4.20.0-0.konflux-nightly-2025-05-09-022457

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/konflux-release:4.20.0-0.konflux-nightly-2025-05-09-022457

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.20-micro Failed (2 retries) periodic-ci-openshift-release-master-konflux-nightly-4.20-e2e-aws-ovn-upgrade
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-konflux-nightly-4.20-e2e-aws-ovn-serial
- fips-scan Pending (1 retries) periodic-ci-openshift-release-master-konflux-nightly-4.20-fips-payload-scan
Informing jobs
- gcp-ovn-upgrade-micro Failed (2 retries) periodic-ci-openshift-release-master-konflux-nightly-4.20-e2e-gcp-ovn-upgrade

Upgrades from:

4.20.0-0.konflux-nightly-2025-04-17-181101 - F F F F F F

Loading changelog, this may take a while ...

Changes from 4.20.0-0.konflux-nightly-2025-04-17-181101

Created: 2025-05-09 02:26:33 +0000 UTC

Image Digest: sha256:cce357da4bf4a5078edc63e55d1416360d5aeb6537df49829e560414f40b04e3

Components

Kubectl 1.32.1
Kubernetes 1.32.3
Kubernetes Tests 1.32.3
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202504022024-0 to 9.6.20250502-0

New images

aws-cloud-controller-manager git 425c1c5b sha256:d22c01762bf31395c624d392c1cc7387e8f10cf4af6d04309c230d9d5f1c18c2
aws-ebs-csi-driver git d686e7d1 sha256:29b6e97f817be513a153dde4855249b891367b22f265f9502d5346a522f5c91f
aws-ebs-csi-driver-operator git ee4f432c sha256:971b6f01d4ff59d6c725e71eaf67f2c4c3e200d8b20297cffab22235ba5d98f9
aws-karpenter-provider-aws git 68ae0c26 sha256:0125834841492a5395259fb5070a556969865963a4d9f6251a60f5a7f7fa8b0a
aws-pod-identity-webhook git b0a16d53 sha256:c688068d1f2a3c10164e588fb110c0eee7018d316571c1763a0622e67f384b45
azure-cloud-controller-manager git 7109d6b4 sha256:d3b7fe0a1b3700aa6dcfb65635d494206523fc708fbc2c5af7ff0226bd9adef6
azure-cloud-node-manager git 7109d6b4 sha256:fcec21ffd8114ae91d29d47a00d861b00397a4d1674e9285f7bf4976879dbd3f
azure-disk-csi-driver git 41226812 sha256:2ed8a427974c5a6781f3d3e8c3dd5ecd7a9a4dc1ff677ec29514c56b72a5c89a
azure-disk-csi-driver-operator git ee4f432c sha256:0cfc8681cc57f0f6a1a252f4ef2755726af1a922b43fda368b4a1bad0a3e8bd5
azure-file-csi-driver git 0c0bab7a sha256:528385dfb1c026837f97897da36b5c1783598ee04c883b15215755c3afbf2aac
azure-file-csi-driver-operator git ee4f432c sha256:478c23eca61b7ae15e299cd25e383a09783d95957829f8f6d1219d01b97ab81d
azure-service-operator git 0ae129b4 sha256:1cd3fbaf7c4db3363f94f8217c7f39b8bad440b5ebad4664a6003484c24096c4
azure-workload-identity-webhook git 892d3c4d sha256:8984f0c70323d072028b2868de71818619ee5e4592ff3698678a5ebf81ee94c3
baremetal-runtimecfg git 1331e6d7 sha256:5de76ec2944ae3add06c4b7b961af275554c6b89e4db58ea1b1bb4010e24e480
cli git e468aa68 sha256:9b55297c2ea774415d79b7259815894ca6ecb8e896eec93e7b75597daa26621a
cloud-network-config-controller git 98ae311b sha256:ef25abcfc0bef954ecc433debaf6daeed1a43399b4da30ee379c3cec221bccf3
cluster-autoscaler git f746d442 sha256:7890332c924303739ea60d47b77221287c04f7131d6679d7a3f24299f8d1c7d6
cluster-policy-controller git 74852478 sha256:1643e18616cc44d1022baa312124e953bde481b2a66feb97507bcc7fcad2db6e
