Back to index
4.10.0-0.ci-2024-07-23-030300 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.10.0-0.ci-2024-07-23-030300 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2024-07-23 03:05:28 +0000 UTC
Image Digest: sha256:0a45c80c2ecabf40a8c25e5b4aab409e579492d862fa86915dddad07709458b5
Components
New images
Rebuilt images without code change
CCO-664 : merge upstream changes #205 OCPBUGS-62587 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206 OCPBUGS-57618 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.20 #204 OCPBUGS-52509 : github.com/go-jose/go-jose/v4 v4.0.5 #200 OCPBUGS-45443 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.19 #199 CCO-594 : upstream rebase #198 OCPBUGS-39541 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.18 #196 OCPBUGS-36522 : Rename Dockerfile #195 OCPBUGS-34147 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.17 #194 OCPBUGS-34147 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.17 #193 OCPBUGS-30711 : Upgrade go-jose module to 4.0.1 #187 OCPBUGS-25588 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #183 OCPBUGS-25002 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #181 OCPBUGS-25002 : Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #180 NO-ISSUE: Sync OWNERS with team members #173
snyk: exclude vendor/ #170
Bump k8s deps for CVE-2023-39325 #169
OCPBUGS-19264 : Updating ose-aws-pod-identity-webhook images to be consistent with ART #167 CCO-429 : Rebase master #166 Bump to go 1.20 in go.mod #163
Updating ose-aws-pod-identity-webhook images to be consistent with ART #162
Updating ose-aws-pod-identity-webhook images to be consistent with ART #159
Updating ose-aws-pod-identity-webhook images to be consistent with ART #158
Update OWNERS #157
Updating ose-aws-pod-identity-webhook images to be consistent with ART #156
Updating ose-aws-pod-identity-webhook images to be consistent with ART #155
Updating ose-aws-pod-identity-webhook images to be consistent with ART #153
Bug 2093986 : Comply to restricted pod security level #154 Bug 2067792 : upgrade prometheus/client_golang to v1.12.1 #152 Updating ose-aws-pod-identity-webhook images to be consistent with ART #151
Full changelog
CNTRLPLANE-1789 : Bump kube to 1.34 #807 OCPBUGS-65473 : fix: remove route and oauth service from clusteroperator expected output #808 CNTRLPLANE-947 : operator: set oauth-specific relatedObjects dynamically in the operator status #800 OCPBUGS-62941 : (bugfix): configure status controller to remove unset versions #798 OCPBUGS-62447 : Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793 API-1835 : test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790 NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
API-1835 : fix integration tests #795 OCPBUGS-57444 : set appropriate rolling update settings #789 NO-JIRA: om: fix integration testing #788
NO-JIRA: Bump library go rm co dep #782
OCPBUGS-59909 : Don’t cache server errors when checking for password grant support #781 CNTRLPLANE-5 : Wire a feature-gates config observer for oauth-apiserver. #773 AUTH-543 : OIDC/OAuth resource configuration #740 AUTH-543 , OCPBUGS-57808 : (deps): Bump to Go 1.24 and k8s 1.33 #775 CNTRLPLANE-333 : Add generation logic for new uid and extra fields in the Authentication CR #763 NO-JIRA: add logging when rendering bootstrap manifests #770
CNTRLPLANE-939 : test/e2e-oidc: poll test preconditions for a short time instead of checking once #769 CNTRLPLANE-939 : Create separate make rule for e2e oidc tests #768 AUTH-544 : Extend e2e test to leverage new functionality #737 OCPBUGS-51203 : fix logo not being correctly aligned in Webkit #758 OCPBUGS-48176 : Avoid duplicate OAuth client creation #757 OCPEDGE-1510 : feat: add minimum count for DualReplica #761 OCPEDGE-1610 : bump(kube,library-go,ocp/api): #759 NO-JIRA: Keycloak e2e test improvements #714
OCPBUGS-51981 : fix: update starter path to account for mom integration #760 CNTRLPLANE-71 : update cao to manage rolebindingrestriction crd #748 AUTH-541 : OIDC structured auth config #713 CONSOLE-4434 , OCPBUGS-43610 : update login templates to use PF6 and add validation #751 NO-JIRA: OWNERS: update approvers #756
MON-4129 : adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #752 OCPBUGS-48177 : Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #753 OCPEDGE-1306 : feat: change minimum for arbiter ha deployments #734 NO-JIRA: fix: resolve some integration tests #750
API-1835 : bring MOM up to date for testing and the like #744 OCPBUGS-23435 : bump library-go to bring in workload-conditions fix #739 API-1835 : wire controllers from the apiserver controllerset #736 NO-JIRA: update build-machinery for spyglass artifacts #735
API-1835 : Bump library-go to get update-free removestaleconditionscontroller #729 API-1835 : bump library-go and MOM to get labels in revision controller #733 API-1835 : use manifestclient.RecommendedRESTConfig() #731 API-1835 : Add input-resources #730 API-1835 : Bump openshift/build-machinery-go #732 API-1835 : first integration-tests #726 API-1835 : name all the runone functions #728 API-1835 : Use test-operator-integration target from build-machinery-go #725 API-1835 : Bump library-go to get SSA in multiple controllers #721 OCPBUGS-42932 : ensure annotations map exists before mutating it #727 API-1835 : adds output-resources to cluster-authentication operator. #720 NO-JIRA: add relatedResources to authentication for collection if operator crashes #722
