS-30488: bump(google.golang.org/protobuf)=v1.33.0 #798
OCPCLOUD-2514: Remove reliance on Cloud Provider feature gates for determining if CCM should be deployed. #794
OCPBUGS-29565: Apply hypershift cluster-profile for ibm-cloud-managed #793
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #786
OCPBUGS-26117: Add .snyk file to exclude vendor and ignore unit tests #784
OCPBUGS-25587: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #780
NO-JIRA: Make render unit pass consistently #782
TRT-1420: Bump openshift/library-go to pick up revision_controller revert #781
OCPNODE-1890: Bump k8s api to v0.29.0 #770
OCPBUGS-5825: Removes legacy cloud-provider resources #778
OCPBUGS-25001: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #777
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #757
OCPBUGS-25001: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #775
OCPBUGS-24162: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #772
OCPBUGS-24215: Annotate rotated certificates #769
OCPBUGS-23462: bump(library-go) #771
bump(k8s) #763
OCPBUGS-21722: bump(openshift/api|client-go|library-go) to pick up http2 disablement #762
OCPBUGS-21722: Bump deps to address CVE-2023-44487 #755
bump(openshift/client-go,library-go) #753
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #750
OCPBUGS-19263: Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #747
Bump openshift/* libs #746
Update to Kubernetes 1.28.2 #744
STOR-1425: Update to Kubernetes 1.28.1 #742
Full changelog

cluster-kube-scheduler-operator

WRKLDS-1168: tolerate node-role.kubernetes.io/control-plane:NoExecute #539
OCPBUGS-30489: bump(google.golang.org/protobuf)=v1.33.0 #538
WRKLDS-1071: bump(library-go)=release-4.16 #536
OCPBUGS-29566: Apply hypershift cluster-profile for ibm-cloud-managed #535
OCPBUGS-23900: README: fix dynamicResourceAllocation field name #534
OCPBUGS-23900: Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate #532
AUTH-481: add PSa labels to openshift-kube-scheduler-operator namespace #533
NO-JIRA: readme: describe mapping between logLevel and log level #531
NO-JIRA: README: add notes about dumping KS’s node cache #530
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #526
OCPBUGS-23631: Add .snyk file to exclude vendor and ignore unit tests #524
OCPBUGS-24915: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #522
TRT-1420: Bump openshift/library-go to pick up revision_controller revert #521
OCPNODE-1890: Bump k8s api to v0.29.0 #510
OCPBUGS-24915: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #519
OCPBUGS-24915: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #517
OCPBUGS-24106: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #513
OCPBUGS-24218: Annotate serviceaccount-ca with ownership information #511
OCPBUGS-23463: bump(library-go) #512
NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof #507
OCPNODE-1886: Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 #508
OCPBUGS-21734: Bump openshift/library-go to disable http/2 by default #503
OCPBUGS-21734: Bump deps to address CVE-2023-44487 #500
bump(openshift/client-go,library-go) #498
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #496
OCPBUGS-19175: Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #493
Bump openshift/* libs #492
Update to Kubernetes 1.28.2 #491
STOR-1425: Update to Kubernetes 1.28.1 #490
Full changelog

cluster-kube-storage-version-migrator-operator

AUTH-482: set required-scc for openshift workloads #107
OCPBUGS-29567: Apply hypershift cluster-profile for ibm-cloud-managed #106
OCPBUGS-27930: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103
OCPBUGS-24989: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101
OCPBUGS-21738: bump library-go to include switch to HTTP/1.1 #95
OCPBUGS-19253: Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94
Full changelog

cluster-machine-approver

OCPBUGS-34161: check for machine crd before listing machines #233
OCPBUGS-29568: Apply hypershift cluster-profile for ibm-cloud-managed #229
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #227
OCPBUGS-26116: Add Snyk file to exclude vendor directory on scan #225
OCPCLOUD-2417: Update to kube 1.29 and controller-runtime 0.17.0 #224
OCPBUGS-23544: Increase concurrent reconciles to 10 #222
OCPBUGS-25582: Updating ose-cluster-machine-approver-container image to be consistent with ART #223
OCPBUGS-24985: Updating ose-cluster-machine-approver-container image to be consistent with ART #218
OCPBUGS-24154: Updating ose-cluster-machine-approver-container image to be consistent with ART #217
OCPCLOUD-2277: Ensure Cluster Machine Approver metrics are only available via HTTPS #211
OCPBUGS-21594: Filter non node CSRs in metrics #208
OCPBUGS-21793: Bump x/net package to v0.17.0 #204
Update OWNERS #205
OCPBUGS-19250: Updating ose-cluster-machine-approver images to be consistent with ART #201
OCPCLOUD-2181: Update K8s dependencies to 1.28 #203
OCPBUGS-17090: Set logger for controller runtime #200
Full changelog

cluster-monitoring-operator

OCPBUGS-34806: send cnv_abnormal metric via telemetry #2364
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
OCPBUGS-32510: change metrics-server probes for SNO #2337
MON-3851: Bump openshift/thanos to v0.35.0 #2338
MON-3847: Bump openshift/node_exporter to v1.8.0 #2336
OCPBUGS-32510: tweak Prometheus RBAC setup as a temp fix. #2334
AUTH-482: set required-scc for openshift workloads #2335
MON-3163: support VPAs #2078
OCPBUGS-23801: update OTEL google.golang.org/grpc/otelgrpc #2321
NO-JIRA: Increase checkAlertmanagerAPIVerbs timeout #2330
MON-3487: base CP enablement on dedicated feature gate #2153
OCPBUGS-32177: fix wrong dir hack/tools of tools.go #2327
MON-3707: Add ipsec state metric into telemetry #2326
MON-3701: clean-up injection of trusted CA bundle for k8s Prometheus #2323
MON-3839: test: add skip tests for prometheus adapter tests #2328
MON-3820: allow read-only access for Alertmanager API #2319
MON-3701: remove trusted CA bundle from Thanos Querier #2325
MON-3701: follow-up of PR #2308 #2324
MON-3825: Synchronize versions of the downstream components #2322
OCPBUGS-30430: update google.golang.org/protobuf #2320
MON-3701: clean-up injection of trusted CA bundle for main Alertmanager #2310
MON-3783: add controller-id annotation to pods deployments and operator #2309
OCPBUGS-18643: address lint warnings #2284
WINC-1180: assets, jsonnet: Add container_network openshift-kubernetes.rules #2314
OCPBUGS-31847: Synchronize versions of the downstream components #2318
MON-3701: remove references to OAuth proxy #2308
MON-3706: chore: simplify GetServiceAccountToken() #2272
MON-3621: Enable extra-scrape-metrics feature in PrometheusUWM #2302
OCPBUGS-31411: add runbook link for KubeAggregatedAPIErrors alert #2316
OCPBUGS-29531: Add include.release.openshift.io/hypershift label #2264
MON-3778, OLS-117: Add OLS metrics to telemetry whitelist #2300
OCPBUGS-31920: go.mod: bump openshift/api #2290
MON-3700: replace OAuth proxy for Thanos Ruler #2294
MON-3799: Synchronize versions of the downstream components #2301
MON-3749: enable request headers flags for metrics server #2293
OCPBUGS-28650: fix generation of telemeter token hash #2298
MON-3801: remove oauth-redirectreference annotations #2299
MON-3793: Synchronize versions of the downstream components #2295
MON-3793: jsonnet: Bump jsonnet deps for prometheus-operator #2296
MON-3792: fix metrics-server path for /test versions #2286
MON-3789: add a golangci-lint-fix makefile target to fix golangci-lint errros when possible #2275
MON-3771: update Prometheus operator to v0.72.0 #2288
MON-3498: Modify prometheus-adapter e2e tests to compact with metrics server #2196
OCPBUGS-30257: Making sure proxy settings are correctly forwarded in the generated remote write configs #2269
OCPNODE-2100: jsonnet: update crio port to TLS port 9637 #2257
MON-3694: chore: encourage the use of the new ‘slices’ package instead of ‘golang.org/x/exp/slices’ #2243
MON-3748: Enable audit logs by default for metrics-server #2280
MON-3380: adjust prometheus-k8s service openshift.io/description #2279
MON-3747: Increase e2e test timeout to 150 min #2278
MON-3381: replace OAuth proxy for Alertmanager #2260
OCPBUGS-28246: fix Thanos ruler alert generator url #2267
MON-3706: Revert “chore: poll immediately in the e2e tests” #2271
MON-3717: pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. #2226
MON-3717: update library-go to get https://github.com/openshift/libra… #2266
MON-3380: re-add kube-rbac-proxy for /metrics and /federate #2261
MON-3172: describe monitoring services #2188
MON-3706: chore: poll immediately in the e2e tests #2258
MON-3380: replace OAuth proxy for prometheus-k8s #2246
OCPBUGS-18326: add Console cap annotation to dashboards #2254
TRT-1489: Revert “jsonnet: update crio port to TLS port 9637” #2255
OCPNODE-2022: jsonnet: update crio port to TLS port 9637 #2229
MON-3705: [bot] Update jsonnet dependencies #2208
MON-3699: chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc #2247
MON-3697: use maximumStartupDurationSeconds instead of container patch #2251
OCPBUGS-28246: fix: set externalURL in UWM Prometheus #2250
MON-3689: Synchronize versions of the downstream components #2245
OCPBUGS-27289: followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 #2244
STOR-1289: Move vSphere prometheus rules to cluster-storage-operator #2235
OCPBUGS-27289: rollout metrics-server on cert rotations #2242
OCPBUGS-27213: Adjust lastError injection to wait.PollUntilContextTimeout’s final error #2234
MON-3676: move raptorsun out of reviewer list #2240
MON-3673: [bot] Synchronize versions of the downstream components #2238
MON-2853: add runbook link to TargetDown alert #2237
MON-3661: [bot] Synchronize versions of the downstream components #2236
OCPBUGS-26983: rollout monitoring plugin on TLS rotation #2233
MON-3661: chore: update Prometheus operator to v0.71.0 #2230
MON-3667: remove outdated documentation #2232
OCPBUGS-25849: make PrometheusAdapter and MetricsServer tasks less conflict prone #2218
OCPBUGS-25378: drop InfoInhibitor from default Alertmanager config #2225
MON-3664: chore: avoid issues with std.set* functions #2231
MON-3654: use Go standard errors package instead of github.com/pkg/errors #2224
MON-1047: fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… #2228
MON-3552: remove temporary cleanup code and no longer needed tests #2210
MON-3650: Synchronize versions of the downstream components #2222
MON-3649: Synchronize versions of the downstream components #2221
MON-3644: Ease the tracking of monitoring components versions. #2220
OCPBUGS-25803: make CMO ConsolePluginComponents task resilient to dependencies #2193
OCPBUGS-25676: fix(tasks): adjust ‘trusted CA bundle ConfigMap’ related logs for alertmanagers. #2219
MON-3633: Synchronize versions of the downstream components #2214
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2211
OCPBUGS-25403: go.mod update k8s.io/api* to v0.29.0 #2205
MON-3589: Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for –scrape.timestamp-tolerance on Platform Prometheus #2194
OCPBUGS-24977: use 1.20 in go.mod #2199
MON-3592: Use strict yaml unmarshaling #2195
OCPBUGS-25025: go.mod: bump prometheus-operator to v0.70.0 #2191
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2190
OCPBUGS-24630: additionalArgs: list items must have named fields #2189
MON-3553: Set scrape.timestamp tolerance #2187
OCPBUGS-23516: prevent plugin entry assets from caching #2186
OCPBUGS-21610: Detect ipv4/ipv6 socket in pod ip for nginx conf #2173
MON-3134: allow to query alerts from thanos-querier tenancy port #2184
MON-3551: fix: simplify jq script avoids error with jq1.7 #2180
MON-3454: Add track timestamps staleness #2160
OCPBUGS-24212: Add ownership annotation for certificates #2158
MON-3379: Replace the oauth-proxy before thanos-querier with kube-rbac-proxy #2136
MON-3544: Adjust NodeClock* alerting rules to work with PTP operator #2182
OCPBUGS-23745: Wait for 3 (instead of 2) consecutive failing reconcil… #2179
MON-3548: [bot] Synchronize versions of the downstream components #2183
MON-3543: Update API docs for Metrics Server #2181
OCPBUGS-24323: synchronize versions of the downstream components #2174
OCPBUGS-24340: patch securityContext for Thanos querier #2178
OCPBUGS-24323: update prometheus-operator jsonnet to v0.70.0 #2177
MON-3287: Remove openshift-etcd related RBAC as they will be manager by #2165
OCPBUGS-21610: revert #2166 #2172
MON-3524: Update metrics-server in CHANGELOG and README #2169
MON-3533: Update cluster:kube_persistentvolume_plugin_type_counts:sum #2171
STOR-1277: Add SELinux metrics to telemetry #2155
MON-3500: Enable sending exemplars over RW in UWM #2161
OCPBUGS-21610: Change config to allow ipv6/4 #2166
MON-3511: hack/local-cmo.sh: pass desired version in cmo run command #2168
MON-3211: Implement switching to metrics-server #2022
MON-3505: move aggregated-metrics-reader role to cmo jsonnet #2163
MON-3503: Synchronize versions of the downstream components #2162
OCPBUGS-23495: Change UWM Prometheus’ kube-rbac-proxy-thanos port num… #2164
MON-3479: update Prometheus operator assets to v0.69.1 #2152
MON-3503: Synchronize versions of the downstream components #2150
MON-3421: improve the detection of CMO unavailability/degradation due to U… #2129
MON-3476: Add code block to check FeatureGate status #2151
OCPBUGS-17035: fix KRP permissions for Thanos Querier #2057
OCPBUGS-22742: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2138
OCPBUGS-21621: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2145
MON-3398: Add RHACM telemetry metric #2100
Synchronize versions of the downstream components #2135
Fix UWM alert access permissions #2131
Synchronize versions of the downstream components #2133
OCPBUGS-4069: Prometheus Adatper takes metrics from kubelet job only. #2117
MON-3422: Remove temporary no more needed code #2132
fix: force HTTP/1.1 connections #2128
OCPVE-711: feat: add olm capability annotation #2105
OCPBUGS-21631: upgrade golang.org/x/net to v0.17.0 #2120
OCPBUGS-18326: revert previous fix to avoid activating console capability during update #2118
MON-3286: Remove no longer needed code. #2116
OCPBUGS-17850: replace nonResourceURLs permissions by subresource #2099
Synchronize versions of the downstream components #2115
Update jsonnet dependencies #2076
OWNERS: remove sthaha #2114
build: add -e to go list command to install tools #2112
Change kube-rbac-proxy-thanos port #2113
OCPBUGS-11344: alertmanager: use alertmanager CRD’s automountServiceAccountToken option #2111
Remove deprecated ioutil #2108
OCPBUGS-18326: add console capability annotation to dashboards and monitoring-plugin. #2101
MON-3302: add RHACS telemetry metrics #2062
add machine424 and rexagod to OWNERS #2083
Remove bparees from approvers #2104
Revert “feat: add olm capability annotation” #2103
MON-3270: Add kube-metrics-server to image-references #2102
OCPVE-711: feat: add olm capability annotation #2095
chore: fix imports order #2098
Set Thanos version in the Thanos Ruler spec #2094
OCPBUGS-19237: Updating cluster-monitoring-operator images to be consistent with ART #2084
Synchronize versions of the downstream components #2093
Synchronize versions of the downstream components #2089
MON-3383: Remove weak cryptograhic primitive usage #2086
OCPBUGS-18390: jsonnet/rules: exclude -1 from etcd objects count #2081
OCPBUGS-19059: Enable ipv6 on monitoring-plugin nginx #2090
MON-3376: Remove deprecated –logtostderr argument #2077
OCPBUGS-19356: Topology spread constraints admission webhook #2073
OCPBUGS-17682: add topologySpreadConstraints to UWM prometheus operator #2072
Synchronize versions of the downstream components #2082
MON-2642: Improve e2e tests for alertrelabelconfigs CRD #2080
Full changelog

