4.18.0-ec.0

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.0-ec.0-x86_64

Team Approvals:

Tests:

Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.17.0-rc.0, 4.17.0-rc.1

Loading changelog, this may take a while ...

Changes from 4.17.0-ec.1

Created: 2024-09-02 08:13:09 +0000 UTC

Image Digest: sha256:e930176c384d1c819f6259c403cb9a4fe419eebb1da80a9ae0a0e8afbd74d964

Release 4.18.0-ec.0 was created from registry.ci.openshift.org/ocp/release:4.18.0-0.nightly-2024-08-27-051932

Components

Kubectl upgraded from 1.30.1 to 1.30.2
Kubernetes upgraded from 1.30.1 to 1.30.3
Kubernetes Tests 1.30.0
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202406050030-0 to 418.94.202408212252-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ClusterAPIInstallAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ExternalCloudProvider (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalCloudProviderAzure (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalCloudProviderExternal (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalCloudProviderGCP (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalRouteCertificate (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ImagePolicy (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ChunkSizeMiB (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallGCP (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallPowerVS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GCPLabelsTags (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImages (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NodeDisruptionPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
IngressControllerLBSubnetsAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallGCP (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SetEIPForNLBIngressController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSEFSDriverVolumeMetrics (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AdditionalRoutingCapabilities (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootcNodeManagement (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterMonitoringConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageStreamImportMode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesAWS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallAzure (0 tests)
NetworkSegmentation (10 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OVNObservability (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
RouteAdvertisements (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesPodSecurityStandards (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesSupport (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

baremetal-cluster-api-controllers git 9e6d2bd4 sha256:a295b3a1250105977c48d3cb4d2782f7267882920b435ce723ace18106f4f2f4
metallb-frr git 377d02f9 sha256:e480c5306b94bae07be55577e33c3925f60ecf38e9b50dbe4388daaa562c4f85
networking-console-plugin git 91b33f1b sha256:73d3bd8fa81463bb2faf9f693fd71f3787f715715fb9559a94e27b678e2c9e15
operator-framework-tools git 7915649d sha256:3318fc17b91d3971f71df07c3d415b03a045c3817515a3b96bc6e4d168df28a5

Removed images

alibaba-cloud-controller-manager
k8s-prometheus-adapter
olm-rukpak

Rebuilt images without code change

agent-installer-utils git 3b99303b sha256:7190686602d6309e31e5ba63dd74e466122efe4d8b7e3e0cd9e6acea50019ff5
azure-kms-encryption-provider git eab1dcfc sha256:f0c8d0955ecf7d332c99387e2c96985767100de0ae0c3703c3dd01c5ec862676
baremetal-machine-controllers git 2549061c sha256:5544e5b7bb2d1af5875a78b923e9e4d930aab2288c3813fdb197f9d2ac90ef29
cluster-bootstrap git 27bfb59f sha256:9d5fe1a311b1b65f5315f1c8e54d91ef36d66393828449c1c50c88cb524f46ce
cluster-kube-controller-manager-operator git 0a9ed573 sha256:ae4454a537e9b4bf0f113fcfa5a620218348e834aa5d589798732aeaf0a1698f
cluster-policy-controller git c502ece1 sha256:6ceb3a6235de4b421d8538d77998ae67b6b3d7f888406639105fdc8bb94816a9
configmap-reloader git b877222b sha256:d0c56a6c6766498485fa61d3f53a26ab2b908d2aa706b99aeea1fd5b2bac2c4a
container-networking-plugins git 24a65329 sha256:a73129ceeb345d3a1598dd2a569a65505fa7fdaa1e441e4f776ef4c2f3caf970
containernetworking-plugins-microshift git 24a65329 sha256:b7f3b4b7ea5a09b06ffdfde9f943313e092fe5f082f6e4a15be1ea8688f1c5ec
csi-node-driver-registrar git 436a1f33 sha256:510ecfe6a52242d53eb5862c26aba4a0982363d6ce653850ae32fe565819ed37
docker-builder git 739f5270 sha256:dcce577fa9230dc5e181d17a8f41b9f73f6531d72eef04ae2a0a0316f6f6a28e
driver-toolkit git 859518f6 sha256:811a1480386b9fb096fa261d0f14afbc6f7e0ac7ba017919f7179c3af044c076
etcd git 1fb31653 sha256:dab67ae12c511abb63b4c847fc2b2b064cab39a581c697fd649c8ee15ed57259
keepalived-ipfailover git e3879e9e sha256:73be96b0a2326d8b2d8cb6ca35bfa59e63db47c86ca786093b79aac3c4c78d6a
kube-metrics-server git 1f68026b sha256:2d7d7141a501fc977f4f1fe4c35063696f95a2640398433855c12a86694b1c3d
kube-rbac-proxy git 8ea2c994 sha256:198b971f96aac6a4123d4ba6c51833e3e04da753cefc91197860ae8871d29cee
kube-storage-version-migrator git 34fafc04 sha256:aa2a7b7ad951e76442ab8865fa630f2946f1751f529a22520f22b1c49109262d
kubevirt-cloud-controller-manager git 3f4542ec sha256:190094ac57fadb379771ed1e8835e15c9c02dd80639ad6543450e3ce51228a79
libvirt-machine-controllers git a336f0b5 sha256:39393fd89b2b71c654d0c2a21869c89c98a9cb1903f480ab16d61accb3ebcbab
machine-image-customization-controller git 74bee374 sha256:85c19150261d10ded6900bd908b58935d26dd4ba7d558b979cdfa2482554e0e3
machine-os-images git 9e76dac7 sha256:cb3ef07bc1ba86537b912e59d38f3d776cc821c91f6ddc123b97c4d705f83942
multus-admission-controller git 076f0caa sha256:8d4832c012be5d413a01154bc04df95ff228724867e011c32df1f11b46869f2b
multus-networkpolicy git 7d01ea1c sha256:9a5df74e1beab1e717eeca8124871b8dc8453dcbdae735248686aeb376bc4774
multus-route-override-cni git 391c1b03 sha256:9194414f1a7da1a8f3468a29007f6bac5edf682ec47db5b09e6d4ae8b4e0e340
network-interface-bond-cni git 8630f336 sha256:f15014873e84e35acdea6df4cc9a43df7fb1db6b1e93937f4c4a264c978267f4
oauth-apiserver git e37ccb45 sha256:4b2c0b2f6d422a7ec3e4d99e1f8c985adf4d76e33f5f3858129181c6b3832abb
oauth-proxy git 30f80124 sha256:4c7c47f8e5e0d583ba433471becb84a2531acc85b90a67bbac03ee15dd831f28
oauth-server git 4d11d269 sha256:a10adea4ef9605a494c5144c0f2a47ada1bb3de0cde948d9e918b845f36ccb2a
openshift-apiserver git 3c3cb886 sha256:7ce6967ac806360031a34515232e79b64bccfed4e3ce1049efefb1da3f2d64d4
openshift-state-metrics git 1e963eb5 sha256:dfd99a755c55078115f685d67e9d0e5adeb9940d82d02f6b94d827679c9447e1
openstack-cluster-api-controllers git 9db571c5 sha256:136fef70164645134c1d832ba6b9ba6bbc7eb304814f2b9be35648e73c7a01ec
ovirt-csi-driver git 1db726a9 sha256:ac30aad474dbe12695d4cffb7c68b1ef0b59ab8fc080abcd634b15067d9d39dc
ovirt-csi-driver-operator git 0feae256 sha256:cfa8ac9b7908e44015f8027a10037c60b759259cabfcf027e850b321182a0893
ovirt-machine-controllers git abb91c84 sha256:72080f7d3aaa12a874b973d5f2cc11ba95f7c5d9d6466abd780ae8c30ad8cbaa
prometheus-alertmanager git d7c1a7c6 sha256:029a2ce5e76e64166ba20071375a729f1d3bb406264e22e42e12b5aaa3777a38
rhel-coreos sha256:3454a541c450fd387aed874218e367776d94710a3cfc8827a20744717c445e11
rhel-coreos-extensions sha256:7c99c8b69c232c2ec7c077a7339af392036c085ec4e821ea242e5dba7a643426
route-controller-manager git a47f6be3 sha256:4664918394fa8996ad5765d09f3c094ae4f0ae3cb1ff1d92332e645ffd41e205
service-ca-operator git 1f7d6472 sha256:c6f0ec531a112300d1203792a769e626bcf525c0507845f8b309467e6d828c1d

agent-installer-api-server

NO-ISSUE: Soft install timeout enhancement (#6694) #6694
NO-ISSUE: Support both minikube and kind for deploying on k8s cluster (#6664) #6664
NO-ISSUE: add MCE to OLM operators dev docs (#6689) #6689
MGMT-18384 bump golang 1.21 (#6667) #6667
MGMT-1612: Allow a slight deviation from official host minimum memory (#6660) #6660
MGMT-18378: allow CNV on ARM Dev preview (#6645) #6645
Reapply “Add certs to ingress when deploying in non-OCP clusters (#6564)” (#6685) #6564
Wait for host to deprovision in BMAC (#6666) #6666
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17 (#6676) #6676
MGMT-18121: Configure networking when using ISCSI over OCI (#6665) #6665
NO-ISSUE: Change debug Dockerfile so it will not require prior actions (#6674) #6674
MGMT-17560: Workaround missing DNS on iSCSI (#6603) #6603
MGMT-18514: Calculate machine networks in external platform (#6661) #6661
OCPBUGS-27238: Use both the OCP cluster trusted certs and user certs (#6649) #6649
MGMT-18560: Fix AutomatedCleaningMode behavior (#6662) #6662
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.15 (#6663) #6663
NO-ISSUE: Fix debug image by adding required packages (#6659) #6659
MGMT-17560: Append kargs for iSCSI boot (#6602) #6602
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6658) #6658
NO-ISSUE: Add missing kube api flag on kube api subsystem test (#6655) #6655
NO-ISSUE: Print subsystem environment variables before test (#6654) #6654
MGMT-17560: validation to support iSCSI boot volume (#6434) #6434
MGMT-18313: Replace golang base image as it is based on Centos Linux 7 (#6637) #6637
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.13 (#6644) #6644
MGMT-18231: Block iSCSI as an installation disk when its holder is multipath (#6612) #6612
MGMT-18505: Fix installation from a 4.17 hub with converged flow (#6639) #6639
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.15, 4.12 (#6638) #6638
AGENT-930: For the agent installer, parse the expiration time from the token and verify if the token is valid. (#6605) #6605
NO-ISSUE: Use skipepr to build images as debug image requires nmstate packages for building (#6629) #6629
MGMT-16242: Suggest OCP images based on availability for architecture (#6262) #6262
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6621) #6621
MGMT-18451: Enable debugging assisted-service on kind (#6613) #6613
Revert “MGMT-18127: User name and password in a proxy url should be url encod…” (#6619) #6619
NO-ISSUE: Tidy golang dependencies before vendoring in base image (#6599) #6599
NO-ISSUE: [master] Bump OCP versions: 4.17 (#6611) #6611
MGMT-18446: Correct hostname max length validation (#6604) #6604
MGMT-18448: Allow local cluster import to be disabled. (#6606) #6606
MGMT-17773: Enforce go modules tidy (#6600) #6600
NO-ISSUE: [master] Bump OCP versions: 4.15 (#6598) #6598
Add -L option to curl command to follow redirects (#6594) #6594
NO-ISSUE: Adjust permissions on /data directory (#6587) #6587
Revert “Add certs to ingress when deploying in non-OCP clusters (#6564)” (#6590) #6564
Fix OKD podman deploy (#6588) #6588
MGMT-18411: Add NTP sources to discovery environment (#6591) #6591
NO-ISSUE: Fix python client generation (#6593) #6593
fix: dev-requirements.txt to reduce vulnerabilities (#6576) #6576
MGMT-18155: handle state of day2 node in Done stage (#6570) #6570
Remove unused extracter struct (#6586) #6586
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.13 (#6584) #6584
KONFLUX-1611: Add labels, licenses & user to Dockerfile (#6484) #6484
Refactor package in generator_test.go to use _test suffix for implementing black-box testing methodology (#6578) #6578
Add certs to ingress when deploying in non-OCP clusters (#6564) #6564
MGMT-18333: Remove the python client from the image (#6579) #6579
NO-ISSUE: Exclude vendor directory from snyk code analysis (#6572) #6572
(‘#6552’): Update registry.svc.ci.openshift.org to registry.ci.openshift.org (#6553) #6553
NO-ISSUE: Fix subsystem tests in the CI - Wiremock stubs script is failing to reach wiremock from time to time (#6569) #6569
NO-ISSUE: [master] Bump OCP versions: 4.14 (#6568) #6568
MGMT-18171: Make manifest metadata storage more transactional in nature (#6457) #6457
fix: dev-requirements.txt to reduce vulnerabilities (#6551) #6551
NI-ISSUE: Fix skipper configuration (#6560) #6560
MGMT-17478: Use ICC config secret for converged flow info when available (#6533) #6533
Fix kind deploy (#6561) #6561
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.15 (#6558) #6558
MGMT-18160: Use cert-manager to handle tls certs for webhooks (#6546) #6546
MGMT-17893: Don’t destroy cluster on detach (#6532) #6532
NO-ISSUE: Add renovate config to limit number of PR (#6536) #6536
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16 (#6547) #6547
NO-ISSUE: Mount emptyDir for data in image service (#6544) #6544
MGMT-18131: Make application work on non-OCP kubernetes (#6446) #6446
NO-ISSUE: [master] Bump OCP versions: 4.15 (#6511) #6511
MGMT-18286: Internal Documentation for using and testing multipath (#6505) #6505
MGMT-18269: Reset finalizing stage in DB while resetting cluster (#6499) #6499
MGMT-8356: Fix postgres deployment script in ‘kind’ target to set static nodePort correctly, Remove static nodePorts for deployment targets other then ‘kind’ (#6504) #6504
NO-ISSUE: Add 4.17 OS/OCP images (#6503) #6503
OCPBUGS-35932: Allow auth in docker credentials to be empty (#6465) #6465
NO-ISSUE: Retrieve ‘subsystem-clean’ target as it is used by the QE (#6494) #6494
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.12, 4.15 (#6502) #6502
MGMT-18073: update OCP 4.16 GA version, add 4.17 beta versions (#6501) #6501
NO-ISSUE: Increase Konflux git clone depth (#6495) #6495
Allow agent-installer-client to use a secure port when adding a new node in day2 (#6464) #6464
Update quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.1 Docker digest to 8838d3e (#6479) #6479
Update quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4 Docker digest to d70d970 (#6478) #6478
Update quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1 Docker digest to 46fcff2 (#6477) #6477
Update quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.1 Docker digest to f38e274 (#6474) #6474
Update quay.io/konflux-ci/tekton-catalog/task-buildah:0.1 Docker digest to cdcb8b8 (#6473) #6473
Update quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.1 Docker digest to a74dae0 (#6481) #6481
Update quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1 Docker digest to 9ea6101 (#6480) #6480
MGMT-16102: Generated code returns inconsistent error codes (#6433) #6433
MGMT-18127: User name and password in a proxy url should be url encoded (#6467) #6467
NO-ISSUE: Red Hat Konflux update assisted-service-saas-main (#6471) #6471
NO-ISSUE: Add missing ‘make’ command (#6466) #6466
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-18550: bump golang 1.21 (#894) #894
OCPBUGS-31570: Bump to latest preinstall utils for disk cleanup fixes (#886) #886
NO-ISSUE: fixing ARM images builds (#885) #885
OCPBUGS-36779: Reload host inventory on conflict (#877) #877
MGMT-18332: Use centos stream 9 as the base image for test container (#876) #876
NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can’t reach its repositories (#862) #862
Full changelog

