# 4.8.0-0.ci-2023-07-15-003738 Created: 2023-07-15 00:37:45 +0000 UTC Image Digest: `sha256:1aedaeb3b17a4600fe5e9f5201a75e0d20409113b1dad51ac01f8a54f7963ebf` ## Changes from 4.8.0-0.nightly-2023-08-31-044634 ### Components * Kubernetes 1.21.14 * Red Hat Enterprise Linux CoreOS upgraded from 48.84.202308010926-0 to 48.84.202307070009-0 ### New images * [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [add46364](https://github.com/openshift/cloud-provider-aws/commit/add46364048c6601e08728a165bad4171f3db0c1) `sha256:c5ad4c8ee498eeeed89c8653832767302cc69db8bbaddaa89f192ba150eb70cd` * [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [70d0000d](https://github.com/openshift/cloud-provider-azure/commit/70d0000da879fa46afeffb1d5c6117caaecd6118) `sha256:c83f5f1f61ef5114d1d468ac847ca83f5c3192d9ee5a2019ced1af791e360237` * [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [70d0000d](https://github.com/openshift/cloud-provider-azure/commit/70d0000da879fa46afeffb1d5c6117caaecd6118) `sha256:7d7e645274793f17ee6640194b8ff74f7ffdb197c5452c7c94797466ebda03a5` * [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [8d1e0095](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/8d1e00952d27d04dd19907f7ee4b342a514e950b) `sha256:11d441b00818fb11e387ee4007aefe034bc2780fdc0c6c96e5fe03cfb2f4a469` * [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [e4a18e42](https://github.com/openshift/sig-storage-local-static-provisioner/commit/e4a18e4253505b6c38c77c3e35e7ab1629384a18) `sha256:e765333a4d91a8292db38cc59aadd524891c07d3f6df824230856f3d7c5c200d` * [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [5f6677f5](https://github.com/openshift/cloud-provider-openstack/commit/5f6677f5684f8b934ef573c0429b0c115624465a) `sha256:11d4adb089e3471329012d89543f6ce78bf7de9dd11a114ab3fc7aa3bdda926c` * [ovirt-installer](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:fcb10de9a9cd3c460ecba6223d18d9012d89b7360243285144fc3d9ce54a2e98` ### Rebuilt images without code change * [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [f052c89e](https://github.com/openshift/aws-ebs-csi-driver/commit/f052c89e99c63497b15e5bd38e2a5a71036fdefa) `sha256:97204f097fc9f6fe2bec074429d37b630e6e5f9a14e1e9969fb92629f58fa40e` * [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [d1fe616c](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/d1fe616c0da0edddb7019a64b0ad1136b36a5f26) `sha256:759823063f55173f380cb2c30d8ea9fe6b562238ef50fae35b0e1a414e5155cd` * [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws) git [0fae08ce](https://github.com/openshift/cluster-api-provider-aws/commit/0fae08ce8e72d491cc429f171421c140e8a324ac) `sha256:899483fccfce6825321e034f8d083963c708537810731fba4ab4e884a0ee5356` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [58ef8af8](https://github.com/openshift/aws-pod-identity-webhook/commit/58ef8af861317beceac26691d5c452af45ca0e4a) `sha256:666444a05386771fc6c20d79bc1de81fe92514915b288b760f916045012d88a3` * [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2d461b39](https://github.com/openshift/azure-disk-csi-driver/commit/2d461b39bacc76f0b879f943015df4d2191f72f4) `sha256:135504bbe8c42c72383c5e7fcd185954193757d0afb26ba301fade75c01fb906` * [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [d3a3c298](https://github.com/openshift/azure-disk-csi-driver-operator/commit/d3a3c298c91371ccd37896857f623f4494dd78a6) `sha256:783af57812c2ccd4c81796bee4497bc35a302b03f152a19af42cead3fd101685` * [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure) git [e08bd81e](https://github.com/openshift/cluster-api-provider-azure/commit/e08bd81e7d595c41a7849b3e2046e5ed6d60592b) `sha256:1d6ebecb98dd18b6c2a5d1eafb098e0dcf2aff7d269f5b3f07abe9d341ddd44f` * [baremetal-installer](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:52f2181e16986e18c1c9ee361b0b41895fc05c2067a3f02ce44dfe92ba266dd4` * [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [2dabef7e](https://github.com/openshift/cluster-api-provider-baremetal/commit/2dabef7e3dc39d29016b656b81d23d5a00e141ca) `sha256:bfef51d91a8fb1d9bf8807cdf96b65d2f989508705d59497c982e99faad41381` * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [5492cf52](https://github.com/openshift/baremetal-operator/commit/5492cf52309927ed6015340887b15ff10025d371) `sha256:7b6265a95545769baafef8e71ee53489465ed17fda9633faffde882c54298a31` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [c50d793c](https://github.com/openshift/baremetal-runtimecfg/commit/c50d793ca33bd7d476b2b770d4f5d317b79b865b) `sha256:0c59e45ec964e1bbd3ae2dd23076e8e7c3b4887db0a5de2d351b90096603566a` * [cli](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:bb5e052770e5d3f384a95162724d3cd4e9c05e25505cb8f7d95840b16508244b` * [cli-artifacts](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:5f5fd3ec41226012b21024d93d59272b309dada2c78a191e8cdfddd44a243bf0` * [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [a29b63fe](https://github.com/openshift/cloud-credential-operator/commit/a29b63fea17f8fea0b03a271fad02a97519da364) `sha256:86d3b849d35c3c179fc8639059f68f172b03796d3606961a67caaa170a86ed03` * [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [a180c2ab](https://github.com/openshift/cluster-authentication-operator/commit/a180c2ab5c9b09746e984f4f6459b4e8cc06de82) `sha256:25d89462aa05dc26bbf3ab1a80ae0ac6dd6e172aeee1d03e99e5911de610bf6b` * [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [7bbde4cc](https://github.com/openshift/kubernetes-autoscaler/commit/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d) `sha256:43b0b972f6854d04362c69f65659b810defba2f8ec5b7528bce3334c29f2942e` * [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [917d395f](https://github.com/openshift/cluster-autoscaler-operator/commit/917d395f0483ba1b0f516283d9247c585039347a) `sha256:086e01ba70dfffeca5a6b33f21558cbaaa4db7664945be404d026d298330490b` * [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [117d47a2](https://github.com/openshift/cluster-baremetal-operator/commit/117d47a29e9700088d81a3379a72a7d6d68668d1) `sha256:c8d582146b3a6dbea2bc987e94e691fba9f8a25f855fb6a503ffb4d68dba1d57` * [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [f32c0712](https://github.com/openshift/cluster-config-operator/commit/f32c07121bab6b6d37dee7bddd75ec9ae3973dc6) `sha256:b20430ebe20f3b502800859f6e4252c3d6840d873e58147efc793ed484c84a9d` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [07b3f810](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/07b3f81036401073d68eb1ef152b96ab5e5a2fc6) `sha256:7a0de13f8c469252c34affd417b6a4e85f49e7b3614efdb4ea8436444c567d48` * [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [fdb2ebec](https://github.com/openshift/cluster-dns-operator/commit/fdb2ebecdeb992444964f84fd0b5c17f37d80536) `sha256:aeb84e2c504860e1864a4cdfa1bf6368f86a905d683eecc95629c6f8174593da` * [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [90a030de](https://github.com/openshift/cluster-etcd-operator/commit/90a030deedba1cc3b713960029a814573445814b) `sha256:b97b8b929b7cb8b1ee8312e0f3cf77e55205a1142a7e04507a67a068bcdfe486` * [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [4aa1e6f3](https://github.com/openshift/cluster-image-registry-operator/commit/4aa1e6f3e0321df1109672d2d105de5a8b913cb5) `sha256:021f0e858a228f205ee4e3e7890e74964f5f0c448b37bdae6c8380271fc1b5f5` * [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [7163d38a](https://github.com/openshift/cluster-ingress-operator/commit/7163d38a50c505c1289bccf72d62b02e17d25c47) `sha256:9bcea1b6fb5351a729131ac370cc6958d05db98be63bdf6e84ead16b82419fc6` * [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [25c54939](https://github.com/openshift/cluster-kube-apiserver-operator/commit/25c54939bdd02bc8e68f1329fa3ebe16904b3282) `sha256:b8d97778f71a0a6c7088e018b2e0b466ba709343e563eb720e4956254cb87298` * [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [7fa48ebf](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c) `sha256:4d3278893b1a718e3e284bae71592091855af08bc2ebdd2e4d9fc12b12032760` * [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [1b3b3444](https://github.com/openshift/cluster-kube-scheduler-operator/commit/1b3b34440de93395c46c7a6526be9870e8914ce8) `sha256:69271ac3d87bfe96ca5f6911a634305b03eb7f673c37f1d391174a9e0e24325c` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [50c639cc](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/50c639cc7e318c1dab38a2869b928cf703a38515) `sha256:451981b21ec962d65b1d77edb64f98f606727c3368c6529198b3291d41827319` * [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [f0a396ee](https://github.com/openshift/cluster-machine-approver/commit/f0a396eee469a3ace9e473c0476a29d8983671eb) `sha256:302b75a7cc4f3875859bde680262a1ba043ad5e489cd291ddf9edb38329b70bf` * [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [30905ffe](https://github.com/openshift/cluster-monitoring-operator/commit/30905ffe24b1b3b1a332bf133285692a4194eb6e) `sha256:7c746b330c438e0d0a98bba7ff5f34ed2401789aaa075bcb3a6f55153b45031f` * [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [7f0e9b66](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/7f0e9b6659949421100469e3af399888cca7042e) `sha256:cc7a98825f2a14071a823ffa14619db22a7955a971275a503310a623b6d63c49` * [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [286c1577](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/286c157755c8120ce969c7c15f969737b46b1a0a) `sha256:9e6b76b64752af6d42ba33b4fb58c7fdf51ff11375f14b9e41ac3a00d2f2bc97` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [ec46ea5c](https://github.com/openshift/cluster-policy-controller/commit/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0) `sha256:20201c73603d0e3ef298f4dad0c12d5d723b3214f00f965338a0f784c1350850` * [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [2c97085f](https://github.com/openshift/cluster-storage-operator/commit/2c97085fae78fba46c2808bf03a0128180f2c1e4) `sha256:5940edb795dc7b16bfb6af6b02e4b1d63b15382122048c18291978e2b4d275f0` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [87835b73](https://github.com/openshift/cluster-update-keys/commit/87835b737f0a90a6259150746114f251241bf52e) `sha256:71b346961f1c97192154f36ff7b747996c305cfbd6d21a7bd018ef41fca69255` * [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [c3bd0d0d](https://github.com/openshift/cluster-version-operator/commit/c3bd0d0d0b1837f1b8893ce24971b943c7fbeb18) `sha256:f7af34d5494f1a4b3867225c7eebef770feaf732c11e827eee810906db181470` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [0d221296](https://github.com/openshift/configmap-reload/commit/0d221296e3918abc3c1367a1e7c220baf000965a) `sha256:51a3bb5550527b36e9566b2ee6550366828f7388a572727c4fbe19edce3ee4b7` * [console](https://github.com/openshift/console) git [64f942e4](https://github.com/openshift/console/commit/64f942e437c1d56e63f55105171a9fd15491d3fc) `sha256:07f1c1ff5e1f0b56671a528773c87a66faf89749782e90487ffafed0f20930e5` * [console-operator](https://github.com/openshift/console-operator) git [2bee8bd9](https://github.com/openshift/console-operator/commit/2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6) `sha256:60d3a2c7f652330490a7f5e1dfc79106daa6a5e2fe2c5e128e5837b3f3bc8749` * [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [71a8b346](https://github.com/openshift/containernetworking-plugins/commit/71a8b3469df865daf68cb893bfe313328d4be992) `sha256:24b9d0c0c23fc0e1918589619d2dc57a28e2aba76b438d29eae68f4860a5f287` * [coredns](https://github.com/openshift/coredns) git [642b46ef](https://github.com/openshift/coredns/commit/642b46ef468d132d26c3f84a8bcb4b542d8df1e6) `sha256:77ae1e589d22dae5b890d43a01845ed0179350d9add22957c34433576ef890a9` * [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [5f6677f5](https://github.com/openshift/cloud-provider-openstack/commit/5f6677f5684f8b934ef573c0429b0c115624465a) `sha256:4dfc076f8593f2b84ed0222514ee2df631b2b1b1a969469206df20a0c9df20db` * [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [f6ffb0d7](https://github.com/openshift/csi-driver-manila-operator/commit/f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce) `sha256:08552e361ec2bfda960dc719d032abd81ffa85ac225611cd42d18266c24d9dad` * [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [f6f09a03](https://github.com/openshift/csi-driver-nfs/commit/f6f09a0322fc0d0107e769f2d5c784f99007f99a) `sha256:cca5e74a3fff78bb3130626b6b8ddb44ef1331cc79f0611c6ce9ee450a6be280` * [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [596da63e](https://github.com/openshift/csi-external-attacher/commit/596da63ecf2886a9bce19c08ad1120e123b498af) `sha256:74142490db5e3a5649faef418808b80357986882ae3c1ba55714ab0ed306f09e` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3ea7e68a](https://github.com/openshift/csi-external-provisioner/commit/3ea7e68a518870d63c7da9485f8a69fa1555b452) `sha256:86e10b6d626c1f06c031e96eb1b8bb0229ee6ffa223957e1ad656446e9bf1586` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [b5dd2b39](https://github.com/openshift/csi-external-resizer/commit/b5dd2b39e9dfb83addd0c07654c3b9119e24cb36) `sha256:237ff0f90f63c17fb338f63a95164bfae1e704c631ee6b4ed567f119d3d2b05e` * [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:d0cc053ca7fed69875efd52d356ba9226ab268d4cbd6abaf82b576ba6f579992` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a29b1153](https://github.com/openshift/csi-livenessprobe/commit/a29b1153451d6ffa6fbcb1dacbe25639c2523488) `sha256:90e484073db0a10ba792e6e910f47acbd5526c61ca7edbd35c454397de8b825b` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [0519730f](https://github.com/openshift/csi-node-driver-registrar/commit/0519730f75f89c11f1ee07c7f81b0bcae1ddf705) `sha256:d9cc978a8d810c93a63b88b58bd4d0baecead335a2c359b11735a3f18877ab40` * [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:27f6c622f7a5261fa0d7bdb5295d2cb23a2bf2bd3e159a8b1a6fb8d2e0dd6228` * [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:89a13d0a01c0b4e1049e769e64f5f125bbbc96da1d9bc64b39a9c47ff3f0f3a6` * [deployer](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:76a773db3e602dc948f7c546fa64975278da5f352a7a341dd121b9673e6032c8` * [docker-builder](https://github.com/openshift/builder) git [dc2c0061](https://github.com/openshift/builder/commit/dc2c0061e5db06d96bac966bdfe2603fe7bbfa06) `sha256:16d7dd1e4be40de4fc35271f6beb14362cad2770e21152b79d5ba8c814ad5032` * [docker-registry](https://github.com/openshift/image-registry) git [bc68848b](https://github.com/openshift/image-registry/commit/bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e) `sha256:f72d75c655a31f9c6605ffde126c1537f9092141e9042e05882ade57d4f7b39f` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [076a9209](https://github.com/openshift/driver-toolkit/commit/076a9209048c7d478f59084409c2dca5e3a6f2d8) `sha256:0085a57fb8443cb457cee9f3ae87588ebb2a8b8c06be17d2ea2253127680177d` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [016bea1a](https://github.com/openshift/egress-router-cni/commit/016bea1a6f5ec53aab8e936f4120c32a05322027) `sha256:9b4052876bc70988b754b764dde75fd48cc5356caa6ce1813a57e1c47bf1b2c4` * [etcd](https://github.com/openshift/etcd) git [ab17755d](https://github.com/openshift/etcd/commit/ab17755dee96d4bd12daec2fdb3764939a10fae0) `sha256:54c8dc1a95442db2b9277d1b55c97a2d5a58bf9aac43d14e86217f06b90d925b` * [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [34db56eb](https://github.com/openshift/cluster-api-provider-gcp/commit/34db56ebf7a8a46828f5830d42b26f9d2bdd0db1) `sha256:c31aacd223e23b7cbef66e7a66bafd94ff35924cfc3698505103175c084848fe` * [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [3978a210](https://github.com/openshift/gcp-pd-csi-driver/commit/3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c) `sha256:81e05d653d956b95fb09b1f068b39055841ea4dc67c6557638120f19710d9bf8` * [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [35ebe860](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/35ebe86003c339821d3a36186a66f8ef86049932) `sha256:d75c8842393c104060930c142cfcfdd279815cfc719bb3d6c2d333e69d7da0f5` * [grafana](https://github.com/openshift/grafana) git [7156d02c](https://github.com/openshift/grafana/commit/7156d02c9b5c715460a650e32eacdd6996f4ce4f) `sha256:6977096dd1c27f1dc6914deaa94f2f4dd57f0ba9d0ac344e1cf3f01b592a77c3` * [haproxy-router](https://github.com/openshift/router) git [d0d63803](https://github.com/openshift/router/commit/d0d63803fbefba67f09df0edb271199623659ca8) `sha256:cd368dfb6647ffcb86c47037ec3c7dba96fb8837043a4c31c4bc33154ad5a90f` * [insights-operator](https://github.com/openshift/insights-operator) git [53425de1](https://github.com/openshift/insights-operator/commit/53425de1f7fbd79fd785f4260f40def8a6eec7b9) `sha256:de2ed7dc263bd8152018cdc1b6428bbafb4eb0cc10fd951be20f240e376913f9` * [installer](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:2701b2e381cbdd525e7d319d93af788b7eef341418576bd0337307780e5fb330` * [installer-artifacts](https://github.com/openshift/installer) git [481d1aa6](https://github.com/openshift/installer/commit/481d1aa6897be61c4198d18c5e1f739cad6296a3) `sha256:642e583e898404ee4b6446b2e5a8b5ee8fc772bfa91abf21a1d6cf4bfd451146` * [ironic](https://github.com/openshift/ironic-image) git [4ed2e4b5](https://github.com/openshift/ironic-image/commit/4ed2e4b56c1eb82573b859b0499bb5141113bad0) `sha256:303e6153f380dfbe002e556442a855e6bdd4178973826f44a8ca56565381231b` * [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [b3ecae8d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/b3ecae8d1c6cd84a8784cf3dd17532797af7b724) `sha256:1237e8748313171bfd83e3f6805e01a161c918094b5a505c7fdb74065a383898` * [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [08761ed5](https://github.com/openshift/ironic-inspector-image/commit/08761ed526b7817de7c92e0d621698404fca7a05) `sha256:def268f1316c4fa40afffddb07fc643e1063217d441929ec117185fa66269712` * [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [aa13ca35](https://github.com/openshift/ironic-ipa-downloader/commit/aa13ca35ba38f2ceadb5e98ddc9e8ad0b875bb96) `sha256:5c124eb90485bbcf1285951468e0af0d96f072880ec7851634b658cb6a3a9c0f` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dceaf133](https://github.com/openshift/ironic-rhcos-downloader/commit/dceaf1333634a4aea3f211849e81a6247160122b) `sha256:7444301fef25eba3c4b637c737ae2c6f50c49981512f5d88cc3c844d68e0d231` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d2e40e34](https://github.com/openshift/ironic-static-ip-manager/commit/d2e40e34f8284d0ac7c4e9133b537baeac07b408) `sha256:f0fc26835d3e69066f3ddcacbfb49c868a3ada0887ea0aef6f7b824cb931b9d9` * [jenkins](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:f19ace9f9743a2c87c8e719d46bfdb3d42870183f9eef9aca7459294501b0a62` * [jenkins-agent-base](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:186537221a72af85edf37ce94167930f3f4fc8f4ea458a0266daefb2ae436e45` * [jenkins-agent-maven](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:f11289db008c2e4863f07803d5bd119ad0c5f8b2741161921811c78860909ae6` * [jenkins-agent-nodejs](https://github.com/openshift/jenkins) git [ebd42a7f](https://github.com/openshift/jenkins/commit/ebd42a7ff41efdd6d50d1e28c047438e9375d562) `sha256:5bd8942ba704ebf912eefdc80b1f2e1f3a053dc87b5cbbf9fb7503ad4f7657b4` * [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [bfffea3b](https://github.com/openshift/k8s-prometheus-adapter/commit/bfffea3bf70fc5203814886f6483a569f2f22c87) `sha256:64e160a9f0a6106314956be27c5c1258a35a7c111c50e48c363a0c3847030739` * [keepalived-ipfailover](https://github.com/openshift/images) git [ad38e116](https://github.com/openshift/images/commit/ad38e116f3533e0e78621a2887d8b70cde7cba31) `sha256:5db8d7c214dff3c2cdc4910481c9210761c4b786f176adec151a1bf79293e193` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [813c3da7](https://github.com/openshift/kube-rbac-proxy/commit/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5) `sha256:3869910c1e208b125bdecd4ac2d8b2cae42efe221c704491b86aa9b18ce95a65` * [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [94716629](https://github.com/openshift/kube-state-metrics/commit/947166293195d115500d4479c0c40c8c01a25ad0) `sha256:b4d24a2f4e35652e78220c02dbd97c1592397f9f31ce39fa96bd4d17f03936e5` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [38e0105c](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/38e0105c9fc5367a2e0bd22446b10a1f65fcb416) `sha256:1c36e52047e9b2856749764ef7bea9b736e55709ddf279ca18e60850f9927615` * [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [ddd2c3ad](https://github.com/openshift/kuryr-kubernetes/commit/ddd2c3adeac4d31711a7949c347f444ee4fdce6d) `sha256:34f5d841f3396cb911e80f3a561432eecdb347bbd518a76eb9238adc3e358892` * [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [ddd2c3ad](https://github.com/openshift/kuryr-kubernetes/commit/ddd2c3adeac4d31711a7949c347f444ee4fdce6d) `sha256:1382b2b4bfeb5874b45c1a2ad31fa38a6126b455b1d18d052d88ae0dc9ad7833` * [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [9542e5ac](https://github.com/openshift/cluster-api-provider-libvirt/commit/9542e5ac08b7731a37d20c881695aab904201c22) `sha256:2e89c9c23954b75e61664a5cfcca7f9c6d8db49145550583eaf9982632070374` * [machine-api-operator](https://github.com/openshift/machine-api-operator) git [edc3e864](https://github.com/openshift/machine-api-operator/commit/edc3e864006486a7a85e2e5e4297e307339e9f0e) `sha256:8d2fb7a6a867bf32151d80fa8f88699ea0c597e7b393248d0880cf388c8dd831` * [machine-config-operator](https://github.com/openshift/machine-config-operator) git [38ffe753](https://github.com/openshift/machine-config-operator/commit/38ffe7535a180e6fa145d40c4f0f918e681e836e) `sha256:fa04d2ed618d6db3c231a8d0358cf5877c2e51d54bde671ed31bd109c014bd47` * machine-os-content `sha256:43e4ee59f48ce53df72430ac6c5ffb4e1fcacb1c96ca16cc682876bcd2a1bb78` * [mdns-publisher](https://github.com/openshift/mdns-publisher) git [1c707a28](https://github.com/openshift/mdns-publisher/commit/1c707a28e88b42780fb37fad4532be7220acd1c5) `sha256:a0f54116942c3f38ffa6bc51ea82b0778bc99272d51b7f91fe302dd669c8f1fb` * [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [64645feb](https://github.com/openshift/multus-admission-controller/commit/64645febe4129a794b1291d0a375a7b2bb7fba39) `sha256:cc6c27173b61f995c0c563a91431aadf06ce7166a46f2cc30ccd52344439f34d` * [multus-cni](https://github.com/openshift/multus-cni) git [73d0cfed](https://github.com/openshift/multus-cni/commit/73d0cfedfff518269f7184615e120afc1406a466) `sha256:cbf39953edd95cd284f4dce415474bd4913f4e77a9d848cf9087efefffe74b85` * [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [187ad91f](https://github.com/openshift/multus-networkpolicy/commit/187ad91f119ff6b73610922012e7af4e704c5e93) `sha256:9a41d3da9fff516247550305dbb73be939c1e3a574ee7bc5804677e9c3a7a9ba` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [64807ab7](https://github.com/openshift/route-override-cni/commit/64807ab77cf97eb69d4202f25840e921290b3e12) `sha256:27831c527c4f3fa1afbe3b3031c871f01909a1ea383f5eb13fc7beeb1c1f5309` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [90e1e394](https://github.com/openshift/whereabouts-cni/commit/90e1e394907abea5a97a7cd68d5a91afe87a8913) `sha256:fceb7caa9f3cbf840b84ec80f6202c79b45a8d56befbeb98e2fe779cefa6dbf8` * [must-gather](https://github.com/openshift/must-gather) git [7e55480f](https://github.com/openshift/must-gather/commit/7e55480fddf089ec9707f02f6644be9f1200b2a2) `sha256:d95ddfecf9cbaf00849d6edcfeefbc2d349bd527587b3ed622fd4fc93a3c347f` * [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [c8812eeb](https://github.com/openshift/network-metrics-daemon/commit/c8812eeb9aa3b535a843407704478454a0ab8c7d) `sha256:ff44063b67e7069bf96e782f464a92bc1204fdcfc0b2b951c26ef60dcfe9b7d9` * [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:49c16a5b03eb30da6bfe4f36a511c62d29db386dede361607e0e4c9bd82d6466` * [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [961db5cc](https://github.com/openshift/oauth-apiserver/commit/961db5cc19f78cb73c628c5219a0c5a6dbde7a3e) `sha256:bdc40dc98f6ef415c9f97308fff1101e3ab273858f772968b3283b5125561667` * [oauth-server](https://github.com/openshift/oauth-server) git [374e2ee3](https://github.com/openshift/oauth-server/commit/374e2ee38a1910c6d56172e9d4ec1828c4dea1be) `sha256:daa162e3d03194ed3f82123bfb43aade0e21a5988eeb0b001dac3665480f41cf` * [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [c2325113](https://github.com/openshift/openshift-apiserver/commit/c23251132914110cc8deed896c415192c02259bb) `sha256:9fe41bf827ffb71e56ef84c791d23c9b015fa980c61f05ed9b949d7fbe8965a0` * [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [69a83a3f](https://github.com/openshift/openshift-controller-manager/commit/69a83a3f3c290519692a66fd5ffe89586eb1b4b9) `sha256:69c2569cd56bf314e8bfd21d7475e564584b828d144c117432d158a6d3cc2248` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [10142914](https://github.com/openshift/openshift-state-metrics/commit/101429149266e2c86a41b82baf47a033c9a93b02) `sha256:a00540f5813be23c71dde7d96acdd8b4d52f445ad710415ed1b983166f16cf36` * [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [5f6677f5](https://github.com/openshift/cloud-provider-openstack/commit/5f6677f5684f8b934ef573c0429b0c115624465a) `sha256:72ef2a7808ca04cb0ec46bb9a18541f1ce992f4cde6c348543139c1d9fc8d69e` * [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [d431a72b](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb) `sha256:3709f7ce24415f395d4c828db638a938ce8b7d3703005a34cbf0d60a6a87d4c1` * [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [3f3d7d1f](https://github.com/operator-framework/operator-marketplace/commit/3f3d7d1f9e914aff08d2ca2b5663358c8b611656) `sha256:8f56e003b5be79cb21466afbe0d7890a17cb34288dd9c2996698eacb688ad2af` * [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [c57863f2](https://github.com/openshift/ovirt-csi-driver/commit/c57863f25ec68b34f3928e02b9b750cfcef3c99c) `sha256:101183271dc754a579a443fcc9332e5abe6cce429a18401fc14329c8fad63de9` * [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [3bab77ba](https://github.com/openshift/ovirt-csi-driver-operator/commit/3bab77baee7a006b7a96bea737828979d77cda9d) `sha256:79fc813d88496a74f2a5137362c7cf52334d20972c5e2f568c81e326dcf93cb4` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [368223b8](https://github.com/openshift/cluster-api-provider-ovirt/commit/368223b8507596055a33b731a7942aab82f59ce0) `sha256:a195a1a2065ab751713870faf1eb57eafec4e076376cd2fa4155dc669413b998` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [2faeb405](https://github.com/openshift/prom-label-proxy/commit/2faeb4050010914d6b55da38bffb44b95702e052) `sha256:30c97178960cc004aaae10337e9ccbe7a1e74367b5ca639da029c1f72a38d821` * [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [7b5ac874](https://github.com/openshift/prometheus-alertmanager/commit/7b5ac8741d87542c43d002aef3b881d7f8065133) `sha256:352a2cae3e90a08bb395766dbd6e630decddab7878249dc0a34ab66506a485f4` * [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [9ad2cf90](https://github.com/openshift/node_exporter/commit/9ad2cf906b9c0c44110401f121dc5cf7d657acca) `sha256:c1021dc394b85106de5a7744a20330194358a74ad71ad2078613dac699682442` * [service-ca-operator](https://github.com/openshift/service-ca-operator) git [b66c4506](https://github.com/openshift/service-ca-operator/commit/b66c45062dd1c4fc4ce7de2f587647522af60e11) `sha256:dd1cd4d7b1f2d097eaa965bc5e2fe7ebfe333d6cbaeabc7879283af1a88dbf4e` * [telemeter](https://github.com/openshift/telemeter) git [eabad556](https://github.com/openshift/telemeter/commit/eabad556e8759422b85b2f27248c52626245f1ba) `sha256:232c61a8d80a8b49df85171709d18047bfdd2756500019348bb6bb4e4800ac28` * [tests](https://github.com/openshift/origin) git [2eb86450](https://github.com/openshift/origin/commit/2eb86450ff251951d9aabda446cb4fd19e9e3b62) `sha256:7e6239a0ffa16d73909753dfadb9f2ee54fa13e72d458ef61cdf13e74f38dde6` * [thanos](https://github.com/openshift/thanos) git [f7c1227d](https://github.com/openshift/thanos/commit/f7c1227d2009f439d4200e305246659ebea299f8) `sha256:1a805d1aed8f5e4801c036fa6260e7dc9b868fa8ce282516fbd69ac24bad5f3f` * [tools](https://github.com/openshift/oc) git [acf4dd4b](https://github.com/openshift/oc/commit/acf4dd4b2aaadf546a6aeaa8c3eb7feffdd40171) `sha256:9b16b5715a4a70d277bbee490cb4cd44c83290bee010678ac55f86fb73975353` * [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:d04a8cdc23047fe83f22ccfc22ee57a80c51022239a18a0d98e264799b887c5d` * [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [18cd9873](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/18cd9873078206f26d25ecf18893ba0864c0cf62) `sha256:eb9e84d76248840f0dd2b38a2e63221c378d74d8e689244c84fbbaa124fd80ef` * [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:4596ddb3a9509913c7c010b7421df806f0b52720605fc8b1122d0d41bc13ae37` * [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [9ff99650](https://github.com/openshift/vsphere-problem-detector/commit/9ff996502f4cb87c89985cdaff346754d645b988) `sha256:59a94be8f898dd6b715e2efdd824aa347289800f1f060f695dee9ab8e6de543b` ### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/) * [OCPBUGS-39429](https://issues.redhat.com/browse/OCPBUGS-39429): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.18 [#107](https://github.com/openshift/cluster-bootstrap/pull/107) * [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#103](https://github.com/openshift/cluster-bootstrap/pull/103) * [OCPBUGS-24975](https://issues.redhat.com/browse/OCPBUGS-24975): Updating ose-cluster-bootstrap-container image to be consistent with ART [#102](https://github.com/openshift/cluster-bootstrap/pull/102) * [OCPBUGS-19235](https://issues.redhat.com/browse/OCPBUGS-19235): Updating ose-cluster-bootstrap images to be consistent with ART [#100](https://github.com/openshift/cluster-bootstrap/pull/100) * [OCPBUGS-16504](https://issues.redhat.com/browse/OCPBUGS-16504): bump(*): vendor update [#99](https://github.com/openshift/cluster-bootstrap/pull/99) * Updating ose-cluster-bootstrap images to be consistent with ART [#88](https://github.com/openshift/cluster-bootstrap/pull/88) * Updating ose-cluster-bootstrap images to be consistent with ART [#82](https://github.com/openshift/cluster-bootstrap/pull/82) * [OCPBUGS-3505](https://issues.redhat.com/browse/OCPBUGS-3505): Waiting for 2 masters in HA mode case [#71](https://github.com/openshift/cluster-bootstrap/pull/71) * [OCPBUGS-6234](https://issues.redhat.com/browse/OCPBUGS-6234): Bump dependencies and image [#74](https://github.com/openshift/cluster-bootstrap/pull/74) * Add API team to reviewers [#75](https://github.com/openshift/cluster-bootstrap/pull/75) * Add API team to the OWNERS [#73](https://github.com/openshift/cluster-bootstrap/pull/73) * [Bug 2006945](https://bugzilla.redhat.com/show_bug.cgi?id=2006945): extend hardcoded restmapper for cluster-bootstrap to avoid crashlooping bootstrap kube-apiserver [#64](https://github.com/openshift/cluster-bootstrap/pull/64) * update golang version [#65](https://github.com/openshift/cluster-bootstrap/pull/65) * [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/1af395b7881d951a824858f5d393357609bddbf0...) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/) * NO-JIRA: OVN-Kubernetes node RBAC tightening [#2526](https://github.com/openshift/cluster-network-operator/pull/2526) * [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Adds UDN list/watch to ovnknode rbac [#2524](https://github.com/openshift/cluster-network-operator/pull/2524) * [OCPBUGS-42449](https://issues.redhat.com/browse/OCPBUGS-42449): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2515](https://github.com/openshift/cluster-network-operator/pull/2515) * [OCPBUGS-42472](https://issues.redhat.com/browse/OCPBUGS-42472): Add certificatesigningrequests/watch RBAC to ovnkube-node [#2513](https://github.com/openshift/cluster-network-operator/pull/2513) * [HOSTEDCP-1981](https://issues.redhat.com/browse/HOSTEDCP-1981): Add controlplane cli image envar for use with hypershift [#2507](https://github.com/openshift/cluster-network-operator/pull/2507) * [OCPBUGS-42238](https://issues.redhat.com/browse/OCPBUGS-42238): Updates terminationGracePeriodSeconds to 30 seconds for Multus daemonset [#2508](https://github.com/openshift/cluster-network-operator/pull/2508) * [OCPBUGS-35417](https://issues.redhat.com/browse/OCPBUGS-35417): Configure narrowing=yes for IPsec connections [#2400](https://github.com/openshift/cluster-network-operator/pull/2400) * [OCPBUGS-39209](https://issues.redhat.com/browse/OCPBUGS-39209): Add configurable subnets while running hybrid-overlay-node binary [#2495](https://github.com/openshift/cluster-network-operator/pull/2495) * [OCPBUGS-39398](https://issues.redhat.com/browse/OCPBUGS-39398): Preload networking plugin locales [#2488](https://github.com/openshift/cluster-network-operator/pull/2488) * [OCPBUGS-39189](https://issues.redhat.com/browse/OCPBUGS-39189): add required-scc annotation to console-plugin deployment [#2484](https://github.com/openshift/cluster-network-operator/pull/2484) * [OCPBUGS-29497](https://issues.redhat.com/browse/OCPBUGS-29497): HyperShift: do not use antiaffinity on single replica control planes [#2480](https://github.com/openshift/cluster-network-operator/pull/2480) * [OCPBUGS-39096](https://issues.redhat.com/browse/OCPBUGS-39096): Live migration: report network overlap via live_migration_blocked metric [#2482](https://github.com/openshift/cluster-network-operator/pull/2482) * [SDN-4900](https://issues.redhat.com/browse/SDN-4900): rebase openshift/api for openshift-sdn removal [#2476](https://github.com/openshift/cluster-network-operator/pull/2476) * [CONSOLE-3952](https://issues.redhat.com/browse/CONSOLE-3952): Deploy networking-console-plugin by CNO [#2322](https://github.com/openshift/cluster-network-operator/pull/2322) * [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#2282](https://github.com/openshift/cluster-network-operator/pull/2282) * [OCPBUGS-38249](https://issues.redhat.com/browse/OCPBUGS-38249): Verify that the codegen changes were commited [#2373](https://github.com/openshift/cluster-network-operator/pull/2373) * NO-JIRA: iptables-alerter streamlining [#2404](https://github.com/openshift/cluster-network-operator/pull/2404) * [CONSOLE-3952](https://issues.redhat.com/browse/CONSOLE-3952): Add networking-console-plugin image to release payload [#2332](https://github.com/openshift/cluster-network-operator/pull/2332) * [OCPBUGS-38326](https://issues.redhat.com/browse/OCPBUGS-38326): OVN-K, UDN CRD: Add missing permissions to control-plane [#2468](https://github.com/openshift/cluster-network-operator/pull/2468) * [OCPBUGS-38176](https://issues.redhat.com/browse/OCPBUGS-38176): multus, Add openshift-cnv to globalNamespace [#2466](https://github.com/openshift/cluster-network-operator/pull/2466) * [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Change the masquerade subnet default value for new clusters [#2460](https://github.com/openshift/cluster-network-operator/pull/2460) * [SDN-5072](https://issues.redhat.com/browse/SDN-5072): Deploy FRR-K8s [#2450](https://github.com/openshift/cluster-network-operator/pull/2450) * [SDN-5144](https://issues.redhat.com/browse/SDN-5144): Add UserDefinedNetwork CRD and RBAC [#2464](https://github.com/openshift/cluster-network-operator/pull/2464) * [SDN-4773](https://issues.redhat.com/browse/SDN-4773): Add Azure MSI Env Var for ARO HCP [#2465](https://github.com/openshift/cluster-network-operator/pull/2465) * NO-JIRA: more openshift-sdn cleanup [#2455](https://github.com/openshift/cluster-network-operator/pull/2455) * [SDN-5070](https://issues.redhat.com/browse/SDN-5070): Allow day 2 customization of masquerade subnet [#2421](https://github.com/openshift/cluster-network-operator/pull/2421) * [OCPBUGS-37786](https://issues.redhat.com/browse/OCPBUGS-37786): Add proxy env vars to onvkube-node [#2453](https://github.com/openshift/cluster-network-operator/pull/2453) * [OCPBUGS-37713](https://issues.redhat.com/browse/OCPBUGS-37713): Handle random crictl errors in iptables-alerter [#2451](https://github.com/openshift/cluster-network-operator/pull/2451) * [CNV-43973](https://issues.redhat.com/browse/CNV-43973): HCP custom tolerations integration [#2441](https://github.com/openshift/cluster-network-operator/pull/2441) * [SDN-4919](https://issues.redhat.com/browse/SDN-4919): OVN-Kubernetes UDN: EndpointSlice mirror controller RBAC permissions [#2448](https://github.com/openshift/cluster-network-operator/pull/2448) * [SDN-4934](https://issues.redhat.com/browse/SDN-4934): Enable TechPreview FeatureGate for NetworkSegmentation [#2433](https://github.com/openshift/cluster-network-operator/pull/2433) * [OCPBUGS-33758](https://issues.redhat.com/browse/OCPBUGS-33758): Fix IC distributed control plane alerts [#2406](https://github.com/openshift/cluster-network-operator/pull/2406) * [SDN-5029](https://issues.redhat.com/browse/SDN-5029): ipam, virt: enable the persistent ips feature [#2431](https://github.com/openshift/cluster-network-operator/pull/2431) * [SDN-4916](https://issues.redhat.com/browse/SDN-4916): Bump to k8s v1.30 latest [#2429](https://github.com/openshift/cluster-network-operator/pull/2429) * [OCPBUGS-30950](https://issues.redhat.com/browse/OCPBUGS-30950): Set mount propagation to HostToContainer for /var/lib/kubelet [#2368](https://github.com/openshift/cluster-network-operator/pull/2368) * [SDN-4934](https://issues.redhat.com/browse/SDN-4934): Network Segmentation Feature Gate Vendoring from API [#2428](https://github.com/openshift/cluster-network-operator/pull/2428) * [OCPBUGS-23758](https://issues.redhat.com/browse/OCPBUGS-23758): Set global IP forwarding sysctl parameters while starting ovnkube-node [#2385](https://github.com/openshift/cluster-network-operator/pull/2385) * [OCPBUGS-29648](https://issues.redhat.com/browse/OCPBUGS-29648): update whereabouts crd [#2414](https://github.com/openshift/cluster-network-operator/pull/2414) * [OCPBUGS-31878](https://issues.redhat.com/browse/OCPBUGS-31878): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2335](https://github.com/openshift/cluster-network-operator/pull/2335) * [OCPBUGS-35316](https://issues.redhat.com/browse/OCPBUGS-35316): Create the configmap mtu if not found [#2410](https://github.com/openshift/cluster-network-operator/pull/2410) * [OCPBUGS-34313](https://issues.redhat.com/browse/OCPBUGS-34313): Updating cluster-network-operator-container image to be consistent with ART for 4.17 [#2381](https://github.com/openshift/cluster-network-operator/pull/2381) * [OCPBUGS-30948](https://issues.redhat.com/browse/OCPBUGS-30948): Use applyconfigurations for updating network.oprerator status [#2333](https://github.com/openshift/cluster-network-operator/pull/2333) * [SDN-5029](https://issues.redhat.com/browse/SDN-5029): linter: removed deprecated linters [#2408](https://github.com/openshift/cluster-network-operator/pull/2408) * [OCPBUGS-23000](https://issues.redhat.com/browse/OCPBUGS-23000): Adds cluster-autoscaler annotation to prevent eviction [#2369](https://github.com/openshift/cluster-network-operator/pull/2369) * [OCPBUGS-33497](https://issues.redhat.com/browse/OCPBUGS-33497): Limit iptables-alerter's cpu [#2401](https://github.com/openshift/cluster-network-operator/pull/2401) * [SDN-4896](https://issues.redhat.com/browse/SDN-4896): Drop openshift-sdn support [#2384](https://github.com/openshift/cluster-network-operator/pull/2384) * [NP-976](https://issues.redhat.com/browse/NP-976), [OCPBUGS-34658](https://issues.redhat.com/browse/OCPBUGS-34658): Live migration: add metrics to observe CNI live migration [#2388](https://github.com/openshift/cluster-network-operator/pull/2388) * [OCPBUGS-34858](https://issues.redhat.com/browse/OCPBUGS-34858), [OCPBUGS-34916](https://issues.redhat.com/browse/OCPBUGS-34916): Validate live migration before setting the progressing condition [#2399](https://github.com/openshift/cluster-network-operator/pull/2399) * [OCPBUGS-34524](https://issues.redhat.com/browse/OCPBUGS-34524): Fix DNSResolver feature gate enablement [#2387](https://github.com/openshift/cluster-network-operator/pull/2387) * [MON-3795](https://issues.redhat.com/browse/MON-3795), [SDN-3817](https://issues.redhat.com/browse/SDN-3817): Add ANP metric rule expressions for telemetry exposure [#2347](https://github.com/openshift/cluster-network-operator/pull/2347) * [OCPBUGS-33497](https://issues.redhat.com/browse/OCPBUGS-33497): Handle pod exiting race conditions in iptables-alerter [#2377](https://github.com/openshift/cluster-network-operator/pull/2377) * [OCPBUGS-31876](https://issues.redhat.com/browse/OCPBUGS-31876): Enable UDP aggregation on s390x [#2331](https://github.com/openshift/cluster-network-operator/pull/2331) * [OCPBUGS-34359](https://issues.redhat.com/browse/OCPBUGS-34359): Ensure that the node-identity webhook address contains colons for IPv6 [#2382](https://github.com/openshift/cluster-network-operator/pull/2382) * [NP-975](https://issues.redhat.com/browse/NP-975): Align new node subnet allocation between OVN-K and SDN during live migration [#2367](https://github.com/openshift/cluster-network-operator/pull/2367) * [OCPBUGS-32991](https://issues.redhat.com/browse/OCPBUGS-32991): Add conditions for ignored-namespaces [#2358](https://github.com/openshift/cluster-network-operator/pull/2358) * [NP-974](https://issues.redhat.com/browse/NP-974): Validation for live migration from OpenShiftSDN to OVNKubernetes [#2344](https://github.com/openshift/cluster-network-operator/pull/2344) * [OCPBUGS-33728](https://issues.redhat.com/browse/OCPBUGS-33728): Add custom masquerade subnet against right key at ovnkube-config CM [#2371](https://github.com/openshift/cluster-network-operator/pull/2371) * [CFE-888](https://issues.redhat.com/browse/CFE-888): Enable DNSNameResolver feature-gate [#2131](https://github.com/openshift/cluster-network-operator/pull/2131) * [OCPBUGS-32979](https://issues.redhat.com/browse/OCPBUGS-32979): Update network operator status for IPsec [#2360](https://github.com/openshift/cluster-network-operator/pull/2360) * [USHIFT-2912](https://issues.redhat.com/browse/USHIFT-2912): Add ref to MicroShift's Multus and CNI Plugins [#2365](https://github.com/openshift/cluster-network-operator/pull/2365) * [OCPBUGS-29403](https://issues.redhat.com/browse/OCPBUGS-29403): add more safe sysctls [#2273](https://github.com/openshift/cluster-network-operator/pull/2273) * [OCPBUGS-32525](https://issues.redhat.com/browse/OCPBUGS-32525): Check every MachineConfigPool for IPsec plugin existence [#2349](https://github.com/openshift/cluster-network-operator/pull/2349) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2364](https://github.com/openshift/cluster-network-operator/pull/2364) * [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Update EQoS CRD to latest [#2362](https://github.com/openshift/cluster-network-operator/pull/2362) * [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Reapply "Merge pull request #2330 from pperiyasamy/block-sdn-upgrade" [#2361](https://github.com/openshift/cluster-network-operator/pull/2361) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2354](https://github.com/openshift/cluster-network-operator/pull/2354) * Revert #2330 "SDN-4726: Block upgrade for openshift-sdn" [#2356](https://github.com/openshift/cluster-network-operator/pull/2356) * [SDN-4434](https://issues.redhat.com/browse/SDN-4434): Network diagnostics scheduling [#2339](https://github.com/openshift/cluster-network-operator/pull/2339) * [SDN-4726](https://issues.redhat.com/browse/SDN-4726): Block upgrade for openshift-sdn [#2330](https://github.com/openshift/cluster-network-operator/pull/2330) * [SDN-4114](https://issues.redhat.com/browse/SDN-4114): Add iptables-alerter daemonset [#2329](https://github.com/openshift/cluster-network-operator/pull/2329) * [OCPBUGS-31528](https://issues.redhat.com/browse/OCPBUGS-31528): infraconfig: handle vSphere UPI by not updating any fields [#2327](https://github.com/openshift/cluster-network-operator/pull/2327) * [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Improved prometheus rule for ipsec metric [#2346](https://github.com/openshift/cluster-network-operator/pull/2346) * [OCPBUGS-32402](https://issues.redhat.com/browse/OCPBUGS-32402): Fix wait logic for IPsec certificate signing request [#2342](https://github.com/openshift/cluster-network-operator/pull/2342) * [SDN-4688](https://issues.redhat.com/browse/SDN-4688): ANP: Add RBAC for cluster-manager [#2338](https://github.com/openshift/cluster-network-operator/pull/2338) * [OCPBUGS-32347](https://issues.redhat.com/browse/OCPBUGS-32347): Improve IPsec MachineConfig readiness check [#2341](https://github.com/openshift/cluster-network-operator/pull/2341) * [SDN-4163](https://issues.redhat.com/browse/SDN-4163): Add ipsec state to telemetry [#2270](https://github.com/openshift/cluster-network-operator/pull/2270) * [OCPBUGS-22969](https://issues.redhat.com/browse/OCPBUGS-22969): Use v1 for flowcontrol API [#2095](https://github.com/openshift/cluster-network-operator/pull/2095) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2340](https://github.com/openshift/cluster-network-operator/pull/2340) * [SDN-4519](https://issues.redhat.com/browse/SDN-4519): Configure CNO as per new API changes for join and transit switch subnet [#2318](https://github.com/openshift/cluster-network-operator/pull/2318) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#2334](https://github.com/openshift/cluster-network-operator/pull/2334) * [NP-956](https://issues.redhat.com/browse/NP-956): Remove managed cluster checking for live migration [#2321](https://github.com/openshift/cluster-network-operator/pull/2321) * [OCPBUGS-26408](https://issues.redhat.com/browse/OCPBUGS-26408): automountServiceAccountToken:false hosted CP pods [#2306](https://github.com/openshift/cluster-network-operator/pull/2306) * [SDN-4596](https://issues.redhat.com/browse/SDN-4596): Update (B)ANP CRDs; prepare for GA [#2328](https://github.com/openshift/cluster-network-operator/pull/2328) * [SDN-4500](https://issues.redhat.com/browse/SDN-4500): Add write permission for EgressQoS status [#2319](https://github.com/openshift/cluster-network-operator/pull/2319) * [SDN-4607](https://issues.redhat.com/browse/SDN-4607): Allow HyperShift ability to set