cluster-network-operator

OCPBUGS-34736: Limit iptables-alerter’s cpu #2407
OCPBUGS-34736: Handle pod exiting race conditions in iptables-alerter #2394
MON-3795, OCPBUGS-35061: Add ANP metric rule expressions for telemetry exposure #2398
OCPBUGS-34612, OCPBUGS-34660, OCPBUGS-34663: Live migration backports #2392
OCPBUGS-34964: Fix DNSResolver feature gate enablement #2402
OCPBUGS-34770: Ensure that the node-identity webhook address contains colons for IPv6 #2395
OCPBUGS-34214: Add conditions for ignored-namespaces #2378
OCPBUGS-34013: Add custom masquerade subnet against right key at ovnkube-config CM #2374
CFE-888: Enable DNSNameResolver feature-gate #2131
OCPBUGS-32979: Update network operator status for IPsec #2360
USHIFT-2912: Add ref to MicroShift’s Multus and CNI Plugins #2365
OCPBUGS-29403: add more safe sysctls #2273
OCPBUGS-32525: Check every MachineConfigPool for IPsec plugin existence #2349
OCPBUGS-28230: enforce termination message policy on all platform pods #2364
OCPBUGS-33080: Update EQoS CRD to latest #2362
SDN-4726: Reapply “Merge pull request #2330 from pperiyasamy/block-sdn-upgrade” #2361
OCPBUGS-28230: enforce termination message policy on all platform pods #2354
Revert #2330 “SDN-4726: Block upgrade for openshift-sdn” #2356
SDN-4434: Network diagnostics scheduling #2339
SDN-4726: Block upgrade for openshift-sdn #2330
SDN-4114: Add iptables-alerter daemonset #2329
OCPBUGS-31528: infraconfig: handle vSphere UPI by not updating any fields #2327
SDN-4163: Improved prometheus rule for ipsec metric #2346
OCPBUGS-32402: Fix wait logic for IPsec certificate signing request #2342
SDN-4688: ANP: Add RBAC for cluster-manager #2338
OCPBUGS-32347: Improve IPsec MachineConfig readiness check #2341
SDN-4163: Add ipsec state to telemetry #2270
OCPBUGS-22969: Use v1 for flowcontrol API #2095
OCPBUGS-28230: enforce termination message policy on all platform pods #2340
SDN-4519: Configure CNO as per new API changes for join and transit switch subnet #2318
OCPBUGS-28230: enforce termination message policy on all platform pods #2334
NP-956: Remove managed cluster checking for live migration #2321
OCPBUGS-26408: automountServiceAccountToken:false hosted CP pods #2306
SDN-4596: Update (B)ANP CRDs; prepare for GA #2328
SDN-4500: Add write permission for EgressQoS status #2319
SDN-4607: Allow HyperShift ability to set ConfigMap through env var #2309
OCPBUGS-22995: Tighten the permissions on whereabouts.conf #2106
OCPBUGS-24690: Fully disable network-node-identity on ROKS #2313
SDN-4598: Set runAsUser to env variable if it is set #2307
OCPBUGS-30103: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2288
OCPBUGS-30831: Updating cluster-network-operator-container image to be consistent with ART for 4.16 #2308
OCPBUGS-30299: Fix managed cluster detection on ARO #2299
OPNET-358, OPNET-360: Allow VIP mutation in Infra CR #2130
OCPBUGS-29288: Ensure proper deprecation for the default field manager #2274
OCPBUGS-24380, OCPBUGS-24381, OCPBUGS-24382: Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods #2262
OCPBUGS-25764: memory-trim-on-compaction is enabled by default #2260
OCPBUGS-23788: Only allow valid values for gatewayConfig.ipForwarding #2127
OCPBUGS-29341: Run dhcp-daemon pods as system-node-critical priority #2280
OCPBUGS-24690: Disable network-node-identity on ROKS #2197
OCPBUGS-26492: Not set CNO to degraded if API server returns conflict error #2192
OCPBUGS-24214: Add ownership annotations #2120
OCPBUGS-24601: Add minReadySeconds to network-node-identity #2151
OCPBUGS-29305: ipsec: fix openssl typo #2269
OCPBUGS-28920: Update ingressconfig_controller to use field Manager #2259
NO-JIRA: Remove ILB from CNCC #2182
OCPBUGS-27222: Fix CloudPrivateIPConfig CRD in common #2249
OCPBUGS-24976: Updating cluster-network-operator-container image to be consistent with ART for 4.16 #2233
OCPBUGS-28676: Remove libreswan rpm existence checks #2238
OCPBUGS-29099: Add hostNetwork:true to cni-sysctl-allowlist ds #2237
OCPBUGS-24436: Add probes to node-network-identity #2148
OCPBUGS-24299: network-node-identity mounts secrets with mode 0640 #2142
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #2224
NP-874, OCPBUGS-27222: Bump openshift API #2246
OCPBUGS-24383: Limit write permissions for egressservices #2171
NP-903: Only allows live migration on standalone managed clusters #2236
OCPBUGS-19551: ovnkube: simplify northd threading and SNO templating #2234
OCPBUGS-24976: Updating cluster-network-operator-container image to be consistent with ART #2156
OCPBUGS-25079: Prevent NoRunningOvnControlPlane alert getting fired continuously #2208
NO-JIRA: add kyrtapz as reviewer and approver #2226
OCPBUGS-27823: Not update migration conditions when any MCP is updating #2213
OCPBUGS-26986: Add ConfigMap mount to the whereabouts-reconciler #2209
SDN-3708: Support configurable masquerade subnet in ovn-k #1807
OCPBUGS-26952: Deploy CNO IPsec MC even if user already have one #2201
OCPBUGS-27264: Only reconcile on Node updates with Label changes #2206
NO-JIRA: Fix jira component info #2199
SDN-4166: Enable N-S IPsec #2191
OCPBUGS-24379: Remove egressip write permissions from ovn-kubernetes-node #2170
OCPBUGS-24635: network node identity: tolarate all taints #2153
OCPBUGS-25207: Render IPsec MachineConfig after cluster settles with MachineConfigs #2187
OCPBUGS-25688: remove microshift folder, since CNO doesn’t manage it #2173
OCPBUGS-25669: Update ovn-k managed control-plane RBAC #2169
OCPBUGS-25760: Keep the live migration annotation consistant with the enhancement doc #2179
OCPBUGS-19635: OVN-K in SNO deployment mode: fix Lease override for CM #2070
SDN-4227: Use specific permissions for CNCC in GCP #2069
OCPBUGS-24693: HyperShift, network-node-identity: Check the deployment in the management cluster #2166
OCPBUGS-24176: Ignore invalid PEM blocks #2178
OCPBUGS-25337: Avoid removal of ipsec-host daemonset when node is NotReady #2161
HOSTEDCP-1308: remove service account token mount in cloud-network-con… #2165
OCPBUGS-23729: Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy #2159
OCPBUGS-24036: remove all managed fields used by old manager #2114
OCPBUGS-23199: add env var in whereabouts-reconciler daemonset #2160
OCPBUGS-19830: fix whereabouts conformance test failures #2103
OCPBUGS-24650, SDN-4308: Set enable-multi-external-gateway flag in ovnkube.conf #2149
OCPBUGS-19817, SDN-4162: Upgrade IPsec with single daemonset pod #2087
NP-615: Live migration #2091
OCPBUGS-23161: Set logging for controller-runtime #2129
SDN-4061: Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture #2101
OCPVE-779: Annotate credentials request manifests #2105
NP-615: Bump github.com/openshift/api #2138
SDN-4308: Update status merge for APBRoute and EgressFirewall. #2132
OCPBUGS-22710: Add apbroute/status patch rights for ovnkube-node to update status #2139
NETOBSERV-1047: Add a cluster monitoring dashboard for ovn #1871
OCPBUGS-21924: Bump library-go #2082
SDN-4101: Remove HyperShift API dependency, Bump kubernetes dependencies #2128
NO ISSUE: add ownership of the proxy-ca #2111
OCPBUGS-22869: hypershift, hosted clusters: enable multi-homing and multi-net features #2113
OCPBUGS-23082: set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2100
OCPBUGS-21924: Bump golang.org/x/net to v0.17.0 #2068
OCPBUGS-18088, OCPBUGS-18089: ovnkube: container scripts cleanup [v2] #2060
OCPBUGS-11179: change CNO to use custom ServiceAccount #2084
two replicas for CM instead of 3 #2052
OCPBUGS-15817: Egress router: request at least 100 milliCPU #2077
OCPBUGS-18785: SDN controller manifest: add node name from downward kapi to sdn controller #2047
OCPBUGS-19370: Added HCP label to CNO pods #2048
OCPBUGS-15220: Add zone node preference to multus-admission-controller #1795
multinetworkpolicy: allow Neighbor Discovery Protocol traffic #2010
OCPBUGS-18569: hypershift: adjust backoff on infrastructure name retry #1986
OCPBUGS-20533: Revisit cipher suits for multus-admission-controller’s rbac-proxy #2074
OCPBUGS-10652: ovnkube: disable conntrack on hybrid overlay VXLAN ports #1819
Make APB External Route namespace selector mandatory for a dynamic hop #1929
OCPBUGS-20519: hosted cluster upgrade failure from 4.13 stable to 4.14 #2065
Revert “Merge pull request #2037 from dcbw/db-script-cleanup” #2058
OCPBUGS-18392: notify when /etc/openvswitch path changes #1989
OCPBUGS-18088, OCPBUGS-18089: ovnkube: container scripts cleanup #2037
Remove ability to deploy with Kuryr #2056
OCPBUGS-20104: Don’t run network node identity as root #2051
OCPBUGS-20076: Multus should determine kubeconfig path #2049
Revert Kuryr MTU fixes #2038
Fix MTU miscalculation #1778
OCPBUGS-19918: get ipsecStatus from host daemonset #2042
Network metrics daemon: change priority class to openshift-user-critical #2044
OCPBUGS-14819: HyperShift: Use the local konnectivity proxy when checking proxy readiness #1985
OCPBUGS-19861: Multus per-node certificates should have 24h duration #2039
OCPBUGS-19418: Relax conditions to get IC upgrade started #2018
OCPBUGS-18396: Fix config status MTU migration not being updated #2021
OCPBUGS-19705: Use port 9108 for ovnkube-control-plane metrics #2031
OCPBUGS-19715: Do not enable node admission webhook if the CNI is not OVN-Kubernetes #2030
OCPBUGS-17391: remove prestop hooks for northd, sbdbd and nbdb #1978
OCPBUGS-19625: Multus per-node certificate request #2009
OCPBUGS-19377: Kuryr: Fix deriving MTU from previous config #2007
OCPBUGS-19648: Network identity: node-specific certificate in ovnkube-node, admission webhook #1983
OCPBUGS-19550: multus: set MULTUS_NODE_NAME to filter pods to local node #2020
OCPBUGS-19018: use $CPE_NAME to find the OS major version #2003
OCPBUGS-19494: ipsec: remove preStop from host #2015
OCPBUGS-18114: Update node selector in various YAMLs #1845
Limit OVN-Kubernetes permissions #1982
OCPBUGS-18892: make ipsec.service required #1999
OCPBUGS-19236: Updating cluster-network-operator images to be consistent with ART #2006
separate libovsdblogs from main ovnkube-master logs #1938
OCPBUGS-15201: Disable weak SSH cipher suites #1981
OCPBUGS-18676: ovnkube: set northd backoff-interval and use a single thread to save CPU #1990
OCPBUGS-17380: ipsec: fix oopsy from 2e3fc8e7a0 #1996
OCPBUGS-18517: Kuryr: Set MTU on Bootstrap, not Render phase #1988
Full changelog

cluster-node-tuning-operator

OCPBUGS-33682: right-hand-side profile_dirs take precedence (#1080) #1080
NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817: e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
OCPBUGS-33460: E2E: change tuned profile path (#1055) #1055
E2E: modify test use HaveKey matchter instead of ContainElement (#1056) #1056
E2E: Add automation to check default cpuset from cpu manager state file (#1050) #1050
perfprof: latency e2e: adjust failure message (#1044) #1044
set required-scc for openshift workloads (#968) #968
OCPBUGS-26401: TuneD prior to kubelet in one-shot mode (#1045) #1045
perfprof: e2e: account for node base load (#1047) #1047
CNF-6517: [Part 2] Hypershift PAO adoption (#1037) #1037
CNF-11099: set intel_pstate driver to automatic as default (#950) #950
OCPBUGS-32469: Remove tuned/rendered object (#1036) #1036
NO-JIRA: 4.16 go deps (#1042) #1042
CNF-6517: [Part 1] Hypershift PAO adoption (#1032) #1032
PSAP-1354: Updated a script for deploying a custom NTO image to a cluster (#1030) #1030
OCPBUGS-30111: Negative net interface name does not reduce queues (#973) #973
Enhance latency cnf-tests UX (#1041) #1041
pao:controller: remove depracated function (#1039) #1039
Replaced tuned hard-included repo with a git submodule (#1029) #1029
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) #1012
OCPBUGS-30647: NTO operand (openshift-tuned) fixes (#1024) #1024
NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) #1031
NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) #1022
Update the awk print field to fetch rhcos-image (#1033) #1033
set Cgroups V2 as default (#1010) #1010
E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) #1011
NO-JIRA: deps: Bump to K8s 1.29.2 (#990) #990
Delete duplicate mixedcpus e2e test (#1015) #1015
e2e: Enhance tests related to crio annotations (#955) #955
NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) #993
OCPBUGS-30569: Systemd processes not being moved to cpuset/systemd.slice fix (#992) #992
NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) #991
e2e: when crun is enabled by default skip checking runc config (#948) #948
NO-JIRA: Update tuned profile degraded test (#1005) #1005
Change .snyk format (#1000) #1000
Remove removePerformanceOLMOperator() (#997) #997
CNF-11213: added mixedCpus e2e test (#967) #967
NO-JIRA: Add positive tests with ginkgo timeout (#964) #964
OCPBUGS-30647: Remove TuneD timeout code and reload on ERRORs (#998) #998
Add sync for rendering extra ctrcfgs (#980) #980
OCPBUGS-29594: Reduce number of reboots in offline tests (#940) #940
makefile:hypershift: initial make target (#995) #995
e2e:mixedcpus: check env variables of init process (#961) #961
CVE-2024: 24786: update protobuf (#985) #985
Ignore scheduler plugin IRQs when globally enabled (#987) #987
E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) #988
Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) #969
Update OWNERS file (#872) #872
e2e: perf-prof: increase logging for debugging (#974) #974
OCPBUGS-26400: scheduler plugin: ignore IRQs (#976) #976
e2e: testdata: remove the annotated profile (#962) #962
OCPBUGS-29641: fix rendering extra ctrcfgs (#972) #972
NTO operand cleanup (#970) #970
Render: Don’t fail if there is no recommended profile. (#935) #935
OCPBUGS-23167: Add performance real time tuned template (#954) #954
Add support to inject owner-ref argument to render command (#960) #960
OCPBUGS-29546: Apply hypershift cluster-profile for ibm-cloud-managed (#958) #958
OCPBUGS-29594: e2e: fix comparing incompatible types (#957) #957
Render: Add MCSelector to missing default MCPs (#956) #956
e2e: check if shared CPUs survive Kubelet restart (#912) #912
render: perfprofile: don’t annotate perfprof (#951) #951
CNF-9173: e2e: mixedcpus test (#892) #892
e2e: fix typo in label name (#947) #947
skip realtime disabled tests due to OCPBUGS-28828 (#944) #944
OCPBUGS-29183: Enable crun as runtime only if missing (#937) #937
Fix e2e tests on SNO (#939) #939
e2e: classifying tests using labels (#936) #936
Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) #938
CNF-9173: e2e: cgroups: introduce cgroup package (#906) #906
New flags in Performance profile creator (#908) #908
NO-JIRA: e2e: set performance profile cpus using env vars (#909) #909
CNF-11091: Change webhook failure policy to ignore (#933) #933
CNF-11145: Enhance render sync to include bootstrap rendering tests (#932) #932
NO-JIRA: perfprof: render: make ownerReference optional (#907) #907
Revert “NO-JIRA: skip crun configuration test” (#918) #918
Render MC without additional PP (#924) #924
Report duplicate priority only for multiple matching profiles (#890) #890
e2e: UpdateWithRetry only update spec (#914) #914
Skip PerformanceProfile update test (#929) #929
Export ValidateBasicFields for Hypershift (#916) #916
e2e: log: set ctrl-runtime logger (#911) #911
OCPBUGS-22095: Add default MCP objects for rendering (#833) #833
README Doc Typo Fix (#920) #920
HyperShift code linter PR837 followup (#910) #910
CNF-10786: e2e: general improvements and cleanup (#898) #898
dnm: skip crun configuration test (#917) #917
Add .snyk file for static code analysis (#902) #902
OCPBUGS-25699: irqbalance: set banned cpus list to ‘0’ (#899) #899
rps: fail silently when rps application failed (#895) #895
OCPBUGS-20368: E2E: Add tests for Dynamic ovs pinning (#746) #746
NTO: Add MCP name to filter PP (#878) #878
OCPBUGS-24581: rps: fix mask update for SR-IOV devices (#877) #877
OCPBUGS-24792: Make MC names deterministic (#875) #875
makefile: add target to trigger mixedcpus e2e test (#883) #883
Fix error logging in metrics server.go (#882) #882
e2e-test: Call SetLogger (#881) #881
Use go 1.21 (#879) #879
OCPBUGS-24638: Do not set default RPS sysctl twice (#868) #868
Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) #867
e2e: images: bump default test image to 4.14 (#856) #856
cpuset-configure: exit gracefully on cgroup v2 (#866) #866
CNF-7610: Mixed CPUs plugin deployment support (#853) #853
New MachineConfig render command (#844) #844
Report duplicate profiles as ERRORs (#864) #864
CNF-10473: featuregates: main: add feature gates support for PAO controller (#858) #858
e2e:latency: omit LatencyTestRun env variable (#857) #857
OCPBUGS-18649: E2E: PPC Test cases (#708) #708
OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) #854
Avoid k8s.io/kubernetes as dep (#848) #848
Remove most //nolint:* overrides (#837) #837
CNF-10294: main: remove deprecated multi ns function (#770) #770
OCPBUGS-22519: bump opentelemetry package (#840) #840
Disable HTTP/2 for webhook and metrics servers (#834) #834
Remove obsolete protocols and weak ciphers (#827) #827
OCPBUGS-18662: rps: trigger udev even per queue (#816) #816
render: change dir path (#824) #824
Makefile: remote tmp folder on clean target (#823) #823
Add golangci-lint (#793) #793
Updating cluster-node-tuning-operator images to be consistent with ART (#795) #795
fix: add if check for no resource match error (#801) #801
nto: avoid timeout when there are too many CSV (#731) #731
Set non-default UserAgent for easier debugging (#807) #807
Improve co/node-tuning operand version reporting (#792) #792
Add the k8s reporter to the configuration suite (#815) #815
OCPBUGS-18783: e2e: perfprof: enhance the scheduling domain tests (#791) #791
Add kubeconfig path for IBM Managed OpenShift (#810) #810
Add k8s reporter to e2e tests (#666) #666
OCPBUGS-19459: check for object being nil (#804) #804
Memory manager E2E test fixes (#784) #784
Some unit tests fail with go1.19 as some modules require 1.20 (#794) #794
e2e: add expected max latancy to hwlatdetec test & rename constant (#719) #719
OCPBUGS-18662: e2e:rps: improve logging (#787) #787
Full changelog

