Back to index
4.20.0-0.ci-2025-04-04-151319
Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.20.0-0.ci-2025-04-04-151319
Team Approvals:
Tests:
Upgrades from:
Loading changelog, this may take a while ...
Created: 2025-04-04 15:18:24 +0000 UTC
Image Digest: sha256:71246502788782251ad89ad5dfcd065b1cdac1810f215cdff0f310faa84ab51a
Components
FeatureGate Changes
| FeatureGate |
Default
Hypershift |
Default
SelfManagedHA |
DevPreviewNoUpgrade
Hypershift |
DevPreviewNoUpgrade
SelfManagedHA |
TechPreviewNoUpgrade
Hypershift |
TechPreviewNoUpgrade
SelfManagedHA |
ClusterAPIInstallIBMCloud
(0 tests) |
Disabled |
Disabled |
Enabled
(Changed) |
Enabled
(Changed) |
Enabled
(Changed) |
Enabled
(Changed) |
Rebuilt images without code change
- rhel-coreos
sha256:c3490417eb7738b553565e469543db261d8d3430538ec3e69d782f63edfc4029
- rhel-coreos-extensions
sha256:5b9660a5d91503f99598346ed9adf6be243ba8fdc0d30c881b372ee18c19561b
- IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
- NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
- Full changelog
- Ignore -server-ose repos in the CI (#1314) #1314
- CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
- Obsolete pod label-based matching (#1304) #1304
- Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
- Remove pinning of all dependencies (#1309) #1309
- e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
- e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
- Full changelog
- chore(deps): update golang docker tag to v1.24 #5616
- OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
- NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
- OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
- NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
- OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
- OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
- NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
- NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
- OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
- CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
- NO-JIRA: Create token Secret for dev cluster explicitly #5523
- OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
- OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
- NO-JIRA: set default expriationDate tag in AWS if not set #5951
- NO-JIRA: chore: Remove Azure autorest dependency #5917
- CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
- NO-JIRA: Add version check for CAPI flag #5911
- ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
- NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
- CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
- NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
- NO-JIRA: Remove ppc64le from HO tekton files #5924
- CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
- OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
- CNTRLPLANE-350: add NodePool minor version compatibility check #5873
- NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
- ART-11792: update go mod dependency for konflux #5918
- CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
- NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
- CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
- NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
- OCPBUGS-46379: Kas bootstrap bin #5871
- CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
- ARO-15229: add e2e tests for image registry capability #5810
- CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
- OCPBUGS-50915: Disable capi machineset preflights #5653
- CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
- OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
- NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
- OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
- OCPBUGS-53462: Check for availability of individual catalog images #5881
- NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
- STOR-2281: Remove csi-snapshot-validation-webhook #5776
- CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
- CNTRLPLANE-348: Konflux tagged releases #5869
- OCPBUGS-53407: chore(deps): update konflux references #5846
- NO-JIRA: feat(builds): Add area labels and OWNERS #5872
- OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
- NO-JIRA: Add Azure scheduler doc to mkdocs #5865
- CNTRLPLANE-342: Add missing area for support #5864
- OCPBUGS-53050: Handle multiple mirror entries for source #5827
- OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
- NO-JIRA: openstack: revert
OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
- Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
- OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
- CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
- METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
- OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
- CNTRLPLANE-325: rootless containerized builds #5835
- CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
- CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
- NO-JIRA: Bump msi-dataplane dependency #5796
- OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
- NO-JIRA: Update Konflux references #5799
- ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
- OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
- PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
- OCPBUGS-51364: fix oc patch command on doc #5807
- NO-JIRA: Fix-dependabot-bumps #5797
- OCPBUGS-52655: Add flag to set etcd storage size #5795
- CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
- NO-JIRA: Disable GitHub Actions #5812
- OCPBUGS-52821: stop using dev mode for loggers #5801
- HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
- OLS-1370: Add full aws permission list and point to it from “getting started” #5746
- NO-JIRA: CPOv2 token-minter abstraction #5769
- NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
- OCPBUGS-52323: Make managed-trust-bundle optional #5763
- CNV-57648: document how to configure descheduler #5779
- NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
- OTA-1405: Add the ClusterVersionOperator API #5569
- OCPBUGS-52419: e2e: don’t call
WaitForImageRollout in executeNodePoolTest #5771
- OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
- CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
- NO-JIRA: speed up image builds #5766
- NO-JIRA: go.mod updates from Konflux #5761
- OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
- OCPBUGS-52223: refactor aws identity health check into new controller #5751
- OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
- NO-JIRA: Remove issues-exit flag for golangci-lint #5762
- CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
- NO-JIRA: Add CPO container sync check to GitHub Actions #5753
- OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
- NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
- HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
- NO-JIRA: chore(deps): update konflux references #5527 #5747
- NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
- OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
- CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
- OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
- OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
- CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
- HOSTEDCP-2262: Karpenter openshift ec2class #5600
- NO-JIRA: chore(owners): Update IBM reviewers #5717
- CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
- NO-JIRA: doc: openstack: update go version #5716
- CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
- HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
- HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
- OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
- NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
- OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
- NO-JIRA: Reenable ibm network cel #5698
- NO-JIRA: ho: watch AWSEndpointServices #5674
- NO-JIRA: test/e2e: use test name for HC name #5665
- OSASINFRA-3719: openstack: ORC deployed out of tree #5584
- CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
- NO-JIRA: Update-precommit-docs #5678
- HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
- OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
- NO-JIRA: Add omitempty to CredentialsSecretName #5656
- OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
- HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
- CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
- CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
- NO-JIRA: Fix hc hcp cel inconsistency #5661
- NO-JIRA: add secretproviderclass to dump #5654
- OCPBUGS-50606: Fix kubeadmin login failure #5631
- NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
- NO-JIRA: update hypershift azure roles to use ids #5657
- CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
- NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
- CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
- HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
- OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
- OCPBUGS-50014: Restart HCP on stale serving certs #5601
- NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
- HOSTEDCP-2171: add e2e test for aro scheduler #5568
- NO-JIRA: Bump Golang to 1.23 #5466
- NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
- NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
- HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
- HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
- PODAUTO-318: Implement HCP karpenter deletion #5540
- NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
- NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
- PODAUTO-302: Relax cel rule for karpenter role to be required in an ec2NodeClass #5581
- NO-JIRA: Remove haproxy generation error for normal flow #5583
- OCPBUGS-49913: Honor proxy vars in the util insecure http client #5572
- CNTRLPLANE-221: specify region in AWS credentials for operator-roles #5571
- NO-JIRA: e2e: combine OpenStack advanced tests within one Nodepool #5579
- OCPBUGS-49609: Split binary builds #5499
- NO-JIRA: Apply additional labels to CollectProfilesCronJob #5580
- HOSTEDCP-2231: Remove cloud connection, Set Transit Gateway as default #5293
- CNTRLPLANE-209: Add shared-ingress docs #5564
- HOSTEDCP-2257: Vendor karpenter CRDs #5522
- ARO-14442: introduce capabilities api #5554
- NO-JIRA: add optional step for creating release image using cluster b… #5578
- CNTRLPLANE-109: Update Azure API for Phase 3 Managed Identity Work #5556
- NO-JIRA: add watch permission to SecretProviderClass in ARO #5565
- NO-JIRA: Update cpov2 docs #5560
- NO-JIRA: e2e: don’t skip mirrorconfigs on OSP #5441
- OCPBUGS-49791: Use /livez for kubernetes scheduler liveness probe #5546
- CNTRLPLANE-111: Move secretproviderclass.go to support folder #5559
- OCPBUGS-49838: Watch NodePools in HostedCluster controller #5553
- HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5549
- OCPBUGS-49724: remove passed in image matching desired image check fr… #5524
- OCPBUGS-48619: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5525
- HOSTEDCP-2040: Add TestCreateClusterCustomConfigV2 #5401
- OCPBUGS-49748: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5535
- OCPBUGS-49804: Revert “HOSTEDCP-2120: Enable EnsureCustomLabels e2e test” #5547
- HOSTEDCP-2259: CLI: enable secure proxy creation #5526
- CNTRLPLANE-172: cli: azure: allow assigning custom HCP roles #5541
- OCPBUGS-49686: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5505
- NO-JIRA: Bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 in the azure-github-dependencies group #5518
- HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5511
- OCPBUGS-48688: Remove Credentials from the Azure API #5510
- HOSTEDCP-2249: Reconcile karpenter user-data secret programmatically instead of creating a mock nodePool #5439
- NO-JIRA: Bump the misc-dependencies group with 6 updates #5519
- MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #5508
- OCPBUGS-49611: Konnectivity: add agent readiness #4829
- NO-JIRA: cpov2: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5514
- HOSTEDCP-2226: Add ValidatingAdmissionPolicy for karpenter EC2NodeClass CRD #5395
- HOSTEDCP-2256: [CPO Refactor] Delete component and its resources when predicate changes to false #5509
- HOSTEDCP-2245: [CPO Refactor] Refactor cluster-node-tuning-operator #5473
- NO-JIRA: add assignServicePrincipal check before assignign roles to WI #5498
- HOSTEDCP-1706: feat: add a metric for cluster size override annotation #4825
- NO-JIRA: Add instructions for ccoctl and fix minor issues #5490
- OCPBUGS-48688: Add Tenant ID to Azure API & Remove Credentials from CPO #5495
- OCPBUGS-48519: fix overwriting PKI operator HCP conditions #5493
- HOSTEDCP-2169: Add aro scheduler #5417
- OCPBUGS-48532: Fix IsProgressing condition in HostedClusters #5487
- NO-JIRA: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5496
- CNTRLPLANE-187: Remove MachineIdentityID from Azure HyperShift API #5488
- OCPBUGS-49370: openstack: update CAPI provider deployment spec #5483
- NO-JIRA: Fix a few bugs in Azure Upstream Docs #5489
- NO-JIRA: chore(deps): update konflux references (main) #5476
- NO-JIRA: Update managed Azure/ARO HCP contrib and upstream documents #5474
- HOSTEDCP-2061: [CPO Refactor] Refactor cluster-network-operator #5460
- OCPBUGS-48626: openstack: add DNS option to CLI #5446
- NO-JIRA: Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in the misc-dependencies group #5472