configmap-reloader git 9bfbde86 sha256:03d0af70eaf3784bf0f31a4652bbe76ffe4042f4017d2f49282b96c73be7fa0d
container-networking-plugins git b09f487c sha256:d2ebd6320486cfcc7e73c199927c4093b10d7ec1e4c20cc445d7df718d8582bd
containernetworking-plugins-microshift git b09f487c sha256:1a28689472e150e2d032591cb858699d455dace028666cd05417370ca2f6f9a5
coredns git 7a1451db sha256:76476cdee742db252629062fc5c9413953b74b0d6c172371e5b1ee9bd97624f4
csi-driver-manila git 68986f5b sha256:443b4b6be1d4bc33792b053034bb9bd1aeeb169fd7575b67308f3368c2a037e7
csi-driver-manila-operator git ee4f432c sha256:fb21a1c86e775d05977346f7d79e7b2b7c57a9385eb8ab55803820bf4c37af73
csi-driver-nfs git 2eb5c109 sha256:bc1efe96ac48453b5e742436bc672992d2cbde0d69245cbe1955fb01d752f07f
csi-external-attacher git a8175e39 sha256:ab4e02fdd3f449af2993ea94bf81d2ce65210f4bc3ee73bc12df805b5c330fd9
csi-external-provisioner git 9db1cdb1 sha256:160f6d4ef664170709f2db32c00f64b2e9c53f590a65ae9cbe1f54620bb6d618
csi-external-resizer git cca04e39 sha256:efc784ae67b10b856ce8ca25dcafe4ea0df822cbaa286ebede4dd96383e879f9
csi-external-snapshotter git ac82cafc sha256:ff5449641dd9f12e3d4863dc8905c6b366d1f9e3631a439409805258bcca8dde
csi-livenessprobe git ca514478 sha256:ce211846834f02819318631eebc4a8262b3a19d78c89c83628a0c223a3735c4e
csi-node-driver-registrar git d18edb3a sha256:dcca2ef865181c388a62e4f987fceaf4a2f59a8cae561e18a149e3e1fc625cb4
csi-snapshot-controller git ac82cafc sha256:8344faedf0ab017137b34e4c96050ce08f789b8c12f9c30d76d2eaeed9a9dab0
deployer git e468aa68 sha256:cd4fcb1e888d4ef8361bf88137206e2ac0a96a1f3737f47962b567fcbbdb213b
docker-builder git f2e5d601 sha256:569c21931c68168973c4afbcd7fd4115f16da654bd2d686a20d2c6e385ba2fa9
docker-registry git 59376a75 sha256:bd2c8758400f83be344c687f574c79788102af046d63bb8767c9ef31ce3c24a5
egress-router-cni git 85353bb9 sha256:d2a01072bce098dc9f75b3dde02c8f5b77b2dfeb87f23b94e541ad9d4c983e6b
etcd git a5421dfe sha256:98567953b73c1a5bf953f5488e6e414b5775c4788a2d5203a67cdce72ad94805
gcp-cloud-controller-manager git d8d3aeba sha256:06be46cfe291b7d360a6843f12d0cedb2769b7b1698471c723a6949a5a0b56e3
gcp-machine-controllers git 55edb1bc sha256:0b0183c280454f379d4956ccf99badc7d6459e7225b799486c43f43d6c03d6d0
gcp-pd-csi-driver git 3aeac35b sha256:c458093b814ea422ae6750563e4d963c2f558dd1a69ecff7dcb8b98cd6070bb1
gcp-pd-csi-driver-operator git 44c74f24 sha256:195fe8c80f5336ca5800701e24bee56de64cfdfa773bff81355490151e0e0f26
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:540445be3873528b2702db343c4d6d74cffa6464744f29efae9decdeb2926201
haproxy-router git b41f9d05 sha256:7c68d859abcd42f7516b31efe4b96f64685756e0e522455b2d099bade873d2eb
hyperkube git 00030d38 sha256:96884462a768a738453e3e0b959f313a823643ba1c9fad0fa300b6b5d2d064c2
ibm-cloud-controller-manager git 7422aab2 sha256:53dd320f33df0131ede944fbb68f87d8db2b35d6562de6fc42bf0044822e7eda
ibm-vpc-block-csi-driver git 176b6ef1 sha256:ee0f7e307a96388f843e5e5ebf04b010a12b110d5d9fcdf69a6215ac501b02bf
ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:c604589e279327f090a52b9fd51cefff23a01bcaf5107f02193469430cd2ef85
ibmcloud-machine-controllers git 989bd874 sha256:dd7a1ae1d6c859cd61ced6fbf06da8dd85e349cadba064417cc853ac08444bb2