cluster-olm-operator

AUTH-482: set required-scc for openshift workloads #54
OPRUN-3291: Add roles for clusterextensions #53
OPRUN-3291: Add roles for validating admission policy APIs #52
OPRUN-3291: Update dependencies #51
OCPBUGS-31280: manual art compliance #50
OCPBUGS-32188: Update README.md #49
OCPBUGS-30491: Update kube dep to 1.27.12 #48
OCPBUGS-29553: Apply hypershift cluster-profile for ibm-cloud-managed #46
NO-ISSUE: Remove ncdc from OWNERS #45
OCPBUGS-28597: Reenable cluster-olm-operator #44
OCPBUGS-28597: Disable cluster-olm-operator #43
OCPBUGS-25542: Updating ose-cluster-olm-operator-container image to be consistent with ART #42
OCPBUGS-24794: Updating ose-cluster-olm-operator-container image to be consistent with ART #39
NO-ISSUE: Bump k8s.io/apiextensions-apiserver #37
OCPBUGS-24451: Bump k8s dependencies #36
OCPBUGS-24068: Updating ose-cluster-olm-operator-container image to be consistent with ART #35
NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART #34
OCPBUGS-21670: Bump golang.org/x/net to v0.17.0 #32
OCPBUGS-19095: Updating ose-cluster-olm-operator images to be consistent with ART #31
Full changelog

cluster-openshift-apiserver-operator

AUTH-482: Set required-scc for openshift workloads #573
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969: Use v1 for flowcontrol API #559
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
OCPBUGS-19231: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
OCPBUGS-21733: bump library-go to include switch to HTTP/1.1 #552
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-34384: [release-4.16] Disable Rolebindings for Capabilities #350
AUTH-482: set required-scc for openshift workloads #336
OCPBUGS-23848: Bumps opentelemetry dependencies #341
OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
OCPBUGS-22969: Use v1 for flowcontrol API #316
BUILD-854: Add adambkaplan as approver #338
OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642: add image pull secret cleanup controller #300
API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
OCPBUGS-20164: Include Build CRD in manifests #306
WRKLDS-806: Bump kube dependencies to 1.28.2 #305
OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
OCPBUGS-18932: Always sort disabled controller list #302
OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
Full changelog

cluster-policy-controller

OCPBUGS-30496: bump(google.golang.org/protobuf)=v1.33.0 #147
WRKLDS-1016: bump k8s to 1.29.1 #146
OCPBUGS-24877: Updating ose-cluster-policy-controller-container image to be consistent with ART #144
OCPBUGS-26190: Add .snyk file to exclude vendor and ignore unit tests #145
OCPBUGS-24078: Updating ose-cluster-policy-controller-container image to be consistent with ART #143
go.mod: remove replaces #138
OCPBUGS-21638: bump(k8s,openshift) to address CVE-2023-44487 #137
OCPBUGS-21638: Bump deps to address CVE-2023-44487 #133
WRKLDS-806: bump k8s to 1.28 #132
OCPBUGS-19119: Updating cluster-policy-controller images to be consistent with ART #131
OCPBUGS-17458: ps syncer: don’t hotloop on a missing namespace #130
Full changelog

cluster-samples-operator

SO-121: Syncing the library for only S2i Samples for OCP 4.16 #543
Revert “SO-121: Resync Libray for 4.16” #542
SO-121: Resync Libray for 4.16 #540
OCPBUGS-31303: bump K8s version to 29.2 #536
AUTH-482: set required-scc for openshift workloads #535
OCPBUGS-26992: Align builder and base for Dockerfile.okd with Dockerfile #531
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #532
OCPBUGS-24787: Updating ose-cluster-samples-operator-container image to be consistent with ART #530
OCPBUGS-24787: Updating ose-cluster-samples-operator-container image to be consistent with ART #527
SO-119: Fix mariadb import url in OKD #525
SO-118: Bumping the K8s to 28.2 and golang to 1.20 #524
SO-117: Library Sync for OCP release 4.15 #522
OCPBUGS-22225: Sync library to remove invalid dockerhub references for OKD #519
Use latest tag for network-tools imagestream #518
OCPBUGS-18857: Updating ose-cluster-samples-operator images to be consistent with ART #517
Full changelog

cluster-storage-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #470
OCPBUGS-29126: vsphere-problem-detector: don’t set Available condition #456
OCPBUGS-28230: enforce termination message policy on all platform pods #467
STOR-1804: update ClusterCSIDriver CRDs #464
AUTH-482: set required-scc for openshift workloads #459
OCPBUGS-28748: log default storage class names when collector is triggered #460
OCPBUGS-30498: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #463
STOR-1758: Add azure file hypershift #454
OCPBUGS-28879: Fix problem-detector proxy setting #457
OCPBUGS-29573: Apply hypershift cluster-profile for ibm-cloud-managed #458
OCPBUGS-28765: Remove master node selector from azure-csi-driver-operator deployment #448
OCPBUGS-29196: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #455
STOR-1574: Bump all deps #447
STOR-1611: remove ibm-vpc-node-label-updater #445
OCPBUGS-27159: Allow vSphere CSI driver to be disabled #444
STOR-1289: Move vSphere prometheus rules to CSO #442
STOR-1354: Remove Alibaba Disk CSI Driver #440
STOR-1574: Bump library-go #443
STOR-1722: Azure disk hypershift #420
STOR-1714: Release leadership on SIGTERM #437
OCPBUGS-22994: Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert #430
OCPBUGS-22422: Fix PodStartupStorageOperationsFailing alert #436
STOR-1688: Chore: add .snyk file to ignore false positives #434
OCPBUGS-25564: Updating ose-cluster-storage-operator-container image to be consistent with ART #435
CCO-251: replace instanceAdmin role with specific compute permissions #429
OCPBUGS-24927: Updating ose-cluster-storage-operator-container image to be consistent with ART #432
OCPBUGS-23852: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #431
OCPVE-789: annotate credentials request manifests #418
STOR-1277: Add Prometheus rules for SELinux telemetry #422
TRT-1376: Revert #410 “CCO-251: use granular permissions for gcp credentails request” #426
CCO-251: use granular permissions for gcp credentails request #410
OCPBUGS-24112: Updating ose-cluster-storage-operator-container image to be consistent with ART #424
STOR-1487: bump openshift/api to get IBMCloudCSIDriverConfigSpec #423
OCPBUGS-24027: forbidden access to resource on shared-resource-csi-driver-operator #425
STOR-1402: Chore: update libraries in all operators [4.15] #421
OCPBUGS-23120: [IBM ROKS] cluster-storage-operator does not set upgradeable=True #417
STOR-1453: Grant permissions to access apiserver to CSI driver operators #415
OCPBUGS-22594: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #414
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #411
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #404
OCPBUGS-13669: skip Azure File installation on Azure StackHub #395
OCPBUGS-19073: Move KAS access label to right place #403
update readme #400
OCPBUGS-19073: Add KAS label to aws-ebs-operator #399
OCPBUGS-19184: Updating cluster-storage-operator images to be consistent with ART #398
STOR-1446: Restart vsphere-problem-detector-operator Pods if serving-cert changed #394
Full changelog

cluster-update-keys

OCPBUGS-29570: Apply hypershift cluster-profile for ibm-cloud-managed #54
OCPBUGS-24932: Updating ose-cluster-update-keys-container image to be consistent with ART #53
OCPBUGS-24115: Updating ose-cluster-update-keys-container image to be consistent with ART #52
OCPBUGS-19189: Updating ose-cluster-update-keys images to be consistent with ART #51
Full changelog

cluster-version-operator

OCPBUGS-35249: Revert: Add support for Custom Certificate Authorities for custom signature stores” #1053
OCPBUGS-24700: Add support for Custom Certificate Authorities for custom signature stores #1030
OTA-1160: pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart #1044
NO-ISSUE: pkg/payload/task: Drop unused Requeued property #1043
NE-1318: Add always-enable-capabilities flag and set Ingress as always enabled #946
OCPBUGS-9133: pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded #746
AUTH-482: set required-scc for openshift workloads #1038
NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 #1042
OTA-1159: pkg/cvo: Render status.Failure in ReconciliationIssues #1041
OTA-1210: *: Add –update-service command-line option #1035
OTA-1159: [²⁄₃] Maintain ReconciliationIssues condition #1032
OCPBUGS-29868: Apply hypershift cluster-profile for ibm-cloud-managed #1037
NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded #1036
OCPVE-659: bump openshift/api with new capability #979
OTA-1159: [1/x] Refactor syncStatus for testability #1031
OCPBUGS-18454: Avoid using risk names as condition reasons when invalid #962
OCPBUGS-7714: yield lock while retrieving payload #1005
NO-JIRA: manifests: fix service manifest filename #1027
OCPBUGS-27468: bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features #1026
OCPBUGS-7714: Refactor & improve SyncWorker lock code #1020
OTA-1169: deps: bump openshift/api and k8s.io/client.go #1022
OCPBUGS-25862: CO health: only track current in-progress upgrade start #1011
OCPBUGS-26014: clusterOperatorBuilder: Reconcile metadata on COs #1012
OCPBUGS-25708: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1009
OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #996
OCPBUGS-24963: Updating cluster-version-operator-container image to be consistent with ART #1006
OCPBUGS-25055: pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1003
OCPBUGS-24963: Updating cluster-version-operator-container image to be consistent with ART #1004
OTA-917: pkg/customsignaturestore: Implement signatureStores customization #994
OCPVE-646: add cloud credential capability #963
OTA-855: Create GET requests to the Prometheus API server #999
OCPBUGS-23290: install/0000_90_cluster-version-operator_02_servicemonitor: ‘oc get …’ for CannotRetrieveUpdates #995
OCPBUGS-24138: NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART #1000
OCPBUGS-23377: to reduce log noise, only log sync_worker messages on retry or payload change #997
OCPBUGS-19391: do not reconcile rules if aggregationRule is set #993
OCPBUGS-8079: install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #992
OCPVE-740: vendor: bump openshift/api #984
OCPBUGS-21933: Bump http-related deps #983
OCPVE-673: Bump API to Add OLM Capability #971
Revert openshift/api bump PR merged by mistake (977) #978
OCPVE-659: bump openshift/api #977
OCPBUGS-19868: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #975
OCPBUGS-19512: pkg/clusterconditions/promql: Warm cache with 1s delay #939
OCPBUGS-18386: Properly reconcile SCC resources #966
OTA-854: Add configurable CVO knobs for risk-evaluation PromQL target #926
OCPBUGS-18984: pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition #968
OCPBUGS-19222: Updating cluster-version-operator images to be consistent with ART #970
OCPBUGS-18567: lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment #965
Full changelog

configmap-reloader

MON-3671: add machine424 and rexagod to OWNERS #55
OCPBUGS-24912: Updating configmap-reload-container image to be consistent with ART #58
Updating configmap-reload-container image to be consistent with ART #57
OCPBUGS-19171: Updating configmap-reload images to be consistent with ART #56
Full changelog

