Back to index
4.14.0-0.ci-2026-03-18-130004 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.14.0-0.ci-2026-03-18-130004 Team Approvals:
Tests:
Blocking jobsaws-ovn-upgrade-4.14-minor Pending (1 retry) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-aws-ovn-upgradeaws-sdn-serial Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-aws-sdn-serialazure-sdn-upgrade-4.14-minor Pending (1 retry) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-azure-sdn-upgradegcp-ovn-upgrade-4.14-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.14-e2e-gcp-ovn-upgradehypershift-e2e Failed (1 retry) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn Upgrades from:
Loading changelog, this may take a while ...
Created: 2026-03-18 13:00:19 +0000 UTC
Image Digest: sha256:b0443eec623a360ed91025d2e1418ab3d28422c849508e63e19d29a34d7be55a
Components
New images
Removed images
ovn-kubernetes-microshift-rhel-9
ovn-kubernetes-rhel-9
Rebuilt images without code change
apiserver-network-proxy git f56c606a sha256:f4ec5042af3a5e88926c1cb7a3e00e25b8cd1f4748e6affeed371aa984d20702machine-os-content sha256:9fc12499bac8cb0ab0e2c3ac7f7ba237a85672d6550a7e5f458d0e7e642c9798
rhel-coreos sha256:1526cb474ed2440c30e2ef5132024df211ee072c384089db3fb7d471ecb042e0
rhel-coreos-extensions sha256:37758431ff6eedca7744136b5f7656f4dbe9426e5b370f61d4eef7f056d205b0
OCPBUGS-58642 : CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) #1194 OCPBUGS-53715 : Bump jwt to 4.5.2 in release-4.14 (#1093) #1093 Bump golang.org/x/net to v0.33.0 (#1012) #1012
OCPBUGS-15347 : Update version go-http-metrics/gin (#933) #933 MGMT-17594 : Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#834) #834 MGMT-17591 : Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#830) #830 MGMT-16843 : Ensure valid hostname during install (#794) #794 OCPBUGS-20049 : Remove uninitialized taint for agent-based installs (#753) #753 NO-ISSUE: dependabot exclude k8s (#706) #706
OCPBUGS-16482 : bump golangci-lint to 1.53.1 (#702) #702 OCPBUGS-4240 : allow controller to complete for agent-based installs (#700) #700 MGMT-15235 : Compile with CGO_ENABLED=1 for amd64 (#699) #699 Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)” (#693) #683
OCPBUGS-17252 : Bump golang.org/x/net/html (#695) #695 Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) #652
MGMT-15343 : dependabot group updates (#692) #692 MGMT-15344 : Assisted-controller should not timeout on waiting cvo by itself (#688) #688 MGMT-15235 : Compile with CGO_ENABLED=1 for FIPS (#683) #683 MGMT-13586 : Wait for ETCD Bootstrap to complete (#670) #670 NO-ISSUE: Remove slaviered from project OWNERS (#669) #669
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.7 (#663) #663
Updating ose-agent-installer-csr-approver images to be consistent with ART (#651) #651
MGMT-14299 : Limit untaint nodes to vsphere/nutanix (#660) #660 NO-ISSUE: Add javipolo to approvers (#659) #659
MGMT-12967 : Create network policy in assisted-installer namespace (#658) #658 NO-ISSUE: Bump github.com/onsi/gomega from 1.24.2 to 1.27.5 (#656) #656
MGMT-14114 : Nutanix - uninitialized set on nodes (#653) #653 Full changelog
OCPBUGS-58652 , OCPBUGS-58657 : Bump glog to v1.2.5 in release-4.14 (#1073) #1073 OCPBUGS-53707 : Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) #973 OCPBUGS-46955 : Bump golang.org/x/net to 0.33.0 (#885) #885 OCPBUGS-16483 : Update apimachinery dependency to remove goproxy dep (#709) #709 OCPBUGS-33404 : Make removable disks eligible (#725) #725 MGMT-17594 : Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#705) #705 MGMT-17591 : Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#703) #703 MGMT-17541 : Replace broken golangci reference (#698) #698 NO-ISSUE: Bump the go-dependencies group with 1 update (#597) #597
NO-ISSUE: Bump the go-dependencies group with 5 updates (#595) #595
MGMT-15661 : Update to latest ghw version (#594) #594 MGMT-15235 : Allow setting CGO_ENABLED flag (#589) #589 MGMT-15235 : Compile with CGO_ENABLED=1 for amd64 (#588) #588 Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#569)” (#582) #569
OCPBUGS-17251 : Bumping golang.org/x/net (#586) #586 MGMT-14933 : Detect if the host in running in OCI (#585) #585 MGMT-15359 : support appliance multipath virtual device (#584) #584 MGMT-13111 : Freeze on 404 Not Found (#583) #583 MGMT-15343 : dependabot remove docker (#581) #581 MGMT-15343 : dependabot group updates (#579) #579 Updating ose-agent-installer-node-agent images to be consistent with ART (#575) #575
OCPBUGS-16373 : Ignore arping errors on RHEL 9 (#576) #576 NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.16.0 to 2.16.2 (#574) #574
NO-ISSUE: Bump github.com/PuerkitoBio/rehttp from 1.1.0 to 1.2.0 (#568) #568
MGMT-15235 : Compile with CGO_ENABLED=1 for FIPS (#569) #569 NO-ISSUE: Bump golang.org/x/sys from 0.9.0 to 0.10.0 (#566) #566
NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.15.0 to 2.16.0 (#564) #564
AGENT-594 : remove agent based installer code (#563) #563 NO-ISSUE: Bump golang.org/x/sync from 0.2.0 to 0.3.0 (#561) #561
MGMT-14540 : Mark Appliance disk(s) with a partition name prefix ‘agent’ as eligible (#554) #554 OCPBUGS-14848 : Filter out hidden devices (#558) #558 NO-ISSUE: Bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#555) #555
NO-ISSUE: Bump github.com/go-openapi/swag from 0.22.3 to 0.22.4 (#556) #556
MGMT-13009 : Auto rename host with VLAN (#553) #553 NO-ISSUE: Bump github.com/itchyny/gojq from 0.12.12 to 0.12.13 (#552) #552
NO-ISSUE: Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#550) #550
MGMT-14751 : Detect DASD disks (s390x) (#549) #549 NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#545) #545
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#543) #543
NO-ISSUE: Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#544) #544
MGMT-14526 : Refernce latest assisted service to reflect domain name pattern change (#542) #542 Updating ose-agent-installer-node-agent images to be consistent with ART (#516) #516
NO-ISSUE: Bump golang.org/x/sync (#541) #541
NO-ISSUE: Remove slaviered from project OWNERS (#539) #539
MGMT-14481 : journal logs are empty during installation on rhel9.2 (#538) #538 NO-ISSUE: Bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0 (#537) #537
MGMT-14319 chronyc segfaulting (#534) #534
NO-ISSUE: Bump golang.org/x/sys from 0.6.0 to 0.7.0 (#533) #533
NO-ISSUE: Bump github.com/cenkalti/backoff/v4 from 4.1.3 to 4.2.1 (#532) #532
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#530) #530
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 (#529) #529
Force update to pick up latest libs (#531) #531
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5 (#525) #525
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.3 to 1.27.5 (#528) #528
MGMT-13946 : Ignore Proliant Gen 11 serial (#522) #522 NO-ISSUE: Bump github.com/onsi/gomega from 1.27.1 to 1.27.3 (#520) #520
NO-ISSUE: Bump golang.org/x/sys from 0.5.0 to 0.6.0 (#519) #519
OCPBUGS-8695 : vendor agent-installer-utils to v0.0.0-20230310220517-8506fbb6a346 (#517) #517 OCPBUGS-8677 : vendor agent-installer-utils to v0.0.0-20230308101916-306b7995977e (#514) #514 OCPBUGS-8390 : vendor agent-installer-utils to v0.0.0-20230307094740-57807526b660 (#512) #512 NO-ISSUE: Bump github.com/itchyny/gojq from 0.12.11 to 0.12.12 (#511) #511
NO-ISSUE: Bump github.com/spf13/afero from 1.9.3 to 1.9.5 (#510) #510
Full changelog
OCPBUGS-21350 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #36 OCPBUGS-16783 : Chore: Update OWNERS #32 OCPBUGS-12544 : 4.14: UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #30 STOR-1159 : Rebase to v1.1.7 #29 Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #28
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #27
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #26
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #25
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #71 OCPBUGS-21443 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #64 STOR-1439 : Restart controller Pods if metrics-serving-cert changed #56 OCPBUGS-16783 : Chore: Update OWNERS #54 OCPBUGS-14824 : Bump alibaba-disk-csi-driver-operator library-go #53 STOR-1168 : Bump common libraries #51 OCPBUGS-12545 : Bump golang.org/x/net@v0.9.0 #50 Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #49
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #48
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #47
OCPBUGS-8683 : Add management workloads annotations #46 Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #45
Full changelog
Updating ose-alibaba-machine-controllers images to be consistent with ART #42
OCPBUGS-10134 : Updating ose-alibaba-machine-controllers images to be consistent with ART #41 Full changelog
OCPBUGS-67748 : Updated logrus to v1.9.3 #313 OCPBUGS-33078 : Explicitly reserve 1 attachment for the root disk #306 OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #296 OCPBUGS-21057 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #280 STOR-1432 : hypershift: deploy controller with control plane release images #252 OCPBUGS-16783 : Chore: Update OWNERS #251 Bump k8s.io/apiextensions-apiserver from 0.27.1 to 0.27.4 #250
Bump k8s.io/component-base from 0.26.3 to 0.27.3 #240
OCPBUGS-15823 : Change CSI RPC call timeouts #248 STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #244 OCPBUGS-14824 : Bump efs-ebs-driver-operator library-go #247 STOR-1168 : Bump common libraries #222 Bump Kubernetes libs to v0.27.1 #243
STOR-1167 : Enable extra-create-metadata to tag snapshots #223 STOR-1300 : Restart controller Pods if metrics-serving-cert changed #216 OCPBUGS-11882 : Added safe-to-evict-local-volume annotation from bound-sa-token to ebs-controller #232 OCPBUGS-11882 : Added safe-to-evict annotation to aws-ebs-csi-driver-controller pods #231 OCPBUGS-13017 : assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #219 Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #217
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #215
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #214
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 #207
OCPBUGS-8691 : Hypershift: set control plane operand properties #205 Bump k8s.io/apiextensions-apiserver from 0.26.2 to 0.26.3 #203
OCPBUGS-8752 : fix: typo #198 OCPBUGS-8752 : feat: add workload annotation to deployment and daemonset #194 Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #195
Bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.2 #189
Bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 #190
Full changelog
OCPBUGS-32884 : Upgrade go-jose module to 2.6.3 #189 OCPBUGS-21761 : Backport the recent rebase to 4.14 #168 NO-ISSUE: Sync OWNERS with team members #176
snyk: exclude vendor/ #171
Bump to go 1.20 in go.mod #163
Updating ose-aws-pod-identity-webhook images to be consistent with ART #162
Updating ose-aws-pod-identity-webhook images to be consistent with ART #159
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #109 OCPBUGS-20784 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #101 OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #88 OCPBUGS-16496 : Bump library-go to remove dependency on goproxy #90 OCPBUGS-16783 : Chore: Update OWNERS #89 Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #87
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #84 OCPBUGS-14824 : Bump azure-disk-csi-driver-operator library-go #85 CCO-324 : Unrevert “CCO-324: add support for workload identity” #83 Revert “CCO-324: add support for workload identity” #82
CCO-324 : add support for workload identity #78 STOR-1168 : Bump common libraries #81 OCPBUGS-12559 : Bump golang.org/x/net@v0.9.0 #80 Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #79
OCPBUGS-8683 : Add management workloads annotations #74 OCPBUGS-10842 : Reorder static resources to create RBAC first #75 Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #73
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-41164 : bump mount-utils to treat ENODEV error as corrupted mount #79 OCPBUGS-33039 : Rebase v1.29.5 for OCP 4.14 #66 OCPBUGS-20884 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37 OCPBUGS-17285 : UPSTREAM: 1355: build(deps): bump golang.org/x/net from 0.12.0 to 0.14.0 #33 OCPBUGS-16783 : Chore: Update OWNERS #32 OCPBUGS-15657 : Update to 1.28.1 #31 STOR-1160 : Rebase to v1.28.0 for OCP 4.14 #29 Updating azure-file-csi-driver images to be consistent with ART #28
Updating azure-file-csi-driver images to be consistent with ART #27
Updating azure-file-csi-driver images to be consistent with ART #26
Updating azure-file-csi-driver images to be consistent with ART #25
Full changelog
OCPBUGS-67753 : Bump github.com/sirupsen/logrus to v1.9.3 #114 OCPBUGS-33039 : add token audience for Azure File #104 OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #83 OCPBUGS-20983 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #76 STOR-1434 : Restart controller Pods if metrics-serving-cert changed #68 OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #64 OCPBUGS-16783 : Chore: Update OWNERS #65 OCPBUGS-16498 : Bump library-go to remove dependency on goproxy #66 Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #63
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #60 CCO-325 : Unrevert “CCO-325: add support for workload identity” #62 STOR-989 : Remove SC and manifest file for NFS backend #58 OCPBUGS-14824 : Bump azure-file-csi-driver-operator library-go #61 Revert “CCO-325: add support for workload identity” #59
CCO-325 : add support for workload identity #54 CCO-325 : Mount serviceaccount token into csi-driver container #53 STOR-1168 : Bump common libraries #57 OCPBUGS-12561 : Bump golang.org/x/net@v0.9.0 #56 Updating azure-file-csi-driver-operator images to be consistent with ART #55
Updating azure-file-csi-driver-operator images to be consistent with ART #52
Updating azure-file-csi-driver-operator images to be consistent with ART #51
OCPBUGS-10842 : Reorder static resources to create RBAC first #50 OCPBUGS-8683 : Add management workloads annotations #49 Updating azure-file-csi-driver-operator images to be consistent with ART #48
Full changelog
OCPBUGS-76930 : terraform/provider/google: Fixing inconsistencies with service account creation #10324 OCPBUGS-62601 : update resolv.conf every time on bootstrap node #9985 OCPBUGS-62814 : Release 4.14 bump terraform provider azurerm #10001 OCPBUGS-55193 : data/manifests/bootkube/cvo-overrides: Default to eus-4.14 #9643 OCPBUGS-54323 : Update upi references to api-internal #9609 OCPBUGS-54264 : IBMCloud: Move to IBM TF openshift fork #9605 OCPBUGS-54260 : vsphere-fix convert if only provided name #9602 OCPBUGS-52996 : Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9587 OCPBUGS-53210 : PowerVS: remove system pools #9572 OCPBUGS-46606 : Power VS: Create region-zone-sysType hierarchy #9331 OCPBUGS-48196 : IBMCloud: Ignore failed VPC regions #9350 OCPBUGS-45464 : add chrony.conf file when additional NTP sources are configured #9269 OCPBUGS-43505 : Stop rendering networks.config CRD #9105 OCPBUGS-42285 : Add AWS r8g to arm tested instance types #9050 OCPBUGS-42848 : add tested instance type for IBMCloud #9082 OCPBUGS-25508 : Update Golang SSH package version update to 0.17.0 #8992 OCPBUGS-39411 : Added yq to ci image #8943 OCPBUGS-36180 : baremetal IPI without provisioning network failing on provisioning-interface.service #8712 OCPBUGS-36089 : [release-4.14] bump go-retryablehttp for CVE fix #8658 OCPBUGS-37183 : ic: fix typo in warning message #8771 OCPBUGS-37068 : update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 #8748 OCPBUGS-36748 : Add yq-v4 to the upi-installer image for CI #8684 OCPBUGS-35827 : If host is offline or disconnected don’t check ver #8634 OCPBUGS-35826 : [release-4.14] bump github.com/containers/image for CVE fix #8633 OCPBUGS-35485 : [release-4.14] aws: terraform: add spot instance support for masters #8605 OCPBUGS-34024 : go.mod: bump aws-sdk-go for ca-west-1 support #8440 OCPBUGS-33401 : PowerVS: Add composite_instance to listServiceInstances #8479 CORS-2951 : Add deprecation notice for OpenShiftSDN for 4.14 users #8518 OCPBUGS-28611 : remove retired serial NCv2 from azure tested instance type list on x86 #7960 OCPBUGS-27394 : preserve category name when trying to find tag category #7926 OCPBUGS-33010 : escape ‘%’ in proxy settings #8318 OCPBUGS-31756 : openstack: Honour worker server group policy #8231 NO-ISSUE: test fix to support slightly different nmstate error messages #8286
OCPBUGS-32358 : Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8281 OCPBUGS-31885 : Validate control plane replicas #8241 OCPBUGS-31677 : coreos-installer iso kargs show broken on Agent ISO #8228 OCPBUGS-31338 : upi: aws: fix typo in worker templates #8203 Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027 : gcp: better error msg when service accnt missing #8078 OCPBUGS-30259 : PowerVS remove ibm cloud/bluemix go 4.14 #8103 OCPBUGS-29123 : IBMCloud: Handle disk delete errors #7988 OCPBUGS-29626 : update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037 OCPBUGS-28929 : [release-4.14] Bump containerd for vulnerability fix #7981 OCPBUGS-27419 : Fix depreciated typo #7929 OCPBUGS-24521 : set vmType in azure cloud config [release-4.14] #7804 OCPBUGS-23738 : vSphere - when using RP network path is incorrect #7759 OCPBUGS-27241 : baremetal: correct external_http_url for v6-only BMCs #7914 OCPBUGS-22315 : bootstrap: Enable gatewayd units only on RHCOS #7628 OCPBUGS-23498 : update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919 OCPBUGS-20860 : Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887 OCPBUGS-22895 : Do not generate azure-cloud-provider in manual mode for aro builds #7670 OCPBUGS-22771 : aws: use security groups from defaultMachinePlatform #7658 OCPBUGS-24489 : baremetal: populate customDeploy in advance #7802 OCPBUGS-22770 : destroy: gcp: fix destroying regional disks #7657 Bug OCPBUGS-22776: OpenStack: Fix IPv6 address configuration for bootstrap #7660
OCPBUGS-22978 : IBMCloud: Add eu-es region #7684 OCPBUGS-23399 : Check if PER is enabled in the target PowerVS workspace #7736 OCPBUGS-22688 : Bump Fedora CoreOS to latest stable #7647 OCPBUGS-22774 : Add KMS encryption keys if provided #7659 OCPBUGS-21868 : vSphere,segfault on version check #7605 OCPBUGS-22945 : Update gcloud version to 447.0.0 #7681 OCPBUGS-22187 : azure: validation: validate defaultMachinePlatform #7615 OCPBUGS-22758 : update RHCOS 4.14 bootimage metadata to 414.92.202310210434-0 #7655 OCPBUGS-19922 : Release 4.14 skip agent tui on external oci platform #7599 OCPBUGS-21653 : Rectify GCP label key validation check #7606 OCPBUGS-20357 : update RHCOS 4.14 bootimage metadata to 414.92.202310170514-0 #7618 OCPBUGS-20396 : Unable to disable external CCM for platform external #7594 OCPBUGS-20522 : Use changes to AgentClusterInstall during loading #7588 Enforcing the serial execution of the integration tests #7598
OCPBUGS-20581 : enable cloud controller manager type to be defined #7581 OCPBUGS-20441 : Warn about host and target compatibility #7583 OCPBUGS-20345 : Enable serial console for external OCI platform #7569 OCPBUGS-20401 : always write AWS cloud.conf #7578 OCPBUGS-19922 : Do not start agent-tui if no graphical console available #7539 OCPBUGS-20103 : GCP default value for service account #7553 OCPBUGS-19953 : AWS terraform bootstrap destroy will not refresh state #7543 OCPBUGS-20066 : Use updated ansible-core for Openstack image #7551 OCPBUGS-19835 : Enable FIPS in agent ISO #7541 OCPBUGS-19846 : Graceful fail for AWS getUser on destroy #7532 OCPBUGS-19033 : Add Net capabilities to dnsmasq container #7489 OCPBUGS-19319 : Handle agent tui failure gracefully #7497 OCPBUGS-19738 : Remove warning about CPUPartitioning #7529 OCPBUGS-19300 : Implement workaround to allow SNO installations for OKD/FCOS #7479 OCPBUGS-19702 : Increase bootstrap timeout for vSphere platform by 30 mins #7528 OCPBUGS-19636 : Pass CPUPartitioning via install-config overrides if set #7521 OCPBUGS-18181 : update RHCOS 4.14 bootimage metadata to 414.92.202309201615-0 #7517 OCPBUGS-18719 : for vsphere ipi add cluster domain to the uploaded vm configs so that… #7477 OCPBUGS-18883 : Do not set FailureDomains on CPMS when in a single zone Azure region #7483 AGENT-702 : Generate minimal ISO for external platform #7478 OCPBUGS-18428 : Add ip=dhcp,dhcp6 kernel param for vSphere dual-stack #7467 OSDOCS-6999 : tested machine series ‘C3’, ‘C2D’ #7381 OCPBUGS-18450 : AWS permission missing for security group viewing. #7460 OCPBUGS-18365 : Fix defaulting of userManagedNetworking value #7458 integration tests: Swap order of diff arguments #7462
AGENT-693 : Support external platform #7442 OCPBUGS-18457 : Make extracting ISO kargs more robust #7463 OCPBUGS-18457 : Fix PXE integration tests #7461 OCPBUGS-17806 : gomod: bump openshift/api version #7421 OCPBUGS-17770 : azure: use marketplace image plan’s publisher #7426 OCPBUGS-7690 : azure: destroy: dns records leak if permissions missing #7433 OCPBUGS-17869 : azure: fix setting outboundType #7455 OSDOCS-6880 : Adding 64-bit ARM GCP instance types to documentation #7320 OCPBUGS-16204 : aws: attach additional security groups to controlPlane #7352 OCPBUGS-18046 : update govc version to v0.30.7 #7425 OCPBUGS-15659 : IPI pre-check for MachineAPI capability #7414 OCPBUGS-17860 : OpenStack: Remove NodePorts range 0.0.0.0/0 rules #7405 OCPBUGS-17073 : Revert “Merge pull request #7205 from rna-afk/azure_managed_by_tag” #7412 OCPBUGS-17940 : Add COS endpoint to proxy server (Power VS) #7430 AGENT-692 , OCPBUGS-3860 : Update assisted-service dependencies #7439 OCPBUGS-17227 : gcp: fix validation of custom instance types #7388 OCPBUGS-17869 : azure: put NAT gateway behind TechPreviewNoUpgrade #7434 Destroy startironic.sh forever #7250
CORS-2660 : GCP: deprecate the licenses field #7397 CFE-858 : Update google terraform provider to latest version #7201 MULTIARCH-3676 : PowerVS TG terraform changes #7389 CFE-686 : Generate Infrastructure CR with the GCP user defined tags & labels #7138 CFE-687 : Apply user defined labels on created gcp resources #7153 OCPBUGS-11999 : upkeep: updated description to remove techpreview #7313 CORS-2700 : Make bootstrap S3 bucket optional during bootstrap destroy #7288 CFE-688 : Update install-config CRD to support gcp labels and tags #7126 OCPBUGS-16776 : update RHCOS 4.14 bootimage metadata to 414.92.202308032115-0 #7409 Add baremetal capability validation #7394
azure: validation: machinepool: sort slice before comparing #7407
OCPBUGS-13408 : Log message and add integration test #7408 PowerVS: Update listCOSInstances to continue querying #7404
maintenance: update openshift/api #7401
MGMT-13628 : add support for confidential VMs on Azure #7312 openstack: Test zero replicas in worker machine-pool #7400
OpenStack: Fix user docs for additional network with IPv6 #7395
gather: Use journalctl -o with-unit #7371
SPLAT-1123 : Revert Alibaba deprecation warning #7396 OCPBUGS-15994 : Update core password after loading config-image #7338 OpenStack: Remove SGS created by CPO on destroy #7378
data/data/coreos: bump FCOS to F38 stable #7311
OCPBUGS-16912 : Ensure DHCPv6 client sends Solicit with mac address #7384 Bug OCPBUGS-16249: Add ip=dhcp,dhcp6 option to Kernel args #7367
PowerVS: Check whether Machine pool CIDR is /24 #6903
OCPBUGS-16292 : GCP XPN: clarify service account support #7347 OCPBUGS-6759 : Fix discrepancy with disk size master #7100 OCPBUGS-16959 : openstack/upi: add missing modules namespaces + doc #7373 CORS-2719 : Remove service account user permission #7291 OCPBUGS-17064 : always create a MachineSet #7380 OpenStack: Fix default for openstack_worker_server_group_names #7359
OCPBUGS-16692 : OpenStack: fix crash with empty platform in machinepool #7363 CORS-2445 : GCP add bootimage override in install-config #7215 CORS-2503 : azure: use marketplace images for all nodes #6890 MULTIARCH-3676 : PowerVS add transit gateway destroy #7294 CORS-1770 : Support pd-balanced disk types for GCP deployments #7337 OCPBUGS-15989 : vSphere - bump terraform provider #7354 OWNERS_ALIASES: Add new user to owners_aliases #7348
OCPBUGS-16515 : gcp: use zones available for both instance and project #7317 OCPBUGS-15852 : Single node cannot be installed if etcd appears in the hostname #7304 OCPBUGS-14877 : Validate that number hosts does not exceed replicas #7268 CORS-2628 : Allow users to set ManagedBy tag to resource group #7205 OCPBUGS-16380 : Add /etc/containers volume on create-cluster-and-infraenv #7332 OCPBUGS-16207 : ic: aws: validate max security groups #7345 OpenStack: Add steps to enable dual-stack clusters #7269
Revert “Merge pull request #7096 from r4f4/gcp-instance-zones” #7360
SPLAT-657 : AWS Local Zones subnets automation for edge compute pool #7137 OSASINFRA-3193 : Update openstack/Dockerfile.ci for ansible-core #7346 Include start-cluster.env in agent-gather #7350
Fix the deployment on OpenStack for worker pools with no replicas. #7356
OCPBUGS-16219 : Fix timing issue between network services #7355 OCPBUGS-16415 : Sync nmstateconfig script with assisted-service changes #7353 Agent: Allow additional kernel args to be passed to ISO #7306
Remove mentions of use-octavia #7335
OCPCLOUD-2036 : introduce External platform type #7217 OCPBUGS-16395 : openstack/upi: update doc for CCPMSO #7351 OCPBUGS-16245 : Make nmstateconfig.yaml optional in config-drive #7333 OSASINFRA-3181 : Volume Types for OpenStack CPMS #7300 CORS-2445 : GCP: Add default values for arm64 #7258 PowerVS: Replace deprecated key_id attribute with name for ibm_pi_key resource #7256
PowerVS: Handle empty serviceInstanceID in metadata.json #7328
OpenStack: Dual stack support with BYON #6797
MULTIARCH-3667 : Add support for CPMSO for Power VS #7226 OCPBUGS-15421 : Allow different service account for xpn installs in gcp #7308 OCPBUGS-15997 : openstack: add root volume AZ validation #7309 aws: drop hostedZoneRole Feature Gate #7327
Agent: clear service status once all services started #7316
AGENT-660 Display insert config image message to console #7299
PowerVS: Create new newAuthenticator function #7321
OCPBUGS-9404 : azure: skip LB creation when not needed #7063 Revert “Merge pull request #7289 from r4f4/padillon-settle-ops” #7318
Agent: Log kernel params when generating pxe assets #7314
OCPBUGS-15238 : GCP: ic: client: use a higher context timeout #7290 AGENT-648 : Remove validation check limiting None platform to SNO #7236 Allow destroy for C2S isolated (us-iso and us-isob) partitions. #7086
OCPBUGS-15999 : update RHCOS 4.14 bootimage metadata to 414.92.202307070025-0 #7310 OCPBUGS-14900 : Use correct SELinux label. Make rename atomic. #7307 create: add check for cluster operator stability #7289
SPLAT-827 : support static IP assignments with vSphere IPI #7179 AGENT-562 : Load config from config image #7200 OCPBUGS-15825 : Fix agent gather tui logs #7293 OSASINFRA-3155 : OpenStack: Create ControlPlaneMachineSet CRDs #7280 ic: gcp: validate instances against user-configured zones #7096
AGENT-678 : Fix concurrency issue in agent integration tests #7303 OCPBUGS-14762 : Use the same names for public LB in IPI and UPI Azure #7292 OCPBUGS-2324 : terraform: aws: bump version to 5.4.0 #7274 tls/root: Document this more and change friendly name #7232
CORS-2572 : azure: implement egress via NAT gateway #6933 docs: Add note about not configuring allowed address pairs for day 2 manila configuration #7287
OCPBUGS-14932 : specify azure cli version #7297 OCPBUGS-14932 : Update azure cli to 2.40.0+ #7216 PowerVS Add support for Capped processors #7286
CORS-2645 : AWS Cross-Account Private Hosted Zone: Add Further Validations #7253 AGENT-624 : Allow override of networkType #7223 Update hack/go-test.sh to golang 1.20 #7270
AGENT-627 : Decompress kernel on ARM #7276 OWNERS_ALIASES: offboard ashcrow and bgilbert from CoreOS #7275
AGENT-558 Generate unconfigured agent ignition #7186
OWNERS: merge agent/installer #7278
OSASINFRA-3182 : openstack: remove portTargets #7239 AGENT-498 : Get iPXE script template kernel parameters from ISO #7150 OCPBUGS-15238 : GCP: ic: improve project validation #7267 Default dataStore is returned the name instead the inventoryPath #7261
Use the correct image name for agent-tui extraction #7266
OCPBUGS-13636 : new Aws secret regions support #6184 CORS-2372 : Azure: auth Installer with Managed Identity from VM #7108 OCPBUGS-11796 : azure: skip NSG creation when BYO vnet #7094 OCPBUGS-9435 : terraform: aws: secret regions now support ALIAS record #7184 SPLAT-1094 : warn users about deprecation of Alibaba Cloud #7257 OCPBUGS-14869 : Add timezone info in installer logs #7243 CORS-2656 : Remove context from cluster uninstaller struct #7169 openstack: document external LB #6920
bootkube: Drop cruft in MCO bootstrap #7244
Update OWNERS_ALIASES #7203
Agent: run shellcheck on start-cluster-installation.sh #7062
OSASINFRA-2168 : Docs: update OpenStack requirements #7015 OCPBUGS-15095 : Add kubevirt digest-ref in RHCOS boot images #7254 AGENT-563 : Create configuration image #7157 AGENT-510 : Support interactive network console when pxe booting #7185 Allow CustomNoUpgrade features via install-config #7246
MULTIARCH-3664 : enable multipath for powervs #7222 OCPBUGS-13960 : update RHCOS 4.14 bootimage metadata to 414.92.202306141028-0 #7247 CFE-829 : Remove Azure Tags TechPreview only indicators and checks #7187 CORS-2631 : Add additional security group ids in AWS #7151 AGENT-596 : use agent-installer-utils for agent-tui extraction #7212 AGENT-491 : Support pxe base url #6723 OCPBUGS-14917 : PowerVS: Cleanup service instances for destroy cluster #7173 OpenStack: add support to multiple subnets in the bootstrap #7111