agent-installer-node-agent

MGMT-18475: disabling CGO (#772) #772
NO-ISSUE: Bump golang.org/x/sys in the go-dependencies group (#766) #766
MGMT-18511: update golang 1.21 (#762) #762
MGMT-18521: fix NTP sources are not valid (#767) #767
NO-ISSUE: Bump the go-dependencies group with 3 updates (#763) #763
MGMT-17560: Report iSCSI host IP address in inventory (#727) #727
NO-ISSUE: fix for ARM and multi images (#754) #754
NO-ISSUE: Bump golang.org/x/sys in the go-dependencies group (#751) #751
NO-ISSUE: Use centos stream 9 as the base image for test container (#750) #750
NO-ISSUE: Migrate build image to use registry.access.redhat.com/ubi9/go-toolset:1.20 (#735) #735
MGMT-17867: fix multipath inventory to include wwn (#733) #733
Full changelog

apiserver-network-proxy

OCPBUGS-37052: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #57
Full changelog

aws-cloud-controller-manager

NO-JIRA: Update OWNERS #91
Full changelog

aws-cluster-api-controllers

OCPCLOUD-2679: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.6.1 (6db1244) into master #519
NO-JIRA: Update OWNERS #517
Full changelog

aws-ebs-csi-driver

OCPBUGS-37088: UPSTREAM: 2108, 2115: Fix allocatable volumes count for vt1 and g4 #274
STOR-1598: Rebase to v1.32.0 for OCP 4.17 #272
OCPBUGS-36943: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 #273
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-38578: Update aws-efs-csi-driver-operator image-references name #264
STOR-1819: Distribute OCP specific test manifest with create-efs-volume #260
OCPBUGS-38620: Some CSI driver containers missing terminationMessagePolicy #262
STOR-2009: Bump OLM metadata to 4.18 #259
OCPBUGS-38578: efs: fix tools image reference #261
STOR-1993: add init container in EFS CSI controller pod #252
STOR-1819: Add manifest with OCP specific test config #258
STOR-1422: Volume Metrics for EFS CSI Driver #255
STOR-1819: Add manifest with OCP specific test config #254
NO-JIRA: use service account namespace placeholder for smb role bindings #250
STOR-2002: add Azure File snapshot support #253
OCPBUGS-37488: add init container in EBS CSI controller pod #248
STOR-1856: add STS hook for EFS credentials request controller #251
STOR-1874: Use real HyperShift API #236
OCPBUGS-37274: Add FIPS_ENABLED to env vars for aws-efs-csi-driver (2) #249
STOR-1856: remove aws efs operator legacy dir #244
STOR-1596: Bump all deps for 4.17 #240
STOR-1856: STOR-1606: migrate legacy AWS EFS operator code to csi-operator #237
OCPBUGS-36936: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #241
OCPBUGS-36948: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.17 #243
OCPBUGS-36942: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.17 #242
STOR-1606: Bump OLM metadata to 4.17 #239
OCPBUGS-34451: Bump go version to be consistent with ART #238
STOR-1290: don’t pass credentials via environment variables in AWS EBS #202
STOR-1856: migrate AWS EFS operator to csi-operator #232
Full changelog

aws-kms-encryption-provider

NO-JIRA: Bump to latest #20
Full changelog

aws-machine-controllers

OCPCLOUD-2565: Add feature gates flag #108
OCPBUGS-36469: Update placementGroupPartition to honour it as a pointer #107
CFE-1064: Add support for PlacementGroupPartition of placement group #101
NO-JIRA: Update OWNERS #105
Full changelog

aws-pod-identity-webhook

OCPBUGS-36522: Rename Dockerfile #195
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

NO-JIRA: Update OWNERS #123
Full changelog

azure-cluster-api-controllers

OCPCLOUD-2584: Add manifest generation #300
OCPBUGS-34246: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.17 #312
OCPBUGS-36026: Update go-retryablehttp to v0.7.7 #309
NO-JIRA: Update OWNERS #308
Full changelog

azure-disk-csi-driver

STOR-1601: Rebase to upstream v1.29.7 for OCP 4.17 #81
OCPBUGS-36939: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.17 #83
Full changelog

azure-file-csi-driver

OCPBUGS-34637: bump mount-utils to treat ENODEV error as corrupted mount #74
STOR-2002: UPSTREAM: 2040: fix snapshot size #73
STOR-1604: Rebase v1.30.3 for OCP 4.17 #70
OCPBUGS-34464: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.17 #72
Full changelog

azure-machine-controllers

OCPCLOUD-2565: Adds –feature-gates CLI argument #116
NO-JIRA: Update OWNERS #114
Full changelog