- NO-JIRA: Sync v2 code #5467
- CNTRLPLANE-173: Assign known ARO roles for CP IDs for ARO HCP #5469
- NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.5.0 to 1.6.0 in the azure-github-dependencies group #5471
- PODAUTO-303: Re enable karpenter e2e #5462
- OCPBUGS-48688: Remove client secret references now Workload Identity is supported #5455
- OCPBUGS-48794: Adds contributor role over VNET for Cloud Provider #5468
- HOSTEDCP-2232: Destroy DHCP Server before PowerVS Cloud Instance deletion #5227
- NO-JIRA: [kubevirt] Skip KubeVirtAdvancedMultinetTest for v4.14 and below #5449
- NO-JIRA: Remove OpenStack workaround for Ingress Floating IP #5176
- OCPBUGS-48758: Revert #5404 “PODAUTO-303: Add the most basic e2e for autoNode via Karpenter” #5461
- HOSTEDCP-2176: Enable unused & ineffassign linters in golangci-lint #5418
- OCPBUGS-48708: correct aro azureFile config and permissions #5453
- NO-JIRA: add command for retrieving user account id for AKS dev env s… #5436
- PODAUTO-303: Add the most basic e2e for autoNode via Karpenter #5404
- NO-JIRA: Bump the misc-dependencies group with 8 updates #5450
- HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 4 #5361
- HOSTEDCP-2062: [CPO Refactor] Refactor kubevirt csi driver #5447
- NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity #5440
- HOSTEDCP-1971: HyperShift operator upgrade test for rollout validation #4999
- NO-JIRA: Update Konflux references #5423
- Revert “Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR”” #5422
- OCPBUGS-48510: Allow ARM64 arch deployment on None platform type #5403
- NO-JIRA: Fix dev docs for managed azure #5411
- NO-JIRA: Drop openstack create rejection validation #5410
- HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 3 #4587
- NO-JIRA: Add GOWORK=off to clients in Makefile #5421
- OCPBUGS-45511: Compare contents of user-ca-bundle-config.yaml to the correct configmap #5420
- NO-JIRA: doc/openstack: improve index layout #5412
- AUTH-482: set required-scc for openshift workloads #5310
- OCPBUGS-48506: Set ownership annotations for TLS artifacts #5355
- NO-JIRA: add information about checking HO and e2e are from main on latest release branch #5419
- CNTRLPLANE-129: Move Microsoft Repo to CI dir in e2e dockerfile #5416
- Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR” #5406
- NO-JIRA: chore(deps): update konflux references (main) #5383
- OCPBUGS-44960: (OSASINFRA-3643) bump k8s and dependencies #4927
- NO-JIRA: Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /hack/tools #5400
- NO-JIRA: Bump golang.org/x/net from 0.31.0 to 0.33.0 in /hack/tools #5399
- NO-JIRA: test/e2e: move pre-removal metrics validation out teardown path #5234
- NO-JIRA: Add
make lint-fix to pre-commit hook #5387
- NO-JIRA: Enforce EnsurePSANotPrivileged for 4.19 and later #5362
- NO-JIRA: Update Create Azure HC document #5396
- OCPBUGS-48216: use rm -f in all CVO cmds for idempotency #5390
- NO-JIRA: Bump the golang-dependencies and github.com/Azure/azure-sdk-for-go/sdk/azcore #5373
- HOSTEDCP-2233: [CPO Refactor] Refactor cluster-storage-operator #5312
- NO-JIRA: docs/nit: fix missing spaces in md breaking rendered html #5392
- OSASINFRA-3670: doc/openstack: etcd on LVM #5391
- NO-JIRA: cmd: dump: include ValidatingAdmissionPolicies in guest cluster dump #5165
- HOSTEDCP-1542: Introduce e2e flags for Workload Identity #5363
- NO-JIRA: e2e: don’t check the KV’s LiveMigratable condition for <4.17 #5389
- OCPBUGS-48152: Fix mirror reference image name when ID is set #5353
- OSASINFRA-3681: improve the doc on OpenStack #5243
- Revert “OCPBUGS-45265: Use /livez/ping endpoint rather than /version” #5381
- NO-JIRA: test/e2e: improve VAP test assertions #5375
- OCPBUGS-45265: Use /livez/ping endpoint rather than /version #5211
- NO-JIRA: Reoncile karpenter aws creds before running the operator #5360
- NO-JIRA: Bump golang.org/x/crypto and golang.org/x/net #5357
- HOSTEDCP-2176: Introduce golangci-lint to make verify and only turn on gci linter #5322
- CNTRLPLANE-68: add flags for setting azure marketplace images in e2e #5356
- HOSTEDCP-2234: Karpenter auto machine approver #5349
- OCPBUGS-47715: fix disconnected via CLI #5341
- chore(deps): update dependency mkdocs-material to v9.5.49 #5247
- NO-JIRA: Move oauth kubeadminsecret hash annotation logic from HCCO to CPO #5286
- HOSTEDCP-2199: [CPO Refactor] Refactor cloud-credential-operator #5203
- NO-JIRA: Update Konflux references (main) #5325