Add ControlPlaneMachineSet for Nutanix #7119
OPNET-298 : Allow primary-v6 dual-stack on vSphere #7124 CORS-2613 : AWS: Cross-account Shared VPC Support #7225 OpenStack: support user provided dual-stack api and ingress Port #7133
OpenStack: configure IPv6 address in the bootstrap node #7128
SPLAT-995 : vSphere Add new template field #6995 OCPBUGS-14757 : images: installer: add xz to the container #7238 OCPBUGS-14818 : disable oVirt provider #7213 AGENT-556 : Wait for rendezvous host configuration #7068 OCPBUGS-13955 : support OPENSHIFT_INSTALL_OS_IMAGE_OVERRIDE #7211 OCPBUGS-14121 : Convert Rendezvous IPv6 address to canonical format #7234 OCPBUGS-14416 : Shorten SNO installation duration by releasing CPC lease #7219 OCPBUGS-14565 : Replace with govc docker image and fix ibmcli folder permission issue #7231 OCPBUGS-13108 : Log additional host info at warning level #7209 OCPBUGS-13662 : Ignore CPUPartitioning for ABI #7218 OCPBUGS-11736 : gcp use preconfigured private zone for installation #7155 Bump & vendor k8s 1.27 dependencies #7220
OCPBUGS-10342 : Check that number of replicas matches hosts #7059 OSASINFRA-3153 : move loadBalancer API to GA for OpenStack #7127 OCPBUGS-10306 : [vSphere] Upi installation failed due to VMs for master and worker node creation failed #6999 AGENT-567 : Re-enable ‘create pxe-files’ command #7102 AGENT-555 : Move Rendezvous Host config to separate file #7061 OCPBUGS-13764 : Support /dev/disk/by-path root device hints #7192 OCPBUGS-1769 : Ignore IAM Roles that the Installer is not authorized to access #7180 OCPBUGS-14077 : MULTIARCH-3492: Avoid conflicting subnets #7145 OCPBUGS-14076 : PowerVS: Remove ClusterOSImage #6996 OCPBUGS-13094 : Use oc command in bootkube.service in a disconnected env #7178 OCPBUGS-7410 : Reject active VPC connections before service destroy #7101 OCPBUGS-7699 : CVE: go-getter vulnerable to denial of service via malicious compressed archive #6893 OCPBUGS-13552 : vSphere Add ova sha query; additional debugging #7171 OCPBUGS-13718 : ic: azure: validate diskTypes in AzureStack #7194 OCPBUGS-9378 : vSphere set bootstrap/master efi #7154 OCPBUGS-13535 : Set AdditionalTrustBundle in override when mirroring not enabled #7182 OCPBUGS-13547 : Ensure –payload-version is set for MCO on bootstrap #7160 OCPBUGS-13547 : remove special cases for featureset in rendering #7189 OCPBUGS-7978 : FCOS: bump to latest stable version #6902 OCPBUGS-13628 : Revert “remove special cases for featureset in rendering” #7183 OCPBUGS-13300 : masters on a single compute server group #7172 OCPBUGS-3542 : Add bootstrapExternalStaticDNS #6585 remove special cases for featureset in rendering #7158
OCPBUGS-13253 : update RHCOS 4.14 bootimage metadata to 414.92.202305090606-0 #7176 pass payload version and manifests to kas and kcm #7152
OCPBUGS-9081 : openstack destroy: account for BULK DELETE limits on object-storage #7168 OCPBUGS-7699 : terraform: google: bump provider for go-getter CVE fix #7051 OCPBUGS-13107 : openstack destroy: Limit Swift workers to 3 #7165 Updating ose-installer-artifacts images to be consistent with ART #7122
OCPBUGS-11921 : GCP XPN: Pass instance service acct in manual mode #7117 OCPBUGS-12964 : Bootstrap on aws should have same metadata service type as on other nodes #7149 OCPBUGS-11792 : update RHCOS 4.14 bootimage metadata to 414.92.202304252144-0 #7135 pass featuregate args to config-operator to get rendered featuregates #6990
OCPBUGS-12904 : openstack: Add netcat to the Installer image #7142 OCPBUGS-12776 : GCP XPN Private Cluster Fails with no Public Zone #7134 OCPBUGS-12869 : fix nmstate related unit tests #7089 Updating ose-baremetal-installer images to be consistent with ART #7121
Updating ose-installer images to be consistent with ART #7120
OCPBUGS-12748 : use python3 for cloud sdk #7118 OCPBUGS-12196 : bump CVO to stable-4.14 #7114 OCPBUGS-11999 : fix: remove feature flag for cpu partitioning no longer needed #7110 OCPBUGS-11801 : Fix agent-tui libnmstate dependency name #7095 OpenStack: enable ingress traffic for dual-stack installations #7099
OCPBUGS-10767 : Fix and improve locking session and AWS Metadata access #7070 OWNERS_ALIASES: offboard Sohan from CoreOS #7103
OCPBUGS-9081 : openstack: Bump Gophercloud #7098 OCPBUGS-11100 , OCPBUGS-11102 , OCPBUGS-11418 : CVE: bump hashicorp/vault version #7091 OCPBUGS-11788 : update RHCOS 4.14 bootimage metadata to 414.92.202304131328-0 #7092 OCPBUGS-8449 : Azure: don’t set default subscriptionID for disk encryption sets #7076 pkg: rhcos: use Errorf instead of Error #7074
OCPBUGS-4998 : Log additional info when status is pending-user-action #7060 OCPBUGS-10673 : [Alibaba] update the bandwidth value of EIP #7011 OCPBUGS-11636 : AWS - Remove ACLs from s3 ign #7081 OCPBUGS-11479 : Upgrade libnmstate version used #7075 OCPBUGS-10478 : gather: azure: fix collecting VM serial logs #6992 Add imageDigestSources, deprecate imageContentSources #6235
PowerVS: fix human readable group-id #7073
docs: gcp: upi: update obtaining RHCOS source image #7072
gcp: add confidential compute support for boostrap TF #7002
AGENT-275 : Add new agent graph command to output agent internal dependency graph #7066 OCPBUGS-7954 : openstack: Only check HTTPS certs on public endpoints #7057 MULTIARCH-2517 : PowerVS: create install-config improvements #6885 OCPBUGS-10845 : Use 100 GB as minimum disk size in validations #7025 openstack: Bump CI base image to v4.14 #7052
terraform: don’t run zip if building provider binary failed #7047
OCPBUGS-8449 : pkg/asset/installconfig: set subscriptionID #6975 OCPBUGS-11039 : remove container-runtime flag from kubelet config #7036 rhcos: Bump to 414.92.202303281555-0 #7038
update tested instance type on 4.13 #7042
OCPBUGS-11038 : GCP: add europe-west12 region to the survey as supported region #7033 OCPBUGS-7966 : Do not remove host default configuration unless network configuration is provided for it #6991 OCPBUGS-2130 : vSphere - finding networks use full path cluster #6973 OCPBUGS-7699 : bump terraform for go-getter CVE fix #6892 OCPBUGS-8349 : Kubelet Client Cert should include system:serviceaccounts group #7032 OCPBUGS-10728 add project filter to gcp usage api requests #7018
OCPBUGS-10638 : Properly handle invalid agent command #7005 OCPGUS-2363 : IBMCloud: Use direct COS endpoint #6952 OCPBUGS-9081 : openstack/destroy: BulkDelete more objects at once #7017 OCPBUGS-8035 : IBMCloud: Fix SSH Private bootstrap #6944 OCPBUGS-7973 : IBMCloud set dnsrecords offset #6924 OCPBUGS-8509 : baremetal: do not use port 80 for httpd #6945 OCPBUGS-9982 : bootstrap-pivot: skip pivot in SCOS Live ISO #6965 PowerVS: Add capacity checks before installation #6850
OCPBUGS-8237 : update terraform-provider-ironic to 0.4.0 #6956 OCPBUGS-6727 : Nutanix Hostname of the VM is not set when using DHCP network config #6981 AGENT-502 : add agent-tui it test #6978 openstack: Remove version info, update lb FIP -> API FIP #7001
OCPBUGS-10570 : openstack: No master primarySubnet control-plane if portTarget is set #6994 OSDOCS-5240 : doc/fix-aws-localzones: replace jq to aws –query #6993 OCPBUGS-10207 : Do not always output warning msg when releaseImage is digest #6971 OCPBUGS-7015 : vsphere, nutanix survey: relax vip in machine cidr #6967 OCPBUGS-9949 : Verify output file exists when oc image extract is run #6960 OCPBUGS-7954 : openstack: Provide manual instructions for invalid certificates #6998 OCPBUGS-10313 : fix agent tui showing up multiple times #6977 Bump mongo-driver from 1.10 to 1.11.2 #6987
OCPBUGS-8540 : CVE: bump mongo-go-driver for fix #6950 OCPBUGS-10394 : Sort userTags in Machine and Machineset manifests #6976 Shorten SNO installation duration by releasing CVO lease #6757
OCPBUGS-2968 : bootstrap: Do not needlessly podman pull #6536 terraform: google: bump stringset dependency #6951
openstack-manifests: Export JUnit results #6966
Updating ose-installer-artifacts images to be consistent with ART #6968
quota: gcp: replace deprecated monitoring package and fix linting issues #6896
OCPBUGS-8119 : CVE-2023-25173: bump containerd #6949 OCPBUGS-8468 : aws: bump aws-sdk-go version #6943 data: libvirt: increase volume size to 32GB #6963
Updating ose-baremetal-installer images to be consistent with ART #6954
Updating ose-installer images to be consistent with ART #6953
refactor: replace github.com/ghodss/yaml with sigs.k8s.io/yaml #6935
OpenStack: support multiple API and ingress VIPs #6940
update RHCOS 4.13 bootimage metadata #6886
OCPBUGS-8094 : In agent ‘wait-for bootstrap’ command, test ssh to Node0 #6919 openstack-manifest: Show assets dir if persisted #6929
OCPBUGS-7262 : Disable systemd status while TUI showing #6925 OpenStack Failure domains #6917
OCPBUGS-8203 : Don’t log password values #6922 OCPBUGS-5129 : Pass Capabilites from install-config to cluster #6923 OCPBUGS-8305 : Power VS: Add resourceGroup to infrastructure manifest #6928 AGENT-356 : Disable ‘create pxe-files’ command #6927 OCPBUGS-8258 : Specify filename for default registries.conf #6926 openstack: consistent TechPreview-only feature validation #6916
RFE-2782 : Create edge compute pool to support AWS Local Zones #6371 And 2 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-35475 : Remove some of newapp unit tests relying on external deprecated images #1802 OCPBUGS-35447 : bump go-git to 5.11.0 #1799 OCPBUGS-30287 : oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699 OCPBUGS-25983 : Remove deprecated password defaulting in default config flag #1646 OCPBUGS-24197 : Add client version in must-gather summary #1607 OCPBUGS-24460 : Overwrite template’s namespace with the explicit one #1616 OCPBUGS-22702 : Reflect container’s exit code for long running tasks not attached to terminal #1592 OCPBUGS-20508 : regeneratemco: explicitly check for PlatformStatus field #1573 OCPBUGS-20527 : Set ImportPolicy to PreserveOriginal to honor –keep-manifest-list when mirroring a payload to an image stream #1574 OCPBUGS-21611 : Bump golang.org/x/net to v0.17.0 #1579 OCPBUGS-20258 : Updating excluded list of unsupported oc adm commands in MicroShift #1561 OCPBUGS-20269 : Use quay redis image instead docker mysql #1562 OCPBUGS-17925 : pkg/cli/admin/prune/images: omit not found error for deployment configs #1530 OCPBUGS-17253 : Bump go x/net library to 0.13.0 #1529 OTA-559 : Revert “Revert “pkg/cli/admin/release/extract: Add –included and –install-config”” #1528 OCPBUGS-17711 : Revert “pkg/cli/admin/release/extract: Add –included and –install-config” #1527 Update openshift/api #1525
OTA-559 : pkg/cli/admin/release/extract: Add –included and –install-config #1521 Stop using deprecated github.com/docker/docker go APIs #1514
OCPBUGS-16735 : Truncate existing files when writing from inspect #1520 introduce plugin and plugin shadowing tests for oc #1424
pkg/cli/admin/upgrade: Newlines after –allow-upgrade-with-warnings errors #1519
Add profiling functionality and flags in oc #1516
Fix typo in /var/log folder #1517
login: improve usage message for –web option #1513
Bump k8s packages to 1.27.4 #1515
OTA-994 : pkg/cli/admin/release/extract: Centralize manifest extraction #1404 OCPBUGS-16009 : reboot: set ignition version to 3.1 #1499 Add tls-server-name when property exists in kubeconfig #1456
OCPBUGS-15776 : mcs cert: account for environments that use IP directly #1497 OCPNODE-1656 : oc release info: Introduce –idms-file and deprecate –icsp-file #1465 AUTH-355 : Add OAuth2 Authorization Code Grant Flow for login #1402 upgrade distribution No 2 #1495
WRKLDS-700 : bump(k8s) to v1.27.2 #1420 OCPBUGS-15012 : oc image extract: idms-file flag map to IDMSFile field #1464 Correct incorrect command in observe command #1419
Clarify the use of the filter without keep-manifest-list #1414
OCPBUGS-10612 : make registry auth prefence default to podman config locations #1376 handle the error case of node retrieval while waiting for reboot #1482
Fix the output of error prompt #1433
pkg/cli/admin/upgrade: Surface Recommended=Unknown more prominently #1442
pkg/cli/admin/upgrade: Add post-period to space to some error messages #1330
Wait for reboot #1473
tweak output format #1471
OCPNODE-1580 : Add –print-mirror-instructions to oc adm release mirror to allow idms instructions #1341 add reboot-nodes #1468
Trust check #1469
fix directories for consistency #1467
ocpcertificates: add ability to rotate MCS CA/cert #1450
OCPNODE-1656 : oc image extract: Introduce IDMS as alternative source #1426 pernodepod: percent works like this #1463
ocpcertificates: don’t make assumptions on resources not to bring pip… #1462
allow running a command while the kubelet is off #1459
add command to create new bootstrap kubeconfig for kubelet #1458
ocpcertificates: fix handling resources by names explicitly + other cosmetic fixes #1460
tweaks needed for wait #1455
Add a command to remove older trust #1447
create command to create new adminkubeconfig #1452
add a command to copy content to every node #1454
Minor updates to CLI help text #1453
add command for regenerating OCP leaf certs #1443
add a new command to wait for all clusteroperators to go stable #1444
add command to produce an updated CA bundle for trusting the kube-apiserver #1446
add printing for new revisions #1445
add oc adm ocp-certificates regenerate-top-level #1439
OCPBUGS-11652 : Extend adm node-logs to new API #1403 OCPBUGS-12793 : adds a mapping for exposed ports to DockerConfig when manifest listed #1415 OCPBUGS-14340 : Name containers w/‘multi’ when mirroring a multi release image #1423 OCPBUGS-11123 : oc adm groups sync: all groups: print warning before caching #1436 OCPBUGS-11632 : Skip invalid events yamls and continue #1429 OCPBUGS-14082 : Remove closed centos7 registry from newapp unit tests #1430 OCPBUGS-12901 : preserve explicit release image in ClusterVersion #1416 OCPBUGS-11123 : oc adm groups sync: fix the annotation key #1427 OCPBUGS-11123 : oc adm groups sync: print a warning when two or more groups are mapped to the same ldap uid #1425 OCPBUGS-13355 : Use RequestToken functions from library-go #991 OCPBUGS-11632 : Improve error log messages in event filtering #1417 OCPBUGS-12143 : oc login: unwrap tls.CertificateVerificationError to use x509 errors #1406 pkg/cli/admin/upgrade: Clarify client-side vs. server-side docs #1181
replace trimLeft with trimPrefix #1400
Support OCI manifest lists in image mirror #1362
OCPBUGS-8004 : Fix bug when recreating an index with fewer images #1335 adm catalog mirror update example to idms #1401
OCPBUGS-10843 : oc debug unique pod name #1393 adm catalog mirror generates idms manifest #1389
OCPBUGS-1115 : Use linux/arch when user’s OS isn’t in manifests #1311 Remove already deprecated adm create-kubeconfig command #1367
append: expose keep-manifest-list option and preserve manifestlist when appending to specific arch images #1361
Updating ose-tools images to be consistent with ART #1369
OCPBUGS-8048 : pkg/cli/admin/upgrade: Client-side checks for –to-multi-arch #1359 IR-300 , IR-301 : generates ImageStreamTags with import-mode when using oc new-build and oc-new-app #1353 OCPBUGS-10879 : Fix deprecated oc command suggestion #1390 Exclude irrelevant commands from MicroShift documentation #1375
Test Fix: Allow submodule using file transport with newer git #1378
Updating openshift-enterprise-deployer images to be consistent with ART #1368
Updating openshift-enterprise-cli images to be consistent with ART #1364
OCPBUGS-3393 : Always copy the blobs if the target isn’t a registry #1355 Updating ose-cli-artifacts images to be consistent with ART #1370
OCPBUGS-1117 : The architecture of oc in the cli-artifacts’ /usr/bin folder should to the one of the built image #1374 OCPBUGS-10622 : bump repo sclorg/s2i-ruby-container location for newapp test #1377 Add microshift into generate-docs #1365
OCPBUGS-5949 : Add subrepository support for ICSP #1350 And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-58677 : github.com/golang/glog v1.2.5 #895 OCPBUGS-53418 : github.com/golang/glog v1.2.4 #845 OCPBUGS-53819 : update github.com/golang-jwt/jwt #841 OCPBUGS-51542 : Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #830 OCPBUGS-47069 : golang.org/x/net v0.33.0 #810 OCPBUGS-46487 : Add AWS region to aws-pod-identity-webhook #801 OCPBUGS-45009 : Add retry to ccoctl gcp create functions #791 OCPBUGS-45004 : github.com/golang-jwt/jwt/v4 v4.5.1 #785 OCPBUGS-43647 : Only attempt timed token credentials on supported platforms. #775 OCPBUGS-43339 : Update github.com/sirupsen/logrus v1.9.3 #769 OCPBUGS-41236 : List secrets in batches to avoid api timeout #755 OCPBUGS-38378 : Update google.golang.org/grpc v1.65.0 #750 OCPBUGS-37823 : GCP passthrough permissions check to ignore problematic permissions. #741 OCPBUGS-37062 : Update cloud.google.com/go/storage v1.43.0 #742 OCPBUGS-37420 : SNYK ignore go-client misreporting #739 OCPBUGS-37276 : Update to azidentity v1.7.0 #732 OCPBUGS-36029 : IBM/go-sdk-core update to v5.17.4 #721 OCPBUGS-36716 : AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #713 OCPBUGS-32899 : Upgrade go-jose module to 2.6.3 #697 OCPBUGS-29156 : Fix the ClusterOperator watch of the status controller #676 OCPBUGS-28231 : Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670 OCPBUGS-29199 : ccoctl - use proxy when validating CloudFront URL #678 OCPBUGS-27911 : Resolve all outstanding snyk vulnerabilities #650 OCPBUGS-28382 : Use cached clients to avoid client side throttling #666 OCPBUGS-27515 : Write manifests when AWS IAM roles already exist. #659 OCPBUGS-26512 : Use live client for metrics #647 OCPBUGS-25275 : Azure Workload Identity info in CredsRequests creates a Secret #643 OCPBUGS-24346 : Discover AWS dns suffix from partition and region. #635 OCPBUGS-23986 : Use per-project custom roles instead of per-cluster custom roles #631 OCPBUGS-23426 : Explicitly set the vsphere secret credential data on sync. #629 OCPBUGS-21388 : Upgrade golang/x/net for CVE-2023-39325 #622 NO-ISSUE: Removing andrew from OWNERS #617
snyk: exclude vendor/ #615
OCPBUGS-22651 : explicitly set azure oidc bucket to allow public blob access #612 OCPBUGS-21926 : azure create-managed-identites to add cloud controller manager to network resource group #608 OCPBUGS-19865 : Add networkResourceGroupName parameter for Azure #602 OCPBUGS-17719 : Double timeout delays for managed identity creation and role assignment from 2 to 4 minutes. #591 pkg/aws/actuator: Drop comment which suggested passthrough permission verification #590
CCO-363 : Adding azure identity webhook #559 OCPBUGS-16684 : Set cr.status.provisioned=false on syncErr path #583 OCPBUGS-17049 : update lastSyncGeneration in STS flow sync success #585 Revert “CCO-401: Add azure-workload-identity-webhook to image references.” #588
CCO-401 : Add azure-workload-identity-webhook to image references. #586 CCO-413 : Add dataPermissions to Azure credentials request. #584 CCO-402 : Create Azure AD pod identity webhook config secret manifest in create-all,create-oidc-issuer #573 OCPCLOUD-2012 : ccoctl: Plumb credreq.spec.cloudTokenPath override into Azure secret creation #580 OCPBUGS-16807 : ccoctl azure exit with error when OIDC and installation resource group names are the same #582 OCPCLOUD-2012 : ccoctl: Add –enable-tech-preview arg to azure create-all subcommand. #581 OCPBUGS-16614 : *: stop checking for the STS feature gate #579 Add DOCKER_CMD Makefile var to use podman when found. #577
OCPBUGS-16614 : go.mod: re-vendor openshift/api #578 CCO-233 : Add Azure AD Workload Identity doc. #566 *: use a global codec #576
OCPBUGS-16313 : pkg/operator: correctly fetch CA for AWS minter #575 OCPBUGS-16334 : Clarify updateActuatorConditions & update lastSync #568 OCPBUGS-16313 : manifests: allow list/watch globally on our config configmap #572 CCO-388 : manifests: add cloudcredentials.operator.openshift.io to HCP #571 Revert “manifests: manually amend resources that get laid down by CVO in HCP” #570
OCPBUGS-15365 : manifests: fix rbac #567 OCPBUGS-15906 : ccoctl azure delete to also delete role assignments #564 OCPBUGS-16088 : Adds [default] section header to STS Secrets #565 OCPBUGS-16036 : Set status on CR properly when STS provisioned #562 Revert “Merge pull request #398 from csrwng/exclude_config_ibmcloud” #561
OCPBUGS-15365 : *: use correct clients in the secretannotator #563 OCPBUGS-15365 : *: use a filtered LIST + WATCH on Secrets for AWS STS #545 reconcile status when the clusteroperator changes #560
CCO-353 : ccoctl to create azure custom roles #556 CCO-394 : Do not Add PodIdentityWebhook controller when InfraStatus.ControlPlaneToplogy is External. #547 CCO-366 Add ability to detect AWS STS and behave accordingly #542
Implement ccoctl command to create infrastructure required for Azure workload identity #523
PORTENABLE-526 : operator: use a partial metadata watch for Namespaces #546 manager: filter the cache of configmaps #544
Bump to go 1.20 in go.mod #536
OCPBUGS-13549 : Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #537 Add a make target and stub for actuator e2e tests #535
Updating ose-cloud-credential-operator images to be consistent with ART #534
Updating ose-cloud-credential-operator images to be consistent with ART #533
Updating ose-cloud-credential-operator images to be consistent with ART #532
OCPBUGS-11671 : ccoctl: Enable public anon read access to default OIDC S3 bucket #526 Updating ose-cloud-credential-operator images to be consistent with ART #521
OCPBUGS-8666 : Correct pod-identity-webhook annotations for PreferredDuringScheduling. #522 SPLAT-950 : doc/aws-sts : steps to migrate from public bucket to private issuer URL #515 OCPBUGS-8666 : feat: add workload annotation to pod identity webhook deployment #520 Upgrade build-machinery-go: make vulncheck #519
Bump golang.org/x/net from v0.5.0 to v0.7.0 #517
Full changelog
OCPBUGS-44095 : Backport SDN live migration #425 OCPBUGS-28649 : Add required PSa labels #403 NO-JIRA: add inert featuregate files to allow diff against later releases #398
OCPBUGS-21653 : Update openshift/api package to latest version #371 : OCPBUGS-21286: bump library-go to include switch to HTTP/1.1 #369
OCPBUGS-20439 : Remove Build CRD #363 OCPBUGS-16726 : psa - move into tech preview for 4.14 #354 Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Bump openshift/api to add ValidatingAdmissionPolicy feature gate. #340
OCPVE-626 : bump(openshift/api@master) #341 CFE-689 : Update openshift/api package to latest version #335 OCPBUGS-16614 : go.mod: bump openshift/api #338 OCPBUGS-16614 : go.mod: update openshift/api #334 OCPBUGS-16507 : bump sigs.k8s.io/kube-storage-version-migrator #333 OCPCLOUD-2010 : Remove feature gate for external platform #331 SDN-4024 : Vendor openshift/api to get ANP feature-gate changes #330 Promote privateHostedZoneAWS from Tech Preview to Default #328
Update openshift/api #327
OCPBUGS-13547 : Promote Azure CCM from TPNU to default #307 OCPBUGS-15877 : go upgradeable=false when latencysensitive is used and not corrected #325 Enable feature gate for externalCertificate on Route API #326
stomp the latencysensitive featureset for equivalent default #324
WRKLDS-757 : Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade #322 SPLAT-1099 : bump openshift/api for vSphere static IP feature gate and platform spec #323 remove dead flag for file #309
Changes to move to api@2d36f53 #321
OCPBUGS-12767 : Add CustomNoUpgrade CRD versions to payload #320 OCPCLOUD-2010 : Re-vendor api to support external platform #306 Update openshift/api to disable EventedPLEG featuregate in techpreview #317
update openshift/api for types and gates #316
Update github.com/openshift/api to pull in evented pleg and sigstore feature flags #312
Update github.com/openshift/api to pull in feature gates #311
OCPBUGS-6266 : Rename config-operator_00_namespace run level to 00 #303 Update library-go dependency #305
Add JoelSpeed to owners #302
Update API and library-go #301
Require consistency in rendered artifacts #299
specify all known featureGates in disabled #297
update render to handle directories of manifests #295
adjust to refined openshift/api types #296
update ordering and featuregates #294
add featuregate status #288
Updating ose-cluster-config-operator images to be consistent with ART #287
OCPBUGS-10037 : update openshift/api to get new apiserver schema #289 Full changelog
OCPBUGS-67771 : Bump logrus to 1.9.1 #1290 OCPBUGS-53867 : Bump github.com/golang-jwt/jwt #1229 OCPBUGS-53867 : Bump github.com/golang-jwt/jwt #1224 OCPBUGS-51598 : bump golang.org/x/oauth2 #1213 OCPBUGS-51312 : ensure that storage names don’t end in dashes #1185 OCPBUGS-44048 : fix proxy config and leader election test flakes #1153 OCPBUGS-44002 : Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1152 OCPBUGS-42935 : azureclient: stop validating credentials when creating the client #1137 OCPBUGS-39100 : Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1114 OCPBUGS-36035 : go.*,vendor: bump go-retryablehttp #1069 OCPBUGS-33147 : azure-path-fix: get client secret from k8s secret #1058 OCPBUGS-34668 : pkg/storage/s3: use force path style in favour of virtual hosted style config #1051 OCPBUGS-33409 : azurepathfix: check if platform status is nil before accessing it #1033 OCPBUGS-32450 : azure-path-fix: support auth via account key (without clientID) #1023 OCPBUGS-31857 : bump aws-sdk-go from v1.44 to v1.50 #1018 OCPBUGS-28989 : pkg/storage/s3: enable bucket key on encryption settings #995 OCPBUGS-29755 : azurepathfix: fix stack hub, government and workload identity setup #1005 OCPBUGS-29604 : move azure storage blobs from docker back into /docker #1001 OCPBUGS-22127 : increase storage account key cache expiration #941 OCPBUGS-20710 : mitigate effects of rapid reset #942 OCPBUGS-18794 : check if response is nil before using it #917 OCPVE-632 : add capability annotations to manifests #856 OCPBUGS-17882 : Add rbac permission IDMS, ITMS #891 TRT-1193 : Revert “IR-373: remove node-ca daemon” #899 CFE-846 : Add user defined tags to the GCP buckets created #873 IR-373 : remove node-ca daemon #867 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 #877
build(deps): bump the k8s-dependencies group with 1 update #895
IR-363 : Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions #890 build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 #878
CFE-682 : Add user defined labels to the GCP buckets created #872 CFE-682 : Update openshift/api package to latest version #887 IR-390 : Make a configmap for MCO to consume CAs #880 build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.298 #879
build(deps): bump golang.org/x/net from 0.8.0 to 0.11.0 #871
build(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.1.10+incompatible to 2.2.7+incompatible #869
.github/dependabot.yml: group certain dependencies #865
IR-389 : bump aws-sdk-go #860 .github: configure dependabot #861
IR-369 , IR-370 : support Azure workload identity #857 OCPBUGS-12132 : Updating ose-cluster-image-registry-operator images to be consistent with ART #854 Updating ose-cluster-image-registry-operator images to be consistent with ART #849
OCPBUGS-8224 : fix storage selection on IBM cloud #847 Full changelog
OCPBUGS-67775 : CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] #2045 OCPBUGS-50662 : Increase waitForFallbackDegradedConditionTimeout #1807 OCPBUGS-31354 : add SNO control plane high cpu usage alert #1707 OCPBUGS-33930 : add a controller that reconciles SCCs’ volumes #1681 OCPBUGS-31506 : Add sno section to alert description #1658 OCPBUGS-31316 : add provider name to cluster_infrastructure_provider when external platform #1657 OCPBUGS-29722 : webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1650 OCPBUGS-29722 : webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1646 OCPBUGS-25384 : psa cluster fleet evaluation #1600 : OCPBUGS-24022: Add workload partitioning annotation #1590
: OCPBUGS-20898: bump library-go to include switch to HTTP/1.1 #1569
OCPBUGS-22718 : [release-4.14] OCPBUGS-20331: manifests: rename API performance dashboard #1570 OCPBUGS-19553 : Update static pod manifests perms #1556 OCPBUGS-19353 : manifests: don’t include recording rules when Console capability is not enabled #1551 OCPBUGS-10362 : revert dev cert rotation on 4.14 #1545 OCPBUGS-17436 : Unrevert 1536 and 1538. #1541 Reverts DynamicResourceAllocation enablement on techpreview #1540
OCPBUGS-17436 : Enable DynamicResourceAllocation API in kube-apiserver #1538 Set runtime-config in lockstep with feature-gates, if needed. #1536
bump(api) #1535
OCPBUGS-16511 : bump(*): vendor update #1529 OCPBUGS-16511 : remove dependency on typed prometheus client #1527 OCPBUGS-13635 : make webhook connection failure a warning in log #1526 OCPBUGS-15489 : manifests: add new PrometheusRule for recording rules #1521 certrotation: rotate kube-apiserver-to-kubelet-signer when 80% of validity is over #1523
OCPBUGS-13946 : do not use one second timeout when asserting a webhook connection #1510 OCPBUGS-14008 : Enable “send-retry-after-while-not-ready-once” on SNO #1500 update probes for best practices and consistency #1516
api_performance_dashboard: show apiserver_longrunning_requests metric #1518
allow greater timeout for etcd health check #1517
api_performance_dashboard: show apiserver_request_total instead of apiserver_dropped_requests #1520
