4.22.0-0.ci-2026-03-07-115610

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.22.0-0.ci-2026-03-07-115610

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.22-minor Succeeded periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-4.22-minor Succeeded periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-4.22-micro Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-gcp-ovn-upgrade
- hypershift-e2e-aks Failed (1 retry) periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-aks
  - Attempt 1 Failed
  - Attempt 2 Failed
- hypershift-e2e-aws Failed (1 retry) periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed
Async jobs
- claude-payload-analysis Succeeded periodic-ci-openshift-release-main-claude-payload-analysis

Upgrades from:

4.22.0-0.ci-2026-03-07-055610 (changes) - S F F F F
4.21.0-0.ci-2026-03-06-180553 - Success Success

Loading changelog, this may take a while ...

Changes from 4.21.0-0.ci-2026-03-06-180553

Created: 2026-03-07 11:59:44 +0000 UTC

Image Digest: sha256:17f32ae8f6e54d759ab95e3d7a11986ae17593163b3eecc787c3c7ae505b624b

Components

Kubectl 1.34.1
Kubernetes upgraded from 1.34.4 to 1.35.1
Kubernetes Tests 1.34.1
Red Hat Enterprise Linux CoreOS 9 8 upgraded from 9.6.20260305-0 to 9.8.20260305-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdditionalRoutingCapabilities (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AlibabaPlatform (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPIController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImages (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesvSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkDiagnosticsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkLiveMigration (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkSegmentation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PreconfiguredUDNAddresses (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteAdvertisements (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeAttributesClass (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfig (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
InsightsOnDemandDataGather (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
ManagedBootImagesCPMS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
MutableCSINodeAllocatableCount (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled		Enabled (New)	Disabled	Enabled
ClusterAPIMachineManagementVSphere (0 tests)	Disabled	Disabled	Enabled	Enabled			Enabled (Changed)	Enabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Disabled	Disabled	Disabled	Enabled (Changed)			Disabled	Enabled (Changed)
AdditionalStorageConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
CRIOCredentialProviderConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIComputeInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterAPIControlPlaneInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementAWS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementAzure (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementBareMetal (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementGCP (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementOpenStack (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementPowerVS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterUpdateAcceptRisks (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterUpdatePreflight (0 tests)			Enabled (New)	Enabled (New)
ConfigurablePKI (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
DRAPartitionableDevices (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
EVPN (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ExternalOIDCExternalClaimsSourcing (0 tests)			Enabled (New)	Enabled (New)
ExternalOIDCWithUpstreamParity (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GatewayAPIWithoutOLM (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MachineAPIMigrationAWS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MachineAPIMigrationOpenStack (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MachineAPIMigrationVSphere (0 tests)			Enabled (New)	Enabled (New)
NetworkConnect (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-kms-encryption-provider git 19e7b623 sha256:9630c67d1474ffea1c285011e561b8ae551c8e78e08284f6e910ccc21663d890
azure-service-operator git 17e57462 sha256:30c8ecf353103aa5d8535e4833d63f1596f2ec1d63f267a9092e1f0cd288eed4
cluster-bootstrap git dc0d4a5c sha256:846b9ac3b16e79f4b127f7b65d6c4e8cb72c6a3a71dd79bbc003d2629774e0a3
cluster-policy-controller git 8b775487 sha256:38b384a8b46c0e52b796f755a45d7e77bfcd7b2f46083f4f8d79cf0de05652bc
container-networking-plugins git 747ad66c sha256:c6f26bf09a7e4907a07a5f7a7fde092da450416b3c18d5f7b3bdc4a8d002ffa3
containernetworking-plugins-microshift git 747ad66c sha256:6736916daacbdbce9c83be09f69a10f2f9fa3f63a1e477ad3d47eaa8d0913771
contour git 45e9b621 sha256:d55e4b62e7c00a2bc2b592efa797ed09d47c0b39e669ec1497ad2b4f30bc6d57
contour-operator git e07f7060 sha256:d8d9fc7be01893faa7fd962e0e506e425f50b19fcf68b7068fdd958cb6de2841
egress-router-cni git 5e0f8d1b sha256:8500512cd66be1575cead29eb8af33e2f26eed6316b7fab841fbfe40d38c8367
ibm-cloud-controller-manager git c566572b sha256:ba9b7cc8bb899547673346afe6a200756956204244bacd6dac64a5af4a1641d6
kubevirt-csi-driver git 9e2dbddf sha256:838ce695ed69e49dc4ae8fed7a9cccaf5c1798735261f5891e3e504f89fa3280
local-storage-static-provisioner git 2529b85a sha256:a6142ec5f75de303a5e40df680bf7d3a01908126848d280d1a4378884719ef2a
multus-route-override-cni git 08af4127 sha256:1b3083f5d13c82a62571b04c70edfddc1992af60aa73dc302e49c1a43182ad7b
multus-whereabouts-ipam-cni git d691040e sha256:a0e7c5dc11a6ac72fbdc0e968d4e15a03e414d9515fccb06dbad0664972589c7
network-interface-bond-cni git 297eeb43 sha256:4667b49ac7727c4a18f06485299183e61b1735aa598858d465b7632e94228025
nutanix-cluster-api-controllers git 08b0cb1c sha256:486fdab1447fd22c01aad7b89a33ed834cc7e605d3705d35980e581b34a513fe

agent-installer-api-server

MGMT-22518: Adding RHOAI application endpoint to the list of known hosts for SNO #9936
OCPBUGS-77552: fix: min supported arbiter disk size should be 50GB #9977
NO-ISSUE: Update InfraEnv CR description #9938
MGMT-22905: Update LSO override for operator deployment #8824
NO-ISSUE: [master] Bump OCP versions: 4.17 #9975
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.14, 4.21 #9968
NO-ISSUE: Refresh RPM lockfiles #9945
NO-ISSUE: Fix loki and logging #9939
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 #9941
MGMT-23205: Reject empty MAC address in NMState static network config #9937
NO-ISSUE: [master] Bump OCP versions: 4.21 #9935
MGMT-21783: bundle cluster and host ignition endpoint CA certificates for day-2 hosts #8826
ACM-29247: Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #9917
NO-ISSUE: Refresh RPM lockfiles #9915
ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9865
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.22, 4.21 #9752
MGMT-22907: Prepare 4.21 stable and 4.22 candidate versions assisted-service upstream #8831
NO-ISSUE: Use renovate to update rpms.lock.yaml #9619
ACM-29247: (FIX) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9505
NO-ISSUE: Update module github.com/go-logr/logr to v1.4.3 #9357
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19, 4.17 #8912
ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #8870
MGMT-22942: Temporarily mirror CAPI image and OCP 4.20 release for disconnected CAPI CI #8819
MGMT-23047: Ensure cluster is installed when adding an osImageVersion… #8818
MGMT-22998: Add documentation to add node to an upgraded cluster #8810
MGMT-23164: Bug: Assisted Installer fails for OCP < 4.16 due to missing libvirt dependency #8869
MGMT-22406: Include primary_ip_stack in cluster event notifications #8846
MGMT-22385: Skip ip= kernel args for Day2 iSCSI/multipath with unknown network #8837
NO-ISSUE: Update setup-envtest version to release-0.22 #8856
MGMT-22885: Implement third-party CNI backend support #8797
NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #8850
NO-ISSUE: Update operator bundle channel to ocm-2.17 #8847
MGMT-23115: add FIPS feature usage tracking #8845
MGMT-23077: Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840
OCPEDGE-2367: Add support for platform none and external on TNA clusters topology #8830
MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #8802
MGMT-22523: Bump AMD DeviceConfig driver version to 6.4.3 #8823
MGMT-23000: Fix when a BMH is paused in non-converged flow #8812
MGMT-22287: Remove OCP 4.12 support from assisted-service #8794
MGMT-21038: Prevent from inventory set host RequestedHostname directly #7962
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 #8816
ACM-29153: Upgrade hive to e33d70 #8807
MGMT-21756: enable FIPS 140-3 crypto module in Go builds #8755
NO-ISSUE: [master] Bump OCP versions: 4.20 #8801
MGMT-22583: Implement Swagger Definitions for 3rd Party CNI / No CNI #8717
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 #8795
NO-ISSUE: Clarify release images needed for ironic agent image #8778
NO-ISSUE: upgrade to 1.25 #8769
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 #8767
NO-ISSUE: Add parameter for pod disruption budget in openshift template #8765
MGMT-20701: host re-registration improvement #8737
MGMT-22189: Fix primary_ip_stack migration #8760
MGMT-22584: Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer #8594
MGMT-22131: transitioning red hat operator base image to ubi minimal #8711
MGMT-22553: Partial cluster updates fail with false validation errors on dual-stack clusters #8704
MGMT-22297: fallback path for add-ntp-sources.sh #8742
NO-ISSUE: Update CONTRIBUTING.md #8745
MGMT-22189: Order dual-stack networks when fetching from DB #8488
MGMT-22656: Remove serviceMesh & kserve from DataScienceCluster spec #8741
NO-ISSUE: Add cpe label #8739
NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 #8708
AGENT-1407: add support for InternalReleaseImage related resources #8600
NO-ISSUE: [master] Bump OCP versions: 4.21 #8733
MGMT-16090: upgrade assisted-service postgresql from 12 to 13 #8602
MGMT-20499: Always generate iSCSI NIC reapply manifest for day2 host support #8705
NO-ISSUE: [master] Bump OCP versions: 4.17 #8725
MGMT-22278: Skip deleting spoke resources for an uninstalled agent #8608
MGMT-22186: Add kata runtime class to Assisted installer #8140
ACM-27859: Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning #8604
MGMT-20323: Prefer bootable disks for installation #8701
NO-ISSUE: add to owners_aliases #8703
MGMT-22545: Fix YAML marshaling for Kubernetes types in disconnected ignition #8619
OCPBUGS-68355: Fix Day-2 CSR approval race condition #8622
MGMT-22423: Fix race condition in ensureOwnerRef causing spec.installed to remain false #8621
ACM-27290: Fix policy.json not generated for InfraEnv mirror registry config #8609
ACM-27906: Fix container-image-availability check to use mirrored registries in disconnected environments #8611
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 #8612
MGMT-22458: CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) #8596
NO-ISSUE: Fix golangci-lint branch #8572
MGMT-22159: Add NFD operator to the list of OSC operator dependencies #8292
MGMT-22320: Expose GPU data in Agent CR inventory #8495
NO-ISSUE: Fix list bundle validation to check for feature incompatibilities #8571
MGMT-22273: reduce log amount #8565
MGMT-22396: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #8555
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2040
OCPBUGS-76382: Fix root partition before copying IRI registry data #2034
ACM-29247: Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #2037
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2035
NO-ISSUE: Refresh RPM lockfiles #2027
ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1998
NO-ISSUE: Update module github.com/jackc/pgtype to v1.14.4 #1664
NO-ISSUE: Use renovate to update rpms.lock.yaml #1515
NO-ISSUE: Update github.com/alecthomas/units digest to 0f3dac3 #1524
ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1511
MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1487
NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1498
Revert “NO-ISSUE: test for FF ACM 2.17” #1496
NO-ISSUE: test for FF ACM 2.17 #1495
ACM-29166: Upgrade hive to e33d70 #1491
MGMT-22499: CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive #1484
MGMT-22532: CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive #1483
MGMT-22393: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive #1474
NO-ISSUE: upgrade go to 1.25 #1466
MGMT-22653: bump the required minimal go version to 1.24 #1459
NO-ISSUE: Add cpe label #1457
MGMT-22131: transitioning red hat operator base image to ubi minimal #1444
ACM-25812: bumping go version on branch master #1446
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

NO-ISSUE: Refresh RPM lockfiles #1355
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1351
NO-ISSUE: Use renovate to update rpms.lock.yaml #1343
MGMT-23123: fix bootkube.logs missing from bootstrap logs on success #1320
MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1309
NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1318
ACM-29167: Upgrade hive to e33d70 #1311
MGMT-22131: transitioning red hat operator base image to ubi minimal #1288
MGMT-22395: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #1302
NO-ISSUE: Bump mockery to a go 1.25 compatible version #1295
NO-ISSUE: upgrade go to 1.25 #1289
NO-ISSUE: Add cpe label #1278
MGMT-21739: Skip log collection for non-existent services #1230
NO-ISSUE: add to owners_aliases #1268
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-ui

above sea level QE test fix (#3450) #3450
Update chatbot readme (#3447) #3447
Make use of PF Icon component (#3439) #3439
Red Hat Konflux update assisted-installer-chatbot-main (#3424) #3424
MGMT-22748: Setup insights-frontend-builder-common build tools (#3419) #3419
MGMT-23299: Make secondary VIP fields optional (#3417) #3417
Include additional operators in OVE UI ISO config (#3413) #3413
Update OCM setup docs (#3418) #3418
fix: bump lodash to ^4.17.23 to address CVE-2025-13465 (#3410) #3410
fix: bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3409) #3409
OCPBUGS-76280: Next button is disabled on optional configurations page (#3402) #3402
change axios version (#3403) #3403
UI freezes when clicking Select button without version (#3401) #3401
OCPBUGS-75072 | OVE UI: Above-the-sea UI QE test (#3383) #3383
Hypershift – allow infra envs with no hosts in namespace dropdown (#3373) #3373
MGMT-22544: update latest doc version to 4.20 (#3392) #3392
Bump axios from 1.12.2 to 1.13.5 (#3389) #3389
Make lint:all serial instead of parallel (#3400) #3400
fix: prevent form submission on cluster details step for existing clusters (#3372) #3372
fix major.minor version extraction (#3377) #3377
NO-ISSUE: Localise validation messages (#3379) #3379
Fix Infinite Loader while Getting Empty Versions List (#3378) #3378
Bump preact from 10.26.9 to 10.28.2 (#3356) #3356
Bump lodash-es from 4.17.21 to 4.17.23 (#3364) #3364
Bump lodash from 4.17.21 to 4.17.23 (#3365) #3365
OCPBUGS-74421 | OVE UI: Fix rendezvousIP field name in error message (#3376) #3376
MGMT-22941: ABI: add version dropdown (#3370) #3370
Do not delete disconnected cluster/infraenv. (#3368) #3368
MGMT-21058: Expose BareMetalHost (BMH) Status and Events in the Assisted Installer / CIM Console (#3363) #3363
Clean up git conflict artefacts (#3325) #3325
MGMT-21991: Add Primary IPv6 Support-cim (#3346) #3346
Stop using deprecate Modal component in CIM (#3343) #3343
Add additional new fields to the above the sea UI (#3337) #3337
MGMT-20673: Improve OpenShift AI bundle requirements tooltip (#3352) #3352
Fix React 18 types (#3361) #3361
MGMT-22746: Add chatbot app (#3350) #3350
Refactor LabelsField component (#3354) #3354
Use PF Dropdown component for namespace select (#3345) #3345
Make Cisco Intersight URL editable in CIM config modal (#3357) #3357
Fix mass hostname change content alignment (#3344) #3344
Adapt PrismCode for dark mode (#3348) #3348
Fix FileUpload component (#3355) #3355
Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3341) #3341
API/Ingress IP fields lack character limit (#3342) #3342
Use conversationId from props for feedback. (#3336) #3336
use old release process (#3333) #3333
MGMT-20727: Cisco Intersight URL should be configurable (#3332) #3332
MGMT-22465: Merge the contents of releases/v2.17-cim into master (#3319) #3319
change ABI above sea level iso size (#3322) #3322
Openshift AI Bundle on SNO enables ODF and LVM which are uncompatible (#3320) #3320
remove external platforms field from below sea level UI (#3316) #3316
Fix Cluster summary styling (#3216) #3216
Bump js-yaml from 4.1.0 to 4.1.1 (#3310) #3310
provides parameters for the GET /v2/operators/bundles route (#3306) #3306
Bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#3287) #3287
Bump zx from 7.2.3 to 8.8.5 (#3273) #3273
Bump js-yaml from 4.1.0 to 4.1.1 (#3264) #3264
Full changelog

agent-installer-utils

OCPBUGS-77611: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 #267
AGENT-1453: Add a flag to provide a custom appliance image #264
AGENT-1447: Override prefilled rendezvousIP #256
OCPBUGS-77270: Remove multiple redhat-operator-index catalogs #261
OCPBUGS-77235: Use mtv-operator from 4.20 catalog #259
OCPBUGS-77233: Update Konflux references #250
OCPBUGS-77235: Update mtv-operator version #257
NO-ISSUE: Fix linting issues #255
OCPBUGS-76367: Include additional operators in OVE config #252
OCPBUGS-76343: Add lso operator to appliance config #249
OCPBUGS-74933: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #221
OCPBUGS-74932: Update Konflux references #219
OCPBUGS-74242: Increase Konflux build pipeline memory #242
AGENT-1313: enable MCO IRI registry #232
OCPBUGS-71231: bump github.com/sirupsen/logrus to v1.9.3 #233
OCPBUGS-72420: Increase capabilities passed via buildah #229
NO-ISSUE: Add 4.22 isobuilder configs #213
AGENT-1334: Examples of golden snapshot and release for OVE ISO image #202
NO-ISSUE:Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 #216
OCPBUGS-69438: Remove operator manifests; now applied by assisted-installer #211
OCPBUGS-69406: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c #210
OCPBUGS-69405: Update Konflux references #209
Full changelog

apiserver-network-proxy

OCPBUGS-73992: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 #89
OCPBUGS-69889: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 #88
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3341: Updates ecr-credential-provider make target #130
SPLAT-2220: tests/ote: extend tests for gate AWSServiceLBNetworkSecurityGroup #129
SPLAT-2220: tests/ote: introduce openshift-only e2e to validate feature by feature gate #126
TRT-2536: UPSTREAM: <carry>: Fix OTE list tests when SingleReplica #125
Full changelog

aws-cluster-api-controllers

NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.10.2 (999ac9a) into main #588
NO-JIRA: Remove dead RELEASE_DIR ref #596
OCPCLOUD-3326: Update to use new manifests-gen #584
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #586
OCPBUGS-70053: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 #585
Full changelog

aws-ebs-csi-driver

OCPBUGS-77628: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 #302
OCPBUGS-74521: UPSTREAM: 2806, 2816: Remove VolumeAttributesClass FeatureGate #300
OCPBUGS-69918: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 #296
OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files (follow-up) #298
OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files #297
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

