Back to index
4.10.0-0.ci-2024-03-15-073603 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.10.0-0.ci-2024-03-15-073603 Tests:
Blocking jobs Informing jobs Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2024-03-15 07:42:10 +0000 UTC
Image Digest: sha256:b675293fb826a869986a72628d9cf00cbda9833842bdaaf4feefb15737141245
Components
New images
Rebuilt images without code change
OCPBUGS-28325 : add an extra vendor exclude to snyk config #100
OCPCLOUD-2429 : Rebase k8s to 1.29 and update dependencies #99
OCPBUGS-26187 : Add Snyk file to exclude vendor directory on scan #98
OCPBUGS-24934 : Updating ose-machine-api-provider-aws-container image to be consistent with ART #94
OCPBUGS-24116 : Updating ose-machine-api-provider-aws-container image to be consistent with ART #93
SPLAT-1220 : Assign Carrier IP to launch EC2 in AWS Wavelength Zones #78
OCPCLOUD-2193 : Update k8s to 1.28 #87
Update OWNERS #86
OCPBUGS-21640 : Update golang.org/x/net to v0.17.0 #85
OCPBUGS-20266 : update bad url endpoint termination handler test #84
OCPBUGS-19190 : Updating ose-machine-api-provider-aws images to be consistent with ART #82
OCPBUGS-18338 : Fix CI by running tests natively by default #81
OCPBUGS-11524 : Add test for multi security groups per machine #80
OCPCLOUD-2113 : Add support for PlacementGroupName in instances #77
Fixes for the labels capacity annotation #76
MIXEDARCH-256 : Handle the kubernetes.io/architecture label based on the AWS instance type #71
OCPCLOUD-2058 : Update k8s to 1.27 #72
OCPBUGS-6882 : Fix getting AZ from subnet id to check mismatch #73
OCPBUGS-12082 : Updating ose-machine-api-provider-aws images to be consistent with ART #67
OCPBUGS-12554 : Bump x/net package to v0.9.0 #69
OCPBUGS-6882 : Log to user that the subnet id and zone fields are mismatched #63
OCPBUGS-11223 : Reduce metrics cardinality #65
OCPBUGS-10127 : Updating ose-machine-api-provider-aws images to be consistent with ART #62
Update OWNERS #61
: Update tooling #58
Updating ose-machine-api-provider-aws images to be consistent with ART #54
OCPCLOUD-1802 : Port to ginkgo v2 #55
Update OWNERS #56
OCPCLOUD-1131 : Implement fetching instance types from API #53
Updating ose-machine-api-provider-aws images to be consistent with ART #45
OCPBUGS-1411 : Bump k8s dependencies to 1.25 #52
Update Machine API Operator dependency #51
Update Machine API operator dependency #49
pkg/actuators/machineset/controller: Fix %s in scale-from-zero logging #43
Bug 2106733 : Fix panic when accessing nil machine annotations map #46
Bug 2060068 : check securityGroupIDs for emptiness #44
Bug 2060068 : return error when no security group found #41
Bug 2082667 : Bump MAPI dependency. Separate node drain controller. #42
Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #40
Bug 2091433 : Update EC2 instance types #39
Bump machine-api-operator to 25e61c2 #38
Validate unknown regions using AWS API #32
AWS Placement Group controller logic #33
Bug 2072195 : Custom DHCP Option Set: empty domain-name is a valid custom domain #36
Remove unreleased AWS Placement Groups support #35
AWS IMDSv2 support #34
Refactor provider status to use metav1.Condition #31
Bug 2067791 : Bump prometheus/client_golang #30
Add AWSPlacementGroup controller #25
Bug 2065510 : Update AWS SDK to 1.43.20 #29
Bug 2065160 : Ensure IP based NLB targets are deregistered before Machines are removed #28
Bug 2060697 : Update openshift/api dependency #27
Leverage basic AWSPlacementGroup for AWS PG membership #23
Ensure Machine level tags have precedence over infrastructure level tags #24
Allow Machines to select EFA network interfaces #8
CFE-68 : user defined resource tags on EC2 instances updatable #15
Full changelog
OCPBUGS-30711 : Upgrade go-jose module to 4.0.1 #187
OCPBUGS-25588 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #183
OCPBUGS-25002 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #181
OCPBUGS-25002 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #180
NO-ISSUE: Sync OWNERS with team members #173
snyk: exclude vendor/ #170
Bump k8s deps for CVE-2023-39325 #169
OCPBUGS-19264 : Updating ose-aws-pod-identity-webhook images to be consistent with ART #167
CCO-429 : Rebase master #166
Bump to go 1.20 in go.mod #163
Updating ose-aws-pod-identity-webhook images to be consistent with ART #162
Updating ose-aws-pod-identity-webhook images to be consistent with ART #159
Updating ose-aws-pod-identity-webhook images to be consistent with ART #158
Update OWNERS #157
