Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.0-ec.2-x86_64
Tests:
Upgrades from:
Untested upgrades:
4.14.0,
4.14.0-rc.0,
4.14.0-rc.1,
4.14.0-rc.2,
4.14.0-rc.3,
4.14.0-rc.4,
4.14.0-rc.5,
4.14.0-rc.6,
4.14.0-rc.7,
4.14.1,
4.14.2,
4.15.0-ec.0,
4.15.0-ec.1Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-11-14 15:10:25 +0000 UTC
Image Digest: sha256:7dbe1d710f739ae2c73187330788f5c36cbe8b315d816510ded767fb162ffd0c
Release 4.15.0-ec.2 was created from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2023-11-08-062604
Components
New images
Rebuilt images without code change
- MGMT-16077: Add 4.15 release and OS images (#5673) #5673
- AGENT-723: Use json.Marshal to correctly process vSphere credentials (#5592) #5592
- NO-ISSUE: Fix for error in wait_for_cmd_amount function (#5670) #5670
- MGMT-15902: Trigger reboots for node event when day2 node moves to done (#5648) #5648
- NO-JIRA: Allow the command in wait_for_cmd_amount to receive arguments (#5668) #5668
- MGMT-16164: Install 4.14 redhat-operators catalog for LSO (#5669) #5669
- MGMT-15878: Ensure that hosts emit event showing why preparation failed. (#5521) #5521
- MGMT-15878: Add a condition to show the last preparation failure (#5524) #5524
- MGMT-16151: change default envoy sidecar timeout value (#5667) #5667
- MGMT-16114: Update 4.14 release image to use GA version (#5651) #5651
- MGMT-16052: Fix cluster HighAvailabilityMode nil pointer in update flow (#5659) #5659
- Bump OCP versions: 4.14, 4.12 (#5661) #5661
- MGMT-15405: Add a URL to infraenv to show download link from static network config (#5638) #5638
- OCPBUGS-19823: Ignore hostPrefix validation for plugins other than OVN/SDN (#5565) #5565
- MGMT-15271: Add the boot command line to the host inventory (#5649) #5649
- MGMT-15680: Adds InfraEnv ctrl watch for pull secret changes (#5589) #5589
- NO-ISSUE: Bump github.com/jackc/pgconn from 1.12.0 to 1.14.1 (#5653) #5653
- MGMT-16061: changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5613) #5613
- NO-ISSUE: Bump github.com/jackc/pgtype from 1.11.0 to 1.14.0 (#5647) #5647
- Update RHTAP references (#5637) #5637
- Bump OCP versions: 4.13 (#5645) #5645
- NO-ISSUE: Bump go.opentelemetry.io/otel/exporters/otlp (#5644) #5644
- MGMT-15683: Ensure that manifest filename has valid name part (#5635) #5635
- NO-ISSUE: Bump go.opentelemetry.io/contrib from 0.20.0 to 1.20.0 (#5641) #5641
- NO-ISSUE: Bump go.uber.org/atomic from 1.7.0 to 1.11.0 (#5619) #5619
- Update RHTAP references (#5624) #5624
- MGMT-15684: Return appropriate HTTP error code for invalid manifest file path (#5634) #5634
- Bump OCP versions: 4.14 (#5633) #5633
- NO-ISSUE: Bump github.com/jackc/pgproto3/v2 from 2.3.0 to 2.3.2 (#5632) #5632
- MGMT-16037: fix messaging errors on big clusters (#5628) #5628
- MGMT-16039: upgrade to golang 1.20 (#5616) #5616
- NO-ISSUE: Bump github.com/Azure/go-autorest/autorest (#5622) #5622
- Revert “NO-ISSUE: use kubectl 1.28.2 (#5572)” (#5618) #5572
- Bump OCP versions: 4.12 (#5615) #5615
- MGMT-16045: mitigate CVE-2023-44487 (#5614) #5614
- MGMT-15902: Add event that shows the number of reboots for a node before completing installation (#5591) #5591
- Add skopeo to OCP build (#5558) #5558
- NO-ISSUE: Bump cloud.google.com/go/compute from 1.6.1 to 1.23.1 (#5601) #5601
- NO-ISSUE: Bump github.com/pierrec/lz4 (#5600) #5600
- NO-ISSUE: vendor current master (#5594) #5594
- NO-ISSUE: fixing dependabot issues (#5595) #5595
- Bump OCP versions: 4.13, 4.14 (#5593) #5593
- Update RHTAP references (#5590) #5590
- MGMT-16001: Sanitize reclaim daemonset name (#5579) #5579
- Bump OCP versions: 4.11, 4.12, 4.13 (#5586) #5586
- MGMT-13198: Add API endpoint to create assisted installer event (#5578) #5578
- MGMT-15980: added missing Create op to infraenvs Webhook (#5569) #5569
- Update RHTAP references (#5573) #5573
- NO-ISSUE: use kubectl 1.28.2 (#5572) #5572
- Update RHTAP references (#5570) #5570
- MGMT-15949: fix missing ImageSetRef validation (#5552) #5552
- Revert “NO-ISSUE: Set default ENABLE_SKIP_MCO_REBOOT: false (#5560)” (#5566) #5560
- MGMT-15572 Hold installation when reconcile-pause annotation is set on cluster deployment (#5549) #5549
- NO-ISSUE: Fix console output in ZTP jobs (#5562) #5562
- NO-ISSUE: add console output for ztp (#5550) #5550
- Bump OCP versions: 4.14 (#5559) #5559
- Full changelog
- NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) #747
- MGMT-15902: Trigger event that notifies the number of reboots once the node installation is completed (#744) #744
- NO-ISSUE: Bump the go-dependencies group with 1 update (#745) #745
- NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) #743
- NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) #742
- MGMT-16039: upgrade to golang 1.20 (#741) #741
- NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) #738
- OCPBUGS-16482: Update dependencies to remove goproxy dependency (#701) #701
- MGMT-15984: Assisted installer doesn’t freeze and unmount file systems used for overwriting os image (#737) #737
- Full changelog
- NO-ISSUE: Bump the go-dependencies group with 2 updates (#623) #623
- NO-ISSUE: Bump the go-dependencies group with 2 updates (#621) #621
- MGMT-16039: upgrade to golang 1.20 (#619) #619
- MGMT-16011: Reduce agent image size (#617) #617
- NO-ISSUE: Bump the go-dependencies group with 1 update (#618) #618
- Full changelog
- STOR-1389: Rebase to v1.2.1 for OCP 4.15 #41
- bugfix: remove grep -v grep commands in mount output #821
- cleanup go.mod replace #819
- cleanup: change connector pid file to /var/run/csiplugin #820
- get rid of k8s.io/kubernetes #816
- fix: efc metrics not collected #818
- bugfix: Fix mountpoint judge condition #814
- metric: only enable when related driver is enabled #808
- bugfix: fix pov topology key #813
- Feature/prefect pov driver usage #812
- Export LVM VG size/free metrics #807
- fix(nas): skips mounting if target path already mounted #806
- Bugfix/fix dfs pov token #805
- BugFix: fix bdf logics error #804
- feature: support disk auto detected #803
- ossfs update to v1.88.1 #802
- bugfix: install different ossfs version for anolis7/8 #796
- chore: Add disk controller dockerfile #800
- nas: upgrade alinas rpm packages #799
- feature: support pov driver #798
- chore: slice replace loop #790
- chore: fmt modify #791
- fix(nas): subpath quota value should be rounded up to the nearest GiB #797
- ensure openssl has installed for ossfs #794
- add retry logic for ossfs install and upgrade for entrypoint of amd64 #789
- fix(nas): properly cancel subpath dir quota #785
- fix(nas): don’t extract nas capacity statistics from system mount point #786
- fix(dbfs): dbfs not umounted if mount point corrupted #784
- bug: Fix nil volumeattributes error #783
- skip installing csiplugin-connector through env configuration #781
- Feature/fix non official ecs cases #778
- Start vfhp hotplugin & Fix shared disk yaml #777
- Bug: repair vfhp install error #773
- Chore/change vfhp address #772