console

OCPBUGS-35395: Keep useUserSettings hook in the internal api #13970
OCPBUGS-35152: restore missing CloseButton styles #13947
OCPBUGS-35318, OCPBUGS-35319, OCPBUGS-35320: disabling add-flow A-04-TC01 test and knative tests due to flakes #13962
(chore) Update tectonic builder image to use golang-1.21 #13944
OCPBUGS-34139: Improve Pipeline list page performance #13882
OCPBUGS-34002: Fix console crash-loop with OIDC auth config #13874
OCPBUGS-34711: show “Debug container” link for pods with status.phase… #13914
OCPBUGS-33965: i18n - Download and merge French and Spanish languages translations in the OCP Console #13870
OCPBUGS-34393: fix bug where textarea is not resizable #13894
OCPBUGS-33989: Updating the secrets using Form editor displays an unknown warning message #13873
OCPBUGS-34112: Fix Admission webhook warning for Route and BuildConfig creation via import flow #13881
OCPBUGS-34141: UI inconsistency in topology when application grouping is collapsed #13883
OCPBUGS-34142: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13884
OCPBUGS-34143: Create Serverless form does not create BuildConfig #13885
OCPBUGS-33872: add user-impersonation to QuickStartGettingStartedCard,… #13864
OCPBUGS-32631: TaskRuns should not be fetched for Failed PLR’s #13806
OCPBUGS-33567: Expose useUserSettings hooks in dynamic plugin sdk #13843
ODC-7576: Pipelines plugin test fixes #13841
OCPBUGS-31901: Patch PF dynamic module parser to exclude ‘next’ modules #13832
ODC-7574: Add e2e tests for QuickStart from Masthead in CI #13837
OCPBUGS-33523: restrict Masthead logo to max-height #13838
OCPBUGS-29745: Fix Pipeline details page with when expression using CEL expression #13834
CONSOLE-4019: Display a warning message from kube-apiserver when creating resource integration tests #13814
CONSOLE-3943: Backup to segment public api key #13821
OCPBUGS-33352: Fix PatternFly modules check #13817
OCPBUGS-33345: Disable create button on NAD empty state for regular user #13805
CNV-36170: Multi NetworkPolicies #13772
OCPBUGS-33219: Fix StatusItem layout when no timestamp is present #13815
OCPBUGS-31558: Fix NAD creation defaulting to the default namespace #13822
OCPBUGS-33222: List DeploymentConfig triggers a warning notification which is not required for Display warning policy feature #13818
OCPBUGS-33199: The filepath including leading slash makes error during parsing devfile using Gitlab #13812
OCPBUGS-33202: Pipeline list page is crashed when navigating from Search page #13813
CONSOLE-3939: Display a warning message from kube-apiserver when creating / updating workloads resource #13763
OCPBUGS-32707: Fix React Router useParams in dynamic demo plugin #13803
CONSOLE-1756: replace PodIP with PodIPs or HostIP with HostIPs if mor… #13774
ODC-7437: Remove pf classes in topology package #13710
OCPBUGS-33011: fix issues with Edit Route form #13799
CONSOLE-4014, OCPBUGS-32791: Consume telemetry CLUSTER_ID and use it together with orgId as segment identifier #13786
ODC-7435: Remove pf classes in pipelines package #13739
ODC-7569: Automation of the Recently Used Resources Section in the Search Resource page Dropdown #13791
ODC-7566: Remove the Approvals Feature from the Console Repository #13789
ODC-7547: Add e2e tests for QuickStarts in CI #13764
ODC-7438, ODC-7535: web-terminal automation improvement #13749
OCPBUGS-32741: change OperatorHub filter FIPS Mode to Designed for FIPS #13790
WINC-1180: Use record created for container_network metrics #13759
OBSDOCS-986: Update the Monitoring topic used by the console team #13765
ODC-7433: Remove PatternFly classes from helm integration tests #13777
CONSOLE-4020: i18n upload/download routine task - Sprint 252 #13760
OCPBUGS-32725: fix OIDC logging out #13755
OCPBUGS-32059: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13776
OCPBUGS-32222: Add warning about service binding operator will not be supported from 4.15 #13766
ODC-7554: Update the UI according to the recent changes from UX #13723
ODC-7565: Update owners files (remove reviewers and add Avik and Prabhu as approvers for ODC) #13773
OCPBUGS-13114: Add visual connector between VMs and non VMs workloads #13617
OCPBUGS-31809: Pipeline details page Metrics tab crashed due to no custom data #13733
OCPBUGS-30426: Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 #13661
OCPBUGS-28723: Improve Create serverless function error message #13591
OCPBUGS-32218: fix runtime error on Pending pod details page #13768
ODC-7479: automation of quick-starts-cluster-overview.feature #13715
OCPBUGS-12857: Add NaN handling for Stacked Graphs #13712
OCPBUGS-26073: setting correct image trigger annotation #13492
CONSOLE-3944: Disable segment analytics when cluster telemetry is disabled #13677
OCPBUGS-32019: Handle loading issue for PLR status in PLR list page #13747
OCPBUGS-29377: Routes created by devfiles do not always use HTTPS #13725
OCPBUGS-32307: Increase Max node limit for topology page to 300 #13761
OCPBUGS-22405: Add a button to enable autoscaling for a deployment that is scaled to 0 #13711
OCPBUGS-32189: Fix PatternFly version resolution check script for MacOS #13757
CONSOLE-3759: Update file-loader pkg #13743
OCPBUGS-31430: Re-enable Pipelines e2e tests #13700
OCPBUGS-32175: Update i18n docs : Change “traditional Chinese” to “simplified Chinese” #13754
OCPBUGS-32117: Add flag to hide Output tab contributed by pipelines-plugin #13751
CONSOLE-3997: Bump Yarn to v1 latest & add script to check PatternFly modules #13706
OCPBUGS-31745: TaskRun status is not displayed near the name #13746
CONSOLE-3916: Direct OIDC tech debt #13647
OCPBUGS-31082: Remove deprecated resources from spec of the Pipeline #13741
OCPBUGS-31759: Update i18n docs on how to update Phrase Project Template #13730
OCPBUGS-31843: Use UserInfo username field when logging out as kubeadmin #13740
OCPBUGS-31680: Correct the button text for VolumeSnapshotContent #13742
WINC-1182: [node] Modify filesystem queries to include Windows metrics #13662
OCPBUGS-31703: Resource yaml with create #13722
CONSOLE-4014: Consume the telemetry parameter ORGANIZATION_ID and pass it as organizationId parameter to segment #13728
OCPBUGS-23319: fix bug where paused MCPs were incorrectly unpausing w… #13717
OCPBUGS-31744: Add fr and es languages to i18n script for Memsource upload #13729
OCPBUGS-29616, OCPBUGS-29823, OCPBUGS-31613: Add validation for vSphere fields #13726
OCPBUGS-23480: Improve PipelineRun list view performance #13676
OCPBUGS-31732: Hide the cluster configuration for analytics #13727
OCPBUGS-31482: oidc: use our own pre-configured client for token refreshes #13716
OCPBUGS-31695: Use bearer-token for local dev with auth #13720
OCPBUGS-31355: add readOnly option to ResourceYAMLEditor #13694
ODC-7436: shipwright test package update concerning pf5 update #13660
OCPBUGS-31431: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13701
ODC-7431: dev-console test package update concerning pf5 update #13685
OCPBUGS-31315: i18n upload/download routine task - Sprint 249 #13692
OCPBUGS-29479: fix asynccache improper initialization #13703
OCPBUGS-24830: Updating openshift-enterprise-console-container image to be consistent with ART #13454
Revert “OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters” #13705
CONSOLE-3883: Improve local plugin development docs #13679
OCPBUGS-30958: Upgrade Pipeline trigger resources to v1beta1 #13702
OCPBUGS-30824: Remove react-helmet from Console provided shared modules #13687
CONSOLE-3971: add impersonate action to Group list and details pages #13671
OCPBUGS-28585: remove generics from use*Modal docs #13689
OCPBUGS-24637: Fix storage request unit dropdown to display any valid unit #13620
OCPBUGS-29992, OCPBUGS-30584: PatternFly upgrade to 5.2.1 followup to… #13693
CONSOLE-3972: add Last Status to Pod details Container list and Conta… #13674
ODC-7531: Added the ApprovalTask List Tabbed Page #13651
ODC-7546: Fix that the UI doesn’t load on non-openshift clusters #13408
ODC-7498: Show an opt-in / opt-out option to the user depending on the cluster configuration #13587
ODC-7434: Knative test package update concerning pf5 update #13562
OCPBUGS-24049: Add option to enable/disable tailing to Pod log viewer mobile screen issues #13394
CONSOLE-3949: Add support for returning response.header in consoleFetchCommon function #13623
CONSOLE-3969: Enable French and Spanish in the OCP Console #13665
ODC-7519: Update the Pipeline Topology to adjust the new node design for the CustomRun #13613
CONSOLE-3922: Convert legacy ListPage to dynamic-plugin-sdk ListPage- components in Console VolumeSnapshots Storage #13560
ODC-7489: automation for getting-started-tour-dev-perspective feature file #13531
OCPBUGS-30052, OCPBUGS-30575: PipelineRuns in Console show wrong status or load indefinitely #13659
CONSOLE-3965: i18n upload/download routine task for version-4.16/ sprint-248 #13652
ODC-7492: automation for sample-card-add-page feature file #13589
OCPBUGS-30567: Remove wrong arguments in K8sCreate method instance for Create YAML editor #13658
OCPBUGS-30297: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13650
CONSOLE-3931: replace existing CloseButton with one from @patternfly/… #13588
OCPBUGS-30805: fix Configure link in AlertmanagerReceiversNotConfigur… #13666
OCPBUGS-30762: Fix bugs in Console dynamic plugin SDK webpack code #13657
ODC-7539: Update devfile library to v2.2.2 #13045
OCPBUGS-26415: Application creation fail when manually entering input scaling value in local setup #13487
OCPBUGS-30551: Switch to service to get the PLR and TR logs from the Tekton results summary API #13654
OCPBUGS-29513: Update the Pipeline List and Details Pages to acknowledge Custom Task #13614
OCPBUGS-29365: Requesting for country codes in localization of openshift - webconsole #13612
OCPBUGS-25931: fix for execute inline markdown syntax issue #13580
RHSTOR-4130: Cross storage class clone /restore #13549
OCPBUGS-27469: “Deploy Image” with “Serverless Deployment”, Scaling “Min Pods”/“Max Pods” should set “autoscaling.knative.dev/min-scale”/max-scale not minScale/maxScale #13534
OCPBUGS-30073: Upload Jar form’s Clear button is not functioning #13644
OCPBUGS-21800: Dev console buildconfig got [the server does not allow this method on the requested resource] error when not setting metadate.namespace #13544
OCPBUGS-30046: Missing dependency warning error in console UI dev env #13640
OCPBUGS-22894: adjusting documentation links for 4.15 #13634
OCPBUGS-30077: Add additional search filters in the toolbar #13233
ODC-7480: Recently Searched Section in Search Resource Page Dropdown #13389
CONSOLE-3907: add actions extension point to Events #13554
OCPBUGS-22487: Fix operands list endpoint. #13632
CONSOLE-3948: rename ‘supported but not recommended’ to ‘known issues… #13622
OCPBUGS-29701: Use selfsubjectreview API from frontend #13605
ODC-7478: Gherkin and automation of “Install Red Hat Developer Hub with a Helm Chart” guided tour #13511
CONSOLE-3924: i18n upload/download routine task - version4.16/sprint247 #13608
CONSOLE-3776: Add GCP token auth to Infrastructure features filter section in OpertorHub #13559
OCPBUGS-29816: Switch to service from external result route endpoint #13624
OCPBUGS-29757: Use HTTP proxy configuration from environment variables in dev-console proxies, so that our backend proxies works fine on airgapped clusters #13619
OCPBUGS-28967: ‘Oh no somthing went wrong’ shown on Image Manifest Vulnerability page after create IMV via CL #13578
CONSOLE-3921: Remove Disks/NICs page from Node details #13552
CONSOLE-3883: Update dynamic plugins README #13598
OCPBUGS-29760: Dev console: Observe > Dashboard page should be called “Dashboards” (OU-260) #13597
CONSOLE-3774: Enable OperatorHub filter by TLSProfiles annotation #13555
ODC-7477: automation of quick-start-access-code-snippet.feature #13494
OCPBUGS-29423: update TableData doc to use PatternFly 5 classname #13606
OCPBUGS-29363: TaskRuns list page is loading constantly for all projects #13604
OCPBUGS-29355: Output image url link leads to 404 for Shipwright Builds #13602
OCPBUGS-29601: Disabling pipeline tests to restore CI health #13611
ODC-7476: automation for getting-started-serverless gherkin #13476
OCPBUGS-27473: Error in displaying BuildRun logs in Console #13583
CONSOLE-3883: Update Console vs. dynamic plugin SDK package compat table #13586
OCPBUGS-9714: Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown #13411
OCPBUGS-28718: Revision tab and routes tab in serving details page showing no resource found #13556
OCPBUGS-26566: Page fails to return to the Secrets list after clicking ‘Cancel’ on any Secret creation page #13504
OCPBUGS-28383: Activity card event has expanded content that is not correctly left aligned with the rest of the card content #13547
OCPBUGS-27247: improve empty state message for Machines and MachineSets page #13577
OCPBUGS-25942: make sure folder is encapsulated with quotas #13477
OCPBUGS-27246: Unhealthy conditions table should put Type as first column on MachineHealthCheck details page #13576
OCPBUGS-22749: Adjust NAD name to “network-xxx-xxx” when creating #13568
ODC-7490: Add TaskRun tab in PLR details page using plugin #13527
OCPBUGS-28856: make getGroupVersionKindForResource null safe #13574
OCPBUGS-27908: fix i18n for Remove volume modal #13550
CONSOLE-3377: Add Cypress integration tests for ConsoleYAMLSample CRDs #13567
OCPBUGS-28836: AUTH-440: fix usersettings identifier creation #13557
OCPBUGS-27310: Source column header not displayed in PVC > VolumeSnapshots tab #13565
CONSOLE-3853: Optimize module federation of PatternFly packages #13521
CONSOLE-3909: i18n upload/download routine task - chore(i18n): update translations #13519
CONSOLE-3818: Remove Chrome from the console builder image #13539
OCPBUGS-28216: Adjust width and spacing so that warning icons are not clipped. #13546
OCPBUGS-26236: VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab #13485
OCPBUGS-25936: fix copy-execute-demo.yaml inline syntax #13471
AUTH-440: OIDC: refresh sessions with a refresh token if present #13513
OCPBUGS-25843: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13483
OCPBUGS-25881: remove “openshift-storage” namespace usage from the console #13418
OCPBUGS-27455: do not deduplicate ImageManifestVulns in Overview popover #13529
OCPBUGS-27016: fix resizeObserver limit exceed for dev-console #13502
OCPBUGS-27152: Fix popover jump in Tables #13524
OCPBUGS-25788: Add Node Maintenance menu actions to Node list/details #13506
OCPBUGS-27779: fix bug where Expand PVC modal assumes pvc.spec.resou… #13532
CONSOLE-3430: add Cluster Settings > Details integration tests #13515
ODC-7482: Add flags checks to hide Pipeline static plugin List and details pages #13512
OCPBUGS-27498: Update get method so it can display zero value when set #13533
OCPBUGS-16736: Addition of optional chaining to prevent yaml crash #13510
OCPBUGS-27399: Filter out Client CSRs for nodes which already exist #13522
CONSOLE-3829, OCPBUGS-16814: backend: use the k8s SelfSubjectReview API to get info about a user #13321
AUTH-440: expand options for the OIDC authenticator #13276
OCPBUGS-26772: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13503
OCPBUGS-26039: Make editor sidebar width consistent #13495
OCPBUGS-10851: Add source maps to production builds #13497
OCPBUGS-25890: Prevent complete page reload when changing perspective #13500
OCPBUGS-14481: update check for the ‘provider’ label on the PackageMa… #13491
OCPBUGS-26554: Fixed some problems in topology Chinese translation text #13458
OCPBUGS-18699: add additional check to determine if file is binary #13496
ODC-7465: Update Getting started section in Openshift UI to use expandable section #13466
chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13441
OCPBUGS-25722: Add support for custom segment domains (to load JS and make API calls) #13459
OCPBUGS-26049: Tab VolumeSnapshots crashed on PVC page #13481
OCPBUGS-25780: add integration test to check that Update cluster moda… #13480
OCPBUGS-25898: Fix PipelineRun Logs tab navigation #13470
OCPBUGS-25840: make Azure warning title consistent #13472
OCPBUGS-25771: Enable catalog source badge to truncate for long names #13474
OCPBUGS-25780: fix bug where Update cluster modal will not open #13473
OCPBUGS-25934: clean up icon color and sizes #13460
OCPBUGS-25927: Fix config ini format #13210
OCPBUGS-25612: Logs for PipelineRuns fetched from the Tekton Results API is not loading #13455
OCPBUGS-24592: Fix CI tests in helm and devconsole packages #13464
OCPBUGS-25206: Re-enable and fix pipelines e2e tests #13438
OCPBUGS-18844: Replace the old sr-only class to the patternfly pf-v5-u-screen-reader class #13453
HELM-522: bump helm version to 3.13.2 for OCP 4.15 #13410
OCPBUGS-25441: fix Observe tab in Topology overview #13451
OCPBUGS-25530: fix bug where filter at mobile could be empty on Searc… #13456
OCPBUGS-25396: update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page #13450
CONSOLE-3874: Refactor EventStream #13431
OCPBUGS-23299: Replace checkbox with PF checkbox component to correct alignment #13397
OCPBUGS-23925: Follow on logic for only showing VPAs associated with a deployment for a specific project #13445
OCPBUGS-24711: fix preferredTab selection on Pipelines page #13430
OCPBUGS-24715, OCPBUGS-25018: Fix pipelineRuns loading on repository details page #13432
OCPBUGS-24830: Updating openshift-enterprise-console-container image to be consistent with ART #13434
OCPBUGS-24408: fix runtime error on Node details Overview when Machin… #13422
OCPBUGS-23378: Prevent text overlap with popover close button on Create NetworkPolicy form #13429
CONSOLE-3853: Prevent PatternFly styles from being included in plugin compilation #13388
OCPBUGS-24280: Add missing https:// check for an external link #13421
chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 244 #13403
OCPBUGS-5113: Date&Time values are not showing as per browser default language #12506
OCPBUGS-23925: Only show VPAs that are associated with the selected namespace #13417
OCPBUGS-24186: Strip ‘Server’ header from proxy response #13404
Console-3733: Add support for Azure Workload Identity / Federated Identity based installs in OperatorHub #13082
ODC-7389: Update OpenShift favicons as well #13420
OCPBUGS-24582: Updated functions list page to use new hook useParams #13419
OCPBUGS-18401: add type and text filters to Events integration test #13407
OCPBUGS-13206: Fix customPythonDeploymentConfig YAML script to create a Pipeline wasn’t working #13149
OCPBUGS-13204: Fix that customNodeDeployment pipeline YAML script wasn’t working #13148
OCPBUGS-24252: fix subscription page fields #13416
OCPBUGS-23764: bump PF dependencies to the latest patch fix #13380
OU-286: add test-id to panel charts to ease e2e tests when titles change #13340
OCPBUGS-23554: Fix for monaco editor that happens with yaml is being edited #13414
OCPBUGS-23378: Set min-width for PF popovers that are being overridden by an inline style #13390
OCPBUGS-23347: fix vCenter cluster being empty #13209
OCPBUGS-24339: Do not depend on a global installed lint-staged #13409
OCPBUGS-24399: Update our overrides css rule to remove list bullet from PF4 ui elements #13406
OCPBUGS-23761: PatternFly5 update: Fix quick search input background color in dark mode #13398
OCPBUGS-18401: fix filtering issues on Events #13395
OCPBUGS-23263: Update i18next-parser dev dependency in console #13330
OCPBUGS-24267: Cluster configuration fields are not visible #13386
OCPBUGS-22976: S2I Build Wizard should check for Containerfile in addition to Dockerfile #13378
OCPBUGS-24001: Fix crash when ArtifactHub Task has no version #13379
OCPBUGS-18371: Searching for items in quick search is confusing #13381
OCPBUGS-24280: view sbom link redirection should be based on taskrun annotation #13387
OCPBUGS-24339: Add note about git hooks and PATH env var to README #13396
OCPBUGS-18542: Fixed topology package e2e tests #13136
CONSOLE-3852: remove PatternFly classnames from integration tests #13337
OCPBUGS-24203: ConsolePlugin metrics must no longer be grouped by the vendor #13383
CONSOLE-3732: Add option to enable/disable tailing to Pod log viewer #13298
CONSOLE-3705: Phase 1 of using OpenShift Dynamic Plugin SDK #13188
OCPBUGS-23779: Fix crash when user clicks on Show tooltips #13382
OCPBUGS-19426: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #13333
CONSOLE-3764: Update husky to v8.0.3 #13320
OCPBUGS-23125: add access review for impersonate #13345
OCPBUGS-23780, OCPBUGS-23783, OCPBUGS-23794, OCPBUGS-23977: Bring back the Decorators and Pod Rings around resources in Topology #13376
OCPBUGS-23956: PatternFly5 update: Remove text decoration for task node on hover #13371
OCPBUGS-23786: PatternFly5 update: fix code snippet color in quick start in dark mode #13366
OCPBUGS-23770: After PatternFly5 update: Typology sidebar layout issue #13363
OCPBUGS-23248: change Alertmanager form to create using matchers inst… #13358
OCPBUGS-23980: Fix logs streaming auto scroll issue #13377
OCPBUGS-23778: Apply the correct font-family for the page header action button and menu items. #13375
OCPBUGS-23756: fix layout of Show tooltips in YAML editor #13374
OCPBUGS-23971: remove pf-m-grid-md from tables so table headers appea… #13373
OCPBUGS-23927: fix table layout issue with Identity providers table #13372
OCPBUGS-23769: PatternFly5 update: fix Topologylist view hover effect #13368
CONSOLE-3793: add uptime to Node pages #13312
OCPBUGS-23559: Styling issue in functions list page after PatternFly upgrade #13356
chore(i18n): update translations: : Completed OCP-4.15/Master Branch/Sprint 243 #13253
OCPBUGS-23923: fix PipelineRun task logs switcher #13369
OCPBUGS-23775: After PatternFly5 update: Form error is missing when import a container image #13365
OCPBUGS-23765: fix dark theme issue for helm release readme modal #13370
ODC-7359: Fix shipwright build e2e tests #13296
OCPBUGS-23787: PatternFly5 update: fix Quickstarts catalog item count alignment #13367
OCPBUGS-23776: After PatternFly5 update: Add page > more button dropdown is too wide #13361
OCPBUGS-23768: After PatternFly5 update: Navigation: Extra space after divider #13362
OCPBUGS-23912, OCPBUGS-23918: Add Vulnerabilities column and signed icon in PAC repository PLR list #13364
ODC-7426: Deletion of pipeline run after tekton result installation should be user-friendly #13353
OCPBUGS-23388: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13344
ODC-7389: Replace topology graphic with new version for openshift v4.15 #13350
OCPBUGS-23543: Deployment option is missing in ‘Deploy Image’ #13354
ODC-7428: Update quick start name and document links for getting started section #13348
OCPBUGS-22778: Fix for yaml editor that crashes with MCE and ACM plugins enabled #13346
GITOPS-3575: Added disallowed flag to gitops static plugin #13307
ODC-7419: Feature new Quickstarts (RHDH on the admin dashboard and Pipelines/Serverless on the dev add page) #13303
CONSOLE-3693: Upgrade to PFv5 versions #12983
ODC-7425: Add serverless function icon in Add page group header #13338
OCPBUGS-20016: account for useK8sWatchResource returning {} like it does f… #13347
ODC-7383, ODC-7384, ODC-7385: Update the PipelineRun and TaskRun details page to use Tekton Results API to load all the info #13328
ODC-7424: Add e2e tests for vulnerabilities column in pipelinerun list and details page #13335
OCPBUGS-23164: Cannot Edit Shipwright Build #13341
ODC-7382, ODC-7395: add support for tektonresult api to load PipelineRuns #13311
ODC-7421: Show vulnerability column in the pipelinerun list page #13329
ODC-7424: add e2e tests for SBOM section and output tab #13325
OCPBUGS-23292: Webpack-DevServer Hot-Reload Not Working #13331
CONSOLE-3823: Split auth config to its own module #13261
ODC-7423: move pipelinerun results to output tab #13323
ODC-7399: Create getting started content in functions list page #13289
ODC-7422: Add SBOM link and signed badge in PLR details page #13314
CONSOLE-3618: Remove frontend multicluster code #13245
CONSOLE-3777: Update NodeJS v14 to v18 #13213
ODC-7414: Update Shipwright API from v1alpha1 to v1beta1 #13304
OCPBUGS-20016: improve labels and annotations modal display and editi… #13295
CONSOLE-3695: Add details item extension to console dynamic plugin SDK #13240
CONSOLE-3814: Conditionally render “Users” and “Groups” nav items #13287
OCPBUGS-23110: Disable Pipelines E2E Tests #13318
CONSOLE-3740: Address memory issues in CI #13309
CONSOLE-3614: Remove multicluster code from Bridge #13244
CONSOLE-3822: Update obsolete deps #13294
OCPBUGS-22930: remove expandable toggle for conditional update risk d… #13306
OCPBUGS-22749: Adjust NAD name by using unique-names-generator #13263
CONSOLE-3781: remove cypress.config comments #13301
CONSOLE-3819: change Cypress’ default browser to Electron #13300
OCPBUGS-19916: Fix MachineSetList capacity logic #13259
CNV-30298: Add UI for OVN Secondary Localnet Network #13293
OCPBUGS-19875: Fix plugin proxy handler #13272
CONSOLE-3808: Remove Protactor from console-plugin-sdk #13283
OCPBUGS-22747: Display “With Data upload form” in Create PVC drop down once #13292
CONSOLE-3811: remove shared Protractor files #13282
ODC-7409: Use @kubernetes-models/shipwright types in shipwright-plugin #13267
CONSOLE-3788: remove local-storage-operator-plugin Protractor tests #13291
CONSOLE-3788: remove network-attachment-definition-plugin Protractor … #13286
ODC-7386: Ensure the Import Form gets submitted without errors if BC is not installed while Pipelines is installed #13145
CONSOLE-3788: migrate console Protractor tests to Cypress #13257
OCPBUGS-22419: Fix the forms when BC is not installed in the cluster #13241
CONSOLE-3788: remove cnv console tests #13280
OCPBUGS-10562: fix operator uninstall test #13214
CONSOLE-3740: remove references to removed packages #13281
OCPBUGS-22213: Fix links for CodeEditor component #13274
CONSOLE-3816: Goodbye! #13255
OCPBUGS-19458, OU-241: Remove unused Observe > Metrics page code #13114
OCPBUGS-20295: clarify Operator installMode error message #13232
CONSOLE-3740: fix bug where renamed tests weren’t updated #13275
OCPBUGS-22284: updating doc links for 4.14 GA #13266
OCPBUGS-22199: Save also the location.search and .hash values in localStorage to restore them after login #13268
OCPBUGS-22213: Fix links for CodeEditor component #13265
OCPBUGS-19970: Workloads-AddPage: upload JAR file’s i18n misses #13264
OCPBUGS-16756: Cluster dropdown items are not marked for i18n when ACM/MCE installed #13238
OCPBUGS-20362: Delete results.tekton.dev annotations before rerun the pipelineRun #13230
OCPBUGS-9422: Telemetry- Current page was sometimes not tracked when reloading the current page #13088
CONSOLE-3740: check that user dropdown is present to verify logged in #13260
CONSOLE-3812: remove packages/ceph-storage-plugin/integration-tests #13249
CONSOLE-3809: remove orphaned OLM Protractor views #13248
OCPBUGS-19783: Channel page shows “Required” message for the default name when navigate to create channel page #13222
OCPBUGS-20229: Service details page shows revisions and routes from other service also #13221
CONSOLE-3766: Update i18next-parser dev dependency in console #13197
CONSOLE-3740: follow-on fixes and cleanup for Cypress upgrade #13242
OCPBUGS-20305: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13236
OCPBUGS-19714: hide page-specific doc links for ROSA and OSD #13229
chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 242 #13201
OCPBUGS-21616: Fix empty editor error #13176
ODC-7401: Remove protractor from dev-console and knative plugins #13247
ODC-7400: Fix e2e for dev-console, knative, topology, helm and pipeline packages #13231
CONSOLE-3740: Upgrade Cypress #13070
CONSOLE-3758: add support for new features annotations while preserv… #13183
ODC-7396: Add Pipeline metrics tab using plugin #13225
CONSOLE-3084: frontend/packages/console-shared/src/hooks/useCanClusterUpgrade: Not ROSA #13184
CONSOLE-3675: Dynamic Demo Plugin: Add dashboard card with chart using QueryBrowser component #13105
OCPBUGS-20270: Add instructions to the README for running the monitoring plugin locally #13226
OCPBUGS-16736: use setTimeout to allow model to be created #13195
OCPBUGS-4242: Fix CSV list and details page managed namespaces for copied CSVs. #13194
OCPBUGS-19970: Home-Projects-Default-workloads-AddPage: upload JAR file’s i18n misses #13208
OCPBUGS-19966: Builds - BuildConfigs : i18n misses #13211
OCPBUGS-19437: API docs content issue (additional fixes) #13198
ODC-7377, ODC-7378: Add Revisions, Routes and Pods tab for service details page #13174
CONSOLE-3763: Update null-loader dev dependency in console #13154
OCPBUGS-7893: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13077
OCPBUGS-14322: fix ResourceLog permissions when impersonating #13196
ODC-7391: Add a new allowInsecure option to the internet proxy API #13175
OCPBUGS-19743: Fix Invalid URL crash #13192
OCPBUGS-18267: 404 - not found will show on Knative-serving Details page #13156
OCPBUGS-17676: Enable white space retain in resource logs #13101
OCPBUGS-4426: All Projects’ dropdown”: Roles and RoleBindings “before all” hook for “test Roles detail page breadcrumbs to list page restores #13190
OCPBUGS-8777: Don’t redirect after logout from login error route #13102
OCPBUGS-9157: ‘Create Pod’ button should be disabled for normal user … #13040
OCPBUGS-19640: Dont render ARN mode role field and warning for HyperShift clusters #13191
OCPBUGS-19437: API docs content issue #13180
OCPBUGS-19546: Set unlimited line width in YAML editor #13182
OCPBUGS-19413: Fix demo dynamic plugin dev mode cypress tests #13172
OCPBUGS-19367: Console should not panic when no response is retrieved for plugin assets #13166
OCPBUGS-19394: document kebab menu cell props #13177
OCPBUGS-13152: fetch TaskRuns without selector and reduces the get TaskRuns requests #13065
OCPBUGS-9719: Correct logout process #10177
OCPBUGS-18832: change resource icon for FenceAgentRemediationTemplate… #13162
OCPBUGS-18996: fix issues with refactored “Create StorageClass” form #13153
OCPBUGS-19173: Updating openshift-enterprise-console images to be consistent with ART #13157
OCPBUGS-11286: Check if filtered object contains name property #12810
OCPBUGS-18464: Hide the Builds NavItem if BuildConfig is not installed in the cluster #13141
OCPBUGS-18494: Upgrade DomainMapping apiVersion to v1beta1 #13133
OCPBUGS-19314: Hide the DeploymentConfig option in the User Preferences if that resource type isn’t available #13130
OCPBUGS-6515: address ConsoleExternalLogLink test flake #13110
OCPBUGS-9285: Remove redundant break line #13109
OCPBUGS-5571: Update API docs content based on docs review #13108
OCPBUGS-3403: Fix resource table sorting crash #13103
OCPBUGS-17203: mock apis for git repo in test serverless function tests #13064
OCPBUGS-19313: Hide DeploymentConfig option from forms when it’s not installed in the cluster #13129
OCPBUGS-19311: Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster #13128
OCPBUGS-18188: Added React Icon #13111
OCPBUGS-18485: Monitoring: Fix display of silenced alerts in dev console #13151
OCPBUGS-6513: Fixed Edit Application form for Knative Services #12832
OCPBUGS-129: bump @patternfly/react-core to v4.276.11 to pick up Sele… #13092
OCPBUGS-18439: use active namespace in Create cta href of create action for operator backed #13132
Full changelog