NO-JIRA: Add coderabbit, including instructions #509
STOR-2752: Early chore: update OCP version in OLM metadata #505
Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 #517
OCPBUGS-77378: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 #510
OCPBUGS-77405: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 #511
OCPBUGS-76298: missing readOnlyRootFilesystem in AWS init containers #506
OCPBUGS-74971: Fix azure-disk secret namespace/name args #502
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #503
STOR-2523: hypershift: Add desired-version annotation to controller Deployments and use DeploymentVersionController in csi driver operators #457
OCPBUGS-70304: Fix azure-file secret namespace/name #500
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #476
OCPBUGS-70085: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #483
OCPBUGS-70339: deploy prometheus role and binding on hypershift guest #488
OCPBUGS-63698: fix(azure): add token-minter for self-managed hosted clusters #461
OCPBUGS-69739: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #480
OCPBUGS-69907: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 #482
OCPBUGS-69710: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 #479
NO-JIRA: Add /sniff-test claude command #486
OCPBUGS-69883: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #481
OCPBUGS-69982: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 #484
OCPBUGS-69695: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 #478
STOR-2543: add VAC manifest for tests in AWS EBS #475
STOR-1945: STOR-2056: Add SupportedSizeRange for azurefile-nfs #477
Full changelog

aws-karpenter-provider-aws

AUTOSCALE-485: rebase to 1.8.6 #25
AUTOSCALE-293: partially ignore drift on ec2nodeclass userdata field #21
Full changelog

aws-machine-controllers

CORS-4315: enable primary IPv6 when infrastructure ipFamily is DualStackIPv6Primary #171
SPLAT-2617: Added dynamic dedicated host support #172
SPLAT-2558: Add AWS Dedicated Host support #160
OCPBUGS-72390: Fix reconciler consistency checks in Update and Exists #162
OCPBUGS-69950: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.22 #161
Full changelog

aws-pod-identity-webhook

CCO-784: update to pick up tls-min-version and tls-cipher-suites #207
OCPBUGS-74165: Fix GOTOOLCHAIN env var #211
CCO-728: merge upstream changes v0.6.11 #209
OCPBUGS-69825: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.22 #208
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-65654: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (765f435) into main #152
Full changelog

azure-cluster-api-controllers

OCPBUGS-77637: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #369
OCPCLOUD-3324: Update to new manifests-gen #357
OCPBUGS-53004: Remove references to master branch #336
OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into master #350
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #358
OCPBUGS-69934: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #356
Full changelog

azure-disk-csi-driver

OCPBUGS-77575: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 #123
STOR-2768: Rebase v1.34.1 #120
OCPBUGS-69754: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 #119
OCPBUGS-69390: fix ASH static provision segmentation fault #117
OCPBUGS-67186: fix: disk creation failure in AzureStack env #114
Full changelog

azure-file-csi-driver

OCPBUGS-77798: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 #117
OCPBUGS-70304: UPSTREAM: 2940: fix: optionally skip reading the config from the API #114
OCPBUGS-70060: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 #111
OCPBUGS-70060: fix failing unit tests in azure-file-csi-driver #112
Full changelog

azure-kms-encryption-provider

OCPBUGS-69961: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 #26
Full changelog

azure-machine-controllers

OCPBUGS-77607: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 #186
OCPCLOUD-3252: Add AGENTS configuration #181
OCPBUGS-69864: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 #179
Full changelog

azure-workload-identity-webhook

OCPBUGS-73994: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #43
CCO-729: merge upstream changes #42
OCPBUGS-69895: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #41
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-74161: fix: pin metal3remediations CRDs storage version to v1beta1, deploy separate manifests in Default #68
Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #67
OCPBUGS-74161: manifests-gen: include IPAM CRDs #65
Merge upstream #63
OCPBUGS-73951: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #58
Update to new manifests-gen #64
Revert “NO-JIRA: Add manifests verify target” #60
NO-JIRA: UPSTREAM: <carry>: Do not ignore files in vendor #59
NO-JIRA: Add manifests verify target #57
OCPBUGS-69724: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #56
METAL-1703: Add AGENTS and “merge-upstream” slash command #55
Full changelog

baremetal-installer, installer, installer-artifacts

no-jira: Bump openshift api #10347
no-jira: OCPBUGS-77255: wait for node-image-overly to restart sshd #10363
OCPBUGS-77683: Add c8g* to tested_instance_types_aarch64 #10356
OCPBUGS-77440: Image in worker machineset is auto-updated when user specifies the osImage #10341
OCPBUGS-66941: aws: throughput/iops validation for machine pools #10222
no-jira: [OCPBUGS-77255]: kludge: restart sshd server #10345
OCPBUGS-70168: Increase size of /var/ostreecontainer mount #10304
no-jira: ibmcloud: fix region survey default value #10336
OCPBUGS-77355: fix wavelength zone name regex #10338
CORS-4345: remove AWS SDK v1 unused code and go deps #10339
CORS-4244: adjust validations to allow dual-stack CIDRs on AWS #10241
CORS-3954: Enable strict unmarshaling for user invocations #10287
CORS-4076: bump capa version to support dualstack network infrastructure #10337
OTA-1861: data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render –cluster-version-manifest-path #10295
OCPBUGS-77182: PowerVC: Add default LB #10333
OKD-259: Add Validatation for the OKD Featureset to Prevent it From Being Enabled on OCP Clusters #10260
OCPBUGS-54298: Installer should validate mirror registry pull secret #10239
OCPBUGS-56846: validate azure user-assigned identity existence #10220
CORS-4055: migrate CCO permission check to AWS SDK v2 #10262
OCPBUGS-63065: Expand Azure userTags to support Azure Government Cloud #10015
OCPBUGS-55407: set DNS zone for Azure Stack Hub private clusters #10233
CORS-4302: Add N4A instance types to accepted in Installer #10292
CORS-4142: ensure lbType is NLB when dual-stack is configured #10256
MCO-2031: OS Image Stream to install-config schema #10192
CORS-4055: migrate EC2 API calls to AWS SDK v2 #10244
OCPBUGS-60162: reject byo vpc/subnets with CAPI owned cluster tag #9913
OCPBUGS-41570: Ensure correct mask for bootstrap external IP #8987
OCPEDGE-2276: Add support for platform None and External in TNA clusters #10286
OCPEDGE-2276: Add support for platform None in TNA (Two-Node Arbiter) clusters #10236
CORS-4055: migrate credential provider check to AWS SDK v2 #10261
CORS-4328: configure AWS CCM NodeIPFamilies for dual-stack support #10257
CORS-4055, CORS-4078: migrate ELB/ELBv2 API calls to AWS SDK v2 #10258
OCPBUGS-74631: Add validation to reject userProvisionedDNS on Azure Stack Hub #10279
CORS-4055: migrate default region check to AWS SDK v2 #10267
OCPBUGS-74625: gcp: skip AI zones #10269
CORS-4055: migrate IAM API calls to AWS SDK v2 #10245
CORS-4055: migrate S3 API calls to AWS SDK v2 #10242
OCPBUGS-63305: Make SimulatePrincipalPolicy optional #10081
OCPBUGS-67816: Revert storage account API version for client #10224
OCPBUGS-74078: add support for NVIDIA H100 and H200 enabled machine series #10234
CORS-4299, CORS-4300: Allow N4A Instance Types in the installer #10211
no-jira: add trace-config Claude command for installconfig field usage analysis #10190
AGENT-1309: Increase disk size requirements for master and SNO #10254
OSDOCS-17769: Add AWS m7 instance types #10246
CORS-4073: validate instance type support IPv6 in dual-stack #10238
OCPBUGS-74363: Remove region option for the GCP Private Service Connect Endpoint #10249
NO-JIRA: use v2 config for go-lint #10240
AGENT-1425: Fix stale dependency in agent-register-infraenv #10237
AGENT-1309: Modify NoRegistryClusterInstall storage requirements #10176
OCPBUGS-56770: Honor user-specified bootDiagnostics on Azure Stack Hub #10223
OCPBUGS-63028: filtering only PEs from cluster list #10193
CORS-4075, CORS-4113: Install-config and Infra manifest updates for DualStack for AWS and Azure #10207
OCPBUGS-72525: add newly detected instance types for Azure during 4.21 regression test #10202
OCPBUGS-69735: handle SSH rule deletion for Azure private #10213
OCPBUGS-69734: Fix destroy bootstrap command for Azure #10212
NO-JIRA: add user Rolv-Apneseth to coreos-maintainers and coreos-reviewers #10206
OCPBUGS-69923: ensure deterministic zone ordering for control plane machines #10188
NO-JIRA: Add angelcerveraroldan to coreos approvers and reviewers #10209
OCPBUGS-72577: bump default channel to stable-4.22 for main(4.22) branch #10205
OCPBUGS-71232: Fix nil pointer exception in azure mapiImage #10200
OCPBUGS-70013: Updating ose-installer-container image to be consistent with ART for 4.22 #10182
no-jira: Platform Experts Claude Command #10186
no-jira: Add barbacbd for gcp owners #10189
OCPBUGS-70021: Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 #10183
OCPBUGS-70047: Updating ose-installer-artifacts-container image to be consistent with ART for 4.22 #10184
no-jira: Fix linting issues for golangci-lint v2 #10138
NO-JIRA: remove pod-infra-container-image flag from kubelet #10145
OCPBUGS-69870: rename “var-ostree\x2dcontainer.mount” to something more computer-friendly #10171
OCPBUGS-69840: PowerVC: fix PostProvision #10175
OCPBUGS-69434, SPLAT-2584: Added ability to install different IPAM version when in TP. #10169
OCPBUGS-65859: Fix set-hostname dependency for interactive console services #10118
OCPBUGS-17667: Validate vCenter datacenters in failure domain topology #10086
OCPBUGS-61344: skip deleting snapshots managed by AWS Backup service #9964
OCPBUGS-62870: installing into GCP Shared VPC with minimal permissions #10157
OCPBUGS-64775: use CAPZ to provision ssh rule #10162
OCPBUGS-66295: Fix ignition warning about agent-extract-tui.service #10146
AGENT-1357: remove AgentWorkflowTypeInstallInteractiveDisconnected workflow #10020
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-77619: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #250
OCPBUGS-74161: manifests: remove metal3remediation, now deployed from o/cluster-api-provider-metal3 #249
NO-ISSUE: Update fetch_ext_bins.sh to use setup-envtest for kubebuilder binaries #251
OCPBUGS-73995: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #242
NO-ISSUE: Synchronize OWNERS with CAPM3 #241
OCPBUGS-69896: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #240
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream #465
Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 #464
NO-ISSUE: Merge upstream #455
Bug OCPBUGS-75006: BMO fails to start servicing despite updates to HFC spec #457
OCPBUGS-65571: Fix deletion hang when aborting inspection during power-off #447
NO-ISSUE: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #448
OCPBUGS-70265: Fix errors.As usage for NoDataInSecretError #444
NO-ISSUE: Merge upstream #442
OCPBUGS-70018: Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 #441
METAL-1693: Add “merge-upstream” slash command #437
OCPBUGS-65571: Abort inspection/cleaning before powering off during deletion #438
Full changelog

baremetal-runtimecfg

Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 #386
OCPBUGS-76394: Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go #380
OCPBUGS-42805: Add node caching with Kubernetes watch API to reduce API load #374
NO-ISSUE: Add agents.md and slash command for reviewing #375
MGMT-22546: Fix TNA and TNF dummy ip for ipv6 #369
NO-ISSUE: Migrate away from deprecated ioutil #373
OCPBUGS-69812: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 #376
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1864: Extend update recommend precheck alerts #2210
COS-4005: Allow periods in display name labels for version validation #2215
NO-ISSUE: images/tools/Dockerfile: Install iotop, if that fails fall back to iotop-c #2216
OCPBUGS-76318: pkg/helpers: Print the right error object #2197
OKD-322: Update OC-tools Dockerfile to work on CentOS/RHEL 10 #2205
CNTRLPLANE-2656: fixing oc cli failures #2199
OCPBUGS-76319: Makefile: Strip debugging symbols by default #2196
OCPBUGS-76958: inspect: Allow resource group to be specified in the namespace resources list #2204
OCPBUGS-76394: Ignore group ownership on rpm -V #2206
OCPBUGS-76394: Install subscription-manager in cli image #2200
Revert “CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles” #2198
CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles #2192
OCPBUGS-74543: expose: Fix labels not being added to route #2189
Revert “CNTRLPLANE-2656:Migrating oc cli tests to ote” #2191
CNTRLPLANE-2656: Migrating oc cli tests to ote #2181
OSDOCS-18071: Updating CLI docs templates to include a required abstract/short description #2190
OCPBUGS-73893: Fix unit test failure by updating ruby version to 3.3 #2184
NO-ISSUE: add SecurityContext to node image creation and monitor containers #2139
CNTRLPLANE-2167: Adding oc ote sanity test #2180
CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2177
CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2176
OCPBUGS-64619: oc login: Respect insecure flag from kubeconfig #2134
NO-JIRA: Bump library-go to update selinux and x/crypto #2169
OCPBUGS-70063: Updating ose-cli-artifacts-container image to be consistent with ART for 4.22 #2168
OCPBUGS-70061: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.22 #2167
OCPBUGS-69894: Updating ose-tools-container image to be consistent with ART for 4.22 #2166
OCPBUGS-69835: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.22 #2164
NO-JIRA: Bump docker/docker to 28.5.2 to drop containerd/containerd dependency #2162
Full changelog

cloud-credential-operator

CCO-788: Remove kube-rbac-proxy container from metrics #976
OCPBUGS-77550: cloud-credential-tests-ext to support multiple architectures #979
CCO-726: Update go modules #974
CCO-767: test-ext: Migrate openshift-tests-private E2E cases #961
CCO-813: Update kubernetes v1.35 and golang v1.25 #967
OCPBUGS-74384: Resolve nil pointer exception in hasResourceTags #966
CCO-805: Ability to use featureGates #962
OCPBUGS-71221: test-ext: remove kubernetes module dependency #957
OCPBUGS-70033: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.22 #956
CCO-789: Add Agentic AI helper files #953
Full changelog

cloud-network-config-controller

CORENET-6562: CNCC rebase k8s to 1.35.0 #202
OCPBUGS-77711: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 #207
CORENET-6500: fix lint job and linting failures #201
OCPBUGS-69998: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 #196
OCPBUGS-45056, OCPBUGS-57447: Refrain from adding Egress IP to public LB backend pool #180
Full changelog

cluster-authentication-operator

CNTRLPLANE-312: Add generation logic for new API fields in the Authentication CR #810
CNTRLPLANE-2589: update cases to execute as serial/parallel #833
CNTRLPLANE-2241: Update library-go to get KMS encryption #837
CNTRLPLANE-2247: Add Test encryption provider migration #838
CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for AUTH #834
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the oauth-apiserver container #827
CNTRLPLANE-2589: Migrate serial e2e tests to Ginkgo framework #828
CNTRLPLANE-2247: Add KMS encryption test target #829
CNTRLPLANE-2589: Migrate RouterCerts e2e test to Ginkgo framework #826
CNTRLPLANE-2589: OTE infrastructure #822
API-1835: test/oauth-server-payloadConfigController: adds a test to show which input resources are required to run the operator and the payloadConfigController #786
OCPBUGS-70005: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.22 #819
API-1835: adds an integration test for the oauth-server deployment controller #784
CNTRLPLANE-2196: set up openshift-tests-extension for cluster-authentication-operator #816
NO-JIRA: Add agents.md file #818
Full changelog

cluster-autoscaler

OCPBUGS-77631: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #408
AUTOSCALE-482: VPA E2Es: switch from docker.io ubuntu to k8s-hosted image #406
OCPBUGS-66405: Pick upstream commits to Fix VPA recommender concurrent access panic #403
AUTOSCALE-482, AUTOSCALE-483: 1.35.0 Upstream rebase #401
OCPBUGS-74005: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #399
OCPBUGS-70023: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.22 #397
OCPBUGS-69928: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #396
Full changelog

cluster-autoscaler-operator

AUTOSCALE-172: add kube api content type flag to autoscaler #362
AUTOSCALE-483: Prepare for 4.22 #361
OCPBUGS-69828: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.22 #358
Full changelog

cluster-baremetal-operator

Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #568
OCPBUGS-65472: Add ClusterRole to baremetal ClusterOperator relatedObjects #544
OCPBUGS-73970: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #545
OCPBUGS-77027: Update kubebuilder tools to more latest version #556
OCPBUGS-72548: Fix ironic-proxy service routing for port 6385 #546
OCPBUGS-71233: Fix libguestfs /tmp access in machine-os-downloader init container #549
OCPBUGS-70157: Add sharedVolumeMount to machine-os-downloader init container #540
OCPBUGS-67216: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #535
NO-ISSUE: Add AGENTS.md #538
OCPBUGS-69769: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #537
Full changelog

cluster-capi-controllers

OCPBUGS-73976: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #262
OCPCLOUD-3320: Use new manifests-gen #259
OCPBUGS-74426: CAPI IPAM CRDs override storage version to v1beta1 #263
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #261
OCPBUGS-69810: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #258
OCPBUGS-69434: openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore #256
Full changelog