azure-workload-identity-webhook

OCPBUGS-36402: Rename Dockerfile.rhel7 to Dockerfile.ocp #23
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3561: Add new disk types GCP Control Plane nodes #8880
OCPBUGS-38235: upi/aws: update lambda runtime python version #8820
OCPBUGS-38118: failed to install Nutanix OCP 4.16 cluster with DHCP network #8806
OCPBUGS-38479: ic: validate release arch is compatible with cluster arch #8842
OCPBUGS-38177: install-status reflects day 2 services #8858
OCPBUGS-38722: aws: validate public-only subnets configs #8883
OCPBUGS-37663: azure: Fix empty route table being created. #8872
OCPBUGS-36196: CAPZ USGovernmentCloud fixes #8876
NO-JIRA: Print the “export KUBECONFIG=…” command on its own line for easier cut-and-paste #8882
OCPBUGS-37543: Azure: Disable shared key access when using managed identity #8844
OCPBUGS-38657: upstream capv bug causes session timeout #8871
OCPBUGS-38070: Azure CAPI: Add check for APIServer OperatorPublishingStrategy #8852
OCPBUGS-38571: GCP Global Address failed to destroy #8860
OCPBUGS-38558: Fix typo #8854
OCPBUGS-38599: incorrect folder gen, workaround govmomi vm folder path bug #8861
OCPBUGS-38152: Add roles needed for shared VPC #8815
OCPBUGS-38552: Use ManifestListed Digest for multi payload installs #8850
SPLAT-1713: Updated powercli configuration to allow multi vcenters #8853
OCPBUGS-37953: pkg/infrastructure/azure: limit storage account to 24 characters or less #8835
OCPBUGS-38551: only allow a single network in failure domain topology #8851
OCPBUGS-37945: import failure when esxi config is not the same in the cluster #8799
OCPBUGS-37683: Resource deletion is holding up deletion process #8810
OCPBUGS-35262: Do not create firewall rules for xpn installs #8801
SPLAT-1713: Enhanced vSphere UPI scripts for multi vcenter support #8829
OCPBUGS-38114: aws: add support for clusters with public-only subnets #8807
no-jira: update vsphere owners locations #8833
OCPBUGS-37736: vsphere, if secureboot is enabled, disable it in the template #8793
OCPBUGS-36327: bump capa for instance register fix #8678
OCPBUGS-38436: PowerVS: Fix mad system pool #8831
OCPBUGS-35947: pkg/asset/machines: fix Azure zones #8817
OCPBUGS-37780: aws: do not allow edge pools of different arch #8788
OCPBUGS-38241: Update control plane tags to match CAPI networks #8822
SPLAT-1560: set up ‘aicli’ & ‘qemu-img’ to use Assisted Installer to install OCP on Alibaba Cloud #8776
AGENT-938: Enhance console logging to display node ISO expiry date during addNodes workflow #8804
CFE-920: Update GCP userLabels and userTags configs description #8766
AGENT-944: Enable assisted-service debug logging #8816
OCPBUGS-37770: data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render –feature-gate-manifest-path #8813
OCPBUGS-37821: Remove timed context for gcp client #8792
CORS-3575: Azure: remove azure terraform code and resources #8764
OCPBUGS-37540: Gather Azure Logs through load balancer #8812
AGENT-937: Check Authentication Token for Node Boot-Up on day2 #8802
Revert “Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.”” #8638
MULTIARCH-4770: MULTIARCH-4776: bump o/api for MultiArchInstall FGs #8808
MULTIARCH-4098: Power VS: Make CAPI the default deployment method #8814
CORS-3617: Make Azure CAPI the default (& only) install option #8809
no-jira: PowerVS: Block disconnected deploys in 4.17 #8798
CORS-3608: aws: deprecate platform.aws.amiID field #8755
NO-ISSUE: Remove unnecessary code #8805
AGENT-890: Simplify Agent ISO kargs setting #8513
CORS-3546: Nutanix: add gpus and dataDisks support #8765
OCPBUGS-38055: fix/aws/edge: IAM profile must be same of workers #8803
CORS-3594: MOVE GCP CAPI to default feature set #8723
no-jira: doc: minor update to installation doc #8795
AGENT-870: Update AUTH_TYPE #8108
OCPBUGS-37594: pkg/infrastructure/azure: Set architecture when creating gallery image #8800
CORS-3609: aws: support existing IAM instance profiles #8689
MULTIARCH-4828: Pass ServiceEndpoints from install-config to CAPI for PowerVS #8781
MGMT-18364: add image-based installation ISO integration tests #8797
CORS-3565: CAPZ private clusters #8732
OCPBUGS-36361: Azure: If credentialsMode is manual, pass the identity through #8786
CORS-3299: Azure: Use Customer Managed Key to enable Storage Account Encryption #8736
MULTIARCH-4770: bump o/api for MultiArchInstall TechPreview gates #8791
OCPBUGS-34953: fix bogus analyze message when gather fails #8787
AGENT-928: allow user to specify sshKey via config file #8779
OCPBUGS-35262: Upgrade to latest cluster-api-provider-gcp #8780
AGENT-862: Change day-2 monitor timeout back to 90 minutes #8783
AGENT-919: Authenticate day2 operations #8717
OCPBUGS-35959: azure: Fix Accelerated network enablement #8667
CORS-3209: Set UserTags on CAPG resources #8691
no-jira: bootstrap: add shellcheck directives to follow sourced files #8741
CORS-3580: Update GCP Disk Types #8773
no-jira: Azure: remove stale DNS migration images #8775
OCPBUGS-37217: CAPI GCP - retry SetIAMPolicy #8763
OCPBUGS-37427: bootstrap gather fails in vsphere, only ipv6 address used #8759
OCPBUGS-37356: vSphere validation fails if dc is in a folder #8758
OCPBUGS-35366: Update upi references to api-internal #8582
AGENT-862: Extend monitor-add-nodes to support multiple nodes #8507
AGENT-854: day2 add-nodes workflow validations #8740
AGENT-900: enable fips for add-nodes workflow #8760
CORS-3568: Support GCP pre-created Service Accounts for CAPG #8750
OCPBUGS-36302: pkg/asset/machines/azure: Don’t set disk encryption set to nil #8756
OCPBUGS-36780: ic: fix typo in warning message #8744
OCPBUGS-36913: openstack: Fix security group tagging #8757
OCPBUGS-36390: aws: do not require create permissions when BYO IAM role #8688
MULTIARCH-4814: ic: add release arch validation for multi-arch clusters #8761
AGENT-922: Remove misleading inClusterConfig warning #8715
OCPBUGS-36904: aws: bump CAPA for subnet tagging fix #8730
no-jira: Replace Equal with ErrorContains for image-based nmstatectl unit tests #8762
OCPBUGS-37226: Persist image-based config manifests from state instead of template #8752
MGMT-18364: Add image-based config ISO integration tests #8737
OCPBUGS-36917: openstack: Fix apiVIPs and ingressVIPs docs #8728
no-jira: docs/user/azure: fix byo vnet security groups #8485
CORS-3607: Azure CAPI Installs within Tech Preview featureset #8754
MULTIARCH-4777: gcp: support multi-arch nodes #8701
OCPBUGS-35406: Use service CIDRs to determine bootstrap kubelet IP family #8681
AGENT-910: node-joiner multi-arch support #8644
METAL-1039: Allow baremetal platform without MAPI #8521
CORS-3569: UDR for Capz #8731
MULTIARCH-4569: aws: support multi-arch nodes #8698
no-jira: Revert “Merge pull request #8714 from r4f4/bump-default-release-4.17” #8753
OCPBUGS-37104: openstack: Validate controlPlanePort has subnet #8739
OCPBUGS-37164: Handle empty config for image-based create image #8745
OCPBUGS-37107: Power VS: Disable SNAT when specifying imageContentSources #8697
STOR-1353: Attempt to cleanup GCP Filestore instances on destroy #8699
CORS-3073: azure: Allow for installs in existing vnets #8662
MGMT-17842: Add image-based installer create config ISO #8514
MGMT-17226: Add image-based installer create installation ISO #8679
OCPBUGS-35440: capi/aws: bump provider for ingress rules fix #8596
OCPBUGS-34638: destroy/gcp: set value for DiscardLocalSsd #8649
CORS-3302: port forward SSH to bootstrap host #8669
OCPBUGS-36713: CAPG use existing subnets and VPC #8722
MGMT-17226: Add imagebased installer skeleton #8709
CORS-3485: Azure: modify control plane outbound LB into submission as an API LB #8652
OCPBUGS-36378: capi: start controllers after WaitGroup is created #8693
CORS-2775: cmd: destroy: remove deprecated github.com/pkg/errors #8720
OCPBUGS-33973: Openstack UPI - Reintroduce unique resource names. #8477
MULTIARCH-4568: Print release image arch and default arch when the payload is multi #8515
CORS-3593: go.mod: bump k8s dependencies #8713
OCPBUGS-35262: Skip firewall rule creation if permission is missing #8706
OCPBUGS-36142: azure: Fix HyperVGeneration for gen2 images. #8666
OCPBUGS-35542: Cleanup capi artifacts #8599
CORS-3590: releaseimage: update default version #8714
AGENT-875: Authenticate agents #8395
OCPBUGS-34708: CORS-3582: capi: remove unused feature gates #8703
OCPBUGS-36660: CORS-3591: 4.17 default channel incorrectly points to stable-4.16 #8708
CORS-3296: CAPG - configure Internal LoadBalancer in the provider #8421
CORS-3547: Upgrade cluster-api-provider-gcp to v1.7 #8700
AGENT-876: Authenticate systemd services and curl requests #8393
SPLAT-1670: install pwsh from ci mirrored image #8643
OCPBUGS-36453: PowerVS: add .ssh directory #8686
OCPBUGS-35262: Fix shared vpc issues with capg installs #8583
AGENT-925: retrieve ignition endpoint to add a new node #8650
OCPBUGS-35752: capi/aws: disable EKS controller in CAPA #8628
OSASINFRA-3402: Use Gophercloud v2.0.0 #8685
AGENT-871: Authenticate wait for #8270
OCPBUGS-36318: update RHCOS 4.17 bootimage metadata to 417.94.202407010929-0 #8690
OCPBUGS-36316: Power VS: Allow pending network for internal publishing strategy #8677
OCPBUGS-36242: vSphere - If the folder pre-exists do not tag #8671
OSASINFRA-3510: Change ‘Generate’ to accept a context #8562
OCPBUGS-36284: Remove etcd store when provisioning fails #8673
OCPBUGS-36092: bump go-retryablehttp for CVE fix #8653
no-jira: Update documentation on libvirt installs for devs #8675
OCPBUGS-36176: PowerVS: Add ibmcloud plugins #8661
OCPBUGS-35382: CAPG marketplace image use for control plane nodes #8665
OCPBUGS-35852: capi: shutdown local controlplane as the last step #8639
OCPBUGS-35188: aws: remove terraform configs #8557
CORS-3435: Create user assigned identity for Azure VM’s #8645
Full changelog

baremetal-operator

OCPBUGS-38404: [OCP] Ability to disable agent power off after deployment #368
OCPBUGS-38142: Merge upstream #369
OCPBUGS-36425: Sync jul 30 #367
NO-ISSUE: Bmo sync jul9 #364
OCPBUGS-35559: Bmo sync jul5 #362
Full changelog

baremetal-runtimecfg

OCPBUGS-38281: Handle errors in iptables healthcheck #327
OPNET-552: Move to stream9 for local builds #328
OCPBUGS-38288: Distinguish NotExist from nil for keepalived sentinel file errors. #326
OCPBUGS-32348: Change mechanism of debug flag #309
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1292: upgrade-status: handle the OS image annotation better #1848
OTA-1292: upgrade-status: handle unschedulable nodes better #1849
OTA-1292: upgrade-status: handle expected MCD state better #1847
NO-JIRA: upgrade status: improve tests for missing annotations #1846
OTA-1212: Hide or condense control plane sections once successfully updated #1844
OCPBUGS-32053: Add examples for some oc adm policy commands #1845
OTA-1292: upgrade-status: bubble up the reason for unavailable nodes #1838
WRKLDS-1318: flags for single node interface #1841
OTA-1309: upgrade-status: test a compact cluster and a single-node cluster #1829
WRKLDS-1429: Adds a guardrail for node-image commands which is supported only for Openshift version 4.17+ #1837
OTA-1153: upgrade-status: communicate control plane completion clearly #1831
NO-JIRA: upgrade-status: fix HasOSImage function #1834
WRKLDS-1316: Retry and do not fail when logs cannot be updated #1836
NO-JIRA: upgrade-status: fix a typo in README #1830
WRKLDS-1316: Remove clusterversions from certificates api group #1835
AGENT-854: add the required role to support platform type validation #1832
WRKLDS-1316: oc adm node-image monitor command #1823
OTA-1291: upgrade status: removes custom nodes from the worker pool (2) #1825
NO-JIRA: Minor wording tweaks for CLI help #1826
OCPBUGS-37345: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1827
OTA-1291: upgrade status: removes custom nodes from the worker pool #1822
: MULTIARCH-4568: Inject ReleaseArch into openshift-install #1792
OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command #1806
no-jira: Extend the kube version check for images/tools/Dockerfile #1813
OCPBUGS-36525: Bump k8s to 1.30.2 #1812
WRKLDS-1310: pkg/cli/admin/mustgather: GA since and since-time flags #1811
OCPBUGS-36183: pkg/cli/admin/prune/renderedmachineconfigs: ‘Error dry-run deleting’ #1807
Full changelog

cloud-credential-operator

OCPBUGS-37782: update google.golang.org/grpc v1.65.0 #746
SPLAT-1718: Remove alibaba #737
CCO-572: STS OLM for GCP (WIF) #708
CCO-580: Upgrade to Kubernetes 1.30 #725
OCPBUGS-37334: SNYK ignore go-client misreporting #734
OCPBUGS-35016: Update to azidentity v1.7.0 #716
OCPBUGS-34347: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.17 #719
OCPBUGS-36032: IBM/go-sdk-core update to v5.6.3 #715
OCPBUGS-36140: GCP passthrough permissions check to ignore problematic permissions. #712
NO-JIRA: Fix Makefile for developer install #711
Full changelog

cloud-network-config-controller

SDN-4773: Add support for Azure Managed Service Identity authentication #151
NO-JIRA:Update linter file #146
SDN-4924: Rebase 1.30 #150
Full changelog

cluster-authentication-operator

OCPBUGS-35828: controller: set ownership annotation for webhook-auth secret #678
NO-JIRA: endpoint test: use httpbin #680
NO-JIRA: Several fixes for Keycloack IDP test #679
Full changelog

cluster-autoscaler

OCPBUGS-38277: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.18 #313
OCPBUGS-37498: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 #311
PODAUTO-202: Update VPA ocp/builder Dockerfile images to openshift/release images #310
PODAUTO-199: Upstream rebase to VPA 1.1.2 #309
OCPBUGS-34242: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 #304
NO-JIRA: Update OWNERS #307
Full changelog

cluster-autoscaler-operator

NO-JIRA: Update OWNERS #329
Full changelog

cluster-baremetal-operator

OCPBUGS-36357: Revert “reconcile on clusteroperator changes” #435
OCPBUGS-29660: Ignore provisioning ip config if disabled #429
METAL-1040: Allow CBO to run without MAPI #423
METAL-503: Remove ironic-inspector #430
OCPBUGS-29687: Move Secrets from environment variables to VolumeMounts in metal3-httpd container #408
AUTH-482: set required-scc for openshift workloads #407
OCPBUGS-29687: Move pull secret from env var to VolumeMount in metal3-image-customization container #428
Full changelog

cluster-capi-controllers

NO-JIRA: Update OWNERS #211
Full changelog

cluster-capi-operator

OCPCLOUD-2584: Enable azure infrastructure provider reconcile #115
OCPCLOUD-2207: Generate VSphereCluster #185
OCPBUGS-37718: fix: align openstack e2e branch #191
OCPBUGS-36296: fix: sort CredentialsRequest manifests after namespace #183
OCPCLOUD-2638: Add stricter linting configuration #186
OCPCLOUD-2204, OCPCLOUD-2205, OCPCLOUD-2206, OCPCLOUD-2207: Add InfraCluster controller + AWSCluster implementation #169
OCPCLOUD-2584: Implement compression of components in configMap #170
NO-JIRA: Update OWNERS #179
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: Update envtest configuration to new index format #361
SPLAT-1720: Remove Alibaba #324
OCPBUGS-35798: PowerVS: Remove bind address #355
NO-JIRA: Update OWNERS #357
Full changelog