console-operator

CONSOLE-4047: Console-operator should be internally using listers for fetching data #901
OCPBUGS-33505: Add missing return statement to fix crash in healthcheck controller #900
OKD-214: Dockerfile: Add ARG TAGS=ocp #896
TRT-1664: Revert #895 “CONSOLE-4047: Console-operator should be internally using listers for fetching data” #899
CONSOLE-4047: Console-operator should be internally using listers for fetching data #895
CONSOLE-3943: Default telemetry values #890
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #893
TRT-1623: Revert “Merge pull request #889 from jhadvig/CONSOLE-4014” #892
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #889
OCPBUGS-20129: Fix triggering upgradenotification in the cluster installation time #790
OCPBUGS-20466: Tighten console operator permissions for cluster operators #873
OCPBUGS-32400: base OIDC status updates on the ExternalOIDC feature gate #887
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #868
OCPBUGS-30458: Bump k8s.io/component-base to latest #884
CONSOLE-3944, OCPBUGS-31020: Disable segment analytics when cluster telemetry is disabled #877
CONSOLE-3910: Add quickstart to impersonate a system:admin user #865
OCPBUGS-31482: oidc: synchronize the CM with a CA to trust the issuer, if configured #879
OCPBUGS-29331: Update RHDH QuickStarts and add CR examples #878
OCPBUGS-24913: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.16 #827
OCPBUGS-28541: Remove Janus IDP and update RHDH quickstarts #862
OCPBUGS-29479: Add startupProbe to console container. #869
OCPBUGS-29532: ouathclients: further split oidc and integrated oauth handling #861
CONSOLE-3912: always sync oidcClients in authn status if the field is present #857
OCPBUGS-28982: oauthclients: fix oauthclients degraded condition that never gets removed #855
CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #847
CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #849
OCPBUGS-27335: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #841
CONSOLE-3912: Merge auth cert configmap deployment annotations into one #842
OCPBUGS-25484: make it impossible double set conditions in a single loop #848
CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #839
OCPBUGS-27335: The console-deployment should set the number of replicas based on the ControlPlaneTopology #838
NO-JIRA:(chore) remove unused loglevel #830
OCPBUGS-25484: Bump library-go to deal with GET conflict #836
OCPBUGS-24041: Prevent healthcheck controller from Available=False blipping #834
OCPBUGS-7656: Remove service ca controller annotation from console-redirect service. #826
OCPBUGS-15827: Revert #831 and fix cluster proxy annotation on console conversion webhook deployment #833
Revert #822 “OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher” #831
OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher #822
OCPBUGS-25618: Bump documentationBaseURL to 4.16 #824
OCPBUGS-24913: Updating openshift-enterprise-console-operator-container image to be consistent with ART #823
CONSOLE-3804: Reapply separation of the oauthclients controller #814
CONSOLE-3652: Create StorageVersionMigration for ConsolePlugin CRD v1 migration #816
OCPBUGS-24203: ConsolePlugin metrics must no longer be grouped by the vendor #819
CONSOLE-3791: Add “readOnlyRootFilesystem” to all console conta… #809
OCPBUGS-23300: Disable route controller health check for NLB setup #815
ODC-7418: Add Janus IDP and RHDH Quick starts #806
TRT-1361: Revert #808 “CONSOLE-3804: split oauthclient controller from the common logic” #813
CONSOLE-3804: split oauthclient controller from the common logic #808
CONSOLE-3613: Update vendor bundle after removing multicluster code #810
CONSOLE-3613: Remove multicluster code from console operator #799
OCPBUGS-21972: Disable HTTP/2 for webhook #802
OCPVE-719: feat: add support for olm capability #795
HOSTEDCP-1250: remove redundant cert check #801
CONSOLE-3717: Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests #782
OCPBUGS-19173: Updating openshift-enterprise-console-operator images to be consistent with ART #794
OCPBUGS-19080: Reset console operator’s conditions #796
Full changelog

container-networking-plugins

OCPBUGS-32212: modify to invoke SAST test #159
OCPBUGS-28559: Updating ose-containernetworking-plugins-container image to be consistent with ART for 4.16 #150
USHIFT-2219: Dockerfile for MicroShift #153
OCPBUGS-29888: cherry-pick containernetworking/plugins#997 #154
OCPBUGS-24810: Updating ose-containernetworking-plugins-container image to be consistent with ART #146
OCPBUGS-24810: Updating ose-containernetworking-plugins-container image to be consistent with ART #145
OCPBUGS-24810: Updating ose-containernetworking-plugins-container image to be consistent with ART #142
NP-807: Upstream sync Nov 2023 #139
OCPBUGS-21906: Bumps x/net + upstream sync november 2023 #128
OCPBUGS-19127: Updating ose-containernetworking-plugins images to be consistent with ART #122
Full changelog

coredns

OCPBUGS-35296: UPSTREAM: 6692: openshift: Fix OCPBUGS-35296 #123
CFE-963: UPSTREAM: <carry>: openshift: Move ocp_dnsnameresolver before cache in plugin chaining order #116
OCPBUGS-31768: UPSTREAM: <carry>: Address CVE-2023-49295 and CVE-2024-22189 #108
CFE-963: UPSTREAM: <carry>: openshift: Add ocp_dnsnameresolver external plugin #115
OCPBUGS-27928: Updating coredns-container image to be consistent with ART for 4.16 #111
OCPBUGS-27397: UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 #109
OCPBUGS-24957: Updating coredns-container image to be consistent with ART #107
OCPBUGS-15755: UPSTREAM: <carry>: openshift: Fix OCPBUGS-15755 #105
OCPBUGS-21936: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #101
OCPBUGS-13968: Merge 1.11.1 #94
OCPBUGS-19216: Updating coredns images to be consistent with ART #95
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-13680: Allow changing cluster-name on existing deployments #276
OCPBUGS-29605: Remove enforcement of IPv6 LB as internal #275
NO-JIRA: More snyk ignores #265
don’t use static version in sed replacement rules #2510
bump k8s e2e test to 1.29 #2509
update docs in order to reflect the current state of the ovn lb-provider support #2489
update CSI version #2478
update tags #2204
Full changelog

csi-driver-manila-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #229
STOR-1574: Bump all deps #226
OCPBUGS-28934: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 #227
NO-ISSUE: Remove local manifests #208
STOR-1574: Bump library-go #225
OCPBUGS-23809: Bump opentelemetry libs #220
STOR-1714: Release leadership on SIGTERM #223
STOR-1688: Chore: add .snyk file to ignore false positives #218
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #217
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #214
OCPBUGS-24824: Updating csi-driver-manila-operator-container image to be consistent with ART #213
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #212
OCPBUGS-9331: Fix selector for manila-csi-driver-controller-metrics service #210
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #207
OCPBUGS-21940: Update k8s.io/apimachinery and k8s.io/apiserver #206
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #205
OCPBUGS-19166: Updating csi-driver-manila-operator images to be consistent with ART #204
Full changelog

csi-driver-nfs

OCPBUGS-30439: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #139
NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #138
NO-JIRA: Add snyk configuration file #137
OCPBUGS-24952: Updating csi-driver-nfs-container image to be consistent with ART #136
OCPBUGS-24131: Updating csi-driver-nfs-container image to be consistent with ART #135
OCPBUGS-21829: Merge upstream #133
OCPBUGS-21829: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
OCPBUGS-19212: Updating csi-driver-nfs images to be consistent with ART #129
Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #128
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