cluster-capi-operator

NO-JIRA: improve unit test performance and CI flakiness #487
OCPCLOUD-3369: Implement RequiredVersions functionality for CompatibilitySchema #471
OSASINFRA-3980: Re-add openstack credentials request #478
NO-JIRA: e2e: improve failure diagnostics #484
OCPCLOUD-3386: Implement feature-gate support in capi-operator endpoint #475
OCPCLOUD-3364: Implement ExcludedPaths functionality for CRD validation webhook #467
NO-JIRA: Add missing CVO annotations to RBAC #480
NO-JIRA: Set admission failure policy to Ignore #479
OCPCLOUD-3329: Manifests gen all the VAPs #470
NO-JIRA: Update HaveCondition to version from revision controller branch #481
OCPBUGS-77363: manifests-gen: fix nil deref for non-webhook CRDs #482
NO-JIRA: e2es improvements #473
NO-JIRA: coderabbit: Tell it not to warn about old Go #474
NO-JIRA: Add timeout to all eventually entries with contexts #472
OCPCLOUD-3005: Add CRD admission time validation implementation #459
OCPCLOUD-3262: MAPI & CAPI MachineSet VAP #440
OCPCLOUD-3005: Add MWC/VWC to compatibility requirements RBAC #466
NO-JIRA: Adds test-standards skill for claude #468
OCPCLOUD-3005: Initial implementation of CompatibilityRequirement reconciler and webhook #458
OCPBUGS-77036, OCPCLOUD-3342: provider images disconnected support #463
OCPCLOUD-3005: Bootstrap compatibility requirements deployment #457
OCPCLOUD-3327: Rewrite manifests-gen to support upgrade safety #434
NO-JIRA: Fix NetworkPolicy for openshift-capi-operator namespace #453
OCPCLOUD-3327: Fix up related objects #452
OCPBUGS-74295: Move installer controller to independent manager #447
NO-JIRA: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #449
OCPBUGS-61949: Remove references to cluster-api-operator image #384
OCPCLOUD-3315: Add AWS CPUOptions to conversion #438
OCPCLOUD-3017: add SHARD_ARGS #442
OCPCLOUD-2566: tests with VAP msgs #386
NO-JIRA: Fix AWS fuzz tests by constraining Volume throughput to int32 range #441
OCPCLOUD-3263: CAPI MachineSet creation validation #437
OCPBUGS-69737: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.22 #436
NO-JIRA: Update openshift/api #439
OCPCLOUD-3172: machinesetsync: refactor to a generalized differ which can work independent of types #382
OCPCLOUD-2640: CAPI Machine creation validation #412
NO-JIRA: Write provider version to openshift/provider-version.mk #424
OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #428
OCPBUGS-63524: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #429
Full changelog

cluster-cloud-controller-manager-operator

CORS-4209: ensure NodeIPFamilies field is kept as-is after transforming #426
OCPBUGS-62176, OCPCLOUD-3348: tls: use centralized TLS profile #433
OCPBUGS-16728: Add admission policy to deny changing an AWS LB type on an existing service #362
OCPBUGS-69820: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 #430
Full changelog

cluster-config-api

OCPBUGS-74514: OCPBUGS-74515: OCPBUGS-74516: OCPBUGS-74517: remove bootimage update feature gates #2733
OTA-253: Add cluster update preflight mode API #2684
OCPBUGS-74508: Remove GatewayAPI featuregates #2742
NO-ISSUE: Update dev go image #2735
Add CodeRabbit inheritance for org-wide rules #2746
CNTRLPLANE-2522: features: add ExternalOIDCExternalClaimsSourcing feature gate #2743
MCO-2142: OSImageStream.spec.defaultStream validation #2736
CNTRLPLANE-2550: Add support for CEL expression claim mappings for username and groups #2719
NO-JIRA: Add MachineAPIMigrationVSphere feature gate for DevPreview #2739
CNTRLPLANE-1752: Add PKI API to config.openshift.io/v1alpha1 #2645
NO-JIRA: LabelSelector should have omitzero #2741
OCPNODE-4060: Add additional storage configuration fields to ContainerRuntimeConfig #2681
AI: Adds a new /generate-tests Claude command that automates the generation of integration tests #2706
OCPSTRAT-2728: Rebase 1.35 #2578
OCPCLOUD-3386: Add platform-specific feature gates for CAPI Operator features #2730
ClusterAPI revision components can be empty #2728
NO-JIRA: feat: add link to sippy for tests #2732
SPLAT-2410: Promote ClusterAPIMachineManagementVSphere to TechPreview #2724
Require APIExcludedFields Versions to be set #2727
OCPBUGS-32275: Add ingress.spec.domain immutability validation #2695
MON-4032: Add PrometheusOperatorAdmissionWebhookConfig to ClusterMonitoringSpec #2716
refactor: use deepcopy-gen style in DeepCopyInto functions #2721
OCPNODE-3880: Add empty CRIOCredentialProviderConfig resource #2711
NO-JIRA: feat: update the html for feature promotion #2714
Ensure unique paths for excluded fields in compatibility requirement #2720
OCPBUGS-76919: add listtype atomic #2713
CNTRLPLANE-2586: postpone the removal of the DeploymentConfig API #2646
CCXDEV-15605: Promote InsightsOnDemandDataGather and InsightConfig feature gate to default #2473
OCPSTRAT-2876: Enable major version segmentation of enabled feature gates #2637
MCO-2126: Add defaultStream field to OSImageStream spec #2709
Prefer feature-gate manifest inclusion for merged CRDs #2712
CORS-4096: Add DNS Record Type for IPv6 Domain mapping #2361
OCPBUGS-74512: Remove CPMSMachineNamePrefix featuregate #2677
OCPCLOUD-3214: Add ClusterAPI config #2564
SPLAT-2615: Added support for dynamic AWS dedicated hosts #2650
config/v1: TLSSecurityProfile: align with Mozilla v5.7 guidelines for Go by removing unsupported go ciphers #2697
NE-2480: Add featuregate for Gateway API without OLM #2691
Feature gate CVO application of CompatibilityRequirement CRD #2701
Update integration test timeout and make parallel where possible #2702
STOR-2878: Graduate MutableCSINodeAllocatableCount to GA #2673
OCPBUGS-67232: Move DynamicConfigurationManager back to TPNU #2621
OCPNODE-4078: Add DRAPartitionableDevices to TechPreviewNoUpgrade #2694
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #2675
MON-4031: Add prometheusOperatorConfig API #2481
Remove graduated SDN feature gates #2672
OCPNODE-3863: Add CRIOCredentialProviderConfig API #2557
add Insights capability to Insights CRDs #2682
CodeRabbit should not be looking at openapi generated content #2688
MCO-1931: Promote ManagedBootImagesCPMS feature gate to the Default featureset #2679
OCPBUGS-74527: Remove ProcMountType #2676
OCPBUGS-55654: Remove AlibabaPlatform FeatureGate #2671
Re-enable NewOLMBoxcutterRuntime featuregate in TPNU #2659
OCPBUGS-68343: Introduce KMSEncryption feature gate #2669
Fix payload CRD/FetaureGate ordering #2667
OCPEDGE-2084: Add PacemakerStatus CRD for two-node fencing #2544
OCPBUGS-56851: make multiline comments for oidc one line for better crd gen and better oc explain description format #2655
no-jira: Validate AWS resource tag keys with aws: prefix #2183
NO-JIRA: Fix Infrastructure PlatformType comment #2660
OCPEDGE-2084: chore(tools): bump controller-tools with XValidation ordering fix #2658
Update KAL to latest and configure new linters #2662
OCPCLOUD-2998: Add synchronizedAPI to Machine and MachineSet status #2642
CORENET-6609: Add EVPN featuregate #2649
OCPBUGS-73855: Permit other machine managers when skew enforcement is in Automatic mode #2648
CONSOLE-4986: Add Guided Tour capability flag to Console API and vendor it into console-operator #2644
OCPCLOUD-3166: machine-api: disallow unsetting authoritativeAPI #2091
Add insights v1 to payload #2632
CNTRLPLANE-1750: Add FeatureGate: ConfigurablePKI #2545
NO-JIRA: update TLS security profile documentation for clarity and consistency #2595
OPRUN-4226: [OLMv1]: Promote NewOLMOwnSingleNamespace to GA #2527 #2527
SPLAT-2603: Added support for legacy AWS dedicated hosts #2643
Extend ClusterVersion for accepted risks #2360
CNTRLPLANE-311: adding auth config missing fields to API #2487
NO-JIRA: Rename ImagePolicy nested types to prevent PKI collision #2626
Reapply “Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1” #2631
OCPBUGS-70025: Updating ose-cluster-config-api-container image to be consistent with ART for 4.22 #2634
Add configuration for coderabbit #2635
DevPreview: NetworkConnect feature gate #2629
OCPCLOUD-3164: Add CompatibilityRequirement #2479
Disable the statusoptional linter #2633
Migrate away from deprecated ioutil #2603
OKD-259: Support an “OKD” featureset to be enabled by default on OKD clusters #2451
NO-JIRA: remove beta enabled TranslateStreamCloseWebsocketRequests feature from gates #2613
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-config-operator

NO-JIRA: OWNERS: remove engineer who has left Red Hat #466
OCPBUGS-73988: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 #460
CORS-4340: add NodeIPFamilies configuration field #472
NO-JIRA: bump: pull in latest ocp/api #471
OKD-320: Migrate to OKD featureset for OKD clusters #462
OKD-259: Allow the OKD feature set to upgrade #461
CNTRLPLANE-2272: Refactor tests-ext initialization to improve error handling #457
OCPBUGS-69859: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 #456
CNTRLPLANE-1311: Simplified test infrastructure to single-module architecture #452
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-77259: e2e: improve formatting of cluster operators stabilization timeouts, bump suite timeout #394
OCPCLOUD-3349: tls: use centralized TLS profile #381
TRT-2542: Revert Fix framework initialization #391
OCPBUGS-74343: Fix framework initialization #384
OCPBUGS-74512: Remove CPMSMachineNamePrefix feature gate #387
NO-JIRA: mockgen deprecated: use uber-go/mock instead #374
OCPBUGS-74478: Bump openshift/api to get latest AWSMachineProviderConfig type #385
OCPBUGS-67230: Fix Makefile to use vendor mode #377
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-77601: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #269
STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in csi-snapshot-controller-operator #251
OCPBUGS-73791: Re-add serving cert volume mount to hypershift guest cluster manifest #264
OCPBUGS-66390: Set client throttling parameters #261
OCPBUGS-69854: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #262
Full changelog

cluster-dns-operator

NE-2469: Migrate away from deprecated ioutil #454
NE-2482: bump k8s libraries to v0.35.0 and cr to v0.23.1 #459
CNTRLPLANE-1544: manifests: Enable user namespaces #451
OCPBUGS-69912: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.22 #463
OCPBUGS-65498: Add openshift-dns-operator ClusterRole to ClusterOpera… #455
NO-JIRA: Add NI&D team members to OWNERS #465
NE-2414: Use trafficDistribution: PreferSameNode for openshift-dns Service #457
Full changelog

cluster-etcd-operator

OCPBUGS-76331: fix: truncate job names to respect k8s 63-char limit #1554
NO-JIRA: fix unit-test flake in revision tests #1558
NO-JIRA: update cert injection annotations to beta #1551
NO-JIRA: Clean up stale Pacemaker attributes before TNF cluster restore #1553
OCPBUGS-74151: Wait for revision stability before removing etcd members #1540
NO-JIRA: fix: add missing priority class from status checker #1552
OCPEDGE-2097: Add pacemaker health check for ExternalEtcd clusters #1487
OCPEDGE-2231: [TNF] feat: Allow podman-etcd and kubelet resource-agent to restart on start failure #1513
NO-JIRA: [TNF] disable etcd member management after etcd handover #1534
OCPBUGS-66152: split grpc requests slow into read/write alerts #1532
OCPBUGS-73857: Prefer to remove members where they have another healthy machine in the same failure domain index #1528
OCPBUGS-68371: fix bootstrap race condition #1524
OCPBUGS-38659: bump inertia from 5-10 minutes #1531
OCPBUGS-38659: configure inertia for all controllers #1527
OCPBUGS-60588: [TNF] support restore for pacemaker-managed etcd #1521
OCPBUGS-62422: deps: Update library-go to update pruner #1526
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-62626: only report Progressing=True when progressing towards new configuration #1293
OCPBUGS-66225: bump deployment ProgressDeadlineSeconds to 120s #1298
CNTRLPLANE-2651: Fix OTE suite qualifiers to use proper CEL expressions #1300
CNTRLPLANE-2651: OTE infrastructure #1283
IR-350: keeps registry tls config in sync with cluster #1278
OCPBUGS-62626: only report Progressing=True when progressing towards new configuration #1286
NO-JIRA: fix TestImageRegistryRemovedWithImages flake #1288
OCPBUGS-74495: Migrate Azure storage management to new ARM SDK #1281
IR-350: bump library-go to the latest version #1276
OCPBUGS-69751: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.22 #1275
OCPBUGS-66203: clear affinities on an individual API call #1273
Full changelog

cluster-ingress-operator

NE-2131: Add OpenShift Tests Extension scaffolding with GatewayAPI CRD tests #1371
OCPBUGS-74508: Remove the GatewayAPI feature gate #1366
NO-JIRA: enable inheritance on coderabbit #1373
OCPBUGS-74511: remove RouteExternalCertificate feature gate #1355
OCPBUGS-65629: ensure canary daemon set uses its own service account. #1310
OCPBUGS-77305: Bump to OSSM 3.2.2 and Istio 1.27.5 #1350
NO-JIRA: Add coderabbit to CIO #1348
OCPBUGS-58145: reload serving cert on rotation #1285
NE-2481: bump k8s libraries to v0.35.0 #1356
NE-2434: E2E test for internal LoadBalancer Annotations #1353
OCPBUGS-64565, OCPBUGS-9037: Ensure canary cert matches the default ingress controller’s cert #1334
NE-2395: Fix e2e tests to work on platforms with unmanaged DNS #1342
NE-2374: Add e2e test for Gateway API infrastructure annotations #1331
NE-2435: Bump Gateway API CRDs to v1.4.1 #1343
OCPBUGS-16728: Require Service Deletion for LB Type Updates #1142
NO-JIRA: add jcmoraisjr to owners #1346
OKD-259: Bump openshift/api and add support for OKD featureset specific CRDs #1324
OCPBUGS-65482: Add e2e test for secure redirect port stripping #1316
NE-1743: Add documentation for pre-release script for OSSM testing #1315
OCPBUGS-70212: testGatewayAPIDNS: Fix nil gateway in cleanup #1330
OCPBUGS-70211: Fix logging for unmanaged controllers #1329
OCPBUGS-69954: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.22 #1328
OCPBUGS-65939: Update command to get Konflux index image #1325
OSSM-10865: set trustBundleName in Istio global values #1288
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-77509: Add support for event-ttl cases and go test cases in Kube API Server Operator #2060
OCPSTRAT-2728: Rebase 1.35 #2003
CNTRLPLANE-2223: Test bound token signer controller fix #2050
TRT-2561: Revert #2032 “CNTRLPLANE-2622: config tls on check-endpoints container” #2057
CNTRLPLANE-2622: config tls on check-endpoints container #2032
CNTRLPLANE-2241: Update library-go to get KMS encryption #2033
NO-JIRA: Test encryption provider migration #2028
OCPBUGS-70298: remove kube-apiserver user from crb #2012
CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test #2027
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the kube-apiserver container #2015
CNTRLPLANE-2563: update wording for major upgrades #2010
CNTRLPLANE-2648: Migrating user_cors_test to OTE #2011
CNTRLPLANE-2247: Add empty KMS encryption test case for CI job validation #2014
CNTRLPLANE-2585: Migrating user_client_ca_test to ginkgo #2008
OCPBUGS-65807: SCC: allow image volume type for all SCCs #1968
CNTRLPLANE-2492: Migrating user_certs_test to ote #2005
NO-JIRA:Refactor serviceaccountissuer ginkgo test #2002
NO-JIRA: clean up the OWNER files #2001
NO-JIRA: Add API server stabilization wait to serviceaccountissuer tests #1997
OCPBUGS-62422: deps: Update library-go to update pruner #1994
NO-JIRA: ote: a small cleanup #1995
CNTRLPLANE-2286: Migrating serviceaccountissuer test to ote #1992
CNTRLPLANE-2280: Migrating deprecated_api_test to ote #1990
CNTRLPLANE-2281: Migrating operator_test to ote #1991
OCPBUGS-70323: bump library-go #1986
OCPBUGS-69758: CNTRLPLANE-2222:Migrate go test cert-rotation-tests.go to OTE #1983
CNTRLPLANE-2158: Migrating TestTokenRequestAndReview to ginkgo #1978
NO-JIRA: increases termination timeouts for GCP #1982
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-2728: Rebase 1.35 #902
OCPBUGS-74023: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 #903
CORS-4220: pass dualstack cluster cidrs as an comma-separated list argument #889
OCPBUGS-69964: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 #901
OCPBUGS-62422: dep: Update library-go to update pruner #895
OCPBUGS-60568: Use BoundServceAccountTokenVolume dy default #858
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-2728: Rebase 1.35 #602
CNTRLPLANE-2843: chore: update OWNERS #618
CNTRLPLANE-2649: Add 30-minute timeout to preferred host e2e test #616
CNTRLPLANE-2649: Migrate to Ginkgo-based e2e serial and parallel test suite #611
CNTRLPLANE-2649: OTE infrastructure #608
OCPBUGS-65941: Add OPERATOR_IMAGE_VERSION to recovery container #600
NO-JIRA: pkg/operator: Remove staleConditions controller #597
NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #596
no-jira: test(TargetConfigController): exercise –tls-cipher-suites and –tls-min-version injection #595
OCPBUGS-62422: deps: Update library-go to update pruner #593
no-jira: refactor(pkg/operator/targetconfigcontroller): code deduplication and improvements #594
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: OWNERS: remove engineers who have left Red Hat #147
OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #138
OCPBUGS-70004: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.22 #136
OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #135
Full changelog