API-1835 : Bump library-go to get WorkloadController SSA #715 API-1835 : demonstration mutation recording client #710 API-1835 : Set Unknown conditions in WellKnownReadyController #716 API-1835 : Migrate WellKnownReadyController to SSA #705 API-1835 : Migrate a few existing controllers to ApplyOperatorStatus #698 OCPBUGS-42745 : manifests should not use APIs that are removed in upcoming releases #709 API-1835 : use the “normal” latest revision #704 OCPBUGS-42535 : when no type is specified, don’t make illegal condition #702 OKD-226 : Dockerfile.rhel7: Add ARG TAGS=ocp #687 API-1835 : operator client update #697 API-1835 : fix resync of operator informers #695 AUTH-546 : Direct external OIDC e2e test #684 API-1835 : Use dynamic operator client #694 create CRDs from openshift/api #696
OCPBUGS-41586 : increase oauth-apiserver failureThreshold #692 OCPBUGS-39037 : Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.18 #691 NO-JIRA: Bump library-go #688
OCPBUGS-35828 : controller: set ownership annotation for webhook-auth secret #678 NO-JIRA: endpoint test: use httpbin #680
NO-JIRA: Several fixes for Keycloack IDP test #679
NO-JIRA: OWNERS: add ibihim, liouk, rm old #677
OCPBUGS-33654 : update OpenShift favicon to new brand standard #674 OCPBUGS-33654 : update OpenShift favicon to new brand standard #670 NO-JIRA: remove go-jose not to get flagged with its CVEs #668
AUTH-482 : set required-scc for openshift workloads #656 OCPBUGS-24195 : the apiservice controller waits until bootstrap complete #662 OCPBUGS-22969 : Use v1 for flowcontrol API #640 NO-JIRA: e2e Keycloak: retry logging in as admin #666
OCPBUGS-32089 : wellknown-readiness: perform several attempts to connect before going unavailable #664 NO-ISSUE: bump to the latest version of openshift/api #663
NO-ISSUE: bump dependencies #659
NO-JIRA: test/lib: create SA on deploy #660
NO-ISSUE: oauth-apiserver: disable priority and fairness #658
NO-ISSUE: oauth-apiserver: enable shutdown-send-retry-after #657
NO-JIRA: _output - remove dir #651
OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #632 WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #646 OCPBUGS-24883 : Updating ose-cluster-authentication-operator-container image to be consistent with ART #644 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #636 OCPBUGS-24217 : Annotate certs with ownership information #642 OCPBUGS-21719 : go.mod: bump golang.org/x/net to v0.17.0 #635 OCPBUGS-17987 : generate only >=0 number of random bits #629 OCPBUGS-19125 : Updating ose-cluster-authentication-operator images to be consistent with ART #634 OCPBUGS-8093 : properly set the pod name and namespace in graceful termination lifecycle events #628 Add openshift-cli-client in NamesFilter #625
OCPBUGS-16501 : bump PSa, lib-go and storage-version-migrator to get rid of goproxy dep #624 AUTH-356 : Add openshift-cli-client OAuth Client #606 Correctly link oauth apiserver ServiceMonitor with its Service #616
OCPBUGS-2765 : Library go bump #613 OCPBUGS-14010 : increase timeout for probes #612 AUTH-363 : make proxy config check less obtrusive #608 OCPBUGS-10577 : update apf configuration to use v1beta3 #594 OCPBUGS-10041 : update openshift/api to include aesgcm provider in the default apiserver schema #601 API-1509 : Enable AESGCM encryption #598 OCPBUGS-6189 : art image update #596 OCPBUGS-3929 : update apf configuration to use v1beta2 #592 OCPBUGS-3440 : Restart authentication operator if console capability is enabled #589 OCPBUGS-3441 : Update cluster-authentication-operator not to go degraded without console [4.13] #587 make the custom route controller use server-side-apply to avoid stomping unknown fields #582
e2e: address PSa failures #581
Bug 2111842 : v/o/library-go - version-bump #576 Updating ose-cluster-authentication-operator images to be consistent with ART #575
Updating ose-cluster-authentication-operator images to be consistent with ART #571
Bug 2078287 : only ever include certificates in the oauth-serving-cert CM #573 AUTH-133 : bindata/oauth-openshift: specify pod security level #570 Update Links #568
Bug 1958198 : Avoid zero or low resync intervals #491 manifests: specify pod security level #565
e2e: Use Keycloak v18.0.0 #567
AUTH-89 : add audit options to oauth-server on oauth-audit-profile Variant03 #563 MGMT-9797 : Bump openshift/api dependency to 04e1813ebb11 #564 make apiserver readiness probe honor readyz #561
Bug 2063342 : vendor: bump library-go #558 Bug 2059515 : e2e: Use Keycloak v17.0.0 #554 Update OCP branding within oauth-templates #540
Full changelog
OCPBUGS-62330 : Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450 CNTRLPLANE-1311 : set up openshift-tests-extension of cluster-config-operator and add a sanity test #448 OCPEDGE-1970 : bump(ocp/api): pull in HighlyAvailableArbiter promotion #446 OCPEDGE-1876 : bump(o/api,k8s/api,go-version) #445 OCPBUGS-57187 : featuregates: always complete featuregates when feature set is CustomNoUpgrade #440 OCPEDGE-1833 : feat: bump api dep to pull in change in DualReplica #439 OCPBUGS-52744 : Bump golang.org/x/crypto #433 OCPEDGE-1643 : bump: ocp/api ocp/library-go k8s #431 OCPBUGS-45477 : Updating ose-cluster-config-operator-container image to be consistent with ART for 4.19 #430 OCPEDGE-1308 : bump(api,k8s) #428 OCPBUGS-39572 : Updating ose-cluster-config-operator-container image to be consistent with ART for 4.18 #426 CFE-921 : Update openshift/api package to latest version #423 OCPBUGS-34178 : Updating ose-cluster-config-operator-container image to be consistent with ART for 4.17 #419 SPLAT-1630 : Bump API version to get new VSphereMultiVCenters featuregate. #418 AUTH-482 : set required-scc for openshift workloads #410 OCPBUGS-24871 : Updating ose-cluster-config-operator-container image to be consistent with ART #390 TRT-1581 : default to self-managed clusterprofile #414 NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable #412