- Chore: Add vfhp rpm install #771
- Improve lvm gc log when VG not found #770
- fix metrics bug for nfs multi mountpoint #769
- Garbage collecting for lvm/loopdevice volumes #766
- Chore: Add xfs custom mkfs args #765
- Features/ customized provisioned iops setting for cloud_auto disk #761
- fix data race in metrics server #764
- Chore: adjust cluster role #762
- Bump (golang.org/x/net): to address CVE-2022-41723 #763
- Fixed format issue of KMS encrypted disk #759
- fix dynamic cpfs-nfs can’t remove pv bug #760
- add nfsclient ProtocolServer #758
- add cpfs mount protocol #757
- feature: Support vhpf #756
- add yum reinstall #755
- support cpfs2.0 native client and fix installing ossfs failed by gpu alinux3 #753
- Bugfix/provider parse #752
- bugfix: Fix nvme mount #751
- Ensure loopdevice manager #750
- endpoint shell until modify for loop #749
- Full changelog
- HOSTEDCP-1242, HOSTEDCP-1243: Rebase to latest upstream master #43
- Upgrade grpc/http to fix CVE-2023-44487 #530
- OCPBUGS-16488: rebase to latest upstream master #42
- Revert “OCPBUGS-16488: rebase to latest upstream master” #37
- OCPBUGS-16488: rebase to latest upstream master #35
- Update golang.org/x/net to v0.17.0 #531
- proxy-server: strengthen the Backend interface. #525
- Fix host:port joining #527
- Refresh reviewers. #526
- Refactor integration tests to prepare for proxy-server & agent skew testing #520
- Pick up CVE fixes (bump to golang 1.19.13). #522
- update information about versions and releases #518
- proxy-server: Wrap Backend more completely. #514
- update genproto #508
- fix: metric frontend_write_duration_seconds has wrong value #511
- add myself as reviewer and approver #507
- agent: smarter readiness check #485
- bump k8s dependencies to 1.27 #505
- Fix: ciphersuites length equals to 1(expecting 0) when using the default value. #504
- golangci-lint: update due to high resource usage bug #506
- Enable coverage measurement #497
- proxy-server: change –delete-existing-uds-file default to true. #498
- chore: pkg imported more than once #500
- chore: remove refs to deprecated io/ioutil #499
- Quiet more error logs on stream canceled. #494
- Fixed: use dl.k8s.io, not kubernetes-release bucket #492
- Bump golang from 1.19.6 to 1.19.9 (CVE fixes) #490
- Use distroless #488
- Fix admin bind address description #489
- proxy-server: pure rename (frontends vs. established). #486
- Move shared definitions from pkg/agent to proto/header. #484
- Trivial rename: clarify test-only client. #483
- Prevent docker build flakes. #481
- bump prometheus/client_golang to 1.11.1 #487
- Makefile: declare more ‘go build’ source dependencies. #482
- fix: error propagation in http-connect mode #475
- konnectivity-client: code cleanup. #456
- test: fix race condition #479
- proxy-server: improve connection cleanup on client cancel. #467
- proy-server: always emit backends count metric #471
- Concurrent cancelled requests test #459
- Add server “established_connections” metric. #470
- Update server and agent images to Go version 1.19.6 #469
- Update golang.org/x/net to v0.7.0 #468
- proxy-server: fix removeFrontend race. #466
- Block Proxy from returning on both go-routines exiting #427
- konnectivity-server: synchronization cleanup. #463
- proxy-server: synchronization improvements #460
- konnectivity-client: guard single use tunnels from duplicate dial. #452
- Update dependencies to patch CVEs #457
- Cosmetic: avoid “ctx” naming confusion. #414
- Metrics bugfix: restore ObservePacket. #453
- konnectivity-client: add Send and Recv wrappers to simplify metrics. #451
- proxy-server: add a dial failure metric reason for “no agent”. #450
- Trim unused proto. #424
- Update RELEASE.md to clarify master vs. release-0.0 branch. #445
- Agent: increase log quality. #448
- Trim obsolete docker images (test-only). #446
- Update server and agent to 1.18.9 #436
- konnectivity-client: add a client connections gauge metric. #441
- Fix broken
make lint. #442
- Makefile: fix
make gen. #440
- konnectivity-client: add dial failures metric by reason. #438
- Add more pprof functions to server and agent’s admin server #435
- Upgraded our GPRC and ProtoBuf libraries. #434
- Fix segfault on empty packet #422
- More metrics #423
- Update go.mod to be more conservative. #432
- Fixed admin port listen code. #433
- Add rudimentary data transfer benchmark tests #425
- Agent: log dialID in DIAL_REQ handling. #421
- Adjust server log verbosity to improve signal:noise #420
- Improve dial response logging #419
- Clean up konnectivity-client go.mod #418
- update owners #416
- Adding tests for Agent options and validation. #408
- Dial metrics #400
- ServerID & AgentID logging cleanup #409
- Improve server logging, especially around initial dial #402
- readme updated with the latest link #407
- Adding basic test for server options. #401
- Update goleak library, and remove some unused dependencies #405
- Simple konn-client cleanups #343
- Ensure grpc tunnel is closed on dial failure #398
- Added goroutine labels to goroutine calls. #392
- update go modules #381
- Fix GetDialFailureReason #395
- Dial Timeout testing improvements #385
- Make proxy server bind addresses configurable #363
- Fix race conditions in client tests #391
- Adjust proxy-server agent KeepaliveEnforcementPolicy #390
- Expose dial failure reasons #389
- Handle broken dial in agent. #386
- Log dial errors on the agent as well as the server #384
- Test cleanup #380
- Fix HA test to be re-runnable #374
- Update to go 1.17.12 to fix various security issues #371
- Fix proxyToRemote early return to be safe. #368
- WarnOnChannelLimit improvements #369
- Fix use of closed network connection errors in agent #364
- Reduce server error logs logged for each connection #365
- Introduce CreateSingleUseGrpcTunnelWithContext to replace #360
- Full changelog
- OCPBUGS-22544: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #291
- STOR-1276: Enable support for mounting volumes with SELinux context #264
- Bump k8s.io/apiextensions-apiserver from 0.28.2 to 0.28.3 #289
- Bump k8s.io/client-go from 0.28.2 to 0.28.3 #285
- OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #290
- Full changelog
- STOR-1394: Rebase v1.29.0 for OCP 4.15 #51
- OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
- chores: format go.mod and bump dependencies #1961
- chore(deps): bump github.com/kubernetes-csi/csi-proxy/client from 1.1.2 to 1.1.3 #1951
- feat: enable HonorPVReclaimPolicy in csi-provisioner #1956
- chore: update max data disk count table #1955
- chore(deps): bump actions/checkout from 3 to 4 #1954
- chore(deps): bump github.com/jongio/azidext/go/azidext from 0.4.0 to 0.5.0 #1948
- doc: update new chart versions #1946
- cleanup: windows mount code #1940
- chore(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 #1937
- chore: upgrade azure cloud provider lib #1945
- fix: use env var in powershell cmdlet #1939
- fix: remove cross region snapshot copy 5s delay #1938