Updating ose-aws-pod-identity-webhook images to be consistent with ART #156
Updating ose-aws-pod-identity-webhook images to be consistent with ART #155
Updating ose-aws-pod-identity-webhook images to be consistent with ART #153
Bug 2093986 : Comply to restricted pod security level #154
Bug 2067792 : upgrade prometheus/client_golang to v1.12.1 #152
Updating ose-aws-pod-identity-webhook images to be consistent with ART #151
Full changelog
OCPBUGS-24195 : the apiservice controller waits until bootstrap complete #662
OCPBUGS-22969 : Use v1 for flowcontrol API #640
NO-JIRA: e2e Keycloak: retry logging in as admin #666
OCPBUGS-32089 : wellknown-readiness: perform several attempts to connect before going unavailable #664
NO-ISSUE: bump to the latest version of openshift/api #663
NO-ISSUE: bump dependencies #659
NO-JIRA: test/lib: create SA on deploy #660
NO-ISSUE: oauth-apiserver: disable priority and fairness #658
NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after #657
NO-JIRA: _output - remove dir #651
OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #632
WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #646
OCPBUGS-24883 : Updating ose-cluster-authentication-operator-container image to be consistent with ART #644
OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #636
OCPBUGS-24217 : Annotate certs with ownership information #642
OCPBUGS-21719 : go.mod: bump golang.org/x/net to v0.17.0 #635
OCPBUGS-17987 : generate only >=0 number of random bits #629
OCPBUGS-19125 : Updating ose-cluster-authentication-operator images to be consistent with ART #634
OCPBUGS-8093 : properly set the pod name and namespace in graceful termination lifecycle events #628
Add openshift-cli-client in NamesFilter #625
OCPBUGS-16501 : bump PSa, lib-go and storage-version-migrator to get rid of goproxy dep #624
AUTH-356 : Add openshift-cli-client OAuth Client #606
Correctly link oauth apiserver ServiceMonitor with its Service #616
OCPBUGS-2765 : Library go bump #613
OCPBUGS-14010 : increase timeout for probes #612
AUTH-363 : make proxy config check less obtrusive #608
OCPBUGS-10577 : update apf configuration to use v1beta3 #594
OCPBUGS-10041 : update openshift/api to include aesgcm provider in the default apiserver schema #601
API-1509 : Enable AESGCM encryption #598
OCPBUGS-6189 : art image update #596
OCPBUGS-3929 : update apf configuration to use v1beta2 #592
OCPBUGS-3440 : Restart authentication operator if console capability is enabled #589
OCPBUGS-3441 : Update cluster-authentication-operator not to go degraded without console [4.13] #587
make the custom route controller use server-side-apply to avoid stomping unknown fields #582
e2e: address PSa failures #581
Bug 2111842 : v/o/library-go - version-bump #576
Updating ose-cluster-authentication-operator images to be consistent with ART #575
Updating ose-cluster-authentication-operator images to be consistent with ART #571
Bug 2078287 : only ever include certificates in the oauth-serving-cert CM #573
AUTH-133 : bindata/oauth-openshift: specify pod security level #570
Update Links #568
Bug 1958198 : Avoid zero or low resync intervals #491
manifests: specify pod security level #565
e2e: Use Keycloak v18.0.0 #567
AUTH-89 : add audit options to oauth-server on oauth-audit-profile Variant03 #563
MGMT-9797 : Bump openshift/api
dependency to 04e1813ebb11
#564
make apiserver readiness probe honor readyz #561
Bug 2063342 : vendor: bump library-go #558
Bug 2059515 : e2e: Use Keycloak v17.0.0 #554
Update OCP branding within oauth-templates #540
Full changelog
OCPBUGS-31421 : add check for taint.value == nil #292
OCPBUGS-28334 : update snyk file #287
PODAUTO-99 : Fix VPA e2e test failures #286
OCPCLOUD-2431 : rebase on upstream 1.29.0 release #285
PODAUTO-104 : Add downstream pod autoscaling team member jkyros to VPA OWNERS #283
OCPBUGS-27509 : Fix unstructured taint parsing in Cluster API provider #281
OCPBUGS-26504 : Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 #279
OCPBUGS-25855 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.16 #277
OCPBUGS-25625 : Add Snyk file to exclude vendor directory on scan #276
OCPBUGS-24783 : Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART #271
OCPBUGS-25579 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #274
PODAUTO-91 : Add joelsmith to OWNERS for approving of VPA-only PRs #273
OCPBUGS-24974 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #272