cluster-machine-approver

Revert “OCPCLOUD-3347: tls: use centralized TLS profile” #291
OCPCLOUD-3347: tls: use centralized TLS profile #286
OCPBUGS-69815: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.22 #289
MON-4476: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #288
NO-JIRA: Fix expired test certificate in csr_check_test.go #287
Full changelog

cluster-monitoring-operator

NO-JIRA: fix wrong string formatter in tests #2839
NO-ISSUE: fix typo #2837
OCPBUGS-77543: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2836
NO-JIRA: [bot] Synchronize versions of the downstream components #2830
MON-4533: Bump prometheus-operator to v0.89.0 #2822
OCPBUGS-74524: Remove MetricsCollectionProfiles feature-gate #2812
MON-4494: add kubernetes-mcp-server metrics to allowed list #2818
MON-4491: Implement Logic for User Defined #2807
OCPBUGS-61262: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2820
NO-JIRA: [bot] Synchronize versions of the downstream components #2800
OCPBUGS-73957: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2790
NO-ISSUE: test/e2e: add Func suffix to assertion helpers for consistency #2803
OCPBUGS-74673: Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts #2799
OCPBUGS-69397: Move console control plane health queries to their own… #2778
OCPBUGS-74347: config: add bond device to default node-exporter ignore list #2806
NO-ISSUE: merge case 67008,68958 to node-exporter e2e test #2788
NO-ISSUE: test: TestUserWorkloadWithAlertmanager|TestNetworkPolicy: fix a no-op check #2802
OCPBUGS-67162: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2796
NO-JIRA: Upgrade golangci-lint from v1 to v2 #2789
OCPBUGS-66069: Include kube_pod_labels in minimal profile #2777
MON-4470: ship collector:node_scrape_collector_success:avg to Telemetry #2794
NO-JIRA: [bot] Synchronize versions of the downstream components #2791
OCPBUGS-66180: create networkpolicy settings for user workload monitoring #2765
NO-ISSUE: move endpointslice RBAC to Role #2786
MON-4466: enable ethtool collector #2779
NO-ISSUE: add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod #2787
MON-4343: Reapply “MON-4343: Cleanup deprecate pa config” #2782
NO-ISSUE: remove test case 74734 #2785
OCPBUGS-61088: revert PR #2766 #2769
OCPBUGS-69733: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2781
MON-4406: watch ClusterMonitoring config resource #2770
NO-JIRA: [bot] Synchronize versions of the downstream components #2780
NO-JIRA: [bot] Synchronize versions of the downstream components #2776
Full changelog

cluster-network-operator

OCPBUGS-76500: Add config override for openflow-probe #2916
OCPBUGS-60670: Add ValidatingAdmissionPolicy for EgressIP #2837
CORENET-6605: fix more transient error condtions caused Degraded #2896
CORENET-6417: Drop remaining openshift-sdn code #2882
CORENET-6610: Add EVPN APIs #2881
OCPBUGS-60077: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2761
CNF-20883: Align templates frrk8s #2874
OCPBUGS-74401: Remove duplicated openssl parameter #2889
NO-JIRA: Remove references to AdminNetworkPolicy, NetworkSegmentation, RouteAdvertisements and PreconfiguredUDNAddresses featuregates #2891
CORENET-6561: Update the golangci-lint configuration for v2 compatibility and fix all resulting lint issues. #2893
CORENET-6605: avoid flapping Degraded on transient failures #2862
CORENET-6416: drop networkType migration support #2456
CNF-21001: mnp: Set hostname using downward API #2840
CORS-4180: Allow AWS and Azure as platforms that support dual-stack on Day-0 #2804
NO-JIRA: set ovnkube-cluster-manager as default container #2798
OCPBUGS-72411: fix(hypershift): use net.JoinHostPort for URL construction #2871
OCPBUGS-66417: Add kubevirt platform to dual-stack supported platforms #2849
OCPBUGS-49662: Prevent resetting masquerade subnet #2641
Full changelog

cluster-node-tuning-operator

OCPBUGS-62702: AA: latency-e2e: skip tests on HT-disabled systems #1386
OCPBUGS-77377: E2E: Add test case to check Infrastructure pods affinity #1470
NO-JIRA: Eliminate expensive and unnecessary MachineConfig updates #1473
NO-JIRA: Bump Kubernetes, OpenShift and other dependencies #1475
OCPBUGS-74027: AA: E2E: LLC: Add tests related to odd cpus #1458
CNF-20755: e2e: Add housekeeping IRQ load balancing tests #1456
CNF-18941: perfprof: enable exec-cpu-affinity by default (annotation) #1426
NO-JIRA: Make changes for migrating to OTE in Dockerfile #1453
OCPBUGS-62632: Do not report Progressing=True during cluster scaleup or node reboot #1447
NO-JIRA: Bump upstream containerfile to 4.22 #1452
OCPBUGS-62496: hypershift:e2e:status: check for duplicated configmap status #1413
OCPBUGS-69802: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.22 #1450
OCPBUGS-69391: E2E: Granular IRQ functional test cases #1441
Full changelog

cluster-olm-operator

NO-ISSUE: Update to go 1.25.7 #175
OCPBUGS-65623: cluster-olm-operator sets Progressing=True during upgrade #173
OPRUN-4230, OPRUN-4440: Enable Boxcutter in TPNU #163
NO-ISSUE: Bump golangci to v2 #174
NO-ISSUE: Add pedjak as reviewer and approver #171
OCPBUGS-65505: add resources to clusterOperator relatedObjects #166
OPRUN-4408: Update upgrade message to mention both 4.23 and 5.0 upgrade paths #164
OCPBUGS-69807: Update image locations to be consistent with ART for 4.22 #158
OPRUN-4360: Remove references to operator-framework/catalogd #155
OPRUN-4352: Update to golang 1.25/ocp 4.22 #156
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2241: Update library-go to get KMS encryption #647
NO-JIRA: Create test namespace for KMS migration scenario #650
CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for OAS #649
CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for Routes #644
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the openshift-apiserver container #641
CNTRLPLANE-2247: Add KMS encryption test target #642
NO-JIRA: update to Kubernetes v1.34.1 #640
OCPBUGS-70035: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.22 #635
Full changelog

cluster-openshift-controller-manager-operator

no-jira: Migrate away from deprecated ioutil #401
no-jira: refactor: use the configured clock source during startup #411
CNTRLPLANE-2620: propagate global tls config to operand #407
OCPBUGS-70032: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.22 #404
Full changelog

cluster-samples-operator

OCPBUGS-77919: Periodic sync of OKD samples #666
MON-4508: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #673
OCPBUGS-77918: Periodic sync of supported OCP samples #667
OCPBUGS-77879: update kubernetes api to v0.35.2 #676
OCPBUGS-77678: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #675
OCPBUGS-74024: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #672
OCPBUGS-69966: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #671
Full changelog

cluster-storage-operator

OCPBUGS-77686: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 #671
TRT-2542: Revert #661 “OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy” #664
OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy #661
OCPBUGS-66212: Remove VSS permissions #649
STOR-2523: hypershift: Add desired-version annotation to operand Deployments and use DeploymentVersionController in CSO #638
OCPBUGS-60159: add vsphere permissions for checking if users is authorized to see metrics #642
OCPBUGS-69978: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 #651
OCPBUGS-63698: feat(azure): add HYPERSHIFT_IMAGE env var for token-minter #643
OCPBUGS-62634: Fix deployment controller Progressing=true on node drain #648
OCPBUGS-67012: volume-data-source-validator must use IfNotPresent image pull policy #650
Full changelog

cluster-update-keys

OCPNODE-3978: Third run at expanding the default ClusterImagePolicy for openshift component images #97
revert ‘OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #96
OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #95
TRT-2537: Revert “OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images” #94
OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images #75
OCPBUGS-70020: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.22 #91
Full changelog

cluster-version-operator

OTA-1546: Add a metric and an alert for conditional risk conditions #1318
OCPBUGS-77762: Add an e2e to check the default network polocy #1334
OTA-1546: Generate riskConditions in a better way #1324
NO-JIRA: Allow for risks only desired update #1335
OCPBUGS-77762: install/0000_00_cluster-version-operator_02_networkpolicy: Add inclusion annotations #1333
NO-JIRA: Use github.com/daixiang0/gci to sort imports #1330
NO-JIRA: Sort and verify imports #1328
Revert “TRT-2549: Revert “Add a serial e2e for accept-risks”” #1323
NO-JIRA: Mention the fauxinnati in the developer documentation #1308
OCPBUGS-66898: Implement mTLS authentication and authorization for CVO metrics endpoint #1271
OTA-1861: cmd/cluster-version-operator/render: Add –cluster-version-manifest-path option #1315
TRT-2549: Revert “Add a serial e2e for accept-risks” #1319
OTA-1546: Add a serial e2e for accept-risks #1310
NO-JIRA: Add docs about places running e2e tests #1312
OCPBUGS-74028: Updating cluster-version-operator-container image to be consistent with ART for 4.22 #1296
OCPSTRAT-2485: Introduce feature gate based inclusion/exclusion of manifests #1273
NO-JIRA: More flexible timeout option for oc-cli #1311
OTA-1546: Reconcile cv.spec.desiredUpdate.acceptRisks #1284
NO-JIRA: Add a serial e2e test #1306
TRT-2511: Reapply “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1301
NO-JIRA: Fix linter issues on dot-imports #1304
OTA-1546, OTA-1833: Add OKD feature set filtering logic, Bump openshift/api #1302
NO-JIRA: Fix some lint issues #1299
Revert “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1297
OTA-1787: pkg: Update Upgradeable condition to explicitly mention major version updates #1276
NO-JIRA: hack/build-image.sh: Update Dockerfile reference #1272
OCPBUGS-73929: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1294
NO-JIRA: Bump to builder:rhel-9-golang-1.25-openshift-4.22 #1293
OTA-1604: migrate ocp-46922 from otp to cvo repo #1279
NO-JIRA: Introduce oc-cli for e2e tests #1267
OTA-1786: pkg/payload/precondition/clusterversion/gianthop: Allow updates to 5.0 #1275
NO-ISSUE: .claude/commands/update-godocs: New command for Go doc updates #1278
NO-ISSUE: OTA-1605 Adding descriptions for building the binary and running the tests #1263
NO-JIRA: Create AGENTS.md file #1268
OCPBUGS-17007: vendor: Update openshift/library-go to get new default TLS configuration #1270
Full changelog

configmap-reloader

OCPBUGS-77734: Updating configmap-reload-container image to be consistent with ART for 4.22 #78
OCPBUGS-70038: Updating configmap-reload-container image to be consistent with ART for 4.22 #76
Full changelog

console

CONSOLE-4990: Replace history object navigation with useNavigate hook #15959
CONSOLE-5030: Refactor remaining firehose impacted components #16039
CONSOLE-4945: Add Disk, Network, CPU and VM counts to node overview #16000
OCPBUGS-77415: Fix infinite recursion in project access form #16069
CONSOLE-5019: Consistently use FC and memo type param #16098
OCPBUGS-77423: Fix extra space in PageHeading when no actions present #16072
OCPBUGS-77044: Fix topology node labels disappearing when moving cursor to kebab menu #16042
NO-JIRA: Context improvements #16068
OCPBUGS-44612: Deprecate useUserSettings and expose useUserPreference #16057
CONSOLE-5100: Remove support for PatternFly 5 #16056
CONSOLE-5094: Delete Dockerfile.product.nodejs #16047
OCPBUGS-77016: fix type as K8sResourceKind assertion in createKnatifyPage #16044
CONSOLE-5063: Remove AppInitSDK #16019
OCPBUGS-76945: Add Azure Resource Group in OCP console for ODF STS installation #16030
OCPBUGS-76378: fix display of Lightspeed button #16012
OCPBUGS-77000, OCPBUGS-77013: OLM prompts for GCP Workload Identity parameters during Kiali Operato… #16051
NO-JIRA: /microcopy-review improvements #16026
CONSOLE-4991: Reenable all unit tests #16025
CONSOLE-5021: Enable consistent-type-imports #16031
HELM-598: Add new server endpoint for installing OCI charts without Helm repository #15863
CONSOLE-5011: migrate to yarn berry #15986
OCPBUGS-76554: Ban CJS imports of PF react-icons #16023
OCPBUGS-76283: Show modal when downloading pod logs #16014
NO-JIRA: New microcopy-review skill and context simplification #16009
CONSOLE-5055: AsyncComponent type improvements #16002
OCPBUGS-76553: i18n miss in CustomIconModal #16021
CONSOLE-5012: Create shared error modal launcher using React Context #15946
CONSOLE-4991, ODC-6264: Jest 30 followup #16010
CONSOLE-5064: Properly mock PluginStore in unit tests #16017
CONSOLE-5012: Migrate remaining modals to useOverlay pattern #15990
CONSOLE-4976: Add ClusterExtension creation form and unit tests #15955
CONSOLE-3769: Phase 2 of using OpenShift Dynamic Plugin SDK #15904
CONSOLE-4990: Migrate from history object to React Router v6/v7 hooks #15956
OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 (Latest) #15976
OCPBUGS-74974: Use Actions button instead of kebab menu on Subscription details page #15983
CONSOLE-5043: Remove defaultProps from operator-hub-item-details #16003
OCPBUGS-74538: User without access on causes NamespaceBar to reset to All projects when used via dynamic plugin #15996
CONSOLE-5044: TypeScript port of events.jsx #15944
CONSOLE-4987: Conditionally render Guided Tour based on capability and disable it for Console E2E tests #15926
OCPBUGS-74639: Number links for failed pods/nodes on ‘Cluster inventory’ card are not linked to filtered table list #15979
NO-JIRA: Convert useTechPreviewFlagProvider to static function #15960
CONSOLE-5015: Refactor file-input to use PF #15952
OCPBUGS-74137: DataView Pagination page menus : i18n misses #15982
OCPBUGS-74349: Worklodas - Edit pod count and Edit parallelism : Content is in English #15980
CONSOLE-5029: Refactor withDashboardResources in with-dashboard-resources.tsx into … #15927
CONSOLE-5012: Additional modal migrations to overlay pattern #15940
NO-JIRA: Add guidance for avoiding deprecated components #15969
OCPBUGS-74647: Fix referenceFor parameter in SubscriptionDetailsPage #15957
OCPBUGS-65967: Clean up old session cookies to prevent accumulation #15837
CONSOLE-5012: Migrate modals to overlay pattern #15939
OCPBUGS-65828: Reduce log noise from transient async cache failures #15821
OCPBUGS-70329: Auto-linkify URLs in status card alert messages #15880
CONSOLE-5039: Remove useSafetyFirst #15937
CONSOLE-4943: Add Machine Set, MachineConfigPool, and VMs columns to Nodes list view #15909
OCPBUGS-74241: Add null checks to CRB subject #15943
OCPBUGS-72585: Do not resolve disabled catalog type extensions #15908
CONSOLE-5012: Migrate delete modals and PVC modals to overlay pattern #15932
OCPBUGS-74369: Bump lodash to latest #15947
NO-JIRA: Suppress ResizeObserver-related windowError #15958
OCPBUGS-72260: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15928
NO-JIRA: Suppress ResizeObserver-related e2e errors #15950
CONSOLE-5041: Replace testHook with renderHook from RTL #15936
NO-JIRA: SDK post-publish tasks #15942
OCPBUGS-74178: Direct AI agents to AGENTS.md documentation hub #15938
NO-JIRA: Moving the oc and kubectl delete,apply,create commands from deny to ask permissions #15941
NO-JIRA: Prepare for 4.22-prerelease.1 release #15933
CONSOLE-5050: Make shared modules peerDeps in SDK #15934
CONSOLE-3769: Refactor weird getResourceSidebarSamples #15915
CONSOLE-5042: Remove React.FCC #15929
OCPBUGS-70340: Ensure OpenAPI in monaco stays fresh #15890
CONSOLE-4402, CONSOLE-4510: React 18 upgrade - phase 1 #14869
NO-JIRA: Add /pre-push review command for comprehensive local code analysis #15800
OCPBUGS-65891: Follow up on fixing the remaining issues in the multi-group impersonation feature #15916
CONSOLE-4630: @types/react 18 prep work #15893
OCPBUGS-73766: Configure coderabbit.yaml for only major reviews and disable multiple summaries #15919
CONSOLE-5035: cache lazy route components to prevent navigation freeze #15924
CONSOLE-4865: Remove @openshift-console/plugin-shared #15921
NO-JIRA: Update dynamic demo plugin OWNERS and lock files #15920
NO-JIRA: Refactor - consolidate K8s client creation into new function #15897
OCPBUGS-70011: i18n upload/download routine task - 4.21 / 281 #15905
OCPBUGS-69377: Update the perspective name in dev-console guided tour #15852
OCPBUGS-69380: Fixed loaded page no roles error upon render #15878
OCPBUGS-72571: remove “OperatorHub” from OLM integration tests where … #15911
OCPBUGS-69387: update operator details when changing channels #15853
OCPBUGS-70344: change OperatorHub strings to Software Catalog #15891
CONSOLE-4844: merge secret scenarios #15684
CONSOLE-4912: update machine config tests #15759
OCPBUGS-63120: Home -> Overview page returns error during upgrade process #15831
OCPBUGS-62611: Fix editing secrets with mixed text and binary data #15820
OCPBUGS-65946: Fix search component to not pass ALL_NAMESPACES_KEY to… #15789
OCPBUGS-65831: Fix catalog service swapping description and markdownDescription fields #15750
OCPBUGS-68332: Improve VAC field on PVC details page #15843
OCPBUGS-70330: remove support for Windows 8 Live Tiles and IE “standards mode” #15886
OCPBUGS-70324: Revert the console-shared.json to console-shared directory #15885
CONSOLE-4989: bump to react-redux 8 #15854
CONSOLE-3769: Update OpenShift Dynamic Plugin SDK + webpack-related deps #15892
CONSOLE-4969: Configure a coderabbit.yaml file for console repo #15818
NO-JIRA: Fix incorrect syntax for claude settings #15899
CONSOLE-4971: Add AGENTS.md and structured AI documentation #15896
OCPBUGS-66247: make cloudCredentials optional so operators load when … #15803
CONSOLE-3769: Even more openshift/dynamic-plugin-sdk prep work #15778
OCPBUGS-63389: Remove asterisk from Routing label field in alertManager receiver form #15825
CONSOLE-4631, CONSOLE-5005: Manually rewrite remaining namespace/default imports #15884
CONSOLE-4631: Run react/update-react-imports #15872
OCPBUGS-68376: fix routing issues on packageserver PackageManifest de… #15844
CONSOLE-4916: add auto scenario about yaml sidebar #15790
OCPBUGS-65678, OCPBUGS-65765: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15763
OCPBUGS-63159: Prevent the display of events from projects other than the currently selected project #15836
OCPBUGS-63237: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15813
OCPBUGS-60426: Fix edit application via Deploy image internal registry doesn’t select correct image stream #15795
NO-JIRA: Add /gen-rtl-tests Claude code slash command for generating React Testing Library tests for React components #15668
CONSOLE-4970: Upgrade Jest from 22 to 30 #15817
CONSOLE-4979: Speed up check-patternfly-modules + add dedupe step to CI #15835
OCPBUGS-67002: fix bug where Installed badge is not fully visible #15828
OCPBUGS-63390: show DASH to routing labels column when receiver doesn’t have routing labels #15824
CONSOLE-4630: Fix 67 react 18 type errors #15779
CONSOLE-4106: Add ClusterExtension creation page #15741
OCPBUGS-62713: Prevent application filter in Topology view from resetting to all applications unexpectedly #15812
NO-JIRA: disable guided tour when cypress is running #15841
And 20 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #1108
OCPBUGS-77741: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 #1121
OCPBUGS-65622: add service account to downloads deployment #1087
OCPBUGS-62307: Remove orphaned console-conversion-webhook deployment and related resource #1053
OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1102
OCPBUGS-72387: Update the downloads manifest #1101
OCPBUGS-72387: Fix PDB blocking node drains during cluster upgrades #1099
CONSOLE-4986: Vendor API changes for GuidedTourFeature capability #1091
NETOBSERV-2296: add missing annotations on netobserv quickstart #1080
OCPBUGS-65496: Add missing relatedObjects + small refactoring #1075
NO-JIRA: Fix claude syntax #1088
OCPBUGS-68367: Add missing console annotation to the quickstart #1082
OCPBUGS-70045: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 #1086
CONSOLE-4871: Add AI context documentation files #1077
CM-821, ESO-277, SSCSI-235: Add quickstart guides for secrets management operators #1073
Full changelog