- chore(deps): bump github.com/kubernetes-csi/csi-proxy/client from 1.0.1 to 1.1.2 #1934
- feat(helm) Allow setting an alternate name of the configmap for the azure credential path #1935
- chore(deps): bump github.com/kubernetes-csi/external-snapshotter/client/v4 from 4.1.0 to 4.2.0 #1931
- doc: add permissions for CSI driver controller #1932
- chore(deps): bump github.com/container-storage-interface/spec from 1.7.0 to 1.8.0 #1930
- chore(deps): bump golang.org/x/net from 0.10.0 to 0.14.0 #1927
- chore(deps): bump google.golang.org/protobuf from 1.28.1 to 1.31.0 #1923
- cleanup: update new chart versions and remove deprecated versions #1926
- chore: update max data disk count table #1916
- fix: volume cloning issue on Windows node #1909
- feat: add otel trace instrumentation on gRPC calls in helm chart #1912
- cleanup: use InClusterConfig by default on Windows node #1902
- chore: update max data disk number table #1903
- cleanup: update new chart versions and remove deprecated versions #1901
- fix: PerformancePlus setting issue #1894
- chore: pkg imported more than once #1892
- chore(deps): bump github/codeql-action from 1 to 2 #1890
- fix: missing log when IMDS is not available on windows node #1885
- fix: CVE-2023-2431 #1886
- cleanup: update new chart versions and remove deprecated versions #1884
- chore(deps): bump actions/checkout from 2 to 3 #1883
- doc: cut v1.28.0 release #1878
- Full changelog
- OCPBUGS-8764: Merge upstream #315
- 🌱 Fixing ensure-go script to allow go versions greater than MINIMUM_GO_VERSION #1405
- :seedling: Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 #1401
- :seedling: Bump github.com/golangci/golangci-lint from 1.54.2 to 1.55.0 in /hack/tools #1400
- 🌱 Adding go work files in gitignore #1404
- 🌱 Add e2e basic operations test #1389
- :sparkles: Pass preprovisioningNetworkData to Ironic #1380
- :bug: Prevent hosts from getting into infinite power-off loops #1356
- Merge upstream #314
- ⚠️ Add “empty” profile and officially deprecate hardware profiles #1381
- 🌱 Bump golang to v1.20.10 #1397
- 🌱 Add e2e external inspection test #1382
- :seedling: Bump golang.org/x/net from 0.14.0 to 0.17.0 in /hack/tools #1391
- Bump golang.org/x/net from 0.12.0 to 0.17.0 in /test #1390
- :seedling: Bump golang.org/x/net from 0.14.0 to 0.17.0 #1392
- 📖 Add test trigger description for diffrerent branches in README #1388
- :seedling: Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 #1379
- :seedling: Bump github/codeql-action from 2.21.7 to 2.21.9 #1377
- :seedling: Bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 #1378
- :seedling: Bump actions/checkout from 4.0.0 to 4.1.0 #1376
- OCPBUGS-21736: Uplift x/net to v0.17.0 #313
- Full changelog
- NO-JIRA: Drop the experimental info for registry login and must-gather commands #1594
- Updating content type variable name for CLI docs generation #1591
- WRKLDS-874: oc whoami: Ask from selfsubjectreview and fallback to internal oauth #1588
- moved cert sharing library #1532
- OCPBUGS-21612: Use mutex to prevent concurrent writes #1589
- OCPBUGS-20500: Add directive example to kubelet-restart command #1586
- pkg/cli/admin/upgrade/status: Add update duration #1583
- oc/*: gracefully fail when user group is not configured #1585
- create/identity: fail gracefully when no user API exists #1582
- pkg/cli/admin/update: Add tech-preview ‘oc adm upgrade status’ #1554
- OCPBUGS-20500: Fix some commands incorrect examples #1581
- OCPBUGS-9340: pkg/cli/admin/upgrade: Warn on unrecognized subcommands #1557
- Full changelog
- CCO-430: Use per-project custom roles instead of per-cluster custom roles #611
- snyk: exclude vendor/ #613
- OCPBUGS-22369: explicitly set azure oidc bucket to allow public blob access #610
- Upgrade golang/x/net for CVE-2023-39325 #609
- OCPBUGS-21745: azure create-managed-identites to add cloud controller manager to network resource group #607
- Removing andrew from OWNERS #606
- Full changelog
- OCPCLOUD-2195: rebase on upstream 1.28.0 release #265
- CA - 1.28.0 k/k Vendor Update #6058
- update RBAC to only use verbs that exist for the resources #5927
- docs: add KEP to add nanny configuration automatic reload. #6015
- feat(hetzner): use less requests while waiting for server create #6039
- fix: Broken links to testgrid dashboard #6036
- Allow using an externally created secret instead of using the one the Helm chart creates #6016
- Fix Doc with External gRPC #6047
- Add details to consider section to VPA in-place updates AEP #6044
- Add fetch reservations in specific project #6051
- fix: scale down broken for providers not implementing NodeGroup.GetOptions() #6038
- feat: add prometheus basic auth in the VPA recommender #6005
- Set batch size to target size for atomically scaled groups #6034
- Added s390x support #6020
- Fixed the hyperlink for Node group auto discovery. #6022
- VPA: Update ResourcePolicy description and limit control README #6026
- Bump golang from 1.20.7 to 1.21.0 in /vertical-pod-autoscaler/builder #6030
- Clean up the NodeGroupConfigProcessor interface and remove the MaxNodeProvisioningTimeProvider interface. #6011
- API for KEP-4831: Control VPA eviction behavior based on scaling direction and resource #5176
- Revert “Fix nil pointer exception for case when node is nil while processing …” #6014
- Fix broken hyperlink #5987
- Add requirement for Custom Resources to VPA FAQ #5979
- chore(deps): update vendored hcloud-go to 2.0.0 #5961
- fix: balancer RBAC permission to update balancer status #5964
- Fix nil pointer exception for case when node is nil while processing … #6003
- Don’t pass nil nodes to GetGpuInfoForMetrics #6013
- Support ZeroOrMaxNodeScaling node groups when cleaning up unregistered nodes #6002
- Bump golang from 1.20.6 to 1.20.7 in /vertical-pod-autoscaler/builder #6009
- Add error code for invalid reservations to GCE client #6006
- Clarify Eviction Control for Pods with multiple Containers #5989
- Add a metric to observe nodes pending deletion after a finished scale-down phase #5970
- Remove ChangeRequirements with
OrEqual from EvictionControl enhancement proposal #5981
- Add PostPackingFunc to be run at the end of the estimation logic #5974
- Update Cluster Autoscaler vendor to K8s 1.28.0-beta.0 #5980
- Fixed
go:build tags for ovhcloud #5941
- Update the
go:build tag for missing cloud providers. #5943
- Add BigDarkClown to patch releases schedule #5978
- Bump golang from 1.20.5 to 1.20.6 in /vertical-pod-autoscaler/builder #5948
- Enable parallel drain by default. #5976
- CA - AWS Cloudprovider OWNERS Update #5971
- feat: support custom scheduler config (without extenders) #5708
- Adapt limitations for Pods without controller #5944
- fix: don’t clean
CriticalAddonsOnly taint from template nodes #5838
- Fix: Do not inject fakeNode for instance which has errors on create #5939
- Fix TestBinpackingLimiter flake #5956
- Use fixed version of golang image #5954
- Re-introduce asynchronous node deletion and clean node deletion logic. #5945