OCPBUGS-29576 : Apply hypershift cluster-profile for ibm-cloud-managed #408 NO-JIRA: add check to ensure clusterprofile matches for featuregates #411
OCPBUGS-28621 : Fix PSa labels #406 STOR-1700 : Bump(openshift/api): to get new VolumeGroupSnapshot API #405 OCPBUGS-28621 : Add required PSa labels #401 SPLAT-1400 : promote vSphere control plane machinesets from tech preview #400 OCPBUGS-26541 : remove duplicate manifests in image #399 Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541 : remove duplicate manifests in image #392 OCPNODE-1671 : Update api,client-go to add imagepolicy api #376 Revert “OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART” #388
OCPBUGS-19106 : Updating ose-cluster-config-operator-container image to be consistent with ART #385 read featuregates from openshift/api #349
yield CRDs and empty resource rendering to api imge #379
CNF-10479 : Bump up api to pull mixed cpu allocation feature gate #386 NP-793 : Bump github.com/openshift/api #375 create manifest directory during rendering #382
SPLAT-1272 : Update for Nutanix failure domains api changes #378 create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480 : Add MetricsServer FeatureGate #377 NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813 : add MCN featuregate #368 SPLAT-1127 : bring in vSphere CPMSO API updates #342 OCPBUGS-21781 : Update openshift/api package to latest version #365 OCPBUGS-21744 : bump library-go to include switch to HTTP/1.1 #366 CFE-887 : Bump openshift/api to add DNSNameResolver. #364 Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. #358
OCPBUGS-20164 : Remove Build CRD #360 Remove AdmissionWebhookMatchConditions feature gate #359
OCPVE-708 : feat: bump(api) #357 OCPCLOUD-1989 : Promote GCP CCM from TPNU to default #319 OCPBUGS-19106 : Updating ose-cluster-config-operator images to be consistent with ART #353 CCO-412 : Bump API to promote azureWorkloadIdentity to defaultFeatures #351 Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Bump openshift/api to add ValidatingAdmissionPolicy feature gate. #340
OCPVE-626 : bump(openshift/api@master) #341 CFE-689 : Update openshift/api package to latest version #335 OCPBUGS-16614 : go.mod: bump openshift/api #338 OCPBUGS-16614 : go.mod: update openshift/api #334 OCPBUGS-16507 : bump sigs.k8s.io/kube-storage-version-migrator #333 OCPCLOUD-2010 : Remove feature gate for external platform #331 SDN-4024 : Vendor openshift/api to get ANP feature-gate changes #330 Promote privateHostedZoneAWS from Tech Preview to Default #328
Update openshift/api #327
OCPBUGS-13547 : Promote Azure CCM from TPNU to default #307 OCPBUGS-15877 : go upgradeable=false when latencysensitive is used and not corrected #325 Enable feature gate for externalCertificate on Route API #326
stomp the latencysensitive featureset for equivalent default #324
WRKLDS-757 : Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade #322 SPLAT-1099 : bump openshift/api for vSphere static IP feature gate and platform spec #323 remove dead flag for file #309
Changes to move to api@2d36f53 #321
OCPBUGS-12767 : Add CustomNoUpgrade CRD versions to payload #320 OCPCLOUD-2010 : Re-vendor api to support external platform #306 Update openshift/api to disable EventedPLEG featuregate in techpreview #317
update openshift/api for types and gates #316
Update github.com/openshift/api to pull in evented pleg and sigstore feature flags #312
Update github.com/openshift/api to pull in feature gates #311
OCPBUGS-6266 : Rename config-operator_00_namespace run level to 00 #303 Update library-go dependency #305
Add JoelSpeed to owners #302
Update API and library-go #301
Require consistency in rendered artifacts #299
specify all known featureGates in disabled #297
update render to handle directories of manifests #295
adjust to refined openshift/api types #296
update ordering and featuregates #294
add featuregate status #288
Updating ose-cluster-config-operator images to be consistent with ART #287
OCPBUGS-10037 : update openshift/api to get new apiserver schema #289 update openshift/api to get new techprevew apiserver schema #286
CFE-601 : Update openshift/api package version #279 OSASINFRA-3097 : update openshift/api to get External LB fields #278 OCPBUGS-6185 : Update go version and ART images #280 OCPBUGS-4207 : Revert “Increase verbosity level to track probe timeouts” #274 Update go.mod api,client-go to register crd #270
OCPBUGS-3123 : add –feature-set option to render options #271 NE-975 : Update openshift/api for updated ingress config loadBalancer fields #268 Increase verbosity level to track probe timeouts #267
Bug 1843043 : Update openshift/api for modified config resource description #264 update openshift/api for new ingress manifest #263
Update go.mod api,client-go to register crd #262
This is not the repo you’re looking for. #261
Bump k8s dependencies #260
Update images to be consistent with ART #253
Bug 2082763 : Drop the OperatorHub CR instance #245 bump openshift/api, client-go #251
manifests/deployment: comply to restricted pod security level #248
Reorder the empty Node CR resource to ensure it is applied after the Node CRD #244
Bump(o/client-go); Add empty config/v1/node/cluster object #238
Bug 2074243 : Bump openshift/api to c3bb724c28 #243 Revert config/v1/Node crd.yaml #242
Bump openshift/api, openshit/client-go to add ImageMirrorSet CRDs #236
bumped openshift API to have node object related changes #233
Full changelog