ConfigMap through env var [#2309](https://github.com/openshift/cluster-network-operator/pull/2309) * [OCPBUGS-22995](https://issues.redhat.com/browse/OCPBUGS-22995): Tighten the permissions on whereabouts.conf [#2106](https://github.com/openshift/cluster-network-operator/pull/2106) * [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Fully disable network-node-identity on ROKS [#2313](https://github.com/openshift/cluster-network-operator/pull/2313) * [SDN-4598](https://issues.redhat.com/browse/SDN-4598): Set runAsUser to env variable if it is set [#2307](https://github.com/openshift/cluster-network-operator/pull/2307) * [OCPBUGS-30103](https://issues.redhat.com/browse/OCPBUGS-30103): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2288](https://github.com/openshift/cluster-network-operator/pull/2288) * [OCPBUGS-30831](https://issues.redhat.com/browse/OCPBUGS-30831): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2308](https://github.com/openshift/cluster-network-operator/pull/2308) * [OCPBUGS-30299](https://issues.redhat.com/browse/OCPBUGS-30299): Fix managed cluster detection on ARO [#2299](https://github.com/openshift/cluster-network-operator/pull/2299) * [OPNET-358](https://issues.redhat.com/browse/OPNET-358), [OPNET-360](https://issues.redhat.com/browse/OPNET-360): Allow VIP mutation in Infra CR [#2130](https://github.com/openshift/cluster-network-operator/pull/2130) * [OCPBUGS-29288](https://issues.redhat.com/browse/OCPBUGS-29288): Ensure proper deprecation for the default field manager [#2274](https://github.com/openshift/cluster-network-operator/pull/2274) * [OCPBUGS-24380](https://issues.redhat.com/browse/OCPBUGS-24380), [OCPBUGS-24381](https://issues.redhat.com/browse/OCPBUGS-24381), [OCPBUGS-24382](https://issues.redhat.com/browse/OCPBUGS-24382): Update APBExternalRoute, EgressFirewall, EgressQoS permissions for ovnkube pods [#2262](https://github.com/openshift/cluster-network-operator/pull/2262) * [OCPBUGS-25764](https://issues.redhat.com/browse/OCPBUGS-25764): memory-trim-on-compaction is enabled by default [#2260](https://github.com/openshift/cluster-network-operator/pull/2260) * [OCPBUGS-23788](https://issues.redhat.com/browse/OCPBUGS-23788): Only allow valid values for gatewayConfig.ipForwarding [#2127](https://github.com/openshift/cluster-network-operator/pull/2127) * [OCPBUGS-29341](https://issues.redhat.com/browse/OCPBUGS-29341): Run dhcp-daemon pods as system-node-critical priority [#2280](https://github.com/openshift/cluster-network-operator/pull/2280) * [OCPBUGS-24690](https://issues.redhat.com/browse/OCPBUGS-24690): Disable network-node-identity on ROKS [#2197](https://github.com/openshift/cluster-network-operator/pull/2197) * [OCPBUGS-26492](https://issues.redhat.com/browse/OCPBUGS-26492): Not set CNO to degraded if API server returns conflict error [#2192](https://github.com/openshift/cluster-network-operator/pull/2192) * [OCPBUGS-24214](https://issues.redhat.com/browse/OCPBUGS-24214): Add ownership annotations [#2120](https://github.com/openshift/cluster-network-operator/pull/2120) * [OCPBUGS-24601](https://issues.redhat.com/browse/OCPBUGS-24601): Add minReadySeconds to network-node-identity [#2151](https://github.com/openshift/cluster-network-operator/pull/2151) * [OCPBUGS-29305](https://issues.redhat.com/browse/OCPBUGS-29305): ipsec: fix openssl typo [#2269](https://github.com/openshift/cluster-network-operator/pull/2269) * [OCPBUGS-28920](https://issues.redhat.com/browse/OCPBUGS-28920): Update ingressconfig_controller to use field Manager [#2259](https://github.com/openshift/cluster-network-operator/pull/2259) * NO-JIRA: Remove ILB from CNCC [#2182](https://github.com/openshift/cluster-network-operator/pull/2182) * [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Fix CloudPrivateIPConfig CRD in common [#2249](https://github.com/openshift/cluster-network-operator/pull/2249) * [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART for 4.16 [#2233](https://github.com/openshift/cluster-network-operator/pull/2233) * [OCPBUGS-28676](https://issues.redhat.com/browse/OCPBUGS-28676): Remove libreswan rpm existence checks [#2238](https://github.com/openshift/cluster-network-operator/pull/2238) * [OCPBUGS-29099](https://issues.redhat.com/browse/OCPBUGS-29099): Add hostNetwork:true to cni-sysctl-allowlist ds [#2237](https://github.com/openshift/cluster-network-operator/pull/2237) * [OCPBUGS-24436](https://issues.redhat.com/browse/OCPBUGS-24436): Add probes to node-network-identity [#2148](https://github.com/openshift/cluster-network-operator/pull/2148) * [OCPBUGS-24299](https://issues.redhat.com/browse/OCPBUGS-24299): network-node-identity mounts secrets with mode 0640 [#2142](https://github.com/openshift/cluster-network-operator/pull/2142) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#2224](https://github.com/openshift/cluster-network-operator/pull/2224) * [NP-874](https://issues.redhat.com/browse/NP-874), [OCPBUGS-27222](https://issues.redhat.com/browse/OCPBUGS-27222): Bump openshift API [#2246](https://github.com/openshift/cluster-network-operator/pull/2246) * [OCPBUGS-24383](https://issues.redhat.com/browse/OCPBUGS-24383): Limit write permissions for egressservices [#2171](https://github.com/openshift/cluster-network-operator/pull/2171) * [NP-903](https://issues.redhat.com/browse/NP-903): Only allows live migration on standalone managed clusters [#2236](https://github.com/openshift/cluster-network-operator/pull/2236) * [OCPBUGS-19551](https://issues.redhat.com/browse/OCPBUGS-19551): ovnkube: simplify northd threading and SNO templating [#2234](https://github.com/openshift/cluster-network-operator/pull/2234) * [OCPBUGS-24976](https://issues.redhat.com/browse/OCPBUGS-24976): Updating cluster-network-operator-container image to be consistent with ART [#2156](https://github.com/openshift/cluster-network-operator/pull/2156) * [OCPBUGS-25079](https://issues.redhat.com/browse/OCPBUGS-25079): Prevent NoRunningOvnControlPlane alert getting fired continuously [#2208](https://github.com/openshift/cluster-network-operator/pull/2208) * NO-JIRA: add kyrtapz as reviewer and approver [#2226](https://github.com/openshift/cluster-network-operator/pull/2226) * [OCPBUGS-27823](https://issues.redhat.com/browse/OCPBUGS-27823): Not update migration conditions when any MCP is updating [#2213](https://github.com/openshift/cluster-network-operator/pull/2213) * [OCPBUGS-26986](https://issues.redhat.com/browse/OCPBUGS-26986): Add ConfigMap mount to the whereabouts-reconciler [#2209](https://github.com/openshift/cluster-network-operator/pull/2209) * [SDN-3708](https://issues.redhat.com/browse/SDN-3708): Support configurable masquerade subnet in ovn-k [#1807](https://github.com/openshift/cluster-network-operator/pull/1807) * [OCPBUGS-26952](https://issues.redhat.com/browse/OCPBUGS-26952): Deploy CNO IPsec MC even if user already have one [#2201](https://github.com/openshift/cluster-network-operator/pull/2201) * [OCPBUGS-27264](https://issues.redhat.com/browse/OCPBUGS-27264): Only reconcile on Node updates with Label changes [#2206](https://github.com/openshift/cluster-network-operator/pull/2206) * NO-JIRA: Fix jira component info [#2199](https://github.com/openshift/cluster-network-operator/pull/2199) * [SDN-4166](https://issues.redhat.com/browse/SDN-4166): Enable N-S IPsec [#2191](https://github.com/openshift/cluster-network-operator/pull/2191) * [OCPBUGS-24379](https://issues.redhat.com/browse/OCPBUGS-24379): Remove egressip write permissions from ovn-kubernetes-node [#2170](https://github.com/openshift/cluster-network-operator/pull/2170) * [OCPBUGS-24635](https://issues.redhat.com/browse/OCPBUGS-24635): network node identity: tolarate all taints [#2153](https://github.com/openshift/cluster-network-operator/pull/2153) * [OCPBUGS-25207](https://issues.redhat.com/browse/OCPBUGS-25207): Render IPsec MachineConfig after cluster settles with MachineConfigs [#2187](https://github.com/openshift/cluster-network-operator/pull/2187) * [OCPBUGS-25688](https://issues.redhat.com/browse/OCPBUGS-25688): remove microshift folder, since CNO doesn't manage it [#2173](https://github.com/openshift/cluster-network-operator/pull/2173) * [OCPBUGS-25669](https://issues.redhat.com/browse/OCPBUGS-25669): Update ovn-k managed control-plane RBAC [#2169](https://github.com/openshift/cluster-network-operator/pull/2169) * [OCPBUGS-25760](https://issues.redhat.com/browse/OCPBUGS-25760): Keep the live migration annotation consistant with the enhancement doc [#2179](https://github.com/openshift/cluster-network-operator/pull/2179) * [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635): OVN-K in SNO deployment mode: fix Lease override for CM [#2070](https://github.com/openshift/cluster-network-operator/pull/2070) * [SDN-4227](https://issues.redhat.com/browse/SDN-4227): Use specific permissions for CNCC in GCP [#2069](https://github.com/openshift/cluster-network-operator/pull/2069) * [OCPBUGS-24693](https://issues.redhat.com/browse/OCPBUGS-24693): HyperShift, network-node-identity: Check the deployment in the management cluster [#2166](https://github.com/openshift/cluster-network-operator/pull/2166) * [OCPBUGS-24176](https://issues.redhat.com/browse/OCPBUGS-24176): Ignore invalid PEM blocks [#2178](https://github.com/openshift/cluster-network-operator/pull/2178) * [OCPBUGS-25337](https://issues.redhat.com/browse/OCPBUGS-25337): Avoid removal of ipsec-host daemonset when node is NotReady [#2161](https://github.com/openshift/cluster-network-operator/pull/2161) * [HOSTEDCP-1308](https://issues.redhat.com/browse/HOSTEDCP-1308): remove service account token mount in cloud-network-con… [#2165](https://github.com/openshift/cluster-network-operator/pull/2165) * [OCPBUGS-23729](https://issues.redhat.com/browse/OCPBUGS-23729): Set replicas of Multus admission controller according to Hypershift ControllerAvailabilityPolicy [#2159](https://github.com/openshift/cluster-network-operator/pull/2159) * [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2114](https://github.com/openshift/cluster-network-operator/pull/2114) * [OCPBUGS-23199](https://issues.redhat.com/browse/OCPBUGS-23199): add env var in whereabouts-reconciler daemonset [#2160](https://github.com/openshift/cluster-network-operator/pull/2160) * [OCPBUGS-19830](https://issues.redhat.com/browse/OCPBUGS-19830): fix whereabouts conformance test failures [#2103](https://github.com/openshift/cluster-network-operator/pull/2103) * [OCPBUGS-24650](https://issues.redhat.com/browse/OCPBUGS-24650), [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Set enable-multi-external-gateway flag in ovnkube.conf [#2149](https://github.com/openshift/cluster-network-operator/pull/2149) * [OCPBUGS-19817](https://issues.redhat.com/browse/OCPBUGS-19817), [SDN-4162](https://issues.redhat.com/browse/SDN-4162): Upgrade IPsec with single daemonset pod [#2087](https://github.com/openshift/cluster-network-operator/pull/2087) * [NP-615](https://issues.redhat.com/browse/NP-615): Live migration [#2091](https://github.com/openshift/cluster-network-operator/pull/2091) * [OCPBUGS-23161](https://issues.redhat.com/browse/OCPBUGS-23161): Set logging for controller-runtime [#2129](https://github.com/openshift/cluster-network-operator/pull/2129) * [SDN-4061](https://issues.redhat.com/browse/SDN-4061): Remove interconnect upgrade logic, single-zone YAMLs and everything related to OVNK centralized architecture [#2101](https://github.com/openshift/cluster-network-operator/pull/2101) * [OCPVE-779](https://issues.redhat.com/browse/OCPVE-779): Annotate credentials request manifests [#2105](https://github.com/openshift/cluster-network-operator/pull/2105) * [NP-615](https://issues.redhat.com/browse/NP-615): Bump github.com/openshift/api [#2138](https://github.com/openshift/cluster-network-operator/pull/2138) * [SDN-4308](https://issues.redhat.com/browse/SDN-4308): Update status merge for APBRoute and EgressFirewall. [#2132](https://github.com/openshift/cluster-network-operator/pull/2132) * [OCPBUGS-22710](https://issues.redhat.com/browse/OCPBUGS-22710): Add apbroute/status patch rights for ovnkube-node to update status [#2139](https://github.com/openshift/cluster-network-operator/pull/2139) * [NETOBSERV-1047](https://issues.redhat.com/browse/NETOBSERV-1047): Add a cluster monitoring dashboard for ovn [#1871](https://github.com/openshift/cluster-network-operator/pull/1871) * [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump library-go [#2082](https://github.com/openshift/cluster-network-operator/pull/2082) * [SDN-4101](https://issues.redhat.com/browse/SDN-4101): Remove HyperShift API dependency, Bump kubernetes dependencies [#2128](https://github.com/openshift/cluster-network-operator/pull/2128) * NO ISSUE: add ownership of the proxy-ca [#2111](https://github.com/openshift/cluster-network-operator/pull/2111) * [OCPBUGS-22869](https://issues.redhat.com/browse/OCPBUGS-22869): hypershift, hosted clusters: enable multi-homing and multi-net features [#2113](https://github.com/openshift/cluster-network-operator/pull/2113) * [OCPBUGS-23082](https://issues.redhat.com/browse/OCPBUGS-23082): set automountServiceAccountToken to false for hypershift managed network-node-identity deploy [#2100](https://github.com/openshift/cluster-network-operator/pull/2100) * [OCPBUGS-21924](https://issues.redhat.com/browse/OCPBUGS-21924): Bump golang.org/x/net to v0.17.0 [#2068](https://github.com/openshift/cluster-network-operator/pull/2068) * [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [v2] [#2060](https://github.com/openshift/cluster-network-operator/pull/2060) * [OCPBUGS-11179](https://issues.redhat.com/browse/OCPBUGS-11179): change CNO to use custom ServiceAccount [#2084](https://github.com/openshift/cluster-network-operator/pull/2084) * two replicas for CM instead of 3 [#2052](https://github.com/openshift/cluster-network-operator/pull/2052) * [OCPBUGS-15817](https://issues.redhat.com/browse/OCPBUGS-15817): Egress router: request at least 100 milliCPU [#2077](https://github.com/openshift/cluster-network-operator/pull/2077) * [OCPBUGS-18785](https://issues.redhat.com/browse/OCPBUGS-18785): SDN controller manifest: add node name from downward kapi to sdn controller [#2047](https://github.com/openshift/cluster-network-operator/pull/2047) * [OCPBUGS-19370](https://issues.redhat.com/browse/OCPBUGS-19370): Added HCP label to CNO pods [#2048](https://github.com/openshift/cluster-network-operator/pull/2048) * [OCPBUGS-15220](https://issues.redhat.com/browse/OCPBUGS-15220): Add zone node preference to multus-admission-controller [#1795](https://github.com/openshift/cluster-network-operator/pull/1795) * multinetworkpolicy: allow Neighbor Discovery Protocol traffic [#2010](https://github.com/openshift/cluster-network-operator/pull/2010) * [OCPBUGS-18569](https://issues.redhat.com/browse/OCPBUGS-18569): hypershift: adjust backoff on infrastructure name retry [#1986](https://github.com/openshift/cluster-network-operator/pull/1986) * [OCPBUGS-20533](https://issues.redhat.com/browse/OCPBUGS-20533): Revisit cipher suits for multus-admission-controller's rbac-proxy [#2074](https://github.com/openshift/cluster-network-operator/pull/2074) * [OCPBUGS-10652](https://issues.redhat.com/browse/OCPBUGS-10652): ovnkube: disable conntrack on hybrid overlay VXLAN ports [#1819](https://github.com/openshift/cluster-network-operator/pull/1819) * Make APB External Route namespace selector mandatory for a dynamic hop [#1929](https://github.com/openshift/cluster-network-operator/pull/1929) * [OCPBUGS-20519](https://issues.redhat.com/browse/OCPBUGS-20519): hosted cluster upgrade failure from 4.13 stable to 4.14 [#2065](https://github.com/openshift/cluster-network-operator/pull/2065) * Revert "Merge pull request #2037 from dcbw/db-script-cleanup" [#2058](https://github.com/openshift/cluster-network-operator/pull/2058) * [OCPBUGS-18392](https://issues.redhat.com/browse/OCPBUGS-18392): notify when /etc/openvswitch path changes [#1989](https://github.com/openshift/cluster-network-operator/pull/1989) * [OCPBUGS-18088](https://issues.redhat.com/browse/OCPBUGS-18088), [OCPBUGS-18089](https://issues.redhat.com/browse/OCPBUGS-18089): ovnkube: container scripts cleanup [#2037](https://github.com/openshift/cluster-network-operator/pull/2037) * Remove ability to deploy with Kuryr [#2056](https://github.com/openshift/cluster-network-operator/pull/2056) * [OCPBUGS-20104](https://issues.redhat.com/browse/OCPBUGS-20104): Don't run network node identity as root [#2051](https://github.com/openshift/cluster-network-operator/pull/2051) * [OCPBUGS-20076](https://issues.redhat.com/browse/OCPBUGS-20076): Multus should determine kubeconfig path [#2049](https://github.com/openshift/cluster-network-operator/pull/2049) * Revert Kuryr MTU fixes [#2038](https://github.com/openshift/cluster-network-operator/pull/2038) * Fix MTU miscalculation [#1778](https://github.com/openshift/cluster-network-operator/pull/1778) * [OCPBUGS-19918](https://issues.redhat.com/browse/OCPBUGS-19918): get ipsecStatus from host daemonset [#2042](https://github.com/openshift/cluster-network-operator/pull/2042) * Network metrics daemon: change priority class to openshift-user-critical [#2044](https://github.com/openshift/cluster-network-operator/pull/2044) * [OCPBUGS-14819](https://issues.redhat.com/browse/OCPBUGS-14819): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#1985](https://github.com/openshift/cluster-network-operator/pull/1985) * [OCPBUGS-19861](https://issues.redhat.com/browse/OCPBUGS-19861): Multus per-node certificates should have 24h duration [#2039](https://github.com/openshift/cluster-network-operator/pull/2039) * [OCPBUGS-19418](https://issues.redhat.com/browse/OCPBUGS-19418): Relax conditions to get IC upgrade started [#2018](https://github.com/openshift/cluster-network-operator/pull/2018) * [OCPBUGS-18396](https://issues.redhat.com/browse/OCPBUGS-18396): Fix config status MTU migration not being updated [#2021](https://github.com/openshift/cluster-network-operator/pull/2021) * [OCPBUGS-19705](https://issues.redhat.com/browse/OCPBUGS-19705): Use port 9108 for ovnkube-control-plane metrics [#2031](https://github.com/openshift/cluster-network-operator/pull/2031) * [OCPBUGS-19715](https://issues.redhat.com/browse/OCPBUGS-19715): Do not enable node admission webhook if the CNI is not OVN-Kubernetes [#2030](https://github.com/openshift/cluster-network-operator/pull/2030) * [OCPBUGS-17391](https://issues.redhat.com/browse/OCPBUGS-17391): remove prestop hooks for northd, sbdbd and nbdb [#1978](https://github.com/openshift/cluster-network-operator/pull/1978) * [OCPBUGS-19625](https://issues.redhat.com/browse/OCPBUGS-19625): Multus per-node certificate request [#2009](https://github.com/openshift/cluster-network-operator/pull/2009) * [OCPBUGS-19377](https://issues.redhat.com/browse/OCPBUGS-19377): Kuryr: Fix deriving MTU from previous config [#2007](https://github.com/openshift/cluster-network-operator/pull/2007) * [OCPBUGS-19648](https://issues.redhat.com/browse/OCPBUGS-19648): Network identity: node-specific certificate in ovnkube-node, admission webhook [#1983](https://github.com/openshift/cluster-network-operator/pull/1983) * [OCPBUGS-19550](https://issues.redhat.com/browse/OCPBUGS-19550): multus: set MULTUS_NODE_NAME to filter pods to local node [#2020](https://github.com/openshift/cluster-network-operator/pull/2020) * [OCPBUGS-19018](https://issues.redhat.com/browse/OCPBUGS-19018): use $CPE_NAME to find the OS major version [#2003](https://github.com/openshift/cluster-network-operator/pull/2003) * [OCPBUGS-19494](https://issues.redhat.com/browse/OCPBUGS-19494): ipsec: remove preStop from host [#2015](https://github.com/openshift/cluster-network-operator/pull/2015) * [OCPBUGS-18114](https://issues.redhat.com/browse/OCPBUGS-18114): Update node selector in various YAMLs [#1845](https://github.com/openshift/cluster-network-operator/pull/1845) * Limit OVN-Kubernetes permissions [#1982](https://github.com/openshift/cluster-network-operator/pull/1982) * [OCPBUGS-18892](https://issues.redhat.com/browse/OCPBUGS-18892): make ipsec.service required [#1999](https://github.com/openshift/cluster-network-operator/pull/1999) * [OCPBUGS-19236](https://issues.redhat.com/browse/OCPBUGS-19236): Updating cluster-network-operator images to be consistent with ART [#2006](https://github.com/openshift/cluster-network-operator/pull/2006) * separate libovsdblogs from main ovnkube-master logs [#1938](https://github.com/openshift/cluster-network-operator/pull/1938) * [OCPBUGS-15201](https://issues.redhat.com/browse/OCPBUGS-15201): Disable weak SSH cipher suites [#1981](https://github.com/openshift/cluster-network-operator/pull/1981) * [OCPBUGS-18676](https://issues.redhat.com/browse/OCPBUGS-18676): ovnkube: set northd backoff-interval and use a single thread to save CPU [#1990](https://github.com/openshift/cluster-network-operator/pull/1990) * [OCPBUGS-17380](https://issues.redhat.com/browse/OCPBUGS-17380): ipsec: fix oopsy from 2e3fc8e7a0 [#1996](https://github.com/openshift/cluster-network-operator/pull/1996) * [OCPBUGS-18517](https://issues.redhat.com/browse/OCPBUGS-18517): Kuryr: Set MTU on Bootstrap, not Render phase [#1988](https://github.com/openshift/cluster-network-operator/pull/1988) * [OCPBUGS-18135](https://issues.redhat.com/browse/OCPBUGS-18135): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1955](https://github.com/openshift/cluster-network-operator/pull/1955) * move IPsec to host [#1849](https://github.com/openshift/cluster-network-operator/pull/1849) * [OCPBUGS-17916](https://issues.redhat.com/browse/OCPBUGS-17916): Fix IC configmap lookup in pod_status.go [#1954](https://github.com/openshift/cluster-network-operator/pull/1954) * [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster [#1980](https://github.com/openshift/cluster-network-operator/pull/1980) * [OCPBUGS-18363](https://issues.redhat.com/browse/OCPBUGS-18363): Add '/etc/cni/multus/net.d' into volumemount in multus pod [#1979](https://github.com/openshift/cluster-network-operator/pull/1979) * [OCPBUGS-18175](https://issues.redhat.com/browse/OCPBUGS-18175): Fix bond-cni's default directory in multus manifest [#1953](https://github.com/openshift/cluster-network-operator/pull/1953) * [OCPBUGS-17782](https://issues.redhat.com/browse/OCPBUGS-17782), [SDN-3664](https://issues.redhat.com/browse/SDN-3664): Join ovnkube-controller and ovnkube-node container for multizone setup [#1971](https://github.com/openshift/cluster-network-operator/pull/1971) * [OCPBUGS-16051](https://issues.redhat.com/browse/OCPBUGS-16051), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Enables IP Forwarding config in CNO [#1952](https://github.com/openshift/cluster-network-operator/pull/1952) * [OCPBUGS-17257](https://issues.redhat.com/browse/OCPBUGS-17257): CVE-2023-3978: golang.org/x/net/html: Cross site scripting [#1935](https://github.com/openshift/cluster-network-operator/pull/1935) * [OCPBUGS-17677](https://issues.redhat.com/browse/OCPBUGS-17677): [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. [#1949](https://github.com/openshift/cluster-network-operator/pull/1949) * [OCPBUGS-17964](https://issues.redhat.com/browse/OCPBUGS-17964): ovn-k, managed: Align join subnet configuration [#1962](https://github.com/openshift/cluster-network-operator/pull/1962) * [SDN-4024](https://issues.redhat.com/browse/SDN-4024): Add ANP Feature Gate [#1859](https://github.com/openshift/cluster-network-operator/pull/1859) * [SDN-4057](https://issues.redhat.com/browse/SDN-4057): hypershift: Allow ovnkube-master and ovnkube-node to have different images [#1942](https://github.com/openshift/cluster-network-operator/pull/1942) * Remove certificatesigningrequests/update permission from ovnkubenode [#1934](https://github.com/openshift/cluster-network-operator/pull/1934) * Add rolling update for managed ovnkube-control-plane [#1944](https://github.com/openshift/cluster-network-operator/pull/1944) * IC & openshift + hypershift [#1874](https://github.com/openshift/cluster-network-operator/pull/1874) * [OCPBUGS-16019](https://issues.redhat.com/browse/OCPBUGS-16019): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1904](https://github.com/openshift/cluster-network-operator/pull/1904) * [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): make MAXLOGFILES a real variable and work for self-hosted [#1931](https://github.com/openshift/cluster-network-operator/pull/1931) * Multus thick plugin support [#1915](https://github.com/openshift/cluster-network-operator/pull/1915) * OVN-Kubernetes ipsec: create the CSR with a random name [#1928](https://github.com/openshift/cluster-network-operator/pull/1928) * [CCO-294](https://issues.redhat.com/browse/CCO-294): Switch azure credentials request to use explicit permissions [#1922](https://github.com/openshift/cluster-network-operator/pull/1922) * OVN-Kubernetes: Add status subresource permissions for setting labels and annotations [#1896](https://github.com/openshift/cluster-network-operator/pull/1896) * [SDN-3223](https://issues.redhat.com/browse/SDN-3223): Use encapsulation=true for IBM Cloud [#1800](https://github.com/openshift/cluster-network-operator/pull/1800) * [Bug 16136](https://bugzilla.redhat.com/show_bug.cgi?id=16136): change whereabouts ip reconciler exec [#1890](https://github.com/openshift/cluster-network-operator/pull/1890) * Add OpenStack platform to list of allowed dual-stack clusters [#1697](https://github.com/openshift/cluster-network-operator/pull/1697) * [OCPBUGS-15945](https://issues.redhat.com/browse/OCPBUGS-15945): Stop using utilruntime.PanicHandlers to handle reconciliation panics [#1893](https://github.com/openshift/cluster-network-operator/pull/1893) * [HOSTEDCP-1063](https://issues.redhat.com/browse/HOSTEDCP-1063): allow webhooks in hosted clusters to reach multus-admission-controller service [#1879](https://github.com/openshift/cluster-network-operator/pull/1879) * [OCPBUGS-15961](https://issues.redhat.com/browse/OCPBUGS-15961): FIPS related CNO changes [#1901](https://github.com/openshift/cluster-network-operator/pull/1901) * [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): Revert "Revert "OCPBUGS-10765: Remove oldest ovn acl log files when f… [#1876](https://github.com/openshift/cluster-network-operator/pull/1876) * ovn-k: Configure dns service namespace and name [#1912](https://github.com/openshift/cluster-network-operator/pull/1912) * [OCPBUGS-15544](https://issues.redhat.com/browse/OCPBUGS-15544): Enable multi-external-gateway feature by default for managed and hosted clusters [#1887](https://github.com/openshift/cluster-network-operator/pull/1887) * [OCPBUGS-15918](https://issues.redhat.com/browse/OCPBUGS-15918): Skip rendering 0.0.0.0/0 for cluster proxy status [#1903](https://github.com/openshift/cluster-network-operator/pull/1903) * Change rhel7/8 to rhel8/9 [#1870](https://github.com/openshift/cluster-network-operator/pull/1870) * Enable EgressService controller [#1848](https://github.com/openshift/cluster-network-operator/pull/1848) * Edited multus-admission-controller deployment config to not add autom… [#1767](https://github.com/openshift/cluster-network-operator/pull/1767) * [OCPBUGS-15794](https://issues.redhat.com/browse/OCPBUGS-15794): fix: add missing annotation for workload partitioning [#1866](https://github.com/openshift/cluster-network-operator/pull/1866) * [OCPBUGS-15544](https://issues.redhat.com/browse/OCPBUGS-15544): Add adminpolicybasedexternalroutes rights for ovnkube-node. [#1867](https://github.com/openshift/cluster-network-operator/pull/1867) * Revert "Remove oldest ovn acl log files when file limit exceeded" #1873 [#1873](https://github.com/openshift/cluster-network-operator/pull/1873) * [OCPBUGS-10765](https://issues.redhat.com/browse/OCPBUGS-10765): Remove oldest ovn acl log files when file limit exceeded [#1868](https://github.com/openshift/cluster-network-operator/pull/1868) * kube-proxy config overriding updates [#1831](https://github.com/openshift/cluster-network-operator/pull/1831) * [OCPBUGS-15282](https://issues.redhat.com/browse/OCPBUGS-15282): Add release version annotation to whereabouts-reconciler [#1851](https://github.com/openshift/cluster-network-operator/pull/1851) * [CCO-356](https://issues.redhat.com/browse/CCO-356): Add Infrastructures permission to CNCC cluster role [#1843](https://github.com/openshift/cluster-network-operator/pull/1843) * Add multi-networkpolicies support for OVN [#1796](https://github.com/openshift/cluster-network-operator/pull/1796) * Add support for AdminPolicyBasedExternalRoute CRD and controller's RBAC [#1765](https://github.com/openshift/cluster-network-operator/pull/1765) * [OCPBUGS-15138](https://issues.redhat.com/browse/OCPBUGS-15138): Add kubernetes.io/os nodeSelector to wherebouts reconciler DS [#1841](https://github.com/openshift/cluster-network-operator/pull/1841) * [OCPBUGS-14988](https://issues.redhat.com/browse/OCPBUGS-14988), [SDN-3901](https://issues.redhat.com/browse/SDN-3901): Rebase to kube 1.27 [#1826](https://github.com/openshift/cluster-network-operator/pull/1826) * [CCO-358](https://issues.redhat.com/browse/CCO-358): Manifest changes necessary to support Azure Workload Identity [#1755](https://github.com/openshift/cluster-network-operator/pull/1755) * [OCPBUGS-14714](https://issues.redhat.com/browse/OCPBUGS-14714): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1835](https://github.com/openshift/cluster-network-operator/pull/1835) * [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added another volume to safe-to-evict-local-volume annotation [#1830](https://github.com/openshift/cluster-network-operator/pull/1830) * [OCPBUGS-14833](https://issues.redhat.com/browse/OCPBUGS-14833): Fixes lint issues [#1834](https://github.com/openshift/cluster-network-operator/pull/1834) * [OCPBUGS-14384](https://issues.redhat.com/browse/OCPBUGS-14384): Remove nodeSelector for architecture in whereabouts daemonset [#1828](https://github.com/openshift/cluster-network-operator/pull/1828) * [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Added safe-to-evict annotation to ovnkube-master and multus admission controller components [#1822](https://github.com/openshift/cluster-network-operator/pull/1822) * [OCPBUGS-13922](https://issues.redhat.com/browse/OCPBUGS-13922): Revert "Do not set the operator as available before updating the network config" [#1818](https://github.com/openshift/cluster-network-operator/pull/1818) * [OCPBUGS-11448](https://issues.redhat.com/browse/OCPBUGS-11448): add Hypershift release-image annotation to multus [#1770](https://github.com/openshift/cluster-network-operator/pull/1770) * [OCPBUGS-10937](https://issues.redhat.com/browse/OCPBUGS-10937): multus-admission-controller mounts secret with mode 0640 [#1752](https://github.com/openshift/cluster-network-operator/pull/1752) * [OCPBUGS-13219](https://issues.redhat.com/browse/OCPBUGS-13219): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1803](https://github.com/openshift/cluster-network-operator/pull/1803) * [OCPBUGS-5027](https://issues.redhat.com/browse/OCPBUGS-5027): Make the operator degraded on panic [#1786](https://github.com/openshift/cluster-network-operator/pull/1786) * [OCPBUGS-12856](https://issues.redhat.com/browse/OCPBUGS-12856): Support Device Plugin Resources For Smart NIC and DPU Hosts [#1721](https://github.com/openshift/cluster-network-operator/pull/1721) * Updating cluster-network-operator images to be consistent with ART [#1790](https://github.com/openshift/cluster-network-operator/pull/1790) * [OCPBUGS-11565](https://issues.redhat.com/browse/OCPBUGS-11565): High API requests due to allowlist and operconfig reconcilers running too often [#1788](https://github.com/openshift/cluster-network-operator/pull/1788) * [OCPBUGS-8070](https://issues.redhat.com/browse/OCPBUGS-8070): Depreciate legacy field manager [#1763](https://github.com/openshift/cluster-network-operator/pull/1763) * [OCPBUGS-11550](https://issues.redhat.com/browse/OCPBUGS-11550): AUTH: update cluster-reader to include k8s.ovn.org [#1791](https://github.com/openshift/cluster-network-operator/pull/1791) * [OCPBUGS-10009](https://issues.redhat.com/browse/OCPBUGS-10009): HyperShift: Support HostedControlPlane node selector [#1736](https://github.com/openshift/cluster-network-operator/pull/1736) * [OCPBUGS-11046](https://issues.redhat.com/browse/OCPBUGS-11046): fix reconciliation process of the allowlist controller [#1792](https://github.com/openshift/cluster-network-operator/pull/1792) * [OCPBUGS-1341](https://issues.redhat.com/browse/OCPBUGS-1341): Enhance check controller to remove old check objects [#1649](https://github.com/openshift/cluster-network-operator/pull/1649) * [OCPBUGS-11046](https://issues.redhat.com/browse/OCPBUGS-11046): Fix allowlist ds template [#1773](https://github.com/openshift/cluster-network-operator/pull/1773) * [OCPBUGS-10647](https://issues.redhat.com/browse/OCPBUGS-10647): multus-admission-controller should not run as root under Hypershift [#1745](https://github.com/openshift/cluster-network-operator/pull/1745) * [OCPBUGS-9174](https://issues.redhat.com/browse/OCPBUGS-9174): The cluster-readers group should be able to get net-attach-defs [#1343](https://github.com/openshift/cluster-network-operator/pull/1343) * Updating cluster-network-operator images to be consistent with ART [#1768](https://github.com/openshift/cluster-network-operator/pull/1768) * [OCPBUGS-9964](https://issues.redhat.com/browse/OCPBUGS-9964): Split out konnectivity certs [#1734](https://github.com/openshift/cluster-network-operator/pull/1734) * [SDN-3444](https://issues.redhat.com/browse/SDN-3444): Add runbook url for SBDB connectivity alert [#1553](https://github.com/openshift/cluster-network-operator/pull/1553) * [OCPBUGS-7777](https://issues.redhat.com/browse/OCPBUGS-7777): use --template instead of -a for 'oc observe' [#1760](https://github.com/openshift/cluster-network-operator/pull/1760) * Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [#1735](https://github.com/openshift/cluster-network-operator/pull/1735) * [OCPBUGS-10433](https://issues.redhat.com/browse/OCPBUGS-10433): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1740](https://github.com/openshift/cluster-network-operator/pull/1740) * ovn-kube: move back to unsuffixed RHEL9 images [#1747](https://github.com/openshift/cluster-network-operator/pull/1747) * Updating cluster-network-operator images to be consistent with ART [#1732](https://github.com/openshift/cluster-network-operator/pull/1732) * [OCPBUGS-10649](https://issues.redhat.com/browse/OCPBUGS-10649): HyperShift: Add POD_NAME env to ovnkube-node [#1748](https://github.com/openshift/cluster-network-operator/pull/1748) * [OCPBUGS-10031](https://issues.redhat.com/browse/OCPBUGS-10031): operConfig reconcile can return nil error on failure [#1744](https://github.com/openshift/cluster-network-operator/pull/1744) * Set OVN-K north/south bound stale alerts severity to critical [#1668](https://github.com/openshift/cluster-network-operator/pull/1668) * [OCPBUGS-8707](https://issues.redhat.com/browse/OCPBUGS-8707): Point libreswan to proper nss location [#1727](https://github.com/openshift/cluster-network-operator/pull/1727) * Whereabouts should implement the reconciliation controller [#1693](https://github.com/openshift/cluster-network-operator/pull/1693) * add/update some UTs around clusternetwork change [#1725](https://github.com/openshift/cluster-network-operator/pull/1725) * [OCPBUGS-9931](https://issues.redhat.com/browse/OCPBUGS-9931): Enable configuration of node healthz server on ovnkube [#1715](https://github.com/openshift/cluster-network-operator/pull/1715) * [OCPBUGS-8692](https://issues.redhat.com/browse/OCPBUGS-8692): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1728](https://github.com/openshift/cluster-network-operator/pull/1728) * Cno 4.13 kubernetes 1.26 [#1708](https://github.com/openshift/cluster-network-operator/pull/1708) * use annotation on the daemonset to update hybrid overlay [#1709](https://github.com/openshift/cluster-network-operator/pull/1709) * Remove the ovn-kind-cno.sh script [#1710](https://github.com/openshift/cluster-network-operator/pull/1710) * [SDN-3597](https://issues.redhat.com/browse/SDN-3597): OVN-K alerts: add OVS overflow alerts [#1630](https://github.com/openshift/cluster-network-operator/pull/1630) * [SDN-3730](https://issues.redhat.com/browse/SDN-3730): OVN IC: migrate master alerts to cluster manager [#1716](https://github.com/openshift/cluster-network-operator/pull/1716) * Allow cidr expansion [#1707](https://github.com/openshift/cluster-network-operator/pull/1707) * Enables nodeSelector to be used in egress firewall rule [#1720](https://github.com/openshift/cluster-network-operator/pull/1720) * Add ovnk alert for resource retry failure [#1674](https://github.com/openshift/cluster-network-operator/pull/1674) * [OCPBUGS-6730](https://issues.redhat.com/browse/OCPBUGS-6730), [SDN-3221](https://issues.redhat.com/browse/SDN-3221): ovn-kubernetes: use RHEL9-based images [#1712](https://github.com/openshift/cluster-network-operator/pull/1712) * [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1633](https://github.com/openshift/cluster-network-operator/pull/1633) * Jira OCPBUGS-7774: Print RawCNIConfig in its string representation [#1718](https://github.com/openshift/cluster-network-operator/pull/1718) * [OCPBUGS-6235](https://issues.redhat.com/browse/OCPBUGS-6235): Updating cluster-network-operator images to be consistent with ART [#1656](https://github.com/openshift/cluster-network-operator/pull/1656) * Allow updates to pods [#1717](https://github.com/openshift/cluster-network-operator/pull/1717) * [OCPBUGS-5559](https://issues.redhat.com/browse/OCPBUGS-5559): add default noProxy config for Azure [#1672](https://github.com/openshift/cluster-network-operator/pull/1672) * always create env.sh when run_vs_existing_cluster [#1711](https://github.com/openshift/cluster-network-operator/pull/1711) * [OCPBUGS-7354](https://issues.redhat.com/browse/OCPBUGS-7354): Revert "Revert "OCPBUGS-5842: Use pods oc vs host"" [#1714](https://github.com/openshift/cluster-network-operator/pull/1714) * ovn-k, multi-homing: enable the feature [#1699](https://github.com/openshift/cluster-network-operator/pull/1699) * Revert "OCPBUGS-5842: Use pods oc vs host" [#1713](https://github.com/openshift/cluster-network-operator/pull/1713) * [OCPBUGS-5842](https://issues.redhat.com/browse/OCPBUGS-5842): Use pods oc vs host [#1681](https://github.com/openshift/cluster-network-operator/pull/1681) * [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Added missing API field podref to OverlappingRangeIPReservation CRD [#1677](https://github.com/openshift/cluster-network-operator/pull/1677) * [OCPBUGS-6651](https://issues.redhat.com/browse/OCPBUGS-6651): HyperShift: Add .hypershift.local to no proxy list [#1692](https://github.com/openshift/cluster-network-operator/pull/1692) * [OCPBUGS-6651](https://issues.redhat.com/browse/OCPBUGS-6651): HyperShift: Do not use proxy for internal routes [#1694](https://github.com/openshift/cluster-network-operator/pull/1694) * remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1680](https://github.com/openshift/cluster-network-operator/pull/1680) * ovn-kubernetes: Allow node_mgmt_port_netdev_flags for non-DPU modes [#1676](https://github.com/openshift/cluster-network-operator/pull/1676) * [OCPBUGS-3272](https://issues.redhat.com/browse/OCPBUGS-3272): Unhealthy Readiness Probe failing ci [#1665](https://github.com/openshift/cluster-network-operator/pull/1665) * [OCPBUGS-5306](https://issues.redhat.com/browse/OCPBUGS-5306): ovn-kubernetes: ignore NB/SB readiness checks and dbchecker when not RAFT member [#1673](https://github.com/openshift/cluster-network-operator/pull/1673) * [OCPBUGS-5802](https://issues.redhat.com/browse/OCPBUGS-5802): Update github.com/Masterminds/sprig to v3 [#1679](https://github.com/openshift/cluster-network-operator/pull/1679) * [OCPBUGS-5306](https://issues.redhat.com/browse/OCPBUGS-5306): OVN-Kubernetes: Stop sorting master node addresses [#1675](https://github.com/openshift/cluster-network-operator/pull/1675) * Allow SDN migration from Kuryr to OVNKubernetes [#1639](https://github.com/openshift/cluster-network-operator/pull/1639) * update 'make install.tools' for golangci-lint [#1670](https://github.com/openshift/cluster-network-operator/pull/1670) * Fix CNO crashing when Kuryr without MTU is set [#1669](https://github.com/openshift/cluster-network-operator/pull/1669) * [OCPBUGS-2947](https://issues.redhat.com/browse/OCPBUGS-2947): Disable the drop-icmp container 'oc' pprof webserver on Azure [#1607](https://github.com/openshift/cluster-network-operator/pull/1607) * [OCPBUGS-4350](https://issues.redhat.com/browse/OCPBUGS-4350): Fix handling of deployment and statefulset updates [#1648](https://github.com/openshift/cluster-network-operator/pull/1648) * [OCPBUGS-2532](https://issues.redhat.com/browse/OCPBUGS-2532): Fix default disable-udp-aggregation value on s390x [#1655](https://github.com/openshift/cluster-network-operator/pull/1655) * Fix info log formatting [#1650](https://github.com/openshift/cluster-network-operator/pull/1650) * Support RHOBS monitoring for HyperShift [#1644](https://github.com/openshift/cluster-network-operator/pull/1644) * [OCPBUGS-3916](https://issues.redhat.com/browse/OCPBUGS-3916): SDN alerts: Add `$labels.node` to `SDNPodNotRady` metric [#1637](https://github.com/openshift/cluster-network-operator/pull/1637) * The allowlist daemonset should set a priority class. [#1647](https://github.com/openshift/cluster-network-operator/pull/1647) * Bug OCPBUGS-736: Kuryr: If set use MTU from Config for svc net [#1586](https://github.com/openshift/cluster-network-operator/pull/1586) * [OCPBUGS-3883](https://issues.redhat.com/browse/OCPBUGS-3883): HyperShift: Co-locate OVN-Kubernetes master with other hcp pods [#1627](https://github.com/openshift/cluster-network-operator/pull/1627) * [OCPBUGS-2532](https://issues.redhat.com/browse/OCPBUGS-2532): Disable UDP aggregation on s390x [#1629](https://github.com/openshift/cluster-network-operator/pull/1629) * Jira OCPBUGS-3777: IPsec: Fix broken counter++ expression [#1623](https://github.com/openshift/cluster-network-operator/pull/1623) * [OCPBUGS-3114](https://issues.redhat.com/browse/OCPBUGS-3114): HyperShift: Do not accept empty infrastructure name [#1611](https://github.com/openshift/cluster-network-operator/pull/1611) * HyperShift: Fix typo in control-plane-component label value [#1626](https://github.com/openshift/cluster-network-operator/pull/1626) * Remove references to the hosts kubeconfig [#1612](https://github.com/openshift/cluster-network-operator/pull/1612) * [OCPBUGS-3744](https://issues.redhat.com/browse/OCPBUGS-3744): SDN: /var/run mount cleanup [#1625](https://github.com/openshift/cluster-network-operator/pull/1625) * [OCPBUGS-3460](https://issues.redhat.com/browse/OCPBUGS-3460): CNI binary copy should account for the possibility of symlinks [#1614](https://github.com/openshift/cluster-network-operator/pull/1614) * [OCPBUGS-2598](https://issues.redhat.com/browse/OCPBUGS-2598): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1606](https://github.com/openshift/cluster-network-operator/pull/1606) * [SDN-3508](https://issues.redhat.com/browse/SDN-3508): HyperShift: Render cncc with proxy settings of the management cluster [#1577](https://github.com/openshift/cluster-network-operator/pull/1577) * [NP-607](https://issues.redhat.com/browse/NP-607): update microshift ovnk manifests [#1589](https://github.com/openshift/cluster-network-operator/pull/1589) * [Bug 1896533](https://bugzilla.redhat.com/show_bug.cgi?id=1896533): moved SetDegraded call out of object loop to process all items first [#1600](https://github.com/openshift/cluster-network-operator/pull/1600) * [OCPBUGS-2362](https://issues.redhat.com/browse/OCPBUGS-2362): Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info [#1579](https://github.com/openshift/cluster-network-operator/pull/1579) * fixed typo in comment [#1597](https://github.com/openshift/cluster-network-operator/pull/1597) * Jira OCPBUGS-1736: Always set PROXY variables for CNCC [#1576](https://github.com/openshift/cluster-network-operator/pull/1576) * Remove the allow_ra sysctl for ipv4 from default systl whitelist [#1590](https://github.com/openshift/cluster-network-operator/pull/1590) * [SDN-2591](https://issues.redhat.com/browse/SDN-2591): allow hybrid overlay to be enabled post install [#1584](https://github.com/openshift/cluster-network-operator/pull/1584) * [SDN-3515](https://issues.redhat.com/browse/SDN-3515): HyperShift: multus admission controller: expose metrics over HTTPs [#1583](https://github.com/openshift/cluster-network-operator/pull/1583) * rebase to k8s v1.25.0 [#1571](https://github.com/openshift/cluster-network-operator/pull/1571) * Bug OCPBUGS-2328: Fix for index out of range error [#1588](https://github.com/openshift/cluster-network-operator/pull/1588) * Add sysctl whitelist controller [#1573](https://github.com/openshift/cluster-network-operator/pull/1573) * Kuryr: Add missing keystoneauth options [#1581](https://github.com/openshift/cluster-network-operator/pull/1581) * [OCPBUGS-1341](https://issues.redhat.com/browse/OCPBUGS-1341): Set owner reference for pod network connectivity check [#1566](https://github.com/openshift/cluster-network-operator/pull/1566) * ovn-k, managed: pass join-subnet to control-plane [#1582](https://github.com/openshift/cluster-network-operator/pull/1582) * [OCPBUGS-1083](https://issues.redhat.com/browse/OCPBUGS-1083): Move OVNK alert level to info [#1564](https://github.com/openshift/cluster-network-operator/pull/1564) * Pass enable-udp-aggregation=true to ovn-kubernetes [#1533](https://github.com/openshift/cluster-network-operator/pull/1533) * [OCPBUGS-1038](https://issues.redhat.com/browse/OCPBUGS-1038): Multus IPAM detection should honor conflists [#1570](https://github.com/openshift/cluster-network-operator/pull/1570) * egress_ip: remove redundant config [#1568](https://github.com/openshift/cluster-network-operator/pull/1568) * [OCPBUGS-1515](https://issues.redhat.com/browse/OCPBUGS-1515): Use custom uint128 type when validating v6InternalSubnet [#1561](https://github.com/openshift/cluster-network-operator/pull/1561) * [SDN-3283](https://issues.redhat.com/browse/SDN-3283): HyperShift: Use a socks-proxy in ovnkube-master to allow for node heath checks [#1539](https://github.com/openshift/cluster-network-operator/pull/1539) * Bug: OCPBUGS-736: Kuryr: Use machine net MTU to create service net [#1545](https://github.com/openshift/cluster-network-operator/pull/1545) * Migrate Egress IP configuration during SDN migration and rollback [#1536](https://github.com/openshift/cluster-network-operator/pull/1536) * Allow empty vSphere status field in VIP sync [#1558](https://github.com/openshift/cluster-network-operator/pull/1558) * microshift: update ovnk manifests [#1552](https://github.com/openshift/cluster-network-operator/pull/1552) * Add ovn-kubernetes-microshift to image-stream [#1556](https://github.com/openshift/cluster-network-operator/pull/1556) * Migrate Multicast configuration during SDN migration and rollback [#1543](https://github.com/openshift/cluster-network-operator/pull/1543) * OVN-K: add patch/update service permissions to controller [#1554](https://github.com/openshift/cluster-network-operator/pull/1554) * Add controller to synchronize the API and Ingress VIP fields [#1519](https://github.com/openshift/cluster-network-operator/pull/1519) * Bug SDN-3458: HyperShift: Differentiate resources deployed by different CNO instances in status manager [#1541](https://github.com/openshift/cluster-network-operator/pull/1541) * OVN-K alerts: first tranche [#1526](https://github.com/openshift/cluster-network-operator/pull/1526) * [SDN-3432](https://issues.redhat.com/browse/SDN-3432): Add alert for OVNKubernetesControllerDisconnectedSouthboundDatabase [#1548](https://github.com/openshift/cluster-network-operator/pull/1548) * Add vSphere platform to allow dual-stack cluster [#1518](https://github.com/openshift/cluster-network-operator/pull/1518) * [OKD-49](https://issues.redhat.com/browse/OKD-49): Adds support for scos to multus [#1544](https://github.com/openshift/cluster-network-operator/pull/1544) * [Bug 1894268](https://bugzilla.redhat.com/show_bug.cgi?id=1894268): Allow users to specify ovnkube join subnet [#1508](https://github.com/openshift/cluster-network-operator/pull/1508) * Bug OCPBUGS-917: Add EgressQoS DstCIDR format validation [#1492](https://github.com/openshift/cluster-network-operator/pull/1492) * Multus admission controller: Wait for token in Hypershift [#1546](https://github.com/openshift/cluster-network-operator/pull/1546) * Use fixed name for creating EgressFirewall CRs [#1540](https://github.com/openshift/cluster-network-operator/pull/1540) * Migrate Egress Firewall Configuration during SDN migration and Rollback [#1534](https://github.com/openshift/cluster-network-operator/pull/1534) * hypershift: set multus controller priority appropriate for hosted clusters [#1538](https://github.com/openshift/cluster-network-operator/pull/1538) * [Bug 2094068](https://bugzilla.redhat.com/show_bug.cgi?id=2094068): Add northboundstale alert runbook [#1482](https://github.com/openshift/cluster-network-operator/pull/1482) * microshift: compact ovn databases periodically [#1537](https://github.com/openshift/cluster-network-operator/pull/1537) * Hypershift: Allow configuring hostname and labels on the route [#1531](https://github.com/openshift/cluster-network-operator/pull/1531) * Multus admission controller changes for hypershift [#1516](https://github.com/openshift/cluster-network-operator/pull/1516) * HyperShift: Move CNCC to the controll-plane namespace [#1525](https://github.com/openshift/cluster-network-operator/pull/1525) * Bug OCPBUGS-216: Kuryr: Bump timeoutSeconds for livenessProbe [#1528](https://github.com/openshift/cluster-network-operator/pull/1528) * Add missing runbook links for OVN-kubernetes alerts [#1523](https://github.com/openshift/cluster-network-operator/pull/1523) * [Bug 2103680](https://bugzilla.redhat.com/show_bug.cgi?id=2103680): avoid overrriding disableNetworkDiagnostics on reconciliation [#1527](https://github.com/openshift/cluster-network-operator/pull/1527) * Render CRDs for both OSDN and OVNK during migration [#1521](https://github.com/openshift/cluster-network-operator/pull/1521) * Configure ignored namespaces into multus-admission-controller [#1515](https://github.com/openshift/cluster-network-operator/pull/1515) * Add microshift ovnk manifests [#1517](https://github.com/openshift/cluster-network-operator/pull/1517) * [Bug 2116982](https://bugzilla.redhat.com/show_bug.cgi?id=2116982): multus-admission-controller SNO number of replicas [#1524](https://github.com/openshift/cluster-network-operator/pull/1524) * Enable the cloud-network-config-controller for OpenStack [#1505](https://github.com/openshift/cluster-network-operator/pull/1505) * multi-networkpolicy: Enable on SR-IOV networks [#1443](https://github.com/openshift/cluster-network-operator/pull/1443) * Updating cluster-network-operator images to be consistent with ART [#1507](https://github.com/openshift/cluster-network-operator/pull/1507) * Add configmap list/watch rights to cloud-network-config-controller [#1511](https://github.com/openshift/cluster-network-operator/pull/1511) * The Multus admission controller should run as a deployment [#1514](https://github.com/openshift/cluster-network-operator/pull/1514) * [Bug 2108232](https://bugzilla.redhat.com/show_bug.cgi?id=2108232): Revert "Bug 2085089: Pass enable-udp-aggregation=true to ovn-kubernetes" [#1510](https://github.com/openshift/cluster-network-operator/pull/1510) * [Bug 2100601](https://bugzilla.redhat.com/show_bug.cgi?id=2100601): Update CNO to config EgressIP timeout for ovnk [#1498](https://github.com/openshift/cluster-network-operator/pull/1498) * [Bug 2060079](https://bugzilla.redhat.com/show_bug.cgi?id=2060079): Enhance sensitivity of SDN alert NodeProxyApplySlow [#1491](https://github.com/openshift/cluster-network-operator/pull/1491) * [Bug 2103590](https://bugzilla.redhat.com/show_bug.cgi?id=2103590): Add init container to ensure that Status.podIP is set before postStart hooks run [#1503](https://github.com/openshift/cluster-network-operator/pull/1503) * remove @squeed from owners [#1497](https://github.com/openshift/cluster-network-operator/pull/1497) * [Bug 2085089](https://bugzilla.redhat.com/show_bug.cgi?id=2085089): Pass enable-udp-aggregation=true to ovn-kubernetes [#1489](https://github.com/openshift/cluster-network-operator/pull/1489) * [Bug 2089681](https://bugzilla.redhat.com/show_bug.cgi?id=2089681): Disable EgressIP reachability check in hypershift deployments [#1485](https://github.com/openshift/cluster-network-operator/pull/1485) * [Bug 2084062](https://bugzilla.redhat.com/show_bug.cgi?id=2084062): Make northd probe interval default to 10 seconds [#1494](https://github.com/openshift/cluster-network-operator/pull/1494) * [Bug 2100079](https://bugzilla.redhat.com/show_bug.cgi?id=2100079): Update sdn-controller perms for "configmapsleases" leaderelection [#1496](https://github.com/openshift/cluster-network-operator/pull/1496) * [Bug 2099357](https://bugzilla.redhat.com/show_bug.cgi?id=2099357): k8s 1.24 bump: add RBAC coordination leases for ovn-k master [#1490](https://github.com/openshift/cluster-network-operator/pull/1490) * [Bug 2094071](https://bugzilla.redhat.com/show_bug.cgi?id=2094071): Add southboundStale alert runbook [#1481](https://github.com/openshift/cluster-network-operator/pull/1481) * [Bug 2095772](https://bugzilla.redhat.com/show_bug.cgi?id=2095772): bindata: managed: reduce memory requests to align with observed usage [#1479](https://github.com/openshift/cluster-network-operator/pull/1479) * [Bug 2095756](https://bugzilla.redhat.com/show_bug.cgi?id=2095756): client: register types during init, not later [#1483](https://github.com/openshift/cluster-network-operator/pull/1483) * [Bug 2090336](https://bugzilla.redhat.com/show_bug.cgi?id=2090336): Multus should log at a verbose log level (without a logfile) [#1474](https://github.com/openshift/cluster-network-operator/pull/1474) * [Bug 2092047](https://bugzilla.redhat.com/show_bug.cgi?id=2092047): cncc: add RBAC coordination.k8s.io leases [#1461](https://github.com/openshift/cluster-network-operator/pull/1461) * [Bug 2089805](https://bugzilla.redhat.com/show_bug.cgi?id=2089805): Enable config duration for OVN-Kubernetes [#1455](https://github.com/openshift/cluster-network-operator/pull/1455) * [Bug 2090437](https://bugzilla.redhat.com/show_bug.cgi?id=2090437): Bump CNO to k8s 1.24 [#1459](https://github.com/openshift/cluster-network-operator/pull/1459) * [Bug 2073452](https://bugzilla.redhat.com/show_bug.cgi?id=2073452): Copying CNI binaries should be an atomic operation. [#1472](https://github.com/openshift/cluster-network-operator/pull/1472) * [Bug 2092495](https://bugzilla.redhat.com/show_bug.cgi?id=2092495): ovn: use up to 4 northd threads in non-SNO clusters [#1471](https://github.com/openshift/cluster-network-operator/pull/1471) * [Bug 2091167](https://bugzilla.redhat.com/show_bug.cgi?id=2091167): incorrectly setting rbac role for certificatesigningrequests [#1463](https://github.com/openshift/cluster-network-operator/pull/1463) * Revert "Copying CNI binaries should be an atomic operation." [#1466](https://github.com/openshift/cluster-network-operator/pull/1466) * [Bug 2073452](https://bugzilla.redhat.com/show_bug.cgi?id=2073452): Copying CNI binaries should be an atomic operation. [#1462](https://github.com/openshift/cluster-network-operator/pull/1462) * [Bug 2076776](https://bugzilla.redhat.com/show_bug.cgi?id=2076776): remove patch permissions from ovnkube-node service account [#1450](https://github.com/openshift/cluster-network-operator/pull/1450) * [Bug 2089968](https://bugzilla.redhat.com/show_bug.cgi?id=2089968): ensures type: Directory for multus host paths [#1453](https://github.com/openshift/cluster-network-operator/pull/1453) * [Bug 2090343](https://bugzilla.redhat.com/show_bug.cgi?id=2090343): [temporary] Adds multus debug logging [#1456](https://github.com/openshift/cluster-network-operator/pull/1456) * [Bug 2087942](https://bugzilla.redhat.com/show_bug.cgi?id=2087942): bump to go 1.18, lint improvements [#1451](https://github.com/openshift/cluster-network-operator/pull/1451) * [Bug 2086461](https://bugzilla.redhat.com/show_bug.cgi?id=2086461): Hypershift: Also add default for Azure mtu [#1454](https://github.com/openshift/cluster-network-operator/pull/1454) * [Bug 2086461](https://bugzilla.redhat.com/show_bug.cgi?id=2086461): AWS: Use hardcoded MTU to speed up cluster creation [#1441](https://github.com/openshift/cluster-network-operator/pull/1441) * [Bug 2087556](https://bugzilla.redhat.com/show_bug.cgi?id=2087556): Fix rendering DPU manifests [#1448](https://github.com/openshift/cluster-network-operator/pull/1448) * [Bug 2086506](https://bugzilla.redhat.com/show_bug.cgi?id=2086506): hypershift: respect statefulset when upgrading ovnk [#1447](https://github.com/openshift/cluster-network-operator/pull/1447) * [Bug 2087135](https://bugzilla.redhat.com/show_bug.cgi?id=2087135): Fixing Hypershift nodeport flow [#1440](https://github.com/openshift/cluster-network-operator/pull/1440) * [Bug 2086544](https://bugzilla.redhat.com/show_bug.cgi?id=2086544): Stop passing hosted cluster token as a parameter to ovnkube-master [#1446](https://github.com/openshift/cluster-network-operator/pull/1446) * [Bug 2086437](https://bugzilla.redhat.com/show_bug.cgi?id=2086437): Enable EgressQoS controller [#1430](https://github.com/openshift/cluster-network-operator/pull/1430) * [Bug 2086143](https://bugzilla.redhat.com/show_bug.cgi?id=2086143): Status controller: use a label, rather than watching all objects [#1431](https://github.com/openshift/cluster-network-operator/pull/1431) * [Bug 2082235](https://bugzilla.redhat.com/show_bug.cgi?id=2082235): manifests: Add in service, service-cert, and ServiceMonitor [#1433](https://github.com/openshift/cluster-network-operator/pull/1433) * [Bug 2023295](https://bugzilla.redhat.com/show_bug.cgi?id=2023295): Cleanup CNO relatedObjects [#1432](https://github.com/openshift/cluster-network-operator/pull/1432) * [Bug 2079422](https://bugzilla.redhat.com/show_bug.cgi?id=2079422): Bump PodDisruptionBudget to v1 [#1427](https://github.com/openshift/cluster-network-operator/pull/1427) * Re-reconcile network on configmap, stop watching all configmaps in proxy controllers [#1416](https://github.com/openshift/cluster-network-operator/pull/1416) * hypershift: add ovnkube-node-proxy container in ovnkube-node ds [#1408](https://github.com/openshift/cluster-network-operator/pull/1408) * Hypershift: enable TLS for ovnkube-master metrics [#1423](https://github.com/openshift/cluster-network-operator/pull/1423) * Add gm metric record to use for telemetry exposure [#1425](https://github.com/openshift/cluster-network-operator/pull/1425) * Revert "ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds" [#1428](https://github.com/openshift/cluster-network-operator/pull/1428) * [Bug 2082611](https://bugzilla.redhat.com/show_bug.cgi?id=2082611): Limit Kuryr pods permissions [#1367](https://github.com/openshift/cluster-network-operator/pull/1367) * [Bug 2076877](https://bugzilla.redhat.com/show_bug.cgi?id=2076877): Bump FlowScema apiVersion to v1beta2 [#1419](https://github.com/openshift/cluster-network-operator/pull/1419) * bindata/network-diagnostics, cloud-network-config-controller: comply to restricted pod security level [#1406](https://github.com/openshift/cluster-network-operator/pull/1406) * Remove ObjectMeta.ClusterName usage [#1421](https://github.com/openshift/cluster-network-operator/pull/1421) * Hypershift: Fix ovnkube-master priority class and set resource requests on token-minter [#1420](https://github.com/openshift/cluster-network-operator/pull/1420) * add more sysctls to the multus allowlist [#1411](https://github.com/openshift/cluster-network-operator/pull/1411) * ovn: fix northd preStop command handling [#1414](https://github.com/openshift/cluster-network-operator/pull/1414) * Add control-plane-component label to ovnkube-master for hypershift [#1422](https://github.com/openshift/cluster-network-operator/pull/1422) * Add link to runbook urls [#1417](https://github.com/openshift/cluster-network-operator/pull/1417) * Hypershift: Copy all CNO conditions to HostedControlPlane status [#1415](https://github.com/openshift/cluster-network-operator/pull/1415) * ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds [#1412](https://github.com/openshift/cluster-network-operator/pull/1412) * [Bug 2075475](https://bugzilla.redhat.com/show_bug.cgi?id=2075475): Add default-route field to egress-router k8s.v1.cni.cncf.io/networks [#1390](https://github.com/openshift/cluster-network-operator/pull/1390) * OCPVE-106 Customize rollout strategy to fix SNO upgrade [#1392](https://github.com/openshift/cluster-network-operator/pull/1392) * [Bug 2080255](https://bugzilla.redhat.com/show_bug.cgi?id=2080255): SDN: Re-add list/watch/get permissions for nodes needed for EgressIP [#1409](https://github.com/openshift/cluster-network-operator/pull/1409) * [Bug 2071859](https://bugzilla.redhat.com/show_bug.cgi?id=2071859): Switch dnsPolicy to Default for OVN hostNetwork pods [#1395](https://github.com/openshift/cluster-network-operator/pull/1395) * Revert "Revert ipsec: Allow enablement/disablement at runtime" [#1384](https://github.com/openshift/cluster-network-operator/pull/1384) * ovnkube: export OVS metrics along with OVN metrics [#1393](https://github.com/openshift/cluster-network-operator/pull/1393) * [Bug 2078910](https://bugzilla.redhat.com/show_bug.cgi?id=2078910): Correct runbook_url field location within schema [#1396](https://github.com/openshift/cluster-network-operator/pull/1396) * Adds dougbtv to owners as approver and reviewer [#1397](https://github.com/openshift/cluster-network-operator/pull/1397) * [Bug 2072215](https://bugzilla.redhat.com/show_bug.cgi?id=2072215): Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [#1369](https://github.com/openshift/cluster-network-operator/pull/1369) * ovn-kube hypershift: fix pipefailure that prevents HA startup [#1394](https://github.com/openshift/cluster-network-operator/pull/1394) * [Bug 2063123](https://bugzilla.redhat.com/show_bug.cgi?id=2063123): Drop Node update permission for sdn-node [#1350](https://github.com/openshift/cluster-network-operator/pull/1350) * OVN-K alert: Increase severity and add runbook_url for NoRunningOvnMa… [#1327](https://github.com/openshift/cluster-network-operator/pull/1327) * Remove Kuryr mutating DNS webhook [#1363](https://github.com/openshift/cluster-network-operator/pull/1363) * raise the alert NoOvnMasterLeader to critical and add the runbook url [#1328](https://github.com/openshift/cluster-network-operator/pull/1328) * [Bug 2072710](https://bugzilla.redhat.com/show_bug.cgi?id=2072710): Make northd probe interval default to 10 seconds [#1386](https://github.com/openshift/cluster-network-operator/pull/1386) * hypershift: get control plane replicas from hcp [#1385](https://github.com/openshift/cluster-network-operator/pull/1385) * [Bug 2072766](https://bugzilla.redhat.com/show_bug.cgi?id=2072766): Reserve port TCP/9104 for cluster-network-operator [#1378](https://github.com/openshift/cluster-network-operator/pull/1378) * Multus: split pod/status rbac [#1340](https://github.com/openshift/cluster-network-operator/pull/1340) * add runbook link for NodeWithoutOVNKubeNodePodRunning and V4SubnetAll… [#1366](https://github.com/openshift/cluster-network-operator/pull/1366) * OVN: remove detecing db_ip via kapi [#1368](https://github.com/openshift/cluster-network-operator/pull/1368) * Hypershift: Respect publishing strategy of OVN southbound database service [#1349](https://github.com/openshift/cluster-network-operator/pull/1349) * Proxyconfig: Add a knob for Hypershift to enable proxying internal apiserver address [#1381](https://github.com/openshift/cluster-network-operator/pull/1381) * [Bug 1983056](https://bugzilla.redhat.com/show_bug.cgi?id=1983056): Kuryr: Update CRD from upstream [#1360](https://github.com/openshift/cluster-network-operator/pull/1360) * hypershift: disable TLS for ovnk master metrics [#1382](https://github.com/openshift/cluster-network-operator/pull/1382) * hypershift: enable publishNotReadyAddress explicitly for ovnk-master service [#1372](https://github.com/openshift/cluster-network-operator/pull/1372) * [Bug 2070047](https://bugzilla.redhat.com/show_bug.cgi?id=2070047): Bump max value of hist quantile for kuryr_cni_request_duration [#1359](https://github.com/openshift/cluster-network-operator/pull/1359) * Don't return err with empty relatedClusterObject annotation [#1379](https://github.com/openshift/cluster-network-operator/pull/1379) * hypershift: enable ovnk-master metrics in management cluster [#1374](https://github.com/openshift/cluster-network-operator/pull/1374) * Use (un)setProgressing for pod status update [#1376](https://github.com/openshift/cluster-network-operator/pull/1376) * Use the hosted cluster token explicitly [#1370](https://github.com/openshift/cluster-network-operator/pull/1370) * HyperShift: Watch StatefulSets in the management cluster [#1364](https://github.com/openshift/cluster-network-operator/pull/1364) * Exclude openshift-kube-apiserver and openshift-apiserver service/endpoints from connectivity checks in hypershift [#1375](https://github.com/openshift/cluster-network-operator/pull/1375) * Run ovnkube-master statefulset pods in parallel [#1361](https://github.com/openshift/cluster-network-operator/pull/1361) * Add ibm-cloud-managed annotations to 02-cncc-credentials.yaml, this is required in HyperShift [#1358](https://github.com/openshift/cluster-network-operator/pull/1358) * Add ipsec daemonset for hypershift managed cluster [#1356](https://github.com/openshift/cluster-network-operator/pull/1356) * Add statefulset in status manager [#1345](https://github.com/openshift/cluster-network-operator/pull/1345) * hypershift ovnk route status [#1341](https://github.com/openshift/cluster-network-operator/pull/1341) * Add tuning cni sysctl allowlist to nodes [#1347](https://github.com/openshift/cluster-network-operator/pull/1347) * [Bug 2058368](https://bugzilla.redhat.com/show_bug.cgi?id=2058368): move enable memory trimming to readiness prob [#1365](https://github.com/openshift/cluster-network-operator/pull/1365) * Add ovnkube-node initContainer to make sure sbdb is up before running other containers [#1354](https://github.com/openshift/cluster-network-operator/pull/1354) * Vendor: pull in hypershift [#1346](https://github.com/openshift/cluster-network-operator/pull/1346) * Hypershift: Use token minter instead of a kubeconfig in ovn-kubernetes master [#1344](https://github.com/openshift/cluster-network-operator/pull/1344) * Add an option to define the client name for in-cluster config [#1342](https://github.com/openshift/cluster-network-operator/pull/1342) * Add ovnkube manifests for hypershift [#1329](https://github.com/openshift/cluster-network-operator/pull/1329) * network, bootstrap: don't get apiserver from the environment [#1339](https://github.com/openshift/cluster-network-operator/pull/1339) * Fix MTU detection for multi path default routes [#1338](https://github.com/openshift/cluster-network-operator/pull/1338) * Multi cluster support in CNO [#1319](https://github.com/openshift/cluster-network-operator/pull/1319) * Fix golang image version in Dockerfile [#1330](https://github.com/openshift/cluster-network-operator/pull/1330) * Remove empty selector from the mtu prober job. [#1331](https://github.com/openshift/cluster-network-operator/pull/1331) * Switch to server-side apply [#1304](https://github.com/openshift/cluster-network-operator/pull/1304) * Probe MTU from a Job, rather than directly in the CNO [#1313](https://github.com/openshift/cluster-network-operator/pull/1313) * [Bug 2058368](https://bugzilla.redhat.com/show_bug.cgi?id=2058368): Move memory-trimming-on-compaction out of dbchecker to nbdb/sbdb [#1320](https://github.com/openshift/cluster-network-operator/pull/1320) * Fix group for CVO override used for running CNO locally [#1314](https://github.com/openshift/cluster-network-operator/pull/1314) * [Bug 2058671](https://bugzilla.redhat.com/show_bug.cgi?id=2058671): ip reconciler: auto clean failed jobs [#1318](https://github.com/openshift/cluster-network-operator/pull/1318) * [Bug 2037721](https://bugzilla.redhat.com/show_bug.cgi?id=2037721): Do not apply OVN-Kubernetes `PodDisruptionBudget` on single-node clusters [#1307](https://github.com/openshift/cluster-network-operator/pull/1307) * ovn: stop spawning the ovn-nbctl daemon [#1315](https://github.com/openshift/cluster-network-operator/pull/1315) * [Bug 1944264](https://bugzilla.redhat.com/show_bug.cgi?id=1944264): ovnkube: gracefully terminate databases from preStop [#1312](https://github.com/openshift/cluster-network-operator/pull/1312) * [Bug 2044227](https://bugzilla.redhat.com/show_bug.cgi?id=2044227): Add rolling update strategy for Kuryr-CNI. [#1311](https://github.com/openshift/cluster-network-operator/pull/1311) * [Bug 2032559](https://bugzilla.redhat.com/show_bug.cgi?id=2032559): Block DualStack migration for unsupported cluster types [#1257](https://github.com/openshift/cluster-network-operator/pull/1257) * [Bug 2010361](https://bugzilla.redhat.com/show_bug.cgi?id=2010361): SDN alerts: conform to monitoring team style guide [#1248](https://github.com/openshift/cluster-network-operator/pull/1248) * Update project owners [#1309](https://github.com/openshift/cluster-network-operator/pull/1309) * [Bug 2048575](https://bugzilla.redhat.com/show_bug.cgi?id=2048575): The Whereabouts ip-reconciler should use api-int load balancer [#1302](https://github.com/openshift/cluster-network-operator/pull/1302) * [Bug 2048793](https://bugzilla.redhat.com/show_bug.cgi?id=2048793): Kuryr: Decrease vif_annotation_timeout [#1293](https://github.com/openshift/cluster-network-operator/pull/1293) * [Bug 2049613](https://bugzilla.redhat.com/show_bug.cgi?id=2049613): Use a separate configmap for mtu migration config to avoid pod restart [#1299](https://github.com/openshift/cluster-network-operator/pull/1299) * Fix bond cni source directory path [#1295](https://github.com/openshift/cluster-network-operator/pull/1295) * Updating cluster-network-operator images to be consistent with ART [#1294](https://github.com/openshift/cluster-network-operator/pull/1294) * [Bug 2041546](https://bugzilla.redhat.com/show_bug.cgi?id=2041546): ovn-kubernetes: set RAFT election timer at RAFT cluster creation time [#1282](https://github.com/openshift/cluster-network-operator/pull/1282) * [Bug 2034484](https://bugzilla.redhat.com/show_bug.cgi?id=2034484): Upgrade library-go version [#1247](https://github.com/openshift/cluster-network-operator/pull/1247) * [Bug 2042796](https://bugzilla.redhat.com/show_bug.cgi?id=2042796): whereabouts, reconciler: disable retries on failure [#1290](https://github.com/openshift/cluster-network-operator/pull/1290) * [Bug 2039345](https://bugzilla.redhat.com/show_bug.cgi?id=2039345): Verify against mininimal IPv6 MTU value for clusters with IPv6 networks [#1276](https://github.com/openshift/cluster-network-operator/pull/1276) * [Bug 2034155](https://bugzilla.redhat.com/show_bug.cgi?id=2034155): Adds back --disable-snat-multiple-gws [#1254](https://github.com/openshift/cluster-network-operator/pull/1254) * [Bug 2039321](https://bugzilla.redhat.com/show_bug.cgi?id=2039321): SDN: Expose controller metrics for collection [#1250](https://github.com/openshift/cluster-network-operator/pull/1250) * clean up OWNERS [#1287](https://github.com/openshift/cluster-network-operator/pull/1287) * [Bug 2041989](https://bugzilla.redhat.com/show_bug.cgi?id=2041989): no CredentialsRequests in ibm-cloud-managed [#1280](https://github.com/openshift/cluster-network-operator/pull/1280) * [Bug 2035459](https://bugzilla.redhat.com/show_bug.cgi?id=2035459): modify cluster-network-features for OpenshiftSDN [#1251](https://github.com/openshift/cluster-network-operator/pull/1251) * [Bug 1896533](https://bugzilla.redhat.com/show_bug.cgi?id=1896533): Nonexistent Namespaces Degradation logging message [#1128](https://github.com/openshift/cluster-network-operator/pull/1128) * [Bug 2038732](https://bugzilla.redhat.com/show_bug.cgi?id=2038732): Add egress* patch credentials for ovnkube-master [#1285](https://github.com/openshift/cluster-network-operator/pull/1285) * [Bug 2041329](https://bugzilla.redhat.com/show_bug.cgi?id=2041329): cncc: add serviceAccountNames to CredentialsRequests [#1283](https://github.com/openshift/cluster-network-operator/pull/1283) * [Bug 2010663](https://bugzilla.redhat.com/show_bug.cgi?id=2010663): OVN-K alerts: conform to monitoring team style guide [#1246](https://github.com/openshift/cluster-network-operator/pull/1246) * [Bug 2021191](https://bugzilla.redhat.com/show_bug.cgi?id=2021191): Project admins should be able to list net-attach-defs in their namespaces [#1226](https://github.com/openshift/cluster-network-operator/pull/1226) * BUG 2034413: cncc: create Cloud CredentialsRequest in /manifests [#1277](https://github.com/openshift/cluster-network-operator/pull/1277) * [Bug 2034460](https://bugzilla.redhat.com/show_bug.cgi?id=2034460): cncc: handle advanced AWS and Azure configurations [#1275](https://github.com/openshift/cluster-network-operator/pull/1275) * [Bug 2034153](https://bugzilla.redhat.com/show_bug.cgi?id=2034153): Fix MTU migration verification for OpenShiftSDN [#1259](https://github.com/openshift/cluster-network-operator/pull/1259) * [Bug 1943363](https://bugzilla.redhat.com/show_bug.cgi?id=1943363): ovn: try to gracefully terminate ovn-northd [#1221](https://github.com/openshift/cluster-network-operator/pull/1221) * [Bug 2018093](https://bugzilla.redhat.com/show_bug.cgi?id=2018093): Kuryr: Add resource requests for pods [#1269](https://github.com/openshift/cluster-network-operator/pull/1269) * [Bug 2036861](https://bugzilla.redhat.com/show_bug.cgi?id=2036861): multitenant - Add openshift-kube-apiserver-operator to global namespaces [#1272](https://github.com/openshift/cluster-network-operator/pull/1272) * [Bug 2035093](https://bugzilla.redhat.com/show_bug.cgi?id=2035093): Cloud network config controller: Fix for Hypershift [#1268](https://github.com/openshift/cluster-network-operator/pull/1268) * [Bug 2034398](https://bugzilla.redhat.com/show_bug.cgi?id=2034398): Whereabouts CRD should include a "podref" field. [#1262](https://github.com/openshift/cluster-network-operator/pull/1262) * [Bug 2034517](https://bugzilla.redhat.com/show_bug.cgi?id=2034517): watch and apply changes of the ovs-flows-config configmap [#1231](https://github.com/openshift/cluster-network-operator/pull/1231) * [Bug 2034322](https://bugzilla.redhat.com/show_bug.cgi?id=2034322): Move infrastructure bootstrap to its own package [#1261](https://github.com/openshift/cluster-network-operator/pull/1261) * [Bug 2033422](https://bugzilla.redhat.com/show_bug.cgi?id=2033422): bootstrapOVNGatewayConfig should only be called once [#1258](https://github.com/openshift/cluster-network-operator/pull/1258) * Add MTU migration support for OVNKubernetes and OpenshiftSDN [#1241](https://github.com/openshift/cluster-network-operator/pull/1241) * Cloud network config controller - CNO deployment [#1112](https://github.com/openshift/cluster-network-operator/pull/1112) * [Bug 2022144](https://bugzilla.redhat.com/show_bug.cgi?id=2022144): sbdb and nbdb containers leave pid around if they restarted or crashed [#1256](https://github.com/openshift/cluster-network-operator/pull/1256) * OVN-K alerts: Fix incorrect metric name reference [#1237](https://github.com/openshift/cluster-network-operator/pull/1237) * Pod networking on DPU host in Infra and Tenant clusters [#1249](https://github.com/openshift/cluster-network-operator/pull/1249) * OVN-K: Enable OVN metrics to be consumed by ServiceMonitor [#1236](https://github.com/openshift/cluster-network-operator/pull/1236) * Bump openshift/build-machinery-go [#1253](https://github.com/openshift/cluster-network-operator/pull/1253) * SDN 2316: Use GatewayConfig in OVN-K to set gateway modes [#1209](https://github.com/openshift/cluster-network-operator/pull/1209) * Add CNI to DPU and enable Kube-Proxy on DPU [#1220](https://github.com/openshift/cluster-network-operator/pull/1220) * [NETOBSERV-31](https://issues.redhat.com/browse/NETOBSERV-31): Expose CNI type features as a config-map [#1204](https://github.com/openshift/cluster-network-operator/pull/1204) * Bump openshift/api module [#1242](https://github.com/openshift/cluster-network-operator/pull/1242) * The ip-reconciler should not restart on failures. [#1238](https://github.com/openshift/cluster-network-operator/pull/1238) * SDN: Do not tolerate a controller failure during upgrade [#1213](https://github.com/openshift/cluster-network-operator/pull/1213) * Set upgrade strategy on kube-proxy [#1214](https://github.com/openshift/cluster-network-operator/pull/1214) * openshift-sdn/daemonset: Mount /host/opt/cni/bin at /host-cni-bin [#1172](https://github.com/openshift/cluster-network-operator/pull/1172) * Specific SDN controller alert [#1206](https://github.com/openshift/cluster-network-operator/pull/1206) * update for ART [#1233](https://github.com/openshift/cluster-network-operator/pull/1233) * bindata/network: specify pod-security levels via labels not annotations [#1224](https://github.com/openshift/cluster-network-operator/pull/1224) * Add bond-cni [#1205](https://github.com/openshift/cluster-network-operator/pull/1205) * [Bug 1961509](https://bugzilla.redhat.com/show_bug.cgi?id=1961509): DHCP Daemon should have memory and CPU limits set [#1218](https://github.com/openshift/cluster-network-operator/pull/1218) * Add ip6tables NOTRACK rules for udp/6081 [#1222](https://github.com/openshift/cluster-network-operator/pull/1222) * [Bug 1962206](https://bugzilla.redhat.com/show_bug.cgi?id=1962206): DHCP daemon should have maxunavailable for upgrade strategy [#1219](https://github.com/openshift/cluster-network-operator/pull/1219) * [Bug 1976399](https://bugzilla.redhat.com/show_bug.cgi?id=1976399): Raft election timer: move the logic to ovndbchecker [#1161](https://github.com/openshift/cluster-network-operator/pull/1161) * [Bug 2009078](https://bugzilla.redhat.com/show_bug.cgi?id=2009078): Remove NetworkPodsCrashLooping alert for ovn-kubernetes [#1212](https://github.com/openshift/cluster-network-operator/pull/1212) * [Bug 1914053](https://bugzilla.redhat.com/show_bug.cgi?id=1914053): whereabouts: add ip-reconciler cronjob [#1207](https://github.com/openshift/cluster-network-operator/pull/1207) * Add Kuryr to be able to create events objects. [#1210](https://github.com/openshift/cluster-network-operator/pull/1210) * fix a typo in a field name [#1208](https://github.com/openshift/cluster-network-operator/pull/1208) * podsecurity: enforce privileged for network namespaces [#1203](https://github.com/openshift/cluster-network-operator/pull/1203) * [Bug 1988483](https://bugzilla.redhat.com/show_bug.cgi?id=1988483): OVN drop icmp frag from other nodes on Azure cluster [#1132](https://github.com/openshift/cluster-network-operator/pull/1132) * [Bug 1985486](https://bugzilla.redhat.com/show_bug.cgi?id=1985486): Use proxy to connect to OSP cloud [#1173](https://github.com/openshift/cluster-network-operator/pull/1173) * Updating cluster-network-operator images to be consistent with ART [#1198](https://github.com/openshift/cluster-network-operator/pull/1198) * [Bug 2003676](https://bugzilla.redhat.com/show_bug.cgi?id=2003676): Restrict serving SDN metrics to loopback only [#1197](https://github.com/openshift/cluster-network-operator/pull/1197) * [Bug 2002713](https://bugzilla.redhat.com/show_bug.cgi?id=2002713): Add millisecond resolution to OVN logs [#1196](https://github.com/openshift/cluster-network-operator/pull/1196) * [Bug 1939435](https://bugzilla.redhat.com/show_bug.cgi?id=1939435): proxyconfig - accept IPv6 address literals for noProxy [#1191](https://github.com/openshift/cluster-network-operator/pull/1191) * [Bug 1986061](https://bugzilla.redhat.com/show_bug.cgi?id=1986061): Monitor openshift-network-diagnostics namespace [#1190](https://github.com/openshift/cluster-network-operator/pull/1190) * [Bug 1960101](https://bugzilla.redhat.com/show_bug.cgi?id=1960101): Fix update-codegen hack, pull in changes from openshift/api, bump k8.io deps to v0.22.1 [#1140](https://github.com/openshift/cluster-network-operator/pull/1140) * [Bug 1997050](https://bugzilla.redhat.com/show_bug.cgi?id=1997050): Fix panic with unknown networks [#1188](https://github.com/openshift/cluster-network-operator/pull/1188) * [Bug 1998508](https://bugzilla.redhat.com/show_bug.cgi?id=1998508): Fix the install-time "waiting for other operators" statuses [#1192](https://github.com/openshift/cluster-network-operator/pull/1192) * [Bug 1990631](https://bugzilla.redhat.com/show_bug.cgi?id=1990631): ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues [#1182](https://github.com/openshift/cluster-network-operator/pull/1182) * [Bug 1914398](https://bugzilla.redhat.com/show_bug.cgi?id=1914398): Changed pod user to non-root [#1124](https://github.com/openshift/cluster-network-operator/pull/1124) * [Bug 1991551](https://bugzilla.redhat.com/show_bug.cgi?id=1991551): allow sdn (and others) to use new events.k8s.io API [#1177](https://github.com/openshift/cluster-network-operator/pull/1177) * [Bug 1989246](https://bugzilla.redhat.com/show_bug.cgi?id=1989246): use new default leader election values to handle apiserver rollout on SNO [#1175](https://github.com/openshift/cluster-network-operator/pull/1175) * [Bug 1992507](https://bugzilla.redhat.com/show_bug.cgi?id=1992507): Use prometheus rule annotations comply with the OpenShift alerting guidelines [#1181](https://github.com/openshift/cluster-network-operator/pull/1181) * [Bug 1989734](https://bugzilla.redhat.com/show_bug.cgi?id=1989734): Whereabouts should have RBAC for leases [#1174](https://github.com/openshift/cluster-network-operator/pull/1174) * [Bug 1984049](https://bugzilla.redhat.com/show_bug.cgi?id=1984049): Slow OVN Recovery on SNO [#1159](https://github.com/openshift/cluster-network-operator/pull/1159) * [Bug 1990725](https://bugzilla.redhat.com/show_bug.cgi?id=1990725): Add missing node name into KuryrSDNPodNotReady Alert [#1176](https://github.com/openshift/cluster-network-operator/pull/1176) * [Bug 1987019](https://bugzilla.redhat.com/show_bug.cgi?id=1987019): Support external control plane topology [#1158](https://github.com/openshift/cluster-network-operator/pull/1158) * Docs: add architecture overview, remove outdated HACKING guide. [#1078](https://github.com/openshift/cluster-network-operator/pull/1078) * Remove valadas from owners [#1081](https://github.com/openshift/cluster-network-operator/pull/1081) * [Bug 1989122](https://bugzilla.redhat.com/show_bug.cgi?id=1989122): let openshift-sdn use EndpointSliceProxying [#1166](https://github.com/openshift/cluster-network-operator/pull/1166) * Updating cluster-network-operator images to be consistent with ART [#1136](https://github.com/openshift/cluster-network-operator/pull/1136) * [Bug 1981055](https://bugzilla.redhat.com/show_bug.cgi?id=1981055): ovnkube-master handle 60 seconds downtime of API server gracefully in SNO [#1154](https://github.com/openshift/cluster-network-operator/pull/1154) * [Bug 1985033](https://bugzilla.redhat.com/show_bug.cgi?id=1985033): Make inactivity_probe configurable [#1165](https://github.com/openshift/cluster-network-operator/pull/1165) * [Bug 1984449](https://bugzilla.redhat.com/show_bug.cgi?id=1984449): Change to use mountPath: /host [#1160](https://github.com/openshift/cluster-network-operator/pull/1160) * [Bug 1961757](https://bugzilla.redhat.com/show_bug.cgi?id=1961757): ovnkube: set ovn-controller lflow cache limit to 1GB [#1147](https://github.com/openshift/cluster-network-operator/pull/1147) * Revert: Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level [#1163](https://github.com/openshift/cluster-network-operator/pull/1163) * [Bug 1981975](https://bugzilla.redhat.com/show_bug.cgi?id=1981975): Update service network status to reflect dual stack entries [#1155](https://github.com/openshift/cluster-network-operator/pull/1155) * [Bug 1970985](https://bugzilla.redhat.com/show_bug.cgi?id=1970985): SDN-1955: Add pre-puller ds to reduce upgrade downtime [#1141](https://github.com/openshift/cluster-network-operator/pull/1141) * [Bug 1961811](https://bugzilla.redhat.com/show_bug.cgi?id=1961811): Add a newline between user CAs and system CAs [#1156](https://github.com/openshift/cluster-network-operator/pull/1156) * OVNKube: check if br-ex1 is available and pass it as a parameter [#1152](https://github.com/openshift/cluster-network-operator/pull/1152) * Make egress IP and ICNI mutually exclusive when bootstrapping OVN-kube [#1145](https://github.com/openshift/cluster-network-operator/pull/1145) * [Bug 1970129](https://bugzilla.redhat.com/show_bug.cgi?id=1970129): Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level [#1142](https://github.com/openshift/cluster-network-operator/pull/1142) * Add alerts for issues with load balancers/ports. [#1148](https://github.com/openshift/cluster-network-operator/pull/1148) * Include alerts for critical lbs [#1146](https://github.com/openshift/cluster-network-operator/pull/1146) * Removing old kuryr-kubernetes CRDs [#989](https://github.com/openshift/cluster-network-operator/pull/989) * [Bug 1962951](https://bugzilla.redhat.com/show_bug.cgi?id=1962951): enable ovs column diffs feature [#1101](https://github.com/openshift/cluster-network-operator/pull/1101) * [Bug 1975016](https://bugzilla.redhat.com/show_bug.cgi?id=1975016): Kuryr: Store OpenStack credentials in a secret [#1139](https://github.com/openshift/cluster-network-operator/pull/1139) * Add JacobTanenbaum to list of approvers [#1099](https://github.com/openshift/cluster-network-operator/pull/1099) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#1130](https://github.com/openshift/cluster-network-operator/pull/1130) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f9c68257eb8edf3855f7ec4e6f5ad11dff77d3b3...) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/) * Revert PAO and later changes [#330](https://github.com/openshift/cluster-node-tuning-operator/pull/330) * [Bug 2017427](https://bugzilla.redhat.com/show_bug.cgi?id=2017427): tuned: add timeout and restarts [#282](https://github.com/openshift/cluster-node-tuning-operator/pull/282) * Makefile cleanup, replace yq with yaml-patch from openshift/build-machinery-go [#274](https://github.com/openshift/cluster-node-tuning-operator/pull/274) * [Bug 2016988](https://bugzilla.redhat.com/show_bug.cgi?id=2016988): openshift profile: fix malformed patch [#283](https://github.com/openshift/cluster-node-tuning-operator/pull/283) * [Bug 2013321](https://bugzilla.redhat.com/show_bug.cgi?id=2013321): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#278](https://github.com/openshift/cluster-node-tuning-operator/pull/278) * RBAC: tighten the rules and remove unnecessary listers. [#276](https://github.com/openshift/cluster-node-tuning-operator/pull/276) * podsecurity: enforce privileged for openshift-cluster-node-tuning-operator namespace [#275](https://github.com/openshift/cluster-node-tuning-operator/pull/275) * Updating cluster-node-tuning-operator images to be consistent with ART [#273](https://github.com/openshift/cluster-node-tuning-operator/pull/273) * [Bug 2004508](https://bugzilla.redhat.com/show_bug.cgi?id=2004508): TuneD: Revert the ConfigParser changes. [#271](https://github.com/openshift/cluster-node-tuning-operator/pull/271) * Updating cluster-node-tuning-operator images to be consistent with ART [#270](https://github.com/openshift/cluster-node-tuning-operator/pull/270) * OWNERS: updating based on team changes. [#269](https://github.com/openshift/cluster-node-tuning-operator/pull/269) * e2e tests: s/plugin/plug-in/ and TuneD renaming [#253](https://github.com/openshift/cluster-node-tuning-operator/pull/253) * [Bug 1998247](https://bugzilla.redhat.com/show_bug.cgi?id=1998247): Reload when deps of recommended profile change. [#267](https://github.com/openshift/cluster-node-tuning-operator/pull/267) * [Bug 1997486](https://bugzilla.redhat.com/show_bug.cgi?id=1997486): Ship the latest TuneD and stalld. [#265](https://github.com/openshift/cluster-node-tuning-operator/pull/265) * [Bug 1994891](https://bugzilla.redhat.com/show_bug.cgi?id=1994891): Fix e2e tests after the recent 1.22.0 bump [#264](https://github.com/openshift/cluster-node-tuning-operator/pull/264) * [Bug 1992560](https://bugzilla.redhat.com/show_bug.cgi?id=1992560): monitoring: comply with OpenShift alerting guidelines [#263](https://github.com/openshift/cluster-node-tuning-operator/pull/263) * [Bug 1994891](https://bugzilla.redhat.com/show_bug.cgi?id=1994891): Bump vendor dependencies to k8s 1.22.0 [#261](https://github.com/openshift/cluster-node-tuning-operator/pull/261) * [Bug 1985739](https://bugzilla.redhat.com/show_bug.cgi?id=1985739): Move OpenShift profile to TuneD. [#258](https://github.com/openshift/cluster-node-tuning-operator/pull/258) * [Bug 1986477](https://bugzilla.redhat.com/show_bug.cgi?id=1986477): Handle kube-apiserver disruption more gracefully. [#256](https://github.com/openshift/cluster-node-tuning-operator/pull/256) * scheduler: new option cgroup_ps_blacklist [#250](https://github.com/openshift/cluster-node-tuning-operator/pull/250) * Address a race in the stalld e2e test. [#249](https://github.com/openshift/cluster-node-tuning-operator/pull/249) * IBM Cloud manifest profile patch for operator deployment [#252](https://github.com/openshift/cluster-node-tuning-operator/pull/252) * Ship the latest TuneD, adjust default Tuned CR. [#245](https://github.com/openshift/cluster-node-tuning-operator/pull/245) * Updating to the latest stalld v1.13.0. [#246](https://github.com/openshift/cluster-node-tuning-operator/pull/246) * openshift-tuned event-driven change processing [#243](https://github.com/openshift/cluster-node-tuning-operator/pull/243) * Adjusting the OWNERS file due to team changes. [#244](https://github.com/openshift/cluster-node-tuning-operator/pull/244) * Updating to the latest stalld v1.12.0. [#242](https://github.com/openshift/cluster-node-tuning-operator/pull/242) * [Bug 1974277](https://bugzilla.redhat.com/show_bug.cgi?id=1974277): Fix conditional order for setting net device param. [#239](https://github.com/openshift/cluster-node-tuning-operator/pull/239) * [Bug 1973154](https://bugzilla.redhat.com/show_bug.cgi?id=1973154): Switch back to NTO-shipped stalld. [#236](https://github.com/openshift/cluster-node-tuning-operator/pull/236) * Updating cluster-node-tuning-operator images to be consistent with ART [#235](https://github.com/openshift/cluster-node-tuning-operator/pull/235) * More precise description of MCP matching. [#219](https://github.com/openshift/cluster-node-tuning-operator/pull/219) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#234](https://github.com/openshift/cluster-node-tuning-operator/pull/234) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9e185d59cfbb4dd083c0ae3c82014aea110697b3...) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/) * [OKD-225](https://issues.redhat.com/browse/OKD-225): Add back mysql samples [#571](https://github.com/openshift/cluster-samples-operator/pull/571) * [OCPBUGS-42265](https://issues.redhat.com/browse/OCPBUGS-42265): Fix the rails template before the upstream accepts or PR [#574](https://github.com/openshift/cluster-samples-operator/pull/574) * [OKD-225](https://issues.redhat.com/browse/OKD-225): Sync samples - OKD CI is completely broken currently due to removed containers [#569](https://github.com/openshift/cluster-samples-operator/pull/569) * [OKD-225](https://issues.redhat.com/browse/OKD-225): update okd dockerfile builder and base images [#566](https://github.com/openshift/cluster-samples-operator/pull/566) * [OCPBUGS-38994](https://issues.redhat.com/browse/OCPBUGS-38994): Fix library-sync.sh to handle renames in unsupported samples [#562](https://github.com/openshift/cluster-samples-operator/pull/562) * [OCPBUGS-38926](https://issues.redhat.com/browse/OCPBUGS-38926): Update Go version, API version and vendored libs to the same versions as in the openshift/api. [#561](https://github.com/openshift/cluster-samples-operator/pull/561) * [OCPBUGS-38273](https://issues.redhat.com/browse/OCPBUGS-38273): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.18 [#559](https://github.com/openshift/cluster-samples-operator/pull/559) * NO-ISSUE: Only pick up the changes from the supported imagestreams and templates in library-sync.sh. [#553](https://github.com/openshift/cluster-samples-operator/pull/553) * [KUBESAW-162](https://issues.redhat.com/browse/KUBESAW-162): add mfrancisc and metlos as owners [#549](https://github.com/openshift/cluster-samples-operator/pull/549) * [SO-121](https://issues.redhat.com/browse/SO-121): Syncing the library for only S2i Samples for OCP 4.16 [#543](https://github.com/openshift/cluster-samples-operator/pull/543) * Revert "SO-121: Resync Libray for 4.16" [#542](https://github.com/openshift/cluster-samples-operator/pull/542) * [SO-121](https://issues.redhat.com/browse/SO-121): Resync Libray for 4.16 [#540](https://github.com/openshift/cluster-samples-operator/pull/540) * [OCPBUGS-31303](https://issues.redhat.com/browse/OCPBUGS-31303): bump K8s version to 29.2 [#536](https://github.com/openshift/cluster-samples-operator/pull/536) * [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535) * [OCPBUGS-26992](https://issues.redhat.com/browse/OCPBUGS-26992): Align builder and base for Dockerfile.okd with Dockerfile [#531](https://github.com/openshift/cluster-samples-operator/pull/531) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#532](https://github.com/openshift/cluster-samples-operator/pull/532) * [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#530](https://github.com/openshift/cluster-samples-operator/pull/530) * [OCPBUGS-24787](https://issues.redhat.com/browse/OCPBUGS-24787): Updating ose-cluster-samples-operator-container image to be consistent with ART [#527](https://github.com/openshift/cluster-samples-operator/pull/527) * [SO-119](https://issues.redhat.com/browse/SO-119): Fix mariadb import url in OKD [#525](https://github.com/openshift/cluster-samples-operator/pull/525) * [SO-118](https://issues.redhat.com/browse/SO-118): Bumping the K8s to 28.2 and golang to 1.20 [#524](https://github.com/openshift/cluster-samples-operator/pull/524) * [SO-117](https://issues.redhat.com/browse/SO-117): Library Sync for OCP release 4.15 [#522](https://github.com/openshift/cluster-samples-operator/pull/522) * [OCPBUGS-22225](https://issues.redhat.com/browse/OCPBUGS-22225): Sync library to remove invalid dockerhub references for OKD [#519](https://github.com/openshift/cluster-samples-operator/pull/519) * Use latest tag for network-tools imagestream [#518](https://github.com/openshift/cluster-samples-operator/pull/518) * [OCPBUGS-18857](https://issues.redhat.com/browse/OCPBUGS-18857): Updating ose-cluster-samples-operator images to be consistent with ART [#517](https://github.com/openshift/cluster-samples-operator/pull/517) * manifests: Drop explicit runlevel from CRD manifest [#515](https://github.com/openshift/cluster-samples-operator/pull/515) * [OCPBUGS-16435](https://issues.redhat.com/browse/OCPBUGS-16435): Bump k8 to v0.27.2 for ocp 4.14 [#514](https://github.com/openshift/cluster-samples-operator/pull/514) * [OCPBUGS-16403](https://issues.redhat.com/browse/OCPBUGS-16403): Update Cluster Sample Operator dependencies and libraries for OCP 4.14 [#511](https://github.com/openshift/cluster-samples-operator/pull/511) * reconcile status when clusteroperator changes [#510](https://github.com/openshift/cluster-samples-operator/pull/510) * [OCPBUGS-15754](https://issues.redhat.com/browse/OCPBUGS-15754): Update Jenkins and Jenkins Agent Base image versions [#504](https://github.com/openshift/cluster-samples-operator/pull/504) * [OCPBUGS-14491](https://issues.redhat.com/browse/OCPBUGS-14491): Updating to use Jenkins 4.13 images [#502](https://github.com/openshift/cluster-samples-operator/pull/502) * [OCPBUGS-12775](https://issues.redhat.com/browse/OCPBUGS-12775): Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 [#500](https://github.com/openshift/cluster-samples-operator/pull/500) * Updating ose-cluster-samples-operator images to be consistent with ART [#499](https://github.com/openshift/cluster-samples-operator/pull/499) * [OCPBUGS-10910](https://issues.redhat.com/browse/OCPBUGS-10910): Add network tools imagestreams [#495](https://github.com/openshift/cluster-samples-operator/pull/495) * Updating ose-cluster-samples-operator images to be consistent with ART [#493](https://github.com/openshift/cluster-samples-operator/pull/493) * Fix jira component [#494](https://github.com/openshift/cluster-samples-operator/pull/494) * update Jenkins to use v4.12 imagestreams [#491](https://github.com/openshift/cluster-samples-operator/pull/491) * [OCPBUGS-855](https://issues.redhat.com/browse/OCPBUGS-855): When setting allowedRegistries urls the openshift-samples operator is degraded [#487](https://github.com/openshift/cluster-samples-operator/pull/487) * [OCPBUGS-6811](https://issues.redhat.com/browse/OCPBUGS-6811): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#485](https://github.com/openshift/cluster-samples-operator/pull/485) * Change importMode to preserveOriginal for Openshift imagestreams [#482](https://github.com/openshift/cluster-samples-operator/pull/482) * [OCPBUGS-6579](https://issues.redhat.com/browse/OCPBUGS-6579): update sample imagestreams with latest 4.11 image using specific image tag reference [#483](https://github.com/openshift/cluster-samples-operator/pull/483) * [OCPBUGS-4357](https://issues.redhat.com/browse/OCPBUGS-4357): Bump k8s master [#476](https://github.com/openshift/cluster-samples-operator/pull/476) * [OCPBUGS-4166](https://issues.redhat.com/browse/OCPBUGS-4166): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#474](https://github.com/openshift/cluster-samples-operator/pull/474) * [OCPBUGS-3426](https://issues.redhat.com/browse/OCPBUGS-3426): Update Cluster Sample Operator dependencies and libraries for OCP 4.12 [#471](https://github.com/openshift/cluster-samples-operator/pull/471) * Updating ose-cluster-samples-operator images to be consistent with ART [#470](https://github.com/openshift/cluster-samples-operator/pull/470) * Updating ose-cluster-samples-operator images to be consistent with ART [#465](https://github.com/openshift/cluster-samples-operator/pull/465) * Add client certificate and key to service monitor [#464](https://github.com/openshift/cluster-samples-operator/pull/464) * Updating ose-cluster-samples-operator images to be consistent with ART [#435](https://github.com/openshift/cluster-samples-operator/pull/435) * [Bug 2086086](https://bugzilla.redhat.com/show_bug.cgi?id=2086086): Update Cluster Sample Operator dependencies and libraries for OCP 4.11 [#433](https://github.com/openshift/cluster-samples-operator/pull/433) * update jenkins CPaaS image refs prior to 4.11 GA [#432](https://github.com/openshift/cluster-samples-operator/pull/432) * [Bug 2086086](https://bugzilla.redhat.com/show_bug.cgi?id=2086086): Update Cluster Sample Operator dependencies and libraries for OCP 4.11 [#431](https://github.com/openshift/cluster-samples-operator/pull/431) * [Bug 2095256](https://bugzilla.redhat.com/show_bug.cgi?id=2095256): Samples Owner needs to be Updated [#429](https://github.com/openshift/cluster-samples-operator/pull/429) * [Bug 2086086](https://bugzilla.redhat.com/show_bug.cgi?id=2086086): Update Cluster Sample Operator dependencies and libraries for OCP 4.11 [#428](https://github.com/openshift/cluster-samples-operator/pull/428) * [AUTH-133](https://issues.redhat.com/browse/AUTH-133): manifests/deployment: comply to restricted pod security level [#425](https://github.com/openshift/cluster-samples-operator/pull/425) * Updating ose-cluster-samples-operator images to be consistent with ART [#426](https://github.com/openshift/cluster-samples-operator/pull/426) * [JNKS-289](https://issues.redhat.com/browse/JNKS-289): pull in jenkins imagestream updates (add back maven/nodejs streams) [#422](https://github.com/openshift/cluster-samples-operator/pull/422) * Jira SO-19: Make sure template and imagestream api version is groupified [#420](https://github.com/openshift/cluster-samples-operator/pull/420) * [JNKS-287](https://issues.redhat.com/browse/JNKS-287): remove imagestream manifest refs; remove override of jenkins images with payload images [#416](https://github.com/openshift/cluster-samples-operator/pull/416) * [Bug 2010364](https://bugzilla.redhat.com/show_bug.cgi?id=2010364): OpenShift Alerting Rules Style-Guide Compliance [#419](https://github.com/openshift/cluster-samples-operator/pull/419) * [Bug 2067823](https://bugzilla.redhat.com/show_bug.cgi?id=2067823): Taking care of CVE-2022-21698 [#418](https://github.com/openshift/cluster-samples-operator/pull/418) * [Bug 2064610](https://bugzilla.redhat.com/show_bug.cgi?id=2064610): Remove duplicate v1 from cakephp-mysql templates [#417](https://github.com/openshift/cluster-samples-operator/pull/417) * manifests: Add capability.openshift.io/name [#414](https://github.com/openshift/cluster-samples-operator/pull/414) * Updating ose-cluster-samples-operator images to be consistent with ART [#412](https://github.com/openshift/cluster-samples-operator/pull/412) * [Bug 2027745](https://bugzilla.redhat.com/show_bug.cgi?id=2027745): Allowing ImageStream creation when config registry empty [#406](https://github.com/openshift/cluster-samples-operator/pull/406) * [Bug 2033720](https://bugzilla.redhat.com/show_bug.cgi?id=2033720): Synching SSO library [#411](https://github.com/openshift/cluster-samples-operator/pull/411) * upd rhel7 Dockerfile in case still used for rhel7 worker nodes [#410](https://github.com/openshift/cluster-samples-operator/pull/410) * [Bug 2033720](https://bugzilla.redhat.com/show_bug.cgi?id=2033720): Bump k8 dependencies to v0.23.1 [#409](https://github.com/openshift/cluster-samples-operator/pull/409) * [Bug 2033720](https://bugzilla.redhat.com/show_bug.cgi?id=2033720): Library synchronization for OCP 4.10 [#408](https://github.com/openshift/cluster-samples-operator/pull/408) * [Bug 2027745](https://bugzilla.redhat.com/show_bug.cgi?id=2027745): Move openshift build-machinery-go dependency [#407](https://github.com/openshift/cluster-samples-operator/pull/407) * Update OWNERS [#402](https://github.com/openshift/cluster-samples-operator/pull/402) * Remove single node prod cluster profile annotation as it is not used [#405](https://github.com/openshift/cluster-samples-operator/pull/405) * [Bug 2007757](https://bugzilla.redhat.com/show_bug.cgi?id=2007757): Including Template in must-gather related objects. [#399](https://github.com/openshift/cluster-samples-operator/pull/399) * [Bug 2006947](https://bugzilla.redhat.com/show_bug.cgi?id=2006947): fix proxy portion of tbr inaccessible check [#397](https://github.com/openshift/cluster-samples-operator/pull/397) * Updating ose-cluster-samples-operator images to be consistent with ART [#396](https://github.com/openshift/cluster-samples-operator/pull/396) * [Bug 2002368](https://bugzilla.redhat.com/show_bug.cgi?id=2002368): acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings [#394](https://github.com/openshift/cluster-samples-operator/pull/394) * [Bug 2003683](https://bugzilla.redhat.com/show_bug.cgi?id=2003683): fix recently introduced panic when conflict errors occur [#395](https://github.com/openshift/cluster-samples-operator/pull/395) * [Bug 1993840](https://bugzilla.redhat.com/show_bug.cgi?id=1993840): more avoiding immediate degraded on intermittent API errors [#391](https://github.com/openshift/cluster-samples-operator/pull/391) * Updating ose-cluster-samples-operator images to be consistent with ART [#390](https://github.com/openshift/cluster-samples-operator/pull/390) * add david peraza as approver, clean up reviewers [#389](https://github.com/openshift/cluster-samples-operator/pull/389) * [BUILD-298](https://issues.redhat.com/browse/BUILD-298): Bump k8s to 1.22.1 [#388](https://github.com/openshift/cluster-samples-operator/pull/388) * [Bug 1993840](https://bugzilla.redhat.com/show_bug.cgi?id=1993840): avoid immediate degraded on intermittent API errors; set reason/message when Available=false [#387](https://github.com/openshift/cluster-samples-operator/pull/387) * [Bug 1995386](https://bugzilla.redhat.com/show_bug.cgi?id=1995386): don't return err in wait.Poll on net.DialTimeout err; tweak time intervals [#386](https://github.com/openshift/cluster-samples-operator/pull/386) * [Bug 1990140](https://bugzilla.redhat.com/show_bug.cgi?id=1990140): add connection with timeout in TBR accessibility check to expedite 'disconnected' mode [#384](https://github.com/openshift/cluster-samples-operator/pull/384) * [Bug 1990988](https://bugzilla.redhat.com/show_bug.cgi?id=1990988): Refreshing samples for OCP 4.9 [#381](https://github.com/openshift/cluster-samples-operator/pull/381) * [Bug 1975539](https://bugzilla.redhat.com/show_bug.cgi?id=1975539): delete hello-openshift in payload imagestream via CVO annotation [#380](https://github.com/openshift/cluster-samples-operator/pull/380) * Updating ose-cluster-samples-operator images to be consistent with ART [#378](https://github.com/openshift/cluster-samples-operator/pull/378) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#377](https://github.com/openshift/cluster-samples-operator/pull/377) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/31fb491fc14faed6ebbe41a526764947069ff0a2...) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/) * [WRKLDS-1449](https://issues.redhat.com/browse/WRKLDS-1449): Update Hyperkube Dockerfile with the right Kubernetes version [#2102](https://github.com/openshift/kubernetes/pull/2102) * [WRKLDS-1449](https://issues.redhat.com/browse/WRKLDS-1449): Rebase 1.31.1 [#2092](https://github.com/openshift/kubernetes/pull/2092) * [OCPBUGS-41172](https://issues.redhat.com/browse/OCPBUGS-41172): Updating openshift-enterprise-pod-container image to be consistent with ART for 4.18 [#2076](https://github.com/openshift/kubernetes/pull/2076) * [OCPBUGS-42120](https://issues.redhat.com/browse/OCPBUGS-42120): UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch [#2095](https://github.com/openshift/kubernetes/pull/2095) * NO-JIRA: UPSTREAM: <carry>: retrying etcd Unavailable errors for the etcd health and ready checkers [#2079](https://github.com/openshift/kubernetes/pull/2079) * [OCPBUGS-39004](https://issues.redhat.com/browse/OCPBUGS-39004): UPSTREAM: 127243: Fix invalid label use in validatingadmissionpolicy e2e [#2080](https://github.com/openshift/kubernetes/pull/2080) * [OCPBUGS-36295](https://issues.redhat.com/browse/OCPBUGS-36295): UPSTREAM: 126295: dynamiccertificates: denoise Kubelet logs by skipping removal of non-existent file watchers [#2064](https://github.com/openshift/kubernetes/pull/2064) * [OCPBUGS-38515](https://issues.redhat.com/browse/OCPBUGS-38515): UPSTREAM: <carry>: bump cadvisor version to fix missing network stats [#2074](https://github.com/openshift/kubernetes/pull/2074) * NO-JIRA: UPSTREAM: annotate audit events for requests during unready phase and graceful termination phase [#2077](https://github.com/openshift/kubernetes/pull/2077) * [OCPBUGS-39004](https://issues.redhat.com/browse/OCPBUGS-39004): UPSTREAM: 126994: Add required FieldManager for validatingadmissionpolicy e2e [#2069](https://github.com/openshift/kubernetes/pull/2069) * NO-JIRA: UPSTREAM:<drop>: bump openshift/library-go@4d55b6d [#2068](https://github.com/openshift/kubernetes/pull/2068) * [OCPBUGS-38336](https://issues.redhat.com/browse/OCPBUGS-38336): UPSTREAM: 126641: e2e/storage: update block device test to always specify a valid path [#2054](https://github.com/openshift/kubernetes/pull/2054) * NO-JIRA: update downstream owners [#2047](https://github.com/openshift/kubernetes/pull/2047) * [OCPBUGS-35297](https://issues.redhat.com/browse/OCPBUGS-35297): UPSTREAM: 126470: Move APIServingWithRoutine to alpha and disabled by default [#2044](https://github.com/openshift/kubernetes/pull/2044) * [OCPBUGS-37620](https://issues.redhat.com/browse/OCPBUGS-37620): Bump 1.30.3 [#2038](https://github.com/openshift/kubernetes/pull/2038) * NO-JIRA: UPSTREAM: 126213: add test about container metrics from cadvisor [#2040](https://github.com/openshift/kubernetes/pull/2040) * [OCPBUGS-37281](https://issues.redhat.com/browse/OCPBUGS-37281): UPSTREAM: 126104: Add funcs in pkg/filesystem/util to set file permissions on Windows and update container log dir perms [#2034](https://github.com/openshift/kubernetes/pull/2034) * [OCPEDGE-1181](https://issues.redhat.com/browse/OCPEDGE-1181): UPSTREAM: <carry>: update test annotations for sno [#2033](https://github.com/openshift/kubernetes/pull/2033) * NO-JIRA: add tool to validate test packages imported [#2024](https://github.com/openshift/kubernetes/pull/2024) * [OCPBUGS-36742](https://issues.redhat.com/browse/OCPBUGS-36742): UPSTREAM: <carry>: sync imports [#2017](https://github.com/openshift/kubernetes/pull/2017) * [OCPBUGS-37111](https://issues.redhat.com/browse/OCPBUGS-37111): UPSTREAM: 125404: Fix that PodIP field is temporarily removed for a terminal pod [#2025](https://github.com/openshift/kubernetes/pull/2025) * NO-JIRA: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2023](https://github.com/openshift/kubernetes/pull/2023) * [MULTIARCH-4229](https://issues.redhat.com/browse/MULTIARCH-4229): UPSTREAM:<carry>:bump cadvisor for 3516 upstream patches [#2012](https://github.com/openshift/kubernetes/pull/2012) * [OCPBUGS-36743](https://issues.redhat.com/browse/OCPBUGS-36743): UPSTREAM: <carry>: inject k8s version from hyperkube Dockerfile [#2018](https://github.com/openshift/kubernetes/pull/2018) * [OCPBUGS-34294](https://issues.redhat.com/browse/OCPBUGS-34294): OCPBUGS-34309: UPSTREAM: <carry>: update base image [#1998](https://github.com/openshift/kubernetes/pull/1998) * [API-1783](https://issues.redhat.com/browse/API-1783): Bump 1.30.2 [#1996](https://github.com/openshift/kubernetes/pull/1996) * [OCPBUGS-14613](https://issues.redhat.com/browse/OCPBUGS-14613): drop carry "don't fail integration due to too many goroutines" [#1995](https://github.com/openshift/kubernetes/pull/1995) * [OCPBUGS-34544](https://issues.redhat.com/browse/OCPBUGS-34544): UPSTREAM: <carry>: Disable PersistentVolumeLabel by default [#1991](https://github.com/openshift/kubernetes/pull/1991) * [OCPBUGS-34050](https://issues.redhat.com/browse/OCPBUGS-34050): Backport 125337 [#1987](https://github.com/openshift/kubernetes/pull/1987) * [OCPBUGS-34544](https://issues.redhat.com/browse/OCPBUGS-34544): UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel [#1986](https://github.com/openshift/kubernetes/pull/1986) * [OCPBUGS-34593](https://issues.redhat.com/browse/OCPBUGS-34593): UPSTREAM: 124933: [Scheduler] Use allNodes when calculating nextStartNodeIndex [#1983](https://github.com/openshift/kubernetes/pull/1983) * [API-1783](https://issues.redhat.com/browse/API-1783): UPSTREAM: <carry>: skip PodLifecycleSleepAction test [#1982](https://github.com/openshift/kubernetes/pull/1982) * [API-1783](https://issues.redhat.com/browse/API-1783): UPSTREAM: <carry>: skip storage tests [#1981](https://github.com/openshift/kubernetes/pull/1981) * [OCPBUGS-25331](https://issues.redhat.com/browse/OCPBUGS-25331): UPSTREAM: <carry>: extend termination events [#1827](https://github.com/openshift/kubernetes/pull/1827) * [API-1783](https://issues.redhat.com/browse/API-1783): Bump 1.30.1 [#1979](https://github.com/openshift/kubernetes/pull/1979) * [API-1783](https://issues.redhat.com/browse/API-1783): Rebase 1.30.0 [#1953](https://github.com/openshift/kubernetes/pull/1953) * [OCPBUGS-33574](https://issues.redhat.com/browse/OCPBUGS-33574): bump openshift/library-go@e22d25a [#1967](https://github.com/openshift/kubernetes/pull/1967) * [OCPBUGS-32934](https://issues.redhat.com/browse/OCPBUGS-32934): UPSTREAM: 124795: e2e: DaemonSet maxSurge test should account for terminated pods [#1966](https://github.com/openshift/kubernetes/pull/1966) * no-jira: UPSTREAM <carry>: add native build to installer image [#1961](https://github.com/openshift/kubernetes/pull/1961) * [API-1809](https://issues.redhat.com/browse/API-1809): Provide SCC access via RBAC [#1959](https://github.com/openshift/kubernetes/pull/1959) * NO-JIRA: UPSTREAM: <carry>: Revert create readyz event for kubeapi server [#1957](https://github.com/openshift/kubernetes/pull/1957) * [OCPBUGS-20097](https://issues.redhat.com/browse/OCPBUGS-20097): Migrate tools image to RHEL9 [#1954](https://github.com/openshift/kubernetes/pull/1954) * [OCPBUGS-32296](https://issues.redhat.com/browse/OCPBUGS-32296): Bump K8s api to 1.29.4 [#1947](https://github.com/openshift/kubernetes/pull/1947) * [OCPBUGS-22301](https://issues.redhat.com/browse/OCPBUGS-22301): UPSTREAM: <carry>: Fix garbage-collection for CRDs. [#1811](https://github.com/openshift/kubernetes/pull/1811) * [OCPBUGS-26440](https://issues.redhat.com/browse/OCPBUGS-26440): UPSTREAM: <carry>: create readyz event for kubeapi server [#1914](https://github.com/openshift/kubernetes/pull/1914) * UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads [#1902](https://github.com/openshift/kubernetes/pull/1902) * [CFE-910](https://issues.redhat.com/browse/CFE-910): RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator [#1904](https://github.com/openshift/kubernetes/pull/1904) * NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL [#1944](https://github.com/openshift/kubernetes/pull/1944) * [CFE-910](https://issues.redhat.com/browse/CFE-910): bump library-go [#1941](https://github.com/openshift/kubernetes/pull/1941) * [OCPBUGS-11933](https://issues.redhat.com/browse/OCPBUGS-11933): UPSTREAM: <drop>: bump apiserver-library-go [#1910](https://github.com/openshift/kubernetes/pull/1910) * [OCPBUGS-31663](https://issues.redhat.com/browse/OCPBUGS-31663): UPSTREAM: <carry>: add management workload check for guaranteed qos [#1928](https://github.com/openshift/kubernetes/pull/1928) * [OCPBUGS-30957](https://issues.redhat.com/browse/OCPBUGS-30957): Use the right feature gate when updating uncertain … [#1919](https://github.com/openshift/kubernetes/pull/1919) * [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1932](https://github.com/openshift/kubernetes/pull/1932) * [OCPNODE-1886](https://issues.redhat.com/browse/OCPNODE-1886): Bump k8s 1.29.3 [#1925](https://github.com/openshift/kubernetes/pull/1925) * [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1929](https://github.com/openshift/kubernetes/pull/1929) * [OCPBUGS-31384](https://issues.redhat.com/browse/OCPBUGS-31384): UPSTREAM: <carry>: allow type mutation for specific secrets [#1924](https://github.com/openshift/kubernetes/pull/1924) * [OCPBUGS-30767](https://issues.redhat.com/browse/OCPBUGS-30767): UPSTREAM: 124110: retry policy creation for CRD type checking E2E test [#1922](https://github.com/openshift/kubernetes/pull/1922) * [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909) * [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852) * UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892) * [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911) * [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908) * [MCO-392](https://issues.redhat.com/browse/MCO-392): openshift-hack/images/os: delete [#1805](https://github.com/openshift/kubernetes/pull/1805) * [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers [#1900](https://github.com/openshift/kubernetes/pull/1900) * [OCPBUGS-10996](https://issues.redhat.com/browse/OCPBUGS-10996): Fix race condition between resizer and kubelet [#1899](https://github.com/openshift/kubernetes/pull/1899) * [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437): Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages [#1882](https://github.com/openshift/kubernetes/pull/1882) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.2 [#1888](https://github.com/openshift/kubernetes/pull/1888) * NO-JIRA: Clean carry patches [#1880](https://github.com/openshift/kubernetes/pull/1880) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… [#1881](https://github.com/openshift/kubernetes/pull/1881) * [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to buld kube-apiserver for openshift-install architectures [#1872](https://github.com/openshift/kubernetes/pull/1872) * NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870) * [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM <carry>: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871) * [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841) * [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845) * [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: <carry>: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: <carry>: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849) * [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848) * [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829) * [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824) * [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade [#1846](https://github.com/openshift/kubernetes/pull/1846) * [OCPBUGS-26067](https://issues.redhat.com/browse/OCPBUGS-26067): Backport CEL IP and CIDR validations [#1828](https://github.com/openshift/kubernetes/pull/1828) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s api to 1.29.0 [#1840](https://github.com/openshift/kubernetes/pull/1840) * [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): temporarily disable reporting e2e text bugs [#1836](https://github.com/openshift/kubernetes/pull/1836) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1815](https://github.com/openshift/kubernetes/pull/1815) * [CNF-8809](https://issues.redhat.com/browse/CNF-8809): admission: add new admission for handling shared cpus request [#1799](https://github.com/openshift/kubernetes/pull/1799) * [CNF-8326](https://issues.redhat.com/browse/CNF-8326): advertise shared cpus for mixed cpus feature [#1795](https://github.com/openshift/kubernetes/pull/1795) * [OCPBUGS-23565](https://issues.redhat.com/browse/OCPBUGS-23565): Update to kubernetes 1.28.4 [#1806](https://github.com/openshift/kubernetes/pull/1806) * [OCPBUGS-23073](https://issues.redhat.com/browse/OCPBUGS-23073): .spec.numberOfUsersToReport is not correctly applied in some circumstances [#1794](https://github.com/openshift/kubernetes/pull/1794) * [OCPBUGS-22724](https://issues.redhat.com/browse/OCPBUGS-22724): UPSTREAM: 121881: Use golang library instead of mklink [#1800](https://github.com/openshift/kubernetes/pull/1800) * [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790) * Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788) * [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771) * Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776) * openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769) * UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685) * [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757) * Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735) * [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734) * Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732) * Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731) * Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703) * UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726) * [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724) * [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711) * UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714) * [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716) * Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646) * [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638) * UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698) * <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686) * [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665) * [OCPBUGS-18608](https://issues.redhat.com/browse/OCPBUGS-18608): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1688](https://github.com/openshift/kubernetes/pull/1688) * [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1681](https://github.com/openshift/kubernetes/pull/1681) * [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1676](https://github.com/openshift/kubernetes/pull/1676) * [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation [#1673](https://github.com/openshift/kubernetes/pull/1673) * [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117249,118189: fix TopologyCache crashes [#1668](https://github.com/openshift/kubernetes/pull/1668) * [OCPBUGS-7415](https://issues.redhat.com/browse/OCPBUGS-7415): grant user:full scope to self-SARs [#1493](https://github.com/openshift/kubernetes/pull/1493) * UPSTREAM: 118280: Set all PSa labels in tests [#1663](https://github.com/openshift/kubernetes/pull/1663) * [OCPBUGS-17119](https://issues.redhat.com/browse/OCPBUGS-17119): UPSTREAM: <drop>: bump apiserver-library-go for updated required-scc errors [#1661](https://github.com/openshift/kubernetes/pull/1661) * [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups [#1654](https://github.com/openshift/kubernetes/pull/1654) * [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1660](https://github.com/openshift/kubernetes/pull/1660) * Update to Kubernetes 1.27.4 [#1653](https://github.com/openshift/kubernetes/pull/1653) * [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118879: make apiservices.apiregistration.k8s.io discoverabl… [#1630](https://github.com/openshift/kubernetes/pull/1630) * [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1645](https://github.com/openshift/kubernetes/pull/1645) * [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118881: fix openapi/v3 non local apiservices aggregation [#1629](https://github.com/openshift/kubernetes/pull/1629) * UPSTREAM: <drop>: hack/update-vendor.sh [#1634](https://github.com/openshift/kubernetes/pull/1634) * UPSTREAM: 119107: Stop using deprecated API [#1624](https://github.com/openshift/kubernetes/pull/1624) * [OCPBUGS-13392](https://issues.redhat.com/browse/OCPBUGS-13392): UPSTREAM: 118915: remove legacy NetworkPolicy tests [#1623](https://github.com/openshift/kubernetes/pull/1623) * UPSTREAM: <drop>: update openshift/api,openshift/apiserver-library-go [#1621](https://github.com/openshift/kubernetes/pull/1621) * UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kube… [#1616](https://github.com/openshift/kubernetes/pull/1616) * Update to Kubernetes 1.27.3 [#1609](https://github.com/openshift/kubernetes/pull/1609) * UPSTREAM: <carry>: STOR-1270: Admission plugin to deny deletion of storages.operator.openshift.io [#1550](https://github.com/openshift/kubernetes/pull/1550) * [OCPBUGS-7181](https://issues.redhat.com/browse/OCPBUGS-7181): UPSTREAM: <drop>: bump apiserver-library-go [#1605](https://github.com/openshift/kubernetes/pull/1605) * [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Add csimock tests [#1595](https://github.com/openshift/kubernetes/pull/1595) * [OCPBUGS-4053](https://issues.redhat.com/browse/OCPBUGS-4053): UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1594](https://github.com/openshift/kubernetes/pull/1594) * Update test wrapper to match new k8s [#1584](https://github.com/openshift/kubernetes/pull/1584) * [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Bump to k8s 1.27.2 [#1583](https://github.com/openshift/kubernetes/pull/1583) * `cherry-pick`: #117785 from `k/k` - disable external IPs on e2e net tests [#1581](https://github.com/openshift/kubernetes/pull/1581) * UPSTREAM: 117893: When expecting pods count only active ones [#1577](https://github.com/openshift/kubernetes/pull/1577) * [OCPBUGS-13854](https://issues.redhat.com/browse/OCPBUGS-13854): UPSTREAM: 117371: kubelet: Don't reference the pod manager interface directly from components [#1578](https://github.com/openshift/kubernetes/pull/1578) * [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): UPSTREAM: <carry>: Extend NodeLogQuery feature [#1579](https://github.com/openshift/kubernetes/pull/1579) * [OCPBUGS-13148](https://issues.redhat.com/browse/OCPBUGS-13148): kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1573](https://github.com/openshift/kubernetes/pull/1573) * UPSTREAM: <carry>: move test rules from origin [#1574](https://github.com/openshift/kubernetes/pull/1574) * [OCPBUGS-11143](https://issues.redhat.com/browse/OCPBUGS-11143): Azure: move to kube-proxy LB probes, don't detach masters when unready [#1569](https://github.com/openshift/kubernetes/pull/1569) * [OCPBUGS-10048](https://issues.redhat.com/browse/OCPBUGS-10048): UPSTREAM: <carry>: add conditional shutdown response header [#1555](https://github.com/openshift/kubernetes/pull/1555) * [OCPBUGS-2474](https://issues.redhat.com/browse/OCPBUGS-2474): UPSTREAM: 116995: kubelet: Ensure pods that have not started track pendingUpdate [#1561](https://github.com/openshift/kubernetes/pull/1561) * [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Update to Kubernetes 1.27.1 [#1558](https://github.com/openshift/kubernetes/pull/1558) * [OCPBUGS-10829](https://issues.redhat.com/browse/OCPBUGS-10829): UPSTREAM: 117310: kube-aggregator: correctly use client-go TLS cache with custom dialer [#1548](https://github.com/openshift/kubernetes/pull/1548) * UPSTREAM: <carry>: add shutdown annotation to response header [#1537](https://github.com/openshift/kubernetes/pull/1537) * UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled [#1518](https://github.com/openshift/kubernetes/pull/1518) * Add wrapper which will allow running o/k tests as external binary in origin [#1485](https://github.com/openshift/kubernetes/pull/1485) * [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): More fixes to SCC PSa extractor [#1482](https://github.com/openshift/kubernetes/pull/1482) * [OCPBUGS-10048](https://issues.redhat.com/browse/OCPBUGS-10048): UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests [#1456](https://github.com/openshift/kubernetes/pull/1456) * [OCPBUGS-8220](https://issues.redhat.com/browse/OCPBUGS-8220): CSI Inline Volume admission plugin does not log object name correctly [#1499](https://github.com/openshift/kubernetes/pull/1499) * [OCPBUGS-8092](https://issues.redhat.com/browse/OCPBUGS-8092): Fix mounted volume expansion tests [#1498](https://github.com/openshift/kubernetes/pull/1498) * UPSTREAM: <carry>: update rebase doc [#1464](https://github.com/openshift/kubernetes/pull/1464) * Bump to k8s 1.26.2 [#1494](https://github.com/openshift/kubernetes/pull/1494) * [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… [#1489](https://github.com/openshift/kubernetes/pull/1489) * Bump to k8s 1.26.1 [#1479](https://github.com/openshift/kubernetes/pull/1479) * [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): add SeccompProfile to Pod and Container accessors/mutators [#1490](https://github.com/openshift/kubernetes/pull/1490) * UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller [#1488](https://github.com/openshift/kubernetes/pull/1488) * [CNF-5901](https://issues.redhat.com/browse/CNF-5901): admission hook change for workload partition on all clusters [#1312](https://github.com/openshift/kubernetes/pull/1312) * UPSTREAM: 113799: tests: network: Prefer internal IPs first [#1446](https://github.com/openshift/kubernetes/pull/1446) * UPSTREAM: 115863: Remove global framework variable [#1480](https://github.com/openshift/kubernetes/pull/1480) * UPSTREAM: <carry>: add new approvers [#1458](https://github.com/openshift/kubernetes/pull/1458) * [OCPBUGS-7555](https://issues.redhat.com/browse/OCPBUGS-7555): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1475](https://github.com/openshift/kubernetes/pull/1475) * [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies [#1454](https://github.com/openshift/kubernetes/pull/1454) * add icsp validation: reject one of icsp idms.itms resources [#1310](https://github.com/openshift/kubernetes/pull/1310) * UPSTREAM: 114027: make GetSubnetPrefix IP family agnostic [#1469](https://github.com/openshift/kubernetes/pull/1469) * disable tests dependent on StackDriver [#1466](https://github.com/openshift/kubernetes/pull/1466) * UPSTREAM: 115484: Don't explicitly set image version in tests [#1465](https://github.com/openshift/kubernetes/pull/1465) * UPSTREAM: 114994: kubelet: fix readiness probes with pod termination [#1450](https://github.com/openshift/kubernetes/pull/1450) * [OCPBUGS-6030](https://issues.redhat.com/browse/OCPBUGS-6030): Rebase onto kube v1.26 [#1432](https://github.com/openshift/kubernetes/pull/1432) * Fix the mutated PodSpec extractor for warns if no SCC matches [#1453](https://github.com/openshift/kubernetes/pull/1453) * [OCPBUGS-4900](https://issues.redhat.com/browse/OCPBUGS-4900): remove in-tree volume limits test now that CSIMigration is GA [#1448](https://github.com/openshift/kubernetes/pull/1448) * [OCPBUGS-4658](https://issues.redhat.com/browse/OCPBUGS-4658): Apply shared defaulters to CRD-based routes. [#1440](https://github.com/openshift/kubernetes/pull/1440) * [OCPBUGS-4657](https://issues.redhat.com/browse/OCPBUGS-4657): Bump library-go. [#1431](https://github.com/openshift/kubernetes/pull/1431) * UPSTREAM: <carry>: make the PSA workload admission warnings honor the… [#1393](https://github.com/openshift/kubernetes/pull/1393) * UPSTREAM: <carry>: Ensure balanced brackets in annotated test names [#1410](https://github.com/openshift/kubernetes/pull/1410) * [STOR-829](https://issues.redhat.com/browse/STOR-829): Add CSIInlineVolumeSecurity admission plugin [#1384](https://github.com/openshift/kubernetes/pull/1384) * [OCPBUGS-3501](https://issues.redhat.com/browse/OCPBUGS-3501): UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. [#1419](https://github.com/openshift/kubernetes/pull/1419) * UPSTREAM: <drop>: Bump openshift/api. [#1424](https://github.com/openshift/kubernetes/pull/1424) * [OCPBUGS-3499](https://issues.redhat.com/browse/OCPBUGS-3499): UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. [#1416](https://github.com/openshift/kubernetes/pull/1416) * [Bug 2117374](https://bugzilla.redhat.com/show_bug.cgi?id=2117374): UPSTREAM: <drop>: update apiserver-library-go to add message about wo… [#1395](https://github.com/openshift/kubernetes/pull/1395) * Bug OCPBUGS-2991: Disable expansion in SC, if driver does not support it [#1402](https://github.com/openshift/kubernetes/pull/1402) * [OCPBUGS-3093](https://issues.redhat.com/browse/OCPBUGS-3093): Tag AWS security groups at creation [#1411](https://github.com/openshift/kubernetes/pull/1411) * UPSTREAM: <drop>: Bump library-go. [#1406](https://github.com/openshift/kubernetes/pull/1406) * [OCPBUGS-2946](https://issues.redhat.com/browse/OCPBUGS-2946): Revert: 1340: tag AWS security group at creation [#1401](https://github.com/openshift/kubernetes/pull/1401) * [OCPBUGS-3084](https://issues.redhat.com/browse/OCPBUGS-3084): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1404](https://github.com/openshift/kubernetes/pull/1404) * [OCPBUGS-2774](https://issues.redhat.com/browse/OCPBUGS-2774): UPSTREAM: 112807 Fix Load balancer services with xTP local [#1400](https://github.com/openshift/kubernetes/pull/1400) * UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones [#1396](https://github.com/openshift/kubernetes/pull/1396) * UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation [#1340](https://github.com/openshift/kubernetes/pull/1340) * UPSTREAM: 113135: Wait for pod not running or gone in storage tests [#1394](https://github.com/openshift/kubernetes/pull/1394) * Bump to k8s 1.25.2 [#1380](https://github.com/openshift/kubernetes/pull/1380) * [Bug 2041317](https://bugzilla.redhat.com/show_bug.cgi?id=2041317): Fix replica calculation at start of HPA scaling policy period [#1391](https://github.com/openshift/kubernetes/pull/1391) * UPSTREAM: <carry>: allow annotating with a specific suite [#1388](https://github.com/openshift/kubernetes/pull/1388) * k8s 1.25.0 [#1360](https://github.com/openshift/kubernetes/pull/1360) * UPSTREAM: <carry>: Dockerfile: use centos:stream9 [#1366](https://github.com/openshift/kubernetes/pull/1366) * [OCPBUGS-718](https://issues.redhat.com/browse/OCPBUGS-718): UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule [#1358](https://github.com/openshift/kubernetes/pull/1358) * UPSTREAM: <carry>: optionally enable retry after until apiserver is ready [#1346](https://github.com/openshift/kubernetes/pull/1346) * UPSTREAM: 110639: endpointslices: node missing on Pod scenario [#1359](https://github.com/openshift/kubernetes/pull/1359) * UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess [#1350](https://github.com/openshift/kubernetes/pull/1350) * UPSTREAM: 110039: Add readinessProbe to aggregated api service test [#1307](https://github.com/openshift/kubernetes/pull/1307) * [Bug 2118318](https://bugzilla.redhat.com/show_bug.cgi?id=2118318): UPSTREAM: 110939: don't quota events.k8s.io events by default [#1344](https://github.com/openshift/kubernetes/pull/1344) * UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… [#1349](https://github.com/openshift/kubernetes/pull/1349) * UPSTREAM: <carry>: Skip session affinity timeout tests [#1339](https://github.com/openshift/kubernetes/pull/1339) * [Bug 2117569](https://bugzilla.redhat.com/show_bug.cgi?id=2117569): UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller [#1338](https://github.com/openshift/kubernetes/pull/1338) * Add kubensenter to the openshift RPM [#1327](https://github.com/openshift/kubernetes/pull/1327) * UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods [#1333](https://github.com/openshift/kubernetes/pull/1333) * trt-393: add plugin name to caches not synchronized error [#1330](https://github.com/openshift/kubernetes/pull/1330) * [Bug 2102383](https://bugzilla.redhat.com/show_bug.cgi?id=2102383): UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() [#1315](https://github.com/openshift/kubernetes/pull/1315) * [Bug 2088606](https://bugzilla.redhat.com/show_bug.cgi?id=2088606): Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin [#1247](https://github.com/openshift/kubernetes/pull/1247) * [Bug 2081194](https://bugzilla.redhat.com/show_bug.cgi?id=2081194): UPSTREAM: <carry>: update list of deprecated apis [#1091](https://github.com/openshift/kubernetes/pull/1091) * [Bug 2082773](https://bugzilla.redhat.com/show_bug.cgi?id=2082773): Fix resizing of ephemeral volumes [#1296](https://github.com/openshift/kubernetes/pull/1296) * UPSTREAM: <carry>: Remove reserved CPUs from default set [#1295](https://github.com/openshift/kubernetes/pull/1295) * [Bug 2094012](https://bugzilla.redhat.com/show_bug.cgi?id=2094012): UPSTREAM: 110652: fix: --chunk-size with selector returns missing result [#1303](https://github.com/openshift/kubernetes/pull/1303) * [Bug 2063414](https://bugzilla.redhat.com/show_bug.cgi?id=2063414): UPSTREAM: 109441: kubelet: parseResolvConf: Handle "search ." [#1283](https://github.com/openshift/kubernetes/pull/1283) * [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): get SCC admission default securityContext.runAsNonRoot to true on positive UIDs [#1290](https://github.com/openshift/kubernetes/pull/1290) * [Bug 2078778](https://bugzilla.redhat.com/show_bug.cgi?id=2078778): UPSTREAM: 110408: apiserver: printers should use int64 [#1288](https://github.com/openshift/kubernetes/pull/1288) * [Bug 2089933](https://bugzilla.redhat.com/show_bug.cgi?id=2089933): Backport 110191 Re-enable Kubelet Pod Readiness Probes on Termination and Pod probes should be handled by pod worker [#1285](https://github.com/openshift/kubernetes/pull/1285) * [Bug 2087685](https://bugzilla.redhat.com/show_bug.cgi?id=2087685): Worker Latency Profiles: Config node object validation for extreme profile transition [#1287](https://github.com/openshift/kubernetes/pull/1287) * [Bug 2065749](https://bugzilla.redhat.com/show_bug.cgi?id=2065749): UPSTREAM: 109103: cpu/memory manager containerMap memory leak [#1229](https://github.com/openshift/kubernetes/pull/1229) * [Bug 2094954](https://bugzilla.redhat.com/show_bug.cgi?id=2094954): UPSTREAM: 110258: Fix pod eviction ip [#1282](https://github.com/openshift/kubernetes/pull/1282) * UPSTREAM: <carry>: provide unique reason for pod probe event during t… [#1281](https://github.com/openshift/kubernetes/pull/1281) * [Bug 2086092](https://bugzilla.redhat.com/show_bug.cgi?id=2086092): UPSTREAM: 108284: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1261](https://github.com/openshift/kubernetes/pull/1261) * Fixes probe readiness shutdowns [#1269](https://github.com/openshift/kubernetes/pull/1269) * [Bug 2086092](https://bugzilla.redhat.com/show_bug.cgi?id=2086092): update kube to v1.24.0 [#1252](https://github.com/openshift/kubernetes/pull/1252) * [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): UPSTREAM: <carry>: e2e-framework: don't autosync PodSecurity labels [#1268](https://github.com/openshift/kubernetes/pull/1268) * [Bug 2062459](https://bugzilla.redhat.com/show_bug.cgi?id=2062459): Identify if there are multiple schedulers running [#1251](https://github.com/openshift/kubernetes/pull/1251) * [Bug 2075621](https://bugzilla.redhat.com/show_bug.cgi?id=2075621): UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved bug [#1243](https://github.com/openshift/kubernetes/pull/1243) * [Bug 1999325](https://bugzilla.redhat.com/show_bug.cgi?id=1999325): Backport 107821 and 107831 [#1225](https://github.com/openshift/kubernetes/pull/1225) * UPSTREAM: 109283: test/e2e/*: use restricted policy by default, default existing tests to privileged [#1238](https://github.com/openshift/kubernetes/pull/1238) * [Bug 2051985](https://bugzilla.redhat.com/show_bug.cgi?id=2051985): UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic [#1172](https://github.com/openshift/kubernetes/pull/1172) * [Bug 2066865](https://bugzilla.redhat.com/show_bug.cgi?id=2066865): Skip azure topology tests [#1230](https://github.com/openshift/kubernetes/pull/1230) * UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1227](https://github.com/openshift/kubernetes/pull/1227) * Revert "UPSTREAM: <carry>: Unskip OCP SDN related tests" [#1228](https://github.com/openshift/kubernetes/pull/1228) * bump apiserver-library-go [#1218](https://github.com/openshift/kubernetes/pull/1218) * UPSTREAM: <carry>: update list of deprecated apis [#1204](https://github.com/openshift/kubernetes/pull/1204) * UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1226](https://github.com/openshift/kubernetes/pull/1226) * [Bug 1957668](https://bugzilla.redhat.com/show_bug.cgi?id=1957668): UPSTREAM: <carry>: use console-public config map for console redirect [#1110](https://github.com/openshift/kubernetes/pull/1110) * UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1212](https://github.com/openshift/kubernetes/pull/1212) * [Bug 2022507](https://bugzilla.redhat.com/show_bug.cgi?id=2022507): Backport 108366: OutofCpu Fixes [#1199](https://github.com/openshift/kubernetes/pull/1199) * [Bug 1945329](https://bugzilla.redhat.com/show_bug.cgi?id=1945329): enable should drop INVALID conntrack entries test [#897](https://github.com/openshift/kubernetes/pull/897) * [Bug 2063938](https://bugzilla.redhat.com/show_bug.cgi?id=2063938): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1215](https://github.com/openshift/kubernetes/pull/1215) * [Bug 2062459](https://bugzilla.redhat.com/show_bug.cgi?id=2062459): Generate event when cache update is failed [#1210](https://github.com/openshift/kubernetes/pull/1210) * UPSTREAM:<carry>:Unskip OCP SDN related tests [#1201](https://github.com/openshift/kubernetes/pull/1201) * [Bug 2034958](https://bugzilla.redhat.com/show_bug.cgi?id=2034958): enable "Conntrack should be able to preserve UDP traffic when initial… [#1197](https://github.com/openshift/kubernetes/pull/1197) * UPSTREAM: 106454: SQUASH: test/e2e: let e2e tests specify pod security admiss… [#1128](https://github.com/openshift/kubernetes/pull/1128) * [Bug 2040715](https://bugzilla.redhat.com/show_bug.cgi?id=2040715): UPSTREAM: 108284: fix: exclude non-ready nodes from azure load balancer [#1190](https://github.com/openshift/kubernetes/pull/1190) * UPSTREAM: <drop>: zero-diff to pick up tags for versions [#1193](https://github.com/openshift/kubernetes/pull/1193) * [Bug 2040715](https://bugzilla.redhat.com/show_bug.cgi?id=2040715): upstream 108149: do not return early in the node informer when there is no change [#1184](https://github.com/openshift/kubernetes/pull/1184) * [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: <drop>: Ignore container notfound error while getPodstatuses [#1176](https://github.com/openshift/kubernetes/pull/1176) * [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: 107900: Pods that have terminated before starting should not block startup [#1157](https://github.com/openshift/kubernetes/pull/1157) * UPSTREAM: 107847: service REST: Call Decorator(old) on update path [#1156](https://github.com/openshift/kubernetes/pull/1156) * [Bug 1979671](https://bugzilla.redhat.com/show_bug.cgi?id=1979671): UPSTREAM <carry>: Remove pod warning annotation when workload partitioning is disabled [#977](https://github.com/openshift/kubernetes/pull/977) * [Bug 2044824](https://bugzilla.redhat.com/show_bug.cgi?id=2044824): UPSTREAM: 107786: Ensure the execHostnameTest() compares hostnames [#1153](https://github.com/openshift/kubernetes/pull/1153) * [Bug 2044347](https://bugzilla.redhat.com/show_bug.cgi?id=2044347): bump to k8s 1.23.3 [#1145](https://github.com/openshift/kubernetes/pull/1145) * [Bug 2039539](https://bugzilla.redhat.com/show_bug.cgi?id=2039539): Revert "UPSTREAM: <drop>: revert upstream PR 106306" [#1143](https://github.com/openshift/kubernetes/pull/1143) * [Bug 2041583](https://bugzilla.redhat.com/show_bug.cgi?id=2041583): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1136](https://github.com/openshift/kubernetes/pull/1136) * [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: 107695: kubelet: fix podstatus not containing pod full name [#1140](https://github.com/openshift/kubernetes/pull/1140) * [Bug 2039539](https://bugzilla.redhat.com/show_bug.cgi?id=2039539): UPSTREAM: <drop>: revert upstream PR 106306 [#1130](https://github.com/openshift/kubernetes/pull/1130) * [Bug 2022824](https://bugzilla.redhat.com/show_bug.cgi?id=2022824): Fix the leak of vSphere client sessions [#1104](https://github.com/openshift/kubernetes/pull/1104) * [Bug 2042169](https://bugzilla.redhat.com/show_bug.cgi?id=2042169): UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources [#1123](https://github.com/openshift/kubernetes/pull/1123) * [Bug 2040793](https://bugzilla.redhat.com/show_bug.cgi?id=2040793): Fix ordering issues with snapshot e2e [#1119](https://github.com/openshift/kubernetes/pull/1119) * [Bug 2038968](https://bugzilla.redhat.com/show_bug.cgi?id=2038968): Restore upstream feature gates [#1112](https://github.com/openshift/kubernetes/pull/1112) * [Bug 2004542](https://bugzilla.redhat.com/show_bug.cgi?id=2004542): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1099](https://github.com/openshift/kubernetes/pull/1099) * [Bug 2041641](https://bugzilla.redhat.com/show_bug.cgi?id=2041641): Backport k8s.io/utils fix for a memory leak within the inotify utilities [#1122](https://github.com/openshift/kubernetes/pull/1122) * [Bug 2042493](https://bugzilla.redhat.com/show_bug.cgi?id=2042493): UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API [#1124](https://github.com/openshift/kubernetes/pull/1124) * [Bug 2039414](https://bugzilla.redhat.com/show_bug.cgi?id=2039414): UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost-squash to other [#1121](https://github.com/openshift/kubernetes/pull/1121) * [Bug 2042493](https://bugzilla.redhat.com/show_bug.cgi?id=2042493): UPSTREAM: <carry>: Fix conformance and serial tests by stopping node cordoning [#1129](https://github.com/openshift/kubernetes/pull/1129) * [Bug 1933144](https://bugzilla.redhat.com/show_bug.cgi?id=1933144): hardens the aggregated API e2e tests in an HA setup [#1114](https://github.com/openshift/kubernetes/pull/1114) * [Bug 2001442](https://bugzilla.redhat.com/show_bug.cgi?id=2001442): empty termination.log file for the kube-apiserver has too permissive mode [#1096](https://github.com/openshift/kubernetes/pull/1096) * [Bug 2034705](https://bugzilla.redhat.com/show_bug.cgi?id=2034705): UPSTREAM 107136: Don't log vSphere configuration data in storage e2e tests [#1098](https://github.com/openshift/kubernetes/pull/1098) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): fix -rt builds and copy extensions into resulting image [#1106](https://github.com/openshift/kubernetes/pull/1106) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): Kube 1.23.0 rebase [#1087](https://github.com/openshift/kubernetes/pull/1087) * Switch to go1.17 [#1080](https://github.com/openshift/kubernetes/pull/1080) * [Bug 2021629](https://bugzilla.redhat.com/show_bug.cgi?id=2021629): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1037](https://github.com/openshift/kubernetes/pull/1037) * UPSTREAM: 105910: retry PV create in e2e-test on API quota failure [#1078](https://github.com/openshift/kubernetes/pull/1078) * UPSTREAM: <drop>: revert to go1.16 [#1079](https://github.com/openshift/kubernetes/pull/1079) * Updating openshift-enterprise-hyperkube images to be consistent with ART [#934](https://github.com/openshift/kubernetes/pull/934) * UPSTREAM: <drop>: remove creation of openshift-infra ns and recycler SA [#1039](https://github.com/openshift/kubernetes/pull/1039) * [Bug 2008532](https://bugzilla.redhat.com/show_bug.cgi?id=2008532): Fix subpath sources check [#1065](https://github.com/openshift/kubernetes/pull/1065) * [Bug 2017276](https://bugzilla.redhat.com/show_bug.cgi?id=2017276): UPSTREAM: 105934: Don't guess SELinux support on error [#1052](https://github.com/openshift/kubernetes/pull/1052) * Rebase Automation Script [#1040](https://github.com/openshift/kubernetes/pull/1040) * Updating openshift-enterprise-pod images to be consistent with ART [#933](https://github.com/openshift/kubernetes/pull/933) * UPSTREAM: <carry>: delay queuing deletion for PV to allow nodes some time to unmount [#1062](https://github.com/openshift/kubernetes/pull/1062) * [Bug 1978528](https://bugzilla.redhat.com/show_bug.cgi?id=1978528): UPSTREAM: <carry>: bump cadvisor for 2957, 2999 and 2979 upstream patches [#1049](https://github.com/openshift/kubernetes/pull/1049) * [Bug 2023779](https://bugzilla.redhat.com/show_bug.cgi?id=2023779): Fix patch 104847 [#1059](https://github.com/openshift/kubernetes/pull/1059) * [Bug 2022811](https://bugzilla.redhat.com/show_bug.cgi?id=2022811): UPSTREAM: 106382: defer close the rotated log open [#1051](https://github.com/openshift/kubernetes/pull/1051) * [Bug 2007495](https://bugzilla.redhat.com/show_bug.cgi?id=2007495): UPSTREAM: 105213: remove StartedPodsErrorsTotal metrice message [#988](https://github.com/openshift/kubernetes/pull/988) * [Bug 2021936](https://bugzilla.redhat.com/show_bug.cgi?id=2021936): Read k8s version from hyperkube Dockerfile [#1038](https://github.com/openshift/kubernetes/pull/1038) * [Bug 2002759](https://bugzilla.redhat.com/show_bug.cgi?id=2002759): UPSTREAM: <carry>: verify required http2 cipher suites [#1022](https://github.com/openshift/kubernetes/pull/1022) * UPSTREAM: <carry>: update rebase doc [#1031](https://github.com/openshift/kubernetes/pull/1031) * [Bug 2000216](https://bugzilla.redhat.com/show_bug.cgi?id=2000216): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1014](https://github.com/openshift/kubernetes/pull/1014) * [Bug 1970331](https://bugzilla.redhat.com/show_bug.cgi?id=1970331): UPSTREAM: <drop>: bump apiserver-library-go [#1017](https://github.com/openshift/kubernetes/pull/1017) * [Bug 1990190](https://bugzilla.redhat.com/show_bug.cgi?id=1990190): Remove Error Message Check Dynamic PV Tests [#1011](https://github.com/openshift/kubernetes/pull/1011) * [Bug 2011513](https://bugzilla.redhat.com/show_bug.cgi?id=2011513): kubelet: do not arbitrarily create a podSyncStatus for finished pods [#1007](https://github.com/openshift/kubernetes/pull/1007) * UPSTREAM: <drop>: bump apiserver-library-go [#1008](https://github.com/openshift/kubernetes/pull/1008) * [Bug 1997478](https://bugzilla.redhat.com/show_bug.cgi?id=1997478): Ensure terminal pods maintain terminal status [#999](https://github.com/openshift/kubernetes/pull/999) * [Bug 2010348](https://bugzilla.redhat.com/show_bug.cgi?id=2010348): UPSTREAM: 105352: revert pie build mode [#993](https://github.com/openshift/kubernetes/pull/993) * UPSTREAM: <carry>: allow SCC to be disabled on a per-namespace basis [#984](https://github.com/openshift/kubernetes/pull/984) * [Bug 2000754](https://bugzilla.redhat.com/show_bug.cgi?id=2000754): UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps [#980](https://github.com/openshift/kubernetes/pull/980) * [Bug 1965368](https://bugzilla.redhat.com/show_bug.cgi?id=1965368): UPSTREAM: <drop>: bump(apiserver-library-go) [#971](https://github.com/openshift/kubernetes/pull/971) * Remove Error Message for Unsupported Volume Test [#905](https://github.com/openshift/kubernetes/pull/905) * Add CSI migration feature gates for vSphere and Azure File [#961](https://github.com/openshift/kubernetes/pull/961) * etcd-client starts retrying transient errors from the etcd cluster [#959](https://github.com/openshift/kubernetes/pull/959) * UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#963](https://github.com/openshift/kubernetes/pull/963) * [Bug 2005182](https://bugzilla.redhat.com/show_bug.cgi?id=2005182): UPSTREAM: <carry>: update list of deprecated apis to be removed [#965](https://github.com/openshift/kubernetes/pull/965) * [Bug 1999133](https://bugzilla.redhat.com/show_bug.cgi?id=1999133): kubelet: Handle UID reuse in pod worker [#938](https://github.com/openshift/kubernetes/pull/938) * UPSTREAM: <carry>: add control plane to allowed roles [#957](https://github.com/openshift/kubernetes/pull/957) * UPSTREAM: <drop>: bump openshift, k8s to 1.22.1 [#950](https://github.com/openshift/kubernetes/pull/950) * [Bug 2003269](https://bugzilla.redhat.com/show_bug.cgi?id=2003269): UPSTREAM: 104817: kubelet: Rejected pods should be filtered from admission [#948](https://github.com/openshift/kubernetes/pull/948) * Bugzilla 2001763: UPSTREAM: <carry>: 104437: run etcd healthcheck in the background and… [#893](https://github.com/openshift/kubernetes/pull/893) * UPSTREAM: 104314: legacy-cloud-providers: aws: Add support for consuming web identity credentials [#927](https://github.com/openshift/kubernetes/pull/927) * [Bug 1996689](https://bugzilla.redhat.com/show_bug.cgi?id=1996689): Tighten up RestrictedEndpointsAdmission [#899](https://github.com/openshift/kubernetes/pull/899) * [Bug 1996779](https://bugzilla.redhat.com/show_bug.cgi?id=1996779): Fix bug with goroutine capturing loop variable [#904](https://github.com/openshift/kubernetes/pull/904) * [Bug 2000451](https://bugzilla.redhat.com/show_bug.cgi?id=2000451): UPSTREAM: <drop>: Disable broken sig-storage test [#925](https://github.com/openshift/kubernetes/pull/925) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: 104630: remove server option startup-send-retry-after-until… [#922](https://github.com/openshift/kubernetes/pull/922) * [Bug 1992016](https://bugzilla.redhat.com/show_bug.cgi?id=1992016): UPSTREAM: <carry>: add OPENSHIFT_MAX_HOUSEKEEPING_INTERVAL_DURATION and OPENSHIFT_EVICTION_MONITORING_PERIOD_DURATION [#909](https://github.com/openshift/kubernetes/pull/909) * [Bug 1994927](https://bugzilla.redhat.com/show_bug.cgi?id=1994927): Revert "Remove Endpoints write access from aggregated edit role" [#908](https://github.com/openshift/kubernetes/pull/908) * [Bug 1997657](https://bugzilla.redhat.com/show_bug.cgi?id=1997657): UPSTREAM: 104577: kubelet: Admission must exclude completed pods and avoid races [#920](https://github.com/openshift/kubernetes/pull/920) * [Bug 1948089](https://bugzilla.redhat.com/show_bug.cgi?id=1948089): openshift-apiserver should not set Available=False APIServicesAvailable on update [#915](https://github.com/openshift/kubernetes/pull/915) * [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Rebase 1.22.1 [#916](https://github.com/openshift/kubernetes/pull/916) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers [#907](https://github.com/openshift/kubernetes/pull/907) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in [#906](https://github.com/openshift/kubernetes/pull/906) * [Bug 1993980](https://bugzilla.redhat.com/show_bug.cgi?id=1993980): UPSTREAM: 104529: [1.22] vendor: bump runc to 1.0.2 [#910](https://github.com/openshift/kubernetes/pull/910) * [Bug 1948089](https://bugzilla.redhat.com/show_bug.cgi?id=1948089): openshift-apiserver should not set Available=False APIServicesAvailable on update [#903](https://github.com/openshift/kubernetes/pull/903) * [Bug 1986307](https://bugzilla.redhat.com/show_bug.cgi?id=1986307): UPSTREAM: <carry>: re-enable networking tests [#885](https://github.com/openshift/kubernetes/pull/885) * [Bug 1995804](https://bugzilla.redhat.com/show_bug.cgi?id=1995804): UPSTREAM: <carry>: rename termination events to use lifecycleSignals [#896](https://github.com/openshift/kubernetes/pull/896) * [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 and 2925 upstream patches [#892](https://github.com/openshift/kubernetes/pull/892) * [Bug 1997465](https://bugzilla.redhat.com/show_bug.cgi?id=1997465): UPSTREAM: 104466: bump k8s.io/util to get fix for LRU cache [#898](https://github.com/openshift/kubernetes/pull/898) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: 104281: send retry-after until the apiserver is ready [#889](https://github.com/openshift/kubernetes/pull/889) * [Bug 1982868](https://bugzilla.redhat.com/show_bug.cgi?id=1982868): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#877](https://github.com/openshift/kubernetes/pull/877) * [Bug 1986306](https://bugzilla.redhat.com/show_bug.cgi?id=1986306): Kubectl client kubectl wait should ignore not found error with --for=delete [#891](https://github.com/openshift/kubernetes/pull/891) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: use lifeCycleSignals for isTerminating [#887](https://github.com/openshift/kubernetes/pull/887) * [Bug 1980118](https://bugzilla.redhat.com/show_bug.cgi?id=1980118): UPSTREAM: <carry>: drop the warning to use --keep-annotations [#860](https://github.com/openshift/kubernetes/pull/860) * [Bug 1992900](https://bugzilla.redhat.com/show_bug.cgi?id=1992900): Fix build with multiple GOFLAGS [#886](https://github.com/openshift/kubernetes/pull/886) * [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Bump k8s.io to 1.22.0-rc.0 [#862](https://github.com/openshift/kubernetes/pull/862) * UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#853](https://github.com/openshift/kubernetes/pull/853) * [Bug 1981477](https://bugzilla.redhat.com/show_bug.cgi?id=1981477): Do not throw error when we can't get canonical path [#817](https://github.com/openshift/kubernetes/pull/817) * UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#852](https://github.com/openshift/kubernetes/pull/852) * produce events for readyz going true [#807](https://github.com/openshift/kubernetes/pull/807) * UPSTREAM: <drop>: remove the openshift authenticator from the apiserver [#822](https://github.com/openshift/kubernetes/pull/822) * UPSTREAM: <drop>: bump(apiserver-library-go) [#846](https://github.com/openshift/kubernetes/pull/846) * UPSTREAM: <carry>: add CSI migration feature gates for GCE PD and Azure Disk [#831](https://github.com/openshift/kubernetes/pull/831) * UPSTREAM: 103385: Fix Multi-AZ test [#837](https://github.com/openshift/kubernetes/pull/837) * [Bug 1977920](https://bugzilla.redhat.com/show_bug.cgi?id=1977920): Ensure scc compatibility with BoundServiceAccountTokenVolume [#841](https://github.com/openshift/kubernetes/pull/841) * UPSTREAM: 103050: Bug 1975325: Fix NodeAuthenticator tests in dual stack [#823](https://github.com/openshift/kubernetes/pull/823) * Updating openshift-enterprise-hyperkube images to be consistent with ART [#814](https://github.com/openshift/kubernetes/pull/814) * [Bug 1976379](https://bugzilla.redhat.com/show_bug.cgi?id=1976379): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#832](https://github.com/openshift/kubernetes/pull/832) * Updating openshift-enterprise-pod images to be consistent with ART [#812](https://github.com/openshift/kubernetes/pull/812) * UPSTREAM: <carry>: update rebase doc [#824](https://github.com/openshift/kubernetes/pull/824) * [Bug 1975283](https://bugzilla.redhat.com/show_bug.cgi?id=1975283): update Multi-AZ Cluster Volumes test name [#825](https://github.com/openshift/kubernetes/pull/825) * UPSTREAM: <carry>: update rebase doc [#818](https://github.com/openshift/kubernetes/pull/818) * UPSTREAM: <carry>: crd: add ClusterOperator condition message table column [#810](https://github.com/openshift/kubernetes/pull/810) * [Bug 1971745](https://bugzilla.redhat.com/show_bug.cgi?id=1971745): only chown if non-windows machine with projected volumes [#804](https://github.com/openshift/kubernetes/pull/804) * [Full changelog](https://github.com/openshift/kubernetes/compare/8b969e704241724b962a28da47f0224d09985959...) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/) * [OCPBUGS-24791](https://issues.redhat.com/browse/OCPBUGS-24791): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART [#270](https://github.com/openshift/oauth-proxy/pull/270) * [OCPBUGS-21718](https://issues.redhat.com/browse/OCPBUGS-21718): go.mod: bump golang.org/x/net to v0.17.0 [#266](https://github.com/openshift/oauth-proxy/pull/266) * [OCPBUGS-18858](https://issues.redhat.com/browse/OCPBUGS-18858): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#265](https://github.com/openshift/oauth-proxy/pull/265) * [OCPBUGS-16459](https://issues.redhat.com/browse/OCPBUGS-16459): bump kube and lib-go to get rid of goproxy dep [#260](https://github.com/openshift/oauth-proxy/pull/260) * fix route apiVersion [#257](https://github.com/openshift/oauth-proxy/pull/257) * Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#251](https://github.com/openshift/oauth-proxy/pull/251) * [APPSRE-7970](https://issues.redhat.com/browse/APPSRE-7970): Add support for configuring upstream timeout [#258](https://github.com/openshift/oauth-proxy/pull/258) * [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): Handle TERM signal gracefully [#255](https://github.com/openshift/oauth-proxy/pull/255) * [AUTH-373](https://issues.redhat.com/browse/AUTH-373): add audit-ID headers to TokenReview and SAR requests [#252](https://github.com/openshift/oauth-proxy/pull/252) * Update logo [#245](https://github.com/openshift/oauth-proxy/pull/245) * fix json examples for --openshift-delegate-urls [#203](https://github.com/openshift/oauth-proxy/pull/203) * Use resourceName in Openshift SAR rule [#243](https://github.com/openshift/oauth-proxy/pull/243) * Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#241](https://github.com/openshift/oauth-proxy/pull/241) * [Bug 2026860](https://bugzilla.redhat.com/show_bug.cgi?id=2026860): ocp provider: don't fail client creation if oauth-server cert is not present [#238](https://github.com/openshift/oauth-proxy/pull/238) * Golang bump 1.17 [#235](https://github.com/openshift/oauth-proxy/pull/235) * [Bug 1966298](https://bugzilla.redhat.com/show_bug.cgi?id=1966298): Update golang.org/x/net [#223](https://github.com/openshift/oauth-proxy/pull/223) * [Bug 1986810](https://bugzilla.redhat.com/show_bug.cgi?id=1986810): trust the oauth-server when constructing a client to OpenShift [#220](https://github.com/openshift/oauth-proxy/pull/220) * [Bug 1980235](https://bugzilla.redhat.com/show_bug.cgi?id=1980235): deprecate version [#218](https://github.com/openshift/oauth-proxy/pull/218) * Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#216](https://github.com/openshift/oauth-proxy/pull/216) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#215](https://github.com/openshift/oauth-proxy/pull/215) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/3fc0d89b2607808927f5b48168342f5dc3a1a271...) ### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/) * Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.18 [#322](https://github.com/openshift/cluster-api-provider-openstack/pull/322) * [OCPBUGS-34072](https://issues.redhat.com/browse/OCPBUGS-34072): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.17 [#317](https://github.com/openshift/cluster-api-provider-openstack/pull/317) * Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main [#316](https://github.com/openshift/cluster-api-provider-openstack/pull/316) * Remove dulek from shiftstack-team [#313](https://github.com/openshift/cluster-api-provider-openstack/pull/313) * NO-JIRA: Bump to latest CAPO v0.10 [#314](https://github.com/openshift/cluster-api-provider-openstack/pull/314) * NO-JIRA: Bump to latest CAPO v0.10 [#312](https://github.com/openshift/cluster-api-provider-openstack/pull/312) * [OCPBUGS-33170](https://issues.redhat.com/browse/OCPBUGS-33170): openshift: Set FallbackToLogsOnError on infra-cluster controller [#311](https://github.com/openshift/cluster-api-provider-openstack/pull/311) * [OSASINFRA-3437](https://issues.redhat.com/browse/OSASINFRA-3437): Rebase on CAPO v0.10 [#305](https://github.com/openshift/cluster-api-provider-openstack/pull/305) * [OCPBUGS-31277](https://issues.redhat.com/browse/OCPBUGS-31277): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.16 [#301](https://github.com/openshift/cluster-api-provider-openstack/pull/301) * 🐛 Persist API FloatingIP immediately on creation [#1831](https://github.com/openshift/cluster-api-provider-openstack/pull/1831) * :bug: Fix patching OpenstackMachine's immutable spec during reconcile [#1819](https://github.com/openshift/cluster-api-provider-openstack/pull/1819) * ✨ Add flags for configuring rate limits [#1817](https://github.com/openshift/cluster-api-provider-openstack/pull/1817) * :bug: Fix potential panic during instance create [#1806](https://github.com/openshift/cluster-api-provider-openstack/pull/1806) * 🐛 Revert "Move FloatingIP to Bastion spec" [#1783](https://github.com/openshift/cluster-api-provider-openstack/pull/1783) * 🌱 Import CAPI v1.6.0 [#1780](https://github.com/openshift/cluster-api-provider-openstack/pull/1780) * 🌱 Bump version artifacts for release-0.9 [#1775](https://github.com/openshift/cluster-api-provider-openstack/pull/1775) * 🐛 Verify success of parsing OpenStack cloud cacert [#1770](https://github.com/openshift/cluster-api-provider-openstack/pull/1770) * 📖 Fix network-related docs for API v1alpha7 [#1764](https://github.com/openshift/cluster-api-provider-openstack/pull/1764) * 🌱 Remove Containerfile and Dockerfile experimental [#1760](https://github.com/openshift/cluster-api-provider-openstack/pull/1760) * 🌱 Fix log message typo [#1758](https://github.com/openshift/cluster-api-provider-openstack/pull/1758) * 🐛 Update e2e testing image of CAPI version from 1.5.0 to 1.5.1 [#1754](https://github.com/openshift/cluster-api-provider-openstack/pull/1754) * 🐛Fix missing endpoint type in OpenStack endpoint clients configuration [#1744](https://github.com/openshift/cluster-api-provider-openstack/pull/1744) * ✨remove flavor check to relief restrictions to CPU [#1745](https://github.com/openshift/cluster-api-provider-openstack/pull/1745) * ⚠️ Move FloatingIP to Bastion spec [#1739](https://github.com/openshift/cluster-api-provider-openstack/pull/1739) * ⚠️ Bump Go to 1.20.10 [#1740](https://github.com/openshift/cluster-api-provider-openstack/pull/1740) * ✨ Add ephemeral storage support to the AdditionalBlockDevices [#1696](https://github.com/openshift/cluster-api-provider-openstack/pull/1696) * ✨ Use kustomize new syntax for patches [#1735](https://github.com/openshift/cluster-api-provider-openstack/pull/1735) * ✨ Add cache on provider scope [#1688](https://github.com/openshift/cluster-api-provider-openstack/pull/1688) * 🌱 deps: Bump dependencies [#1733](https://github.com/openshift/cluster-api-provider-openstack/pull/1733) * 🌱 Enable k8s upgrade in self hosted test [#1732](https://github.com/openshift/cluster-api-provider-openstack/pull/1732) * 🌱 Use k8s v1.28 in tests [#1723](https://github.com/openshift/cluster-api-provider-openstack/pull/1723) * 🐛 Don't remove BYO api server loadbalancer floating IP [#1728](https://github.com/openshift/cluster-api-provider-openstack/pull/1728) * 🌱 Replace kustomize vars with replacements [#1726](https://github.com/openshift/cluster-api-provider-openstack/pull/1726) * 🌱 e2e: dump cinder volumes [#1722](https://github.com/openshift/cluster-api-provider-openstack/pull/1722) * 🌱 Ignore go workspaces [#1724](https://github.com/openshift/cluster-api-provider-openstack/pull/1724) * 🌱 E2e: Use pre-build node images [#1699](https://github.com/openshift/cluster-api-provider-openstack/pull/1699) * ✨ Add option to customize private network MTU [#1701](https://github.com/openshift/cluster-api-provider-openstack/pull/1701) * :seedling: ci: bump Flatcar tested version [#1713](https://github.com/openshift/cluster-api-provider-openstack/pull/1713) * 🌱 ci: Several CI fixes [#1718](https://github.com/openshift/cluster-api-provider-openstack/pull/1718) * ✨ Add server name for the Machine InternalDNS [#1715](https://github.com/openshift/cluster-api-provider-openstack/pull/1715) * 🌱 Bump devstack image to ubuntu 22.04 [#1716](https://github.com/openshift/cluster-api-provider-openstack/pull/1716) * 🌱 Add explicit dependency on github.com/golang/mock/mockgen/model [#1712](https://github.com/openshift/cluster-api-provider-openstack/pull/1712) * 🌱 Allow custom KUBEBUILDER_ASSETS_DIR in tests [#1710](https://github.com/openshift/cluster-api-provider-openstack/pull/1710) * 🌱 Ignore vendor directories in boilerplate check [#1709](https://github.com/openshift/cluster-api-provider-openstack/pull/1709) * 🌱 Build setup-envtest in hack/tools [#1707](https://github.com/openshift/cluster-api-provider-openstack/pull/1707) * 🌱 Bump ginkgo [#1705](https://github.com/openshift/cluster-api-provider-openstack/pull/1705) * :sparkles: Additional data volumes for machines [#1668](https://github.com/openshift/cluster-api-provider-openstack/pull/1668) * 🌱 gitignore: ignore vendor/ directory [#1690](https://github.com/openshift/cluster-api-provider-openstack/pull/1690) * 🌱 Move webhook CA injection into webhook resource [#1686](https://github.com/openshift/cluster-api-provider-openstack/pull/1686) * Update Gophercloud to 1.7.0 [#1682](https://github.com/openshift/cluster-api-provider-openstack/pull/1682) * 🐛 Only delete all ports when deleting cluster network [#1680](https://github.com/openshift/cluster-api-provider-openstack/pull/1680) * :book: Clarify release notes content for releases and pre-releases [#1678](https://github.com/openshift/cluster-api-provider-openstack/pull/1678) * 🌱 Remove defaulter-gen [#1677](https://github.com/openshift/cluster-api-provider-openstack/pull/1677) * :book: doc/development: add devstack notes [#1569](https://github.com/openshift/cluster-api-provider-openstack/pull/1569) * 🌱 Add test for getOrCreate [#1673](https://github.com/openshift/cluster-api-provider-openstack/pull/1673) * Set failure only on instance error when no nodeRef [#1637](https://github.com/openshift/cluster-api-provider-openstack/pull/1637) * 🌱Fix various issues with CRD generation [#1669](https://github.com/openshift/cluster-api-provider-openstack/pull/1669) * ✨Allow changing allowAllInClusterTraffic in a deployed cluster [#1663](https://github.com/openshift/cluster-api-provider-openstack/pull/1663) * avoid duplicate error event [#1655](https://github.com/openshift/cluster-api-provider-openstack/pull/1655) * 🌱Bump CAPI to v1.5.1 [#1666](https://github.com/openshift/cluster-api-provider-openstack/pull/1666) * 🌱Structured logging migration of instance.go, service.go, floatingip.go, and securitygroups.go [#1631](https://github.com/openshift/cluster-api-provider-openstack/pull/1631) * Fix v1alpha6 -> v1alpha7 idempotence [#1626](https://github.com/openshift/cluster-api-provider-openstack/pull/1626) * 🐛 Don't fail when deleting non-existing port [#1660](https://github.com/openshift/cluster-api-provider-openstack/pull/1660) * 🐛 Fix panic on delete before cluster is initialised [#1657](https://github.com/openshift/cluster-api-provider-openstack/pull/1657) * 🐛Fix failing clusterctl upgrade test (second attempt) [#1661](https://github.com/openshift/cluster-api-provider-openstack/pull/1661) * 🐛Fix failing clusterctl upgrade test [#1659](https://github.com/openshift/cluster-api-provider-openstack/pull/1659) * 🌱 Bump golangci-lint to 1.54.2 [#1652](https://github.com/openshift/cluster-api-provider-openstack/pull/1652) * 🐛 fix port cleanup when using CAPO-created cluster network [#1651](https://github.com/openshift/cluster-api-provider-openstack/pull/1651) * :bug: Fix Port Leaks [#1648](https://github.com/openshift/cluster-api-provider-openstack/pull/1648) * 🌱 Update verbosity levels in instance.go [#1635](https://github.com/openshift/cluster-api-provider-openstack/pull/1635) * 📖 Fix APIVersion to use existing router with OpenStackCluster [#1638](https://github.com/openshift/cluster-api-provider-openstack/pull/1638) * 🌱 Migrate pkg/cloud/services/networking/network.go and router.go to structured logging [#1624](https://github.com/openshift/cluster-api-provider-openstack/pull/1624) * 🐛 Fix application credential support in env.rc [#1646](https://github.com/openshift/cluster-api-provider-openstack/pull/1646) * 🌱Remove APIServerLoadBalancer.Provider Up Conversion [#1642](https://github.com/openshift/cluster-api-provider-openstack/pull/1642) * 🌱Migrate controllers/openstackcluster_controller.go to structured logging [#1630](https://github.com/openshift/cluster-api-provider-openstack/pull/1630) * :seedling: Migrating /pkg/cloud/services/loadbalancer/loadbalancer.go and /controllers/openstackmachine_controller.go to structured logging [#1621](https://github.com/openshift/cluster-api-provider-openstack/pull/1621) * ✨ Add `--version` flag [#1641](https://github.com/openshift/cluster-api-provider-openstack/pull/1641) * ✨ Add support to IPv6 in Machine's status [#1633](https://github.com/openshift/cluster-api-provider-openstack/pull/1633) * 🌱 chore: use capo cluster agent for API requests [#1614](https://github.com/openshift/cluster-api-provider-openstack/pull/1614) * ✨ Update to CAPI 1.5 [#1600](https://github.com/openshift/cluster-api-provider-openstack/pull/1600) * 🌱 Simplify types of Instance.SecurityGroup and Instance.Networks [#1625](https://github.com/openshift/cluster-api-provider-openstack/pull/1625) * remove subnet from the output in `kubectl get` [#1609](https://github.com/openshift/cluster-api-provider-openstack/pull/1609) * :sparkles: Allow Use of Public CAs [#1610](https://github.com/openshift/cluster-api-provider-openstack/pull/1610) * :seedling: ci: bump flatcar to latest stable [#1607](https://github.com/openshift/cluster-api-provider-openstack/pull/1607) * 📖 Add link to book in README [#1602](https://github.com/openshift/cluster-api-provider-openstack/pull/1602) * 🌱 Add metadata for release 0.8 [#1601](https://github.com/openshift/cluster-api-provider-openstack/pull/1601) * ⚠️ Update NetworkStatus ready for dual stack [#1577](https://github.com/openshift/cluster-api-provider-openstack/pull/1577) * 🌱 E2e: Unify machine log collection [#1595](https://github.com/openshift/cluster-api-provider-openstack/pull/1595) * 🌱 E2e: Bump the tested Kubernetes versions [#1594](https://github.com/openshift/cluster-api-provider-openstack/pull/1594) * 🌱 E2e: Implement LogCollector interface [#1581](https://github.com/openshift/cluster-api-provider-openstack/pull/1581) * ✨ Allowing update of OpenstackCluster API server fixed IP [#1590](https://github.com/openshift/cluster-api-provider-openstack/pull/1590) * :sparkles: Add additional sec group rule for additionalPorts of LB [#1592](https://github.com/openshift/cluster-api-provider-openstack/pull/1592) * do not set failure reason/message when LB not created [#1591](https://github.com/openshift/cluster-api-provider-openstack/pull/1591) * 🌱 Replace github.com/pkg/errors [#1585](https://github.com/openshift/cluster-api-provider-openstack/pull/1585) * 🌱 dependencies: Bump Go stdlib [#1584](https://github.com/openshift/cluster-api-provider-openstack/pull/1584) * 🐛 Fix deadlock [#1579](https://github.com/openshift/cluster-api-provider-openstack/pull/1579) * 🌱 Bump Kubernetes version used in e2e tests [#1571](https://github.com/openshift/cluster-api-provider-openstack/pull/1571) * ⚠️ Remove ProjectID from PortOpts [#1575](https://github.com/openshift/cluster-api-provider-openstack/pull/1575) * 🐛 Always filter cluster subnets by cluster network ID [#1572](https://github.com/openshift/cluster-api-provider-openstack/pull/1572) * 🌱 E2e: Bump clusterctl upgrade to start from v0.7.2 [#1568](https://github.com/openshift/cluster-api-provider-openstack/pull/1568) * :warning: Transform `Profile` into an interface [#1560](https://github.com/openshift/cluster-api-provider-openstack/pull/1560) * 🌱 Set provider ID through kubelet in ubuntu templates [#1551](https://github.com/openshift/cluster-api-provider-openstack/pull/1551) * ⚠️Remove last uses of TenantID and pagination filters [#1563](https://github.com/openshift/cluster-api-provider-openstack/pull/1563) * :seedling: Deprecate v1alpha5 [#1561](https://github.com/openshift/cluster-api-provider-openstack/pull/1561) * :seedling: bump docker distribution to 2.8.2+incompatible [#1562](https://github.com/openshift/cluster-api-provider-openstack/pull/1562) * ⚠️ Replace SubnetParam with SubnetFilter [#1559](https://github.com/openshift/cluster-api-provider-openstack/pull/1559) * ⚠️ Replace SecurityGroupParam with SecurityGroupFilter [#1557](https://github.com/openshift/cluster-api-provider-openstack/pull/1557) * 🌱Remove unused fields from ExternalNetwork [#1555](https://github.com/openshift/cluster-api-provider-openstack/pull/1555) * 🌱Remove PortOpts from Network [#1550](https://github.com/openshift/cluster-api-provider-openstack/pull/1550) * 🌱 Reduce the Bastion status to only fields which are used [#1546](https://github.com/openshift/cluster-api-provider-openstack/pull/1546) * ⚠️ Remove PortOpts.SecurityGroups [#1516](https://github.com/openshift/cluster-api-provider-openstack/pull/1516) * Use dl.k8s.io instead of kubernetes-release bucket [#1542](https://github.com/openshift/cluster-api-provider-openstack/pull/1542) * Fix OWNERS_ALIASES syntax error [#1543](https://github.com/openshift/cluster-api-provider-openstack/pull/1543) * Update external approvers [#1536](https://github.com/openshift/cluster-api-provider-openstack/pull/1536) * ⚠️ Remove Networks [#1518](https://github.com/openshift/cluster-api-provider-openstack/pull/1518) * Add lentzi90 to cluster-api-openstack-maintainers [#1537](https://github.com/openshift/cluster-api-provider-openstack/pull/1537) * ⚠️ Remove v1alpha3 and v1alpha4 [#1527](https://github.com/openshift/cluster-api-provider-openstack/pull/1527) * Update linter to v1.52.2 [#1534](https://github.com/openshift/cluster-api-provider-openstack/pull/1534) * 🌱 Remove creation of 2 Events for the same event [#1531](https://github.com/openshift/cluster-api-provider-openstack/pull/1531) * 🐛 Patch: Backport Provider to v1alpha6 [#1530](https://github.com/openshift/cluster-api-provider-openstack/pull/1530) * 🐛 Improve `env.rc` and `create_cloud_conf.sh` templates [#1381](https://github.com/openshift/cluster-api-provider-openstack/pull/1381) * ✨ Support propagate uplink status [#1481](https://github.com/openshift/cluster-api-provider-openstack/pull/1481) * ✨Infer port network from subnet [#1519](https://github.com/openshift/cluster-api-provider-openstack/pull/1519) * :seedling: ci: bump flatcar to latest major stable [#1524](https://github.com/openshift/cluster-api-provider-openstack/pull/1524) * 🌱 bump docker to 20.10.24+incompatible [#1525](https://github.com/openshift/cluster-api-provider-openstack/pull/1525) * :warning: flatcar: make external-cloud-provider-flatcar the default one [#1522](https://github.com/openshift/cluster-api-provider-openstack/pull/1522) * :seedling: pull cluster-api@v1.4.1 [#1521](https://github.com/openshift/cluster-api-provider-openstack/pull/1521) * ⚠️ Deprecate In-tree Cloud Provider [#1514](https://github.com/openshift/cluster-api-provider-openstack/pull/1514) * 🌱 Bump gophercloud to v1.3.0 [#1520](https://github.com/openshift/cluster-api-provider-openstack/pull/1520) * :sparkles: Add RouterName for use existing router [#1370](https://github.com/openshift/cluster-api-provider-openstack/pull/1370) * Restore APIServerLoadBalancer.Provider on up-conversion [#1517](https://github.com/openshift/cluster-api-provider-openstack/pull/1517) * 📖 Document removal of OpenStackMachineSpec.Subnet [#1515](https://github.com/openshift/cluster-api-provider-openstack/pull/1515) * 🌱 Un-pointer PortOpts.SecurityGroups [#1511](https://github.com/openshift/cluster-api-provider-openstack/pull/1511) * ✨Add Octavia OVN Provider Support [#1501](https://github.com/openshift/cluster-api-provider-openstack/pull/1501) * Add dulek to reviewers [#1512](https://github.com/openshift/cluster-api-provider-openstack/pull/1512) * ⚠️Remove OpenStackMachineSpec.Subnet [#1504](https://github.com/openshift/cluster-api-provider-openstack/pull/1504) * 🌱 Add fuzzy conversion tests for v1alpha6 [#1509](https://github.com/openshift/cluster-api-provider-openstack/pull/1509) * :book: docs/configuration: add Flatcar to OS section [#1503](https://github.com/openshift/cluster-api-provider-openstack/pull/1503) * :bug: e2e: refresh packages list before install containerd [#1507](https://github.com/openshift/cluster-api-provider-openstack/pull/1507) * :sparkles: templates: add flatcar template [#1444](https://github.com/openshift/cluster-api-provider-openstack/pull/1444) * 📖 Add documentation for creating local test environments [#1500](https://github.com/openshift/cluster-api-provider-openstack/pull/1500) * 🐛 fix: allow using multiattach volume types [#1498](https://github.com/openshift/cluster-api-provider-openstack/pull/1498) * ⚠️ Add v1alpha7 [#1497](https://github.com/openshift/cluster-api-provider-openstack/pull/1497) * ✨ Support value specs for Ports [#1452](https://github.com/openshift/cluster-api-provider-openstack/pull/1452) * fix: fix typo of worker rules and controller rules [#1492](https://github.com/openshift/cluster-api-provider-openstack/pull/1492) * 🐛 Switch to "4" instead of "ipip" for rules [#1489](https://github.com/openshift/cluster-api-provider-openstack/pull/1489) * :bug: Fix Provisioning to Unavailable AZs [#1479](https://github.com/openshift/cluster-api-provider-openstack/pull/1479) * 🐛 uplift golang and x/net [#1482](https://github.com/openshift/cluster-api-provider-openstack/pull/1482) * Fix "internal ip doesn't exist (yet)" in e2e logs [#1474](https://github.com/openshift/cluster-api-provider-openstack/pull/1474) * Remove the resource and machine tickers from e2e tests [#1471](https://github.com/openshift/cluster-api-provider-openstack/pull/1471) * Fix boilerplate linter [#1473](https://github.com/openshift/cluster-api-provider-openstack/pull/1473) * Download golangci-lint instead of building it [#1470](https://github.com/openshift/cluster-api-provider-openstack/pull/1470) * 🌱 Bump gophercloud to v1.2.0 [#1463](https://github.com/openshift/cluster-api-provider-openstack/pull/1463) * 📖 Add documentation about --ca-cert flag [#1467](https://github.com/openshift/cluster-api-provider-openstack/pull/1467) * 🐛 Return from reconciler after adding finalizer [#1464](https://github.com/openshift/cluster-api-provider-openstack/pull/1464) * ✨ Add Tags to API-Loadbalancer resources [#1457](https://github.com/openshift/cluster-api-provider-openstack/pull/1457) * 🐛 Fix Tilt by adding CAPO label in tilt-provider.json [#1430](https://github.com/openshift/cluster-api-provider-openstack/pull/1430) * Add e2e remediation tests [#1380](https://github.com/openshift/cluster-api-provider-openstack/pull/1380) * 🌱 Add e2e self hosted test [#1428](https://github.com/openshift/cluster-api-provider-openstack/pull/1428) * Envtest mocks [#1236](https://github.com/openshift/cluster-api-provider-openstack/pull/1236) * 🌱 Bump ginkgo to v2.7.0 and sync with hack/tools [#1460](https://github.com/openshift/cluster-api-provider-openstack/pull/1460) * check flavor and reject CPUs less than 2 [#1451](https://github.com/openshift/cluster-api-provider-openstack/pull/1451) * ✨ add explicit securitycontext to controller [#1461](https://github.com/openshift/cluster-api-provider-openstack/pull/1461) * 📖 fix path for taggin and serverMetadata in OpenstackMachineTemplates [#1454](https://github.com/openshift/cluster-api-provider-openstack/pull/1454) * ✨ Add ca-cert flag to supply a default ca certificate for each requests [#1440](https://github.com/openshift/cluster-api-provider-openstack/pull/1440) * 🌱 Use newer containerd in e2e tests [#1456](https://github.com/openshift/cluster-api-provider-openstack/pull/1456) * 🌱 E2e: Use plain ubuntu cloud image [#1441](https://github.com/openshift/cluster-api-provider-openstack/pull/1441) * 🐛 fix nil-pointer in initial reconciliation loop with empty status field [#1445](https://github.com/openshift/cluster-api-provider-openstack/pull/1445) * 🌱Add log to provide more info in case error happen [#1443](https://github.com/openshift/cluster-api-provider-openstack/pull/1443) * 🌱Be more robust when checking gophercloud errors in IsNotFound [#1432](https://github.com/openshift/cluster-api-provider-openstack/pull/1432) * 🐛 uplift x/net to 0.4.0 [#1427](https://github.com/openshift/cluster-api-provider-openstack/pull/1427) * 🌱Bump CAPI to v1.3.1 [#1424](https://github.com/openshift/cluster-api-provider-openstack/pull/1424) * ✨Add lentzi90 to reviewers [#1421](https://github.com/openshift/cluster-api-provider-openstack/pull/1421) * :book: Fix spelling errors on docs [#1418](https://github.com/openshift/cluster-api-provider-openstack/pull/1418) * 🌱 e2e: Change logging to avoid use of By [#1417](https://github.com/openshift/cluster-api-provider-openstack/pull/1417) * 🌱 Remove It block from clusterctl upgrade [#1412](https://github.com/openshift/cluster-api-provider-openstack/pull/1412) * ✨ Bump CAPI to v1.3.0 [#1406](https://github.com/openshift/cluster-api-provider-openstack/pull/1406) * 🌱Release 0.7 patches [#1405](https://github.com/openshift/cluster-api-provider-openstack/pull/1405) * 🐛 Update Ubuntu, CirrOS & Amphora image [#1408](https://github.com/openshift/cluster-api-provider-openstack/pull/1408) * 🌱 Add e2e clusterctl upgrade tests [#1371](https://github.com/openshift/cluster-api-provider-openstack/pull/1371) * 🌱 Bump Gophercloud to v1.1.0 [#1402](https://github.com/openshift/cluster-api-provider-openstack/pull/1402) * 🌱 scripts: replace apt with apt-get [#1401](https://github.com/openshift/cluster-api-provider-openstack/pull/1401) * 🌱 Tag current e2e tests as PR-Blocking [#1390](https://github.com/openshift/cluster-api-provider-openstack/pull/1390) * 🐛 Allow UDP traffic over nodeports [#1396](https://github.com/openshift/cluster-api-provider-openstack/pull/1396) * 🌱Ensure we capture early devstack logs [#1399](https://github.com/openshift/cluster-api-provider-openstack/pull/1399) * 🐛 Don't enable router-ovn service in CI deployments [#1400](https://github.com/openshift/cluster-api-provider-openstack/pull/1400) * 🐛 Decrease initial backoff for Floating IP operations [#1386](https://github.com/openshift/cluster-api-provider-openstack/pull/1386) * 🐛 Fix Octavia