OCPBUGS-8404 : pkg/operator/configobserver: check that the serving certificate refer… #1482 OCPBUGS-3986 : dashboard: use recording rules for most metrics #1484 OCPBUGS-14940 : api_performance_dashboard: show apiserver_longrunning_requests metric #1511 OCPBUGS-13946 : degraded_webhook.go x509: certificate signed by unknown authority #1503 OCPBUGS-14323 : Change manifest directory permissions #1505 OCPBUGS-13547 : Remove featureset flag and use only the manifest #1491 OCPBUGS-13303 : pkg/operator/startupmonitor: skip openshift-apiserver readiness check… #1492 OCPBUGS-14038 : Update APIRemovedInNextRelease alerts #1497 STOR-1263 : Bump k8s 1.27 #1469 read featureset from the manifests #1490
Read feature manifest #1488
Cover featuregate access errors in PSA configobserver unit tests. #1486
switch to featuregates via the API #1485
OCPBUGS-10831 : pod security: use v1 api #1481 OCPBUGS-11361 : Revert “Merge pull request #1474 from benluddy/oapi-bump” #1477 Bump dependency on openshift/api. #1474
Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1460
OCPBUGS-10713 : PSA Violation alert: add ocp_namespace label #1435 OCPBUGS-10039 : update openshift/api to include aesgcm provider in the default apiserver schema #1462 OCPBUGS-10577 : update apf configuration to use v1beta3 #1413 OCPBUGS-8711 : API-1509: Enable AES-GCM encryption #1449 OCPBUGS-8478 : Disable TestBoundTokenSignerController #1455 Full changelog
OCPBUGS-28247 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791 OCPBUGS-27063 : bump(library-go)=release-4.14 #787 OCPBUGS-21088 : Bump deps to address CVE-2023-44487 [4.14] #764 OCPBUGS-21088 : Bump deps to address CVE-2023-44487 #756 OCPBUGS-19553 : Update static pod manifests perms #749 add roles for the new privileged namespaces PSa syncer controller #743
OCPBUGS-15256 : Sync openshift/api to reduce installerpod configmap based file permissions to 0600 #740 OCPCLOUD-2010 : Re-vendor api and library-go for external platform support #736 OCPBUGS-14323 : Change manifest directory permissions #739 OCPBUGS-13579 : remove RBAC for cluster-policy-controller CM leader election #738 OCPBUGS-13579 : Drop flags removed in k8s 1.26 #737 Remove featureset flag and use only the manifest #735
Update cloud provider tests with feature gate changes #731
STOR-1263 : Bump k8s 1.27 #713 Read feature manifest #733
Restricted featuregate reader #732
use new featuregate API #730
OCPBUGS-12709 : Reset library-go branch after Azure revert #729 OCPBUGS-12133 : Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #727 Revert azure out of tree provider change #724
OCPBUGS-11352 : AWS should not use external-cloud-volume-plugin post CSI migration #721 OCPBUGS-7440 : do not degrade KCM when when monitoring stack rollout is in progress #706 OCPBUGS-10568 : migrate to using lease objects for leader election #715 Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #709
OWNERS: remove ravi from the owners #714
Reset library-go to openshift fork #708
Update library-go dependency to move Azure to out of tree #705
Update library-go dependency to move AWS to out of tree #707
Full changelog
OCPBUGS-67780 : Bump github.com/sirupsen/logrus to v1.9.1 #141 : OCPBUGS-21371: bump library-go to include switch to HTTP/1.1 #96
Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170 : specify master node selector on migrator pod #92 OCPBUGS-16513 : bump(*): update to 1.27.1 #91 Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
Full changelog
OCPBUGS-51170 : Use applyconfigurations for updating network.oprerator status #2660 OCPBUGS-48323 : Pass transit_switch_subnet options in ovnkube-node pod for single-zone #2617 OCPBUGS-42754 : Set mount propagation to HostToContainer for /var/lib/kubelet #2521 OCPBUGS-47320 : Pass transit_switch_subnet options in ovnkube-node pod #2607 OCPBUGS-43821 : manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2546 OCPBUGS-39086 : Fix wait logic for IPsec certificate signing request #2481 OCPBUGS-41508 : Tighten the permissions on whereabouts.conf #2493 OCPBUGS-42021 : Add proxy env vars to onvkube-node #2505 OCPBUGS-38440 : [release-4.14] 4.14 subnet config #2473 OCPBUGS-37221 : Ensure that the node-identity webhook address contains colons for IPv6 #2440 OCPBUGS-38073 : Fix IC distributed control plane alerts #2463 OCPBUGS-37468 : Backport ipsec state metric #2444 OCPBUGS-32706 : Add conditions for ignored-namespaces #2380 OCPBUGS-36722 : update whereabouts crd #2434 OCPBUGS-34885 : [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled #2390 OCPBUGS-27925 , OCPBUGS-30579 : [release-4.14] tighten conditions for the state transitions in IC upgrade #2207 OCPBUGS-30021 : Fully disable network-node-identity on ROKS #2315 OCPBUGS-31669 : [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2311 OCPBUGS-31360 : Remove egressip write permissions from ovn-kubernetes-node #2320 OCPBUGS-30021 : [release-4.14] Disable network-node-identity on ROKS #2286 OCPBUGS-30100 : ipsec: fix openssl typo #2287 OCPBUGS-29168 : add env var in whereabouts-reconciler daemonset #2257 OCPBUGS-26573 : Improve troubleshooting IC upgrades #2076 OCPBUGS-29033 : network node identity: tolarate all taints #2248 OCPBUGS-18281 : only 2 master nodes are required for ovn-kubernetes #2154 OCPBUGS-29300 : Update ingressconfig_controller to use field Manager #2266 OCPBUGS-28608 : fix whereabouts conformance test failures #2235 NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858 : [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219 OCPBUGS-27013 : HyperShift, network-node-identity: Check the deployment in the management cluster #2195 OCPBUGS-24326 : adminpolicybasedexternalroutes CR accepts an invalid IP address #2196 OCPBUGS-24037 : remove all managed fields used by old manager #2112 OCPBUGS-24320 : Add apbroute/status patch rights for ovnkube-node to update status #2143 OCPBUGS-22787 , OCPBUGS-22788 , OCPBUGS-22789 : ovnkube: container scripts cleanup #2090 OCPBUGS-23371 : hypershift, hosted clusters: enable multi-homing and multi-net features #2117 OCPBUGS-21717 : Bump golang.org/x/net and github.com/openshift/library-go #2122 OCPBUGS-24633 : ipsec add pluto restart #2152 OCPBUGS-22363 : Added HCP label to CNO pods #2081 OCPBUGS-22286 : hypershift: adjust backoff on infrastructure name retry #2078 OCPBUGS-23011 : Block upgrades to 4.15 with Kuryr #2096 OCPBUGS-23315 : set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2107 OCPBUGS-19897 : HyperShift: Use the local konnectivity proxy when checking proxy readiness #2043 OCPBUGS-20472 : hosted cluster upgrade failure from 4.13 stable to 4.14 #2063 OCPBUGS-20254 : [release-4.14] Revert Kuryr MTU fixes #2046 OCPBUGS-20184 : [release-4.14]: Don’t run network node identity as root #2054 OCPBUGS-20064 : Multus should determine kubeconfig path [backport 4.14] #2050 OCPBUGS-19955 : get ipsecStatus from host daemonset #2045 OCPBUGS-19862 : Multus per-node certificates should have 24h duration [backport 4.14] #2040 OCPBUGS-19523 : use $CPE_NAME to find the OS major version #2017 OCPBUGS-19808 : remove prestop hooks for northd, sbdbd and nbdb #2036 OCPBUGS-19747 : [release-4.14] Use port 9108 for ovnkube-control-plane metrics #2033 OCPBUGS-19771 : Relax conditions to get IC upgrade started #2035 OCPBUGS-19748 : Fix config status MTU migration not being updated #2034 OCPBUGS-19725 : Do not enable node admission webhook if the CNI is not OVN-Kubernetes #2032 OCPBUGS-19686 : ipsec: remove preStop from host #2029 OCPBUGS-19627 : Multus per-node certificate request [backport 4.14] #2023 OCPBUGS-19461 : make ipsec.service required #2014 OCPBUGS-19649 : Network node identity: node-specific certificate in ovnkube-node, admission webhook #2011 OCPBUGS-19623 : multus: set MULTUS_NODE_NAME to filter pods to local node #2022 OCPBUGS-19481 : separate libovsdblogs from main ovnkube-master #2008 OCPBUGS-18728 : Kuryr: Set MTU on Bootstrap, not Render phase #1995 OCPBUGS-18871 : ipsec: fix oopsy from 2e3fc8e7a0 #1997 OCPBUGS-18874 : ovnkube: set northd backoff-interval and use a single thread to save CPU #1998 OCPBUGS-18135 : IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1955 move IPsec to host #1849
OCPBUGS-17916 : Fix IC configmap lookup in pod_status.go #1954 OCPBUGS-17677 : [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster #1980 OCPBUGS-18363 : Add ‘/etc/cni/multus/net.d’ into volumemount in multus pod #1979 OCPBUGS-18175 : Fix bond-cni’s default directory in multus manifest #1953 OCPBUGS-17782 , SDN-3664 : Join ovnkube-controller and ovnkube-node container for multizone setup #1971 OCPBUGS-16051 , OCPBUGS-3176 : Enables IP Forwarding config in CNO #1952 OCPBUGS-17257 : CVE-2023-3978: golang.org/x/net/html: Cross site scripting #1935 OCPBUGS-17677 : [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. #1949 OCPBUGS-17964 : ovn-k, managed: Align join subnet configuration #1962 SDN-4024 : Add ANP Feature Gate #1859 SDN-4057 : hypershift: Allow ovnkube-master and ovnkube-node to have different images #1942 Remove certificatesigningrequests/update permission from ovnkubenode #1934
Add rolling update for managed ovnkube-control-plane #1944
IC & openshift + hypershift #1874
OCPBUGS-16019 : prevent creation of multiple cni-sysctl-allowlist-ds pods #1904 OCPBUGS-10765 : make MAXLOGFILES a real variable and work for self-hosted #1931 Multus thick plugin support #1915
OVN-Kubernetes ipsec: create the CSR with a random name #1928
CCO-294 : Switch azure credentials request to use explicit permissions #1922 OVN-Kubernetes: Add status subresource permissions for setting labels and annotations #1896
SDN-3223 : Use encapsulation=true for IBM Cloud #1800 Bug 16136 : change whereabouts ip reconciler exec #1890 Add OpenStack platform to list of allowed dual-stack clusters #1697
OCPBUGS-15945 : Stop using utilruntime.PanicHandlers to handle reconciliation panics #1893 HOSTEDCP-1063 : allow webhooks in hosted clusters to reach multus-admission-controller service #1879 OCPBUGS-15961 : FIPS related CNO changes #1901 OCPBUGS-10765 : Revert “Revert “OCPBUGS-10765: Remove oldest ovn acl log files when f… #1876 ovn-k: Configure dns service namespace and name #1912
OCPBUGS-15544 : Enable multi-external-gateway feature by default for managed and hosted clusters #1887 OCPBUGS-15918 : Skip rendering 0.0.0.0/0 for cluster proxy status #1903 Change rhel7/8 to rhel8/9 #1870
Enable EgressService controller #1848
Edited multus-admission-controller deployment config to not add autom… #1767
OCPBUGS-15794 : fix: add missing annotation for workload partitioning #1866 OCPBUGS-15544 : Add adminpolicybasedexternalroutes rights for ovnkube-node. #1867 Revert “Remove oldest ovn acl log files when file limit exceeded” #1873 #1873
OCPBUGS-10765 : Remove oldest ovn acl log files when file limit exceeded #1868 kube-proxy config overriding updates #1831
OCPBUGS-15282 : Add release version annotation to whereabouts-reconciler #1851 CCO-356 : Add Infrastructures permission to CNCC cluster role #1843 Add multi-networkpolicies support for OVN #1796
Add support for AdminPolicyBasedExternalRoute CRD and controller’s RBAC #1765
OCPBUGS-15138 : Add kubernetes.io/os nodeSelector to wherebouts reconciler DS #1841 OCPBUGS-14988 , SDN-3901 : Rebase to kube 1.27 #1826 CCO-358 : Manifest changes necessary to support Azure Workload Identity #1755 OCPBUGS-14714 : Do not rely on ControlPlaneTopology do determine if running in HyperShift #1835 OCPBUGS-11882 : Added another volume to safe-to-evict-local-volume annotation #1830 OCPBUGS-14833 : Fixes lint issues #1834 OCPBUGS-14384 : Remove nodeSelector for architecture in whereabouts daemonset #1828 OCPBUGS-11882 : Added safe-to-evict annotation to ovnkube-master and multus admission controller components #1822 OCPBUGS-13922 : Revert “Do not set the operator as available before updating the network config” #1818 OCPBUGS-11448 : add Hypershift release-image annotation to multus #1770 OCPBUGS-10937 : multus-admission-controller mounts secret with mode 0640 #1752 OCPBUGS-13219 : Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1803 OCPBUGS-5027 : Make the operator degraded on panic #1786 OCPBUGS-12856 : Support Device Plugin Resources For Smart NIC and DPU Hosts #1721 Updating cluster-network-operator images to be consistent with ART #1790
OCPBUGS-11565 : High API requests due to allowlist and operconfig reconcilers running too often #1788 OCPBUGS-8070 : Depreciate legacy field manager #1763 OCPBUGS-11550 : AUTH: update cluster-reader to include k8s.ovn.org #1791 OCPBUGS-10009 : HyperShift: Support HostedControlPlane node selector #1736 OCPBUGS-11046 : fix reconciliation process of the allowlist controller #1792 OCPBUGS-1341 : Enhance check controller to remove old check objects #1649 OCPBUGS-11046 : Fix allowlist ds template #1773 OCPBUGS-10647 : multus-admission-controller should not run as root under Hypershift #1745 OCPBUGS-9174 : The cluster-readers group should be able to get net-attach-defs #1343 Updating cluster-network-operator images to be consistent with ART #1768
OCPBUGS-9964 : Split out konnectivity certs #1734 SDN-3444 : Add runbook url for SBDB connectivity alert #1553 OCPBUGS-7777 : use –template instead of -a for ‘oc observe’ #1760 Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler #1735
OCPBUGS-10433 : Hypershift: Add RollingUpdate parameters to multus-admission-controller #1740 ovn-kube: move back to unsuffixed RHEL9 images #1747
Updating cluster-network-operator images to be consistent with ART #1732
OCPBUGS-10649 : HyperShift: Add POD_NAME env to ovnkube-node #1748 OCPBUGS-10031 : operConfig reconcile can return nil error on failure #1744 Set OVN-K north/south bound stale alerts severity to critical #1668
OCPBUGS-8707 : Point libreswan to proper nss location #1727 Whereabouts should implement the reconciliation controller #1693
add/update some UTs around clusternetwork change #1725
OCPBUGS-9931 : Enable configuration of node healthz server on ovnkube #1715 OCPBUGS-8692 : HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1728 Cno 4.13 kubernetes 1.26 #1708
use annotation on the daemonset to update hybrid overlay #1709
Remove the ovn-kind-cno.sh script #1710
SDN-3597 : OVN-K alerts: add OVS overflow alerts #1630 Full changelog
e2e:performance: decode to valid kubeletconfig object (#1276) #1276
Fix context deadlines in ExecCommandOnPod() (#1272) #1272
OCPBUGS-44506 : Drop sched_migration_cost_ns setting (#1215) #1215 OCPBUGS-44283 : right-hand-side profile_dirs take precedence (#1210) #1210 OCPBUGS-42567 : Add cluster-wide proxy env file (#1176) #1176 TuneD prior to kubelet in one-shot mode (#1137) #1137
OCPBUGS-37754 : Remove tuned/rendered object (#1133) #1133 OCPBUGS-37734 : Backport fix for OCPBUGS-36355 (#1126) #1126 OCPBUGS-33929 : Negative net interface name does not reduce queues (#1074) #1074 Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
OCPBUGS-30153 : fix rendering extra ctrcfgs (#978) #978 fix extra-reboot on upgrade with paused mcp worker (#1053) #1053
OCPBUGS-31694 : E2E: Workload hints test cases fixes (#1012) (#1052) #1012 Systemd processes not being moved to cpuset/systemd.slice fix (#1040) #1040
Reduce number of reboots in offline tests (#1035) #1035
OCPBUGS-30507 : Add performance real time tuned template (#984) (#1025) #984 Report duplicate priority only for multiple matching profiles (#1018) #1018
Scheduler plugin: ignore IRQs (#1023) #1023
irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640 : [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989 rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982 : E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904 OCPBUGS-26003 : E2E: PPC Test cases (#905) #905 Make MC names deterministic (#903) #903
OCPBUGS-25671 : rps: fix mask update for SR-IOV devices (#891) #891 OCPBUGS-18640 : Fix Racing Machine Configs and add Day 0 Support (#854) (#871) #854 OCPBUGS-24638 : Do not set default RPS sysctl twice (#880) #880 OCPBUGS-21845 : rps: trigger udev event per queue #832 (#832) #832 OCPBUGS-21845 : e2e:rps: improve logging (#831) #831 render: change dir path (#826) #826
Disable HTTP/2 for webhook and metrics servers (#841) #841
Remove obsolete protocols and weak ciphers (#835) #835
OCPBUGS-19459 : check for object being nil (#805) #805 OCPBUGS-19821 : e2e: perfprof: enhance the scheduling domain tests (#813) #813 nto: avoid timeout when there are too many CSV (#817) #817
Add kubeconfig path for IBM Managed OpenShift (#812) #812
OCPBUGS-18868 : [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) #788 Sync DaemonSet if operand image changes (#785) #785
OCPBUGS-18392 : Change the OVN trigger file name to adapt to OVN IC (#777) #777 OCPBUGS-15044 : e2e:irqloadbalance: wait for profile revert (#768) #768 Add SetLogger() prior to controller-runtime start (#779) #779
OCPBUGS-18052 : feat: added logic to handle legacy sno install (#778) #778 OCPBUGS-17943 : Add rtentsk plugin to pp tuned profile (#767) #767 Tighten the rules for modifying Tuned Profiles (#775) #775
Revert “Tighten the rules for modifying Tuned Profiles (#765)” (#771) #765
Tighten the rules for modifying Tuned Profiles (#765) #765
OCPBUGS-14026 : cgroup: Match the name of the cgroup to what is expected by kubelet (#758) #758 e2e: irqbalance: improve test troubleshooting (#753) #753
OCPBUGS-16348 : OSLAT latency spikes due to tsc karg setting (#756) #756 Makefile: hack: add helpers to compile testsuites (#751) #751
OCPBUGS-17219 : Render mode should not segfault w/ no matching MCP (#754) #754 Release leader election on manager exit (#745) #745
generate missing files (#752) #752
vendor: bump OCP dependencies 08082023 (#750) #750
OCPBUGS-7980 : e2e:ht-aware: exec on the correct worker node (#729) #729 bump k8s to 1.27.4 (#748) #748
e2e: wait for objects deletion (#749) #749
e2e:wait: return updated pod object explicitly (#744) #744
OCPBUGS-17258 : CVE-2023-3978: golang.org/x/net/html (#747) #747 e2e: remove image parameter from must gather (#743) #743
Update the config.openshift.io/node object’s cgroupMode to “v1” (#737) #737
Fix a race in e2e test rollback.go code (#739) #739
e2e:irqbalance: applied condition exists (#727) #727
Improve render error handling (#724) #724
e2e:irqbalance: wait for tuned profile to be ready (#721) #721
pao:status: do not take address of loop var (#720) #720
nto:tuned: remove sched_min_granularity_ns settings (#722) #722
Align TuneD with the latest shipped FDP version (#716) #716
E2E: update cpu load balancing test for latest cgroup related changes (#712) #712
Build gather-sysinfo (#714) #714
e2e: overhaul Performance-Addon-Operator tests (#590) #590
e2e: latency testing: increase the expected threshold (#706) #706
e2e: perf-prof: disable truncating gomega output (#702) #702
Configure OVS for dynamic cpu pinning (#559) #559
OCPVE-382 : fix: add default state for crio config (#700) #700 e2e: devmgr: fine tune kubelet restart test (#701) #701
e2e: RPS: fix expected cpu set (#703) #703
Switch to rslave/HostToContainer volume mount propagation (#692) #692
Do not rollback settings on TuneD exit (#699) #699
e2e: reboot: add kubelet restart test (#697) #697
remove conditional skip (#690) #690
e2e: memorymanager fix: check the hugepage size condition (#693) #693
Use RHEL9 as a base (#665) #665
Expose TuneD socket to host. (#651) #651
E2E: Use appropriate device path for rpsmask test (#691) #691
chore: replace github.com/ghodss/yaml with sigs.k8s.io/yaml (#628) #628
test: perfprof: devices: fix default test image (#672) #672
e2e: verify latency tests run with LATENCY_TEST_DELAY>120 (#662) #662
E2E: Add memory manager sanity test case (#573) #573
modify owners (#634) #634
Add minLength restriction to Tuned CR (#689) #689
OCPBUGS-14934 : consistent use of ginkgo flags in Makefile (#682) #682 OCPBUGS-14622 : Do not fail creating cgroups if they exist already (#683) #683 OCPBUGS-14193 : pao e2e: Split e2e PAO update lane to more lanes (#631) #631 OCPBUGS-4194 : rps: use default rps mask kernel API (#650) #650 OCPBUGS-14756 : [test] [e2e] Check ci lanes are executing the right test suites (#679) #679 check ocp version and export CNF_TEST_IMAGE variable with appropriate cluster version (#584) #584
OCPBUGS-5529 : Fix updating numa core siblings map in GetCpuSiblings function (#564) #564 Remove cpu-quota.crio.io: disable annotation (#663) #663
OCPBUGS-14137 : e2e: perfprof: add SNO device recovery test (#653) #653 Add PerformanceProfiles to ‘oc adm must-gather’ (#655) #655
Revert “Add PerformanceProfiles to ‘oc adm must-gather’ (#582)” (#654) #582
Add PerformanceProfiles to ‘oc adm must-gather’ (#582) #582
OCPBUGS-13148 : Configure cpu balancing cpu sets for all clusters (#646) #646 OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#644) #644
Updating cluster-node-tuning-operator images to be consistent with ART (#579) #579
OCPBUGS-11083 : pao e2e: fix update test suit timeouts (#626) #626 e2e: Fix RPS test for multi-worker cluster (#641) #641
Revert PR558 and PR585 partially (#639) #639
e2e: add missing test id (#622) #622
OCPNODE-1539 : perf profile: add script for preparing cgroups for CPU load balance disabling (#601) #601 Remove subPaths, they are broken (#623) #623
OCPBUGS-10293 : performance-profile: enable crun for high-performance runtime (#588) #588 Revert #567 and cleanup PPC-generated TuneD config (#611) #611
Backup and revert profile when hugepages test completes (#597) #597
tuned: Handle UserLevelNetworking nil pointer gracefully (#608) #608
A new env var NO_BZ_CHECKS disables Bz and Jira status checks (#607) #607
OCPBUGS-9959 : check scheduler settings under /sys/kernel/debug/sched/ (#581) #581 workload-hints: disable stalld when rt disabled (#592) #592
render: remove uid from render-sync target (#594) #594
OCPBUGS-11083 : e2e: profile updates tests revised (#600) #600 Update to the latest k8s and OpenShift deps (#580) #580
Make the enable-leader-election option work (#586) #586
Update NTO-generated MC on MachineCount <= 1 (#585) #585
remove BZ 2181546 from skip list (#602) #602
Fix updating nodeSelector test (#595) #595
Remove the preStop hook for openshift-tuned (#587) #587
Skip tests depending on Jira or Bz issue status (#591) #591
kubectl explain to explicitly state workloadHint default values (#576) #576
Full changelog
OCPBUGS-76593 : CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #658 OCPBUGS-28247 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #570 : OCPBUGS-20724: bump library-go to include switch to HTTP/1.1 #554
WRKLDS-728 : Capabilities: drop build/apps APIService when capabilities are not enabled #532 switch image-registry cert CM #545
OCPBUGS-16554 : update dependencies to get rid of goproxy #546 AUTH-408 : bindata: set required-scc #544 Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010 : increase timeout for probes #536 OCPBUGS-2765 : Library go bump #538 OCPBUGS-12813 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534 Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040 : update openshift/api to include aesgcm provider in the default apiserver schema #526 Full changelog
OCPBUGS-48841 : Add new team members to the OWNERS file #380 OCPBUGS-33295 : Update opentelemetry to mitigate CVE-2023-47108 #344 OCPBUGS-28951 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328 OCPBUGS-23490 : Remove blockage of ConfigObserver by build informer has synced flag #318 OCPBUGS-20818 : bump(k8s,openshift) to address CVE-2023-44487 [4.14] #309 OCPBUGS-20439 : Include Build CRD in manifests #307 OCPBUGS-18992 : Always sort disabled controller list #303 OCPBUGS-18980 : Disable BuildConfigChange controller when Build cap is disabled #301 route-controller-manager deployment updates #295
OCPBUGS-16072 : Updating Kubernetes and other associated dependencies #296 OCPBUGS-13926 : change the operator log level to default normal in the deployment #289 BUILD-582 , OCPBUGS-14638 : bump(k8s): 1.27.1 #294 OCPBUGS-13926 : add loglevel controller for OCM-o #292 Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895 : [WRKLDS-730] route-controller-manager deployment updates #288 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568 : migrate to using lease objects for leader election #282 Add Divyanshu Agrawal as a reviewer #283
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-21759 : switch to bingo for dependency management (and bump golangci-lint@v1.51.0) #98 OCPBUGS-21019 : Bump golang.org/x/net to v0.17.0 #96 Merge rukpak updates into main + Required Fixes #88
Add ncdc to OWNERS #89
Temporarily remove from payload #90
Revert “Merge rukpak updates into main” #87
Merge rukpak updates into main #86
Updating ose-cluster-platform-operators-manager images to be consistent with ART #83
OCPBUGS-10333 : feat: add workload pinning annotations #82 Full changelog
OCPBUGS-21122 : bump(k8s,openshift) to address CVE-2023-44487 [4.14] #139 OCPBUGS-21122 : Bump deps to address CVE-2023-44487 #134 OCPBUGS-17989 : pkg/psalabelsyncer: enforce syncing in case label is set #129 AUTH-413 : ps syncer: only sync labels if noone else is managing them #127 ps syncer: add a controller for run-level 0 namespaces #128
Adjust logs per generic troubleshooting #126
OCPBUGS-15568 : Add timeout into cache sync wait to prevent hanging forever #124 OCPBUGS-15568 : Remove debugs logs in workqueuebucket #125 Add more logs for queue operations #122
OCPBUGS-15568 : Handle error if caches are not synced instead silently exit #121 Add ingvagabund to owners #120
Add logs for quota namespace syncing with verbosity level 2 #119
OCPBUGS-13649 : fix ClusterResourceQuotas to work for all api resources including custom resources #115 OCPBUGS-13579 : bump(k8s) to v0.27.1 #113 OCPBUGS-8271 : external template and route Informer #100 Updating cluster-policy-controller images to be consistent with ART #110
complete controller description #104
OCPBUGS-160 : psalabelsyncer: handle empty namespace of a rolebinding subject #107 Updating cluster-policy-controller images to be consistent with ART #105
Full changelog
OCPBUGS-63518 : references to github.com/sclorg/django-ex.git now also refer to the branch #661 OCPBUGS-55655 : Adding mutex to func createSamples on handler.go #635 OCPBUGS-54537 : add rhdmalone to owners #624 OCPBUGS-49421 : add shannon and aroyoredhat as owners #598 OCPBUGS-21217 : CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) #539 OCPBUGS-22257 : Sync library to remove invalid dockerhub references for OKD #520 manifests: Drop explicit runlevel from CRD manifest #515
OCPBUGS-16435 : Bump k8 to v0.27.2 for ocp 4.14 #514 OCPBUGS-16403 : Update Cluster Sample Operator dependencies and libraries for OCP 4.14 #511 reconcile status when clusteroperator changes #510
OCPBUGS-15754 : Update Jenkins and Jenkins Agent Base image versions #504 OCPBUGS-14491 : Updating to use Jenkins 4.13 images #502 OCPBUGS-12775 : Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 #500 Updating ose-cluster-samples-operator images to be consistent with ART #499
OCPBUGS-10910 : Add network tools imagestreams #495 Updating ose-cluster-samples-operator images to be consistent with ART #493
Fix jira component #494
Full changelog
OCPBUGS-50592 : Set openshift.io/required-scc: privileged annotation in version pods #1151 OCPBUGS-45331 : deps: bump golang.org/x/net to 0.31.0 #1120 OCPBUGS-44704 : Fix desired before sync_worker’s work is initialized #1109 OCPBUGS-30878 : install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040 OCPBUGS-27822 : Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028 OCPBUGS-27175 : clusterOperatorBuilder: Reconcile metadata on COs #1021 OCPBUGS-27048 : pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018 OCPBUGS-26207 : pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016 OCPBUGS-20762 : [4.14] Bump http-related deps #986 OCPBUGS-19921 : pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #976 OCPBUGS-19737 : pkg/clusterconditions/promql: Warm cache with 1s delay #973 OCPBUGS-19465 : Properly reconcile SCC resources #972 OCPBUGS-13308 : Simplify user-facing messages on risk evaluation throttling #955 OCPBUGS-17418 : Really handle DeletedFinalStateUnknown correctly #954 CNF-9385 : add ImageRegistry capability #950 OCPBUGS-17418 : Handle cache.DeletedFinalStateUnknown #952 docs/user/tasks-*by-number-and-component.svg: Update to 4.13 #949
Dockerfile: bump to 1.19 and use public UBI pullspec #944
pkg/payload: De-noise ‘excluding …’ logs #945
bump api version to add new capability #941
pkg/cvo/metrics: Doc from_version semantics for cluster_version{type=“completed”} #929
Code cleanups for golangci-lint failures #942
OTA-559 : Migrate to (*Manifest).Include(…, overrides) #934 OCPBUGS-9070 : Fix hotlooping on Cronjob resources #910 Updating cluster-version-operator images to be consistent with ART #932
Updating cluster-version-operator images to be consistent with ART #930
Updating cluster-version-operator images to be consistent with ART #928
syncStatus: Reduce verbosity when syncing nothing of interest #922
Update dnsPolicy to allow consistent resolution of the internal LB #920
OTA-941 : pkg/payload/precondition/clusterversion/rollback: New precondition #918 Updating cluster-version-operator images to be consistent with ART #911
OCPBUGS-5469 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #909 Full changelog
CONSOLE-5011 : migrate to yarn berry #16082 NO-JIRA: Bump builder image to v29 #15991