NE-2161 : Fix Gateway API CRD metadata updates during operator upgrades #1309 OCPBUGS-64675 : Fix variable shadowing in testGatewayAPIDNS e2e #1304 NE-2161 : Bump Gateway API CRDs to v1.3.0 #1303 OCPBUGS-61508 : IngressOperator not exposing some metrics for degraded… #1290 NE-1334 : Enhancement to add operator channel when creating gatewayclass #1301 NE-1334 : Enhancement to add brew and stage secrets for pre-release image testing #1291 OCPBUGS-43919 : desiredWildcardDNSRecord: Check for nil LB field #1189 OCPBUGS-62400 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286 NE-1334 : Script to install ossm pre-release operator and run GWAPI e2e tests #1283 OCPBUGS-55649 : Remove SetEIPForNLBIngressController feature gate #1280 OCPBUGS-55673 : Remove IngressControllerLBSubnetsAWS featuregate #1242 NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
NE-2139 : Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279 NO-JIRA: Add davidesalerno to OWNERS #1278
OCPBUGS-60859 : Fix logic on gatewayapi test cleanup #1273 OCPBUGS-53432 : deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready #1267 OCPBUGS-59139 : Increase assertExpectedDNSRecords timeouts #1271 NE-2066 : Set degraded=true when OSSM 3 can’t be installed #1268 OCPBUGS-60620 : e2e: Deflake tests by using ReplicaSet for test workload #1262 OCPBUGS-54966 : Improve detection of missing DNSRecord for Gateway #1212 OCPBUGS-60302 : e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265 NE-2096 : Bump to OSSM 3.1.0 and Istio 1.26.2 #1257 NO-JIRA: Add rikatz to OWNERS #1259
OCPBUGS-59894 : Update GatewayAPI test to check if deployment has 1 or more pod #1250 NE-2108 : docs - correct Istio version format in ossm-overrides.md #1253 NE-2108 : Add OSSM channel and version override annotations #1246 NE-2104 : desiredIstio: Enable GIE if InferencePool found #1245 OCPBUGS-59839 : desiredIstio: Delete trustBundleName #1243 NE-2022 : Bump to OSSM 3.0.1 and Istio 1.24.4 #1227 OCPBUGS-58358 : desiredIstio: Do not enable a default PDB #1240 OCPBUGS-57728 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.20 #1236 OCPBUGS-55652 : Removed PrivateHostedZoneAWS from component #1230 OCPBUGS-54745 : status: Conditionally add CRDs to relatedObjects #1217 OCPBUGS-55317 : Check capabilities before watching OLM resource #1232 CNTRLPLANE-112 : Remove ARO HCP MIv2 Authentication for Ingress Operator #1222 CNTRLPLANE-112 : Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191 NE-2009 : Relax pod bound validating admission rule for HyperShift #1221 NE-1969 : Set Degraded=True if unmanaged Gateway API CRDs exist #1205 NE-1957 : Add Gateway API DNS Feature e2e tests #1213 OCPBUGS-54650 , OCPBUGS-54651 , OCPBUGS-54652 : desiredSubscription: Specify annotations and SCC #1214 NE-2009 : Move VAP to Default featureset #1216 OCPBUGS-54568 : desiredIstio: Specify priorityClassName #1211 OCPBUGS-53424 : Wait for install plans to enter the “Requires Approval” phase before approving them #1203 NE-2008 : Add GRPC conformance tests #1208 NE-1277 : status: Add Gateway API objects to relatedObjects #933 NE-1994 : Add E2E test for Istio manual deployment #1204 NE-1969 : Add “v1” version to OpenShift GatewayClass controller name #1202 NE-1934 : Bump to OSSM 3.0 for Gateway API support #1152 CORS-3907 : Update ingress operator to with custom endpoints #1197 NE-1953 : Add experimental Gateway API group to Validating Admission Policy #1200 NE-1907 : Manage OSSM operator subscription manually to ensure a compatible version is installed #1112 NE-1981 : Move controller test helpers to dedicated package #1199 NE-1953 : Add Validating Admission Policy for Gateway API CRDs #1192 NE-1954 : Implement GatewayAPIController feature gate #1198 NE-1936 : Bump k8s.io dependencies to v0.32.1 #1184 OCPBUGS-31550 : Gateway API - recreating SMCP which breaks Gateway API #1115 OCPBUGS-32776 : Fix IBM Public Cloud DNS Provider Update Logic #1133 OCPBUGS-48780 : Fix IBMCloud DNS Propagation Issues in E2E #1164 OCPBUGS-43745 : Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186 NE-1260 : Add Makefile target to run Gateway API conformance tests #1176 OCPBUGS-43745 : Add support for IdleCloseTerminationPolicy (Go http.Client) #1182 OCPBUGS-45585 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 #1173 OCPBUGS-41892 : Single Watch on GWAPI CRD #1165 NE-1790 : Follow up to enable Dynamic Configuration Manager feature gate #1174 SPLAT-1722 : Remove alibaba #1111 CORS-3755 : AWS: Add Ingress LB IPs to Infra CR when in-cluster DNS is enabled #1167 NE-1790 : Enable Dynamic Configuration Manager feature gate #1159 OSASINFRA-3642 : openstack: support setting external LB floating IP #1147 HOSTEDCP-2031 : Use Client Certificate Authentication for ARO HCP deployments #1151 OCPBUGS-43412 : Bump to k8s.io v0.31.1 (and deps) #1156 NE-1716 : Bump Gateway API to v1.0.0 and OSSM to v2.6 #1163 CFE-1134 : Watch infrastructure and update AWS tags #1148 OCPBUGS-43033 : e2e/ingress_dns: support both private & public #1153 OCPBUGS-37932 : Always log AWS service endpoints #1137 OCPBUGS-36340 : Retry IngressController and Route updates in E2E tests #1116 OCPBUGS-42004 : Set the MI client ID for the ARO HCP override #1144 AUTH-482 : set required-scc for openshift workloads #1031 OCPBUGS-36044 : Bump IBM/go-sdk-core to v5.17.4 #1120 OCPBUGS-41527 : Add tolerations to survive scheduler taint manager e2e tests on workers #1143 OCPBUGS-41112 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.18 #1140 OCPBUGS-39151 : Add Missing Scope Change Instructions #1135 OCPBUGS-38871 : ingress: deployment: explicitly set DeploymentStrategy in SingleReplica case #1134 OCPBUGS-37491 : Ingress operator status not degraded when canary route fails #1125 OCPBUGS-38217 : Clear LB Status Parameters on LB Type Change #1126 OCPBUGS-34418 : Allow router pods to use the “restricted” SCC #1064 OCPBUGS-38441 : Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127 OCPBUGS-38079 : Bump controller-runtime to v0.18.4 #1122 NE-1798 : API bump for promotion of eipAllocation from feature gates to GA. #1118 NE-1688 : Enable Azure MSI authentication for ARO HCP #1119 NE-1674 : Add LB EIP Allocation for AWS #1109 NE-1531 : Fix Initialization of NLB Status Parameters #1114 NE-1531 : AWS Subnet Selection #1046 NE-1273 : Add a watch to the ingress operator so it will recreate the gwapi crds #1106 OCPBUGS-37627 : Fix getRouteHost error handling #1110 NE-1208 : Gateway API E2E Testing #1023 OCPBUGS-31664 : Fix SyncLoadBalancerFailed status message of IngressController #1102 OCPBUGS-36465 : Delete and recreate canary route to clear spec.host #1095 OCPBUGS-34413 : Refine logging for accurate infra CR status updates #1103 OCPBUGS-35342 : Add e2e test for connect timeout #1084 NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356 : Retry IngressController updates in router status E2E #1085 OCPBUGS-9037 : Change Canary to use passthrough route #978 OCPBUGS-35368 : Add Regexp Anchor to TestAll #1087 OCPBUGS-23221 : internalServiceChanged: Fix target port logic #1052 OCPBUGS-34262 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 #1067 NE-1400 : Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs #1018 OCPBUGS-33792 : Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1054 OCPBUGS-32887 : Allow operator to update Route spec.subdomain #1047 OCPBUGS-32942 : Bump controller-runtime to v0.17.3 #1050 OCPBUGS-28673 : implement connect timeout tuning option #1035 NE-1317 : manifests - add ingress capability annotation #950 OCPBUGS-32371 : Bump openshift/api, and update CRD generation #1045 OCPBUGS-25193 : Add vnet subnet read and join permission for azure #1029 OCPBUGS-30834 : Update to go 1.21 #1040 OCPBUGS-31722 : Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037 OCPBUGS-3522 : Include recent errors in canary checks fail #865 OCPBUGS-30091 : TestHostNetworkPortBinding: Delete t.Parallel() #1032 CFE-987 : Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017 CORS-2317 : Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016 OCPBUGS-28596 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #1019 NE-1490 : update to go v1.20 #1012 OCPBUGS-15253 : Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980 CCO-249 : Replace GCP role with explicit permissions #844 OCPBUGS-25006 : Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006 OCPBUGS-24531 : Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011 OCPBUGS-24531 : Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008 OCPBUGS-24531 : Skip CI for scope change until OCPBUGS-24044 is resolved #1007 OCPVE-780 : annotate credentials request manifests #995 OCPBUGS-23742 : Bump controller-runtime to v0.16.3 #1001 NE-1402 : Add service endpoint override capability to IBM DNS provider #990 OCPBUGS-16762 : Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982 OCPBUGS-14994 : Don’t add clientca-configmap finalizer if deleting #948 OCPBUGS-22020 : Bump golang.org/x/net for CVE-2023-44487 #985 OCPBUGS-21803 : test/e2e: Add test case for 2000000 maxConnections #983 OCPBUGS-20192 : Require non-readonly filesystem in router container #981 OCPBUGS-16762 : Bump openshift/api for container.maxLength fix #979 OCPBUGS-3541 : Don’t create route metrics for ingress controllers that are not admitted #869 OCPBUGS-18248 : Prevent GatewayClass from getting recreated #975 OCPBUGS-19268 : Updating ose-cluster-ingress-operator images to be consistent with ART #977 OCPBUGS-15900 : TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973 OCPBUGS-3356 : E2E test for cookie length truncation #871 OCPBUGS-15978 : Check public DNS zone when reporting status #967 OCPBUGS-17359 : test/e2e: Don’t use openshift/origin-node #970 NE-1140 , NE-1145 : Set/delete HTTP request/response headers via IngressController API #872 OCPBUGS-16089 : Set spec.subdomain on the canary route #965 OCPBUGS-14995 : desiredRouterDeployment: Set HostPort if needed #947 OCPBUGS-10875 : gateway-service-dns: Set DNS policy appropriately #934 NE-1244 : Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929 OCPBUGS-12790 : README: Fix Bugzilla link #968 RFE-3007 : Expose option-contstats as an unsupported option #887 NE-1189 : Refactor Test_desiredLoadBalancerService #886 NE-1187 : Use t.Run for table-driven tests #884 NE-1183 : Rename unit tests for specific functions #880 NE-1269 : Replace bindata using embed #905 RFE-3765 : Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900 OCPBUGS-9274 : canary: Tolerate infra node NoExecute taint #932 OCPBUGS-7546 : Allow only 1 disruption with 3 replicas #931 OCPBUGS-15100 : Fix previous attempt of adding a missing trailing dot to hostname #956 OCPBUGS-14396 : Set controller-runtime logger to a null logger for E2E #946 OCPBUGS-14998 : Only use RoleARN for Route53 API #951 OCPBUGS-15100 : Create valid DNS names for Gateway API on GCP #949 OCPBUGS-13106 : Add ingress controller status logging on waitForIngressControllerCondition #924 OCPBUGS-13190 : Avoid spurious updates for internalTrafficPolicy #927 OCPBUGS-13810 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944 NE-1294 : Add support for AWS shared VPC in another account #928 CCO-318 : Enable Azure Workload Identity authentication. #906 OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939 