versions endpoint [#1385](https://github.com/openshift/cluster-api-provider-openstack/pull/1385) * 🐛 openstackmachine: do not set transient error message and reason [#1301](https://github.com/openshift/cluster-api-provider-openstack/pull/1301) * 🐛 fix: improve load balancer health checks [#1375](https://github.com/openshift/cluster-api-provider-openstack/pull/1375) * 🌱 Synchronize versions between Makefile, Containerfile, e2e and go.mod [#1369](https://github.com/openshift/cluster-api-provider-openstack/pull/1369) * :book: Add more infomation to run e2e test in locally [#1362](https://github.com/openshift/cluster-api-provider-openstack/pull/1362) * Fix accesIPv4 checking [#1366](https://github.com/openshift/cluster-api-provider-openstack/pull/1366) * switch version from float to int [#1281](https://github.com/openshift/cluster-api-provider-openstack/pull/1281) * 🌱 CI: Clean openstack volumes [#1364](https://github.com/openshift/cluster-api-provider-openstack/pull/1364) * 🌱 Bump CAPI to v1.2.4 [#1361](https://github.com/openshift/cluster-api-provider-openstack/pull/1361) * ✨ Enable additional linters and metalinter checks. Fix findings [#1359](https://github.com/openshift/cluster-api-provider-openstack/pull/1359) * 🌱 Remove unnecessary mock import aliases [#1357](https://github.com/openshift/cluster-api-provider-openstack/pull/1357) * 🐛 Don't require cinder when not using volumes [#1353](https://github.com/openshift/cluster-api-provider-openstack/pull/1353) * 🌱 Add the cluster templates back [#1354](https://github.com/openshift/cluster-api-provider-openstack/pull/1354) * 🌱 Update golangci-lint (v1.46.2 -> v1.50.0), remove deprecated linters [#1342](https://github.com/openshift/cluster-api-provider-openstack/pull/1342) * 🐛 Don't require an InstanceSpec for DeleteInstance [#1350](https://github.com/openshift/cluster-api-provider-openstack/pull/1350) * ci: Pin to the yoga version of openstackclient [#1352](https://github.com/openshift/cluster-api-provider-openstack/pull/1352) * ✨ Allow for omitting AZ from control plane nodes [#1318](https://github.com/openshift/cluster-api-provider-openstack/pull/1318) * 🌱 Group Makefile targets [#1343](https://github.com/openshift/cluster-api-provider-openstack/pull/1343) * doc: update calico location [#1338](https://github.com/openshift/cluster-api-provider-openstack/pull/1338) * update doc to make it more clear [#1335](https://github.com/openshift/cluster-api-provider-openstack/pull/1335) * 🐛 fix nilpointer during clusterctl move [#1340](https://github.com/openshift/cluster-api-provider-openstack/pull/1340) * update k8s to 1.25 [#1330](https://github.com/openshift/cluster-api-provider-openstack/pull/1330) * 🌱 remove apricote from reviewers [#1333](https://github.com/openshift/cluster-api-provider-openstack/pull/1333) * 📖 update README to include Yoga [#1331](https://github.com/openshift/cluster-api-provider-openstack/pull/1331) * update devstack release [#1329](https://github.com/openshift/cluster-api-provider-openstack/pull/1329) * 🌱 add merge strategy markers [#1325](https://github.com/openshift/cluster-api-provider-openstack/pull/1325) * 🌱 gce-project.sh: loop over all GCP zones during instance creation [#1324](https://github.com/openshift/cluster-api-provider-openstack/pull/1324) * :bug: Add security groups to ports only [#1319](https://github.com/openshift/cluster-api-provider-openstack/pull/1319) * 📖 Update PlantUML version (1.2020.16 -> 1.2022.6) [#1321](https://github.com/openshift/cluster-api-provider-openstack/pull/1321) * ✨ Conditions for OpenStackMachines [#1288](https://github.com/openshift/cluster-api-provider-openstack/pull/1288) * 🐛 Fix go1.19 linting errors [#1313](https://github.com/openshift/cluster-api-provider-openstack/pull/1313) * 🌱 Ensure that python and pip is installed for e2e and conformance tests [#1309](https://github.com/openshift/cluster-api-provider-openstack/pull/1309) * not assign floating ip when there are multiple controller nodes [#1276](https://github.com/openshift/cluster-api-provider-openstack/pull/1276) * 🐛 Update calico manifest for e2e testing [#1307](https://github.com/openshift/cluster-api-provider-openstack/pull/1307) * ✨ Add re-creation of bastion host on change [#1303](https://github.com/openshift/cluster-api-provider-openstack/pull/1303) * e2e test: add more dump output [#1304](https://github.com/openshift/cluster-api-provider-openstack/pull/1304) * 🐛 Fix conformance tests [#1305](https://github.com/openshift/cluster-api-provider-openstack/pull/1305) * refactory sec group code (for additional CNI support) [#1299](https://github.com/openshift/cluster-api-provider-openstack/pull/1299) * 🌱 Bump CAPI to v1.2.0 [#1302](https://github.com/openshift/cluster-api-provider-openstack/pull/1302) * 🌱 Set ginkgo.timeout in our kubetest config [#1297](https://github.com/openshift/cluster-api-provider-openstack/pull/1297) * 🌱 bump to capi v1.2.0-rc.0 [#1295](https://github.com/openshift/cluster-api-provider-openstack/pull/1295) * 🌱 only reconcile loadbalancer member if machine is control-plane [#1294](https://github.com/openshift/cluster-api-provider-openstack/pull/1294) * ✨ Enable JSON Logging [#1296](https://github.com/openshift/cluster-api-provider-openstack/pull/1296) * replace "4" with "ipip" [#1290](https://github.com/openshift/cluster-api-provider-openstack/pull/1290) * ✨ Bump to CAPI v1.2.0-beta.1 [#1283](https://github.com/openshift/cluster-api-provider-openstack/pull/1283) * 🐛 Fix logger arguments [#1284](https://github.com/openshift/cluster-api-provider-openstack/pull/1284) * Fix generation of e2e-templates when running conformance tests [#1287](https://github.com/openshift/cluster-api-provider-openstack/pull/1287) * 📖 add v1alpha6 breaking changes book page [#1285](https://github.com/openshift/cluster-api-provider-openstack/pull/1285) * 🌱 Generate cluster templates with kustomize [#1271](https://github.com/openshift/cluster-api-provider-openstack/pull/1271) * 🐛 delete port left over by err openstackmachine [#1260](https://github.com/openshift/cluster-api-provider-openstack/pull/1260) * Add Age column for osc/osm [#1279](https://github.com/openshift/cluster-api-provider-openstack/pull/1279) * ✨ Add v1alpha6 API types [#1272](https://github.com/openshift/cluster-api-provider-openstack/pull/1272) * use 1.24 as test env [#1277](https://github.com/openshift/cluster-api-provider-openstack/pull/1277) * update doc to reflect latest version, add helm link [#1275](https://github.com/openshift/cluster-api-provider-openstack/pull/1275) * nit:make event to log for already associated FIP [#1268](https://github.com/openshift/cluster-api-provider-openstack/pull/1268) * 📖 Instance create timeout is in minutes [#1267](https://github.com/openshift/cluster-api-provider-openstack/pull/1267) * 🐛 Make failure domain optional for OpenStackMachine [#1263](https://github.com/openshift/cluster-api-provider-openstack/pull/1263) * ✨ Feature: restrict API Server LB access via IPs [#1247](https://github.com/openshift/cluster-api-provider-openstack/pull/1247) * :sparkles: bump golangci-lint version to v1.46.2 [#1258](https://github.com/openshift/cluster-api-provider-openstack/pull/1258) * cleanup: remove used file [#1243](https://github.com/openshift/cluster-api-provider-openstack/pull/1243) * Passing security groups by specifying more options in addition to UUIDs on ports [#1246](https://github.com/openshift/cluster-api-provider-openstack/pull/1246) * 🐛 implement conversion for OpenStackClusterTemplate CRD [#1249](https://github.com/openshift/cluster-api-provider-openstack/pull/1249) * refactory test code (reuse existing function) [#1194](https://github.com/openshift/cluster-api-provider-openstack/pull/1194) * 🏃 Add tests for cluster controller [#1199](https://github.com/openshift/cluster-api-provider-openstack/pull/1199) * 🐛 remove webhooks for old APIversion v1alpha4 [#1240](https://github.com/openshift/cluster-api-provider-openstack/pull/1240) * 🌱 Fix ginkgo warnings [#1239](https://github.com/openshift/cluster-api-provider-openstack/pull/1239) * 🌱 Remove macaptain from cluster-api-openstack-reviewers [#1237](https://github.com/openshift/cluster-api-provider-openstack/pull/1237) * move chrischdi to emeritus_approvers [#1233](https://github.com/openshift/cluster-api-provider-openstack/pull/1233) * :bug: Fix nil pointer reference during bastion deletion [#1231](https://github.com/openshift/cluster-api-provider-openstack/pull/1231) * :seedling: Update RELEASE.md process for release branches [#1228](https://github.com/openshift/cluster-api-provider-openstack/pull/1228) * 🏃 update PR icon template to match CAPI [#1229](https://github.com/openshift/cluster-api-provider-openstack/pull/1229) * 📖 allow up to 20 tabs in book [#1224](https://github.com/openshift/cluster-api-provider-openstack/pull/1224) * 🌱 Add release 0.6.x to metadata.yaml [#1226](https://github.com/openshift/cluster-api-provider-openstack/pull/1226) * 🐛Don't set ImageRef on server when booting from volume [#1225](https://github.com/openshift/cluster-api-provider-openstack/pull/1225) * 🐛Fix conversion of boot from volume images [#1223](https://github.com/openshift/cluster-api-provider-openstack/pull/1223) * 🐛 always wait for active Loadbalancer after getOrCreate [#1200](https://github.com/openshift/cluster-api-provider-openstack/pull/1200) * 📖 Document CRD changes from v1alpha4 to v1alpha5 [#1216](https://github.com/openshift/cluster-api-provider-openstack/pull/1216) * 🐛 controllers/openstackcluster_controller.go fix nil pointer and dump openstack ports [#1217](https://github.com/openshift/cluster-api-provider-openstack/pull/1217) * Improve log message [#1202](https://github.com/openshift/cluster-api-provider-openstack/pull/1202) * 🐛 bump CAPI to v1.1.3 [#1209](https://github.com/openshift/cluster-api-provider-openstack/pull/1209) * 🏃Remove prankul88 as a reviewer [#1213](https://github.com/openshift/cluster-api-provider-openstack/pull/1213) * 🏃 Add apricote as a reviewer [#1212](https://github.com/openshift/cluster-api-provider-openstack/pull/1212) * 📖 replace dead link for cloud.conf details [#1211](https://github.com/openshift/cluster-api-provider-openstack/pull/1211) * ⚠️ rename v1beta1 to v1alpha5 [#1198](https://github.com/openshift/cluster-api-provider-openstack/pull/1198) * address CVE-2022-27191 [#1204](https://github.com/openshift/cluster-api-provider-openstack/pull/1204) * ✨ Support Application Credential auth [#1189](https://github.com/openshift/cluster-api-provider-openstack/pull/1189) * ✨Refactor CreateInstance and CreateBastion [#1191](https://github.com/openshift/cluster-api-provider-openstack/pull/1191) * ⚠️ move loadbalancer opts to struct [#1187](https://github.com/openshift/cluster-api-provider-openstack/pull/1187) * 🏃 Explain mutability of bastion configuration in CRD [#1190](https://github.com/openshift/cluster-api-provider-openstack/pull/1190) * 🏃 Enable controller tests [#1183](https://github.com/openshift/cluster-api-provider-openstack/pull/1183) * 🐛 Install sshuttle using pip instead of from source [#1185](https://github.com/openshift/cluster-api-provider-openstack/pull/1185) * 🏃 Add Scopes to pass data to services [#1178](https://github.com/openshift/cluster-api-provider-openstack/pull/1178) * 🐛 Address CVE-2022-21698 [#1182](https://github.com/openshift/cluster-api-provider-openstack/pull/1182) * 🐛 upgrade golangci-lint for go 1.18 support [#1184](https://github.com/openshift/cluster-api-provider-openstack/pull/1184) * ✨Export GetFloatingIP [#1179](https://github.com/openshift/cluster-api-provider-openstack/pull/1179) * Add unit test for trunk [#1172](https://github.com/openshift/cluster-api-provider-openstack/pull/1172) * 📖update doc to talk about microversion [#1161](https://github.com/openshift/cluster-api-provider-openstack/pull/1161) * 🐛 Fix event target of floating ip operations [#1177](https://github.com/openshift/cluster-api-provider-openstack/pull/1177) * Fix flaky UT on gate [#1175](https://github.com/openshift/cluster-api-provider-openstack/pull/1175) * Remove `internal` AZ special handling [#1168](https://github.com/openshift/cluster-api-provider-openstack/pull/1168) * 🐛 Clean up removed AvailabilityZones from `OpenStackCluster.status.failureDomains` [#1165](https://github.com/openshift/cluster-api-provider-openstack/pull/1165) * 📖 add info about office hours to README and Book [#1167](https://github.com/openshift/cluster-api-provider-openstack/pull/1167) * move CI to xena [#1158](https://github.com/openshift/cluster-api-provider-openstack/pull/1158) * 🐛 api/v1beta1/openstackmachine_types.go: change errorReason/errorMessage to failureReason/failureMessage [#1150](https://github.com/openshift/cluster-api-provider-openstack/pull/1150) * ✨Remove FIXME (adjust the comment and code both) [#1157](https://github.com/openshift/cluster-api-provider-openstack/pull/1157) * 🐛 containerfile: Bump Go version [#1156](https://github.com/openshift/cluster-api-provider-openstack/pull/1156) * 🏃 devstack: Allow empty private SSH key [#1144](https://github.com/openshift/cluster-api-provider-openstack/pull/1144) * Make hidekazuna emeritus [#1152](https://github.com/openshift/cluster-api-provider-openstack/pull/1152) * Avoid set failMessage when bastion creation failed [#1138](https://github.com/openshift/cluster-api-provider-openstack/pull/1138) * 🏃 OWNERS: satisfy the maintainers tool [#1123](https://github.com/openshift/cluster-api-provider-openstack/pull/1123) * manager.yaml: enable metrics endpoint [#1141](https://github.com/openshift/cluster-api-provider-openstack/pull/1141) * 📖 Document external repositories referencing CAPO owners [#1142](https://github.com/openshift/cluster-api-provider-openstack/pull/1142) * bump CAPI to v1.1.0 [#1137](https://github.com/openshift/cluster-api-provider-openstack/pull/1137) * Add test for trunk feature [#1128](https://github.com/openshift/cluster-api-provider-openstack/pull/1128) * 🐛Bump CAPI to v1.0.4 [#1136](https://github.com/openshift/cluster-api-provider-openstack/pull/1136) * ✨ Ensure trunk deletion [#1125](https://github.com/openshift/cluster-api-provider-openstack/pull/1125) * ✨Service interface load balancer [#1119](https://github.com/openshift/cluster-api-provider-openstack/pull/1119) * 🐛 Prevent creation of floating IPs when reconcile load balancer in non ACTIVE state [#1115](https://github.com/openshift/cluster-api-provider-openstack/pull/1115) * Remove duplicate tags before making API calls [#1112](https://github.com/openshift/cluster-api-provider-openstack/pull/1112) * iamemilio resigns as a reviewer [#1113](https://github.com/openshift/cluster-api-provider-openstack/pull/1113) * Document running CI devstack on CentOS [#1108](https://github.com/openshift/cluster-api-provider-openstack/pull/1108) * ✨Cinder AZ and volume type support [#1030](https://github.com/openshift/cluster-api-provider-openstack/pull/1030) * ✨ improve log entry for ReplaceAllAttributesTags [#1110](https://github.com/openshift/cluster-api-provider-openstack/pull/1110) * 🐛 Avoid replacing tags when no tags are provided. [#1107](https://github.com/openshift/cluster-api-provider-openstack/pull/1107) * Delete trunk on failure [#1095](https://github.com/openshift/cluster-api-provider-openstack/pull/1095) * Allow image uuid to be used in instanceSpec [#1101](https://github.com/openshift/cluster-api-provider-openstack/pull/1101) * 📖nit: update doc to include spec [#1102](https://github.com/openshift/cluster-api-provider-openstack/pull/1102) * 🐛update log to make it clear (LB member instead of LB) [#1104](https://github.com/openshift/cluster-api-provider-openstack/pull/1104) * 🐛 loadbalancer service: fix metric name for member list [#1097](https://github.com/openshift/cluster-api-provider-openstack/pull/1097) * 🏃 Migrate CI to Wallaby [#1091](https://github.com/openshift/cluster-api-provider-openstack/pull/1091) * Fail fast without create port at all [#1094](https://github.com/openshift/cluster-api-provider-openstack/pull/1094) * 🐛 fix loadbalancer service to reconcile all ports instead of returning at the first [#1089](https://github.com/openshift/cluster-api-provider-openstack/pull/1089) * Update .golangci.yml [#1090](https://github.com/openshift/cluster-api-provider-openstack/pull/1090) * :book: Update documentation according to clusterctl sub command changes [#1088](https://github.com/openshift/cluster-api-provider-openstack/pull/1088) * 🌱 Standardize api import aliases [#1082](https://github.com/openshift/cluster-api-provider-openstack/pull/1082) * Update OWNERS file [#1084](https://github.com/openshift/cluster-api-provider-openstack/pull/1084) * 🏃Fix generated clouds.yaml for local e2e tests [#1069](https://github.com/openshift/cluster-api-provider-openstack/pull/1069) * 🏃Add new maintainers and reviewers [#1083](https://github.com/openshift/cluster-api-provider-openstack/pull/1083) * :sparkles: Port rework [#1059](https://github.com/openshift/cluster-api-provider-openstack/pull/1059) * 🏃 Fix SECURITY_CONTACTS [#1080](https://github.com/openshift/cluster-api-provider-openstack/pull/1080) * ✨ Allow webhook changes to OpenStackCluster.Spec.Bastion [#1070](https://github.com/openshift/cluster-api-provider-openstack/pull/1070) * images: use k8s-staging-test-infra/gcb-docker-gcloud [#1068](https://github.com/openshift/cluster-api-provider-openstack/pull/1068) * 🐛Cleanup ports [#1063](https://github.com/openshift/cluster-api-provider-openstack/pull/1063) * :sparkles: Add tags on security groups created by capo [#1053](https://github.com/openshift/cluster-api-provider-openstack/pull/1053) * 🐛Fix conversion of IdentityRef converting between v1alpha4 and v1beta1 [#1066](https://github.com/openshift/cluster-api-provider-openstack/pull/1066) * 📖 Update configuration document [#1056](https://github.com/openshift/cluster-api-provider-openstack/pull/1056) * ✨Add unit tests for compute service [#1061](https://github.com/openshift/cluster-api-provider-openstack/pull/1061) * 🐛update logic to support more instance state [#909](https://github.com/openshift/cluster-api-provider-openstack/pull/909) * 🏃 Delete unused annotation [#1057](https://github.com/openshift/cluster-api-provider-openstack/pull/1057) * 🐛Fixes for running E2E tests locally against devstack on OpenStack [#1048](https://github.com/openshift/cluster-api-provider-openstack/pull/1048) * 🏃 Fix conversion-gen in Makefile [#1052](https://github.com/openshift/cluster-api-provider-openstack/pull/1052) * 📖 Update version support [#1055](https://github.com/openshift/cluster-api-provider-openstack/pull/1055) * 🏃 Move sbueringer to emeritus maintainers [#1058](https://github.com/openshift/cluster-api-provider-openstack/pull/1058) * ✨ Bump golangci-lint to 1.43.0 [#1042](https://github.com/openshift/cluster-api-provider-openstack/pull/1042) * 📖 Update RELEASE document [#1051](https://github.com/openshift/cluster-api-provider-openstack/pull/1051) * 📖 Fix yaml example [#1050](https://github.com/openshift/cluster-api-provider-openstack/pull/1050) * ✨ Add v1beta1 API types [#1047](https://github.com/openshift/cluster-api-provider-openstack/pull/1047) * 🐛Pull Calico from quay.io instead of docker.io [#1049](https://github.com/openshift/cluster-api-provider-openstack/pull/1049) * ✨ Update CAPI to v1beta1 [#1041](https://github.com/openshift/cluster-api-provider-openstack/pull/1041) * ✨ Remove ensure kind binary script from repository [#1036](https://github.com/openshift/cluster-api-provider-openstack/pull/1036) * 🐛 Fix image push in Makefile for image-push jobs [#1039](https://github.com/openshift/cluster-api-provider-openstack/pull/1039) * ✨E2E error logging improvements [#1032](https://github.com/openshift/cluster-api-provider-openstack/pull/1032) * Check trunk support before enabling trunk at port level [#1014](https://github.com/openshift/cluster-api-provider-openstack/pull/1014) * ✨ Change default branch to "main" [#1031](https://github.com/openshift/cluster-api-provider-openstack/pull/1031) * ✨ Add tags to portOpts [#1027](https://github.com/openshift/cluster-api-provider-openstack/pull/1027) * ✨Devstack on openstack and multi-AZ support [#1026](https://github.com/openshift/cluster-api-provider-openstack/pull/1026) * 🏃 Add unit tests for getOrCreatePort func [#1020](https://github.com/openshift/cluster-api-provider-openstack/pull/1020) * Port Tagging Regression [#1016](https://github.com/openshift/cluster-api-provider-openstack/pull/1016) * 🐛 Fix typo in delete server log [#1025](https://github.com/openshift/cluster-api-provider-openstack/pull/1025) * 📖 Fix typo in OPENSTACK_CLOUD_CACERT_B64 example [#1018](https://github.com/openshift/cluster-api-provider-openstack/pull/1018) * ✨ controllers: replace context.TODO with real context objects [#1019](https://github.com/openshift/cluster-api-provider-openstack/pull/1019) * 🏃update e2e container to latest cluster-api [#1010](https://github.com/openshift/cluster-api-provider-openstack/pull/1010) * ✨Return all NodeAddresses in OpenStackMachine.Status.Addresses [#1004](https://github.com/openshift/cluster-api-provider-openstack/pull/1004) * 🏃 Bump calico from v3.18.1 to v3.20.1 [#1015](https://github.com/openshift/cluster-api-provider-openstack/pull/1015) * 🐛 Don't make unnecessary REST API calls in getServerNetworks [#994](https://github.com/openshift/cluster-api-provider-openstack/pull/994) * ✨Allow update for some param only first time update [#1012](https://github.com/openshift/cluster-api-provider-openstack/pull/1012) * ✨Add webhook of openstackcluster, no update allowed for now [#1006](https://github.com/openshift/cluster-api-provider-openstack/pull/1006) * 🏃 Standardize metrics in networking package [#1003](https://github.com/openshift/cluster-api-provider-openstack/pull/1003) * :sparkles: Allow clusters without a floating IP for the API server [#973](https://github.com/openshift/cluster-api-provider-openstack/pull/973) * :sparkles: Implement allowAllInClusterTraffic flag [#998](https://github.com/openshift/cluster-api-provider-openstack/pull/998) * 🏃 Move deletePorts back to compute package [#1002](https://github.com/openshift/cluster-api-provider-openstack/pull/1002) * ✨Add InstanceStatus.AvailabilityZone() [#992](https://github.com/openshift/cluster-api-provider-openstack/pull/992) * 📖 Add book link to README [#996](https://github.com/openshift/cluster-api-provider-openstack/pull/996) * 🏃 Refactor all network client calls into networking package [#950](https://github.com/openshift/cluster-api-provider-openstack/pull/950) * :bug: Add alpha3 Resources to Scheme [#985](https://github.com/openshift/cluster-api-provider-openstack/pull/985) * ⚠️ Don't overwrite openstackcluster.status.network on reconciliation [#989](https://github.com/openshift/cluster-api-provider-openstack/pull/989) * ✨Document running E2E tests locally [#982](https://github.com/openshift/cluster-api-provider-openstack/pull/982) * :bug: Fix Conversion from alpha3 to alpha4 [#986](https://github.com/openshift/cluster-api-provider-openstack/pull/986) * ✨Enhancements for running E2E tests locally [#981](https://github.com/openshift/cluster-api-provider-openstack/pull/981) * only use loadbalaner reference if needed [#978](https://github.com/openshift/cluster-api-provider-openstack/pull/978) * ✨ Allow Trunk configuration at a Port level [#934](https://github.com/openshift/cluster-api-provider-openstack/pull/934) * fix gate lint issue [#980](https://github.com/openshift/cluster-api-provider-openstack/pull/980) * Update flavor usage of e2e test [#977](https://github.com/openshift/cluster-api-provider-openstack/pull/977) * Add gc for error instance's port [#975](https://github.com/openshift/cluster-api-provider-openstack/pull/975) * :sparkles: Refactor: Don't use infrav1.Instance internally [#971](https://github.com/openshift/cluster-api-provider-openstack/pull/971) * ✨ Cleanup and refactor InstanceExists and DeleteInstance [#960](https://github.com/openshift/cluster-api-provider-openstack/pull/960) * getOrCreatePort: add support to configure port Profile [#964](https://github.com/openshift/cluster-api-provider-openstack/pull/964) * update from v1alpha3 to v1alpha4 in Makefile [#970](https://github.com/openshift/cluster-api-provider-openstack/pull/970) * 🏃Return error if instance go error [#967](https://github.com/openshift/cluster-api-provider-openstack/pull/967) * 🐛 bump controller-runtime to 0.9.6 to fix webhook tls errors [#969](https://github.com/openshift/cluster-api-provider-openstack/pull/969) * 📖Add port security doc [#958](https://github.com/openshift/cluster-api-provider-openstack/pull/958) * 📖 Add netlify.toml to publish our book [#963](https://github.com/openshift/cluster-api-provider-openstack/pull/963) * 🐛 ignore Conflict status in order to make instance able to detach interface [#962](https://github.com/openshift/cluster-api-provider-openstack/pull/962) * 📖Fix broken link [#957](https://github.com/openshift/cluster-api-provider-openstack/pull/957) * 🐛 Fix failure to create server with specified tags [#924](https://github.com/openshift/cluster-api-provider-openstack/pull/924) * ✨ Apply Port Security to Ports [#921](https://github.com/openshift/cluster-api-provider-openstack/pull/921) * ✨ Add webhook readiness and health checks [#955](https://github.com/openshift/cluster-api-provider-openstack/pull/955) * 🐛 openstackcluster reconciliation: reset .Status.failureMessage and .Status.FailureReason on success [#953](https://github.com/openshift/cluster-api-provider-openstack/pull/953) * ✨ Do not update fip if its already mapped correct [#947](https://github.com/openshift/cluster-api-provider-openstack/pull/947) * ✨ Add mock client and 2 tests for networking package [#935](https://github.com/openshift/cluster-api-provider-openstack/pull/935) * 📖 improve release documentation [#946](https://github.com/openshift/cluster-api-provider-openstack/pull/946) * ✨ Fix Webhook names for OpenStackMachineTemplate and OpenStackCluster [#945](https://github.com/openshift/cluster-api-provider-openstack/pull/945) * ✨ Add OpenStackClusterTemplates Type [#933](https://github.com/openshift/cluster-api-provider-openstack/pull/933) * 📖 Adjust README.md to fit v0.4.0 and bump k8s to v1.21.3 [#944](https://github.com/openshift/cluster-api-provider-openstack/pull/944) * ✨ Add conversion for SecretReference to string [#937](https://github.com/openshift/cluster-api-provider-openstack/pull/937) * 🐛 Wait for ports creation in ports e2e test [#938](https://github.com/openshift/cluster-api-provider-openstack/pull/938) * Use the kubernetesversions package of the cluster-api repo again [#905](https://github.com/openshift/cluster-api-provider-openstack/pull/905) * 🐛 Remove the ttl flag from sshuttle invocation [#941](https://github.com/openshift/cluster-api-provider-openstack/pull/941) * Revert "reassociate Floating IP if first associate fails" [#939](https://github.com/openshift/cluster-api-provider-openstack/pull/939) * Add failure fields in OpestackCluster status section [#893](https://github.com/openshift/cluster-api-provider-openstack/pull/893) * ✨ Add GET gophercloud metrics [#932](https://github.com/openshift/cluster-api-provider-openstack/pull/932) * reassociate Floating IP if first associate fails [#930](https://github.com/openshift/cluster-api-provider-openstack/pull/930) * ✨ add description and tag to floating ips [#925](https://github.com/openshift/cluster-api-provider-openstack/pull/925) * 🏃 sync linter settings with cluster-api repo and fix findings [#923](https://github.com/openshift/cluster-api-provider-openstack/pull/923) * Rename master to main [#928](https://github.com/openshift/cluster-api-provider-openstack/pull/928) * 🏃 use amphora image from GCS in e2e tests [#922](https://github.com/openshift/cluster-api-provider-openstack/pull/922) * ✨Update CAPI to v0.4.0 [#919](https://github.com/openshift/cluster-api-provider-openstack/pull/919) * 📖 Upgrading a cluster without LBaaS is not supported [#915](https://github.com/openshift/cluster-api-provider-openstack/pull/915) * 🐛 Don't log nil error when AuthInfo is not set [#916](https://github.com/openshift/cluster-api-provider-openstack/pull/916) * 🏃 Add test for custom port options feature [#908](https://github.com/openshift/cluster-api-provider-openstack/pull/908) * 🐛 fixup release targets and update doc accordingly [#903](https://github.com/openshift/cluster-api-provider-openstack/pull/903) * 🐛 Fix doc about external cloud provider [#904](https://github.com/openshift/cluster-api-provider-openstack/pull/904) * Add resource shortNames [#894](https://github.com/openshift/cluster-api-provider-openstack/pull/894) * 🐛 fix release staging target [#902](https://github.com/openshift/cluster-api-provider-openstack/pull/902) * ✨ Upgrade CAPI to v0.4.0-beta.0 [#901](https://github.com/openshift/cluster-api-provider-openstack/pull/901) * 📖 Document custom ports feature [#900](https://github.com/openshift/cluster-api-provider-openstack/pull/900) * :sparkles: add predicates.ResourceIsNotExternallyManaged to cluster controller [#897](https://github.com/openshift/cluster-api-provider-openstack/pull/897) * ✨ Add feature to create ports with custom options [#876](https://github.com/openshift/cluster-api-provider-openstack/pull/876) * Fix error logging for OpenStack instance creation [#891](https://github.com/openshift/cluster-api-provider-openstack/pull/891) * 🐛 Fix event of associate/disassociate floating IP [#880](https://github.com/openshift/cluster-api-provider-openstack/pull/880) * Add some events related to load balancer [#869](https://github.com/openshift/cluster-api-provider-openstack/pull/869) * honor server group ID parm [#881](https://github.com/openshift/cluster-api-provider-openstack/pull/881) * Add metrics of gophercloud (POST,UPDATE and DELETE) actions [#863](https://github.com/openshift/cluster-api-provider-openstack/pull/863) * 🏃 Validate OpenStackMachineTemplate spec.template.spec immutability [#872](https://github.com/openshift/cluster-api-provider-openstack/pull/872) * 🏃 Refactor: use Service struct field more [#871](https://github.com/openshift/cluster-api-provider-openstack/pull/871) * Add seanschneeweiss as reviewer [#874](https://github.com/openshift/cluster-api-provider-openstack/pull/874) * Add chrischdi as reviewer [#873](https://github.com/openshift/cluster-api-provider-openstack/pull/873) * 🏃 Add some events and refactor related to instance [#862](https://github.com/openshift/cluster-api-provider-openstack/pull/862) * Add more logs for LB creation [#867](https://github.com/openshift/cluster-api-provider-openstack/pull/867) * 📖 Add doc related to log level [#866](https://github.com/openshift/cluster-api-provider-openstack/pull/866) * Upgrade to latest CAPI version (2021-05-07) [#861](https://github.com/openshift/cluster-api-provider-openstack/pull/861) * ✨ api/v1alpha4 remove obsolete UserDataSecret field [#865](https://github.com/openshift/cluster-api-provider-openstack/pull/865) * ✨ Add gophercloud request logs, fix contexts [#860](https://github.com/openshift/cluster-api-provider-openstack/pull/860) * ✨ adjust loadbalancer wait.Backoff [#853](https://github.com/openshift/cluster-api-provider-openstack/pull/853) * 🐛 Fix polling deleting instance [#852](https://github.com/openshift/cluster-api-provider-openstack/pull/852) * set image param as optional for boot from volume [#851](https://github.com/openshift/cluster-api-provider-openstack/pull/851) * Delete watching Status when deleting [#846](https://github.com/openshift/cluster-api-provider-openstack/pull/846) * bump tests to Kubernetes 1.20.6 [#849](https://github.com/openshift/cluster-api-provider-openstack/pull/849) * Wait for instance delete [#845](https://github.com/openshift/cluster-api-provider-openstack/pull/845) * Cleanup docs changes [#838](https://github.com/openshift/cluster-api-provider-openstack/pull/838) * 📖 add documentation about postsubmit and nightly images/manifests [#836](https://github.com/openshift/cluster-api-provider-openstack/pull/836) * 📖Add book build process [#822](https://github.com/openshift/cluster-api-provider-openstack/pull/822) * 🐛 do not propagate the cloud field to clientconfig.AuthOptions [#829](https://github.com/openshift/cluster-api-provider-openstack/pull/829) * 🐛 fix conversion-gen [#827](https://github.com/openshift/cluster-api-provider-openstack/pull/827) * 🏃 Refactor/cleanup load balancer related code [#835](https://github.com/openshift/cluster-api-provider-openstack/pull/835) * 🏃 Optimize devstack setup on GCP, add a script to setup a devstack on AWS [#800](https://github.com/openshift/cluster-api-provider-openstack/pull/800) * 🏃 upgrade to latest CAPI version and upgrade/cleanup some other deps [#833](https://github.com/openshift/cluster-api-provider-openstack/pull/833) * 🏃 Refactor: event consistency [#828](https://github.com/openshift/cluster-api-provider-openstack/pull/828) * 🐛 fix path of uploaded artifacts [#830](https://github.com/openshift/cluster-api-provider-openstack/pull/830) * 🏃 publish nightly artifacts [#819](https://github.com/openshift/cluster-api-provider-openstack/pull/819) * 🏃 Reorder function variables [#820](https://github.com/openshift/cluster-api-provider-openstack/pull/820) * 🏃 Refactor: Make getLoadBalancerName function [#823](https://github.com/openshift/cluster-api-provider-openstack/pull/823) * 📖 Remove note about CI [#821](https://github.com/openshift/cluster-api-provider-openstack/pull/821) * 📖 Update supported version of k8s in Readme [#818](https://github.com/openshift/cluster-api-provider-openstack/pull/818) * 🏃 Test openstack key in our e2e tests [#815](https://github.com/openshift/cluster-api-provider-openstack/pull/815) * 🏃 Remove neutron lbaas support [#813](https://github.com/openshift/cluster-api-provider-openstack/pull/813) * 🐛 Delete bastion if basion.enabled=false [#817](https://github.com/openshift/cluster-api-provider-openstack/pull/817) * 🏃 Improve ci script patching [#812](https://github.com/openshift/cluster-api-provider-openstack/pull/812) * 🏃 Add e2e tests for all flavors [#798](https://github.com/openshift/cluster-api-provider-openstack/pull/798) * fix post-cluster-api-provider-openstack-push-images and add post-submit manifests [#811](https://github.com/openshift/cluster-api-provider-openstack/pull/811) * 🐛 Fix configuration.md about bastion [#810](https://github.com/openshift/cluster-api-provider-openstack/pull/810) * 🐛 fix post-cluster-api-provider-openstack-push-images [#809](https://github.com/openshift/cluster-api-provider-openstack/pull/809) * 🏃 Update golangci-lint and fix most of the linter issues [#797](https://github.com/openshift/cluster-api-provider-openstack/pull/797) * 📖 Update links for filing new issue [#807](https://github.com/openshift/cluster-api-provider-openstack/pull/807) * 🏃 Remove unused release note section in the PR template [#806](https://github.com/openshift/cluster-api-provider-openstack/pull/806) * 🐛 fix conversion gen [#805](https://github.com/openshift/cluster-api-provider-openstack/pull/805) * 🏃 Implement conformance test via e2e test framework [#782](https://github.com/openshift/cluster-api-provider-openstack/pull/782) * 🏃 Bump ginkgo version [#803](https://github.com/openshift/cluster-api-provider-openstack/pull/803) * 🐛 InstanceExists should not do substring search on name [#799](https://github.com/openshift/cluster-api-provider-openstack/pull/799) * 🐛 Make conversion-gen output location explicit [#802](https://github.com/openshift/cluster-api-provider-openstack/pull/802) * 🏃 update yq commands to support yq V4 [#792](https://github.com/openshift/cluster-api-provider-openstack/pull/792) * 🏃 Remove useOctavia from nonha template [#795](https://github.com/openshift/cluster-api-provider-openstack/pull/795) * 🏃 Remove disablePortSecurity: false from template [#793](https://github.com/openshift/cluster-api-provider-openstack/pull/793) * 🏃 goimports: fix import order, add local-prefix to linter [#791](https://github.com/openshift/cluster-api-provider-openstack/pull/791) * Update development guide [#789](https://github.com/openshift/cluster-api-provider-openstack/pull/789) * 🏃 Add todos to PR template [#786](https://github.com/openshift/cluster-api-provider-openstack/pull/786) * ✨ pkg/cloud/services/networking/securitygroups.go reimplement reconcilation [#773](https://github.com/openshift/cluster-api-provider-openstack/pull/773) * ✨ Update klog dependency to v2 [#779](https://github.com/openshift/cluster-api-provider-openstack/pull/779) * 🏃 migrate conformance test to Prow [#759](https://github.com/openshift/cluster-api-provider-openstack/pull/759) * 📖 Update configuration doc [#781](https://github.com/openshift/cluster-api-provider-openstack/pull/781) * Initial impl v1alpha4 [#748](https://github.com/openshift/cluster-api-provider-openstack/pull/748) * Add support for failureDomain (AZ) for bastion [#757](https://github.com/openshift/cluster-api-provider-openstack/pull/757) * 🐛Remove start.sh and restart.sh [#761](https://github.com/openshift/cluster-api-provider-openstack/pull/761) * Fix gate issue (test failure) [#767](https://github.com/openshift/cluster-api-provider-openstack/pull/767) * 🏃 Update OWNERS files [#766](https://github.com/openshift/cluster-api-provider-openstack/pull/766) * Fix a doc typo [#762](https://github.com/openshift/cluster-api-provider-openstack/pull/762) * 🏃 Update pull request template to use /hold per default [#758](https://github.com/openshift/cluster-api-provider-openstack/pull/758) * :sparkles: AccessSubnetUUID: we can specify source subnet for access IP address [#756](https://github.com/openshift/cluster-api-provider-openstack/pull/756) * 🐛 use APIServerFloatingIP instead of ControlPlaneEndpoint.Host for LB [#755](https://github.com/openshift/cluster-api-provider-openstack/pull/755) * Refactory network functions (router.go==>network.go) [#751](https://github.com/openshift/cluster-api-provider-openstack/pull/751) * 📖 improve RELEASE.md [#747](https://github.com/openshift/cluster-api-provider-openstack/pull/747) * Fix clusterctl config command [#744](https://github.com/openshift/cluster-api-provider-openstack/pull/744) * Update sync logic [#736](https://github.com/openshift/cluster-api-provider-openstack/pull/736) * Fix LoadBalancerMember creation [#737](https://github.com/openshift/cluster-api-provider-openstack/pull/737) * 🐛 fix rbac aggregation manager role [#743](https://github.com/openshift/cluster-api-provider-openstack/pull/743) * 🐛 Pass GOPROXY environment variable to Docker image build [#740](https://github.com/openshift/cluster-api-provider-openstack/pull/740) * 🐛 Add NAMESPACE variable in cluster templates. [#739](https://github.com/openshift/cluster-api-provider-openstack/pull/739) * 🏃 Revert Merge pull request #725 [#733](https://github.com/openshift/cluster-api-provider-openstack/pull/733) * 🏃Remove unnecessary field in manager.yaml [#729](https://github.com/openshift/cluster-api-provider-openstack/pull/729) * Specify --metrics-bind-addr for CAPO manager [#725](https://github.com/openshift/cluster-api-provider-openstack/pull/725) * update openstack provider format from // to /// [#727](https://github.com/openshift/cluster-api-provider-openstack/pull/727) * 🏃 Bump CAPI to v0.3.12 [#724](https://github.com/openshift/cluster-api-provider-openstack/pull/724) * 🐛Ignore not found error when remove router interface [#720](https://github.com/openshift/cluster-api-provider-openstack/pull/720) * 📖 Add instructions to use cluster template with load-balancer [#703](https://github.com/openshift/cluster-api-provider-openstack/pull/703) * Fix ca-file path in env.rc [#716](https://github.com/openshift/cluster-api-provider-openstack/pull/716) * move from 0.3.1 to 0.3.3 in the CI test [#686](https://github.com/openshift/cluster-api-provider-openstack/pull/686) * :bug: Fix domain_name and domain_id usage in env.rc [#714](https://github.com/openshift/cluster-api-provider-openstack/pull/714) * 🏃 Refactor loadbalancer package [#710](https://github.com/openshift/cluster-api-provider-openstack/pull/710) * 🏃Refactor create, delete instance [#711](https://github.com/openshift/cluster-api-provider-openstack/pull/711) * 🏃 Move ncdc to emeritus status [#708](https://github.com/openshift/cluster-api-provider-openstack/pull/708) * :bug: Add SecurityGroup to Loadbalancerport when not using octavia [#700](https://github.com/openshift/cluster-api-provider-openstack/pull/700) * 🐛 Fix SecurityGroupInUse error [#705](https://github.com/openshift/cluster-api-provider-openstack/pull/705) * Fix nil pointer error for Network [#693](https://github.com/openshift/cluster-api-provider-openstack/pull/693) * 🏃 Add OpenStack version to bug report template [#696](https://github.com/openshift/cluster-api-provider-openstack/pull/696) * 📖 fix getting log [#697](https://github.com/openshift/cluster-api-provider-openstack/pull/697) * 🐛 Delete spec.disableServerTags of OpenStackCluster [#692](https://github.com/openshift/cluster-api-provider-openstack/pull/692) * ✨ Align flag names with upstream Kubernetes components [#690](https://github.com/openshift/cluster-api-provider-openstack/pull/690) * update Make method to avoid mismatch [#688](https://github.com/openshift/cluster-api-provider-openstack/pull/688) * move to capi 0.3.11 [#683](https://github.com/openshift/cluster-api-provider-openstack/pull/683) * Add cluster-template-external-cloud-provider.yaml into release doc [#682](https://github.com/openshift/cluster-api-provider-openstack/pull/682) * Add openstack ussuri into support list [#586](https://github.com/openshift/cluster-api-provider-openstack/pull/586) * Switch CI from U to V release [#680](https://github.com/openshift/cluster-api-provider-openstack/pull/680) * Move log to creating place [#673](https://github.com/openshift/cluster-api-provider-openstack/pull/673) * set openstack cluster status for Bastion [#671](https://github.com/openshift/cluster-api-provider-openstack/pull/671) * 📖 Update how to retrieve kubeconfig [#677](https://github.com/openshift/cluster-api-provider-openstack/pull/677) * ✨ Add support for Tilt [#666](https://github.com/openshift/cluster-api-provider-openstack/pull/666) * nit: remove duplicate blanks [#672](https://github.com/openshift/cluster-api-provider-openstack/pull/672) * 🐛 Fix to delete only automatically created floating IPs [#669](https://github.com/openshift/cluster-api-provider-openstack/pull/669) * fix location for env.rc file [#665](https://github.com/openshift/cluster-api-provider-openstack/pull/665) * Add doc update for boot from volume case [#664](https://github.com/openshift/cluster-api-provider-openstack/pull/664) * Add root volume support (put root volume into instance create param) [#662](https://github.com/openshift/cluster-api-provider-openstack/pull/662) * 🐛 Update reference to the latest version of CAPO v0.3.1 [#656](https://github.com/openshift/cluster-api-provider-openstack/pull/656) * Remove USE_PYTHON3 [#660](https://github.com/openshift/cluster-api-provider-openstack/pull/660) * ✨ Delete automatically created floating IP when deleting cluster [#653](https://github.com/openshift/cluster-api-provider-openstack/pull/653) * 🏃 Cleanup unused variables [#657](https://github.com/openshift/cluster-api-provider-openstack/pull/657) * 🏃 Delete spec.kubeadmConfigSpec.ntp.servers in cluster-template-without-lb.yaml [#659](https://github.com/openshift/cluster-api-provider-openstack/pull/659) * 🏃 Bump Go to v1.13.15 in conformance pr job [#658](https://github.com/openshift/cluster-api-provider-openstack/pull/658) * 🐛 Fix event message about port ID with associate Floating IP [#655](https://github.com/openshift/cluster-api-provider-openstack/pull/655) * Remove unnecessary colon [#654](https://github.com/openshift/cluster-api-provider-openstack/pull/654) * ✨ My594 revised #590 #594 wrong parameter for a user provider network [#610](https://github.com/openshift/cluster-api-provider-openstack/pull/610) * 📖 Update calico version in documentation [#652](https://github.com/openshift/cluster-api-provider-openstack/pull/652) * Add openStackMachine.Status.Addresses value [#648](https://github.com/openshift/cluster-api-provider-openstack/pull/648) * 🏃 Bump CAPI to v0.3.10 [#650](https://github.com/openshift/cluster-api-provider-openstack/pull/650) * ✨ Add events deleting resources [#645](https://github.com/openshift/cluster-api-provider-openstack/pull/645) * Add doc for how to move a cluster [#630](https://github.com/openshift/cluster-api-provider-openstack/pull/630) * 📖 Update external cloud provider URL [#646](https://github.com/openshift/cluster-api-provider-openstack/pull/646) * Update configuration document [#644](https://github.com/openshift/cluster-api-provider-openstack/pull/644) * 🏃 Bump Go to 1.13.15 [#640](https://github.com/openshift/cluster-api-provider-openstack/pull/640) * Add force move of secret cloud config [#636](https://github.com/openshift/cluster-api-provider-openstack/pull/636) * update cluster-api to 0.3.9 [#639](https://github.com/openshift/cluster-api-provider-openstack/pull/639) * Refactor creating/deleting instance [#641](https://github.com/openshift/cluster-api-provider-openstack/pull/641) * Add version into log [#638](https://github.com/openshift/cluster-api-provider-openstack/pull/638) * default concurrent reconcile from 1 to 10 [#637](https://github.com/openshift/cluster-api-provider-openstack/pull/637) * ✨ Add bastion host to login the nodes and update non HA template [#619](https://github.com/openshift/cluster-api-provider-openstack/pull/619) * CI: Wget kubernetes binary be quiet [#632](https://github.com/openshift/cluster-api-provider-openstack/pull/632) * 📖 Fix Link for external openstack template [#629](https://github.com/openshift/cluster-api-provider-openstack/pull/629) * Add tags to status [#617](https://github.com/openshift/cluster-api-provider-openstack/pull/617) * cleanup keys params [#625](https://github.com/openshift/cluster-api-provider-openstack/pull/625) * nit: update name of `get` output for openstackmachine [#624](https://github.com/openshift/cluster-api-provider-openstack/pull/624) * 🏃 Add CAPO version to github issue template [#623](https://github.com/openshift/cluster-api-provider-openstack/pull/623) * 🐛 Fix get openstackcluster to show ENDPOINT value [#620](https://github.com/openshift/cluster-api-provider-openstack/pull/620) * Rename to capoerrors [#618](https://github.com/openshift/cluster-api-provider-openstack/pull/618) * Remove Tag creation for ports and add description for it [#596](https://github.com/openshift/cluster-api-provider-openstack/pull/596) * Add application cred usage [#599](https://github.com/openshift/cluster-api-provider-openstack/pull/599) * switch to no-admin for CI test [#606](https://github.com/openshift/cluster-api-provider-openstack/pull/606) * 🐛 Fix e2e test Kubernetes official binaries version [#616](https://github.com/openshift/cluster-api-provider-openstack/pull/616) * 🏃 Update template for the external cloud provider [#611](https://github.com/openshift/cluster-api-provider-openstack/pull/611) * update openstack CI test version from T => U [#605](https://github.com/openshift/cluster-api-provider-openstack/pull/605) * ✨ Use OpenStack key pair instead of KubeadmConfig spec [#607](https://github.com/openshift/cluster-api-provider-openstack/pull/607) * 🏃 e2e test uses official Kubernetes version [#613](https://github.com/openshift/cluster-api-provider-openstack/pull/613) * 🏃 Bump Cluster-API to v0.3.8 [#615](https://github.com/openshift/cluster-api-provider-openstack/pull/615) * Update e2e test and document of non lb case [#608](https://github.com/openshift/cluster-api-provider-openstack/pull/608) * ✨Add external network discovery [#573](https://github.com/openshift/cluster-api-provider-openstack/pull/573) * nit: replace return with exit [#602](https://github.com/openshift/cluster-api-provider-openstack/pull/602) * 📖 Add reference to the external cloud provider doc [#600](https://github.com/openshift/cluster-api-provider-openstack/pull/600) * 🐛Update mtu size in Makefile [#598](https://github.com/openshift/cluster-api-provider-openstack/pull/598) * 🏃 Add hidekazuna to reviewer [#597](https://github.com/openshift/cluster-api-provider-openstack/pull/597) * ✨ Use external cloud provider [#595](https://github.com/openshift/cluster-api-provider-openstack/pull/595) * Add more logs for debug purpose [#593](https://github.com/openshift/cluster-api-provider-openstack/pull/593) * nit: Add default egress rule description [#585](https://github.com/openshift/cluster-api-provider-openstack/pull/585) * Add event for seucrity group [#592](https://github.com/openshift/cluster-api-provider-openstack/pull/592) * report error if security group not exist [#583](https://github.com/openshift/cluster-api-provider-openstack/pull/583) * Add doc tip for floating ip [#575](https://github.com/openshift/cluster-api-provider-openstack/pull/575) * 📖 Update Required Configuration [#576](https://github.com/openshift/cluster-api-provider-openstack/pull/576) * 🐛 Fix README.md [#579](https://github.com/openshift/cluster-api-provider-openstack/pull/579) * ignore router get return 404 error [#571](https://github.com/openshift/cluster-api-provider-openstack/pull/571) * Add generated security groups automatically [#563](https://github.com/openshift/cluster-api-provider-openstack/pull/563) * 🐛 Invoke KUSTOMIZE in release-manifests [#569](https://github.com/openshift/cluster-api-provider-openstack/pull/569) * 🐛 Show openstackcluster ENDPOINT [#570](https://github.com/openshift/cluster-api-provider-openstack/pull/570) * update doc about ssh security group [#564](https://github.com/openshift/cluster-api-provider-openstack/pull/564) * Remove APIServerLoadBalancerAdditionalPorts [#561](https://github.com/openshift/cluster-api-provider-openstack/pull/561) * 🐛 Fix auto generate security groups [#555](https://github.com/openshift/cluster-api-provider-openstack/pull/555) * Make DisablePortSecurity compatible with platforms not using the port… [#560](https://github.com/openshift/cluster-api-provider-openstack/pull/560) * 🏃 Update support for CAPI v0.3.5 [#552](https://github.com/openshift/cluster-api-provider-openstack/pull/552) * 🐛 enable managedAPIServerLoadBalancer w/ existing network [#548](https://github.com/openshift/cluster-api-provider-openstack/pull/548) * 🐛 Set up OPENSTACK_CLOUD environment variable in env.rc [#550](https://github.com/openshift/cluster-api-provider-openstack/pull/550) * reviewers: remove flaper87 [#549](https://github.com/openshift/cluster-api-provider-openstack/pull/549) * 📖 Update Configuration doc [#545](https://github.com/openshift/cluster-api-provider-openstack/pull/545) * Add additional info when error occur [#541](https://github.com/openshift/cluster-api-provider-openstack/pull/541) * 🐛 e2e test: switch to -bazel folder because bin folder has been removed [#540](https://github.com/openshift/cluster-api-provider-openstack/pull/540) * 🐛 remove docker-build from build test [#542](https://github.com/openshift/cluster-api-provider-openstack/pull/542) * Add availability zone to be used by controller plane [#537](https://github.com/openshift/cluster-api-provider-openstack/pull/537) * 🏃 Pr add prow test scripts [#539](https://github.com/openshift/cluster-api-provider-openstack/pull/539) * 🐛 Fix updating to Cluster API v0.3.3 [#538](https://github.com/openshift/cluster-api-provider-openstack/pull/538) * 🐛 Fix cluster-template.yaml [#534](https://github.com/openshift/cluster-api-provider-openstack/pull/534) * Add 1.18 support into list [#536](https://github.com/openshift/cluster-api-provider-openstack/pull/536) * 🏃 Add Stein to v1alpha3 tested version [#535](https://github.com/openshift/cluster-api-provider-openstack/pull/535) * 🏃 Add Zuul jobs for e2e conformance tests [#491](https://github.com/openshift/cluster-api-provider-openstack/pull/491) * 🐛 use sec groups from the current project, wait for lb from last reconcile [#523](https://github.com/openshift/cluster-api-provider-openstack/pull/523) * 🏃 Update to cluster-api v0.3.3, controller-tools v0.2.8 and controller-runtime v0.5.2 [#532](https://github.com/openshift/cluster-api-provider-openstack/pull/532) * ✨ Delete router/network/subnet [#522](https://github.com/openshift/cluster-api-provider-openstack/pull/522) * ✨ Add ServerGroupID to OpenStackMachineSpec [#531](https://github.com/openshift/cluster-api-provider-openstack/pull/531) * Fix cacert issue [#527](https://github.com/openshift/cluster-api-provider-openstack/pull/527) * avoid basename usage to avoid source action failure [#529](https://github.com/openshift/cluster-api-provider-openstack/pull/529) * Revert "Add kuryr support" [#221](https://github.com/openshift/cluster-api-provider-openstack/pull/221) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/77840b9a431880b15ee05d4a3f327b7ff2a682e8...) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/) * [OCPBUGS-39009](https://issues.redhat.com/browse/OCPBUGS-39009), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Downstream Merge Sept 18th [#2302](https://github.com/openshift/ovn-kubernetes/pull/2302) * [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Bump OVN to ovn24.09-24.09.0-beta.31.el9fdp [#2297](https://github.com/openshift/ovn-kubernetes/pull/2297) * [OCPBUGS-39157](https://issues.redhat.com/browse/OCPBUGS-39157), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Downstream Merge Sept 4th [#2286](https://github.com/openshift/ovn-kubernetes/pull/2286) * [OCPBUGS-38949](https://issues.redhat.com/browse/OCPBUGS-38949), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Downstream Merge 28th August [#2276](https://github.com/openshift/ovn-kubernetes/pull/2276) * [OCPBUGS-38270](https://issues.redhat.com/browse/OCPBUGS-38270): Dockerfile: Bump OVS to 3.4.0-1 [#2273](https://github.com/openshift/ovn-kubernetes/pull/2273) * [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Downstream Merge August 26th [#2272](https://github.com/openshift/ovn-kubernetes/pull/2272) * [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Downstream Merge 20th august [#2268](https://github.com/openshift/ovn-kubernetes/pull/2268) * [OCPBUGS-37056](https://issues.redhat.com/browse/OCPBUGS-37056), [OCPBUGS-37439](https://issues.redhat.com/browse/OCPBUGS-37439), [OCPBUGS-37439](https://issues.redhat.com/browse/OCPBUGS-37439): Downstream Merge 14th August 2024 [#2259](https://github.com/openshift/ovn-kubernetes/pull/2259) * [OCPBUGS-37541](https://issues.redhat.com/browse/OCPBUGS-37541): Fix per-pod MCS/metadata blocking [#2240](https://github.com/openshift/ovn-kubernetes/pull/2240) * [OCPBUGS-36614](https://issues.redhat.com/browse/OCPBUGS-36614), [OCPBUGS-36865](https://issues.redhat.com/browse/OCPBUGS-36865), [SDN-4919](https://issues.redhat.com/browse/SDN-4919): [DownstreamMerge] 29 July 2024 [#2241](https://github.com/openshift/ovn-kubernetes/pull/2241) * [OCPBUGS-37709](https://issues.redhat.com/browse/OCPBUGS-37709): Revert #2233 DownStream Merge: 24th July 2024 [#2243](https://github.com/openshift/ovn-kubernetes/pull/2243) * [OCPBUGS-36865](https://issues.redhat.com/browse/OCPBUGS-36865), [SDN-4919](https://issues.redhat.com/browse/SDN-4919): DownStream Merge: 24th July 2024 [#2233](https://github.com/openshift/ovn-kubernetes/pull/2233) * [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge July 10th [#2223](https://github.com/openshift/ovn-kubernetes/pull/2223) * [OCPBUGS-33758](https://issues.redhat.com/browse/OCPBUGS-33758), [OCPBUGS-33758](https://issues.redhat.com/browse/OCPBUGS-33758), [OCPBUGS-35347](https://issues.redhat.com/browse/OCPBUGS-35347), [OCPBUGS-35367](https://issues.redhat.com/browse/OCPBUGS-35367), [SDN-4919](https://issues.redhat.com/browse/SDN-4919), [SDN-5011](https://issues.redhat.com/browse/SDN-5011): Downstream Merge: July 2nd [#2217](https://github.com/openshift/ovn-kubernetes/pull/2217) * [OCPBUGS-34463](https://issues.redhat.com/browse/OCPBUGS-34463): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.17 [#2186](https://github.com/openshift/ovn-kubernetes/pull/2186) * [OCPBUGS-34778](https://issues.redhat.com/browse/OCPBUGS-34778): bump OVN to fix multicast bug [#2210](https://github.com/openshift/ovn-kubernetes/pull/2210) * [OCPBUGS-34462](https://issues.redhat.com/browse/OCPBUGS-34462): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.17 [#2191](https://github.com/openshift/ovn-kubernetes/pull/2191) * [OCPBUGS-33005](https://issues.redhat.com/browse/OCPBUGS-33005): Downstream Merge June 17th [#2206](https://github.com/openshift/ovn-kubernetes/pull/2206) * [SDN-4157](https://issues.redhat.com/browse/SDN-4157): Downstream Merge June 7th 2024 [#2201](https://github.com/openshift/ovn-kubernetes/pull/2201) * [OCPBUGS-34109](https://issues.redhat.com/browse/OCPBUGS-34109): Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.17 [#2176](https://github.com/openshift/ovn-kubernetes/pull/2176) * [OCPBUGS-34331](https://issues.redhat.com/browse/OCPBUGS-34331): [DownstreamMerge] 23 May 2024 [#2180](https://github.com/openshift/ovn-kubernetes/pull/2180) * [OKD-40](https://issues.redhat.com/browse/OKD-40): Add ovnver_okd and ovsver_okd to Dockerfile.base [#2161](https://github.com/openshift/ovn-kubernetes/pull/2161) * [SDN-4157](https://issues.redhat.com/browse/SDN-4157), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Downstream Merge 16th May 2024 [#2171](https://github.com/openshift/ovn-kubernetes/pull/2171) * [OCPBUGS-30224](https://issues.redhat.com/browse/OCPBUGS-30224), [OCPBUGS-33328](https://issues.redhat.com/browse/OCPBUGS-33328), [SDN-4388](https://issues.redhat.com/browse/SDN-4388): [DownstreamMerge] 10 may 2024 [#2162](https://github.com/openshift/ovn-kubernetes/pull/2162) * [OCPBUGS-33080](https://issues.redhat.com/browse/OCPBUGS-33080): Downstream Merge May 2nd 2024 [#2152](https://github.com/openshift/ovn-kubernetes/pull/2152) * [OCPBUGS-32925](https://issues.redhat.com/browse/OCPBUGS-32925), [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985): Dockerfile: Bump OVS to 3.3.0-2 [#2142](https://github.com/openshift/ovn-kubernetes/pull/2142) * [OCPBUGS-32985](https://issues.redhat.com/browse/OCPBUGS-32985), [SDN-4436](https://issues.redhat.com/browse/SDN-4436): Dockerfile.base: Bump OVN to ovn24.03-24.03.1-36.el9fdp [#2126](https://github.com/openshift/ovn-kubernetes/pull/2126) * [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419), [OCPBUGS-32461](https://issues.redhat.com/browse/OCPBUGS-32461), [SDN-4243](https://issues.redhat.com/browse/SDN-4243): Downstream Merge 22nd April 2024 [#2136](https://github.com/openshift/ovn-kubernetes/pull/2136) * [SDN-4458](https://issues.redhat.com/browse/SDN-4458): Do per-pod MCS/metadata blocking with nftables rather than iptables [#1946](https://github.com/openshift/ovn-kubernetes/pull/1946) * [SDN-4606](https://issues.redhat.com/browse/SDN-4606), [SDN-4688](https://issues.redhat.com/browse/SDN-4688): Downstream Merge April 18th 2024 [#2132](https://github.com/openshift/ovn-kubernetes/pull/2132) * [OCPBUGS-31419](https://issues.redhat.com/browse/OCPBUGS-31419): [DownstreamMerge] 4-16-24 [#2129](https://github.com/openshift/ovn-kubernetes/pull/2129) * [SDN-4403](https://issues.redhat.com/browse/SDN-4403): Downstream merge 20240415 [#2124](https://github.com/openshift/ovn-kubernetes/pull/2124) * [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889), [OCPBUGS-29952](https://issues.redhat.com/browse/OCPBUGS-29952), [SDN-3931](https://issues.redhat.com/browse/SDN-3931): Downstream merge 12 04 24 [#2120](https://github.com/openshift/ovn-kubernetes/pull/2120) * [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093), [OCPBUGS-29511](https://issues.redhat.com/browse/OCPBUGS-29511), [SDN-4157](https://issues.redhat.com/browse/SDN-4157): [DownstreamMerge] 4 April 2024 [#2110](https://github.com/openshift/ovn-kubernetes/pull/2110) * [SDN-4157](https://issues.redhat.com/browse/SDN-4157): DownstreamMerge 25th march 2024 [#2100](https://github.com/openshift/ovn-kubernetes/pull/2100) * [OCPBUGS-31557](https://issues.redhat.com/browse/OCPBUGS-31557): Revert "Remove unnecessary rhel8 build layer" [#2104](https://github.com/openshift/ovn-kubernetes/pull/2104) * [OCPBUGS-24007](https://issues.redhat.com/browse/OCPBUGS-24007): Remove unnecessary rhel8 build layer [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083) * [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093) * [OCPBUGS-29350](https://issues.redhat.com/browse/OCPBUGS-29350), [OCPBUGS-29389](https://issues.redhat.com/browse/OCPBUGS-29389), [SDN-4542](https://issues.redhat.com/browse/SDN-4542): Downstream Merge 29th Feb 2024 [#2089](https://github.com/openshift/ovn-kubernetes/pull/2089) * [OCPBUGS-17207](https://issues.redhat.com/browse/OCPBUGS-17207), [OCPBUGS-28742](https://issues.redhat.com/browse/OCPBUGS-28742): Downstream Merge 22nd Feb 2024 [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081) * [OCPBUGS-12876](https://issues.redhat.com/browse/OCPBUGS-12876), [OCPBUGS-13665](https://issues.redhat.com/browse/OCPBUGS-13665), [OCPBUGS-23519](https://issues.redhat.com/browse/OCPBUGS-23519), [OCPBUGS-28724](https://issues.redhat.com/browse/OCPBUGS-28724): Downstream Merge 15th Feb 2024 [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073) * [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093): Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp [#2066](https://github.com/openshift/ovn-kubernetes/pull/2066) * [OCPBUGS-27853](https://issues.redhat.com/browse/OCPBUGS-27853): [DownstreamMerge] 9 Feb 2024 [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063) * [OCPBUGS-20336](https://issues.redhat.com/browse/OCPBUGS-20336), [OCPBUGS-28558](https://issues.redhat.com/browse/OCPBUGS-28558): [DownstreamMerge] 7 Feb 2024 [#2057](https://github.com/openshift/ovn-kubernetes/pull/2057) * [USHIFT-2256](https://issues.redhat.com/browse/USHIFT-2256): updating ovn kubernetes microshift image to golang-1.21 [#2051](https://github.com/openshift/ovn-kubernetes/pull/2051) * [OCPBUGS-20209](https://issues.redhat.com/browse/OCPBUGS-20209), [OCPBUGS-20220](https://issues.redhat.com/browse/OCPBUGS-20220), [OCPBUGS-22923](https://issues.redhat.com/browse/OCPBUGS-22923), [OCPBUGS-24271](https://issues.redhat.com/browse/OCPBUGS-24271), [OCPBUGS-26979](https://issues.redhat.com/browse/OCPBUGS-26979), [OCPBUGS-27215](https://issues.redhat.com/browse/OCPBUGS-27215): Downstream Merge 2nd Feb 2024 [#2048](https://github.com/openshift/ovn-kubernetes/pull/2048) * [OCPBUGS-22221](https://issues.redhat.com/browse/OCPBUGS-22221), [OCPBUGS-24219](https://issues.redhat.com/browse/OCPBUGS-24219), [OCPBUGS-25670](https://issues.redhat.com/browse/OCPBUGS-25670): Downstream Merge 31st Jan 2024 [#2038](https://github.com/openshift/ovn-kubernetes/pull/2038) * [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027) * [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018) * [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995) * [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979) * [OCPBUGS-18716](https://issues.redhat.com/browse/OCPBUGS-18716): [DownstreamMerge] 1-5-24 [#2010](https://github.com/openshift/ovn-kubernetes/pull/2010) * [OCPBUGS-24965](https://issues.redhat.com/browse/OCPBUGS-24965): Updating ose-ovn-kubernetes-base-container image to be consistent with ART [#1978](https://github.com/openshift/ovn-kubernetes/pull/1978) * [OCPBUGS-25810](https://issues.redhat.com/browse/OCPBUGS-25810): CARRY: Updates owners and adds Surya [#2000](https://github.com/openshift/ovn-kubernetes/pull/2000) * [OCPBUGS-25032](https://issues.redhat.com/browse/OCPBUGS-25032): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980) * [OCPBUGS-24055](https://issues.redhat.com/browse/OCPBUGS-24055), [OCPBUGS-25394](https://issues.redhat.com/browse/OCPBUGS-25394), [SDN-4194](https://issues.redhat.com/browse/SDN-4194): [DownstreamMerge] 14 Dec 2023 [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990) * [OCPBUGS-24322](https://issues.redhat.com/browse/OCPBUGS-24322), [OCPBUGS-25357](https://issues.redhat.com/browse/OCPBUGS-25357): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1986](https://github.com/openshift/ovn-kubernetes/pull/1986) * [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847): Downstream merge 12-7-23 [#1976](https://github.com/openshift/ovn-kubernetes/pull/1976) * [NP-618](https://issues.redhat.com/browse/NP-618), [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847), [SDN-4124](https://issues.redhat.com/browse/SDN-4124), [SDN-4149](https://issues.redhat.com/browse/SDN-4149), [SDN-4150](https://issues.redhat.com/browse/SDN-4150): [DownstreamMerge] 1 Dec 2023 [#1965](https://github.com/openshift/ovn-kubernetes/pull/1965) * [OCPBUGS-24014](https://issues.redhat.com/browse/OCPBUGS-24014): Downstream merge 28th November 2023 [#1962](https://github.com/openshift/ovn-kubernetes/pull/1962) * [OCPBUGS-21773](https://issues.redhat.com/browse/OCPBUGS-21773): Downstream Merge 22nd November 2023 [#1958](https://github.com/openshift/ovn-kubernetes/pull/1958) * [NHE-805](https://issues.redhat.com/browse/NHE-805), [OCPBUGS-19050](https://issues.redhat.com/browse/OCPBUGS-19050), [OCPBUGS-22691](https://issues.redhat.com/browse/OCPBUGS-22691), [OCPBUGS-22767](https://issues.redhat.com/browse/OCPBUGS-22767), [SDN-4173](https://issues.redhat.com/browse/SDN-4173): [DownstreamMerge] 11 November 2023 [#1952](https://github.com/openshift/ovn-kubernetes/pull/1952) * [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942) * [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939) * [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935) * [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702) * [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884) * [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931) * [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923) * [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919) * [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917) * [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911) * [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907) * [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887) * [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895) * Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897) * [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883) * [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882) * [OCPBUGS-16641](https://issues.redhat.com/browse/OCPBUGS-16641), [OCPBUGS-18572](https://issues.redhat.com/browse/OCPBUGS-18572), [OCPBUGS-19331](https://issues.redhat.com/browse/OCPBUGS-19331): [DownstreamMerge] 9-18-23 [#1885](https://github.com/openshift/ovn-kubernetes/pull/1885) * [OCPBUGS-19004](https://issues.redhat.com/browse/OCPBUGS-19004), [OCPBUGS-19010](https://issues.redhat.com/browse/OCPBUGS-19010): Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp [#1875](https://github.com/openshift/ovn-kubernetes/pull/1875) * OCPBUGS-18895,OCPBUGS-14549,OCPBUGS-18402 [DownstreamMerge] 9-11-23 [#1868](https://github.com/openshift/ovn-kubernetes/pull/1868) * [OCPBUGS-18467](https://issues.redhat.com/browse/OCPBUGS-18467): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1854](https://github.com/openshift/ovn-kubernetes/pull/1854) * [OCPBUGS-14709](https://issues.redhat.com/browse/OCPBUGS-14709), [OCPBUGS-16617](https://issues.redhat.com/browse/OCPBUGS-16617), [OCPBUGS-18603](https://issues.redhat.com/browse/OCPBUGS-18603): Bump to OVN 23.09 [#1842](https://github.com/openshift/ovn-kubernetes/pull/1842) * [OCPBUGS-18378](https://issues.redhat.com/browse/OCPBUGS-18378): LGW: Fix the precedence of rules in FORWARD chain [#1851](https://github.com/openshift/ovn-kubernetes/pull/1851) * [OCPBUGS-17773](https://issues.redhat.com/browse/OCPBUGS-17773): Perf increases to pod deletion [#1847](https://github.com/openshift/ovn-kubernetes/pull/1847) * [OCPBUGS-17731](https://issues.redhat.com/browse/OCPBUGS-17731): move clearInitialNodeNetworkUnavailableCondition to clustermanager [#1839](https://github.com/openshift/ovn-kubernetes/pull/1839) * [OCPBUGS-18110](https://issues.redhat.com/browse/OCPBUGS-18110): Fix encap port configuration for remote chassis [#1836](https://github.com/openshift/ovn-kubernetes/pull/1836) * [OCPBUGS-17406](https://issues.redhat.com/browse/OCPBUGS-17406), [OCPBUGS-17844](https://issues.redhat.com/browse/OCPBUGS-17844), [OCPBUGS-17970](https://issues.redhat.com/browse/OCPBUGS-17970): [DownstreamMerge] 24 Aug 2023 [#1833](https://github.com/openshift/ovn-kubernetes/pull/1833) * [OCPBUGS-17867](https://issues.redhat.com/browse/OCPBUGS-17867): CARRY: Removes restriction for ip scope universe on node ips [#1822](https://github.com/openshift/ovn-kubernetes/pull/1822) * 8-16-23 [#1820](https://github.com/openshift/ovn-kubernetes/pull/1820) * [OCPBUGS-17666](https://issues.redhat.com/browse/OCPBUGS-17666): Downstream Merge august 15th 2023 [#1817](https://github.com/openshift/ovn-kubernetes/pull/1817) * Downstream Merge 2023-8-10 [#1813](https://github.com/openshift/ovn-kubernetes/pull/1813) * [OCPBUGS-17147](https://issues.redhat.com/browse/OCPBUGS-17147): [DownstreamMerge] 8 Aug 2023 [#1803](https://github.com/openshift/ovn-kubernetes/pull/1803) * Downstream Merge 2023-08-03 [#1798](https://github.com/openshift/ovn-kubernetes/pull/1798) * 8-1-23 [#1795](https://github.com/openshift/ovn-kubernetes/pull/1795) * [OCPBUGS-16767](https://issues.redhat.com/browse/OCPBUGS-16767), [SDN-3507](https://issues.redhat.com/browse/SDN-3507), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-27-23 [#1789](https://github.com/openshift/ovn-kubernetes/pull/1789) * [OCPBUGS-15811](https://issues.redhat.com/browse/OCPBUGS-15811): SDN-3733: Downstream Merge: 25th July 2023 [#1784](https://github.com/openshift/ovn-kubernetes/pull/1784) * [OCPBUGS-10650](https://issues.redhat.com/browse/OCPBUGS-10650), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-16413](https://issues.redhat.com/browse/OCPBUGS-16413), [SDN-3732](https://issues.redhat.com/browse/SDN-3732), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-19-23 [#1750](https://github.com/openshift/ovn-kubernetes/pull/1750) * Dockerfile: build both RHEL8 and RHEL9 shims [#1760](https://github.com/openshift/ovn-kubernetes/pull/1760) * [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-13-23 [#1757](https://github.com/openshift/ovn-kubernetes/pull/1757) * 11 jul 23 [#1752](https://github.com/openshift/ovn-kubernetes/pull/1752) * 07 jul 23 [#1747](https://github.com/openshift/ovn-kubernetes/pull/1747) * [SDN-3993](https://issues.redhat.com/browse/SDN-3993): [DownstreamMerge] 06 jul 23 [#1742](https://github.com/openshift/ovn-kubernetes/pull/1742) * [OCPBUGS-14632](https://issues.redhat.com/browse/OCPBUGS-14632): [DownstreamMerge] 30 jun 23 [#1729](https://github.com/openshift/ovn-kubernetes/pull/1729) * [OCPBUGS-15127](https://issues.redhat.com/browse/OCPBUGS-15127): Dockerfile: bump to ovn 23.03.0-69 (for LB templates) and ovs 3.1.0-32 (upgrade perf) [#1710](https://github.com/openshift/ovn-kubernetes/pull/1710) * [OCPBUGS-15523](https://issues.redhat.com/browse/OCPBUGS-15523): [DownstreamMerge] 6-27-23 [#1726](https://github.com/openshift/ovn-kubernetes/pull/1726) * [OCPBUGS-15227](https://issues.redhat.com/browse/OCPBUGS-15227): [DownstreamMerge] 6-21-23 [#1718](https://github.com/openshift/ovn-kubernetes/pull/1718) * [OCPBUGS-15226](https://issues.redhat.com/browse/OCPBUGS-15226): EgressIP: do not patch the status if the object no longer exists [#1717](https://github.com/openshift/ovn-kubernetes/pull/1717) * 6-18-2023 [#1714](https://github.com/openshift/ovn-kubernetes/pull/1714) * [OCPBUGS-14769](https://issues.redhat.com/browse/OCPBUGS-14769), [SDN-3885](https://issues.redhat.com/browse/SDN-3885): Downstream Merge 13th June 2023 [#1707](https://github.com/openshift/ovn-kubernetes/pull/1707) * [OCPBUGS-10592](https://issues.redhat.com/browse/OCPBUGS-10592), [OCPBUGS-10841](https://issues.redhat.com/browse/OCPBUGS-10841), [OCPBUGS-11180](https://issues.redhat.com/browse/OCPBUGS-11180), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-1715](https://issues.redhat.com/browse/OCPBUGS-1715), [OCPBUGS-4370](https://issues.redhat.com/browse/OCPBUGS-4370), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3733](https://issues.redhat.com/browse/SDN-3733), [SDN-3838](https://issues.redhat.com/browse/SDN-3838), [SDN-3840](https://issues.redhat.com/browse/SDN-3840): Downstream Merge 6th June 2023 [#1697](https://github.com/openshift/ovn-kubernetes/pull/1697) * [OCPBUGS-12352](https://issues.redhat.com/browse/OCPBUGS-12352): Updating ovn-kubernetes-base images to be consistent with ART [#1700](https://github.com/openshift/ovn-kubernetes/pull/1700) * [OCPBUGS-14636](https://issues.redhat.com/browse/OCPBUGS-14636): Fix Downstream Unit Tests [#1696](https://github.com/openshift/ovn-kubernetes/pull/1696) * [OCPBUGS-12800](https://issues.redhat.com/browse/OCPBUGS-12800), [OCPBUGS-13863](https://issues.redhat.com/browse/OCPBUGS-13863), [OCPBUGS-14286](https://issues.redhat.com/browse/OCPBUGS-14286), [OCPBUGS-14449](https://issues.redhat.com/browse/OCPBUGS-14449), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3555](https://issues.redhat.com/browse/SDN-3555), [SDN-3790](https://issues.redhat.com/browse/SDN-3790): Downstream Merge 1st June [#1692](https://github.com/openshift/ovn-kubernetes/pull/1692) * [OCPBUGS-9825](https://issues.redhat.com/browse/OCPBUGS-9825): LoadBalancer Templates Merge Downstream: 25th May 2023 [#1683](https://github.com/openshift/ovn-kubernetes/pull/1683) * [OCPBUGS-6013](https://issues.redhat.com/browse/OCPBUGS-6013): Call SyncEndpoints from AddService [#1671](https://github.com/openshift/ovn-kubernetes/pull/1671) * [OCPBUGS-13716](https://issues.redhat.com/browse/OCPBUGS-13716): Use ovsver and ovnver to infer the short version numbers for ovs and ovn [#1664](https://github.com/openshift/ovn-kubernetes/pull/1664) * [OCPBUGS-12971](https://issues.redhat.com/browse/OCPBUGS-12971): Fix bug that resulted in routes not be restored to a new vnic [#1665](https://github.com/openshift/ovn-kubernetes/pull/1665) * [OCPBUGS-11567](https://issues.redhat.com/browse/OCPBUGS-11567): Check the status of a pod before trying to get its ip [#1663](https://github.com/openshift/ovn-kubernetes/pull/1663) * [OCPBUGS-11716](https://issues.redhat.com/browse/OCPBUGS-11716): [release-4.14] Use loadbalancer.Name as client index [#1652](https://github.com/openshift/ovn-kubernetes/pull/1652) * [OCPBUGS-11534](https://issues.redhat.com/browse/OCPBUGS-11534): Stack migration [#1643](https://github.com/openshift/ovn-kubernetes/pull/1643) * Remove no-longer-used rhel9-specific dockerfiles [#1635](https://github.com/openshift/ovn-kubernetes/pull/1635) * [OCPBUGS-283](https://issues.redhat.com/browse/OCPBUGS-283), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Downstream merge 3rd April 2023 [#1626](https://github.com/openshift/ovn-kubernetes/pull/1626) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1620](https://github.com/openshift/ovn-kubernetes/pull/1620) * [OCPBUGS-6947](https://issues.redhat.com/browse/OCPBUGS-6947): CARRY: use "prefer local" for annotated services [#1622](https://github.com/openshift/ovn-kubernetes/pull/1622) * [OCPBUGS-10839](https://issues.redhat.com/browse/OCPBUGS-10839), [OCPBUGS-10962](https://issues.redhat.com/browse/OCPBUGS-10962): [DownstreamMerge] 28 March 2023 [#1611](https://github.com/openshift/ovn-kubernetes/pull/1611) * [OCPBUGS-10485](https://issues.redhat.com/browse/OCPBUGS-10485): Bump OVS to 3.1.0-10 [#1613](https://github.com/openshift/ovn-kubernetes/pull/1613) * node: small downstream CARRY patch cleanup [#1549](https://github.com/openshift/ovn-kubernetes/pull/1549) * [OCPBUGS-10889](https://issues.redhat.com/browse/OCPBUGS-10889), [OCPBUGS-8473](https://issues.redhat.com/browse/OCPBUGS-8473): Downstream Merge [27-mar-2023] [#1608](https://github.com/openshift/ovn-kubernetes/pull/1608) * [OCPBUGS-7932](https://issues.redhat.com/browse/OCPBUGS-7932), [OCPBUGS-7988](https://issues.redhat.com/browse/OCPBUGS-7988), [OCPBUGS-8080](https://issues.redhat.com/browse/OCPBUGS-8080), [OCPBUGS-8278](https://issues.redhat.com/browse/OCPBUGS-8278), [OCPBUGS-8280](https://issues.redhat.com/browse/OCPBUGS-8280), [OCPBUGS-9990](https://issues.redhat.com/browse/OCPBUGS-9990): Downstream Merge [10-mar-2023] [#1574](https://github.com/openshift/ovn-kubernetes/pull/1574) * Dockerfiles: copy RHEL-9 bits over top of unused RHEL8 bits [#1553](https://github.com/openshift/ovn-kubernetes/pull/1553) * [OCPBUGS-10395](https://issues.redhat.com/browse/OCPBUGS-10395): Bump OVN to disable CT flush [#1590](https://github.com/openshift/ovn-kubernetes/pull/1590) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1576](https://github.com/openshift/ovn-kubernetes/pull/1576) * Updating ose-ovn-kubernetes images to be consistent with ART [#1578](https://github.com/openshift/ovn-kubernetes/pull/1578) * Updating ovn-kubernetes-base images to be consistent with ART [#1575](https://github.com/openshift/ovn-kubernetes/pull/1575) * [OCPBUGS-8222](https://issues.redhat.com/browse/OCPBUGS-8222), [OCPBUGS-8397](https://issues.redhat.com/browse/OCPBUGS-8397), [OCPBUGS-8464](https://issues.redhat.com/browse/OCPBUGS-8464): [DownstreamMerge] 7 Mar 2023 [#1556](https://github.com/openshift/ovn-kubernetes/pull/1556) * [OCPBUGS-7952](https://issues.redhat.com/browse/OCPBUGS-7952): Dockerfile: bump to ovn23.03-23.03.0-4.el9fdp for RHEL9 [#1554](https://github.com/openshift/ovn-kubernetes/pull/1554) * [OCPBUGS-5889](https://issues.redhat.com/browse/OCPBUGS-5889): [DownstreamMerge] 2023-03-03 [#1552](https://github.com/openshift/ovn-kubernetes/pull/1552) * Removal of small code delta from upstream [#1548](https://github.com/openshift/ovn-kubernetes/pull/1548) * rhel9: bump to ovn23.03-23.03.0-preview.4 [#1550](https://github.com/openshift/ovn-kubernetes/pull/1550) * Downstream Merge [March 2nd 2023] [#1551](https://github.com/openshift/ovn-kubernetes/pull/1551) * 2-28-23 [#1546](https://github.com/openshift/ovn-kubernetes/pull/1546) * OCPBUGS-2663, Bug 2091780, OCPBUGS-6739: Downstream merge 2023-02-20 [#1533](https://github.com/openshift/ovn-kubernetes/pull/1533) * rhel9: bump to openvswitch3.1-3.1.0-2.el9fdp [#1544](https://github.com/openshift/ovn-kubernetes/pull/1544) * [OCPBUGS-7296](https://issues.redhat.com/browse/OCPBUGS-7296): Remove ICNIv1 from ovn-kubernetes [#1531](https://github.com/openshift/ovn-kubernetes/pull/1531) * Dockerfiles: switch to dnf [#1539](https://github.com/openshift/ovn-kubernetes/pull/1539) * iptables package is missing in microshift image [#1530](https://github.com/openshift/ovn-kubernetes/pull/1530) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1443](https://github.com/openshift/ovn-kubernetes/pull/1443) * rhel9: no longer need to use iptables wrappers [#1526](https://github.com/openshift/ovn-kubernetes/pull/1526) * cleanup: drop redundant selinux-policy install in onvkube dockerfiles [#1525](https://github.com/openshift/ovn-kubernetes/pull/1525) * iptables: use container iptables, not the host's [#1481](https://github.com/openshift/ovn-kubernetes/pull/1481) * rhel9: oc RPM does the kubectl symlink [#1523](https://github.com/openshift/ovn-kubernetes/pull/1523) * rhel9: no longer need python3-pyOpenSSL [#1519](https://github.com/openshift/ovn-kubernetes/pull/1519) * rhel9: remove stray `oc` install [#1518](https://github.com/openshift/ovn-kubernetes/pull/1518) * Add RHEL9 image Dockerfiles [#1495](https://github.com/openshift/ovn-kubernetes/pull/1495) * Downstream merge 2023-02-07 [#1510](https://github.com/openshift/ovn-kubernetes/pull/1510) * [OCPBUGS-6953](https://issues.redhat.com/browse/OCPBUGS-6953), [OCPBUGS-6955](https://issues.redhat.com/browse/OCPBUGS-6955): [Downstream Merge 6th Feb 2023] [#1509](https://github.com/openshift/ovn-kubernetes/pull/1509) * [OCPBUGS-4909](https://issues.redhat.com/browse/OCPBUGS-4909): Dockerfile: bump OVN to 22.12.0-18 [#1487](https://github.com/openshift/ovn-kubernetes/pull/1487) * Bug 2078222, OCPBUGS-4119, OCPBUGS-5930, OCPBUGS-4425: [DownstreamMerge] 1-31-23 [#1496](https://github.com/openshift/ovn-kubernetes/pull/1496) * Bug 2047299, OCPBUGS-2337: [DownstreamMerge] 13 Jan 2023 [#1474](https://github.com/openshift/ovn-kubernetes/pull/1474) * [Bug 2041746](https://bugzilla.redhat.com/show_bug.cgi?id=2041746): Bump OVN to 22.12.0-4 [#1468](https://github.com/openshift/ovn-kubernetes/pull/1468) * [Bug 2075548](https://bugzilla.redhat.com/show_bug.cgi?id=2075548): [DownstreamMerge] 09 Jan 2023 [#1466](https://github.com/openshift/ovn-kubernetes/pull/1466) * 15 Dec 2022 [#1454](https://github.com/openshift/ovn-kubernetes/pull/1454) * Updating ose-ovn-kubernetes images to be consistent with ART [#1430](https://github.com/openshift/ovn-kubernetes/pull/1430) * [OCPBUGS-4825](https://issues.redhat.com/browse/OCPBUGS-4825): [DownstreamMerge] 12-14-22 [#1449](https://github.com/openshift/ovn-kubernetes/pull/1449) * [OCPBUGS-4659](https://issues.redhat.com/browse/OCPBUGS-4659): [DownstreamMerge] - 12-12-22 [#1437](https://github.com/openshift/ovn-kubernetes/pull/1437) * Updating ovn-kubernetes-base images to be consistent with ART [#1431](https://github.com/openshift/ovn-kubernetes/pull/1431) * Fix product build issue with more straight forward bash [#1432](https://github.com/openshift/ovn-kubernetes/pull/1432) * [OCPBUGS-4502](https://issues.redhat.com/browse/OCPBUGS-4502): Downstream Merge 7th-December-2022 [Support service session affinity timeout] [#1418](https://github.com/openshift/ovn-kubernetes/pull/1418) * [OCBUGS-4502](https://issues.redhat.com/browse/OCBUGS-4502): Dockerfile: bump OVN to 22.09.0-25 [#1424](https://github.com/openshift/ovn-kubernetes/pull/1424) * Update base image of Dockerfile [#1239](https://github.com/openshift/ovn-kubernetes/pull/1239) * [OCPBUGS-3739](https://issues.redhat.com/browse/OCPBUGS-3739): [DownstreamMerge] 12-02-22 [#1410](https://github.com/openshift/ovn-kubernetes/pull/1410) * [OCPBUGS-2319](https://issues.redhat.com/browse/OCPBUGS-2319): [DownstreamMerge] 11-30-22 [#1405](https://github.com/openshift/ovn-kubernetes/pull/1405) * [OCPBUGS-799](https://issues.redhat.com/browse/OCPBUGS-799): Bump OVN to 22.09.0-22 [#1403](https://github.com/openshift/ovn-kubernetes/pull/1403) * Bug OCPBUGS-1352: [DownstreamMerge] 11-18-22 [#1400](https://github.com/openshift/ovn-kubernetes/pull/1400) * [Bug 2092567](https://bugzilla.redhat.com/show_bug.cgi?id=2092567): [Downstream Merge] 16/11/2022 [#1381](https://github.com/openshift/ovn-kubernetes/pull/1381) * [OCPBUGS-3797](https://issues.redhat.com/browse/OCPBUGS-3797): [4.13] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1362](https://github.com/openshift/ovn-kubernetes/pull/1362) * [OCPBUGS-3292](https://issues.redhat.com/browse/OCPBUGS-3292): downstream windows fixes [#1377](https://github.com/openshift/ovn-kubernetes/pull/1377) * Update images to be consistent with ART [#1371](https://github.com/openshift/ovn-kubernetes/pull/1371) * Downstream merge 11-08-2022 [#1364](https://github.com/openshift/ovn-kubernetes/pull/1364) * EIP: remove downstream's duplicate node delete test [#1358](https://github.com/openshift/ovn-kubernetes/pull/1358) * [SDN-3589](https://issues.redhat.com/browse/SDN-3589): downstream merge 11-02-2022 [#1355](https://github.com/openshift/ovn-kubernetes/pull/1355) * [OCPBUGS-2770](https://issues.redhat.com/browse/OCPBUGS-2770): Allow empty nexthop in L3GatewayConfig node annotation [#1337](https://github.com/openshift/ovn-kubernetes/pull/1337) * [OCPBUGS-2569](https://issues.redhat.com/browse/OCPBUGS-2569): Fix netpol races [#1323](https://github.com/openshift/ovn-kubernetes/pull/1323) * [OCPBUGS-1427](https://issues.redhat.com/browse/OCPBUGS-1427): Ignore non-ready endpoints when processing endpointslices [#1330](https://github.com/openshift/ovn-kubernetes/pull/1330) * [OCPBUGS-2826](https://issues.redhat.com/browse/OCPBUGS-2826): ovnkube-trace: Fix ofproto/trace for IPv6 [#1338](https://github.com/openshift/ovn-kubernetes/pull/1338) * [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Fixes SNAT-ing Logic for EgressIPs [#1331](https://github.com/openshift/ovn-kubernetes/pull/1331) * [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Prioritize adding events to handlers for shared resources [#1333](https://github.com/openshift/ovn-kubernetes/pull/1333) * [OCPBUGS-1643](https://issues.redhat.com/browse/OCPBUGS-1643): Add logging verbosity to configuring OVN logs [#1324](https://github.com/openshift/ovn-kubernetes/pull/1324) * [OCPBUGS-2175](https://issues.redhat.com/browse/OCPBUGS-2175): Allocate Hybrid Overlay IP on node updates too [#1319](https://github.com/openshift/ovn-kubernetes/pull/1319) * [OCPBUGS-2004](https://issues.redhat.com/browse/OCPBUGS-2004): egress IP: fix log when gRPC connection fails [#1304](https://github.com/openshift/ovn-kubernetes/pull/1304) * [OCPBUGS-2176](https://issues.redhat.com/browse/OCPBUGS-2176): add endpointSlice informer in master process [#1302](https://github.com/openshift/ovn-kubernetes/pull/1302) * [OCPBUGS-2085](https://issues.redhat.com/browse/OCPBUGS-2085): CARRY: Dockerfile.base: bump to openvswitch2.17.0-37.4.el8fdp [#1298](https://github.com/openshift/ovn-kubernetes/pull/1298) * [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Don't use ACL names ever! [#1300](https://github.com/openshift/ovn-kubernetes/pull/1300) * Dockerfile: bump to ovn22.09-22.09.0-5.el8fdp [#1284](https://github.com/openshift/ovn-kubernetes/pull/1284) * 9-23-22 b - dualstack fixed [#1289](https://github.com/openshift/ovn-kubernetes/pull/1289) * [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Trim ACL names according to RFC1123 [#1281](https://github.com/openshift/ovn-kubernetes/pull/1281) * [OCPBUGS-1553](https://issues.redhat.com/browse/OCPBUGS-1553): Dockerfile: bump to openvswitch2.17.0-37.4.el8fdp [#1273](https://github.com/openshift/ovn-kubernetes/pull/1273) * Use iptables-restore to add MCS/metadata blocking in the pod [#1262](https://github.com/openshift/ovn-kubernetes/pull/1262) * 9-12-22 merge [#1267](https://github.com/openshift/ovn-kubernetes/pull/1267) * 9-7-22 merge [#1264](https://github.com/openshift/ovn-kubernetes/pull/1264) * 9-2-22 merge [#1263](https://github.com/openshift/ovn-kubernetes/pull/1263) * [OCPBUGS-165](https://issues.redhat.com/browse/OCPBUGS-165): [DownstreamMerge] 8-29-2022 merge [#1255](https://github.com/openshift/ovn-kubernetes/pull/1255) * 8-25-2022 [#1253](https://github.com/openshift/ovn-kubernetes/pull/1253) * revert endpoints [#1248](https://github.com/openshift/ovn-kubernetes/pull/1248) * 8-8-2022 [#1237](https://github.com/openshift/ovn-kubernetes/pull/1237) * Fix ovn version in Dockerfile.base [#1236](https://github.com/openshift/ovn-kubernetes/pull/1236) * Introduce ovn-kubernetes-{base|singlenode} images [#1213](https://github.com/openshift/ovn-kubernetes/pull/1213) * [Bug 2109945](https://bugzilla.redhat.com/show_bug.cgi?id=2109945): [Downstream Merge: 04-08-2022] [#1231](https://github.com/openshift/ovn-kubernetes/pull/1231) * [Bug 2111534](https://bugzilla.redhat.com/show_bug.cgi?id=2111534): Downstream Merge: 27-07-2022 [#1214](https://github.com/openshift/ovn-kubernetes/pull/1214) * Updating ose-ovn-kubernetes images to be consistent with ART [#1174](https://github.com/openshift/ovn-kubernetes/pull/1174) * [Bug 2111733](https://bugzilla.redhat.com/show_bug.cgi?id=2111733): Bump OVN to 22.06.0-27 [#1222](https://github.com/openshift/ovn-kubernetes/pull/1222) * [OCPBUGSM-45393](https://issues.redhat.com/browse/OCPBUGSM-45393): Bug 2078691: [Downstream Merge] 22-07-2022 [#1210](https://github.com/openshift/ovn-kubernetes/pull/1210) * 4.12 initial merge from upstream: 7-18-22 [#1205](https://github.com/openshift/ovn-kubernetes/pull/1205) * [Bug 2106862](https://bugzilla.redhat.com/show_bug.cgi?id=2106862): Append the SNAT rule in management chain [#1199](https://github.com/openshift/ovn-kubernetes/pull/1199) * [Bug 2095444](https://bugzilla.redhat.com/show_bug.cgi?id=2095444): EGW: Clean Stale Conntrack Entries [#1189](https://github.com/openshift/ovn-kubernetes/pull/1189) * [Bug 2106298](https://bugzilla.redhat.com/show_bug.cgi?id=2106298): populate sock address for ovndb connection in unix mode [#1188](https://github.com/openshift/ovn-kubernetes/pull/1188) * [Bug 2100507](https://bugzilla.redhat.com/show_bug.cgi?id=2100507): Remove redundant log lines in obj_retry.go [#1162](https://github.com/openshift/ovn-kubernetes/pull/1162) * [Bug 2097243](https://bugzilla.redhat.com/show_bug.cgi?id=2097243): Fix egressips for pods recreated with same name [#1169](https://github.com/openshift/ovn-kubernetes/pull/1169) * [Bug 2097221](https://bugzilla.redhat.com/show_bug.cgi?id=2097221): Dockerfile: bump to ovn22.06-22.06.0-7.el8fdp [#1170](https://github.com/openshift/ovn-kubernetes/pull/1170) * [Bug 2091238](https://bugzilla.redhat.com/show_bug.cgi?id=2091238): Fix Panic in Network Policy deletion [#1166](https://github.com/openshift/ovn-kubernetes/pull/1166) * [Bug 2100220](https://bugzilla.redhat.com/show_bug.cgi?id=2100220): Fix completed pods releasing IP address on update [#1158](https://github.com/openshift/ovn-kubernetes/pull/1158) * [Bug 2089807](https://bugzilla.redhat.com/show_bug.cgi?id=2089807): Release Leader election lock on errors [#1167](https://github.com/openshift/ovn-kubernetes/pull/1167) * [Bug 2100249](https://bugzilla.redhat.com/show_bug.cgi?id=2100249): Revert "Bug 2082599: add upper bound to number of failed attempts" [#1161](https://github.com/openshift/ovn-kubernetes/pull/1161) * [Bug 2085089](https://bugzilla.redhat.com/show_bug.cgi?id=2085089): Add support for enabling UDP packet aggregation on veth interfaces [#1129](https://github.com/openshift/ovn-kubernetes/pull/1129) * [Bug 2099755](https://bugzilla.redhat.com/show_bug.cgi?id=2099755): Add new EgressIP config option "egressip-reachability-total-timeout" [#1156](https://github.com/openshift/ovn-kubernetes/pull/1156) * [Bug 2073378](https://bugzilla.redhat.com/show_bug.cgi?id=2073378): Add node name into egress ip status for the removal [#1114](https://github.com/openshift/ovn-kubernetes/pull/1114) * [Bug 2079012](https://bugzilla.redhat.com/show_bug.cgi?id=2079012): Fix egressIP object deletion if the node is deleted first [#1143](https://github.com/openshift/ovn-kubernetes/pull/1143) * [Bug 2089392](https://bugzilla.redhat.com/show_bug.cgi?id=2089392): Update logging for specific policy when creating it [#1145](https://github.com/openshift/ovn-kubernetes/pull/1145) * [Bug 2082599](https://bugzilla.redhat.com/show_bug.cgi?id=2082599): add upper bound to number of failed attempts [#1147](https://github.com/openshift/ovn-kubernetes/pull/1147) * [Bug 2094088](https://bugzilla.redhat.com/show_bug.cgi?id=2094088): Fixes Updating non-default columns as well as libovsdb fixes for empty values [#1146](https://github.com/openshift/ovn-kubernetes/pull/1146) * [release 4.11] Bug 2092579: pods: deleteLogicalPort should not fail if port is already deleted [#1123](https://github.com/openshift/ovn-kubernetes/pull/1123) * [Bug 2092889](https://bugzilla.redhat.com/show_bug.cgi?id=2092889): update all egress ACLs' direction to "from-lport" [#1128](https://github.com/openshift/ovn-kubernetes/pull/1128) * [Bug 2089716](https://bugzilla.redhat.com/show_bug.cgi?id=2089716): Downstream fix for OVN-Kube node cardinality [#1135](https://github.com/openshift/ovn-kubernetes/pull/1135) * [Bug 2095113](https://bugzilla.redhat.com/show_bug.cgi?id=2095113): Dockerfile: bump to openvswitch2.17-2.17.0-22.el8fdp [#1117](https://github.com/openshift/ovn-kubernetes/pull/1117) * [Bug 2094039](https://bugzilla.redhat.com/show_bug.cgi?id=2094039): egressIP: node retrieval failure is not respected, causes panic [#1130](https://github.com/openshift/ovn-kubernetes/pull/1130) * [Bug 2093396](https://bugzilla.redhat.com/show_bug.cgi?id=2093396): Remove node-tainting for too-small MTU [#1127](https://github.com/openshift/ovn-kubernetes/pull/1127) * [Bug 2091634](https://bugzilla.redhat.com/show_bug.cgi?id=2091634): Use ovs-appctl dpctl/* instead of ovs-dpctl [#1118](https://github.com/openshift/ovn-kubernetes/pull/1118) * [Bug 2091990](https://bugzilla.redhat.com/show_bug.cgi?id=2091990): fix