- OCPBUGS-46354: fix(ho): Add all supported config schemas for NodePool NTO reconcile #5280
- NO-JIRA: Revert E2E test change which validates the CVO Image propagation #5323
- NO-JIRA: Fix oauth-v2 and kcm-v2 #5306
- CNTRLPLANE-26: Disable building HO for s390x platform on PR #5314
- OCPBUGS-46529: kubevirt, Don’t break on hostname NodePort.Address #5313
- CNTRLPLANE-25: Fix valid release image update issue #5316
- OCPBUGS-46483: Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments #5311
- OCPBUGS-43083, OCPBUGS-44655: Fix IPv6 Disconnected HCP deployments #5168
- HOSTEDCP-2220: Autonode karpenter #5279
- CNTRLPLANE-10: Konflux build CPO only when needed #5287
- NO-JIRA: Only use public IPs for 4.16 and above #5304
- OSASINFRA-3685: openstack: tag CAPI resources with InfraID #5262
- STOR-2136: Give delete permissions to snapshot-operator role #5277
- NO-JIRA: chore(deps): update konflux references (main) #5288
- NO-JIRA: set diskStorageAccountType in aks e2e #5273
- CNTRLPLANE-9: Red Hat Konflux update control-plane-operator-main #5282
- OCPBUGS-44314: Consistently look up and dial cloud API hostnames #5281
- OCPBUGS-45595: Updating ose-hypershift-container image to be consistent with ART for 4.19 #5272
- NO-JIRA: test/e2e: detect rapidly updating deployments #5229
- OCPBUGS-45322: consolidating upgradingConfig/Version nodepool status update from CAPI controller to Conditions controller #5222
- OCPBUGS-46342: Allow ARM64 arch deployment on Agent platform #5276
- OCPBUGS-44438: Remove non-matching feature-gated CVO manifests from payload #5093
- NO-JIRA: Fix expected AWS HC conditions during e2e tests #5266
- NO-JIRA: Allow multiple yaml def in a file for pre-commit #5271
- HOSTEDCP-2203: Create e2e clusters with public IP instances only #5269
- NO-JIRA: Fix spelling mistakes from PR #5265 #5270
- HOSTEDCP-2215: Expand pre-commit hooks to check on commit and push #5245
- HOSTEDCP-2203: Add support for public only AWS clusters #5242
- NO-JIRA: contrib: update route53 zone cleaning utility #5265
- NO-JIRA: Fix pre-commit hook issues #5264
- HOSTEDCP-2193: documenting –managed-identities-file flag #5199
- NO-JIRA: Update Konflux References and Perform Migration #5260
- HOSTEDCP-2206: Improve Unit Test Runtime #5257
- OCPBUGS-42320: Prevent IgnitionServer from flooding the API server with patch requests #5220
- NO-JIRA: Remove SP creation/deletion in the HyperShift CLI #5240
- NO-JIRA: Relax networking cel validation for IBMCloud #5258
- NO-JIRA: openstack/e2e: allow to change AZ name #5138
- OCPBUGS-42338: Update KCM node monitor grace period #5166
- NO-JIRA: e2e: followup cleanup for OpenStack Manila #5221
- HOSTEDCP-2181: bump base images in dockerfiles to 4.19 #5195
- HOSTEDCP-1958: Integrate codespell in Makefile #4700
- OCPBUGS-44236: Use system trust bundle in CPO IDP https client #5241
- HOSTEDCP-2204: adding contributor role to nodepoolManagement SP #5244
- HOSTEDCP-2201: add DNS RG to contributor role assignments and add new flag for skipping role assignments #5230
- NO-JIRA: openstack/doc: add a requirement for Octavia #5223
- NO-JIRA: updating ocp release task notes #5239
- OCPBUGS-44967: Pass only the certificate name for CNO deployment #5216
- OCPBUGS-45182, OCPBUGS-45189: e2e/openstack: adjustments for missing manila apps & pods #5202
- OCPBUGS-42434: Enable Managed Identity w/ Certificates in HyperShift Control Plane Components #5160
- HOSTEDCP-2197: Fix TLS config documentation for disconnected #5212
- NO-JIRA: cpov2: revert oauth reconciliation #5217
- OCPBUGS-44968: Reconcile SecretProvider for CSO on ARO HCP #4904
- NO-JIRA: chore(deps): update konflux references (main) #5205
- NO-JIRA: chore(deps): update dependency mkdocs-material to v9.5.46 (main) #5206
- HOSTEDCP-2193: allow reuse of SP for e2e #5194
- OCPBUGS-44380: Reconcile proxy CA bundle into hosted cluster #5197
- HOSTEDCP-2075: Dns cel e2e #5171
- OCPBUGS-44934: Fix error message when kas is route and hostname is not set #5192
- NO-JIRA: CPO V2 cleanup #5188
- HOSTEDCP-2075: Nodeport address cel #5172
- OCPBUGS-44967: Reconcile SecretProvider for CNCC on ARO HCP #4903
- OCPBUGS-44910: openstack: don’t reconcile image registry config during bootstrap #5178
- OCPBUGS-44957: Use fleet manager configmaps to determine placeholder pod node antiaffinity #5191
- OCPBUGS-44698: Create AWS clients on every reconcile instead of at initialization #5179
- OCPBUGS-44964: Reconcile SecretProviderClass for Ingress on ARO HCP #4884
- Full changelog
Source code for this page located on github