OCPBUGS-24146 : Updating ose-vertical-pod-autoscaler-container image to be consistent with ART #269
OCPCLOUD-2195 : rebase on upstream 1.28.0 release #265
Update OWNERS #264
OCPBUGS-18137 : UPSTREAM: 6066: Allow overriding the kubernetes.io/arch label set by the scale from zero methods via a new cmdline arg #261
OCPBUGS-19232 : Updating vertical-pod-autoscaler images to be consistent with ART #262
OCPBUGS-18852 : Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #260
Updating vertical-pod-autoscaler images to be consistent with ART #253
OCPCLOUD-2060 Merge https://github.com/kubernetes/autoscaler:master (d3ec0c4) into master #256
OCPBUGS-13228 : Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #255
Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #252
OCPCLOUD-1851 : Upstream rebase to CA 1.26.1 and VPA 0.13 #250
Update OWNERS #251
Updating vertical-pod-autoscaler images to be consistent with ART #248
Update OWNERS #249
Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #246
Updating vertical-pod-autoscaler images to be consistent with ART #243
rebase on upstream 1.25.0 #241
Bug 2001027 : update clusterapi nodegroups processor #240
Updating vertical-pod-autoscaler images to be consistent with ART #235
Bug 1944065 : Have VPA ignore phantom containers named “POD” #233
Bug 2087037 : Rebase onto latest master from upstream #231
Bug 2087037 : Rebase Autoscaler onto upstream release-1.24 branch #227
added bindata.go in e2e/vendor to fix the e2e test failures #225
add user configurable cluster api version #223
Full changelog
OCPBUGS-31960 : Bump x/net to v.0.24.0 #318
OCPCLOUD-2493 : Update CAO to add upstream annotations #316
OCPCLOUD-2523 : add ExpanderOrderList api option #304
OCPBUGS-29863 : Apply hypershift cluster-profile for ibm-cloud-managed #314
OCPBUGS-28207 : update min/max memory limit documentation #313
MIXEDARCH-429 : Revert “OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch” #311
OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #312
MIXEDARCH-429 : Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297
OCPCLOUD-2432 : Bump k8s packages to v1.29 #310
OCPBUGS-25559 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #305
OCPBUGS-25633 : Add Snyk file to exclude vendor directory on scan #306
OCPBUGS-24911 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #303
OCPBUGS-24102 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #302
OCPCLOUD-2137 : Check scale from zero annotations on MachineSets #294
OCPBUGS-21791 : Bump x/net package to v0.17.0 #295
Update OWNERS #296
OCPCLOUD-2196 : Update dependencies k8s 1.28 #293
OCPBUGS-18137 : Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch #284
OCPBUGS-18954 : Ensure status reporter caches exit if they don’t sync #285
OCPBUGS-19411 : cluster-autoscaler-operator: clusterrole add clusteroperators watch #287
OCPBUGS-19169 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #286
OCPBUGS-18278 : Address long acquire times during upgrade #281
OCPBUGS-18338 : Fix CI by running tests natively by default #282
Reconcile when external process change the clusteroperator status #279
OCPBUGS-14356 : add nutanix labels that should be ignored #275
CNF-5642 make operator optional #269
OCPCLOUD-2061 : Rebase dependencies to k8s 1.27 #274
Updating ose-cluster-autoscaler-operator images to be consistent with ART #273
OCPBUGS-10105 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #271
Bug 1943194 : update GPU resource limits type to have validation #268
Update OWNERS #270
revert GPU label changes from pr 223 #267
: Update tooling in Cluster Autoscaler Operator #266
Add infrastructures resource to config.openshift.io #265
Allow infrastructures.config.openshift.io to be listed #264
Register configv1 types to schemes #262
Updating ose-cluster-autoscaler-operator images to be consistent with ART #259
: Update CAO to ignore platform related zone labels #260
Update OWNERS #261
: Set default container for operator #258
Add client certificate and key to service monitor #249
Updating ose-cluster-autoscaler-operator images to be consistent with ART #248
OCPCLOUD-1677 : add flag for duplicated events #253
Bug 1997396 : fix an error with autoscaler alert rules #254
OCPBUGS-1411 : Bump k8s deps to 1.25 #252
Bug 1997396 : update alerts for resource limits #250
OCPCLOUD-1427 : Expose autoscaler “–balancing-ignore-label” flag through CRD #251
Add verbosity option to ClusterAutoscaler object #247
Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #246