cluster-config-api

OCPNODE-2387: SCC: add UserNamespaceLevel field #1939
featuregate analyzer: use 1 week lookback if possible #2009
clean up openshift-sdn references in the API #1981
OCPCLOUD-2561: Remove CloudProviderExternal feature gates #1780
featuregate analyzer: fix platform name for metal #2003
Update envtest publishing to create index file #2001
OCPBUGS-36479: remove duplicate featuregate ‘ExternalRouteCertificate’ #1959
METAL-1114: featuregates: add metal jobs for test analyzer #1998
featuregate analyzer: use correct platform name #2000
MULTIARCH-4556: Introduce ImageStreamImportMode field in the image config #1928
OCPBUGS-38414: Revert #1988 “Graduate UserDefinedNetworks to GA” #1996
extend the example integration test with set of strings attribute #1597
Add the field “CapacityReservationID” to “AwsMachineProviderConfig” #1978
SDN-4919, SDN-5135: Graduate UserDefinedNetworks to GA #1988
CFE-921: Enable GCPLabelsTags featureGate by default for GA #1971
MULTIARCH-4776: MULTIARCH-4770: installer: promote MultiArchInstall FGs #1991
Power VS: Move Power VS to CAPI by default #1979
CORS-3617: Promote Azure CAPI as the default Install method #1987
STOR-1422: Add field for enabling EFS volume metrics #1853
SDN-5086: Add API and feature gates for OVN-K BGP support #1944
NE-1794: Promote eipAllocations API in GA #1989
SDN-5186: Add OVNObservability feature gate as Tech Preview. #1986
AUTH-527: security/v1 - add constant for enforcing psa annotation #1980
IR-471: Removing featuregate for chunkSizeMiB config #1948
Run update-payload-crds after update-codegen-crds #1974
CORS-3594: Setting CAPG as the default infra provider #1958
NE-1774: Promote IngressControllerLBSubnetsAWS to GA #1966
OCPBUGS-35906: a rule to check if the featureSet is one of the known set of features #1952
featuregate promotion: use latest release instead of hard coding #1984
Add MCP and Config Version columns to MCN output #1972
MCO-1065: MCO-1171: Promoting ManagedBootImages and NodeDisruptionPolicy to default featureset #1975
MULTIARCH-4770: features: move MultiArchInstall[AWS|GCP] to TechPreview #1973
Nutanix mapi: gpus and dataDisks support #1935
CONSOLE-4161: Add support for lightspeed button integration #1956
NE-1516: Add configuration for AWS Elastic IPs (EIPs) via Ingress Controller CR. #1826
Added Feature Gate for Bootc Update Path #1969
CORS-3607: Add Azure CAPI installer to tech preview feature set #1967
OCPNODE-2436: SigstoreImageVerification featuregate marker for the ClusterImagePolicy and ImagePolicy #1964
Feature gate sippy queries to use variant registry #1909
NE-1530: Fix empty subnet list CEL validation #1961
OCPBUGS-36523: Rename Dockerfile #1949
NE-1530: IngressController LB Subnet Selection in AWS #1841
MCO-1215: add ManagedBootImagesAWS to Feature Gate #1945
OCPBUGS-36469: Update placementGroupPartition to pointer #1953
OCPNODE-2358: Update (cluster)imagepolicy doc no restriction on release repo scopes #1927
OCPBUGS-36213: Remove the conversion webhook reference from the ConsolePlugin CRD spec #1946
features: add multi-arch feature gate per platform #1947
MON-3546: Add ClusterMonitoringCRD feature gate #1930
SDN-4934: Add NetworkSegmentation Feature Gate #1941
OCPBUGS-34906: Fix IngressController missing listTypes #1917
METAL-1038 Remove baremetal dependency on MachineAPI capability #1916
Full changelog

cluster-config-operator

CFE-921: Update openshift/api package to latest version #423
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-38641: Add 1 minute stabilisation for clusteroperators after rollout #320
OCPBUGS-36469: Bump openshift/api #315
CFE-1087: API Bump for capacity Reservation #313
NO-JIRA: Update OWNERS #311
Full changelog

cluster-csi-snapshot-controller-operator

CNV-43972: HCP custom tolerations integration #214
STOR-1593: Update api extensions to upstream #215
STOR-1596: Bump all deps for 4.17 #213
OCPBUGS-36528: Rename Dockerfile #212
Full changelog

cluster-dns-operator

OCPBUGS-38102: Bump to k8s.io/* v0.30.3 and controller-runtime v0.18.4 #420
OCPBUGS-33750: Bump version of DNSNameResolver controller #415
OCPBUGS-34229: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 #414
Full changelog

cluster-etcd-operator

Revert “OCPBUGS-38573: use pooled client for etcd single member health checks” #1322
OCPBUGS-38573: use pooled client for etcd single member health checks #1319
OCPBUGS-38341: prefer env var over hardcoding ciphers #1314
NO-JIRA: degrade targetconfigcontroller on quorum loss #1309
OCPBUGS-36462: ensure ordering in member health checks #1308
NO-JIRA: only update envvar listeners on real changes #1300
ETCD-636: expose PruneOpts #1297
ETCD-493: Reflect etcd grafana dashboard mixin from upstream #1291
ETCD-604: Prune revisioned resources #1292
OCPBUGS-36621: Force sync on missing etcd-all-bundles configmap #1296
Revert “OCPBUGS-36621: add etcd-all-bundles to cvo create-only” #1295
ETCD-574: Update TLS artifact descriptions according to registry requ… #1294
OCPBUGS-36621: add etcd-all-bundles to cvo create-only #1293
NO-JIRA: only read signer/bundles on forced leaf generation #1288
OCPBUGS-36301: parallelize member health checks #1286
OCPBUGS-36407: Rename Dockerfile.rhel7 to Dockerfile.ocp #1289
NO-JIRA: cert rotation same assertions #1285
Full changelog

cluster-image-registry-operator

MULTIARCH-4971: Sync ImageStreamImportMode setting in the image config status #1090
OCPBUGS-38842: pkg/resource: invoke update-ca-trust extract with –output #1096
OCPBUGS-37543: Revert “Merge pull request #1087 from rajdeepc2792/rajdeepc2792/ARO-9391” #1093
ARO-9391, OCPBUGS-37543: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1087
OCPBUGS-38287: bump gophercloud to latest v2 #1086
IR-467: Enable MSI override for ARO HCP #1082
SPLAT-1721: Remove alibaba #1077
IR-471: Removing featuregate for chunkSizeMiB config #1073
Revert “IR-467: Enable Azure MSI authentication” #1079
IR-467: Enable Azure MSI authentication #1020
OCPBUGS-37207: Power VS: Check endpoints against lower case strings #1076
IR-471: Adding additional validation #1074
OCPBUGS-36038: go.*,vendor: bump go-retryablehttp #1063
IR-477: pkg/operator: deactivate azure path fix job #1061
Full changelog

cluster-ingress-operator

OCPBUGS-38217: Clear LB Status Parameters on LB Type Change #1126
OCPBUGS-34418: Allow router pods to use the “restricted” SCC #1064
OCPBUGS-38441: Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127
OCPBUGS-38079: Bump controller-runtime to v0.18.4 #1122
NE-1798: API bump for promotion of eipAllocation from feature gates to GA. #1118
NE-1688: Enable Azure MSI authentication for ARO HCP #1119
NE-1674: Add LB EIP Allocation for AWS #1109
NE-1531: Fix Initialization of NLB Status Parameters #1114
NE-1531: AWS Subnet Selection #1046
NE-1273: Add a watch to the ingress operator so it will recreate the gwapi crds #1106
OCPBUGS-37627: Fix getRouteHost error handling #1110
NE-1208: Gateway API E2E Testing #1023
OCPBUGS-31664: Fix SyncLoadBalancerFailed status message of IngressController #1102
OCPBUGS-36465: Delete and recreate canary route to clear spec.host #1095
OCPBUGS-34413: Refine logging for accurate infra CR status updates #1103
OCPBUGS-35342: Add e2e test for connect timeout #1084
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-38335: Bump library-go #1721
NO-JIRA: nodekubeconfigcontroller: set ownership component for node kubeconfigs #1704
AUTH-521: add disabled syncer as reason to CFE for PSA #1686
Full changelog

cluster-kube-cluster-api-operator

UPSTREAM: <carry>: OCPBUGS-30487: Bump google.golang.org/protobuf #39
NO-JIRA: Update OWNERS #40
Full changelog

cluster-kube-scheduler-operator

no-jira: Rename Dockerfile #546
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: bump(*) #113
Full changelog

cluster-machine-approver

OCPBUGS-36871: Client internal DNS checks should be case insensitive #237
NO-JIRA: Update OWNERS #236
Full changelog

cluster-monitoring-operator

OCPBUGS-38289: fix(prometheus): avoid passing the cluster-wide proxy config to a remote endpoint when noProxy will prevent the proxuying anyway #2441
MON-3982: [bot] Synchronize versions of the downstream components #2440
MON-3982: Upgrade to Prometheus operator v0.76.0 #2438
MON-3967, MON-3981: [bot] Synchronize versions of the downstream components #2437
MON-3962: set proxy_from_environment to true #2431
OCPBUGS-33863: use UserWorkloadInvalidConfiguration reason when UWM config only is invalid #2436
HOSTEDCP-1044: Add nodepools telemetry metrics for HyperShift #2265
NO-JIRA: [bot] Synchronize versions of the downstream components #2435
MON-3972: [bot] Synchronize versions of the downstream components #2434
OCPBUGS-17506: Make error messages clearer on poll timeouts #2417
MON-3964: set scrape timestamp tolerance for user workload monitoring #2429
MON-3961: inject proxy env variables in Alertmanager #2424
MON-3949: [bot] Synchronize versions of the downstream components #2419
MON-3900: follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend #2425
OCPBUGS-37686: fix documentation typos #2427
NO-JIRA: fix: fix a small typo #2426
MON-3921: Revert “Revert “Merge pull request #2392 from machine424/f-… #2403
MON-3959: Skip TestTLSSecurityProfileConfiguration as disruptive #2423
MON-3900: Remove prometheus-adapter code #2409
MON-3947: [bot] Synchronize versions of the downstream components #2418
MON-3947: [bot] Synchronize versions of the downstream components #2414
MON-3947: Bump prometheus-operator to 0.75.1 #2416
MON-2065: jsonnet: exclude kubernetes-storage rules #2377
OCPBUGS-36495: Add deprecated config runbook #2410
OCPBUGS-31250: Exclude windows nodes from kubelet servicemonitor #2368
OCPBUGS-36406: add runbook_url annotations #2401
MON-3914: add a regression test for gogc based on the go_gc_gogc_percent metric #2393
MON-3914: [bot] Synchronize versions of the downstream components #2394
OCPBUGS-36299: Revert #2392 “MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…” #2398
MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber… #2392
OCPBUGS-35480: Add deprecation for prometheus adapter #2381
MON-3915: chore: bump Go dependencies #2387
Full changelog

cluster-network-operator

CONSOLE-3952: Deploy networking-console-plugin by CNO #2322
AUTH-482: set required-scc for openshift workloads #2282
OCPBUGS-38249: Verify that the codegen changes were commited #2373
NO-JIRA: iptables-alerter streamlining #2404
CONSOLE-3952: Add networking-console-plugin image to release payload #2332
OCPBUGS-38326: OVN-K, UDN CRD: Add missing permissions to control-plane #2468
OCPBUGS-38176: multus, Add openshift-cnv to globalNamespace #2466
SDN-4919: Change the masquerade subnet default value for new clusters #2460
SDN-5072: Deploy FRR-K8s #2450
SDN-5144: Add UserDefinedNetwork CRD and RBAC #2464
SDN-4773: Add Azure MSI Env Var for ARO HCP #2465
NO-JIRA: more openshift-sdn cleanup #2455
SDN-5070: Allow day 2 customization of masquerade subnet #2421
OCPBUGS-37786: Add proxy env vars to onvkube-node #2453
OCPBUGS-37713: Handle random crictl errors in iptables-alerter #2451
CNV-43973: HCP custom tolerations integration #2441
SDN-4919: OVN-Kubernetes UDN: EndpointSlice mirror controller RBAC permissions #2448
SDN-4934: Enable TechPreview FeatureGate for NetworkSegmentation #2433
OCPBUGS-33758: Fix IC distributed control plane alerts #2406
SDN-5029: ipam, virt: enable the persistent ips feature #2431
SDN-4916: Bump to k8s v1.30 latest #2429
OCPBUGS-30950: Set mount propagation to HostToContainer for /var/lib/kubelet #2368
SDN-4934: Network Segmentation Feature Gate Vendoring from API #2428
OCPBUGS-23758: Set global IP forwarding sysctl parameters while starting ovnkube-node #2385
Full changelog

cluster-node-tuning-operator

OCPBUGS-38795: Fix defer status during recommended profile change (#1142) #1142
NO-JIRA:E2E: Remove checking of reserved cpus in irqbalance file (#1140) #1140
Add support for setting operand verbosity (#1114) #1114
Allow specifying $TAG separately from the full image path (#1139) #1139
CNF-13014: Add cross compiling support to Makefile (#1135) #1135
PSAP-1428: Read-only filesystem for the operator (#1136) #1136
Remove vestiges of annotation ignore-cgroups-version from tests (#1059) #1059
OCPBUGS-28647: tuned: distinguish deferred updates (#1129) #1129
OCPBUGS-34917: Operator: do not use /tmp (#1132) #1132
CNF-13391: ppc: adjust for Hypershift (#1124) #1124
OCPBUGS-37865: E2E: Verify ovs threadpool inherits parent cpu affinity (#1123) #1123
e2e:document: how to run locally on HCP platform (#1122) #1122
NO-JIRA:e2e:hypershift: remove/rename deprecated env variables (#1121) #1121
controller: predicate for containerruntimeconfig (#1108) #1108
CNF-12711: hypershift: enable feature gate support (#1115) #1115
NO-JIRA: Project cleanups (#1120) #1120
CNF-12680: CNF-13488: Add performance profile status for hypershift support (#1089) #1089
OCPBUGS-28647: deferred updates: cleanups (#1119) #1119
Fix the destination of asset’s copy (#1112) #1112
OCPBUGS-28647: tuned: operand: add support for deferred updates (#1019) #1019
makefile: ensure bindata (#1116) #1116
e2e: performance: skip test on env with insufficient cpus (#1111) #1111
e2e: performance: verify tuned one-shot service vs kubelet (#1106) #1106
CNF-7123: Enable and adjust 1_performance suite on Hypershift (#1084) #1084
NO-JIRA: Rename and reorganize hypershift labels (#1090) #1090
E2E: Add ginkgo labels to respective test suites (#1097) #1097
NO-JIRA: hypershift: implements missing client calls needed for e2e tests (#1107) #1107
CNF-13530: hypershift: support containerruntimeconfig (#1100) #1100
CNF-13394: Changed node inspector to have lazy initialization (#1093) #1093
NO-JIRA: hypershift:unitests: adjust controller unit-tests (#1105) #1105
Fix requested profile doesn’t exist (#1104) #1104
NO-JIRA:pao:hypershift: fix client implementation (#1094) #1094
hypershift: check updatingConfig condition to be false instead of missing (#1096) #1096
e2e:run-test.sh: match ginkgo CLI to ginkgo package (#1092) #1092
e2e:performance: decode to valid kubeletconfig object (#1091) #1091
Full changelog