OCPBUGS-74439 : Bump lodash to latest #15971 OCPBUGS-44158 : bump dompurify to latest #15593 OCPBUGS-59998 : Remove the devconsole backend common internet proxy and replace it with dedicated ones #15464 OCPBUGS-58274 : Fix TypeError Cannot read properties of null (reading ‘metadata’) #15228 OCPBUGS-57099 : Add all files to vendor regardless of gitignore #15135 OCPBUGS-55942 : fix bug where operator appears twice #15033 OCPBUGS-55427 : Add missing pipelines plugin name to known plugins #15005 OCPBUGS-39010 : fix crash if helm chart metadata is nil #14198 OCPBUGS-53437 : Show Observe section without PROMETHEUS and MONITORING flags #14892 OCPBUGS-54404 : Update the monitoring topic used by the console team #14910 OCPBUGS-54167 : fix run time error when no completed version exists #14899 OCPBUGS-51118 : redirect to correct alert #14823 OCPBUGS-49753 : ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14711 OCPBUGS-46603 : Unable to remove finally tasks in pipeline builder mode #14642 OCPBUGS-33145 : Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14370 OCPBUGS-45323 : Use vCenterCluster value from CM as primary resource #14574 OCPBUGS-39368 : Remove deprecated resources from spec of the Pipeline #14230 OCPBUGS-45283 : Add IBM Block Storage CSI driver support for RWX #14569 OCPBUGS-44791 : A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14518 OCPBUGS-42962 : Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14386 OCPBUGS-43000 : List of default Camel K event sources disappears when adding a custom event source #14388 OCPBUGS-36558 : Increase login flow state paramater length/entropy #14439 OCPBUGS-10337 : Updating openshift-enterprise-console images to be consistent with ART #12760 OCPBUGS-42518 : The filepath including leading slash makes error during parsing devfile using Gitlab #14342 OCPBUGS-42517 : Values entered into the Instantiate Template form are automatically cleared #14341 OCPBUGS-42757 : Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14369 OCPBUGS-38883 : Fix password set to Secret created through Start Pipeline form #14184 OCPBUGS-37353 : Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #14108 OCPBUGS-41836 : DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14281 OCPBUGS-39389 : Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14231 OCPBUGS-41581 : Increased max nodes limit to 200 in topology page #14262 OCPBUGS-38972 : Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14234 OCPBUGS-38053 : fix BMH restart annotation #14109 OCPBUGS-33748 : Fix Pipeline details page with when expression using CEL expression #13856 OCPBUGS-32499 : Fixed some problems in topology Chinese translation text #13779 OCPBUGS-33942 : make sure folder is encapsulated with quotas #13869 OCPBUGS-35723 : Upgrade Pipeline trigger resources to v1beta1 #13985 OCPBUGS-33558 : Display “With Data upload form” in Create PVC drop down once #13840 OCPBUGS-33064 : Fix PipelineRun Logs tab navigation #13673 OCPBUGS-33321 : Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824 OCPBUGS-33635 : restrict Masthead logo to max-height to 60px #13847 OCPBUGS-33640 : Add visual connector between VMs and non VMs workloads #13848 OCPBUGS-33462 : fix issues with Edit Route form #13831 OCPBUGS-33110 : change OperatorHub filter FIPS Mode to Designed for FIPS #13804 OCPBUGS-32697 : Routes created by devfiles do not always use HTTPS #13787 OCPBUGS-21799 : Fix empty editor error #13256 OCPBUGS-32168 : fix bug where paused MCPs were incorrectly unpausing w… #13753 OCPBUGS-20173 : Console should not panic when no response is retrieved for plugin assets #13217 OCPBUGS-31388 : Application creation fail when manually entering input scaling value in local setup #13697 OCPBUGS-31394 : PipelineRuns in Console show wrong status or load indefinitely #13698 OCPBUGS-31864 : Fix config ini format #13738 OCPBUGS-25145 : fix vCenter cluster being empty #13436 OCPBUGS-28746 : fix bug where Expand PVC modal assumes pvc.spec.resou… #13558 OCPBUGS-29783 : Fix operands list endpoint #13625 OCPBUGS-29813 : Release 4.14 backports #13646 OCPBUGS-29813 : Addition of optional chaining to prevent yaml crash #13541 OCPBUGS-25274 : Add support for Azure Workload Identity / Federated Identity based in… #13642 OCPBUGS-28972 : Add flags checks to hide Pipeline static plugin List and details pages #13572 OCPBUGS-27898 : Add support for custom segment domains (to load JS and make API calls) #13540 OCPBUGS-29349 : Error in displaying BuildRun logs in Console #13601 OCPBUGS-29100 : Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585 OCPBUGS-29239 : Add a new allowInsecure option to the internet proxy #13592 OCPBUGS-28990 : update check for the ‘provider’ label on the PackageMa… #13573 OCPBUGS-27157 : add additional check to determine if file is binary #13507 OCPBUGS-28635 : Bump graphql-go to v1.3.0 #13553 OCPBUGS-27305 : Copy response code from proxied plugin requests #13517 OCPBUGS-27851 : fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537 OCPBUGS-27350 : Add Pipeline metrics tab using plugin #13520 OCPBUGS-26171 : Set unlimited line width in YAML editor #13482 OCPBUGS-24640 : Strip ‘Server’ header from proxy response #13423 OCPBUGS-25997 : change Alertmanager form to create using matchers inst… #13478 OCPBUGS-24349 : Fix crash when ArtifactHub Task has no version #13399 OCPBUGS-25397 : fix runtime error on Node details Overview when Machin… #13446 OCPBUGS-23771 : Fix for yaml editor that crashes with MCE and ACM plugins enabled #13360 OCPBUGS-24667 : Fix plugin proxy handler #13425 OCPBUGS-24474 : S2I Build Wizard should check for Containerfile in addition to Dockerfile #13415 OCPBUGS-24432 : fix filtering issues on Events #13413 OCPBUGS-24352 : add access review for impersonate #13400 OCPBUGS-22240 : Save also the location.search and .hash values in localStorage to restore them after login #13270 OCPBUGS-24293 : ConsolePlugin metrics must no longer be grouped by the vendor #13391 OCPBUGS-24423 : Searching for items in quick search is confusing #13412 OCPBUGS-22375 : Delete results.tekton.dev annotations before rerun the pipelineRun #13278 OCPBUGS-22478 : Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13290 OCPBUGS-24196 : ApiVersion displayed on console is v1alpha1 whereas we support v1beta1 #13402 OCPBUGS-23423 : Cannot Edit Shipwright Build #13343 OCPBUGS-22980 : remove expandable toggle for conditional update risk d… #13308 OCPBUGS-22374 : Telemetry- Current page was sometimes not tracked when reloading the current page #13277 OCPBUGS-22177 : Channel page shows “Required” message for the default name when navigate to create channel page #13262 OCPBUGS-19371 : Upgrade DomainMapping apiVersion to v1beta1 #13165 OCPBUGS-19416 : Correct logout process #13173 OCPBUGS-22285 : updating doc links for 4.14 GA #13273 OCPBUGS-19845 : mock apis for git repo in test serverless function tests #13199 OCPBUGS-22460 : Fix the forms when BC is not installed in the cluster #13288 OCPBUGS-21877 : add support for new features annotations while preserv… #13258 OCPBUGS-22377 : Fixed Edit Application form for Knative Services #13279 OCPBUGS-21784 : hide page-specific doc links for ROSA and OSD #13254 OCPBUGS-19898 : fix ResourceLog permissions when impersonating #13203 OCPBUGS-19899 : change resource icon for FenceAgentRemediationTemplate… #13204 OCPBUGS-19878 : show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13202 OCPBUGS-19776 : 404 - not found will show on Knative-serving Details page #13193 OCPBUGS-19526 : fetch TaskRuns without selector and reduces the get TaskRuns requests #13178 OCPBUGS-18997 : fix issues with refactored “Create StorageClass” form #13170 OCPBUGS-19664 : Check if filtered object contains name property #13187 OCPBUGS-19380 : Hide the Builds NavItem if BuildConfig is not installed in the cluster #13167 OCPBUGS-19337 : Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster #13160 OCPBUGS-19336 : Added React Icon #13159 OCPBUGS-18881 : use active namespace in Create cta href of create action for operator backed #13150 OCPBUGS-19362 : Hide the DeploymentConfig option in the User Preferences if that resource type isn’t available #13164 OCPBUGS-19338 : Hide DeploymentConfig option from forms when it’s not installed in the cluster #13161 OCPBUGS-18987 : Monitoring: Fix display of silenced alerts in dev console #13152 OCPBUGS-18727 : bump @patternfly/react-core to v4.276.11 to pick up Sele… #13146 OCPBUGS-18686 : Fix incorrect export of useLabelsModal in dynamic plug… #13142 OCPBUGS-18604 : [knative] Don’t rely on openshift/hello-openshift as a sample image #13134 OCPBUGS-18094 : Remove cluster filter and menu group title #13137 OCPBUGS-18348 : Add deprecation alert for DeploymentConfig #12968 OCPBUGS-13359 : Fix crash when filtering the quick start catalog #13126 OCPBUGS-18306 : fix useDeleteModal Example formatting #13117 OCPBUGS-18406 : Builds navigation item is missing in Developer perspective #13124 OCPBUGS-17341 : OCP console mandate secret for repository creation #13084 OCPBUGS-16108 : Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13118 CONSOLE-3126 : Update cluster paused alert message #13106 OCPBUGS-17864 : Web console slowness on Project>Project access page #13099 OCPBUGS-17981 : Remove DeploymentConfig, Build and BuildConfig sections from navigation and use flags so they can be enabled by cluster admins #13089 OCPBUGS-9182 : Enable default-container annotation to specify the default container for logs and terminal. #13098 OCPBUGS-17913 : Typo in the OCP console menu #13096 OCPBUGS-17948 : Fix that Devconsole plugin show essential features like add page and topology also when Builds and DeploymentConfigs capabilities are disabled #13097 OCPBUGS-13892 : Remove spaces from prometheus queries #13043 OCPBUGS-15927 : Error page when fresh normal user visiting BuildConfigs page of ‘default’ project #13091 OCPBUGS-16374 : Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13093 CONSOLE-3327 : Expose useActiveNamespace within dynamic-core-api #13033 OCPBUGS-17595 : Updating YAML from console shows error #13090 OU-206 : Merge monitoring alerts with alerts from other sources in the dev console #12940 CONSOLE-3681 : Convert storage-class-form.tsx from class component to … #13036 OCPBUGS-17496 : Bridge NAD should set “preserveDefaultVlan”: false #13076 CONSOLE-3126 : Remove paused state since its no longer relevant due to 4.14 changes … #13072 OCPBUGS-17515 : Console UI is broken due to patternfly/react-core version change #13086 OCPBUGS-17504 : Dev console: Remove checkboxes on Alert Details page Silenced By list #13085 OCPBUGS-16717 : Fix name validation regex #13075 OCPBUGS-17410 : Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13074 OCPBUGS-14138 : Console fix #13078 OCPBUGS-15458 : Links for console-dynamic-plugin-sdk markdown docs are not working #13062 OCPBUGS-129 : bump @patternfly/react-core to v4.276.11 to pick up Sel… #13052 OCPBUGS-17234 : change Command Line Tools text #13068 OCPBUGS-17347 : Fix “View alerting rule” action URL #13058 OCPBUGS-15419 : Title on Overview page has changed to “Cluster · Red Hat OpenShift” #12951 OCPBUGS-13387 , OCPBUGS-16693 : Import page create button is disabled due to PAC validation #13046 CONSOLE-3683 : Convert FireMan component in list-page.tsx from class c… #13024 OU-231 : Add jgbernalp and zhuje to OWNERS for monitoring #13069 OCPBUGS-17196 : Fix nad ovn type - annotation and netAttachName #13053 OCPBUGS-16844 : external link icon in resource added toast notification not linked #13057 OCPBUGS-15310 : Helm Chart installation modal “Documentation” field is always N/A #13032 CONSOLE-3686 : Convert SecretFormWrapper component in create-secret.ts… #13017 OCPBUGS-15008 : update the KnativeServing API version to v1beta1 for global-config extension #13059 CONSOLE-3679 : Convert instantiate-template.tsx from class component t… #12947 CONSOLE-3568 : expose DeleteModal via useDeleteModal hook in @console/shared #12974 CONSOLE-3677 : Convert edit-yaml.jsx from class component to functiona… #12973 CONSOLE-3678 : Convert EventStream component in events.jsx from class … #12989 OCPBUGS-16093 , OCPBUGS-16270 , OCPBUGS-9409 : Creation of GH webhook and attaching it to repo while importing from git using PAC #13021 CONSOLE-3682 : Convert components in cluster-settings folder from clas… #13011 CONSOLE-3676 : Convert app.jsx from class component to functional comp… #12952 OU-175 : Monitoring: Add “Silences” tab to Developer console #12900 OCPBUGS-10884 : propagate mpath device type to request data #13022 OCPBUGS-16656 : Devfile import fails on master branch #13050 OCPBUGS-9355 : Fix translation bug #13049 OCPBUGS-3495 : Add cacheBuster query string when requesting plugin entry scripts #13035 OCPBUGS-16599 : allow creation of v1beta1 APIversion Pipeline in Pipeline builder YAML view #13034 OCPBUGS-9285 : Add note to the console.page/route extension regarding its usage #13044 OCPBUGS-14341 : Check operands deletionTimestamp to disable kebab action menu #13042 ODC-7336 : automation for customization-of-catalog-add-page-form feature file #12934 OCPBUGS-11285 : Dynamic plugin translation support for plurals broken #13028 chore(i18n): update translations: Completed Master Branch - Sprint 238 #12999
OCPBUGS-16433 : Fixes location update issues #13023 CONSOLE-3591 : Remove directory listing for /static/* #13001 CONSOLE-3694 : Convert tile-view-page.jsx from class component to func… #12942 ODC-7334 : Show ConsoleSamples resources in the samples catalog #12970 CONSOLE-3666 : Validate shared modules of dynamic plugins #12881 OCPBUGS-11971 : When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13016 OCPBUGS-13808 : Console SDK components should be using GroupVersionKin… #13029 OCPBUGS-14837 , OCPBUGS-16025 : Hide the Duplicate Pipelines Card in the DevConsole Add Page #13007 OCPBUGS-8274 : Fix copy login command regression #13003 CONSOLE-3687 : Convert components in utils folder from class component… #12925 OCPBUGS-11219 : Fix incorrectly nested css rule for print styles #12991 OCPBUGS-11620 : Fix stop PLR option #13020 CONSOLE-3706 : Remove custom history.pushPath alias function #12873 CONSOLE-3431 : Allow building dynamic plugins without any exposed modules #12530 HELM-502 : Bump Helm to 3.12.1 #13014 OCPBUGS-15359 : Enable namespace dropdown selection when all namespace installation mode selected by default and… #12975 OCPBUGS-16174 : Update the VSCode extension link and descriptions on Create Serverless function form #13015 OCPBUGS-13142 : InstallPlan info cannot shown on Subscription tab for … #13012 OCPBUGS-14907 : Fix operator backed catalog page when copied CSVs disabled #12932 CONSOLE-3684 : Convert components in modals folder from class componen… #12941 OCPBUGS-16148 : disable Save if Use existing claim is active and no … #13010 OCPBUGS-16150 : Fix Start last run action in Topology sidepanel #13009 OCPBUGS-15458 : Links for console-dynamic-plugin-sdk markdown docs are not working #12993 OU-218 : Monitoring: Use useResolvedExtensions instead of useExtensions #12987 CONSOLE-3680 : Convert row-filter.jsx from class component to function… #12957 OCPBUGS-13808 : Console SDK components should be using GroupVersionKin… #12946 CONSOLE-3685 : Convert components in RBAC folder from class component … #12933 CONSOLE-3611 : User can configure the install of Operators that authenticate using STS #12779 OCPBUGS-9991 : Most of contents are lack of i18n on “Command Line Tools” page #12995 OCPBUGS-15021 : Use FLAGS.CAN_GET_NS to decide whether to show Route details > Metrics tab #12944 ODC-7341 : Show Build output in Shipwright Build list and details page #12972 OCPBUGS-8005 : Fix broken upstream doc link for cluster channel upgrades #12998 OCPBUGS-10884 : add multipath device type to LocalVolumeSet #12723 OCPBUGS-14434 : Running yarn dev results in the build running on a loop #12990 OCPBUGS-10844 : fix bug where binary secret values are corrupted on edit and add test coverage #12986 OCPBUGS-15011 : Upload JAR file does not work if the Cluster Samples Operator is disabled #12917 OCPBUGS-12891 : check for valid OLM selector in K8sResourceWidget to p… #12887 OCPBUGS-15896 : STS label not valid according to kube #12980 RHSTOR-4533 : added a mutator property for the storage class extension #12886 OCPBUGS-7416 : get Kamelets from the camel-k-operator namespace as well #12710 OCPBUGS-14548 : only show pipelines doc link for downstream #12979 CONSOLE-3565 : Expose annotations modal in dynamic plugins sdk #12843 CONSOLE-3610 : User can filter on STS enabled clusters for Operators that claim support for STS #12778 OCPBUGS-15773 : The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12966 ODC-7319 : correcting - missing package tag across gherkin files #12847 ODC-7313 : Run CI tests with non-admin user #12814 OCPBUGS-15427 : Remove access review check for PipelineResource from Pipeline section #12964 ODC-7325 : Improve BuildConfig and Shipwright Build list pages #12910 ODC-7340 : Remove Shipwright Tech Preview badges #12960 OCPBUGS-14548 : update pipelines doc links #12890 OCPBUGS-15572 : Fix bug where the install operator update approval radio button does … #12959 OCPBUGS-14959 : Error for DuplicateClusterRoleBinding and Edit ClusterRoleBinding subject in RHOCP4 Web Console #12939 OCPBUGS-14665 , OCPBUGS-14874 , OCPBUGS-14875 : Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12929 OU-198 : Revert “Disable broken monitoring-tests” #12943 ODC-7337 : Skip wait for authentication operator to start progressing when the secret already exists #12884 OCPBUGS-497 : frontend: fix kube-apiserver availability query #12928 OCPBUGS-15060 : “Duplicate RoleBinding” leads to “Unsupported value” error #12921 OCPBUGS-7794 : Image pull secret creation form doesn’t re-enable Create button once it is disabled #12609 CONSOLE-3616 : Revert multicluster server flags #12782 OCPBUGS-15299 : Create Serverless Function Form is Broken #12926 OCPBUGS-13120 : Serverless functions UI warning is misleading #12923 ODC-7329 : Subsequent PipelineRuns take initial PipelineRun name into account #12913 CONSOLE-3612 : User is warned when cluster is in STS mode #12777 ODC-7322 : Implement a proxy to hit the Artifacthub.io API end point #12905 MGMT-15023 : Add help text to vCenter cluster field #12912 OCPBUGS-11464 : Availability requirement update is initially disabled … #12918 OCPBUGS-15135 : Make knative routes copyable similar to openshift routes #12908 OCPBUGS-14909 : Disabling web-terminal tests in CI #12892 OCPBUGS-14015 : Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12914 CONSOLE-3372 , OCPBUGS-13648 , OCPBUGS-13833 : Console supports installing non-latest Operator versions #12743 OCPBUGS-7036 : Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12593 chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 231 #12695
OCPBUGS-14354 : e2e: Enable Pipeline tests #12911 OCPBUGS-14915 : Remove entries from the menu that are now added by monitoring-plugin #12893 ODC-7316 : Add discoverability of the IDE extensions from Create Serverless form #12846 OCPBUGS-14419 : Remove tech preview badge from Pipeline repository pages #12888 ODC-7326 : Align Build, BuildRun and PipelineRun details page #12898 OCPBUGS-14836 : Updated BuildConfig and Shipwright Build lists shows runs from another namespace #12896 OCPBUGS-14890 : Missing ‘View details’ link for several servicemonitors.spec.endpoints fields in YAML sidebar #12895 OCPBUGS-14002 : Correct the alignment of yaml toolbar links #12894 OCPBUGS-14660 : Helm Repository “Edit” button results in 404 #12891 OCPBUGS-14716 : add ROSA branding option #12889 OCPBUGS-13208 : Fix PVC metrics query #12867 OCPBUGS-12897 : Knative Route Details Page should show the URL of the route as it is shown in the Openshift Routes Details page #12853 OCPBUGS-8682 : Fix empty create dropdown on provided APIs page #12819 OCPBUGS-9214 : Create button is disabled in Git Import form when git repo url has hyphens in owner part of the url #12652 OCPBUGS-4496 : Fix Samples/Snippets tab #12642 OCPBUGS-7361 : support JSON schema 06 in the helm install/upgrade form #12644 OU-138 : Move QueryBrowser component to dynamic SDK #12841 OCPBUGS-9063 : Remove frontend validation from legacy operand form gen… #12788 ODC-7275 : Implement invoke serverless functions #12755 OCPBUGS-14964 : Disable broken monitoring-tests #12902 OCPBUGS-11219 : Include print styles to allow printout of full screen and … #12849 ODC-7306 : Show the latest Build status in the Build list view #12809 ODC-7277 : added v1 support for Pipeline #12729 CONSOLE-3660 : Introduce react-router v6 compatibility #12861 OCPBUGS-8274 : Do not request token URL if auth is disabled #12818 OCPBUGS-14668 : visiting Configurations page returns error Cannot read… #12882 OCPBUGS-14602 : selected project was not taking effect when searching … #12880 OCPBUGS-14550 : Use proxy with web socket connection and monitoring d… #12877 CONSOLE-3392 : Implement exact search for more precise result sets and add user prefs setting #12838 ODC-7288 : Add proxy to invoke knative services with a public route #12789 ODC-7320 : Gherkin for customisation of add page and developer catalog through customisation form view #12855 OCPBUGS-14424 : OVN Kubernetes multi-homing #12869 OCPBUGS-14262 : Fix Pipeline metrics page #12863 OCPBUGS-10411 : Edit deployment don’t enable save button if image stream is added #12673 OCPBUGS-14149 : account for single object in status.conditions instead… #12866 OCPBUGS-14352 : E2e tests fails because OpenShift Pipelines operator could not be found #12872 OCPBUGS-9909 : Could not import multiple resources via JSON (while YAML supports this) #12721 ODC-7317 : Update Terminal step of the Guided Tour to indicate that odo CLI is accessible #12848 ODC-7308 : Update test cases of web terminal configuration page #12825 ODC-7283 : Add Web Terminal tab in cluster configuration page #12718 OCPBUGS-6767 : Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12679 OCPBUGS-13782 : Surface the message from Operator developer #12840 OCPBUGS-12896 : Corrected Labels for resolving the bug related to the Create Route Checkbox #12834 ODC-7315 : Change help texts in initialize Terminal page #12824 OCPBUGS-11668 : Fix kebab actions on Installed Operators page #12822 OCPBUGS-13693 : Fix RTE in bridge. #12817 OCPBUGS-11256 : Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12816 OCPBUGS-11996 : Fixed Make Serverless Form Error #12815 OCPBUGS-13257 : propagate labels to pipeline resources #12808 MGMT-14527 : Add vSphere cluster field. #12806 OCPBUGS-12783 : Remove “Action” type from OLM descriptor readme #12800 CONSOLE-3623 : Add X-CSRF token to console request headers #12719 OCPBUGS-5453 : Add Pipeline metrics unsupported empty page #12435 OCPBUGS-1829 : use service port name instead targetPort in the Pipeline Event listener route #12148 CONSOLE-2501 : Upgrade TypeScript version to 4.5 #12821 ODC-7318 : Update ODC owners, May 2023 edition #12839 CONSOLE-2501 : Update builder image #12828 OCPBUGS-13361 : Update plural string dynamic demo plugin locales #12799 ODC-7309 : Remove dev console integration-tests reviewers #12802 OCPBUGS-12244 : only copy workload annotations to debug pod #12794 ODC-7279 : Correcting CI failures of ODC Packages #12700 HELM-484 : Basic authentication documentation update #12768 CONSOLE-3615 : Mark multicluster code for removal #12754 ODC-7300 : Change method name for labelKeyForNodeKind to getTitleForNodeKind #12733 ODC-7296 : Rename all instances of YAMLEditor to CodeEditor #12708 Bug 2176216 : VMs are listed twice in cluster inventory #12795 OCPBUGS-12267 : Fix OLM k8sResourcePrefix descriptor dropdown behavior #12758 OCPBUGS-11099 : add support for minimal status of tekton #12724 OCPBUGS-12732 : fix buildconfig form ns #12771 OCPBUGS-12637 : update helm release empty state text #12767 OCPBUGS-12286 : Fix missing console plugin control on CSV details page. #12766 OCPBUGS-7692 : Fix that helm details page shows an inf. loading indicator when api call fails #12578 OCPBUGS-11057 : Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12726 OCPBUGS-6581 : Serverless - Eventing - Channels: Conditions column i18n misses #12641 OCPBUGS-7485 : When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12725 OCPBUGS-11596 : Do not fetch catalog sources on CSV or Subscription details pages. #12717 OCPBUGS-10224 : Multiple instances of tabs under ODF dashboard #12635 OCPBUGS-6770 : Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12722 OCPBUGS-11869 : Pod Status Overlapping in Sidebar #12732 CONSOLE-3600 : Filter operators based on nodes OS type #12707 OCPBUGS-9329 : update dynamic plugin info for development mode #12666 OCPBUGS-10562 : disable operator-uninstall.ts as the uninstall test is… #12731 OCPBUGS-3036 : Do not list subscriptions in all namespaces on CSV details page. #12716 OCPBUGS-5548 : delete associated pipeline, triggertemplate and eventlistener when deleting app #12587 Add the possibility login with different IDP and user credentials #12709
ODC-7270 , ODC-7272 : Improve telemetry: Add resource and tab name to the page title #12669 Improve useModal docs example #12115
Improvements on Web Terminal Operator Installation functionality #12713
OCPBUGS-10956 : Reduce metrics cardinality by grouping well-known and other perspectives and plugins #12684 OCPBUGS-9305 : add missing readOnly conditions #12685 ODC-7280 : Add PipelineRun tab to Dev perspective Pipeline page #12672 OCPBUGS-10562 : re-enable and fix operator-uninstall.spec.ts #12678 ODC-7282 : Add webhook informations on Repository details and summary page #12690 OCPBUGS-11382 : Update Dockerfile to use latest builder images #12655 ODC-7274 : Prepare a page and modal to invoke a Serverless function #12686 OCPBUGS-103 : Move operator install status to it’s own route/page #12704 OCPBUGS-11020 : fix runtime error on OperatorHub details pages #12702 ODC-7281 : Provide Column management option for the TaskRuns list page #12689 Remove andybraren as dashboard reviewer #11807
OCPBUGS-11197 : Rephrase vCenter connection tooltips #12694 OCPBUGS-10961 : Fix description for BuildAdapter SDK extension #12683 CONSOLE-3577 : Remove deprecated metering endpoint from backend #12692 OCPBUGS-5940 : Wait with CRD/model translation until i18n bundles are loaded #12697 OCPBUGS-10916 : fix translation string for Image pull secret created alert #12681 OCPBUGS-10836 : fix All projects selection on Pipelines page in dev perspective #12676 OCPBUGS-10950 : use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12682 ODC-7271 : add duration for PipelineRun and TaskRun on details page #12659 ODC-7276 : Add cancelled status color in Pipeline metrics page #12662 automation of edit build config feature file #12622
OCPBUGS-10619 : Enable modal scroll for uninstall operator instances #12680 OCPBUGS-10562 : disable operator-uninstall.spec.ts as the previous fix… #12677 PF Update 2023-2 #12664
OCPBUGS-10562 : re-enable and fix operator-uninstall.spec.ts #12661 OCPBUGS-10655 : Do not show builder ImageStreams without sampleRepo as samples #12667 OCPBUGS-10509 : Sync Debug in Terminal feature availability with 3.x pods in web console #12657 OCPBUGS-9956 : update the default pipelineRun template name #12660 OCPBUGS-7620 : Edit Deployment (and DC) form doesn’t enable Save button when changing strategy type #12608 OCPBUGS-8086 : Visual fixes for list items #12619 OCPBUGS-9907 : Fix alerts source display values #12632 OU-110 : Observe > Dashboards : Code Consolidation Fixes #12588 OCPBUGS-7484 : When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12650 OCPBUGS-8268 : OpenShift pipeline TaskRun(s) column Duration is not present as column in UI #12633 OCPBUGS-7632 : comment out suspected problematic test #12647 OCPBUGS-10345 : Fix backend runtime error #12654 OCPBUGS-10269 : Fix grammatical error in feedback modal #12634 OCPBUGS-8299 : CronJobs table/details UI doesn’t have Suspend indication #12638 OCPBUGS-7801 : taskrun ui fails when using object type results #12626 OCPBUGS-10230 : Fixes card sizes not even issue when commit info is not available on Environments page #12550 OCPBUGS-5360 : re-enable operator-install-single-namespace.spec.ts test #12424 OCPBUGS-10232 : Fixes argocd link for non-KAM added application envs #12558 OCPBUGS-7232 : Fixes resource status alignment issue #12429 CONSOLE-3393 : Proxy managed cluster monitoring requests through MCE c… #12360 CONSOLE-3425 : Expose ‘nameFilter’ prop to ‘ListPageFilter’ component #12438 OU-117 : No response for duplicate query with default disabled status when click ‘Hide all queries’ #12621 Update dockerignore. #12538
CONSOLE-3452 : Add patternfly customer feedback extension mechanism to console #12611 OCPBUGS-7446 : Show type of sample on the samples view #12548 OCPBUGS-7395 : Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12615 OCPBUGS-7178 : Add page title to Devconsole pages #12591 And 7 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-56046 : Check error returned by ipv6 SettleAddresses #193 OCPBUGS-46121 : [4.14] cherry-pick containernetworking/plugins#997 #168 OCPBUGS-33066 : macvlan enable ipv6 ndisc_notify #160 OCPBUGS-20374 : build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129 OCPBUGS-17681 : Default CNI binaries to RHEL 8 #116 Updating ose-containernetworking-plugins images to be consistent with ART #108
Updating ose-containernetworking-plugins images to be consistent with ART #107
Add rhel9 binary #106
OCPBUGS-14095 : Sync with upstream version v1.3.0 #98 Updating ose-containernetworking-plugins images to be consistent with ART #94
Updating ose-containernetworking-plugins images to be consistent with ART #93