Bug 2067803 : Bump prometheus/client_golang #242
Bug 2063194 : add leader election flags to autoscaler deployment #241
add capi version to autoscaler deployment #240
Updating ose-cluster-autoscaler-operator images to be consistent with ART #238
Full changelog
OCPBUGS-24871 : Updating ose-cluster-config-operator-container image to be consistent with ART #390
TRT-1581 : default to self-managed clusterprofile #414
NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable #412
OCPBUGS-29576 : Apply hypershift cluster-profile for ibm-cloud-managed #408
NO-JIRA: add check to ensure clusterprofile matches for featuregates #411
OCPBUGS-28621 : Fix PSa labels #406
STOR-1700 : Bump(openshift/api): to get new VolumeGroupSnapshot API #405
OCPBUGS-28621 : Add required PSa labels #401
SPLAT-1400 : promote vSphere control plane machinesets from tech preview #400
OCPBUGS-26541 : remove duplicate manifests in image #399
Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541 : remove duplicate manifests in image #392
OCPNODE-1671 : Update api,client-go to add imagepolicy api #376
Revert “OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART” #388
OCPBUGS-19106 : Updating ose-cluster-config-operator-container image to be consistent with ART #385
read featuregates from openshift/api #349
yield CRDs and empty resource rendering to api imge #379
CNF-10479 : Bump up api to pull mixed cpu allocation feature gate #386
NP-793 : Bump github.com/openshift/api #375
create manifest directory during rendering #382
SPLAT-1272 : Update for Nutanix failure domains api changes #378
create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480 : Add MetricsServer FeatureGate #377
NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813 : add MCN featuregate #368
SPLAT-1127 : bring in vSphere CPMSO API updates #342
OCPBUGS-21781 : Update openshift/api package to latest version #365
OCPBUGS-21744 : bump library-go to include switch to HTTP/1.1 #366
CFE-887 : Bump openshift/api to add DNSNameResolver. #364
Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. #358
OCPBUGS-20164 : Remove Build CRD #360
Remove AdmissionWebhookMatchConditions feature gate #359
OCPVE-708 : feat: bump(api) #357
OCPCLOUD-1989 : Promote GCP CCM from TPNU to default #319
OCPBUGS-19106 : Updating ose-cluster-config-operator images to be consistent with ART #353
CCO-412 : Bump API to promote azureWorkloadIdentity to defaultFeatures #351
Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Bump openshift/api to add ValidatingAdmissionPolicy feature gate. #340
OCPVE-626 : bump(openshift/api@master) #341
CFE-689 : Update openshift/api package to latest version #335
OCPBUGS-16614 : go.mod: bump openshift/api #338
OCPBUGS-16614 : go.mod: update openshift/api #334
OCPBUGS-16507 : bump sigs.k8s.io/kube-storage-version-migrator #333
OCPCLOUD-2010 : Remove feature gate for external platform #331
SDN-4024 : Vendor openshift/api to get ANP feature-gate changes #330
Promote privateHostedZoneAWS from Tech Preview to Default #328
Update openshift/api #327
OCPBUGS-13547 : Promote Azure CCM from TPNU to default #307
OCPBUGS-15877 : go upgradeable=false when latencysensitive is used and not corrected #325
Enable feature gate for externalCertificate on Route API #326
stomp the latencysensitive featureset for equivalent default #324
WRKLDS-757 : Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade #322
SPLAT-1099 : bump openshift/api for vSphere static IP feature gate and platform spec #323
remove dead flag for file #309
Changes to move to api@2d36f53 #321
OCPBUGS-12767 : Add CustomNoUpgrade CRD versions to payload #320
OCPCLOUD-2010 : Re-vendor api to support external platform #306
Update openshift/api to disable EventedPLEG featuregate in techpreview #317
update openshift/api for types and gates #316
Update github.com/openshift/api to pull in evented pleg and sigstore feature flags #312
Update github.com/openshift/api to pull in feature gates #311
OCPBUGS-6266 : Rename config-operator_00_namespace run level to 00 #303
Update library-go dependency #305
Add JoelSpeed to owners #302
Update API and library-go #301
Require consistency in rendered artifacts #299
specify all known featureGates in disabled #297
update render to handle directories of manifests #295
adjust to refined openshift/api types #296
update ordering and featuregates #294
add featuregate status #288
Updating ose-cluster-config-operator images to be consistent with ART #287