coredns

OCPBUGS-69852: Updating coredns-container image to be consistent with ART for 4.22 #159
NO-JIRA: Add team members to the OWNERS file #162
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: Update DOWNSTREAM_OWNERS #373
OCPBUGS-69813: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #369
OCPBUGS-70057: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #360
OCPBUGS-70072: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #358
Full changelog

csi-driver-nfs

OCPBUGS-77740: Updating csi-driver-nfs-container image to be consistent with ART for 4.22 #169
NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #167
OCPBUGS-70043: Updating csi-driver-nfs-container image to be consistent with ART for 4.22 #168
Full changelog

csi-external-attacher

OCPBUGS-69744: Updating csi-attacher-container image to be consistent with ART for 4.22 #91
Full changelog

csi-external-provisioner

OCPBUGS-77752: Updating csi-provisioner-container image to be consistent with ART for 4.22 #120
OCPBUGS-70054: Updating csi-provisioner-container image to be consistent with ART for 4.22 #118
Full changelog

csi-external-resizer

OCPBUGS-77735: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 #182
OCPBUGS-70039: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 #180
Full changelog

csi-external-snapshot-metadata

OCPBUGS-77411: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 #10
OCPBUGS-69720: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 #8
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-77687: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 #201
OCPBUGS-69935: UPSTREAM: <drop>: restore log level of the group snapshot reconciler #200
OCPBUGS-77413: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 #199
OCPBUGS-66967: UPSTREAM: 1354: UPSTREAM: 1359: Fix for cases where the resource is already present on the cluster #193
OCPBUGS-69979: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 #195
OCPBUGS-66967: UPSTREAM: <drop>: bump log level of the group snapshot reconciler #192
OCPBUGS-69721: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 #194
Full changelog

csi-livenessprobe

OCPBUGS-69958: Updating csi-livenessprobe-container image to be consistent with ART for 4.22 #78
Full changelog

csi-node-driver-registrar

OCPBUGS-70041: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.22 #92
Full changelog

docker-builder

OCPBUGS-70150: bump buildah to 1.39.7 to fix CVE-2025-52881 #494
OCPBUGS-69871: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 #493
Full changelog

docker-registry

IR-350: bump library-go to the latest version #460
IR-350: fix cipher suite configuration conflict with docker distribution #459
OCPBUGS-69762: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22 #457
Full changelog

driver-toolkit

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #182
NO-ISSUE: Add autoconf, automake and libtool packages #181
NO-ISSUE: Support ubi minimal base image #179
OCPBUGS-69699: Updating driver-toolkit-container image to be consistent with ART for 4.22 #178
Full changelog

etcd, installer-etcd-artifacts

OCPBUGS-69868: Updating ose-etcd-container image to be consistent with ART for 4.22 #353
Full changelog

gcp-cloud-controller-manager

OCPBUGS-77570: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.22 #98
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Remove dead RELEASE_DIR ref #263
NO-JIRA: Remove old manifest-gen assets #264
OCPCLOUD-3325: Update to new manifests-gen #258
OCPBUGS-74913: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into master #261
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #259
Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 #257
Full changelog

gcp-machine-controllers

OCPBUGS-77746: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 #144
CORS-4296: Add the N4A machine type #138
OCPBUGS-70052: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 #137
OCPCLOUD-3255: Add AGENTS configuration #136
Full changelog

gcp-pd-csi-driver

OCPBUGS-77632: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #100
OCPBUGS-77602: Support Downward API node name override #99
OCPBUGS-74521: UPSTREAM: 2175: Move VAC storage API to v1 from v1beta1 #97
OCPBUGS-69930: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #87
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-77558: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 #174
OCPBUGS-77428: Pass node name to csi-driver container #172
OCPBUGS-77183: Add RBAC permission for node driver to get Node objects #170
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #168
STOR-2792: STOR-2842: Enable Hyperdisk-balanced High Availability disks #158
STOR-2793: Add volume snapshot class of type images #165
STOR-2543: Add VAC manifest to support tests on GCP PD #160
OCPBUGS-69742: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 #159
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #157
Full changelog

gcp-workload-identity-federation-webhook

CCO-786: update to pick up tls-cipher-suites and tls-min-version #16
CCO-730: Revendor upstream changes #14
OCPBUGS-69839: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.22 #13
Full changelog

haproxy-router

NE-2468: Migrate away from deprecated ioutil #693
OCPBUGS-74511: remove RouteExternalCertificate feature gate #730
NE-2483: bump k8s libraries to v0.35.0 #729
OCPBUGS-72591: Lower verbosity for parseIPList empty list logging #709
NO-JIRA: hack: update image without push #711
NO-JIRA: add jcmoraisjr to owners #717
OCPBUGS-70068: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.22 #707
OCPBUGS-65482: Fix HAProxy redirect: strip port from Host header #696
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPSTRAT-2728: Rebase to 1.35 #2523
OCPBUGS-66338: UPSTREAM: 135629: selinux: Fix the controller to ignore finished pods #2538
OCPBUGS-67200: UPSTREAM: 136202: raise kubelet CSI init backoff to cover ~140s DNS delays #2578
OKD-259: Validate OKD featureset to prevent it from being enabled on OCP clusters #2420
OCPBUGS-73913: UPSTREAM: 135340: cbor: bump limits #2564
OCPBUGS-70170: add label serial for iperf2 testing #2559
OCPBUGS-63045: enable InPlace resize test #2532
NO-ISSUE: Extend k8s suite timeouts for parallel testing load #2497
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

hypershift

OCPBUGS-76645: Make generated container names k8s compliant #7711
OCPBUGS-77254: fix(globalps): watch Machine updates to fix node labeling race condition #7803
GCP-441: tolerate 1 restart for GCP CCM token-minter race condition #7865
NO-JIRA: chore(deps): weekly dependabot consolidation #7863
OCPBUGS-77477: fix(awsutil): handle smithy errors in AWSErrorCode #7827
SREP-3855: unpause leaked child objects on deleting clusters (OCPBUGS-77530) #7861
CNTRLPLANE-2218: feat(aws): migrate ELB/ELBV2 to AWS SDK v2 #7825
OCPBUGS-77621: fix(nodepool): preserve ignition-reached annotation on token secret after restore #7851
OCPBUGS-76337: feat(scale-from-zero): add DescribeInstanceTypes IAM permission #7648
GCP-391: Add ImageRegistry GSA field and IAM binding for Image Registry Operator #7828
CNTRLPLANE-2801: fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies #7845
CNTRLPLANE-2842: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7846
CNTRLPLANE-2801: api: remove redundant kubebuilder enum marker from KeyVaultAccess field #7835
NO-JIRA: bug(metrics): fix typo in hypershift_cluster_waiting_initial_availability_duration_seconds metric #7730
CNTRLPLANE-2840: fix(endpoint-resolver): sort pods by name for deterministic ordering #7854
CNTRLPLANE-2808: bump golang.org/x dependencies in / and /api modules #7818
CNTRLPLANE-2840: feat(CPO): add endpoint-resolver control plane component #7786
CNTRLPLANE-2794: Re-add TestGetDigest and TestGetManifest with mockgen mocks #7777
OCPBUGS-77034: fix(ho): add nil guard for Platform.AWS in metrics collector #7747
GCP-295: Add GCP platform support to E2E test framework #7697
OCPBUGS-76997: remove resource limits from Agent CAPI provider #7812
OCPBUGS-60936: fix(hccp): remove immutable field from kubeletconfigmap #6726
OCPBUGS-77311: handle HostedCluster deletion in secretJanitor to prevent stuck cluster deletions #7779
OCPBUGS-60185: Remove non-deterministic registry override computation from ignition-server #7811
CNTRLPLANE-2784: Document IAM policies for PowerVS credential fields #7778
CNTRLPLANE-2801: add Key Vault private endpoint TCP relay via private router #7701
CNTRLPLANE-2217: feat(aws): migrate kms and Resource Tagging to AWS SDK v2 #7795
CNTRLPLANE-2807: Fix version showing <unknown> in git worktree builds #7814
OCPBUGS-65636: add service account to konnectivity-agent #7309
NO-JIRA: docs(pki): add CA hierarchy diagram and trust distribution details #7799
CNTRLPLANE-2799: Unit test HCP availability and Ready flag reconciliation #7796
OCPBUGS-67262: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7638
GCP-386: scope externaldns RBAC to GCP platform only #7781
OCPBUGS-76350: Honor AWS AMI override in NodePool token generation #7675
OCPBUGS-60185: Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7588
NO-JIRA: docs(agents): add multi-module structure guidance to AGENTS.md #7797
OCPBUGS-76452: update OAuth certificate configuration doc #7785
GCP-402: Add gcp-project and gcp-region flags to hypershift install #7710
GCP-376: Add service account for storage #7676
GCP-367: enable multizone support in CCM cloud config #7731
OCPBUGS-77224: fix(routing): add Azure platform to LabelHCPRoutes() switch #7789
CNTRLPLANE-2220: feat(aws): migrate iam to AWS SDK v2 #7765
NO-JIRA: Skip ./dev directory in codespell checks #7775
NO-JIRA: MCE 2.17 konflux pipielines #7736
NO-JIRA: chore: add powervs-reviewers to OWNERS_ALIASES and OWNERS #7782
OCPBUGS-59876: feat: implement CLI-based OIDC disaster recovery command #7210
OCPBUGS-62177: revert CRR controller changes #7784
OCPBUGS-65824: Add dynamic NodePort range validation to prevent cluster creation failures #7652
CNTRLPLANE-2740: Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs #7721
OCPBUGS-32770: fix(kubevirt): require CAPK image to be explicitly specified #7615
OCPBUGS-62177: fix(pki): use pod container port instead of kubeconfig service port #7744
CNTRLPLANE-1987: Ensure Azure HCP CLI infra commands work correctly #7436
NO-JIRA: fix(e2e): retry guest cluster API calls in EnsureFeatureGateStatus #7723
OCPBUGS-70152: Correct route labeling logic for HCP router infratructure #7605
CNTRLPLANE-2216: feat(aws): migrate route53 to AWS SDK v2 #7726
OCPBUGS-43449: Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks #7727
CNTRLPLANE-644: Unify Validate/Complete Function Signatures Across Providers #7577
OCPBUGS-65879: Fix image-overrides annotation removal propagation to HCP #7533
CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server #7722
OCPBUGS-34662: Manage AWS EBS CSI driver metrics serving certificates via CPO #7538
OCPBUGS-73915: Use openshift golang builder for MCE builds #7735
NO-JIRA: Remove .claude/settings.json #7751
OCPBUGS-62177: Fix certificate revocation validation across all KAS pods #7405
CNTRLPLANE-2696: docs(azure): add managed Azure control plane authentication documentation #7653
NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs #7739
AUTOSCALE-485: bump karpenter-aws dependencies to 1.8.6 #7611
TRT-2554: Revert #7489 “CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition” #7734
GCP-367: Implement GCP Cloud Controller Manager component #7677
OCPBUGS-72596: Fix node-tuning-operator metrics port configuration #7468
CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition #7489
GCP-386: feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702
NO-JIRA: ci: fix bug in leader election detection #7696
GCP-308: test: verify control plane workloads have resource requests #7623
OCPBUGS-60707: Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900
CNTRLPLANE-2736: Rename review-agent-single-pr to address-review-comments #7709
CNTRLPLANE-2215: feat(aws): migrate S3 to AWS SDK v2 #7678
NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
OCPBUGS-55151: Move proxy certificate validation from metrics collector to reconcile loop #7536
CNTRLPLANE-418: Aro swift private #7613
CNTRLPLANE-2700: docs: add HCP networking requirements documentation #7654
CNTRLPLANE-2675: chore(cpo): move infrastructure reconciliation to infra package #7658
GCP-216: feat(nodepool): add GCP platform support #7631
GCP-199: add DNS management to Control Plane Operator #7639
AUTOSCALE-492: karpenter-ignition controller #7582
OCPBUGS-66966: loop over node-pool conditions updating in order #7325
SREP-715: New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533
OCPBUGS-74620: test(e2e): increase default node ready timeout to 45 minutes #7629
OCPBUGS-74498: Add UserAgent telemetry to CPO Azure SDK clients #7620
OCPBUGS-74931: fix(hcco): gate image registry workaround to pre-4.20 releases #7634
NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
NO-JIRA: chore(ai): Add skills for dev workflow #7636
CNTRLPLANE-2709: Update Dependabot to use conventional commits #7672
CNTRLPLANE-2703: Disable Renovate dependency updates #7657
OCPBUGS-74988: fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627
CNTRLPLANE-2214: Migrate STS to AWS SDK v2 #7386
NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
GCP-366: add CloudController service account for CCM #7617
NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
NO-JIRA: Fix teardown flag timing in e2e tests #7586
CNTRLPLANE-2548: add direct Jira REST API integration to pr-report #7532
OCPSTRAT-2437: add unit test for custom HAProxy image annotation #7458
CNTRLPLANE-1708: Enable EnsureGlobalPullSecret AtLeast Version418 #7624
CNTRLPLANE-418: fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587
AUTOSCALE-535: default block device mappings #7583
OCPBUGS-69447: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399
GCP-198: add PSC endpoint controller for customer-side management #7603
CNTRLPLANE-2650: docs(ci): add security requirement for Jira agent issues #7626
CNTRLPLANE-2650: docs: add AI-assisted CI jobs documentation #7598
OCPBUGS-62760: Pre-pull images to avoid startup delays and flaky e2e #7382
OCPBUGS-74247: CAPI image overrides aware of registry config #7575
CNTRLPLANE-1137: Add support for external CNI provider Cilium #7423
GCP-176: feat(gcp): add WIF credentials support for control plane op… #7600
NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
CNTRLPLANE-2580: feat(claude): update /update-konflux-tasks to work without log file #7591
GCP-213: feat(platform): add Google Cloud Platform support with CAPG Deployment #7305
OCPBUGS-62944: forceful termination of instances during HCP AutoNode deletion #7281
NO-JIRA: build: bump Go version to 1.25.3 #7592
CNTRLPLANE-1388: Spot with termination handler #7567
CNTRLPLANE-1892: chore(e2ev2): fixup GCP API checks #7555
NO-JIRA: ci: update build root image to Go 1.25 #7584
CNTRLPLANE-1988: Add Azure support to product CLI for self-managed customers #7407
AUTOSCALE-373: Proper ROSA instance tagging for AutoNode #6939
OCPBUGS-63345: AWS credential metric to distinguish unknown from invalid status #7075
OCPBUGS-74336: feat(cpo): check components have rolled out before setting available #7434
NO-JIRA: chore(deps): weekly dependabot consolidation #7563
OCPBUGS-64576: fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147
CNTRLPLANE-2559: feat(contrib): add request serving setup utility #7534
CNV-76520: ci: allow restart of kubevirt-cloud-controller-manager #7469
NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
OTA-1833: Adopt a new FeatureSet OKD #7557
OCPBUGS-62761: chore(e2e): remove KAS check from capi pod #7485
OCPBUGS-73817: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480
OCPBUGS-65885: added 1.34 required ELBv2 perms to CCM role #7339
API-1835: Scaffold dynamic informers #7477
CNTRLPLANE-2579: feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553
OCPBUGS-58397: feat(KubeVirt): configure External evictionStrategy on VMs #6380
GCP-197: add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302
NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
CNTRLPLANE-2291: feat(claude): add fix-hypershift-repo-robot-pr command #7438
CNTRLPLANE-2568: Update Konflux Tekton tasks to latest versions #7551
NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
OCPBUGS-55399: Add NTO Service and ServiceMonitor #7355
NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
OCPBUGS-73914: Update Tekton tasks to pass enterprise contract validation #7535
NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
NO-JIRA: Add karpenter approvers and reviewers #7488
NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
OCPBUGS-73847: fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483
OCPBUGS-67234: fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389
OCPBUGS-72258: use InfraStatus.APIPort for custom DNS kubeconfig #7470
API-1835: Scaffold OpenShiftManager controller #7445
CNTRLPLANE-1768: feat(api): add support for graceful service account signing key rotation #7324
OCPBUGS-66205: [kubevirt] Make L3 migration labeling conditional #7308
NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
OCPBUGS-70320: enable scale-up from zero with InPlace upgrade #7427
NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
CNTRLPLANE-208: Document needed Azure infrastructure #7361
NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
OCPBUGS-72411: fix(cno): use brackets only for IPv6 in server URL #7447
NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
OCPBUGS-72397: Fix Konflux EC voilation, update deprecated base … #7442
NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
CNTRLPLANE-1978: add e2e tests for DataPlaneConnectionAvailable condition #7291
AUTOSCALE-473: Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392
NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
OCPBUGS-66211: fix(azure): preserve defaulted values in Infrastructure status #7393
OCPBUGS-69761: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425
GCP-258: Use PullAlways for :latest image tags in control plane components #7313
OCPBUGS-63698: fix(azure): remove CSI secret ownership from hypershift-operator #7157
OCPBUGS-66154: add OAuth certificate configuration doc #7351
OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368
CNTRLPLANE-1622: Enable nodepool autoscaling min zero #6975
CNTRLPLANE-2119: feat(hostedcluster): implement service account signing key rotation #6874
OCPBUGS-66325: fix: ValidAWSIdentityProvider condition not being correctly copied from HCP #7352
NO-JIRA: fix(install): skip IPAM CRDs if they already exist #7363
CNTRLPLANE-1977: Add weekly PR report generation capability #7272
OCPBUGS-68366: CVE-2025-58183 #7374
CNTRLPLANE-2123: feat: update builder images from 4.21 to 4.22 #7317
OCPBUGS-63452: Add finalizer protection to control plane workloads #7258
CNTRLPLANE-2205: feat(aws): enable shared role in e2e #7400
NO-JIRA: chore(azure): bump AKS Kubernetes version to 1.33.0 #7371
CNTRLPLANE-2206: Create tool to aggregate upstream docs into single file for NotebookLM #7367
OCPBUGS-66211: fix(vendor): bump openshift/api dependency to current master #7345
OCPBUGS-66146: Add OADP backup recovery tool for HyperShift clusters #7385
CNTRLPLANE-2221: Add CI infrastructure documentation #7369
CNTRLPLANE-2123: Fix buildah-remote-oci-ta task enterprise contract violation #7396
CNTRLPLANE-2049: Update kube-api-linter dependency #7346
NVIDIA-314: Support Node CIDR Allocation for networkType=Other Using AllocateNodesCIDRs #7278
CNTRLPLANE-2123: feat: update latest supported version from 4.21 to 4.22 #7315
CNTRLPLANE-2205: cmd/aws: fix managed role handling and auto-detect on destroy #7373
CNTRLPLANE-2123: feat: add release-4.21 branch to renovate configuration #7318
NO-JIRA: test: remove network-dependent unit tests for image metadata #7381
OCPBUGS-67233: fix(konflux): update outdated Tekton tasks to pass enterprise contract validation #7372
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77598: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 #129
OCPBUGS-77167: standardize build paths #117
OCPBUGS-69849: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 #116
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-77624: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 #167
STOR-2852: Enable snapshot tests ibm vpc block csi #160
OCPBUGS-69909: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 #159
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-77728: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #151
OCPCLOUD-3322: Update to new manifests-gen #150
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #145
OCPBUGS-70027: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #143
Full changelog