cluster-olm-operator

OCPBUGS-37544: add version flag #62
OPRUN-3403: Remove Rukpak references from code #63
OPRUN-3405: Stop building rukpak #60
OPRUN-3437: update configmap permissions #59
OCPBUGS-36686: Re-enable cluster-olm-operator #58
OCPBUGS-34126: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.17 #55
OCPBUGS-36684: Disable cluster-olm-operator #56
NO-ISSUE: Update owners #57
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-30492: bump google.golang.org/protobuf #583
Full changelog

cluster-openshift-controller-manager-operator

no-jira: OWNERS: remove former employees #354
Full changelog

cluster-samples-operator

OCPBUGS-38926: Update Go version, API version and vendored libs to the same versions as in the openshift/api. #561
OCPBUGS-38273: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.18 #559
NO-ISSUE: Only pick up the changes from the supported imagestreams and templates in library-sync.sh. #553
KUBESAW-162: add mfrancisc and metlos as owners #549
Full changelog

cluster-storage-operator

OCPBUGS-38183: Use restricted-v2 SCC and remove runAsUser in Hypershift #497
STOR-1422: Bump(openshift/api): to get EFS volume metrics #496
CFE-879: Add TagUser role to creadentials request of GCP PD operator #490
OCPBUGS-37488: Pass TOOLS_IMAGE env var to AWS EBS CSI Driver operator #494
CNV-44992: HCP custom tolerations integration #493
OCPBUGS-37633: Add permissions for vsphere_problem_detector to access clustercsidrivers #495
STOR-1767: Disable vsphere-problem-detector alerts if ManagementState==Removed #487
STOR-1596: Bump all deps for 4.17 #486
MON-2065: manifests: add k8s storage rules #477
OCPBUGS-36169: deactivate MultipleDefaultStorageClasses alert immediately after being fixed #483
STOR-1767: add env var OPERATOR_NAME to vsphere csi operator deployment #485
Full changelog

cluster-update-keys

Revert “OCPBUGS-37770: Revert #58 “OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest”” #60
OCPBUGS-37770: Revert #58 “OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest” #59
OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest #58
Full changelog

cluster-version-operator

OCPBUGS-37770: cmd/render: Add –feature-gate-manifest-path option #1078
OCPBUGS-37770: pkg/payload/render: Include release image (Cluster)ImagePolicy #1076
OCPBUGS-37345: Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1072
no-jira: TestCVO: set known caps from configv1.KnownClusterVersionCapabilities #1075
no-jira: TestSetCapabilities: use KnownClusterVersionCapabilities for known keys instead of picking DefaultCapabilitySet #1073
OCPBUGS-32678: Fix a panic caused by a data race #1070
OCPBUGS-33983: vendor: Update openshift/api to pick up zz_generated.crd-manifests #1045
OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1061
Revert “METAL-1053, OCPBUGS-33983: Remove baremetal dependency on MachineAPI capability” #1063
METAL-1053: Remove baremetal dependency on MachineAPI capability #1051
Full changelog

console

OCPBUGS-38789: Networking section depends on networking-console-plugin #13675
CONSOLE-4124: replace deprecated components in ResourceLog #14133
CONSOLE-4178: i18n upload/download routine task - sprint 257 #14118
CONSOLE-4124: replace deprecated components in ResourceDropdown #14128
CONSOLE-4118: Convert DropdownDeprecated to use new Dropdown #14006
CONSOLE-4124: replace deprecated components in SilenceForm #14138
OCPBUGS-37448: fix namespace for networkpolicy #14165
OCPBUGS-35238: Storage -> StorageClasses -> Create StorageClass -> Provisioner -> kubernetes.io/gce-pd: i18n misses #14100
OCPBUGS-38226: Modifying helm e2e test to fix CI issue #14125
CONSOLE-4118: Switch deprecated select for utilization card filter #14121
OCPBUGS-38051: improve Lightspeed popup contents and navigation #14110
OCPBUGS-36967: RWOP access mode is not integrated in the UI [cephfs.csi.ceph.com & rbd.csi.ceph.com] #14099
OCPBUGS-34956: double k-native exec timeout #14043
OCPBUGS-38557: Add support for GCP Workload Identity / Federated identity operator installs #14086
OCPBUGS-38111: do not directly mutate links in useMemo #14116
NO-JIRA: Update Console plugin SDK package changelogs post publish #14135
CNV-39065: Display memory overcommit #14122
NO-JIRA: Fix typos in Console dynamic plugin SDK README #14136
OCPBUGS-37988: fix bug where cluster version text appears black in da… #14120
OCPBUGS-32773: Values entered into the Instantiate Template form are automatically cleared #14026
OCPBUGS-38228: correct casing in “Lightspeed” #14132
ODC-7625: Red Hat Camel K Operator installation via cli #14010
OCPBUGS-34365: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14103
OCPBUGS-37453: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14084
OCPBUGS-38236: Add telemetry to Lightspeed console capability #14123
CONSOLE-4188: Add the signals correlation to the app launcher #14097
NO-JIRA: Console PR Template: Fix position of colon #14047
MULTIARCH-4148: Add the CPU architecture column to the NodeList and filter properties for all cpu archs #13718
CONSOLE-4187: Dev console: Use Metrics page from monitoring-plugin #14105
CONSOLE-4185: Export CSV option for Virtualized Table #14050
ODC-7631: Add Shipwright Build create form #14106
NO-JIRA: Disable “Helm release status verification: HR-01-TC04” test due to CI outage #14124
OCPBUGS-38036: Properly chain trap commands #14111
CONSOLE-4104: Implement basic OLM V1 catalog view with filtering #14056
CONSOLE-3970: add Lightspeed button #14030
OCPBUGS-37426: No documentation covering how to translate plugin messages #14081
NO-JIRA: Update Console plugin SDK package changelogs post publish #14104
ODC-7632: Combine Shipwright model pages #14029
ODC-7626: Web Terminal Operator installation via cli #14009
ODC-7648: Open Lightspeed Chat Interface by clicking a button on the YAML Editor component #14087
OCPBUGS-30889: No access to list pipelines.tekton.dev prevents from using Delete application form #13942
OCPBUGS-36872: Add base path to locale init #14046
OCPBUGS-37802: Build option is selected as Shipwright on edit if created the deployment using BuildConfig #14101
OCPBUGS-36619: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14034
ODC-7634: Test all current workflows, write Integration tests #14075
OCPBUGS-36816: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14080
CNV-41506, OCPBUGS-37403: Localnet NAD incorrectly displayed #13948
ODC-7640: Remove Alerting Details Page from Console #14072
CONSOLE-4098: Show deprecated operators in OperatorHub (Post-installation screens) #14048
OCPBUGS-35301: add missing translation in TriggerBindingSection #14062
OCPBUGS-23332: Fix utilization card limits/total display #14053
CNV-35124, OCPBUGS-37401: OVN Kubernetes multi-homing #14044
ODC-7621, ODC-7633: Add Shipwright as Build Options in Add & Edit Forms #14016
CONSOLE-4171: i18n upload/download routine task - sprint 256 #14054
Add dynamic plugin SDK package changelogs & update plugin docs #14012
OCPBUGS-37054: hide ‘View all steps in documentation’ for ROSA and OSD #14061
OCPBUGS-33801: Manually create an API token for a ServiceAccount #14038
ODC-7639: Remove alerts list from dev console codebase #14014
ODC-7624, ODC-7628: shipwright test improvement #13990
OCPBUGS-34387: maintain session across tabs #14041
OCPBUGS-34901: ensure correct API version for OperandDetails #14036
OCPBUGS-36801: disable serverless tests till further investigation #14042
ODC-7620: Modal submit button: show loading state #14007
OCPBUGS-35940: Create RoleBinding will trigger Admission Webhook Warning #14021
OCPBUGS-34956: increase namespace deletion timeout for k-native e2e tests #14039
CONSOLE-4060: Show deprecated operators in OperatorHub (Pre-installation screens) #13961
OCPBUGS-34956: disable failing knative e2e test #14019
OCPBUGS-35926: Add debounce to PAC auto selecton in git import flow #14011
OCPBUGS-30841: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14032
OCPBUGS-36260: Tooltip on Pipeline when expression is not shows #14023
OCPBUGS-31047: Reordered dependancy warning to fix the lint error #13993
ODC-7612: Serverless Operator installation via CLI #13949
OCPBUGS-36339: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14024
CONSOLE-4140: display URI decoded configuration files on MachineConfi… #14015
OCPBUGS-36424: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14025
OCPBUGS-31685: Revert - terminal: use username if uid is not present #13719
OCPBUGS-35284: fix BMH restart annotation #13995
CONSOLE-4134: i18n upload/download routine task sprint - 255 #13991
OCPBUGS-35879: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14017
CONSOLE-3792: Add extension point to enable customized create project modal for dynamic plugins #13825
OCPBUGS-33490: Update Docs links for “Learn More” in Display Warning Policy Notification #14002
ODC-7581: Gitea support when using Import from Git in Developer Console #13928
OCPBUGS-35928: Improve control over PatternFly shared modules used in Console plugins #13992
OCPBUGS-35999: Remove duplicate code in storage module #14004
Full changelog

console-operator

OCPBUGS-38549: Get externalOrganizationID instead of the organizationID #925
CONSOLE-4163: Add RBAC for console to GET PackageManifests #921
CONSOLE-4161: Add Capabilities to config builder #920
OCPBUGS-35941: Bump documentationBaseURL to 4.17 #912
OCPBUGS-36213: Bump openshift/api to pick up removal of conversion webhook server reference #919
OCPBUGS-33715: Add logging for determining the ORG_ID source #918
OCPBUGS-33715: Cache organization ID when the ID changes #913
TRT-1733: Revert #914 “OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed” #915
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #914
Full changelog

coredns

OCPBUGS-36454: Rename Dockerfile.openshift.rhel7 to Dockerfile.ocp #128
NE-1721: Merge 1.11.3 #118
OCPBUGS-33750: UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin #122
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-34113: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.17 #292
Full changelog

csi-driver-manila-operator

NO-JIRA: Cleanup duplicated resources requests #238
AUTH-482: set required-scc for openshift workloads #234
STOR-1596: Bump all deps for 4.17 #233
Full changelog

csi-driver-nfs

OCPBUGS-34363: Updating csi-driver-nfs-container image to be consistent with ART for 4.17 #144
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

Updating Readme to add a new Clusterrole #190
Full changelog

csi-driver-shared-resource-operator

STOR-1596: Bump all deps for 4.17 #114
Full changelog

csi-external-attacher

STOR-1593: Rebase external-attacher to v4.6.1 for OCP 4.17 #76
OCPBUGS-36455: Rename Dockerfile to Dockerfile.ocp #77
Full changelog

csi-external-provisioner

STOR-1593: Rebase to upstream v5.0.2 for 4.17 #104
OCPBUGS-34458: Updating csi-provisioner-container image to be consistent with ART for 4.17 #103
OCPBUGS-37455: Revert 5.0.1 rebase #102
STOR-1593: Rebase to upstream v5.0.1 for 4.17 #98
Full changelog

csi-external-resizer

STOR-1593: Rebase to upstream v1.11.1 for 4.17 #164
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