keepalived-ipfailover git 3321f1a1 sha256:dca77e60f5f8f5401dbde0e729928fb3ec9b7335216ce21ecd678df110e54171
kube-metrics-server git 037a0e7e sha256:afa6a764d3beb69599b1c4954017b50a7dbd15c352f76d037c52f78925aa9376
kube-proxy git 00030d38 sha256:47b6c178a7560ba6191ab84eb3b6d0f72317fe1638a1f205ba49c1249c1b0e53
kube-state-metrics git c3da3b5f sha256:d6af3bbff97633929d1df8d24ed38b6582e5dffe3984235541c9b0bf638a4c09
kube-storage-version-migrator git 4c521b09 sha256:8dbf5244ca86ab4aea03c251fe7fdc0eda9eb2f07dd36bcd689717320134035b
libvirt-machine-controllers git a336f0b5 sha256:9a9c70401fae01f9ff5868a13533a60af05fe6560fd606b622f2943a34c265f0
metallb-frr git 5076dbc4 sha256:0f143a0e6689734f43dc1084149590193ed7abaf07fc38f6a7a01b43a219dd01
monitoring-plugin git 13c02d49 sha256:b08f865c66a5fbd87448bec14293f163915fb0a0188458732e008712d6061fac
multus-admission-controller git 0b1b812e sha256:4afc5c172b9a84c2667e1808809741104d4f3612ce2eee21ea2045a8eebaaccc
multus-cni git cf0f68ec sha256:8b9b7522f08a4c9b7629526036ebd014a7bc7007bc425535a03b28b7cc17b629
multus-cni-microshift git cf0f68ec sha256:b692e0ef3c67fcb6a16e13cada85779e51ca50f90606a6e85489af84552f215a
multus-networkpolicy git 6fffe5d7 sha256:d160877449acb21899f177484be568cd9998f01377d2b5defd5fd86b766f4599
multus-route-override-cni git 391c1b03 sha256:26bb1ce9cadb53a65a0d3b8a87e03f3dd2a55d5d2438f5ef6125d61c872f3a5e
multus-whereabouts-ipam-cni git 45624b63 sha256:45ef3b64e8121ab602b3356cdf61c8067eff1ebf67960b49b9522ddcc7e376a3
must-gather git 463c03ca sha256:873938494e1dc4ca9f124ff19e8ee867c8ee11c0dc93c21dcb5f28b00ded2a49
network-interface-bond-cni git 94b71fef sha256:d27b5027a7b71c7ff07cefe581de4b97e6aa3ebe440360e12b249ab1c35d5c5f
network-metrics-daemon git 5ec8c6bd sha256:37009c9ba55e2702ab6656351e4ce13fcbd22664815ca2f2dee7a8da07d88f13
network-tools git ebd18d14 sha256:1349ca15620901639b7da05c77ddbe34b572943deed25877d095f91ee8c2b90a
networking-console-plugin git 581812ac sha256:c8d82e54d4d9836e481e2715827485aeda09540f4d10d05fe08379df5314b70d
nutanix-cloud-controller-manager git db1f264a sha256:996d62d8cfcc27cf2de49759f416677b2b7f871c7c4f34407d1c607570f33f9f
nutanix-machine-controllers git a26db5a0 sha256:9852eb488c8fa460d2267eece4f4d0912c849084010cb9e448c72dd9f918ef4c
oauth-apiserver git 75914068 sha256:4914415bc316cc4eb1b4c171554e44a14f62c0a2f270609ad9098b01d492de0a
oauth-proxy git 3d12ccbe sha256:c8f148087a16d8b31936d5a7cac37eac1ba51d1acf6e26bb2291c46c261d2456
oauth-server git c4dd5465 sha256:49eb543a659287015568eaec9f2bc1fa2b066f7e87a95a3dbe6bcf932ff90134
olm-catalogd git a2fd7089 sha256:8281faf0f74e8a0b7a762cd04800bbb5bc41dbce4e8df0e79b74e8dd60da9d3f
olm-operator-controller git a2fd7089 sha256:6aaea801d65a60e11f337d4f8556f8022642c76b5ab8aa296dfaafec09a44420
openshift-apiserver git 85f6eb27 sha256:6b67a0a411a3f5901d7a9bc7d62d33a6356843f63a776ffb923ccd42a04ee557
openshift-controller-manager git 39ebafcc sha256:d936996177b08b4acfe6476820e7f1f569046335d226a64cbdefc1c5aacc85c3
openshift-state-metrics git 3106bcc3 sha256:8597ae43ec1ead30e413c602939b40272f755f420d0ffdd27bc8826a1f36d8f3
openstack-cinder-csi-driver git 68986f5b sha256:8bd0287fdf6779126bff22b20f094e9effdc211a7a64cab2d545e406856b521e