OCPBUGS-13963 : Bump vendors k8s libraries to 0.27.2 #936 Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930 OCPBUGS-5478 : add UBI based Dockerfile #925 CCO-318 : Read feature gates for future usage #908 OCPBUGS-12913 : Deflake TestRouterCompressionOperation #920 OCPBUGS-6784 : bump controller-runtime to fix the multi namespace cache indexing #913 OCPBUGS-12579 : Address CVE-2022-41723 #915 OCPBUGS-12790 : Replace Bugzilla link with Red Hat Issue Tracker #916 OCPBUGS-10714 : gatewayclass: Update for OSSM 2.4 API change #901 OCPBUGS-10189 : Updating ose-cluster-ingress-operator images to be consistent with ART #898 OCPBUGS-10846 : Fix TestClientTLS flakes #904 NE-1184 : Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881 OCPBUGS-4054 : configurable-route: Don’t use NewKindWithCache #860 NE-1186 : Test_getRR: Fix typo: “excepted” → “expected” #883 CORS-2467 : dns: azure: use azidentity with an adapter #846 NE-1105 : Add support for Gateway API #890 OCPBUGS-7424 : Bump vendored k8s libraries to 1.26.1 #888 CFE-679 : Add user defined tags to the created DNS resources #874 OCPBUGS-6247 : Updating ose-cluster-ingress-operator images to be consistent with ART #862 CORS-2072 : GCP - Parse Zone ID with a project ID embedded #855 NE-1092 : Add proxy protocol support for IBMCloud loadbalancers #812 OCPBUGS-6384 : Address CVE-2022-41717 #876 OCPBUGS-4827 : Add missing AWS permission for ListTagsForResources #868 OCPBUGS-6701 : Avoid spurious updates for scope in IngressClass #879 OCPBUGS-6698 : Fix conflict error message in ensureNodePortService #877 OCPBUGS-6700 : updateIngressClass: Fix log message #878 NE-1124 : Add support for External platform to CIO #873 OCPBUGS-4573 : Target metrics port by name in internal service #864 OCPBUGS-434 : Absorb PodsScheduled condition into MinAvailable #854 OCPBUGS-4759 : Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866 OCPBUGS-4703 : Replace liveness-grace-period-seconds annotation #863 OCPBUGS-3404 : Bump openshift/api for matchExpressions doc fix #856 OPNET-133 : Support remote worker #858 OCPBUGS-1725 : Ingress controller should not have affinity policy in single-replica clusters #810 OCPBUGS-1807 : Fix bad handleSingleNode4Dot11Upgrade log message #808 OCPBUGS-2775 : Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851 OCPBUGS-2848 : Support matchExpressions selectors with route metrics #850 Bug 2117524 : Update CRLs when they expire #828 OCPBUGS-853 : certificate-publisher: Don’t publish extraneous certificates #824 Bug 1962502 : Add alerts for unmanaged Routes and Ingresses without IngressClassName #823 NE-1071 : Default HAProxy maxconn value to 50000 for OCP 4.12) #836 Updating ose-cluster-ingress-operator images to be consistent with ART #834
OCPBUGS-2435 : TestRouterCompressionOperation: Nil-pointer fix #843 OCPBUGS-2493 : Fix TestUnmanagedDNSToManagedDNSInternal E2E test race conditions #845 CFE-478 : Added support for exporting Route type and Routes per Shard metrics #779 NE-975 : Use ingress config to set default LB type on AWS #837 OCPBUGS-2429 : Fix TestReloadInterval min value test cases and race conditions #842 OCPBUGS-2334 : Added nil check for service object on load balancer scope change #839 NE-956 : Configurable LB Source Ranges - Functional Implementation #817 Bug 2107462 : Update CGO_ENABLED=1 #833 OCPBUGS-236 : Bump openshift/api for reloadInterval fix #830 OCPBUGS-1554 : Bump vendored k8s libraries to 1.25 #829 Enable switching of AWS CLB to NLB without deletion of IngressController object. #790
Bug 2066560 : Make ingress clusteroperator progressing=true when router deployment is rolling out #769 Add IBM Cloud DNS support for Power VS #819
OCPBUGS-1049 : test/e2e: Fix TestCanaryRoute security context #826 Bug 2089482 : Do not use deprecated API field InfrastructureStatus.Platform #814 NE-969 : Add IBM DNS Services provider support for private clusters #796 DPP-10860 : Update Bugzilla links to “Networking” component #815 OCPBUGS-368 : Fix e2e tests for pod security violations #818 NE-979 : add ReloadInterval TuningOption #805 Bug 2101878 : Fix another issue with route status clearing race condition caused by not validating generation id #811 Bug 2108708 : Disable auto creation of default ingress contoller for hypershift #797 Bug 2101878 : Fix route status clearing race condition caused by using the cache #794 Bug 2106086 : Bump openshift/api for healthCheckInterval fix #804 Bug 2104481 : Allow PROXY protocol for the “Private” endpoint publishing strategy #803 add Ethany-RH to OWNERS #800
Bug 2086887 : Add better debug logging to TestIngressOperatorCacheIsNotGlobal to help debug flakes #793 Bug 2093462 : status: Watch clusteroperators #714 Bug 2092042 : Bump vendored k8s libraries to 1.24 #768 Bug 1944851 : Clear route status when an ingress controller is deleted or a route is un-admitted #724 Bug 2094932 : Patching config.ingresses status requires patch permissions #788 Bug 2097555 : Fix loadBalancerServiceAnnotationsChanged check and update #783 Bug 2094932 : Ingress operator needs permission to list nodes #785 Bug 2095229 : desiredRouterDeployment: Check for nil hostNetwork #780 Bug 2094962 : Fix flakey logic in haproxy timeout tests #775 Bug 2094932 : MGMT-10403: Set the defaultPlacement for none-platform SNO clusters installed before 4.11 #767 Bug 2075671 : Add a e2e test that verifies the ingress operator’s cache doesn’t include everything #764 Bug 2055601 : Add cluster tag to *.apps domain record #737 Bug 2080379 : Group all e2e tests as parallel or serial #756 Bug 2082428 : Add MicroSecond processing #762 NE-408 : Allow configuring ELB connection idle timeout #451 NE-825 : Update router to use random balancing algorithm once again #727 Bug 2084433 : AUTH-133: assets: comply to pod security #760 NE-577 : Support a Configurable ROUTER_MAX_CONNECTIONS in HAproxy #735 Add support for route53 in the us-isob-east-1 region + fix #754