STOR-1593: Rebase external-snapshotter to v8.0.1 for OCP 4.17 #156
OCPBUGS-34257: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.17 #158
OCPBUGS-34292: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.17 #159
OCPBUGS-34435: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.17 #157
Full changelog

csi-livenessprobe

OCPBUGS-36456: Rename Dockerfile #67
Full changelog

docker-registry

OCPBUGS-36521: Rename Dockerfile #407
Full changelog

egress-router-cni

OCPBUGS-37730: Build rhel8 binary from rhel8 golang builder #88
OCPBUGS-35526: update to go 1.22 and k8s.io mods to v0.30 #84
Full changelog

gcp-cloud-controller-manager

OCPBUGS-35256: Allow bootstrap node in existing instance groups #66
NO-JIRA: Update OWNERS #65
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update OWNERS #229
OCPCLOUD-2622: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.7.0 (93bb59d) into master #228
Full changelog

gcp-machine-controllers

OCPCLOUD-2565: Add feature gates flag #86
OCPCLOUD-2565: Bump o/api and MAO packages #87
NO-JIRA: Update OWNERS #85
Full changelog

gcp-pd-csi-driver

STOR-1602: Rebase to upstream v1.14.1 for OCP 4.17 #68
OCPBUGS-34245: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.17 #69
Full changelog

gcp-pd-csi-driver-operator

STOR-1819: Add manifest with OCP specific test config #125
CFE-879: Add resourceTags in Infrastructure to driver args list #120
STOR-1596: Bump all deps for 4.17 #124
Full changelog

haproxy-router

OCPBUGS-38475: Rename router Dockerfiles #616
OCPBUGS-38101: Bump k8s.io/* packages to v0.30.3 #615
OCPBUGS-34351: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.17 #602
OCPBUGS-34471: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.17 #604
Full changelog

hyperkube, pod

OCPBUGS-38336: UPSTREAM: 126641: e2e/storage: update block device test to always specify a valid path #2054
NO-JIRA: update downstream owners #2047
OCPBUGS-35297: UPSTREAM: 126470: Move APIServingWithRoutine to alpha and disabled by default #2044
OCPBUGS-37620: Bump 1.30.3 #2038
NO-JIRA: UPSTREAM: 126213: add test about container metrics from cadvisor #2040
OCPBUGS-37281: UPSTREAM: 126104: Add funcs in pkg/filesystem/util to set file permissions on Windows and update container log dir perms #2034
OCPEDGE-1181: UPSTREAM: <carry>: update test annotations for sno #2033
NO-JIRA: add tool to validate test packages imported #2024
OCPBUGS-36742: UPSTREAM: <carry>: sync imports #2017
OCPBUGS-37111: UPSTREAM: 125404: Fix that PodIP field is temporarily removed for a terminal pod #2025
NO-JIRA: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2023
MULTIARCH-4229: UPSTREAM:<carry>:bump cadvisor for 3516 upstream patches #2012
OCPBUGS-36743: UPSTREAM: <carry>: inject k8s version from hyperkube Dockerfile #2018
OCPBUGS-34294: OCPBUGS-34309: UPSTREAM: <carry>: update base image #1998
API-1783: Bump 1.30.2 #1996
Full changelog

hypershift

OCPBUGS-38925: copy oapi ca-trust recursively when building trust anchor #4605
OCPBUGS-38183: Update CSO deployment file #4542
HOSTEDCP-1483: update cloud-credential-operator in go.mod #4532
OCPBUGS-36680: ensure additionalTrustBundle propogates to workers #4331
NO-JIRA: add 4.14 and 4.15 HO base images to docker cve scan scripts #4591
OCPBUGS-38739: [Azure] Use infraID from infra-json if provided #4579
chore(deps): update konflux references #4568
chore(deps): update golang docker tag to v1.23 #4569
OCPBUGS-38463: nodepoolcontroller: List() PerformanceProfile status per NodePool #4556
HOSTEDCP-1565: external-dns: add proxy env vars if cluster proxy is configured #4580
NO-JIRA: [kubevirt] Fix KubeVirtNodesLiveMigratable condition for NodePools with 0 replicas #4494
HOSTEDCP-1861: cpo: separate KAS cert into internal and external #4566
OCPBUGS-34816: Block data plane HC configuration requests #4303
HOSTEDCP-1868: Pause CAPI cluster when HostedCluster is paused #4578
OCPBUGS-38409: Update CPO and HO base images to 4.18 #4543
HOSTEDCP-1903: Remove unused ROSA/EKS CRDs from hypershift install #4576
NO-JIRA: add docker script to find package versions in HO & CPO #4537
CONSOLE-3952: Add networking-console-plugin image to CNO as an env var #4558
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4533
OCPBUGS-36261: label routes when using SharedIngress #4562
OCPBUGS-37052: HTTPS proxy: do not proxy communication to cloud providers #4560
OSASINFRA-3567: openstack: fix setting external DNS on create #4517
OCPBUGS-38154: Fix bug where nodes were not triggering dedicated serving reconciliation #4563
OSASINFRA-3553: relax PodAffinityTerm for zone spreading in HA #4513
OCPBUGS-38467: allow for shared-ingress router pod creation without p… #4557
NO-JIRA: Fix CEL rules in the CRD #4512
HOSTEDCP-1475: Remove hard-coded konnectivity agenty image URI #4548
HOSTEDCP-1609: Support configuring Azure diagnostics via CLI flags #4529
OCPBUGS-38437: Stop building mce-2.7 from main #4549
OCPBUGS-36261: label routes only when HCP router used #4495
HOSTEDCP-1707: Update version support and upgrade docs #4347
HOSTEDCP-1874: Remove saas_template.yaml #4521
NO-JIRA: Bump LatestSupportedVersion to 4.18.0 after branch-out #4530
chore(deps): update konflux references (main) #4522
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (main) #4526
NO-JIRA: Update golang Docker tag to v1.22 (main) #4523
CNV-42532: KubeVirt: add label to DataVolume #4509
OCPBUGS-38183: make use of azure-disk-driver-control-plane-image #4514
OSASINFRA-3546: docs/openstack: fix typo #4510
OCPBUGS-25937: Support KMS v2 on AWS #4502
OSASINFRA-3555: openstack: e2e adjustments #4492
HOSTEDCP-1776: Set KCM node monitor grace period #4404
HOSTEDCP-1853: Add Arm NodePool Support Through Azure Marketplace #4455
OCPBUGS-38041: test: e2e: handle 409 conflict in EnsureHostedClusterImmutability #4493
HOSTEDCP-1850: Allow setting Kube APIServer maximum requests in flight #4488
OSASINFRA-3550: openstack: ingress API & octavia ingress provider #4474
OCPBUGS-37488: CSO: add environment variable for tools image #4483
NO-JIRA: Update Konflux 4.17 and perform migration #4486
NO-JIRA: Update Konflux and perform migration #4485
OSASINFRA-3554: OpenStack: Use external network ID in favor of Name #4477
OCPBUGS-37934: Reverting ETCD cluster rebuild #4475
OCPBUGS-37052: Use konnectivity HTTP proxy for ingress controller #4456
HOSTEDCP-1669: Add first azure services validation #4466
NO-JIRA: Remove non relevant OVNSbDb service type declarations #4465
HOSTEDCP-1565: add VPC Endpoint Service proxy support #4470
OCPBUGS-37832: set proxy envvars on aws and azure CCMs #4468
HOSTEDCP-1851: Use a multi-arch haproxy image for shared ingress #4454
HOSTEDCP-1669: Make hostedcluster.spec.services immutable for non IBM platforms #4449
NO-JIRA: Ensure VolumeSnapshots are deleted during cloud resource cleanup #4306
OCPBUGS-37753: Let the CPO oidc check resolve through data plane #4273
NO-JIRA: Update IBM go sdk #4435
NO-JIRA: Flaky cert validation test #4448
CNF-12681: Added support for performance profile status #4020
HOSTEDCP-1778: Default multi-arch flag to true and default release stream for HCP CLI #4447
OCPBUGS-36932: Add HTTP konnectivity proxy to OAuth server #4381
OSASINFRA-3550: docs/openstack: adds content for Ingress with MetalLB #4439
OCPBUGS-37703: fix release stream flag/rhcos image for create cluste… #4445
CNV-32074: Add Kubevirt live-migratable condition for HC and NP #4361
OCPBUGS-37698: mce-2.7 enablement for main #4442
OCPBUGS-36689: Omit the unused 0000_50_olm_06-psm-operator.service.ya… #4348
OSASINFRA-3546: openstack: document how to create a cluster #4414
NO-JIRA: chore(deps): update konflux references (main) #4426
HOSTEDCP-1798: Update AWS multi-arch docs to include migration #4421
OCPBUGS-37625: DedicatedRequestServing scheduler: make taken labels list consistent #4425
OCPBUGS-37486: Set right endpointSlice port #4422
OCPBUGS-24400: Only recreate etcd if hasn’t ever been ready #4419
OSASINFRA-3319: implements required OpenStack credentials #4410
HOSTEDCP-1791: dont render any secrets in manifest file #4420
HOSTEDCP-1798: Refactor multi-arch validation algorithm #4405
OSASINFRA-3538: openstack: small fixes for CLI #4415
OCPBUGS-34820: Keep in sync the HC and HCP ICS field #4412
HOSTEDCP-1813: Moves MachineIdentity from the HostedCluster API to the NodePool API #4408
HOSTEDCP-1791: dont render cloud-credentials secret #4406
OSASINFRA-3312: Implements OpenStack Node pools #4409
OSASINFRA-3539: Add ipam to cluster-api assets #4399
OSASINFRA-3538: openstack: cluster CLI #4396
HOSTEDCP-1838: Migrate buildah config in tekton files for migration from 0.1 to 0.2 #4403
HOSTEDCP-1836: Fix Snyk vulnerability with python deps #4394
OCPBUGS-36897: fix(api): Nodepool CEL validation fix #4378
OSASINFRA-3311: openstack: CAPO provider deployment #4373
OCPBUGS-37222: extract rhel9 MCO binaries for rhel8 based MCO images #4382
HOSTEDCP-1834: Fix Dependabot Issue By Updating Azure RHCOS Image Copy Process #4379
OCPBUGS-37102: Separate ibmcloud kms encryption configuration types #4372
NO-JIRA: Fix OADP backup objects #4376
HOSTEDCP-1832: Document konnectivity in HyperShift #4374
CNV-39630: Add ability to set tolerations on the HostedCluster #4339
OSASINFRA-3525: Initial PR to start supporting OpenStack platform #4350
CNF-11845: nodepoolcontroller: mirror containerruntimeconfig to HCP NS #4150
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4335
OCPBUGS-34816: Fix the resource from is checking the MHC platform #4365
HOSTEDCP-1820: Add snyk helper scripts to contrib #4359
NO-JIRA: Update Konflux references #4362
OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4345
OCPBUGS-24400: Recreate the ETCD statefulSet on HostedCluster deployment when stays failing #4354
OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates #4322
OSASINFRA-3310: Adds cluster-api-provider-openstack assets #4355
HOSTEDCP-1734, HOSTEDCP-1737: use proxy-protocol-v2 for shared ingress #4330
NO-JIRA: Let cmd unit tests run without a running Kubernetes cluster #4310
NO-JIRA: Default azure to run as managed-service=aro #4316
OCPBUGS-34865: Fix name resolution for HTTPS konnectivity proxy #4351
NO-JIRA: add ignition payload inspect docs #4346
OCPBUGS-33934: Add newline after TLS certs referenced by image.config #4343
NO-JIRA: Update catalog annotation based on an OCP version #4344
HOSTEDCP-1818: fix(build): update to the fixed clamav image #4342
OCPBUGS-36681: Set Azure VM identity if user assigned identity set #4332
HOSTEDCP-1716: When running the HO locally it should no required a running pod #4268
CNF-12951: hypershift:performanceprofile: associate profile name with user input #4108
NO-JIRA: Add net policy to allow ingress from sharedingress namespace #4336
OCPBUGS-34865: Add HTTP(s) konnectivity proxy for openshift-apiserver #4218
OCPBUGS-34820: Delete IDMS in dataplane once HCP ICS field is removed #4333
NO-JIRA: KubeVirtJsonPatchTest: fix vmi slice assignment #4319
NO-JIRA: Update ci image of capk to 4.17 #4183
NO-JIRA: Dump capz azure resources #4329
NO-JIRA: Remove Steve Kuznetsov from approvers/owners #4334
NO-JIRA: Update Konflux references #4324
NO-JIRA: Update AKS contrib docs #4314
HOSTEDCP-1808: Update Mkdocs, dependencies and dockerfile #4323
NO-JIRA: Dump sharedingress manifest #4321
NO-JIRA: Enhance aks docs #4311
NO-JIRA: e2e tests: skip checking ValidKubeVirtInfraNetworkMTU if no workers #4313
Revert “HOSTEDCP-1778: Enable MultiArch flag by default” #4312
NO-JIRA: skip validate metrics on azure e2e #4305
NO-JIRA: skip multiarch test before HC creation #4292
OCPBUGS-30986: remove weak ciphers from security profile #4294
NO-JIRA: Add release notes to commit and print proper output when release errors #4304
HOSTEDCP-1778: Enable MultiArch flag by default #4272
CNV-39589: [Kubevirt] Add support for passing GPU devices to NodePools #4101
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 - abandoned #4300
NO-JIRA: chore(deps): update konflux references #4297
OCPBUGS-23922: hcco: reconcile apiserver config into hosted cluster #4278
OCPBUGS-36230: Use a reconciled proxy config when generating nodepool userdata #4277
OCPBUGS-35521: Move infra-volumesnapshot-class-mapping to core binding #4290
OCPBUGS-33060: enable audit log for oauth-openshift #3994
NO-JIRA: test/e2e: remove api budget checks #4286
NO-JIRA: fixup azure aks docs #4293
NO-JIRA: Update HC on AKS doc for new flags for infra #4274
HOSTEDCP-1342: Add new metrics to check CA bundle validity and expiry [OSD-15414] #3442
NO-JIRA: cmd/cluster/kubevirt: add a test from dvossel #4220
HOSTEDCP-1709, HOSTEDCP-1777: test/e2e: complete move to eventually blocks #4263
OCPBUGS-36188: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4271
OCPBUGS-31840: Make guest cluster components use the correct KAS port #3849
HOSTEDCP-1447: test/e2e: tar.gz hosted cluster content #4256
Update Konflux references #4258
OCPBUGS-35979: Keep old user data for aws < 4.16 #4269
Full changelog