- fix: setting maxEmptyBulkDelete, and maxScaleDownParallelism to be the same value #5890
- feat: set
IgnoreDaemonSetsUtilization per nodegroup for AWS #5672
- Refactor autoscaler.go and static_autoscalar.go to move declaration o… #5933
- fix: CA on fargate causing log flood #5887
- Azure: Bugfix: Check PowerState before setting OutOfResources on instance #5767
- Add ClusterStateRegistry to the AutoscalingContext #5905
- Implement configurable thresholds for threshold based estimator #5917
- Remove unneeded node groups regardless of scale down being in cooldown. #5901
- Add subresource status for vpa #5911
- Record all vpa api versions in recommender metrics #5864
- feat(metrics): add metrics to observe where time is consumed in scale up #5813
- Add support for scaling up with ZeroToMaxNodesScaling option #5826
- Quote temp folder name parameter to avoid errors #5913
- Add BigDarkClown to Cluster Autoscaler approvers #5915
- Add atomic scale down option for node groups #5695
- Include short unregistered nodes in calculation of incorrect node group #5894
- Replace
BuildTestContainer with use of builder #5896
- Update VPA vendor #5904
- update agnhost image to pull from registry.k8s.io #5895
- Revert “Add subresource status for vpa” #5897
- Sort nodegroups in order of their ID #5893
- Add subresource status for vpa with e2e fix #5766
- Cluster Autoscaler: add more logging for balancing similar node groups #5835
- cluster-autoscaler: support Brightbox image pattern #5764
- chore: remove unused func scaleFromZeroAnnotationsEnabled #5868
- Minor tweaks after preparing VPA 0.14.0 release. #5878
- Add voelzmo to VPA reviewers #5879
- Apply fixes to in place support VPA AEP #5877
- Bump default VPA version to 0.14.0 #5880
- add cluster-autoscaler name and version to the user agent #5873
- Explicitly create and remove buildx builders for VPA components #5867
- Addition of BinpackingLimiter interface #5810
- Mention logs from #5862 in release instructions #5866
- Fix zonal GCE outage breaking CA when only some of the zones are failed #5853
- Execute git commands to show the state of local clone of the repo. #5862
- Clarify and simplify the “build and stage images” step. #5863
- Update vendor to Kubernetes 1.28.0-alpha.2 #5861
- Bump version to 0.14.0 as a preparation for release. #5860
- When comparing PodSpec semantically, drop projected volumes for init containers #5852
- Bump golang from 1.20.4 to 1.20.5 in /vertical-pod-autoscaler/builder #5843
- Update VPA scripts to use v1. #5837
- Modified the VPA content for the helm chart and Bump the CA image to 1.27.2 #5763
- Fix: correcting RBAC permission in oci oke examples #5845
- AEP for support of in-place updates for VPA #5755
- Updated the owners of civo cloudprovider #5841
- Add whitespace in comments and lists #5830
- chore: replace
github.com/ghodss/yaml with sigs.k8s.io/yaml #5822
- Skip healthiness check for non-existing similar node groups #5824
- KEP for allowing Addon Resizer 1.8 to scale based on container count #5547
- Fixed Typo and Trailing-whitespace #5823
- fix(volcengine): don’t build all providers when volcengine tag exists #5819
- Added the RBAC Permission to Linode. #5816
- CA - Correct Cloudprovider PR labelling to area/provider/<provider name> #5818
- Support pool wise config #5743
- Added AEP for multi-dimensional pod autoscaler #5342
- Move the Mig instance refresh time to GceCache #5800
- Export
CalculateUtilizationOfResource for cloudprovider usage. #5812
- Fix typo at balancer.md #5811
- CA - Label Cloudprovider implementation PRs #5745
- Recalculate similar node groups for the best scale-up option #5802
- Use TLS 1.2 in VPA Admission Webhook #5803
- Change magnum to use control-plane role #5776
- docs(ca/faq): Include examples of local volumes and volumes not considered local #5799
- Update version compatibility for CA. #5798
- helm: enable Cluster API machinepool support #5768
- Snapshot actuation status before refreshing cache #5777
- Update ACK help doc link in README.md #5791
- Move mirror pods check to a dedicated rule #5689
- fix: empty status configmap leads to nil ptr error #5752
- Add preview EC2 instance type p4de.24xlarge #5773
- Track lifecycle and skip terminating already terminating instances #5411
- Fix similar node group calculation for non-existing node groups #5760
- bugfix: fix race condition between CA fetching list of scheduled pods… #5705
- Switch to docker buildx for cross-platform builds #5746
- Fix scale-up similar node group computation #5750
- Refactor taints.go to support taint values #5753
- Feature: parallel scale up #5731
- CA: Add pod namespace when logging why scaleup wasn’t possible #5740
- Update OWNERS #264
- Full changelog
- Revert #239 “OCPCLOUD-2167: Test unhealthy node cases” #262
- OSASINFRA-3242 [vendoring] new OpenShift API for OpenStack Block Devices #255
- OCPCLOUD-2167: Test unhealthy node cases #239
- OCPBUGS-17851: Reimplement “OCPCLOUD-2130: Add subnet to Azure FD, fix for optional fields in FD” #234
- SPLAT-1211: recognize topology and failure domains represented by the infrastructure resource #250
- Update OWNERS #253
- OCPBUGS-21863: webhooks: set min version TLS 1.2 #252
- Full changelog
- Update OWNERS #26
- OCPBUGS-17289, OCPBUGS-21650, OCPCLOUD-2215: Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.6.0 (a8f5386) into main #25
- :seedling: Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4 in /hack/chart-update #244
- ✨ Add support for addon providers #219
- 🌱 Bump k8s.io/* and golang.org/x/oauth2 modules manually #241
- :seedling: Bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.2 #235
- :seedling: Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/chart-update #232
- :seedling: Bump github.com/joelanford/go-apidiff from 0.1.0 to 0.7.0 in /hack/tools #226
- :seedling: Bump sigs.k8s.io/cluster-api from 1.5.0 to 1.5.1 in /test #237
- :seedling: Bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.2 in /test #238
- :seedling: Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 in /hack/chart-update #231
- :book: Fix typo in helm command README, add recommended timeout value #240
- :seedling: Bump actions/checkout from 3 to 4 #239
- :seedling: Bump gotest.tools/gotestsum from 1.6.4 to 1.10.1 in /hack/tools #225
- :seedling: Bump sigs.k8s.io/controller-tools from 0.12.1 to 0.13.0 in /hack/tools #224
- :seedling: Bump the kubernetes group in /test with 1 update #236
- :seedling: Bump github.com/onsi/ginkgo/v2 from 2.9.1 to 2.12.0 in /hack/tools #223
- :seedling: Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0 #221
- ⚠️ Use v1alpha2 manifests in the helm chart #220
- 🌱 Add dependabot groups. Allow additional patch updates #230
- :seedling: Bump helm.sh/helm/v3 from 3.11.2 to 3.12.3 in /hack/chart-update #227
- :seedling: Bump github.com/google/go-github/v50 from 50.1.0 to 50.2.0 in /hack/chart-update #229
- :seedling: Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0 in /test #228