BUILD-877: BUILD-887: Add konflux config for push and pull request #183
BUILD-961: use separate dockerfile for using catalog images #180
OCPBUGS-33513: Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.16 #178
OCPBUGS-33511: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.16 #177
BUILD-957: Update Images with Red Hat Catalog Images #173
BUILD-953: Compare to Other Secret Stores #176
BUILD-953: Simplify README #174
OCPBUGS-30501: bump google.golang.org/grpc to 1.63.0 #172
OCPBUGS-29871: Apply hypershift cluster-profile for ibm-cloud-managed #171
OCPBUGS-28663: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #165
OCPBUGS-27860, OCPBUGS-28261: address SAST/SNYK findings #164
OCPBUGS-26081, OCPBUGS-26114, OCPBUGS-26145: add snyk config file for SAST scan #161
OCPBUGS-24984: Updating ose-csi-driver-shared-resource-container image to be consistent with ART #159
OCPBUGS-25035: Updating ose-csi-driver-shared-resource-mustgather-container image to be consistent with ART #160
OCPBUGS-24903: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART #158
OCPBUGS-24310: Updating ose-csi-driver-shared-resource-container image to be consistent with ART #157
OCPBUGS-24096: Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART #156
OCPBUGS-23108: Should reference configmaps instead of secrets #151
OCPBUGS-19155: Updating ose-csi-driver-shared-resource images to be consistent with ART #143
OCPBUGS-21730: bump golang.org/x/net to v0.17.0 #145
OCPBUGS-19291: Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #144
OCPBUGS-19155: Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #142
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #107
STOR-1574: Bump all deps #100
OCPBUGS-28941: Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART for 4.16 #101
OCPBUGS-28664: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #99
STOR-1574: Bump library-go #98
OCPBUGS-26087: add snyk config file for SAST scan #95
OCPBUGS-24855: Updating ose-csi-driver-shared-resource-operator-container image to be consistent with ART #94
OCPBUGS-23855: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #93
STOR-1402: Chore: update libraries in all operators [4.15] #92
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #90
OCPBUGS-21724: bump golang.org/x/net to v0.17.0 #85
OCPBUGS-19246: Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #84
Full changelog

csi-external-attacher

STOR-1573: Rebase external-attacher to v4.5.1 for OCP 4.16 #72
OCPBUGS-30437: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #71
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #70
OCPBUGS-25576: Updating csi-attacher-container image to be consistent with ART #69
STOR-1688: Chore: add .snyk file to ignore false positives #68
OCPBUGS-25053: Updating csi-attacher-container image to be consistent with ART #67
OCPBUGS-24966: Updating csi-attacher-container image to be consistent with ART #66
OCPBUGS-24139: Updating csi-attacher-container image to be consistent with ART #65
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59
STOR-1404: Rebase external-attacher to v4.4.0 for OCP 4.15 #58
OCPBUGS-19225: Updating csi-attacher images to be consistent with ART #57
Full changelog

csi-external-provisioner

STOR-1573: Rebase external-provisioner to v4.0.1 for OCP 4.16 #95
OCPBUGS-30442: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #94
OCPBUGS-29971: Updating csi-provisioner-container image to be consistent with ART for 4.16 #93
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #88
OCPBUGS-25492: UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #85
OCPBUGS-25532: Updating csi-provisioner-container image to be consistent with ART #84
STOR-1688: Chore: add .snyk file to ignore false positives #83
OCPBUGS-22528, OCPBUGS-23812: UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs #81
OCPBUGS-25082: Updating csi-provisioner-container image to be consistent with ART #80
OCPBUGS-24804: Updating csi-provisioner-container image to be consistent with ART #79
OCPBUGS-23062: UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #78
OCPBUGS-22528: UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #77
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #71
STOR-1404: Rebase external-provisioner to v3.6.0 for OCP 4.15 #70
OCPBUGS-19114: Updating csi-provisioner images to be consistent with ART #69
Full changelog

csi-external-resizer

STOR-1573: Rebase external-resizer to v1.10.0 for OCP 4.16 #160
OCPBUGS-30502: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #159
OCPBUGS-29984: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 #158
OCPBUGS-25540: Updating ose-csi-external-resizer-container image to be consistent with ART #154
STOR-1688: Chore: add .snyk file to ignore false positives #153
OCPBUGS-24846: Updating ose-csi-external-resizer-container image to be consistent with ART #152
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #146
STOR-1404: Rebase external-resizer to v1.9.0 for OCP 4.15 #145
OCPBUGS-19224: Updating ose-csi-external-resizer images to be consistent with ART #144
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-31746: Backport volumegroupsnapshot fixes to OCP 4.16 #148
OCPBUGS-31439: Backport volumegroupsnapshot fixes to OCP 4.16 #146
STOR-1573: Rebase external-snapshotter to v7.0.1 for OCP 4.16 #145
OCPBUGS-30503: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #144
STOR-1700: Rebase external-snapshotter to v7.0.0 to get VolumeGroupSnapshot #139
OCPBUGS-24996: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #137
STOR-1688: Chore: add .snyk file to ignore false positives #133
OCPBUGS-25548: Updating ose-csi-snapshot-controller-container image to be consistent with ART #135
OCPBUGS-25575: Updating ose-csi-external-snapshotter-container image to be consistent with ART #136
OCPBUGS-24996: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #132
OCPBUGS-25052: Updating ose-csi-external-snapshotter-container image to be consistent with ART #131
OCPBUGS-25124: Updating ose-csi-snapshot-controller-container image to be consistent with ART #130
OCPBUGS-24996: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #129
OCPBUGS-24964: Updating ose-csi-external-snapshotter-container image to be consistent with ART #128
OCPBUGS-24866: Updating ose-csi-snapshot-controller-container image to be consistent with ART #127
OCPBUGS-24330: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #124
OCPBUGS-24338: Updating ose-csi-external-snapshotter-container image to be consistent with ART #123
OCPBUGS-24329: Updating ose-csi-snapshot-controller-container image to be consistent with ART #121
OCPBUGS-24244: Updating ose-csi-external-snapshotter-container image to be consistent with ART #118
OCPBUGS-24160: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #116
OCPBUGS-24244: Updating ose-csi-external-snapshotter-container image to be consistent with ART #117
OCPBUGS-24071: Updating ose-csi-snapshot-controller-container image to be consistent with ART #115
OCPBUGS-23010: UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false #114
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #108
STOR-1404: Rebase external-snapshotter to v6.3.0 for OCP 4.15 #107
OCPBUGS-19260: Updating csi-snapshot-validation-webhook images to be consistent with ART #106
OCPBUGS-19223: Updating ose-csi-external-snapshotter images to be consistent with ART #105
OCPBUGS-19100: Updating ose-csi-snapshot-controller images to be consistent with ART #104
Full changelog

csi-livenessprobe

STOR-1573: Rebase livenessprobe to v2.12.0 for OCP 4.16 #64
OCPBUGS-30440: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #63
OCPBUGS-29972: Updating csi-livenessprobe-container image to be consistent with ART for 4.16 #62
OCPBUGS-25534: Updating csi-livenessprobe-container image to be consistent with ART #58
STOR-1688: Chore: add .snyk file to ignore false positives #57
OCPBUGS-25093: Updating csi-livenessprobe-container image to be consistent with ART #56
OCPBUGS-24815: Updating csi-livenessprobe-container image to be consistent with ART #55
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #49
STOR-1404: Rebase livenessprobe to v2.11.0 for OCP 4.15 #48
OCPBUGS-19132: Updating csi-livenessprobe images to be consistent with ART #47
Full changelog

csi-node-driver-registrar

STOR-1573: Rebase node-driver-registrar to v2.10.0 for OCP 4.16 #70
OCPBUGS-30441: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #69
OCPBUGS-29987: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 #68
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #64
OCPBUGS-25544: Updating csi-node-driver-registrar-container image to be consistent with ART #62
STOR-1688: Chore: add .snyk file to ignore false positives #61
OCPBUGS-25117: Updating csi-node-driver-registrar-container image to be consistent with ART #59
OCPBUGS-23811: UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs #58
OCPBUGS-24856: Updating csi-node-driver-registrar-container image to be consistent with ART #57
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
STOR-1404: Rebase node-driver-registrar to v2.9.0 for OCP 4.15 #50
OCPBUGS-19247: Updating csi-node-driver-registrar images to be consistent with ART #49
Full changelog

docker-builder

OCPBUGS-30672: bump go-jose to fix CVE-2024-28176 #386
OCPBUGS-31930: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #385
OCPBUGS-24746: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #382
BUILD-854: Add adambkaplan as approver #380
OCPBUGS-28661: Replace ‘coreydaley’ with ‘sayan-biswas’ #377
OCPBUGS-23128: bump github.com/containers/buildah to fix transient mounting in chroot isolation #358
OCPBUGS-22497: Add -p flag to cp command to preserve timestamps #369
OCPBUGS-21969: Mitigate CVE-2023-39325 #361
OCPBUGS-20407: drop the Overlay setting from transient mounts #359
OCPBUGS-18855: Updating openshift-enterprise-builder images to be consistent with ART #357
Full changelog

docker-registry

OCPBUGS-34779: Use SAR instead of SSAR #403
OCPBUGS-29233: vendor: bump aws-sdk-go to support ca-west-1 #395
OCPBUGS-29003: update distribution with bugfix #392
OCPBUGS-26173: Updating openshift-enterprise-registry-container image to be consistent with ART #390
OCPBUGS-24902: Updating openshift-enterprise-registry-container image to be consistent with ART #389
OCPBUGS-24902: Updating openshift-enterprise-registry-container image to be consistent with ART #388
OCPBUGS-24095: Updating openshift-enterprise-registry-container image to be consistent with ART #387
CORS-2985: Add support for il-central-1 region in AWS #386
IR-401: pkg/dockerregistry/server/configuration: remove OPENSHIFT_DEFAULT_REGISTRY support #378
OCPNODE-1800: Allow ICSP IDMS coexisting #377
OCPBUGS-19154: Updating openshift-enterprise-registry images to be consistent with ART #379
OCPBUGS-18999: increase rest.Config QPS and Burst #380
Full changelog

driver-toolkit

Adding the + char to the RT kernel version. (#156) #156
ART bash parser is failing on [[…]] syntax Replace with sh compatible syntax. (#152) #152
Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#150) #150
Use a default RHEL_VERSION when the build argument is not specified (#148) #148
Add importMode and set it to PreserveOriginal to import (#144) #144
MCO-392: Start using rhel-coreos image rather than machine-os-content. (#142) #142
apply hypershift cluster-profile (#143) #143
Add support for 64k pages with ARM64 (#140) #140
Updating driver-toolkit-container image to be consistent with ART (#139) #139
MGMT-16313: Add support for C++ build (#137) #137
Revert “Start using rhel-coreos image rather than machine-os-content (#135)” (#136) #135
Start using rhel-coreos image rather than machine-os-content (#135) #135
Updating driver-toolkit images to be consistent with ART (#134) #134
Full changelog

egress-router-cni

OCPBUGS-28581: Updating ose-egress-router-cni-container image to be consistent with ART for 4.16 #80
OCPBUGS-24860: Updating ose-egress-router-cni-container image to be consistent with ART #79
OCPBUGS-18003: Ensure that IP forwarding is enabled #77
OCPBUGS-19258: Updating egress-router-cni images to be consistent with ART #76
Full changelog

etcd

CORS-3191: DOWNSTREAM <carry>: add native binary to installer images #269
CORS-3249: DOWNSTREAM <carry>: installer: make etcd binaries static #268
CORS-3249: DOWNSTREAM <carry>: add installer Dockerfile for ART builds #267
OCPBUGS-31624: Rebase etcd 3.5.13 openshift 4.16 #259
no-issue: Update Installer dockerfile to use golang-1.20 #251
OCPBUGS-28730: Rebase etcd 3.5.12 openshift 4.16 #242
CORS-3191: Add Dockerfile to build etcd for openshift-installer #249
OCPBUGS-24988: Updating ose-etcd-container image to be consistent with ART #236
OCPBUGS-24931: Rebase etcd 3.5.11 openshift 4.16 #237
OCPBUGS-19279: Updating ose-etcd images to be consistent with ART #215
OCPBUGS-20560: [4.15] Rebase openshift/etcd to 3.5.10 #224
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-2463: Adds auth-provider-gcp .spec file and build script #58
OCPBUGS-22598: Merge https://github.com/kubernetes/cloud-provider-gcp:master (58ec6ae) into master #53
OCPBUGS-25754: Add Snyk file to exclude vendor directory on scan #54
OCPBUGS-24044: Merge https://github.com/kubernetes/cloud-provider-gcp:master (522e293) into master #40
OCPBUGS-25581: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART #52
OCPBUGS-24981: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART #48
OCPBUGS-24152: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART #47
OCPBUGS-22043: Bump golang.org/x/net to v0.18.0 #46
OCPBUGS-23094: Fix commit label for commits #41
OCPCLOUD-2185: Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master #36
Update OWNERS #39
OCPBUGS-19243: Updating ose-gcp-cloud-controller-manager images to be consistent with ART #38
OCPBUGS-5755: Reuse instance-groups for internal load balancers #35
Full changelog

gcp-cluster-api-controllers

OCPBUGS-33170: Container fallback to logs on error #224
OCPBUGS-28331: add test directory to snyk excludes #220
OCPBUGS-30586: fix e2e tests on release branches #222
OCPCLOUD-2445: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.6.0 (be17146) into master #221
OCPBUGS-26143: Fix formatting in snyk vendor exclusions #219
OCPBUGS-24875: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART #215
OCPBUGS-25628: Add Snyk file to exclude vendor directory on scan #216
OCPCLOUD-2255: Update manifests-gen tool #214
OCPCLOUD-2256: No-op change to trigger image rebuild #211
Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART #210
OCPCLOUD-2257: Use manifests generation tool from provider repo #209
OCPCLOUD-2218: UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases #208
OCPCLOUD-2218: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master #207
Update OWNERS #201
OCPBUGS-19116: Updating ose-gcp-cluster-api-controllers images to be consistent with ART #200
Full changelog

gcp-machine-controllers

OCPBUGS-30520: Bump protobuf to v1.34.0 #82
CFE-684: Add user defined tags to the created gcp resource #54
OCPBUGS-27866: Update Snyk file to exclude other vendor folders #81
OCPCLOUD-2427: Rebase k8s to 1.29 and update dependencies #78
OCPBUGS-26128: Add Snyk file to exclude vendor directory on scan #77
OCPBUGS-25578: Updating ose-machine-api-provider-gcp-container image to be consistent with ART #75
OCPBUGS-24970: Updating ose-machine-api-provider-gcp-container image to be consistent with ART #73
OCPBUGS-24143: Updating ose-machine-api-provider-gcp-container image to be consistent with ART #72
OCPBUGS-2117: Add extra check to termination handler #71
MIXEDARCH-258: Set the capacity annotation for arch-aware autoscale from zero #60
Update OWNERS #63
OCPBUGS-21792: Bump x/net package to v0.17.0 #62
OCPCLOUD-2191: Update to Kube 1.28 #59
OCPBUGS-20267: update bad url endpoint termination handler test #61
OCPBUGS-19228: Updating ose-machine-api-provider-gcp images to be consistent with ART #58
Full changelog

gcp-pd-csi-driver

OCPBUGS-30511: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #60
STOR-1581: Rebase to new upstream version 1.13.0 #59
OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #58
OCPBUGS-25553: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART #56
STOR-1688: Chore: add .snyk file to ignore false positives #55
OCPBUGS-25138: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART #54
OCPBUGS-24886: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART #53
OCPBUGS-24084: Move builder and base image to RHEL 9 #52
STOR-1392: Rebase to v1.12.2 for OCP 4.15 #50
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #43
OCPBUGS-19134: Updating ose-gcp-pd-csi-driver images to be consistent with ART #42
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #119
OCPBUGS-26924: Add node registrat healthcheck #118
STOR-1574: Bump all deps #116
OCPBUGS-28939: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.16 #117
STOR-1574: Bump library-go #115
OCPBUGS-26486: Increase data source provision timeout #112
STOR-1714: Release leadership on SIGTERM #110
STOR-1688: Chore: add .snyk file to ignore false positives #105
OCPBUGS-25541: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART #106
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #104
OCPBUGS-25113: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART #101
OCPBUGS-23859: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #98
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #100
OCPBUGS-24847: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART #99
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #97
OCPBUGS-22600: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #94
STOR-1276: Enable support for mounting volumes with SELinux context #81
Add clone test for gcp-pd-csi-driver #92
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #93
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #86
OCPBUGS-19229: Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #85
Full changelog