openstack-cinder-csi-driver-operator git ee4f432c sha256:7036b954fc220bee131abec919602b2c4795ca639c3f8e2c7ae2e54bf242a517
openstack-cloud-controller-manager git 68986f5b sha256:4533f3ae82a86b260eff15961fe33d7cc0a1492fe9be264564da8c9f109d65b5
openstack-machine-api-provider git 848bf658 sha256:bb173585a6f04dfac020d49622c9a8a10102052a23b5ddfc0c8142dbbc17adfc
operator-registry git 7fae0cbf sha256:67219e74c33071c57344fb5a2b6e9c9c41fe7310f7edda96cae12457408b8eb8
ovirt-csi-driver git 1db726a9 sha256:9b740873130cf4a49f0ba9a29d2ec74694c578777e27bc595f17212118c2520f
ovirt-csi-driver-operator git 76db379d sha256:0f92ed5ac7c6383fd83827bf08cff77d6227e0b1efd6d3b02ed497832494ad6f
ovn-kubernetes git b9e7714f sha256:7ce8458c3b134f51bc9b69164e9c226160f3c4b9ca588eac9cf790286672fcfa
ovn-kubernetes-microshift git b9e7714f sha256:02a1e73a8e14614efe49b418c203a2c3b9daa7eae7eb2de81616f9c0ec074d93
pod git 00030d38 sha256:3c8c0b9f9a4780168cc69a767432b5e25a458cf81db3126de06b7dfb513317ba
powervs-block-csi-driver git f681413d sha256:119c87be4ac20e6ef3cb2036cc9c81addb7b782f33fc4759a22114e1fd216acd
powervs-block-csi-driver-operator git 059d95c2 sha256:9ec686adcae560e84608074f68ea592594692d961204072cba0c1fac32880b03
powervs-cloud-controller-manager git ef83f3f5 sha256:de83c169437c3861908d710393efc95efb2bca4574c3ad4e3db7ed9535e55ed8
powervs-machine-controllers git 87f8e306 sha256:5f27645215b1d84d51deba487126f76f13a5b631d24b1eb34fb8caecca87214f
prom-label-proxy git 7184f58d sha256:c0073d3b30833a390f44129ab44357c5250ca75e9597162eea3e1443e8868050
prometheus git 7935baed sha256:eca5ec96078bae99fdba41c60d14422f7cddb8e205e1c4f6bc6eaa7dd658bf41
prometheus-alertmanager git a2346ca5 sha256:b97f9b7fbf7d081884b8576f87dc8e835dc7ab5dcea8c277c1d48bcc2050356c
prometheus-config-reloader git b8debb4c sha256:713d6d0120f4bf320a61038ab69dd1f8ebfc97bdbd6a4109af9194a0bbeb1639
prometheus-node-exporter git c90542d8 sha256:df22db9706bcc8bc4d289814a75261f43066754f2d23027f9b1805a56e50e585
prometheus-operator git b8debb4c sha256:6dc4cdd28fc6c55f4ace5dd66d202f06b3d9e8678c686c7dcb578eead159c435
prometheus-operator-admission-webhook git b8debb4c sha256:0f059657061cbf4460166f011f97addfb0a932945f52dfb539403943fe62114f
rhel-coreos-extensions sha256:f4e7b3d2fb2a9886e1b64b4e08df0651a2490de61deee1458ae9bebf0ffcf281
route-controller-manager git bc97534a sha256:aacd0cc3af49856c08c291f040c7a0312fefcda55a5cb60a633d3d7b6ce1f4e6
telemeter git cffdabd4 sha256:2ca1bb286c61ae98c108bfd1db5f9577b93aa32f06f885b157d2340d087f855f
thanos git 95f7bb21 sha256:5919ff4c4241e46ac5194eda6dab4c80af78deb9193951a2cbedbbcf1f2b82ea
tools git e468aa68 sha256:1ecaf1decad58fc6ed0bbcd23617c134ab6ffac3594df65bf76a824076c6fa13
vsphere-cloud-controller-manager git 2c21c8ce sha256:e15bc876d10c75d8e7179e554000c5eab3cab6f656cba549fea299d28c9e0a54
vsphere-csi-driver git 01302477 sha256:e418be3d31a8c0b3c10235b31c42cbfc4c91b16a4ccbc2b662f0a5fa54ec8d17
vsphere-csi-driver-operator git c2b41c36 sha256:27effd2659fc9f269675f2ccadc6337af7eaa316a7e45ed744e063f67dcfd953
vsphere-csi-driver-syncer git 01302477 sha256:f9d2228408a245c3d111214cc34d7ef5cad7d4ee8ad38187b1b57b432bd6570d