- 🌱 Add missing dependabot configs #222
- ✨ ⚠️ Introduce v1alpha2 API #190
- 🌱 Update index.yaml for v0.5.1 #218
- 🐛 Fix imagePullSecrets bug #216
- 📖Document setting up new release branch jobs in release.md #214
- 🌱 Use helm chart for cert-manager installation in e2e tests #215
- 🐛 Add generate workflow for full-chart-install test case #212
- 🐛 Fix incorrect fieldSpecs paths #211
- 🌱 Add missing building tags for the test framework #210
- ✨ Update index.yaml #209
- 🌱 Refactor tests to be more readable and have better logging #207
- 🌱 Add a preflight check to validate core provider name #206
- ✨ Create deployment template for helm chart #199
- ✨Inject additional manifests on provider installation/upgrade #203
- 🌱 Split out test modules from capi operator modules #205
- 🐛 Support installing providers with custom names in air-gapped environments #202
- 🌱 add e2e tests for compressed manifests in air-gapped environments #201
- 📖 update docs for v0.5.0 release #200
- ✨ Initialize operator clusterctl plugin #196
- 🌱 Bump CAPI to v1.5.0 #197
- 🐛 Compress components manifests if they don’t fit in the configmap #192
- :seedling: bump github.com/onsi/gomega from 1.27.8 to 1.27.10 #195
- ✨ Create operator CRs based on helm values #191
- 🌱 Bump Cluster API to v1.5.0-rc.0 #186
- 🌱 compile capi operator binary only once in the Dockerfile #193
- ✨Bump go version to v1.20.4 #187
- ✨ Add cert-manager as a dependency to helm-chart #144
- :seedling: bump golang.org/x/oauth2 from 0.9.0 to 0.10.0 #185
- ✨Fetch latest provider version if it’s not set in the spec #180
- 🌱 build(deps): bump google.golang.org/grpc from 1.50.1 to 1.53.0 in /hack/chart-update #184
- 🌱 Enable nestif linter again #182
- 🌱 Update helm chart index.yaml #181
- Full changelog
- Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
- Revert #300 “API-1666: add image pull secret cleanup controller” #313
- API-1642: add image pull secret cleanup controller #300
- API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
- OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
- Full changelog
- manifests: Simplify filenames for default runlevel #101
- Makefile: Drop yq prerequisite from ‘manifests’ target #103
- OCPBUGS-22457: manifests/0000_50_cluster-platform-operator-manager_07-aggregated-clusteroperator: Drop namespace #100
- Full changelog
- OCPBUGS-21906: Bumps x/net + upstream sync november 2023 #128
- build(deps): bump google.golang.org/grpc from 1.50.1 to 1.56.3 #963
- build(deps): bump the golang group with 3 updates #970
- dependabot: batch updates #961
- fix workflow warnings #968
- fix lint errors #967
- build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.28.0 #949
- build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 #955
- build: Use POSIX sh for shell scripts #948
- build(deps): bump golang.org/x/sys from 0.10.0 to 0.13.0 #952
- build(deps): bump actions/checkout from 3 to 4 #945
- build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.11.1 #946
- build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0 #937
- Create IPAM files with 0600 permissions #950
- ci(lint) extend timeout to 5 min #942
- vrf: fix route filter to use output iface #927
- Fix race conditions in DHCP test #913
- Review code using go-iptables module #924
- Two minor testsuite fixes #918
- build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 #926
- spoofcheck: Make use of go-nft’s ApplyConfigEcho() #902
- test: install binaries using
go install #929
- build(deps): bump alpine from 3.17 to 3.18 in /.github/actions/retest-action #897
- build(deps): bump golang.org/x/sys from 0.7.0 to 0.9.0 #911
- build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.11.0 #912
- Add routes propagation for VRF plugin #874
- add ability to set tx queue len #914
- github: remove stale issue cleanup #900
- tap: allow for a tap device to be created as a bridge port #832
- Full changelog
- OCPBUGS-21829: Merge upstream #133
- Bump Go and golang.org/x/… to recent versions #527
- chore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 #523
- feat: propagate default host configuration files to csi node #521
- chore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 #520
- chore(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 #519
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 #518
- chore(deps): bump golang.org/x/net from 0.15.0 to 0.16.0 #515
- fix: flag panic if a flag is defined after being set #516
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 #513
- fix: increase snapshot timeout as 20min #512
- chore(deps): bump github.com/onsi/gomega from 1.27.10 to 1.28.0 #510
- fix: CVE-2021-25743 #511
- chore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.2 #506
- OCPBUGS-21829: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #131
- Full changelog
- OCPBUGS-20560: [4.15] Rebase openshift/etcd to 3.5.10 #224
- Bump bbolt to 1.3.8 for release-3.5 #16833
- Upgrade gRPC-go to 1.58.3 #16790
- etcdserver: add cluster id check for hashKVHandler #16637
- remove stack log when restore snapshot #16070
- : upgrade gRPC-go to v1.52.0 #16781
- Bump grpc-go to1.47 (and fix the connection-string format) #16625
- Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin #16750
- Bump golang.org/x/net to v0.17.0 #16743
- Bump go to v1.20.10 #16745
- Upgrade go version to 1.20.9 #16730
- fix:Ensure that go version is only defined in one file for release-3.5 #16562
- Fix panic in etcd validate secure endpoints #16565
- Backport removing obsolete http 1.0 version for cmux tests #16568
- dependency: bump golang to 1.20.8 #16555
- Backport redirecting cmux test metrics data into file to reduce output #16550
- api: fix duplicate gateway url issue #16490
- add a verification on the pagebytes which must be > 0 #16476
- tests: Backport recent test flake fixes #16444
- Backport expose socket options #16435
- Backport update to golang 1.20 minor release #16401
- Add UnsafeReadScheduledCompact and UnsafeReadFinishedCompact #16262
- Backport Makefile recipes for common test commands #16340
- Backport “bump go version to 1.19.12” to release-3.5 #16352
- Backport #16272 to 3.5 #16311
- Backport fix to e2e release version identifcation #16280
- Backport #14368 to v3.5 #16270
- etcdserver: backport check scheduledCompactKeyName and finishedCompac… #16068
- Backport #13577 to 3.5 #16241
- clientv3: create keepAliveCtxCloser goroutine only if ctx can be canc… #16204
- Bump go version to 1.19.11 to fix CVE GO-2023-1878 #16227
- [Backport 3.5] etcdutl: fix db double closed #16201
- clientv3: remove v3.WithFirstKey() in Barrier.Wait() #16188
- Revert backport of arm64 scheduled workflows #16151
- Adding optional revision bump and mark compacted to snapshot restore #16165
- Add e2e-arm64.yaml and Tests-arm64.yaml to release-3.5 #16119
- Early exit auth check on lease puts #16019
- etcdserver: fix corruption check when server has just been compacted #16048
- Backport .github/workflows: Read .go-version as a step and not separate workflow #16088