ibm-cloud-controller-manager

NO-JIRA: Update OWNERS #72
Full changelog

ibm-vpc-block-csi-driver

STOR-1589: Rebase to upstream 5.2.8 for OCP 4.17 #70
OCPBUGS-34162: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.17 #68
OCPBUGS-36074: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #69
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-1596: Bump all deps for 4.17 #125
OCPBUGS-36074: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #119
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: Update OWNERS #83
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-2565: Adds –feature-gates CLI argument #43
OCPBUGS-36185: IBMCloud: Handle pagination for subnets #41
NO-JIRA: Update OWNERS #40
Full changelog

insights-operator

Using the appropriate Bash interpreter on Git hook scripts (#980) #980
OSPRH-5904: Integration of the OpenStack CRs into the insights-operator (#951) #951
limit the time for the new rapid container logs & update the endpoint (#964) #964
remove firing alerts from the config/metrics file (#954) #954
fix the configmapobserver notifications (#968) #968
update OWNERS file…again (#966) #966
Add haproxy metric (#963) #963
always store remote configuration and metrics in the archive (#959) #959
introduce JSON schema & validation for rapid container logs (#953) #953
remove SDN related gatherers (#955) #955
OCPBUGS-35882: properly encode the URL for the advisor links (#952) #952
Full changelog

ironic

NO-ISSUE: fix scos and fcos dockerfiles to remove ironic-inspector #566
OCPBUGS-38782: redfish-virtualmedia fails on XFusion nodes #560
OCPBUGS-38521: set min version for python3-webob #550
OCPBUGS-38596: Update ironic version in ironic-image #556
METAL-1123: Suppress file listing of compiled py files #544
OCPBUGS-38077: update sushy to pick up the RAID fix #540
OCPBUGS-38406: Update root image #542
OCPBUGS-38275: Updating ironic-container image to be consistent with ART for 4.18 #539
OCPBUGS-37402: bump werkzeug #533
METAL-1094: Sync with upstream metal3-io/ironic-image #532
OCPBUGS-37084: Update ironic projects to latest available #522
METAL-1070: Align ironic dependencies with latest upper constraints #520
OCPBUGS-33335: Update Python Jinja2 #519
METAL-1049: Download and install sources from local dir #494
Full changelog

ironic-agent

OCPBUGS-38521: set webob and bump werkzeug #147
OCPBUGS-38406: Update root image #144
OCPBUGS-38255: Updating ironic-agent-container image to be consistent with ART for 4.18 #143
METAL-1049: Download and install sources from local dir #142
OCPBUGS-37086: Update ironic projects to latest available #141
METAL-1070: Align ironic dependencies with latest upper constraints #140
OCPBUGS-35968: Disable installation of .pyc files through pip #139
NO-ISSUE: Bump ironic projects versions #137
Full changelog

ironic-machine-os-downloader

OCPBUGS-38265: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.18 #99
Full changelog

ironic-static-ip-manager

OCPBUGS-38282: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.18 #44
Full changelog

kube-proxy

SDN-4925: Revendor k/k to upstream 1.30.3 (for kube-proxy) #630
Full changelog

kube-state-metrics

OCPBUGS-33620: [bot] Bump openshift/kube-state-metrics to v2.13.0 #115
Full changelog

kubevirt-csi-driver

CNV-45886: Add csi-clone support to kubevirt-csi (#118) #45
CNV-44899: Sync upstream 2024-07-22 #44
Full changelog

machine-api-operator

OCPBUGS-31777: Updates message verbs to use %q where appropriate #1240
OCPCLOUD-2565: Machine controller feature gating #1274
OCPCLOUD-2565: Machineset feature gating #1273
OCPBUGS-37154: Added Permisions for Azure Capacity Reservation #1272
OCPCLOUD-2565: Updates vsphere feature gates #1269
CORS-3546: Nutanix: add gpus and dataDisks support #1266
CORS-3580: Add the hyperdisk-balanced disk type #1268
OCPBUGS-36469: Update validation for placementGroupPartition to honour it as pointer #1267
CFE-1065: Add range validation for placementGroupPartition #1265
CFE-1065: Add support for PlacementGroupPartition of placement group #1242
NO-JIRA: Update OWNERS #1264
Full changelog

machine-config-operator

OCPBUGS-31777: Updates message verbs to use %q where appropriate #4369
OCPBUGS-37850: Machine-config daemon ListPools panic during tech-preview CI runs #4533
NO-ISSUE: Add ref link to NodeDisruptionPolicy in docs/* #4543
AUTH-482: set required-scc for openshift workloads #4504
OCPNODE-2482: Enable CRI-O internal repair feature as the default #4519
OCPBUGS-37984: Give keepalived-monitor necessary capabilities #4517
OCPBUGS-37534: Revert “MCD-pull: run after network-online.target in Azure” #4515
OCPBUGS-38320: Revert “templates/master/cri-o: make crun as the default container runtime” #4523
OCPNODE-2357: templates/master/cri-o: make crun as the default container runtime #4437
NO-JIRA: crio: set min memory for crun #4516
OCPBUGS-35800: kubelet config controller does not always propogate tlsSecurityProfile #4512
OCPBUGS-31298: Prevent no-operation patches from overloading the kube-api server with unnecessary calls #4511
MCO-703: Lifecycle Buildah with MCO #4471
MCO-1214: Enabled boot images updates for AWS #4492
NO-ISSUE: Move ManagedBootImages and NodeDisruptionPolicy to default e2e suite #4513
NO-JIRA: Fix HasOSImage function #4510
NO-ISSUE: Remove openshift/api pin #4508
MCO-1065: MCO-1171: API bump for ManagedBootImages and NodeDisruptionPolicy GA #4496
OCPBUGS-33784: Guard MachineOSBuild informers with feature gates #4497
MCO-1230: Retry build and push operations multiple times #4469
OCPBUGS-30955: On-Prem resolv prepender to watch for NM changes #4488
MCO-1191, MCO-1194: Experiment with creating internal go bindings for bootc , Incorporate support for bootc commands to Machine Config Daemon #4465
OCPBUGS-36289: e2e test should wait for MCD pod to be running #4444
NO-ISSUE: OWNERS: keep up-to-date with active maintainers #4493
MCO-1202: MCO-1203: MCO-1204: MCO-1205: MCO-1213: Implementing tlsSecurityProfile for MCO #4435
SPLAT-1381: Remove Alibaba #4112
NO-ISSUE: API bump to fetch BootcNodeManagement FG #4487
OCPBUGS-36175: Remove privileged flag from on-prem containers #4443
OCPNODE-2438: bump API and update CRD manifests #4480
OCPBUGS-37271: kubelet: boot without PSI for performance concerns #4470
MCO-1125: OCPBUGS-35277: Allow paths to be defined for non-disruptive updates #4472
OCPBUGS-19537: OCB should fail if node is not coreos based #4442
MCO-1227: Run boot image controller only when required #4477
OCPBUGS-33397: Openshift uncordoned compute-node that was intentionally cordoned #4475
OCPBUGS-33134: Nodes are drained twice when an OCB image is applied #4467
OCPBUGS-36654: Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events #4460
OPNET-465: Refactor LB and DNS manifest list for vSphere #4167
MCO-1103: Restore setup-envtest used in the verify test #4458
MCO-1144: Implement progressing/error boot images conditions on the MachineConfiguration object #4390
NO-ISSUE: Revert “disable mglru service” #4468
OCPBUGS-36344: Add CIP relevant mirrors to sigstore attachement cfg #4449
OCPBUGS-35436: Remove disable-mglru.service #4466
OCPBUGS-36711: templates: run disable-mglru conditionally #4459
OCPBUGS-35300: MCD-pull: run after network-online.target in Azure #4423
OCPBUGS-30603: Bootstrap e2e test featuregate setup does not match the actual code #4439
MCO-1147, OCPBUGS-34225: Pick up openshift/kubernetes 1.30 rebase updates, Dockerfile Update #4399
OCPNODE-2226: Introduce versioning in auto-node-sizing feature #4363
OCPBUGS-21628, OCPBUGS-28974: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4429
OCPBUGS-33694: daemon/update: disable systemd unit before overwriting #4421
OCPBUGS-36178: remove unnecessary e2e test TestControllerConfigStuff #4434
Full changelog

monitoring-plugin

OCPBUGS-36921: Use resource label when showing empty alert list pages #165
NO-JIRA: Update query-browser to not use setState #164
NO-JIRA: upgrade to go 1.22 fixing the z version #162
NO-JIRA: downgrade to go 1.21 to be able to use cachito #160
NO-JIRA: add FIPS compliant flags and env vars #157
OU-431: Export CSV for Alert Tables #133
NO-JIRA: Use DNF and go based image in Dockerfile #154
NO-JIRA: fix cachito web folder #151
NO-JIRA: fix command chain for art image #149
NO-JIRA: fix cachito pem file location #146
NO-JIRA: fix cachito target folder #144
NO-JIRA: Fix art image cachito path for yarn lock #142
OU-436: Add Golang backend #128
OU-258: Dev console: Use Metrics page from monitoring-plugin #138
OCPBUGS-37291: check undefined function before calling #137
NO-JIRA: Fix docker local and log query browser error #135
OU-248: Add Alerts Detail Page #131
OU-238: Export CSV #127
OCPBUGS-36970: Use the non-tenancy URL in the Admin perspective #134
OU-251: Prevent rule labels from being added to alert labels for dev console #132
OU-439: Add the predefined queries list to the admin metrics #129
OU-251: Migrate Developer Perspective Alert List to Monitoring Plugin #125
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-37991: Downstream sync to address multiple interface returns in network-status annotation #245
Full changelog

multus-whereabouts-ipam-cni

NP-1057: Ds merge 08/02/2024 #307
OCPBUGS-33941: upstream sync 23072024 #303
Full changelog

must-gather

NO-JIRA: Expand the approvers for must-gather #439
MON-3108: fix(collection-scripts/monitoring_common.sh): set a default –sandbox-dir-root to ‘promtool tsdb dump-openmetrics’ for better UX #437
CNF-13837: gather_ppc: fallback option when NTO image not found #436
MON-3108: Add gather_metrics for Prometheus fetching #434
OCPBUGS-33959, SDN-5066: Remove needless multus log collection #431
NO-JIRA: Update dockerfile rename changes #433
NO-JIRA: Rename Dockerfile #432
NO-JIRA: Correct typo. #414
NO-JIRA: Adding the missing clusterresourcequota and Flowcontrol resources #408
Full changelog

network-metrics-daemon

Correct spelling (#97) #97
Full changelog

network-tools

NO-JIRA: Remove Ben from script #130
NO-JIRA: Add real total line to the bug ranking #131
Full changelog

nutanix-cloud-controller-manager

NO-JIRA: Update OWNERS #34
Full changelog

nutanix-machine-controllers

CORS-3546: Nutanix: support for gpus and dataDisks #77
OCPCLOUD-2565: Adds –feature-gates CLI argument #78
OCPCLOUD-2611: Update to Kube 1.30 #75
OCPBUGS-34230: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.17 #74
NO-JIRA: Update OWNERS #76
Full changelog