OCPBUGS-10037 : update openshift/api to get new apiserver schema #289
update openshift/api to get new techprevew apiserver schema #286
CFE-601 : Update openshift/api package version #279
OSASINFRA-3097 : update openshift/api to get External LB fields #278
OCPBUGS-6185 : Update go version and ART images #280
OCPBUGS-4207 : Revert “Increase verbosity level to track probe timeouts” #274
Update go.mod api,client-go to register crd #270
OCPBUGS-3123 : add –feature-set option to render options #271
NE-975 : Update openshift/api for updated ingress config loadBalancer fields #268
Increase verbosity level to track probe timeouts #267
Bug 1843043 : Update openshift/api for modified config resource description #264
update openshift/api for new ingress manifest #263
Update go.mod api,client-go to register crd #262
This is not the repo you’re looking for. #261
Bump k8s dependencies #260
Update images to be consistent with ART #253
Bug 2082763 : Drop the OperatorHub CR instance #245
bump openshift/api, client-go #251
manifests/deployment: comply to restricted pod security level #248
Reorder the empty Node CR resource to ensure it is applied after the Node CRD #244
Bump(o/client-go); Add empty config/v1/node/cluster object #238
Bug 2074243 : Bump openshift/api
to c3bb724c28
#243
Revert config/v1/Node crd.yaml #242
Bump openshift/api, openshit/client-go to add ImageMirrorSet CRDs #236
bumped openshift API to have node object related changes #233
Full changelog
OCPBUGS-28673 : implement connect timeout tuning option #1035
NE-1317 : manifests - add ingress capability annotation #950
OCPBUGS-32371 : Bump openshift/api, and update CRD generation #1045
OCPBUGS-25193 : Add vnet subnet read and join permission for azure #1029
OCPBUGS-30834 : Update to go 1.21 #1040
OCPBUGS-31722 : Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037
OCPBUGS-3522 : Include recent errors in canary checks fail #865
OCPBUGS-30091 : TestHostNetworkPortBinding: Delete t.Parallel() #1032
CFE-987 : Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017
CORS-2317 : Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016
OCPBUGS-28596 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020
OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #1019
NE-1490 : update to go v1.20 #1012
OCPBUGS-15253 : Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980
CCO-249 : Replace GCP role with explicit permissions #844
OCPBUGS-25006 : Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006
OCPBUGS-24531 : Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011
OCPBUGS-24531 : Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008
OCPBUGS-24531 : Skip CI for scope change until OCPBUGS-24044 is resolved #1007
OCPVE-780 : annotate credentials request manifests #995
OCPBUGS-23742 : Bump controller-runtime to v0.16.3 #1001
NE-1402 : Add service endpoint override capability to IBM DNS provider #990
OCPBUGS-16762 : Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982
OCPBUGS-14994 : Don’t add clientca-configmap finalizer if deleting #948
OCPBUGS-22020 : Bump golang.org/x/net for CVE-2023-44487 #985
OCPBUGS-21803 : test/e2e: Add test case for 2000000 maxConnections #983
OCPBUGS-20192 : Require non-readonly filesystem in router container #981
OCPBUGS-16762 : Bump openshift/api for container.maxLength fix #979
OCPBUGS-3541 : Don’t create route metrics for ingress controllers that are not admitted #869
OCPBUGS-18248 : Prevent GatewayClass from getting recreated #975
OCPBUGS-19268 : Updating ose-cluster-ingress-operator images to be consistent with ART #977
OCPBUGS-15900 : TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973
OCPBUGS-3356 : E2E test for cookie length truncation #871
OCPBUGS-15978 : Check public DNS zone when reporting status #967
OCPBUGS-17359 : test/e2e: Don’t use openshift/origin-node #970
NE-1140 , NE-1145 : Set/delete HTTP request/response headers via IngressController API #872
OCPBUGS-16089 : Set spec.subdomain on the canary route #965
OCPBUGS-14995 : desiredRouterDeployment: Set HostPort if needed #947
OCPBUGS-10875 : gateway-service-dns: Set DNS policy appropriately #934
NE-1244 : Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929
OCPBUGS-12790 : README: Fix Bugzilla link #968
RFE-3007 : Expose option-contstats as an unsupported option #887
NE-1189 : Refactor Test_desiredLoadBalancerService #886
NE-1187 : Use t.Run for table-driven tests #884
NE-1183 : Rename unit tests for specific functions #880