- cherry-pick #16031 to release-3.5 #16032
- replace gobin with go install #16039
- Backport updating go to latest patch release 1.19.10 #16033
- naming/endpoints: backport of #15021, fix endpoints prefix bug #15939
- grpcproxy: fix memberlist results not update when proxy node down #15907
- Full changelog
- OCPCLOUD-2185: Merge https://github.com/kubernetes/cloud-provider-gcp:master (41a7bc0) into master #36
- Update to golang version 1.20.10 #628
- Add vinayakankugoyal to approver list. #629
- Add sdmodi to approvers list #626
- Don’t use SSA in gcp-controller manager PodGC #619
- Support owner references that point directly to instanceGroupManagers. #625
- Skip the VPC validation for XPN clusters in GNP controller #623
- push-images now honors component names in tags #614
- add tags to cloudbuild job to make it easier to find in the gcp console #620
- Add Exponential Backoff on the ListReferrers GCE API calls. #617
- Update readme with information about CCM #613
- gcp-controller: don’t make assumptions on PodCIDRs #610
- ipam: CloudAllocator does not require service or cluster cidr #608
- cloudAllocator ipv6 only ipam #607
- Register nodeipam controller under canonical name #606
- Removed unnecessary cidr validation. #594
- Fix ILB deletion by checking for finalizer if annotation is removed #598
- Use simpler build in cloudbuild #600
- Bump go to 1.20.8 #604
- Remove the old DirectPath v1 mode as rollback is no longer needed. #602
- Add Taahir Ahmed (ahmedtd) as reviewers and approvers of gcp-controller-manager #514
- Simple build scripts for cloud-controller-manager #599
- add stderr to returned err from cmd.Run for auth plugin #593
- Use LabelTopologyZone rather then deprecated LabelFailureDomainBetaZone #597
- Improve debug logging around instance group management #592
- Bump Go version to 1.20.7 #595
- Remove checks for kubelet version >= 1.7.2 #533
- Bump kubernetes libraries to 1.28.0 #591
- L4 LoadBalancers - ignore services that specify LoadBalancerClass #586
- Add GCPFirewall CRD v1 API #583
- Fix failing tests due to CDN redirects #585
- update go version to 1.20.6 #584
- Update OWNERS #39
- Full changelog
- OCPCLOUD-2218: UPSTREAM: 1056: fix: update metadata file to add the 1.5 releases #208
- OCPCLOUD-2218: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.5.0 (cb295a4) into master #207
- update CAPI to 1.5.3 #1055
- build(deps): Bump google.golang.org/api from 0.147.0 to 0.148.0 #1051
- build(deps): Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 #1049
- build(deps): Bump google.golang.org/grpc from 1.58.3 to 1.59.0 #1050
- update k8s version for testing and go to 1.20.8 #1018
- build(deps): Bump cloud.google.com/go/container from 1.26.0 to 1.26.1 #1046
- build(deps): Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 #1044
- build(deps): Bump google.golang.org/api from 0.146.0 to 0.147.0 #1048
- build(deps): Bump cloud.google.com/go/iam from 1.1.2 to 1.1.3 #1043
- build(deps): Bump cloud.google.com/go/compute from 1.23.0 to 1.23.1 #1042
- build(deps): Bump google.golang.org/grpc from 1.58.2 to 1.58.3 #1045
- build(deps): Bump google.golang.org/api from 0.143.0 to 0.146.0 #1039
- build(deps): Bump golang.org/x/net from 0.15.0 to 0.16.0 #1037
- build(deps): Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 #1036
- build(deps): Bump golang.org/x/crypto from 0.13.0 to 0.14.0 #1035
- build(deps): Bump golang.org/x/mod from 0.12.0 to 0.13.0 #1038
- build(deps): Bump google.golang.org/api from 0.142.0 to 0.143.0 #1032
- build(deps): Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 #1033
- build(deps): Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 #1030
- build(deps): Bump google.golang.org/api from 0.141.0 to 0.142.0 #1029
- build(deps): Bump google.golang.org/grpc from 1.58.1 to 1.58.2 #1028
- build(deps): Bump google.golang.org/grpc from 1.58.0 to 1.58.1 #1021
- build(deps): Bump google.golang.org/api from 0.139.0 to 0.141.0 #1022
- build(deps): Bump cloud.google.com/go/container from 1.25.0 to 1.26.0 #1020
- Bump google.golang.org/api from 0.138.0 to 0.139.0 #1014
- Bump google.golang.org/grpc from 1.57.0 to 1.58.0 #1015
- Bump golang.org/x/net from 0.14.0 to 0.15.0 #1013
- Support master authorized network config #1004
- chore: approve actions on ok-to-test #1010
- Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0 #1009
- Bump google.golang.org/api from 0.136.0 to 0.138.0 #1007
- Bump cloud.google.com/go/container from 1.24.0 to 1.25.0 #1006
- chore: bump CAPI to v1.5.0 #985
- Add gcloud auth in user kubeconfig secret #924
- Bump google.golang.org/api from 0.134.0 to 0.136.0 #1001
- Bump cloud.google.com/go/iam from 1.1.1 to 1.1.2 #1002
- Bump golang.org/x/net from 0.12.0 to 0.14.0 #999
- Bump golang.org/x/crypto from 0.11.0 to 0.12.0 #998
- Bump google.golang.org/api from 0.133.0 to 0.134.0 #993
- Bump cloud.google.com/go/compute from 1.22.0 to 1.23.0 #994
- Bump google.golang.org/grpc from 1.56.2 to 1.57.0 #995
- Bump cloud.google.com/go/container from 1.23.0 to 1.24.0 #986
- Bump github.com/onsi/gomega from 1.27.8 to 1.27.10 #989
- Bump google.golang.org/api from 0.131.0 to 0.133.0 #987
- Bump cloud.google.com/go/compute from 1.21.0 to 1.22.0 #988
- Do not ignore coverage.go #984
- Bump google.golang.org/api from 0.130.0 to 0.131.0 #983
- Update OWNERS #201
- Full changelog
- OCPBUGS-22600: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #94
- STOR-1276: Enable support for mounting volumes with SELinux context #81
- Add clone test for gcp-pd-csi-driver #92
- OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #93
- OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #86
- Full changelog
- OCPBUGS-16922: Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions #1790
- Update REBASE.openshift.md #1788
- STOR-1278: Fixes for SELinux mount context metrics #1771
- Update to Kubernetes v1.28.3 #1776
- Automated cherry pick of #121142: Modify test PVC to detect concurrent map write bug #121184
- Automated cherry pick of #119732: Fix to honor PDB with an empty selector
{} #121131
- Automated cherry pick of #121224: Register UnauthenticatedHTTP2DOSMitigation into kube #121225
- Automated cherry pick of #121203: Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 #121204
- Prevent rapid reset http2 DOS on API server (disabled by default) #121196
- Automated cherry pick of #120814: Fix 120758 - prevent cache Load on uninitialized spec #121040
- Bump images, dependencies and versions to go 1.20.10 #121153
- Automated cherry pick of #120595: Mark a volume as uncertain-attached after detach error #121079
- .: bump golang.org/x/net to v0.17.0 #121128
- Automated cherry pick of #121015: Add nil checks for hpa object target type values #121038
- Automated cherry pick of #121008: Make a certain ipv4-vs-ipv6 config error non-fatal, for #121029
- Bump images, versions and deps to use Go 1.20.9 #121025
- Automated cherry pick of #120784: Use local isCgroup2UnifiedMode consistently #120924