Updating ose-containernetworking-plugins images to be consistent with ART #92
Updating ose-containernetworking-plugins images to be consistent with ART #80
Full changelog
OCPBUGS-28952 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167 OCPBUGS-25069 , OCPBUGS-26309 , OCPBUGS-26323 : add snyk config file for SAST scan #163 OCPBUGS-23111 : Should reference configmaps instead of secrets #152 OCPBUGS-20734 : bump golang.org/x/net to v0.17.0 #146 OCPBUGS-16074 : Updating Kubernetes and other associated dependencies #141 OCPBUGS-14489 : Kubernetes 0.27 #139 OCPBUGS-12597 : bump(*): golang.org/x/net #138 Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #136
Updating ose-csi-driver-shared-resource images to be consistent with ART #137
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #135
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #133
Add go-imports-organizer/goio to organize imports #132
OCPBUGS-10022 : add ‘system:serviceaccounts’ to SAR to allow group based RBAC #130 Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #131
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #128
Updating ose-csi-driver-shared-resource images to be consistent with ART #129
Full changelog
OCPBUGS-28957 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103 OCPBUGS-26312 : add snyk config file for SAST scank #97 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91 OCPBUGS-20825 : bump golang.org/x/net to v0.17.0 #86 STOR-1442 : Restart webhook Pods if webhook-serving-cert changed #83 STOR-1441 : Restart node Pods if metrics-serving-cert changed #82 OCPBUGS-16073 : Updating Kubernetes and other associated dependencies #81 OCPBUGS-14824 : Bump csi-driver-shared-resource-operator library-go #80 OCPBUGS-14488 : bumping kubernetes to 0.27.1 #79 Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #77
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #76
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #75
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #73
OCPBUGS-7906 : add openshift workload annotation to driver daemonset #72 Full changelog
OCPBUGS-21177 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #60 STOR-1169 : Rebase external-attacher to v4.3.0 for OCP 4.14 #54 OCPBUGS-14815 : Chore: Update OWNERS and OWNERS_ALIASES #55 Updating csi-attacher images to be consistent with ART #53
Updating csi-attacher images to be consistent with ART #52
Updating csi-attacher images to be consistent with ART #51
Updating csi-attacher images to be consistent with ART #50
Full changelog
OCPBUGS-35112 : CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #99 OCPBUGS-20775 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #72 OCPBUGS-17264 : USPTREAM: 969: build(deps): bump golang.org/x/tools from 0.9.3 to 0.12.0 #68 OCPBUGS-14811 : Chore: Update OWNERS and OWNERS_ALIASES #66 STOR-1169 : Rebase external-provisioner to v3.5.0 for OCP 4.14 #65 Updating csi-provisioner images to be consistent with ART #64
Updating csi-provisioner images to be consistent with ART #63
Updating csi-provisioner images to be consistent with ART #62
Updating csi-provisioner images to be consistent with ART #61
Full changelog
OCPBUGS-20929 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #147 STOR-1169 : Rebase external-resizer to v1.8.0 for OCP 4.14 #141 OCPBUGS-14812 : Chore: Update OWNERS and OWNERS_ALIASES #142 Updating ose-csi-external-resizer images to be consistent with ART #140
Updating ose-csi-external-resizer images to be consistent with ART #139
Updating ose-csi-external-resizer images to be consistent with ART #138
Updating ose-csi-external-resizer images to be consistent with ART #137
Full changelog
OCPBUGS-29433 : cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142 OCPBUGS-21032 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #109 STOR-1169 : Rebase external-snapshotter to v6.2.2 for OCP 4.14 #101 OCPBUGS-14813 : Chore: Update OWNERS and OWNERS_ALIASES #102 Updating csi-snapshot-validation-webhook images to be consistent with ART #100
Updating ose-csi-external-snapshotter images to be consistent with ART #99
Updating ose-csi-snapshot-controller images to be consistent with ART #98
Updating csi-snapshot-validation-webhook images to be consistent with ART #97
Updating ose-csi-external-snapshotter images to be consistent with ART #96
Updating ose-csi-snapshot-controller images to be consistent with ART #95
Updating csi-snapshot-validation-webhook images to be consistent with ART #94
Updating ose-csi-external-snapshotter images to be consistent with ART #93
Updating ose-csi-snapshot-controller images to be consistent with ART #92
Updating csi-snapshot-validation-webhook images to be consistent with ART #91
Updating ose-csi-snapshot-controller images to be consistent with ART #89
Updating ose-csi-external-snapshotter images to be consistent with ART #90
Full changelog
OCPBUGS-20640 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #50 STOR-1169 : Rebase livenessprobe to v2.10.0 for OCP 4.14 #44 OCPBUGS-14810 : Chore: Update OWNERS and OWNERS_ALIASES #45 Updating csi-livenessprobe images to be consistent with ART #40
Updating csi-livenessprobe images to be consistent with ART #38
Full changelog
OCPBUGS-20697 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52 STOR-1169 : Rebase node-driver-registrar to v2.8.0 for OCP 4.14 #46 OCPBUGS-14814 : Chore: Update OWNERS and OWNERS_ALIASES #47 Updating csi-node-driver-registrar images to be consistent with ART #45
Updating csi-node-driver-registrar images to be consistent with ART #44
Updating csi-node-driver-registrar images to be consistent with ART #43
Updating csi-node-driver-registrar images to be consistent with ART #42
Full changelog
Removing kernel[-rt]-core packages from the image. (#132) #132
Upgrade glibc, use dnf (#131) #131
Fixing the regexp used to get the correct GCC version. (#127) #127
Updating the docs to use ubi9 instead of ubi8. (#126) #126
Updating driver-toolkit images to be consistent with ART (#120) #120
Remove abi since it was not in 9.2 rpms (#121) #121
Full changelog
OCPBUGS-35143 : update to go 1.19 and k8s.io mods to v0.27.4 #87 OCPBUGS-19850 : Ensure that IP forwarding is enabled #78 rework PR #74 to switch Dockerfile to use rhel9 #75
Updating egress-router-cni images to be consistent with ART #70
OCPBUGS-6553 : update go-yaml to v2.4.0 #67 Updating egress-router-cni images to be consistent with ART #66
Full changelog
OCPBUGS-20752 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #45 OCPBUGS-17367 : UPSTREAM: <carry>: Remove the static library linking flag #41 OCPBUGS-16783 : Chore: Update OWNERS #39 UPSTREAM: <carry>: Fix OWNERS_ALIASES #40
STOR-1163 : Rebase to upstream v1.10.1 #37 Updating ose-gcp-pd-csi-driver images to be consistent with ART #36
Updating ose-gcp-pd-csi-driver images to be consistent with ART #33
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #96 OCPBUGS-20847 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #87 CFE-878 : Add userLabels in Infrastructure to driver args list #74 OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #76 OCPBUGS-16569 : Bump library-go to remove dependency on goproxy #78 OCPBUGS-16783 : Chore: Update OWNERS #77 Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #75
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #71 OCPBUGS-15823 : Change timeout of CSI sidecar #73 OCPBUGS-14824 : Bump gcp-pd-csi-driver-operator library-go #72 STOR-1301 : Restart controller Pods if metrics-serving-cert changed #68 STOR-1168 : Bump common libraries #70 OCPBUGS-12609 : Bump golang.org/x/net@v0.9.0 #69 Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #67
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #66
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #65
OCPBUGS-8683 : Add management workloads annotations #64 Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #63
Full changelog
OCPBUGS-61176 : Add missing service network DNS entries to KAS cert #6742 OCPBUGS-57321 : Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 #6252 OCPBUGS-55936 : [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… #6129 CNTRLPLANE-921 : Konflux build pipeline service account migration #6080 CNTRLPLANE-921 : Konflux build pipeline service account migration #6085 OCPBUGS-51802 : Fix golang crypto dependency go.mod replacement #5996 OCPBUGS-53899 : bump golang-jwt v4 #5909 OCPBUGS-53433 : Prevent IgnitionServer from flooding the API server with patch requests #5878 OCPBUGS-51731 , OCPBUGS-51802 : Bump dependencies to OCP fork in backports #5899 Red Hat Konflux update control-plane-operator-4-14 #5953
ART-11792 : update go mod dependency for konflux #5921 OCPBUGS-53314 : Fix IsIPv4 function identifying also addresses instead of CIDRs #5867 OCPBUGS-45559 : Add Network Policies for Konnectivity server and Ignition server proxy #5816 NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 #5730
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5725
chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5687
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 #5681
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5688
OCPBUGS-50700 : add region to AWS creds passed to operators managed by CPO #5668 NO-JIRA: Red Hat Konflux update control-plane-operator-4-14 #5339
OCPBUGS-47630 : Separate CPO containerfiles #5619 NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 #5538
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 #5537
OCPBUGS-49405 : add ValidIDPConfiguration condition to report IDP config issues #5520 NO-JIRA: chore: update konflux references & bump up go version to 1.20 #5517
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) #5444
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) #5430
NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net #5372
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) #5331
NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) #5330
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned #5308
OCPBUGS-44279 : Configure OAuth https proxy to dial cloud endpoints directly #5067 NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) #5162
NO-JIRA: chore(deps): update konflux references (release-4.14) #5145
NO-JIRA: chore(deps): update konflux references (release-4.14) #5121
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) #5105
NO-JIRA: Update Konflux references (release-4.14) #5100
chore(deps): update konflux references (release-4.14) #5076
NO-JIRA: chore(deps): update konflux references (release-4.14) #5055
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.14) #5056
NO-JIRA: Update Konflux references to fedcfe0 (release-4.14) #5043
chore(deps): update konflux references (release-4.14) #5026
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.43 (release-4.14) #5021
chore(deps): update konflux references to f53fe54 (release-4.14) #5020
NO-JIRA: Update Konflux references (release-4.14) #5011
OCPBUGS-41701 : cmd: report server version, supported OCP #4718 NO-JIRA: chore(deps): update konflux references (release-4.14) #4975
OCPBUGS-43688 : Use guest DNS resolution in Konnectivity HTTPS proxy by default #4964 chore(deps): update konflux references (release-4.14) #4953
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.14) #4948
OCPBUGS-43368 : Let payload generation pick the release for the NodePool #4913 NO-JIRA: chore(deps): update konflux references (release-4.14) #4934
NO-JIRA: chore(deps): update konflux references to 66f551f (release-4.14) #4924
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.14) #4917
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.14) #4910
NO-JIRA: chore(deps): update konflux references (release-4.14) #4898
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.14) #4879
NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.14 #4851
OCPBUGS-42533 : enable audit log for oauth-openshift #4822 chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.13 (release-4.14) #4794
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.14) #4828
NO-JIRA: chore(deps): update konflux references (release-4.14) #4813
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.14) #4805
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.14) #4788
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.14) #4758
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.14) #4784
OCPBUGS-41374 : CPO oauth idp converter: resolve names before dialing #4763 NO-JIRA: chore(deps): update konflux references to 5ac9b24 (release-4.14) #4783
chore(deps): update konflux references to 2c3426a (release-4.14) #4773
NO-JIRA: chore(deps): update konflux references (release-4.14) #4757
OCPBUGS-42221 : Make guest cluster components use the correct KAS port #4753 OCPBUGS-38060 : Add HTTP konnectivity proxy to OAuth server #4498 OCPBUGS-38066 : [release-4.14] Use HTTP proxy for ingress controller #4724 NO-JIRA: Security fixes for openshift-ci-security job #4752
OCPBUGS-42184 : copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4747 OCPBUGS-41506 : fix: bump google.golang.org/protobuf #4687 HOSTEDCP-1957 : bump go-jose version #4698 OCPBUGS-39378 : Set KCM node monitor grace period #4659 chore(deps): update konflux references (release-4.14) #4683
OCPBUGS-39183 : fix: bump github.com/IBM/go-sdk-core/v5 #4626 NO-JIRA: Add PodDisruptionBudget for router deployment #4692
NO-JIRA: Revert “Merge pull request #4661 from jparrill/bp-4.14/OCPBUGS-24308” #4667
NO-JIRA: PDB backports #4661
NO-JIRA: Konflux migration 4.14 #4648
OCPBUGS-39230 : set proxy envvars on aws CCM #4638 OCPBUGS-38791 : Let the CPO oidc check resolve through data plane #4617 NO-JIRA: Flaky cert validation test #4633
HOSTEDCP-1897 : [release-4.14] Allow setting Kube APIServer maximum requests in flight #4553 OCPBUGS-37076 : Fixed audit-logs sigterm failing to terminate gracefully #4369 OCPBUGS-38624 : remove weak ciphers from security profile #4575 OCPBUGS-37173 : Add newline after TLS certs referenced by image.config #4471 OCPBUGS-37172 : OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4490 OCPBUGS-36944 : [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4360 HOSTEDCP-1795 , HOSTEDCP-1796 : Customize the self-generated cert validity and rotation #4473 OCPBUGS-37175 : Delete IDMS in dataplane once HCP ICS field is removed #4472 NO-JIRA: Konflux mce-2.4 pipeline fixes #4464
NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4288
NO-JIRA: [release-4.14] test/e2e: remove api budget checks #4438
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned #4363
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.21.10-1.1719562237 (release-4.14) - abandoned #4326
NO-JIRA: Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.4-1134 (release-4.14) - abandoned #4325
OCPBUGS-36518 : Run haproxy to connect to kas from data plane if noproxy settings contain kas #4315 OCPBUGS-36159 : Generate default worker security group rules based on machineCIDR #4270 OCPBUGS-35549 : Restrict image registry overrides to control plane component #4223 OCPBUGS-35365 : fix router on 4.14 y-stream upgrade #4205 NO-JIRA: chore(deps): update konflux references (release-4.14) #4257
OCPBUGS-35401 : Fix disconnected metadata inspection for nodepool #4208 OCPBUGS-35482 : Add TrustedBundles to OAS container #4216 OCPBUGS-35290 : [release-4.14] Backport etcd defrag #4189 NO-JIRA: chore(deps): update konflux references (release-4.14) #4248
OCPBUGS-35183 : add AWS STS URL to OIDC provider audiences #4179 NO-JIRA: hack: make the e2e script generic #4201
chore(deps): update konflux references to 2be7c9c (release-4.14) #4225
NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
OCPBUGS-34856 : [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149 NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
NO-JIRA: Remove CLI inspection of release image #4061
OCPBUGS-33713 : Reconcile over ICSP/IDMS #4059 NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
OCPBUGS-33844 : Fix disconnected metadata inspection #4049 OCPBUGS-33843 : Recycler-pod image now points to the OCP Payload reference #4048 NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
HOSTEDCP-1480 : Update TLS cert hash creation with sha512 #4025 NO-JIRA: Update RHTAP references (release-4.14) #3995
HOSTEDCP-1552 : Update RHTAP tekton files for 0.3 -> 0.4 migration #3958 OCPBUGS-33105 : [release-4.14] remove PrivateIngressController cleanup #3960 OCPBUGS-32471 : Fix ICSP and IDMS inclusion as registriesOverrides #3912 NO-JIRA: chore(deps): update rhtap references (release-4.14) #3920
OCPBUGS-32221 : Added support for OLM Disable default sources on HC creation #3882 NO-JIRA: chore(deps): update rhtap references (release-4.14) #3903
NO-JIRA: [4.14] [e2e test framework] Add a flag to add an annotation to Hosted Cluster #3905
HOSTEDCP-1526 : [release-4.14] Support additional node selectors for request serving nodes #3898 chore(deps): update rhtap references (release-4.14) #3888
NO-JIRA: Update RHTAP references (release-4.14) #3874
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3869
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3858
NO-JIRA: Update RHTAP references (release-4.14) #3836
OCPBUGS-31657 : disable http2 for ignition server and proxy #3831 OCPBUGS-31605 : inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3826 HOSTEDCP-1322 : NodeUpgradeType defaulted by provider #3822 NO-JIRA: Update RHTAP references (release-4.14) #3813
OCPBUGS-31417 : honor HC image configuration #3806 OCPBUGS-23914 : Added OLMCatalogPlacement option to the CLI #3229 OCPBUGS-30211 : set Konnectivity cipher suites #3679 chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048 : [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771 HOSTEDCP-1488 : Use regionalized STS endpoints in AWS #3756 NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596 : Bump golang.org/x/net to version v0.17.0 #3711 NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782 : use 2040 for apiserver svc in IBM provider #3594 ”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094 : Make ControllerAvailabilityPolicy immutable #3534 NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084 : Reduce the policy access scope to specific instance #3530 OCPBUGS-29206 : Add GC knobs for KAS #3543 OCPBUGS-29187 : node spread anti-affinity for HA HCP #3541 OCPBUGS-19956 , OCPBUGS-28984 , OCPBUGS-28985 , OCPBUGS-28986 , OCPBUGS-29000 : Support Disconnected HCP #3520 OCPBUGS-29030 : Add ValidatingAdmissionPolicy to KAS config #3524 HOSTEDCP-1272 : Added CLI support to create DualStack clusters using default values #3514 OCPBUGS-28238 : consider HCP upgradeable if CVO has no upgradable condition #3468 OCPBUGS-26526 : Documented to disable UWM telemetry writer in disconnected envs #3389 OCPBUGS-26526 : Disable UWM Telemetry writer when telemeter-client cm not exists #3388 OCPBUGS-27072 : Apply Scheduling Configuration for kCCM #3418 NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180 , OCPBUGS-20547 : Added network validations #3096 OCPBUGS-23997 : add watch for HCP pullsecret to HCCO #3265 OCPBUGS-28249 : Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485 NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315 : Add prestop to konnectiviy server #3268 OCPBUGS-24307 : Set shutdown-delay-duration to 15s #3264 OCPBUGS-21795 : change trusted bundle volume mount for CPO #3102 OCPBUGS-25217 : Konnectivity agent update strategy #3308 OCPBUGS-26574 : Set new condition on SG deletion. #3398 Update RHTAP references (release-4.14) #3402
Update RHTAP references (release-4.14) #3383
OCPBUGS-22360 : Validate accessTokenInactivityTimeout >= 300s #3175 OCPBUGS-23936 : Use correct kubeconfig in CCM and remove CCMs access t… #3232 OCPBUGS-12720 : Updating hypershift images to be consistent with ART #2467 OCPBUGS-24627 : unset ServiceAccount on ignition-server-proxy #3295 [Release 4.14] OCPBUGS-24556: Fix a bug on deletion of a hostedcluster #3290
OCPBUGS-24269 : add CLI oauthclient #3272 OCPBUGS-23569 : Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3224 HOSTEDCP-1318 : external OIDC enablement #3261 OCPBUGS-23747 : Added brackets to IPv6 KAS address on kubeconfig #3228 OCPBUGS-24063 : fix(cpo): Set restart annotation on network-node-identity #3248 release-4.14, HOSTEDCP-1315: Improve NodePool CPU arch & platform check #3236
OCPBUGS-22676 : Make the OLMCatalogPlacement field immutable #3143 OCPBUGS-23558 : Let router use svc ips 4.14 #3221 OCPBUGS-19678 : Remove cluster name validation from HCC #3040 ”[release-4.14] CNV-35326: unsupported escape hatch mechanism custom HS/KV vms” #3202
OCPBUGS-23027 : Configure HSTS for kube-apiserver #3169 NO-JIRA: chore(deps): update rhtap references (release-4.14) #3085
OCPBUGS-23142 : adding permission to CNO RBAC Calico path for network-node-identity deploy #3182 OCPBUGS-22295 : Added brackets to the kubeconfig server address when IPv6 #3117 OCPBUGS-22690 : Use the same etcd snapshot for all replicas during etcd restore #3146 OCPBUGS-22959 : Update regex validation for nodepool.spec.taints.value #3165 HOSTEDCP-1280 : Adjustment cluster-cidr,service-cidr to support dualstack #3162 OCPBUGS-22898 : Stop exposing kas on 6443 private route service load balancer #3159 OCPBUGS-22898 : Stop defaulting aws private haproxy external port to 6443 #3160 OCPBUGS-19897 : Add konnectivity-proxy container to CNO #3058 OCPBUGS-22379 : Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller #3131 OCPBUGS-20526 : Align PSA labels on guest cluster namespaces with standalone OCP #3111 OCPBUGS-21869 : Remove EnsurePSANotPrivileged #3107 OCPBUGS-21822 : Add ign proxy label selector for LabelTopologyZone PodAntiAffinity #3105 OCPBUGS-21587 : change required pod anti-affinity rule to preferred rule #3098 OCPBUGS-19794 : Upgrade Agent APIs to v1beta1 #3059 OCPBUGS-19797 : reconcile Authentication global config #3053 OCPBUGS-19794 : Upgrade agent APIs to v1beta1 #3051 OCPBUGS-20249 : Set KAS config pod security Enforce to privileged #3083 OCPBUGS-20163 : Report correct port when API exposed via route #3078 OCPBUGS-19796 : set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver #3052 Update RHTAP references (release-4.14) #3060
Migrate deprecated-base-image-check pipeline #3057
chore(deps): update rhtap references (release-4.14) #2752
Update kubevirt csi driver deployment with proper timeouts #3046
OCPBUGS-19463 : set default deploymentconfig params on AWS CCM #3029 ACM-7278 : Remove marking pull secret as required in hcp cli #3023 OCPBUGS-18978 : add KAS endpoints to Except in router egress rule #3010 CNV-31919 : Validate KubeVirt platform required versioning #3026 OCPBUGS-19063 : amend OLM catalogs ImageStream according to annotation #3016 enable CGO_ENABLED for building FIPS compliant images #3006
OCPBUGS-18828 : tuned DS should not use controlPlaneReleaseImage #3005 Red Hat Trusted App Pipeline update hypershift-release-414 #2639
HOSTEDCP-1185 : Add flag to create a single NAT gateway #2984 Dump kubevirt external infra clusters #2992
OCPBUGS-18568 : Use MCO and CCO image references when looking up mappings #2985 HOSTEDCP-591 : Amend OLM catalog IS according to OpenShiftImageRegistryOverrides #2947 e2e: skip CNO pod restart check #2986
HOSTEDCP-1133 : Signal NodePool rolling upgrade because of platform changes #2973 OCPBUGS-18127 : Enable caching of Unstructured Objects in HO #2988 e2e: run Ensure functions after Main part of test #2983
OCPBUGS-18127 : Ensure machineTemplate name length respects RFC1123 spec #2975 ACM-6435 : add pausedUntil create cluster option in CLI #2965 OCPBUGS-7840 : Untangle kas port #2964 OCPBUGS-18399 : Preserve mirror order when serializing ICSP to env #2977 OCPBUGS-18336 : make konnectivity routes roundrobin #2971 Use the correct pull secret for HCP KubeVirt components #2919
Disable nto inplace test for kubevirt #2980
OCPBUGS-18438 : Properly format IPv6 address when proxying it through Konnectivity #2969 OCPBUGS-18127 : Trigger a rolling upgrade on NodePool .spec.platfrom changes #2956 HOSTEDCP-1156 : Add defaulting webhook to installation and notes #2922 HOSTEDCP-979 : Re-enable nodepool in-place upgrade tests #2960 Add a default value (32Gi) for nodepool in create nodepool kubevirt command #2940
OCPBUGS-16221 : Adds trust bundle to ignition-server when configured in HC #2819 Avoid creating tar archive if –archive-dump=false #2963
OCPBUGS-3873 adding rbac for UserOAuthAccessToken #2962
HOSTEDCP-1178 fix limited support label key #2958
OCPBUGS-18065 : enable aws-pod-identity-webhook on AWS #2957 OCPBUGS-18308 : Do not use mgmt cluster ICSP to mutate CCO image in KAS pod #2966 OCPBUGS-18266 : fix Progressing condition when ControlPlaneRelease is set #2959 fix(ho): Restore match label selector behavior #2951
OCPBUGS-18072 : Set emptyDir storage for the image registry only on initial time for None and Kubevirt platform #2895 OCPBUGS-18024 : Set Arch to amd64 for HCP NodePool Create #2941 chore(deps): update rhtap references (main) #2920
OCPBUGS-16813 : switch konnectivity-server to additional container in KAS pods #2942 Updating hostedcluster controller to stop using deprecated flags #2946
OCPBUGS-17827 : e2e: remove private-router from NeedManagementKASAccessLabel allowlist #2939 MULTIARCH-3709 : PowerVS - Add reuse resource flags to e2e test #2902 MULTIARCH-3478 : Minor bug fix on PowerVS infra #2451 OCPBUGS-18069 : Ensure load balancers are not exist before declaring load balancers are cleaned up #2887 MULTIARCH-3708 : PowerVS - Fix cluster deletion when existing resources passed #2867 MGMT-15368 : Document scaling down NodePools #2944 OCPBUGS-13348 : Hypershift Audit configuration not working. #2945 TRT-1202 : set SkipReleaseImageValidation annotation properly on e2e clusters #2943 OCPBUGS-17678 : Reconcile cloud credentials configuration to hosted cluster #2937 Add e2e test for etcd member recovery #2930
OCPBUGS-17827 : remove NeedManagementKASAccessLabel from router pods #2934 OCPBUGS-17985 : Handle empty mirrorImage result for ignition disconnected registry #2935 OCPBUGS-17827 : e2e: refactor checkPodsHaveLabel to be allowlist rather than exact match #2928 OCPBUGS-16813 : do not hardcode ignition-server-proxy replicas #2933 fix(ho): Restore match label selector behavior #2893
TRT-1202 : add annotation to skip release image validation #2929 OCPBUGS-17812 : Update Etcd health check to mirror standalone etcd #2918 STOR-1443 : Sync 05_operator_role-hypershift.yaml manifest from cluster-csi-snapsht-controller-operator #2915 HOSTEDCP-1065 : CNO deployed hosted-cluster-kubecfg-setup initContainers use CPR image #2917 HOSTEDCP-1001 : Image registryOverride included in the image metadata extraction flow #2909 OCPBUGS-17669 : Validate HostedCluster name against RFC1123 #2914 HOSTEDCP-1075 : Document how to recover single etcd member #2916 HOSTEDCP-1085 : Create a monitoring dashboard per HostedCluster #2907 chore(deps): update rhtap references (main) #2903
HOSTEDCP-1063 : Account for guest webhook URLs without a port #2898 OCPBUGS-17680 : Remove immutable note from PullSecret #2910 Revert “HOSTEDCP-1001: Image registryOverride included in the image metadata extraction flow” #2908
OCPBUGS-16076 : Validate HostedCluster name against RFC1123 in CLI #2906 OCPBUGS-15331 , OCPBUGS-16049 : Enable AdvertiseAddress dual stack and IPv6 support and added the changes to be included in the certificates #2779 HOSTEDCP-1081 : Perform etcd recovery when etcd member data is lost #2900 SDN-4057 : Pass ControlPlane image to OVN #2896 test: e2e: remove SingleReplica etcd chaos test #2901
Allow overriding pod security admission label #2886
HOSTEDCP-1146 : cpo: use CPO spec container image if it is a sha256 reference #2899 HOSTEDCP-1022 : Set Arch to amd64 #2897 Re-introducing defaulting webhook for self managed HCP #2892
fix-CNV-30260: KubeVirt: fix failed conformance test #2891
OCPBUGS-16298 : Prevent the kube-apiserver from connecting to the managment kas #2888 HOSTEDCP-1001 : Image registryOverride included in the image metadata extraction flow #2820 HOSTEDCP-1046 , HOSTEDCP-1102 : Follow-on Items #2847 Revert “[HOSTEDCP-1041] Defaulting webhook for self managed HCP” #2889
OCPBUGS-17446 : Set advertise-address in HCP etcd to resolvable name #2884 Defaulting webhook for self managed HCP #2864
STOR-1432 : cso: add envvars for CSI driver controller images #2882 HOSTEDCP-1025 : Add HCP CLI Command to Create a NodePool on AWS #2852 SDN-4042 : Increase upgrade rollout timers #2881 skip olm-collect-profiles in EnsureComponentsHaveNeedManagementKASAccessLabel #2874
HOSTEDCP-1064 : Add egress policy for private-router #2792 HOSTEDCP-1121 : Ensure SG reconciliation for aws endpoint #2872 chore(deps): update rhtap references #2865
HOSTEDCP-1065 : add ControlPlaneImage API for provider-side HCP updates #2848 HOSTEDCP-1063 : Disallow webhooks URLs targeting control plane services #2775 OCPBUGS-17374 : Fast specific dockerignore #2879 Kubevirt how-to docs updates #2875
Fix nodepool upgrade docs link #2880
OCPBUGS-17171 : Update OLM catalog image tags #2877 HOSTEDCP-1029 : Add HCP CLI Command to Destroy a Cluster on AWS #2853 Add workload management annotation to kubevirt-csi daemonset #2840
WRKLDS-730 : use default /healthz path for readiness probe in OCM and RCM #2873 Add api and cli validation for kubevirt volume mode #2862
HOSTEDCP-1079 : RHTAP HO Containerfile #2857 OCPBUGS-16770 : add need-management-kas-access label to olm-collect-profiles pods #2854 MULTIARCH-3684 : PowerVS - Upgrade capi to use v1beta2 APIs #2831 HOSTEDCP-1046 : Add ImageDigestMirrorSet to Config API comment #2868 MULTIARCH-3683 : Add dev flags in destroy cluster powervs command #2764 kubevirt: Reconcile EgressFirewall only for ovn-k #2849