NE-1269 : Replace bindata using embed #905
RFE-3765 : Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900
OCPBUGS-9274 : canary: Tolerate infra node NoExecute taint #932
OCPBUGS-7546 : Allow only 1 disruption with 3 replicas #931
OCPBUGS-15100 : Fix previous attempt of adding a missing trailing dot to hostname #956
OCPBUGS-14396 : Set controller-runtime logger to a null logger for E2E #946
OCPBUGS-14998 : Only use RoleARN for Route53 API #951
OCPBUGS-15100 : Create valid DNS names for Gateway API on GCP #949
OCPBUGS-13106 : Add ingress controller status logging on waitForIngressControllerCondition #924
OCPBUGS-13190 : Avoid spurious updates for internalTrafficPolicy #927
OCPBUGS-13810 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944
NE-1294 : Add support for AWS shared VPC in another account #928
CCO-318 : Enable Azure Workload Identity authentication. #906
OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939
OCPBUGS-13963 : Bump vendors k8s libraries to 0.27.2 #936
Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930
OCPBUGS-5478 : add UBI based Dockerfile #925
CCO-318 : Read feature gates for future usage #908
OCPBUGS-12913 : Deflake TestRouterCompressionOperation #920
OCPBUGS-6784 : bump controller-runtime to fix the multi namespace cache indexing #913
OCPBUGS-12579 : Address CVE-2022-41723 #915
OCPBUGS-12790 : Replace Bugzilla link with Red Hat Issue Tracker #916
OCPBUGS-10714 : gatewayclass: Update for OSSM 2.4 API change #901
OCPBUGS-10189 : Updating ose-cluster-ingress-operator images to be consistent with ART #898
OCPBUGS-10846 : Fix TestClientTLS flakes #904
NE-1184 : Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881
OCPBUGS-4054 : configurable-route: Don’t use NewKindWithCache #860
NE-1186 : Test_getRR: Fix typo: “excepted” → “expected” #883
CORS-2467 : dns: azure: use azidentity with an adapter #846
NE-1105 : Add support for Gateway API #890
OCPBUGS-7424 : Bump vendored k8s libraries to 1.26.1 #888
CFE-679 : Add user defined tags to the created DNS resources #874
OCPBUGS-6247 : Updating ose-cluster-ingress-operator images to be consistent with ART #862
CORS-2072 : GCP - Parse Zone ID with a project ID embedded #855
NE-1092 : Add proxy protocol support for IBMCloud loadbalancers #812
OCPBUGS-6384 : Address CVE-2022-41717 #876
OCPBUGS-4827 : Add missing AWS permission for ListTagsForResources #868
OCPBUGS-6701 : Avoid spurious updates for scope in IngressClass #879
OCPBUGS-6698 : Fix conflict error message in ensureNodePortService #877
OCPBUGS-6700 : updateIngressClass: Fix log message #878
NE-1124 : Add support for External platform to CIO #873
OCPBUGS-4573 : Target metrics port by name in internal service #864
OCPBUGS-434 : Absorb PodsScheduled condition into MinAvailable #854
OCPBUGS-4759 : Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866
OCPBUGS-4703 : Replace liveness-grace-period-seconds annotation #863
OCPBUGS-3404 : Bump openshift/api for matchExpressions doc fix #856
OPNET-133 : Support remote worker #858
OCPBUGS-1725 : Ingress controller should not have affinity policy in single-replica clusters #810
OCPBUGS-1807 : Fix bad handleSingleNode4Dot11Upgrade
log message #808
OCPBUGS-2775 : Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851
OCPBUGS-2848 : Support matchExpressions selectors with route metrics #850
Bug 2117524 : Update CRLs when they expire #828
OCPBUGS-853 : certificate-publisher: Don’t publish extraneous certificates #824
Bug 1962502 : Add alerts for unmanaged Routes and Ingresses without IngressClassName #823
NE-1071 : Default HAProxy maxconn value to 50000 for OCP 4.12) #836
Updating ose-cluster-ingress-operator images to be consistent with ART #834
OCPBUGS-2435 : TestRouterCompressionOperation: Nil-pointer fix #843
OCPBUGS-2493 : Fix TestUnmanagedDNSToManagedDNSInternal E2E test race conditions #845
CFE-478 : Added support for exporting Route type and Routes per Shard metrics #779
NE-975 : Use ingress config to set default LB type on AWS #837
OCPBUGS-2429 : Fix TestReloadInterval min value test cases and race conditions #842
OCPBUGS-2334 : Added nil check for service object on load balancer scope change #839
NE-956 : Configurable LB Source Ranges - Functional Implementation #817
Bug 2107462 : Update CGO_ENABLED=1 #833
OCPBUGS-236 : Bump openshift/api for reloadInterval fix #830
OCPBUGS-1554 : Bump vendored k8s libraries to 1.25 #829
Enable switching of AWS CLB to NLB without deletion of IngressController object. #790