- Automated cherry pick of #120649: cronjob controller: ensure already existing jobs are added to #120809
- kmsv2: reload metrics bug fix backport #120544
- Automated cherry pick of #119317: change rolling update logic to exclude sunsetting nodes #120785
- Automated cherry pick of #120777: reintroduce resourcequota.NewMonitor #120795
- Automated cherry pick of #120577: Increase range of job_sync_duration_seconds #120667
- Automated cherry pick of #120623: sync Service API status rest storage #120654
- Automated cherry pick of #120334: scheduler: start scheduling attempt with clean #120535
- .: bump govmomi to v0.30.6 #120768
- Automated cherry pick of #120561: kubeadm: remove reference of #120605
- Automated cherry pick of #119824: fix race on etcd client constructor for healthchecks #120587
- Automated cherry pick of #120559: e2e pods: fix WaitForPodsResponding retry #120572
- openshift-hack: Fix sporadic 141 errors in build-rpms #1769
- UPSTREAM: <carry>: support for both icsp and idms objects #1685
- Full changelog
- docs(openshift_apiserver_operator_logs): explicit namespace at archive path (#834) #834
- OCPBUGS-22958: adds cluster storageclasses gather (#858) #858
- extends obfuscation options in the configmap (#844) #844
- Revert the previous revert and fix (#851) #851
- Fix lint, pin its version and other minor fixes (#852) #852
- add retry logic to the DVO metrics gatherer (#847) #847
- Revert “fix the reverted configmap PR (#846)” (#849) #846
- fix the reverted configmap PR (#846) #846
- Revert “First minimal PoC version for moving the configuration to configmap (#827)” (#845) #827
- First minimal PoC version for moving the configuration to configmap (#827) #827
- OCPBUGS-21797: remove username & password config options (#842) #842
- OCPBUGS-21613: update ependencies (#838) #838
- Full changelog
- OCPBUGS-21672: http2: trim connetions and buffers #80
- cut release v0.15.0 #266
- proposal for http2: enable to disable, limit http2 resources #265
- deps: patch cve-2023-45142, not affecting krp #264
- Release 0.14.4 #262
- Bump golang.org/x/net to address CVE-2023-44487 #261
- Makefile: revert VERSION, add VERSION_SEMVER #258
- Release 0.14.3 #254
- version: set version flag values properly #253
- CHANGELOG: v0.14.2, add Make-,Dockerfile change #242
- OCPBUGS-21672: go.mod: bump golang.org/x/net to v0.17.0 #73
- Full changelog
- OCPBUGS-21915: Upstream sync with go.mod update #193
- Suppress status unset in cmdDel #1173
- Per node certificates: Add duration parameter #1167
- Add per-node-certification support #1159
- Bump golang and k8s API version #1158
- Performance and efficiency improvements in daemon/server mode #1154
- Add ‘cniConfigDir’ to specify config dir #1148
- Refine build script #1145
- fix multus config file generation to avoid self-delegation #1142
- Fix race conditions in logging package functions and enable race detection in tests #1101
- Full changelog
- Fix –from being set to default value in mirrorToDisk workflow (#727) #727
- OCPBUGS-22947: Should not generate graph with prepare subcommand (#725) #725
- Cancel community office hours: none for the moment (#726) #726
- CFE-965: [V2] Enable signature verification (#709) #709
- CFE-971: Generate OSUS graph image - uses go-containerregistry implementation (#722) #722
- Pr template change (#719) #719
- CFE-899, CFE-958: feat: removes the registry dns (#718) #718
- Remove Dockerfile.integration - not used - reduce confusion (#716) #716
- OCPBUGS-21864: fix: CVE-2023-39325 and CVE-2023-44487 (#712) #712
- Full changelog
- OCPBUGS-19145: Updating ose-openshift-apiserver images to be consistent with ART #390
- API-1644: add TokenRequest to pull-secret controller’s cluster role #403
- Add internal-oauth-disabled flag to signal oauth APIs/apiserver disabled #395
- Full changelog
- NO-ISSUE: Update downstreaming documentation. #602
- Skuznets/bump vendor #581
- scripts/bumper: only marshal missing commits #599
- Small sync #597
- OCPBUGS-17408: Do not derive installplan.spec.clusterServiceNames from bundle IDs #596
- OCPBUGS-22217: Fixing flake tests so they don’t fail 100% of the time. #595
- OCPBUGS-18948: CRD Compatibility Validation #592
- OCPVE-674: feat: add annotations for capabilities feature #565
- Remove 5m package-server-manager default #588
- OCPBUGS-20503: Bump golang.org/x/net from 0.10.0 to 0.17.0 #585
- scripts/bumper: also run
go mod in nested vendor #593
- scripts/bumper: improve sort order #580
- Full changelog
- OCPBUGS-16634, OCPBUGS-19635, OCPBUGS-20210: Downstream Merge 24th October 2023 #1942
- Fix remove remote pod when no IPs annotated #3976
- Bump golang docker version for make check #3681
- Always handle invalid label selectors #3972
- vhost-vDPA support #3958
- Allocate completed pods on startup #3919
- NIT: use logging functions that support format specifiers #3756
- Cluster manager: fix consumption of CM HA config file overrides #3967
- OVNK/GW: Use openflow13 flow formats #3965
- Update OVN 23.09 to latest version - ovn-23.09.0-37. #3971
- OCPBUGS-11710: Downstream Merge 18th Oct 2023 #1939
- Set mac binding age threshold in gateway routers #3678
- Various fixes to hybrid overlay #3954
- netdev can’t be moved to pod namespace #3868
- ovnkube-node: Remove redundant set of other_config:hwaddr #3410
- Bump golang.org/x/net from 0.10.0 to 0.17.0 in /go-controller #3955
- Setting custom n-handler-threads is not supported in per-cpu mode #3921
- Bump golang.org/x/net from 0.7.0 to 0.17.0 in /test/e2e #3957
- Apbroute join controllers #3949
- OCPBUGS-15538, OCPBUGS-19961: Downstream merge 2023-10-10 #1935
- Handle tombstone of type cache.DeletedFinalStateUnknown while deleting net-attach-def #3953
- Synchronize node primary address update #3754
- Fix exgw hybrid policy #3722
- Full changelog
- Rebase with upstream: v0.5.0 changes #56
- Prepare for v0.5.0 #498
- Upgrade power-go-client and otel dependencies #496
- Bump golang.org/x/net from 0.14.0 to 0.17.0 #493
- Bump google.golang.org/grpc from 1.58.2 to 1.58.3 #491
- Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 #489
- Bump golang.org/x/sys from 0.12.0 to 0.13.0 #488
- Bump github.com/IBM/platform-services-go-sdk from 0.50.4 to 0.51.0 #487
- Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 #486
- Bump github.com/IBM/platform-services-go-sdk from 0.50.2 to 0.50.4 #484
- Bump google.golang.org/grpc from 1.58.1 to 1.58.2 #482
- Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 #481
- Bump github.com/IBM/platform-services-go-sdk from 0.50.1 to 0.50.2 #479
- Manually bump k8s.io/kubernetes from 1.28.1 to 1.28.2 #473
- Bump github.com/IBM/platform-services-go-sdk from 0.50.0 to 0.50.1 #478
- Improve delete device failure logs in driver node #477
- Bump github.com/IBM/platform-services-go-sdk from 0.49.0 to 0.50.0 #475
- Bump google.golang.org/grpc from 1.58.0 to 1.58.1 #474
- Using env vars for getting the metadata details #463
- Bump github.com/IBM/platform-services-go-sdk from 0.48.1 to 0.49.0 #470