ibmcloud-machine-controllers

OCPBUGS-70030: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #74
Full changelog

insights-operator

CCXDEV-15776: install config update #1229
CCXDEV-15641: gather machineconfig size #1240
NO-JIRA: exclude vendors file from coderabbit review #1243
NO-JIRA: Upgrade Golangci-lint to version 2 #1237
NO-JIRA: enable InsightsDataGather in all clusters #1242
NO-JIRA: add custom coderabbit config #1232
OCPBUGS-66233: Custom Obfuscation unmarshal #1216
CCXDEV-15561: Improve test coverage 3 #1213
NO-JIRA: update on-demand gathering examples #1212
OCPBUGS-65500: reference ClusterRoles in ClusterOperator #1211
CCXDEV-15778: add event logging for operator version changes #1202
CCXDEV-15589: set limit for gathering interval #1171
OCPBUGS-67001: update dataGather status after job deletion #1201
OCPBUGS-66386: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1203
CCXDEV-15561: Improve test coverage 2 #1199
OCPBUGS-65582: set Progressing condition on cluster update #1207
CCXDEV-15258: DataGather and InsightsDataGather update to v1 #1159
OCPBUGS-66996: Extends the time for the extractor liveness probe #1198
OCPBUGS-69764: Updating ose-insights-operator-container image to be consistent with ART for 4.22 #1204
CCXDEV-15561: Improve test coverage #1191
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Optimize the CPU usage of insights-runtime-extractor #60
OCPBUGS-77060: Update Go to 1.25 #63
OCPBUGS-76464: remove dnf cache from the container images #62
chore: Update JBoss EAP 8.1 runtime samples #61
eap 8.1 test fix #57
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #806
METAL-1749: Uplift setuptools to remove python-wheel deps #804
METAL-1748: Drop genisoimage in favor of xorriso #803
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #805
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #801
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #799
OCPBUGS-76935: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #790
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #793
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #789
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #784
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #783
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #773
ART-14497: Fix ART builds with -minimal #779
NO-ISSUE: Bump openstacksdk version to 4.9.0 #776
OCPBUGS-74579: fix for minimal builds #772
OCPBUGS-74427: Bump eventlet version to latest bugfix #770
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #768
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #762
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #758
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #757
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #755
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #754
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #751
OCPBUGS-70001: Updating ironic-container image to be consistent with ART for 4.22 #752
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #748
OCPBUGS-65969: Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset #728
Full changelog

ironic-agent

METAL-1749: Uplift setuptools to remove python-wheel deps #245
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #243
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #242
OCPBUGS-74579: fixes for minimal builds #240
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #238
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #237
Updating ironic-agent-container image to be consistent with ART for 4.22 #225
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #223
Full changelog

ironic-machine-os-downloader

OCPBUGS-77617: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 #115
OCPBUGS-71233: Export TMPDIR to be available to child processes #111
OCPBUGS-69891: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 #110
Full changelog

ironic-static-ip-manager

OCPBUGS-70044: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.22 #56
Full changelog

keepalived-ipfailover

ART-14594: Update Dockerfile for centos 10 base #223
OCPBUGS-76286: openshift-enterprise-base: remove subscription-manager, dbus, systemd #221
OCPBUGS-67357: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.22 #218
Full changelog

kube-metrics-server

OCPBUGS-74012: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #49
: NO-JIRA: Bump openshift/kubernetes-metrics-server to v0.8.1 #50
NO-JIRA: Bump golang image versions #51
OCPBUGS-69952: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #48
Full changelog

kube-rbac-proxy

OCPBUGS-69716: Updating kube-rbac-proxy-container image to be consistent with ART for 4.22 #129
CNTRLPLANE-882: 0.20.2 downstream #131
Full changelog

kube-state-metrics

OCPBUGS-77616: Updating kube-state-metrics-container image to be consistent with ART for 4.22 #134
OCPBUGS-73993: Updating kube-state-metrics-container image to be consistent with ART for 4.22 #129
OCPBUGS-71224: [bot] Bump openshift/kube-state-metrics to v2.18.0 #130
Updating kube-state-metrics-container image to be consistent with ART for 4.22 #126
Full changelog

kube-storage-version-migrator

OCPBUGS-65984: add leader election #237
OCPBUGS-73955: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 #236
OCPBUGS-69726: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 #235
Full changelog

kubevirt-cloud-controller-manager

NO-JIRA: Upstream Sync - 2026-01-27 #60
Full changelog

libvirt-machine-controllers

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #309
Full changelog

machine-api-operator

SPLAT-2615: Added AWS dynamic dedicated host support #1455
OCPCLOUD-3166: Bump openshift/api #1453
OKD-259: Vendor API and add OKD featureset Specific CRDs #1448
SPLAT-2603: Updated AWS dedicated host id validation pattern #1451
OCPBUGS-64937: vsphere - Cache REST API sessions to prevent excessive vCenter logouts #1432
OCPCLOUD-3222: Adds agents.md #1449
OCPBUGS-69862: Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 #1450
Full changelog

machine-config-operator

OCPBUGS-77839: Fix node degrades due to file and OS update failures #5744
MCO-2147: Remove all remaining hardcoded references for TLS configuration #5747
MCO-2145: Disable skew enforcement on SNO clusters #5739
MCO-2138: migrate multi-stream test cases from the private tests repo… #5701
OCPBUGS-77625: Update ose-machine-config-operator-container image to be consistent with ART for 4.22 #5730
OCPBUGS-77803: Update AMI Whitelist #5740
MCO-2025: Add functionality to populate OSImageStream value in MCP status #5689
AGENT-1424: Fix e2e iri tests #5717
OCPBUGS-77498: Fix failure domain matching during vsphere boot image updates #5723
MCO-2141: dont execute tls tests until OCPBUGS-76990 is fixed #5713
OCPBUGS-74514: OCPBUGS-74515: OCPBUGS-74516: OCPBUGS-74517: remove bootimage update feature gates #5718
OCPBUGS-77483: Update AMI Whitelist #5719
CORENET-6738: Remove lingering references to openshift-sdn #5591
NO-ISSUE: Increate timeout for sharded ocl test #5696
OCPBUGS-77318: Clean up vsphere login error logging #5702
NO-ISSUE: Revert “MCO-2120: Rework OS Image Stream label classification” #5703
MCO-2124, MCO-2125: migrate units and storage test cases #5660
NO-ISSUE: Create timeout per resource to clean up #5676
MCO-1870: Split MachineConfigNodeUpdateFilesAndOS condition into MachineConfigNodeUpdateOS and MachineConfigNodeUpdateFiles #5411
MCO-1803: Add test case: CPMS interaction with automatic skew #5661
MCO-2032: Avoid MCPs duplication at install time #5518
MCO-2131: Break e2e-ocl test suite into 2 #5669
MCO-2120: Rework OS Image Stream label classification #5650
OCPBUGS-24003: mcd_config_drift not working properly #5632
MCO-2035: Add a prometheus alert to indicate scaling risk #5615
MCO-2036: Enable boot image updates by default for vsphere and Azure #5583
OCPNODE-3880: bump openshift/client-go #5663
OCPBUGS-76444: pkg/daemon/update: Remove kernel-rt-kvm #5654
MCO-2110: Migrate security tests #5621
OCPNODE-3880: Bump openshift/api #5655
OCPBUGS-23418: Machine-config controller should not log about non-existent pull-secret changes #5625
OCPBUGS-76450: reduce MCO image size #5644
NO-ISSUE: Fix cleanup verification timeouts in e2e-ocl tests #5652
OCPBUGS-74692: Write all units when forcefile exists to recover from systemd unit config drift #5612
OCPBUGS-63699: Remove MCD liveness probe #5623
MCO-1984: Add Component Readiness tests for boot image skew enforcement #5547
TRT-2543: Revert #5586 “MCO-2065: Move systemctl execs to dbus calls” #5638
OCPBUGS-75916: crio: disable short_name_mode until we introduce ctrcfg api for it #5628
NO-ISSUE: Make TestImagePrunerErrors flexible to registry behavior changes #5613
OCPEDGE-2216: feat: increase reserved memory for tnf masters #5592
MCO-2065: Move systemctl execs to dbus calls #5586
NO-ISSUE: Fix-up AMI update script to work from CI image #5626
NO-ISSUE: Update AMI script and list #5616
MCO-1877: MCO-1879: MCO-1882: MCO-1884: Implement boot image skew enforcement MVP #5428
MCO-1924: MCO-500: Migrate direct runGetOut() to use CommandRunner in the MCD #5546
NO-JIRA: Fix OSImageStream validating admission policies for OKD #5618
MCO-1953: Refactor functionality to grab machines by state for calculating MCP status #5541
OCPBUGS-20561: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5601
MCO-2090: migrate nodedisruptionpolicy tests from the private reposit… #5602
NO-JIRA: Pass TAGS argument to the machine-config-controller image build #5611
AGENT-1395: IRI followup changes #5562
AGENT-1424: Add e2e test for IRI deletion #5608
MCO-2088: Remove wasm extension #5598
OCPBUGS-72555: Restrict CPMS boot image configuration to only AWS, GCP and Azure platforms #5540
NO-ISSUE: Add bootstrap e2e guide #5604
NO-ISSUE: CPMS test should account for skew API #5599
OCPBUGS-74368: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5593
MCO-2059: migrate machineconfignodes from private repo #5589
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5582
NO-ISSUE: Fix e2e ocl intermittent failures #5595
MCO-1182: migrate private test case OCP-87023 #5587
AGENT-1424: add initial e2e tests for the InternalReleaseImage controller #5588
AGENT-1412: Prevent deletion of InternalReleaseImage when in use #5545
OCPBUGS-71238: Consider image mirrors for OSImageStream fetching #5560
NO-ISSUE: Fix Failure Status condition to True when kubeletconfig or container runtime config validation fails #5542
OCPBUGS-62295: Shorten HAProxy timeouts #5312
MCO-2055: migrate bootimages tests #5551
Revert “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5576
OCPBUGS-73802: Fix up bootstrap-e2e #5563
MCO-2028: Add target OS version detection #5556
NO-JIRA: bump openshift/client-go #5500
NO-ISSUE: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5555
OCPBUGS-72396: use D-Bus API to list systemd units #5537
OCPBUGS-56717: enable nodeip-configuration for platform external #5475
CORS-4208: set default KUBELET_NODE_IPS for dualstack nodes #5384
OCPBUGS-72553: CPMS boot image config should not override standard MachineSet configuration #5539
OCPBUGS-67229: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5509
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5527
AGENT-1411: fix IRI registry setup file #5543
OCPBUGS-71189: Configure proxy from ControllerConfig #5538
MCO-2047: migrate scale tests from private repository to MCO repository #5533
MCO-650: Implement custom pool booting #5361
MCO-2049: Validate MCP osImageStream reference #5535
NO-ISSUE: Add README for MCO Operator disruptive e2e tests #5522
MCO-2037: Fix timeout during configMap cleanup #5529
AGENT-1411: Preload the registry image when starting the iri-service #5514
NO-JIRA: kubelet: drop pod-infra-container-image usage #5460
OCPBUGS-70259: Enable existing units without content #5520
MCO-2018: Move operator metrics into the controller #5498
MCO-2033: Refactor bootstrap dependency handling #5519
OCPNODE-3973: Default CPU/Memory changes to Workers - AutoSizingReserved #5491
OCPBUGS-69910: Bump OpenShift builder images to 4.22 #5512
OCPBUGS-69674: Skip boot image updates if arch annotation is not found #5508
MCO-1961: Integrate OSImageStream into MCP and sync logic #5476
MCO-2006: Migrate pinned images sets private test cases #5466
OCPBUGS-66209: clusteroperator/machine-config blips Degraded=True in CI jobs #5465
MCO-2015: Use an event based queue in the boot image controller #5479
MCO-1016: Only update when there is an actual controller change #4742
MCO-1961: Rework MC’s OSImageURL merge logic #5488
OCPBUGS-62984: MCP is not correctly degraded when a pivotError happens #5492
OCPBUGS-62828: MCO degraded when an empty pull-secret is configured #5486
AGENT-1391: Use TLS cert for the InternalReleaseImage registry #5483
OCPBUGS-66420: Revert “Default Enablement of Auto Sizing Reserved in OpenShift 4.21” #5489
Full changelog

machine-image-customization-controller

OCPBUGS-77737: Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 #167
OCPBUGS-76461: Clean up dnf cache to reduce container image size #162
OCPBUGS-22175: Add IPA messages for console and SSH login #158
NO-ISSUE: Add AGENTS.md and CLAUDE.md #156
OCPBUGS-70040: Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 #155
Full changelog

machine-os-images

OKD-322: Swap uname -p to uname -m #80
METAL-1720: Add aarch64 symlinks for initramfs #79
NO-ISSUE: Run fetch_image with tracing #68
OCPBUGS-69857: Updating ose-machine-os-images-container image to be consistent with ART for 4.22 #76
NO-ISSUE: Add AGENTS.md file #75
Full changelog