oc-mirror

OCPBUGS-35824: Log warning UPDATE_URL_OVERRIDE correctly (#908) #908
CLID-169: Add terraform template to up Enclave demo env on AWS (#907) #907
OCPBUGS-37867: Use tag only when image by tag and digest (#911) #911
OCPBUGS-38037: unable to build graph image in enclave environment (#906) #906
OCPBUGS-38396: use platform.release when set (#909) #909
OCPBUGS-37950: Bug fix when kubevirt image not found (#904) #904
OCPBUGS-37667: Rebuild catalogs – without cache generation (#899) #899
CLID-179: Include the HyperShift KubeVirt CoreOS container (#900) #900
removes duplicated operator related images (#903) #903
CLID-133: feat: introduces priority on mirroring and show which operator failed during mirroring (#895) #895
OCPBUGS-36410: fix: creates tags for release images (#898) #898
CLID-136: Skip deletion of operator catalog image in delete feature (#894) #894
OCPBUGS-37055: Use proxy for HTTP request release signatures (#891) #891
OCPBUGS-36548: Skip catalogs that are non existing (#888) #888
OCPBUGS-36445: Fix to ensure invalid catalogs are skipped (#885) #885
CLID-99 consolidates the release collector for delete feature (#883) #883
This is a combination of 6 commits. (#880) #880
OCPBUGS-362214: Fix V2 DiskToMirror should not require internet access (#882) #882
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #59
NO-ISSUE: Synchronize From Upstream Repositories #57
NO-ISSUE: Synchronize From Upstream Repositories #53
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #131
NO-ISSUE: Synchronize From Upstream Repositories #130
NO-ISSUE: Synchronize From Upstream Repositories #129
NO-ISSUE: Synchronize From Upstream Repositories #128
NO-ISSUE: Synchronize From Upstream Repositories #127
NO-ISSUE: Synchronize From Upstream Repositories #126
NO-ISSUE: Synchronize From Upstream Repositories #125
NO-ISSUE: Synchronize From Upstream Repositories #124
NO-ISSUE: Synchronize From Upstream Repositories #123
NO-ISSUE: Synchronize From Upstream Repositories #121
NO-ISSUE: Synchronize From Upstream Repositories #119
NO-ISSUE: Synchronize From Upstream Repositories #118
NO-ISSUE: Synchronize From Upstream Repositories #117
NO-ISSUE: Synchronize From Upstream Repositories #115
OCPBUGS-36471: Synchronize From Upstream Repositories #114
Full changelog

openshift-controller-manager

OCPBUGS-35731: Race condition when deleting ServiceAccount #318
Revert Revert OCPBUGS-36833: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #322
NO-JIRA: Revert “OCPBUGS-36833: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation” #321
OCPBUGS-36833: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #319
Full changelog

openstack-cinder-csi-driver-operator

NO-JIRA: Add more docs for configuration options #167
STOR-1596: Bump all deps for 4.17 #176
Full changelog

openstack-machine-api-provider

OCPCLOUD-2565: Adds –feature-gates CLI argument #122
Full changelog

operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #841
NO-ISSUE: Synchronize From Upstream Repositories #835
NO-ISSUE: Synchronize From Upstream Repositories #834
NO-ISSUE: Update junit report file name to show spec results on Test Grid #832
OCPBUGS-36500: remove cvo hypershift profile annotation from psm-operator manifests #831
NO-ISSUE: Synchronize From Upstream Repositories #830
NO-ISSUE: Synchronize From Upstream Repositories #827
NO-ISSUE: Synchronize From Upstream Repositories #825
NO-ISSUE: Synchronize From Upstream Repositories #820
NO-ISSUE: Synchronize From Upstream Repositories #816
OCPBUGS-35970: add io.openshift.release.operator label to image #812
NO-ISSUE: Synchronize From Upstream Repositories #815
NO-ISSUE: add output-dir to E2E_GINKGO_OPTS #813
OCPBUGS-35970: don’t erase the filesystem from the base tools image #804
NO-ISSUE: Manual Sync 0702 #808
OCPBUGS-35970: switch base image #802
NO-ISSUE: Synchronize From Upstream Repositories #801
Full changelog

operator-marketplace

NO-ISSUE: Add client certificate and key to service monitor #482
OCPBUGS-34244: Updating marketplace-operator-container image to be consistent with ART for 4.17 #568
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

SDN-4930: Downstream Merge 20th august #2268
OCPBUGS-37056, OCPBUGS-37439, OCPBUGS-37439: Downstream Merge 14th August 2024 #2259
OCPBUGS-37541: Fix per-pod MCS/metadata blocking #2240
OCPBUGS-36614, OCPBUGS-36865, SDN-4919: [DownstreamMerge] 29 July 2024 #2241
OCPBUGS-37709: Revert #2233 DownStream Merge: 24th July 2024 #2243
OCPBUGS-36865, SDN-4919: DownStream Merge: 24th July 2024 #2233
SDN-4919: Downstream Merge July 10th #2223
OCPBUGS-33758, OCPBUGS-33758, OCPBUGS-35347, OCPBUGS-35367, SDN-4919, SDN-5011: Downstream Merge: July 2nd #2217
OCPBUGS-34463: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.17 #2186
Full changelog

powervs-block-csi-driver

MULTIARCH-4809: Rebase with upstream: go modules updates and code changes. #86
Full changelog

powervs-block-csi-driver-operator

STOR-1596: Bump all deps for 4.17 #73
OCPBUGS-36229: Fix CVE-2023-45288 and CVE-2024-24786 #69
Full changelog

powervs-cloud-controller-manager

No-Jira: Manual rebase of upstream release 1.30 on 22-Jul-2024 #72
No-Jira: Add multiarch reviewers and approvers to OWNER file #70
No-Jira: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (6c2ab88) into main #69
Full changelog

powervs-machine-controllers

OCPCLOUD-2565: Adds –feature-gates CLI argument #80
OCPBUGS-37688: Update go.mod to fix CVE #81
Full changelog

prom-label-proxy

MON-3972: [bot] Bump openshift/prom-label-proxy to v0.11.0 #375
Full changelog

prometheus

OCPBUGS-38622: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #220
MON-3981: [bot] Bump openshift/prometheus to v2.54.0 #219
MON-3981: [bot] Bump openshift/prometheus to v2.54.0 #218
MON-3914: [bot] Bump openshift/prometheus to v2.53.1 #215
OCPBUGS-37370: backport of upstream fix #216
OCPBUGS-37244: [bot] Bump openshift/prometheus to v2.53.1 #211
OCPBUGS-35483: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #213
OCPBUGS-36768: cherry-pick upstream remote-write fix #210
MON-3914: [bot] Bump openshift/prometheus to v2.53.0 #208
MON-3914: [bot] Bump openshift/prometheus to v2.53.0 #206
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-3982: [bot] Bump openshift/prometheus-operator to v0.76.0 #297
OCPBUGS-38174: feat: sync proxy settings in Alertmanager configuration #295
MON-3947: Bump openshift/prometheus-operator to v0.75.2 #294
Full changelog

prometheus-node-exporter

MON-3949: [bot] Bump openshift/node_exporter to v1.8.2 #149
Full changelog

telemeter

OCPBUGS-33285: Add metricsclient_http_requests_total metric #500
Full changelog

tests

OCPBUGS-38859: add api-unreachable-from-client monitor test #29003
WRKLDS-1449: remove create job extended test in favor of the upstream ones #29030
OCPBUGS-38792: Try also user CA for getting openshift-tests image #28990
OCPBUGS-38805: fix: removed grouping flag for jq #29028
NO-JIRA: Expand approvers for origin #29027
WRKLDS-1449: Update etcd test data for 1.31 release #29023
NO-JIRA: Tame some build-log.txt output #29019
NO-JIRA: rename unexpected node unreachable and add unreachable interval #29017
NO-JIRA: apiserver/graceful_termination: simplify condition for “kubelet terminates kube-apiserver gracefully extended” test #29016
NO-JIRA: new test for detecting ungraceful kube-apiserver termination by kubelet #29015
WRKLDS-1431: e2e: extend DC testing to Deployments #28996
NO-JIRA: add important resources to watch #29011
OCPBUGS-38061: add unexpected ready for monitor tests #28989
Revert “IR-471: Skipping chunksizemib tests” #28976
OCPBUGS-38359: NetworkSegmentation tests: fix the IPv6 node IP detection #28997
STOR-1839: run vsphere driver config test on non techpreview clusters #28848
NO-JIRA: create a test that repeatedly rolls out the kube-apiserver and uses m… #28986
NO-JIRA: drop ocp-storage exceptions for termination policy #28793
STOR-1819: Add OpenShift specific CSI certification test #28967
TRT-1723: riskanalysis: pass along errors from API request #28984
SDN-4919: NetworkSegmentation: Add tests for EndpointSlices mirror controller #28945
OCPEDGE-1033: fix: making oslat test more dynamic to handle different cpu sets #28980
OCPEDGE-1182: fix: remove un-needed test #28979
TRT-1688: Revert “allow etcd log test to flake under vsphere” #28978
OCPBUGS-37837: vertical scaling test should not rely on CPMS replicas #28969
OCPBUGS-37986: Revert #28944 “ Reapply \“Merge pull request #28277 from vrutkovs/in-cluster-fixes-v3\ #28977
IR-471: Skipping chunksizemib tests #28975
OCPBUGS-37245: Ignore pod sandbox adds expected to fail #28973
OCPBUGS-18865: Reapply “Merge pull request #28277 from vrutkovs/in-cluster-fixes-v3” #28944
NO-JIRA: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #28968
NO-JIRA: riskanalysis: improve request retries #28961
SDN-4919: Skip network segmentation tests #28964
NO-ISSUE: Automated - Update synthetic test data #28954
OCPBUGS-37675: Add a version command to openshift-tests #28960
NO-ISSUE: Use external binary name on retry #28955
OCPBUGS-35880: fix pod not returning success on ‘Managed cluster should verify that nodes have no unexpected reboots’ #28953
OCPEDGE-1181: bump(ocp/k8s): updating to pull in annotation fix for SNO conformance test #28948
IR-471: Updating the test with skipper function #28947
no-jira: e2e: mark tests as [apigroup:apps.openshift.io] dependent #28951
NO-JIRA: Revert “pathologicalevents: Ignore leaky RecreatingTerminatedPod” #28950
SDN-5133: Add udn test framework #28933
NO-ISSUE: Automated - Update synthetic test data #28914
OCPBUGS-37436: increase telemetry series permitted avg threshold #28943
TRT-1702: record risk analysis results in BQ #28926
OCPBUGS-37411: Revert #28277 “OCPBUGS-18865: add monitortest: in-cluster disruption monitors” #28942
no-jira: e2e: check for deployer RB only when DeploymentConfig is enabled #28941
no-jira: e2e: check for deployer SA only when DeploymentConfig is enabled #28939
OCPBUGS-18865: add monitortest: in-cluster disruption monitors #28277
OCPBUGS-36742: Sync imports #28929
OCPEDGE-1125: upkeep: add better logging for crio failures #28852
NO-JIRA: egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28916
IR-471: Add test for ChunkSizeMiB configuration for Registry #28932
STOR-1961: Fix vSphereDriverConfiguration tests #28936
NO-JIRA: Fail on APIs removed in the next release #28240
OCPBUGS-36672: Shorten stabilization time for etcd profiles test #28930
API-1802: watchevents: add cert rotation events #28639
OCPBUGS-34902: Revert “NO-JIRA: test: skip crio test for rt runs” #28918
OCPBUGS-36403: test/extended/util/openshift/clusterversionoperator/adminack: No nested framework.Fail #28917
NO-JIRA: Always try to pull the the in-cluster test binary #28900
NO-JIRA: fix: update skip logic for watchdog #28920
ETCD-611: update cert rotation tests #28890
Use ephemeral cluster docker config.json for test binary extraction #28873
OCPBUGS-36263: Expand allowance for kubelet metrics api endpoint outages during node upgrades #28911
USHIFT-3455: Skip legacy-etcd monitor tests in microshift #28874
OCPEDGE-800: feat: add SNO upgrade consideration during pathological errors #28903
OCPBUGS-34475: remove unused in-cluster monitoring code #28908
OCPBUGS-36187: Revert #28515 Re-enable test/extended/router/http2 tests on AWS” #28905
OCPBUGS-33486: Removes dependency on samples operator images #28840
Full changelog

thanos

MON-3967: [bot] Bump openshift/thanos to v0.36.1 #149
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #69
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update OWNERS #47
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-34114: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.17 #125
OCPBUGS-34099: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.17 #124
Full changelog

vsphere-csi-driver-operator

OCPBUGS-38272: Restart CSI driver controller pod on config change #246
OCPBUGS-38026: Implement minor quality of life improvements. #245
STOR-1819: Add manifest with OCP specific test config #244
OCPBUGS-37772: Disable CSI migration in multi-vCenter cluster #243
SPLAT-1637: Initial changes for multi vcenter support. #228
STOR-1593: Disable toplogy feature explicitly #241
STOR-1949: Add cns migration #242
STOR-1596: Bump all deps for 4.17 #236
STOR-1767: Delete resources if spec.ManagementState is equal to Removed for removable CSI drivers #233
OCPBUGS-37201: Make sure credentials are wrapped in double quotes #239
OCPBUGS-37201: Ignore comment symbols when reading the ini file #238
STOR-1290: don’t pass credentials via environment variables in vSphere #227
OCPBUGS-34234: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.17 #232
Full changelog

vsphere-problem-detector

SPLAT-1658: Add multi vCenter support #158
STOR-1767: Silence vsphere-problem-detector if State is Removed #169
STOR-1767: Make checks less frequent if State is Removed in ClusterCSIDriver #166
STOR-1596: Bump all deps for 4.17 #163
OCPBUGS-34563: Drop event when CheckDefaultDatastore fails #165
OCPBUGS-34176: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.17 #164
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github