Rebuilt images without code change

aws-kms-encryption-provider git 088dcaf7 sha256:fd2a2e9b274148b10d074a84237017ffc9855529c589ce0fc4ca28cdc80415c5
cluster-autoscaler-operator git 227f7537 sha256:c43fc1700bb01c5f8154ed557f669baa26642c6edaec9c2cee5203e752c279a7
cluster-baremetal-operator git f64a5c1d sha256:960234298e77cf2637c4c962de8644308b5bdd9e51b84a9964e789329c69db2b
cluster-bootstrap git 8fde9c52 sha256:47baf097f66ac5e2bb61d92903aff01dabac5793ca2598052ee3da76ce3f91d5
cluster-capi-controllers git 7e2de8d3 sha256:a2041817ae0dce59d5375a54e19d0e4d2bbc89ec80da0675653ae80a431f7df5
cluster-dns-operator git 65981306 sha256:2ebfef197f42d0d1b32fa3074142e3243c05cbb9c6ac6b5616cd4ae9b229d559
cluster-kube-cluster-api-operator git 3ec30377 sha256:598325d08a4ef403ffd633fd277d8593426cc95a96155acdcb617d2ac4ef9498
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:2f9580659952a708ca06dfb508aeefa16489df437f317deb06fd2e2fd75db32b
cluster-machine-approver git a52da47f sha256:daebce6559a6fe56945f2cd8df9a37cae55ab6206d072643ef40230b399f56a2
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:5c23cb82a90f116d59d8affc5b37d107d793af2358a5f5f138ed7a506d6af279
cluster-openshift-controller-manager-operator git 0ab30996 sha256:75420919e09d5672bbbb4dc114299c5b0dcf12329e9d6b75a6a65063ae6e1588
cluster-update-keys git c1c56b4c sha256:00efd52bfea7bc92390e4b7b00f4cc8b5b7e9e1cb580f5f38210c5be14ec28a2
driver-toolkit git 686fdac5 sha256:834349dfdb4cab54c62c6cb7ce03da30e7cc6aa874597c6c53b1184f7230d4a4
ibmcloud-cluster-api-controllers git 0453d282 sha256:3faca773466921a4f4447816d5fe5816f2f4b1059db84caa749fbc8d02034781
ironic-machine-os-downloader git dbe19772 sha256:b12a525d33c9bb1a622efea5c68e8d8db946d34eb4c6a967569d97fc15e981d3
ironic-static-ip-manager git fcd9564e sha256:832c4e2e081764964f780edc9f65eea2ed3f067b83bcbb613a254f6549737cc6
kube-rbac-proxy git 59127756 sha256:e10aa59a435e4903b8bc6dbe346446e509bacf9f05e853bec187a91091df8723
kubevirt-cloud-controller-manager git 3f4542ec sha256:24aaec216ab7b40c4ad327f7e0718b4999de60c3b2f73767359e9c9cdc3a9f4c
openstack-cluster-api-controllers git cc76099b sha256:478b5508b4462e1f13ebe52ee5f668bab774cc3ceac21efb843be15527e2b65a
openstack-resource-controller git d00bab2b sha256:7b16dd5e0b7a5a89048915339d4a50c181f8f38a50dcd137d305d41e4f9b06a1
rhel-coreos sha256:53d7dc5eb9c2bd2bdfd2409bacb384cfb7561433fb129479a6c99d66818d97cb
vsphere-cluster-api-controllers git 8c61ba3d sha256:e4fc20b4e16731457d7303838d87cb3e5a834c5e172a93870a735a6f47aacd88