metallb-frr

CNF-20883: Downstream merge 2025-12-30 #118
Full changelog

monitoring-plugin

OU-1242: dont autofill rename #820
COO-1562: fix coo namespace issue #804
OCPBUGS-77718: Updating monitoring-plugin-container image to be consistent with ART for 4.22 #803
NO-JIRA: simplify dockerfile by removing cachito dependencies #799
OU-1162: perses automation testing - import dashboard and rbac #794
OU-1236: Kebab icon should be disable while “Checking permissions” is happening #783
NO-JIRA: fix radius of button groups #784
OU-1234: perses automation testing - rbac users scenarios added with project selector #781
OU-1139: feat: allow to import and migrate a dashboard #779
OU-1214: [Edit Dashboard] - Time range is not persisted when saving #778
OU-1195: List OCP namespaces in Create Dashboard ProjectSelector #765
OU-1231: customizable dashboards automation testing fixes after merge to main #771
NO-JIRA: Init Coderabbit config #770
OU-1189: automation for kebab management actions for perses dashboards #757
COO-1562: update acm alerting UI test case #753
OBSINTA-1063: Add incidents e2e command #740
OU-1213: IncidentPage add error state #750
OU-1062: feat: mark alert menu active for incidents tab #754
OU-1205: feat: force rounded dates for consecutive intervals #748
OU-915: create dashboards and rbac #746
OU-1039: add info alert to the Incident page #741
NO-JIRA: fix: update vulnerable dependencies #742
COO-1515: add the cluster-health-analyzer feature #736
OCPBUGS-72604: remove top level dispatch into useEffect #730
NO-JIRA: monitoring testing - metrics - ungraphable for periodics #731
OU-1134: edit perses dashboards automation testing #712
OU-1122: reuse existing handler to set alerts table data #690
NO-JIRA: fix: remove unnecessary package.lock #728
OCPBUGS-70014: Updating monitoring-plugin-container image to be consistent with ART for 4.22 #708
OBSINTA-1062: custom cluster-health-analyzer builds #720
NO-JIRA: metrics automation failing only in periodics - fix click and type timespan #725
NO-JIRA: fix esbuild optional dependencies for cross arch builds #721
OCPBUGS-70314: fix: update qs vulnerable dependency #715
NO-JIRA: metrics automation testing for presubmit and periodic #716
NO-JIRA: feat: use esbuild-loader, add push manifest command to makefile #713
OU-1064: list perses dashboards automation testing #711
NO-JIRA: monitoring automation fixing Core platform change #709
OU-632: Split ALERTS query_range into several requests for Incidents #678
OU-1082: claude slash commands cypress-setup and cypress-run #673
OU-1074: feat: add backport claude command #691
OU-1088: remove random multiplication #696
OU-1073: chore: add contributing guide #694
NO-JIRA: automation - dev user scenarios fixes with namespace level changes #692
OBSINTA-853: Cypress Incidents Remove Flaky Tag #688
OU-1081: allow claude-code to build-images #686
OU-1123: alerts chart in Incidents - set the container height same as char… #689
OBSINTA-858: [Incidents] Commands for AI-Assisted Development of Cypress Tests #621
OBSINTA-853: Incident tests CI: Incorrect MP namespace + Race Condition in Closing Guide Tour #679
OCPBUGS-68373: fix: upgrade node-forge vulnerable dependency #681
NO-ISSUE: expose argument’s default values #665
NO-JIRA: automation monitoring testing stabilization flaky scenarios #684
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-admission-controller

OCPBUGS-69968: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 #113
Full changelog

multus-cni, multus-cni-microshift

CORENET-6864: Ds merge 3/3/2026 #280
Full changelog

multus-networkpolicy

downstream sync 2026-02-23 #97
ds: disable DependaBot downstream #96
OCPBUGS-77537: Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 #101
OCPBUGS-76465: Clean up dnf cache #99
OCPBUGS-77019: Disable metrics server #98
CNF-21001: downstream: Transition to nftables backend #77
OCPBUGS-69727: Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 #83
Full changelog

must-gather

OCPBUGS-77832: Updating ose-must-gather-container image to be consistent with ART for 4.22 #528
NO-JIRA:gather_ppc: detect NTO image from TuneD pods on HCP #518
no-jira: chore: ensure scripts are properly formatted #524
no-jira: test: add basic UT for collection-scripts #521
OSSM-11290: Collect Istio ZTunnel resources #511
OCPBUGS-70064: Updating ose-must-gather-container image to be consistent with ART for 4.22 #519
Full changelog

network-metrics-daemon

OCPBUGS-74026: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #141
OCPBUGS-69971: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #140
Full changelog

network-tools

NO-JIRA: Comment submariner team members until they’re ready for OVNK bugs #171
OCPBUGS-70066: Updating ose-network-tools-container image to be consistent with ART for 4.22 #170
Full changelog

networking-console-plugin

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #360
OCPBUGS-77174: Fix display of NAD type for NADs created from YAML #358
OCPBUGS-77414: simplify dockerfile by removing cachito dependencies #356
CNV-59877: Fix permissions request for NADs #352
OCPBUGS-41199: Fix NAD creation using default namespace instead of selected one #348
Remove yarn references from ART Dockerfile #347
CNV-78079: remove Virtual machine networks page #344
CNV-78079: Virtual machine networks page - Other types tab #335
CNV-78079: Virtual machine networks - deletion #343
CNV-78079: Virtual machine networks - details page updates #333
CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #339
CNV-78194: update PatternFly to 6.4.0 to align with Console main #336
CNV-70790: Navigation to Project Mapping Before Network Definition Com… #338
CNV-69219: New translations #337
CNV-78079: Virtual machine networks - list updates #329
OCPBUGS-74423: Migrate to npm #331
CNV-77547: add “Make this network available for all projects” option to Virtual machine network Wizard #328
CNV-76711: Remove @openshift-console/plugin-shared package #327
CNV-76879: Allow passing the physical network name via URL parameter in the VM network wizard #326
CNV-76435: CUDN breadcrumb link to page with Project selector #325
OCPBUGS-73548: remove whitelist for allowlist #321
CNV-75831: list all NetworkPolicies in “All projects” #313
CNV-76277: Fix name generator with unprofessional names #315
OCPBUGS-70000: Updating networking-console-plugin-container image to be consistent with ART for 4.22 #312
CNV-76211: Remove deprecated badge from localnet #314
CNV-74685: Fix vm network edit modal #311
CNV-74687: Fixing the title and redirect when deleting a vm network #307
CNV-72230: fix networking links #309
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-69976: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.22 #53
Full changelog

nutanix-machine-controllers

OCPBUGS-74002: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 #129
OCPBUGS-69913: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 #128
Full changelog

oauth-apiserver

CNTRLPLANE-2436: bump(k8s)=1.34.1 #164
CNTRLPLANE-2260: cmd/oauth-apiserver-tests-ext: Update OTE framework integration #162
OCPBUGS-69818: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 #160
CNTRLPLANE-1259: Simplified test infrastructure to single-module architecture #154
Full changelog

oauth-proxy

OCPBUGS-73848: test/e2e - do not use ambiguous container image short names #343
Full changelog

oauth-server

OCPBUGS-63228: groupmapper: avoid mutating original group users slice when removing user #211
CNTRLPLANE-2437: bump(k8s)=1.34.1 #208
Full changelog

oc-mirror

CLID-197: Add TargetRepo, TargetTag to additionalImages #1327
OCPBUGS-77726: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1364
OCPBUGS-77726: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 (missing files from ART PR 1364 ) #1366
CLID-539: Remove unused constants and centralize widely used ones #1354
NO-JIRA: Bump github.com/containerd/containerd from 1.7.27 to 1.7.29 in the oc-mirror-v2-security-updates group across 1 directory #1308
OCPBUGS-77141: Fix registriesd “unknown userid” failure for arbitrary UIDs #1357
CLID-513: operator catalogs pinned by digest in ISC #1333
OCPBUGS-75013: Fix reg config detection for explicit false values #1348
OCPBUGS-73760: fix conversion issue for catalog #1338
OCPBUGS-69745: fix duplicated channel bug in filtered catalogs #1339
CLID-476: Fixes for cross-build errors #1303
OCPBUGS-70024: images: update images to 4.22 #1337
OCPBUGS-70024: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1331
NO-JIRA: Add tests/results-integration to .gitignore #1326
CLID-480: v2: do not invoke v1 make commands #1310
CLID-512: claude: add slash command for ISC generation #1328
NO-JIRA: add adolfo-ab as reviewer #1329
Full changelog

olm-catalogd, olm-operator-controller

OCPQE-31707: serviceAccount validation unified across all runtimes to enhance cases #656
NO-ISSUE: Synchronize From Upstream Repositories #655
NO-ISSUE: Synchronize From Upstream Repositories #651
OCPQE-31637: fix 83026 for TP cluster #652
OPRUN-4461: Upgrade OTE and Default Catalog Tests dependencies and go #649
OPRUN-4459: Update OCP catalogs to v4.22 ( Release Blocker ; Must go in before OCP release 4.22 ) #627
OCPQE-31553: adjust qe sa and permission test cases per new change #631
NO-ISSUE: Synchronize From Upstream Repositories #648
OPRUN-4459, OPRUN-4460: Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh #644
NO-ISSUE: Synchronize From Upstream Repositories #646
OCPBUGS-65634: add service account to verify pod #638
NO-ISSUE: Synchronize From Upstream Repositories #645
NO-ISSUE: Synchronize From Upstream Repositories #643
MON-4516: Synchronize From Upstream Repositories #641
NO-ISSUE: Synchronize From Upstream Repositories #640
NO-ISSUE: Synchronize From Upstream Repositories #639
NO-ISSUE: Synchronize From Upstream Repositories #637
OPRUN-4441: fix(ote): Fix up own-namespace invalid configuration test #634
NO-ISSUE: Synchronize From Upstream Repositories #633
NO-ISSUE: Synchronize From Upstream Repositories #632
NO-ISSUE: Synchronize From Upstream Repositories #630
OPRUN-4439: Update test-operator startup script to fix pod probe endpoints #629
NO-ISSUE: add 85889 automation #603
NO-ISSUE: add 83979 automation #602
NO-ISSUE: Synchronize From Upstream Repositories #625
OPRUN-4441: fix(ote): fix SingleOwnNamespace test for Boxcutter runtime compatibility and use as operator-controller dep from root instead of upstream release #628
OCPQE-31553: adjust watchnamespace qe case based on change #623
OPRUN-4439: Fix test operator controller pod probes #614
NO-ISSUE: Synchronize From Upstream Repositories #622
OPRUN-4446: Update preflight auth checks for Boxcutter feature gate #621
OPRUN-4112: Synchronize From Upstream Repositories #615
OPRUN-4403: OPRUN-4403 case for upgrade major version #618
OCPQE-31521: enhance ocp-79770 #616
OPRUN-4063: config watchnamespace api cases #612
NO-ISSUE: Synchronize From Upstream Repositories #610
OPRUN-4385: Remove marketplace index from tests #598
NO-ISSUE: Synchronize From Upstream Repositories #608
TRT-2516: Revert #594 “OCPBUGS-65634: add service account to curl job” #609
OCPBUGS-65634: add service account to curl job #594
NO-ISSUE: Synchronize From Upstream Repositories #601
OCPQE-31296: enhance qe cases to make it more stable #604
NO-ISSUE: Run upstream e2e tests tagged with @catalogd-update #605
NO-ISSUE: Synchronize From Upstream Repositories #597
OPRUN-4350: Update to golang 1.25 and ocp 4.22 #586
OCPQE-31263: update 83026 to specify the clustercatalog #583
OCPQE-30674: migrate bandrade’s OLMv1 test cases to OTE #562
OCPQE-31264: update 80458’s timeout to 180s #579
NO-ISSUE: Synchronize from upstream #581
Full changelog

openshift-apiserver

CNTRLPLANE-2438: chore: bump(k8s)=1.34.1 #592
Revert “OCPBUGS-72408: block image import from cluster IP addresses” #599
OCPBUGS-72408: block image import from cluster IP addresses #591
OCPBUGS-70049: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 #590
Full changelog

openshift-controller-manager

CNTRLPLANE-2620: bump github.com/openshift/library-go #427
OCPBUGS-69696: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.22 #425
Full changelog

openshift-state-metrics

OCPBUGS-77709: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #130
OCPBUGS-74036: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #129
OCPBUGS-69985: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #128
Full changelog

openstack-cluster-api-controllers

OCPCLOUD-3321, OSASINFRA-3980: Migrate asset generation to ocp-manifests #386
NO-JIRA: Update DOWNSTREAM_OWNERS #398
NO-JIRA: Cleanup post-infracluster migration #397
OCPBUGS-69731: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #396
NO-JIRA: Sync main with latest upstream (release-0.14) #395
Full changelog

openstack-machine-api-provider

OCPBUGS-76788: Fix make test #154
OCPBUGS-70022: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #149
OCPBUGS-67298: Don’t record event for every reconcile #142
Full changelog

openstack-resource-controller

OCPBUGS-70015: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #25
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPQE-31607: update 43101 for FIPS enabled cluster #1249
OCPQE-31615: fix OCP-33450 for FIPS enabled cluster #1247
OCPBUGS-74928, OCPBUGS-76460: Synchronize From Upstream Repositories #1244
MON-4513, OCPBUGS-75921, OCPBUGS-76460: Synchronize From Upstream Repositories #1237
OCPBUGS-77006: Remove the collect-profiles info from the microshift kustomization file #1233
NO-ISSUE: Synchronize From Upstream Repositories #1228
NO-ISSUE: UPSTREAM:<carry>: automate OCP-40945 #1209
NO-ISSUE: Synchronize From Upstream Repositories #1226
OCPBUGS-76323: OCPQE-31553:remove qe case of testing collect-profiles #1221
NO-ISSUE: UPSTREAM: : migrate bandrade test cases to OTE #1193
OCPBUGS-31547: Remove the collect-profiles job #1215
OCPBUGS-26404: Add retry logic for SNO cluster detection in leader election configuration #1210
OCPQE-31553: continue to adjust case per collect-profiles change #1218
OPRUN-4407: automate OCP-87276 #1212
OCPQE-31558, OCPQE-31559: Update QE test cases to align with the removal of the redhat-marketplace catalog #1217
OCPQE-31553: change to check collect-profile networkpolicy dynamically #1216
OCPBUGS-74389: Synchronize From Upstream Repositories #1206
OPRUN-4414: Integrate APIServer TLS controller into PSM #1205
OPRUN-4415: Synchronize From Upstream Repositories #1202
NO-ISSUE: Synchronize From Upstream Repositories #1201
OPRUN-4416: Remove kube-rbac-proxy from PSM #1190
NO-ISSUE: automate ocp-85743 and ocp-85745 #1197
OCPQE-31468: add missed opm db testdata #1196
OCPQE-31468: recovery missed qe testdata #1194
OCPBUGS-65867: Synchronize From Upstream Repositories #1195
NO-ISSUE: Synchronize From Upstream Repositories #1192
OCPQE-30680: migrate ocp-25674 #1185
NO-ISSUE: UPSTREAM: <carry>: migrate bandrade test cases to OTE #1169
OCPQE-31297: enhance ocp and microshift olm case #1173
NO-ISSUE: Synchronize From Upstream Repositories #1168
OCPQE-30680: migrate OLMv0 test cases to OTE #1166
OPRUN-4351: Update Dockerfiles/CI to use golang 1.25/ocp 4.22 #1178
Updating ose-operator-framework-tools-container image to be consistent with ART for 4.22 #1174
OCPBUGS-69774: Updating operator-registry-container image to be consistent with ART for 4.22 #1177
OCPBUGS-69740: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.22 #1175
Full changelog

operator-marketplace

OCPBUGS-74928: Bump github.com/operator-framework/api from 0.39.0 to 0.41.0 #728
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #726
OCPBUGS-66980: Update NetworkPolicy egress to support HyperShift custom API ports #723
OPRUN-4458: Upgrade Catalog Source Index from 4.21 to 4.22 #727
OPRUN-4456: chore(deps): upgrade Go module dependencies (edge) #724
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 #720
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group #718
NO-ISSUE: Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 #719
OCPBUGS-65581: marketplace-operator sets Progressing=True during upgrade #713
OPRUN-4410: Add Openshift TLS Profiles support to marketplace-operator #715
NO-ISSUE: Bump github.com/operator-framework/api from 0.37.0 to 0.38.0 #717
OPRUN-4302: Remove marketplace index #698
OCPBUGS-74360: Fix image for the build #714
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 in the k8s-dependencies group #711
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 #712
OCPBUGS-74006: Updating marketplace-operator-container image to be consistent with ART for 4.22 #709
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 #701
NO-ISSUE: Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 #702
OCPBUGS-69441: Increase default catalog polling interval to 4h (240m) #695
NO-ISSUE: Bump the k8s-dependencies group with 2 updates #697
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 #691
OPRUN-4354: Update to build containers to golang-1.25 #696
NO-ISSUE: update ports on deployment manifests, fix spacing #689
OCPBUGS-69929: Updating marketplace-operator-container image to be consistent with ART for 4.22 #694
NO-ISSUE: Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 #692
NO-ISSUE: Bump github.com/operator-framework/api from 0.36.0 to 0.37.0 #693
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #686
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-76500: Minimize ACLs by combining ipBlocks into single ACL #2978
CORENET-6168: OTE: u/s tests are Informing by default #3006
OCPBUGS-49368, OCPBUGS-62895, OCPBUGS-65114, OCPBUGS-66267, OCPBUGS-70130, OCPBUGS-74164: DownStream Merge [02-12-2026] #2980
CORENET-6840: OTE: Exclude new BGP and EVPN tests #2982
CORENET-6840: Exclude NetSeg tests for SingleReplica topology #2973
OCPBUGS-61864: DownStream Merge [01-27-2026] #2962
CORENET-6168: skip new NetSeg Localnet test #2963
OCPBUGS-69753: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.22 #2907
OCPBUGS-61524, OCPBUGS-66994: DownStream Merge [01-03-2026] #2917
CORENET-6170: Add OCP tests extension #2461
OCPBUGS-70087: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #2913
OCPBUGS-70058: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #2912
OCPBUGS-66235: DownStream Merge [12-19-2025] #2910
CORENET-6356: Bump OVN to 25.09 and 25.09 for OKD #2909
OCPBUGS-66234: DownStream Merge [12-04-2025] #2896
Full changelog