HOSTEDCP-1046 : Add IDMS to the list of valid config manifests #2837 OCPBUGS-17059 : Add volume mode to kubevirt root volume api #2860 Update RHTAP references (main) #2832
OCPBUGS-16809 : Configured IgnitionProxy to support IPv4 and IPv6 #2850 OCPBUGS-14163 : Fixed ETCD to work in Ipv6 and Dual stack envs #2846 HOSTEDCP-1112 : Add config to set creation frequency of RHTAP PRs #2838 HOSTEDCP-1020 : Remove name as a persistent flag required field #2836 OCPBUGS-16232 : skip z-stream version check when upgrade is forced #2823 OCPBUGS-16033 : ClusterNetwork’s HostPrefix validation for dual stack #2795 OCPBUGS-14783 : Fix NetworkPolicy to work over IPv4 and IPv6 #2704 Revert “HOSTEDCP-710: Make ImageContentSource immutable” #2829
Update RHTAP references (main) #2814
HOSTEDCP-1062 : Make CAPI pod selector backward compatible #2825 HOSTEDCP-1093 : Add default flags to HCP create cluster CLI cmd #2802 Revert “HOSTEDCP-1094: e2e autoscaler balancing similar node groups” #2828
HOSTEDCP-1090 : Use statically configured haproxy for router #2778 HOSTEDCP-1046 : Allow HCP Specification to Support ICSP & IDMS #2720 HOSTEDCP-710 : Make ImageContentSource immutable #2815 OCPBUGS-11835 : Add missing probes to two services #2430 HOSTEDCP-1094 : e2e autoscaler balancing similar node groups #2808 OCPBUGS-16113 : unshare ignition-server reconciliation between HO and CPO #2817 OCPBUGS-11939 : Fix additional issues with OCPBUGS-11939 #2804 OCPBUGS-16135 : fix deletion bug when hostedzone is already deleted #2811 OCPBUGS-14862 Improve clarity around hypershift operator permissions #2782
HOSTEDCP-1062 : Management kas policy #2796 Revert “HOSTEDCP-1062: Add management cluster KAS network policy” #2793
HOSTEDCP-1020 : Add pullSecret & NodePool replica flags to HCP CLI #2774 HOSTEDCP-1101 : Add snyk-secret HO RHTAP scripts #2788 OCPBUGS-15991 : use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2787 OCPBUGS-15769 : Include hypershift specific labels to be ignored by similar autoscaler groups #2784 Add management cluster KAS network policy #2717
HOSTEDCP-1019 : Add create cluster for Agent for HCP CLI #2754 CNV-30407 : KubeVirt Platform: Support NetworkInterfaceMultiQueue #2760 HOSTEDCP-1030 : Add destroy cluster for Agent for HCP CLI #2756 OCPBUGS-15594 : Get valid arch image for cluster-config-operator #2753 kubevirt: Annotate VMs to be live migratable #2772
Revert “Merge pull request #2770 from dharaneeshvrd/upgrade-capi-ibmcloud #2776
MULTIARCH-3684 : PowerVS - Upgrade capi to use v1beta2 APIs #2770 OCPBUGS-14862 : Reject VPCE Connections during VPCE Service cleanup #2700 Update RHTAP references #2768
HOSTEDCP-1023 : Add create NodePool for Agent for HCP CLI #2755 HOSTEDCP-1061 : Implement dedicated request serving nodes for HostedClusters #2722 OCPBUGS-15769 : Set –balance-similar-node-groups for autoscaler #2769 Leader election config update. #2282
OCPBUGS-15723 : Let getMachinesForNodePool return machines ordered by creation Timestamp #2766 Fix KAS HealthCheck for non DNS-Based ingress points in LB service #2765
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #2741
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /hack/tools #2740
Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 in /hack/tools #2737
OCPBUGS-12208 ensureExists pullSecret resource reconciliation strategy #2732
Bump github.com/coreos/ignition/v2 from 2.10.1 to 2.14.0 #2739
Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/tools #2738
Remove hardcoded AWS CI References #2742
TRT-1118 : Remove DisableStrictZoneCheck from AWS CCM config #2757 Update RHTAP references #2750
add OWNERS for new ci-tooling area label #2743
Add production cli (hcp) to dockerfile #2747
feat: Enable priority class override #2661
test/e2e: retry configmap create in etcd chaos tests #2746
OCPBUGS-14578 : Set allocate-node-cidrs to false in the cluster-kube-controller-manager #2731 Revert “HOSTEDCP-1016: Validate publishing strategies” #2733
HOSTEDCP-1027 : Add Create kubeconfig for HCP CLI #2719 HOSTEDCP-1016 : Validate publishing strategies #2651 KubeVirt Platform documentation for Advanced Storage Configurations and External Infrastructure #2712
Follow up to PR comments on #2642 #2690
HOSTEDCP-1067 : Add dependabot dependency management #2708 HOSTEDCP-1073 : enforce blocked rollout of HCP #2726 Revert “HOSTEDCP-967: [Re-revert] Disable v1alpha1 and conversion webhook by default” #2705
Remove –service-publishing-strategy from production cli #2721
HOSTEDCP-1024 : Add Create NodePool for KubeVirt for HCP CLI #2718 HOSTEDCP-1032 : e2e: ensure default PSA policy is not privileged #2714 HOSTEDCP-1031 : Add Destroy Cluster Cmd for KubeVirt for HCP CLI #2673 Expose annotation to allow release image overrides #2595
HOSTEDCP-1060 : add ignition-server proxy #2668 OCPBUGS-14637 : Check OwningIngressController also in Labels #2706 HOSTEDCP-1020 : Add Create Cluster for KubeVirt for HCP CLI #2672 properly handle user CA bundle not existing #2703
OCPBUGS-15168 : fix(oauth): Do not proxy IBM Cloud IAM endpoints #2699 OCPBUGS-14859 : Skip AWS resource deletion for ‘Unknown’ OIDC state #2691 Whitelist access from virt-launchers to NodeIP if NodePort ServicePublishingStrategy is used #2688
OCPBUGS-13829 : cpo: oauth: honor AccessTokenInactivityTimeout #2693 Update NodePool docs to include data propagation #2687
HOSTEDCP-1008 : Add NodePoolTransitionSeconds metric #2631 HOSTEDCP-967 : [Re-revert] Disable v1alpha1 and conversion webhook by default #2685 Make NodePool arch input immutable #2689
Update autocaler RBAC to accomodate machinepools support added upstream #2663
Enforce Immutability of some KubeVirt Platform Values #2654
CNV-24818 : Add fsGroup support to kubevirt-csi-driver #2563 Let payload provider render feature gate yaml #2664
OCPBUGS-14633 : Check for OPENSHIFT_IMG_OVERRIDES before using #2660 HOSTEDCP-965 : Add impersonate feature to the CLI and document HC dump procedure #2653 OCPBUGS-11882 : Annotate HCP pods with the safe-to-evict-local-volume CA annotation #2647 Update RHTAP references #2657
Disable nodepool replace upgrade test #2665
OCPBUGS-14784 : Honor global ingress configuration LoadBalancer type on AWS #2669 OCPBUGS-14620 : Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2659 HOSTEDCP-992 : refactor ignition-server reconcilation #2662 Minor fix in KAS LB HealthCheck #2656
HOSTEDCP-1036 : Create Makefile path to create productized CLI #2633 Extend np test timeout for KubeVirt platform #2655
HOSTEDCP-1003 : Set AWS conditions only for AWS platform #2604 Remove alsologtostderr flag form CAP* #2648
OCPBUGS-14575 : Check for IDMS only if mgmt cluster has req API #2650 Network isolation of VirtualMachines for KubeVirt provider #2622
OCPBUGS-14428 : remove OLM alerts from the HCCO #2636 KubeVirt Openstack image annotation override #2629
Red Hat Trusted App Pipeline update hypershift-operator-main #2638
Red Hat Trusted App Pipeline purge hypershift-azjx #2635
cli: Add release-stream flag #2644
OCPBUGS-13547 : Pass payload-version to MCS and MCC #2643 KubeVirt: Handle deletion of the cache DV on an edge case #2620
OCPBUGS-14087 : Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2632 HOSTEDCP-1009 : Allow external-dns image to be set in install cli #2623 Ensure FeatureGate is copied from cluster to MCO render source #2581
OCPBUGS-12972 : Use different ports for MCS in the ignition provider #2628 hypershift dump: use random local port for kas port-forwarding #2625
OCPBUGS-11939 : Initialize RegistryOverrides w/ mgmt cluster ICSP #2437 Revert “Merge pull request #2596 from muraee/disable-valpha1” #2627
Add ‘Creating Arm NodePools Through the API’ Section #2587
HOSTEDCP-967 : Disable v1alpha1 and conversion webhook by default #2596 OCPBUGS-13113 : Add ClusterUpgradeDuration metric #2566 chore(deps): update rhtap references #2612
OCPBU-609 : agent infrastructure docs #2618 OCPBUGS-14169 : Remove external-dns –events flag #2616 OCPBUGS-13970 : Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2593 cmd: infra: aws: retry on AuthorizeSecurityGroup failure #2605
Fix dump for Kubevirt #2589
Kubevirt CSI StorageClass mapping API #2528
Remove Arm e2e test #2591
HOSTEDCP-947 : Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2588 OCPBUGS-13735 : Fixed revoking some permissions to CAPI Manager Clusterrole #2586 HOSTEDCP-445 : Add script to migrate hosted control plane #2598 Use newly introduced KubeVirt Platform rhcos Image #2576
OCPBUGS-13168 : Include default ingress CA in root CA bundle #2584 HOSTEDCP-975 : Add new grafana panels for nodepools SLOs #2592 HOSTEDCP-926 : Send metric when HO/CPO decide to skip cloud resource deletion #2531 Update RHTAP references #2420
OCPBUGS-13897 : Use cluster-config-operator to render featuregate status on KAS bootstrap #2585 HOSTEDCP-975 : Add cluster_name label to nodepools metrics #2580 Fix broken tests for non-aws platforms #2577
Updated secret permissions for openshift-route-controller-manager #2575
HOSTEDCP-987 : Update go version and dependencies in /hack/tools/go.mod #2551 remove flags set by CI env var #2521
HOSTEDCP-975 : Add NodePool DeletionDuration and InitialRolloutDuration metrics #2558 ARMOCP-412 : Add ARM nodepool to AWS x86 Hosted Cluster #1594 OCPBUGS-11939 : Fix minor codebase nits #2502 control-plane-operator/controllers/hostedcontrolplane: Align reconcileCloudControllerManager error strings #2500
HOSTEDCP-960 : Add e2e to validate HC/NP conditions expected status #2482 HOSTEDCP-830 : Update auto scaler role to get and list agentmachinetemplates #2564 HOSTEDCP-445 : Included how to fix image-registry clusteroperator after a disaster recovery migration #2481 OCPBUGS-13547 : Pass release image version to MCO bootstrap via –payload-version #2572 Cache KubeVirt Boot Image #1918
contrib: ci: increase HC quota in clusters namespace #2547
HOSTEDCP-996 : CLI: enable guest cluster dump for private clusters #2571 MULTIARCH-3205 : Support IBM COS as storage for PowerVS in image registry operator #2207 fix nil deref in DefaultWorkerSecurityGroupID check #2573
remove unused OLM catalog rollout code #2568
OCPBUGS-13034 : Cluster-api SA can’t create events #2565 ACM-4277 : docs: Add L2Advertisement CR to the Handling Ingress section in the agent docs #2470 HOSTEDCP-947 : Increases default etcd PV size to 8Gi #2549 Add a new e2e option for the ETCD storage class #2560
Red Hat Trusted App Pipeline update hypershift-azjx #2555
HOSTEDCP-975 : Revised nodePoolSize metric and added AvailableReplicasMetric #2532 OCPBUGS-11383 : Sync proxy TrustedCA to guest cluster #2550 Removed unused KMS permissions for nodePool role #2456
Lock down kubevirt csi storageclass mappings #2534
OCPBUGS-13021 : Add internal/external elb tags to subnets #2541 HOSTEDCP-918 : Add validation for NodePool security Group condition when using default SG #2498 HOSTEDCP-981 : Minor updates to Getting Started & Contribute pages #2527 OCPBUGS-13111 : Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2513 Stop triggering rollout on labels/taint change #2533
Validate HO private platform input #2536
OCPBUGS-13021 : Health check load balancers only on public clusters #2535 OCPBUGS-13309 : set FeatureGate global config #2543 Add audit-log-maxbackup setting for openshift-api-server #2509
OCPBUGS-11894 : Let the aws endpoint to use the hypershift owned SG #2475 HOSTEDCP-980 : Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric #2523 HOSTEDCP-788 : Configurable SRE MetricsSet #2505 OCPBUGS-13112 : Add timeout to KAS health check client #2522 HOSTEDCP-978 : Bump openshift/api version and fixed KCM flags (k8s 1.27) #2519 OCPBUGS-7841 : Account for expectedState == false when capturing hostedClustersWithFailureCondition #2507 OCPBUGS-11719 : Ensure ingress controllers are removed before load balancers #2444 Fixed assignment to entry in nil map #2508
Add new –featuregate-manifest to /usr/bin/cluster-config-operator render #2506
ACM-5116 : Increase KubeVirt default Mem and Root Volume Sizes #2471 HOSTEDCP-937 : New metric to expose Hypershift operator info #2443 HOSTEDCP-969 : Consolidate labels for metrics #2494 HOSTEDCP-969 : Move proxy, silence alerts and limited support metrics into HC controller #2489 HOSTEDCP-969 : Only track available metric once #2479 OCPBUGS-11738 : Delete kubeadmin secret when an idp is defined #2452 Add PollImmediate for e2e metrics to avoid race with prom scrape interval #2483
HOSTEDCP-969 : Move HC creation metrics #2477 OCPBUGS-12153 : fix(hcco): Get OLM CatalogSource images from defined map #2454 HOSTEDCP-917 : Add publicAndPrivate <-> Private e2e test #2383 add hyperv1.SilenceClusterAlertsLabel to HostedCluster on deletion #2476
HOSTEDCP-969 : Move guest cluster resource deletion metric #2463 OCPBUGS-11450 : Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2384 HOSTEDCP-972 : Add pre-commit command to Make file #2465 HOSTEDCP-969 : Move cluster deletion duration metric into controller #2459 Fix kubevirt csi daemonset reconcile loop #2466
Fixes loop between HC controller and pod security label syncer #2460
docs: update OIDC bucket create with bucket policy #2461
OCPBUGS-11946 : Add new OCP 4.13 storage admission plugin #2445 OCPBUGS-11773 : remove ACL for aws bucket #2423 OCPBUGS-7841 : Set metrics to 0 when needed to keep time series honest #2440 OCPBUGS-11930 : Clean up existing VPC endpoint connections #2438 Revert “Add validation for default Security Group conditions during N… #2453
HOSTEDCP-918 : Add validation for default Security Group conditions during NodePool upgrade test #2342 OCPBUGS-11649 : Always requeue AWSEndpointService controllers #2424 Add IBMers as reviewers #2436
e2e: Cleanup shared OIDC provider on SIGTERM #2435
HOSTEDCP-950 : Fix haproxy image name in ignition server #2441 OCPBUGS-7091 : Restart kube-scheduler when its configuration changes #2421 OCPBUGS-11749 : Add pod security labels to hcp namespace #2415 HOSTEDCP-950 : Validate release payload images #2368 kubevirt: Block metadata server egress #2399
Bring latest MCO API #2434
Relax MCO API strict decoding #2433
docs: update OIDC s3 bucket creation procedure #2425
json export for a common grafana dashboard for SLOs #2422
Enable monitoring for hypershift namespace #2419
MULTIARCH-3449 : set priority class for cloud controller manager pod for PowerVS #2390 Fixes HCCO reconcile error for kubevirt csi driver #2259
Add monitoring label to HCP namespace #2393
Update tekton references #2308
add OWNERS for new area labels #2414
fix typo #2411
HOSTEDCP-807 : Requeue HCP always #2408 OCPBUGS-11640 : Update HostedCluster oauthCallbackURLTemplate #2400 e2e: Fixed idp test conflict error on HosterCluster update #2389
dump: Store guest worker node logs and increase kubevirt logs verbosity #2317
HOSTEDCP-568 : Update Konnectiviy socks5 proxy for IBM exception #2366 OCPBUGS-11442 : properly reconcile with user specified changes for in proxy configuration #2382 Updated kubevirt docs #2318
OCPBUGS-11439 : allow z-stream upgrade even if CVO Upgradeable is false #2381 HOSTEDCP-954 : Remove ec2:ReleaseAddress #2379 HOSTEDCP-802 : add cli flag to enable upgrade type #2367 e2e: Fix oauth idp e2e test #2377
HOSTEDCP-951 : Let install apply to aggregate errors #2372 Revert “Create a second scheme that always registers prometheusoperatorv1 GVKs” #2374
HOSTEDCP-807 : Check KAS loadbalancer health #2264 e2e: fix for non-AWS platform #2360
HOSTEDCP-445 : Fix the storage ClusterOperator during a DR migration #2358 HOSTEDCP-850 : Fix nodepool autoscaler logic #2354 support/releaseinfo/pod_provider: Drop unused legacy PodProvider #2341
Fix nodepool upgrade e2e test #2359
HOSTEDCP-806 : Fix ValidAWSKMSConfig condition #2322 HOSTEDCP-939 : Setup shared OIDC provider for e2e clusters #2335 OCPBUGS-10227 : Preserve false status of ValidAWSIdentityProvider condition #2344 ACM-4615 get pull secret instead of dockerconfigjson from mce credentials #2338
Slo alerts #2049
HOSTEDCP-943 : Add hypershift_hosted_cluster_transition_seconds histogram #2348 HOSTEDCP-944 : Add more expectedHCConditionStates metrics #2347 OCPBUGS-10227 : Create new EC2 client for AWS identity provider health check #2346 OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2321
SDA-8609 : No more specifying the scrape interval at servicemonitors & podmonitors level #2327 OCPBUGS-10807 : Pass runAsUser to CNO so it can run its managed services with proper security context #2319 Appstudio update hypershift-azjx #2332
Revert “cpo: cno: follow image name change in release payload” #2345
support/supportedversion: Include the problematic version strings in error messages #2334
OCPBUGS-10864 : fix external APIServer address selection based on endpointAccess #2328 OCPBUGS-8073 : Do not proxy when guest cluster resolution fails #2261 MULTIARCH-3028 : handle PowerVS instance which goes to failed state during infra create and destroy process. #2088 HOSTEDCP-938 : Added PSA default profile to RunTimeDefault in operator deployment #2333 HOSTEDCP-934 : Validate PublishingStrategyMapping #2324 OCPBUGS-7091 : Honor scheduler profile in HostedCluster configuration #2330 HOSTEDCP-736 : Docs on how we handle aws permissions #2311 Add support for external infra clusters in KubeVirt platform #2017
Create a second scheme that always registers prometheusoperatorv1 GVKs #2292
OCPBUGS-10504 : Deletion of the VPCEnpoint on conflicting service names #2290 HOSTEDCP-801 : Expose external DNS for private cluster endpoints #2286 HOSTEDCP-903 : Propagate AWSEndpointService conditions #2278 Appstudio update hypershift-azjx #2287
OCPBUGS-8691 : Add storage operators perms. to watch HostedControlPlane #2301 OCPBUGS-10423 : Add validation for taint.value in nodePool #2298 HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2232 Route to kubevirt VMs using infra id as service label selector #2092
Force controleplane upgrade always #2288
HOSTEDCP-900 : Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2265 HOSTEDCP-919 : Clean up and API doc #2280 HOSTEDCP-688 : E2E Test NodePool Upgrade #2256 HOSTEDCP-445 : Documented the possible issues found during a HostedCluster migration #2276 OCPBUGS-10227 : Ensure identity provider health check condition is persisted and remove awsendpoint control plane finalizer if invalid aws creds #2281 OCPBUGS-8040 : Switch NTO metrics auth to certs generated by HCP controller #2050 OCPBUGS-8381 : Use appropriate serving certificate for OAuth #2279 HOSTEDCP-501 : Added detailed documentation about Hypershift release process #2272 HOSTEDCP-919 : Add AWS cloud controller manager #2271 Update PowerVS prereq doc with install and authorization details #2172
Remove webhook validation #2217
HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2246 Refactor e2e nodepool tests #2228
Update HCP version in capi cluster ref #2119
Validate etcd KMS config #2174
OCPBUGS-8421 : fix API documentation for audit webhook field #2258 Add a debug section to the Node Tuning docs #2254
Destroy cloud resources by default #2224
Add e2e test for identity providers #2166
HOSTEDCP-638 : Add latest ocp supported info to -v command for cli and operator #2233 OCPBUGS-8231 : Fix cleanup of volumes on cluster deletion #2243 fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2231
add pull-secret to imagePullSecrets for NTO, CNO, and olm-collect-profiles #2248
Update images and hypershift operator to 4.14 #2249
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-67825 , OCPBUGS-67826 : bump github.com/sirupsen/logrus to v1.9.3 #166 OCPBUGS-59791 : [IBM VPC] set offlineExpansion to false in e2e test manifest #151 OCPBUGS-36071 : CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #122 OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91 OCPBUGS-21339 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #81 OCPBUGS-18105 : [IBM VPC] failed provisioning volume in proxy cluster #74 OCPBUGS-16654 : Revert revert “STOR-1065: Rename node-driver-registrar… #69 OCPBUGS-16571 : Bump library-go to remove dependency on goproxy #71 OCPBUGS-16783 : Chore: Update OWNERS #70 Revert “STOR-1065: Rename node-driver-registrar RBAC and Rework sidecar bindings to bind common ClusterRoles” #68
STOR-1065 : Rename node-driver-registrar RBAC and Rework sidecar bindings to bind common ClusterRoles #64 OCPBUGS-14824 : Bump ibm-vpc-block-csi-driver-operator library-go #65 OCPBUGS-12614 , STOR-1168 : Bump common libraries #57 Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #56
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #55
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #54
OCPBUGS-8683 : Add management workloads annotations #53 Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #52
Full changelog
OCPBUGS-56065 : tech debt: rework vendor patches #50 OCPBUGS-53539 : bump github.com/golang-jwt/jwt/v4 to v4.5.2 #46 OCPBUGS-36011 : CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #42 OCPBUGS-21451 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #27 OCPBUGS-12510 : UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #23 Updating ibm-vpc-node-label-updater images to be consistent with ART #22
Updating ibm-vpc-node-label-updater images to be consistent with ART #21
Updating ibm-vpc-node-label-updater images to be consistent with ART #20
Updating ibm-vpc-node-label-updater images to be consistent with ART #19
Full changelog
Update documentation #783
update DVO metrics example in the sample archive #777
OCPBUGS-14270 : Revert “Implement periodic gathering as a job in tech … #785 And 67 elided commits (e.g. from squash or rebase merges)
Full changelog
Binary should be compiled on rhel9 #89
Updating ironic-rhcos-downloader images to be consistent with ART #88
Updating ironic-rhcos-downloader images to be consistent with ART #87
Updating ironic-rhcos-downloader images to be consistent with ART #86
Updating ironic-rhcos-downloader images to be consistent with ART #85
Full changelog
OCPBUGS-30414 : update unit tests in egress/dns-proxy #173 OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132 OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131 OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133 NE-1304 : container builds: switch to haproxy26 package #141 OCPBUGS-11385 : Removed chroot setting #137 egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138 egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134 Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Full changelog
NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). #229
bump(*): vendor bump to sync with kubernetes fork #198
OCPBUGS-10153 : Updating ose-kube-storage-version-migrator images to be consistent with ART #194 Full changelog
OCPBUGS-23866 : deps, bump opentelemetry #38 OCPBUGS-21174 : Bump golang.org/x/net to v0.18.0 #37 OCPBUGS-30861 : Bump golang.org/x/net to v0.18.0 #36 OCPBUGS-19020 : Auto sync upstream 2023 09 15 20 36 #26 Auto sync upstream 2023 05 15 20 44 #22
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #21
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #20
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #19
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #18
Full changelog
OCPBUGS-19926 : [release-4.14] Don’t force use of virtio console #269 OCPBUGS-18338 : Fix CI by running tests natively by default #261 Updating ose-libvirt-machine-controllers images to be consistent with ART #259
Updating ose-libvirt-machine-controllers images to be consistent with ART #258
Updating ose-libvirt-machine-controllers images to be consistent with ART #257
Updating ose-libvirt-machine-controllers images to be consistent with ART #254
Remove myself (frobware) from OWNERS #253
refactor: replace github.com/ghodss/yaml with sigs.k8s.io/yaml #252
Full changelog
OCPBUGS-57341 : Do not enable on-prem-resolv-prepender.path for UPI #5114 OCPBUGS-43743 : Soften haproxy timeout for kubeapi probe #4664 OCPBUGS-54228 : Update ObservedGeneration in KubeletConfig #4950 OCPBUGS-50631 : Add clarification to invalid maxUnavailable alert #4848 OCPBUGS-48801 : Wait for all subcontrollers #4808 OCPBUGS-46057 : Remove trailing periods from AWS provided hostnames #4747 OCPBUGS-45271 : Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4725 OCPBUGS-42111 : Do not use ‘restart’ for ‘oneshot’ service #4622 MCO-1278 : Backport Telemetry to 4.14 #4672 OCPBUGS-43981 : Panic seen in CI job for MCC pod #4671 OCPBUGS-43980 : MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4673 OCPBUGS-37552 : On-Prem resolv prepender to watch for NM changes #4500 OCPBUGS-35322 : Decrease logs of haproxy #4405 OCPBUGS-32258 : Log network service output to console #4320 OCPBUGS-38371 : Revert “MCD-pull: run after network-online.target in Azure” #4526 OCPBUGS-37769 : Move StartLimitIntervalSec to Unit section #4521 OCPBUGS-30794 : Mount /run/nodeip-configuration into coredns containers #4253 OCPBUGS-37483 : Remove weights from ingress check script #4485 OCPBUGS-37738 : Openshift uncordoned compute-node that was intentionally cordoned #4502 OCPBUGS-36915 : Use NM’s dns-change event for resolv.conf #4473 OCPBUGS-37223 : Copy RHEL9 binaries used in HCP #4479 OCPBUGS-36776 : daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4463 OCPBUGS-36593 : MCD-pull: run after network-online.target in Azure #4456 OCPBUGS-36356 : daemon/update: disable systemd unit before overwriting #4447 OCPBUGS-32472 : Delete state files on reboot only #4331 OCPBUGS-33590 : ovs-configure: fix vlan_parent calculation #4361 OCPBUGS-34716 : If multiple hostnames are returned, use the first one for the Node name #4385 OCPBUGS-17658 : Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383 OCPBUGS-33643 : Don’t error if the certs.d dir doesn’t exist yet #4362 OCPBUGS-32341 : Remove the condition for checking the multiple ovs-if-br-ex profiles #4325 OCPBUGS-27030 : Log network service output to console #4114 : OCPBUGS-31731: kubelet: restorecon necessary files on kubelet’s prestart #4307
OCPBUGS-32260 : fix: resources were in the wrong indentation level #4322 OCPBUGS-27108 : Add \n in cert_writer for old cert methods and skip cloudCA validation #4117 OCPBUGS-31487 : Prevent OVS-configuration to run before kdump #4291 OCPBUGS-29400 : Run resolv-prepender entirely async #4182 OCPBUGS-31681 : make verify should use MCO’s kube version #4305 OCPBUGS-30992 : add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266 OCPBUGS-30872 : add static pods for rbacproxy #4258 OCPBUGS-30107 : annotate on-prem static pods for workload partitioning #4230 OCPBUGS-30225 : set nodeStatusReportFrequency #4242 OCPBUGS-29290 : AWS: Always persist the existing node name on 4.14 #4215 OCPBUGS-20039 : Add v6-primary dual stack support to VSphere UPI #3956 OCPBUGS-29457 : Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187 OCPBUGS-26072 : Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098 OCPBUGS-28379 : fix nodeStatusUpdateFrequency #4149 OCPBUGS-28384 : daemon: allow the user to override drains on IR changes #4150 OCPBUGS-27759 : Add Image Credential Provider flags for Kubelet on AWS #4144 [OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178 : use *resource.Quantity to not automatically set 0 #4121 OCPBUGS-23089 : Don’t retry node-ip show in resolv-prepender #4022 OCPBUGS-27362 : Fix typo in AWS node env unit #4131 OCPBUGS-26500 : crio: drop automatic image cleanup on upgrades #4105 OCPBUGS-26559 : Azure Run ovs-configuration.service before dnsmasq.service #4109 OCPBUGS-26551 : kubelet: fix kubelet labels #4107 OCPBUGS-24596 : [release-4.14] execute cert related processes to ensure proper rotation #4063 OCPBUGS-24397 : gcp-routes: don’t exit on crictl failures #4056 OCPBUGS-20554 : Ensure gcp-routes hack for internalLB hairpin traffic works for SGW #3973 OCPBUGS-23474 : Use shorter IP label for keepalived VIP #4041 OCPBUGS-23208 : workaround nmstate bug by configuring ipv{4,6} addresses #4031 OCPBUGS-22275 : support icsp and idms objects #3995 OCPBUGS-22391 : Require a hostname override for AWS #4001 OCPBUGS-20418 : Introduce kubelet-dependencies.target and firstboot-osupdate.target #3967 OCPBUGS-20051 : Support to append the duplicate kernel arguments to the rendered MC #3957 OCPBUGS-21065 : Update library-go and k8s dependencies to latest version #3994 OCPBUGS-20025 : Consider ingress VIPs when selecting node IP #3951 OCPBUGS-21841 : CRI-O: Use 127.0.0.1 for stream server with random port #3984 OCPBUGS-20358 : dashboard should detect unknown and not ready for not ready dashboard #3966 OCPBUGS-19657 : After dual-stack conversion reconcile IPFamilies #3934 OCPBUGS-19430 : [release-4.14] resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3925 OCPBUGS-19703 : Internal Registry Secrets merge causing excessive API calls #3941 OCPBUGS-19662 : fix merged image registry CA behavior #3937 OCPBUGS-19701 : Remove dependency on k8s.io/kubernetes packages #3940 OCPBUGS-19344 : Ignore invoking nbctl calls if its SDN #3928 OCPBUGS-19535 : daemon: always use podman cp to copy extensions container content #3932 OCPBUGS-19357 : install: Recreate and delayed default ServiceAccount deletion #3920 OCPBUGS-9972 : Fix azure routes hack for ovnk pods towards internalLB on master nodes in SGW mode #3878 OCPBUGS-18442 : MCO is degraded if not install image registry operator #3901 OCPBUGS-18097 : ensure cconfig is not updated too frequently #3891 OCPBUGS-18086 : Quiet controller noisiness #3886 OCPBUGS-16035 : daemon: create /etc/systemd/network directory on node #3883 Revert “fix nodeStatusUpdateFrequency” #3887