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
Full changelog

agent-installer-node-agent

Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
NO-ISSUE: Update assisted-service’s version (#997) #997
MGMT-20296: Modify RegisterHostConflict log (#990) #990
NO-ISSUE: Update Konflux references (#976) #976
Full changelog

agent-installer-utils

OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
NO-ISSUE: Update ISOBuilder appliance image SHA #83
NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
OCPBUGS-55515: Include cnv operator in ISO builder script #80
OCPBUGS-55623: update to go.mod #81
NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
NO-ISSUE: ISOBuilder- Update README.md #76
NO-ISSUE: ISOBuilder: Add Clean targets. #69
AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
Full changelog

apiserver-network-proxy

OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
Full changelog

aws-machine-controllers

OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
Full changelog

azure-kms-encryption-provider

NO-JIRA: Add OCP engineers to OWNERS for KMS #15
CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
Full changelog

azure-machine-controllers

OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
Full changelog

baremetal-operator

METAL-998: Merge upstream #413
OCPBUGS-54582: Sync apr 2 #410
Full changelog

cli-artifacts

OCPBUGS-53106: Get installer image from configMap for node-image command #2005
OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
NO-JIRA: adm release new: simplify writePayload #2008
COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
Full changelog

cloud-credential-operator

OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
Full changelog

cluster-authentication-operator

OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
Full changelog

cluster-capi-operator

OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
NO-JIRA: Prevent caching CAPI objects across namespaces #285
METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
OCPCLOUD-2648: Machine sync controller deletion logic #278
OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
Full changelog

cluster-config-api

OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
Fix broken ControlPlaneMachineSet integration tests #2296
OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
MON-4071: GA MetricsCollectionProfiles #2286
CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
Promote OnClusterBuild featuregate to default #2192
trt-2080: check devlopment start date for latest release #2285
NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
Full changelog

cluster-config-operator

OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
Full changelog

cluster-etcd-operator

OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
OCPEDGE-1773: Fix arbiter field in install-config #1409
OCPBUGS-53512: fix CVE-2025-30204 #1412
OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
Full changelog

cluster-ingress-operator

CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-54945: Bump library-go #560
Full changelog

cluster-monitoring-operator

MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207: Bump prometheus-operator to v0.81.0 #2593
NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
Full changelog

cluster-network-operator

OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
OCPBUGS-54238: Update CSR status condition appropriately #2674
CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
CORENET-5856: Update RouteAdvertisements schema #2685
OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
SDN-5689: Rebase k8s v1.32 #2656
Full changelog

cluster-node-tuning-operator

NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Fixed rcu_nocbs cpu parsing (#1317) #1317
Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
Make the e2e/basic/modules.go test reentrant (#1322) #1322
Enhance hugepages validation error message (#1320) #1320
Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
Full changelog

cluster-olm-operator

OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
Full changelog

cluster-storage-operator

NO-JIRA: correct cinder operator CredentialsRequest name #577
OCPBUGS-54491: sync Azure File permissions with upstream docs #576
STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
Full changelog