AUTH-184 : manifests/deployment: comply to restricted pod security level #749 Bug 2081447 : desiredRouterDeployment: Fix for port defaulting #753 Bug 2079468 : Enhance the waitForIngressControllerCondition for better CI results #745 NE-882 : Set ROUTER_DOMAIN to enable route subdomain field #674 Specify host port for host networking strategy #694
Bug 2007246 : Add allowPrivilegeEscalation to the router container #743 MGMT-9797 : Determine number of replicas according to DefaultPlacement #728 Bug 2076193 : Remove special-casing for default ingresscontroller probe parameters #742 NE-585 : Make ROUTER_BACKEND_CHECK_INTERVAL configurable #712 BUG 2076984: test/e2e: add resilience to RBAC test teardown #744
BUG 2054200: Fix removing custom created service in openshift-ingress with same name #707
Add Nutanix platform #730
Revert “Bug 2007246: Ingress Controller does not set allowPrivilegeEscalation in the router deployment” #741
Bug 2075671 : Fix k8s client cache object global inclusion and duplication. #740 NE-781 : Allow users to tune kubelet probe timeouts #736 Bug 2072106 : Fix test Errorf limitation in go 1.18 #733 Bug 2071139 : add pod eviction permission #734 Bug 2071139 : delete default ingress pod if it is scheduled where another router pod already is #720 Bug 2069457 : Delete LoadBalancer-type service finalizer logic #729 Bug 2021446 : Set canary status as unknown if not admitted to default ingress controller #723 Bug 2066444 : update relatedObjects for clusteroperator status #721 Bug 2007246 : Ingress Controller does not set allowPrivilegeEscalation in the router deployment #718 Bug 1995953 : Add unit test for verifying router deployment env is always sorted #715 Bug 2057762 : Set Upgradeable=False if default cert has no SAN #708 Bug 2055470 : Normalize the AWS internal LB annotation value #704 BUG 2037447: Disable keepalive for canary probe #701
pkg/operator/controller/ingress/status_test: Fix ...-tag -> ...-tags test-case description #700
Added gcs278 to OWNERS #698
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-1 : Jira integration test PR 3 #92 Updating the documentation on how to use DTK as a multi-stage image. #80
Remove all kmods-via-containers references and dependencies #79
Removing the ‘make buildprep’ from README.md. #78
OCPBUGS-1 : Jira integration test PR 2 #77 Updating README.md. #76
OCPBUGS-1 Jira integration test PR #75
Updating driver-toolkit images to be consistent with ART #73
Bumping KVC to the last available commit. #74
And 58 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-62497 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.21 #215 Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.21 #214
Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 #213
OCPBUGS-57842 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.20 #211 OCPBUGS-57831 : Updating ose-egress-http-proxy-container image to be consistent with ART for 4.20 #210 OCPBUGS-57624 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.20 #209 OCPBUGS-57572 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.20 #208 OCPBUGS-57510 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.20 #207 OCPBUGS-48318 : Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206 OCPBUGS-45700 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205 OCPBUGS-45831 : Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204 OCPBUGS-45405 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201 NE-1908 : Add instructions for keepalived-ipfailover image testing #198 OCPBUGS-45452 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.19 #202 NO-JIRA: egress: update OWNERS #203
OCPBUGS-45342 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.19 #200 OCPBUGS-33629 : Only set the instancetype to master if the preempt strategy is not nopreempt. #197 OCPBUGS-39480 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.18 #193 OCPBUGS-41231 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.18 #196 OCPBUGS-41213 : Updating ose-egress-http-proxy-container image to be consistent with ART for 4.18 #195 OCPBUGS-39544 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.18 #194 OCPBUGS-38285 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.18 #191 OCPBUGS-38286 : Updating openshift-enterprise-base-container image to be consistent with ART for 4.18 #192 OCPBUGS-34348 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.17 #186 OKD-219 : add util-linux to base image #187 OCPBUGS-34152 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.17 #184 OCPBUGS-34338 : Updating ose-egress-http-proxy-container image to be consistent with ART for 4.17 #185 OCPBUGS-34103 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.17 #183 OCPBUGS-33909 : Updating openshift-enterprise-base-container image to be consistent with ART for 4.17 #182 OCPBUGS-33908 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.17 #181 OKD-40 : Revert #179 #180 OKD-40 : Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179 Add dnf-plugins-core in scos to help with OCP image compat #178
OKD-210 : Add sig-cloud repository and enable rt repository #177 OKD-210 : Add the sig-nfv repo in the CS9 base #176 OCPBUGS-24850 : Bump OpenShift 4.16, RHEL9, and iptables package #175 OCPBUGS-24990 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART #159 OCPBUGS-24800 : Updating ose-egress-http-proxy-container image to be consistent with ART #156 NO-ISSUE: Add Scott and Mrunal as image approvers #170