OCPBUGS-17787 : Fix sysctl breaking dots in paths #3870 OCPBUGS-16733 : on-prem: run resolv-prepender on NM reapply event #3827 OCPBUGS-15583 : fix nodeStatusUpdateFrequency #3784 OCPBUGS-17810 : temporarily remove cert observability fields, add storageversionmigration for machineconfigpools,controllerconfig #3866 OCPBUGS-11832 : SSHkeys fails to write on upgrade to 4.13.rc3 #3810 MCO-564 : Make MCD aware of on-cluster builds #3848 MCO 566: MCO 662 Wire up productionalized BuildController in Machine OS Builder binary and choosing backend image builder #3861
MCO-605 : MCO-550: Remove Certificates from MachineConfig #3787 MCO-573 : Wire up security/trust/pull secrets between rpm-ostree and internal registry #3806 OCPBUGS-17701 : daemon: igmore mounting MCD pod content when target is “/” #3860 mcs: Use certwatcher #3744
MCO-729 : BuildController should allow cluster admins to provide a custom Dockerfile #3847 MCO-564 : Make NodeController aware of BuildController #3817 OCPBUGS-17568 : Agent-based install process the container machine-config-controller will be oom #3862 OPNET-343 : Restore node-ip for kubelet in dual-stack vSphere #3859 OCPBUGS-17683 replace .. with : on registry CA file paths #3854
operator: remove metrics related log #3855
MCO-565 : MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions. Deletes deployment rather than scale down to 0 without label #3834 MCO-588 : Update ignition spec to 3.4, disallow ignition KernelArguments for now #3814 OCPBUGS-17433 : Sync featuregate controller during the node config controller sync #3846 OCPBUGS-8938 : OCPBUGS-15202: MCO-555: kube-rbac-proxy addition #3663 MCO-654 : forcefile should always trigger an OS update #3790 OCPBUGS-14945 : add HostToContainer propagation to all hostPath volume mounts #3792 MCO-532 : Finish lease type migration #3842 OCPBUGS-13825 : The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3838 OCPBUGS-14965 : Run hostnamectl with systemd-run #3746 install: Fix dash-to-hyhen for 04_kube_rbac_proxy_config.yaml prefix #3837
OCPNODE-1714 : files: add skip_mount_home to storage.conf #3777 OCPBUGS-16227 : make sure sshKey are not emptied out on firstboot #3829 daemon: Two minor fixes for reexec #3835
daemon: Remove even more dead legacy OS update code #3820
MCO-552 : implement the ability for the MCO to handle image registry certificates #3770 OCPBUGS-17156 : daemon: Always replace binary #3832 Revert “daemon: Make binary writing idempotent” #3831
OCPBUGS-16921 : daemon: Make binary writing idempotent #3825 Revert “MCO-565: MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions” #3830
Revert “ add Passwd to bootstrap served ignition” #3828
OCPBUGS-15367 : The kubeconfig copied on to each node has 644 permissions #3808 MCO-597 : Remove the MCO’s dependency on journal reads #3822 fix certExpiry description #3823
OCPBUGS-16227 : add Passwd to bootstrap served ignition #3811 MCO-565 : MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions #3763 OCPNODE-1717 : Make cgroupsv2 default in OCP-4.14 #3789 OCPNODE-1655 : Apply node-cluster dashboard as a config map #3708 MCO-607 : MCO-237: Keep track of certs in ControllerConfigStatus #3756 MCO-687 : Fix metrics e2e test #3813 MCO-585 : MCO-569: MCO-563: MCO-586: Introduces BuildController #3731 MCO MCO-424: daemon: Remove old legacy OS update path #3583
MGMT-14843 : ovs-configuration service should copy the statically configured address even if the method isn’t manual. #3774 OCPBUGS-16128 : daemon: Copy matching binary to host, re-exec with it #3799 MCO-596 : Deprecate the login monitor #3791 kubevirt: Configure IPv6 arp proxy default gw #3780
operator: Stop mounting /etc/kubernetes/ca.crt #3730
OCPBUGS-15613 : Soften grep pattern for ingress default router #3775 Bug OCPBUGS-15233: OpenStack: fix IPv6 configuration #3785
OCPBUGS-11997 : Prevent NM from unsetting the hostname #3794 add wasm extension #3776
set MCO namespace on all events #3767
OpenStack: restrict IPv6 configuration #3781
Update 0000_90_machine-config-operator_01_prometheus-rules.yaml #3779
OCPBUGS-14674 : set pool alert back to zero in more default scenarios. #3733 OCPBUGS-10115 : update image to use golang-1.20 #3766 OCPBUGS-15728 : Fix machine config drifts when deploying with platform external #3773 faq: Talk about “no enabled repositories” #3772
OCPBUGS-14185 : change the message annotation to description #3721 OKD-174 : Dockerfile: OKD: Reenable extensions image on SCOS #3741 OCPBUGS-15575 : Dockerfile: pin to nmstate-2.2.9 #3769 OCPBUGS-10924 : Switch default SA to machine-config-operator #3740 trivial: Fix namespace for kube api server operator #3762
OCPBUGS-8403 Deleting SSH keys / password hashes should not degrade MachineConfigPool / node #3606
OWNERS: Update onwer list #3761
OCPBUGS-4820 : Controller version mismatch causing degradation during upgrades #3738 MCO-640 : Move all log functions to klog #3734 OCPBUGS-14399 : Minor fix to support protectKernelDefaults field in Kubelet Config #3736 MCO-595 : Remove MCO’s pending config workflow #3700 OCPCLOUD-2010 : Re-vendor api and library-go for external platform support #3745 bootstrap: Clarify that “root ca” is really “MCS CA” #3728
add ipsec extension #3726
OpenStack: configure ipv6 addresses #3705
OCPBUGS-13656 : MCO-632: Update kube deps to 1.27.2 #3735 OCPBUGS-14612 : Improve logging for IPI deployments #3725 OCPBUGS-4370 : Add label to VIP via keepalived #3683 OCPBUGS-14793 : Allow userfaultfd syscall to be used by unprivileged users #3724 OCPBUGS-14272 : Race condition in TestMCDRotatesCertsOnPausedPool #3718 OCPBUGS-13547 : [OCPCLOUD-2034] Update Library-go and API for new featuregate changes #3688 OCPBUGS-2177 : MCO-634: add support for a node pool hierarchy #3505 OCPBUGS-13860 : Fix missing apiVersion and kind fields for embedded resources #3713 OCPBUGS-3176 : Disable global ipv4 and ipv6 forwarding for OVN deployments #3676 OCPBUGS-8447 : MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3576 OCPBUGS-13547 : Use payload-version flag to set release version consistently across components #3701 OCPBUGS-12885 : daemon: stop using nmstatectl persist-nic-names --inspect on el9 #3685 OCPBUGS-11304 : daemon: event only on actual OS updates #3695 OCPBUGS-11652 : kubelet: add enableSystemLogQuery #3645 OCPBUGS-12980 : daemon: write certs in firstboot-complete path #3694 OCPBUGS-11670 : mcc_drain_err metric should not be served for removed nodes #3689 OCPBUGS-12456 : fix duplicate RotateKubeletServerCertificate setting #3686 OCPBUGS-12951 : daemon: Don’t traverse /run/ostree/auth.json symlink #3691 OCPBUGS-11702 , OCPBUGS-4476 : keepalived/ingress: change healthcheck script #3441 OCPBUGS-11992 : ControllerConfig’s Proxy field should not be marked as embedded resource #3682 OCPBUGS-11162 : Do not trigger openshift-azure-routes/openshift-alibaba-routes service based on file existence #3643 OCPBUGS-10235 : Add quotes to variable with -z #3679 OCPBUGS-11280 : Fixing forcedns dispatcher script permission issue for assisted sno rhel9 upgrade #3648 OCPBUGS-7836 : The MCD has a non-functional pivot command that should be removed #3666 Test Revert “Block RHCOS gcp-routes service on both masters and workers” #3672
Accomodate ART limitation in parsing [[]] bash #3669
Block RHCOS gcp-routes service on both masters and workers #3619
OCPBUGS-10787 : Persist static IP addressed NIC names from rhel8 #3650 OCPBUGS-5356 : changed error handling so no runtime error #3651 OCPBUGS-4877 : End the operator’s “unknown field” logspam by marking controllerconfig embedded fields as embedded so they validate #3662 MCO-407 : add support for operator metrics #3537 Updating openshift-proxy-pull-test images to be consistent with ART #3593
OCPBUGS-4122 : Do not add deep nested scope to atomic transport #3653 OCPBUGS-10414 : Fix regex dot in coredns config file #3626 OCPBUGS-11092 : daemon: write certificate in OnceFrom and HyperShift #3654 remove container runtime flag #3640
OCPBUGS-4963 : Enable base nodeip-configuration for vsphere upi #3460 configure-ovs: would not retry on some errors #3625
OCPBUGS-10598 : Splitting NetworkManager-onprem.conf.yaml to 2 files: #3620 OCPBUGS-10379 : configure-ovs: support UUID in vlan.parent #3623 OCPBUGS-8676 : Fix kubelet.service node-ip for v6-primary dual-stack #3592 getPoolsForNode: Use constant MachineConfigPoolWorker instead of “worker” string #3635
MCO-423 : Adds OS image override test #3558 OCPBUGS-9969 : daemon: Drop duplicate --authfile used in run #3611 OCPBUGS-8446 : MCO-503: daemon: have a special path to sync in certs #3575 OCPBUGS-7559 : Remove hard requirement for the afterburn from early-running aws-related services #3585 Removing jstuever from OWNERS_ALIASES #3554
OCPBUGS-8113 : daemon: Only switchkernel if we are doing an OS update or kernel change #3600 OCPBUGS-9685 : daemon: Always remove pending deployment before we do updates #3599 Make OKD/SCOS Dockerfile regexes match again after rhel-coreos image name change #3597
Switch to rhel-coreos (9) #3596
OCPBUGS-8113 : daemon: Make switchKernel less stateful #3580 OCPBUGS-8523 : Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3591 Update library go to promote AWS CCM to out of tree #3590
machineconfigpool: Clarify status.configuration description #3371
daemon: Remove noisy log message #3588
OCPBUGS-5872 : Wrap podman commands in a while loop #3581 configure-ovs: permanent retry on failure #3544
OCPNODE-1495 : Default the cgroup version to “v1” via base template controller #3563 OCPBUGS-1662 : mcd_update_state metric should have a single time-series per node #3571 Full changelog
OCPBUGS-54171 : Change rhcos release browser url #59 Force rebuild of CI image #31
Fix condition check for logging #29
Force updating main rhcos image to version 414.92.202303281555-0 #28
Updating ose-machine-os-images images to be consistent with ART #26
Full changelog
OCPBUGS-58763 : Bump github.com/golang/glog to v1.2.4 #105 OCPBUGS-42048 : Update owners #91 OCPBUGS-21372 : Update go.mod for CVE-2023-39325 [Release-4.14] #71 OCPBUGS-12640 : Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #67 Updating ose-multus-admission-controller images to be consistent with ART #65
Updating ose-multus-admission-controller images to be consistent with ART #64
Updating ose-multus-admission-controller images to be consistent with ART #62
Updating ose-multus-admission-controller images to be consistent with ART #57
Full changelog
OCPBUGS-48160 : [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket #262 OCPBUGS-35578 : Update owners file #243 OCPBUGS-33478 : Fix CNI cache update function to prevent nil access #232 OCPBUGS-26331 : Fix SAST scan issues for multus-cni-container [4.14] #220 OCPBUGS-21099 : Update go.mod for CVE-2023-39325 [Release-4.14] #194 OCPBUGS-19860 : Multus annotation permissions: Certificate duration should be configurable [backport 4.14] #192 OCPBUGS-19679 : Move chroot from multus main process to its child processes #189 OCPBUGS-19375 : Per node certification cherry-pick #185 OCPBUGS-19074 : Performance and efficiency improvements in daemon/server mode #181 Use container base image’s /etc/os-release to copy multus binary #179
Change /usr/src/multus-cni/bin to rhel8 based one #178
Cherry pick upstream fix #177
Upstream sync 202308 #176
This change introduces wait to generate config until API is ready #175
Upstream sync to 202307, 99c4481 #168
Add rhel9 binary for multus #173
OCPBUGS-13815 : Fix multus to support CNI plugin which does not create interface #162 OCPBUGS-12519 : Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #160 Updating multus-cni images to be consistent with ART #159
Updating multus-cni images to be consistent with ART #158
Updating multus-cni images to be consistent with ART #157
Updating multus-cni images to be consistent with ART #148
Multus entrypoint should regenerate kubeconfig if secret changes #153
Full changelog
Update owners (#62) #62
Update vendor package (#40) #40
OCPBUGS-21454 : Update go.mod for CVE-2023-39325 (#33) #33 OCPBUGS-974 : Sync upstream (#30) #30 Updating multus-networkpolicy images to be consistent with ART (#27) #27
Updating multus-networkpolicy images to be consistent with ART (#26) #26
Updating multus-networkpolicy images to be consistent with ART (#25) #25
Updating multus-networkpolicy images to be consistent with ART (#24) #24
Full changelog
OCPBUGS-42049 : [release-4.15]Update owners #60 15393552: Updating ose-multus-route-override-cni images to be consistent with ART #47
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #45
Revert ART changes to fix rhel9 base binary #44
Updating ose-multus-route-override-cni images to be consistent with ART #43
Fix Dockerfile to use rhel9 #42
Updating ose-multus-route-override-cni images to be consistent with ART #41
Add rhel9 binary #40
Updating ose-multus-route-override-cni images to be consistent with ART #36
Updating ose-multus-route-override-cni images to be consistent with ART #35
Updating ose-multus-route-override-cni images to be consistent with ART #34
Updating ose-multus-route-override-cni images to be consistent with ART #33
Full changelog
OCPBUGS-55620 : Fixes leftover podref issue #367 OCPBUGS-42047 : Update owners #311 OCPBUGS-37815 , OCPBUGS-37817 : [release-4.14] align api calls timeout and skip pods marked for deletion #309 OCPBUGS-36722 : Return previous IP allocation for add cmd #296 OCPBUGS-35263 : Use IP to identify orphaned allocation to be deleted #289 OCPBUGS-27858 : Enable reconciler configuration 4.14 #240 OCPBUGS-26553 : Cherry pick fix assignment 4.14 #230 OCPBUGS-21518 : update golang.org/x/net to v0.17.0 #207 Bug 16002 : Change default binary to RHEL8 image #172 OCPBUGS-15905 : Denormalize IP name before checking if pod is alive [Backport 4.14] #167 Bug 16136 : Introduce entrypoint.sh to call ip-control-loop based on RHEL ver #147 Downstream sync july23 #137
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #150
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #149
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #148
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #146
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #143
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #142
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #141
Restores RHEL specific binary copy and updates to rhel9/8 #140
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #136
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #130
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #129
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #128
OCPBUGS-11324 : respect requested allocation range when exluding ranges [backport 4.14] #121 Upstream sync 2023 03 29 #119
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #115
Full changelog
OCPBUGS-42971 : Collect etcd object count #457 OCPBUGS-48084 : Update owners #475 OCPBUGS-48058 : Support gathering IPsec data #472 OCPBUGS-43058 : [Backport 4.14] Multus is now a Pod and will be captured by normal #451 OCPBUGS-20429 : Revert “Add must gather script for network observability” #391 OCPBUGS-20354 : Removed workload partitioning annotation from ppc script #388 Use oc get daemonset to identify the NTO image #378
OCPBUGS-17907 : Revert “Added gathering script for SNOs with workload partitioning” #376 Split gather_network_logs into basics and extras #375
Added gathering script for SNOs with workload partitioning #373
Add csi-proxy logs collection in must-gather for Windows nodes #374
SDN-3687 : Support gathering DBs for OVNK-Interconnect mode #370 Collect information relevant to PerformanceProfile and low latency tuning #345
gather_network_logs: multus: Fix typo in error redirection #371
Collect leases.coordination.k8s.io from each namesapce #366
Create a generic “get_operator_ns” util function #368
Assert that only one subscription exists #367
MCO-608 : Gather MCO’s on-disk configs from degraded nodes #361 Gather ostree related bits #353
OCPBUGS-14984 : Collect Mellanox firmware information #365 OCPBUGS-14025 : Add gather_vsphere #363 NETOBSERV-987 : Add must gather script for network observability #357 Updating ose-must-gather images to be consistent with ART #358
OCPBUGS-10798 : Gather CSIStorageCapacity objects #356 OCPBUGS-11147 : network_logs: Gather multus resource yamls for namespaces #354 Updating ose-must-gather images to be consistent with ART #352
Full changelog
Add rhel9 binary #57
Updating ose-network-interface-bond-cni images to be consistent with ART #54
OCPBUGS-12327 : Updating ose-network-interface-bond-cni images to be consistent with ART #52 Updating ose-network-interface-bond-cni images to be consistent with ART #51
Updating ose-network-interface-bond-cni images to be consistent with ART #50
OCPBUGS-11190 : Ignore missing links during delete command #48 Update owners file #46
Align with upstream 14-04-2023 #45
Updating ose-network-interface-bond-cni images to be consistent with ART #44
Full changelog
OCPBUGS-58778 : Bump github.com/golang/glog to v1.2.4 (#115) #115 OCPBUGS-60394 : Replace e2e test image (#128) #128 swtich golint install method (#127) #127
Correct 4.16 owners file (#100) #100
Added METRIC_TEST_IMAGE var (#88) #88
Update the k8s dependencies to 1.27.7 (#82) #82
OCPBUGS-16594 : Update the dependencies to 0.27 (#79) #79 Revert “Remove e2e tests that consistently fail in 4.13 (#65)” (#76) #65
Updating ose-network-metrics-daemon images to be consistent with ART (#73) #73
Updating ose-network-metrics-daemon images to be consistent with ART (#72) #72
Updating ose-network-metrics-daemon images to be consistent with ART (#71) #71
Updating ose-network-metrics-daemon images to be consistent with ART (#70) #70
Full changelog
OCPBUGS-31862 : replace wireshark with wireshark-cli #122 OCPBUGS-22172 : Move commands to the function to avoid them being executed on -h. #94 OCPBUGS-20520 : Update scripts in network-tools to reflect the changes in IC model #92 ovn-db-run-locally: gracefully handle non-clustered dbs #84
Updating ose-network-tools images to be consistent with ART #81
Updating ose-network-tools images to be consistent with ART #78
Updating ose-network-tools images to be consistent with ART #76
Full changelog
changes the owners file (#1013) #1013
OCPBUGS-48513 : e2e: use same version of crane as in go.mod (#1023) #1023 Bump version to include v5.11.0 of go-git (#822) #822
Fix to ensure operator not found error exits with correct status (#797) #797
OCPBUGS-28871 : Capability to override default channel (#749) (#790) #749 OCPBUGS-19429 : Fix cross EUS channel upgrade path calculation (#769) #769 OCPBUGS-23327 : Fix MirrorToDisk of oci catalogs in hidden folders (#766) #766 skipping prune failure if manifest not found (#735) #735
OCPBUGS-21472 : fix: CVE-2023-39325 (#711) #711 Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) (#706) #704
Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#699) #699
OCPBUGS-17545 : Improve extracting opm binary from catalogs (#676) #676 OCPBUGS-7465 : Fix 401 Unauthorized due to stale auth token (#678) #678 Fix OCPBUGS-14402 - case where catalog is on a mirror from registries.conf (#682) #682
OCPBUGS-17998 : fix: ICSP with incorrect mirror path (#681) #681 OCPBUGS-17714 : Ensure errors are nil before closing registry to avoid… (#680) #680 CFE-825 : As a oc-mirror user, I would like mirrored operator catalogs to have valid caches (#651) #651 CFE-902 feat: removes go workspace due to incompatibility on ART builds (#672) #672
CFE-902 feat: adds go workspace to support multi-module (#670) #670
add go.mod files to testdata directories (#669) #669
fixing oc-mirror version when run from read-only fs (#660) #660
Make local storage port configurable via command line (#668) #668
Fix unit tests for local storage collector implementation (#667) #667
CFE-904 : Create AdditionalImage Collector implem. based on registry as localStore (#666) #666 v2 initial commit (#664) #664
OCPBUGS-13871 docs: changes the help message for oci-registries-config flag (#663) #663
OCPBUGS-11754 : add cleanup of /tmp directories (#655) #655 CFE-875 : Unlock MirrorToDisk and DiskToMirror workflows for local oci catalogs (#662) #662 Fix OCPBUGS-15329 - OCI index found, but accept header does not support OCI indexes (#658) #658
Enable mirroring of the multi release image (#657) #657
revendor to the latest oc (#656) #656
Replacing the hard coded path with graphDataMountPath (#585) #585
CFE-859 : Removing flag use-oci-feature starting release-4.14 (#622) #622 CFE-783 : A variety of changes needed for correct operation with multi architecture catalogs (#611) #611 MULTIARCH-3440 : refine multiarch support for test-unit and test-e2e using dockerfile and add ppc64le build to Makefile (#624) #624 Add ImageSetConfig examples (#610) #610
OCPBUGS-13871 : fix: changes on help info content (#653) #653 OCPBUGS-588 : minVersion in ImageSetConfiguration seems to be ignored (#603) #603 Fix OCPBUGS-14194 (#649) #649
Fix OCPBUGS-14402 (#652) #652
OCPBUGS-13332 : Create rfc 1035 compliant catalog source name (#636) #636 fix validateMapping OCPBUGS-13962 (#640) #640
adds Jeremy Peterson to OWNERS file (#644) #644
Chore: Remove Ross from OWNERS (#639) #639
OCPBUGS-13762 : make addRelatedImageToMapping multithreaded (#638) #638 Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#633) #633
OCPBUGS-11922 : paths not needed in ICSPBuilder interface (#634) #634 OCPBUGS-11910 , OCPBUGS-11922 : Limit the nested repository path while mirroring the images (#623) #623 CFE-658 : Implementation of filtering by channel for OCI catalog (#627) #627 OCPBUGS-4959 : oc-mirror error on second synchronisation with no change (#605) #605 Deprecate –use-oci-feature in favor of –include-local-oci-catalogs (#620) #620
Updating oc-mirror-plugin images to be consistent with ART (#619) #619
Update OWNERS for CFE team (#614) #614
Revert adding ‘–cache-dir /tmp/cache’ to catalog images (#613) #613
OCPBUGS-11371 : fix: skips bundles with ‘skips’ field on head bundle (#608) #608 fix: work around OCPBUGS-6741 by explicitly setting –cache-dir (#604) #604
OCPBUGS-2633 : Fix (#601) #601 OCPBUGS-7845 fix: changes the way the version is shown (#599) #599
OCPBUGS-10348 fix: changes to include the registry path (#600) #600
OCPBUGS-1060 fix: changes confusing error message (#598) #598
Fix OCPBUGS-8156: Upgrade to containerd v1.6.18 (#593) #593
Bugfix check imagesetconfig for valid oci protocol when oci feature is used (#573) #573
Remove “unsupported” wording from info on console (#577) #577
Fix OCPBUGS-5168: Upgrade helm.sh/helm/v3 to v3.11.2 fixing CVE-2022-23526 and CVE-2022-23525 (#580) #580
OCPBUGS-10051 : fix: remove catalog reference from ImageContentSourcePolicy.yaml (#586) #586 Updating oc-mirror-plugin images to be consistent with ART (#575) #575
Bugfix for destination registry nested paths length (#572) #572
fix extract dir for cincinnati-graph-data container (#582) #582
OCPBUGS-8216 : fix: remove an unecessary error message (#579) #579 docs: add information about unsupported scenario (#574) #574
Full changelog
: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
OCPBUGS-23358 : [release-4.14] Address http2 vulnerability #53 OCPBUGS-21379 : Bump golang.org/x/net from 0.15.0 to 0.17.0 #39 OCPBUGS-16793 : openshift/Dockerfile: exclude unpack binary from FIPS build overrides #33 Rename downstream overlay from service-ca-operator to openshift #32
UPSTREAM: <carry>: add manifests to image #31
Makefile,manifests: Add skeleton of default rukpak resources #18
Introduce barebones build and unit testing GH actions #14
Skeleton - k8s provisioner #7
update README to include latest APIs #5
Introduce a sanity github action check #3
Init API defs #1
Add barebones OWNERS file #2
And 464 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-57940 : Set node-pullsecrets volume to read-only to protect image pull credentials #398 OCPBUGS-56951 : Empty proxy variables are causing issues during the build #386 OCPBUGS-48480 : Add team members to the OWNERS file #360 NO-JIRA: cleanup root and app OWNERS #349
OCPBUGS-32869 : replaces deprecated square/go-jose wtih go-jose/go-jose #342 OCPBUGS-41951 : Add adambkaplan as approver #334 [release 4.14] OCPBUGS-33288: Update opentelemetry dependency #295
OCPBUGS-28950 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286 OCPBUGS-18980 : Disable Build and DeploymentConfig Informers if their caps are disabled #271 use constant controller names #265
OCPBUGS-16071 : Updating Kubernetes and other associated dependencies #263 update runtime-utils for idms migrations #243
OCPBUGS-14461 : Kubernetes 0.27 #261 Updating ose-openshift-controller-manager images to be consistent with ART #260
Updating ose-openshift-controller-manager images to be consistent with ART #259
Updating ose-openshift-controller-manager images to be consistent with ART #258
Updating ose-openshift-controller-manager images to be consistent with ART #253
OCPBUGS-10588 : mount build.Spec.Source.ConfigMaps for custom builder images #254 Add Divyanshu Agrawal as a reviewer #256
Full changelog
OCPBUGS-67853 : Bump logrus #189 OCPBUGS-35337 : Correct out-of-bounds check #173 OCPBUGS-34792 : Make Cinder CSI Driver Topology feature configurable #162 OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153 OCPBUGS-26460 , OCPBUGS-26461 : [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #142 OCPBUGS-21573 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #135 STOR-1436 : Restart openstack-cinder-csi-driver-controller Pods if metrics-serving-cert changed #128 Remove Dockerfile.rhel7 #126
Configure User Agent #123
OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #119 OCPBUGS-16783 : Chore: Update OWNERS and OWNERS_ALIASES #121 OCPBUGS-16526 : Bump library-go to remove dependency on goproxy #122 OCPBUGS-16678 : Fix SCC admission failure race during initial deployment #120 Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #118
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #117 OCPBUGS-14824 : Bump cinder-csi-driver-operator library-go #116 STOR-1168 : Bump common libraries #115 Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #113
OCPBUGS-12651 : Bump golang.org/x/net@v0.9.0 #114 Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #112
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #111
OSASINFRA-3000 Prefer a Cinder CSI-specific config map #82
OCPBUGS-8683 : Add management workloads annotations #109 Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #108
Full changelog
OCPBUGS-32428 : Ensure portSecurity is correctly set in the Instance Ports #109 OCPBUGS-23202 : Don’t build InstanceSpec during delete operations #95 Bug OCPBUGS-18806: Set controller’s SyncPeriod to 1 hour #81
Bump CAPO to match branch release-0.7 #80
Configure User Agent #75
Update README #77
OCPBUGS-16586 : Bump goproxy #74 Rework how we build the container image #76
go.mod: Upgrade Gophercloud to v1.5.0 #73
OSASINFRA-3063 : Bump CAPO to v0.7.2 #72 Updating ose-machine-api-provider-openstack images to be consistent with ART #70
Updating ose-machine-api-provider-openstack images to be consistent with ART #69
Updating ose-machine-api-provider-openstack images to be consistent with ART #68
OCPBUGS-8687 : machineset_controller: Stop caching clouds credentials #63 OCPBUGS-2153 : Use TenantID if ProjectID is empty #61 Updating ose-machine-api-provider-openstack images to be consistent with ART #60
Full changelog
OCPBUGS-61469 : [release-4.14] Add NetworkPolicy as a supported kind #1052 OCPBUGS-61390 : [4.14] e2e stability fixes #1085 OCPBUGS-46927 , OCPBUGS-46934 , OCPBUGS-47314 : x/net bump to v0.34.0 [release-4.14] #941 OCPBUGS-46595 : CRD upgrade existing CR validation fix (#3442) #921 OCPBUGS-45080 : SSA for Services and ClusterRoleBindings #905 OCPBUGS-42828 : add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #878 OCPBUGS-41872 : Fix e2e flake: upgrade CRD with deprecated version #865 OCPBUGS-42150 : (fix) registry pods do not come up again after node failure (#3366) #872 OCPBUGS-42017 : adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #869 OCPBUGS-38544 : (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #842 OCPBUGS-36949 : [CARRY] perform operator apiService certificate validity checks directly #821 OCPBUGS-37016 : Bump github.com/containers/image/v5 #824 OCPBUGS-36452 : Can’t install operator on 4.15 after uninstalling it on a prior version #811 OCPBUGS-31969 , OCPBUGS-31970 : UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #787 OCPBUGS-35230 : Unblock CI #771 OCPBUGS-33356 : UPSTREAM: <carry>: bump go-jose #743 OCPBUGS-30775 : [4.14] bump grpc to 1.60.1, reconnect idle connections (#3147) #715 OCPBUGS-29192 : [release-4.14]: Clear (existing) error cond from Subscription, once error resolved #686 OCPBUGS-29194 : Retry failing unpack jobs #689 NO-ISSUE: [release-4.14] Backport e2e fixes to 4.14 #674
OCPBUGS-27314 : Don’t sync namespaces that have no subscriptions #675 OCPBUGS-27565 , OCPBUGS-27570 , OCPBUGS-27650 , OCPBUGS-27655 : bump go-git/v5 to 5.11.0 #677 OCPBUGS-27485 : [CARRY] SSC RBAC #665 OCPBUGS-22538 : bump otelhttp to 44.0 for api #647 OCPBUGS-22538 : otelhttp bump [release-4.14] #632 OCPBUGS-20829 : [releaser-4.14] Fix apiserver vulnerability #608 OCPBUGS-23212 : Do not derive installplan.spec.clusterServiceNames from bundle IDs #607 OCPBUGS-18904 : [release-4.14] Improve Leader Election Hand Off #605 OCPBUGS-23508 : [release-4.14] Use generated namespaces in e2e tests #614 OCPBUGS-20400 : Add OLMConfig API to control package server sync interval [release-4.14] #582 OCPBUGS-19789 : Backport OCPBUGS-14698: Rename ClusterRoles created by OperatorGroups [release-4.14] #566 OCPBUGS-22134 : [release-4.14] Bump golang.org/x/net to v0.17.0 #587 OCPBUGS-17950 : Make packageserver wakeup interval configurable #555 scripts/bumper: automate pushing changes and creating PRs #550