powervs-block-csi-driver

MULTIARCH-6001: Rebase ibm-powervs-block-csi-driver with upstream #114
MULTIARCH-5838: Rebase ibm-powervs-block-csi-driver with upstream #109
OCPBUGS-69805: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #108
Full changelog

powervs-block-csi-driver-operator

STOR-2809: Central TLS Profile consistency #97
STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in ibm-powervs-block-csi-driver-operator #90
No-JIRA: Update owners #93
OCPBUGS-69906: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.22 #94
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump golang.org/x/crypto to 0.45.0 #90
Full changelog

powervs-machine-controllers

OCPBUGS-70051: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #133
Full changelog

prom-label-proxy

OCPBUGS-77739: Updating prom-label-proxy-container image to be consistent with ART for 4.22 #389
OCPBUGS-70042: Updating prom-label-proxy-container image to be consistent with ART for 4.22 #388
Full changelog

prometheus

OCPBUGS-77667: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #294
NO-JIRA: update rh-manifest.txt #293
NO-JIRA: [bot] Bump openshift/prometheus to v3.9.1 #292
OCPBUGS-74015: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #286
OCPBUGS-69956: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #284
Full changelog

prometheus-alertmanager

OCPBUGS-77708: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #119
OCPBUGS-74035: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #112
OCPBUGS-69983: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #109
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77597: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #371
OCPBUGS-77753: Updating prometheus-operator-container image to be consistent with ART for 4.22 #373
Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 #372
OCPBUGS-74491: backport upstream fix to reconcile resources with inconsistent status #364
OCPBUGS-73982: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #355
OCPBUGS-67303: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #358
OCPBUGS-70007: Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 #352
OCPBUGS-70055: Updating prometheus-operator-container image to be consistent with ART for 4.22 #353
OCPBUGS-69832: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #351
OCPBUGS-67215: [bot] Bump openshift/prometheus-operator to v0.87.1 #349
Full changelog

prometheus-node-exporter

OCPBUGS-77587: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 #175
OCPBUGS-69806: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 #174
Full changelog

rhel-coreos, rhel-coreos-extensions

NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 #1910
NO-JIRA: tests: add openshift tag #1906
COS-3912: denylist: drop rhcos.network.init-interfaces-test #1900
NO-JIRA: OWNERS: Add angelcerveraroldan #1883
NO-JIRA: Rename extensions/Dockerfile to Containerfile #1896
NO-JIRA: packages-openshift: Fix repo versions #1895
NO-JIRA: extensions: add a label for extensions image discovery #1894
COS-3900: Start using rhel-10.2 #1892
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
No-JIRA: move the OKD SIG repo to 4.22 #1890
NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
OCPNODE-4010: package: add ose-crio-credential-provider #1879
OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

rhel-coreos-10, rhel-coreos-10-extensions

NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 #1910
NO-JIRA: tests: add openshift tag #1906
COS-3912: denylist: drop rhcos.network.init-interfaces-test #1900
NO-JIRA: OWNERS: Add angelcerveraroldan #1883
NO-JIRA: Rename extensions/Dockerfile to Containerfile #1896
NO-JIRA: packages-openshift: Fix repo versions #1895
NO-JIRA: extensions: add a label for extensions image discovery #1894
COS-3900: Start using rhel-10.2 #1892
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
No-JIRA: move the OKD SIG repo to 4.22 #1890
NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
OCPNODE-4010: package: add ose-crio-credential-provider #1879
OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

route-controller-manager

OCPBUGS-20536: bump library-go version #70
NE-2484: bump k8s libraries to v0.35.0 and cr to v0.23.1 #72
OCPBUGS-63449: filter ingress namespace on UnmanagedRoutes metric #71
NO-JIRA: add jcmoraisjr to owners #69
Full changelog

service-ca-operator

CNTRLPLANE-2547: test/e2e: migrate metrics tests for OTE compatibility #305
CNTRLPLANE-2537: test/e2e: migrate headless-stateful-serving-cert-secret-delete-data test for OTE compatibility #304
CNTRLPLANE-2508: test/e2e: migrate vulnerable-legacy-ca-bundle-injection-configmap test for OTE compatibility #303
CNTRLPLANE-2499: test/e2e: migrate ca-bundle-injection-configmap-update test for OTE compatibility #302
CNTRLPLANE-2498: test/e2e: migrate ca-bundle-injection-configmap test for OTE compatibility #301
CNTRLPLANE-2494: test/e2e: migrate serving-cert-secret-delete-data test for OTE compatibility #300
CNTRLPLANE-2491: test/e2e: migrate serving-cert-secret-add-data test for OTE compatibility #299
CNTRLPLANE-2490: test/e2e: migrate serving-cert-secret-modify-bad-tlsCert test for OTE compatibility #298
CNTRLPLANE-2161: test/e2e: migrate serving-cert-annotation test for OTE compatibility #297
OCPBUGS-69911: Updating ose-service-ca-operator-container image to be consistent with ART for 4.22 #296
CNTRLPLANE-2159: cmd: add OTE infrastructure and clean up legacy test extension #295
Full changelog

telemeter

Updating telemeter-container image to be consistent with ART for 4.22 #580
SREP-3493: deduplicate cluster:usage:control_plane:instance_hours output series #579
SREP-3493: add cluster:usage:control_plane:instance_hours #578
SREP-3493: ROSA HCP billing for control planes #577
OCPBUGS-73928: Updating telemeter-container image to be consistent with ART for 4.22 #575
NO-ISSUE: switch http_request_size_bytes to histogram #574
NO-ISSUE: support native histograms #573
NO-ISSUE: update github.com/prometheus/client_golang #572
OCPBUGS-69697: Updating telemeter-container image to be consistent with ART for 4.22 #571
Full changelog

tests

OCPBUGS-77014: Add Azure OS disk metrics to cloud monitor tests #30840
CNTRLPLANE-2202: Check for debug pod (regardless of ns) in default service account monitor test #30815
CORENET-6169, CORENET-6864: remove some duplicate ovnk test cases #30820
OCPBUGS-77736: add the missing namespace from managed openshift #30828
NO-JIRA: upkeep: remove dualreplica recert #30831
OCPBUGS-76943: Fix dualstack BMC secret and BMH lookup using short name extraction #30788
TRT-2372: document the manifest-list verification in the images command #30818
NO-JIRA: add NI&D team members #30816
NO-ISSUE: Automated - Update synthetic test data #30803
TRT-2563: Revert #30647 “STOR-2560: Add testcase for readonlyrootfilesystem” #30819
OCPBUGS-77085: Use multi-architecture zstd-chunked image #30805
TRT-2545: Extend known image checker to cover openshift-must-gather-* namespaces #30777
STOR-2560: Add testcase for readonlyrootfilesystem #30647
OCPBUGS-65623: Remove exception for monitoring OLM Progression condition #30754
STOR-2857: Enable MutableCSINodeAllocatableCount tests for all clusters #30767
CCO-690: Register cloud-credential-operator tests extension #29984
NE-906: fix DCM tests #30734
NO-JIRA: Exclude KubeJobFailed for periodic-gathering jobs in openshift-insights #30810
NO-JIRA: refactor(tnf): separate precondition timeouts from recovery cluster health #30812
NO-JIRA: Fix PodSecurityViolation in set-liveness-probe cmd test #30809
OCPNODE-4092: add the whole team as reviewers for node tests #30756
CNTRLPLANE-2202: add new exceptions + fail if uncaught default sa usage is detected #30685
NO-JIRA: Fix lack of human readable timestamps in two tests output #30796
NO-JIRA: update cluster-autoscaler component #30527
OCPBUGS-77010: [TNF] fix network disruption on ipv6 #30798
TRT-2372: filter-by-os is ignored when the image isn’t a manifest-list; leading to false positives in the check #30806
NE-1476: Allow test pods to access DNS metrics ports #30753
NO-JIRA: Batch etcdlog intervals to prevent hundreds of thousands slamming browser charts #30763
TRT-2471: Create massive test failure junit #30797
Revert “ OCPNODE-3932: Add automated tests for non-CNV swap configuration” #30804
TRT-2372: check that each of the required architectures is available for each image in the images command #30799
OCPBUGS-74151: Add test for CPMS OnDelete strategy with full master replacement #30760
OCPNODE-3932: Add automated tests for non-CNV swap configuration #30794
OCPBUGS-76551: Temporarily skip MCO tests creating custom MCPS with RHEL10 machines #30793
NO-JIRA:fixing CNV’s must-gather image ci failure #30784
NO-ISSUE: Automated - Update synthetic test data #30781
NO-JIRA: Remove RouteAdvertisements feature gate check #30787
OCPNODE-4093: Readme updates for Node tests #30773
NO-JIRA: Simplify zstd:chunked image test to use prebuilt image. #30739
OCPBUGS-60853: cert tests: mark TLS registry test as informing #30585
TRT-2545: Allow pathological Failed/ImagePullBackOff events in must-gather name #30776
OCPBUGS-76327: Fix flakiness in MutableCSINodeAllocatableCount test #30766
NO-JIRA: ote: fix duplicated topology label on SingleReplica #30759
NO-ISSUE: Automated - Update synthetic test data #30694
NO-JIRA: Ignore state transitions on upgrade failures and SNO #30762
SPLAT-2337: CCM-AWS OTE binary and skips #30747
NO-JIRA: Fix discrepancies in use of failure message vs output #30752
OCPEDGE-2166: test(two-node): stablize tnf recovery suite #30716
NO-JIRA: Fix OKD featureset test as it should only run if the current featureset is Default #30757
OCPBUGS-74917, TRT-2504: Claude command to manage watch request limits, split test by operator/component #30750
TRT-2540: Revert #30657 “OCPNODE-3944: Create e2e automation in origin for case OCP-84149” #30761
CNTRLPLANE-2196: reg ote bin for cluster auth operator #30735
NO-JIRA: upkeep: add collection of errors for crio tests #30743
OCPEDGE-1484: [TNF] kubelet disruption test #30290
OKD-259: Test OKD Feature set Against OKD and OCP clusters #30693
OCPNODE-3944: Create e2e automation in origin for case OCP-84149 #30657
OCPEDGE-2355: feat: skip unsupported commatrix tests for two node #30720
OCPEDGE-2274: fix: change arbiter topology test to verify pods do not run on arbiter nodes #30737
OCPQE-31524: Add conditional SCC wait for Kubernetes compatibility #30736
Revert “SPLAT-2337: Added OTE binary for ccm-aws” #30744
SPLAT-2337: Added OTE binary for ccm-aws #30525
NO-JIRA: bump SNO marketplace-operator watch count limit #30738
OCPBUGS-73778: revert LSO networkpolicy cases #30684
STOR-2838: fix OTP AsGuestKubeconf #30721
OCPBUGS-63307: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification tests #30624
TRT-2522: Update optimized builds test to use rpm -qa instead of dnf #30722
NO-JIRA: Replace OCPBUGS-20062 with OCPBUGS-65984 #30554
OCPNODE-3203: Add a test suite for kubeletconfig testing #30648
OCPBUGS-61855: Revert “Temporarily disable InstallPlanStepAppliedWithWarnings alert for k8s 1.34 rebase” #30559
NO-ISSUE: Update boot image manifests for skew API #30712
NE-2376: Remove restriction of unmanaged x-k8s.io #30658
OCPBUGS-74237: Update MCN tests to better handle condition transitions through the “Unknown” state #30705
OTA-1681: remove etcd exceptions #30688
OCPBUGS-74280: Add filter for openshift-copy-to-node ns #30713
OCPBUGS-62929: Check router RBAC before external cert ops #30395
OCPCLOUD-3351: monitortest: add crdversionchecker #30603
OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30654
OCPSTRAT-2728: add images required for the 1.35 rebase (temporary) #30687
NO-JIRA: Remove exceptions for storage operators #30677
NO-ISSUE: Allow test to tolerate running on minimal images #30695
TRT-2483: feat(ginkgo): add monitor tests to extension test result output #30678
NO-JIRA: Update Networking team lead #30301
OCPEDGE-2303: update test logic for degraded cluster run #30649
NO-JIRA: CO must go Progressing during a minor-level upgrade #30626
OCPBUGS-39026: Remove exception for monitoring operator going degraded during upgrade #30012
NO-JIRA: Fix Pod.Create() to use –local flag for template processing #30686
OCPEDGE-1788: TNF add etcd cold boot recovery tests from graceful node shutdown #30519
NO-JIRA: Replace OCPBUGS-38667 with OCPBUGS-66225 #30551
OCPEDGE-2304: adjust olm test to pass on a degraded run #30664
OCPBUGS-72547: Isolate and reduce parallelism for OrderedNamespaceDeletion tests. #30672
OCPNODE-3823: Migrating test case from Openshift-test-private to origin #30512
NO-JIRA: add the intervals bucket for Netpol tests #30679
NO-ISSUE: Update synthetic test data #30680
NO-JIRA: Remove exceptions for co/machine-config on Available=False #30550
CNTRLPLANE-2167: Add oc-tests-ext to extension binaries #30653
OCPBUGS-69676: update watch request limits for cluster-autoscaler-operator #30656
NO-JIRA: Remove the exception for CO/console’s Available=False #30553
Revert “CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix” #30670
NO-ISSUE: Fix the PinnedImage test to set imageMinimumGCAge to 1s #30645
OCPBUGS-70170: change iperf2 test to serial from parallel #30671
NO-JIRA: register cluster-node-tuning-operator-test-ext the binary to origin for OTE migration #30598
NE-2056: auto negative tests of gatewayapicontroller #30599
NO-JIRA: Add more output for debegging #30583
NO-JIRA: Skip a ClusterOperator test if a cluster upgrade is blocked #30558
NO-JIRA: Track the total kubelet metrics outage durations with autodl framework #30593
NO-JIRA: Add images that shouldn’t be mirrored to the exception list. #30652
OCPBUGS-66225: Add more exceptions for CO/image-registry’s Degraded=True #30581
OCPBUGS-66065: remove duplicated events before processing lease intervals #30639
OCPBUGS-57665: only run Netpol two at a time #30618
OCPBUGS-70249: Unrevert tls tests with fixes #30536
OCPBUGS-70065: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 #30636
OCPBUGS-69400: Ignore repeated TopologyAwareHintsDisabled events #30614
CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix #30640
CNTRLPLANE-2167: Migrate must-gather cases to origin #30594
NO-JIRA: Remove DennisPeriquet from OWNERS #30650
OCPSTRAT-2728: Update etcd test data for k8s 1.35 release #30605
OCPBUGS-67313: Fix race condition in external binary extraction #30616
OCPBUGS-70134: Fix JSONL parsing to handle stray JSON in test output #30634
TRT-2394: Detect duplicate tests #30498
CNTRLPLANE-947: E2E test adaptations for OIDC #30292
TRT-2418: Add CPU metrics autodl #30609
NO-JIRA: feat: render OTE JSON results in spyglass #30619
NO-JIRA: Increase tolerance of CO’s not reporting Progressing #30602
MCO-2006: move node-filecycle monitor to default #30592
NO-ISSUE: Two more COs report Available=False in a non-upgrade job #30588
CNTRLPLANE-1437: add monitor test for checking default service account in pods (static test name) #30561
NO-JIRA: feat(monitor): track test bucket execution intervals #30615
STOR-2550: add LSO network policy test case #30562
OCPBUGS-63618: BeforeEach was indirectly called in DetermineReleasePayloadImage #30610
CNTRLPLANE-1683: added the OTE binary for cluster-image-registry-operator #30612
OCPBUGS-67211: exculude Flaky tests for openshift/csi test suite #30597
OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should match also dep and ds events #30547
NO-JIRA: Allow group snapshot tests to be re-tried #30607
OCPNODE-3780: Add e2e tests to validate DRA APIs #30462
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-77547: Updating ose-thanos-container image to be consistent with ART for 4.22 #170
OCPBUGS-69738: Updating ose-thanos-container image to be consistent with ART for 4.22 #166
Full changelog

volume-data-source-validator

STOR-2750: Rebase to upstream v1.6.0 for OCP 4.22 #9
OCPBUGS-69897: Updating volume-data-source-validator-container image to be consistent with ART for 4.22 #8
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3275: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (499b4a3) into main #101
Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.22 #102
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-3323: Update to new manifests-gen #82
OCPBUGS-69861: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.22 #81
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #80
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-77563: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #164
Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 #165
OCPBUGS-69760: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 #153
OCPBUGS-69746: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #152
Full changelog

vsphere-csi-driver-operator

OCPBUGS-77629: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #333
OCPBUGS-74225: Bump library-go #328
OCPBUGS-74206: fix snapshot config non-deterministic ordering #329
STOR-2840: Declare RWX capability explicitly #324
STOR-2852: Enable snapshot tests for vsphere #321
OCPBUGS-69924: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #320
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #319
Full changelog

vsphere-problem-detector

OCPBUGS-77603: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 #213
OCPBUGS-74989: GetVCenterHostnames lacks lock protection causing potential data race #209
OCPBUGS-70365: fix concurrent map writes #206
OCPBUGS-69856: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 #199
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github