Bug 2066560 : Make ingress clusteroperator progressing=true when router deployment is rolling out #769
Add IBM Cloud DNS support for Power VS #819
OCPBUGS-1049 : test/e2e: Fix TestCanaryRoute security context #826
Bug 2089482 : Do not use deprecated API field InfrastructureStatus.Platform #814
NE-969 : Add IBM DNS Services provider support for private clusters #796
DPP-10860 : Update Bugzilla links to “Networking” component #815
OCPBUGS-368 : Fix e2e tests for pod security violations #818
NE-979 : add ReloadInterval TuningOption #805
Bug 2101878 : Fix another issue with route status clearing race condition caused by not validating generation id #811
Bug 2108708 : Disable auto creation of default ingress contoller for hypershift #797
Bug 2101878 : Fix route status clearing race condition caused by using the cache #794
Bug 2106086 : Bump openshift/api for healthCheckInterval fix #804
Bug 2104481 : Allow PROXY protocol for the “Private” endpoint publishing strategy #803
add Ethany-RH to OWNERS #800
Bug 2086887 : Add better debug logging to TestIngressOperatorCacheIsNotGlobal to help debug flakes #793
Bug 2093462 : status: Watch clusteroperators #714
Bug 2092042 : Bump vendored k8s libraries to 1.24 #768
Bug 1944851 : Clear route status when an ingress controller is deleted or a route is un-admitted #724
Bug 2094932 : Patching config.ingresses status requires patch permissions #788
Bug 2097555 : Fix loadBalancerServiceAnnotationsChanged check and update #783
Bug 2094932 : Ingress operator needs permission to list nodes #785
Bug 2095229 : desiredRouterDeployment: Check for nil hostNetwork #780
Bug 2094962 : Fix flakey logic in haproxy timeout tests #775
Bug 2094932 : MGMT-10403: Set the defaultPlacement
for none-platform SNO clusters installed before 4.11 #767
Bug 2075671 : Add a e2e test that verifies the ingress operator’s cache doesn’t include everything #764
Bug 2055601 : Add cluster tag to *.apps domain record #737
Bug 2080379 : Group all e2e tests as parallel or serial #756
Bug 2082428 : Add MicroSecond processing #762
NE-408 : Allow configuring ELB connection idle timeout #451
NE-825 : Update router to use random balancing algorithm once again #727
Bug 2084433 : AUTH-133: assets: comply to pod security #760
NE-577 : Support a Configurable ROUTER_MAX_CONNECTIONS in HAproxy #735
Add support for route53 in the us-isob-east-1 region + fix #754
AUTH-184 : manifests/deployment: comply to restricted pod security level #749
Bug 2081447 : desiredRouterDeployment
: Fix for port defaulting #753
Bug 2079468 : Enhance the waitForIngressControllerCondition for better CI results #745
NE-882 : Set ROUTER_DOMAIN
to enable route subdomain field #674
Specify host port for host networking strategy #694
Bug 2007246 : Add allowPrivilegeEscalation to the router container #743
MGMT-9797 : Determine number of replicas according to DefaultPlacement
#728
Bug 2076193 : Remove special-casing for default ingresscontroller probe parameters #742
NE-585 : Make ROUTER_BACKEND_CHECK_INTERVAL configurable #712
BUG 2076984: test/e2e: add resilience to RBAC test teardown #744
BUG 2054200: Fix removing custom created service in openshift-ingress with same name #707
Add Nutanix platform #730
Revert “Bug 2007246: Ingress Controller does not set allowPrivilegeEscalation in the router deployment” #741
Bug 2075671 : Fix k8s client cache object global inclusion and duplication. #740
NE-781 : Allow users to tune kubelet probe timeouts #736
Bug 2072106 : Fix test Errorf
limitation in go 1.18 #733
Bug 2071139 : add pod eviction permission #734
Bug 2071139 : delete default ingress pod if it is scheduled where another router pod already is #720
Bug 2069457 : Delete LoadBalancer-type service finalizer logic #729
Bug 2021446 : Set canary status as unknown if not admitted to default ingress controller #723
Bug 2066444 : update relatedObjects for clusteroperator status #721
Bug 2007246 : Ingress Controller does not set allowPrivilegeEscalation in the router deployment #718
Bug 1995953 : Add unit test for verifying router deployment env is always sorted #715
Bug 2057762 : Set Upgradeable=False if default cert has no SAN #708
Bug 2055470 : Normalize the AWS internal LB annotation value #704
BUG 2037447: Disable keepalive for canary probe #701
pkg/operator/controller/ingress/status_test: Fix ...-tag
-> ...-tags
test-case description #700
Added gcs278 to OWNERS #698
Full changelog
OCPBUGS-1 : Jira integration test PR 3 #92