OCPBUGS-17157 : scripts: add a Go-based bumper, sync upstream #534 Add ncdc to DOWNSTREAM_OWNERS #539
OPRUN-3022 : Add support for make verify to sync script #537 Add tmshort to owners #535
fix the manifests generation #533
Sync 2023 08 04 #532
OCPBUGS-17157 : sync #531 OCPBUGS-17157 : operator-registry: cherry-pick to be up-to-date #526 OCPBUGS-17157 : cmd/package-server-manager: add pprof endpoints #527 OPRUN-3021 : Improve README #529 OPRUN-2913 : Sync api, operator-registry, operator-lifecycle-manager downstream #510 OPRUN-2913 : Add DOWNSTREAM_OWNERS #520 OCPBUGS-10178 : Updating operator-lifecycle-manager images to be consistent with ART #470 Allow cpb to be statically compiled / exempt from FIPS compliance #511
update verification script to work across non-standard bash location #505
OCPBUGS-13128 : Retry initialization error conditions (#2979) #502 Updating operator-registry images to be consistent with ART #495
OCPBUGS-13526 : fix dynamic conversion webhook #490 OPRUN-2995 : Remove dependency on cluster policy controller in favor of hardcoding #498 OPRUN-2941 : update cluster-policy-controller dependency #494 OCPBUGS-13789 : downstream y-streams-for-all semver template changes. #489 OCPBUGS-1684 : Optimize certificate generation #486 METAL-575 : Revert “Mutate service monitor manifests to include tlsConfig cert an… #478 OPRUN-2892 : Update service-monitor tls config #368 OCPBUGS-6016 : UpdateStrategy RegistryPoll with nil Interval #468 OCPBUGS-7910 : Sort channels in lexicographical order in Packagemanifestst (#2925) #476 OCPBUGS-7431 : Registry Pod Controller Flag #460 Update sync script #472
OPECO-2737 : Veneer template rename #461 fix pop_candidate script #467
Updating operator-registry images to be consistent with ART #469
OPECO-2646 : exclude bundles with olm.deprecated property when rendering #463 Full changelog
15143237: Updating ose-ovirt-machine-controllers images to be consistent with ART #174
Full changelog
OCPBUGS-36095 : Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #90 OCPBUGS-33637 : Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 #81 OCPBUGS-25980 : Rebase with upstream: Fix snyk code issue: Path Traversal #72 OCPBUGS-24713 : synk: ignore vendor dir #60 OCPBUGS-21112 : CVE-2023-39325 - Update net dependencies - 4.14 #51 cherry-pick: Improve delete device failure logs in driver node #48
OCPBUGS-17309 : Updated golang.org/x/net/html dependency. #43 Rebase with upstream: v0.4.0 changes #42
Rebase: upgrading go modules #40
Rebase with upstream: reduce multipathd usage (OCPBUGS-16878) #39
Rebase with upstream: removed panic and some cleanup #38
Rebase with upstream #37
Package device-mapper-multipath added #36
Merging upstream code with downstream #33
OCPBUGS-12922 : Updated net dependencies #29 OCPBUGS-12716 : Updating ose-powervs-block-csi-driver images to be consistent with ART #30 Updating ose-powervs-block-csi-driver images to be consistent with ART #26
Full changelog
OCPBUGS-67860 : Fix CVE-2025-65637 by bumping logrus to v1.9.1 #100 OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58 OCPBUGS-25715 : snyk: ignore vendor dir #60 OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #48 OCPBUGS-21203 : CVE-2023-39325 - Update net dependencies - 4.14 #40 Update OWNERS add yussufsh #44
STOR-1438 : Restart controller Pods if metrics-serving-cert changed #36 OCPBUGS-16531 : Upgraded openshift/library-go to remove indirect references to goproxy. #35 OCPBUGS-16654 : Rename sidecar binding RBACs #32 OCPBUGS-16783 : Chore: Update OWNERS #33 STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #31 OCPBUGS-14824 : Bump ibm-powervs-block-csi-driver-operator library-go #30 OCPBUGS-12925 : Updated net dependencies #26 Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #25
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #24
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #23
Adding storage team to OWNERS so they can perform lib-go updates. #21
OCPBUGS-8683 : Add management workloads annotations #20 Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #19
Full changelog
OCPBUGS-36105 : UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.14 #75 OCPBUGS-24727 : UPSTREAM: <carry>: snyk code scan exclude vendor directory #54 OCPBUGS-21299 : CVE-2023-39325 - Update net dependencies - 4.14 #45 UPSTREAM: <carry>: Add check for valid Power VS instance id #42
Manual rebase to k8s 1.27 and go 1.20 #40
Revert images golang 1.18 #38
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #37
Revert build_image to the one currently specified in release repo #36
OCPBUGS-12921 : Updated net dependencies #33 Updating ose-powervs-cloud-controller-manager images to be consistent with ART #31
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #30
Full changelog
Bump openshift/prom-label-proxy to v0.7.0 #356
OCPBUGS-12293 : Update 4.14 prom-label-proxy image to be consistent with ART #355 Updating prom-label-proxy images to be consistent with ART #353
Full changelog
OCPBUGS-43670 : fix(discovery): Handle cache.DeletedFinalStateUnknown … #239 OCPBUGS-22531 : bump otel dependencies #183 OCPBUGS-21262 : update golang.org/x/net to v0.17.0 [4.14] #176 Bump openshift/prometheus to v2.46.0 #167
Bump openshift/prometheus to v2.45.0 #166
Bump openshift/prometheus to v2.44.0 #164
Dockerfile.ocp: update note about UI assets after switching to embed #165
OCPBUGS-12996 : Add missing assets after manual merge #162 OCPBUGS-12825 : Updating golang-github-prometheus-prometheus images to be consistent with ART #160 Bump openshift/prometheus to v2.43.0 #158
Updating golang-github-prometheus-prometheus images to be consistent with ART #156
Full changelog
OCPBUGS-30015 : fix: convert continue field between v1beta1 and v1alpha1 #279 OCPBUGS-20881 : fix: disable HTTP2 connections by default #253 OCPBUGS-20881 : Bump golang.org/x/net to v0.17.0 #247 Bump openshift/prometheus-operator to v0.67.1 #240
Bump openshift/prometheus-operator to v0.67.0 #239
OCPBUGS-14466 : bump openshift/prometheus-operator to v0.66.0 #236 OCPBUGS-14033 : cmd/prometheus-config-reloader: add SIGTERM handler #234 OCPBUGS-1626 : [bot] Bump openshift/prometheus-operator to v0.65.1 #233 OCPBUGS-12324 : Update 4.14 prometheus-config-reloader image to be consistent with ART #230 Updating prometheus-operator images to be consistent with ART #229
Updating prometheus-config-reloader images to be consistent with ART #227
Updating prometheus-operator-admission-webhook images to be consistent with ART #226
Updating prometheus-config-reloader images to be consistent with ART #225
OCPBUGS-10109 : Updating openshift-state-metrics images to be consistent with ART #221 OCPBUGS-10137 : Updating openshift-state-metrics images to be consistent with ART #222 Updating prometheus-operator images to be consistent with ART #220
Full changelog
OCPBUGS-21162 : (4.14) upgrade golang.org/x/net to v0.17.0 #134 Bump openshift/node_exporter to v1.6.1 #130
OCPBUGS-12714 : Bump openshift/node_exporter to v1.6.0 #129 OCPBUGS-12507 : Upgrade golang.org/x/net to v0.10.0 to fix the CVE #128 Updating golang-github-prometheus-node_exporter images to be consistent with ART #122
Updating golang-github-prometheus-node_exporter images to be consistent with ART #120
Full changelog
OCPBUGS-21576 : bump(k8s,openshift) to address CVE-2023-44487 [4.14] #34 refactor route controller manager to use library-go server and ControlerCommand for generic setup #28
add dummy flags needed for a switch to library-go server and ControlerCommand #29
Revert “[WRKLDS-730] refactor route controller manager to use library-go server and ControlerCommand for generic setup” #25
refactor route controller manager to use library-go server and ControlerCommand for generic setup #22
WRKLDS-700 : bump(k8s) to v0.27.1 #21 Updating ose-route-controller-manager images to be consistent with ART #19
Updating ose-route-controller-manager images to be consistent with ART #18
Updating ose-route-controller-manager images to be consistent with ART #17
Full changelog
OCPBUGS-34830 : fix issuer check during JWT authentication 4.14 #539 OCPBUGS-32888 : update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 #535 OCPBUGS-22647 : go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #494 OCPBUGS-21349 : [release-4.14]: Bump golang.org/x/net to v0.17.0 #484 OCPBUGS-16397 : Nutanix OCP cluster telemetry data “host_type” shows “virt-unknown” #474 chore: bump github.com/prometheus/prometheus to v0.45.0 #475
: fix mtls secret generation #473
Revert wrong cert name change of #455 #472
: add secret for external mtls connection #470
MON-3230 : Add TLS auth to telemeter-client #455 jsonnet: Add config to support rhelemeter #468
Improve debug roundtripper logs #467
Fix integration test documentation #461
Fix path benchmark #466
Add RHEL POC server #465
OCPBUGS-12345 : tools: update to golangci-lint v1.51 #464 OCPBUGS-12678 : Update golang.org/x/net to lastest version #462 add thibaultmg in OWNERS file #459
Update OWNERS #456
Use receive handler logger #450
OCPBUGS-10169 : Updating telemeter images to be consistent with ART #452 Filter noisy logs from TCP probes #453
Add douglascamata as reviewer and approver #454
Full changelog
OCPBUGS-74302 : Skip E2e: attach on previously attached volumes should work #30727 OCPBUGS-63674 : Fix regex parser #30391 OCPBUGS-61233 : images/tests: Remove rteval #30208 OCPBUGS-55747 : [build] Ensure Git Clone Does Not Run Privileged #29758 OCPBUGS-54770 : Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29665 OCPBUGS-52583 : Use payload pullspec for image info test #29591 OCPBUGS-51363 : Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29567 OCPBUGS-51044 : Add/remove team members to the OWNERS file for Builds #29554 OCPBUGS-44107 : Adjust createDNSPod() to support hypershift dual-stack test #29256 OCPBUGS-39137 : Bump timeout for the pod-network-service endpoints check #29062 OCPBUGS-38365 : add Proxy config #28998 OCPBUGS-36800 : Removes dependency on samples operator images #28952 #28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28792
#28745 FIX [release-4.14] OCPBUGS-33022: update egressFWTestE2E image which contains ping binary #28899
OCPBUGS-36464 : test/extended: skip etcd leader change check on hypershift #28921 OCPBUGS-35475 : Use centos7 tag instead of latest for cmd images tests #28881 OCPBUGS-33417 : Provide SCC access via RBAC #28806 OCPBUGS-33563 : Adjust the method of get the apiServer (release-4.14) #28763 OCPBUGS-29970 : Do not assume there is just a single kubelet systemd service #28620 OCPNODE-2101 : add kube-rbac-proxy-crio toleration change #28647 OCPBUGS-29928 : Only extract node role from properly formatted node-role label #28616 OCPBUGS-29182 : updated timeout to 3 seconds to account for network timing issues #28578 OCPBUGS-29034 : Replace ‘coreydaley’ with ‘sayan-biswas’ #28574 OCPBUGS-26044 : Adding test case for when exceed openshift.io/image-tags will ban to … #28493 OCPBUGS-21774 : backport #28316 to 4.14 release #28335 Revert “[release-4.14] OCPBUGS-22720: Use Centos 8 Stream mysql image in tests” #28368
OCPBUGS-23042 : tolerate AWS edge nodes on monitor tests #28387 OCPBUGS-23145 : Bump watch requests for cluster-baremetal-operator #28385 trt-1340: backport exact and disable monitor tests options to 4.14 #28391
OCPBUGS-19923 : Updating parameters for build timing PushImage test #28291 OCPBUGS-22411 : fix: increase upper bounds for samples operator #28356 OCPBUGS-22720 : Use Centos 8 Stream mysql image in tests #28365 OCPBUGS-22389 : Remove all docker.io images due to access denied #28355 OCPBUGS-21774 : backport https://github.com/openshift/origin/pull/28238 to 4.14 release #28333 Revert #28304 “OCPBUGS-20308: Backport PR 28295 and 28238” #28314
OCPBUGS-20308 : Backport PR 28295 and 28238 #28304 OCPBUGS-19903 : kubevirt: add live migration tests #28281 wait for the service to have endpoints before starting pollers #28279
some monitor tests only function on disruptive tests #28287
OCPBUGS-19718 : rteval #28276 OCPBUGS-19547 : fix: add rteval to the test image #28269 TRT-1244 : Bump aws-ovn upgradeDurationLimits to 130 #28265 OCPBUGS-19061 : Remove duplicate connection type from disruption name #28260 USHIFT-1590 : skip failing invariants in MicroShift #28193 Revert “created persistent volume claims can not exceed the limitation” #28232
Revert “in-cluster disruption: ensure that only one monitor is started in cluster” #28230
created persistent volume claims can not exceed the limitation #28224
Revert “Fail on APIs removed in the next release” #28227
OCPBUGS-13158 : in-cluster disruption: ensure that only one monitor is started in cluster #28081 Fail on APIs removed in the next release #27561
Service invariant #28202
prevent secondary errors reported in prior steps #28221
OCPBUGS-17477 : requestheader: wait for only 3 oauth-servers to be available #28161 [test/extended/networking] Rename ovnkube containers #28219
Reduce usage of dcs #28212
Do not fail etcd storage path test for GVRs that are not served. #28214
move graceful shutdown to monitor test #28201
move PDBUnhealthyPodEvictionPolicy from TP to beta #28206
if no openshift-tests image can be auto-detected or specified, skip it #28207
allow failures for tests intentionally producing failures #28211
fix *-to-host sampler failure calculation #28209
skip test with intermittent serial problems #28208
point host network, network disruption at the kubelet #28191
migrate some watching code to monitortests #28188
fail if no sampler output is found for the poller #28198
Fix possibility of intervals without from/to by requiring when we Build() #28182
OCPBUGS-17497 : Skip invariant load balancer test for None platform #28180 tolerate cluster without clusterversion #28197
select poller image from payload #28194
AUTH-409 : bump o/k for the updated PSa labels #28192 Fixes openshift-tests dry-run failure asking for KUBERNETES_MASTER #28165
TRT-930 : Update test to support 2 release query_results.json #28149 add e2e non-functional test for required-scc SCCs #28142
Add a test to flake if we see NetworkManager log “too many netlink events” #28098
OCPBUGS-16615 : Making prometheus telemetry test flake #28181 update watch-endpoint-slices to usable shape #28184
add comments requested in review #28186
rebrand invariant tests as monitor tests #28185
basic setup of podNetwork disruption tests #28179
start the watch-endpoint-slice command #28169
stop sampling when we stop #28178
run start and collect in parallel #28174
only close node ready if the node was not ready before #28170
make monitor command separately runnable #28168
OCPBUGS-15726 : add tests for openapi v3 #28129 fix microshift fix that broke all disruption #28175
Add stlaz and p0lyn0mial to OWNERS #28166
OCPBUGS-15726 : Revert “temporarily disable oc explain tests until openapi/v3 is working” #28155 Add some tests for event interval generation #28163
USHIFT-1464 : skip TestFrontProxy for MicroShift #28064 upgrade distribution to v3 #27958
Skip external service monitoring invariant for microshift #28160
Refactor e2e-test intervals to use the new locator builder #28099
OCPBUGS-16166 : Update to Kubernetes 1.27.4 #28147 Remove obsolete buildanalyzer tool #28158
Bug OCPBUGS-17483: Skip invariant load balancer test for OpenStack #28154
be sure the exit code fails when the invariant tests fail #28152
OCPBUGS-17351 : Skip some invariants in microshift #28136 OCPBUGS-16166 : disable 2 tests in preparation to land k8s 1.27.4 #28148 Fix kubevirt test flake caused by pod name collision #28153
move the discovery filtering into suite filtering instead of post filtering #28145
move remaining disruption tests to invariants #28144
Disable EgressIP test termporarily due to OVN-K bug #28146
Bug OCPBUGS-6778: Correct condition for rejecting connection #27876
USHIFT-1484 : skip prometheus alerts for MicroShift #28070 remove unnecessary global modification from upgrade #28143
OCPBUGS-16615 : Moving Prometheus reporting telemetry to serial jobs #28138 OCPBUGS-15568 : Set quota wait timeout to 1 minute #28071 rough package alignment #28131
return calculated intervals #28141
move existing invariant tests #28130
remove extraneous layering for the monitor #28127
Fix ClusterOperator tests that can only report failures #28120
properly categorize the stop and start intervals #28139
MON-1960 : Remove exceptions for alert annotations #28118 Revert invariant and other refactors #28133
Remove exception on KubeSchedulerDown runbook #28126
expedient engineering: inject intervals into recorded events from out… #28128
Add Fabio and remove Stefan from image approvers #28125
separate the run, run-upgrade, and run-test #28121
Remove enabling multinetwork policy #28116
OCPVE-292 : OCPVE-293: OCPVE-294: feat: added a realtime latency test suite #28110 Update image mirroring instructions to handle uncompressed layers #28101
protect against nil panic on unassigned disruption adapter #28123
fix: workload partitioning - added more error handling for retry attempts #28111
Revert “adds legacy disruption to invariant tests” #28117
adds legacy disruption to invariant tests #28104
refactor command line start for openshift-tests #28107
oauth requestheaders: gather oauth-server logs as admin #28114
Automated - Update synthetic test data #28108
SDN-4042 : Increase total upgrade time on OVN platforms #28074 Update image stream test to create a manifest list image by default #28017
Adjust interval builder before we continue porting #28109
Put times in UTC to allow local testing; use asserts where we can #28091
feat: make data gathering more robust #28102
remove suite hook configuration and make information flow one-way #28090
USHIFT-1463 : add [apigroup] annotation to skip tests for MicroShift #28061 OCPVE-318 : feat: add node validation for workload partitioning #28056 Unrevert pull request #28069 from dgoodwin/interval-builder #28095
Disruption reverts #28093
AUTH-401 : test/e/authorization/pod_security_admission: add e2e test for pinning SCCs #28092 fix logic – If error, return current time; else return log line time #28084
add interface for future invariant tests #28077
Interval Building Phase 1 #28069
create a recorder interface that separates monitoring from recording #28080
remove unnecessary options and make monitor act like controller #28079
Fix retrieval of virt-launcher pod of the guest node #28082
Fix usage of priviliged pods in sig-kubevirt test cases #28078
trt-1150: move lock so prevent multiple file updates in single commit #28065
finish scrubbing out sampler #28076
Automated - Update synthetic test data #28072
MON-3280 : enable etcd metrics check again #28049 OCPBUGS-13158 : Run new tests which monitors in-cluster API server disruption as daemonsets on masters/workers #27909 fix: add missing namespaces to exclude list #28060
Update S2i Image tests for removing nodejs 14 ubi8 eol #28058
only close intervals if they are open #28059
USHIFT-704 : skip [sig-cli] whoami result with console for MicroShift #28005 ignore machine api capability #28052
ODC-7333 : Add consolesamples to the exception list of CRDs without a status #28057 Handle partial discovery results in DoesApiResourceExist. #28047
Remove audit id from sample err #28043
Remove sampler #27960
ODC-7333 : Add consolesamples to the list of console resources that all users should have read access #28045 OCPBUGS-15893 : Update permission to incl. watch for helmchartrepositories for console users #28044 Automated - Update synthetic test data #28014
increase cloud-credential-operator watch since we added a self-clusteroperator watch #28046
OCPBUGS-15291 : Update broken dc tests due to deprecation warning #28041 Enable Azure platform check in external cloud provider test #27776
update pathological event namespace label to be unambiguous #28038
multinetpolicy: use RetryOnConflict to reduce flakes #28035
USHIFT-1379 : skip must-gather tests for MicroShift #28015 Provide more detailed information when extracting binary fails #28034
test: extended: deployment: use correct apigroup for imagestreamtags #27689
Add logs in clusterquota test for more verbosity #28032
OCPBUGS-15500 : Avoid panic attempting to process interval logs #28012 Add test checking nodes are in proper read state before upgrade #28028
trt-1030: 80s for service lb under test #28004
OCPBUGS-15835 : remove references to registry.centos.org #28029 OCPVE-379 : fix: avoid checking resources for BestEffort pods #28006 OCPBUGS-15568 : Increase clusterquota wait timeout from 10 to 30 seconds #28026 OCPBUGS-15558 : retry promql a few times to mask i/o timeouts #28010 AUTH-377 : Add oauth-server redirect URI validation e2e tests #27922 temporarily disable oc explain tests until openapi/v3 is working properly #28022
USHIFT-647 : skip non-existing resources from security.openshift.io #27897 trt-1117: Test for update lease errors #28020
print out deployment for incorrectly scheduled pods #28011
OCPBUGS-14425 : Skip CCM upgradable condition on AlibabaCloud #27967 Update “verify that nodes have no unexpected reboots” test #28016
allow cluster-config-operator to manage featuregate upgrade block #28009
add a networking alert for OVNKubernetesResourceRetryFailure #28008
add debugging info for cluster not ready to upgrade #28007
OCPVE-378 : feat: remove skip, allow check on all platforms regardless #27911 Report external binary usage #28000
Changing the severity of “missing runbook_url annotation for critical alerts” test case from flaky to failure #27987
disruption refinement for availability, not latency. #28003
TRT-1097 : add KubeMemoryOvercommit to specific test so that the general test doesn’t fail #28002 OCPBUGS-11652 : Enable oc adm node-logs #27992 skip reboot test when machineconfigs not in target cluster #27999
OCPBUGS-15291 : [sig-cli] oc idle: get a dc name through labels instead of parsing oc create output #27998 Automated - Update synthetic test data #27995
Flake ci-cluster-network-liveness and new backend disruption failures to avoid payload rejections #27990
verifies number of node reboots even for HA #27994
OCPBUGS-13379 : machines: add a test which verifies number of node reboots #27993 strip operator framework from resource watch and fix bugs #27972
Fix panic in loki upload #27991
Replace dashes in locator keys for upload to loki, add namespace label when possible #27983
Automated - Update synthetic test data #27982
Update kubevirt LB connectivity tests to work with AWS ELB #27978
STOR-1263 : Bump (openshift/kubernetes): to get openshift/kubernetes#1595 #27970 add shutdown interval for apiserver from events #27919
Update expected name for OVN acl logging test #27974
Updated pathological events #27942
new disruption backend #27838
OCPBUGS-14667 : Revert “MON-3213: Changing the severity of “missing runbook_url annotation for critical alerts” test case from flaky to failure” #27969 MON-3213 : Changing the severity of “missing runbook_url annotation for critical alerts” test case from flaky to failure #27933 push intervals to loki #27930
USHIFT-1300 : Avoid getting cluster state for TEST_PROVIDER env var #27964 hard monitor.Event message creation #27946
ETCD-425 : restore test should validate state #27921 OCPBUGS-14338 : test/extended/prometheus: increase telemetry series threshold #27959 Running tests using external binary #27570
OCPBUGS-14321 : Increase timeout in sysctl allowlist test #27955 remove legacy recovery tests #27917
OCPBUGS-13649 : add tests for ClusterResourceQuota: count should work for all resources #27934 MON-3219 : Clear missing summary/description annotation test case exception #27944 OCPBUGS-13788 : 2x Revert “test/extended: Add MultiNetworkPolicy IPv4/IPv6 test cases” #27926 #27927 OCPBUGS-14125 : Move from registry.centos.org to quay.io #27945 LoadBalancer network connectivity test cases for HyperShift+KubeVirt #27931
Revert “Add coverage for GET verb and websocket handshake to SCC exec tests.” #27943
update the PDB resource to point to resource, not kind #27938
fix oc explain status and spec verification #27937
Add coverage for GET verb and websocket handshake to SCC exec tests. #27836
test/extended/prometheus: fix test with enabled telemetry #27915
bump(k8s.io/kubernetes) #27935
Automated - Update synthetic test data #27920
Change oc annotate cli test output check string #27932
Migrate set-image.sh to go based test #27863
STOR-1263 : Rebase 1.27.1 #27894 Update etcd team lead #27928
Revert “test/extended: Add MultiNetworkPolicy IPv4/IPv6 test cases” #27926
trt-1032: update upperbounds based on recent failures #27923
OCPBUGS-6586 : oc idle: increase wait timeouts to 60 sec #27913 test/extended: Add MultiNetworkPolicy IPv4/IPv6 test cases #27795
Mark ErrorReconcilingNode macAddress not found as known and with existing BZ #27918
OCPBUGS-13366 : ignore repeated TopologyAwareHintsDisabled events #27916 OCPBUGS-13372 : Add missing error check in sysctl allowlist test #27914 trt-900: log risk-analysis errors but don’t pass back up #27898
Automated - Update synthetic test data #27908
OCPBUGS-5943 : Revert “ignore repeated TopologyAwareHintsDisabled events” #27815 Reactivate netpol tests #26775
Adjust thresholds for reasonable upgrade durations #27905
Fix up the chart so the “Not” column is lined up #27886
Automated - Update synthetic test data #27861
OCPBUGS-12447 : Add intervals and test for ovs-vswitchd unreasonably long poll interval #27889 WRKLDS-665 : Enable [sig-scheduling] SchedulerPreemption [Serial] validates pod disruption condition is added to the preempted pod [Suite:openshift/conformance/serial] #27874 TRT-856 : DNS and disruption overlap test #27826 OCPBUGS-11944 : use tokenrequest from lib-go #27883 CCO-367 : Allow CCO to be Upgradeable=False when credentialsMode=Manual #27887 add anonymous cert detection test case #27890
Render html from monitor #27853
PSa podspec exporter e2e: don’t specifically add seccompProfile to the podspec #27756
ETCD-417 : add a new basic etcd backup/restore test #27875 test/extended: cpu-partitioning: skip cluster infrastructure for Hypershift #27884
OCPNODE-1257 : feat: remove custom node wait logic for upstream framework call #27882 Add (optional) dual-stack tests to the CNI certification test suite #27807
Trt-945 detect master node updates #27851
Updating openshift-enterprise-tests images to be consistent with ART #27793
Move selfsubjectreviews RBAC rule to the right place #27873
Add git retry to run resource watch #27865
Update ETCD storage data for k8s 1.27 #27871
OCPBUGS-11652 : disable oc adm node-logs #27867 NE-1243 : Validate TCP DNS local endpoint preference as well as UDP. #27791 Add selfsubjectreviews RBAC rules #27866
ETCD-399 : Add recovery suite to openshift-test cli #27869 add specific test for failing cgroups path #27852
not rely on deterministic pod names in oc debug tests #27842
Revert “TRT-889: Temp flake all azure disruption” #27843
add wait for ingress to be responsive before beginning upgrade #27857
Allow cluster daemonsets to use maxSurge #27819
retry getting the URL for routes until we succeed #27854
bump timeout #27849
OCPBUGS-11215 : fix: add namespace annotation helper for egress cni test #27834 negative filtering #27829
OCPBUGS-11072 : Add test for Egress Firewall node selector #27824 upkeep: updated query results #27835
Revert “Make unidle test more strict” #27833
OTA-824 : test/extended/cli/admin: Test ‘oc adm release extract –file image-references …’ #27822 STOR-1272 : DisableSC test should ignore in-tree storage classes #27814 add apiserver availability timeline events #27828
OCPBUGS-9831 : Make unidle test more strict #27673 remove runresourcewatch git lock file on failure #27820
Improve the disruptive suite description #27823
OpenStack: Restore in-tree cinder provisioner tests #27789
Add Divyanshu Agrawal as a reviewer #27821
Enable AWS platform check in external cloud provider test #27777
OCPBUGS-10824 : fix: add poll to get deployment status and avoid false positive #27818 Add a test case checking for cluster upgradeability #27806
Gather more interesting etcd pod logs for issues we’re debugging #27816
Strip ANSI control characters from junits #27801
Automated - Update synthetic test data #27703
move IsTechPreviewNoUpgrade function to exutil and reuse everywhere #27787
Mark previous pathological events so they get added to spyglass charts #27743
CNF-5652 : Add cpu partitioning tests #27770 Revert “Revert “Add vlan/macvlan/ipvlan incontainer master tests”” #27775
Separate pathological event tests for all known namespaces #27774
Scan etcd logs for dropped internal raft messages #27798
Add intervals, synthetic test, and charting for etcd “slow fdatasync” pod log messages #27772
OCPBUGS-8092 : Fix mounted volume expansion tests #27782 Specify Audit-ID to identify disruption requests in api audit logs #27780
TRT-889 : Temp flake all azure disruption #27781 OCPBUGS-8483 : Revert “Switch to readyz path for health probes on Azure” #27771 WRKLDS-657 : add test for UnhealthyPodEvictionPolicy for PDBs #27768 Enable vSphere platform check in external cloud provider test #27638
Realtime Kernel Tests #27751
OCPBUGS-8310 : Bump to 1.26.2 #27764 And 7 elided commits (e.g. from squash or rebase merges)
Full changelog
Source code for this page located on github