lflow-cache-limit-kb ovs external-id [#1116](https://github.com/openshift/ovn-kubernetes/pull/1116) * [Bug 2070674](https://bugzilla.redhat.com/show_bug.cgi?id=2070674): improve performance of service sync [#1110](https://github.com/openshift/ovn-kubernetes/pull/1110) * [Bug 2092473](https://bugzilla.redhat.com/show_bug.cgi?id=2092473): libovsdb perf backports [#1119](https://github.com/openshift/ovn-kubernetes/pull/1119) * [Bug 2089930](https://bugzilla.redhat.com/show_bug.cgi?id=2089930): Dockerfile: bump OVN to ovn22.06 [#1102](https://github.com/openshift/ovn-kubernetes/pull/1102) * [Bug 2090843](https://bugzilla.redhat.com/show_bug.cgi?id=2090843): addLogicalPort() optimization cherry-picks [#1109](https://github.com/openshift/ovn-kubernetes/pull/1109) * [Bug 2090537](https://bugzilla.redhat.com/show_bug.cgi?id=2090537): OVNDBManager: Retry migrations [#1108](https://github.com/openshift/ovn-kubernetes/pull/1108) * [Bug 2081069](https://bugzilla.redhat.com/show_bug.cgi?id=2081069): Bumps OVN to 22.03.0-37.el8fdp [#1100](https://github.com/openshift/ovn-kubernetes/pull/1100) * [Bug 2086851](https://bugzilla.redhat.com/show_bug.cgi?id=2086851): enable `exportloopref` linter and fix violations [#1092](https://github.com/openshift/ovn-kubernetes/pull/1092) * [Bug 2084249](https://bugzilla.redhat.com/show_bug.cgi?id=2084249): [DownstreamMerge] 5-12-22 [#1090](https://github.com/openshift/ovn-kubernetes/pull/1090) * [Bug 2077357](https://bugzilla.redhat.com/show_bug.cgi?id=2077357): Bump OVN to ovn22.03-22.03.0-24 [#1052](https://github.com/openshift/ovn-kubernetes/pull/1052) * 5-4-22 [#1081](https://github.com/openshift/ovn-kubernetes/pull/1081) * [Bug 2070929](https://bugzilla.redhat.com/show_bug.cgi?id=2070929): Downstream Merge: 04-05-2022 [#1078](https://github.com/openshift/ovn-kubernetes/pull/1078) * [Bug 2079439](https://bugzilla.redhat.com/show_bug.cgi?id=2079439): [DownstreamMerge] 4-29-22 [#1064](https://github.com/openshift/ovn-kubernetes/pull/1064) * Downstream Merge 25-04-2022 [#1050](https://github.com/openshift/ovn-kubernetes/pull/1050) * [Bug 2023691](https://bugzilla.redhat.com/show_bug.cgi?id=2023691): Downstream merge 2022-04-22 [#1049](https://github.com/openshift/ovn-kubernetes/pull/1049) * [Bug 2072134](https://bugzilla.redhat.com/show_bug.cgi?id=2072134): [DownstreamMerge] 4-18-22 [#1040](https://github.com/openshift/ovn-kubernetes/pull/1040) * Dockerfile: bump to OVS 2.17 [#1031](https://github.com/openshift/ovn-kubernetes/pull/1031) * Fix gofmt for downstream files [#1028](https://github.com/openshift/ovn-kubernetes/pull/1028) * [Bug 2026461](https://bugzilla.redhat.com/show_bug.cgi?id=2026461): 4-4-22 merge [#1010](https://github.com/openshift/ovn-kubernetes/pull/1010) * [Bug 2047710](https://bugzilla.redhat.com/show_bug.cgi?id=2047710): Bump OVS version to 2.16.0-57.el8fdp [#980](https://github.com/openshift/ovn-kubernetes/pull/980) * Downstream merge 2022-03-22 [#1006](https://github.com/openshift/ovn-kubernetes/pull/1006) * [Bug 2063321](https://bugzilla.redhat.com/show_bug.cgi?id=2063321): [DownstreamMerge] Downstream merge 17-03-2022 [#1000](https://github.com/openshift/ovn-kubernetes/pull/1000) * [Bug 2060549](https://bugzilla.redhat.com/show_bug.cgi?id=2060549): Downstream merge 3-8-22 [#989](https://github.com/openshift/ovn-kubernetes/pull/989) * [Bug 2052975](https://bugzilla.redhat.com/show_bug.cgi?id=2052975): Downstream merge 07-03-2022 [#988](https://github.com/openshift/ovn-kubernetes/pull/988) * Merge 3-4-22 [#987](https://github.com/openshift/ovn-kubernetes/pull/987) * [Bug 2052975](https://bugzilla.redhat.com/show_bug.cgi?id=2052975): Bump OVN to ovn-2021-21.12.0-30.el8fdp [#982](https://github.com/openshift/ovn-kubernetes/pull/982) * [Bug 2052398](https://bugzilla.redhat.com/show_bug.cgi?id=2052398): [DownstreamMerge] 2-25-22 [#975](https://github.com/openshift/ovn-kubernetes/pull/975) * Bump OVS to 2.16.0-53.el8fdp [#968](https://github.com/openshift/ovn-kubernetes/pull/968) * [Bug 2048538](https://bugzilla.redhat.com/show_bug.cgi?id=2048538): [DownstreamMerge] 2-22-22 [#966](https://github.com/openshift/ovn-kubernetes/pull/966) * [Bug 2045577](https://bugzilla.redhat.com/show_bug.cgi?id=2045577): Bump OVN to ovn-2021-21.12.0-15.el8fdp [#958](https://github.com/openshift/ovn-kubernetes/pull/958) * [Bug 2048538](https://bugzilla.redhat.com/show_bug.cgi?id=2048538): [DownstreamMerge] 2-14-22 [#956](https://github.com/openshift/ovn-kubernetes/pull/956) * [Bug 2011525](https://bugzilla.redhat.com/show_bug.cgi?id=2011525): [DownstreamMerge] Downstream merge 08-02-2022 [#947](https://github.com/openshift/ovn-kubernetes/pull/947) * Update project owners [#950](https://github.com/openshift/ovn-kubernetes/pull/950) * Downstream merge 2-1-22 [#940](https://github.com/openshift/ovn-kubernetes/pull/940) * [Bug 2040357](https://bugzilla.redhat.com/show_bug.cgi?id=2040357): Dockerfile: bump OVN to ovn-2021-21.12.0-11.el8fdp [#902](https://github.com/openshift/ovn-kubernetes/pull/902) * [Bug 2039253](https://bugzilla.redhat.com/show_bug.cgi?id=2039253): avoid passing duplicate Flow endpoints to ovs-vsctl [#930](https://github.com/openshift/ovn-kubernetes/pull/930) * [Bug 2031926](https://bugzilla.redhat.com/show_bug.cgi?id=2031926): Shared gateway: Modification of ClusterIPs shall trigger svc update [#924](https://github.com/openshift/ovn-kubernetes/pull/924) * [Bug 2042001](https://bugzilla.redhat.com/show_bug.cgi?id=2042001): Adds wait method for ovsdb operations that created named objects [#934](https://github.com/openshift/ovn-kubernetes/pull/934) * [Bug 2044303](https://bugzilla.redhat.com/show_bug.cgi?id=2044303): Fix update of CloudPrivateIPConfig [#923](https://github.com/openshift/ovn-kubernetes/pull/923) * [Bug 2046297](https://bugzilla.redhat.com/show_bug.cgi?id=2046297): libovsdb: give connects more time to process than normal transactions [#931](https://github.com/openshift/ovn-kubernetes/pull/931) * [Bug 2044680](https://bugzilla.redhat.com/show_bug.cgi?id=2044680): libovsdb performance and resource consumption fixes [#927](https://github.com/openshift/ovn-kubernetes/pull/927) * [Bug 2017650](https://bugzilla.redhat.com/show_bug.cgi?id=2017650): EF: Pull up switch names from cache [#908](https://github.com/openshift/ovn-kubernetes/pull/908) * [Bug 2025467](https://bugzilla.redhat.com/show_bug.cgi?id=2025467): ETP=local,SGW: Add DNAT rule towards 169.254.169.3 [#907](https://github.com/openshift/ovn-kubernetes/pull/907) * [Bug 2043961](https://bugzilla.redhat.com/show_bug.cgi?id=2043961): Fix pod-creation-retry [#926](https://github.com/openshift/ovn-kubernetes/pull/926) * [Bug 2040540](https://bugzilla.redhat.com/show_bug.cgi?id=2040540): Fix String formatting error [#904](https://github.com/openshift/ovn-kubernetes/pull/904) * Clean up OWNERS a bit [#919](https://github.com/openshift/ovn-kubernetes/pull/919) * [Bug 2039880](https://bugzilla.redhat.com/show_bug.cgi?id=2039880): Metrics: Increase log level for CP recorder [#899](https://github.com/openshift/ovn-kubernetes/pull/899) * [Bug 2039099](https://bugzilla.redhat.com/show_bug.cgi?id=2039099): EgressIP fixes for 4.10 [#917](https://github.com/openshift/ovn-kubernetes/pull/917) * [Bug 2032998](https://bugzilla.redhat.com/show_bug.cgi?id=2032998): perf/scale backports [#911](https://github.com/openshift/ovn-kubernetes/pull/911) * [Bug 2034577](https://bugzilla.redhat.com/show_bug.cgi?id=2034577): Set l3GWConfig.mode correctly [#909](https://github.com/openshift/ovn-kubernetes/pull/909) * [Bug 2034155](https://bugzilla.redhat.com/show_bug.cgi?id=2034155): Make egressIPs compatible with ICNI [#915](https://github.com/openshift/ovn-kubernetes/pull/915) * [Bug 2029742](https://bugzilla.redhat.com/show_bug.cgi?id=2029742): egressip: fix usage of clientModel doAfter [#910](https://github.com/openshift/ovn-kubernetes/pull/910) * [Bug 2041830](https://bugzilla.redhat.com/show_bug.cgi?id=2041830): Fix panic in Hybrid Overlay [#913](https://github.com/openshift/ovn-kubernetes/pull/913) * [Bug 2039698](https://bugzilla.redhat.com/show_bug.cgi?id=2039698): Hacky way of doing ITP:preferLocal for openshift-dns:default [#896](https://github.com/openshift/ovn-kubernetes/pull/896) * [Bug 2039516](https://bugzilla.redhat.com/show_bug.cgi?id=2039516): Dockerfile: bump OVN to ovn21.12-21.12.0-25 [#883](https://github.com/openshift/ovn-kubernetes/pull/883) * [Bug 2022536](https://bugzilla.redhat.com/show_bug.cgi?id=2022536): Validate ExGW Cache and fix cache keys [#895](https://github.com/openshift/ovn-kubernetes/pull/895) * [Bug 2031012](https://bugzilla.redhat.com/show_bug.cgi?id=2031012): Create iptables NAT rules also for loadbalancer services [#888](https://github.com/openshift/ovn-kubernetes/pull/888) * [Bug 2033728](https://bugzilla.redhat.com/show_bug.cgi?id=2033728): Dockerfile: bump OVS to 2.16.0-33.el8fdp [#833](https://github.com/openshift/ovn-kubernetes/pull/833) * Merge 21-12-16 [#875](https://github.com/openshift/ovn-kubernetes/pull/875) * Block access to metadata service based on platform type [#873](https://github.com/openshift/ovn-kubernetes/pull/873) * Downstream merge 2021-12-10 [#871](https://github.com/openshift/ovn-kubernetes/pull/871) * 21-12-9 [#869](https://github.com/openshift/ovn-kubernetes/pull/869) * Merge 21-12-7 [#867](https://github.com/openshift/ovn-kubernetes/pull/867) * ovn: bump to ovn21.12-21.12.0-24.el8fdp [#818](https://github.com/openshift/ovn-kubernetes/pull/818) * 03-12-2021 [#863](https://github.com/openshift/ovn-kubernetes/pull/863) * [Bug 2019809](https://bugzilla.redhat.com/show_bug.cgi?id=2019809): [DownstreamMerge] 11-29-21 [#851](https://github.com/openshift/ovn-kubernetes/pull/851) * [Bug 2009873](https://bugzilla.redhat.com/show_bug.cgi?id=2009873): [4.10.0] Avoid stale annotations by re-subscribing to netlink [#843](https://github.com/openshift/ovn-kubernetes/pull/843) * Revert revert [#834](https://github.com/openshift/ovn-kubernetes/pull/834) * Revert "[DownstreamMerge] Fix previous downstream merge" [#831](https://github.com/openshift/ovn-kubernetes/pull/831) * Fix previous downstream merge [#812](https://github.com/openshift/ovn-kubernetes/pull/812) * [Bug 2017909](https://bugzilla.redhat.com/show_bug.cgi?id=2017909): EgressGW: only return unique elements from getRouteInfosForGateway() [#816](https://github.com/openshift/ovn-kubernetes/pull/816) * Revert #796 and #807 [#810](https://github.com/openshift/ovn-kubernetes/pull/810) * fixup: reduce delta from upstream [#807](https://github.com/openshift/ovn-kubernetes/pull/807) * Merge 2021-10-13 [#796](https://github.com/openshift/ovn-kubernetes/pull/796) * CARRY: go-ovn: prevent deadlock processing Updates during initial DB dump [#800](https://github.com/openshift/ovn-kubernetes/pull/800) * [Bug 2016479](https://bugzilla.redhat.com/show_bug.cgi?id=2016479): Update iface-id-ver for existing ports [#802](https://github.com/openshift/ovn-kubernetes/pull/802) * [Bug 1987445](https://bugzilla.redhat.com/show_bug.cgi?id=1987445): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#793](https://github.com/openshift/ovn-kubernetes/pull/793) * [Bug 2011386](https://bugzilla.redhat.com/show_bug.cgi?id=2011386): pods: fix overwriting returned error from defer() [#787](https://github.com/openshift/ovn-kubernetes/pull/787) * [Bug 2007443](https://bugzilla.redhat.com/show_bug.cgi?id=2007443): bump OVN to ovn21.09-21.09.0-20.el8fdp [#784](https://github.com/openshift/ovn-kubernetes/pull/784) * pods: remove unnecessary LSPGet() calls [#781](https://github.com/openshift/ovn-kubernetes/pull/781) * [Bug 1959352](https://bugzilla.redhat.com/show_bug.cgi?id=1959352): phase 2 scale improvements [#750](https://github.com/openshift/ovn-kubernetes/pull/750) * ovs: bump to 2.16.0-15.el8fdp [#775](https://github.com/openshift/ovn-kubernetes/pull/775) * [Bug 2006325](https://bugzilla.redhat.com/show_bug.cgi?id=2006325): Bump OVN to ovn21.09-21.09.0-19.el8fdp [#768](https://github.com/openshift/ovn-kubernetes/pull/768) * Updating ose-ovn-kubernetes images to be consistent with ART [#744](https://github.com/openshift/ovn-kubernetes/pull/744) * [Bug 1999261](https://bugzilla.redhat.com/show_bug.cgi?id=1999261): filter out KubeAPIAuth when logging CNI requests [#742](https://github.com/openshift/ovn-kubernetes/pull/742) * [Bug 2002010](https://bugzilla.redhat.com/show_bug.cgi?id=2002010): Fixes skipping pods accidentally in retry [#739](https://github.com/openshift/ovn-kubernetes/pull/739) * [Bug 2000057](https://bugzilla.redhat.com/show_bug.cgi?id=2000057): panic after EgressFirewall deletion and DNS record expiration [#741](https://github.com/openshift/ovn-kubernetes/pull/741) * [Bug 2003195](https://bugzilla.redhat.com/show_bug.cgi?id=2003195): Ensure host interfaces are deleted by CNI [#738](https://github.com/openshift/ovn-kubernetes/pull/738) * Fix bad merge on egressip test [#732](https://github.com/openshift/ovn-kubernetes/pull/732) * [Bug 2002372](https://bugzilla.redhat.com/show_bug.cgi?id=2002372): Fixes misuse of pod annotations during update event [#735](https://github.com/openshift/ovn-kubernetes/pull/735) * [Bug 1995335](https://bugzilla.redhat.com/show_bug.cgi?id=1995335): Add "iface-id-ver=${POD_UID}" tuple to the external-ids of logical and OVS ports [#729](https://github.com/openshift/ovn-kubernetes/pull/729) * [Bug 1903408](https://bugzilla.redhat.com/show_bug.cgi?id=1903408): Merge externalTrafficPolicy ONLY [#663](https://github.com/openshift/ovn-kubernetes/pull/663) * [Bug 1976399](https://bugzilla.redhat.com/show_bug.cgi?id=1976399): DBChecker: reconcile the election timeouts when specified [#647](https://github.com/openshift/ovn-kubernetes/pull/647) * [Bug 1998614](https://bugzilla.redhat.com/show_bug.cgi?id=1998614): Ensure client handling of canceled/dropped OVSDB monitor [#717](https://github.com/openshift/ovn-kubernetes/pull/717) * [Bug 1997438](https://bugzilla.redhat.com/show_bug.cgi?id=1997438): egressfirewall not set after upgrade [#716](https://github.com/openshift/ovn-kubernetes/pull/716) * [Bug 1998423](https://bugzilla.redhat.com/show_bug.cgi?id=1998423): kube master don't fail trying to cache same GW LRP IPs as already exist [#705](https://github.com/openshift/ovn-kubernetes/pull/705) * [Bug 1986946](https://bugzilla.redhat.com/show_bug.cgi?id=1986946): Fix ensurePod to call addPodExternalGW only for annotation updates [#691](https://github.com/openshift/ovn-kubernetes/pull/691) * [Bug 2000721](https://bugzilla.redhat.com/show_bug.cgi?id=2000721): bump OVS userland to openvswitch2.16-2.16.0-6.el8fdp [#714](https://github.com/openshift/ovn-kubernetes/pull/714) * [Bug 1999852](https://bugzilla.redhat.com/show_bug.cgi?id=1999852): bump OVN to ovn21.09-21.09.0-18.el8fdp [#704](https://github.com/openshift/ovn-kubernetes/pull/704) * [Bug 1999138](https://bugzilla.redhat.com/show_bug.cgi?id=1999138): Revert "Taint node with NoSchedule effect when ovnkube pod is down" [#708](https://github.com/openshift/ovn-kubernetes/pull/708) * README: Add doc links [#669](https://github.com/openshift/ovn-kubernetes/pull/669) * [Bug 1998146](https://bugzilla.redhat.com/show_bug.cgi?id=1998146): Fix lb delete during node deletion [#698](https://github.com/openshift/ovn-kubernetes/pull/698) * [Bug 1962344](https://bugzilla.redhat.com/show_bug.cgi?id=1962344): Use DGP to connect logical switches to the cluster router. [#688](https://github.com/openshift/ovn-kubernetes/pull/688) * [Bug 1997270](https://bugzilla.redhat.com/show_bug.cgi?id=1997270): bump OVN to ovn21.09-21.09.0-15.el8fdp [#685](https://github.com/openshift/ovn-kubernetes/pull/685) * [Bug 1995816](https://bugzilla.redhat.com/show_bug.cgi?id=1995816): [4.9] backport "attempting to reduce cardinality in the interest of memory performance" [#672](https://github.com/openshift/ovn-kubernetes/pull/672) * [Bug 1997114](https://bugzilla.redhat.com/show_bug.cgi?id=1997114): Fixes ensure address set [#684](https://github.com/openshift/ovn-kubernetes/pull/684) * [Bug 1994647](https://bugzilla.redhat.com/show_bug.cgi?id=1994647): Add quotes around nexthop and dst-ip fields [#677](https://github.com/openshift/ovn-kubernetes/pull/677) * [Bug 1973215](https://bugzilla.redhat.com/show_bug.cgi?id=1973215): fix reserve joinSwitch LRP IPs [#679](https://github.com/openshift/ovn-kubernetes/pull/679) * [Bug 1989615](https://bugzilla.redhat.com/show_bug.cgi?id=1989615): Fix GetPortAddresses for HBO [#670](https://github.com/openshift/ovn-kubernetes/pull/670) * [Bug 1943334](https://bugzilla.redhat.com/show_bug.cgi?id=1943334): Taint node with NoSchedule when ovnkube pod is down [#671](https://github.com/openshift/ovn-kubernetes/pull/671) * [Bug 1995330](https://bugzilla.redhat.com/show_bug.cgi?id=1995330): Cherry-pick of per-service loadbalancers [#666](https://github.com/openshift/ovn-kubernetes/pull/666) * [Bug 1959352](https://bugzilla.redhat.com/show_bug.cgi?id=1959352): scale fixes 1 [#667](https://github.com/openshift/ovn-kubernetes/pull/667) * [Bug 1978797](https://bugzilla.redhat.com/show_bug.cgi?id=1978797): Sync exgw routes on startup [#658](https://github.com/openshift/ovn-kubernetes/pull/658) * [Bug 1994069](https://bugzilla.redhat.com/show_bug.cgi?id=1994069): bump OVN to ovn21.09-21.09.0-13.el8fdp [#659](https://github.com/openshift/ovn-kubernetes/pull/659) * [Bug 1976215](https://bugzilla.redhat.com/show_bug.cgi?id=1976215): Fix: sync egress IP for missed events on start-up [#655](https://github.com/openshift/ovn-kubernetes/pull/655) * [Bug 1991793](https://bugzilla.redhat.com/show_bug.cgi?id=1991793): [4.9] bump OVN to ovn21.09-21.09.0-12.el8fdp [#652](https://github.com/openshift/ovn-kubernetes/pull/652) * [Bug 1989694](https://bugzilla.redhat.com/show_bug.cgi?id=1989694): Bump OVN to ovn21.09-21.09.0-10.el8fdp [#643](https://github.com/openshift/ovn-kubernetes/pull/643) * [Bug 1986440](https://bugzilla.redhat.com/show_bug.cgi?id=1986440): Bump OVN to ovn21.09-21.09.0-9.el8fdp [#630](https://github.com/openshift/ovn-kubernetes/pull/630) * [Bug 1986443](https://bugzilla.redhat.com/show_bug.cgi?id=1986443): Fix pod handler race downstream [#628](https://github.com/openshift/ovn-kubernetes/pull/628) * Bump OVN to ovn21.09-21.09.0-8.el8fdp [#621](https://github.com/openshift/ovn-kubernetes/pull/621) * Bump OVS to openvswitch2.15-2.15.0-28.el8fdp [#622](https://github.com/openshift/ovn-kubernetes/pull/622) * [Bug 1985512](https://bugzilla.redhat.com/show_bug.cgi?id=1985512): Add v6 management interface address for host network policy [#623](https://github.com/openshift/ovn-kubernetes/pull/623) * Merge 2021-07-21 2nd [#619](https://github.com/openshift/ovn-kubernetes/pull/619) * Merge 2021-07-18 [#609](https://github.com/openshift/ovn-kubernetes/pull/609) * [Bug 1973286](https://bugzilla.redhat.com/show_bug.cgi?id=1973286): Merge 2021-07-06 [#600](https://github.com/openshift/ovn-kubernetes/pull/600) * [Bug 1973813](https://bugzilla.redhat.com/show_bug.cgi?id=1973813): 6-21-2021 merge [#582](https://github.com/openshift/ovn-kubernetes/pull/582) * Updating ose-ovn-kubernetes images to be consistent with ART [#578](https://github.com/openshift/ovn-kubernetes/pull/578) * [Bug 1972287](https://bugzilla.redhat.com/show_bug.cgi?id=1972287): 6-17-21 merge [#579](https://github.com/openshift/ovn-kubernetes/pull/579) * add JacobTanenbaum to the list of approvers [#544](https://github.com/openshift/ovn-kubernetes/pull/544) * [Bug 1958375](https://bugzilla.redhat.com/show_bug.cgi?id=1958375): Bump OVN to 20.12.0-140.el8fdp [#580](https://github.com/openshift/ovn-kubernetes/pull/580) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#574](https://github.com/openshift/ovn-kubernetes/pull/574) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/eafcda08d12de784b967eed6f73e0ac8de532911...) ### [prometheus](https://github.com/openshift/prometheus/tree/) * [OCPBUGS-41113](https://issues.redhat.com/browse/OCPBUGS-41113): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.18 [#226](https://github.com/openshift/prometheus/pull/226) * [MON-3989](https://issues.redhat.com/browse/MON-3989): [bot] Bump openshift/prometheus to v2.54.1 [#223](https://github.com/openshift/prometheus/pull/223) * [MON-3989](https://issues.redhat.com/browse/MON-3989): [bot] Bump openshift/prometheus to v2.54.1 [#222](https://github.com/openshift/prometheus/pull/222) * [OCPBUGS-38622](https://issues.redhat.com/browse/OCPBUGS-38622): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#220](https://github.com/openshift/prometheus/pull/220) * [MON-3981](https://issues.redhat.com/browse/MON-3981): [bot] Bump openshift/prometheus to v2.54.0 [#219](https://github.com/openshift/prometheus/pull/219) * [MON-3981](https://issues.redhat.com/browse/MON-3981): [bot] Bump openshift/prometheus to v2.54.0 [#218](https://github.com/openshift/prometheus/pull/218) * [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Bump openshift/prometheus to v2.53.1 [#215](https://github.com/openshift/prometheus/pull/215) * [OCPBUGS-37370](https://issues.redhat.com/browse/OCPBUGS-37370): backport of upstream fix [#216](https://github.com/openshift/prometheus/pull/216) * [OCPBUGS-37244](https://issues.redhat.com/browse/OCPBUGS-37244): [bot] Bump openshift/prometheus to v2.53.1 [#211](https://github.com/openshift/prometheus/pull/211) * [OCPBUGS-35483](https://issues.redhat.com/browse/OCPBUGS-35483): cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. [#213](https://github.com/openshift/prometheus/pull/213) * [OCPBUGS-36768](https://issues.redhat.com/browse/OCPBUGS-36768): cherry-pick upstream remote-write fix [#210](https://github.com/openshift/prometheus/pull/210) * [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Bump openshift/prometheus to v2.53.0 [#208](https://github.com/openshift/prometheus/pull/208) * [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Bump openshift/prometheus to v2.53.0 [#206](https://github.com/openshift/prometheus/pull/206) * [OCPBUGS-34264](https://issues.redhat.com/browse/OCPBUGS-34264): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.17 [#205](https://github.com/openshift/prometheus/pull/205) * [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#202](https://github.com/openshift/prometheus/pull/202) * [MON-3856](https://issues.redhat.com/browse/MON-3856): Bump openshift/prometheus to v2.52.0 [#201](https://github.com/openshift/prometheus/pull/201) * [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#200](https://github.com/openshift/prometheus/pull/200) * [MON-3825](https://issues.redhat.com/browse/MON-3825): Bump openshift/prometheus to v2.51.2 [#199](https://github.com/openshift/prometheus/pull/199) * [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.51.1 [#198](https://github.com/openshift/prometheus/pull/198) * [MON-3794](https://issues.redhat.com/browse/MON-3794): Bump openshift/prometheus to v2.50.1 [#196](https://github.com/openshift/prometheus/pull/196) * [OCPBUGS-29981](https://issues.redhat.com/browse/OCPBUGS-29981): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 [#197](https://github.com/openshift/prometheus/pull/197) * [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Bump openshift/prometheus to v2.49.1 [#193](https://github.com/openshift/prometheus/pull/193) * [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194) * [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192) * [MON-3633](https://issues.redhat.com/browse/MON-3633): Bump openshift/prometheus to v2.48.1 [#188](https://github.com/openshift/prometheus/pull/188) * [OCPBUGS-24745](https://issues.redhat.com/browse/OCPBUGS-24745): Updating golang-github-prometheus-prometheus-container image to be consistent with ART [#187](https://github.com/openshift/prometheus/pull/187) * [MON-3528](https://issues.redhat.com/browse/MON-3528): [bot] Bump openshift/prometheus to v2.48.0 [#186](https://github.com/openshift/prometheus/pull/186) * [OCPBUGS-22743](https://issues.redhat.com/browse/OCPBUGS-22743): bump Prometheus to 2.48.0 (manual) [#185](https://github.com/openshift/prometheus/pull/185) * Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181) * Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180) * Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179) * [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173) * update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172) * Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168) * [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169) * Bump openshift/prometheus to v2.46.0 [#167](https://github.com/openshift/prometheus/pull/167) * Bump openshift/prometheus to v2.45.0 [#166](https://github.com/openshift/prometheus/pull/166) * Bump openshift/prometheus to v2.44.0 [#164](https://github.com/openshift/prometheus/pull/164) * Dockerfile.ocp: update note about UI assets after switching to embed [#165](https://github.com/openshift/prometheus/pull/165) * [OCPBUGS-12996](https://issues.redhat.com/browse/OCPBUGS-12996): Add missing assets after manual merge [#162](https://github.com/openshift/prometheus/pull/162) * [OCPBUGS-12825](https://issues.redhat.com/browse/OCPBUGS-12825): Updating golang-github-prometheus-prometheus images to be consistent with ART [#160](https://github.com/openshift/prometheus/pull/160) * Bump openshift/prometheus to v2.43.0 [#158](https://github.com/openshift/prometheus/pull/158) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#156](https://github.com/openshift/prometheus/pull/156) * Bump openshift/prometheus to v2.42.0 [#154](https://github.com/openshift/prometheus/pull/154) * Bump openshift/prometheus to v2.41.0 [#153](https://github.com/openshift/prometheus/pull/153) * Bump openshift/prometheus to v2.40.7 [#152](https://github.com/openshift/prometheus/pull/152) * Bump openshift/prometheus to v2.40.6 [#151](https://github.com/openshift/prometheus/pull/151) * Bump openshift/prometheus to v2.40.5 [#150](https://github.com/openshift/prometheus/pull/150) * [OCPBUGS-4273](https://issues.redhat.com/browse/OCPBUGS-4273): Bump openshift/prometheus to v2.40.4 [#148](https://github.com/openshift/prometheus/pull/148) * [OCPBUGS-2873](https://issues.redhat.com/browse/OCPBUGS-2873): fix certificate reloads after rotation [#145](https://github.com/openshift/prometheus/pull/145) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#147](https://github.com/openshift/prometheus/pull/147) * Revert unwanted downstream patch [#144](https://github.com/openshift/prometheus/pull/144) * [OCPBUGS-1718](https://issues.redhat.com/browse/OCPBUGS-1718): [bot] Bump openshift/prometheus to v2.39.1 [#142](https://github.com/openshift/prometheus/pull/142) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#141](https://github.com/openshift/prometheus/pull/141) * Bump openshift/prometheus to v2.38.0 [#140](https://github.com/openshift/prometheus/pull/140) * OWNERS: Add myself, and move former team members to emeritus [#139](https://github.com/openshift/prometheus/pull/139) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#137](https://github.com/openshift/prometheus/pull/137) * Bump openshift/prometheus to v2.37.0 [#138](https://github.com/openshift/prometheus/pull/138) * [Bug 2099561](https://bugzilla.redhat.com/show_bug.cgi?id=2099561): Bump openshift/prometheus to v2.36.2 [#136](https://github.com/openshift/prometheus/pull/136) * [Bug 2064984](https://bugzilla.redhat.com/show_bug.cgi?id=2064984): Update Prometheus to v2.36.1 [#133](https://github.com/openshift/prometheus/pull/133) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#132](https://github.com/openshift/prometheus/pull/132) * web/ui/.gitignore: unignore generated assets for downstream build [#130](https://github.com/openshift/prometheus/pull/130) * Bump openshift/prometheus to v2.35.0 [#128](https://github.com/openshift/prometheus/pull/128) * Updates OWNERS file [#124](https://github.com/openshift/prometheus/pull/124) * Bump openshift/prometheus to v2.34.0 [#123](https://github.com/openshift/prometheus/pull/123) * Bump openshift/prometheus to v2.33.5 [#122](https://github.com/openshift/prometheus/pull/122) * [Bug 2056802](https://bugzilla.redhat.com/show_bug.cgi?id=2056802): scrape: Fix label_limits cache usage [#121](https://github.com/openshift/prometheus/pull/121) * Bump openshift/prometheus to v2.33.4 [#120](https://github.com/openshift/prometheus/pull/120) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#119](https://github.com/openshift/prometheus/pull/119) * [Bug 2034192](https://bugzilla.redhat.com/show_bug.cgi?id=2034192): [bot] Bump openshift/prometheus to v2.32.1 [#117](https://github.com/openshift/prometheus/pull/117) * Don't use dependabot [#115](https://github.com/openshift/prometheus/pull/115) * Bump openshift/prometheus to v2.32.0 [#104](https://github.com/openshift/prometheus/pull/104) * Bump openshift/prometheus to v2.31.1 [#103](https://github.com/openshift/prometheus/pull/103) * Update scripts/rh-manifest.sh replacing yarn by npm [#99](https://github.com/openshift/prometheus/pull/99) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#102](https://github.com/openshift/prometheus/pull/102) * OWNERS: cleanup [#101](https://github.com/openshift/prometheus/pull/101) * Bump v2.30.3 [#98](https://github.com/openshift/prometheus/pull/98) * [Bug 1943860](https://bugzilla.redhat.com/show_bug.cgi?id=1943860): Bump 2.30.0 [#96](https://github.com/openshift/prometheus/pull/96) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#94](https://github.com/openshift/prometheus/pull/94) * openshift: Add script to generate rh-manifest.txt [#90](https://github.com/openshift/prometheus/pull/90) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#93](https://github.com/openshift/prometheus/pull/93) * [Bug 1999397](https://bugzilla.redhat.com/show_bug.cgi?id=1999397): Bump 2.29.2 [#92](https://github.com/openshift/prometheus/pull/92) * [Bug 1986243](https://bugzilla.redhat.com/show_bug.cgi?id=1986243): bump 2.29 [#91](https://github.com/openshift/prometheus/pull/91) * [Bug 1934324](https://bugzilla.redhat.com/show_bug.cgi?id=1934324): Update to 2.28.1 [#89](https://github.com/openshift/prometheus/pull/89) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#88](https://github.com/openshift/prometheus/pull/88) * Update OWNERS file to reflect new maintainers [#87](https://github.com/openshift/prometheus/pull/87) * [Full changelog](https://github.com/openshift/prometheus/compare/f3beb880dbde817bf5ed2befc1880445884e4be0...) ### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/) * [OCPBUGS-30122](https://issues.redhat.com/browse/OCPBUGS-30122): Bump openshift/prometheus-operator to v0.77.1 [#307](https://github.com/openshift/prometheus-operator/pull/307) * [MON-3994](https://issues.redhat.com/browse/MON-3994): [bot] Bump openshift/prometheus-operator to v0.76.2 [#305](https://github.com/openshift/prometheus-operator/pull/305) * Updating prometheus-config-reloader-container image to be consistent with ART for 4.18 [#303](https://github.com/openshift/prometheus-operator/pull/303) * [OCPBUGS-41278](https://issues.redhat.com/browse/OCPBUGS-41278): Updating prometheus-operator-container image to be consistent with ART for 4.18 [#304](https://github.com/openshift/prometheus-operator/pull/304) * [MON-3994](https://issues.redhat.com/browse/MON-3994): [bot] Bump openshift/prometheus-operator to v0.76.1 [#301](https://github.com/openshift/prometheus-operator/pull/301) * Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.18 [#302](https://github.com/openshift/prometheus-operator/pull/302) * [MON-3982](https://issues.redhat.com/browse/MON-3982): [bot] Bump openshift/prometheus-operator to v0.76.0 [#297](https://github.com/openshift/prometheus-operator/pull/297) * [OCPBUGS-38174](https://issues.redhat.com/browse/OCPBUGS-38174): feat: sync proxy settings in Alertmanager configuration [#295](https://github.com/openshift/prometheus-operator/pull/295) * [MON-3947](https://issues.redhat.com/browse/MON-3947): Bump openshift/prometheus-operator to v0.75.2 [#294](https://github.com/openshift/prometheus-operator/pull/294) * [MON-3889](https://issues.redhat.com/browse/MON-3889): [bot] Bump openshift/prometheus-operator to v0.74.0 [#287](https://github.com/openshift/prometheus-operator/pull/287) * [OCPBUGS-34153](https://issues.redhat.com/browse/OCPBUGS-34153), [OCPBUGS-34308](https://issues.redhat.com/browse/OCPBUGS-34308), [OCPBUGS-34459](https://issues.redhat.com/browse/OCPBUGS-34459): Updating prometheus-operator-container image to be consistent with ART for 4.17 [#293](https://github.com/openshift/prometheus-operator/pull/293) * [OCPBUGS-34308](https://issues.redhat.com/browse/OCPBUGS-34308): Updating prometheus-config-reloader-container image to be consistent with ART for 4.17 [#289](https://github.com/openshift/prometheus-operator/pull/289) * [OCPBUGS-34153](https://issues.redhat.com/browse/OCPBUGS-34153): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.17 [#288](https://github.com/openshift/prometheus-operator/pull/288) * [MON-3838](https://issues.redhat.com/browse/MON-3838): Bump openshift/prometheus-operator to v0.73.2 [#286](https://github.com/openshift/prometheus-operator/pull/286) * [OCPBUGS-31847](https://issues.redhat.com/browse/OCPBUGS-31847): Bump openshift/prometheus-operator to v0.73.1 [#285](https://github.com/openshift/prometheus-operator/pull/285) * [MON-3793](https://issues.redhat.com/browse/MON-3793): Bump openshift/prometheus-operator to v0.73.0 [#284](https://github.com/openshift/prometheus-operator/pull/284) * [MON-3771](https://issues.redhat.com/browse/MON-3771): Bump openshift/prometheus-operator to v0.72.0 [#281](https://github.com/openshift/prometheus-operator/pull/281) * [OCPBUGS-29304](https://issues.redhat.com/browse/OCPBUGS-29304): fix: don't fail metadata transform on unknown types (#6298) [#277](https://github.com/openshift/prometheus-operator/pull/277) * [OCPBUGS-28251](https://issues.redhat.com/browse/OCPBUGS-28251): fix: convert `continue` field between v1beta1 and v1alpha1 [#275](https://github.com/openshift/prometheus-operator/pull/275) * [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274) * [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273) * [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272) * [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271) * [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269) * [OCPBUGS-25560](https://issues.redhat.com/browse/OCPBUGS-25560): Updating prometheus-config-reloader-container image to be consistent with ART [#270](https://github.com/openshift/prometheus-operator/pull/270) * [OCPBUGS-24947](https://issues.redhat.com/browse/OCPBUGS-24947): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#266](https://github.com/openshift/prometheus-operator/pull/266) * [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#268](https://github.com/openshift/prometheus-operator/pull/268) * [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#265](https://github.com/openshift/prometheus-operator/pull/265) * [OCPBUGS-24872](https://issues.redhat.com/browse/OCPBUGS-24872): Updating prometheus-operator-container image to be consistent with ART [#264](https://github.com/openshift/prometheus-operator/pull/264) * [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): Bump openshift/prometheus-operator to v0.70.0 [#263](https://github.com/openshift/prometheus-operator/pull/263) * [OCPBUGS-24126](https://issues.redhat.com/browse/OCPBUGS-24126): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#260](https://github.com/openshift/prometheus-operator/pull/260) * [OCPBUGS-24073](https://issues.redhat.com/browse/OCPBUGS-24073): Updating prometheus-operator-container image to be consistent with ART [#258](https://github.com/openshift/prometheus-operator/pull/258) * [OCPBUGS-24105](https://issues.redhat.com/browse/OCPBUGS-24105): Updating prometheus-config-reloader-container image to be consistent with ART [#259](https://github.com/openshift/prometheus-operator/pull/259) * [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256) * [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255) * [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254) * [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252) * [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246) * update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245) * [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242) * [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244) * [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243) * : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241) * Bump openshift/prometheus-operator to v0.67.1 [#240](https://github.com/openshift/prometheus-operator/pull/240) * Bump openshift/prometheus-operator to v0.67.0 [#239](https://github.com/openshift/prometheus-operator/pull/239) * [OCPBUGS-14466](https://issues.redhat.com/browse/OCPBUGS-14466): bump openshift/prometheus-operator to v0.66.0 [#236](https://github.com/openshift/prometheus-operator/pull/236) * [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): cmd/prometheus-config-reloader: add SIGTERM handler [#234](https://github.com/openshift/prometheus-operator/pull/234) * [OCPBUGS-1626](https://issues.redhat.com/browse/OCPBUGS-1626): [bot] Bump openshift/prometheus-operator to v0.65.1 [#233](https://github.com/openshift/prometheus-operator/pull/233) * [OCPBUGS-12324](https://issues.redhat.com/browse/OCPBUGS-12324): Update 4.14 prometheus-config-reloader image to be consistent with ART [#230](https://github.com/openshift/prometheus-operator/pull/230) * Updating prometheus-operator images to be consistent with ART [#229](https://github.com/openshift/prometheus-operator/pull/229) * Updating prometheus-config-reloader images to be consistent with ART [#227](https://github.com/openshift/prometheus-operator/pull/227) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#226](https://github.com/openshift/prometheus-operator/pull/226) * Updating prometheus-config-reloader images to be consistent with ART [#225](https://github.com/openshift/prometheus-operator/pull/225) * [OCPBUGS-10109](https://issues.redhat.com/browse/OCPBUGS-10109): Updating openshift-state-metrics images to be consistent with ART [#221](https://github.com/openshift/prometheus-operator/pull/221) * [OCPBUGS-10137](https://issues.redhat.com/browse/OCPBUGS-10137): Updating openshift-state-metrics images to be consistent with ART [#222](https://github.com/openshift/prometheus-operator/pull/222) * Updating prometheus-operator images to be consistent with ART [#220](https://github.com/openshift/prometheus-operator/pull/220) * [OCPBUGS-6055](https://issues.redhat.com/browse/OCPBUGS-6055): [bot] Bump openshift/prometheus-operator to v0.63.0 [#216](https://github.com/openshift/prometheus-operator/pull/216) * Bump openshift/prometheus-operator to v0.62.0 [#215](https://github.com/openshift/prometheus-operator/pull/215) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#214](https://github.com/openshift/prometheus-operator/pull/214) * Updating prometheus-config-reloader images to be consistent with ART [#213](https://github.com/openshift/prometheus-operator/pull/213) * Updating prometheus-operator images to be consistent with ART [#212](https://github.com/openshift/prometheus-operator/pull/212) * [OCPBUGS-2778](https://issues.redhat.com/browse/OCPBUGS-2778): [bot] Bump openshift/prometheus-operator to v0.61.1 [#209](https://github.com/openshift/prometheus-operator/pull/209) * Bump openshift/prometheus-operator to v0.60.1 [#208](https://github.com/openshift/prometheus-operator/pull/208) * Bump openshift/prometheus-operator to v0.60.0 [#207](https://github.com/openshift/prometheus-operator/pull/207) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#206](https://github.com/openshift/prometheus-operator/pull/206) * Updating prometheus-config-reloader images to be consistent with ART [#205](https://github.com/openshift/prometheus-operator/pull/205) * Bump openshift/prometheus-operator to v0.59.2 [#203](https://github.com/openshift/prometheus-operator/pull/203) * Bump openshift/prometheus-operator to v0.59.1 [#200](https://github.com/openshift/prometheus-operator/pull/200) * OWNERS: Add myself, and move former team members to emeritus [#198](https://github.com/openshift/prometheus-operator/pull/198) * Bump openshift/prometheus-operator to v0.58.0 [#197](https://github.com/openshift/prometheus-operator/pull/197) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#195](https://github.com/openshift/prometheus-operator/pull/195) * Updating prometheus-config-reloader images to be consistent with ART [#194](https://github.com/openshift/prometheus-operator/pull/194) * Updating prometheus-operator images to be consistent with ART [#193](https://github.com/openshift/prometheus-operator/pull/193) * [Bug 2097716](https://bugzilla.redhat.com/show_bug.cgi?id=2097716): pkg/apis/monitoring/v1beta1: fix httpConfig conversion [#191](https://github.com/openshift/prometheus-operator/pull/191) * [Bug 2091595](https://bugzilla.redhat.com/show_bug.cgi?id=2091595): bump to Prometheus operator v0.57.0 [#190](https://github.com/openshift/prometheus-operator/pull/190) * [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): pkg/prometheus: fix curl exec probe [#189](https://github.com/openshift/prometheus-operator/pull/189) * Revert "Bug 2091595: Bump openshift/prometheus-operator to v0.56.3" [#188](https://github.com/openshift/prometheus-operator/pull/188) * [Bug 2091595](https://bugzilla.redhat.com/show_bug.cgi?id=2091595): Bump openshift/prometheus-operator to v0.56.3 [#185](https://github.com/openshift/prometheus-operator/pull/185) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#180](https://github.com/openshift/prometheus-operator/pull/180) * Updating prometheus-config-reloader images to be consistent with ART [#178](https://github.com/openshift/prometheus-operator/pull/178) * [Bug 2084288](https://bugzilla.redhat.com/show_bug.cgi?id=2084288): Revert "Bump openshift/prometheus-operator to v0.56.2" [#177](https://github.com/openshift/prometheus-operator/pull/177) * Updating prometheus-operator images to be consistent with ART [#176](https://github.com/openshift/prometheus-operator/pull/176) * Bump openshift/prometheus-operator to v0.56.2 [#174](https://github.com/openshift/prometheus-operator/pull/174) * Revert "Bump openshift/prometheus-operator to v0.56.1" [#171](https://github.com/openshift/prometheus-operator/pull/171) * Bump openshift/prometheus-operator to v0.56.1 [#170](https://github.com/openshift/prometheus-operator/pull/170) * Add myself to OWNER file [#166](https://github.com/openshift/prometheus-operator/pull/166) * [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): Revert "[bot] Bump openshift/prometheus-operator to v0.56.0" [#168](https://github.com/openshift/prometheus-operator/pull/168) * Bump openshift/prometheus-operator to v0.56.0 [#165](https://github.com/openshift/prometheus-operator/pull/165) * Bump openshift/prometheus-operator to v0.55.1 [#164](https://github.com/openshift/prometheus-operator/pull/164) * Bump openshift/prometheus-operator to v0.55.0 [#162](https://github.com/openshift/prometheus-operator/pull/162) * Fix typo in admission webhook bin output [#163](https://github.com/openshift/prometheus-operator/pull/163) * Add Dockerfile and targets for standalone admission webhook image [#160](https://github.com/openshift/prometheus-operator/pull/160) * Standalone webhook server [#159](https://github.com/openshift/prometheus-operator/pull/159) * Bump openshift/prometheus-operator to v0.54.1 [#158](https://github.com/openshift/prometheus-operator/pull/158) * Updating prometheus-config-reloader images to be consistent with ART [#155](https://github.com/openshift/prometheus-operator/pull/155) * Bump openshift/prometheus-operator to v0.54.0 [#151](https://github.com/openshift/prometheus-operator/pull/151) * Updating prometheus-operator images to be consistent with ART [#154](https://github.com/openshift/prometheus-operator/pull/154) * [Bug 2030539](https://bugzilla.redhat.com/show_bug.cgi?id=2030539): Address race condition in recreate flow for statefulset [#152](https://github.com/openshift/prometheus-operator/pull/152) * [Bug 2036717](https://bugzilla.redhat.com/show_bug.cgi?id=2036717): [bot] Bump openshift/prometheus-operator to v0.53.1 [#147](https://github.com/openshift/prometheus-operator/pull/147) * Bump openshift/prometheus-operator to v0.53.0 [#146](https://github.com/openshift/prometheus-operator/pull/146) * Release 0.52 [#141](https://github.com/openshift/prometheus-operator/pull/141) * Updating prometheus-config-reloader images to be consistent with ART [#144](https://github.com/openshift/prometheus-operator/pull/144) * OWNERS: cleanup [#140](https://github.com/openshift/prometheus-operator/pull/140) * Bump v0.51.2 [#139](https://github.com/openshift/prometheus-operator/pull/139) * Updating prometheus-operator images to be consistent with ART [#136](https://github.com/openshift/prometheus-operator/pull/136) * Bump to v0.50.0 [#133](https://github.com/openshift/prometheus-operator/pull/133) * Updating prometheus-config-reloader images to be consistent with ART [#135](https://github.com/openshift/prometheus-operator/pull/135) * Updating prometheus-operator images to be consistent with ART [#134](https://github.com/openshift/prometheus-operator/pull/134) * [Bug 1977435](https://bugzilla.redhat.com/show_bug.cgi?id=1977435): Bump prometheus-operator to v0.49.0 [#131](https://github.com/openshift/prometheus-operator/pull/131) * Updating prometheus-config-reloader images to be consistent with ART [#130](https://github.com/openshift/prometheus-operator/pull/130) * Updating prometheus-operator images to be consistent with ART [#129](https://github.com/openshift/prometheus-operator/pull/129) * Update OWNERS file to reflect new maintainers [#127](https://github.com/openshift/prometheus-operator/pull/127) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#128](https://github.com/openshift/prometheus-operator/pull/128) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/8f4efab9e7fa34f79a5900d95113f62908889168...)