Updating the documentation on how to use DTK as a multi-stage image. #80
Remove all kmods-via-containers references and dependencies #79
Removing the ‘make buildprep’ from README.md. #78
OCPBUGS-1 : Jira integration test PR 2 #77
Updating README.md. #76
OCPBUGS-1 Jira integration test PR #75
Updating driver-toolkit images to be consistent with ART #73
Bumping KVC to the last available commit. #74
Full changelog
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484 : update unit tests in egress/dns-proxy #165
NE-1444 : egress/dns-proxy: switch to haproxy28 RPM package #160
OCPBUGS-24861 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158
OCPBUGS-24751 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155
OCPBUGS-24723 : Updating openshift-enterprise-base-container image to be consistent with ART #154
OCPBUGS-19261 : Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153
OCPBUGS-19107 : Updating ose-egress-http-proxy images to be consistent with ART #150
OCPBUGS-19239 : Updating openshift-enterprise-egress-router images to be consistent with ART #151
OCPBUGS-18860 : Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149
OCPBUGS-18853 : Updating openshift-enterprise-base images to be consistent with ART #148
OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132
OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131
OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133
NE-1304 : container builds: switch to haproxy26 package #141
OCPBUGS-11385 : Removed chroot setting #137
egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138
egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134
Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
bump RHEL8 egress-dns-proxy image to haproxy26 #125
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
Updating ose-egress-http-proxy images to be consistent with ART #120
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
Updating openshift-enterprise-base images to be consistent with ART #119
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126 : ipfailover: Autodetect the “ens3” NIC #111
Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188 : VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
Full changelog
OCPBUGS-24816 : Updating ose-machine-os-images-container image to be consistent with ART #34
NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 #33
NO-ISSUE: Force updating 4.15 CI images #32
OCPBUGS-19133 : Updating ose-machine-os-images images to be consistent with ART #30
Fix condition check for logging #29
Force updating main rhcos image to version 414.92.202303281555-0 #28
Updating ose-machine-os-images images to be consistent with ART #26
Updating ose-machine-os-images images to be consistent with ART #25
Updating ose-machine-os-images images to be consistent with ART #20
OCPBUGS-884 : Update rhcos release browser url #21
Bug 2090017 : Get rid of lookaside cache in OCP build #15
Revert .ci-operator.yaml #16
Updating ose-machine-os-images images to be consistent with ART #11
Bug 2075024 : Remove destination coreos if it exists #13
uncompress arm64 vmlinuz for pxe booting #12
Full changelog
OCPBUGS-28557 : Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 #54
OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #53
OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #52
OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #51
OCPBUGS-18848 : Updating ose-multus-route-override-cni images to be consistent with ART #48
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #47
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #45
Revert ART changes to fix rhel9 base binary #44
Updating ose-multus-route-override-cni images to be consistent with ART #43
Fix Dockerfile to use rhel9 #42
Updating ose-multus-route-override-cni images to be consistent with ART #41
Add rhel9 binary #40
Updating ose-multus-route-override-cni images to be consistent with ART #36
Updating ose-multus-route-override-cni images to be consistent with ART #35
Updating ose-multus-route-override-cni images to be consistent with ART #34
Updating ose-multus-route-override-cni images to be consistent with ART #33
Dev/sync upstream #30
Updating ose-multus-route-override-cni images to be consistent with ART #28
Updating ose-multus-route-override-cni images to be consistent with ART #25
Updating ose-multus-route-override-cni images to be consistent with ART #21
Full changelog
Source code for this page located on github