- Update the powervs-csi-node to use nodeSelector for ppc64le #465
- Cleanup: refactor powervs cloud to remove extra params #469
- Bump sigs.k8s.io/controller-runtime from 0.16.1 to 0.16.2 #468
- Bump github.com/IBM-Cloud/power-go-client from 1.2.4 to 1.3.1 #466
- Bump google.golang.org/grpc from 1.57.0 to 1.58.0 #464
- Add govulncheck target in Makefile #457
- Bump github.com/IBM/platform-services-go-sdk from 0.48.0 to 0.48.1 #462
- Bump golang.org/x/sys from 0.11.0 to 0.12.0 #461
- Bump github.com/IBM/platform-services-go-sdk from 0.47.1 to 0.48.0 #460
- Bump github.com/IBM/platform-services-go-sdk from 0.47.0 to 0.47.1 #459
- Bump sigs.k8s.io/controller-runtime from 0.16.0 to 0.16.1 #458
- Flag to set webhook server port for controller manager #454
- Bump github.com/IBM/platform-services-go-sdk from 0.46.0 to 0.47.0 #455
- Update security contacts #453
- Upgrade dependencies #434
- OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #49
- Full changelog
- OCPBUGS-18707: [bot] Bump openshift/prometheus-operator to v0.69.0 #255
- chore: cut v0.69.0 #6062
- fix: remove verbose logging admission-webhook #6064
- feat: support Selectors field in kubernetes SD #6053
- docs: Add node to auth mode when running minikube e2e tests #6039
- Enable depguard in more test files #6043
- Replace deprecated package github.com/docker/distribution/reference #6042
- prometheus: Add AWS sigv4 auth to Alertmanager endpoints #6036
- fix: disable HTTP2 connections by default #6028
- build(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 #6040
- build(deps): bump github.com/brancz/kube-rbac-proxy from 0.14.4 to 0.15.0 #6034
- fix: update reloader requests and limits when updated #5971
- chore: bump k8s dependencies to 0.28.3 #6029
- change: drop deprecated metrics #6024
- build(deps): bump github.com/thanos-io/thanos from 0.32.4 to 0.32.5 #6026
- build(deps): bump github.com/prometheus/common from 0.44.0 to 0.45.0 #6022
- build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 #6021
- build(deps): bump github.com/brancz/kube-rbac-proxy from 0.14.3 to 0.14.4 #6020
- build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 #6019
- chore: bump Thanos and Prometheus versions #6015
- chore: bump k8s dependencies to 0.28.2 #6014
- chore: fix e2e tests compilation #6005
- test(e2e-alertmanager): add alertmanager e2e test #5983
- Enable depguard in e2e tests #5990
- chore: update Prometheus version to v2.47.1 #5999
- build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 in /pkg/apis/monitoring #5997
- build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 in /pkg/client #5996
- build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 #5995
- build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /scripts #5994
- fix: use metadata informer for agent controller #5982
- Enable depguard in more packages #5984
- change: consider nil optional to be false for additional configs #5985
- fix: set verbosity log level only for debug #5981
- chore: add Simon as 0.69 shepherd #5986
- docs: Update xiu’s affiliation #5979
- finishing prometheus pkg golden files #5956
- build(deps): bump github.com/thanos-io/thanos from 0.32.3 to 0.32.4 #5953
- build(deps): bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 #5951
- fix: add –cluster.label to alertmanager #5945
- Fixing #5338 | Add OCI labels in the Dockerfile #5946
- Fixes #4108 | Add logic to check if provided storage class exist #5792
- add: scrapeConfigSelector check #5941
- prometheus: Add AzureAD for remote write #5852
- fix: Update ec2 validate func #5938
- fix: Update consul validate func #5937
- chore: use leveled log instead of fmt.Fprint() #5935
- fix: get IMPERSONATE_USER from current environment #5933
- fix: detect changes without list/watch perms on namespaces #5934
- fix: reconcile on namespace changes #5898
- docs: fix very simple typo #5929
- build(deps): bump github.com/thanos-io/thanos from 0.32.2 to 0.32.3 #5927
- build(deps): bump github.com/evanphx/json-patch/v5 from 5.6.0 to 5.7.0 #5924
- build(deps): bump github.com/brancz/kube-rbac-proxy from 0.14.2 to 0.14.3 #5923
- build(deps): bump sigs.k8s.io/controller-runtime from 0.16.1 to 0.16.2 #5922
- build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 #5921
- Fix objec –> object typo #5915
- chore: refactor CRD and RBAC checks #5910
- Remove typo duplicate line #5911
- feat: add
--as CLI argument #5906
- chore: update to Go 1.21 #5901
- OCPBUGS-22946: fix: remove verbose logging admission-webhook #254
- OCPBUGS-21637: fix: disable HTTP2 connections by default #252
- Full changelog
- OCPBUGS-22744: go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #493
- rhelemeter: Parse org and cn with regex #492
- rhelemeter: Validation of incoming metrics #491
- add
machine424 and rexagod to OWNERS #478
- Full changelog
- “TRT-1342: Trim the intervals for loki serializer to avoid errors during ingest” #28372
- trt-1340: update run-upgrade to use ginkgorunsuiteoptions #28380
- TRT-1339: Revert #28233 “ignore repeated TopologyAwareHintsDisabled events” #28381
- trt-1344: remove msg assertion #28379
- Add test which verifies every certificate has necessary annotations #28305
- OCPBUGS-19527: retry Prometheus client creation #28323
- OCPBUGS-20479: Add pod sandbox failures to e2e charts #28366
- skip revisioned certificates in raw info #28370
- TRT-1340: Increase cmd support for ExactMonitorTests and DisableMonitorTests #28371
- OCPBUGS-22703: tolerate AWS edge nodes on monitor tests #28363
- Revert “OCPBUGS-22413: Use Centos 8 Stream mysql image in tests” #28367
- Skip FailedScheduling intervals when masters are in NodeUpdate #28358
- OCPBUGS-22413: Use Centos 8 Stream mysql image in tests #28357
- Allow the unknown alerts test to fail as it looks stable #28345
- add hack/update-tls-ownership.sh #28359
- Drop not-used pulledInvalidImages method #28330
- start adding raw tls info #28334
- Restore APIServer graceful shutdown windows #28354
- Fix intervals mistakenly showing mass node NotReady #28351
- Remove timelines command reprocessing intervals #28348
- OCPBUGS-22358: fix: increase upper bounds for samples operator #28353
- put back previous Interval Slice algorithm #28344
- OCPBUGS-22276: Remove all docker.io images due to access denied #28347
- Restore Node NotReady intervals #28349
- trt-1320: update trt approvers #28343
- Port remaining clusteroperator monitor intervals to structured #28341
- Improvements and Additions to Alert Testing Stack #28332
- Automated - Update synthetic test data #28237
- prune the system CAs from proxy-ca in rawTLSInfo json #28336
- add test tracking raw cert data #28321
- OCPBUGS-9037: Require http 1.1 or earlier when using curl #28301
- Port Node and Pod State to Structured Intervals #28299
- Extract the cluster operator name from Down/Degraded Alerts #28331
- fix: wrap InitializeReleasePullSpecString in check for HasNoOptionalCapabilities #28329
- Full changelog
Source code for this page located on github