haproxy-router

CFE-1020: feature:route external certificate reference #565
OCPBUGS-29373: generateHAProxyCertConfigMap: No H2 with dup certs #589
OCPBUGS-26498: Optimize Upgrade Validation plugin by skipping unnecessary changes #587
OCPBUGS-26498: Make ingressConditionsEqual more efficient #588
OCPBUGS-29690: Count active services before setting weight to 1 #576
“OCPBUGS-26498: Add Upgrade Validation force arguments for running E2E tests” #575
OCPBUGS-26498: Reject routes with SHA1 certs #552
OCPBUGS-26498: Upgrade Validation plugin for SHA1 certs #555
OCPBUGS-32044: Introduce ‘idle-close-on-response’ option for frontends #573
OCPBUGS-22739: Properly handle rewrite-target annotation #534
NO-JIRA: hack/Dockerfile.debug: use ubi9 for base image #567
OCPBUGS-30314: Refactor logging in DoHTTPProbe to avoid serialisation errors #566
NE-1444: Bump HaProxy to the latest version 2.8 #563
TRT-1507: Revert #551 “NE-1444: Upgrade OpenShift Router to HAProxy 2.8” #561
NE-1444: Upgrade OpenShift Router to HAProxy 2.8 #551
OCPBUGS-26539: Reject routes with MD5 certs #553
OCPBUGS-25546: Updating ose-haproxy-router-base-container image to be consistent with ART #550
NO-JIRA: hack - fix broken RPM link and use UBI image in Dockerfile.debug, use podman in Makefile.debug #544
OCPBUGS-25029: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART #547
NE-1446: Update to RHEL9 base image #548
OCPBUGS-24859: Updating ose-haproxy-router-base-container image to be consistent with ART #546
OCPBUGS-23743: Bump k8s.io/* packages to v0.28.3 #542
OCPBUGS-21973: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #529
OCPBUGS-21803: haproxy-template: Add ‘no strict-limits’ to address HAProxy 2.6 issue #527
OCPBUGS-19287: Updating openshift-enterprise-haproxy-router images to be consistent with ART #513
OCPBUGS-19249: Updating ose-haproxy-router-base images to be consistent with ART #512
OCPBUGS-16707: UniqueHost: Fix incorrect identification of conflicting route #508
Full changelog

hyperkube, pod

OCPBUGS-27074: UPSTREAM: <carry>: extend termination events #1980
OCPBUGS-34545: UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel #1985
OCPBUGS-33710: Bump k8s API to 1.29.5 #1972
UPSTREAM: <carry>: OCPBUGS-34102: force static build of linux binaries #1978
OCPBUGS-33574: bump openshift/library-go@e22d25a #1967
OCPBUGS-32934: UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods #1966
no-jira: UPSTREAM <carry>: add native build to installer image #1961
API-1809: Provide SCC access via RBAC #1959
NO-JIRA: UPSTREAM: <carry>: Revert create readyz event for kubeapi server #1957
OCPBUGS-20097: Migrate tools image to RHEL9 #1954
OCPBUGS-32296: Bump K8s api to 1.29.4 #1947
OCPBUGS-22301: UPSTREAM: <carry>: Fix garbage-collection for CRDs. #1811
OCPBUGS-26440: UPSTREAM: <carry>: create readyz event for kubeapi server #1914
UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads #1902
CFE-910: RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator #1904
NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL #1944
CFE-910: bump library-go #1941
OCPBUGS-11933: UPSTREAM: <drop>: bump apiserver-library-go #1910
OCPBUGS-31663: UPSTREAM: <carry>: add management workload check for guaranteed qos #1928
OCPBUGS-30957: Use the right feature gate when updating uncertain … #1919
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1932
OCPNODE-1886: Bump k8s 1.29.3 #1925
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1929
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1924
OCPBUGS-30767: UPSTREAM: 124110: retry policy creation for CRD type checking E2E test #1922
OCPBUILD-13: UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated #1909
CFE-910: [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver #1852
UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check #1892
OCPBUGS-30954: Set up CEL IP/CIDR library from 4.14 onwards #1911
OCPBUGS-24481: Enable SELinux tests #1908
MCO-392: openshift-hack/images/os: delete #1805
OCPBUGS-23900: UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers #1900
OCPBUGS-10996: Fix race condition between resizer and kubelet #1899
OCPBUGS-29437: Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages #1882
OCPNODE-1892: Bump k8s to 1.29.2 #1888
NO-JIRA: Clean carry patches #1880
OCPBUGS-29435: UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… #1881
CORS-3191: Add Dockerfile to buld kube-apiserver for openshift-install architectures #1872
NO-JIRA: Revert “OCPBUGS-24404: add ignore for SAST scan” #1870
OCPBUGS-24404: UPSTREAM <carry>: use snyk file #1871
OCPBUGS-26058: UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions #1841
OCPBUGS-16760: permanently disable NodeLogQuery e2e test #1792
OCPNODE-1892: Bump k8s to 1.29.1 #1858
OCPNODE-1892: Switch to golang 1.21 #1845
OCPBUGS-24606: UPSTREAM: <carry>: Update management webhook pod admission logic #1821
OCPNODE-1892: UPSTREAM: <carry>: update test rules #1849
OCPBUGS-17249: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1787
OCPNODE-1892: UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies #1848
OCPBUGS-23896: Fix device uncertain errors on reboot #1829
OCPBUGS-24404: add ignore for SAST scan #1824
AUTH-439: loosen authentication.spec.type validation #1770
OCPNODE-1892: UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade #1846
OCPBUGS-26067: Backport CEL IP and CIDR validations #1828
OCPNODE-1892: Bump k8s api to 1.29.0 #1840
OCPNODE-1895: temporarily disable reporting e2e text bugs #1836
OCPNODE-1892: Rebase 1.29.0 #1815
CNF-8809: admission: add new admission for handling shared cpus request #1799
CNF-8326: advertise shared cpus for mixed cpus feature #1795
OCPBUGS-23565: Update to kubernetes 1.28.4 #1806
OCPBUGS-23073: .spec.numberOfUsersToReport is not correctly applied in some circumstances #1794
OCPBUGS-22724: UPSTREAM: 121881: Use golang library instead of mklink #1800
OCPBUGS-16922: Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions #1790
Update REBASE.openshift.md #1788
STOR-1278: Fixes for SELinux mount context metrics #1771
Update to Kubernetes v1.28.3 #1776
openshift-hack: Fix sporadic 141 errors in build-rpms #1769
UPSTREAM: <carry>: support for both icsp and idms objects #1685
OCPBUGS-21584: UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1757
Do not allow nodes to set forbidden openshift labels #1735
OCPBUGS-20096: bump pause image to RHEL9 #1734
Revert #1731 “Revert #1703 “Update builder & base images”” #1732
Revert #1703 “Update builder & base images” #1731
Update builder & base images #1703
UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) #1726
OCPBUGS-19666: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1724
OCPBUGS-17534: UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 #1711
UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier #1714
OCPBUGS-19452: UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes #1716
Update to new openshift/* dependencies #1704
STOR-1425: Update to Kubernetes 1.28.1 #1646
OCPBUGS-16080: UPSTREAM: <carry>: watch-termination: termination.log file #1638
UPSTREAM: <carry>: disable test removed in 1.28 #1698
<carry>: Export cpu stats of ovs.slice via prometheus #1686
OCPBUGS-17654: cm: reorder setting of sched_load_balance for sandbox slice #1665
Full changelog