cluster-version-operator

OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
OTA-1403: Add an always passing test case #1172
NO-JIRA: make verify #1177
OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
NO-JIRA: manifests: make template manifests valid YAML #1171
OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
Full changelog

console

OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
OCPBUGS-55448: Fix +Add details switch animation regression #15011
OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
OCPBUGS-53443: Check for ACM when hiding switcher #14988
ODC-7727: Change favourites button defaultName #14996
CONSOLE-4492: fix: do not render if listpageheader has no props #14995
OCPBUGS-55252: fix bug where tab underline is missing #14991
NO-JIRA: Deprecate react-router-dom-v5-compat #14994
OCPBUGS-54670: Use PF component group for PageHeading #14965
OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
OCPBUGS-54656: Add space between quick start action list items #14940
OCPBUGS-54601: fix bug where operator appears twice #14983
OCPBUGS-45514: Add account email to the telemetry #14978
CONSOLE-4464: Update PatternFly to latest #14979
OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
OCPBUGS-55018: fix web terminal initialize form style #14974
CONSOLE-4505: Update i18next package #14881
OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
CONSOLE-4542: Remove base dl dd dt CSS #14966
CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
Full changelog

console-operator

OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
Full changelog

hypershift

OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
HYPBLD-642: konflux build hcp cli #6072
OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
AUTOSCALE-127: fix e2e autonode drift test #6062
CNTRLPLANE-112: Enable MIv3 for Ingress #6058
NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
Full changelog

insights-operator

feat: add gatheringDisabled condition (#1078) #1078
CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Enable FIPS #41
Full changelog

ironic

OCPBUGS-55381: Extract files one-by-one in logwatch #654
METAL-1327: Update pkgs ocp419 take2 #651
Full changelog

ironic-agent

OCPBUGS-55315: Delay determining the hostname to put into ignition #182
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
OCPBUGS-55424: Added skip for when config not multi nic #1358
OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
Revert “SPLAT-2180: Added conformance label” #1359
OCPBUGS-55417: Resync CRDs #1357
OCPBUGS-55083: Updates GCP CredentialsRequest #1353
SPLAT-2180: Added conformance label #1354
OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
Full changelog

machine-config-operator

OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Revert “NO-ISSUE: debug podman on PIS” #5013
OCPBUGS-44757: decrease leases for kubelet on azure #5010
NO-ISSUE: debug podman on PIS #5003
MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
OCPBUGS-55388: MSBIC should not update windows machinesets #5009
MCO-1645: API & client-go bumps for MCN V1 API updates #5011
MCO-1519: Adapt MCO code to use V1 MCN API #4992
OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
NO-JIRA: Update Envtest assets to 1.32.1 #5002
OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
MCO-1615: MCN status update degraded #4977
MCO-1509: Enable OCL for disconnected workflow #4971
MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
OCPEDGE-1690: add dual-replica templates #4938
OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
Full changelog

machine-image-customization-controller

OCPBUGS-44031: Verify tls while pulling down IPA #131
Full changelog

machine-os-images

OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

oc-mirror

OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
OCPBUGS-54653: delete: continue on errors (#1127) #1127
OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
Full changelog

operator-framework-tools, operator-lifecycle-manager

NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
NO-ISSUE: Synchronize From Upstream Repositories #994
OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
Full changelog

operator-marketplace

NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
OPRUN-3835: Update to 4.19 community-operators catalog #621
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
Full changelog

service-ca-operator

OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
Full changelog

tests

NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
OCPBUGS-54869: bump limits #29722
OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
MCO-1646: API & client-go bumps for MCN V1 API updates #29717
NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
Revert “TRT-2049: check for any watch requests” #29719
MCO-1519: Adapt MCN tests to use V1 API #29701
OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
TRT-2049: check for any watch requests #29674
NO-ISSUE: Automated - Update synthetic test data #29677
OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
TRT-2043: look for high latency audit requests #29571
OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
OCPBUGS-54869: bump limits #29700
OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
OCPBUGS-55175: Add cleanup to MCN test #29695
OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
OCPBUGS-54869: bump limits #29688
NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
Full changelog

vsphere-problem-detector

OCPBUGS-52964: improve datastore check messages #181
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github