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484 : update unit tests in egress/dns-proxy #165 NE-1444 : egress/dns-proxy: switch to haproxy28 RPM package #160 OCPBUGS-24861 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158 OCPBUGS-24751 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155 OCPBUGS-24723 : Updating openshift-enterprise-base-container image to be consistent with ART #154 OCPBUGS-19261 : Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153 OCPBUGS-19107 : Updating ose-egress-http-proxy images to be consistent with ART #150 OCPBUGS-19239 : Updating openshift-enterprise-egress-router images to be consistent with ART #151 OCPBUGS-18860 : Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149 OCPBUGS-18853 : Updating openshift-enterprise-base images to be consistent with ART #148 OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132 OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131 OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133 NE-1304 : container builds: switch to haproxy26 package #141 OCPBUGS-11385 : Removed chroot setting #137 egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138 egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134 Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
bump RHEL8 egress-dns-proxy image to haproxy26 #125
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
Updating ose-egress-http-proxy images to be consistent with ART #120
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
Updating openshift-enterprise-base images to be consistent with ART #119
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126 : ipfailover: Autodetect the “ens3” NIC #111 Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188 : VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104 Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-61477 : Write sha checksum file to /coreos #71 OCPBUGS-61477 : Provide SHA checksum for aarch64 iso #70 OCPBUGS-61477 : Acquire aarch64 ISO at runtime #67 OCPBUGS-56049 : Force rebuild for OCP 4.21 #66 OCPBUGS-62596 : Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69 METAL-1509 : Add aarch64 images #65 OCPBUGS-57659 : Updating ose-machine-os-images-container image to be consistent with ART for 4.20 #64 OCPBUGS-55810 : Dummy change to force a rebuild for 4.20 #62 NO-JIRA: Change to new host #54
OCPBUGS-50910 : Decompress pxe file only if it’s a valid compressed file #51 OCPBUGS-44889 : Allow external configuration of download host for production builds #46 NO-ISSUE: Update OWNERS #49
OCPBUGS-45474 : Updating ose-machine-os-images-container image to be consistent with ART for 4.19 #48 NO-ISSUE: Fix shellcheck #45
NO-ISSUE: Fix shellcheck complaints #44
OCPBUGS-43991 : Properly escape KERNEL_ARGS #43 OCPBUGS-39570 : Updating ose-machine-os-images-container image to be consistent with ART for 4.18 #40 OCPBUGS-42621 : Add missing space before square bracket #42 OCPBUGS-35895 : Enable fips in iso kernel options on fips systems #39 OCPBUGS-34177 : Updating ose-machine-os-images-container image to be consistent with ART for 4.17 #38 CORS-2797 : Image to rhel9 #36 OCPBUGS-24816 : Updating ose-machine-os-images-container image to be consistent with ART #34 NO-ISSUE: Dummy change to force bumping fcos image to 39.20231101.3.0 #33
NO-ISSUE: Force updating 4.15 CI images #32
OCPBUGS-19133 : Updating ose-machine-os-images images to be consistent with ART #30 Fix condition check for logging #29
Force updating main rhcos image to version 414.92.202303281555-0 #28
Updating ose-machine-os-images images to be consistent with ART #26
Updating ose-machine-os-images images to be consistent with ART #25
Updating ose-machine-os-images images to be consistent with ART #20
OCPBUGS-884 : Update rhcos release browser url #21 Bug 2090017 : Get rid of lookaside cache in OCP build #15 Revert .ci-operator.yaml #16
Updating ose-machine-os-images images to be consistent with ART #11
Bug 2075024 : Remove destination coreos if it exists #13 uncompress arm64 vmlinuz for pxe booting #12
Full changelog
NP-1041 : Update owners #57 OCPBUGS-28557 : Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 #54 OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #53 OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #52 OCPBUGS-24721 : Updating ose-multus-route-override-cni-container image to be consistent with ART #51 OCPBUGS-18848 : Updating ose-multus-route-override-cni images to be consistent with ART #48 15393552: Updating ose-multus-route-override-cni images to be consistent with ART #47
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #45
Revert ART changes to fix rhel9 base binary #44
Updating ose-multus-route-override-cni images to be consistent with ART #43
Fix Dockerfile to use rhel9 #42
Updating ose-multus-route-override-cni images to be consistent with ART #41
Add rhel9 binary #40
Updating ose-multus-route-override-cni images to be consistent with ART #36
Updating ose-multus-route-override-cni images to be consistent with ART #35
Updating ose-multus-route-override-cni images to be consistent with ART #34
Updating ose-multus-route-override-cni images to be consistent with ART #33
Dev/sync upstream #30
Updating ose-multus-route-override-cni images to be consistent with ART #28
Updating ose-multus-route-override-cni images to be consistent with ART #25
Updating ose-multus-route-override-cni images to be consistent with ART #21
Full changelog
Source code for this page located on github