hypershift

OCPBUGS-35369: OCPBUGS-35252: vendor: bump openshift/api #4197
NO-JIRA: hack: make the e2e script generic #4198
OCPBUGS-35308: fix router on 4.14 y-stream upgrade #4194
HOSTEDCP-1715: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.16 #4177
HOSTEDCP-1570: remove liveness and readiness probes using metrics endpoint #4116
OCPBUGS-35052: Add missing Tag permissions to cli role #4173
OCPBUGS-34903: Allow access to root-ca configmap in cluster-network-operator role #4155
OCPBUGS-34575: Rename machine-config operator CRD references #4105
OCPBUGS-34759: add AWS STS URL to OIDC provider audiences #4134
HOSTEDCP-1688: Use operator namespace for openshift-config-managed-trusted-ca-bundle #4117
OCPBUGS-34801: remove weak cipher #4139
OCPBUGS-34773: Fix disconnected metadata inspection for nodepool #4137
OCPBUGS-34569, OCPBUGS-34602: Backports that should go in together #4114
OCPBUGS-34542: Reconcile KAS endpoints and endpoint slice #4096
OCPBUGS-34554: Fixed audit-logs sigterm failing to terminate gracefully #4090
OCPBUGS-34390: Add TrustedBundles to OAS container #4087
HOSTEDCP-1561: Move HCP Product CLI to STS #4092
HOSTEDCP-1556: Support Priority based expander for cluster-autoscaler #4068
OCPBUGS-34171: Make active & backup Azure KMS containers use different –metrics-addr #4079
NO-JIRA: Bump library-go dependency #4069
TRT-1672: e2e: proceed with teardown even if dump fails #4052
NO-JIRA: Update RHTAP references #4042
OCPBUGS-33729: Do not ignore single placeholder pods for a specific hosted cluster #4037
HOSTEDCP-1668: remove dns-operator leader-elect flags #4038
OCPBUGS-33595: Cluster sizing controller: do not error on not found HC #4023
HOSTEDCP-1655: Don’t Ignore SubnetID and Network Security Group ID flags when values are passed through #4021
HOSTEDCP-1518: Preserve container resource requests and limits #3864
HOSTEDCP-1310: use kms images from payload #3996
OCPBUGS-32257: Restrict image registry overrides to control plane components #3952
HOSTEDCP-1560: Create AWS STS Role for the hypershift/hcp cli #4003
HOSTEDCP-1566: Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies #4012
HOSTEDCP-1566: Bump CAPI dependencies #4011
OCPBUGS-33320: Fix nil dereference in clustersizingconfig validation #4016
HOSTEDCP-1525: Fixed azure using incorrect kms socket #3981
HOSTEDCP-1563: Refine the Azure API in the NodePool Spec #4004
OCPBUGS-33320: Autoscaler for non request serving nodes #4007
HOSTEDCP-1557: Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config #4006
NO-JIRA: Remove CLI inspection of release image #3548
OCPBUGS-33237: Run haproxy to connect to kas from data plane if noproxy settings contain kas #3999
OCPBUGS-26762: Disable DNS resolving for CNO #3986
MULTIARCH-4637: Set arch to ppc64le within PowerVS platform func #4002
MULTIARCH-4637: Support ppc64le arch for Agent and PowerVS platform #3979
HOSTEDCP-1544: Allow user to specify subnet ID for Hosted Cluster & NodePool Creation #3945
CNV-36073: Set time out for external snapshotter on kubevirt csi driver #3968
HOSTEDCP-1523: Bump k8s to v0.29.3 #3878
OCPBUGS-25012: Updating ose-hypershift-container image to be consistent with ART #3303
OCPBUGS-33203, OCPBUGS-33274: Autoscaler: scale down unused machinesets #3988
NO-JIRA: chore(deps): update rhtap references #3973
HOSTEDCP-1513: Add operator scoping support to nodepool controller #3928
OCPBUGS-33132: Restore ingresscontroller rbac #3965
NO-JIRA: sizing: add logging for what we’re doing #3961
chore(deps): update rhtap references #3966
NO-JIRA: Minor doc updates to creating Azure HC on AKS #3964
OCPBUGS-29110: Reconcile over ICSP/IDMS #3933
OCPBUGS-33101: Fix nil pointer deref when effects not specified in CSC #3959
OCPBUGS-32110: disable OCM pull secret controller when imageregistry config managementstate is Removed #3906
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3956
OCPBUGS-31398: Recycler-pod image now points to the OCP Payload reference #3901
HOSTEDCP-1525: Support Azure KMS key rotation #3940
CNV-40687: Detect machine and cluster-network cidr collision #3880
OCPBUGS-32930: Allow specifying resource requests per cluster size #3941
OCPBUGS-32760: Request serving scheduler: omit deleting nodes #3929
OCPBUGS-14383: fix setting replicas on autoscaler #3947
OCPBUGS-32378: Ensure placeholder deployments are deleted #3931
OCPBUGS-32255: Remove kube-scheduler readiness probe #3889
HOSTEDCP-1484: Disaster recovery documentation with OADP #3950
OCPBUGS-32492: Set ImportMode for catalog #3937
HOSTEDCP-1522: Add API definitions and CEL for AzurePlatformSpec vars #3879
NO-JIRA: Kubevirt on Azure: Change KAS LB Port to 7443 #3821
chore(deps): update rhtap references (main) #3943
OCPBUGS-30260: Ignore subnet annotations for control plane load balancers #3944
OCPBUGS-32759: Fix invalid node selector in autosizing placeholder #3930
HOSTEDCP-1044: Add NodePool Size/Replicas to Telemetry #3593
NO-JIRA: remove obsolete konnectivity image code #3932
HOSTEDCP-1219: Add arch & multi-arch flags to HCP CLI #3926
NO-JIRA: reduce autoscaling test memory requests #3938
NO-JIRA: chore(deps): update rhtap references #3934
ACM-11259: Add mapping documentation for KubeVirt CSI driver snaphotting #3925
OCPBUGS-32496: Controller to assist autoscaling for placeholder nodes #3922
Revert “Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters”” #3895
chore(deps): update rhtap references #3919
OCPBUGS-32487: Fix OLM intilization args #3918
OCPNODE-2096: Add ClusterImagePolicy to the list of valid config manifests #3894
CNV-36073: KubeVirt, Add snapshot side car and volumesnapshot class #3640
NO-ISSUE: placeholders: ignore auto-sizer placeholders #3877
OCPBUGS-32228: Fix failure to create a second hostedcluster in the same namespace #3900
OCPBUGS-32248: Replace periods with commas in subnet label value #3885
chore(deps): update rhtap references #3886
HOSTEDCP-1462: set HostPath.Type on volumesource in CloudNodeManagerD… #3892
NO-JIRA: fixed e2e teardown failing the outer test instead of subtest #3891
HOSTEDCP-1519: feat(api): Add ingress-controller-load-balancer-scope annotation #3848
NO-JIRA: remove ovnkube-control-plane from expected component token m… #3850
CNV-40622: Docs: Avoid cidr Collisions b/w Infra &Guest cluster #3863
NO-JIRA: Disable kubevirt-csi crash detection in e2e #3896
Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters” #3890
HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters #3688
chore(deps): update rhtap references #3872
OSD-19085: Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric #3697
NO-ISSUE: *: use the api package constant for the size label #3876
NO-JIRA: bump capk ci image #3830
NO-JIRA: chore(deps): update rhtap references (main) #3867
OCPBUGS-29466: Fix ICSP and IDMS inclusion as registriesOverrides #3862
STOR-1805: Set RUN_AS_USER if mgmt cluster doesn’t have SCC #3819
OCPBUGS-29494: Fix disconnected metadata inspection #3860
OCPBUGS-31012: Disable audit-log container in kas when profile is None #3765
NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster #3854
NO-JIRA: update private cluster IAM policy doc #3851
NO-JIRA: chore(deps): update rhtap references (main) #3856
OCPBUGS-14383: disable autoscaler when no nodepool requires it #3846
NO-JIRA: Document additional known issues for the disconnected scenario #3611
NO-JIRA: Update RHTAP references (main) #3834
OCPBUGS-29391: Add new permission required in CAPA #3779
CNF-11885: nto: add events resources under operator Role #3827
OCPBUGS-31444: use dnsPolicy: Default for konnectivity-agent in data plane #3810
NO-JIRA: docs: fixing wrong key name #3833
NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… #3837
OCPBUGS-31725: include hostnetwork SCC CPO role for 4.13 and earlier #3838
HOSTEDCP-1511: enable and document kubevirt custom default network #3832
HOSTEDCP-1513: Support annotation scoping for hostedcluster resources #3702
OCPBUGS-31415: update desired image even when HCP doesn’t exist yet #3829
NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. #2707
OCPBUGS-31585: disable http2 for ignition server and proxy #3817
OTA-1211: api/v1beta1/hostedcluster_types: Add spec.updateService #3576
HOSTEDCP-1365: kubevirt, Generate kccm lb endpointslices #3528
NO-JIRA: Add –auto-repair flag to hcp create nodepool #3163
NO-JIRA: Set control plane to HA by default #3788
NO-JIRA: Fix docs commands related to Azure ephemeral OS disks #3809
Update RHTAP references #3814
NO-JIRA: Documentation overview of HCP KubeVirt Storage #3763
OCPBUGS-31465: remove max function usage from deicated request serving nodes #3815
OCPBUGS-31106: Reduce log file size for hypershift apiservers #3781
HOSTEDCP-1462: Enable TestNodePool and CreateCluster tests on Azure #3732
OCPBUGS-31319: copy issuerCertificateAuthority configmap into HC openshift-config #3799
HOSTEDCP-1478: Request serving node scheduler that uses HC size label #3776
OCPBUGS-31076: Support other azure clouds #3804
OCPBUGS-31110: Fix empty RHCOSImage error when creating Azure Infrastructure #3782
HOSTEDCP-1104: Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server #3797
OCPBUGS-13726: fix race between ignition payload generation and MCS configmap update #3795
NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools #3752
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 #3710
OCPBUGS-31089: Fix empty resourceGroupName error when deleting Azure infra #3775
OCPBUGS-31090: Fix empty subnet name error when creating Azure infrastructure #3778
OCPBUGS-31263: Add missing PodSecurityViolation alert #3733
OCPBUGS-31118: fix(ignition): Fix priority class override #3784
OCPBUGS-31088: Fix loopvar issue #3770
Update RHTAP references #3790
HOSTEDCP-1104, HOSTEDCP-1105: Validate multi-arch aspects in an AWS Hosted Cluster #3769
HOSTEDCP-1501: Create default ClusterSizingConfig CR on start #3787
NO-JIRA: Remove unused ref to hostnetwork in cpo role #3789
OCPBUGS-30930: Add CEL validation for NodePool autoScaling / replicas #3786
OCPBUGS-31102: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3780
NO-JIRA: Adding Disable PKI Reconciliation annotation as an option #2989
OCPBUGS-30991: external OIDC: fix certificateAuthority field in structured auth config #3773
HOSTEDCP-1429: Add install flag to enable/disable size tagging #3766
OCPBUGS-30968: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3760
HOSTEDCP-1487: Add managed service constants to HyperShift API #3762
OCPBUGS-30260: Support subnet labels separated by periods #3767
HOSTEDCP-1429: hypershift-operator: wire up placeholder pods for sizes #3749
NO-JIRA: Increase stability in autoscaled environments #3757
NO-JIRA: Bump HO read budget in e2e to 6000 #3761
HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation #3743
HOSTEDCP-1467: ARO HCP - Add ability to specify subnet at nodepool level #3748
NO-JIRA: Update RHTAP references #3753
OCPBUGS-30260: Support specifying AWS LB subnets #3746
HOSTEDCP-1487: Add ability to set managed service type in HO #3736
NO-ISSUE: hypershift-operator: react to hosted cluster changes #3735
HOSTEDCP-1429: hypershift-operator: add a controller for t-shirt sizing #3686
HOSTEDCP-929: Add nodepool annotation to allow requesting IMDSv2 #3584
NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget #3745
OCPBUGS-30320: speed up HCP rollout durations #3734
STOR-1805: Set env var when the mgmt cluster supports SCC #3701
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3742
NO-JIRA: Update RHTAP references #3737
OCPBUGS-30242: consider nigthly images in payoad version check #3727
OCPBUGS-28634: Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES #3687
HOSTEDCP-1478: Support additional node selectors for request serving nodes #3729
Revert “HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation” #3731
OCPBUGS-13726: honor HC image configuration #3714
HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation #3689
OCPBUGS-30769: include node local client loadbalancer address in kube-apiserver signing ips #3699
NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline #3728
HOSTEDCP-1460: Remove resource limits on azure-cloud-node-manager #3725
HOSTEDCP-1479: Update IBM/networking-go-sdk package #3722
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #3718
NO-JIRA: Fixes Dependabot PR #3712 #3716
HOSTEDCP-1466: support/metrics: don’t filter HCCO metrics #3715
MCO-392: ignition-server/controllers: drop MCSIgnitionProvider #3709
HOSTEDCP-1469: Set GOMEMLIMIT annotation based on request serving node label #3708
OCPBUGS-30574: Update OLM Default Catalog Sources to 4.16 on main #3707
chore(deps): update rhtap references #3704
OCPBUGS-30242: Use cluster-config-operator for 4.14 payload #3685
NO-JIRA: Dependabot#3659 #3665
Revert “NO-JIRA: test/e2e: temporarily skip NTO machineconfig test” #3700
NO-JIRA: cleanup: nilness check failures #3698
HOSTEDCP-1464: Add pull secret to install CLI & create k8s secret #3682
OCPBUGS-30060: Set OPERATOR_IMAGE environment variable #3667
OCPBUGS-28370: Use correct return error when destroying AWS SG #3661
OCPBUGS-30301: [kubevirt] Fix virt-launcher netpol to allow missing access #3680
OCPBUGS-30124: do not set KAS OAuthMetadataFile with Authentication type OIDC #3678
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update #3658
NO-JIRA: Bump the golang-dependencies group with 1 update #3657
chore(deps): update rhtap references #3674
NO-JIRA: test/e2e: temporarily skip NTO machineconfig test #3683
NO-JIRA: chore(deps): update rhtap references #3671
NO-JIRA: Remove specific pull secret watch in HCCO #3605
OCPBUGS-30102: Support to disable machine management components #3570
NO-JIRA: Minor cleanup of Azure create cluster document #3663
NO-JIRA: chore(deps): update rhtap references #3650
OCPBUGS-29613: test: add a test for invalid CSRs #3612
NO-JIRA: test: skip CCO in pod crash check #3652
OCPBUGS-29773: set Konnectivity cipher suites #3618
OCPBUGS-30030: rollout kas on auth config change #3647
NO-JIRA: test: increase CPO mutate budget #3649
NO-JIRA: test: debug certificates on unauthz error #3642
NO-JIRA: Remove replace statements #3631
NO-JIRA: DEPENDABOT#3613 #3617
NO-JIRA: chore(deps): update rhtap references #3638
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates #3636
NO-JIRA: Bump the misc-dependencies group with 5 updates #3634
OCPBUGS-28370: Skip SG deletion if it has dependancy violation #3622
NO-JIRA: Update RHTAP references #3621
NO-JIRA: Update RHTAP references (main) #3623
OCPBUGS-23457: Switch to use service endpoint for Konnectivity #3627
OCPBUGS-27180: Update the oauth API server’s shutdown delay duration #3608
NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) #3600
OCPBUGS-29855: feat(ho): Add flag for dedicated request serving isolation #3601
OCPBUGS-28607: feat(config): Default RevisionHistoryLimit to 2 for deployments #3477
NO-JIRA: adjust pdb for oauth-apiserver #3619
OCPBUGS-29645: control-plane-pki-operator: fix CA used for SRE client credentials #3615
HOSTEDCP-1424: ARO HCP Support Disabling Outbound SNAT #3583
NO-JIRA: always set minAvailable on PDBs to 1 #3616
OCPBUGS-29723: CLI: create nodepool aws - remove sg requirement #3614
NO-JIRA: Bump the misc-dependencies group with 15 updates #3609
NO-JIRA: Ignore kubectl version mistmaches in Component Versions #3575
NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates #3598
OCPBUGS-28538: Add an SCC for validation pods with Cilium SDN #3602
NO-JIRA: chore(deps): update rhtap references #3603
HOSTEDCP-1411: Add capability to specify additional tags to azure resource… #3490
NO-JIRA: chore(deps): update rhtap references #3590
OCPBUGS-29435: Use structured authentication config #3574
HOSTEDCP-1428: hcco: report node count on HCPs #3557
HOSTEDCP-1436: Make nodepool.spec.aws.subnet required #3581
OCPBUGS-29586: use 2040 for apiserver svc in IBM provider #3569
HOSTEDCP-1438: Preserve container resources for more hosted control plane components #3120
NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements #3585
NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector #3464
NO-JIRA: remove dead code from kas config #3578
OCPBUGS-29115: Default NodeUpgradeType on day2 nodepool creation #3572
Revert “CNV-36608: Enable InPlace NodePool upgrade test for kubevirt” #3547
NO-JIRA: Update RHTAP references #3577
OCPBUGS-28538: Added docs to get other sdn providers deployed with agent provider #3405
Update RHTAP references #3568
CNF-6516: NTO: Enable PerformanceProfile #1782
OCPBUGS-29209: hypershift-operator: don’t create PKI rbac when disabled #3544
OCPBUGS-29104: control-plane-pki-operator: add a signer for SRE break-glass #3542
NO-ISSUE: test: wait longer for certificate signing, revocation #3560
NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues #3562
NO-JIRA: Developer namespace template for CI clusters #3561
HOSTEDCP-1419: Always include AWS default security group in worker security groups #3527
HOSTEDCP-1407: Add steps for seting up azure CI cluster #3545
Update RHTAP references (main) #3546
HOSTEDCP-1420: Set a fixed minimum supported version #3525
NO-JIRA: Update RHTAP references #3518
OCPBUGS-29103: control-plane-pki-operator: validate CN for CSR #3538
NO-JIRA: stevekuznetsov approver on CPPO and integration tests #3540
NO-JIRA: Fix issue with release note tool #3429
HOSTEDCP-336: Hypershift API separation #3390
HOSTEDCP-1344: control-plane-pki-operator: add a revocation controller #3339
CNV-36608: Enable InPlace NodePool upgrade test for kubevirt #3517
OCPBUGS-27282: Make ControllerAvailabilityPolicy immutable #3513
NO-JIRA: remove unneeded code to copy Authentication refs #3512
OCPBUGS-28659: Add ValidatingAdmissionPolicy to KAS config #3488
OCPBUGS-28741: Fix default release image lookup #3450
NO-JIRA: Add app labels to KubeVirt CCM component #3510
MULTIARCH-4084: Reduce the policy access scope to specific instance #3491
NO-JIRA: Bump the misc-dependencies group with 5 updates #3503
OCPBUGS-28625: cpo: honor user provided oauthmetadata configmap passed in Authentication config #3511
NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools #3505
Update RHTAP references (main) #3508
OCPBUGS-28763: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used #3494
OCPBUGS-28601: Remove webhook validations that introduce resource ordering #3484
NO-JIRA: manifests: Skip pod anti affinity for nil labels #3507
MULTIARCH-3882: Support PER solution for powervs platform via transit gateway #3277
HOSTEDCP-1408: Update CAPZ Identity Type to Service Principal #3501
OCPBUGS-27161: reflect NodePool replica count nil in status #3472
NO-JIRA: Fix dependabot pr 3414 #3453
NO-JIRA: kubevirt, e2e, Add additional network test #3449
NO-JIRA: remove PrivateIngressController cleanup #3489
HOSTEDCP-1373: ARO HCP - Add capability for Azure VMs to be created with ephemeral disks #3483
NO-JIRA: contrib: add code for aws-tag-lb-service-webhook #3493
NO-JIRA: Bump the misc-dependencies group with 3 updates #3486
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update #3469
HOSTEDCP-1364: kubevirt, use selector less services for ingress #3343
OCPBUGS-22899: node spread anti-affinity for HA HCP #3286
NO-JIRA: Bump the misc-dependencies group with 17 updates #3476
HOSTEDCP-1401: Enable BYO NSG #3455
NO-JIRA: Update go-jose to the latest version to fix CVE #3475
HOSTEDCP-1344: re-revert api stuff #3463
OCPBUGS-26940: Include OperatorHubSpec sync with HC when Config is empty #3454
NO-JIRA: Simplified kubectl component version check #3458
NO-JIRA: Remove ‘–attach-default-network’ from productized cli #3462
NO-JIRA: Tolerate restarts for kubevirt external infra #3451
NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 #3466
OCPBUGS-27366: indicate cluster profile to render the correct manifests #3443
OCPBUGS-26977: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3403
TRT-1456: Revert #3448 “api: move CSRA to a new group” #3460
HOSTEDCP-1344: api: move CSRA to a new group #3448
HOSTEDCP-1397: Add documentation on how to debug Azure nodes #3452
NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images #3426
HOSTEDCP-1308: Add e2e to ensure SA token not mounted on mgmt workloa… #3301
NO-JIRA: Fix promql testdata missing issue #3438
NO-JIRA: Update RHTAP references (main) #3446
HOSTEDCP-1188: Add docs for control plane scheduling topologies #3434
HOSTEDCP-1283: Set outbound LoadBalancer name on AzureCluster #3445
NO-JIRA: Bump misc dependencies 21f825371d #3433
HOSTEDCP-1207: Automated etcd backup #3034
NO-JIRA: Document machine configuration in HyperShift #3331
HOSTEDCP-1382: [Subtask] Restore Ability to Create HCPs on Azure #3404
HOSTEDCP-1314: Ensure all e2e HCs use NLB for ingress controller #3293
OCPBUGS-26757: Change KAS bootstrap image to cluster-config-api #3400
NO-JIRA: Improve nodepool’s machine condition message #3354
OCPBUGS-23228: Add storage, csisnapshotcontroller and clustercsidrive… #3396
OCPBUGS-27027: availability-prober: wait for infrastructure name to be set #3409
NO-JIRA: remove non-existent v1beta2 from webhook #3407
HOSTEDCP-1376: Bump the sigs.k8s-dependencies group and update dependabot groupings #3392
OCPBUGS-25696: Apply Scheduling Configuration for kCCM #3382
OCPBUGS-26547: remove LoadBalancer filter from external-dns #3410
OCPBUGS-26547: fix up external-dns flags #3408
OCPBUGS-26547: reduce external-dns route53 call volume #3394
Update RHTAP references (main) #3401
OCPBUGS-25897: hcco: use manual mode for CCO #3375
HOSTEDCP-1309: Add GC knobs for KAS #3384
NO-JIRA: [KubeVirt] Fix external infra permissions documentation #3391
HOSTEDCP-1374: external OIDC: copy Authentication OIDC client secrets through to guest #3373
OCPBUGS-25974: Do not use CPO image from status if it’s not a valid image reference #3361
OCPBUGS-23518: consider HCP upgradeable if CVO has no upgradable condition #3239
OCPBUGS-26232: set KAS runtime-config in alignment with feature gates #3377
HOSTEDCP-1372: Bumps k8s to v0.29 #3360
OCPBUGS-25342: Add extra resources to be encrypted. #3341
OCPBUGS-26197: hostedcontrolplane: don’t start pki operator when disabled #3368
CNV-36656: Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider #3364
NO-JIRA: Update RHTAP references (main) #3365
HOSTEDCP-1371: Bump Golang to v1.21 #3359
HOSTEDCP-1328: Add Ability to Encrypt VM OS Disks #3281
HOSTEDCP-1122: Etcd defrag controller #2869
NO-JIRA: Update RHTAP references (main) #3275
HOSTEDCP-336: Move fixtures out of API #3342
OCPBUGS-23362: Set new condition on SG deletion. #3307
NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update #3251
NO-JIRA: Add rbac permission for kubevirt capi #3344
OCPBUGS-22399: Disable UWM Telemetry writer when telemeter-client cm not exists #3348
NO-JIRA: Approvers update #3347
HOSTEDCP-1262: Add additional CEL to Arch in NodePoolSpec #3333
NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools #3334
NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #3335
OCPBUGS-22399: Disable UWM Telemetry remote writer when MGMT cluster is disconnected #3332
HOSTEDCP-336: Move CAPI imports from /api package into support/api #3270
OCPBUGS-24308: Add PodDisruptionBudget for router deployment #3337
HOSTEDCP-1355: Remove unused functions from repo #3325
NO-JIRA: RHTAP Multi-Arch PipelineSpec #3340
HOSTEDCP-1329: Allow user to specify resource group for NodePool resources #3279
HOSTEDCP-1353: Improve description for agent APIServerAddress CLI flag #3314
ACM-8917: Add agentLabelSelector to nodepool agent create to CLI #3285
CCO-388: control-plane-operator: reconcile the CCO #2794
NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools #3045
NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools #3145
HOSTEDCP-1344: use library-go crypto where we can #3326
OCPBUGS-25332: Force KMSv1 on #3318
HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation #3320
HOSTEDCP-1327: Remove Old Azure SDKs from Azure Infra #3274
OCPBUGS-25306: Use k8s.io/kube-scheduler/config/v1 #3313
TRT-1406: Revert #3283 “HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation” #3306
OCPBUGS-25103: Remove reference to v1alpha1 flowcontrol #3304
HOSTEDCP-1257: control-plane-pki-operator: add a CSR flow for break-glass creds #3267
NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) #3305
OCPBUGS-24261: Konnectivity agent update strategy #3294
CNV-36056: Expose NodeSelector for KubeVirt VMs in NodePool #3280
ACM-8466: Add Kubernetes SCC V2 options to HO containers #3284
OCPBUGS-23511: Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals #3215
NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out #3302
HOSTEDCP-1343: docs(ibmcloud): Add HC/HCP yamls for IBM Cloud #3287
HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation #3283
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3276
OCPBUGS-20035: Add HostedCluster false conditions sumamry when cluste… #3190
HOSTEDCP-1336: bump openshift/api #3282
NO-JIRA: Fix wrong annotation on cluster deletion #3289
OTA-855: Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift #2807
HOSTEDCP-1318: correct typo for OAS internal-oauth-disabled flag #3278
NO-JIRA: Bump the golang-dependencies group with 3 updates #3254
OCPBUGS-23126: Fix a bug on deletion of a hostedcluster #3234
CNV-35774: Improve CRD defaulting for HostedCluster and NodePool #3116
HOSTEDCP-1322: NodeUpgradeType defaulted by provider via CLI #3273
NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too #3263
CNV-34093: kubevirt: verify release image falls within supported release window #3184
CNV-29003: Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) #3189
OCPBUGS-2